lineage-22.0
265 Commits
Author | SHA1 | Message | Date | |
---|---|---|---|---|
Michael Bestas
|
6725684c74
|
Merge tag 'ASB-2024-12-05_12-5.10' of https://android.googlesource.com/kernel/common into android13-5.10-waipio
https://source.android.com/docs/security/bulletin/2024-12-01 * tag 'ASB-2024-12-05_12-5.10' of https://android.googlesource.com/kernel/common: (649 commits) ANDROID: ABI: update symbol list for honor ANDROID: fs: add vendor hook to collect IO statistics ANDROID: tools/objtool: Pass CFLAGS to libsubcmd build via EXTRA_CFLAGS UPSTREAM: HID: core: zero-initialize the report buffer ANDROID: libsubcmd: Hoist iterator variable declarations in parse_options_subcommand() ANDROID: mm: Fix SPF-aware fast-mremap UPSTREAM: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT UPSTREAM: f2fs: support SEEK_DATA and SEEK_HOLE for compression files Revert "genetlink: hold RCU in genlmsg_mcast()" ANDROID: add file for recording allowed ABI breaks ANDROID: GKI: update symbol list for honor ANDROID: Allow vendor modules perform more operations on memleak detect UPSTREAM: drm/omap: fix misleading indentation in pixinc() UPSTREAM: bitfield: build kunit tests without structleak plugin BACKPORT: FROMGIT: binder: add delivered_freeze to debugfs output BACKPORT: FROMGIT: binder: fix memleak of proc->delivered_freeze FROMGIT: binder: allow freeze notification for dead nodes FROMGIT: binder: fix BINDER_WORK_CLEAR_FREEZE_NOTIFICATION debug logs FROMGIT: binder: fix BINDER_WORK_FROZEN_BINDER debug logs BACKPORT: FROMGIT: binder: fix freeze UAF in binder_release_work() ... Conflicts: android/abi_gki_aarch64.xml net/qrtr/af_qrtr.c Change-Id: I4f416cf6c90e71fbdc0bea2c76a620842a2a2288 |
||
Youssef Samir
|
6c36857fe5 |
net: qrtr: Update packets cloning when broadcasting
[ Upstream commit f011b313e8ebd5b7abd8521b5119aecef403de45 ]
When broadcasting data to multiple nodes via MHI, using skb_clone()
causes all nodes to receive the same header data. This can result in
packets being discarded by endpoints, leading to lost data.
This issue occurs when a socket is closed, and a QRTR_TYPE_DEL_CLIENT
packet is broadcasted. All nodes receive the same destination node ID,
causing the node connected to the client to discard the packet and
remain unaware of the client's deletion.
Replace skb_clone() with pskb_copy(), to create a separate copy of
the header for each sk_buff.
Fixes:
|
||
Michael Bestas
|
deec4e9c07
|
Merge tag 'ASB-2024-09-05_12-5.10' of https://android.googlesource.com/kernel/common into android13-5.10-waipio
https://source.android.com/docs/security/bulletin/2024-09-01 CVE-2024-36972 * tag 'ASB-2024-09-05_12-5.10' of https://android.googlesource.com/kernel/common: (1565 commits) ANDROID: delete tool added by mistake ANDROID: GKI: Add initialization for rwsem's oem_data and vendor_data. ANDROID: GKI: Add initialization for mutex oem_data. ANDROID: fix ENOMEM check of binder_proc_ext ANDROID: binder: fix KMI issues due to frozen notification BACKPORT: FROMGIT: binder: frozen notification binder_features flag BACKPORT: FROMGIT: binder: frozen notification UPSTREAM: selftests/binderfs: add test for feature files UPSTREAM: docs: binderfs: add section about feature files UPSTREAM: binderfs: add support for feature files ANDROID: GKI: Add symbol to symbol list for vivo. ANDROID: vendor_hooks: add hooks to modify pageflags ANDROID: GKI: Add pageflags for OEM ANDROID: GKI: Update symbol list for vivo ANDROID: vendor_hooks: add vendor hooks for fuse request UPSTREAM: net: sched: sch_multiq: fix possible OOB write in multiq_tune() ANDROID: Update the GKI symbol list and ABI XML ANDROID: irqchip/irq-gic-v3: Add vendor hook for gic suspend FROMLIST: binder: fix UAF caused by offsets overwrite ANDROID: gki - set CONFIG_USB_NET_AX88179_178A=y (usb gbit ethernet dongle) ... Conflicts: Documentation/devicetree/bindings/i2c/google,cros-ec-i2c-tunnel.yaml Documentation/devicetree/bindings/sound/rt5645.txt Documentation/devicetree/bindings~HEAD drivers/scsi/ufs/ufs-qcom.c net/qrtr/af_qrtr.c net/qrtr/ns.c net/qrtr/qrtr.h Change-Id: I50a93cfc0ff67778b19609e93cb577f63a517baa |
||
Chris Lew
|
cafccde429 |
net: qrtr: ns: Fix module refcnt
[ Upstream commit fd76e5ccc48f9f54eb44909dd7c0b924005f1582 ] The qrtr protocol core logic and the qrtr nameservice are combined into a single module. Neither the core logic or nameservice provide much functionality by themselves; combining the two into a single module also prevents any possible issues that may stem from client modules loading inbetween qrtr and the ns. Creating a socket takes two references to the module that owns the socket protocol. Since the ns needs to create the control socket, this creates a scenario where there are always two references to the qrtr module. This prevents the execution of 'rmmod' for qrtr. To resolve this, forcefully put the module refcount for the socket opened by the nameservice. Fixes: a365023a76f2 ("net: qrtr: combine nameservice into main module") Reported-by: Jeffrey Hugo <quic_jhugo@quicinc.com> Tested-by: Jeffrey Hugo <quic_jhugo@quicinc.com> Signed-off-by: Chris Lew <quic_clew@quicinc.com> Reviewed-by: Manivannan Sadhasivam <manivannan.sadhasivam@linaro.org> Reviewed-by: Jeffrey Hugo <quic_jhugo@quicinc.com> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Sasha Levin <sashal@kernel.org> |
||
Qinglang Miao
|
66fd37d0a8 |
net: qrtr: fix null-ptr-deref in qrtr_ns_remove
[ Upstream commit 4beb17e553b49c3dd74505c9f361e756aaae653e ] A null-ptr-deref bug is reported by Hulk Robot like this: -------------- KASAN: null-ptr-deref in range [0x0000000000000128-0x000000000000012f] Call Trace: qrtr_ns_remove+0x22/0x40 [ns] qrtr_proto_fini+0xa/0x31 [qrtr] __x64_sys_delete_module+0x337/0x4e0 do_syscall_64+0x34/0x80 entry_SYSCALL_64_after_hwframe+0x44/0xa9 RIP: 0033:0x468ded -------------- When qrtr_ns_init fails in qrtr_proto_init, qrtr_ns_remove which would be called later on would raise a null-ptr-deref because qrtr_ns.workqueue has been destroyed. Fix it by making qrtr_ns_init have a return value and adding a check in qrtr_proto_init. Reported-by: Hulk Robot <hulkci@huawei.com> Signed-off-by: Qinglang Miao <miaoqinglang@huawei.com> Signed-off-by: David S. Miller <davem@davemloft.net> Stable-dep-of: fd76e5ccc48f ("net: qrtr: ns: Fix module refcnt") Signed-off-by: Sasha Levin <sashal@kernel.org> |
||
Michael Bestas
|
42fc85e576
|
Merge tag 'ASB-2024-04-05_12-5.10' of https://android.googlesource.com/kernel/common into android13-5.10-waipio
https://source.android.com/docs/security/bulletin/2024-04-01 * tag 'ASB-2024-04-05_12-5.10' of https://android.googlesource.com/kernel/common: (442 commits) FROMLIST: binder: check offset alignment in binder_get_object() ANDROID: enable CONFIG_USB_XHCI_PCI_RENESAS in gki_defconfig UPSTREAM: usb: dwc3: core: set force_gen1 bit in USB31 devices if max speed is SS ANDROID: userfaultfd: abort uffdio ops if mmap_lock is contended ANDROID: userfaultfd: add MMAP_TRYLOCK mode for COPY/ZEROPAGE UPSTREAM: coresight: etm4x: Remove bogous __exit annotation for some functions UPSTREAM: ASoC: hdmi-codec: register hpd callback on component probe UPSTREAM: usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() UPSTREAM: mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions() UPSTREAM: task_work: add kerneldoc annotation for 'data' argument UPSTREAM: x86/purgatory: Remove LTO flags UPSTREAM: tcpm: Avoid soft reset when partner does not support get_status UPSTREAM: block/mq-deadline: use correct way to throttling write requests UPSTREAM: usb: typec: tcpm: Fix response to vsafe0V event UPSTREAM: clk: Fix memory leak in devm_clk_notifier_register() UPSTREAM: selftests: damon: add config file ANDROID: abi_gki_aarch64_qcom: Export trace_android_vh_try_fixup_sea ANDROID: arm64: Call fixup_exception() within do_sea() ANDROID: userfaultfd: allow SPF for UFFD_FEATURE_SIGBUS on private+anon ANDROID: GKI: db845c: Update symbols list and ABI ... Conflicts: Documentation/devicetree/bindings/nvmem/mxs-ocotp.yaml Documentation/devicetree/bindings~HEAD arch/powerpc/lib/Makefile Change-Id: I6524da89cb855824fa28a95396d3683af4a10046 |
||
Sarannya S
|
01d8918415 |
net: qrtr: ns: Return 0 if server port is not present
[ Upstream commit 9bf2e9165f90dc9f416af53c902be7e33930f728 ] When a 'DEL_CLIENT' message is received from the remote, the corresponding server port gets deleted. A DEL_SERVER message is then announced for this server. As part of handling the subsequent DEL_SERVER message, the name- server attempts to delete the server port which results in a '-ENOENT' error. The return value from server_del() is then propagated back to qrtr_ns_worker, causing excessive error prints. To address this, return 0 from control_cmd_del_server() without checking the return value of server_del(), since the above scenario is not an error case and hence server_del() doesn't have any other error return value. Signed-off-by: Sarannya Sasikumar <quic_sarannya@quicinc.com> Reviewed-by: Simon Horman <horms@kernel.org> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Sasha Levin <sashal@kernel.org> |
||
qctecmdr
|
51f8559b0a | Merge "net: qrtr: Add local enqueue ipc logging" | ||
Kishore Kumar Ravi
|
171a5818f1 |
net: qrtr: Add local enqueue ipc logging
If client and service both are at HLOS, from qrtr side we don't have any logging mechanism to log the transaction. So its hard to debug issues such as request timeout issue, service errors, indication errors. To avoid this added local logging in qrtr layer to make sure that request reached to qrtr and forwared to service and vice-versa. Change-Id: Ie64aec8e6594e01e4a36094dc9c35140012ce65b Signed-off-by: Kishore Kumar Ravi <quic_kiskum@quicinc.com> |
||
Srinivasarao Pathipati
|
c38dc90458 |
Merge keystone/android12-5.10-keystone-qcom-release.185+ (7a5953e ) into msm-5.10
* refs/heads/tmp-7a5953e: ANDROID: GKI: Add symbol list for Nothing ANDROID: ABI: Update oplus symbol list ashmem: is_ashmem_file Export is_ashmem_file function which will be used by the minidump module to get ashmem info. Merge /mm/madvise.c from mirror-android12-5.10-2023-07 ANDROID: GKI: Update abi_gki_aarch64_qcom for page_owner symbols ANDROID: mm: Export page_owner_inited and __set_page_owner FROMGIT: pstore/ram: Check start of empty przs during init ANDROID: GKI: Update symbols for zebra ANDROID: wakeupbypass: Add vendor hook for batteryswap UPSTREAM: exfat: check if filename entries exceeds max filename length BACKPORT: FROMGIT: netfilter: nfnetlink_log: always add a timestamp FROMGIT: arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved BACKPORT: FROMGIT: irqchip/gic-v3: Workaround for GIC-700 erratum 2941627 UPSTREAM: media: usb: siano: Fix warning due to null work_func_t function pointer UPSTREAM: Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb ANDROID: ABI: Update oplus symbol list ANDROID: Export symbols to do reverse mapping within memcg in kernel modules. ANDROID: GKI: export symbols to modify lru stats UPSTREAM: net: tap_open(): set sk_uid from current_fsuid() UPSTREAM: net: tun_chr_open(): set sk_uid from current_fsuid() UPSTREAM: netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID BACKPORT: UPSTREAM: usb: dwc3: gadget: Execute gadget stop after halting the controller UPSTREAM: usb: dwc3: gadget: Stall and restart EP0 if host is unresponsive UPSTREAM: net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free UPSTREAM: net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free UPSTREAM: net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free ANDROID: GKI: update xiaomi symbol list UPSTREAM: netfilter: nf_tables: skip bound chain on rule flush UPSTREAM: net/sched: cls_fw: Fix improper refcount update leads to use-after-free UPSTREAM: tty: n_gsm: fix UAF in gsm_cleanup_mux UPSTREAM: netfilter: nft_set_pipapo: fix improper element removal BACKPORT: FROMGIT: irqchip/gic-v3: Workaround for GIC-700 erratum 2941627 ANDROID: vendor_hook: fix the error record position of mutex FROMGIT: fs: drop_caches: draining pages before dropping caches ANDROID: GKI: Update symbols to symbol list ANDROID: GKI: Update symbols to symbol list ANDROID: GKI: add symbol list file for moto UPSTREAM: gfs2: Don't deref jdesc in evict UPSTREAM: media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() ANDROID: wakeupbypass: Add vendor hook for batteryswap ANDROID: GKI: Update symbols to symbol list ANDROID: vendor_hook: Add hook to abort reclaim and compaction UPSTREAM: Revert "Fix XFRM-I support for nested ESP tunnels" UPSTREAM: Revert "Fix XFRM-I support for nested ESP tunnels" ANDROID: Incremental fs: Allocate data buffer based on input request size ANDROID: ABI: update symbol list for Xclipse GPU ANDROID: vendor_hooks: Supplement the missing hook call point. ANDROID: GKI: Add symbol list for Nothing UPSTREAM: usb: dwc3: gadget: Propagate core init errors to UDC during pullup Revert "net: Remove DECnet leftovers from flow.h." Revert "neighbour: fix unaligned access to pneigh_entry" Revert "tcp: deny tcp_disconnect() when threads are waiting" Revert "regulator: Add regmap helper for ramp-delay setting" Revert "regulator: pca9450: Convert to use regulator_set_ramp_delay_regmap" Revert "regulator: pca9450: Fix BUCK2 enable_mask" Revert "tipc: add tipc_bearer_min_mtu to calculate min mtu" Revert "tipc: do not update mtu if msg_max is too small in mtu negotiation" Revert "tipc: check the bearer min mtu properly when setting it by netlink" Revert "ipv4/tcp: do not use per netns ctl sockets" ANDROID: GKI: preserve CRC generation for some bluetooth symbols Revert "net: Find dst with sk's xfrm policy not ctl_sk" Revert "tcp: fix possible sk_priority leak in tcp_v4_send_reset()" Revert "firmware: arm_sdei: Fix sleep from invalid context BUG" Revert "arm64: Stash shadow stack pointer in the task struct on interrupt" Revert "workqueue: Rename "delayed" (delayed by active management) to "inactive"" Revert "workqueue: Fix hung time report of worker pools" Revert "uapi/linux/const.h: prefer ISO-friendly __typeof__" Linux 5.10.185 um: Fix build w/o CONFIG_PM_SLEEP drm/i915/gen11+: Only load DRAM information from pcode drm/i915/dg1: Wait for pcode/uncore handshake at startup media: dvb-core: Fix use-after-free due to race at dvb_register_device() media: dvbdev: fix error logic at dvb_register_device() media: dvbdev: Fix memleak in dvb_register_device nilfs2: reject devices with insufficient block count mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block mmc: block: ensure error propagation for non-blk batman-adv: Switch to kstrtox.h for kstrtou64 neighbour: delete neigh_lookup_nodev as not used net: Remove DECnet leftovers from flow.h. net: Remove unused inline function dst_hold_and_use() neighbour: Remove unused inline function neigh_key_eq16() rcu/kvfree: Avoid freeing new kfree_rcu() memory after old grace period cgroup: always put cset in cgroup_css_set_put_fork afs: Fix vlserver probe RTT handling selftests/ptp: Fix timestamp printf format for PTP_SYS_OFFSET net: tipc: resize nlattr array to correct size net: lapbether: only support ethernet devices net/sched: cls_api: Fix lockup on flushing explicitly created chain ext4: drop the call to ext4_error() from ext4_get_group_info() drm/nouveau: add nv_encoder pointer check for NULL drm/nouveau/dp: check for NULL nv_connector->native_mode drm/nouveau: don't detect DSM for non-NVIDIA device igb: fix nvm.ops.read() error handling sctp: fix an error code in sctp_sf_eat_auth() ipvlan: fix bound dev checking for IPv6 l3s mode IB/isert: Fix incorrect release of isert connection IB/isert: Fix possible list corruption in CMA handler IB/isert: Fix dead lock in ib_isert IB/uverbs: Fix to consider event queue closing also upon non-blocking mode RDMA/cma: Always set static rate to 0 for RoCE RDMA/mlx5: Initiate dropless RQ for RAW Ethernet functions octeontx2-af: fixed resource availability check iavf: remove mask from iavf_irq_enable_queues() RDMA/rxe: Fix the use-before-initialization error of resp_pkts RDMA/rxe: Removed unused name from rxe_task struct RDMA/rxe: Remove the unused variable obj net/sched: cls_u32: Fix reference counter leak leading to overflow ping6: Fix send to link-local addresses with VRF. net: enetc: correct the indexes of highest and 2nd highest TCs netfilter: nfnetlink: skip error delivery on batch in case of ENOMEM spi: fsl-dspi: avoid SCK glitches with continuous transfers RDMA/rtrs: Fix the last iu->buf leak in err path usb: dwc3: gadget: Reset num TRBs before giving back the request serial: lantiq: add missing interrupt ack USB: serial: option: add Quectel EM061KGL series Remove DECnet support from kernel ALSA: hda/realtek: Add a quirk for Compaq N14JP6 net: usb: qmi_wwan: add support for Compal RXM-G1 RDMA/uverbs: Restrict usage of privileged QKEYs nouveau: fix client work fence deletion race powerpc/purgatory: remove PGO flags x86/purgatory: remove PGO flags kexec: support purgatories with .text.hot sections nilfs2: fix possible out-of-bounds segment allocation in resize ioctl nilfs2: fix incomplete buffer cleanup in nilfs_btnode_abort_change_key() nios2: dts: Fix tse_mac "max-frame-size" property ocfs2: check new file size on fallocate call ocfs2: fix use-after-free when unmounting read-only filesystem epoll: ep_autoremove_wake_function should use list_del_init_careful io_uring: hold uring mutex around poll removal irqchip/gic: Correctly validate OF quirk descriptors drm:amd:amdgpu: Fix missing buffer object unlock in failure path xen/blkfront: Only check REQ_FUA for writes ASoC: dwc: move DMA init to snd_soc_dai_driver probe() mips: Move initrd_start check after initrd address sanitisation. MIPS: Alchemy: fix dbdma2 parisc: Flush gatt writes and adjust gatt mask in parisc_agp_mask_memory() parisc: Improve cache flushing for PCXL in arch_sync_dma_for_cpu() ASoC: soc-pcm: test if a BE can be prepared btrfs: handle memory allocation failure in btrfs_csum_one_bio btrfs: scrub: try harder to mark RAID56 block groups read-only power: supply: Fix logic checking if system is running from battery irqchip/gic-v3: Disable pseudo NMIs on Mediatek devices w/ firmware issues regulator: Fix error checking for debugfs_create_dir platform/x86: asus-wmi: Ignore WMI events with codes 0x7B, 0xC0 power: supply: Ratelimit no data debug output tools: gpio: fix debounce_period_us output of lsgpio ARM: dts: vexpress: add missing cache properties power: supply: bq27xxx: Use mod_delayed_work() instead of cancel() + schedule() power: supply: sc27xx: Fix external_power_changed race power: supply: ab8500: Fix external_power_changed race test_firmware: fix a memory leak with reqs buffer test_firmware: prevent race conditions by a correct implementation of locking test_firmware: Use kstrtobool() instead of strtobool() kernel.h: split out kstrtox() and simple_strtox() to a separate header lib: cleanup kstrto*() usage Revert "sched/fair: Detect capacity inversion" Revert "sched/fair: Consider capacity inversion in util_fits_cpu()" Revert "sched/uclamp: Fix a uninitialized variable warnings" Revert "sched/fair: Fixes for capacity inversion detection" Linux 5.10.184 Revert "staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE" btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() btrfs: check return value of btrfs_commit_transaction in relocation drm/atomic: Don't pollute crtc_state->mode_blob with error pointers MIPS: locking/atomic: Fix atomic{_64,}_sub_if_positive xfs: verify buffer contents when we skip log replay tcp: fix tcp_min_tso_segs sysctl ext4: only check dquot_initialize_needed() when debugging Revert "ext4: don't clear SB_RDONLY when remounting r/w until quota is re-enabled" vhost: support PACKED when setting-getting vring_base riscv: fix kprobe __user string arg print fault issue eeprom: at24: also select REGMAP i2c: sprd: Delete i2c adapter in .remove's error path ASoC: codecs: wsa881x: do not set can_multi_write flag staging: vc04_services: fix gcc-13 build warning usb: usbfs: Use consistent mmap functions usb: usbfs: Enforce page requirements for mmap pinctrl: meson-axg: add missing GPIOA_18 gpio group rbd: get snapshot context after exclusive lock is ensured to be held rbd: move RBD_OBJ_FLAG_COPYUP_ENABLED flag setting tee: amdtee: Add return_origin to 'struct tee_cmd_load_ta' Bluetooth: hci_qca: fix debugfs registration Bluetooth: Fix use-after-free in hci_remove_ltk/hci_remove_irk s390/dasd: Use correct lock while counting channel queue length ceph: fix use-after-free bug for inodes when flushing capsnaps can: j1939: avoid possible use-after-free when j1939_can_rx_register fails can: j1939: change j1939_netdev_lock type to mutex can: j1939: j1939_sk_send_loop_abort(): improved error queue handling in J1939 Socket drm/amdgpu: fix xclk freq on CHIP_STONEY ALSA: hda/realtek: Add Lenovo P3 Tower platform ALSA: hda/realtek: Add a quirk for HP Slim Desktop S01 Input: psmouse - fix OOB access in Elantech protocol Input: xpad - delete a Razer DeathAdder mouse VID/PID entry batman-adv: Broken sync while rescheduling delayed work bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks bnxt_en: Query default VLAN before VNIC setup on a VF bnxt_en: Don't issue AP reset during ethtool's reset operation lib: cpu_rmap: Fix potential use-after-free in irq_cpu_rmap_release() bpf: Add extra path pointer check to d_path helper net: sched: fix possible refcount leak in tc_chain_tmplt_add() net: sched: move rtm_tca_policy declaration to include file rfs: annotate lockless accesses to RFS sock flow table rfs: annotate lockless accesses to sk->sk_rxhash ipv6: rpl: Fix Route of Death. netfilter: ipset: Add schedule point in call_ad(). netfilter: conntrack: fix NULL pointer dereference in nf_confirm_cthelper qed/qede: Fix scheduling while atomic Bluetooth: L2CAP: Add missing checks for invalid DCID Bluetooth: Fix l2cap_disconnect_req deadlock net/sched: fq_pie: ensure reasonable TCA_FQ_PIE_QUANTUM values net/smc: Avoid to access invalid RMBs' MRs in SMCRv1 ADD LINK CONT net: dsa: lan9303: allow vid != 0 in port_fdb_{add|del} methods neighbour: fix unaligned access to pneigh_entry wifi: mt76: mt7615: fix possible race in mt7615_mac_sta_poll afs: Fix setting of mtime when creating a file/dir/symlink spi: qup: Request DMA before enabling clocks staging: vchiq_core: drop vchiq_status from vchiq_initialise i40e: fix build warning in ice_fltr_add_mac_to_list() i40e: fix build warnings in i40e_alloc.h i40iw: fix build warning in i40iw_manage_apbvt() block/blk-iocost (gcc13): keep large values in a new enum blk-iocost: avoid 64-bit division in ioc_timer_fn f2fs: fix iostat lock protection bonding (gcc13): synchronize bond_{a,t}lb_xmit() types remove the sx8 block driver sfc (gcc13): synchronize ef100_enqueue_skb()'s return type gcc-plugins: Reorganize gimple includes for GCC 13 ata: ahci: fix enum constants for gcc-13 Linux 5.10.183 ARM: defconfig: drop CONFIG_DRM_RCAR_LVDS ext4: enable the lazy init thread when remounting read/write selftests: mptcp: join: skip if MPTCP is not supported selftests: mptcp: simult flows: skip if MPTCP is not supported selftests: mptcp: diag: skip if MPTCP is not supported crypto: ccp: Play nice with vmalloc'd memory for SEV command structs crypto: ccp: Reject SEV commands with mismatching command buffer scsi: dpt_i2o: Do not process completions with invalid addresses scsi: dpt_i2o: Remove broken pass-through ioctl (I2OUSERCMD) drm/rcar: stop using 'imply' for dependencies media: ti-vpe: cal: avoid FIELD_GET assertion tpm, tpm_tis: Request threaded interrupt handler regmap: Account for register length when chunking KEYS: asymmetric: Copy sig and digest in public_key_verify_signature() KVM: x86: Account fastpath-only VM-Exits in vCPU stats test_firmware: fix the memory leak of the allocated firmware buffer serial: 8250_tegra: Fix an error handling path in tegra_uart_probe() fbcon: Fix null-ptr-deref in soft_cursor ext4: add lockdep annotations for i_data_sem for ea_inode's ext4: disallow ea_inodes with extended attributes ext4: set lockdep subclass for the ea_inode in ext4_xattr_inode_cache_find() ext4: add EA_INODE checking to ext4_iget() selftests: mptcp: pm nl: skip if MPTCP is not supported selftests: mptcp: connect: skip if MPTCP is not supported tracing/probe: trace_probe_primary_from_call(): checked list_first_entry selinux: don't use make's grouped targets feature yet btrfs: fix csum_tree_block page iteration to avoid tripping on -Werror=array-bounds tty: serial: fsl_lpuart: use UARTCTRL_TXINV to send break instead of UARTCTRL_SBK mmc: vub300: fix invalid response handling eth: sun: cassini: remove dead code gcc-12: disable '-Wdangling-pointer' warning for now ath6kl: Use struct_group() to avoid size-mismatched casting ACPI: thermal: drop an always true check x86/boot: Wrap literal addresses in absolute_pointer() ata: libata-scsi: Use correct device no in ata_find_dev() scsi: stex: Fix gcc 13 warnings misc: fastrpc: reject new invocations during device removal misc: fastrpc: return -EPIPE to invocations on device removal usb: gadget: f_fs: Add unbind event before functionfs_unbind net: usb: qmi_wwan: Set DTR quirk for BroadMobi BM818 iio: dac: build ad5758 driver when AD5758 is selected iio: adc: ad7192: Change "shorted" channels to differential iio: dac: mcp4725: Fix i2c_master_send() return value handling iio: light: vcnl4035: fixed chip ID check iio: imu: inv_icm42600: fix timestamp reset HID: wacom: avoid integer overflow in wacom_intuos_inout() HID: google: add jewel USB id iio: adc: mxs-lradc: fix the order of two cleanup operations mailbox: mailbox-test: fix a locking issue in mbox_test_message_write() atm: hide unused procfs functions drm/msm: Be more shouty if per-process pgtables aren't working ALSA: oss: avoid missing-prototype warnings netfilter: conntrack: define variables exp_nat_nla_policy and any_addr with CONFIG_NF_NAT wifi: b43: fix incorrect __packed annotation scsi: core: Decrease scsi_device's iorequest_cnt if dispatch failed arm64/mm: mark private VM_FAULT_X defines as vm_fault_t ARM: dts: stm32: add pin map for CAN controller on stm32f7 wifi: rtl8xxxu: fix authentication timeout due to incorrect RCR value s390/pkey: zeroize key blobs media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() media: dvb-core: Fix use-after-free due on race condition at dvb_net media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr from ID table media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb() media: dvb_ca_en50221: fix a size write bug media: netup_unidvb: fix irq init by register it at the end of probe media: dvb-usb: dw2102: fix uninit-value in su3000_read_mac_address media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer() media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in rtl28xxu_i2c_xfer media: dvb-usb-v2: ce6230: fix null-ptr-deref in ce6230_i2c_master_xfer() media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer() media: dvb-usb: az6027: fix three null-ptr-deref in az6027_i2c_xfer() media: dvb_demux: fix a bug for the continuity counter ASoC: ssm2602: Add workaround for playback distortions ASoC: dt-bindings: Adjust #sound-dai-cells on TI's single-DAI codecs xfrm: Check if_id in inbound policy/secpath match ASoC: dwc: limit the number of overrun messages block/rnbd: replace REQ_OP_FLUSH with REQ_OP_WRITE nbd: Fix debugfs_create_dir error checking fbdev: stifb: Fix info entry in sti_struct on error path fbdev: modedb: Add 1920x1080 at 60 Hz video mode gfs2: Don't deref jdesc in evict media: rcar-vin: Select correct interrupt mode for V4L2_FIELD_ALTERNATE ARM: 9295/1: unwind:fix unwind abort for uleb128 case btrfs: abort transaction when sibling keys check fails for leaves mailbox: mailbox-test: Fix potential double-free in mbox_test_message_write() ALSA: hda: Glenfly: add HD Audio PCI IDs and HDMI Codec Vendor IDs. watchdog: menz069_wdt: fix watchdog initialisation mtd: rawnand: marvell: don't set the NAND frequency select mtd: rawnand: marvell: ensure timing values are written net: dsa: mv88e6xxx: Increase wait after reset deactivation net/sched: flower: fix possible OOB write in fl_set_geneve_opt() net/mlx5: Read embedded cpu after init bit cleared udp6: Fix race condition in udp6_sendmsg & connect net/netlink: fix NETLINK_LIST_MEMBERSHIPS length report net: sched: fix NULL pointer dereference in mq_attach net/sched: Prohibit regrafting ingress or clsact Qdiscs net/sched: Reserve TC_H_INGRESS (TC_H_CLSACT) for ingress (clsact) Qdiscs net/sched: sch_clsact: Only create under TC_H_CLSACT net/sched: sch_ingress: Only create under TC_H_INGRESS tcp: Return user_mss for TCP_MAXSEG in CLOSE/LISTEN state if user_mss set tcp: deny tcp_disconnect() when threads are waiting af_packet: do not use READ_ONCE() in packet_bind() mtd: rawnand: ingenic: fix empty stub helper definitions amd-xgbe: fix the false linkup in xgbe_phy_status af_packet: Fix data-races of pkt_sk(sk)->num. netrom: fix info-leak in nr_write_internal() net/mlx5: fw_tracer, Fix event handling dmaengine: pl330: rename _start to prevent build error iommu/amd: Don't block updates to GATag if guest mode is on iommu/rockchip: Fix unwind goto issue RDMA/bnxt_re: Fix return value of bnxt_re_process_raw_qp_pkt_rx RDMA/bnxt_re: Fix a possible memory leak dmaengine: at_xdmac: fix potential Oops in at_xdmac_prep_interleaved() dmaengine: at_xdmac: Move the free desc to the tail of the desc list dmaengine: at_xdmac: Fix race for the tx desc callback dmaengine: at_xdmac: Fix concurrency over chan's completed_cookie RDMA/efa: Fix unsupported page sizes in device RDMA/bnxt_re: Fix the page_size used during the MR creation RDMA/bnxt_re: Code refactor while populating user MRs Linux 5.10.182 netfilter: ctnetlink: Support offloaded conntrack entry deletion ipv{4,6}/raw: fix output xfrm lookup wrt protocol binder: fix UAF caused by faulty buffer cleanup bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() net: phy: mscc: enable VSC8501/2 RGMII RX clock net/mlx5: Devcom, serialize devcom registration net/mlx5: devcom only supports 2 ports regulator: pca9450: Fix BUCK2 enable_mask regulator: pca9450: Convert to use regulator_set_ramp_delay_regmap regulator: Add regmap helper for ramp-delay setting power: supply: bq24190: Call power_supply_changed() after updating input current power: supply: core: Refactor power_supply_set_input_current_limit_from_supplier() power: supply: bq27xxx: After charger plug in/out wait 0.5s for things to stabilize power: supply: bq27xxx: Ensure power_supply_changed() is called on current sign changes power: supply: bq27xxx: Move bq27xxx_battery_update() down power: supply: bq27xxx: expose battery data when CI=1 power: supply: bq27xxx: Add cache parameter to bq27xxx_battery_current_and_status() power: supply: bq27xxx: make status more robust power: supply: bq27xxx: fix sign of current_now for newer ICs power: supply: bq27xxx: fix polarity of current_now x86/cpu: Drop spurious underscore from RAPTOR_LAKE #define x86/cpu: Add Raptor Lake to Intel family Linux 5.10.181 net: phy: mscc: add VSC8502 to MODULE_DEVICE_TABLE 3c589_cs: Fix an error handling path in tc589_probe() arm64: dts: imx8mn-var-som: fix PHY detection bug by adding deassert delay net/mlx5: Devcom, fix error flow in mlx5_devcom_register_device net/mlx5: Fix error message when failing to allocate device memory net/mlx5: DR, Fix crc32 calculation to work on big-endian (BE) CPUs net/mlx5e: do as little as possible in napi poll when budget is 0 forcedeth: Fix an error handling path in nv_probe() ASoC: Intel: Skylake: Fix declaration of enum skl_ch_cfg x86/show_trace_log_lvl: Ensure stack pointer is aligned, again xen/pvcalls-back: fix double frees with pvcalls_new_active_socket() coresight: Fix signedness bug in tmc_etr_buf_insert_barrier_packet() fs: fix undefined behavior in bit shift for SB_NOUSER power: supply: sbs-charger: Fix INHIBITED bit for Status reg power: supply: bq27xxx: Fix poll_interval handling and races on remove power: supply: bq27xxx: Fix I2C IRQ race on remove power: supply: bq27xxx: Fix bq27xxx_battery_update() race condition power: supply: leds: Fix blink to LED on transition ipv6: Fix out-of-bounds access in ipv6_find_tlv() bpf: Fix mask generation for 32-bit narrow loads of 64-bit fields octeontx2-pf: Fix TSOv6 offload selftests: fib_tests: mute cleanup error message net: fix skb leak in __skb_tstamp_tx() media: radio-shark: Add endpoint checks USB: sisusbvga: Add endpoint checks USB: core: Add routines for endpoint checks in old drivers udplite: Fix NULL pointer dereference in __sk_mem_raise_allocated(). net: fix stack overflow when LRO is disabled for virtual interfaces fbdev: udlfb: Fix endpoint check debugobjects: Don't wake up kswapd from fill_pool() x86/topology: Fix erroneous smp_num_siblings on Intel Hybrid platforms parisc: Fix flush_dcache_page() for usage from irq context selftests/memfd: Fix unknown type name build failure x86/mm: Avoid incomplete Global INVLPG flushes dt-binding: cdns,usb3: Fix cdns,on-chip-buff-size type btrfs: use nofs when cleaning up aborted transactions gpio: mockup: Fix mode of debugfs files parisc: Allow to reboot machine after system halt parisc: Handle kgdb breakpoints only in kernel context m68k: Move signal frame following exception on 68020/030 net: cdc_ncm: Deal with too low values of dwNtbOutMaxSize ALSA: hda/realtek: Enable headset onLenovo M70/M90 ALSA: hda: Fix unhandled register update during auto-suspend period ALSA: hda/ca0132: add quirk for EVGA X299 DARK ocfs2: Switch to security_inode_init_security() spi: fsl-cpm: Use 16 bit mode for large transfers with even size spi: fsl-spi: Re-organise transfer bits_per_word adaptation act_mirred: use the backlog for nested calls to mirred ingress net/sched: act_mirred: better wording on protection against excessive stack growth net/sched: act_mirred: refactor the handle of xmit writeback, cgroup: remove extra percpu_ref_exit() ARM: dts: stm32: fix AV96 board SAI2 pin muxing on stm32mp15 watchdog: sp5100_tco: Immediately trigger upon starting. s390/qdio: fix do_sqbs() inline assembly constraint s390/qdio: get rid of register asm serial: 8250_exar: Add support for USR298x PCI Modems serial: exar: Add support for Sealevel 7xxxC serial cards serial: 8250_exar: derive nr_ports from PCI ID for Acces I/O cards KVM: arm64: Link position-independent string routines into .hyp.text HID: wacom: add three styli to wacom_intuos_get_tool_type HID: wacom: Add new Intuos Pro Small (PTH-460) device IDs HID: wacom: Force pen out of prox if no events have been received in a while nilfs2: fix use-after-free bug of nilfs_root in nilfs_evict_inode() powerpc/64s/radix: Fix soft dirty tracking tpm/tpm_tis: Disable interrupts for more Lenovo devices ceph: force updating the msg pointer in non-split case vc_screen: reload load of struct vc_data pointer in vcs_write() to avoid UAF serial: Add support for Advantech PCI-1611U card statfs: enforce statfs[64] structure initialization can: kvaser_pciefd: Disable interrupts in probe error path can: kvaser_pciefd: Do not send EFLUSH command on TFD interrupt can: kvaser_pciefd: Clear listen-only bit if not explicitly requested can: kvaser_pciefd: Empty SRB buffer in probe can: kvaser_pciefd: Call request_irq() before enabling interrupts can: kvaser_pciefd: Set CAN_STATE_STOPPED in kvaser_pciefd_stop() can: isotp: recvmsg(): allow MSG_CMSG_COMPAT flag can: j1939: recvmsg(): allow MSG_CMSG_COMPAT flag ALSA: hda/realtek: Add quirk for 2nd ASUS GU603 ALSA: hda/realtek: Add a quirk for HP EliteDesk 805 ALSA: hda/realtek: Add quirk for Clevo L140AU ALSA: hda: Add NVIDIA codec IDs a3 through a7 to patch table ALSA: hda: Fix Oops by 9.1 surround channel names usb: typec: altmodes/displayport: fix pin_assignment_show usb: gadget: u_ether: Fix host MAC address case usb: dwc3: debugfs: Resume dwc3 before accessing registers USB: UHCI: adjust zhaoxin UHCI controllers OverCurrent bit value usb-storage: fix deadlock when a scsi command timeouts more than once USB: usbtmc: Fix direction for 0-length ioctl control messages ALSA: usb-audio: Add a sample rate workaround for Line6 Pod Go bridge: always declare tunnel functions netfilter: nft_set_rbtree: fix null deref on element insertion vlan: fix a potential uninit-value in vlan_dev_hard_start_xmit() igb: fix bit_shift to be in [1..8] range cassini: Fix a memory leak in the error handling path of cas_init_one() scsi: storvsc: Don't pass unused PFNs to Hyper-V host wifi: iwlwifi: mvm: don't trust firmware n_channels wifi: mac80211: fix min center freq offset tracing net: bcmgenet: Restore phy_stop() depending upon suspend/close net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop() tipc: check the bearer min mtu properly when setting it by netlink tipc: do not update mtu if msg_max is too small in mtu negotiation tipc: add tipc_bearer_min_mtu to calculate min mtu net/tipc: fix tipc header files for kernel-doc net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() drm/exynos: fix g2d_open/close helper function definitions SUNRPC: Fix trace_svc_register() call site media: netup_unidvb: fix use-after-free at del_timer() net: hns3: fix reset delay time to avoid configuration timeout net: hns3: fix sending pfc frames after reset issue erspan: get the proto with the md version for collect_md serial: arc_uart: fix of_iomap leak in `arc_serial_probe` tcp: fix possible sk_priority leak in tcp_v4_send_reset() net: Find dst with sk's xfrm policy not ctl_sk ipv4/tcp: do not use per netns ctl sockets vsock: avoid to close connected socket after the timeout ALSA: hda/realtek: Apply HP B&O top speaker profile to Pavilion 15 ALSA: firewire-digi00x: prevent potential use after free net: phy: dp83867: add w/a for packet errors seen with short cables net: fec: Better handle pm_runtime_get() failing in .remove() af_key: Reject optional tunnel/BEET mode templates in outbound policies cpupower: Make TSC read per CPU for Mperf monitor drm/msm/dpu: Remove duplicate register defines from INTF drm/msm/dp: unregister audio driver during unbind Revert "Fix XFRM-I support for nested ESP tunnels" xfrm: don't check the default policy if the policy allows the packet btrfs: fix space cache inconsistency after error loading it from disk btrfs: replace calls to btrfs_find_free_ino with btrfs_find_free_objectid btrfs: move btrfs_find_highest_objectid/btrfs_find_free_objectid to disk-io.c mfd: dln2: Fix memory leak in dln2_probe() phy: st: miphy28lp: use _poll_timeout functions for waits Input: xpad - add constants for GIP interface numbers iommu/arm-smmu-v3: Acknowledge pri/event queue overflow if any clk: tegra20: fix gcc-7 constant overflow warning iommu/arm-smmu-qcom: Limit the SMR groups to 128 RDMA/core: Fix multiple -Warray-bounds warnings recordmcount: Fix memory leaks in the uwrite function sched: Fix KCSAN noinstr violation mcb-pci: Reallocate memory region to avoid memory overlapping serial: 8250: Reinit port->pm on port specific driver unbind usb: typec: tcpm: fix multiple times discover svids error HID: wacom: generic: Set battery quirk only when we see battery data spi: spi-imx: fix MX51_ECSPI_* macros when cs > 3 HID: logitech-hidpp: Reconcile USB and Unifying serials HID: logitech-hidpp: Don't use the USB serial for USB devices staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp Bluetooth: hci_bcm: Fall back to getting bdaddr from EFI if not set ipvs: Update width of source for ip_vs_sync_conn_options wifi: ath11k: Fix SKB corruption in REO destination ring wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace null_blk: Always check queue mode setting from configfs wifi: iwlwifi: pcie: Fix integer overflow in iwl_write_to_user_buf wifi: iwlwifi: pcie: fix possible NULL pointer dereference samples/bpf: Fix fout leak in hbm's run_bpf_prog f2fs: fix to drop all dirty pages during umount() if cp_error is set ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa() ext4: set goal start correctly in ext4_mb_normalize_request gfs2: Fix inode height consistency check scsi: message: mptlan: Fix use after free bug in mptlan_remove() due to race condition lib: cpu_rmap: Avoid use after free on rmap->obj array entries scsi: target: iscsit: Free cmds before session free net: Catch invalid index in XPS mapping net: pasemi: Fix return type of pasemi_mac_start_tx() scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow ext2: Check block size validity during mount wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex bpf: Annotate data races in bpf_local_storage wifi: ath: Silence memcpy run-time false positive warning drm/amd: Fix an out of bounds error in BIOS parser ACPICA: ACPICA: check null return of ACPI_ALLOCATE_ZEROED in acpi_db_display_objects ACPICA: Avoid undefined behavior: applying zero offset to null pointer drm/tegra: Avoid potential 32-bit integer overflow remoteproc: stm32_rproc: Add mutex protection for workqueue ACPI: EC: Fix oops when removing custom query handlers firmware: arm_sdei: Fix sleep from invalid context BUG memstick: r592: Fix UAF bug in r592_remove due to race condition arm64: dts: qcom: msm8996: Add missing DWC3 quirks regmap: cache: Return error in cache sync operations for REGCACHE_NONE drm/amd/display: Use DC_LOG_DC in the trasform pixel function fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode() rcu: Protect rcu_print_task_exp_stall() ->exp_tasks access refscale: Move shutdown from wait_event() to wait_event_idle() ext4: allow ext4_get_group_info() to fail ext4: allow to find by goal if EXT4_MB_HINT_GOAL_ONLY is set ext4: add mballoc stats proc file ext4: drop s_mb_bal_lock and convert protected fields to atomic ext4: remove redundant mb_regenerate_buddy() ext4: fix lockdep warning when enabling MMP ext4: don't clear SB_RDONLY when remounting r/w until quota is re-enabled ext4: reflect error codes from ext4_multi_mount_protect() to its callers ext4: remove an unused variable warning with CONFIG_QUOTA=n fbdev: arcfb: Fix error handling in arcfb_probe() drm/i915/dp: prevent potential div-by-zero af_unix: Fix data races around sk->sk_shutdown. af_unix: Fix a data race of sk->sk_receive_queue->qlen. net: datagram: fix data-races in datagram_poll() ipvlan:Fix out-of-bounds caused by unclear skb->cb tcp: add annotations around sk->sk_shutdown accesses tcp: factor out __tcp_close() helper net: add vlan_get_protocol_and_depth() helper net: tap: check vlan with eth_type_vlan() method net: deal with most data-races in sk_wait_event() net: annotate sk->sk_err write from do_recvmmsg() netlink: annotate accesses to nlk->cb_running netfilter: conntrack: fix possible bug_on with enable_hooks=1 net: Fix load-tearing on sk->sk_stamp in sock_recv_cmsgs(). linux/dim: Do nothing if no time delta between samples net: mdio: mvusb: Fix an error handling path in mvusb_mdio_probe() ARM: 9296/1: HP Jornada 7XX: fix kernel-doc warnings drm/mipi-dsi: Set the fwnode for mipi_dsi_device driver core: add a helper to setup both the of_node and fwnode of a device Linux 5.10.180 drm/amd/display: Fix hang when skipping modeset mm/page_alloc: fix potential deadlock on zonelist_update_seq seqlock drm/exynos: move to use request_irq by IRQF_NO_AUTOEN flag printk: declare printk_deferred_{enter,safe}() in include/linux/printk.h KVM: x86: move guest_pv_has out of user_access section KVM: x86: do not report preemption if the steal time cache is stale KVM: x86: revalidate steal time cache if MSR value changes KVM: x86: do not set st->preempted when going back to user space KVM: x86: Remove obsolete disabling of page faults in kvm_arch_vcpu_put() KVM: Fix steal time asm constraints KVM: x86: Fix recording of guest steal time / preempted status KVM: x86: Ensure PV TLB flush tracepoint reflects KVM behavior drbd: correctly submit flush bio on barrier serial: 8250: Fix serial8250_tx_empty() race with DMA Tx ext4: fix invalid free tracking in ext4_xattr_move_to_block() ext4: remove a BUG_ON in ext4_mb_release_group_pa() ext4: bail out of ext4_xattr_ibody_get() fails for any reason ext4: add bounds checking in get_max_inline_xattr_value_size() ext4: fix deadlock when converting an inline directory in nojournal mode ext4: improve error recovery code paths in __ext4_remount() ext4: check iomap type only if ext4_iomap_begin() does not fail ext4: fix data races when using cached status extents ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum ext4: fix WARNING in mb_find_extent KVM: x86: do not report a vCPU as preempted outside instruction boundaries KVM: x86: hyper-v: Avoid calling kvm_make_vcpus_request_mask() with vcpu_mask==NULL HID: wacom: insert timestamp to packed Bluetooth (BT) events HID: wacom: Set a default resolution for older tablets drm/amdgpu: disable sdma ecc irq only when sdma RAS is enabled in suspend drm/amdgpu/gfx: disable gfx9 cp_ecc_error_irq only when enabling legacy gfx ras drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini() drm/panel: otm8009a: Set backlight parent to panel device f2fs: fix potential corruption when moving a directory ARM: dts: s5pv210: correct MIPI CSIS clock name ARM: dts: exynos: fix WM8960 clock name in Itop Elite remoteproc: st: Call of_node_put() on iteration error remoteproc: stm32: Call of_node_put() on iteration error sh: nmi_debug: fix return value of __setup handler sh: init: use OF_EARLY_FLATTREE for early init sh: mcount.S: fix build error when PRINTK is not enabled sh: math-emu: fix macro redefined warning inotify: Avoid reporting event with invalid wd platform/x86: touchscreen_dmi: Add info for the Dexp Ursus KX210i platform/x86: touchscreen_dmi: Add upside-down quirk for GDIX1002 ts on the Juno Tablet cifs: fix pcchunk length type in smb2_copychunk_range btrfs: print-tree: parent bytenr must be aligned to sector size btrfs: don't free qgroup space unless specified btrfs: fix btrfs_prev_leaf() to not return the same key twice perf symbols: Fix return incorrect build_id size in elf_read_build_id() crypto: sun8i-ss - Fix a test in sun8i_ss_setup_ivs() perf map: Delete two variable initialisations before null pointer checks in sort__sym_from_cmp() perf pmu: zfree() expects a pointer to a pointer to zero it after freeing its contents perf vendor events power9: Remove UTF-8 characters from JSON files net: enetc: check the index of the SFI rather than the handle virtio_net: suppress cpu stall when free_unused_bufs virtio_net: split free_unused_bufs() net: dsa: mt7530: fix corrupt frames using trgmii on 40 MHz XTAL MT7621 ALSA: caiaq: input: Add error handling for unsupported input methods in `snd_usb_caiaq_input_init` drm/amdgpu: add a missing lock for AMDGPU_SCHED af_packet: Don't send zero-byte data in packet_sendmsg_spkt(). ionic: remove noise from ethtool rxnfc error msg octeontx2-vf: Detach LF resources on probe cleanup octeontx2-pf: Disable packet I/O for graceful exit rxrpc: Fix hard call timeout units sfc: Fix module EEPROM reporting for QSFP modules net/sched: act_mirred: Add carrier check watchdog: dw_wdt: Fix the error handling path of dw_wdt_drv_probe() writeback: fix call of incorrect macro net: dsa: mv88e6xxx: add mv88e6321 rsvd2cpu sit: update dev->needed_headroom in ipip6_tunnel_bind_dev() net/sched: cls_api: remove block_cb from driver_list before freeing net/ncsi: clear Tx enable mode when handling a Config required AEN scsi: qedi: Fix use after free bug in qedi_remove() dm verity: fix error handling for check_at_most_once on FEC dm verity: skip redundant verity_handle_err() on I/O errors mailbox: zynqmp: Fix counts of child nodes mailbox: zynq: Switch to flexible array to simplify code crypto: ccp - Clear PSP interrupt status register before calling handler ring-buffer: Ensure proper resetting of atomic variables in ring_buffer_reset_online_cpus tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH tty: clean include/linux/tty.h up tty: move some tty-only functions to drivers/tty/tty.h tty: move some internal tty lock enums and functions out of tty.h tty: audit: move some local functions out of tty.h tty: create internal tty.h file netfilter: nf_tables: deactivate anonymous set from preparation phase scsi: target: core: Avoid smp_processor_id() in preemptible code arm64: dts: qcom: sdm845: correct dynamic power coefficients sound/oss/dmasound: fix 'dmasound_setup' defined but not used arm64: Always load shadow stack pointer directly from the task struct perf intel-pt: Fix CYC timestamps after standalone CBR dm ioctl: fix nested locking in table_clear() to remove deadlock concern dm flakey: fix a crash with invalid table line debugobject: Ensure pool refill (again) perf auxtrace: Fix address filter entire kernel size arm64: Stash shadow stack pointer in the task struct on interrupt dm integrity: call kmem_cache_destroy() in dm_integrity_init() error path dm clone: call kmem_cache_destroy() in dm_clone_init() error path ia64: fix an addr to taddr in huge_pte_offset() s390/dasd: fix hanging blockdevice after request requeue btrfs: scrub: reject unsupported scrub flags scripts/gdb: fix lx-timerlist for Python3 afs: Fix updating of i_size with dv jump from server mfd: tqmx86: Correct board names for TQMxE39x mfd: tqmx86: Specify IO port register range more precisely mfd: tqmx86: Add support for TQMx110EB and TQMxE40x mfd: tqmx86: Remove incorrect TQMx90UC board ID mfd: tqmx86: Do not access I2C_DETECT register through io_base thermal/drivers/mediatek: Use devm_of_iomap to avoid resource leak in mtk_thermal_probe dmaengine: at_xdmac: do not enable all cyclic channels dmaengine: dw-edma: Fix to enable to issue dma request on DMA processing dmaengine: dw-edma: Fix to change for continuous transfer phy: tegra: xusb: Add missing tegra_xusb_port_unregister for usb2_port and ulpi_port pwm: mtk-disp: Disable shadow registers before setting backlight values pwm: mtk-disp: Adjust the clocks to avoid them mismatch pwm: mtk-disp: Don't check the return code of pwmchip_remove() leds: tca6507: Fix error handling of using fwnode_property_read_string dmaengine: mv_xor_v2: Fix an error code. leds: TI_LMU_COMMON: select REGMAP instead of depending on it ext4: fix use-after-free read in ext4_find_extent for bigalloc + inline openrisc: Properly store r31 to pt_regs on unhandled exceptions clocksource/drivers/davinci: Fix memory leak in davinci_timer_register when init fails RDMA/mlx5: Use correct device num_ports when modify DC SUNRPC: remove the maximum number of retries in call_bind_status RDMA/mlx5: Fix flow counter query via DEVX Input: raspberrypi-ts - fix refcount leak in rpi_ts_probe input: raspberrypi-ts: Release firmware handle when not needed firmware: raspberrypi: Introduce devm_rpi_firmware_get() NFSv4.1: Always send a RECLAIM_COMPLETE after establishing lease IB/hfi1: Fix bugs with non-PAGE_SIZE-end multi-iovec user SDMA requests IB/hfi1: Add additional usdma traces IB/hfi1: Add AIP tx traces IB/hfi1: Fix SDMA mmu_rb_node not being evicted in LRU order RDMA/srpt: Add a check for valid 'mad_agent' pointer RDMA/cm: Trace icm_send_rej event before the cm state is reset RDMA/siw: Remove namespace check from siw_netdev_event() clk: add missing of_node_put() in "assigned-clocks" property parsing power: supply: generic-adc-battery: fix unit scaling rtc: meson-vrtc: Use ktime_get_real_ts64() to get the current time RDMA/mlx4: Prevent shift wrapping in set_user_sq_size() rtc: omap: include header for omap_rtc_power_off_program prototype workqueue: Fix hung time report of worker pools RDMA/rdmavt: Delete unnecessary NULL check workqueue: Rename "delayed" (delayed by active management) to "inactive" RDMA/siw: Fix potential page_array out of range access clk: at91: clk-sam9x60-pll: fix return value check perf/core: Fix hardlockup failure caused by perf throttle powerpc/rtas: use memmove for potentially overlapping buffer copy macintosh: via-pmu-led: requires ATA to be set powerpc/sysdev/tsi108: fix resource printk format warnings powerpc/wii: fix resource printk format warnings powerpc/mpc512x: fix resource printk format warning macintosh/windfarm_smu_sat: Add missing of_node_put() spmi: Add a check for remove callback when removing a SPMI driver staging: rtl8192e: Fix W_DISABLE# does not work after stop/start serial: 8250: Add missing wakeup event reporting uapi/linux/const.h: prefer ISO-friendly __typeof__ i2c: cadence: cdns_i2c_master_xfer(): Fix runtime PM leak on error path tty: serial: fsl_lpuart: adjust buffer length to the intended size firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe usb: mtu3: fix kernel panic at qmu transfer done irq handler usb: chipidea: fix missing goto in `ci_hdrc_probe` usb: gadget: tegra-xudc: Fix crash in vbus_draw sh: sq: Fix incorrect element size for allocating bitmap buffer spi: cadence-quadspi: fix suspend-resume implementations ASoC: fsl_mqs: move of_node_put() to the correct location coresight: etm_pmu: Set the module field scripts/gdb: bail early if there are no generic PD scripts/gdb: bail early if there are no clocks ia64: salinfo: placate defined-but-not-used warning ia64: mm/contig: fix section mismatch warning/error PCI/EDR: Clear Device Status after EDR error recovery of: Fix modalias string generation vmci_host: fix a race condition in vmci_host_poll() causing GPF spi: fsl-spi: Fix CPM/QE mode Litte Endian spi: qup: Don't skip cleanup in remove's error path linux/vt_buffer.h: allow either builtin or modular for macros ASoC: es8316: Handle optional IRQ assignment ASoC: es8316: Use IRQF_NO_AUTOEN when requesting the IRQ PCI: imx6: Install the fault handler only on compatible match usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition spi: imx: Don't skip cleanup in remove's error path spi: spi-imx: using pm_runtime_resume_and_get instead of pm_runtime_get_sync iio: light: max44009: add missing OF device matching fpga: bridge: fix kernel-doc parameter description usb: dwc3: gadget: Change condition for processing suspend event usb: host: xhci-rcar: remove leftover quirk handling pstore: Revert pmsg_lock back to a normal mutex ipmi: ASPEED_BT_IPMI_BMC: select REGMAP_MMIO instead of depending on it tcp/udp: Fix memleaks of sk and zerocopy skbs with TX timestamp. net: amd: Fix link leak when verifying config failed netlink: Use copy_to_user() for optval in netlink_getsockopt(). Revert "Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work" ipv4: Fix potential uninit variable access bug in __ip_make_skb() net/sched: sch_fq: fix integer overflow of "credit" netfilter: nf_tables: don't write table validation state without mutex bpf: Don't EFAULT for getsockopt with optval=NULL ixgbe: Enable setting RSS table to default values ixgbe: Allow flow hash to be set via ethtool wifi: iwlwifi: fw: fix memory leak in debugfs wifi: iwlwifi: mvm: check firmware response size wifi: iwlwifi: make the loop for card preparation effective jdb2: Don't refuse invalidation of already invalidated buffers wifi: iwlwifi: fw: move memset before early return wifi: iwlwifi: yoyo: Fix possible division by zero md/raid10: fix memleak of md thread md/raid10: fix memleak for 'conf->bio_split' md/raid10: fix leak of 'r10bio->remaining' for recovery bpf, sockmap: Revert buggy deadlock fix in the sockhash and sockmap nvme-fcloop: fix "inconsistent {IN-HARDIRQ-W} -> {HARDIRQ-ON-W} usage" nvme: fix async event trace event nvme: handle the persistent internal error AER bpf, sockmap: fix deadlocks in the sockhash and sockmap net: ethernet: stmmac: dwmac-rk: fix optional phy regulator handling scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup() f2fs: fix to avoid use-after-free for cached IPU bio xsk: Fix unaligned descriptor validation crypto: drbg - Only fail when jent is unavailable in FIPS mode crypto: drbg - make drbg_prepare_hrng() handle jent instantiation errors bpftool: Fix bug for long instructions in program CFG dumps selftests/bpf: Wait for receive in cg_storage_multi test net: qrtr: correct types of trace event parameters wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_reg() wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_rfreg() crypto: sa2ul - Select CRYPTO_DES crypto: caam - Clear some memory in instantiate_rng f2fs: compress: fix to call f2fs_wait_on_page_writeback() in f2fs_write_raw_pages() f2fs: apply zone capacity to all zone type f2fs: enforce single zone capacity f2fs: handle dqget error in f2fs_transfer_project_quota() scsi: megaraid: Fix mega_cmd_done() CMDID_INT_CMDS scsi: target: iscsit: Fix TAS handling during conn cleanup scsi: target: Fix multiple LUN_RESET handling scsi: target: Make state_list per CPU scsi: target: Rename cmd.bad_sector to cmd.sense_info scsi: target: Rename struct sense_info to sense_detail net/packet: convert po->auxdata to an atomic flag net/packet: convert po->origdev to an atomic flag net/packet: annotate accesses to po->xmit vlan: partially enable SIOCSHWTSTAMP in container bpf: Remove misleading spec_v1 check on var-offset stack read scm: fix MSG_CTRUNC setting condition for SO_PASSSEC bpf: fix precision propagation verbose logging bpf: take into account liveness when propagating precision wifi: rtw88: mac: Return the original error from rtw_mac_power_switch() wifi: rtw88: mac: Return the original error from rtw_pwr_seq_parser() tools: bpftool: Remove invalid \' json escape wifi: ath6kl: reduce WARN to dev_dbg() in callback wifi: ath5k: fix an off by one check in ath5k_eeprom_read_freq_list() wifi: ath9k: hif_usb: fix memory leak of remain_skbs wifi: ath6kl: minor fix for allocation size tick/common: Align tick period with the HZ tick. tick: Get rid of tick_period tick/sched: Optimize tick_do_update_jiffies64() further tick/sched: Reduce seqcount held scope in tick_do_update_jiffies64() tick/sched: Use tick_next_period for lockless quick check drm/i915: Make intel_get_crtc_new_encoder() less oopsy debugobject: Prevent init race with static objects arm64: kgdb: Set PSTATE.SS to 1 to re-enable single-step x86/ioapic: Don't return 0 from arch_dynirq_lower_bound() regulator: stm32-pwr: fix of_iomap leak media: venus: dec: Fix handling of the start cmd media: venus: vdec: Handle DRC after drain media: venus: preserve DRC state across seeks media: venus: vdec: Make decoder return LAST flag for sufficient event media: venus: vdec: Fix non reliable setting of LAST flag media: rc: gpio-ir-recv: Fix support for wake-up media: rcar_fdp1: Fix refcount leak in probe and remove function media: rcar_fdp1: Fix the correct variable assignments media: rcar_fdp1: Make use of the helper function devm_platform_ioremap_resource() media: rcar_fdp1: fix pm_runtime_get_sync() usage count media: rcar_fdp1: simplify error check logic at fdp_open() media: saa7134: fix use after free bug in saa7134_finidev due to race condition media: dm1105: Fix use after free bug in dm1105_remove due to race condition media: rkvdec: fix use after free bug in rkvdec_remove x86/apic: Fix atomic update of offset in reserve_eilvt_offset() ACPI: processor: Fix evaluating _PDC method when running as Xen dom0 regulator: core: Avoid lockdep reports when resolving supplies drm: msm: adreno: Disable preemption on Adreno 510 regulator: core: Consistently set mutex_owner when using ww_mutex_lock_slow() drm/lima/lima_drv: Add missing unwind goto in lima_pdev_probe() ARM: dts: gta04: fix excess dma channel usage mmc: sdhci-of-esdhc: fix quirk to ignore command inhibit for data drm/msm/adreno: drop bogus pm_runtime_set_active() drm/msm/adreno: Defer enabling runpm until hw_init() media: max9286: Free control handler drm/bridge: adv7533: Fix adv7533_mode_valid for adv7533 and adv7535 firmware: qcom_scm: Clear download bit during reboot media: bdisp: Add missing check for create_workqueue x86/MCE/AMD: Use an u64 for bank_map ARM: dts: qcom: ipq8064: Fix the PCI I/O port range ARM: dts: qcom: ipq8064: reduce pci IO size to 64K ARM: dts: qcom: ipq4019: Fix the PCI I/O port range arm64: dts: qcom: msm8996: Fix the PCI I/O port range arm64: dts: qcom: ipq8074: Fix the PCI I/O port range arm64: dts: qcom: msm8998: Fix the PCI I/O port range arm64: dts: qcom: sdm845: Fix the PCI I/O port range arm64: dts: qcom: sdm845: correct dynamic power coefficients arm64: dts: qcom: msm8998: Fix stm-stimulus-base reg name EDAC/skx: Fix overflows on the DRAM row address mapping arrays drm/msm/disp/dpu: check for crtc enable rather than crtc active to release shared resources arm64: dts: renesas: r8a774c0: Remove bogus voltages from OPP table arm64: dts: renesas: r8a77990: Remove bogus voltages from OPP table soc: ti: pm33xx: Fix refcount leak in am33xx_pm_probe soc: ti: pm33xx: Enable basic PM runtime support for genpd drm/probe-helper: Cancel previous job before starting new one drm/vgem: add missing mutex_destroy drm/rockchip: Drop unbalanced obj unref erofs: fix potential overflow calculating xattr_isize erofs: stop parsing non-compact HEAD index if clusterofs is invalid tpm, tpm_tis: Claim locality when interrupts are reenabled on resume tpm, tpm: Implement usage counter for locality tpm, tpm_tis: Claim locality before writing interrupt registers tpm, tpm_tis: Disable interrupts if tpm_tis_probe_irq() failed tpm, tpm_tis: Claim locality before writing TPM_INT_ENABLE register tpm, tpm_tis: Do not skip reset of original interrupt vector selinux: ensure av_permissions.h is built when needed selinux: fix Makefile dependencies of flask.h selftests/resctrl: Check for return value after write_schemata() selftests/resctrl: Return NULL if malloc_and_init_memory() did not alloc mem wifi: rtl8xxxu: RTL8192EU always needs full init rcu: Fix missing TICK_DEP_MASK_RCU_EXP dependency check mailbox: zynqmp: Fix typo in IPI documentation clk: rockchip: rk3399: allow clk_cifout to force clk_cifout_src to reparent mailbox: zynqmp: Fix IPI isr handling md/raid10: fix null-ptr-deref in raid10_sync_request nilfs2: fix infinite loop in nilfs_mdt_get_block() nilfs2: do not write dirty data after degenerating to read-only parisc: Fix argument pointer in real64_call_asm() sound/oss/dmasound: fix build when drivers are mixed =y/=m ubifs: Free memory for tmpfile name ubi: Fix return value overwrite issue in try_write_vid_and_data() ubifs: Fix memleak when insert_old_idx() failed Revert "ubifs: dirty_cow_znode: Fix memleak in error handling path" iommu/amd: Fix "Guest Virtual APIC Table Root Pointer" configuration in IRTE i2c: omap: Fix standard mode false ACK readings writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs relayfs: fix out-of-bounds access in relay_file_read KVM: nVMX: Emulate NOPs in L2, and PAUSE if it's not intercepted reiserfs: Add security prefix to xattr name in reiserfs_security_write() rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed crypto: safexcel - Cleanup ring IRQ workqueues on load failure MIPS: fw: Allow firmware to pass a empty env crypto: api - Demote BUG_ON() in crypto_unregister_alg() to a WARN_ON() ring-buffer: Sync IRQ works before buffer destruction pwm: meson: Fix g12a ao clk81 name pwm: meson: Fix axg ao mux parents kheaders: Use array declaration instead of char ipmi: fix SSIF not responding under certain cond. ipmi:ssif: Add send_retries increment tick/nohz: Fix cpu_is_hotpluggable() by checking with nohz subsystem xhci: fix debugfs register accesses while suspended staging: iio: resolver: ads1210: fix config mode ext4: use ext4_journal_start/stop for fast commit transactions blk-crypto: make blk_crypto_evict_key() more robust blk-crypto: make blk_crypto_evict_key() return void blk-mq: release crypto keyslot before reporting I/O complete perf sched: Cast PTHREAD_STACK_MIN to int as it may turn into sysconf(__SC_THREAD_STACK_MIN_VALUE) posix-cpu-timers: Implement the missing timer_wait_running callback hwmon: (adt7475) Use device_property APIs when configuring polarity hwmon: (k10temp) Check range scale when CUR_TEMP register is read-write USB: dwc3: fix runtime pm imbalance on unbind USB: dwc3: fix runtime pm imbalance on probe errors PCI: qcom: Fix the incorrect register usage in v2.7.0 config PCI: pciehp: Fix AB-BA deadlock between reset_lock and device_lock wireguard: timers: cast enum limits members to int in prints asm-generic/io.h: suppress endianness warnings for readq() and writeq() ASoC: Intel: bytcr_rt5640: Add quirk for the Acer Iconia One 7 B1-750 iio: adc: palmas_gpadc: fix NULL dereference on rmmod driver core: Don't require dynamic_debug for initcall_debug probe timing USB: serial: option: add UNISOC vendor and TOZED LT70C product x86/fpu: Prevent FPU state corruption bluetooth: Perform careful capability checks in hci_sock_ioctl() drm/fb-helper: set x/yres_virtual in drm_fb_helper_check_var wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() KVM: arm64: Fix buffer overflow in kvm_arm_set_fw_reg() counter: 104-quad-8: Fix race condition between FLAG and CNTR reads seccomp: Move copy_seccomp() to no failure path. Revert "ASoC: hdac_hdmi: use set_stream() instead of set_tdm_slots()" ANDROID: preserve CRC for xhci symbols Revert "ipv4: shrink netns_ipv4 with sysctl conversions" Revert "tcp: convert elligible sysctls to u8" Revert "tcp: restrict net.ipv4.tcp_app_win" Linux 5.10.179 ASN.1: Fix check for strdup() success ASoC: fsl_asrc_dma: fix potential null-ptr-deref iio: adc: at91-sama5d2_adc: fix an error code in at91_adc_allocate_trigger() pwm: hibvt: Explicitly set .polarity in .get_state() pwm: iqs620a: Explicitly set .polarity in .get_state() pwm: meson: Explicitly set .polarity in .get_state() sctp: Call inet6_destroy_sock() via sk->sk_destruct(). dccp: Call inet6_destroy_sock() via sk->sk_destruct(). inet6: Remove inet6_destroy_sock() in sk->sk_prot->destroy(). tcp/udp: Call inet6_destroy_sock() in IPv6 sk->sk_destruct(). udp: Call inet6_destroy_sock() in setsockopt(IPV6_ADDRFORM). ext4: fix use-after-free in ext4_xattr_set_entry ext4: remove duplicate definition of ext4_xattr_ibody_inline_set() Revert "ext4: fix use-after-free in ext4_xattr_set_entry" fuse: fix deadlock between atomic O_TRUNC and page invalidation fuse: always revalidate rename target dentry fuse: fix attr version comparison in fuse_read_update_size() fuse: check s_root when destroying sb virtiofs: split requests that exceed virtqueue size virtiofs: clean up error handling in virtio_fs_get_tree() purgatory: fix disabling debug info docs: futex: Fix kernel-doc references after code split-up preparation MIPS: Define RUNTIME_DISCARD_EXIT in LD script sched/fair: Fixes for capacity inversion detection sched/uclamp: Fix a uninitialized variable warnings sched/fair: Consider capacity inversion in util_fits_cpu() sched/fair: Detect capacity inversion sched/uclamp: Cater for uclamp in find_energy_efficient_cpu()'s early exit condition sched/uclamp: Make cpu_overutilized() use util_fits_cpu() sched/uclamp: Make asym_fits_capacity() use util_fits_cpu() sched/uclamp: Make select_idle_capacity() use util_fits_cpu() sched/uclamp: Fix fits_capacity() check in feec() sched/uclamp: Make task_fits_capacity() use util_fits_cpu() mm/khugepaged: check again on anon uffd-wp during isolation mmc: sdhci_am654: Set HIGH_SPEED_ENA for SDR12 and SDR25 kernel/sys.c: fix and improve control flow in __sys_setres[ug]id() memstick: fix memory leak if card device is never registered nilfs2: initialize unused bytes in segment summary blocks iio: light: tsl2772: fix reading proximity-diodes from device tree xfs: drop submit side trans alloc for append ioends powerpc/doc: Fix htmldocs errors xen/netback: use same error messages for same errors nvme-tcp: fix a possible UAF when failing to allocate an io queue s390/ptrace: fix PTRACE_GET_LAST_BREAK error handling net: dsa: b53: mmap: add phy ops scsi: core: Improve scsi_vpd_inquiry() checks scsi: megaraid_sas: Fix fw_crash_buffer_show() selftests: sigaltstack: fix -Wuninitialized Input: i8042 - add quirk for Fujitsu Lifebook A574/H f2fs: Fix f2fs_truncate_partial_nodes ftrace event e1000e: Disable TSO on i219-LM card to increase speed bpf: Fix incorrect verifier pruning due to missing register precision taints mlxsw: pci: Fix possible crash during initialization net: rpl: fix rpl header size calculation mlxfw: fix null-ptr-deref in mlxfw_mfa2_tlv_next() i40e: fix i40e_setup_misc_vector() error handling i40e: fix accessing vsi->active_filters without holding lock netfilter: nf_tables: fix ifdef to also consider nf_tables=m sfc: Fix use-after-free due to selftest_work sfc: Split STATE_READY in to STATE_NET_DOWN and STATE_NET_UP. virtio_net: bugfix overflow inside xdp_linearize_page() net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg regulator: fan53555: Explicitly include bits header netfilter: br_netfilter: fix recent physdev match breakage arm64: dts: imx8mm-evk: correct pmic clock source arm64: dts: meson-g12-common: specify full DMC range arm64: dts: qcom: ipq8074-hk01: enable QMP device, not the PHY node ARM: dts: rockchip: fix a typo error for rk3288 spdif node Linux 5.10.178 sysctl: Fix data-races in proc_dou8vec_minmax(). panic, kexec: make __crash_kexec() NMI safe kexec: turn all kexec_mutex acquisitions into trylocks kexec: move locking into do_kexec_load riscv: Handle zicsr/zifencei issues between clang and binutils kbuild: check CONFIG_AS_IS_LLVM instead of LLVM_IAS kbuild: Switch to 'f' variants of integrated assembler flag kbuild: check the minimum assembler version in Kconfig coresight-etm4: Fix for() loop drvdata->nr_addr_cmp range bug watchdog: sbsa_wdog: Make sure the timeout programming is within the limits i2c: ocores: generate stop condition after timeout in polling mode x86/rtc: Remove __init for runtime functions sched/fair: Fix imbalance overflow sched/fair: Move calculate of avg_load to a better location powerpc/papr_scm: Update the NUMA distance table for the target node powerpc/pseries: Add support for FORM2 associativity powerpc/pseries: Add a helper for form1 cpu distance powerpc/pseries: Consolidate different NUMA distance update code paths powerpc/pseries: Rename TYPE1_AFFINITY to FORM1_AFFINITY powerpc/pseries: rename min_common_depth to primary_domain_index ubi: Fix deadlock caused by recursively holding work_sem mtd: ubi: wl: Fix a couple of kernel-doc issues ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size cgroup/cpuset: Wake up cpuset_attach_wq tasks in cpuset_cancel_attach() x86/PCI: Add quirk for AMD XHCI controller that loses MSI-X state in D3hot scsi: ses: Handle enclosure with just a primary component gracefully net: sfp: initialize sfp->i2c_block_size at sfp allocation riscv: add icache flush for nommu sigreturn trampoline asymmetric_keys: log on fatal failures in PE/pkcs7 verify_pefile: relax wrapper length check drm: panel-orientation-quirks: Add quirk for Lenovo Yoga Book X90F efi: sysfb_efi: Add quirk for Lenovo Yoga Book X91F/L i2c: imx-lpi2c: clean rx/tx buffers upon new message wifi: mwifiex: mark OF related data as maybe unused power: supply: cros_usbpd: reclassify "default case!" as debug libbpf: Fix single-line struct definition output in btf_dump net: macb: fix a memory corruption in extended buffer descriptor mode udp6: fix potential access to stale information RDMA/core: Fix GID entry ref leak when create_ah fails sctp: fix a potential overflow in sctp_ifwdtsn_skip net: qrtr: Fix an uninit variable access bug in qrtr_tx_resume() qlcnic: check pci_reset_function result drm/armada: Fix a potential double free in an error handling path tcp: restrict net.ipv4.tcp_app_win tcp: convert elligible sysctls to u8 ipv4: shrink netns_ipv4 with sysctl conversions sysctl: add proc_dou8vec_minmax() niu: Fix missing unwind goto in niu_alloc_channels() 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition RDMA/cma: Allow UD qp_type to join multicast only IB/mlx5: Add support for 400G_8X lane speed IB/mlx5: Add support for NDR link speed clk: sprd: set max_register according to mapping range mtd: rawnand: stm32_fmc2: use timings.mode instead of checking tRC_min mtd: rawnand: stm32_fmc2: remove unsupported EDO mode mtd: rawnand: meson: fix bitmask for length in command word mtdblock: tolerate corrected bit-flips fbmem: Reject FB_ACTIVATE_KD_TEXT from userspace btrfs: fix fast csum implementation detection btrfs: print checksum type and implementation at mount time Bluetooth: Fix race condition in hidp_session_thread Bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp} ALSA: hda/sigmatel: fix S/PDIF out on Intel D*45* motherboards ALSA: firewire-tascam: add missing unwind goto in snd_tscm_stream_start_duplex() ALSA: i2c/cs8427: fix iec958 mixer control deactivation ALSA: hda/sigmatel: add pin overrides for Intel DP45SG motherboard ALSA: emu10k1: fix capture interrupt handler unlinking Revert "pinctrl: amd: Disable and mask interrupts on resume" bpftool: Print newline before '}' for struct with padding only fields ocfs2: fix freeing uninitialized resource on ocfs2_dlm_shutdown Revert "media: ti: cal: fix possible memory leak in cal_ctx_create()" drm/bridge: lt9611: Fix PLL being unable to lock selftests: intel_pstate: ftime() is deprecated mm/swap: fix swap_info_struct race between swapoff and get_swap_pages() ring-buffer: Fix race while reader and writer are on the same page drm/nouveau/disp: Support more modes by checking with lower bpc drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path ASoC: hdac_hdmi: use set_stream() instead of set_tdm_slots() tracing: Free error logs of tracing instances can: isotp: isotp_ops: fix poll() to not report false EPOLLOUT events can: j1939: j1939_tp_tx_dat_new(): fix out-of-bounds memory access ftrace: Fix issue that 'direct->addr' not restored in modify_ftrace_direct() ftrace: Mark get_lock_parent_ip() __always_inline perf/core: Fix the same task check in perf_event_set_output scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param() iio: adc: ad7791: fix IRQ flags ALSA: hda/realtek: Add quirk for Clevo X370SNW dt-bindings: serial: renesas,scif: Fix 4th IRQ for 4-IRQ SCIFs nilfs2: fix sysfs interface lifetime nilfs2: fix potential UAF of struct nilfs_sc_info in nilfs_segctor_thread() tty: serial: fsl_lpuart: avoid checking for transfer complete when UARTCTRL_SBK is asserted in lpuart32_tx_empty tty: serial: sh-sci: Fix Rx on RZ/G2L SCI tty: serial: sh-sci: Fix transmit end interrupt handler iio: light: cm32181: Unregister second I2C client if present iio: dac: cio-dac: Fix max DAC write value check for 12-bit iio: adc: ti-ads7950: Set `can_sleep` flag for GPIO chip USB: serial: option: add Quectel RM500U-CN modem USB: serial: option: add Telit FE990 compositions usb: typec: altmodes/displayport: Fix configure initial pin assignment USB: serial: cp210x: add Silicon Labs IFS-USB-DATACABLE IDs xhci: also avoid the XHCI_ZERO_64B_REGS quirk with a passthrough iommu usb: xhci: tegra: fix sleep in atomic call NFSD: callback request does not use correct credential for AUTH_SYS sunrpc: only free unix grouplist after RCU settles net: stmmac: fix up RX flow hash indirection table when setting channels net: ethernet: ti: am65-cpsw: Fix mdio cleanup in probe gpio: davinci: Add irq chip flag to skip set wake ipv6: Fix an uninit variable access bug in __ip6_make_skb() net: qrtr: Do not do DEL_SERVER broadcast after DEL_CLIENT sctp: check send stream number after wait_for_sndbuf net: don't let netpoll invoke NAPI if in xmit context icmp: guard against too small mtu net: qrtr: Fix a refcount bug in qrtr_recvmsg() net: qrtr: combine nameservice into main module wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for non-uploaded sta KVM: s390: pv: fix external interruption loop not always detected pwm: sprd: Explicitly set .polarity in .get_state() pwm: cros-ec: Explicitly set .polarity in .get_state() Drivers: vmbus: Check for channel allocation before looking up relids gpio: GPIO_REGMAP: select REGMAP instead of depending on it Conflicts: Documentation/devicetree/bindings Documentation/devicetree/bindings/serial/renesas,scif.yaml Documentation/devicetree/bindings/sound/tas2562.yaml Documentation/devicetree/bindings/sound/tas2764.yaml Documentation/devicetree/bindings/sound/tas2770.yaml Documentation/devicetree/bindings/usb/cdns,usb3.yaml drivers/firmware/qcom_scm.c net/qrtr/af_qrtr.c net/qrtr/ns.c Change-Id: Iae4be21654d43667cdf433135c297352d09190bd Signed-off-by: Srinivasarao Pathipati <quic_c_spathi@quicinc.com> |
||
Sarannya S
|
ac2954b5e4 |
net: qrtr: Destroy xarray on endpoint unregister
Xarray and entries allocated for services filter should be freed when node is unregistered. Change-Id: I1ada63b30223923f7851af76ca8ab60c55c4d664 Signed-off-by: Deepak Kumar Singh <quic_deesin@quicinc.com> Signed-off-by: Sarannya S <quic_sarannya@quicinc.com> |
||
Srinivasarao Pathipati
|
166f433ac6 |
Merge keystone/android12-5.10-keystone-qcom-release.168+ (60b964d ) into msm-5.10
* refs/heads/tmp-60b964d: BACKPORT: f2fs: introduce gc_urgent_mid mode ANDROID: clear memory trylock-bit when page_locked. UPSTREAM: ext4: fix kernel BUG in 'ext4_write_inline_data_end()' ANDROID: GKI: Update symbols to symbol list ANDROID: incremental fs: Evict inodes before freeing mount data UPSTREAM: mm: memcontrol: set the correct memcg swappiness restriction UPSTREAM: media: rc: Fix use-after-free bugs caused by ene_tx_irqsim() ANDROID: Fix kernelci break: eventfd_signal_mask redefined ANDROID: dm-default-key: update for blk_crypto_evict_key() returning void BACKPORT: FROMGIT: blk-crypto: make blk_crypto_evict_key() more robust BACKPORT: FROMGIT: blk-crypto: make blk_crypto_evict_key() return void BACKPORT: FROMGIT: blk-mq: release crypto keyslot before reporting I/O complete BACKPORT: of: base: Skip CPU nodes with "fail"/"fail-..." status UPSTREAM: hid: bigben_probe(): validate report count UPSTREAM: HID: bigben: use spinlock to safely schedule workers UPSTREAM: HID: bigben_worker() remove unneeded check on report_field UPSTREAM: HID: bigben: use spinlock to protect concurrent accesses BACKPORT: USB: gadget: Fix use-after-free during usb config switch ANDROID: ABI: Add page_pinner_inited into symbols list ANDROID: page_pinner: prevent pp_buffer access before initialization UPSTREAM: hwrng: virtio - add an internal buffer ANDROID: fix ABI by undoing atomic64_t -> u64 type conversion UPSTREAM: net: retrieve netns cookie via getsocketopt UPSTREAM: net: initialize net->net_cookie at netns setup UPSTREAM: ext4: fix another off-by-one fsmap error on 1k block filesystems UPSTREAM: ext4: block range must be validated before use in ext4_mb_clear_bb() UPSTREAM: ext4: add strict range checks while freeing blocks UPSTREAM: ext4: add ext4_sb_block_valid() refactored out of ext4_inode_block_valid() UPSTREAM: ext4: refactor ext4_free_blocks() to pull out ext4_mb_clear_bb() UPSTREAM: usb: dwc3: core: do not use 3.0 clock when operating in 2.0 mode ANDROID: GKI: rockchip: Add symbols for clk api BACKPORT: arm64: mte: move register initialization to C UPSTREAM: rcu: Remove __read_mostly annotations from rcu_scheduler_active externs ANDROID: GKI: Update symbol list for mtk Revert "nvmem: core: Fix a conflict between MTD and NVMEM on wp-gpios property" Revert "xhci: Add update_hub_device override for PCI xHCI hosts" Revert "xhci: Detect lpm incapable xHC USB3 roothub ports from ACPI tables" Revert "xhci: Add a flag to disable USB3 lpm on a xhci root port level." Revert "xhci: Prevent infinite loop in transaction errors recovery for streams" Revert "ASoC/SoundWire: dai: expand 'stream' concept beyond SoundWire" Revert "ASoC: Intel/SOF: use set_stream() instead of set_tdm_slots() for HDAudio" Linux 5.10.168 Fix page corruption caused by racy check in __free_pages arm64: dts: meson-axg: Make mmc host controller interrupts level-sensitive arm64: dts: meson-g12-common: Make mmc host controller interrupts level-sensitive arm64: dts: meson-gx: Make mmc host controller interrupts level-sensitive riscv: Fixup race condition on PG_dcache_clean in flush_icache_pte ceph: flush cap releases when the session is flushed usb: typec: altmodes/displayport: Fix probe pin assign check usb: core: add quirk for Alcor Link AK9563 smartcard reader btrfs: free device in btrfs_close_devices for a single device filesystem net: USB: Fix wrong-direction WARNING in plusb.c cifs: Fix use-after-free in rdata->read_into_pages() pinctrl: intel: Restore the pins that used to be in Direct IRQ mode spi: dw: Fix wrong FIFO level setting for long xfers pinctrl: single: fix potential NULL dereference pinctrl: aspeed: Fix confusing types in return value ALSA: pci: lx6464es: fix a debug loop selftests: forwarding: lib: quote the sysctl values rds: rds_rm_zerocopy_callback() use list_first_entry() net/mlx5: fw_tracer, Zero consumer index when reloading the tracer net/mlx5: fw_tracer, Clear load bit when freeing string DBs buffers net/mlx5e: IPoIB, Show unknown speed instead of error net: mscc: ocelot: fix VCAP filters not matching on MAC with "protocol 802.1Q" ice: Do not use WQ_MEM_RECLAIM flag for workqueue uapi: add missing ip/ipv6 header dependencies for linux/stddef.h ionic: clean interrupt before enabling queue to avoid credit race net: phy: meson-gxl: use MMD access dummy stubs for GXL, internal PHY bonding: fix error checking in bond_debug_reregister() xfrm: fix bug with DSCP copy to v6 from v4 tunnel RDMA/usnic: use iommu_map_atomic() under spin_lock() IB/IPoIB: Fix legacy IPoIB due to wrong number of queues xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr() IB/hfi1: Restore allocated resources on failed copyout xfrm: compat: change expression for switch in xfrm_xlate64 can: j1939: do not wait 250 ms if the same addr was already claimed of/address: Return an error when no valid dma-ranges are found tracing: Fix poll() and select() do not work on per_cpu trace_pipe and trace_pipe_raw ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book2 Pro 360 ALSA: emux: Avoid potential array out-of-bound in snd_emux_xg_control() ALSA: hda/realtek: Add Positivo N14KP6-TG btrfs: zlib: zero-initialize zlib workspace btrfs: limit device extents to the device size migrate: hugetlb: check for hugetlb shared PMD in node migration mm/migration: return errno when isolate_huge_page failed iio:adc:twl6030: Enable measurement of VAC bpf: Do not reject when the stack read size is different from the tracked scalar size nvmem: core: Fix a conflict between MTD and NVMEM on wp-gpios property wifi: brcmfmac: Check the count value of channel spec to prevent out-of-bounds reads f2fs: fix to do sanity check on i_extra_isize in is_alive() fbdev: smscufx: fix error handling code in ufx_usb_probe serial: 8250_dma: Fix DMA Rx rearm race serial: 8250_dma: Fix DMA Rx completion race nvmem: core: fix cell removal on error nvmem: core: initialise nvmem->id early drm/i915: Fix potential bit_17 double-free Squashfs: fix handling and sanity checking of xattr_ids count mm/swapfile: add cond_resched() in get_swap_pages() fpga: stratix10-soc: Fix return value check in s10_ops_write_init() x86/debug: Fix stack recursion caused by wrongly ordered DR7 accesses mm: hugetlb: proc: check for hugetlb shared PMD in /proc/PID/smaps riscv: disable generation of unwind tables parisc: Wire up PTRACE_GETREGS/PTRACE_SETREGS for compat case parisc: Fix return code of pdc_iodc_print() nvmem: qcom-spmi-sdam: fix module autoloading iio: imu: fxos8700: fix MAGN sensor scale and unit iio: imu: fxos8700: remove definition FXOS8700_CTRL_ODR_MIN iio: imu: fxos8700: fix failed initialization ODR mode assignment iio: imu: fxos8700: fix incorrect ODR mode readback iio: imu: fxos8700: fix swapped ACCEL and MAGN channels readback iio: imu: fxos8700: fix map label of channel type to MAGN sensor iio: imu: fxos8700: fix IMU data bits returned to user space iio: imu: fxos8700: fix incomplete ACCEL and MAGN channels readback iio: imu: fxos8700: fix ACCEL measurement range selection iio:adc:twl6030: Enable measurements of VUSB, VBAT and others iio: adc: berlin2-adc: Add missing of_node_put() in error path iio: hid: fix the retval in accel_3d_capture_sample efi: Accept version 2 of memory attributes table ALSA: hda/realtek: Add Acer Predator PH315-54 watchdog: diag288_wdt: fix __diag288() inline assembly watchdog: diag288_wdt: do not use stack buffers for hardware data net: qrtr: free memory on error path in radix_tree_insert() fbcon: Check font dimension limits Input: i8042 - add Clevo PCX0DX to i8042 quirk table Input: i8042 - add TUXEDO devices to i8042 quirk tables Input: i8042 - merge quirk tables Input: i8042 - move __initconst to fix code styling warning vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF usb: gadget: f_fs: Fix unbalanced spinlock in __ffs_ep0_queue_wait usb: dwc3: qcom: enable vbus override when in OTG dr-mode usb: dwc3: dwc3-qcom: Fix typo in the dwc3 vbus override API iio: adc: stm32-dfsdm: fill module aliases net/x25: Fix to not accept on connected socket platform/x86: dell-wmi: Add a keymap for KEY_MUTE in type 0x0010 table i2c: rk3x: fix a bunch of kernel-doc warnings scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress scsi: target: core: Fix warning on RT kernels i2c: mxs: suppress probe-deferral error message qede: execute xdp_do_flush() before napi_complete_done() qede: add netpoll support for qede driver efi: fix potential NULL deref in efi_mem_reserve_persistent net: openvswitch: fix flow memory leak in ovs_flow_cmd_new virtio-net: Keep stop() to follow mirror sequence of open() selftests: net: udpgso_bench_tx: Cater for pending datagrams zerocopy benchmarking selftests: net: udpgso_bench: Fix racing bug between the rx/tx programs selftests: net: udpgso_bench_rx/tx: Stop when wrong CLI args are provided selftests: net: udpgso_bench_rx: Fix 'used uninitialized' compiler warning ata: libata: Fix sata_down_spd_limit() when no link speed is reported can: j1939: fix errant WARN_ON_ONCE in j1939_session_deactivate igc: return an error if the mac type is unknown in igc_ptp_systim_to_hwtstamp() net: phy: meson-gxl: Add generic dummy stubs for MMD register access squashfs: harden sanity check in squashfs_read_xattr_id_table netfilter: br_netfilter: disable sabotage_in hook after first suppression netrom: Fix use-after-free caused by accept on already connected socket net: phy: dp83822: Fix null pointer access on DP83825/DP83826 devices sfc: correctly advertise tunneled IPv6 segmentation virtio-net: execute xdp_do_flush() before napi_complete_done() fix "direction" argument of iov_iter_kvec() fix iov_iter_bvec() "direction" argument READ is "data destination", not source... WRITE is "data source", not destination... vhost/net: Clear the pending messages when the backend is removed scsi: Revert "scsi: core: map PQ=1, PDT=other values to SCSI_SCAN_TARGET_PRESENT" drm/vc4: hdmi: make CEC adapter name unique arm64: dts: imx8mm: Fix pad control for UART1_DTE_RX bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener bpf: Fix to preserve reg parent/live fields when copying range info bpf: Support <8-byte scalar spill and refill ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path() bpf: Fix a possible task gone issue with bpf_send_signal[_thread]() helpers powerpc/imc-pmu: Revert nest_init_lock to being a mutex bpf: Fix incorrect state pruning for <8B spill/fill bus: sunxi-rsb: Fix error handling in sunxi_rsb_init() firewire: fix memory leak for payload of request subaction to IEC 61883-1 FCP region Revert "net: add atomic_long_t to net_device_stats fields" Revert "PM/devfreq: governor: Add a private governor_data for governor" Linux 5.10.167 net: fix NULL pointer in skb_segment_list Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init blk-cgroup: fix missing pd_online_fn() while activating policy bpf: Skip task with pid=1 in send_signal_common() arm64: dts: imx8mq-thor96: fix no-mmc property for SDHCI ARM: dts: vf610: Fix pca9548 i2c-mux node names ARM: dts: imx: Fix pca9547 i2c-mux node name ANDROID: Update .xml due to ABI preservation fix ANDROID: struct io_uring ABI preservation hack for 5.10.162 changes ANDROID: fix up struct task_struct ABI change in 5.10.162 ANDROID: add flags variable back to struct proto_ops Linux 5.10.166 clk: Fix pointer casting to prevent oops in devm_clk_release() perf/x86/amd: fix potential integer overflow on shift of a int netfilter: conntrack: unify established states for SCTP paths x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL block: fix and cleanup bio_check_ro Revert "selftests/ftrace: Update synthetic event syntax errors" nfsd: Ensure knfsd shuts down when the "nfsd" pseudofs is unmounted nouveau: explicitly wait on the fence in nouveau_bo_move_m2mf Revert "Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode" tools: gpio: fix -c option of gpio-event-mon net: mdio-mux-meson-g12a: force internal PHY off on mux switch net/tg3: resolve deadlock in tg3_reset_task() during EEH thermal: intel: int340x: Add locking to int340x_thermal_get_trip_type() net: ravb: Fix possible hang if RIS2_QFF1 happen sctp: fail if no bound addresses can be used for a given scope net/sched: sch_taprio: do not schedule in taprio_reset() netrom: Fix use-after-free of a listening socket. netfilter: conntrack: fix vtag checks for ABORT/SHUTDOWN_COMPLETE ipv4: prevent potential spectre v1 gadget in fib_metrics_match() ipv4: prevent potential spectre v1 gadget in ip_metrics_convert() netlink: annotate data races around sk_state netlink: annotate data races around dst_portid and dst_group netlink: annotate data races around nlk->portid netfilter: nft_set_rbtree: skip elements in transaction from garbage collection netfilter: nft_set_rbtree: Switch to node list walk for overlap detection net: fix UaF in netns ops registration error path netlink: prevent potential spectre v1 gadgets i2c: designware: use casting of u64 in clock multiplication to avoid overflow i2c: designware: Use DIV_ROUND_CLOSEST() macro units: Add SI metric prefix definitions units: Add Watt units EDAC/qcom: Do not pass llcc_driv_data as edac_device_ctl_info's pvt_info EDAC/device: Respect any driver-supplied workqueue polling value ARM: 9280/1: mm: fix warning on phys_addr_t to void pointer assignment thermal: intel: int340x: Protect trip temperature from concurrent updates KVM: x86/vmx: Do not skip segment attributes if unusable bit is set cifs: Fix oops due to uncleared server->smbd_conn in reconnect ftrace/scripts: Update the instructions for ftrace-bisect.sh trace_events_hist: add check for return value of 'create_hist_field' tracing: Make sure trace_printk() can output as soon as it can be used module: Don't wait for GOING modules scsi: hpsa: Fix allocation size for scsi_host_alloc() xhci: Set HCD flag to defer primary roothub registration Bluetooth: hci_sync: cancel cmd_timer if hci_open failed exit: Use READ_ONCE() for all oops/warn limit reads docs: Fix path paste-o for /sys/kernel/warn_count panic: Expose "warn_count" to sysfs panic: Introduce warn_limit panic: Consolidate open-coded panic_on_warn checks exit: Allow oops_limit to be disabled exit: Expose "oops_count" to sysfs exit: Put an upper limit on how often we can oops panic: Separate sysctl logic from CONFIG_SMP ia64: make IA64_MCA_RECOVERY bool instead of tristate csky: Fix function name in csky_alignment() and die() h8300: Fix build errors from do_exit() to make_task_dead() transition hexagon: Fix function name in die() objtool: Add a missing comma to avoid string concatenation exit: Add and use make_task_dead. kasan: no need to unset panic_on_warn in end_report() ubsan: no need to unset panic_on_warn in ubsan_epilogue() panic: unset panic_on_warn inside panic() kernel/panic: move panic sysctls to its own file sysctl: add a new register_sysctl_init() interface fs: reiserfs: remove useless new_opts in reiserfs_remount x86: ACPI: cstate: Optimize C3 entry on AMD CPUs netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state Revert "selftests/bpf: check null propagation only neither reg is PTR_TO_BTF_ID" lockref: stop doing cpu_relax in the cmpxchg loop platform/x86: asus-nb-wmi: Add alternate mapping for KEY_SCREENLOCK platform/x86: touchscreen_dmi: Add info for the CSL Panther Tab HD scsi: hisi_sas: Set a port invalid only if there are no devices attached when refreshing port id KVM: s390: interrupt: use READ_ONCE() before cmpxchg() spi: spidev: remove debug messages that access spidev->spi without locking ASoC: fsl-asoc-card: Fix naming of AC'97 CODEC widgets ASoC: fsl_ssi: Rename AC'97 streams to avoid collisions with AC'97 CODEC cpufreq: armada-37xx: stop using 0 as NULL pointer s390/debug: add _ASM_S390_ prefix to header guard drm: Add orientation quirk for Lenovo ideapad D330-10IGL ASoC: fsl_micfil: Correct the number of steps on SX controls kcsan: test: don't put the expect array on the stack cpufreq: Add Tegra234 to cpufreq-dt-platdev blocklist scsi: iscsi: Fix multiple iSCSI session unbind events sent to userspace tcp: fix rate_app_limited to default to 1 net: dsa: microchip: ksz9477: port map correction in ALU table entry register driver core: Fix test_async_probe_init saves device in wrong array w1: fix WARNING after calling w1_process() w1: fix deadloop in __w1_remove_master_device() tcp: avoid the lookup process failing to get sk in ehash table nvme-pci: fix timeout request state check dmaengine: xilinx_dma: call of_node_put() when breaking out of for_each_child_of_node() HID: betop: check shape of output reports l2tp: prevent lockdep issue in l2tp_tunnel_register() net: macb: fix PTP TX timestamp failure due to packet padding dmaengine: Fix double increment of client_count in dma_chan_get() drm/panfrost: fix GENERIC_ATOMIC64 dependency net: mlx5: eliminate anonymous module_init & module_exit usb: gadget: f_fs: Ensure ep0req is dequeued before free_request usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait HID: revert CHERRY_MOUSE_000C quirk net: stmmac: fix invalid call to mdiobus_get_phy() HID: check empty report_list in bigben_probe() HID: check empty report_list in hid_validate_values() net: mdio: validate parameter addr in mdiobus_get_phy() net: usb: sr9700: Handle negative len l2tp: close all race conditions in l2tp_tunnel_register() l2tp: convert l2tp_tunnel_list to idr l2tp: Don't sleep and disable BH under writer-side sk_callback_lock l2tp: Serialize access to sk_user_data with sk_callback_lock net/sched: sch_taprio: fix possible use-after-free wifi: rndis_wlan: Prevent buffer overflow in rndis_query_oid gpio: mxc: Always set GPIOs used as interrupt source to INPUT mode net: wan: Add checks for NULL for utdm in undo_uhdlc_init and unmap_si_regs net: nfc: Fix use-after-free in local_cleanup() phy: rockchip-inno-usb2: Fix missing clk_disable_unprepare() in rockchip_usb2phy_power_on() bpf: Fix pointer-leak due to insufficient speculative store bypass mitigation amd-xgbe: Delay AN timeout during KR training amd-xgbe: TX Flow Ctrl Registers are h/w ver dependent ARM: dts: at91: sam9x60: fix the ddr clock for sam9x60 phy: ti: fix Kconfig warning and operator precedence PM: AVS: qcom-cpr: Fix an error handling path in cpr_probe() affs: initialize fsdata in affs_truncate() IB/hfi1: Remove user expected buffer invalidate race IB/hfi1: Immediately remove invalid memory from hardware IB/hfi1: Fix expected receive setup error exit issues IB/hfi1: Reserve user expected TIDs IB/hfi1: Reject a zero-length user expected buffer RDMA/core: Fix ib block iterator counter overflow tomoyo: fix broken dependency on *.conf.default firmware: arm_scmi: Harden shared memory access in fetch_notification firmware: arm_scmi: Harden shared memory access in fetch_response EDAC/highbank: Fix memory leak in highbank_mc_probe() HID: intel_ish-hid: Add check for ishtp_dma_tx_map ARM: imx: add missing of_node_put() arm64: dts: imx8mm-beacon: Fix ecspi2 pinmux ARM: dts: imx6qdl-gw560x: Remove incorrect 'uart-has-rtscts' ARM: dts: imx7d-pico: Use 'clock-frequency' ARM: dts: imx6ul-pico-dwarf: Use 'clock-frequency' memory: mvebu-devbus: Fix missing clk_disable_unprepare in mvebu_devbus_probe() memory: atmel-sdramc: Fix missing clk_disable_unprepare in atmel_ramc_probe() clk: Provide new devm_clk helpers for prepared and enabled clocks clk: generalize devm_clk_get() a bit Linux 5.10.165 io_uring/rw: remove leftover debug statement io_uring/rw: ensure kiocb_end_write() is always called io_uring: fix double poll leak on repolling io_uring: Clean up a false-positive warning from GCC 9.3.0 mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma Bluetooth: hci_qca: Fixed issue during suspend Bluetooth: hci_qca: check for SSR triggered flag while suspend Bluetooth: hci_qca: Wait for SSR completion during suspend soc: qcom: apr: Make qcom,protection-domain optional again Revert "wifi: mac80211: fix memory leak in ieee80211_if_add()" net/mlx5: fix missing mutex_unlock in mlx5_fw_fatal_reporter_err_work() net/ulp: use consistent error code when blocking ULP io_uring/net: fix fast_iov assignment in io_setup_async_msg() io_uring: io_kiocb_update_pos() should not touch file for non -1 offset tracing: Use alignof__(struct {type b;}) instead of offsetof() x86/fpu: Use _Alignof to avoid undefined behavior in TYPE_ALIGN Revert "drm/amdgpu: make display pinning more flexible (v2)" efi: rt-wrapper: Add missing include arm64: efi: Execute runtime services from a dedicated stack drm/amd/display: Fix COLOR_SPACE_YCBCR2020_TYPE matrix drm/amd/display: Calculate output_color_space after pixel encoding adjustment drm/amd/display: Fix set scaling doesn's work drm/i915: re-disable RC6p on Sandy Bridge mei: me: add meteor lake point M DID gsmi: fix null-deref in gsmi_get_variable serial: atmel: fix incorrect baudrate setup dmaengine: tegra210-adma: fix global intr clear serial: pch_uart: Pass correct sg to dma_unmap_sg() dt-bindings: phy: g12a-usb3-pcie-phy: fix compatible string documentation dt-bindings: phy: g12a-usb2-phy: fix compatible string documentation usb-storage: apply IGNORE_UAS only for HIKSEMI MD202 on RTL9210 usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate() usb: gadget: g_webcam: Send color matching descriptor per frame usb: typec: altmodes/displayport: Fix pin assignment calculation usb: typec: altmodes/displayport: Add pin assignment helper usb: host: ehci-fsl: Fix module alias USB: serial: cp210x: add SCALANCE LPE-9000 device id USB: gadgetfs: Fix race between mounting and unmounting tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer thunderbolt: Use correct function to calculate maximum USB3 link rate cifs: do not include page data when checking signature btrfs: fix race between quota rescan and disable leading to NULL pointer deref mmc: sdhci-esdhc-imx: correct the tuning start tap and step setting mmc: sunxi-mmc: Fix clock refcount imbalance during unbind comedi: adv_pci1760: Fix PWM instruction handling usb: core: hub: disable autosuspend for TI TUSB8041 misc: fastrpc: Fix use-after-free race condition for maps misc: fastrpc: Don't remove map on creater_process and device_release USB: misc: iowarrior: fix up header size for USB_DEVICE_ID_CODEMERCS_IOW100 staging: vchiq_arm: fix enum vchiq_status return types USB: serial: option: add Quectel EM05CN modem USB: serial: option: add Quectel EM05CN (SG) modem USB: serial: option: add Quectel EC200U modem USB: serial: option: add Quectel EM05-G (RS) modem USB: serial: option: add Quectel EM05-G (CS) modem USB: serial: option: add Quectel EM05-G (GR) modem prlimit: do_prlimit needs to have a speculation check xhci: Detect lpm incapable xHC USB3 roothub ports from ACPI tables usb: acpi: add helper to check port lpm capability using acpi _DSM xhci: Add a flag to disable USB3 lpm on a xhci root port level. xhci: Add update_hub_device override for PCI xHCI hosts xhci: Fix null pointer dereference when host dies usb: xhci: Check endpoint is valid before dereferencing it xhci-pci: set the dma max_seg_size io_uring/rw: defer fsnotify calls to task context io_uring: do not recalculate ppos unnecessarily io_uring: update kiocb->ki_pos at execution time io_uring: remove duplicated calls to io_kiocb_ppos io_uring: ensure that cached task references are always put on exit io_uring: fix CQ waiting timeout handling io_uring: lock overflowing for IOPOLL io_uring: check for valid register opcode earlier io_uring: fix async accept on O_NONBLOCK sockets io_uring: allow re-poll if we made progress io_uring: support MSG_WAITALL for IORING_OP_SEND(MSG) io_uring: add flag for disabling provided buffer recycling io_uring: ensure recv and recvmsg handle MSG_WAITALL correctly io_uring: improve send/recv error handling io_uring: don't gate task_work run on TIF_NOTIFY_SIGNAL Bluetooth: hci_qca: Fix driver shutdown on closed serdev Bluetooth: hci_qca: Wait for timeout during suspend drm/i915/gt: Reset twice ALSA: hda/realtek - Turn on power early efi: fix userspace infinite retry read efivars after EFI runtime services page fault nilfs2: fix general protection fault in nilfs_btree_insert() zonefs: Detect append writes at invalid locations Add exception protection processing for vd in axi_chan_handle_err function wifi: mac80211: sdata can be NULL during AMPDU start wifi: brcmfmac: fix regression for Broadcom PCIe wifi devices f2fs: let's avoid panic if extent_tree is not created x86/asm: Fix an assembler warning with current binutils btrfs: always report error in run_one_delayed_ref() RDMA/srp: Move large values to a new enum for gcc13 net/ethtool/ioctl: return -EOPNOTSUPP if we have no phy stats tools/virtio: initialize spinlocks in vring_test.c selftests/bpf: check null propagation only neither reg is PTR_TO_BTF_ID pNFS/filelayout: Fix coalescing test for single DS btrfs: fix trace event name typo for FLUSH_DELAYED_REFS Linux 5.10.164 Revert "usb: ulpi: defer ulpi_register on ulpi_read_id timeout" io_uring/io-wq: only free worker if it was allocated for creation io_uring/io-wq: free worker if task_work creation is canceled drm/virtio: Fix GEM handle creation UAF efi: fix NULL-deref in init error path arm64: cmpxchg_double*: hazard against entire exchange variable arm64: atomics: remove LL/SC trampolines arm64: atomics: format whitespace consistently x86/resctrl: Fix task CLOSID/RMID update race x86/resctrl: Use task_curr() instead of task_struct->on_cpu to prevent unnecessary IPI KVM: x86: Do not return host topology information from KVM_GET_SUPPORTED_CPUID Documentation: KVM: add API issues section iommu/mediatek-v1: Fix an error handling path in mtk_iommu_v1_probe() iommu/mediatek-v1: Add error handle for mtk_iommu_probe mm: Always release pages to the buddy allocator in memblock_free_late(). net/mlx5e: Don't support encap rules with gbp option net/mlx5: Fix ptp max frequency adjustment range net/sched: act_mpls: Fix warning during failed attribute validation nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame() hvc/xen: lock console list traversal octeontx2-af: Fix LMAC config in cgx_lmac_rx_tx_enable octeontx2-af: Map NIX block from CGX connection octeontx2-af: Update get/set resource count functions tipc: fix unexpected link reset due to discovery messages ASoC: wm8904: fix wrong outputs volume after power reactivation regulator: da9211: Use irq handler when ready EDAC/device: Fix period calculation in edac_device_reset_delay_period() x86/boot: Avoid using Intel mnemonics in AT&T syntax asm powerpc/imc-pmu: Fix use of mutex in IRQs disabled section netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function. xfrm: fix rcu lock in xfrm_notify_userpolicy() ext4: fix uninititialized value in 'ext4_evict_inode' usb: ulpi: defer ulpi_register on ulpi_read_id timeout xhci: Prevent infinite loop in transaction errors recovery for streams xhci: move and rename xhci_cleanup_halted_endpoint() xhci: store TD status in the td struct instead of passing it along xhci: move xhci_td_cleanup so it can be called by more functions xhci: Add xhci_reset_halted_ep() helper function xhci: adjust parameters passed to cleanup_halted_endpoint() xhci: get isochronous ring directly from endpoint structure xhci: Avoid parsing transfer events several times clk: imx: imx8mp: add shared clk gate for usb suspend clk dt-bindings: clocks: imx8mp: Add ID for usb suspend clock clk: imx8mp: add clkout1/2 support clk: imx8mp: Add DISP2 pixel clock iommu/amd: Fix ill-formed ivrs_ioapic, ivrs_hpet and ivrs_acpihid options iommu/amd: Add PCI segment support for ivrs_[ioapic/hpet/acpihid] commands bus: mhi: host: Fix race between channel preparation and M0 event ipv6: raw: Deduct extension header length in rawv6_push_pending_frames ixgbe: fix pci device refcount leak platform/x86: sony-laptop: Don't turn off 0x153 keyboard backlight during probe drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer drm/msm/adreno: Make adreno quirks not overwrite each other cifs: Fix uninitialized memory read for smb311 posix symlink create s390/percpu: add READ_ONCE() to arch_this_cpu_to_op_simple() s390/cpum_sf: add READ_ONCE() semantics to compare and swap loops ASoC: qcom: lpass-cpu: Fix fallback SD line index handling s390/kexec: fix ipl report address for kdump perf auxtrace: Fix address filter duplicate symbol selection docs: Fix the docs build with Sphinx 6.0 efi: tpm: Avoid READ_ONCE() for accessing the event log KVM: arm64: Fix S1PTW handling on RO memslots ALSA: hda/realtek: Enable mute/micmute LEDs on HP Spectre x360 13-aw0xxx netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits Linux 5.10.163 ALSA: hda - Enable headset mic on another Dell laptop with ALC3254 ALSA: hda/hdmi: Add a HP device 0x8715 to force connect list ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF net/ulp: prevent ULP without clone op from entering the LISTEN status net: sched: disallow noqueue for qdisc classes mptcp: use proper req destructor for IPv6 mptcp: dedicated request sock for subflow in v6 mptcp: remove MPTCP 'ifdef' in TCP SYN cookies mptcp: mark ops structures as ro_after_init serial: fixup backport of "serial: Deassert Transmit Enable on probe in driver-specific way" fsl_lpuart: Don't enable interrupts too early ext4: don't set up encryption key during jbd2 transaction ext4: disable fast-commit of encrypted dir operations parisc: Align parisc MADV_XXX constants with all other architectures io_uring: Fix unsigned 'res' comparison with zero in io_fixup_rw_res() efi: random: combine bootloader provided RNG seed with RNG protocol output mbcache: Avoid nesting of cache->c_list_lock under bit locks hfs/hfsplus: avoid WARN_ON() for sanity check, use proper error handling hfs/hfsplus: use WARN_ON for sanity check selftests: set the BUILD variable to absolute path ext4: don't allow journal inode to have encrypt flag drm/i915/gvt: fix vgpu debugfs clean in remove drm/i915/gvt: fix gvt debugfs destroy riscv: uaccess: fix type of 0 variable on error in get_user() fbdev: matroxfb: G200eW: Increase max memory from 1 MB to 16 MB nfsd: fix handling of readdir in v4root vs. mount upcall timeout x86/bugs: Flush IBP in ib_prctl_set() nvme: fix multipath crash caused by flush request when blktrace is enabled ASoC: Intel: bytcr_rt5640: Add quirk for the Advantech MICA-071 tablet udf: Fix extension of the last extent in the file caif: fix memory leak in cfctrl_linkup_request() drm/i915: unpin on error in intel_vgpu_shadow_mm_pin() usb: rndis_host: Secure rndis_query check against int overflow drivers/net/bonding/bond_3ad: return when there's no aggregator perf tools: Fix resources leak in perf_data__open_dir() netfilter: ipset: Rework long task execution when adding/deleting entries netfilter: ipset: fix hash:net,port,net hang with /0 subnet net: sched: cbq: dont intepret cls results when asked to drop net: sched: atm: dont intepret cls results when asked to drop gpio: sifive: Fix refcount leak in sifive_gpio_probe ceph: switch to vfs_inode_has_locks() to fix file lock bug filelock: new helper: vfs_inode_has_locks drm/meson: Reduce the FIFO lines held when AFBC is not used RDMA/mlx5: Fix validation of max_rd_atomic caps for DC net: phy: xgmiitorgmii: Fix refcount leak in xgmiitorgmii_probe net: amd-xgbe: add missed tasklet_kill net/mlx5e: Fix hw mtu initializing at XDP SQ allocation net/mlx5e: IPoIB, Don't allow CQE compression to be turned on by default net/mlx5: Avoid recovery in probe flows net/mlx5: Add forgotten cleanup calls into mlx5_init_once() error path vhost: fix range used in translate_desc() vringh: fix range used in iotlb_translate() vhost/vsock: Fix error handling in vhost_vsock_init() nfc: Fix potential resource leaks qlcnic: prevent ->dcb use-after-free on qlcnic_dcb_enable() failure net: sched: fix memory leak in tcindex_set_parms net: hns3: add interrupts re-initialization while doing VF FLR nfsd: shut down the NFSv4 state objects before the filecache veth: Fix race with AF_XDP exposing old or uninitialized descriptors vmxnet3: correctly report csum_level for encapsulated packet drm/panfrost: Fix GEM handle creation ref-counting bpf: pull before calling skb_postpull_rcsum() SUNRPC: ensure the matching upcall is in-flight upon downcall ext4: fix deadlock due to mbcache entry corruption mbcache: automatically delete entries from cache on freeing ext4: fix race when reusing xattr blocks ext4: unindent codeblock in ext4_xattr_block_set() ext4: remove EA inode entry from mbcache on inode eviction mbcache: add functions to delete entry if unused mbcache: don't reclaim used entries ext4: use kmemdup() to replace kmalloc + memcpy ext4: fix leaking uninitialized memory in fast-commit journal ext4: fix various seppling typos ext4: simplify ext4 error translation ext4: move functions in super.c fs: ext4: initialize fsdata in pagecache_write() ext4: use memcpy_to_page() in pagecache_write() mm/highmem: Lift memcpy_[to|from]_page to core ext4: correct inconsistent error msg in nojournal mode ext4: goto right label 'failed_mount3a' riscv: stacktrace: Fixup ftrace_graph_ret_addr retp argument riscv/stacktrace: Fix stack output without ra on the stack top ravb: Fix "failed to switch device to config mode" message during unbind staging: media: tegra-video: fix device_node use after free x86/kprobes: Fix optprobe optimization check with CONFIG_RETHUNK x86/kprobes: Convert to insn_decode() perf probe: Fix to get the DW_AT_decl_file and DW_AT_call_file as unsinged data perf probe: Use dwarf_attr_integrate as generic DWARF attr accessor media: s5p-mfc: Fix in register read and write for H264 media: s5p-mfc: Clear workbit to handle error condition media: s5p-mfc: Fix to handle reference queue during finishing x86/MCE/AMD: Clear DFR errors found in THR handler x86/mce: Get rid of msr_ops btrfs: replace strncpy() with strscpy() perf/x86/intel/uncore: Clear attr_update properly perf/x86/intel/uncore: Generalize I/O stacks to PMON mapping procedure ARM: renumber bits related to _TIF_WORK_MASK drm/amdgpu: make display pinning more flexible (v2) drm/amdgpu: handle polaris10/11 overlap asics (v2) ext4: allocate extended attribute value in vmalloc area ext4: avoid unaccounted block allocation when expanding inode ext4: initialize quota before expanding inode in setproject ioctl ext4: fix inode leak in ext4_xattr_inode_create() on an error path ext4: avoid BUG_ON when creating xattrs ext4: fix error code return to user-space in ext4_get_branch() ext4: fix corruption when online resizing a 1K bigalloc fs ext4: fix delayed allocation bug in ext4_clu_mapped for bigalloc + inline ext4: init quota for 'old.inode' in 'ext4_rename' ext4: fix bug_on in __es_tree_search caused by bad boot loader inode ext4: check and assert if marking an no_delete evicting inode dirty ext4: fix reserved cluster accounting in __es_remove_extent() ext4: fix bug_on in __es_tree_search caused by bad quota inode ext4: add helper to check quota inums ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inode ext4: fix undefined behavior in bit shift for ext4_check_flag_values ext4: fix use-after-free in ext4_orphan_cleanup ext4: add inode table check in __ext4_get_inode_loc to aovid possible infinite loop ext4: silence the warning when evicting inode with dioread_nolock drm/ingenic: Fix missing platform_driver_unregister() call in ingenic_drm_init() drm/i915/dsi: fix VBT send packet port selection for dual link DSI drm/vmwgfx: Validate the box size for the snooped cursor drm/connector: send hotplug uevent on connector cleanup device_cgroup: Roll back to original exceptions after copy failure parisc: led: Fix potential null-ptr-deref in start_task() remoteproc: core: Do pm_relax when in RPROC_OFFLINE state iommu/amd: Fix ivrs_acpihid cmdline parsing code driver core: Fix bus_type.match() error handling in __driver_attach() crypto: n2 - add missing hash statesize PCI/sysfs: Fix double free in error path PCI: Fix pci_device_is_present() for VFs by checking PF ipmi: fix use after free in _ipmi_destroy_user() ima: Fix a potential NULL pointer access in ima_restore_measurement_list mtd: spi-nor: Check for zero erase size in spi_nor_find_best_erase_type() ipmi: fix long wait in unload when IPMI disconnect ASoC: jz4740-i2s: Handle independent FIFO flush bits wifi: wilc1000: sdio: fix module autoloading efi: Add iMac Pro 2017 to uefi skip cert quirk md/bitmap: Fix bitmap chunk size overflow issues rtc: ds1347: fix value written to century register cifs: fix missing display of three mount options cifs: fix confusing debug message media: dvb-core: Fix UAF due to refcount races at releasing media: dvb-core: Fix double free in dvb_register_device() ARM: 9256/1: NWFPE: avoid compiler-generated __aeabi_uldivmod staging: media: tegra-video: fix chan->mipi value on error tracing: Fix infinite loop in tracing_read_pipe on overflowed print_trace_line tracing/hist: Fix wrong return value in parse_action_params() x86/kprobes: Fix kprobes instruction boudary check with CONFIG_RETHUNK ftrace/x86: Add back ftrace_expected for ftrace bug reports x86/microcode/intel: Do not retry microcode reloading on the APs KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails perf/core: Call LSM hook after copying perf_event_attr tracing/hist: Fix out-of-bound write on 'action_data.var_ref_idx' dm cache: set needs_check flag after aborting metadata dm cache: Fix UAF in destroy() dm clone: Fix UAF in clone_dtr() dm integrity: Fix UAF in dm_integrity_dtr() dm thin: Fix UAF in run_timer_softirq() dm thin: resume even if in FAIL mode dm thin: Use last transaction's pmd->root when commit failed dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata dm cache: Fix ABBA deadlock between shrink_slab and dm_cache_metadata_abort ALSA: hda/realtek: Apply dual codec fixup for Dell Latitude laptops ALSA: patch_realtek: Fix Dell Inspiron Plus 16 cpufreq: Init completion before kobject_init_and_add() PM/devfreq: governor: Add a private governor_data for governor selftests: Use optional USERCFLAGS and USERLDFLAGS arm64: dts: qcom: sdm850-lenovo-yoga-c630: correct I2C12 pins drive strength ARM: ux500: do not directly dereference __iomem btrfs: fix resolving backrefs for inline extent followed by prealloc mmc: sdhci-sprd: Disable CLK_AUTO when the clock is less than 400K arm64: dts: qcom: sdm845-db845c: correct SPI2 pins drive strength jbd2: use the correct print format ktest.pl minconfig: Unset configs instead of just removing them kest.pl: Fix grub2 menu handling for rebooting soc: qcom: Select REMAP_MMIO for LLCC driver media: stv0288: use explicitly signed char net/af_packet: make sure to pull mac header net/af_packet: add VLAN support for AF_PACKET SOCK_RAW GSO rcu: Prevent lockdep-RCU splats on lock acquisition/release torture: Exclude "NOHZ tick-stop error" from fatal errors wifi: rtlwifi: 8192de: correct checking of IQK reload wifi: rtlwifi: remove always-true condition pointed out by GCC 12 net/mlx5e: Fix nullptr in mlx5e_tc_add_fdb_flow() ASoC/SoundWire: dai: expand 'stream' concept beyond SoundWire ASoC: Intel/SOF: use set_stream() instead of set_tdm_slots() for HDAudio kcsan: Instrument memcpy/memset/memmove with newer Clang SUNRPC: Don't leak netobj memory when gss_read_proxy_verf() fails tpm: tpm_tis: Add the missed acpi_put_table() to fix memory leak tpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak tpm: acpi: Call acpi_put_table() to fix memory leak mmc: vub300: fix warning - do not call blocking ops when !TASK_RUNNING f2fs: should put a page when checking the summary info mm, compaction: fix fast_isolate_around() to stay within boundaries md: fix a crash in mempool_free pnode: terminate at peers of source ALSA: line6: fix stack overflow in line6_midi_transmit ALSA: line6: correct midi status byte when receiving data from podxt ovl: Use ovl mounter's fsuid and fsgid in ovl_link() binfmt: Fix error return code in load_elf_fdpic_binary() hfsplus: fix bug causing custom uid and gid being unable to be assigned with mount pstore/zone: Use GFP_ATOMIC to allocate zone buffer HID: plantronics: Additional PIDs for double volume key presses quirk HID: multitouch: fix Asus ExpertBook P2 P2451FA trackpoint powerpc/rtas: avoid scheduling in rtas_os_term() powerpc/rtas: avoid device tree lookups in rtas_os_term() objtool: Fix SEGFAULT nvmet: don't defer passthrough commands with trivial effects to the workqueue nvme: fix the NVME_CMD_EFFECTS_CSE_MASK definition ata: ahci: Fix PCS quirk application for suspend nvme-pci: fix page size checks nvme-pci: fix mempool alloc size nvme-pci: fix doorbell buffer value endianness cifs: fix oops during encryption usb: dwc3: qcom: Fix memory leak in dwc3_qcom_interconnect_init pwm: tegra: Fix 32 bit build media: dvbdev: fix refcnt bug media: dvbdev: fix build warning due to comments ovl: fix use inode directly in rcu-walk mode gcov: add support for checksum field regulator: core: fix deadlock on regulator enable iio: adc128s052: add proper .data members in adc128_of_match table iio: adc: ad_sigma_delta: do not use internal iio_dev lock reiserfs: Add missing calls to reiserfs_security_free() HID: mcp2221: don't connect hidraw HID: wacom: Ensure bootloader PID is usable in hidraw mode usb: dwc3: core: defer probe on ulpi_read_id timeout usb: dwc3: Fix race between dwc3_set_mode and __dwc3_set_mode ALSA: hda/hdmi: Add HP Device 0x8711 to force connect list ALSA: hda/realtek: Add quirk for Lenovo TianYi510Pro-14IOB ALSA: usb-audio: add the quirk for KT0206 device ima: Simplify ima_lsm_copy_rule pstore: Make sure CONFIG_PSTORE_PMSG selects CONFIG_RT_MUTEXES afs: Fix lost servers_outstanding count perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() pstore: Switch pmsg_lock to an rt_mutex to avoid priority inversion LoadPin: Ignore the "contents" argument of the LSM hooks ASoC: rt5670: Remove unbalanced pm_runtime_put() ASoC: rockchip: spdif: Add missing clk_disable_unprepare() in rk_spdif_runtime_resume() ASoC: wm8994: Fix potential deadlock ASoC: rockchip: pdm: Add missing clk_disable_unprepare() in rockchip_pdm_runtime_resume() ASoC: audio-graph-card: fix refcount leak of cpu_ep in __graph_for_each_link() ASoC: mediatek: mt8173-rt5650-rt5514: fix refcount leak in mt8173_rt5650_rt5514_dev_probe() ASoC: Intel: Skylake: Fix driver hang during shutdown ALSA: hda: add snd_hdac_stop_streams() helper ALSA/ASoC: hda: move/rename snd_hdac_ext_stop_streams to hdac_stream.c hwmon: (jc42) Fix missing unlock on error in jc42_write() orangefs: Fix kmemleak in orangefs_{kernel,client}_debug_init() orangefs: Fix kmemleak in orangefs_prepare_debugfs_help_string() drm/sti: Fix return type of sti_{dvo,hda,hdmi}_connector_mode_valid() drm/fsl-dcu: Fix return type of fsl_dcu_drm_connector_mode_valid() hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param() clk: st: Fix memory leak in st_of_quadfs_setup() media: si470x: Fix use-after-free in si470x_int_in_callback() mmc: renesas_sdhi: better reset from HS400 mode mmc: f-sdh30: Add quirks for broken timeout clock capability regulator: core: fix use_count leakage when handling boot-on libbpf: Avoid enum forward-declarations in public API in C++ mode blk-mq: fix possible memleak when register 'hctx' failed media: dvb-usb: fix memory leak in dvb_usb_adapter_init() media: dvbdev: adopts refcnt to avoid UAF media: dvb-frontends: fix leak of memory fw ethtool: avoiding integer overflow in ethtool_phys_id() bpf: Prevent decl_tag from being referenced in func_proto arg ppp: associate skb with a device at tx mrp: introduce active flags to prevent UAF when applicant uninit net: add atomic_long_t to net_device_stats fields drm/amd/display: fix array index out of bound error in bios parser md/raid1: stop mdx_raid1 thread when raid1 array run failed drivers/md/md-bitmap: check the return value of md_bitmap_get_counter() drm/sti: Use drm_mode_copy() drm/rockchip: Use drm_mode_copy() drm/msm: Use drm_mode_copy() s390/lcs: Fix return type of lcs_start_xmit() s390/netiucv: Fix return type of netiucv_tx() s390/ctcm: Fix return type of ctc{mp,}m_tx() drm/amdgpu: Fix type of second parameter in odn_edit_dpm_table() callback drm/amdgpu: Fix type of second parameter in trans_msg() callback igb: Do not free q_vector unless new one was allocated wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmf_fw_alloc_request() hamradio: baycom_epp: Fix return type of baycom_send_packet() net: ethernet: ti: Fix return type of netcp_ndo_start_xmit() bpf: make sure skb->len != 0 when redirecting to a tunneling device qed (gcc13): use u16 for fid to be big enough drm/amd/display: prevent memory leak ipmi: fix memleak when unload ipmi driver ASoC: codecs: rt298: Add quirk for KBL-R RVP platform wifi: ar5523: Fix use-after-free on ar5523_cmd() timed out wifi: ath9k: verify the expected usb_endpoints are present brcmfmac: return error when getting invalid max_flowrings from dongle drm/etnaviv: add missing quirks for GC300 hfs: fix OOB Read in __hfs_brec_find acct: fix potential integer overflow in encode_comp_t() nilfs2: fix shift-out-of-bounds due to too large exponent of block size nilfs2: fix shift-out-of-bounds/overflow in nilfs_sb2_bad_offset() ACPICA: Fix error code path in acpi_ds_call_control_method() fs: jfs: fix shift-out-of-bounds in dbDiscardAG udf: Avoid double brelse() in udf_rename() fs: jfs: fix shift-out-of-bounds in dbAllocAG binfmt_misc: fix shift-out-of-bounds in check_special_flags x86/hyperv: Remove unregister syscore call from Hyper-V cleanup video: hyperv_fb: Avoid taking busy spinlock on panic path arm64: make is_ttbrX_addr() noinstr-safe rcu: Fix __this_cpu_read() lockdep warning in rcu_force_quiescent_state() net: stream: purge sk_error_queue in sk_stream_kill_queues() myri10ge: Fix an error handling path in myri10ge_probe() rxrpc: Fix missing unlock in rxrpc_do_sendmsg() net_sched: reject TCF_EM_SIMPLE case for complex ematch module mailbox: zynq-ipi: fix error handling while device_register() fails skbuff: Account for tail adjustment during pull operations openvswitch: Fix flow lookup to use unmasked key selftests: devlink: fix the fd redirect in dummy_reporter_test rtc: mxc_v2: Add missing clk_disable_unprepare() igc: Set Qbv start_time and end_time to end_time if not being configured in GCL igc: Lift TAPRIO schedule restriction igc: recalculate Qbv end_time by considering cycle time igc: Add checking for basetime less than zero igc: Use strict cycles for Qbv scheduling igc: Enhance Qbv scheduling by using first flag bit net: add a helper to avoid issues with HW TX timestamping and SO_TXTIME net: igc: use skb_csum_is_sctp instead of protocol check net: add inline function skb_csum_is_sctp net: switch to storing KCOV handle directly in sk_buff r6040: Fix kmemleak in probe and remove nfc: pn533: Clear nfc_target before being used mISDN: hfcmulti: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() mISDN: hfcpci: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() mISDN: hfcsusb: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() net: macsec: fix net device access prior to holding a lock nfsd: under NFSv4.1, fix double svc_xprt_put on rpc_create failure NFSD: Remove spurious cb_setup_err tracepoint rtc: pcf85063: fix pcf85063_clkout_control rtc: pic32: Move devm_rtc_allocate_device earlier in pic32_rtc_probe() rtc: st-lpc: Add missing clk_disable_unprepare in st_rtc_probe() netfilter: flowtable: really fix NAT IPv6 offload powerpc/pseries/eeh: use correct API for error log size powerpc/eeh: Drop redundant spinlock initialization remoteproc: qcom_q6v5_pas: Fix missing of_node_put() in adsp_alloc_memory_region() remoteproc: qcom_q6v5_pas: detach power domains on remove remoteproc: qcom_q6v5_pas: disable wakeup on probe fail or remove remoteproc: sysmon: fix memory leak in qcom_add_sysmon_subdev() pwm: sifive: Call pwm_sifive_update_clock() while mutex is held iommu/sun50i: Remove IOMMU_DOMAIN_IDENTITY selftests/powerpc: Fix resource leaks powerpc/hv-gpci: Fix hv_gpci event list powerpc/83xx/mpc832x_rdb: call platform_device_put() in error case in of_fsl_spi_probe() powerpc/perf: callchain validate kernel stack pointer bounds kbuild: refactor single builds of *.ko kbuild: unify modules(_install) for in-tree and external modules kbuild: remove unneeded mkdir for external modules_install powerpc/xive: add missing iounmap() in error path in xive_spapr_populate_irq_data() powerpc/xmon: Fix -Wswitch-unreachable warning in bpt_cmds powerpc/xmon: Enable breakpoints on 8xx cxl: Fix refcount leak in cxl_calc_capp_routing powerpc/52xx: Fix a resource leak in an error handling path macintosh/macio-adb: check the return value of ioremap() macintosh: fix possible memory leak in macio_add_one_device() iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe() iommu/amd: Fix pci device refcount leak in ppr_notifier() rtc: pcf85063: Fix reading alarm rtc: snvs: Allow a time difference on clock register read rtc: cmos: Disable ACPI RTC event on removal rtc: cmos: Rename ACPI-related functions rtc: cmos: Eliminate forward declarations of some functions rtc: cmos: Call rtc_wake_setup() from cmos_do_probe() rtc: cmos: Call cmos_wake_setup() from cmos_do_probe() rtc: cmos: fix build on non-ACPI platforms rtc: cmos: Fix wake alarm breakage rtc: cmos: Fix event handler registration ordering issue rtc: rtc-cmos: Do not check ACPI_FADT_LOW_POWER_S0 dmaengine: idxd: Fix crc_val field for completion record pwm: tegra: Improve required rate calculation include/uapi/linux/swab: Fix potentially missing __always_inline phy: usb: s2 WoL wakeup_count not incremented for USB->Eth devices iommu/sun50i: Fix flush size iommu/sun50i: Fix R/W permission check iommu/sun50i: Consider all fault sources for reset iommu/sun50i: Fix reset release RDMA/siw: Fix pointer cast warning power: supply: fix null pointer dereferencing in power_supply_get_battery_info HSI: omap_ssi_core: Fix error handling in ssi_init() perf symbol: correction while adjusting symbol perf trace: Handle failure when trace point folder is missed perf trace: Use macro RAW_SYSCALL_ARGS_NUM to replace number perf trace: Return error if a system call doesn't exist power: supply: fix residue sysfs file in error handle route of __power_supply_register() HSI: omap_ssi_core: fix possible memory leak in ssi_probe() HSI: omap_ssi_core: fix unbalanced pm_runtime_disable() fbdev: uvesafb: Fixes an error handling path in uvesafb_probe() fbdev: vermilion: decrease reference count in error path fbdev: via: Fix error in via_core_init() fbdev: pm2fb: fix missing pci_disable_device() fbdev: ssd1307fb: Drop optional dependency thermal/drivers/imx8mm_thermal: Validate temperature range samples: vfio-mdev: Fix missing pci_disable_device() in mdpy_fb_probe() tracing/hist: Fix issue of losting command info in error_log usb: storage: Add check for kcalloc i2c: ismt: Fix an out-of-bounds bug in ismt_access() i2c: mux: reg: check return value after calling platform_get_resource() gpiolib: cdev: fix NULL-pointer dereferences gpiolib: Get rid of redundant 'else' vme: Fix error not catched in fake_init() staging: rtl8192e: Fix potential use-after-free in rtllib_rx_Monitor() staging: rtl8192u: Fix use after free in ieee80211_rx() i2c: pxa-pci: fix missing pci_disable_device() on error in ce4100_i2c_probe chardev: fix error handling in cdev_device_add() mcb: mcb-parse: fix error handing in chameleon_parse_gdd() drivers: mcb: fix resource leak in mcb_probe() usb: gadget: f_hid: fix refcount leak on error path usb: gadget: f_hid: fix f_hidg lifetime vs cdev usb: gadget: f_hid: optional SETUP/SET_REPORT mode usb: roles: fix of node refcount leak in usb_role_switch_is_parent() counter: stm32-lptimer-cnt: fix the check on arr and cmp registers update iio: adis: add '__adis_enable_irq()' implementation iio:imu:adis: Move exports into IIO_ADISLIB namespace iio: adis: stylistic changes iio: adis: handle devices that cannot unmask the drdy pin iio:imu:adis: Use IRQF_NO_AUTOEN instead of irq request then disable genirq: Add IRQF_NO_AUTOEN for request_irq/nmi() iio: temperature: ltc2983: make bulk write buffer DMA-safe cxl: fix possible null-ptr-deref in cxl_pci_init_afu|adapter() cxl: fix possible null-ptr-deref in cxl_guest_init_afu|adapter() firmware: raspberrypi: fix possible memory leak in rpi_firmware_probe() misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os misc: tifm: fix possible memory leak in tifm_7xx1_switch_media() ocxl: fix pci device refcount leak when calling get_function_0() misc: ocxl: fix possible name leak in ocxl_file_register_afu() test_firmware: fix memory leak in test_firmware_init() serial: sunsab: Fix error handling in sunsab_init() serial: altera_uart: fix locking in polling mode tty: serial: altera_uart_{r,t}x_chars() need only uart_port tty: serial: clean up stop-tx part in altera_uart_tx_chars() serial: pch: Fix PCI device refcount leak in pch_request_dma() serial: pl011: Do not clear RX FIFO & RX interrupt in unthrottle. serial: amba-pl011: avoid SBSA UART accessing DMACR register usb: typec: tipd: Fix spurious fwnode_handle_put in error path usb: typec: tcpci: fix of node refcount leak in tcpci_register_port() usb: typec: Check for ops->exit instead of ops->enter in altmode_exit staging: vme_user: Fix possible UAF in tsi148_dma_list_add usb: fotg210-udc: Fix ages old endianness issues uio: uio_dmem_genirq: Fix deadlock between irq config and handling uio: uio_dmem_genirq: Fix missing unlock in irq configuration vfio: platform: Do not pass return buffer to ACPI _RST method class: fix possible memory leak in __class_register() serial: tegra: Read DMA status before terminating drivers: dio: fix possible memory leak in dio_init() IB/IPoIB: Fix queue count inconsistency for PKEY child interfaces hwrng: geode - Fix PCI device refcount leak hwrng: amd - Fix PCI device refcount leak crypto: img-hash - Fix variable dereferenced before check 'hdev->req' RDMA/hns: Fix page size cap from firmware RDMA/hns: Fix PBL page MTR find orangefs: Fix sysfs not cleanup when dev init failed RDMA/srp: Fix error return code in srp_parse_options() RDMA/hfi1: Fix error return code in parse_platform_config() riscv/mm: add arch hook arch_clear_hugepage_flags crypto: omap-sham - Use pm_runtime_resume_and_get() in omap_sham_probe() crypto: amlogic - Remove kcalloc without check RDMA/nldev: Fix failure to send large messages f2fs: avoid victim selection from previous victim section RDMA/nldev: Add checks for nla_nest_start() in fill_stat_counter_qps() scsi: snic: Fix possible UAF in snic_tgt_create() scsi: fcoe: Fix transport not deattached when fcoe_if_init() fails scsi: ipr: Fix WARNING in ipr_init() scsi: scsi_debug: Fix possible name leak in sdebug_add_host_helper() scsi: fcoe: Fix possible name leak when device_register() fails scsi: scsi_debug: Fix a warning in resp_report_zones() scsi: scsi_debug: Fix a warning in resp_verify() scsi: hpsa: Fix possible memory leak in hpsa_add_sas_device() scsi: hpsa: Fix error handling in hpsa_add_sas_host() scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add() padata: Fix list iterator in padata_do_serial() padata: Always leave BHs disabled when running ->parallel() crypto: tcrypt - Fix multibuffer skcipher speed test mem leak scsi: hpsa: Fix possible memory leak in hpsa_init_one() RDMA/rxe: Fix NULL-ptr-deref in rxe_qp_do_cleanup() when socket create failed RDMA/hns: fix memory leak in hns_roce_alloc_mr() crypto: ccree - Make cc_debugfs_global_fini() available for module init function RDMA/hfi: Decrease PCI device reference count in error path PCI: Check for alloc failure in pci_request_irq() RDMA/hns: Fix ext_sge num error when post send RDMA/hns: Repacing 'dseg_len' by macros in fill_ext_sge_inl_data() crypto: hisilicon/qm - add missing pci_dev_put() in q_num_set() crypto: cryptd - Use request context instead of stack for sub-request crypto: ccree - Remove debugfs when platform_driver_register failed scsi: scsi_debug: Fix a warning in resp_write_scat() RDMA/siw: Set defined status for work completion with undefined status RDMA/nldev: Return "-EAGAIN" if the cm_id isn't from expected port RDMA/siw: Fix immediate work request flush to completion queue f2fs: fix normal discard process apparmor: Fix memleak in alloc_ns() crypto: rockchip - rework by using crypto_engine crypto: rockchip - delete unneeded variable initialization crypto: rockchip - remove non-aligned handling crypto: rockchip - better handle cipher key crypto: rockchip - add fallback for ahash crypto: rockchip - add fallback for cipher crypto: rockchip - do not store mode globally crypto: rockchip - do not do custom power management f2fs: Fix the race condition of resize flag between resizefs PCI: pci-epf-test: Register notifier if only core_init_notifier is enabled RDMA/core: Fix order of nldev_exit call PCI: dwc: Fix n_fts[] array overrun apparmor: Use pointer to struct aa_label for lbs_cred scsi: core: Fix a race between scsi_done() and scsi_timeout() crypto: nitrox - avoid double free on error path in nitrox_sriov_init() crypto: sun8i-ss - use dma_addr instead u32 apparmor: Fix abi check to include v8 abi apparmor: fix lockdep warning when removing a namespace apparmor: fix a memleak in multi_transaction_new() stmmac: fix potential division by 0 Bluetooth: RFCOMM: don't call kfree_skb() under spin_lock_irqsave() Bluetooth: hci_core: don't call kfree_skb() under spin_lock_irqsave() Bluetooth: hci_bcsp: don't call kfree_skb() under spin_lock_irqsave() Bluetooth: hci_h5: don't call kfree_skb() under spin_lock_irqsave() Bluetooth: hci_ll: don't call kfree_skb() under spin_lock_irqsave() Bluetooth: hci_qca: don't call kfree_skb() under spin_lock_irqsave() Bluetooth: btusb: don't call kfree_skb() under spin_lock_irqsave() sctp: sysctl: make extra pointers netns aware ntb_netdev: Use dev_kfree_skb_any() in interrupt context net: lan9303: Fix read error execution path can: tcan4x5x: Remove invalid write in clear_interrupts net: amd-xgbe: Check only the minimum speed for active/passive cables net: amd-xgbe: Fix logic around active and passive cables net: amd: lance: don't call dev_kfree_skb() under spin_lock_irqsave() hamradio: don't call dev_kfree_skb() under spin_lock_irqsave() net: ethernet: dnet: don't call dev_kfree_skb() under spin_lock_irqsave() net: emaclite: don't call dev_kfree_skb() under spin_lock_irqsave() net: apple: bmac: don't call dev_kfree_skb() under spin_lock_irqsave() net: apple: mace: don't call dev_kfree_skb() under spin_lock_irqsave() net/tunnel: wait until all sk_user_data reader finish before releasing the sock net: farsync: Fix kmemleak when rmmods farsync ethernet: s2io: don't call dev_kfree_skb() under spin_lock_irqsave() of: overlay: fix null pointer dereferencing in find_dup_cset_node_entry() and find_dup_cset_prop() drivers: net: qlcnic: Fix potential memory leak in qlcnic_sriov_init() net: stmmac: selftests: fix potential memleak in stmmac_test_arpoffload() net: defxx: Fix missing err handling in dfx_init() net: vmw_vsock: vmci: Check memcpy_from_msg() clk: socfpga: Fix memory leak in socfpga_gate_init() clk: socfpga: use clk_hw_register for a5/c5 clk: socfpga: clk-pll: Remove unused variable 'rc' blktrace: Fix output non-blktrace event when blk_classic option enabled wifi: brcmfmac: Fix error return code in brcmf_sdio_download_firmware() wifi: rtl8xxxu: Fix the channel width reporting wifi: rtl8xxxu: Add __packed to struct rtl8723bu_c2h spi: spi-gpio: Don't set MOSI as an input if not 3WIRE mode clk: samsung: Fix memory leak in _samsung_clk_register_pll() media: coda: Add check for kmalloc media: coda: Add check for dcoda_iram_alloc media: c8sectpfe: Add of_node_put() when breaking out of loop mmc: mmci: fix return value check of mmc_add_host() mmc: wbsd: fix return value check of mmc_add_host() mmc: via-sdmmc: fix return value check of mmc_add_host() mmc: meson-gx: fix return value check of mmc_add_host() mmc: omap_hsmmc: fix return value check of mmc_add_host() mmc: atmel-mci: fix return value check of mmc_add_host() mmc: wmt-sdmmc: fix return value check of mmc_add_host() mmc: vub300: fix return value check of mmc_add_host() mmc: toshsd: fix return value check of mmc_add_host() mmc: rtsx_usb_sdmmc: fix return value check of mmc_add_host() mmc: pxamci: fix return value check of mmc_add_host() mmc: mxcmmc: fix return value check of mmc_add_host() mmc: moxart: fix return value check of mmc_add_host() mmc: alcor: fix return value check of mmc_add_host() NFSv4.x: Fail client initialisation if state manager thread can't run SUNRPC: Fix missing release socket in rpc_sockname() xprtrdma: Fix regbuf data not freed in rpcrdma_req_create() ALSA: mts64: fix possible null-ptr-defer in snd_mts64_interrupt media: saa7164: fix missing pci_disable_device() ALSA: pcm: Set missing stop_operating flag at undoing trigger start bpf, sockmap: fix race in sock_map_free() hwmon: (jc42) Restore the min/max/critical temperatures on resume hwmon: (jc42) Convert register access and caching to regmap/regcache regulator: core: fix resource leak in regulator_register() configfs: fix possible memory leak in configfs_create_dir() hsr: Synchronize sequence number updates. hsr: Synchronize sending frames to have always incremented outgoing seq nr. hsr: Disable netpoll. net: hsr: generate supervision frame without HSR/PRP tag hsr: Add a rcu-read lock to hsr_forward_skb(). clk: qcom: clk-krait: fix wrong div2 functions regulator: core: fix module refcount leak in set_supply() wifi: mt76: fix coverity overrun-call in mt76_get_txpower() wifi: cfg80211: Fix not unregister reg_pdev when load_builtin_regdb_keys() fails wifi: mac80211: fix memory leak in ieee80211_if_add() spi: spidev: mask SPI_CS_HIGH in SPI_IOC_RD_MODE bonding: uninitialized variable in bond_miimon_inspect() bpf, sockmap: Fix data loss caused by using apply_bytes on ingress redirect bpf, sockmap: Fix repeated calls to sock_put() when msg has more_data netfilter: conntrack: set icmpv6 redirects as RELATED ASoC: pcm512x: Fix PM disable depth imbalance in pcm512x_probe drm/amdgpu: Fix PCI device refcount leak in amdgpu_atrm_get_bios() drm/radeon: Fix PCI device refcount leak in radeon_atrm_get_bios() drm/amd/pm/smu11: BACO is supported when it's in BACO state ASoC: mediatek: mt8173: Enable IRQ when pdata is ready ASoC: mediatek: mt8173: Fix debugfs registration for components wifi: iwlwifi: mvm: fix double free on tx path. ALSA: asihpi: fix missing pci_disable_device() NFS: Fix an Oops in nfs_d_automount() NFSv4: Fix a deadlock between nfs4_open_recover_helper() and delegreturn NFSv4.2: Fix initialisation of struct nfs4_label NFSv4.2: Fix a memory stomp in decode_attr_security_label NFSv4.2: Clear FATTR4_WORD2_SECURITY_LABEL when done decoding ASoC: mediatek: mtk-btcvsd: Add checks for write and read of mtk_btcvsd_snd ASoC: dt-bindings: wcd9335: fix reset line polarity in example drm/tegra: Add missing clk_disable_unprepare() in tegra_dc_probe() media: s5p-mfc: Add variant data for MFC v7 hardware for Exynos 3250 SoC media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() media: dvb-core: Fix ignored return value in dvb_register_frontend() pinctrl: pinconf-generic: add missing of_node_put() clk: imx: replace osc_hdmi with dummy media: imon: fix a race condition in send_packet() media: vimc: Fix wrong function called when vimc_init() fails ASoC: qcom: Add checks for devm_kcalloc drbd: fix an invalid memory access caused by incorrect use of list iterator mtd: maps: pxa2xx-flash: fix memory leak in probe bonding: fix link recovery in mode 2 when updelay is nonzero drm/amdgpu: fix pci device refcount leak clk: rockchip: Fix memory leak in rockchip_clk_register_pll() regulator: core: use kfree_const() to free space conditionally ALSA: seq: fix undefined behavior in bit shift for SNDRV_SEQ_FILTER_USE_EVENT ALSA: pcm: fix undefined behavior in bit shift for SNDRV_PCM_RATE_KNOT HID: hid-sensor-custom: set fixed size for custom attributes bpf: Move skb->len == 0 checks into __bpf_redirect inet: add READ_ONCE(sk->sk_bound_dev_if) in inet_csk_bind_conflict() media: videobuf-dma-contig: use dma_mmap_coherent media: platform: exynos4-is: Fix error handling in fimc_md_init() media: solo6x10: fix possible memory leak in solo_sysfs_init() media: vidtv: Fix use-after-free in vidtv_bridge_dvb_init() Input: elants_i2c - properly handle the reset GPIO when power is off mtd: lpddr2_nvm: Fix possible null-ptr-deref wifi: ath10k: Fix return value in ath10k_pci_init() ima: Fix misuse of dereference of pointer in template_desc_init_fields() integrity: Fix memory leakage in keyring allocation error path drm/fourcc: Fix vsub/hsub for Q410 and Q401 drm/fourcc: Add packed 10bit YUV 4:2:0 format amdgpu/pm: prevent array underflow in vega20_odn_edit_dpm_table() regulator: core: fix unbalanced of node refcount in regulator_dev_lookup() ASoC: pxa: fix null-pointer dereference in filter() drm/mediatek: Modify dpi power on/off sequence. drm/radeon: Add the missed acpi_put_table() to fix memory leak rxrpc: Fix ack.bufferSize to be 0 when generating an ack net, proc: Provide PROC_FS=n fallback for proc_create_net_single_write() media: camss: Clean up received buffers on failed start of streaming wifi: rsi: Fix handling of 802.3 EAPOL frames sent via control port Input: joystick - fix Kconfig warning for JOYSTICK_ADC mtd: Fix device name leak when register device failed in add_mtd_device() clk: qcom: gcc-sm8250: Use retention mode for USB GDSCs bpf: propagate precision across all frames, not just the last one bpf: Check the other end of slot_type for STACK_SPILL bpf: propagate precision in ALU/ALU64 operations media: platform: exynos4-is: fix return value check in fimc_md_probe() media: vivid: fix compose size exceed boundary bpf: Fix slot type check in check_stack_write_var_off drm/msm/hdmi: drop unused GPIO support drm/msm/hdmi: switch to drm_bridge_connector ima: Handle -ESTALE returned by ima_filter_rule_match() ima: Fix fall-through warnings for Clang drm/panel/panel-sitronix-st7701: Remove panel on DSI attach failure spi: Update reference to struct spi_controller clk: renesas: r9a06g032: Repair grave increment error drm/rockchip: lvds: fix PM usage counter unbalance in poweron can: kvaser_usb: Compare requested bittiming parameters with actual parameters in do_set_{,data}_bittiming can: kvaser_usb: Add struct kvaser_usb_busparams can: kvaser_usb_leaf: Fix bogus restart events can: kvaser_usb_leaf: Fix wrong CAN state after stopping can: kvaser_usb_leaf: Fix improved state not being reported can: kvaser_usb_leaf: Set Warning state even without bus errors can: kvaser_usb: kvaser_usb_leaf: Handle CMD_ERROR_EVENT can: kvaser_usb: kvaser_usb_leaf: Rename {leaf,usbcan}_cmd_error_event to {leaf,usbcan}_cmd_can_error_event can: kvaser_usb: kvaser_usb_leaf: Get capabilities from device can: kvaser_usb: do not increase tx statistics when sending error message frames media: exynos4-is: don't rely on the v4l2_async_subdev internals media: exynos4-is: Use v4l2_async_notifier_add_fwnode_remote_subdev venus: pm_helpers: Fix error check in vcodec_domains_get() media: i2c: ad5820: Fix error path media: coda: jpeg: Add check for kmalloc pata_ipx4xx_cf: Fix unsigned comparison with less than zero libbpf: Fix null-pointer dereference in find_prog_by_sec_insn() libbpf: Fix use-after-free in btf_dump_name_dups drm/bridge: adv7533: remove dynamic lane switching from adv7533 bridge wifi: rtl8xxxu: Fix reading the vendor of combo chips wifi: ath9k: hif_usb: Fix use-after-free in ath9k_hif_usb_reg_in_cb() wifi: ath9k: hif_usb: fix memory leak of urbs in ath9k_hif_usb_dealloc_tx_urbs() rapidio: devices: fix missing put_device in mport_cdev_open hfs: Fix OOB Write in hfs_asc2mac relay: fix type mismatch when allocating memory in relay_create_buf() eventfd: change int to __u64 in eventfd_signal() ifndef CONFIG_EVENTFD rapidio: fix possible UAF when kfifo_alloc() fails fs: sysv: Fix sysv_nblocks() returns wrong value MIPS: OCTEON: warn only once if deprecated link status is being used MIPS: BCM63xx: Add check for NULL for clk in clk_enable platform/x86: intel_scu_ipc: fix possible name leak in __intel_scu_ipc_register() platform/x86: mxm-wmi: fix memleak in mxm_wmi_call_mx[ds|mx]() PM: runtime: Do not call __rpm_callback() from rpm_idle() PM: runtime: Improve path in rpm_idle() when no callback xen/privcmd: Fix a possible warning in privcmd_ioctl_mmap_resource() x86/xen: Fix memory leak in xen_init_lock_cpu() x86/xen: Fix memory leak in xen_smp_intr_init{_pv}() uprobes/x86: Allow to probe a NOP instruction with 0x66 prefix ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage() clocksource/drivers/timer-ti-dm: Fix missing clk_disable_unprepare in dmtimer_systimer_init_clock() cpu/hotplug: Make target_store() a nop when target == state futex: Resend potentially swallowed owner death notification futex: Move to kernel/futex/ clocksource/drivers/sh_cmt: Access registers according to spec clocksource/drivers/sh_cmt: Make sure channel clock supply is enabled rapidio: rio: fix possible name leak in rio_register_mport() rapidio: fix possible name leaks when rio_add_device() fails ocfs2: fix memory leak in ocfs2_mount_volume() ocfs2: rewrite error handling of ocfs2_fill_super ocfs2: ocfs2_mount_volume does cleanup job before return error debugfs: fix error when writing negative value to atomic_t debugfs file docs: fault-injection: fix non-working usage of negative values lib/notifier-error-inject: fix error when writing -errno to debugfs file libfs: add DEFINE_SIMPLE_ATTRIBUTE_SIGNED for signed value cpufreq: amd_freq_sensitivity: Add missing pci_dev_put() genirq/irqdesc: Don't try to remove non-existing sysfs files nfsd: don't call nfsd_file_put from client states seqfile display EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() irqchip: gic-pm: Use pm_runtime_resume_and_get() in gic_probe() platform/chrome: cros_usbpd_notify: Fix error handling in cros_usbpd_notify_init() perf/x86/intel/uncore: Fix reference count leak in __uncore_imc_init_box() perf/x86/intel/uncore: Fix reference count leak in snr_uncore_mmio_map() perf/x86/intel/uncore: Fix reference count leak in hswep_has_limit_sbox() PNP: fix name memory leak in pnp_alloc_dev() selftests/efivarfs: Add checking of the test return value MIPS: vpe-cmp: fix possible memory leak while module exiting MIPS: vpe-mt: fix possible memory leak while module exiting ocfs2: fix memory leak in ocfs2_stack_glue_init() lib/fonts: fix undefined behavior in bit shift for get_default_font proc: fixup uptime selftest timerqueue: Use rb_entry_safe() in timerqueue_getnext() platform/x86: huawei-wmi: fix return value calculation lib/debugobjects: fix stat count and optimize debug_objects_mem_init perf: Fix possible memleak in pmu_dev_alloc() selftests/ftrace: event_triggers: wait longer for test_event_enable cpufreq: qcom-hw: Fix memory leak in qcom_cpufreq_hw_read_lut() fs: don't audit the capability check in simple_xattr_list() PM: hibernate: Fix mistake in kerneldoc comment alpha: fix syscall entry in !AUDUT_SYSCALL case cpuidle: dt: Return the correct numbers of parsed idle states sched/uclamp: Fix relationship between uclamp and migration margin sched/fair: Cleanup task_util and capacity type tpm/tpm_crb: Fix error message in __crb_relinquish_locality() tpm/tpm_ftpm_tee: Fix error handling in ftpm_mod_init() pstore: Avoid kcore oops by vmap()ing with VM_IOREMAP ARM: mmp: fix timer_read delay pstore/ram: Fix error return code in ramoops_probe() arm64: dts: armada-3720-turris-mox: Add missing interrupt for RTC ARM: dts: turris-omnia: Add switch port 6 node ARM: dts: turris-omnia: Add ethernet aliases ARM: dts: armada-39x: Fix assigned-addresses for every PCIe Root Port ARM: dts: armada-38x: Fix assigned-addresses for every PCIe Root Port ARM: dts: armada-375: Fix assigned-addresses for every PCIe Root Port ARM: dts: armada-xp: Fix assigned-addresses for every PCIe Root Port ARM: dts: armada-370: Fix assigned-addresses for every PCIe Root Port ARM: dts: dove: Fix assigned-addresses for every PCIe Root Port arm64: dts: mediatek: mt6797: Fix 26M oscillator unit name arm64: dts: mediatek: pumpkin-common: Fix devicetree warnings arm64: dts: mt2712-evb: Fix usb vbus regulators unit names arm64: dts: mt2712-evb: Fix vproc fixed regulators unit names arm64: dts: mt2712e: Fix unit address for pinctrl node arm64: dts: mt2712e: Fix unit_address_vs_reg warning for oscillators arm64: dts: ti: k3-j721e-main: Drop dma-coherent in crypto node arm64: dts: ti: k3-am65-main: Drop dma-coherent in crypto node perf/smmuv3: Fix hotplug callback leak in arm_smmu_pmu_init() perf: arm_dsu: Fix hotplug callback leak in dsu_pmu_init() soc: ti: smartreflex: Fix PM disable depth imbalance in omap_sr_probe soc: ti: knav_qmss_queue: Fix PM disable depth imbalance in knav_queue_probe soc: ti: knav_qmss_queue: Use pm_runtime_resume_and_get instead of pm_runtime_get_sync arm: dts: spear600: Fix clcd interrupt soc: qcom: apr: Add check for idr_alloc and of_property_read_string_index soc: qcom: apr: make code more reuseable soc: qcom: llcc: make irq truly optional drivers: soc: ti: knav_qmss_queue: Mark knav_acc_firmwares as static ARM: dts: stm32: Fix AV96 WLAN regulator gpio property ARM: dts: stm32: Drop stm32mp15xc.dtsi from Avenger96 objtool, kcsan: Add volatile read/write instrumentation to whitelist arm64: dts: qcom: msm8916: Drop MSS fallback compatible arm64: dts: qcom: sdm845-cheza: fix AP suspend pin bias arm64: dts: qcom: sdm630: fix UART1 pin bias ARM: dts: qcom: apq8064: fix coresight compatible arm64: dts: qcom: msm8996: fix GPU OPP table arm64: dts: qcom: ipq6018-cp01-c1: use BLSPI1 pins usb: musb: remove extra check in musb_gadget_vbus_draw Linux 5.10.162 io_uring: pass in EPOLL_URING_WAKE for eventfd signaling and wakeups eventfd: provide a eventfd_signal_mask() helper eventpoll: add EPOLL_URING_WAKE poll wakeup flag Revert "proc: don't allow async path resolution of /proc/self components" Revert "proc: don't allow async path resolution of /proc/thread-self components" net: remove cmsg restriction from io_uring based send/recvmsg calls task_work: unconditionally run task_work from get_signal() signal: kill JOBCTL_TASK_WORK io_uring: import 5.15-stable io_uring task_work: add helper for more targeted task_work canceling kernel: don't call do_exit() for PF_IO_WORKER threads kernel: stop masking signals in create_io_thread() x86/process: setup io_threads more like normal user space threads arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread() arch: setup PF_IO_WORKER threads like PF_KTHREAD entry/kvm: Exit to user mode when TIF_NOTIFY_SIGNAL is set kernel: allow fork with TIF_NOTIFY_SIGNAL pending coredump: Limit what can interrupt coredumps kernel: remove checking for TIF_NOTIFY_SIGNAL task_work: remove legacy TWA_SIGNAL path alpha: fix TIF_NOTIFY_SIGNAL handling ARC: unbork 5.11 bootup: fix snafu in _TIF_NOTIFY_SIGNAL handling ia64: don't call handle_signal() unless there's actually a signal queued sparc: add support for TIF_NOTIFY_SIGNAL riscv: add support for TIF_NOTIFY_SIGNAL nds32: add support for TIF_NOTIFY_SIGNAL ia64: add support for TIF_NOTIFY_SIGNAL h8300: add support for TIF_NOTIFY_SIGNAL c6x: add support for TIF_NOTIFY_SIGNAL alpha: add support for TIF_NOTIFY_SIGNAL xtensa: add support for TIF_NOTIFY_SIGNAL arm: add support for TIF_NOTIFY_SIGNAL microblaze: add support for TIF_NOTIFY_SIGNAL hexagon: add support for TIF_NOTIFY_SIGNAL csky: add support for TIF_NOTIFY_SIGNAL openrisc: add support for TIF_NOTIFY_SIGNAL sh: add support for TIF_NOTIFY_SIGNAL um: add support for TIF_NOTIFY_SIGNAL s390: add support for TIF_NOTIFY_SIGNAL mips: add support for TIF_NOTIFY_SIGNAL powerpc: add support for TIF_NOTIFY_SIGNAL parisc: add support for TIF_NOTIFY_SIGNAL nios32: add support for TIF_NOTIFY_SIGNAL m68k: add support for TIF_NOTIFY_SIGNAL arm64: add support for TIF_NOTIFY_SIGNAL arc: add support for TIF_NOTIFY_SIGNAL x86: Wire up TIF_NOTIFY_SIGNAL task_work: Use TIF_NOTIFY_SIGNAL if available entry: Add support for TIF_NOTIFY_SIGNAL fs: provide locked helper variant of close_fd_get_file() file: Rename __close_fd_get_file close_fd_get_file fs: make do_renameat2() take struct filename signal: Add task_sigpending() helper net: add accept helper not installing fd net: provide __sys_shutdown_sock() that takes a socket tools headers UAPI: Sync openat2.h with the kernel sources fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED Make sure nd->path.mnt and nd->path.dentry are always valid pointers fix handling of nd->depth on LOOKUP_CACHED failures in try_to_unlazy* fs: add support for LOOKUP_CACHED saner calling conventions for unlazy_child() iov_iter: add helper to save iov_iter state kernel: provide create_io_thread() helper Linux 5.10.161 net: loopback: use NET_NAME_PREDICTABLE for name_assign_type Bluetooth: L2CAP: Fix u8 overflow HID: uclogic: Add HID_QUIRK_HIDINPUT_FORCE quirk HID: ite: Enable QUIRK_TOUCHPAD_ON_OFF_REPORT on Acer Aspire Switch V 10 HID: ite: Enable QUIRK_TOUCHPAD_ON_OFF_REPORT on Acer Aspire Switch 10E HID: ite: Add support for Acer S1002 keyboard-dock igb: Initialize mailbox message for VF reset xhci: Apply XHCI_RESET_TO_DEFAULT quirk to ADL-N USB: serial: f81534: fix division by zero on line-speed change USB: serial: f81232: fix division by zero on line-speed change USB: serial: cp210x: add Kamstrup RF sniffer PIDs USB: serial: option: add Quectel EM05-G modem usb: gadget: uvc: Prevent buffer overflow in setup handler udf: Fix extending file within last block udf: Do not bother looking for prealloc extents if i_lenExtents matches i_size udf: Fix preallocation discarding at indirect extent boundary udf: Discard preallocation before extending file with a hole Conflicts: Documentation/devicetree/bindings Documentation/devicetree/bindings/phy/amlogic,g12a-usb2-phy.yaml Documentation/devicetree/bindings/phy/amlogic,g12a-usb3-pcie-phy.yaml Documentation/devicetree/bindings/sound/qcom,wcd9335.txt drivers/cpufreq/qcom-cpufreq-hw.c drivers/remoteproc/qcom_q6v5_pas.c drivers/soc/qcom/llcc-qcom.c net/qrtr/ns.c Change-Id: Ic972b7c946b804f910715bd2def82725a42d266e Signed-off-by: Srinivasarao Pathipati <quic_c_spathi@quicinc.com> |
||
Ziyang Xuan
|
3814d211ff |
net: qrtr: Fix an uninit variable access bug in qrtr_tx_resume()
[ Upstream commit 6417070918de3bcdbe0646e7256dae58fd8083ba ]
Syzbot reported a bug as following:
=====================================================
BUG: KMSAN: uninit-value in qrtr_tx_resume+0x185/0x1f0 net/qrtr/af_qrtr.c:230
qrtr_tx_resume+0x185/0x1f0 net/qrtr/af_qrtr.c:230
qrtr_endpoint_post+0xf85/0x11b0 net/qrtr/af_qrtr.c:519
qrtr_tun_write_iter+0x270/0x400 net/qrtr/tun.c:108
call_write_iter include/linux/fs.h:2189 [inline]
aio_write+0x63a/0x950 fs/aio.c:1600
io_submit_one+0x1d1c/0x3bf0 fs/aio.c:2019
__do_sys_io_submit fs/aio.c:2078 [inline]
__se_sys_io_submit+0x293/0x770 fs/aio.c:2048
__x64_sys_io_submit+0x92/0xd0 fs/aio.c:2048
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x3d/0xb0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x63/0xcd
Uninit was created at:
slab_post_alloc_hook mm/slab.h:766 [inline]
slab_alloc_node mm/slub.c:3452 [inline]
__kmem_cache_alloc_node+0x71f/0xce0 mm/slub.c:3491
__do_kmalloc_node mm/slab_common.c:967 [inline]
__kmalloc_node_track_caller+0x114/0x3b0 mm/slab_common.c:988
kmalloc_reserve net/core/skbuff.c:492 [inline]
__alloc_skb+0x3af/0x8f0 net/core/skbuff.c:565
__netdev_alloc_skb+0x120/0x7d0 net/core/skbuff.c:630
qrtr_endpoint_post+0xbd/0x11b0 net/qrtr/af_qrtr.c:446
qrtr_tun_write_iter+0x270/0x400 net/qrtr/tun.c:108
call_write_iter include/linux/fs.h:2189 [inline]
aio_write+0x63a/0x950 fs/aio.c:1600
io_submit_one+0x1d1c/0x3bf0 fs/aio.c:2019
__do_sys_io_submit fs/aio.c:2078 [inline]
__se_sys_io_submit+0x293/0x770 fs/aio.c:2048
__x64_sys_io_submit+0x92/0xd0 fs/aio.c:2048
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x3d/0xb0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x63/0xcd
It is because that skb->len requires at least sizeof(struct qrtr_ctrl_pkt)
in qrtr_tx_resume(). And skb->len equals to size in qrtr_endpoint_post().
But size is less than sizeof(struct qrtr_ctrl_pkt) when qrtr_cb->type
equals to QRTR_TYPE_RESUME_TX in qrtr_endpoint_post() under the syzbot
scenario. This triggers the uninit variable access bug.
Add size check when qrtr_cb->type equals to QRTR_TYPE_RESUME_TX in
qrtr_endpoint_post() to fix the bug.
Fixes:
|
||
Sricharan Ramabadhran
|
ff2565fb8f |
net: qrtr: Do not do DEL_SERVER broadcast after DEL_CLIENT
[ Upstream commit 839349d13905927d8a567ca4d21d88c82028e31d ]
On the remote side, when QRTR socket is removed, af_qrtr will call
qrtr_port_remove() which broadcasts the DEL_CLIENT packet to all neighbours
including local NS. NS upon receiving the DEL_CLIENT packet, will remove
the lookups associated with the node:port and broadcasts the DEL_SERVER
packet.
But on the host side, due to the arrival of the DEL_CLIENT packet, the NS
would've already deleted the server belonging to that port. So when the
remote's NS again broadcasts the DEL_SERVER for that port, it throws below
error message on the host:
"failed while handling packet from 2:-2"
So fix this error by not broadcasting the DEL_SERVER packet when the
DEL_CLIENT packet gets processed."
Fixes:
|
||
Ziyang Xuan
|
98a9cd82c5 |
net: qrtr: Fix a refcount bug in qrtr_recvmsg()
[ Upstream commit 44d807320000db0d0013372ad39b53e12d52f758 ]
Syzbot reported a bug as following:
refcount_t: addition on 0; use-after-free.
...
RIP: 0010:refcount_warn_saturate+0x17c/0x1f0 lib/refcount.c:25
...
Call Trace:
<TASK>
__refcount_add include/linux/refcount.h:199 [inline]
__refcount_inc include/linux/refcount.h:250 [inline]
refcount_inc include/linux/refcount.h:267 [inline]
kref_get include/linux/kref.h:45 [inline]
qrtr_node_acquire net/qrtr/af_qrtr.c:202 [inline]
qrtr_node_lookup net/qrtr/af_qrtr.c:398 [inline]
qrtr_send_resume_tx net/qrtr/af_qrtr.c:1003 [inline]
qrtr_recvmsg+0x85f/0x990 net/qrtr/af_qrtr.c:1070
sock_recvmsg_nosec net/socket.c:1017 [inline]
sock_recvmsg+0xe2/0x160 net/socket.c:1038
qrtr_ns_worker+0x170/0x1700 net/qrtr/ns.c:688
process_one_work+0x991/0x15c0 kernel/workqueue.c:2390
worker_thread+0x669/0x1090 kernel/workqueue.c:2537
It occurs in the concurrent scenario of qrtr_recvmsg() and
qrtr_endpoint_unregister() as following:
cpu0 cpu1
qrtr_recvmsg qrtr_endpoint_unregister
qrtr_send_resume_tx qrtr_node_release
qrtr_node_lookup mutex_lock(&qrtr_node_lock)
spin_lock_irqsave(&qrtr_nodes_lock, ) refcount_dec_and_test(&node->ref) [node->ref == 0]
radix_tree_lookup [node != NULL] __qrtr_node_release
qrtr_node_acquire spin_lock_irqsave(&qrtr_nodes_lock, )
kref_get(&node->ref) [WARNING] ...
mutex_unlock(&qrtr_node_lock)
Use qrtr_node_lock to protect qrtr_node_lookup() implementation, this
is actually improving the protection of node reference.
Fixes:
|
||
Luca Weiss
|
94c53d2949 |
net: qrtr: combine nameservice into main module
[ Upstream commit a365023a76f231cc2fc6e33797e66f3bcaa9f9a9 ] Previously with CONFIG_QRTR=m a separate ns.ko would be built which wasn't done on purpose and should be included in qrtr.ko. Rename qrtr.c to af_qrtr.c so we can build a qrtr.ko with both af_qrtr.c and ns.c. Signed-off-by: Luca Weiss <luca@z3ntu.xyz> Reviewed-by: Bjorn Andersson <bjorn.andersson@linaro.org> Tested-By: Steev Klimaszewski <steev@kali.org> Reviewed-by: Manivannan Sadhasivam <mani@kernel.org> Link: https://lore.kernel.org/r/20210928171156.6353-1-luca@z3ntu.xyz Signed-off-by: Jakub Kicinski <kuba@kernel.org> Stable-dep-of: 44d807320000 ("net: qrtr: Fix a refcount bug in qrtr_recvmsg()") Signed-off-by: Sasha Levin <sashal@kernel.org> |
||
Greg Kroah-Hartman
|
fb0cece721 |
Merge tag 'android12-5.10.168_r00' into android12-5.10
This is the merge of the upstream LTS release of 5.10.168 into the android12-5.10 branch. It contains the following commits: * |
||
Sarannya S
|
ca36a6668a |
net: qrtr: Change port allocation to use cyclic xa
There is a race for clients that open sockets before the control port is bound. If a client gets an idr that was allocated before the control port is bound, there is a chance the previous address owner sent lookup packets to the control port. The new address owner will get residual responses to these lookup packets. Change the xa_alloc to xa_alloc_cyclic so new ids are allocated instead of trying to reuse the freed ids. Call the xa_alloc_cyclic function with GFP_ATOMIC. Change-Id: Ie1bda7a818309503f80542e739bac646327296f7 Signed-off-by: Chris Lew <clew@codeaurora.org> Signed-off-by: Sarannya S <quic_sarannya@quicinc.com> |
||
Luca Weiss
|
5692e2bb4e |
UPSTREAM: net: qrtr: combine nameservice into main module
Previously with CONFIG_QRTR=m a separate ns.ko would be built which wasn't done on purpose and should be included in qrtr.ko. Rename qrtr.c to af_qrtr.c so we can build a qrtr.ko with both af_qrtr.c and ns.c. Bug: 270636606 Change-Id: Ied36534abd1d589a5a1a5853e3440526271440b0 Signed-off-by: Luca Weiss <luca@z3ntu.xyz> Reviewed-by: Bjorn Andersson <bjorn.andersson@linaro.org> Tested-By: Steev Klimaszewski <steev@kali.org> Reviewed-by: Manivannan Sadhasivam <mani@kernel.org> Link: https://lore.kernel.org/r/20210928171156.6353-1-luca@z3ntu.xyz Signed-off-by: Jakub Kicinski <kuba@kernel.org> (cherry picked from commit a365023a76f231cc2fc6e33797e66f3bcaa9f9a9) Signed-off-by: Srinivasarao Pathipati <quic_spathi@quicinc.com> |
||
Natalia Petrova
|
0c76eddc1f |
net: qrtr: free memory on error path in radix_tree_insert()
commit 29de68c2b32ce58d64dea496d281e25ad0f551bd upstream.
Function radix_tree_insert() returns errors if the node hasn't
been initialized and added to the tree.
"kfree(node)" and return value "NULL" of node_get() help
to avoid using unclear node in other calls.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
Cc: <stable@vger.kernel.org> # 5.7
Fixes:
|
||
Sarannya S
|
4c3847f184 |
net: qrtr: Add irqsave/irqrestore spin locks
Add back the irq save and restore spin locks to qrtr_port_lookup, qrtr_port_remove and __qrtr_bind, to avoid any potential race condition, or use-after-free scenarios. Change-Id: I09e70dc70c6daac515a2fc04800a2f28582ebc20 Signed-off-by: Sarannya S <quic_sarannya@quicinc.com> |
||
Srinivasarao Pathipati
|
57d7f6b039 |
Merge keystone/android12-5.10-keystone-qcom-release.149+ (a3f0c2f ) into msm-5.10
* refs/heads/tmp-a3f0c2f: Revert "Input: atmel_mxt_ts - fix up inverted RESET handler" ANDROID: cpu: correct dl_cpu_busy() calls ANDROID: usb: gadget: uvc: remove duplicate code in unbind ANDROID: mm: disable speculative page faults for CONFIG_NUMA ANDROID: disable page table moves when speculative page faults are enabled ANDROID: mm: skip pte_alloc during speculative page fault UPSTREAM: binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0 UPSTREAM: binder: Address corner cases in deferred copy and fixup UPSTREAM: binder: fix pointer cast warning UPSTREAM: binder: defer copies of pre-patched txn data UPSTREAM: binder: read pre-translated fds from sender buffer UPSTREAM: binder: avoid potential data leakage when copying txn UPSTREAM: bpf: Ensure correct locking around vulnerable function find_vpid() BACKPORT: UPSTREAM: usb: typec: ucsi: Wait for the USB role switches UPSTREAM: HID: roccat: Fix use-after-free in roccat_read() ANDROID: arm64: mm: perform clean & invalidation in __dma_map_area BACKPORT: ANDROID: dma-buf: heaps: replace mutex lock with spinlock UPSTREAM: binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0 UPSTREAM: binder: Address corner cases in deferred copy and fixup UPSTREAM: binder: fix pointer cast warning UPSTREAM: binder: defer copies of pre-patched txn data UPSTREAM: binder: read pre-translated fds from sender buffer UPSTREAM: binder: avoid potential data leakage when copying txn ANDROID: khugepaged: fix mixing declarations warning in retract_page_tables ANDROID: mm: fix build issue in spf when CONFIG_USERFAULTFD=n ANDROID: mm: disable speculative page faults for CONFIG_NUMA ANDROID: mm: fix invalid backport in speculative page fault path ANDROID: disable page table moves when speculative page faults are enabled ANDROID: mm: assert that mmap_lock is taken exclusively in vm_write_begin ANDROID: mm: remove sequence counting when mmap_lock is not exclusively owned ANDROID: mm/khugepaged: add missing vm_write_{begin|end} BACKPORT: FROMLIST: mm: implement speculative handling in filemap_fault() ANDROID: mm: prevent reads of unstable pmd during speculation ANDROID: mm: prevent speculative page fault handling for in do_swap_page() ANDROID: mm: prevent speculative page fault handling for userfaults ANDROID: mm: skip pte_alloc during speculative page fault FROMGIT: mm/madvise: fix madvise_pageout for private file mappings ANDROID: GKI: Update symbols to symbol list Revert "FROMGIT: mm/vmalloc: Add override for lazy vunmap" Revert "FROMGIT: arm64: Work around Cortex-A510 erratum 2454944" UPSTREAM: efi: capsule-loader: Fix use-after-free in efi_capsule_write FROMGIT: arm64: Work around Cortex-A510 erratum 2454944 FROMGIT: mm/vmalloc: Add override for lazy vunmap BACKPORT: mm/page_alloc: always initialize memory map for the holes UPSTREAM: usb: dwc3: gadget: Submit endxfer command if delayed during disconnect UPSTREAM: usb: dwc3: Fix ep0 handling when getting reset while doing control transfer UPSTREAM: mm/damon/core: initialize damon_target->list in damon_new_target() UPSTREAM: usb: typec: ucsi: Remove incorrect warning UPSTREAM: xhci: Don't show warning for reinit on known broken suspend UPSTREAM: mm/damon: validate if the pmd entry is present before accessing UPSTREAM: mm/damon/dbgfs: fix memory leak when using debugfs_lookup() UPSTREAM: mm/damon/dbgfs: avoid duplicate context directory creation UPSTREAM: crypto: lib - remove unneeded selection of XOR_BLOCKS UPSTREAM: pinctrl: sunxi: Fix name for A100 R_PIO UPSTREAM: cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() BACKPORT: usb: gadget: f_uac2: fix superspeed transfer BACKPORT: usb: dwc3: qcom: fix runtime PM wakeup UPSTREAM: KVM: arm64: Reject 32bit user PSTATE on asymmetric systems UPSTREAM: KVM: arm64: Treat PMCR_EL1.LC as RES1 on asymmetric systems UPSTREAM: Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm regression UPSTREAM: mm: fix page leak with multiple threads mapping the same page UPSTREAM: PM: domains: Ensure genpd_debugfs_dir exists before remove UPSTREAM: usb: gadget: uvc: fix changing interface name via configfs BACKPORT: dma-mapping: Fix build error unused-value UPSTREAM: tools/vm/slabinfo: Handle files in debugfs UPSTREAM: mm/damon: use set_huge_pte_at() to make huge pte old UPSTREAM: usb: gadget: f_mass_storage: Make CD-ROM emulation works with Windows OS UPSTREAM: blk-mq: don't touch ->tagset in blk_mq_get_sq_hctx UPSTREAM: PM: domains: Fix initialization of genpd's next_wakeup BACKPORT: f2fs: don't use casefolded comparison for "." and ".." UPSTREAM: regulator: scmi: Fix refcount leak in scmi_regulator_probe UPSTREAM: block/mq-deadline: Set the fifo_time member also if inserting at head BACKPORT: Revert "mm/cma.c: remove redundant cma_mutex lock" UPSTREAM: module.h: simplify MODULE_IMPORT_NS UPSTREAM: iommu/mediatek: Add mutex for m4u_group and m4u_dom in data UPSTREAM: iommu/mediatek: Remove clk_disable in mtk_iommu_remove UPSTREAM: iommu/mediatek: Fix 2 HW sharing pgtable issue UPSTREAM: mm: hugetlb: add missing cache flushing in hugetlb_unshare_all_pmds() UPSTREAM: selftests/damon: add damon to selftests root Makefile FROMGIT: f2fs: allow to read node block after shutdown BACKPORT: f2fs: do not submit NEW_ADDR to read node block BACKPORT: ext4,f2fs: fix readahead of verity data ANDROID: GKI: db845c: Update symbols list and ABI Linux 5.10.149 wifi: mac80211: fix MBSSID parsing use-after-free wifi: mac80211: don't parse mbssid in assoc response mac80211: mlme: find auth challenge directly Revert "fs: check FMODE_LSEEK to control internal pipe splicing" Linux 5.10.148 misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic misc: pci_endpoint_test: Aggregate params checking for xfer Input: xpad - fix wireless 360 controller breaking after suspend Input: xpad - add supported devices as contributed on github wifi: cfg80211: update hidden BSSes to avoid WARN_ON wifi: mac80211: fix crash in beacon protection for P2P-device wifi: mac80211_hwsim: avoid mac80211 warning on bad rate wifi: cfg80211: avoid nontransmitted BSS list corruption wifi: cfg80211: fix BSS refcounting bugs wifi: cfg80211: ensure length byte is present before access wifi: cfg80211/mac80211: reject bad MBSSID elements wifi: cfg80211: fix u8 overflow in cfg80211_update_notlisted_nontrans() random: use expired timer rather than wq for mixing fast pool random: avoid reading two cache lines on irq randomness USB: serial: qcserial: add new usb-id for Dell branded EM7455 scsi: stex: Properly zero out the passthrough command structure efi: Correct Macmini DMI match in uefi cert quirk ALSA: hda: Fix position reporting on Poulsbo random: clamp credited irq bits to maximum mixed random: restore O_NONBLOCK support Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5" rpmsg: qcom: glink: replace strncpy() with strscpy_pad() USB: serial: ftdi_sio: fix 300 bps rate for SIO usb: mon: make mmapped memory read only mmc: core: Terminate infinite loop in SD-UHS voltage switch mmc: core: Replace with already defined values for readability drm/amd/display: skip audio setup when audio stream is enabled drm/amd/display: update gamut remap if plane has changed net: atlantic: fix potential memory leak in aq_ndev_close() arch: um: Mark the stack non-executable to fix a binutils warning um: Cleanup compiler warning in arch/x86/um/tls_32.c um: Cleanup syscall_handler_t cast in syscalls_32.h ALSA: hda/hdmi: Fix the converter reuse for the silent stream net/ieee802154: fix uninit value bug in dgram_sendmsg scsi: qedf: Fix a UAF bug in __qedf_probe() ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling firmware: arm_scmi: Add SCMI PM driver remove routine compiler_attributes.h: move __compiletime_{error|warning} fs: fix UAF/GPF bug in nilfs_mdt_destroy powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush mm: gup: fix the fast GUP race against THP collapse ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC xsk: Inherit need_wakeup flag for shared sockets perf tools: Fixup get_current_dir_name() compilation docs: update mediator information in CoC docs Makefile.extrawarn: Move -Wcast-function-type-strict to W=1 ceph: don't truncate file in atomic_open nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure nilfs2: fix leak of nilfs_root in case of writer thread creation failure nilfs2: fix use-after-free bug of struct nilfs_root nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level() Linux 5.10.147 ALSA: hda/hdmi: fix warning about PCM count when used with SOF x86/alternative: Fix race in try_get_desc() KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest clk: iproc: Do not rely on node name for correct PLL setup clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks selftests: Fix the if conditions of in test_extra_filter() net: stmmac: power up/down serdes in stmmac_open/release nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices nvme: add new line after variable declatation cxgb4: fix missing unlock on ETHOFLD desc collect fail path net: sched: act_ct: fix possible refcount leak in tcf_ct_init() usbnet: Fix memory leak in usbnet_disconnect() Input: melfas_mip4 - fix return value check in mip4_probe() Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time" ASoC: tas2770: Reinit regcache on reset soc: sunxi: sram: Fix debugfs info for A64 SRAM C soc: sunxi: sram: Fix probe function ordering issues soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource() soc: sunxi: sram: Prevent the driver from being unbound soc: sunxi: sram: Actually claim SRAM regions reset: imx7: Fix the iMX8MP PCIe PHY PERST support ARM: dts: am33xx: Fix MMCHS0 dma properties scsi: hisi_sas: Revert "scsi: hisi_sas: Limit max hw sectors for v3 HW" swiotlb: max mapping size takes min align mask into account media: rkvdec: Disable H.264 error detection media: dvb_vb2: fix possible out of bound access mm: fix madivse_pageout mishandling on non-LRU page mm/migrate_device.c: flush TLB while holding PTL mm: prevent page_frag_alloc() from corrupting the memory mm/page_alloc: fix race condition between build_all_zonelists and page allocation mmc: hsq: Fix data stomping during mmc recovery mmc: moxart: fix 4-bit bus width and remove 8-bit bus width libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205 net: mt7531: only do PLL once after the reset ntfs: fix BUG_ON in ntfs_lookup_inode_by_name() ARM: dts: integrator: Tag PCI host with device_type clk: ingenic-tcu: Properly enable registers before accessing timers Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455 thunderbolt: Explicitly reset plug events delay back to USB4 spec value usb: typec: ucsi: Remove incorrect warning uas: ignore UAS for Thinkplus chips usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS uas: add no-uas quirk for Hiksemi usb_disk btrfs: fix hang during unmount when stopping a space reclaim worker ALSA: hda: Fix Nvidia dp infoframe ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically ALSA: hda/tegra: Reset hardware ALSA: hda/tegra: Use clk_bulk helpers thunderbolt: Add support for Intel Maple Ridge single port controller thunderbolt: Add support for Intel Maple Ridge Revert "usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind" Linux 5.10.146 ext4: make directory inode spreading reflect flexbg size ext4: limit the number of retries after discarding preallocations blocks ext4: fix bug in extents parsing when eh_entries == 0 and eh_depth > 0 devdax: Fix soft-reservation memory description i2c: mlxbf: Fix frequency calculation i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() i2c: mlxbf: incorrect base address passed during io write i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible workqueue: don't skip lockdep work dependency in cancel_work_sync() drm/rockchip: Fix return type of cdn_dp_connector_mode_valid drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage drm/amd/display: Limit user regamma to a valid value drm/amdgpu: use dirty framebuffer helper drm/gma500: Fix BUG: sleeping function called from invalid context errors Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region cifs: always initialize struct msghdr smb_msg completely cifs: use discard iterator to discard unneeded network data more efficiently drm/amdgpu: Fix check for RAS support vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external() usb: xhci-mtk: fix issue of out-of-bounds array access s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting serial: Create uart_xmit_advance() drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV selftests: forwarding: add shebang for sch_red.sh net: sched: fix possible refcount leak in tc_new_tfilter() net: sunhme: Fix packet reception for len < RX_COPY_THRESHOLD net/smc: Stop the CLC flow if no link to map buffers on drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff() perf kcore_copy: Do not check /proc/modules is unchanged perf jit: Include program header in ELF files can: gs_usb: gs_can_open(): fix race dev->can.state condition netfilter: ebtables: fix memory leak when blob is malformed netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain() netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain() net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs net/sched: taprio: avoid disabling offload when it was never enabled net: socket: remove register_gifconf net: enetc: move enetc_set_psfp() out of the common enetc_set_features() wireguard: netlink: avoid variable-sized memcpy on sockaddr wireguard: ratelimiter: disable timings test by default net: ipa: properly limit modem routing table use net: ipa: kill IPA_TABLE_ENTRY_SIZE net: ipa: DMA addresses are nicely aligned net: ipa: avoid 64-bit modulus net: ipa: fix table alignment requirement net: ipa: fix assumptions about DMA address size of: mdio: Add of_node_put() when breaking out of for_each_xx drm/hisilicon: Add depends on MMU drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled sfc: fix null pointer dereference in efx_hard_start_xmit sfc: fix TX channel offset when using legacy interrupts i40e: Fix set max_tx_rate when it is lower than 1 Mbps i40e: Fix VF set max MTU size iavf: Fix set max MTU size with port VLAN and jumbo frames iavf: Fix bad page state MIPS: Loongson32: Fix PHY-mode being left unspecified MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko drm/panel: simple: Fix innolux_g121i1_l01 bus_format net: team: Unsync device addresses on ndo_stop net: bonding: Unsync device addresses on ndo_stop net: bonding: Share lacpdu_mcast_addr definition scsi: mpt3sas: Fix return value check of dma_get_required_mask() scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region net: phy: aquantia: wait for the suspend/resume operations to finish net: core: fix flow symmetric hash net: let flow have same hash in two directions ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header iavf: Fix cached head and tail value for iavf_get_tx_pending netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find() netfilter: nf_conntrack_irc: Tighten matching on DCC message netfilter: nf_conntrack_sip: fix ct_sip_walk_headers arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get() arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob xfs: validate inode fork size against fork format xfs: reorder iunlink remove operation in xfs_ifree xfs: fix up non-directory creation in SGID directories interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate KVM: SEV: add cache flush to solve SEV cache incoherency issues mm/slub: fix to return errno if kmalloc() fails can: flexcan: flexcan_mailbox_read() fix return value for drop = true riscv: fix a nasty sigreturn bug... gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully gpio: mockup: fix NULL pointer dereference when removing debugfs wifi: mt76: fix reading current per-tid starting sequence number for aggregation efi: libstub: check Shim mode using MokSBStateRT efi: x86: Wipe setup_data on pure EFI boot media: flexcop-usb: fix endpoint type check iommu/vt-d: Check correct capability for sagaw determination ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop ALSA: hda/realtek: Add quirk for ASUS GA503R laptop ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack ALSA: hda/realtek: Re-arrange quirk table entries ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop ALSA: hda/realtek: Add quirk for Huawei WRT-WX9 ALSA: hda: add Intel 5 Series / 3400 PCI DID ALSA: hda/tegra: set depop delay for tegra USB: serial: option: add Quectel RM520N USB: serial: option: add Quectel BG95 0x0203 composition USB: core: Fix RST error in hub.c arm64/bti: Disable in kernel BTI when cross section thunks are broken arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio" vfio/type1: Unpin zero pages vfio/type1: Prepare for batched pinning with struct vfio_batch vfio/type1: Change success value of vaddr_get_pfn() Revert "usb: add quirks for Lenovo OneLink+ Dock" usb: cdns3: fix issue with rearming ISO OUT endpoint usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer usb: gadget: udc-xilinx: replace memcpy with memcpy_toio usb: add quirks for Lenovo OneLink+ Dock tty: serial: atmel: Preserve previous USART mode if RS485 disabled serial: atmel: remove redundant assignment in rs485_config mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure usb: xhci-mtk: relax TT periodic bandwidth allocation usb: xhci-mtk: allow multiple Start-Split in a microframe usb: xhci-mtk: add some schedule error number usb: xhci-mtk: add a function to (un)load bandwidth info usb: xhci-mtk: use @sch_tt to check whether need do TT schedule usb: xhci-mtk: add only one extra CS for FS/LS INTR usb: xhci-mtk: get the microframe boundary for ESIT usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup() usb: dwc3: gadget: Refactor pullup() usb: dwc3: gadget: Prevent repeat pullup() usb: dwc3: Issue core soft reset before enabling run/stop usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake drm/amdgpu: make sure to init common IP before gmc drm/amdgpu: Separate vf2pf work item init from virt data exchange drm/amdgpu: indirect register access for nv12 sriov drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega Linux 5.10.145 ALSA: hda/sigmatel: Fix unused variable warning for beep power change cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() video: fbdev: pxa3xx-gcu: Fix integer overflow in pxa3xx_gcu_write mksysmap: Fix the mismatch of 'L0' symbols in System.map MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping() afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked net: usb: qmi_wwan: add Quectel RM520N ALSA: hda/tegra: Align BDL entry to 4KB boundary ALSA: hda/sigmatel: Keep power up while beep is enabled wifi: mac80211_hwsim: check length for virtio packets rxrpc: Fix calc of resend age rxrpc: Fix local destruction being repeated regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe() ASoC: nau8824: Fix semaphore unbalance at error paths Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field" video: fbdev: i740fb: Error out if 'pixclock' equals zero tools/include/uapi: Fix <asm/errno.h> for parisc and xtensa cifs: don't send down the destination address to sendmsg for a SOCK_STREAM cifs: revalidate mapping when doing direct writes of/device: Fix up of_dma_configure_id() stub tracing: hold caller_addr to hardirq_{enable,disable}_ip parisc: ccio-dma: Add missing iounmap in error path in ccio_probe() drm/meson: Fix OSD1 RGB to YCbCr coefficient drm/meson: Correct OSD1 global alpha value gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0 pinctrl: sunxi: Fix name for A100 R_PIO of: fdt: fix off-by-one error in unflatten_dt_nodes() net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports platform/x86/intel: hid: add quirk to support Surface Go 3 usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests powerpc/pseries/mobility: ignore ibm, platform-facilities updates powerpc/pseries/mobility: refactor node lookup during DT update dmaengine: bestcomm: fix system boot lockups parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page parisc: Optimize per-pagetable spinlocks serial: 8250: Fix reporting real baudrate value in c_ospeed field KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs Revert "USB: core: Prevent nested device-reset calls" Revert "xhci: Add grace period after xHC start to prevent premature runtime suspend." Revert "mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse" Revert "io_uring: disable polling pollfree files" Linux 5.10.144 Input: goodix - add compatible string for GT1158 soc: fsl: select FSL_GUTS driver for DPIO x86/ftrace: Use alternative RET encoding x86/ibt,ftrace: Make function-graph play nice Revert "x86/ftrace: Use alternative RET encoding" mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region() usb: storage: Add ASUS <0x0b05:0x1932> to IGNORE_UAS platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes perf/arm_pmu_platform: fix tests for platform_get_irq() failure drm/amd/amdgpu: skip ucode loading if ucode_size == 0 nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change() Input: iforce - add support for Boeder Force Feedback Wheel ieee802154: cc2520: add rc code in cc2520_tx() gpio: mockup: remove gpio debugfs when remove device tg3: Disable tg3 device on system reboot to avoid triggering AER hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo drm/msm/rd: Fix FIFO-full deadlock Input: goodix - add support for GT1158 tracefs: Only clobber mode/uid/gid on remount if asked iommu/vt-d: Correctly calculate sagaw value of IOMMU ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible ARM: dts: imx: align SPI NOR node name with dtschema Linux 5.10.143 arm64: errata: add detection for AMEVCNTR01 incrementing incorrectly hwmon: (mr75203) enable polling for all VM channels hwmon: (mr75203) fix multi-channel voltage reading hwmon: (mr75203) fix voltage equation for negative source input hwmon: (mr75203) update pvt->v_num and vm_num to the actual number of used sensors hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined iommu/amd: use full 64-bit value in build_completion_wait() swiotlb: avoid potential left shift overflow MIPS: loongson32: ls1c: Fix hang during startup ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion ASoC: mchp-spdiftx: remove references to mchp_i2s_caps sch_sfb: Also store skb len before calling child enqueue tcp: fix early ETIMEDOUT after spurious non-SACK RTO nvme-tcp: fix regression that causes sporadic requests to time out nvme-tcp: fix UAF when detecting digest errors RDMA/mlx5: Set local port to one when accessing counters IB/core: Fix a nested dead lock as part of ODP flow ipv6: sr: fix out-of-bounds read when setting HMAC data. RDMA/siw: Pass a pointer to virt_to_page() xen-netback: only remove 'hotplug-status' when the vif is actually destroyed i40e: Fix kernel crash during module removal ice: use bitmap_free instead of devm_kfree tipc: fix shift wrapping bug in map_get() sch_sfb: Don't assume the skb is still around after enqueueing to child afs: Use the operation issue time instead of the reply time for callbacks rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2() ALSA: usb-audio: Register card again for iface over delayed_register option ALSA: usb-audio: Inform the delayed registration more properly netfilter: nf_conntrack_irc: Fix forged IP logic netfilter: nf_tables: clean up hook list when offload flags check fails netfilter: br_netfilter: Drop dst references before setting. ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges RDMA/hns: Fix wrong fixed value of qp->rq.wqe_shift RDMA/hns: Fix supported page size soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs RDMA/cma: Fix arguments order in net device validation tee: fix compiler warning in tee_shm_register() regulator: core: Clean up on enable failure ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node smb3: missing inode locks in punch hole cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() cgroup: Fix threadgroup_rwsem <-> cpus_read_lock() deadlock cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree scsi: lpfc: Add missing destroy_workqueue() in error path scsi: mpt3sas: Fix use-after-free warning drm/i915: Implement WaEdpLinkRateDataReload nvmet: fix a use-after-free debugfs: add debugfs_lookup_and_remove() kprobes: Prohibit probes in gate area ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface() ALSA: aloop: Fix random zeros in capture data when using jiffies timer ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc() drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init() net/core/skbuff: Check the return value of skb_copy_bits() arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources() drm/radeon: add a force flush to delay work when radeon drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup. drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini drm/gem: Fix GEM handle release errors scsi: megaraid_sas: Fix double kfree() scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()" fs: only do a memory barrier for the first set_buffer_uptodate() wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd() efi: capsule-loader: Fix use-after-free in efi_capsule_write efi: libstub: Disable struct randomization tty: n_gsm: avoid call of sleeping functions from atomic context tty: n_gsm: initialize more members at gsm_alloc_mux() xen-blkfront: Cache feature_persistent value before advertisement NFSD: Fix verifier returned in stable WRITEs Linux 5.10.142 USB: serial: ch341: fix disabled rx timer on older devices USB: serial: ch341: fix lost character on LCR updates usb: dwc3: disable USB core PHY management usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup usb: dwc3: fix PHY disable sequence mmc: core: Fix UHS-I SD 1.8V workaround branch btrfs: harden identification of a stale device drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk ALSA: seq: Fix data-race at module auto-loading ALSA: seq: oss: Fix data-race for max_midi_devs access ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298 net: mac802154: Fix a condition in the receive path net: Use u64_stats_fetch_begin_irq() for stats fetch. ip: fix triggering of 'icmp redirect' wifi: mac80211: Fix UAF in ieee80211_scan_rx() wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected driver core: Don't probe devices after bus_type.match() probe deferral usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS USB: core: Prevent nested device-reset calls s390: fix nospec table alignments s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages usb-storage: Add ignore-residue quirk for NXP PN7462AU USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020) usb: dwc2: fix wrong order of phy_power_on and phy_init usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode USB: serial: option: add Quectel EM060K modem USB: serial: option: add support for OPPO R11 diag port USB: serial: cp210x: add Decagon UCA device id xhci: Add grace period after xHC start to prevent premature runtime suspend. media: mceusb: Use new usb_control_msg_*() routines thunderbolt: Use the actual buffer in tb_async_error() xen-blkfront: Advertise feature-persistent as user requested xen-blkback: Advertise feature-persistent as user requested mm: pagewalk: Fix race between unmap and page walker xen/grants: prevent integer overflow in gnttab_dma_alloc_pages() KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES gpio: pca953x: Add mutex_lock for regcache sync in PM hwmon: (gpio-fan) Fix array out of bounds access clk: bcm: rpi: Add missing newline clk: bcm: rpi: Prevent out-of-bounds access clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc() clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate Input: rk805-pwrkey - fix module autoloading clk: core: Fix runtime PM sequence in clk_core_unprepare() Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops" clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops drm/i915/reg: Fix spelling mistake "Unsupport" -> "Unsupported" binder: fix UAF of ref->proc caused by race condition USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id misc: fastrpc: fix memory corruption on open misc: fastrpc: fix memory corruption on probe iio: adc: mcp3911: use correct formula for AD conversion iio: ad7292: Prevent regulator double disable Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete vt: Clear selection before changing the font powerpc: align syscall table for ppc32 staging: rtl8712: fix use after free bugs serial: fsl_lpuart: RS485 RTS polariy is inverse net/smc: Remove redundant refcount increase Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb" tcp: annotate data-race around challenge_timestamp sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb kcm: fix strp_init() order and cleanup ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler net/sched: fix netdevice reference leaks in attach_default_qdiscs() net: sched: tbf: don't call qdisc_put() while holding tree lock Revert "xhci: turn off port power in shutdown" wifi: cfg80211: debugfs: fix return type in ht40allow_map_read() ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg ieee802154/adf7242: defer destroy_workqueue call bpf, cgroup: Fix kernel BUG in purge_effective_progs iio: adc: mcp3911: make use of the sign bit platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask drm/msm/dsi: Fix number of regulators for SDM660 drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4 drm/msm/dsi: fix the inconsistent indenting Linux 5.10.141 net: neigh: don't call kfree_skb() under spin_lock_irqsave() net/af_packet: check len when min_header_len equals to 0 xfs: revert "xfs: actually bump warning counts when we send warnings" xfs: fix soft lockup via spinning in filestream ag selection loop xfs: fix overfilling of reserve pool xfs: always succeed at setting the reserve pool size xfs: remove infinite loop when reserving free block pool io_uring: disable polling pollfree files kprobes: don't call disarm_kprobe() for disabled kprobes lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline() netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y drm/amdgpu: Increase tlb flush timeout for sriov drm/amd/display: Fix pixel clock programming drm/amd/pm: add missing ->fini_microcode interface for Sienna Cichlid s390/hypfs: avoid error message under KVM neigh: fix possible DoS due to net iface start/stop loop drm/amd/display: clear optc underflow before turn off odm clock drm/amd/display: For stereo keep "FLIP_ANY_FRAME" drm/amd/display: Avoid MPC infinite loop mmc: mtk-sd: Clear interrupts when cqe off/disable mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse bpf: Don't redirect packets with invalid pkt_len ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead fbdev: fb_pm2fb: Avoid potential divide by zero error net: fix refcount bug in sk_psock_get (2) HID: hidraw: fix memory leak in hidraw_release() media: pvrusb2: fix memory leak in pvr_probe udmabuf: Set the DMA mask for the udmabuf device (v2) HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()" Bluetooth: L2CAP: Fix build errors in some archs kbuild: Fix include path in scripts/Makefile.modpost s390/mm: do not trigger write fault when vma does not allow VM_WRITE crypto: lib - remove unneeded selection of XOR_BLOCKS x86/nospec: Fix i386 RSB stuffing x86/nospec: Unwreck the RSB stuffing mm: Force TLB flush for PFNMAP mappings before unlink_file_vma() Linux 5.10.140 bpf: Don't use tnum_range on array range checking for poke descriptors scsi: storvsc: Remove WQ_MEM_RECLAIM from storvsc_error_wq scsi: ufs: core: Enable link lost interrupt perf/x86/intel/uncore: Fix broken read_counter() for SNB IMC PMU perf python: Fix build when PYTHON_CONFIG is user supplied blk-mq: fix io hung due to missing commit_rqs Documentation/ABI: Mention retbleed vulnerability info file for sysfs arm64: Fix match_list for erratum 1286807 on Arm Cortex-A76 md: call __md_stop_writes in md_stop Revert "md-raid: destroy the bitmap after destroying the thread" mm/hugetlb: fix hugetlb not supporting softdirty tracking xen/privcmd: fix error exit of privcmd_ioctl_dm_op() ACPI: processor: Remove freq Qos request for all CPUs s390: fix double free of GS and RI CBs on fork() failure asm-generic: sections: refactor memory_intersects loop: Check for overflow while configuring loop x86/bugs: Add "unknown" reporting for MMIO Stale Data x86/unwind/orc: Unwind ftrace trampolines with correct ORC entry perf/x86/lbr: Enable the branch type for the Arch LBR by default btrfs: check if root is readonly while setting security xattr btrfs: add info when mount fails due to stale replace target btrfs: replace: drop assert for suspended replace btrfs: fix silent failure when deleting root reference ionic: fix up issues with handling EAGAIN on FW cmds rxrpc: Fix locking in rxrpc's sendmsg ixgbe: stop resetting SYSTIME in ixgbe_ptp_start_cyclecounter net: Fix a data-race around sysctl_somaxconn. net: Fix data-races around sysctl_devconf_inherit_init_net. net: Fix data-races around sysctl_fb_tunnels_only_for_init_net. net: Fix a data-race around netdev_budget_usecs. net: Fix a data-race around netdev_budget. net: Fix a data-race around sysctl_net_busy_read. net: Fix a data-race around sysctl_net_busy_poll. net: Fix a data-race around sysctl_tstamp_allow_data. net: Fix data-races around sysctl_optmem_max. bpf: Folding omem_charge() into sk_storage_charge() ratelimit: Fix data-races in ___ratelimit(). net: Fix data-races around netdev_tstamp_prequeue. net: Fix data-races around netdev_max_backlog. net: Fix data-races around weight_p and dev_weight_[rt]x_bias. net: Fix data-races around sysctl_[rw]mem_(max|default). net: Fix data-races around sysctl_[rw]mem(_offset)?. tcp: tweak len/truesize ratio for coalesce candidates netfilter: nf_tables: disallow binding to already bound chain netfilter: nf_tables: disallow jump to implicit chain from set element netfilter: nf_tables: upfront validation of data via nft_data_init() netfilter: bitwise: improve error goto labels netfilter: nft_cmp: optimize comparison for 16-bytes netfilter: nf_tables: consolidate rule verdict trace call netfilter: nftables: remove redundant assignment of variable err netfilter: nft_tunnel: restrict it to netdev family netfilter: nft_osf: restrict osf to ipv4, ipv6 and inet families netfilter: nf_tables: do not leave chain stats enabled on error netfilter: nft_payload: do not truncate csum_offset and csum_type netfilter: nft_payload: report ERANGE for too long offset and length bnxt_en: fix NQ resource accounting during vf creation on 57500 chips netfilter: ebtables: reject blobs that don't provide all entry points net: ipvtap - add __init/__exit annotations to module init/exit funcs bonding: 802.3ad: fix no transmission of LACPDUs net: moxa: get rid of asymmetry in DMA mapping/unmapping net: ipa: don't assume SMEM is page-aligned net/mlx5e: Properly disable vlan strip on non-UL reps ice: xsk: prohibit usage of non-balanced queue id ice: xsk: Force rings to be sized to power of 2 nfc: pn533: Fix use-after-free bugs caused by pn532_cmd_timeout rose: check NULL rose_loopback_neigh->loopback mm/smaps: don't access young/dirty bit if pte unpresent mm/huge_memory.c: use helper function migration_entry_to_page() SUNRPC: RPC level errors should set task->tk_rpc_status NFSv4.2 fix problems with __nfs42_ssc_open NFS: Don't allocate nfs_fattr on the stack in __nfs42_ssc_open() xfrm: policy: fix metadata dst->dev xmit null pointer dereference af_key: Do not call xfrm_probe_algs in parallel xfrm: clone missing x->lastused in xfrm_do_migrate xfrm: fix refcount leak in __xfrm_policy_check() kernel/sched: Remove dl_boosted flag comment xfs: only bother with sync_filesystem during readonly remount xfs: return errors in xfs_fs_sync_fs vfs: make sync_filesystem return errors from ->sync_fs fs: remove __sync_filesystem xfs: reject crazy array sizes being fed to XFS_IOC_GETBMAP* xfs: prevent a WARN_ONCE() in xfs_ioc_attr_list() pinctrl: amd: Don't save/restore interrupt status and wake status bits kernel/sys_ni: add compat entry for fadvise64_64 parisc: Fix exception handler for fldw and fstw instructions audit: fix potential double free on error path from fsnotify_add_inode_mark Revert "ALSA: control: Use deferred fasync helper" Revert "block: remove the request_queue to argument request based tracepoints" Revert "blktrace: Trace remapped requests correctly" Revert "USB: HCD: Fix URB giveback issue in tasklet function" Linux 5.10.139 kbuild: dummy-tools: avoid tmpdir leak in dummy gcc Linux 5.10.138 tee: fix memory leak in tee_shm_register() bpf: Fix KASAN use-after-free Read in compute_effective_progs qrtr: Convert qrtr_ports from IDR to XArray PCI/ERR: Retain status from error notification can: j1939: j1939_session_destroy(): fix memory leak of skbs can: j1939: j1939_sk_queue_activate_next_locked(): replace WARN_ON_ONCE with netdev_warn_once() tracing/probes: Have kprobes and uprobes use $COMM too netfilter: nf_tables: fix audit memory leak in nf_tables_commit netfilter: nftables: fix a warning message in nf_tables_commit_audit_collect() MIPS: tlbex: Explicitly compare _PAGE_NO_EXEC against 0 video: fbdev: i740fb: Check the argument of i740_calc_vclk() powerpc/64: Init jump labels before parse_early_param() smb3: check xattr value length earlier f2fs: fix to do sanity check on segment type in build_sit_entries() f2fs: fix to avoid use f2fs_bug_on() in f2fs_new_node_page() ALSA: control: Use deferred fasync helper ALSA: timer: Use deferred fasync helper ALSA: core: Add async signal helpers powerpc/32: Don't always pass -mcpu=powerpc to the compiler watchdog: export lockup_detector_reconfigure RISC-V: Add fast call path of crash_kexec() riscv: mmap with PROT_WRITE but no PROT_READ is invalid modules: Ensure natural alignment for .altinstructions and __bug_table sections mips: cavium-octeon: Fix missing of_node_put() in octeon2_usb_clocks_start vfio: Clear the caps->buf to NULL after free tty: serial: Fix refcount leak bug in ucc_uart.c lib/list_debug.c: Detect uninitialized lists ext4: avoid resizing to a partial cluster size ext4: avoid remove directory when directory is corrupted drivers:md:fix a potential use-after-free bug nvmet-tcp: fix lockdep complaint on nvmet_tcp_wq flush during queue teardown md: Notify sysfs sync_completed in md_reap_sync_thread() dmaengine: sprd: Cleanup in .remove() after pm_runtime_get_sync() failed selftests/kprobe: Do not test for GRP/ without event failures csky/kprobe: reclaim insn_slot on kprobe unregistration RDMA/rxe: Limit the number of calls to each tasklet um: add "noreboot" command line option for PANIC_TIMEOUT=-1 setups PCI/ACPI: Guard ARM64-specific mcfg_quirks cxl: Fix a memory leak in an error handling path pinctrl: intel: Check against matching data instead of ACPI companion gadgetfs: ep_io - wait until IRQ finishes scsi: lpfc: Prevent buffer overflow crashes in debugfs with malformed user input clk: qcom: clk-alpha-pll: fix clk_trion_pll_configure description zram: do not lookup algorithm in backends table uacce: Handle parent device removal or parent driver module rmmod clk: qcom: ipq8074: dont disable gcc_sleep_clk_src vboxguest: Do not use devm for irq usb: dwc2: gadget: remove D+ pull-up while no vbus with usb-role-switch usb: renesas: Fix refcount leak bug usb: host: ohci-ppc-of: Fix refcount leak bug clk: ti: Stop using legacy clkctrl names for omap4 and 5 drm/meson: Fix overflow implicit truncation warnings irqchip/tegra: Fix overflow implicit truncation warnings usb: gadget: uvc: call uvc uvcg_warn on completed status instead of uvcg_info usb: cdns3 fix use-after-free at workaround 2 platform/chrome: cros_ec_proto: don't show MKBP version if unsupported PCI: Add ACS quirk for Broadcom BCM5750x NICs drm/sun4i: dsi: Prevent underflow when computing packet sizes netfilter: add helper function to set up the nfnetlink header and use it netfilter: nftables: add helper function to set the base sequence number audit: log nftables configuration change events once per table drm/meson: Fix refcount bugs in meson_vpu_has_available_connectors() ASoC: SOF: intel: move sof_intel_dsp_desc() forward locking/atomic: Make test_and_*_bit() ordered on failure gcc-plugins: Undefine LATENT_ENTROPY_PLUGIN when plugin disabled for a file kbuild: fix the modules order between drivers and libs igb: Add lock to avoid data race stmmac: intel: Add a missing clk_disable_unprepare() call in intel_eth_pci_remove() fec: Fix timer capture timing in `fec_ptp_enable_pps()` i40e: Fix to stop tx_timeout recovery if GLOBR fails regulator: pca9450: Remove restrictions for regulator-name i2c: imx: Make sure to unregister adapter on remove() ice: Ignore EEXIST when setting promisc mode net: dsa: sja1105: fix buffer overflow in sja1105_setup_devlink_regions() net: genl: fix error path memory leak in policy dumping net: dsa: felix: fix ethtool 256-511 and 512-1023 TX packet counters net: dsa: microchip: ksz9477: fix fdb_dump last invalid entry net: moxa: pass pdev instead of ndev to DMA functions net: dsa: mv88e6060: prevent crash on an unused port spi: meson-spicc: add local pow2 clock ops to preserve rate between messages powerpc/pci: Fix get_phb_number() locking netfilter: nf_tables: check NFT_SET_CONCAT flag if field_count is specified netfilter: nf_tables: validate NFTA_SET_ELEM_OBJREF based on NFT_SET_OBJECT flag netfilter: nf_tables: really skip inactive sets when allocating name ASoC: tas2770: Fix handling of mute/unmute ASoC: tas2770: Drop conflicting set_bias_level power setting ASoC: tas2770: Allow mono streams ASoC: tas2770: Set correct FSYNC polarity iavf: Fix adminq error handling nios2: add force_successful_syscall_return() nios2: restarts apply only to the first sigframe we build... nios2: fix syscall restart checks nios2: traced syscall does need to check the syscall number nios2: don't leave NULLs in sys_call_table[] nios2: page fault et.al. are *not* restartable syscalls... dpaa2-eth: trace the allocated address instead of page struct perf probe: Fix an error handling path in 'parse_perf_probe_command()' geneve: fix TOS inheriting for ipv4 atm: idt77252: fix use-after-free bugs caused by tst_timer xen/xenbus: fix return type in xenbus_file_read() nfp: ethtool: fix the display error of `ethtool -m DEVNAME` NTB: ntb_tool: uninitialized heap data in tool_fn_write() tools build: Switch to new openssl API for test-libcrypto kbuild: dummy-tools: avoid tmpdir leak in dummy gcc ceph: don't leak snap_rwsem in handle_cap_grant tools/vm/slabinfo: use alphabetic order when two values are equal ceph: use correct index when encoding client supported features dt-bindings: clock: qcom,gcc-msm8996: add more GCC clock sources dt-bindings: arm: qcom: fix MSM8916 MTP compatibles vsock: Set socket state back to SS_UNCONNECTED in vsock_connect_timeout() vsock: Fix memory leak in vsock_connect() plip: avoid rcu debug splat ipv6: do not use RT_TOS for IPv6 flowlabel geneve: do not use RT_TOS for IPv6 flowlabel ACPI: property: Return type of acpi_add_nondev_subnodes() should be bool pinctrl: qcom: sm8250: Fix PDC map pinctrl: sunxi: Add I/O bias setting for H6 R-PIO pinctrl: qcom: msm8916: Allow CAMSS GP clocks to be muxed pinctrl: nomadik: Fix refcount leak in nmk_pinctrl_dt_subnode_to_map net: bgmac: Fix a BUG triggered by wrong bytes_compl devlink: Fix use-after-free after a failed reload virtio_net: fix memory leak inside XPD_TX with mergeable SUNRPC: Reinitialise the backchannel request buffers before reuse sunrpc: fix expiry of auth creds net: atlantic: fix aq_vec index out of range error can: mcp251x: Fix race condition on receive interrupt bpf: Check the validity of max_rdwr_access for sock local storage map iterator bpf: Acquire map uref in .init_seq_private for sock{map,hash} iterator bpf: Acquire map uref in .init_seq_private for sock local storage map iterator bpf: Acquire map uref in .init_seq_private for hash map iterator bpf: Acquire map uref in .init_seq_private for array map iterator NFSv4/pnfs: Fix a use-after-free bug in open NFSv4.1: RECLAIM_COMPLETE must handle EACCES NFSv4: Fix races in the legacy idmapper upcall NFSv4.1: Handle NFS4ERR_DELAY replies to OP_SEQUENCE correctly NFSv4.1: Don't decrease the value of seq_nr_highest_sent Documentation: ACPI: EINJ: Fix obsolete example apparmor: Fix memleak in aa_simple_write_to_buffer() apparmor: fix reference count leak in aa_pivotroot() apparmor: fix overlapping attachment computation apparmor: fix setting unconfined mode on a loaded profile apparmor: fix aa_label_asxprint return check apparmor: Fix failed mount permission check error message apparmor: fix absroot causing audited secids to begin with = apparmor: fix quiet_denied for file rules can: ems_usb: fix clang's -Wunaligned-access warning ALSA: usb-audio: More comprehensive mixer map for ASUS ROG Zenith II tracing: Have filter accept "common_cpu" to be consistent btrfs: fix lost error handling when looking up extended ref on log replay mmc: meson-gx: Fix an error handling path in meson_mmc_probe() mmc: pxamci: Fix an error handling path in pxamci_probe() mmc: pxamci: Fix another error handling path in pxamci_probe() ata: libata-eh: Add missing command name rds: add missing barrier to release_refill x86/mm: Use proper mask when setting PUD mapping ALSA: hda/realtek: Add quirk for Clevo NS50PU, NS70PU ALSA: info: Fix llseek return value when using callback Linux 5.10.137 btrfs: raid56: don't trust any cached sector in __raid56_parity_recover() btrfs: only write the sectors in the vertical stripe which has data stripes sched/fair: Fix fault in reweight_entity net_sched: cls_route: disallow handle of 0 net/9p: Initialize the iounit field during fid creation tee: add overflow check in register_shm_helper() kvm: x86/pmu: Fix the compare function used by the pmu event filter mtd: rawnand: arasan: Prevent an unsupported configuration Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm regression Revert "net: usb: ax88179_178a needs FLAG_SEND_ZLP" drm/vc4: change vc4_dma_range_matches from a global to static drm/bridge: tc358767: Fix (e)DP bridge endpoint parsing in dedicated function Revert "mwifiex: fix sleep in atomic context bugs caused by dev_coredumpv" tcp: fix over estimation in sk_forced_mem_schedule() mac80211: fix a memory leak where sta_info is not freed KVM: x86: Avoid theoretical NULL pointer dereference in kvm_irq_delivery_to_apic_fast() KVM: x86: Check lapic_in_kernel() before attempting to set a SynIC irq KVM: Add infrastructure and macro to mark VM as bugged net_sched: cls_route: remove from list when handle is 0 dm raid: fix address sanitizer warning in raid_status dm raid: fix address sanitizer warning in raid_resume ext4: correct the misjudgment in ext4_iget_extra_inode ext4: correct max_inline_xattr_value_size computing ext4: fix extent status tree race in writeback error recovery path ext4: update s_overhead_clusters in the superblock during an on-line resize ext4: fix use-after-free in ext4_xattr_set_entry ext4: make sure ext4_append() always allocates new block ext4: fix warning in ext4_iomap_begin as race between bmap and write ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h ext4: check if directory block is within i_size tracing: Use a struct alignof to determine trace event field alignment tpm: eventlog: Fix section mismatch for DEBUG_SECTION_MISMATCH KEYS: asymmetric: enforce SM2 signature use pkey algo xen-blkfront: Apply 'feature_persistent' parameter when connect xen-blkback: Apply 'feature_persistent' parameter when connect xen-blkback: fix persistent grants negotiation KVM: x86/pmu: Ignore pmu->global_ctrl check if vPMU doesn't support global_ctrl KVM: VMX: Mark all PERF_GLOBAL_(OVF)_CTRL bits reserved if there's no vPMU KVM: x86/pmu: Introduce the ctrl_mask value for fixed counter KVM: x86/pmu: Use different raw event masks for AMD and Intel KVM: x86/pmu: Use binary search to check filtered events KVM: x86/pmu: preserve IA32_PERF_CAPABILITIES across CPUID refresh KVM: nVMX: Inject #UD if VMXON is attempted with incompatible CR0/CR4 KVM: x86: Move vendor CR4 validity check to dedicated kvm_x86_ops hook KVM: SVM: Drop VMXE check from svm_set_cr4() KVM: VMX: Drop explicit 'nested' check from vmx_set_cr4() KVM: VMX: Drop guest CPUID check for VMXE in vmx_set_cr4() ACPI: CPPC: Do not prevent CPPC from working in the future btrfs: reset block group chunk force if we have to wait btrfs: reject log replay if there is unsupported RO compat flag um: Allow PM with suspend-to-idle timekeeping: contribute wall clock to rng on time change dm thin: fix use-after-free crash in dm_sm_register_threshold_callback kexec, KEYS, s390: Make use of built-in and secondary keyring for signature verification dm writecache: set a default MAX_WRITEBACK_JOBS serial: 8250: Fold EndRun device support into OxSemi Tornado code serial: 8250_pci: Replace dev_*() by pci_*() macros serial: 8250_pci: Refactor the loop in pci_ite887x_init() serial: 8250: Correct the clock for OxSemi PCIe devices serial: 8250: Dissociate 4MHz Titan ports from Oxford ports PCI/AER: Iterate over error counters instead of error strings PCI/ERR: Recover from RCEC AER errors PCI/ERR: Add pci_walk_bridge() to pcie_do_recovery() PCI/ERR: Avoid negated conditional for clarity PCI/ERR: Use "bridge" for clarity in pcie_do_recovery() PCI/ERR: Simplify by computing pci_pcie_type() once PCI/ERR: Simplify by using pci_upstream_bridge() PCI/ERR: Rename reset_link() to reset_subordinates() PCI/ERR: Bind RCEC devices to the Root Port driver PCI/AER: Write AER Capability only when we control it iommu/vt-d: avoid invalid memory access via node_online(NUMA_NO_NODE) KVM: x86: Signal #GP, not -EPERM, on bad WRMSR(MCi_CTL/STATUS) KVM: set_msr_mce: Permit guests to ignore single-bit ECC errors intel_th: pci: Add Raptor Lake-S CPU support intel_th: pci: Add Raptor Lake-S PCH support intel_th: pci: Add Meteor Lake-P support firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails usbnet: smsc95xx: Avoid link settings race on interrupt reception usbnet: smsc95xx: Don't clear read-only PHY interrupt mtd: rawnand: arasan: Fix clock rate in NV-DDR mtd: rawnand: arasan: Support NV-DDR interface mtd: rawnand: arasan: Fix a macro parameter mtd: rawnand: Add NV-DDR timings mtd: rawnand: arasan: Check the proposed data interface is supported mtd: rawnand: Add a helper to clarify the interface configuration drm/vc4: drv: Adopt the dma configuration from the HVS or V3D component HID: hid-input: add Surface Go battery quirk HID: Ignore battery for Elan touchscreen on HP Spectre X360 15-df0xxx drm/mediatek: Keep dsi as LP00 before dcs cmds transfer drm/mediatek: Allow commands to be sent during video mode drm/i915/dg1: Update DMC_DEBUG3 register spmi: trace: fix stack-out-of-bound access in SPMI tracing functions __follow_mount_rcu(): verify that mount_lock remains unchanged Input: gscps2 - check return value of ioremap() in gscps2_probe() posix-cpu-timers: Cleanup CPU timers before freeing them during exec x86/olpc: fix 'logical not is only applied to the left hand side' ftrace/x86: Add back ftrace_expected assignment x86/bugs: Enable STIBP for IBPB mitigated RETBleed scsi: qla2xxx: Fix losing FCP-2 targets during port perturbation tests scsi: qla2xxx: Fix losing FCP-2 targets on long port disable with I/Os scsi: qla2xxx: Fix erroneous mailbox timeout after PCI error injection scsi: qla2xxx: Turn off multi-queue for 8G adapters scsi: qla2xxx: Fix discovery issues in FC-AL topology scsi: zfcp: Fix missing auto port scan and thus missing target ports video: fbdev: s3fb: Check the size of screen before memset_io() video: fbdev: arkfb: Check the size of screen before memset_io() video: fbdev: vt8623fb: Check the size of screen before memset_io() x86/entry: Build thunk_$(BITS) only if CONFIG_PREEMPTION=y sched: Fix the check of nr_running at queue wakelist tools/thermal: Fix possible path truncations video: fbdev: arkfb: Fix a divide-by-zero bug in ark_set_pixclock() x86/numa: Use cpumask_available instead of hardcoded NULL check sched, cpuset: Fix dl_cpu_busy() panic due to empty cs->cpus_allowed sched/deadline: Merge dl_task_can_attach() and dl_cpu_busy() scripts/faddr2line: Fix vmlinux detection on arm64 genelf: Use HAVE_LIBCRYPTO_SUPPORT, not the never defined HAVE_LIBCRYPTO powerpc/pci: Fix PHB numbering when using opal-phbid kprobes: Forbid probing on trampoline and BPF code areas perf symbol: Fail to read phdr workaround powerpc/cell/axon_msi: Fix refcount leak in setup_msi_msg_address powerpc/xive: Fix refcount leak in xive_get_max_prio powerpc/spufs: Fix refcount leak in spufs_init_isolated_loader f2fs: fix to remove F2FS_COMPR_FL and tag F2FS_NOCOMP_FL at the same time f2fs: write checkpoint during FG_GC f2fs: don't set GC_FAILURE_PIN for background GC powerpc/pci: Prefer PCI domain assignment via DT 'linux,pci-domain' and alias powerpc/32: Do not allow selection of e5500 or e6500 CPUs on PPC32 ASoC: mchp-spdifrx: disable end of block interrupt on failures video: fbdev: sis: fix typos in SiS_GetModeID() video: fbdev: amba-clcd: Fix refcount leak bugs watchdog: armada_37xx_wdt: check the return value of devm_ioremap() in armada_37xx_wdt_probe() ASoC: audio-graph-card: Add of_node_put() in fail path fuse: Remove the control interface for virtio-fs ASoC: qcom: q6dsp: Fix an off-by-one in q6adm_alloc_copp() ASoC: fsl_easrc: use snd_pcm_format_t type for sample_format s390/zcore: fix race when reading from hardware system area s390/dump: fix old lowcore virtual vs physical address confusion perf tools: Fix dso_id inode generation comparison iommu/arm-smmu: qcom_iommu: Add of_node_put() when breaking out of loop mfd: max77620: Fix refcount leak in max77620_initialise_fps mfd: t7l66xb: Drop platform disable callback remoteproc: sysmon: Wait for SSCTL service to come up lib/smp_processor_id: fix imbalanced instrumentation_end() call kfifo: fix kfifo_to_user() return type rpmsg: qcom_smd: Fix refcount leak in qcom_smd_parse_edge iommu/exynos: Handle failed IOMMU device registration properly tty: n_gsm: fix missing corner cases in gsmld_poll() tty: n_gsm: fix DM command tty: n_gsm: fix wrong T1 retry count handling vfio/ccw: Do not change FSM state in subchannel event vfio/mdev: Make to_mdev_device() into a static inline vfio: Split creation of a vfio_device into init and register ops vfio: Simplify the lifetime logic for vfio_device vfio: Remove extra put/gets around vfio_device->group remoteproc: qcom: wcnss: Fix handling of IRQs ASoC: qcom: Fix missing of_node_put() in asoc_qcom_lpass_cpu_platform_probe() tty: n_gsm: fix race condition in gsmld_write() tty: n_gsm: fix packet re-transmission without open control channel tty: n_gsm: fix non flow control frames during mux flow off tty: n_gsm: fix wrong queuing behavior in gsm_dlci_data_output() tty: n_gsm: fix user open not possible at responder until initiator open tty: n_gsm: Delete gsmtty open SABM frame when config requester ASoC: samsung: change gpiod_speaker_power and rx1950_audio from global to static variables powerpc/perf: Optimize clearing the pending PMI and remove WARN_ON for PMI check in power_pmu_disable ASoC: samsung: h1940_uda1380: include proepr GPIO consumer header profiling: fix shift too large makes kernel panic selftests/livepatch: better synchronize test_klp_callbacks_busy remoteproc: k3-r5: Fix refcount leak in k3_r5_cluster_of_init rpmsg: mtk_rpmsg: Fix circular locking dependency ASoC: codecs: wcd9335: move gains from SX_TLV to S8_TLV ASoC: codecs: msm8916-wcd-digital: move gains from SX_TLV to S8_TLV serial: 8250_dw: Store LSR into lsr_saved_flags in dw8250_tx_wait_empty() serial: 8250: Export ICR access helpers for internal use ASoC: mediatek: mt8173-rt5650: Fix refcount leak in mt8173_rt5650_dev_probe ASoC: codecs: da7210: add check for i2c_add_driver ASoC: mt6797-mt6351: Fix refcount leak in mt6797_mt6351_dev_probe ASoC: mediatek: mt8173: Fix refcount leak in mt8173_rt5650_rt5676_dev_probe ASoC: samsung: Fix error handling in aries_audio_probe ASoC: cros_ec_codec: Fix refcount leak in cros_ec_codec_platform_probe opp: Fix error check in dev_pm_opp_attach_genpd() usb: cdns3: Don't use priv_dev uninitialized in cdns3_gadget_ep_enable() jbd2: fix assertion 'jh->b_frozen_data == NULL' failure when journal aborted ext4: recover csum seed of tmp_inode after migrating to extents jbd2: fix outstanding credits assert in jbd2_journal_commit_transaction() nvme: use command_id instead of req->tag in trace_nvme_complete_rq() null_blk: fix ida error handling in null_add_dev() RDMA/rxe: Fix error unwind in rxe_create_qp() RDMA/mlx5: Add missing check for return value in get namespace flow selftests: kvm: set rax before vmcall mm/mmap.c: fix missing call to vm_unacct_memory in mmap_region RDMA/srpt: Fix a use-after-free RDMA/srpt: Introduce a reference count in struct srpt_device RDMA/srpt: Duplicate port name members platform/olpc: Fix uninitialized data in debugfs write usb: cdns3: change place of 'priv_ep' assignment in cdns3_gadget_ep_dequeue(), cdns3_gadget_ep_enable() USB: serial: fix tty-port initialized comments PCI: tegra194: Fix link up retry sequence PCI: tegra194: Fix Root Port interrupt handling HID: alps: Declare U1_UNICORN_LEGACY support mmc: cavium-thunderx: Add of_node_put() when breaking out of loop mmc: cavium-octeon: Add of_node_put() when breaking out of loop HID: mcp2221: prevent a buffer overflow in mcp_smbus_write() gpio: gpiolib-of: Fix refcount bugs in of_mm_gpiochip_add_data() RDMA/hfi1: fix potential memory leak in setup_base_ctxt() RDMA/siw: Fix duplicated reported IW_CM_EVENT_CONNECT_REPLY event RDMA/hns: Fix incorrect clearing of interrupt status register RDMA/qedr: Fix potential memory leak in __qedr_alloc_mr() RDMA/qedr: Improve error logs for rdma_alloc_tid error return RDMA/rtrs-srv: Fix modinfo output for stringify RDMA/rtrs: Avoid Wtautological-constant-out-of-range-compare RDMA/rtrs: Define MIN_CHUNK_SIZE um: random: Don't initialise hwrng struct with zero interconnect: imx: fix max_node_id eeprom: idt_89hpesx: uninitialized data in idt_dbgfs_csr_write() usb: dwc3: qcom: fix missing optional irq warnings usb: dwc3: core: Do not perform GCTL_CORE_SOFTRESET during bootup usb: dwc3: core: Deprecate GCTL.CORESOFTRESET usb: aspeed-vhub: Fix refcount leak bug in ast_vhub_init_desc() usb: gadget: udc: amd5536 depends on HAS_DMA xtensa: iss: fix handling error cases in iss_net_configure() xtensa: iss/network: provide release() callback scsi: smartpqi: Fix DMA direction for RAID requests PCI: qcom: Set up rev 2.1.0 PARF_PHY before enabling clocks PCI/portdrv: Don't disable AER reporting in get_port_device_capability() KVM: s390: pv: leak the topmost page table when destroy fails mmc: block: Add single read for 4k sector cards mmc: sdhci-of-at91: fix set_uhs_signaling rewriting of MC1R memstick/ms_block: Fix a memory leak memstick/ms_block: Fix some incorrect memory allocation mmc: sdhci-of-esdhc: Fix refcount leak in esdhc_signal_voltage_switch staging: rtl8192u: Fix sleep in atomic context bug in dm_fsync_timer_callback intel_th: msu: Fix vmalloced buffers intel_th: msu-sink: Potential dereference of null pointer intel_th: Fix a resource leak in an error handling path PCI: endpoint: Don't stop controller when unbinding endpoint function dmaengine: sf-pdma: Add multithread support for a DMA channel dmaengine: sf-pdma: apply proper spinlock flags in sf_pdma_prep_dma_memcpy() KVM: arm64: Don't return from void function soundwire: bus_type: fix remove and shutdown support PCI: dwc: Always enable CDM check if "snps,enable-cdm-check" exists PCI: dwc: Deallocate EPC memory on dw_pcie_ep_init() errors PCI: dwc: Add unroll iATU space support to dw_pcie_disable_atu() clk: qcom: camcc-sdm845: Fix topology around titan_top power domain clk: qcom: ipq8074: set BRANCH_HALT_DELAY flag for UBI clocks clk: qcom: ipq8074: fix NSS port frequency tables clk: qcom: ipq8074: SW workaround for UBI32 PLL lock clk: qcom: ipq8074: fix NSS core PLL-s usb: host: xhci: use snprintf() in xhci_decode_trb() clk: qcom: clk-krait: unlock spin after mux completion driver core: fix potential deadlock in __driver_attach misc: rtsx: Fix an error handling path in rtsx_pci_probe() dmaengine: dw-edma: Fix eDMA Rd/Wr-channels and DMA-direction semantics mwifiex: fix sleep in atomic context bugs caused by dev_coredumpv mwifiex: Ignore BTCOEX events from the 88W8897 firmware KVM: Don't set Accessed/Dirty bits for ZERO_PAGE clk: mediatek: reset: Fix written reset bit offset iio: accel: bma400: Reordering of header files platform/chrome: cros_ec: Always expose last resume result iio: accel: bma400: Fix the scale min and max macro values netfilter: xtables: Bring SPDX identifier back usb: xhci: tegra: Fix error check usb: gadget: tegra-xudc: Fix error check in tegra_xudc_powerdomain_init() usb: ohci-nxp: Fix refcount leak in ohci_hcd_nxp_probe usb: host: Fix refcount leak in ehci_hcd_ppc_of_probe fpga: altera-pr-ip: fix unsigned comparison with less than zero mtd: st_spi_fsm: Add a clk_disable_unprepare() in .probe()'s error path mtd: partitions: Fix refcount leak in parse_redboot_of mtd: sm_ftl: Fix deadlock caused by cancel_work_sync in sm_release HID: cp2112: prevent a buffer overflow in cp2112_xfer() PCI: tegra194: Fix PM error handling in tegra_pcie_config_ep() mtd: rawnand: meson: Fix a potential double free issue mtd: maps: Fix refcount leak in ap_flash_init mtd: maps: Fix refcount leak in of_flash_probe_versatile clk: renesas: r9a06g032: Fix UART clkgrp bitsel wireguard: allowedips: don't corrupt stack when detecting overflow wireguard: ratelimiter: use hrtimer in selftest dccp: put dccp_qpolicy_full() and dccp_qpolicy_push() in the same lock net: ionic: fix error check for vlan flags in ionic_set_nic_features() net: rose: fix netdev reference changes netdevsim: Avoid allocation warnings triggered from user space iavf: Fix max_rate limiting net: allow unbound socket for packets in VRF when tcp_l3mdev_accept set tcp: Fix data-races around sysctl_tcp_l3mdev_accept. ipv6: add READ_ONCE(sk->sk_bound_dev_if) in INET6_MATCH() tcp: sk->sk_bound_dev_if once in inet_request_bound_dev_if() inet: add READ_ONCE(sk->sk_bound_dev_if) in INET_MATCH() crypto: hisilicon/sec - fix auth key size error crypto: inside-secure - Add missing MODULE_DEVICE_TABLE for of crypto: hisilicon/hpre - don't use GFP_KERNEL to alloc mem during softirq net/mlx5e: Fix the value of MLX5E_MAX_RQ_NUM_MTTS net/mlx5e: Remove WARN_ON when trying to offload an unsupported TLS cipher/version media: cedrus: hevc: Add check for invalid timestamp wifi: libertas: Fix possible refcount leak in if_usb_probe() wifi: iwlwifi: mvm: fix double list_add at iwl_mvm_mac_wake_tx_queue wifi: wil6210: debugfs: fix uninitialized variable use in `wil_write_file_wmi()` i2c: mux-gpmux: Add of_node_put() when breaking out of loop i2c: cadence: Support PEC for SMBus block read Bluetooth: hci_intel: Add check for platform_driver_register can: pch_can: pch_can_error(): initialize errc before using it can: error: specify the values of data[5..7] of CAN error frames can: usb_8dev: do not report txerr and rxerr during bus-off can: kvaser_usb_leaf: do not report txerr and rxerr during bus-off can: kvaser_usb_hydra: do not report txerr and rxerr during bus-off can: sun4i_can: do not report txerr and rxerr during bus-off can: hi311x: do not report txerr and rxerr during bus-off can: sja1000: do not report txerr and rxerr during bus-off can: rcar_can: do not report txerr and rxerr during bus-off can: pch_can: do not report txerr and rxerr during bus-off selftests/bpf: fix a test for snprintf() overflow wifi: p54: add missing parentheses in p54_flush() wifi: p54: Fix an error handling path in p54spi_probe() wifi: wil6210: debugfs: fix info leak in wil_write_file_wmi() fs: check FMODE_LSEEK to control internal pipe splicing bpf: Fix subprog names in stack traces. selftests: timers: clocksource-switch: fix passing errors from child selftests: timers: valid-adjtimex: build fix for newer toolchains libbpf: Fix the name of a reused map tcp: make retransmitted SKB fit into the send window drm/exynos/exynos7_drm_decon: free resources when clk_set_parent() failed. mediatek: mt76: mac80211: Fix missing of_node_put() in mt76_led_init() mt76: mt76x02u: fix possible memory leak in __mt76x02u_mcu_send_msg media: platform: mtk-mdp: Fix mdp_ipi_comm structure alignment crypto: hisilicon - Kunpeng916 crypto driver don't sleep when in softirq crypto: hisilicon/sec - don't sleep when in softirq crypto: hisilicon/sec - fixes some coding style drm/msm/mdp5: Fix global state lock backoff net: hinic: avoid kernel hung in hinic_get_stats64() net: hinic: fix bug that ethtool get wrong stats hinic: Use the bitmap API when applicable lib: bitmap: provide devm_bitmap_alloc() and devm_bitmap_zalloc() lib: bitmap: order includes alphabetically drm: bridge: sii8620: fix possible off-by-one drm/mediatek: dpi: Only enable dpi after the bridge is enabled drm/mediatek: dpi: Remove output format of YUV drm/rockchip: Fix an error handling path rockchip_dp_probe() drm/rockchip: vop: Don't crash for invalid duplicate_state() selftests/xsk: Destroy BPF resources only when ctx refcount drops to 0 crypto: arm64/gcm - Select AEAD for GHASH_ARM64_CE drm/vc4: hdmi: Correct HDMI timing registers for interlaced modes drm/vc4: hdmi: Fix timings for interlaced modes drm/vc4: hdmi: Limit the BCM2711 to the max without scrambling drm/vc4: hdmi: Don't access the connector state in reset if kmalloc fails drm/vc4: hdmi: Avoid full hdmi audio fifo writes drm/vc4: hdmi: Remove firmware logic for MAI threshold setting drm/vc4: dsi: Add correct stop condition to vc4_dsi_encoder_disable iteration drm/vc4: dsi: Fix dsi0 interrupt support drm/vc4: dsi: Register dsi0 as the correct vc4 encoder type drm/vc4: dsi: Introduce a variant structure drm/vc4: dsi: Use snprintf for the PHY clocks instead of an array drm/vc4: drv: Remove the DSI pointer in vc4_drv drm/vc4: dsi: Correct pixel order for DSI0 drm/vc4: dsi: Correct DSI divider calculations drm/vc4: plane: Fix margin calculations for the right/bottom edges drm/vc4: plane: Remove subpixel positioning check media: tw686x: Fix memory leak in tw686x_video_init media: v4l2-mem2mem: prevent pollerr when last_buffer_dequeued is set media: hdpvr: fix error value returns in hdpvr_read drm/mcde: Fix refcount leak in mcde_dsi_bind drm: bridge: adv7511: Add check for mipi_dsi_driver_register crypto: ccp - During shutdown, check SEV data pointer before using test_bpf: fix incorrect netdev features drm/radeon: fix incorrrect SPDX-License-Identifiers wifi: iwlegacy: 4965: fix potential off-by-one overflow in il4965_rs_fill_link_cmd() ath9k: fix use-after-free in ath9k_hif_usb_rx_cb media: tw686x: Register the irq at the end of probe crypto: sun8i-ss - fix infinite loop in sun8i_ss_setup_ivs() i2c: Fix a potential use after free net: fix sk_wmem_schedule() and sk_rmem_schedule() errors crypto: sun8i-ss - fix error codes in allocate_flows() crypto: sun8i-ss - do not allocate memory when handling hash requests drm: adv7511: override i2c address of cec before accessing it virtio-gpu: fix a missing check to avoid NULL dereference i2c: npcm: Correct slave role behavior i2c: npcm: Remove own slave addresses 2:10 drm/mediatek: Add pull-down MIPI operation in mtk_dsi_poweroff function drm/mediatek: Separate poweron/poweroff from enable/disable and define new funcs drm/mediatek: Modify dsi funcs to atomic operations drm/radeon: fix potential buffer overflow in ni_set_mc_special_registers() ath11k: Fix incorrect debug_mask mappings drm/mipi-dbi: align max_chunk to 2 in spi_transfer ath11k: fix netdev open race wifi: rtlwifi: fix error codes in rtl_debugfs_set_write_h2c() drm/st7735r: Fix module autoloading for Okaya RH128128T ath10k: do not enforce interrupt trigger type drm/bridge: tc358767: Make sure Refclk clock are enabled drm/bridge: tc358767: Move (e)DP bridge endpoint parsing into dedicated function pwm: lpc18xx-sct: Convert to devm_platform_ioremap_resource() pwm: sifive: Shut down hardware only after pwmchip_remove() completed pwm: sifive: Ensure the clk is enabled exactly once per running PWM pwm: sifive: Simplify offset calculation for PWMCMP registers pwm: sifive: Don't check the return code of pwmchip_remove() dm: return early from dm_pr_call() if DM device is suspended thermal/tools/tmon: Include pthread and time headers in tmon.h selftests/seccomp: Fix compile warning when CC=clang nohz/full, sched/rt: Fix missed tick-reenabling bug in dequeue_task_rt() drivers/perf: arm_spe: Fix consistency of SYS_PMSCR_EL1.CX arm64: dts: qcom: qcs404: Fix incorrect USB2 PHYs assignment soc: qcom: Make QCOM_RPMPD depend on PM regulator: of: Fix refcount leak bug in of_get_regulation_constraints() blktrace: Trace remapped requests correctly block: remove the request_queue to argument request based tracepoints hwmon: (drivetemp) Add module alias blk-mq: don't create hctx debugfs dir until q->debugfs_dir is created erofs: avoid consecutive detection for Highmem memory arm64: tegra: Fix SDMMC1 CD on P2888 arm64: dts: mt7622: fix BPI-R64 WPS button bus: hisi_lpc: fix missing platform_device_put() in hisi_lpc_acpi_probe() ARM: dts: qcom: pm8841: add required thermal-sensor-cells soc: qcom: aoss: Fix refcount leak in qmp_cooling_devices_register soc: qcom: ocmem: Fix refcount leak in of_get_ocmem ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP regulator: qcom_smd: Fix pm8916_pldo range cpufreq: zynq: Fix refcount leak in zynq_get_revision ARM: OMAP2+: Fix refcount leak in omap3xxx_prm_late_init ARM: OMAP2+: Fix refcount leak in omapdss_init_of ARM: dts: qcom: mdm9615: add missing PMIC GPIO reg block: fix infinite loop for invalid zone append soc: fsl: guts: machine variable might be unset locking/lockdep: Fix lockdep_init_map_*() confusion arm64: cpufeature: Allow different PMU versions in ID_DFR0_EL1 hexagon: select ARCH_WANT_LD_ORPHAN_WARN ARM: dts: ast2600-evb: fix board compatible ARM: dts: ast2500-evb: fix board compatible x86/pmem: Fix platform-device leak in error path arm64: dts: renesas: Fix thermal-sensors on single-zone sensors soc: amlogic: Fix refcount leak in meson-secure-pwrc.c soc: renesas: r8a779a0-sysc: Fix A2DP1 and A2CV[2357] PDR values Input: atmel_mxt_ts - fix up inverted RESET handler ARM: dts: imx7d-colibri-emmc: add cpu1 supply ACPI: processor/idle: Annotate more functions to live in cpuidle section ARM: bcm: Fix refcount leak in bcm_kona_smc_init arm64: dts: renesas: beacon: Fix regulator node names meson-mx-socinfo: Fix refcount leak in meson_mx_socinfo_init ARM: findbit: fix overflowing offset spi: spi-rspi: Fix PIO fallback on RZ platforms powerpc/64s: Disable stack variable initialisation for prom_init selinux: Add boundary check in put_entry() PM: hibernate: defer device probing when resuming from hibernation firmware: tegra: Fix error check return value of debugfs_create_file() ARM: shmobile: rcar-gen2: Increase refcount for new reference arm64: dts: allwinner: a64: orangepi-win: Fix LED node name arm64: dts: qcom: ipq8074: fix NAND node name ACPI: LPSS: Fix missing check in register_device_clock() ACPI: PM: save NVS memory for Lenovo G40-45 ACPI: EC: Drop the EC_FLAGS_IGNORE_DSDT_GPE quirk ACPI: EC: Remove duplicate ThinkPad X1 Carbon 6th entry from DMI quirks ARM: OMAP2+: display: Fix refcount leak bug spi: synquacer: Add missing clk_disable_unprepare() ARM: dts: BCM5301X: Add DT for Meraki MR26 ARM: dts: imx6ul: fix qspi node compatible ARM: dts: imx6ul: fix lcdif node compatible ARM: dts: imx6ul: fix csi node compatible ARM: dts: imx6ul: fix keypad compatible ARM: dts: imx6ul: change operating-points to uint32-matrix ARM: dts: imx6ul: add missing properties for sram wait: Fix __wait_event_hrtimeout for RT/DL tasks irqchip/mips-gic: Check the return value of ioremap() in gic_of_init() genirq: GENERIC_IRQ_IPI depends on SMP irqchip/mips-gic: Only register IPI domain when SMP is enabled genirq: Don't return error on missing optional irq_request_resources() ext2: Add more validity checks for inode counts arm64: fix oops in concurrently setting insn_emulation sysctls arm64: Do not forget syscall when starting a new thread. x86: Handle idle=nomwait cmdline properly for x86_idle epoll: autoremove wakers even more aggressively netfilter: nf_tables: fix null deref due to zeroed list head netfilter: nf_tables: do not allow RULE_ID to refer to another chain netfilter: nf_tables: do not allow CHAIN_ID to refer to another table netfilter: nf_tables: do not allow SET_ID to refer to another table lockdep: Allow tuning tracing capacity constants. usb: dwc3: gadget: fix high speed multiplier setting usb: dwc3: gadget: refactor dwc3_repare_one_trb arm64: dts: uniphier: Fix USB interrupts for PXs3 SoC ARM: dts: uniphier: Fix USB interrupts for PXs2 SoC USB: HCD: Fix URB giveback issue in tasklet function usb: typec: ucsi: Acknowledge the GET_ERROR_STATUS command completion coresight: Clear the connection field properly MIPS: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK powerpc/powernv: Avoid crashing if rng is NULL powerpc/ptdump: Fix display of RW pages on FSL_BOOK3E powerpc/fsl-pci: Fix Class Code of PCIe Root Port PCI: Add defines for normal and subtractive PCI bridges ia64, processor: fix -Wincompatible-pointer-types in ia64_get_irr() media: [PATCH] pci: atomisp_cmd: fix three missing checks on list iterator md-raid10: fix KASAN warning md-raid: destroy the bitmap after destroying the thread serial: mvebu-uart: uart2 error bits clearing fuse: limit nsec scsi: qla2xxx: Zero undefined mailbox IN registers scsi: qla2xxx: Fix incorrect display of max frame size scsi: sg: Allow waiting for commands to complete on removed device iio: light: isl29028: Fix the warning in isl29028_remove() mtd: rawnand: arasan: Update NAND bus clock instead of system clock drm/amdgpu: Check BO's requested pinning domains against its preferred_domains drm/nouveau/acpi: Don't print error when we get -EINPROGRESS from pm_runtime drm/nouveau: Don't pm_runtime_put_sync(), only pm_runtime_put_autosuspend() drm/nouveau: fix another off-by-one in nvbios_addr drm/vc4: hdmi: Disable audio if dmas property is present but empty drm/gem: Properly annotate WW context on drm_gem_lock_reservations() error parisc: io_pgetevents_time64() needs compat syscall in 32-bit compat mode parisc: Check the return value of ioremap() in lba_driver_probe() parisc: Fix device names in /proc/iomem ovl: drop WARN_ON() dentry is NULL in ovl_encode_fh() usbnet: Fix linkwatch use-after-free on disconnect fbcon: Fix accelerated fbdev scrolling while logo is still shown fbcon: Fix boundary checks for fbcon=vc:n1-n2 parameters thermal: sysfs: Fix cooling_device_stats_setup() error code path fs: Add missing umask strip in vfs_tmpfile vfs: Check the truncate maximum size in inode_newsize_ok() tty: vt: initialize unicode screen buffer ALSA: hda/realtek: Add a quirk for HP OMEN 15 (8786) mute LED ALSA: hda/realtek: Add quirk for another Asus K42JZ model ALSA: hda/cirrus - support for iMac 12,1 model ALSA: hda/conexant: Add quirk for LENOVO 20149 Notebook model mm/mremap: hold the rmap lock in write mode when moving page table entries. xfs: fix I_DONTCACHE xfs: only set IOMAP_F_SHARED when providing a srcmap to a write mm: Add kvrealloc() riscv: set default pm_power_off to NULL KVM: x86: Tag kvm_mmu_x86_module_init() with __init KVM: x86: Set error code to segment selector on LLDT/LTR non-canonical #GP KVM: x86: Mark TSS busy during LTR emulation _after_ all fault checks KVM: nVMX: Let userspace set nVMX MSR to any _host_ supported value KVM: s390: pv: don't present the ecall interrupt twice KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 KVM: nVMX: Snapshot pre-VM-Enter DEBUGCTL for !nested_run_pending case KVM: nVMX: Snapshot pre-VM-Enter BNDCFGS for !nested_run_pending case HID: wacom: Don't register pad_input for touch switch HID: wacom: Only report rotation for art pen add barriers to buffer_uptodate and set_buffer_uptodate wifi: mac80211_hwsim: use 32-bit skb cookie wifi: mac80211_hwsim: add back erroneously removed cast wifi: mac80211_hwsim: fix race condition in pending packet ALSA: hda/realtek: Add quirk for HP Spectre x360 15-eb0xxx ALSA: hda/realtek: Add quirk for Clevo NV45PZ ALSA: bcd2000: Fix a UAF bug on the error path of probing scsi: Revert "scsi: qla2xxx: Fix disk failure to rediscover" Revert "pNFS: nfs3_set_ds_client should set NFS_CS_NOPING" x86: link vdso and boot with -z noexecstack --no-warn-rwx-segments Makefile: link with -z noexecstack --no-warn-rwx-segments Conflicts: Documentation/devicetree/bindings Documentation/devicetree/bindings/arm/qcom.yaml Documentation/devicetree/bindings/clock/qcom,gcc-msm8996.yaml Documentation/devicetree/bindings/dma/moxa,moxart-dma.txt Documentation/devicetree/bindings/regulator/nxp,pca9450-regulator.yaml drivers/interconnect/qcom/icc-rpmh.c drivers/remoteproc/qcom_sysmon.c drivers/rpmsg/qcom_glink_native.c net/qrtr/qrtr.c Change-Id: If4f77aa8e63e7847571d37c1ba947f235236afff Signed-off-by: Srinivasarao Pathipati <quic_c_spathi@quicinc.com> |
||
qctecmdr
|
7247a2a87f | Merge "net: qrtr: gunyah: Add bounds check in rx path" | ||
Sarannya S
|
32d9c3a2f2 |
net: qrtr: gunyah: Add bounds check on tx path
Add bounds check on values read from shared memory in the tx path. In cases where the VM is misbehaving, the qrtr gunyah transport should exit and print a warning when bogus values may cause out of bounds to be read. Change-Id: I73abb3994b90850ccfd8d41266e53eb4a38a62f6 Signed-off-by: Chris Lew <quic_clew@quicinc.com> Signed-off-by: Sarannya S <quic_sarannya@quicinc.com> |
||
Chris Lew
|
711797f614 |
net: qrtr: gunyah: Add bounds check in rx path
Validate the values read from shared memory in the receive path. In the case where a VM is misbehaving, the qrtr gunyah transport should return immediately and print a warning. Change-Id: I88ec702e3f6e90a3aadb77d5d817129817ad6bbd Signed-off-by: Chris Lew <quic_clew@quicinc.com> |
||
Sarannya S
|
b150edebe3 |
net: qrtr: mhi: Do not free skb on EAGAIN error
When MHI layer returns -EAGAIN to mhi_qrtr_send, do not free skb as it would lead to use-after-free of sk_buff when the message is retransmitted again. Change-Id: I8c117c4b5303b6ea158f47c46edf5501237fc8a4 Signed-off-by: Sarannya S <quic_sarannya@quicinc.com> |
||
Sarannya S
|
b984f1b22d |
net: qrtr: mhi: Retry mhi_qrtr send on error
On getting an EAGAIN error from MHI, add a retry to retransmit the message again. Change-Id: I8e1c75bec7fdd0871dd92e14f640cab19c7f0985 Signed-off-by: Sarannya S <quic_sarannya@quicinc.com> |
||
Sivaji Boddupilli
|
8243eb03a3 |
net: qrtr: Fix duplicate server announcement in qrtr
Currently, hello_sent flag is incrementing after successful transmit of first hello packet. By this time, another thread of ns hello packet is passing the check condition in qrtr_node_enqueue function.This patch will increment the hello_sent flag just after entering qrtr_node_enqueue function. By the time NS comes up, transport driver is already probed and hello packet is sent to the remote. While NS binding to the socket, resets hello_sent flag and again sends the hello packet to the remote. This patch also will reset the hello_sent and hello_rcvd flags when NS releases the socket. This will avoid sending duplicate Hello packets to the remote. Change-Id: Ibfaf8fae3cb50e100af37c600daa8b2d38e3d604 Signed-off-by: Sivaji Boddupilli <quic_boddupil@quicinc.com> |
||
Matthew Wilcox (Oracle)
|
4f7286422a |
qrtr: Convert qrtr_ports from IDR to XArray
commit 3cbf7530a163d048a6376cd22fecb9cdcb23b192 upstream. The XArray interface is easier for this driver to use. Also fixes a bug reported by the improper use of GFP_ATOMIC. Signed-off-by: Matthew Wilcox (Oracle) <willy@infradead.org> Reviewed-by: Manivannan Sadhasivam <manivannan.sadhasivam@linaro.org> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Stanislav Goriainov <goriainov@ispras.ru> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> |
||
Sarannya S
|
e54efe5654 |
net: qrtr: Support pm_wakeup_event() based on svc
Instead of filtering pm_wakeup_event() call via node ID, add support to do it based on the service ID. This provides more fine control over which incoming packet can wakeup APPS. Change-Id: I1e4a7f6d04a2e37104191bedc5d87070aabc002b Signed-off-by: Tony Truong <quic_truong@quicinc.com> Signed-off-by: Sarannya S <quic_sarannya@quicinc.com> |
||
qctecmdr
|
6ce69869a2 | Merge "net: qrtr: Use xa_load in qrtr_get_service_id" | ||
qctecmdr
|
236d5c8100 | Merge "net: qrtr: add resume tx logging" | ||
Sarannya S
|
7b35030a35 |
net: qrtr: Use xa_load in qrtr_get_service_id
In qrtr_get_service_id, use xa_load instead of node_get to check if the node exists or not. Calling node_get from interrupt context can cause potential deadlock since it calls into xa_store to allocate the node if it does not exist. Change-Id: Ida9f7a113417f0d184c0903004d94dd2eca6c472 Signed-off-by: Sarannya S <quic_sarannya@quicinc.com> |
||
Sivaji Boddupilli
|
4f7bb0f17b |
net: qrtr: add resume tx logging
Add xarray database to log both skb allocation failed packets and skb allocation success packets when cf flag bit is set in the packet. Change-Id: Iafc4c781e7fde37b8d19fc050dc9d769b31c306e Signed-off-by: Sivaji Boddupilli <quic_boddupil@quicinc.com> |
||
Sivaji Boddupilli
|
abeb6d4782 |
Revert "net: qrtr: ns: Fix Announce services for all nodes"
This reverts commit
|
||
Manoharan Vijaya Raghavan
|
26e3327adc |
net: qrtr: ns: Fix Announce services for all nodes
ns service was notifying only local node ID services after a pci disconnect and reconnect. Fix it to iterate over all nodes and announce services of all nodes. Change-Id: I4f91a71ad847b815318a7de47134f6b9c57dff53 Signed-off-by: Manoharan Vijaya Raghavan <mraghava@codeaurora.org> |
||
Deepak Kumar Singh
|
af51b5af82 |
net: qrtr: dump only header for invalid packet
Dumping whole packet is not very useful and it is causing watchdog bite if packet size is large. Dump only qrtr header of packet. Change-Id: I30102c8a4fb69cb0b588080341b40b9825ef86b0 Signed-off-by: Deepak Kumar Singh <quic_deesin@quicinc.com> |
||
qctecmdr
|
01e20ad52a | Merge "net: qrtr: smd: Dump invalid packet" | ||
Deepak Kumar Singh
|
cdf887deed |
net: qrtr: Pass correct condition expression for wait function
Evaluating condition expression in a separate statement and passing the result in wait_event_interruptible_timeout can casue race condition between expression evaluation and change in variabes of condition expression from some other thread. Pass whole condition expression as argument of wait function. Change-Id: Ie927e17874d2fa5a65ea348e572617ebdb3b0c2e Signed-off-by: Deepak Kumar Singh <quic_deesin@quicinc.com> |
||
Chris Lew
|
161733a7d2 |
net: qrtr: smd: Dump invalid packet
If a corrupted packet is detected, dump the contents of the packet to help debug the source of the corruption. Change-Id: I7320edeb45ffb707fc8070e9abc9c2675f5831ea Signed-off-by: Chris Lew <quic_clew@quicinc.com> |
||
Chris Lew
|
95f6869800 |
net: qrtr: ns: Force rx buffer size
Use SO_RCVBUFFORCE to force the max RX buffer size to be larger than the default system limit of 230k. The control socket needs to be able to grow and scale based on system performance. Packet drops to the control socket are likely fatal to the protocol. Change-Id: I7e5c9a6bddf8429311327559c009626b15199e7b Signed-off-by: Chris Lew <quic_clew@quicinc.com> |
||
qctecmdr
|
001d73c77d | Merge "net: qrtr: Add missing reference cleanup" | ||
Chris Lew
|
4fdfca5c8e |
net: qrtr: Add missing reference cleanup
Add missing node reference put when memory allocation fails for the tx_resume packet. Without this there could be dangling references to a node. Change-Id: I5a5dfa437243a39d3da660251c0357ff6eb6cbff Signed-off-by: Chris Lew <quic_clew@quicinc.com> |
||
Chris Lew
|
23acd636b8 |
net: qrtr: Rework the wakeup info print
The qrtr module is required to be in first stage init to support the creation of qrtr sockets. The transport layers are often in second stage init. The current wakeup prints depend on some information from the second stage init. Rework the logic so the dependency is only between the qrtr transport and transport drivers. Change-Id: I6b60ed70c46c5095a35ee727ff8b3512cb417242 Signed-off-by: Chris Lew <quic_clew@quicinc.com> |
||
qctecmdr
|
9eb990d0a9 | Merge "net: qrtr: gunyah: Cleanup gh_rm_mem_qcom_lookup_sgl calls" | ||
Patrick Daly
|
0b4dfc4dfe |
net: qrtr: gunyah: Cleanup gh_rm_mem_qcom_lookup_sgl calls
Recent hypervisor images no longer support gh_rm_mem_qcom_lookup_sgl(). Remove this to cleanup associated error messages in the log. Change-Id: I01cd80cb5dc199f778a7ad44fa2a3cfa5f56a31f Signed-off-by: Patrick Daly <quic_pdaly@quicinc.com> |
||
qctecmdr
|
712b88cbf7 | Merge "net: qrtr: Change error logging in callback" | ||
qctecmdr
|
3380d355aa |
Merge "Merge keystone/android12-5.10-keystone-qcom-release.66+ (3499d10 ) into msm-5.10"
|
||
Sivasri Kumar, Vanka
|
682c074515 |
Merge keystone/android12-5.10-keystone-qcom-release.66+ (3499d10 ) into msm-5.10
* refs/heads/tmp-3499d10: ANDROID: GKI: rockchip: Enable symbols for pinctrl and rk8xx ANDROID: GKI: rockchip: Enable symbols for typec ANDROID: GKI: rockchip: Add build script ANDROID: GKI: Add some symbols to symbol list to support vendor module UPSTREAM: core: Add L2P entry swap quirk for Micron UFS ANDROID: gki_defconfig: remove CONFIG_UBSAN_MISC entry UPSTREAM: ubsan: remove overflow checks UPSTREAM: ubsan: disable unsigned-overflow check for i386 UPSTREAM: ubsan: expand tests and reporting UPSTREAM: ubsan: remove UBSAN_MISC in favor of individual options UPSTREAM: ubsan: enable for all*config builds UPSTREAM: ubsan: disable UBSAN_TRAP for all*config UPSTREAM: ubsan: disable object-size sanitizer under GCC UPSTREAM: ubsan: move cc-option tests into Kconfig UPSTREAM: ubsan: remove redundant -Wno-maybe-uninitialized UPSTREAM: mm/mremap: fix BUILD_BUG_ON() error in get_extent FROMGIT: dma-buf: system_heap: Avoid warning on mid-order allocations ANDROID: mm: cma: disable LRU cache early ANDROID: GKI: update virtual device symbol list for led audio driver. Linux 5.10.66 Revert "time: Handle negative seconds correctly in timespec64_to_ns()" Revert "posix-cpu-timers: Force next expiration recalc after itimer reset" Revert "block: nbd: add sanity check for first_minor" Revert "Bluetooth: Move shutdown callback before flushing tx and rx queue" Linux 5.10.65 clk: kirkwood: Fix a clocking boot regression backlight: pwm_bl: Improve bootloader/kernel device handover fbmem: don't allow too huge resolutions IMA: remove the dependency on CRYPTO_MD5 IMA: remove -Wmissing-prototypes warning fuse: flush extending writes fuse: truncate pagecache on atomic_o_trunc ARM: dts: at91: add pinctrl-{names, 0} for all gpios KVM: nVMX: Unconditionally clear nested.pi_pending on nested VM-Enter KVM: VMX: avoid running vmx_handle_exit_irqoff in case of emulation KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted KVM: s390: index kvm->arch.idle_mask by vcpu_idx Revert "KVM: x86: mmu: Add guest physical address check in translate_gpa()" x86/resctrl: Fix a maybe-uninitialized build warning treated as error perf/x86/amd/ibs: Extend PERF_PMU_CAP_NO_EXCLUDE to IBS Op tty: Fix data race between tiocsti() and flush_to_ldisc() bio: fix page leak bio_add_hw_page failure io_uring: IORING_OP_WRITE needs hash_reg_file set time: Handle negative seconds correctly in timespec64_to_ns() f2fs: guarantee to write dirty data when enabling checkpoint back iwlwifi Add support for ax201 in Samsung Galaxy Book Flex2 Alpha ASoC: rt5682: Remove unused variable in rt5682_i2c_remove() ipv4: fix endianness issue in inet_rtm_getroute_build_skb() octeontx2-af: Set proper errorcode for IPv4 checksum errors octeontx2-af: Fix static code analyzer reported issues octeontx2-af: Fix loop in free and unmap counter net: qualcomm: fix QCA7000 checksum handling net: sched: Fix qdisc_rate_table refcount leak when get tcf_block failed ipv4: make exception cache less predictible ipv6: make exception cache less predictible brcmfmac: pcie: fix oops on failure to resume and reprobe bcma: Fix memory leak for internally-handled cores atlantic: Fix driver resume flow. ath6kl: wmi: fix an error code in ath6kl_wmi_sync_point() ice: Only lock to update netdev dev_addr iwlwifi: skip first element in the WTAS ACPI table iwlwifi: follow the new inclusive terminology ASoC: wcd9335: Disable irq on slave ports in the remove function ASoC: wcd9335: Fix a memory leak in the error handling path of the probe function ASoC: wcd9335: Fix a double irq free in the remove function tty: serial: fsl_lpuart: fix the wrong mapbase value usb: bdc: Fix a resource leak in the error handling path of 'bdc_probe()' usb: bdc: Fix an error handling path in 'bdc_probe()' when no suitable DMA config is available usb: ehci-orion: Handle errors of clk_prepare_enable() in probe i2c: xlp9xx: fix main IRQ check i2c: mt65xx: fix IRQ check CIFS: Fix a potencially linear read overflow bpf: Fix possible out of bound write in narrow load handling mmc: moxart: Fix issue with uninitialized dma_slave_config mmc: dw_mmc: Fix issue with uninitialized dma_slave_config mmc: sdhci: Fix issue with uninitialized dma_slave_config ASoC: Intel: Skylake: Fix module resource and format selection ASoC: Intel: Skylake: Leave data as is when invoking TLV IPCs ASoC: Intel: kbl_da7219_max98927: Fix format selection for max98373 rsi: fix an error code in rsi_probe() rsi: fix error code in rsi_load_9116_firmware() gfs2: init system threads before freeze lock i2c: hix5hd2: fix IRQ check i2c: fix platform_get_irq.cocci warnings i2c: s3c2410: fix IRQ check i2c: iop3xx: fix deferred probing Bluetooth: add timeout sanity check to hci_inquiry lkdtm: replace SCSI_DISPATCH_CMD with SCSI_QUEUE_RQ mm/swap: consider max pages in iomap_swapfile_add_extent usb: gadget: mv_u3d: request_irq() after initializing UDC firmware: raspberrypi: Fix a leak in 'rpi_firmware_get()' firmware: raspberrypi: Keep count of all consumers i2c: synquacer: fix deferred probing clk: staging: correct reference to config IOMEM to config HAS_IOMEM arm64: dts: marvell: armada-37xx: Extend PCIe MEM space nfsd4: Fix forced-expiry locking lockd: Fix invalid lockowner cast after vfs_test_lock locking/local_lock: Add missing owner initialization locking/lockdep: Mark local_lock_t mac80211: Fix insufficient headroom issue for AMSDU libbpf: Re-build libbpf.so when libbpf.map changes usb: phy: tahvo: add IRQ check usb: host: ohci-tmio: add IRQ check PM: cpu: Make notifier chain use a raw_spinlock_t Bluetooth: Move shutdown callback before flushing tx and rx queue samples: pktgen: add missing IPv6 option to pktgen scripts devlink: Clear whole devlink_flash_notify struct selftests/bpf: Fix test_core_autosize on big-endian machines usb: gadget: udc: renesas_usb3: Fix soc_device_match() abuse usb: phy: twl6030: add IRQ checks usb: phy: fsl-usb: add IRQ check usb: gadget: udc: s3c2410: add IRQ check usb: gadget: udc: at91: add IRQ check usb: dwc3: qcom: add IRQ check usb: dwc3: meson-g12a: add IRQ check ASoC: rt5682: Properly turn off regulators if wrong device ID ASoC: rt5682: Implement remove callback net/mlx5: Fix unpublish devlink parameters net/mlx5: Register to devlink ingress VLAN filter trap drm/msm/dsi: Fix some reference counted resource leaks Bluetooth: fix repeated calls to sco_sock_kill ASoC: Intel: Fix platform ID matching cgroup/cpuset: Fix violation of cpuset locking rule cgroup/cpuset: Miscellaneous code cleanup counter: 104-quad-8: Return error when invalid mode during ceiling_write arm64: dts: exynos: correct GIC CPU interfaces address range on Exynos7 drm/msm/dpu: make dpu_hw_ctl_clear_all_blendstages clear necessary LMs drm/msm/mdp4: move HW revision detection to earlier phase drm/msm/mdp4: refactor HW revision detection into read_mdp_hw_revision selftests/bpf: Fix bpf-iter-tcp4 test to print correctly the dest IP PM: EM: Increase energy calculation precision Bluetooth: increase BTNAMSIZ to 21 chars to fix potential buffer overflow debugfs: Return error during {full/open}_proxy_open() on rmmod soc: qcom: smsm: Fix missed interrupts if state changes while masked bpf, samples: Add missing mprog-disable to xdp_redirect_cpu's optstring PCI: PM: Enable PME if it can be signaled from D3cold PCI: PM: Avoid forcing PCI_D0 for wakeup reasons inconsistently media: venus: venc: Fix potential null pointer dereference on pointer fmt media: em28xx-input: fix refcount bug in em28xx_usb_disconnect leds: trigger: audio: Add an activate callback to ensure the initial brightness is set leds: lt3593: Put fwnode in any case during ->probe() i2c: highlander: add IRQ check net/mlx5: Fix missing return value in mlx5_devlink_eswitch_inline_mode_set() devlink: Break parameter notification sequence to be before/after unload/load driver arm64: dts: renesas: hihope-rzg2-ex: Add EtherAVB internal rx delay arm64: dts: renesas: rzg2: Convert EtherAVB to explicit delay handling Bluetooth: mgmt: Fix wrong opcode in the response for add_adv cmd net: cipso: fix warnings in netlbl_cipsov4_add_std drm: mxsfb: Clear FIFO_CLEAR bit drm: mxsfb: Increase number of outstanding requests on V4 and newer HW drm: mxsfb: Enable recovery on underflow cgroup/cpuset: Fix a partition bug with hotplug net/mlx5e: Block LRO if firmware asks for tunneled LRO net/mlx5e: Prohibit inner indir TIRs in IPoIB ARM: dts: meson8b: ec100: Fix the pwm regulator supply properties ARM: dts: meson8b: mxq: Fix the pwm regulator supply properties ARM: dts: meson8b: odroidc1: Fix the pwm regulator supply properties ARM: dts: meson8: Use a higher default GPU clock frequency tcp: seq_file: Avoid skipping sk during tcp_seek_last_pos drm/amdgpu/acp: Make PM domain really work 6lowpan: iphc: Fix an off-by-one check of array index Bluetooth: sco: prevent information leak in sco_conn_defer_accept() media: atomisp: fix the uninitialized use and rename "retvalue" media: coda: fix frame_mem_ctrl for YUV420 and YVU420 formats media: rockchip/rga: fix error handling in probe media: rockchip/rga: use pm_runtime_resume_and_get() media: go7007: remove redundant initialization media: go7007: fix memory leak in go7007_usb_probe media: dvb-usb: Fix error handling in dvb_usb_i2c_init media: dvb-usb: fix uninit-value in vp702x_read_mac_addr media: dvb-usb: fix uninit-value in dvb_usb_adapter_dvb_init ionic: cleanly release devlink instance driver core: Fix error return code in really_probe() firmware: fix theoretical UAF race with firmware cache and resume gfs2: Fix memory leak of object lsi on error return path libbpf: Fix removal of inner map in bpf_object__create_map soc: qcom: rpmhpd: Use corner in power_off i40e: improve locking of mac_filter_hash arm64: dts: renesas: r8a77995: draak: Remove bogus adv7511w properties ARM: dts: aspeed-g6: Fix HVI3C function-group in pinctrl dtsi libbpf: Fix the possible memory leak on error gve: fix the wrong AdminQ buffer overflow check drm/of: free the iterator object on failure bpf: Fix potential memleak and UAF in the verifier. bpf: Fix a typo of reuseport map in bpf.h. drm/of: free the right object media: cxd2880-spi: Fix an error handling path soc: rockchip: ROCKCHIP_GRF should not default to y, unconditionally leds: is31fl32xx: Fix missing error code in is31fl32xx_parse_dt() media: TDA1997x: enable EDID support ASoC: mediatek: mt8183: Fix Unbalanced pm_runtime_enable in mt8183_afe_pcm_dev_probe drm/gma500: Fix end of loop tests for list_for_each_entry drm/panfrost: Fix missing clk_disable_unprepare() on error in panfrost_clk_init() EDAC/i10nm: Fix NVDIMM detection spi: spi-zynq-qspi: use wait_for_completion_timeout to make zynq_qspi_exec_mem_op not interruptible spi: sprd: Fix the wrong WDG_LOAD_VAL regulator: vctrl: Avoid lockdep warning in enable/disable ops regulator: vctrl: Use locked regulator_get_voltage in probe path blk-crypto: fix check for too-large dun_bytes spi: davinci: invoke chipselect callback x86/mce: Defer processing of early errors tpm: ibmvtpm: Avoid error message when process gets signal while waiting certs: Trigger creation of RSA module signing key if it's not an RSA key crypto: qat - use proper type for vf_mask irqchip/gic-v3: Fix priority comparison when non-secure priorities are used spi: coldfire-qspi: Use clk_disable_unprepare in the remove function block: nbd: add sanity check for first_minor clocksource/drivers/sh_cmt: Fix wrong setting if don't request IRQ for clock source channel lib/mpi: use kcalloc in mpi_resize irqchip/loongson-pch-pic: Improve edge triggered interrupt support genirq/timings: Fix error return code in irq_timings_test_irqs() spi: spi-pic32: Fix issue with uninitialized dma_slave_config spi: spi-fsl-dspi: Fix issue with uninitialized dma_slave_config block: return ELEVATOR_DISCARD_MERGE if possible m68k: Fix invalid RMW_INSNS on CPUs that lack CAS rcu: Fix stall-warning deadlock due to non-release of rcu_node ->lock rcu: Add lockdep_assert_irqs_disabled() to rcu_sched_clock_irq() and callees rcu: Fix to include first blocked task in stall warning sched: Fix UCLAMP_FLAG_IDLE setting sched/numa: Fix is_core_idle() m68k: emu: Fix invalid free in nfeth_cleanup() power: supply: cw2015: use dev_err_probe to allow deferred probe s390/ap: fix state machine hang after failure to enable irq s390/debug: fix debug area life cycle s390/debug: keep debug data on resize s390/pci: fix misleading rc in clp_set_pci_fn() s390/kasan: fix large PMD pages address alignment check udf_get_extendedattr() had no boundary checks. fcntl: fix potential deadlock for &fasync_struct.fa_lock crypto: qat - do not export adf_iov_putmsg() crypto: qat - fix naming for init/shutdown VF to PF notifications crypto: qat - fix reuse of completion variable crypto: qat - handle both source of interrupt in VF ISR crypto: qat - do not ignore errors from enable_vf2pf_comms() crypto: omap - Fix inconsistent locking of device lists libata: fix ata_host_start() s390/zcrypt: fix wrong offset index for APKA master key valid state s390/cio: add dev_busid sysfs entry for each subchannel power: supply: max17042_battery: fix typo in MAx17042_TOFF power: supply: smb347-charger: Add missing pin control activation nvmet: pass back cntlid on successful completion nvme-rdma: don't update queue count when failing to set io queues nvme-tcp: don't update queue count when failing to set io queues blk-throtl: optimize IOPS throttle for large IO scenarios bcache: add proper error unwinding in bcache_device_init isofs: joliet: Fix iocharset=utf8 mount option udf: Fix iocharset=utf8 mount option udf: Check LVID earlier hrtimer: Ensure timerfd notification for HIGHRES=n hrtimer: Avoid double reprogramming in __hrtimer_start_range_ns() posix-cpu-timers: Force next expiration recalc after itimer reset EDAC/mce_amd: Do not load edac_mce_amd module on guests rcu/tree: Handle VM stoppage in stall detection sched/deadline: Fix missing clock update in migrate_task_rq_dl() crypto: omap-sham - clear dma flags only after omap_sham_update_dma_stop() power: supply: axp288_fuel_gauge: Report register-address on readb / writeb errors sched/deadline: Fix reset_on_fork reporting of DL tasks crypto: mxs-dcp - Check for DMA mapping errors regulator: tps65910: Silence deferred probe error regmap: fix the offset of register error log locking/mutex: Fix HANDOFF condition ANDROID: GKI: update .xml after android12-5.10 merge Revert "tty: drop termiox user definitions" Linux 5.10.64 PCI: Call Max Payload Size-related fixup quirks early x86/reboot: Limit Dell Optiplex 990 quirk to early BIOS versions xhci: fix unsafe memory usage in xhci tracing xhci: fix even more unsafe memory usage in xhci tracing usb: mtu3: fix the wrong HS mult value usb: mtu3: use @mult for HS isoc or intr usb: mtu3: restore HS function when set SS/SSP usb: gadget: tegra-xudc: fix the wrong mult value for HS isoc or intr usb: host: xhci-rcar: Don't reload firmware after the completion ALSA: usb-audio: Add registration quirk for JBL Quantum 800 blk-mq: clearing flush request reference in tags->rqs[] netfilter: nftables: clone set element expression template netfilter: nf_tables: initialize set before expression setup netfilter: nftables: avoid potential overflows on 32bit arches blk-mq: fix is_flush_rq blk-mq: fix kernel panic during iterating over flush request x86/events/amd/iommu: Fix invalid Perf result due to IOMMU PMC power-gating Revert "r8169: avoid link-up interrupt issue on RTL8106e if user enables ASPM" tty: drop termiox user definitions net: linux/skbuff.h: combine SKB_EXTENSIONS + KCOV handling serial: 8250: 8250_omap: Fix unused variable warning net: kcov: don't select SKB_EXTENSIONS when there is no NET mm/page_alloc: speed up the iteration of max_order net: ll_temac: Remove left-over debug message USB: serial: mos7720: improve OOM-handling in read_mos_reg() igmp: Add ip_mc_list lock in ip_check_mc_rcu ANDROID: GKI: fix up spi structure change Linux 5.10.63 media: stkwebcam: fix memory leak in stk_camera_probe fuse: fix illegal access to inode with reused nodeid new helper: inode_wrong_type() spi: Switch to signed types for *_native_cs SPI controller fields serial: 8250: 8250_omap: Fix possible array out of bounds access ALSA: pcm: fix divide error in snd_pcm_lib_ioctl ALSA: hda/realtek: Workaround for conflicting SSID on ASUS ROG Strix G17 ALSA: hda/realtek: Quirk for HP Spectre x360 14 amp setup cryptoloop: add a deprecation warning perf/x86/amd/power: Assign pmu.module perf/x86/amd/ibs: Work around erratum #1197 ceph: fix possible null-pointer dereference in ceph_mdsmap_decode() perf/x86/intel/pt: Fix mask of num_address_ranges qede: Fix memset corruption net: macb: Add a NULL check on desc_ptp qed: Fix the VF msix vectors flow reset: reset-zynqmp: Fixed the argument data type gpu: ipu-v3: Fix i.MX IPU-v3 offset calculations for (semi)planar U/V formats ARM: OMAP1: ams-delta: remove unused function ams_delta_camera_power xtensa: fix kconfig unmet dependency warning for HAVE_FUTEX_CMPXCHG static_call: Fix unused variable warn w/o MODULE Revert "Add a reference to ucounts for each cred" Revert "cred: add missing return error code when set_cred_ucounts() failed" Revert "ucounts: Increase ucounts reference counter before the security hook" ubifs: report correct st_size for encrypted symlinks f2fs: report correct st_size for encrypted symlinks ext4: report correct st_size for encrypted symlinks fscrypt: add fscrypt_symlink_getattr() for computing st_size ext4: fix race writing to an inline_data file while its xattrs are changing ANDROID: GKI: add virtio_break_device to the symbol list Revert "once: Fix panic when module unload" Revert "pipe: avoid unnecessary EPOLLET wakeups under normal loads" Revert "pipe: do FASYNC notifications for every pipe IO, not just state changes" Linux 5.10.62 bpf: Fix potentially incorrect results with bpf_get_local_storage() audit: move put_tree() to avoid trim_trees refcount underflow and UAF net: don't unconditionally copy_from_user a struct ifreq for socket ioctls Revert "parisc: Add assembly implementations for memset, strlen, strcpy, strncpy and strcat" Revert "floppy: reintroduce O_NDELAY fix" kthread: Fix PF_KTHREAD vs to_kthread() race btrfs: fix NULL pointer dereference when deleting device by invalid id arm64: dts: qcom: msm8994-angler: Fix gpio-reserved-ranges 85-88 lkdtm: Enable DOUBLE_FAULT on all architectures net: dsa: mt7530: fix VLAN traffic leaks again usb: typec: ucsi: Clear pending after acking connector change usb: typec: ucsi: Work around PPM losing change information usb: typec: ucsi: acpi: Always decode connector change information tracepoint: Use rcu get state and cond sync for static call updates srcu: Provide polling interfaces for Tiny SRCU grace periods srcu: Make Tiny SRCU use multi-bit grace-period counter srcu: Provide internal interface to start a Tiny SRCU grace period srcu: Provide polling interfaces for Tree SRCU grace periods srcu: Provide internal interface to start a Tree SRCU grace period powerpc/perf: Invoke per-CPU variable access with disabled interrupts perf annotate: Fix jump parsing for C++ code. perf tools: Fix arm64 build error with gcc-11 perf record: Fix memory leak in vDSO found using ASAN perf symbol-elf: Fix memory leak by freeing sdt_note.args perf env: Fix memory leak of bpf_prog_info_linear member riscv: Fixup patch_text panic in ftrace riscv: Fixup wrong ftrace remove cflag Bluetooth: btusb: check conditions before enabling USB ALT 3 for WBS vt_kdsetmode: extend console locking tipc: call tipc_wait_for_connect only when dlen is not 0 mtd: spinand: Fix incorrect parameters for on-die ECC pipe: do FASYNC notifications for every pipe IO, not just state changes pipe: avoid unnecessary EPOLLET wakeups under normal loads btrfs: fix race between marking inode needs to be logged and log syncing net/rds: dma_map_sg is entitled to merge entries drm/nouveau/kms/nv50: workaround EFI GOP window channel format differences drm/nouveau/disp: power down unused DP links during init drm: Copy drm_wait_vblank to user before returning blk-mq: don't grab rq's refcount in blk_mq_check_expired() drm/amd/pm: change the workload type for some cards Revert "drm/amd/pm: fix workload mismatch on vega10" qed: Fix null-pointer dereference in qed_rdma_create_qp() qed: qed ll2 race condition fixes tools/virtio: fix build vringh: Use wiov->used to check for read/write desc order virtio_vdpa: reject invalid vq indices virtio_pci: Support surprise removal of virtio pci device virtio: Improve vq->broken access to avoid any compiler optimization cpufreq: blocklist Qualcomm sm8150 in cpufreq-dt-platdev opp: remove WARN when no valid OPPs remain iwlwifi: pnvm: accept multiple HW-type TLVs clk: renesas: rcar-usb2-clock-sel: Fix kernel NULL pointer dereference perf/x86/intel/uncore: Fix integer overflow on 23 bit left shift of a u32 dt-bindings: sifive-l2-cache: Fix 'select' matching usb: gadget: u_audio: fix race condition on endpoint stop drm/i915: Fix syncmap memory leak net: stmmac: fix kernel panic due to NULL pointer dereference of plat->est net: stmmac: add mutex lock to protect est parameters Revert "mmc: sdhci-iproc: Set SDHCI_QUIRK_CAP_CLOCK_BASE_BROKEN on BCM2711" net: hns3: fix get wrong pfc_en when query PFC configuration net: hns3: fix duplicate node in VLAN list net: hns3: add waiting time before cmdq memory is released net: hns3: clear hardware resource when loading driver rtnetlink: Return correct error on changing device netns cxgb4: dont touch blocked freelist bitmap after free ipv4: use siphash instead of Jenkins in fnhe_hashfun() ipv6: use siphash in rt6_exception_hash() net/sched: ets: fix crash when flipping from 'strict' to 'quantum' ucounts: Increase ucounts reference counter before the security hook net: marvell: fix MVNETA_TX_IN_PRGRS bit number xgene-v2: Fix a resource leak in the error handling path of 'xge_probe()' ip_gre: add validation for csum_start RDMA/efa: Free IRQ vectors on error flow e1000e: Do not take care about recovery NVM checksum e1000e: Fix the max snoop/no-snoop latency for 10M igc: Use num_tx_queues when iterating over tx_ring queue igc: fix page fault when thunderbolt is unplugged net: usb: pegasus: fixes of set_register(s) return value evaluation; ice: do not abort devlink info if board identifier can't be found RDMA/bnxt_re: Remove unpaired rtnl unlock in bnxt_re_dev_init() IB/hfi1: Fix possible null-pointer dereference in _extend_sdma_tx_descs() RDMA/bnxt_re: Add missing spin lock initialization scsi: core: Fix hang of freezing queue between blocking and running device usb: dwc3: gadget: Stop EP0 transfers during pullup disable usb: dwc3: gadget: Fix dwc3_calc_trbs_left() usb: renesas-xhci: Prefer firmware loading on unknown ROM state USB: serial: option: add new VID/PID to support Fibocom FG150 Revert "USB: serial: ch341: fix character loss at high transfer rates" drm/amdgpu: Cancel delayed work when GFXOFF is disabled Revert "btrfs: compression: don't try to compress if we don't have enough pages" riscv: Ensure the value of FP registers in the core dump file is up to date ceph: correctly handle releasing an embedded cap flush can: usb: esd_usb2: esd_usb2_rx_event(): fix the interchange of the CAN RX and TX error counters net: mscc: Fix non-GPL export of regmap APIs ovl: fix uninitialized pointer read in ovl_lookup_real_one() blk-iocost: fix lockdep warning on blkcg->lock once: Fix panic when module unload netfilter: conntrack: collect all entries in one cycle ARC: Fix CONFIG_STACKDEPOT ASoC: component: Remove misplaced prefix handling in pin control functions ASoC: rt5682: Adjust headset volume button threshold bpf: Fix NULL pointer dereference in bpf_get_local_storage() helper bpf: Fix ringbuf helper function compatibility net: qrtr: fix another OOB Read in qrtr_endpoint_post ANDROID: GKI: update the android12-5.10-lts abi .xml file ANDROID: GKI: db845c: Update symbols list and ABI for lts v5.10.61 Revert "virtio: Protect vqs list access" Revert "net: igmp: fix data-race in igmp_ifc_timer_expire()" Revert "net: igmp: increase size of mr_ifc_count" Revert "PCI/MSI: Protect msi_desc::masked for multi-MSI" Linux 5.10.61 io_uring: only assign io_uring_enter() SQPOLL error in actual error case io_uring: fix xa_alloc_cycle() error return value check fs: warn about impending deprecation of mandatory locks mm: memcontrol: fix occasional OOMs due to proportional memory.low reclaim ASoC: intel: atom: Fix breakage for PCM buffer address setup ALSA: hda/realtek: Limit mic boost on HP ProBook 445 G8 PCI: Increase D3 delay for AMD Renoir/Cezanne XHCI s390/pci: fix use after free of zpci_dev ALSA: hda/via: Apply runtime PM workaround for ASUS B23E btrfs: prevent rename2 from exchanging a subvol with a directory from different parents mmc: sdhci-iproc: Set SDHCI_QUIRK_CAP_CLOCK_BASE_BROKEN on BCM2711 mmc: sdhci-iproc: Cap min clock frequency on BCM2711 ALSA: hda/realtek: Enable 4-speaker output for Dell XPS 15 9510 laptop ipack: tpci200: fix memory leak in the tpci200_register ipack: tpci200: fix many double free issues in tpci200_pci_probe slimbus: ngd: reset dma setup during runtime pm slimbus: messaging: check for valid transaction id slimbus: messaging: start transaction ids from 1 instead of zero tracing / histogram: Fix NULL pointer dereference on strcmp() on NULL event name ALSA: hda - fix the 'Capture Switch' value change notifications clk: qcom: gdsc: Ensure regulator init state matches GDSC state clk: imx6q: fix uart earlycon unwork mmc: sdhci-msm: Update the software timeout value for sdhc mmc: mmci: stm32: Check when the voltage switch procedure should be done mmc: dw_mmc: Fix hang on data CRC error Revert "flow_offload: action should not be NULL when it is referenced" iavf: Fix ping is lost after untrusted VF had tried to change MAC i40e: Fix ATR queue selection r8152: fix writing USB_BP2_EN iommu/vt-d: Fix incomplete cache flush in intel_pasid_tear_down_entry() iommu/vt-d: Consolidate duplicate cache invaliation code ovs: clear skb->tstamp in forwarding path net: mdio-mux: Handle -EPROBE_DEFER correctly net: mdio-mux: Don't ignore memory allocation errors sch_cake: fix srchost/dsthost hashing mode ixgbe, xsk: clean up the resources in ixgbe_xsk_pool_enable error path net: qlcnic: add missed unlock in qlcnic_83xx_flash_read32 virtio-net: use NETIF_F_GRO_HW instead of NETIF_F_LRO virtio-net: support XDP when not more queues vrf: Reset skb conntrack connection on VRF rcv bnxt_en: Add missing DMA memory barriers bnxt_en: Disable aRFS if running on 212 firmware ptp_pch: Restore dependency on PCI net: 6pack: fix slab-out-of-bounds in decode_data bnxt: count Tx drops bnxt: make sure xmit_more + errors does not miss doorbells bnxt: disable napi before canceling DIM bnxt: don't lock the tx queue from napi poll bpf: Clear zext_dst of dead insns drm/mediatek: Add AAL output size configuration drm/mediatek: Fix aal size config soc / drm: mediatek: Move DDP component defines into mtk-mmsys.h vdpa/mlx5: Avoid destroying MR on empty iotlb vhost: Fix the calculation in vhost_overflow() bus: ti-sysc: Fix error handling for sysc_check_active_timer() vhost-vdpa: Fix integer overflow in vhost_vdpa_process_iotlb_update() virtio: Protect vqs list access dccp: add do-while-0 stubs for dccp_pr_debug macros cpufreq: armada-37xx: forbid cpufreq for 1.2 GHz variant iommu: Check if group is NULL before remove device arm64: dts: qcom: msm8992-bullhead: Remove PSCI arm64: dts: qcom: c630: fix correct powerdown pin for WSA881x Bluetooth: hidp: use correct wait queue when removing ctrl_wait drm/amd/display: workaround for hard hang on HPD on native DP drm/amd/display: Fix Dynamic bpp issue with 8K30 with Navi 1X net: usb: lan78xx: don't modify phy_device state concurrently net: usb: pegasus: Check the return value of get_geristers() and friends; ARM: dts: nomadik: Fix up interrupt controller node names qede: fix crash in rmmod qede while automatic debug collection drm/amdgpu: fix the doorbell missing when in CGPG issue for renoir. scsi: core: Fix capacity set to zero after offlinining device scsi: core: Avoid printing an error if target_alloc() returns -ENXIO scsi: scsi_dh_rdac: Avoid crash during rdac_bus_attach() scsi: megaraid_mm: Fix end of loop tests for list_for_each_entry() scsi: pm80xx: Fix TMF task completion race condition dmaengine: of-dma: router_xlate to return -EPROBE_DEFER if controller is not yet available ARM: dts: am43x-epos-evm: Reduce i2c0 bus speed for tps65218 net: xfrm: Fix end of loop tests for list_for_each_entry spi: spi-mux: Add module info needed for autoloading dmaengine: usb-dmac: Fix PM reference leak in usb_dmac_probe() dmaengine: xilinx_dma: Fix read-after-free bug when terminating transfers USB: core: Fix incorrect pipe calculation in do_proc_control() USB: core: Avoid WARNings for 0-length descriptor requests KVM: X86: Fix warning caused by stale emulation context KVM: x86: Factor out x86 instruction emulation with decoding media: drivers/media/usb: fix memory leak in zr364xx_probe media: zr364xx: fix memory leaks in probe() media: zr364xx: propagate errors from zr364xx_start_readpipe() mtd: cfi_cmdset_0002: fix crash when erasing/writing AMD cards ath9k: Postpone key cache entry deletion for TXQ frames reference it ath: Modify ath_key_delete() to not need full key entry ath: Export ath_hw_keysetmac() ath9k: Clear key cache explicitly on disabling hardware ath: Use safer key clearing with key cache entries Linux 5.10.60 net: dsa: microchip: ksz8795: Use software untagging on CPU port net: dsa: microchip: ksz8795: Fix VLAN untagged flag change on deletion net: dsa: microchip: ksz8795: Reject unsupported VLAN configuration net: dsa: microchip: ksz8795: Fix PVID tag insertion net: dsa: microchip: Fix probing KSZ87xx switch with DT node for host port KVM: nSVM: always intercept VMLOAD/VMSAVE when nested (CVE-2021-3656) KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) vmlinux.lds.h: Handle clang's module.{c,d}tor sections ceph: take snap_empty_lock atomically with snaprealm refcount change ceph: clean up locking annotation for ceph_get_snap_realm and __lookup_snap_realm ceph: add some lockdep assertions around snaprealm handling vboxsf: Add support for the atomic_open directory-inode op vboxsf: Add vboxsf_[create|release]_sf_handle() helpers KVM: nVMX: Use vmx_need_pf_intercept() when deciding if L0 wants a #PF KVM: VMX: Use current VMCS to query WAITPKG support for MSR emulation efi/libstub: arm64: Double check image alignment at entry powerpc/smp: Fix OOPS in topology_init() PCI/MSI: Protect msi_desc::masked for multi-MSI PCI/MSI: Use msi_mask_irq() in pci_msi_shutdown() PCI/MSI: Correct misleading comments PCI/MSI: Do not set invalid bits in MSI mask PCI/MSI: Enforce MSI[X] entry updates to be visible PCI/MSI: Enforce that MSI-X table entry is masked for update PCI/MSI: Mask all unused MSI-X entries PCI/MSI: Enable and mask MSI-X early genirq/timings: Prevent potential array overflow in __irq_timings_store() genirq/msi: Ensure deactivation on teardown x86/resctrl: Fix default monitoring groups reporting x86/ioapic: Force affinity setup before startup x86/msi: Force affinity setup before startup genirq: Provide IRQCHIP_AFFINITY_PRE_STARTUP x86/tools: Fix objdump version check again powerpc/kprobes: Fix kprobe Oops happens in booke efi/libstub: arm64: Relax 2M alignment again for relocatable kernels efi/libstub: arm64: Force Image reallocation if BSS was not reserved arm64: efi: kaslr: Fix occasional random alloc (and boot) failure nbd: Aovid double completion of a request vsock/virtio: avoid potential deadlock when vsock device remove xen/events: Fix race in set_evtchn_to_irq drm/i915: Only access SFC_DONE when media domain is not fused off net: igmp: increase size of mr_ifc_count tcp_bbr: fix u32 wrap bug in round logic if bbr_init() called after 2B packets net: linkwatch: fix failure to restore device state across suspend/resume net: bridge: fix memleak in br_add_if() net: bridge: fix flags interpretation for extern learn fdb entries net: bridge: validate the NUD_PERMANENT bit when adding an extern_learn FDB entry net: dsa: sja1105: fix broken backpressure in .port_fdb_dump net: dsa: lantiq: fix broken backpressure in .port_fdb_dump net: dsa: lan9303: fix broken backpressure in .port_fdb_dump net: igmp: fix data-race in igmp_ifc_timer_expire() net: Fix memory leak in ieee802154_raw_deliver net: dsa: microchip: ksz8795: Fix VLAN filtering net: dsa: microchip: Fix ksz_read64() drm/meson: fix colour distortion from HDR set during vendor u-boot net/mlx5: Fix return value from tracer initialization net/mlx5: Synchronize correct IRQ when destroying CQ bareudp: Fix invalid read beyond skb's linear data psample: Add a fwd declaration for skbuff iavf: Set RSS LUT and key in reset handle path ice: don't remove netdev->dev_addr from uc sync list ice: Prevent probing virtual functions net: sched: act_mirred: Reset ct info when mirror/redirect skb net/smc: fix wait on already cleared link ppp: Fix generating ifname when empty IFLA_IFNAME is specified net: phy: micrel: Fix link detection on ksz87xx switch" bpf: Fix integer overflow involving bucket_size libbpf: Fix probe for BPF_PROG_TYPE_CGROUP_SOCKOPT platform/x86: pcengines-apuv2: Add missing terminating entries to gpio-lookup tables net: mvvp2: fix short frame size on s390 net: dsa: mt7530: add the missing RxUnicast MIB counter ASoC: cs42l42: Fix LRCLK frame start edge pinctrl: tigerlake: Fix GPIO mapping for newer version of software netfilter: nf_conntrack_bridge: Fix memory leak when error ASoC: cs42l42: Remove duplicate control for WNF filter frequency ASoC: cs42l42: Fix inversion of ADC Notch Switch control ASoC: SOF: Intel: hda-ipc: fix reply size checking ASoC: cs42l42: Don't allow SND_SOC_DAIFMT_LEFT_J ASoC: cs42l42: Correct definition of ADC Volume control pinctrl: mediatek: Fix fallback behavior for bias_set_combo ieee802154: hwsim: fix GPF in hwsim_new_edge_nl ieee802154: hwsim: fix GPF in hwsim_set_edge_lqi drm/amdgpu: don't enable baco on boco platforms in runpm drm/amd/display: use GFP_ATOMIC in amdgpu_dm_irq_schedule_work drm/amd/display: Remove invalid assert for ODM + MPC case libnvdimm/region: Fix label activation vs errors ACPI: NFIT: Fix support for virtual SPA ranges ceph: reduce contention in ceph_check_delayed_caps() ARC: fp: set FPU_STATUS.FWE to enable FPU_STATUS update on context switch net: ethernet: ti: cpsw: fix min eth packet size for non-switch use-cases seccomp: Fix setting loaded filter count during TSYNC scsi: lpfc: Move initialization of phba->poll_list earlier to avoid crash cifs: create sd context must be a multiple of 8 i2c: dev: zero out array used for i2c reads from userspace ASoC: intel: atom: Fix reference to PCM buffer address ASoC: tlv320aic31xx: Fix jack detection after suspend ASoC: uniphier: Fix reference to PCM buffer address ASoC: xilinx: Fix reference to PCM buffer address ASoC: amd: Fix reference to PCM buffer address iio: adc: Fix incorrect exit of for-loop iio: humidity: hdc100x: Add margin to the conversion time iio: adis: set GPIO reset pin direction iio: adc: ti-ads7950: Ensure CS is deasserted after reading channels Linux 5.10.59 net: xilinx_emaclite: Do not print real IOMEM pointer ovl: prevent private clone if bind mount is not allowed ppp: Fix generating ppp unit id when ifname is not specified ALSA: hda: Add quirk for ASUS Flow x13 ALSA: hda/realtek: fix mute/micmute LEDs for HP ProBook 650 G8 Notebook PC ALSA: pcm: Fix mmap breakage without explicit buffer setup USB:ehci:fix Kunpeng920 ehci hardware problem vboxsf: Make vboxsf_dir_create() return the handle for the created file vboxsf: Honor excl flag to the dir-inode create op arm64: dts: renesas: beacon: Fix USB ref clock references arm64: dts: renesas: beacon: Fix USB extal reference arm64: dts: renesas: rzg2: Add usb2_clksel to RZ/G2 M/N/H mm: make zone_to_nid() and zone_set_nid() available for DISCONTIGMEM Revert "selftests/resctrl: Use resctrl/info for feature detection" bpf: Add lockdown check for probe_write_user helper firmware: tee_bnxt: Release TEE shm, session, and context during kexec tee: Correct inappropriate usage of TEE_SHM_DMA_BUF flag KVM: SVM: Fix off-by-one indexing when nullifying last used SEV VMCB Revert "xfrm: Fix RCU vs hash_resize_mutex lock inversion" Linux 5.10.58 arm64: fix compat syscall return truncation drm/amdgpu/display: only enable aux backlight control for OLED panels smb3: rc uninitialized in one fallocate path net/qla3xxx: fix schedule while atomic in ql_wait_for_drvr_lock and ql_adapter_reset alpha: Send stop IPI to send to online CPUs net: qede: Fix end of loop tests for list_for_each_entry virt_wifi: fix error on connect reiserfs: check directory items on read from disk reiserfs: add check for root_inode in reiserfs_fill_super libata: fix ata_pio_sector for CONFIG_HIGHMEM drm/i915: avoid uninitialised var in eb_parse() sched/rt: Fix double enqueue caused by rt_effective_prio perf/x86/amd: Don't touch the AMD64_EVENTSEL_HOSTONLY bit inside the guest soc: ixp4xx/qmgr: fix invalid __iomem access drm/i915: Correct SFC_DONE register offset interconnect: qcom: icc-rpmh: Ensure floor BW is enforced for all nodes interconnect: Always call pre_aggregate before aggregate interconnect: Zero initial BW after sync-state spi: meson-spicc: fix memory leak in meson_spicc_remove interconnect: Fix undersized devress_alloc allocation soc: ixp4xx: fix printing resources arm64: vdso: Avoid ISB after reading from cntvct_el0 KVM: x86/mmu: Fix per-cpu counter corruption on 32-bit builds KVM: Do not leak memory for duplicate debugfs directories KVM: x86: accept userspace interrupt only if no event is injected md/raid10: properly indicate failure when ending a failed write request ARM: omap2+: hwmod: fix potential NULL pointer access Revert "gpio: mpc8xxx: change the gpio interrupt flags." bus: ti-sysc: AM3: RNG is GP only selinux: correct the return value when loads initial sids pcmcia: i82092: fix a null pointer dereference bug net/xfrm/compat: Copy xfrm_spdattr_type_t atributes xfrm: Fix RCU vs hash_resize_mutex lock inversion timers: Move clearing of base::timer_running under base:: Lock fpga: dfl: fme: Fix cpu hotplug issue in performance reporting serial: 8250_pci: Avoid irq sharing for MSI(-X) interrupts. serial: 8250_pci: Enumerate Elkhart Lake UARTs via dedicated driver MIPS: Malta: Do not byte-swap accesses to the CBUS UART serial: 8250: Mask out floating 16/32-bit bus bits serial: 8250_mtk: fix uart corruption issue when rx power off serial: tegra: Only print FIFO error message when an error occurs ext4: fix potential htree corruption when growing large_dir directories pipe: increase minimum default pipe size to 2 pages media: rtl28xxu: fix zero-length control request drivers core: Fix oops when driver probe fails staging: rtl8712: error handling refactoring staging: rtl8712: get rid of flush_scheduled_work staging: rtl8723bs: Fix a resource leak in sd_int_dpc tpm_ftpm_tee: Free and unregister TEE shared memory during kexec optee: fix tee out of memory failure seen during kexec reboot optee: Refuse to load the driver under the kdump kernel optee: Fix memory leak when failing to register shm pages tee: add tee_shm_alloc_kernel_buf() optee: Clear stale cache entries during initialization arm64: stacktrace: avoid tracing arch_stack_walk() tracepoint: Fix static call function vs data state mismatch tracepoint: static call: Compare data on transition from 2->1 callees tracing: Fix NULL pointer dereference in start_creating tracing: Reject string operand in the histogram expression tracing / histogram: Give calculation hist_fields a size scripts/tracing: fix the bug that can't parse raw_trace_func clk: fix leak on devm_clk_bulk_get_all() unwind usb: otg-fsm: Fix hrtimer list corruption usb: typec: tcpm: Keep other events when receiving FRS and Sourcing_vbus events usb: host: ohci-at91: suspend/resume ports after/before OHCI accesses usb: gadget: f_hid: idle uses the highest byte for duration usb: gadget: f_hid: fixed NULL pointer dereference usb: gadget: f_hid: added GET_IDLE and SET_IDLE handlers usb: cdns3: Fixed incorrect gadget state usb: gadget: remove leaked entry from udc driver list usb: dwc3: gadget: Avoid runtime resume if disabling pullup ALSA: usb-audio: Add registration quirk for JBL Quantum 600 ALSA: usb-audio: Fix superfluous autosuspend recovery ALSA: hda/realtek: Fix headset mic for Acer SWIFT SF314-56 (ALC256) ALSA: hda/realtek: add mic quirk for Acer SF314-42 ALSA: pcm - fix mmap capability check for the snd-dummy driver drm/amdgpu/display: fix DMUB firmware version info firmware_loader: fix use-after-free in firmware_fallback_sysfs firmware_loader: use -ETIMEDOUT instead of -EAGAIN in fw_load_sysfs_fallback USB: serial: ftdi_sio: add device ID for Auto-M3 OP-COM v2 USB: serial: ch341: fix character loss at high transfer rates USB: serial: option: add Telit FD980 composition 0x1056 USB: usbtmc: Fix RCU stall warning Bluetooth: defer cleanup of resources in hci_unregister_dev() blk-iolatency: error out if blk_get_queue() failed in iolatency_set_limit() net: vxge: fix use-after-free in vxge_device_unregister net: fec: fix use-after-free in fec_drv_remove net: pegasus: fix uninit-value in get_interrupt_interval bnx2x: fix an error code in bnx2x_nic_load() mips: Fix non-POSIX regexp MIPS: check return value of pgtable_pmd_page_ctor net: sched: fix lockdep_set_class() typo error for sch->seqlock net: dsa: qca: ar9331: reorder MDIO write sequence net: ipv6: fix returned variable type in ip6_skb_dst_mtu nfp: update ethtool reporting of pauseframe control sctp: move the active_key update after sh_keys is added RDMA/mlx5: Delay emptying a cache entry when a new MR is added to it recently gpio: tqmx86: really make IRQ optional net: natsemi: Fix missing pci_disable_device() in probe and remove net: phy: micrel: Fix detection of ksz87xx switch net: dsa: sja1105: match FDB entries regardless of inner/outer VLAN tag net: dsa: sja1105: be stateless with FDB entries on SJA1105P/Q/R/S/SJA1110 too net: dsa: sja1105: invalidate dynamic FDB entries learned concurrently with statically added ones net: dsa: sja1105: overwrite dynamic FDB entries with static ones in .port_fdb_add net, gro: Set inner transport header offset in tcp/udp GRO hook dmaengine: imx-dma: configure the generic DMA type to make it work ARM: dts: stm32: Fix touchscreen IRQ line assignment on DHCOM ARM: dts: stm32: Disable LAN8710 EDPD on DHCOM media: videobuf2-core: dequeue if start_streaming fails scsi: sr: Return correct event when media event code is 3 spi: imx: mx51-ecspi: Fix low-speed CONFIGREG delay calculation spi: imx: mx51-ecspi: Reinstate low-speed CONFIGREG delay dmaengine: stm32-dmamux: Fix PM usage counter unbalance in stm32 dmamux ops dmaengine: stm32-dma: Fix PM usage counter imbalance in stm32 dma ops clk: tegra: Implement disable_unused() of tegra_clk_sdmmc_mux_ops dmaengine: uniphier-xdmac: Use readl_poll_timeout_atomic() in atomic state omap5-board-common: remove not physically existing vdds_1v8_main fixed-regulator ARM: dts: am437x-l4: fix typo in can@0 node clk: stm32f4: fix post divisor setup for I2S/SAI PLLs ALSA: usb-audio: fix incorrect clock source setting arm64: dts: armada-3720-turris-mox: remove mrvl,i2c-fast-mode arm64: dts: armada-3720-turris-mox: fixed indices for the SDHC controllers ARM: dts: imx: Swap M53Menlo pinctrl_power_button/pinctrl_power_out pins ARM: imx: fix missing 3rd argument in macro imx_mmdc_perf_init ARM: dts: colibri-imx6ull: limit SDIO clock to 25MHz arm64: dts: ls1028: sl28: fix networking for variant 2 ARM: dts: imx6qdl-sr-som: Increase the PHY reset duration to 10ms ARM: imx: add missing clk_disable_unprepare() ARM: imx: add missing iounmap() arm64: dts: ls1028a: fix node name for the sysclk net: xfrm: fix memory leak in xfrm_user_rcv_msg bus: ti-sysc: Fix gpt12 system timer issue with reserved status ALSA: seq: Fix racy deletion of subscriber Revert "ACPICA: Fix memory leak caused by _CID repair function" Linux 5.10.57 spi: mediatek: Fix fifo transfer selftest/bpf: Verifier tests for var-off access bpf, selftests: Adjust few selftest outcomes wrt unreachable code bpf: Update selftests to reflect new error states bpf, selftests: Adjust few selftest result_unpriv outcomes selftest/bpf: Adjust expected verifier errors selftests/bpf: Add a test for ptr_to_map_value on stack for helper access Revert "watchdog: iTCO_wdt: Account for rebooting on second timeout" firmware: arm_scmi: Add delayed response status check firmware: arm_scmi: Ensure drivers provide a probe function Revert "Bluetooth: Shutdown controller after workqueues are flushed or cancelled" ACPI: fix NULL pointer dereference drm/amd/display: Fix max vstartup calculation for modes with borders drm/amd/display: Fix comparison error in dcn21 DML nvme: fix nvme_setup_command metadata trace event efi/mokvar: Reserve the table only if it is in boot services data ASoC: ti: j721e-evm: Check for not initialized parent_clk_id ASoC: ti: j721e-evm: Fix unbalanced domain activity tracking during startup net: Fix zero-copy head len calculation. ASoC: rt5682: Fix the issue of garbled recording after powerd_dbus_suspend qed: fix possible unpaired spin_{un}lock_bh in _qed_mcp_cmd_and_union() r8152: Fix potential PM refcount imbalance ASoC: tlv320aic31xx: fix reversed bclk/wclk master bits spi: stm32h7: fix full duplex irq handler handling regulator: rt5033: Fix n_voltages settings for BUCK and LDO regulator: rtmv20: Fix wrong mask for strobe-polarity-high btrfs: fix lost inode on log replay after mix of fsync, rename and inode eviction btrfs: fix race causing unnecessary inode logging during link and rename Revert "drm/i915: Propagate errors on awaiting already signaled fences" drm/i915: Revert "drm/i915/gem: Asynchronous cmdparser" Linux 5.10.56 can: j1939: j1939_session_deactivate(): clarify lifetime of session object i40e: Add additional info to PHY type error Revert "perf map: Fix dso->nsinfo refcounting" powerpc/pseries: Fix regression while building external modules SMB3: fix readpage for large swap cache bpf: Fix pointer arithmetic mask tightening under state pruning bpf: verifier: Allocate idmap scratch in verifier env bpf: Remove superfluous aux sanitation on subprog rejection bpf: Fix leakage due to insufficient speculative store bypass mitigation bpf: Introduce BPF nospec instruction for mitigating Spectre v4 can: hi311x: fix a signedness bug in hi3110_cmd() sis900: Fix missing pci_disable_device() in probe and remove tulip: windbond-840: Fix missing pci_disable_device() in probe and remove sctp: fix return value check in __sctp_rcv_asconf_lookup net/mlx5e: Fix nullptr in mlx5e_hairpin_get_mdev() net/mlx5: Fix flow table chaining skmsg: Make sk_psock_destroy() static drm/msm/dp: Initialize the INTF_CONFIG register drm/msm/dpu: Fix sm8250_mdp register length net: llc: fix skb_over_panic KVM: x86: Check the right feature bit for MSR_KVM_ASYNC_PF_ACK access mlx4: Fix missing error code in mlx4_load_one() octeontx2-pf: Fix interface down flag on error tipc: do not write skb_shinfo frags when doing decrytion ionic: count csum_none when offload enabled ionic: fix up dim accounting for tx and rx ionic: remove intr coalesce update from napi net: qrtr: fix memory leaks net: Set true network header for ECN decapsulation tipc: fix sleeping in tipc accept routine tipc: fix implicit-connect for SYN+ i40e: Fix log TC creation failure when max num of queues is exceeded i40e: Fix queue-to-TC mapping on Tx i40e: Fix firmware LLDP agent related warning i40e: Fix logic of disabling queues netfilter: nft_nat: allow to specify layer 4 protocol NAT only netfilter: conntrack: adjust stop timestamp to real expiry value mac80211: fix enabling 4-address mode on a sta vif after assoc bpf: Fix OOB read when printing XDP link fdinfo RDMA/bnxt_re: Fix stats counters cfg80211: Fix possible memory leak in function cfg80211_bss_update nfc: nfcsim: fix use after free during module unload blk-iocost: fix operation ordering in iocg_wake_fn() drm/amdgpu: Fix resource leak on probe error path drm/amdgpu: Avoid printing of stack contents on firmware load error drm/amd/display: ensure dentist display clock update finished in DCN20 NIU: fix incorrect error return, missed in previous revert HID: wacom: Re-enable touch by default for Cintiq 24HDT / 27QHDT alpha: register early reserved memory in memblock can: esd_usb2: fix memory leak can: ems_usb: fix memory leak can: usb_8dev: fix memory leak can: mcba_usb_start(): add missing urb->transfer_dma initialization can: peak_usb: pcan_usb_handle_bus_evt(): fix reading rxerr/txerr values can: raw: raw_setsockopt(): fix raw_rcv panic for sock UAF can: j1939: j1939_xtp_rx_dat_one(): fix rxtimer value between consecutive TP.DT to 750ms ocfs2: issue zeroout to EOF blocks ocfs2: fix zero out valid data KVM: add missing compat KVM_CLEAR_DIRTY_LOG x86/kvm: fix vcpu-id indexed array sizes ACPI: DPTF: Fix reading of attributes Revert "ACPI: resources: Add checks for ACPI IRQ override" btrfs: mark compressed range uptodate only if all bio succeed btrfs: fix rw device counting in __btrfs_free_extra_devids pipe: make pipe writes always wake up readers x86/asm: Ensure asm/proto.h can be included stand-alone io_uring: fix null-ptr-deref in io_sq_offload_start() selftest: fix build error in tools/testing/selftests/vm/userfaultfd.c Linux 5.10.55 ipv6: ip6_finish_output2: set sk into newly allocated nskb ARM: dts: versatile: Fix up interrupt controller node names iomap: remove the length variable in iomap_seek_hole iomap: remove the length variable in iomap_seek_data cifs: fix the out of range assignment to bit fields in parse_server_interfaces firmware: arm_scmi: Fix range check for the maximum number of pending messages firmware: arm_scmi: Fix possible scmi_linux_errmap buffer overflow hfs: add lock nesting notation to hfs_find_init hfs: fix high memory mapping in hfs_bnode_read hfs: add missing clean-up in hfs_fill_super drm/ttm: add a check against null pointer dereference ipv6: allocate enough headroom in ip6_finish_output2() rcu-tasks: Don't delete holdouts within trc_wait_for_one_reader() rcu-tasks: Don't delete holdouts within trc_inspect_reader() sctp: move 198 addresses from unusable to private scope net: annotate data race around sk_ll_usec net/802/garp: fix memleak in garp_request_join() net/802/mrp: fix memleak in mrp_request_join() cgroup1: fix leaked context root causing sporadic NULL deref in LTP workqueue: fix UAF in pwq_unbound_release_workfn() af_unix: fix garbage collect vs MSG_PEEK KVM: x86: determine if an exception has an error code only when injecting it. io_uring: fix link timeout refs tools: Allow proper CC/CXX/... override with LLVM=1 in Makefile.include Linux 5.10.54 skbuff: Fix build with SKB extensions disabled xhci: add xhci_get_virt_ep() helper sfc: ensure correct number of XDP queues drm/i915/gvt: Clear d3_entered on elsp cmd submission. usb: ehci: Prevent missed ehci interrupts with edge-triggered MSI perf inject: Close inject.output on exit Documentation: Fix intiramfs script name skbuff: Release nfct refcount on napi stolen or re-used skbs bonding: fix build issue PCI: Mark AMD Navi14 GPU ATS as broken net: dsa: mv88e6xxx: enable SerDes PCS register dump via ethtool -d on Topaz net: dsa: mv88e6xxx: enable SerDes RX stats for Topaz drm/amdgpu: update golden setting for sienna_cichlid drm: Return -ENOTTY for non-drm ioctls driver core: Prevent warning when removing a device link from unregistered consumer nds32: fix up stack guard gap misc: eeprom: at24: Always append device id even if label property is set. rbd: always kick acquire on "acquired" and "released" notifications rbd: don't hold lock_rwsem while running_list is being drained hugetlbfs: fix mount mode command line processing memblock: make for_each_mem_range() traverse MEMBLOCK_HOTPLUG regions userfaultfd: do not untag user pointers io_uring: remove double poll entry on arm failure io_uring: explicitly count entries for poll reqs selftest: use mmap instead of posix_memalign to allocate memory posix-cpu-timers: Fix rearm racing against process tick bus: mhi: core: Validate channel ID when processing command completions ixgbe: Fix packet corruption due to missing DMA sync media: ngene: Fix out-of-bounds bug in ngene_command_config_free_buf() btrfs: check for missing device in btrfs_trim_fs tracing: Synthetic event field_pos is an index not a boolean tracing: Fix bug in rb_per_cpu_empty() that might cause deadloop. tracing/histogram: Rename "cpu" to "common_cpu" tracepoints: Update static_call before tp_funcs when adding a tracepoint firmware/efi: Tell memblock about EFI iomem reservations usb: typec: stusb160x: register role switch before interrupt registration usb: dwc2: gadget: Fix sending zero length packet in DDMA mode. usb: dwc2: gadget: Fix GOUTNAK flow for Slave mode. usb: gadget: Fix Unbalanced pm_runtime_enable in tegra_xudc_probe USB: serial: cp210x: add ID for CEL EM3588 USB ZigBee stick USB: serial: cp210x: fix comments for GE CS1000 USB: serial: option: add support for u-blox LARA-R6 family usb: renesas_usbhs: Fix superfluous irqs happen after usb_pkt_pop() usb: max-3421: Prevent corruption of freed memory USB: usb-storage: Add LaCie Rugged USB3-FW to IGNORE_UAS usb: hub: Fix link power management max exit latency (MEL) calculations usb: hub: Disable USB 3 device initiated lpm if exit latency is too high KVM: PPC: Book3S HV Nested: Sanitise H_ENTER_NESTED TM state KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow xhci: Fix lost USB 2 remote wake usb: xhci: avoid renesas_usb_fw.mem when it's unusable Revert "usb: renesas-xhci: Fix handling of unknown ROM state" ALSA: pcm: Fix mmap capability check ALSA: pcm: Call substream ack() method upon compat mmap commit ALSA: hdmi: Expose all pins on MSI MS-7C94 board ALSA: hda/realtek: Fix pop noise and 2 Front Mic issues on a machine ALSA: sb: Fix potential ABBA deadlock in CSP driver ALSA: usb-audio: Add registration quirk for JBL Quantum headsets ALSA: usb-audio: Add missing proc text entry for BESPOKEN type s390/boot: fix use of expolines in the DMA code s390/ftrace: fix ftrace_update_ftrace_func implementation mmc: core: Don't allocate IDA for OF aliases proc: Avoid mixing integer types in mem_rw() cifs: fix fallocate when trying to allocate a hole. cifs: only write 64kb at a time when fallocating a small region of a file drm/panel: raspberrypi-touchscreen: Prevent double-free net: sched: cls_api: Fix the the wrong parameter net: dsa: sja1105: make VID 4095 a bridge VLAN too tcp: disable TFO blackhole logic by default sctp: update active_key for asoc when old key is being replaced nvme: set the PRACT bit when using Write Zeroes with T10 PI r8169: Avoid duplicate sysfs entry creation error afs: Fix tracepoint string placement with built-in AFS Revert "USB: quirks: ignore remote wake-up on Fibocom L850-GL LTE modem" nvme-pci: don't WARN_ON in nvme_reset_work if ctrl.state is not RESETTING ceph: don't WARN if we're still opening a session to an MDS ipv6: fix another slab-out-of-bounds in fib6_nh_flush_exceptions net/sched: act_skbmod: Skip non-Ethernet packets spi: spi-bcm2835: Fix deadlock net: hns3: fix rx VLAN offload state inconsistent issue net: hns3: fix possible mismatches resp of mailbox ALSA: hda: intel-dsp-cfg: add missing ElkhartLake PCI ID net/tcp_fastopen: fix data races around tfo_active_disable_stamp net: hisilicon: rename CACHE_LINE_MASK to avoid redefinition bnxt_en: Check abort error state in bnxt_half_open_nic() bnxt_en: Validate vlan protocol ID on RX packets bnxt_en: Add missing check for BNXT_STATE_ABORT_ERR in bnxt_fw_rset_task() bnxt_en: Refresh RoCE capabilities in bnxt_ulp_probe() bnxt_en: don't disable an already disabled PCI device ACPI: Kconfig: Fix table override from built-in initrd spi: cadence: Correct initialisation of runtime PM again scsi: target: Fix protect handling in WRITE SAME(32) scsi: iscsi: Fix iface sysfs attr detection netrom: Decrease sock refcount when sock timers expire sctp: trim optlen when it's a huge value in sctp_setsockopt net: sched: fix memory leak in tcindex_partial_destroy_work KVM: PPC: Fix kvm_arch_vcpu_ioctl vcpu_load leak KVM: PPC: Book3S: Fix CONFIG_TRANSACTIONAL_MEM=n crash net: decnet: Fix sleeping inside in af_decnet efi/tpm: Differentiate missing and invalid final event log table. dma-mapping: handle vmalloc addresses in dma_common_{mmap,get_sgtable} usb: hso: fix error handling code of hso_create_net_device net: fix uninit-value in caif_seqpkt_sendmsg bpftool: Check malloc return value in mount_bpffs_for_pin bpf, sockmap, udp: sk_prot needs inuse_idx set for proc stats bpf, sockmap, tcp: sk_prot needs inuse_idx set for proc stats bpf, sockmap: Fix potential memory leak on unlikely error case s390/bpf: Perform r1 range checking before accessing jit->seen_reg[r1] liquidio: Fix unintentional sign extension issue on left shift of u16 timers: Fix get_next_timer_interrupt() with no timers pending xdp, net: Fix use-after-free in bpf_xdp_link_release bpf: Fix tail_call_reachable rejection for interpreter when jit failed bpf, test: fix NULL pointer dereference on invalid expected_attach_type ASoC: rt5631: Fix regcache sync errors on resume spi: mediatek: fix fifo rx mode regulator: hi6421: Fix getting wrong drvdata regulator: hi6421: Use correct variable type for regmap api val argument spi: stm32: fixes pm_runtime calls in probe/remove spi: imx: add a check for speed_hz before calculating the clock ASoC: wm_adsp: Correct wm_coeff_tlv_get handling perf sched: Fix record failure when CONFIG_SCHEDSTATS is not set perf data: Close all files in close_dir() perf probe-file: Delete namelist in del_events() on the error path perf lzma: Close lzma stream on exit perf script: Fix memory 'threads' and 'cpus' leaks on exit perf report: Free generated help strings for sort option perf env: Fix memory leak of cpu_pmu_caps perf test maps__merge_in: Fix memory leak of maps perf dso: Fix memory leak in dso__new_map() perf test event_update: Fix memory leak of evlist perf test session_topology: Delete session->evlist perf env: Fix sibling_dies memory leak perf probe: Fix dso->nsinfo refcounting perf map: Fix dso->nsinfo refcounting perf inject: Fix dso->nsinfo refcounting KVM: x86/pmu: Clear anythread deprecated bit when 0xa leaf is unsupported on the SVM nvme-pci: do not call nvme_dev_remove_admin from nvme_remove mptcp: fix warning in __skb_flow_dissect() when do syn cookie for subflow join cxgb4: fix IRQ free race during driver unload pwm: sprd: Ensure configuring period and duty_cycle isn't wrongly skipped selftests: icmp_redirect: IPv6 PMTU info should be cleared after redirect selftests: icmp_redirect: remove from checking for IPv6 route get stmmac: platform: Fix signedness bug in stmmac_probe_config_dt() ipv6: fix 'disable_policy' for fwd packets bonding: fix incorrect return value of bond_ipsec_offload_ok() bonding: fix suspicious RCU usage in bond_ipsec_offload_ok() bonding: Add struct bond_ipesc to manage SA bonding: disallow setting nested bonding + ipsec offload bonding: fix suspicious RCU usage in bond_ipsec_del_sa() ixgbevf: use xso.real_dev instead of xso.dev in callback functions of struct xfrmdev_ops bonding: fix null dereference in bond_ipsec_add_sa() bonding: fix suspicious RCU usage in bond_ipsec_add_sa() net: add kcov handle to skb extensions gve: Fix an error handling path in 'gve_probe()' igb: Fix position of assignment to *ring igb: Check if num of q_vectors is smaller than max before array access iavf: Fix an error handling path in 'iavf_probe()' e1000e: Fix an error handling path in 'e1000_probe()' fm10k: Fix an error handling path in 'fm10k_probe()' igb: Fix an error handling path in 'igb_probe()' igc: Fix an error handling path in 'igc_probe()' ixgbe: Fix an error handling path in 'ixgbe_probe()' igc: change default return of igc_read_phy_reg() igb: Fix use-after-free error during reset igc: Fix use-after-free error during reset Revert "bpf: Track subprog poke descriptors correctly and fix use-after-free" Linux 5.10.53 udp: annotate data races around unix_sk(sk)->gso_size drm/panel: nt35510: Do not fail if DSI read fails perf test bpf: Free obj_buf bpf: Track subprog poke descriptors correctly and fix use-after-free bpftool: Properly close va_list 'ap' by va_end() on error tools: bpf: Fix error in 'make -C tools/ bpf_install' tcp: call sk_wmem_schedule before sk_mem_charge in zerocopy path ipv6: tcp: drop silly ICMPv6 packet too big messages tcp: fix tcp_init_transfer() to not reset icsk_ca_initialized tcp: annotate data races around tp->mtu_info tcp: consistently disable header prediction for mptcp ARM: dts: tacoma: Add phase corrections for eMMC ARM: dts: aspeed: Fix AST2600 machines line names kbuild: do not suppress Kconfig prompts for silent build dma-buf/sync_file: Don't leak fences on merge failure net: fddi: fix UAF in fza_probe net: dsa: properly check for the bridge_leave methods in dsa_switch_bridge_leave() Revert "mm/shmem: fix shmem_swapin() race with swapoff" net: validate lwtstate->data before returning from skb_tunnel_info() net: send SYNACK packet with accepted fwmark net: ti: fix UAF in tlan_remove_one net: qcom/emac: fix UAF in emac_remove net: moxa: fix UAF in moxart_mac_probe net: ip_tunnel: fix mtu calculation for ETHER tunnel devices net: bcmgenet: Ensure all TX/RX queues DMAs are disabled net: netdevsim: use xso.real_dev instead of xso.dev in callback functions of struct xfrmdev_ops net: bridge: sync fdb to new unicast-filtering ports net/sched: act_ct: remove and free nf_table callbacks vmxnet3: fix cksum offload issues for tunnels with non-default udp ports net/sched: act_ct: fix err check for nf_conntrack_confirm netfilter: ctnetlink: suspicious RCU usage in ctnetlink_dump_helpinfo net: ipv6: fix return value of ip6_skb_dst_mtu net: dsa: mv88e6xxx: enable devlink ATU hash param for Topaz net: dsa: mv88e6xxx: enable .rmu_disable() on Topaz net: dsa: mv88e6xxx: use correct .stats_set_histogram() on Topaz net: dsa: mv88e6xxx: enable .port_set_policy() on Topaz net: bcmgenet: ensure EXT_ENERGY_DET_MASK is clear usb: cdns3: Enable TDL_CHK only for OUT ep mm/page_alloc: fix memory map initialization for descending nodes mm/userfaultfd: fix uffd-wp special cases for fork() mm/thp: simplify copying of huge zero page pmd when fork f2fs: Show casefolding support only when supported Revert "swap: fix do_swap_page() race with swapoff" arm64: dts: marvell: armada-37xx: move firmware node to generic dtsi file firmware: turris-mox-rwtm: add marvell,armada-3700-rwtm-firmware compatible string cifs: prevent NULL deref in cifs_compose_mount_options() s390: introduce proper type handling call_on_stack() macro s390/traps: do not test MONITOR CALL without CONFIG_BUG thermal/core/thermal_of: Stop zone device before unregistering it perf/x86/intel/uncore: Clean up error handling path of iio mapping sched/fair: Fix CFS bandwidth hrtimer expiry type scsi: qedf: Add check to synchronize abort and flush scsi: libfc: Fix array index out of bound exception scsi: libsas: Add LUN number check in .slave_alloc callback scsi: aic7xxx: Fix unintentional sign extension issue on left shift of u8 rtc: max77686: Do not enforce (incorrect) interrupt trigger type arch/arm64/boot/dts/marvell: fix NAND partitioning scheme kbuild: mkcompile_h: consider timestamp if KBUILD_BUILD_TIMESTAMP is set thermal/drivers/sprd: Add missing of_node_put for loop iteration thermal/drivers/imx_sc: Add missing of_node_put for loop iteration thermal/drivers/rcar_gen3_thermal: Do not shadow rcar_gen3_ths_tj_1 thermal/core: Correct function name thermal_zone_device_unregister() arm64: dts: imx8mq: assign PCIe clocks arm64: dts: ls208xa: remove bus-num from dspi node firmware: tegra: bpmp: Fix Tegra234-only builds soc/tegra: fuse: Fix Tegra234-only builds ARM: OMAP2+: Block suspend for am3 and am4 if PM is not configured ARM: dts: stm32: fix stpmic node for stm32mp1 boards ARM: dts: stm32: Rename spi-flash/mx66l51235l@N to flash@N on DHCOM SoM ARM: dts: stm32: Drop unused linux,wakeup from touchscreen node on DHCOM SoM ARM: dts: stm32: fix the Odyssey SoM eMMC VQMMC supply ARM: dts: stm32: move stmmac axi config in ethernet node on stm32mp15 ARM: dts: stm32: fix i2c node name on stm32f746 to prevent warnings ARM: dts: rockchip: fix supply properties in io-domains nodes arm64: dts: juno: Update SCPI nodes as per the YAML schema ARM: dts: bcm283x: Fix up GPIO LED node names ARM: dts: bcm283x: Fix up MMC node names firmware: arm_scmi: Fix the build when CONFIG_MAILBOX is not selected firmware: arm_scmi: Add SMCCC discovery dependency in Kconfig memory: tegra: Fix compilation warnings on 64bit platforms ARM: dts: stm32: fix timer nodes on STM32 MCU to prevent warnings ARM: dts: stm32: fix RCC node name on stm32f429 MCU ARM: dts: stm32: fix gpio-keys node on STM32 MCU boards ARM: dts: stm32: fix stm32mp157c-odyssey card detect pin ARM: dts: stm32: Fix touchscreen node on dhcom-pdk2 ARM: dts: stm32: Remove extra size-cells on dhcom-pdk2 arm64: dts: qcom: sc7180: Move rmtfs memory region ARM: tegra: nexus7: Correct 3v3 regulator GPIO of PM269 variant ARM: tegra: wm8903: Fix polarity of headphones-detection GPIO in device-trees arm64: dts: ti: k3-am654x/j721e/j7200-common-proc-board: Fix MCU_RGMII1_TXC direction ARM: dts: OMAP2+: Replace underscores in sub-mailbox node names ARM: dts: am335x: fix ti,no-reset-on-init flag for gpios ARM: dts: am437x-gp-evm: fix ti,no-reset-on-init flag for gpios ARM: dts: am57xx-cl-som-am57x: fix ti,no-reset-on-init flag for gpios kbuild: sink stdout from cmd for silent build rtc: mxc_v2: add missing MODULE_DEVICE_TABLE ARM: dts: imx6dl-riotboard: configure PHY clock and set proper EEE value ARM: dts: ux500: Fix orientation of accelerometer ARM: dts: ux500: Rename gpio-controller node ARM: dts: ux500: Fix interrupt cells arm64: dts: rockchip: fix regulator-gpio states array ARM: imx: pm-imx5: Fix references to imx5_cpu_suspend_info ARM: dts: imx6: phyFLEX: Fix UART hardware flow control ARM: dts: Hurricane 2: Fix NAND nodes names ARM: dts: BCM63xx: Fix NAND nodes names ARM: NSP: dts: fix NAND nodes names ARM: Cygnus: dts: fix NAND nodes names ARM: brcmstb: dts: fix NAND nodes names reset: ti-syscon: fix to_ti_syscon_reset_data macro arm64: dts: rockchip: Fix power-controller node names for rk3399 arm64: dts: rockchip: Fix power-controller node names for rk3328 arm64: dts: rockchip: Fix power-controller node names for px30 ARM: dts: rockchip: Fix power-controller node names for rk3288 ARM: dts: rockchip: Fix power-controller node names for rk3188 ARM: dts: rockchip: Fix power-controller node names for rk3066a ARM: dts: rockchip: Fix IOMMU nodes properties on rk322x ARM: dts: rockchip: Fix the timer clocks order arm64: dts: rockchip: fix pinctrl sleep nodename for rk3399.dtsi ARM: dts: rockchip: fix pinctrl sleep nodename for rk3036-kylin and rk3288 ARM: dts: rockchip: Fix thermal sensor cells o rk322x ARM: dts: gemini: add device_type on pci ARM: dts: gemini: rename mdio to the right name Linux 5.10.52 seq_file: disallow extremely large seq buffer allocations scsi: scsi_dh_alua: Fix signedness bug in alua_rtpg() MIPS: vdso: Invalid GIC access through VDSO mips: disable branch profiling in boot/decompress.o mips: always link byteswap helpers into decompressor static_call: Fix static_call_text_reserved() vs __init jump_label: Fix jump_label_text_reserved() vs __init sched/uclamp: Ignore max aggregation if rq is idle scsi: be2iscsi: Fix an error handling path in beiscsi_dev_probe() arm64: dts: rockchip: Re-add regulator-always-on for vcc_sdio for rk3399-roc-pc arm64: dts: rockchip: Re-add regulator-boot-on, regulator-always-on for vdd_gpu on rk3399-roc-pc firmware: turris-mox-rwtm: show message about HWRNG registration firmware: turris-mox-rwtm: fail probing when firmware does not support hwrng firmware: turris-mox-rwtm: report failures better firmware: turris-mox-rwtm: fix reply status decoding function thermal/drivers/rcar_gen3_thermal: Fix coefficient calculations ARM: dts: imx6q-dhcom: Add gpios pinctrl for i2c bus recovery ARM: dts: imx6q-dhcom: Fix ethernet plugin detection problems ARM: dts: imx6q-dhcom: Fix ethernet reset time properties thermal/drivers/sprd: Add missing MODULE_DEVICE_TABLE ARM: dts: am437x: align ti,pindir-d0-out-d1-in property with dt-shema ARM: dts: am335x: align ti,pindir-d0-out-d1-in property with dt-shema ARM: dts: dra7: Fix duplicate USB4 target module node arm64: dts: allwinner: a64-sopine-baseboard: change RGMII mode to TXID memory: fsl_ifc: fix leak of private memory on probe failure memory: fsl_ifc: fix leak of IO mapping on probe failure arm64: dts: ti: k3-j721e-main: Fix external refclk input to SERDES arm64: dts: renesas: r8a779a0: Drop power-domains property from GIC node reset: bail if try_module_get() fails ARM: dts: BCM5301X: Fixup SPI binding dt-bindings: i2c: at91: fix example for scl-gpios firmware: arm_scmi: Reset Rx buffer to max size during async commands firmware: tegra: Fix error return code in tegra210_bpmp_init() arm64: dts: qcom: trogdor: Add no-hpd to DSI bridge node ARM: dts: stm32: Rework LAN8710Ai PHY reset on DHCOM SoM ARM: dts: stm32: Connect PHY IRQ line on DH STM32MP1 SoM arm64: dts: renesas: r8a7796[01]: Fix OPP table entry voltages arm64: dts: renesas: Add missing opp-suspend properties arm64: dts: ti: j7200-main: Enable USB2 PHY RX sensitivity workaround ARM: dts: r8a7779, marzen: Fix DU clock names arm64: dts: renesas: v3msk: Fix memory size rtc: fix snprintf() checking in is_rtc_hctosys() ARM: dts: sun8i: h3: orangepi-plus: Fix ethernet phy-mode memory: pl353: Fix error return code in pl353_smc_probe() reset: brcmstb: Add missing MODULE_DEVICE_TABLE memory: atmel-ebi: add missing of_node_put for loop iteration memory: stm32-fmc2-ebi: add missing of_node_put for loop iteration ARM: dts: exynos: fix PWM LED max brightness on Odroid XU4 ARM: dts: exynos: fix PWM LED max brightness on Odroid HC1 ARM: dts: exynos: fix PWM LED max brightness on Odroid XU/XU3 ARM: exynos: add missing of_node_put for loop iteration reset: a10sr: add missing of_match_table reference reset: RESET_INTEL_GW should depend on X86 reset: RESET_BRCMSTB_RESCAL should depend on ARCH_BRCMSTB ARM: dts: gemini-rut1xx: remove duplicate ethernet node hexagon: use common DISCARDS macro hexagon: handle {,SOFT}IRQENTRY_TEXT in linker script NFSv4/pNFS: Don't call _nfs4_pnfs_v3_ds_connect multiple times NFSv4/pnfs: Fix layoutget behaviour after invalidation NFSv4/pnfs: Fix the layout barrier update vdpa/mlx5: Clear vq ready indication upon device reset ALSA: isa: Fix error return code in snd_cmi8330_probe() nfsd: Reduce contention for the nfsd_file nf_rwsem nvme-tcp: can't set sk_user_data without write_lock virtio_net: move tx vq operation under tx queue lock vdpa/mlx5: Fix possible failure in umem size calculation vdpa/mlx5: Fix umem sizes assignments on VQ create PCI: tegra194: Fix tegra_pcie_ep_raise_msi_irq() ill-defined shift pwm: imx1: Don't disable clocks at device remove time PCI: intel-gw: Fix INTx enable x86/fpu: Limit xstate copy size in xstateregs_set() x86/fpu: Fix copy_xstate_to_kernel() gap handling f2fs: fix to avoid adding tab before doc section PCI: iproc: Support multi-MSI only on uniprocessor kernel PCI: iproc: Fix multi-MSI base vector number allocation ubifs: Set/Clear I_LINKABLE under i_lock for whiteout inode nfs: fix acl memory leak of posix_acl_create() SUNRPC: prevent port reuse on transports which don't request it. watchdog: jz4740: Fix return value check in jz4740_wdt_probe() watchdog: aspeed: fix hardware timeout calculation ubifs: journal: Fix error return code in ubifs_jnl_write_inode() ubifs: Fix off-by-one error um: fix error return code in winch_tramp() um: fix error return code in slip_open() misc: alcor_pci: fix inverted branch condition NFSv4: Fix an Oops in pnfs_mark_request_commit() when doing O_DIRECT NFSv4: Initialise connection to the server in nfs4_alloc_client() power: supply: rt5033_battery: Fix device tree enumeration PCI/sysfs: Fix dsm_label_utf16s_to_utf8s() buffer overrun remoteproc: k3-r5: Fix an error message f2fs: compress: fix to disallow temp extension f2fs: add MODULE_SOFTDEP to ensure crc32 is included in the initramfs x86/signal: Detect and prevent an alternate signal stack overflow NFSD: Fix TP_printk() format specifier in nfsd_clid_class f2fs: atgc: fix to set default age threshold virtio_console: Assure used length from device is limited virtio_net: Fix error handling in virtnet_restore() virtio-blk: Fix memory leak among suspend/resume procedure PCI: rockchip: Register IRQ handlers after device and data are ready ACPI: video: Add quirk for the Dell Vostro 3350 ACPI: AMBA: Fix resource name in /proc/iomem pwm: tegra: Don't modify HW state in .remove callback pwm: img: Fix PM reference leak in img_pwm_enable() drm/amdkfd: fix sysfs kobj leak power: supply: ab8500: add missing MODULE_DEVICE_TABLE power: supply: charger-manager: add missing MODULE_DEVICE_TABLE NFS: nfs_find_open_context() may only select open files drm/gma500: Add the missed drm_gem_object_put() in psb_user_framebuffer_create() ceph: remove bogus checks and WARN_ONs from ceph_set_page_dirty orangefs: fix orangefs df output. PCI: tegra: Add missing MODULE_DEVICE_TABLE remoteproc: core: Fix cdev remove and rproc del x86/fpu: Return proper error codes from user access functions watchdog: iTCO_wdt: Account for rebooting on second timeout watchdog: imx_sc_wdt: fix pretimeout watchdog: Fix possible use-after-free by calling del_timer_sync() watchdog: sc520_wdt: Fix possible use-after-free in wdt_turnoff() watchdog: Fix possible use-after-free in wdt_startup() PCI: pciehp: Ignore Link Down/Up caused by DPC NFSv4: Fix delegation return in cases where we have to retry PCI/P2PDMA: Avoid pci_get_slot(), which may sleep ARM: 9087/1: kprobes: test-thumb: fix for LLVM_IAS=1 power: reset: gpio-poweroff: add missing MODULE_DEVICE_TABLE power: supply: max17042: Do not enforce (incorrect) interrupt trigger type PCI: hv: Fix a race condition when removing the device power: supply: ab8500: Avoid NULL pointers PCI: ftpci100: Rename macro name collision pwm: spear: Don't modify HW state in .remove callback power: supply: sc2731_charger: Add missing MODULE_DEVICE_TABLE power: supply: sc27xx: Add missing MODULE_DEVICE_TABLE kcov: add __no_sanitize_coverage to fix noinstr for all architectures lib/decompress_unlz4.c: correctly handle zero-padding around initrds. phy: intel: Fix for warnings due to EMMC clock 175Mhz change in FIP i2c: core: Disable client irq on reboot/shutdown intel_th: Wait until port is in reset before programming it staging: rtl8723bs: fix macro value for 2.4Ghz only device leds: turris-omnia: add missing MODULE_DEVICE_TABLE ALSA: firewire-motu: fix detection for S/PDIF source on optical interface in v2 protocol ALSA: usb-audio: scarlett2: Fix 6i6 Gen 2 line out descriptions ALSA: hda: Add IRQ check for platform_get_irq() backlight: lm3630a: Fix return code of .update_status() callback ASoC: Intel: kbl_da7219_max98357a: shrink platform_id below 20 characters powerpc/boot: Fixup device-tree on little endian usb: gadget: hid: fix error return code in hid_bind() usb: gadget: f_hid: fix endianness issue with descriptors ALSA: usb-audio: scarlett2: Fix scarlett2_*_ctl_put() return values ALSA: usb-audio: scarlett2: Fix data_mutex lock ALSA: usb-audio: scarlett2: Fix 18i8 Gen 2 PCM Input count ALSA: bebob: add support for ToneWeal FW66 Input: hideep - fix the uninitialized use in hideep_nvm_unlock() s390/mem_detect: fix tprot() program check new psw handling s390/mem_detect: fix diag260() program check new psw handling s390/ipl_parm: fix program check new psw handling s390/processor: always inline stap() and __load_psw_mask() habanalabs: remove node from list before freeing the node habanalabs/gaudi: set the correct cpu_id on MME2_QM failure ASoC: soc-core: Fix the error return code in snd_soc_of_parse_audio_routing() powerpc/mm/book3s64: Fix possible build error gpio: pca953x: Add support for the On Semi pca9655 selftests/powerpc: Fix "no_handler" EBB selftest ALSA: ppc: fix error return code in snd_pmac_probe() scsi: storvsc: Correctly handle multiple flags in srb_status gpio: zynq: Check return value of irq_get_irq_data gpio: zynq: Check return value of pm_runtime_get_sync ASoC: soc-pcm: fix the return value in dpcm_apply_symmetry() iommu/arm-smmu: Fix arm_smmu_device refcount leak in address translation iommu/arm-smmu: Fix arm_smmu_device refcount leak when arm_smmu_rpm_get fails powerpc/ps3: Add dma_mask to ps3_dma_region ALSA: sb: Fix potential double-free of CSP mixer elements selftests: timers: rtcpie: skip test if default RTC device does not exist s390: disable SSP when needed s390/sclp_vt220: fix console name to match device serial: tty: uartlite: fix console setup fsi: Add missing MODULE_DEVICE_TABLE ASoC: img: Fix PM reference leak in img_i2s_in_probe() mfd: cpcap: Fix cpcap dmamask not set warnings mfd: da9052/stmpe: Add and modify MODULE_DEVICE_TABLE scsi: qedi: Fix cleanup session block/unblock use scsi: qedi: Fix TMF session block/unblock use scsi: qedi: Fix race during abort timeouts scsi: qedi: Fix null ref during abort handling scsi: iscsi: Fix shost->max_id use scsi: iscsi: Fix conn use after free during resets scsi: iscsi: Add iscsi_cls_conn refcount helpers scsi: megaraid_sas: Handle missing interrupts while re-enabling IRQs scsi: megaraid_sas: Early detection of VD deletion through RaidMap update scsi: megaraid_sas: Fix resource leak in case of probe failure fs/jfs: Fix missing error code in lmLogInit() scsi: scsi_dh_alua: Check for negative result value scsi: core: Fixup calling convention for scsi_mode_sense() scsi: mpt3sas: Fix deadlock while cancelling the running firmware event tty: serial: 8250: serial_cs: Fix a memory leak in error handling path ALSA: ac97: fix PM reference leak in ac97_bus_remove() scsi: core: Cap scsi_host cmd_per_lun at can_queue scsi: lpfc: Fix crash when lpfc_sli4_hba_setup() fails to initialize the SGLs scsi: lpfc: Fix "Unexpected timeout" error in direct attach topology scsi: hisi_sas: Propagate errors in interrupt_init_v1_hw() scsi: arcmsr: Fix doorbell status being updated late on ARC-1886 w1: ds2438: fixing bug that would always get page0 usb: common: usb-conn-gpio: fix NULL pointer dereference of charger Revert "ALSA: bebob/oxfw: fix Kconfig entry for Mackie d.2 Pro" ALSA: usx2y: Don't call free_pages_exact() with NULL address ALSA: usx2y: Avoid camelCase iio: magn: bmc150: Balance runtime pm + use pm_runtime_resume_and_get() iio: gyro: fxa21002c: Balance runtime pm + use pm_runtime_resume_and_get(). partitions: msdos: fix one-byte get_unaligned() ASoC: intel/boards: add missing MODULE_DEVICE_TABLE misc: alcor_pci: fix null-ptr-deref when there is no PCI bridge misc/libmasm/module: Fix two use after free in ibmasm_init_one serial: fsl_lpuart: disable DMA for console and fix sysrq tty: serial: fsl_lpuart: fix the potential risk of division or modulo by zero rcu: Reject RCU_LOCKDEP_WARN() false positives srcu: Fix broken node geometry after early ssp init scsi: arcmsr: Fix the wrong CDB payload report to IOP dmaengine: fsl-qdma: check dma_set_mask return value ASoC: Intel: sof_sdw: add mutual exclusion between PCH DMIC and RT715 leds: tlc591xx: fix return value check in tlc591xx_probe() net: bridge: multicast: fix MRD advertisement router port marking race net: bridge: multicast: fix PIM hello router port marking race Revert "drm/ast: Remove reference to struct drm_device.pdev" drm/ingenic: Switch IPU plane to type OVERLAY drm/ingenic: Fix non-OSD mode drm/dp_mst: Add missing drm parameters to recently added call to drm_dbg_kms() drm/dp_mst: Avoid to mess up payload table by ports in stale topology drm/dp_mst: Do not set proposed vcpi directly fbmem: Do not delete the mode that is still in use cgroup: verify that source is a string drm/i915/gt: Fix -EDEADLK handling regression drm/i915/gtt: drop the page table optimisation tracing: Do not reference char * as a string in histograms scsi: zfcp: Report port fc_security as unknown early during remote cable pull scsi: core: Fix bad pointer dereference when ehandler kthread is invalid KVM: X86: Disable hardware breakpoints unconditionally before kvm_x86->run() KVM: nSVM: Check the value written to MSR_VM_HSAVE_PA KVM: x86/mmu: Do not apply HPA (memory encryption) mask to GPAs KVM: x86: Use guest MAXPHYADDR from CPUID.0x8000_0008 iff TDP is enabled KVM: mmio: Fix use-after-free Read in kvm_vm_ioctl_unregister_coalesced_mmio cifs: handle reconnect of tcon when there is no cached dfs referral certs: add 'x509_revocation_list' to gitignore Revert "media: subdev: disallow ioctl for saa6588/davinci" Linux 5.10.51 f2fs: fix to avoid racing on fsync_entry_slab by multi filesystem instances ext4: fix memory leak in ext4_fill_super smackfs: restrict bytes count in smk_set_cipso() jfs: fix GPF in diFree drm/ast: Remove reference to struct drm_device.pdev pinctrl: mcp23s08: Fix missing unlock on error in mcp23s08_irq() dm writecache: write at least 4k when committing io_uring: fix clear IORING_SETUP_R_DISABLED in wrong function media: uvcvideo: Fix pixel format change for Elgato Cam Link 4K media: gspca/sunplus: fix zero-length control requests media: gspca/sq905: fix control-request direction media: zr364xx: fix memory leak in zr364xx_start_readpipe media: dtv5100: fix control-request directions media: subdev: disallow ioctl for saa6588/davinci PCI: aardvark: Implement workaround for the readback value of VEND_ID PCI: aardvark: Fix checking for PIO Non-posted Request PCI: Leave Apple Thunderbolt controllers on for s2idle or standby dm btree remove: assign new_root only when removal succeeds dm writecache: flush origin device when writing and cache is full dm zoned: check zone capacity coresight: tmc-etf: Fix global-out-of-bounds in tmc_update_etf_buffer() coresight: Propagate symlink failure ipack/carriers/tpci200: Fix a double free in tpci200_pci_probe tracing: Resize tgid_map to pid_max, not PID_MAX_DEFAULT tracing: Simplify & fix saved_tgids logic rq-qos: fix missed wake-ups in rq_qos_throttle try two seq_buf: Fix overflow in seq_buf_putmem_hex() extcon: intel-mrfld: Sync hardware and software state on init selftests/lkdtm: Fix expected text for CR4 pinning lkdtm/bugs: XFAIL UNALIGNED_LOAD_STORE_WRITE nvmem: core: add a missing of_node_put mfd: syscon: Free the allocated name field of struct regmap_config power: supply: ab8500: Fix an old bug ubifs: Fix races between xattr_{set|get} and listxattr operations thermal/drivers/int340x/processor_thermal: Fix tcc setting ipmi/watchdog: Stop watchdog timer when the current action is 'none' qemu_fw_cfg: Make fw_cfg_rev_attr a proper kobj_attribute i40e: fix PTP on 5Gb links ASoC: tegra: Set driver_name=tegra for all machine drivers fpga: stratix10-soc: Add missing fpga_mgr_free() call clocksource/arm_arch_timer: Improve Allwinner A64 timer workaround cpu/hotplug: Cure the cpusets trainwreck arm64: tlb: fix the TTL value of tlb_get_level ata: ahci_sunxi: Disable DIPM mmc: core: Allow UHS-I voltage switch for SDSC cards if supported mmc: core: clear flags before allowing to retune mmc: sdhci: Fix warning message when accessing RPMB in HS400 mode mmc: sdhci-acpi: Disable write protect detection on Toshiba Encore 2 WT8-B drm/i915/display: Do not zero past infoframes.vsc drm/nouveau: Don't set allow_fb_modifiers explicitly drm/arm/malidp: Always list modifiers drm/msm/mdp4: Fix modifier support enabling drm/tegra: Don't set allow_fb_modifiers explicitly drm/amd/display: Reject non-zero src_y and src_x for video planes pinctrl/amd: Add device HID for new AMD GPIO controller drm/amd/display: fix incorrrect valid irq check drm/rockchip: dsi: remove extra component_del() call drm/dp: Handle zeroed port counts in drm_dp_read_downstream_info() drm/vc4: hdmi: Prevent clock unbalance drm/vc4: crtc: Skip the TXP drm/vc4: txp: Properly set the possible_crtcs mask drm/radeon: Call radeon_suspend_kms() in radeon_pci_shutdown() for Loongson64 drm/radeon: Add the missed drm_gem_object_put() in radeon_user_framebuffer_create() drm/amdgpu: enable sdma0 tmz for Raven/Renoir(V2) drm/amdgpu: Update NV SIMD-per-CU to 2 powerpc/powernv/vas: Release reference to tgid during window close powerpc/barrier: Avoid collision with clang's __lwsync macro powerpc/mm: Fix lockup on kernel exec fault scsi: iscsi: Fix iSCSI cls conn state scsi: iscsi: Fix race condition between login and sync thread io_uring: convert io_buffer_idr to XArray io_uring: Convert personality_idr to XArray io_uring: simplify io_remove_personalities() mm,hwpoison: return -EBUSY when migration fails loop: fix I/O error on fsync() in detached loop devices arm64: dts: rockchip: Enable USB3 for rk3328 Rock64 arm64: dts: rockchip: add rk3328 dwc3 usb controller node ath11k: unlock on error path in ath11k_mac_op_add_interface() MIPS: MT extensions are not available on MIPS32r1 selftests/resctrl: Fix incorrect parsing of option "-t" MIPS: set mips32r5 for virt extensions MIPS: loongsoon64: Reserve memory below starting pfn to prevent Oops sctp: add size validation when walking chunks sctp: validate from_addr_param return flow_offload: action should not be NULL when it is referenced bpf: Fix false positive kmemleak report in bpf_ringbuf_area_alloc() sched/fair: Ensure _sum and _avg values stay consistent Bluetooth: btusb: fix bt fiwmare downloading failure issue for qca btsoc. Bluetooth: mgmt: Fix the command returns garbage parameter value Bluetooth: btusb: Add support USB ALT 3 for WBS Bluetooth: L2CAP: Fix invalid access on ECRED Connection response Bluetooth: L2CAP: Fix invalid access if ECRED Reconfigure fails Bluetooth: btusb: Add a new QCA_ROME device (0cf3:e500) Bluetooth: Shutdown controller after workqueues are flushed or cancelled Bluetooth: Fix alt settings for incoming SCO with transparent coding format Bluetooth: Fix the HCI to MGMT status conversion table Bluetooth: btusb: Fixed too many in-token issue for Mediatek Chip. RDMA/cma: Fix rdma_resolve_route() memory leak net: ip: avoid OOM kills with large UDP sends over loopback media, bpf: Do not copy more entries than user space requested IB/isert: Align target max I/O size to initiator size mac80211_hwsim: add concurrent channels scanning support over virtio mac80211: consider per-CPU statistics if present cfg80211: fix default HE tx bitrate mask in 2G band wireless: wext-spy: Fix out-of-bounds warning sfc: error code if SRIOV cannot be disabled sfc: avoid double pci_remove of VFs iwlwifi: pcie: fix context info freeing iwlwifi: pcie: free IML DMA memory allocation iwlwifi: mvm: fix error print when session protection ends iwlwifi: mvm: don't change band on bound PHY contexts RDMA/rxe: Don't overwrite errno from ib_umem_get() vsock: notify server to shutdown when client has pending signal atm: nicstar: register the interrupt handler in the right place atm: nicstar: use 'dma_free_coherent' instead of 'kfree' net: fec: add ndo_select_queue to fix TX bandwidth fluctuations MIPS: add PMD table accounting into MIPS'pmd_alloc_one rtl8xxxu: Fix device info for RTL8192EU devices mt76: mt7915: fix IEEE80211_HE_PHY_CAP7_MAX_NC for station mode drm/amdkfd: Walk through list with dqm lock hold drm/amdgpu: fix bad address translation for sienna_cichlid io_uring: fix false WARN_ONCE net: sched: fix error return code in tcf_del_walker() net: ipa: Add missing of_node_put() in ipa_firmware_load() net: fix mistake path for netdev_features_strings mt76: mt7615: fix fixed-rate tx status reporting ice: mark PTYPE 2 as reserved ice: fix incorrect payload indicator on PTYPE bpf: Fix up register-based shifts in interpreter to silence KUBSAN drm/amdkfd: Fix circular lock in nocpsch path drm/amdkfd: fix circular locking on get_wave_state cw1200: add missing MODULE_DEVICE_TABLE wl1251: Fix possible buffer overflow in wl1251_cmd_scan wlcore/wl12xx: Fix wl12xx get_mac error if device is in ELP dm writecache: commit just one block, not a full page xfrm: Fix error reporting in xfrm_state_construct. drm/amd/display: Verify Gamma & Degamma LUT sizes in amdgpu_dm_atomic_check r8169: avoid link-up interrupt issue on RTL8106e if user enables ASPM selinux: use __GFP_NOWARN with GFP_NOWAIT in the AVC fjes: check return value after calling platform_get_resource() drm/amdkfd: use allowed domain for vmbo validation net: sgi: ioc3-eth: check return value after calling platform_get_resource() selftests: Clean forgotten resources as part of cleanup() net: phy: realtek: add delay to fix RXC generation issue drm/amd/display: Fix off-by-one error in DML drm/amd/display: Set DISPCLK_MAX_ERRDET_CYCLES to 7 drm/amd/display: Release MST resources on switch from MST to SST drm/amd/display: Update scaling settings on modeset drm/amd/display: Fix DCN 3.01 DSCCLK validation net: moxa: Use devm_platform_get_and_ioremap_resource() net: micrel: check return value after calling platform_get_resource() net: mvpp2: check return value after calling platform_get_resource() net: bcmgenet: check return value after calling platform_get_resource() net: mscc: ocelot: check return value after calling platform_get_resource() virtio_net: Remove BUG() to avoid machine dead ice: fix clang warning regarding deadcode.DeadStores ice: set the value of global config lock timeout longer pinctrl: mcp23s08: fix race condition in irq handler net: bridge: mrp: Update ring transitions. dm: Fix dm_accept_partial_bio() relative to zone management commands dm writecache: don't split bios when overwriting contiguous cache content dm space maps: don't reset space map allocation cursor when committing RDMA/cxgb4: Fix missing error code in create_qp() net: tcp better handling of reordering then loss cases drm/amdgpu: remove unsafe optimization to drop preamble ib drm/amd/display: Avoid HDCP over-read and corruption MIPS: ingenic: Select CPU_SUPPORTS_CPUFREQ && MIPS_EXTERNAL_TIMER MIPS: cpu-probe: Fix FPU detection on Ingenic JZ4760(B) ipv6: use prandom_u32() for ID generation virtio-net: Add validation for used length drm: bridge: cdns-mhdp8546: Fix PM reference leak in clk: tegra: Ensure that PLLU configuration is applied properly clk: tegra: Fix refcounting of gate clocks RDMA/rtrs: Change MAX_SESS_QUEUE_DEPTH net: stmmac: the XPCS obscures a potential "PHY not found" error drm: rockchip: add missing registers for RK3066 drm: rockchip: add missing registers for RK3188 net/mlx5: Fix lag port remapping logic net/mlx5e: IPsec/rep_tc: Fix rep_tc_update_skb drops IPsec packet clk: renesas: r8a77995: Add ZA2 clock drm/bridge: cdns: Fix PM reference leak in cdns_dsi_transfer() igb: fix assignment on big endian machines igb: handle vlan types with checker enabled e100: handle eeprom as little endian drm/vc4: hdmi: Fix PM reference leak in vc4_hdmi_encoder_pre_crtc_co() drm/vc4: Fix clock source for VEC PixelValve on BCM2711 udf: Fix NULL pointer dereference in udf_symlink function drm/sched: Avoid data corruptions drm/scheduler: Fix hang when sched_entity released pinctrl: equilibrium: Add missing MODULE_DEVICE_TABLE net/sched: cls_api: increase max_reclassify_loop net: mdio: provide shim implementation of devm_of_mdiobus_register drm/virtio: Fix double free on probe failure reiserfs: add check for invalid 1st journal block drm/bridge: lt9611: Add missing MODULE_DEVICE_TABLE net: mdio: ipq8064: add regmap config to disable REGCACHE drm/mediatek: Fix PM reference leak in mtk_crtc_ddp_hw_init() net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT atm: nicstar: Fix possible use-after-free in nicstar_cleanup() mISDN: fix possible use-after-free in HFC_cleanup() atm: iphase: fix possible use-after-free in ia_module_exit() hugetlb: clear huge pte during flush function on mips platform clk: renesas: rcar-usb2-clock-sel: Fix error handling in .probe() drm/amd/display: fix use_max_lb flag for 420 pixel formats net: pch_gbe: Use proper accessors to BE data in pch_ptp_match() drm/bridge: nwl-dsi: Force a full modeset when crtc_state->active is changed to be true drm/vc4: fix argument ordering in vc4_crtc_get_margins() drm/amd/amdgpu/sriov disable all ip hw status by default drm/amd/display: fix HDCP reset sequence on reinitialize drm/ast: Fixed CVE for DP501 drm/zte: Don't select DRM_KMS_FB_HELPER drm/mxsfb: Don't select DRM_KMS_FB_HELPER ANDROID: GKI: fix up crc change in ip.h Revert "Add a reference to ucounts for each cred" Revert "cred: add missing return error code when set_cred_ucounts() failed" Revert "Bluetooth: Fix Set Extended (Scan Response) Data" Linux 5.10.50 powerpc/preempt: Don't touch the idle task's preempt_count during hotplug iommu/dma: Fix compile warning in 32-bit builds cred: add missing return error code when set_cred_ucounts() failed s390: preempt: Fix preempt_count initialization crypto: qce - fix error return code in qce_skcipher_async_req_handle() scsi: core: Retry I/O for Notify (Enable Spinup) Required error media: exynos4-is: remove a now unused integer mmc: vub3000: fix control-request direction mmc: block: Disable CMDQ on the ioctl path io_uring: fix blocking inline submission block: return the correct bvec when checking for gaps erofs: fix error return code in erofs_read_superblock() tpm: Replace WARN_ONCE() with dev_err_once() in tpm_tis_status() fscrypt: fix derivation of SipHash keys on big endian CPUs fscrypt: don't ignore minor_hash when hash is 0 mailbox: qcom-ipcc: Fix IPCC mbox channel exhaustion scsi: target: cxgbit: Unmap DMA buffer before calling target_execute_cmd() scsi: fc: Correct RHBA attributes length exfat: handle wrong stream entry size in exfat_readdir() csky: syscache: Fixup duplicate cache flush csky: fix syscache.c fallthrough warning perf llvm: Return -ENOMEM when asprintf() fails selftests/vm/pkeys: refill shadow register after implicit kernel write selftests/vm/pkeys: handle negative sys_pkey_alloc() return code selftests/vm/pkeys: fix alloc_random_pkey() to make it really, really random lib/math/rational.c: fix divide by zero mm/z3fold: use release_z3fold_page_locked() to release locked z3fold page mm/z3fold: fix potential memory leak in z3fold_destroy_pool() include/linux/huge_mm.h: remove extern keyword hugetlb: remove prep_compound_huge_page cleanup mm/hugetlb: remove redundant check in preparing and destroying gigantic page mm/hugetlb: use helper huge_page_order and pages_per_huge_page mm/huge_memory.c: don't discard hugepage if other processes are mapping it mm/huge_memory.c: add missing read-only THP checking in transparent_hugepage_enabled() mm/huge_memory.c: remove dedicated macro HPAGE_CACHE_INDEX_MASK mm/pmem: avoid inserting hugepage PTE entry with fsdax if hugepage support is disabled vfio/pci: Handle concurrent vma faults arm64: dts: marvell: armada-37xx: Fix reg for standard variant of UART serial: mvebu-uart: correctly calculate minimal possible baudrate serial: mvebu-uart: do not allow changing baudrate when uartclk is not available ALSA: firewire-lib: Fix 'amdtp_domain_start()' when no AMDTP_OUT_STREAM stream is found powerpc/papr_scm: Make 'perf_stats' invisible if perf-stats unavailable powerpc/64s: Fix copy-paste data exposure into newly created tasks powerpc/papr_scm: Properly handle UUID types and API powerpc: Offline CPU in stop_this_cpu() serial: 8250: 8250_omap: Fix possible interrupt storm on K3 SoCs serial: 8250: 8250_omap: Disable RX interrupt after DMA enable selftests/ftrace: fix event-no-pid on 1-core machine leds: ktd2692: Fix an error handling path leds: as3645a: Fix error return code in as3645a_parse_node() ASoC: fsl_spdif: Fix unexpected interrupt after suspend ASoC: Intel: sof_sdw: add SOF_RT715_DAI_ID_FIX for AlderLake configfs: fix memleak in configfs_release_bin_file ASoC: atmel-i2s: Fix usage of capture and playback at the same time powerpc/powernv: Fix machine check reporting of async store errors extcon: max8997: Add missing modalias string extcon: sm5502: Drop invalid register write in sm5502_reg_data phy: ti: dm816x: Fix the error handling path in 'dm816x_usb_phy_probe() phy: uniphier-pcie: Fix updating phy parameters soundwire: stream: Fix test for DP prepare complete scsi: mpt3sas: Fix error return value in _scsih_expander_add() habanalabs: Fix an error handling path in 'hl_pci_probe()' mtd: rawnand: marvell: add missing clk_disable_unprepare() on error in marvell_nfc_resume() of: Fix truncation of memory sizes on 32-bit platforms ASoC: cs42l42: Correct definition of CS42L42_ADC_PDN_MASK iio: prox: isl29501: Fix buffer alignment in iio_push_to_buffers_with_timestamp() iio: light: vcnl4035: Fix buffer alignment in iio_push_to_buffers_with_timestamp() serial: 8250: Actually allow UPF_MAGIC_MULTIPLIER baud rates staging: mt7621-dts: fix pci address for PCI memory range coresight: core: Fix use of uninitialized pointer staging: rtl8712: fix memory leak in rtl871x_load_fw_cb staging: rtl8712: fix error handling in r871xu_drv_init staging: gdm724x: check for overflow in gdm_lte_netif_rx() staging: gdm724x: check for buffer overflow in gdm_lte_multi_sdu_pkt() ASoC: fsl_spdif: Fix error handler with pm_runtime_enable iio: light: vcnl4000: Fix buffer alignment in iio_push_to_buffers_with_timestamp() iio: magn: rm3100: Fix alignment of buffer in iio_push_to_buffers_with_timestamp() iio: adc: ti-ads8688: Fix alignment of buffer in iio_push_to_buffers_with_timestamp() iio: adc: mxs-lradc: Fix buffer alignment in iio_push_to_buffers_with_timestamp() iio: adc: hx711: Fix buffer alignment in iio_push_to_buffers_with_timestamp() iio: adc: at91-sama5d2: Fix buffer alignment in iio_push_to_buffers_with_timestamp() thunderbolt: Bond lanes only when dual_link_port != NULL in alloc_dev_default() eeprom: idt_89hpesx: Restore printing the unsupported fwnode name eeprom: idt_89hpesx: Put fwnode in matching case during ->probe() usb: dwc2: Don't reset the core after setting turnaround time usb: gadget: f_fs: Fix setting of device and driver data cross-references ASoC: mediatek: mtk-btcvsd: Fix an error handling path in 'mtk_btcvsd_snd_probe()' ASoC: rt5682-sdw: set regcache_cache_only false before reading RT5682_DEVICE_ID ASoC: rt5682: fix getting the wrong device id when the suspend_stress_test ASoC: rt715-sdw: use first_hw_init flag on resume ASoC: rt711-sdw: use first_hw_init flag on resume ASoC: rt700-sdw: use first_hw_init flag on resume ASoC: rt5682-sdw: use first_hw_init flag on resume ASoC: rt1308-sdw: use first_hw_init flag on resume ASoC: max98373-sdw: use first_hw_init flag on resume iommu/dma: Fix IOVA reserve dma ranges selftests: splice: Adjust for handler fallback removal s390: appldata depends on PROC_SYSCTL s390: enable HAVE_IOREMAP_PROT s390/irq: select HAVE_IRQ_EXIT_ON_IRQ_STACK iommu/amd: Fix extended features logging visorbus: fix error return code in visorchipset_init() fsi/sbefifo: Fix reset timeout fsi/sbefifo: Clean up correct FIFO when receiving reset request from SBE fsi: occ: Don't accept response from un-initialized OCC fsi: scom: Reset the FSI2PIB engine for any error fsi: core: Fix return of error values on failures mfd: rn5t618: Fix IRQ trigger by changing it to level mode mfd: mp2629: Select MFD_CORE to fix build error scsi: iscsi: Flush block work before unblock scsi: FlashPoint: Rename si_flags field leds: lp50xx: Put fwnode in error case during ->probe() leds: lm3697: Don't spam logs when probe is deferred leds: lm3692x: Put fwnode in any case during ->probe() leds: lm36274: Put fwnode in error case during ->probe() leds: lm3532: select regmap I2C API leds: class: The -ENOTSUPP should never be seen by user space tty: nozomi: Fix the error handling path of 'nozomi_card_init()' firmware: stratix10-svc: Fix a resource leak in an error handling path char: pcmcia: error out if 'num_bytes_read' is greater than 4 in set_protocol() staging: mmal-vchiq: Fix incorrect static vchiq_instance. mtd: rawnand: arasan: Ensure proper configuration for the asserted target mtd: partitions: redboot: seek fis-index-block in the right node perf scripting python: Fix tuple_set_u64() Input: hil_kbd - fix error return code in hil_dev_connect() ASoC: rsnd: tidyup loop on rsnd_adg_clk_query() backlight: lm3630a_bl: Put fwnode in error case during ->probe() ASoC: hisilicon: fix missing clk_disable_unprepare() on error in hi6210_i2s_startup() ASoC: rk3328: fix missing clk_disable_unprepare() on error in rk3328_platform_probe() iio: potentiostat: lmp91000: Fix alignment of buffer in iio_push_to_buffers_with_timestamp() iio: cros_ec_sensors: Fix alignment of buffer in iio_push_to_buffers_with_timestamp() iio: chemical: atlas: Fix buffer alignment in iio_push_to_buffers_with_timestamp() iio: light: tcs3472: Fix buffer alignment in iio_push_to_buffers_with_timestamp() iio: light: tcs3414: Fix buffer alignment in iio_push_to_buffers_with_timestamp() iio: light: isl29125: Fix buffer alignment in iio_push_to_buffers_with_timestamp() iio: magn: bmc150: Fix buffer alignment in iio_push_to_buffers_with_timestamp() iio: magn: hmc5843: Fix buffer alignment in iio_push_to_buffers_with_timestamp() iio: prox: as3935: Fix buffer alignment in iio_push_to_buffers_with_timestamp() iio: prox: pulsed-light: Fix buffer alignment in iio_push_to_buffers_with_timestamp() iio: prox: srf08: Fix buffer alignment in iio_push_to_buffers_with_timestamp() iio: humidity: am2315: Fix buffer alignment in iio_push_to_buffers_with_timestamp() iio: gyro: bmg160: Fix buffer alignment in iio_push_to_buffers_with_timestamp() iio: adc: vf610: Fix buffer alignment in iio_push_to_buffers_with_timestamp() iio: adc: ti-ads1015: Fix buffer alignment in iio_push_to_buffers_with_timestamp() iio: accel: stk8ba50: Fix buffer alignment in iio_push_to_buffers_with_timestamp() iio: accel: stk8312: Fix buffer alignment in iio_push_to_buffers_with_timestamp() iio: accel: mxc4005: Fix overread of data and alignment issue. iio: accel: kxcjk-1013: Fix buffer alignment in iio_push_to_buffers_with_timestamp() iio: accel: hid: Fix buffer alignment in iio_push_to_buffers_with_timestamp() iio: accel: bma220: Fix buffer alignment in iio_push_to_buffers_with_timestamp() iio: accel: bma180: Fix buffer alignment in iio_push_to_buffers_with_timestamp() iio: adis16475: do not return ints in irq handlers iio: adis16400: do not return ints in irq handlers iio: adis_buffer: do not return ints in irq handlers mwifiex: re-fix for unaligned accesses tty: nozomi: Fix a resource leak in an error handling function serial: 8250_omap: fix a timeout loop condition serial: fsl_lpuart: remove RTSCTS handling from get_mctrl() serial: fsl_lpuart: don't modify arbitrary data on lpuart32 rcu: Invoke rcu_spawn_core_kthreads() from rcu_spawn_gp_kthread() ASoC: rt5682: Disable irq on shutdown staging: fbtft: Don't spam logs when probe is deferred staging: fbtft: Rectify GPIO handling MIPS: Fix PKMAP with 32-bit MIPS huge page support RDMA/core: Always release restrack object RDMA/mlx5: Don't access NULL-cleared mpi pointer net: tipc: fix FB_MTU eat two pages net: sched: fix warning in tcindex_alloc_perfect_hash net: lwtunnel: handle MTU calculation in forwading writeback: fix obtain a reference to a freeing memcg css clk: si5341: Update initialization magic clk: si5341: Check for input clock presence and PLL lock on startup clk: si5341: Avoid divide errors due to bogus register contents clk: si5341: Wait for DEVICE_READY on startup clk: qcom: clk-alpha-pll: fix CAL_L write in alpha_pll_fabia_prepare clk: actions: Fix AHPPREDIV-H-AHB clock chain on Owl S500 SoC clk: actions: Fix bisp_factor_table based clocks on Owl S500 SoC clk: actions: Fix SD clocks factor table on Owl S500 SoC clk: actions: Fix UART clock dividers on Owl S500 SoC Bluetooth: Fix handling of HCI_LE_Advertising_Set_Terminated event Bluetooth: Fix Set Extended (Scan Response) Data Bluetooth: Fix not sending Set Extended Scan Response Bluetooth: mgmt: Fix slab-out-of-bounds in tlv_data_is_valid Revert "be2net: disable bh with spin_lock in be_process_mcc" gve: Fix swapped vars when fetching max queues RDMA/cma: Fix incorrect Packet Lifetime calculation bpfilter: Specify the log level for the kmsg message net: dsa: sja1105: fix NULL pointer dereference in sja1105_reload_cbs() e1000e: Check the PCIm state ipv6: fix out-of-bound access in ip6_parse_tlv() net: atlantic: fix the macsec key length net: phy: mscc: fix macsec key length net: macsec: fix the length used to copy the key for offloading RDMA/cma: Protect RMW with qp_mutex ibmvnic: free tx_pool if tso_pool alloc fails ibmvnic: set ltb->buff to NULL after freeing Revert "ibmvnic: remove duplicate napi_schedule call in open function" i40e: Fix missing rtnl locking when setting up pf switch i40e: Fix autoneg disabling for non-10GBaseT links i40e: Fix error handling in i40e_vsi_open bpf: Do not change gso_size during bpf_skb_change_proto() can: j1939: j1939_sk_setsockopt(): prevent allocation of j1939 filter for optlen == 0 ipv6: exthdrs: do not blindly use init_net net: bcmgenet: Fix attaching to PYH failed on RPi 4B mac80211: remove iwlwifi specific workaround NDPs of null_response drm/msm/dpu: Fix error return code in dpu_mdss_init() drm/msm: Fix error return code in msm_drm_init() bpf: Fix null ptr deref with mixed tail calls and subprogs ieee802154: hwsim: avoid possible crash in hwsim_del_edge_nl() ieee802154: hwsim: Fix memory leak in hwsim_add_one tc-testing: fix list handling net: ti: am65-cpsw-nuss: Fix crash when changing number of TX queues net/ipv4: swap flow ports when validating source ip6_tunnel: fix GRE6 segmentation vxlan: add missing rcu_read_lock() in neigh_reduce() rtw88: 8822c: fix lc calibration timing iwlwifi: increase PNVM load timeout xfrm: Fix xfrm offload fallback fail case pkt_sched: sch_qfq: fix qfq_change_class() error path netfilter: nf_tables_offload: check FLOW_DISSECTOR_KEY_BASIC in VLAN transfer logic tls: prevent oversized sendfile() hangs by ignoring MSG_MORE net: sched: add barrier to ensure correct ordering for lockless qdisc vrf: do not push non-ND strict packets with a source LLA through packet taps again net: ethernet: ezchip: fix error handling net: ethernet: ezchip: fix UAF in nps_enet_remove net: ethernet: aeroflex: fix UAF in greth_of_remove mt76: mt7615: fix NULL pointer dereference in tx_prepare_skb() mt76: fix possible NULL pointer dereference in mt76_tx samples/bpf: Fix the error return code of xdp_redirect's main() samples/bpf: Fix Segmentation fault for xdp_redirect command RDMA/rtrs-srv: Set minimal max_send_wr and max_recv_wr bpf: Fix libelf endian handling in resolv_btfids xsk: Fix broken Tx ring validation xsk: Fix missing validation for skb and unaligned mode selftests/bpf: Whitelist test_progs.h from .gitignore RDMA/rxe: Fix qp reference counting for atomic ops netfilter: nft_tproxy: restrict support to TCP and UDP transport protocols netfilter: nft_osf: check for TCP packet before further processing netfilter: nft_exthdr: check for IPv6 packet before further processing RDMA/mlx5: Don't add slave port to unaffiliated list netlabel: Fix memory leak in netlbl_mgmt_add_common ath11k: send beacon template after vdev_start/restart during csa ath10k: Fix an error code in ath10k_add_interface() ath11k: Fix an error handling path in ath11k_core_fetch_board_data_api_n() cw1200: Revert unnecessary patches that fix unreal use-after-free bugs brcmsmac: mac80211_if: Fix a resource leak in an error handling path brcmfmac: Fix a double-free in brcmf_sdio_bus_reset brcmfmac: correctly report average RSSI in station info brcmfmac: fix setting of station info chains bitmask ssb: Fix error return code in ssb_bus_scan() wcn36xx: Move hal_buf allocation to devm_kmalloc in probe clk: imx8mq: remove SYS PLL 1/2 clock gates ieee802154: hwsim: Fix possible memory leak in hwsim_subscribe_all_others wireless: carl9170: fix LEDS build errors & warnings ath10k: add missing error return code in ath10k_pci_probe() ath10k: go to path err_unsupported when chip id is not supported tools/bpftool: Fix error return code in do_batch() drm: qxl: ensure surf.data is ininitialized clk: vc5: fix output disabling when enabling a FOD drm/vc4: hdmi: Fix error path of hpd-gpios drm/pl111: Actually fix CONFIG_VEXPRESS_CONFIG depends RDMA/rxe: Fix failure during driver load drm/pl111: depend on CONFIG_VEXPRESS_CONFIG RDMA/core: Sanitize WQ state received from the userspace net/sched: act_vlan: Fix modify to allow 0 xfrm: remove the fragment check for ipv6 beet mode clk: tegra30: Use 300MHz for video decoder by default ehea: fix error return code in ehea_restart_qps() RDMA/rtrs-clt: Fix memory leak of not-freed sess->stats and stats->pcpu_stats RDMA/rtrs-clt: Check if the queue_depth has changed during a reconnection RDMA/rtrs-srv: Fix memory leak when having multiple sessions RDMA/rtrs-srv: Fix memory leak of unfreed rtrs_srv_stats object RDMA/rtrs: Do not reset hb_missed_max after re-connection RDMA/rtrs-clt: Check state of the rtrs_clt_sess before reading its stats RDMA/srp: Fix a recently introduced memory leak mptcp: generate subflow hmac after mptcp_finish_join() mptcp: fix pr_debug in mptcp_token_new_connect drm/rockchip: cdn-dp: fix sign extension on an int multiply for a u64 result drm/rockchip: lvds: Fix an error handling path drm/rockchip: dsi: move all lane config except LCDC mux to bind() drm/rockchip: cdn-dp-core: add missing clk_disable_unprepare() on error in cdn_dp_grf_write() drm: rockchip: set alpha_en to 0 if it is not used net: ftgmac100: add missing error return code in ftgmac100_probe() clk: meson: g12a: fix gp0 and hifi ranges net: qrtr: ns: Fix error return code in qrtr_ns_init() drm/vmwgfx: Fix cpu updates of coherent multisample surfaces drm/vmwgfx: Mark a surface gpu-dirty after the SVGA3dCmdDXGenMips command pinctrl: renesas: r8a77990: JTAG pins do not have pull-down capabilities pinctrl: renesas: r8a7796: Add missing bias for PRESET# pin net: pch_gbe: Propagate error from devm_gpio_request_one() net: mvpp2: Put fwnode in error case during ->probe() video: fbdev: imxfb: Fix an error message drm/ast: Fix missing conversions to managed API drm/amd/dc: Fix a missing check bug in dm_dp_mst_detect() drm/bridge: Fix the stop condition of drm_bridge_chain_pre_enable() drm/bridge/sii8620: fix dependency on extcon xfrm: xfrm_state_mtu should return at least 1280 for ipv6 mm/page_alloc: fix counting of managed_pages mm: page_alloc: refactor setup_per_zone_lowmem_reserve() mm: memcg/slab: properly set up gfp flags for objcg pointer array mm/shmem: fix shmem_swapin() race with swapoff swap: fix do_swap_page() race with swapoff mm/debug_vm_pgtable: ensure THP availability via has_transparent_hugepage() mm/debug_vm_pgtable/basic: iterate over entire protection_map[] mm/debug_vm_pgtable/basic: add validation for dirtiness after write protect dax: fix ENOMEM handling in grab_mapping_entry() ocfs2: fix snprintf() checking blk-mq: update hctx->dispatch_busy in case of real scheduler cpufreq: Make cpufreq_online() call driver->offline() on errors ACPI: bgrt: Fix CFI violation ACPI: Use DEVICE_ATTR_<RW|RO|WO> macros blk-wbt: make sure throttle is enabled properly blk-wbt: introduce a new disable state to prevent false positive by rwb_enabled() ACPI: APEI: fix synchronous external aborts in user-mode extcon: extcon-max8997: Fix IRQ freeing at error path clocksource/drivers/timer-ti-dm: Save and restore timer TIOCP_CFG mark pstore-blk as broken ACPI: sysfs: Fix a buffer overrun problem with description_show() nvme-pci: look for StorageD3Enable on companion ACPI device instead block: avoid double io accounting for flush request ACPI: PM / fan: Put fan device IDs into separate header file PM / devfreq: Add missing error code in devfreq_add_device() media: video-mux: Skip dangling endpoints media: v4l2-async: Clean v4l2_async_notifier_add_fwnode_remote_subdev psi: Fix race between psi_trigger_create/destroy crypto: nx - Fix RCU warning in nx842_OF_upd_status spi: spi-sun6i: Fix chipselect/clock bug lockdep/selftests: Fix selftests vs PROVE_RAW_LOCK_NESTING lockdep: Fix wait-type for empty stack sched/uclamp: Fix uclamp_tg_restrict() sched/rt: Fix Deadline utilization tracking during policy change sched/rt: Fix RT utilization tracking during policy change x86/sev: Split up runtime #VC handler for correct state tracking x86/sev: Make sure IRQs are disabled while GHCB is active btrfs: clear log tree recovering status if starting transaction fails regulator: hi655x: Fix pass wrong pointer to config.driver_data KVM: arm64: Don't zero the cycle count register when PMCR_EL0.P is set perf/arm-cmn: Fix invalid pointer when access dtc object sharing the same IRQ number KVM: x86/mmu: Fix return value in tdp_mmu_map_handle_target_level() KVM: nVMX: Don't clobber nested MMU's A/D status on EPTP switch KVM: nVMX: Ensure 64-bit shift when checking VMFUNC bitmap KVM: nVMX: Sync all PGDs on nested transition with shadow paging hwmon: (max31790) Fix fan speed reporting for fan7..12 hwmon: (max31722) Remove non-standard ACPI device IDs hwmon: (lm70) Revert "hwmon: (lm70) Add support for ACPI" hwmon: (lm70) Use device_get_match_data() media: s5p-g2d: Fix a memory leak on ctx->fh.m2m_ctx media: subdev: remove VIDIOC_DQEVENT_TIME32 handling arm64/mm: Fix ttbr0 values stored in struct thread_info for software-pan arm64: consistently use reserved_pg_dir mmc: usdhi6rol0: fix error return code in usdhi6_probe() crypto: sm2 - fix a memory leak in sm2 crypto: sm2 - remove unnecessary reset operations crypto: x86/curve25519 - fix cpu feature checking logic in mod_exit crypto: omap-sham - Fix PM reference leak in omap sham ops crypto: nitrox - fix unchecked variable in nitrox_register_interrupts regulator: fan53880: Fix vsel_mask setting for FAN53880_BUCK media: siano: Fix out-of-bounds warnings in smscore_load_firmware_family2() m68k: atari: Fix ATARI_KBD_CORE kconfig unmet dependency warning media: gspca/gl860: fix zero-length control requests media: tc358743: Fix error return code in tc358743_probe_of() media: au0828: fix a NULL vs IS_ERR() check media: exynos4-is: Fix a use after free in isp_video_release media: rkvdec: Fix .buf_prepare locking/lockdep: Reduce LOCKDEP dependency list pata_ep93xx: fix deferred probing media: rc: i2c: Fix an error message crypto: ccp - Fix a resource leak in an error handling path crypto: sa2ul - Fix pm_runtime enable in sa_ul_probe() crypto: sa2ul - Fix leaks on failure paths with sa_dma_init() x86/elf: Use _BITUL() macro in UAPI headers evm: fix writing <securityfs>/evm overflow pata_octeon_cf: avoid WARN_ON() in ata_host_activate() kbuild: Fix objtool dependency for 'OBJECT_FILES_NON_STANDARD_<obj> := n' sched/uclamp: Fix locking around cpu_util_update_eff() sched/uclamp: Fix wrong implementation of cpu.uclamp.min media: I2C: change 'RST' to "RSET" to fix multiple build errors pata_rb532_cf: fix deferred probing sata_highbank: fix deferred probing crypto: ux500 - Fix error return code in hash_hw_final() crypto: ixp4xx - update IV after requests crypto: ixp4xx - dma_unmap the correct address media: hantro: do a PM resume earlier media: s5p_cec: decrement usage count if disabled media: venus: Rework error fail recover logic spi: Avoid undefined behaviour when counting unused native CSs spi: Allow to have all native CSs in use along with GPIOs writeback, cgroup: increment isw_nr_in_flight before grabbing an inode ia64: mca_drv: fix incorrect array size calculation kthread_worker: fix return value when kthread_mod_delayed_work() races with kthread_cancel_delayed_work_sync() block: fix discard request merge mailbox: qcom: Use PLATFORM_DEVID_AUTO to register platform device cifs: fix missing spinlock around update to ses->status HID: wacom: Correct base usage for capacitive ExpressKey status bits ACPI: tables: Add custom DSDT file as makefile prerequisite tpm_tis_spi: add missing SPI device ID entries clocksource: Check per-CPU clock synchronization when marked unstable clocksource: Retry clock read if long delays detected ACPI: EC: trust DSDT GPE for certain HP laptop cifs: improve fallocate emulation PCI: hv: Add check for hyperv_initialized in init_hv_pci_drv() EDAC/Intel: Do not load EDAC driver when running as a guest nvmet-fc: do not check for invalid target port in nvmet_fc_handle_fcp_rqst() nvme-pci: fix var. type for increasing cq_head platform/x86: toshiba_acpi: Fix missing error code in toshiba_acpi_setup_keyboard() platform/x86: asus-nb-wmi: Revert "add support for ASUS ROG Zephyrus G14 and G15" platform/x86: asus-nb-wmi: Revert "Drop duplicate DMI quirk structures" block: fix race between adding/removing rq qos and normal IO ACPI: resources: Add checks for ACPI IRQ override ACPI: bus: Call kobject_put() in acpi_init() error path ACPICA: Fix memory leak caused by _CID repair function fs: dlm: fix memory leak when fenced drivers: hv: Fix missing error code in vmbus_connect() open: don't silently ignore unknown O-flags in openat2() random32: Fix implicit truncation warning in prandom_seed_state() fs: dlm: cancel work sync othercon blk-mq: clear stale request in tags->rq[] before freeing one request pool blk-mq: grab rq->refcount before calling ->fn in blk_mq_tagset_busy_iter block_dump: remove block_dump feature in mark_inode_dirty() ACPI: EC: Make more Asus laptops use ECDT _GPE platform/x86: touchscreen_dmi: Add info for the Goodix GT912 panel of TM800A550L tablets platform/x86: touchscreen_dmi: Add an extra entry for the upside down Goodix touchscreen on Teclast X89 tablets Input: goodix - platform/x86: touchscreen_dmi - Move upside down quirks to touchscreen_dmi.c lib: vsprintf: Fix handling of number field widths in vsscanf hv_utils: Fix passing zero to 'PTR_ERR' warning ACPI: processor idle: Fix up C-state latency if not ordered EDAC/ti: Add missing MODULE_DEVICE_TABLE HID: do not use down_interruptible() when unbinding devices ACPI: video: use native backlight for GA401/GA502/GA503 media: Fix Media Controller API config checks regulator: da9052: Ensure enough delay time for .set_voltage_time_sel regulator: mt6358: Fix vdram2 .vsel_mask KVM: s390: get rid of register asm usage lockding/lockdep: Avoid to find wrong lock dep path in check_irq_usage() locking/lockdep: Fix the dep path printing for backwards BFS btrfs: disable build on platforms having page size 256K btrfs: don't clear page extent mapped if we're not invalidating the full page btrfs: sysfs: fix format string for some discard stats btrfs: abort transaction if we fail to update the delayed inode btrfs: fix error handling in __btrfs_update_delayed_inode KVM: PPC: Book3S HV: Fix TLB management on SMT8 POWER9 and POWER10 processors drivers/perf: fix the missed ida_simple_remove() in ddr_perf_probe() hwmon: (max31790) Fix pwmX_enable attributes hwmon: (max31790) Report correct current pwm duty cycles media: imx-csi: Skip first few frames from a BT.656 source media: siano: fix device register error path media: dvb_net: avoid speculation from net slot crypto: shash - avoid comparing pointers to exported functions under CFI spi: meson-spicc: fix memory leak in meson_spicc_probe spi: meson-spicc: fix a wrong goto jump for avoiding memory leak. mmc: via-sdmmc: add a check against NULL pointer dereference mmc: sdhci-sprd: use sdhci_sprd_writew memstick: rtsx_usb_ms: fix UAF media: dvd_usb: memory leak in cinergyt2_fe_attach Makefile: fix GDB warning with CONFIG_RELR crypto: hisilicon/sec - fixup 3des minimum key size declaration media: st-hva: Fix potential NULL pointer dereferences media: bt8xx: Fix a missing check bug in bt878_probe media: v4l2-core: Avoid the dangling pointer in v4l2_fh_release media: cedrus: Fix .buf_prepare media: hantro: Fix .buf_prepare media: em28xx: Fix possible memory leak of em28xx struct media: bt878: do not schedule tasklet when it is not setup media: i2c: ov2659: Use clk_{prepare_enable,disable_unprepare}() to set xvclk on/off sched/fair: Fix ascii art by relpacing tabs arm64: perf: Convert snprintf to sysfs_emit crypto: qce: skcipher: Fix incorrect sg count for dma transfers crypto: qat - remove unused macro in FW loader crypto: qat - check return code of qat_hal_rd_rel_reg() media: imx: imx7_mipi_csis: Fix logging of only error event counters media: pvrusb2: fix warning in pvr2_i2c_core_done media: hevc: Fix dependent slice segment flags media: cobalt: fix race condition in setting HPD media: cpia2: fix memory leak in cpia2_usb_probe media: sti: fix obj-$(config) targets crypto: nx - add missing MODULE_DEVICE_TABLE hwrng: exynos - Fix runtime PM imbalance on error sched/core: Initialize the idle task with preemption disabled regulator: uniphier: Add missing MODULE_DEVICE_TABLE spi: omap-100k: Fix the length judgment problem spi: spi-topcliff-pch: Fix potential double free in pch_spi_process_messages() spi: spi-loopback-test: Fix 'tx_buf' might be 'rx_buf' media: exynos-gsc: fix pm_runtime_get_sync() usage count media: exynos4-is: fix pm_runtime_get_sync() usage count media: sti/bdisp: fix pm_runtime_get_sync() usage count media: sunxi: fix pm_runtime_get_sync() usage count media: s5p-jpeg: fix pm_runtime_get_sync() usage count media: mtk-vcodec: fix PM runtime get logic media: sh_vou: fix pm_runtime_get_sync() usage count media: am437x: fix pm_runtime_get_sync() usage count media: s5p: fix pm_runtime_get_sync() usage count media: mdk-mdp: fix pm_runtime_get_sync() usage count media: marvel-ccic: fix some issues when getting pm_runtime staging: media: rkvdec: fix pm_runtime_get_sync() usage count Add a reference to ucounts for each cred spi: Make of_register_spi_device also set the fwnode thermal/cpufreq_cooling: Update offline CPUs per-cpu thermal_pressure fuse: reject internal errno fuse: check connected before queueing on fpq->io fuse: ignore PG_workingset after stealing fuse: Fix infinite loop in sget_fc() fuse: Fix crash if superblock of submount gets killed early fuse: Fix crash in fuse_dentry_automount() error path evm: Refuse EVM_ALLOW_METADATA_WRITES only if an HMAC key is loaded evm: Execute evm_inode_init_security() only when an HMAC key is loaded loop: Fix missing discard support when using LOOP_CONFIGURE powerpc/stacktrace: Fix spurious "stale" traces in raise_backtrace_ipi() seq_buf: Make trace_seq_putmem_hex() support data longer than 8 tracepoint: Add tracepoint_probe_register_may_exist() for BPF tracing tracing/histograms: Fix parsing of "sym-offset" modifier rsi: fix AP mode with WPA failure due to encrypted EAPOL rsi: Assign beacon rate settings to the correct rate_info descriptor field ssb: sdio: Don't overwrite const buffer if block_write fails ath9k: Fix kernel NULL pointer dereference during ath_reset_internal() serial_cs: remove wrong GLOBETROTTER.cis entry serial_cs: Add Option International GSM-Ready 56K/ISDN modem serial: sh-sci: Stop dmaengine transfer in sci_stop_tx() serial: mvebu-uart: fix calculation of clock divisor iio: accel: bma180: Fix BMA25x bandwidth register values iio: ltr501: ltr501_read_ps(): add missing endianness conversion iio: ltr501: ltr559: fix initialization of LTR501_ALS_CONTR iio: ltr501: mark register holding upper 8 bits of ALS_DATA{0,1} and PS_DATA as volatile, too iio: light: tcs3472: do not free unallocated IRQ iio: frequency: adf4350: disable reg and clk on error in adf4350_probe() rtc: stm32: Fix unbalanced clk_disable_unprepare() on probe error path clk: agilex/stratix10: fix bypass representation clk: agilex/stratix10: remove noc_clk clk: agilex/stratix10/n5x: fix how the bypass_reg is handled f2fs: Prevent swap file in LFS mode s390: mm: Fix secure storage access exception handling s390/cio: dont call css_wait_for_slow_path() inside a lock KVM: x86/mmu: Use MMU's role to detect CR4.SMEP value in nested NPT walk KVM: x86/mmu: Treat NX as used (not reserved) for all !TDP shadow MMUs KVM: PPC: Book3S HV: Workaround high stack usage with clang KVM: nVMX: Handle split-lock #AC exceptions that happen in L2 perf/smmuv3: Don't trample existing events with global filter mm/gup: fix try_grab_compound_head() race with split_huge_page() bus: mhi: Wait for M2 state during system resume SUNRPC: Should wake up the privileged task firstly. SUNRPC: Fix the batch tasks count wraparound. mac80211: remove iwlwifi specific workaround that broke sta NDP tx can: peak_pciefd: pucan_handle_status(): fix a potential starvation issue in TX path can: j1939: j1939_sk_init(): set SOCK_RCU_FREE to call sk_destruct() after RCU is done can: isotp: isotp_release(): omit unintended hrtimer restart on socket release can: gw: synchronize rcu operations before removing gw job entry can: bcm: delay release of struct bcm_op after synchronize_rcu() ext4: use ext4_grp_locked_error in mb_find_extent ext4: fix avefreec in find_group_orlov ext4: remove check for zero nr_to_scan in ext4_es_scan() ext4: correct the cache_nr in tracepoint ext4_es_shrink_exit ext4: return error code when ext4_fill_flex_info() fails ext4: fix overflow in ext4_iomap_alloc() ext4: fix kernel infoleak via ext4_extent_header ext4: cleanup in-core orphan list if ext4_truncate() failed to get a transaction handle btrfs: clear defrag status of a root if starting transaction fails btrfs: compression: don't try to compress if we don't have enough pages btrfs: send: fix invalid path for unlink operations after parent orphanization ARM: dts: at91: sama5d4: fix pinctrl muxing ARM: dts: ux500: Fix LED probing arm_pmu: Fix write counter incorrect in ARMv7 big-endian mode crypto: ccp - Annotate SEV Firmware file names crypto: nx - Fix memcpy() over-reading in nonce Input: joydev - prevent use of not validated data in JSIOCSBTNMAP ioctl iov_iter_fault_in_readable() should do nothing in xarray case copy_page_to_iter(): fix ITER_DISCARD case selftests/lkdtm: Avoid needing explicit sub-shell ntfs: fix validity check for file name attribute gfs2: Fix error handling in init_statfs gfs2: Fix underflow in gfs2_page_mkwrite xhci: solve a double free problem while doing s4 usb: typec: Add the missed altmode_id_remove() in typec_register_altmode() usb: dwc3: Fix debugfs creation flow USB: cdc-acm: blacklist Heimann USB Appset device usb: renesas-xhci: Fix handling of unknown ROM state usb: gadget: eem: fix echo command packet response issue net: can: ems_usb: fix use-after-free in ems_usb_disconnect() Input: usbtouchscreen - fix control-request directions media: dvb-usb: fix wrong definition ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 830 G8 Notebook PC ALSA: hda/realtek: Apply LED fixup for HP Dragonfly G1, too ALSA: hda/realtek: Fix bass speaker DAC mapping for Asus UM431D ALSA: hda/realtek: Improve fixup for HP Spectre x360 15-df0xxx ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook x360 830 G8 ALSA: hda/realtek: Add another ALC236 variant support ALSA: hda/realtek: fix mute/micmute LEDs for HP ProBook 630 G8 ALSA: hda/realtek: fix mute/micmute LEDs for HP ProBook 445 G8 ALSA: hda/realtek: fix mute/micmute LEDs for HP ProBook 450 G8 ALSA: intel8x0: Fix breakage at ac97 clock measurement ALSA: usb-audio: scarlett2: Fix wrong resume call ALSA: firewire-motu: fix stream format for MOTU 8pre FireWire ALSA: usb-audio: Fix OOB access at proc output ALSA: usb-audio: fix rate on Ozone Z90 USB headset Bluetooth: Remove spurious error message Bluetooth: btqca: Don't modify firmware contents in-place Bluetooth: hci_qca: fix potential GPF Linux 5.10.49 xen/events: reset active flag for lateeoi events later Hexagon: change jumps to must-extend in futex_atomic_* Hexagon: add target builtins to kernel Hexagon: fix build errors media: uvcvideo: Support devices that report an OT as an entity source KVM: PPC: Book3S HV: Save and restore FSCR in the P9 path Linux 5.10.48 Revert "KVM: x86/mmu: Drop kvm_mmu_extended_role.cr4_la57 hack" RDMA/mlx5: Block FDB rules when not in switchdev mode gpio: AMD8111 and TQMX86 require HAS_IOPORT_MAP drm/nouveau: fix dma_address check for CPU/GPU sync gpio: mxc: Fix disabled interrupt wake-up support scsi: sr: Return appropriate error code when disk is ejected ANDROID: ABI: update android12-5.10-lts ABI for 7/2 KMI update ANDROID: ABI: hikey960_gki.fragment: Add cfg80211 and mac80211 as modules ANDROID: ABI: gki_defconfig: Make cfg80211 and mac80211 modules Revert "ANDROID: GKI: Enable some necessary CFG80211 configs for WIFI" Linux 5.10.47 integrity: Load mokx variables into the blacklist keyring certs: Add ability to preload revocation certs certs: Move load_system_certificate_list to a common function certs: Add EFI_CERT_X509_GUID support for dbx entries Revert "drm: add a locked version of drm_is_current_master" netfs: fix test for whether we can skip read when writing beyond EOF swiotlb: manipulate orig_addr when tlb_addr has offset KVM: SVM: Call SEV Guest Decommission if ASID binding fails mm, futex: fix shared futex pgoff on shmem huge page mm/thp: another PVMW_SYNC fix in page_vma_mapped_walk() mm/thp: fix page_vma_mapped_walk() if THP mapped by ptes mm: page_vma_mapped_walk(): get vma_address_end() earlier mm: page_vma_mapped_walk(): use goto instead of while (1) mm: page_vma_mapped_walk(): add a level of indentation mm: page_vma_mapped_walk(): crossing page table boundary mm: page_vma_mapped_walk(): prettify PVMW_MIGRATION block mm: page_vma_mapped_walk(): use pmde for *pvmw->pmd mm: page_vma_mapped_walk(): settle PageHuge on entry mm: page_vma_mapped_walk(): use page for pvmw->page mm: thp: replace DEBUG_VM BUG with VM_WARN when unmap fails for split mm/thp: unmap_mapping_page() to fix THP truncate_cleanup_page() mm/thp: fix page_address_in_vma() on file THP tails mm/thp: fix vma_address() if virtual address below file offset mm/thp: try_to_unmap() use TTU_SYNC for safe splitting mm/thp: make is_huge_zero_pmd() safe and quicker mm/thp: fix __split_huge_pmd_locked() on shmem migration entry mm, thp: use head page in __migration_entry_wait() mm/rmap: use page_not_mapped in try_to_unmap() mm/rmap: remove unneeded semicolon in page_not_mapped() mm: add VM_WARN_ON_ONCE_PAGE() macro x86/fpu: Make init_fpstate correct with optimized XSAVE x86/fpu: Preserve supervisor states in sanitize_restored_user_xstate() kthread: prevent deadlock when kthread_mod_delayed_work() races with kthread_cancel_delayed_work_sync() kthread_worker: split code for canceling the delayed work timer ceph: must hold snap_rwsem when filling inode for async create i2c: robotfuzz-osif: fix control-request directions KVM: do not allow mapping valid but non-reference-counted pages s390/stack: fix possible register corruption with stack switch helper nilfs2: fix memory leak in nilfs_sysfs_delete_device_group scsi: sd: Call sd_revalidate_disk() for ioctl(BLKRRPART) gpiolib: cdev: zero padding during conversion to gpioline_info_changed i2c: i801: Ensure that SMBHSTSTS_INUSE_STS is cleared when leaving i801_access pinctrl: stm32: fix the reported number of GPIO lines per bank perf/x86: Track pmu in per-CPU cpu_hw_events net: ll_temac: Avoid ndo_start_xmit returning NETDEV_TX_BUSY net: ll_temac: Add memory-barriers for TX BD access PCI: Add AMD RS690 quirk to enable 64-bit DMA recordmcount: Correct st_shndx handling mac80211: handle various extensible elements correctly mac80211: reset profile_periodicity/ema_ap net: qed: Fix memcpy() overflow of qed_dcbx_params() KVM: selftests: Fix kvm_check_cap() assertion r8169: Avoid memcpy() over-reading of ETH_SS_STATS sh_eth: Avoid memcpy() over-reading of ETH_SS_STATS r8152: Avoid memcpy() over-reading of ETH_SS_STATS net/packet: annotate accesses to po->ifindex net/packet: annotate accesses to po->bind net: caif: fix memory leak in ldisc_open riscv32: Use medany C model for modules net: phy: dp83867: perform soft reset and retain established link net/packet: annotate data race in packet_sendmsg() inet: annotate date races around sk->sk_txhash net: annotate data race in sock_error() ping: Check return value of function 'ping_queue_rcv_skb' inet: annotate data race in inet_send_prepare() and inet_dgram_connect() net: ethtool: clear heap allocations for ethtool function mac80211: drop multicast fragments net: ipv4: Remove unneed BUG() function dmaengine: mediatek: use GFP_NOWAIT instead of GFP_ATOMIC in prep_dma dmaengine: mediatek: do not issue a new desc if one is still current dmaengine: mediatek: free the proper desc in desc_free handler dmaengine: rcar-dmac: Fix PM reference leak in rcar_dmac_probe() cfg80211: call cfg80211_leave_ocb when switching away from OCB mac80211_hwsim: drop pending frames on stop mac80211: remove warning in ieee80211_get_sband() dmaengine: xilinx: dpdma: Limit descriptor IDs to 16 bits dmaengine: xilinx: dpdma: Add missing dependencies to Kconfig dmaengine: stm32-mdma: fix PM reference leak in stm32_mdma_alloc_chan_resourc() dmaengine: zynqmp_dma: Fix PM reference leak in zynqmp_dma_alloc_chan_resourc() perf/x86/intel/lbr: Zero the xstate buffer on allocation perf/x86/lbr: Remove cpuc->lbr_xsave allocation from atomic context locking/lockdep: Improve noinstr vs errors x86/xen: Fix noinstr fail in exc_xen_unknown_trap() x86/entry: Fix noinstr fail in __do_fast_syscall_32() drm/vc4: hdmi: Make sure the controller is powered in detect drm/vc4: hdmi: Move the HSM clock enable to runtime_pm Revert "PCI: PM: Do not read power state in pci_enable_device_flags()" spi: spi-nxp-fspi: move the register operation after the clock enable arm64: Force NO_BLOCK_MAPPINGS if crashkernel reservation is required arm64: Ignore any DMA offsets in the max_zone_phys() calculation MIPS: generic: Update node names to avoid unit addresses mmc: meson-gx: use memcpy_to/fromio for dram-access-quirk ARM: 9081/1: fix gcc-10 thumb2-kernel regression drm/amdgpu: wait for moving fence after pinning drm/radeon: wait for moving fence after pinning drm/nouveau: wait for moving fence after pinning v2 drm: add a locked version of drm_is_current_master Revert "drm/amdgpu/gfx10: enlarge CP_MEC_DOORBELL_RANGE_UPPER to cover full doorbell." Revert "drm/amdgpu/gfx9: fix the doorbell missing when in CGPG issue." module: limit enabling module.sig_enforce Revert "mm: relocate 'write_protect_seq' in struct mm_struct" Linux 5.10.46 usb: dwc3: core: fix kernel panic when do reboot usb: dwc3: debugfs: Add and remove endpoint dirs dynamically perf beauty: Update copy of linux/socket.h with the kernel sources tools headers UAPI: Sync linux/in.h copy with the kernel sources net: fec_ptp: add clock rate zero check net: stmmac: disable clocks in stmmac_remove_config_dt() mm/slub.c: include swab.h mm/slub: actually fix freelist pointer vs redzoning mm/slub: fix redzoning for small allocations mm/slub: clarify verification reporting mm/swap: fix pte_same_as_swp() not removing uffd-wp bit when compare net: bridge: fix vlan tunnel dst refcnt when egressing net: bridge: fix vlan tunnel dst null pointer dereference net: ll_temac: Fix TX BD buffer overwrite net: ll_temac: Make sure to free skb when it is completely used drm/amdgpu/gfx9: fix the doorbell missing when in CGPG issue. drm/amdgpu/gfx10: enlarge CP_MEC_DOORBELL_RANGE_UPPER to cover full doorbell. cfg80211: avoid double free of PMSR request cfg80211: make certificate generation more robust mac80211: Fix NULL ptr deref for injected rate info dmaengine: pl330: fix wrong usage of spinlock flags in dma_cyclc crash_core, vmcoreinfo: append 'SECTION_SIZE_BITS' to vmcoreinfo x86/fpu: Reset state for all signal restore failures x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer x86/fpu: Prevent state corruption in __fpu__restore_sig() x86/pkru: Write hardware init value to PKRU when xstate is init x86/ioremap: Map EFI-reserved memory as encrypted for SEV x86/process: Check PF_KTHREAD and not current->mm for kernel threads x86/mm: Avoid truncating memblocks for SGX memory ARCv2: save ABI registers across signal handling s390/ap: Fix hanging ioctl caused by wrong msg counter s390/mcck: fix calculation of SIE critical section size KVM: X86: Fix x86_emulator slab cache leak KVM: x86/mmu: Calculate and check "full" mmu_role for nested MMU KVM: x86: Immediately reset the MMU context when the SMM flag is cleared PCI: Work around Huawei Intelligent NIC VF FLR erratum PCI: Add ACS quirk for Broadcom BCM57414 NIC PCI: aardvark: Fix kernel panic during PIO transfer PCI: Mark some NVIDIA GPUs to avoid bus reset PCI: Mark TI C667X to avoid bus reset tracing: Do no increment trace_clock_global() by one tracing: Do not stop recording comms if the trace file is being read tracing: Do not stop recording cmdlines when tracing is off usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection usb: core: hub: Disable autosuspend for Cypress CY7C65632 can: mcba_usb: fix memory leak in mcba_usb can: j1939: fix Use-after-Free, hold skb ref while in use can: bcm/raw/isotp: use per module netdevice notifier can: bcm: fix infoleak in struct bcm_msg_head bpf: Do not mark insn as seen under speculative path verification bpf: Inherit expanded/patched seen count from old aux data irqchip/gic-v3: Workaround inconsistent PMR setting on NMI entry mm: relocate 'write_protect_seq' in struct mm_struct hwmon: (scpi-hwmon) shows the negative temperature properly radeon: use memcpy_to/fromio for UVD fw upload ASoC: qcom: lpass-cpu: Fix pop noise during audio capture begin drm/sun4i: dw-hdmi: Make HDMI PHY into a platform device pinctrl: ralink: rt2880: avoid to error in calls is pin is already enabled ASoC: rt5682: Fix the fast discharge for headset unplugging in soundwire mode regulator: rt4801: Fix NULL pointer dereference if priv->enable_gpios is NULL spi: stm32-qspi: Always wait BUSY bit to be cleared in stm32_qspi_wait_cmd() ASoC: tas2562: Fix TDM_CFG0_SAMPRATE values sched/pelt: Ensure that *_sum is always synced with *_avg spi: spi-zynq-qspi: Fix some wrong goto jumps & missing error code regulator: rtmv20: Fix to make regcache value first reading back from HW ASoC: fsl-asoc-card: Set .owner attribute when registering card. phy: phy-mtk-tphy: Fix some resource leaks in mtk_phy_init() ASoC: rt5659: Fix the lost powers for the HDA header platform/x86: thinkpad_acpi: Add X1 Carbon Gen 9 second fan support regulator: bd70528: Fix off-by-one for buck123 .n_voltages setting regulator: cros-ec: Fix error code in dev_err message net: ethernet: fix potential use-after-free in ec_bhf_remove icmp: don't send out ICMP messages with a source address of 0.0.0.0 bnxt_en: Call bnxt_ethtool_free() in bnxt_init_one() error path bnxt_en: Fix TQM fastpath ring backing store computation bnxt_en: Rediscover PHY capabilities after firmware reset cxgb4: fix wrong shift. net: cdc_eem: fix tx fixup skb leak net: hamradio: fix memory leak in mkiss_close be2net: Fix an error handling path in 'be_probe()' net/mlx5: Reset mkey index on creation net/mlx5: E-Switch, Allow setting GUID for host PF vport net/mlx5: E-Switch, Read PF mac address net/af_unix: fix a data-race in unix_dgram_sendmsg / unix_release_sock net: ipv4: fix memory leak in ip_mc_add1_src net: fec_ptp: fix issue caused by refactor the fec_devtype net: usb: fix possible use-after-free in smsc75xx_bind lantiq: net: fix duplicated skb in rx descriptor ring net: cdc_ncm: switch to eth%d interface naming ptp: improve max_adj check against unreasonable values bpf: Fix leakage under speculation on mispredicted branches net: qrtr: fix OOB Read in qrtr_endpoint_post ipv4: Fix device used for dst_alloc with local routes cxgb4: fix wrong ethtool n-tuple rule lookup netxen_nic: Fix an error handling path in 'netxen_nic_probe()' qlcnic: Fix an error handling path in 'qlcnic_probe()' ethtool: strset: fix message length calculation net: qualcomm: rmnet: don't over-count statistics net: qualcomm: rmnet: Update rmnet device MTU based on real device net: make get_net_ns return error if NET_NS is disabled net: stmmac: dwmac1000: Fix extended MAC address registers definition cxgb4: halt chip before flashing PHY firmware image cxgb4: fix sleep in atomic when flashing PHY firmware cxgb4: fix endianness when flashing boot image alx: Fix an error handling path in 'alx_probe()' selftests: mptcp: enable syncookie only in absence of reorders mptcp: do not warn on bad input from the network mptcp: try harder to borrow memory from subflow under pressure sch_cake: Fix out of bounds when parsing TCP options and header mptcp: Fix out of bounds when parsing TCP options netfilter: synproxy: Fix out of bounds when parsing TCP options net/mlx5e: Block offload of outer header csum for UDP tunnels net/mlx5: DR, Don't use SW steering when RoCE is not supported net/mlx5: DR, Allow SW steering for sw_owner_v2 devices net/mlx5: Consider RoCE cap before init RDMA resources net/mlx5e: Fix page reclaim for dead peer hairpin net/mlx5e: Remove dependency in IPsec initialization flows net/sched: act_ct: handle DNAT tuple collision rtnetlink: Fix regression in bridge VLAN configuration udp: fix race between close() and udp_abort() ice: parameterize functions responsible for Tx ring management ice: add ndo_bpf callback for safe mode netdev ops netfilter: nft_fib_ipv6: skip ipv6 packets from any to link-local net: lantiq: disable interrupt before sheduling NAPI net: dsa: felix: re-enable TX flow control in ocelot_port_flush() net: rds: fix memory leak in rds_recvmsg vrf: fix maximum MTU net: ipv4: fix memory leak in netlbl_cipsov4_add_std libbpf: Fixes incorrect rx_ring_setup_done mlxsw: core: Set thermal zone polling delay argument to real value at init mlxsw: reg: Spectrum-3: Enforce lowest max-shaper burst size of 11 mac80211: fix skb length check in ieee80211_scan_rx() batman-adv: Avoid WARN_ON timing related checks fanotify: fix copy_event_to_user() fid error clean up kvm: LAPIC: Restore guard to prevent illegal APIC register access mm/memory-failure: make sure wait for page writeback in memory_failure afs: Fix an IS_ERR() vs NULL check dmaengine: stedma40: add missing iounmap() on error in d40_probe() dmaengine: SF_PDMA depends on HAS_IOMEM dmaengine: QCOM_HIDMA_MGMT depends on HAS_IOMEM dmaengine: ALTERA_MSGDMA depends on HAS_IOMEM dmaengine: xilinx: dpdma: initialize registers before request_irq dmaengine: fsl-dpaa2-qdma: Fix error return code in two functions dmaengine: idxd: add missing dsa driver unregister Linux 5.10.45 fib: Return the correct errno code net: Return the correct errno code net/x25: Return the correct errno code rtnetlink: Fix missing error code in rtnl_bridge_notify() drm/amd/amdgpu:save psp ring wptr to avoid attack drm/amd/display: Fix potential memory leak in DMUB hw_init drm/amdgpu: refine amdgpu_fru_get_product_info drm/amd/display: Allow bandwidth validation for 0 streams. net: ipconfig: Don't override command-line hostnames or domains nvme-loop: do not warn for deleted controllers during reset nvme-loop: check for NVME_LOOP_Q_LIVE in nvme_loop_destroy_admin_queue() nvme-loop: clear NVME_LOOP_Q_LIVE when nvme_loop_configure_admin_queue() fails nvme-loop: reset queue count to 1 in nvme_loop_destroy_io_queues() scsi: scsi_devinfo: Add blacklist entry for HPE OPEN-V Bluetooth: Add a new USB ID for RTL8822CE scsi: qedf: Do not put host in qedf_vport_create() unconditionally ethernet: myri10ge: Fix missing error code in myri10ge_probe() scsi: target: core: Fix warning on realtime kernels gfs2: Fix use-after-free in gfs2_glock_shrink_scan riscv: Use -mno-relax when using lld linker HID: gt683r: add missing MODULE_DEVICE_TABLE gfs2: fix a deadlock on withdraw-during-mount gfs2: Prevent direct-I/O write fallback errors from getting lost ARM: OMAP2+: Fix build warning when mmc_omap is not built ARM: OMAP1: Fix use of possibly uninitialized irq variable drm/tegra: sor: Fully initialize SOR before registration gpu: host1x: Split up client initalization and registration drm/tegra: sor: Do not leak runtime PM reference HID: usbhid: fix info leak in hid_submit_ctrl HID: Add BUS_VIRTUAL to hid_connect logging HID: multitouch: set Stylus suffix for Stylus-application devices, too HID: quirks: Add quirk for Lenovo optical mouse HID: hid-sensor-hub: Return error for hid_set_field() failure HID: hid-input: add mapping for emoji picker key HID: a4tech: use A4_2WHEEL_MOUSE_HACK_B8 for A4TECH NB-95 HID: quirks: Set INCREMENT_USAGE_ON_DUPLICATE for Saitek X65 net: ieee802154: fix null deref in parse dev addr Linux 5.10.44 proc: only require mm_struct for writing tracing: Correct the length check which causes memory corruption scsi: core: Only put parent device if host state differs from SHOST_CREATED scsi: core: Put .shost_dev in failure path if host state changes to RUNNING scsi: core: Fix failure handling of scsi_add_host_with_dma() scsi: core: Fix error handling of scsi_host_alloc() NFSv4: nfs4_proc_set_acl needs to restore NFS_CAP_UIDGID_NOMAP on error. NFSv4: Fix second deadlock in nfs4_evict_inode() NFS: Fix use-after-free in nfs4_init_client() kvm: fix previous commit for 32-bit builds perf session: Correct buffer copying when peeking events NFSv4: Fix deadlock between nfs4_evict_inode() and nfs4_opendata_get_inode() NFS: Fix a potential NULL dereference in nfs_get_client() IB/mlx5: Fix initializing CQ fragments buffer KVM: x86: Ensure liveliness of nested VM-Enter fail tracepoint message x86/nmi_watchdog: Fix old-style NMI watchdog regression on old Intel CPUs sched/fair: Fix util_est UTIL_AVG_UNCHANGED handling sched/fair: Make sure to update tg contrib for blocked load sched/fair: Keep load_avg and load_sum synced perf: Fix data race between pin_count increment/decrement gpio: wcd934x: Fix shift-out-of-bounds error phy: ti: Fix an error code in wiz_probe() ASoC: meson: gx-card: fix sound-dai dt schema ASoC: core: Fix Null-point-dereference in fmt_single_name() phy: cadence: Sierra: Fix error return code in cdns_sierra_phy_probe() tools/bootconfig: Fix error return code in apply_xbc() vmlinux.lds.h: Avoid orphan section with !SMP ARM: cpuidle: Avoid orphan section warning RDMA/mlx4: Do not map the core_clock page to user space unless enabled RDMA/ipoib: Fix warning caused by destroying non-initial netns drm/msm/a6xx: avoid shadow NULL reference in failure path drm/msm/a6xx: update/fix CP_PROTECT initialization drm/msm/a6xx: fix incorrectly set uavflagprd_inv field for A650 drm/mcde: Fix off by 10^3 in calculation usb: typec: mux: Fix copy-paste mistake in typec_mux_match usb: dwc3: gadget: Disable gadget IRQ during pullup disable phy: usb: Fix misuse of IS_ENABLED regulator: rtmv20: Fix .set_current_limit/.get_current_limit callbacks regulator: bd71828: Fix .n_voltages settings regulator: fan53880: Fix missing n_voltages setting regulator: bd718x7: Fix the BUCK7 voltage setting on BD71837 regulator: max77620: Use device_set_of_node_from_dev() regulator: core: resolve supply for boot-on/always-on regulators usb: typec: tcpm: cancel frs hrtimer when unregister tcpm port usb: typec: tcpm: cancel vdm and state machine hrtimer when unregister tcpm port usb: fix various gadget panics on 10gbps cabling usb: fix various gadgets null ptr deref on 10gbps cabling. usb: gadget: eem: fix wrong eem header operation USB: serial: cp210x: fix alternate function for CP2102N QFN20 USB: serial: quatech2: fix control-request directions USB: serial: omninet: add device id for Zyxel Omni 56K Plus USB: serial: ftdi_sio: add NovaTech OrionMX product ID usb: gadget: f_fs: Ensure io_completion_wq is idle during unbind usb: typec: intel_pmc_mux: Add missed error check for devm_ioremap_resource() usb: typec: intel_pmc_mux: Put fwnode in error case during ->probe() usb: typec: ucsi: Clear PPM capability data in ucsi_init() error path usb: typec: wcove: Use LE to CPU conversion when accessing msg->header usb: musb: fix MUSB_QUIRK_B_DISCONNECT_99 handling usb: dwc3: ep0: fix NULL pointer exception usb: dwc3: gadget: Bail from dwc3_gadget_exit() if dwc->gadget is NULL usb: dwc3: meson-g12a: Disable the regulator in the error handling path of the probe usb: dwc3-meson-g12a: fix usb2 PHY glue init when phy0 is disabled usb: pd: Set PD_T_SINK_WAIT_CAP to 310ms usb: f_ncm: only first packet of aggregate needs to start timer USB: f_ncm: ncm_bitrate (speed) is unsigned mmc: renesas_sdhi: Fix HS400 on R-Car M3-W+ mmc: renesas_sdhi: abort tuning when timeout detected ftrace: Do not blindly read the ip address in ftrace_bug() cgroup1: don't allow '\n' in renaming btrfs: promote debugging asserts to full-fledged checks in validate_super btrfs: return value from btrfs_mark_extent_written() in case of error async_xor: check src_offs is not NULL before updating it staging: rtl8723bs: Fix uninitialized variables kvm: avoid speculation-based attacks from out-of-range memslot accesses KVM: X86: MMU: Use the correct inherited permissions to get shadow page perf/x86/intel/uncore: Fix M2M event umask for Ice Lake server drm: Lock pointer access in drm_master_release() drm: Fix use-after-free read in drm_getunique() Revert "ACPI: sleep: Put the FACS table after using it" spi: bcm2835: Fix out-of-bounds access with more than 4 slaves ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8 ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840 Aero G8 ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP EliteBook x360 1040 G8 ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP Elite Dragonfly G2 ALSA: hda/realtek: headphone and mic don't work on an Acer laptop ALSA: firewire-lib: fix the context to call snd_pcm_stop_xrun() ALSA: seq: Fix race of snd_seq_timer_open() i2c: mpc: implement erratum A-004447 workaround i2c: mpc: Make use of i2c_recover_bus() spi: Cleanup on failure of initial setup spi: Don't have controller clean up spi device before driver unbind powerpc/fsl: set fsl,i2c-erratum-a004447 flag for P1010 i2c controllers powerpc/fsl: set fsl,i2c-erratum-a004447 flag for P2041 i2c controllers nvmet: fix false keep-alive timeout when a controller is torn down nvme-tcp: remove incorrect Kconfig dep in BLK_DEV_NVME bnx2x: Fix missing error code in bnx2x_iov_init_one() dm verity: fix require_signatures module_param permissions MIPS: Fix kernel hang under FUNCTION_GRAPH_TRACER and PREEMPT_TRACER nvme-fabrics: decode host pathing error for connect net: dsa: microchip: enable phy errata workaround on 9567 net: appletalk: cops: Fix data race in cops_probe1 net: macb: ensure the device is available before accessing GEMGXL control registers scsi: target: qla2xxx: Wait for stop_phase1 at WWN removal scsi: hisi_sas: Drop free_irq() of devm_request_irq() allocated irq scsi: vmw_pvscsi: Set correct residual data length scsi: bnx2fc: Return failure if io_req is already in ABTS processing net:sfc: fix non-freed irq in legacy irq mode RDS tcp loopback connection can hang net/qla3xxx: fix schedule while atomic in ql_sem_spinlock wq: handle VM suspension in stall detection cgroup: disable controllers at parse time net: mdiobus: get rid of a BUG_ON() netlink: disable IRQs for netlink_lock_table() bonding: init notify_work earlier to avoid uninitialized use isdn: mISDN: netjet: Fix crash in nj_probe: usb: chipidea: udc: assign interrupt number to USB gadget structure spi: sprd: Add missing MODULE_DEVICE_TABLE ASoC: sti-sas: add missing MODULE_DEVICE_TABLE vfio-ccw: Serialize FSM IDLE state with I/O completion vfio-ccw: Reset FSM state to IDLE inside FSM ASoC: Intel: bytcr_rt5640: Add quirk for the Lenovo Miix 3-830 tablet ASoC: Intel: bytcr_rt5640: Add quirk for the Glavey TM800A550L tablet usb: cdns3: Fix runtime PM imbalance on error net/nfc/rawsock.c: fix a permission check bug bpf: Forbid trampoline attach for functions with variable arguments spi: spi-zynq-qspi: Fix stack violation bug spi: Fix spi device unregister flow ASoC: amd: fix for pcm_read() error ASoC: max98088: fix ni clock divider calculation proc: Track /proc/$pid/attr/ opener mm_struct ANDROID: clang: update to 12.0.5 ANDROID: GKI: Refresh ABI following trimmed symbol CRC fix FROMLIST: export: Make CRCs robust to symbol trimming ANDROID: Add GKI_HIDDEN_MM_CONFIGS to support ballooning. defconfig: Remove RESET_INTEL_GW/RESET_BRCMSTB_RESCAL from tuivm config 6ab9d62 reset: RESET_INTEL_GW should depend on X86 42f6a76 reset: RESET_BRCMSTB_RESCAL should depend on ARCH_BRCMSTB Remove RESET_INTEL_GW/RESET_BRCMSTB_RESCAL from marking as 'n' in trusted VM config due to below change. interconnect: qcom: Fix compile error for LTS merge Conflicts: Documentation/devicetree/bindings Documentation/devicetree/bindings/i2c/i2c-at91.txt Documentation/devicetree/bindings/riscv/sifive-l2-cache.yaml Documentation/devicetree/bindings/sound/amlogic,gx-sound-card.yaml drivers/bus/mhi/core/main.c drivers/iommu/arm/arm-smmu/arm-smmu.c drivers/mmc/host/sdhci-msm.c drivers/slimbus/messaging.c drivers/slimbus/qcom-ngd-ctrl.c net/qrtr/ns.c net/qrtr/qrtr.c Change-Id: I63018794287f1b197b83780a72d67267eb4ef0d2 Signed-off-by: Sivasri Kumar, Vanka <quic_svanka@quicinc.com> |
||
Sarannya S
|
9b7b4ed167 |
net: qrtr: Change error logging in callback
Print error logs in the callback by using pr_err_ratelimited so that watchdog bark will not occur due to excessive logging when the callback is triggered before probe is completed. Change-Id: I82bb84b7812cef5cb8a37e99c5cf1a54411cbdb8 Signed-off-by: Sarannya S <sarannya@codeaurora.org> |