44a469b24f
71014 Commits
| Author | SHA1 | Message | Date | |
|---|---|---|---|---|
Srinivasarao Pathipati
|
3ccfe3d43c |
Merge keystone/android12-5.10-keystone-qcom-release.160+ (026be06) into msm-5.10
* refs/heads/tmp-026be06: UPSTREAM: ext4: refuse to create ea block when umounted UPSTREAM: ext4: optimize ea_inode block expansion UPSTREAM: ext4: allocate extended attribute value in vmalloc area UPSTREAM: usb: gadget: composite: Draw 100mA current if not configured UPSTREAM: usb: dwc3: gadget: Change condition for processing suspend event ANDROID: GKI: update xiaomi symbol list UPSTREAM: net/sched: tcindex: update imperfect hash filters respecting rcu FROMGIT: KVM: arm64: Ignore kvm-arm.mode if !is_hyp_mode_available() UPSTREAM: KVM: arm64: Allow KVM to be disabled from the command line ANDROID: ABI: Cuttlefish Symbol update Revert "ANDROID: dma-ops: Add restricted vendor hook" UPSTREAM: io_uring: ensure that io_init_req() passes in the right issue_flags FROMGIT: usb: gadget: configfs: Restrict symlink creation is UDC already binded UPSTREAM: io_uring: add missing lock in io_get_file_fixed ANDROID: ABI: Update oplus symbol list ANDROID: vendor_hooks: Add hooks for mutex and rwsem optimistic spin ANDROID: dma-buf: heaps: Don't lock unused dmabuf_page_pool mutex ANDROID: mm/filemap: Fix missing put_page() for speculative page fault UPSTREAM: KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS UPSTREAM: net: qrtr: combine nameservice into main module ANDROID: GKI: Update symbol list for mtk FROMLIST: rcu-tasks: Fix build error ANDROID: incremental fs: Move throttling to outside page lock ANDROID: incremental fs: Fix race between truncate and write last block UPSTREAM: usb: gadget: u_serial: Add null pointer check in gserial_resume Revert "ANDROID: GKI: loadavg: Export for get_avenrun" ANDROID: ABI: Update allowed list for QCOM ANDROID: Update symbol list for mtk UPSTREAM: ext4: add inode table check in __ext4_get_inode_loc to aovid possible infinite loop UPSTREAM: net_sched: reject TCF_EM_SIMPLE case for complex ematch module UPSTREAM: io_uring/rw: remove leftover debug statement UPSTREAM: io_uring/rw: ensure kiocb_end_write() is always called UPSTREAM: io_uring: fix double poll leak on repolling UPSTREAM: io_uring: Clean up a false-positive warning from GCC 9.3.0 UPSTREAM: io_uring/net: fix fast_iov assignment in io_setup_async_msg() UPSTREAM: io_uring: io_kiocb_update_pos() should not touch file for non -1 offset UPSTREAM: io_uring/rw: defer fsnotify calls to task context UPSTREAM: io_uring: do not recalculate ppos unnecessarily UPSTREAM: io_uring: update kiocb->ki_pos at execution time UPSTREAM: io_uring: remove duplicated calls to io_kiocb_ppos UPSTREAM: io_uring: ensure that cached task references are always put on exit UPSTREAM: io_uring: fix CQ waiting timeout handling UPSTREAM: io_uring: lock overflowing for IOPOLL UPSTREAM: io_uring: check for valid register opcode earlier UPSTREAM: io_uring: fix async accept on O_NONBLOCK sockets UPSTREAM: io_uring: allow re-poll if we made progress UPSTREAM: io_uring: support MSG_WAITALL for IORING_OP_SEND(MSG) UPSTREAM: io_uring: add flag for disabling provided buffer recycling UPSTREAM: io_uring: ensure recv and recvmsg handle MSG_WAITALL correctly UPSTREAM: io_uring: improve send/recv error handling UPSTREAM: io_uring: don't gate task_work run on TIF_NOTIFY_SIGNAL BACKPORT: iommu: Avoid races around device probe UPSTREAM: io_uring/io-wq: only free worker if it was allocated for creation UPSTREAM: io_uring/io-wq: free worker if task_work creation is canceled UPSTREAM: io_uring: Fix unsigned 'res' comparison with zero in io_fixup_rw_res() UPSTREAM: um: Increase stack frame size threshold for signal.c Conflicts: net/qrtr/Makefile net/qrtr/af_qrtr.c Change-Id: I84acecd94e0545c7423d04428e22526c6237c371 Signed-off-by: Srinivasarao Pathipati <quic_c_spathi@quicinc.com> |
||
|
Srinivasarao Pathipati
|
ea066b15fa |
Merge keystone/android12-5.10-keystone-qcom-release.160+ (d88a616) into msm-5.10
* refs/heads/tmp-d88a616:
ANDROID: mm/filemap: Fix missing put_page() for speculative page fault
UPSTREAM: io_uring: ensure that io_init_req() passes in the right issue_flags
UPSTREAM: io_uring: ensure that io_init_req() passes in the right issue_flags
UPSTREAM: io_uring: add missing lock in io_get_file_fixed
UPSTREAM: io_uring: add missing lock in io_get_file_fixed
ANDROID: ABI: Update allowed list for QCOM
BACKPORT: iommu: Avoid races around device probe
UPSTREAM: io_uring/rw: remove leftover debug statement
UPSTREAM: io_uring/rw: ensure kiocb_end_write() is always called
UPSTREAM: io_uring: fix double poll leak on repolling
UPSTREAM: io_uring: Clean up a false-positive warning from GCC 9.3.0
UPSTREAM: io_uring/net: fix fast_iov assignment in io_setup_async_msg()
UPSTREAM: io_uring: io_kiocb_update_pos() should not touch file for non -1 offset
UPSTREAM: io_uring/rw: defer fsnotify calls to task context
UPSTREAM: io_uring: do not recalculate ppos unnecessarily
UPSTREAM: io_uring: update kiocb->ki_pos at execution time
UPSTREAM: io_uring: remove duplicated calls to io_kiocb_ppos
UPSTREAM: io_uring: ensure that cached task references are always put on exit
UPSTREAM: io_uring: fix CQ waiting timeout handling
UPSTREAM: io_uring: lock overflowing for IOPOLL
UPSTREAM: io_uring: check for valid register opcode earlier
UPSTREAM: io_uring: fix async accept on O_NONBLOCK sockets
UPSTREAM: io_uring: allow re-poll if we made progress
UPSTREAM: io_uring: support MSG_WAITALL for IORING_OP_SEND(MSG)
UPSTREAM: io_uring: add flag for disabling provided buffer recycling
UPSTREAM: io_uring: ensure recv and recvmsg handle MSG_WAITALL correctly
UPSTREAM: io_uring: improve send/recv error handling
UPSTREAM: io_uring: don't gate task_work run on TIF_NOTIFY_SIGNAL
UPSTREAM: io_uring/io-wq: only free worker if it was allocated for creation
UPSTREAM: io_uring/io-wq: free worker if task_work creation is canceled
UPSTREAM: io_uring: Fix unsigned 'res' comparison with zero in io_fixup_rw_res()
ANDROID: GKI: Enable ARM64_ERRATUM_2454944
ANDROID: dma-ops: Add restricted vendor hook
ANDROID: arm64: Work around Cortex-A510 erratum 2454944
ANDROID: mm/vmalloc: Add override for lazy vunmap
ANDROID: cpuidle-psci: Fix suspicious RCU usage
ANDROID: ABI: update allowed list for galaxy
FROMGIT: f2fs: add sysfs nodes to set last_age_weight
FROMGIT: f2fs: fix wrong calculation of block age
ANDROID: struct io_uring ABI preservation hack for 5.10.162 changes
ANDROID: fix up struct task_struct ABI change in 5.10.162
ANDROID: add flags variable back to struct proto_ops
UPSTREAM: io_uring: pass in EPOLL_URING_WAKE for eventfd signaling and wakeups
UPSTREAM: eventfd: provide a eventfd_signal_mask() helper
UPSTREAM: eventpoll: add EPOLL_URING_WAKE poll wakeup flag
UPSTREAM: Revert "proc: don't allow async path resolution of /proc/self components"
UPSTREAM: Revert "proc: don't allow async path resolution of /proc/thread-self components"
UPSTREAM: net: remove cmsg restriction from io_uring based send/recvmsg calls
UPSTREAM: task_work: unconditionally run task_work from get_signal()
UPSTREAM: signal: kill JOBCTL_TASK_WORK
UPSTREAM: io_uring: import 5.15-stable io_uring
UPSTREAM: task_work: add helper for more targeted task_work canceling
UPSTREAM: kernel: don't call do_exit() for PF_IO_WORKER threads
UPSTREAM: kernel: stop masking signals in create_io_thread()
UPSTREAM: x86/process: setup io_threads more like normal user space threads
UPSTREAM: arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread()
UPSTREAM: arch: setup PF_IO_WORKER threads like PF_KTHREAD
UPSTREAM: entry/kvm: Exit to user mode when TIF_NOTIFY_SIGNAL is set
UPSTREAM: kernel: allow fork with TIF_NOTIFY_SIGNAL pending
UPSTREAM: coredump: Limit what can interrupt coredumps
UPSTREAM: kernel: remove checking for TIF_NOTIFY_SIGNAL
UPSTREAM: task_work: remove legacy TWA_SIGNAL path
UPSTREAM: alpha: fix TIF_NOTIFY_SIGNAL handling
UPSTREAM: ARC: unbork 5.11 bootup: fix snafu in _TIF_NOTIFY_SIGNAL handling
UPSTREAM: ia64: don't call handle_signal() unless there's actually a signal queued
UPSTREAM: sparc: add support for TIF_NOTIFY_SIGNAL
UPSTREAM: riscv: add support for TIF_NOTIFY_SIGNAL
UPSTREAM: nds32: add support for TIF_NOTIFY_SIGNAL
UPSTREAM: ia64: add support for TIF_NOTIFY_SIGNAL
UPSTREAM: h8300: add support for TIF_NOTIFY_SIGNAL
UPSTREAM: c6x: add support for TIF_NOTIFY_SIGNAL
UPSTREAM: alpha: add support for TIF_NOTIFY_SIGNAL
UPSTREAM: xtensa: add support for TIF_NOTIFY_SIGNAL
UPSTREAM: arm: add support for TIF_NOTIFY_SIGNAL
UPSTREAM: microblaze: add support for TIF_NOTIFY_SIGNAL
UPSTREAM: hexagon: add support for TIF_NOTIFY_SIGNAL
UPSTREAM: csky: add support for TIF_NOTIFY_SIGNAL
UPSTREAM: openrisc: add support for TIF_NOTIFY_SIGNAL
UPSTREAM: sh: add support for TIF_NOTIFY_SIGNAL
UPSTREAM: um: add support for TIF_NOTIFY_SIGNAL
UPSTREAM: s390: add support for TIF_NOTIFY_SIGNAL
UPSTREAM: mips: add support for TIF_NOTIFY_SIGNAL
UPSTREAM: powerpc: add support for TIF_NOTIFY_SIGNAL
UPSTREAM: parisc: add support for TIF_NOTIFY_SIGNAL
UPSTREAM: nios32: add support for TIF_NOTIFY_SIGNAL
UPSTREAM: m68k: add support for TIF_NOTIFY_SIGNAL
UPSTREAM: arm64: add support for TIF_NOTIFY_SIGNAL
UPSTREAM: arc: add support for TIF_NOTIFY_SIGNAL
UPSTREAM: x86: Wire up TIF_NOTIFY_SIGNAL
UPSTREAM: task_work: Use TIF_NOTIFY_SIGNAL if available
UPSTREAM: entry: Add support for TIF_NOTIFY_SIGNAL
UPSTREAM: fs: provide locked helper variant of close_fd_get_file()
UPSTREAM: file: Rename __close_fd_get_file close_fd_get_file
UPSTREAM: fs: make do_renameat2() take struct filename
UPSTREAM: signal: Add task_sigpending() helper
UPSTREAM: net: add accept helper not installing fd
UPSTREAM: net: provide __sys_shutdown_sock() that takes a socket
UPSTREAM: tools headers UAPI: Sync openat2.h with the kernel sources
UPSTREAM: fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
UPSTREAM: Make sure nd->path.mnt and nd->path.dentry are always valid pointers
UPSTREAM: fix handling of nd->depth on LOOKUP_CACHED failures in try_to_unlazy*
UPSTREAM: fs: add support for LOOKUP_CACHED
UPSTREAM: saner calling conventions for unlazy_child()
UPSTREAM: iov_iter: add helper to save iov_iter state
UPSTREAM: kernel: provide create_io_thread() helper
UPSTREAM: net: loopback: use NET_NAME_PREDICTABLE for name_assign_type
UPSTREAM: Bluetooth: L2CAP: Fix u8 overflow
UPSTREAM: HID: uclogic: Add HID_QUIRK_HIDINPUT_FORCE quirk
UPSTREAM: HID: ite: Enable QUIRK_TOUCHPAD_ON_OFF_REPORT on Acer Aspire Switch V 10
UPSTREAM: HID: ite: Enable QUIRK_TOUCHPAD_ON_OFF_REPORT on Acer Aspire Switch 10E
UPSTREAM: HID: ite: Add support for Acer S1002 keyboard-dock
UPSTREAM: igb: Initialize mailbox message for VF reset
UPSTREAM: xhci: Apply XHCI_RESET_TO_DEFAULT quirk to ADL-N
UPSTREAM: USB: serial: f81534: fix division by zero on line-speed change
UPSTREAM: USB: serial: f81232: fix division by zero on line-speed change
UPSTREAM: USB: serial: cp210x: add Kamstrup RF sniffer PIDs
UPSTREAM: USB: serial: option: add Quectel EM05-G modem
UPSTREAM: usb: gadget: uvc: Prevent buffer overflow in setup handler
BACKPORT: f2fs: do not allow to decompress files have FI_COMPRESS_RELEASED
BACKPORT: f2fs: handle decompress only post processing in softirq
BACKPORT: f2fs: introduce memory mode
BACKPORT: f2fs: allow compression for mmap files in compress_mode=user
UPSTREAM: iommu/iova: Fix alloc iova overflows issue
UPSTREAM: media: dvb-core: Fix UAF due to refcount races at releasing
ANDROID: GKI: Add Tuxera symbol list
UPSTREAM: usb: dwc3: gadget: Skip waiting for CMDACT cleared during endxfer
UPSTREAM: usb: dwc3: Increase DWC3 controller halt timeout
UPSTREAM: usb: dwc3: Remove DWC3 locking during gadget suspend/resume
UPSTREAM: usb: dwc3: Avoid unmapping USB requests if endxfer is not complete
UPSTREAM: usb: dwc3: gadget: Continue handling EP0 xfercomplete events
UPSTREAM: usb: dwc3: gadget: Synchronize IRQ between soft connect/disconnect
UPSTREAM: usb: dwc3: gadget: Force sending delayed status during soft disconnect
UPSTREAM: usb: dwc3: Do not service EP0 and conndone events if soft disconnected
UPSTREAM: efi: rt-wrapper: Add missing include
UPSTREAM: arm64: efi: Execute runtime services from a dedicated stack
ANDROID: cpu: correct dl_cpu_busy() calls
UPSTREAM: ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF
UPSTREAM: firmware: tegra: Reduce stack usage
UPSTREAM: scsi: bfa: Move a large struct from the stack onto the heap
ANDROID: mm: page_pinner: ensure do_div() arguments matches with respect to type
ANDROID: Revert "ANDROID: allmodconfig: disable WERROR"
FROMGIT: scsi: ufs: Modify Tactive time setting conditions
UPSTREAM: remoteproc: core: Fix rproc->firmware free in rproc_set_firmware()
UPSTREAM: usb: gadget: f_fs: Fix unbalanced spinlock in __ffs_ep0_queue_wait
UPSTREAM: usb: gadget: f_hid: fix f_hidg lifetime vs cdev
UPSTREAM: usb: gadget: f_hid: optional SETUP/SET_REPORT mode
ANDROID: GKI: add symbol list file for honor
ANDROID: add TEST_MAPPING for net/, include/net
BACKPORT: arm64/bpf: Remove 128MB limit for BPF JIT programs
ANDROID: usb: f_accessory: Check buffer size when initialised via composite
BACKPORT: mm: make minimum slab alignment a runtime property
BACKPORT: printk: stop including cache.h from printk.h
UPSTREAM: kasan: fix a missing header include of static_keys.h
BACKPORT: kasan: split kasan_*enabled() functions into a separate header
UPSTREAM: usb: gadget: f_fs: Ensure ep0req is dequeued before free_request
UPSTREAM: usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait
UPSTREAM: usb: dwc3: gadget: conditionally remove requests
UPSTREAM: usb: dwc3: ep0: Properly handle setup_packet_pending scenario in data stage
UPSTREAM: usb: dwc3: gadget: Fix IN endpoint max packet size allocation
UPSTREAM: usb: dwc3: gadget: Delay issuing End Transfer
UPSTREAM: usb: dwc3: gadget: Only End Transfer for ep0 data phase
UPSTREAM: usb: dwc3: ep0: Don't prepare beyond Setup stage
UPSTREAM: usb: dwc3: gadget: move cmd_endtransfer to extra function
UPSTREAM: usb: dwc3: gadget: ep_queue simplify isoc start condition
UPSTREAM: usb: dwc3: gadget: Skip reading GEVNTSIZn
UPSTREAM: usb: dwc3: gadget: Ignore Update Transfer cmd params
UPSTREAM: usb: dwc3: gadget: Skip checking Update Transfer status
UPSTREAM: pstore: Properly assign mem_type property
Linux 5.10.160
ASoC: ops: Correct bounds check for second channel on SX controls
nvme-pci: clear the prp2 field when not used
ASoC: cs42l51: Correct PGA Volume minimum value
can: mcba_usb: Fix termination command argument
can: sja1000: fix size of OCR_MODE_MASK define
pinctrl: meditatek: Startup with the IRQs disabled
libbpf: Use page size as max_entries when probing ring buffer map
ASoC: ops: Check bounds for second channel in snd_soc_put_volsw_sx()
ASoC: fsl_micfil: explicitly clear CHnF flags
ASoC: fsl_micfil: explicitly clear software reset bit
io_uring: add missing item types for splice request
fuse: always revalidate if exclusive create
nfp: fix use-after-free in area_cache_get()
vfs: fix copy_file_range() averts filesystem freeze protection
vfs: fix copy_file_range() regression in cross-fs copies
x86/smpboot: Move rcu_cpu_starting() earlier
ANDROID: usb: gadget: uvc: remove duplicate code in unbind
Linux 5.10.159
can: esd_usb: Allow REC and TEC to return to zero
macsec: add missing attribute validation for offload
net: mvneta: Fix an out of bounds check
ipv6: avoid use-after-free in ip6_fragment()
net: plip: don't call kfree_skb/dev_kfree_skb() under spin_lock_irq()
xen/netback: fix build warning
ethernet: aeroflex: fix potential skb leak in greth_init_rings()
tipc: call tipc_lxc_xmit without holding node_read_lock
net: dsa: sja1105: fix memory leak in sja1105_setup_devlink_regions()
ipv4: Fix incorrect route flushing when table ID 0 is used
ipv4: Fix incorrect route flushing when source address is deleted
tipc: Fix potential OOB in tipc_link_proto_rcv()
net: hisilicon: Fix potential use-after-free in hix5hd2_rx()
net: hisilicon: Fix potential use-after-free in hisi_femac_rx()
net: thunderx: Fix missing destroy_workqueue of nicvf_rx_mode_wq
ip_gre: do not report erspan version on GRE interface
net: stmmac: fix "snps,axi-config" node property parsing
nvme initialize core quirks before calling nvme_init_subsystem
NFC: nci: Bounds check struct nfc_target arrays
i40e: Disallow ip4 and ip6 l4_4_bytes
i40e: Fix for VF MAC address 0
i40e: Fix not setting default xps_cpus after reset
net: mvneta: Prevent out of bounds read in mvneta_config_rss()
xen-netfront: Fix NULL sring after live migration
net: encx24j600: Fix invalid logic in reading of MISTAT register
net: encx24j600: Add parentheses to fix precedence
mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()
selftests: rtnetlink: correct xfrm policy rule in kci_test_ipsec_offload
net: dsa: ksz: Check return value
Bluetooth: Fix not cleanup led when bt_init fails
Bluetooth: 6LoWPAN: add missing hci_dev_put() in get_l2cap_conn()
vmxnet3: correctly report encapsulated LRO packet
af_unix: Get user_ns from in_skb in unix_diag_get_exact().
drm: bridge: dw_hdmi: fix preference of RGB modes over YUV420
igb: Allocate MSI-X vector when testing
e1000e: Fix TX dispatch condition
gpio: amd8111: Fix PCI device reference count leak
drm/bridge: ti-sn65dsi86: Fix output polarity setting bug
netfilter: ctnetlink: fix compilation warning after data race fixes in ct mark
ca8210: Fix crash by zero initializing data
ieee802154: cc2520: Fix error return code in cc2520_hw_init()
netfilter: nft_set_pipapo: Actually validate intervals in fields after the first one
rtc: mc146818-lib: fix signedness bug in mc146818_get_time()
rtc: mc146818-lib: fix locking in mc146818_set_time
rtc: cmos: Disable irq around direct invocation of cmos_interrupt()
mm/hugetlb: fix races when looking up a CONT-PTE/PMD size hugetlb page
can: af_can: fix NULL pointer dereference in can_rcv_filter
HID: core: fix shift-out-of-bounds in hid_report_raw_event
HID: hid-lg4ff: Add check for empty lbuf
HID: usbhid: Add ALWAYS_POLL quirk for some mice
drm/shmem-helper: Avoid vm_open error paths
drm/shmem-helper: Remove errant put in error path
drm/vmwgfx: Don't use screen objects when SEV is active
KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field
Bluetooth: Fix crash when replugging CSR fake controllers
Bluetooth: btusb: Add debug message for CSR controllers
mm/gup: fix gup_pud_range() for dax
memcg: fix possible use-after-free in memcg_write_event_control()
media: v4l2-dv-timings.c: fix too strict blanking sanity checks
Revert "ARM: dts: imx7: Fix NAND controller size-cells"
media: videobuf2-core: take mmap_lock in vb2_get_unmapped_area()
xen/netback: don't call kfree_skb() with interrupts disabled
xen/netback: do some code cleanup
xen/netback: Ensure protocol headers don't fall in the non-linear area
rtc: mc146818: Reduce spinlock section in mc146818_set_time()
rtc: cmos: Replace spin_lock_irqsave with spin_lock in hard IRQ
rtc: cmos: avoid UIP when reading alarm time
rtc: cmos: avoid UIP when writing alarm time
rtc: mc146818-lib: extract mc146818_avoid_UIP
rtc: mc146818-lib: fix RTC presence check
rtc: Check return value from mc146818_get_time()
rtc: mc146818-lib: change return values of mc146818_get_time()
rtc: cmos: remove stale REVISIT comments
rtc: mc146818: Dont test for bit 0-5 in Register D
rtc: mc146818: Detect and handle broken RTCs
rtc: mc146818: Prevent reading garbage
mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths
mm/khugepaged: fix GUP-fast interaction by sending IPI
mm/khugepaged: take the right locks for page table retraction
net: usb: qmi_wwan: add u-blox 0x1342 composition
9p/xen: check logical size for buffer size
usb: dwc3: gadget: Disable GUSB2PHYCFG.SUSPHY for End Transfer
fbcon: Use kzalloc() in fbcon_prepare_logo()
regulator: twl6030: fix get status of twl6032 regulators
ASoC: soc-pcm: Add NULL check in BE reparenting
btrfs: send: avoid unaligned encoded writes when attempting to clone range
ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event
regulator: slg51000: Wait after asserting CS pin
9p/fd: Use P9_HDRSZ for header size
ARM: dts: rockchip: disable arm_global_timer on rk3066 and rk3188
ASoC: wm8962: Wait for updated value of WM8962_CLOCKING1 register
ARM: 9266/1: mm: fix no-MMU ZERO_PAGE() implementation
ARM: 9251/1: perf: Fix stacktraces for tracepoint events in THUMB2 kernels
ARM: dts: rockchip: rk3188: fix lcdc1-rgb24 node name
arm64: dts: rockchip: fix ir-receiver node names
ARM: dts: rockchip: fix ir-receiver node names
arm: dts: rockchip: fix node name for hym8563 rtc
arm64: dts: rockchip: keep I2S1 disabled for GPIO function on ROCK Pi 4 series
Revert "mmc: sdhci: Fix voltage switch delay"
ANDROID: gki_defconfig: add CONFIG_FUNCTION_ERROR_INJECTION
Linux 5.10.158
ipc/sem: Fix dangling sem_array access in semtimedop race
v4l2: don't fall back to follow_pfn() if pin_user_pages_fast() fails
proc: proc_skip_spaces() shouldn't think it is working on C strings
proc: avoid integer type confusion in get_proc_long
block: unhash blkdev part inode when the part is deleted
Input: raydium_ts_i2c - fix memory leak in raydium_i2c_send()
char: tpm: Protect tpm_pm_suspend with locks
Revert "clocksource/drivers/riscv: Events are stopped during CPU suspend"
ACPI: HMAT: Fix initiator registration for single-initiator systems
ACPI: HMAT: remove unnecessary variable initialization
i2c: imx: Only DMA messages with I2C_M_DMA_SAFE flag set
i2c: npcm7xx: Fix error handling in npcm_i2c_init()
x86/pm: Add enumeration check before spec MSRs save/restore setup
x86/tsx: Add a feature bit for TSX control MSR support
Revert "tty: n_gsm: avoid call of sleeping functions from atomic context"
ipv4: Fix route deletion when nexthop info is not specified
ipv4: Handle attempt to delete multipath route when fib_info contains an nh reference
selftests: net: fix nexthop warning cleanup double ip typo
selftests: net: add delete nexthop route warning test
Kconfig.debug: provide a little extra FRAME_WARN leeway when KASAN is enabled
parisc: Increase FRAME_WARN to 2048 bytes on parisc
xtensa: increase size of gcc stack frame check
parisc: Increase size of gcc stack frame check
iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init()
iommu/vt-d: Fix PCI device refcount leak in has_external_pci()
pinctrl: single: Fix potential division by zero
ASoC: ops: Fix bounds check for _sx controls
io_uring: don't hold uring_lock when calling io_run_task_work*
tracing: Free buffers when a used dynamic event is removed
drm/i915: Never return 0 if not all requests retired
drm/amdgpu: temporarily disable broken Clang builds due to blown stack-frame
mmc: sdhci: Fix voltage switch delay
mmc: sdhci-sprd: Fix no reset data and command after voltage switch
mmc: sdhci-esdhc-imx: correct CQHCI exit halt state check
mmc: core: Fix ambiguous TRIM and DISCARD arg
mmc: mmc_test: Fix removal of debugfs file
net: stmmac: Set MAC's flow control register to reflect current settings
pinctrl: intel: Save and restore pins in "direct IRQ" mode
x86/bugs: Make sure MSR_SPEC_CTRL is updated properly upon resume from S3
nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()
tools/vm/slabinfo-gnuplot: use "grep -E" instead of "egrep"
error-injection: Add prompt for function error injection
riscv: vdso: fix section overlapping under some conditions
net/mlx5: DR, Fix uninitialized var warning
hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new()
hwmon: (coretemp) Check for null before removing sysfs attrs
net: ethernet: renesas: ravb: Fix promiscuous mode after system resumed
sctp: fix memory leak in sctp_stream_outq_migrate()
packet: do not set TP_STATUS_CSUM_VALID on CHECKSUM_COMPLETE
net: tun: Fix use-after-free in tun_detach()
afs: Fix fileserver probe RTT handling
net: hsr: Fix potential use-after-free
tipc: re-fetch skb cb after tipc_msg_validate
dsa: lan9303: Correct stat name
net: ethernet: nixge: fix NULL dereference
net/9p: Fix a potential socket leak in p9_socket_open
net: net_netdev: Fix error handling in ntb_netdev_init_module()
net: phy: fix null-ptr-deref while probe() failed
wifi: mac8021: fix possible oob access in ieee80211_get_rate_duration
wifi: cfg80211: don't allow multi-BSSID in S1G
wifi: cfg80211: fix buffer overflow in elem comparison
aquantia: Do not purge addresses when setting the number of rings
qlcnic: fix sleep-in-atomic-context bugs caused by msleep
can: cc770: cc770_isa_probe(): add missing free_cc770dev()
can: sja1000_isa: sja1000_isa_probe(): add missing free_sja1000dev()
net/mlx5e: Fix use-after-free when reverting termination table
net/mlx5: Fix uninitialized variable bug in outlen_write()
e100: Fix possible use after free in e100_xmit_prepare
e100: switch from 'pci_' to 'dma_' API
iavf: Fix error handling in iavf_init_module()
iavf: remove redundant ret variable
fm10k: Fix error handling in fm10k_init_module()
i40e: Fix error handling in i40e_init_module()
ixgbevf: Fix resource leak in ixgbevf_init_module()
of: property: decrement node refcount in of_fwnode_get_reference_args()
bpf: Do not copy spin lock field from user in bpf_selem_alloc
hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
hwmon: (i5500_temp) fix missing pci_disable_device()
hwmon: (ina3221) Fix shunt sum critical calculation
hwmon: (ltc2947) fix temperature scaling
libbpf: Handle size overflow for ringbuf mmap
ARM: at91: rm9200: fix usb device clock id
scripts/faddr2line: Fix regression in name resolution on ppc64le
bpf, perf: Use subprog name when reporting subprog ksymbol
iio: light: rpr0521: add missing Kconfig dependencies
iio: health:
|
||
Jun Nie
|
62f5fae173 |
UPSTREAM: ext4: refuse to create ea block when umounted
commit f31173c19901a96bb2ebf6bcfec8a08df7095c91 upstream. The ea block expansion need to access s_root while it is already set as NULL when umount is triggered. Refuse this request to avoid panic. Reported-by: syzbot+2dacb8f015bf1420155f@syzkaller.appspotmail.com Link: https://syzkaller.appspot.com/bug?id=3613786cb88c93aa1c6a279b1df6a7b201347d08 Link: https://lore.kernel.org/r/20230103014517.495275-3-jun.nie@linaro.org Cc: stable@kernel.org Signed-off-by: Jun Nie <jun.nie@linaro.org> Signed-off-by: Theodore Ts'o <tytso@mit.edu> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Bug: 262267471 Change-Id: I0a5c974e696cf7a132f3cbb8acbe066edba4660f Signed-off-by: Tudor Ambarus <tudor.ambarus@linaro.org> |
||
|
Jun Nie
|
33245a0eac |
UPSTREAM: ext4: optimize ea_inode block expansion
commit 1e9d62d252812575ded7c620d8fc67c32ff06c16 upstream. Copy ea data from inode entry when expanding ea block if possible. Then remove the ea entry if expansion success. Thus memcpy to a temporary buffer may be avoided. If the expansion fails, we do not need to recovery the removed ea entry neither in this way. Reported-by: syzbot+2dacb8f015bf1420155f@syzkaller.appspotmail.com Link: https://syzkaller.appspot.com/bug?id=3613786cb88c93aa1c6a279b1df6a7b201347d08 Link: https://lore.kernel.org/r/20230103014517.495275-2-jun.nie@linaro.org Cc: stable@kernel.org Signed-off-by: Jun Nie <jun.nie@linaro.org> Signed-off-by: Theodore Ts'o <tytso@mit.edu> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Bug: 262267471 Change-Id: I26e7d45ab21bcf9e38eeb66601067f42b01c11f5 Signed-off-by: Tudor Ambarus <tudor.ambarus@linaro.org> |
||
Ye Bin
|
09e5cc649d |
UPSTREAM: ext4: allocate extended attribute value in vmalloc area
commit cc12a6f25e07ed05d5825a1664b67a970842b2ca upstream. Now, extended attribute value maximum length is 64K. The memory requested here does not need continuous physical addresses, so it is appropriate to use kvmalloc to request memory. At the same time, it can also cope with the situation that the extended attribute will become longer in the future. Signed-off-by: Ye Bin <yebin10@huawei.com> Reviewed-by: Jan Kara <jack@suse.cz> Link: https://lore.kernel.org/r/20221208023233.1231330-3-yebin@huaweicloud.com Signed-off-by: Theodore Ts'o <tytso@mit.edu> Cc: stable@kernel.org Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Bug: 262267471 Change-Id: I92a4a66d8220f46f26a89100ba41c659559443a7 Signed-off-by: Tudor Ambarus <tudor.ambarus@linaro.org> |
||
|
Srinivasarao Pathipati
|
3555b24834 |
Merge keystone/android12-5.10-keystone-qcom-release.149+ (2b568b8) into msm-5.10
* refs/heads/tmp-2b568b8: UPSTREAM: usb: gadget: f_fs: Fix unbalanced spinlock in __ffs_ep0_queue_wait UPSTREAM: usb: gadget: f_fs: Ensure ep0req is dequeued before free_request UPSTREAM: ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF ANDROID: usb: f_accessory: Check buffer size when initialised via composite ANDROID: ABI: Update allowed list for QCOM UPSTREAM: usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait BACKPORT: iommu: Avoid races around device probe UPSTREAM: io_uring/rw: remove leftover debug statement UPSTREAM: io_uring/rw: ensure kiocb_end_write() is always called UPSTREAM: io_uring: fix double poll leak on repolling UPSTREAM: io_uring: Clean up a false-positive warning from GCC 9.3.0 UPSTREAM: io_uring/net: fix fast_iov assignment in io_setup_async_msg() UPSTREAM: io_uring: io_kiocb_update_pos() should not touch file for non -1 offset UPSTREAM: io_uring/rw: defer fsnotify calls to task context UPSTREAM: io_uring: do not recalculate ppos unnecessarily UPSTREAM: io_uring: update kiocb->ki_pos at execution time UPSTREAM: io_uring: remove duplicated calls to io_kiocb_ppos UPSTREAM: io_uring: ensure that cached task references are always put on exit UPSTREAM: io_uring: fix CQ waiting timeout handling UPSTREAM: io_uring: lock overflowing for IOPOLL UPSTREAM: io_uring: check for valid register opcode earlier UPSTREAM: io_uring: fix async accept on O_NONBLOCK sockets UPSTREAM: io_uring: allow re-poll if we made progress UPSTREAM: io_uring: support MSG_WAITALL for IORING_OP_SEND(MSG) UPSTREAM: io_uring: add flag for disabling provided buffer recycling UPSTREAM: io_uring: ensure recv and recvmsg handle MSG_WAITALL correctly UPSTREAM: io_uring: improve send/recv error handling UPSTREAM: io_uring: don't gate task_work run on TIF_NOTIFY_SIGNAL UPSTREAM: io_uring/io-wq: only free worker if it was allocated for creation UPSTREAM: io_uring/io-wq: free worker if task_work creation is canceled UPSTREAM: io_uring: Fix unsigned 'res' comparison with zero in io_fixup_rw_res() ANDROID: struct io_uring ABI preservation hack for 5.10.162 changes UPSTREAM: io_uring: pass in EPOLL_URING_WAKE for eventfd signaling and wakeups UPSTREAM: eventfd: provide a eventfd_signal_mask() helper UPSTREAM: eventpoll: add EPOLL_URING_WAKE poll wakeup flag UPSTREAM: Revert "proc: don't allow async path resolution of /proc/self components" UPSTREAM: Revert "proc: don't allow async path resolution of /proc/thread-self components" ANDROID: add flags variable back to struct proto_ops UPSTREAM: net: remove cmsg restriction from io_uring based send/recvmsg calls UPSTREAM: task_work: unconditionally run task_work from get_signal() UPSTREAM: signal: kill JOBCTL_TASK_WORK ANDROID: fix up struct task_struct ABI change in 5.10.162 UPSTREAM: io_uring: import 5.15-stable io_uring UPSTREAM: task_work: add helper for more targeted task_work canceling UPSTREAM: kernel: don't call do_exit() for PF_IO_WORKER threads UPSTREAM: kernel: stop masking signals in create_io_thread() UPSTREAM: x86/process: setup io_threads more like normal user space threads UPSTREAM: arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread() UPSTREAM: arch: setup PF_IO_WORKER threads like PF_KTHREAD UPSTREAM: entry/kvm: Exit to user mode when TIF_NOTIFY_SIGNAL is set UPSTREAM: kernel: allow fork with TIF_NOTIFY_SIGNAL pending UPSTREAM: coredump: Limit what can interrupt coredumps UPSTREAM: kernel: remove checking for TIF_NOTIFY_SIGNAL UPSTREAM: task_work: remove legacy TWA_SIGNAL path UPSTREAM: alpha: fix TIF_NOTIFY_SIGNAL handling UPSTREAM: ARC: unbork 5.11 bootup: fix snafu in _TIF_NOTIFY_SIGNAL handling UPSTREAM: ia64: don't call handle_signal() unless there's actually a signal queued UPSTREAM: sparc: add support for TIF_NOTIFY_SIGNAL UPSTREAM: riscv: add support for TIF_NOTIFY_SIGNAL UPSTREAM: nds32: add support for TIF_NOTIFY_SIGNAL UPSTREAM: ia64: add support for TIF_NOTIFY_SIGNAL UPSTREAM: h8300: add support for TIF_NOTIFY_SIGNAL UPSTREAM: c6x: add support for TIF_NOTIFY_SIGNAL UPSTREAM: alpha: add support for TIF_NOTIFY_SIGNAL UPSTREAM: xtensa: add support for TIF_NOTIFY_SIGNAL UPSTREAM: arm: add support for TIF_NOTIFY_SIGNAL UPSTREAM: microblaze: add support for TIF_NOTIFY_SIGNAL UPSTREAM: hexagon: add support for TIF_NOTIFY_SIGNAL UPSTREAM: csky: add support for TIF_NOTIFY_SIGNAL UPSTREAM: openrisc: add support for TIF_NOTIFY_SIGNAL UPSTREAM: sh: add support for TIF_NOTIFY_SIGNAL UPSTREAM: um: add support for TIF_NOTIFY_SIGNAL UPSTREAM: s390: add support for TIF_NOTIFY_SIGNAL UPSTREAM: mips: add support for TIF_NOTIFY_SIGNAL UPSTREAM: powerpc: add support for TIF_NOTIFY_SIGNAL UPSTREAM: parisc: add support for TIF_NOTIFY_SIGNAL UPSTREAM: nios32: add support for TIF_NOTIFY_SIGNAL UPSTREAM: m68k: add support for TIF_NOTIFY_SIGNAL UPSTREAM: arm64: add support for TIF_NOTIFY_SIGNAL UPSTREAM: arc: add support for TIF_NOTIFY_SIGNAL UPSTREAM: x86: Wire up TIF_NOTIFY_SIGNAL UPSTREAM: task_work: Use TIF_NOTIFY_SIGNAL if available UPSTREAM: entry: Add support for TIF_NOTIFY_SIGNAL UPSTREAM: fs: provide locked helper variant of close_fd_get_file() UPSTREAM: file: Rename __close_fd_get_file close_fd_get_file UPSTREAM: fs: make do_renameat2() take struct filename UPSTREAM: signal: Add task_sigpending() helper UPSTREAM: net: add accept helper not installing fd UPSTREAM: net: provide __sys_shutdown_sock() that takes a socket UPSTREAM: tools headers UAPI: Sync openat2.h with the kernel sources UPSTREAM: fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED UPSTREAM: Make sure nd->path.mnt and nd->path.dentry are always valid pointers UPSTREAM: fix handling of nd->depth on LOOKUP_CACHED failures in try_to_unlazy* UPSTREAM: fs: add support for LOOKUP_CACHED UPSTREAM: saner calling conventions for unlazy_child() UPSTREAM: iov_iter: add helper to save iov_iter state UPSTREAM: kernel: provide create_io_thread() helper UPSTREAM: io_uring: don't hold uring_lock when calling io_run_task_work* ANDROID: fix up struct sk_buf ABI breakage UPSTREAM: io_uring/af_unix: defer registered files gc to io_uring release UPSTREAM: io_uring: correct pinned_vm accounting Change-Id: I28b77d6a09f6c3ab1976ae2981b20533980196a4 Signed-off-by: Srinivasarao Pathipati <quic_c_spathi@quicinc.com> |
||
Paul Lawrence
|
7fd4fbe615 |
ANDROID: incremental fs: Move throttling to outside page lock
Bug: 241479010 Test: incfs_test passes, play confirm behavior in bug is fixed Signed-off-by: Paul Lawrence <paullawrence@google.com> Change-Id: Ie51f2b76d0873057f54fecf7fcc793c66df20969 |
||
|
Paul Lawrence
|
5d9b0e83e3 |
ANDROID: incremental fs: Fix race between truncate and write last block
Also fix race whereby multiple providers writinig the same block would
actually write out the same block.
Note that multiple_providers_test started failing when incfs was ported
to 5.15, and these fixes are needed to make the test reliable
Bug: 264703896
Test: incfs-test passes, specifically multiple_providers_test. Ran 100
times
Change-Id: I05ad5b2b2f62cf218256222cecb79bbe9953bd97
Signed-off-by: Paul Lawrence <paullawrence@google.com>
|
||
Baokun Li
|
80b27def69 |
UPSTREAM: ext4: add inode table check in __ext4_get_inode_loc to aovid possible infinite loop
commit eee22187b53611e173161e38f61de1c7ecbeb876 upstream.
In do_writepages, if the value returned by ext4_writepages is "-ENOMEM"
and "wbc->sync_mode == WB_SYNC_ALL", retry until the condition is not met.
In __ext4_get_inode_loc, if the bh returned by sb_getblk is NULL,
the function returns -ENOMEM.
In __getblk_slow, if the return value of grow_buffers is less than 0,
the function returns NULL.
When the three processes are connected in series like the following stack,
an infinite loop may occur:
do_writepages <--- keep retrying
ext4_writepages
mpage_map_and_submit_extent
mpage_map_one_extent
ext4_map_blocks
ext4_ext_map_blocks
ext4_ext_handle_unwritten_extents
ext4_ext_convert_to_initialized
ext4_split_extent
ext4_split_extent_at
__ext4_ext_dirty
__ext4_mark_inode_dirty
ext4_reserve_inode_write
ext4_get_inode_loc
__ext4_get_inode_loc <--- return -ENOMEM
sb_getblk
__getblk_gfp
__getblk_slow <--- return NULL
grow_buffers
grow_dev_page <--- return -ENXIO
ret = (block < end_block) ? 1 : -ENXIO;
In this issue, bg_inode_table_hi is overwritten as an incorrect value.
As a result, `block < end_block` cannot be met in grow_dev_page.
Therefore, __ext4_get_inode_loc always returns '-ENOMEM' and do_writepages
keeps retrying. As a result, the writeback process is in the D state due
to an infinite loop.
Add a check on inode table block in the __ext4_get_inode_loc function by
referring to ext4_read_inode_bitmap to avoid this infinite loop.
Cc: stable@kernel.org
Signed-off-by: Baokun Li <libaokun1@huawei.com>
Reviewed-by: Ritesh Harjani (IBM) <ritesh.list@gmail.com>
Link: https://lore.kernel.org/r/20220817132701.3015912-3-libaokun1@huawei.com
Signed-off-by: Theodore Ts'o <tytso@mit.edu>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Bug: 264629802
Bug: 264632463
Change-Id: Id3bb71336059cac33f16fca383e783add3a01295
Signed-off-by: Tudor Ambarus <tudor.ambarus@linaro.org>
|
||
Jens Axboe
|
61eb0dbfdb |
UPSTREAM: eventfd: provide a eventfd_signal_mask() helper
[ Upstream commit 03e02acda8e267a8183e1e0ed289ff1ef9cd7ed8 ]
This is identical to eventfd_signal(), but it allows the caller to pass
in a mask to be used for the poll wakeup key. The use case is avoiding
repeated multishot triggers if we have a dependency between eventfd and
io_uring.
If we setup an eventfd context and register that as the io_uring eventfd,
and at the same time queue a multishot poll request for the eventfd
context, then any CQE posted will repeatedly trigger the multishot request
until it terminates when the CQ ring overflows.
In preparation for io_uring detecting this circular dependency, add the
mentioned helper so that io_uring can pass in EPOLL_URING as part of the
poll wakeup key.
Cc: stable@vger.kernel.org # 6.0
[axboe: fold in !CONFIG_EVENTFD fix from Zhang Qilong]
Change-Id: I0c38a56887777f85cb10673b7ca3b5ca4d70c61b
Signed-off-by: Jens Axboe <axboe@kernel.dk>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
(cherry picked from commit
|
||
|
Jens Axboe
|
e0bcf7456e |
UPSTREAM: eventpoll: add EPOLL_URING_WAKE poll wakeup flag
[ Upstream commit caf1aeaffc3b09649a56769e559333ae2c4f1802 ]
We can have dependencies between epoll and io_uring. Consider an epoll
context, identified by the epfd file descriptor, and an io_uring file
descriptor identified by iofd. If we add iofd to the epfd context, and
arm a multishot poll request for epfd with iofd, then the multishot
poll request will repeatedly trigger and generate events until terminated
by CQ ring overflow. This isn't a desired behavior.
Add EPOLL_URING so that io_uring can pass it in as part of the poll wakeup
key, and io_uring can check for that to detect a potential recursive
invocation.
Cc: stable@vger.kernel.org # 6.0
Change-Id: Ifafcb236b2cfe3ca3e7254a0155625fce00fd038
Signed-off-by: Jens Axboe <axboe@kernel.dk>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
(cherry picked from commit
|
||
|
Jens Axboe
|
16ed72bf87 |
UPSTREAM: Revert "proc: don't allow async path resolution of /proc/self components"
[ Upstream commit 9e8d9e829c2142cf1d7756e9ed2e0b4c7569d84c ] This reverts commit |
||
|
Jens Axboe
|
9ed224ea34 |
UPSTREAM: Revert "proc: don't allow async path resolution of /proc/thread-self components"
[ Upstream commit 2587890b5e2892dfecaa5e5126bdac8076a4e6f7 ]
This reverts commit 0d4370cfe36b7f1719123b621a4ec4d9c7a25f89.
No longer needed, as the io-wq worker threads have the right identity.
Change-Id: I7a28e02a0a1911555853cf4046e3a09c7e36d4a2
Signed-off-by: Jens Axboe <axboe@kernel.dk>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
(cherry picked from commit
|
||
|
Jens Axboe
|
ec3f24f4eb |
UPSTREAM: io_uring: import 5.15-stable io_uring
No upstream commit exists.
This imports the io_uring codebase from 5.15.85, wholesale. Changes
from that code base:
- Drop IOCB_ALLOC_CACHE, we don't have that in 5.10.
- Drop MKDIRAT/SYMLINKAT/LINKAT. Would require further VFS backports,
and we don't support these in 5.10 to begin with.
- sock_from_file() old style calling convention.
- Use compat_get_bitmap() only for CONFIG_COMPAT=y
Change-Id: I7ce5226d6b39763ffc246fd6357cece9aafd4b59
Signed-off-by: Jens Axboe <axboe@kernel.dk>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
(cherry picked from commit
|
||
Eric W. Biederman
|
f5a197c064 |
UPSTREAM: coredump: Limit what can interrupt coredumps
[ Upstream commit 06af8679449d4ed282df13191fc52d5ba28ec536 ]
Olivier Langlois has been struggling with coredumps being incompletely written in
processes using io_uring.
Olivier Langlois <olivier@trillion01.com> writes:
> io_uring is a big user of task_work and any event that io_uring made a
> task waiting for that occurs during the core dump generation will
> generate a TIF_NOTIFY_SIGNAL.
>
> Here are the detailed steps of the problem:
> 1. io_uring calls vfs_poll() to install a task to a file wait queue
> with io_async_wake() as the wakeup function cb from io_arm_poll_handler()
> 2. wakeup function ends up calling task_work_add() with TWA_SIGNAL
> 3. task_work_add() sets the TIF_NOTIFY_SIGNAL bit by calling
> set_notify_signal()
The coredump code deliberately supports being interrupted by SIGKILL,
and depends upon prepare_signal to filter out all other signals. Now
that signal_pending includes wake ups for TIF_NOTIFY_SIGNAL this hack
in dump_emitted by the coredump code no longer works.
Make the coredump code more robust by explicitly testing for all of
the wakeup conditions the coredump code supports. This prevents
new wakeup conditions from breaking the coredump code, as well
as fixing the current issue.
The filesystem code that the coredump code uses already limits
itself to only aborting on fatal_signal_pending. So it should
not develop surprising wake-up reasons either.
v2: Don't remove the now unnecessary code in prepare_signal.
Cc: stable@vger.kernel.org
Fixes: 12db8b690010 ("entry: Add support for TIF_NOTIFY_SIGNAL")
Reported-by: Olivier Langlois <olivier@trillion01.com>
Change-Id: I84870bf0a620a97af50d9b495dd225f9ee2b66b8
Signed-off-by: "Eric W. Biederman" <ebiederm@xmission.com>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
(cherry picked from commit
|
||
|
Jens Axboe
|
2e9e22259d |
UPSTREAM: fs: provide locked helper variant of close_fd_get_file()
[ Upstream commit 53dec2ea74f2ef360e8455439be96a780baa6097 ]
Assumes current->files->file_lock is already held on invocation. Helps
the caller check the file before removing the fd, if it needs to.
Change-Id: Idd87700a119403ce3867aa52294a14213b505faa
Signed-off-by: Jens Axboe <axboe@kernel.dk>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
(cherry picked from commit
|
||
|
Eric W. Biederman
|
31da94a2b6 |
UPSTREAM: file: Rename __close_fd_get_file close_fd_get_file
[ Upstream commit 9fe83c43e71cdb8e5b9520bcb98706a2b3c680c8 ] The function close_fd_get_file is explicitly a variant of __close_fd[1]. Now that __close_fd has been renamed close_fd, rename close_fd_get_file to be consistent with close_fd. When __alloc_fd, __close_fd and __fd_install were introduced the double underscore indicated that the function took a struct files_struct parameter. The function __close_fd_get_file never has so the naming has always been inconsistent. This just cleans things up so there are not any lingering mentions or references __close_fd left in the code. [1] |
||
|
Jens Axboe
|
bf65b9285b |
UPSTREAM: fs: make do_renameat2() take struct filename
[ Upstream commit e886663cfd029b64a1d8da7efae7014526d884e9 ]
Pass in the struct filename pointers instead of the user string, and
update the three callers to do the same.
This behaves like do_unlinkat(), which also takes a filename struct and
puts it when it is done. Converting callers is then trivial.
Change-Id: Ie23f87f8c6bb18a61254a0848d861ad6fad14232
Signed-off-by: Jens Axboe <axboe@kernel.dk>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
(cherry picked from commit
|
||
|
Jens Axboe
|
b403fac899 |
UPSTREAM: fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
[ Upstream commit 99668f618062816ca7ba639b007eb145b9d3d41e ]
Now that we support non-blocking path resolution internally, expose it
via openat2() in the struct open_how ->resolve flags. This allows
applications using openat2() to limit path resolution to the extent that
it is already cached.
If the lookup cannot be satisfied in a non-blocking manner, openat2(2)
will return -1/-EAGAIN.
Cc: Al Viro <viro@zeniv.linux.org.uk>
Change-Id: Iddb58268e0a2b8adfc54e56192da43dda1868d8c
Signed-off-by: Jens Axboe <axboe@kernel.dk>
Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
(cherry picked from commit
|
||
Al Viro
|
5ec23bfbd0 |
UPSTREAM: Make sure nd->path.mnt and nd->path.dentry are always valid pointers
[ Upstream commit 7d01ef7585c07afaf487759a48486228cd065726 ]
Initialize them in set_nameidata() and make sure that terminate_walk() clears them
once the pointers become potentially invalid (i.e. we leave RCU mode or drop them
in non-RCU one). Currently we have "path_init() always initializes them and nobody
accesses them outside of path_init()/terminate_walk() segments", which is asking
for trouble.
With that change we would have nd->path.{mnt,dentry}
1) always valid - NULL or pointing to currently allocated objects.
2) non-NULL while we are successfully walking
3) NULL when we are not walking at all
4) contributing to refcounts whenever non-NULL outside of RCU mode.
Fixes: 6c6ec2b0a3e0 ("fs: add support for LOOKUP_CACHED")
Reported-by: syzbot+c88a7030da47945a3cc3@syzkaller.appspotmail.com
Tested-by: Christian Brauner <christian.brauner@ubuntu.com>
Change-Id: I0532db6ea79fb760d50a88f75e2bb0691c24e93c
Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
(cherry picked from commit
|
||
|
Al Viro
|
d3e1ce6a2a |
UPSTREAM: fix handling of nd->depth on LOOKUP_CACHED failures in try_to_unlazy*
[ Upstream commit eacd9aa8cedeb412842c7b339adbaa0477fdd5ad ]
After switching to non-RCU mode, we want nd->depth to match the number
of entries in nd->stack[] that need eventual path_put().
legitimize_links() takes care of that on failures; unfortunately,
failure exits added for LOOKUP_CACHED do not.
We could add the logics for that into those failure exits, both in
try_to_unlazy() and in try_to_unlazy_next(), but since both checks
are immediately followed by legitimize_links() and there's no calls
of legitimize_links() other than those two... It's easier to
move the check (and required handling of nd->depth on failure) into
legitimize_links() itself.
[caught by Jens: ... and since we are zeroing ->depth here, we need
to do drop_links() first]
Fixes: 6c6ec2b0a3e0 "fs: add support for LOOKUP_CACHED"
Tested-by: Jens Axboe <axboe@kernel.dk>
Change-Id: I6cf685bfce81acb4d68c3991b2a936968a39c739
Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
(cherry picked from commit
|
||
|
Jens Axboe
|
3ec5450388 |
UPSTREAM: fs: add support for LOOKUP_CACHED
[ Upstream commit 6c6ec2b0a3e0381d886d531bd1471dfdb1509237 ]
io_uring always punts opens to async context, since there's no control
over whether the lookup blocks or not. Add LOOKUP_CACHED to support
just doing the fast RCU based lookups, which we know will not block. If
we can do a cached path resolution of the filename, then we don't have
to always punt lookups for a worker.
During path resolution, we always do LOOKUP_RCU first. If that fails and
we terminate LOOKUP_RCU, then fail a LOOKUP_CACHED attempt as well.
Cc: Al Viro <viro@zeniv.linux.org.uk>
Change-Id: If3c62e8681cd47bfafaa5a4de05a7e0418c1c718
Signed-off-by: Jens Axboe <axboe@kernel.dk>
Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
(cherry picked from commit
|
||
|
Al Viro
|
4ea3d0be5c |
UPSTREAM: saner calling conventions for unlazy_child()
[ Upstream commit ae66db45fd309fd1c6d4e846dfc8414dfec7d6ad ]
same as for the previous commit - instead of 0/-ECHILD make
it return true/false, rename to try_to_unlazy_child().
Change-Id: Ie949437504bd8db7f22f78bfbe5d5141e9959cf8
Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
(cherry picked from commit
|
||
Hao Xu
|
f584f647d9 |
UPSTREAM: io_uring: don't hold uring_lock when calling io_run_task_work*
commit 8bad28d8a305b0e5ae444c8c3051e8744f5a4296 upstream.
Abaci reported the below issue:
[ 141.400455] hrtimer: interrupt took 205853 ns
[ 189.869316] process 'usr/local/ilogtail/ilogtail_0.16.26' started with executable stack
[ 250.188042]
[ 250.188327] ============================================
[ 250.189015] WARNING: possible recursive locking detected
[ 250.189732] 5.11.0-rc4 #1 Not tainted
[ 250.190267] --------------------------------------------
[ 250.190917] a.out/7363 is trying to acquire lock:
[ 250.191506] ffff888114dbcbe8 (&ctx->uring_lock){+.+.}-{3:3}, at: __io_req_task_submit+0x29/0xa0
[ 250.192599]
[ 250.192599] but task is already holding lock:
[ 250.193309] ffff888114dbfbe8 (&ctx->uring_lock){+.+.}-{3:3}, at: __x64_sys_io_uring_register+0xad/0x210
[ 250.194426]
[ 250.194426] other info that might help us debug this:
[ 250.195238] Possible unsafe locking scenario:
[ 250.195238]
[ 250.196019] CPU0
[ 250.196411] ----
[ 250.196803] lock(&ctx->uring_lock);
[ 250.197420] lock(&ctx->uring_lock);
[ 250.197966]
[ 250.197966] *** DEADLOCK ***
[ 250.197966]
[ 250.198837] May be due to missing lock nesting notation
[ 250.198837]
[ 250.199780] 1 lock held by a.out/7363:
[ 250.200373] #0: ffff888114dbfbe8 (&ctx->uring_lock){+.+.}-{3:3}, at: __x64_sys_io_uring_register+0xad/0x210
[ 250.201645]
[ 250.201645] stack backtrace:
[ 250.202298] CPU: 0 PID: 7363 Comm: a.out Not tainted 5.11.0-rc4 #1
[ 250.203144] Hardware name: Red Hat KVM, BIOS 0.5.1 01/01/2011
[ 250.203887] Call Trace:
[ 250.204302] dump_stack+0xac/0xe3
[ 250.204804] __lock_acquire+0xab6/0x13a0
[ 250.205392] lock_acquire+0x2c3/0x390
[ 250.205928] ? __io_req_task_submit+0x29/0xa0
[ 250.206541] __mutex_lock+0xae/0x9f0
[ 250.207071] ? __io_req_task_submit+0x29/0xa0
[ 250.207745] ? 0xffffffffa0006083
[ 250.208248] ? __io_req_task_submit+0x29/0xa0
[ 250.208845] ? __io_req_task_submit+0x29/0xa0
[ 250.209452] ? __io_req_task_submit+0x5/0xa0
[ 250.210083] __io_req_task_submit+0x29/0xa0
[ 250.210687] io_async_task_func+0x23d/0x4c0
[ 250.211278] task_work_run+0x89/0xd0
[ 250.211884] io_run_task_work_sig+0x50/0xc0
[ 250.212464] io_sqe_files_unregister+0xb2/0x1f0
[ 250.213109] __io_uring_register+0x115a/0x1750
[ 250.213718] ? __x64_sys_io_uring_register+0xad/0x210
[ 250.214395] ? __fget_files+0x15a/0x260
[ 250.214956] __x64_sys_io_uring_register+0xbe/0x210
[ 250.215620] ? trace_hardirqs_on+0x46/0x110
[ 250.216205] do_syscall_64+0x2d/0x40
[ 250.216731] entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 250.217455] RIP: 0033:0x7f0fa17e5239
[ 250.218034] Code: 01 00 48 81 c4 80 00 00 00 e9 f1 fe ff ff 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 3d 01 f0 ff ff 73 01 c3 48 8b 0d 27 ec 2c 00 f7 d8 64 89 01 48
[ 250.220343] RSP: 002b:00007f0fa1eeac48 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab
[ 250.221360] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0fa17e5239
[ 250.222272] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000008
[ 250.223185] RBP: 00007f0fa1eeae20 R08: 0000000000000000 R09: 0000000000000000
[ 250.224091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 250.224999] R13: 0000000000021000 R14: 0000000000000000 R15: 00007f0fa1eeb700
This is caused by calling io_run_task_work_sig() to do work under
uring_lock while the caller io_sqe_files_unregister() already held
uring_lock.
To fix this issue, briefly drop uring_lock when calling
io_run_task_work_sig(), and there are two things to concern:
- hold uring_lock in io_ring_ctx_free() around io_sqe_files_unregister()
this is for consistency of lock/unlock.
- add new fixed rsrc ref node before dropping uring_lock
it's not safe to do io_uring_enter-->percpu_ref_get() with a dying one.
- check if rsrc_data->refs is dying to avoid parallel io_sqe_files_unregister
Bug: 268174392
Reported-by: Abaci <abaci@linux.alibaba.com>
Fixes: 1ffc54220c44 ("io_uring: fix io_sqe_files_unregister() hangs")
Suggested-by: Pavel Begunkov <asml.silence@gmail.com>
Change-Id: I7d3b04f6c2282d386e7aa2b5de9edce7ef9306fa
Signed-off-by: Hao Xu <haoxu@linux.alibaba.com>
[axboe: fixes from Pavel folded in]
Signed-off-by: Jens Axboe <axboe@kernel.dk>
Signed-off-by: Samiullah Khawaja <skhawaja@google.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
(cherry picked from commit
|
||
Pavel Begunkov
|
3047930fe7 |
UPSTREAM: io_uring/af_unix: defer registered files gc to io_uring release
[ upstream commit 0091bfc81741b8d3aeb3b7ab8636f911b2de6e80 ] Instead of putting io_uring's registered files in unix_gc() we want it to be done by io_uring itself. The trick here is to consider io_uring registered files for cycle detection but not actually putting them down. Because io_uring can't register other ring instances, this will remove all refs to the ring file triggering the ->release path and clean up with io_ring_ctx_free(). Bug: 268174392 Cc: stable@vger.kernel.org Fixes: |
||
|
Pavel Begunkov
|
9781cc5724 |
UPSTREAM: io_uring: correct pinned_vm accounting
[ upstream commit 42b6419d0aba47c5d8644cdc0b68502254671de5 ]
->mm_account should be released only after we free all registered
buffers, otherwise __io_sqe_buffers_unregister() will see a NULL
->mm_account and skip locked_vm accounting.
Bug: 268174392
Cc: <Stable@vger.kernel.org>
Change-Id: I4cb5b8bcd1d87a631fd0de3227007d09b8ffff7f
Signed-off-by: Pavel Begunkov <asml.silence@gmail.com>
Link: https://lore.kernel.org/r/6d798f65ed4ab8db3664c4d3397d4af16ca98846.1664849932.git.asml.silence@gmail.com
Signed-off-by: Jens Axboe <axboe@kernel.dk>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
(cherry picked from commit
|
||
qixiaoyu1
|
3fcc69ca4d |
FROMGIT: f2fs: add sysfs nodes to set last_age_weight
Bug: 267580491 (cherry picked from commit d23be468eada21c828058e0e8d60409eaec373ab https://git.kernel.org/pub/scm/linux/kernel/git/jaegeuk/f2fs.git dev) Signed-off-by: qixiaoyu1 <qixiaoyu1@xiaomi.com> Signed-off-by: xiongping1 <xiongping1@xiaomi.com> Reviewed-by: Chao Yu <chao@kernel.org> Signed-off-by: Jaegeuk Kim <jaegeuk@kernel.org> Change-Id: I88b795ec90f4589676daed4919db31b26574c84b |
||
|
qixiaoyu1
|
899476c3af |
FROMGIT: f2fs: fix wrong calculation of block age
Currently we wrongly calculate the new block age to
old * LAST_AGE_WEIGHT / 100.
Fix it to new * (100 - LAST_AGE_WEIGHT) / 100
+ old * LAST_AGE_WEIGHT / 100.
Bug: 267580491
(cherry picked from commit b03a41a495df35f8e8d25220878bd6b8472d9396
https://git.kernel.org/pub/scm/linux/kernel/git/jaegeuk/f2fs.git dev)
Signed-off-by: qixiaoyu1 <qixiaoyu1@xiaomi.com>
Signed-off-by: xiongping1 <xiongping1@xiaomi.com>
Reviewed-by: Chao Yu <chao@kernel.org>
Signed-off-by: Jaegeuk Kim <jaegeuk@kernel.org>
Change-Id: If06f04c63f9ed0de4e1d734936d9ea9a6c613d64
|
||
|
Srinivasarao Pathipati
|
5eb7909028 |
Merge keystone/android12-5.10-keystone-qcom-release.149+ (f29e4ad) into msm-5.10
* refs/heads/tmp-f29e4ad: ANDROID: cpu: correct dl_cpu_busy() calls BACKPORT: ext4: fix use-after-free in ext4_rename_dir_prepare ANDROID: GKI: rockchip: Update symbols BACKPORT: f2fs: let's avoid panic if extent_tree is not created BACKPORT: f2fs: should use a temp extent_info for lookup BACKPORT: f2fs: don't mix to use union values in extent_info BACKPORT: f2fs: initialize extent_cache parameter BACKPORT: f2fs: add block_age-based extent cache BACKPORT: f2fs: allocate the extent_cache by default BACKPORT: f2fs: refactor extent_cache to support for read and more BACKPORT: f2fs: remove unnecessary __init_extent_tree BACKPORT: f2fs: move internal functions into extent_cache.c BACKPORT: f2fs: specify extent cache for read explicitly BACKPORT: f2fs: add "c_len" into trace_f2fs_update_extent_tree_range for compressed file BACKPORT: f2fs: fix race condition on setting FI_NO_EXTENT flag BACKPORT: f2fs: extent cache: support unaligned extent UPSTREAM: io_uring: kill goto error handling in io_sqpoll_wait_sq() ANDROID: allmodconfig: disable WERROR UPSTREAM: Enable '-Werror' by default for all kernel builds ANDROID: GKI: VIVO: Add a symbol to symbol list ANDROID: fips140: add crypto_memneq() back to the module ANDROID: GKI: rockchip: Update module fragment and symbol list ANDROID: GKI: rockchip: Enable symbols for HDMIRX ANDROID: GKI: rockchip: Enable symbols for Ethernet ANDROID: Re-enable fast mremap and fix UAF with SPF Revert "ANDROID: Make SPF aware of fast mremaps" ANDROID: GKI: Update symbols to symbol list ANDROID: fips140: add dump_jitterentropy command to fips140_lab_util UPSTREAM: io_uring: add missing item types for splice request ANDROID: GKI: update xiaomi symbol list Revert "Revert "ANDROID: vendor_hooks:vendor hook for mmput"" Revert "Revert "ANDROID: vendor_hooks:vendor hook for __alloc_pages_slowpath."" ANDROID: GKI: rockchip: Add symbol clk_hw_set_parent UPSTREAM: usb: dwc3: core: Add error log when core soft reset failed FROMLIST: fuse: give wakeup hints to the scheduler ANDROID: Make SPF aware of fast mremaps ANDROID: GKI: enable mulitcolor-led UPSTREAM: HID: playstation: support updated DualSense rumble mode. UPSTREAM: HID: playstation: add initial DualSense Edge controller support UPSTREAM: HID: playstation: stop DualSense output work on remove. UPSTREAM: HID: playstation: convert to use dev_groups UPSTREAM: HID: playstation: fix return from dualsense_player_led_set_brightness() UPSTREAM: HID: playstation: expose DualSense player LEDs through LED class. UPSTREAM: leds: add new LED_FUNCTION_PLAYER for player LEDs for game controllers. UPSTREAM: HID: playstation: expose DualSense lightbar through a multi-color LED. UPSTREAM: Documentation: leds: standartizing LED names ANDROID: usb: gadget: uvc: remove duplicate code in unbind ANDROID: dma-buf: Fix build breakage with !CONFIG_DMABUF_SYSFS_STATS ANDROID: dma-buf: don't re-purpose kobject as work_struct UPSTREAM: drm/amdgpu: temporarily disable broken Clang builds due to blown stack-frame BACKPORT: Kconfig.debug: provide a little extra FRAME_WARN leeway when KASAN is enabled Change-Id: Ie1154752931ac285427f153f71d861387628b321 Signed-off-by: Srinivasarao Pathipati <quic_c_spathi@quicinc.com> |
||
|
Jens Axboe
|
72d1c48675 |
UPSTREAM: eventfd: provide a eventfd_signal_mask() helper
[ Upstream commit 03e02acda8e267a8183e1e0ed289ff1ef9cd7ed8 ]
This is identical to eventfd_signal(), but it allows the caller to pass
in a mask to be used for the poll wakeup key. The use case is avoiding
repeated multishot triggers if we have a dependency between eventfd and
io_uring.
If we setup an eventfd context and register that as the io_uring eventfd,
and at the same time queue a multishot poll request for the eventfd
context, then any CQE posted will repeatedly trigger the multishot request
until it terminates when the CQ ring overflows.
In preparation for io_uring detecting this circular dependency, add the
mentioned helper so that io_uring can pass in EPOLL_URING as part of the
poll wakeup key.
Cc: stable@vger.kernel.org # 6.0
[axboe: fold in !CONFIG_EVENTFD fix from Zhang Qilong]
Change-Id: I0c38a56887777f85cb10673b7ca3b5ca4d70c61b
Signed-off-by: Jens Axboe <axboe@kernel.dk>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
(cherry picked from commit
|
||
|
Jens Axboe
|
d7a47b29d5 |
UPSTREAM: eventpoll: add EPOLL_URING_WAKE poll wakeup flag
[ Upstream commit caf1aeaffc3b09649a56769e559333ae2c4f1802 ]
We can have dependencies between epoll and io_uring. Consider an epoll
context, identified by the epfd file descriptor, and an io_uring file
descriptor identified by iofd. If we add iofd to the epfd context, and
arm a multishot poll request for epfd with iofd, then the multishot
poll request will repeatedly trigger and generate events until terminated
by CQ ring overflow. This isn't a desired behavior.
Add EPOLL_URING so that io_uring can pass it in as part of the poll wakeup
key, and io_uring can check for that to detect a potential recursive
invocation.
Cc: stable@vger.kernel.org # 6.0
Change-Id: Ifafcb236b2cfe3ca3e7254a0155625fce00fd038
Signed-off-by: Jens Axboe <axboe@kernel.dk>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
(cherry picked from commit
|
||
|
Jens Axboe
|
7c9f38c09b |
UPSTREAM: Revert "proc: don't allow async path resolution of /proc/self components"
[ Upstream commit 9e8d9e829c2142cf1d7756e9ed2e0b4c7569d84c ] This reverts commit |
||
|
Jens Axboe
|
498b35b3c4 |
UPSTREAM: Revert "proc: don't allow async path resolution of /proc/thread-self components"
[ Upstream commit 2587890b5e2892dfecaa5e5126bdac8076a4e6f7 ]
This reverts commit 0d4370cfe36b7f1719123b621a4ec4d9c7a25f89.
No longer needed, as the io-wq worker threads have the right identity.
Change-Id: I7a28e02a0a1911555853cf4046e3a09c7e36d4a2
Signed-off-by: Jens Axboe <axboe@kernel.dk>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
(cherry picked from commit
|
||
|
Jens Axboe
|
5e6347b586 |
UPSTREAM: io_uring: import 5.15-stable io_uring
No upstream commit exists.
This imports the io_uring codebase from 5.15.85, wholesale. Changes
from that code base:
- Drop IOCB_ALLOC_CACHE, we don't have that in 5.10.
- Drop MKDIRAT/SYMLINKAT/LINKAT. Would require further VFS backports,
and we don't support these in 5.10 to begin with.
- sock_from_file() old style calling convention.
- Use compat_get_bitmap() only for CONFIG_COMPAT=y
Change-Id: I7ce5226d6b39763ffc246fd6357cece9aafd4b59
Signed-off-by: Jens Axboe <axboe@kernel.dk>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
(cherry picked from commit
|
||
|
Eric W. Biederman
|
b25b8c55ba |
UPSTREAM: coredump: Limit what can interrupt coredumps
[ Upstream commit 06af8679449d4ed282df13191fc52d5ba28ec536 ]
Olivier Langlois has been struggling with coredumps being incompletely written in
processes using io_uring.
Olivier Langlois <olivier@trillion01.com> writes:
> io_uring is a big user of task_work and any event that io_uring made a
> task waiting for that occurs during the core dump generation will
> generate a TIF_NOTIFY_SIGNAL.
>
> Here are the detailed steps of the problem:
> 1. io_uring calls vfs_poll() to install a task to a file wait queue
> with io_async_wake() as the wakeup function cb from io_arm_poll_handler()
> 2. wakeup function ends up calling task_work_add() with TWA_SIGNAL
> 3. task_work_add() sets the TIF_NOTIFY_SIGNAL bit by calling
> set_notify_signal()
The coredump code deliberately supports being interrupted by SIGKILL,
and depends upon prepare_signal to filter out all other signals. Now
that signal_pending includes wake ups for TIF_NOTIFY_SIGNAL this hack
in dump_emitted by the coredump code no longer works.
Make the coredump code more robust by explicitly testing for all of
the wakeup conditions the coredump code supports. This prevents
new wakeup conditions from breaking the coredump code, as well
as fixing the current issue.
The filesystem code that the coredump code uses already limits
itself to only aborting on fatal_signal_pending. So it should
not develop surprising wake-up reasons either.
v2: Don't remove the now unnecessary code in prepare_signal.
Cc: stable@vger.kernel.org
Fixes: 12db8b690010 ("entry: Add support for TIF_NOTIFY_SIGNAL")
Reported-by: Olivier Langlois <olivier@trillion01.com>
Change-Id: I84870bf0a620a97af50d9b495dd225f9ee2b66b8
Signed-off-by: "Eric W. Biederman" <ebiederm@xmission.com>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
(cherry picked from commit
|
||
|
Jens Axboe
|
00af4b88ad |
UPSTREAM: fs: provide locked helper variant of close_fd_get_file()
[ Upstream commit 53dec2ea74f2ef360e8455439be96a780baa6097 ]
Assumes current->files->file_lock is already held on invocation. Helps
the caller check the file before removing the fd, if it needs to.
Change-Id: Idd87700a119403ce3867aa52294a14213b505faa
Signed-off-by: Jens Axboe <axboe@kernel.dk>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
(cherry picked from commit
|
||
|
Eric W. Biederman
|
82c3becbef |
UPSTREAM: file: Rename __close_fd_get_file close_fd_get_file
[ Upstream commit 9fe83c43e71cdb8e5b9520bcb98706a2b3c680c8 ] The function close_fd_get_file is explicitly a variant of __close_fd[1]. Now that __close_fd has been renamed close_fd, rename close_fd_get_file to be consistent with close_fd. When __alloc_fd, __close_fd and __fd_install were introduced the double underscore indicated that the function took a struct files_struct parameter. The function __close_fd_get_file never has so the naming has always been inconsistent. This just cleans things up so there are not any lingering mentions or references __close_fd left in the code. [1] |
||
|
Jens Axboe
|
98006a0a15 |
UPSTREAM: fs: make do_renameat2() take struct filename
[ Upstream commit e886663cfd029b64a1d8da7efae7014526d884e9 ]
Pass in the struct filename pointers instead of the user string, and
update the three callers to do the same.
This behaves like do_unlinkat(), which also takes a filename struct and
puts it when it is done. Converting callers is then trivial.
Change-Id: Ie23f87f8c6bb18a61254a0848d861ad6fad14232
Signed-off-by: Jens Axboe <axboe@kernel.dk>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
(cherry picked from commit
|
||
|
Jens Axboe
|
2507b99d9a |
UPSTREAM: fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED
[ Upstream commit 99668f618062816ca7ba639b007eb145b9d3d41e ]
Now that we support non-blocking path resolution internally, expose it
via openat2() in the struct open_how ->resolve flags. This allows
applications using openat2() to limit path resolution to the extent that
it is already cached.
If the lookup cannot be satisfied in a non-blocking manner, openat2(2)
will return -1/-EAGAIN.
Cc: Al Viro <viro@zeniv.linux.org.uk>
Change-Id: Iddb58268e0a2b8adfc54e56192da43dda1868d8c
Signed-off-by: Jens Axboe <axboe@kernel.dk>
Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
(cherry picked from commit
|
||
|
Al Viro
|
6b92128557 |
UPSTREAM: Make sure nd->path.mnt and nd->path.dentry are always valid pointers
[ Upstream commit 7d01ef7585c07afaf487759a48486228cd065726 ]
Initialize them in set_nameidata() and make sure that terminate_walk() clears them
once the pointers become potentially invalid (i.e. we leave RCU mode or drop them
in non-RCU one). Currently we have "path_init() always initializes them and nobody
accesses them outside of path_init()/terminate_walk() segments", which is asking
for trouble.
With that change we would have nd->path.{mnt,dentry}
1) always valid - NULL or pointing to currently allocated objects.
2) non-NULL while we are successfully walking
3) NULL when we are not walking at all
4) contributing to refcounts whenever non-NULL outside of RCU mode.
Fixes: 6c6ec2b0a3e0 ("fs: add support for LOOKUP_CACHED")
Reported-by: syzbot+c88a7030da47945a3cc3@syzkaller.appspotmail.com
Tested-by: Christian Brauner <christian.brauner@ubuntu.com>
Change-Id: I0532db6ea79fb760d50a88f75e2bb0691c24e93c
Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
(cherry picked from commit
|
||
|
Al Viro
|
eaf736aa71 |
UPSTREAM: fix handling of nd->depth on LOOKUP_CACHED failures in try_to_unlazy*
[ Upstream commit eacd9aa8cedeb412842c7b339adbaa0477fdd5ad ]
After switching to non-RCU mode, we want nd->depth to match the number
of entries in nd->stack[] that need eventual path_put().
legitimize_links() takes care of that on failures; unfortunately,
failure exits added for LOOKUP_CACHED do not.
We could add the logics for that into those failure exits, both in
try_to_unlazy() and in try_to_unlazy_next(), but since both checks
are immediately followed by legitimize_links() and there's no calls
of legitimize_links() other than those two... It's easier to
move the check (and required handling of nd->depth on failure) into
legitimize_links() itself.
[caught by Jens: ... and since we are zeroing ->depth here, we need
to do drop_links() first]
Fixes: 6c6ec2b0a3e0 "fs: add support for LOOKUP_CACHED"
Tested-by: Jens Axboe <axboe@kernel.dk>
Change-Id: I6cf685bfce81acb4d68c3991b2a936968a39c739
Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
(cherry picked from commit
|
||
|
Jens Axboe
|
7928a1689b |
UPSTREAM: fs: add support for LOOKUP_CACHED
[ Upstream commit 6c6ec2b0a3e0381d886d531bd1471dfdb1509237 ]
io_uring always punts opens to async context, since there's no control
over whether the lookup blocks or not. Add LOOKUP_CACHED to support
just doing the fast RCU based lookups, which we know will not block. If
we can do a cached path resolution of the filename, then we don't have
to always punt lookups for a worker.
During path resolution, we always do LOOKUP_RCU first. If that fails and
we terminate LOOKUP_RCU, then fail a LOOKUP_CACHED attempt as well.
Cc: Al Viro <viro@zeniv.linux.org.uk>
Change-Id: If3c62e8681cd47bfafaa5a4de05a7e0418c1c718
Signed-off-by: Jens Axboe <axboe@kernel.dk>
Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
(cherry picked from commit
|
||
|
Al Viro
|
72d2f4c1cd |
UPSTREAM: saner calling conventions for unlazy_child()
[ Upstream commit ae66db45fd309fd1c6d4e846dfc8414dfec7d6ad ]
same as for the previous commit - instead of 0/-ECHILD make
it return true/false, rename to try_to_unlazy_child().
Change-Id: Ie949437504bd8db7f22f78bfbe5d5141e9959cf8
Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
(cherry picked from commit
|
||
Jaewook Kim
|
a20fd832a4 |
BACKPORT: f2fs: do not allow to decompress files have FI_COMPRESS_RELEASED
If a file has FI_COMPRESS_RELEASED, all writes for it should not be
allowed. However, as of now, in case of compress_mode=user, writes
triggered by IOCTLs like F2FS_IOC_DE/COMPRESS_FILE are allowed unexpectly,
which could crash that file.
To fix it, let's do not allow F2FS_IOC_DE/COMPRESS_IOCTL if a file already
has FI_COMPRESS_RELEASED flag.
This is the reproduction process:
1. $ touch ./file
2. $ chattr +c ./file
3. $ dd if=/dev/random of=./file bs=4096 count=30 conv=notrunc
4. $ dd if=/dev/zero of=./file bs=4096 count=34 seek=30 conv=notrunc
5. $ sync
6. $ do_compress ./file ; call F2FS_IOC_COMPRESS_FILE
7. $ get_compr_blocks ./file ; call F2FS_IOC_GET_COMPRESS_BLOCKS
8. $ release ./file ; call F2FS_IOC_RELEASE_COMPRESS_BLOCKS
9. $ do_compress ./file ; call F2FS_IOC_COMPRESS_FILE again
10. $ get_compr_blocks ./file ; call F2FS_IOC_GET_COMPRESS_BLOCKS again
This reproduction process is tested in 128kb cluster size.
You can find compr_blocks has a negative value.
Fixes: 5fdb322ff2c2b ("f2fs: add F2FS_IOC_DECOMPRESS_FILE and F2FS_IOC_COMPRESS_FILE")
Bug: 228919347
Bug: 267580491
Signed-off-by: Junbeom Yeom <junbeom.yeom@samsung.com>
Signed-off-by: Sungjong Seo <sj1557.seo@samsung.com>
Signed-off-by: Youngjin Gil <youngjin.gil@samsung.com>
Signed-off-by: Jaewook Kim <jw5454.kim@samsung.com>
Signed-off-by: Jaegeuk Kim <jaegeuk@kernel.org>
(cherry picked from commit 854f8871ed48229d217edd7cb023f749e4a0817b)
Change-Id: I086e4d88da68574ef793740d19ecbb2d4ad6ef1d
|
||
Daeho Jeong
|
16996773d6 |
BACKPORT: f2fs: handle decompress only post processing in softirq
Now decompression is being handled in workqueue and it makes read I/O latency non-deterministic, because of the non-deterministic scheduling nature of workqueues. So, I made it handled in softirq context only if possible, not in low memory devices, since this modification will maintain decompresion related memory a little longer. Bug: 232003054 Bug: 267580491 Signed-off-by: Daeho Jeong <daehojeong@google.com> Reviewed-by: Chao Yu <chao@kernel.org> Signed-off-by: Jaegeuk Kim <jaegeuk@kernel.org> Change-Id: I1a7c642e05c2f8544d475039b733403181de641e (cherry picked from commit 9ef8cd45d7a9) |
||
|
Daeho Jeong
|
ce72626280 |
BACKPORT: f2fs: introduce memory mode
Introduce memory mode to supports "normal" and "low" memory modes. "low" mode is to support low memory devices. Because of the nature of low memory devices, in this mode, f2fs will try to save memory sometimes by sacrificing performance. "normal" mode is the default mode and same as before. Bug: 232003054 Bug: 267580491 Signed-off-by: Daeho Jeong <daehojeong@google.com> Signed-off-by: Jaegeuk Kim <jaegeuk@kernel.org> (cherry picked from commit 60f60d1fd86a) Change-Id: I7cb719b18f0002d7af47f7a18e8ec2f4c534bdd9 |
||
Sungjong Seo
|
246a996565 |
BACKPORT: f2fs: allow compression for mmap files in compress_mode=user
Since commit e3c548323d32 ("f2fs: let's allow compression for mmap files"),
it has been allowed to compress mmap files. However, in compress_mode=user,
it is not allowed yet. To keep the same concept in both compress_modes,
f2fs_ioc_(de)compress_file() should also allow it.
Let's remove checking mmap files in f2fs_ioc_(de)compress_file() so that
the compression for mmap files is also allowed in compress_mode=user.
Bug: 228919347
Bug: 267580491
Signed-off-by: Sungjong Seo <sj1557.seo@samsung.com>
Reviewed-by: Chao Yu <chao@kernel.org>
Signed-off-by: Jaegeuk Kim <jaegeuk@kernel.org>
(cherry picked from commit 77142c3cf71f09dcf3fb2ef43926a29e2cfd2ae3)
Change-Id: I31798dfb851be6ee7e5156be8c46fe007583ee55
(cherry picked from commit d85467fdca7c61be37cfd65434dffba3fb4d978d)
|
||
|
Srinivasarao Pathipati
|
57d7f6b039 |
Merge keystone/android12-5.10-keystone-qcom-release.149+ (a3f0c2f) into msm-5.10
* refs/heads/tmp-a3f0c2f:
Revert "Input: atmel_mxt_ts - fix up inverted RESET handler"
ANDROID: cpu: correct dl_cpu_busy() calls
ANDROID: usb: gadget: uvc: remove duplicate code in unbind
ANDROID: mm: disable speculative page faults for CONFIG_NUMA
ANDROID: disable page table moves when speculative page faults are enabled
ANDROID: mm: skip pte_alloc during speculative page fault
UPSTREAM: binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
UPSTREAM: binder: Address corner cases in deferred copy and fixup
UPSTREAM: binder: fix pointer cast warning
UPSTREAM: binder: defer copies of pre-patched txn data
UPSTREAM: binder: read pre-translated fds from sender buffer
UPSTREAM: binder: avoid potential data leakage when copying txn
UPSTREAM: bpf: Ensure correct locking around vulnerable function find_vpid()
BACKPORT: UPSTREAM: usb: typec: ucsi: Wait for the USB role switches
UPSTREAM: HID: roccat: Fix use-after-free in roccat_read()
ANDROID: arm64: mm: perform clean & invalidation in __dma_map_area
BACKPORT: ANDROID: dma-buf: heaps: replace mutex lock with spinlock
UPSTREAM: binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
UPSTREAM: binder: Address corner cases in deferred copy and fixup
UPSTREAM: binder: fix pointer cast warning
UPSTREAM: binder: defer copies of pre-patched txn data
UPSTREAM: binder: read pre-translated fds from sender buffer
UPSTREAM: binder: avoid potential data leakage when copying txn
ANDROID: khugepaged: fix mixing declarations warning in retract_page_tables
ANDROID: mm: fix build issue in spf when CONFIG_USERFAULTFD=n
ANDROID: mm: disable speculative page faults for CONFIG_NUMA
ANDROID: mm: fix invalid backport in speculative page fault path
ANDROID: disable page table moves when speculative page faults are enabled
ANDROID: mm: assert that mmap_lock is taken exclusively in vm_write_begin
ANDROID: mm: remove sequence counting when mmap_lock is not exclusively owned
ANDROID: mm/khugepaged: add missing vm_write_{begin|end}
BACKPORT: FROMLIST: mm: implement speculative handling in filemap_fault()
ANDROID: mm: prevent reads of unstable pmd during speculation
ANDROID: mm: prevent speculative page fault handling for in do_swap_page()
ANDROID: mm: prevent speculative page fault handling for userfaults
ANDROID: mm: skip pte_alloc during speculative page fault
FROMGIT: mm/madvise: fix madvise_pageout for private file mappings
ANDROID: GKI: Update symbols to symbol list
Revert "FROMGIT: mm/vmalloc: Add override for lazy vunmap"
Revert "FROMGIT: arm64: Work around Cortex-A510 erratum 2454944"
UPSTREAM: efi: capsule-loader: Fix use-after-free in efi_capsule_write
FROMGIT: arm64: Work around Cortex-A510 erratum 2454944
FROMGIT: mm/vmalloc: Add override for lazy vunmap
BACKPORT: mm/page_alloc: always initialize memory map for the holes
UPSTREAM: usb: dwc3: gadget: Submit endxfer command if delayed during disconnect
UPSTREAM: usb: dwc3: Fix ep0 handling when getting reset while doing control transfer
UPSTREAM: mm/damon/core: initialize damon_target->list in damon_new_target()
UPSTREAM: usb: typec: ucsi: Remove incorrect warning
UPSTREAM: xhci: Don't show warning for reinit on known broken suspend
UPSTREAM: mm/damon: validate if the pmd entry is present before accessing
UPSTREAM: mm/damon/dbgfs: fix memory leak when using debugfs_lookup()
UPSTREAM: mm/damon/dbgfs: avoid duplicate context directory creation
UPSTREAM: crypto: lib - remove unneeded selection of XOR_BLOCKS
UPSTREAM: pinctrl: sunxi: Fix name for A100 R_PIO
UPSTREAM: cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
BACKPORT: usb: gadget: f_uac2: fix superspeed transfer
BACKPORT: usb: dwc3: qcom: fix runtime PM wakeup
UPSTREAM: KVM: arm64: Reject 32bit user PSTATE on asymmetric systems
UPSTREAM: KVM: arm64: Treat PMCR_EL1.LC as RES1 on asymmetric systems
UPSTREAM: Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm regression
UPSTREAM: mm: fix page leak with multiple threads mapping the same page
UPSTREAM: PM: domains: Ensure genpd_debugfs_dir exists before remove
UPSTREAM: usb: gadget: uvc: fix changing interface name via configfs
BACKPORT: dma-mapping: Fix build error unused-value
UPSTREAM: tools/vm/slabinfo: Handle files in debugfs
UPSTREAM: mm/damon: use set_huge_pte_at() to make huge pte old
UPSTREAM: usb: gadget: f_mass_storage: Make CD-ROM emulation works with Windows OS
UPSTREAM: blk-mq: don't touch ->tagset in blk_mq_get_sq_hctx
UPSTREAM: PM: domains: Fix initialization of genpd's next_wakeup
BACKPORT: f2fs: don't use casefolded comparison for "." and ".."
UPSTREAM: regulator: scmi: Fix refcount leak in scmi_regulator_probe
UPSTREAM: block/mq-deadline: Set the fifo_time member also if inserting at head
BACKPORT: Revert "mm/cma.c: remove redundant cma_mutex lock"
UPSTREAM: module.h: simplify MODULE_IMPORT_NS
UPSTREAM: iommu/mediatek: Add mutex for m4u_group and m4u_dom in data
UPSTREAM: iommu/mediatek: Remove clk_disable in mtk_iommu_remove
UPSTREAM: iommu/mediatek: Fix 2 HW sharing pgtable issue
UPSTREAM: mm: hugetlb: add missing cache flushing in hugetlb_unshare_all_pmds()
UPSTREAM: selftests/damon: add damon to selftests root Makefile
FROMGIT: f2fs: allow to read node block after shutdown
BACKPORT: f2fs: do not submit NEW_ADDR to read node block
BACKPORT: ext4,f2fs: fix readahead of verity data
ANDROID: GKI: db845c: Update symbols list and ABI
Linux 5.10.149
wifi: mac80211: fix MBSSID parsing use-after-free
wifi: mac80211: don't parse mbssid in assoc response
mac80211: mlme: find auth challenge directly
Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
Linux 5.10.148
misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
misc: pci_endpoint_test: Aggregate params checking for xfer
Input: xpad - fix wireless 360 controller breaking after suspend
Input: xpad - add supported devices as contributed on github
wifi: cfg80211: update hidden BSSes to avoid WARN_ON
wifi: mac80211: fix crash in beacon protection for P2P-device
wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
wifi: cfg80211: avoid nontransmitted BSS list corruption
wifi: cfg80211: fix BSS refcounting bugs
wifi: cfg80211: ensure length byte is present before access
wifi: cfg80211/mac80211: reject bad MBSSID elements
wifi: cfg80211: fix u8 overflow in cfg80211_update_notlisted_nontrans()
random: use expired timer rather than wq for mixing fast pool
random: avoid reading two cache lines on irq randomness
USB: serial: qcserial: add new usb-id for Dell branded EM7455
scsi: stex: Properly zero out the passthrough command structure
efi: Correct Macmini DMI match in uefi cert quirk
ALSA: hda: Fix position reporting on Poulsbo
random: clamp credited irq bits to maximum mixed
random: restore O_NONBLOCK support
Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
USB: serial: ftdi_sio: fix 300 bps rate for SIO
usb: mon: make mmapped memory read only
mmc: core: Terminate infinite loop in SD-UHS voltage switch
mmc: core: Replace with already defined values for readability
drm/amd/display: skip audio setup when audio stream is enabled
drm/amd/display: update gamut remap if plane has changed
net: atlantic: fix potential memory leak in aq_ndev_close()
arch: um: Mark the stack non-executable to fix a binutils warning
um: Cleanup compiler warning in arch/x86/um/tls_32.c
um: Cleanup syscall_handler_t cast in syscalls_32.h
ALSA: hda/hdmi: Fix the converter reuse for the silent stream
net/ieee802154: fix uninit value bug in dgram_sendmsg
scsi: qedf: Fix a UAF bug in __qedf_probe()
ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
firmware: arm_scmi: Add SCMI PM driver remove routine
compiler_attributes.h: move __compiletime_{error|warning}
fs: fix UAF/GPF bug in nilfs_mdt_destroy
powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
mm: gup: fix the fast GUP race against THP collapse
ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC
xsk: Inherit need_wakeup flag for shared sockets
perf tools: Fixup get_current_dir_name() compilation
docs: update mediator information in CoC docs
Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
ceph: don't truncate file in atomic_open
nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
nilfs2: fix leak of nilfs_root in case of writer thread creation failure
nilfs2: fix use-after-free bug of struct nilfs_root
nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level()
Linux 5.10.147
ALSA: hda/hdmi: fix warning about PCM count when used with SOF
x86/alternative: Fix race in try_get_desc()
KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
clk: iproc: Do not rely on node name for correct PLL setup
clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
selftests: Fix the if conditions of in test_extra_filter()
net: stmmac: power up/down serdes in stmmac_open/release
nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
nvme: add new line after variable declatation
cxgb4: fix missing unlock on ETHOFLD desc collect fail path
net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
usbnet: Fix memory leak in usbnet_disconnect()
Input: melfas_mip4 - fix return value check in mip4_probe()
Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
ASoC: tas2770: Reinit regcache on reset
soc: sunxi: sram: Fix debugfs info for A64 SRAM C
soc: sunxi: sram: Fix probe function ordering issues
soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()
soc: sunxi: sram: Prevent the driver from being unbound
soc: sunxi: sram: Actually claim SRAM regions
reset: imx7: Fix the iMX8MP PCIe PHY PERST support
ARM: dts: am33xx: Fix MMCHS0 dma properties
scsi: hisi_sas: Revert "scsi: hisi_sas: Limit max hw sectors for v3 HW"
swiotlb: max mapping size takes min align mask into account
media: rkvdec: Disable H.264 error detection
media: dvb_vb2: fix possible out of bound access
mm: fix madivse_pageout mishandling on non-LRU page
mm/migrate_device.c: flush TLB while holding PTL
mm: prevent page_frag_alloc() from corrupting the memory
mm/page_alloc: fix race condition between build_all_zonelists and page allocation
mmc: hsq: Fix data stomping during mmc recovery
mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
net: mt7531: only do PLL once after the reset
ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
ARM: dts: integrator: Tag PCI host with device_type
clk: ingenic-tcu: Properly enable registers before accessing timers
Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
thunderbolt: Explicitly reset plug events delay back to USB4 spec value
usb: typec: ucsi: Remove incorrect warning
uas: ignore UAS for Thinkplus chips
usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
uas: add no-uas quirk for Hiksemi usb_disk
btrfs: fix hang during unmount when stopping a space reclaim worker
ALSA: hda: Fix Nvidia dp infoframe
ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
ALSA: hda/tegra: Reset hardware
ALSA: hda/tegra: Use clk_bulk helpers
thunderbolt: Add support for Intel Maple Ridge single port controller
thunderbolt: Add support for Intel Maple Ridge
Revert "usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind"
Linux 5.10.146
ext4: make directory inode spreading reflect flexbg size
ext4: limit the number of retries after discarding preallocations blocks
ext4: fix bug in extents parsing when eh_entries == 0 and eh_depth > 0
devdax: Fix soft-reservation memory description
i2c: mlxbf: Fix frequency calculation
i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
i2c: mlxbf: incorrect base address passed during io write
i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
workqueue: don't skip lockdep work dependency in cancel_work_sync()
drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
drm/amd/display: Limit user regamma to a valid value
drm/amdgpu: use dirty framebuffer helper
drm/gma500: Fix BUG: sleeping function called from invalid context errors
Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
cifs: always initialize struct msghdr smb_msg completely
cifs: use discard iterator to discard unneeded network data more efficiently
drm/amdgpu: Fix check for RAS support
vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
usb: xhci-mtk: fix issue of out-of-bounds array access
s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
serial: Create uart_xmit_advance()
drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
selftests: forwarding: add shebang for sch_red.sh
net: sched: fix possible refcount leak in tc_new_tfilter()
net: sunhme: Fix packet reception for len < RX_COPY_THRESHOLD
net/smc: Stop the CLC flow if no link to map buffers on
drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
perf kcore_copy: Do not check /proc/modules is unchanged
perf jit: Include program header in ELF files
can: gs_usb: gs_can_open(): fix race dev->can.state condition
netfilter: ebtables: fix memory leak when blob is malformed
netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
net/sched: taprio: avoid disabling offload when it was never enabled
net: socket: remove register_gifconf
net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
wireguard: netlink: avoid variable-sized memcpy on sockaddr
wireguard: ratelimiter: disable timings test by default
net: ipa: properly limit modem routing table use
net: ipa: kill IPA_TABLE_ENTRY_SIZE
net: ipa: DMA addresses are nicely aligned
net: ipa: avoid 64-bit modulus
net: ipa: fix table alignment requirement
net: ipa: fix assumptions about DMA address size
of: mdio: Add of_node_put() when breaking out of for_each_xx
drm/hisilicon: Add depends on MMU
drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
sfc: fix null pointer dereference in efx_hard_start_xmit
sfc: fix TX channel offset when using legacy interrupts
i40e: Fix set max_tx_rate when it is lower than 1 Mbps
i40e: Fix VF set max MTU size
iavf: Fix set max MTU size with port VLAN and jumbo frames
iavf: Fix bad page state
MIPS: Loongson32: Fix PHY-mode being left unspecified
MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
drm/panel: simple: Fix innolux_g121i1_l01 bus_format
net: team: Unsync device addresses on ndo_stop
net: bonding: Unsync device addresses on ndo_stop
net: bonding: Share lacpdu_mcast_addr definition
scsi: mpt3sas: Fix return value check of dma_get_required_mask()
scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region
net: phy: aquantia: wait for the suspend/resume operations to finish
net: core: fix flow symmetric hash
net: let flow have same hash in two directions
ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header
iavf: Fix cached head and tail value for iavf_get_tx_pending
netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find()
netfilter: nf_conntrack_irc: Tighten matching on DCC message
netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
xfs: validate inode fork size against fork format
xfs: reorder iunlink remove operation in xfs_ifree
xfs: fix up non-directory creation in SGID directories
interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate
KVM: SEV: add cache flush to solve SEV cache incoherency issues
mm/slub: fix to return errno if kmalloc() fails
can: flexcan: flexcan_mailbox_read() fix return value for drop = true
riscv: fix a nasty sigreturn bug...
gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
gpio: mockup: fix NULL pointer dereference when removing debugfs
wifi: mt76: fix reading current per-tid starting sequence number for aggregation
efi: libstub: check Shim mode using MokSBStateRT
efi: x86: Wipe setup_data on pure EFI boot
media: flexcop-usb: fix endpoint type check
iommu/vt-d: Check correct capability for sagaw determination
ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
ALSA: hda/realtek: Re-arrange quirk table entries
ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
ALSA: hda: add Intel 5 Series / 3400 PCI DID
ALSA: hda/tegra: set depop delay for tegra
USB: serial: option: add Quectel RM520N
USB: serial: option: add Quectel BG95 0x0203 composition
USB: core: Fix RST error in hub.c
arm64/bti: Disable in kernel BTI when cross section thunks are broken
arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer
Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
vfio/type1: Unpin zero pages
vfio/type1: Prepare for batched pinning with struct vfio_batch
vfio/type1: Change success value of vaddr_get_pfn()
Revert "usb: add quirks for Lenovo OneLink+ Dock"
usb: cdns3: fix issue with rearming ISO OUT endpoint
usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
usb: add quirks for Lenovo OneLink+ Dock
tty: serial: atmel: Preserve previous USART mode if RS485 disabled
serial: atmel: remove redundant assignment in rs485_config
mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
usb: xhci-mtk: relax TT periodic bandwidth allocation
usb: xhci-mtk: allow multiple Start-Split in a microframe
usb: xhci-mtk: add some schedule error number
usb: xhci-mtk: add a function to (un)load bandwidth info
usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
usb: xhci-mtk: add only one extra CS for FS/LS INTR
usb: xhci-mtk: get the microframe boundary for ESIT
usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
usb: dwc3: gadget: Refactor pullup()
usb: dwc3: gadget: Prevent repeat pullup()
usb: dwc3: Issue core soft reset before enabling run/stop
usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake
drm/amdgpu: make sure to init common IP before gmc
drm/amdgpu: Separate vf2pf work item init from virt data exchange
drm/amdgpu: indirect register access for nv12 sriov
drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
Linux 5.10.145
ALSA: hda/sigmatel: Fix unused variable warning for beep power change
cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
video: fbdev: pxa3xx-gcu: Fix integer overflow in pxa3xx_gcu_write
mksysmap: Fix the mismatch of 'L0' symbols in System.map
MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
net: usb: qmi_wwan: add Quectel RM520N
ALSA: hda/tegra: Align BDL entry to 4KB boundary
ALSA: hda/sigmatel: Keep power up while beep is enabled
wifi: mac80211_hwsim: check length for virtio packets
rxrpc: Fix calc of resend age
rxrpc: Fix local destruction being repeated
regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
ASoC: nau8824: Fix semaphore unbalance at error paths
Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
video: fbdev: i740fb: Error out if 'pixclock' equals zero
tools/include/uapi: Fix <asm/errno.h> for parisc and xtensa
cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
cifs: revalidate mapping when doing direct writes
of/device: Fix up of_dma_configure_id() stub
tracing: hold caller_addr to hardirq_{enable,disable}_ip
parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
drm/meson: Fix OSD1 RGB to YCbCr coefficient
drm/meson: Correct OSD1 global alpha value
gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
pinctrl: sunxi: Fix name for A100 R_PIO
of: fdt: fix off-by-one error in unflatten_dt_nodes()
net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
platform/x86/intel: hid: add quirk to support Surface Go 3
usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests
powerpc/pseries/mobility: ignore ibm, platform-facilities updates
powerpc/pseries/mobility: refactor node lookup during DT update
dmaengine: bestcomm: fix system boot lockups
parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page
parisc: Optimize per-pagetable spinlocks
serial: 8250: Fix reporting real baudrate value in c_ospeed field
KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling
KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs
Revert "USB: core: Prevent nested device-reset calls"
Revert "xhci: Add grace period after xHC start to prevent premature runtime suspend."
Revert "mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse"
Revert "io_uring: disable polling pollfree files"
Linux 5.10.144
Input: goodix - add compatible string for GT1158
soc: fsl: select FSL_GUTS driver for DPIO
x86/ftrace: Use alternative RET encoding
x86/ibt,ftrace: Make function-graph play nice
Revert "x86/ftrace: Use alternative RET encoding"
mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
usb: storage: Add ASUS <0x0b05:0x1932> to IGNORE_UAS
platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
perf/arm_pmu_platform: fix tests for platform_get_irq() failure
drm/amd/amdgpu: skip ucode loading if ucode_size == 0
nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
Input: iforce - add support for Boeder Force Feedback Wheel
ieee802154: cc2520: add rc code in cc2520_tx()
gpio: mockup: remove gpio debugfs when remove device
tg3: Disable tg3 device on system reboot to avoid triggering AER
hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
drm/msm/rd: Fix FIFO-full deadlock
Input: goodix - add support for GT1158
tracefs: Only clobber mode/uid/gid on remount if asked
iommu/vt-d: Correctly calculate sagaw value of IOMMU
ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
ARM: dts: imx: align SPI NOR node name with dtschema
Linux 5.10.143
arm64: errata: add detection for AMEVCNTR01 incrementing incorrectly
hwmon: (mr75203) enable polling for all VM channels
hwmon: (mr75203) fix multi-channel voltage reading
hwmon: (mr75203) fix voltage equation for negative source input
hwmon: (mr75203) update pvt->v_num and vm_num to the actual number of used sensors
hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
iommu/amd: use full 64-bit value in build_completion_wait()
swiotlb: avoid potential left shift overflow
MIPS: loongson32: ls1c: Fix hang during startup
ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
sch_sfb: Also store skb len before calling child enqueue
tcp: fix early ETIMEDOUT after spurious non-SACK RTO
nvme-tcp: fix regression that causes sporadic requests to time out
nvme-tcp: fix UAF when detecting digest errors
RDMA/mlx5: Set local port to one when accessing counters
IB/core: Fix a nested dead lock as part of ODP flow
ipv6: sr: fix out-of-bounds read when setting HMAC data.
RDMA/siw: Pass a pointer to virt_to_page()
xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
i40e: Fix kernel crash during module removal
ice: use bitmap_free instead of devm_kfree
tipc: fix shift wrapping bug in map_get()
sch_sfb: Don't assume the skb is still around after enqueueing to child
afs: Use the operation issue time instead of the reply time for callbacks
rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
ALSA: usb-audio: Register card again for iface over delayed_register option
ALSA: usb-audio: Inform the delayed registration more properly
netfilter: nf_conntrack_irc: Fix forged IP logic
netfilter: nf_tables: clean up hook list when offload flags check fails
netfilter: br_netfilter: Drop dst references before setting.
ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
RDMA/hns: Fix wrong fixed value of qp->rq.wqe_shift
RDMA/hns: Fix supported page size
soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
RDMA/cma: Fix arguments order in net device validation
tee: fix compiler warning in tee_shm_register()
regulator: core: Clean up on enable failure
ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
smb3: missing inode locks in punch hole
cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
cgroup: Fix threadgroup_rwsem <-> cpus_read_lock() deadlock
cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree
scsi: lpfc: Add missing destroy_workqueue() in error path
scsi: mpt3sas: Fix use-after-free warning
drm/i915: Implement WaEdpLinkRateDataReload
nvmet: fix a use-after-free
debugfs: add debugfs_lookup_and_remove()
kprobes: Prohibit probes in gate area
ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
ALSA: aloop: Fix random zeros in capture data when using jiffies timer
ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
net/core/skbuff: Check the return value of skb_copy_bits()
arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
drm/radeon: add a force flush to delay work when radeon
drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini
drm/gem: Fix GEM handle release errors
scsi: megaraid_sas: Fix double kfree()
scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
fs: only do a memory barrier for the first set_buffer_uptodate()
wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
efi: capsule-loader: Fix use-after-free in efi_capsule_write
efi: libstub: Disable struct randomization
tty: n_gsm: avoid call of sleeping functions from atomic context
tty: n_gsm: initialize more members at gsm_alloc_mux()
xen-blkfront: Cache feature_persistent value before advertisement
NFSD: Fix verifier returned in stable WRITEs
Linux 5.10.142
USB: serial: ch341: fix disabled rx timer on older devices
USB: serial: ch341: fix lost character on LCR updates
usb: dwc3: disable USB core PHY management
usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
usb: dwc3: fix PHY disable sequence
mmc: core: Fix UHS-I SD 1.8V workaround branch
btrfs: harden identification of a stale device
drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
ALSA: seq: Fix data-race at module auto-loading
ALSA: seq: oss: Fix data-race for max_midi_devs access
ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
net: mac802154: Fix a condition in the receive path
net: Use u64_stats_fetch_begin_irq() for stats fetch.
ip: fix triggering of 'icmp redirect'
wifi: mac80211: Fix UAF in ieee80211_scan_rx()
wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
driver core: Don't probe devices after bus_type.match() probe deferral
usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
USB: core: Prevent nested device-reset calls
s390: fix nospec table alignments
s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
usb-storage: Add ignore-residue quirk for NXP PN7462AU
USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
usb: dwc2: fix wrong order of phy_power_on and phy_init
usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
USB: serial: option: add Quectel EM060K modem
USB: serial: option: add support for OPPO R11 diag port
USB: serial: cp210x: add Decagon UCA device id
xhci: Add grace period after xHC start to prevent premature runtime suspend.
media: mceusb: Use new usb_control_msg_*() routines
thunderbolt: Use the actual buffer in tb_async_error()
xen-blkfront: Advertise feature-persistent as user requested
xen-blkback: Advertise feature-persistent as user requested
mm: pagewalk: Fix race between unmap and page walker
xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
gpio: pca953x: Add mutex_lock for regcache sync in PM
hwmon: (gpio-fan) Fix array out of bounds access
clk: bcm: rpi: Add missing newline
clk: bcm: rpi: Prevent out-of-bounds access
clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
Input: rk805-pwrkey - fix module autoloading
clk: core: Fix runtime PM sequence in clk_core_unprepare()
Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
drm/i915/reg: Fix spelling mistake "Unsupport" -> "Unsupported"
binder: fix UAF of ref->proc caused by race condition
USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
misc: fastrpc: fix memory corruption on open
misc: fastrpc: fix memory corruption on probe
iio: adc: mcp3911: use correct formula for AD conversion
iio: ad7292: Prevent regulator double disable
Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete
vt: Clear selection before changing the font
powerpc: align syscall table for ppc32
staging: rtl8712: fix use after free bugs
serial: fsl_lpuart: RS485 RTS polariy is inverse
net/smc: Remove redundant refcount increase
Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
tcp: annotate data-race around challenge_timestamp
sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
kcm: fix strp_init() order and cleanup
ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
net/sched: fix netdevice reference leaks in attach_default_qdiscs()
net: sched: tbf: don't call qdisc_put() while holding tree lock
Revert "xhci: turn off port power in shutdown"
wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
ieee802154/adf7242: defer destroy_workqueue call
bpf, cgroup: Fix kernel BUG in purge_effective_progs
iio: adc: mcp3911: make use of the sign bit
platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
drm/msm/dsi: Fix number of regulators for SDM660
drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
drm/msm/dsi: fix the inconsistent indenting
Linux 5.10.141
net: neigh: don't call kfree_skb() under spin_lock_irqsave()
net/af_packet: check len when min_header_len equals to 0
xfs: revert "xfs: actually bump warning counts when we send warnings"
xfs: fix soft lockup via spinning in filestream ag selection loop
xfs: fix overfilling of reserve pool
xfs: always succeed at setting the reserve pool size
xfs: remove infinite loop when reserving free block pool
io_uring: disable polling pollfree files
kprobes: don't call disarm_kprobe() for disabled kprobes
lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
drm/amdgpu: Increase tlb flush timeout for sriov
drm/amd/display: Fix pixel clock programming
drm/amd/pm: add missing ->fini_microcode interface for Sienna Cichlid
s390/hypfs: avoid error message under KVM
neigh: fix possible DoS due to net iface start/stop loop
drm/amd/display: clear optc underflow before turn off odm clock
drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
drm/amd/display: Avoid MPC infinite loop
mmc: mtk-sd: Clear interrupts when cqe off/disable
mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse
bpf: Don't redirect packets with invalid pkt_len
ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
fbdev: fb_pm2fb: Avoid potential divide by zero error
net: fix refcount bug in sk_psock_get (2)
HID: hidraw: fix memory leak in hidraw_release()
media: pvrusb2: fix memory leak in pvr_probe
udmabuf: Set the DMA mask for the udmabuf device (v2)
HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()"
Bluetooth: L2CAP: Fix build errors in some archs
kbuild: Fix include path in scripts/Makefile.modpost
s390/mm: do not trigger write fault when vma does not allow VM_WRITE
crypto: lib - remove unneeded selection of XOR_BLOCKS
x86/nospec: Fix i386 RSB stuffing
x86/nospec: Unwreck the RSB stuffing
mm: Force TLB flush for PFNMAP mappings before unlink_file_vma()
Linux 5.10.140
bpf: Don't use tnum_range on array range checking for poke descriptors
scsi: storvsc: Remove WQ_MEM_RECLAIM from storvsc_error_wq
scsi: ufs: core: Enable link lost interrupt
perf/x86/intel/uncore: Fix broken read_counter() for SNB IMC PMU
perf python: Fix build when PYTHON_CONFIG is user supplied
blk-mq: fix io hung due to missing commit_rqs
Documentation/ABI: Mention retbleed vulnerability info file for sysfs
arm64: Fix match_list for erratum 1286807 on Arm Cortex-A76
md: call __md_stop_writes in md_stop
Revert "md-raid: destroy the bitmap after destroying the thread"
mm/hugetlb: fix hugetlb not supporting softdirty tracking
xen/privcmd: fix error exit of privcmd_ioctl_dm_op()
ACPI: processor: Remove freq Qos request for all CPUs
s390: fix double free of GS and RI CBs on fork() failure
asm-generic: sections: refactor memory_intersects
loop: Check for overflow while configuring loop
x86/bugs: Add "unknown" reporting for MMIO Stale Data
x86/unwind/orc: Unwind ftrace trampolines with correct ORC entry
perf/x86/lbr: Enable the branch type for the Arch LBR by default
btrfs: check if root is readonly while setting security xattr
btrfs: add info when mount fails due to stale replace target
btrfs: replace: drop assert for suspended replace
btrfs: fix silent failure when deleting root reference
ionic: fix up issues with handling EAGAIN on FW cmds
rxrpc: Fix locking in rxrpc's sendmsg
ixgbe: stop resetting SYSTIME in ixgbe_ptp_start_cyclecounter
net: Fix a data-race around sysctl_somaxconn.
net: Fix data-races around sysctl_devconf_inherit_init_net.
net: Fix data-races around sysctl_fb_tunnels_only_for_init_net.
net: Fix a data-race around netdev_budget_usecs.
net: Fix a data-race around netdev_budget.
net: Fix a data-race around sysctl_net_busy_read.
net: Fix a data-race around sysctl_net_busy_poll.
net: Fix a data-race around sysctl_tstamp_allow_data.
net: Fix data-races around sysctl_optmem_max.
bpf: Folding omem_charge() into sk_storage_charge()
ratelimit: Fix data-races in ___ratelimit().
net: Fix data-races around netdev_tstamp_prequeue.
net: Fix data-races around netdev_max_backlog.
net: Fix data-races around weight_p and dev_weight_[rt]x_bias.
net: Fix data-races around sysctl_[rw]mem_(max|default).
net: Fix data-races around sysctl_[rw]mem(_offset)?.
tcp: tweak len/truesize ratio for coalesce candidates
netfilter: nf_tables: disallow binding to already bound chain
netfilter: nf_tables: disallow jump to implicit chain from set element
netfilter: nf_tables: upfront validation of data via nft_data_init()
netfilter: bitwise: improve error goto labels
netfilter: nft_cmp: optimize comparison for 16-bytes
netfilter: nf_tables: consolidate rule verdict trace call
netfilter: nftables: remove redundant assignment of variable err
netfilter: nft_tunnel: restrict it to netdev family
netfilter: nft_osf: restrict osf to ipv4, ipv6 and inet families
netfilter: nf_tables: do not leave chain stats enabled on error
netfilter: nft_payload: do not truncate csum_offset and csum_type
netfilter: nft_payload: report ERANGE for too long offset and length
bnxt_en: fix NQ resource accounting during vf creation on 57500 chips
netfilter: ebtables: reject blobs that don't provide all entry points
net: ipvtap - add __init/__exit annotations to module init/exit funcs
bonding: 802.3ad: fix no transmission of LACPDUs
net: moxa: get rid of asymmetry in DMA mapping/unmapping
net: ipa: don't assume SMEM is page-aligned
net/mlx5e: Properly disable vlan strip on non-UL reps
ice: xsk: prohibit usage of non-balanced queue id
ice: xsk: Force rings to be sized to power of 2
nfc: pn533: Fix use-after-free bugs caused by pn532_cmd_timeout
rose: check NULL rose_loopback_neigh->loopback
mm/smaps: don't access young/dirty bit if pte unpresent
mm/huge_memory.c: use helper function migration_entry_to_page()
SUNRPC: RPC level errors should set task->tk_rpc_status
NFSv4.2 fix problems with __nfs42_ssc_open
NFS: Don't allocate nfs_fattr on the stack in __nfs42_ssc_open()
xfrm: policy: fix metadata dst->dev xmit null pointer dereference
af_key: Do not call xfrm_probe_algs in parallel
xfrm: clone missing x->lastused in xfrm_do_migrate
xfrm: fix refcount leak in __xfrm_policy_check()
kernel/sched: Remove dl_boosted flag comment
xfs: only bother with sync_filesystem during readonly remount
xfs: return errors in xfs_fs_sync_fs
vfs: make sync_filesystem return errors from ->sync_fs
fs: remove __sync_filesystem
xfs: reject crazy array sizes being fed to XFS_IOC_GETBMAP*
xfs: prevent a WARN_ONCE() in xfs_ioc_attr_list()
pinctrl: amd: Don't save/restore interrupt status and wake status bits
kernel/sys_ni: add compat entry for fadvise64_64
parisc: Fix exception handler for fldw and fstw instructions
audit: fix potential double free on error path from fsnotify_add_inode_mark
Revert "ALSA: control: Use deferred fasync helper"
Revert "block: remove the request_queue to argument request based tracepoints"
Revert "blktrace: Trace remapped requests correctly"
Revert "USB: HCD: Fix URB giveback issue in tasklet function"
Linux 5.10.139
kbuild: dummy-tools: avoid tmpdir leak in dummy gcc
Linux 5.10.138
tee: fix memory leak in tee_shm_register()
bpf: Fix KASAN use-after-free Read in compute_effective_progs
qrtr: Convert qrtr_ports from IDR to XArray
PCI/ERR: Retain status from error notification
can: j1939: j1939_session_destroy(): fix memory leak of skbs
can: j1939: j1939_sk_queue_activate_next_locked(): replace WARN_ON_ONCE with netdev_warn_once()
tracing/probes: Have kprobes and uprobes use $COMM too
netfilter: nf_tables: fix audit memory leak in nf_tables_commit
netfilter: nftables: fix a warning message in nf_tables_commit_audit_collect()
MIPS: tlbex: Explicitly compare _PAGE_NO_EXEC against 0
video: fbdev: i740fb: Check the argument of i740_calc_vclk()
powerpc/64: Init jump labels before parse_early_param()
smb3: check xattr value length earlier
f2fs: fix to do sanity check on segment type in build_sit_entries()
f2fs: fix to avoid use f2fs_bug_on() in f2fs_new_node_page()
ALSA: control: Use deferred fasync helper
ALSA: timer: Use deferred fasync helper
ALSA: core: Add async signal helpers
powerpc/32: Don't always pass -mcpu=powerpc to the compiler
watchdog: export lockup_detector_reconfigure
RISC-V: Add fast call path of crash_kexec()
riscv: mmap with PROT_WRITE but no PROT_READ is invalid
modules: Ensure natural alignment for .altinstructions and __bug_table sections
mips: cavium-octeon: Fix missing of_node_put() in octeon2_usb_clocks_start
vfio: Clear the caps->buf to NULL after free
tty: serial: Fix refcount leak bug in ucc_uart.c
lib/list_debug.c: Detect uninitialized lists
ext4: avoid resizing to a partial cluster size
ext4: avoid remove directory when directory is corrupted
drivers:md:fix a potential use-after-free bug
nvmet-tcp: fix lockdep complaint on nvmet_tcp_wq flush during queue teardown
md: Notify sysfs sync_completed in md_reap_sync_thread()
dmaengine: sprd: Cleanup in .remove() after pm_runtime_get_sync() failed
selftests/kprobe: Do not test for GRP/ without event failures
csky/kprobe: reclaim insn_slot on kprobe unregistration
RDMA/rxe: Limit the number of calls to each tasklet
um: add "noreboot" command line option for PANIC_TIMEOUT=-1 setups
PCI/ACPI: Guard ARM64-specific mcfg_quirks
cxl: Fix a memory leak in an error handling path
pinctrl: intel: Check against matching data instead of ACPI companion
gadgetfs: ep_io - wait until IRQ finishes
scsi: lpfc: Prevent buffer overflow crashes in debugfs with malformed user input
clk: qcom: clk-alpha-pll: fix clk_trion_pll_configure description
zram: do not lookup algorithm in backends table
uacce: Handle parent device removal or parent driver module rmmod
clk: qcom: ipq8074: dont disable gcc_sleep_clk_src
vboxguest: Do not use devm for irq
usb: dwc2: gadget: remove D+ pull-up while no vbus with usb-role-switch
usb: renesas: Fix refcount leak bug
usb: host: ohci-ppc-of: Fix refcount leak bug
clk: ti: Stop using legacy clkctrl names for omap4 and 5
drm/meson: Fix overflow implicit truncation warnings
irqchip/tegra: Fix overflow implicit truncation warnings
usb: gadget: uvc: call uvc uvcg_warn on completed status instead of uvcg_info
usb: cdns3 fix use-after-free at workaround 2
platform/chrome: cros_ec_proto: don't show MKBP version if unsupported
PCI: Add ACS quirk for Broadcom BCM5750x NICs
drm/sun4i: dsi: Prevent underflow when computing packet sizes
netfilter: add helper function to set up the nfnetlink header and use it
netfilter: nftables: add helper function to set the base sequence number
audit: log nftables configuration change events once per table
drm/meson: Fix refcount bugs in meson_vpu_has_available_connectors()
ASoC: SOF: intel: move sof_intel_dsp_desc() forward
locking/atomic: Make test_and_*_bit() ordered on failure
gcc-plugins: Undefine LATENT_ENTROPY_PLUGIN when plugin disabled for a file
kbuild: fix the modules order between drivers and libs
igb: Add lock to avoid data race
stmmac: intel: Add a missing clk_disable_unprepare() call in intel_eth_pci_remove()
fec: Fix timer capture timing in `fec_ptp_enable_pps()`
i40e: Fix to stop tx_timeout recovery if GLOBR fails
regulator: pca9450: Remove restrictions for regulator-name
i2c: imx: Make sure to unregister adapter on remove()
ice: Ignore EEXIST when setting promisc mode
net: dsa: sja1105: fix buffer overflow in sja1105_setup_devlink_regions()
net: genl: fix error path memory leak in policy dumping
net: dsa: felix: fix ethtool 256-511 and 512-1023 TX packet counters
net: dsa: microchip: ksz9477: fix fdb_dump last invalid entry
net: moxa: pass pdev instead of ndev to DMA functions
net: dsa: mv88e6060: prevent crash on an unused port
spi: meson-spicc: add local pow2 clock ops to preserve rate between messages
powerpc/pci: Fix get_phb_number() locking
netfilter: nf_tables: check NFT_SET_CONCAT flag if field_count is specified
netfilter: nf_tables: validate NFTA_SET_ELEM_OBJREF based on NFT_SET_OBJECT flag
netfilter: nf_tables: really skip inactive sets when allocating name
ASoC: tas2770: Fix handling of mute/unmute
ASoC: tas2770: Drop conflicting set_bias_level power setting
ASoC: tas2770: Allow mono streams
ASoC: tas2770: Set correct FSYNC polarity
iavf: Fix adminq error handling
nios2: add force_successful_syscall_return()
nios2: restarts apply only to the first sigframe we build...
nios2: fix syscall restart checks
nios2: traced syscall does need to check the syscall number
nios2: don't leave NULLs in sys_call_table[]
nios2: page fault et.al. are *not* restartable syscalls...
dpaa2-eth: trace the allocated address instead of page struct
perf probe: Fix an error handling path in 'parse_perf_probe_command()'
geneve: fix TOS inheriting for ipv4
atm: idt77252: fix use-after-free bugs caused by tst_timer
xen/xenbus: fix return type in xenbus_file_read()
nfp: ethtool: fix the display error of `ethtool -m DEVNAME`
NTB: ntb_tool: uninitialized heap data in tool_fn_write()
tools build: Switch to new openssl API for test-libcrypto
kbuild: dummy-tools: avoid tmpdir leak in dummy gcc
ceph: don't leak snap_rwsem in handle_cap_grant
tools/vm/slabinfo: use alphabetic order when two values are equal
ceph: use correct index when encoding client supported features
dt-bindings: clock: qcom,gcc-msm8996: add more GCC clock sources
dt-bindings: arm: qcom: fix MSM8916 MTP compatibles
vsock: Set socket state back to SS_UNCONNECTED in vsock_connect_timeout()
vsock: Fix memory leak in vsock_connect()
plip: avoid rcu debug splat
ipv6: do not use RT_TOS for IPv6 flowlabel
geneve: do not use RT_TOS for IPv6 flowlabel
ACPI: property: Return type of acpi_add_nondev_subnodes() should be bool
pinctrl: qcom: sm8250: Fix PDC map
pinctrl: sunxi: Add I/O bias setting for H6 R-PIO
pinctrl: qcom: msm8916: Allow CAMSS GP clocks to be muxed
pinctrl: nomadik: Fix refcount leak in nmk_pinctrl_dt_subnode_to_map
net: bgmac: Fix a BUG triggered by wrong bytes_compl
devlink: Fix use-after-free after a failed reload
virtio_net: fix memory leak inside XPD_TX with mergeable
SUNRPC: Reinitialise the backchannel request buffers before reuse
sunrpc: fix expiry of auth creds
net: atlantic: fix aq_vec index out of range error
can: mcp251x: Fix race condition on receive interrupt
bpf: Check the validity of max_rdwr_access for sock local storage map iterator
bpf: Acquire map uref in .init_seq_private for sock{map,hash} iterator
bpf: Acquire map uref in .init_seq_private for sock local storage map iterator
bpf: Acquire map uref in .init_seq_private for hash map iterator
bpf: Acquire map uref in .init_seq_private for array map iterator
NFSv4/pnfs: Fix a use-after-free bug in open
NFSv4.1: RECLAIM_COMPLETE must handle EACCES
NFSv4: Fix races in the legacy idmapper upcall
NFSv4.1: Handle NFS4ERR_DELAY replies to OP_SEQUENCE correctly
NFSv4.1: Don't decrease the value of seq_nr_highest_sent
Documentation: ACPI: EINJ: Fix obsolete example
apparmor: Fix memleak in aa_simple_write_to_buffer()
apparmor: fix reference count leak in aa_pivotroot()
apparmor: fix overlapping attachment computation
apparmor: fix setting unconfined mode on a loaded profile
apparmor: fix aa_label_asxprint return check
apparmor: Fix failed mount permission check error message
apparmor: fix absroot causing audited secids to begin with =
apparmor: fix quiet_denied for file rules
can: ems_usb: fix clang's -Wunaligned-access warning
ALSA: usb-audio: More comprehensive mixer map for ASUS ROG Zenith II
tracing: Have filter accept "common_cpu" to be consistent
btrfs: fix lost error handling when looking up extended ref on log replay
mmc: meson-gx: Fix an error handling path in meson_mmc_probe()
mmc: pxamci: Fix an error handling path in pxamci_probe()
mmc: pxamci: Fix another error handling path in pxamci_probe()
ata: libata-eh: Add missing command name
rds: add missing barrier to release_refill
x86/mm: Use proper mask when setting PUD mapping
ALSA: hda/realtek: Add quirk for Clevo NS50PU, NS70PU
ALSA: info: Fix llseek return value when using callback
Linux 5.10.137
btrfs: raid56: don't trust any cached sector in __raid56_parity_recover()
btrfs: only write the sectors in the vertical stripe which has data stripes
sched/fair: Fix fault in reweight_entity
net_sched: cls_route: disallow handle of 0
net/9p: Initialize the iounit field during fid creation
tee: add overflow check in register_shm_helper()
kvm: x86/pmu: Fix the compare function used by the pmu event filter
mtd: rawnand: arasan: Prevent an unsupported configuration
Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm regression
Revert "net: usb: ax88179_178a needs FLAG_SEND_ZLP"
drm/vc4: change vc4_dma_range_matches from a global to static
drm/bridge: tc358767: Fix (e)DP bridge endpoint parsing in dedicated function
Revert "mwifiex: fix sleep in atomic context bugs caused by dev_coredumpv"
tcp: fix over estimation in sk_forced_mem_schedule()
mac80211: fix a memory leak where sta_info is not freed
KVM: x86: Avoid theoretical NULL pointer dereference in kvm_irq_delivery_to_apic_fast()
KVM: x86: Check lapic_in_kernel() before attempting to set a SynIC irq
KVM: Add infrastructure and macro to mark VM as bugged
net_sched: cls_route: remove from list when handle is 0
dm raid: fix address sanitizer warning in raid_status
dm raid: fix address sanitizer warning in raid_resume
ext4: correct the misjudgment in ext4_iget_extra_inode
ext4: correct max_inline_xattr_value_size computing
ext4: fix extent status tree race in writeback error recovery path
ext4: update s_overhead_clusters in the superblock during an on-line resize
ext4: fix use-after-free in ext4_xattr_set_entry
ext4: make sure ext4_append() always allocates new block
ext4: fix warning in ext4_iomap_begin as race between bmap and write
ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h
ext4: check if directory block is within i_size
tracing: Use a struct alignof to determine trace event field alignment
tpm: eventlog: Fix section mismatch for DEBUG_SECTION_MISMATCH
KEYS: asymmetric: enforce SM2 signature use pkey algo
xen-blkfront: Apply 'feature_persistent' parameter when connect
xen-blkback: Apply 'feature_persistent' parameter when connect
xen-blkback: fix persistent grants negotiation
KVM: x86/pmu: Ignore pmu->global_ctrl check if vPMU doesn't support global_ctrl
KVM: VMX: Mark all PERF_GLOBAL_(OVF)_CTRL bits reserved if there's no vPMU
KVM: x86/pmu: Introduce the ctrl_mask value for fixed counter
KVM: x86/pmu: Use different raw event masks for AMD and Intel
KVM: x86/pmu: Use binary search to check filtered events
KVM: x86/pmu: preserve IA32_PERF_CAPABILITIES across CPUID refresh
KVM: nVMX: Inject #UD if VMXON is attempted with incompatible CR0/CR4
KVM: x86: Move vendor CR4 validity check to dedicated kvm_x86_ops hook
KVM: SVM: Drop VMXE check from svm_set_cr4()
KVM: VMX: Drop explicit 'nested' check from vmx_set_cr4()
KVM: VMX: Drop guest CPUID check for VMXE in vmx_set_cr4()
ACPI: CPPC: Do not prevent CPPC from working in the future
btrfs: reset block group chunk force if we have to wait
btrfs: reject log replay if there is unsupported RO compat flag
um: Allow PM with suspend-to-idle
timekeeping: contribute wall clock to rng on time change
dm thin: fix use-after-free crash in dm_sm_register_threshold_callback
kexec, KEYS, s390: Make use of built-in and secondary keyring for signature verification
dm writecache: set a default MAX_WRITEBACK_JOBS
serial: 8250: Fold EndRun device support into OxSemi Tornado code
serial: 8250_pci: Replace dev_*() by pci_*() macros
serial: 8250_pci: Refactor the loop in pci_ite887x_init()
serial: 8250: Correct the clock for OxSemi PCIe devices
serial: 8250: Dissociate 4MHz Titan ports from Oxford ports
PCI/AER: Iterate over error counters instead of error strings
PCI/ERR: Recover from RCEC AER errors
PCI/ERR: Add pci_walk_bridge() to pcie_do_recovery()
PCI/ERR: Avoid negated conditional for clarity
PCI/ERR: Use "bridge" for clarity in pcie_do_recovery()
PCI/ERR: Simplify by computing pci_pcie_type() once
PCI/ERR: Simplify by using pci_upstream_bridge()
PCI/ERR: Rename reset_link() to reset_subordinates()
PCI/ERR: Bind RCEC devices to the Root Port driver
PCI/AER: Write AER Capability only when we control it
iommu/vt-d: avoid invalid memory access via node_online(NUMA_NO_NODE)
KVM: x86: Signal #GP, not -EPERM, on bad WRMSR(MCi_CTL/STATUS)
KVM: set_msr_mce: Permit guests to ignore single-bit ECC errors
intel_th: pci: Add Raptor Lake-S CPU support
intel_th: pci: Add Raptor Lake-S PCH support
intel_th: pci: Add Meteor Lake-P support
firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails
usbnet: smsc95xx: Avoid link settings race on interrupt reception
usbnet: smsc95xx: Don't clear read-only PHY interrupt
mtd: rawnand: arasan: Fix clock rate in NV-DDR
mtd: rawnand: arasan: Support NV-DDR interface
mtd: rawnand: arasan: Fix a macro parameter
mtd: rawnand: Add NV-DDR timings
mtd: rawnand: arasan: Check the proposed data interface is supported
mtd: rawnand: Add a helper to clarify the interface configuration
drm/vc4: drv: Adopt the dma configuration from the HVS or V3D component
HID: hid-input: add Surface Go battery quirk
HID: Ignore battery for Elan touchscreen on HP Spectre X360 15-df0xxx
drm/mediatek: Keep dsi as LP00 before dcs cmds transfer
drm/mediatek: Allow commands to be sent during video mode
drm/i915/dg1: Update DMC_DEBUG3 register
spmi: trace: fix stack-out-of-bound access in SPMI tracing functions
__follow_mount_rcu(): verify that mount_lock remains unchanged
Input: gscps2 - check return value of ioremap() in gscps2_probe()
posix-cpu-timers: Cleanup CPU timers before freeing them during exec
x86/olpc: fix 'logical not is only applied to the left hand side'
ftrace/x86: Add back ftrace_expected assignment
x86/bugs: Enable STIBP for IBPB mitigated RETBleed
scsi: qla2xxx: Fix losing FCP-2 targets during port perturbation tests
scsi: qla2xxx: Fix losing FCP-2 targets on long port disable with I/Os
scsi: qla2xxx: Fix erroneous mailbox timeout after PCI error injection
scsi: qla2xxx: Turn off multi-queue for 8G adapters
scsi: qla2xxx: Fix discovery issues in FC-AL topology
scsi: zfcp: Fix missing auto port scan and thus missing target ports
video: fbdev: s3fb: Check the size of screen before memset_io()
video: fbdev: arkfb: Check the size of screen before memset_io()
video: fbdev: vt8623fb: Check the size of screen before memset_io()
x86/entry: Build thunk_$(BITS) only if CONFIG_PREEMPTION=y
sched: Fix the check of nr_running at queue wakelist
tools/thermal: Fix possible path truncations
video: fbdev: arkfb: Fix a divide-by-zero bug in ark_set_pixclock()
x86/numa: Use cpumask_available instead of hardcoded NULL check
sched, cpuset: Fix dl_cpu_busy() panic due to empty cs->cpus_allowed
sched/deadline: Merge dl_task_can_attach() and dl_cpu_busy()
scripts/faddr2line: Fix vmlinux detection on arm64
genelf: Use HAVE_LIBCRYPTO_SUPPORT, not the never defined HAVE_LIBCRYPTO
powerpc/pci: Fix PHB numbering when using opal-phbid
kprobes: Forbid probing on trampoline and BPF code areas
perf symbol: Fail to read phdr workaround
powerpc/cell/axon_msi: Fix refcount leak in setup_msi_msg_address
powerpc/xive: Fix refcount leak in xive_get_max_prio
powerpc/spufs: Fix refcount leak in spufs_init_isolated_loader
f2fs: fix to remove F2FS_COMPR_FL and tag F2FS_NOCOMP_FL at the same time
f2fs: write checkpoint during FG_GC
f2fs: don't set GC_FAILURE_PIN for background GC
powerpc/pci: Prefer PCI domain assignment via DT 'linux,pci-domain' and alias
powerpc/32: Do not allow selection of e5500 or e6500 CPUs on PPC32
ASoC: mchp-spdifrx: disable end of block interrupt on failures
video: fbdev: sis: fix typos in SiS_GetModeID()
video: fbdev: amba-clcd: Fix refcount leak bugs
watchdog: armada_37xx_wdt: check the return value of devm_ioremap() in armada_37xx_wdt_probe()
ASoC: audio-graph-card: Add of_node_put() in fail path
fuse: Remove the control interface for virtio-fs
ASoC: qcom: q6dsp: Fix an off-by-one in q6adm_alloc_copp()
ASoC: fsl_easrc: use snd_pcm_format_t type for sample_format
s390/zcore: fix race when reading from hardware system area
s390/dump: fix old lowcore virtual vs physical address confusion
perf tools: Fix dso_id inode generation comparison
iommu/arm-smmu: qcom_iommu: Add of_node_put() when breaking out of loop
mfd: max77620: Fix refcount leak in max77620_initialise_fps
mfd: t7l66xb: Drop platform disable callback
remoteproc: sysmon: Wait for SSCTL service to come up
lib/smp_processor_id: fix imbalanced instrumentation_end() call
kfifo: fix kfifo_to_user() return type
rpmsg: qcom_smd: Fix refcount leak in qcom_smd_parse_edge
iommu/exynos: Handle failed IOMMU device registration properly
tty: n_gsm: fix missing corner cases in gsmld_poll()
tty: n_gsm: fix DM command
tty: n_gsm: fix wrong T1 retry count handling
vfio/ccw: Do not change FSM state in subchannel event
vfio/mdev: Make to_mdev_device() into a static inline
vfio: Split creation of a vfio_device into init and register ops
vfio: Simplify the lifetime logic for vfio_device
vfio: Remove extra put/gets around vfio_device->group
remoteproc: qcom: wcnss: Fix handling of IRQs
ASoC: qcom: Fix missing of_node_put() in asoc_qcom_lpass_cpu_platform_probe()
tty: n_gsm: fix race condition in gsmld_write()
tty: n_gsm: fix packet re-transmission without open control channel
tty: n_gsm: fix non flow control frames during mux flow off
tty: n_gsm: fix wrong queuing behavior in gsm_dlci_data_output()
tty: n_gsm: fix user open not possible at responder until initiator open
tty: n_gsm: Delete gsmtty open SABM frame when config requester
ASoC: samsung: change gpiod_speaker_power and rx1950_audio from global to static variables
powerpc/perf: Optimize clearing the pending PMI and remove WARN_ON for PMI check in power_pmu_disable
ASoC: samsung: h1940_uda1380: include proepr GPIO consumer header
profiling: fix shift too large makes kernel panic
selftests/livepatch: better synchronize test_klp_callbacks_busy
remoteproc: k3-r5: Fix refcount leak in k3_r5_cluster_of_init
rpmsg: mtk_rpmsg: Fix circular locking dependency
ASoC: codecs: wcd9335: move gains from SX_TLV to S8_TLV
ASoC: codecs: msm8916-wcd-digital: move gains from SX_TLV to S8_TLV
serial: 8250_dw: Store LSR into lsr_saved_flags in dw8250_tx_wait_empty()
serial: 8250: Export ICR access helpers for internal use
ASoC: mediatek: mt8173-rt5650: Fix refcount leak in mt8173_rt5650_dev_probe
ASoC: codecs: da7210: add check for i2c_add_driver
ASoC: mt6797-mt6351: Fix refcount leak in mt6797_mt6351_dev_probe
ASoC: mediatek: mt8173: Fix refcount leak in mt8173_rt5650_rt5676_dev_probe
ASoC: samsung: Fix error handling in aries_audio_probe
ASoC: cros_ec_codec: Fix refcount leak in cros_ec_codec_platform_probe
opp: Fix error check in dev_pm_opp_attach_genpd()
usb: cdns3: Don't use priv_dev uninitialized in cdns3_gadget_ep_enable()
jbd2: fix assertion 'jh->b_frozen_data == NULL' failure when journal aborted
ext4: recover csum seed of tmp_inode after migrating to extents
jbd2: fix outstanding credits assert in jbd2_journal_commit_transaction()
nvme: use command_id instead of req->tag in trace_nvme_complete_rq()
null_blk: fix ida error handling in null_add_dev()
RDMA/rxe: Fix error unwind in rxe_create_qp()
RDMA/mlx5: Add missing check for return value in get namespace flow
selftests: kvm: set rax before vmcall
mm/mmap.c: fix missing call to vm_unacct_memory in mmap_region
RDMA/srpt: Fix a use-after-free
RDMA/srpt: Introduce a reference count in struct srpt_device
RDMA/srpt: Duplicate port name members
platform/olpc: Fix uninitialized data in debugfs write
usb: cdns3: change place of 'priv_ep' assignment in cdns3_gadget_ep_dequeue(), cdns3_gadget_ep_enable()
USB: serial: fix tty-port initialized comments
PCI: tegra194: Fix link up retry sequence
PCI: tegra194: Fix Root Port interrupt handling
HID: alps: Declare U1_UNICORN_LEGACY support
mmc: cavium-thunderx: Add of_node_put() when breaking out of loop
mmc: cavium-octeon: Add of_node_put() when breaking out of loop
HID: mcp2221: prevent a buffer overflow in mcp_smbus_write()
gpio: gpiolib-of: Fix refcount bugs in of_mm_gpiochip_add_data()
RDMA/hfi1: fix potential memory leak in setup_base_ctxt()
RDMA/siw: Fix duplicated reported IW_CM_EVENT_CONNECT_REPLY event
RDMA/hns: Fix incorrect clearing of interrupt status register
RDMA/qedr: Fix potential memory leak in __qedr_alloc_mr()
RDMA/qedr: Improve error logs for rdma_alloc_tid error return
RDMA/rtrs-srv: Fix modinfo output for stringify
RDMA/rtrs: Avoid Wtautological-constant-out-of-range-compare
RDMA/rtrs: Define MIN_CHUNK_SIZE
um: random: Don't initialise hwrng struct with zero
interconnect: imx: fix max_node_id
eeprom: idt_89hpesx: uninitialized data in idt_dbgfs_csr_write()
usb: dwc3: qcom: fix missing optional irq warnings
usb: dwc3: core: Do not perform GCTL_CORE_SOFTRESET during bootup
usb: dwc3: core: Deprecate GCTL.CORESOFTRESET
usb: aspeed-vhub: Fix refcount leak bug in ast_vhub_init_desc()
usb: gadget: udc: amd5536 depends on HAS_DMA
xtensa: iss: fix handling error cases in iss_net_configure()
xtensa: iss/network: provide release() callback
scsi: smartpqi: Fix DMA direction for RAID requests
PCI: qcom: Set up rev 2.1.0 PARF_PHY before enabling clocks
PCI/portdrv: Don't disable AER reporting in get_port_device_capability()
KVM: s390: pv: leak the topmost page table when destroy fails
mmc: block: Add single read for 4k sector cards
mmc: sdhci-of-at91: fix set_uhs_signaling rewriting of MC1R
memstick/ms_block: Fix a memory leak
memstick/ms_block: Fix some incorrect memory allocation
mmc: sdhci-of-esdhc: Fix refcount leak in esdhc_signal_voltage_switch
staging: rtl8192u: Fix sleep in atomic context bug in dm_fsync_timer_callback
intel_th: msu: Fix vmalloced buffers
intel_th: msu-sink: Potential dereference of null pointer
intel_th: Fix a resource leak in an error handling path
PCI: endpoint: Don't stop controller when unbinding endpoint function
dmaengine: sf-pdma: Add multithread support for a DMA channel
dmaengine: sf-pdma: apply proper spinlock flags in sf_pdma_prep_dma_memcpy()
KVM: arm64: Don't return from void function
soundwire: bus_type: fix remove and shutdown support
PCI: dwc: Always enable CDM check if "snps,enable-cdm-check" exists
PCI: dwc: Deallocate EPC memory on dw_pcie_ep_init() errors
PCI: dwc: Add unroll iATU space support to dw_pcie_disable_atu()
clk: qcom: camcc-sdm845: Fix topology around titan_top power domain
clk: qcom: ipq8074: set BRANCH_HALT_DELAY flag for UBI clocks
clk: qcom: ipq8074: fix NSS port frequency tables
clk: qcom: ipq8074: SW workaround for UBI32 PLL lock
clk: qcom: ipq8074: fix NSS core PLL-s
usb: host: xhci: use snprintf() in xhci_decode_trb()
clk: qcom: clk-krait: unlock spin after mux completion
driver core: fix potential deadlock in __driver_attach
misc: rtsx: Fix an error handling path in rtsx_pci_probe()
dmaengine: dw-edma: Fix eDMA Rd/Wr-channels and DMA-direction semantics
mwifiex: fix sleep in atomic context bugs caused by dev_coredumpv
mwifiex: Ignore BTCOEX events from the 88W8897 firmware
KVM: Don't set Accessed/Dirty bits for ZERO_PAGE
clk: mediatek: reset: Fix written reset bit offset
iio: accel: bma400: Reordering of header files
platform/chrome: cros_ec: Always expose last resume result
iio: accel: bma400: Fix the scale min and max macro values
netfilter: xtables: Bring SPDX identifier back
usb: xhci: tegra: Fix error check
usb: gadget: tegra-xudc: Fix error check in tegra_xudc_powerdomain_init()
usb: ohci-nxp: Fix refcount leak in ohci_hcd_nxp_probe
usb: host: Fix refcount leak in ehci_hcd_ppc_of_probe
fpga: altera-pr-ip: fix unsigned comparison with less than zero
mtd: st_spi_fsm: Add a clk_disable_unprepare() in .probe()'s error path
mtd: partitions: Fix refcount leak in parse_redboot_of
mtd: sm_ftl: Fix deadlock caused by cancel_work_sync in sm_release
HID: cp2112: prevent a buffer overflow in cp2112_xfer()
PCI: tegra194: Fix PM error handling in tegra_pcie_config_ep()
mtd: rawnand: meson: Fix a potential double free issue
mtd: maps: Fix refcount leak in ap_flash_init
mtd: maps: Fix refcount leak in of_flash_probe_versatile
clk: renesas: r9a06g032: Fix UART clkgrp bitsel
wireguard: allowedips: don't corrupt stack when detecting overflow
wireguard: ratelimiter: use hrtimer in selftest
dccp: put dccp_qpolicy_full() and dccp_qpolicy_push() in the same lock
net: ionic: fix error check for vlan flags in ionic_set_nic_features()
net: rose: fix netdev reference changes
netdevsim: Avoid allocation warnings triggered from user space
iavf: Fix max_rate limiting
net: allow unbound socket for packets in VRF when tcp_l3mdev_accept set
tcp: Fix data-races around sysctl_tcp_l3mdev_accept.
ipv6: add READ_ONCE(sk->sk_bound_dev_if) in INET6_MATCH()
tcp: sk->sk_bound_dev_if once in inet_request_bound_dev_if()
inet: add READ_ONCE(sk->sk_bound_dev_if) in INET_MATCH()
crypto: hisilicon/sec - fix auth key size error
crypto: inside-secure - Add missing MODULE_DEVICE_TABLE for of
crypto: hisilicon/hpre - don't use GFP_KERNEL to alloc mem during softirq
net/mlx5e: Fix the value of MLX5E_MAX_RQ_NUM_MTTS
net/mlx5e: Remove WARN_ON when trying to offload an unsupported TLS cipher/version
media: cedrus: hevc: Add check for invalid timestamp
wifi: libertas: Fix possible refcount leak in if_usb_probe()
wifi: iwlwifi: mvm: fix double list_add at iwl_mvm_mac_wake_tx_queue
wifi: wil6210: debugfs: fix uninitialized variable use in `wil_write_file_wmi()`
i2c: mux-gpmux: Add of_node_put() when breaking out of loop
i2c: cadence: Support PEC for SMBus block read
Bluetooth: hci_intel: Add check for platform_driver_register
can: pch_can: pch_can_error(): initialize errc before using it
can: error: specify the values of data[5..7] of CAN error frames
can: usb_8dev: do not report txerr and rxerr during bus-off
can: kvaser_usb_leaf: do not report txerr and rxerr during bus-off
can: kvaser_usb_hydra: do not report txerr and rxerr during bus-off
can: sun4i_can: do not report txerr and rxerr during bus-off
can: hi311x: do not report txerr and rxerr during bus-off
can: sja1000: do not report txerr and rxerr during bus-off
can: rcar_can: do not report txerr and rxerr during bus-off
can: pch_can: do not report txerr and rxerr during bus-off
selftests/bpf: fix a test for snprintf() overflow
wifi: p54: add missing parentheses in p54_flush()
wifi: p54: Fix an error handling path in p54spi_probe()
wifi: wil6210: debugfs: fix info leak in wil_write_file_wmi()
fs: check FMODE_LSEEK to control internal pipe splicing
bpf: Fix subprog names in stack traces.
selftests: timers: clocksource-switch: fix passing errors from child
selftests: timers: valid-adjtimex: build fix for newer toolchains
libbpf: Fix the name of a reused map
tcp: make retransmitted SKB fit into the send window
drm/exynos/exynos7_drm_decon: free resources when clk_set_parent() failed.
mediatek: mt76: mac80211: Fix missing of_node_put() in mt76_led_init()
mt76: mt76x02u: fix possible memory leak in __mt76x02u_mcu_send_msg
media: platform: mtk-mdp: Fix mdp_ipi_comm structure alignment
crypto: hisilicon - Kunpeng916 crypto driver don't sleep when in softirq
crypto: hisilicon/sec - don't sleep when in softirq
crypto: hisilicon/sec - fixes some coding style
drm/msm/mdp5: Fix global state lock backoff
net: hinic: avoid kernel hung in hinic_get_stats64()
net: hinic: fix bug that ethtool get wrong stats
hinic: Use the bitmap API when applicable
lib: bitmap: provide devm_bitmap_alloc() and devm_bitmap_zalloc()
lib: bitmap: order includes alphabetically
drm: bridge: sii8620: fix possible off-by-one
drm/mediatek: dpi: Only enable dpi after the bridge is enabled
drm/mediatek: dpi: Remove output format of YUV
drm/rockchip: Fix an error handling path rockchip_dp_probe()
drm/rockchip: vop: Don't crash for invalid duplicate_state()
selftests/xsk: Destroy BPF resources only when ctx refcount drops to 0
crypto: arm64/gcm - Select AEAD for GHASH_ARM64_CE
drm/vc4: hdmi: Correct HDMI timing registers for interlaced modes
drm/vc4: hdmi: Fix timings for interlaced modes
drm/vc4: hdmi: Limit the BCM2711 to the max without scrambling
drm/vc4: hdmi: Don't access the connector state in reset if kmalloc fails
drm/vc4: hdmi: Avoid full hdmi audio fifo writes
drm/vc4: hdmi: Remove firmware logic for MAI threshold setting
drm/vc4: dsi: Add correct stop condition to vc4_dsi_encoder_disable iteration
drm/vc4: dsi: Fix dsi0 interrupt support
drm/vc4: dsi: Register dsi0 as the correct vc4 encoder type
drm/vc4: dsi: Introduce a variant structure
drm/vc4: dsi: Use snprintf for the PHY clocks instead of an array
drm/vc4: drv: Remove the DSI pointer in vc4_drv
drm/vc4: dsi: Correct pixel order for DSI0
drm/vc4: dsi: Correct DSI divider calculations
drm/vc4: plane: Fix margin calculations for the right/bottom edges
drm/vc4: plane: Remove subpixel positioning check
media: tw686x: Fix memory leak in tw686x_video_init
media: v4l2-mem2mem: prevent pollerr when last_buffer_dequeued is set
media: hdpvr: fix error value returns in hdpvr_read
drm/mcde: Fix refcount leak in mcde_dsi_bind
drm: bridge: adv7511: Add check for mipi_dsi_driver_register
crypto: ccp - During shutdown, check SEV data pointer before using
test_bpf: fix incorrect netdev features
drm/radeon: fix incorrrect SPDX-License-Identifiers
wifi: iwlegacy: 4965: fix potential off-by-one overflow in il4965_rs_fill_link_cmd()
ath9k: fix use-after-free in ath9k_hif_usb_rx_cb
media: tw686x: Register the irq at the end of probe
crypto: sun8i-ss - fix infinite loop in sun8i_ss_setup_ivs()
i2c: Fix a potential use after free
net: fix sk_wmem_schedule() and sk_rmem_schedule() errors
crypto: sun8i-ss - fix error codes in allocate_flows()
crypto: sun8i-ss - do not allocate memory when handling hash requests
drm: adv7511: override i2c address of cec before accessing it
virtio-gpu: fix a missing check to avoid NULL dereference
i2c: npcm: Correct slave role behavior
i2c: npcm: Remove own slave addresses 2:10
drm/mediatek: Add pull-down MIPI operation in mtk_dsi_poweroff function
drm/mediatek: Separate poweron/poweroff from enable/disable and define new funcs
drm/mediatek: Modify dsi funcs to atomic operations
drm/radeon: fix potential buffer overflow in ni_set_mc_special_registers()
ath11k: Fix incorrect debug_mask mappings
drm/mipi-dbi: align max_chunk to 2 in spi_transfer
ath11k: fix netdev open race
wifi: rtlwifi: fix error codes in rtl_debugfs_set_write_h2c()
drm/st7735r: Fix module autoloading for Okaya RH128128T
ath10k: do not enforce interrupt trigger type
drm/bridge: tc358767: Make sure Refclk clock are enabled
drm/bridge: tc358767: Move (e)DP bridge endpoint parsing into dedicated function
pwm: lpc18xx-sct: Convert to devm_platform_ioremap_resource()
pwm: sifive: Shut down hardware only after pwmchip_remove() completed
pwm: sifive: Ensure the clk is enabled exactly once per running PWM
pwm: sifive: Simplify offset calculation for PWMCMP registers
pwm: sifive: Don't check the return code of pwmchip_remove()
dm: return early from dm_pr_call() if DM device is suspended
thermal/tools/tmon: Include pthread and time headers in tmon.h
selftests/seccomp: Fix compile warning when CC=clang
nohz/full, sched/rt: Fix missed tick-reenabling bug in dequeue_task_rt()
drivers/perf: arm_spe: Fix consistency of SYS_PMSCR_EL1.CX
arm64: dts: qcom: qcs404: Fix incorrect USB2 PHYs assignment
soc: qcom: Make QCOM_RPMPD depend on PM
regulator: of: Fix refcount leak bug in of_get_regulation_constraints()
blktrace: Trace remapped requests correctly
block: remove the request_queue to argument request based tracepoints
hwmon: (drivetemp) Add module alias
blk-mq: don't create hctx debugfs dir until q->debugfs_dir is created
erofs: avoid consecutive detection for Highmem memory
arm64: tegra: Fix SDMMC1 CD on P2888
arm64: dts: mt7622: fix BPI-R64 WPS button
bus: hisi_lpc: fix missing platform_device_put() in hisi_lpc_acpi_probe()
ARM: dts: qcom: pm8841: add required thermal-sensor-cells
soc: qcom: aoss: Fix refcount leak in qmp_cooling_devices_register
soc: qcom: ocmem: Fix refcount leak in of_get_ocmem
ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP
regulator: qcom_smd: Fix pm8916_pldo range
cpufreq: zynq: Fix refcount leak in zynq_get_revision
ARM: OMAP2+: Fix refcount leak in omap3xxx_prm_late_init
ARM: OMAP2+: Fix refcount leak in omapdss_init_of
ARM: dts: qcom: mdm9615: add missing PMIC GPIO reg
block: fix infinite loop for invalid zone append
soc: fsl: guts: machine variable might be unset
locking/lockdep: Fix lockdep_init_map_*() confusion
arm64: cpufeature: Allow different PMU versions in ID_DFR0_EL1
hexagon: select ARCH_WANT_LD_ORPHAN_WARN
ARM: dts: ast2600-evb: fix board compatible
ARM: dts: ast2500-evb: fix board compatible
x86/pmem: Fix platform-device leak in error path
arm64: dts: renesas: Fix thermal-sensors on single-zone sensors
soc: amlogic: Fix refcount leak in meson-secure-pwrc.c
soc: renesas: r8a779a0-sysc: Fix A2DP1 and A2CV[2357] PDR values
Input: atmel_mxt_ts - fix up inverted RESET handler
ARM: dts: imx7d-colibri-emmc: add cpu1 supply
ACPI: processor/idle: Annotate more functions to live in cpuidle section
ARM: bcm: Fix refcount leak in bcm_kona_smc_init
arm64: dts: renesas: beacon: Fix regulator node names
meson-mx-socinfo: Fix refcount leak in meson_mx_socinfo_init
ARM: findbit: fix overflowing offset
spi: spi-rspi: Fix PIO fallback on RZ platforms
powerpc/64s: Disable stack variable initialisation for prom_init
selinux: Add boundary check in put_entry()
PM: hibernate: defer device probing when resuming from hibernation
firmware: tegra: Fix error check return value of debugfs_create_file()
ARM: shmobile: rcar-gen2: Increase refcount for new reference
arm64: dts: allwinner: a64: orangepi-win: Fix LED node name
arm64: dts: qcom: ipq8074: fix NAND node name
ACPI: LPSS: Fix missing check in register_device_clock()
ACPI: PM: save NVS memory for Lenovo G40-45
ACPI: EC: Drop the EC_FLAGS_IGNORE_DSDT_GPE quirk
ACPI: EC: Remove duplicate ThinkPad X1 Carbon 6th entry from DMI quirks
ARM: OMAP2+: display: Fix refcount leak bug
spi: synquacer: Add missing clk_disable_unprepare()
ARM: dts: BCM5301X: Add DT for Meraki MR26
ARM: dts: imx6ul: fix qspi node compatible
ARM: dts: imx6ul: fix lcdif node compatible
ARM: dts: imx6ul: fix csi node compatible
ARM: dts: imx6ul: fix keypad compatible
ARM: dts: imx6ul: change operating-points to uint32-matrix
ARM: dts: imx6ul: add missing properties for sram
wait: Fix __wait_event_hrtimeout for RT/DL tasks
irqchip/mips-gic: Check the return value of ioremap() in gic_of_init()
genirq: GENERIC_IRQ_IPI depends on SMP
irqchip/mips-gic: Only register IPI domain when SMP is enabled
genirq: Don't return error on missing optional irq_request_resources()
ext2: Add more validity checks for inode counts
arm64: fix oops in concurrently setting insn_emulation sysctls
arm64: Do not forget syscall when starting a new thread.
x86: Handle idle=nomwait cmdline properly for x86_idle
epoll: autoremove wakers even more aggressively
netfilter: nf_tables: fix null deref due to zeroed list head
netfilter: nf_tables: do not allow RULE_ID to refer to another chain
netfilter: nf_tables: do not allow CHAIN_ID to refer to another table
netfilter: nf_tables: do not allow SET_ID to refer to another table
lockdep: Allow tuning tracing capacity constants.
usb: dwc3: gadget: fix high speed multiplier setting
usb: dwc3: gadget: refactor dwc3_repare_one_trb
arm64: dts: uniphier: Fix USB interrupts for PXs3 SoC
ARM: dts: uniphier: Fix USB interrupts for PXs2 SoC
USB: HCD: Fix URB giveback issue in tasklet function
usb: typec: ucsi: Acknowledge the GET_ERROR_STATUS command completion
coresight: Clear the connection field properly
MIPS: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
powerpc/powernv: Avoid crashing if rng is NULL
powerpc/ptdump: Fix display of RW pages on FSL_BOOK3E
powerpc/fsl-pci: Fix Class Code of PCIe Root Port
PCI: Add defines for normal and subtractive PCI bridges
ia64, processor: fix -Wincompatible-pointer-types in ia64_get_irr()
media: [PATCH] pci: atomisp_cmd: fix three missing checks on list iterator
md-raid10: fix KASAN warning
md-raid: destroy the bitmap after destroying the thread
serial: mvebu-uart: uart2 error bits clearing
fuse: limit nsec
scsi: qla2xxx: Zero undefined mailbox IN registers
scsi: qla2xxx: Fix incorrect display of max frame size
scsi: sg: Allow waiting for commands to complete on removed device
iio: light: isl29028: Fix the warning in isl29028_remove()
mtd: rawnand: arasan: Update NAND bus clock instead of system clock
drm/amdgpu: Check BO's requested pinning domains against its preferred_domains
drm/nouveau/acpi: Don't print error when we get -EINPROGRESS from pm_runtime
drm/nouveau: Don't pm_runtime_put_sync(), only pm_runtime_put_autosuspend()
drm/nouveau: fix another off-by-one in nvbios_addr
drm/vc4: hdmi: Disable audio if dmas property is present but empty
drm/gem: Properly annotate WW context on drm_gem_lock_reservations() error
parisc: io_pgetevents_time64() needs compat syscall in 32-bit compat mode
parisc: Check the return value of ioremap() in lba_driver_probe()
parisc: Fix device names in /proc/iomem
ovl: drop WARN_ON() dentry is NULL in ovl_encode_fh()
usbnet: Fix linkwatch use-after-free on disconnect
fbcon: Fix accelerated fbdev scrolling while logo is still shown
fbcon: Fix boundary checks for fbcon=vc:n1-n2 parameters
thermal: sysfs: Fix cooling_device_stats_setup() error code path
fs: Add missing umask strip in vfs_tmpfile
vfs: Check the truncate maximum size in inode_newsize_ok()
tty: vt: initialize unicode screen buffer
ALSA: hda/realtek: Add a quirk for HP OMEN 15 (8786) mute LED
ALSA: hda/realtek: Add quirk for another Asus K42JZ model
ALSA: hda/cirrus - support for iMac 12,1 model
ALSA: hda/conexant: Add quirk for LENOVO 20149 Notebook model
mm/mremap: hold the rmap lock in write mode when moving page table entries.
xfs: fix I_DONTCACHE
xfs: only set IOMAP_F_SHARED when providing a srcmap to a write
mm: Add kvrealloc()
riscv: set default pm_power_off to NULL
KVM: x86: Tag kvm_mmu_x86_module_init() with __init
KVM: x86: Set error code to segment selector on LLDT/LTR non-canonical #GP
KVM: x86: Mark TSS busy during LTR emulation _after_ all fault checks
KVM: nVMX: Let userspace set nVMX MSR to any _host_ supported value
KVM: s390: pv: don't present the ecall interrupt twice
KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0
KVM: nVMX: Snapshot pre-VM-Enter DEBUGCTL for !nested_run_pending case
KVM: nVMX: Snapshot pre-VM-Enter BNDCFGS for !nested_run_pending case
HID: wacom: Don't register pad_input for touch switch
HID: wacom: Only report rotation for art pen
add barriers to buffer_uptodate and set_buffer_uptodate
wifi: mac80211_hwsim: use 32-bit skb cookie
wifi: mac80211_hwsim: add back erroneously removed cast
wifi: mac80211_hwsim: fix race condition in pending packet
ALSA: hda/realtek: Add quirk for HP Spectre x360 15-eb0xxx
ALSA: hda/realtek: Add quirk for Clevo NV45PZ
ALSA: bcd2000: Fix a UAF bug on the error path of probing
scsi: Revert "scsi: qla2xxx: Fix disk failure to rediscover"
Revert "pNFS: nfs3_set_ds_client should set NFS_CS_NOPING"
x86: link vdso and boot with -z noexecstack --no-warn-rwx-segments
Makefile: link with -z noexecstack --no-warn-rwx-segments
Conflicts:
Documentation/devicetree/bindings
Documentation/devicetree/bindings/arm/qcom.yaml
Documentation/devicetree/bindings/clock/qcom,gcc-msm8996.yaml
Documentation/devicetree/bindings/dma/moxa,moxart-dma.txt
Documentation/devicetree/bindings/regulator/nxp,pca9450-regulator.yaml
drivers/interconnect/qcom/icc-rpmh.c
drivers/remoteproc/qcom_sysmon.c
drivers/rpmsg/qcom_glink_native.c
net/qrtr/qrtr.c
Change-Id: If4f77aa8e63e7847571d37c1ba947f235236afff
Signed-off-by: Srinivasarao Pathipati <quic_c_spathi@quicinc.com>
|
||
Greg Kroah-Hartman
|
d0782c9411 |
Merge tag 'android12-5.10.160_r00' into android12-5.10
This is the merge of the upstream LTS release of 5.10.160 into the android12-5.10 branch. It contains the following commits: |
||
Luca Stefani
|
7d1d982f57 |
UPSTREAM: pstore: Properly assign mem_type property
If mem-type is specified in the device tree
it would end up overriding the record_size
field instead of populating mem_type.
As record_size is currently parsed after the
improper assignment with default size 0 it
continued to work as expected regardless of the
value found in the device tree.
Simply changing the target field of the struct
is enough to get mem-type working as expected.
Fixes: 9d843e8fafc7 ("pstore: Add mem_type property DT parsing support")
Cc: stable@vger.kernel.org
Signed-off-by: Luca Stefani <luca@osomprivacy.com>
Signed-off-by: Kees Cook <keescook@chromium.org>
Link: https://lore.kernel.org/r/20221222131049.286288-1-luca@osomprivacy.com
Fixes:
|