6782 Commits

Author	SHA1	Message	Date
Greg Kroah-Hartman	0847230e9b	This is the 5.10.173 stable release ... -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmQMoPMACgkQONu9yGCS aT4a1Q//WHnQOEgEykqbHMree6UQD5F6crB0kUcJTSDB5lblviYGxpOadw2j+670 AGsFg00cm8Sb8p78v3SA+X2UzScGnY5Cwhe+B/JucUSr+4rDlZ9FjOGXbKdlYFc2 sOTp9j/9KrETf0K/VVuCa48rKBPUFvrT7pZUAblZ0vVmk6cSzPW/1iBa4W6Ho6Ec LxqNzCDtyTWX0JCzdv5DvjW7WALvPiEiw8CX8+psZTD8RHdAjtnW2DKp8ZnznzJS YVBf2ulsD1g3zKEqDm5nMcUyN3fSEWci97bmbEzIeMTULfsj+aQF5a7JoXIkj7Yb QIvZ1fG6RSviVplt5SoT5ucDN2cGqLt7+4b3v6DKQX1dMTDrAPdU+T1VU0LRxB6h 5M3ZZ925ktJu2YTmKi4QvgP01ZVJv0dNWytbmAnIVvJRGY3gHQt5tx0W2lnQdHE9 mJeW2MXcLKeho7d5p3wRl6yEWAJuAoioZCd95NPyNnVZMMhYRu6iTIIzY8EdNegQ 5ve9Rsda9uobvWRCWefyS0pHvuJ2HJrJONnU92MHKSojEC9oAjURvRGWpXYcQFM/ EiywE1oBRA6NrGI7BomAH6khVoTi01yBsQ0QEt30mTOuyxa6j/oR9iEsNv7bmjZC SoApcWDPNy6RpHX7SDtch0Qj1l7YfYDNNj66Y94o5E70eHebU9Q= =vHOd -----END PGP SIGNATURE----- Merge 5.10.173 into android12-5.10-lts Changes in 5.10.173 HID: asus: Remove check for same LED brightness on set HID: asus: use spinlock to protect concurrent accesses HID: asus: use spinlock to safely schedule workers powerpc/mm: Rearrange if-else block to avoid clang warning ARM: OMAP2+: Fix memory leak in realtime_counter_init() arm64: dts: qcom: qcs404: use symbol names for PCIe resets ARM: zynq: Fix refcount leak in zynq_early_slcr_init arm64: dts: mediatek: mt8183: Fix systimer 13 MHz clock description arm64: dts: qcom: sdm845-db845c: fix audio codec interrupt pin name arm64: dts: qcom: sc7180: correct SPMI bus address cells arm64: dts: meson-gx: Fix Ethernet MAC address unit name arm64: dts: meson-g12a: Fix internal Ethernet PHY unit name arm64: dts: meson-gx: Fix the SCPI DVFS node name and unit address arm64: dts: qcom: ipq8074: correct USB3 QMP PHY-s clock output names arm64: dts: qcom: Fix IPQ8074 PCIe PHY nodes arm64: dts: qcom: ipq8074: fix PCIe PHY serdes size arm64: dts: qcom: ipq8074: fix Gen3 PCIe QMP PHY arm64: dts: qcom: ipq8074: correct Gen2 PCIe ranges arm64: dts: qcom: ipq8074: fix Gen3 PCIe node arm64: dts: qcom: ipq8074: correct PCIe QMP PHY output clock names arm64: dts: meson: remove CPU opps below 1GHz for G12A boards ARM: OMAP1: call platform_device_put() in error case in omap1_dm_timer_init() ARM: s3c: fix s3c64xx_set_timer_source prototype arm64: dts: ti: k3-j7200: Fix wakeup pinmux range ARM: dts: exynos: correct wr-active property in Exynos3250 Rinato ARM: imx: Call ida_simple_remove() for ida_simple_get arm64: dts: amlogic: meson-gx: fix SCPI clock dvfs node name arm64: dts: amlogic: meson-axg: fix SCPI clock dvfs node name arm64: dts: amlogic: meson-gx: add missing SCPI sensors compatible arm64: dts: amlogic: meson-gxl-s905d-sml5442tw: drop invalid clock-names property arm64: dts: amlogic: meson-gx: add missing unit address to rng node name arm64: dts: amlogic: meson-gxl: add missing unit address to eth-phy-mux node name arm64: dts: amlogic: meson-gx-libretech-pc: fix update button name arm64: dts: amlogic: meson-gxl-s905d-phicomm-n1: fix led node name arm64: dts: amlogic: meson-gxbb-kii-pro: fix led node name arm64: dts: renesas: beacon-renesom: Fix gpio expander reference ARM: dts: sun8i: nanopi-duo2: Fix regulator GPIO reference ARM: dts: imx7s: correct iomuxc gpr mux controller cells arm64: dts: mediatek: mt7622: Add missing pwm-cells to pwm node blk-mq: avoid sleep in blk_mq_alloc_request_hctx blk-mq: remove stale comment for blk_mq_sched_mark_restart_hctx blk-mq: correct stale comment of .get_budget s390/dasd: Prepare for additional path event handling s390/dasd: Fix potential memleak in dasd_eckd_init() sched/deadline,rt: Remove unused parameter from pick_next_[rt|dl]_entity() sched/rt: pick_next_rt_entity(): check list_entry x86/perf/zhaoxin: Add stepping check for ZXC block: bio-integrity: Copy flags when bio_integrity_payload is cloned wifi: rsi: Fix memory leak in rsi_coex_attach() wifi: rtlwifi: rtl8821ae: don't call kfree_skb() under spin_lock_irqsave() wifi: rtlwifi: rtl8188ee: don't call kfree_skb() under spin_lock_irqsave() wifi: rtlwifi: rtl8723be: don't call kfree_skb() under spin_lock_irqsave() wifi: iwlegacy: common: don't call dev_kfree_skb() under spin_lock_irqsave() wifi: libertas: fix memory leak in lbs_init_adapter() wifi: rtl8xxxu: don't call dev_kfree_skb() under spin_lock_irqsave() rtlwifi: fix -Wpointer-sign warning wifi: rtlwifi: Fix global-out-of-bounds bug in _rtl8812ae_phy_set_txpower_limit() libbpf: Fix btf__align_of() by taking into account field offsets wifi: ipw2x00: don't call dev_kfree_skb() under spin_lock_irqsave() wifi: ipw2200: fix memory leak in ipw_wdev_init() wifi: wilc1000: fix potential memory leak in wilc_mac_xmit() wifi: brcmfmac: fix potential memory leak in brcmf_netdev_start_xmit() wifi: brcmfmac: unmap dma buffer in brcmf_msgbuf_alloc_pktid() wifi: libertas_tf: don't call kfree_skb() under spin_lock_irqsave() wifi: libertas: if_usb: don't call kfree_skb() under spin_lock_irqsave() wifi: libertas: main: don't call kfree_skb() under spin_lock_irqsave() wifi: libertas: cmdresp: don't call kfree_skb() under spin_lock_irqsave() wifi: wl3501_cs: don't call kfree_skb() under spin_lock_irqsave() crypto: x86/ghash - fix unaligned access in ghash_setkey() ACPICA: Drop port I/O validation for some regions genirq: Fix the return type of kstat_cpu_irqs_sum() rcu-tasks: Improve comments explaining tasks_rcu_exit_srcu purpose rcu-tasks: Remove preemption disablement around srcu_read_[un]lock() calls rcu-tasks: Fix synchronize_rcu_tasks() VS zap_pid_ns_processes() lib/mpi: Fix buffer overrun when SG is too long crypto: ccp: Use the stack for small SEV command buffers crypto: ccp: Use the stack and common buffer for status commands crypto: ccp - Use kzalloc for sev ioctl interfaces to prevent kernel memory leak crypto: ccp - Avoid page allocation failure warning for SEV_GET_ID2 ACPICA: nsrepair: handle cases without a return value correctly thermal/drivers/tsens: Drop msm8976-specific defines thermal/drivers/qcom/tsens_v1: Enable sensor 3 on MSM8976 thermal/drivers/tsens: Add compat string for the qcom,msm8960 thermal/drivers/tsens: Sort out msm8976 vs msm8956 data wifi: rtl8xxxu: Fix memory leaks with RTL8723BU, RTL8192EU wifi: orinoco: check return value of hermes_write_wordrec() wifi: ath9k: htc_hst: free skb in ath9k_htc_rx_msg() if there is no callback function ath9k: hif_usb: simplify if-if to if-else ath9k: htc: clean up statistics macros wifi: ath9k: hif_usb: clean up skbs if ath9k_hif_usb_rx_stream() fails wifi: ath9k: Fix potential stack-out-of-bounds write in ath9k_wmi_rsp_callback() wifi: ath11k: Fix memory leak in ath11k_peer_rx_frag_setup wifi: cfg80211: Fix extended KCK key length check in nl80211_set_rekey_data() ACPI: battery: Fix missing NUL-termination with large strings crypto: ccp - Failure on re-initialization due to duplicate sysfs filename crypto: essiv - Handle EBUSY correctly crypto: seqiv - Handle EBUSY correctly powercap: fix possible name leak in powercap_register_zone() x86/cpu: Init AP exception handling from cpu_init_secondary() x86/microcode: Replace deprecated CPU-hotplug functions. x86: Mark stop_this_cpu() __noreturn x86/microcode: Rip out the OLD_INTERFACE x86/microcode: Default-disable late loading x86/microcode: Print previous version of microcode after reload x86/microcode: Add a parameter to microcode_check() to store CPU capabilities x86/microcode: Check CPU capabilities after late microcode update correctly x86/microcode: Adjust late loading result reporting message net: ethernet: ti: am65-cpsw: fix tx csum offload for multi mac mode net: ethernet: ti: am65-cpsw: handle deferred probe with dev_err_probe() net: ethernet: ti: add missing of_node_put before return crypto: xts - Handle EBUSY correctly leds: led-class: Add missing put_device() to led_put() crypto: ccp - Refactor out sev_fw_alloc() crypto: ccp - Flush the SEV-ES TMR memory before giving it to firmware bpftool: profile online CPUs instead of possible net/mlx5: Enhance debug print in page allocation failure irqchip: Fix refcount leak in platform_irqchip_probe irqchip/alpine-msi: Fix refcount leak in alpine_msix_init_domains irqchip/irq-mvebu-gicp: Fix refcount leak in mvebu_gicp_probe irqchip/ti-sci: Fix refcount leak in ti_sci_intr_irq_domain_probe s390/vmem: fix empty page tables cleanup under KASAN net: add sock_init_data_uid() tun: tun_chr_open(): correctly initialize socket uid tap: tap_open(): correctly initialize socket uid OPP: fix error checking in opp_migrate_dentry() Bluetooth: L2CAP: Fix potential user-after-free libbpf: Fix alen calculation in libbpf_nla_dump_errormsg() rds: rds_rm_zerocopy_callback() correct order for list_add_tail() crypto: rsa-pkcs1pad - Use akcipher_request_complete m68k: /proc/hardware should depend on PROC_FS RISC-V: time: initialize hrtimer based broadcast clock event device wifi: iwl3945: Add missing check for create_singlethread_workqueue wifi: iwl4965: Add missing check for create_singlethread_workqueue() wifi: mwifiex: fix loop iterator in mwifiex_update_ampdu_txwinsize() selftests/bpf: Fix out-of-srctree build crypto: crypto4xx - Call dma_unmap_page when done wifi: mac80211: make rate u32 in sta_set_rate_info_rx() thermal/drivers/hisi: Drop second sensor hi3660 can: esd_usb: Move mislocated storage of SJA1000_ECC_SEG bits in case of a bus error bpf: Fix global subprog context argument resolution logic irqchip/irq-brcmstb-l2: Set IRQ_LEVEL for level triggered interrupts irqchip/irq-bcm7120-l2: Set IRQ_LEVEL for level triggered interrupts selftests/net: Interpret UDP_GRO cmsg data as an int value l2tp: Avoid possible recursive deadlock in l2tp_tunnel_register() net: bcmgenet: fix MoCA LED control selftest: fib_tests: Always cleanup before exit sefltests: netdevsim: wait for devlink instance after netns removal drm: Fix potential null-ptr-deref due to drmm_mode_config_init() drm/fourcc: Add missing big-endian XRGB1555 and RGB565 formats drm: mxsfb: DRM_MXSFB should depend on ARCH_MXS || ARCH_MXC drm/bridge: megachips: Fix error handling in i2c_register_driver() drm/vkms: Fix null-ptr-deref in vkms_release() drm/vc4: dpi: Add option for inverting pixel clock and output enable drm/vc4: dpi: Fix format mapping for RGB565 drm: tidss: Fix pixel format definition gpu: ipu-v3: common: Add of_node_put() for reference returned by of_graph_get_port_by_id() drm/msm/hdmi: Add missing check for alloc_ordered_workqueue pinctrl: qcom: pinctrl-msm8976: Correct function names for wcss pins pinctrl: stm32: Fix refcount leak in stm32_pctrl_get_irq_domain pinctrl: rockchip: add support for rk3568 pinctrl: rockchip: do coding style for mux route struct pinctrl: rockchip: Fix refcount leak in rockchip_pinctrl_parse_groups drm/vc4: hvs: Set AXI panic modes drm/vc4: hvs: Fix colour order for xRGB1555 on HVS5 drm/vc4: hdmi: Correct interlaced timings again ASoC: fsl_sai: initialize is_dsp_mode flag drm/msm/adreno: Fix null ptr access in adreno_gpu_cleanup() ALSA: hda/ca0132: minor fix for allocation size drm/msm/dpu: Disallow unallocated resources to be returned drm/bridge: lt9611: fix sleep mode setup drm/bridge: lt9611: fix HPD reenablement drm/bridge: lt9611: fix polarity programming drm/bridge: lt9611: fix programming of video modes drm/bridge: lt9611: fix clock calculation drm/bridge: lt9611: pass a pointer to the of node drm/mipi-dsi: Fix byte order of 16-bit DCS set/get brightness drm/msm: use strscpy instead of strncpy drm/msm/dpu: Add check for cstate drm/msm/dpu: Add check for pstates drm/msm/mdp5: Add check for kzalloc pinctrl: bcm2835: Remove of_node_put() in bcm2835_of_gpio_ranges_fallback() pinctrl: mediatek: Initialize variable pullen and pullup to zero pinctrl: mediatek: Initialize variable *buf to zero gpu: host1x: Don't skip assigning syncpoints to channels drm/mediatek: dsi: Reduce the time of dsi from LP11 to sending cmd drm/mediatek: Use NULL instead of 0 for NULL pointer drm/mediatek: Drop unbalanced obj unref drm/mediatek: mtk_drm_crtc: Add checks for devm_kcalloc drm/mediatek: Clean dangling pointer on bind error path ASoC: soc-compress.c: fixup private_data on snd_soc_new_compress() gpio: vf610: connect GPIO label to dev name spi: dw_bt1: fix MUX_MMIO dependencies ASoC: mchp-spdifrx: fix controls which rely on rsr register ASoC: atmel: fix spelling mistakes ASoC: mchp-spdifrx: fix return value in case completion times out ASoC: mchp-spdifrx: fix controls that works with completion mechanism ASoC: mchp-spdifrx: disable all interrupts in mchp_spdifrx_dai_remove() ASoC: mchp-spdifrx: Fix uninitialized use of mr in mchp_spdifrx_hw_params() ASoC: dt-bindings: meson: fix gx-card codec node regex hwmon: (ltc2945) Handle error case in ltc2945_value_store drm/amdgpu: fix enum odm_combine_mode mismatch scsi: mpt3sas: Fix a memory leak scsi: aic94xx: Add missing check for dma_map_single() spi: bcm63xx-hsspi: fix pm_runtime spi: bcm63xx-hsspi: Fix multi-bit mode setting hwmon: (mlxreg-fan) Return zero speed for broken fan ASoC: tlv320adcx140: fix 'ti,gpio-config' DT property init dm: remove flush_scheduled_work() during local_exit() NFS: Fix up handling of outstanding layoutcommit in nfs_update_inode() NFSv4: keep state manager thread active if swap is enabled nfs4trace: fix state manager flag printing NFS: fix disabling of swap spi: synquacer: Fix timeout handling in synquacer_spi_transfer_one() ASoC: soc-dapm.h: fixup warning struct snd_pcm_substream not declared HID: bigben: use spinlock to protect concurrent accesses HID: bigben_worker() remove unneeded check on report_field HID: bigben: use spinlock to safely schedule workers hid: bigben_probe(): validate report count nfsd: fix race to check ls_layouts cifs: Fix lost destroy smbd connection when MR allocate failed cifs: Fix warning and UAF when destroy the MR list gfs2: jdata writepage fix perf llvm: Fix inadvertent file creation leds: led-core: Fix refcount leak in of_led_get() perf tools: Fix auto-complete on aarch64 sparc: allow PM configs for sparc32 COMPILE_TEST selftests/ftrace: Fix bash specific "==" operator printf: fix errname.c list objtool: add UACCESS exceptions for __tsan_volatile_read/write mfd: pcf50633-adc: Fix potential memleak in pcf50633_adc_async_read() clk: qcom: gcc-qcs404: disable gpll[04]_out_aux parents clk: qcom: gcc-qcs404: fix names of the DSI clocks used as parents RISC-V: fix funct4 definition for c.jalr in parse_asm.h mtd: rawnand: sunxi: Fix the size of the last OOB region Input: iqs269a - drop unused device node references Input: iqs269a - increase interrupt handler return delay Input: iqs269a - configure device with a single block write linux/kconfig.h: replace IF_ENABLED() with PTR_IF() in <linux/kernel.h> clk: renesas: cpg-mssr: Fix use after free if cpg_mssr_common_init() failed clk: renesas: cpg-mssr: Remove superfluous check in resume code clk: imx: avoid memory leak Input: ads7846 - don't report pressure for ads7845 Input: ads7846 - convert to full duplex Input: ads7846 - convert to one message Input: ads7846 - always set last command to PWRDOWN Input: ads7846 - don't check penirq immediately for 7845 clk: qcom: gpucc-sc7180: fix clk_dis_wait being programmed for CX GDSC clk: qcom: gpucc-sdm845: fix clk_dis_wait being programmed for CX GDSC powerpc/powernv/ioda: Skip unallocated resources when mapping to PE clk: Honor CLK_OPS_PARENT_ENABLE in clk_core_is_enabled() powerpc/perf/hv-24x7: add missing RTAS retry status handling powerpc/pseries/lpar: add missing RTAS retry status handling powerpc/pseries/lparcfg: add missing RTAS retry status handling powerpc/rtas: make all exports GPL powerpc/rtas: ensure 4KB alignment for rtas_data_buf powerpc/eeh: Small refactor of eeh_handle_normal_event() powerpc/eeh: Set channel state after notifying the drivers MIPS: SMP-CPS: fix build error when HOTPLUG_CPU not set MIPS: vpe-mt: drop physical_memsize vdpa/mlx5: Don't clear mr struct on destroy MR alpha/boot/tools/objstrip: fix the check for ELF header Input: iqs269a - do not poll during suspend or resume Input: iqs269a - do not poll during ATI remoteproc: qcom_q6v5_mss: Use a carveout to authenticate modem headers media: ti: cal: fix possible memory leak in cal_ctx_create() media: platform: ti: Add missing check for devm_regulator_get powerpc: Remove linker flag from KBUILD_AFLAGS builddeb: clean generated package content media: max9286: Fix memleak in max9286_v4l2_register() media: ov2740: Fix memleak in ov2740_init_controls() media: ov5675: Fix memleak in ov5675_init_controls() media: i2c: ov772x: Fix memleak in ov772x_probe() media: i2c: imx219: remove redundant writes media: i2c: imx219: Split common registers from mode tables media: i2c: imx219: Fix binning for RAW8 capture media: rc: Fix use-after-free bugs caused by ene_tx_irqsim() media: i2c: ov7670: 0 instead of -EINVAL was returned media: usb: siano: Fix use after free bugs caused by do_submit_urb media: saa7134: Use video_unregister_device for radio_dev rpmsg: glink: Avoid infinite loop on intent for missing channel udf: Define EFSCORRUPTED error code ARM: dts: exynos: Use Exynos5420 compatible for the MIPI video phy blk-iocost: fix divide by 0 error in calc_lcoefs() wifi: ath9k: Fix use-after-free in ath9k_hif_usb_disconnect() wifi: brcmfmac: Fix potential stack-out-of-bounds in brcmf_c_preinit_dcmds() rcu: Make RCU_LOCKDEP_WARN() avoid early lockdep checks rcu: Suppress smp_processor_id() complaint in synchronize_rcu_expedited_wait() rcu-tasks: Make rude RCU-Tasks work well with CPU hotplug wifi: ath11k: debugfs: fix to work with multiple PCI devices thermal: intel: Fix unsigned comparison with less than zero timers: Prevent union confusion from unexpected restart_syscall() x86/bugs: Reset speculation control settings on init wifi: brcmfmac: ensure CLM version is null-terminated to prevent stack-out-of-bounds wifi: mt7601u: fix an integer underflow inet: fix fast path in __inet_hash_connect() ice: add missing checks for PF vsi type ACPI: Don't build ACPICA with '-Os' clocksource: Suspend the watchdog temporarily when high read latency detected crypto: hisilicon: Wipe entire pool on error net: bcmgenet: Add a check for oversized packets m68k: Check syscall_trace_enter() return code wifi: mt76: dma: free rx_head in mt76_dma_rx_cleanup ACPI: video: Fix Lenovo Ideapad Z570 DMI match net/mlx5: fw_tracer: Fix debug print coda: Avoid partial allocation of sig_inputArgs uaccess: Add minimum bounds check on kernel buffer size PM: EM: fix memory leak with using debugfs_lookup() Bluetooth: btusb: Add VID:PID 13d3:3529 for Realtek RTL8821CE drm/amd/display: Fix potential null-deref in dm_resume drm/omap: dsi: Fix excessive stack usage HID: Add Mapping for System Microphone Mute drm/tiny: ili9486: Do not assume 8-bit only SPI controllers drm/radeon: free iio for atombios when driver shutdown drm: amd: display: Fix memory leakage drm/msm/dsi: Add missing check for alloc_ordered_workqueue docs/scripts/gdb: add necessary make scripts_gdb step ASoC: kirkwood: Iterate over array indexes instead of using pointer math regulator: max77802: Bounds check regulator id against opmode regulator: s5m8767: Bounds check id indexing into arrays gfs2: Improve gfs2_make_fs_rw error handling hwmon: (coretemp) Simplify platform device handling pinctrl: at91: use devm_kasprintf() to avoid potential leaks HID: logitech-hidpp: Don't restart communication if not necessary drm: panel-orientation-quirks: Add quirk for Lenovo IdeaPad Duet 3 10IGL5 dm thin: add cond_resched() to various workqueue loops dm cache: add cond_resched() to various workqueue loops nfsd: zero out pointers after putting nfsd_files on COPY setup error wifi: rtl8xxxu: fixing transmisison failure for rtl8192eu firmware: coreboot: framebuffer: Ignore reserved pixel color bits rtc: pm8xxx: fix set-alarm race ipmi_ssif: Rename idle state and check s390/extmem: return correct segment type in __segment_load() s390: discard .interp section s390/kprobes: fix irq mask clobbering on kprobe reenter from post_handler s390/kprobes: fix current_kprobe never cleared after kprobes reenter cifs: Fix uninitialized memory read in smb3_qfs_tcon() ARM: dts: exynos: correct HDMI phy compatible in Exynos4 hfs: fix missing hfs_bnode_get() in __hfs_bnode_create fs: hfsplus: fix UAF issue in hfsplus_put_super exfat: fix reporting fs error when reading dir beyond EOF exfat: fix unexpected EOF while reading dir exfat: redefine DIR_DELETED as the bad cluster number exfat: fix inode->i_blocks for non-512 byte sector size device f2fs: fix information leak in f2fs_move_inline_dirents() f2fs: fix cgroup writeback accounting with fs-layer encryption ocfs2: fix defrag path triggering jbd2 ASSERT ocfs2: fix non-auto defrag path not working issue udf: Truncate added extents on failed expansion udf: Do not bother merging very long extents udf: Do not update file length for failed writes to inline files udf: Preserve link count of system files udf: Detect system inodes linked into directory hierarchy udf: Fix file corruption when appending just after end of preallocated extent KVM: Destroy target device if coalesced MMIO unregistration fails KVM: x86: Inject #GP if WRMSR sets reserved bits in APIC Self-IPI KVM: s390: disable migration mode when dirty tracking is disabled x86/virt: Force GIF=1 prior to disabling SVM (for reboot flows) x86/crash: Disable virt in core NMI crash handler to avoid double shootdown x86/reboot: Disable virtualization in an emergency if SVM is supported x86/reboot: Disable SVM, not just VMX, when stopping CPUs x86/kprobes: Fix __recover_optprobed_insn check optimizing logic x86/kprobes: Fix arch_check_optimized_kprobe check within optimized_kprobe range x86/microcode/amd: Remove load_microcode_amd()'s bsp parameter x86/microcode/AMD: Add a @cpu parameter to the reloading functions x86/microcode/AMD: Fix mixed steppings support x86/speculation: Allow enabling STIBP with legacy IBRS Documentation/hw-vuln: Document the interaction between IBRS and STIBP brd: return 0/-error from brd_insert_page() ima: Align ima_file_mmap() parameters with mmap_file LSM hook irqdomain: Fix association race irqdomain: Fix disassociation race irqdomain: Drop bogus fwspec-mapping error handling io_uring: handle TIF_NOTIFY_RESUME when checking for task_work io_uring: mark task TASK_RUNNING before handling resume/task work io_uring: add a conditional reschedule to the IOPOLL cancelation loop io_uring/rsrc: disallow multi-source reg buffers io_uring: remove MSG_NOSIGNAL from recvmsg io_uring/poll: allow some retries for poll triggering spuriously ALSA: ice1712: Do not left ice->gpio_mutex locked in aureon_add_controls() ALSA: hda/realtek: Add quirk for HP EliteDesk 800 G6 Tower PC jbd2: fix data missing when reusing bh which is ready to be checkpointed ext4: optimize ea_inode block expansion ext4: refuse to create ea block when umounted mtd: spi-nor: Fix shift-out-of-bounds in spi_nor_set_erase_type dm: add cond_resched() to dm_wq_work() wifi: rtl8xxxu: Use a longer retry limit of 48 wifi: cfg80211: Fix use after free for wext thermal: intel: powerclamp: Fix cur_state for multi package system dm flakey: fix logic when corrupting a bio dm flakey: don't corrupt the zero page ARM: dts: exynos: correct TMU phandle in Exynos4210 ARM: dts: exynos: correct TMU phandle in Exynos4 ARM: dts: exynos: correct TMU phandle in Odroid XU3 family ARM: dts: exynos: correct TMU phandle in Exynos5250 ARM: dts: exynos: correct TMU phandle in Odroid XU ARM: dts: exynos: correct TMU phandle in Odroid HC1 rbd: avoid use-after-free in do_rbd_add() when rbd_dev_create() fails alpha: fix FEN fault handling dax/kmem: Fix leak of memory-hotplug resources mips: fix syscall_get_nr media: ipu3-cio2: Fix PM runtime usage_count in driver unbind remoteproc/mtk_scp: Move clk ops outside send_lock docs: gdbmacros: print newest record mm: memcontrol: deprecate charge moving mm/thp: check and bail out if page in deferred queue already ktest.pl: Give back console on Ctrt^C on monitor ktest.pl: Fix missing "end_monitor" when machine check fails ktest.pl: Add RUN_TIMEOUT option with default unlimited ring-buffer: Handle race between rb_move_tail and rb_check_pages scsi: qla2xxx: Fix link failure in NPIV environment scsi: qla2xxx: Fix DMA-API call trace on NVMe LS requests scsi: qla2xxx: Fix erroneous link down scsi: ses: Don't attach if enclosure has no components scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process() scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses scsi: ses: Fix possible desc_ptr out-of-bounds accesses scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() riscv: jump_label: Fixup unaligned arch_static_branch function PCI/PM: Observe reset delay irrespective of bridge_d3 PCI: hotplug: Allow marking devices as disconnected during bind/unbind PCI: Avoid FLR for AMD FCH AHCI adapters vfio/type1: prevent underflow of locked_vm via exec() drm/i915/quirks: Add inverted backlight quirk for HP 14-r206nv drm/radeon: Fix eDP for single-display iMac11,2 drm/edid: fix AVI infoframe aspect ratio handling arm64: dts: qcom: ipq8074: fix Gen2 PCIe QMP PHY wifi: ath9k: use proper statements in conditionals pinctrl: rockchip: fix mux route data for rk3568 pinctrl: rockchip: fix reading pull type on rk3568 kbuild: Port silent mode detection to future gnu make. net/sched: Retire tcindex classifier fs/jfs: fix shift exponent db_agl2size negative objtool: Fix memory leak in create_static_call_sections() pwm: sifive: Reduce time the controller lock is held pwm: sifive: Always let the first pwm_apply_state succeed pwm: stm32-lp: fix the check on arr and cmp registers update f2fs: use memcpy_{to,from}_page() where possible fs: f2fs: initialize fsdata in pagecache_write() um: vector: Fix memory leak in vector_config ubi: ensure that VID header offset + VID header size <= alloc, size ubifs: Fix build errors as symbol undefined ubifs: Rectify space budget for ubifs_symlink() if symlink is encrypted ubifs: Rectify space budget for ubifs_xrename() ubifs: Fix wrong dirty space budget for dirty inode ubifs: do_rename: Fix wrong space budget when target inode's nlink > 1 ubifs: Reserve one leb for each journal head while doing budget ubi: Fix use-after-free when volume resizing failed ubi: Fix unreferenced object reported by kmemleak in ubi_resize_volume() ubifs: Fix memory leak in alloc_wbufs() ubi: Fix possible null-ptr-deref in ubi_free_volume() ubifs: Re-statistic cleaned znode count if commit failed ubifs: dirty_cow_znode: Fix memleak in error handling path ubifs: ubifs_writepage: Mark page dirty after writing inode failed ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show() ubi: ubi_wl_put_peb: Fix infinite loop when wear-leveling work failed x86: um: vdso: Add '%rcx' and '%r11' to the syscall clobber list watchdog: at91sam9_wdt: use devm_request_irq to avoid missing free_irq() in error path watchdog: Fix kmemleak in watchdog_cdev_register watchdog: pcwd_usb: Fix attempting to access uninitialized memory netfilter: ctnetlink: fix possible refcount leak in ctnetlink_create_conntrack() netfilter: ebtables: fix table blob use-after-free ipv6: Add lwtunnel encap size of all siblings in nexthop calculation sctp: add a refcnt in sctp_stream_priorities to avoid a nested loop net: fix __dev_kfree_skb_any() vs drop monitor 9p/xen: fix version parsing 9p/xen: fix connection sequence 9p/rdma: unmap receive dma buffer in rdma_request()/post_recv() net/mlx5: Geneve, Fix handling of Geneve object id as error code nfc: fix memory leak of se_io context in nfc_genl_se_io net/sched: act_sample: fix action bind logic ARM: dts: spear320-hmi: correct STMPE GPIO compatible tcp: tcp_check_req() can be called from process context vc_screen: modify vcs_size() handling in vcs_read() rtc: sun6i: Always export the internal oscillator scsi: ipr: Work around fortify-string warning loop: loop_set_status_from_info() check before assignment ASoC: adau7118: don't disable regulators on device unbind ASoC: zl38060: Remove spurious gpiolib select ASoC: zl38060 add gpiolib dependency thermal: intel: quark_dts: fix error pointer dereference thermal: intel: BXT_PMIC: select REGMAP instead of depending on it tracing: Add NULL checks for buffer in ring_buffer_free_read_page() firmware/efi sysfb_efi: Add quirk for Lenovo IdeaPad Duet 3 bootconfig: Increase max nodes of bootconfig from 1024 to 8192 for DCC support mfd: arizona: Use pm_runtime_resume_and_get() to prevent refcnt leak IB/hfi1: Update RMT size calculation media: uvcvideo: Handle cameras with invalid descriptors media: uvcvideo: Handle errors from calls to usb_string media: uvcvideo: Quirk for autosuspend in Logitech B910 and C910 media: uvcvideo: Silence memcpy() run-time false positive warnings staging: emxx_udc: Add checks for dma_alloc_coherent() tty: fix out-of-bounds access in tty_driver_lookup_tty() tty: serial: fsl_lpuart: disable the CTS when send break signal serial: sc16is7xx: setup GPIO controller later in probe mei: bus-fixup:upon error print return values of send and receive tools/iio/iio_utils:fix memory leak iio: accel: mma9551_core: Prevent uninitialized variable in mma9551_read_status_word() iio: accel: mma9551_core: Prevent uninitialized variable in mma9551_read_config_word() PCI: loongson: Prevent LS7A MRRS increases usb: host: xhci: mvebu: Iterate over array indexes instead of using pointer math USB: ene_usb6250: Allocate enough memory for full object usb: uvc: Enumerate valid values for color matching usb: gadget: uvc: Make bSourceID read/write PCI: Align extra resources for hotplug bridges properly PCI: Take other bus devices into account when distributing resources kernel/fail_function: fix memory leak with using debugfs_lookup() PCI: loongson: Add more devices that need MRRS quirk PCI: Add ACS quirk for Wangxun NICs phy: rockchip-typec: Fix unsigned comparison with less than zero soundwire: cadence: Remove wasted space in response_buf soundwire: cadence: Drain the RX FIFO after an IO timeout net: tls: avoid hanging tasks on the tx_lock x86/resctrl: Apply READ_ONCE/WRITE_ONCE to task_struct.{rmid,closid} x86/resctl: fix scheduler confusion with 'current' drm/display/dp_mst: Fix down/up message handling after sink disconnect drm/display/dp_mst: Fix down message handling after a packet reception error Bluetooth: hci_sock: purge socket queues in the destruct() callback tcp: Fix listen() regression in 5.10.163 drm/virtio: Fix error code in virtio_gpu_object_shmem_init() media: uvcvideo: Provide sync and async uvc_ctrl_status_event media: uvcvideo: Fix race condition with usb_kill_urb Revert "scsi: mpt3sas: Fix return value check of dma_get_required_mask()" scsi: mpt3sas: Don't change DMA mask while reallocating pools scsi: mpt3sas: re-do lost mpt3sas DMA mask fix scsi: mpt3sas: Remove usage of dma_get_required_mask() API malidp: Fix NULL vs IS_ERR() checking usb: gadget: uvc: fix missing mutex_unlock() if kstrtou8() fails Linux 5.10.173 Change-Id: Iedcbc093feb171d48c70976d0aa99e972fac3ad1 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-03-22 11:21:35 +00:00
Greg Kroah-Hartman	45fa1d879a	This is the 5.10.170 stable release ... -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmP56RAACgkQONu9yGCS aT4Nyw//ent0HEPs7i9A6xn887vHd82TI3OtV8K6Reoq2qzo0KFuFJyrc8LcMS7T WiW0w0tLsE4ihUcNBW9AvmwYoC/eFZp/SJtETznPSAJoEBM5sf2RWdt1+uaWpuef EQeOmkn72MBAQ2vhKWFfKjqvCUigvBw2ngg9ftSIZG8drtC4TS+0AtJsqtyIjyjt 7hZ+hg63TfybLZ6tZW8Z8SD7KY6RviY+hpl/1ppMp/ogH6hQCR4X+hzx1OoWE5po H6bRVhGI+fbHaKnpPPmzk0EkM7+YkJjJncpvAizo/QpVkQ0stLcEM6wVxTq6h+Uu 0ydyY8d381HiSfDQnr3jp6+USPOgnAbKPLU+T4Uu4PQpTjKqt50mpeHVZyMR0Pf9 08Q3upwtI4EZfgHsZ/Kjfa5PG8QG+bJBSeLH68kPrSDjekrZccmiYyrgIVrnLd1h b9LSJ+VEU5BXrXJ1Fngg1Fl8hWf5OMmT+wPHHlhu6XlLWJe5Wbz5W2b91wIyf07b VEu5OEBgoX59VbxqeG+47zcSPXoIwDeQlTpFq+qrL/0C2VhxRpGhSMD65JSaM76o rGe/wBwS4qHPTySHd+7K930VTzRUxu8WFldWwOZMR66H0MaBiZ/5cH/RRaqjAW33 OBLZEunG6ic/soMnVgoPc0x9n02EqpCR8uKAd6HDDqBQsAIYjTQ= =FkG4 -----END PGP SIGNATURE----- Merge 5.10.170 into android12-5.10-lts Changes in 5.10.170 drm/etnaviv: don't truncate physical page address wifi: rtl8xxxu: gen2: Turn on the rate control clk: mxl: Switch from direct readl/writel based IO to regmap based IO clk: mxl: Remove redundant spinlocks clk: mxl: Add option to override gate clks clk: mxl: Fix a clk entry by adding relevant flags powerpc: dts: t208x: Mark MAC1 and MAC2 as 10G clk: mxl: syscon_node_to_regmap() returns error pointers random: always mix cycle counter in add_latent_entropy() KVM: x86: Fail emulation during EMULTYPE_SKIP on any exception KVM: SVM: Skip WRMSR fastpath on VM-Exit if next RIP isn't valid KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS can: kvaser_usb: hydra: help gcc-13 to figure out cmd_len powerpc: dts: t208x: Disable 10G on MAC1 and MAC2 drm/i915/gvt: fix double free bug in split_2MB_gtt_entry mac80211: mesh: embedd mesh_paths and mpp_paths into ieee80211_if_mesh uaccess: Add speculation barrier to copy_from_user() Revert "Revert "block: nbd: add sanity check for first_minor"" nbd: fix max value for 'first_minor' nbd: fix possible overflow for 'first_minor' in nbd_dev_add() nbd: fix possible overflow on 'first_minor' in nbd_dev_add() wifi: mwifiex: Add missing compatible string for SD8787 audit: update the mailing list in MAINTAINERS ext4: Fix function prototype mismatch for ext4_feat_ktype Revert "net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs" bpf: add missing header file include Linux 5.10.170 Change-Id: I9503ddc9b85049ce811a672092ed1f3c1f8e6d83 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-03-22 11:01:45 +00:00
Arnd Bergmann	455cf05161	printf: fix errname.c list ... [ Upstream commit 0c2baf6509af1d11310ae4c1c839481a6e9a4bc4 ] On most architectures, gcc -Wextra warns about the list of error numbers containing both EDEADLK and EDEADLOCK: lib/errname.c:15:67: warning: initialized field overwritten [-Woverride-init] 15 | #define E(err) [err + BUILD_BUG_ON_ZERO(err <= 0 || err > 300)] = "-" #err | ^~~ lib/errname.c:172:2: note: in expansion of macro 'E' 172 | E(EDEADLK), /* EDEADLOCK */ | ^ On parisc, a similar error happens with -ECANCELLED, which is an alias for ECANCELED. Make the EDEADLK printing conditional on the number being distinct from EDEADLOCK, and remove the -ECANCELLED bit completely as it can never be hit. To ensure these are correct, add static_assert lines that verify all the remaining aliases are in fact identical to the canonical name. Fixes: 57f5677e53 ("printf: add support for printing symbolic error names") Cc: Petr Mladek <pmladek@suse.com> Suggested-by: Rasmus Villemoes <linux@rasmusvillemoes.dk> Acked-by: Uwe Kleine-König <uwe@kleine-koenig.org> Reviewed-by: Andy Shevchenko <andy.shevchenko@gmail.com> Link: https://lore.kernel.org/all/20210514213456.745039-1-arnd@kernel.org/ Link: https://lore.kernel.org/all/20210927123409.1109737-1-arnd@kernel.org/ Signed-off-by: Arnd Bergmann <arnd@arndb.de> Reviewed-by: Sergey Senozhatsky <senozhatsky@chromium.org> Acked-by: Rasmus Villemoes <linux@rasmusvillemoes.dk> Reviewed-by: Petr Mladek <pmladek@suse.com> Signed-off-by: Petr Mladek <pmladek@suse.com> Link: https://lore.kernel.org/r/20230206194126.380350-1-arnd@kernel.org Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-03-11 16:39:40 +01:00
Herbert Xu	318dd6f5b7	lib/mpi: Fix buffer overrun when SG is too long ... [ Upstream commit 7361d1bc307b926cbca214ab67b641123c2d6357 ] The helper mpi_read_raw_from_sgl sets the number of entries in the SG list according to nbytes. However, if the last entry in the SG list contains more data than nbytes, then it may overrun the buffer because it only allocates enough memory for nbytes. Fixes: 2d4d1eea54 ("lib/mpi: Add mpi sgl helpers") Reported-by: Roberto Sassu <roberto.sassu@huaweicloud.com> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Reviewed-by: Eric Biggers <ebiggers@google.com> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-03-11 16:39:20 +01:00
Dave Hansen	3b6ce54cfa	uaccess: Add speculation barrier to copy_from_user() ... commit 74e19ef0ff8061ef55957c3abd71614ef0f42f47 upstream. The results of "access_ok()" can be mis-speculated. The result is that you can end speculatively: if (access_ok(from, size)) // Right here even for bad from/size combinations. On first glance, it would be ideal to just add a speculation barrier to "access_ok()" so that its results can never be mis-speculated. But there are lots of system calls just doing access_ok() via "copy_to_user()" and friends (example: fstat() and friends). Those are generally not problematic because they do not _consume_ data from userspace other than the pointer. They are also very quick and common system calls that should not be needlessly slowed down. "copy_from_user()" on the other hand uses a user-controller pointer and is frequently followed up with code that might affect caches. Take something like this: if (!copy_from_user(&kernelvar, uptr, size)) do_something_with(kernelvar); If userspace passes in an evil 'uptr' that *actually* points to a kernel addresses, and then do_something_with() has cache (or other) side-effects, it could allow userspace to infer kernel data values. Add a barrier to the common copy_from_user() code to prevent mis-speculated values which happen after the copy. Also add a stub for architectures that do not define barrier_nospec(). This makes the macro usable in generic code. Since the barrier is now usable in generic code, the x86 #ifdef in the BPF code can also go away. Reported-by: Jordy Zomer <jordyzomer@google.com> Suggested-by: Linus Torvalds <torvalds@linuxfoundation.org> Signed-off-by: Dave Hansen <dave.hansen@linux.intel.com> Reviewed-by: Thomas Gleixner <tglx@linutronix.de> Acked-by: Daniel Borkmann <daniel@iogearbox.net> # BPF bits Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-02-25 11:55:03 +01:00
Greg Kroah-Hartman	0ddb73d446	Merge 5.10.166 into android12-5.10-lts ... Changes in 5.10.166 clk: generalize devm_clk_get() a bit clk: Provide new devm_clk helpers for prepared and enabled clocks memory: atmel-sdramc: Fix missing clk_disable_unprepare in atmel_ramc_probe() memory: mvebu-devbus: Fix missing clk_disable_unprepare in mvebu_devbus_probe() ARM: dts: imx6ul-pico-dwarf: Use 'clock-frequency' ARM: dts: imx7d-pico: Use 'clock-frequency' ARM: dts: imx6qdl-gw560x: Remove incorrect 'uart-has-rtscts' arm64: dts: imx8mm-beacon: Fix ecspi2 pinmux ARM: imx: add missing of_node_put() HID: intel_ish-hid: Add check for ishtp_dma_tx_map EDAC/highbank: Fix memory leak in highbank_mc_probe() firmware: arm_scmi: Harden shared memory access in fetch_response firmware: arm_scmi: Harden shared memory access in fetch_notification tomoyo: fix broken dependency on *.conf.default RDMA/core: Fix ib block iterator counter overflow IB/hfi1: Reject a zero-length user expected buffer IB/hfi1: Reserve user expected TIDs IB/hfi1: Fix expected receive setup error exit issues IB/hfi1: Immediately remove invalid memory from hardware IB/hfi1: Remove user expected buffer invalidate race affs: initialize fsdata in affs_truncate() PM: AVS: qcom-cpr: Fix an error handling path in cpr_probe() phy: ti: fix Kconfig warning and operator precedence ARM: dts: at91: sam9x60: fix the ddr clock for sam9x60 amd-xgbe: TX Flow Ctrl Registers are h/w ver dependent amd-xgbe: Delay AN timeout during KR training bpf: Fix pointer-leak due to insufficient speculative store bypass mitigation phy: rockchip-inno-usb2: Fix missing clk_disable_unprepare() in rockchip_usb2phy_power_on() net: nfc: Fix use-after-free in local_cleanup() net: wan: Add checks for NULL for utdm in undo_uhdlc_init and unmap_si_regs gpio: mxc: Always set GPIOs used as interrupt source to INPUT mode wifi: rndis_wlan: Prevent buffer overflow in rndis_query_oid net/sched: sch_taprio: fix possible use-after-free l2tp: Serialize access to sk_user_data with sk_callback_lock l2tp: Don't sleep and disable BH under writer-side sk_callback_lock l2tp: convert l2tp_tunnel_list to idr l2tp: close all race conditions in l2tp_tunnel_register() net: usb: sr9700: Handle negative len net: mdio: validate parameter addr in mdiobus_get_phy() HID: check empty report_list in hid_validate_values() HID: check empty report_list in bigben_probe() net: stmmac: fix invalid call to mdiobus_get_phy() HID: revert CHERRY_MOUSE_000C quirk usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait usb: gadget: f_fs: Ensure ep0req is dequeued before free_request net: mlx5: eliminate anonymous module_init & module_exit drm/panfrost: fix GENERIC_ATOMIC64 dependency dmaengine: Fix double increment of client_count in dma_chan_get() net: macb: fix PTP TX timestamp failure due to packet padding l2tp: prevent lockdep issue in l2tp_tunnel_register() HID: betop: check shape of output reports dmaengine: xilinx_dma: call of_node_put() when breaking out of for_each_child_of_node() nvme-pci: fix timeout request state check tcp: avoid the lookup process failing to get sk in ehash table w1: fix deadloop in __w1_remove_master_device() w1: fix WARNING after calling w1_process() driver core: Fix test_async_probe_init saves device in wrong array net: dsa: microchip: ksz9477: port map correction in ALU table entry register tcp: fix rate_app_limited to default to 1 scsi: iscsi: Fix multiple iSCSI session unbind events sent to userspace cpufreq: Add Tegra234 to cpufreq-dt-platdev blocklist kcsan: test: don't put the expect array on the stack ASoC: fsl_micfil: Correct the number of steps on SX controls drm: Add orientation quirk for Lenovo ideapad D330-10IGL s390/debug: add _ASM_S390_ prefix to header guard cpufreq: armada-37xx: stop using 0 as NULL pointer ASoC: fsl_ssi: Rename AC'97 streams to avoid collisions with AC'97 CODEC ASoC: fsl-asoc-card: Fix naming of AC'97 CODEC widgets spi: spidev: remove debug messages that access spidev->spi without locking KVM: s390: interrupt: use READ_ONCE() before cmpxchg() scsi: hisi_sas: Set a port invalid only if there are no devices attached when refreshing port id platform/x86: touchscreen_dmi: Add info for the CSL Panther Tab HD platform/x86: asus-nb-wmi: Add alternate mapping for KEY_SCREENLOCK lockref: stop doing cpu_relax in the cmpxchg loop Revert "selftests/bpf: check null propagation only neither reg is PTR_TO_BTF_ID" netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state x86: ACPI: cstate: Optimize C3 entry on AMD CPUs fs: reiserfs: remove useless new_opts in reiserfs_remount sysctl: add a new register_sysctl_init() interface kernel/panic: move panic sysctls to its own file panic: unset panic_on_warn inside panic() ubsan: no need to unset panic_on_warn in ubsan_epilogue() kasan: no need to unset panic_on_warn in end_report() exit: Add and use make_task_dead. objtool: Add a missing comma to avoid string concatenation hexagon: Fix function name in die() h8300: Fix build errors from do_exit() to make_task_dead() transition csky: Fix function name in csky_alignment() and die() ia64: make IA64_MCA_RECOVERY bool instead of tristate panic: Separate sysctl logic from CONFIG_SMP exit: Put an upper limit on how often we can oops exit: Expose "oops_count" to sysfs exit: Allow oops_limit to be disabled panic: Consolidate open-coded panic_on_warn checks panic: Introduce warn_limit panic: Expose "warn_count" to sysfs docs: Fix path paste-o for /sys/kernel/warn_count exit: Use READ_ONCE() for all oops/warn limit reads Bluetooth: hci_sync: cancel cmd_timer if hci_open failed xhci: Set HCD flag to defer primary roothub registration scsi: hpsa: Fix allocation size for scsi_host_alloc() module: Don't wait for GOING modules tracing: Make sure trace_printk() can output as soon as it can be used trace_events_hist: add check for return value of 'create_hist_field' ftrace/scripts: Update the instructions for ftrace-bisect.sh cifs: Fix oops due to uncleared server->smbd_conn in reconnect KVM: x86/vmx: Do not skip segment attributes if unusable bit is set thermal: intel: int340x: Protect trip temperature from concurrent updates ARM: 9280/1: mm: fix warning on phys_addr_t to void pointer assignment EDAC/device: Respect any driver-supplied workqueue polling value EDAC/qcom: Do not pass llcc_driv_data as edac_device_ctl_info's pvt_info units: Add Watt units units: Add SI metric prefix definitions i2c: designware: Use DIV_ROUND_CLOSEST() macro i2c: designware: use casting of u64 in clock multiplication to avoid overflow netlink: prevent potential spectre v1 gadgets net: fix UaF in netns ops registration error path netfilter: nft_set_rbtree: Switch to node list walk for overlap detection netfilter: nft_set_rbtree: skip elements in transaction from garbage collection netlink: annotate data races around nlk->portid netlink: annotate data races around dst_portid and dst_group netlink: annotate data races around sk_state ipv4: prevent potential spectre v1 gadget in ip_metrics_convert() ipv4: prevent potential spectre v1 gadget in fib_metrics_match() netfilter: conntrack: fix vtag checks for ABORT/SHUTDOWN_COMPLETE netrom: Fix use-after-free of a listening socket. net/sched: sch_taprio: do not schedule in taprio_reset() sctp: fail if no bound addresses can be used for a given scope net: ravb: Fix possible hang if RIS2_QFF1 happen thermal: intel: int340x: Add locking to int340x_thermal_get_trip_type() net/tg3: resolve deadlock in tg3_reset_task() during EEH net: mdio-mux-meson-g12a: force internal PHY off on mux switch tools: gpio: fix -c option of gpio-event-mon Revert "Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode" nouveau: explicitly wait on the fence in nouveau_bo_move_m2mf nfsd: Ensure knfsd shuts down when the "nfsd" pseudofs is unmounted Revert "selftests/ftrace: Update synthetic event syntax errors" block: fix and cleanup bio_check_ro x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL netfilter: conntrack: unify established states for SCTP paths perf/x86/amd: fix potential integer overflow on shift of a int clk: Fix pointer casting to prevent oops in devm_clk_release() Linux 5.10.166 Change-Id: Ibf582f7504221c6ee1648da95c49b45e3678708c Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-02-17 12:18:56 +00:00
Greg Kroah-Hartman	4922049993	This is the 5.10.163 stable release ... -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmPCczkACgkQONu9yGCS aT4tnRAAsW8h/ohmhP+O2lQ9Ekw6s9VB6KB4aJzLhQXqIZlrzk2DP3CiLxQ7DkFc AcHwFYq+sERo8O7dK6pbCW0zNvLUpbK2wJhwMHujJfSUFboXX85NR6u90U67pBKS p+yVkDSx8LNc7c676xQ7ey5rO1K2fQQ266gexjI9WOkjIFOfplVkZ7tkvt51VwAD mNvOQsZdCE6xs+T3t9YMOtAx3wW8vl1wW3QDWCHznQwOJiMEjfNEOUY/+xELnnWz DVONWPHTFNKQHZwIuVUFZdNuORq5WXoIaMZdaEFkhuOtRMnQ9l+wi8iMxX8zkgBn Ji/dPu3GdAZsJU4/rXHkY2AeZV1oJc3NLYmevoRZirTqMQCqyM+blif7Rf34kBi7 6jlGPWOjyMNe58shfHmjWTl/u4pMDoYOnm5XO+1oL+2Xg8QWCucqAlfPFB3uMh6n aL4ymzo5QRy1+tx8v7o1NOjnGWydvYn3O4fwJVkYTFaJZZr9EI7gpTmEBw/gwfuf 4TH6BC++Ai/8vgKUhpdnWuTrjomWalPTcPBgQYG4gD7ak2TM1rmgMaCl/THUe36R zPC8m2sIXKeI4zGi8TeqTgaRvFSKJnuEmVo5OPkG98fZkjekCzWHp0q1+PG2Ecy8 Mu2/AOnwb1aSfOJh2Qajoke/Wed0U6qszop8C/jPRh8D1uTmRbI= =sOTj -----END PGP SIGNATURE----- Merge 5.10.163 into android12-5.10-lts Changes in 5.10.163 usb: musb: remove extra check in musb_gadget_vbus_draw arm64: dts: qcom: ipq6018-cp01-c1: use BLSPI1 pins arm64: dts: qcom: msm8996: fix GPU OPP table ARM: dts: qcom: apq8064: fix coresight compatible arm64: dts: qcom: sdm630: fix UART1 pin bias arm64: dts: qcom: sdm845-cheza: fix AP suspend pin bias arm64: dts: qcom: msm8916: Drop MSS fallback compatible objtool, kcsan: Add volatile read/write instrumentation to whitelist ARM: dts: stm32: Drop stm32mp15xc.dtsi from Avenger96 ARM: dts: stm32: Fix AV96 WLAN regulator gpio property drivers: soc: ti: knav_qmss_queue: Mark knav_acc_firmwares as static soc: qcom: llcc: make irq truly optional soc: qcom: apr: make code more reuseable soc: qcom: apr: Add check for idr_alloc and of_property_read_string_index arm: dts: spear600: Fix clcd interrupt soc: ti: knav_qmss_queue: Use pm_runtime_resume_and_get instead of pm_runtime_get_sync soc: ti: knav_qmss_queue: Fix PM disable depth imbalance in knav_queue_probe soc: ti: smartreflex: Fix PM disable depth imbalance in omap_sr_probe perf: arm_dsu: Fix hotplug callback leak in dsu_pmu_init() perf/smmuv3: Fix hotplug callback leak in arm_smmu_pmu_init() arm64: dts: ti: k3-am65-main: Drop dma-coherent in crypto node arm64: dts: ti: k3-j721e-main: Drop dma-coherent in crypto node arm64: dts: mt2712e: Fix unit_address_vs_reg warning for oscillators arm64: dts: mt2712e: Fix unit address for pinctrl node arm64: dts: mt2712-evb: Fix vproc fixed regulators unit names arm64: dts: mt2712-evb: Fix usb vbus regulators unit names arm64: dts: mediatek: pumpkin-common: Fix devicetree warnings arm64: dts: mediatek: mt6797: Fix 26M oscillator unit name ARM: dts: dove: Fix assigned-addresses for every PCIe Root Port ARM: dts: armada-370: Fix assigned-addresses for every PCIe Root Port ARM: dts: armada-xp: Fix assigned-addresses for every PCIe Root Port ARM: dts: armada-375: Fix assigned-addresses for every PCIe Root Port ARM: dts: armada-38x: Fix assigned-addresses for every PCIe Root Port ARM: dts: armada-39x: Fix assigned-addresses for every PCIe Root Port ARM: dts: turris-omnia: Add ethernet aliases ARM: dts: turris-omnia: Add switch port 6 node arm64: dts: armada-3720-turris-mox: Add missing interrupt for RTC pstore/ram: Fix error return code in ramoops_probe() ARM: mmp: fix timer_read delay pstore: Avoid kcore oops by vmap()ing with VM_IOREMAP tpm/tpm_ftpm_tee: Fix error handling in ftpm_mod_init() tpm/tpm_crb: Fix error message in __crb_relinquish_locality() sched/fair: Cleanup task_util and capacity type sched/uclamp: Fix relationship between uclamp and migration margin cpuidle: dt: Return the correct numbers of parsed idle states alpha: fix syscall entry in !AUDUT_SYSCALL case PM: hibernate: Fix mistake in kerneldoc comment fs: don't audit the capability check in simple_xattr_list() cpufreq: qcom-hw: Fix memory leak in qcom_cpufreq_hw_read_lut() selftests/ftrace: event_triggers: wait longer for test_event_enable perf: Fix possible memleak in pmu_dev_alloc() lib/debugobjects: fix stat count and optimize debug_objects_mem_init platform/x86: huawei-wmi: fix return value calculation timerqueue: Use rb_entry_safe() in timerqueue_getnext() proc: fixup uptime selftest lib/fonts: fix undefined behavior in bit shift for get_default_font ocfs2: fix memory leak in ocfs2_stack_glue_init() MIPS: vpe-mt: fix possible memory leak while module exiting MIPS: vpe-cmp: fix possible memory leak while module exiting selftests/efivarfs: Add checking of the test return value PNP: fix name memory leak in pnp_alloc_dev() perf/x86/intel/uncore: Fix reference count leak in hswep_has_limit_sbox() perf/x86/intel/uncore: Fix reference count leak in snr_uncore_mmio_map() perf/x86/intel/uncore: Fix reference count leak in __uncore_imc_init_box() platform/chrome: cros_usbpd_notify: Fix error handling in cros_usbpd_notify_init() irqchip: gic-pm: Use pm_runtime_resume_and_get() in gic_probe() EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() nfsd: don't call nfsd_file_put from client states seqfile display genirq/irqdesc: Don't try to remove non-existing sysfs files cpufreq: amd_freq_sensitivity: Add missing pci_dev_put() libfs: add DEFINE_SIMPLE_ATTRIBUTE_SIGNED for signed value lib/notifier-error-inject: fix error when writing -errno to debugfs file docs: fault-injection: fix non-working usage of negative values debugfs: fix error when writing negative value to atomic_t debugfs file ocfs2: ocfs2_mount_volume does cleanup job before return error ocfs2: rewrite error handling of ocfs2_fill_super ocfs2: fix memory leak in ocfs2_mount_volume() rapidio: fix possible name leaks when rio_add_device() fails rapidio: rio: fix possible name leak in rio_register_mport() clocksource/drivers/sh_cmt: Make sure channel clock supply is enabled clocksource/drivers/sh_cmt: Access registers according to spec futex: Move to kernel/futex/ futex: Resend potentially swallowed owner death notification cpu/hotplug: Make target_store() a nop when target == state clocksource/drivers/timer-ti-dm: Fix missing clk_disable_unprepare in dmtimer_systimer_init_clock() ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage() uprobes/x86: Allow to probe a NOP instruction with 0x66 prefix x86/xen: Fix memory leak in xen_smp_intr_init{_pv}() x86/xen: Fix memory leak in xen_init_lock_cpu() xen/privcmd: Fix a possible warning in privcmd_ioctl_mmap_resource() PM: runtime: Improve path in rpm_idle() when no callback PM: runtime: Do not call __rpm_callback() from rpm_idle() platform/x86: mxm-wmi: fix memleak in mxm_wmi_call_mx[ds|mx]() platform/x86: intel_scu_ipc: fix possible name leak in __intel_scu_ipc_register() MIPS: BCM63xx: Add check for NULL for clk in clk_enable MIPS: OCTEON: warn only once if deprecated link status is being used fs: sysv: Fix sysv_nblocks() returns wrong value rapidio: fix possible UAF when kfifo_alloc() fails eventfd: change int to __u64 in eventfd_signal() ifndef CONFIG_EVENTFD relay: fix type mismatch when allocating memory in relay_create_buf() hfs: Fix OOB Write in hfs_asc2mac rapidio: devices: fix missing put_device in mport_cdev_open wifi: ath9k: hif_usb: fix memory leak of urbs in ath9k_hif_usb_dealloc_tx_urbs() wifi: ath9k: hif_usb: Fix use-after-free in ath9k_hif_usb_reg_in_cb() wifi: rtl8xxxu: Fix reading the vendor of combo chips drm/bridge: adv7533: remove dynamic lane switching from adv7533 bridge libbpf: Fix use-after-free in btf_dump_name_dups libbpf: Fix null-pointer dereference in find_prog_by_sec_insn() pata_ipx4xx_cf: Fix unsigned comparison with less than zero media: coda: jpeg: Add check for kmalloc media: i2c: ad5820: Fix error path venus: pm_helpers: Fix error check in vcodec_domains_get() media: exynos4-is: Use v4l2_async_notifier_add_fwnode_remote_subdev media: exynos4-is: don't rely on the v4l2_async_subdev internals can: kvaser_usb: do not increase tx statistics when sending error message frames can: kvaser_usb: kvaser_usb_leaf: Get capabilities from device can: kvaser_usb: kvaser_usb_leaf: Rename {leaf,usbcan}_cmd_error_event to {leaf,usbcan}_cmd_can_error_event can: kvaser_usb: kvaser_usb_leaf: Handle CMD_ERROR_EVENT can: kvaser_usb_leaf: Set Warning state even without bus errors can: kvaser_usb_leaf: Fix improved state not being reported can: kvaser_usb_leaf: Fix wrong CAN state after stopping can: kvaser_usb_leaf: Fix bogus restart events can: kvaser_usb: Add struct kvaser_usb_busparams can: kvaser_usb: Compare requested bittiming parameters with actual parameters in do_set_{,data}_bittiming drm/rockchip: lvds: fix PM usage counter unbalance in poweron clk: renesas: r9a06g032: Repair grave increment error spi: Update reference to struct spi_controller drm/panel/panel-sitronix-st7701: Remove panel on DSI attach failure ima: Fix fall-through warnings for Clang ima: Handle -ESTALE returned by ima_filter_rule_match() drm/msm/hdmi: switch to drm_bridge_connector drm/msm/hdmi: drop unused GPIO support bpf: Fix slot type check in check_stack_write_var_off media: vivid: fix compose size exceed boundary media: platform: exynos4-is: fix return value check in fimc_md_probe() bpf: propagate precision in ALU/ALU64 operations bpf: Check the other end of slot_type for STACK_SPILL bpf: propagate precision across all frames, not just the last one clk: qcom: gcc-sm8250: Use retention mode for USB GDSCs mtd: Fix device name leak when register device failed in add_mtd_device() Input: joystick - fix Kconfig warning for JOYSTICK_ADC wifi: rsi: Fix handling of 802.3 EAPOL frames sent via control port media: camss: Clean up received buffers on failed start of streaming net, proc: Provide PROC_FS=n fallback for proc_create_net_single_write() rxrpc: Fix ack.bufferSize to be 0 when generating an ack drm/radeon: Add the missed acpi_put_table() to fix memory leak drm/mediatek: Modify dpi power on/off sequence. ASoC: pxa: fix null-pointer dereference in filter() regulator: core: fix unbalanced of node refcount in regulator_dev_lookup() amdgpu/pm: prevent array underflow in vega20_odn_edit_dpm_table() drm/fourcc: Add packed 10bit YUV 4:2:0 format drm/fourcc: Fix vsub/hsub for Q410 and Q401 integrity: Fix memory leakage in keyring allocation error path ima: Fix misuse of dereference of pointer in template_desc_init_fields() wifi: ath10k: Fix return value in ath10k_pci_init() mtd: lpddr2_nvm: Fix possible null-ptr-deref Input: elants_i2c - properly handle the reset GPIO when power is off media: vidtv: Fix use-after-free in vidtv_bridge_dvb_init() media: solo6x10: fix possible memory leak in solo_sysfs_init() media: platform: exynos4-is: Fix error handling in fimc_md_init() media: videobuf-dma-contig: use dma_mmap_coherent inet: add READ_ONCE(sk->sk_bound_dev_if) in inet_csk_bind_conflict() bpf: Move skb->len == 0 checks into __bpf_redirect HID: hid-sensor-custom: set fixed size for custom attributes ALSA: pcm: fix undefined behavior in bit shift for SNDRV_PCM_RATE_KNOT ALSA: seq: fix undefined behavior in bit shift for SNDRV_SEQ_FILTER_USE_EVENT regulator: core: use kfree_const() to free space conditionally clk: rockchip: Fix memory leak in rockchip_clk_register_pll() drm/amdgpu: fix pci device refcount leak bonding: fix link recovery in mode 2 when updelay is nonzero mtd: maps: pxa2xx-flash: fix memory leak in probe drbd: fix an invalid memory access caused by incorrect use of list iterator ASoC: qcom: Add checks for devm_kcalloc media: vimc: Fix wrong function called when vimc_init() fails media: imon: fix a race condition in send_packet() clk: imx: replace osc_hdmi with dummy pinctrl: pinconf-generic: add missing of_node_put() media: dvb-core: Fix ignored return value in dvb_register_frontend() media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() media: s5p-mfc: Add variant data for MFC v7 hardware for Exynos 3250 SoC drm/tegra: Add missing clk_disable_unprepare() in tegra_dc_probe() ASoC: dt-bindings: wcd9335: fix reset line polarity in example ASoC: mediatek: mtk-btcvsd: Add checks for write and read of mtk_btcvsd_snd NFSv4.2: Clear FATTR4_WORD2_SECURITY_LABEL when done decoding NFSv4.2: Fix a memory stomp in decode_attr_security_label NFSv4.2: Fix initialisation of struct nfs4_label NFSv4: Fix a deadlock between nfs4_open_recover_helper() and delegreturn NFS: Fix an Oops in nfs_d_automount() ALSA: asihpi: fix missing pci_disable_device() wifi: iwlwifi: mvm: fix double free on tx path. ASoC: mediatek: mt8173: Fix debugfs registration for components ASoC: mediatek: mt8173: Enable IRQ when pdata is ready drm/amd/pm/smu11: BACO is supported when it's in BACO state drm/radeon: Fix PCI device refcount leak in radeon_atrm_get_bios() drm/amdgpu: Fix PCI device refcount leak in amdgpu_atrm_get_bios() ASoC: pcm512x: Fix PM disable depth imbalance in pcm512x_probe netfilter: conntrack: set icmpv6 redirects as RELATED bpf, sockmap: Fix repeated calls to sock_put() when msg has more_data bpf, sockmap: Fix data loss caused by using apply_bytes on ingress redirect bonding: uninitialized variable in bond_miimon_inspect() spi: spidev: mask SPI_CS_HIGH in SPI_IOC_RD_MODE wifi: mac80211: fix memory leak in ieee80211_if_add() wifi: cfg80211: Fix not unregister reg_pdev when load_builtin_regdb_keys() fails wifi: mt76: fix coverity overrun-call in mt76_get_txpower() regulator: core: fix module refcount leak in set_supply() clk: qcom: clk-krait: fix wrong div2 functions hsr: Add a rcu-read lock to hsr_forward_skb(). net: hsr: generate supervision frame without HSR/PRP tag hsr: Disable netpoll. hsr: Synchronize sending frames to have always incremented outgoing seq nr. hsr: Synchronize sequence number updates. configfs: fix possible memory leak in configfs_create_dir() regulator: core: fix resource leak in regulator_register() hwmon: (jc42) Convert register access and caching to regmap/regcache hwmon: (jc42) Restore the min/max/critical temperatures on resume bpf, sockmap: fix race in sock_map_free() ALSA: pcm: Set missing stop_operating flag at undoing trigger start media: saa7164: fix missing pci_disable_device() ALSA: mts64: fix possible null-ptr-defer in snd_mts64_interrupt xprtrdma: Fix regbuf data not freed in rpcrdma_req_create() SUNRPC: Fix missing release socket in rpc_sockname() NFSv4.x: Fail client initialisation if state manager thread can't run mmc: alcor: fix return value check of mmc_add_host() mmc: moxart: fix return value check of mmc_add_host() mmc: mxcmmc: fix return value check of mmc_add_host() mmc: pxamci: fix return value check of mmc_add_host() mmc: rtsx_usb_sdmmc: fix return value check of mmc_add_host() mmc: toshsd: fix return value check of mmc_add_host() mmc: vub300: fix return value check of mmc_add_host() mmc: wmt-sdmmc: fix return value check of mmc_add_host() mmc: atmel-mci: fix return value check of mmc_add_host() mmc: omap_hsmmc: fix return value check of mmc_add_host() mmc: meson-gx: fix return value check of mmc_add_host() mmc: via-sdmmc: fix return value check of mmc_add_host() mmc: wbsd: fix return value check of mmc_add_host() mmc: mmci: fix return value check of mmc_add_host() media: c8sectpfe: Add of_node_put() when breaking out of loop media: coda: Add check for dcoda_iram_alloc media: coda: Add check for kmalloc clk: samsung: Fix memory leak in _samsung_clk_register_pll() spi: spi-gpio: Don't set MOSI as an input if not 3WIRE mode wifi: rtl8xxxu: Add __packed to struct rtl8723bu_c2h wifi: rtl8xxxu: Fix the channel width reporting wifi: brcmfmac: Fix error return code in brcmf_sdio_download_firmware() blktrace: Fix output non-blktrace event when blk_classic option enabled clk: socfpga: clk-pll: Remove unused variable 'rc' clk: socfpga: use clk_hw_register for a5/c5 clk: socfpga: Fix memory leak in socfpga_gate_init() net: vmw_vsock: vmci: Check memcpy_from_msg() net: defxx: Fix missing err handling in dfx_init() net: stmmac: selftests: fix potential memleak in stmmac_test_arpoffload() drivers: net: qlcnic: Fix potential memory leak in qlcnic_sriov_init() of: overlay: fix null pointer dereferencing in find_dup_cset_node_entry() and find_dup_cset_prop() ethernet: s2io: don't call dev_kfree_skb() under spin_lock_irqsave() net: farsync: Fix kmemleak when rmmods farsync net/tunnel: wait until all sk_user_data reader finish before releasing the sock net: apple: mace: don't call dev_kfree_skb() under spin_lock_irqsave() net: apple: bmac: don't call dev_kfree_skb() under spin_lock_irqsave() net: emaclite: don't call dev_kfree_skb() under spin_lock_irqsave() net: ethernet: dnet: don't call dev_kfree_skb() under spin_lock_irqsave() hamradio: don't call dev_kfree_skb() under spin_lock_irqsave() net: amd: lance: don't call dev_kfree_skb() under spin_lock_irqsave() net: amd-xgbe: Fix logic around active and passive cables net: amd-xgbe: Check only the minimum speed for active/passive cables can: tcan4x5x: Remove invalid write in clear_interrupts net: lan9303: Fix read error execution path ntb_netdev: Use dev_kfree_skb_any() in interrupt context sctp: sysctl: make extra pointers netns aware Bluetooth: btusb: don't call kfree_skb() under spin_lock_irqsave() Bluetooth: hci_qca: don't call kfree_skb() under spin_lock_irqsave() Bluetooth: hci_ll: don't call kfree_skb() under spin_lock_irqsave() Bluetooth: hci_h5: don't call kfree_skb() under spin_lock_irqsave() Bluetooth: hci_bcsp: don't call kfree_skb() under spin_lock_irqsave() Bluetooth: hci_core: don't call kfree_skb() under spin_lock_irqsave() Bluetooth: RFCOMM: don't call kfree_skb() under spin_lock_irqsave() stmmac: fix potential division by 0 apparmor: fix a memleak in multi_transaction_new() apparmor: fix lockdep warning when removing a namespace apparmor: Fix abi check to include v8 abi crypto: sun8i-ss - use dma_addr instead u32 crypto: nitrox - avoid double free on error path in nitrox_sriov_init() scsi: core: Fix a race between scsi_done() and scsi_timeout() apparmor: Use pointer to struct aa_label for lbs_cred PCI: dwc: Fix n_fts[] array overrun RDMA/core: Fix order of nldev_exit call PCI: pci-epf-test: Register notifier if only core_init_notifier is enabled f2fs: Fix the race condition of resize flag between resizefs crypto: rockchip - do not do custom power management crypto: rockchip - do not store mode globally crypto: rockchip - add fallback for cipher crypto: rockchip - add fallback for ahash crypto: rockchip - better handle cipher key crypto: rockchip - remove non-aligned handling crypto: rockchip - delete unneeded variable initialization crypto: rockchip - rework by using crypto_engine apparmor: Fix memleak in alloc_ns() f2fs: fix normal discard process RDMA/siw: Fix immediate work request flush to completion queue RDMA/nldev: Return "-EAGAIN" if the cm_id isn't from expected port RDMA/siw: Set defined status for work completion with undefined status scsi: scsi_debug: Fix a warning in resp_write_scat() crypto: ccree - Remove debugfs when platform_driver_register failed crypto: cryptd - Use request context instead of stack for sub-request crypto: hisilicon/qm - add missing pci_dev_put() in q_num_set() RDMA/hns: Repacing 'dseg_len' by macros in fill_ext_sge_inl_data() RDMA/hns: Fix ext_sge num error when post send PCI: Check for alloc failure in pci_request_irq() RDMA/hfi: Decrease PCI device reference count in error path crypto: ccree - Make cc_debugfs_global_fini() available for module init function RDMA/hns: fix memory leak in hns_roce_alloc_mr() RDMA/rxe: Fix NULL-ptr-deref in rxe_qp_do_cleanup() when socket create failed scsi: hpsa: Fix possible memory leak in hpsa_init_one() crypto: tcrypt - Fix multibuffer skcipher speed test mem leak padata: Always leave BHs disabled when running ->parallel() padata: Fix list iterator in padata_do_serial() scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add() scsi: hpsa: Fix error handling in hpsa_add_sas_host() scsi: hpsa: Fix possible memory leak in hpsa_add_sas_device() scsi: scsi_debug: Fix a warning in resp_verify() scsi: scsi_debug: Fix a warning in resp_report_zones() scsi: fcoe: Fix possible name leak when device_register() fails scsi: scsi_debug: Fix possible name leak in sdebug_add_host_helper() scsi: ipr: Fix WARNING in ipr_init() scsi: fcoe: Fix transport not deattached when fcoe_if_init() fails scsi: snic: Fix possible UAF in snic_tgt_create() RDMA/nldev: Add checks for nla_nest_start() in fill_stat_counter_qps() f2fs: avoid victim selection from previous victim section RDMA/nldev: Fix failure to send large messages crypto: amlogic - Remove kcalloc without check crypto: omap-sham - Use pm_runtime_resume_and_get() in omap_sham_probe() riscv/mm: add arch hook arch_clear_hugepage_flags RDMA/hfi1: Fix error return code in parse_platform_config() RDMA/srp: Fix error return code in srp_parse_options() orangefs: Fix sysfs not cleanup when dev init failed RDMA/hns: Fix PBL page MTR find RDMA/hns: Fix page size cap from firmware crypto: img-hash - Fix variable dereferenced before check 'hdev->req' hwrng: amd - Fix PCI device refcount leak hwrng: geode - Fix PCI device refcount leak IB/IPoIB: Fix queue count inconsistency for PKEY child interfaces drivers: dio: fix possible memory leak in dio_init() serial: tegra: Read DMA status before terminating class: fix possible memory leak in __class_register() vfio: platform: Do not pass return buffer to ACPI _RST method uio: uio_dmem_genirq: Fix missing unlock in irq configuration uio: uio_dmem_genirq: Fix deadlock between irq config and handling usb: fotg210-udc: Fix ages old endianness issues staging: vme_user: Fix possible UAF in tsi148_dma_list_add usb: typec: Check for ops->exit instead of ops->enter in altmode_exit usb: typec: tcpci: fix of node refcount leak in tcpci_register_port() usb: typec: tipd: Fix spurious fwnode_handle_put in error path serial: amba-pl011: avoid SBSA UART accessing DMACR register serial: pl011: Do not clear RX FIFO & RX interrupt in unthrottle. serial: pch: Fix PCI device refcount leak in pch_request_dma() tty: serial: clean up stop-tx part in altera_uart_tx_chars() tty: serial: altera_uart_{r,t}x_chars() need only uart_port serial: altera_uart: fix locking in polling mode serial: sunsab: Fix error handling in sunsab_init() test_firmware: fix memory leak in test_firmware_init() misc: ocxl: fix possible name leak in ocxl_file_register_afu() ocxl: fix pci device refcount leak when calling get_function_0() misc: tifm: fix possible memory leak in tifm_7xx1_switch_media() misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os firmware: raspberrypi: fix possible memory leak in rpi_firmware_probe() cxl: fix possible null-ptr-deref in cxl_guest_init_afu|adapter() cxl: fix possible null-ptr-deref in cxl_pci_init_afu|adapter() iio: temperature: ltc2983: make bulk write buffer DMA-safe genirq: Add IRQF_NO_AUTOEN for request_irq/nmi() iio:imu:adis: Use IRQF_NO_AUTOEN instead of irq request then disable iio: adis: handle devices that cannot unmask the drdy pin iio: adis: stylistic changes iio:imu:adis: Move exports into IIO_ADISLIB namespace iio: adis: add '__adis_enable_irq()' implementation counter: stm32-lptimer-cnt: fix the check on arr and cmp registers update usb: roles: fix of node refcount leak in usb_role_switch_is_parent() usb: gadget: f_hid: optional SETUP/SET_REPORT mode usb: gadget: f_hid: fix f_hidg lifetime vs cdev usb: gadget: f_hid: fix refcount leak on error path drivers: mcb: fix resource leak in mcb_probe() mcb: mcb-parse: fix error handing in chameleon_parse_gdd() chardev: fix error handling in cdev_device_add() i2c: pxa-pci: fix missing pci_disable_device() on error in ce4100_i2c_probe staging: rtl8192u: Fix use after free in ieee80211_rx() staging: rtl8192e: Fix potential use-after-free in rtllib_rx_Monitor() vme: Fix error not catched in fake_init() gpiolib: Get rid of redundant 'else' gpiolib: cdev: fix NULL-pointer dereferences i2c: mux: reg: check return value after calling platform_get_resource() i2c: ismt: Fix an out-of-bounds bug in ismt_access() usb: storage: Add check for kcalloc tracing/hist: Fix issue of losting command info in error_log samples: vfio-mdev: Fix missing pci_disable_device() in mdpy_fb_probe() thermal/drivers/imx8mm_thermal: Validate temperature range fbdev: ssd1307fb: Drop optional dependency fbdev: pm2fb: fix missing pci_disable_device() fbdev: via: Fix error in via_core_init() fbdev: vermilion: decrease reference count in error path fbdev: uvesafb: Fixes an error handling path in uvesafb_probe() HSI: omap_ssi_core: fix unbalanced pm_runtime_disable() HSI: omap_ssi_core: fix possible memory leak in ssi_probe() power: supply: fix residue sysfs file in error handle route of __power_supply_register() perf trace: Return error if a system call doesn't exist perf trace: Use macro RAW_SYSCALL_ARGS_NUM to replace number perf trace: Handle failure when trace point folder is missed perf symbol: correction while adjusting symbol HSI: omap_ssi_core: Fix error handling in ssi_init() power: supply: fix null pointer dereferencing in power_supply_get_battery_info RDMA/siw: Fix pointer cast warning iommu/sun50i: Fix reset release iommu/sun50i: Consider all fault sources for reset iommu/sun50i: Fix R/W permission check iommu/sun50i: Fix flush size phy: usb: s2 WoL wakeup_count not incremented for USB->Eth devices include/uapi/linux/swab: Fix potentially missing __always_inline pwm: tegra: Improve required rate calculation dmaengine: idxd: Fix crc_val field for completion record rtc: rtc-cmos: Do not check ACPI_FADT_LOW_POWER_S0 rtc: cmos: Fix event handler registration ordering issue rtc: cmos: Fix wake alarm breakage rtc: cmos: fix build on non-ACPI platforms rtc: cmos: Call cmos_wake_setup() from cmos_do_probe() rtc: cmos: Call rtc_wake_setup() from cmos_do_probe() rtc: cmos: Eliminate forward declarations of some functions rtc: cmos: Rename ACPI-related functions rtc: cmos: Disable ACPI RTC event on removal rtc: snvs: Allow a time difference on clock register read rtc: pcf85063: Fix reading alarm iommu/amd: Fix pci device refcount leak in ppr_notifier() iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe() macintosh: fix possible memory leak in macio_add_one_device() macintosh/macio-adb: check the return value of ioremap() powerpc/52xx: Fix a resource leak in an error handling path cxl: Fix refcount leak in cxl_calc_capp_routing powerpc/xmon: Enable breakpoints on 8xx powerpc/xmon: Fix -Wswitch-unreachable warning in bpt_cmds powerpc/xive: add missing iounmap() in error path in xive_spapr_populate_irq_data() kbuild: remove unneeded mkdir for external modules_install kbuild: unify modules(_install) for in-tree and external modules kbuild: refactor single builds of *.ko powerpc/perf: callchain validate kernel stack pointer bounds powerpc/83xx/mpc832x_rdb: call platform_device_put() in error case in of_fsl_spi_probe() powerpc/hv-gpci: Fix hv_gpci event list selftests/powerpc: Fix resource leaks iommu/sun50i: Remove IOMMU_DOMAIN_IDENTITY pwm: sifive: Call pwm_sifive_update_clock() while mutex is held remoteproc: sysmon: fix memory leak in qcom_add_sysmon_subdev() remoteproc: qcom_q6v5_pas: disable wakeup on probe fail or remove remoteproc: qcom_q6v5_pas: detach power domains on remove remoteproc: qcom_q6v5_pas: Fix missing of_node_put() in adsp_alloc_memory_region() powerpc/eeh: Drop redundant spinlock initialization powerpc/pseries/eeh: use correct API for error log size netfilter: flowtable: really fix NAT IPv6 offload rtc: st-lpc: Add missing clk_disable_unprepare in st_rtc_probe() rtc: pic32: Move devm_rtc_allocate_device earlier in pic32_rtc_probe() rtc: pcf85063: fix pcf85063_clkout_control NFSD: Remove spurious cb_setup_err tracepoint nfsd: under NFSv4.1, fix double svc_xprt_put on rpc_create failure net: macsec: fix net device access prior to holding a lock mISDN: hfcsusb: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() mISDN: hfcpci: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() mISDN: hfcmulti: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() nfc: pn533: Clear nfc_target before being used r6040: Fix kmemleak in probe and remove net: switch to storing KCOV handle directly in sk_buff net: add inline function skb_csum_is_sctp net: igc: use skb_csum_is_sctp instead of protocol check net: add a helper to avoid issues with HW TX timestamping and SO_TXTIME igc: Enhance Qbv scheduling by using first flag bit igc: Use strict cycles for Qbv scheduling igc: Add checking for basetime less than zero igc: recalculate Qbv end_time by considering cycle time igc: Lift TAPRIO schedule restriction igc: Set Qbv start_time and end_time to end_time if not being configured in GCL rtc: mxc_v2: Add missing clk_disable_unprepare() selftests: devlink: fix the fd redirect in dummy_reporter_test openvswitch: Fix flow lookup to use unmasked key skbuff: Account for tail adjustment during pull operations mailbox: zynq-ipi: fix error handling while device_register() fails net_sched: reject TCF_EM_SIMPLE case for complex ematch module rxrpc: Fix missing unlock in rxrpc_do_sendmsg() myri10ge: Fix an error handling path in myri10ge_probe() net: stream: purge sk_error_queue in sk_stream_kill_queues() rcu: Fix __this_cpu_read() lockdep warning in rcu_force_quiescent_state() arm64: make is_ttbrX_addr() noinstr-safe video: hyperv_fb: Avoid taking busy spinlock on panic path x86/hyperv: Remove unregister syscore call from Hyper-V cleanup binfmt_misc: fix shift-out-of-bounds in check_special_flags fs: jfs: fix shift-out-of-bounds in dbAllocAG udf: Avoid double brelse() in udf_rename() fs: jfs: fix shift-out-of-bounds in dbDiscardAG ACPICA: Fix error code path in acpi_ds_call_control_method() nilfs2: fix shift-out-of-bounds/overflow in nilfs_sb2_bad_offset() nilfs2: fix shift-out-of-bounds due to too large exponent of block size acct: fix potential integer overflow in encode_comp_t() hfs: fix OOB Read in __hfs_brec_find drm/etnaviv: add missing quirks for GC300 brcmfmac: return error when getting invalid max_flowrings from dongle wifi: ath9k: verify the expected usb_endpoints are present wifi: ar5523: Fix use-after-free on ar5523_cmd() timed out ASoC: codecs: rt298: Add quirk for KBL-R RVP platform ipmi: fix memleak when unload ipmi driver drm/amd/display: prevent memory leak qed (gcc13): use u16 for fid to be big enough bpf: make sure skb->len != 0 when redirecting to a tunneling device net: ethernet: ti: Fix return type of netcp_ndo_start_xmit() hamradio: baycom_epp: Fix return type of baycom_send_packet() wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmf_fw_alloc_request() igb: Do not free q_vector unless new one was allocated drm/amdgpu: Fix type of second parameter in trans_msg() callback drm/amdgpu: Fix type of second parameter in odn_edit_dpm_table() callback s390/ctcm: Fix return type of ctc{mp,}m_tx() s390/netiucv: Fix return type of netiucv_tx() s390/lcs: Fix return type of lcs_start_xmit() drm/msm: Use drm_mode_copy() drm/rockchip: Use drm_mode_copy() drm/sti: Use drm_mode_copy() drivers/md/md-bitmap: check the return value of md_bitmap_get_counter() md/raid1: stop mdx_raid1 thread when raid1 array run failed drm/amd/display: fix array index out of bound error in bios parser net: add atomic_long_t to net_device_stats fields mrp: introduce active flags to prevent UAF when applicant uninit ppp: associate skb with a device at tx bpf: Prevent decl_tag from being referenced in func_proto arg ethtool: avoiding integer overflow in ethtool_phys_id() media: dvb-frontends: fix leak of memory fw media: dvbdev: adopts refcnt to avoid UAF media: dvb-usb: fix memory leak in dvb_usb_adapter_init() blk-mq: fix possible memleak when register 'hctx' failed libbpf: Avoid enum forward-declarations in public API in C++ mode regulator: core: fix use_count leakage when handling boot-on mmc: f-sdh30: Add quirks for broken timeout clock capability mmc: renesas_sdhi: better reset from HS400 mode media: si470x: Fix use-after-free in si470x_int_in_callback() clk: st: Fix memory leak in st_of_quadfs_setup() hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param() drm/fsl-dcu: Fix return type of fsl_dcu_drm_connector_mode_valid() drm/sti: Fix return type of sti_{dvo,hda,hdmi}_connector_mode_valid() orangefs: Fix kmemleak in orangefs_prepare_debugfs_help_string() orangefs: Fix kmemleak in orangefs_{kernel,client}_debug_init() hwmon: (jc42) Fix missing unlock on error in jc42_write() ALSA/ASoC: hda: move/rename snd_hdac_ext_stop_streams to hdac_stream.c ALSA: hda: add snd_hdac_stop_streams() helper ASoC: Intel: Skylake: Fix driver hang during shutdown ASoC: mediatek: mt8173-rt5650-rt5514: fix refcount leak in mt8173_rt5650_rt5514_dev_probe() ASoC: audio-graph-card: fix refcount leak of cpu_ep in __graph_for_each_link() ASoC: rockchip: pdm: Add missing clk_disable_unprepare() in rockchip_pdm_runtime_resume() ASoC: wm8994: Fix potential deadlock ASoC: rockchip: spdif: Add missing clk_disable_unprepare() in rk_spdif_runtime_resume() ASoC: rt5670: Remove unbalanced pm_runtime_put() LoadPin: Ignore the "contents" argument of the LSM hooks pstore: Switch pmsg_lock to an rt_mutex to avoid priority inversion perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() afs: Fix lost servers_outstanding count pstore: Make sure CONFIG_PSTORE_PMSG selects CONFIG_RT_MUTEXES ima: Simplify ima_lsm_copy_rule ALSA: usb-audio: add the quirk for KT0206 device ALSA: hda/realtek: Add quirk for Lenovo TianYi510Pro-14IOB ALSA: hda/hdmi: Add HP Device 0x8711 to force connect list usb: dwc3: Fix race between dwc3_set_mode and __dwc3_set_mode usb: dwc3: core: defer probe on ulpi_read_id timeout HID: wacom: Ensure bootloader PID is usable in hidraw mode HID: mcp2221: don't connect hidraw reiserfs: Add missing calls to reiserfs_security_free() iio: adc: ad_sigma_delta: do not use internal iio_dev lock iio: adc128s052: add proper .data members in adc128_of_match table regulator: core: fix deadlock on regulator enable gcov: add support for checksum field ovl: fix use inode directly in rcu-walk mode media: dvbdev: fix build warning due to comments media: dvbdev: fix refcnt bug pwm: tegra: Fix 32 bit build usb: dwc3: qcom: Fix memory leak in dwc3_qcom_interconnect_init cifs: fix oops during encryption nvme-pci: fix doorbell buffer value endianness nvme-pci: fix mempool alloc size nvme-pci: fix page size checks ata: ahci: Fix PCS quirk application for suspend nvme: fix the NVME_CMD_EFFECTS_CSE_MASK definition nvmet: don't defer passthrough commands with trivial effects to the workqueue objtool: Fix SEGFAULT powerpc/rtas: avoid device tree lookups in rtas_os_term() powerpc/rtas: avoid scheduling in rtas_os_term() HID: multitouch: fix Asus ExpertBook P2 P2451FA trackpoint HID: plantronics: Additional PIDs for double volume key presses quirk pstore/zone: Use GFP_ATOMIC to allocate zone buffer hfsplus: fix bug causing custom uid and gid being unable to be assigned with mount binfmt: Fix error return code in load_elf_fdpic_binary() ovl: Use ovl mounter's fsuid and fsgid in ovl_link() ALSA: line6: correct midi status byte when receiving data from podxt ALSA: line6: fix stack overflow in line6_midi_transmit pnode: terminate at peers of source md: fix a crash in mempool_free mm, compaction: fix fast_isolate_around() to stay within boundaries f2fs: should put a page when checking the summary info mmc: vub300: fix warning - do not call blocking ops when !TASK_RUNNING tpm: acpi: Call acpi_put_table() to fix memory leak tpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak tpm: tpm_tis: Add the missed acpi_put_table() to fix memory leak SUNRPC: Don't leak netobj memory when gss_read_proxy_verf() fails kcsan: Instrument memcpy/memset/memmove with newer Clang ASoC: Intel/SOF: use set_stream() instead of set_tdm_slots() for HDAudio ASoC/SoundWire: dai: expand 'stream' concept beyond SoundWire net/mlx5e: Fix nullptr in mlx5e_tc_add_fdb_flow() wifi: rtlwifi: remove always-true condition pointed out by GCC 12 wifi: rtlwifi: 8192de: correct checking of IQK reload torture: Exclude "NOHZ tick-stop error" from fatal errors rcu: Prevent lockdep-RCU splats on lock acquisition/release net/af_packet: add VLAN support for AF_PACKET SOCK_RAW GSO net/af_packet: make sure to pull mac header media: stv0288: use explicitly signed char soc: qcom: Select REMAP_MMIO for LLCC driver kest.pl: Fix grub2 menu handling for rebooting ktest.pl minconfig: Unset configs instead of just removing them jbd2: use the correct print format arm64: dts: qcom: sdm845-db845c: correct SPI2 pins drive strength mmc: sdhci-sprd: Disable CLK_AUTO when the clock is less than 400K btrfs: fix resolving backrefs for inline extent followed by prealloc ARM: ux500: do not directly dereference __iomem arm64: dts: qcom: sdm850-lenovo-yoga-c630: correct I2C12 pins drive strength selftests: Use optional USERCFLAGS and USERLDFLAGS PM/devfreq: governor: Add a private governor_data for governor cpufreq: Init completion before kobject_init_and_add() ALSA: patch_realtek: Fix Dell Inspiron Plus 16 ALSA: hda/realtek: Apply dual codec fixup for Dell Latitude laptops dm cache: Fix ABBA deadlock between shrink_slab and dm_cache_metadata_abort dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata dm thin: Use last transaction's pmd->root when commit failed dm thin: resume even if in FAIL mode dm thin: Fix UAF in run_timer_softirq() dm integrity: Fix UAF in dm_integrity_dtr() dm clone: Fix UAF in clone_dtr() dm cache: Fix UAF in destroy() dm cache: set needs_check flag after aborting metadata tracing/hist: Fix out-of-bound write on 'action_data.var_ref_idx' perf/core: Call LSM hook after copying perf_event_attr KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails x86/microcode/intel: Do not retry microcode reloading on the APs ftrace/x86: Add back ftrace_expected for ftrace bug reports x86/kprobes: Fix kprobes instruction boudary check with CONFIG_RETHUNK tracing/hist: Fix wrong return value in parse_action_params() tracing: Fix infinite loop in tracing_read_pipe on overflowed print_trace_line staging: media: tegra-video: fix chan->mipi value on error ARM: 9256/1: NWFPE: avoid compiler-generated __aeabi_uldivmod media: dvb-core: Fix double free in dvb_register_device() media: dvb-core: Fix UAF due to refcount races at releasing cifs: fix confusing debug message cifs: fix missing display of three mount options rtc: ds1347: fix value written to century register md/bitmap: Fix bitmap chunk size overflow issues efi: Add iMac Pro 2017 to uefi skip cert quirk wifi: wilc1000: sdio: fix module autoloading ASoC: jz4740-i2s: Handle independent FIFO flush bits ipmi: fix long wait in unload when IPMI disconnect mtd: spi-nor: Check for zero erase size in spi_nor_find_best_erase_type() ima: Fix a potential NULL pointer access in ima_restore_measurement_list ipmi: fix use after free in _ipmi_destroy_user() PCI: Fix pci_device_is_present() for VFs by checking PF PCI/sysfs: Fix double free in error path crypto: n2 - add missing hash statesize driver core: Fix bus_type.match() error handling in __driver_attach() iommu/amd: Fix ivrs_acpihid cmdline parsing code remoteproc: core: Do pm_relax when in RPROC_OFFLINE state parisc: led: Fix potential null-ptr-deref in start_task() device_cgroup: Roll back to original exceptions after copy failure drm/connector: send hotplug uevent on connector cleanup drm/vmwgfx: Validate the box size for the snooped cursor drm/i915/dsi: fix VBT send packet port selection for dual link DSI drm/ingenic: Fix missing platform_driver_unregister() call in ingenic_drm_init() ext4: silence the warning when evicting inode with dioread_nolock ext4: add inode table check in __ext4_get_inode_loc to aovid possible infinite loop ext4: fix use-after-free in ext4_orphan_cleanup ext4: fix undefined behavior in bit shift for ext4_check_flag_values ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inode ext4: add helper to check quota inums ext4: fix bug_on in __es_tree_search caused by bad quota inode ext4: fix reserved cluster accounting in __es_remove_extent() ext4: check and assert if marking an no_delete evicting inode dirty ext4: fix bug_on in __es_tree_search caused by bad boot loader inode ext4: init quota for 'old.inode' in 'ext4_rename' ext4: fix delayed allocation bug in ext4_clu_mapped for bigalloc + inline ext4: fix corruption when online resizing a 1K bigalloc fs ext4: fix error code return to user-space in ext4_get_branch() ext4: avoid BUG_ON when creating xattrs ext4: fix inode leak in ext4_xattr_inode_create() on an error path ext4: initialize quota before expanding inode in setproject ioctl ext4: avoid unaccounted block allocation when expanding inode ext4: allocate extended attribute value in vmalloc area drm/amdgpu: handle polaris10/11 overlap asics (v2) drm/amdgpu: make display pinning more flexible (v2) ARM: renumber bits related to _TIF_WORK_MASK perf/x86/intel/uncore: Generalize I/O stacks to PMON mapping procedure perf/x86/intel/uncore: Clear attr_update properly btrfs: replace strncpy() with strscpy() x86/mce: Get rid of msr_ops x86/MCE/AMD: Clear DFR errors found in THR handler media: s5p-mfc: Fix to handle reference queue during finishing media: s5p-mfc: Clear workbit to handle error condition media: s5p-mfc: Fix in register read and write for H264 perf probe: Use dwarf_attr_integrate as generic DWARF attr accessor perf probe: Fix to get the DW_AT_decl_file and DW_AT_call_file as unsinged data x86/kprobes: Convert to insn_decode() x86/kprobes: Fix optprobe optimization check with CONFIG_RETHUNK staging: media: tegra-video: fix device_node use after free ravb: Fix "failed to switch device to config mode" message during unbind riscv/stacktrace: Fix stack output without ra on the stack top riscv: stacktrace: Fixup ftrace_graph_ret_addr retp argument ext4: goto right label 'failed_mount3a' ext4: correct inconsistent error msg in nojournal mode mm/highmem: Lift memcpy_[to|from]_page to core ext4: use memcpy_to_page() in pagecache_write() fs: ext4: initialize fsdata in pagecache_write() ext4: move functions in super.c ext4: simplify ext4 error translation ext4: fix various seppling typos ext4: fix leaking uninitialized memory in fast-commit journal ext4: use kmemdup() to replace kmalloc + memcpy mbcache: don't reclaim used entries mbcache: add functions to delete entry if unused ext4: remove EA inode entry from mbcache on inode eviction ext4: unindent codeblock in ext4_xattr_block_set() ext4: fix race when reusing xattr blocks mbcache: automatically delete entries from cache on freeing ext4: fix deadlock due to mbcache entry corruption SUNRPC: ensure the matching upcall is in-flight upon downcall bpf: pull before calling skb_postpull_rcsum() drm/panfrost: Fix GEM handle creation ref-counting vmxnet3: correctly report csum_level for encapsulated packet veth: Fix race with AF_XDP exposing old or uninitialized descriptors nfsd: shut down the NFSv4 state objects before the filecache net: hns3: add interrupts re-initialization while doing VF FLR net: sched: fix memory leak in tcindex_set_parms qlcnic: prevent ->dcb use-after-free on qlcnic_dcb_enable() failure nfc: Fix potential resource leaks vhost/vsock: Fix error handling in vhost_vsock_init() vringh: fix range used in iotlb_translate() vhost: fix range used in translate_desc() net/mlx5: Add forgotten cleanup calls into mlx5_init_once() error path net/mlx5: Avoid recovery in probe flows net/mlx5e: IPoIB, Don't allow CQE compression to be turned on by default net/mlx5e: Fix hw mtu initializing at XDP SQ allocation net: amd-xgbe: add missed tasklet_kill net: phy: xgmiitorgmii: Fix refcount leak in xgmiitorgmii_probe RDMA/mlx5: Fix validation of max_rd_atomic caps for DC drm/meson: Reduce the FIFO lines held when AFBC is not used filelock: new helper: vfs_inode_has_locks ceph: switch to vfs_inode_has_locks() to fix file lock bug gpio: sifive: Fix refcount leak in sifive_gpio_probe net: sched: atm: dont intepret cls results when asked to drop net: sched: cbq: dont intepret cls results when asked to drop netfilter: ipset: fix hash:net,port,net hang with /0 subnet netfilter: ipset: Rework long task execution when adding/deleting entries perf tools: Fix resources leak in perf_data__open_dir() drivers/net/bonding/bond_3ad: return when there's no aggregator usb: rndis_host: Secure rndis_query check against int overflow drm/i915: unpin on error in intel_vgpu_shadow_mm_pin() caif: fix memory leak in cfctrl_linkup_request() udf: Fix extension of the last extent in the file ASoC: Intel: bytcr_rt5640: Add quirk for the Advantech MICA-071 tablet nvme: fix multipath crash caused by flush request when blktrace is enabled x86/bugs: Flush IBP in ib_prctl_set() nfsd: fix handling of readdir in v4root vs. mount upcall timeout fbdev: matroxfb: G200eW: Increase max memory from 1 MB to 16 MB riscv: uaccess: fix type of 0 variable on error in get_user() drm/i915/gvt: fix gvt debugfs destroy drm/i915/gvt: fix vgpu debugfs clean in remove ext4: don't allow journal inode to have encrypt flag selftests: set the BUILD variable to absolute path hfs/hfsplus: use WARN_ON for sanity check hfs/hfsplus: avoid WARN_ON() for sanity check, use proper error handling mbcache: Avoid nesting of cache->c_list_lock under bit locks efi: random: combine bootloader provided RNG seed with RNG protocol output io_uring: Fix unsigned 'res' comparison with zero in io_fixup_rw_res() parisc: Align parisc MADV_XXX constants with all other architectures ext4: disable fast-commit of encrypted dir operations ext4: don't set up encryption key during jbd2 transaction fsl_lpuart: Don't enable interrupts too early serial: fixup backport of "serial: Deassert Transmit Enable on probe in driver-specific way" mptcp: mark ops structures as ro_after_init mptcp: remove MPTCP 'ifdef' in TCP SYN cookies mptcp: dedicated request sock for subflow in v6 mptcp: use proper req destructor for IPv6 net: sched: disallow noqueue for qdisc classes net/ulp: prevent ULP without clone op from entering the LISTEN status ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF ALSA: hda/hdmi: Add a HP device 0x8715 to force connect list ALSA: hda - Enable headset mic on another Dell laptop with ALC3254 Linux 5.10.163 Change-Id: I9026971760be8484f1e1fa607f9f91243cc87785 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-02-06 12:30:05 +00:00
Greg Kroah-Hartman	8596b99884	Merge 5.10.162 into android12-5.10-lts ... Changes in 5.10.162 kernel: provide create_io_thread() helper iov_iter: add helper to save iov_iter state saner calling conventions for unlazy_child() fs: add support for LOOKUP_CACHED fix handling of nd->depth on LOOKUP_CACHED failures in try_to_unlazy* Make sure nd->path.mnt and nd->path.dentry are always valid pointers fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED tools headers UAPI: Sync openat2.h with the kernel sources net: provide __sys_shutdown_sock() that takes a socket net: add accept helper not installing fd signal: Add task_sigpending() helper fs: make do_renameat2() take struct filename file: Rename __close_fd_get_file close_fd_get_file fs: provide locked helper variant of close_fd_get_file() entry: Add support for TIF_NOTIFY_SIGNAL task_work: Use TIF_NOTIFY_SIGNAL if available x86: Wire up TIF_NOTIFY_SIGNAL arc: add support for TIF_NOTIFY_SIGNAL arm64: add support for TIF_NOTIFY_SIGNAL m68k: add support for TIF_NOTIFY_SIGNAL nios32: add support for TIF_NOTIFY_SIGNAL parisc: add support for TIF_NOTIFY_SIGNAL powerpc: add support for TIF_NOTIFY_SIGNAL mips: add support for TIF_NOTIFY_SIGNAL s390: add support for TIF_NOTIFY_SIGNAL um: add support for TIF_NOTIFY_SIGNAL sh: add support for TIF_NOTIFY_SIGNAL openrisc: add support for TIF_NOTIFY_SIGNAL csky: add support for TIF_NOTIFY_SIGNAL hexagon: add support for TIF_NOTIFY_SIGNAL microblaze: add support for TIF_NOTIFY_SIGNAL arm: add support for TIF_NOTIFY_SIGNAL xtensa: add support for TIF_NOTIFY_SIGNAL alpha: add support for TIF_NOTIFY_SIGNAL c6x: add support for TIF_NOTIFY_SIGNAL h8300: add support for TIF_NOTIFY_SIGNAL ia64: add support for TIF_NOTIFY_SIGNAL nds32: add support for TIF_NOTIFY_SIGNAL riscv: add support for TIF_NOTIFY_SIGNAL sparc: add support for TIF_NOTIFY_SIGNAL ia64: don't call handle_signal() unless there's actually a signal queued ARC: unbork 5.11 bootup: fix snafu in _TIF_NOTIFY_SIGNAL handling alpha: fix TIF_NOTIFY_SIGNAL handling task_work: remove legacy TWA_SIGNAL path kernel: remove checking for TIF_NOTIFY_SIGNAL coredump: Limit what can interrupt coredumps kernel: allow fork with TIF_NOTIFY_SIGNAL pending entry/kvm: Exit to user mode when TIF_NOTIFY_SIGNAL is set arch: setup PF_IO_WORKER threads like PF_KTHREAD arch: ensure parisc/powerpc handle PF_IO_WORKER in copy_thread() x86/process: setup io_threads more like normal user space threads kernel: stop masking signals in create_io_thread() kernel: don't call do_exit() for PF_IO_WORKER threads task_work: add helper for more targeted task_work canceling io_uring: import 5.15-stable io_uring signal: kill JOBCTL_TASK_WORK task_work: unconditionally run task_work from get_signal() net: remove cmsg restriction from io_uring based send/recvmsg calls Revert "proc: don't allow async path resolution of /proc/thread-self components" Revert "proc: don't allow async path resolution of /proc/self components" eventpoll: add EPOLL_URING_WAKE poll wakeup flag eventfd: provide a eventfd_signal_mask() helper io_uring: pass in EPOLL_URING_WAKE for eventfd signaling and wakeups Linux 5.10.162 Change-Id: I50a7b8bc8d38fac612113281b218cf5323b0af5e Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-02-01 16:13:18 +00:00
Eric Dumazet	539ca5dcbc	netlink: prevent potential spectre v1 gadgets ... [ Upstream commit f0950402e8c76e7dcb08563f1b4e8000fbc62455 ] Most netlink attributes are parsed and validated from __nla_validate_parse() or validate_nla() u16 type = nla_type(nla); if (type == 0 || type > maxtype) { /* error or continue */ } @type is then used as an array index and can be used as a Spectre v1 gadget. array_index_nospec() can be used to prevent leaking content of kernel memory to malicious users. This should take care of vast majority of netlink uses, but an audit is needed to take care of others where validation is not yet centralized in core netlink functions. Fixes: bfa83a9e03 ("[NETLINK]: Type-safe netlink messages/attributes interface") Signed-off-by: Eric Dumazet <edumazet@google.com> Link: https://lore.kernel.org/r/20230119110150.2678537-1-edumazet@google.com Signed-off-by: Jakub Kicinski <kuba@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-02-01 08:23:23 +01:00
Kees Cook	55eba18262	panic: Consolidate open-coded panic_on_warn checks ... commit 79cc1ba7badf9e7a12af99695a557e9ce27ee967 upstream. Several run-time checkers (KASAN, UBSAN, KFENCE, KCSAN, sched) roll their own warnings, and each check "panic_on_warn". Consolidate this into a single function so that future instrumentation can be added in a single location. Cc: Marco Elver <elver@google.com> Cc: Dmitry Vyukov <dvyukov@google.com> Cc: Ingo Molnar <mingo@redhat.com> Cc: Peter Zijlstra <peterz@infradead.org> Cc: Juri Lelli <juri.lelli@redhat.com> Cc: Vincent Guittot <vincent.guittot@linaro.org> Cc: Dietmar Eggemann <dietmar.eggemann@arm.com> Cc: Steven Rostedt <rostedt@goodmis.org> Cc: Ben Segall <bsegall@google.com> Cc: Mel Gorman <mgorman@suse.de> Cc: Daniel Bristot de Oliveira <bristot@redhat.com> Cc: Valentin Schneider <vschneid@redhat.com> Cc: Andrey Ryabinin <ryabinin.a.a@gmail.com> Cc: Alexander Potapenko <glider@google.com> Cc: Andrey Konovalov <andreyknvl@gmail.com> Cc: Vincenzo Frascino <vincenzo.frascino@arm.com> Cc: Andrew Morton <akpm@linux-foundation.org> Cc: David Gow <davidgow@google.com> Cc: tangmeng <tangmeng@uniontech.com> Cc: Jann Horn <jannh@google.com> Cc: Shuah Khan <skhan@linuxfoundation.org> Cc: Petr Mladek <pmladek@suse.com> Cc: "Paul E. McKenney" <paulmck@kernel.org> Cc: Sebastian Andrzej Siewior <bigeasy@linutronix.de> Cc: "Guilherme G. Piccoli" <gpiccoli@igalia.com> Cc: Tiezhu Yang <yangtiezhu@loongson.cn> Cc: kasan-dev@googlegroups.com Cc: linux-mm@kvack.org Reviewed-by: Luis Chamberlain <mcgrof@kernel.org> Signed-off-by: Kees Cook <keescook@chromium.org> Reviewed-by: Marco Elver <elver@google.com> Reviewed-by: Andrey Konovalov <andreyknvl@gmail.com> Link: https://lore.kernel.org/r/20221117234328.594699-4-keescook@chromium.org Signed-off-by: Eric Biggers <ebiggers@google.com> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-02-01 08:23:20 +01:00
Tiezhu Yang	b857b42a8c	ubsan: no need to unset panic_on_warn in ubsan_epilogue() ... commit d83ce027a54068fabb70d2c252e1ce2da86784a4 upstream. panic_on_warn is unset inside panic(), so no need to unset it before calling panic() in ubsan_epilogue(). Link: https://lkml.kernel.org/r/1644324666-15947-5-git-send-email-yangtiezhu@loongson.cn Signed-off-by: Tiezhu Yang <yangtiezhu@loongson.cn> Reviewed-by: Marco Elver <elver@google.com> Cc: Andrey Ryabinin <ryabinin.a.a@gmail.com> Cc: Baoquan He <bhe@redhat.com> Cc: Jonathan Corbet <corbet@lwn.net> Cc: Xuefeng Li <lixuefeng@loongson.cn> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org> Signed-off-by: Eric Biggers <ebiggers@google.com> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-02-01 08:23:19 +01:00
Mateusz Guzik	20a02bc845	lockref: stop doing cpu_relax in the cmpxchg loop ... [ Upstream commit f5fe24ef17b5fbe6db49534163e77499fb10ae8c ] On the x86-64 architecture even a failing cmpxchg grants exclusive access to the cacheline, making it preferable to retry the failed op immediately instead of stalling with the pause instruction. To illustrate the impact, below are benchmark results obtained by running various will-it-scale tests on top of the 6.2-rc3 kernel and Cascade Lake (2 sockets * 24 cores * 2 threads) CPU. All results in ops/s. Note there is some variance in re-runs, but the code is consistently faster when contention is present. open3 ("Same file open/close"): proc stock no-pause 1 805603 814942 (+%1) 2 1054980 1054781 (-0%) 8 1544802 1822858 (+18%) 24 1191064 2199665 (+84%) 48 851582 1469860 (+72%) 96 609481 1427170 (+134%) fstat2 ("Same file fstat"): proc stock no-pause 1 3013872 3047636 (+1%) 2 4284687 4400421 (+2%) 8 3257721 5530156 (+69%) 24 2239819 5466127 (+144%) 48 1701072 5256609 (+209%) 96 1269157 6649326 (+423%) Additionally, a kernel with a private patch to help access() scalability: access2 ("Same file access"): proc stock patched patched +nopause 24 2378041 2005501 5370335 (-15% / +125%) That is, fixing the problems in access itself *reduces* scalability after the cacheline ping-pong only happens in lockref with the pause instruction. Note that fstat and access benchmarks are not currently integrated into will-it-scale, but interested parties can find them in pull requests to said project. Code at hand has a rather tortured history. First modification showed up in commit d472d9d98b ("lockref: Relax in cmpxchg loop"), written with Itanium in mind. Later it got patched up to use an arch-dependent macro to stop doing it on s390 where it caused a significant regression. Said macro had undergone revisions and was ultimately eliminated later, going back to cpu_relax. While I intended to only remove cpu_relax for x86-64, I got the following comment from Linus: I would actually prefer just removing it entirely and see if somebody else hollers. You have the numbers to prove it hurts on real hardware, and I don't think we have any numbers to the contrary. So I think it's better to trust the numbers and remove it as a failure, than say "let's just remove it on x86-64 and leave everybody else with the potentially broken code" Additionally, Will Deacon (maintainer of the arm64 port, one of the architectures previously benchmarked): So, from the arm64 side of the fence, I'm perfectly happy just removing the cpu_relax() calls from lockref. As such, come back full circle in history and whack it altogether. Signed-off-by: Mateusz Guzik <mjguzik@gmail.com> Link: https://lore.kernel.org/all/CAGudoHHx0Nqg6DE70zAVA75eV-HXfWyhVMWZ-aSeOofkA_=WdA@mail.gmail.com/ Acked-by: Tony Luck <tony.luck@intel.com> # ia64 Acked-by: Nicholas Piggin <npiggin@gmail.com> # powerpc Acked-by: Will Deacon <will@kernel.org> # arm64 Acked-by: Peter Zijlstra <peterz@infradead.org> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-02-01 08:23:18 +01:00
Greg Kroah-Hartman	d0782c9411	Merge tag 'android12-5.10.160_r00' into android12-5.10 ... This is the merge of the upstream LTS release of 5.10.160 into the android12-5.10 branch. It contains the following commits: 003c389455 Merge 5.10.160 into android12-5.10-lts a2428a8dcb Linux 5.10.160 54c15f67cb ASoC: ops: Correct bounds check for second channel on SX controls 74b139c63f nvme-pci: clear the prp2 field when not used 77ebf88e00 ASoC: cs42l51: Correct PGA Volume minimum value 4db1d19b74 can: mcba_usb: Fix termination command argument 683837f2f6 can: sja1000: fix size of OCR_MODE_MASK define 434b523671 pinctrl: meditatek: Startup with the IRQs disabled 5cb4abb0ca libbpf: Use page size as max_entries when probing ring buffer map 50b5f6d4d9 ASoC: ops: Check bounds for second channel in snd_soc_put_volsw_sx() 344739dc56 ASoC: fsl_micfil: explicitly clear CHnF flags a49c1a7307 ASoC: fsl_micfil: explicitly clear software reset bit 75454b4bbf io_uring: add missing item types for splice request 17f386e6b7 fuse: always revalidate if exclusive create eb6313c129 nfp: fix use-after-free in area_cache_get() 965d93fb39 vfs: fix copy_file_range() averts filesystem freeze protection ed96733949 vfs: fix copy_file_range() regression in cross-fs copies 970862a96c x86/smpboot: Move rcu_cpu_starting() earlier 32e45c58a0 Merge "Merge 5.10.159 into android12-5.10-lts" into android12-5.10-lts d31626cbea ANDROID: usb: gadget: uvc: remove duplicate code in unbind 01ef2d0b53 Merge 5.10.159 into android12-5.10-lts 931578be69 Linux 5.10.159 4fd6f84e0a can: esd_usb: Allow REC and TEC to return to zero cf0e423106 macsec: add missing attribute validation for offload 6b03e41767 net: mvneta: Fix an out of bounds check 8208d7e56b ipv6: avoid use-after-free in ip6_fragment() 3d59adad12 net: plip: don't call kfree_skb/dev_kfree_skb() under spin_lock_irq() a00444e25b xen/netback: fix build warning 87277bdf2c ethernet: aeroflex: fix potential skb leak in greth_init_rings() cc668fddde tipc: call tipc_lxc_xmit without holding node_read_lock 4be43e46c3 net: dsa: sja1105: fix memory leak in sja1105_setup_devlink_regions() 8e3f9ac009 ipv4: Fix incorrect route flushing when table ID 0 is used 5211e5ff9d ipv4: Fix incorrect route flushing when source address is deleted 36e248269a tipc: Fix potential OOB in tipc_link_proto_rcv() 93aaa4bb72 net: hisilicon: Fix potential use-after-free in hix5hd2_rx() 296a50aa8b net: hisilicon: Fix potential use-after-free in hisi_femac_rx() 8d1aed7a11 net: thunderx: Fix missing destroy_workqueue of nicvf_rx_mode_wq a5cfbc1995 ip_gre: do not report erspan version on GRE interface 696e34d54c net: stmmac: fix "snps,axi-config" node property parsing ca26f45083 nvme initialize core quirks before calling nvme_init_subsystem 27eb2d7a1b NFC: nci: Bounds check struct nfc_target arrays a2506b19d7 i40e: Disallow ip4 and ip6 l4_4_bytes 8329b65e34 i40e: Fix for VF MAC address 0 215f3ac53b i40e: Fix not setting default xps_cpus after reset 146ebee8fc net: mvneta: Prevent out of bounds read in mvneta_config_rss() e6860c889f xen-netfront: Fix NULL sring after live migration 3d3b30718a net: encx24j600: Fix invalid logic in reading of MISTAT register 51ba1820e7 net: encx24j600: Add parentheses to fix precedence 42c319635c mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add() 4c693330ce selftests: rtnetlink: correct xfrm policy rule in kci_test_ipsec_offload bccda3ad07 net: dsa: ksz: Check return value e7b9504581 Bluetooth: Fix not cleanup led when bt_init fails 1717354d77 Bluetooth: 6LoWPAN: add missing hci_dev_put() in get_l2cap_conn() 80c69b31aa vmxnet3: correctly report encapsulated LRO packet 575a6266f6 af_unix: Get user_ns from in_skb in unix_diag_get_exact(). 6c788c0a25 drm: bridge: dw_hdmi: fix preference of RGB modes over YUV420 de918d9738 igb: Allocate MSI-X vector when testing 6595c9208d e1000e: Fix TX dispatch condition 5ee6413d3d gpio: amd8111: Fix PCI device reference count leak b9aca69a6c drm/bridge: ti-sn65dsi86: Fix output polarity setting bug b46e8c50c3 netfilter: ctnetlink: fix compilation warning after data race fixes in ct mark 0a8e66e375 ca8210: Fix crash by zero initializing data 27c71825ff ieee802154: cc2520: Fix error return code in cc2520_hw_init() a0418d0a6b netfilter: nft_set_pipapo: Actually validate intervals in fields after the first one cb283cca1d rtc: mc146818-lib: fix signedness bug in mc146818_get_time() 5c432383b6 rtc: mc146818-lib: fix locking in mc146818_set_time 5e26531d81 rtc: cmos: Disable irq around direct invocation of cmos_interrupt() fccee93eb2 mm/hugetlb: fix races when looking up a CONT-PTE/PMD size hugetlb page c42221efb1 can: af_can: fix NULL pointer dereference in can_rcv_filter bc03f809da HID: core: fix shift-out-of-bounds in hid_report_raw_event 959a23a4d1 HID: hid-lg4ff: Add check for empty lbuf 4dde75945a HID: usbhid: Add ALWAYS_POLL quirk for some mice 11e95d85c3 drm/shmem-helper: Avoid vm_open error paths 6a4da05acd drm/shmem-helper: Remove errant put in error path 007f561f59 drm/vmwgfx: Don't use screen objects when SEV is active 3cb78c3925 KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field 549b46f813 Bluetooth: Fix crash when replugging CSR fake controllers 380d183e99 Bluetooth: btusb: Add debug message for CSR controllers f1cf856123 mm/gup: fix gup_pud_range() for dax f1f7f36cf6 memcg: fix possible use-after-free in memcg_write_event_control() 32f01f0306 media: v4l2-dv-timings.c: fix too strict blanking sanity checks 043b2bc96c Revert "ARM: dts: imx7: Fix NAND controller size-cells" abfb8ae69b media: videobuf2-core: take mmap_lock in vb2_get_unmapped_area() 83632fc414 xen/netback: don't call kfree_skb() with interrupts disabled 3eecd2bc10 xen/netback: do some code cleanup 49e07c0768 xen/netback: Ensure protocol headers don't fall in the non-linear area db44a9443e rtc: mc146818: Reduce spinlock section in mc146818_set_time() 17293d630f rtc: cmos: Replace spin_lock_irqsave with spin_lock in hard IRQ acfd8ef683 rtc: cmos: avoid UIP when reading alarm time 949bae0282 rtc: cmos: avoid UIP when writing alarm time 33ac73a41a rtc: mc146818-lib: extract mc146818_avoid_UIP 8bb5fe5830 rtc: mc146818-lib: fix RTC presence check 775d4661f1 rtc: Check return value from mc146818_get_time() b9a5c470e0 rtc: mc146818-lib: change return values of mc146818_get_time() 94eaf9966e rtc: cmos: remove stale REVISIT comments f5b51f8550 rtc: mc146818: Dont test for bit 0-5 in Register D 3736972360 rtc: mc146818: Detect and handle broken RTCs 7c7075c88d rtc: mc146818: Prevent reading garbage 7f445ca2e0 mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths 4a1cdb49d0 mm/khugepaged: fix GUP-fast interaction by sending IPI cdfd3739b2 mm/khugepaged: take the right locks for page table retraction 1c0eec6a1d net: usb: qmi_wwan: add u-blox 0x1342 composition a8c5ffb4df 9p/xen: check logical size for buffer size ec36ebae36 usb: dwc3: gadget: Disable GUSB2PHYCFG.SUSPHY for End Transfer d9b53caf01 fbcon: Use kzalloc() in fbcon_prepare_logo() 8b130c770d regulator: twl6030: fix get status of twl6032 regulators f6f45e5383 ASoC: soc-pcm: Add NULL check in BE reparenting 688a45aff2 btrfs: send: avoid unaligned encoded writes when attempting to clone range 15c42ab8d4 ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event d38e021416 regulator: slg51000: Wait after asserting CS pin 1331bcfcac 9p/fd: Use P9_HDRSZ for header size 96b43f36a5 ARM: dts: rockchip: disable arm_global_timer on rk3066 and rk3188 ddf58f5939 ASoC: wm8962: Wait for updated value of WM8962_CLOCKING1 register dbd78abd69 ARM: 9266/1: mm: fix no-MMU ZERO_PAGE() implementation bb1866cf1e ARM: 9251/1: perf: Fix stacktraces for tracepoint events in THUMB2 kernels b1f40a0cdf ARM: dts: rockchip: rk3188: fix lcdc1-rgb24 node name 5f9474d07b arm64: dts: rockchip: fix ir-receiver node names 060d58924a ARM: dts: rockchip: fix ir-receiver node names 3e0c466771 arm: dts: rockchip: fix node name for hym8563 rtc 3ada63a876 arm64: dts: rockchip: keep I2S1 disabled for GPIO function on ROCK Pi 4 series 202ee06349 Revert "mmc: sdhci: Fix voltage switch delay" 0b0939466f ANDROID: gki_defconfig: add CONFIG_FUNCTION_ERROR_INJECTION 5ab4c6b843 Merge 5.10.158 into android12-5.10-lts 592346d5dc Linux 5.10.158 cc1b4718cc ipc/sem: Fix dangling sem_array access in semtimedop race d072a10c81 v4l2: don't fall back to follow_pfn() if pin_user_pages_fast() fails 9ba389863a proc: proc_skip_spaces() shouldn't think it is working on C strings 4aa32aaef6 proc: avoid integer type confusion in get_proc_long 5f2f775605 block: unhash blkdev part inode when the part is deleted a82869ac52 Input: raydium_ts_i2c - fix memory leak in raydium_i2c_send() 4e0d6c687c char: tpm: Protect tpm_pm_suspend with locks 5a6f935ef3 Revert "clocksource/drivers/riscv: Events are stopped during CPU suspend" f075cf139f ACPI: HMAT: Fix initiator registration for single-initiator systems f3b76b4d38 ACPI: HMAT: remove unnecessary variable initialization 63e72417a1 i2c: imx: Only DMA messages with I2C_M_DMA_SAFE flag set df76136598 i2c: npcm7xx: Fix error handling in npcm_i2c_init() 7462cd2443 x86/pm: Add enumeration check before spec MSRs save/restore setup 5e3d4a68e2 x86/tsx: Add a feature bit for TSX control MSR support b7f7a0402e Revert "tty: n_gsm: avoid call of sleeping functions from atomic context" 481f9ed8eb ipv4: Fix route deletion when nexthop info is not specified 0b5394229e ipv4: Handle attempt to delete multipath route when fib_info contains an nh reference 4919503426 selftests: net: fix nexthop warning cleanup double ip typo 7ca14c5f24 selftests: net: add delete nexthop route warning test f09ac62f0e Kconfig.debug: provide a little extra FRAME_WARN leeway when KASAN is enabled 19d91d3798 parisc: Increase FRAME_WARN to 2048 bytes on parisc fcf20da099 xtensa: increase size of gcc stack frame check a1877001ed parisc: Increase size of gcc stack frame check a5c65cd56a iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init() 10ed7655a1 iommu/vt-d: Fix PCI device refcount leak in has_external_pci() 302edce1dd pinctrl: single: Fix potential division by zero b50c964189 ASoC: ops: Fix bounds check for _sx controls a2efc46524 io_uring: don't hold uring_lock when calling io_run_task_work* be111ebd88 tracing: Free buffers when a used dynamic event is removed 648b92e576 drm/i915: Never return 0 if not all requests retired 8649c023c4 drm/amdgpu: temporarily disable broken Clang builds due to blown stack-frame 940b774069 mmc: sdhci: Fix voltage switch delay ed19662453 mmc: sdhci-sprd: Fix no reset data and command after voltage switch ef767907e7 mmc: sdhci-esdhc-imx: correct CQHCI exit halt state check 46ee041cd6 mmc: core: Fix ambiguous TRIM and DISCARD arg b79be962b5 mmc: mmc_test: Fix removal of debugfs file d4fc344c0d net: stmmac: Set MAC's flow control register to reflect current settings 549e24409a pinctrl: intel: Save and restore pins in "direct IRQ" mode 471fb7b735 x86/bugs: Make sure MSR_SPEC_CTRL is updated properly upon resume from S3 e858917ab7 nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry() 6ddf788400 tools/vm/slabinfo-gnuplot: use "grep -E" instead of "egrep" c099d12c55 error-injection: Add prompt for function error injection 26b6f927bb riscv: vdso: fix section overlapping under some conditions 2b1d8f27e2 net/mlx5: DR, Fix uninitialized var warning c40db1e5f3 hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() f06e0cd01e hwmon: (coretemp) Check for null before removing sysfs attrs d93522d04f net: ethernet: renesas: ravb: Fix promiscuous mode after system resumed 176ee6c673 sctp: fix memory leak in sctp_stream_outq_migrate() 1c38c88acc packet: do not set TP_STATUS_CSUM_VALID on CHECKSUM_COMPLETE 5f442e1d40 net: tun: Fix use-after-free in tun_detach() 5fa0fc5876 afs: Fix fileserver probe RTT handling 7ca81a161e net: hsr: Fix potential use-after-free a1ba595e35 tipc: re-fetch skb cb after tipc_msg_validate 4621bdfff5 dsa: lan9303: Correct stat name 45752af024 net: ethernet: nixge: fix NULL dereference e01c154237 net/9p: Fix a potential socket leak in p9_socket_open b080d4668f net: net_netdev: Fix error handling in ntb_netdev_init_module() fe6bc99c27 net: phy: fix null-ptr-deref while probe() failed 0184ede0ec wifi: mac8021: fix possible oob access in ieee80211_get_rate_duration e2ed90fd3a wifi: cfg80211: don't allow multi-BSSID in S1G 9e6b79a3cd wifi: cfg80211: fix buffer overflow in elem comparison 6922948c2e aquantia: Do not purge addresses when setting the number of rings fa59d49a49 qlcnic: fix sleep-in-atomic-context bugs caused by msleep d753f554f2 can: cc770: cc770_isa_probe(): add missing free_cc770dev() e74746bf04 can: sja1000_isa: sja1000_isa_probe(): add missing free_sja1000dev() 0d2f9d95d9 net/mlx5e: Fix use-after-free when reverting termination table 2cb84ff349 net/mlx5: Fix uninitialized variable bug in outlen_write() b775f37d94 e100: Fix possible use after free in e100_xmit_prepare 086f656e44 e100: switch from 'pci_' to 'dma_' API 971c55f076 iavf: Fix error handling in iavf_init_module() d389a4c698 iavf: remove redundant ret variable fd4960ea53 fm10k: Fix error handling in fm10k_init_module() dd425cec79 i40e: Fix error handling in i40e_init_module() f166c62cad ixgbevf: Fix resource leak in ixgbevf_init_module() 8f7047f418 of: property: decrement node refcount in of_fwnode_get_reference_args() be006212bd bpf: Do not copy spin lock field from user in bpf_selem_alloc 90907cd4d1 hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails 7649bba263 hwmon: (i5500_temp) fix missing pci_disable_device() dddfc03f04 hwmon: (ina3221) Fix shunt sum critical calculation 984fcd3ec1 hwmon: (ltc2947) fix temperature scaling 8a549ab672 libbpf: Handle size overflow for ringbuf mmap cc140c729c ARM: at91: rm9200: fix usb device clock id 592724b14d scripts/faddr2line: Fix regression in name resolution on ppc64le 353c3aaaf3 bpf, perf: Use subprog name when reporting subprog ksymbol d48f6a5784 iio: light: rpr0521: add missing Kconfig dependencies 5eb114f55b iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw b1756af172 iio: health: afe4403: Fix oob read in afe4403_read_raw 01d7c41eac btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit() d3f5be8246 drm/amdgpu: Partially revert "drm/amdgpu: update drm_display_info correctly when the edid is read" 00570fafc2 drm/amdgpu: update drm_display_info correctly when the edid is read 44b204730b drm/display/dp_mst: Fix drm_dp_mst_add_affected_dsc_crtcs() return code 1faf21bdd1 btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker 6050872f9f spi: spi-imx: Fix spi_bus_clk if requested clock is higher than input clock 7b020665d4 btrfs: free btrfs_path before copying inodes to userspace d5b7a34379 btrfs: sink iterator parameter to btrfs_ioctl_logical_to_ino f3226d86f8 Revert "xfrm: fix "disable_policy" on ipv4 early demux" 982d7f3eb8 Merge 5.10.157 into android12-5.10-lts 37d3df60cb ANDROID: CRC ABI fixups in ip.h and ipv6.h f4245f0538 Linux 5.10.157 4801672fb0 fuse: lock inode unconditionally in fuse_fallocate() 86f0082fb9 drm/i915: fix TLB invalidation for Gen12 video and compute engines feb97cf45e drm/amdgpu: always register an MMU notifier for userptr 596b7d55d7 drm/amd/dc/dce120: Fix audio register mapping, stop triggering KASAN c86c1a7037 btrfs: sysfs: normalize the error handling branch in btrfs_init_sysfs() 1581830c0e btrfs: free btrfs_path before copying subvol info to userspace 0bdb8f7ef8 btrfs: free btrfs_path before copying fspath to userspace 24a37ba2cb btrfs: free btrfs_path before copying root refs to userspace b56d6e5585 genirq: Take the proposed affinity at face value if force==true 9d90a2b98e irqchip/gic-v3: Always trust the managed affinity provided by the core code e0d2c59ee9 genirq: Always limit the affinity to online CPUs f8f80d532f genirq/msi: Shutdown managed interrupts with unsatifiable affinities 3eb6b89a4e wifi: wilc1000: validate number of channels 5a068535c0 wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute 905f886eae wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute 7c6535fb4d wifi: wilc1000: validate pairwise and authentication suite offsets 64b7f9a7dd dm integrity: clear the journal on suspend d306f73079 dm integrity: flush the journal on suspend 79d9a11679 gpu: host1x: Avoid trying to use GART on Tegra20 a7f30b5b8d net: usb: qmi_wwan: add Telit 0x103a composition 7e8eaa939e tcp: configurable source port perturb table size 0acc008cf9 platform/x86: hp-wmi: Ignore Smart Experience App event 0964b77bab zonefs: fix zone report size in __zonefs_io_error() a5937dae66 platform/x86: acer-wmi: Enable SW_TABLET_MODE on Switch V 10 (SW5-017) 52fb7bcea0 platform/x86: asus-wmi: add missing pci_dev_put() in asus_wmi_set_xusb2pr() 4fa717ba2d xen/platform-pci: add missing free_irq() in error path f45a5a6c9f xen-pciback: Allow setting PCI_MSIX_FLAGS_MASKALL too 9bbb587472 Input: soc_button_array - add Acer Switch V 10 to dmi_use_low_level_irq[] 4ea4316dff Input: soc_button_array - add use_low_level_irq module parameter c1620e996d Input: goodix - try resetting the controller when no config is set f4db050958 serial: 8250: 8250_omap: Avoid RS485 RTS glitch on ->set_termios() 7c3e39ccf5 ASoC: Intel: bytcht_es8316: Add quirk for the Nanote UMPC-01 36e0b97619 Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode ae9e0cc973 binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0 017de84253 binder: Address corner cases in deferred copy and fixup 2e3c27f241 binder: fix pointer cast warning c9d3f25a7f binder: defer copies of pre-patched txn data 5204296fc7 binder: read pre-translated fds from sender buffer 23e9d815fa binder: avoid potential data leakage when copying txn 22870431cd x86/ioremap: Fix page aligned size calculation in __ioremap_caller() 3fdeacf087 KVM: x86: remove exit_int_info warning in svm_handle_exit 7e5cb13091 KVM: x86: nSVM: leave nested mode on vCPU free d925dd3e44 mm: vmscan: fix extreme overreclaim and swap floods a4a62a23fa gcov: clang: fix the buffer overflow issue e7f21d10e9 nilfs2: fix nilfs_sufile_mark_dirty() not set segment usage as dirty f06b7e6a77 usb: dwc3: gadget: Clear ep descriptor last cff7523ab8 usb: dwc3: gadget: Return -ESHUTDOWN on ep disable a32635528d usb: dwc3: gadget: conditionally remove requests ca3a08e9d9 ceph: fix NULL pointer dereference for req->r_session 00c004c070 ceph: Use kcalloc for allocating multiple elements 69263bf781 ceph: fix possible NULL pointer dereference for req->r_session 8e137ace53 ceph: put the requests/sessions when it fails to alloc memory 38993788f4 ceph: fix off by one bugs in unsafe_request_wait() 8a31ae7f77 ceph: flush the mdlog before waiting on unsafe reqs 78b2f546f7 ceph: flush mdlog before umounting d94ba7b3b7 ceph: make iterate_sessions a global symbol 9ac038d3c2 ceph: make ceph_create_session_msg a global symbol 8382cdf0ab usb: cdns3: Add support for DRD CDNSP 57112da86b mmc: sdhci-brcmstb: Fix SDHCI_RESET_ALL for CQHCI b5d770977b mmc: sdhci-brcmstb: Enable Clock Gating to save power 049194538c mmc: sdhci-brcmstb: Re-organize flags fbe955be26 nios2: add FORCE for vmlinuz.gz c0a9c9973d init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash 456e895fd0 iio: core: Fix entry not deleted when iio_register_sw_trigger_type() fails fa9efcbfbf iio: light: apds9960: fix wrong register for gesture gain bd1b8041c2 arm64: dts: rockchip: lower rk3399-puma-haikou SD controller clock frequency 86ba9c8595 ext4: fix use-after-free in ext4_ext_shift_extents 350e98a08a usb: dwc3: exynos: Fix remove() function d21d26e65b lib/vdso: use "grep -E" instead of "egrep" c0cf8bc259 net: enetc: preserve TX ring priority across reconfiguration de4dd4f9b3 net: enetc: cache accesses to &priv->si->hw 1f080b8caa net: enetc: manage ENETC_F_QBV in priv->active_offloads only when enabled 1d840c5d67 s390/crashdump: fix TOD programmable field size 11052f1188 net: thunderx: Fix the ACPI memory leak b034fe2a08 nfc: st-nci: fix memory leaks in EVT_TRANSACTION e14583073f nfc: st-nci: fix incorrect validating logic in EVT_TRANSACTION 9cc863d523 arcnet: fix potential memory leak in com20020_probe() 4d2be0cf27 net: arcnet: Fix RESET flag handling e61b00374a s390/dasd: fix no record found for raw_track_access aeebb07499 ipv4: Fix error return code in fib_table_insert() c0af4d005a dccp/tcp: Reset saddr on failure after inet6?_hash_connect(). b8e494240e netfilter: flowtable_offload: add missing locking af9de5cdcb dma-buf: fix racing conflict of dma_heap_add() c40b76dfa7 bnx2x: fix pci device refcount leak in bnx2x_vf_is_pcie_pending() f81e9c0510 regulator: twl6030: re-add TWL6032_SUBCLASS 32b944b9c4 NFC: nci: fix memory leak in nci_rx_data_packet() 68a7aec3f4 net: sched: allow act_ct to be built without NF_NAT 8e2664e12b sfc: fix potential memleak in __ef100_hard_start_xmit() 6b638a16ea xfrm: Fix ignored return value in xfrm6_init() c7788361a6 tipc: check skb_linearize() return value in tipc_disc_rcv() 4058e3b74a tipc: add an extra conn_get in tipc_conn_alloc e87a077d09 tipc: set con sock in tipc_conn_alloc 891daa95b0 net/mlx5: Fix handling of entry refcount when command is not issued to FW e06ff9f8fe net/mlx5: Fix FW tracer timestamp calculation 5689eba90a netfilter: ipset: regression in ip_set_hash_ip.c e62e62ea91 netfilter: ipset: Limit the maximal range of consecutive elements to add/delete 8dca384970 Drivers: hv: vmbus: fix possible memory leak in vmbus_device_register() 909186cf34 Drivers: hv: vmbus: fix double free in the error path of vmbus_add_channel_work() f42802e14a macsec: Fix invalid error code set 72be055615 nfp: add port from netdev validation for EEPROM access ce41e03cac nfp: fill splittable of devlink_port_attrs correctly 0b553ded34 net: pch_gbe: fix pci device refcount leak while module exiting 2c59ef9ab6 net/qla3xxx: fix potential memleak in ql3xxx_send() a24d5f6c8b net/mlx4: Check retval of mlx4_bitmap_init da86a63479 net: ethernet: mtk_eth_soc: fix error handling in mtk_open() 756534f7cf ARM: dts: imx6q-prti6q: Fix ref/tcxo-clock-frequency properties 290a71ff72 ARM: mxs: fix memory leak in mxs_machine_init() 5c97af75f5 netfilter: conntrack: Fix data-races around ct mark 459332f8db 9p/fd: fix issue of list_del corruption in p9_fd_cancel() 26bb8f6aaa net: pch_gbe: fix potential memleak in pch_gbe_tx_queue() 398a860a44 nfc/nci: fix race with opening and closing 3535c632e6 rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975] 23c03ee0ee rxrpc: Use refcount_t rather than atomic_t bddde342c6 rxrpc: Allow list of in-use local UDP endpoints to be viewed in /proc a2d5dba2fc net: liquidio: simplify if expression 8124a02e17 ARM: dts: at91: sam9g20ek: enable udc vbus gpio pinctrl b547bf71fa tee: optee: fix possible memory leak in optee_register_device() b76c5a99f4 bus: sunxi-rsb: Support atomic transfers 0c059b7d2a regulator: core: fix UAF in destroy_regulator() fcb2d28636 spi: dw-dma: decrease reference count in dw_spi_dma_init_mfld() 0b6441abfa regulator: core: fix kobject release warning and memory leak in regulator_register() 26d3d3ffa8 scsi: storvsc: Fix handling of srb_status and capacity change events c34db0d6b8 ASoC: soc-pcm: Don't zero TDM masks in __soc_pcm_open() 4f6c7344ab ASoC: sgtl5000: Reset the CHIP_CLK_CTRL reg on remove 164a5b50d1 ASoC: hdac_hda: fix hda pcm buffer overflow issue 7cfb4b8579 ARM: dts: am335x-pcm-953: Define fixed regulators in root node b7000254c1 af_key: Fix send_acquire race with pfkey_register 51969d679b xfrm: replay: Fix ESN wrap around for GSO 497653f6d2 xfrm: fix "disable_policy" on ipv4 early demux 836bbdfcf8 MIPS: pic32: treat port as signed integer c0bb600f07 RISC-V: vdso: Do not add missing symbols to version section in linker script 81cc6d8400 arm64/syscall: Include asm/ptrace.h in syscall_wrapper header. fa5f2c72d3 block, bfq: fix null pointer dereference in bfq_bio_bfqg() d29bde8689 drm: panel-orientation-quirks: Add quirk for Acer Switch V 10 (SW5-017) f7ce6fb04e scsi: scsi_debug: Make the READ CAPACITY response compliant with ZBC 2574903ee2 scsi: ibmvfc: Avoid path failures during live migration 7fc62181c1 platform/x86: touchscreen_dmi: Add info for the RCA Cambio W101 v2 2-in-1 f54a11b6bf Revert "net: macsec: report real_dev features when HW offloading is enabled" f4b8c0710a selftests/bpf: Add verifier test for release_reference() 361a165098 spi: stm32: fix stm32_spi_prepare_mbr() that halves spi clk for every run 2c1ca23555 wifi: mac80211: Fix ack frame idr leak when mesh has no route 8d39913158 wifi: airo: do not assign -1 to unsigned char 8552e6048e audit: fix undefined behavior in bit shift for AUDIT_BIT 1c9eb641d1 riscv: dts: sifive unleashed: Add PWM controlled LEDs 92ae6facd1 wifi: mac80211_hwsim: fix debugfs attribute ps with rc table support 2fcc593b50 wifi: mac80211: fix memory free error when registering wiphy fail 044bc6d3c2 ceph: avoid putting the realm twice when decoding snaps fails d43219bb33 ceph: do not update snapshot context when there is no new snapshot 49c71b6814 iio: pressure: ms5611: fixed value compensation bug 879139bc7a iio: ms5611: Simplify IO callback parameters 80c825e1e3 nvme-pci: add NVME_QUIRK_BOGUS_NID for Micron Nitro f4066fb910 nvme: add a bogus subsystem NQN quirk for Micron MTFDKBA2T0TFH 4f0cea018e drm/display: Don't assume dual mode adaptors support i2c sub-addressing 347f1793b5 bridge: switchdev: Fix memory leaks when changing VLAN protocol 89a7f155e6 bridge: switchdev: Notify about VLAN protocol changes f5cbd86ebf ata: libata-core: do not issue non-internal commands once EH is pending 4034d06a4d ata: libata-scsi: simplify __ata_scsi_queuecmd() 03aabcb88a scsi: scsi_transport_sas: Fix error handling in sas_phy_add() d9b90a99f3 Merge 5.10.156 into android12-5.10-lts 25af5a11f1 Merge 5.10.155 into android12-5.10-lts e5d2cd6ad8 ANDROID: abi preservation for fscrypt change in 5.10.154 5bc3ece380 Revert "serial: 8250: Let drivers request full 16550A feature probing" f466ca1247 Merge 5.10.154 into android12-5.10-lts 6d46ef50b1 Linux 5.10.156 7be134eb69 Revert "net: broadcom: Fix BCMGENET Kconfig" 957732a09c ntfs: check overflow when iterating ATTR_RECORDs 6322dda483 ntfs: fix out-of-bounds read in ntfs_attr_find() b825bfbbaa ntfs: fix use-after-free in ntfs_attr_find() 294ef12dcc mm: fs: initialize fsdata passed to write_begin/write_end interface a8e2fc8f7b 9p/trans_fd: always use O_NONBLOCK read/write a5da76df46 gfs2: Switch from strlcpy to strscpy 5fa30be7ba gfs2: Check sb_bsize_shift after reading superblock f14858bc77 9p: trans_fd/p9_conn_cancel: drop client lock earlier 4154b6afa2 kcm: close race conditions on sk_receive_queue 7deb7a9d33 kcm: avoid potential race in kcm_tx_work 35309be06b tcp: cdg: allow tcp_cdg_release() to be called multiple times e929ec98c0 macvlan: enforce a consistent minimal mtu 95ebea5a15 uapi/linux/stddef.h: Add include guards 3f25add5ec Input: i8042 - fix leaking of platform device on module removal 7d606ae1ab kprobes: Skip clearing aggrprobe's post_handler in kprobe-on-ftrace case 89ece5ff7d scsi: scsi_debug: Fix possible UAF in sdebug_add_host_helper() 75205f1b47 scsi: target: tcm_loop: Fix possible name leak in tcm_loop_setup_hba_bus() 6e9334436d net: use struct_group to copy ip/ipv6 header addresses 9fd7bdaffe stddef: Introduce struct_group() helper macro 47c3bdd955 usbnet: smsc95xx: Fix deadlock on runtime resume 8208c266fe ring-buffer: Include dropped pages in counting dirty patches 36b5095b07 net: fix a concurrency bug in l2tp_tunnel_register() 023435a095 nvme: ensure subsystem reset is single threaded b9a5ecf241 nvme: restrict management ioctls to admin 5e2f14d772 perf/x86/intel/pt: Fix sampling using single range output 62634b43d3 misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() c1eb46a65b docs: update mediator contact information in CoC doc 4423866d31 mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put() 440653a180 mmc: sdhci-pci-o2micro: fix card detect fail issue caused by CD# debounce timeout 8e70b14131 mmc: core: properly select voltage range without power cycle 05b0f6624d firmware: coreboot: Register bus in module init deda86a0d8 iommu/vt-d: Set SRE bit only when hardware has SRS cap d2c7d8f58e scsi: zfcp: Fix double free of FSF request when qdio send fails db744288af maccess: Fix writing offset in case of fault in strncpy_from_kernel_nofault() 24cc679abb Input: iforce - invert valid length check when fetching device IDs 5f4611fe01 serial: 8250_lpss: Configure DMA also w/o DMA filter 8679087e93 serial: 8250: Flush DMA Rx on RLSI a5eaad87bf serial: 8250: Fall back to non-DMA Rx if IIR_RDI occurs f59f5a269c dm ioctl: fix misbehavior if list_versions races with module loading 67a75a9480 iio: pressure: ms5611: changed hardcoded SPI speed to value limited d95b85c508 iio: adc: mp2629: fix potential array out of bound access 46b8bc62c5 iio: adc: mp2629: fix wrong comparison of channel 8dddf2699d iio: trigger: sysfs: fix possible memory leak in iio_sysfs_trig_init() 85d2a8b287 iio: adc: at91_adc: fix possible memory leak in at91_adc_allocate_trigger() 85cc1a2fd8 usb: typec: mux: Enter safe mode only when pins need to be reconfigured efaab05520 usb: chipidea: fix deadlock in ci_otg_del_timer 143ba5c2d2 usb: add NO_LPM quirk for Realforce 87U Keyboard 249cef723f USB: serial: option: add Fibocom FM160 0x0111 composition 5c44c60358 USB: serial: option: add u-blox LARA-L6 modem 0e88a3cfa6 USB: serial: option: add u-blox LARA-R6 00B modem de707957d9 USB: serial: option: remove old LARA-R6 PID 878227a3dd USB: serial: option: add Sierra Wireless EM9191 25c652811d USB: bcma: Make GPIO explicitly optional eb3af3ea5b speakup: fix a segfault caused by switching consoles 8cbaf4ed53 slimbus: stream: correct presence rate frequencies 15155f7c0e Revert "usb: dwc3: disable USB core PHY management" 100d1e53bb ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book Pro 360 c7dcc89482 ALSA: hda/realtek: fix speakers for Samsung Galaxy Book Pro a80369c8ca ALSA: usb-audio: Drop snd_BUG_ON() from snd_usbmidi_output_open() 28a54854a9 tracing: kprobe: Fix potential null-ptr-deref on trace_array in kprobe_event_gen_test_exit() bb70fcae41 tracing: kprobe: Fix potential null-ptr-deref on trace_event_file in kprobe_event_gen_test_exit() 315b149f08 tracing: Fix wild-memory-access in register_synth_event() 65ba7e7c24 tracing: Fix memory leak in test_gen_synth_cmd() and test_empty_synth_event() 5d4cc7bc1a tracing/ring-buffer: Have polling block on watermark 5fdebbeca5 ring_buffer: Do not deactivate non-existant pages 6a14828cad ftrace: Fix null pointer dereference in ftrace_add_mod() 6ed60c60ec ftrace: Optimize the allocation for mcount entries 9569eed79b ftrace: Fix the possible incorrect kernel message 5fc19c8313 cifs: add check for returning value of SMB2_set_info_init 0aeb0de528 net: thunderbolt: Fix error handling in tbnet_init() e13ef43813 cifs: Fix wrong return value checking when GETFLAGS 9f00da9c86 net/x25: Fix skb leak in x25_lapb_receive_frame() 94822d2331 net: ag71xx: call phylink_disconnect_phy if ag71xx_hw_enable() fail in ag71xx_open() 3aeb13bc3d cifs: add check for returning value of SMB2_close_init c24013273e platform/x86/intel: pmc: Don't unconditionally attach Intel PMC when virtualized 9ed51414ae drbd: use after free in drbd_create_device() 6b23a4b252 net: ena: Fix error handling in ena_init() 2d5a495501 net: ionic: Fix error handling in ionic_init_module() bb9924a6ed xen/pcpu: fix possible memory leak in register_pcpu() d6a561bd4c bnxt_en: Remove debugfs when pci_register_driver failed 389738f5db net: caif: fix double disconnect client in chnl_net_open() fb5ee1560b net: macvlan: Use built-in RCU list checking 709aa1f73d mISDN: fix misuse of put_device() in mISDN_register_device() 417f2d2edf net: liquidio: release resources when liquidio driver open failed 4cba73f2d6 net: hinic: Fix error handling in hinic_module_init() 083a2c9ef8 mISDN: fix possible memory leak in mISDN_dsp_element_register() 6b23993d5b net: bgmac: Drop free_netdev() from bgmac_enet_remove() 1f6a73b25d bpf: Initialize same number of free nodes for each pcpu_freelist ef2ac07ab8 ata: libata-transport: fix error handling in ata_tdev_add() 7377a14598 ata: libata-transport: fix error handling in ata_tlink_add() b5362dc163 ata: libata-transport: fix error handling in ata_tport_add() ac471468f7 ata: libata-transport: fix double ata_host_put() in ata_tport_add() ac4f404c25 arm64: dts: imx8mn: Fix NAND controller size-cells 30ece7dbee arm64: dts: imx8mm: Fix NAND controller size-cells f68a9efd78 ARM: dts: imx7: Fix NAND controller size-cells 1d160dfb3f drm: Fix potential null-ptr-deref in drm_vblank_destroy_worker() c47a823ea1 drm/drv: Fix potential memory leak in drm_dev_init() c776a49d09 drm/panel: simple: set bpc field for logic technologies displays 777430aa4d pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map bce3e6fe8b parport_pc: Avoid FIFO port location truncation a4b5423f88 siox: fix possible memory leak in siox_device_add() 0679f571d3 arm64: Fix bit-shifting UB in the MIDR_CPU_MODEL() macro 58636b5ff3 block: sed-opal: kmalloc the cmd/resp buffers e27458b18b sctp: clear out_curr if all frag chunks of current msg are pruned 0b4c259b63 sctp: remove the unnecessary sinfo_stream check in sctp_prsctp_prune_unsent 7360e7c29d ASoC: soc-utils: Remove __exit for snd_soc_util_exit() e60f37a1d3 bpf, test_run: Fix alignment problem in bpf_prog_test_run_skb() b8fe1a5aa7 tty: n_gsm: fix sleep-in-atomic-context bug in gsm_control_send 0a3160f4ff serial: imx: Add missing .thaw_noirq hook 7e1f908e65 serial: 8250: omap: Flush PM QOS work on remove d833cba201 serial: 8250: omap: Fix unpaired pm_runtime_put_sync() in omap8250_remove() b0b6ea651e serial: 8250_omap: remove wait loop from Errata i202 workaround f14c312c21 serial: 8250: omap: Fix missing PM runtime calls for omap8250_set_mctrl() 85cdbf04b4 serial: 8250: Remove serial_rs485 sanitization from em485 f5dedad405 ASoC: tas2764: Fix set_tdm_slot in case of single slot 9e82d78fbe ASoC: tas2770: Fix set_tdm_slot in case of single slot 8d21554ec7 ASoC: core: Fix use-after-free in snd_soc_exit() 38ca9bd336 spi: stm32: Print summary 'callbacks suppressed' message a180da5564 drm/amdgpu: disable BACO on special BEIGE_GOBY card f3adf0adf3 drm/amd/pm: disable BACO entry/exit completely on several sienna cichlid cards b0faeff69a drm/amd/pm: Read BIF STRAP also for BACO check 6958556285 drm/amd/pm: support power source switch on Sienna Cichlid 7daab001a6 mmc: sdhci-esdhc-imx: use the correct host caps for MMC_CAP_8_BIT_DATA 65ac4d1807 spi: intel: Use correct mask for flash and protected regions 23793518a7 mtd: spi-nor: intel-spi: Disable write protection only if asked a326fffdc7 ALSA: hda/realtek: fix speakers and micmute on HP 855 G8 24839d027c ASoC: codecs: jz4725b: Fix spelling mistake "Sourc" -> "Source", "Routee" -> "Route" bd48793240 Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm ce75e90859 btrfs: remove pointless and double ulist frees in error paths of qgroup tests 16743c4bf3 drm/imx: imx-tve: Fix return type of imx_tve_connector_mode_valid df2747f295 i2c: i801: add lis3lv02d's I2C address for Vostro 5568 959cb0fd69 i2c: tegra: Allocate DMA memory for DMA engine 6cb657722e NFSv4: Retry LOCK on OLD_STATEID during delegation return f0187227e2 drm/amd/display: Remove wrong pipe control lock bb3edbd092 ASoC: rt1308-sdw: add the default value of some registers b1619f0307 selftests/intel_pstate: fix build for ARCH=x86_64 fdf6807606 selftests/futex: fix build for clang c1f0defecb ASoC: codecs: jz4725b: fix capture selector naming aeb7e8bc0d ASoC: codecs: jz4725b: use right control for Capture Volume c87945c173 ASoC: codecs: jz4725b: fix reported volume for Master ctl 9aae00961a ASoC: codecs: jz4725b: add missed Line In power control bit 0b4d650f90 spi: intel: Fix the offset to get the 64K erase opcode 6910e7279f ASoC: wm8962: Add an event handler for TEMP_HP and TEMP_SPK c7432616f6 ASoC: mt6660: Keep the pm_runtime enables before component stuff in mt6660_i2c_probe a47606064c ASoC: wm8997: Revert "ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe" f8f254c8b5 ASoC: wm5110: Revert "ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe" c73aa2cc41 ASoC: wm5102: Revert "ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe" 673a7341bd Merge 5.10.153 into android12-5.10-lts 27b36ba7c2 Merge 5.10.152 into android12-5.10-lts bf759deb0f Merge 5.10.151 into android12-5.10-lts 6b31c548a1 ANDROID: fix up struct sk_buf ABI breakage bd66e91ad2 ANDROID: fix up CRC issue with struct tcp_sock 3905cfd1d6 Revert "serial: 8250: Toggle IER bits on only after irq has been set up" 41217963b1 Linux 5.10.155 0f544353fe io_uring: kill goto error handling in io_sqpoll_wait_sq() 154d744fbe x86/cpu: Restore AMD's DE_CFG MSR after resume e7294b01de mmc: sdhci-esdhc-imx: Convert the driver to DT-only 534762e261 net: tun: call napi_schedule_prep() to ensure we own a napi 367bc0fa98 dmaengine: at_hdmac: Check return code of dma_async_device_register 85f97c97ef dmaengine: at_hdmac: Fix impossible condition f53a233eaa dmaengine: at_hdmac: Don't allow CPU to reorder channel enable f451285522 dmaengine: at_hdmac: Fix completion of unissued descriptor in case of errors 6be4ab08c8 dmaengine: at_hdmac: Fix descriptor handling when issuing it to hardware a35dd5dd98 dmaengine: at_hdmac: Fix concurrency over the active list 0f603bf553 dmaengine: at_hdmac: Free the memset buf without holding the chan lock 7f07cecc74 dmaengine: at_hdmac: Fix concurrency over descriptor 1582cc3b48 dmaengine: at_hdmac: Fix concurrency problems by removing atc_complete_all() 9b69060a72 dmaengine: at_hdmac: Protect atchan->status with the channel lock ee35682261 dmaengine: at_hdmac: Do not call the complete callback on device_terminate_all 7078e935b4 dmaengine: at_hdmac: Fix premature completion of desc in issue_pending ad4cbe8e9c dmaengine: at_hdmac: Start transfer for cyclic channels in issue_pending 24f9e93e50 dmaengine: at_hdmac: Don't start transactions at tx_submit level 4b51cce72a dmaengine: at_hdmac: Fix at_lli struct definition d37dfb9357 cert host tools: Stop complaining about deprecated OpenSSL functions f8e0edeaa0 can: j1939: j1939_send_one(): fix missing CAN header initialization 0b692d41ee mm/memremap.c: map FS_DAX device memory as decrypted 03f9582a6a udf: Fix a slab-out-of-bounds write bug in udf_find_entry() 4ea3aa3b98 mms: sdhci-esdhc-imx: Fix SDHCI_RESET_ALL for CQHCI 9c0accfa5a btrfs: selftests: fix wrong error check in btrfs_free_dummy_root() 8fa0c22ef8 platform/x86: hp_wmi: Fix rfkill causing soft blocked wifi b5ee579fcb drm/i915/dmabuf: fix sg_table handling in map_dma_buf 4feedde548 nilfs2: fix use-after-free bug of ns_writer on remount 1d4ff73062 nilfs2: fix deadlock in nilfs_count_free_blocks() 344ddbd688 ata: libata-scsi: fix SYNCHRONIZE CACHE (16) command failure 516f9f2300 vmlinux.lds.h: Fix placement of '.data..decrypted' section f6896fb69d ALSA: usb-audio: Add DSD support for Accuphase DAC-60 2032c2d32b ALSA: usb-audio: Add quirk entry for M-Audio Micro a414a6d6ef ALSA: hda/realtek: Add Positivo C6300 model quirk 3a79f9568d ALSA: hda: fix potential memleak in 'add_widget_node' 380d64168d ALSA: hda/ca0132: add quirk for EVGA Z390 DARK 181cfff57b ALSA: hda/hdmi - enable runtime pm for more AMD display audio ea6787e482 mmc: sdhci-tegra: Fix SDHCI_RESET_ALL for CQHCI 0a8d4531a0 mmc: sdhci_am654: Fix SDHCI_RESET_ALL for CQHCI 3f558930ad mmc: sdhci-of-arasan: Fix SDHCI_RESET_ALL for CQHCI b55e64d0a3 mmc: cqhci: Provide helper for resetting both SDHCI and CQHCI 4631cb0406 MIPS: jump_label: Fix compat branch range check 475fd3991a arm64: efi: Fix handling of misaligned runtime regions and drop warning 94ab8f88fe riscv: fix reserved memory setup 0cf9cb0614 riscv: Separate memory init from paging init d7716240bc riscv: Enable CMA support ecf78af514 riscv: vdso: fix build with llvm e56d18a976 riscv: process: fix kernel info leakage 956e0216a1 net: macvlan: fix memory leaks of macvlan_common_newlink 59ec132386 ethernet: tundra: free irq when alloc ring failed in tsi108_open() dd7beaec8b net: mv643xx_eth: disable napi when init rxq or txq failed in mv643xx_eth_open() 56d3b5531b ethernet: s2io: disable napi when start nic failed in s2io_card_up() 05b2228434 net: atlantic: macsec: clear encryption keys from the stack 1a4e495edf net: phy: mscc: macsec: clear encryption keys when freeing a flow 4ad684ba02 cxgb4vf: shut down the adapter when t4vf_update_port_info() failed in cxgb4vf_open() 38aa7ed8c2 net: cxgb3_main: disable napi when bind qsets failed in cxgb_up() fd52dd2d6e net: cpsw: disable napi in cpsw_ndo_open() 3b27e20601 net/mlx5e: E-Switch, Fix comparing termination table instance eb6fa0ac2a net/mlx5: Allow async trigger completion execution on single CPU systems bdd282bba7 net: nixge: disable napi when enable interrupts failed in nixge_open() 5333cf1b7f net: marvell: prestera: fix memory leak in prestera_rxtx_switch_init() cf4853880e perf stat: Fix printing os->prefix in CSV metrics output 3a4a3c3b1f drivers: net: xgene: disable napi when register irq failed in xgene_enet_open() 0b7ee3d50f dmaengine: mv_xor_v2: Fix a resource leak in mv_xor_v2_remove() 6e2ffae69d dmaengine: pxa_dma: use platform_get_irq_optional f31dd15858 tipc: fix the msg->req tlv len check in tipc_nl_compat_name_table_dump_header fbb4e8e6dc net: broadcom: Fix BCMGENET Kconfig cb6d639bb1 net: stmmac: dwmac-meson8b: fix meson8b_devm_clk_prepare_enable() d68fa77ee3 can: af_can: fix NULL pointer dereference in can_rx_register() a033b86c7f ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network 02f8dfee75 tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent f3aa8a7d95 drm/vc4: Fix missing platform_unregister_drivers() call in vc4_drm_register() bcb3bb1069 hamradio: fix issue of dev reference count leakage in bpq_device_event() bc4591a86b net: lapbether: fix issue of dev reference count leakage in lapbeth_device_event() 2bf8b1c111 KVM: s390: pv: don't allow userspace to set the clock under PV a60cc64db7 KVM: s390x: fix SCK locking fcbd2b3368 capabilities: fix undefined behavior in bit shift for CAP_TO_MASK 8aae24b0ed net: fman: Unregister ethernet device on removal e2c5ee3b62 bnxt_en: fix potentially incorrect return value for ndo_rx_flow_steer 38147073c9 bnxt_en: Fix possible crash in bnxt_hwrm_set_coal() 3401f96402 net: tun: Fix memory leaks of napi_get_frags adaa0f180d macsec: clear encryption keys from the stack after setting up offload 9dc7503bae macsec: fix detection of RXSCs when toggling offloading 7f4456f011 macsec: fix secy->n_rx_sc accounting 3b05d9073a macsec: delete new rxsc when offload fails 50868de7dc net: gso: fix panic on frag_list with mixed head alloc types cedd4f01f6 bpf: Fix wrong reg type conversion in release_reference() 9069db2579 bpf: Add helper macro bpf_for_each_reg_in_vstate 95b6ec7337 bpf: Support for pointers beyond pkt_end. 8597b59e3d HID: hyperv: fix possible memory leak in mousevsc_probe() 8c80b2fca4 bpftool: Fix NULL pointer dereference when pin {PROG, MAP, LINK} without FILE cc21dc48a7 bpf, sockmap: Fix the sk->sk_forward_alloc warning of sk_stream_kill_queues e1e1218032 wifi: cfg80211: fix memory leak in query_regdb_file() 914cb94e73 wifi: cfg80211: silence a sparse RCU warning 72ea2fc299 phy: stm32: fix an error code in probe 925bf1ba76 hwspinlock: qcom: correct MMIO max register for newer SoCs 76eba54f0d fuse: fix readdir cache race 7bcea6c5c9 ANDROID: gki_defconfig: remove CONFIG_INIT_STACK_ALL_ZERO=y d2bc3376cd Revert "serial: 8250: Fix restoring termios speed after suspend" 0b500f5b16 Merge 5.10.150 into android12-5.10-lts f5b40c0eb9 Linux 5.10.154 bf506e366d ipc: remove memcg accounting for sops objects in do_semtimedop() c6678c8f4f wifi: brcmfmac: Fix potential buffer overflow in brcmf_fweh_event_worker() a6c57adec5 drm/i915/sdvo: Setup DDC fully before output init b86830cc95 drm/i915/sdvo: Filter out invalid outputs more sensibly 9f3b867808 drm/rockchip: dsi: Force synchronous probe 23f1fc7ce5 ext4,f2fs: fix readahead of verity data e5cef906cb KVM: x86: emulator: update the emulation mode after CR0 write ce9261accc KVM: x86: emulator: introduce emulator_recalc_and_set_mode c8a2fd7a71 KVM: x86: emulator: em_sysexit should update ctxt->mode e0c7410378 KVM: x86: Mask off reserved bits in CPUID.80000001H 9302ebc1c2 KVM: x86: Mask off reserved bits in CPUID.80000008H cc40c5f3e9 KVM: x86: Mask off reserved bits in CPUID.8000001AH bd64a88f36 KVM: x86: Mask off reserved bits in CPUID.80000006H 156451a67b ext4: fix BUG_ON() when directory entry has invalid rec_len 5370b965b7 ext4: fix warning in 'ext4_da_release_space' c9598cf629 parisc: Avoid printing the hardware path twice 98f836e80d parisc: Export iosapic_serial_irq() symbol for serial port driver 814af9a32b parisc: Make 8250_gsc driver dependend on CONFIG_PARISC 29d106d086 perf/x86/intel: Add Cooper Lake stepping to isolation_ucodes[] 98f6e7c337 perf/x86/intel: Fix pebs event constraints for ICL 3be2d66822 efi: random: Use 'ACPI reclaim' memory for random seed 83294f7c77 efi: random: reduce seed size to 32 bytes f8e8cda869 fuse: add file_modified() to fallocate cdf01c807e capabilities: fix potential memleak on error path from vfs_getxattr_alloc() ff32d8a099 tracing/histogram: Update document for KEYS_MAX size 533bfacbac tools/nolibc/string: Fix memcmp() implementation f100a02748 kprobe: reverse kp->flags when arm_kprobe failed bef08acbe5 tracing: kprobe: Fix memory leak in test_gen_kprobe/kretprobe_cmd() 2bf33b5ea4 tcp/udp: Make early_demux back namespacified. ea5f2fd464 ftrace: Fix use-after-free for dynamic ftrace_ops 06de93a47c btrfs: fix type of parameter generation in btrfs_get_dentry e33ce54cef coresight: cti: Fix hang in cti_disable_hw() 015ac18be7 binder: fix UAF of alloc->vma in race with munmap() 836686e1a0 memcg: enable accounting of ipc resources e4e4b24b42 mtd: rawnand: gpmi: Set WAIT_FOR_READY timeout based on program/erase times 818c36b988 tcp/udp: Fix memory leak in ipv6_renew_options(). 29997a6fa6 fscrypt: fix keyring memory leak on mount failure 391cceee6d fscrypt: stop using keyrings subsystem for fscrypt_master_key 092401142b fscrypt: simplify master key locking 54c13d3520 ALSA: usb-audio: Add quirks for MacroSilicon MS2100/MS2106 devices a0e2577cf3 block, bfq: protect 'bfqd->queued' by 'bfqd->lock' 26ca2ac091 Bluetooth: L2CAP: Fix attempting to access uninitialized memory 6b6f94fb9a Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM bfd5e62f9a i2c: piix4: Fix adapter not be removed in piix4_remove() fc3e2fa0a5 arm64: dts: juno: Add thermal critical trip points b743ecf29c firmware: arm_scmi: Make Rx chan_setup fail on memory errors 29e8e9bfc2 firmware: arm_scmi: Suppress the driver's bind attributes d7b1e2cbe0 ARM: dts: imx6qdl-gw59{10,13}: fix user pushbutton GPIO offset 160d8904b2 efi/tpm: Pass correct address to memblock_reserve c40b4d604b i2c: xiic: Add platform module alias 5bf8c7798b drm/amdgpu: set vm_update_mode=0 as default for Sienna Cichlid in SRIOV case 496eb203d0 HID: saitek: add madcatz variant of MMO7 mouse device ID ff06067b70 scsi: core: Restrict legal sdev_state transitions via sysfs 9edf20e5a1 ACPI: APEI: Fix integer overflow in ghes_estatus_pool_init() be6e22f546 media: meson: vdec: fix possible refcount leak in vdec_probe() c5fd54a65c media: dvb-frontends/drxk: initialize err to 0 7fdc58d8c2 media: cros-ec-cec: limit msg.len to CEC_MAX_MSG_SIZE 1609231f86 media: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE c46759e370 media: rkisp1: Zero v4l2_subdev_format fields in when validating links 3144ce5574 media: rkisp1: Initialize color space on resizer sink and source pads 6b24d9c2ac s390/boot: add secure boot trailer efc6420d65 xhci-pci: Set runtime PM as default policy on all xHC 1.2 or later devices 37bb57908d mtd: parsers: bcm47xxpart: Fix halfblock reads 85e458369c mtd: parsers: bcm47xxpart: print correct offset on read error ec54104feb fbdev: stifb: Fall back to cfb_fillrect() on 32-bit HCRX cards f8c86d7829 video/fbdev/stifb: Implement the stifb_fillrect() function e975d7aeca mmc: sdhci-pci-core: Disable ES for ASUS BIOS on Jasper Lake afeae13b8a mmc: sdhci-pci: Avoid comma separated statements a06721767c mmc: sdhci-esdhc-imx: Propagate ESDHC_FLAG_HS400* only on 8bit bus 59400c9b0d drm/msm/hdmi: fix IRQ lifetime 8225bdaec5 drm/msm/hdmi: Remove spurious IRQF_ONESHOT flag 5dbb47ee89 ipv6: fix WARNING in ip6_route_net_exit_late() 1c89642e7f net, neigh: Fix null-ptr-deref in neigh_table_clear() 634f066d02 net: mdio: fix undefined behavior in bit shift for __mdiobus_register d9ec6e2fbd Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del() cb1c012099 Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu 0a0dead4ad btrfs: fix ulist leaks in error paths of qgroup self tests 61e0612811 btrfs: fix inode list leak during backref walking at find_parent_nodes() a52e24c7fc btrfs: fix inode list leak during backref walking at resolve_indirect_refs() 81204283ea isdn: mISDN: netjet: fix wrong check of device registration e77d213843 mISDN: fix possible memory leak in mISDN_register_device() f06186e527 rose: Fix NULL pointer dereference in rose_send_frame() 2c8d81bdb2 ipvs: fix WARNING in ip_vs_app_net_cleanup() 931f56d59c ipvs: fix WARNING in __ip_vs_cleanup_batch() d69328cdb9 ipvs: use explicitly signed chars b2d7a92aff netfilter: nf_tables: release flow rule object from commit path 3583826b44 net: tun: fix bugs for oversize packet when napi frags enabled 5960b9081b net: sched: Fix use after free in red_enqueue() 24f9c41435 ata: pata_legacy: fix pdc20230_set_piomode() c85ee1c3cb net: fec: fix improper use of NETDEV_TX_BUSY 52438e734c nfc: nfcmrvl: Fix potential memory leak in nfcmrvl_i2c_nci_send() 0acfcd2aed nfc: s3fwrn5: Fix potential memory leak in s3fwrn5_nci_send() 9ae2c9a91f nfc: nxp-nci: Fix potential memory leak in nxp_nci_send() eecea068bf NFC: nxp-nci: remove unnecessary labels e8c11ee2d0 nfc: fdp: Fix potential memory leak in fdp_nci_send() 31b83d6990 nfc: fdp: drop ftrace-like debugging messages 4e1e4485b2 RDMA/qedr: clean up work queue on failure in qedr_alloc_resources() d360e875c0 RDMA/core: Fix null-ptr-deref in ib_core_cleanup() 37a098fc9b net: dsa: Fix possible memory leaks in dsa_loop_init() 45aea4fbf6 nfs4: Fix kmemleak when allocate slot failed f0f1c74fa6 NFSv4.1: We must always send RECLAIM_COMPLETE after a reboot 10c554d722 NFSv4.1: Handle RECLAIM_COMPLETE trunking errors 4813dd737d NFSv4: Fix a potential state reclaim deadlock 7c4260f8f1 IB/hfi1: Correctly move list in sc_disable() 87ac93c8dd RDMA/cma: Use output interface for net_dev check 4dbb739eb2 KVM: x86: Add compat handler for KVM_X86_SET_MSR_FILTER bb584caee8 KVM: x86: Copy filter arg outside kvm_vm_ioctl_set_msr_filter() 9faacf442d KVM: x86: Protect the unused bits in MSR exiting flags 5bdbccc79c x86/topology: Fix duplicated core ID within a package 6c31fc028a x86/topology: Fix multiple packages shown on a single-package system f5ad52da14 x86/topology: Set cpu_die_id only if DIE_TYPE found 570fa3bcd2 KVM: x86: Treat #DBs from the emulator as fault-like (code and DR7.GD=1) e5d7c6786b KVM: x86: Trace re-injected exceptions 8364786152 KVM: nVMX: Don't propagate vmcs12's PERF_GLOBAL_CTRL settings to vmcs02 523e1dd9f8 KVM: nVMX: Pull KVM L0's desired controls directly from vmcs01 028fcabd8a serial: ar933x: Deassert Transmit Enable on ->rs485_config() e6da7808c9 serial: 8250: Let drivers request full 16550A feature probing 95aa34f721 Linux 5.10.153 26a2b9c468 serial: Deassert Transmit Enable on probe in driver-specific way 4a230f65d6 serial: core: move RS485 configuration tasks from drivers into core eb69c07eca can: rcar_canfd: rcar_canfd_handle_global_receive(): fix IRQ storm on global FIFO receive d5924531dd arm64/kexec: Test page size support with new TGRAN range values c911f03f8d arm64/mm: Fix __enable_mmu() for new TGRAN range values d523384766 scsi: sd: Revert "scsi: sd: Remove a local variable" 52a43b8200 arm64: Add AMPERE1 to the Spectre-BHB affected list 9889ca7efa net: enetc: survive memory pressure without crashing fdba224ab0 net/mlx5: Fix crash during sync firmware reset bbcc06933f net/mlx5: Fix possible use-after-free in async command interface 16376ba5cf net/mlx5e: Do not increment ESN when updating IPsec ESN state 0d88359092 nh: fix scope used to find saddr when adding non gw nh 3519b5ddac net: ehea: fix possible memory leak in ehea_register_port() 79631daa5a openvswitch: switch from WARN to pr_warn 00d6f33f67 ALSA: aoa: Fix I2S device accounting ce6fd1c382 ALSA: aoa: i2sbus: fix possible memory leak in i2sbus_add_dev() 97262705c0 net: fec: limit register access on i.MX6UL df67a8e625 PM: domains: Fix handling of unavailable/disabled idle states 1f262d8088 net: ksz884x: fix missing pci_disable_device() on error in pcidev_init() 6170b4579f i40e: Fix flow-type by setting GL_HASH_INSET registers 9abae363af i40e: Fix VF hang when reset is triggered on another VF 23d5599058 i40e: Fix ethtool rx-flow-hash setting for X722 44affe7ede ipv6: ensure sane device mtu in tunnels 905f05c0ab media: vivid: set num_in/outputs to 0 if not supported b6c7446d0a media: videodev2.h: V4L2_DV_BT_BLANKING_HEIGHT should check 'interlaced' 683015ae16 media: v4l2-dv-timings: add sanity checks for blanking values 147b8f1892 media: vivid: dev->bitmap_cap wasn't freed in all cases 1cf51d5158 media: vivid: s_fbuf: add more sanity checks 3221c2701d PM: hibernate: Allow hybrid sleep to work with s2idle 0eb19ecbd0 can: mcp251x: mcp251x_can_probe(): add missing unregister_candev() in error path 6b2d07fc0b can: mscan: mpc5xxx: mpc5xxx_can_probe(): add missing put_clock() in error path 1634d5d39c tcp: fix indefinite deferral of RTO with SACK reneging 4f23cb2be5 tcp: fix a signed-integer-overflow bug in tcp_add_backlog() 49713d7c38 tcp: minor optimization in tcp_add_backlog() aab883bd60 net: lantiq_etop: don't free skb when returning NETDEV_TX_BUSY c3edc6e808 net: fix UAF issue in nfqnl_nf_hook_drop() when ops_init() failed e2a28807b1 kcm: annotate data-races around kcm->rx_wait c325f92d8d kcm: annotate data-races around kcm->rx_psock af7879529e atlantic: fix deadlock at aq_nic_stop d7ccd49c4d amd-xgbe: add the bit rate quirk for Molex cables 17350734fd amd-xgbe: fix the SFP compliance codes check for DAC cables b55d6ea965 x86/unwind/orc: Fix unreliable stack dump with gcov 0ce1ef3353 net: hinic: fix the issue of double release MBOX callback of VF 6603843c80 net: hinic: fix the issue of CMDQ memory leaks bb01910763 net: hinic: fix memory leak when reading function table ce605b68db net: hinic: fix incorrect assignment issue in hinic_set_interrupt_cfg() 62f0a08e82 net: netsec: fix error handling in netsec_register_mdio() 32a3d4660b tipc: fix a null-ptr-deref in tipc_topsrv_accept fb94152aae perf/x86/intel/lbr: Use setup_clear_cpu_cap() instead of clear_cpu_cap() bfce730886 ALSA: ac97: fix possible memory leak in snd_ac97_dev_register() 2663b16c76 ASoC: qcom: lpass-cpu: Mark HDMI TX parity register as volatile a527557299 arc: iounmap() arg is volatile 648ac633e7 ASoC: qcom: lpass-cpu: mark HDMI TX registers as volatile 6571f6ca8a drm/msm: Fix return type of mdp4_lvds_connector_mode_valid 4953a989b7 media: v4l2: Fix v4l2_i2c_subdev_set_name function documentation 9d00384270 net: ieee802154: fix error return code in dgram_bind() 568e3812b1 mm,hugetlb: take hugetlb_lock before decrementing h->resv_huge_pages 935a8b6202 mm/memory: add non-anonymous page check in the copy_present_page() 49db6cb814 xen/gntdev: Prevent leaking grants a3f2cc11d6 Xen/gntdev: don't ignore kernel unmapping error 467230b9ef s390/pci: add missing EX_TABLE entries to __pcistg_mio_inuser()/__pcilg_mio_inuser() fe187c801a s390/futex: add missing EX_TABLE entry to __futex_atomic_op() 449070996c perf auxtrace: Fix address filter symbol name match for modules 6f72a3977b kernfs: fix use-after-free in __kernfs_remove 0bcd1ab3e8 counter: microchip-tcb-capture: Handle Signal1 read and Synapse 8bf037279b mmc: core: Fix kernel panic when remove non-standard SDIO card 5684808b26 mmc: sdhci_am654: 'select', not 'depends' REGMAP_MMIO b686ffc0ac drm/msm/dp: fix IRQ lifetime 08c7375fa2 drm/msm/hdmi: fix memory corruption with too many bridges 21c4679af0 drm/msm/dsi: fix memory corruption with too many bridges 44a86d96fa scsi: qla2xxx: Use transport-defined speed mask for supported_speeds c368f751da mac802154: Fix LQI recording 9ba2990f4e exec: Copy oldsighand->action under spin-lock 7062153004 fs/binfmt_elf: Fix memory leak in load_elf_binary() d9ddfeb01f fbdev: smscufx: Fix several use-after-free bugs f19f1a75d3 iio: temperature: ltc2983: allocate iio channels once af236da855 iio: light: tsl2583: Fix module unloading 90ff5bef2b tools: iio: iio_utils: fix digit calculation 678d2cc204 xhci: Remove device endpoints from bandwidth list when freeing the device 3b250824b6 xhci: Add quirk to reset host back to default state at shutdown 63c7df3c81 mtd: rawnand: marvell: Use correct logic for nand-keep-config 228101fc83 usb: xhci: add XHCI_SPURIOUS_SUCCESS to ASM1042 despite being a V0.96 controller 2bc4f99ee2 usb: bdc: change state when port disconnected e440957f9c usb: dwc3: gadget: Don't set IMI for no_interrupt fb074d622c usb: dwc3: gadget: Stop processing more requests on IMI c29fcef579 USB: add RESET_RESUME quirk for NVIDIA Jetson devices in RCM 4cc7a360ec ALSA: rme9652: use explicitly signed char 8959092300 ALSA: au88x0: use explicitly signed char 2bf5b16315 ALSA: Use del_timer_sync() before freeing timer ca1034bff8 can: kvaser_usb: Fix possible completions during init_completion 370be31cde can: j1939: transport: j1939_session_skb_drop_old(): spin_unlock_irqrestore() before kfree_skb() 7d51b4c67c Linux 5.10.152 43d5109296 udp: Update reuse->has_conns under reuseport_lock. a50ed2d287 mm: /proc/pid/smaps_rollup: fix no vma's null-deref 31b1570677 blk-wbt: fix that 'rwb->wc' is always set to 1 in wbt_init() e2f9b62ead mmc: core: Add SD card quirk for broken discard 3a260e9844 Makefile.debug: re-enable debug info for .S files 6ab2287b26 x86/Kconfig: Drop check for -mabi=ms for CONFIG_EFI_STUB 67dafece56 ACPI: video: Force backlight native for more TongFang devices dcaf631320 hv_netvsc: Fix race between VF offering and VF association message from host da54c5f4b5 perf/x86/intel/pt: Relax address filter validation 79c3482fbe riscv: topology: fix default topology reporting a6e770733d arm64: topology: move store_cpu_topology() to shared code cb1024d8a4 arm64: dts: qcom: sc7180-trogdor: Fixup modem memory region f687e2111b fcntl: fix potential deadlocks for &fown_struct.lock b1efc19644 fcntl: make F_GETOWN(EX) return 0 on dead owner task ca4c498382 perf: Skip and warn on unknown format 'configN' attrs dea47fefa6 perf pmu: Validate raw event with sysfs exported format bits 86e995f964 riscv: always honor the CONFIG_CMDLINE_FORCE when parsing dtb 0e4c06ae7c riscv: Add machine name to kernel boot log and stack dump output 7fba4a389d mmc: sdhci-tegra: Use actual clock rate for SW tuning correction 3c6a888e35 xen/gntdev: Accommodate VMA splitting 5232411f37 xen: assume XENFEAT_gnttab_map_avail_bits being set for pv guests ea82edad0a tracing: Do not free snapshot if tracer is on cmdline bd6af07e79 tracing: Simplify conditional compilation code in tracing_set_tracer() 4e3a15ca24 dmaengine: mxs: use platform_driver_register 1da5d24970 dmaengine: mxs-dma: Remove the unused .id_table 1414e9bf3c drm/virtio: Use appropriate atomic state in virtio_gpu_plane_cleanup_fb() d74196bb27 iommu/vt-d: Clean up si_domain in the init_dmars() error path ef11e8ec00 iommu/vt-d: Allow NVS regions in arch_rmrr_sanity_check() 35c92435be net: phy: dp83822: disable MDI crossover status change interrupt 7aa3d623c1 net: sched: fix race condition in qdisc_graft() 2974f3b330 net: hns: fix possible memory leak in hnae_ae_register() 3032e316e0 sfc: include vport_id in filter spec hash and equal() ded86c4191 net: sched: sfb: fix null pointer access issue when sfb_init() fails 305aa36b62 net: sched: delete duplicate cleanup of backlog and qlen ae48bee283 net: sched: cake: fix null pointer access issue when cake_init() fails 2008ad08a2 nvme-hwmon: kmalloc the NVME SMART log buffer 770b7e3a2c nvme-hwmon: consistently ignore errors from nvme_hwmon_init 67106ac272 nvme-hwmon: Return error code when registration fails bc17f727b0 nvme-hwmon: rework to avoid devm allocation 191d71c635 ionic: catch NULL pointer issue on reconfig ff7ba76675 net: hsr: avoid possible NULL deref in skb_clone() 7286f87551 cifs: Fix xid leak in cifs_ses_add_channel() 2d08311aa3 cifs: Fix xid leak in cifs_flock() bf49d4fe4a cifs: Fix xid leak in cifs_copy_file_range() 05cc22c008 net: phy: dp83867: Extend RX strap quirk for SGMII mode 118f412bed net/atm: fix proc_mpc_write incorrect return value c8310a99e7 sfc: Change VF mac via PF as first preference if available. 39d10f0dfb HID: magicmouse: Do not set BTN_MOUSE on double report ed5baf3d0a i40e: Fix DMA mappings leak e558e14893 tipc: fix an information leak in tipc_topsrv_kern_subscr 1f4ed95ce6 tipc: Fix recognition of trial period fc8c6b8bb2 ACPI: extlog: Handle multiple records 57e157749a btrfs: fix processing of delayed tree block refs during backref walking 590929ef69 btrfs: fix processing of delayed data refs during backref walking cc841a8a70 r8152: add PID for the Lenovo OneLink+ Dock 51b96ecaed arm64: errata: Remove AES hwcap for COMPAT tasks 910ba49b33 blk-wbt: call rq_qos_add() after wb_normal is initialized 392536023d block: wbt: Remove unnecessary invoking of wbt_update_limits in wbt_init ab6aaa8210 media: venus: dec: Handle the case where find_format fails bce5808fc9 media: mceusb: set timeout to at least timeout provided 6d725672ce KVM: arm64: vgic: Fix exit condition in scan_its_table() 34db701dc6 kvm: Add support for arch compat vm ioctls e55feb31df cpufreq: qcom: fix memory leak in error path 303d0f7614 ata: ahci: Match EM_MAX_SLOTS with SATA_PMP_MAX_PORTS 6a2aadcb01 ata: ahci-imx: Fix MODULE_ALIAS d9f0159da0 hwmon/coretemp: Handle large core ID value 0fb04676c4 x86/microcode/AMD: Apply the patch early on every logical thread 6dcf1f0802 i2c: qcom-cci: Fix ordering of pm_runtime_xx and i2c_add_adapter 794ded0bc4 cpufreq: qcom: fix writes in read-only memory region 2723875e9d selinux: enable use of both GFP_KERNEL and GFP_ATOMIC in convert_context() 0d65f040fd ocfs2: fix BUG when iput after ocfs2_mknod fails b838dcfda1 ocfs2: clear dinode links count in case of error c34d1b22fe Linux 5.10.151 ecad331211 kbuild: Add skip_encoding_btf_enum64 option to pahole c5006abb80 kbuild: Unify options for BTF generation for vmlinux and modules f5f413cb3e kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21 06481cd9f7 kbuild: Quote OBJCOPY var to avoid a pahole call break the build bbaea0f1cd bpf: Generate BTF_KIND_FLOAT when linking vmlinux a10a57a224 Linux 5.10.150 243c8f42ba Revert "drm/amdgpu: make sure to init common IP before gmc" 8026d58b49 gcov: support GCC 12.1 and newer compilers cbf2c43b36 f2fs: fix wrong condition to trigger background checkpoint correctly 7b19858803 thermal: intel_powerclamp: Use first online CPU as control_cpu f039b43cba inet: fully convert sk->sk_rx_dst to RCU rules 67de22cb0b ext4: continue to expand file system when the target size doesn't reach 357db159e9 Revert "drm/amdgpu: use dirty framebuffer helper" 98ab15bfdc Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega" 791489a5c5 net/ieee802154: don't warn zero-sized raw_sendmsg() a96336a5f2 Revert "net/ieee802154: reject zero-sized raw_sendmsg()" dc54ff9fc4 net: ieee802154: return -EINVAL for unknown addr type 45c3396675 mm: hugetlb: fix UAF in hugetlb_handle_userfault c378c479c5 io_uring/af_unix: defer registered files gc to io_uring release 67cbc8865a io_uring: correct pinned_vm accounting 904f881b57 arm64: topology: fix possible overflow in amu_fie_setup() b5dc2f2578 perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc 9b4e849777 clk: bcm2835: Make peripheral PLLC critical b8bbae3236 usb: idmouse: fix an uninit-value in idmouse_open d5bb45f47b nvmet-tcp: add bounds check on Transfer Tag b79da0080d nvme: copy firmware_rev on each init e6cc39db24 staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv() 3a5a34ed9d Revert "usb: storage: Add quirk for Samsung Fit flash" acf0006f2b usb: musb: Fix musb_gadget.c rxstate overflow bug 91271a3e77 usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info() 782b3e71c9 md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d dbcca76435 HID: roccat: Fix use-after-free in roccat_read() f00c049ede soundwire: intel: fix error handling on dai registration issues f04a673d4a soundwire: cadence: Don't overwrite msg->buf during write commands c263516c2c bcache: fix set_at_max_writeback_rate() for multiple attached devices fcad2ac863 ata: libahci_platform: Sanity check the DT child nodes number 19c010ae44 blk-throttle: prevent overflow while calculating wait time 1b3cebeca9 staging: vt6655: fix potential memory leak 89f305a714 power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type() b2700f98b3 nbd: Fix hung when signal interrupts nbd_start_device_ioctl() 5942e5c63d scsi: 3w-9xxx: Avoid disabling device if failing to enable it 48727117bd usb: host: xhci-plat: suspend/resume clks for brcm c13d0d2f5a usb: host: xhci-plat: suspend and resume clocks 12d31182de clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate c2257c8a50 media: cx88: Fix a null-ptr-deref bug in buffer_prepare() d9e2585c3b clk: zynqmp: Fix stack-out-of-bounds in strncpy` 70f8b48d0b btrfs: scrub: try to fix super block errors 8f554dd23c arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply 451ce2521c kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT 017cabfb3f ARM: dts: imx6sx: add missing properties for sram 9d3ca48722 ARM: dts: imx6sll: add missing properties for sram 9735f2b62b ARM: dts: imx6sl: add missing properties for sram 2829b6ad30 ARM: dts: imx6qp: add missing properties for sram 0c3a0b3d5e ARM: dts: imx6dl: add missing properties for sram 2763a3b43a ARM: dts: imx6q: add missing properties for sram 82e0d91484 ARM: dts: imx7d-sdb: config the max pressure for tsc2046 166feb964f drm/amd/display: Remove interface for periodic interrupt 1 1bb6f4a8db drm/dp: Don't rewrite link config when setting phy test pattern bb91c06b0b mmc: sdhci-msm: add compatible string check for sdm670 8a427a2283 drm/meson: explicitly remove aggregate driver at module unload time 1c7d957c5d drm/amdgpu: fix initial connector audio value 69130888b2 ASoC: SOF: pci: Change DMI match info to support all Chrome platforms 54f2585e2d platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading a9d6a7c9b6 platform/chrome: cros_ec: Notify the PM of wake events during resume e29d20deaf drm: panel-orientation-quirks: Add quirk for Anbernic Win600 bfdb391d57 drm/vc4: vec: Fix timings for VEC modes b70f8abc1a drm: bridge: dw_hdmi: only trigger hotplug event on link change bbe2f6f903 udmabuf: Set ubuf->sg = NULL if the creation of sg table fails 0a4fddc95c drm/amd/display: fix overflow on MIN_I64 definition 3959e8faf8 gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init() c28a8082b2 drm: Prevent drm_copy_field() to attempt copying a NULL pointer e7d7018003 drm: Use size_t type for len variable in drm_copy_field() 3339a51bcd drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc() 484400d433 r8152: Rate limit overflow messages 0c108cf3ad Bluetooth: L2CAP: Fix user-after-free 65029aaedd net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory 4851303c85 wifi: rt2x00: correctly set BBP register 86 for MT7620 a016144479 wifi: rt2x00: set SoC wmac clock register 5aa0461d11 wifi: rt2x00: set VGC gain for both chains of MT7620 8d9c00979a wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620 27ed98e8a9 wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620 3d67986e72 can: bcm: check the result of can_send() in bcm_can_tx() 7b674dce41 Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times e25ca9af8a Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create() b051d9bf98 regulator: core: Prevent integer underflow e01d96494a wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit() be81c44242 xfrm: Update ipcomp_scratches with NULL when freed 9661724f62 wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg() 0958e487e8 tcp: annotate data-race around tcp_md5sig_pool_populated 129ca0db95 openvswitch: Fix overreporting of drops in dropwatch 4398e8a7fd openvswitch: Fix double reporting of drops in dropwatch e3c9b94734 bpftool: Clear errno after libcap's checks 50e45034c5 wifi: brcmfmac: fix invalid address access when enabling SCAN log level bbacfcde5f NFSD: fix use-after-free on source server when doing inter-server copy 3de402a524 NFSD: Return nfserr_serverfault if splice_ok but buf->pages have data 1f730d4ae6 x86/entry: Work around Clang __bdos() bug 513943bf87 thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash 708b9abe1b powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue b434edb0e9 MIPS: BCM47XX: Cast memcmp() of function to (void *) 6c61a37ea7 ACPI: video: Add Toshiba Satellite/Portege Z830 quirk 0dd025483f rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE() 36d4ffbedf rcu: Back off upon fill_page_cache_func() allocation failure 278d8ba2b2 selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle b60aa21e2f f2fs: fix to account FS_CP_DATA_IO correctly 0b8230d44c f2fs: fix to avoid REQ_TIME and CP_TIME collision ecbd95958c f2fs: fix race condition on setting FI_NO_EXTENT flag 110146ce8f ACPI: APEI: do not add task_work to kernel thread to avoid memory leak dce07e87ee thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id 3a720eb890 crypto: cavium - prevent integer overflow loading firmware 7bfa7d6773 crypto: marvell/octeontx - prevent integer overflows cdd42eb468 kbuild: rpm-pkg: fix breakage when V=1 is used 6d1aef17e7 kbuild: remove the target in signal traps when interrupted 8d76dd5080 tracing: kprobe: Make gen test module work in arm and riscv c6512a6f0c tracing: kprobe: Fix kprobe event gen test module on exit 9e6ba62d41 iommu/iova: Fix module config properly 426d5bc089 crypto: qat - fix DMA transfer direction a43babc059 crypto: qat - use pre-allocated buffers in datapath a91af50850 crypto: qat - fix use of 'dma_map_single' 8a4ed09ed8 crypto: inside-secure - Change swab to swab32 d33935e666 crypto: ccp - Release dma channels before dmaengine unrgister a1354bdd19 crypto: akcipher - default implementation for setting a private key 2fee0dbfae iommu/omap: Fix buffer overflow in debugfs cfde58a8e4 cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset ab2485eb5d hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear() d88b88514e crypto: hisilicon/zip - fix mismatch in get/set sgl_sge_nr 25f1342473 crypto: sahara - don't sleep when in softirq 2d285164fb powerpc: Fix SPE Power ISA properties for e500v1 platforms 2bde4e1e4f powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5 7ae8bed908 x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition 6315998170 powerpc/powernv: add missing of_node_put() in opal_export_attrs() 434db6d17b powerpc/pci_dn: Add missing of_node_put() 718e2d8023 powerpc/sysdev/fsl_msi: Add missing of_node_put() 592d283a65 powerpc/math_emu/efp: Include module.h 44c26ceffa mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg b1616599c9 clk: ast2600: BCLK comes from EPLL 6d01017247 clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe 9b65fd6513 clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration 9a6087a438 clk: baikal-t1: Add SATA internal ref clock buffer 5f143f3bc2 clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent 823fd52391 clk: baikal-t1: Fix invalid xGMAC PTP clock divider 2f19a1050e clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD 92f52770a7 spmi: pmic-arb: correct duplicate APID to PPID mapping logic a01c0c1600 dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup() 1dd5148445 clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent 6e58f2469e mfd: sm501: Add check for platform_driver_register() 3469dd8e22 mfd: fsl-imx25: Fix check for platform_get_irq() errors b425e03c96 mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init() f7b4388636 mfd: lp8788: Fix an error handling path in lp8788_probe() 08d4051803 mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq() 28868b940b mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe() 382a5fc49e fsi: core: Check error number after calling ida_simple_get ed8e6011b9 clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical 884a788f06 scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername() a9e5176ead scsi: libsas: Fix use-after-free bug in smp_execute_task_sg() 8f740c11d8 serial: 8250: Fix restoring termios speed after suspend ab5a3e7144 firmware: google: Test spinlock on panic path to avoid lockups 95ac62e854 staging: vt6655: fix some erroneous memory clean-up loops 878f987166 phy: qualcomm: call clk_disable_unprepare in the error handling 9a56ade124 tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown 572fb97fce serial: 8250: Toggle IER bits on only after irq has been set up 3fbfa5e3cc serial: 8250: Add an empty line and remove some useless {} 71ffe5111f drivers: serial: jsm: fix some leaks in probe 7efdd91d54 usb: gadget: function: fix dangling pnp_string in f_printer.c cc952e3bf6 xhci: Don't show warning for reinit on known broken suspend dac769dd7d IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers 360386e11c RDMA/cm: Use SLID in the work completion as the DLID in responder side a1263294b5 md/raid5: Ensure stripe_fill happens on non-read IO with journal 76694e9ce0 md: Replace snprintf with scnprintf 7bd5f3b4a8 mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct() f5325f3202 ata: fix ata_id_has_dipm() f5a6fa1877 ata: fix ata_id_has_ncq_autosense() 3c34a91c8a ata: fix ata_id_has_devslp() fc61a0c820 ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting() e3917c85f4 RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall. 3a9d7d8dcf mtd: rawnand: fsl_elbc: Fix none ECC mode f87f720811 mtd: devices: docg3: check the return value of devm_ioremap() in the probe d06cc0e11d dyndbg: drop EXPORTed dynamic_debug_exec_queries 1d65985589 dyndbg: let query-modname override actual module name c0e206da44 dyndbg: fix module.dyndbg handling 5047bd3bd7 dyndbg: fix static_branch manipulation af12e209a9 dmaengine: hisilicon: Add multi-thread support for a DMA channel d3fd838536 dmaengine: hisilicon: Fix CQ head update d5065ca461 dmaengine: hisilicon: Disable channels when unregister hisi_dma f59861946f fpga: prevent integer overflow in dfl_feature_ioctl_set_irq() 7ba19a60c7 misc: ocxl: fix possible refcount leak in afu_ioctl() cf3bb86edd RDMA/rxe: Fix the error caused by qp->sk cdce36a88d RDMA/rxe: Fix "kernel NULL pointer dereference" error 2630cc8832 media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init 40aa0999a3 media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start() 551b87976a tty: xilinx_uartps: Fix the ignore_status 28cdf6c6fb media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop 1f683bff1a HSI: omap_ssi_port: Fix dma_map_sg error check 962f22e7f7 HSI: omap_ssi: Fix refcount leak in ssi_probe 70f0a0a27d clk: tegra20: Fix refcount leak in tegra20_clock_init c01bfd23cc clk: tegra: Fix refcount leak in tegra114_clock_init f487137a53 clk: tegra: Fix refcount leak in tegra210_clock_init 59e90c4d98 clk: sprd: Hold reference returned by of_get_parent() 57141b1dd6 clk: berlin: Add of_node_put() for of_get_parent() dc190b46c6 clk: qoriq: Hold reference returned by of_get_parent() baadc6f58f clk: oxnas: Hold reference returned by of_get_parent() b95f4f9054 clk: meson: Hold reference returned by of_get_parent() beec2f0255 usb: common: debug: Check non-standard control requests 9d965a22f6 usb: common: move function's kerneldoc next to its definition 20b63631a3 usb: common: add function to get interval expressed in us unit c1ef8c66a3 usb: common: Parse for USB SSP genXxY ffffb159e1 usb: ch9: Add USB 3.2 SSP attributes aa7aada4b7 iio: ABI: Fix wrong format of differential capacitance channel ABI. b9a0526cd0 iio: inkern: only release the device node when done with it 44ec4b04fc iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume 513c72d76d iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq d259b90f0c iio: adc: at91-sama5d2_adc: check return status for pressure and touch bc2b97e177 iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX 5b9bb0cbd9 ARM: dts: exynos: fix polarity of VBUS GPIO of Origen 657de36c72 arm64: ftrace: fix module PLTs with mcount 40e966a404 ARM: Drop CMDLINE_* dependency on ATAGS 477dbf9d1b ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family 5bbd3dd7f9 soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA 09c35f1520 ia64: export memory_add_physaddr_to_nid to fix cxl build error e31c0e14cf ARM: dts: kirkwood: lsxl: remove first ethernet port df4f05b356 ARM: dts: kirkwood: lsxl: fix serial line 43faaedf3a ARM: dts: turris-omnia: Fix mpp26 pin name and comment d5c2051898 soc: qcom: smem_state: Add refcounting for the 'state->of_node' 39781c98ad soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe() 1d312c12c9 memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings() daaec4b3fe memory: of: Fix refcount leak bug in of_get_ddr_timings() fde46754d5 memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe() 2c442b0c06 ALSA: hda/hdmi: Don't skip notification handling during PM operation f182de42d7 ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe 37e3e01c9a ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe fb23569699 ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe c1b269dda1 ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe 71704c2e1b mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe() c940636d9c ALSA: dmaengine: increment buffer pointer atomically 4993c1511d ASoC: da7219: Fix an error handling path in da7219_register_dai_clks() ef59819976 drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa() 598d8f7d86 drm/msm/dpu: index dpu_kms->hw_vbif using vbif_idx a9a60d6405 ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API ad0b8ed172 mmc: au1xmmc: Fix an error handling path in au1xmmc_probe() 1f340e1c1c drm/omap: dss: Fix refcount leak bugs cbe37857dd ALSA: hda: beep: Simplify keep-power-at-enable behavior f0fb0817eb ASoC: rsnd: Add check for rsnd_mod_power_on 877e92e9b1 drm/bridge: megachips: Fix a null pointer dereference bug c577b4e972 drm: fix drm_mipi_dbi build errors 804d8e59f3 platform/x86: msi-laptop: Fix resource cleanup c21c08fab7 platform/x86: msi-laptop: Fix old-ec check for backlight registering b77755f58e ASoC: tas2764: Fix mute/unmute 2e6b64df54 ASoC: tas2764: Drop conflicting set_bias_level power setting c2c6022e10 ASoC: tas2764: Allow mono streams 868fc93b61 platform/chrome: fix memory corruption in ioctl 84da5cdf43 platform/chrome: fix double-free in chromeos_laptop_prepare() 5e25bfcd12 drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node() ad06d6bed5 drm/dp_mst: fix drm_dp_dpcd_read return value checks 3f5889fd65 drm/bridge: parade-ps8640: Fix regulator supply order 45120fa5e5 drm/mipi-dsi: Detach devices when removing the host 050b650507 drm/bridge: Avoid uninitialized variable warning 7839f2b349 drm: bridge: adv7511: fix CEC power down control register offset 29f50bcf0f net: mvpp2: fix mvpp2 debugfs leak 6cb54f2162 once: add DO_ONCE_SLOW() for sleepable contexts 67cb80a9d2 net/ieee802154: reject zero-sized raw_sendmsg() 6cc0e2afc6 bnx2x: fix potential memory leak in bnx2x_tpa_stop() da349221c4 net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks() d9e25dc053 spi: Ensure that sg_table won't be used after being freed 96a3ddb870 tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited f65955340e sctp: handle the error returned from sctp_auth_asoc_init_active_key 2a1d036320 mISDN: fix use-after-free bugs in l1oip timer handlers b4a5905fd2 vhost/vsock: Use kvmalloc/kvfree for larger packets. d2b5dc3a53 wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM 17196f2f98 spi: s3c64xx: Fix large transfers with DMA b284e1fe15 netfilter: nft_fib: Fix for rpath check with VRF devices b384e8fb16 Bluetooth: hci_core: Fix not handling link timeouts propertly 129f01116b i2c: mlxbf: support lock mechanism 534909fe3c spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe 9da61e7b59 spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe 1ef5798638 x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype 6ed7b05a35 x86/microcode/AMD: Track patch allocation size explicitly 07299e52e5 wifi: ath11k: fix number of VHT beamformee spatial streams d7cc0d51ff Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure ed403bcd97 bpf: Ensure correct locking around vulnerable function find_vpid() 2a1c29dc9b net: fs_enet: Fix wrong check in do_pd_setup 795954d751 wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask 226e6f2412 wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration 0a60ac7a0d bpf: btf: fix truncated last_member_type_id in btf_struct_resolve 8398a45d3d spi: meson-spicc: do not rely on busy flag in pow2 clk ops 351cf55595 wifi: rtl8xxxu: Fix skb misuse in TX queue selection 1e91179057 spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime() 7b83d11d48 spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume() 5576008305 selftests/xsk: Avoid use-after-free on ctx c823df0679 wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse() ea1b6b5409 Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend 07194ccbb1 Bluetooth: btusb: fix excessive stack usage cdadf95435 Bluetooth: btusb: Fine-tune mt7663 mechanism. 294395caac x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register 029a1de92c spi: mt7621: Fix an error message in mt7621_spi_probe() 2afb93e4e4 bpftool: Fix a wrong type cast in btf_dumper_int 61905bbb61 wifi: mac80211: allow bw change during channel switch in mesh 7565207066 leds: lm3601x: Don't use mutex after it was destroyed 08faf07717 wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state() e060c4b9f3 nfsd: Fix a memory leak in an error handling path 730191a098 objtool: Preserve special st_shndx indexes in elf_update_symbol 84837738d4 ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE f1d6edeaa8 ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd() da2aecef86 MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create() 0c667858c0 MIPS: SGI-IP27: Free some unused memory 3598445698 sh: machvec: Use char[] for section boundaries 6e4be747f1 userfaultfd: open userfaultfds with O_RDONLY 28d9b39733 selinux: use "grep -E" instead of "egrep" d11e09953c smb3: must initialize two ACL struct fields to zero abd13b2100 drm/i915: Fix watermark calculations for gen12+ MC CCS modifier fd37286f39 drm/i915: Fix watermark calculations for gen12+ RC CCS modifier 5d6093c49c drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table() 57f1a89a8e drm/nouveau/kms/nv140-: Disable interlacing d0febad83e staging: greybus: audio_helper: remove unused and wrong debugfs usage ceeb8d4a43 KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS 83fe0b009b KVM: nVMX: Unconditionally purge queued/injected events on nested "exit" 085ca1d33b KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility bda8120e5b media: cedrus: Set the platform driver data earlier dbdd3b1448 efi: libstub: drop pointless get_memory_map() call 68158654b5 thunderbolt: Explicitly enable lane adapter hotplug events at startup fc08f84381 tracing: Disable interrupt or preemption before acquiring arch_spinlock_t 0cf6c09daf ring-buffer: Fix race between reset page and reading page 588f02f8b9 ring-buffer: Add ring_buffer_wake_waiters() 586f02c500 ring-buffer: Check pending waiters when doing wake ups as well 6617e5132c ring-buffer: Have the shortest_full queue be the shortest not longest 4a3bbd40e4 ring-buffer: Allow splice to read previous partially read pages f2ca4609d0 ftrace: Properly unset FTRACE_HASH_FL_MOD 846f041203 livepatch: fix race between fork and KLP transition 2189756eab ext4: update 'state->fc_regions_size' after successful memory allocation 2cfb769d60 ext4: fix potential memory leak in ext4_fc_record_regions() c9ce7766dc ext4: fix potential memory leak in ext4_fc_record_modified_inode() d575fb52c4 ext4: fix miss release buffer head in ext4_fc_write_inode 74d2a398d2 ext4: place buffer head allocation before handle start fbb0e601bd ext4: ext4_read_bh_lock() should submit IO if the buffer isn't uptodate 0e1764ad71 ext4: don't increase iversion counter for ea_inodes 483831ad04 ext4: fix check for block being out of directory size ac66db1a43 ext4: make ext4_lazyinit_thread freezable f34ab95162 ext4: fix null-ptr-deref in ext4_write_info fb98cb61ef ext4: avoid crash when inline data creation follows DIO write e65506ff18 jbd2: add miss release buffer head in fc_do_one_pass() 1d4d16daec jbd2: fix potential use-after-free in jbd2_fc_wait_bufs 7a33dde572 jbd2: fix potential buffer head reference count leak eea3e455a3 jbd2: wake up journal waiters in FIFO order, not LIFO ba52e685d2 hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero bdcb1d7cf2 hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO d621a87064 hardening: Clarify Kconfig text for auto-var-init 4a8e8bf280 f2fs: fix to do sanity check on summary info 73fb4bd2c0 f2fs: fix to do sanity check on destination blkaddr during recovery 12014eaf1b f2fs: increase the limit for reserve_root 47b5ffe863 btrfs: fix race between quota enable and quota rescan ioctl e504729496 fbdev: smscufx: Fix use-after-free in ufx_ops_open() 9931bd05bb scsi: qedf: Populate sysfs attributes for vport 102c4b6e8c powerpc/boot: Explicitly disable usage of SPE instructions 7db60fd46e powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain 9119a92ad9 PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge a3c08c0217 mm/mmap: undo ->mmap() when arch_validate_flags() fails 7d551b7d61 block: fix inflight statistics of part0 0a12979089 drm/udl: Restore display mode on resume f134f261d7 drm/virtio: Check whether transferred 2D BO is shmem 303436e301 nvme-pci: set min_align_mask before calculating max_hw_sectors 6a73e6edcb UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK 1a053f597f riscv: Pass -mno-relax only on lld < 15.0.0 d15dca1d46 riscv: Make VM_WRITE imply VM_READ d8c6f9b2e1 riscv: Allow PROT_WRITE-only mmap() a6dcc6cfa2 parisc: fbdev/stifb: Align graphics memory size to 4MB 2ce9fab94b RISC-V: Make port I/O string accessors actually work ffb571e123 regulator: qcom_rpm: Fix circular deferral regression 85909424a1 hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API 8ef0e1c0ae ASoC: wcd934x: fix order of Slimbus unprepare/disable 9b2c82af65 ASoC: wcd9335: fix order of Slimbus unprepare/disable 1c20d672e3 platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure 6b7ae4a904 quota: Check next/prev free block number after reading from quota file 5b1a56beb6 HID: multitouch: Add memory barriers bfe60d7641 fs: dlm: handle -EBUSY first in lock arg validation 0b2d8e4db4 fs: dlm: fix race between test_bit() and queue_work() 057d5838c7 mmc: sdhci-sprd: Fix minimum clock limit 448fffc1ae can: kvaser_usb_leaf: Fix CAN state after restart a3776e09b3 can: kvaser_usb_leaf: Fix TX queue out of sync after restart 0f8c88978d can: kvaser_usb_leaf: Fix overread with an invalid command 5d1cb7bfad can: kvaser_usb: Fix use of uninitialized completion b239a0993a usb: add quirks for Lenovo OneLink+ Dock afbbf305db iio: pressure: dps310: Reset chip after timeout 9daadd1d10 iio: pressure: dps310: Refactor startup procedure ae49d80400 iio: adc: ad7923: fix channel readings for some variants ea4dcd3d6a iio: ltc2497: Fix reading conversion results 30e1bd0d3e iio: dac: ad5593r: Fix i2c read protocol requirements 9312e04b6c cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message 64f23e5430 cifs: destage dirty pages before re-reading them for cache=none 50d3d89537 mtd: rawnand: atmel: Unmap streaming DMA mappings e8eb44eeee ALSA: hda/realtek: Add Intel Reference SSID to support headset keys 4491fbd0a7 ALSA: hda/realtek: Add quirk for ASUS GV601R laptop 4285d06d12 ALSA: hda/realtek: Correct pin configs for ASUS G533Z 768cd2cd1a ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530 3e29645fba ALSA: usb-audio: Fix NULL dererence at error path bc1d16d282 ALSA: usb-audio: Fix potential memory leaks ef1658bc48 ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free() 026fcb6336 ALSA: oss: Fix potential deadlock at unregistration Also update the .xml file to handle the few ABI changes in this merge that required an update due to private pointers changing types and ABI padding structures being used to preserve the ABI: Leaf changes summary: 4 artifacts changed (1 filtered out) Changed leaf types summary: 4 (1 filtered out) leaf types changed Removed/Changed/Added functions summary: 0 Removed, 0 Changed, 0 Added function Removed/Changed/Added variables summary: 0 Removed, 0 Changed, 0 Added variable 'struct fscrypt_info at fscrypt_private.h:195:1' changed: type size hasn't changed there are data member changes: type 'key*' of 'fscrypt_info::ci_master_key' changed: pointer type changed from: 'key*' to: 'fscrypt_master_key*' 5197 impacted interfaces 'struct sk_buff at skbuff.h:717:1' changed: type size hasn't changed there are data member changes: data member u64 android_kabi_reserved1 at offset 1472 (in bits) became anonymous data member 'union {struct {__u8 scm_io_uring; __u8 android_kabi_reserved1_padding1; __u16 android_kabi_reserved1_padding2; __u32 android_kabi_reserved1_padding3;}; struct {u64 android_kabi_reserved1;}; union {};}' 5197 impacted interfaces 'struct super_block at fs.h:1450:1' changed: type size hasn't changed there are data member changes: type 'key*' of 'super_block::s_master_keys' changed: pointer type changed from: 'key*' to: 'fscrypt_keyring*' 5197 impacted interfaces 'struct tcp_sock at tcp.h:146:1' changed: type size hasn't changed one impacted interface Change-Id: I6f2a7b91e1df96bede8aafa944a04b3e08ed33a1 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-01-21 12:06:54 +00:00
Ira Weiny	60d4383c1b	mm/highmem: Lift memcpy_[to|from]_page to core ... [ Upstream commit bb90d4bc7b6a536b2e4db45f4763e467c2008251 ] Working through a conversion to a call kmap_local_page() instead of kmap() revealed many places where the pattern kmap/memcpy/kunmap occurred. Eric Biggers, Matthew Wilcox, Christoph Hellwig, Dan Williams, and Al Viro all suggested putting this code into helper functions. Al Viro further pointed out that these functions already existed in the iov_iter code.[1] Various locations for the lifted functions were considered. Headers like mm.h or string.h seem ok but don't really portray the functionality well. pagemap.h made some sense but is for page cache functionality.[2] Another alternative would be to create a new header for the promoted memcpy functions, but it masks the fact that these are designed to copy to/from pages using the kernel direct mappings and complicates matters with a new header. Placing these functions in 'highmem.h' is suboptimal especially with the changes being proposed in the functionality of kmap. From a caller perspective including/using 'highmem.h' implies that the functions defined in that header are only required when highmem is in use which is increasingly not the case with modern processors. However, highmem.h is where all the current functions like this reside (zero_user(), clear_highpage(), clear_user_highpage(), copy_user_highpage(), and copy_highpage()). So it makes the most sense even though it is distasteful for some.[3] Lift memcpy_to_page() and memcpy_from_page() to pagemap.h. [1] https://lore.kernel.org/lkml/20201013200149.GI3576660@ZenIV.linux.org.uk/ https://lore.kernel.org/lkml/20201013112544.GA5249@infradead.org/ [2] https://lore.kernel.org/lkml/20201208122316.GH7338@casper.infradead.org/ [3] https://lore.kernel.org/lkml/20201013200149.GI3576660@ZenIV.linux.org.uk/#t https://lore.kernel.org/lkml/20201208163814.GN1563847@iweiny-DESK2.sc.intel.com/ Cc: Boris Pismenny <borisp@mellanox.com> Cc: Or Gerlitz <gerlitz.or@gmail.com> Cc: Dave Hansen <dave.hansen@intel.com> Suggested-by: Matthew Wilcox <willy@infradead.org> Suggested-by: Christoph Hellwig <hch@infradead.org> Suggested-by: Dan Williams <dan.j.williams@intel.com> Suggested-by: Al Viro <viro@zeniv.linux.org.uk> Suggested-by: Eric Biggers <ebiggers@kernel.org> Reviewed-by: Chaitanya Kulkarni <chaitanya.kulkarni@wdc.com> Reviewed-by: Christoph Hellwig <hch@lst.de> Signed-off-by: Ira Weiny <ira.weiny@intel.com> Signed-off-by: David Sterba <dsterba@suse.com> Stable-dep-of: 956510c0c743 ("fs: ext4: initialize fsdata in pagecache_write()") Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-01-14 10:16:42 +01:00
Marco Elver	67349025f0	net: switch to storing KCOV handle directly in sk_buff ... [ Upstream commit fa69ee5aa48b5b52e8028c2eb486906e9998d081 ] It turns out that usage of skb extensions can cause memory leaks. Ido Schimmel reported: "[...] there are instances that blindly overwrite 'skb->extensions' by invoking skb_copy_header() after __alloc_skb()." Therefore, give up on using skb extensions for KCOV handle, and instead directly store kcov_handle in sk_buff. Fixes: 6370cc3bbd8a ("net: add kcov handle to skb extensions") Fixes: 85ce50d337d1 ("net: kcov: don't select SKB_EXTENSIONS when there is no NET") Fixes: 97f53a08cba1 ("net: linux/skbuff.h: combine SKB_EXTENSIONS + KCOV handling") Link: https://lore.kernel.org/linux-wireless/20201121160941.GA485907@shredder.lan/ Reported-by: Ido Schimmel <idosch@idosch.org> Signed-off-by: Marco Elver <elver@google.com> Link: https://lore.kernel.org/r/20201125224840.2014773-1-elver@google.com Signed-off-by: Jakub Kicinski <kuba@kernel.org> Stable-dep-of: db0b124f02ba ("igc: Enhance Qbv scheduling by using first flag bit") Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-01-14 10:16:10 +01:00
Zhengchao Shao	0b5a89e8bc	test_firmware: fix memory leak in test_firmware_init() ... [ Upstream commit 7610615e8cdb3f6f5bbd9d8e7a5d8a63e3cabf2e ] When misc_register() failed in test_firmware_init(), the memory pointed by test_fw_config->name is not released. The memory leak information is as follows: unreferenced object 0xffff88810a34cb00 (size 32): comm "insmod", pid 7952, jiffies 4294948236 (age 49.060s) hex dump (first 32 bytes): 74 65 73 74 2d 66 69 72 6d 77 61 72 65 2e 62 69 test-firmware.bi 6e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 n............... backtrace: [<ffffffff81b21fcb>] __kmalloc_node_track_caller+0x4b/0xc0 [<ffffffff81affb96>] kstrndup+0x46/0xc0 [<ffffffffa0403a49>] __test_firmware_config_init+0x29/0x380 [test_firmware] [<ffffffffa040f068>] 0xffffffffa040f068 [<ffffffff81002c41>] do_one_initcall+0x141/0x780 [<ffffffff816a72c3>] do_init_module+0x1c3/0x630 [<ffffffff816adb9e>] load_module+0x623e/0x76a0 [<ffffffff816af471>] __do_sys_finit_module+0x181/0x240 [<ffffffff89978f99>] do_syscall_64+0x39/0xb0 [<ffffffff89a0008b>] entry_SYSCALL_64_after_hwframe+0x63/0xcd Fixes: c92316bf8e ("test_firmware: add batched firmware tests") Signed-off-by: Zhengchao Shao <shaozhengchao@huawei.com> Acked-by: Luis Chamberlain <mcgrof@kernel.org> Link: https://lore.kernel.org/r/20221119035721.18268-1-shaozhengchao@huawei.com Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-01-14 10:15:56 +01:00
Akinobu Mita	869a37ad6f	lib/notifier-error-inject: fix error when writing -errno to debugfs file ... [ Upstream commit f883c3edd2c432a2931ec8773c70a570115a50fe ] The simple attribute files do not accept a negative value since the commit 488dac0c92 ("libfs: fix error cast of negative value in simple_attr_write()"). This restores the previous behaviour by using newly introduced DEFINE_SIMPLE_ATTRIBUTE_SIGNED instead of DEFINE_SIMPLE_ATTRIBUTE. Link: https://lkml.kernel.org/r/20220919172418.45257-3-akinobu.mita@gmail.com Fixes: 488dac0c92 ("libfs: fix error cast of negative value in simple_attr_write()") Signed-off-by: Akinobu Mita <akinobu.mita@gmail.com> Reported-by: Zhao Gongyi <zhaogongyi@huawei.com> Reviewed-by: David Hildenbrand <david@redhat.com> Reviewed-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Cc: Alexander Viro <viro@zeniv.linux.org.uk> Cc: Jonathan Corbet <corbet@lwn.net> Cc: Oscar Salvador <osalvador@suse.de> Cc: Rafael J. Wysocki <rafael@kernel.org> Cc: Shuah Khan <shuah@kernel.org> Cc: Wei Yongjun <weiyongjun1@huawei.com> Cc: Yicong Yang <yangyicong@hisilicon.com> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-01-14 10:15:19 +01:00
Gaosheng Cui	c9a9aa02f0	lib/fonts: fix undefined behavior in bit shift for get_default_font ... [ Upstream commit 6fe888c4d2fb174408e4540bb2d5602b9f507f90 ] Shifting signed 32-bit value by 31 bits is undefined, so changing significant bit to unsigned. The UBSAN warning calltrace like below: UBSAN: shift-out-of-bounds in lib/fonts/fonts.c:139:20 left shift of 1 by 31 places cannot be represented in type 'int' <TASK> dump_stack_lvl+0x7d/0xa5 dump_stack+0x15/0x1b ubsan_epilogue+0xe/0x4e __ubsan_handle_shift_out_of_bounds+0x1e7/0x20c get_default_font+0x1c7/0x1f0 fbcon_startup+0x347/0x3a0 do_take_over_console+0xce/0x270 do_fbcon_takeover+0xa1/0x170 do_fb_registered+0x2a8/0x340 fbcon_fb_registered+0x47/0xe0 register_framebuffer+0x294/0x4a0 __drm_fb_helper_initial_config_and_unlock+0x43c/0x880 [drm_kms_helper] drm_fb_helper_initial_config+0x52/0x80 [drm_kms_helper] drm_fbdev_client_hotplug+0x156/0x1b0 [drm_kms_helper] drm_fbdev_generic_setup+0xfc/0x290 [drm_kms_helper] bochs_pci_probe+0x6ca/0x772 [bochs] local_pci_probe+0x4d/0xb0 pci_device_probe+0x119/0x320 really_probe+0x181/0x550 __driver_probe_device+0xc6/0x220 driver_probe_device+0x32/0x100 __driver_attach+0x195/0x200 bus_for_each_dev+0xbb/0x120 driver_attach+0x27/0x30 bus_add_driver+0x22e/0x2f0 driver_register+0xa9/0x190 __pci_register_driver+0x90/0xa0 bochs_pci_driver_init+0x52/0x1000 [bochs] do_one_initcall+0x76/0x430 do_init_module+0x61/0x28a load_module+0x1f82/0x2e50 __do_sys_finit_module+0xf8/0x190 __x64_sys_finit_module+0x23/0x30 do_syscall_64+0x58/0x80 entry_SYSCALL_64_after_hwframe+0x63/0xcd </TASK> Link: https://lkml.kernel.org/r/20221031113829.4183153-1-cuigaosheng1@huawei.com Fixes: c81f717cb9 ("fbcon: Fix typo and bogus logic in get_default_font") Signed-off-by: Gaosheng Cui <cuigaosheng1@huawei.com> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-01-14 10:15:17 +01:00
wuchi	a1014fbc83	lib/debugobjects: fix stat count and optimize debug_objects_mem_init ... [ Upstream commit eabb7f1ace53e127309407b2b5e74e8199e85270 ] 1. Var debug_objects_allocated tracks valid kmem_cache_alloc calls, so track it in debug_objects_replace_static_objects. Do similar things in object_cpu_offline. 2. In debug_objects_mem_init, there is no need to call function cpuhp_setup_state_nocalls when debug_objects_enabled = 0 (out of memory). Link: https://lkml.kernel.org/r/20220611130634.99741-1-wuchi.zero@gmail.com Fixes: 634d61f45d ("debugobjects: Percpu pool lookahead freeing/allocation") Fixes: c4b73aabd0 ("debugobjects: Track number of kmem_cache_alloc/kmem_cache_free done") Signed-off-by: wuchi <wuchi.zero@gmail.com> Reviewed-by: Waiman Long <longman@redhat.com> Cc: Thomas Gleixner <tglx@linutronix.de> Cc: Christoph Hellwig <hch@lst.de> Cc: Kees Cook <keescook@chromium.org> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-01-14 10:15:16 +01:00
Jens Axboe	e86db87191	iov_iter: add helper to save iov_iter state ... [ Upstream commit 8fb0f47a9d7acf620d0fd97831b69da9bc5e22ed ] In an ideal world, when someone is passed an iov_iter and returns X bytes, then X bytes would have been consumed/advanced from the iov_iter. But we have use cases that always consume the entire iterator, a few examples of that are iomap and bdev O_DIRECT. This means we cannot rely on the state of the iov_iter once we've called ->read_iter() or ->write_iter(). This would be easier if we didn't always have to deal with truncate of the iov_iter, as rewinding would be trivial without that. We recently added a commit to track the truncate state, but that grew the iov_iter by 8 bytes and wasn't the best solution. Implement a helper to save enough of the iov_iter state to sanely restore it after we've called the read/write iterator helpers. This currently only works for IOVEC/BVEC/KVEC as that's all we need, support for other iterator types are left as an exercise for the reader. Link: https://lore.kernel.org/linux-fsdevel/CAHk-=wiacKV4Gh-MYjteU0LwNBSGpWrK-Ov25HdqB1ewinrFPg@mail.gmail.com/ Signed-off-by: Jens Axboe <axboe@kernel.dk> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-01-04 11:39:16 +01:00
Lee Jones	e2a4080d04	BACKPORT: Kconfig.debug: provide a little extra FRAME_WARN leeway when KASAN is enabled ... [ Upstream commit 152fe65f300e1819d59b80477d3e0999b4d5d7d2 ] When enabled, KASAN enlarges function's stack-frames. Pushing quite a few over the current threshold. This can mainly be seen on 32-bit architectures where the present limit (when !GCC) is a lowly 1024-Bytes. Bug: 261962742 Link: https://lkml.kernel.org/r/20221125120750.3537134-3-lee@kernel.org Signed-off-by: Lee Jones <lee@kernel.org> Acked-by: Arnd Bergmann <arnd@arndb.de> Cc: Alex Deucher <alexander.deucher@amd.com> Cc: "Christian König" <christian.koenig@amd.com> Cc: Daniel Vetter <daniel@ffwll.ch> Cc: David Airlie <airlied@gmail.com> Cc: Harry Wentland <harry.wentland@amd.com> Cc: Leo Li <sunpeng.li@amd.com> Cc: Maarten Lankhorst <maarten.lankhorst@linux.intel.com> Cc: Maxime Ripard <mripard@kernel.org> Cc: Nathan Chancellor <nathan@kernel.org> Cc: Nick Desaulniers <ndesaulniers@google.com> Cc: "Pan, Xinhui" <Xinhui.Pan@amd.com> Cc: Rodrigo Siqueira <Rodrigo.Siqueira@amd.com> Cc: Thomas Zimmermann <tzimmermann@suse.de> Cc: Tom Rix <trix@redhat.com> Cc: <stable@vger.kernel.org> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Sasha Levin <sashal@kernel.org> Change-Id: I505a5187220b426fe49c0f15bf1704198082f63d Signed-off-by: Lee Jones <joneslee@google.com>	2022-12-09 12:14:48 +00:00
Greg Kroah-Hartman	5ab4c6b843	This is the 5.10.158 stable release ... -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmORvAIACgkQONu9yGCS aT6OMhAAkxn/BD0mYER+XMJK+z5KIgusOh2TbHJGIkHUmj1u6Fse8VfR1xAjTk5q y3J0uX5Bung1FIsA8iVF7no1D4ungqsyXUt6cclO8X3dVQAV8ikNDRTu2FFLiywY 4QxJ/h1Nhl+6lb1lqHT+iSEuMAjlUr6DtAq4hb9Xxgbn9hOghTMzg4dZYjXI3cr4 Bxk/tunrp8Rc5ad/I9Gwba0ar23cFDLYNxT6VKn+FBJ2jcj/74ULjwPvT3SyAm2U hONKAQQZNtGPmGsUXkjdjhz7VaceNlLp0bA92AqCvNEmbnJzjb21qAklfdNAvEGH yP4GOdxDvmwzPxkxpZfa0I3OYpfxAwT2bG6mVSl7+Ok8LNIiKvvD+TlL0p+nqoe1 LogxV309xqpN+D3EgUnX03lLkJDfWfrZyhEIPgEuRdW7OjixqYOs0hWLmkF0QCi6 vLYRSPnsoxragShq8HrdC/QlLmLCckMy8i7bcCiwpSwcsL/1vVUnb05O6iaFoIc4 56nTifRT5p3nJlnjQhCyPVbxmF8CRlhsRwbOsA+0pklkTQx5qHaYMFLuXsd7nSFG +le0Kuc+xTMdP/ABgs2s3UdZFh3Zevovt4gaOnYjC6EDbmoeG6DNTTzIbNEwa1vw D6+Zrw3HePytwJcUNRHthXuTUN2V68YvsXu7zVhKU8mlyj+UXpE= =Zr7b -----END PGP SIGNATURE----- Merge 5.10.158 into android12-5.10-lts Changes in 5.10.158 btrfs: sink iterator parameter to btrfs_ioctl_logical_to_ino btrfs: free btrfs_path before copying inodes to userspace spi: spi-imx: Fix spi_bus_clk if requested clock is higher than input clock btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker drm/display/dp_mst: Fix drm_dp_mst_add_affected_dsc_crtcs() return code drm/amdgpu: update drm_display_info correctly when the edid is read drm/amdgpu: Partially revert "drm/amdgpu: update drm_display_info correctly when the edid is read" btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit() iio: health: afe4403: Fix oob read in afe4403_read_raw iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw iio: light: rpr0521: add missing Kconfig dependencies bpf, perf: Use subprog name when reporting subprog ksymbol scripts/faddr2line: Fix regression in name resolution on ppc64le ARM: at91: rm9200: fix usb device clock id libbpf: Handle size overflow for ringbuf mmap hwmon: (ltc2947) fix temperature scaling hwmon: (ina3221) Fix shunt sum critical calculation hwmon: (i5500_temp) fix missing pci_disable_device() hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails bpf: Do not copy spin lock field from user in bpf_selem_alloc of: property: decrement node refcount in of_fwnode_get_reference_args() ixgbevf: Fix resource leak in ixgbevf_init_module() i40e: Fix error handling in i40e_init_module() fm10k: Fix error handling in fm10k_init_module() iavf: remove redundant ret variable iavf: Fix error handling in iavf_init_module() e100: switch from 'pci_' to 'dma_' API e100: Fix possible use after free in e100_xmit_prepare net/mlx5: Fix uninitialized variable bug in outlen_write() net/mlx5e: Fix use-after-free when reverting termination table can: sja1000_isa: sja1000_isa_probe(): add missing free_sja1000dev() can: cc770: cc770_isa_probe(): add missing free_cc770dev() qlcnic: fix sleep-in-atomic-context bugs caused by msleep aquantia: Do not purge addresses when setting the number of rings wifi: cfg80211: fix buffer overflow in elem comparison wifi: cfg80211: don't allow multi-BSSID in S1G wifi: mac8021: fix possible oob access in ieee80211_get_rate_duration net: phy: fix null-ptr-deref while probe() failed net: net_netdev: Fix error handling in ntb_netdev_init_module() net/9p: Fix a potential socket leak in p9_socket_open net: ethernet: nixge: fix NULL dereference dsa: lan9303: Correct stat name tipc: re-fetch skb cb after tipc_msg_validate net: hsr: Fix potential use-after-free afs: Fix fileserver probe RTT handling net: tun: Fix use-after-free in tun_detach() packet: do not set TP_STATUS_CSUM_VALID on CHECKSUM_COMPLETE sctp: fix memory leak in sctp_stream_outq_migrate() net: ethernet: renesas: ravb: Fix promiscuous mode after system resumed hwmon: (coretemp) Check for null before removing sysfs attrs hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() net/mlx5: DR, Fix uninitialized var warning riscv: vdso: fix section overlapping under some conditions error-injection: Add prompt for function error injection tools/vm/slabinfo-gnuplot: use "grep -E" instead of "egrep" nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry() x86/bugs: Make sure MSR_SPEC_CTRL is updated properly upon resume from S3 pinctrl: intel: Save and restore pins in "direct IRQ" mode net: stmmac: Set MAC's flow control register to reflect current settings mmc: mmc_test: Fix removal of debugfs file mmc: core: Fix ambiguous TRIM and DISCARD arg mmc: sdhci-esdhc-imx: correct CQHCI exit halt state check mmc: sdhci-sprd: Fix no reset data and command after voltage switch mmc: sdhci: Fix voltage switch delay drm/amdgpu: temporarily disable broken Clang builds due to blown stack-frame drm/i915: Never return 0 if not all requests retired tracing: Free buffers when a used dynamic event is removed io_uring: don't hold uring_lock when calling io_run_task_work* ASoC: ops: Fix bounds check for _sx controls pinctrl: single: Fix potential division by zero iommu/vt-d: Fix PCI device refcount leak in has_external_pci() iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init() parisc: Increase size of gcc stack frame check xtensa: increase size of gcc stack frame check parisc: Increase FRAME_WARN to 2048 bytes on parisc Kconfig.debug: provide a little extra FRAME_WARN leeway when KASAN is enabled selftests: net: add delete nexthop route warning test selftests: net: fix nexthop warning cleanup double ip typo ipv4: Handle attempt to delete multipath route when fib_info contains an nh reference ipv4: Fix route deletion when nexthop info is not specified Revert "tty: n_gsm: avoid call of sleeping functions from atomic context" x86/tsx: Add a feature bit for TSX control MSR support x86/pm: Add enumeration check before spec MSRs save/restore setup i2c: npcm7xx: Fix error handling in npcm_i2c_init() i2c: imx: Only DMA messages with I2C_M_DMA_SAFE flag set ACPI: HMAT: remove unnecessary variable initialization ACPI: HMAT: Fix initiator registration for single-initiator systems Revert "clocksource/drivers/riscv: Events are stopped during CPU suspend" char: tpm: Protect tpm_pm_suspend with locks Input: raydium_ts_i2c - fix memory leak in raydium_i2c_send() block: unhash blkdev part inode when the part is deleted proc: avoid integer type confusion in get_proc_long proc: proc_skip_spaces() shouldn't think it is working on C strings v4l2: don't fall back to follow_pfn() if pin_user_pages_fast() fails ipc/sem: Fix dangling sem_array access in semtimedop race Linux 5.10.158 Change-Id: I8db196fa535e260ed31965b52ed53ef0b6bd526b Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2022-12-08 16:39:44 +00:00
Lee Jones	f09ac62f0e	Kconfig.debug: provide a little extra FRAME_WARN leeway when KASAN is enabled ... [ Upstream commit 152fe65f300e1819d59b80477d3e0999b4d5d7d2 ] When enabled, KASAN enlarges function's stack-frames. Pushing quite a few over the current threshold. This can mainly be seen on 32-bit architectures where the present limit (when !GCC) is a lowly 1024-Bytes. Link: https://lkml.kernel.org/r/20221125120750.3537134-3-lee@kernel.org Signed-off-by: Lee Jones <lee@kernel.org> Acked-by: Arnd Bergmann <arnd@arndb.de> Cc: Alex Deucher <alexander.deucher@amd.com> Cc: "Christian König" <christian.koenig@amd.com> Cc: Daniel Vetter <daniel@ffwll.ch> Cc: David Airlie <airlied@gmail.com> Cc: Harry Wentland <harry.wentland@amd.com> Cc: Leo Li <sunpeng.li@amd.com> Cc: Maarten Lankhorst <maarten.lankhorst@linux.intel.com> Cc: Maxime Ripard <mripard@kernel.org> Cc: Nathan Chancellor <nathan@kernel.org> Cc: Nick Desaulniers <ndesaulniers@google.com> Cc: "Pan, Xinhui" <Xinhui.Pan@amd.com> Cc: Rodrigo Siqueira <Rodrigo.Siqueira@amd.com> Cc: Thomas Zimmermann <tzimmermann@suse.de> Cc: Tom Rix <trix@redhat.com> Cc: <stable@vger.kernel.org> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-12-08 11:23:58 +01:00
Helge Deller	19d91d3798	parisc: Increase FRAME_WARN to 2048 bytes on parisc ... [ Upstream commit 8d192bec534bd5b778135769a12e5f04580771f7 ] PA-RISC uses a much bigger frame size for functions than other architectures. So increase it to 2048 for 32- and 64-bit kernels. This fixes e.g. a warning in lib/xxhash.c. Reported-by: kernel test robot <lkp@intel.com> Signed-off-by: Helge Deller <deller@gmx.de> Stable-dep-of: 152fe65f300e ("Kconfig.debug: provide a little extra FRAME_WARN leeway when KASAN is enabled") Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-12-08 11:23:58 +01:00
Guenter Roeck	fcf20da099	xtensa: increase size of gcc stack frame check ... [ Upstream commit 867050247e295cf20fce046a92a7e6491fcfe066 ] xtensa frame size is larger than the frame size for almost all other architectures. This results in more than 50 "the frame size of <n> is larger than 1024 bytes" errors when trying to build xtensa:allmodconfig. Increase frame size for xtensa to 1536 bytes to avoid compile errors due to frame size limits. Link: https://lkml.kernel.org/r/20210912025235.3514761-1-linux@roeck-us.net Signed-off-by: Guenter Roeck <linux@roeck-us.net> Reviewed-by: Max Filippov <jcmvbkbc@gmail.com> Cc: Chris Zankel <chris@zankel.net> Cc: David Laight <David.Laight@ACULAB.COM> Cc: Masahiro Yamada <masahiroy@kernel.org> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org> Stable-dep-of: 152fe65f300e ("Kconfig.debug: provide a little extra FRAME_WARN leeway when KASAN is enabled") Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-12-08 11:23:58 +01:00
Helge Deller	a1877001ed	parisc: Increase size of gcc stack frame check ... [ Upstream commit 55b70eed81cba1331773d4aaf5cba2bb07475cd8 ] parisc uses much bigger frames than other architectures, so increase the stack frame check value to avoid compiler warnings. Cc: Arnd Bergmann <arnd@arndb.de> Cc: Abd-Alrhman Masalkhi <abd.masalkhi@gmail.com> Cc: Christoph Hellwig <hch@infradead.org> Signed-off-by: Helge Deller <deller@gmx.de> Stable-dep-of: 152fe65f300e ("Kconfig.debug: provide a little extra FRAME_WARN leeway when KASAN is enabled") Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-12-08 11:23:58 +01:00
Steven Rostedt (Google)	c099d12c55	error-injection: Add prompt for function error injection ... commit a4412fdd49dc011bcc2c0d81ac4cab7457092650 upstream. The config to be able to inject error codes into any function annotated with ALLOW_ERROR_INJECTION() is enabled when FUNCTION_ERROR_INJECTION is enabled. But unfortunately, this is always enabled on x86 when KPROBES is enabled, and there's no way to turn it off. As kprobes is useful for observability of the kernel, it is useful to have it enabled in production environments. But error injection should be avoided. Add a prompt to the config to allow it to be disabled even when kprobes is enabled, and get rid of the "def_bool y". This is a kernel debug feature (it's in Kconfig.debug), and should have never been something enabled by default. Cc: stable@vger.kernel.org Fixes: 540adea380 ("error-injection: Separate error-injection from kprobe") Signed-off-by: Steven Rostedt (Google) <rostedt@goodmis.org> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-12-08 11:23:57 +01:00
Greg Kroah-Hartman	982d7f3eb8	This is the 5.10.157 stable release ... -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmOKKmsACgkQONu9yGCS aT73ixAAwyEk1kuY9T0i4JfjPViD9Kg+v64lGLnM88CuGjkxcT4kv2Lg/hURDD+K pObBEaOWduKVxqH/4GqpeEpqrw3bxxQJUchw1F5C2ZsLjB5mA4u9U0dqExTPIeY2 GSLdkBY/3yWBgDlpWsEHRjhzqx16ZuvHyvMGegHLG5+hNbfmfiFBhVpn8knTFaqv fXRyC9MAt072thjjuPG6QcWpWAFFTG0PWsEkNWGLw0U07FF+V7O9sWLontHi93sn seIEUPbjgGEFND2NqLfiLOLZ9m2fBB3P32L66b9rrZNZ2DPmyrNCD0WSLhlzb1OV 8yXiVEkDUozkI6W8fzVtUUjH3gYvB9e37zCYPO6WnAl5cwGhCJz1cpQfN7g7hk9H iKpetcKf7XFBRmUq2Ftnaq7KPc81dVrQ5mYfrtsT9IYDnWMdF7AcOctN+dKkCS15 QoiJklSeE28b4PZtdt7Uv7OF2qW6w+tMKSD3PJyiBHB46rcQjuuOy7ifa8VqaXHI ZO+mWUjMMUdo3q0lXoy2i5PMNrul41QMsdnrGaZxXU+LfaCVIubpHghSBHFhnFTY 3r2Fko3ZOsuAOQXX5iCTCstCEev5LH0v74bou355Y0uteueCqpnc/GSEZ8KhP+M0 kqpcyf3e6KAL7TA7eqQdptpFyDW732IgcbU4bQKUMd038Hb5I4o= =1JWA -----END PGP SIGNATURE----- Merge 5.10.157 into android12-5.10-lts Changes in 5.10.157 scsi: scsi_transport_sas: Fix error handling in sas_phy_add() ata: libata-scsi: simplify __ata_scsi_queuecmd() ata: libata-core: do not issue non-internal commands once EH is pending bridge: switchdev: Notify about VLAN protocol changes bridge: switchdev: Fix memory leaks when changing VLAN protocol drm/display: Don't assume dual mode adaptors support i2c sub-addressing nvme: add a bogus subsystem NQN quirk for Micron MTFDKBA2T0TFH nvme-pci: add NVME_QUIRK_BOGUS_NID for Micron Nitro iio: ms5611: Simplify IO callback parameters iio: pressure: ms5611: fixed value compensation bug ceph: do not update snapshot context when there is no new snapshot ceph: avoid putting the realm twice when decoding snaps fails wifi: mac80211: fix memory free error when registering wiphy fail wifi: mac80211_hwsim: fix debugfs attribute ps with rc table support riscv: dts: sifive unleashed: Add PWM controlled LEDs audit: fix undefined behavior in bit shift for AUDIT_BIT wifi: airo: do not assign -1 to unsigned char wifi: mac80211: Fix ack frame idr leak when mesh has no route spi: stm32: fix stm32_spi_prepare_mbr() that halves spi clk for every run selftests/bpf: Add verifier test for release_reference() Revert "net: macsec: report real_dev features when HW offloading is enabled" platform/x86: touchscreen_dmi: Add info for the RCA Cambio W101 v2 2-in-1 scsi: ibmvfc: Avoid path failures during live migration scsi: scsi_debug: Make the READ CAPACITY response compliant with ZBC drm: panel-orientation-quirks: Add quirk for Acer Switch V 10 (SW5-017) block, bfq: fix null pointer dereference in bfq_bio_bfqg() arm64/syscall: Include asm/ptrace.h in syscall_wrapper header. RISC-V: vdso: Do not add missing symbols to version section in linker script MIPS: pic32: treat port as signed integer xfrm: fix "disable_policy" on ipv4 early demux xfrm: replay: Fix ESN wrap around for GSO af_key: Fix send_acquire race with pfkey_register ARM: dts: am335x-pcm-953: Define fixed regulators in root node ASoC: hdac_hda: fix hda pcm buffer overflow issue ASoC: sgtl5000: Reset the CHIP_CLK_CTRL reg on remove ASoC: soc-pcm: Don't zero TDM masks in __soc_pcm_open() scsi: storvsc: Fix handling of srb_status and capacity change events regulator: core: fix kobject release warning and memory leak in regulator_register() spi: dw-dma: decrease reference count in dw_spi_dma_init_mfld() regulator: core: fix UAF in destroy_regulator() bus: sunxi-rsb: Support atomic transfers tee: optee: fix possible memory leak in optee_register_device() ARM: dts: at91: sam9g20ek: enable udc vbus gpio pinctrl net: liquidio: simplify if expression rxrpc: Allow list of in-use local UDP endpoints to be viewed in /proc rxrpc: Use refcount_t rather than atomic_t rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975] nfc/nci: fix race with opening and closing net: pch_gbe: fix potential memleak in pch_gbe_tx_queue() 9p/fd: fix issue of list_del corruption in p9_fd_cancel() netfilter: conntrack: Fix data-races around ct mark ARM: mxs: fix memory leak in mxs_machine_init() ARM: dts: imx6q-prti6q: Fix ref/tcxo-clock-frequency properties net: ethernet: mtk_eth_soc: fix error handling in mtk_open() net/mlx4: Check retval of mlx4_bitmap_init net/qla3xxx: fix potential memleak in ql3xxx_send() net: pch_gbe: fix pci device refcount leak while module exiting nfp: fill splittable of devlink_port_attrs correctly nfp: add port from netdev validation for EEPROM access macsec: Fix invalid error code set Drivers: hv: vmbus: fix double free in the error path of vmbus_add_channel_work() Drivers: hv: vmbus: fix possible memory leak in vmbus_device_register() netfilter: ipset: Limit the maximal range of consecutive elements to add/delete netfilter: ipset: regression in ip_set_hash_ip.c net/mlx5: Fix FW tracer timestamp calculation net/mlx5: Fix handling of entry refcount when command is not issued to FW tipc: set con sock in tipc_conn_alloc tipc: add an extra conn_get in tipc_conn_alloc tipc: check skb_linearize() return value in tipc_disc_rcv() xfrm: Fix ignored return value in xfrm6_init() sfc: fix potential memleak in __ef100_hard_start_xmit() net: sched: allow act_ct to be built without NF_NAT NFC: nci: fix memory leak in nci_rx_data_packet() regulator: twl6030: re-add TWL6032_SUBCLASS bnx2x: fix pci device refcount leak in bnx2x_vf_is_pcie_pending() dma-buf: fix racing conflict of dma_heap_add() netfilter: flowtable_offload: add missing locking dccp/tcp: Reset saddr on failure after inet6?_hash_connect(). ipv4: Fix error return code in fib_table_insert() s390/dasd: fix no record found for raw_track_access net: arcnet: Fix RESET flag handling arcnet: fix potential memory leak in com20020_probe() nfc: st-nci: fix incorrect validating logic in EVT_TRANSACTION nfc: st-nci: fix memory leaks in EVT_TRANSACTION net: thunderx: Fix the ACPI memory leak s390/crashdump: fix TOD programmable field size net: enetc: manage ENETC_F_QBV in priv->active_offloads only when enabled net: enetc: cache accesses to &priv->si->hw net: enetc: preserve TX ring priority across reconfiguration lib/vdso: use "grep -E" instead of "egrep" usb: dwc3: exynos: Fix remove() function ext4: fix use-after-free in ext4_ext_shift_extents arm64: dts: rockchip: lower rk3399-puma-haikou SD controller clock frequency iio: light: apds9960: fix wrong register for gesture gain iio: core: Fix entry not deleted when iio_register_sw_trigger_type() fails init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash nios2: add FORCE for vmlinuz.gz mmc: sdhci-brcmstb: Re-organize flags mmc: sdhci-brcmstb: Enable Clock Gating to save power mmc: sdhci-brcmstb: Fix SDHCI_RESET_ALL for CQHCI usb: cdns3: Add support for DRD CDNSP ceph: make ceph_create_session_msg a global symbol ceph: make iterate_sessions a global symbol ceph: flush mdlog before umounting ceph: flush the mdlog before waiting on unsafe reqs ceph: fix off by one bugs in unsafe_request_wait() ceph: put the requests/sessions when it fails to alloc memory ceph: fix possible NULL pointer dereference for req->r_session ceph: Use kcalloc for allocating multiple elements ceph: fix NULL pointer dereference for req->r_session usb: dwc3: gadget: conditionally remove requests usb: dwc3: gadget: Return -ESHUTDOWN on ep disable usb: dwc3: gadget: Clear ep descriptor last nilfs2: fix nilfs_sufile_mark_dirty() not set segment usage as dirty gcov: clang: fix the buffer overflow issue mm: vmscan: fix extreme overreclaim and swap floods KVM: x86: nSVM: leave nested mode on vCPU free KVM: x86: remove exit_int_info warning in svm_handle_exit x86/ioremap: Fix page aligned size calculation in __ioremap_caller() binder: avoid potential data leakage when copying txn binder: read pre-translated fds from sender buffer binder: defer copies of pre-patched txn data binder: fix pointer cast warning binder: Address corner cases in deferred copy and fixup binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0 Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode ASoC: Intel: bytcht_es8316: Add quirk for the Nanote UMPC-01 serial: 8250: 8250_omap: Avoid RS485 RTS glitch on ->set_termios() Input: goodix - try resetting the controller when no config is set Input: soc_button_array - add use_low_level_irq module parameter Input: soc_button_array - add Acer Switch V 10 to dmi_use_low_level_irq[] xen-pciback: Allow setting PCI_MSIX_FLAGS_MASKALL too xen/platform-pci: add missing free_irq() in error path platform/x86: asus-wmi: add missing pci_dev_put() in asus_wmi_set_xusb2pr() platform/x86: acer-wmi: Enable SW_TABLET_MODE on Switch V 10 (SW5-017) zonefs: fix zone report size in __zonefs_io_error() platform/x86: hp-wmi: Ignore Smart Experience App event tcp: configurable source port perturb table size net: usb: qmi_wwan: add Telit 0x103a composition gpu: host1x: Avoid trying to use GART on Tegra20 dm integrity: flush the journal on suspend dm integrity: clear the journal on suspend wifi: wilc1000: validate pairwise and authentication suite offsets wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute wifi: wilc1000: validate number of channels genirq/msi: Shutdown managed interrupts with unsatifiable affinities genirq: Always limit the affinity to online CPUs irqchip/gic-v3: Always trust the managed affinity provided by the core code genirq: Take the proposed affinity at face value if force==true btrfs: free btrfs_path before copying root refs to userspace btrfs: free btrfs_path before copying fspath to userspace btrfs: free btrfs_path before copying subvol info to userspace btrfs: sysfs: normalize the error handling branch in btrfs_init_sysfs() drm/amd/dc/dce120: Fix audio register mapping, stop triggering KASAN drm/amdgpu: always register an MMU notifier for userptr drm/i915: fix TLB invalidation for Gen12 video and compute engines fuse: lock inode unconditionally in fuse_fallocate() Linux 5.10.157 Change-Id: Ie53a7379c392879de240237eb8258857b59564a6 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2022-12-04 12:51:21 +00:00
Greg Kroah-Hartman	d21d26e65b	lib/vdso: use "grep -E" instead of "egrep" ... commit 8ac3b5cd3e0521d92f9755e90d140382fc292510 upstream. The latest version of grep claims the egrep is now obsolete so the build now contains warnings that look like: egrep: warning: egrep is obsolescent; using grep -E fix this up by moving the vdso Makefile to use "grep -E" instead. Cc: Andy Lutomirski <luto@kernel.org> Cc: Thomas Gleixner <tglx@linutronix.de> Reviewed-by: Vincenzo Frascino <vincenzo.frascino@arm.com> Link: https://lore.kernel.org/r/20220920170633.3133829-1-gregkh@linuxfoundation.org Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-12-02 17:40:02 +01:00
Greg Kroah-Hartman	9ef4727680	Merge tag 'android12-5.10.149_r00' into android12-5.10 ... This is the merge of the upstream LTS release of 5.10.149 into the android12-5.10 branch. It contains the following commits: 0118fb827b Merge branch 'android12-5.10' into branch 'android12-5.10-lts' 69a9a62c66 ANDROID: GKI: db845c: Update symbols list and ABI 2498b03977 Merge 5.10.149 into android12-5.10-lts 09be132bfe Linux 5.10.149 31ce5da48a wifi: mac80211: fix MBSSID parsing use-after-free 353b5c8d4b wifi: mac80211: don't parse mbssid in assoc response 66dacdbc2e mac80211: mlme: find auth challenge directly a07708a843 Revert "fs: check FMODE_LSEEK to control internal pipe splicing" c1e111543d Merge 5.10.148 into android12-5.10-lts 3783e64fee Linux 5.10.148 0df206bdc6 misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic 40a29e58f6 misc: pci_endpoint_test: Aggregate params checking for xfer 9c13b1a044 Input: xpad - fix wireless 360 controller breaking after suspend 19dba9c3b5 Input: xpad - add supported devices as contributed on github b2b9386667 wifi: cfg80211: update hidden BSSes to avoid WARN_ON 58c0306d0b wifi: mac80211: fix crash in beacon protection for P2P-device 3539e75abe wifi: mac80211_hwsim: avoid mac80211 warning on bad rate b0e5c5deb7 wifi: cfg80211: avoid nontransmitted BSS list corruption 6b94484503 wifi: cfg80211: fix BSS refcounting bugs 6144c97f96 wifi: cfg80211: ensure length byte is present before access e7aa7fd10e wifi: cfg80211/mac80211: reject bad MBSSID elements a6408e0b69 wifi: cfg80211: fix u8 overflow in cfg80211_update_notlisted_nontrans() b0c37581be random: use expired timer rather than wq for mixing fast pool c1a4423fd3 random: avoid reading two cache lines on irq randomness 638f84a718 USB: serial: qcserial: add new usb-id for Dell branded EM7455 36b33c6351 scsi: stex: Properly zero out the passthrough command structure 438994b8cd efi: Correct Macmini DMI match in uefi cert quirk 2fd1caa0c6 ALSA: hda: Fix position reporting on Poulsbo 011399a3f9 random: clamp credited irq bits to maximum mixed fc87c413f2 random: restore O_NONBLOCK support c04b67c544 Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5" 0a49bfa8f8 rpmsg: qcom: glink: replace strncpy() with strscpy_pad() 3451df3a51 USB: serial: ftdi_sio: fix 300 bps rate for SIO 1b257f97fe usb: mon: make mmapped memory read only 3ba555d8e1 mmc: core: Terminate infinite loop in SD-UHS voltage switch 0684658366 mmc: core: Replace with already defined values for readability 4f32f266b1 drm/amd/display: skip audio setup when audio stream is enabled a6fe179ba0 drm/amd/display: update gamut remap if plane has changed 73e1b27b58 net: atlantic: fix potential memory leak in aq_ndev_close() 3287f0d727 arch: um: Mark the stack non-executable to fix a binutils warning aeb8315593 um: Cleanup compiler warning in arch/x86/um/tls_32.c 6d4deaba06 um: Cleanup syscall_handler_t cast in syscalls_32.h 6d7a47e849 ALSA: hda/hdmi: Fix the converter reuse for the silent stream c1337f8ea8 net/ieee802154: fix uninit value bug in dgram_sendmsg 034b30c311 scsi: qedf: Fix a UAF bug in __qedf_probe() 29461bbe2d ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer dae0b77cb8 dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure e0ca2998df dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property 789e590cb8 dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling 64e240934c firmware: arm_scmi: Add SCMI PM driver remove routine 6df7c6d141 compiler_attributes.h: move __compiletime_{error|warning} 1e555c3ed1 fs: fix UAF/GPF bug in nilfs_mdt_destroy acf05d61d3 powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush 377c60dd32 mm: gup: fix the fast GUP race against THP collapse fce793a056 ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC 132590d776 xsk: Inherit need_wakeup flag for shared sockets beffc38dc6 perf tools: Fixup get_current_dir_name() compilation fb380f548c docs: update mediator information in CoC docs c7f4af575b Makefile.extrawarn: Move -Wcast-function-type-strict to W=1 b23b0cd57e ceph: don't truncate file in atomic_open 8a18fdc5ae nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure aad4c99785 nilfs2: fix leak of nilfs_root in case of writer thread creation failure 21ee3cffed nilfs2: fix use-after-free bug of struct nilfs_root 3f840480e3 nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level() bc7618b493 Merge 5.10.147 into android12-5.10-lts 014862eecf Linux 5.10.147 98f722cc24 ALSA: hda/hdmi: fix warning about PCM count when used with SOF b12d0489e4 x86/alternative: Fix race in try_get_desc() 374d4c3075 KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest a8e6cde506 clk: iproc: Do not rely on node name for correct PLL setup cf41711aa4 clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks 83db457b41 selftests: Fix the if conditions of in test_extra_filter() 84cab3531f net: stmmac: power up/down serdes in stmmac_open/release 743a6e53cf nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices 469dc5fd9a nvme: add new line after variable declatation 2c248c4681 cxgb4: fix missing unlock on ETHOFLD desc collect fail path fde656dbc3 net: sched: act_ct: fix possible refcount leak in tcf_ct_init() fa065e6081 usbnet: Fix memory leak in usbnet_disconnect() 57959392f7 Input: melfas_mip4 - fix return value check in mip4_probe() 330b775781 Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time" 359e73edd3 ASoC: tas2770: Reinit regcache on reset 8884a192f9 soc: sunxi: sram: Fix debugfs info for A64 SRAM C 4e2ede7cb9 soc: sunxi: sram: Fix probe function ordering issues 50fbc81f80 soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource() 0fdc3ab9b4 soc: sunxi: sram: Prevent the driver from being unbound 3e0405c69b soc: sunxi: sram: Actually claim SRAM regions a658f0bc72 reset: imx7: Fix the iMX8MP PCIe PHY PERST support 8934aea1a4 ARM: dts: am33xx: Fix MMCHS0 dma properties cce5dc0333 scsi: hisi_sas: Revert "scsi: hisi_sas: Limit max hw sectors for v3 HW" 625899cd06 swiotlb: max mapping size takes min align mask into account 6f478fe8c3 media: rkvdec: Disable H.264 error detection ac828e2416 media: dvb_vb2: fix possible out of bound access be2cd261ca mm: fix madivse_pageout mishandling on non-LRU page 1002d5fef4 mm/migrate_device.c: flush TLB while holding PTL a54fc53691 mm: prevent page_frag_alloc() from corrupting the memory 466a26af2d mm/page_alloc: fix race condition between build_all_zonelists and page allocation 9b751b4dc3 mmc: hsq: Fix data stomping during mmc recovery 36b10cde0c mmc: moxart: fix 4-bit bus width and remove 8-bit bus width 02d55a837e libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205 e72a435fa3 net: mt7531: only do PLL once after the reset a48daecd09 ntfs: fix BUG_ON in ntfs_lookup_inode_by_name() 1d71422bd4 ARM: dts: integrator: Tag PCI host with device_type dab144c5dd clk: ingenic-tcu: Properly enable registers before accessing timers 6c5742372b Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address 8cf377baf0 net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455 0695e590de thunderbolt: Explicitly reset plug events delay back to USB4 spec value efdff53394 usb: typec: ucsi: Remove incorrect warning e5ee7b77ac uas: ignore UAS for Thinkplus chips 5f91ceea6c usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS 1e4b856fc0 uas: add no-uas quirk for Hiksemi usb_disk 6ac5b52e3f btrfs: fix hang during unmount when stopping a space reclaim worker 29d849c3de ALSA: hda: Fix Nvidia dp infoframe 24070d32c6 ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically c1256c531d ALSA: hda/tegra: Reset hardware ded9e8964d ALSA: hda/tegra: Use clk_bulk helpers b2ad53fbc0 thunderbolt: Add support for Intel Maple Ridge single port controller 53e6282dde thunderbolt: Add support for Intel Maple Ridge 0e8dfc1216 Merge branch 'android12-5.10' into branch 'android12-5.10-lts' 391716695e Revert "usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind" 1d17080edb Merge 5.10.146 into android12-5.10-lts 62aea69444 Linux 5.10.146 c18383218c ext4: make directory inode spreading reflect flexbg size a968542d7e ext4: limit the number of retries after discarding preallocations blocks 958b0ee23f ext4: fix bug in extents parsing when eh_entries == 0 and eh_depth > 0 2511726515 devdax: Fix soft-reservation memory description 0fa11239c4 i2c: mlxbf: Fix frequency calculation 48ee0a864d i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() 4f6db1f921 i2c: mlxbf: incorrect base address passed during io write 2f58c47c36 i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible 90f1c0025b workqueue: don't skip lockdep work dependency in cancel_work_sync() 4dfc96d8d7 drm/rockchip: Fix return type of cdn_dp_connector_mode_valid 58101a9cfc drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage 3ae1dede22 drm/amd/display: Limit user regamma to a valid value 867b2b2b68 drm/amdgpu: use dirty framebuffer helper c5812807e4 drm/gma500: Fix BUG: sleeping function called from invalid context errors ec2bf249bd Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region 2a2e503a62 cifs: always initialize struct msghdr smb_msg completely 877231b0e6 cifs: use discard iterator to discard unneeded network data more efficiently 09867977fc drm/amdgpu: Fix check for RAS support 8c6fd05cf8 vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external() f31ea57c11 usb: xhci-mtk: fix issue of out-of-bounds array access f5fcc9d6d7 s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup fb189aa1be serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting e1993864a9 serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting 7f11386733 serial: Create uart_xmit_advance() fda04a0bab drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV 4bc4b6419e selftests: forwarding: add shebang for sch_red.sh 8844c750ee net: sched: fix possible refcount leak in tc_new_tfilter() 75ca7f44da net: sunhme: Fix packet reception for len < RX_COPY_THRESHOLD d76151a813 net/smc: Stop the CLC flow if no link to map buffers on fd938b4ce0 drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff() c990621606 perf kcore_copy: Do not check /proc/modules is unchanged 28d185095e perf jit: Include program header in ELF files 78926cf762 can: gs_usb: gs_can_open(): fix race dev->can.state condition ebd97dbe3c netfilter: ebtables: fix memory leak when blob is malformed b043a525a3 netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain() 710e3f526b netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain() 1e7e55374d net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs 586def6ebe net/sched: taprio: avoid disabling offload when it was never enabled aa400ccadf net: socket: remove register_gifconf 8bd98cfbfc net: enetc: move enetc_set_psfp() out of the common enetc_set_features() f0a057f49b wireguard: netlink: avoid variable-sized memcpy on sockaddr b7b3859598 wireguard: ratelimiter: disable timings test by default ddd47f1cd6 net: ipa: properly limit modem routing table use 8c1454d549 net: ipa: kill IPA_TABLE_ENTRY_SIZE 53b1715e28 net: ipa: DMA addresses are nicely aligned 48afea293a net: ipa: avoid 64-bit modulus 3ae25aca3f net: ipa: fix table alignment requirement c2cf0613d1 net: ipa: fix assumptions about DMA address size d58815af89 of: mdio: Add of_node_put() when breaking out of for_each_xx 9101e54c95 drm/hisilicon: Add depends on MMU bac7328fc0 drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled b3b41d4d95 sfc: fix null pointer dereference in efx_hard_start_xmit b4afd3878f sfc: fix TX channel offset when using legacy interrupts 2dbf487d6b i40e: Fix set max_tx_rate when it is lower than 1 Mbps 65ee2bcc89 i40e: Fix VF set max MTU size 15e9724f6b iavf: Fix set max MTU size with port VLAN and jumbo frames ccddb1db4b iavf: Fix bad page state 21b535fe5e MIPS: Loongson32: Fix PHY-mode being left unspecified a4121785a3 MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko 1ac50c1ad4 drm/panel: simple: Fix innolux_g121i1_l01 bus_format 90fbcb26d6 net: team: Unsync device addresses on ndo_stop e2b94a1122 net: bonding: Unsync device addresses on ndo_stop dc209962c0 net: bonding: Share lacpdu_mcast_addr definition 2b9aba0c5d scsi: mpt3sas: Fix return value check of dma_get_required_mask() e7fafef983 scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region 351f2d2c35 net: phy: aquantia: wait for the suspend/resume operations to finish d298fc2eef net: core: fix flow symmetric hash e90001e1dd net: let flow have same hash in two directions ab4a733874 ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header 14446a1bc2 iavf: Fix cached head and tail value for iavf_get_tx_pending 5d75fef3e6 netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find() 9a5d7e0acb netfilter: nf_conntrack_irc: Tighten matching on DCC message 369ec4dab0 netfilter: nf_conntrack_sip: fix ct_sip_walk_headers 66f9470ffe arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma aa11dae059 dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get() 1cc871fe6d arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz 3ca272b231 drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks 39f97714f3 arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob dce4662869 xfs: validate inode fork size against fork format a6bfdc157f xfs: reorder iunlink remove operation in xfs_ifree e811a534ec xfs: fix up non-directory creation in SGID directories 4e74179a16 interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate a60babeb60 KVM: SEV: add cache flush to solve SEV cache incoherency issues 379ac7905f mm/slub: fix to return errno if kmalloc() fails fa57bb9b1a can: flexcan: flexcan_mailbox_read() fix return value for drop = true 12fda27a41 riscv: fix a nasty sigreturn bug... 657803b918 gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully bdea98b98f gpio: mockup: fix NULL pointer dereference when removing debugfs bd5958ccfc wifi: mt76: fix reading current per-tid starting sequence number for aggregation 85f9a2d51e efi: libstub: check Shim mode using MokSBStateRT 3490ebe435 efi: x86: Wipe setup_data on pure EFI boot c5ee36018d media: flexcop-usb: fix endpoint type check 0d99b180ce iommu/vt-d: Check correct capability for sagaw determination 213cdb2901 ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop 10c7e52d95 ALSA: hda/realtek: Add quirk for ASUS GA503R laptop 4cd84a9518 ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack 2f7cad4ecd ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack 62ce31979f ALSA: hda/realtek: Re-arrange quirk table entries d4bad13828 ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop 62b0824c2c ALSA: hda/realtek: Add quirk for Huawei WRT-WX9 c78bce842d ALSA: hda: add Intel 5 Series / 3400 PCI DID f109dd1607 ALSA: hda/tegra: set depop delay for tegra a1926f11d9 USB: serial: option: add Quectel RM520N 4d1d91a634 USB: serial: option: add Quectel BG95 0x0203 composition 3a26651a78 USB: core: Fix RST error in hub.c 381f77b6a6 arm64/bti: Disable in kernel BTI when cross section thunks are broken 050de28980 arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer 561d86bd0e Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio" 578d644edc vfio/type1: Unpin zero pages abb560abdf vfio/type1: Prepare for batched pinning with struct vfio_batch 38cb9b8683 vfio/type1: Change success value of vaddr_get_pfn() c4adbfa9ce Revert "usb: add quirks for Lenovo OneLink+ Dock" 905e8be528 usb: cdns3: fix issue with rearming ISO OUT endpoint 8fcb5f027b usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer f457bb2198 usb: gadget: udc-xilinx: replace memcpy with memcpy_toio b9e5c47e33 usb: add quirks for Lenovo OneLink+ Dock 345bdea212 tty: serial: atmel: Preserve previous USART mode if RS485 disabled 730f78c51b serial: atmel: remove redundant assignment in rs485_config b3f2adf426 mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure 7780b3dda2 usb: xhci-mtk: relax TT periodic bandwidth allocation 99f48a3a6e usb: xhci-mtk: allow multiple Start-Split in a microframe b19f9f4122 usb: xhci-mtk: add some schedule error number 402fa9214e usb: xhci-mtk: add a function to (un)load bandwidth info c2e7000b13 usb: xhci-mtk: use @sch_tt to check whether need do TT schedule a2566a8dc5 usb: xhci-mtk: add only one extra CS for FS/LS INTR b1e11bc66c usb: xhci-mtk: get the microframe boundary for ESIT 9c28189bb6 usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop ff23c7277f usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup() ab046365c9 usb: dwc3: gadget: Refactor pullup() db27874477 usb: dwc3: gadget: Prevent repeat pullup() 6bd182beef usb: dwc3: Issue core soft reset before enabling run/stop b83692feb0 usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind 2a358ad19c usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device c267bb8334 usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake 7b0db849ea drm/amdgpu: make sure to init common IP before gmc 9d18013dac drm/amdgpu: Separate vf2pf work item init from virt data exchange 87a4e51fb8 drm/amdgpu: indirect register access for nv12 sriov 9f55f36f74 drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega ef2aee5cec Merge 5.10.145 into android12-5.10-lts 4a77e6ef20 Linux 5.10.145 ca5539d421 ALSA: hda/sigmatel: Fix unused variable warning for beep power change 9f267393b0 cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() 06e194e113 video: fbdev: pxa3xx-gcu: Fix integer overflow in pxa3xx_gcu_write 3fefe614ed mksysmap: Fix the mismatch of 'L0' symbols in System.map 3e6d2eff56 MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping() 72602bc620 afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked 517a0324db net: usb: qmi_wwan: add Quectel RM520N a36fd2d8d6 ALSA: hda/tegra: Align BDL entry to 4KB boundary e41b97a277 ALSA: hda/sigmatel: Keep power up while beep is enabled b95a5ef4c0 wifi: mac80211_hwsim: check length for virtio packets c505fee07b rxrpc: Fix calc of resend age 35da670ed1 rxrpc: Fix local destruction being repeated 891d5c46f2 regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe() c2ef959e33 ASoC: nau8824: Fix semaphore unbalance at error paths 107c6b6058 Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field" e00582a361 video: fbdev: i740fb: Error out if 'pixclock' equals zero f63ddf62d0 tools/include/uapi: Fix <asm/errno.h> for parisc and xtensa 331eba80cb cifs: don't send down the destination address to sendmsg for a SOCK_STREAM f3fbd08e7c cifs: revalidate mapping when doing direct writes a9398cb81c of/device: Fix up of_dma_configure_id() stub 6a27acda3d tracing: hold caller_addr to hardirq_{enable,disable}_ip 65dd251c51 parisc: ccio-dma: Add missing iounmap in error path in ccio_probe() 1f24b0a7ca drm/meson: Fix OSD1 RGB to YCbCr coefficient 4d3d2e384b drm/meson: Correct OSD1 global alpha value 24196210b1 gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx 4d065f8356 NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0 2f16f5b582 pinctrl: sunxi: Fix name for A100 R_PIO ee4369260e of: fdt: fix off-by-one error in unflatten_dt_nodes() cae6172a94 net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports 4a6c6041e8 platform/x86/intel: hid: add quirk to support Surface Go 3 8faabaf112 usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests cd226d8c1b powerpc/pseries/mobility: ignore ibm, platform-facilities updates d5ee5a9e47 powerpc/pseries/mobility: refactor node lookup during DT update 4dbe84b9b6 dmaengine: bestcomm: fix system boot lockups 7bbdf49e26 parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page b00a56e647 parisc: Optimize per-pagetable spinlocks 59819f0aaf serial: 8250: Fix reporting real baudrate value in c_ospeed field 9230af9188 KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling 6bae475481 KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs 7474313da8 Merge 5.10.144 into android12-5.10-lts 3dbfa90b61 Merge 5.10.143 into android12-5.10-lts 51659937e3 Revert "USB: core: Prevent nested device-reset calls" 2e00a2dc61 Revert "xhci: Add grace period after xHC start to prevent premature runtime suspend." e0f0b200a5 Merge 5.10.142 into android12-5.10-lts e69a383052 Revert "mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse" e4a7358455 Revert "io_uring: disable polling pollfree files" 99c2dfe47a Linux 5.10.144 744f98f71d Input: goodix - add compatible string for GT1158 c7f4c203d1 soc: fsl: select FSL_GUTS driver for DPIO 35371fd688 x86/ftrace: Use alternative RET encoding 4586df06a0 x86/ibt,ftrace: Make function-graph play nice 33015556a9 Revert "x86/ftrace: Use alternative RET encoding" 891f03f688 mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region() dd3aa77d5d usb: storage: Add ASUS <0x0b05:0x1932> to IGNORE_UAS 5ce017619c platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes fc2c14c2cd perf/arm_pmu_platform: fix tests for platform_get_irq() failure 187908079d drm/amd/amdgpu: skip ucode loading if ucode_size == 0 c598e2704c nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change() 1cae6f8e17 Input: iforce - add support for Boeder Force Feedback Wheel de2aa49523 ieee802154: cc2520: add rc code in cc2520_tx() 3815e66c21 gpio: mockup: remove gpio debugfs when remove device 1b8b5384e8 tg3: Disable tg3 device on system reboot to avoid triggering AER 704d1f2ac6 hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message ef033e619e HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo cff2b3a50c drm/msm/rd: Fix FIFO-full deadlock fac2c299ef Input: goodix - add support for GT1158 218b71e32f tracefs: Only clobber mode/uid/gid on remount if asked 0a81ddfc20 iommu/vt-d: Correctly calculate sagaw value of IOMMU 5ce1b0a0c2 ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible a381cac2ab ARM: dts: imx: align SPI NOR node name with dtschema f1101295c1 Linux 5.10.143 71d3adbb28 arm64: errata: add detection for AMEVCNTR01 incrementing incorrectly 202341395c hwmon: (mr75203) enable polling for all VM channels c9da73ae78 hwmon: (mr75203) fix multi-channel voltage reading 19841592ae hwmon: (mr75203) fix voltage equation for negative source input 8e8dc8fc53 hwmon: (mr75203) update pvt->v_num and vm_num to the actual number of used sensors 13521c94b9 hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined 5e17967c7e iommu/amd: use full 64-bit value in build_completion_wait() 1a27425523 swiotlb: avoid potential left shift overflow 586f8c8330 MIPS: loongson32: ls1c: Fix hang during startup a9453be390 ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion 9dacdc1d47 ASoC: mchp-spdiftx: remove references to mchp_i2s_caps 2ead78fbe6 sch_sfb: Also store skb len before calling child enqueue d47475d4e5 tcp: fix early ETIMEDOUT after spurious non-SACK RTO 6a2a344844 nvme-tcp: fix regression that causes sporadic requests to time out 5914fa32ef nvme-tcp: fix UAF when detecting digest errors a00b1b10e0 RDMA/mlx5: Set local port to one when accessing counters e8de6cb575 IB/core: Fix a nested dead lock as part of ODP flow 076f2479fc ipv6: sr: fix out-of-bounds read when setting HMAC data. 047e66867e RDMA/siw: Pass a pointer to virt_to_page() 0f1e7977e1 xen-netback: only remove 'hotplug-status' when the vif is actually destroyed 342d77769a i40e: Fix kernel crash during module removal 9d11d06e50 ice: use bitmap_free instead of devm_kfree 22922da737 tipc: fix shift wrapping bug in map_get() 2ee85ac1b2 sch_sfb: Don't assume the skb is still around after enqueueing to child 63677a0923 afs: Use the operation issue time instead of the reply time for callbacks fbbd5d05ea rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2() 6ccbb74801 ALSA: usb-audio: Register card again for iface over delayed_register option 1d29a63585 ALSA: usb-audio: Inform the delayed registration more properly e12ce30fe5 netfilter: nf_conntrack_irc: Fix forged IP logic 910891a2a4 netfilter: nf_tables: clean up hook list when offload flags check fails 908180f633 netfilter: br_netfilter: Drop dst references before setting. 7d29f2bdd1 ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time 0796953300 ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time 360dd120eb ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges 6bbef2694a ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges e198c08570 RDMA/hns: Fix wrong fixed value of qp->rq.wqe_shift b2e82e325a RDMA/hns: Fix supported page size 6dc0251638 soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs e9ea271c2e RDMA/cma: Fix arguments order in net device validation 465eecd2b3 tee: fix compiler warning in tee_shm_register() 75c961d011 regulator: core: Clean up on enable failure bb4bee3eca ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node 015c2ec053 smb3: missing inode locks in punch hole 98127f140b cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() dee1e2b18c cgroup: Fix threadgroup_rwsem <-> cpus_read_lock() deadlock bfbacc2ef7 cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree a5620d3e0c scsi: lpfc: Add missing destroy_workqueue() in error path ea10a652ad scsi: mpt3sas: Fix use-after-free warning de572edecc drm/i915: Implement WaEdpLinkRateDataReload be01f1c988 nvmet: fix a use-after-free 68f22c80c1 debugfs: add debugfs_lookup_and_remove() ab60010225 kprobes: Prohibit probes in gate area 6123bec848 ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface() ab730d3c44 ALSA: aloop: Fix random zeros in capture data when using jiffies timer 39a90720f3 ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc() dfb27648ee drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly 2078e326b6 fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init() 9d040a629e net/core/skbuff: Check the return value of skb_copy_bits() 43b9af7275 arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level 96d206d0a1 parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines 44739b5aae parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources() 826b46fd59 drm/radeon: add a force flush to delay work when radeon 0410256867 drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup. c19656cd95 drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini 67bf86ff81 drm/gem: Fix GEM handle release errors a175aed83e scsi: megaraid_sas: Fix double kfree() 004e26ef05 scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX a14f1799ce Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()" 13c8f561be fs: only do a memory barrier for the first set_buffer_uptodate() 2946d2ae5a wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd() 918d9c4a4b efi: capsule-loader: Fix use-after-free in efi_capsule_write 94f0f30b2d efi: libstub: Disable struct randomization eb75efdec8 tty: n_gsm: avoid call of sleeping functions from atomic context fb6cadd2a3 tty: n_gsm: initialize more members at gsm_alloc_mux() 186cb020bd xen-blkfront: Cache feature_persistent value before advertisement d3d885507b NFSD: Fix verifier returned in stable WRITEs 281e81a5e2 Linux 5.10.142 2058aab4e3 USB: serial: ch341: fix disabled rx timer on older devices 2a4c619a87 USB: serial: ch341: fix lost character on LCR updates 06a84bda0a usb: dwc3: disable USB core PHY management 451fa90150 usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup 8984ca41de usb: dwc3: fix PHY disable sequence cb27189360 mmc: core: Fix UHS-I SD 1.8V workaround branch 7f73a9dea0 btrfs: harden identification of a stale device 3c63a22d02 drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk 1079d09572 ALSA: seq: Fix data-race at module auto-loading f19a209f61 ALSA: seq: oss: Fix data-race for max_midi_devs access 7565c15030 ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298 ab9f890377 net: mac802154: Fix a condition in the receive path d71a1c9fce net: Use u64_stats_fetch_begin_irq() for stats fetch. 685f4e5671 ip: fix triggering of 'icmp redirect' 4abc8c07a0 wifi: mac80211: Fix UAF in ieee80211_scan_rx() dd649b4921 wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected 742e222dd5 driver core: Don't probe devices after bus_type.match() probe deferral 6202637fde usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS abe3cfb7a7 USB: core: Prevent nested device-reset calls b0d4993c4b s390: fix nospec table alignments 0361d50e86 s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages b9097c5e10 usb-storage: Add ignore-residue quirk for NXP PN7462AU 5f0d11796a USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020) d608c131df usb: dwc2: fix wrong order of phy_power_on and phy_init 95791d51f7 usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles 89b01a88ef USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode 7f1f176715 USB: serial: option: add Quectel EM060K modem efcc3e1e6a USB: serial: option: add support for OPPO R11 diag port e547c07c28 USB: serial: cp210x: add Decagon UCA device id 5a603f4c12 xhci: Add grace period after xHC start to prevent premature runtime suspend. 587f793c64 media: mceusb: Use new usb_control_msg_*() routines 07fb6b10b6 thunderbolt: Use the actual buffer in tb_async_error() f210912d1a xen-blkfront: Advertise feature-persistent as user requested aa45c50703 xen-blkback: Advertise feature-persistent as user requested 47a73e5e6b mm: pagewalk: Fix race between unmap and page walker 5d0d46e625 xen/grants: prevent integer overflow in gnttab_dma_alloc_pages() eb0c614c42 KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES 7efcbac55a gpio: pca953x: Add mutex_lock for regcache sync in PM 517dba7987 hwmon: (gpio-fan) Fix array out of bounds access a971343557 clk: bcm: rpi: Add missing newline fcae47b2d2 clk: bcm: rpi: Prevent out-of-bounds access 8c90a3e0d3 clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc() 00d8bc0c16 clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate e32982115d Input: rk805-pwrkey - fix module autoloading e2945f936c clk: core: Fix runtime PM sequence in clk_core_unprepare() 4ff599df31 Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops" c0f0ed9ef9 clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops 5f1aee7f05 drm/i915/reg: Fix spelling mistake "Unsupport" -> "Unsupported" 9629f2dfdb binder: fix UAF of ref->proc caused by race condition 08fa8cb6df USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id 5cf2a57c7a misc: fastrpc: fix memory corruption on open c99bc901d5 misc: fastrpc: fix memory corruption on probe 30fd0e23e3 iio: adc: mcp3911: use correct formula for AD conversion 89aa443437 iio: ad7292: Prevent regulator double disable b271090eea Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag b202400c9c tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete 989201bb8c vt: Clear selection before changing the font 7fd8d33adb powerpc: align syscall table for ppc32 19e3f69d19 staging: rtl8712: fix use after free bugs 6ccd69141b serial: fsl_lpuart: RS485 RTS polariy is inverse e416fe7f16 net/smc: Remove redundant refcount increase d73b89c3b3 Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb" f3d1554d0f tcp: annotate data-race around challenge_timestamp 870b6a1561 sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb 1b6666964c kcm: fix strp_init() order and cleanup 406d554844 ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler 44dfa64589 net/sched: fix netdevice reference leaks in attach_default_qdiscs() 699d82e9a6 net: sched: tbf: don't call qdisc_put() while holding tree lock c0cb63ee2e Revert "xhci: turn off port power in shutdown" 6855efbaf5 wifi: cfg80211: debugfs: fix return type in ht40allow_map_read() ddcb56e841 ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array 9276eb98cd ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg 23a2993271 ieee802154/adf7242: defer destroy_workqueue call c5f975e3eb bpf, cgroup: Fix kernel BUG in purge_effective_progs e6aeb8be85 iio: adc: mcp3911: make use of the sign bit b69e05b1e8 platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask f040abf62e drm/msm/dsi: Fix number of regulators for SDM660 43e523a407 drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg 1487e8fc16 drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4 631fbefd87 drm/msm/dsi: fix the inconsistent indenting 5d60de7a5f Merge 5.10.141 into android12-5.10-lts 0b8e37cbaa Linux 5.10.141 bdc786d737 net: neigh: don't call kfree_skb() under spin_lock_irqsave() 4931af31c4 net/af_packet: check len when min_header_len equals to 0 64f6da455b xfs: revert "xfs: actually bump warning counts when we send warnings" d34798d846 xfs: fix soft lockup via spinning in filestream ag selection loop f168801da9 xfs: fix overfilling of reserve pool 72a259bdd5 xfs: always succeed at setting the reserve pool size cb41f22df3 xfs: remove infinite loop when reserving free block pool 28d8d2737e io_uring: disable polling pollfree files 744b0d3080 kprobes: don't call disarm_kprobe() for disabled kprobes 8c70cce892 lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline() 6ba9e8fb47 netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y afa169f79d drm/amdgpu: Increase tlb flush timeout for sriov f08a3712ba drm/amd/display: Fix pixel clock programming 60d522f317 drm/amd/pm: add missing ->fini_microcode interface for Sienna Cichlid f2b7b8b1c4 s390/hypfs: avoid error message under KVM c35adafe42 neigh: fix possible DoS due to net iface start/stop loop 3c1dfeaeb3 drm/amd/display: clear optc underflow before turn off odm clock 4e5e67b13a drm/amd/display: For stereo keep "FLIP_ANY_FRAME" 828b2a5399 drm/amd/display: Avoid MPC infinite loop 9d36e2c264 mmc: mtk-sd: Clear interrupts when cqe off/disable 98f401d363 mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse 6204bf78b2 bpf: Don't redirect packets with invalid pkt_len dbd8c8fc60 ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead 8fc778ee2f fbdev: fb_pm2fb: Avoid potential divide by zero error 61cc798591 net: fix refcount bug in sk_psock_get (2) 7e2fa79226 HID: hidraw: fix memory leak in hidraw_release() bacb37bdc2 media: pvrusb2: fix memory leak in pvr_probe 872875c9ec udmabuf: Set the DMA mask for the udmabuf device (v2) dc81576194 HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report 412b844143 Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()" 38267d2663 Bluetooth: L2CAP: Fix build errors in some archs ad697ade59 kbuild: Fix include path in scripts/Makefile.modpost b9feeb6100 s390/mm: do not trigger write fault when vma does not allow VM_WRITE 0dea6b3e22 crypto: lib - remove unneeded selection of XOR_BLOCKS e5796ff9ac x86/nospec: Fix i386 RSB stuffing adee8f3082 x86/nospec: Unwreck the RSB stuffing 895428ee12 mm: Force TLB flush for PFNMAP mappings before unlink_file_vma() 5939035887 Merge 5.10.140 into android12-5.10-lts 18ed766f36 Linux 5.10.140 e897980717 bpf: Don't use tnum_range on array range checking for poke descriptors 46fcb0fc88 scsi: storvsc: Remove WQ_MEM_RECLAIM from storvsc_error_wq 8d5c106fe2 scsi: ufs: core: Enable link lost interrupt c0ba9aa95b perf/x86/intel/uncore: Fix broken read_counter() for SNB IMC PMU 5a768c9770 perf python: Fix build when PYTHON_CONFIG is user supplied 3ddbd0907f blk-mq: fix io hung due to missing commit_rqs 7ca73d0a16 Documentation/ABI: Mention retbleed vulnerability info file for sysfs 1896232619 arm64: Fix match_list for erratum 1286807 on Arm Cortex-A76 a5a58fab55 md: call __md_stop_writes in md_stop f68f025c7e Revert "md-raid: destroy the bitmap after destroying the thread" 62af37c5cd mm/hugetlb: fix hugetlb not supporting softdirty tracking 6de50db104 xen/privcmd: fix error exit of privcmd_ioctl_dm_op() 8d5f8a4f25 ACPI: processor: Remove freq Qos request for all CPUs 297ae7e87a s390: fix double free of GS and RI CBs on fork() failure c60ae87878 asm-generic: sections: refactor memory_intersects 6858933131 loop: Check for overflow while configuring loop 14cbbb9c99 x86/bugs: Add "unknown" reporting for MMIO Stale Data e3e0d11729 x86/unwind/orc: Unwind ftrace trampolines with correct ORC entry 090f0ac167 perf/x86/lbr: Enable the branch type for the Arch LBR by default d2bd18d50c btrfs: check if root is readonly while setting security xattr dcac6293f5 btrfs: add info when mount fails due to stale replace target b2d352ed4d btrfs: replace: drop assert for suspended replace 2fc3c168d5 btrfs: fix silent failure when deleting root reference 3a351b567e ionic: fix up issues with handling EAGAIN on FW cmds 79e2ca7aa9 rxrpc: Fix locking in rxrpc's sendmsg c3a6e863d5 ixgbe: stop resetting SYSTIME in ixgbe_ptp_start_cyclecounter 23cf93bb32 net: Fix a data-race around sysctl_somaxconn. 9fcc4f4066 net: Fix data-races around sysctl_devconf_inherit_init_net. 371a3bcf31 net: Fix data-races around sysctl_fb_tunnels_only_for_init_net. c3bda708e9 net: Fix a data-race around netdev_budget_usecs. 12a34d7f04 net: Fix a data-race around netdev_budget. 410c88314c net: Fix a data-race around sysctl_net_busy_read. 2c7dae6c45 net: Fix a data-race around sysctl_net_busy_poll. 8db070463e net: Fix a data-race around sysctl_tstamp_allow_data. ed48223f87 net: Fix data-races around sysctl_optmem_max. 27e8ade792 bpf: Folding omem_charge() into sk_storage_charge() 4d4e39245d ratelimit: Fix data-races in ___ratelimit(). e73009ebc1 net: Fix data-races around netdev_tstamp_prequeue. 3850060352 net: Fix data-races around netdev_max_backlog. b498a1b017 net: Fix data-races around weight_p and dev_weight_[rt]x_bias. fb442c72db net: Fix data-races around sysctl_[rw]mem_(max|default). 613fd02620 net: Fix data-races around sysctl_[rw]mem(_offset)?. e73a29554f tcp: tweak len/truesize ratio for coalesce candidates c08a104a8b netfilter: nf_tables: disallow binding to already bound chain 6301a73bd8 netfilter: nf_tables: disallow jump to implicit chain from set element 9882768759 netfilter: nf_tables: upfront validation of data via nft_data_init() 8790eecdea netfilter: bitwise: improve error goto labels 2267d38520 netfilter: nft_cmp: optimize comparison for 16-bytes 1d7d74a824 netfilter: nf_tables: consolidate rule verdict trace call cd962806c4 netfilter: nftables: remove redundant assignment of variable err 35519ce7ba netfilter: nft_tunnel: restrict it to netdev family 9a67c2c89c netfilter: nft_osf: restrict osf to ipv4, ipv6 and inet families c907dfe4ea netfilter: nf_tables: do not leave chain stats enabled on error ea358cfc8e netfilter: nft_payload: do not truncate csum_offset and csum_type 93a46d6c72 netfilter: nft_payload: report ERANGE for too long offset and length e0f8cf0192 bnxt_en: fix NQ resource accounting during vf creation on 57500 chips 624c305212 netfilter: ebtables: reject blobs that don't provide all entry points f82a6b85e0 net: ipvtap - add __init/__exit annotations to module init/exit funcs 7e7e88e8b5 bonding: 802.3ad: fix no transmission of LACPDUs 14ef913a95 net: moxa: get rid of asymmetry in DMA mapping/unmapping faa8bf8451 net: ipa: don't assume SMEM is page-aligned 29accb2d96 net/mlx5e: Properly disable vlan strip on non-UL reps 1bfdcde723 ice: xsk: prohibit usage of non-balanced queue id d29d7108e1 ice: xsk: Force rings to be sized to power of 2 50403ee6da nfc: pn533: Fix use-after-free bugs caused by pn532_cmd_timeout de3deadd11 rose: check NULL rose_loopback_neigh->loopback e9fe1283a8 mm/smaps: don't access young/dirty bit if pte unpresent c7c77185fa mm/huge_memory.c: use helper function migration_entry_to_page() 8be096f018 SUNRPC: RPC level errors should set task->tk_rpc_status 5e49ea0998 NFSv4.2 fix problems with __nfs42_ssc_open 23c6f25a60 NFS: Don't allocate nfs_fattr on the stack in __nfs42_ssc_open() 2761612bcd xfrm: policy: fix metadata dst->dev xmit null pointer dereference c5c4d4c980 af_key: Do not call xfrm_probe_algs in parallel 4379a10c1d xfrm: clone missing x->lastused in xfrm_do_migrate 1305d7d4f3 xfrm: fix refcount leak in __xfrm_policy_check() c30c0f7205 kernel/sched: Remove dl_boosted flag comment 70d560e2fb xfs: only bother with sync_filesystem during readonly remount 37837bc3ef xfs: return errors in xfs_fs_sync_fs 76a51e49da vfs: make sync_filesystem return errors from ->sync_fs 9255a42fe7 fs: remove __sync_filesystem 1b9b4139d7 xfs: reject crazy array sizes being fed to XFS_IOC_GETBMAP* 6a564bad3a xfs: prevent a WARN_ONCE() in xfs_ioc_attr_list() a5757df612 pinctrl: amd: Don't save/restore interrupt status and wake status bits 665433b5dd kernel/sys_ni: add compat entry for fadvise64_64 df1d445e7f parisc: Fix exception handler for fldw and fstw instructions e10bb2f2e9 audit: fix potential double free on error path from fsnotify_add_inode_mark 44cde61acc Merge 5.10.139 into android12-5.10-lts 7a3ca8147f Revert "ALSA: control: Use deferred fasync helper" 5597d5439f Merge 5.10.138 into android12-5.10-lts 1e247e4040 Revert "block: remove the request_queue to argument request based tracepoints" 33d6fea819 Revert "blktrace: Trace remapped requests correctly" eb5eb075d8 Revert "USB: HCD: Fix URB giveback issue in tasklet function" fbe6a13851 Merge 5.10.137 into android12-5.10-lts 665ee74607 Linux 5.10.139 37c7f25fe2 kbuild: dummy-tools: avoid tmpdir leak in dummy gcc fa3303d70b Linux 5.10.138 606fe84a41 tee: fix memory leak in tee_shm_register() 3527e3cbb8 bpf: Fix KASAN use-after-free Read in compute_effective_progs 4f7286422a qrtr: Convert qrtr_ports from IDR to XArray 1daa7629d2 PCI/ERR: Retain status from error notification a220ff3433 can: j1939: j1939_session_destroy(): fix memory leak of skbs 05b9b0a7a7 can: j1939: j1939_sk_queue_activate_next_locked(): replace WARN_ON_ONCE with netdev_warn_once() 184e73f12c tracing/probes: Have kprobes and uprobes use $COMM too 3debec96ca netfilter: nf_tables: fix audit memory leak in nf_tables_commit f3d0db3b43 netfilter: nftables: fix a warning message in nf_tables_commit_audit_collect() 059f47b3a4 MIPS: tlbex: Explicitly compare _PAGE_NO_EXEC against 0 4b20c61365 video: fbdev: i740fb: Check the argument of i740_calc_vclk() dac28dff90 powerpc/64: Init jump labels before parse_early_param() 52a408548a smb3: check xattr value length earlier 336936f72a f2fs: fix to do sanity check on segment type in build_sit_entries() 800ba89791 f2fs: fix to avoid use f2fs_bug_on() in f2fs_new_node_page() 857ccedcf5 ALSA: control: Use deferred fasync helper 658bc550a4 ALSA: timer: Use deferred fasync helper be094c417a ALSA: core: Add async signal helpers 6ed3e280c7 powerpc/32: Don't always pass -mcpu=powerpc to the compiler 63671b2bdf watchdog: export lockup_detector_reconfigure 399d245775 RISC-V: Add fast call path of crash_kexec() d881c98d0a riscv: mmap with PROT_WRITE but no PROT_READ is invalid 333bdb72be modules: Ensure natural alignment for .altinstructions and __bug_table sections 1e39037e44 mips: cavium-octeon: Fix missing of_node_put() in octeon2_usb_clocks_start 5e034e03f4 vfio: Clear the caps->buf to NULL after free 81939c4fbc tty: serial: Fix refcount leak bug in ucc_uart.c 58275db3c7 lib/list_debug.c: Detect uninitialized lists 8028888329 ext4: avoid resizing to a partial cluster size 285447b819 ext4: avoid remove directory when directory is corrupted 5d8325fd15 drivers:md:fix a potential use-after-free bug 534e96302a nvmet-tcp: fix lockdep complaint on nvmet_tcp_wq flush during queue teardown 6d7aabdba6 md: Notify sysfs sync_completed in md_reap_sync_thread() f43a72d4da dmaengine: sprd: Cleanup in .remove() after pm_runtime_get_sync() failed b30aa4ff11 selftests/kprobe: Do not test for GRP/ without event failures fa45327d8c csky/kprobe: reclaim insn_slot on kprobe unregistration 18f62a453b RDMA/rxe: Limit the number of calls to each tasklet 9a6178c225 um: add "noreboot" command line option for PANIC_TIMEOUT=-1 setups e4c9f16219 PCI/ACPI: Guard ARM64-specific mcfg_quirks 4be138bcd6 cxl: Fix a memory leak in an error handling path 84d94619c7 pinctrl: intel: Check against matching data instead of ACPI companion 9ac14f973c gadgetfs: ep_io - wait until IRQ finishes c29a4baaad scsi: lpfc: Prevent buffer overflow crashes in debugfs with malformed user input eb01065fd3 clk: qcom: clk-alpha-pll: fix clk_trion_pll_configure description 56a4bccab9 zram: do not lookup algorithm in backends table 09c90f89b2 uacce: Handle parent device removal or parent driver module rmmod 6b90ab9524 clk: qcom: ipq8074: dont disable gcc_sleep_clk_src eddb352a80 vboxguest: Do not use devm for irq 9a87f33f1d usb: dwc2: gadget: remove D+ pull-up while no vbus with usb-role-switch 9790a5a4f0 usb: renesas: Fix refcount leak bug cb5dd65e88 usb: host: ohci-ppc-of: Fix refcount leak bug d86c6447ee clk: ti: Stop using legacy clkctrl names for omap4 and 5 152c94c10b drm/meson: Fix overflow implicit truncation warnings da6b37983a irqchip/tegra: Fix overflow implicit truncation warnings 24304c6f9c usb: gadget: uvc: call uvc uvcg_warn on completed status instead of uvcg_info 6d7ac60098 usb: cdns3 fix use-after-free at workaround 2 0a0da5ef5b platform/chrome: cros_ec_proto: don't show MKBP version if unsupported e2ab7afe66 PCI: Add ACS quirk for Broadcom BCM5750x NICs a1e7908f78 drm/sun4i: dsi: Prevent underflow when computing packet sizes bd6165b802 netfilter: add helper function to set up the nfnetlink header and use it 06fde3cd0b netfilter: nftables: add helper function to set the base sequence number e2a49009ba audit: log nftables configuration change events once per table 3aa710e967 drm/meson: Fix refcount bugs in meson_vpu_has_available_connectors() 1bfdb1912c ASoC: SOF: intel: move sof_intel_dsp_desc() forward 823280a8fb locking/atomic: Make test_and_*_bit() ordered on failure 0bd35968bc gcc-plugins: Undefine LATENT_ENTROPY_PLUGIN when plugin disabled for a file 9112826f28 kbuild: fix the modules order between drivers and libs 0f516dcd14 igb: Add lock to avoid data race 02f3642d8e stmmac: intel: Add a missing clk_disable_unprepare() call in intel_eth_pci_remove() efae1735ff fec: Fix timer capture timing in `fec_ptp_enable_pps()` 668f38fb9a i40e: Fix to stop tx_timeout recovery if GLOBR fails bbd6723d75 regulator: pca9450: Remove restrictions for regulator-name b5ba5c3669 i2c: imx: Make sure to unregister adapter on remove() 19cb691faf ice: Ignore EEXIST when setting promisc mode 7983e1e44c net: dsa: sja1105: fix buffer overflow in sja1105_setup_devlink_regions() 83411c9f05 net: genl: fix error path memory leak in policy dumping af1748ee51 net: dsa: felix: fix ethtool 256-511 and 512-1023 TX packet counters 9900af65f2 net: dsa: microchip: ksz9477: fix fdb_dump last invalid entry 7d51385ae0 net: moxa: pass pdev instead of ndev to DMA functions 92dc64e8f5 net: dsa: mv88e6060: prevent crash on an unused port aa16c8c4e8 spi: meson-spicc: add local pow2 clock ops to preserve rate between messages a868f771ee powerpc/pci: Fix get_phb_number() locking 3561f4d12f netfilter: nf_tables: check NFT_SET_CONCAT flag if field_count is specified 01b0cae6b7 netfilter: nf_tables: validate NFTA_SET_ELEM_OBJREF based on NFT_SET_OBJECT flag 8d2fe4b9ed netfilter: nf_tables: really skip inactive sets when allocating name 330f0a552b ASoC: tas2770: Fix handling of mute/unmute 353cc4cb97 ASoC: tas2770: Drop conflicting set_bias_level power setting dffe1c4780 ASoC: tas2770: Allow mono streams fc57e3fde2 ASoC: tas2770: Set correct FSYNC polarity 4fe80492d5 iavf: Fix adminq error handling 63684e467b nios2: add force_successful_syscall_return() 600ff4b13b nios2: restarts apply only to the first sigframe we build... f20bc59ccf nios2: fix syscall restart checks 8d0118a027 nios2: traced syscall does need to check the syscall number 1d2c89dc48 nios2: don't leave NULLs in sys_call_table[] d29cdf865a nios2: page fault et.al. are *not* restartable syscalls... 76be981882 dpaa2-eth: trace the allocated address instead of page struct 787511c768 perf probe: Fix an error handling path in 'parse_perf_probe_command()' 2c746ec91d geneve: fix TOS inheriting for ipv4 a0ae122e9a atm: idt77252: fix use-after-free bugs caused by tst_timer 291cba960b xen/xenbus: fix return type in xenbus_file_read() 3c555a0599 nfp: ethtool: fix the display error of `ethtool -m DEVNAME` 76f3b97e56 NTB: ntb_tool: uninitialized heap data in tool_fn_write() 7ef9f0efbe tools build: Switch to new openssl API for test-libcrypto 7ef0645ebe kbuild: dummy-tools: avoid tmpdir leak in dummy gcc aee18421bd ceph: don't leak snap_rwsem in handle_cap_grant eea0d84a4f tools/vm/slabinfo: use alphabetic order when two values are equal 97cea2cb7c ceph: use correct index when encoding client supported features 7a327285a7 dt-bindings: clock: qcom,gcc-msm8996: add more GCC clock sources 87c4b359e3 dt-bindings: arm: qcom: fix MSM8916 MTP compatibles 55fdefcb52 vsock: Set socket state back to SS_UNCONNECTED in vsock_connect_timeout() 38ddccbda5 vsock: Fix memory leak in vsock_connect() 549822e0dc plip: avoid rcu debug splat 0c4542cb6a ipv6: do not use RT_TOS for IPv6 flowlabel 38b83883ce geneve: do not use RT_TOS for IPv6 flowlabel b0c3eec4ac ACPI: property: Return type of acpi_add_nondev_subnodes() should be bool cc0bfd933c pinctrl: qcom: sm8250: Fix PDC map d35d9bba29 pinctrl: sunxi: Add I/O bias setting for H6 R-PIO e8f5699a82 pinctrl: qcom: msm8916: Allow CAMSS GP clocks to be muxed 78d0510389 pinctrl: nomadik: Fix refcount leak in nmk_pinctrl_dt_subnode_to_map ab2b55bb25 net: bgmac: Fix a BUG triggered by wrong bytes_compl 0e28678a77 devlink: Fix use-after-free after a failed reload faafa2a87f virtio_net: fix memory leak inside XPD_TX with mergeable fd70ebf299 SUNRPC: Reinitialise the backchannel request buffers before reuse 59d2e8fa41 sunrpc: fix expiry of auth creds df60c534d4 net: atlantic: fix aq_vec index out of range error cc25abcec8 can: mcp251x: Fix race condition on receive interrupt b9d9cf88c8 bpf: Check the validity of max_rdwr_access for sock local storage map iterator f7d844df5e bpf: Acquire map uref in .init_seq_private for sock{map,hash} iterator d7ad7e65aa bpf: Acquire map uref in .init_seq_private for sock local storage map iterator bda6fe3ea8 bpf: Acquire map uref in .init_seq_private for hash map iterator 30d7198da8 bpf: Acquire map uref in .init_seq_private for array map iterator 76ffd20424 NFSv4/pnfs: Fix a use-after-free bug in open f2bd1cc1fe NFSv4.1: RECLAIM_COMPLETE must handle EACCES cfde64bd31 NFSv4: Fix races in the legacy idmapper upcall 060c111373 NFSv4.1: Handle NFS4ERR_DELAY replies to OP_SEQUENCE correctly a351a73d90 NFSv4.1: Don't decrease the value of seq_nr_highest_sent a408f135c4 Documentation: ACPI: EINJ: Fix obsolete example 8aab429558 apparmor: Fix memleak in aa_simple_write_to_buffer() 2ceeb3296e apparmor: fix reference count leak in aa_pivotroot() 2672f3eb7a apparmor: fix overlapping attachment computation 1ac89741a2 apparmor: fix setting unconfined mode on a loaded profile 4188f91c82 apparmor: fix aa_label_asxprint return check e0ca0156a7 apparmor: Fix failed mount permission check error message 08f8128bc9 apparmor: fix absroot causing audited secids to begin with = bca03f0bbc apparmor: fix quiet_denied for file rules 2b74344135 can: ems_usb: fix clang's -Wunaligned-access warning 7f06c78211 ALSA: usb-audio: More comprehensive mixer map for ASUS ROG Zenith II 5d3b02b80d tracing: Have filter accept "common_cpu" to be consistent 6359850f9d btrfs: fix lost error handling when looking up extended ref on log replay 79895cefa4 mmc: meson-gx: Fix an error handling path in meson_mmc_probe() 13a497c3c5 mmc: pxamci: Fix an error handling path in pxamci_probe() 4a211dd485 mmc: pxamci: Fix another error handling path in pxamci_probe() a785d84178 ata: libata-eh: Add missing command name fb1857c2e4 rds: add missing barrier to release_refill 6876b4804b x86/mm: Use proper mask when setting PUD mapping b68e40b52f ALSA: hda/realtek: Add quirk for Clevo NS50PU, NS70PU e14e2fec35 ALSA: info: Fix llseek return value when using callback a634d58881 Merge branch 'android12-5.10' into branch 'android12-5.10-lts' 74ded189e5 Linux 5.10.137 fb4e220e1b btrfs: raid56: don't trust any cached sector in __raid56_parity_recover() 1e1a039f44 btrfs: only write the sectors in the vertical stripe which has data stripes 8f317cd888 sched/fair: Fix fault in reweight_entity aa318d35be net_sched: cls_route: disallow handle of 0 5a2a00b604 net/9p: Initialize the iounit field during fid creation 578c349570 tee: add overflow check in register_shm_helper() 98b20e1612 kvm: x86/pmu: Fix the compare function used by the pmu event filter 705dfc4575 mtd: rawnand: arasan: Prevent an unsupported configuration c898e917d8 Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm regression e81046da1d Revert "net: usb: ax88179_178a needs FLAG_SEND_ZLP" a60996dc02 drm/vc4: change vc4_dma_range_matches from a global to static 3422e24af9 drm/bridge: tc358767: Fix (e)DP bridge endpoint parsing in dedicated function 2223b35c57 Revert "mwifiex: fix sleep in atomic context bugs caused by dev_coredumpv" 8338305317 tcp: fix over estimation in sk_forced_mem_schedule() c35c01a7cb mac80211: fix a memory leak where sta_info is not freed ac7de8c2ba KVM: x86: Avoid theoretical NULL pointer dereference in kvm_irq_delivery_to_apic_fast() 4c85e207c1 KVM: x86: Check lapic_in_kernel() before attempting to set a SynIC irq a4c94205ba KVM: Add infrastructure and macro to mark VM as bugged 7018f03d97 net_sched: cls_route: remove from list when handle is 0 49dba30638 dm raid: fix address sanitizer warning in raid_status c2d47bef93 dm raid: fix address sanitizer warning in raid_resume d0b495aa26 ext4: correct the misjudgment in ext4_iget_extra_inode 603fb7bd74 ext4: correct max_inline_xattr_value_size computing e8c747496f ext4: fix extent status tree race in writeback error recovery path ac8cc06114 ext4: update s_overhead_clusters in the superblock during an on-line resize bb8592efcf ext4: fix use-after-free in ext4_xattr_set_entry 69d1a36eb4 ext4: make sure ext4_append() always allocates new block e1682c7171 ext4: fix warning in ext4_iomap_begin as race between bmap and write 2da44a2927 ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h 1571c46130 ext4: check if directory block is within i_size e99da0f921 tracing: Use a struct alignof to determine trace event field alignment 35508b60b5 tpm: eventlog: Fix section mismatch for DEBUG_SECTION_MISMATCH 0e48eaf75d KEYS: asymmetric: enforce SM2 signature use pkey algo 135d9e0710 xen-blkfront: Apply 'feature_persistent' parameter when connect d4fb08e5a4 xen-blkback: Apply 'feature_persistent' parameter when connect 9e84088452 xen-blkback: fix persistent grants negotiation b788508a09 KVM: x86/pmu: Ignore pmu->global_ctrl check if vPMU doesn't support global_ctrl 6b4addec2f KVM: VMX: Mark all PERF_GLOBAL_(OVF)_CTRL bits reserved if there's no vPMU 46ec3d8e90 KVM: x86/pmu: Introduce the ctrl_mask value for fixed counter 2ba1feb143 KVM: x86/pmu: Use different raw event masks for AMD and Intel 4bbfc055d3 KVM: x86/pmu: Use binary search to check filtered events 441726394e KVM: x86/pmu: preserve IA32_PERF_CAPABILITIES across CPUID refresh a7d0b21c6b KVM: nVMX: Inject #UD if VMXON is attempted with incompatible CR0/CR4 c72a9b1d0d KVM: x86: Move vendor CR4 validity check to dedicated kvm_x86_ops hook 2f04a04d06 KVM: SVM: Drop VMXE check from svm_set_cr4() da7f731f2e KVM: VMX: Drop explicit 'nested' check from vmx_set_cr4() 8b8b376903 KVM: VMX: Drop guest CPUID check for VMXE in vmx_set_cr4() 5f3c8352cc ACPI: CPPC: Do not prevent CPPC from working in the future 40d28ae576 btrfs: reset block group chunk force if we have to wait e2f1507303 btrfs: reject log replay if there is unsupported RO compat flag b58294ce1a um: Allow PM with suspend-to-idle c6cf21d8d5 timekeeping: contribute wall clock to rng on time change 5e2cf70515 dm thin: fix use-after-free crash in dm_sm_register_threshold_callback 539c20ad26 kexec, KEYS, s390: Make use of built-in and secondary keyring for signature verification 782e73acdb dm writecache: set a default MAX_WRITEBACK_JOBS e41b3b8831 serial: 8250: Fold EndRun device support into OxSemi Tornado code 194dc559e6 serial: 8250_pci: Replace dev_*() by pci_*() macros 297e2fd08a serial: 8250_pci: Refactor the loop in pci_ite887x_init() 3110e5a49b serial: 8250: Correct the clock for OxSemi PCIe devices 3e9baedb32 serial: 8250: Dissociate 4MHz Titan ports from Oxford ports 85d6306a87 PCI/AER: Iterate over error counters instead of error strings d83d886e69 PCI/ERR: Recover from RCEC AER errors bb6990fd37 PCI/ERR: Add pci_walk_bridge() to pcie_do_recovery() 7730ba6151 PCI/ERR: Avoid negated conditional for clarity 078d79fad5 PCI/ERR: Use "bridge" for clarity in pcie_do_recovery() 2e3458b995 PCI/ERR: Simplify by computing pci_pcie_type() once f236fa3850 PCI/ERR: Simplify by using pci_upstream_bridge() de4534ac28 PCI/ERR: Rename reset_link() to reset_subordinates() 78d431e8a5 PCI/ERR: Bind RCEC devices to the Root Port driver dce8d7427c PCI/AER: Write AER Capability only when we control it 5659efdadf iommu/vt-d: avoid invalid memory access via node_online(NUMA_NO_NODE) e7ccee2f09 KVM: x86: Signal #GP, not -EPERM, on bad WRMSR(MCi_CTL/STATUS) f5385a590d KVM: set_msr_mce: Permit guests to ignore single-bit ECC errors 6a84dae3a7 intel_th: pci: Add Raptor Lake-S CPU support 581f7eb8ae intel_th: pci: Add Raptor Lake-S PCH support 36f5ddde67 intel_th: pci: Add Meteor Lake-P support 08272646cd firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails bc945ca496 usbnet: smsc95xx: Avoid link settings race on interrupt reception e9733561e9 usbnet: smsc95xx: Don't clear read-only PHY interrupt 04c9d23ac3 mtd: rawnand: arasan: Fix clock rate in NV-DDR dc0e4a10b4 mtd: rawnand: arasan: Support NV-DDR interface 87d1266b4c mtd: rawnand: arasan: Fix a macro parameter d4f7bcce90 mtd: rawnand: Add NV-DDR timings 72fae7e7f7 mtd: rawnand: arasan: Check the proposed data interface is supported c91e5215a4 mtd: rawnand: Add a helper to clarify the interface configuration ae1e2bc7bf drm/vc4: drv: Adopt the dma configuration from the HVS or V3D component fe695a2b46 HID: hid-input: add Surface Go battery quirk 434c4aad53 HID: Ignore battery for Elan touchscreen on HP Spectre X360 15-df0xxx 2d05cf1069 drm/mediatek: Keep dsi as LP00 before dcs cmds transfer 3117287578 drm/mediatek: Allow commands to be sent during video mode a3a85c045a drm/i915/dg1: Update DMC_DEBUG3 register dd02510fb4 spmi: trace: fix stack-out-of-bound access in SPMI tracing functions bc8c5b3b3e __follow_mount_rcu(): verify that mount_lock remains unchanged bda7046d4d Input: gscps2 - check return value of ioremap() in gscps2_probe() 541840859a posix-cpu-timers: Cleanup CPU timers before freeing them during exec ce19182b43 x86/olpc: fix 'logical not is only applied to the left hand side' 43e059d016 ftrace/x86: Add back ftrace_expected assignment fd96b61389 x86/bugs: Enable STIBP for IBPB mitigated RETBleed 1118020b3b scsi: qla2xxx: Fix losing FCP-2 targets during port perturbation tests 912408ba0b scsi: qla2xxx: Fix losing FCP-2 targets on long port disable with I/Os 82cb0ebe5b scsi: qla2xxx: Fix erroneous mailbox timeout after PCI error injection 7941ca578c scsi: qla2xxx: Turn off multi-queue for 8G adapters 2ffe5285ea scsi: qla2xxx: Fix discovery issues in FC-AL topology b8aad5eba7 scsi: zfcp: Fix missing auto port scan and thus missing target ports 5e0da18956 video: fbdev: s3fb: Check the size of screen before memset_io() 09e733d6ac video: fbdev: arkfb: Check the size of screen before memset_io() bd8269e576 video: fbdev: vt8623fb: Check the size of screen before memset_io() a9943942a5 x86/entry: Build thunk_$(BITS) only if CONFIG_PREEMPTION=y e6c228b950 sched: Fix the check of nr_running at queue wakelist bd1ebcbbf0 tools/thermal: Fix possible path truncations 0288fa799e video: fbdev: arkfb: Fix a divide-by-zero bug in ark_set_pixclock() 94398c1fec x86/numa: Use cpumask_available instead of hardcoded NULL check 336626564b sched, cpuset: Fix dl_cpu_busy() panic due to empty cs->cpus_allowed 0039189a3b sched/deadline: Merge dl_task_can_attach() and dl_cpu_busy() e695256d46 scripts/faddr2line: Fix vmlinux detection on arm64 232f4aca40 genelf: Use HAVE_LIBCRYPTO_SUPPORT, not the never defined HAVE_LIBCRYPTO cadeb5186e powerpc/pci: Fix PHB numbering when using opal-phbid 2a49b025c3 kprobes: Forbid probing on trampoline and BPF code areas 4296089f61 perf symbol: Fail to read phdr workaround 00dc7cbbb5 powerpc/cell/axon_msi: Fix refcount leak in setup_msi_msg_address 6d1e53f7f1 powerpc/xive: Fix refcount leak in xive_get_max_prio 85aff6a9b7 powerpc/spufs: Fix refcount leak in spufs_init_isolated_loader 50e7896c8e f2fs: fix to remove F2FS_COMPR_FL and tag F2FS_NOCOMP_FL at the same time ec769406d0 f2fs: write checkpoint during FG_GC d031105739 f2fs: don't set GC_FAILURE_PIN for background GC 47a8fe1b15 powerpc/pci: Prefer PCI domain assignment via DT 'linux,pci-domain' and alias 7ac58a83d8 powerpc/32: Do not allow selection of e5500 or e6500 CPUs on PPC32 2d2b6adb22 ASoC: mchp-spdifrx: disable end of block interrupt on failures ca326aff6b video: fbdev: sis: fix typos in SiS_GetModeID() da276dc288 video: fbdev: amba-clcd: Fix refcount leak bugs 345208581c watchdog: armada_37xx_wdt: check the return value of devm_ioremap() in armada_37xx_wdt_probe() d3e6460619 ASoC: audio-graph-card: Add of_node_put() in fail path 92644d505b fuse: Remove the control interface for virtio-fs 60e494b4d5 ASoC: qcom: q6dsp: Fix an off-by-one in q6adm_alloc_copp() 5682b4f84a ASoC: fsl_easrc: use snd_pcm_format_t type for sample_format 9c2ad32ed9 s390/zcore: fix race when reading from hardware system area ae921d176b s390/dump: fix old lowcore virtual vs physical address confusion b002a71d45 perf tools: Fix dso_id inode generation comparison 2ada6b4a80 iommu/arm-smmu: qcom_iommu: Add of_node_put() when breaking out of loop afdbadbf18 mfd: max77620: Fix refcount leak in max77620_initialise_fps 52ae9c1599 mfd: t7l66xb: Drop platform disable callback 5a0e3350c2 remoteproc: sysmon: Wait for SSCTL service to come up 3487aa558a lib/smp_processor_id: fix imbalanced instrumentation_end() call 483ad8a16f kfifo: fix kfifo_to_user() return type 9715809b9e rpmsg: qcom_smd: Fix refcount leak in qcom_smd_parse_edge 0ce20194b4 iommu/exynos: Handle failed IOMMU device registration properly 8fd063a608 tty: n_gsm: fix missing corner cases in gsmld_poll() 01c8094bed tty: n_gsm: fix DM command 6737d4f5f5 tty: n_gsm: fix wrong T1 retry count handling b16d653bc7 vfio/ccw: Do not change FSM state in subchannel event db574d3bb6 vfio/mdev: Make to_mdev_device() into a static inline a2fbf4acd2 vfio: Split creation of a vfio_device into init and register ops f54fa910e6 vfio: Simplify the lifetime logic for vfio_device 0abdb80e81 vfio: Remove extra put/gets around vfio_device->group cb83b12320 remoteproc: qcom: wcnss: Fix handling of IRQs 2f735069cd ASoC: qcom: Fix missing of_node_put() in asoc_qcom_lpass_cpu_platform_probe() 273d412177 tty: n_gsm: fix race condition in gsmld_write() 2466486cae tty: n_gsm: fix packet re-transmission without open control channel 34c9fe392d tty: n_gsm: fix non flow control frames during mux flow off 006e9d5a98 tty: n_gsm: fix wrong queuing behavior in gsm_dlci_data_output() c45b5d24fe tty: n_gsm: fix user open not possible at responder until initiator open 9e38020f17 tty: n_gsm: Delete gsmtty open SABM frame when config requester d94a552183 ASoC: samsung: change gpiod_speaker_power and rx1950_audio from global to static variables 875b2bf469 powerpc/perf: Optimize clearing the pending PMI and remove WARN_ON for PMI check in power_pmu_disable ba889da9a0 ASoC: samsung: h1940_uda1380: include proepr GPIO consumer header 4046f3ef3b profiling: fix shift too large makes kernel panic 3bf64b9cc6 selftests/livepatch: better synchronize test_klp_callbacks_busy 75358732af remoteproc: k3-r5: Fix refcount leak in k3_r5_cluster_of_init 2aa8737d49 rpmsg: mtk_rpmsg: Fix circular locking dependency 1d5fc40382 ASoC: codecs: wcd9335: move gains from SX_TLV to S8_TLV 4181b21418 ASoC: codecs: msm8916-wcd-digital: move gains from SX_TLV to S8_TLV 4b171ac88c serial: 8250_dw: Store LSR into lsr_saved_flags in dw8250_tx_wait_empty() d98dd16d3d serial: 8250: Export ICR access helpers for internal use 403d469719 ASoC: mediatek: mt8173-rt5650: Fix refcount leak in mt8173_rt5650_dev_probe 132b2757c5 ASoC: codecs: da7210: add check for i2c_add_driver a0381a9f3e ASoC: mt6797-mt6351: Fix refcount leak in mt6797_mt6351_dev_probe aa1214ece3 ASoC: mediatek: mt8173: Fix refcount leak in mt8173_rt5650_rt5676_dev_probe ec0c272b18 ASoC: samsung: Fix error handling in aries_audio_probe bae95c5aee ASoC: cros_ec_codec: Fix refcount leak in cros_ec_codec_platform_probe e2a4e46f52 opp: Fix error check in dev_pm_opp_attach_genpd() 3b97370322 usb: cdns3: Don't use priv_dev uninitialized in cdns3_gadget_ep_enable() f7161d0da9 jbd2: fix assertion 'jh->b_frozen_data == NULL' failure when journal aborted a6d7f22473 ext4: recover csum seed of tmp_inode after migrating to extents 914bf4aa2d jbd2: fix outstanding credits assert in jbd2_journal_commit_transaction() 706960d328 nvme: use command_id instead of req->tag in trace_nvme_complete_rq() 7a4b46784a null_blk: fix ida error handling in null_add_dev() 3ef491b26c RDMA/rxe: Fix error unwind in rxe_create_qp() 53da1f0fa0 RDMA/mlx5: Add missing check for return value in get namespace flow c0ba87f3e7 selftests: kvm: set rax before vmcall 4ffa6cecb5 mm/mmap.c: fix missing call to vm_unacct_memory in mmap_region de95b52d9a RDMA/srpt: Fix a use-after-free d14a44cf29 RDMA/srpt: Introduce a reference count in struct srpt_device 204a8486d7 RDMA/srpt: Duplicate port name members 5ba56d9bd0 platform/olpc: Fix uninitialized data in debugfs write 7af83bb516 usb: cdns3: change place of 'priv_ep' assignment in cdns3_gadget_ep_dequeue(), cdns3_gadget_ep_enable() a916e80360 USB: serial: fix tty-port initialized comments b1124a2f47 PCI: tegra194: Fix link up retry sequence 88a694d9c8 PCI: tegra194: Fix Root Port interrupt handling e2d132ca7f HID: alps: Declare U1_UNICORN_LEGACY support 74e57439e2 mmc: cavium-thunderx: Add of_node_put() when breaking out of loop 3bed7b9811 mmc: cavium-octeon: Add of_node_put() when breaking out of loop 66c8e816f2 HID: mcp2221: prevent a buffer overflow in mcp_smbus_write() 26975d8ea9 gpio: gpiolib-of: Fix refcount bugs in of_mm_gpiochip_add_data() a85c7dd1ed RDMA/hfi1: fix potential memory leak in setup_base_ctxt() 9ade92ddaf RDMA/siw: Fix duplicated reported IW_CM_EVENT_CONNECT_REPLY event 0ecc91cf96 RDMA/hns: Fix incorrect clearing of interrupt status register 79ce50ddda RDMA/qedr: Fix potential memory leak in __qedr_alloc_mr() aaa1a81506 RDMA/qedr: Improve error logs for rdma_alloc_tid error return 84f83a2619 RDMA/rtrs-srv: Fix modinfo output for stringify 50a249ad1d RDMA/rtrs: Avoid Wtautological-constant-out-of-range-compare 2b3dcfbece RDMA/rtrs: Define MIN_CHUNK_SIZE 993cd16211 um: random: Don't initialise hwrng struct with zero a6a7f80e62 interconnect: imx: fix max_node_id 5bcc37dc24 eeprom: idt_89hpesx: uninitialized data in idt_dbgfs_csr_write() 4ab5662cc3 usb: dwc3: qcom: fix missing optional irq warnings d376ca6716 usb: dwc3: core: Do not perform GCTL_CORE_SOFTRESET during bootup 251572a26d usb: dwc3: core: Deprecate GCTL.CORESOFTRESET e6db5780c2 usb: aspeed-vhub: Fix refcount leak bug in ast_vhub_init_desc() c818fa991c usb: gadget: udc: amd5536 depends on HAS_DMA d6d344eeef xtensa: iss: fix handling error cases in iss_net_configure() fb4c1555f9 xtensa: iss/network: provide release() callback 2fe0b06c16 scsi: smartpqi: Fix DMA direction for RAID requests 7542130af1 PCI: qcom: Set up rev 2.1.0 PARF_PHY before enabling clocks ee70aa214a PCI/portdrv: Don't disable AER reporting in get_port_device_capability() 9d216035d1 KVM: s390: pv: leak the topmost page table when destroy fails 59fd7c0b41 mmc: block: Add single read for 4k sector cards 2985acdaf2 mmc: sdhci-of-at91: fix set_uhs_signaling rewriting of MC1R 9260a154b3 memstick/ms_block: Fix a memory leak ae2369ac42 memstick/ms_block: Fix some incorrect memory allocation b305475df7 mmc: sdhci-of-esdhc: Fix refcount leak in esdhc_signal_voltage_switch 028c8632a2 staging: rtl8192u: Fix sleep in atomic context bug in dm_fsync_timer_callback 6ae2881c1d intel_th: msu: Fix vmalloced buffers 81222cfda6 intel_th: msu-sink: Potential dereference of null pointer a8f3b78b1f intel_th: Fix a resource leak in an error handling path ab3b82435f PCI: endpoint: Don't stop controller when unbinding endpoint function b9b4992f89 dmaengine: sf-pdma: Add multithread support for a DMA channel 37e1d474a3 dmaengine: sf-pdma: apply proper spinlock flags in sf_pdma_prep_dma_memcpy() 38715a0ccb KVM: arm64: Don't return from void function fbd7b564f9 soundwire: bus_type: fix remove and shutdown support ed457b0029 PCI: dwc: Always enable CDM check if "snps,enable-cdm-check" exists e7599a5974 PCI: dwc: Deallocate EPC memory on dw_pcie_ep_init() errors 80d9f6541e PCI: dwc: Add unroll iATU space support to dw_pcie_disable_atu() 2293b23d27 clk: qcom: camcc-sdm845: Fix topology around titan_top power domain b28ebe7d2f clk: qcom: ipq8074: set BRANCH_HALT_DELAY flag for UBI clocks b83af7b4ec clk: qcom: ipq8074: fix NSS port frequency tables 58023f5291 clk: qcom: ipq8074: SW workaround for UBI32 PLL lock e2330494f0 clk: qcom: ipq8074: fix NSS core PLL-s b840c2926d usb: host: xhci: use snprintf() in xhci_decode_trb() 42f1827096 clk: qcom: clk-krait: unlock spin after mux completion a93f33aeef driver core: fix potential deadlock in __driver_attach 2593f971f0 misc: rtsx: Fix an error handling path in rtsx_pci_probe() 267c5f17a0 dmaengine: dw-edma: Fix eDMA Rd/Wr-channels and DMA-direction semantics 956b79c206 mwifiex: fix sleep in atomic context bugs caused by dev_coredumpv 803526555b mwifiex: Ignore BTCOEX events from the 88W8897 firmware dceedbb5ab KVM: Don't set Accessed/Dirty bits for ZERO_PAGE 02d203f488 clk: mediatek: reset: Fix written reset bit offset 4f51a09f3d iio: accel: bma400: Reordering of header files ab831a12c8 platform/chrome: cros_ec: Always expose last resume result 366d0123c3 iio: accel: bma400: Fix the scale min and max macro values edfa0851d8 netfilter: xtables: Bring SPDX identifier back 9feb3ecd07 usb: xhci: tegra: Fix error check bb5e59f00f usb: gadget: tegra-xudc: Fix error check in tegra_xudc_powerdomain_init() d35903e965 usb: ohci-nxp: Fix refcount leak in ohci_hcd_nxp_probe 585d22a562 usb: host: Fix refcount leak in ehci_hcd_ppc_of_probe 474f12deaa fpga: altera-pr-ip: fix unsigned comparison with less than zero 175428c86f mtd: st_spi_fsm: Add a clk_disable_unprepare() in .probe()'s error path 55d0f7da66 mtd: partitions: Fix refcount leak in parse_redboot_of b4e150d295 mtd: sm_ftl: Fix deadlock caused by cancel_work_sync in sm_release ebda3d6b00 HID: cp2112: prevent a buffer overflow in cp2112_xfer() cdf92a0aee PCI: tegra194: Fix PM error handling in tegra_pcie_config_ep() b0e82f95fd mtd: rawnand: meson: Fix a potential double free issue 941ef6997f mtd: maps: Fix refcount leak in ap_flash_init 52ae2b14f7 mtd: maps: Fix refcount leak in of_flash_probe_versatile 6471c83894 clk: renesas: r9a06g032: Fix UART clkgrp bitsel 38c9cc68e3 wireguard: allowedips: don't corrupt stack when detecting overflow 17541a4aab wireguard: ratelimiter: use hrtimer in selftest aa8f559336 dccp: put dccp_qpolicy_full() and dccp_qpolicy_push() in the same lock 5b69f34dac net: ionic: fix error check for vlan flags in ionic_set_nic_features() 9a070a4417 net: rose: fix netdev reference changes 397e52dec1 netdevsim: Avoid allocation warnings triggered from user space 692751f260 iavf: Fix max_rate limiting b0d67ef5b4 net: allow unbound socket for packets in VRF when tcp_l3mdev_accept set 1d9c81833d tcp: Fix data-races around sysctl_tcp_l3mdev_accept. 0de9b3f81e ipv6: add READ_ONCE(sk->sk_bound_dev_if) in INET6_MATCH() b7325b27d8 tcp: sk->sk_bound_dev_if once in inet_request_bound_dev_if() f7884d9500 inet: add READ_ONCE(sk->sk_bound_dev_if) in INET_MATCH() c206177ca8 crypto: hisilicon/sec - fix auth key size error 9524edb1a7 crypto: inside-secure - Add missing MODULE_DEVICE_TABLE for of cb62775079 crypto: hisilicon/hpre - don't use GFP_KERNEL to alloc mem during softirq e6cbd15950 net/mlx5e: Fix the value of MLX5E_MAX_RQ_NUM_MTTS 1f7ffdea19 net/mlx5e: Remove WARN_ON when trying to offload an unsupported TLS cipher/version 420cf3b781 media: cedrus: hevc: Add check for invalid timestamp 97e5d3e46a wifi: libertas: Fix possible refcount leak in if_usb_probe() 38d71acc15 wifi: iwlwifi: mvm: fix double list_add at iwl_mvm_mac_wake_tx_queue 6c5fee83bd wifi: wil6210: debugfs: fix uninitialized variable use in `wil_write_file_wmi()` c040a02e4c i2c: mux-gpmux: Add of_node_put() when breaking out of loop 353d55ff1b i2c: cadence: Support PEC for SMBus block read 0c5dbac1ce Bluetooth: hci_intel: Add check for platform_driver_register a7a7488cb1 can: pch_can: pch_can_error(): initialize errc before using it 4c036be757 can: error: specify the values of data[5..7] of CAN error frames f0ef21b739 can: usb_8dev: do not report txerr and rxerr during bus-off ca1a2c5388 can: kvaser_usb_leaf: do not report txerr and rxerr during bus-off 9e6ceba6be can: kvaser_usb_hydra: do not report txerr and rxerr during bus-off cddef4bbeb can: sun4i_can: do not report txerr and rxerr during bus-off 22e382d47d can: hi311x: do not report txerr and rxerr during bus-off 06e355b46c can: sja1000: do not report txerr and rxerr during bus-off 6ec509679b can: rcar_can: do not report txerr and rxerr during bus-off 5d85a89875 can: pch_can: do not report txerr and rxerr during bus-off d2b9e664bb selftests/bpf: fix a test for snprintf() overflow a06c98c47e wifi: p54: add missing parentheses in p54_flush() 56924fc19d wifi: p54: Fix an error handling path in p54spi_probe() 05ceda14ef wifi: wil6210: debugfs: fix info leak in wil_write_file_wmi() 36ba389960 fs: check FMODE_LSEEK to control internal pipe splicing 7430e58764 bpf: Fix subprog names in stack traces. 990ca39e78 selftests: timers: clocksource-switch: fix passing errors from child ee3cc4c761 selftests: timers: valid-adjtimex: build fix for newer toolchains f29cf37698 libbpf: Fix the name of a reused map 799cfed1b1 tcp: make retransmitted SKB fit into the send window 5713b0be6d drm/exynos/exynos7_drm_decon: free resources when clk_set_parent() failed. 9aa4ad5cca mediatek: mt76: mac80211: Fix missing of_node_put() in mt76_led_init() 3ad958bc48 mt76: mt76x02u: fix possible memory leak in __mt76x02u_mcu_send_msg b1812f6500 media: platform: mtk-mdp: Fix mdp_ipi_comm structure alignment 1008c6d98b crypto: hisilicon - Kunpeng916 crypto driver don't sleep when in softirq 16e18a8ac7 crypto: hisilicon/sec - don't sleep when in softirq 1f697d7952 crypto: hisilicon/sec - fixes some coding style bf386c955f drm/msm/mdp5: Fix global state lock backoff e74f3097a9 net: hinic: avoid kernel hung in hinic_get_stats64() e286a882f2 net: hinic: fix bug that ethtool get wrong stats 8369a39b52 hinic: Use the bitmap API when applicable 26a10aef28 lib: bitmap: provide devm_bitmap_alloc() and devm_bitmap_zalloc() 1238da5f32 lib: bitmap: order includes alphabetically 7f29d75693 drm: bridge: sii8620: fix possible off-by-one 8bb0be3186 drm/mediatek: dpi: Only enable dpi after the bridge is enabled c47d69ed56 drm/mediatek: dpi: Remove output format of YUV fc85cb33f6 drm/rockchip: Fix an error handling path rockchip_dp_probe() 9f416e32ed drm/rockchip: vop: Don't crash for invalid duplicate_state() e2d2dcab19 selftests/xsk: Destroy BPF resources only when ctx refcount drops to 0 64b1e3f904 crypto: arm64/gcm - Select AEAD for GHASH_ARM64_CE 2e306d74ad drm/vc4: hdmi: Correct HDMI timing registers for interlaced modes 36f797a10f drm/vc4: hdmi: Fix timings for interlaced modes 717325e814 drm/vc4: hdmi: Limit the BCM2711 to the max without scrambling c015d12317 drm/vc4: hdmi: Don't access the connector state in reset if kmalloc fails ba8ffdb450 drm/vc4: hdmi: Avoid full hdmi audio fifo writes b161b27067 drm/vc4: hdmi: Remove firmware logic for MAI threshold setting cefc8e7e0e drm/vc4: dsi: Add correct stop condition to vc4_dsi_encoder_disable iteration acfca24ec0 drm/vc4: dsi: Fix dsi0 interrupt support 97c2fa3a7b drm/vc4: dsi: Register dsi0 as the correct vc4 encoder type 6cc1edddcf drm/vc4: dsi: Introduce a variant structure 79374da862 drm/vc4: dsi: Use snprintf for the PHY clocks instead of an array 1f98187a7c drm/vc4: drv: Remove the DSI pointer in vc4_drv ed2f42bd80 drm/vc4: dsi: Correct pixel order for DSI0 ddf6af3b0b drm/vc4: dsi: Correct DSI divider calculations f517da5234 drm/vc4: plane: Fix margin calculations for the right/bottom edges 5aec7cb08b drm/vc4: plane: Remove subpixel positioning check 611f86965d media: tw686x: Fix memory leak in tw686x_video_init 7f7336ce35 media: v4l2-mem2mem: prevent pollerr when last_buffer_dequeued is set bb480bffc1 media: hdpvr: fix error value returns in hdpvr_read f57699a9b6 drm/mcde: Fix refcount leak in mcde_dsi_bind 6a43236ebc drm: bridge: adv7511: Add check for mipi_dsi_driver_register 87af9b0b45 crypto: ccp - During shutdown, check SEV data pointer before using 5f8a6e8f14 test_bpf: fix incorrect netdev features 45e1dbe5f6 drm/radeon: fix incorrrect SPDX-License-Identifiers e7d6cac696 wifi: iwlegacy: 4965: fix potential off-by-one overflow in il4965_rs_fill_link_cmd() eccd7c3e25 ath9k: fix use-after-free in ath9k_hif_usb_rx_cb 918f42ca1d media: tw686x: Register the irq at the end of probe d45eaf4114 crypto: sun8i-ss - fix infinite loop in sun8i_ss_setup_ivs() 81cb317568 i2c: Fix a potential use after free d0412d8f69 net: fix sk_wmem_schedule() and sk_rmem_schedule() errors 0e70bb9cdb crypto: sun8i-ss - fix error codes in allocate_flows() e8673fbc10 crypto: sun8i-ss - do not allocate memory when handling hash requests 648b1bb29a drm: adv7511: override i2c address of cec before accessing it 259773fc87 virtio-gpu: fix a missing check to avoid NULL dereference e28aa4f467 i2c: npcm: Correct slave role behavior 385f6ef4de i2c: npcm: Remove own slave addresses 2:10 5ce9cff371 drm/mediatek: Add pull-down MIPI operation in mtk_dsi_poweroff function b54bc0013d drm/mediatek: Separate poweron/poweroff from enable/disable and define new funcs 0cb6589885 drm/mediatek: Modify dsi funcs to atomic operations 8508d6d23a drm/radeon: fix potential buffer overflow in ni_set_mc_special_registers() ac22537643 ath11k: Fix incorrect debug_mask mappings 648d3c8714 drm/mipi-dbi: align max_chunk to 2 in spi_transfer a2c45f8c3d ath11k: fix netdev open race 58fd794675 wifi: rtlwifi: fix error codes in rtl_debugfs_set_write_h2c() 71426d31d0 drm/st7735r: Fix module autoloading for Okaya RH128128T fd98ccda50 ath10k: do not enforce interrupt trigger type bcc05372a2 drm/bridge: tc358767: Make sure Refclk clock are enabled c038b9b733 drm/bridge: tc358767: Move (e)DP bridge endpoint parsing into dedicated function f312bc33ca pwm: lpc18xx-sct: Convert to devm_platform_ioremap_resource() 6aaac1d924 pwm: sifive: Shut down hardware only after pwmchip_remove() completed 9073dbec88 pwm: sifive: Ensure the clk is enabled exactly once per running PWM 47902de24a pwm: sifive: Simplify offset calculation for PWMCMP registers 6d7f7ffbcd pwm: sifive: Don't check the return code of pwmchip_remove() b7e2d64d67 dm: return early from dm_pr_call() if DM device is suspended b3f5cc0cc0 thermal/tools/tmon: Include pthread and time headers in tmon.h 7aa3a25599 selftests/seccomp: Fix compile warning when CC=clang e06a31e61f nohz/full, sched/rt: Fix missed tick-reenabling bug in dequeue_task_rt() 298417471e drivers/perf: arm_spe: Fix consistency of SYS_PMSCR_EL1.CX a1891d3df7 arm64: dts: qcom: qcs404: Fix incorrect USB2 PHYs assignment a7753a260e soc: qcom: Make QCOM_RPMPD depend on PM 332e555dca regulator: of: Fix refcount leak bug in of_get_regulation_constraints() 1ed71e6bce blktrace: Trace remapped requests correctly 1cb3032406 block: remove the request_queue to argument request based tracepoints d125b13a66 hwmon: (drivetemp) Add module alias ed6ae23811 blk-mq: don't create hctx debugfs dir until q->debugfs_dir is created 0ca556256f erofs: avoid consecutive detection for Highmem memory 8dee22b457 arm64: tegra: Fix SDMMC1 CD on P2888 a1e2386909 arm64: dts: mt7622: fix BPI-R64 WPS button 7eafa9a1aa bus: hisi_lpc: fix missing platform_device_put() in hisi_lpc_acpi_probe() 7fcf4401d5 ARM: dts: qcom: pm8841: add required thermal-sensor-cells 97713ed9b6 soc: qcom: aoss: Fix refcount leak in qmp_cooling_devices_register 07aea6819d soc: qcom: ocmem: Fix refcount leak in of_get_ocmem 71042279b1 ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP 5f29b045da regulator: qcom_smd: Fix pm8916_pldo range 22e6d8bcde cpufreq: zynq: Fix refcount leak in zynq_get_revision d294d60dc6 ARM: OMAP2+: Fix refcount leak in omap3xxx_prm_late_init 14bac0c703 ARM: OMAP2+: Fix refcount leak in omapdss_init_of fdcb1fdbdc ARM: dts: qcom: mdm9615: add missing PMIC GPIO reg c32d5491c8 block: fix infinite loop for invalid zone append 2d9a1a96eb soc: fsl: guts: machine variable might be unset 4cea839177 locking/lockdep: Fix lockdep_init_map_*() confusion 87e415aec4 arm64: cpufeature: Allow different PMU versions in ID_DFR0_EL1 30119131e3 hexagon: select ARCH_WANT_LD_ORPHAN_WARN 9d744229cd ARM: dts: ast2600-evb: fix board compatible 75a24da2b9 ARM: dts: ast2500-evb: fix board compatible 2c07688d3e x86/pmem: Fix platform-device leak in error path 6a28f363d3 arm64: dts: renesas: Fix thermal-sensors on single-zone sensors 80c469e63b soc: amlogic: Fix refcount leak in meson-secure-pwrc.c 6cd8ba0c0b soc: renesas: r8a779a0-sysc: Fix A2DP1 and A2CV[2357] PDR values 6771609e19 Input: atmel_mxt_ts - fix up inverted RESET handler 11903c5457 ARM: dts: imx7d-colibri-emmc: add cpu1 supply b8b1f0d74f ACPI: processor/idle: Annotate more functions to live in cpuidle section 91e7f04f53 ARM: bcm: Fix refcount leak in bcm_kona_smc_init f6a6cc6d57 arm64: dts: renesas: beacon: Fix regulator node names 2691b8780f meson-mx-socinfo: Fix refcount leak in meson_mx_socinfo_init ccf56ea52b ARM: findbit: fix overflowing offset 71fc6e0dca spi: spi-rspi: Fix PIO fallback on RZ platforms 4234c5f34e powerpc/64s: Disable stack variable initialisation for prom_init adbfdaacde selinux: Add boundary check in put_entry() 003a456ae6 PM: hibernate: defer device probing when resuming from hibernation 70bccff899 firmware: tegra: Fix error check return value of debugfs_create_file() c2e53a1b07 ARM: shmobile: rcar-gen2: Increase refcount for new reference f48cec5736 arm64: dts: allwinner: a64: orangepi-win: Fix LED node name fcdc1e13e0 arm64: dts: qcom: ipq8074: fix NAND node name 931d0a574c ACPI: LPSS: Fix missing check in register_device_clock() d257d9b0a4 ACPI: PM: save NVS memory for Lenovo G40-45 85bc8689a7 ACPI: EC: Drop the EC_FLAGS_IGNORE_DSDT_GPE quirk def469523d ACPI: EC: Remove duplicate ThinkPad X1 Carbon 6th entry from DMI quirks 88d556029a ARM: OMAP2+: display: Fix refcount leak bug 43157bc5f9 spi: synquacer: Add missing clk_disable_unprepare() 607570808a ARM: dts: BCM5301X: Add DT for Meraki MR26 9213e5a397 ARM: dts: imx6ul: fix qspi node compatible 976db15fee ARM: dts: imx6ul: fix lcdif node compatible 6045ac40e3 ARM: dts: imx6ul: fix csi node compatible c7ce841f48 ARM: dts: imx6ul: fix keypad compatible 15af2deb19 ARM: dts: imx6ul: change operating-points to uint32-matrix 278aa4c73d ARM: dts: imx6ul: add missing properties for sram 695a3c2a82 wait: Fix __wait_event_hrtimeout for RT/DL tasks 2b8c55900d irqchip/mips-gic: Check the return value of ioremap() in gic_of_init() 8dfb4a99b1 genirq: GENERIC_IRQ_IPI depends on SMP f460141f29 irqchip/mips-gic: Only register IPI domain when SMP is enabled 4aba3247af genirq: Don't return error on missing optional irq_request_resources() d08bb199a4 ext2: Add more validity checks for inode counts 353b4673d0 arm64: fix oops in concurrently setting insn_emulation sysctls 913f173237 arm64: Do not forget syscall when starting a new thread. fb086aea39 x86: Handle idle=nomwait cmdline properly for x86_idle 48c3900210 epoll: autoremove wakers even more aggressively 80977126bc netfilter: nf_tables: fix null deref due to zeroed list head 0cc5c6b756 netfilter: nf_tables: do not allow RULE_ID to refer to another chain 9e7dcb88ec netfilter: nf_tables: do not allow CHAIN_ID to refer to another table 1a4b18b1ff netfilter: nf_tables: do not allow SET_ID to refer to another table 19bf7199c3 lockdep: Allow tuning tracing capacity constants. f294829fb4 usb: dwc3: gadget: fix high speed multiplier setting fc2a039cdb usb: dwc3: gadget: refactor dwc3_repare_one_trb 9a3a61bd73 arm64: dts: uniphier: Fix USB interrupts for PXs3 SoC 63228d8328 ARM: dts: uniphier: Fix USB interrupts for PXs2 SoC 4d7da7e565 USB: HCD: Fix URB giveback issue in tasklet function 37c7fe9b31 usb: typec: ucsi: Acknowledge the GET_ERROR_STATUS command completion 847b9273dd coresight: Clear the connection field properly 807adf6ffa MIPS: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK 26d767990e powerpc/powernv: Avoid crashing if rng is NULL 3db593ab8e powerpc/ptdump: Fix display of RW pages on FSL_BOOK3E b326b8d6ae powerpc/fsl-pci: Fix Class Code of PCIe Root Port 39c51471ef PCI: Add defines for normal and subtractive PCI bridges 23c2f921f2 ia64, processor: fix -Wincompatible-pointer-types in ia64_get_irr() 2f36ba13cb media: [PATCH] pci: atomisp_cmd: fix three missing checks on list iterator 5fd4ffa237 md-raid10: fix KASAN warning e0bdaed154 md-raid: destroy the bitmap after destroying the thread 3bdda8656a serial: mvebu-uart: uart2 error bits clearing cfe17ae313 fuse: limit nsec e63ea5814b scsi: qla2xxx: Zero undefined mailbox IN registers 6f18b5ad2d scsi: qla2xxx: Fix incorrect display of max frame size 408bfa1489 scsi: sg: Allow waiting for commands to complete on removed device fb1888205c iio: light: isl29028: Fix the warning in isl29028_remove() fb7eea3946 mtd: rawnand: arasan: Update NAND bus clock instead of system clock 15d0aeb017 drm/amdgpu: Check BO's requested pinning domains against its preferred_domains 55f5584427 drm/nouveau/acpi: Don't print error when we get -EINPROGRESS from pm_runtime 92050011e0 drm/nouveau: Don't pm_runtime_put_sync(), only pm_runtime_put_autosuspend() ca0742a8ed drm/nouveau: fix another off-by-one in nvbios_addr de63dbc296 drm/vc4: hdmi: Disable audio if dmas property is present but empty 1ff71d4f53 drm/gem: Properly annotate WW context on drm_gem_lock_reservations() error 043f4642c1 parisc: io_pgetevents_time64() needs compat syscall in 32-bit compat mode fc3918d70b parisc: Check the return value of ioremap() in lba_driver_probe() b0dfba6d3b parisc: Fix device names in /proc/iomem 542d2e799d ovl: drop WARN_ON() dentry is NULL in ovl_encode_fh() 135199a2ed usbnet: Fix linkwatch use-after-free on disconnect d65c3fcd6d fbcon: Fix accelerated fbdev scrolling while logo is still shown 16badd9987 fbcon: Fix boundary checks for fbcon=vc:n1-n2 parameters 826955eebc thermal: sysfs: Fix cooling_device_stats_setup() error code path 60a8f0e62a fs: Add missing umask strip in vfs_tmpfile cf65b5bfac vfs: Check the truncate maximum size in inode_newsize_ok() 5c6c65681f tty: vt: initialize unicode screen buffer f9b244e541 ALSA: hda/realtek: Add a quirk for HP OMEN 15 (8786) mute LED 7b9ee47c28 ALSA: hda/realtek: Add quirk for another Asus K42JZ model c366ccad5b ALSA: hda/cirrus - support for iMac 12,1 model f2b72c51c2 ALSA: hda/conexant: Add quirk for LENOVO 20149 Notebook model 2613baa3ab mm/mremap: hold the rmap lock in write mode when moving page table entries. 0a69f1f842 xfs: fix I_DONTCACHE e32bb24281 xfs: only set IOMAP_F_SHARED when providing a srcmap to a write f5f3e54f81 mm: Add kvrealloc() 3ff605513f riscv: set default pm_power_off to NULL 230e369d49 KVM: x86: Tag kvm_mmu_x86_module_init() with __init 0dd8ba6670 KVM: x86: Set error code to segment selector on LLDT/LTR non-canonical #GP 68ba319b88 KVM: x86: Mark TSS busy during LTR emulation _after_ all fault checks b670a58549 KVM: nVMX: Let userspace set nVMX MSR to any _host_ supported value e9c55562b3 KVM: s390: pv: don't present the ecall interrupt twice 8bb6834902 KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 860e334395 KVM: nVMX: Snapshot pre-VM-Enter DEBUGCTL for !nested_run_pending case ab4805c263 KVM: nVMX: Snapshot pre-VM-Enter BNDCFGS for !nested_run_pending case 40593c5898 HID: wacom: Don't register pad_input for touch switch 0ba645def7 HID: wacom: Only report rotation for art pen 57f2ee517d add barriers to buffer_uptodate and set_buffer_uptodate 6dece5ad6e wifi: mac80211_hwsim: use 32-bit skb cookie d400222f49 wifi: mac80211_hwsim: add back erroneously removed cast eb8fc4277b wifi: mac80211_hwsim: fix race condition in pending packet 9a22b1f7da ALSA: hda/realtek: Add quirk for HP Spectre x360 15-eb0xxx d909d9bdc8 ALSA: hda/realtek: Add quirk for Clevo NV45PZ 348620464a ALSA: bcd2000: Fix a UAF bug on the error path of probing 101e0c052d scsi: Revert "scsi: qla2xxx: Fix disk failure to rediscover" 14eb40fd79 Revert "pNFS: nfs3_set_ds_client should set NFS_CS_NOPING" 4ad6a94c68 x86: link vdso and boot with -z noexecstack --no-warn-rwx-segments 8f4f2c9b98 Makefile: link with -z noexecstack --no-warn-rwx-segments Add the following symbol as needed by the -lts merge: Leaf changes summary: 1 artifact changed Changed leaf types summary: 0 leaf type changed Removed/Changed/Added functions summary: 0 Removed, 0 Changed, 1 Added function Removed/Changed/Added variables summary: 0 Removed, 0 Changed, 0 Added variable 1 Added function: [A] 'function ssize_t strscpy_pad(char*, const char*, size_t)' Change-Id: I7b4e08152fafe9bf2285afd207af47481eb9c774 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2022-11-29 14:09:15 +00:00
Eric Biggers	3f23bb2255	UPSTREAM: crypto: lib - remove unneeded selection of XOR_BLOCKS ... CRYPTO_LIB_CHACHA_GENERIC doesn't need to select XOR_BLOCKS. It perhaps was thought that it's needed for __crypto_xor, but that's not the case. Enabling XOR_BLOCKS is problematic because the XOR_BLOCKS code runs a benchmark when it is initialized. That causes a boot time regression on systems that didn't have it enabled before. Therefore, remove this unnecessary and problematic selection. Bug: 254441685 Fixes: e56e18985596 ("lib/crypto: add prompts back to crypto libraries") Cc: stable@vger.kernel.org Signed-off-by: Eric Biggers <ebiggers@google.com> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> (cherry picked from commit 874b301985ef2f89b8b592ad255e03fb6fbfe605) Signed-off-by: Lee Jones <joneslee@google.com> Change-Id: I89d552f31062ad677407107280874bc7eafe60bf	2022-11-16 14:48:59 +00:00
Greg Kroah-Hartman	0b500f5b16	This is the 5.10.150 stable release ... -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmNZGa8ACgkQONu9yGCS aT48lBAA04ORlv/P+tkaLh7gkJjuvnbsemni3KXdpq0hcOfUIpdquUvU06tD7T/P cnM20NPgBR+IZ1sIcGWdPhTpIOEId9yxu84HQT5ctOjAZPuGg98s2JOQaXWD3Jh2 g88kbWgMeThfrJebPYZMofy5vRSZ5eMatAixhtjaM/2b/MXDSu2rIL4AoHZ99CKr wovy1r1bN2niJADu8DwC+jANrPTfStMsjJ9dcOpAqVt83EKz0j3ktCDfzcUftFIw z4y5leEx1qftUOWtY1DKPZEAhMZSpjZYLC1nldopwEl2JvZ7z9aGx3fFJyr/7zOt 4/mNWT2Ra4S9Tqn2RuFnCdWfqGBOmrE0AJf37IdEdpnlcXol6NaGu4LsQsQq4ffk DxPc6tN6BGY1XXh+pNSlSW7jsXx6jbJ+OnL8JpSXV49ZOofz3XPTHQ/8tJEttfO4 rURa3iMk4GFeORw+mrHKOVJuWcfpnjVoxStGv6XiKqPpHjwbtB8ZGBlr9pMDYDQP i2RBwkr/cz5JJzlaA4Q/n96nbZFAKpsiy0Vh1MWboxxlojIqLe3yIlZT6b2M3CFf jsoqlLfaBjBa7RGQP1rW/im2SqxG2ftTiRdGZXPvjEZKnfIpUZEFszD9TmSuIk8f uuJY2Tj6rSJ2nJPS0iui/KVQ78IWLz9PG3Xwm5E2A9QcPz1JAfk= =pfwB -----END PGP SIGNATURE----- Merge 5.10.150 into android12-5.10-lts Changes in 5.10.150 ALSA: oss: Fix potential deadlock at unregistration ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free() ALSA: usb-audio: Fix potential memory leaks ALSA: usb-audio: Fix NULL dererence at error path ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530 ALSA: hda/realtek: Correct pin configs for ASUS G533Z ALSA: hda/realtek: Add quirk for ASUS GV601R laptop ALSA: hda/realtek: Add Intel Reference SSID to support headset keys mtd: rawnand: atmel: Unmap streaming DMA mappings cifs: destage dirty pages before re-reading them for cache=none cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message iio: dac: ad5593r: Fix i2c read protocol requirements iio: ltc2497: Fix reading conversion results iio: adc: ad7923: fix channel readings for some variants iio: pressure: dps310: Refactor startup procedure iio: pressure: dps310: Reset chip after timeout usb: add quirks for Lenovo OneLink+ Dock can: kvaser_usb: Fix use of uninitialized completion can: kvaser_usb_leaf: Fix overread with an invalid command can: kvaser_usb_leaf: Fix TX queue out of sync after restart can: kvaser_usb_leaf: Fix CAN state after restart mmc: sdhci-sprd: Fix minimum clock limit fs: dlm: fix race between test_bit() and queue_work() fs: dlm: handle -EBUSY first in lock arg validation HID: multitouch: Add memory barriers quota: Check next/prev free block number after reading from quota file platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure ASoC: wcd9335: fix order of Slimbus unprepare/disable ASoC: wcd934x: fix order of Slimbus unprepare/disable hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API regulator: qcom_rpm: Fix circular deferral regression RISC-V: Make port I/O string accessors actually work parisc: fbdev/stifb: Align graphics memory size to 4MB riscv: Allow PROT_WRITE-only mmap() riscv: Make VM_WRITE imply VM_READ riscv: Pass -mno-relax only on lld < 15.0.0 UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK nvme-pci: set min_align_mask before calculating max_hw_sectors drm/virtio: Check whether transferred 2D BO is shmem drm/udl: Restore display mode on resume block: fix inflight statistics of part0 mm/mmap: undo ->mmap() when arch_validate_flags() fails PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain powerpc/boot: Explicitly disable usage of SPE instructions scsi: qedf: Populate sysfs attributes for vport fbdev: smscufx: Fix use-after-free in ufx_ops_open() btrfs: fix race between quota enable and quota rescan ioctl f2fs: increase the limit for reserve_root f2fs: fix to do sanity check on destination blkaddr during recovery f2fs: fix to do sanity check on summary info hardening: Clarify Kconfig text for auto-var-init hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero jbd2: wake up journal waiters in FIFO order, not LIFO jbd2: fix potential buffer head reference count leak jbd2: fix potential use-after-free in jbd2_fc_wait_bufs jbd2: add miss release buffer head in fc_do_one_pass() ext4: avoid crash when inline data creation follows DIO write ext4: fix null-ptr-deref in ext4_write_info ext4: make ext4_lazyinit_thread freezable ext4: fix check for block being out of directory size ext4: don't increase iversion counter for ea_inodes ext4: ext4_read_bh_lock() should submit IO if the buffer isn't uptodate ext4: place buffer head allocation before handle start ext4: fix miss release buffer head in ext4_fc_write_inode ext4: fix potential memory leak in ext4_fc_record_modified_inode() ext4: fix potential memory leak in ext4_fc_record_regions() ext4: update 'state->fc_regions_size' after successful memory allocation livepatch: fix race between fork and KLP transition ftrace: Properly unset FTRACE_HASH_FL_MOD ring-buffer: Allow splice to read previous partially read pages ring-buffer: Have the shortest_full queue be the shortest not longest ring-buffer: Check pending waiters when doing wake ups as well ring-buffer: Add ring_buffer_wake_waiters() ring-buffer: Fix race between reset page and reading page tracing: Disable interrupt or preemption before acquiring arch_spinlock_t thunderbolt: Explicitly enable lane adapter hotplug events at startup efi: libstub: drop pointless get_memory_map() call media: cedrus: Set the platform driver data earlier KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility KVM: nVMX: Unconditionally purge queued/injected events on nested "exit" KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS staging: greybus: audio_helper: remove unused and wrong debugfs usage drm/nouveau/kms/nv140-: Disable interlacing drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table() drm/i915: Fix watermark calculations for gen12+ RC CCS modifier drm/i915: Fix watermark calculations for gen12+ MC CCS modifier smb3: must initialize two ACL struct fields to zero selinux: use "grep -E" instead of "egrep" userfaultfd: open userfaultfds with O_RDONLY sh: machvec: Use char[] for section boundaries MIPS: SGI-IP27: Free some unused memory MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create() ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd() ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE objtool: Preserve special st_shndx indexes in elf_update_symbol nfsd: Fix a memory leak in an error handling path wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state() leds: lm3601x: Don't use mutex after it was destroyed wifi: mac80211: allow bw change during channel switch in mesh bpftool: Fix a wrong type cast in btf_dumper_int spi: mt7621: Fix an error message in mt7621_spi_probe() x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register Bluetooth: btusb: Fine-tune mt7663 mechanism. Bluetooth: btusb: fix excessive stack usage Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse() selftests/xsk: Avoid use-after-free on ctx spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume() spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime() wifi: rtl8xxxu: Fix skb misuse in TX queue selection spi: meson-spicc: do not rely on busy flag in pow2 clk ops bpf: btf: fix truncated last_member_type_id in btf_struct_resolve wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask net: fs_enet: Fix wrong check in do_pd_setup bpf: Ensure correct locking around vulnerable function find_vpid() Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure wifi: ath11k: fix number of VHT beamformee spatial streams x86/microcode/AMD: Track patch allocation size explicitly x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe i2c: mlxbf: support lock mechanism Bluetooth: hci_core: Fix not handling link timeouts propertly netfilter: nft_fib: Fix for rpath check with VRF devices spi: s3c64xx: Fix large transfers with DMA wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM vhost/vsock: Use kvmalloc/kvfree for larger packets. mISDN: fix use-after-free bugs in l1oip timer handlers sctp: handle the error returned from sctp_auth_asoc_init_active_key tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited spi: Ensure that sg_table won't be used after being freed net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks() bnx2x: fix potential memory leak in bnx2x_tpa_stop() net/ieee802154: reject zero-sized raw_sendmsg() once: add DO_ONCE_SLOW() for sleepable contexts net: mvpp2: fix mvpp2 debugfs leak drm: bridge: adv7511: fix CEC power down control register offset drm/bridge: Avoid uninitialized variable warning drm/mipi-dsi: Detach devices when removing the host drm/bridge: parade-ps8640: Fix regulator supply order drm/dp_mst: fix drm_dp_dpcd_read return value checks drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node() platform/chrome: fix double-free in chromeos_laptop_prepare() platform/chrome: fix memory corruption in ioctl ASoC: tas2764: Allow mono streams ASoC: tas2764: Drop conflicting set_bias_level power setting ASoC: tas2764: Fix mute/unmute platform/x86: msi-laptop: Fix old-ec check for backlight registering platform/x86: msi-laptop: Fix resource cleanup drm: fix drm_mipi_dbi build errors drm/bridge: megachips: Fix a null pointer dereference bug ASoC: rsnd: Add check for rsnd_mod_power_on ALSA: hda: beep: Simplify keep-power-at-enable behavior drm/omap: dss: Fix refcount leak bugs mmc: au1xmmc: Fix an error handling path in au1xmmc_probe() ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API drm/msm/dpu: index dpu_kms->hw_vbif using vbif_idx drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa() ASoC: da7219: Fix an error handling path in da7219_register_dai_clks() ALSA: dmaengine: increment buffer pointer atomically mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe() ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe ALSA: hda/hdmi: Don't skip notification handling during PM operation memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe() memory: of: Fix refcount leak bug in of_get_ddr_timings() memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings() soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe() soc: qcom: smem_state: Add refcounting for the 'state->of_node' ARM: dts: turris-omnia: Fix mpp26 pin name and comment ARM: dts: kirkwood: lsxl: fix serial line ARM: dts: kirkwood: lsxl: remove first ethernet port ia64: export memory_add_physaddr_to_nid to fix cxl build error soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family ARM: Drop CMDLINE_* dependency on ATAGS arm64: ftrace: fix module PLTs with mcount ARM: dts: exynos: fix polarity of VBUS GPIO of Origen iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX iio: adc: at91-sama5d2_adc: check return status for pressure and touch iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume iio: inkern: only release the device node when done with it iio: ABI: Fix wrong format of differential capacitance channel ABI. usb: ch9: Add USB 3.2 SSP attributes usb: common: Parse for USB SSP genXxY usb: common: add function to get interval expressed in us unit usb: common: move function's kerneldoc next to its definition usb: common: debug: Check non-standard control requests clk: meson: Hold reference returned by of_get_parent() clk: oxnas: Hold reference returned by of_get_parent() clk: qoriq: Hold reference returned by of_get_parent() clk: berlin: Add of_node_put() for of_get_parent() clk: sprd: Hold reference returned by of_get_parent() clk: tegra: Fix refcount leak in tegra210_clock_init clk: tegra: Fix refcount leak in tegra114_clock_init clk: tegra20: Fix refcount leak in tegra20_clock_init HSI: omap_ssi: Fix refcount leak in ssi_probe HSI: omap_ssi_port: Fix dma_map_sg error check media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop tty: xilinx_uartps: Fix the ignore_status media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start() media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init RDMA/rxe: Fix "kernel NULL pointer dereference" error RDMA/rxe: Fix the error caused by qp->sk misc: ocxl: fix possible refcount leak in afu_ioctl() fpga: prevent integer overflow in dfl_feature_ioctl_set_irq() dmaengine: hisilicon: Disable channels when unregister hisi_dma dmaengine: hisilicon: Fix CQ head update dmaengine: hisilicon: Add multi-thread support for a DMA channel dyndbg: fix static_branch manipulation dyndbg: fix module.dyndbg handling dyndbg: let query-modname override actual module name dyndbg: drop EXPORTed dynamic_debug_exec_queries mtd: devices: docg3: check the return value of devm_ioremap() in the probe mtd: rawnand: fsl_elbc: Fix none ECC mode RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall. ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting() ata: fix ata_id_has_devslp() ata: fix ata_id_has_ncq_autosense() ata: fix ata_id_has_dipm() mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct() md: Replace snprintf with scnprintf md/raid5: Ensure stripe_fill happens on non-read IO with journal RDMA/cm: Use SLID in the work completion as the DLID in responder side IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers xhci: Don't show warning for reinit on known broken suspend usb: gadget: function: fix dangling pnp_string in f_printer.c drivers: serial: jsm: fix some leaks in probe serial: 8250: Add an empty line and remove some useless {} serial: 8250: Toggle IER bits on only after irq has been set up tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown phy: qualcomm: call clk_disable_unprepare in the error handling staging: vt6655: fix some erroneous memory clean-up loops firmware: google: Test spinlock on panic path to avoid lockups serial: 8250: Fix restoring termios speed after suspend scsi: libsas: Fix use-after-free bug in smp_execute_task_sg() scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername() clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical fsi: core: Check error number after calling ida_simple_get mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe() mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq() mfd: lp8788: Fix an error handling path in lp8788_probe() mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init() mfd: fsl-imx25: Fix check for platform_get_irq() errors mfd: sm501: Add check for platform_driver_register() clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup() spmi: pmic-arb: correct duplicate APID to PPID mapping logic clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD clk: baikal-t1: Fix invalid xGMAC PTP clock divider clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent clk: baikal-t1: Add SATA internal ref clock buffer clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe clk: ast2600: BCLK comes from EPLL mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg powerpc/math_emu/efp: Include module.h powerpc/sysdev/fsl_msi: Add missing of_node_put() powerpc/pci_dn: Add missing of_node_put() powerpc/powernv: add missing of_node_put() in opal_export_attrs() x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5 powerpc: Fix SPE Power ISA properties for e500v1 platforms crypto: sahara - don't sleep when in softirq crypto: hisilicon/zip - fix mismatch in get/set sgl_sge_nr hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear() cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset iommu/omap: Fix buffer overflow in debugfs crypto: akcipher - default implementation for setting a private key crypto: ccp - Release dma channels before dmaengine unrgister crypto: inside-secure - Change swab to swab32 crypto: qat - fix use of 'dma_map_single' crypto: qat - use pre-allocated buffers in datapath crypto: qat - fix DMA transfer direction iommu/iova: Fix module config properly tracing: kprobe: Fix kprobe event gen test module on exit tracing: kprobe: Make gen test module work in arm and riscv kbuild: remove the target in signal traps when interrupted kbuild: rpm-pkg: fix breakage when V=1 is used crypto: marvell/octeontx - prevent integer overflows crypto: cavium - prevent integer overflow loading firmware thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id ACPI: APEI: do not add task_work to kernel thread to avoid memory leak f2fs: fix race condition on setting FI_NO_EXTENT flag f2fs: fix to avoid REQ_TIME and CP_TIME collision f2fs: fix to account FS_CP_DATA_IO correctly selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle rcu: Back off upon fill_page_cache_func() allocation failure rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE() ACPI: video: Add Toshiba Satellite/Portege Z830 quirk MIPS: BCM47XX: Cast memcmp() of function to (void *) powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash x86/entry: Work around Clang __bdos() bug NFSD: Return nfserr_serverfault if splice_ok but buf->pages have data NFSD: fix use-after-free on source server when doing inter-server copy wifi: brcmfmac: fix invalid address access when enabling SCAN log level bpftool: Clear errno after libcap's checks openvswitch: Fix double reporting of drops in dropwatch openvswitch: Fix overreporting of drops in dropwatch tcp: annotate data-race around tcp_md5sig_pool_populated wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg() xfrm: Update ipcomp_scratches with NULL when freed wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit() regulator: core: Prevent integer underflow Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create() Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times can: bcm: check the result of can_send() in bcm_can_tx() wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620 wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620 wifi: rt2x00: set VGC gain for both chains of MT7620 wifi: rt2x00: set SoC wmac clock register wifi: rt2x00: correctly set BBP register 86 for MT7620 net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory Bluetooth: L2CAP: Fix user-after-free r8152: Rate limit overflow messages drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc() drm: Use size_t type for len variable in drm_copy_field() drm: Prevent drm_copy_field() to attempt copying a NULL pointer gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init() drm/amd/display: fix overflow on MIN_I64 definition udmabuf: Set ubuf->sg = NULL if the creation of sg table fails drm: bridge: dw_hdmi: only trigger hotplug event on link change drm/vc4: vec: Fix timings for VEC modes drm: panel-orientation-quirks: Add quirk for Anbernic Win600 platform/chrome: cros_ec: Notify the PM of wake events during resume platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading ASoC: SOF: pci: Change DMI match info to support all Chrome platforms drm/amdgpu: fix initial connector audio value drm/meson: explicitly remove aggregate driver at module unload time mmc: sdhci-msm: add compatible string check for sdm670 drm/dp: Don't rewrite link config when setting phy test pattern drm/amd/display: Remove interface for periodic interrupt 1 ARM: dts: imx7d-sdb: config the max pressure for tsc2046 ARM: dts: imx6q: add missing properties for sram ARM: dts: imx6dl: add missing properties for sram ARM: dts: imx6qp: add missing properties for sram ARM: dts: imx6sl: add missing properties for sram ARM: dts: imx6sll: add missing properties for sram ARM: dts: imx6sx: add missing properties for sram kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply btrfs: scrub: try to fix super block errors clk: zynqmp: Fix stack-out-of-bounds in strncpy` media: cx88: Fix a null-ptr-deref bug in buffer_prepare() clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate usb: host: xhci-plat: suspend and resume clocks usb: host: xhci-plat: suspend/resume clks for brcm scsi: 3w-9xxx: Avoid disabling device if failing to enable it nbd: Fix hung when signal interrupts nbd_start_device_ioctl() power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type() staging: vt6655: fix potential memory leak blk-throttle: prevent overflow while calculating wait time ata: libahci_platform: Sanity check the DT child nodes number bcache: fix set_at_max_writeback_rate() for multiple attached devices soundwire: cadence: Don't overwrite msg->buf during write commands soundwire: intel: fix error handling on dai registration issues HID: roccat: Fix use-after-free in roccat_read() md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info() usb: musb: Fix musb_gadget.c rxstate overflow bug Revert "usb: storage: Add quirk for Samsung Fit flash" staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv() nvme: copy firmware_rev on each init nvmet-tcp: add bounds check on Transfer Tag usb: idmouse: fix an uninit-value in idmouse_open clk: bcm2835: Make peripheral PLLC critical perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc arm64: topology: fix possible overflow in amu_fie_setup() io_uring: correct pinned_vm accounting io_uring/af_unix: defer registered files gc to io_uring release mm: hugetlb: fix UAF in hugetlb_handle_userfault net: ieee802154: return -EINVAL for unknown addr type Revert "net/ieee802154: reject zero-sized raw_sendmsg()" net/ieee802154: don't warn zero-sized raw_sendmsg() Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega" Revert "drm/amdgpu: use dirty framebuffer helper" ext4: continue to expand file system when the target size doesn't reach inet: fully convert sk->sk_rx_dst to RCU rules thermal: intel_powerclamp: Use first online CPU as control_cpu f2fs: fix wrong condition to trigger background checkpoint correctly gcov: support GCC 12.1 and newer compilers Revert "drm/amdgpu: make sure to init common IP before gmc" Linux 5.10.150 Change-Id: I54f32f1f0149ec614c8bc7944e15adb5d80cd51a Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2022-11-15 19:14:08 +00:00
Christophe Leroy	83ed3e2c4a	BACKPORT: vsprintf: Fix %pK with kptr_restrict == 0 ... Although kptr_restrict is set to 0 and the kernel is booted with no_hash_pointers parameter, the content of /proc/vmallocinfo is lacking the real addresses. / # cat /proc/vmallocinfo 0x(ptrval)-0x(ptrval) 8192 load_module+0xc0c/0x2c0c pages=1 vmalloc 0x(ptrval)-0x(ptrval) 12288 start_kernel+0x4e0/0x690 pages=2 vmalloc 0x(ptrval)-0x(ptrval) 12288 start_kernel+0x4e0/0x690 pages=2 vmalloc 0x(ptrval)-0x(ptrval) 8192 _mpic_map_mmio.constprop.0+0x20/0x44 phys=0x80041000 ioremap 0x(ptrval)-0x(ptrval) 12288 _mpic_map_mmio.constprop.0+0x20/0x44 phys=0x80041000 ioremap ... According to the documentation for /proc/sys/kernel/, %pK is equivalent to %p when kptr_restrict is set to 0. Bug: 254441685 Fixes: 5ead723a20e0 ("lib/vsprintf: no_hash_pointers prints all addresses as unhashed") Signed-off-by: Christophe Leroy <christophe.leroy@csgroup.eu> Reviewed-by: Petr Mladek <pmladek@suse.com> Signed-off-by: Petr Mladek <pmladek@suse.com> Link: https://lore.kernel.org/r/107476128e59bff11a309b5bf7579a1753a41aca.1645087605.git.christophe.leroy@csgroup.eu (cherry picked from commit 84842911322fc6a02a03ab9e728a48c691fe3efd) Signed-off-by: Lee Jones <joneslee@google.com> Change-Id: I5ac3ae8796559613cedf9a259d39b99765d7165a	2022-11-09 13:57:12 +00:00
Marco Elver	8599a67e73	UPSTREAM: kasan: fix Kconfig check of CC_HAS_WORKING_NOSANITIZE_ADDRESS ... In the main KASAN config option CC_HAS_WORKING_NOSANITIZE_ADDRESS is checked for instrumentation-based modes. However, if HAVE_ARCH_KASAN_HW_TAGS is true all modes may still be selected. To fix, also make the software modes depend on CC_HAS_WORKING_NOSANITIZE_ADDRESS. Bug: 254441685 Link: https://lkml.kernel.org/r/20210910084240.1215803-1-elver@google.com Fixes: 6a63a63ff1ac ("kasan: introduce CONFIG_KASAN_HW_TAGS") Signed-off-by: Marco Elver <elver@google.com> Cc: Andrey Ryabinin <ryabinin.a.a@gmail.com> Cc: Alexander Potapenko <glider@google.com> Cc: Andrey Konovalov <andreyknvl@gmail.com> Cc: Dmitry Vyukov <dvyukov@google.com> Cc: Aleksandr Nogikh <nogikh@google.com> Cc: Taras Madan <tarasmadan@google.com> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org> (cherry picked from commit fa360beac4b62d54879a88b182afef4b369c9700) Signed-off-by: Lee Jones <joneslee@google.com> Change-Id: Ic343e59c3d02a2e231202ad4362b46dbad44b44c	2022-11-09 13:57:12 +00:00
Jim Cromie	d06cc0e11d	dyndbg: drop EXPORTed dynamic_debug_exec_queries ... [ Upstream commit e26ef3af964acfea311403126acee8c56c89e26b ] This exported fn is unused, and will not be needed. Lets dump it. The export was added to let drm control pr_debugs, as part of using them to avoid drm_debug_enabled overheads. But its better to just implement the drm.debug bitmap interface, then its available for everyone. Fixes: a2d375eda7 ("dyndbg: refine export, rename to dynamic_debug_exec_queries()") Fixes: 4c0d77828d ("dyndbg: export ddebug_exec_queries") Acked-by: Jason Baron <jbaron@akamai.com> Acked-by: Daniel Vetter <daniel.vetter@ffwll.ch> Signed-off-by: Jim Cromie <jim.cromie@gmail.com> Link: https://lore.kernel.org/r/20220904214134.408619-10-jim.cromie@gmail.com Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-10-26 13:25:34 +02:00
Jim Cromie	1d65985589	dyndbg: let query-modname override actual module name ... [ Upstream commit e75ef56f74965f426dd819a41336b640ffdd8fbc ] dyndbg's control-parser: ddebug_parse_query(), requires that search terms: module, func, file, lineno, are used only once in a query; a thing cannot be named both foo and bar. The cited commit added an overriding module modname, taken from the module loader, which is authoritative. So it set query.module 1st, which disallowed its use in the query-string. But now, its useful to allow a module-load to enable classes across a whole (or part of) a subsystem at once. # enable (dynamic-debug in) drm only modprobe drm dyndbg="class DRM_UT_CORE +p" # get drm_helper too modprobe drm dyndbg="class DRM_UT_CORE module drm* +p" # get everything that knows DRM_UT_CORE modprobe drm dyndbg="class DRM_UT_CORE module * +p" # also for boot-args: drm.dyndbg="class DRM_UT_CORE module * +p" So convert the override into a default, by filling it only when/after the query-string omitted the module. NB: the query class FOO handling is forthcoming. Fixes: 8e59b5cfb9 dynamic_debug: add modname arg to exec_query callchain Acked-by: Jason Baron <jbaron@akamai.com> Acked-by: Daniel Vetter <daniel.vetter@ffwll.ch> Signed-off-by: Jim Cromie <jim.cromie@gmail.com> Link: https://lore.kernel.org/r/20220904214134.408619-8-jim.cromie@gmail.com Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-10-26 13:25:34 +02:00
Jim Cromie	5047bd3bd7	dyndbg: fix static_branch manipulation ... [ Upstream commit ee879be38bc87f8cedc79ae2742958db6533ca59 ] In https://lore.kernel.org/lkml/20211209150910.GA23668@axis.com/ Vincent's patch commented on, and worked around, a bug toggling static_branch's, when a 2nd PRINTK-ish flag was added. The bug results in a premature static_branch_disable when the 1st of 2 flags was disabled. The cited commit computed newflags, but then in the JUMP_LABEL block, failed to use that result, instead using just one of the terms in it. Using newflags instead made the code work properly. This is Vincents test-case, reduced. It needs the 2nd flag to demonstrate the bug, but it's explanatory here. pt_test() { echo 5 > /sys/module/dynamic_debug/verbose site="module tcp" # just one callsite echo " $site =_ " > /proc/dynamic_debug/control # clear it # A B ~A ~B for flg in +T +p "-T #broke here" -p; do echo " $site $flg " > /proc/dynamic_debug/control done; # A B ~B ~A for flg in +T +p "-p #broke here" -T; do echo " $site $flg " > /proc/dynamic_debug/control done } pt_test Fixes: 84da83a6ff dyndbg: combine flags & mask into a struct, simplify with it CC: vincent.whitchurch@axis.com Acked-by: Jason Baron <jbaron@akamai.com> Acked-by: Daniel Vetter <daniel.vetter@ffwll.ch> Signed-off-by: Jim Cromie <jim.cromie@gmail.com> Link: https://lore.kernel.org/r/20220904214134.408619-2-jim.cromie@gmail.com Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-10-26 13:25:34 +02:00
Eric Dumazet	6cb54f2162	once: add DO_ONCE_SLOW() for sleepable contexts ... [ Upstream commit 62c07983bef9d3e78e71189441e1a470f0d1e653 ] Christophe Leroy reported a ~80ms latency spike happening at first TCP connect() time. This is because __inet_hash_connect() uses get_random_once() to populate a perturbation table which became quite big after commit 4c2c8f03a5ab ("tcp: increase source port perturb table to 2^16") get_random_once() uses DO_ONCE(), which block hard irqs for the duration of the operation. This patch adds DO_ONCE_SLOW() which uses a mutex instead of a spinlock for operations where we prefer to stay in process context. Then __inet_hash_connect() can use get_random_slow_once() to populate its perturbation table. Fixes: 4c2c8f03a5ab ("tcp: increase source port perturb table to 2^16") Fixes: 190cc82489f4 ("tcp: change source port randomizarion at connect() time") Reported-by: Christophe Leroy <christophe.leroy@csgroup.eu> Link: https://lore.kernel.org/netdev/CANn89iLAEYBaoYajy0Y9UmGFff5GPxDUoG-ErVB2jDdRNQ5Tug@mail.gmail.com/T/#t Signed-off-by: Eric Dumazet <edumazet@google.com> Cc: Willy Tarreau <w@1wt.eu> Tested-by: Christophe Leroy <christophe.leroy@csgroup.eu> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-10-26 13:25:23 +02:00
Greg Kroah-Hartman	5d60de7a5f	This is the 5.10.141 stable release ... -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmMVs1MACgkQONu9yGCS aT4dIA/+JYX/VG4PxtN3ndJGacUGTTxXf0fKn5TAPkJVKJ5Jt5zDuWbAA4+oLWym z8L7W2DQ8sdhWiKTSbQMUXWhzyMDyxmFED/J9sm9HXd4c1VbAaRroeViI26fcbxU ND5soyoTprxD2iwePmmxI7EKO2IIpqkw3hkcUS0XI6bLT2j8/zusEBHUP4RF8D9I +FCpE9miQZielOjeTLlCRiU5VlZDEg5FusTuy+EJlN4k1HJxiO/L31NVX3iG0xPs 2x4E0q5QT85xEQRwzJFUPU64hPzPFeSGENfAsiq0tzRdsqgOFuQulnp31Vt/nba3 D+D96/dRxo/OZ/s1o2zt08J9zI5tV64sdxrxXSni/+Pnc/qc2/ZrGM3pPIw4taUg /35orlmDqseNvPyZ5BKuHc68G+1Ma3uxQTbhGfcESvOEZ+T/Ezd6wL+BGMoL/jjq QKBrRDORAt2t4JmaNoq3t+LGyE4Kdi7RxUmnawYImwzmMKS+qAk0f9mTVcYST0BM DWFClp8FW4IAVzGX0AWw2uz6e0T/kSkI1xCT8dzXfM7GhAUF8LPJABgmlLJRm/0N HnzGRDwl0xPbbe9VNvhI+yCaI7HYkSuDlVHW1oujd/AoRcso5LV6TMAgnPUYyvm7 d1HZlbDP2G35Ypq+Z/EdQIb7kWvoDHd2Az3Hvslo5Chawx41S+s= =IQqi -----END PGP SIGNATURE----- Merge 5.10.141 into android12-5.10-lts Changes in 5.10.141 mm: Force TLB flush for PFNMAP mappings before unlink_file_vma() x86/nospec: Unwreck the RSB stuffing x86/nospec: Fix i386 RSB stuffing crypto: lib - remove unneeded selection of XOR_BLOCKS s390/mm: do not trigger write fault when vma does not allow VM_WRITE kbuild: Fix include path in scripts/Makefile.modpost Bluetooth: L2CAP: Fix build errors in some archs Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()" HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report udmabuf: Set the DMA mask for the udmabuf device (v2) media: pvrusb2: fix memory leak in pvr_probe HID: hidraw: fix memory leak in hidraw_release() net: fix refcount bug in sk_psock_get (2) fbdev: fb_pm2fb: Avoid potential divide by zero error ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead bpf: Don't redirect packets with invalid pkt_len mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse mmc: mtk-sd: Clear interrupts when cqe off/disable drm/amd/display: Avoid MPC infinite loop drm/amd/display: For stereo keep "FLIP_ANY_FRAME" drm/amd/display: clear optc underflow before turn off odm clock neigh: fix possible DoS due to net iface start/stop loop s390/hypfs: avoid error message under KVM drm/amd/pm: add missing ->fini_microcode interface for Sienna Cichlid drm/amd/display: Fix pixel clock programming drm/amdgpu: Increase tlb flush timeout for sriov netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline() kprobes: don't call disarm_kprobe() for disabled kprobes io_uring: disable polling pollfree files xfs: remove infinite loop when reserving free block pool xfs: always succeed at setting the reserve pool size xfs: fix overfilling of reserve pool xfs: fix soft lockup via spinning in filestream ag selection loop xfs: revert "xfs: actually bump warning counts when we send warnings" net/af_packet: check len when min_header_len equals to 0 net: neigh: don't call kfree_skb() under spin_lock_irqsave() Linux 5.10.141 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I8b6a1e0bd31df051b90433857f126c183771d367	2022-09-07 09:44:58 +02:00
Christophe Leroy	8c70cce892	lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline() ... [ Upstream commit 58efe9f696cf908f40d6672aeca81cb2ad2bc762 ] In the same spirit as commit c966533f8c ("lib/vdso: Mark do_hres() and do_coarse() as __always_inline"), mark do_hres_timens() and do_coarse_timens() __always_inline. The measurement below in on a non timens process, ie on the fastest path. On powerpc32, without the patch: clock-gettime-monotonic-raw: vdso: 1155 nsec/call clock-gettime-monotonic-coarse: vdso: 813 nsec/call clock-gettime-monotonic: vdso: 1076 nsec/call With the patch: clock-gettime-monotonic-raw: vdso: 1100 nsec/call clock-gettime-monotonic-coarse: vdso: 667 nsec/call clock-gettime-monotonic: vdso: 1025 nsec/call Signed-off-by: Christophe Leroy <christophe.leroy@csgroup.eu> Reviewed-by: Thomas Gleixner <tglx@linutronix.de> Reviewed-by: Vincenzo Frascino <vincenzo.frascino@arm.com> Signed-off-by: Michael Ellerman <mpe@ellerman.id.au> Link: https://lore.kernel.org/r/90dcf45ebadfd5a07f24241551c62f619d1cb930.1617209142.git.christophe.leroy@csgroup.eu Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-09-05 10:28:58 +02:00
Eric Biggers	0dea6b3e22	crypto: lib - remove unneeded selection of XOR_BLOCKS ... commit 874b301985ef2f89b8b592ad255e03fb6fbfe605 upstream. CRYPTO_LIB_CHACHA_GENERIC doesn't need to select XOR_BLOCKS. It perhaps was thought that it's needed for __crypto_xor, but that's not the case. Enabling XOR_BLOCKS is problematic because the XOR_BLOCKS code runs a benchmark when it is initialized. That causes a boot time regression on systems that didn't have it enabled before. Therefore, remove this unnecessary and problematic selection. Fixes: e56e18985596 ("lib/crypto: add prompts back to crypto libraries") Cc: stable@vger.kernel.org Signed-off-by: Eric Biggers <ebiggers@google.com> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-09-05 10:28:55 +02:00
Greg Kroah-Hartman	5939035887	This is the 5.10.140 stable release ... -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmMPexEACgkQONu9yGCS aT7SIg//QPmoJq2ho7oqDXzdxW67Eay3QZEPDoBol34RxEXoAUpxFB1nQlC3u1aI OyPNXqQSPkObkXRMAVYStTZWgN3iUngorbsDOM+svGpAxt9zC/6d7JGNdhstaQLG p/OoWaV7qwnNUsvndhohdmwU9TqjwpbvQwSa570uWQ47nIoxMyIz0iR80GjBSNGf a2QiJg4OsaVxqxoySB6I6qAceRMbLOZVxW6p963IYC9Fj4j1NmhsPDIy95aidEN5 RG+Ng9GnuYRo0ktlhSje9YKyE5bYhUNCi6GWsCyArAFo0db/2GzRFweZRy5w7MC/ IaFQf93pDZinIBfDJliXfFMBx4YLdI3IHdtILPJvF7d1U5n6pG44knrPkPHzNouf Ife8SckAPLzZeffobIcOXgoZqM3Xj/5mpHWffPQ2wIpL0ylf4bshPiC8mIRoyblh ufrzUV6r7uBesp18c6nhjwAKgNVaw4w9+CpDk0qLlDELKNfENJ9wMRAJpcifYJKL jJVWJh2wXG4kBWbp/2SetMkNNEeqn/PQUVY843uRE2iE76J2lzly5/+gI4DsSN6+ z2ZQL5tzguZvLw0s+si+doU+orbpzXluJncNdJyw8+1A7J2kxSn/Xfks9X3BKDyi 69pxUx627rMJZi4Pwsc1tyoeTVj32EAmUqronHD9tsQKsujIX0M= =DO69 -----END PGP SIGNATURE----- Merge 5.10.140 into android12-5.10-lts Changes in 5.10.140 audit: fix potential double free on error path from fsnotify_add_inode_mark parisc: Fix exception handler for fldw and fstw instructions kernel/sys_ni: add compat entry for fadvise64_64 pinctrl: amd: Don't save/restore interrupt status and wake status bits xfs: prevent a WARN_ONCE() in xfs_ioc_attr_list() xfs: reject crazy array sizes being fed to XFS_IOC_GETBMAP* fs: remove __sync_filesystem vfs: make sync_filesystem return errors from ->sync_fs xfs: return errors in xfs_fs_sync_fs xfs: only bother with sync_filesystem during readonly remount kernel/sched: Remove dl_boosted flag comment xfrm: fix refcount leak in __xfrm_policy_check() xfrm: clone missing x->lastused in xfrm_do_migrate af_key: Do not call xfrm_probe_algs in parallel xfrm: policy: fix metadata dst->dev xmit null pointer dereference NFS: Don't allocate nfs_fattr on the stack in __nfs42_ssc_open() NFSv4.2 fix problems with __nfs42_ssc_open SUNRPC: RPC level errors should set task->tk_rpc_status mm/huge_memory.c: use helper function migration_entry_to_page() mm/smaps: don't access young/dirty bit if pte unpresent rose: check NULL rose_loopback_neigh->loopback nfc: pn533: Fix use-after-free bugs caused by pn532_cmd_timeout ice: xsk: Force rings to be sized to power of 2 ice: xsk: prohibit usage of non-balanced queue id net/mlx5e: Properly disable vlan strip on non-UL reps net: ipa: don't assume SMEM is page-aligned net: moxa: get rid of asymmetry in DMA mapping/unmapping bonding: 802.3ad: fix no transmission of LACPDUs net: ipvtap - add __init/__exit annotations to module init/exit funcs netfilter: ebtables: reject blobs that don't provide all entry points bnxt_en: fix NQ resource accounting during vf creation on 57500 chips netfilter: nft_payload: report ERANGE for too long offset and length netfilter: nft_payload: do not truncate csum_offset and csum_type netfilter: nf_tables: do not leave chain stats enabled on error netfilter: nft_osf: restrict osf to ipv4, ipv6 and inet families netfilter: nft_tunnel: restrict it to netdev family netfilter: nftables: remove redundant assignment of variable err netfilter: nf_tables: consolidate rule verdict trace call netfilter: nft_cmp: optimize comparison for 16-bytes netfilter: bitwise: improve error goto labels netfilter: nf_tables: upfront validation of data via nft_data_init() netfilter: nf_tables: disallow jump to implicit chain from set element netfilter: nf_tables: disallow binding to already bound chain tcp: tweak len/truesize ratio for coalesce candidates net: Fix data-races around sysctl_[rw]mem(_offset)?. net: Fix data-races around sysctl_[rw]mem_(max|default). net: Fix data-races around weight_p and dev_weight_[rt]x_bias. net: Fix data-races around netdev_max_backlog. net: Fix data-races around netdev_tstamp_prequeue. ratelimit: Fix data-races in ___ratelimit(). bpf: Folding omem_charge() into sk_storage_charge() net: Fix data-races around sysctl_optmem_max. net: Fix a data-race around sysctl_tstamp_allow_data. net: Fix a data-race around sysctl_net_busy_poll. net: Fix a data-race around sysctl_net_busy_read. net: Fix a data-race around netdev_budget. net: Fix a data-race around netdev_budget_usecs. net: Fix data-races around sysctl_fb_tunnels_only_for_init_net. net: Fix data-races around sysctl_devconf_inherit_init_net. net: Fix a data-race around sysctl_somaxconn. ixgbe: stop resetting SYSTIME in ixgbe_ptp_start_cyclecounter rxrpc: Fix locking in rxrpc's sendmsg ionic: fix up issues with handling EAGAIN on FW cmds btrfs: fix silent failure when deleting root reference btrfs: replace: drop assert for suspended replace btrfs: add info when mount fails due to stale replace target btrfs: check if root is readonly while setting security xattr perf/x86/lbr: Enable the branch type for the Arch LBR by default x86/unwind/orc: Unwind ftrace trampolines with correct ORC entry x86/bugs: Add "unknown" reporting for MMIO Stale Data loop: Check for overflow while configuring loop asm-generic: sections: refactor memory_intersects s390: fix double free of GS and RI CBs on fork() failure ACPI: processor: Remove freq Qos request for all CPUs xen/privcmd: fix error exit of privcmd_ioctl_dm_op() mm/hugetlb: fix hugetlb not supporting softdirty tracking Revert "md-raid: destroy the bitmap after destroying the thread" md: call __md_stop_writes in md_stop arm64: Fix match_list for erratum 1286807 on Arm Cortex-A76 Documentation/ABI: Mention retbleed vulnerability info file for sysfs blk-mq: fix io hung due to missing commit_rqs perf python: Fix build when PYTHON_CONFIG is user supplied perf/x86/intel/uncore: Fix broken read_counter() for SNB IMC PMU scsi: ufs: core: Enable link lost interrupt scsi: storvsc: Remove WQ_MEM_RECLAIM from storvsc_error_wq bpf: Don't use tnum_range on array range checking for poke descriptors Linux 5.10.140 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I29f4b4af2a584dc2f2789aac613583603002464a	2022-08-31 18:52:48 +02:00
Kuniyuki Iwashima	4d4e39245d	ratelimit: Fix data-races in ___ratelimit(). ... [ Upstream commit 6bae8ceb90ba76cdba39496db936164fa672b9be ] While reading rs->interval and rs->burst, they can be changed concurrently via sysctl (e.g. net_ratelimit_state). Thus, we need to add READ_ONCE() to their readers. Fixes: 1da177e4c3 ("Linux-2.6.12-rc2") Signed-off-by: Kuniyuki Iwashima <kuniyu@amazon.com> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-08-31 17:15:20 +02:00
Greg Kroah-Hartman	5597d5439f	Merge 5.10.138 into android12-5.10-lts ... Changes in 5.10.138 ALSA: info: Fix llseek return value when using callback ALSA: hda/realtek: Add quirk for Clevo NS50PU, NS70PU x86/mm: Use proper mask when setting PUD mapping rds: add missing barrier to release_refill ata: libata-eh: Add missing command name mmc: pxamci: Fix another error handling path in pxamci_probe() mmc: pxamci: Fix an error handling path in pxamci_probe() mmc: meson-gx: Fix an error handling path in meson_mmc_probe() btrfs: fix lost error handling when looking up extended ref on log replay tracing: Have filter accept "common_cpu" to be consistent ALSA: usb-audio: More comprehensive mixer map for ASUS ROG Zenith II can: ems_usb: fix clang's -Wunaligned-access warning apparmor: fix quiet_denied for file rules apparmor: fix absroot causing audited secids to begin with = apparmor: Fix failed mount permission check error message apparmor: fix aa_label_asxprint return check apparmor: fix setting unconfined mode on a loaded profile apparmor: fix overlapping attachment computation apparmor: fix reference count leak in aa_pivotroot() apparmor: Fix memleak in aa_simple_write_to_buffer() Documentation: ACPI: EINJ: Fix obsolete example NFSv4.1: Don't decrease the value of seq_nr_highest_sent NFSv4.1: Handle NFS4ERR_DELAY replies to OP_SEQUENCE correctly NFSv4: Fix races in the legacy idmapper upcall NFSv4.1: RECLAIM_COMPLETE must handle EACCES NFSv4/pnfs: Fix a use-after-free bug in open bpf: Acquire map uref in .init_seq_private for array map iterator bpf: Acquire map uref in .init_seq_private for hash map iterator bpf: Acquire map uref in .init_seq_private for sock local storage map iterator bpf: Acquire map uref in .init_seq_private for sock{map,hash} iterator bpf: Check the validity of max_rdwr_access for sock local storage map iterator can: mcp251x: Fix race condition on receive interrupt net: atlantic: fix aq_vec index out of range error sunrpc: fix expiry of auth creds SUNRPC: Reinitialise the backchannel request buffers before reuse virtio_net: fix memory leak inside XPD_TX with mergeable devlink: Fix use-after-free after a failed reload net: bgmac: Fix a BUG triggered by wrong bytes_compl pinctrl: nomadik: Fix refcount leak in nmk_pinctrl_dt_subnode_to_map pinctrl: qcom: msm8916: Allow CAMSS GP clocks to be muxed pinctrl: sunxi: Add I/O bias setting for H6 R-PIO pinctrl: qcom: sm8250: Fix PDC map ACPI: property: Return type of acpi_add_nondev_subnodes() should be bool geneve: do not use RT_TOS for IPv6 flowlabel ipv6: do not use RT_TOS for IPv6 flowlabel plip: avoid rcu debug splat vsock: Fix memory leak in vsock_connect() vsock: Set socket state back to SS_UNCONNECTED in vsock_connect_timeout() dt-bindings: arm: qcom: fix MSM8916 MTP compatibles dt-bindings: clock: qcom,gcc-msm8996: add more GCC clock sources ceph: use correct index when encoding client supported features tools/vm/slabinfo: use alphabetic order when two values are equal ceph: don't leak snap_rwsem in handle_cap_grant kbuild: dummy-tools: avoid tmpdir leak in dummy gcc tools build: Switch to new openssl API for test-libcrypto NTB: ntb_tool: uninitialized heap data in tool_fn_write() nfp: ethtool: fix the display error of `ethtool -m DEVNAME` xen/xenbus: fix return type in xenbus_file_read() atm: idt77252: fix use-after-free bugs caused by tst_timer geneve: fix TOS inheriting for ipv4 perf probe: Fix an error handling path in 'parse_perf_probe_command()' dpaa2-eth: trace the allocated address instead of page struct nios2: page fault et.al. are *not* restartable syscalls... nios2: don't leave NULLs in sys_call_table[] nios2: traced syscall does need to check the syscall number nios2: fix syscall restart checks nios2: restarts apply only to the first sigframe we build... nios2: add force_successful_syscall_return() iavf: Fix adminq error handling ASoC: tas2770: Set correct FSYNC polarity ASoC: tas2770: Allow mono streams ASoC: tas2770: Drop conflicting set_bias_level power setting ASoC: tas2770: Fix handling of mute/unmute netfilter: nf_tables: really skip inactive sets when allocating name netfilter: nf_tables: validate NFTA_SET_ELEM_OBJREF based on NFT_SET_OBJECT flag netfilter: nf_tables: check NFT_SET_CONCAT flag if field_count is specified powerpc/pci: Fix get_phb_number() locking spi: meson-spicc: add local pow2 clock ops to preserve rate between messages net: dsa: mv88e6060: prevent crash on an unused port net: moxa: pass pdev instead of ndev to DMA functions net: dsa: microchip: ksz9477: fix fdb_dump last invalid entry net: dsa: felix: fix ethtool 256-511 and 512-1023 TX packet counters net: genl: fix error path memory leak in policy dumping net: dsa: sja1105: fix buffer overflow in sja1105_setup_devlink_regions() ice: Ignore EEXIST when setting promisc mode i2c: imx: Make sure to unregister adapter on remove() regulator: pca9450: Remove restrictions for regulator-name i40e: Fix to stop tx_timeout recovery if GLOBR fails fec: Fix timer capture timing in `fec_ptp_enable_pps()` stmmac: intel: Add a missing clk_disable_unprepare() call in intel_eth_pci_remove() igb: Add lock to avoid data race kbuild: fix the modules order between drivers and libs gcc-plugins: Undefine LATENT_ENTROPY_PLUGIN when plugin disabled for a file locking/atomic: Make test_and_*_bit() ordered on failure ASoC: SOF: intel: move sof_intel_dsp_desc() forward drm/meson: Fix refcount bugs in meson_vpu_has_available_connectors() audit: log nftables configuration change events once per table netfilter: nftables: add helper function to set the base sequence number netfilter: add helper function to set up the nfnetlink header and use it drm/sun4i: dsi: Prevent underflow when computing packet sizes PCI: Add ACS quirk for Broadcom BCM5750x NICs platform/chrome: cros_ec_proto: don't show MKBP version if unsupported usb: cdns3 fix use-after-free at workaround 2 usb: gadget: uvc: call uvc uvcg_warn on completed status instead of uvcg_info irqchip/tegra: Fix overflow implicit truncation warnings drm/meson: Fix overflow implicit truncation warnings clk: ti: Stop using legacy clkctrl names for omap4 and 5 usb: host: ohci-ppc-of: Fix refcount leak bug usb: renesas: Fix refcount leak bug usb: dwc2: gadget: remove D+ pull-up while no vbus with usb-role-switch vboxguest: Do not use devm for irq clk: qcom: ipq8074: dont disable gcc_sleep_clk_src uacce: Handle parent device removal or parent driver module rmmod zram: do not lookup algorithm in backends table clk: qcom: clk-alpha-pll: fix clk_trion_pll_configure description scsi: lpfc: Prevent buffer overflow crashes in debugfs with malformed user input gadgetfs: ep_io - wait until IRQ finishes pinctrl: intel: Check against matching data instead of ACPI companion cxl: Fix a memory leak in an error handling path PCI/ACPI: Guard ARM64-specific mcfg_quirks um: add "noreboot" command line option for PANIC_TIMEOUT=-1 setups RDMA/rxe: Limit the number of calls to each tasklet csky/kprobe: reclaim insn_slot on kprobe unregistration selftests/kprobe: Do not test for GRP/ without event failures dmaengine: sprd: Cleanup in .remove() after pm_runtime_get_sync() failed md: Notify sysfs sync_completed in md_reap_sync_thread() nvmet-tcp: fix lockdep complaint on nvmet_tcp_wq flush during queue teardown drivers:md:fix a potential use-after-free bug ext4: avoid remove directory when directory is corrupted ext4: avoid resizing to a partial cluster size lib/list_debug.c: Detect uninitialized lists tty: serial: Fix refcount leak bug in ucc_uart.c vfio: Clear the caps->buf to NULL after free mips: cavium-octeon: Fix missing of_node_put() in octeon2_usb_clocks_start modules: Ensure natural alignment for .altinstructions and __bug_table sections riscv: mmap with PROT_WRITE but no PROT_READ is invalid RISC-V: Add fast call path of crash_kexec() watchdog: export lockup_detector_reconfigure powerpc/32: Don't always pass -mcpu=powerpc to the compiler ALSA: core: Add async signal helpers ALSA: timer: Use deferred fasync helper ALSA: control: Use deferred fasync helper f2fs: fix to avoid use f2fs_bug_on() in f2fs_new_node_page() f2fs: fix to do sanity check on segment type in build_sit_entries() smb3: check xattr value length earlier powerpc/64: Init jump labels before parse_early_param() video: fbdev: i740fb: Check the argument of i740_calc_vclk() MIPS: tlbex: Explicitly compare _PAGE_NO_EXEC against 0 netfilter: nftables: fix a warning message in nf_tables_commit_audit_collect() netfilter: nf_tables: fix audit memory leak in nf_tables_commit tracing/probes: Have kprobes and uprobes use $COMM too can: j1939: j1939_sk_queue_activate_next_locked(): replace WARN_ON_ONCE with netdev_warn_once() can: j1939: j1939_session_destroy(): fix memory leak of skbs PCI/ERR: Retain status from error notification qrtr: Convert qrtr_ports from IDR to XArray bpf: Fix KASAN use-after-free Read in compute_effective_progs tee: fix memory leak in tee_shm_register() Linux 5.10.138 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I5983f3534b158edccd87bc7a7fe41ca07836d3eb	2022-08-30 12:59:52 +02:00
Greg Kroah-Hartman	fbe6a13851	This is the 5.10.137 stable release ... -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmMCMDQACgkQONu9yGCS aT6TwRAAvj1dnV1nLVVNET3jcelTO65SVUUpQjiyGD1npZQaQdH5PoGR0VhMWk7y mLUIwJyp/rR7+OLD3BMFwxDimDWHviFGdbmm/8fsyDrARuOeRd/M1fvtHXjIRQdb nOvfo1yTQWp4xA1k/JwJZslkvRFDsofXWHCRf+ffEryTRanFAVc7u5aFIg92W0b/ JWYWEFe99C4TJ7LACpDoGaP9gE6WXsupaxSZBIu+Wxa+PfDmIeRRTkQn+j4Khn0h I6w+LkLd6ZP3l7sbe9KfS9ZGo1wWLgSng4zz742Z9IaFgxyj2ArS9tNsYCLkkhAM gLSXXkiPBAxUvAtDxR1tc0YROHc1bjAttSoxNXcaaacspSo/Vi0VAtp7t6boK0bI /8P3dh+Hq9u/Q1ClhZtVoFpp+GVj0fDbDd56qVcr2Cp6IokpqRJog1Jhgj0CVCoG iElr3n0+y7/IZfmE6/U1cK00SNcW86e2YduuIy4ifCawRT574zkRiSYZalpaO3qM z1lF9p+zUNq3v2q0wxXuBDLi/yPoJzbJgmCGScj4ryjjr6TOvR1udSVWkJ02dR4H s9km3lNLgoUPCYCLBMlZl7em4T49E09/+4YCrnj/Ezp+YdImf2+QzZyd/gG3ITl2 fW7lpbK1dx3d/19JFP6Xkj9PaIlMl9e8Ne04G+Dabv67uN+0U+g= =Z4rz -----END PGP SIGNATURE----- Merge 5.10.137 into android12-5.10-lts Changes in 5.10.137 Makefile: link with -z noexecstack --no-warn-rwx-segments x86: link vdso and boot with -z noexecstack --no-warn-rwx-segments Revert "pNFS: nfs3_set_ds_client should set NFS_CS_NOPING" scsi: Revert "scsi: qla2xxx: Fix disk failure to rediscover" ALSA: bcd2000: Fix a UAF bug on the error path of probing ALSA: hda/realtek: Add quirk for Clevo NV45PZ ALSA: hda/realtek: Add quirk for HP Spectre x360 15-eb0xxx wifi: mac80211_hwsim: fix race condition in pending packet wifi: mac80211_hwsim: add back erroneously removed cast wifi: mac80211_hwsim: use 32-bit skb cookie add barriers to buffer_uptodate and set_buffer_uptodate HID: wacom: Only report rotation for art pen HID: wacom: Don't register pad_input for touch switch KVM: nVMX: Snapshot pre-VM-Enter BNDCFGS for !nested_run_pending case KVM: nVMX: Snapshot pre-VM-Enter DEBUGCTL for !nested_run_pending case KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 KVM: s390: pv: don't present the ecall interrupt twice KVM: nVMX: Let userspace set nVMX MSR to any _host_ supported value KVM: x86: Mark TSS busy during LTR emulation _after_ all fault checks KVM: x86: Set error code to segment selector on LLDT/LTR non-canonical #GP KVM: x86: Tag kvm_mmu_x86_module_init() with __init riscv: set default pm_power_off to NULL mm: Add kvrealloc() xfs: only set IOMAP_F_SHARED when providing a srcmap to a write xfs: fix I_DONTCACHE mm/mremap: hold the rmap lock in write mode when moving page table entries. ALSA: hda/conexant: Add quirk for LENOVO 20149 Notebook model ALSA: hda/cirrus - support for iMac 12,1 model ALSA: hda/realtek: Add quirk for another Asus K42JZ model ALSA: hda/realtek: Add a quirk for HP OMEN 15 (8786) mute LED tty: vt: initialize unicode screen buffer vfs: Check the truncate maximum size in inode_newsize_ok() fs: Add missing umask strip in vfs_tmpfile thermal: sysfs: Fix cooling_device_stats_setup() error code path fbcon: Fix boundary checks for fbcon=vc:n1-n2 parameters fbcon: Fix accelerated fbdev scrolling while logo is still shown usbnet: Fix linkwatch use-after-free on disconnect ovl: drop WARN_ON() dentry is NULL in ovl_encode_fh() parisc: Fix device names in /proc/iomem parisc: Check the return value of ioremap() in lba_driver_probe() parisc: io_pgetevents_time64() needs compat syscall in 32-bit compat mode drm/gem: Properly annotate WW context on drm_gem_lock_reservations() error drm/vc4: hdmi: Disable audio if dmas property is present but empty drm/nouveau: fix another off-by-one in nvbios_addr drm/nouveau: Don't pm_runtime_put_sync(), only pm_runtime_put_autosuspend() drm/nouveau/acpi: Don't print error when we get -EINPROGRESS from pm_runtime drm/amdgpu: Check BO's requested pinning domains against its preferred_domains mtd: rawnand: arasan: Update NAND bus clock instead of system clock iio: light: isl29028: Fix the warning in isl29028_remove() scsi: sg: Allow waiting for commands to complete on removed device scsi: qla2xxx: Fix incorrect display of max frame size scsi: qla2xxx: Zero undefined mailbox IN registers fuse: limit nsec serial: mvebu-uart: uart2 error bits clearing md-raid: destroy the bitmap after destroying the thread md-raid10: fix KASAN warning media: [PATCH] pci: atomisp_cmd: fix three missing checks on list iterator ia64, processor: fix -Wincompatible-pointer-types in ia64_get_irr() PCI: Add defines for normal and subtractive PCI bridges powerpc/fsl-pci: Fix Class Code of PCIe Root Port powerpc/ptdump: Fix display of RW pages on FSL_BOOK3E powerpc/powernv: Avoid crashing if rng is NULL MIPS: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK coresight: Clear the connection field properly usb: typec: ucsi: Acknowledge the GET_ERROR_STATUS command completion USB: HCD: Fix URB giveback issue in tasklet function ARM: dts: uniphier: Fix USB interrupts for PXs2 SoC arm64: dts: uniphier: Fix USB interrupts for PXs3 SoC usb: dwc3: gadget: refactor dwc3_repare_one_trb usb: dwc3: gadget: fix high speed multiplier setting lockdep: Allow tuning tracing capacity constants. netfilter: nf_tables: do not allow SET_ID to refer to another table netfilter: nf_tables: do not allow CHAIN_ID to refer to another table netfilter: nf_tables: do not allow RULE_ID to refer to another chain netfilter: nf_tables: fix null deref due to zeroed list head epoll: autoremove wakers even more aggressively x86: Handle idle=nomwait cmdline properly for x86_idle arm64: Do not forget syscall when starting a new thread. arm64: fix oops in concurrently setting insn_emulation sysctls ext2: Add more validity checks for inode counts genirq: Don't return error on missing optional irq_request_resources() irqchip/mips-gic: Only register IPI domain when SMP is enabled genirq: GENERIC_IRQ_IPI depends on SMP irqchip/mips-gic: Check the return value of ioremap() in gic_of_init() wait: Fix __wait_event_hrtimeout for RT/DL tasks ARM: dts: imx6ul: add missing properties for sram ARM: dts: imx6ul: change operating-points to uint32-matrix ARM: dts: imx6ul: fix keypad compatible ARM: dts: imx6ul: fix csi node compatible ARM: dts: imx6ul: fix lcdif node compatible ARM: dts: imx6ul: fix qspi node compatible ARM: dts: BCM5301X: Add DT for Meraki MR26 spi: synquacer: Add missing clk_disable_unprepare() ARM: OMAP2+: display: Fix refcount leak bug ACPI: EC: Remove duplicate ThinkPad X1 Carbon 6th entry from DMI quirks ACPI: EC: Drop the EC_FLAGS_IGNORE_DSDT_GPE quirk ACPI: PM: save NVS memory for Lenovo G40-45 ACPI: LPSS: Fix missing check in register_device_clock() arm64: dts: qcom: ipq8074: fix NAND node name arm64: dts: allwinner: a64: orangepi-win: Fix LED node name ARM: shmobile: rcar-gen2: Increase refcount for new reference firmware: tegra: Fix error check return value of debugfs_create_file() PM: hibernate: defer device probing when resuming from hibernation selinux: Add boundary check in put_entry() powerpc/64s: Disable stack variable initialisation for prom_init spi: spi-rspi: Fix PIO fallback on RZ platforms ARM: findbit: fix overflowing offset meson-mx-socinfo: Fix refcount leak in meson_mx_socinfo_init arm64: dts: renesas: beacon: Fix regulator node names ARM: bcm: Fix refcount leak in bcm_kona_smc_init ACPI: processor/idle: Annotate more functions to live in cpuidle section ARM: dts: imx7d-colibri-emmc: add cpu1 supply Input: atmel_mxt_ts - fix up inverted RESET handler soc: renesas: r8a779a0-sysc: Fix A2DP1 and A2CV[2357] PDR values soc: amlogic: Fix refcount leak in meson-secure-pwrc.c arm64: dts: renesas: Fix thermal-sensors on single-zone sensors x86/pmem: Fix platform-device leak in error path ARM: dts: ast2500-evb: fix board compatible ARM: dts: ast2600-evb: fix board compatible hexagon: select ARCH_WANT_LD_ORPHAN_WARN arm64: cpufeature: Allow different PMU versions in ID_DFR0_EL1 locking/lockdep: Fix lockdep_init_map_*() confusion soc: fsl: guts: machine variable might be unset block: fix infinite loop for invalid zone append ARM: dts: qcom: mdm9615: add missing PMIC GPIO reg ARM: OMAP2+: Fix refcount leak in omapdss_init_of ARM: OMAP2+: Fix refcount leak in omap3xxx_prm_late_init cpufreq: zynq: Fix refcount leak in zynq_get_revision regulator: qcom_smd: Fix pm8916_pldo range ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP soc: qcom: ocmem: Fix refcount leak in of_get_ocmem soc: qcom: aoss: Fix refcount leak in qmp_cooling_devices_register ARM: dts: qcom: pm8841: add required thermal-sensor-cells bus: hisi_lpc: fix missing platform_device_put() in hisi_lpc_acpi_probe() arm64: dts: mt7622: fix BPI-R64 WPS button arm64: tegra: Fix SDMMC1 CD on P2888 erofs: avoid consecutive detection for Highmem memory blk-mq: don't create hctx debugfs dir until q->debugfs_dir is created hwmon: (drivetemp) Add module alias block: remove the request_queue to argument request based tracepoints blktrace: Trace remapped requests correctly regulator: of: Fix refcount leak bug in of_get_regulation_constraints() soc: qcom: Make QCOM_RPMPD depend on PM arm64: dts: qcom: qcs404: Fix incorrect USB2 PHYs assignment drivers/perf: arm_spe: Fix consistency of SYS_PMSCR_EL1.CX nohz/full, sched/rt: Fix missed tick-reenabling bug in dequeue_task_rt() selftests/seccomp: Fix compile warning when CC=clang thermal/tools/tmon: Include pthread and time headers in tmon.h dm: return early from dm_pr_call() if DM device is suspended pwm: sifive: Don't check the return code of pwmchip_remove() pwm: sifive: Simplify offset calculation for PWMCMP registers pwm: sifive: Ensure the clk is enabled exactly once per running PWM pwm: sifive: Shut down hardware only after pwmchip_remove() completed pwm: lpc18xx-sct: Convert to devm_platform_ioremap_resource() drm/bridge: tc358767: Move (e)DP bridge endpoint parsing into dedicated function drm/bridge: tc358767: Make sure Refclk clock are enabled ath10k: do not enforce interrupt trigger type drm/st7735r: Fix module autoloading for Okaya RH128128T wifi: rtlwifi: fix error codes in rtl_debugfs_set_write_h2c() ath11k: fix netdev open race drm/mipi-dbi: align max_chunk to 2 in spi_transfer ath11k: Fix incorrect debug_mask mappings drm/radeon: fix potential buffer overflow in ni_set_mc_special_registers() drm/mediatek: Modify dsi funcs to atomic operations drm/mediatek: Separate poweron/poweroff from enable/disable and define new funcs drm/mediatek: Add pull-down MIPI operation in mtk_dsi_poweroff function i2c: npcm: Remove own slave addresses 2:10 i2c: npcm: Correct slave role behavior virtio-gpu: fix a missing check to avoid NULL dereference drm: adv7511: override i2c address of cec before accessing it crypto: sun8i-ss - do not allocate memory when handling hash requests crypto: sun8i-ss - fix error codes in allocate_flows() net: fix sk_wmem_schedule() and sk_rmem_schedule() errors i2c: Fix a potential use after free crypto: sun8i-ss - fix infinite loop in sun8i_ss_setup_ivs() media: tw686x: Register the irq at the end of probe ath9k: fix use-after-free in ath9k_hif_usb_rx_cb wifi: iwlegacy: 4965: fix potential off-by-one overflow in il4965_rs_fill_link_cmd() drm/radeon: fix incorrrect SPDX-License-Identifiers test_bpf: fix incorrect netdev features crypto: ccp - During shutdown, check SEV data pointer before using drm: bridge: adv7511: Add check for mipi_dsi_driver_register drm/mcde: Fix refcount leak in mcde_dsi_bind media: hdpvr: fix error value returns in hdpvr_read media: v4l2-mem2mem: prevent pollerr when last_buffer_dequeued is set media: tw686x: Fix memory leak in tw686x_video_init drm/vc4: plane: Remove subpixel positioning check drm/vc4: plane: Fix margin calculations for the right/bottom edges drm/vc4: dsi: Correct DSI divider calculations drm/vc4: dsi: Correct pixel order for DSI0 drm/vc4: drv: Remove the DSI pointer in vc4_drv drm/vc4: dsi: Use snprintf for the PHY clocks instead of an array drm/vc4: dsi: Introduce a variant structure drm/vc4: dsi: Register dsi0 as the correct vc4 encoder type drm/vc4: dsi: Fix dsi0 interrupt support drm/vc4: dsi: Add correct stop condition to vc4_dsi_encoder_disable iteration drm/vc4: hdmi: Remove firmware logic for MAI threshold setting drm/vc4: hdmi: Avoid full hdmi audio fifo writes drm/vc4: hdmi: Don't access the connector state in reset if kmalloc fails drm/vc4: hdmi: Limit the BCM2711 to the max without scrambling drm/vc4: hdmi: Fix timings for interlaced modes drm/vc4: hdmi: Correct HDMI timing registers for interlaced modes crypto: arm64/gcm - Select AEAD for GHASH_ARM64_CE selftests/xsk: Destroy BPF resources only when ctx refcount drops to 0 drm/rockchip: vop: Don't crash for invalid duplicate_state() drm/rockchip: Fix an error handling path rockchip_dp_probe() drm/mediatek: dpi: Remove output format of YUV drm/mediatek: dpi: Only enable dpi after the bridge is enabled drm: bridge: sii8620: fix possible off-by-one lib: bitmap: order includes alphabetically lib: bitmap: provide devm_bitmap_alloc() and devm_bitmap_zalloc() hinic: Use the bitmap API when applicable net: hinic: fix bug that ethtool get wrong stats net: hinic: avoid kernel hung in hinic_get_stats64() drm/msm/mdp5: Fix global state lock backoff crypto: hisilicon/sec - fixes some coding style crypto: hisilicon/sec - don't sleep when in softirq crypto: hisilicon - Kunpeng916 crypto driver don't sleep when in softirq media: platform: mtk-mdp: Fix mdp_ipi_comm structure alignment mt76: mt76x02u: fix possible memory leak in __mt76x02u_mcu_send_msg mediatek: mt76: mac80211: Fix missing of_node_put() in mt76_led_init() drm/exynos/exynos7_drm_decon: free resources when clk_set_parent() failed. tcp: make retransmitted SKB fit into the send window libbpf: Fix the name of a reused map selftests: timers: valid-adjtimex: build fix for newer toolchains selftests: timers: clocksource-switch: fix passing errors from child bpf: Fix subprog names in stack traces. fs: check FMODE_LSEEK to control internal pipe splicing wifi: wil6210: debugfs: fix info leak in wil_write_file_wmi() wifi: p54: Fix an error handling path in p54spi_probe() wifi: p54: add missing parentheses in p54_flush() selftests/bpf: fix a test for snprintf() overflow can: pch_can: do not report txerr and rxerr during bus-off can: rcar_can: do not report txerr and rxerr during bus-off can: sja1000: do not report txerr and rxerr during bus-off can: hi311x: do not report txerr and rxerr during bus-off can: sun4i_can: do not report txerr and rxerr during bus-off can: kvaser_usb_hydra: do not report txerr and rxerr during bus-off can: kvaser_usb_leaf: do not report txerr and rxerr during bus-off can: usb_8dev: do not report txerr and rxerr during bus-off can: error: specify the values of data[5..7] of CAN error frames can: pch_can: pch_can_error(): initialize errc before using it Bluetooth: hci_intel: Add check for platform_driver_register i2c: cadence: Support PEC for SMBus block read i2c: mux-gpmux: Add of_node_put() when breaking out of loop wifi: wil6210: debugfs: fix uninitialized variable use in `wil_write_file_wmi()` wifi: iwlwifi: mvm: fix double list_add at iwl_mvm_mac_wake_tx_queue wifi: libertas: Fix possible refcount leak in if_usb_probe() media: cedrus: hevc: Add check for invalid timestamp net/mlx5e: Remove WARN_ON when trying to offload an unsupported TLS cipher/version net/mlx5e: Fix the value of MLX5E_MAX_RQ_NUM_MTTS crypto: hisilicon/hpre - don't use GFP_KERNEL to alloc mem during softirq crypto: inside-secure - Add missing MODULE_DEVICE_TABLE for of crypto: hisilicon/sec - fix auth key size error inet: add READ_ONCE(sk->sk_bound_dev_if) in INET_MATCH() tcp: sk->sk_bound_dev_if once in inet_request_bound_dev_if() ipv6: add READ_ONCE(sk->sk_bound_dev_if) in INET6_MATCH() tcp: Fix data-races around sysctl_tcp_l3mdev_accept. net: allow unbound socket for packets in VRF when tcp_l3mdev_accept set iavf: Fix max_rate limiting netdevsim: Avoid allocation warnings triggered from user space net: rose: fix netdev reference changes net: ionic: fix error check for vlan flags in ionic_set_nic_features() dccp: put dccp_qpolicy_full() and dccp_qpolicy_push() in the same lock wireguard: ratelimiter: use hrtimer in selftest wireguard: allowedips: don't corrupt stack when detecting overflow clk: renesas: r9a06g032: Fix UART clkgrp bitsel mtd: maps: Fix refcount leak in of_flash_probe_versatile mtd: maps: Fix refcount leak in ap_flash_init mtd: rawnand: meson: Fix a potential double free issue PCI: tegra194: Fix PM error handling in tegra_pcie_config_ep() HID: cp2112: prevent a buffer overflow in cp2112_xfer() mtd: sm_ftl: Fix deadlock caused by cancel_work_sync in sm_release mtd: partitions: Fix refcount leak in parse_redboot_of mtd: st_spi_fsm: Add a clk_disable_unprepare() in .probe()'s error path fpga: altera-pr-ip: fix unsigned comparison with less than zero usb: host: Fix refcount leak in ehci_hcd_ppc_of_probe usb: ohci-nxp: Fix refcount leak in ohci_hcd_nxp_probe usb: gadget: tegra-xudc: Fix error check in tegra_xudc_powerdomain_init() usb: xhci: tegra: Fix error check netfilter: xtables: Bring SPDX identifier back iio: accel: bma400: Fix the scale min and max macro values platform/chrome: cros_ec: Always expose last resume result iio: accel: bma400: Reordering of header files clk: mediatek: reset: Fix written reset bit offset KVM: Don't set Accessed/Dirty bits for ZERO_PAGE mwifiex: Ignore BTCOEX events from the 88W8897 firmware mwifiex: fix sleep in atomic context bugs caused by dev_coredumpv dmaengine: dw-edma: Fix eDMA Rd/Wr-channels and DMA-direction semantics misc: rtsx: Fix an error handling path in rtsx_pci_probe() driver core: fix potential deadlock in __driver_attach clk: qcom: clk-krait: unlock spin after mux completion usb: host: xhci: use snprintf() in xhci_decode_trb() clk: qcom: ipq8074: fix NSS core PLL-s clk: qcom: ipq8074: SW workaround for UBI32 PLL lock clk: qcom: ipq8074: fix NSS port frequency tables clk: qcom: ipq8074: set BRANCH_HALT_DELAY flag for UBI clocks clk: qcom: camcc-sdm845: Fix topology around titan_top power domain PCI: dwc: Add unroll iATU space support to dw_pcie_disable_atu() PCI: dwc: Deallocate EPC memory on dw_pcie_ep_init() errors PCI: dwc: Always enable CDM check if "snps,enable-cdm-check" exists soundwire: bus_type: fix remove and shutdown support KVM: arm64: Don't return from void function dmaengine: sf-pdma: apply proper spinlock flags in sf_pdma_prep_dma_memcpy() dmaengine: sf-pdma: Add multithread support for a DMA channel PCI: endpoint: Don't stop controller when unbinding endpoint function intel_th: Fix a resource leak in an error handling path intel_th: msu-sink: Potential dereference of null pointer intel_th: msu: Fix vmalloced buffers staging: rtl8192u: Fix sleep in atomic context bug in dm_fsync_timer_callback mmc: sdhci-of-esdhc: Fix refcount leak in esdhc_signal_voltage_switch memstick/ms_block: Fix some incorrect memory allocation memstick/ms_block: Fix a memory leak mmc: sdhci-of-at91: fix set_uhs_signaling rewriting of MC1R mmc: block: Add single read for 4k sector cards KVM: s390: pv: leak the topmost page table when destroy fails PCI/portdrv: Don't disable AER reporting in get_port_device_capability() PCI: qcom: Set up rev 2.1.0 PARF_PHY before enabling clocks scsi: smartpqi: Fix DMA direction for RAID requests xtensa: iss/network: provide release() callback xtensa: iss: fix handling error cases in iss_net_configure() usb: gadget: udc: amd5536 depends on HAS_DMA usb: aspeed-vhub: Fix refcount leak bug in ast_vhub_init_desc() usb: dwc3: core: Deprecate GCTL.CORESOFTRESET usb: dwc3: core: Do not perform GCTL_CORE_SOFTRESET during bootup usb: dwc3: qcom: fix missing optional irq warnings eeprom: idt_89hpesx: uninitialized data in idt_dbgfs_csr_write() interconnect: imx: fix max_node_id um: random: Don't initialise hwrng struct with zero RDMA/rtrs: Define MIN_CHUNK_SIZE RDMA/rtrs: Avoid Wtautological-constant-out-of-range-compare RDMA/rtrs-srv: Fix modinfo output for stringify RDMA/qedr: Improve error logs for rdma_alloc_tid error return RDMA/qedr: Fix potential memory leak in __qedr_alloc_mr() RDMA/hns: Fix incorrect clearing of interrupt status register RDMA/siw: Fix duplicated reported IW_CM_EVENT_CONNECT_REPLY event RDMA/hfi1: fix potential memory leak in setup_base_ctxt() gpio: gpiolib-of: Fix refcount bugs in of_mm_gpiochip_add_data() HID: mcp2221: prevent a buffer overflow in mcp_smbus_write() mmc: cavium-octeon: Add of_node_put() when breaking out of loop mmc: cavium-thunderx: Add of_node_put() when breaking out of loop HID: alps: Declare U1_UNICORN_LEGACY support PCI: tegra194: Fix Root Port interrupt handling PCI: tegra194: Fix link up retry sequence USB: serial: fix tty-port initialized comments usb: cdns3: change place of 'priv_ep' assignment in cdns3_gadget_ep_dequeue(), cdns3_gadget_ep_enable() platform/olpc: Fix uninitialized data in debugfs write RDMA/srpt: Duplicate port name members RDMA/srpt: Introduce a reference count in struct srpt_device RDMA/srpt: Fix a use-after-free mm/mmap.c: fix missing call to vm_unacct_memory in mmap_region selftests: kvm: set rax before vmcall RDMA/mlx5: Add missing check for return value in get namespace flow RDMA/rxe: Fix error unwind in rxe_create_qp() null_blk: fix ida error handling in null_add_dev() nvme: use command_id instead of req->tag in trace_nvme_complete_rq() jbd2: fix outstanding credits assert in jbd2_journal_commit_transaction() ext4: recover csum seed of tmp_inode after migrating to extents jbd2: fix assertion 'jh->b_frozen_data == NULL' failure when journal aborted usb: cdns3: Don't use priv_dev uninitialized in cdns3_gadget_ep_enable() opp: Fix error check in dev_pm_opp_attach_genpd() ASoC: cros_ec_codec: Fix refcount leak in cros_ec_codec_platform_probe ASoC: samsung: Fix error handling in aries_audio_probe ASoC: mediatek: mt8173: Fix refcount leak in mt8173_rt5650_rt5676_dev_probe ASoC: mt6797-mt6351: Fix refcount leak in mt6797_mt6351_dev_probe ASoC: codecs: da7210: add check for i2c_add_driver ASoC: mediatek: mt8173-rt5650: Fix refcount leak in mt8173_rt5650_dev_probe serial: 8250: Export ICR access helpers for internal use serial: 8250_dw: Store LSR into lsr_saved_flags in dw8250_tx_wait_empty() ASoC: codecs: msm8916-wcd-digital: move gains from SX_TLV to S8_TLV ASoC: codecs: wcd9335: move gains from SX_TLV to S8_TLV rpmsg: mtk_rpmsg: Fix circular locking dependency remoteproc: k3-r5: Fix refcount leak in k3_r5_cluster_of_init selftests/livepatch: better synchronize test_klp_callbacks_busy profiling: fix shift too large makes kernel panic ASoC: samsung: h1940_uda1380: include proepr GPIO consumer header powerpc/perf: Optimize clearing the pending PMI and remove WARN_ON for PMI check in power_pmu_disable ASoC: samsung: change gpiod_speaker_power and rx1950_audio from global to static variables tty: n_gsm: Delete gsmtty open SABM frame when config requester tty: n_gsm: fix user open not possible at responder until initiator open tty: n_gsm: fix wrong queuing behavior in gsm_dlci_data_output() tty: n_gsm: fix non flow control frames during mux flow off tty: n_gsm: fix packet re-transmission without open control channel tty: n_gsm: fix race condition in gsmld_write() ASoC: qcom: Fix missing of_node_put() in asoc_qcom_lpass_cpu_platform_probe() remoteproc: qcom: wcnss: Fix handling of IRQs vfio: Remove extra put/gets around vfio_device->group vfio: Simplify the lifetime logic for vfio_device vfio: Split creation of a vfio_device into init and register ops vfio/mdev: Make to_mdev_device() into a static inline vfio/ccw: Do not change FSM state in subchannel event tty: n_gsm: fix wrong T1 retry count handling tty: n_gsm: fix DM command tty: n_gsm: fix missing corner cases in gsmld_poll() iommu/exynos: Handle failed IOMMU device registration properly rpmsg: qcom_smd: Fix refcount leak in qcom_smd_parse_edge kfifo: fix kfifo_to_user() return type lib/smp_processor_id: fix imbalanced instrumentation_end() call remoteproc: sysmon: Wait for SSCTL service to come up mfd: t7l66xb: Drop platform disable callback mfd: max77620: Fix refcount leak in max77620_initialise_fps iommu/arm-smmu: qcom_iommu: Add of_node_put() when breaking out of loop perf tools: Fix dso_id inode generation comparison s390/dump: fix old lowcore virtual vs physical address confusion s390/zcore: fix race when reading from hardware system area ASoC: fsl_easrc: use snd_pcm_format_t type for sample_format ASoC: qcom: q6dsp: Fix an off-by-one in q6adm_alloc_copp() fuse: Remove the control interface for virtio-fs ASoC: audio-graph-card: Add of_node_put() in fail path watchdog: armada_37xx_wdt: check the return value of devm_ioremap() in armada_37xx_wdt_probe() video: fbdev: amba-clcd: Fix refcount leak bugs video: fbdev: sis: fix typos in SiS_GetModeID() ASoC: mchp-spdifrx: disable end of block interrupt on failures powerpc/32: Do not allow selection of e5500 or e6500 CPUs on PPC32 powerpc/pci: Prefer PCI domain assignment via DT 'linux,pci-domain' and alias f2fs: don't set GC_FAILURE_PIN for background GC f2fs: write checkpoint during FG_GC f2fs: fix to remove F2FS_COMPR_FL and tag F2FS_NOCOMP_FL at the same time powerpc/spufs: Fix refcount leak in spufs_init_isolated_loader powerpc/xive: Fix refcount leak in xive_get_max_prio powerpc/cell/axon_msi: Fix refcount leak in setup_msi_msg_address perf symbol: Fail to read phdr workaround kprobes: Forbid probing on trampoline and BPF code areas powerpc/pci: Fix PHB numbering when using opal-phbid genelf: Use HAVE_LIBCRYPTO_SUPPORT, not the never defined HAVE_LIBCRYPTO scripts/faddr2line: Fix vmlinux detection on arm64 sched/deadline: Merge dl_task_can_attach() and dl_cpu_busy() sched, cpuset: Fix dl_cpu_busy() panic due to empty cs->cpus_allowed x86/numa: Use cpumask_available instead of hardcoded NULL check video: fbdev: arkfb: Fix a divide-by-zero bug in ark_set_pixclock() tools/thermal: Fix possible path truncations sched: Fix the check of nr_running at queue wakelist x86/entry: Build thunk_$(BITS) only if CONFIG_PREEMPTION=y video: fbdev: vt8623fb: Check the size of screen before memset_io() video: fbdev: arkfb: Check the size of screen before memset_io() video: fbdev: s3fb: Check the size of screen before memset_io() scsi: zfcp: Fix missing auto port scan and thus missing target ports scsi: qla2xxx: Fix discovery issues in FC-AL topology scsi: qla2xxx: Turn off multi-queue for 8G adapters scsi: qla2xxx: Fix erroneous mailbox timeout after PCI error injection scsi: qla2xxx: Fix losing FCP-2 targets on long port disable with I/Os scsi: qla2xxx: Fix losing FCP-2 targets during port perturbation tests x86/bugs: Enable STIBP for IBPB mitigated RETBleed ftrace/x86: Add back ftrace_expected assignment x86/olpc: fix 'logical not is only applied to the left hand side' posix-cpu-timers: Cleanup CPU timers before freeing them during exec Input: gscps2 - check return value of ioremap() in gscps2_probe() __follow_mount_rcu(): verify that mount_lock remains unchanged spmi: trace: fix stack-out-of-bound access in SPMI tracing functions drm/i915/dg1: Update DMC_DEBUG3 register drm/mediatek: Allow commands to be sent during video mode drm/mediatek: Keep dsi as LP00 before dcs cmds transfer HID: Ignore battery for Elan touchscreen on HP Spectre X360 15-df0xxx HID: hid-input: add Surface Go battery quirk drm/vc4: drv: Adopt the dma configuration from the HVS or V3D component mtd: rawnand: Add a helper to clarify the interface configuration mtd: rawnand: arasan: Check the proposed data interface is supported mtd: rawnand: Add NV-DDR timings mtd: rawnand: arasan: Fix a macro parameter mtd: rawnand: arasan: Support NV-DDR interface mtd: rawnand: arasan: Fix clock rate in NV-DDR usbnet: smsc95xx: Don't clear read-only PHY interrupt usbnet: smsc95xx: Avoid link settings race on interrupt reception firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails intel_th: pci: Add Meteor Lake-P support intel_th: pci: Add Raptor Lake-S PCH support intel_th: pci: Add Raptor Lake-S CPU support KVM: set_msr_mce: Permit guests to ignore single-bit ECC errors KVM: x86: Signal #GP, not -EPERM, on bad WRMSR(MCi_CTL/STATUS) iommu/vt-d: avoid invalid memory access via node_online(NUMA_NO_NODE) PCI/AER: Write AER Capability only when we control it PCI/ERR: Bind RCEC devices to the Root Port driver PCI/ERR: Rename reset_link() to reset_subordinates() PCI/ERR: Simplify by using pci_upstream_bridge() PCI/ERR: Simplify by computing pci_pcie_type() once PCI/ERR: Use "bridge" for clarity in pcie_do_recovery() PCI/ERR: Avoid negated conditional for clarity PCI/ERR: Add pci_walk_bridge() to pcie_do_recovery() PCI/ERR: Recover from RCEC AER errors PCI/AER: Iterate over error counters instead of error strings serial: 8250: Dissociate 4MHz Titan ports from Oxford ports serial: 8250: Correct the clock for OxSemi PCIe devices serial: 8250_pci: Refactor the loop in pci_ite887x_init() serial: 8250_pci: Replace dev_*() by pci_*() macros serial: 8250: Fold EndRun device support into OxSemi Tornado code dm writecache: set a default MAX_WRITEBACK_JOBS kexec, KEYS, s390: Make use of built-in and secondary keyring for signature verification dm thin: fix use-after-free crash in dm_sm_register_threshold_callback timekeeping: contribute wall clock to rng on time change um: Allow PM with suspend-to-idle btrfs: reject log replay if there is unsupported RO compat flag btrfs: reset block group chunk force if we have to wait ACPI: CPPC: Do not prevent CPPC from working in the future KVM: VMX: Drop guest CPUID check for VMXE in vmx_set_cr4() KVM: VMX: Drop explicit 'nested' check from vmx_set_cr4() KVM: SVM: Drop VMXE check from svm_set_cr4() KVM: x86: Move vendor CR4 validity check to dedicated kvm_x86_ops hook KVM: nVMX: Inject #UD if VMXON is attempted with incompatible CR0/CR4 KVM: x86/pmu: preserve IA32_PERF_CAPABILITIES across CPUID refresh KVM: x86/pmu: Use binary search to check filtered events KVM: x86/pmu: Use different raw event masks for AMD and Intel KVM: x86/pmu: Introduce the ctrl_mask value for fixed counter KVM: VMX: Mark all PERF_GLOBAL_(OVF)_CTRL bits reserved if there's no vPMU KVM: x86/pmu: Ignore pmu->global_ctrl check if vPMU doesn't support global_ctrl xen-blkback: fix persistent grants negotiation xen-blkback: Apply 'feature_persistent' parameter when connect xen-blkfront: Apply 'feature_persistent' parameter when connect KEYS: asymmetric: enforce SM2 signature use pkey algo tpm: eventlog: Fix section mismatch for DEBUG_SECTION_MISMATCH tracing: Use a struct alignof to determine trace event field alignment ext4: check if directory block is within i_size ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h ext4: fix warning in ext4_iomap_begin as race between bmap and write ext4: make sure ext4_append() always allocates new block ext4: fix use-after-free in ext4_xattr_set_entry ext4: update s_overhead_clusters in the superblock during an on-line resize ext4: fix extent status tree race in writeback error recovery path ext4: correct max_inline_xattr_value_size computing ext4: correct the misjudgment in ext4_iget_extra_inode dm raid: fix address sanitizer warning in raid_resume dm raid: fix address sanitizer warning in raid_status net_sched: cls_route: remove from list when handle is 0 KVM: Add infrastructure and macro to mark VM as bugged KVM: x86: Check lapic_in_kernel() before attempting to set a SynIC irq KVM: x86: Avoid theoretical NULL pointer dereference in kvm_irq_delivery_to_apic_fast() mac80211: fix a memory leak where sta_info is not freed tcp: fix over estimation in sk_forced_mem_schedule() Revert "mwifiex: fix sleep in atomic context bugs caused by dev_coredumpv" drm/bridge: tc358767: Fix (e)DP bridge endpoint parsing in dedicated function drm/vc4: change vc4_dma_range_matches from a global to static Revert "net: usb: ax88179_178a needs FLAG_SEND_ZLP" Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm regression mtd: rawnand: arasan: Prevent an unsupported configuration kvm: x86/pmu: Fix the compare function used by the pmu event filter tee: add overflow check in register_shm_helper() net/9p: Initialize the iounit field during fid creation net_sched: cls_route: disallow handle of 0 sched/fair: Fix fault in reweight_entity btrfs: only write the sectors in the vertical stripe which has data stripes btrfs: raid56: don't trust any cached sector in __raid56_parity_recover() Linux 5.10.137 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I5775ddfad6460c5a737b1ad3f8e0b8f798338786	2022-08-29 16:53:14 +02:00
Guenter Roeck	58275db3c7	lib/list_debug.c: Detect uninitialized lists ... [ Upstream commit 0cc011c576aaa4de505046f7a6c90933d7c749a9 ] In some circumstances, attempts are made to add entries to or to remove entries from an uninitialized list. A prime example is amdgpu_bo_vm_destroy(): It is indirectly called from ttm_bo_init_reserved() if that function fails, and tries to remove an entry from a list. However, that list is only initialized in amdgpu_bo_create_vm() after the call to ttm_bo_init_reserved() returned success. This results in crashes such as BUG: kernel NULL pointer dereference, address: 0000000000000000 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 0 P4D 0 Oops: 0000 [#1] PREEMPT SMP NOPTI CPU: 1 PID: 1479 Comm: chrome Not tainted 5.10.110-15768-g29a72e65dae5 Hardware name: Google Grunt/Grunt, BIOS Google_Grunt.11031.149.0 07/15/2020 RIP: 0010:__list_del_entry_valid+0x26/0x7d ... Call Trace: amdgpu_bo_vm_destroy+0x48/0x8b ttm_bo_init_reserved+0x1d7/0x1e0 amdgpu_bo_create+0x212/0x476 ? amdgpu_bo_user_destroy+0x23/0x23 ? kmem_cache_alloc+0x60/0x271 amdgpu_bo_create_vm+0x40/0x7d amdgpu_vm_pt_create+0xe8/0x24b ... Check if the list's prev and next pointers are NULL to catch such problems. Link: https://lkml.kernel.org/r/20220531222951.92073-1-linux@roeck-us.net Signed-off-by: Guenter Roeck <linux@roeck-us.net> Cc: Steven Rostedt <rostedt@goodmis.org> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-08-25 11:38:18 +02:00
Tetsuo Handa	3487aa558a	lib/smp_processor_id: fix imbalanced instrumentation_end() call ... [ Upstream commit bd27acaac24e4b252ee28dddcabaee80456d0faf ] Currently instrumentation_end() won't be called if printk_ratelimit() returned false. Link: https://lkml.kernel.org/r/a636d8e0-ad32-5888-acac-671f7f553bb3@I-love.SAKURA.ne.jp Fixes: 126f21f0e8 ("lib/smp_processor_id: Move it into noinstr section") Signed-off-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp> Cc: Thomas Gleixner <tglx@linutronix.de> Cc: Alexandre Chartre <alexandre.chartre@oracle.com> Cc: Peter Zijlstra <peterz@infradead.org> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-08-21 15:16:08 +02:00
Joe Lawrence	3bf64b9cc6	selftests/livepatch: better synchronize test_klp_callbacks_busy ... [ Upstream commit 55eb9a6c8bf3e2099863118ef53e02d9f44f85a8 ] The test_klp_callbacks_busy module conditionally blocks a future livepatch transition by busy waiting inside its workqueue function, busymod_work_func(). After scheduling this work, a test livepatch is loaded, introducing the transition under test. Both events are marked in the kernel log for later verification, but there is no synchronization to ensure that busymod_work_func() logs its function entry message before subsequent selftest commands log their own messages. This can lead to a rare test failure due to unexpected ordering like: # --- expected # +++ result # @@ -1,7 +1,7 @@ # % modprobe test_klp_callbacks_busy block_transition=Y # test_klp_callbacks_busy: test_klp_callbacks_busy_init # -test_klp_callbacks_busy: busymod_work_func enter # % modprobe test_klp_callbacks_demo # +test_klp_callbacks_busy: busymod_work_func enter # livepatch: enabling patch 'test_klp_callbacks_demo' # livepatch: 'test_klp_callbacks_demo': initializing patching transition # test_klp_callbacks_demo: pre_patch_callback: vmlinux Force the module init function to wait until busymod_work_func() has started (and logged its message), before exiting to the next selftest steps. Fixes: 547840bd5a ("selftests/livepatch: simplify test-klp-callbacks busy target tests") Signed-off-by: Joe Lawrence <joe.lawrence@redhat.com> Reviewed-by: Petr Mladek <pmladek@suse.com> Signed-off-by: Petr Mladek <pmladek@suse.com> Link: https://lore.kernel.org/r/20220602203233.979681-1-joe.lawrence@redhat.com Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-08-21 15:16:05 +02:00
Bartosz Golaszewski	26a10aef28	lib: bitmap: provide devm_bitmap_alloc() and devm_bitmap_zalloc() ... [ Upstream commit e829c2e4744850bab4d8f8ffebd00df10b4c6c2b ] Provide managed variants of bitmap_alloc() and bitmap_zalloc(). Signed-off-by: Bartosz Golaszewski <bgolaszewski@baylibre.com> Reviewed-by: Andy Shevchenko <andriy.shevchenko@linux.intel.com> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-08-21 15:15:45 +02:00
Bartosz Golaszewski	1238da5f32	lib: bitmap: order includes alphabetically ... [ Upstream commit c13656b904b6173aad723d9680a81c60de2f5edc ] For better readability and maintenance: order the includes in bitmap source files alphabetically. Signed-off-by: Bartosz Golaszewski <bgolaszewski@baylibre.com> Reviewed-by: Andy Shevchenko <andriy.shevchenko@linux.intel.com> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-08-21 15:15:45 +02:00