android_kernel_xiaomi_sm8450

Author	SHA1	Message	Date
Greg Kroah-Hartman	131b12d50f	Merge tag 'android12-5.10.110_r01' into android12-5.10 This is the merge of the upstream LTS release of 5.4.110 into the android12-5.10 branch. It contains the following commits: `e08dd85cc9` ANDROID: fix up abi issue with struct snd_pcm_runtime, again `8f4bd2a63f` Revert "coredump: Snapshot the vmas in do_coredump" `b7dbb1ee1f` Revert "coredump: Remove the WARN_ON in dump_vma_snapshot" `5f24894332` Revert "coredump: Use the vma snapshot in fill_files_note" `c4eb663fca` Revert "pstore: Don't use semaphores in always-atomic-context code" `562c3bd65c` Revert "PCI: Reduce warnings on possible RW1C corruption" `0038e1f40c` ANDROID: GKI: fix crc issue with commit `ce1927b8cf` ("block: don't merge across cgroup boundaries if blkcg is enabled") `62fa3399b4` ANDROID: remove CONFIG_HW_RANDOM_CAVIUM from arm64 gki_defconfig `95f4203fc9` Merge 5.10.110 into android12-5.10-lts `3238bffaf9` Linux 5.10.110 `cf342cbfb3` PCI: xgene: Revert "PCI: xgene: Use inbound resources for setup" `a25864c5bc` arm64: Do not defer reserve_crashkernel() for platforms with no DMA memory zones `558564db44` coredump: Use the vma snapshot in fill_files_note `b7933f145a` coredump/elf: Pass coredump_params into fill_note_info `b043ae637a` coredump: Remove the WARN_ON in dump_vma_snapshot `936c8be4d1` coredump: Snapshot the vmas in do_coredump `5318cdf4fd` can: usb_8dev: usb_8dev_start_xmit(): fix double dev_kfree_skb() in error path `869016a293` can: m_can: m_can_tx_handler(): fix use after free of skb `e90518d10c` KVM: x86/mmu: do compare-and-exchange of gPTE via the user address `e36c45263a` openvswitch: Fixed nd target mask field in the flow dump. `415edc68b6` docs: sysctl/kernel: add missing bit to panic_print `272c74323d` um: Fix uml_mconsole stop/go `c0a6a54738` ARM: dts: spear13xx: Update SPI dma properties `ea3912af8b` ARM: dts: spear1340: Update serial node properties `74f7971985` ASoC: topology: Allow TLV control to be either read or write `3ca47556d9` ubi: fastmap: Return error code if memory allocation fails in add_aeb() `7704f243cb` dt-bindings: spi: mxic: The interrupt property is not mandatory `648ab1dcc1` dt-bindings: mtd: nand-controller: Fix a comment in the examples `71917e45e1` dt-bindings: mtd: nand-controller: Fix the reg property description `73f2f37417` bpf: Fix comment for helper bpf_current_task_under_cgroup() `90805175a2` bpf: Adjust BPF stack helper functions to accommodate skip > 0 `86489492e8` mm/usercopy: return 1 from hardened_usercopy __setup() handler `81a04b9a32` mm/memcontrol: return 1 from cgroup.memory __setup() handler `f321621f5c` ARM: 9187/1: JIVE: fix return value of __setup handler `d57feed3b1` mm/mmap: return 1 from stack_guard_gap __setup() handler `73f7cbb151` batman-adv: Check ptr for NULL before reducing its refcnt `f6da750bfa` ASoC: soc-compress: Change the check for codec_dai `d3f786b7cf` staging: mt7621-dts: fix pinctrl-0 items to be size-1 items on ethernet `12e380bb6f` proc: bootconfig: Add null pointer check `90ec1b1538` can: isotp: restore accidentally removed MSG_PEEK feature `16960ac92b` platform/chrome: cros_ec_typec: Check for EC device `e5b681822c` ACPI: CPPC: Avoid out of bounds access when parsing _CPC data `785a53373c` riscv module: remove (NOLOAD) `b27de7011c` io_uring: fix memory leak of uid in files registration `20499ed3c0` ARM: iop32x: offset IRQ numbers by 1 `432b057f8e` ubi: Fix race condition between ctrl_cdev_ioctl and ubi_cdev_ioctl `f28a857a61` ASoC: mediatek: mt6358: add missing EXPORT_SYMBOLs `ecfc3f8a63` pinctrl: nuvoton: npcm7xx: Use %zu printk format for ARRAY_SIZE() `503868a7c0` pinctrl: nuvoton: npcm7xx: Rename DS() macro to DSTR() `d9afc5146b` watchdog: rti-wdt: Add missing pm_runtime_disable() in probe function `402b53dc7c` pinctrl: pinconf-generic: Print arguments for bias-pull-* `7169f60110` watch_queue: Free the page array when watch_queue is dismantled `e64dc94990` crypto: arm/aes-neonbs-cbc - Select generic cbc and aes `a16f5ae8ad` mailbox: imx: fix wakeup failure from freeze mode `051360e513` rxrpc: Fix call timer start racing with call destruction `a94d98e06e` net: hns3: fix software vlan talbe of vlan 0 inconsistent with hardware `c73af4bc8a` gfs2: Make sure FITRIM minlen is rounded up to fs block size `33c204266c` rtc: check if __rtc_read_time was successful `381636f33f` XArray: Update the LRU list in xas_split() `3b9fabe8f6` can: mcp251xfd: mcp251xfd_register_get_dev_id(): fix return of error value `ef0acc5141` can: mcba_usb: properly check endpoint type `0801a51d79` can: mcba_usb: mcba_usb_start_xmit(): fix double dev_kfree_skb in error path `1ac49c8fd4` XArray: Fix xas_create_range() when multi-order entry present `49f77ab50a` wireguard: socket: ignore v6 endpoints when ipv6 is disabled `096f9d35ca` wireguard: socket: free skb in send6 when ipv6 is disabled `cd032f218c` wireguard: queueing: use CFI-safe ptr_ring cleanup function `8a0c70c238` ubifs: rename_whiteout: correct old_dir size computing `c34ae24a25` ubifs: Fix to add refcount once page is set private `07a209fade` ubifs: Fix read out-of-bounds in ubifs_wbuf_write_nolock() `d07a242169` ubifs: setflags: Make dirtied_ino_d 8 bytes aligned `13b2a8151e` ubifs: Add missing iput if do_tmpfile() failed in rename whiteout `83e42a7842` ubifs: Fix deadlock in concurrent rename whiteout and inode writeback `a90e2dbe66` ubifs: rename_whiteout: Fix double free for whiteout_ui->data `0c307349fe` ASoC: SOF: Intel: Fix NULL ptr dereference when ENOMEM `0fb470eb48` KVM: SVM: fix panic on out-of-bounds guest IRQ `cd8c2d7c7c` KVM: x86: fix sending PV IPI `eccfee4494` KVM: Prevent module exit until all VMs are freed `09c771c45c` KVM: x86: Forbid VMM to set SYNIC/STIMER MSRs when SynIC wasn't activated `aea4ffdcf3` platform: chrome: Split trace include file `d3a913ba1f` scsi: qla2xxx: Use correct feature type field during RFF_ID processing `633450063c` scsi: qla2xxx: Reduce false trigger to login `dd48727cab` scsi: qla2xxx: Fix N2N inconsistent PLOGI `0910a791a6` scsi: qla2xxx: Fix missed DMA unmap for NVMe ls requests `f296e888e9` scsi: qla2xxx: Fix hang due to session stuck `edea037716` scsi: qla2xxx: Fix incorrect reporting of task management failure `9dc104edd7` scsi: qla2xxx: Fix disk failure to rediscover `f97316dd39` scsi: qla2xxx: Suppress a kernel complaint in qla_create_qpair() `0e4a89efc2` scsi: qla2xxx: Check for firmware dump already collected `ef10a7530c` scsi: qla2xxx: Add devids and conditionals for 28xx `bad77c9a47` scsi: qla2xxx: Fix device reconnect in loop topology `8b52e20c22` scsi: qla2xxx: Fix warning for missing error code `7c9745421d` scsi: qla2xxx: Fix wrong FDMI data for 64G adapter `7fef50214d` scsi: qla2xxx: Fix scheduling while atomic `c45147018d` scsi: qla2xxx: Fix stuck session in gpdb `031547f4c6` powerpc: Fix build errors with newer binutils `68fa67e939` powerpc/lib/sstep: Fix build errors with newer binutils `ad806b4022` powerpc/lib/sstep: Fix 'sthcx' instruction `f39a330939` powerpc/kasan: Fix early region not updated correctly `89e5a42687` KVM: x86/mmu: Check for present SPTE when clearing dirty bit in TDP MMU `a3ad453008` ALSA: hda/realtek: Add alc256-samsung-headphone fixup `aa2ad067cd` media: atomisp: fix bad usage at error handling logic `2412a5d294` mmc: host: Return an error when ->enable_sdio_irq() ops is missing `808990afd8` media: hdpvr: initialize dev->worker at hdpvr_register_videodev `32582f82df` media: Revert "media: em28xx: add missing em28xx_close_extension" `b1c2857752` video: fbdev: sm712fb: Fix crash in smtcfb_write() `e7bb29df2a` ARM: mmp: Fix failure to remove sram device `add823a9a5` ARM: tegra: tamonten: Fix I2C3 pad setting `08ec8450f3` lib/test_lockup: fix kernel pointer check for separate address spaces `40a5c93a74` uaccess: fix type mismatch warnings from access_ok() `a49b687a75` media: cx88-mpeg: clear interrupt status register before streaming video `4606350268` ASoC: soc-core: skip zero num_dai component in searching dai name `a840fc067e` ARM: dts: bcm2711: Add the missing L1/L2 cache information `681a317034` video: fbdev: udlfb: replace snprintf in show functions with sysfs_emit `a7c624abf6` video: fbdev: omapfb: panel-tpo-td043mtea1: Use sysfs_emit() instead of snprintf() `543dae0a46` video: fbdev: omapfb: panel-dsi-cm: Use sysfs_emit() instead of snprintf() `910715c4b4` arm64: defconfig: build imx-sdma as a module `14df2556a1` ARM: dts: imx7: Use audio_mclk_post_div instead audio_mclk_root_clk `c241cfd0a5` ARM: ftrace: avoid redundant loads or clobbering IP `41082d6432` media: atomisp: fix dummy_ptr check to avoid duplicate active_bo `b554196e6d` media: atomisp_gmin_platform: Add DMI quirk to not turn AXP ELDO2 regulator off on some boards `370b50492e` ASoC: madera: Add dependencies on MFD `0020667edc` ARM: dts: bcm2837: Add the missing L1/L2 cache information `f040c08102` ARM: dts: qcom: fix gic_irq_domain_translate warnings for msm8960 `da210b1b55` video: fbdev: omapfb: acx565akm: replace snprintf with sysfs_emit `8c7e2141fb` video: fbdev: cirrusfb: check pixclock to avoid divide by zero `1e33f19746` video: fbdev: w100fb: Reset global state `08dff48201` video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow `99e3f83539` media: ir_toy: free before error exiting `d658178b5a` media: staging: media: zoran: fix various V4L2 compliance errors `bafec1a6ba` media: staging: media: zoran: calculate the right buffer number for zoran_reap_stat_com `bd01629315` media: staging: media: zoran: move videodev alloc `b230f2d944` ntfs: add sanity check on allocation size `f7e8aff062` f2fs: compress: fix to print raw data size in error path of lz4 decompression `d91d1e681c` NFSD: Fix nfsd_breaker_owns_lease() return values `498b7088db` f2fs: fix to do sanity check on curseg->alloc_type `330d0e44fc` ext4: don't BUG if someone dirty pages without asking ext4 first `cd6d719534` ext4: fix ext4_mb_mark_bb() with flex_bg with fast_commit `69d2421b55` ext4: correct cluster len and clusters changed accounting in ext4_mb_mark_bb `ecd384c436` locking/lockdep: Iterate lock_classes directly when reading lockdep files `3ad817f1bd` spi: tegra20: Use of_device_get_match_data() `1c200c8bce` nvme-tcp: lockdep: annotate in-kernel sockets `7e4967e913` parisc: Fix handling off probe non-access faults `ede1ef1a7d` PM: core: keep irq flags in device_pm_check_callbacks() `227718c8bb` ACPI/APEI: Limit printable size of BERT table data `cc051f497e` Revert "Revert "block, bfq: honor already-setup queue merges"" `1b69302bfa` lib/raid6/test/Makefile: Use $(pound) instead of \# for Make 4.3 `1b87ce6a77` ACPICA: Avoid walking the ACPI Namespace if it is not there `df6e00b1a5` bfq: fix use-after-free in bfq_dispatch_request `dd85ed4af8` fs/binfmt_elf: Fix AT_PHDR for unusual ELF files `9fc899ce5a` irqchip/nvic: Release nvic_base upon failure `4bbd910de1` irqchip/qcom-pdc: Fix broken locking `f038185b6a` Fix incorrect type in assignment of ipv6 port for audit `012c572007` loop: use sysfs_emit() in the sysfs xxx show() `448857f580` selinux: allow FIOCLEX and FIONCLEX with policy capability `4b9b60b5bf` selinux: use correct type for context length `7507ead1e9` block, bfq: don't move oom_bfqq `79b16d00de` pinctrl: npcm: Fix broken references to chip->parent_device `9d1d8e5e42` gcc-plugins/stackleak: Exactly match strings instead of prefixes `b0f2f89d74` regulator: rpi-panel: Handle I2C errors/timing to the Atmel `2784604c8c` LSM: general protection fault in legacy_parse_param `e600b5973e` fs: fix fd table size alignment properly `327f07e370` lib/test: use after free in register_test_dev_kmod() `00d2b9fe5e` fs: fd tables have to be multiples of BITS_PER_LONG `1752fcd404` net: dsa: bcm_sf2_cfp: fix an incorrect NULL check on list iterator `edb91a475d` NFSv4/pNFS: Fix another issue with a list iterator pointing to the head `5c94b6205e` net/x25: Fix null-ptr-deref caused by x25_disconnect `4896c308a5` qlcnic: dcb: default to returning -EOPNOTSUPP `2165d0ebfb` selftests: test_vxlan_under_vrf: Fix broken test case `f98dc124a4` net: phy: broadcom: Fix brcm_fet_config_init() `3e7a483af3` net: hns3: fix bug when PF set the duplicate MAC address for VFs `3eb92660e6` net: enetc: report software timestamping via SO_TIMESTAMPING `e9445a7a59` xen: fix is_xen_pmu() `af0c3ced24` clk: Initialize orphan req_rate `845e734f97` clk: qcom: gcc-msm8994: Fix gpll4 width `e2a2625392` kdb: Fix the putarea helper function `a9fa7d48a1` NFSv4.1: don't retry BIND_CONN_TO_SESSION on session error `8cd30d28da` netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options `fbd56a61ce` jfs: fix divide error in dbNextAG `acb96e62e6` driver core: dd: fix return value of __setup handler `89748be18f` firmware: google: Properly state IOMEM dependency `3d934d7b90` kgdbts: fix return value of __setup handler `f65ba8b988` serial: 8250: fix XOFF/XON sending when DMA is used `45e95a7bf8` kgdboc: fix return value of __setup handler `96038b1cf4` tty: hvc: fix return value of __setup handler `566e30289d` pinctrl/rockchip: Add missing of_node_put() in rockchip_pinctrl_probe `669b05ff43` pinctrl: nomadik: Add missing of_node_put() in nmk_pinctrl_probe `9d095fe2fb` pinctrl: mediatek: paris: Skip custom extra pin config dump for virtual GPIOs `861946289d` pinctrl: mediatek: paris: Fix pingroup pin config state readback `7675fb2aaf` pinctrl: mediatek: paris: Fix "argument" argument type for mtk_pinconf_get() `901e192ac9` pinctrl: mediatek: paris: Fix PIN_CONFIG_BIAS_* readback `72ea0fefea` pinctrl: mediatek: Fix missing of_node_put() in mtk_pctrl_init `fddbfe43bf` staging: mt7621-dts: fix GB-PC2 devicetree `00e0739ca1` staging: mt7621-dts: fix pinctrl properties for ethernet `47c31fe8ca` staging: mt7621-dts: fix formatting `59ec187d7c` staging: mt7621-dts: fix LEDs and pinctrl on GB-PC1 devicetree `942f68bf29` NFS: remove unneeded check in decode_devicenotify_args() `e025c66387` clk: tegra: tegra124-emc: Fix missing put_device() call in emc_ensure_emc_driver `54c8128297` clk: clps711x: Terminate clk_div_table with sentinel element `9ff533033d` clk: loongson1: Terminate clk_div_table with sentinel element `bb680cabf2` clk: actions: Terminate clk_div_table with sentinel element `431f8a9cec` nvdimm/region: Fix default alignment for small regions `f7210ca29a` remoteproc: qcom_q6v5_mss: Fix some leaks in q6v5_alloc_memory_region `7a494580a8` remoteproc: qcom_wcnss: Add missing of_node_put() in wcnss_alloc_memory_region `5c1d484d96` remoteproc: qcom: Fix missing of_node_put in adsp_alloc_memory_region `f95fd61dd8` dmaengine: hisi_dma: fix MSI allocate fail when reload hisi_dma `d047d68ff0` clk: qcom: clk-rcg2: Update the frac table for pixel clock `334720f418` clk: qcom: clk-rcg2: Update logic to calculate D value for RCG `639744b242` clk: at91: sama7g5: fix parents of PDMCs' GCLK `0553ecbce9` clk: imx7d: Remove audio_mclk_root_clk `867258d3f3` dma-debug: fix return value of __setup handlers `2f3885514e` NFS: Return valid errors from nfs2/3_decode_dirent() `7b59afe84a` habanalabs: Add check for pci_enable_device `afcbc63752` iio: adc: Add check for devm_request_threaded_irq `df2dc4cf71` serial: 8250: Fix race condition in RTS-after-send handling `469ce5119f` NFS: Use of mapping_set_error() results in spurious errors `659fe4d653` serial: 8250_lpss: Balance reference count for PCI DMA device `0aebb3944a` serial: 8250_mid: Balance reference count for PCI DMA device `c92bd51313` phy: dphy: Correct lpx parameter and its derivatives(ta_{get,go,sure}) `80805f555e` clk: qcom: ipq8074: Use floor ops for SDCC1 clock `fd2601e366` pinctrl: renesas: checker: Fix miscalculation of number of states `c5cf977515` pinctrl: renesas: r8a77470: Reduce size for narrow VIN1 channel `b5db33a81e` staging:iio:adc:ad7280a: Fix handing of device address bit reversing. `f5b01abf5f` iio: mma8452: Fix probe failing when an i2c_device_id is used `8b89c9e68a` clk: qcom: ipq8074: fix PCI-E clock oops `a70d5dbe2e` soundwire: intel: fix wrong register name in intel_shim_wake `091704a9a7` cpufreq: qcom-cpufreq-nvmem: fix reading of PVS Valid fuse `f90ad94322` misc: alcor_pci: Fix an error handling path `553541c453` fsi: Aspeed: Fix a potential double free `cb212c3f0d` fsi: aspeed: convert to devm_platform_ioremap_resource `c0b3c06414` pwm: lpc18xx-sct: Initialize driver data and hardware before pwmchip_add() `2cd05c38a2` mxser: fix xmit_buf leak in activate when LSR == 0xff `8513c93ead` mfd: asic3: Add missing iounmap() on error asic3_mfd_probe `084be6309f` tipc: fix the timer expires after interval 100ms `5d8162371c` openvswitch: always update flow key after nat `4593c76a65` tcp: ensure PMTU updates are processed during fastopen `b26091a020` net: bcmgenet: Use stronger register read/writes to assure ordering `9088614323` PCI: Avoid broken MSI on SB600 USB devices `75a4a97b74` selftests/bpf/test_lirc_mode2.sh: Exit with proper code `0d3ad6142a` i2c: mux: demux-pinctrl: do not deactivate a master that is not active `c483f8002d` i2c: meson: Fix wrong speed use from probe `b089836218` af_netlink: Fix shift out of bounds in group mask calculation `40f3b8dada` ipv4: Fix route lookups when handling ICMP redirects and PMTU updates `70a6cf749d` Bluetooth: btmtksdio: Fix kernel oops in btmtksdio_interrupt `b441fcdff2` Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed `876cfe1380` selftests/bpf: Fix error reporting from sock_fields programs `ac1ec6f319` bareudp: use ipv6_mod_enabled to check if IPv6 enabled `c037e13539` can: isotp: support MSG_TRUNC flag when reading from socket `f402c49865` can: isotp: return -EADDRNOTAVAIL when reading from unbound socket `8a9d996d4e` USB: storage: ums-realtek: fix error code in rts51x_read_mem() `f9a6661009` samples/bpf, xdpsock: Fix race when running for fix duration of time `cd84ea3920` bpf, sockmap: Fix double uncharge the mem of sk_msg `7b812a369e` bpf, sockmap: Fix more uncharged while msg has more_data `bec34a91eb` bpf, sockmap: Fix memleak in tcp_bpf_sendmsg while sk msg is full `c98d903ff9` RDMA/mlx5: Fix memory leak in error flow for subscribe event routine `a3587259ae` mtd: rawnand: atmel: fix refcount issue in atmel_nand_controller_init `fa3d444245` MIPS: pgalloc: fix memory leak caused by pgd_free() `8c4808ff9e` MIPS: RB532: fix return value of __setup handler `ef1728e3cb` mips: cdmm: Fix refcount leak in mips_cdmm_phys_base `315772133a` ath10k: Fix error handling in ath10k_setup_msa_resources `71f311b123` vxcan: enable local echo for sent CAN frames `3c2a397849` powerpc: 8xx: fix a return value error in mpc8xx_pic_init `956fab99ad` platform/x86: huawei-wmi: check the return value of device_create_file() `1ba28cb692` selftests/bpf: Make test_lwt_ip_encap more stable and faster `08ab406781` libbpf: Unmap rings when umem deleted `6fa8edfc90` mfd: mc13xxx: Add check for mc13xxx_irq_request `bcf93175ed` powerpc/sysdev: fix incorrect use to determine if list is empty `ab0a335b54` mips: DEC: honor CONFIG_MIPS_FP_SUPPORT=n `bbd91cdb62` net: axienet: fix RX ring refill allocation failure handling `9ec698984d` PCI: Reduce warnings on possible RW1C corruption `a84cb039d2` IB/hfi1: Allow larger MTU without AIP `48d23ef901` power: supply: wm8350-power: Add missing free in free_charger_irq `9d3dab40af` power: supply: wm8350-power: Handle error for wm8350_register_irq `5cf1371628` i2c: xiic: Make bus names unique `f01e08083c` hv_balloon: rate-limit "Unhandled message" warning `ba2c6e353b` KVM: x86/emulator: Defer not-present segment check in __load_segment_descriptor() `fa9089949d` KVM: x86: Fix emulation in writing cr8 `3e7e73ae2b` powerpc/Makefile: Don't pass -mcpu=powerpc64 when building 32-bit `05abd49972` powerpc/mm/numa: skip NUMA_NO_NODE onlining in parse_numa_properties() `3e04a837db` libbpf: Skip forward declaration when counting duplicated type names `6bb107332d` gpu: host1x: Fix a memory leak in 'host1x_remove()' `d1c7759304` bpf, arm64: Feed byte-offset into bpf line info `694398af5f` bpf, arm64: Call build_prologue() first in first JIT pass `06a0001366` drm/bridge: cdns-dsi: Make sure to to create proper aliases for dt `a3d53f0005` scsi: hisi_sas: Change permission of parameter prot_mask `705c70399e` power: supply: bq24190_charger: Fix bq24190_vbus_is_enabled() wrong false return `1e06710c43` drm/tegra: Fix reference leak in tegra_dsi_ganged_probe `9ffa07c699` ext2: correct max file size computing `60605acf5b` TOMOYO: fix __setup handlers return values `adb7c8d1de` drm/amd/display: Remove vupdate_int_entry definition `e462b0f518` RDMA/mlx5: Fix the flow of a miss in the allocation of a cache ODP MR `279f318bd7` scsi: pm8001: Fix abort all task initialization `780c668a2d` scsi: pm8001: Fix NCQ NON DATA command completion handling `f7a3f9e4e8` scsi: pm8001: Fix NCQ NON DATA command task initialization `f76bbee39e` scsi: pm8001: Fix le32 values handling in pm80xx_chip_sata_req() `6bc86bca35` scsi: pm8001: Fix le32 values handling in pm80xx_chip_ssp_io_req() `27ccdcaa01` scsi: pm8001: Fix payload initialization in pm80xx_encrypt_update() `6c0e850c22` scsi: pm8001: Fix le32 values handling in pm80xx_set_sas_protocol_timer_config() `edde1ede76` scsi: pm8001: Fix payload initialization in pm80xx_set_thermal_config() `257a55622c` scsi: pm8001: Fix command initialization in pm8001_chip_ssp_tm_req() `f55a7bc38f` scsi: pm8001: Fix command initialization in pm80XX_send_read_log() `5349cde1df` dm crypt: fix get_key_size compiler warning if !CONFIG_KEYS `d4862bea08` drm/msm/dpu: fix dp audio condition `7b52fb813c` drm/msm/dpu: add DSPP blocks teardown `413c62697b` drm/msm/dp: populate connector of struct dp_panel `441a83ff27` iwlwifi: mvm: Fix an error code in iwl_mvm_up() `c12692c3e9` iwlwifi: Fix -EIO error code that is never returned `ec376f5c11` dax: make sure inodes are flushed before destroy cache `5e6b030ac3` IB/cma: Allow XRC INI QPs to set their local ACK timeout `9c384e1afa` drm/amd/display: Add affected crtcs to atomic state for dsc mst unplug `80b96ac9d2` drm/amd/pm: enable pm sysfs write for one VF mode `06e778d184` iommu/ipmmu-vmsa: Check for error num after setting mask `ab63b24ae6` HID: i2c-hid: fix GET/SET_REPORT for unnumbered reports `879356a6a0` power: supply: ab8500: Fix memory leak in ab8500_fg_sysfs_init `f03ef518c1` drm/bridge: dw-hdmi: use safe format when first in bridge chain `e0e25e131d` PCI: aardvark: Fix reading PCI_EXP_RTSTA_PME bit on emulated bridge `b1af8b9ec0` livepatch: Fix build failure on 32 bits processors `6f095441f8` scripts/dtc: Call pkg-config POSIXly correct `080822563b` net: dsa: mv88e6xxx: Enable port policy support on 6097 `2ac4f049db` mt76: mt7615: check sta_rates pointer in mt7615_sta_rate_tbl_update `2430af1241` mt76: mt7603: check sta_rates pointer in mt7603_sta_rate_tbl_update `232c1cc986` mt76: mt7915: use proper aid value in mt7915_mcu_sta_basic_tlv `253cc4aafc` mt76: mt7915: use proper aid value in mt7915_mcu_wtbl_generic_tlv in sta mode `b5d363ff17` powerpc/perf: Don't use perf_hw_context for trace IMC PMU `c18b538617` KVM: PPC: Book3S HV: Check return value of kvmppc_radix_init `8b64c158a0` powerpc: dts: t1040rdb: fix ports names for Seville Ethernet switch `be703360ed` ray_cs: Check ioremap return value `43f2fe2a69` power: reset: gemini-poweroff: Fix IRQ check in gemini_poweroff_probe `da71a1483b` i40e: respect metadata on XSK Rx to skb `b2e48cd141` i40e: don't reserve excessive XDP_PACKET_HEADROOM on XSK Rx to skb `e8fe653fa7` KVM: PPC: Fix vmx/vsx mixup in mmio emulation `11cb9eba06` RDMA/core: Set MR type in ib_reg_user_mr `11f11ac281` ath9k_htc: fix uninit value bugs `6e669baa33` drm/amd/pm: return -ENOTSUPP if there is no get_dpm_ultimate_freq function `19a7eba284` drm/amd/display: Fix a NULL pointer dereference in amdgpu_dm_connector_add_common_modes() `9abee51534` drm/nouveau/acr: Fix undefined behavior in nvkm_acr_hsfw_load_bl() `47402eaf88` ionic: fix type complaint in ionic_dev_cmd_clean() `1ba10e5c39` drm/edid: Don't clear formats if using deep color `d99e7feaed` mtd: rawnand: gpmi: fix controller timings setting `364b2eee62` mtd: onenand: Check for error irq `96ea88eb9b` Bluetooth: hci_serdev: call init_rwsem() before p->open() `b267a8118c` udmabuf: validate ubuf->pagecount `56722aa77b` libbpf: Fix possible NULL pointer dereference when destroying skeleton `4a9c268a40` drm/panfrost: Check for error num after setting mask `5d1114ede5` ath10k: fix memory overwrite of the WoWLAN wakeup packet pattern `fb2be762a4` drm: bridge: adv7511: Fix ADV7535 HPD enablement `d9d61beb21` drm/bridge: nwl-dsi: Fix PM disable depth imbalance in nwl_dsi_probe `064e7f7532` drm/bridge: Add missing pm_runtime_disable() in __dw_mipi_dsi_probe `d8db734df6` drm/bridge: Fix free wrong object in sii8620_init_rcp_input_dev `ec3924eab5` drm/meson: osd_afbcd: Add an exit callback to struct meson_afbcd_ops `a1c665f5b7` ARM: configs: multi_v5_defconfig: re-enable CONFIG_V4L_PLATFORM_DRIVERS `1f24716e38` ASoC: codecs: wcd934x: Add missing of_node_put() in wcd934x_codec_parse_data `abefbf602c` ASoC: msm8916-wcd-analog: Fix error handling in pm8916_wcd_analog_spmi_probe `90ac679aa6` ASoC: atmel: Fix error handling in sam9x5_wm8731_driver_probe `ec26e3ce3c` ASoC: atmel: sam9x5_wm8731: use devm_snd_soc_register_card() `541251b903` mmc: davinci_mmc: Handle error for clk_enable `19eb5c7957` ASoC: msm8916-wcd-digital: Fix missing clk_disable_unprepare() in msm8916_wcd_digital_probe `42042c7a3d` ASoC: imx-es8328: Fix error return code in imx_es8328_probe() `fe4db4ea21` ASoC: fsl_spdif: Disable TX clock when stop `86b6cf9894` ASoC: mxs: Fix error handling in mxs_sgtl5000_probe `c8c981cfc0` ASoC: dmaengine: do not use a NULL prepare_slave_config() callback `f452cff025` ASoC: SOF: Add missing of_node_put() in imx8m_probe `0d82401d46` ASoC: rockchip: i2s: Fix missing clk_disable_unprepare() in rockchip_i2s_probe `7e8b0fd0eb` ASoC: rockchip: i2s: Use devm_platform_get_and_ioremap_resource() `b5664a584e` ivtv: fix incorrect device_caps for ivtvfb `ebd4f1501e` media: saa7134: fix incorrect use to determine if list is empty `dd67315994` media: saa7134: convert list_for_each to entry variant `066d9b48f9` video: fbdev: omapfb: Add missing of_node_put() in dvic_probe_of `20da8404e4` ASoC: fsi: Add check for clk_enable `db1c00a025` ASoC: wm8350: Handle error for wm8350_register_irq `662ee5ac6b` ASoC: atmel: Add missing of_node_put() in at91sam9g20ek_audio_probe `663e7a7287` media: vidtv: Check for null return of vzalloc `4d68603cc4` media: stk1160: If start stream fails, return buffers with VB2_BUF_STATE_QUEUED `b02752d753` m68k: coldfire/device.c: only build for MCF_EDMA when h/w macros are defined `9ca3635a0a` arm64: dts: rockchip: Fix SDIO regulator supply properties on rk3399-firefly `7e6f578662` ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction `64eee4127c` memory: emif: check the pointer temp in get_device_details() `330a9b0d38` memory: emif: Add check for setup_interrupts `4639c1d97f` ASoC: soc-compress: prevent the potentially use of null pointer `a6ee60d4a9` ASoC: dwc-i2s: Handle errors for clk_enable `39bee81e30` ASoC: atmel_ssc_dai: Handle errors for clk_enable `dc947d175c` ASoC: mxs-saif: Handle errors for clk_enable `a754ea0de3` printk: fix return value of printk.devkmsg __setup handler `87a265e292` arm64: dts: broadcom: Fix sata nodename `f63122803d` arm64: dts: ns2: Fix spi-cpol and spi-cpha property `5d6a0dc6ba` ALSA: spi: Add check for clk_enable() `039fae34f8` ASoC: ti: davinci-i2s: Add check for clk_enable() `94cb9fe5d8` ASoC: rt5663: check the return value of devm_kzalloc() in rt5663_parse_dp() `7ce3e6e103` uaccess: fix nios2 and microblaze get_user_8() `19894751f6` ASoC: codecs: wcd934x: fix return value of wcd934x_rx_hph_mode_put `f126dcbe70` media: cedrus: h264: Fix neighbour info buffer size `c011ae1665` media: cedrus: H265: Fix neighbour info buffer size `44973633b0` media: usb: go7007: s2250-board: fix leak in probe() `ec8a37b2d9` media: em28xx: initialize refcount before kref_get `1b46f57d51` media: video/hdmi: handle short reads of hdmi info frame. `170ad3942b` ARM: dts: imx: Add missing LVDS decoder on M53Menlo `2a0eb50d9a` ARM: dts: sun8i: v3s: Move the csi1 block to follow address order `77406ac6ef` soc: ti: wkup_m3_ipc: Fix IRQ check in wkup_m3_ipc_probe `18b2ec361a` firmware: ti_sci: Fix compilation failure when CONFIG_TI_SCI_PROTOCOL is not defined `8395a17ef6` arm64: dts: qcom: sm8150: Correct TCS configuration for apps rsc `d19248e23f` arm64: dts: qcom: sdm845: fix microphone bias properties and values `2042c6fbfb` soc: qcom: aoss: remove spurious IRQF_ONESHOT flags `5a990a65d4` soc: qcom: ocmem: Fix missing put_device() call in of_get_ocmem `b5d6eba719` soc: qcom: rpmpd: Check for null return of devm_kcalloc `0c11cb8db4` ARM: dts: qcom: ipq4019: fix sleep clock `22474dfd0c` firmware: qcom: scm: Remove reassignment to desc following initializer `bf4bad1114` video: fbdev: fbcvt.c: fix printing in fb_cvt_print_name() `6de6a64f23` video: fbdev: atmel_lcdfb: fix an error code in atmel_lcdfb_probe() `64ec3e678d` video: fbdev: smscufx: Fix null-ptr-deref in ufx_usb_probe() `0dff86aeb1` video: fbdev: controlfb: Fix COMPILE_TEST build `ec1c20b02a` video: fbdev: controlfb: Fix set but not used warnings `f8bf19f7f3` video: fbdev: matroxfb: set maxvram of vbG200eW to the same as vbG200 to avoid black screen `3187a1d4d5` media: aspeed: Correct value for h-total-pixels `245561612b` media: hantro: Fix overfill bottom register field name `032b141a91` media: meson: vdec: potential dereference of null pointer `d3e5106c67` media: coda: Fix missing put_device() call in coda_get_vdoa_data `c9f4586d99` ASoC: generic: simple-card-utils: remove useless assignment `2c357e0277` ASoC: xilinx: xlnx_formatter_pcm: Handle sysclk setting `712dd2ac26` media: bttv: fix WARNING regression on tunerless devices `bc2573abc6` media: mtk-vcodec: potential dereference of null pointer `8a83731a09` media: v4l2-mem2mem: Apply DST_QUEUE_OFF_BASE on MMAP buffers across ioctls `c76188715d` media: staging: media: zoran: fix usage of vb2_dma_contig_set_max_seg_size `f622bd0758` kunit: make kunit_test_timeout compatible with comment `9e63bcb71d` selftests, x86: fix how check_cc.sh is being invoked `d2c53e77b0` f2fs: fix compressed file start atomic write may cause data corruption `1c4d94e4f0` f2fs: compress: remove unneeded read when rewrite whole cluster `2c4741d1b0` btrfs: fix unexpected error path when reflinking an inline extent `3ef3bc75cd` f2fs: fix to avoid potential deadlock `85cc399b65` nfsd: more robust allocation failure handling in nfsd_file_cache_init `1a11a87374` f2fs: fix missing free nid in f2fs_handle_failed_inode `c0cffc1fb3` perf/x86/intel/pt: Fix address filter config for 32-bit kernel `13c8e37e1f` perf/core: Fix address filter parser for multiple filters `a9faa5beda` rseq: Remove broken uapi field layout on 32-bit little endian `f0250e05e5` rseq: Optimise rseq_get_rseq_cs() and clear_rseq_cs() `ecc17de4b9` sched/core: Export pelt_thermal_tp `40732cab51` sched/debug: Remove mpol_get/put and task_lock/unlock from sched_show_numa `2b5d41bcf2` f2fs: fix to enable ATGC correctly via gc_idle sysfs interface `9d92be1a09` watch_queue: Actually free the watch `5ae75b4ed3` watch_queue: Fix NULL dereference in error cleanup `509565faed` io_uring: terminate manual loop iterator loop correctly for non-vecs `44a77e52bd` clocksource: acpi_pm: fix return value of __setup handler `d678f002f0` hwmon: (pmbus) Add Vin unit off handling `7ca525b4cc` hwrng: nomadik - Change clk_disable to clk_disable_unprepare `e4c777fd8c` amba: Make the remove callback return void `1c6ac39763` vfio: platform: simplify device removal `c93017c8d5` crypto: ccree - Fix use after free in cc_cipher_exit() `78622926fe` crypto: ccp - ccp_dmaengine_unregister release dma channels `9eeee6f684` ACPI: APEI: fix return value of __setup handlers `0b45bf1659` clocksource/drivers/timer-of: Check return value of of_iomap in timer_of_base_init() `b33c753cff` clocksource/drivers/timer-microchip-pit64b: Use notrace `db9d00461b` clocksource/drivers/exynos_mct: Handle DTS with higher number of interrupts `d4e13c4a6f` clocksource/drivers/exynos_mct: Refactor resources allocation `42d331a279` clocksource/drivers/timer-ti-dm: Fix regression from errata i940 fix `aedff03da4` crypto: vmx - add missing dependencies `51939008ca` crypto: amlogic - call finalize with bh disabled `24857d87cc` crypto: sun8i-ce - call finalize with bh disabled `bf4814d58b` crypto: sun8i-ss - call finalize with bh disabled `a4067ccb97` hwrng: atmel - disable trng on failure path `b7940bef6f` spi: spi-zynqmp-gqspi: Handle error for dma_set_mask `3928a04bc6` PM: suspend: fix return value of __setup handler `052a218db0` PM: hibernate: fix __setup handler error handling `0b5924a14d` block: don't delete queue kobject before its children `40b288a861` nvme: cleanup __nvme_check_ids `32c4db2a52` hwmon: (sch56xx-common) Replace WDOG_ACTIVE with WDOG_HW_RUNNING `ec8536f701` hwmon: (pmbus) Add mutex to regulator ops `18a18594ae` spi: pxa2xx-pci: Balance reference count for PCI DMA device `55259cb374` crypto: ccree - don't attempt 0 len DMA mappings `d788ad472f` EVM: fix the evm= __setup handler return value `a137f93ae5` audit: log AUDIT_TIME_* records only from rules `5e9501e60b` crypto: rockchip - ECB does not need IV `8265bea7d8` selftests/x86: Add validity check and allow field splitting `f7d9249af3` arm64/mm: avoid fixmap race condition when create pud mapping `99a8dfce7c` spi: tegra114: Add missing IRQ check in tegra_spi_probe `71dba67138` thermal: int340x: Check for NULL after calling kmemdup() `8e57117142` crypto: mxs-dcp - Fix scatterlist processing `ec1d372974` crypto: authenc - Fix sleep in atomic context in decrypt_tail `fdfaafeb4b` crypto: sun8i-ss - really disable hash on A80 `19693838c8` hwrng: cavium - HW_RANDOM_CAVIUM should depend on ARCH_THUNDER `bc20294cc8` hwrng: cavium - Check health status while reading random data `962d1f59d5` selinux: check return value of sel_make_avc_files `1ae9b020dd` regulator: qcom_smd: fix for_each_child.cocci warnings `c20975954e` PCI: xgene: Revert "PCI: xgene: Fix IB window setup" `0f56f24015` PCI: pciehp: Clear cmd_busy bit in polling mode `89ddcc8191` drm/i915/gem: add missing boundary check in vm_access `b84857c06e` drm/i915/opregion: check port number bounds for SWSCI display power state `88975951d4` brcmfmac: pcie: Fix crashes due to early IRQs `1cbcf93a93` brcmfmac: pcie: Replace brcmf_pcie_copy_mem_todev with memcpy_toio `f3820ddaf4` brcmfmac: pcie: Release firmwares in the brcmf_pcie_setup error path `daa07f2902` brcmfmac: firmware: Allocate space for default boardrev in nvram `1dd031eb99` xtensa: fix xtensa_wsr always writing 0 `dac518bbce` xtensa: fix stop_machine_cpuslocked call in patch_text `20f974dce5` media: davinci: vpif: fix unbalanced runtime PM enable `7c9b915b94` media: davinci: vpif: fix unbalanced runtime PM get `cde90e8291` media: gpio-ir-tx: fix transmit with long spaces on Orange Pi PC `785ffce44a` DEC: Limit PMAX memory probing to R3k systems `8dde2296ec` bcache: fixup multiple threads crash `37d2b4fa5c` crypto: rsa-pkcs1pad - fix buffer overread in pkcs1pad_verify_complete() `b89fb8b882` crypto: rsa-pkcs1pad - restore signature length check `f38c318068` crypto: rsa-pkcs1pad - correctly get hash from source scatterlist `c1db3f44f2` crypto: rsa-pkcs1pad - only allow with rsa `27a6f495b6` exec: Force single empty string when argv is empty `b02d33171d` lib/raid6/test: fix multiple definition linking error `bf057eac9a` thermal: int340x: Increase bitmap size `86a926c3f0` pstore: Don't use semaphores in always-atomic-context code `b26f400e4f` carl9170: fix missing bit-wise or operator for tx_params `3aef4df6e1` mgag200 fix memmapsl configuration in GCTL6 register `ef1df91685` ARM: dts: exynos: add missing HDMI supplies on SMDK5420 `3cde68a1eb` ARM: dts: exynos: add missing HDMI supplies on SMDK5250 `5ac205c414` ARM: dts: exynos: fix UART3 pins configuration in Exynos5250 `7187c9beb7` ARM: dts: at91: sama5d2: Fix PMERRLOC resource size `2ca2a5552a` video: fbdev: atari: Atari 2 bpp (STe) palette bugfix `72af881092` video: fbdev: sm712fb: Fix crash in smtcfb_read() `ba09b04173` drm/edid: check basic audio support on CEA extension block `ce1927b8cf` block: don't merge across cgroup boundaries if blkcg is enabled `6e0d24598c` block: limit request dispatch loop duration `958e9b56de` mailbox: tegra-hsp: Flush whole channel `f67a140078` drivers: hamradio: 6pack: fix UAF bug caused by mod_timer() `b35eb48471` ext4: fix fs corruption when tring to remove a non-empty directory with IO error `a1e6884b2d` ext4: fix ext4_fc_stats trace point `c119fb65f6` coredump: Also dump first pages of non-executable ELF libraries `7ad5ccc3da` ACPI: properties: Consistently return -ENOENT if there are no more references `ef3a87e0c4` arm64: dts: ti: k3-j7200: Fix gic-v3 compatible regs `18864e8b83` arm64: dts: ti: k3-j721e: Fix gic-v3 compatible regs `e85fa9f4e9` arm64: dts: ti: k3-am65: Fix gic-v3 compatible regs `7ce550a01b` arm64: signal: nofpsimd: Do not allocate fp/simd context when not available `210e7b43d4` udp: call udp_encap_enable for v6 sockets when enabling encap `e1a58498ef` powerpc/kvm: Fix kvm_use_magic_page `d72866a7f5` can: isotp: sanitize CAN ID checks in isotp_bind() `fde8c5cad0` drbd: fix potential silent data corruption `b101e74f9a` dm integrity: set journal entry unused when shrinking device `d5d5804acc` mm/kmemleak: reset tag when compare object pointer `bc2f58b8e4` mm,hwpoison: unmap poisoned page before invalidation `608c501d70` Revert "mm: madvise: skip unmapped vma holes passed to process_madvise" `8b354e3032` mm: madvise: return correct bytes advised with process_madvise `928c06c114` mm: madvise: skip unmapped vma holes passed to process_madvise `51f7557c3c` ALSA: hda/realtek: Fix audio regression on Mi Notebook Pro 2020 `9017201e8d` ALSA: pcm: Fix potential AB/BA lock with buffer_mutex and mmap_lock `7b7a03d8b5` ALSA: hda: Avoid unsol event during RPM suspending `a55e2d7423` ALSA: cs4236: fix an incorrect NULL check on list iterator `edefc4b2a8` cifs: fix NULL ptr dereference in smb2_ioctl_query_info() `9963ccea60` cifs: prevent bad output lengths in smb2_ioctl_query_info() `b75198edda` Revert "Input: clear BTN_RIGHT/MIDDLE on buttonpads" `34bc1f69bf` riscv: Increase stack size under KASAN `24b9b8e95c` riscv: Fix fill_callchain return value `0f8c0bd0a4` qed: validate and restrict untrusted VFs vlan promisc mode `a3af3d4319` qed: display VF trust config `aa28075f06` scsi: libsas: Fix sas_ata_qc_issue() handling of NCQ NON DATA commands `4bcefc78c8` mempolicy: mbind_range() set_policy() after vma_merge() `fa37c17143` mm: invalidate hwpoison page cache page in fault path `7188e7c96f` mm/pages_alloc.c: don't create ZONE_MOVABLE beyond the end of a node `51dbb5e36d` jffs2: fix memory leak in jffs2_scan_medium `607d3aab73` jffs2: fix memory leak in jffs2_do_mount_fs `7bb7428dd7` jffs2: fix use-after-free in jffs2_clear_xattr_subsystem `b417f9c505` can: ems_usb: ems_usb_start_xmit(): fix double dev_kfree_skb() in error path `3a21ee89bc` mtd: rawnand: protect access to rawnand devices while in suspend `145a63201d` spi: mxic: Fix the transmit path `be22ebe79e` pinctrl: samsung: drop pin banks references on error paths `b97b305656` remoteproc: Fix count check in rproc_coredump_write() `784630df17` f2fs: fix to do sanity check on .cp_pack_total_block_count `e58ee6bd93` f2fs: quota: fix loop condition at f2fs_quota_sync() `ec67040703` f2fs: fix to unlock page correctly in error path of is_alive() `7af164fa2f` NFSD: prevent integer overflow on 32 bit systems `65e21cc042` NFSD: prevent underflow in nfssvc_decode_writeargs() `b7b430104a` SUNRPC: avoid race between mod_timer() and del_timer_sync() `f51ab2f60a` HID: intel-ish-hid: Use dma_alloc_coherent for firmware update `a1df8e60f2` firmware: stratix10-svc: add missing callback parameter on RSU `e94f5fbe7a` Documentation: update stable tree link `f4bab992ee` Documentation: add link to stable release candidate tree `10ee5662d5` KEYS: fix length validation in keyctl_pkey_params_get_2() `5a41a3033a` ptrace: Check PTRACE_O_SUSPEND_SECCOMP permission on PTRACE_SEIZE `2775d8e364` clk: uniphier: Fix fixed-rate initialization `25cd5872d9` greybus: svc: fix an error handling bug in gb_svc_hello() `9f0cd81174` iio: inkern: make a best effort on offset calculation `19e533452f` iio: inkern: apply consumer scale when no channel scale is available `e10dbe7f6a` iio: inkern: apply consumer scale on IIO_VAL_INT cases `9f4fffc2ab` iio: afe: rescale: use s64 for temporary scale calculations `9cd1b02655` coresight: Fix TRCCONFIGR.QE sysfs interface `7b478cb67b` mei: avoid iterator usage outside of list_for_each_entry `ec8975417d` mei: me: add Alder Lake N device id. `0a0c61dd07` xhci: fix uninitialized string returned by xhci_decode_ctrl_ctx() `811f403519` xhci: make xhci_handshake timeout for xhci_reset() adjustable `3a820d1ca1` xhci: fix runtime PM imbalance in USB2 resume `c41387f96a` xhci: fix garbage USBSTS being logged in some cases `1e0f089f70` USB: usb-storage: Fix use of bitfields for hardware data in ene_ub6250.c `39a70732eb` virtio-blk: Use blk_validate_block_size() to validate block size `290e05f346` tpm: fix reference counting for struct tpm_chip `fcd3c31dd1` iommu/iova: Improve 32-bit free space estimate `68c80088f5` locking/lockdep: Avoid potential access of invalid memory in lock_class `f19d8dfad6` net: dsa: microchip: add spi_device_id tables `8d3f4ad430` af_key: add __GFP_ZERO flag for compose_sadb_supported in function pfkey_register `ef1a6ab36d` Input: zinitix - do not report shadow fingers `21680aabc4` spi: Fix erroneous sgs value with min_t() `8fb7af1b5a` Revert "gpio: Revert regression in sysfs-gpio (gpiolib.c)" `18a4417a19` net:mcf8390: Use platform_get_irq() to get the interrupt `102d7f6c2e` spi: Fix invalid sgs value `a4f4ce3dee` gpio: Revert regression in sysfs-gpio (gpiolib.c) `fc9a35627c` ethernet: sun: Free the coherent when failing in probing `3c84471925` tools/virtio: fix virtio_test execution `6d98dc2369` vdpa/mlx5: should verify CTRL_VQ feature exists for MQ `c97ffb4184` virtio_console: break out of buf poll on remove `0c00d38337` ARM: mstar: Select HAVE_ARM_ARCH_TIMER `a7e75e5ed4` xfrm: fix tunnel model fragmentation behavior `e05ae08ea8` HID: logitech-dj: add new lightspeed receiver id `ff919a7ad9` netdevice: add the case if dev is NULL `c4dc584a2d` hv: utils: add PTP_1588_CLOCK to Kconfig to fix build `d136a2574a` USB: serial: simple: add Nokia phone driver `38e3d48ffe` USB: serial: pl2303: add IBM device IDs `d4d975e792` swiotlb: fix info leak with DMA_FROM_DEVICE `414e6c8e94` ANDROID: fix up abi issue with struct snd_pcm_runtime `51790ed529` Merge 5.10.109 into android12-5.10-lts `d9c5818a0b` Linux 5.10.109 `163960a7de` llc: only change llc->dev when bind() succeeds `2b5a6d7714` nds32: fix access_ok() checks in get/put_user `c064268eb8` wcn36xx: Differentiate wcn3660 from wcn3620 `95193d12f1` tpm: use try_get_ops() in tpm-space.c `5d3ff9542a` mac80211: fix potential double free on mesh join `fcc9797d0d` rcu: Don't deboost before reporting expedited quiescent state `87f7ed7c36` Revert "ath: add support for special 0x0 regulatory domain" `c971e6a1c8` crypto: qat - disable registration of algorithms `9f4e64611e` ACPI: video: Force backlight native for Clevo NL5xRU and NL5xNU `0b2ffba2de` ACPI: battery: Add device HID and quirk for Microsoft Surface Go 3 `2724b72b22` ACPI / x86: Work around broken XSDT on Advantech DAC-BJ01 board `2c74374c2e` netfilter: nf_tables: initialize registers in nft_do_chain() `eb1ba8d1c3` drivers: net: xgene: Fix regression in CRC stripping `a2368d10b7` ALSA: pci: fix reading of swapped values from pcmreg in AC97 codec `6936d2ecf8` ALSA: cmipci: Restore aux vol on suspend/resume `cbd27127af` ALSA: usb-audio: Add mute TLV for playback volumes on RODE NT-USB `0ae81ef3ea` ALSA: pcm: Add stream lock during PCM reset ioctl operations `b560d670c8` ALSA: pcm: Fix races among concurrent prealloc proc writes `a38440f006` ALSA: pcm: Fix races among concurrent prepare and hw_params/hw_free calls `8527c8f052` ALSA: pcm: Fix races among concurrent read/write and buffer changes `0f6947f5f5` ALSA: pcm: Fix races among concurrent hw_params and hw_free calls `014c81dfb3` ALSA: hda/realtek: Add quirk for ASUS GA402 `05256f3fd6` ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc671 `ca8247b4df` ALSA: hda/realtek: Add quirk for Clevo NP50PNJ `26fe8f3103` ALSA: hda/realtek: Add quirk for Clevo NP70PNJ `80eab86a86` ALSA: usb-audio: add mapping for new Corsair Virtuoso SE `5ce74ff705` ALSA: oss: Fix PCM OSS buffer allocation overflow `db03abd0da` ASoC: sti: Fix deadlock via snd_pcm_stop_xrun() call `571df3393f` llc: fix netdevice reference leaks in llc_ui_bind() `56dc187b35` staging: fbtft: fb_st7789v: reset display before initialization `351493858e` tpm: Fix error handling in async work `ea21245cdc` cgroup-v1: Correct privileges check in release_agent writes `824a950c3f` cgroup: Use open-time cgroup namespace for process migration perm checks `f28364fe38` cgroup: Allocate cgroup_file_ctx for kernfs_open_file->priv `9eeaa2d7d5` exfat: avoid incorrectly releasing for root inode `ae8ec5eabb` net: ipv6: fix skb_over_panic in __ip6_append_data `25c23fe40e` nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION `ab2d1d40a1` Revert "vsock: each transport cycles only on its own sockets" `644c989f41` Merge 5.10.108 into android12-5.10-lts `9940314ebf` Linux 5.10.108 `37119edab8` Revert "selftests/bpf: Add test for bpf_timer overwriting crash" `9248694dac` esp: Fix possible buffer overflow in ESP transformation `96340cdd55` smsc95xx: Ignore -ENODEV errors when device is unplugged `e27b51af54` net: usb: Correct reset handling of smsc95xx `b54daeafc1` net: usb: Correct PHY handling of smsc95xx `204d38dc6a` perf symbols: Fix symbol size calculation condition `f0d43d22d2` Input: aiptek - properly check endpoint type `98e7a654a5` scsi: mpt3sas: Page fault in reply q processing `10a805334a` usb: usbtmc: Fix bug in pipe direction for control transfers `00bdd9bf1a` usb: gadget: Fix use-after-free bug by not setting udc->dev.driver `28bc026739` usb: gadget: rndis: prevent integer overflow in rndis_set_response() `2c010c61e6` arm64: fix clang warning about TRAMP_VALIAS `277b7f6394` net: mscc: ocelot: fix backwards compatibility with single-chain tc-flower offload `2550afba2a` net: bcmgenet: skip invalid partial checksums `bf5b7aae86` bnx2x: fix built-in kernel driver load failure `c07fdba12f` net: phy: mscc: Add MODULE_FIRMWARE macros `ba50073cf4` net: dsa: Add missing of_node_put() in dsa_port_parse_of `a630ad5e8b` net: handle ARPHRD_PIMREG in dev_is_mac_header_xmit() `336b6be6ad` drm/panel: simple: Fix Innolux G070Y2-L01 BPP settings `9d45aec02f` drm/imx: parallel-display: Remove bus flags check in imx_pd_bridge_atomic_check() `9b763ceda6` hv_netvsc: Add check for kvmalloc_array `09a7264fb0` atm: eni: Add check for dma_map_single `70b7b3c055` net/packet: fix slab-out-of-bounds access in packet_recvmsg() `169add82d2` net: phy: marvell: Fix invalid comparison in the resume and suspend functions `01fac1ca8a` esp6: fix check on ipv6_skip_exthdr's return value `d9fe590970` vsock: each transport cycles only on its own sockets `ac7dd60946` efi: fix return value of __setup handlers `fa3aa103e7` mm: swap: get rid of livelock in swapin readahead `df3301dc60` ocfs2: fix crash when initialize filecheck kobj fails `0f9b7b8df1` crypto: qcom-rng - ensure buffer for generate is completely filled `9a559b8868` Merge branch 'android12-5.10' into `android12-5.10-lts` `8646e92696` Merge 5.10.107 into android12-5.10-lts `4c8814277b` Linux 5.10.107 `7a0d13ef67` arm64: kvm: Fix copy-and-paste error in bhb templates for v5.10 stable `dc1163203a` io_uring: return back safer resurrect `8fdaab341b` kselftest/vm: fix tests build with old libc `2490695ffd` sfc: extend the locking on mcdi->seqno `2fad5b6948` tcp: make tcp_read_sock() more robust `3f9a8f8a95` nl80211: Update bss channel on channel switch for P2P_CLIENT `0ba557d330` drm/vrr: Set VRR capable prop only if it is attached to connector `9a8e4a5c5b` iwlwifi: don't advertise TWT support `c5ea0221c8` atm: firestream: check the return value of ioremap() in fs_init() `efdd92c18e` can: rcar_canfd: rcar_canfd_channel_probe(): register the CAN device when fully ready `ebe106eac6` ARM: 9178/1: fix unmet dependency on BITREVERSE for HAVE_ARCH_BITREVERSE `e8ad9ecc40` MIPS: smp: fill in sibling and core maps earlier `8c70b9b470` mac80211: refuse aggregations sessions before authorized `d687d7559e` ARM: dts: rockchip: fix a typo on rk3288 crypto-controller `6f0a94931c` ARM: dts: rockchip: reorder rk322x hmdi clocks `6493c6aa8b` arm64: dts: agilex: use the compatible "intel,socfpga-agilex-hsotg" `c5c8c649fe` arm64: dts: rockchip: reorder rk3399 hdmi clocks `f7f062919f` arm64: dts: rockchip: fix rk3399-puma eMMC HS400 signal integrity `ca142038a5` xfrm: Fix xfrm migrate issues when address family changes `d8889a445b` xfrm: Check if_id in xfrm_migrate `6056abc99b` sctp: fix the processing for INIT chunk `bdf0316982` Revert "xfrm: state and policy should fail if XFRMA_IF_ID 0" `5287773dba` Merge 5.10.106 into android12-5.10-lts `9e8aa4cec7` Merge 5.10.105 into android12-5.10-lts `55d57b8929` Merge `b65b87e718` ("arm64: proton-pack: Include unprivileged eBPF status in Spectre v2 mitigation reporting") into android12-5.10-lts `9fddd6c893` UPSTREAM: arm64: proton-pack: Include unprivileged eBPF status in Spectre v2 mitigation reporting `531b5ce9dd` UPSTREAM: arm64: Use the clearbhb instruction in mitigations `d05b159f71` UPSTREAM: KVM: arm64: Allow SMCCC_ARCH_WORKAROUND_3 to be discovered and migrated `11bed3edbd` UPSTREAM: arm64: Mitigate spectre style branch history side channels `9bc6a2543d` UPSTREAM: arm64: Do not include __READ_ONCE() block in assembly files `2434153e7e` UPSTREAM: KVM: arm64: Allow indirect vectors to be used without SPECTRE_V3A `cfa82070a7` UPSTREAM: arm64: proton-pack: Report Spectre-BHB vulnerabilities as part of Spectre-v2 `5195a80d07` UPSTREAM: arm64: Add percpu vectors for EL1 `9e96a3d6ae` Merge `56cf5326bd` ("arm64: entry: Add macro for reading symbol addresses from the trampoline") into android12-5.10-lts `327f1e7d81` Linux 5.10.106 `648895da69` watch_queue: Fix filter limit check `8bb5b72dbd` ARM: fix Thumb2 regression with Spectre BHB `6b1249db9e` ext4: add check to prevent attempting to resize an fs with sparse_super2 `b297cf764d` x86/traps: Mark do_int3() NOKPROBE_SYMBOL `29f6f35001` x86/boot: Add setup_indirect support in early_memremap_is_setup_data() `b3444e5b64` x86/boot: Fix memremap of setup_indirect structures `24d268130e` watch_queue: Make comment about setting ->defunct more accurate `ec03510e0a` watch_queue: Fix lack of barrier/sync/lock between post and read `06ab844439` watch_queue: Free the alloc bitmap when the watch_queue is torn down `880acbb718` watch_queue: Fix the alloc bitmap size to reflect notes allocated `e2b52ca498` watch_queue: Fix to always request a pow-of-2 pipe ring size `2039900aad` watch_queue: Fix to release page in ->release() `d729d4e99f` watch_queue, pipe: Free watchqueue state after clearing pipe ring `573a3228ca` virtio: acknowledge all features before access `bf52b627cf` virtio: unexport virtio_finalize_features `8bfb959ea2` arm64: dts: marvell: armada-37xx: Remap IO space to bus address 0x0 `1ef5fe3dba` riscv: Fix auipc+jalr relocation range checks `a69aa422b4` mmc: meson: Fix usage of meson_mmc_post_req() `0c6eeaf8c1` net: macb: Fix lost RX packet wakeup race in NAPI receive `6d9700b445` staging: gdm724x: fix use after free in gdm_lte_rx() `8c1bc04c8c` staging: rtl8723bs: Fix access-point mode deadlock `ab5595b45f` fuse: fix pipe buffer lifetime for direct_io `f2c52a4baf` ARM: Spectre-BHB: provide empty stub for non-config `f1f5d089fc` selftests/memfd: clean up mapping in mfd_fail_write `71013d071b` selftest/vm: fix map_fixed_noreplace test failure `8d276f10e8` tracing: Ensure trace buffer is at least 4096 bytes large `ae7597b47d` ipv6: prevent a possible race condition with lifetimes `8c0c50e9fc` Revert "xen-netback: Check for hotplug-status existence before watching" `625c04b523` Revert "xen-netback: remove 'hotplug-status' once it has served its purpose" `a0e2768fb9` gpio: Return EPROBE_DEFER if gc->to_irq is NULL `65d4e9d130` hwmon: (pmbus) Clear pmbus fault/warning bits after read `d15c9f6e33` net-sysfs: add check for netdevice being present to speed_show `8c023c3039` spi: rockchip: terminate dma transmission when slave abort `889254f98e` spi: rockchip: Fix error in getting num-cs property `4fb9be675b` selftests/bpf: Add test for bpf_timer overwriting crash `dc1c2b47b5` net: bcmgenet: Don't claim WOL when its not available `b7e4d9ba2d` sctp: fix kernel-infoleak for SCTP sockets `3cf533f120` net: phy: DP83822: clear MISR2 register to disable interrupts `21044e679e` gianfar: ethtool: Fix refcount leak in gfar_get_ts_info `3a4cd1c51e` gpio: ts4900: Do not set DAT and OE together `7702e7e9e3` selftests: pmtu.sh: Kill tcpdump processes launched by subshell. `2b1c85f565` NFC: port100: fix use-after-free in port100_send_complete `1fdabf2cf4` net/mlx5e: Lag, Only handle events from highest priority multipath entry `f3331bc174` net/mlx5: Fix a race on command flush flow `5f1340963b` net/mlx5: Fix size field in bufferx_reg struct `e2201ef32f` ax25: Fix NULL pointer dereference in ax25_kill_by_device `cc7679079c` net: ethernet: lpc_eth: Handle error for clk_enable `b3e4fcb539` net: ethernet: ti: cpts: Handle error for clk_enable `5e42f90d72` tipc: fix incorrect order of state message data sanity check `979b418b96` ethernet: Fix error handling in xemaclite_of_probe `506d61bc1b` ice: Fix curr_link_speed advertised speed `852a9e97d3` ice: Rename a couple of variables `b21ffd5469` ice: Remove unnecessary checker loop `875967aff5` ice: Align macro names to the specification `8c613f7cd3` ice: stop disabling VFs due to PF error responses `d9ee2cbff2` i40e: stop disabling VFs due to PF error responses `965070a2b7` ARM: dts: aspeed: Fix AST2600 quad spi group `96b01b8541` net: dsa: mt7530: fix incorrect test in mt753x_phylink_validate() `ed5bb00d86` drm/sun4i: mixer: Fix P010 and P210 format numbers `93223495bc` qed: return status of qed_iov_get_link `5bee2ed050` esp: Fix BEET mode inter address family tunneling on GSO `16386479ef` net: qlogic: check the return value of dma_alloc_coherent() in qed_vf_hw_prepare() `33c74f8085` isdn: hfcpci: check the return value of dma_set_mask() in setup_hw() `cca9d5035b` virtio-blk: Don't use MAX_DISCARD_SEGMENTS if max_discard_seg is zero `a3d5fcc6cf` mISDN: Fix memory leak in dsp_pipeline_build() `f97ad179d1` mISDN: Remove obsolete PIPELINE_DEBUG debugging information `2de76d37d4` tipc: fix kernel panic when enabling bearer `ea3a5e6df5` arm64: dts: armada-3720-turris-mox: Add missing ethernet0 alias `2c6a75ea32` HID: vivaldi: fix sysfs attributes leak `2a18a38cbc` clk: qcom: gdsc: Add support to update GDSC transition delay `0d6882dd15` ARM: boot: dts: bcm2711: Fix HVS register range `5c5685cc64` Merge `7ae8127e41` ("arm64: Add HWCAP for self-synchronising virtual counter") into android12-5.10-lts `19787ca417` Merge `b19eaa004f` ("arm64: Add Cortex-A510 CPU part definition") into android12-5.10-lts `199789221d` Merge `fc8070a9c5` ("arm64: Add Neoverse-N2, Cortex-A710 CPU part definition") into android-mainline `f14cf58208` UPSTREAM: ARM: fix Thumb2 regression with Spectre BHB `74562af594` UPSTREAM: ARM: Spectre-BHB: provide empty stub for non-config `b0ff4e14b1` UPSTREAM: ARM: fix build warning in proc-v7-bugs.c `f3ec5e6124` UPSTREAM: ARM: Do not use NOCROSSREFS directive with ld.lld `5c1f913cd2` UPSTREAM: ARM: fix co-processor register typo `4c5218ead0` UPSTREAM: ARM: fix build error when BPF_SYSCALL is disabled `7ab81873bd` Merge `302754d023` ("ARM: include unprivileged BPF status in Spectre V2 reporting") into android12-5.10-lts `d221da1d6f` Merge `d04937ae94` ("x86/speculation: Warn about eIBRS + LFENCE + Unprivileged eBPF + SMT") into android12-5.10-lts `0773736e48` Merge 5.10.104 into android12-5.10-lts `56d625a4ce` ANDROID: fix up rndis ABI breakage `67c781d938` Linux 5.10.105 `561e91e5fe` Revert "ACPI: PM: s2idle: Cancel wakeup before dispatching EC GPE" `206c8e271b` xen/netfront: react properly to failing gnttab_end_foreign_access_ref() `39c00d0928` xen/gnttab: fix gnttab_end_foreign_access() without page specified `c4b16486d6` xen/pvcalls: use alloc/free_pages_exact() `8357d75bfd` xen/9p: use alloc/free_pages_exact() `17f01b7206` xen: remove gnttab_query_foreign_access() `5f36ae75b8` xen/gntalloc: don't use gnttab_query_foreign_access() `3047255182` xen/scsifront: don't use gnttab_query_foreign_access() for mapped status `f6690dd944` xen/netfront: don't use gnttab_query_foreign_access() for mapped status `96219af4e5` xen/blkfront: don't use gnttab_query_foreign_access() for mapped status `3d81e85f30` xen/grant-table: add gnttab_try_end_foreign_access() `5c600371b8` xen/xenbus: don't let xenbus_grant_ring() remove grants in error case `b65b87e718` arm64: proton-pack: Include unprivileged eBPF status in Spectre v2 mitigation reporting `90f59cc2f2` ARM: fix build warning in proc-v7-bugs.c `551717cf3b` arm64: Use the clearbhb instruction in mitigations `8c4192d126` ARM: Do not use NOCROSSREFS directive with ld.lld `38c26bdb3c` KVM: arm64: Allow SMCCC_ARCH_WORKAROUND_3 to be discovered and migrated `1749b553d7` ARM: fix co-processor register typo `e192c8baa6` arm64: Mitigate spectre style branch history side channels `a330601c63` ARM: fix build error when BPF_SYSCALL is disabled `192023e6ba` KVM: arm64: Allow indirect vectors to be used without SPECTRE_V3A `13a807a0a0` arm64: proton-pack: Report Spectre-BHB vulnerabilities as part of Spectre-v2 `56cf5326bd` arm64: entry: Add macro for reading symbol addresses from the trampoline `1f63326a52` arm64: Add percpu vectors for EL1 `3f21b7e355` arm64: entry: Add vectors that have the bhb mitigation sequences `4937955296` arm64: entry: Add non-kpti __bp_harden_el1_vectors for mitigations `26211252c1` arm64: entry: Allow the trampoline text to occupy multiple pages `73ee716a1f` arm64: entry: Make the kpti trampoline's kpti sequence optional `8c691e5308` arm64: entry: Move trampoline macros out of ifdef'd section `e550250632` arm64: entry: Don't assume tramp_vectors is the start of the vectors `5275fb5ea5` arm64: entry: Allow tramp_alias to access symbols after the 4K boundary `bda8960281` arm64: entry: Move the trampoline data page before the text page `d93b25a665` arm64: entry: Free up another register on kpti's tramp_exit path `7ae8127e41` arm64: Add HWCAP for self-synchronising virtual counter `b19eaa004f` arm64: Add Cortex-A510 CPU part definition `fc8070a9c5` arm64: Add Neoverse-N2, Cortex-A710 CPU part definition `5242d6971e` arm64: entry: Make the trampoline cleanup optional `8617156931` arm64: Add Cortex-X2 CPU part definition `7048a21086` arm64: spectre: Rename spectre_v4_patch_fw_mitigation_conduit `dc5b630c0d` arm64: entry.S: Add ventry overflow sanity checks `97d8bdf331` arm64: cpufeature: add HWCAP for FEAT_RPRES `162aa002ec` arm64: cpufeature: add HWCAP for FEAT_AFP `dbcfa98539` arm64: add ID_AA64ISAR2_EL1 sys register `302754d023` ARM: include unprivileged BPF status in Spectre V2 reporting `d04937ae94` x86/speculation: Warn about eIBRS + LFENCE + Unprivileged eBPF + SMT `f3c12fc53e` arm64: cputype: Add CPU implementor & types for the Apple M1 cores `3f9c958e35` ARM: Spectre-BHB workaround `cc9e3e55bd` x86/speculation: Warn about Spectre v2 LFENCE mitigation `29d9b56df1` ARM: use LOADADDR() to get load address of sections `e335384560` x86/speculation: Update link to AMD speculation whitepaper `46deb22468` ARM: early traps initialisation `2fdf67a1d2` x86/speculation: Use generic retpoline by default on AMD `b7f1e73c4d` ARM: report Spectre v2 status through sysfs `afc2d635b5` x86/speculation: Include unprivileged eBPF status in Spectre v2 mitigation reporting `071e8b69d7` Documentation/hw-vuln: Update spectre doc `a6a119d647` x86/speculation: Add eIBRS + Retpoline options `f38774bb6e` x86/speculation: Rename RETPOLINE_AMD to RETPOLINE_LFENCE `206cfe2dac` x86,bugs: Unconditionally allow spectre_v2=retpoline,amd `97581b56b5` Linux 5.10.104 `dbbe09d953` hamradio: fix macro redefine warning `dcd03efd7e` Revert "xfrm: xfrm_state_mtu should return at least 1280 for ipv6" `292e1c88b8` btrfs: add missing run of delayed items after unlink during log replay `41712c5fa5` btrfs: qgroup: fix deadlock between rescan worker and remove qgroup `6e0319e770` btrfs: fix lost prealloc extents beyond eof after full fsync `827172ffa9` tracing: Fix return value of __setup handlers `78059b1cfc` tracing/histogram: Fix sorting on old "cpu" value `0e188fde82` HID: add mapping for KEY_ALL_APPLICATIONS `f276ea5035` HID: add mapping for KEY_DICTATE `3b8f2a7aed` Input: samsung-keypad - properly state IOMEM dependency `a621ae6394` Input: elan_i2c - fix regulator enable count imbalance after suspend/resume `1397bbcd81` Input: elan_i2c - move regulator_[en\|dis]able() out of elan_[en\|dis]able_power() `988f4f29cc` net: dcb: disable softirqs in dcbnl_flush_dev() `6828da5dea` drm/amdgpu: fix suspend/resume hang regression `f5e496ef73` nl80211: Handle nla_memdup failures in handle_nan_filter `64e4305a03` iavf: Refactor iavf state machine tracking `e6bc597fbc` net: chelsio: cxgb3: check the return value of pci_find_capability() `320980b249` ibmvnic: complete init_done on transport events `86027004bb` ARM: tegra: Move panels to AUX bus `fbb810825a` soc: fsl: qe: Check of ioremap return value `2824f6939e` soc: fsl: guts: Add a missing memory allocation failure check `3afe488d5c` soc: fsl: guts: Revert commit `3c0d64e867` `4470913079` ARM: dts: Use 32KiHz oscillator on devkit8000 `298f6fae54` ARM: dts: switch timer config to common devkit8000 devicetree `8b20c1999d` s390/extable: fix exception table sorting `49aa9c9c7f` memfd: fix F_SEAL_WRITE after shmem huge page allocated `6acbc88752` ibmvnic: free reset-work-item when flushing `9d8a11d74d` igc: igc_write_phy_reg_gpy: drop premature return `223744f521` pinctrl: sunxi: Use unique lockdep classes for IRQs `2851b76e5f` selftests: mlxsw: tc_police_scale: Make test more robust `85bf489c5c` ARM: 9182/1: mmu: fix returns from early_param() and __setup() functions `6b63410490` ARM: Fix kgdb breakpoint for Thumb2 `fefe4cb4a6` igc: igc_read_phy_reg_gpy: drop premature return `0632854fb1` arm64: dts: rockchip: Switch RK3399-Gru DP to SPDIF output `43eaf1b178` can: gs_usb: change active_channels's type from atomic_t to u8 `daaed6ced8` ASoC: cs4265: Fix the duplicated control name `8b8ac465bf` firmware: arm_scmi: Remove space in MODULE_ALIAS name `667df6fe3e` efivars: Respect "block" flag in efivar_entry_set_safe() `283c37e542` ixgbe: xsk: change !netif_carrier_ok() handling in ixgbe_xmit_zc() `5f394102ee` net: arcnet: com20020: Fix null-ptr-deref in com20020pci_probe() `92b791771a` ibmvnic: register netdev after init of adapter `6e0f986032` net: sxgbe: fix return value of __setup handler `e1a82db1eb` iavf: Fix missing check for running netdev `c9a066fe45` mac80211: treat some SAE auth steps as final `e6d7f57f91` net: stmmac: fix return value of __setup handler `fa65989a48` mac80211: fix forwarded mesh frames AC & queue selection `dcc3423c1d` ia64: ensure proper NUMA distance and possible map initialization `1312ef5ad0` sched/topology: Fix sched_domain_topology_level alloc in sched_init_numa() `d753aecb3d` sched/topology: Make sched_init_numa() use a set for the deduplicating sort `05ae1f0fe9` ice: fix concurrent reset and removal of VFs `41edeeaae5` ice: Fix race conditions between virtchnl handling and VF ndo ops `0c145262ac` rcu/nocb: Fix missed nocb_timer requeue `9bb7237cc7` net/smc: fix unexpected SMC_CLC_DECL_ERR_REGRMB error cause by server `d7eb662625` net/smc: fix unexpected SMC_CLC_DECL_ERR_REGRMB error generated by client `2e8d465b83` net/smc: fix connection leak `6a8a4dc2a2` net: dcb: flush lingering app table entries for unregistered devices `f4c63b24de` net: ipv6: ensure we call ipv6_mc_down() at most once `a9c4a74ad5` batman-adv: Don't expect inter-netns unique iflink indices `3dae11d21f` batman-adv: Request iflink once in batadv_get_real_netdevice `dcf10d78ff` batman-adv: Request iflink once in batadv-on-batadv check `81f817f3e5` netfilter: nf_queue: handle socket prefetch `4d05239203` netfilter: nf_queue: fix possible use-after-free `3b9ba964f7` netfilter: nf_queue: don't assume sk is full socket `4e178ed14b` net: fix up skbs delta_truesize in UDP GRO frag_list `eb5e444fe3` e1000e: Correct NVM checksum verification flow `b53d4bfd1a` xfrm: enforce validity of offload input flags `2f0e6d80e8` xfrm: fix the if_id check in changelink `24efaae03b` bpf, sockmap: Do not ignore orig_len parameter `8b0142c414` netfilter: fix use-after-free in __nf_register_net_hook() `4952faa77d` xfrm: fix MTU regression `e93f2be33d` mm: Consider __GFP_NOWARN flag for oversized kvmalloc() calls `912186db09` ntb: intel: fix port config status offset for SPR `1c0b51e62a` thermal: core: Fix TZ_GET_TRIP NULL pointer dereference `a1753d5c29` xen/netfront: destroy queues before real_num_tx_queues is zeroed `ce41d80391` drm/i915: s/JSP2/ICP2/ PCH `61a895da48` iommu/amd: Recover from event log overflow `6951a58881` ASoC: ops: Shift tested values in snd_soc_put_volsw() by +min `dd9dd24fd7` riscv: Fix config KASAN && DEBUG_VIRTUAL `7211aab288` riscv: Fix config KASAN && SPARSEMEM && !SPARSE_VMEMMAP `00fb385f0a` riscv/efi_stub: Fix get_boot_hartid_from_fdt() return value `336872601c` ALSA: intel_hdmi: Fix reference to PCM buffer address `e57dfaf66f` tracing: Add ustring operation to filtering string pointers `4a9d2390f3` drm/amdgpu: check vm ready by amdgpu_vm->evicting flag `67e25eb1b4` ata: pata_hpt37x: fix PCI clock detection `335f11ff74` serial: stm32: prevent TDR register overwrite when sending x_char `c999c5927e` tracing: Add test for user space strings when filtering on string pointers `db36a94ed6` exfat: fix i_blocks for files truncated over 4 GiB `1b810d5cb6` exfat: reuse exfat_inode_info variable instead of calling EXFAT_I() `fdd64084e4` usb: gadget: clear related members when goto fail `c13159a588` usb: gadget: don't release an existing dev->buf `00d5ac05af` net: usb: cdc_mbim: avoid altsetting toggling for Telit FN990 `16f903afba` i2c: qup: allow COMPILE_TEST `57c333ad8c` i2c: cadence: allow COMPILE_TEST `9d6285e632` dmaengine: shdma: Fix runtime PM imbalance on error `37b06d5ebf` selftests/seccomp: Fix seccomp failure by adding missing headers `df9db1a2af` cifs: fix double free race when mount fails in cifs_get_root() `e3850e211d` tipc: fix a bit overflow in tipc_crypto_key_rcv() `6d4985b8a0` KVM: arm64: vgic: Read HW interrupt pending state from the HW `5d4b00e053` Input: clear BTN_RIGHT/MIDDLE on buttonpads `6e7015d982` regulator: core: fix false positive in regulator_late_cleanup() `467d664e5f` ASoC: rt5682: do not block workqueue if card is unbound `0b050b7a0d` ASoC: rt5668: do not block workqueue if card is unbound `11956c6eeb` i2c: bcm2835: Avoid clock stretching timeouts `13f0ea8d11` mac80211_hwsim: initialize ieee80211_tx_info at hw_scan_work `46f6d66219` mac80211_hwsim: report NOACK frames in tx_status `d172937367` Merge 5.10.103 into android12-5.10-lts `915a747ac7` Linux 5.10.103 `78706b051a` memblock: use kfree() to release kmalloced memblock regions `4185b788d3` gpio: tegra186: Fix chip_data type confusion `bb2e0a7723` tty: n_gsm: fix deadlock in gsmtty_open() `e4c8cb95d0` tty: n_gsm: fix wrong tty control line for flow control `1f0641dd0b` tty: n_gsm: fix NULL pointer access due to DLCI release `1e35cb9e12` tty: n_gsm: fix proper link termination after failed open `90b47e617f` tty: n_gsm: fix encoding of control signal octet bit DV `9e2dbc31e3` riscv: fix oops caused by irqsoff latency tracer `e098933866` thermal: int340x: fix memory leak in int3400_notify() `5b1cef5798` RDMA/cma: Do not change route.addr.src_addr outside state checks `8fe4da5524` driver core: Free DMA range map when device is released `2148247643` xhci: Prevent futile URB re-submissions due to incorrect return value. `0b0a229da1` xhci: re-initialize the HC during resume if HCE was set `328faee6d4` usb: dwc3: gadget: Let the interrupt handler disable bottom halves. `e57bdee866` usb: dwc3: pci: Fix Bay Trail phy GPIO mappings `99b2425d91` usb: dwc2: drd: fix soft connect when gadget is unconfigured `c786688037` USB: serial: option: add Telit LE910R1 compositions `220ba174f1` USB: serial: option: add support for DW5829e `3a1dd56e56` tracefs: Set the group ownership in apply_options() not parse_options() `bfa8ffbaaa` USB: gadget: validate endpoint index for xilinx udc `4ce247af3f` usb: gadget: rndis: add spinlock for rndis response list `ddc254fc88` Revert "USB: serial: ch341: add new Product ID for CH341A" `d3fce1b6bd` ata: pata_hpt37x: disable primary channel on HPT371 `18701d8afa` sc16is7xx: Fix for incorrect data being transmitted `d5ddd7343a` iio: Fix error handling for PM `eabcc609cb` iio: imu: st_lsm6dsx: wait for settling time in st_lsm6dsx_read_oneshot `b8d411a962` iio: adc: ad7124: fix mask used for setting AIN_BUFP & AIN_BUFM bits `1aa12ecfdc` iio: adc: men_z188_adc: Fix a resource leak in an error handling path `afbeee13be` tracing: Have traceon and traceoff trigger honor the instance `99eb8d6941` RDMA/ib_srp: Fix a deadlock `a7ab53d3c2` configfs: fix a race in configfs_{,un}register_subsystem() `0ecd3e35d7` RDMA/rtrs-clt: Move free_permit from free_clt to rtrs_clt_close `b0ecf9e594` RDMA/rtrs-clt: Kill wait_for_inflight_permits `8260f1800f` RDMA/rtrs-clt: Fix possible double free in error case `dc64aa4c7d` regmap-irq: Update interrupt clear register for proper reset `2efece1368` spi: spi-zynq-qspi: Fix a NULL pointer dereference in zynq_qspi_exec_mem_op() `67819b983e` net/mlx5e: kTLS, Use CHECKSUM_UNNECESSARY for device-offloaded packets `be55d3e76c` net/mlx5: Fix wrong limitation of metadata match on ecpf `8d617110d7` net/mlx5: Fix possible deadlock on rule deletion `1c59128955` udp_tunnel: Fix end of loop test in udp_tunnel_nic_unregister() `a184f4dd9b` surface: surface3_power: Fix battery readings on batteries without a serial number `91f56a8527` net/smc: Use a mutex for locking "struct smc_pnettable" `7e9880e81d` netfilter: nf_tables: fix memory leak during stateful obj update `af4bc921d3` nfp: flower: Fix a potential leak in nfp_tunnel_add_shared_mac() `58a6d5f24f` net: Force inlining of checksum functions in net/checksum.h `550d98ab30` net: ll_temac: check the return value of devm_kmalloc() `0fc1847359` net/sched: act_ct: Fix flow table lookup after ct clear or switching zones `bc8f768af3` net/mlx5e: Fix wrong return value on ioctl EEPROM query failure `fd020eaaa2` drm/edid: Always set RGB444 `1df9d552fe` openvswitch: Fix setting ipv6 fields causing hw csum failure `dac2490d9e` gso: do not skip outer ip header in case of ipip and net_failover `b692d5dc6f` tipc: Fix end of loop tests for list_for_each_entry() `c5722243d0` net: __pskb_pull_tail() & pskb_carve_frag_list() drop_monitor friends `4a93c65946` io_uring: add a schedule point in io_add_buffers() `7ef94bfb08` bpf: Add schedule points in batch ops `4f5d47e6b4` selftests: bpf: Check bpf_msg_push_data return value `d0caa7218d` bpf: Do not try bpf_msg_push_data with len 0 `962b2a3188` hwmon: Handle failure to register sensor with thermal zone correctly `d8b78314c5` bnxt_en: Fix active FEC reporting to ethtool `7e1eae5d1a` bnx2x: fix driver load from initrd `51e96061c6` perf data: Fix double free in perf_session__delete() `5419b5be88` ping: remove pr_err from ping_lookup `5da17865c7` optee: use driver internal tee_context for some rpc `eb35461384` tee: export teedev_open() and teedev_close_context() `bae7fc6f0d` x86/fpu: Correct pkru/xstate inconsistency `68f19845f5` netfilter: nf_tables_offload: incorrect flow offload action array size `69560efa00` CDC-NCM: avoid overflow in sanity checking `2aeba1ea7c` USB: zaurus: support another broken Zaurus `4f5f5411f0` sr9700: sanity check for packet length `55eec5c630` drm/i915: Correctly populate use_sagv_wm for all pipes `ff9134882d` drm/amdgpu: disable MMHUB PG for Picasso `72fdfc75d4` KVM: x86/mmu: make apf token non-zero to fix bug `646b532f32` parisc/unaligned: Fix ldw() and stw() unalignment handlers `397b5433f7` parisc/unaligned: Fix fldd and fstd unaligned handlers on 32-bit kernel `698dc7d13c` vhost/vsock: don't check owner in vhost_vsock_stop() while releasing `84e303b4d5` clk: jz4725b: fix mmc0 clock gating `72a5b01875` btrfs: tree-checker: check item_size for dev_item `5c967dd073` btrfs: tree-checker: check item_size for inode_item `fcec42dd28` cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug `e1b86e7f5c` Merge branch 'android12-5.10' into `android12-5.10-lts` `cbfab5c59c` Revert "ipv6: per-netns exclusive flowlabel checks" `79553fad5c` Merge 5.10.102 into android12-5.10-lts `47667effb7` Linux 5.10.102 `6062d1267f` lockdep: Correct lock_classes index mapping `f333c1916f` i2c: brcmstb: fix support for DSL and CM variants `9fee985f9a` copy_process(): Move fd_install() out of sighand->siglock critical section `e3fdbc40b7` i2c: qcom-cci: don't put a device tree node before i2c_add_adapter() `b5b2a92117` i2c: qcom-cci: don't delete an unregistered adapter `3b6d25d1b6` dmaengine: sh: rcar-dmac: Check for error num after dma_set_max_seg_size `2c35c95d36` dmaengine: stm32-dmamux: Fix PM disable depth imbalance in stm32_dmamux_probe `4f907b6eb7` dmaengine: sh: rcar-dmac: Check for error num after setting mask `797b380f07` net: sched: limit TC_ACT_REPEAT loops `595c259f75` EDAC: Fix calculation of returned address and next offset in edac_align_ptr() `f6ce4e3289` scsi: lpfc: Fix pt2pt NVMe PRLI reject LOGO loop `3680b2b810` kconfig: fix failing to generate auto.conf `b6787e284d` net: macb: Align the dma and coherent dma masks `439171a291` net: usb: qmi_wwan: Add support for Dell DW5829e `15616ba17d` tracing: Fix tp_printk option related with tp_printk_stop_on_boot `5a253a23d9` drm/rockchip: dw_hdmi: Do not leave clock enabled in error case `1e7433fb95` xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create `a21f472fb5` soc: aspeed: lpc-ctrl: Block error printing on probe defer cases `fecb05b1ce` ata: libata-core: Disable TRIM on M88V29 `b19ec7afa9` lib/iov_iter: initialize "flags" in new pipe_buffer `3045532278` kconfig: let 'shell' return enough output for deep path names `e05dde47f5` selftests: fixup build warnings in pidfd / clone3 tests `531a56c2e0` pidfd: fix test failure due to stack overflow on some arches `429ef36c4f` arm64: dts: meson-g12: drop BL32 region from SEI510/SEI610 `1415f22ee5` arm64: dts: meson-g12: add ATF BL32 reserved-memory region `605080f19e` arm64: dts: meson-gx: add ATF BL32 reserved-memory region `eefb68794f` netfilter: conntrack: don't refresh sctp entries in closed state `1ab4824857` irqchip/sifive-plic: Add missing thead,c900-plic match string `98bc06c46d` phy: usb: Leave some clocks running during suspend `717f2fa858` ARM: OMAP2+: adjust the location of put_device() call in omapdss_init_of `6932353af7` ARM: OMAP2+: hwmod: Add of_node_put() before break `521dcc107e` NFS: Don't set NFS_INO_INVALID_XATTR if there is no xattr cache `fb00319afb` KVM: x86/pmu: Use AMD64_RAW_EVENT_MASK for PERF_TYPE_RAW `0ee4bb8ce8` KVM: x86/pmu: Don't truncate the PerfEvtSeln MSR when creating a perf event `99cd2a0437` KVM: x86/pmu: Refactoring find_arch_event() to pmc_perf_hw_id() `91d8866ca5` Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj `a176d559e8` mtd: rawnand: brcmnand: Fixed incorrect sub-page ECC status `1a49b1b0b0` mtd: rawnand: qcom: Fix clock sequencing in qcom_nandc_probe() `8c848744c1` tty: n_tty: do not look ahead for EOL character past the end of the buffer `8daa0436ce` NFS: Do not report writeback errors in nfs_getattr() `f9b7385c0f` NFS: LOOKUP_DIRECTORY is also ok with symlinks `598dbaf74b` block/wbt: fix negative inflight counter when remove scsi device `dc6faa0ede` ASoC: tas2770: Insert post reset delay `9dcedbe943` KVM: SVM: Never reject emulation due to SMAP errata for !SEV guests `a4eeeaca50` mtd: rawnand: gpmi: don't leak PM reference in error path `fb26219b40` powerpc/lib/sstep: fix 'ptesync' build error `54f76366cd` ASoC: ops: Fix stereo change notifications in snd_soc_put_volsw_range() `0df1badfdf` ASoC: ops: Fix stereo change notifications in snd_soc_put_volsw() `1ef76832fe` ALSA: hda: Fix missing codec probe on Shenker Dock 15 `c72c3b597a` ALSA: hda: Fix regression on forced probe mask option `63b1602c2f` ALSA: hda/realtek: Fix deadlock by COEF mutex `b6a5e8f45f` ALSA: hda/realtek: Add quirk for Legion Y9000X 2019 `67de71b943` selftests/exec: Add non-regular to TEST_GEN_PROGS `d3018a1962` perf bpf: Defer freeing string after possible strlen() on it `016e3ca9c5` dpaa2-eth: Initialize mutex used in one step timestamping path `50f3b00d4c` libsubcmd: Fix use-after-free for realloc(..., 0) `ffa8df4f0e` bonding: fix data-races around agg_select_timer `d9bd9d4c60` net_sched: add __rcu annotation to netdev->qdisc `877a05672f` drop_monitor: fix data-race in dropmon_net_event / trace_napi_poll_hit `a0e004e620` bonding: force carrier update when releasing slave `8dec3c4e73` ping: fix the dif and sdif check in ping_lookup `6793a9b028` net: ieee802154: ca8210: Fix lifs/sifs periods `f48bd34137` net: dsa: lantiq_gswip: fix use after free in gswip_remove() `d9b2203e5a` net: dsa: lan9303: fix reset on probe `4f523f15e5` ipv6: per-netns exclusive flowlabel checks `100344200a` netfilter: nft_synproxy: unregister hooks on init error path `26931971db` selftests: netfilter: fix exit value for nft_concat_range `b26ea3f6b7` iwlwifi: pcie: gen2: fix locking when "HW not ready" `8867f99379` iwlwifi: pcie: fix locking when "HW not ready" `f3c1910257` drm/i915/gvt: Make DRM_I915_GVT depend on X86 `87cd1bbd66` vsock: remove vsock from connected table when connect is interrupted by a signal `eb7bf11e8e` drm/i915/opregion: check port number bounds for SWSCI display power state `5564d83ebc` drm/radeon: Fix backlight control on iMac 12,1 `008508c16a` iwlwifi: fix use-after-free `44b81136e8` kbuild: lto: Merge module sections if and only if CONFIG_LTO_CLANG is enabled `8b53e5f737` kbuild: lto: merge module sections `45102b538a` random: wake up /dev/random writers after zap `143aaf79ba` gcc-plugins/stackleak: Use noinstr in favor of notrace `de55891e16` Revert "module, async: async_synchronize_full() on module init iff async is used" `3c958dbcba` x86/Xen: streamline (and fix) PV CPU enumeration `e76d0a9692` drm/amdgpu: fix logic inversion in check `324f5bdc52` nvme-rdma: fix possible use-after-free in transport error_recovery work `e192184cf8` nvme-tcp: fix possible use-after-free in transport error_recovery work `0ead57ceb2` nvme: fix a possible use-after-free in controller reset during load `fe9ac3eaa2` scsi: pm8001: Fix use-after-free for aborted SSP/STP sas_task `d872e7b5fe` scsi: pm8001: Fix use-after-free for aborted TMF sas_task `1e73f5cfc1` quota: make dquot_quota_sync return errors from ->sync_fs `c405640aad` vfs: make freeze_super abort when sync_filesystem returns error `b9a229fd48` ax25: improve the incomplete fix to avoid UAF and NPD bugs `139fce2992` selftests: skip mincore.check_file_mmap when fs lacks needed support `204a2390da` selftests: openat2: Skip testcases that fail with EOPNOTSUPP `2be48bfac7` selftests: openat2: Add missing dependency in Makefile `74a30666b4` selftests: openat2: Print also errno in failure messages `bfc84cfd90` selftests/zram: Adapt the situation that /dev/zram0 is being used `f0eba714c1` selftests/zram01.sh: Fix compression ratio calculation `7bb704b69f` selftests/zram: Skip max_comp_streams interface on newer kernel `0fd484644c` net: ieee802154: at86rf230: Stop leaking skb's `0c18a75193` kselftest: signal all child processes `1136141f19` selftests: rtc: Increase test timeout so that all tests run `79175b6ee6` platform/x86: ISST: Fix possible circular locking dependency detected `066c905ed0` platform/x86: touchscreen_dmi: Add info for the RWC NANOTE P8 AY07J 2-in-1 `0b17d4b51c` btrfs: send: in case of IO error log it `78a68bbebd` parisc: Add ioread64_lo_hi() and iowrite64_lo_hi() `ade1077c7f` PCI: hv: Fix NUMA node assignment when kernel boots with custom NUMA topology `254090925e` mm: don't try to NUMA-migrate COW pages that have other uses `ab2b4e65a1` mmc: block: fix read single on recovery logic `7756716872` parisc: Fix sglist access in ccio-dma.c `f8f519d7df` parisc: Fix data TLB miss in sba_unmap_sg `4d569b959e` parisc: Drop __init from map_pages declaration `8e3f9a098e` serial: parisc: GSC: fix build when IOSAPIC is not set `fe383750d4` Revert "svm: Add warning message for AVIC IPI invalid target" `126382b556` HID:Add support for UGTABLET WP5540 `f100e758ce` scsi: lpfc: Fix mailbox command failure during driver initialization `4578b979ef` can: isotp: add SF_BROADCAST support for functional addressing `5d42865fc3` can: isotp: prevent race between isotp_bind() and isotp_setsockopt() `db3f3636e4` fs/proc: task_mmu.c: don't read mapcount for migration entry `0849f83e47` fget: clarify and improve __fget_files() implementation `657991fb06` rcu: Do not report strict GPs for outgoing CPUs `8c8385972e` mm: memcg: synchronize objcg lists with a dedicated spinlock `d0f4aa2d97` drm/nouveau/pmu/gm200-: use alternate falcon reset sequence `add227a8d8` Merge branch 'android12-5.10' into `android12-5.10-lts` The .xml abi file was also updated due to changes required from the -lts branch that were merged there: Leaf changes summary: 1 artifact changed Changed leaf types summary: 1 leaf type changed Removed/Changed/Added functions summary: 0 Removed, 0 Changed, 0 Added function Removed/Changed/Added variables summary: 0 Removed, 0 Changed, 0 Added variable 'struct snd_pcm_runtime at pcm.h:344:1' changed: type size changed from 6144 to 6592 (in bits) 2 data member insertions: 'mutex buffer_mutex', at offset 6144 (in bits) at pcm.h:432:1 'atomic_t buffer_accessing', at offset 6528 (in bits) at pcm.h:433:1 114 impacted interfaces Change-Id: Ie9262400472eda3e30d1ef26738df1d5dd4c319d Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2022-05-27 09:24:14 -07:00
Lina Wang	1e037dd790	FROMGIT: net: fix wrong network header length When clatd starts with ebpf offloaing, and NETIF_F_GRO_FRAGLIST is enable, several skbs are gathered in skb_shinfo(skb)->frag_list. The first skb's ipv6 header will be changed to ipv4 after bpf_skb_proto_6_to_4, network_header\transport_header\mac_header have been updated as ipv4 acts, but other skbs in frag_list didnot update anything, just ipv6 packets. udp_queue_rcv_skb will call skb_segment_list to traverse other skbs in frag_list and make sure right udp payload is delivered to user space. Unfortunately, other skbs in frag_list who are still ipv6 packets are updated like the first skb and will have wrong transport header length. e.g.before bpf_skb_proto_6_to_4,the first skb and other skbs in frag_list has the same network_header(24)& transport_header(64), after bpf_skb_proto_6_to_4, ipv6 protocol has been changed to ipv4, the first skb's network_header is 44,transport_header is 64, other skbs in frag_list didnot change.After skb_segment_list, the other skbs in frag_list has different network_header(24) and transport_header(44), so there will be 20 bytes different from original,that is difference between ipv6 header and ipv4 header. Just change transport_header to be the same with original. Actually, there are two solutions to fix it, one is traversing all skbs and changing every skb header in bpf_skb_proto_6_to_4, the other is modifying frag_list skb's header in skb_segment_list. Considering efficiency, adopt the second one--- when the first skb and other skbs in frag_list has different network_header length, restore them to make sure right udp payload is delivered to user space. Signed-off-by: Lina Wang <lina.wang@mediatek.com> Signed-off-by: David S. Miller <davem@davemloft.net> (cherry picked from commit cf3ab8d4a797960b4be20565abb3bcd227b18a68 https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git master) Bug: 218157620 Test: TreeHugger Signed-off-by: Maciej Żenczykowski <maze@google.com> Change-Id: I36f2f329ec1a56bb0742141a7fa482cafa183ad3	2022-05-09 15:41:38 +00:00
Greg Kroah-Hartman	95f4203fc9	This is the 5.10.110 stable release -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmJQLWwACgkQONu9yGCS aT4R2BAAr/cGnf2/BQ6+zNPW+LlfGn75803yd+oWNL8WzjNiQGrTsQavE1jL0LXP 45iPxvY6eOlP9oEoJGYyNYhzQfUM92Unysa/KemB/xUBsb2If0ZdWk1WB9Lnw0xq m65kACXovbcg4LsZGpgCv7ln1ykogo+bNMES9P6CLxwKR/DMKUeJxbRNKE/AkD5l DxF7IJEP+YRbKAtoLM2Xj4KdjVSfRIfs+Pf0A1t43GqAw6tt3beqmzeCwDzuzz5a DHpXS6PeJjTZOjz4LkuBSbyK5cKGFv1C6o7JVjWSZhDyI5E4OLdNDpNKqcjsXAN+ wMqS1eh4gYUBXmPE44BGwkkugPyaR0/KHUebfkFZG2/H/8DfvrGqlbvsGSFNXxsV jH2/AV/rOxAFeM/U0c1I4Ve42MU18kdf1MRBo0Dq5xSoN9HFQhNp+HE5jpppgsvi FYpMqZoQzH31GIjOq7g0zLdj4NTBrkO9dh7kbpH0Xay1yBmigvD2PA4qpsL1+VMI v73Iq/RJVGUJFAeiYFjn9IGs9EsiKNG08v9uoKS+1m1VLrpVdgwtzo+RjJ/E51Mt Nk4WK94MyoivkRFKulDasv9yBWdcZCfljc91271UCKCERlyO/bmsTqhffeATGGRh N/7oxa71BHvxp0VYqvKD6xFUs+jFt9DQmIX7Pl1/yLpaz+sN0no= =31mv -----END PGP SIGNATURE----- Merge 5.10.110 into android12-5.10-lts Changes in 5.10.110 swiotlb: fix info leak with DMA_FROM_DEVICE USB: serial: pl2303: add IBM device IDs USB: serial: simple: add Nokia phone driver hv: utils: add PTP_1588_CLOCK to Kconfig to fix build netdevice: add the case if dev is NULL HID: logitech-dj: add new lightspeed receiver id xfrm: fix tunnel model fragmentation behavior ARM: mstar: Select HAVE_ARM_ARCH_TIMER virtio_console: break out of buf poll on remove vdpa/mlx5: should verify CTRL_VQ feature exists for MQ tools/virtio: fix virtio_test execution ethernet: sun: Free the coherent when failing in probing gpio: Revert regression in sysfs-gpio (gpiolib.c) spi: Fix invalid sgs value net:mcf8390: Use platform_get_irq() to get the interrupt Revert "gpio: Revert regression in sysfs-gpio (gpiolib.c)" spi: Fix erroneous sgs value with min_t() Input: zinitix - do not report shadow fingers af_key: add __GFP_ZERO flag for compose_sadb_supported in function pfkey_register net: dsa: microchip: add spi_device_id tables locking/lockdep: Avoid potential access of invalid memory in lock_class iommu/iova: Improve 32-bit free space estimate tpm: fix reference counting for struct tpm_chip virtio-blk: Use blk_validate_block_size() to validate block size USB: usb-storage: Fix use of bitfields for hardware data in ene_ub6250.c xhci: fix garbage USBSTS being logged in some cases xhci: fix runtime PM imbalance in USB2 resume xhci: make xhci_handshake timeout for xhci_reset() adjustable xhci: fix uninitialized string returned by xhci_decode_ctrl_ctx() mei: me: add Alder Lake N device id. mei: avoid iterator usage outside of list_for_each_entry coresight: Fix TRCCONFIGR.QE sysfs interface iio: afe: rescale: use s64 for temporary scale calculations iio: inkern: apply consumer scale on IIO_VAL_INT cases iio: inkern: apply consumer scale when no channel scale is available iio: inkern: make a best effort on offset calculation greybus: svc: fix an error handling bug in gb_svc_hello() clk: uniphier: Fix fixed-rate initialization ptrace: Check PTRACE_O_SUSPEND_SECCOMP permission on PTRACE_SEIZE KEYS: fix length validation in keyctl_pkey_params_get_2() Documentation: add link to stable release candidate tree Documentation: update stable tree link firmware: stratix10-svc: add missing callback parameter on RSU HID: intel-ish-hid: Use dma_alloc_coherent for firmware update SUNRPC: avoid race between mod_timer() and del_timer_sync() NFSD: prevent underflow in nfssvc_decode_writeargs() NFSD: prevent integer overflow on 32 bit systems f2fs: fix to unlock page correctly in error path of is_alive() f2fs: quota: fix loop condition at f2fs_quota_sync() f2fs: fix to do sanity check on .cp_pack_total_block_count remoteproc: Fix count check in rproc_coredump_write() pinctrl: samsung: drop pin banks references on error paths spi: mxic: Fix the transmit path mtd: rawnand: protect access to rawnand devices while in suspend can: ems_usb: ems_usb_start_xmit(): fix double dev_kfree_skb() in error path jffs2: fix use-after-free in jffs2_clear_xattr_subsystem jffs2: fix memory leak in jffs2_do_mount_fs jffs2: fix memory leak in jffs2_scan_medium mm/pages_alloc.c: don't create ZONE_MOVABLE beyond the end of a node mm: invalidate hwpoison page cache page in fault path mempolicy: mbind_range() set_policy() after vma_merge() scsi: libsas: Fix sas_ata_qc_issue() handling of NCQ NON DATA commands qed: display VF trust config qed: validate and restrict untrusted VFs vlan promisc mode riscv: Fix fill_callchain return value riscv: Increase stack size under KASAN Revert "Input: clear BTN_RIGHT/MIDDLE on buttonpads" cifs: prevent bad output lengths in smb2_ioctl_query_info() cifs: fix NULL ptr dereference in smb2_ioctl_query_info() ALSA: cs4236: fix an incorrect NULL check on list iterator ALSA: hda: Avoid unsol event during RPM suspending ALSA: pcm: Fix potential AB/BA lock with buffer_mutex and mmap_lock ALSA: hda/realtek: Fix audio regression on Mi Notebook Pro 2020 mm: madvise: skip unmapped vma holes passed to process_madvise mm: madvise: return correct bytes advised with process_madvise Revert "mm: madvise: skip unmapped vma holes passed to process_madvise" mm,hwpoison: unmap poisoned page before invalidation mm/kmemleak: reset tag when compare object pointer dm integrity: set journal entry unused when shrinking device drbd: fix potential silent data corruption can: isotp: sanitize CAN ID checks in isotp_bind() powerpc/kvm: Fix kvm_use_magic_page udp: call udp_encap_enable for v6 sockets when enabling encap arm64: signal: nofpsimd: Do not allocate fp/simd context when not available arm64: dts: ti: k3-am65: Fix gic-v3 compatible regs arm64: dts: ti: k3-j721e: Fix gic-v3 compatible regs arm64: dts: ti: k3-j7200: Fix gic-v3 compatible regs ACPI: properties: Consistently return -ENOENT if there are no more references coredump: Also dump first pages of non-executable ELF libraries ext4: fix ext4_fc_stats trace point ext4: fix fs corruption when tring to remove a non-empty directory with IO error drivers: hamradio: 6pack: fix UAF bug caused by mod_timer() mailbox: tegra-hsp: Flush whole channel block: limit request dispatch loop duration block: don't merge across cgroup boundaries if blkcg is enabled drm/edid: check basic audio support on CEA extension block video: fbdev: sm712fb: Fix crash in smtcfb_read() video: fbdev: atari: Atari 2 bpp (STe) palette bugfix ARM: dts: at91: sama5d2: Fix PMERRLOC resource size ARM: dts: exynos: fix UART3 pins configuration in Exynos5250 ARM: dts: exynos: add missing HDMI supplies on SMDK5250 ARM: dts: exynos: add missing HDMI supplies on SMDK5420 mgag200 fix memmapsl configuration in GCTL6 register carl9170: fix missing bit-wise or operator for tx_params pstore: Don't use semaphores in always-atomic-context code thermal: int340x: Increase bitmap size lib/raid6/test: fix multiple definition linking error exec: Force single empty string when argv is empty crypto: rsa-pkcs1pad - only allow with rsa crypto: rsa-pkcs1pad - correctly get hash from source scatterlist crypto: rsa-pkcs1pad - restore signature length check crypto: rsa-pkcs1pad - fix buffer overread in pkcs1pad_verify_complete() bcache: fixup multiple threads crash DEC: Limit PMAX memory probing to R3k systems media: gpio-ir-tx: fix transmit with long spaces on Orange Pi PC media: davinci: vpif: fix unbalanced runtime PM get media: davinci: vpif: fix unbalanced runtime PM enable xtensa: fix stop_machine_cpuslocked call in patch_text xtensa: fix xtensa_wsr always writing 0 brcmfmac: firmware: Allocate space for default boardrev in nvram brcmfmac: pcie: Release firmwares in the brcmf_pcie_setup error path brcmfmac: pcie: Replace brcmf_pcie_copy_mem_todev with memcpy_toio brcmfmac: pcie: Fix crashes due to early IRQs drm/i915/opregion: check port number bounds for SWSCI display power state drm/i915/gem: add missing boundary check in vm_access PCI: pciehp: Clear cmd_busy bit in polling mode PCI: xgene: Revert "PCI: xgene: Fix IB window setup" regulator: qcom_smd: fix for_each_child.cocci warnings selinux: check return value of sel_make_avc_files hwrng: cavium - Check health status while reading random data hwrng: cavium - HW_RANDOM_CAVIUM should depend on ARCH_THUNDER crypto: sun8i-ss - really disable hash on A80 crypto: authenc - Fix sleep in atomic context in decrypt_tail crypto: mxs-dcp - Fix scatterlist processing thermal: int340x: Check for NULL after calling kmemdup() spi: tegra114: Add missing IRQ check in tegra_spi_probe arm64/mm: avoid fixmap race condition when create pud mapping selftests/x86: Add validity check and allow field splitting crypto: rockchip - ECB does not need IV audit: log AUDIT_TIME_* records only from rules EVM: fix the evm= __setup handler return value crypto: ccree - don't attempt 0 len DMA mappings spi: pxa2xx-pci: Balance reference count for PCI DMA device hwmon: (pmbus) Add mutex to regulator ops hwmon: (sch56xx-common) Replace WDOG_ACTIVE with WDOG_HW_RUNNING nvme: cleanup __nvme_check_ids block: don't delete queue kobject before its children PM: hibernate: fix __setup handler error handling PM: suspend: fix return value of __setup handler spi: spi-zynqmp-gqspi: Handle error for dma_set_mask hwrng: atmel - disable trng on failure path crypto: sun8i-ss - call finalize with bh disabled crypto: sun8i-ce - call finalize with bh disabled crypto: amlogic - call finalize with bh disabled crypto: vmx - add missing dependencies clocksource/drivers/timer-ti-dm: Fix regression from errata i940 fix clocksource/drivers/exynos_mct: Refactor resources allocation clocksource/drivers/exynos_mct: Handle DTS with higher number of interrupts clocksource/drivers/timer-microchip-pit64b: Use notrace clocksource/drivers/timer-of: Check return value of of_iomap in timer_of_base_init() ACPI: APEI: fix return value of __setup handlers crypto: ccp - ccp_dmaengine_unregister release dma channels crypto: ccree - Fix use after free in cc_cipher_exit() vfio: platform: simplify device removal amba: Make the remove callback return void hwrng: nomadik - Change clk_disable to clk_disable_unprepare hwmon: (pmbus) Add Vin unit off handling clocksource: acpi_pm: fix return value of __setup handler io_uring: terminate manual loop iterator loop correctly for non-vecs watch_queue: Fix NULL dereference in error cleanup watch_queue: Actually free the watch f2fs: fix to enable ATGC correctly via gc_idle sysfs interface sched/debug: Remove mpol_get/put and task_lock/unlock from sched_show_numa sched/core: Export pelt_thermal_tp rseq: Optimise rseq_get_rseq_cs() and clear_rseq_cs() rseq: Remove broken uapi field layout on 32-bit little endian perf/core: Fix address filter parser for multiple filters perf/x86/intel/pt: Fix address filter config for 32-bit kernel f2fs: fix missing free nid in f2fs_handle_failed_inode nfsd: more robust allocation failure handling in nfsd_file_cache_init f2fs: fix to avoid potential deadlock btrfs: fix unexpected error path when reflinking an inline extent f2fs: compress: remove unneeded read when rewrite whole cluster f2fs: fix compressed file start atomic write may cause data corruption selftests, x86: fix how check_cc.sh is being invoked kunit: make kunit_test_timeout compatible with comment media: staging: media: zoran: fix usage of vb2_dma_contig_set_max_seg_size media: v4l2-mem2mem: Apply DST_QUEUE_OFF_BASE on MMAP buffers across ioctls media: mtk-vcodec: potential dereference of null pointer media: bttv: fix WARNING regression on tunerless devices ASoC: xilinx: xlnx_formatter_pcm: Handle sysclk setting ASoC: generic: simple-card-utils: remove useless assignment media: coda: Fix missing put_device() call in coda_get_vdoa_data media: meson: vdec: potential dereference of null pointer media: hantro: Fix overfill bottom register field name media: aspeed: Correct value for h-total-pixels video: fbdev: matroxfb: set maxvram of vbG200eW to the same as vbG200 to avoid black screen video: fbdev: controlfb: Fix set but not used warnings video: fbdev: controlfb: Fix COMPILE_TEST build video: fbdev: smscufx: Fix null-ptr-deref in ufx_usb_probe() video: fbdev: atmel_lcdfb: fix an error code in atmel_lcdfb_probe() video: fbdev: fbcvt.c: fix printing in fb_cvt_print_name() firmware: qcom: scm: Remove reassignment to desc following initializer ARM: dts: qcom: ipq4019: fix sleep clock soc: qcom: rpmpd: Check for null return of devm_kcalloc soc: qcom: ocmem: Fix missing put_device() call in of_get_ocmem soc: qcom: aoss: remove spurious IRQF_ONESHOT flags arm64: dts: qcom: sdm845: fix microphone bias properties and values arm64: dts: qcom: sm8150: Correct TCS configuration for apps rsc firmware: ti_sci: Fix compilation failure when CONFIG_TI_SCI_PROTOCOL is not defined soc: ti: wkup_m3_ipc: Fix IRQ check in wkup_m3_ipc_probe ARM: dts: sun8i: v3s: Move the csi1 block to follow address order ARM: dts: imx: Add missing LVDS decoder on M53Menlo media: video/hdmi: handle short reads of hdmi info frame. media: em28xx: initialize refcount before kref_get media: usb: go7007: s2250-board: fix leak in probe() media: cedrus: H265: Fix neighbour info buffer size media: cedrus: h264: Fix neighbour info buffer size ASoC: codecs: wcd934x: fix return value of wcd934x_rx_hph_mode_put uaccess: fix nios2 and microblaze get_user_8() ASoC: rt5663: check the return value of devm_kzalloc() in rt5663_parse_dp() ASoC: ti: davinci-i2s: Add check for clk_enable() ALSA: spi: Add check for clk_enable() arm64: dts: ns2: Fix spi-cpol and spi-cpha property arm64: dts: broadcom: Fix sata nodename printk: fix return value of printk.devkmsg __setup handler ASoC: mxs-saif: Handle errors for clk_enable ASoC: atmel_ssc_dai: Handle errors for clk_enable ASoC: dwc-i2s: Handle errors for clk_enable ASoC: soc-compress: prevent the potentially use of null pointer memory: emif: Add check for setup_interrupts memory: emif: check the pointer temp in get_device_details() ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction arm64: dts: rockchip: Fix SDIO regulator supply properties on rk3399-firefly m68k: coldfire/device.c: only build for MCF_EDMA when h/w macros are defined media: stk1160: If start stream fails, return buffers with VB2_BUF_STATE_QUEUED media: vidtv: Check for null return of vzalloc ASoC: atmel: Add missing of_node_put() in at91sam9g20ek_audio_probe ASoC: wm8350: Handle error for wm8350_register_irq ASoC: fsi: Add check for clk_enable video: fbdev: omapfb: Add missing of_node_put() in dvic_probe_of media: saa7134: convert list_for_each to entry variant media: saa7134: fix incorrect use to determine if list is empty ivtv: fix incorrect device_caps for ivtvfb ASoC: rockchip: i2s: Use devm_platform_get_and_ioremap_resource() ASoC: rockchip: i2s: Fix missing clk_disable_unprepare() in rockchip_i2s_probe ASoC: SOF: Add missing of_node_put() in imx8m_probe ASoC: dmaengine: do not use a NULL prepare_slave_config() callback ASoC: mxs: Fix error handling in mxs_sgtl5000_probe ASoC: fsl_spdif: Disable TX clock when stop ASoC: imx-es8328: Fix error return code in imx_es8328_probe() ASoC: msm8916-wcd-digital: Fix missing clk_disable_unprepare() in msm8916_wcd_digital_probe mmc: davinci_mmc: Handle error for clk_enable ASoC: atmel: sam9x5_wm8731: use devm_snd_soc_register_card() ASoC: atmel: Fix error handling in sam9x5_wm8731_driver_probe ASoC: msm8916-wcd-analog: Fix error handling in pm8916_wcd_analog_spmi_probe ASoC: codecs: wcd934x: Add missing of_node_put() in wcd934x_codec_parse_data ARM: configs: multi_v5_defconfig: re-enable CONFIG_V4L_PLATFORM_DRIVERS drm/meson: osd_afbcd: Add an exit callback to struct meson_afbcd_ops drm/bridge: Fix free wrong object in sii8620_init_rcp_input_dev drm/bridge: Add missing pm_runtime_disable() in __dw_mipi_dsi_probe drm/bridge: nwl-dsi: Fix PM disable depth imbalance in nwl_dsi_probe drm: bridge: adv7511: Fix ADV7535 HPD enablement ath10k: fix memory overwrite of the WoWLAN wakeup packet pattern drm/panfrost: Check for error num after setting mask libbpf: Fix possible NULL pointer dereference when destroying skeleton udmabuf: validate ubuf->pagecount Bluetooth: hci_serdev: call init_rwsem() before p->open() mtd: onenand: Check for error irq mtd: rawnand: gpmi: fix controller timings setting drm/edid: Don't clear formats if using deep color ionic: fix type complaint in ionic_dev_cmd_clean() drm/nouveau/acr: Fix undefined behavior in nvkm_acr_hsfw_load_bl() drm/amd/display: Fix a NULL pointer dereference in amdgpu_dm_connector_add_common_modes() drm/amd/pm: return -ENOTSUPP if there is no get_dpm_ultimate_freq function ath9k_htc: fix uninit value bugs RDMA/core: Set MR type in ib_reg_user_mr KVM: PPC: Fix vmx/vsx mixup in mmio emulation i40e: don't reserve excessive XDP_PACKET_HEADROOM on XSK Rx to skb i40e: respect metadata on XSK Rx to skb power: reset: gemini-poweroff: Fix IRQ check in gemini_poweroff_probe ray_cs: Check ioremap return value powerpc: dts: t1040rdb: fix ports names for Seville Ethernet switch KVM: PPC: Book3S HV: Check return value of kvmppc_radix_init powerpc/perf: Don't use perf_hw_context for trace IMC PMU mt76: mt7915: use proper aid value in mt7915_mcu_wtbl_generic_tlv in sta mode mt76: mt7915: use proper aid value in mt7915_mcu_sta_basic_tlv mt76: mt7603: check sta_rates pointer in mt7603_sta_rate_tbl_update mt76: mt7615: check sta_rates pointer in mt7615_sta_rate_tbl_update net: dsa: mv88e6xxx: Enable port policy support on 6097 scripts/dtc: Call pkg-config POSIXly correct livepatch: Fix build failure on 32 bits processors PCI: aardvark: Fix reading PCI_EXP_RTSTA_PME bit on emulated bridge drm/bridge: dw-hdmi: use safe format when first in bridge chain power: supply: ab8500: Fix memory leak in ab8500_fg_sysfs_init HID: i2c-hid: fix GET/SET_REPORT for unnumbered reports iommu/ipmmu-vmsa: Check for error num after setting mask drm/amd/pm: enable pm sysfs write for one VF mode drm/amd/display: Add affected crtcs to atomic state for dsc mst unplug IB/cma: Allow XRC INI QPs to set their local ACK timeout dax: make sure inodes are flushed before destroy cache iwlwifi: Fix -EIO error code that is never returned iwlwifi: mvm: Fix an error code in iwl_mvm_up() drm/msm/dp: populate connector of struct dp_panel drm/msm/dpu: add DSPP blocks teardown drm/msm/dpu: fix dp audio condition dm crypt: fix get_key_size compiler warning if !CONFIG_KEYS scsi: pm8001: Fix command initialization in pm80XX_send_read_log() scsi: pm8001: Fix command initialization in pm8001_chip_ssp_tm_req() scsi: pm8001: Fix payload initialization in pm80xx_set_thermal_config() scsi: pm8001: Fix le32 values handling in pm80xx_set_sas_protocol_timer_config() scsi: pm8001: Fix payload initialization in pm80xx_encrypt_update() scsi: pm8001: Fix le32 values handling in pm80xx_chip_ssp_io_req() scsi: pm8001: Fix le32 values handling in pm80xx_chip_sata_req() scsi: pm8001: Fix NCQ NON DATA command task initialization scsi: pm8001: Fix NCQ NON DATA command completion handling scsi: pm8001: Fix abort all task initialization RDMA/mlx5: Fix the flow of a miss in the allocation of a cache ODP MR drm/amd/display: Remove vupdate_int_entry definition TOMOYO: fix __setup handlers return values ext2: correct max file size computing drm/tegra: Fix reference leak in tegra_dsi_ganged_probe power: supply: bq24190_charger: Fix bq24190_vbus_is_enabled() wrong false return scsi: hisi_sas: Change permission of parameter prot_mask drm/bridge: cdns-dsi: Make sure to to create proper aliases for dt bpf, arm64: Call build_prologue() first in first JIT pass bpf, arm64: Feed byte-offset into bpf line info gpu: host1x: Fix a memory leak in 'host1x_remove()' libbpf: Skip forward declaration when counting duplicated type names powerpc/mm/numa: skip NUMA_NO_NODE onlining in parse_numa_properties() powerpc/Makefile: Don't pass -mcpu=powerpc64 when building 32-bit KVM: x86: Fix emulation in writing cr8 KVM: x86/emulator: Defer not-present segment check in __load_segment_descriptor() hv_balloon: rate-limit "Unhandled message" warning i2c: xiic: Make bus names unique power: supply: wm8350-power: Handle error for wm8350_register_irq power: supply: wm8350-power: Add missing free in free_charger_irq IB/hfi1: Allow larger MTU without AIP PCI: Reduce warnings on possible RW1C corruption net: axienet: fix RX ring refill allocation failure handling mips: DEC: honor CONFIG_MIPS_FP_SUPPORT=n powerpc/sysdev: fix incorrect use to determine if list is empty mfd: mc13xxx: Add check for mc13xxx_irq_request libbpf: Unmap rings when umem deleted selftests/bpf: Make test_lwt_ip_encap more stable and faster platform/x86: huawei-wmi: check the return value of device_create_file() powerpc: 8xx: fix a return value error in mpc8xx_pic_init vxcan: enable local echo for sent CAN frames ath10k: Fix error handling in ath10k_setup_msa_resources mips: cdmm: Fix refcount leak in mips_cdmm_phys_base MIPS: RB532: fix return value of __setup handler MIPS: pgalloc: fix memory leak caused by pgd_free() mtd: rawnand: atmel: fix refcount issue in atmel_nand_controller_init RDMA/mlx5: Fix memory leak in error flow for subscribe event routine bpf, sockmap: Fix memleak in tcp_bpf_sendmsg while sk msg is full bpf, sockmap: Fix more uncharged while msg has more_data bpf, sockmap: Fix double uncharge the mem of sk_msg samples/bpf, xdpsock: Fix race when running for fix duration of time USB: storage: ums-realtek: fix error code in rts51x_read_mem() can: isotp: return -EADDRNOTAVAIL when reading from unbound socket can: isotp: support MSG_TRUNC flag when reading from socket bareudp: use ipv6_mod_enabled to check if IPv6 enabled selftests/bpf: Fix error reporting from sock_fields programs Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed Bluetooth: btmtksdio: Fix kernel oops in btmtksdio_interrupt ipv4: Fix route lookups when handling ICMP redirects and PMTU updates af_netlink: Fix shift out of bounds in group mask calculation i2c: meson: Fix wrong speed use from probe i2c: mux: demux-pinctrl: do not deactivate a master that is not active selftests/bpf/test_lirc_mode2.sh: Exit with proper code PCI: Avoid broken MSI on SB600 USB devices net: bcmgenet: Use stronger register read/writes to assure ordering tcp: ensure PMTU updates are processed during fastopen openvswitch: always update flow key after nat tipc: fix the timer expires after interval 100ms mfd: asic3: Add missing iounmap() on error asic3_mfd_probe mxser: fix xmit_buf leak in activate when LSR == 0xff pwm: lpc18xx-sct: Initialize driver data and hardware before pwmchip_add() fsi: aspeed: convert to devm_platform_ioremap_resource fsi: Aspeed: Fix a potential double free misc: alcor_pci: Fix an error handling path cpufreq: qcom-cpufreq-nvmem: fix reading of PVS Valid fuse soundwire: intel: fix wrong register name in intel_shim_wake clk: qcom: ipq8074: fix PCI-E clock oops iio: mma8452: Fix probe failing when an i2c_device_id is used staging:iio:adc:ad7280a: Fix handing of device address bit reversing. pinctrl: renesas: r8a77470: Reduce size for narrow VIN1 channel pinctrl: renesas: checker: Fix miscalculation of number of states clk: qcom: ipq8074: Use floor ops for SDCC1 clock phy: dphy: Correct lpx parameter and its derivatives(ta_{get,go,sure}) serial: 8250_mid: Balance reference count for PCI DMA device serial: 8250_lpss: Balance reference count for PCI DMA device NFS: Use of mapping_set_error() results in spurious errors serial: 8250: Fix race condition in RTS-after-send handling iio: adc: Add check for devm_request_threaded_irq habanalabs: Add check for pci_enable_device NFS: Return valid errors from nfs2/3_decode_dirent() dma-debug: fix return value of __setup handlers clk: imx7d: Remove audio_mclk_root_clk clk: at91: sama7g5: fix parents of PDMCs' GCLK clk: qcom: clk-rcg2: Update logic to calculate D value for RCG clk: qcom: clk-rcg2: Update the frac table for pixel clock dmaengine: hisi_dma: fix MSI allocate fail when reload hisi_dma remoteproc: qcom: Fix missing of_node_put in adsp_alloc_memory_region remoteproc: qcom_wcnss: Add missing of_node_put() in wcnss_alloc_memory_region remoteproc: qcom_q6v5_mss: Fix some leaks in q6v5_alloc_memory_region nvdimm/region: Fix default alignment for small regions clk: actions: Terminate clk_div_table with sentinel element clk: loongson1: Terminate clk_div_table with sentinel element clk: clps711x: Terminate clk_div_table with sentinel element clk: tegra: tegra124-emc: Fix missing put_device() call in emc_ensure_emc_driver NFS: remove unneeded check in decode_devicenotify_args() staging: mt7621-dts: fix LEDs and pinctrl on GB-PC1 devicetree staging: mt7621-dts: fix formatting staging: mt7621-dts: fix pinctrl properties for ethernet staging: mt7621-dts: fix GB-PC2 devicetree pinctrl: mediatek: Fix missing of_node_put() in mtk_pctrl_init pinctrl: mediatek: paris: Fix PIN_CONFIG_BIAS_* readback pinctrl: mediatek: paris: Fix "argument" argument type for mtk_pinconf_get() pinctrl: mediatek: paris: Fix pingroup pin config state readback pinctrl: mediatek: paris: Skip custom extra pin config dump for virtual GPIOs pinctrl: nomadik: Add missing of_node_put() in nmk_pinctrl_probe pinctrl/rockchip: Add missing of_node_put() in rockchip_pinctrl_probe tty: hvc: fix return value of __setup handler kgdboc: fix return value of __setup handler serial: 8250: fix XOFF/XON sending when DMA is used kgdbts: fix return value of __setup handler firmware: google: Properly state IOMEM dependency driver core: dd: fix return value of __setup handler jfs: fix divide error in dbNextAG netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options NFSv4.1: don't retry BIND_CONN_TO_SESSION on session error kdb: Fix the putarea helper function clk: qcom: gcc-msm8994: Fix gpll4 width clk: Initialize orphan req_rate xen: fix is_xen_pmu() net: enetc: report software timestamping via SO_TIMESTAMPING net: hns3: fix bug when PF set the duplicate MAC address for VFs net: phy: broadcom: Fix brcm_fet_config_init() selftests: test_vxlan_under_vrf: Fix broken test case qlcnic: dcb: default to returning -EOPNOTSUPP net/x25: Fix null-ptr-deref caused by x25_disconnect NFSv4/pNFS: Fix another issue with a list iterator pointing to the head net: dsa: bcm_sf2_cfp: fix an incorrect NULL check on list iterator fs: fd tables have to be multiples of BITS_PER_LONG lib/test: use after free in register_test_dev_kmod() fs: fix fd table size alignment properly LSM: general protection fault in legacy_parse_param regulator: rpi-panel: Handle I2C errors/timing to the Atmel gcc-plugins/stackleak: Exactly match strings instead of prefixes pinctrl: npcm: Fix broken references to chip->parent_device block, bfq: don't move oom_bfqq selinux: use correct type for context length selinux: allow FIOCLEX and FIONCLEX with policy capability loop: use sysfs_emit() in the sysfs xxx show() Fix incorrect type in assignment of ipv6 port for audit irqchip/qcom-pdc: Fix broken locking irqchip/nvic: Release nvic_base upon failure fs/binfmt_elf: Fix AT_PHDR for unusual ELF files bfq: fix use-after-free in bfq_dispatch_request ACPICA: Avoid walking the ACPI Namespace if it is not there lib/raid6/test/Makefile: Use $(pound) instead of \# for Make 4.3 Revert "Revert "block, bfq: honor already-setup queue merges"" ACPI/APEI: Limit printable size of BERT table data PM: core: keep irq flags in device_pm_check_callbacks() parisc: Fix handling off probe non-access faults nvme-tcp: lockdep: annotate in-kernel sockets spi: tegra20: Use of_device_get_match_data() locking/lockdep: Iterate lock_classes directly when reading lockdep files ext4: correct cluster len and clusters changed accounting in ext4_mb_mark_bb ext4: fix ext4_mb_mark_bb() with flex_bg with fast_commit ext4: don't BUG if someone dirty pages without asking ext4 first f2fs: fix to do sanity check on curseg->alloc_type NFSD: Fix nfsd_breaker_owns_lease() return values f2fs: compress: fix to print raw data size in error path of lz4 decompression ntfs: add sanity check on allocation size media: staging: media: zoran: move videodev alloc media: staging: media: zoran: calculate the right buffer number for zoran_reap_stat_com media: staging: media: zoran: fix various V4L2 compliance errors media: ir_toy: free before error exiting video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow video: fbdev: w100fb: Reset global state video: fbdev: cirrusfb: check pixclock to avoid divide by zero video: fbdev: omapfb: acx565akm: replace snprintf with sysfs_emit ARM: dts: qcom: fix gic_irq_domain_translate warnings for msm8960 ARM: dts: bcm2837: Add the missing L1/L2 cache information ASoC: madera: Add dependencies on MFD media: atomisp_gmin_platform: Add DMI quirk to not turn AXP ELDO2 regulator off on some boards media: atomisp: fix dummy_ptr check to avoid duplicate active_bo ARM: ftrace: avoid redundant loads or clobbering IP ARM: dts: imx7: Use audio_mclk_post_div instead audio_mclk_root_clk arm64: defconfig: build imx-sdma as a module video: fbdev: omapfb: panel-dsi-cm: Use sysfs_emit() instead of snprintf() video: fbdev: omapfb: panel-tpo-td043mtea1: Use sysfs_emit() instead of snprintf() video: fbdev: udlfb: replace snprintf in show functions with sysfs_emit ARM: dts: bcm2711: Add the missing L1/L2 cache information ASoC: soc-core: skip zero num_dai component in searching dai name media: cx88-mpeg: clear interrupt status register before streaming video uaccess: fix type mismatch warnings from access_ok() lib/test_lockup: fix kernel pointer check for separate address spaces ARM: tegra: tamonten: Fix I2C3 pad setting ARM: mmp: Fix failure to remove sram device video: fbdev: sm712fb: Fix crash in smtcfb_write() media: Revert "media: em28xx: add missing em28xx_close_extension" media: hdpvr: initialize dev->worker at hdpvr_register_videodev mmc: host: Return an error when ->enable_sdio_irq() ops is missing media: atomisp: fix bad usage at error handling logic ALSA: hda/realtek: Add alc256-samsung-headphone fixup KVM: x86/mmu: Check for present SPTE when clearing dirty bit in TDP MMU powerpc/kasan: Fix early region not updated correctly powerpc/lib/sstep: Fix 'sthcx' instruction powerpc/lib/sstep: Fix build errors with newer binutils powerpc: Fix build errors with newer binutils scsi: qla2xxx: Fix stuck session in gpdb scsi: qla2xxx: Fix scheduling while atomic scsi: qla2xxx: Fix wrong FDMI data for 64G adapter scsi: qla2xxx: Fix warning for missing error code scsi: qla2xxx: Fix device reconnect in loop topology scsi: qla2xxx: Add devids and conditionals for 28xx scsi: qla2xxx: Check for firmware dump already collected scsi: qla2xxx: Suppress a kernel complaint in qla_create_qpair() scsi: qla2xxx: Fix disk failure to rediscover scsi: qla2xxx: Fix incorrect reporting of task management failure scsi: qla2xxx: Fix hang due to session stuck scsi: qla2xxx: Fix missed DMA unmap for NVMe ls requests scsi: qla2xxx: Fix N2N inconsistent PLOGI scsi: qla2xxx: Reduce false trigger to login scsi: qla2xxx: Use correct feature type field during RFF_ID processing platform: chrome: Split trace include file KVM: x86: Forbid VMM to set SYNIC/STIMER MSRs when SynIC wasn't activated KVM: Prevent module exit until all VMs are freed KVM: x86: fix sending PV IPI KVM: SVM: fix panic on out-of-bounds guest IRQ ASoC: SOF: Intel: Fix NULL ptr dereference when ENOMEM ubifs: rename_whiteout: Fix double free for whiteout_ui->data ubifs: Fix deadlock in concurrent rename whiteout and inode writeback ubifs: Add missing iput if do_tmpfile() failed in rename whiteout ubifs: setflags: Make dirtied_ino_d 8 bytes aligned ubifs: Fix read out-of-bounds in ubifs_wbuf_write_nolock() ubifs: Fix to add refcount once page is set private ubifs: rename_whiteout: correct old_dir size computing wireguard: queueing: use CFI-safe ptr_ring cleanup function wireguard: socket: free skb in send6 when ipv6 is disabled wireguard: socket: ignore v6 endpoints when ipv6 is disabled XArray: Fix xas_create_range() when multi-order entry present can: mcba_usb: mcba_usb_start_xmit(): fix double dev_kfree_skb in error path can: mcba_usb: properly check endpoint type can: mcp251xfd: mcp251xfd_register_get_dev_id(): fix return of error value XArray: Update the LRU list in xas_split() rtc: check if __rtc_read_time was successful gfs2: Make sure FITRIM minlen is rounded up to fs block size net: hns3: fix software vlan talbe of vlan 0 inconsistent with hardware rxrpc: Fix call timer start racing with call destruction mailbox: imx: fix wakeup failure from freeze mode crypto: arm/aes-neonbs-cbc - Select generic cbc and aes watch_queue: Free the page array when watch_queue is dismantled pinctrl: pinconf-generic: Print arguments for bias-pull-* watchdog: rti-wdt: Add missing pm_runtime_disable() in probe function pinctrl: nuvoton: npcm7xx: Rename DS() macro to DSTR() pinctrl: nuvoton: npcm7xx: Use %zu printk format for ARRAY_SIZE() ASoC: mediatek: mt6358: add missing EXPORT_SYMBOLs ubi: Fix race condition between ctrl_cdev_ioctl and ubi_cdev_ioctl ARM: iop32x: offset IRQ numbers by 1 io_uring: fix memory leak of uid in files registration riscv module: remove (NOLOAD) ACPI: CPPC: Avoid out of bounds access when parsing _CPC data platform/chrome: cros_ec_typec: Check for EC device can: isotp: restore accidentally removed MSG_PEEK feature proc: bootconfig: Add null pointer check staging: mt7621-dts: fix pinctrl-0 items to be size-1 items on ethernet ASoC: soc-compress: Change the check for codec_dai batman-adv: Check ptr for NULL before reducing its refcnt mm/mmap: return 1 from stack_guard_gap __setup() handler ARM: 9187/1: JIVE: fix return value of __setup handler mm/memcontrol: return 1 from cgroup.memory __setup() handler mm/usercopy: return 1 from hardened_usercopy __setup() handler bpf: Adjust BPF stack helper functions to accommodate skip > 0 bpf: Fix comment for helper bpf_current_task_under_cgroup() dt-bindings: mtd: nand-controller: Fix the reg property description dt-bindings: mtd: nand-controller: Fix a comment in the examples dt-bindings: spi: mxic: The interrupt property is not mandatory ubi: fastmap: Return error code if memory allocation fails in add_aeb() ASoC: topology: Allow TLV control to be either read or write ARM: dts: spear1340: Update serial node properties ARM: dts: spear13xx: Update SPI dma properties um: Fix uml_mconsole stop/go docs: sysctl/kernel: add missing bit to panic_print openvswitch: Fixed nd target mask field in the flow dump. KVM: x86/mmu: do compare-and-exchange of gPTE via the user address can: m_can: m_can_tx_handler(): fix use after free of skb can: usb_8dev: usb_8dev_start_xmit(): fix double dev_kfree_skb() in error path coredump: Snapshot the vmas in do_coredump coredump: Remove the WARN_ON in dump_vma_snapshot coredump/elf: Pass coredump_params into fill_note_info coredump: Use the vma snapshot in fill_files_note arm64: Do not defer reserve_crashkernel() for platforms with no DMA memory zones PCI: xgene: Revert "PCI: xgene: Use inbound resources for setup" Linux 5.10.110 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I12fbe227793dd40c0582588e1700cf88cafd0ac6	2022-04-18 17:41:18 +02:00
Wang Yufen	bec34a91eb	bpf, sockmap: Fix memleak in tcp_bpf_sendmsg while sk msg is full [ Upstream commit 9c34e38c4a870eb30b13f42f5b44f42e9d19ccb8 ] If tcp_bpf_sendmsg() is running while sk msg is full. When sk_msg_alloc() returns -ENOMEM error, tcp_bpf_sendmsg() goes to wait_for_memory. If partial memory has been alloced by sk_msg_alloc(), that is, msg_tx->sg.size is greater than osize after sk_msg_alloc(), memleak occurs. To fix we use sk_msg_trim() to release the allocated memory, then goto wait for memory. Other call paths of sk_msg_alloc() have the similar issue, such as tls_sw_sendmsg(), so handle sk_msg_trim logic inside sk_msg_alloc(), as Cong Wang suggested. This issue can cause the following info: WARNING: CPU: 3 PID: 7950 at net/core/stream.c:208 sk_stream_kill_queues+0xd4/0x1a0 Call Trace: <TASK> inet_csk_destroy_sock+0x55/0x110 __tcp_close+0x279/0x470 tcp_close+0x1f/0x60 inet_release+0x3f/0x80 __sock_release+0x3d/0xb0 sock_close+0x11/0x20 __fput+0x92/0x250 task_work_run+0x6a/0xa0 do_exit+0x33b/0xb60 do_group_exit+0x2f/0xa0 get_signal+0xb6/0x950 arch_do_signal_or_restart+0xac/0x2a0 exit_to_user_mode_prepare+0xa9/0x200 syscall_exit_to_user_mode+0x12/0x30 do_syscall_64+0x46/0x80 entry_SYSCALL_64_after_hwframe+0x44/0xae </TASK> WARNING: CPU: 3 PID: 2094 at net/ipv4/af_inet.c:155 inet_sock_destruct+0x13c/0x260 Call Trace: <TASK> __sk_destruct+0x24/0x1f0 sk_psock_destroy+0x19b/0x1c0 process_one_work+0x1b3/0x3c0 kthread+0xe6/0x110 ret_from_fork+0x22/0x30 </TASK> Fixes: `604326b41a` ("bpf, sockmap: convert to generic sk_msg interface") Signed-off-by: Wang Yufen <wangyufen@huawei.com> Signed-off-by: Daniel Borkmann <daniel@iogearbox.net> Acked-by: John Fastabend <john.fastabend@gmail.com> Link: https://lore.kernel.org/bpf/20220304081145.2037182-3-wangyufen@huawei.com Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-04-08 14:40:21 +02:00
Greg Kroah-Hartman	1419b69403	Merge tag 'android12-5.10.101_r00' into android12-5.10 This is the merge of the upstream LTS release of 5.10.101 into the android12-5.10 branch. This merge contains the following new commits: `c194212a03` Merge 5.10.101 into android12-5.10-lts `3969aba589` Linux 5.10.101 `cb86e511e7` iommu: Fix potential use-after-free during probe `f6b5d51976` perf: Fix list corruption in perf_cgroup_switch() `ce3ca12c63` arm64: dts: imx8mq: fix lcdif port node `759aeacdfe` scsi: lpfc: Reduce log messages seen after firmware download `57c5d7d420` scsi: lpfc: Remove NVMe support if kernel has NVME_FC disabled `199dab00f0` can: isotp: fix error path in isotp_sendmsg() to unlock wait queue `3b10ebeb95` Makefile.extrawarn: Move -Wunaligned-access to W=1 `ad53060bdf` hwmon: (dell-smm) Speed up setting of fan speed `3c75d1017c` phy: ti: Fix missing sentinel for clk_div_table `6eabe53492` speakup-dectlk: Restore pitch setting `3836a5ff4b` USB: serial: cp210x: add CPI Bulk Coin Recycler id `51b03a9bcd` USB: serial: cp210x: add NCR Retail IO box id `a21e6b2e08` USB: serial: ch341: add support for GW Instek USB2.0-Serial devices `7113440a36` USB: serial: option: add ZTE MF286D modem `b7ed2f9619` USB: serial: ftdi_sio: add support for Brainboxes US-159/235/320 `e07dde31ac` usb: raw-gadget: fix handling of dual-direction-capable endpoints `e9f9b877eb` usb: gadget: f_uac2: Define specific wTerminalType `fb4ff0f96d` usb: gadget: rndis: check size of RNDIS_MSG_SET command `22ec100472` USB: gadget: validate interface OS descriptor requests `351159167c` usb: gadget: udc: renesas_usb3: Fix host to USB_ROLE_NONE transition `3bfca38914` usb: dwc3: gadget: Prevent core from processing stale TRBs `2a17bd9f52` usb: ulpi: Call of_node_put correctly `8b89a69166` usb: ulpi: Move of_node_put to ulpi_dev_release `758290defe` net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup `a66a2b17b8` Revert "usb: dwc2: drd: fix soft connect when gadget is unconfigured" `73961057e9` usb: dwc2: drd: fix soft connect when gadget is unconfigured `a37960df7e` eeprom: ee1004: limit i2c reads to I2C_SMBUS_BLOCK_MAX `1b99fe34e2` n_tty: wake up poll(POLLRDNORM) on receiving data `f1b2573715` vt_ioctl: add array_index_nospec to VT_ACTIVATE `778302ca09` vt_ioctl: fix array_index_nospec in vt_setactivate `22249886dc` net: dsa: mv88e6xxx: fix use-after-free in mv88e6xxx_mdios_unregister `3a3c65c487` net: mscc: ocelot: fix mutex lock error during ethtool stats read `809f030745` ice: fix IPIP and SIT TSO offload `cf11949b91` ice: fix an error code in ice_cfg_phy_fec() `f8edc6feab` dpaa2-eth: unregister the netdev before disconnecting from the PHY `ff6c9e0fce` net: amd-xgbe: disable interrupts during pci removal `657aea7828` tipc: rate limit warning for received illegal binding update `ef5cdae8bc` net: mdio: aspeed: Add missing MODULE_DEVICE_TABLE `bf99c14436` veth: fix races around rq->rx_notify_masked `00e6d6c3bc` net: fix a memleak when uncloning an skb dst and its metadata `2e9fd2d0f6` net: do not keep the dst cache when uncloning an skb dst and its metadata `0bae953d7a` nfp: flower: fix ida_idx not being released `09ac0fcb0a` ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path `e177d2e85e` net: dsa: lantiq_gswip: don't use devres for mdiobus `95e5402f94` net: dsa: felix: don't use devres for mdiobus `2770b79529` net: dsa: bcm_sf2: don't use devres for mdiobus `475ce5dcf2` net: dsa: ar9331: register the mdiobus under devres `8ccebe77df` net: dsa: mv88e6xxx: don't use devres for mdiobus `4a384c1e40` bonding: pair enable_port with slave_arr_updates `1ba45dd326` gpio: sifive: use the correct register to read output values `48e413087d` ACPI: PM: s2idle: Cancel wakeup before dispatching EC GPE `3b72d3f020` drm/panel: simple: Assign data from panel_dpi_probe() correctly `bf35639192` ixgbevf: Require large buffers for build_skb on 82599VF `e5a64f548a` arm64: dts: meson-g12b-odroid-n2: fix typo 'dio2133' `04fe6569a7` netfilter: ctnetlink: disable helper autoassign `a5ce7ee5fc` misc: fastrpc: avoid double fput() on failed usercopy `21c890ca8e` drm/vc4: hdmi: Allow DBLCLK modes even if horz timing is odd. `70ea005626` gpio: aggregator: Fix calling into sleeping GPIO controllers `0042178a69` usb: f_fs: Fix use-after-free for epfile `5a37fd9fdc` ARM: dts: imx7ulp: Fix 'assigned-clocks-parents' typo `39bf132a6e` phy: xilinx: zynqmp: Fix bus width setting for SGMII `108868dae2` ARM: dts: imx6qdl-udoo: Properly describe the SD card detect `0a7b5e8d8c` staging: fbtft: Fix error path in fbtft_driver_module_init() `74cd5cb219` ARM: dts: meson8b: Fix the UART device-tree schema validation `566b558e94` ARM: dts: meson8: Fix the UART device-tree schema validation `210d70f081` ARM: dts: meson: Fix the UART compatible strings `88f0e61354` ARM: dts: Fix timer regression for beagleboard revision c `c943a297ec` drm/rockchip: vop: Correct RK3399 VOP register fields `a941384fba` PM: s2idle: ACPI: Fix wakeup interrupts handling `fcbac51a64` ACPI/IORT: Check node revision for PMCG resources `57ede0ce65` nvme-tcp: fix bogus request completion when failing to send AER `3a669d77e5` ARM: socfpga: fix missing RESET_CONTROLLER `435e62d566` ARM: dts: Fix boot regression on Skomer `b217b89e60` ARM: dts: imx23-evk: Remove MX23_PAD_SSP1_DETECT from hog group `3f9843f2f6` riscv: fix build with binutils 2.38 `3aa5c86572` KVM: VMX: Set vmcs.PENDING_DBG.BS on #DB in STI/MOVSS blocking shadow `bd39fe29bb` KVM: SVM: Don't kill SEV guest if SMAP erratum triggers in usermode `9efad4cb03` KVM: nVMX: Also filter MSR_IA32_VMX_TRUE_PINBASED_CTLS when eVMCS `db58a3d978` KVM: nVMX: eVMCS: Filter out VM_EXIT_SAVE_VMX_PREEMPTION_TIMER `dc129275a7` KVM: eventfd: Fix false positive RCU usage warning `87bbd78a2c` net: stmmac: dwmac-sun8i: use return val of readl_poll_timeout() `c9b8cc1046` nvme-pci: add the IGNORE_DEV_SUBNQN quirk for Intel P4500/P4600 SSDs `d0774cf730` perf: Always wake the parent event `a117e986e9` usb: dwc2: gadget: don't try to disable ep0 in dwc2_hsotg_suspend `4607218fde` PM: hibernate: Remove register_nosave_region_late() `0e42c4a3d7` scsi: myrs: Fix crash in error case `3bc5b128b9` scsi: ufs: Treat link loss as fatal error `12cf120803` scsi: pm8001: Fix bogus FW crash for maxcpus=1 `87f187e526` scsi: qedf: Fix refcount issue when LOGO is received during TMF `aa7352aa15` scsi: qedf: Add stag_work to all the vports `150d448c66` scsi: ufs: ufshcd-pltfrm: Check the return value of devm_kstrdup() `7dbda616fc` scsi: target: iscsi: Make sure the np under each tpg is unique `67baac10dd` powerpc/fixmap: Fix VM debug warning on unmap `3d0eafd459` net: sched: Clarify error message when qdisc kind is unknown `9b569faabd` drm: panel-orientation-quirks: Add quirk for the 1Netbook OneXPlayer `0d6b9d15ec` x86/perf: Avoid warning for Arch LBR without XSAVE `b37dd03f2f` NFSv4 handle port presence in fs_location server string `6f2974b52b` NFSv4 expose nfs_parse_server_name function `5a9c613a29` NFSv4 remove zero number of fs_locations entries error check `1c79aad118` NFSv4.1: Fix uninitialised variable in devicenotify `c5619c510f` nfs: nfs4clinet: check the return value of kstrdup() `db053bdece` NFSv4 only print the label when its queried `e2b4435fd3` NFS: change nfs_access_get_cached to only report the mask `b4e0c9bcf1` tracing: Propagate is_signed to expression `5234de6c79` drm/amdgpu: Set a suitable dev_info.gart_page_size `6215fb4558` NFSD: Fix offset type in I/O trace points `3a6a2d43e3` NFSD: Clamp WRITE offsets `c72f7c2ec3` NFS: Fix initialisation of nfs_client cl_flags field `f47ee3a35f` net: phy: marvell: Fix MDI-x polarity setting in 88e1118-compatible PHYs `6a33aa7113` net: phy: marvell: Fix RGMII Tx/Rx delays setting in 88e1121-compatible PHYs `7b53d2204c` can: isotp: fix potential CAN frame reception race in isotp_rcv() `c9cc027c55` mmc: sdhci-of-esdhc: Check for error num after setting mask `8027ba480c` ima: Do not print policy rule with inactive LSM labels `8171c8a99f` ima: Allow template selection with ima_template[_fmt]= after ima_hash= `0795b7100d` ima: Remove ima_policy file before directory `7fea2e5200` integrity: check the return value of audit_log_start() `86e6176a42` Merge 5.10.100 into android12-5.10-lts `d4f7d322a4` Linux 5.10.100 `3c7e594355` tipc: improve size validations for received domain records `2951d21689` crypto: api - Move cryptomgr soft dependency into algapi `b62267b8b0` KVM: s390: Return error on SIDA memop on normal guest `be93028d30` moxart: fix potential use-after-free on remove path `ca562bf79c` Merge branch 'android12-5.10' into `android12-5.10-lts` `c3b53fcd90` Merge 5.10.99 into android12-5.10-lts `fb063a6465` Linux 5.10.99 `4889d6ee9e` selftests: nft_concat_range: add test for reload with no element add/del `5577273135` cgroup/cpuset: Fix "suspicious RCU usage" lockdep warning `f1f7d1a22f` net: dsa: mt7530: make NET_DSA_MT7530 select MEDIATEK_GE_PHY `84b76a509c` ext4: fix incorrect type issue during replay_del_range `62e46e0ffc` ext4: fix error handling in ext4_fc_record_modified_inode() `764793b4a5` ext4: fix error handling in ext4_restore_inline_data() `6c5bd55e36` ext4: modify the logic of ext4_mb_new_blocks_simple `8d71fc23fc` ext4: prevent used blocks from being allocated during fast commit replay `ef2053afd7` EDAC/xgene: Fix deferred probing `2a12faf55b` EDAC/altera: Fix deferred probing `dd274cf852` x86/perf: Default set FREEZE_ON_SMI for all `456f041e03` perf/x86/intel/pt: Fix crash with stop filters in single-range mode `8c0e6a8a63` perf stat: Fix display of grouped aliased events `57e8859acc` fbcon: Add option to enable legacy hardware acceleration `460f6b1a23` Revert "fbcon: Disable accelerated scrolling" `460aa9d873` rtc: cmos: Evaluate century appropriate `2324f5fcdf` tools/resolve_btfids: Do not print any commands when building silently `1536fafa23` selftests: futex: Use variable MAKE instead of make `8f0fff8b59` selftests/exec: Remove pipe from TEST_GEN_FILES `6304a613a9` bpf: Use VM_MAP instead of VM_ALLOC for ringbuf `f744a06404` gve: fix the wrong AdminQ buffer queue index check `51e88e8922` nfsd: nfsd4_setclientid_confirm mistakenly expires confirmed client. `ec4334152d` scsi: bnx2fc: Make bnx2fc_recv_frame() mp safe `fd482f2d63` pinctrl: bcm2835: Fix a few error paths `752d9eafc6` pinctrl: intel: fix unexpected interrupt `14bc9978b4` pinctrl: intel: Fix a glitch when updating IRQ flags on a preconfigured line `5a45448ac9` ASoC: max9759: fix underflow in speaker_gain_control_put() `02f4597198` ASoC: cpcap: Check for NULL pointer after calling of_get_child_by_name `cb5f1fbd1f` ASoC: xilinx: xlnx_formatter_pcm: Make buffer bytes multiple of period bytes `56e0747d59` ASoC: fsl: Add missing error handling in pcm030_fabric_probe `3e69837551` drm/i915/overlay: Prevent divide by zero bugs in scaling `9ea0185361` net: stmmac: ensure PTP time register reads are consistent `41df2da2c1` net: stmmac: dump gmac4 DMA registers correctly `114bf93504` net: macsec: Verify that send_sci is on when setting Tx sci explicitly `2e7f5b6ee1` net: macsec: Fix offload support for NETDEV_UNREGISTER event `87b1c9fab6` net: ieee802154: Return meaningful error codes from the netlink helpers `78b3f20c17` net: ieee802154: ca8210: Stop leaking skb's `0bfe50dc5d` net: ieee802154: mcr20a: Fix lifs/sifs periods `75bbda3189` net: ieee802154: hwsim: Ensure proper channel selection at probe time `e895e067d7` spi: uniphier: fix reference count leak in uniphier_spi_probe() `ec942d08e0` spi: meson-spicc: add IRQ check in meson_spicc_probe `c2cf65e100` spi: mediatek: Avoid NULL pointer crash in interrupt `30e05c98b9` spi: bcm-qspi: check for valid cs before applying chip select `6d226e8afe` iommu/amd: Fix loop timeout issue in iommu_ga_log_enable() `9d9995b037` iommu/vt-d: Fix potential memory leak in intel_setup_irq_remapping() `b3958d3151` RDMA/mlx4: Don't continue event handler after memory allocation failure `d3f8b927df` RDMA/siw: Fix broken RDMA Read Fence/Resume logic. `c7db20f5be` IB/rdmavt: Validate remote_addr during loopback atomic tests `75c610212b` RDMA/ucma: Protect mc during concurrent multicast leaves `371979069a` RDMA/cma: Use correct address when leaving multicast group `aa4ecd995f` memcg: charge fs_context and legacy_fs_context `080f371d98` Revert "ASoC: mediatek: Check for error clk pointer" `4a9bd1e678` IB/hfi1: Fix AIP early init panic `5d40f1bdad` dma-buf: heaps: Fix potential spectre v1 gadget `30de3bc099` block: bio-integrity: Advance seed correctly for larger interval sizes `352715593e` mm/kmemleak: avoid scanning potential huge holes `7053188ddb` mm/pgtable: define pte_index so that preprocessor could recognize it `bce7f5d74d` mm/debug_vm_pgtable: remove pte entry from the page table `2d83a7463d` nvme-fabrics: fix state check in nvmf_ctlr_matches_baseopts() `a0c73dbdd1` drm/amd/display: Force link_rate as LINK_RATE_RBR2 for 2018 15" Apple Retina panels `f071d9fa85` drm/nouveau: fix off by one in BIOS boundary checking `32747e0143` btrfs: fix deadlock between quota disable and qgroup rescan worker `aa5d406153` ALSA: hda/realtek: Fix silent output on Gigabyte X570 Aorus Xtreme after reboot from Windows `d4aa3a9859` ALSA: hda/realtek: Fix silent output on Gigabyte X570S Aorus Master (newer chipset) `3a8a8072e3` ALSA: hda/realtek: Add missing fixup-model entry for Gigabyte X570 ALC1220 quirks `532cde962f` ALSA: hda/realtek: Add quirk for ASUS GU603 `410f231fd7` ALSA: hda: realtek: Fix race at concurrent COEF updates `a7de100213` ALSA: hda: Fix UAF of leds class devs at unbinding `470bbb9cbd` ALSA: usb-audio: Correct quirk for VF0770 `6877f87579` ASoC: ops: Reject out of bounds values in snd_soc_put_xr_sx() `038f8b7caa` ASoC: ops: Reject out of bounds values in snd_soc_put_volsw_sx() `a9394f21fb` ASoC: ops: Reject out of bounds values in snd_soc_put_volsw() `0ff6b80506` audit: improve audit queue handling when "audit=1" on cmdline `f446089a26` selinux: fix double free of cond_list on error paths `08942dae64` Merge 5.10.98 into android-5.10 `26d02dc8ef` Merge 5.10.97 into android12-5.10-lts `e33a5b611c` Revert "perf: Fix perf_event_read_local() time" `0b4470b56e` Merge 5.10.96 into android12-5.10-lts `12a0a56cba` Linux 5.10.98 `97a47e2555` Revert "drm/vc4: hdmi: Make sure the device is powered with CEC" again `e27042060f` Revert "drm/vc4: hdmi: Make sure the device is powered with CEC" `c8ed22bd97` Linux 5.10.97 `176356550c` tcp: add missing tcp_skb_can_collapse() test in tcp_shift_skb_data() `32e1799710` af_packet: fix data-race in packet_setsockopt / packet_setsockopt `aa9e96db31` cpuset: Fix the bug that subpart_cpus updated wrongly in update_cpumask() `3bbe2019dd` rtnetlink: make sure to refresh master_dev/m_ops in __rtnl_newlink() `e7be569263` net: sched: fix use-after-free in tc_new_tfilter() `7b4741644c` fanotify: Fix stale file descriptor in copy_event_to_user() `4d3fcfe846` net: amd-xgbe: Fix skb data length underflow `cadfa7dce5` net: amd-xgbe: ensure to reset the tx_timer_active flag `77534b114f` ipheth: fix EOVERFLOW in ipheth_rcvbulk_callback `b4ced7a46d` net/mlx5: E-Switch, Fix uninitialized variable modact `502c37b033` net/mlx5: Use del_timer_sync in fw reset flow of halting poll `a01ee1b816` net/mlx5e: Fix handling of wrong devices during bond netevent `1fc3444cda` cgroup-v1: Require capabilities to set release_agent `ac4ba79bb0` drm/vc4: hdmi: Make sure the device is powered with CEC `46f919c6bd` x86/cpu: Add Xeon Icelake-D to list of CPUs that support PPIN `fbdbf6743f` x86/mce: Add Xeon Sapphire Rapids to list of CPUs that support PPIN `d4e4e61d4a` psi: Fix uaf issue when psi trigger is destroyed while being polled `080dbe7e9b` KVM: x86: Forcibly leave nested virt when SMM state is toggled `063029a882` Revert "drivers: bus: simple-pm-bus: Add support for probing simple bus only devices" `42fdbf8b7d` net: ipa: prevent concurrent replenish `ad81380d3a` net: ipa: use a bitmap for endpoint replenish_enabled `2ed912e3e0` net: ipa: fix atomic update in ipa_endpoint_replenish() `3b4c966fb1` PCI: pciehp: Fix infinite loop in IRQ handler upon power fault `a9839858b5` Merge 5.10.95 into android12-5.10-lts `f255ac9e87` Linux 5.10.96 `b43e9d2f6f` mtd: rawnand: mpc5121: Remove unused variable in ads5121_select_chip() `b63e120189` block: Fix wrong offset in bio_truncate() `0b4e82403c` fsnotify: invalidate dcache before IN_DELETE event `8bae6db29c` usr/include/Makefile: add linux/nfc.h to the compile-test coverage `f36554de78` dt-bindings: can: tcan4x5x: fix mram-cfg RX FIFO config `446ff1fc37` net: bridge: vlan: fix memory leak in __allowed_ingress `bc58a5bb9e` ipv4: remove sparse error in ip_neigh_gw4() `ebc5b8e471` ipv4: tcp: send zero IPID in SYNACK messages `58f72918f9` ipv4: raw: lock the socket in raw_bind() `9ffc94a81b` net: bridge: vlan: fix single net device option dumping `869f1704f1` Revert "ipv6: Honor all IPv6 PIO Valid Lifetime values" `699eef4ed9` net: hns3: handle empty unknown interrupt for VF `c9c81b393c` net: cpsw: Properly initialise struct page_pool_params `729e54636b` yam: fix a memory leak in yam_siocdevprivate() `93a6e920d8` drm/msm/dpu: invalid parameter check in dpu_setup_dspp_pcc `0b7d8db87d` drm/msm/hdmi: Fix missing put_device() call in msm_hdmi_get_phy `d1d4616d3e` video: hyperv_fb: Fix validation of screen resolution `0a60d04abc` ibmvnic: don't spin in tasklet `55258b5059` ibmvnic: init ->running_cap_crqs early `b469cf91fb` ipv4: fix ip option filtering for locally generated fragments `9b44441972` net: ipv4: Fix the warning for dereference `2f56c4845d` net: ipv4: Move ip_options_fragment() out of loop `55402a4618` powerpc/perf: Fix power_pmu_disable to call clear_pmi_irq_pending only if PMI is pending `0bdbf93ee2` hwmon: (lm90) Mark alert as broken for MAX6654 `c534287a57` efi/libstub: arm64: Fix image check alignment at entry `3572205b19` rxrpc: Adjust retransmission backoff `5067f5699d` octeontx2-pf: Forward error codes to VF `bd024e36f6` phylib: fix potential use-after-free `a839a79f4d` net: phy: broadcom: hook up soft_reset for BCM54616S `57b2f3632b` sched/pelt: Relax the sync of util_sum with util_avg `91b04e83c7` perf: Fix perf_event_read_local() time `cffed7e631` kernel: delete repeated words in comments `1af995c98b` netfilter: conntrack: don't increment invalid counter on NF_REPEAT `129c71829d` powerpc64/bpf: Limit 'ldbrx' to processors compliant with ISA v2.06 `7a32824f7a` NFS: Ensure the server has an up to date ctime before renaming `666f6ab882` NFS: Ensure the server has an up to date ctime before hardlinking `4cd0ef6215` ipv6: annotate accesses to fn->fn_sernum `79c0b5287d` drm/msm/dsi: invalid parameter check in msm_dsi_phy_enable `3ab44a408b` drm/msm/dsi: Fix missing put_device() call in dsi_get_phy `82c310d04b` drm/msm: Fix wrong size calculation `f57a99c9a5` net-procfs: show net devices bound packet types `87880e3803` NFSv4: nfs_atomic_open() can race when looking up a non-regular file `ce8c552b88` NFSv4: Handle case where the lookup of a directory fails `b48a05cee2` hwmon: (lm90) Reduce maximum conversion rate for G781 `b26fed25e6` ipv4: avoid using shared IP generator for connected sockets `283aa5a5af` ping: fix the sk_bound_dev_if match in ping_lookup `7bcb0c19ab` hwmon: (lm90) Mark alert as broken for MAX6680 `925cbd596a` hwmon: (lm90) Mark alert as broken for MAX6646/6647/6649 `db044d9746` net: fix information leakage in /proc/net/ptype `feb770cc00` ipv6_tunnel: Rate limit warning messages `00849de10f` scsi: bnx2fc: Flush destroy_work queue before calling bnx2fc_interface_put() `fcaf94c49a` rpmsg: char: Fix race between the release of rpmsg_eptdev and cdev `1dbb206730` rpmsg: char: Fix race between the release of rpmsg_ctrldev and cdev `20f6675821` usb: roles: fix include/linux/usb/role.h compile issue `6aeff8a7c7` i40e: fix unsigned stat widths `d2ed5997a9` i40e: Fix for failed to init adminq while VF reset `768eb705e6` i40e: Fix queues reservation for XDP `39896710f7` i40e: Fix issue when maximum queues is exceeded `9068bcb219` i40e: Increase delay to 1 s after global EMP reset `b4c9b6afa3` powerpc/32: Fix boot failure with GCC latent entropy plugin `50f5d0a8bd` powerpc/32s: Fix kasan_init_region() for KASAN `5d3af1dfdf` powerpc/32s: Allocate one 256k IBAT instead of two consecutives 128k IBATs `08f090bb9b` x86/MCE/AMD: Allow thresholding interface updates after init `791e5d5daa` sched/membarrier: Fix membarrier-rseq fence command missing from query bitmask `afbde455eb` ocfs2: fix a deadlock when commit trans `97f75e7d4c` jbd2: export jbd2_journal_[grab\|put]_journal_head `3921d081c9` ucsi_ccg: Check DEV_INT bit only when starting CCG4 `598a884c77` usb: typec: tcpm: Do not disconnect while receiving VBUS off `e3b131e30e` USB: core: Fix hang in usb_kill_urb by adding memory barriers `3ca928c824` usb: gadget: f_sourcesink: Fix isoc transfer for USB_SPEED_SUPER_PLUS `053274bc6b` usb: common: ulpi: Fix crash in ulpi_match() `20c51a4c52` usb: xhci-plat: fix crash when suspend if remote wake enable `38d1bf67a3` usb-storage: Add unusual-devs entry for VL817 USB-SATA bridge `e0fcae7bd7` tty: Add support for Brainboxes UC cards. `7079283d32` tty: n_gsm: fix SW flow control encoding/handling `2683b0d5d7` serial: stm32: fix software flow control transfer `4628b26df5` serial: 8250: of: Fix mapped region size when using reg-offset property `94b23988c3` netfilter: nft_payload: do not update layer 4 checksum when mangling fragments `bf0d4ae5c6` arm64: errata: Fix exec handling in erratum `1418040` workaround `e92cac1dd8` KVM: x86: Update vCPU's runtime CPUID on write to MSR_IA32_XSS `6b55af102b` drm/etnaviv: relax submit size limits `7a32d17fb7` perf/x86/intel/uncore: Fix CAS_COUNT_WRITE issue for ICX `a2c8e1d9e4` Revert "KVM: SVM: avoid infinite loop on NPF from bad address" `abae88fb37` fsnotify: fix fsnotify hooks in pseudo filesystems `6ceac38e9b` ceph: set pool_ns in new inode layout for async creates `e7be12ca7d` ceph: properly put ceph_string reference after async create attempt `39986696fe` tracing: Don't inc err_log entry count if entry allocation fails `d71b06aa99` tracing/histogram: Fix a potential memory leak for kstrdup() `561a22d44a` PM: wakeup: simplify the output logic of pm_show_wakelocks() `b0f1cc093b` efi: runtime: avoid EFIv2 runtime services on Apple x86 machines `de7cc8bcca` udf: Fix NULL ptr deref when converting from inline format `0a3cfd2589` udf: Restore i_lenAlloc when inode expansion fails `f08801252d` scsi: zfcp: Fix failed recovery on gone remote port with non-NPIV FCP devices `ff6bdc205f` bpf: Guard against accessing NULL pt_regs in bpf_get_task_stack() `6520fedfce` s390/hypfs: include z/VM guests with access control group set `c10e0627c7` s390/module: fix loading modules with a lot of relocations `ba7c71a777` net: stmmac: skip only stmmac_ptp_register when resume from suspend `11191406f2` net: sfp: ignore disabled SFP node `e651772adc` media: venus: core: Drop second v4l2 device unregister `83d5196b65` Bluetooth: refactor malicious adv data check `34fd8cb7e7` ANDROID: Fix CRC issue up with xfrm headers in 5.10.94 `a50b069165` Revert "xfrm: rate limit SA mapping change message to user space" `67ea95e0e8` Revert "clocksource: Reduce clocksource-skew threshold" `fae0741a78` Revert "clocksource: Avoid accidental unstable marking of clocksources" `77656fde3c` Linux 5.10.95 `ae2b20f277` drm/vmwgfx: Fix stale file descriptors on failed usercopy `11ba2c6dfb` select: Fix indefinitely sleeping task in poll_schedule_timeout() `a447d7f786` KVM: x86/mmu: Fix write-protection of PTs mapped by the TDP MMU `12d3389b7a` rcu: Tighten rcu_advance_cbs_nowake() checks `4d63363c88` bnx2x: Invalidate fastpath HSI version for VFs `fdcfabd095` bnx2x: Utilize firmware 7.13.21.0 `6a6acf9278` drm/i915: Flush TLBs before releasing backing store `4ec3c2eea5` Merge 5.10.94 into android12-5.10-lts `c525532e4f` Linux 5.10.94 `c76c132444` scripts: sphinx-pre-install: Fix ctex support on Debian `133cef0b61` scripts: sphinx-pre-install: add required ctex dependency `15ce9329a5` ath10k: Fix the MTU size on QCA9377 SDIO `25b1a6d330` mtd: nand: bbt: Fix corner case in bad block table handling `8104e589fa` lib/test_meminit: destroy cache in kmem_cache_alloc_bulk() test `6292503700` mm/hmm.c: allow VM_MIXEDMAP to work with hmm_range_fault `33bb7f027b` lib82596: Fix IRQ check in sni_82596_probe `078b5a4498` scripts/dtc: dtx_diff: remove broken example from help text `21513c4615` dt-bindings: watchdog: Require samsung,syscon-phandle for Exynos7 `23bcf3615b` dt-bindings: display: meson-vpu: Add missing amlogic,canvas property `66467cc87a` dt-bindings: display: meson-dw-hdmi: add missing sound-name-prefix property `4496e4a427` net: mscc: ocelot: fix using match before it is set `ee64479c9c` net: sfp: fix high power modules without diagnostic monitoring `819e76bc57` net: ethernet: mtk_eth_soc: fix error checking in mtk_mac_config() `4691c9f047` bcmgenet: add WOL IRQ check `6973b38b9d` net_sched: restore "mpu xxx" handling `20949c3816` net: bonding: fix bond_xmit_broadcast return value error bug `799730d182` arm64: dts: qcom: msm8996: drop not documented adreno properties `f6d4c0e017` devlink: Remove misleading internal_flags from health reporter dump `2e51a761b7` perf probe: Fix ppc64 'perf probe add events failed' case `59b44f7760` dmaengine: at_xdmac: Fix at_xdmac_lld struct definition `0078f05371` dmaengine: at_xdmac: Fix lld view setting `7ab120636d` dmaengine: at_xdmac: Fix concurrency over xfers_list `b5b27c5e33` dmaengine: at_xdmac: Print debug message after realeasing the lock `c536b351a7` dmaengine: at_xdmac: Start transfer for cyclic channels in issue_pending `cd22e22e8e` dmaengine: at_xdmac: Don't start transactions at tx_submit level `68a83051c8` perf script: Fix hex dump character output `7b9d40e9f6` libcxgb: Don't accidentally set RTO_ONLINK in cxgb_find_route() `cd5c24d223` gre: Don't accidentally set RTO_ONLINK in gre_fill_metadata_dst() `7f2ca96bd2` xfrm: Don't accidentally set RTO_ONLINK in decode_session4() `2b1415c60b` netns: add schedule point in ops_exit_list() `edc09548ff` inet: frags: annotate races around fqdir->dead and fqdir->high_thresh `69e7e979ed` taskstats: Cleanup the use of task->exit_code `56daa21414` virtio_ring: mark ring unused on error `0c4ebcb00d` vdpa/mlx5: Fix wrong configuration of virtio_version_1_0 `c736ec01a2` rtc: pxa: fix null pointer dereference `8b8ff4c793` HID: vivaldi: fix handling devices not using numbered reports `d7544cf693` net: axienet: increase default TX ring size to 128 `557829d42d` net: axienet: fix for TX busy handling `41831d4967` net: axienet: fix number of TX ring slots for available check `6301f3566a` net: axienet: Fix TX ring slot available check `7a3d3d7f6d` net: axienet: limit minimum TX ring size `2f548489d6` net: axienet: add missing memory barriers `bcc5d57e60` net: axienet: reset core on initialization prior to MDIO access `46c0ccaff2` net: axienet: Wait for PhyRstCmplt after core reset `34942a228a` net: axienet: increase reset timeout `a66b9bccf7` net/smc: Fix hung_task when removing SMC-R devices `51b52cf354` clk: si5341: Fix clock HW provider cleanup `fe40f7aef3` clk: Emit a stern warning with writable debugfs enabled `38221afa03` af_unix: annote lockless accesses to unix_tot_inflight & gc_in_progress `a49e402f23` f2fs: fix to reserve space for IO align feature `39ad058117` f2fs: compress: fix potential deadlock of compress file `e1840365ed` parisc: pdc_stable: Fix memory leak in pdcs_register_pathentries `d806eb5f4e` net/fsl: xgmac_mdio: Fix incorrect iounmap when removing module `38c798384b` net/fsl: xgmac_mdio: Add workaround for erratum A-009885 `734f4b0f83` ipv4: avoid quadratic behavior in netns dismantle `86f0587f74` ipv4: update fib_info_cnt under spinlock protection `10e99ae9b5` perf evsel: Override attr->sample_period for non-libpfm4 events `58fa3e9002` xdp: check prog type before updating BPF link `38ee417f59` bpftool: Remove inclusion of utilities.mak from Makefiles `2bcab471a2` block: Fix fsync always failed if once failed `5e59f88535` powerpc/fsl/dts: Enable WA for erratum A-009885 on fman3l MDIO buses `19aaef6519` powerpc/cell: Fix clang -Wimplicit-fallthrough warning `4cb7aba1e0` Revert "net/mlx5: Add retry mechanism to the command entry index allocation" `78cf5f63a3` dmaengine: stm32-mdma: fix STM32_MDMA_CTBR_TSEL_MASK `16ad0aa917` RDMA/rxe: Fix a typo in opcode name `885860717c` RDMA/hns: Modify the mapping attribute of doorbell to device `57cd8597c3` dmaengine: uniphier-xdmac: Fix type of address variables `4fe77b7cd2` scsi: core: Show SCMD_LAST in text form `b30240911d` Bluetooth: hci_sync: Fix not setting adv set duration `55698d11c8` Documentation: fix firewire.rst ABI file path error `5d38cbf66d` Documentation: refer to config RANDOMIZE_BASE for kernel address-space randomization `abecf9d748` Documentation: ACPI: Fix data node reference documentation `d1e85fcd73` Documentation: dmaengine: Correctly describe dmatest with channel unset `f6736bd81d` media: correct MEDIA_TEST_SUPPORT help text `55b10b88ac` drm/vc4: hdmi: Make sure the device is powered with CEC `81ac08a800` media: rcar-csi2: Optimize the selection PHTW register `0baa3729d2` can: mcp251xfd: mcp251xfd_tef_obj_read(): fix typo in error message `f62bf6ee4f` firmware: Update Kconfig help text for Google firmware `12224c0d19` of: base: Improve argument length mismatch error `7bb99c7e13` drm/radeon: fix error handling in radeon_driver_open_kms `0ca7ec6db2` ext4: don't use the orphan list when migrating an inode `679fb06532` ext4: fix null-ptr-deref in '__ext4_journal_ensure_credits' `d60e9daba2` ext4: destroy ext4_fc_dentry_cachep kmemcache on module removal `f26b24b4c1` ext4: fast commit may miss tracking unwritten range during ftruncate `04b5627306` ext4: use ext4_ext_remove_space() for fast commit replay delete range `53998b3f6d` ext4: Fix BUG_ON in ext4_bread when write quota data `da364ab358` ext4: set csum seed in tmp inode while migrating to extents `e4221629d5` ext4: fix fast commit may miss tracking range for FALLOC_FL_ZERO_RANGE `720508dd11` ext4: initialize err_blk before calling __ext4_get_inode_loc `f9ed0ea0a9` ext4: fix a possible ABBA deadlock due to busy PA `115b762b48` ext4: make sure quota gets properly shutdown on error `762e4c33e9` ext4: make sure to reset inode lockdep class when quota enabling fails `f8c3ec2e21` btrfs: respect the max size in the header when activating swap file `e7764bccae` btrfs: check the root node for uptodate before returning it `09e0ef287e` btrfs: fix deadlock between quota enable and other quota operations `56f974d583` xfrm: fix policy lookup for ipv6 gre packets `84166c1177` PCI: pci-bridge-emul: Set PCI_STATUS_CAP_LIST for PCIe device `7aeeb9fe9c` PCI: pci-bridge-emul: Correctly set PCIe capabilities `af1d0acdac` PCI: pci-bridge-emul: Fix definitions of reserved bits `0f2ae6691e` PCI: pci-bridge-emul: Properly mark reserved PCIe bits in PCI config space `2a0d437d8a` PCI: pci-bridge-emul: Make expansion ROM Base Address register read-only `def2825b09` PCI: pciehp: Use down_read/write_nested(reset_lock) to fix lockdep errors `6cbe8f8deb` PCI: xgene: Fix IB window setup `e09f47e77b` powerpc/64s/radix: Fix huge vmap false positive `eb44b1386a` parisc: Fix lpa and lpa_user defines `9b78ee2341` drm/bridge: analogix_dp: Make PSR-exit block less `8cbbf4a6f1` drm/nouveau/kms/nv04: use vzalloc for nv04_display `605583fccc` drm/etnaviv: limit submit sizes `6c1e3d8b1b` device property: Fix fwnode_graph_devcon_match() fwnode leak `ecb71f7bd5` s390/mm: fix 2KB pgtable release race `798754ba48` iwlwifi: mvm: Increase the scan timeout guard to 30 seconds `c524f4cfb3` tracing/kprobes: 'nmissed' not showed correctly for kretprobe `b72075e395` cputime, cpuacct: Include guest time in user time in cpuacct.stat `13518f058f` serial: Fix incorrect rs485 polarity on uart open `9668cf9e4a` fuse: Pass correct lend value to filemap_write_and_wait_range() `9fbaddd783` xen/gntdev: fix unmap notification order `67b078d996` spi: uniphier: Fix a bug that doesn't point to private data correctly `05026c4e94` tpm: fix NPE on probe for missing device `76006d33f1` ubifs: Error path in ubifs_remount_rw() seems to wrongly free write buffers `4f0762ac32` crypto: caam - replace this_cpu_ptr with raw_cpu_ptr `9e6ff2d572` crypto: stm32/crc32 - Fix kernel BUG triggered in probe() `2031e0246e` crypto: omap-aes - Fix broken pm_runtime_and_get() usage `43e94431c3` rpmsg: core: Clean up resources on announce_create failure. `082ff9e12b` phy: mediatek: Fix missing check in mtk_mipi_tx_probe `ff08cf1e34` ASoC: mediatek: mt8183: fix device_node leak `f28672eef4` ASoC: mediatek: mt8173: fix device_node leak `0df5104008` scsi: sr: Don't use GFP_DMA `de9a936b04` MIPS: Octeon: Fix build errors using clang `da7df943e2` i2c: designware-pci: Fix to change data types of hcnt and lcnt parameters `f09f7ccb28` irqchip/gic-v4: Disable redistributors' view of the VPE table at boot time `bc2d961d82` MIPS: OCTEON: add put_device() after of_find_device_by_node() `ce34b03a71` udf: Fix error handling in udf_new_inode() `15be042e7f` powerpc/fadump: Fix inaccurate CPU state info in vmcore generated with panic `f2e658d9bd` powerpc: handle kdump appropriately with crash_kexec_post_notifiers option `044164b419` selftests/powerpc/spectre_v2: Return skip code when miss_percent is high `21125e0116` powerpc/40x: Map 32Mbytes of memory at startup `c330442f46` MIPS: Loongson64: Use three arguments for slti `af8d077350` ALSA: seq: Set upper limit of processed events `297210783a` scsi: lpfc: Trigger SLI4 firmware dump before doing driver cleanup `dfde7afed7` dm: fix alloc_dax error handling in alloc_dev `2e2086f49e` nvmem: core: set size for sysfs bin file `4a273a94bd` w1: Misuse of get_user()/put_user() reported by sparse `87e91d6c6a` KVM: PPC: Book3S: Suppress failed alloc warning in H_COPY_TOFROM_GUEST `23bb3f01ce` KVM: PPC: Book3S: Suppress warnings when allocating too big memory slots `03c1595a18` powerpc/powermac: Add missing lockdep_register_key() `df29c01b9f` clk: meson: gxbb: Fix the SDM_EN bit for MPLL0 on GXBB `30d35a1abd` i2c: mpc: Correct I2C reset procedure `4b25aad655` powerpc/smp: Move setup_profiling_timer() under CONFIG_PROFILING `25714ad6bf` i2c: i801: Don't silently correct invalid transfer size `75e2cfa5fa` powerpc/watchdog: Fix missed watchdog reset due to memory ordering race `a83639521a` powerpc/btext: add missing of_node_put `fc10d8f00a` powerpc/cell: add missing of_node_put `297ff7d5f1` powerpc/powernv: add missing of_node_put `c83ba875d7` powerpc/6xx: add missing of_node_put `d240b08d8a` x86/kbuild: Enable CONFIG_KALLSYMS_ALL=y in the defconfigs `3681e9f3f0` parisc: Avoid calling faulthandler_disabled() twice `f2a27dd7a2` random: do not throw away excess input to crng_fast_load `f8fdebfb4b` serial: core: Keep mctrl register state and cached copy in sync `a03fd1b198` serial: pl010: Drop CR register reset on set_termios `40ac338926` regulator: qcom_smd: Align probe function with rpmh-regulator `3dc751213f` net: gemini: allow any RGMII interface mode `1063de8975` net: phy: marvell: configure RGMII delays for 88E1118 `00580670b9` mlxsw: pci: Avoid flow control for EMAD packets `eaf8cffcf5` dm space map common: add bounds check to sm_ll_lookup_bitmap() `5850bef8e9` dm btree: add a defensive bounds check to insert_at() `754b663ea9` mac80211: allow non-standard VHT MCS-10/11 `e8da60b3a6` net: mdio: Demote probed message to debug print `6b22c9824d` btrfs: remove BUG_ON(!eie) in find_parent_nodes `623c65bc73` btrfs: remove BUG_ON() in find_parent_nodes() `44cbd2a16a` ACPI: battery: Add the ThinkPad "Not Charging" quirk `7b6dc07c6e` amdgpu/pm: Make sysfs pm attributes as read-only for VFs `516e332d6f` drm/amdgpu: fixup bad vram size on gmc v8 `ee88ff140d` ACPICA: Hardware: Do not flush CPU cache when entering S4 and S5 `8544074762` ACPICA: Fix wrong interpretation of PCC address `e70be17696` ACPICA: Executer: Fix the REFCLASS_REFOF case in acpi_ex_opcode_1A_0T_1R() `8ea9216d20` ACPICA: Utilities: Avoid deleting the same object twice in a row `fcfd8282c5` ACPICA: actypes.h: Expand the ACPI_ACCESS_ definitions `e3a51d6c90` jffs2: GC deadlock reading a page that is used in jffs2_write_begin() `e35cb5b122` drm/etnaviv: consider completed fence seqno in hang check `a0b13335a3` xfrm: rate limit SA mapping change message to user space `0b7beb2fea` Bluetooth: vhci: Set HCI_QUIRK_VALID_LE_STATES `6ac117edac` ath11k: Fix napi related hang `756a7188b2` um: registers: Rename function names to avoid conflicts and build problems `d817d10f7a` iwlwifi: pcie: make sure prph_info is set when treating wakeup IRQ `f266e1c5bf` iwlwifi: mvm: Fix calculation of frame length `6e44b60054` iwlwifi: remove module loading failure message `febab6b60d` iwlwifi: fix leaks/bad data after failed firmware load `81d2e96aba` PM: AVS: qcom-cpr: Use div64_ul instead of do_div `c0a1d844e3` rtw88: 8822c: update rx settings to prevent potential hw deadlock `3ef25f3122` ath9k: Fix out-of-bound memcpy in ath9k_hif_usb_rx_stream `e10de31055` usb: hub: Add delay for SuperSpeed hub resume to let links transit to U0 `282286c632` cpufreq: Fix initialization of min and max frequency QoS requests `37b25de3af` PM: runtime: Add safety net to supplier device release `5dfc6fa0b8` arm64: tegra: Adjust length of CCPLEX cluster MMIO region `b68c56a149` arm64: dts: ls1028a-qds: move rtc node to the correct i2c bus `b6f7f0ad5a` audit: ensure userspace is penalized the same as the kernel when under pressure `5d54ed1550` mmc: core: Fixup storing of OCR for MMC_QUIRK_NONSTD_SDIO `51a5156bb7` media: saa7146: hexium_gemini: Fix a NULL pointer dereference in hexium_attach() `f6bc6b178c` media: igorplugusb: receiver overflow should be reported `d698e024be` HID: quirks: Allow inverting the absolute X/Y values `59f0363346` bpf: Do not WARN in bpf_warn_invalid_xdp_action() `0e8805f73b` net: bonding: debug: avoid printing debug logs when bond is not notifying peers `8c72de32ff` x86/mce: Mark mce_read_aux() noinstr `1ad3e60f1f` x86/mce: Mark mce_end() noinstr `f21ca973b4` x86/mce: Mark mce_panic() noinstr `de360d9443` x86/mce: Allow instrumentation during task work queueing `af371e0abb` ath11k: Avoid false DEADLOCK warning reported by lockdep `aec69e2f33` selftests/ftrace: make kprobe profile testcase description unique `07ecabf15a` gpio: aspeed: Convert aspeed_gpio.lock to raw_spinlock `7e09f9d15e` net: phy: prefer 1000baseT over 1000baseKX `443133330a` net-sysfs: update the queue counts in the unregistration path `58b4c1ce83` ath10k: Fix tx hanging `fcba0bce33` ath11k: avoid deadlock by change ieee80211_queue_work for regd_update_work `93a108d466` iwlwifi: mvm: avoid clearing a just saved session protection id `ec01e0fe21` iwlwifi: mvm: synchronize with FW after multicast commands `c1976a4248` thunderbolt: Runtime PM activate both ends of the device link `830e5d1b43` media: m920x: don't use stack on USB reads `c33f0f22bf` media: saa7146: hexium_orion: Fix a NULL pointer dereference in hexium_attach() `526b6c9b45` media: rcar-vin: Update format alignment constraints `74e60c1dce` media: uvcvideo: Increase UVC_CTRL_CONTROL_TIMEOUT to 5 seconds. `d0e3ab637d` drm: rcar-du: Fix CRTC timings when CMM is used `e61aa46d0f` x86/mm: Flush global TLB when switching to trampoline page-table `0946fdd929` floppy: Add max size check for user space request `409d45bcd3` usb: uhci: add aspeed ast2600 uhci support `d0aec428c0` arm64: dts: ti: j7200-main: Fix 'dtbs_check' serdes_ln_ctrl node `fcb45ac39f` ACPI / x86: Add not-present quirk for the PCI0.SDHB.BRC1 device on the GPD win `b8b2e74a87` ACPI / x86: Allow specifying acpi_device_override_status() quirks by path `cda755506d` ACPI: Change acpi_device_always_present() into acpi_device_override_status() `b029625063` ACPI / x86: Drop PWM2 device on Lenovo Yoga Book from always present table `cf3b1a160d` media: venus: avoid calling core_clk_setrate() concurrently during concurrent video sessions `adbe148672` ath11k: Avoid NULL ptr access during mgmt tx cleanup `ab523ea096` rsi: Fix out-of-bounds read in rsi_read_pkt() `7525876750` rsi: Fix use-after-free in rsi_rx_done_handler() `6036500fdf` mwifiex: Fix skb_over_panic in mwifiex_usb_recv() `8a6371d84c` crypto: jitter - consider 32 LSB for APT `240cf5d3cb` HSI: core: Fix return freed object in hsi_new_client `f4295b7dca` gpiolib: acpi: Do not set the IRQ type if the IRQ is already in use `f0653cd4da` tty: serial: imx: disable UCR4_OREN in .stop_rx() instead of .shutdown() `b8d10f601f` drm/bridge: megachips: Ensure both bridges are probed before registration `43fc9e267e` mlxsw: pci: Add shutdown method in PCI driver `b2e921fa92` soc: ti: pruss: fix referenced node in error message `07fbbc4dc7` drm/amdgpu/display: set vblank_disable_immediate for DC `019fe9723a` drm/amd/display: check top_pipe_to_program pointer `3c3c0b6c4a` ARM: imx: rename DEBUG_IMX21_IMX27_UART to DEBUG_IMX27_UART `f54d8cd831` EDAC/synopsys: Use the quirk for version instead of ddr version `0b85d73fdb` media: b2c2: Add missing check in flexcop_pci_isr: `c978d39a8b` HID: apple: Do not reset quirks when the Fn key is not found `2df002e327` drm: panel-orientation-quirks: Add quirk for the Lenovo Yoga Book X91F/L `5aa57672c6` usb: gadget: f_fs: Use stream_open() for endpoint files `129e8faaee` ath11k: Fix crash caused by uninitialized TX ring `e8b271f2aa` media: atomisp: handle errors at sh_css_create_isp_params() `ebe9c978d9` batman-adv: allow netlink usage in unprivileged containers `ff452db961` ARM: shmobile: rcar-gen2: Add missing of_node_put() `ff2138d6c2` media: atomisp-ov2680: Fix ov2680_set_fmt() clobbering the exposure `51ef6582a2` media: atomisp: set per-device's default mode `ac08140677` media: atomisp: fix try_fmt logic `518e059789` drm/nouveau/pmu/gm200-: avoid touching PMU outside of DEVINIT/PREOS/ACR `e3ba02b043` drm/bridge: dw-hdmi: handle ELD when DRM_BRIDGE_ATTACH_NO_CONNECTOR `2f13f10fdd` ar5523: Fix null-ptr-deref with unexpected WDCMSG_TARGET_START reply `a9d2ccfc7d` selftests/bpf: Fix bpf_object leak in skb_ctx selftest `b207356933` drm/lima: fix warning when CONFIG_DEBUG_SG=y & CONFIG_DMA_API_DEBUG=y `db1e878373` fs: dlm: filter user dlm messages for kernel locks `f9c9a46efd` Bluetooth: Fix debugfs entry leak in hci_register_dev() `852d7d436f` ARM: dts: omap3-n900: Fix lp5523 for multi color `b5793aff11` of: base: Fix phandle argument length mismatch error message `e16e836d51` clk: bm1880: remove kfrees on static allocations `36d46e21c9` ASoC: fsl_asrc: refine the check of available clock divider `5a6864e2e6` RDMA/cxgb4: Set queue pair state when being queried `80524c8cdf` ASoC: fsl_mqs: fix MODULE_ALIAS `74988d017d` powerpc/xive: Add missing null check after calling kmalloc `588e0b81ce` mips: bcm63xx: add support for clk_set_parent() `e3de89d010` mips: lantiq: add support for clk_set_parent() `8f8468a089` arm64: tegra: Remove non existent Tegra194 reset `702902fc7f` arm64: tegra: Fix Tegra194 HDA {clock,reset}-names ordering `24b047d72c` counter: stm32-lptimer-cnt: remove iio counter abi `a394606104` misc: lattice-ecp3-config: Fix task hung when firmware load failed `696a50abbc` ASoC: samsung: idma: Check of ioremap return value `d491a2c2cf` ASoC: mediatek: Check for error clk pointer `c73ccdd62d` phy: uniphier-usb3ss: fix unintended writing zeros to PHY register `d781f4cd8c` scsi: block: pm: Always set request queue runtime active in blk_post_runtime_resume() `6e2a169544` iommu/iova: Fix race between FQ timeout and teardown `57bc898575` ASoC: Intel: catpt: Test dmaengine_submit() result before moving on `676049a3d2` iommu/amd: Restore GA log/tail pointer on host resume `c2bd7c31de` iommu/amd: Remove iommu_init_ga() `62ea255f2b` dmaengine: pxa/mmp: stop referencing config->slave_id `0be9ae1e53` mips: fix Kconfig reference to PHYS_ADDR_T_64BIT `88d78b25db` mips: add SYS_HAS_CPU_MIPS64_R5 config for MIPS Release 5 support `51b8e814bc` clk: stm32: Fix ltdc's clock turn off by clk_disable_unused() after system enter shell `dff359e042` of: unittest: 64 bit dma address test requires arch support `918105df78` of: unittest: fix warning on PowerPC frame size warning `0e04518b1d` ASoC: rt5663: Handle device_property_read_u32_array error codes `7c0d9c815c` RDMA/cma: Let cma_resolve_ib_dev() continue search even after empty entry `2432d325f9` RDMA/core: Let ib_find_gid() continue search even after empty entry `d77916df16` powerpc/powermac: Add additional missing lockdep_register_key() `8b3783e517` PCI/MSI: Fix pci_irq_vector()/pci_irq_get_affinity() `7be2a0bcaf` RDMA/qedr: Fix reporting max_{send/recv}_wr attrs `e19469468b` scsi: ufs: Fix race conditions related to driver data `ed43b2e048` iommu/io-pgtable-arm: Fix table descriptor paddr formatting `e9e4d1fb45` openrisc: Add clone3 ABI wrapper `551a785c26` binder: fix handling of error during copy `88ddf033a5` char/mwave: Adjust io port register size `8937aee4c0` ALSA: usb-audio: Drop superfluous '0' in Presonus Studio 1810c's ID `bcd533417f` ALSA: oss: fix compile error when OSS_DEBUG is enabled `fd99aeb978` clocksource: Avoid accidental unstable marking of clocksources `cacc6c30e3` clocksource: Reduce clocksource-skew threshold `86ad478c99` powerpc/32s: Fix shift-out-of-bounds in KASAN init `ef798cd035` powerpc/perf: Fix PMU callbacks to clear pending PMI before resetting an overflown PMC `58014442a9` powerpc/irq: Add helper to set regs->softe `c9ffa84a3b` powerpc/perf: move perf irq/nmi handling details into traps.c `a0758b3be4` powerpc/perf: MMCR0 control for PMU registers under PMCC=00 `f4df6db5b0` powerpc/64s: Convert some cpu_setup() and cpu_restore() functions to C `a9c9d2ff64` dt-bindings: thermal: Fix definition of cooling-maps contribution property `2bd8d93795` ASoC: uniphier: drop selecting non-existing SND_SOC_UNIPHIER_AIO_DMA `5a821af769` powerpc/prom_init: Fix improper check of prom_getprop() `9ca761ef94` clk: imx8mn: Fix imx8mn_clko1_sels `999528d8a7` scsi: pm80xx: Update WARN_ON check in pm8001_mpi_build_cmd() `c5f414d69a` RDMA/hns: Validate the pkey index `04a032ea24` RDMA/bnxt_re: Scan the whole bitmap when checking if "disabling RCFW with pending cmd-bit" `84cd5c029d` ALSA: hda: Add missing rwsem around snd_ctl_remove() calls `180e9d7384` ALSA: PCM: Add missing rwsem around snd_ctl_remove() calls `49d76154ba` ALSA: jack: Add missing rwsem around snd_ctl_remove() calls `f871cd8ee0` ext4: avoid trim error on fs with small groups `99590e820f` net: mcs7830: handle usb read errors properly `2b948524ae` iwlwifi: mvm: Use div_s64 instead of do_div in iwl_mvm_ftm_rtt_smoothing() `04ce9e2aed` pcmcia: fix setting of kthread task states `5064bfe046` can: xilinx_can: xcan_probe(): check for error irq `b6dd1577bc` can: softing: softing_startstop(): fix set but not used variable warning `b9ac866c23` tpm_tis: Fix an error handling path in 'tpm_tis_core_init()' `fb46223c9f` tpm: add request_locality before write TPM_INT_ENABLE `20edf903a3` can: mcp251xfd: add missing newline to printed strings `d71fca5d01` regmap: Call regmap_debugfs_exit() prior to _init() `838acddcdf` netrom: fix api breakage in nr_setsockopt() `0d04479857` ax25: uninitialized variable in ax25_setsockopt() `27e9910c45` spi: spi-meson-spifc: Add missing pm_runtime_disable() in meson_spifc_probe `9d6350cf8e` Bluetooth: L2CAP: uninitialized variables in l2cap_sock_setsockopt() `9defd7d4c0` lib/mpi: Add the return value check of kcalloc() `e801f81cee` net/mlx5: Set command entry semaphore up once got index free `d2b9ce705d` Revert "net/mlx5e: Block offload of outer header csum for UDP tunnels" `67e1a449a1` net/mlx5e: Don't block routes with nexthop objects in SW `cc40fa05c0` net/mlx5e: Fix page DMA map/unmap attributes `b3dda01d1d` debugfs: lockdown: Allow reading debugfs files that are not world readable `b9b5da3e18` HID: hid-uclogic-params: Invalid parameter check in uclogic_params_frame_init_v1_buttonpad `541c3a044b` HID: hid-uclogic-params: Invalid parameter check in uclogic_params_huion_init `c47f842e0c` HID: hid-uclogic-params: Invalid parameter check in uclogic_params_get_str_desc `cf5ad827ee` HID: hid-uclogic-params: Invalid parameter check in uclogic_params_init `94177fcecc` usb: dwc3: qcom: Fix NULL vs IS_ERR checking in dwc3_qcom_probe `4579954bf4` Bluetooth: hci_qca: Fix NULL vs IS_ERR_OR_NULL check in qca_serdev_probe `f6bf3d6639` Bluetooth: hci_bcm: Check for error irq `f5e4f68d57` fsl/fman: Check for null pointer after calling devm_ioremap `60aca6fdc1` staging: greybus: audio: Check null pointer `a1068bfee4` rocker: fix a sleeping in atomic bug `2db344725e` ppp: ensure minimum packet size in ppp_write() `45643b1b6c` netfilter: nft_set_pipapo: allocate pcpu scratch maps on clone `8772700a9f` bpf: Fix SO_RCVBUF/SO_SNDBUF handling in _bpf_setsockopt(). `342332fb0b` bpf: Don't promote bogus looking registers after null check. `0036c78c49` netfilter: ipt_CLUSTERIP: fix refcount leak in clusterip_tg_check() `2e718389b9` power: reset: mt6397: Check for null res pointer `4210c35fe8` pcmcia: rsrc_nonstatic: Fix a NULL pointer dereference in nonstatic_find_mem_region() `2dee347f35` pcmcia: rsrc_nonstatic: Fix a NULL pointer dereference in __nonstatic_find_io_region() `0f03132191` ACPI: scan: Create platform device for BCM4752 and LNV4752 ACPI nodes `595e1ec55b` x86/mce/inject: Avoid out-of-bounds write when setting flags `df12681819` hwmon: (mr75203) fix wrong power-up delay value `aea5302d9d` x86/boot/compressed: Move CLANG_FLAGS to beginning of KBUILD_CFLAGS `70eec71f32` Bluetooth: hci_qca: Stop IBS timer during BT OFF `1d4e722b62` software node: fix wrong node passed to find nargs_prop `f8f3c1720d` backlight: qcom-wled: Respect enabled-strings in set_brightness `de79bcbfaf` backlight: qcom-wled: Use cpu_to_le16 macro to perform conversion `c79f9b8d8e` backlight: qcom-wled: Override default length with qcom,enabled-strings `bf4daf6153` backlight: qcom-wled: Fix off-by-one maximum with default num_strings `09aed85e8c` backlight: qcom-wled: Pass number of elements to read to read_u32_array `f4ed4fc504` backlight: qcom-wled: Validate enabled string indices in DT `e668ac6506` bpftool: Enable line buffering for stdout `009bb7ee15` Bluetooth: L2CAP: Fix using wrong mode `1a2241ad40` um: virtio_uml: Fix time-travel external time propagation `8411722e56` um: fix ndelay/udelay defines `b2b1b490bd` selinux: fix potential memleak in selinux_add_opt() `3253cf0914` mmc: meson-mx-sdio: add IRQ check `decb209954` mmc: meson-mx-sdhc: add IRQ check `bdc6c9fc5f` iwlwifi: mvm: test roc running status bits before removing the sta `a750fcd604` iwlwifi: mvm: fix 32-bit build in FTM `86b0122d26` ARM: dts: armada-38x: Add generic compatible to UART nodes `1f5428e438` arm64: dts: marvell: cn9130: enable CP0 GPIO controllers `874b97e862` arm64: dts: marvell: cn9130: add GPIO and SPI aliases `407ef1db40` usb: ftdi-elan: fix memory leak on device disconnect `2a65da5a1e` ARM: 9159/1: decompressor: Avoid UNPREDICTABLE NOP encoding `47dd693c94` xfrm: state and policy should fail if XFRMA_IF_ID 0 `db369047e3` xfrm: interface with if_id 0 should return error `37441ddadc` media: hantro: Fix probe func error path `3849ec830b` drm/tegra: vic: Fix DMA API misuse `b230114bc5` drm/bridge: ti-sn65dsi86: Set max register for regmap `db97fc2c44` drm/msm/dpu: fix safe status debugfs file `3580055d1f` arm64: dts: qcom: ipq6018: Fix gpio-ranges property `6f20a5a98a` arm64: dts: qcom: c630: Fix soundcard setup `394ee480aa` ath11k: Fix a NULL pointer dereference in ath11k_mac_op_hw_scan() `f6e4a6cbdb` media: coda/imx-vdoa: Handle dma_set_coherent_mask error codes `1a8869de32` media: msi001: fix possible null-ptr-deref in msi001_probe() `a79327bb01` media: dw2102: Fix use after free `958a8819d4` ARM: dts: gemini: NAS4220-B: fis-index-block with 128 KiB sectors `3e51460638` ath11k: Fix deleting uninitialized kernel timer during fragment cache flush `b35263f000` crypto: stm32 - Revert broken pm_runtime_resume_and_get changes `1f5b81874f` crypto: stm32/cryp - fix bugs and crash in tests `1f6151b077` crypto: stm32/cryp - fix lrw chaining mode `2bd40e3a3a` crypto: stm32/cryp - fix double pm exit `533af1621d` crypto: stm32/cryp - check early input data `5deb24e503` crypto: stm32/cryp - fix xts and race condition in crypto_engine requests `e9e0dd5da8` crypto: stm32/cryp - fix CTR counter carry `c40b1bc851` crypto: stm32 - Fix last sparse warning in stm32_cryp_check_ctr_counter `93033bbbdc` selftests: harness: avoid false negatives if test has no ASSERTs `f568fd97d7` selftests: clone3: clone3: add case CLONE3_ARGS_NO_TEST `d21b47c607` x86/uaccess: Move variable into switch case statement `3e801ea43c` xfrm: fix a small bug in xfrm_sa_len() `b87034d7a2` mwifiex: Fix possible ABBA deadlock `0836f94040` rcu/exp: Mark current CPU as exp-QS in IPI loop second pass `027165c491` drm/msm/dp: displayPort driver need algorithm rational `268f352456` sched/rt: Try to restart rt period timer when rt runtime exceeded `bb0579ab50` wireless: iwlwifi: Fix a double free in iwl_txq_dyn_alloc_dma `b4b911b164` media: si2157: Fix "warm" tuner state detection `7009a5fbc5` media: saa7146: mxb: Fix a NULL pointer dereference in mxb_attach() `df79d2bf95` media: dib8000: Fix a memleak in dib8000_init() `f0cb43a2c6` arm64: clear_page() shouldn't use DC ZVA when DCZID_EL0.DZP == 1 `88ed31aab4` arm64: lib: Annotate {clear, copy}_page() as position-independent `69e402a985` bpf: Remove config check to enable bpf support for branch records `924886fa22` bpf: Disallow BPF_LOG_KERNEL log level for bpf(BPF_BTF_LOAD) `218d952160` bpf: Adjust BTF log size limit. `b77ef5b4ea` sched/fair: Fix per-CPU kthread and wakee stacking for asym CPU capacity `d7d5b3bc52` sched/fair: Fix detection of per-CPU kthreads waking a task `ec121517ac` Bluetooth: btmtksdio: fix resume failure `2a7edcb3ef` staging: rtl8192e: rtllib_module: fix error handle case in alloc_rtllib() `49f5cd2b7c` staging: rtl8192e: return error code from rtllib_softmac_init() `04fdd426ce` floppy: Fix hang in watchdog when disk is ejected `45bbe00801` serial: amba-pl011: do not request memory region twice `8409d2394c` tty: serial: uartlite: allow 64 bit address `a001a15ab3` arm64: dts: ti: k3-j7200: Correct the d-cache-sets info `75919207c1` arm64: dts: ti: k3-j721e: Fix the L2 cache sets `2dcfa3c765` arm64: dts: ti: k3-j7200: Fix the L2 cache sets `f277978d6c` drm/radeon/radeon_kms: Fix a NULL pointer dereference in radeon_driver_open_kms() `3ca1b3b82f` drm/amdgpu: Fix a NULL pointer dereference in amdgpu_connector_lcd_native_mode() `96e05d2d93` thermal/drivers/imx8mm: Enable ADC when enabling monitor `ef72449e2d` ACPI: EC: Rework flushing of EC work while suspended to idle `c0acd5a097` cgroup: Trace event cgroup id fields should be u64 `e7e178e264` arm64: dts: qcom: msm8916: fix MMC controller aliases `894d91c633` netfilter: bridge: add support for pppoe filtering `13f64bbe42` thermal/drivers/imx: Implement runtime PM support `c3a59f34e8` media: venus: core: Fix a resource leak in the error handling path of 'venus_probe()' `50c4244906` media: venus: core: Fix a potential NULL pointer dereference in an error handling path `eeefa2eae8` media: venus: core, venc, vdec: Fix probe dependency error `53f65afc26` media: venus: pm_helpers: Control core power domain manually `89f518b153` media: coda: fix CODA960 JPEG encoder buffer overflow `1da628d351` media: mtk-vcodec: call v4l2_m2m_ctx_release first when file is released `2028fb832d` media: si470x-i2c: fix possible memory leak in si470x_i2c_probe() `e8d78f924f` media: imx-pxp: Initialize the spinlock prior to using it `621e8ce75d` media: rcar-csi2: Correct the selection of hsfreqrange `ad52b9890b` mfd: atmel-flexcom: Use .resume_noirq `46d6a23114` mfd: atmel-flexcom: Remove #ifdef CONFIG_PM_SLEEP `f93c9aa1d3` tty: serial: atmel: Call dma_async_issue_pending() `755a6c873b` tty: serial: atmel: Check return code of dmaengine_submit() `bd85b2e77a` arm64: dts: ti: k3-j721e: correct cache-sets info `32e9947e66` ath11k: Use host CE parameters for CE interrupts configuration `6a49acfaca` crypto: qat - fix undetected PFVF timeout in ACK loop `475ac5c565` crypto: qat - make pfvf send message direction agnostic `ee1c74c3c9` crypto: qat - remove unnecessary collision prevention step in PFVF `472f768352` crypto: qat - fix spelling mistake: "messge" -> "message" `ae766527e6` ARM: dts: stm32: fix dtbs_check warning on ili9341 dts binding on stm32f429 disco `eab4204588` mtd: hyperbus: rpc-if: fix bug in rpcif_hb_remove `867d4ace48` crypto: qce - fix uaf on qce_skcipher_register_one `e19b3c1b57` crypto: qce - fix uaf on qce_ahash_register_one `5de640f59f` media: dmxdev: fix UAF when dvb_register_device() fails `1d64e2bd22` arm64: dts: renesas: cat875: Add rx/tx delays `a33eef23a6` drm/vboxvideo: fix a NULL vs IS_ERR() check `43220a61e7` fs: dlm: fix build with CONFIG_IPV6 disabled `0d7c5d10e7` tee: fix put order in teedev_close_context() `097e601eb8` ath11k: reset RSN/WPA present state for open BSS `fa51addd39` ath11k: clear the keys properly via DISABLE_KEY `df94b37e90` ath11k: Fix ETSI regd with weather radar overlap `ffc9019bd9` Bluetooth: stop proccessing malicious adv data `3273541fed` memory: renesas-rpc-if: Return error in case devm_ioremap_resource() fails `55917db359` fs: dlm: don't call kernel_getpeername() in error_report() `98923ebb03` fs: dlm: use sk->sk_socket instead of con->sock `6edd1bd8e3` arm64: dts: meson-gxbb-wetek: fix missing GPIO binding `eb1f75fa24` arm64: dts: meson-gxbb-wetek: fix HDMI in early boot `6f012f2c44` arm64: dts: amlogic: Fix SPI NOR flash node name for ODROID N2/N2+ `96d710b1c6` arm64: dts: amlogic: meson-g12: Fix GPU operating point table node name `0b57480ed5` media: aspeed: Update signal status immediately to ensure sane hw state `0ff0ae69d2` media: em28xx: fix memory leak in em28xx_init_dev `b441d94287` media: aspeed: fix mode-detect always time out at 2nd run `8d132d9dd8` media: atomisp: fix uninitialized bug in gmin_get_pmic_id_and_addr() `fc2b95e7ae` media: atomisp: fix enum formats logic `6e5353238c` media: atomisp: add NULL check for asd obtained from atomisp_video_pipe `6cbabad304` media: staging: media: atomisp: pci: Balance braces around conditional statements in file atomisp_cmd.c `22b0b68f7d` media: atomisp: fix ifdefs in sh_css.c `0bf5e8af6e` media: atomisp: fix inverted error check for ia_css_mipi_is_source_port_valid() `3cb3e66f58` media: atomisp: do not use err var when checking port validity for ISP2400 `08e43223fb` media: atomisp: fix inverted logic in buffers_needed() `fb370f6dc7` media: atomisp: fix punit_ddr_dvfs_enable() argument for mrfld_power up case `1daacf9bb6` media: atomisp: add missing media_device_cleanup() in atomisp_unregister_entities() `e1da9301cf` media: videobuf2: Fix the size printk format `90807ab437` mtd: hyperbus: rpc-if: Check return value of rpcif_sw_init() `9bfed11dcf` ath11k: Send PPDU_STATS_CFG with proper pdev mask to firmware `2fe056d979` wcn36xx: fix RX BD rate mapping for 5GHz legacy rates `22406ed4e3` wcn36xx: populate band before determining rate on RX `92fea7bd5a` wcn36xx: Put DXE block into reset before freeing memory `0d53c47f6a` wcn36xx: Release DMA channel descriptor allocations `1850195a85` wcn36xx: Fix DMA channel enable/disable cycle `38a7842889` wcn36xx: Indicate beacon not connection loss on MISSED_BEACON_IND `fcb267bb95` wcn36xx: ensure pairing of init_scan/finish_scan and start_scan/end_scan `e53ff4dd70` drm/vc4: hdmi: Set a default HSM rate `b9c2343373` clk: bcm-2835: Remove rounding up the dividers `836dd37fe2` clk: bcm-2835: Pick the closest clock rate `88f1b613c3` Bluetooth: cmtp: fix possible panic when cmtp_init_sockets() fails `9ddfa1c191` drm/rockchip: dsi: Reconfigure hardware on resume() `58904ed186` drm/rockchip: dsi: Disable PLL clock on bind error `6215cde020` drm/rockchip: dsi: Hold pm-runtime across bind/unbind `8ccaafa1ca` drm/rockchip: dsi: Fix unbalanced clock on probe error `9bc19022aa` drm/panel: innolux-p079zca: Delete panel on attach() failure `b01b7b8684` drm/panel: kingdisplay-kd097d04: Delete panel on attach() failure `0499c863a8` drm: fix null-ptr-deref in drm_dev_init_release() `7798757013` drm/bridge: display-connector: fix an uninitialized pointer in probe() `cb5813b0e5` Bluetooth: L2CAP: Fix not initializing sk_peer_pid `ed0b1fd3ec` drm/ttm: Put BO in its memory manager's lru list `7b9fa915a5` shmem: fix a race between shmem_unused_huge_shrink and shmem_evict_inode `6c6f86bb61` mm/page_alloc.c: do not warn allocation failure on zone DMA if no managed pages `e04b1dfe15` dma/pool: create dma atomic pool only if dma zone has managed pages `d2e5724117` mm_zone: add function to check if managed dma zone exists `2142a7e9bd` PCI: Add function 1 DMA alias quirk for Marvell 88SE9125 SATA controller `45c74f4f54` dma_fence_array: Fix PENDING_ERROR leak in dma_fence_array_signaled() `191a24ceae` gpu: host1x: Add back arm_iommu_detach_device() `0680674536` iommu/io-pgtable-arm-v7s: Add error handle for page table allocation failure `3dae11f8e3` lkdtm: Fix content of section containing lkdtm_rodata_do_nothing() `e4a2c924a1` iio: adc: ti-adc081c: Partial revert of removal of ACPI IDs `256302cb2f` can: softing_cs: softingcs_probe(): fix memleak on registration failure `aa57725e2d` media: cec-pin: fix interrupt en/disable handling `2e566cacc3` media: stk1160: fix control-message timeouts `1a0ca711df` media: pvrusb2: fix control-message timeouts `2dbf430ead` media: redrat3: fix control-message timeouts `6e9c120bf9` media: dib0700: fix undefined behavior in tuner shutdown `5e98ac260d` media: s2255: fix control-message timeouts `09b0b918a6` media: cpia2: fix control-message timeouts `d90833106c` media: em28xx: fix control-message timeouts `2182575c83` media: mceusb: fix control-message timeouts `460525acc9` media: flexcop-usb: fix control-message timeouts `7cac8a5624` media: v4l2-ioctl.c: readbuffers depends on V4L2_CAP_READWRITE `1da0b1cd42` rtc: cmos: take rtc_lock while reading from CMOS `14f6cfe0d7` tools/nolibc: fix incorrect truncation of exit code `5e258640ba` tools/nolibc: i386: fix initial stack alignment `06f7528d64` tools/nolibc: x86-64: Fix startup code bug `98259dd54e` x86/gpu: Reserve stolen memory for first integrated Intel GPU `e2a17dcad5` mtd: rawnand: davinci: Rewrite function description `8933138a66` mtd: rawnand: davinci: Avoid duplicated page read `677764634b` mtd: rawnand: davinci: Don't calculate ECC when reading page `a8a607b004` mtd: Fixed breaking list in __mtd_del_partition. `ff10cd7bb2` mtd: rawnand: gpmi: Remove explicit default gpmi clock setting for i.MX6 `538a5e208e` mtd: rawnand: gpmi: Add ERR007117 protection for nfc_apply_timings `777a700ccf` nfc: llcp: fix NULL error pointer dereference on sendmsg() after failed bind() `08283b076f` f2fs: fix to do sanity check in is_alive() `57cfc965e3` HID: wacom: Avoid using stale array indicies to read contact count `7fd22c99bb` HID: wacom: Ignore the confidence flag when a touch is removed `9a4800e0f6` HID: wacom: Reset expected and received contact counts at the same time `c2e39d5df0` HID: uhid: Fix worker destroying device without any protection `aa1346113c` KVM: VMX: switch blocked_vcpu_on_cpu_lock to raw spinlock `0347b16583` Merge 5.10.93 into android12-5.10-lts `fd187a4925` Linux 5.10.93 `bed97c9036` mtd: fixup CFI on ixp4xx `f50803b519` powerpc/pseries: Get entry and uaccess flush required bits from H_GET_CPU_CHARACTERISTICS `68c1aa82be` ALSA: hda/realtek: Re-order quirk entries for Lenovo `4d15a17d06` ALSA: hda/realtek: Add quirk for Legion Y9000X 2020 `d7b41464f1` ALSA: hda: ALC287: Add Lenovo IdeaPad Slim 9i 14ITL5 speaker quirk `87246ae94b` ALSA: hda/realtek - Fix silent output on Gigabyte X570 Aorus Master after reboot from Windows `9c27e513fb` ALSA: hda/realtek: Add speaker fixup for some Yoga 15ITL5 devices `4c7fb4d519` KVM: x86: remove PMU FIXED_CTR3 from msrs_to_save_all `6b8c3a1853` firmware: qemu_fw_cfg: fix kobject leak in probe error path `889c73305b` firmware: qemu_fw_cfg: fix NULL-pointer deref on duplicate entries `ff9588cf15` firmware: qemu_fw_cfg: fix sysfs information leak `358a4b054a` rtlwifi: rtl8192cu: Fix WARNING when calling local_irq_restore() with interrupts enabled `93c4506f9f` media: uvcvideo: fix division by zero at stream start `4c3f70be6f` video: vga16fb: Only probe for EGA and VGA 16 color graphic cards `161e43ab8c` 9p: only copy valid iattrs in 9P2000.L setattr implementation `0e6c0f3f40` KVM: s390: Clarify SIGP orders versus STOP/RESTART `413b427f5f` KVM: x86: Register Processor Trace interrupt hook iff PT enabled in guest `723acd75a0` perf: Protect perf_guest_cbs with RCU `eadde287a6` vfs: fs_context: fix up param length parsing in legacy_parse_param `c5f3827716` remoteproc: qcom: pil_info: Don't memcpy_toio more than is provided `5d88e24b23` orangefs: Fix the size of a memory allocation in orangefs_bufmap_alloc() `0084fefe29` devtmpfs regression fix: reconfigure on each mount `ee40594c95` kbuild: Add $(KBUILD_HOSTLDFLAGS) to 'has_libelf' test `f45f895af5` Merge branch 'android12-5.10' into `android12-5.10-lts` `7dd0d263fe` Merge 5.10.92 into android12-5.10-lts `c982c1a839` Linux 5.10.92 `c0091233f3` staging: greybus: fix stack size warning with UBSAN `66d21c005d` drm/i915: Avoid bitwise vs logical OR warning in snb_wm_latency_quirk() `2d4fda471d` staging: wlan-ng: Avoid bitwise vs logical OR warning in hfa384x_usb_throttlefn() `3609fed7ac` media: Revert "media: uvcvideo: Set unique vdev name based in type" `9b3c761e78` random: fix crash on multiple early calls to add_bootloader_randomness() `61cca7d191` random: fix data race on crng init time `3de9478230` random: fix data race on crng_node_pool `43c494294f` can: gs_usb: gs_can_start_xmit(): zero-initialize hf->{flags,reserved} `45221a57b6` can: isotp: convert struct tpcon::{idx,len} to unsigned int `bd61ae808b` can: gs_usb: fix use of uninitialized variable, detach device on reception of invalid USB data `f68e600017` mfd: intel-lpss: Fix too early PM enablement in the ACPI ->probe() `5f76445a31` veth: Do not record rx queue hint in veth_xmit `ddfa53825f` mmc: sdhci-pci: Add PCI ID for Intel ADL `2e691f9894` ath11k: Fix buffer overflow when scanning with extraie `a87cecf943` USB: Fix "slab-out-of-bounds Write" bug in usb_hcd_poll_rh_status `15982330b6` USB: core: Fix bug in resuming hub's handling of wakeup requests `413108ce3b` ARM: dts: exynos: Fix BCM4330 Bluetooth reset polarity in I9100 `b6dd070236` Bluetooth: bfusb: fix division by zero in send path `869e1677a0` Bluetooth: btusb: Add support for Foxconn QCA 0xe0d0 `c20021ce94` Bluetooth: btusb: Add support for Foxconn MT7922A `8349391838` Bluetooth: btusb: Add two more Bluetooth parts for WCN6855 `294c0dd80d` Bluetooth: btusb: fix memory leak in btusb_mtk_submit_wmt_recv_urb() `35ab8c9085` bpf: Fix out of bounds access from invalid _or_null type verification `c84fbba8a9` workqueue: Fix unbind_workers() VS wq_worker_running() race `c39d68ab38` md: revert io stats accounting `d605f2f30d` Merge 5.10.91 into android12-5.10-lts `df395c763b` Linux 5.10.91 `674071c9eb` Input: zinitix - make sure the IRQ is allocated before it gets enabled `ef81f7d406` ARM: dts: gpio-ranges property is now required `f63fa1a0d4` ipv6: raw: check passed optlen before reading `cf07884e6b` drm/amd/display: Added power down for DCN10 `10b9ccd067` mISDN: change function names to avoid conflicts `dd8a09cfbb` atlantic: Fix buff_ring OOB in aq_ring_rx_clean `c2f4bb251e` net: udp: fix alignment problem in udp4_seq_show() `f82b48d1d8` ip6_vti: initialize __ip6_tnl_parm struct in vti6_siocdevprivate `8c87a83ef8` scsi: libiscsi: Fix UAF in iscsi_conn_get_param()/iscsi_conn_teardown() `b798b677f9` usb: mtu3: fix interval value for intr and isoc `498d77fc5e` ipv6: Do cleanup if attribute validation fails in multipath route `72b0d14a0a` ipv6: Continue processing multipath route even if gateway attribute is invalid `5a7d650bb1` power: bq25890: Enable continuous conversion for ADC at charging `4f260ea553` phonet: refcount leak in pep_sock_accep `6195293460` rndis_host: support Hytera digital radios `62cbde77d9` power: reset: ltc2952: Fix use of floating point literals `998d157e3b` power: supply: core: Break capacity loop `16d8568378` xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate `aa606b82cd` net: ena: Fix error handling when calculating max IO queues number `e7f5480978` net: ena: Fix undefined state when tx request id is out of bounds `2de3d961f8` sch_qfq: prevent shift-out-of-bounds in qfq_init_qdisc `4c34d5fd8c` batman-adv: mcast: don't send link-local multicast to mcast routers `f403b5f96e` lwtunnel: Validate RTA_ENCAP_TYPE attribute length `48d5adb08d` ipv6: Check attribute length for RTA_GATEWAY when deleting multipath route `173bfa2782` ipv6: Check attribute length for RTA_GATEWAY in multipath route `914420a2a6` ipv4: Check attribute length for RTA_FLOW in multipath route `a8fe915be6` ipv4: Check attribute length for RTA_GATEWAY in multipath route `786a335fef` ftrace/samples: Add missing prototypes direct functions `c859c4de0b` i40e: Fix incorrect netdev's real number of RX/TX queues `d0ad64438f` i40e: Fix for displaying message regarding NVM version `32845aa602` i40e: fix use-after-free in i40e_sync_filters_subtask() `f7edb6b943` sfc: The RX page_ring is optional `2b3f34da0d` mac80211: initialize variable have_higher_than_11mbit `16e5cad6ec` RDMA/uverbs: Check for null return of kmalloc_array `a7c2cae997` netrom: fix copying in user data in nr_setsockopt `beeb0fdeda` RDMA/core: Don't infoleak GRH fields `3ca132e6b0` iavf: Fix limit of total number of queues to active queues of VF `396e301690` i40e: Fix to not show opcode msg on unsuccessful VF MAC change `7f13d14e56` ieee802154: atusb: fix uninit value in atusb_set_extended_addr `7db1e245cb` tracing: Tag trace_percpu_buffer as a percpu pointer `760c6a6255` tracing: Fix check for trace_percpu_buffer validity in get_trace_buf() `c1e2da4b3f` selftests: x86: fix [-Wstringop-overread] warn in test_process_vm_readv() `384111e123` f2fs: quota: fix potential deadlock `a1bb21475e` Merge 5.10.90 into android12-5.10-lts `d3e491a20d` Linux 5.10.90 `8c15bfb36a` bpf: Add kconfig knob for disabling unpriv bpf by default `d8a5b1377b` perf script: Fix CPU filtering of a script's switch events `2386e81a1d` net: fix use-after-free in tw_timer_handler `34087cf960` Input: spaceball - fix parsing of movement data packets `9f329d0d6c` Input: appletouch - initialize work before device registration `2a4f551dec` scsi: vmw_pvscsi: Set residual data length conditionally `1cb8444f31` binder: fix async_free_space accounting for empty parcels `a6e26251dd` usb: mtu3: set interval of FS intr and isoc endpoint `3b6efe0b7b` usb: mtu3: fix list_head check warning `f10b01c48f` usb: mtu3: add memory barrier before set GPD's HWO `1c4ace3e6b` usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear. `1933fe8ce7` xhci: Fresco FL1100 controller should not have BROKEN_MSI quirk set. `b8553330a0` drm/amdgpu: add support for IP discovery gc_info table v2 `28863ffe21` drm/amdgpu: When the VCN(1.0) block is suspended, powergating is explicitly enabled `a0f3ac399e` uapi: fix linux/nfc.h userspace compilation errors `818c9e0a04` nfc: uapi: use kernel size_t to fix user-space builds `8d31cbab4c` i2c: validate user data in compat ioctl `51c94d8fbd` fsl/fman: Fix missing put_device() call in fman_port_probe `920932b20e` net/ncsi: check for error return from call to nla_put_u32 `610af55f9f` selftests/net: udpgso_bench_tx: fix dst ip argument `78503589b1` net/mlx5e: Fix wrong features assignment in case of error `6114600808` ionic: Initialize the 'lif->dbid_inuse' bitmap `b7c9a1427b` igc: Fix TX timestamp support for non-MSI-X platforms `e8a5988a85` net/smc: fix kernel panic caused by race of smc_sock `97c87c1db9` net/smc: don't send CDC/LLC message if link not ready `99f19566b1` net/smc: improved fix wait on already cleared link `e553265ea5` NFC: st21nfca: Fix memory leak in device probe and remove `8d70dc0eec` net: lantiq_xrx200: fix statistics of received bytes `7ef89bd1e8` net: ag71xx: Fix a potential double free in error handling paths `40d3618691` net: usb: pegasus: Do not drop long Ethernet frames `a67becdaa8` net/smc: fix using of uninitialized completions `769d14abd3` sctp: use call_rcu to free endpoint `13c1bf43b6` selftests: Calculate udpgso segment count without header adjustment `abe74fb433` udp: using datalen to cap ipv6 udp max gso segments `5e6ad649e9` net/mlx5e: Fix ICOSQ recovery flow for XSK `73665165b6` net/mlx5e: Wrap the tx reporter dump callback to extract the sq `4cd1da02f0` net/mlx5: DR, Fix NULL vs IS_ERR checking in dr_domain_init_resources `fcb32eb3d0` scsi: lpfc: Terminate string in lpfc_debugfs_nvmeio_trc_write() `4833ad4908` selinux: initialize proto variable in selinux_ip_postroute_compat() `ec941a2277` recordmcount.pl: fix typo in s390 mcount regex `a0e82d5ef9` memblock: fix memblock_phys_alloc() section mismatch error `7da855e939` platform/x86: apple-gmux: use resource_size() with res `d01e9ce1af` parisc: Clear stale IIR value on instruction access rights trap `0643d9175d` tomoyo: use hwight16() in tomoyo_domain_quota_is_ok() `e2048a1f91` tomoyo: Check exceeded quota early in tomoyo_domain_quota_is_ok(). `210c7c6908` Input: i8042 - enable deferred probe quirk for ASUS UM325UA `bb672eff74` Input: i8042 - add deferred probe support `9b28b48fb3` Merge 5.10.89 into android12-5.10-lts `eb967e323f` Linux 5.10.89 `52ad5da8e3` phonet/pep: refuse to enable an unbound pipe `7dd52af1eb` hamradio: improve the incomplete fix to avoid NPD `450121075a` hamradio: defer ax25 kfree after unregister_netdev `8e34d07dd4` ax25: NPD bug when detaching AX25 device `50f78486f9` hwmon: (lm90) Do not report 'busy' status bit as alarm `ec1d222d37` hwmom: (lm90) Fix citical alarm status for MAX6680/MAX6681 `441d387366` pinctrl: mediatek: fix global-out-of-bounds issue `9c75a9657b` ASoC: rt5682: fix the wrong jack type detected `94caab5af1` ASoC: tas2770: Fix setting of high sample rates `c7282790c7` Input: goodix - add id->model mapping for the "9111" model `3bb3bf50d6` Input: elants_i2c - do not check Remark ID on eKTH3900/eKTH5312 `ee6f34215c` mm: mempolicy: fix THP allocations escaping mempolicy restrictions `8008fc1d0b` KVM: VMX: Fix stale docs for kvm-intel.emulate_invalid_guest_state `d91ed251fd` usb: gadget: u_ether: fix race in setting MAC address in setup phase `6697f29bf5` ceph: fix up non-directory creation in SGID directories `fffb6581a2` f2fs: fix to do sanity check on last xattr entry in __f2fs_setxattr() `ad338d825e` tee: optee: Fix incorrect page free bug `1f20707674` mm/hwpoison: clear MF_COUNT_INCREASED before retrying get_any_page() `ac61b9c6c0` mac80211: fix locking in ieee80211_start_ap error path `89876d1083` ARM: 9169/1: entry: fix Thumb2 bug in iWMMXt exception handling `c3253d3a38` mmc: mmci: stm32: clear DLYB_CR after sending tuning command `0d66b39521` mmc: core: Disable card detect during shutdown `c8e366a01c` mmc: meson-mx-sdhc: Set MANUAL_STOP for multi-block SDIO commands `4af7915361` mmc: sdhci-tegra: Fix switch to HS400ES mode `9a7ec79797` gpio: dln2: Fix interrupts when replugging the device `f5b02912e2` pinctrl: stm32: consider the GPIO offset to expose all the GPIO lines `28626e76ba` KVM: VMX: Wake vCPU when delivering posted IRQ even if vCPU == this vCPU `7a37f2e370` platform/x86: intel_pmc_core: fix memleak on registration failure `b57afd1240` x86/pkey: Fix undefined behaviour with PKRU_WD_BIT `c05d8f66ec` tee: handle lookup of shm with reference count 0 `0ffb9f83e4` parisc: Fix mask used to select futex spinlock `5deeb9ad59` parisc: Correct completer in lws start `8b745616ba` ipmi: fix initialization when workqueue allocation fails `1f6ab84746` ipmi: ssif: initialize ssif_info->client early `a5192f3116` ipmi: bail out if init_srcu_struct fails `bc674f1b21` Input: atmel_mxt_ts - fix double free in mxt_read_info_block `30140e252f` ASoC: meson: aiu: Move AIU_I2S_MISC hold setting to aiu-fifo-i2s `2b4c020b70` ALSA: hda/realtek: Fix quirk for Clevo NJ51CU `7470780f3b` ALSA: hda/realtek: Add new alc285-hp-amp-init model `4cb7dc2e30` ALSA: hda/realtek: Amp init fixup for HP ZBook 15 G6 `69e492161c` ALSA: drivers: opl3: Fix incorrect use of vp->state `a96c08e0b4` ALSA: jack: Check the return value of kstrdup() `51c7b2a7b8` hwmon: (lm90) Drop critical attribute support for MAX6654 `2464738d0e` hwmon: (lm90) Introduce flag indicating extended temperature support `196df56c3d` hwmon: (lm90) Add basic support for TI TMP461 `fa2e149260` hwmon: (lm90) Fix usage of CONFIG2 register in detect function `ba696b4708` pinctrl: bcm2835: Change init order for gpio hogs `676c572439` Input: elantech - fix stack out of bound access in elantech_change_report_id() `2792fde84c` sfc: falcon: Check null pointer of rx_queue->page_ring `d70b4001ef` sfc: Check null pointer of rx_queue->page_ring `75c962f02a` net: ks8851: Check for error irq `9db0f8d395` drivers: net: smc911x: Check for error irq `ca2a15053b` fjes: Check for error irq `c6d2754006` bonding: fix ad_actor_system option setting to default `6809da5185` ipmi: Fix UAF when uninstall ipmi_si and ipmi_msghandler module `61e6b82e7b` igb: fix deadlock caused by taking RTNL in RPM resume path `e00eace232` net: skip virtio_net_hdr_set_proto if protocol already set `ed05e4dcfb` net: accept UFOv6 packages in virtio_net_hdr_to_skb `56b0bbba78` qlcnic: potential dereference null pointer of rx_queue->page_ring `78e49d77e5` net: marvell: prestera: fix incorrect return of port_find `861b4413e4` ARM: dts: imx6qdl-wandboard: Fix Ethernet support `d79f5e0d45` netfilter: fix regression in looped (broad\|multi)cast's MAC handling `579cefef7c` RDMA/hns: Replace kfree() with kvfree() `7cf6466e00` IB/qib: Fix memory leak in qib_user_sdma_queue_pkts() `cd9c90682b` ASoC: meson: aiu: fifo: Add missing dma_coerce_mask_and_coherent() `580ecf86e7` spi: change clk_disable_unprepare to clk_unprepare `93a957bbf4` arm64: dts: allwinner: orangepi-zero-plus: fix PHY mode `ef2dce4325` HID: potential dereference of null pointer `3110bc5862` HID: holtek: fix mouse probing `0875873b2a` ext4: check for inconsistent extents between index and leaf block `76366c024f` ext4: check for out-of-order index extents in ext4_valid_extent_entries() `1d4b1c4e8b` ext4: prevent partial update of the extent blocks `f69a47fcbb` net: usb: lan78xx: add Allied Telesis AT29M2-AF `8c0059a25c` arm64: vdso32: require CROSS_COMPILE_COMPAT for gcc+bfd `b16b124a42` arm64: vdso32: drop -no-integrated-as flag `ba13eb1927` Merge 5.10.88 into android12-5.10-lts `856f88f27b` Linux 5.10.88 `88f20cccbe` xen/netback: don't queue unlimited number of packages `525875c410` xen/netback: fix rx queue stall detection `8fa3a370cc` xen/console: harden hvc_xen against event channel storms `d31b337917` xen/netfront: harden netfront against event channel storms `8ac3b6ee7c` xen/blkfront: harden blkfront against event channel storms `76ec7fe2d8` Revert "xsk: Do not sleep in poll() when need_wakeup set" `e24fc89830` bus: ti-sysc: Fix variable set but not used warning for reinit_modules `70692b0620` rcu: Mark accesses to rcu_state.n_force_qs `a9078e7914` scsi: scsi_debug: Sanity check block descriptor length in resp_mode_select() `bdb854f134` scsi: scsi_debug: Fix type in min_t to avoid stack OOB `aa1f912712` scsi: scsi_debug: Don't call kcalloc() if size arg is zero `6859985a2f` ovl: fix warning in ovl_create_real() `5fd7d62daa` fuse: annotate lock in fuse_reverse_inval_entry() `b99bdf127a` media: mxl111sf: change mutex_init() location `0413f7a1a5` xsk: Do not sleep in poll() when need_wakeup set `6b8d8ecdd9` ARM: dts: imx6ull-pinfunc: Fix CSI_DATA07__ESAI_TX0 pad name `8affa1b68d` Input: touchscreen - avoid bitwise vs logical OR warning `aec5897b27` drm/amdgpu: correct register access for RLC_JUMP_TABLE_RESTORE `c1d519263d` libata: if T_LENGTH is zero, dma direction should be DMA_NONE `a9f2c6af5a` timekeeping: Really make sure wall_to_monotonic isn't positive `6471ebcd6f` serial: 8250_fintek: Fix garbled text for console `a7c8067453` iocost: Fix divide-by-zero on donation from low hweight cgroup `bcebb8eb19` zonefs: add MODULE_ALIAS_FS `1c414ff63b` btrfs: fix double free of anon_dev after failure to create subvolume `005d9292b5` btrfs: fix memory leak in __add_inode_ref() `cd98cb5216` USB: serial: option: add Telit FN990 compositions `5c93584d9a` USB: serial: cp210x: fix CP2105 GPIO registration `8f207f1263` usb: xhci: Extend support for runtime power management for AMD's Yellow carp. `e5949933f3` PCI/MSI: Mask MSI-X vectors only on success `f8aa09186c` PCI/MSI: Clear PCI_MSIX_FLAGS_MASKALL on error `d17c5a3897` usb: dwc2: fix STM ID/VBUS detection startup delay in dwc2_driver_probe `2b2edc8fc5` USB: NO_LPM quirk Lenovo USB-C to Ethernet Adapher(RTL8153-04) `fd623e16b2` tty: n_hdlc: make n_hdlc_tty_wakeup() asynchronous `9439fabfc3` KVM: x86: Drop guest CPUID check for host initiated writes to MSR_IA32_PERF_CAPABILITIES `5fe305c6d4` Revert "usb: early: convert to readl_poll_timeout_atomic()" `2b54f485f2` USB: gadget: bRequestType is a bitfield, not a enum `151ffac3ac` powerpc/85xx: Fix oops when CONFIG_FSL_PMC=n `fcf9194d36` bpf, selftests: Fix racing issue in btf_skc_cls_ingress test `6f46c59e60` sit: do not call ipip6_dev_free() from sit_init_net() `6e1011cd18` net: systemport: Add global locking for descriptor lifecycle `d1765f984c` net/smc: Prevent smc_release() from long blocking `337bb7bf7c` net: Fix double 0x prefix print in SKB dump `734a3f3106` sfc_ef100: potential dereference of null pointer `7da349f07e` net/packet: rx_owner_map depends on pg_vec `1a34fb9e2b` netdevsim: Zero-initialize memory for new map's value in function nsim_bpf_map_alloc `d3e1f54508` ixgbe: set X550 MDIO speed before talking to PHY `48e01e3881` ixgbe: Document how to enable NBASE-T support `776ed8b366` igc: Fix typo in i225 LTR functions `74a16e062b` igbvf: fix double free in `igbvf_probe` `ddac50d04f` igb: Fix removal of unicast MAC filters of VFs `12c1938870` soc/tegra: fuse: Fix bitwise vs. logical OR warning `451f1eded7` mptcp: clear 'kern' flag from fallback sockets `222cebd995` drm/amd/pm: fix a potential gpu_metrics_table memory leak `74dc97dfb2` rds: memory leak in __rds_conn_create() `67f4362ae2` flow_offload: return EOPNOTSUPP for the unsupported mpls action type `03fd6ca056` mac80211: fix lookup when adding AddBA extension element `bef59d6a83` mac80211: agg-tx: don't schedule_and_wake_txq() under sta->lock `96bc86cac0` drm/ast: potential dereference of null pointer `cac0fd4b9b` selftest/net/forwarding: declare NETIFS p9 p10 `81fbdd4565` net/sched: sch_ets: don't remove idle classes from the round-robin list `be32c8a788` dmaengine: st_fdma: fix MODULE_ALIAS `dfff1d5e85` selftests: Fix IPv6 address bind tests `08896ecfff` selftests: Fix raw socket bind tests with VRF `5ba4dfb8b8` selftests: Add duplicate config only for MD5 VRF tests `12512bc8f2` net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg `3a4f6dba1e` inet_diag: fix kernel-infoleak for UDP sockets `20ad1ef02f` sch_cake: do not call cake_destroy() from cake_init() `1208b445a4` s390/kexec_file: fix error handling when applying relocations `c058c544e7` selftests: net: Correct ping6 expected rc from 2 to 1 `9983425c20` virtio/vsock: fix the transport to work with VMADDR_CID_ANY `94a01e6fb2` soc: imx: Register SoC device only on i.MX boards `cc426a91d3` clk: Don't parent clks until the parent is fully registered `429bb01e4d` ARM: socfpga: dts: fix qspi node compatible `7b4cc168d9` ceph: initialize pathlen variable in reconnect_caps_cb `e0f06c32af` ceph: fix duplicate increment of opened_inodes metric `640e28d618` tee: amdtee: fix an IS_ERR() vs NULL bug `eed897a222` mac80211: track only QoS data frames for admission control `24983f7508` arm64: dts: rockchip: fix audio-supply for Rock Pi 4 `49bd597719` arm64: dts: rockchip: fix rk3399-leez-p710 vcc3v3-lan supply `9fcdbbf396` arm64: dts: rockchip: fix rk3308-roc-cc vcc-sd supply `ba866840b2` arm64: dts: rockchip: remove mmc-hs400-enhanced-strobe from rk3399-khadas-edge `3516bc1492` arm64: dts: imx8mp-evk: Improve the Ethernet PHY description `06294e7e34` arm64: dts: imx8m: correct assigned clocks for FEC `4cc6badff9` audit: improve robustness of the audit queue handling `0e21e6cd5e` dm btree remove: fix use after free in rebalance_children() `f5187a9d52` recordmcount.pl: look for jgnop instruction as well as bcrl on s390 `51f6302f81` vdpa: check that offsets are within bounds `e3a1ab5aea` virtio_ring: Fix querying of maximum DMA mapping size for virtio device `0612679e48` bpf, selftests: Add test case trying to taint map value pointer `279e0bf80d` bpf: Make 32->64 bounds propagation slightly more robust `e2aad0b5f2` bpf: Fix signed bounds propagation after mov32 `f0f484714f` firmware: arm_scpi: Fix string overflow in SCPI genpd driver `7fd214fc7f` mac80211: validate extended element ID is present `0bb50470f1` mac80211: send ADDBA requests using the tid/queue of the aggregation session `29bb131dbb` mac80211: mark TX-during-stop for TX in in_reconfig `15640e40e3` mac80211: fix regression in SSN handling of addba tx `49b7e49692` KVM: downgrade two BUG_ONs to WARN_ON_ONCE `8d0f56c2ed` KVM: selftests: Make sure kvm_create_max_vcpus test won't hit RLIMIT_NOFILE `c4d08791d9` Merge 5.10.87 into android12-5.10-lts `272aedd4a3` Linux 5.10.87 `8dd559d53b` arm: ioremap: don't abuse pfn_valid() to check if pfn is in RAM `65c578935b` arm: extend pfn_valid to take into account freed memory map alignment `6e634c0e71` memblock: ensure there is no overflow in memblock_overlaps_region() `74551f13c6` memblock: align freed memory map on pageblock boundaries with SPARSEMEM `b4b54c7ba1` memblock: free_unused_memmap: use pageblock units instead of MAX_ORDER `b6a1cbd187` perf intel-pt: Fix error timestamp setting on the decoder error path `0612aa02c2` perf intel-pt: Fix missing 'instruction' events with 'q' option `71c795028b` perf intel-pt: Fix next 'err' value, walking trace `02681dd178` perf intel-pt: Fix state setting when receiving overflow (OVF) packet `cbed09b44c` perf intel-pt: Fix intel_pt_fup_event() assumptions about setting state type `3bb7fd4be8` perf intel-pt: Fix sync state when a PSB (synchronization) packet is found `731ff78841` perf intel-pt: Fix some PGE (packet generation enable/control flow packets) usage `b23f9252a4` perf inject: Fix itrace space allowed for new attributes `7c26da3be1` ethtool: do not perform operations on net devices being unregistered `6992d8c215` hwmon: (dell-smm) Fix warning on /proc/i8k creation error `c31470a30c` fuse: make sure reclaim doesn't write the inode `613725436e` bpf: Fix integer overflow in argument calculation for bpf_map_area_alloc `9099f35126` staging: most: dim2: use device release method `ac76adc87a` KVM: x86: Ignore sparse banks size for an "all CPUs", non-sparse IPI req `6f0d9d3e74` tracing: Fix a kmemleak false positive in tracing_map `f35f7f04aa` drm/amd/display: add connector type check for CRC source set `dd3cea3425` drm/amd/display: Fix for the no Audio bug with Tiled Displays `dadce61247` net: netlink: af_netlink: Prevent empty skb by adding a check on len. `bca6af4325` i2c: rk3x: Handle a spurious start completion interrupt flag `d6edec8a7b` parisc/agp: Annotate parisc agp init functions with __init `cf520ccffd` ALSA: hda/hdmi: fix HDA codec entry table order for ADL-P `701a07fd02` ALSA: hda: Add Intel DG2 PCI ID and HDMI codec vid `6d22a96d12` net/mlx4_en: Update reported link modes for 1/10G `999069d8b0` Revert "tty: serial: fsl_lpuart: drop earlycon entry for i.MX8QXP" `27f4ce02b3` s390/test_unwind: use raw opcode instead of invalid instruction `9eab949e2b` KVM: arm64: Save PSTATE early on exit `990fd815ec` drm/msm/dsi: set default num_data_lanes `c602863ad2` nfc: fix segfault in nfc_genl_dump_devices_done `4f0b8b90b8` Merge 5.10.86 into android12-5.10-lts `37050f17f2` Linux 5.10.86 `3241449183` netfilter: selftest: conntrack_vrf.sh: fix file permission `afc997898e` Merge 5.10.85 into android12-5.10-lts `e4f2aee661` Linux 5.10.85 `47301c06f6` Documentation/Kbuild: Remove references to gcc-plugin.sh `af5ba49cf7` MAINTAINERS: adjust GCC PLUGINS after gcc-plugin.sh removal `ad13421fd2` doc: gcc-plugins: update gcc-plugins.rst `9fc17c3af5` kbuild: simplify GCC_PLUGINS enablement in dummy-tools/gcc `d428e54774` bpf: Add selftests to cover packet access corner cases `0ec0eda3f3` misc: fastrpc: fix improper packet size calculation `261d45a4c2` irqchip: nvic: Fix offset for Interrupt Priority Offsets `cd946f0ebe` irqchip/irq-gic-v3-its.c: Force synchronisation when issuing INVALL `e1c6611f82` irqchip/armada-370-xp: Fix support for Multi-MSI interrupts `8f3ed9deaa` irqchip/armada-370-xp: Fix return value of armada_370_xp_msi_alloc() `d530e9943d` irqchip/aspeed-scu: Replace update_bits with write_bits. `014c2fa5dc` csky: fix typo of fpu config macro `ee86d0bad8` iio: accel: kxcjk-1013: Fix possible memory leak in probe and remove `c10c53419d` iio: ad7768-1: Call iio_trigger_notify_done() on error `0f86c9e818` iio: adc: axp20x_adc: fix charging current reporting on AXP22x `af7fbb8c0b` iio: adc: stm32: fix a current leak by resetting pcsel before disabling vdda `fff92f3712` iio: at91-sama5d2: Fix incorrect sign extension `a2545b147d` iio: dln2: Check return value of devm_iio_trigger_register() `69ae78c1ab` iio: dln2-adc: Fix lockdep complaint `416383999c` iio: itg3200: Call iio_trigger_notify_done() on error `bc4d8367ed` iio: kxsd9: Don't return error code in trigger handler `28ea539a31` iio: ltr501: Don't return error code in trigger handler `db12d95085` iio: mma8452: Fix trigger reference couting `4e78529110` iio: stk3310: Don't return error code in interrupt handler `5c4a0f307f` iio: trigger: stm32-timer: fix MODULE_ALIAS `5de9c5b130` iio: trigger: Fix reference counting `cbc04c0c9a` iio: gyro: adxrs290: fix data signedness `fee8be5bde` xhci: avoid race between disable slot command and host runtime suspend `1b43c9b65f` usb: core: config: using bit mask instead of individual bits `74b6a6a239` xhci: Remove CONFIG_USB_DEFAULT_PERSIST to prevent xHCI from runtime suspending `ef284f086d` usb: core: config: fix validation of wMaxPacketValue entries `e4de8ca013` USB: gadget: zero allocate endpoint 0 buffers `7193ad3e50` USB: gadget: detect too-big endpoint 0 requests `63fc70bffa` selftests/fib_tests: Rework fib_rp_filter_test() `126d1897cb` net/qla3xxx: fix an error code in ql_adapter_up() `5e663bcd9a` net, neigh: clear whole pneigh_entry at alloc time `ae67383208` net: fec: only clear interrupt of handling queue in fec_enet_rx_queue() `83b16b9c44` net: altera: set a couple error code in probe() `385ffd31eb` net: cdc_ncm: Allow for dwNtbOutMaxSize to be unset or zero `47322fddb4` tools build: Remove needless libpython-version feature check that breaks test-all fast path `42bea3a1b7` dt-bindings: net: Reintroduce PHY no lane swap binding `3f57215f74` Documentation/locking/locktypes: Update migrate_disable() bits. `77d255d28b` perf tools: Fix SMT detection fast read path `391ca20ea1` Revert "PCI: aardvark: Fix support for PCI_ROM_ADDRESS1 on emulated bridge" `e5b7fb2198` i40e: Fix NULL pointer dereference in i40e_dbg_dump_desc `347cc9b4d9` mtd: rawnand: fsmc: Fix timing computation `0b2e1fccdf` mtd: rawnand: fsmc: Take instruction delay into account `57f290572f` i40e: Fix pre-set max number of queues for VF `eb87117c27` i40e: Fix failed opcode appearing if handling messages from VF `82ed3829c9` clk: imx: use module_platform_driver `4d12546cf9` RDMA/hns: Do not destroy QP resources in the hw resetting phase `33f320c35d` RDMA/hns: Do not halt commands during reset until later `4458938b29` ASoC: codecs: wcd934x: return correct value from mixer put `1089dac26c` ASoC: codecs: wcd934x: handle channel mappping list correctly `83dae68fc0` ASoC: codecs: wsa881x: fix return values from kcontrol put `62e4dc5e13` ASoC: qdsp6: q6routing: Fix return value from msm_routing_put_audio_mixer `2f4764fe36` ASoC: rt5682: Fix crash due to out of scope stack vars `bdd8129c66` PM: runtime: Fix pm_runtime_active() kerneldoc comment `661c4412c5` qede: validate non LSO skb length `c4d2d7c935` scsi: scsi_debug: Fix buffer size of REPORT ZONES command `1e434d2687` scsi: pm80xx: Do not call scsi_remove_host() in pm8001_alloc() `5dfe611474` block: fix ioprio_get(IOPRIO_WHO_PGRP) vs setuid(2) `5f1f94c26b` tracefs: Set all files to the same group ownership as the mount option `2ba0738f71` net: mvpp2: fix XDP rx queues registering `47ffefd88a` aio: fix use-after-free due to missing POLLFREE handling `e4d19740bc` aio: keep poll requests on waitqueue until completed `fc2f636ffc` signalfd: use wake_up_pollfree() `9f3acee7ea` binder: use wake_up_pollfree() `8e04c8397b` wait: add wake_up_pollfree() `2f8eb4c4c8` libata: add horkage for ASMedia 1092 `f76580d82c` can: m_can: Disable and ignore ELO interrupt `703dde1120` can: pch_can: pch_can_rx_normal: fix use after free `2737d0bc21` drm/syncobj: Deal with signalled fences in drm_syncobj_find_fence. `17edb38e76` clk: qcom: regmap-mux: fix parent clock lookup `172a982244` mmc: renesas_sdhi: initialize variable properly when tuning `33204825cc` tracefs: Have new files inherit the ownership of their parent `c520943a00` nfsd: Fix nsfd startup race (again) `eeb0711801` nfsd: fix use-after-free due to delegation race `8b4264c27b` md: fix update super 1.0 on rdev size change `caf9b352dc` btrfs: replace the BUG_ON in btrfs_del_root_ref with proper error handling `41b3cc57d6` btrfs: clear extent buffer uptodate when we fail to write it `75490bcbd0` scsi: qla2xxx: Format log strings only if needed `07977a3f3d` ALSA: pcm: oss: Handle missing errors in snd_pcm_oss_change_params() `ad45babf78` ALSA: pcm: oss: Limit the period size to 16MB `02b2b691b7` ALSA: pcm: oss: Fix negative period/buffer sizes `6760e6ddeb` ALSA: hda/realtek: Fix quirk for TongFang PHxTxX1 `7fe903d354` ALSA: hda/realtek - Add headset Mic support for Lenovo ALC897 platform `3063ee5164` ALSA: ctl: Fix copy of updated id with element read/write `c581090228` mm: bdi: initialize bdi_min_ratio when bdi is unregistered `06368922f3` KVM: x86: Wait for IPIs to be delivered when handling Hyper-V TLB flush hypercall `2a51edaf5c` net/sched: fq_pie: prevent dismantle issue `4b7e90672a` devlink: fix netns refcount leak in devlink_nl_cmd_reload() `9d683d14f6` IB/hfi1: Correct guard on eager buffer deallocation `2e2edebb5d` iavf: Fix reporting when setting descriptor count `aada0b3f33` iavf: restore MSI state on reset `32a329b731` netfilter: conntrack: annotate data-races around ct->timeout `5e39de85b7` udp: using datalen to cap max gso segments `666521b385` seg6: fix the iif in the IPv6 socket control block `484069b5de` nfp: Fix memory leak in nfp_cpp_area_cache_add() `b1830ede16` bonding: make tx_rebalance_counter an atomic `a59df4ea71` ice: ignore dropped packets during init `349e83c0cf` bpf: Fix the off-by-two error in range markings `f26951db84` bpf, x86: Fix "no previous prototype" warning `74685aaece` vrf: don't run conntrack on vrf with !dflt qdisc `d5cf399a6d` selftests: netfilter: add a vrf+conntrack testcase `83ea620a1b` nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done `f3d9114ac9` drm/amdkfd: fix boot failure when iommu is disabled in Picasso. `7508a9aa65` drm/amdgpu: init iommu after amdkfd device init `ac9db04ee3` drm/amdgpu: move iommu_resume before ip init/resume `fe9dca7dda` drm/amdgpu: add amdgpu_amdkfd_resume_iommu `5d191b0976` drm/amdkfd: separate kfd_iommu_resume from kfd_resume `46dcf66d6e` drm/amd/amdkfd: adjust dummy functions' placement `dded8d76a7` x86/sme: Explicitly map new EFI memmap table as encrypted `923f4dc5df` can: sja1000: fix use after free in ems_pcmcia_add_card() `819251da71` can: kvaser_pciefd: kvaser_pciefd_rx_error_frame(): increase correct stats->{rx,tx}_errors counter `854a2bede1` can: kvaser_usb: get CAN clock frequency from device `2c08271f4e` IB/hfi1: Fix leak of rcvhdrtail_dummy_kvaddr `d87c10607b` IB/hfi1: Fix early init panic `d60dd3685d` IB/hfi1: Insure use of smp_processor_id() is preempt disabled `05eb0e4a12` nft_set_pipapo: Fix bucket load in AVX2 lookup routine for six 8-bit groups `89f3edc98f` HID: check for valid USB device for many HID drivers `889c39113f` HID: wacom: fix problems when device is not a valid USB device `6272b17001` HID: bigbenff: prevent null pointer dereference `d877651afd` HID: add USB_HID dependancy on some USB HID drivers `a7e9c5ddf5` HID: add USB_HID dependancy to hid-chicony `28989ed4d7` HID: add USB_HID dependancy to hid-prodikeys `6114432960` HID: add hid_is_usb() function to make it simpler for USB detection `2298d5edd8` HID: google: add eel USB id `12362cd3a4` HID: quirks: Add quirk for the Microsoft Surface 3 type-cover `cc97d73215` gcc-plugins: fix gcc 11 indigestion with plugins... `1eee36a552` gcc-plugins: simplify GCC plugin-dev capability test `518c3f98e5` usb: gadget: uvc: fix multiple opens `e2aed161fc` ANDROID: GKI: fix up abi breakage in fib_rules.h `1b71a028a2` Merge 5.10.84 into android12-5.10-lts `a0582e24d3` Linux 5.10.84 `e6edaf2677` ipmi: msghandler: Make symbol 'remove_work_wq' static `a8d18fb4d1` net/tls: Fix authentication failure in CCM mode `dbe73dace9` parisc: Mark cr16 CPU clocksource unstable on all SMP machines `01300d2150` iwlwifi: mvm: retry init flow if failed `a5d0a72b80` serial: 8250: Fix RTS modem control while in rs485 mode `f9802d7049` serial: 8250_pci: rewrite pericom_do_set_divisor() `50b06889c8` serial: 8250_pci: Fix ACCES entries in pci_serial_quirks array `e1722acf4f` serial: core: fix transmit-buffer reset and memleak `bda142bbeb` serial: tegra: Change lower tolerance baud rate limit for tegra20 and tegra30 `901f7e0aa4` serial: pl011: Add ACPI SBSA UART match id `946ded2287` tty: serial: msm_serial: Deactivate RX DMA for polling support `67d08450a0` x86/64/mm: Map all kernel memory into trampoline_pgd `b3a519b5a5` x86/tsc: Disable clocksource watchdog for TSC on qualified platorms `1ed4a8fd36` x86/tsc: Add a timer to make sure TSC_adjust is always checked `a92f044a9f` usb: typec: tcpm: Wait in SNK_DEBOUNCED until disconnect `6d8c191bf4` USB: NO_LPM quirk Lenovo Powered USB-C Travel Hub `90c915051c` xhci: Fix commad ring abort, write all 64 bits to CRCR register. `1235485c63` vgacon: Propagate console boot parameters before calling `vc_resize' `92b9113c6d` parisc: Fix "make install" on newer debian releases `c27a548d3f` parisc: Fix KBUILD_IMAGE for self-extracting kernel `92f309c838` x86/entry: Add a fence for kernel entry SWAPGS in paranoid_entry() `4bbbc9c4f3` x86/pv: Switch SWAPGS to ALTERNATIVE `4d42b7bcf0` sched/uclamp: Fix rq->uclamp_max not set on first enqueue `2015ffa3a4` x86/xen: Add xenpv_restore_regs_and_return_to_usermode() `8b9279cad2` x86/entry: Use the correct fence macro after swapgs in kernel CR3 `c8e3411918` x86/sev: Fix SEV-ES INS/OUTS instructions for word, dword, and qword `64ca109bf8` KVM: VMX: Set failure code in prepare_vmcs02() `60ce9a7540` KVM: x86/pmu: Fix reserved bits for AMD PerfEvtSeln register `cfebd5a277` atlantic: Remove warn trace message. `95f6fae9a0` atlantic: Fix statistics logic for production hardware `695d9c6bc6` Remove Half duplex mode speed capabilities. `0c67e7b98f` atlantic: Add missing DIDs and fix 115c. `ca350298bc` atlantic: Fix to display FW bundle version instead of FW mac version. `93a4f3f4fd` atlatnic: enable Nbase-t speeds with base-t `44812111a3` atlantic: Increase delay for fw transactions `13f290d5aa` drm/msm: Do hw_init() before capturing GPU state `d646856a60` drm/msm/a6xx: Allocate enough space for GMU registers `a792b3d564` net/smc: Keep smc_close_final rc during active close `e226180acc` net/rds: correct socket tunable error in rds_tcp_tune() `77731fede2` net/smc: fix wrong list_del in smc_lgr_cleanup_early `9a40a1e0eb` ipv4: convert fib_num_tclassid_users to atomic_t `fa973bf5fd` net: annotate data-races on txq->xmit_lock_owner `e26dab79e1` dpaa2-eth: destroy workqueue at the end of remove function `dde240695d` net: marvell: mvpp2: Fix the computation of shared CPUs `3260b8d120` net: usb: lan78xx: lan78xx_phy_init(): use PHY_POLL instead of "0" if no IRQ is available `acef1c2b15` ALSA: intel-dsp-config: add quirk for CML devices based on ES8336 codec `60f0b9c42c` rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer() `35b40f724c` rxrpc: Fix rxrpc_peer leak in rxrpc_look_up_bundle() `4afb32090a` ASoC: tegra: Fix kcontrol put callback in AHUB `fe4eb5297a` ASoC: tegra: Fix kcontrol put callback in DSPK `256aa15aac` ASoC: tegra: Fix kcontrol put callback in DMIC `1cf1f9a1f3` ASoC: tegra: Fix kcontrol put callback in I2S `0ee53a1d88` ASoC: tegra: Fix kcontrol put callback in ADMAIF `e6fb4c3fd3` ASoC: tegra: Fix wrong value type in DSPK `0265ef0dff` ASoC: tegra: Fix wrong value type in DMIC `e66e75fb22` ASoC: tegra: Fix wrong value type in I2S `6b54c0d845` ASoC: tegra: Fix wrong value type in ADMAIF `932b338f4e` mt76: mt7915: fix NULL pointer dereference in mt7915_get_phy_mode `a0335cda6d` selftests: net: Correct case name `f1d43efa59` net/mlx4_en: Fix an use-after-free bug in mlx4_en_try_alloc_resources() `59d2dc7710` arm64: ftrace: add missing BTIs `ef55f0f8af` siphash: use _unaligned version by default `fd52e1f8c0` net: mpls: Fix notifications when deleting a device `15fa12c119` net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic_83xx_add_rings() `c6f340a331` tcp: fix page frag corruption on page fault `aa6c393a3c` natsemi: xtensa: fix section mismatch warnings `289ee320b5` i2c: cbus-gpio: set atomic transfer callback `58d5c53f25` i2c: stm32f7: stop dma transfer in case of NACK `c221244917` i2c: stm32f7: recover the bus on access timeout `8de6ea757c` i2c: stm32f7: flush TX FIFO upon transfer errors `1c75779dd9` wireguard: ratelimiter: use kvcalloc() instead of kvzalloc() `cb2d7c1992` wireguard: receive: drop handshakes if queue lock is contended `8a29a50dbd` wireguard: receive: use ring buffer for incoming handshakes `e3be118327` wireguard: device: reset peer src endpoint when netns exits `f7b6672fab` wireguard: selftests: rename DEBUG_PI_LIST to DEBUG_PLIST `0584bf51c3` wireguard: selftests: actually test for routing loops `3d1dc3c677` wireguard: allowedips: add missing __rcu annotation to satisfy sparse `4caf965f6c` wireguard: selftests: increase default dmesg log size `3d73021f8d` tracing/histograms: String compares should not care about signed values `d4af6d9749` KVM: X86: Use vcpu->arch.walk_mmu for kvm_mmu_invlpg() `c71b5f37b5` KVM: arm64: Avoid setting the upper 32 bits of TCR_EL2 and CPTR_EL2 to 1 `5f33887a36` KVM: x86: Use a stable condition around all VT-d PI paths `7722e88505` KVM: nVMX: Flush current VPID (L1 vs. L2) for KVM_REQ_TLB_FLUSH_GUEST `6a44f200f1` KVM: Disallow user memslot with size that exceeds "unsigned long" `775191dd4c` drm/amd/display: Allow DSC on supported MST branch devices `209d35ee34` ipv6: fix memory leak in fib6_rule_suppress `16c242b091` sata_fsl: fix warning in remove_proc_entry when rmmod sata_fsl `4a46b2f5dc` sata_fsl: fix UAF in sata_fsl_port_stop when rmmod sata_fsl `4baba6ba56` fget: check that the fd still exists after getting a ref to it `80bfed369b` s390/pci: move pseudo-MMIO to prevent MIO overlap `92283c2728` cpufreq: Fix get_cpu_device() failure in add_cpu_dev_symlink() `f717f29e84` ipmi: Move remove_work to dedicated workqueue `de4f5eb02c` rt2x00: do not mark device gone on EPROTO errors during start `c200721f8e` kprobes: Limit max data_size of the kretprobe instances `2a74c13dfe` vrf: Reset IPCB/IP6CB when processing outbound pkts in vrf dev xmit `136cabf157` ACPI: Add stubs for wakeup handler functions `cc443ac5bb` net/smc: Avoid warning of possible recursive locking `ff061b5bda` perf report: Fix memory leaks around perf_tip() `a4c17ebdd6` perf hist: Fix memory leak of a perf_hpp_fmt `d9b72274f3` perf inject: Fix ARM SPE handling `2c15d2a6ba` net: ethernet: dec: tulip: de4x5: fix possible array overflows in type3_infoblock() `f059fa40f0` net: tulip: de4x5: fix the problem that the array 'lp->phy[8]' may be out of bound `4d5968ea06` ipv6: check return value of ipv6_skip_exthdr `22519eff7d` ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port() `9a32d3c08d` ata: ahci: Add Green Sardine vendor ID as board_ahci_mobile `c746945fb6` drm/amd/amdgpu: fix potential memleak `74aafe99ef` drm/amd/amdkfd: Fix kernel panic when reset failed and been triggered again `f0c9f49b0c` scsi: iscsi: Unblock session then wake up error handler `bc8c423a28` thermal: core: Reset previous low and high trip during thermal zone init `8e4d2ac434` btrfs: check-integrity: fix a warning on write caching disabled disk `0395722905` s390/setup: avoid using memblock_enforce_memory_limit `fd1e70ef65` platform/x86: thinkpad_acpi: Fix WWAN device disabled issue after S3 deep `226b21ad01` platform/x86: thinkpad_acpi: Add support for dual fan control `3fc88660ed` net: return correct error code `2c514d2500` atlantic: Fix OOB read and write in hw_atl_utils_fw_rpc_wait `ff6eeb6278` net/smc: Transfer remaining wait queue entries during fallback `e1a165599a` mac80211: do not access the IV when it was stripped `c386d7aa59` drm/sun4i: fix unmet dependency on RESET_CONTROLLER for PHY_SUN6I_MIPI_DPHY `57e36973fa` powerpc/pseries/ddw: Revert "Extend upper limit for huge DMA window for persistent memory" `7b2b7e03e8` gfs2: Fix length of holes reported at end-of-file `664cceab6f` gfs2: release iopen glock early in evict `bcce010f92` ovl: fix deadlock in splice write `dca4f9a581` ovl: simplify file splice `7774dd934a` can: j1939: j1939_tp_cmd_recv(): check the dst address of TP.CM_BAM `60ae63ef19` NFSv42: Fix pagecache invalidation after COPY/CLONE `6e6898e23c` ANDROID: GKI: update abi_gki_aarch64.xml due to bpf changes in 5.10.83 `cd1062d64e` Revert "net: ipv6: add fib6_nh_release_dsts stub" `0bf59ac0b2` Revert "net: nexthop: release IPv6 per-cpu dsts when replacing a nexthop group" `65836a68d9` Revert "mmc: sdhci: Fix ADMA for PAGE_SIZE >= 64KiB" `249dae115a` Merge 5.10.83 into android-5.10 `bc8ae0e2af` Merge branch 'android12-5.10' into `android12-5.10-lts` `a324ad7945` Linux 5.10.83 `45b42cd053` drm/amdgpu/gfx9: switch to golden tsc registers for renoir+ `98b02755d5` net: stmmac: platform: fix build warning when with !CONFIG_PM_SLEEP `a15261d2a1` shm: extend forced shm destroy to support objects from several IPC nses `aa20e966d8` s390/mm: validate VMA in PGSTE manipulation functions `a94e4a7b77` tty: hvc: replace BUG_ON() with negative return value `1c5f722a8f` xen/netfront: don't trust the backend response data blindly `334b0f2787` xen/netfront: disentangle tx_skb_freelist `e17ee047ee` xen/netfront: don't read data from request on the ring page `f5e4937098` xen/netfront: read response from backend only once `1ffb20f052` xen/blkfront: don't trust the backend response data blindly `8e147855fc` xen/blkfront: don't take local copy of a request from the ring page `273f04d5d1` xen/blkfront: read response from backend only once `b98284aa3f` xen: sync include/xen/interface/io/ring.h with Xen's newest version `406f2d5fe3` tracing: Check pid filtering when creating events `4fd0ad08ee` vhost/vsock: fix incorrect used length reported to the guest `fbc0514e1a` iommu/amd: Clarify AMD IOMMUv2 initialization messages `5655b8bccb` smb3: do not error on fsync when readonly `c380062d08` ceph: properly handle statfs on multifs setups `22423c966e` f2fs: set SBI_NEED_FSCK flag when inconsistent node block found `e6ee7abd6b` sched/scs: Reset task stack state in bringup_cpu() `71e38a0c7c` tcp: correctly handle increased zerocopy args struct size `72f2117e45` net: mscc: ocelot: correctly report the timestamping RX filters in ethtool `73115a2b38` net: mscc: ocelot: don't downgrade timestamping RX filters in SIOCSHWTSTAMP `62343dadbb` net: hns3: fix VF RSS failed problem after PF enable multi-TCs `215167df45` net/smc: Don't call clcsock shutdown twice when smc shutdown `6e800ee432` net: vlan: fix underflow for the real_dev refcnt `ae2659d2c6` net/sched: sch_ets: don't peek at classes beyond 'nbands' `e3509feb46` tls: fix replacing proto_ops `22156242b1` tls: splice_read: fix record type check `3b6c71c097` MIPS: use 3-level pgtable for 64KB page size on MIPS_VA_BITS_48 `a6a5d853f1` MIPS: loongson64: fix FTLB configuration `5e823dbee2` igb: fix netpoll exit with traffic `f2a58ff3e3` nvmet: use IOCB_NOWAIT only if the filesystem supports it `12ceb52f2c` net/smc: Fix loop in smc_listen `c94cbd262b` net/smc: Fix NULL pointer dereferencing in smc_vlan_by_tcpsk() `3d4937c6a3` net: phylink: Force retrigger in case of latched link-fail indicator `50162ff3c8` net: phylink: Force link down and retrigger resolve on interface change `95ba8f0d57` lan743x: fix deadlock in lan743x_phy_link_status_change() `c5e4316d9c` tcp_cubic: fix spurious Hystart ACK train detections for not-cwnd-limited flows `3187623096` drm/amd/display: Set plane update flags for all planes in reset `f634c755a0` PM: hibernate: use correct mode for swsusp_close() `440bd9faad` net/ncsi : Add payload to be 32-bit aligned to fix dropped packets `ac88cb3c44` nvmet-tcp: fix incomplete data digest send `8889ff80fd` net: marvell: mvpp2: increase MTU limit when XDP enabled `90d0736876` mlxsw: spectrum: Protect driver from buggy firmware `33d89128a9` mlxsw: Verify the accessed index doesn't exceed the array length `29e1b57347` net/smc: Ensure the active closing peer first closes clcsock `77d9c2efa8` erofs: fix deadlock when shrink erofs slab `9f540c7ffb` scsi: scsi_debug: Zero clear zones at reset write pointer `725ba12895` scsi: core: sysfs: Fix setting device state to SDEV_RUNNING `e65a8707b4` ice: avoid bpf_prog refcount underflow `1eb5395add` ice: fix vsi->txq_map sizing `26ed13d064` net: nexthop: release IPv6 per-cpu dsts when replacing a nexthop group `3c40584595` net: ipv6: add fib6_nh_release_dsts stub `dc2f7e9d8d` net: stmmac: retain PTP clock time during SIOCSHWTSTAMP ioctls `79068e6b1c` net: stmmac: fix system hang caused by eee_ctrl_timer during suspend/resume `cc301ad312` nfp: checking parameter process for rx-usecs/tx-usecs is invalid `9b44cb67d3` ipv6: fix typos in __ip6_finish_output() `6d9e8dabd4` firmware: smccc: Fix check for ARCH_SOC_ID not implemented `bbd1683e79` mptcp: fix delack timer `061542815a` ALSA: intel-dsp-config: add quirk for JSL devices based on ES8336 codec `f5af2def7e` iavf: Prevent changing static ITR values if adaptive moderation is on `5dca8eff46` net: marvell: prestera: fix double free issue on err path `b33c5c8281` drm/vc4: fix error code in vc4_create_object() `2bf9c5a503` scsi: mpt3sas: Fix kernel panic during drive powercycle test `29ecb4c0f0` drm/nouveau/acr: fix a couple NULL vs IS_ERR() checks `0effb7f51b` ARM: socfpga: Fix crash with CONFIG_FORTIRY_SOURCE `86c5adc780` NFSv42: Don't fail clone() unless the OP_CLONE operation failed `c9ba7864d3` firmware: arm_scmi: pm: Propagate return value to caller `8730a679c3` net: ieee802154: handle iftypes as u32 `2925aadd1f` ASoC: codecs: wcd934x: return error code correctly from hw_params `3a25def06d` ASoC: topology: Add missing rwsem around snd_ctl_remove() calls `4a4f900e04` ASoC: qdsp6: q6asm: fix q6asm_dai_prepare error handling `9196a68581` ASoC: qdsp6: q6routing: Conditionally reset FrontEnd Mixer `2be17eca48` ARM: dts: bcm2711: Fix PCIe interrupts `9db1d4a3c2` ARM: dts: BCM5301X: Add interrupt properties to GPIO node `b2cd6fdcbe` ARM: dts: BCM5301X: Fix I2C controller interrupt `b7ef25e8c2` netfilter: flowtable: fix IPv6 tunnel addr match `d689176e0e` netfilter: ipvs: Fix reuse connection if RS weight is 0 `994065f6ef` netfilter: ctnetlink: do not erase error code with EINVAL `a3d829e5f3` netfilter: ctnetlink: fix filtering with CTA_TUPLE_REPLY `a8a917058f` proc/vmcore: fix clearing user buffer by properly using clear_user() `1f520a0d78` PCI: aardvark: Fix link training `aec0751f61` PCI: aardvark: Simplify initialization of rootcap on virtual bridge `df57480988` PCI: aardvark: Implement re-issuing config requests on CRS response `e7f2e2c758` PCI: aardvark: Update comment about disabling link training `2b7bc1c4b2` PCI: aardvark: Deduplicate code in advk_pcie_rd_conf() `dfe906da9a` powerpc/32: Fix hardlockup on vmap stack overflow `bf00edd9e6` mdio: aspeed: Fix "Link is Down" issue `14c3ce30dd` mmc: sdhci: Fix ADMA for PAGE_SIZE >= 64KiB `63195705b3` mmc: sdhci-esdhc-imx: disable CMDQ support `092a58f0d9` tracing: Fix pid filtering when triggers are attached `68fa6bf7f1` tracing/uprobe: Fix uprobe_perf_open probes iteration `b777c866aa` KVM: PPC: Book3S HV: Prevent POWER7/8 TLB flush flushing SLB `bfed9c2f2f` xen: detect uninitialized xenbus in xenbus_init `e1d492c275` xen: don't continue xenstore initialization in case of errors `8f4d0719f3` fuse: release pipe buf after last use `8d0163cec7` staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect() `0bfed81b2c` staging: greybus: Add missing rwsem around snd_ctl_remove() calls `146283f16b` staging/fbtft: Fix backlight `8fc5e3c7ca` HID: wacom: Use "Confidence" flag to prevent reporting invalid contacts `6ca32e2e77` Revert "parisc: Fix backtrace to always include init funtion names" `3a4aeb37a7` media: cec: copy sequence field for the reply `3798218a1a` ALSA: hda/realtek: Fix LED on HP ProBook 435 G7 `60274e248e` ALSA: hda/realtek: Add quirk for ASRock NUC Box 1100 `172167bc8d` ALSA: ctxfi: Fix out-of-range access `4402cf0402` binder: fix test regression due to sender_euid change `aea184ae64` usb: hub: Fix locking issues with address0_mutex `5bf3a0c778` usb: hub: Fix usb enumeration issue due to address0 race `00f1038c72` usb: typec: fusb302: Fix masking of comparator and bc_lvl interrupts `56fbab4937` usb: chipidea: ci_hdrc_imx: fix potential error pointer dereference in probe `b70ff391de` net: nexthop: fix null pointer dereference when IPv6 is not enabled `0755f3f322` usb: dwc3: gadget: Fix null pointer exception `140e2df472` usb: dwc3: gadget: Check for L1/L2/U3 for Start Transfer `3abf746e80` usb: dwc3: gadget: Ignore NoStream after End Transfer `2b7ab82f51` usb: dwc2: hcd_queue: Fix use of floating point literal `4b18ccad96` usb: dwc2: gadget: Fix ISOC flow for elapsed frames `16f1cac8f7` USB: serial: option: add Fibocom FM101-GL variants `ff72128636` USB: serial: option: add Telit LE910S1 0x9200 composition `854c14b2a1` ACPI: Get acpi_device's parent from the parent field `33fe044f6a` bpf: Fix toctou on read-only map's constant scalar tracking `8d21bcc704` Merge 5.10.82 into android12-5.10-lts `d5259a9ba6` Linux 5.10.82 `d35250ec5a` Revert "perf: Rework perf_event_exit_event()" `6718f79c40` ALSA: hda: hdac_stream: fix potential locking issue in snd_hdac_stream_assign() `f751fb54f2` ALSA: hda: hdac_ext_stream: fix potential locking issues `b3ef5051a7` x86/Kconfig: Fix an unused variable error in dell-smm-hwmon `2ec78af152` btrfs: update device path inode time instead of bd_inode `9febc9d8d2` fs: export an inode_update_time helper `cade5d7a28` ice: Delete always true check of PF pointer `fe65cecd27` usb: max-3421: Use driver data instead of maintaining a list of bound devices `6186c7b9bd` ASoC: DAPM: Cover regression by kctl change notification fix `b17dd53cac` selinux: fix NULL-pointer dereference when hashtab allocation fails `1ae0d59c4f` RDMA/netlink: Add __maybe_unused to static inline in C file `40bc831ab5` hugetlbfs: flush TLBs correctly after huge_pmd_unshare `86ab0f8ff0` scsi: ufs: core: Fix task management completion timeout race `ddd4e46cff` scsi: ufs: core: Fix task management completion `04c586a601` drm/amdgpu: fix set scaling mode Full/Full aspect/Center not works on vga and dvi connectors `47901b77bf` drm/i915/dp: Ensure sink rate values are always valid `82de15ca6b` drm/nouveau: clean up all clients on device removal `c81c90fbf5` drm/nouveau: use drm_dev_unplug() during device removal `9221aff33e` drm/nouveau: Add a dedicated mutex for the clients list `65517975cb` drm/udl: fix control-message timeout `3d68d6ee83` drm/amd/display: Update swizzle mode enums `7b97b5776d` cfg80211: call cfg80211_stop_ap when switch from P2P_GO type `1ab297809d` parisc/sticon: fix reverse colors `6adbc07ebc` btrfs: fix memory ordering between normal and ordered work functions `6289b494b3` net: stmmac: socfpga: add runtime suspend/resume callback for stratix10 platform `5875f87e2f` udf: Fix crash after seekdir `6b43cf113a` KVM: nVMX: don't use vcpu->arch.efer when checking host state on nested state load `cc73242889` block: Check ADMIN before NICE for IOPRIO_CLASS_RT `63e2f34abc` s390/kexec: fix memory leak of ipl report buffer `b1cf0d2fc4` scsi: qla2xxx: Fix mailbox direction flags in qla2xxx_get_adapter_id() `08fd6df8ea` powerpc/8xx: Fix pinned TLBs with CONFIG_STRICT_KERNEL_RWX `9c177eee11` x86/hyperv: Fix NULL deref in set_hv_tscchange_cb() if Hyper-V setup fails `b2e2fb6407` mm: kmemleak: slob: respect SLAB_NOLEAKTRACE flag `99032adf7d` ipc: WARN if trying to remove ipc object which is absent `a7d9162586` tipc: check for null after calling kmemdup `f5995fcb75` hexagon: clean up timer-regs.h `0854c9ff21` hexagon: export raw I/O routines for modules `528971af64` tun: fix bonding active backup with arp monitoring `af1d3c437e` arm64: vdso32: suppress error message for 'make mrproper' `97653ba562` net: stmmac: dwmac-rk: Fix ethernet on rk3399 based devices `4cebe23c03` s390/kexec: fix return code handling `d4fb80ae98` perf/x86/intel/uncore: Fix IIO event constraints for Skylake Server `175135a5ea` perf/x86/intel/uncore: Fix filter_tid mask for CHA events on Skylake Server `84f64c7c52` pinctrl: qcom: sdm845: Enable dual edge errata `a8230fb74b` KVM: PPC: Book3S HV: Use GLOBAL_TOC for kvmppc_h_set_dabr/xdabr() `4e6cce20fb` e100: fix device suspend/resume `34e54703fb` NFC: add NCI_UNREG flag to eliminate the race `b2a60b4a01` net: nfc: nci: Change the NCI close sequence `73a0d12114` NFC: reorder the logic in nfc_{un,}register_device `cb14b196d9` NFC: reorganize the functions in nci_request `41dc8dcb49` i40e: Fix display error code in dmesg `028ea7b090` i40e: Fix creation of first queue by omitting it if is not power of two `69868d7a88` i40e: Fix warning message and call stack during rmmod i40e driver `20645482d1` i40e: Fix ping is lost after configuring ADq on VF `6d64743045` i40e: Fix changing previously set num_queue_pairs for PFs `f866513ead` i40e: Fix NULL ptr dereference on VSI filter sync `0719488565` i40e: Fix correct max_pkt_size on VF RX queue `8e6bae950d` net: virtio_net_hdr_to_skb: count transport header in UFO `1c4099dc0d` net: dpaa2-eth: fix use-after-free in dpaa2_eth_remove `381a30f7e3` net: sched: act_mirred: drop dst for the direction from egress to ingress `a792e0128d` scsi: core: sysfs: Fix hang when device state is set via sysfs `4b4302a02b` net/mlx5: E-Switch, return error if encap isn't supported `68748ea4d1` net/mlx5: E-Switch, Change mode lock from mutex to rw semaphore `6190e1a2d4` net/mlx5: Lag, update tracker when state change event received `471c492890` net/mlx5e: nullify cq->dbg pointer in mlx5_debug_cq_remove() `d1f8f1e04a` platform/x86: hp_accel: Fix an error handling path in 'lis3lv02d_probe()' `da16f907cb` mips: lantiq: add support for clk_get_parent() `17dfbe1b2f` mips: bcm63xx: add support for clk_get_parent() `34284b3a2f` MIPS: generic/yamon-dt: fix uninitialized variable error `a61f90b216` iavf: Fix for setting queues to 0 `a8a1e601c2` iavf: Fix for the false positive ASQ/ARQ errors while issuing VF reset `77f5ae5441` iavf: validate pointers `ddcc185baa` iavf: prevent accidental free of filter structure `a420b26128` iavf: Fix failure to exit out from last all-multicast mode `78638b4713` iavf: free q_vectors before queues in iavf_disable_vf `84a13bfe27` iavf: check for null in iavf_fix_features `1555d83ddb` iavf: Fix return of set the new channel count `09decd0a10` net/smc: Make sure the link_id is unique `437e21e2c9` sock: fix /proc/net/sockstat underflow in sk_clone_lock() `4da14ddad1` net: reduce indentation level in sk_clone_lock() `9c3c2ef6ca` tipc: only accept encrypted MSG_CRYPTO msgs `3d59416647` bnxt_en: reject indirect blk offload when hw-tc-offload is off `4fc060abaa` net: bnx2x: fix variable dereferenced before check `3ae75cc38a` net: ipa: disable HOLB drop when updating timer `3984876f91` tracing: Add length protection to histogram string copies `900ea2f628` tcp: Fix uninitialized access in skb frags array for Rx 0cp. `d1a6150ca6` net-zerocopy: Refactor skb frag fast-forward op. `5f7aadf03f` net-zerocopy: Copy straggler unaligned data for TCP Rx. zerocopy. `8da80ec6d4` drm/nouveau: hdmigv100.c: fix corrupted HDMI Vendor InfoFrame `aa31e3fda6` perf tests: Remove bash construct from record+zstd_comp_decomp.sh `2ada5c0877` perf bench futex: Fix memory leak of perf_cpu_map__new() `11589d3144` perf bpf: Avoid memory leak from perf_env__insert_btf() `5b2f2cbbc9` tracing/histogram: Do not copy the fixed-size char array field over the field size `1d61255327` blkcg: Remove extra blkcg_bio_issue_init `dadcc935f4` perf/x86/vlbr: Add c->flags to vlbr event constraints `68fcb52b61` sched/core: Mitigate race cpus_share_cache()/update_top_cache_domain() `91191d47af` mips: BCM63XX: ensure that CPU_SUPPORTS_32BIT_KERNEL is set `fbe27d0e1d` clk: qcom: gcc-msm8996: Drop (again) gcc_aggre1_pnoc_ahb_clk `9b3d3b72be` clk/ast2600: Fix soc revision for AHB `03bc8ea0ae` clk: ingenic: Fix bugs with divided dividers `7a5439474e` f2fs: fix incorrect return value in f2fs_sanity_check_ckpt() `0a17fff6f0` f2fs: compress: disallow disabling compress on non-empty compressed file `4ce685cc9a` sh: define __BIG_ENDIAN for math-emu `73383f670d` sh: math-emu: drop unused functions `f44defd569` sh: fix kconfig unmet dependency warning for FRAME_POINTER `3d7c5d08a4` f2fs: fix to use WHINT_MODE `e8bd5e3305` f2fs: fix up f2fs_lookup tracepoints `5d5bf899e5` maple: fix wrong return value of maple_bus_init(). `8748f08a2f` sh: check return code of request_irq `29b742690a` powerpc/8xx: Fix Oops with STRICT_KERNEL_RWX without DEBUG_RODATA_TEST `bc4bc07fb4` powerpc/dcr: Use cmplwi instead of 3-argument cmpli `1ac6cd87d8` ALSA: gus: fix null pointer dereference on pointer block `850416bead` ARM: dts: qcom: fix memory and mdio nodes naming for RB3011 `8c4d9764e7` powerpc/5200: dts: fix memory node unit name `833ad27927` iio: imu: st_lsm6dsx: Avoid potential array overflow in st_lsm6dsx_set_odr() `e0fef1c8cd` scsi: target: Fix alua_tg_pt_gps_count tracking `8176441373` scsi: target: Fix ordered tag handling `8440377e1a` scsi: scsi_debug: Fix out-of-bound read in resp_report_tgtpgs() `3e20cb0726` scsi: scsi_debug: Fix out-of-bound read in resp_readcap16() `9635581aa9` MIPS: sni: Fix the build `77e9fed330` tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc `da82a207c4` ALSA: ISA: not for M68K `c788ac4750` ARM: dts: ls1021a-tsn: use generic "jedec,spi-nor" compatible for flash `cbba09f869` ARM: dts: ls1021a: move thermal-zones node out of soc/ `2474eb7fc3` usb: host: ohci-tmio: check return value after calling platform_get_resource() `02d9ebe0cc` ARM: dts: omap: fix gpmc,mux-add-data type `c6c9bbe7fa` firmware_loader: fix pre-allocated buf built-in firmware use `02a22911ed` ALSA: intel-dsp-config: add quirk for APL/GLK/TGL devices based on ES8336 codec `055eced3ed` scsi: advansys: Fix kernel pointer leak `97f3cbb57b` ASoC: nau8824: Add DMI quirk mechanism for active-high jack-detect `ae2207a078` clk: imx: imx6ul: Move csi_sel mux to correct base register `0c6daf4799` ASoC: SOF: Intel: hda-dai: fix potential locking issue `19d193c576` arm64: dts: freescale: fix arm,sp805 compatible string `36446a094a` arm64: dts: qcom: ipq6018: Fix qcom,controlled-remotely property `e52fecdd0c` arm64: dts: qcom: msm8998: Fix CPU/L2 idle state latency and residency `568d94c5c9` ARM: BCM53016: Specify switch ports for Meraki MR32 `3a53d9ad9b` staging: rtl8723bs: remove possible deadlock when disconnect (v2) `3544c33879` ARM: dts: ux500: Skomer regulator fixes `eff8b76284` usb: typec: tipd: Remove WARN_ON in tps6598x_block_read `679eee466d` usb: musb: tusb6010: check return value after calling platform_get_resource() `2492de6f5e` bus: ti-sysc: Use context lost quirk for otg `5eca1c8412` bus: ti-sysc: Add quirk handling for reinit on context lost `dcd6eefcee` RDMA/bnxt_re: Check if the vlan is valid before reporting `4e5bc9fb23` arm64: dts: hisilicon: fix arm,sp805 compatible string `109a63bb07` arm64: dts: rockchip: Disable CDN DP on Pinebook Pro `c097bd5a59` scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq() `db90c50783` ARM: dts: NSP: Fix mpcore, mmc node names `5010df76ab` staging: wfx: ensure IRQ is ready before enabling it `2651d06e46` arm64: dts: allwinner: a100: Fix thermal zone node name `fa98ac472e` arm64: dts: allwinner: h5: Fix GPU thermal zone node name `aed195558f` ARM: dts: sunxi: Fix OPPs node name `e2e1056312` arm64: zynqmp: Fix serial compatible string `48f154e8b9` arm64: zynqmp: Do not duplicate flash partition label property Some minor ABI signatures have changed due to internal structures changing. All of these have been pre-approved already: Leaf changes summary: 3 artifacts changed Changed leaf types summary: 3 leaf types changed Removed/Changed/Added functions summary: 0 Removed, 0 Changed, 0 Added function Removed/Changed/Added variables summary: 0 Removed, 0 Changed, 0 Added variable 'struct bpf_map at bpf.h:146:1' changed: type size hasn't changed there are data member changes: type 'typedef u64' of 'bpf_map::writecnt' changed: typedef name changed from u64 to atomic64_t at types.h:175:1 underlying type 'typedef __u64' at int-ll64.h:31:1 changed: entity changed from 'typedef __u64' to 'struct {s64 counter;}' at types.h:173:1 type size hasn't changed 4790 impacted interfaces 'struct bpf_offloaded_map at bpf.h:229:1' changed (indirectly): type size hasn't changed there are data member changes: type 'struct bpf_map' of 'bpf_offloaded_map::map' changed, as reported earlier 4790 impacted interfaces 'struct fib_rules_ops at fib_rules.h:60:1' changed: type size hasn't changed there are data member changes: type 'typedef bool (fib_rule, fib_lookup_arg)' of 'fib_rules_ops::suppress' changed: pointer type changed from: 'typedef bool (fib_rule, fib_lookup_arg)' to: 'typedef bool (fib_rule, int, fib_lookup_arg)*' 4790 impacted interfaces Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: Id7f25c9e0edb30698178b138cc1b15a82ca5ef48	2022-03-21 14:29:02 +01:00
Greg Kroah-Hartman	5287773dba	This is the 5.10.106 stable release -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmIx4yUACgkQONu9yGCS aT5q2A/+OlbFfkWLW5T0p54BIaXQGduXCtKyG81gZeJJPjQH0Meh6rtzea3n9/2/ ESgOBWmoGCX1I9dq8oWgE+krdg4Bu1pSsyWELlVBD5YeovsrdMJokfbZ5AW7wioO ca/sZpaysp0TiluGSwkU2eYLOeaUNvSUrLPoAK/BjZ4W/INXKQyY3gaG9SqhSEiY ag13I9BLvltepYWQbgq2MJzI5vKq3DHiQSC4/wDA1J02rfa8+C3pTSYZVKES6+6/ NVend811EpI/XQeQhsTP4wVtOYODJyVrXFIcV2n4MIsw80MhlomJjI/3BYiIYTf4 aYqwdGn0CZTQDCAC/HkNJbttcSw5wyJHGDG3e/QQArQ4L0Tu2ah9pXygIkMs9RXj ClUlR2sE0HQBtWrMxz9qT5Yo0F33ghU40VaDGUpX9QNs0Tat5hqGpj3KNVutxrk5 D5U5ueXA8DysmjWv8+oawUoRCuYa4NfPPHA9LExkn+oatu/GdCT6j3Ih5pxOOorw uWijcyvElOvSRvOzBbrLcHmbqV9WIM3cO2ob5I+HbV/agCoytnZS487KY4wp/ZRQ hd/gc03hIJiyJxIWAFosDAHJYsSnyVHTMDqDNF2EQ/Myto0Tf4idAjThCAl8pE1K WmcmqArZei0PfFfa68jOtd5CTE/dBQHwamSaQx0Rf9UkxN7sOko= =PEUE -----END PGP SIGNATURE----- Merge 5.10.106 into android12-5.10-lts Changes in 5.10.106 ARM: boot: dts: bcm2711: Fix HVS register range clk: qcom: gdsc: Add support to update GDSC transition delay HID: vivaldi: fix sysfs attributes leak arm64: dts: armada-3720-turris-mox: Add missing ethernet0 alias tipc: fix kernel panic when enabling bearer mISDN: Remove obsolete PIPELINE_DEBUG debugging information mISDN: Fix memory leak in dsp_pipeline_build() virtio-blk: Don't use MAX_DISCARD_SEGMENTS if max_discard_seg is zero isdn: hfcpci: check the return value of dma_set_mask() in setup_hw() net: qlogic: check the return value of dma_alloc_coherent() in qed_vf_hw_prepare() esp: Fix BEET mode inter address family tunneling on GSO qed: return status of qed_iov_get_link drm/sun4i: mixer: Fix P010 and P210 format numbers net: dsa: mt7530: fix incorrect test in mt753x_phylink_validate() ARM: dts: aspeed: Fix AST2600 quad spi group i40e: stop disabling VFs due to PF error responses ice: stop disabling VFs due to PF error responses ice: Align macro names to the specification ice: Remove unnecessary checker loop ice: Rename a couple of variables ice: Fix curr_link_speed advertised speed ethernet: Fix error handling in xemaclite_of_probe tipc: fix incorrect order of state message data sanity check net: ethernet: ti: cpts: Handle error for clk_enable net: ethernet: lpc_eth: Handle error for clk_enable ax25: Fix NULL pointer dereference in ax25_kill_by_device net/mlx5: Fix size field in bufferx_reg struct net/mlx5: Fix a race on command flush flow net/mlx5e: Lag, Only handle events from highest priority multipath entry NFC: port100: fix use-after-free in port100_send_complete selftests: pmtu.sh: Kill tcpdump processes launched by subshell. gpio: ts4900: Do not set DAT and OE together gianfar: ethtool: Fix refcount leak in gfar_get_ts_info net: phy: DP83822: clear MISR2 register to disable interrupts sctp: fix kernel-infoleak for SCTP sockets net: bcmgenet: Don't claim WOL when its not available selftests/bpf: Add test for bpf_timer overwriting crash spi: rockchip: Fix error in getting num-cs property spi: rockchip: terminate dma transmission when slave abort net-sysfs: add check for netdevice being present to speed_show hwmon: (pmbus) Clear pmbus fault/warning bits after read gpio: Return EPROBE_DEFER if gc->to_irq is NULL Revert "xen-netback: remove 'hotplug-status' once it has served its purpose" Revert "xen-netback: Check for hotplug-status existence before watching" ipv6: prevent a possible race condition with lifetimes tracing: Ensure trace buffer is at least 4096 bytes large selftest/vm: fix map_fixed_noreplace test failure selftests/memfd: clean up mapping in mfd_fail_write ARM: Spectre-BHB: provide empty stub for non-config fuse: fix pipe buffer lifetime for direct_io staging: rtl8723bs: Fix access-point mode deadlock staging: gdm724x: fix use after free in gdm_lte_rx() net: macb: Fix lost RX packet wakeup race in NAPI receive mmc: meson: Fix usage of meson_mmc_post_req() riscv: Fix auipc+jalr relocation range checks arm64: dts: marvell: armada-37xx: Remap IO space to bus address 0x0 virtio: unexport virtio_finalize_features virtio: acknowledge all features before access watch_queue, pipe: Free watchqueue state after clearing pipe ring watch_queue: Fix to release page in ->release() watch_queue: Fix to always request a pow-of-2 pipe ring size watch_queue: Fix the alloc bitmap size to reflect notes allocated watch_queue: Free the alloc bitmap when the watch_queue is torn down watch_queue: Fix lack of barrier/sync/lock between post and read watch_queue: Make comment about setting ->defunct more accurate x86/boot: Fix memremap of setup_indirect structures x86/boot: Add setup_indirect support in early_memremap_is_setup_data() x86/traps: Mark do_int3() NOKPROBE_SYMBOL ext4: add check to prevent attempting to resize an fs with sparse_super2 ARM: fix Thumb2 regression with Spectre BHB watch_queue: Fix filter limit check Linux 5.10.106 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: Ic7943bdf8c771bff4a95fcf0585ec9c24057cb5b	2022-03-18 15:02:31 +01:00
suresh kumar	d15c9f6e33	net-sysfs: add check for netdevice being present to speed_show [ Upstream commit 4224cfd7fb6523f7a9d1c8bb91bb5df1e38eb624 ] When bringing down the netdevice or system shutdown, a panic can be triggered while accessing the sysfs path because the device is already removed. [ 755.549084] mlx5_core 0000:12:00.1: Shutdown was called [ 756.404455] mlx5_core 0000:12:00.0: Shutdown was called ... [ 757.937260] BUG: unable to handle kernel NULL pointer dereference at (null) [ 758.031397] IP: [<ffffffff8ee11acb>] dma_pool_alloc+0x1ab/0x280 crash> bt ... PID: 12649 TASK: ffff8924108f2100 CPU: 1 COMMAND: "amsd" ... #9 [ffff89240e1a38b0] page_fault at ffffffff8f38c778 [exception RIP: dma_pool_alloc+0x1ab] RIP: ffffffff8ee11acb RSP: ffff89240e1a3968 RFLAGS: 00010046 RAX: 0000000000000246 RBX: ffff89243d874100 RCX: 0000000000001000 RDX: 0000000000000000 RSI: 0000000000000246 RDI: ffff89243d874090 RBP: ffff89240e1a39c0 R8: 000000000001f080 R9: ffff8905ffc03c00 R10: ffffffffc04680d4 R11: ffffffff8edde9fd R12: 00000000000080d0 R13: ffff89243d874090 R14: ffff89243d874080 R15: 0000000000000000 ORIG_RAX: ffffffffffffffff CS: 0010 SS: 0018 #10 [ffff89240e1a39c8] mlx5_alloc_cmd_msg at ffffffffc04680f3 [mlx5_core] #11 [ffff89240e1a3a18] cmd_exec at ffffffffc046ad62 [mlx5_core] #12 [ffff89240e1a3ab8] mlx5_cmd_exec at ffffffffc046b4fb [mlx5_core] #13 [ffff89240e1a3ae8] mlx5_core_access_reg at ffffffffc0475434 [mlx5_core] #14 [ffff89240e1a3b40] mlx5e_get_fec_caps at ffffffffc04a7348 [mlx5_core] #15 [ffff89240e1a3bb0] get_fec_supported_advertised at ffffffffc04992bf [mlx5_core] #16 [ffff89240e1a3c08] mlx5e_get_link_ksettings at ffffffffc049ab36 [mlx5_core] #17 [ffff89240e1a3ce8] __ethtool_get_link_ksettings at ffffffff8f25db46 #18 [ffff89240e1a3d48] speed_show at ffffffff8f277208 #19 [ffff89240e1a3dd8] dev_attr_show at ffffffff8f0b70e3 #20 [ffff89240e1a3df8] sysfs_kf_seq_show at ffffffff8eedbedf #21 [ffff89240e1a3e18] kernfs_seq_show at ffffffff8eeda596 #22 [ffff89240e1a3e28] seq_read at ffffffff8ee76d10 #23 [ffff89240e1a3e98] kernfs_fop_read at ffffffff8eedaef5 #24 [ffff89240e1a3ed8] vfs_read at ffffffff8ee4e3ff #25 [ffff89240e1a3f08] sys_read at ffffffff8ee4f27f #26 [ffff89240e1a3f50] system_call_fastpath at ffffffff8f395f92 crash> net_device.state ffff89443b0c0000 state = 0x5 (__LINK_STATE_START\| __LINK_STATE_NOCARRIER) To prevent this scenario, we also make sure that the netdevice is present. Signed-off-by: suresh kumar <suresh2514@gmail.com> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-03-16 14:16:00 +01:00
Greg Kroah-Hartman	0773736e48	This is the 5.10.104 stable release -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmInm+kACgkQONu9yGCS aT4/lw/6AoFz3oHbzlft4tCUn4UXQIut8gIiJfrXBnIqw6pa5YQPA1E7hgQBxTnG v9llnwDRFR7qouXq1qhoXU01vETiRqZ2ClkT/MnvLfRMQcHgtS9B61VgwnpNuNBg qStZORcqFi6rQHXySUgs2ObF6NZQ3BRyHY2LYqZPj0YkuHIdQo48WtQ9cy0XWZLV WT49LIVxkTZ6D0fs/k10qRv+M4lmeOzCqEZf4591F0sjoVuTFj3F1xMsSbu8W3xZ xXxE0hPbN0If3JFhnb3DqdQ20kRNSmrrV1CzYaN09jyP7KHpdIDVT8R1hSau3TFP 3zd2fBWmOP0FPzOVkNnqetMuKspKH8p3kKW2rkTyHYcGtUFzh54Hm0QRpA3CVB3L JZje9HCkxWiBSl1mwypmBGp88kWOe+n3NRUOhX3yqPoT3R2n45coBV+sfSOakkxv K8mUw1FFbJTPjgJtMCs57zzxybInnMrAF5/7XA2MgHCr3SVvYQA7+joSPn3CO+0K zKO4kTdEmD9jTT+3vMDL4Z3VSmOJMVcxCHBTUrac/OBIiBz+7y9WQSc7a6aRbfdu k3wy7HJ98pmjYB6g73MJcXOtTwXuoTqur4QWU5MCgTw6+qglgRQHr5ILSs35ZeAV LO1zvAsklOWFMc/3fD8heLmKGBZ0GHcn+0Y7ZqfFKLmqOTnx7tA= =W+lo -----END PGP SIGNATURE----- Merge 5.10.104 into android12-5.10-lts Changes in 5.10.104 mac80211_hwsim: report NOACK frames in tx_status mac80211_hwsim: initialize ieee80211_tx_info at hw_scan_work i2c: bcm2835: Avoid clock stretching timeouts ASoC: rt5668: do not block workqueue if card is unbound ASoC: rt5682: do not block workqueue if card is unbound regulator: core: fix false positive in regulator_late_cleanup() Input: clear BTN_RIGHT/MIDDLE on buttonpads KVM: arm64: vgic: Read HW interrupt pending state from the HW tipc: fix a bit overflow in tipc_crypto_key_rcv() cifs: fix double free race when mount fails in cifs_get_root() selftests/seccomp: Fix seccomp failure by adding missing headers dmaengine: shdma: Fix runtime PM imbalance on error i2c: cadence: allow COMPILE_TEST i2c: qup: allow COMPILE_TEST net: usb: cdc_mbim: avoid altsetting toggling for Telit FN990 usb: gadget: don't release an existing dev->buf usb: gadget: clear related members when goto fail exfat: reuse exfat_inode_info variable instead of calling EXFAT_I() exfat: fix i_blocks for files truncated over 4 GiB tracing: Add test for user space strings when filtering on string pointers serial: stm32: prevent TDR register overwrite when sending x_char ata: pata_hpt37x: fix PCI clock detection drm/amdgpu: check vm ready by amdgpu_vm->evicting flag tracing: Add ustring operation to filtering string pointers ALSA: intel_hdmi: Fix reference to PCM buffer address riscv/efi_stub: Fix get_boot_hartid_from_fdt() return value riscv: Fix config KASAN && SPARSEMEM && !SPARSE_VMEMMAP riscv: Fix config KASAN && DEBUG_VIRTUAL ASoC: ops: Shift tested values in snd_soc_put_volsw() by +min iommu/amd: Recover from event log overflow drm/i915: s/JSP2/ICP2/ PCH xen/netfront: destroy queues before real_num_tx_queues is zeroed thermal: core: Fix TZ_GET_TRIP NULL pointer dereference ntb: intel: fix port config status offset for SPR mm: Consider __GFP_NOWARN flag for oversized kvmalloc() calls xfrm: fix MTU regression netfilter: fix use-after-free in __nf_register_net_hook() bpf, sockmap: Do not ignore orig_len parameter xfrm: fix the if_id check in changelink xfrm: enforce validity of offload input flags e1000e: Correct NVM checksum verification flow net: fix up skbs delta_truesize in UDP GRO frag_list netfilter: nf_queue: don't assume sk is full socket netfilter: nf_queue: fix possible use-after-free netfilter: nf_queue: handle socket prefetch batman-adv: Request iflink once in batadv-on-batadv check batman-adv: Request iflink once in batadv_get_real_netdevice batman-adv: Don't expect inter-netns unique iflink indices net: ipv6: ensure we call ipv6_mc_down() at most once net: dcb: flush lingering app table entries for unregistered devices net/smc: fix connection leak net/smc: fix unexpected SMC_CLC_DECL_ERR_REGRMB error generated by client net/smc: fix unexpected SMC_CLC_DECL_ERR_REGRMB error cause by server rcu/nocb: Fix missed nocb_timer requeue ice: Fix race conditions between virtchnl handling and VF ndo ops ice: fix concurrent reset and removal of VFs sched/topology: Make sched_init_numa() use a set for the deduplicating sort sched/topology: Fix sched_domain_topology_level alloc in sched_init_numa() ia64: ensure proper NUMA distance and possible map initialization mac80211: fix forwarded mesh frames AC & queue selection net: stmmac: fix return value of __setup handler mac80211: treat some SAE auth steps as final iavf: Fix missing check for running netdev net: sxgbe: fix return value of __setup handler ibmvnic: register netdev after init of adapter net: arcnet: com20020: Fix null-ptr-deref in com20020pci_probe() ixgbe: xsk: change !netif_carrier_ok() handling in ixgbe_xmit_zc() efivars: Respect "block" flag in efivar_entry_set_safe() firmware: arm_scmi: Remove space in MODULE_ALIAS name ASoC: cs4265: Fix the duplicated control name can: gs_usb: change active_channels's type from atomic_t to u8 arm64: dts: rockchip: Switch RK3399-Gru DP to SPDIF output igc: igc_read_phy_reg_gpy: drop premature return ARM: Fix kgdb breakpoint for Thumb2 ARM: 9182/1: mmu: fix returns from early_param() and __setup() functions selftests: mlxsw: tc_police_scale: Make test more robust pinctrl: sunxi: Use unique lockdep classes for IRQs igc: igc_write_phy_reg_gpy: drop premature return ibmvnic: free reset-work-item when flushing memfd: fix F_SEAL_WRITE after shmem huge page allocated s390/extable: fix exception table sorting ARM: dts: switch timer config to common devkit8000 devicetree ARM: dts: Use 32KiHz oscillator on devkit8000 soc: fsl: guts: Revert commit `3c0d64e867` soc: fsl: guts: Add a missing memory allocation failure check soc: fsl: qe: Check of ioremap return value ARM: tegra: Move panels to AUX bus ibmvnic: complete init_done on transport events net: chelsio: cxgb3: check the return value of pci_find_capability() iavf: Refactor iavf state machine tracking nl80211: Handle nla_memdup failures in handle_nan_filter drm/amdgpu: fix suspend/resume hang regression net: dcb: disable softirqs in dcbnl_flush_dev() Input: elan_i2c - move regulator_[en\|dis]able() out of elan_[en\|dis]able_power() Input: elan_i2c - fix regulator enable count imbalance after suspend/resume Input: samsung-keypad - properly state IOMEM dependency HID: add mapping for KEY_DICTATE HID: add mapping for KEY_ALL_APPLICATIONS tracing/histogram: Fix sorting on old "cpu" value tracing: Fix return value of __setup handlers btrfs: fix lost prealloc extents beyond eof after full fsync btrfs: qgroup: fix deadlock between rescan worker and remove qgroup btrfs: add missing run of delayed items after unlink during log replay Revert "xfrm: xfrm_state_mtu should return at least 1280 for ipv6" hamradio: fix macro redefine warning Linux 5.10.104 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I24dabeba483a0b0123a4e8c10d1a568b11dfb9c8	2022-03-12 13:57:09 +01:00
lena wang	4e178ed14b	net: fix up skbs delta_truesize in UDP GRO frag_list commit 224102de2ff105a2c05695e66a08f4b5b6b2d19c upstream. The truesize for a UDP GRO packet is added by main skb and skbs in main skb's frag_list: skb_gro_receive_list p->truesize += skb->truesize; The commit 53475c5dd856 ("net: fix use-after-free when UDP GRO with shared fraglist") introduced a truesize increase for frag_list skbs. When uncloning skb, it will call pskb_expand_head and trusesize for frag_list skbs may increase. This can occur when allocators uses __netdev_alloc_skb and not jump into __alloc_skb. This flow does not use ksize(len) to calculate truesize while pskb_expand_head uses. skb_segment_list err = skb_unclone(nskb, GFP_ATOMIC); pskb_expand_head if (!skb->sk \|\| skb->destructor == sock_edemux) skb->truesize += size - osize; If we uses increased truesize adding as delta_truesize, it will be larger than before and even larger than previous total truesize value if skbs in frag_list are abundant. The main skb truesize will become smaller and even a minus value or a huge value for an unsigned int parameter. Then the following memory check will drop this abnormal skb. To avoid this error we should use the original truesize to segment the main skb. Fixes: 53475c5dd856 ("net: fix use-after-free when UDP GRO with shared fraglist") Signed-off-by: lena wang <lena.wang@mediatek.com> Acked-by: Paolo Abeni <pabeni@redhat.com> Reviewed-by: Eric Dumazet <edumazet@google.com> Link: https://lore.kernel.org/r/1646133431-8948-1-git-send-email-lena.wang@mediatek.com Signed-off-by: Jakub Kicinski <kuba@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-03-08 19:09:32 +01:00
Eric Dumazet	24efaae03b	bpf, sockmap: Do not ignore orig_len parameter commit 60ce37b03917e593d8e5d8bcc7ec820773daf81d upstream. Currently, sk_psock_verdict_recv() returns skb->len This is problematic because tcp_read_sock() might have passed orig_len < skb->len, due to the presence of TCP urgent data. This causes an infinite loop from tcp_read_sock() Followup patch will make tcp_read_sock() more robust vs bad actors. Fixes: `ef5659280e` ("bpf, sockmap: Allow skipping sk_skb parser program") Reported-by: syzbot <syzkaller@googlegroups.com> Signed-off-by: Eric Dumazet <edumazet@google.com> Acked-by: John Fastabend <john.fastabend@gmail.com> Acked-by: Jakub Sitnicki <jakub@cloudflare.com> Tested-by: Jakub Sitnicki <jakub@cloudflare.com> Acked-by: Daniel Borkmann <daniel@iogearbox.net> Link: https://lore.kernel.org/r/20220302161723.3910001-1-eric.dumazet@gmail.com Signed-off-by: Jakub Kicinski <kuba@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-03-08 19:09:32 +01:00
Greg Kroah-Hartman	d172937367	This is the 5.10.103 stable release -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmIfSjYACgkQONu9yGCS aT5uuQ/9GcUx5ur2RT/8hqUmkDZU3PV2KvPbLY9BYfn5i/An/WS7KNlcXMatEd7n E8G+Sh3hLlb8h+3B9EGYvumssERJSxAaecxhha6NU8dSsUdpKzLvjwfy/5L+giJP rR6q4yhQaWqt0k7lSdohosIbTuDrr78Q9ifGPRpa2SIDEUDO4R+O/l9XqsCXXDMA qa5MIC3vZwU6jbwcfkS1cc/kdB5aLT1DRCXW7Ca7YYMFTba3eV8FWr5pC82cjgsS uIZ34yhMLQm70IDNqZRsMtj7JvpwHGAWsOTDd4HoI+4MdyyrgadSPDRRPzcytStZ TEllgey/6U+i6Et1wPIpTb/FOOQ3S7uvVBeSdPnDpuv7/BOD75fFg7lOoE9OGcLo 14bmQGUc0FqOUxmtqYu/LmTOc4o/l0S1DCMhn4JquGjqCQa8R7aWVzYjHlG9wF6v ZI04pB+5hec8vElICFUAdaJe6cR5ttkFq4UEkmkXLeSs1RKtAlE5VZkEU9dTykNn IY9KYbXNwe492xVCaIZUO2pHpu07tuJ2YLqZypktQt7ndPIjRTeHt3QnFQIVMcug MyAtDtZaqHQ459xF9caMHnThxsei7t6YWoPGK8/04ngpZS61ORuNIxigKmK/B62H hmoJolC007zXYeisDgSkhFk4TaDbVpxne9cruVd50mLOZlvDUZY= =8KvB -----END PGP SIGNATURE----- Merge 5.10.103 into android12-5.10-lts Changes in 5.10.103 cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug btrfs: tree-checker: check item_size for inode_item btrfs: tree-checker: check item_size for dev_item clk: jz4725b: fix mmc0 clock gating vhost/vsock: don't check owner in vhost_vsock_stop() while releasing parisc/unaligned: Fix fldd and fstd unaligned handlers on 32-bit kernel parisc/unaligned: Fix ldw() and stw() unalignment handlers KVM: x86/mmu: make apf token non-zero to fix bug drm/amdgpu: disable MMHUB PG for Picasso drm/i915: Correctly populate use_sagv_wm for all pipes sr9700: sanity check for packet length USB: zaurus: support another broken Zaurus CDC-NCM: avoid overflow in sanity checking netfilter: nf_tables_offload: incorrect flow offload action array size x86/fpu: Correct pkru/xstate inconsistency tee: export teedev_open() and teedev_close_context() optee: use driver internal tee_context for some rpc ping: remove pr_err from ping_lookup perf data: Fix double free in perf_session__delete() bnx2x: fix driver load from initrd bnxt_en: Fix active FEC reporting to ethtool hwmon: Handle failure to register sensor with thermal zone correctly bpf: Do not try bpf_msg_push_data with len 0 selftests: bpf: Check bpf_msg_push_data return value bpf: Add schedule points in batch ops io_uring: add a schedule point in io_add_buffers() net: __pskb_pull_tail() & pskb_carve_frag_list() drop_monitor friends tipc: Fix end of loop tests for list_for_each_entry() gso: do not skip outer ip header in case of ipip and net_failover openvswitch: Fix setting ipv6 fields causing hw csum failure drm/edid: Always set RGB444 net/mlx5e: Fix wrong return value on ioctl EEPROM query failure net/sched: act_ct: Fix flow table lookup after ct clear or switching zones net: ll_temac: check the return value of devm_kmalloc() net: Force inlining of checksum functions in net/checksum.h nfp: flower: Fix a potential leak in nfp_tunnel_add_shared_mac() netfilter: nf_tables: fix memory leak during stateful obj update net/smc: Use a mutex for locking "struct smc_pnettable" surface: surface3_power: Fix battery readings on batteries without a serial number udp_tunnel: Fix end of loop test in udp_tunnel_nic_unregister() net/mlx5: Fix possible deadlock on rule deletion net/mlx5: Fix wrong limitation of metadata match on ecpf net/mlx5e: kTLS, Use CHECKSUM_UNNECESSARY for device-offloaded packets spi: spi-zynq-qspi: Fix a NULL pointer dereference in zynq_qspi_exec_mem_op() regmap-irq: Update interrupt clear register for proper reset RDMA/rtrs-clt: Fix possible double free in error case RDMA/rtrs-clt: Kill wait_for_inflight_permits RDMA/rtrs-clt: Move free_permit from free_clt to rtrs_clt_close configfs: fix a race in configfs_{,un}register_subsystem() RDMA/ib_srp: Fix a deadlock tracing: Have traceon and traceoff trigger honor the instance iio: adc: men_z188_adc: Fix a resource leak in an error handling path iio: adc: ad7124: fix mask used for setting AIN_BUFP & AIN_BUFM bits iio: imu: st_lsm6dsx: wait for settling time in st_lsm6dsx_read_oneshot iio: Fix error handling for PM sc16is7xx: Fix for incorrect data being transmitted ata: pata_hpt37x: disable primary channel on HPT371 Revert "USB: serial: ch341: add new Product ID for CH341A" usb: gadget: rndis: add spinlock for rndis response list USB: gadget: validate endpoint index for xilinx udc tracefs: Set the group ownership in apply_options() not parse_options() USB: serial: option: add support for DW5829e USB: serial: option: add Telit LE910R1 compositions usb: dwc2: drd: fix soft connect when gadget is unconfigured usb: dwc3: pci: Fix Bay Trail phy GPIO mappings usb: dwc3: gadget: Let the interrupt handler disable bottom halves. xhci: re-initialize the HC during resume if HCE was set xhci: Prevent futile URB re-submissions due to incorrect return value. driver core: Free DMA range map when device is released RDMA/cma: Do not change route.addr.src_addr outside state checks thermal: int340x: fix memory leak in int3400_notify() riscv: fix oops caused by irqsoff latency tracer tty: n_gsm: fix encoding of control signal octet bit DV tty: n_gsm: fix proper link termination after failed open tty: n_gsm: fix NULL pointer access due to DLCI release tty: n_gsm: fix wrong tty control line for flow control tty: n_gsm: fix deadlock in gsmtty_open() gpio: tegra186: Fix chip_data type confusion memblock: use kfree() to release kmalloced memblock regions Linux 5.10.103 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I6b1b827ba2740b36680033a44f04d62b4e5565ab	2022-03-02 15:41:32 +01:00
Eric Dumazet	c5722243d0	net: __pskb_pull_tail() & pskb_carve_frag_list() drop_monitor friends commit ef527f968ae05c6717c39f49c8709a7e2c19183a upstream. Whenever one of these functions pull all data from an skb in a frag_list, use consume_skb() instead of kfree_skb() to avoid polluting drop monitoring. Fixes: `6fa01ccd88` ("skbuff: Add pskb_extract() helper function") Signed-off-by: Eric Dumazet <edumazet@google.com> Link: https://lore.kernel.org/r/20220220154052.1308469-1-eric.dumazet@gmail.com Signed-off-by: Jakub Kicinski <kuba@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-03-02 11:42:49 +01:00
Felix Maurer	d0caa7218d	bpf: Do not try bpf_msg_push_data with len 0 commit 4a11678f683814df82fca9018d964771e02d7e6d upstream. If bpf_msg_push_data() is called with len 0 (as it happens during selftests/bpf/test_sockmap), we do not need to do anything and can return early. Calling bpf_msg_push_data() with len 0 previously lead to a wrong ENOMEM error: we later called get_order(copy + len); if len was 0, copy + len was also often 0 and get_order() returned some undefined value (at the moment 52). alloc_pages() caught that and failed, but then bpf_msg_push_data() returned ENOMEM. This was wrong because we are most probably not out of memory and actually do not need any additional memory. Fixes: `6fff607e2f` ("bpf: sk_msg program helper bpf_msg_push_data") Signed-off-by: Felix Maurer <fmaurer@redhat.com> Signed-off-by: Daniel Borkmann <daniel@iogearbox.net> Acked-by: Yonghong Song <yhs@fb.com> Acked-by: John Fastabend <john.fastabend@gmail.com> Link: https://lore.kernel.org/bpf/df69012695c7094ccb1943ca02b4920db3537466.1644421921.git.fmaurer@redhat.com Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-03-02 11:42:48 +01:00
Greg Kroah-Hartman	79553fad5c	This is the 5.10.102 stable release -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmIWE/gACgkQONu9yGCS aT74Cw//awQY9EgXHMRNNU5+qun0ESkj918YvfAIKGDRutaOXK00YUdkqjuxEP6V gOso0rbXe1LiravgrbPSaYbgSvhGVPOPXHLhb7QQkiodxMZ0oaEEzST2VzM4a19k xfhne2BeqCCl4oUUA84NZPcCpohaLhRjZesMWR23zWNbVMEIt7uV8eeqRcC0S4YA r7cA4PURBMUiTlWWssBwlrEVy5JZrlcTYCvljxcpd8ws1Xs0KnmxX4gIDpQzNoFj Dfwg3lSFcl+ar/Xrg14qL3q3iO8zpaJ2msguZ4vq+OLiYWoTfoFcBF625eQJn6/B eWrzpNUqzFv5Eu31vMnv4Wm/iN8/1Yd+lacSqKwxejdmZzwX79VRqv9kD2naT/eP C/tkI1b93Ig7+teIjm+aqMAFDoAeR75oVK0KwKEkDIT19mbX1CSex9VnJtaSHZTM ON7N8NBUyIPLmhc3jencrsFNIY11W7xUedcN/+JmrZoi4Xy4Yr0mh3H4fZVs/vAH I6uYZgylTZiX0esCqJeiHrasETL0IStDw57+wbrjLlBrATgkMbhZQ+VTBxio/mxV yok4TiIB+EHaNMOgIAuT6uaZrXwDwHekR1EX1s4p2cPTz1kstp1ZIC2Gdv910xKB gprzPa/ocwqk71QODgwhogwntR/a4edbbYvCVHKLXQH9Pd81jkM= =TZTu -----END PGP SIGNATURE----- Merge 5.10.102 into android12-5.10-lts Changes in 5.10.102 drm/nouveau/pmu/gm200-: use alternate falcon reset sequence mm: memcg: synchronize objcg lists with a dedicated spinlock rcu: Do not report strict GPs for outgoing CPUs fget: clarify and improve __fget_files() implementation fs/proc: task_mmu.c: don't read mapcount for migration entry can: isotp: prevent race between isotp_bind() and isotp_setsockopt() can: isotp: add SF_BROADCAST support for functional addressing scsi: lpfc: Fix mailbox command failure during driver initialization HID:Add support for UGTABLET WP5540 Revert "svm: Add warning message for AVIC IPI invalid target" serial: parisc: GSC: fix build when IOSAPIC is not set parisc: Drop __init from map_pages declaration parisc: Fix data TLB miss in sba_unmap_sg parisc: Fix sglist access in ccio-dma.c mmc: block: fix read single on recovery logic mm: don't try to NUMA-migrate COW pages that have other uses PCI: hv: Fix NUMA node assignment when kernel boots with custom NUMA topology parisc: Add ioread64_lo_hi() and iowrite64_lo_hi() btrfs: send: in case of IO error log it platform/x86: touchscreen_dmi: Add info for the RWC NANOTE P8 AY07J 2-in-1 platform/x86: ISST: Fix possible circular locking dependency detected selftests: rtc: Increase test timeout so that all tests run kselftest: signal all child processes net: ieee802154: at86rf230: Stop leaking skb's selftests/zram: Skip max_comp_streams interface on newer kernel selftests/zram01.sh: Fix compression ratio calculation selftests/zram: Adapt the situation that /dev/zram0 is being used selftests: openat2: Print also errno in failure messages selftests: openat2: Add missing dependency in Makefile selftests: openat2: Skip testcases that fail with EOPNOTSUPP selftests: skip mincore.check_file_mmap when fs lacks needed support ax25: improve the incomplete fix to avoid UAF and NPD bugs vfs: make freeze_super abort when sync_filesystem returns error quota: make dquot_quota_sync return errors from ->sync_fs scsi: pm8001: Fix use-after-free for aborted TMF sas_task scsi: pm8001: Fix use-after-free for aborted SSP/STP sas_task nvme: fix a possible use-after-free in controller reset during load nvme-tcp: fix possible use-after-free in transport error_recovery work nvme-rdma: fix possible use-after-free in transport error_recovery work drm/amdgpu: fix logic inversion in check x86/Xen: streamline (and fix) PV CPU enumeration Revert "module, async: async_synchronize_full() on module init iff async is used" gcc-plugins/stackleak: Use noinstr in favor of notrace random: wake up /dev/random writers after zap kbuild: lto: merge module sections kbuild: lto: Merge module sections if and only if CONFIG_LTO_CLANG is enabled iwlwifi: fix use-after-free drm/radeon: Fix backlight control on iMac 12,1 drm/i915/opregion: check port number bounds for SWSCI display power state vsock: remove vsock from connected table when connect is interrupted by a signal drm/i915/gvt: Make DRM_I915_GVT depend on X86 iwlwifi: pcie: fix locking when "HW not ready" iwlwifi: pcie: gen2: fix locking when "HW not ready" selftests: netfilter: fix exit value for nft_concat_range netfilter: nft_synproxy: unregister hooks on init error path ipv6: per-netns exclusive flowlabel checks net: dsa: lan9303: fix reset on probe net: dsa: lantiq_gswip: fix use after free in gswip_remove() net: ieee802154: ca8210: Fix lifs/sifs periods ping: fix the dif and sdif check in ping_lookup bonding: force carrier update when releasing slave drop_monitor: fix data-race in dropmon_net_event / trace_napi_poll_hit net_sched: add __rcu annotation to netdev->qdisc bonding: fix data-races around agg_select_timer libsubcmd: Fix use-after-free for realloc(..., 0) dpaa2-eth: Initialize mutex used in one step timestamping path perf bpf: Defer freeing string after possible strlen() on it selftests/exec: Add non-regular to TEST_GEN_PROGS ALSA: hda/realtek: Add quirk for Legion Y9000X 2019 ALSA: hda/realtek: Fix deadlock by COEF mutex ALSA: hda: Fix regression on forced probe mask option ALSA: hda: Fix missing codec probe on Shenker Dock 15 ASoC: ops: Fix stereo change notifications in snd_soc_put_volsw() ASoC: ops: Fix stereo change notifications in snd_soc_put_volsw_range() powerpc/lib/sstep: fix 'ptesync' build error mtd: rawnand: gpmi: don't leak PM reference in error path KVM: SVM: Never reject emulation due to SMAP errata for !SEV guests ASoC: tas2770: Insert post reset delay block/wbt: fix negative inflight counter when remove scsi device NFS: LOOKUP_DIRECTORY is also ok with symlinks NFS: Do not report writeback errors in nfs_getattr() tty: n_tty: do not look ahead for EOL character past the end of the buffer mtd: rawnand: qcom: Fix clock sequencing in qcom_nandc_probe() mtd: rawnand: brcmnand: Fixed incorrect sub-page ECC status Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj KVM: x86/pmu: Refactoring find_arch_event() to pmc_perf_hw_id() KVM: x86/pmu: Don't truncate the PerfEvtSeln MSR when creating a perf event KVM: x86/pmu: Use AMD64_RAW_EVENT_MASK for PERF_TYPE_RAW NFS: Don't set NFS_INO_INVALID_XATTR if there is no xattr cache ARM: OMAP2+: hwmod: Add of_node_put() before break ARM: OMAP2+: adjust the location of put_device() call in omapdss_init_of phy: usb: Leave some clocks running during suspend irqchip/sifive-plic: Add missing thead,c900-plic match string netfilter: conntrack: don't refresh sctp entries in closed state arm64: dts: meson-gx: add ATF BL32 reserved-memory region arm64: dts: meson-g12: add ATF BL32 reserved-memory region arm64: dts: meson-g12: drop BL32 region from SEI510/SEI610 pidfd: fix test failure due to stack overflow on some arches selftests: fixup build warnings in pidfd / clone3 tests kconfig: let 'shell' return enough output for deep path names lib/iov_iter: initialize "flags" in new pipe_buffer ata: libata-core: Disable TRIM on M88V29 soc: aspeed: lpc-ctrl: Block error printing on probe defer cases xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create drm/rockchip: dw_hdmi: Do not leave clock enabled in error case tracing: Fix tp_printk option related with tp_printk_stop_on_boot net: usb: qmi_wwan: Add support for Dell DW5829e net: macb: Align the dma and coherent dma masks kconfig: fix failing to generate auto.conf scsi: lpfc: Fix pt2pt NVMe PRLI reject LOGO loop EDAC: Fix calculation of returned address and next offset in edac_align_ptr() net: sched: limit TC_ACT_REPEAT loops dmaengine: sh: rcar-dmac: Check for error num after setting mask dmaengine: stm32-dmamux: Fix PM disable depth imbalance in stm32_dmamux_probe dmaengine: sh: rcar-dmac: Check for error num after dma_set_max_seg_size i2c: qcom-cci: don't delete an unregistered adapter i2c: qcom-cci: don't put a device tree node before i2c_add_adapter() copy_process(): Move fd_install() out of sighand->siglock critical section i2c: brcmstb: fix support for DSL and CM variants lockdep: Correct lock_classes index mapping Linux 5.10.102 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: Ief12c0d77b23f9796b81a8fc3b79ac6589e81dc9	2022-02-23 12:56:37 +01:00
Eric Dumazet	d9bd9d4c60	net_sched: add __rcu annotation to netdev->qdisc commit 5891cd5ec46c2c2eb6427cb54d214b149635dd0e upstream. syzbot found a data-race [1] which lead me to add __rcu annotations to netdev->qdisc, and proper accessors to get LOCKDEP support. [1] BUG: KCSAN: data-race in dev_activate / qdisc_lookup_rcu write to 0xffff888168ad6410 of 8 bytes by task 13559 on cpu 1: attach_default_qdiscs net/sched/sch_generic.c:1167 [inline] dev_activate+0x2ed/0x8f0 net/sched/sch_generic.c:1221 __dev_open+0x2e9/0x3a0 net/core/dev.c:1416 __dev_change_flags+0x167/0x3f0 net/core/dev.c:8139 rtnl_configure_link+0xc2/0x150 net/core/rtnetlink.c:3150 __rtnl_newlink net/core/rtnetlink.c:3489 [inline] rtnl_newlink+0xf4d/0x13e0 net/core/rtnetlink.c:3529 rtnetlink_rcv_msg+0x745/0x7e0 net/core/rtnetlink.c:5594 netlink_rcv_skb+0x14e/0x250 net/netlink/af_netlink.c:2494 rtnetlink_rcv+0x18/0x20 net/core/rtnetlink.c:5612 netlink_unicast_kernel net/netlink/af_netlink.c:1317 [inline] netlink_unicast+0x602/0x6d0 net/netlink/af_netlink.c:1343 netlink_sendmsg+0x728/0x850 net/netlink/af_netlink.c:1919 sock_sendmsg_nosec net/socket.c:705 [inline] sock_sendmsg net/socket.c:725 [inline] ____sys_sendmsg+0x39a/0x510 net/socket.c:2413 ___sys_sendmsg net/socket.c:2467 [inline] __sys_sendmsg+0x195/0x230 net/socket.c:2496 __do_sys_sendmsg net/socket.c:2505 [inline] __se_sys_sendmsg net/socket.c:2503 [inline] __x64_sys_sendmsg+0x42/0x50 net/socket.c:2503 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x44/0xd0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae read to 0xffff888168ad6410 of 8 bytes by task 13560 on cpu 0: qdisc_lookup_rcu+0x30/0x2e0 net/sched/sch_api.c:323 __tcf_qdisc_find+0x74/0x3a0 net/sched/cls_api.c:1050 tc_del_tfilter+0x1c7/0x1350 net/sched/cls_api.c:2211 rtnetlink_rcv_msg+0x5ba/0x7e0 net/core/rtnetlink.c:5585 netlink_rcv_skb+0x14e/0x250 net/netlink/af_netlink.c:2494 rtnetlink_rcv+0x18/0x20 net/core/rtnetlink.c:5612 netlink_unicast_kernel net/netlink/af_netlink.c:1317 [inline] netlink_unicast+0x602/0x6d0 net/netlink/af_netlink.c:1343 netlink_sendmsg+0x728/0x850 net/netlink/af_netlink.c:1919 sock_sendmsg_nosec net/socket.c:705 [inline] sock_sendmsg net/socket.c:725 [inline] ____sys_sendmsg+0x39a/0x510 net/socket.c:2413 ___sys_sendmsg net/socket.c:2467 [inline] __sys_sendmsg+0x195/0x230 net/socket.c:2496 __do_sys_sendmsg net/socket.c:2505 [inline] __se_sys_sendmsg net/socket.c:2503 [inline] __x64_sys_sendmsg+0x42/0x50 net/socket.c:2503 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x44/0xd0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae value changed: 0xffffffff85dee080 -> 0xffff88815d96ec00 Reported by Kernel Concurrency Sanitizer on: CPU: 0 PID: 13560 Comm: syz-executor.2 Not tainted 5.17.0-rc3-syzkaller-00116-gf1baf68e1383-dirty #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Fixes: `470502de5b` ("net: sched: unlock rules update API") Signed-off-by: Eric Dumazet <edumazet@google.com> Cc: Vlad Buslov <vladbu@mellanox.com> Reported-by: syzbot <syzkaller@googlegroups.com> Cc: Jamal Hadi Salim <jhs@mojatatu.com> Cc: Cong Wang <xiyou.wangcong@gmail.com> Cc: Jiri Pirko <jiri@resnulli.us> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-02-23 12:01:02 +01:00
Eric Dumazet	877a05672f	drop_monitor: fix data-race in dropmon_net_event / trace_napi_poll_hit commit dcd54265c8bc14bd023815e36e2d5f9d66ee1fee upstream. trace_napi_poll_hit() is reading stat->dev while another thread can write on it from dropmon_net_event() Use READ_ONCE()/WRITE_ONCE() here, RCU rules are properly enforced already, we only have to take care of load/store tearing. BUG: KCSAN: data-race in dropmon_net_event / trace_napi_poll_hit write to 0xffff88816f3ab9c0 of 8 bytes by task 20260 on cpu 1: dropmon_net_event+0xb8/0x2b0 net/core/drop_monitor.c:1579 notifier_call_chain kernel/notifier.c:84 [inline] raw_notifier_call_chain+0x53/0xb0 kernel/notifier.c:392 call_netdevice_notifiers_info net/core/dev.c:1919 [inline] call_netdevice_notifiers_extack net/core/dev.c:1931 [inline] call_netdevice_notifiers net/core/dev.c:1945 [inline] unregister_netdevice_many+0x867/0xfb0 net/core/dev.c:10415 ip_tunnel_delete_nets+0x24a/0x280 net/ipv4/ip_tunnel.c:1123 vti_exit_batch_net+0x2a/0x30 net/ipv4/ip_vti.c:515 ops_exit_list net/core/net_namespace.c:173 [inline] cleanup_net+0x4dc/0x8d0 net/core/net_namespace.c:597 process_one_work+0x3f6/0x960 kernel/workqueue.c:2307 worker_thread+0x616/0xa70 kernel/workqueue.c:2454 kthread+0x1bf/0x1e0 kernel/kthread.c:377 ret_from_fork+0x1f/0x30 read to 0xffff88816f3ab9c0 of 8 bytes by interrupt on cpu 0: trace_napi_poll_hit+0x89/0x1c0 net/core/drop_monitor.c:292 trace_napi_poll include/trace/events/napi.h:14 [inline] __napi_poll+0x36b/0x3f0 net/core/dev.c:6366 napi_poll net/core/dev.c:6432 [inline] net_rx_action+0x29e/0x650 net/core/dev.c:6519 __do_softirq+0x158/0x2de kernel/softirq.c:558 do_softirq+0xb1/0xf0 kernel/softirq.c:459 __local_bh_enable_ip+0x68/0x70 kernel/softirq.c:383 __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:167 [inline] _raw_spin_unlock_bh+0x33/0x40 kernel/locking/spinlock.c:210 spin_unlock_bh include/linux/spinlock.h:394 [inline] ptr_ring_consume_bh include/linux/ptr_ring.h:367 [inline] wg_packet_decrypt_worker+0x73c/0x780 drivers/net/wireguard/receive.c:506 process_one_work+0x3f6/0x960 kernel/workqueue.c:2307 worker_thread+0x616/0xa70 kernel/workqueue.c:2454 kthread+0x1bf/0x1e0 kernel/kthread.c:377 ret_from_fork+0x1f/0x30 value changed: 0xffff88815883e000 -> 0x0000000000000000 Reported by Kernel Concurrency Sanitizer on: CPU: 0 PID: 26435 Comm: kworker/0:1 Not tainted 5.17.0-rc1-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: wg-crypt-wg2 wg_packet_decrypt_worker Fixes: `4ea7e38696` ("dropmon: add ability to detect when hardware dropsrxpackets") Signed-off-by: Eric Dumazet <edumazet@google.com> Cc: Neil Horman <nhorman@tuxdriver.com> Reported-by: syzbot <syzkaller@googlegroups.com> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-02-23 12:01:02 +01:00
Greg Kroah-Hartman	add227a8d8	Merge branch 'android12-5.10' into `android12-5.10-lts` Sync up with android12-5.10 for the following commits: `591f4296cc` UPSTREAM: f2fs: fix UAF in f2fs_available_free_memory `cd5f87fade` FROMGIT: regmap-irq: Update interrupt clear register for proper reset `5501913544` UPSTREAM: iommu: Fix potential use-after-free during probe `4c47eaa7c8` BACKPORT: sched/fair: Fix fault in reweight_entity `c3daae52af` UPSTREAM: rcu/exp: Mark current CPU as exp-QS in IPI loop second pass `cb7e10d31b` ANDROID: vendor_hooks: Add hooks for binder proc transaction `16d19b6561` UPSTREAM: usb: gadget: rndis: check size of RNDIS_MSG_SET command `c7732dbce5` UPSTREAM: USB: gadget: validate interface OS descriptor requests `6f915dd2af` ANDROID: incremental-fs: remove index and incomplete dir on umount `cbac4c1652` ANDROID: GKI: rockchip: Update symbol need by system heap `64fe36c410` UPSTREAM: kfence: fix memory leak when cat kfence objects `7a1e7dc41e` UPSTREAM: arm64: mte: DC {GVA,GZVA} shouldn't be used when DCZID_EL0.DZP == 1 `132cc28d20` UPSTREAM: dma-buf: system_heap: Use 'for_each_sgtable_sg' in pages free flow `01e13a46e4` BACKPORT: arm64: uaccess: avoid blocking within critical sections `e97e339a68` UPSTREAM: arm64: arm64_ftr_reg->name may not be a human-readable string `c6672561bc` UPSTREAM: net: add and use skb_unclone_keeptruesize() helper `a5c4e6ce74` UPSTREAM: mm/userfaultfd: selftests: fix memory corruption with thp enabled `a90890b4c7` UPSTREAM: KVM: arm64: Fix host stage-2 PGD refcount `f6f03a70c2` UPSTREAM: remoteproc: Fix the wrong default value of is_iomem `cf59c9b9b2` UPSTREAM: remoteproc: elf_loader: Fix loading segment when is_iomem true `35c4c40dbb` UPSTREAM: scsi: ufs: core: Unbreak the reset handler `81ec07b6b9` UPSTREAM: blkcg: fix memory leak in blk_iolatency_init `234844b9fe` UPSTREAM: arm64: dts: qcom: ipq8074: remove USB tx-fifo-resize property `afb9df4c90` UPSTREAM: usb: xhci-mtk: fix issue of out-of-bounds array access `900c38d4ed` UPSTREAM: mm/slub: fix endianness bug for alloc/free_traces attributes `e4f41530d4` UPSTREAM: Revert "usb: dwc3: dwc3-qcom: Enable tx-fifo-resize property by default" `e4757e9070` UPSTREAM: usb: dwc3: core: Revise GHWPARAMS9 offset `f8b20495b7` UPSTREAM: firmware: arm_scmi: Fix type error assignment in voltage protocol `d7ba0f636d` UPSTREAM: firmware: arm_scmi: Fix type error in sensor protocol `986262ed83` UPSTREAM: coresight: trbe: Fix incorrect access of the sink specific data `de27f42b19` UPSTREAM: device property: Add missed header in fwnode.h `5be4ad1d99` UPSTREAM: usb: typec: tcpci: don't handle vSafe0V event if it's not enabled `cac9433c3a` UPSTREAM: driver core: fw_devlink: Improve handling of cyclic dependencies `4137188c10` UPSTREAM: tracing/boot: Fix to loop on only subkeys `e44b1adb9e` BACKPORT: mm/memory_hotplug: fix potential permanent lru cache disable `1d3cff0b48` UPSTREAM: usb: gadget: f_serial: Ensure gserial disconnected during unbind `a8f9df1ffc` FROMGIT: scsi: ufs: Fix a deadlock in the error handler `fb0fa7dc29` UPSTREAM: scsi: ufs: Use DECLARE_COMPLETION_ONSTACK() where appropriate `18d48b7c6d` ANDROID: GKI: Enable CONFIG_SERIAL_8250_RUNTIME_UARTS=0 `8f280376b4` BACKPORT: f2fs: fix up f2fs_lookup tracepoints `233aba68e8` UPSTREAM: tipc: improve size validations for received domain records `944437cac9` ANDROID: gki_defconfig: Enable NET_ACT_BPF Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I02bf56df8b0fc823b4f445603ced4adf53021ef1	2022-02-22 16:44:17 +01:00
Eric Dumazet	c6672561bc	UPSTREAM: net: add and use skb_unclone_keeptruesize() helper While commit 097b9146c0e2 ("net: fix up truesize of cloned skb in skb_prepare_for_shift()") fixed immediate issues found when KFENCE was enabled/tested, there are still similar issues, when tcp_trim_head() hits KFENCE while the master skb is cloned. This happens under heavy networking TX workloads, when the TX completion might be delayed after incoming ACK. This patch fixes the WARNING in sk_stream_kill_queues when sk->sk_mem_queued/sk->sk_forward_alloc are not zero. Fixes: d3fb45f370d9 ("mm, kfence: insert KFENCE hooks for SLAB") Signed-off-by: Eric Dumazet <edumazet@google.com> Acked-by: Marco Elver <elver@google.com> Link: https://lore.kernel.org/r/20211102004555.1359210-1-eric.dumazet@gmail.com Signed-off-by: Jakub Kicinski <kuba@kernel.org> (cherry picked from commit c4777efa751d293e369aec464ce6875e957be255) Bug: 187129171 Signed-off-by: Connor O'Brien <connoro@google.com> Change-Id: I5e456705bd01396c05c79009aeba36e00829e037	2022-02-11 17:30:25 -08:00
Greg Kroah-Hartman	ca562bf79c	Merge branch 'android12-5.10' into `android12-5.10-lts` Sync up with android12-5.10 for the following commits: `2a2327c4e8` FROMLIST: power_supply: Use of-thermal cdev registration API `b90fe5ef8f` FROMLIST: power_supply: Register cooling device outside of probe `fc64efcd06` Revert "UPSTREAM: tracefs: Have tracefs directories not set OTH permission bits by default" `1eb3049da0` FROMGIT: usb: dwc3: gadget: Prevent core from processing stale TRBs `ee1e2de73c` UPSTREAM: cgroup-v1: Require capabilities to set release_agent `7e6f112beb` FROMGIT: f2fs: move f2fs to use reader-unfair rwsems `23686f5ee8` UPSTREAM: f2fs: do not bother checkpoint by f2fs_get_node_info `fa055ddfd5` BACKPORT: f2fs: avoid down_write on nat_tree_lock during checkpoint `c8701aa0a7` ANDROID: GKI: enable RCU_BOOST `c34fa06f4b` FROMLIST: rcu: Don't deboost before reporting expedited quiescent state `3a49d3b677` FROMGIT: usb: f_fs: Fix use-after-free for epfile `250abe08bb` UPSTREAM: usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear. `d449d91bc9` ANDROID: update new gki symbol `b2fcb7b63b` ANDROID: abi: qcom: Add dma_{alloc,free}_noncoherent `5d79e49205` UPSTREAM: binder: fix async_free_space accounting for empty parcels `6aa9e78d6e` FROMGIT: rcu: Allow expedited RCU grace periods on incoming CPUs `2f61ec09b0` ANDROID: abi_gki_aarch64_qcom: Add iommu_setup_dma_ops restricted vh `6a9ff8fa26` ANDROID: iommu: Add restricted vendor hook `2aba795b31` FROMLIST: arm64: cpufeature: List early Cortex-A510 parts as having broken dbm `2861bbc5b5` FROMLIST: arm64: Add Cortex-A510 CPU part definition `b0d13db791` FROMGIT: printk: ringbuffer: Improve prb_next_seq() performance `4b1862e4fc` ANDROID: incremental-fs: fix GPF in pending_reads_dispatch_ioctl `445019bbca` UPSTREAM: bpf: Fix integer overflow in argument calculation for bpf_map_area_alloc `032a676295` UPSTREAM: tee: handle lookup of shm with reference count 0 `d461f54be3` ANDROID: Incremental-fs: Doc: correct a sysfs path in incfs.rst `1bfc9c16ae` ANDROID: selftests: fix incfs_test `fd4c6594f5` ANDROID: incremental-fs: fix mount_fs issue `a512242e66` BACKPORT: arm64: errata: Add workaround for TSB flush failures `e48051244a` UPSTREAM: arm64: Add Neoverse-N2, Cortex-A710 CPU part definition `dd3256d439` UPSTREAM: coresight: trbe: Defer the probe on offline CPUs `71aebf8793` UPSTREAM: coresight: etm4x: Use Trace Filtering controls dynamically `2bb8b3c907` BACKPORT: coresight: etm4x: Save restore TRFCR_EL1 `79b64fa780` UPSTREAM: coresight: tmc-etr: Speed up for bounce buffer in flat mode `aee6af7046` UPSTREAM: coresight: tmc-etr: Add barrier after updating AUX ring buffer `a0009ade38` Revert half of "ANDROID: cpu/hotplug: create vendor hook for cpu_up/cpu_down" `a863cef344` Revert half of "ANDROID: arm64: add vendor hooks for bti and pauth fault" `9f58bcd614` Revert half of "ANDROID: vendor_hooks: Add param for android_vh_cpu_up/down" `4b3396046c` Revert "ANDROID: vendor_hooks: Add a hook for task tagging" `d8fe0b1fc2` Revert "ANDROID: GKI: net: add vendor hooks for 'struct nf_conn' lifecycle" `92ab2aeca5` Revert "ANDROID: GKI: net: add vendor hooks for 'struct sock' lifecycle" `b3e6d6eec6` Revert "ANDROID: vendor_hooks: add hook and OEM data for slab shrink" `e09000ee19` Revert half of "ANDROID: vendor_hooks: Add hooks for memory when debug" `3f305a9101` Revert half of "ANDROID: gic-v3: Add vendor hook to GIC v3" `3b4ca92614` Merge tag 'android12-5.10.81_r00' into android12-5.10 `bdc732d112` UPSTREAM: tracefs: Set all files to the same group ownership as the mount option `8455746a45` UPSTREAM: tracefs: Have new files inherit the ownership of their parent `9c63be2ada` UPSTREAM: tracefs: Have tracefs directories not set OTH permission bits by default `64095600fd` Revert "ANDROID: vendor_hooks: Add hooks to recognize special worker thread." `7887091009` Revert "ANDROID: sysrq: add vendor hook for sysrq crash information" `63e7148b27` Revert "ANDROID: user: Add vendor hook to user for GKI purpose" `18975040b9` Revert portions of "ANDROID: sched: Add vendor hooks for sched." `96c08d9210` Revert portions of "ANDROID: vendor_hooks: Add hooks for scheduler" `a32e89883a` UPSTREAM: vfs: fs_context: fix up param length parsing in legacy_parse_param New functions/variables are now being tracked as well, that came from the android12-5.10 branch: Leaf changes summary: 5 artifacts changed Changed leaf types summary: 0 leaf type changed Removed/Changed/Added functions summary: 0 Removed, 0 Changed, 4 Added functions Removed/Changed/Added variables summary: 0 Removed, 0 Changed, 1 Added variable 4 Added functions: [A] 'function int __traceiter_android_rvh_iommu_setup_dma_ops(void, device, u64, u64)' [A] 'function void* dma_alloc_noncoherent(device, size_t, dma_addr_t, dma_data_direction, gfp_t)' [A] 'function void dma_free_noncoherent(device, size_t, void, dma_addr_t, dma_data_direction)' [A] 'function void static_key_enable_cpuslocked(static_key*)' 1 Added variable: [A] 'tracepoint __tracepoint_android_rvh_iommu_setup_dma_ops' Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I7a5a82681cc94f6b3dcd17e159da8976be0bcb78	2022-02-09 18:16:30 +01:00
Greg Kroah-Hartman	26d02dc8ef	This is the 5.10.97 stable release -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmH+YZ4ACgkQONu9yGCS aT4t8xAAzaXnJk20mIrP2PNr0YHTg7w3PVamUHxJBUPH5tlB29eDUF7D4gAtXJML zqzoGfLsWddluh3B6oi26PUgI3EJ5EfnB2m5OltKaqXSHSXz2GEqIBK6lOpHm7ed R/ibKUpDw2I3gv+ZhJZJN15CK9xHAh94wwVkGe50JkvtxocC5/vNWycjPtZz8E98 vugX6LIrD/6d0w+Z+Y/LZp3nuXDZK8HDWx/kxdUeixgRjUmfrPjLLETHuDdiG2tC dy7Ku18I1ps/cEWx0hg8AAeXON8kvN+iBJoGr0Yf7uF8b3+jyKlEmrEUnFhgLoc0 cREaGMlkb3YW6wlCQGt8rRgth3duqGaa8gRM3TeIKQ+qNuDH3cuwu+VSjkMYdzNR 7X0zrPBeb0FmFLehos/kjxsu8yvFtelskNNKnMLvlncD9GSVXTkxlhiQ8iXT7RSp ODhEpqxeL3dSU8U1w/WK1JF4qK3c7a/jiH/kaxz54L20nwR34eHUfSS8W8Eie5UR VP8SWSDzMzsTWVdWk2tHOLFIbtej22vub4Pw+arBbhmQ1OyGYDGBJ5n/Q1TAolNU f3ksn07CnuDrrib4nNX2eJRye18sJ0dsfNVGLSp2zxkFDfQvYXZ4IHWMWa85Ste/ 9PtRrF/h3j9if0fx0ljvdTteri+50QyNg3XxI6ofSlSDV1jZ4ag= =otOb -----END PGP SIGNATURE----- Merge 5.10.97 into android12-5.10-lts Changes in 5.10.97 PCI: pciehp: Fix infinite loop in IRQ handler upon power fault net: ipa: fix atomic update in ipa_endpoint_replenish() net: ipa: use a bitmap for endpoint replenish_enabled net: ipa: prevent concurrent replenish Revert "drivers: bus: simple-pm-bus: Add support for probing simple bus only devices" KVM: x86: Forcibly leave nested virt when SMM state is toggled psi: Fix uaf issue when psi trigger is destroyed while being polled x86/mce: Add Xeon Sapphire Rapids to list of CPUs that support PPIN x86/cpu: Add Xeon Icelake-D to list of CPUs that support PPIN drm/vc4: hdmi: Make sure the device is powered with CEC cgroup-v1: Require capabilities to set release_agent net/mlx5e: Fix handling of wrong devices during bond netevent net/mlx5: Use del_timer_sync in fw reset flow of halting poll net/mlx5: E-Switch, Fix uninitialized variable modact ipheth: fix EOVERFLOW in ipheth_rcvbulk_callback net: amd-xgbe: ensure to reset the tx_timer_active flag net: amd-xgbe: Fix skb data length underflow fanotify: Fix stale file descriptor in copy_event_to_user() net: sched: fix use-after-free in tc_new_tfilter() rtnetlink: make sure to refresh master_dev/m_ops in __rtnl_newlink() cpuset: Fix the bug that subpart_cpus updated wrongly in update_cpumask() af_packet: fix data-race in packet_setsockopt / packet_setsockopt tcp: add missing tcp_skb_can_collapse() test in tcp_shift_skb_data() Linux 5.10.97 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I428a930b475ba1b15d4b1ad05dde7df36cec6405	2022-02-08 10:08:24 +01:00
Greg Kroah-Hartman	0b4470b56e	This is the 5.10.96 stable release -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmH5XyEACgkQONu9yGCS aT7z0xAAmnpQ4KYDjmIJW/QjwHMk26wAZGs+w5UbtaFokqqpMuloeNj1HJdpt9gq JG6A7Yz2tqXvd+4BzS+XKimqo8CXXbVx5zLhk5lkJE7NTAJN0hP4uvzuBjNFyE+V p35aCsBNnMJpjimp+B2c0WuUJX++/n0olBpVzAr1/kwwkz/KODyK8D++S8E+y3Fv gkDt3CYJ8E2XPCEQfPHd5blWav0cmyR/O3qViWPuakg1zQ2xxKVjuIAVBuwlBJfB zRnnsM9qy3b+h/x43aX++5vucZgDF4BZXJ63kIkkAfe2quqGC683NyjTjOfGLHSW bDaVO7IK69tDNznE3jjoLoQ66+soUgvAS5kVYL6sQ7DW8ObghYnD6xfw7J1npva3 //SZgkC8ifgucLn/ERK5R5mQNmiKYeoukUYSLLB0eG2aYvtQkaChL98t7O9Js1fH sZOf4a9SpAnyHQKv6PMV6rsIxE0rkuAqeBVuerOjknjFLbkdPDTijk5GeER3+C+j 0Ihud+n+HrTRrw7wZOOosPrMVoXNy2LPxphFpsrpFt5QFYu3q24QefwL/EWI1Y4W gC3VBqIQS/otZ2aCYlIiPZls38UoQxdWS2pgG5aUOKX7iHduzMkTOYZzq4aYOBws Oo+2rl7tzWirrYeIkSLvmwW3BsluQGOvul1IwGk9m1nZ1PDdUIw= =39jp -----END PGP SIGNATURE----- Merge 5.10.96 into android12-5.10-lts Changes in 5.10.96 Bluetooth: refactor malicious adv data check media: venus: core: Drop second v4l2 device unregister net: sfp: ignore disabled SFP node net: stmmac: skip only stmmac_ptp_register when resume from suspend s390/module: fix loading modules with a lot of relocations s390/hypfs: include z/VM guests with access control group set bpf: Guard against accessing NULL pt_regs in bpf_get_task_stack() scsi: zfcp: Fix failed recovery on gone remote port with non-NPIV FCP devices udf: Restore i_lenAlloc when inode expansion fails udf: Fix NULL ptr deref when converting from inline format efi: runtime: avoid EFIv2 runtime services on Apple x86 machines PM: wakeup: simplify the output logic of pm_show_wakelocks() tracing/histogram: Fix a potential memory leak for kstrdup() tracing: Don't inc err_log entry count if entry allocation fails ceph: properly put ceph_string reference after async create attempt ceph: set pool_ns in new inode layout for async creates fsnotify: fix fsnotify hooks in pseudo filesystems Revert "KVM: SVM: avoid infinite loop on NPF from bad address" perf/x86/intel/uncore: Fix CAS_COUNT_WRITE issue for ICX drm/etnaviv: relax submit size limits KVM: x86: Update vCPU's runtime CPUID on write to MSR_IA32_XSS arm64: errata: Fix exec handling in erratum `1418040` workaround netfilter: nft_payload: do not update layer 4 checksum when mangling fragments serial: 8250: of: Fix mapped region size when using reg-offset property serial: stm32: fix software flow control transfer tty: n_gsm: fix SW flow control encoding/handling tty: Add support for Brainboxes UC cards. usb-storage: Add unusual-devs entry for VL817 USB-SATA bridge usb: xhci-plat: fix crash when suspend if remote wake enable usb: common: ulpi: Fix crash in ulpi_match() usb: gadget: f_sourcesink: Fix isoc transfer for USB_SPEED_SUPER_PLUS USB: core: Fix hang in usb_kill_urb by adding memory barriers usb: typec: tcpm: Do not disconnect while receiving VBUS off ucsi_ccg: Check DEV_INT bit only when starting CCG4 jbd2: export jbd2_journal_[grab\|put]_journal_head ocfs2: fix a deadlock when commit trans sched/membarrier: Fix membarrier-rseq fence command missing from query bitmask x86/MCE/AMD: Allow thresholding interface updates after init powerpc/32s: Allocate one 256k IBAT instead of two consecutives 128k IBATs powerpc/32s: Fix kasan_init_region() for KASAN powerpc/32: Fix boot failure with GCC latent entropy plugin i40e: Increase delay to 1 s after global EMP reset i40e: Fix issue when maximum queues is exceeded i40e: Fix queues reservation for XDP i40e: Fix for failed to init adminq while VF reset i40e: fix unsigned stat widths usb: roles: fix include/linux/usb/role.h compile issue rpmsg: char: Fix race between the release of rpmsg_ctrldev and cdev rpmsg: char: Fix race between the release of rpmsg_eptdev and cdev scsi: bnx2fc: Flush destroy_work queue before calling bnx2fc_interface_put() ipv6_tunnel: Rate limit warning messages net: fix information leakage in /proc/net/ptype hwmon: (lm90) Mark alert as broken for MAX6646/6647/6649 hwmon: (lm90) Mark alert as broken for MAX6680 ping: fix the sk_bound_dev_if match in ping_lookup ipv4: avoid using shared IP generator for connected sockets hwmon: (lm90) Reduce maximum conversion rate for G781 NFSv4: Handle case where the lookup of a directory fails NFSv4: nfs_atomic_open() can race when looking up a non-regular file net-procfs: show net devices bound packet types drm/msm: Fix wrong size calculation drm/msm/dsi: Fix missing put_device() call in dsi_get_phy drm/msm/dsi: invalid parameter check in msm_dsi_phy_enable ipv6: annotate accesses to fn->fn_sernum NFS: Ensure the server has an up to date ctime before hardlinking NFS: Ensure the server has an up to date ctime before renaming powerpc64/bpf: Limit 'ldbrx' to processors compliant with ISA v2.06 netfilter: conntrack: don't increment invalid counter on NF_REPEAT kernel: delete repeated words in comments perf: Fix perf_event_read_local() time sched/pelt: Relax the sync of util_sum with util_avg net: phy: broadcom: hook up soft_reset for BCM54616S phylib: fix potential use-after-free octeontx2-pf: Forward error codes to VF rxrpc: Adjust retransmission backoff efi/libstub: arm64: Fix image check alignment at entry hwmon: (lm90) Mark alert as broken for MAX6654 powerpc/perf: Fix power_pmu_disable to call clear_pmi_irq_pending only if PMI is pending net: ipv4: Move ip_options_fragment() out of loop net: ipv4: Fix the warning for dereference ipv4: fix ip option filtering for locally generated fragments ibmvnic: init ->running_cap_crqs early ibmvnic: don't spin in tasklet video: hyperv_fb: Fix validation of screen resolution drm/msm/hdmi: Fix missing put_device() call in msm_hdmi_get_phy drm/msm/dpu: invalid parameter check in dpu_setup_dspp_pcc yam: fix a memory leak in yam_siocdevprivate() net: cpsw: Properly initialise struct page_pool_params net: hns3: handle empty unknown interrupt for VF Revert "ipv6: Honor all IPv6 PIO Valid Lifetime values" net: bridge: vlan: fix single net device option dumping ipv4: raw: lock the socket in raw_bind() ipv4: tcp: send zero IPID in SYNACK messages ipv4: remove sparse error in ip_neigh_gw4() net: bridge: vlan: fix memory leak in __allowed_ingress dt-bindings: can: tcan4x5x: fix mram-cfg RX FIFO config usr/include/Makefile: add linux/nfc.h to the compile-test coverage fsnotify: invalidate dcache before IN_DELETE event block: Fix wrong offset in bio_truncate() mtd: rawnand: mpc5121: Remove unused variable in ads5121_select_chip() Linux 5.10.96 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: Ie34be06fa082557e93eda246f1a9ebf9f155a138	2022-02-07 11:17:58 +01:00
Eric Dumazet	3bbe2019dd	rtnetlink: make sure to refresh master_dev/m_ops in __rtnl_newlink() commit c6f6f2444bdbe0079e41914a35081530d0409963 upstream. While looking at one unrelated syzbot bug, I found the replay logic in __rtnl_newlink() to potentially trigger use-after-free. It is better to clear master_dev and m_ops inside the loop, in case we have to replay it. Fixes: `ba7d49b1f0` ("rtnetlink: provide api for getting and setting slave info") Signed-off-by: Eric Dumazet <edumazet@google.com> Cc: Jiri Pirko <jiri@nvidia.com> Link: https://lore.kernel.org/r/20220201012106.216495-1-eric.dumazet@gmail.com Signed-off-by: Jakub Kicinski <kuba@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-02-05 12:37:56 +01:00
Jianguo Wu	f57a99c9a5	net-procfs: show net devices bound packet types commit 1d10f8a1f40b965d449e8f2d5ed7b96a7c138b77 upstream. After commit:7866a621043f ("dev: add per net_device packet type chains"), we can not get packet types that are bound to a specified net device by /proc/net/ptype, this patch fix the regression. Run "tcpdump -i ens192 udp -nns0" Before and after apply this patch: Before: [root@localhost ~]# cat /proc/net/ptype Type Device Function 0800 ip_rcv 0806 arp_rcv 86dd ipv6_rcv After: [root@localhost ~]# cat /proc/net/ptype Type Device Function ALL ens192 tpacket_rcv 0800 ip_rcv 0806 arp_rcv 86dd ipv6_rcv v1 -> v2: - fix the regression rather than adding new /proc API as suggested by Stephen Hemminger. Fixes: `7866a62104` ("dev: add per net_device packet type chains") Signed-off-by: Jianguo Wu <wujianguo@chinatelecom.cn> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-02-01 17:25:44 +01:00
Congyu Liu	db044d9746	net: fix information leakage in /proc/net/ptype commit 47934e06b65637c88a762d9c98329ae6e3238888 upstream. In one net namespace, after creating a packet socket without binding it to a device, users in other net namespaces can observe the new `packet_type` added by this packet socket by reading `/proc/net/ptype` file. This is minor information leakage as packet socket is namespace aware. Add a net pointer in `packet_type` to keep the net namespace of of corresponding packet socket. In `ptype_seq_show`, this net pointer must be checked when it is not NULL. Fixes: `2feb27dbe0` ("[NETNS]: Minor information leak via /proc/net/ptype file.") Signed-off-by: Congyu Liu <liu3101@purdue.edu> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-02-01 17:25:43 +01:00
Greg Kroah-Hartman	4ec3c2eea5	This is the 5.10.94 stable release -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmHya+IACgkQONu9yGCS aT7k/RAAqdd8bNhAiO6iDpvZbQtxq9jepx4KCkcd+gsYvSvePEnBQHaTaavfCK/7 +taWsc2i6Hwc1Z4oVfUiU02cCsqMJJXqb0nfJaavE5cZspbTc7QeS0zv9BkzSKUZ +DxXWyjzeJquI7EbdU0n7inb0iwvBxmTGNIg2j1pPi81Q7XnpjmDsSvuoftRQ0AN DGYefowWL1VcfsZRfhEudnpxWC/DjOdB8zD34SgXxKat6/O8YG4T5pM2BOUlKtOW QcXFhpG6gU0XqmI3QQDvAESujOQxzC1u3AwIOHYJ/tlFYsUJXjiZIEVnMqPYGpNl fXS8xcNSeo6fipXWkzsc489Tteq9H+bfm8sBG0jhExRnyGckkihJDhRFZ9yBrzo/ 1PtUdUIJ4d5fUmdZp7gxucncFyIYFsyJm/5nsYmObP794oStPGKsH8llhp/PcEFF ua1+Gy2WW2f6BOaDVFmt+jWZRMa/3oZnFhe8/FPRsAjGOj+q/+V6bsksGDYupsrM x8/QQI6OVlnOZsrdpX7zkW46qLov0J0bO9cANTm7kcRaesrkikFKqiIF2uIW2OU6 W0tZZf0Jy/gSLEljkZ3SuMHCmldWKm/KxMYSjnQ3Y34QvOLYPNAZGF78rbV3s8/0 otGR3ra5TKCz1kxuDaE1FqZXxpPQidXbF4QUoaRIaPwA1k5NvLY= =ktJL -----END PGP SIGNATURE----- Merge 5.10.94 into android12-5.10-lts Changes in 5.10.94 KVM: VMX: switch blocked_vcpu_on_cpu_lock to raw spinlock HID: uhid: Fix worker destroying device without any protection HID: wacom: Reset expected and received contact counts at the same time HID: wacom: Ignore the confidence flag when a touch is removed HID: wacom: Avoid using stale array indicies to read contact count f2fs: fix to do sanity check in is_alive() nfc: llcp: fix NULL error pointer dereference on sendmsg() after failed bind() mtd: rawnand: gpmi: Add ERR007117 protection for nfc_apply_timings mtd: rawnand: gpmi: Remove explicit default gpmi clock setting for i.MX6 mtd: Fixed breaking list in __mtd_del_partition. mtd: rawnand: davinci: Don't calculate ECC when reading page mtd: rawnand: davinci: Avoid duplicated page read mtd: rawnand: davinci: Rewrite function description x86/gpu: Reserve stolen memory for first integrated Intel GPU tools/nolibc: x86-64: Fix startup code bug tools/nolibc: i386: fix initial stack alignment tools/nolibc: fix incorrect truncation of exit code rtc: cmos: take rtc_lock while reading from CMOS media: v4l2-ioctl.c: readbuffers depends on V4L2_CAP_READWRITE media: flexcop-usb: fix control-message timeouts media: mceusb: fix control-message timeouts media: em28xx: fix control-message timeouts media: cpia2: fix control-message timeouts media: s2255: fix control-message timeouts media: dib0700: fix undefined behavior in tuner shutdown media: redrat3: fix control-message timeouts media: pvrusb2: fix control-message timeouts media: stk1160: fix control-message timeouts media: cec-pin: fix interrupt en/disable handling can: softing_cs: softingcs_probe(): fix memleak on registration failure iio: adc: ti-adc081c: Partial revert of removal of ACPI IDs lkdtm: Fix content of section containing lkdtm_rodata_do_nothing() iommu/io-pgtable-arm-v7s: Add error handle for page table allocation failure gpu: host1x: Add back arm_iommu_detach_device() dma_fence_array: Fix PENDING_ERROR leak in dma_fence_array_signaled() PCI: Add function 1 DMA alias quirk for Marvell 88SE9125 SATA controller mm_zone: add function to check if managed dma zone exists dma/pool: create dma atomic pool only if dma zone has managed pages mm/page_alloc.c: do not warn allocation failure on zone DMA if no managed pages shmem: fix a race between shmem_unused_huge_shrink and shmem_evict_inode drm/ttm: Put BO in its memory manager's lru list Bluetooth: L2CAP: Fix not initializing sk_peer_pid drm/bridge: display-connector: fix an uninitialized pointer in probe() drm: fix null-ptr-deref in drm_dev_init_release() drm/panel: kingdisplay-kd097d04: Delete panel on attach() failure drm/panel: innolux-p079zca: Delete panel on attach() failure drm/rockchip: dsi: Fix unbalanced clock on probe error drm/rockchip: dsi: Hold pm-runtime across bind/unbind drm/rockchip: dsi: Disable PLL clock on bind error drm/rockchip: dsi: Reconfigure hardware on resume() Bluetooth: cmtp: fix possible panic when cmtp_init_sockets() fails clk: bcm-2835: Pick the closest clock rate clk: bcm-2835: Remove rounding up the dividers drm/vc4: hdmi: Set a default HSM rate wcn36xx: ensure pairing of init_scan/finish_scan and start_scan/end_scan wcn36xx: Indicate beacon not connection loss on MISSED_BEACON_IND wcn36xx: Fix DMA channel enable/disable cycle wcn36xx: Release DMA channel descriptor allocations wcn36xx: Put DXE block into reset before freeing memory wcn36xx: populate band before determining rate on RX wcn36xx: fix RX BD rate mapping for 5GHz legacy rates ath11k: Send PPDU_STATS_CFG with proper pdev mask to firmware mtd: hyperbus: rpc-if: Check return value of rpcif_sw_init() media: videobuf2: Fix the size printk format media: atomisp: add missing media_device_cleanup() in atomisp_unregister_entities() media: atomisp: fix punit_ddr_dvfs_enable() argument for mrfld_power up case media: atomisp: fix inverted logic in buffers_needed() media: atomisp: do not use err var when checking port validity for ISP2400 media: atomisp: fix inverted error check for ia_css_mipi_is_source_port_valid() media: atomisp: fix ifdefs in sh_css.c media: staging: media: atomisp: pci: Balance braces around conditional statements in file atomisp_cmd.c media: atomisp: add NULL check for asd obtained from atomisp_video_pipe media: atomisp: fix enum formats logic media: atomisp: fix uninitialized bug in gmin_get_pmic_id_and_addr() media: aspeed: fix mode-detect always time out at 2nd run media: em28xx: fix memory leak in em28xx_init_dev media: aspeed: Update signal status immediately to ensure sane hw state arm64: dts: amlogic: meson-g12: Fix GPU operating point table node name arm64: dts: amlogic: Fix SPI NOR flash node name for ODROID N2/N2+ arm64: dts: meson-gxbb-wetek: fix HDMI in early boot arm64: dts: meson-gxbb-wetek: fix missing GPIO binding fs: dlm: use sk->sk_socket instead of con->sock fs: dlm: don't call kernel_getpeername() in error_report() memory: renesas-rpc-if: Return error in case devm_ioremap_resource() fails Bluetooth: stop proccessing malicious adv data ath11k: Fix ETSI regd with weather radar overlap ath11k: clear the keys properly via DISABLE_KEY ath11k: reset RSN/WPA present state for open BSS tee: fix put order in teedev_close_context() fs: dlm: fix build with CONFIG_IPV6 disabled drm/vboxvideo: fix a NULL vs IS_ERR() check arm64: dts: renesas: cat875: Add rx/tx delays media: dmxdev: fix UAF when dvb_register_device() fails crypto: qce - fix uaf on qce_ahash_register_one crypto: qce - fix uaf on qce_skcipher_register_one mtd: hyperbus: rpc-if: fix bug in rpcif_hb_remove ARM: dts: stm32: fix dtbs_check warning on ili9341 dts binding on stm32f429 disco crypto: qat - fix spelling mistake: "messge" -> "message" crypto: qat - remove unnecessary collision prevention step in PFVF crypto: qat - make pfvf send message direction agnostic crypto: qat - fix undetected PFVF timeout in ACK loop ath11k: Use host CE parameters for CE interrupts configuration arm64: dts: ti: k3-j721e: correct cache-sets info tty: serial: atmel: Check return code of dmaengine_submit() tty: serial: atmel: Call dma_async_issue_pending() mfd: atmel-flexcom: Remove #ifdef CONFIG_PM_SLEEP mfd: atmel-flexcom: Use .resume_noirq media: rcar-csi2: Correct the selection of hsfreqrange media: imx-pxp: Initialize the spinlock prior to using it media: si470x-i2c: fix possible memory leak in si470x_i2c_probe() media: mtk-vcodec: call v4l2_m2m_ctx_release first when file is released media: coda: fix CODA960 JPEG encoder buffer overflow media: venus: pm_helpers: Control core power domain manually media: venus: core, venc, vdec: Fix probe dependency error media: venus: core: Fix a potential NULL pointer dereference in an error handling path media: venus: core: Fix a resource leak in the error handling path of 'venus_probe()' thermal/drivers/imx: Implement runtime PM support netfilter: bridge: add support for pppoe filtering arm64: dts: qcom: msm8916: fix MMC controller aliases cgroup: Trace event cgroup id fields should be u64 ACPI: EC: Rework flushing of EC work while suspended to idle thermal/drivers/imx8mm: Enable ADC when enabling monitor drm/amdgpu: Fix a NULL pointer dereference in amdgpu_connector_lcd_native_mode() drm/radeon/radeon_kms: Fix a NULL pointer dereference in radeon_driver_open_kms() arm64: dts: ti: k3-j7200: Fix the L2 cache sets arm64: dts: ti: k3-j721e: Fix the L2 cache sets arm64: dts: ti: k3-j7200: Correct the d-cache-sets info tty: serial: uartlite: allow 64 bit address serial: amba-pl011: do not request memory region twice floppy: Fix hang in watchdog when disk is ejected staging: rtl8192e: return error code from rtllib_softmac_init() staging: rtl8192e: rtllib_module: fix error handle case in alloc_rtllib() Bluetooth: btmtksdio: fix resume failure sched/fair: Fix detection of per-CPU kthreads waking a task sched/fair: Fix per-CPU kthread and wakee stacking for asym CPU capacity bpf: Adjust BTF log size limit. bpf: Disallow BPF_LOG_KERNEL log level for bpf(BPF_BTF_LOAD) bpf: Remove config check to enable bpf support for branch records arm64: lib: Annotate {clear, copy}_page() as position-independent arm64: clear_page() shouldn't use DC ZVA when DCZID_EL0.DZP == 1 media: dib8000: Fix a memleak in dib8000_init() media: saa7146: mxb: Fix a NULL pointer dereference in mxb_attach() media: si2157: Fix "warm" tuner state detection wireless: iwlwifi: Fix a double free in iwl_txq_dyn_alloc_dma sched/rt: Try to restart rt period timer when rt runtime exceeded drm/msm/dp: displayPort driver need algorithm rational rcu/exp: Mark current CPU as exp-QS in IPI loop second pass mwifiex: Fix possible ABBA deadlock xfrm: fix a small bug in xfrm_sa_len() x86/uaccess: Move variable into switch case statement selftests: clone3: clone3: add case CLONE3_ARGS_NO_TEST selftests: harness: avoid false negatives if test has no ASSERTs crypto: stm32 - Fix last sparse warning in stm32_cryp_check_ctr_counter crypto: stm32/cryp - fix CTR counter carry crypto: stm32/cryp - fix xts and race condition in crypto_engine requests crypto: stm32/cryp - check early input data crypto: stm32/cryp - fix double pm exit crypto: stm32/cryp - fix lrw chaining mode crypto: stm32/cryp - fix bugs and crash in tests crypto: stm32 - Revert broken pm_runtime_resume_and_get changes ath11k: Fix deleting uninitialized kernel timer during fragment cache flush ARM: dts: gemini: NAS4220-B: fis-index-block with 128 KiB sectors media: dw2102: Fix use after free media: msi001: fix possible null-ptr-deref in msi001_probe() media: coda/imx-vdoa: Handle dma_set_coherent_mask error codes ath11k: Fix a NULL pointer dereference in ath11k_mac_op_hw_scan() arm64: dts: qcom: c630: Fix soundcard setup arm64: dts: qcom: ipq6018: Fix gpio-ranges property drm/msm/dpu: fix safe status debugfs file drm/bridge: ti-sn65dsi86: Set max register for regmap drm/tegra: vic: Fix DMA API misuse media: hantro: Fix probe func error path xfrm: interface with if_id 0 should return error xfrm: state and policy should fail if XFRMA_IF_ID 0 ARM: 9159/1: decompressor: Avoid UNPREDICTABLE NOP encoding usb: ftdi-elan: fix memory leak on device disconnect arm64: dts: marvell: cn9130: add GPIO and SPI aliases arm64: dts: marvell: cn9130: enable CP0 GPIO controllers ARM: dts: armada-38x: Add generic compatible to UART nodes iwlwifi: mvm: fix 32-bit build in FTM iwlwifi: mvm: test roc running status bits before removing the sta mmc: meson-mx-sdhc: add IRQ check mmc: meson-mx-sdio: add IRQ check selinux: fix potential memleak in selinux_add_opt() um: fix ndelay/udelay defines um: virtio_uml: Fix time-travel external time propagation Bluetooth: L2CAP: Fix using wrong mode bpftool: Enable line buffering for stdout backlight: qcom-wled: Validate enabled string indices in DT backlight: qcom-wled: Pass number of elements to read to read_u32_array backlight: qcom-wled: Fix off-by-one maximum with default num_strings backlight: qcom-wled: Override default length with qcom,enabled-strings backlight: qcom-wled: Use cpu_to_le16 macro to perform conversion backlight: qcom-wled: Respect enabled-strings in set_brightness software node: fix wrong node passed to find nargs_prop Bluetooth: hci_qca: Stop IBS timer during BT OFF x86/boot/compressed: Move CLANG_FLAGS to beginning of KBUILD_CFLAGS hwmon: (mr75203) fix wrong power-up delay value x86/mce/inject: Avoid out-of-bounds write when setting flags ACPI: scan: Create platform device for BCM4752 and LNV4752 ACPI nodes pcmcia: rsrc_nonstatic: Fix a NULL pointer dereference in __nonstatic_find_io_region() pcmcia: rsrc_nonstatic: Fix a NULL pointer dereference in nonstatic_find_mem_region() power: reset: mt6397: Check for null res pointer netfilter: ipt_CLUSTERIP: fix refcount leak in clusterip_tg_check() bpf: Don't promote bogus looking registers after null check. bpf: Fix SO_RCVBUF/SO_SNDBUF handling in _bpf_setsockopt(). netfilter: nft_set_pipapo: allocate pcpu scratch maps on clone ppp: ensure minimum packet size in ppp_write() rocker: fix a sleeping in atomic bug staging: greybus: audio: Check null pointer fsl/fman: Check for null pointer after calling devm_ioremap Bluetooth: hci_bcm: Check for error irq Bluetooth: hci_qca: Fix NULL vs IS_ERR_OR_NULL check in qca_serdev_probe usb: dwc3: qcom: Fix NULL vs IS_ERR checking in dwc3_qcom_probe HID: hid-uclogic-params: Invalid parameter check in uclogic_params_init HID: hid-uclogic-params: Invalid parameter check in uclogic_params_get_str_desc HID: hid-uclogic-params: Invalid parameter check in uclogic_params_huion_init HID: hid-uclogic-params: Invalid parameter check in uclogic_params_frame_init_v1_buttonpad debugfs: lockdown: Allow reading debugfs files that are not world readable net/mlx5e: Fix page DMA map/unmap attributes net/mlx5e: Don't block routes with nexthop objects in SW Revert "net/mlx5e: Block offload of outer header csum for UDP tunnels" net/mlx5: Set command entry semaphore up once got index free lib/mpi: Add the return value check of kcalloc() Bluetooth: L2CAP: uninitialized variables in l2cap_sock_setsockopt() spi: spi-meson-spifc: Add missing pm_runtime_disable() in meson_spifc_probe ax25: uninitialized variable in ax25_setsockopt() netrom: fix api breakage in nr_setsockopt() regmap: Call regmap_debugfs_exit() prior to _init() can: mcp251xfd: add missing newline to printed strings tpm: add request_locality before write TPM_INT_ENABLE tpm_tis: Fix an error handling path in 'tpm_tis_core_init()' can: softing: softing_startstop(): fix set but not used variable warning can: xilinx_can: xcan_probe(): check for error irq pcmcia: fix setting of kthread task states iwlwifi: mvm: Use div_s64 instead of do_div in iwl_mvm_ftm_rtt_smoothing() net: mcs7830: handle usb read errors properly ext4: avoid trim error on fs with small groups ALSA: jack: Add missing rwsem around snd_ctl_remove() calls ALSA: PCM: Add missing rwsem around snd_ctl_remove() calls ALSA: hda: Add missing rwsem around snd_ctl_remove() calls RDMA/bnxt_re: Scan the whole bitmap when checking if "disabling RCFW with pending cmd-bit" RDMA/hns: Validate the pkey index scsi: pm80xx: Update WARN_ON check in pm8001_mpi_build_cmd() clk: imx8mn: Fix imx8mn_clko1_sels powerpc/prom_init: Fix improper check of prom_getprop() ASoC: uniphier: drop selecting non-existing SND_SOC_UNIPHIER_AIO_DMA dt-bindings: thermal: Fix definition of cooling-maps contribution property powerpc/64s: Convert some cpu_setup() and cpu_restore() functions to C powerpc/perf: MMCR0 control for PMU registers under PMCC=00 powerpc/perf: move perf irq/nmi handling details into traps.c powerpc/irq: Add helper to set regs->softe powerpc/perf: Fix PMU callbacks to clear pending PMI before resetting an overflown PMC powerpc/32s: Fix shift-out-of-bounds in KASAN init clocksource: Reduce clocksource-skew threshold clocksource: Avoid accidental unstable marking of clocksources ALSA: oss: fix compile error when OSS_DEBUG is enabled ALSA: usb-audio: Drop superfluous '0' in Presonus Studio 1810c's ID char/mwave: Adjust io port register size binder: fix handling of error during copy openrisc: Add clone3 ABI wrapper iommu/io-pgtable-arm: Fix table descriptor paddr formatting scsi: ufs: Fix race conditions related to driver data RDMA/qedr: Fix reporting max_{send/recv}_wr attrs PCI/MSI: Fix pci_irq_vector()/pci_irq_get_affinity() powerpc/powermac: Add additional missing lockdep_register_key() RDMA/core: Let ib_find_gid() continue search even after empty entry RDMA/cma: Let cma_resolve_ib_dev() continue search even after empty entry ASoC: rt5663: Handle device_property_read_u32_array error codes of: unittest: fix warning on PowerPC frame size warning of: unittest: 64 bit dma address test requires arch support clk: stm32: Fix ltdc's clock turn off by clk_disable_unused() after system enter shell mips: add SYS_HAS_CPU_MIPS64_R5 config for MIPS Release 5 support mips: fix Kconfig reference to PHYS_ADDR_T_64BIT dmaengine: pxa/mmp: stop referencing config->slave_id iommu/amd: Remove iommu_init_ga() iommu/amd: Restore GA log/tail pointer on host resume ASoC: Intel: catpt: Test dmaengine_submit() result before moving on iommu/iova: Fix race between FQ timeout and teardown scsi: block: pm: Always set request queue runtime active in blk_post_runtime_resume() phy: uniphier-usb3ss: fix unintended writing zeros to PHY register ASoC: mediatek: Check for error clk pointer ASoC: samsung: idma: Check of ioremap return value misc: lattice-ecp3-config: Fix task hung when firmware load failed counter: stm32-lptimer-cnt: remove iio counter abi arm64: tegra: Fix Tegra194 HDA {clock,reset}-names ordering arm64: tegra: Remove non existent Tegra194 reset mips: lantiq: add support for clk_set_parent() mips: bcm63xx: add support for clk_set_parent() powerpc/xive: Add missing null check after calling kmalloc ASoC: fsl_mqs: fix MODULE_ALIAS RDMA/cxgb4: Set queue pair state when being queried ASoC: fsl_asrc: refine the check of available clock divider clk: bm1880: remove kfrees on static allocations of: base: Fix phandle argument length mismatch error message ARM: dts: omap3-n900: Fix lp5523 for multi color Bluetooth: Fix debugfs entry leak in hci_register_dev() fs: dlm: filter user dlm messages for kernel locks drm/lima: fix warning when CONFIG_DEBUG_SG=y & CONFIG_DMA_API_DEBUG=y selftests/bpf: Fix bpf_object leak in skb_ctx selftest ar5523: Fix null-ptr-deref with unexpected WDCMSG_TARGET_START reply drm/bridge: dw-hdmi: handle ELD when DRM_BRIDGE_ATTACH_NO_CONNECTOR drm/nouveau/pmu/gm200-: avoid touching PMU outside of DEVINIT/PREOS/ACR media: atomisp: fix try_fmt logic media: atomisp: set per-device's default mode media: atomisp-ov2680: Fix ov2680_set_fmt() clobbering the exposure ARM: shmobile: rcar-gen2: Add missing of_node_put() batman-adv: allow netlink usage in unprivileged containers media: atomisp: handle errors at sh_css_create_isp_params() ath11k: Fix crash caused by uninitialized TX ring usb: gadget: f_fs: Use stream_open() for endpoint files drm: panel-orientation-quirks: Add quirk for the Lenovo Yoga Book X91F/L HID: apple: Do not reset quirks when the Fn key is not found media: b2c2: Add missing check in flexcop_pci_isr: EDAC/synopsys: Use the quirk for version instead of ddr version ARM: imx: rename DEBUG_IMX21_IMX27_UART to DEBUG_IMX27_UART drm/amd/display: check top_pipe_to_program pointer drm/amdgpu/display: set vblank_disable_immediate for DC soc: ti: pruss: fix referenced node in error message mlxsw: pci: Add shutdown method in PCI driver drm/bridge: megachips: Ensure both bridges are probed before registration tty: serial: imx: disable UCR4_OREN in .stop_rx() instead of .shutdown() gpiolib: acpi: Do not set the IRQ type if the IRQ is already in use HSI: core: Fix return freed object in hsi_new_client crypto: jitter - consider 32 LSB for APT mwifiex: Fix skb_over_panic in mwifiex_usb_recv() rsi: Fix use-after-free in rsi_rx_done_handler() rsi: Fix out-of-bounds read in rsi_read_pkt() ath11k: Avoid NULL ptr access during mgmt tx cleanup media: venus: avoid calling core_clk_setrate() concurrently during concurrent video sessions ACPI / x86: Drop PWM2 device on Lenovo Yoga Book from always present table ACPI: Change acpi_device_always_present() into acpi_device_override_status() ACPI / x86: Allow specifying acpi_device_override_status() quirks by path ACPI / x86: Add not-present quirk for the PCI0.SDHB.BRC1 device on the GPD win arm64: dts: ti: j7200-main: Fix 'dtbs_check' serdes_ln_ctrl node usb: uhci: add aspeed ast2600 uhci support floppy: Add max size check for user space request x86/mm: Flush global TLB when switching to trampoline page-table drm: rcar-du: Fix CRTC timings when CMM is used media: uvcvideo: Increase UVC_CTRL_CONTROL_TIMEOUT to 5 seconds. media: rcar-vin: Update format alignment constraints media: saa7146: hexium_orion: Fix a NULL pointer dereference in hexium_attach() media: m920x: don't use stack on USB reads thunderbolt: Runtime PM activate both ends of the device link iwlwifi: mvm: synchronize with FW after multicast commands iwlwifi: mvm: avoid clearing a just saved session protection id ath11k: avoid deadlock by change ieee80211_queue_work for regd_update_work ath10k: Fix tx hanging net-sysfs: update the queue counts in the unregistration path net: phy: prefer 1000baseT over 1000baseKX gpio: aspeed: Convert aspeed_gpio.lock to raw_spinlock selftests/ftrace: make kprobe profile testcase description unique ath11k: Avoid false DEADLOCK warning reported by lockdep x86/mce: Allow instrumentation during task work queueing x86/mce: Mark mce_panic() noinstr x86/mce: Mark mce_end() noinstr x86/mce: Mark mce_read_aux() noinstr net: bonding: debug: avoid printing debug logs when bond is not notifying peers bpf: Do not WARN in bpf_warn_invalid_xdp_action() HID: quirks: Allow inverting the absolute X/Y values media: igorplugusb: receiver overflow should be reported media: saa7146: hexium_gemini: Fix a NULL pointer dereference in hexium_attach() mmc: core: Fixup storing of OCR for MMC_QUIRK_NONSTD_SDIO audit: ensure userspace is penalized the same as the kernel when under pressure arm64: dts: ls1028a-qds: move rtc node to the correct i2c bus arm64: tegra: Adjust length of CCPLEX cluster MMIO region PM: runtime: Add safety net to supplier device release cpufreq: Fix initialization of min and max frequency QoS requests usb: hub: Add delay for SuperSpeed hub resume to let links transit to U0 ath9k: Fix out-of-bound memcpy in ath9k_hif_usb_rx_stream rtw88: 8822c: update rx settings to prevent potential hw deadlock PM: AVS: qcom-cpr: Use div64_ul instead of do_div iwlwifi: fix leaks/bad data after failed firmware load iwlwifi: remove module loading failure message iwlwifi: mvm: Fix calculation of frame length iwlwifi: pcie: make sure prph_info is set when treating wakeup IRQ um: registers: Rename function names to avoid conflicts and build problems ath11k: Fix napi related hang Bluetooth: vhci: Set HCI_QUIRK_VALID_LE_STATES xfrm: rate limit SA mapping change message to user space drm/etnaviv: consider completed fence seqno in hang check jffs2: GC deadlock reading a page that is used in jffs2_write_begin() ACPICA: actypes.h: Expand the ACPI_ACCESS_ definitions ACPICA: Utilities: Avoid deleting the same object twice in a row ACPICA: Executer: Fix the REFCLASS_REFOF case in acpi_ex_opcode_1A_0T_1R() ACPICA: Fix wrong interpretation of PCC address ACPICA: Hardware: Do not flush CPU cache when entering S4 and S5 drm/amdgpu: fixup bad vram size on gmc v8 amdgpu/pm: Make sysfs pm attributes as read-only for VFs ACPI: battery: Add the ThinkPad "Not Charging" quirk btrfs: remove BUG_ON() in find_parent_nodes() btrfs: remove BUG_ON(!eie) in find_parent_nodes net: mdio: Demote probed message to debug print mac80211: allow non-standard VHT MCS-10/11 dm btree: add a defensive bounds check to insert_at() dm space map common: add bounds check to sm_ll_lookup_bitmap() mlxsw: pci: Avoid flow control for EMAD packets net: phy: marvell: configure RGMII delays for 88E1118 net: gemini: allow any RGMII interface mode regulator: qcom_smd: Align probe function with rpmh-regulator serial: pl010: Drop CR register reset on set_termios serial: core: Keep mctrl register state and cached copy in sync random: do not throw away excess input to crng_fast_load parisc: Avoid calling faulthandler_disabled() twice x86/kbuild: Enable CONFIG_KALLSYMS_ALL=y in the defconfigs powerpc/6xx: add missing of_node_put powerpc/powernv: add missing of_node_put powerpc/cell: add missing of_node_put powerpc/btext: add missing of_node_put powerpc/watchdog: Fix missed watchdog reset due to memory ordering race i2c: i801: Don't silently correct invalid transfer size powerpc/smp: Move setup_profiling_timer() under CONFIG_PROFILING i2c: mpc: Correct I2C reset procedure clk: meson: gxbb: Fix the SDM_EN bit for MPLL0 on GXBB powerpc/powermac: Add missing lockdep_register_key() KVM: PPC: Book3S: Suppress warnings when allocating too big memory slots KVM: PPC: Book3S: Suppress failed alloc warning in H_COPY_TOFROM_GUEST w1: Misuse of get_user()/put_user() reported by sparse nvmem: core: set size for sysfs bin file dm: fix alloc_dax error handling in alloc_dev scsi: lpfc: Trigger SLI4 firmware dump before doing driver cleanup ALSA: seq: Set upper limit of processed events MIPS: Loongson64: Use three arguments for slti powerpc/40x: Map 32Mbytes of memory at startup selftests/powerpc/spectre_v2: Return skip code when miss_percent is high powerpc: handle kdump appropriately with crash_kexec_post_notifiers option powerpc/fadump: Fix inaccurate CPU state info in vmcore generated with panic udf: Fix error handling in udf_new_inode() MIPS: OCTEON: add put_device() after of_find_device_by_node() irqchip/gic-v4: Disable redistributors' view of the VPE table at boot time i2c: designware-pci: Fix to change data types of hcnt and lcnt parameters MIPS: Octeon: Fix build errors using clang scsi: sr: Don't use GFP_DMA ASoC: mediatek: mt8173: fix device_node leak ASoC: mediatek: mt8183: fix device_node leak phy: mediatek: Fix missing check in mtk_mipi_tx_probe rpmsg: core: Clean up resources on announce_create failure. crypto: omap-aes - Fix broken pm_runtime_and_get() usage crypto: stm32/crc32 - Fix kernel BUG triggered in probe() crypto: caam - replace this_cpu_ptr with raw_cpu_ptr ubifs: Error path in ubifs_remount_rw() seems to wrongly free write buffers tpm: fix NPE on probe for missing device spi: uniphier: Fix a bug that doesn't point to private data correctly xen/gntdev: fix unmap notification order fuse: Pass correct lend value to filemap_write_and_wait_range() serial: Fix incorrect rs485 polarity on uart open cputime, cpuacct: Include guest time in user time in cpuacct.stat tracing/kprobes: 'nmissed' not showed correctly for kretprobe iwlwifi: mvm: Increase the scan timeout guard to 30 seconds s390/mm: fix 2KB pgtable release race device property: Fix fwnode_graph_devcon_match() fwnode leak drm/etnaviv: limit submit sizes drm/nouveau/kms/nv04: use vzalloc for nv04_display drm/bridge: analogix_dp: Make PSR-exit block less parisc: Fix lpa and lpa_user defines powerpc/64s/radix: Fix huge vmap false positive PCI: xgene: Fix IB window setup PCI: pciehp: Use down_read/write_nested(reset_lock) to fix lockdep errors PCI: pci-bridge-emul: Make expansion ROM Base Address register read-only PCI: pci-bridge-emul: Properly mark reserved PCIe bits in PCI config space PCI: pci-bridge-emul: Fix definitions of reserved bits PCI: pci-bridge-emul: Correctly set PCIe capabilities PCI: pci-bridge-emul: Set PCI_STATUS_CAP_LIST for PCIe device xfrm: fix policy lookup for ipv6 gre packets btrfs: fix deadlock between quota enable and other quota operations btrfs: check the root node for uptodate before returning it btrfs: respect the max size in the header when activating swap file ext4: make sure to reset inode lockdep class when quota enabling fails ext4: make sure quota gets properly shutdown on error ext4: fix a possible ABBA deadlock due to busy PA ext4: initialize err_blk before calling __ext4_get_inode_loc ext4: fix fast commit may miss tracking range for FALLOC_FL_ZERO_RANGE ext4: set csum seed in tmp inode while migrating to extents ext4: Fix BUG_ON in ext4_bread when write quota data ext4: use ext4_ext_remove_space() for fast commit replay delete range ext4: fast commit may miss tracking unwritten range during ftruncate ext4: destroy ext4_fc_dentry_cachep kmemcache on module removal ext4: fix null-ptr-deref in '__ext4_journal_ensure_credits' ext4: don't use the orphan list when migrating an inode drm/radeon: fix error handling in radeon_driver_open_kms of: base: Improve argument length mismatch error firmware: Update Kconfig help text for Google firmware can: mcp251xfd: mcp251xfd_tef_obj_read(): fix typo in error message media: rcar-csi2: Optimize the selection PHTW register drm/vc4: hdmi: Make sure the device is powered with CEC media: correct MEDIA_TEST_SUPPORT help text Documentation: dmaengine: Correctly describe dmatest with channel unset Documentation: ACPI: Fix data node reference documentation Documentation: refer to config RANDOMIZE_BASE for kernel address-space randomization Documentation: fix firewire.rst ABI file path error Bluetooth: hci_sync: Fix not setting adv set duration scsi: core: Show SCMD_LAST in text form dmaengine: uniphier-xdmac: Fix type of address variables RDMA/hns: Modify the mapping attribute of doorbell to device RDMA/rxe: Fix a typo in opcode name dmaengine: stm32-mdma: fix STM32_MDMA_CTBR_TSEL_MASK Revert "net/mlx5: Add retry mechanism to the command entry index allocation" powerpc/cell: Fix clang -Wimplicit-fallthrough warning powerpc/fsl/dts: Enable WA for erratum A-009885 on fman3l MDIO buses block: Fix fsync always failed if once failed bpftool: Remove inclusion of utilities.mak from Makefiles xdp: check prog type before updating BPF link perf evsel: Override attr->sample_period for non-libpfm4 events ipv4: update fib_info_cnt under spinlock protection ipv4: avoid quadratic behavior in netns dismantle net/fsl: xgmac_mdio: Add workaround for erratum A-009885 net/fsl: xgmac_mdio: Fix incorrect iounmap when removing module parisc: pdc_stable: Fix memory leak in pdcs_register_pathentries f2fs: compress: fix potential deadlock of compress file f2fs: fix to reserve space for IO align feature af_unix: annote lockless accesses to unix_tot_inflight & gc_in_progress clk: Emit a stern warning with writable debugfs enabled clk: si5341: Fix clock HW provider cleanup net/smc: Fix hung_task when removing SMC-R devices net: axienet: increase reset timeout net: axienet: Wait for PhyRstCmplt after core reset net: axienet: reset core on initialization prior to MDIO access net: axienet: add missing memory barriers net: axienet: limit minimum TX ring size net: axienet: Fix TX ring slot available check net: axienet: fix number of TX ring slots for available check net: axienet: fix for TX busy handling net: axienet: increase default TX ring size to 128 HID: vivaldi: fix handling devices not using numbered reports rtc: pxa: fix null pointer dereference vdpa/mlx5: Fix wrong configuration of virtio_version_1_0 virtio_ring: mark ring unused on error taskstats: Cleanup the use of task->exit_code inet: frags: annotate races around fqdir->dead and fqdir->high_thresh netns: add schedule point in ops_exit_list() xfrm: Don't accidentally set RTO_ONLINK in decode_session4() gre: Don't accidentally set RTO_ONLINK in gre_fill_metadata_dst() libcxgb: Don't accidentally set RTO_ONLINK in cxgb_find_route() perf script: Fix hex dump character output dmaengine: at_xdmac: Don't start transactions at tx_submit level dmaengine: at_xdmac: Start transfer for cyclic channels in issue_pending dmaengine: at_xdmac: Print debug message after realeasing the lock dmaengine: at_xdmac: Fix concurrency over xfers_list dmaengine: at_xdmac: Fix lld view setting dmaengine: at_xdmac: Fix at_xdmac_lld struct definition perf probe: Fix ppc64 'perf probe add events failed' case devlink: Remove misleading internal_flags from health reporter dump arm64: dts: qcom: msm8996: drop not documented adreno properties net: bonding: fix bond_xmit_broadcast return value error bug net_sched: restore "mpu xxx" handling bcmgenet: add WOL IRQ check net: ethernet: mtk_eth_soc: fix error checking in mtk_mac_config() net: sfp: fix high power modules without diagnostic monitoring net: mscc: ocelot: fix using match before it is set dt-bindings: display: meson-dw-hdmi: add missing sound-name-prefix property dt-bindings: display: meson-vpu: Add missing amlogic,canvas property dt-bindings: watchdog: Require samsung,syscon-phandle for Exynos7 scripts/dtc: dtx_diff: remove broken example from help text lib82596: Fix IRQ check in sni_82596_probe mm/hmm.c: allow VM_MIXEDMAP to work with hmm_range_fault lib/test_meminit: destroy cache in kmem_cache_alloc_bulk() test mtd: nand: bbt: Fix corner case in bad block table handling ath10k: Fix the MTU size on QCA9377 SDIO scripts: sphinx-pre-install: add required ctex dependency scripts: sphinx-pre-install: Fix ctex support on Debian Linux 5.10.94 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I857f2417c899508815a1ba13d1285fd400a1f133	2022-01-27 11:49:22 +01:00
Leon Romanovsky	f6d4c0e017	devlink: Remove misleading internal_flags from health reporter dump commit e9538f8270db24d272659e15841854c7ea11119e upstream. DEVLINK_CMD_HEALTH_REPORTER_DUMP_GET command doesn't have .doit callback and has no use in internal_flags at all. Remove this misleading assignment. Fixes: `e44ef4e451` ("devlink: Hang reporter's dump method on a dumpit cb") Signed-off-by: Leon Romanovsky <leonro@nvidia.com> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-01-27 10:54:34 +01:00
Eric Dumazet	2b1415c60b	netns: add schedule point in ops_exit_list() commit 2836615aa22de55b8fca5e32fe1b27a67cda625e upstream. When under stress, cleanup_net() can have to dismantle netns in big numbers. ops_exit_list() currently calls many helpers [1] that have no schedule point, and we can end up with soft lockups, particularly on hosts with many cpus. Even for moderate amount of netns processed by cleanup_net() this patch avoids latency spikes. [1] Some of these helpers like fib_sync_up() and fib_sync_down_dev() are very slow because net/ipv4/fib_semantics.c uses host-wide hash tables, and ifindex is used as the only input of two hash functions. ifindexes tend to be the same for all netns (lo.ifindex==1 per instance) This will be fixed in a separate patch. Fixes: `72ad937abd` ("net: Add support for batching network namespace cleanups") Signed-off-by: Eric Dumazet <edumazet@google.com> Cc: Eric W. Biederman <ebiederm@xmission.com> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-01-27 10:54:33 +01:00
Toke Høiland-Jørgensen	58fa3e9002	xdp: check prog type before updating BPF link commit 382778edc8262b7535f00523e9eb22edba1b9816 upstream. The bpf_xdp_link_update() function didn't check the program type before updating the program, which made it possible to install any program type as an XDP program, which is obviously not good. Syzbot managed to trigger this by swapping in an LWT program on the XDP hook which would crash in a helper call. Fix this by adding a check and bailing out if the types don't match. Fixes: `026a4c28e1` ("bpf, xdp: Implement LINK_UPDATE for BPF XDP link") Reported-by: syzbot+983941aa85af6ded1fd9@syzkaller.appspotmail.com Acked-by: Andrii Nakryiko <andrii@kernel.org> Signed-off-by: Toke Høiland-Jørgensen <toke@redhat.com> Link: https://lore.kernel.org/r/20220107221115.326171-1-toke@redhat.com Signed-off-by: Alexei Starovoitov <ast@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-01-27 10:54:30 +01:00
Paolo Abeni	59f0363346	bpf: Do not WARN in bpf_warn_invalid_xdp_action() [ Upstream commit 2cbad989033bff0256675c38f96f5faab852af4b ] The WARN_ONCE() in bpf_warn_invalid_xdp_action() can be triggered by any bugged program, and even attaching a correct program to a NIC not supporting the given action. The resulting splat, beyond polluting the logs, fouls automated tools: e.g. a syzkaller reproducers using an XDP program returning an unsupported action will never pass validation. Replace the WARN_ONCE with a less intrusive pr_warn_once(). Signed-off-by: Paolo Abeni <pabeni@redhat.com> Signed-off-by: Daniel Borkmann <daniel@iogearbox.net> Acked-by: Toke Høiland-Jørgensen <toke@redhat.com> Link: https://lore.kernel.org/bpf/016ceec56e4817ebb2a9e35ce794d5c917df572c.1638189075.git.pabeni@redhat.com Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-01-27 10:54:16 +01:00
Antoine Tenart	443133330a	net-sysfs: update the queue counts in the unregistration path [ Upstream commit d7dac083414eb5bb99a6d2ed53dc2c1b405224e5 ] When updating Rx and Tx queue kobjects, the queue count should always be updated to match the queue kobjects count. This was not done in the net device unregistration path, fix it. Tracking all queue count updates will allow in a following up patch to detect illegal updates. Signed-off-by: Antoine Tenart <atenart@kernel.org> Signed-off-by: Jakub Kicinski <kuba@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-01-27 10:54:15 +01:00
Kuniyuki Iwashima	8772700a9f	bpf: Fix SO_RCVBUF/SO_SNDBUF handling in _bpf_setsockopt(). [ Upstream commit 04c350b1ae6bdb12b84009a4d0bf5ab4e621c47b ] The commit `4057765f2d` ("sock: consistent handling of extreme SO_SNDBUF/SO_RCVBUF values") added a change to prevent underflow in setsockopt() around SO_SNDBUF/SO_RCVBUF. This patch adds the same change to _bpf_setsockopt(). Fixes: `4057765f2d` ("sock: consistent handling of extreme SO_SNDBUF/SO_RCVBUF values") Signed-off-by: Kuniyuki Iwashima <kuniyu@amazon.co.jp> Signed-off-by: Alexei Starovoitov <ast@kernel.org> Link: https://lore.kernel.org/bpf/20220104013153.97906-2-kuniyu@amazon.co.jp Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-01-27 10:54:01 +01:00
Bui Quang Minh	445019bbca	UPSTREAM: bpf: Fix integer overflow in argument calculation for bpf_map_area_alloc commit 7dd5d437c258bbf4cc15b35229e5208b87b8b4e0 upstream. In 32-bit architecture, the result of sizeof() is a 32-bit integer so the expression becomes the multiplication between 2 32-bit integer which can potentially leads to integer overflow. As a result, bpf_map_area_alloc() allocates less memory than needed. Fix this by casting 1 operand to u64. Fixes: 0d2c4f964050 ("bpf: Eliminate rlimit-based memory accounting for sockmap and sockhash maps") Fixes: `99c51064fb` ("devmap: Use bpf_map_area_alloc() for allocating hash buckets") Fixes: `546ac1ffb7` ("bpf: add devmap, a map for storing net device references") Signed-off-by: Bui Quang Minh <minhquangbui99@gmail.com> Signed-off-by: Alexei Starovoitov <ast@kernel.org> Link: https://lore.kernel.org/bpf/20210613143440.71975-1-minhquangbui99@gmail.com Signed-off-by: Connor O'Brien <connoro@google.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Signed-off-by: Lee Jones <lee.jones@linaro.org> Change-Id: I9ce1991224a87eb39acf1da4923534e22380fc42	2022-01-26 09:16:43 +00:00
Greg Kroah-Hartman	92ab2aeca5	Revert "ANDROID: GKI: net: add vendor hooks for 'struct sock' lifecycle" This reverts commit `0ed7424fa0`. The hooks android_rvh_sk_alloc and android_rvh_sk_free are not used by any vendor, so remove them to help with merge issues with future LTS releases. If this is needed by any real user, it can easily be reverted to add it back and then the symbol should be added to the abi list at the same time to prevent it from being removed again later. Bug: 203756332 Bug: 171013716 Cc: Vignesh Saravanaperumal <vignesh1.s@samsung.com> Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I5fa860e75a0640bc02d1dffeb556497badd6f3bf	2022-01-21 13:11:10 +01:00
Greg Kroah-Hartman	d605f2f30d	This is the 5.10.91 stable release -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmHdk2cACgkQONu9yGCS aT7IjQ//aMMiTA9ZkadsBZtKRPaaBVpf0/lXqVrkugxxN8NYyCFajlKkPqcvlc5h 0/XLQE4IywvWwPnonAMnC+hfbMGhl8PIquVVpCxXzqxLlmGd9LlVt3+yNCUH0nTb 1PBnx6+cduc4CP52cZOmKDYfUa2HgowNtS4MviaiHFlq8MO9gGXTHMi3cyr+EOD8 5ZhYKmsIv7D1tqqB+AdYgR2c7C0N66nW64qL4blah4qSkbzEOH5hT16Q3uV1z3qa k4Up98oGyWZNU9MhX85jpU1Vhzfbc8XEuuKv8Bbqtoy8+1LnVTM7mvw9rFNOQAB8 7vsEKJGQvvhCkvcYCZNMkZg64+/Oe9F+L6CuzCuNKo/rYKddpFcwrOAa0PuERAz+ j8jrlFu9zu9PDJv8AV+tJ+7FMUpH+9cyJDCO6pcHVrKBmR9xsOtNbpLPU0lB6r8b alGqiQkVK5XG49IeQjFw3/H1POWAwJTCTD0KptQ00PWilWDoUYn7m2cH34EhEv48 riv7uTRE42KATNuamw9IXT7EfL3Ol/zY/lPNpldyLmdGqntqpZFOquy7B82UmpUx dKlLmd/O2wHleBXg+V0H2Okwu7+1FhWWPaocMuWm9FKqoDjz7WI+3bUswkVVJK0f z0XNdtumAPnWjH3idKDUWyb7aSIPGlTHmJlV9Zxm3YIzR7SAb2U= =0C8M -----END PGP SIGNATURE----- Merge 5.10.91 into android12-5.10-lts Changes in 5.10.91 f2fs: quota: fix potential deadlock selftests: x86: fix [-Wstringop-overread] warn in test_process_vm_readv() tracing: Fix check for trace_percpu_buffer validity in get_trace_buf() tracing: Tag trace_percpu_buffer as a percpu pointer ieee802154: atusb: fix uninit value in atusb_set_extended_addr i40e: Fix to not show opcode msg on unsuccessful VF MAC change iavf: Fix limit of total number of queues to active queues of VF RDMA/core: Don't infoleak GRH fields netrom: fix copying in user data in nr_setsockopt RDMA/uverbs: Check for null return of kmalloc_array mac80211: initialize variable have_higher_than_11mbit sfc: The RX page_ring is optional i40e: fix use-after-free in i40e_sync_filters_subtask() i40e: Fix for displaying message regarding NVM version i40e: Fix incorrect netdev's real number of RX/TX queues ftrace/samples: Add missing prototypes direct functions ipv4: Check attribute length for RTA_GATEWAY in multipath route ipv4: Check attribute length for RTA_FLOW in multipath route ipv6: Check attribute length for RTA_GATEWAY in multipath route ipv6: Check attribute length for RTA_GATEWAY when deleting multipath route lwtunnel: Validate RTA_ENCAP_TYPE attribute length batman-adv: mcast: don't send link-local multicast to mcast routers sch_qfq: prevent shift-out-of-bounds in qfq_init_qdisc net: ena: Fix undefined state when tx request id is out of bounds net: ena: Fix error handling when calculating max IO queues number xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate power: supply: core: Break capacity loop power: reset: ltc2952: Fix use of floating point literals rndis_host: support Hytera digital radios phonet: refcount leak in pep_sock_accep power: bq25890: Enable continuous conversion for ADC at charging ipv6: Continue processing multipath route even if gateway attribute is invalid ipv6: Do cleanup if attribute validation fails in multipath route usb: mtu3: fix interval value for intr and isoc scsi: libiscsi: Fix UAF in iscsi_conn_get_param()/iscsi_conn_teardown() ip6_vti: initialize __ip6_tnl_parm struct in vti6_siocdevprivate net: udp: fix alignment problem in udp4_seq_show() atlantic: Fix buff_ring OOB in aq_ring_rx_clean mISDN: change function names to avoid conflicts drm/amd/display: Added power down for DCN10 ipv6: raw: check passed optlen before reading ARM: dts: gpio-ranges property is now required Input: zinitix - make sure the IRQ is allocated before it gets enabled Linux 5.10.91 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: Iea6f28f738081085f9c5df020ebdee6583b38dfb	2022-01-11 15:46:18 +01:00
David Ahern	f403b5f96e	lwtunnel: Validate RTA_ENCAP_TYPE attribute length commit 8bda81a4d400cf8a72e554012f0d8c45e07a3904 upstream. lwtunnel_valid_encap_type_attr is used to validate encap attributes within a multipath route. Add length validation checking to the type. lwtunnel_valid_encap_type_attr is called converting attributes to fib{6,}_config struct which means it is used before fib_get_nhs, ip6_route_multipath_add, and ip6_route_multipath_del - other locations that use rtnh_ok and then nla_get_u16 on RTA_ENCAP_TYPE attribute. Fixes: `9ed59592e3` ("lwtunnel: fix autoload of lwt modules") Signed-off-by: David Ahern <dsahern@kernel.org> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-01-11 15:25:00 +01:00
Greg Kroah-Hartman	ba13eb1927	This is the 5.10.88 stable release -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmHC4kgACgkQONu9yGCS aT4l7w/8Da5EworPQ45NW5oEnNDU+tVjVft6yLyEjNhqe7/dXgden9MIhXl/rd38 vIWHWxdR3g+h2aEBuQSFhkCYLgaiO822DWqx8XkK9F1EJWbypycb6IP/XVy7QqbX TyUakCg1hN0TcZ9qhkugRMqAmzt5X4K+R6LtvlfQT2GAlEchSzyAl0tvS594Oxi7 tMo6SQfAdD+IWwg72t80odMANcoX7GIcv2Kn4UA+c8eDEdiD5MZQTbz6Xi28hKiE zN+GQ4wFgt0/+sWiKEGPW7hcs2hnIU/dEwmgim+mgQyMSx+d1EFNNPsOaXyuLAaE MLhhgyOn6ZYfAI6+2A3xDw6hnvHWT1xCDxfgfDhz24sHSQY5K96pFAB3DXsKm0nC LtpHZopqJ9T0t1JkPpHCqoXXmEZmvHUlYVWwvQAwDBbqEkJ/i/w9QTlSDDP1+K6r CLhGWo9titrpcpRLnbcrweXgjuiI13Rz5mlgKCafE/jEtR5jzZ2neBvTepzuGVrY OW6jVmOXmVQEl9O73uWUvTizyUq+nl78R1lr9Xva0SpX/OXKKfO3q2w36tTQNyf+ /g7+sgTJcLax1eZh0n17xiKzQYzwn5FMYPhzUF6fc0Rrz1CUCt1nCjq28hMqG32v dOFYqU/CrfFMKfR0YiKI7tpSba8QNP8f0Ig+KzDE2dKA+Lty1kw= =fpH+ -----END PGP SIGNATURE----- Merge 5.10.88 into android12-5.10-lts Changes in 5.10.88 KVM: selftests: Make sure kvm_create_max_vcpus test won't hit RLIMIT_NOFILE KVM: downgrade two BUG_ONs to WARN_ON_ONCE mac80211: fix regression in SSN handling of addba tx mac80211: mark TX-during-stop for TX in in_reconfig mac80211: send ADDBA requests using the tid/queue of the aggregation session mac80211: validate extended element ID is present firmware: arm_scpi: Fix string overflow in SCPI genpd driver bpf: Fix signed bounds propagation after mov32 bpf: Make 32->64 bounds propagation slightly more robust bpf, selftests: Add test case trying to taint map value pointer virtio_ring: Fix querying of maximum DMA mapping size for virtio device vdpa: check that offsets are within bounds recordmcount.pl: look for jgnop instruction as well as bcrl on s390 dm btree remove: fix use after free in rebalance_children() audit: improve robustness of the audit queue handling arm64: dts: imx8m: correct assigned clocks for FEC arm64: dts: imx8mp-evk: Improve the Ethernet PHY description arm64: dts: rockchip: remove mmc-hs400-enhanced-strobe from rk3399-khadas-edge arm64: dts: rockchip: fix rk3308-roc-cc vcc-sd supply arm64: dts: rockchip: fix rk3399-leez-p710 vcc3v3-lan supply arm64: dts: rockchip: fix audio-supply for Rock Pi 4 mac80211: track only QoS data frames for admission control tee: amdtee: fix an IS_ERR() vs NULL bug ceph: fix duplicate increment of opened_inodes metric ceph: initialize pathlen variable in reconnect_caps_cb ARM: socfpga: dts: fix qspi node compatible clk: Don't parent clks until the parent is fully registered soc: imx: Register SoC device only on i.MX boards virtio/vsock: fix the transport to work with VMADDR_CID_ANY selftests: net: Correct ping6 expected rc from 2 to 1 s390/kexec_file: fix error handling when applying relocations sch_cake: do not call cake_destroy() from cake_init() inet_diag: fix kernel-infoleak for UDP sockets net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg selftests: Add duplicate config only for MD5 VRF tests selftests: Fix raw socket bind tests with VRF selftests: Fix IPv6 address bind tests dmaengine: st_fdma: fix MODULE_ALIAS net/sched: sch_ets: don't remove idle classes from the round-robin list selftest/net/forwarding: declare NETIFS p9 p10 drm/ast: potential dereference of null pointer mac80211: agg-tx: don't schedule_and_wake_txq() under sta->lock mac80211: fix lookup when adding AddBA extension element flow_offload: return EOPNOTSUPP for the unsupported mpls action type rds: memory leak in __rds_conn_create() drm/amd/pm: fix a potential gpu_metrics_table memory leak mptcp: clear 'kern' flag from fallback sockets soc/tegra: fuse: Fix bitwise vs. logical OR warning igb: Fix removal of unicast MAC filters of VFs igbvf: fix double free in `igbvf_probe` igc: Fix typo in i225 LTR functions ixgbe: Document how to enable NBASE-T support ixgbe: set X550 MDIO speed before talking to PHY netdevsim: Zero-initialize memory for new map's value in function nsim_bpf_map_alloc net/packet: rx_owner_map depends on pg_vec sfc_ef100: potential dereference of null pointer net: Fix double 0x prefix print in SKB dump net/smc: Prevent smc_release() from long blocking net: systemport: Add global locking for descriptor lifecycle sit: do not call ipip6_dev_free() from sit_init_net() bpf, selftests: Fix racing issue in btf_skc_cls_ingress test powerpc/85xx: Fix oops when CONFIG_FSL_PMC=n USB: gadget: bRequestType is a bitfield, not a enum Revert "usb: early: convert to readl_poll_timeout_atomic()" KVM: x86: Drop guest CPUID check for host initiated writes to MSR_IA32_PERF_CAPABILITIES tty: n_hdlc: make n_hdlc_tty_wakeup() asynchronous USB: NO_LPM quirk Lenovo USB-C to Ethernet Adapher(RTL8153-04) usb: dwc2: fix STM ID/VBUS detection startup delay in dwc2_driver_probe PCI/MSI: Clear PCI_MSIX_FLAGS_MASKALL on error PCI/MSI: Mask MSI-X vectors only on success usb: xhci: Extend support for runtime power management for AMD's Yellow carp. USB: serial: cp210x: fix CP2105 GPIO registration USB: serial: option: add Telit FN990 compositions btrfs: fix memory leak in __add_inode_ref() btrfs: fix double free of anon_dev after failure to create subvolume zonefs: add MODULE_ALIAS_FS iocost: Fix divide-by-zero on donation from low hweight cgroup serial: 8250_fintek: Fix garbled text for console timekeeping: Really make sure wall_to_monotonic isn't positive libata: if T_LENGTH is zero, dma direction should be DMA_NONE drm/amdgpu: correct register access for RLC_JUMP_TABLE_RESTORE Input: touchscreen - avoid bitwise vs logical OR warning ARM: dts: imx6ull-pinfunc: Fix CSI_DATA07__ESAI_TX0 pad name xsk: Do not sleep in poll() when need_wakeup set media: mxl111sf: change mutex_init() location fuse: annotate lock in fuse_reverse_inval_entry() ovl: fix warning in ovl_create_real() scsi: scsi_debug: Don't call kcalloc() if size arg is zero scsi: scsi_debug: Fix type in min_t to avoid stack OOB scsi: scsi_debug: Sanity check block descriptor length in resp_mode_select() rcu: Mark accesses to rcu_state.n_force_qs bus: ti-sysc: Fix variable set but not used warning for reinit_modules Revert "xsk: Do not sleep in poll() when need_wakeup set" xen/blkfront: harden blkfront against event channel storms xen/netfront: harden netfront against event channel storms xen/console: harden hvc_xen against event channel storms xen/netback: fix rx queue stall detection xen/netback: don't queue unlimited number of packages Linux 5.10.88 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: Ie9143ca88b59cd27f4b2101e83e25017a5565c6a	2021-12-22 10:12:32 +01:00
Gal Pressman	337bb7bf7c	net: Fix double 0x prefix print in SKB dump [ Upstream commit 8a03ef676ade55182f9b05115763aeda6dc08159 ] When printing netdev features %pNF already takes care of the 0x prefix, remove the explicit one. Fixes: `6413139dfc` ("skbuff: increase verbosity when dumping skb data") Signed-off-by: Gal Pressman <gal@nvidia.com> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Sasha Levin <sashal@kernel.org>	2021-12-22 09:30:55 +01:00
Greg Kroah-Hartman	c4d08791d9	This is the 5.10.87 stable release -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmG8WHUACgkQONu9yGCS aT524A/9GF91x8mh19+Ctbw+/wt+bfVLBzapAnqucOkoXmMR7Vd68DidaYud/Dgb 851d5HSjCjpFPgXp0iXMuT3sj7zfBh6a1UZ7YyH9BP3COoR8QTUh2pV6SB0bjSfn 0zPSNFKvh6HtASQZUqUvX1bAucKXBo8gKafQCHNdd0SRIXVeAIhM0IP3RMPET90M 9Z/kRFccX2iNLLNQbN4XtRrfkhyfEA0FpvKQRSngaN4DoJIqMHxH+WVhwbpxkKWA H+EABClIs74GIPa/x6UXXA5+dwKLkE0BtdDtwmnHq/ONw5BtH1zf4MEIbFS/gpy+ lcJMYLvDd8n4ebHB9yyZN76owOf2SzNu9jrZpU/kIveF0sV2NspAyolv+U+ExBDG K+2WGkM7dkD2IK8lqqYGLYBlyjmlVioaUitn0nnwcUVq5zZOOxXxnz0vIMJL2k/l tYvqTB2Uv48F3Jzsl8cnJIEJDcQSXI7IPsS4yvsMFYdCvSiDcClPbsiMZEOfS0vE CPgF+HM2g24Cdy2FTe7jQOQAB3UjwQiGwlWaQl+IUWsi69wIG8JkmjckPXWHamoc 2J4gccQnGf73FS31n96NimXppPgoL1kHdZD+jUa0ZOaJmJrItz+ItHvlKHs+MJ4f W9Ryg1PiRU6WrtIqsmRx/h01U+joBfcbevpQT8FvAOtPHQtop3Q= =36vv -----END PGP SIGNATURE----- Merge 5.10.87 into android12-5.10-lts Changes in 5.10.87 nfc: fix segfault in nfc_genl_dump_devices_done drm/msm/dsi: set default num_data_lanes KVM: arm64: Save PSTATE early on exit s390/test_unwind: use raw opcode instead of invalid instruction Revert "tty: serial: fsl_lpuart: drop earlycon entry for i.MX8QXP" net/mlx4_en: Update reported link modes for 1/10G ALSA: hda: Add Intel DG2 PCI ID and HDMI codec vid ALSA: hda/hdmi: fix HDA codec entry table order for ADL-P parisc/agp: Annotate parisc agp init functions with __init i2c: rk3x: Handle a spurious start completion interrupt flag net: netlink: af_netlink: Prevent empty skb by adding a check on len. drm/amd/display: Fix for the no Audio bug with Tiled Displays drm/amd/display: add connector type check for CRC source set tracing: Fix a kmemleak false positive in tracing_map KVM: x86: Ignore sparse banks size for an "all CPUs", non-sparse IPI req staging: most: dim2: use device release method bpf: Fix integer overflow in argument calculation for bpf_map_area_alloc fuse: make sure reclaim doesn't write the inode hwmon: (dell-smm) Fix warning on /proc/i8k creation error ethtool: do not perform operations on net devices being unregistered perf inject: Fix itrace space allowed for new attributes perf intel-pt: Fix some PGE (packet generation enable/control flow packets) usage perf intel-pt: Fix sync state when a PSB (synchronization) packet is found perf intel-pt: Fix intel_pt_fup_event() assumptions about setting state type perf intel-pt: Fix state setting when receiving overflow (OVF) packet perf intel-pt: Fix next 'err' value, walking trace perf intel-pt: Fix missing 'instruction' events with 'q' option perf intel-pt: Fix error timestamp setting on the decoder error path memblock: free_unused_memmap: use pageblock units instead of MAX_ORDER memblock: align freed memory map on pageblock boundaries with SPARSEMEM memblock: ensure there is no overflow in memblock_overlaps_region() arm: extend pfn_valid to take into account freed memory map alignment arm: ioremap: don't abuse pfn_valid() to check if pfn is in RAM Linux 5.10.87 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I56719d03237a8607e6cc0bc357421d0b4a479084	2021-12-17 14:04:19 +01:00
Bui Quang Minh	613725436e	bpf: Fix integer overflow in argument calculation for bpf_map_area_alloc commit 7dd5d437c258bbf4cc15b35229e5208b87b8b4e0 upstream. In 32-bit architecture, the result of sizeof() is a 32-bit integer so the expression becomes the multiplication between 2 32-bit integer which can potentially leads to integer overflow. As a result, bpf_map_area_alloc() allocates less memory than needed. Fix this by casting 1 operand to u64. Fixes: 0d2c4f964050 ("bpf: Eliminate rlimit-based memory accounting for sockmap and sockhash maps") Fixes: `99c51064fb` ("devmap: Use bpf_map_area_alloc() for allocating hash buckets") Fixes: `546ac1ffb7` ("bpf: add devmap, a map for storing net device references") Signed-off-by: Bui Quang Minh <minhquangbui99@gmail.com> Signed-off-by: Alexei Starovoitov <ast@kernel.org> Link: https://lore.kernel.org/bpf/20210613143440.71975-1-minhquangbui99@gmail.com Signed-off-by: Connor O'Brien <connoro@google.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2021-12-17 10:14:41 +01:00
Greg Kroah-Hartman	afc997898e	This is the 5.10.85 stable release -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmG4cugACgkQONu9yGCS aT4+uxAAiLJvOIA6ElsmMq2c3pNu9UDPh58j1FlmhggAxr7baIvR1UuEZURTSLW9 pnu+r9bHkhJGBOpANfPJAQZqv+JtCi3crMhw0mwHJ0Mls3TNSmclzB1+jGM4w93E cT+5hoDeQqwZwpKYvWI7u9UGEE0BXluVTRCvmuncaJ8wGbxnDgV0AEXe32XDlFxB kSLAXO1FFn8Z1yMg9BMVURU9IAszdwCIhqbcNWnPunOPowdHDWBJdF7eSZUqmJfq TMyFgm6c6ENbBrwYt+9qf+1oS/D9r6TEjwaFoRJ4ApWSAD4iKV7U6dA0rxm9mrMl nSAxNXuSXXYszoYjrxPPRGhCY/URahs1Vmju1WK//4vz3brxk5N88T+2nN7PMYKn bIHGTl9SadlrHvi/OBqOvbsNMHX+ln/V/y7ct0fsxXeNBHYXdXCtimRDvtsj9kmp HO9OLXVsF6DUM22ODW28Vxt7HGN3XQzs0y2jwfzdMV81p3oEqP9wWQITwG2LVVAE WdkvQ/3ugdkR9F15Vp0cjkbJQLN4UbYUJW5K7SZTW013TgsYyIHQrP5qj9xvfwNt KdILXVMH2JqPXAkRqmFqIeNIUX2oevWwpgV/SwqIj3T5ytmXPluZsaMlGg5xZ401 Xuhp0LPU6rl+wcCt1bInZvn8nrTVDADpao7xTbSyoel5TAunVrk= =u1Am -----END PGP SIGNATURE----- Merge 5.10.85 into android12-5.10-lts Changes in 5.10.85 usb: gadget: uvc: fix multiple opens gcc-plugins: simplify GCC plugin-dev capability test gcc-plugins: fix gcc 11 indigestion with plugins... HID: quirks: Add quirk for the Microsoft Surface 3 type-cover HID: google: add eel USB id HID: add hid_is_usb() function to make it simpler for USB detection HID: add USB_HID dependancy to hid-prodikeys HID: add USB_HID dependancy to hid-chicony HID: add USB_HID dependancy on some USB HID drivers HID: bigbenff: prevent null pointer dereference HID: wacom: fix problems when device is not a valid USB device HID: check for valid USB device for many HID drivers nft_set_pipapo: Fix bucket load in AVX2 lookup routine for six 8-bit groups IB/hfi1: Insure use of smp_processor_id() is preempt disabled IB/hfi1: Fix early init panic IB/hfi1: Fix leak of rcvhdrtail_dummy_kvaddr can: kvaser_usb: get CAN clock frequency from device can: kvaser_pciefd: kvaser_pciefd_rx_error_frame(): increase correct stats->{rx,tx}_errors counter can: sja1000: fix use after free in ems_pcmcia_add_card() x86/sme: Explicitly map new EFI memmap table as encrypted drm/amd/amdkfd: adjust dummy functions' placement drm/amdkfd: separate kfd_iommu_resume from kfd_resume drm/amdgpu: add amdgpu_amdkfd_resume_iommu drm/amdgpu: move iommu_resume before ip init/resume drm/amdgpu: init iommu after amdkfd device init drm/amdkfd: fix boot failure when iommu is disabled in Picasso. nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done selftests: netfilter: add a vrf+conntrack testcase vrf: don't run conntrack on vrf with !dflt qdisc bpf, x86: Fix "no previous prototype" warning bpf: Fix the off-by-two error in range markings ice: ignore dropped packets during init bonding: make tx_rebalance_counter an atomic nfp: Fix memory leak in nfp_cpp_area_cache_add() seg6: fix the iif in the IPv6 socket control block udp: using datalen to cap max gso segments netfilter: conntrack: annotate data-races around ct->timeout iavf: restore MSI state on reset iavf: Fix reporting when setting descriptor count IB/hfi1: Correct guard on eager buffer deallocation devlink: fix netns refcount leak in devlink_nl_cmd_reload() net/sched: fq_pie: prevent dismantle issue KVM: x86: Wait for IPIs to be delivered when handling Hyper-V TLB flush hypercall mm: bdi: initialize bdi_min_ratio when bdi is unregistered ALSA: ctl: Fix copy of updated id with element read/write ALSA: hda/realtek - Add headset Mic support for Lenovo ALC897 platform ALSA: hda/realtek: Fix quirk for TongFang PHxTxX1 ALSA: pcm: oss: Fix negative period/buffer sizes ALSA: pcm: oss: Limit the period size to 16MB ALSA: pcm: oss: Handle missing errors in snd_pcm_oss_change_params*() scsi: qla2xxx: Format log strings only if needed btrfs: clear extent buffer uptodate when we fail to write it btrfs: replace the BUG_ON in btrfs_del_root_ref with proper error handling md: fix update super 1.0 on rdev size change nfsd: fix use-after-free due to delegation race nfsd: Fix nsfd startup race (again) tracefs: Have new files inherit the ownership of their parent mmc: renesas_sdhi: initialize variable properly when tuning clk: qcom: regmap-mux: fix parent clock lookup drm/syncobj: Deal with signalled fences in drm_syncobj_find_fence. can: pch_can: pch_can_rx_normal: fix use after free can: m_can: Disable and ignore ELO interrupt libata: add horkage for ASMedia 1092 wait: add wake_up_pollfree() binder: use wake_up_pollfree() signalfd: use wake_up_pollfree() aio: keep poll requests on waitqueue until completed aio: fix use-after-free due to missing POLLFREE handling net: mvpp2: fix XDP rx queues registering tracefs: Set all files to the same group ownership as the mount option block: fix ioprio_get(IOPRIO_WHO_PGRP) vs setuid(2) scsi: pm80xx: Do not call scsi_remove_host() in pm8001_alloc() scsi: scsi_debug: Fix buffer size of REPORT ZONES command qede: validate non LSO skb length PM: runtime: Fix pm_runtime_active() kerneldoc comment ASoC: rt5682: Fix crash due to out of scope stack vars ASoC: qdsp6: q6routing: Fix return value from msm_routing_put_audio_mixer ASoC: codecs: wsa881x: fix return values from kcontrol put ASoC: codecs: wcd934x: handle channel mappping list correctly ASoC: codecs: wcd934x: return correct value from mixer put RDMA/hns: Do not halt commands during reset until later RDMA/hns: Do not destroy QP resources in the hw resetting phase clk: imx: use module_platform_driver i40e: Fix failed opcode appearing if handling messages from VF i40e: Fix pre-set max number of queues for VF mtd: rawnand: fsmc: Take instruction delay into account mtd: rawnand: fsmc: Fix timing computation i40e: Fix NULL pointer dereference in i40e_dbg_dump_desc Revert "PCI: aardvark: Fix support for PCI_ROM_ADDRESS1 on emulated bridge" perf tools: Fix SMT detection fast read path Documentation/locking/locktypes: Update migrate_disable() bits. dt-bindings: net: Reintroduce PHY no lane swap binding tools build: Remove needless libpython-version feature check that breaks test-all fast path net: cdc_ncm: Allow for dwNtbOutMaxSize to be unset or zero net: altera: set a couple error code in probe() net: fec: only clear interrupt of handling queue in fec_enet_rx_queue() net, neigh: clear whole pneigh_entry at alloc time net/qla3xxx: fix an error code in ql_adapter_up() selftests/fib_tests: Rework fib_rp_filter_test() USB: gadget: detect too-big endpoint 0 requests USB: gadget: zero allocate endpoint 0 buffers usb: core: config: fix validation of wMaxPacketValue entries xhci: Remove CONFIG_USB_DEFAULT_PERSIST to prevent xHCI from runtime suspending usb: core: config: using bit mask instead of individual bits xhci: avoid race between disable slot command and host runtime suspend iio: gyro: adxrs290: fix data signedness iio: trigger: Fix reference counting iio: trigger: stm32-timer: fix MODULE_ALIAS iio: stk3310: Don't return error code in interrupt handler iio: mma8452: Fix trigger reference couting iio: ltr501: Don't return error code in trigger handler iio: kxsd9: Don't return error code in trigger handler iio: itg3200: Call iio_trigger_notify_done() on error iio: dln2-adc: Fix lockdep complaint iio: dln2: Check return value of devm_iio_trigger_register() iio: at91-sama5d2: Fix incorrect sign extension iio: adc: stm32: fix a current leak by resetting pcsel before disabling vdda iio: adc: axp20x_adc: fix charging current reporting on AXP22x iio: ad7768-1: Call iio_trigger_notify_done() on error iio: accel: kxcjk-1013: Fix possible memory leak in probe and remove csky: fix typo of fpu config macro irqchip/aspeed-scu: Replace update_bits with write_bits. irqchip/armada-370-xp: Fix return value of armada_370_xp_msi_alloc() irqchip/armada-370-xp: Fix support for Multi-MSI interrupts irqchip/irq-gic-v3-its.c: Force synchronisation when issuing INVALL irqchip: nvic: Fix offset for Interrupt Priority Offsets misc: fastrpc: fix improper packet size calculation bpf: Add selftests to cover packet access corner cases kbuild: simplify GCC_PLUGINS enablement in dummy-tools/gcc doc: gcc-plugins: update gcc-plugins.rst MAINTAINERS: adjust GCC PLUGINS after gcc-plugin.sh removal Documentation/Kbuild: Remove references to gcc-plugin.sh Linux 5.10.85 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I351da1b00f30a370b021125180a48b1c1ecb97ce	2021-12-14 15:11:46 +01:00
Eric Dumazet	5e663bcd9a	net, neigh: clear whole pneigh_entry at alloc time commit e195e9b5dee6459d8c8e6a314cc71a644a0537fd upstream. Commit 2c611ad97a82 ("net, neigh: Extend neigh->flags to 32 bit to allow for extensions") enables a new KMSAM warning [1] I think the bug is actually older, because the following intruction only occurred if ndm->ndm_flags had NTF_PROXY set. pn->flags = ndm->ndm_flags; Let's clear all pneigh_entry fields at alloc time. [1] BUG: KMSAN: uninit-value in pneigh_fill_info+0x986/0xb30 net/core/neighbour.c:2593 pneigh_fill_info+0x986/0xb30 net/core/neighbour.c:2593 pneigh_dump_table net/core/neighbour.c:2715 [inline] neigh_dump_info+0x1e3f/0x2c60 net/core/neighbour.c:2832 netlink_dump+0xaca/0x16a0 net/netlink/af_netlink.c:2265 __netlink_dump_start+0xd1c/0xee0 net/netlink/af_netlink.c:2370 netlink_dump_start include/linux/netlink.h:254 [inline] rtnetlink_rcv_msg+0x181b/0x18c0 net/core/rtnetlink.c:5534 netlink_rcv_skb+0x447/0x800 net/netlink/af_netlink.c:2491 rtnetlink_rcv+0x50/0x60 net/core/rtnetlink.c:5589 netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline] netlink_unicast+0x1095/0x1360 net/netlink/af_netlink.c:1345 netlink_sendmsg+0x16f3/0x1870 net/netlink/af_netlink.c:1916 sock_sendmsg_nosec net/socket.c:704 [inline] sock_sendmsg net/socket.c:724 [inline] sock_write_iter+0x594/0x690 net/socket.c:1057 call_write_iter include/linux/fs.h:2162 [inline] new_sync_write fs/read_write.c:503 [inline] vfs_write+0x1318/0x2030 fs/read_write.c:590 ksys_write+0x28c/0x520 fs/read_write.c:643 __do_sys_write fs/read_write.c:655 [inline] __se_sys_write fs/read_write.c:652 [inline] __x64_sys_write+0xdb/0x120 fs/read_write.c:652 do_syscall_x64 arch/x86/entry/common.c:51 [inline] do_syscall_64+0x54/0xd0 arch/x86/entry/common.c:82 entry_SYSCALL_64_after_hwframe+0x44/0xae Uninit was created at: slab_post_alloc_hook mm/slab.h:524 [inline] slab_alloc_node mm/slub.c:3251 [inline] slab_alloc mm/slub.c:3259 [inline] __kmalloc+0xc3c/0x12d0 mm/slub.c:4437 kmalloc include/linux/slab.h:595 [inline] pneigh_lookup+0x60f/0xd70 net/core/neighbour.c:766 arp_req_set_public net/ipv4/arp.c:1016 [inline] arp_req_set+0x430/0x10a0 net/ipv4/arp.c:1032 arp_ioctl+0x8d4/0xb60 net/ipv4/arp.c:1232 inet_ioctl+0x4ef/0x820 net/ipv4/af_inet.c:947 sock_do_ioctl net/socket.c:1118 [inline] sock_ioctl+0xa3f/0x13e0 net/socket.c:1235 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:874 [inline] __se_sys_ioctl+0x2df/0x4a0 fs/ioctl.c:860 __x64_sys_ioctl+0xd8/0x110 fs/ioctl.c:860 do_syscall_x64 arch/x86/entry/common.c:51 [inline] do_syscall_64+0x54/0xd0 arch/x86/entry/common.c:82 entry_SYSCALL_64_after_hwframe+0x44/0xae CPU: 1 PID: 20001 Comm: syz-executor.0 Not tainted 5.16.0-rc3-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Fixes: `62dd93181a` ("[IPV6] NDISC: Set per-entry is_router flag in Proxy NA.") Signed-off-by: Eric Dumazet <edumazet@google.com> Cc: Roopa Prabhu <roopa@nvidia.com> Reviewed-by: David Ahern <dsahern@kernel.org> Link: https://lore.kernel.org/r/20211206165329.1049835-1-eric.dumazet@gmail.com Signed-off-by: Jakub Kicinski <kuba@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2021-12-14 11:32:43 +01:00
Eric Dumazet	4b7e90672a	devlink: fix netns refcount leak in devlink_nl_cmd_reload() commit 4dbb0dad8e63fcd0b5a117c2861d2abe7ff5f186 upstream. While preparing my patch series adding netns refcount tracking, I spotted bugs in devlink_nl_cmd_reload() Some error paths forgot to release a refcount on a netns. To fix this, we can reduce the scope of get_net()/put_net() section around the call to devlink_reload(). Fixes: `ccdf07219d` ("devlink: Add reload action option to devlink reload command") Fixes: `dc64cc7c63` ("devlink: Add devlink reload limit option") Signed-off-by: Eric Dumazet <edumazet@google.com> Cc: Moshe Shemesh <moshe@mellanox.com> Cc: Jacob Keller <jacob.e.keller@intel.com> Cc: Jiri Pirko <jiri@nvidia.com> Reviewed-by: Leon Romanovsky <leonro@nvidia.com> Link: https://lore.kernel.org/r/20211205192822.1741045-1-eric.dumazet@gmail.com Signed-off-by: Jakub Kicinski <kuba@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2021-12-14 11:32:37 +01:00
Greg Kroah-Hartman	1b71a028a2	This is the 5.10.84 stable release -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmGwZtwACgkQONu9yGCS aT7dQhAAjnlFKkXb+omHKQNkSHbD0ynEkxwtQfNFt1kcWcpJy5Df9xyNXQBohnqr Y0KUowpVF8gkXOelbdMrK5P6k28SpT2k+UMnUtZLNR6qMNlOY371BDasfi/dqWWR 1JdLtQe6JVvwxo+6INRqEO27Ocyc1PbLZSo7i3Ik2+7mIRjN7+k1apFG0HOLEHIP 3oMWDgnyQp3gTBvTFG0Vrd4f9AwrHq4JoVrhruNLqIYajlQ8dPPjuJ9alTifRddD eWY10Z21jAFib4WHgy6wXBVv3L5Np19liYMzv02o5pzFV1nLJCnKDA79jV7a2i2H lVmVpcWG0Yagyu8MW0hmOewqPXpAJH/C8g75mXeja546vCnvccNx1OXNOR4ux5Es IpEFAV+DnjSYgu88Cw6kF8j/B9x1n90sgywCWbRwAMJ1zX9/tvvLWSe8HpfZ2jvo Iuw6XDTL84DDuHY4yiK2fofxZvXp+Hk+c0Betu6GoQvoGaDRD8IWIceDWgiqy+V7 fOrLitl8lbk1yjD7bDZMpEIgzQaaxJu6d+YWzy+PibZxQzOKHPC5gqEmajJd7ZWm OJ48SrNxyfjRZP/3NBgXOxje3lz3WkCdiPQrSQOQxoe+kdW5ZFuXDapWSO4dZfSe 6XPOD/d+KVLNDQby3WnVB2MMlufHFnCs4wPgb13jfyiEbxifp+A= =D40k -----END PGP SIGNATURE----- Merge 5.10.84 into android12-5.10-lts Changes in 5.10.84 NFSv42: Fix pagecache invalidation after COPY/CLONE can: j1939: j1939_tp_cmd_recv(): check the dst address of TP.CM_BAM ovl: simplify file splice ovl: fix deadlock in splice write gfs2: release iopen glock early in evict gfs2: Fix length of holes reported at end-of-file powerpc/pseries/ddw: Revert "Extend upper limit for huge DMA window for persistent memory" drm/sun4i: fix unmet dependency on RESET_CONTROLLER for PHY_SUN6I_MIPI_DPHY mac80211: do not access the IV when it was stripped net/smc: Transfer remaining wait queue entries during fallback atlantic: Fix OOB read and write in hw_atl_utils_fw_rpc_wait net: return correct error code platform/x86: thinkpad_acpi: Add support for dual fan control platform/x86: thinkpad_acpi: Fix WWAN device disabled issue after S3 deep s390/setup: avoid using memblock_enforce_memory_limit btrfs: check-integrity: fix a warning on write caching disabled disk thermal: core: Reset previous low and high trip during thermal zone init scsi: iscsi: Unblock session then wake up error handler drm/amd/amdkfd: Fix kernel panic when reset failed and been triggered again drm/amd/amdgpu: fix potential memleak ata: ahci: Add Green Sardine vendor ID as board_ahci_mobile ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port() ipv6: check return value of ipv6_skip_exthdr net: tulip: de4x5: fix the problem that the array 'lp->phy[8]' may be out of bound net: ethernet: dec: tulip: de4x5: fix possible array overflows in type3_infoblock() perf inject: Fix ARM SPE handling perf hist: Fix memory leak of a perf_hpp_fmt perf report: Fix memory leaks around perf_tip() net/smc: Avoid warning of possible recursive locking ACPI: Add stubs for wakeup handler functions vrf: Reset IPCB/IP6CB when processing outbound pkts in vrf dev xmit kprobes: Limit max data_size of the kretprobe instances rt2x00: do not mark device gone on EPROTO errors during start ipmi: Move remove_work to dedicated workqueue cpufreq: Fix get_cpu_device() failure in add_cpu_dev_symlink() s390/pci: move pseudo-MMIO to prevent MIO overlap fget: check that the fd still exists after getting a ref to it sata_fsl: fix UAF in sata_fsl_port_stop when rmmod sata_fsl sata_fsl: fix warning in remove_proc_entry when rmmod sata_fsl ipv6: fix memory leak in fib6_rule_suppress drm/amd/display: Allow DSC on supported MST branch devices KVM: Disallow user memslot with size that exceeds "unsigned long" KVM: nVMX: Flush current VPID (L1 vs. L2) for KVM_REQ_TLB_FLUSH_GUEST KVM: x86: Use a stable condition around all VT-d PI paths KVM: arm64: Avoid setting the upper 32 bits of TCR_EL2 and CPTR_EL2 to 1 KVM: X86: Use vcpu->arch.walk_mmu for kvm_mmu_invlpg() tracing/histograms: String compares should not care about signed values wireguard: selftests: increase default dmesg log size wireguard: allowedips: add missing __rcu annotation to satisfy sparse wireguard: selftests: actually test for routing loops wireguard: selftests: rename DEBUG_PI_LIST to DEBUG_PLIST wireguard: device: reset peer src endpoint when netns exits wireguard: receive: use ring buffer for incoming handshakes wireguard: receive: drop handshakes if queue lock is contended wireguard: ratelimiter: use kvcalloc() instead of kvzalloc() i2c: stm32f7: flush TX FIFO upon transfer errors i2c: stm32f7: recover the bus on access timeout i2c: stm32f7: stop dma transfer in case of NACK i2c: cbus-gpio: set atomic transfer callback natsemi: xtensa: fix section mismatch warnings tcp: fix page frag corruption on page fault net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic_83xx_add_rings() net: mpls: Fix notifications when deleting a device siphash: use _unaligned version by default arm64: ftrace: add missing BTIs net/mlx4_en: Fix an use-after-free bug in mlx4_en_try_alloc_resources() selftests: net: Correct case name mt76: mt7915: fix NULL pointer dereference in mt7915_get_phy_mode ASoC: tegra: Fix wrong value type in ADMAIF ASoC: tegra: Fix wrong value type in I2S ASoC: tegra: Fix wrong value type in DMIC ASoC: tegra: Fix wrong value type in DSPK ASoC: tegra: Fix kcontrol put callback in ADMAIF ASoC: tegra: Fix kcontrol put callback in I2S ASoC: tegra: Fix kcontrol put callback in DMIC ASoC: tegra: Fix kcontrol put callback in DSPK ASoC: tegra: Fix kcontrol put callback in AHUB rxrpc: Fix rxrpc_peer leak in rxrpc_look_up_bundle() rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer() ALSA: intel-dsp-config: add quirk for CML devices based on ES8336 codec net: usb: lan78xx: lan78xx_phy_init(): use PHY_POLL instead of "0" if no IRQ is available net: marvell: mvpp2: Fix the computation of shared CPUs dpaa2-eth: destroy workqueue at the end of remove function net: annotate data-races on txq->xmit_lock_owner ipv4: convert fib_num_tclassid_users to atomic_t net/smc: fix wrong list_del in smc_lgr_cleanup_early net/rds: correct socket tunable error in rds_tcp_tune() net/smc: Keep smc_close_final rc during active close drm/msm/a6xx: Allocate enough space for GMU registers drm/msm: Do hw_init() before capturing GPU state atlantic: Increase delay for fw transactions atlatnic: enable Nbase-t speeds with base-t atlantic: Fix to display FW bundle version instead of FW mac version. atlantic: Add missing DIDs and fix 115c. Remove Half duplex mode speed capabilities. atlantic: Fix statistics logic for production hardware atlantic: Remove warn trace message. KVM: x86/pmu: Fix reserved bits for AMD PerfEvtSeln register KVM: VMX: Set failure code in prepare_vmcs02() x86/sev: Fix SEV-ES INS/OUTS instructions for word, dword, and qword x86/entry: Use the correct fence macro after swapgs in kernel CR3 x86/xen: Add xenpv_restore_regs_and_return_to_usermode() sched/uclamp: Fix rq->uclamp_max not set on first enqueue x86/pv: Switch SWAPGS to ALTERNATIVE x86/entry: Add a fence for kernel entry SWAPGS in paranoid_entry() parisc: Fix KBUILD_IMAGE for self-extracting kernel parisc: Fix "make install" on newer debian releases vgacon: Propagate console boot parameters before calling `vc_resize' xhci: Fix commad ring abort, write all 64 bits to CRCR register. USB: NO_LPM quirk Lenovo Powered USB-C Travel Hub usb: typec: tcpm: Wait in SNK_DEBOUNCED until disconnect x86/tsc: Add a timer to make sure TSC_adjust is always checked x86/tsc: Disable clocksource watchdog for TSC on qualified platorms x86/64/mm: Map all kernel memory into trampoline_pgd tty: serial: msm_serial: Deactivate RX DMA for polling support serial: pl011: Add ACPI SBSA UART match id serial: tegra: Change lower tolerance baud rate limit for tegra20 and tegra30 serial: core: fix transmit-buffer reset and memleak serial: 8250_pci: Fix ACCES entries in pci_serial_quirks array serial: 8250_pci: rewrite pericom_do_set_divisor() serial: 8250: Fix RTS modem control while in rs485 mode iwlwifi: mvm: retry init flow if failed parisc: Mark cr16 CPU clocksource unstable on all SMP machines net/tls: Fix authentication failure in CCM mode ipmi: msghandler: Make symbol 'remove_work_wq' static Linux 5.10.84 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: Iad592da28c6425dea7dca35b229d14c44edb412d	2021-12-08 09:41:05 +01:00
Eric Dumazet	fa973bf5fd	net: annotate data-races on txq->xmit_lock_owner commit 7a10d8c810cfad3e79372d7d1c77899d86cd6662 upstream. syzbot found that __dev_queue_xmit() is reading txq->xmit_lock_owner without annotations. No serious issue there, let's document what is happening there. BUG: KCSAN: data-race in __dev_queue_xmit / __dev_queue_xmit write to 0xffff888139d09484 of 4 bytes by interrupt on cpu 0: __netif_tx_unlock include/linux/netdevice.h:4437 [inline] __dev_queue_xmit+0x948/0xf70 net/core/dev.c:4229 dev_queue_xmit_accel+0x19/0x20 net/core/dev.c:4265 macvlan_queue_xmit drivers/net/macvlan.c:543 [inline] macvlan_start_xmit+0x2b3/0x3d0 drivers/net/macvlan.c:567 __netdev_start_xmit include/linux/netdevice.h:4987 [inline] netdev_start_xmit include/linux/netdevice.h:5001 [inline] xmit_one+0x105/0x2f0 net/core/dev.c:3590 dev_hard_start_xmit+0x72/0x120 net/core/dev.c:3606 sch_direct_xmit+0x1b2/0x7c0 net/sched/sch_generic.c:342 __dev_xmit_skb+0x83d/0x1370 net/core/dev.c:3817 __dev_queue_xmit+0x590/0xf70 net/core/dev.c:4194 dev_queue_xmit+0x13/0x20 net/core/dev.c:4259 neigh_hh_output include/net/neighbour.h:511 [inline] neigh_output include/net/neighbour.h:525 [inline] ip6_finish_output2+0x995/0xbb0 net/ipv6/ip6_output.c:126 __ip6_finish_output net/ipv6/ip6_output.c:191 [inline] ip6_finish_output+0x444/0x4c0 net/ipv6/ip6_output.c:201 NF_HOOK_COND include/linux/netfilter.h:296 [inline] ip6_output+0x10e/0x210 net/ipv6/ip6_output.c:224 dst_output include/net/dst.h:450 [inline] NF_HOOK include/linux/netfilter.h:307 [inline] ndisc_send_skb+0x486/0x610 net/ipv6/ndisc.c:508 ndisc_send_rs+0x3b0/0x3e0 net/ipv6/ndisc.c:702 addrconf_rs_timer+0x370/0x540 net/ipv6/addrconf.c:3898 call_timer_fn+0x2e/0x240 kernel/time/timer.c:1421 expire_timers+0x116/0x240 kernel/time/timer.c:1466 __run_timers+0x368/0x410 kernel/time/timer.c:1734 run_timer_softirq+0x2e/0x60 kernel/time/timer.c:1747 __do_softirq+0x158/0x2de kernel/softirq.c:558 __irq_exit_rcu kernel/softirq.c:636 [inline] irq_exit_rcu+0x37/0x70 kernel/softirq.c:648 sysvec_apic_timer_interrupt+0x3e/0xb0 arch/x86/kernel/apic/apic.c:1097 asm_sysvec_apic_timer_interrupt+0x12/0x20 read to 0xffff888139d09484 of 4 bytes by interrupt on cpu 1: __dev_queue_xmit+0x5e3/0xf70 net/core/dev.c:4213 dev_queue_xmit_accel+0x19/0x20 net/core/dev.c:4265 macvlan_queue_xmit drivers/net/macvlan.c:543 [inline] macvlan_start_xmit+0x2b3/0x3d0 drivers/net/macvlan.c:567 __netdev_start_xmit include/linux/netdevice.h:4987 [inline] netdev_start_xmit include/linux/netdevice.h:5001 [inline] xmit_one+0x105/0x2f0 net/core/dev.c:3590 dev_hard_start_xmit+0x72/0x120 net/core/dev.c:3606 sch_direct_xmit+0x1b2/0x7c0 net/sched/sch_generic.c:342 __dev_xmit_skb+0x83d/0x1370 net/core/dev.c:3817 __dev_queue_xmit+0x590/0xf70 net/core/dev.c:4194 dev_queue_xmit+0x13/0x20 net/core/dev.c:4259 neigh_resolve_output+0x3db/0x410 net/core/neighbour.c:1523 neigh_output include/net/neighbour.h:527 [inline] ip6_finish_output2+0x9be/0xbb0 net/ipv6/ip6_output.c:126 __ip6_finish_output net/ipv6/ip6_output.c:191 [inline] ip6_finish_output+0x444/0x4c0 net/ipv6/ip6_output.c:201 NF_HOOK_COND include/linux/netfilter.h:296 [inline] ip6_output+0x10e/0x210 net/ipv6/ip6_output.c:224 dst_output include/net/dst.h:450 [inline] NF_HOOK include/linux/netfilter.h:307 [inline] ndisc_send_skb+0x486/0x610 net/ipv6/ndisc.c:508 ndisc_send_rs+0x3b0/0x3e0 net/ipv6/ndisc.c:702 addrconf_rs_timer+0x370/0x540 net/ipv6/addrconf.c:3898 call_timer_fn+0x2e/0x240 kernel/time/timer.c:1421 expire_timers+0x116/0x240 kernel/time/timer.c:1466 __run_timers+0x368/0x410 kernel/time/timer.c:1734 run_timer_softirq+0x2e/0x60 kernel/time/timer.c:1747 __do_softirq+0x158/0x2de kernel/softirq.c:558 __irq_exit_rcu kernel/softirq.c:636 [inline] irq_exit_rcu+0x37/0x70 kernel/softirq.c:648 sysvec_apic_timer_interrupt+0x8d/0xb0 arch/x86/kernel/apic/apic.c:1097 asm_sysvec_apic_timer_interrupt+0x12/0x20 kcsan_setup_watchpoint+0x94/0x420 kernel/kcsan/core.c:443 folio_test_anon include/linux/page-flags.h:581 [inline] PageAnon include/linux/page-flags.h:586 [inline] zap_pte_range+0x5ac/0x10e0 mm/memory.c:1347 zap_pmd_range mm/memory.c:1467 [inline] zap_pud_range mm/memory.c:1496 [inline] zap_p4d_range mm/memory.c:1517 [inline] unmap_page_range+0x2dc/0x3d0 mm/memory.c:1538 unmap_single_vma+0x157/0x210 mm/memory.c:1583 unmap_vmas+0xd0/0x180 mm/memory.c:1615 exit_mmap+0x23d/0x470 mm/mmap.c:3170 __mmput+0x27/0x1b0 kernel/fork.c:1113 mmput+0x3d/0x50 kernel/fork.c:1134 exit_mm+0xdb/0x170 kernel/exit.c:507 do_exit+0x608/0x17a0 kernel/exit.c:819 do_group_exit+0xce/0x180 kernel/exit.c:929 get_signal+0xfc3/0x1550 kernel/signal.c:2852 arch_do_signal_or_restart+0x8c/0x2e0 arch/x86/kernel/signal.c:868 handle_signal_work kernel/entry/common.c:148 [inline] exit_to_user_mode_loop kernel/entry/common.c:172 [inline] exit_to_user_mode_prepare+0x113/0x190 kernel/entry/common.c:207 __syscall_exit_to_user_mode_work kernel/entry/common.c:289 [inline] syscall_exit_to_user_mode+0x20/0x40 kernel/entry/common.c:300 do_syscall_64+0x50/0xd0 arch/x86/entry/common.c:86 entry_SYSCALL_64_after_hwframe+0x44/0xae value changed: 0x00000000 -> 0xffffffff Reported by Kernel Concurrency Sanitizer on: CPU: 1 PID: 28712 Comm: syz-executor.0 Tainted: G W 5.16.0-rc1-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Fixes: `1da177e4c3` ("Linux-2.6.12-rc2") Signed-off-by: Eric Dumazet <edumazet@google.com> Reported-by: syzbot <syzkaller@googlegroups.com> Link: https://lore.kernel.org/r/20211130170155.2331929-1-eric.dumazet@gmail.com Signed-off-by: Jakub Kicinski <kuba@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2021-12-08 09:03:25 +01:00
Jason A. Donenfeld	e3be118327	wireguard: device: reset peer src endpoint when netns exits commit 20ae1d6aa159eb91a9bf09ff92ccaa94dbea92c2 upstream. Each peer's endpoint contains a dst_cache entry that takes a reference to another netdev. When the containing namespace exits, we take down the socket and prevent future sockets from being created (by setting creating_net to NULL), which removes that potential reference on the netns. However, it doesn't release references to the netns that a netdev cached in dst_cache might be taking, so the netns still might fail to exit. Since the socket is gimped anyway, we can simply clear all the dst_caches (by way of clearing the endpoint src), which will release all references. However, the current dst_cache_reset function only releases those references lazily. But it turns out that all of our usages of wg_socket_clear_peer_endpoint_src are called from contexts that are not exactly high-speed or bottle-necked. For example, when there's connection difficulty, or when userspace is reconfiguring the interface. And in particular for this patch, when the netns is exiting. So for those cases, it makes more sense to call dst_release immediately. For that, we add a small helper function to dst_cache. This patch also adds a test to netns.sh from Hangbin Liu to ensure this doesn't regress. Tested-by: Hangbin Liu <liuhangbin@gmail.com> Reported-by: Xiumei Mu <xmu@redhat.com> Cc: Toke Høiland-Jørgensen <toke@redhat.com> Cc: Paolo Abeni <pabeni@redhat.com> Fixes: `900575aa33` ("wireguard: device: avoid circular netns references") Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com> Signed-off-by: Jakub Kicinski <kuba@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2021-12-08 09:03:22 +01:00
msizanoen1	209d35ee34	ipv6: fix memory leak in fib6_rule_suppress commit cdef485217d30382f3bf6448c54b4401648fe3f1 upstream. The kernel leaks memory when a `fib` rule is present in IPv6 nftables firewall rules and a suppress_prefix rule is present in the IPv6 routing rules (used by certain tools such as wg-quick). In such scenarios, every incoming packet will leak an allocation in `ip6_dst_cache` slab cache. After some hours of `bpftrace`-ing and source code reading, I tracked down the issue to `ca7a03c417` ("ipv6: do not free rt if FIB_LOOKUP_NOREF is set on suppress rule"). The problem with that change is that the generic `args->flags` always have `FIB_LOOKUP_NOREF` set[1][2] but the IPv6-specific flag `RT6_LOOKUP_F_DST_NOREF` might not be, leading to `fib6_rule_suppress` not decreasing the refcount when needed. How to reproduce: - Add the following nftables rule to a prerouting chain: meta nfproto ipv6 fib saddr . mark . iif oif missing drop This can be done with: sudo nft create table inet test sudo nft create chain inet test test_chain '{ type filter hook prerouting priority filter + 10; policy accept; }' sudo nft add rule inet test test_chain meta nfproto ipv6 fib saddr . mark . iif oif missing drop - Run: sudo ip -6 rule add table main suppress_prefixlength 0 - Watch `sudo slabtop -o \| grep ip6_dst_cache` to see memory usage increase with every incoming ipv6 packet. This patch exposes the protocol-specific flags to the protocol specific `suppress` function, and check the protocol-specific `flags` argument for RT6_LOOKUP_F_DST_NOREF instead of the generic FIB_LOOKUP_NOREF when decreasing the refcount, like this. [1]: `ca7a03c417/net/ipv6/fib6_rules.c (L71)` [2]: `ca7a03c417/net/ipv6/fib6_rules.c (L99)` Link: https://bugzilla.kernel.org/show_bug.cgi?id=215105 Fixes: `ca7a03c417` ("ipv6: do not free rt if FIB_LOOKUP_NOREF is set on suppress rule") Cc: stable@vger.kernel.org Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2021-12-08 09:03:21 +01:00
Greg Kroah-Hartman	8d21bcc704	This is the 5.10.82 stable release -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmGgq10ACgkQONu9yGCS aT6KDA/+N9ysKF4cH2zdUMhDAkjCKB3YqTEsJxSfGBkJu2wuncAEEtrKy9jxC+lv fz6BE1tduit/IQIhGTCXJlfe9NIxwU87f2v5JlHnYeXg4dz72c+Ei236l7ZvkSNE ii8/ikHGvbbhKv+BTgcRg7jVUMMy6eEpS6iJwMNLB/sHROjZXPogFoiYjbO+Jzc5 0jTciMZv6r4yNhrdHBjhWHe6ZhB94H//Jy8MVYk37NGc5EbJmrMN83GM5ceSmhOZ PgxxyrVTv+SdGm0XViyK+94HXWGQHLXQF+Nsu3YEZfnNI+HNSPQKTqBLPM1hV7Ak h+IYW6VHPmcBmQzEdSA67uMKJayKtEwpkqO6aLRcj/NIThRiZoznbrtZOoGSXaU1 0MzQRPum76GA5/SVGgtB8FrE6kcFm74eq82mXvUD+rgCp0HTbIpYQK9ZKSmbFOkv fYjcpWHZ8PEmffMbtIlVKSffVxcUILoNuQwnr21NGiRUrd54DhNPgVahmCKnvUTb 847bGU/wQJPIF/2SO1rdpaA9MrPqZ/9sMEX3nSdx7xS8D+h2wfJqAJkLq0KBYt7R sbsXbfqbri893VHBo2YUqby3+7x3uNr118SjyiA8zpHHJpTBrVVImxSnW1z626HT KNJU4MSulLs+settJKAw1PHGRIGuW5TGSGF94p5LcsZDM2uIabU= =Wg4d -----END PGP SIGNATURE----- Merge 5.10.82 into android12-5.10-lts Changes in 5.10.82 arm64: zynqmp: Do not duplicate flash partition label property arm64: zynqmp: Fix serial compatible string ARM: dts: sunxi: Fix OPPs node name arm64: dts: allwinner: h5: Fix GPU thermal zone node name arm64: dts: allwinner: a100: Fix thermal zone node name staging: wfx: ensure IRQ is ready before enabling it ARM: dts: NSP: Fix mpcore, mmc node names scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq() arm64: dts: rockchip: Disable CDN DP on Pinebook Pro arm64: dts: hisilicon: fix arm,sp805 compatible string RDMA/bnxt_re: Check if the vlan is valid before reporting bus: ti-sysc: Add quirk handling for reinit on context lost bus: ti-sysc: Use context lost quirk for otg usb: musb: tusb6010: check return value after calling platform_get_resource() usb: typec: tipd: Remove WARN_ON in tps6598x_block_read ARM: dts: ux500: Skomer regulator fixes staging: rtl8723bs: remove possible deadlock when disconnect (v2) ARM: BCM53016: Specify switch ports for Meraki MR32 arm64: dts: qcom: msm8998: Fix CPU/L2 idle state latency and residency arm64: dts: qcom: ipq6018: Fix qcom,controlled-remotely property arm64: dts: freescale: fix arm,sp805 compatible string ASoC: SOF: Intel: hda-dai: fix potential locking issue clk: imx: imx6ul: Move csi_sel mux to correct base register ASoC: nau8824: Add DMI quirk mechanism for active-high jack-detect scsi: advansys: Fix kernel pointer leak ALSA: intel-dsp-config: add quirk for APL/GLK/TGL devices based on ES8336 codec firmware_loader: fix pre-allocated buf built-in firmware use ARM: dts: omap: fix gpmc,mux-add-data type usb: host: ohci-tmio: check return value after calling platform_get_resource() ARM: dts: ls1021a: move thermal-zones node out of soc/ ARM: dts: ls1021a-tsn: use generic "jedec,spi-nor" compatible for flash ALSA: ISA: not for M68K tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc MIPS: sni: Fix the build scsi: scsi_debug: Fix out-of-bound read in resp_readcap16() scsi: scsi_debug: Fix out-of-bound read in resp_report_tgtpgs() scsi: target: Fix ordered tag handling scsi: target: Fix alua_tg_pt_gps_count tracking iio: imu: st_lsm6dsx: Avoid potential array overflow in st_lsm6dsx_set_odr() powerpc/5200: dts: fix memory node unit name ARM: dts: qcom: fix memory and mdio nodes naming for RB3011 ALSA: gus: fix null pointer dereference on pointer block powerpc/dcr: Use cmplwi instead of 3-argument cmpli powerpc/8xx: Fix Oops with STRICT_KERNEL_RWX without DEBUG_RODATA_TEST sh: check return code of request_irq maple: fix wrong return value of maple_bus_init(). f2fs: fix up f2fs_lookup tracepoints f2fs: fix to use WHINT_MODE sh: fix kconfig unmet dependency warning for FRAME_POINTER sh: math-emu: drop unused functions sh: define __BIG_ENDIAN for math-emu f2fs: compress: disallow disabling compress on non-empty compressed file f2fs: fix incorrect return value in f2fs_sanity_check_ckpt() clk: ingenic: Fix bugs with divided dividers clk/ast2600: Fix soc revision for AHB clk: qcom: gcc-msm8996: Drop (again) gcc_aggre1_pnoc_ahb_clk mips: BCM63XX: ensure that CPU_SUPPORTS_32BIT_KERNEL is set sched/core: Mitigate race cpus_share_cache()/update_top_cache_domain() perf/x86/vlbr: Add c->flags to vlbr event constraints blkcg: Remove extra blkcg_bio_issue_init tracing/histogram: Do not copy the fixed-size char array field over the field size perf bpf: Avoid memory leak from perf_env__insert_btf() perf bench futex: Fix memory leak of perf_cpu_map__new() perf tests: Remove bash construct from record+zstd_comp_decomp.sh drm/nouveau: hdmigv100.c: fix corrupted HDMI Vendor InfoFrame net-zerocopy: Copy straggler unaligned data for TCP Rx. zerocopy. net-zerocopy: Refactor skb frag fast-forward op. tcp: Fix uninitialized access in skb frags array for Rx 0cp. tracing: Add length protection to histogram string copies net: ipa: disable HOLB drop when updating timer net: bnx2x: fix variable dereferenced before check bnxt_en: reject indirect blk offload when hw-tc-offload is off tipc: only accept encrypted MSG_CRYPTO msgs net: reduce indentation level in sk_clone_lock() sock: fix /proc/net/sockstat underflow in sk_clone_lock() net/smc: Make sure the link_id is unique iavf: Fix return of set the new channel count iavf: check for null in iavf_fix_features iavf: free q_vectors before queues in iavf_disable_vf iavf: Fix failure to exit out from last all-multicast mode iavf: prevent accidental free of filter structure iavf: validate pointers iavf: Fix for the false positive ASQ/ARQ errors while issuing VF reset iavf: Fix for setting queues to 0 MIPS: generic/yamon-dt: fix uninitialized variable error mips: bcm63xx: add support for clk_get_parent() mips: lantiq: add support for clk_get_parent() platform/x86: hp_accel: Fix an error handling path in 'lis3lv02d_probe()' net/mlx5e: nullify cq->dbg pointer in mlx5_debug_cq_remove() net/mlx5: Lag, update tracker when state change event received net/mlx5: E-Switch, Change mode lock from mutex to rw semaphore net/mlx5: E-Switch, return error if encap isn't supported scsi: core: sysfs: Fix hang when device state is set via sysfs net: sched: act_mirred: drop dst for the direction from egress to ingress net: dpaa2-eth: fix use-after-free in dpaa2_eth_remove net: virtio_net_hdr_to_skb: count transport header in UFO i40e: Fix correct max_pkt_size on VF RX queue i40e: Fix NULL ptr dereference on VSI filter sync i40e: Fix changing previously set num_queue_pairs for PFs i40e: Fix ping is lost after configuring ADq on VF i40e: Fix warning message and call stack during rmmod i40e driver i40e: Fix creation of first queue by omitting it if is not power of two i40e: Fix display error code in dmesg NFC: reorganize the functions in nci_request NFC: reorder the logic in nfc_{un,}register_device net: nfc: nci: Change the NCI close sequence NFC: add NCI_UNREG flag to eliminate the race e100: fix device suspend/resume KVM: PPC: Book3S HV: Use GLOBAL_TOC for kvmppc_h_set_dabr/xdabr() pinctrl: qcom: sdm845: Enable dual edge errata perf/x86/intel/uncore: Fix filter_tid mask for CHA events on Skylake Server perf/x86/intel/uncore: Fix IIO event constraints for Skylake Server s390/kexec: fix return code handling net: stmmac: dwmac-rk: Fix ethernet on rk3399 based devices arm64: vdso32: suppress error message for 'make mrproper' tun: fix bonding active backup with arp monitoring hexagon: export raw I/O routines for modules hexagon: clean up timer-regs.h tipc: check for null after calling kmemdup ipc: WARN if trying to remove ipc object which is absent mm: kmemleak: slob: respect SLAB_NOLEAKTRACE flag x86/hyperv: Fix NULL deref in set_hv_tscchange_cb() if Hyper-V setup fails powerpc/8xx: Fix pinned TLBs with CONFIG_STRICT_KERNEL_RWX scsi: qla2xxx: Fix mailbox direction flags in qla2xxx_get_adapter_id() s390/kexec: fix memory leak of ipl report buffer block: Check ADMIN before NICE for IOPRIO_CLASS_RT KVM: nVMX: don't use vcpu->arch.efer when checking host state on nested state load udf: Fix crash after seekdir net: stmmac: socfpga: add runtime suspend/resume callback for stratix10 platform btrfs: fix memory ordering between normal and ordered work functions parisc/sticon: fix reverse colors cfg80211: call cfg80211_stop_ap when switch from P2P_GO type drm/amd/display: Update swizzle mode enums drm/udl: fix control-message timeout drm/nouveau: Add a dedicated mutex for the clients list drm/nouveau: use drm_dev_unplug() during device removal drm/nouveau: clean up all clients on device removal drm/i915/dp: Ensure sink rate values are always valid drm/amdgpu: fix set scaling mode Full/Full aspect/Center not works on vga and dvi connectors scsi: ufs: core: Fix task management completion scsi: ufs: core: Fix task management completion timeout race hugetlbfs: flush TLBs correctly after huge_pmd_unshare RDMA/netlink: Add __maybe_unused to static inline in C file selinux: fix NULL-pointer dereference when hashtab allocation fails ASoC: DAPM: Cover regression by kctl change notification fix usb: max-3421: Use driver data instead of maintaining a list of bound devices ice: Delete always true check of PF pointer fs: export an inode_update_time helper btrfs: update device path inode time instead of bd_inode x86/Kconfig: Fix an unused variable error in dell-smm-hwmon ALSA: hda: hdac_ext_stream: fix potential locking issues ALSA: hda: hdac_stream: fix potential locking issue in snd_hdac_stream_assign() Revert "perf: Rework perf_event_exit_event()" Linux 5.10.82 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I56e067875dafc27c2e86fc3b8c47abb3296c6a18	2021-11-26 15:37:44 +01:00
Tetsuo Handa	437e21e2c9	sock: fix /proc/net/sockstat underflow in sk_clone_lock() [ Upstream commit 938cca9e4109b30ee1d476904538225a825e54eb ] sk_clone_lock() needs to call sock_inuse_add(1) before entering the sk_free_unlock_clone() error path, for __sk_free() from sk_free() from sk_free_unlock_clone() calls sock_inuse_add(-1). Signed-off-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp> Fixes: `648845ab7e` ("sock: Move the socket inuse to namespace.") Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Sasha Levin <sashal@kernel.org>	2021-11-26 10:39:14 +01:00
Eric Dumazet	4da14ddad1	net: reduce indentation level in sk_clone_lock() [ Upstream commit bbc20b70424aeb3c84f833860f6340adda5141fc ] Rework initial test to jump over init code if memory allocation has failed. Signed-off-by: Eric Dumazet <edumazet@google.com> Link: https://lore.kernel.org/r/20210127152731.748663-1-eric.dumazet@gmail.com Signed-off-by: Jakub Kicinski <kuba@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2021-11-26 10:39:14 +01:00
Greg Kroah-Hartman	e101be336e	Revert "net: sched: update default qdisc visibility after Tx queue cnt changes" This reverts commit `8d433ab5c8` which is commit 1e080f17750d1083e8a32f7b350584ae1cd7ff20 upstream. It breaks the current kernel abi and is not necessary for Android systems, so it can be safely reverted. Bug: 161946584 Fixes: `8d433ab5c8` ("net: sched: update default qdisc visibility after Tx queue cnt changes") Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I9844bcc7deae772026e0dc7b1265b39e392342ec	2021-11-19 14:19:50 +01:00

1 2 3 4 5 ...

7480 Commits