android_kernel_xiaomi_sm8450

Author	SHA1	Message	Date
Greg Kroah-Hartman	9ef4727680	Merge tag 'android12-5.10.149_r00' into android12-5.10 This is the merge of the upstream LTS release of 5.10.149 into the android12-5.10 branch. It contains the following commits: `0118fb827b` Merge branch 'android12-5.10' into branch 'android12-5.10-lts' `69a9a62c66` ANDROID: GKI: db845c: Update symbols list and ABI `2498b03977` Merge 5.10.149 into android12-5.10-lts `09be132bfe` Linux 5.10.149 `31ce5da48a` wifi: mac80211: fix MBSSID parsing use-after-free `353b5c8d4b` wifi: mac80211: don't parse mbssid in assoc response `66dacdbc2e` mac80211: mlme: find auth challenge directly `a07708a843` Revert "fs: check FMODE_LSEEK to control internal pipe splicing" `c1e111543d` Merge 5.10.148 into android12-5.10-lts `3783e64fee` Linux 5.10.148 `0df206bdc6` misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic `40a29e58f6` misc: pci_endpoint_test: Aggregate params checking for xfer `9c13b1a044` Input: xpad - fix wireless 360 controller breaking after suspend `19dba9c3b5` Input: xpad - add supported devices as contributed on github `b2b9386667` wifi: cfg80211: update hidden BSSes to avoid WARN_ON `58c0306d0b` wifi: mac80211: fix crash in beacon protection for P2P-device `3539e75abe` wifi: mac80211_hwsim: avoid mac80211 warning on bad rate `b0e5c5deb7` wifi: cfg80211: avoid nontransmitted BSS list corruption `6b94484503` wifi: cfg80211: fix BSS refcounting bugs `6144c97f96` wifi: cfg80211: ensure length byte is present before access `e7aa7fd10e` wifi: cfg80211/mac80211: reject bad MBSSID elements `a6408e0b69` wifi: cfg80211: fix u8 overflow in cfg80211_update_notlisted_nontrans() `b0c37581be` random: use expired timer rather than wq for mixing fast pool `c1a4423fd3` random: avoid reading two cache lines on irq randomness `638f84a718` USB: serial: qcserial: add new usb-id for Dell branded EM7455 `36b33c6351` scsi: stex: Properly zero out the passthrough command structure `438994b8cd` efi: Correct Macmini DMI match in uefi cert quirk `2fd1caa0c6` ALSA: hda: Fix position reporting on Poulsbo `011399a3f9` random: clamp credited irq bits to maximum mixed `fc87c413f2` random: restore O_NONBLOCK support `c04b67c544` Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5" `0a49bfa8f8` rpmsg: qcom: glink: replace strncpy() with strscpy_pad() `3451df3a51` USB: serial: ftdi_sio: fix 300 bps rate for SIO `1b257f97fe` usb: mon: make mmapped memory read only `3ba555d8e1` mmc: core: Terminate infinite loop in SD-UHS voltage switch `0684658366` mmc: core: Replace with already defined values for readability `4f32f266b1` drm/amd/display: skip audio setup when audio stream is enabled `a6fe179ba0` drm/amd/display: update gamut remap if plane has changed `73e1b27b58` net: atlantic: fix potential memory leak in aq_ndev_close() `3287f0d727` arch: um: Mark the stack non-executable to fix a binutils warning `aeb8315593` um: Cleanup compiler warning in arch/x86/um/tls_32.c `6d4deaba06` um: Cleanup syscall_handler_t cast in syscalls_32.h `6d7a47e849` ALSA: hda/hdmi: Fix the converter reuse for the silent stream `c1337f8ea8` net/ieee802154: fix uninit value bug in dgram_sendmsg `034b30c311` scsi: qedf: Fix a UAF bug in __qedf_probe() `29461bbe2d` ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer `dae0b77cb8` dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure `e0ca2998df` dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property `789e590cb8` dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling `64e240934c` firmware: arm_scmi: Add SCMI PM driver remove routine `6df7c6d141` compiler_attributes.h: move __compiletime_{error\|warning} `1e555c3ed1` fs: fix UAF/GPF bug in nilfs_mdt_destroy `acf05d61d3` powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush `377c60dd32` mm: gup: fix the fast GUP race against THP collapse `fce793a056` ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC `132590d776` xsk: Inherit need_wakeup flag for shared sockets `beffc38dc6` perf tools: Fixup get_current_dir_name() compilation `fb380f548c` docs: update mediator information in CoC docs `c7f4af575b` Makefile.extrawarn: Move -Wcast-function-type-strict to W=1 `b23b0cd57e` ceph: don't truncate file in atomic_open `8a18fdc5ae` nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure `aad4c99785` nilfs2: fix leak of nilfs_root in case of writer thread creation failure `21ee3cffed` nilfs2: fix use-after-free bug of struct nilfs_root `3f840480e3` nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level() `bc7618b493` Merge 5.10.147 into android12-5.10-lts `014862eecf` Linux 5.10.147 `98f722cc24` ALSA: hda/hdmi: fix warning about PCM count when used with SOF `b12d0489e4` x86/alternative: Fix race in try_get_desc() `374d4c3075` KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest `a8e6cde506` clk: iproc: Do not rely on node name for correct PLL setup `cf41711aa4` clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks `83db457b41` selftests: Fix the if conditions of in test_extra_filter() `84cab3531f` net: stmmac: power up/down serdes in stmmac_open/release `743a6e53cf` nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices `469dc5fd9a` nvme: add new line after variable declatation `2c248c4681` cxgb4: fix missing unlock on ETHOFLD desc collect fail path `fde656dbc3` net: sched: act_ct: fix possible refcount leak in tcf_ct_init() `fa065e6081` usbnet: Fix memory leak in usbnet_disconnect() `57959392f7` Input: melfas_mip4 - fix return value check in mip4_probe() `330b775781` Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time" `359e73edd3` ASoC: tas2770: Reinit regcache on reset `8884a192f9` soc: sunxi: sram: Fix debugfs info for A64 SRAM C `4e2ede7cb9` soc: sunxi: sram: Fix probe function ordering issues `50fbc81f80` soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource() `0fdc3ab9b4` soc: sunxi: sram: Prevent the driver from being unbound `3e0405c69b` soc: sunxi: sram: Actually claim SRAM regions `a658f0bc72` reset: imx7: Fix the iMX8MP PCIe PHY PERST support `8934aea1a4` ARM: dts: am33xx: Fix MMCHS0 dma properties `cce5dc0333` scsi: hisi_sas: Revert "scsi: hisi_sas: Limit max hw sectors for v3 HW" `625899cd06` swiotlb: max mapping size takes min align mask into account `6f478fe8c3` media: rkvdec: Disable H.264 error detection `ac828e2416` media: dvb_vb2: fix possible out of bound access `be2cd261ca` mm: fix madivse_pageout mishandling on non-LRU page `1002d5fef4` mm/migrate_device.c: flush TLB while holding PTL `a54fc53691` mm: prevent page_frag_alloc() from corrupting the memory `466a26af2d` mm/page_alloc: fix race condition between build_all_zonelists and page allocation `9b751b4dc3` mmc: hsq: Fix data stomping during mmc recovery `36b10cde0c` mmc: moxart: fix 4-bit bus width and remove 8-bit bus width `02d55a837e` libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205 `e72a435fa3` net: mt7531: only do PLL once after the reset `a48daecd09` ntfs: fix BUG_ON in ntfs_lookup_inode_by_name() `1d71422bd4` ARM: dts: integrator: Tag PCI host with device_type `dab144c5dd` clk: ingenic-tcu: Properly enable registers before accessing timers `6c5742372b` Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address `8cf377baf0` net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455 `0695e590de` thunderbolt: Explicitly reset plug events delay back to USB4 spec value `efdff53394` usb: typec: ucsi: Remove incorrect warning `e5ee7b77ac` uas: ignore UAS for Thinkplus chips `5f91ceea6c` usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS `1e4b856fc0` uas: add no-uas quirk for Hiksemi usb_disk `6ac5b52e3f` btrfs: fix hang during unmount when stopping a space reclaim worker `29d849c3de` ALSA: hda: Fix Nvidia dp infoframe `24070d32c6` ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically `c1256c531d` ALSA: hda/tegra: Reset hardware `ded9e8964d` ALSA: hda/tegra: Use clk_bulk helpers `b2ad53fbc0` thunderbolt: Add support for Intel Maple Ridge single port controller `53e6282dde` thunderbolt: Add support for Intel Maple Ridge `0e8dfc1216` Merge branch 'android12-5.10' into branch 'android12-5.10-lts' `391716695e` Revert "usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind" `1d17080edb` Merge 5.10.146 into android12-5.10-lts `62aea69444` Linux 5.10.146 `c18383218c` ext4: make directory inode spreading reflect flexbg size `a968542d7e` ext4: limit the number of retries after discarding preallocations blocks `958b0ee23f` ext4: fix bug in extents parsing when eh_entries == 0 and eh_depth > 0 `2511726515` devdax: Fix soft-reservation memory description `0fa11239c4` i2c: mlxbf: Fix frequency calculation `48ee0a864d` i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() `4f6db1f921` i2c: mlxbf: incorrect base address passed during io write `2f58c47c36` i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible `90f1c0025b` workqueue: don't skip lockdep work dependency in cancel_work_sync() `4dfc96d8d7` drm/rockchip: Fix return type of cdn_dp_connector_mode_valid `58101a9cfc` drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage `3ae1dede22` drm/amd/display: Limit user regamma to a valid value `867b2b2b68` drm/amdgpu: use dirty framebuffer helper `c5812807e4` drm/gma500: Fix BUG: sleeping function called from invalid context errors `ec2bf249bd` Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region `2a2e503a62` cifs: always initialize struct msghdr smb_msg completely `877231b0e6` cifs: use discard iterator to discard unneeded network data more efficiently `09867977fc` drm/amdgpu: Fix check for RAS support `8c6fd05cf8` vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external() `f31ea57c11` usb: xhci-mtk: fix issue of out-of-bounds array access `f5fcc9d6d7` s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup `fb189aa1be` serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting `e1993864a9` serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting `7f11386733` serial: Create uart_xmit_advance() `fda04a0bab` drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV `4bc4b6419e` selftests: forwarding: add shebang for sch_red.sh `8844c750ee` net: sched: fix possible refcount leak in tc_new_tfilter() `75ca7f44da` net: sunhme: Fix packet reception for len < RX_COPY_THRESHOLD `d76151a813` net/smc: Stop the CLC flow if no link to map buffers on `fd938b4ce0` drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff() `c990621606` perf kcore_copy: Do not check /proc/modules is unchanged `28d185095e` perf jit: Include program header in ELF files `78926cf762` can: gs_usb: gs_can_open(): fix race dev->can.state condition `ebd97dbe3c` netfilter: ebtables: fix memory leak when blob is malformed `b043a525a3` netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain() `710e3f526b` netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain() `1e7e55374d` net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs `586def6ebe` net/sched: taprio: avoid disabling offload when it was never enabled `aa400ccadf` net: socket: remove register_gifconf `8bd98cfbfc` net: enetc: move enetc_set_psfp() out of the common enetc_set_features() `f0a057f49b` wireguard: netlink: avoid variable-sized memcpy on sockaddr `b7b3859598` wireguard: ratelimiter: disable timings test by default `ddd47f1cd6` net: ipa: properly limit modem routing table use `8c1454d549` net: ipa: kill IPA_TABLE_ENTRY_SIZE `53b1715e28` net: ipa: DMA addresses are nicely aligned `48afea293a` net: ipa: avoid 64-bit modulus `3ae25aca3f` net: ipa: fix table alignment requirement `c2cf0613d1` net: ipa: fix assumptions about DMA address size `d58815af89` of: mdio: Add of_node_put() when breaking out of for_each_xx `9101e54c95` drm/hisilicon: Add depends on MMU `bac7328fc0` drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled `b3b41d4d95` sfc: fix null pointer dereference in efx_hard_start_xmit `b4afd3878f` sfc: fix TX channel offset when using legacy interrupts `2dbf487d6b` i40e: Fix set max_tx_rate when it is lower than 1 Mbps `65ee2bcc89` i40e: Fix VF set max MTU size `15e9724f6b` iavf: Fix set max MTU size with port VLAN and jumbo frames `ccddb1db4b` iavf: Fix bad page state `21b535fe5e` MIPS: Loongson32: Fix PHY-mode being left unspecified `a4121785a3` MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko `1ac50c1ad4` drm/panel: simple: Fix innolux_g121i1_l01 bus_format `90fbcb26d6` net: team: Unsync device addresses on ndo_stop `e2b94a1122` net: bonding: Unsync device addresses on ndo_stop `dc209962c0` net: bonding: Share lacpdu_mcast_addr definition `2b9aba0c5d` scsi: mpt3sas: Fix return value check of dma_get_required_mask() `e7fafef983` scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region `351f2d2c35` net: phy: aquantia: wait for the suspend/resume operations to finish `d298fc2eef` net: core: fix flow symmetric hash `e90001e1dd` net: let flow have same hash in two directions `ab4a733874` ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header `14446a1bc2` iavf: Fix cached head and tail value for iavf_get_tx_pending `5d75fef3e6` netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find() `9a5d7e0acb` netfilter: nf_conntrack_irc: Tighten matching on DCC message `369ec4dab0` netfilter: nf_conntrack_sip: fix ct_sip_walk_headers `66f9470ffe` arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma `aa11dae059` dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get() `1cc871fe6d` arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz `3ca272b231` drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks `39f97714f3` arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob `dce4662869` xfs: validate inode fork size against fork format `a6bfdc157f` xfs: reorder iunlink remove operation in xfs_ifree `e811a534ec` xfs: fix up non-directory creation in SGID directories `4e74179a16` interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate `a60babeb60` KVM: SEV: add cache flush to solve SEV cache incoherency issues `379ac7905f` mm/slub: fix to return errno if kmalloc() fails `fa57bb9b1a` can: flexcan: flexcan_mailbox_read() fix return value for drop = true `12fda27a41` riscv: fix a nasty sigreturn bug... `657803b918` gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully `bdea98b98f` gpio: mockup: fix NULL pointer dereference when removing debugfs `bd5958ccfc` wifi: mt76: fix reading current per-tid starting sequence number for aggregation `85f9a2d51e` efi: libstub: check Shim mode using MokSBStateRT `3490ebe435` efi: x86: Wipe setup_data on pure EFI boot `c5ee36018d` media: flexcop-usb: fix endpoint type check `0d99b180ce` iommu/vt-d: Check correct capability for sagaw determination `213cdb2901` ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop `10c7e52d95` ALSA: hda/realtek: Add quirk for ASUS GA503R laptop `4cd84a9518` ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack `2f7cad4ecd` ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack `62ce31979f` ALSA: hda/realtek: Re-arrange quirk table entries `d4bad13828` ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop `62b0824c2c` ALSA: hda/realtek: Add quirk for Huawei WRT-WX9 `c78bce842d` ALSA: hda: add Intel 5 Series / 3400 PCI DID `f109dd1607` ALSA: hda/tegra: set depop delay for tegra `a1926f11d9` USB: serial: option: add Quectel RM520N `4d1d91a634` USB: serial: option: add Quectel BG95 0x0203 composition `3a26651a78` USB: core: Fix RST error in hub.c `381f77b6a6` arm64/bti: Disable in kernel BTI when cross section thunks are broken `050de28980` arm64: Restrict ARM64_BTI_KERNEL to clang 12.0.0 and newer `561d86bd0e` Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio" `578d644edc` vfio/type1: Unpin zero pages `abb560abdf` vfio/type1: Prepare for batched pinning with struct vfio_batch `38cb9b8683` vfio/type1: Change success value of vaddr_get_pfn() `c4adbfa9ce` Revert "usb: add quirks for Lenovo OneLink+ Dock" `905e8be528` usb: cdns3: fix issue with rearming ISO OUT endpoint `8fcb5f027b` usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer `f457bb2198` usb: gadget: udc-xilinx: replace memcpy with memcpy_toio `b9e5c47e33` usb: add quirks for Lenovo OneLink+ Dock `345bdea212` tty: serial: atmel: Preserve previous USART mode if RS485 disabled `730f78c51b` serial: atmel: remove redundant assignment in rs485_config `b3f2adf426` mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure `7780b3dda2` usb: xhci-mtk: relax TT periodic bandwidth allocation `99f48a3a6e` usb: xhci-mtk: allow multiple Start-Split in a microframe `b19f9f4122` usb: xhci-mtk: add some schedule error number `402fa9214e` usb: xhci-mtk: add a function to (un)load bandwidth info `c2e7000b13` usb: xhci-mtk: use @sch_tt to check whether need do TT schedule `a2566a8dc5` usb: xhci-mtk: add only one extra CS for FS/LS INTR `b1e11bc66c` usb: xhci-mtk: get the microframe boundary for ESIT `9c28189bb6` usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop `ff23c7277f` usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup() `ab046365c9` usb: dwc3: gadget: Refactor pullup() `db27874477` usb: dwc3: gadget: Prevent repeat pullup() `6bd182beef` usb: dwc3: Issue core soft reset before enabling run/stop `b83692feb0` usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind `2a358ad19c` usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device `c267bb8334` usb: typec: intel_pmc_mux: Update IOM port status offset for AlderLake `7b0db849ea` drm/amdgpu: make sure to init common IP before gmc `9d18013dac` drm/amdgpu: Separate vf2pf work item init from virt data exchange `87a4e51fb8` drm/amdgpu: indirect register access for nv12 sriov `9f55f36f74` drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega `ef2aee5cec` Merge 5.10.145 into android12-5.10-lts `4a77e6ef20` Linux 5.10.145 `ca5539d421` ALSA: hda/sigmatel: Fix unused variable warning for beep power change `9f267393b0` cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() `06e194e113` video: fbdev: pxa3xx-gcu: Fix integer overflow in pxa3xx_gcu_write `3fefe614ed` mksysmap: Fix the mismatch of 'L0' symbols in System.map `3e6d2eff56` MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping() `72602bc620` afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked `517a0324db` net: usb: qmi_wwan: add Quectel RM520N `a36fd2d8d6` ALSA: hda/tegra: Align BDL entry to 4KB boundary `e41b97a277` ALSA: hda/sigmatel: Keep power up while beep is enabled `b95a5ef4c0` wifi: mac80211_hwsim: check length for virtio packets `c505fee07b` rxrpc: Fix calc of resend age `35da670ed1` rxrpc: Fix local destruction being repeated `891d5c46f2` regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe() `c2ef959e33` ASoC: nau8824: Fix semaphore unbalance at error paths `107c6b6058` Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field" `e00582a361` video: fbdev: i740fb: Error out if 'pixclock' equals zero `f63ddf62d0` tools/include/uapi: Fix <asm/errno.h> for parisc and xtensa `331eba80cb` cifs: don't send down the destination address to sendmsg for a SOCK_STREAM `f3fbd08e7c` cifs: revalidate mapping when doing direct writes `a9398cb81c` of/device: Fix up of_dma_configure_id() stub `6a27acda3d` tracing: hold caller_addr to hardirq_{enable,disable}_ip `65dd251c51` parisc: ccio-dma: Add missing iounmap in error path in ccio_probe() `1f24b0a7ca` drm/meson: Fix OSD1 RGB to YCbCr coefficient `4d3d2e384b` drm/meson: Correct OSD1 global alpha value `24196210b1` gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx `4d065f8356` NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0 `2f16f5b582` pinctrl: sunxi: Fix name for A100 R_PIO `ee4369260e` of: fdt: fix off-by-one error in unflatten_dt_nodes() `cae6172a94` net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports `4a6c6041e8` platform/x86/intel: hid: add quirk to support Surface Go 3 `8faabaf112` usb: cdns3: gadget: fix new urb never complete if ep cancel previous requests `cd226d8c1b` powerpc/pseries/mobility: ignore ibm, platform-facilities updates `d5ee5a9e47` powerpc/pseries/mobility: refactor node lookup during DT update `4dbe84b9b6` dmaengine: bestcomm: fix system boot lockups `7bbdf49e26` parisc: Flush kernel data mapping in set_pte_at() when installing pte for user page `b00a56e647` parisc: Optimize per-pagetable spinlocks `59819f0aaf` serial: 8250: Fix reporting real baudrate value in c_ospeed field `9230af9188` KVM: PPC: Tick accounting should defer vtime accounting 'til after IRQ handling `6bae475481` KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs `7474313da8` Merge 5.10.144 into android12-5.10-lts `3dbfa90b61` Merge 5.10.143 into android12-5.10-lts `51659937e3` Revert "USB: core: Prevent nested device-reset calls" `2e00a2dc61` Revert "xhci: Add grace period after xHC start to prevent premature runtime suspend." `e0f0b200a5` Merge 5.10.142 into android12-5.10-lts `e69a383052` Revert "mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse" `e4a7358455` Revert "io_uring: disable polling pollfree files" `99c2dfe47a` Linux 5.10.144 `744f98f71d` Input: goodix - add compatible string for GT1158 `c7f4c203d1` soc: fsl: select FSL_GUTS driver for DPIO `35371fd688` x86/ftrace: Use alternative RET encoding `4586df06a0` x86/ibt,ftrace: Make function-graph play nice `33015556a9` Revert "x86/ftrace: Use alternative RET encoding" `891f03f688` mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region() `dd3aa77d5d` usb: storage: Add ASUS <0x0b05:0x1932> to IGNORE_UAS `5ce017619c` platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes `fc2c14c2cd` perf/arm_pmu_platform: fix tests for platform_get_irq() failure `187908079d` drm/amd/amdgpu: skip ucode loading if ucode_size == 0 `c598e2704c` nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change() `1cae6f8e17` Input: iforce - add support for Boeder Force Feedback Wheel `de2aa49523` ieee802154: cc2520: add rc code in cc2520_tx() `3815e66c21` gpio: mockup: remove gpio debugfs when remove device `1b8b5384e8` tg3: Disable tg3 device on system reboot to avoid triggering AER `704d1f2ac6` hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message `ef033e619e` HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo `cff2b3a50c` drm/msm/rd: Fix FIFO-full deadlock `fac2c299ef` Input: goodix - add support for GT1158 `218b71e32f` tracefs: Only clobber mode/uid/gid on remount if asked `0a81ddfc20` iommu/vt-d: Correctly calculate sagaw value of IOMMU `5ce1b0a0c2` ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible `a381cac2ab` ARM: dts: imx: align SPI NOR node name with dtschema `f1101295c1` Linux 5.10.143 `71d3adbb28` arm64: errata: add detection for AMEVCNTR01 incrementing incorrectly `202341395c` hwmon: (mr75203) enable polling for all VM channels `c9da73ae78` hwmon: (mr75203) fix multi-channel voltage reading `19841592ae` hwmon: (mr75203) fix voltage equation for negative source input `8e8dc8fc53` hwmon: (mr75203) update pvt->v_num and vm_num to the actual number of used sensors `13521c94b9` hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined `5e17967c7e` iommu/amd: use full 64-bit value in build_completion_wait() `1a27425523` swiotlb: avoid potential left shift overflow `586f8c8330` MIPS: loongson32: ls1c: Fix hang during startup `a9453be390` ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion `9dacdc1d47` ASoC: mchp-spdiftx: remove references to mchp_i2s_caps `2ead78fbe6` sch_sfb: Also store skb len before calling child enqueue `d47475d4e5` tcp: fix early ETIMEDOUT after spurious non-SACK RTO `6a2a344844` nvme-tcp: fix regression that causes sporadic requests to time out `5914fa32ef` nvme-tcp: fix UAF when detecting digest errors `a00b1b10e0` RDMA/mlx5: Set local port to one when accessing counters `e8de6cb575` IB/core: Fix a nested dead lock as part of ODP flow `076f2479fc` ipv6: sr: fix out-of-bounds read when setting HMAC data. `047e66867e` RDMA/siw: Pass a pointer to virt_to_page() `0f1e7977e1` xen-netback: only remove 'hotplug-status' when the vif is actually destroyed `342d77769a` i40e: Fix kernel crash during module removal `9d11d06e50` ice: use bitmap_free instead of devm_kfree `22922da737` tipc: fix shift wrapping bug in map_get() `2ee85ac1b2` sch_sfb: Don't assume the skb is still around after enqueueing to child `63677a0923` afs: Use the operation issue time instead of the reply time for callbacks `fbbd5d05ea` rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2() `6ccbb74801` ALSA: usb-audio: Register card again for iface over delayed_register option `1d29a63585` ALSA: usb-audio: Inform the delayed registration more properly `e12ce30fe5` netfilter: nf_conntrack_irc: Fix forged IP logic `910891a2a4` netfilter: nf_tables: clean up hook list when offload flags check fails `908180f633` netfilter: br_netfilter: Drop dst references before setting. `7d29f2bdd1` ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time `0796953300` ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time `360dd120eb` ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges `6bbef2694a` ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges `e198c08570` RDMA/hns: Fix wrong fixed value of qp->rq.wqe_shift `b2e82e325a` RDMA/hns: Fix supported page size `6dc0251638` soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs `e9ea271c2e` RDMA/cma: Fix arguments order in net device validation `465eecd2b3` tee: fix compiler warning in tee_shm_register() `75c961d011` regulator: core: Clean up on enable failure `bb4bee3eca` ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node `015c2ec053` smb3: missing inode locks in punch hole `98127f140b` cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() `dee1e2b18c` cgroup: Fix threadgroup_rwsem <-> cpus_read_lock() deadlock `bfbacc2ef7` cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree `a5620d3e0c` scsi: lpfc: Add missing destroy_workqueue() in error path `ea10a652ad` scsi: mpt3sas: Fix use-after-free warning `de572edecc` drm/i915: Implement WaEdpLinkRateDataReload `be01f1c988` nvmet: fix a use-after-free `68f22c80c1` debugfs: add debugfs_lookup_and_remove() `ab60010225` kprobes: Prohibit probes in gate area `6123bec848` ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface() `ab730d3c44` ALSA: aloop: Fix random zeros in capture data when using jiffies timer `39a90720f3` ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc() `dfb27648ee` drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly `2078e326b6` fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init() `9d040a629e` net/core/skbuff: Check the return value of skb_copy_bits() `43b9af7275` arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level `96d206d0a1` parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines `44739b5aae` parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources() `826b46fd59` drm/radeon: add a force flush to delay work when radeon `0410256867` drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup. `c19656cd95` drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini `67bf86ff81` drm/gem: Fix GEM handle release errors `a175aed83e` scsi: megaraid_sas: Fix double kfree() `004e26ef05` scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX `a14f1799ce` Revert "mm: kmemleak: take a full lowmem check in kmemleak__phys()" `13c8f561be` fs: only do a memory barrier for the first set_buffer_uptodate() `2946d2ae5a` wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd() `918d9c4a4b` efi: capsule-loader: Fix use-after-free in efi_capsule_write `94f0f30b2d` efi: libstub: Disable struct randomization `eb75efdec8` tty: n_gsm: avoid call of sleeping functions from atomic context `fb6cadd2a3` tty: n_gsm: initialize more members at gsm_alloc_mux() `186cb020bd` xen-blkfront: Cache feature_persistent value before advertisement `d3d885507b` NFSD: Fix verifier returned in stable WRITEs `281e81a5e2` Linux 5.10.142 `2058aab4e3` USB: serial: ch341: fix disabled rx timer on older devices `2a4c619a87` USB: serial: ch341: fix lost character on LCR updates `06a84bda0a` usb: dwc3: disable USB core PHY management `451fa90150` usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup `8984ca41de` usb: dwc3: fix PHY disable sequence `cb27189360` mmc: core: Fix UHS-I SD 1.8V workaround branch `7f73a9dea0` btrfs: harden identification of a stale device `3c63a22d02` drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk `1079d09572` ALSA: seq: Fix data-race at module auto-loading `f19a209f61` ALSA: seq: oss: Fix data-race for max_midi_devs access `7565c15030` ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298 `ab9f890377` net: mac802154: Fix a condition in the receive path `d71a1c9fce` net: Use u64_stats_fetch_begin_irq() for stats fetch. `685f4e5671` ip: fix triggering of 'icmp redirect' `4abc8c07a0` wifi: mac80211: Fix UAF in ieee80211_scan_rx() `dd649b4921` wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected `742e222dd5` driver core: Don't probe devices after bus_type.match() probe deferral `6202637fde` usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS `abe3cfb7a7` USB: core: Prevent nested device-reset calls `b0d4993c4b` s390: fix nospec table alignments `0361d50e86` s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages `b9097c5e10` usb-storage: Add ignore-residue quirk for NXP PN7462AU `5f0d11796a` USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020) `d608c131df` usb: dwc2: fix wrong order of phy_power_on and phy_init `95791d51f7` usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles `89b01a88ef` USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode `7f1f176715` USB: serial: option: add Quectel EM060K modem `efcc3e1e6a` USB: serial: option: add support for OPPO R11 diag port `e547c07c28` USB: serial: cp210x: add Decagon UCA device id `5a603f4c12` xhci: Add grace period after xHC start to prevent premature runtime suspend. `587f793c64` media: mceusb: Use new usb_control_msg_() routines `07fb6b10b6` thunderbolt: Use the actual buffer in tb_async_error() `f210912d1a` xen-blkfront: Advertise feature-persistent as user requested `aa45c50703` xen-blkback: Advertise feature-persistent as user requested `47a73e5e6b` mm: pagewalk: Fix race between unmap and page walker `5d0d46e625` xen/grants: prevent integer overflow in gnttab_dma_alloc_pages() `eb0c614c42` KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES `7efcbac55a` gpio: pca953x: Add mutex_lock for regcache sync in PM `517dba7987` hwmon: (gpio-fan) Fix array out of bounds access `a971343557` clk: bcm: rpi: Add missing newline `fcae47b2d2` clk: bcm: rpi: Prevent out-of-bounds access `8c90a3e0d3` clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc() `00d8bc0c16` clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate `e32982115d` Input: rk805-pwrkey - fix module autoloading `e2945f936c` clk: core: Fix runtime PM sequence in clk_core_unprepare() `4ff599df31` Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops" `c0f0ed9ef9` clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops `5f1aee7f05` drm/i915/reg: Fix spelling mistake "Unsupport" -> "Unsupported" `9629f2dfdb` binder: fix UAF of ref->proc caused by race condition `08fa8cb6df` USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id `5cf2a57c7a` misc: fastrpc: fix memory corruption on open `c99bc901d5` misc: fastrpc: fix memory corruption on probe `30fd0e23e3` iio: adc: mcp3911: use correct formula for AD conversion `89aa443437` iio: ad7292: Prevent regulator double disable `b271090eea` Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag `b202400c9c` tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete `989201bb8c` vt: Clear selection before changing the font `7fd8d33adb` powerpc: align syscall table for ppc32 `19e3f69d19` staging: rtl8712: fix use after free bugs `6ccd69141b` serial: fsl_lpuart: RS485 RTS polariy is inverse `e416fe7f16` net/smc: Remove redundant refcount increase `d73b89c3b3` Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb" `f3d1554d0f` tcp: annotate data-race around challenge_timestamp `870b6a1561` sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb `1b6666964c` kcm: fix strp_init() order and cleanup `406d554844` ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler `44dfa64589` net/sched: fix netdevice reference leaks in attach_default_qdiscs() `699d82e9a6` net: sched: tbf: don't call qdisc_put() while holding tree lock `c0cb63ee2e` Revert "xhci: turn off port power in shutdown" `6855efbaf5` wifi: cfg80211: debugfs: fix return type in ht40allow_map_read() `ddcb56e841` ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array `9276eb98cd` ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg `23a2993271` ieee802154/adf7242: defer destroy_workqueue call `c5f975e3eb` bpf, cgroup: Fix kernel BUG in purge_effective_progs `e6aeb8be85` iio: adc: mcp3911: make use of the sign bit `b69e05b1e8` platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask `f040abf62e` drm/msm/dsi: Fix number of regulators for SDM660 `43e523a407` drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg `1487e8fc16` drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4 `631fbefd87` drm/msm/dsi: fix the inconsistent indenting `5d60de7a5f` Merge 5.10.141 into android12-5.10-lts `0b8e37cbaa` Linux 5.10.141 `bdc786d737` net: neigh: don't call kfree_skb() under spin_lock_irqsave() `4931af31c4` net/af_packet: check len when min_header_len equals to 0 `64f6da455b` xfs: revert "xfs: actually bump warning counts when we send warnings" `d34798d846` xfs: fix soft lockup via spinning in filestream ag selection loop `f168801da9` xfs: fix overfilling of reserve pool `72a259bdd5` xfs: always succeed at setting the reserve pool size `cb41f22df3` xfs: remove infinite loop when reserving free block pool `28d8d2737e` io_uring: disable polling pollfree files `744b0d3080` kprobes: don't call disarm_kprobe() for disabled kprobes `8c70cce892` lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline() `6ba9e8fb47` netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y `afa169f79d` drm/amdgpu: Increase tlb flush timeout for sriov `f08a3712ba` drm/amd/display: Fix pixel clock programming `60d522f317` drm/amd/pm: add missing ->fini_microcode interface for Sienna Cichlid `f2b7b8b1c4` s390/hypfs: avoid error message under KVM `c35adafe42` neigh: fix possible DoS due to net iface start/stop loop `3c1dfeaeb3` drm/amd/display: clear optc underflow before turn off odm clock `4e5e67b13a` drm/amd/display: For stereo keep "FLIP_ANY_FRAME" `828b2a5399` drm/amd/display: Avoid MPC infinite loop `9d36e2c264` mmc: mtk-sd: Clear interrupts when cqe off/disable `98f401d363` mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse `6204bf78b2` bpf: Don't redirect packets with invalid pkt_len `dbd8c8fc60` ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead `8fc778ee2f` fbdev: fb_pm2fb: Avoid potential divide by zero error `61cc798591` net: fix refcount bug in sk_psock_get (2) `7e2fa79226` HID: hidraw: fix memory leak in hidraw_release() `bacb37bdc2` media: pvrusb2: fix memory leak in pvr_probe `872875c9ec` udmabuf: Set the DMA mask for the udmabuf device (v2) `dc81576194` HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report `412b844143` Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()" `38267d2663` Bluetooth: L2CAP: Fix build errors in some archs `ad697ade59` kbuild: Fix include path in scripts/Makefile.modpost `b9feeb6100` s390/mm: do not trigger write fault when vma does not allow VM_WRITE `0dea6b3e22` crypto: lib - remove unneeded selection of XOR_BLOCKS `e5796ff9ac` x86/nospec: Fix i386 RSB stuffing `adee8f3082` x86/nospec: Unwreck the RSB stuffing `895428ee12` mm: Force TLB flush for PFNMAP mappings before unlink_file_vma() `5939035887` Merge 5.10.140 into android12-5.10-lts `18ed766f36` Linux 5.10.140 `e897980717` bpf: Don't use tnum_range on array range checking for poke descriptors `46fcb0fc88` scsi: storvsc: Remove WQ_MEM_RECLAIM from storvsc_error_wq `8d5c106fe2` scsi: ufs: core: Enable link lost interrupt `c0ba9aa95b` perf/x86/intel/uncore: Fix broken read_counter() for SNB IMC PMU `5a768c9770` perf python: Fix build when PYTHON_CONFIG is user supplied `3ddbd0907f` blk-mq: fix io hung due to missing commit_rqs `7ca73d0a16` Documentation/ABI: Mention retbleed vulnerability info file for sysfs `1896232619` arm64: Fix match_list for erratum 1286807 on Arm Cortex-A76 `a5a58fab55` md: call __md_stop_writes in md_stop `f68f025c7e` Revert "md-raid: destroy the bitmap after destroying the thread" `62af37c5cd` mm/hugetlb: fix hugetlb not supporting softdirty tracking `6de50db104` xen/privcmd: fix error exit of privcmd_ioctl_dm_op() `8d5f8a4f25` ACPI: processor: Remove freq Qos request for all CPUs `297ae7e87a` s390: fix double free of GS and RI CBs on fork() failure `c60ae87878` asm-generic: sections: refactor memory_intersects `6858933131` loop: Check for overflow while configuring loop `14cbbb9c99` x86/bugs: Add "unknown" reporting for MMIO Stale Data `e3e0d11729` x86/unwind/orc: Unwind ftrace trampolines with correct ORC entry `090f0ac167` perf/x86/lbr: Enable the branch type for the Arch LBR by default `d2bd18d50c` btrfs: check if root is readonly while setting security xattr `dcac6293f5` btrfs: add info when mount fails due to stale replace target `b2d352ed4d` btrfs: replace: drop assert for suspended replace `2fc3c168d5` btrfs: fix silent failure when deleting root reference `3a351b567e` ionic: fix up issues with handling EAGAIN on FW cmds `79e2ca7aa9` rxrpc: Fix locking in rxrpc's sendmsg `c3a6e863d5` ixgbe: stop resetting SYSTIME in ixgbe_ptp_start_cyclecounter `23cf93bb32` net: Fix a data-race around sysctl_somaxconn. `9fcc4f4066` net: Fix data-races around sysctl_devconf_inherit_init_net. `371a3bcf31` net: Fix data-races around sysctl_fb_tunnels_only_for_init_net. `c3bda708e9` net: Fix a data-race around netdev_budget_usecs. `12a34d7f04` net: Fix a data-race around netdev_budget. `410c88314c` net: Fix a data-race around sysctl_net_busy_read. `2c7dae6c45` net: Fix a data-race around sysctl_net_busy_poll. `8db070463e` net: Fix a data-race around sysctl_tstamp_allow_data. `ed48223f87` net: Fix data-races around sysctl_optmem_max. `27e8ade792` bpf: Folding omem_charge() into sk_storage_charge() `4d4e39245d` ratelimit: Fix data-races in ___ratelimit(). `e73009ebc1` net: Fix data-races around netdev_tstamp_prequeue. `3850060352` net: Fix data-races around netdev_max_backlog. `b498a1b017` net: Fix data-races around weight_p and dev_weight_[rt]x_bias. `fb442c72db` net: Fix data-races around sysctl_[rw]mem_(max\|default). `613fd02620` net: Fix data-races around sysctl_[rw]mem(_offset)?. `e73a29554f` tcp: tweak len/truesize ratio for coalesce candidates `c08a104a8b` netfilter: nf_tables: disallow binding to already bound chain `6301a73bd8` netfilter: nf_tables: disallow jump to implicit chain from set element `9882768759` netfilter: nf_tables: upfront validation of data via nft_data_init() `8790eecdea` netfilter: bitwise: improve error goto labels `2267d38520` netfilter: nft_cmp: optimize comparison for 16-bytes `1d7d74a824` netfilter: nf_tables: consolidate rule verdict trace call `cd962806c4` netfilter: nftables: remove redundant assignment of variable err `35519ce7ba` netfilter: nft_tunnel: restrict it to netdev family `9a67c2c89c` netfilter: nft_osf: restrict osf to ipv4, ipv6 and inet families `c907dfe4ea` netfilter: nf_tables: do not leave chain stats enabled on error `ea358cfc8e` netfilter: nft_payload: do not truncate csum_offset and csum_type `93a46d6c72` netfilter: nft_payload: report ERANGE for too long offset and length `e0f8cf0192` bnxt_en: fix NQ resource accounting during vf creation on 57500 chips `624c305212` netfilter: ebtables: reject blobs that don't provide all entry points `f82a6b85e0` net: ipvtap - add __init/__exit annotations to module init/exit funcs `7e7e88e8b5` bonding: 802.3ad: fix no transmission of LACPDUs `14ef913a95` net: moxa: get rid of asymmetry in DMA mapping/unmapping `faa8bf8451` net: ipa: don't assume SMEM is page-aligned `29accb2d96` net/mlx5e: Properly disable vlan strip on non-UL reps `1bfdcde723` ice: xsk: prohibit usage of non-balanced queue id `d29d7108e1` ice: xsk: Force rings to be sized to power of 2 `50403ee6da` nfc: pn533: Fix use-after-free bugs caused by pn532_cmd_timeout `de3deadd11` rose: check NULL rose_loopback_neigh->loopback `e9fe1283a8` mm/smaps: don't access young/dirty bit if pte unpresent `c7c77185fa` mm/huge_memory.c: use helper function migration_entry_to_page() `8be096f018` SUNRPC: RPC level errors should set task->tk_rpc_status `5e49ea0998` NFSv4.2 fix problems with __nfs42_ssc_open `23c6f25a60` NFS: Don't allocate nfs_fattr on the stack in __nfs42_ssc_open() `2761612bcd` xfrm: policy: fix metadata dst->dev xmit null pointer dereference `c5c4d4c980` af_key: Do not call xfrm_probe_algs in parallel `4379a10c1d` xfrm: clone missing x->lastused in xfrm_do_migrate `1305d7d4f3` xfrm: fix refcount leak in __xfrm_policy_check() `c30c0f7205` kernel/sched: Remove dl_boosted flag comment `70d560e2fb` xfs: only bother with sync_filesystem during readonly remount `37837bc3ef` xfs: return errors in xfs_fs_sync_fs `76a51e49da` vfs: make sync_filesystem return errors from ->sync_fs `9255a42fe7` fs: remove __sync_filesystem `1b9b4139d7` xfs: reject crazy array sizes being fed to XFS_IOC_GETBMAP* `6a564bad3a` xfs: prevent a WARN_ONCE() in xfs_ioc_attr_list() `a5757df612` pinctrl: amd: Don't save/restore interrupt status and wake status bits `665433b5dd` kernel/sys_ni: add compat entry for fadvise64_64 `df1d445e7f` parisc: Fix exception handler for fldw and fstw instructions `e10bb2f2e9` audit: fix potential double free on error path from fsnotify_add_inode_mark `44cde61acc` Merge 5.10.139 into android12-5.10-lts `7a3ca8147f` Revert "ALSA: control: Use deferred fasync helper" `5597d5439f` Merge 5.10.138 into android12-5.10-lts `1e247e4040` Revert "block: remove the request_queue to argument request based tracepoints" `33d6fea819` Revert "blktrace: Trace remapped requests correctly" `eb5eb075d8` Revert "USB: HCD: Fix URB giveback issue in tasklet function" `fbe6a13851` Merge 5.10.137 into android12-5.10-lts `665ee74607` Linux 5.10.139 `37c7f25fe2` kbuild: dummy-tools: avoid tmpdir leak in dummy gcc `fa3303d70b` Linux 5.10.138 `606fe84a41` tee: fix memory leak in tee_shm_register() `3527e3cbb8` bpf: Fix KASAN use-after-free Read in compute_effective_progs `4f7286422a` qrtr: Convert qrtr_ports from IDR to XArray `1daa7629d2` PCI/ERR: Retain status from error notification `a220ff3433` can: j1939: j1939_session_destroy(): fix memory leak of skbs `05b9b0a7a7` can: j1939: j1939_sk_queue_activate_next_locked(): replace WARN_ON_ONCE with netdev_warn_once() `184e73f12c` tracing/probes: Have kprobes and uprobes use $COMM too `3debec96ca` netfilter: nf_tables: fix audit memory leak in nf_tables_commit `f3d0db3b43` netfilter: nftables: fix a warning message in nf_tables_commit_audit_collect() `059f47b3a4` MIPS: tlbex: Explicitly compare _PAGE_NO_EXEC against 0 `4b20c61365` video: fbdev: i740fb: Check the argument of i740_calc_vclk() `dac28dff90` powerpc/64: Init jump labels before parse_early_param() `52a408548a` smb3: check xattr value length earlier `336936f72a` f2fs: fix to do sanity check on segment type in build_sit_entries() `800ba89791` f2fs: fix to avoid use f2fs_bug_on() in f2fs_new_node_page() `857ccedcf5` ALSA: control: Use deferred fasync helper `658bc550a4` ALSA: timer: Use deferred fasync helper `be094c417a` ALSA: core: Add async signal helpers `6ed3e280c7` powerpc/32: Don't always pass -mcpu=powerpc to the compiler `63671b2bdf` watchdog: export lockup_detector_reconfigure `399d245775` RISC-V: Add fast call path of crash_kexec() `d881c98d0a` riscv: mmap with PROT_WRITE but no PROT_READ is invalid `333bdb72be` modules: Ensure natural alignment for .altinstructions and __bug_table sections `1e39037e44` mips: cavium-octeon: Fix missing of_node_put() in octeon2_usb_clocks_start `5e034e03f4` vfio: Clear the caps->buf to NULL after free `81939c4fbc` tty: serial: Fix refcount leak bug in ucc_uart.c `58275db3c7` lib/list_debug.c: Detect uninitialized lists `8028888329` ext4: avoid resizing to a partial cluster size `285447b819` ext4: avoid remove directory when directory is corrupted `5d8325fd15` drivers:md:fix a potential use-after-free bug `534e96302a` nvmet-tcp: fix lockdep complaint on nvmet_tcp_wq flush during queue teardown `6d7aabdba6` md: Notify sysfs sync_completed in md_reap_sync_thread() `f43a72d4da` dmaengine: sprd: Cleanup in .remove() after pm_runtime_get_sync() failed `b30aa4ff11` selftests/kprobe: Do not test for GRP/ without event failures `fa45327d8c` csky/kprobe: reclaim insn_slot on kprobe unregistration `18f62a453b` RDMA/rxe: Limit the number of calls to each tasklet `9a6178c225` um: add "noreboot" command line option for PANIC_TIMEOUT=-1 setups `e4c9f16219` PCI/ACPI: Guard ARM64-specific mcfg_quirks `4be138bcd6` cxl: Fix a memory leak in an error handling path `84d94619c7` pinctrl: intel: Check against matching data instead of ACPI companion `9ac14f973c` gadgetfs: ep_io - wait until IRQ finishes `c29a4baaad` scsi: lpfc: Prevent buffer overflow crashes in debugfs with malformed user input `eb01065fd3` clk: qcom: clk-alpha-pll: fix clk_trion_pll_configure description `56a4bccab9` zram: do not lookup algorithm in backends table `09c90f89b2` uacce: Handle parent device removal or parent driver module rmmod `6b90ab9524` clk: qcom: ipq8074: dont disable gcc_sleep_clk_src `eddb352a80` vboxguest: Do not use devm for irq `9a87f33f1d` usb: dwc2: gadget: remove D+ pull-up while no vbus with usb-role-switch `9790a5a4f0` usb: renesas: Fix refcount leak bug `cb5dd65e88` usb: host: ohci-ppc-of: Fix refcount leak bug `d86c6447ee` clk: ti: Stop using legacy clkctrl names for omap4 and 5 `152c94c10b` drm/meson: Fix overflow implicit truncation warnings `da6b37983a` irqchip/tegra: Fix overflow implicit truncation warnings `24304c6f9c` usb: gadget: uvc: call uvc uvcg_warn on completed status instead of uvcg_info `6d7ac60098` usb: cdns3 fix use-after-free at workaround 2 `0a0da5ef5b` platform/chrome: cros_ec_proto: don't show MKBP version if unsupported `e2ab7afe66` PCI: Add ACS quirk for Broadcom BCM5750x NICs `a1e7908f78` drm/sun4i: dsi: Prevent underflow when computing packet sizes `bd6165b802` netfilter: add helper function to set up the nfnetlink header and use it `06fde3cd0b` netfilter: nftables: add helper function to set the base sequence number `e2a49009ba` audit: log nftables configuration change events once per table `3aa710e967` drm/meson: Fix refcount bugs in meson_vpu_has_available_connectors() `1bfdb1912c` ASoC: SOF: intel: move sof_intel_dsp_desc() forward `823280a8fb` locking/atomic: Make test_and__bit() ordered on failure `0bd35968bc` gcc-plugins: Undefine LATENT_ENTROPY_PLUGIN when plugin disabled for a file `9112826f28` kbuild: fix the modules order between drivers and libs `0f516dcd14` igb: Add lock to avoid data race `02f3642d8e` stmmac: intel: Add a missing clk_disable_unprepare() call in intel_eth_pci_remove() `efae1735ff` fec: Fix timer capture timing in `fec_ptp_enable_pps()` `668f38fb9a` i40e: Fix to stop tx_timeout recovery if GLOBR fails `bbd6723d75` regulator: pca9450: Remove restrictions for regulator-name `b5ba5c3669` i2c: imx: Make sure to unregister adapter on remove() `19cb691faf` ice: Ignore EEXIST when setting promisc mode `7983e1e44c` net: dsa: sja1105: fix buffer overflow in sja1105_setup_devlink_regions() `83411c9f05` net: genl: fix error path memory leak in policy dumping `af1748ee51` net: dsa: felix: fix ethtool 256-511 and 512-1023 TX packet counters `9900af65f2` net: dsa: microchip: ksz9477: fix fdb_dump last invalid entry `7d51385ae0` net: moxa: pass pdev instead of ndev to DMA functions `92dc64e8f5` net: dsa: mv88e6060: prevent crash on an unused port `aa16c8c4e8` spi: meson-spicc: add local pow2 clock ops to preserve rate between messages `a868f771ee` powerpc/pci: Fix get_phb_number() locking `3561f4d12f` netfilter: nf_tables: check NFT_SET_CONCAT flag if field_count is specified `01b0cae6b7` netfilter: nf_tables: validate NFTA_SET_ELEM_OBJREF based on NFT_SET_OBJECT flag `8d2fe4b9ed` netfilter: nf_tables: really skip inactive sets when allocating name `330f0a552b` ASoC: tas2770: Fix handling of mute/unmute `353cc4cb97` ASoC: tas2770: Drop conflicting set_bias_level power setting `dffe1c4780` ASoC: tas2770: Allow mono streams `fc57e3fde2` ASoC: tas2770: Set correct FSYNC polarity `4fe80492d5` iavf: Fix adminq error handling `63684e467b` nios2: add force_successful_syscall_return() `600ff4b13b` nios2: restarts apply only to the first sigframe we build... `f20bc59ccf` nios2: fix syscall restart checks `8d0118a027` nios2: traced syscall does need to check the syscall number `1d2c89dc48` nios2: don't leave NULLs in sys_call_table[] `d29cdf865a` nios2: page fault et.al. are not* restartable syscalls... `76be981882` dpaa2-eth: trace the allocated address instead of page struct `787511c768` perf probe: Fix an error handling path in 'parse_perf_probe_command()' `2c746ec91d` geneve: fix TOS inheriting for ipv4 `a0ae122e9a` atm: idt77252: fix use-after-free bugs caused by tst_timer `291cba960b` xen/xenbus: fix return type in xenbus_file_read() `3c555a0599` nfp: ethtool: fix the display error of `ethtool -m DEVNAME` `76f3b97e56` NTB: ntb_tool: uninitialized heap data in tool_fn_write() `7ef9f0efbe` tools build: Switch to new openssl API for test-libcrypto `7ef0645ebe` kbuild: dummy-tools: avoid tmpdir leak in dummy gcc `aee18421bd` ceph: don't leak snap_rwsem in handle_cap_grant `eea0d84a4f` tools/vm/slabinfo: use alphabetic order when two values are equal `97cea2cb7c` ceph: use correct index when encoding client supported features `7a327285a7` dt-bindings: clock: qcom,gcc-msm8996: add more GCC clock sources `87c4b359e3` dt-bindings: arm: qcom: fix MSM8916 MTP compatibles `55fdefcb52` vsock: Set socket state back to SS_UNCONNECTED in vsock_connect_timeout() `38ddccbda5` vsock: Fix memory leak in vsock_connect() `549822e0dc` plip: avoid rcu debug splat `0c4542cb6a` ipv6: do not use RT_TOS for IPv6 flowlabel `38b83883ce` geneve: do not use RT_TOS for IPv6 flowlabel `b0c3eec4ac` ACPI: property: Return type of acpi_add_nondev_subnodes() should be bool `cc0bfd933c` pinctrl: qcom: sm8250: Fix PDC map `d35d9bba29` pinctrl: sunxi: Add I/O bias setting for H6 R-PIO `e8f5699a82` pinctrl: qcom: msm8916: Allow CAMSS GP clocks to be muxed `78d0510389` pinctrl: nomadik: Fix refcount leak in nmk_pinctrl_dt_subnode_to_map `ab2b55bb25` net: bgmac: Fix a BUG triggered by wrong bytes_compl `0e28678a77` devlink: Fix use-after-free after a failed reload `faafa2a87f` virtio_net: fix memory leak inside XPD_TX with mergeable `fd70ebf299` SUNRPC: Reinitialise the backchannel request buffers before reuse `59d2e8fa41` sunrpc: fix expiry of auth creds `df60c534d4` net: atlantic: fix aq_vec index out of range error `cc25abcec8` can: mcp251x: Fix race condition on receive interrupt `b9d9cf88c8` bpf: Check the validity of max_rdwr_access for sock local storage map iterator `f7d844df5e` bpf: Acquire map uref in .init_seq_private for sock{map,hash} iterator `d7ad7e65aa` bpf: Acquire map uref in .init_seq_private for sock local storage map iterator `bda6fe3ea8` bpf: Acquire map uref in .init_seq_private for hash map iterator `30d7198da8` bpf: Acquire map uref in .init_seq_private for array map iterator `76ffd20424` NFSv4/pnfs: Fix a use-after-free bug in open `f2bd1cc1fe` NFSv4.1: RECLAIM_COMPLETE must handle EACCES `cfde64bd31` NFSv4: Fix races in the legacy idmapper upcall `060c111373` NFSv4.1: Handle NFS4ERR_DELAY replies to OP_SEQUENCE correctly `a351a73d90` NFSv4.1: Don't decrease the value of seq_nr_highest_sent `a408f135c4` Documentation: ACPI: EINJ: Fix obsolete example `8aab429558` apparmor: Fix memleak in aa_simple_write_to_buffer() `2ceeb3296e` apparmor: fix reference count leak in aa_pivotroot() `2672f3eb7a` apparmor: fix overlapping attachment computation `1ac89741a2` apparmor: fix setting unconfined mode on a loaded profile `4188f91c82` apparmor: fix aa_label_asxprint return check `e0ca0156a7` apparmor: Fix failed mount permission check error message `08f8128bc9` apparmor: fix absroot causing audited secids to begin with = `bca03f0bbc` apparmor: fix quiet_denied for file rules `2b74344135` can: ems_usb: fix clang's -Wunaligned-access warning `7f06c78211` ALSA: usb-audio: More comprehensive mixer map for ASUS ROG Zenith II `5d3b02b80d` tracing: Have filter accept "common_cpu" to be consistent `6359850f9d` btrfs: fix lost error handling when looking up extended ref on log replay `79895cefa4` mmc: meson-gx: Fix an error handling path in meson_mmc_probe() `13a497c3c5` mmc: pxamci: Fix an error handling path in pxamci_probe() `4a211dd485` mmc: pxamci: Fix another error handling path in pxamci_probe() `a785d84178` ata: libata-eh: Add missing command name `fb1857c2e4` rds: add missing barrier to release_refill `6876b4804b` x86/mm: Use proper mask when setting PUD mapping `b68e40b52f` ALSA: hda/realtek: Add quirk for Clevo NS50PU, NS70PU `e14e2fec35` ALSA: info: Fix llseek return value when using callback `a634d58881` Merge branch 'android12-5.10' into branch 'android12-5.10-lts' `74ded189e5` Linux 5.10.137 `fb4e220e1b` btrfs: raid56: don't trust any cached sector in __raid56_parity_recover() `1e1a039f44` btrfs: only write the sectors in the vertical stripe which has data stripes `8f317cd888` sched/fair: Fix fault in reweight_entity `aa318d35be` net_sched: cls_route: disallow handle of 0 `5a2a00b604` net/9p: Initialize the iounit field during fid creation `578c349570` tee: add overflow check in register_shm_helper() `98b20e1612` kvm: x86/pmu: Fix the compare function used by the pmu event filter `705dfc4575` mtd: rawnand: arasan: Prevent an unsupported configuration `c898e917d8` Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm regression `e81046da1d` Revert "net: usb: ax88179_178a needs FLAG_SEND_ZLP" `a60996dc02` drm/vc4: change vc4_dma_range_matches from a global to static `3422e24af9` drm/bridge: tc358767: Fix (e)DP bridge endpoint parsing in dedicated function `2223b35c57` Revert "mwifiex: fix sleep in atomic context bugs caused by dev_coredumpv" `8338305317` tcp: fix over estimation in sk_forced_mem_schedule() `c35c01a7cb` mac80211: fix a memory leak where sta_info is not freed `ac7de8c2ba` KVM: x86: Avoid theoretical NULL pointer dereference in kvm_irq_delivery_to_apic_fast() `4c85e207c1` KVM: x86: Check lapic_in_kernel() before attempting to set a SynIC irq `a4c94205ba` KVM: Add infrastructure and macro to mark VM as bugged `7018f03d97` net_sched: cls_route: remove from list when handle is 0 `49dba30638` dm raid: fix address sanitizer warning in raid_status `c2d47bef93` dm raid: fix address sanitizer warning in raid_resume `d0b495aa26` ext4: correct the misjudgment in ext4_iget_extra_inode `603fb7bd74` ext4: correct max_inline_xattr_value_size computing `e8c747496f` ext4: fix extent status tree race in writeback error recovery path `ac8cc06114` ext4: update s_overhead_clusters in the superblock during an on-line resize `bb8592efcf` ext4: fix use-after-free in ext4_xattr_set_entry `69d1a36eb4` ext4: make sure ext4_append() always allocates new block `e1682c7171` ext4: fix warning in ext4_iomap_begin as race between bmap and write `2da44a2927` ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h `1571c46130` ext4: check if directory block is within i_size `e99da0f921` tracing: Use a struct alignof to determine trace event field alignment `35508b60b5` tpm: eventlog: Fix section mismatch for DEBUG_SECTION_MISMATCH `0e48eaf75d` KEYS: asymmetric: enforce SM2 signature use pkey algo `135d9e0710` xen-blkfront: Apply 'feature_persistent' parameter when connect `d4fb08e5a4` xen-blkback: Apply 'feature_persistent' parameter when connect `9e84088452` xen-blkback: fix persistent grants negotiation `b788508a09` KVM: x86/pmu: Ignore pmu->global_ctrl check if vPMU doesn't support global_ctrl `6b4addec2f` KVM: VMX: Mark all PERF_GLOBAL_(OVF)_CTRL bits reserved if there's no vPMU `46ec3d8e90` KVM: x86/pmu: Introduce the ctrl_mask value for fixed counter `2ba1feb143` KVM: x86/pmu: Use different raw event masks for AMD and Intel `4bbfc055d3` KVM: x86/pmu: Use binary search to check filtered events `441726394e` KVM: x86/pmu: preserve IA32_PERF_CAPABILITIES across CPUID refresh `a7d0b21c6b` KVM: nVMX: Inject #UD if VMXON is attempted with incompatible CR0/CR4 `c72a9b1d0d` KVM: x86: Move vendor CR4 validity check to dedicated kvm_x86_ops hook `2f04a04d06` KVM: SVM: Drop VMXE check from svm_set_cr4() `da7f731f2e` KVM: VMX: Drop explicit 'nested' check from vmx_set_cr4() `8b8b376903` KVM: VMX: Drop guest CPUID check for VMXE in vmx_set_cr4() `5f3c8352cc` ACPI: CPPC: Do not prevent CPPC from working in the future `40d28ae576` btrfs: reset block group chunk force if we have to wait `e2f1507303` btrfs: reject log replay if there is unsupported RO compat flag `b58294ce1a` um: Allow PM with suspend-to-idle `c6cf21d8d5` timekeeping: contribute wall clock to rng on time change `5e2cf70515` dm thin: fix use-after-free crash in dm_sm_register_threshold_callback `539c20ad26` kexec, KEYS, s390: Make use of built-in and secondary keyring for signature verification `782e73acdb` dm writecache: set a default MAX_WRITEBACK_JOBS `e41b3b8831` serial: 8250: Fold EndRun device support into OxSemi Tornado code `194dc559e6` serial: 8250_pci: Replace dev_() by pci_() macros `297e2fd08a` serial: 8250_pci: Refactor the loop in pci_ite887x_init() `3110e5a49b` serial: 8250: Correct the clock for OxSemi PCIe devices `3e9baedb32` serial: 8250: Dissociate 4MHz Titan ports from Oxford ports `85d6306a87` PCI/AER: Iterate over error counters instead of error strings `d83d886e69` PCI/ERR: Recover from RCEC AER errors `bb6990fd37` PCI/ERR: Add pci_walk_bridge() to pcie_do_recovery() `7730ba6151` PCI/ERR: Avoid negated conditional for clarity `078d79fad5` PCI/ERR: Use "bridge" for clarity in pcie_do_recovery() `2e3458b995` PCI/ERR: Simplify by computing pci_pcie_type() once `f236fa3850` PCI/ERR: Simplify by using pci_upstream_bridge() `de4534ac28` PCI/ERR: Rename reset_link() to reset_subordinates() `78d431e8a5` PCI/ERR: Bind RCEC devices to the Root Port driver `dce8d7427c` PCI/AER: Write AER Capability only when we control it `5659efdadf` iommu/vt-d: avoid invalid memory access via node_online(NUMA_NO_NODE) `e7ccee2f09` KVM: x86: Signal #GP, not -EPERM, on bad WRMSR(MCi_CTL/STATUS) `f5385a590d` KVM: set_msr_mce: Permit guests to ignore single-bit ECC errors `6a84dae3a7` intel_th: pci: Add Raptor Lake-S CPU support `581f7eb8ae` intel_th: pci: Add Raptor Lake-S PCH support `36f5ddde67` intel_th: pci: Add Meteor Lake-P support `08272646cd` firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails `bc945ca496` usbnet: smsc95xx: Avoid link settings race on interrupt reception `e9733561e9` usbnet: smsc95xx: Don't clear read-only PHY interrupt `04c9d23ac3` mtd: rawnand: arasan: Fix clock rate in NV-DDR `dc0e4a10b4` mtd: rawnand: arasan: Support NV-DDR interface `87d1266b4c` mtd: rawnand: arasan: Fix a macro parameter `d4f7bcce90` mtd: rawnand: Add NV-DDR timings `72fae7e7f7` mtd: rawnand: arasan: Check the proposed data interface is supported `c91e5215a4` mtd: rawnand: Add a helper to clarify the interface configuration `ae1e2bc7bf` drm/vc4: drv: Adopt the dma configuration from the HVS or V3D component `fe695a2b46` HID: hid-input: add Surface Go battery quirk `434c4aad53` HID: Ignore battery for Elan touchscreen on HP Spectre X360 15-df0xxx `2d05cf1069` drm/mediatek: Keep dsi as LP00 before dcs cmds transfer `3117287578` drm/mediatek: Allow commands to be sent during video mode `a3a85c045a` drm/i915/dg1: Update DMC_DEBUG3 register `dd02510fb4` spmi: trace: fix stack-out-of-bound access in SPMI tracing functions `bc8c5b3b3e` __follow_mount_rcu(): verify that mount_lock remains unchanged `bda7046d4d` Input: gscps2 - check return value of ioremap() in gscps2_probe() `541840859a` posix-cpu-timers: Cleanup CPU timers before freeing them during exec `ce19182b43` x86/olpc: fix 'logical not is only applied to the left hand side' `43e059d016` ftrace/x86: Add back ftrace_expected assignment `fd96b61389` x86/bugs: Enable STIBP for IBPB mitigated RETBleed `1118020b3b` scsi: qla2xxx: Fix losing FCP-2 targets during port perturbation tests `912408ba0b` scsi: qla2xxx: Fix losing FCP-2 targets on long port disable with I/Os `82cb0ebe5b` scsi: qla2xxx: Fix erroneous mailbox timeout after PCI error injection `7941ca578c` scsi: qla2xxx: Turn off multi-queue for 8G adapters `2ffe5285ea` scsi: qla2xxx: Fix discovery issues in FC-AL topology `b8aad5eba7` scsi: zfcp: Fix missing auto port scan and thus missing target ports `5e0da18956` video: fbdev: s3fb: Check the size of screen before memset_io() `09e733d6ac` video: fbdev: arkfb: Check the size of screen before memset_io() `bd8269e576` video: fbdev: vt8623fb: Check the size of screen before memset_io() `a9943942a5` x86/entry: Build thunk_$(BITS) only if CONFIG_PREEMPTION=y `e6c228b950` sched: Fix the check of nr_running at queue wakelist `bd1ebcbbf0` tools/thermal: Fix possible path truncations `0288fa799e` video: fbdev: arkfb: Fix a divide-by-zero bug in ark_set_pixclock() `94398c1fec` x86/numa: Use cpumask_available instead of hardcoded NULL check `336626564b` sched, cpuset: Fix dl_cpu_busy() panic due to empty cs->cpus_allowed `0039189a3b` sched/deadline: Merge dl_task_can_attach() and dl_cpu_busy() `e695256d46` scripts/faddr2line: Fix vmlinux detection on arm64 `232f4aca40` genelf: Use HAVE_LIBCRYPTO_SUPPORT, not the never defined HAVE_LIBCRYPTO `cadeb5186e` powerpc/pci: Fix PHB numbering when using opal-phbid `2a49b025c3` kprobes: Forbid probing on trampoline and BPF code areas `4296089f61` perf symbol: Fail to read phdr workaround `00dc7cbbb5` powerpc/cell/axon_msi: Fix refcount leak in setup_msi_msg_address `6d1e53f7f1` powerpc/xive: Fix refcount leak in xive_get_max_prio `85aff6a9b7` powerpc/spufs: Fix refcount leak in spufs_init_isolated_loader `50e7896c8e` f2fs: fix to remove F2FS_COMPR_FL and tag F2FS_NOCOMP_FL at the same time `ec769406d0` f2fs: write checkpoint during FG_GC `d031105739` f2fs: don't set GC_FAILURE_PIN for background GC `47a8fe1b15` powerpc/pci: Prefer PCI domain assignment via DT 'linux,pci-domain' and alias `7ac58a83d8` powerpc/32: Do not allow selection of e5500 or e6500 CPUs on PPC32 `2d2b6adb22` ASoC: mchp-spdifrx: disable end of block interrupt on failures `ca326aff6b` video: fbdev: sis: fix typos in SiS_GetModeID() `da276dc288` video: fbdev: amba-clcd: Fix refcount leak bugs `345208581c` watchdog: armada_37xx_wdt: check the return value of devm_ioremap() in armada_37xx_wdt_probe() `d3e6460619` ASoC: audio-graph-card: Add of_node_put() in fail path `92644d505b` fuse: Remove the control interface for virtio-fs `60e494b4d5` ASoC: qcom: q6dsp: Fix an off-by-one in q6adm_alloc_copp() `5682b4f84a` ASoC: fsl_easrc: use snd_pcm_format_t type for sample_format `9c2ad32ed9` s390/zcore: fix race when reading from hardware system area `ae921d176b` s390/dump: fix old lowcore virtual vs physical address confusion `b002a71d45` perf tools: Fix dso_id inode generation comparison `2ada6b4a80` iommu/arm-smmu: qcom_iommu: Add of_node_put() when breaking out of loop `afdbadbf18` mfd: max77620: Fix refcount leak in max77620_initialise_fps `52ae9c1599` mfd: t7l66xb: Drop platform disable callback `5a0e3350c2` remoteproc: sysmon: Wait for SSCTL service to come up `3487aa558a` lib/smp_processor_id: fix imbalanced instrumentation_end() call `483ad8a16f` kfifo: fix kfifo_to_user() return type `9715809b9e` rpmsg: qcom_smd: Fix refcount leak in qcom_smd_parse_edge `0ce20194b4` iommu/exynos: Handle failed IOMMU device registration properly `8fd063a608` tty: n_gsm: fix missing corner cases in gsmld_poll() `01c8094bed` tty: n_gsm: fix DM command `6737d4f5f5` tty: n_gsm: fix wrong T1 retry count handling `b16d653bc7` vfio/ccw: Do not change FSM state in subchannel event `db574d3bb6` vfio/mdev: Make to_mdev_device() into a static inline `a2fbf4acd2` vfio: Split creation of a vfio_device into init and register ops `f54fa910e6` vfio: Simplify the lifetime logic for vfio_device `0abdb80e81` vfio: Remove extra put/gets around vfio_device->group `cb83b12320` remoteproc: qcom: wcnss: Fix handling of IRQs `2f735069cd` ASoC: qcom: Fix missing of_node_put() in asoc_qcom_lpass_cpu_platform_probe() `273d412177` tty: n_gsm: fix race condition in gsmld_write() `2466486cae` tty: n_gsm: fix packet re-transmission without open control channel `34c9fe392d` tty: n_gsm: fix non flow control frames during mux flow off `006e9d5a98` tty: n_gsm: fix wrong queuing behavior in gsm_dlci_data_output() `c45b5d24fe` tty: n_gsm: fix user open not possible at responder until initiator open `9e38020f17` tty: n_gsm: Delete gsmtty open SABM frame when config requester `d94a552183` ASoC: samsung: change gpiod_speaker_power and rx1950_audio from global to static variables `875b2bf469` powerpc/perf: Optimize clearing the pending PMI and remove WARN_ON for PMI check in power_pmu_disable `ba889da9a0` ASoC: samsung: h1940_uda1380: include proepr GPIO consumer header `4046f3ef3b` profiling: fix shift too large makes kernel panic `3bf64b9cc6` selftests/livepatch: better synchronize test_klp_callbacks_busy `75358732af` remoteproc: k3-r5: Fix refcount leak in k3_r5_cluster_of_init `2aa8737d49` rpmsg: mtk_rpmsg: Fix circular locking dependency `1d5fc40382` ASoC: codecs: wcd9335: move gains from SX_TLV to S8_TLV `4181b21418` ASoC: codecs: msm8916-wcd-digital: move gains from SX_TLV to S8_TLV `4b171ac88c` serial: 8250_dw: Store LSR into lsr_saved_flags in dw8250_tx_wait_empty() `d98dd16d3d` serial: 8250: Export ICR access helpers for internal use `403d469719` ASoC: mediatek: mt8173-rt5650: Fix refcount leak in mt8173_rt5650_dev_probe `132b2757c5` ASoC: codecs: da7210: add check for i2c_add_driver `a0381a9f3e` ASoC: mt6797-mt6351: Fix refcount leak in mt6797_mt6351_dev_probe `aa1214ece3` ASoC: mediatek: mt8173: Fix refcount leak in mt8173_rt5650_rt5676_dev_probe `ec0c272b18` ASoC: samsung: Fix error handling in aries_audio_probe `bae95c5aee` ASoC: cros_ec_codec: Fix refcount leak in cros_ec_codec_platform_probe `e2a4e46f52` opp: Fix error check in dev_pm_opp_attach_genpd() `3b97370322` usb: cdns3: Don't use priv_dev uninitialized in cdns3_gadget_ep_enable() `f7161d0da9` jbd2: fix assertion 'jh->b_frozen_data == NULL' failure when journal aborted `a6d7f22473` ext4: recover csum seed of tmp_inode after migrating to extents `914bf4aa2d` jbd2: fix outstanding credits assert in jbd2_journal_commit_transaction() `706960d328` nvme: use command_id instead of req->tag in trace_nvme_complete_rq() `7a4b46784a` null_blk: fix ida error handling in null_add_dev() `3ef491b26c` RDMA/rxe: Fix error unwind in rxe_create_qp() `53da1f0fa0` RDMA/mlx5: Add missing check for return value in get namespace flow `c0ba87f3e7` selftests: kvm: set rax before vmcall `4ffa6cecb5` mm/mmap.c: fix missing call to vm_unacct_memory in mmap_region `de95b52d9a` RDMA/srpt: Fix a use-after-free `d14a44cf29` RDMA/srpt: Introduce a reference count in struct srpt_device `204a8486d7` RDMA/srpt: Duplicate port name members `5ba56d9bd0` platform/olpc: Fix uninitialized data in debugfs write `7af83bb516` usb: cdns3: change place of 'priv_ep' assignment in cdns3_gadget_ep_dequeue(), cdns3_gadget_ep_enable() `a916e80360` USB: serial: fix tty-port initialized comments `b1124a2f47` PCI: tegra194: Fix link up retry sequence `88a694d9c8` PCI: tegra194: Fix Root Port interrupt handling `e2d132ca7f` HID: alps: Declare U1_UNICORN_LEGACY support `74e57439e2` mmc: cavium-thunderx: Add of_node_put() when breaking out of loop `3bed7b9811` mmc: cavium-octeon: Add of_node_put() when breaking out of loop `66c8e816f2` HID: mcp2221: prevent a buffer overflow in mcp_smbus_write() `26975d8ea9` gpio: gpiolib-of: Fix refcount bugs in of_mm_gpiochip_add_data() `a85c7dd1ed` RDMA/hfi1: fix potential memory leak in setup_base_ctxt() `9ade92ddaf` RDMA/siw: Fix duplicated reported IW_CM_EVENT_CONNECT_REPLY event `0ecc91cf96` RDMA/hns: Fix incorrect clearing of interrupt status register `79ce50ddda` RDMA/qedr: Fix potential memory leak in __qedr_alloc_mr() `aaa1a81506` RDMA/qedr: Improve error logs for rdma_alloc_tid error return `84f83a2619` RDMA/rtrs-srv: Fix modinfo output for stringify `50a249ad1d` RDMA/rtrs: Avoid Wtautological-constant-out-of-range-compare `2b3dcfbece` RDMA/rtrs: Define MIN_CHUNK_SIZE `993cd16211` um: random: Don't initialise hwrng struct with zero `a6a7f80e62` interconnect: imx: fix max_node_id `5bcc37dc24` eeprom: idt_89hpesx: uninitialized data in idt_dbgfs_csr_write() `4ab5662cc3` usb: dwc3: qcom: fix missing optional irq warnings `d376ca6716` usb: dwc3: core: Do not perform GCTL_CORE_SOFTRESET during bootup `251572a26d` usb: dwc3: core: Deprecate GCTL.CORESOFTRESET `e6db5780c2` usb: aspeed-vhub: Fix refcount leak bug in ast_vhub_init_desc() `c818fa991c` usb: gadget: udc: amd5536 depends on HAS_DMA `d6d344eeef` xtensa: iss: fix handling error cases in iss_net_configure() `fb4c1555f9` xtensa: iss/network: provide release() callback `2fe0b06c16` scsi: smartpqi: Fix DMA direction for RAID requests `7542130af1` PCI: qcom: Set up rev 2.1.0 PARF_PHY before enabling clocks `ee70aa214a` PCI/portdrv: Don't disable AER reporting in get_port_device_capability() `9d216035d1` KVM: s390: pv: leak the topmost page table when destroy fails `59fd7c0b41` mmc: block: Add single read for 4k sector cards `2985acdaf2` mmc: sdhci-of-at91: fix set_uhs_signaling rewriting of MC1R `9260a154b3` memstick/ms_block: Fix a memory leak `ae2369ac42` memstick/ms_block: Fix some incorrect memory allocation `b305475df7` mmc: sdhci-of-esdhc: Fix refcount leak in esdhc_signal_voltage_switch `028c8632a2` staging: rtl8192u: Fix sleep in atomic context bug in dm_fsync_timer_callback `6ae2881c1d` intel_th: msu: Fix vmalloced buffers `81222cfda6` intel_th: msu-sink: Potential dereference of null pointer `a8f3b78b1f` intel_th: Fix a resource leak in an error handling path `ab3b82435f` PCI: endpoint: Don't stop controller when unbinding endpoint function `b9b4992f89` dmaengine: sf-pdma: Add multithread support for a DMA channel `37e1d474a3` dmaengine: sf-pdma: apply proper spinlock flags in sf_pdma_prep_dma_memcpy() `38715a0ccb` KVM: arm64: Don't return from void function `fbd7b564f9` soundwire: bus_type: fix remove and shutdown support `ed457b0029` PCI: dwc: Always enable CDM check if "snps,enable-cdm-check" exists `e7599a5974` PCI: dwc: Deallocate EPC memory on dw_pcie_ep_init() errors `80d9f6541e` PCI: dwc: Add unroll iATU space support to dw_pcie_disable_atu() `2293b23d27` clk: qcom: camcc-sdm845: Fix topology around titan_top power domain `b28ebe7d2f` clk: qcom: ipq8074: set BRANCH_HALT_DELAY flag for UBI clocks `b83af7b4ec` clk: qcom: ipq8074: fix NSS port frequency tables `58023f5291` clk: qcom: ipq8074: SW workaround for UBI32 PLL lock `e2330494f0` clk: qcom: ipq8074: fix NSS core PLL-s `b840c2926d` usb: host: xhci: use snprintf() in xhci_decode_trb() `42f1827096` clk: qcom: clk-krait: unlock spin after mux completion `a93f33aeef` driver core: fix potential deadlock in __driver_attach `2593f971f0` misc: rtsx: Fix an error handling path in rtsx_pci_probe() `267c5f17a0` dmaengine: dw-edma: Fix eDMA Rd/Wr-channels and DMA-direction semantics `956b79c206` mwifiex: fix sleep in atomic context bugs caused by dev_coredumpv `803526555b` mwifiex: Ignore BTCOEX events from the 88W8897 firmware `dceedbb5ab` KVM: Don't set Accessed/Dirty bits for ZERO_PAGE `02d203f488` clk: mediatek: reset: Fix written reset bit offset `4f51a09f3d` iio: accel: bma400: Reordering of header files `ab831a12c8` platform/chrome: cros_ec: Always expose last resume result `366d0123c3` iio: accel: bma400: Fix the scale min and max macro values `edfa0851d8` netfilter: xtables: Bring SPDX identifier back `9feb3ecd07` usb: xhci: tegra: Fix error check `bb5e59f00f` usb: gadget: tegra-xudc: Fix error check in tegra_xudc_powerdomain_init() `d35903e965` usb: ohci-nxp: Fix refcount leak in ohci_hcd_nxp_probe `585d22a562` usb: host: Fix refcount leak in ehci_hcd_ppc_of_probe `474f12deaa` fpga: altera-pr-ip: fix unsigned comparison with less than zero `175428c86f` mtd: st_spi_fsm: Add a clk_disable_unprepare() in .probe()'s error path `55d0f7da66` mtd: partitions: Fix refcount leak in parse_redboot_of `b4e150d295` mtd: sm_ftl: Fix deadlock caused by cancel_work_sync in sm_release `ebda3d6b00` HID: cp2112: prevent a buffer overflow in cp2112_xfer() `cdf92a0aee` PCI: tegra194: Fix PM error handling in tegra_pcie_config_ep() `b0e82f95fd` mtd: rawnand: meson: Fix a potential double free issue `941ef6997f` mtd: maps: Fix refcount leak in ap_flash_init `52ae2b14f7` mtd: maps: Fix refcount leak in of_flash_probe_versatile `6471c83894` clk: renesas: r9a06g032: Fix UART clkgrp bitsel `38c9cc68e3` wireguard: allowedips: don't corrupt stack when detecting overflow `17541a4aab` wireguard: ratelimiter: use hrtimer in selftest `aa8f559336` dccp: put dccp_qpolicy_full() and dccp_qpolicy_push() in the same lock `5b69f34dac` net: ionic: fix error check for vlan flags in ionic_set_nic_features() `9a070a4417` net: rose: fix netdev reference changes `397e52dec1` netdevsim: Avoid allocation warnings triggered from user space `692751f260` iavf: Fix max_rate limiting `b0d67ef5b4` net: allow unbound socket for packets in VRF when tcp_l3mdev_accept set `1d9c81833d` tcp: Fix data-races around sysctl_tcp_l3mdev_accept. `0de9b3f81e` ipv6: add READ_ONCE(sk->sk_bound_dev_if) in INET6_MATCH() `b7325b27d8` tcp: sk->sk_bound_dev_if once in inet_request_bound_dev_if() `f7884d9500` inet: add READ_ONCE(sk->sk_bound_dev_if) in INET_MATCH() `c206177ca8` crypto: hisilicon/sec - fix auth key size error `9524edb1a7` crypto: inside-secure - Add missing MODULE_DEVICE_TABLE for of `cb62775079` crypto: hisilicon/hpre - don't use GFP_KERNEL to alloc mem during softirq `e6cbd15950` net/mlx5e: Fix the value of MLX5E_MAX_RQ_NUM_MTTS `1f7ffdea19` net/mlx5e: Remove WARN_ON when trying to offload an unsupported TLS cipher/version `420cf3b781` media: cedrus: hevc: Add check for invalid timestamp `97e5d3e46a` wifi: libertas: Fix possible refcount leak in if_usb_probe() `38d71acc15` wifi: iwlwifi: mvm: fix double list_add at iwl_mvm_mac_wake_tx_queue `6c5fee83bd` wifi: wil6210: debugfs: fix uninitialized variable use in `wil_write_file_wmi()` `c040a02e4c` i2c: mux-gpmux: Add of_node_put() when breaking out of loop `353d55ff1b` i2c: cadence: Support PEC for SMBus block read `0c5dbac1ce` Bluetooth: hci_intel: Add check for platform_driver_register `a7a7488cb1` can: pch_can: pch_can_error(): initialize errc before using it `4c036be757` can: error: specify the values of data[5..7] of CAN error frames `f0ef21b739` can: usb_8dev: do not report txerr and rxerr during bus-off `ca1a2c5388` can: kvaser_usb_leaf: do not report txerr and rxerr during bus-off `9e6ceba6be` can: kvaser_usb_hydra: do not report txerr and rxerr during bus-off `cddef4bbeb` can: sun4i_can: do not report txerr and rxerr during bus-off `22e382d47d` can: hi311x: do not report txerr and rxerr during bus-off `06e355b46c` can: sja1000: do not report txerr and rxerr during bus-off `6ec509679b` can: rcar_can: do not report txerr and rxerr during bus-off `5d85a89875` can: pch_can: do not report txerr and rxerr during bus-off `d2b9e664bb` selftests/bpf: fix a test for snprintf() overflow `a06c98c47e` wifi: p54: add missing parentheses in p54_flush() `56924fc19d` wifi: p54: Fix an error handling path in p54spi_probe() `05ceda14ef` wifi: wil6210: debugfs: fix info leak in wil_write_file_wmi() `36ba389960` fs: check FMODE_LSEEK to control internal pipe splicing `7430e58764` bpf: Fix subprog names in stack traces. `990ca39e78` selftests: timers: clocksource-switch: fix passing errors from child `ee3cc4c761` selftests: timers: valid-adjtimex: build fix for newer toolchains `f29cf37698` libbpf: Fix the name of a reused map `799cfed1b1` tcp: make retransmitted SKB fit into the send window `5713b0be6d` drm/exynos/exynos7_drm_decon: free resources when clk_set_parent() failed. `9aa4ad5cca` mediatek: mt76: mac80211: Fix missing of_node_put() in mt76_led_init() `3ad958bc48` mt76: mt76x02u: fix possible memory leak in __mt76x02u_mcu_send_msg `b1812f6500` media: platform: mtk-mdp: Fix mdp_ipi_comm structure alignment `1008c6d98b` crypto: hisilicon - Kunpeng916 crypto driver don't sleep when in softirq `16e18a8ac7` crypto: hisilicon/sec - don't sleep when in softirq `1f697d7952` crypto: hisilicon/sec - fixes some coding style `bf386c955f` drm/msm/mdp5: Fix global state lock backoff `e74f3097a9` net: hinic: avoid kernel hung in hinic_get_stats64() `e286a882f2` net: hinic: fix bug that ethtool get wrong stats `8369a39b52` hinic: Use the bitmap API when applicable `26a10aef28` lib: bitmap: provide devm_bitmap_alloc() and devm_bitmap_zalloc() `1238da5f32` lib: bitmap: order includes alphabetically `7f29d75693` drm: bridge: sii8620: fix possible off-by-one `8bb0be3186` drm/mediatek: dpi: Only enable dpi after the bridge is enabled `c47d69ed56` drm/mediatek: dpi: Remove output format of YUV `fc85cb33f6` drm/rockchip: Fix an error handling path rockchip_dp_probe() `9f416e32ed` drm/rockchip: vop: Don't crash for invalid duplicate_state() `e2d2dcab19` selftests/xsk: Destroy BPF resources only when ctx refcount drops to 0 `64b1e3f904` crypto: arm64/gcm - Select AEAD for GHASH_ARM64_CE `2e306d74ad` drm/vc4: hdmi: Correct HDMI timing registers for interlaced modes `36f797a10f` drm/vc4: hdmi: Fix timings for interlaced modes `717325e814` drm/vc4: hdmi: Limit the BCM2711 to the max without scrambling `c015d12317` drm/vc4: hdmi: Don't access the connector state in reset if kmalloc fails `ba8ffdb450` drm/vc4: hdmi: Avoid full hdmi audio fifo writes `b161b27067` drm/vc4: hdmi: Remove firmware logic for MAI threshold setting `cefc8e7e0e` drm/vc4: dsi: Add correct stop condition to vc4_dsi_encoder_disable iteration `acfca24ec0` drm/vc4: dsi: Fix dsi0 interrupt support `97c2fa3a7b` drm/vc4: dsi: Register dsi0 as the correct vc4 encoder type `6cc1edddcf` drm/vc4: dsi: Introduce a variant structure `79374da862` drm/vc4: dsi: Use snprintf for the PHY clocks instead of an array `1f98187a7c` drm/vc4: drv: Remove the DSI pointer in vc4_drv `ed2f42bd80` drm/vc4: dsi: Correct pixel order for DSI0 `ddf6af3b0b` drm/vc4: dsi: Correct DSI divider calculations `f517da5234` drm/vc4: plane: Fix margin calculations for the right/bottom edges `5aec7cb08b` drm/vc4: plane: Remove subpixel positioning check `611f86965d` media: tw686x: Fix memory leak in tw686x_video_init `7f7336ce35` media: v4l2-mem2mem: prevent pollerr when last_buffer_dequeued is set `bb480bffc1` media: hdpvr: fix error value returns in hdpvr_read `f57699a9b6` drm/mcde: Fix refcount leak in mcde_dsi_bind `6a43236ebc` drm: bridge: adv7511: Add check for mipi_dsi_driver_register `87af9b0b45` crypto: ccp - During shutdown, check SEV data pointer before using `5f8a6e8f14` test_bpf: fix incorrect netdev features `45e1dbe5f6` drm/radeon: fix incorrrect SPDX-License-Identifiers `e7d6cac696` wifi: iwlegacy: 4965: fix potential off-by-one overflow in il4965_rs_fill_link_cmd() `eccd7c3e25` ath9k: fix use-after-free in ath9k_hif_usb_rx_cb `918f42ca1d` media: tw686x: Register the irq at the end of probe `d45eaf4114` crypto: sun8i-ss - fix infinite loop in sun8i_ss_setup_ivs() `81cb317568` i2c: Fix a potential use after free `d0412d8f69` net: fix sk_wmem_schedule() and sk_rmem_schedule() errors `0e70bb9cdb` crypto: sun8i-ss - fix error codes in allocate_flows() `e8673fbc10` crypto: sun8i-ss - do not allocate memory when handling hash requests `648b1bb29a` drm: adv7511: override i2c address of cec before accessing it `259773fc87` virtio-gpu: fix a missing check to avoid NULL dereference `e28aa4f467` i2c: npcm: Correct slave role behavior `385f6ef4de` i2c: npcm: Remove own slave addresses 2:10 `5ce9cff371` drm/mediatek: Add pull-down MIPI operation in mtk_dsi_poweroff function `b54bc0013d` drm/mediatek: Separate poweron/poweroff from enable/disable and define new funcs `0cb6589885` drm/mediatek: Modify dsi funcs to atomic operations `8508d6d23a` drm/radeon: fix potential buffer overflow in ni_set_mc_special_registers() `ac22537643` ath11k: Fix incorrect debug_mask mappings `648d3c8714` drm/mipi-dbi: align max_chunk to 2 in spi_transfer `a2c45f8c3d` ath11k: fix netdev open race `58fd794675` wifi: rtlwifi: fix error codes in rtl_debugfs_set_write_h2c() `71426d31d0` drm/st7735r: Fix module autoloading for Okaya RH128128T `fd98ccda50` ath10k: do not enforce interrupt trigger type `bcc05372a2` drm/bridge: tc358767: Make sure Refclk clock are enabled `c038b9b733` drm/bridge: tc358767: Move (e)DP bridge endpoint parsing into dedicated function `f312bc33ca` pwm: lpc18xx-sct: Convert to devm_platform_ioremap_resource() `6aaac1d924` pwm: sifive: Shut down hardware only after pwmchip_remove() completed `9073dbec88` pwm: sifive: Ensure the clk is enabled exactly once per running PWM `47902de24a` pwm: sifive: Simplify offset calculation for PWMCMP registers `6d7f7ffbcd` pwm: sifive: Don't check the return code of pwmchip_remove() `b7e2d64d67` dm: return early from dm_pr_call() if DM device is suspended `b3f5cc0cc0` thermal/tools/tmon: Include pthread and time headers in tmon.h `7aa3a25599` selftests/seccomp: Fix compile warning when CC=clang `e06a31e61f` nohz/full, sched/rt: Fix missed tick-reenabling bug in dequeue_task_rt() `298417471e` drivers/perf: arm_spe: Fix consistency of SYS_PMSCR_EL1.CX `a1891d3df7` arm64: dts: qcom: qcs404: Fix incorrect USB2 PHYs assignment `a7753a260e` soc: qcom: Make QCOM_RPMPD depend on PM `332e555dca` regulator: of: Fix refcount leak bug in of_get_regulation_constraints() `1ed71e6bce` blktrace: Trace remapped requests correctly `1cb3032406` block: remove the request_queue to argument request based tracepoints `d125b13a66` hwmon: (drivetemp) Add module alias `ed6ae23811` blk-mq: don't create hctx debugfs dir until q->debugfs_dir is created `0ca556256f` erofs: avoid consecutive detection for Highmem memory `8dee22b457` arm64: tegra: Fix SDMMC1 CD on P2888 `a1e2386909` arm64: dts: mt7622: fix BPI-R64 WPS button `7eafa9a1aa` bus: hisi_lpc: fix missing platform_device_put() in hisi_lpc_acpi_probe() `7fcf4401d5` ARM: dts: qcom: pm8841: add required thermal-sensor-cells `97713ed9b6` soc: qcom: aoss: Fix refcount leak in qmp_cooling_devices_register `07aea6819d` soc: qcom: ocmem: Fix refcount leak in of_get_ocmem `71042279b1` ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP `5f29b045da` regulator: qcom_smd: Fix pm8916_pldo range `22e6d8bcde` cpufreq: zynq: Fix refcount leak in zynq_get_revision `d294d60dc6` ARM: OMAP2+: Fix refcount leak in omap3xxx_prm_late_init `14bac0c703` ARM: OMAP2+: Fix refcount leak in omapdss_init_of `fdcb1fdbdc` ARM: dts: qcom: mdm9615: add missing PMIC GPIO reg `c32d5491c8` block: fix infinite loop for invalid zone append `2d9a1a96eb` soc: fsl: guts: machine variable might be unset `4cea839177` locking/lockdep: Fix lockdep_init_map_() confusion `87e415aec4` arm64: cpufeature: Allow different PMU versions in ID_DFR0_EL1 `30119131e3` hexagon: select ARCH_WANT_LD_ORPHAN_WARN `9d744229cd` ARM: dts: ast2600-evb: fix board compatible `75a24da2b9` ARM: dts: ast2500-evb: fix board compatible `2c07688d3e` x86/pmem: Fix platform-device leak in error path `6a28f363d3` arm64: dts: renesas: Fix thermal-sensors on single-zone sensors `80c469e63b` soc: amlogic: Fix refcount leak in meson-secure-pwrc.c `6cd8ba0c0b` soc: renesas: r8a779a0-sysc: Fix A2DP1 and A2CV[2357] PDR values `6771609e19` Input: atmel_mxt_ts - fix up inverted RESET handler `11903c5457` ARM: dts: imx7d-colibri-emmc: add cpu1 supply `b8b1f0d74f` ACPI: processor/idle: Annotate more functions to live in cpuidle section `91e7f04f53` ARM: bcm: Fix refcount leak in bcm_kona_smc_init `f6a6cc6d57` arm64: dts: renesas: beacon: Fix regulator node names `2691b8780f` meson-mx-socinfo: Fix refcount leak in meson_mx_socinfo_init `ccf56ea52b` ARM: findbit: fix overflowing offset `71fc6e0dca` spi: spi-rspi: Fix PIO fallback on RZ platforms `4234c5f34e` powerpc/64s: Disable stack variable initialisation for prom_init `adbfdaacde` selinux: Add boundary check in put_entry() `003a456ae6` PM: hibernate: defer device probing when resuming from hibernation `70bccff899` firmware: tegra: Fix error check return value of debugfs_create_file() `c2e53a1b07` ARM: shmobile: rcar-gen2: Increase refcount for new reference `f48cec5736` arm64: dts: allwinner: a64: orangepi-win: Fix LED node name `fcdc1e13e0` arm64: dts: qcom: ipq8074: fix NAND node name `931d0a574c` ACPI: LPSS: Fix missing check in register_device_clock() `d257d9b0a4` ACPI: PM: save NVS memory for Lenovo G40-45 `85bc8689a7` ACPI: EC: Drop the EC_FLAGS_IGNORE_DSDT_GPE quirk `def469523d` ACPI: EC: Remove duplicate ThinkPad X1 Carbon 6th entry from DMI quirks `88d556029a` ARM: OMAP2+: display: Fix refcount leak bug `43157bc5f9` spi: synquacer: Add missing clk_disable_unprepare() `607570808a` ARM: dts: BCM5301X: Add DT for Meraki MR26 `9213e5a397` ARM: dts: imx6ul: fix qspi node compatible `976db15fee` ARM: dts: imx6ul: fix lcdif node compatible `6045ac40e3` ARM: dts: imx6ul: fix csi node compatible `c7ce841f48` ARM: dts: imx6ul: fix keypad compatible `15af2deb19` ARM: dts: imx6ul: change operating-points to uint32-matrix `278aa4c73d` ARM: dts: imx6ul: add missing properties for sram `695a3c2a82` wait: Fix __wait_event_hrtimeout for RT/DL tasks `2b8c55900d` irqchip/mips-gic: Check the return value of ioremap() in gic_of_init() `8dfb4a99b1` genirq: GENERIC_IRQ_IPI depends on SMP `f460141f29` irqchip/mips-gic: Only register IPI domain when SMP is enabled `4aba3247af` genirq: Don't return error on missing optional irq_request_resources() `d08bb199a4` ext2: Add more validity checks for inode counts `353b4673d0` arm64: fix oops in concurrently setting insn_emulation sysctls `913f173237` arm64: Do not forget syscall when starting a new thread. `fb086aea39` x86: Handle idle=nomwait cmdline properly for x86_idle `48c3900210` epoll: autoremove wakers even more aggressively `80977126bc` netfilter: nf_tables: fix null deref due to zeroed list head `0cc5c6b756` netfilter: nf_tables: do not allow RULE_ID to refer to another chain `9e7dcb88ec` netfilter: nf_tables: do not allow CHAIN_ID to refer to another table `1a4b18b1ff` netfilter: nf_tables: do not allow SET_ID to refer to another table `19bf7199c3` lockdep: Allow tuning tracing capacity constants. `f294829fb4` usb: dwc3: gadget: fix high speed multiplier setting `fc2a039cdb` usb: dwc3: gadget: refactor dwc3_repare_one_trb `9a3a61bd73` arm64: dts: uniphier: Fix USB interrupts for PXs3 SoC `63228d8328` ARM: dts: uniphier: Fix USB interrupts for PXs2 SoC `4d7da7e565` USB: HCD: Fix URB giveback issue in tasklet function `37c7fe9b31` usb: typec: ucsi: Acknowledge the GET_ERROR_STATUS command completion `847b9273dd` coresight: Clear the connection field properly `807adf6ffa` MIPS: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK `26d767990e` powerpc/powernv: Avoid crashing if rng is NULL `3db593ab8e` powerpc/ptdump: Fix display of RW pages on FSL_BOOK3E `b326b8d6ae` powerpc/fsl-pci: Fix Class Code of PCIe Root Port `39c51471ef` PCI: Add defines for normal and subtractive PCI bridges `23c2f921f2` ia64, processor: fix -Wincompatible-pointer-types in ia64_get_irr() `2f36ba13cb` media: [PATCH] pci: atomisp_cmd: fix three missing checks on list iterator `5fd4ffa237` md-raid10: fix KASAN warning `e0bdaed154` md-raid: destroy the bitmap after destroying the thread `3bdda8656a` serial: mvebu-uart: uart2 error bits clearing `cfe17ae313` fuse: limit nsec `e63ea5814b` scsi: qla2xxx: Zero undefined mailbox IN registers `6f18b5ad2d` scsi: qla2xxx: Fix incorrect display of max frame size `408bfa1489` scsi: sg: Allow waiting for commands to complete on removed device `fb1888205c` iio: light: isl29028: Fix the warning in isl29028_remove() `fb7eea3946` mtd: rawnand: arasan: Update NAND bus clock instead of system clock `15d0aeb017` drm/amdgpu: Check BO's requested pinning domains against its preferred_domains `55f5584427` drm/nouveau/acpi: Don't print error when we get -EINPROGRESS from pm_runtime `92050011e0` drm/nouveau: Don't pm_runtime_put_sync(), only pm_runtime_put_autosuspend() `ca0742a8ed` drm/nouveau: fix another off-by-one in nvbios_addr `de63dbc296` drm/vc4: hdmi: Disable audio if dmas property is present but empty `1ff71d4f53` drm/gem: Properly annotate WW context on drm_gem_lock_reservations() error `043f4642c1` parisc: io_pgetevents_time64() needs compat syscall in 32-bit compat mode `fc3918d70b` parisc: Check the return value of ioremap() in lba_driver_probe() `b0dfba6d3b` parisc: Fix device names in /proc/iomem `542d2e799d` ovl: drop WARN_ON() dentry is NULL in ovl_encode_fh() `135199a2ed` usbnet: Fix linkwatch use-after-free on disconnect `d65c3fcd6d` fbcon: Fix accelerated fbdev scrolling while logo is still shown `16badd9987` fbcon: Fix boundary checks for fbcon=vc:n1-n2 parameters `826955eebc` thermal: sysfs: Fix cooling_device_stats_setup() error code path `60a8f0e62a` fs: Add missing umask strip in vfs_tmpfile `cf65b5bfac` vfs: Check the truncate maximum size in inode_newsize_ok() `5c6c65681f` tty: vt: initialize unicode screen buffer `f9b244e541` ALSA: hda/realtek: Add a quirk for HP OMEN 15 (8786) mute LED `7b9ee47c28` ALSA: hda/realtek: Add quirk for another Asus K42JZ model `c366ccad5b` ALSA: hda/cirrus - support for iMac 12,1 model `f2b72c51c2` ALSA: hda/conexant: Add quirk for LENOVO 20149 Notebook model `2613baa3ab` mm/mremap: hold the rmap lock in write mode when moving page table entries. `0a69f1f842` xfs: fix I_DONTCACHE `e32bb24281` xfs: only set IOMAP_F_SHARED when providing a srcmap to a write `f5f3e54f81` mm: Add kvrealloc() `3ff605513f` riscv: set default pm_power_off to NULL `230e369d49` KVM: x86: Tag kvm_mmu_x86_module_init() with __init `0dd8ba6670` KVM: x86: Set error code to segment selector on LLDT/LTR non-canonical #GP `68ba319b88` KVM: x86: Mark TSS busy during LTR emulation _after_ all fault checks `b670a58549` KVM: nVMX: Let userspace set nVMX MSR to any _host_ supported value `e9c55562b3` KVM: s390: pv: don't present the ecall interrupt twice `8bb6834902` KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 `860e334395` KVM: nVMX: Snapshot pre-VM-Enter DEBUGCTL for !nested_run_pending case `ab4805c263` KVM: nVMX: Snapshot pre-VM-Enter BNDCFGS for !nested_run_pending case `40593c5898` HID: wacom: Don't register pad_input for touch switch `0ba645def7` HID: wacom: Only report rotation for art pen `57f2ee517d` add barriers to buffer_uptodate and set_buffer_uptodate `6dece5ad6e` wifi: mac80211_hwsim: use 32-bit skb cookie `d400222f49` wifi: mac80211_hwsim: add back erroneously removed cast `eb8fc4277b` wifi: mac80211_hwsim: fix race condition in pending packet `9a22b1f7da` ALSA: hda/realtek: Add quirk for HP Spectre x360 15-eb0xxx `d909d9bdc8` ALSA: hda/realtek: Add quirk for Clevo NV45PZ `348620464a` ALSA: bcd2000: Fix a UAF bug on the error path of probing `101e0c052d` scsi: Revert "scsi: qla2xxx: Fix disk failure to rediscover" `14eb40fd79` Revert "pNFS: nfs3_set_ds_client should set NFS_CS_NOPING" `4ad6a94c68` x86: link vdso and boot with -z noexecstack --no-warn-rwx-segments `8f4f2c9b98` Makefile: link with -z noexecstack --no-warn-rwx-segments Add the following symbol as needed by the -lts merge: Leaf changes summary: 1 artifact changed Changed leaf types summary: 0 leaf type changed Removed/Changed/Added functions summary: 0 Removed, 0 Changed, 1 Added function Removed/Changed/Added variables summary: 0 Removed, 0 Changed, 0 Added variable 1 Added function: [A] 'function ssize_t strscpy_pad(char, const char*, size_t)' Change-Id: I7b4e08152fafe9bf2285afd207af47481eb9c774 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2022-11-29 14:09:15 +00:00
Alessandro Astone	ac30bb6084	UPSTREAM: binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0 Some android userspace is sending BINDER_TYPE_FDA objects with num_fds=0. Like the previous patch, this is reproducible when playing a video. Before commit 09184ae9b575 BINDER_TYPE_FDA objects with num_fds=0 were 'correctly handled', as in no fixup was performed. After commit 09184ae9b575 we aggregate fixup and skip regions in binder_ptr_fixup structs and distinguish between the two by using the skip_size field: if it's 0, then it's a fixup, otherwise skip. When processing BINDER_TYPE_FDA objects with num_fds=0 we add a skip region of skip_size=0, and this causes issues because now binder_do_deferred_txn_copies will think this was a fixup region. To address that, return early from binder_translate_fd_array to avoid adding an empty skip region. Fixes: 09184ae9b575 ("binder: defer copies of pre-patched txn data") Acked-by: Todd Kjos <tkjos@google.com> Cc: stable <stable@kernel.org> Signed-off-by: Alessandro Astone <ales.astone@gmail.com> Link: https://lore.kernel.org/r/20220415120015.52684-1-ales.astone@gmail.com Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Bug: 257685302 (cherry picked from commit ef38de9217a04c9077629a24652689d8fdb4c6c6) Change-Id: I34fab41c0c1beee366a5df4724b263e4385ad13b Signed-off-by: Carlos Llamas <cmllamas@google.com>	2022-11-28 23:47:00 +00:00
Alessandro Astone	befa134c53	UPSTREAM: binder: Address corner cases in deferred copy and fixup When handling BINDER_TYPE_FDA object we are pushing a parent fixup with a certain skip_size but no scatter-gather copy object, since the copy is handled standalone. If BINDER_TYPE_FDA is the last children the scatter-gather copy loop will never stop to skip it, thus we are left with an item in the parent fixup list. This will trigger the BUG_ON(). This is reproducible in android when playing a video. We receive a transaction that looks like this: obj[0] BINDER_TYPE_PTR, parent obj[1] BINDER_TYPE_PTR, child obj[2] BINDER_TYPE_PTR, child obj[3] BINDER_TYPE_FDA, child Fixes: 09184ae9b575 ("binder: defer copies of pre-patched txn data") Acked-by: Todd Kjos <tkjos@google.com> Cc: stable <stable@kernel.org> Signed-off-by: Alessandro Astone <ales.astone@gmail.com> Link: https://lore.kernel.org/r/20220415120015.52684-2-ales.astone@gmail.com Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Bug: 257685302 (cherry picked from commit 2d1746e3fda0c3612143d7c06f8e1d1830c13e23) Change-Id: I3963a98dfc48b01d7bb8166aaa90341818bf6416 Signed-off-by: Carlos Llamas <cmllamas@google.com>	2022-11-28 23:47:00 +00:00
Arnd Bergmann	8494d73eeb	UPSTREAM: binder: fix pointer cast warning binder_uintptr_t is not the same as uintptr_t, so converting it into a pointer requires a second cast: drivers/android/binder.c: In function 'binder_translate_fd_array': drivers/android/binder.c:2511:28: error: cast to pointer from integer of different size [-Werror=int-to-pointer-cast] 2511 \| sender_ufda_base = (void __user *)sender_uparent->buffer + fda->parent_offset; \| ^ Fixes: 656e01f3ab54 ("binder: read pre-translated fds from sender buffer") Acked-by: Todd Kjos <tkjos@google.com> Acked-by: Randy Dunlap <rdunlap@infradead.org> # build-tested Acked-by: Christian Brauner <christian.brauner@ubuntu.com> Signed-off-by: Arnd Bergmann <arnd@arndb.de> Link: https://lore.kernel.org/r/20211207122448.1185769-1-arnd@kernel.org Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Bug: 257685302 (cherry picked from commit 9a0a930fe2535a76ad70d3f43caeccf0d86a3009) Change-Id: I1c9b86a90bcf2be81012e59e0c472869f551e61a Signed-off-by: Carlos Llamas <cmllamas@google.com>	2022-11-28 23:47:00 +00:00
Todd Kjos	3e7e7f4b10	UPSTREAM: binder: defer copies of pre-patched txn data BINDER_TYPE_PTR objects point to memory areas in the source process to be copied into the target buffer as part of a transaction. This implements a scatter- gather model where non-contiguous memory in a source process is "gathered" into a contiguous region in the target buffer. The data can include pointers that must be fixed up to correctly point to the copied data. To avoid making source process pointers visible to the target process, this patch defers the copy until the fixups are known and then copies and fixeups are done together. There is a special case of BINDER_TYPE_FDA which applies the fixup later in the target process context. In this case the user data is skipped (so no untranslated fds become visible to the target). Reviewed-by: Martijn Coenen <maco@android.com> Signed-off-by: Todd Kjos <tkjos@google.com> Link: https://lore.kernel.org/r/20211130185152.437403-5-tkjos@google.com Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Bug: 137131904 Bug: 257685302 (cherry picked from commit 09184ae9b5756cc469db6fd1d1cfdcffbf627c2d) [cmllamas: fix trivial merge conflict] Change-Id: I6de75b192d1e3b2cc73c8d91077d97b608e8c5a9 Signed-off-by: Carlos Llamas <cmllamas@google.com>	2022-11-28 23:47:00 +00:00
Todd Kjos	58fd89db0d	UPSTREAM: binder: read pre-translated fds from sender buffer This patch is to prepare for an up coming patch where we read pre-translated fds from the sender buffer and translate them before copying them to the target. It does not change run time. The patch adds two new parameters to binder_translate_fd_array() to hold the sender buffer and sender buffer parent. These parameters let us call copy_from_user() directly from the sender instead of using binder_alloc_copy_from_buffer() to copy from the target. Also the patch adds some new alignment checks. Previously the alignment checks would have been done in a different place, but this lets us print more useful error messages. Reviewed-by: Martijn Coenen <maco@android.com> Acked-by: Christian Brauner <christian.brauner@ubuntu.com> Signed-off-by: Todd Kjos <tkjos@google.com> Link: https://lore.kernel.org/r/20211130185152.437403-4-tkjos@google.com Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Bug: 137131904 Bug: 257685302 (cherry picked from commit 656e01f3ab54afe71bed066996fc2640881e1220) Change-Id: Ib786020e49bd33e35aec88d43965f9d98021fa53 Signed-off-by: Carlos Llamas <cmllamas@google.com>	2022-11-28 23:47:00 +00:00
Todd Kjos	92a864d9db	UPSTREAM: binder: avoid potential data leakage when copying txn Transactions are copied from the sender to the target first and objects like BINDER_TYPE_PTR and BINDER_TYPE_FDA are then fixed up. This means there is a short period where the sender's version of these objects are visible to the target prior to the fixups. Instead of copying all of the data first, copy data only after any needed fixups have been applied. Fixes: `457b9a6f09` ("Staging: android: add binder driver") Reviewed-by: Martijn Coenen <maco@android.com> Acked-by: Christian Brauner <christian.brauner@ubuntu.com> Signed-off-by: Todd Kjos <tkjos@google.com> Link: https://lore.kernel.org/r/20211130185152.437403-3-tkjos@google.com Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Bug: 137131904 Bug: 257685302 (cherry picked from commit 6d98eb95b450a75adb4516a1d33652dc78d2b20c) Change-Id: I8c14a03a2ee23c5f060c82e1626686f72eff33d9 Signed-off-by: Carlos Llamas <cmllamas@google.com>	2022-11-28 23:47:00 +00:00
Suren Baghdasaryan	d95f5e3da7	ANDROID: khugepaged: fix mixing declarations warning in retract_page_tables vm_write_begin() was added before variable definition, producing a "mixing declarations and code is a C99 extension" warning. Fix by rearranging the code. Fixes: ("ANDROID: mm/khugepaged: add missing vm_write_{begin\|end}") Bug: 257443051 Change-Id: I6e85ccfabd5e37b1397c654d61d0b8177326c3d8 Signed-off-by: Suren Baghdasaryan <surenb@google.com>	2022-11-27 18:33:37 +00:00
Suren Baghdasaryan	aaf03dd58c	ANDROID: mm: fix build issue in spf when CONFIG_USERFAULTFD=n When CONFIG_USERFAULTFD=n __VM_UFFD_FLAGS mask is undefined and produces build error. Fix it by making the check conditional on CONFIG_USERFAULTFD. Fixes: ("ANDROID: mm: prevent speculative page fault handling for userfaults") Bug: 257443051 Change-Id: Ie9ff98b840032eb18183b49e3566cf178359948f Signed-off-by: Suren Baghdasaryan <surenb@google.com>	2022-11-27 18:33:13 +00:00
Suren Baghdasaryan	1c828eb3da	ANDROID: mm: disable speculative page faults for CONFIG_NUMA NUMA support with speculative page faults might be broken if vma_replace_policy() replaces the mempolicy object used in do_anonymous_page() alloc_zeroed_user_highpage_movable() alloc_page_vma() alloc_pages_vma() get_vma_policy() __get_vma_policy() in speculative path does not always refcounts the mempolicy object, therefore can't be relied on stabilizing it. Rather than fixing this, just disable speculation for CONFIG_NUMA for now and fix it if it's ever needed in Android. Bug: 257443051 Change-Id: Ib5750b9809979a69a42ebfa6c130e123f416f1aa Signed-off-by: Suren Baghdasaryan <surenb@google.com>	2022-11-27 09:32:29 -08:00
Suren Baghdasaryan	1900436df5	ANDROID: mm: fix invalid backport in speculative page fault path Invalid condition was introduced when porting the original SPF patch which would affect NUMA mode. Fixes: `736ae8bde8` ("FROMLIST: mm: adding speculative page fault failure trace events") Bug: 257443051 Change-Id: Ib20c625615b279dc467588933a1f598dc179861b Signed-off-by: Suren Baghdasaryan <surenb@google.com>	2022-11-27 09:32:05 -08:00
Suren Baghdasaryan	0f43357d37	ANDROID: disable page table moves when speculative page faults are enabled move_page_tables() can move entire pmd or pud without locking individual ptes. This is problematic for speculative page faults which do not take mmap_lock because they rely on ptl lock when writing new pte value. To avoid possible race, disable move_page_tables() optimization when CONFIG_SPECULATIVE_PAGE_FAULT is enabled. Bug: 257443051 Change-Id: Ib48dda08ecad1abc60d08fc089a6566a63393c13 Signed-off-by: Suren Baghdasaryan <surenb@google.com>	2022-11-27 09:31:54 -08:00
Suren Baghdasaryan	d65d4a0538	ANDROID: mm: assert that mmap_lock is taken exclusively in vm_write_begin vm_write_{begin\|end} has to be called when mmap_lock is taken exlusively. Add an assert statement in vm_write_begin to enforce that. free_pgtables can free page tables without exclusive mmap_lock if the vma was isolated, therefore avoid assertions in such cases. Bug: 257443051 Change-Id: Ie81aefe025c743cda6f66717d2f08f4d78a55608 Signed-off-by: Suren Baghdasaryan <surenb@google.com>	2022-11-27 09:29:20 -08:00
Suren Baghdasaryan	bfdcf47ca3	ANDROID: mm: remove sequence counting when mmap_lock is not exclusively owned In a number of cases vm_write_{begin\|end} is called while mmap_lock is not owned exclusively. This is unnecessary and can affect correctness of the sequence counting protecting speculative page fault handlers. Remove extra calls. Bug: 257443051 Change-Id: I1278638a0794448e22fbdab5601212b3b2eaebdc Signed-off-by: Suren Baghdasaryan <surenb@google.com>	2022-11-27 09:29:02 -08:00
Suren Baghdasaryan	5ed391bd8a	ANDROID: mm/khugepaged: add missing vm_write_{begin\|end} Speculative page fault handler needs to detect concurrent pmd changes and relies on vma seqcount for that. pmdp_collapse_flush(), set_huge_pmd() and collapse_and_free_pmd() can modify a pmd. vm_write_{begin\|end} are needed in the paths which can call these functions for page fault handler to detect pmd changes. Bug: 257443051 Change-Id: Ieb784b5f44901b66a594f61b9e7c91190ff97f80 Signed-off-by: Suren Baghdasaryan <surenb@google.com>	2022-11-27 09:28:43 -08:00
Michel Lespinasse	59d4d125b7	BACKPORT: FROMLIST: mm: implement speculative handling in filemap_fault() Extend filemap_fault() to handle speculative faults. In the speculative case, we will only be fishing existing pages out of the page cache. The logic we use mirrors what is done in the non-speculative case, assuming that pages are found in the page cache, are up to date and not already locked, and that readahead is not necessary at this time. In all other cases, the fault is aborted to be handled non-speculatively. Signed-off-by: Michel Lespinasse <michel@lespinasse.org> Link: https://lore.kernel.org/all/20210407014502.24091-26-michel@lespinasse.org/ Conflicts: mm/filemap.c 1. Added back file_ra_state variable used by SPF path. 2. Updated comment for filemap_fault to reflect SPF locking rules. Bug: 161210518 Signed-off-by: Suren Baghdasaryan <surenb@google.com> Change-Id: I82eba7fcfc81876245c2e65bc5ae3d33ddfcc368	2022-11-27 09:28:20 -08:00
Suren Baghdasaryan	2bb39b9121	ANDROID: mm: prevent reads of unstable pmd during speculation Checks of pmd during speculative page fault handling are racy because pmd is unprotected and might be modified or cleared. This might cause use-after-free reads from speculative path, therefore prevent such checks. At the beginning of speculation pmd is checked to be valid and if it's changed before page fault is handled, the change will be detected and page fault will be retried under mmap_lock protection. Bug: 257443051 Change-Id: I0cbd3b0b44e8296cf0d6cb298fae48c696580068 Signed-off-by: Suren Baghdasaryan <surenb@google.com>	2022-11-27 09:28:04 -08:00
Suren Baghdasaryan	4b388752ac	ANDROID: mm: prevent speculative page fault handling for in do_swap_page() do_swap_page() uses migration_entry_wait() which operates on page tables without protection. Disable speculative page fault handling. Bug: 257443051 Change-Id: I677eb1ee85707dce533d5d811dcde5f5dabcfdf3 Signed-off-by: Suren Baghdasaryan <surenb@google.com>	2022-11-27 09:27:20 -08:00
Suren Baghdasaryan	0560f5f7b3	ANDROID: mm: prevent speculative page fault handling for userfaults handle_userfault() should be protected against a concurrent userfaultfd_release(), therefore handling a userfaults speculatively without mmap_lock protection should be disallowed. Bug: 257443051 Signed-off-by: Suren Baghdasaryan <surenb@google.com> Change-Id: Ic6ae39329c73e8849048ea15b5351a49346404d3	2022-11-27 09:25:43 -08:00
Suren Baghdasaryan	1169f70f8f	ANDROID: mm: skip pte_alloc during speculative page fault Speculative page fault checks pmd to be valid before starting to handle the page fault and pte_alloc() should do nothing if pmd stays valid. If pmd gets changed during speculative page fault, we will detect the change later and retry with mmap_lock. Therefore pte_alloc() can be safely skipped and this prevents the racy pmd_lock() call which can access pmd->ptl after pmd was cleared. Bug: 257443051 Change-Id: Iec57df5530dba6e0e0bdf9f7500f910851c3d3fd Signed-off-by: Suren Baghdasaryan <surenb@google.com>	2022-11-27 09:24:46 -08:00
Pavankumar Kondeti	d84fac9795	FROMGIT: mm/madvise: fix madvise_pageout for private file mappings When MADV_PAGEOUT is called on a private file mapping VMA region, we bail out early if the process is neither owner nor write capable of the file. However, this VMA may have both private/shared clean pages and private dirty pages. The opportunity of paging out the private dirty pages (Anon pages) is missed. Fix this by caching the file access check and use it later along with PageAnon() during page walk. We observe ~10% improvement in zram usage, thus leaving more available memory on a 4GB RAM system running Android. Link: https://lkml.kernel.org/r/1667971116-12900-1-git-send-email-quic_pkondeti@quicinc.com Signed-off-by: Pavankumar Kondeti <quic_pkondeti@quicinc.com> Cc: Charan Teja Kalla <quic_charante@quicinc.com> Cc: Minchan Kim <minchan@kernel.org> Cc: Suren Baghdasaryan <surenb@google.com> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> (cherry picked from commit 8fc5be8efc3cf356f25098fbd4bda7c0e949c2ea git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm.git mm-unstable) Bug: 259329159 Signed-off-by: Pavankumar Kondeti <quic_pkondeti@quicinc.com> Change-Id: I5f2d425aec94e5a75ebeaf90f9f5d7adf1975c59	2022-11-22 19:39:40 +00:00
Luffy Ou	c7eb32a49f	ANDROID: GKI: Update symbols to symbol list Leaf changes summary: 8 artifacts changed Changed leaf types summary: 0 leaf type changed Removed/Changed/Added functions summary: 0 Removed, 0 Changed, 8 Added functions Removed/Changed/Added variables summary: 0 Removed, 0 Changed, 0 Added variable 8 Added functions: [A] 'function int __bio_crypt_clone(bio, bio, gfp_t)' [A] 'function void address_space_init_once(address_space)' [A] 'function void bio_crypt_set_ctx(bio, const blk_crypto_key, const u64, gfp_t)' [A] 'function bool blk_mq_queue_inflight(request_queue)' [A] 'function bool prepare_to_wait_exclusive(wait_queue_head, wait_queue_entry, int)' [A] 'function void radix_tree_delete_item(xarray, unsigned long int, void)' [A] 'function void** radix_tree_lookup_slot(const xarray, unsigned long int)' [A] 'function void radix_tree_replace_slot(xarray, void*, void)' Bug: 257892683 Signed-off-by: Luffy Ou <luffy@oppo.com> Change-Id: I2cc1d97c7b086604b27163cb306e51bad20f5b53	2022-11-21 17:01:54 +00:00
Will Deacon	dcdb7eadfd	Revert "FROMGIT: mm/vmalloc: Add override for lazy vunmap" Revert submission 2302443 Reason for revert: Series is not queued in a maintainer tree and has not been posted to a public mailing list. Reverted Changes: Iffd38bf97:FROMGIT: arm64: Work around Cortex-A510 erratum 24... I694523564:FROMGIT: mm/vmalloc: Add override for lazy vunmap Change-Id: I345e32bac76292413908b4a81295a228003fa4c0 Signed-off-by: Will Deacon <willdeacon@google.com>	2022-11-21 14:12:47 +00:00
Will Deacon	450a37133d	Revert "FROMGIT: arm64: Work around Cortex-A510 erratum 2454944" Revert submission 2302443 Reason for revert: Series is not queued in a maintainer tree and has not been posted to a public mailing list. Reverted Changes: Iffd38bf97:FROMGIT: arm64: Work around Cortex-A510 erratum 24... I694523564:FROMGIT: mm/vmalloc: Add override for lazy vunmap Change-Id: I254d427b9dad0791ca8df4dc51be92e458c58728 Signed-off-by: Will Deacon <willdeacon@google.com>	2022-11-21 14:12:47 +00:00
Hyunwoo Kim	015859081a	UPSTREAM: efi: capsule-loader: Fix use-after-free in efi_capsule_write commit 9cb636b5f6a8cc6d1b50809ec8f8d33ae0c84c95 upstream. A race condition may occur if the user calls close() on another thread during a write() operation on the device node of the efi capsule. This is a race condition that occurs between the efi_capsule_write() and efi_capsule_flush() functions of efi_capsule_fops, which ultimately results in UAF. So, the page freeing process is modified to be done in efi_capsule_release() instead of efi_capsule_flush(). Bug: 246690517 Cc: <stable@vger.kernel.org> # v4.9+ Signed-off-by: Hyunwoo Kim <imv4bel@gmail.com> Link: https://lore.kernel.org/all/20220907102920.GA88602@ubuntu/ Signed-off-by: Ard Biesheuvel <ardb@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Signed-off-by: Lee Jones <joneslee@google.com> Change-Id: I6b11df91a87c027ebed4a7b239610a9b9e28cec0	2022-11-21 11:30:06 +00:00
Robin Murphy	02e1387801	FROMGIT: arm64: Work around Cortex-A510 erratum 2454944 Cortex-A510 erratum 2454944 may cause clean cache lines to be erroneously written back to memory, breaking the assumptions we rely on for non-coherent DMA. Try to mitigate this by implementing special DMA ops that do their best to avoid cacheable aliases via a combination of bounce-buffering and manipulating the linear map directly, to minimise the chance of DMA-mapped pages being speculated back into caches. The other main concern is initial entry, where cache lines covering the kernel image might potentially become affected between being cleaned by the bootloader and the kernel being called, so perform some additional maintenance to be safe in that regard too. Cortex-A510 supports S2FWB, so KVM should be unaffected. Bug: 223346425 (cherry picked from commit 5bb88dd8ed70973eeb15722710a46d60951c8255 https://git.gitlab.arm.com/linux-arm/linux-rm.git arm64/2454944) Change-Id: Iffd38bf97114f7151f01c70750b465fc991c89c8 Signed-off-by: Robin Murphy <robin.murphy@arm.com> Signed-off-by: Beata Michalska <beata.michalska@arm.com>	2022-11-18 18:59:48 +00:00
Robin Murphy	abb277d9f1	FROMGIT: mm/vmalloc: Add override for lazy vunmap Add an interface for arch code to disable lazy vunmap by forcing the threshold to zero. This might be interesting for debugging/testing in general, but primarily helps a horrible situation which needs to guarantee that vmalloc aliases are up-to-date from atomic context, wherein the only practical solution is to never let them get stale in the first place. Bug: 223346425 (cherry picked from commit 2a34c1503b85f49dd472dfd932dfcd16cab8ee8a https://git.gitlab.arm.com/linux-arm/linux-rm.git arm64/2454944) Change-Id: I694523564357b4c43d30c129af1e89fd803824d3 Signed-off-by: Robin Murphy <robin.murphy@arm.com> Signed-off-by: Beata Michalska <beata.michalska@arm.com>	2022-11-18 18:59:48 +00:00
Mike Rapoport	68d4b5fef2	BACKPORT: mm/page_alloc: always initialize memory map for the holes Patch series "mm: ensure consistency of memory map poisoning". Currently memory map allocation for FLATMEM case does not poison the struct pages regardless of CONFIG_PAGE_POISON setting. This happens because allocation of the memory map for FLATMEM and SPARSMEM use different memblock functions and those that are used for SPARSMEM case (namely memblock_alloc_try_nid_raw() and memblock_alloc_exact_nid_raw()) implicitly poison the allocated memory. Another side effect of this implicit poisoning is that early setup code that uses the same functions to allocate memory burns cycles for the memory poisoning even if it was not intended. These patches introduce memmap_alloc() wrapper that ensure that the memory map allocation is consistent for different memory models. This patch (of 4): Currently memory map for the holes is initialized only when SPARSEMEM memory model is used. Yet, even with FLATMEM there could be holes in the physical memory layout that have memory map entries. For instance, the memory reserved using e820 API on i386 or "reserved-memory" nodes in device tree would not appear in memblock.memory and hence the struct pages for such holes will be skipped during memory map initialization. These struct pages will be zeroed because the memory map for FLATMEM systems is allocated with memblock_alloc_node() that clears the allocated memory. While zeroed struct pages do not cause immediate problems, the correct behaviour is to initialize every page using __init_single_page(). Besides, enabling page poison for FLATMEM case will trigger PF_POISONED_CHECK() unless the memory map is properly initialized. Make sure init_unavailable_range() is called for both SPARSEMEM and FLATMEM so that struct pages representing memory holes would appear as PG_Reserved with any memory layout. [rppt@kernel.org: fix microblaze] Link: https://lkml.kernel.org/r/YQWW3RCE4eWBuMu/@kernel.org (cherry picked from commit c3ab6baf6a004eab7344a1d8880a971f2414e1b6) Bug: 258556132 Link: https://lkml.kernel.org/r/20210714123739.16493-1-rppt@kernel.org Link: https://lkml.kernel.org/r/20210714123739.16493-2-rppt@kernel.org Change-Id: Ib60682288ba76e65384de91b70a08662ead12934 Signed-off-by: Mike Rapoport <rppt@linux.ibm.com> Acked-by: David Hildenbrand <david@redhat.com> Tested-by: Guenter Roeck <linux@roeck-us.net> Cc: Michal Simek <monstr@monstr.eu> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>	2022-11-17 18:58:07 +00:00
Krishna Kurapati	a8997cb185	UPSTREAM: usb: dwc3: gadget: Submit endxfer command if delayed during disconnect During a cable disconnect sequence, if ep0state is not in the SETUP phase, then nothing will trigger any pending end transfer commands. Force stopping of any pending SETUP transaction, and move back to the SETUP phase. Reviewed-by: Thinh Nguyen <Thinh.Nguyen@synopsys.com> Signed-off-by: Wesley Cheng <quic_wcheng@quicinc.com> Link: https://lore.kernel.org/r/20220901193625.8727-6-quic_wcheng@quicinc.com Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> (cherry picked from commit 8422b769fa46bd429dc0f324012629a4691f0dd9) Bug: 258997352 Change-Id: I39f41c42d3c5aec76d4f65175e31e2e10a0825be Signed-off-by: Krishna Kurapati <quic_kriskura@quicinc.com>	2022-11-16 16:50:59 +00:00
Mayank Rana	910e9e6049	UPSTREAM: usb: dwc3: Fix ep0 handling when getting reset while doing control transfer According to the databook ep0 should be in setup phase during reset. If host issues reset between control transfers, ep0 will be in an invalid state. Fix this by issuing stall and restart on ep0 if it is not in setup phase. Also SW needs to complete pending control transfer and setup core for next setup stage as per data book. Hence check ep0 state during reset interrupt handling and make sure active transfers on ep0 out/in endpoint are stopped by queuing ENDXFER command for that endpoint and restart ep0 out again to receive next setup packet. Signed-off-by: Mayank Rana <quic_mrana@quicinc.com> Link: https://lore.kernel.org/r/1651693001-29891-1-git-send-email-quic_mrana@quicinc.com Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> (cherry picked from commit 9d778f0c5f95ca5aa2ff628ea281978697e8d89b) Bug: 258997352 Change-Id: Ie7482ba08d4f77ad65f404b3014ac880f5a5a75e Signed-off-by: Krishna Kurapati <quic_kriskura@quicinc.com>	2022-11-16 16:50:59 +00:00
SeongJae Park	e0243d1991	UPSTREAM: mm/damon/core: initialize damon_target->list in damon_new_target() 'struct damon_target' creation function, 'damon_new_target()' is not initializing its '->list' field, unlike other DAMON structs creator functions such as 'damon_new_region()'. Normal users of 'damon_new_target()' initializes the field by adding the target to DAMON context's targets list, but some code could access the uninitialized field. This commit avoids the case by initializing the field in 'damon_new_target()'. Bug: 254441685 Link: https://lkml.kernel.org/r/20221002193130.8227-1-sj@kernel.org Fixes: f23b8eee1871 ("mm/damon/core: implement region-based sampling") Signed-off-by: SeongJae Park <sj@kernel.org> Reported-by: Hyeonggon Yoo <42.hyeyoo@gmail.com> Tested-by: Hyeonggon Yoo <42.hyeyoo@gmail.com> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> (cherry picked from commit b1f44cdabad8c50cd72d6b6731e9fdf3730a8f4f) Signed-off-by: Lee Jones <joneslee@google.com> Change-Id: Ie500358e0cc7d5bf82225e6e2b5229f6629736f4	2022-11-16 14:53:12 +00:00
Heikki Krogerus	82b904105a	UPSTREAM: usb: typec: ucsi: Remove incorrect warning Sink only devices do not have any source capabilities, so the driver should not warn about that. Also DRP (Dual Role Power) capable devices, such as USB Type-C docking stations, do not return any source capabilities unless they are plugged to a power supply themselves. Bug: 254441685 Fixes: 1f4642b72be7 ("usb: typec: ucsi: Retrieve all the PDOs instead of just the first 4") Reported-by: Paul Menzel <pmenzel@molgen.mpg.de> Cc: <stable@vger.kernel.org> Signed-off-by: Heikki Krogerus <heikki.krogerus@linux.intel.com> Link: https://lore.kernel.org/r/20220922145924.80667-1-heikki.krogerus@linux.intel.com Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> (cherry picked from commit 415ba26cb73f7d22a892043301b91b57ae54db02) Signed-off-by: Lee Jones <joneslee@google.com> Change-Id: I3e10fb2c610a753e19deab7dcceda10599f56c03	2022-11-16 14:48:59 +00:00
Mario Limonciello	5f1257b5ff	UPSTREAM: xhci: Don't show warning for reinit on known broken suspend commit 8b328f8002bc ("xhci: re-initialize the HC during resume if HCE was set") introduced a new warning message when the host controller error was set and re-initializing. This is expected behavior on some designs which already set `xhci->broken_suspend` so the new warning is alarming to some users. Modify the code to only show the warning if this was a surprising behavior to the XHCI driver. Bug: 254441685 Link: https://bugzilla.kernel.org/show_bug.cgi?id=216470 Fixes: 8b328f8002bc ("xhci: re-initialize the HC during resume if HCE was set") Reported-by: Artem S. Tashkinov <aros@gmx.com> Signed-off-by: Mario Limonciello <mario.limonciello@amd.com> Signed-off-by: Mathias Nyman <mathias.nyman@linux.intel.com> Link: https://lore.kernel.org/r/20220921123450.671459-4-mathias.nyman@linux.intel.com Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> (cherry picked from commit 484d6f7aa3283d082c87654b7fe7a7f725423dfb) Signed-off-by: Lee Jones <joneslee@google.com> Change-Id: Icf85934a304d1fa18c68b9b4ed08dce60f85a403	2022-11-16 14:48:59 +00:00
Baolin Wang	2df2e2c084	UPSTREAM: mm/damon: validate if the pmd entry is present before accessing pmd_huge() is used to validate if the pmd entry is mapped by a huge page, also including the case of non-present (migration or hwpoisoned) pmd entry on arm64 or x86 architectures. This means that pmd_pfn() can not get the correct pfn number for a non-present pmd entry, which will cause damon_get_page() to get an incorrect page struct (also may be NULL by pfn_to_online_page()), making the access statistics incorrect. This means that the DAMON may make incorrect decision according to the incorrect statistics, for example, DAMON may can not reclaim cold page in time due to this cold page was regarded as accessed mistakenly if DAMOS_PAGEOUT operation is specified. Moreover it does not make sense that we still waste time to get the page of the non-present entry. Just treat it as not-accessed and skip it, which maintains consistency with non-present pte level entries. So add pmd entry present validation to fix the above issues. Bug: 254441685 Link: https://lkml.kernel.org/r/58b1d1f5fbda7db49ca886d9ef6783e3dcbbbc98.1660805030.git.baolin.wang@linux.alibaba.com Fixes: 3f49584b262c ("mm/damon: implement primitives for the virtual memory address spaces") Signed-off-by: Baolin Wang <baolin.wang@linux.alibaba.com> Reviewed-by: SeongJae Park <sj@kernel.org> Reviewed-by: Muchun Song <songmuchun@bytedance.com> Cc: Mike Kravetz <mike.kravetz@oracle.com> Cc: <stable@vger.kernel.org> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> (cherry picked from commit c8b9aff419303e4d4219b5ff64b1c7e062dee48e) Signed-off-by: Lee Jones <joneslee@google.com> Change-Id: Idda1765dcbc93a28ad38ccc53688d69b64202330	2022-11-16 14:48:59 +00:00
Greg Kroah-Hartman	ed91943b48	UPSTREAM: mm/damon/dbgfs: fix memory leak when using debugfs_lookup() When calling debugfs_lookup() the result must have dput() called on it, otherwise the memory will leak over time. Fix this up by properly calling dput(). Bug: 254441685 Link: https://lkml.kernel.org/r/20220902191149.112434-1-sj@kernel.org Fixes: 75c1c2b53c78b ("mm/damon/dbgfs: support multiple contexts") Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Signed-off-by: SeongJae Park <sj@kernel.org> Cc: <stable@vger.kernel.org> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> (cherry picked from commit 1552fd3ef7dbe07208b8ae84a0a6566adf7dfc9d) Signed-off-by: Lee Jones <joneslee@google.com> Change-Id: I7f2e8fa0167b3e44c4c251a51df341a6a7d98fd2	2022-11-16 14:48:59 +00:00
Badari Pulavarty	3093f8b52c	UPSTREAM: mm/damon/dbgfs: avoid duplicate context directory creation When user tries to create a DAMON context via the DAMON debugfs interface with a name of an already existing context, the context directory creation fails but a new context is created and added in the internal data structure, due to absence of the directory creation success check. As a result, memory could leak and DAMON cannot be turned on. An example test case is as below: # cd /sys/kernel/debug/damon/ # echo "off" > monitor_on # echo paddr > target_ids # echo "abc" > mk_context # echo "abc" > mk_context # echo $$ > abc/target_ids # echo "on" > monitor_on <<< fails Return value of 'debugfs_create_dir()' is expected to be ignored in general, but this is an exceptional case as DAMON feature is depending on the debugfs functionality and it has the potential duplicate name issue. This commit therefore fixes the issue by checking the directory creation failure and immediately return the error in the case. Bug: 254441685 Link: https://lkml.kernel.org/r/20220821180853.2400-1-sj@kernel.org Fixes: 75c1c2b53c78 ("mm/damon/dbgfs: support multiple contexts") Signed-off-by: Badari Pulavarty <badari.pulavarty@intel.com> Signed-off-by: SeongJae Park <sj@kernel.org> Cc: <stable@vger.kernel.org> [ 5.15.x] Signed-off-by: Andrew Morton <akpm@linux-foundation.org> (cherry picked from commit d26f60703606ab425eee9882b32a1781a8bed74d) Signed-off-by: Lee Jones <joneslee@google.com> Change-Id: I8951b95f41306818ef1b4a5789369a84d8ca2cf2	2022-11-16 14:48:59 +00:00
Eric Biggers	3f23bb2255	UPSTREAM: crypto: lib - remove unneeded selection of XOR_BLOCKS CRYPTO_LIB_CHACHA_GENERIC doesn't need to select XOR_BLOCKS. It perhaps was thought that it's needed for __crypto_xor, but that's not the case. Enabling XOR_BLOCKS is problematic because the XOR_BLOCKS code runs a benchmark when it is initialized. That causes a boot time regression on systems that didn't have it enabled before. Therefore, remove this unnecessary and problematic selection. Bug: 254441685 Fixes: e56e18985596 ("lib/crypto: add prompts back to crypto libraries") Cc: stable@vger.kernel.org Signed-off-by: Eric Biggers <ebiggers@google.com> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> (cherry picked from commit 874b301985ef2f89b8b592ad255e03fb6fbfe605) Signed-off-by: Lee Jones <joneslee@google.com> Change-Id: I89d552f31062ad677407107280874bc7eafe60bf	2022-11-16 14:48:59 +00:00
Michael Wu	bf4603f495	UPSTREAM: pinctrl: sunxi: Fix name for A100 R_PIO The name of A100 R_PIO driver should be sun50i-a100-r-pinctrl, not sun50iw10p1-r-pinctrl. Bug: 254441685 Fixes: `473436e764` ("pinctrl: sunxi: add support for the Allwinner A100 pin controller") Signed-off-by: Michael Wu <michael@allwinnertech.com> Acked-by: Samuel Holland <samuel@sholland.org> Link: https://lore.kernel.org/r/20220819024541.74191-1-michael@allwinnertech.com Signed-off-by: Linus Walleij <linus.walleij@linaro.org> (cherry picked from commit 76648c867c6c03b8a468d9c9222025873ecc613d) Signed-off-by: Lee Jones <joneslee@google.com> Change-Id: I950bddf7f50616714a5bd7a8438eb5f518ea70fc	2022-11-16 14:48:59 +00:00
Tetsuo Handa	a0630a0536	UPSTREAM: cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() syzbot is hitting percpu_rwsem_assert_held(&cpu_hotplug_lock) warning at cpuset_attach() [1], for commit 4f7e7236435ca0ab ("cgroup: Fix threadgroup_rwsem <-> cpus_read_lock() deadlock") missed that cpuset_attach() is also called from cgroup_attach_task_all(). Add cpus_read_lock() like what cgroup_procs_write_start() does. Bug: 254441685 Link: https://syzkaller.appspot.com/bug?extid=29d3a3b4d86c8136ad9e [1] Reported-by: syzbot <syzbot+29d3a3b4d86c8136ad9e@syzkaller.appspotmail.com> Signed-off-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp> Fixes: 4f7e7236435ca0ab ("cgroup: Fix threadgroup_rwsem <-> cpus_read_lock() deadlock") Signed-off-by: Tejun Heo <tj@kernel.org> (cherry picked from commit 43626dade36fa74d3329046f4ae2d7fdefe401c6) Signed-off-by: Lee Jones <joneslee@google.com> Change-Id: Ifd2f0fb1e4e8c3d474dc4a1d943ae92ff3b0d145	2022-11-16 14:48:59 +00:00
Jing Leng	2a11f678f6	BACKPORT: usb: gadget: f_uac2: fix superspeed transfer On page 362 of the USB3.2 specification ( https://usb.org/sites/default/files/usb_32_20210125.zip), The 'SuperSpeed Endpoint Companion Descriptor' shall only be returned by Enhanced SuperSpeed devices that are operating at Gen X speed. Each endpoint described in an interface is followed by a 'SuperSpeed Endpoint Companion Descriptor'. If users use SuperSpeed UDC, host can't recognize the device if endpoint doesn't have 'SuperSpeed Endpoint Companion Descriptor' followed. Currently in the uac2 driver code: 1. ss_epout_desc_comp follows ss_epout_desc; 2. ss_epin_fback_desc_comp follows ss_epin_fback_desc; 3. ss_epin_desc_comp follows ss_epin_desc; 4. Only ss_ep_int_desc endpoint doesn't have 'SuperSpeed Endpoint Companion Descriptor' followed, so we should add it. Bug: 254441685 Fixes: eaf6cbe09920 ("usb: gadget: f_uac2: add volume and mute support") Cc: stable <stable@kernel.org> Signed-off-by: Jing Leng <jleng@ambarella.com> Signed-off-by: Jack Pham <quic_jackp@quicinc.com> Link: https://lore.kernel.org/r/20220721014815.14453-1-quic_jackp@quicinc.com Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> (cherry picked from commit f511aef2ebe5377d4c263842f2e0c0b8e274e8e5) Signed-off-by: Lee Jones <joneslee@google.com> Change-Id: I7e4a0ce5482f44df32cfa13cc011281c2bc6393d	2022-11-16 14:48:59 +00:00
Johan Hovold	347d7198a6	BACKPORT: usb: dwc3: qcom: fix runtime PM wakeup A device must enable wakeups during runtime suspend regardless of whether it is capable and allowed to wake the system up from system suspend. Bug: 254441685 Fixes: 2664deb09306 ("usb: dwc3: qcom: Honor wakeup enabled/disabled state") Tested-by: Matthias Kaehlcke <mka@chromium.org> Reviewed-by: Matthias Kaehlcke <mka@chromium.org> Reviewed-by: Manivannan Sadhasivam <manivannan.sadhasivam@linaro.org> Signed-off-by: Johan Hovold <johan+linaro@kernel.org> Link: https://lore.kernel.org/r/20220804151001.23612-6-johan+linaro@kernel.org Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> (cherry picked from commit 6498a96c8c9ce8ae4078e586a607851491e29a33) Signed-off-by: Lee Jones <joneslee@google.com> Change-Id: If23278f148db9f1f5f6ac283ede5ebb5b658f8c8	2022-11-16 14:48:59 +00:00
Oliver Upton	af723545ed	UPSTREAM: KVM: arm64: Reject 32bit user PSTATE on asymmetric systems KVM does not support AArch32 EL0 on asymmetric systems. To that end, prevent userspace from configuring a vCPU in such a state through setting PSTATE. It is already ABI that KVM rejects such a write on a system where AArch32 EL0 is unsupported. Though the kernel's definition of a 32bit system changed in commit 2122a833316f ("arm64: Allow mismatched 32-bit EL0 support"), KVM's did not. Bug: 254441685 Fixes: 2122a833316f ("arm64: Allow mismatched 32-bit EL0 support") Signed-off-by: Oliver Upton <oliver.upton@linux.dev> Signed-off-by: Marc Zyngier <maz@kernel.org> Link: https://lore.kernel.org/r/20220816192554.1455559-3-oliver.upton@linux.dev (cherry picked from commit b10d86fb8e46cc812171728bcd326df2f34e9ed5) Signed-off-by: Lee Jones <joneslee@google.com> Change-Id: I73b63bf79bfbade51dc417fe2c76fd0057eb21b8	2022-11-16 14:48:59 +00:00
Oliver Upton	8407a5ca14	UPSTREAM: KVM: arm64: Treat PMCR_EL1.LC as RES1 on asymmetric systems KVM does not support AArch32 on asymmetric systems. To that end, enforce AArch64-only behavior on PMCR_EL1.LC when on an asymmetric system. Bug: 254441685 Fixes: 2122a833316f ("arm64: Allow mismatched 32-bit EL0 support") Signed-off-by: Oliver Upton <oliver.upton@linux.dev> Signed-off-by: Marc Zyngier <maz@kernel.org> Link: https://lore.kernel.org/r/20220816192554.1455559-2-oliver.upton@linux.dev (cherry picked from commit f3c6efc72f3b20ec23566e768979802f0a398f04) Signed-off-by: Lee Jones <joneslee@google.com> Change-Id: I982a10aee328eec10b7d75b7fa580748540ddf47	2022-11-16 14:48:59 +00:00
Luiz Augusto von Dentz	f1bf5340cd	UPSTREAM: Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm regression The patch d0be8347c623: "Bluetooth: L2CAP: Fix use-after-free caused by l2cap_chan_put" from Jul 21, 2022, leads to the following Smatch static checker warning: net/bluetooth/l2cap_core.c:1977 l2cap_global_chan_by_psm() error: we previously assumed 'c' could be null (see line 1996) Bug: 254441685 Fixes: d0be8347c623 ("Bluetooth: L2CAP: Fix use-after-free caused by l2cap_chan_put") Reported-by: Dan Carpenter <dan.carpenter@oracle.com> Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com> (cherry picked from commit 332f1795ca202489c665a75e62e18ff6284de077) Signed-off-by: Lee Jones <joneslee@google.com> Change-Id: I81c57064d558d8304d889fa3448a8aff45c7a408	2022-11-16 14:48:59 +00:00
Josef Bacik	fdc033d445	UPSTREAM: mm: fix page leak with multiple threads mapping the same page We have an application with a lot of threads that use a shared mmap backed by tmpfs mounted with -o huge=within_size. This application started leaking loads of huge pages when we upgraded to a recent kernel. Using the page ref tracepoints and a BPF program written by Tejun Heo we were able to determine that these pages would have multiple refcounts from the page fault path, but when it came to unmap time we wouldn't drop the number of refs we had added from the faults. I wrote a reproducer that mmap'ed a file backed by tmpfs with -o huge=always, and then spawned 20 threads all looping faulting random offsets in this map, while using madvise(MADV_DONTNEED) randomly for huge page aligned ranges. This very quickly reproduced the problem. The problem here is that we check for the case that we have multiple threads faulting in a range that was previously unmapped. One thread maps the PMD, the other thread loses the race and then returns 0. However at this point we already have the page, and we are no longer putting this page into the processes address space, and so we leak the page. We actually did the correct thing prior to f9ce0be71d1f, however it looks like Kirill copied what we do in the anonymous page case. In the anonymous page case we don't yet have a page, so we don't have to drop a reference on anything. Previously we did the correct thing for file based faults by returning VM_FAULT_NOPAGE so we correctly drop the reference on the page we faulted in. Fix this by returning VM_FAULT_NOPAGE in the pmd_devmap_trans_unstable() case, this makes us drop the ref on the page properly, and now my reproducer no longer leaks the huge pages. Bug: 254441685 [josef@toxicpanda.com: v2] Link: https://lkml.kernel.org/r/e90c8f0dbae836632b669c2afc434006a00d4a67.1657721478.git.josef@toxicpanda.com Link: https://lkml.kernel.org/r/2b798acfd95c9ab9395fe85e8d5a835e2e10a920.1657051137.git.josef@toxicpanda.com Fixes: f9ce0be71d1f ("mm: Cleanup faultaround and finish_fault() codepaths") Signed-off-by: Josef Bacik <josef@toxicpanda.com> Signed-off-by: Rik van Riel <riel@surriel.com> Signed-off-by: Chris Mason <clm@fb.com> Acked-by: Kirill A. Shutemov <kirill.shutemov@linux.intel.com> Cc: Matthew Wilcox (Oracle) <willy@infradead.org> Cc: <stable@vger.kernel.org> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> (cherry picked from commit 3fe2895cfecd03ac74977f32102b966b6589f481) Signed-off-by: Lee Jones <joneslee@google.com> Change-Id: I982509aab4bcbf22d66aff5e1d3dfce927426f51	2022-11-16 14:48:59 +00:00
Hsin-Yi Wang	5b71c43f5c	UPSTREAM: PM: domains: Ensure genpd_debugfs_dir exists before remove Both genpd_debug_add() and genpd_debug_remove() may be called indirectly by other drivers while genpd_debugfs_dir is not yet set. For example, drivers can call pm_genpd_init() in probe or pm_genpd_init() in probe fail/cleanup path: pm_genpd_init() --> genpd_debug_add() pm_genpd_remove() --> genpd_remove() --> genpd_debug_remove() At this time, genpd_debug_init() may not yet be called. genpd_debug_add() checks that if genpd_debugfs_dir is NULL, it will return directly. Make sure this is also checked in pm_genpd_remove(), otherwise components under debugfs root which has the same name as other components under pm_genpd may be accidentally removed, since NULL represents debugfs root. Bug: 254441685 Fixes: 718072ceb211 ("PM: domains: create debugfs nodes when adding power domains") Signed-off-by: Hsin-Yi Wang <hsinyi@chromium.org> Reviewed-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Reviewed-by: AngeloGioacchino Del Regno <angelogioacchino.delregno@collabora.com> Reviewed-by: Ulf Hansson <ulf.hansson@linaro.org> Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@intel.com> (cherry picked from commit 37101d3c719386040ded735a5ec06974f1d94d1f) Signed-off-by: Lee Jones <joneslee@google.com> Change-Id: I0b7e93f4bacf5d537f7f44cbb51237165d859054	2022-11-16 14:48:59 +00:00
Michael Grzeschik	0805a01852	UPSTREAM: usb: gadget: uvc: fix changing interface name via configfs When setting the function name, it is always truncated by one char since snprintf is always including the null-termination in the len parameter. We use strscpy and fix the size setting to use len + 1 instead. Bug: 254441685 Fixes: 324e4f85070f ("usb: gadget: uvc: allow changing interface name via configfs") Signed-off-by: Michael Grzeschik <m.grzeschik@pengutronix.de> Link: https://lore.kernel.org/r/20220707115612.2760569-1-m.grzeschik@pengutronix.de Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> (cherry picked from commit 3d0dc539029b09fbd125444c16b11a8ed10b9d0f) Signed-off-by: Lee Jones <joneslee@google.com> Change-Id: Id38f7f27d02c711ca3f1ad5303894912713ef57f	2022-11-16 14:48:59 +00:00
Ren Zhijie	a7ee7101fb	BACKPORT: dma-mapping: Fix build error unused-value If CONFIG_DMA_DECLARE_COHERENT is not set, make ARCH=x86_64 CROSS_COMPILE=x86_64-linux-gnu- will be failed, like this: drivers/remoteproc/remoteproc_core.c: In function ‘rproc_rvdev_release’: ./include/linux/dma-map-ops.h:182:42: error: statement with no effect [-Werror=unused-value] #define dma_release_coherent_memory(dev) (0) ^ drivers/remoteproc/remoteproc_core.c:464:2: note: in expansion of macro ‘dma_release_coherent_memory’ dma_release_coherent_memory(dev); ^~~~~~~~~~~~~~~~~~~~~~~~~~~ cc1: all warnings being treated as errors The return type of function dma_release_coherent_memory in CONFIG_DMA_DECLARE_COHERENT area is void, so in !CONFIG_DMA_DECLARE_COHERENT area it should neither return any value nor be defined as zero. Bug: 254441685 Reported-by: Hulk Robot <hulkci@huawei.com> Fixes: e61c451476e6 ("dma-mapping: Add dma_release_coherent_memory to DMA API") Signed-off-by: Ren Zhijie <renzhijie2@huawei.com> Reviewed-by: Christoph Hellwig <hch@lst.de> Link: https://lore.kernel.org/r/20220630123528.251181-1-renzhijie2@huawei.com Signed-off-by: Mathieu Poirier <mathieu.poirier@linaro.org> (cherry picked from commit 50d6281ce9b8412f7ef02d1bc9d23aa62ae0cf98) Signed-off-by: Lee Jones <joneslee@google.com> Change-Id: I2af85ae87d77721972a3c3b01288da43d8fb16bb	2022-11-16 14:48:59 +00:00
Stéphane Graber	c3b65245e6	UPSTREAM: tools/vm/slabinfo: Handle files in debugfs Commit 64dd68497be76 relocated and renamed the alloc_calls and free_calls files from /sys/kernel/slab/NAME/_calls over to /sys/kernel/debug/slab/NAME/_calls but didn't update the slabinfo tool with the new location. This change will now have slabinfo look at the new location (and filenames) with a fallback to the prior files. Bug: 254441685 Fixes: 64dd68497be76 ("mm: slub: move sysfs slab alloc/free interfaces to debugfs") Cc: stable@vger.kernel.org Signed-off-by: Stéphane Graber <stgraber@ubuntu.com> Tested-by: Stéphane Graber <stgraber@ubuntu.com> Signed-off-by: Vlastimil Babka <vbabka@suse.cz> (cherry picked from commit 0c7e0d699ef1430d7f4cf12b4b1d097af58b5515) Signed-off-by: Lee Jones <joneslee@google.com> Change-Id: I7312aa9e86213bd37916e14c8e0e430e9c3cd2d4	2022-11-16 14:48:59 +00:00
Baolin Wang	0b21c99c83	UPSTREAM: mm/damon: use set_huge_pte_at() to make huge pte old The huge_ptep_set_access_flags() can not make the huge pte old according to the discussion [1], that means we will always mornitor the young state of the hugetlb though we stopped accessing the hugetlb, as a result DAMON will get inaccurate accessing statistics. So changing to use set_huge_pte_at() to make the huge pte old to fix this issue. [1] https://lore.kernel.org/all/Yqy97gXI4Nqb7dYo@arm.com/ Bug: 254441685 Link: https://lkml.kernel.org/r/1655692482-28797-1-git-send-email-baolin.wang@linux.alibaba.com Fixes: 49f4203aae06 ("mm/damon: add access checking for hugetlb pages") Signed-off-by: Baolin Wang <baolin.wang@linux.alibaba.com> Reviewed-by: SeongJae Park <sj@kernel.org> Acked-by: Mike Kravetz <mike.kravetz@oracle.com> Reviewed-by: Muchun Song <songmuchun@bytedance.com> Cc: <stable@vger.kernel.org> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> (cherry picked from commit ed1523a895ffdabcab6e067af18685ed00f5ce15) Signed-off-by: Lee Jones <joneslee@google.com> Change-Id: I4bdab0c5baace75e01c64e0d10fd8fc4d4ea93b8	2022-11-16 14:48:59 +00:00

1 2 3 4 5 ...

991897 Commits