c994af004d
64833 Commits
| Author | SHA1 | Message | Date | |
|---|---|---|---|---|
qctecmdr
|
9eb990d0a9 | Merge "net: qrtr: gunyah: Cleanup gh_rm_mem_qcom_lookup_sgl calls" | ||
Patrick Daly
|
0b4dfc4dfe |
net: qrtr: gunyah: Cleanup gh_rm_mem_qcom_lookup_sgl calls
Recent hypervisor images no longer support gh_rm_mem_qcom_lookup_sgl(). Remove this to cleanup associated error messages in the log. Change-Id: I01cd80cb5dc199f778a7ad44fa2a3cfa5f56a31f Signed-off-by: Patrick Daly <quic_pdaly@quicinc.com> |
||
|
qctecmdr
|
fb98460535 |
Merge "Merge keystone/android12-5.10-keystone-qcom-release.66+ (233f97e) into msm-5.10"
|
||
Sivasri Kumar, Vanka
|
d9c40dd847 |
Merge keystone/android12-5.10-keystone-qcom-release.66+ (233f97e) into msm-5.10
* refs/heads/tmp-233f97e: ANDROID: Update symbol list for mtk ANDROID: binder: fix regression in sender_euid ANDROID: fips140: use UTS_RELEASE as FIPS version BACKPORT: binder: use cred instead of task for getsecid BACKPORT: binder: use cred instead of task for selinux checks BACKPORT: binder: use euid from cred instead of using task ANDROID: vendor_hooks: Add hooks for frequency optimization ANDROID: GKI: Update symbols to symbol list ANDROID: vendor_hooks: export get_wchan ANDROID: vendor_hooks: Add hooks to record the time of the process in various states FROMGIT: dma-buf: acquire name lock before read/write dma_buf.name ANDROID: cpufreq: times: record fast switch frequency transitions ANDROID: GKI: add required symbols for btusb to virtual device ANDROID: arm64: add vendor hooks for bti and pauth fault FROMLIST: drivers: thermal: Reset previous low and high trip during thermal zone init UPSTREAM: mm: vmalloc: prevent use after free in _vm_unmap_aliases ANDROID: ABI: update allowed list for galaxy ANDROID: Add android_vh_rproc_recovery_set ANDROID: rproc: Add vendor hook when setting recovery mode BACKPORT: FROMLIST: scsi: ufs: Fix a deadlock in the error handler BACKPORT: FROMLIST: scsi: core: Reserve one tag for the UFS driver BACKPORT: FROMLIST: scsi: ufs: Limit the queue depth to host->can_queue ANDROID: GKI: fix up abi breakage from "cfg80211: fix management registrations locking" UPSTREAM: cfg80211: fix management registrations locking Change-Id: I6963bbed02d5f62ca5ee34aa2a629dfa2cfe81b3 Signed-off-by: Sivasri Kumar, Vanka <quic_svanka@quicinc.com> |
||
|
qctecmdr
|
712b88cbf7 | Merge "net: qrtr: Change error logging in callback" | ||
Johannes Berg
|
a7d87a08b4 |
UPSTREAM: cfg80211: fix management registrations locking
The management registrations locking was broken, the list was
locked for each wdev, but cfg80211_mgmt_registrations_update()
iterated it without holding all the correct spinlocks, causing
list corruption.
Rather than trying to fix it with fine-grained locking, just
move the lock to the wiphy/rdev (still need the list on each
wdev), we already need to hold the wdev lock to change it, so
there's no contention on the lock in any case. This trivially
fixes the bug since we hold one wdev's lock already, and now
will hold the lock that protects all lists.
Cc: stable@vger.kernel.org
Reported-by: Jouni Malinen <j@w1.fi>
Fixes:
|
||
|
qctecmdr
|
a2ca34642f | Merge "net: vmw_vsock: gunyah: Add detection between guest VMs" | ||
|
qctecmdr
|
3380d355aa |
Merge "Merge keystone/android12-5.10-keystone-qcom-release.66+ (3499d10) into msm-5.10"
|
||
|
Sivasri Kumar, Vanka
|
682c074515 |
Merge keystone/android12-5.10-keystone-qcom-release.66+ (3499d10) into msm-5.10
* refs/heads/tmp-3499d10:
ANDROID: GKI: rockchip: Enable symbols for pinctrl and rk8xx
ANDROID: GKI: rockchip: Enable symbols for typec
ANDROID: GKI: rockchip: Add build script
ANDROID: GKI: Add some symbols to symbol list to support vendor module
UPSTREAM: core: Add L2P entry swap quirk for Micron UFS
ANDROID: gki_defconfig: remove CONFIG_UBSAN_MISC entry
UPSTREAM: ubsan: remove overflow checks
UPSTREAM: ubsan: disable unsigned-overflow check for i386
UPSTREAM: ubsan: expand tests and reporting
UPSTREAM: ubsan: remove UBSAN_MISC in favor of individual options
UPSTREAM: ubsan: enable for all*config builds
UPSTREAM: ubsan: disable UBSAN_TRAP for all*config
UPSTREAM: ubsan: disable object-size sanitizer under GCC
UPSTREAM: ubsan: move cc-option tests into Kconfig
UPSTREAM: ubsan: remove redundant -Wno-maybe-uninitialized
UPSTREAM: mm/mremap: fix BUILD_BUG_ON() error in get_extent
FROMGIT: dma-buf: system_heap: Avoid warning on mid-order allocations
ANDROID: mm: cma: disable LRU cache early
ANDROID: GKI: update virtual device symbol list for led audio driver.
Linux 5.10.66
Revert "time: Handle negative seconds correctly in timespec64_to_ns()"
Revert "posix-cpu-timers: Force next expiration recalc after itimer reset"
Revert "block: nbd: add sanity check for first_minor"
Revert "Bluetooth: Move shutdown callback before flushing tx and rx queue"
Linux 5.10.65
clk: kirkwood: Fix a clocking boot regression
backlight: pwm_bl: Improve bootloader/kernel device handover
fbmem: don't allow too huge resolutions
IMA: remove the dependency on CRYPTO_MD5
IMA: remove -Wmissing-prototypes warning
fuse: flush extending writes
fuse: truncate pagecache on atomic_o_trunc
ARM: dts: at91: add pinctrl-{names, 0} for all gpios
KVM: nVMX: Unconditionally clear nested.pi_pending on nested VM-Enter
KVM: VMX: avoid running vmx_handle_exit_irqoff in case of emulation
KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted
KVM: s390: index kvm->arch.idle_mask by vcpu_idx
Revert "KVM: x86: mmu: Add guest physical address check in translate_gpa()"
x86/resctrl: Fix a maybe-uninitialized build warning treated as error
perf/x86/amd/ibs: Extend PERF_PMU_CAP_NO_EXCLUDE to IBS Op
tty: Fix data race between tiocsti() and flush_to_ldisc()
bio: fix page leak bio_add_hw_page failure
io_uring: IORING_OP_WRITE needs hash_reg_file set
time: Handle negative seconds correctly in timespec64_to_ns()
f2fs: guarantee to write dirty data when enabling checkpoint back
iwlwifi Add support for ax201 in Samsung Galaxy Book Flex2 Alpha
ASoC: rt5682: Remove unused variable in rt5682_i2c_remove()
ipv4: fix endianness issue in inet_rtm_getroute_build_skb()
octeontx2-af: Set proper errorcode for IPv4 checksum errors
octeontx2-af: Fix static code analyzer reported issues
octeontx2-af: Fix loop in free and unmap counter
net: qualcomm: fix QCA7000 checksum handling
net: sched: Fix qdisc_rate_table refcount leak when get tcf_block failed
ipv4: make exception cache less predictible
ipv6: make exception cache less predictible
brcmfmac: pcie: fix oops on failure to resume and reprobe
bcma: Fix memory leak for internally-handled cores
atlantic: Fix driver resume flow.
ath6kl: wmi: fix an error code in ath6kl_wmi_sync_point()
ice: Only lock to update netdev dev_addr
iwlwifi: skip first element in the WTAS ACPI table
iwlwifi: follow the new inclusive terminology
ASoC: wcd9335: Disable irq on slave ports in the remove function
ASoC: wcd9335: Fix a memory leak in the error handling path of the probe function
ASoC: wcd9335: Fix a double irq free in the remove function
tty: serial: fsl_lpuart: fix the wrong mapbase value
usb: bdc: Fix a resource leak in the error handling path of 'bdc_probe()'
usb: bdc: Fix an error handling path in 'bdc_probe()' when no suitable DMA config is available
usb: ehci-orion: Handle errors of clk_prepare_enable() in probe
i2c: xlp9xx: fix main IRQ check
i2c: mt65xx: fix IRQ check
CIFS: Fix a potencially linear read overflow
bpf: Fix possible out of bound write in narrow load handling
mmc: moxart: Fix issue with uninitialized dma_slave_config
mmc: dw_mmc: Fix issue with uninitialized dma_slave_config
mmc: sdhci: Fix issue with uninitialized dma_slave_config
ASoC: Intel: Skylake: Fix module resource and format selection
ASoC: Intel: Skylake: Leave data as is when invoking TLV IPCs
ASoC: Intel: kbl_da7219_max98927: Fix format selection for max98373
rsi: fix an error code in rsi_probe()
rsi: fix error code in rsi_load_9116_firmware()
gfs2: init system threads before freeze lock
i2c: hix5hd2: fix IRQ check
i2c: fix platform_get_irq.cocci warnings
i2c: s3c2410: fix IRQ check
i2c: iop3xx: fix deferred probing
Bluetooth: add timeout sanity check to hci_inquiry
lkdtm: replace SCSI_DISPATCH_CMD with SCSI_QUEUE_RQ
mm/swap: consider max pages in iomap_swapfile_add_extent
usb: gadget: mv_u3d: request_irq() after initializing UDC
firmware: raspberrypi: Fix a leak in 'rpi_firmware_get()'
firmware: raspberrypi: Keep count of all consumers
i2c: synquacer: fix deferred probing
clk: staging: correct reference to config IOMEM to config HAS_IOMEM
arm64: dts: marvell: armada-37xx: Extend PCIe MEM space
nfsd4: Fix forced-expiry locking
lockd: Fix invalid lockowner cast after vfs_test_lock
locking/local_lock: Add missing owner initialization
locking/lockdep: Mark local_lock_t
mac80211: Fix insufficient headroom issue for AMSDU
libbpf: Re-build libbpf.so when libbpf.map changes
usb: phy: tahvo: add IRQ check
usb: host: ohci-tmio: add IRQ check
PM: cpu: Make notifier chain use a raw_spinlock_t
Bluetooth: Move shutdown callback before flushing tx and rx queue
samples: pktgen: add missing IPv6 option to pktgen scripts
devlink: Clear whole devlink_flash_notify struct
selftests/bpf: Fix test_core_autosize on big-endian machines
usb: gadget: udc: renesas_usb3: Fix soc_device_match() abuse
usb: phy: twl6030: add IRQ checks
usb: phy: fsl-usb: add IRQ check
usb: gadget: udc: s3c2410: add IRQ check
usb: gadget: udc: at91: add IRQ check
usb: dwc3: qcom: add IRQ check
usb: dwc3: meson-g12a: add IRQ check
ASoC: rt5682: Properly turn off regulators if wrong device ID
ASoC: rt5682: Implement remove callback
net/mlx5: Fix unpublish devlink parameters
net/mlx5: Register to devlink ingress VLAN filter trap
drm/msm/dsi: Fix some reference counted resource leaks
Bluetooth: fix repeated calls to sco_sock_kill
ASoC: Intel: Fix platform ID matching
cgroup/cpuset: Fix violation of cpuset locking rule
cgroup/cpuset: Miscellaneous code cleanup
counter: 104-quad-8: Return error when invalid mode during ceiling_write
arm64: dts: exynos: correct GIC CPU interfaces address range on Exynos7
drm/msm/dpu: make dpu_hw_ctl_clear_all_blendstages clear necessary LMs
drm/msm/mdp4: move HW revision detection to earlier phase
drm/msm/mdp4: refactor HW revision detection into read_mdp_hw_revision
selftests/bpf: Fix bpf-iter-tcp4 test to print correctly the dest IP
PM: EM: Increase energy calculation precision
Bluetooth: increase BTNAMSIZ to 21 chars to fix potential buffer overflow
debugfs: Return error during {full/open}_proxy_open() on rmmod
soc: qcom: smsm: Fix missed interrupts if state changes while masked
bpf, samples: Add missing mprog-disable to xdp_redirect_cpu's optstring
PCI: PM: Enable PME if it can be signaled from D3cold
PCI: PM: Avoid forcing PCI_D0 for wakeup reasons inconsistently
media: venus: venc: Fix potential null pointer dereference on pointer fmt
media: em28xx-input: fix refcount bug in em28xx_usb_disconnect
leds: trigger: audio: Add an activate callback to ensure the initial brightness is set
leds: lt3593: Put fwnode in any case during ->probe()
i2c: highlander: add IRQ check
net/mlx5: Fix missing return value in mlx5_devlink_eswitch_inline_mode_set()
devlink: Break parameter notification sequence to be before/after unload/load driver
arm64: dts: renesas: hihope-rzg2-ex: Add EtherAVB internal rx delay
arm64: dts: renesas: rzg2: Convert EtherAVB to explicit delay handling
Bluetooth: mgmt: Fix wrong opcode in the response for add_adv cmd
net: cipso: fix warnings in netlbl_cipsov4_add_std
drm: mxsfb: Clear FIFO_CLEAR bit
drm: mxsfb: Increase number of outstanding requests on V4 and newer HW
drm: mxsfb: Enable recovery on underflow
cgroup/cpuset: Fix a partition bug with hotplug
net/mlx5e: Block LRO if firmware asks for tunneled LRO
net/mlx5e: Prohibit inner indir TIRs in IPoIB
ARM: dts: meson8b: ec100: Fix the pwm regulator supply properties
ARM: dts: meson8b: mxq: Fix the pwm regulator supply properties
ARM: dts: meson8b: odroidc1: Fix the pwm regulator supply properties
ARM: dts: meson8: Use a higher default GPU clock frequency
tcp: seq_file: Avoid skipping sk during tcp_seek_last_pos
drm/amdgpu/acp: Make PM domain really work
6lowpan: iphc: Fix an off-by-one check of array index
Bluetooth: sco: prevent information leak in sco_conn_defer_accept()
media: atomisp: fix the uninitialized use and rename "retvalue"
media: coda: fix frame_mem_ctrl for YUV420 and YVU420 formats
media: rockchip/rga: fix error handling in probe
media: rockchip/rga: use pm_runtime_resume_and_get()
media: go7007: remove redundant initialization
media: go7007: fix memory leak in go7007_usb_probe
media: dvb-usb: Fix error handling in dvb_usb_i2c_init
media: dvb-usb: fix uninit-value in vp702x_read_mac_addr
media: dvb-usb: fix uninit-value in dvb_usb_adapter_dvb_init
ionic: cleanly release devlink instance
driver core: Fix error return code in really_probe()
firmware: fix theoretical UAF race with firmware cache and resume
gfs2: Fix memory leak of object lsi on error return path
libbpf: Fix removal of inner map in bpf_object__create_map
soc: qcom: rpmhpd: Use corner in power_off
i40e: improve locking of mac_filter_hash
arm64: dts: renesas: r8a77995: draak: Remove bogus adv7511w properties
ARM: dts: aspeed-g6: Fix HVI3C function-group in pinctrl dtsi
libbpf: Fix the possible memory leak on error
gve: fix the wrong AdminQ buffer overflow check
drm/of: free the iterator object on failure
bpf: Fix potential memleak and UAF in the verifier.
bpf: Fix a typo of reuseport map in bpf.h.
drm/of: free the right object
media: cxd2880-spi: Fix an error handling path
soc: rockchip: ROCKCHIP_GRF should not default to y, unconditionally
leds: is31fl32xx: Fix missing error code in is31fl32xx_parse_dt()
media: TDA1997x: enable EDID support
ASoC: mediatek: mt8183: Fix Unbalanced pm_runtime_enable in mt8183_afe_pcm_dev_probe
drm/gma500: Fix end of loop tests for list_for_each_entry
drm/panfrost: Fix missing clk_disable_unprepare() on error in panfrost_clk_init()
EDAC/i10nm: Fix NVDIMM detection
spi: spi-zynq-qspi: use wait_for_completion_timeout to make zynq_qspi_exec_mem_op not interruptible
spi: sprd: Fix the wrong WDG_LOAD_VAL
regulator: vctrl: Avoid lockdep warning in enable/disable ops
regulator: vctrl: Use locked regulator_get_voltage in probe path
blk-crypto: fix check for too-large dun_bytes
spi: davinci: invoke chipselect callback
x86/mce: Defer processing of early errors
tpm: ibmvtpm: Avoid error message when process gets signal while waiting
certs: Trigger creation of RSA module signing key if it's not an RSA key
crypto: qat - use proper type for vf_mask
irqchip/gic-v3: Fix priority comparison when non-secure priorities are used
spi: coldfire-qspi: Use clk_disable_unprepare in the remove function
block: nbd: add sanity check for first_minor
clocksource/drivers/sh_cmt: Fix wrong setting if don't request IRQ for clock source channel
lib/mpi: use kcalloc in mpi_resize
irqchip/loongson-pch-pic: Improve edge triggered interrupt support
genirq/timings: Fix error return code in irq_timings_test_irqs()
spi: spi-pic32: Fix issue with uninitialized dma_slave_config
spi: spi-fsl-dspi: Fix issue with uninitialized dma_slave_config
block: return ELEVATOR_DISCARD_MERGE if possible
m68k: Fix invalid RMW_INSNS on CPUs that lack CAS
rcu: Fix stall-warning deadlock due to non-release of rcu_node ->lock
rcu: Add lockdep_assert_irqs_disabled() to rcu_sched_clock_irq() and callees
rcu: Fix to include first blocked task in stall warning
sched: Fix UCLAMP_FLAG_IDLE setting
sched/numa: Fix is_core_idle()
m68k: emu: Fix invalid free in nfeth_cleanup()
power: supply: cw2015: use dev_err_probe to allow deferred probe
s390/ap: fix state machine hang after failure to enable irq
s390/debug: fix debug area life cycle
s390/debug: keep debug data on resize
s390/pci: fix misleading rc in clp_set_pci_fn()
s390/kasan: fix large PMD pages address alignment check
udf_get_extendedattr() had no boundary checks.
fcntl: fix potential deadlock for &fasync_struct.fa_lock
crypto: qat - do not export adf_iov_putmsg()
crypto: qat - fix naming for init/shutdown VF to PF notifications
crypto: qat - fix reuse of completion variable
crypto: qat - handle both source of interrupt in VF ISR
crypto: qat - do not ignore errors from enable_vf2pf_comms()
crypto: omap - Fix inconsistent locking of device lists
libata: fix ata_host_start()
s390/zcrypt: fix wrong offset index for APKA master key valid state
s390/cio: add dev_busid sysfs entry for each subchannel
power: supply: max17042_battery: fix typo in MAx17042_TOFF
power: supply: smb347-charger: Add missing pin control activation
nvmet: pass back cntlid on successful completion
nvme-rdma: don't update queue count when failing to set io queues
nvme-tcp: don't update queue count when failing to set io queues
blk-throtl: optimize IOPS throttle for large IO scenarios
bcache: add proper error unwinding in bcache_device_init
isofs: joliet: Fix iocharset=utf8 mount option
udf: Fix iocharset=utf8 mount option
udf: Check LVID earlier
hrtimer: Ensure timerfd notification for HIGHRES=n
hrtimer: Avoid double reprogramming in __hrtimer_start_range_ns()
posix-cpu-timers: Force next expiration recalc after itimer reset
EDAC/mce_amd: Do not load edac_mce_amd module on guests
rcu/tree: Handle VM stoppage in stall detection
sched/deadline: Fix missing clock update in migrate_task_rq_dl()
crypto: omap-sham - clear dma flags only after omap_sham_update_dma_stop()
power: supply: axp288_fuel_gauge: Report register-address on readb / writeb errors
sched/deadline: Fix reset_on_fork reporting of DL tasks
crypto: mxs-dcp - Check for DMA mapping errors
regulator: tps65910: Silence deferred probe error
regmap: fix the offset of register error log
locking/mutex: Fix HANDOFF condition
ANDROID: GKI: update .xml after android12-5.10 merge
Revert "tty: drop termiox user definitions"
Linux 5.10.64
PCI: Call Max Payload Size-related fixup quirks early
x86/reboot: Limit Dell Optiplex 990 quirk to early BIOS versions
xhci: fix unsafe memory usage in xhci tracing
xhci: fix even more unsafe memory usage in xhci tracing
usb: mtu3: fix the wrong HS mult value
usb: mtu3: use @mult for HS isoc or intr
usb: mtu3: restore HS function when set SS/SSP
usb: gadget: tegra-xudc: fix the wrong mult value for HS isoc or intr
usb: host: xhci-rcar: Don't reload firmware after the completion
ALSA: usb-audio: Add registration quirk for JBL Quantum 800
blk-mq: clearing flush request reference in tags->rqs[]
netfilter: nftables: clone set element expression template
netfilter: nf_tables: initialize set before expression setup
netfilter: nftables: avoid potential overflows on 32bit arches
blk-mq: fix is_flush_rq
blk-mq: fix kernel panic during iterating over flush request
x86/events/amd/iommu: Fix invalid Perf result due to IOMMU PMC power-gating
Revert "r8169: avoid link-up interrupt issue on RTL8106e if user enables ASPM"
tty: drop termiox user definitions
net: linux/skbuff.h: combine SKB_EXTENSIONS + KCOV handling
serial: 8250: 8250_omap: Fix unused variable warning
net: kcov: don't select SKB_EXTENSIONS when there is no NET
mm/page_alloc: speed up the iteration of max_order
net: ll_temac: Remove left-over debug message
USB: serial: mos7720: improve OOM-handling in read_mos_reg()
igmp: Add ip_mc_list lock in ip_check_mc_rcu
ANDROID: GKI: fix up spi structure change
Linux 5.10.63
media: stkwebcam: fix memory leak in stk_camera_probe
fuse: fix illegal access to inode with reused nodeid
new helper: inode_wrong_type()
spi: Switch to signed types for *_native_cs SPI controller fields
serial: 8250: 8250_omap: Fix possible array out of bounds access
ALSA: pcm: fix divide error in snd_pcm_lib_ioctl
ALSA: hda/realtek: Workaround for conflicting SSID on ASUS ROG Strix G17
ALSA: hda/realtek: Quirk for HP Spectre x360 14 amp setup
cryptoloop: add a deprecation warning
perf/x86/amd/power: Assign pmu.module
perf/x86/amd/ibs: Work around erratum #1197
ceph: fix possible null-pointer dereference in ceph_mdsmap_decode()
perf/x86/intel/pt: Fix mask of num_address_ranges
qede: Fix memset corruption
net: macb: Add a NULL check on desc_ptp
qed: Fix the VF msix vectors flow
reset: reset-zynqmp: Fixed the argument data type
gpu: ipu-v3: Fix i.MX IPU-v3 offset calculations for (semi)planar U/V formats
ARM: OMAP1: ams-delta: remove unused function ams_delta_camera_power
xtensa: fix kconfig unmet dependency warning for HAVE_FUTEX_CMPXCHG
static_call: Fix unused variable warn w/o MODULE
Revert "Add a reference to ucounts for each cred"
Revert "cred: add missing return error code when set_cred_ucounts() failed"
Revert "ucounts: Increase ucounts reference counter before the security hook"
ubifs: report correct st_size for encrypted symlinks
f2fs: report correct st_size for encrypted symlinks
ext4: report correct st_size for encrypted symlinks
fscrypt: add fscrypt_symlink_getattr() for computing st_size
ext4: fix race writing to an inline_data file while its xattrs are changing
ANDROID: GKI: add virtio_break_device to the symbol list
Revert "once: Fix panic when module unload"
Revert "pipe: avoid unnecessary EPOLLET wakeups under normal loads"
Revert "pipe: do FASYNC notifications for every pipe IO, not just state changes"
Linux 5.10.62
bpf: Fix potentially incorrect results with bpf_get_local_storage()
audit: move put_tree() to avoid trim_trees refcount underflow and UAF
net: don't unconditionally copy_from_user a struct ifreq for socket ioctls
Revert "parisc: Add assembly implementations for memset, strlen, strcpy, strncpy and strcat"
Revert "floppy: reintroduce O_NDELAY fix"
kthread: Fix PF_KTHREAD vs to_kthread() race
btrfs: fix NULL pointer dereference when deleting device by invalid id
arm64: dts: qcom: msm8994-angler: Fix gpio-reserved-ranges 85-88
lkdtm: Enable DOUBLE_FAULT on all architectures
net: dsa: mt7530: fix VLAN traffic leaks again
usb: typec: ucsi: Clear pending after acking connector change
usb: typec: ucsi: Work around PPM losing change information
usb: typec: ucsi: acpi: Always decode connector change information
tracepoint: Use rcu get state and cond sync for static call updates
srcu: Provide polling interfaces for Tiny SRCU grace periods
srcu: Make Tiny SRCU use multi-bit grace-period counter
srcu: Provide internal interface to start a Tiny SRCU grace period
srcu: Provide polling interfaces for Tree SRCU grace periods
srcu: Provide internal interface to start a Tree SRCU grace period
powerpc/perf: Invoke per-CPU variable access with disabled interrupts
perf annotate: Fix jump parsing for C++ code.
perf tools: Fix arm64 build error with gcc-11
perf record: Fix memory leak in vDSO found using ASAN
perf symbol-elf: Fix memory leak by freeing sdt_note.args
perf env: Fix memory leak of bpf_prog_info_linear member
riscv: Fixup patch_text panic in ftrace
riscv: Fixup wrong ftrace remove cflag
Bluetooth: btusb: check conditions before enabling USB ALT 3 for WBS
vt_kdsetmode: extend console locking
tipc: call tipc_wait_for_connect only when dlen is not 0
mtd: spinand: Fix incorrect parameters for on-die ECC
pipe: do FASYNC notifications for every pipe IO, not just state changes
pipe: avoid unnecessary EPOLLET wakeups under normal loads
btrfs: fix race between marking inode needs to be logged and log syncing
net/rds: dma_map_sg is entitled to merge entries
drm/nouveau/kms/nv50: workaround EFI GOP window channel format differences
drm/nouveau/disp: power down unused DP links during init
drm: Copy drm_wait_vblank to user before returning
blk-mq: don't grab rq's refcount in blk_mq_check_expired()
drm/amd/pm: change the workload type for some cards
Revert "drm/amd/pm: fix workload mismatch on vega10"
qed: Fix null-pointer dereference in qed_rdma_create_qp()
qed: qed ll2 race condition fixes
tools/virtio: fix build
vringh: Use wiov->used to check for read/write desc order
virtio_vdpa: reject invalid vq indices
virtio_pci: Support surprise removal of virtio pci device
virtio: Improve vq->broken access to avoid any compiler optimization
cpufreq: blocklist Qualcomm sm8150 in cpufreq-dt-platdev
opp: remove WARN when no valid OPPs remain
iwlwifi: pnvm: accept multiple HW-type TLVs
clk: renesas: rcar-usb2-clock-sel: Fix kernel NULL pointer dereference
perf/x86/intel/uncore: Fix integer overflow on 23 bit left shift of a u32
dt-bindings: sifive-l2-cache: Fix 'select' matching
usb: gadget: u_audio: fix race condition on endpoint stop
drm/i915: Fix syncmap memory leak
net: stmmac: fix kernel panic due to NULL pointer dereference of plat->est
net: stmmac: add mutex lock to protect est parameters
Revert "mmc: sdhci-iproc: Set SDHCI_QUIRK_CAP_CLOCK_BASE_BROKEN on BCM2711"
net: hns3: fix get wrong pfc_en when query PFC configuration
net: hns3: fix duplicate node in VLAN list
net: hns3: add waiting time before cmdq memory is released
net: hns3: clear hardware resource when loading driver
rtnetlink: Return correct error on changing device netns
cxgb4: dont touch blocked freelist bitmap after free
ipv4: use siphash instead of Jenkins in fnhe_hashfun()
ipv6: use siphash in rt6_exception_hash()
net/sched: ets: fix crash when flipping from 'strict' to 'quantum'
ucounts: Increase ucounts reference counter before the security hook
net: marvell: fix MVNETA_TX_IN_PRGRS bit number
xgene-v2: Fix a resource leak in the error handling path of 'xge_probe()'
ip_gre: add validation for csum_start
RDMA/efa: Free IRQ vectors on error flow
e1000e: Do not take care about recovery NVM checksum
e1000e: Fix the max snoop/no-snoop latency for 10M
igc: Use num_tx_queues when iterating over tx_ring queue
igc: fix page fault when thunderbolt is unplugged
net: usb: pegasus: fixes of set_register(s) return value evaluation;
ice: do not abort devlink info if board identifier can't be found
RDMA/bnxt_re: Remove unpaired rtnl unlock in bnxt_re_dev_init()
IB/hfi1: Fix possible null-pointer dereference in _extend_sdma_tx_descs()
RDMA/bnxt_re: Add missing spin lock initialization
scsi: core: Fix hang of freezing queue between blocking and running device
usb: dwc3: gadget: Stop EP0 transfers during pullup disable
usb: dwc3: gadget: Fix dwc3_calc_trbs_left()
usb: renesas-xhci: Prefer firmware loading on unknown ROM state
USB: serial: option: add new VID/PID to support Fibocom FG150
Revert "USB: serial: ch341: fix character loss at high transfer rates"
drm/amdgpu: Cancel delayed work when GFXOFF is disabled
Revert "btrfs: compression: don't try to compress if we don't have enough pages"
riscv: Ensure the value of FP registers in the core dump file is up to date
ceph: correctly handle releasing an embedded cap flush
can: usb: esd_usb2: esd_usb2_rx_event(): fix the interchange of the CAN RX and TX error counters
net: mscc: Fix non-GPL export of regmap APIs
ovl: fix uninitialized pointer read in ovl_lookup_real_one()
blk-iocost: fix lockdep warning on blkcg->lock
once: Fix panic when module unload
netfilter: conntrack: collect all entries in one cycle
ARC: Fix CONFIG_STACKDEPOT
ASoC: component: Remove misplaced prefix handling in pin control functions
ASoC: rt5682: Adjust headset volume button threshold
bpf: Fix NULL pointer dereference in bpf_get_local_storage() helper
bpf: Fix ringbuf helper function compatibility
net: qrtr: fix another OOB Read in qrtr_endpoint_post
ANDROID: GKI: update the android12-5.10-lts abi .xml file
ANDROID: GKI: db845c: Update symbols list and ABI for lts v5.10.61
Revert "virtio: Protect vqs list access"
Revert "net: igmp: fix data-race in igmp_ifc_timer_expire()"
Revert "net: igmp: increase size of mr_ifc_count"
Revert "PCI/MSI: Protect msi_desc::masked for multi-MSI"
Linux 5.10.61
io_uring: only assign io_uring_enter() SQPOLL error in actual error case
io_uring: fix xa_alloc_cycle() error return value check
fs: warn about impending deprecation of mandatory locks
mm: memcontrol: fix occasional OOMs due to proportional memory.low reclaim
ASoC: intel: atom: Fix breakage for PCM buffer address setup
ALSA: hda/realtek: Limit mic boost on HP ProBook 445 G8
PCI: Increase D3 delay for AMD Renoir/Cezanne XHCI
s390/pci: fix use after free of zpci_dev
ALSA: hda/via: Apply runtime PM workaround for ASUS B23E
btrfs: prevent rename2 from exchanging a subvol with a directory from different parents
mmc: sdhci-iproc: Set SDHCI_QUIRK_CAP_CLOCK_BASE_BROKEN on BCM2711
mmc: sdhci-iproc: Cap min clock frequency on BCM2711
ALSA: hda/realtek: Enable 4-speaker output for Dell XPS 15 9510 laptop
ipack: tpci200: fix memory leak in the tpci200_register
ipack: tpci200: fix many double free issues in tpci200_pci_probe
slimbus: ngd: reset dma setup during runtime pm
slimbus: messaging: check for valid transaction id
slimbus: messaging: start transaction ids from 1 instead of zero
tracing / histogram: Fix NULL pointer dereference on strcmp() on NULL event name
ALSA: hda - fix the 'Capture Switch' value change notifications
clk: qcom: gdsc: Ensure regulator init state matches GDSC state
clk: imx6q: fix uart earlycon unwork
mmc: sdhci-msm: Update the software timeout value for sdhc
mmc: mmci: stm32: Check when the voltage switch procedure should be done
mmc: dw_mmc: Fix hang on data CRC error
Revert "flow_offload: action should not be NULL when it is referenced"
iavf: Fix ping is lost after untrusted VF had tried to change MAC
i40e: Fix ATR queue selection
r8152: fix writing USB_BP2_EN
iommu/vt-d: Fix incomplete cache flush in intel_pasid_tear_down_entry()
iommu/vt-d: Consolidate duplicate cache invaliation code
ovs: clear skb->tstamp in forwarding path
net: mdio-mux: Handle -EPROBE_DEFER correctly
net: mdio-mux: Don't ignore memory allocation errors
sch_cake: fix srchost/dsthost hashing mode
ixgbe, xsk: clean up the resources in ixgbe_xsk_pool_enable error path
net: qlcnic: add missed unlock in qlcnic_83xx_flash_read32
virtio-net: use NETIF_F_GRO_HW instead of NETIF_F_LRO
virtio-net: support XDP when not more queues
vrf: Reset skb conntrack connection on VRF rcv
bnxt_en: Add missing DMA memory barriers
bnxt_en: Disable aRFS if running on 212 firmware
ptp_pch: Restore dependency on PCI
net: 6pack: fix slab-out-of-bounds in decode_data
bnxt: count Tx drops
bnxt: make sure xmit_more + errors does not miss doorbells
bnxt: disable napi before canceling DIM
bnxt: don't lock the tx queue from napi poll
bpf: Clear zext_dst of dead insns
drm/mediatek: Add AAL output size configuration
drm/mediatek: Fix aal size config
soc / drm: mediatek: Move DDP component defines into mtk-mmsys.h
vdpa/mlx5: Avoid destroying MR on empty iotlb
vhost: Fix the calculation in vhost_overflow()
bus: ti-sysc: Fix error handling for sysc_check_active_timer()
vhost-vdpa: Fix integer overflow in vhost_vdpa_process_iotlb_update()
virtio: Protect vqs list access
dccp: add do-while-0 stubs for dccp_pr_debug macros
cpufreq: armada-37xx: forbid cpufreq for 1.2 GHz variant
iommu: Check if group is NULL before remove device
arm64: dts: qcom: msm8992-bullhead: Remove PSCI
arm64: dts: qcom: c630: fix correct powerdown pin for WSA881x
Bluetooth: hidp: use correct wait queue when removing ctrl_wait
drm/amd/display: workaround for hard hang on HPD on native DP
drm/amd/display: Fix Dynamic bpp issue with 8K30 with Navi 1X
net: usb: lan78xx: don't modify phy_device state concurrently
net: usb: pegasus: Check the return value of get_geristers() and friends;
ARM: dts: nomadik: Fix up interrupt controller node names
qede: fix crash in rmmod qede while automatic debug collection
drm/amdgpu: fix the doorbell missing when in CGPG issue for renoir.
scsi: core: Fix capacity set to zero after offlinining device
scsi: core: Avoid printing an error if target_alloc() returns -ENXIO
scsi: scsi_dh_rdac: Avoid crash during rdac_bus_attach()
scsi: megaraid_mm: Fix end of loop tests for list_for_each_entry()
scsi: pm80xx: Fix TMF task completion race condition
dmaengine: of-dma: router_xlate to return -EPROBE_DEFER if controller is not yet available
ARM: dts: am43x-epos-evm: Reduce i2c0 bus speed for tps65218
net: xfrm: Fix end of loop tests for list_for_each_entry
spi: spi-mux: Add module info needed for autoloading
dmaengine: usb-dmac: Fix PM reference leak in usb_dmac_probe()
dmaengine: xilinx_dma: Fix read-after-free bug when terminating transfers
USB: core: Fix incorrect pipe calculation in do_proc_control()
USB: core: Avoid WARNings for 0-length descriptor requests
KVM: X86: Fix warning caused by stale emulation context
KVM: x86: Factor out x86 instruction emulation with decoding
media: drivers/media/usb: fix memory leak in zr364xx_probe
media: zr364xx: fix memory leaks in probe()
media: zr364xx: propagate errors from zr364xx_start_readpipe()
mtd: cfi_cmdset_0002: fix crash when erasing/writing AMD cards
ath9k: Postpone key cache entry deletion for TXQ frames reference it
ath: Modify ath_key_delete() to not need full key entry
ath: Export ath_hw_keysetmac()
ath9k: Clear key cache explicitly on disabling hardware
ath: Use safer key clearing with key cache entries
Linux 5.10.60
net: dsa: microchip: ksz8795: Use software untagging on CPU port
net: dsa: microchip: ksz8795: Fix VLAN untagged flag change on deletion
net: dsa: microchip: ksz8795: Reject unsupported VLAN configuration
net: dsa: microchip: ksz8795: Fix PVID tag insertion
net: dsa: microchip: Fix probing KSZ87xx switch with DT node for host port
KVM: nSVM: always intercept VMLOAD/VMSAVE when nested (CVE-2021-3656)
KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653)
vmlinux.lds.h: Handle clang's module.{c,d}tor sections
ceph: take snap_empty_lock atomically with snaprealm refcount change
ceph: clean up locking annotation for ceph_get_snap_realm and __lookup_snap_realm
ceph: add some lockdep assertions around snaprealm handling
vboxsf: Add support for the atomic_open directory-inode op
vboxsf: Add vboxsf_[create|release]_sf_handle() helpers
KVM: nVMX: Use vmx_need_pf_intercept() when deciding if L0 wants a #PF
KVM: VMX: Use current VMCS to query WAITPKG support for MSR emulation
efi/libstub: arm64: Double check image alignment at entry
powerpc/smp: Fix OOPS in topology_init()
PCI/MSI: Protect msi_desc::masked for multi-MSI
PCI/MSI: Use msi_mask_irq() in pci_msi_shutdown()
PCI/MSI: Correct misleading comments
PCI/MSI: Do not set invalid bits in MSI mask
PCI/MSI: Enforce MSI[X] entry updates to be visible
PCI/MSI: Enforce that MSI-X table entry is masked for update
PCI/MSI: Mask all unused MSI-X entries
PCI/MSI: Enable and mask MSI-X early
genirq/timings: Prevent potential array overflow in __irq_timings_store()
genirq/msi: Ensure deactivation on teardown
x86/resctrl: Fix default monitoring groups reporting
x86/ioapic: Force affinity setup before startup
x86/msi: Force affinity setup before startup
genirq: Provide IRQCHIP_AFFINITY_PRE_STARTUP
x86/tools: Fix objdump version check again
powerpc/kprobes: Fix kprobe Oops happens in booke
efi/libstub: arm64: Relax 2M alignment again for relocatable kernels
efi/libstub: arm64: Force Image reallocation if BSS was not reserved
arm64: efi: kaslr: Fix occasional random alloc (and boot) failure
nbd: Aovid double completion of a request
vsock/virtio: avoid potential deadlock when vsock device remove
xen/events: Fix race in set_evtchn_to_irq
drm/i915: Only access SFC_DONE when media domain is not fused off
net: igmp: increase size of mr_ifc_count
tcp_bbr: fix u32 wrap bug in round logic if bbr_init() called after 2B packets
net: linkwatch: fix failure to restore device state across suspend/resume
net: bridge: fix memleak in br_add_if()
net: bridge: fix flags interpretation for extern learn fdb entries
net: bridge: validate the NUD_PERMANENT bit when adding an extern_learn FDB entry
net: dsa: sja1105: fix broken backpressure in .port_fdb_dump
net: dsa: lantiq: fix broken backpressure in .port_fdb_dump
net: dsa: lan9303: fix broken backpressure in .port_fdb_dump
net: igmp: fix data-race in igmp_ifc_timer_expire()
net: Fix memory leak in ieee802154_raw_deliver
net: dsa: microchip: ksz8795: Fix VLAN filtering
net: dsa: microchip: Fix ksz_read64()
drm/meson: fix colour distortion from HDR set during vendor u-boot
net/mlx5: Fix return value from tracer initialization
net/mlx5: Synchronize correct IRQ when destroying CQ
bareudp: Fix invalid read beyond skb's linear data
psample: Add a fwd declaration for skbuff
iavf: Set RSS LUT and key in reset handle path
ice: don't remove netdev->dev_addr from uc sync list
ice: Prevent probing virtual functions
net: sched: act_mirred: Reset ct info when mirror/redirect skb
net/smc: fix wait on already cleared link
ppp: Fix generating ifname when empty IFLA_IFNAME is specified
net: phy: micrel: Fix link detection on ksz87xx switch"
bpf: Fix integer overflow involving bucket_size
libbpf: Fix probe for BPF_PROG_TYPE_CGROUP_SOCKOPT
platform/x86: pcengines-apuv2: Add missing terminating entries to gpio-lookup tables
net: mvvp2: fix short frame size on s390
net: dsa: mt7530: add the missing RxUnicast MIB counter
ASoC: cs42l42: Fix LRCLK frame start edge
pinctrl: tigerlake: Fix GPIO mapping for newer version of software
netfilter: nf_conntrack_bridge: Fix memory leak when error
ASoC: cs42l42: Remove duplicate control for WNF filter frequency
ASoC: cs42l42: Fix inversion of ADC Notch Switch control
ASoC: SOF: Intel: hda-ipc: fix reply size checking
ASoC: cs42l42: Don't allow SND_SOC_DAIFMT_LEFT_J
ASoC: cs42l42: Correct definition of ADC Volume control
pinctrl: mediatek: Fix fallback behavior for bias_set_combo
ieee802154: hwsim: fix GPF in hwsim_new_edge_nl
ieee802154: hwsim: fix GPF in hwsim_set_edge_lqi
drm/amdgpu: don't enable baco on boco platforms in runpm
drm/amd/display: use GFP_ATOMIC in amdgpu_dm_irq_schedule_work
drm/amd/display: Remove invalid assert for ODM + MPC case
libnvdimm/region: Fix label activation vs errors
ACPI: NFIT: Fix support for virtual SPA ranges
ceph: reduce contention in ceph_check_delayed_caps()
ARC: fp: set FPU_STATUS.FWE to enable FPU_STATUS update on context switch
net: ethernet: ti: cpsw: fix min eth packet size for non-switch use-cases
seccomp: Fix setting loaded filter count during TSYNC
scsi: lpfc: Move initialization of phba->poll_list earlier to avoid crash
cifs: create sd context must be a multiple of 8
i2c: dev: zero out array used for i2c reads from userspace
ASoC: intel: atom: Fix reference to PCM buffer address
ASoC: tlv320aic31xx: Fix jack detection after suspend
ASoC: uniphier: Fix reference to PCM buffer address
ASoC: xilinx: Fix reference to PCM buffer address
ASoC: amd: Fix reference to PCM buffer address
iio: adc: Fix incorrect exit of for-loop
iio: humidity: hdc100x: Add margin to the conversion time
iio: adis: set GPIO reset pin direction
iio: adc: ti-ads7950: Ensure CS is deasserted after reading channels
Linux 5.10.59
net: xilinx_emaclite: Do not print real IOMEM pointer
ovl: prevent private clone if bind mount is not allowed
ppp: Fix generating ppp unit id when ifname is not specified
ALSA: hda: Add quirk for ASUS Flow x13
ALSA: hda/realtek: fix mute/micmute LEDs for HP ProBook 650 G8 Notebook PC
ALSA: pcm: Fix mmap breakage without explicit buffer setup
USB:ehci:fix Kunpeng920 ehci hardware problem
vboxsf: Make vboxsf_dir_create() return the handle for the created file
vboxsf: Honor excl flag to the dir-inode create op
arm64: dts: renesas: beacon: Fix USB ref clock references
arm64: dts: renesas: beacon: Fix USB extal reference
arm64: dts: renesas: rzg2: Add usb2_clksel to RZ/G2 M/N/H
mm: make zone_to_nid() and zone_set_nid() available for DISCONTIGMEM
Revert "selftests/resctrl: Use resctrl/info for feature detection"
bpf: Add lockdown check for probe_write_user helper
firmware: tee_bnxt: Release TEE shm, session, and context during kexec
tee: Correct inappropriate usage of TEE_SHM_DMA_BUF flag
KVM: SVM: Fix off-by-one indexing when nullifying last used SEV VMCB
Revert "xfrm: Fix RCU vs hash_resize_mutex lock inversion"
Linux 5.10.58
arm64: fix compat syscall return truncation
drm/amdgpu/display: only enable aux backlight control for OLED panels
smb3: rc uninitialized in one fallocate path
net/qla3xxx: fix schedule while atomic in ql_wait_for_drvr_lock and ql_adapter_reset
alpha: Send stop IPI to send to online CPUs
net: qede: Fix end of loop tests for list_for_each_entry
virt_wifi: fix error on connect
reiserfs: check directory items on read from disk
reiserfs: add check for root_inode in reiserfs_fill_super
libata: fix ata_pio_sector for CONFIG_HIGHMEM
drm/i915: avoid uninitialised var in eb_parse()
sched/rt: Fix double enqueue caused by rt_effective_prio
perf/x86/amd: Don't touch the AMD64_EVENTSEL_HOSTONLY bit inside the guest
soc: ixp4xx/qmgr: fix invalid __iomem access
drm/i915: Correct SFC_DONE register offset
interconnect: qcom: icc-rpmh: Ensure floor BW is enforced for all nodes
interconnect: Always call pre_aggregate before aggregate
interconnect: Zero initial BW after sync-state
spi: meson-spicc: fix memory leak in meson_spicc_remove
interconnect: Fix undersized devress_alloc allocation
soc: ixp4xx: fix printing resources
arm64: vdso: Avoid ISB after reading from cntvct_el0
KVM: x86/mmu: Fix per-cpu counter corruption on 32-bit builds
KVM: Do not leak memory for duplicate debugfs directories
KVM: x86: accept userspace interrupt only if no event is injected
md/raid10: properly indicate failure when ending a failed write request
ARM: omap2+: hwmod: fix potential NULL pointer access
Revert "gpio: mpc8xxx: change the gpio interrupt flags."
bus: ti-sysc: AM3: RNG is GP only
selinux: correct the return value when loads initial sids
pcmcia: i82092: fix a null pointer dereference bug
net/xfrm/compat: Copy xfrm_spdattr_type_t atributes
xfrm: Fix RCU vs hash_resize_mutex lock inversion
timers: Move clearing of base::timer_running under base:: Lock
fpga: dfl: fme: Fix cpu hotplug issue in performance reporting
serial: 8250_pci: Avoid irq sharing for MSI(-X) interrupts.
serial: 8250_pci: Enumerate Elkhart Lake UARTs via dedicated driver
MIPS: Malta: Do not byte-swap accesses to the CBUS UART
serial: 8250: Mask out floating 16/32-bit bus bits
serial: 8250_mtk: fix uart corruption issue when rx power off
serial: tegra: Only print FIFO error message when an error occurs
ext4: fix potential htree corruption when growing large_dir directories
pipe: increase minimum default pipe size to 2 pages
media: rtl28xxu: fix zero-length control request
drivers core: Fix oops when driver probe fails
staging: rtl8712: error handling refactoring
staging: rtl8712: get rid of flush_scheduled_work
staging: rtl8723bs: Fix a resource leak in sd_int_dpc
tpm_ftpm_tee: Free and unregister TEE shared memory during kexec
optee: fix tee out of memory failure seen during kexec reboot
optee: Refuse to load the driver under the kdump kernel
optee: Fix memory leak when failing to register shm pages
tee: add tee_shm_alloc_kernel_buf()
optee: Clear stale cache entries during initialization
arm64: stacktrace: avoid tracing arch_stack_walk()
tracepoint: Fix static call function vs data state mismatch
tracepoint: static call: Compare data on transition from 2->1 callees
tracing: Fix NULL pointer dereference in start_creating
tracing: Reject string operand in the histogram expression
tracing / histogram: Give calculation hist_fields a size
scripts/tracing: fix the bug that can't parse raw_trace_func
clk: fix leak on devm_clk_bulk_get_all() unwind
usb: otg-fsm: Fix hrtimer list corruption
usb: typec: tcpm: Keep other events when receiving FRS and Sourcing_vbus events
usb: host: ohci-at91: suspend/resume ports after/before OHCI accesses
usb: gadget: f_hid: idle uses the highest byte for duration
usb: gadget: f_hid: fixed NULL pointer dereference
usb: gadget: f_hid: added GET_IDLE and SET_IDLE handlers
usb: cdns3: Fixed incorrect gadget state
usb: gadget: remove leaked entry from udc driver list
usb: dwc3: gadget: Avoid runtime resume if disabling pullup
ALSA: usb-audio: Add registration quirk for JBL Quantum 600
ALSA: usb-audio: Fix superfluous autosuspend recovery
ALSA: hda/realtek: Fix headset mic for Acer SWIFT SF314-56 (ALC256)
ALSA: hda/realtek: add mic quirk for Acer SF314-42
ALSA: pcm - fix mmap capability check for the snd-dummy driver
drm/amdgpu/display: fix DMUB firmware version info
firmware_loader: fix use-after-free in firmware_fallback_sysfs
firmware_loader: use -ETIMEDOUT instead of -EAGAIN in fw_load_sysfs_fallback
USB: serial: ftdi_sio: add device ID for Auto-M3 OP-COM v2
USB: serial: ch341: fix character loss at high transfer rates
USB: serial: option: add Telit FD980 composition 0x1056
USB: usbtmc: Fix RCU stall warning
Bluetooth: defer cleanup of resources in hci_unregister_dev()
blk-iolatency: error out if blk_get_queue() failed in iolatency_set_limit()
net: vxge: fix use-after-free in vxge_device_unregister
net: fec: fix use-after-free in fec_drv_remove
net: pegasus: fix uninit-value in get_interrupt_interval
bnx2x: fix an error code in bnx2x_nic_load()
mips: Fix non-POSIX regexp
MIPS: check return value of pgtable_pmd_page_ctor
net: sched: fix lockdep_set_class() typo error for sch->seqlock
net: dsa: qca: ar9331: reorder MDIO write sequence
net: ipv6: fix returned variable type in ip6_skb_dst_mtu
nfp: update ethtool reporting of pauseframe control
sctp: move the active_key update after sh_keys is added
RDMA/mlx5: Delay emptying a cache entry when a new MR is added to it recently
gpio: tqmx86: really make IRQ optional
net: natsemi: Fix missing pci_disable_device() in probe and remove
net: phy: micrel: Fix detection of ksz87xx switch
net: dsa: sja1105: match FDB entries regardless of inner/outer VLAN tag
net: dsa: sja1105: be stateless with FDB entries on SJA1105P/Q/R/S/SJA1110 too
net: dsa: sja1105: invalidate dynamic FDB entries learned concurrently with statically added ones
net: dsa: sja1105: overwrite dynamic FDB entries with static ones in .port_fdb_add
net, gro: Set inner transport header offset in tcp/udp GRO hook
dmaengine: imx-dma: configure the generic DMA type to make it work
ARM: dts: stm32: Fix touchscreen IRQ line assignment on DHCOM
ARM: dts: stm32: Disable LAN8710 EDPD on DHCOM
media: videobuf2-core: dequeue if start_streaming fails
scsi: sr: Return correct event when media event code is 3
spi: imx: mx51-ecspi: Fix low-speed CONFIGREG delay calculation
spi: imx: mx51-ecspi: Reinstate low-speed CONFIGREG delay
dmaengine: stm32-dmamux: Fix PM usage counter unbalance in stm32 dmamux ops
dmaengine: stm32-dma: Fix PM usage counter imbalance in stm32 dma ops
clk: tegra: Implement disable_unused() of tegra_clk_sdmmc_mux_ops
dmaengine: uniphier-xdmac: Use readl_poll_timeout_atomic() in atomic state
omap5-board-common: remove not physically existing vdds_1v8_main fixed-regulator
ARM: dts: am437x-l4: fix typo in can@0 node
clk: stm32f4: fix post divisor setup for I2S/SAI PLLs
ALSA: usb-audio: fix incorrect clock source setting
arm64: dts: armada-3720-turris-mox: remove mrvl,i2c-fast-mode
arm64: dts: armada-3720-turris-mox: fixed indices for the SDHC controllers
ARM: dts: imx: Swap M53Menlo pinctrl_power_button/pinctrl_power_out pins
ARM: imx: fix missing 3rd argument in macro imx_mmdc_perf_init
ARM: dts: colibri-imx6ull: limit SDIO clock to 25MHz
arm64: dts: ls1028: sl28: fix networking for variant 2
ARM: dts: imx6qdl-sr-som: Increase the PHY reset duration to 10ms
ARM: imx: add missing clk_disable_unprepare()
ARM: imx: add missing iounmap()
arm64: dts: ls1028a: fix node name for the sysclk
net: xfrm: fix memory leak in xfrm_user_rcv_msg
bus: ti-sysc: Fix gpt12 system timer issue with reserved status
ALSA: seq: Fix racy deletion of subscriber
Revert "ACPICA: Fix memory leak caused by _CID repair function"
Linux 5.10.57
spi: mediatek: Fix fifo transfer
selftest/bpf: Verifier tests for var-off access
bpf, selftests: Adjust few selftest outcomes wrt unreachable code
bpf: Update selftests to reflect new error states
bpf, selftests: Adjust few selftest result_unpriv outcomes
selftest/bpf: Adjust expected verifier errors
selftests/bpf: Add a test for ptr_to_map_value on stack for helper access
Revert "watchdog: iTCO_wdt: Account for rebooting on second timeout"
firmware: arm_scmi: Add delayed response status check
firmware: arm_scmi: Ensure drivers provide a probe function
Revert "Bluetooth: Shutdown controller after workqueues are flushed or cancelled"
ACPI: fix NULL pointer dereference
drm/amd/display: Fix max vstartup calculation for modes with borders
drm/amd/display: Fix comparison error in dcn21 DML
nvme: fix nvme_setup_command metadata trace event
efi/mokvar: Reserve the table only if it is in boot services data
ASoC: ti: j721e-evm: Check for not initialized parent_clk_id
ASoC: ti: j721e-evm: Fix unbalanced domain activity tracking during startup
net: Fix zero-copy head len calculation.
ASoC: rt5682: Fix the issue of garbled recording after powerd_dbus_suspend
qed: fix possible unpaired spin_{un}lock_bh in _qed_mcp_cmd_and_union()
r8152: Fix potential PM refcount imbalance
ASoC: tlv320aic31xx: fix reversed bclk/wclk master bits
spi: stm32h7: fix full duplex irq handler handling
regulator: rt5033: Fix n_voltages settings for BUCK and LDO
regulator: rtmv20: Fix wrong mask for strobe-polarity-high
btrfs: fix lost inode on log replay after mix of fsync, rename and inode eviction
btrfs: fix race causing unnecessary inode logging during link and rename
Revert "drm/i915: Propagate errors on awaiting already signaled fences"
drm/i915: Revert "drm/i915/gem: Asynchronous cmdparser"
Linux 5.10.56
can: j1939: j1939_session_deactivate(): clarify lifetime of session object
i40e: Add additional info to PHY type error
Revert "perf map: Fix dso->nsinfo refcounting"
powerpc/pseries: Fix regression while building external modules
SMB3: fix readpage for large swap cache
bpf: Fix pointer arithmetic mask tightening under state pruning
bpf: verifier: Allocate idmap scratch in verifier env
bpf: Remove superfluous aux sanitation on subprog rejection
bpf: Fix leakage due to insufficient speculative store bypass mitigation
bpf: Introduce BPF nospec instruction for mitigating Spectre v4
can: hi311x: fix a signedness bug in hi3110_cmd()
sis900: Fix missing pci_disable_device() in probe and remove
tulip: windbond-840: Fix missing pci_disable_device() in probe and remove
sctp: fix return value check in __sctp_rcv_asconf_lookup
net/mlx5e: Fix nullptr in mlx5e_hairpin_get_mdev()
net/mlx5: Fix flow table chaining
skmsg: Make sk_psock_destroy() static
drm/msm/dp: Initialize the INTF_CONFIG register
drm/msm/dpu: Fix sm8250_mdp register length
net: llc: fix skb_over_panic
KVM: x86: Check the right feature bit for MSR_KVM_ASYNC_PF_ACK access
mlx4: Fix missing error code in mlx4_load_one()
octeontx2-pf: Fix interface down flag on error
tipc: do not write skb_shinfo frags when doing decrytion
ionic: count csum_none when offload enabled
ionic: fix up dim accounting for tx and rx
ionic: remove intr coalesce update from napi
net: qrtr: fix memory leaks
net: Set true network header for ECN decapsulation
tipc: fix sleeping in tipc accept routine
tipc: fix implicit-connect for SYN+
i40e: Fix log TC creation failure when max num of queues is exceeded
i40e: Fix queue-to-TC mapping on Tx
i40e: Fix firmware LLDP agent related warning
i40e: Fix logic of disabling queues
netfilter: nft_nat: allow to specify layer 4 protocol NAT only
netfilter: conntrack: adjust stop timestamp to real expiry value
mac80211: fix enabling 4-address mode on a sta vif after assoc
bpf: Fix OOB read when printing XDP link fdinfo
RDMA/bnxt_re: Fix stats counters
cfg80211: Fix possible memory leak in function cfg80211_bss_update
nfc: nfcsim: fix use after free during module unload
blk-iocost: fix operation ordering in iocg_wake_fn()
drm/amdgpu: Fix resource leak on probe error path
drm/amdgpu: Avoid printing of stack contents on firmware load error
drm/amd/display: ensure dentist display clock update finished in DCN20
NIU: fix incorrect error return, missed in previous revert
HID: wacom: Re-enable touch by default for Cintiq 24HDT / 27QHDT
alpha: register early reserved memory in memblock
can: esd_usb2: fix memory leak
can: ems_usb: fix memory leak
can: usb_8dev: fix memory leak
can: mcba_usb_start(): add missing urb->transfer_dma initialization
can: peak_usb: pcan_usb_handle_bus_evt(): fix reading rxerr/txerr values
can: raw: raw_setsockopt(): fix raw_rcv panic for sock UAF
can: j1939: j1939_xtp_rx_dat_one(): fix rxtimer value between consecutive TP.DT to 750ms
ocfs2: issue zeroout to EOF blocks
ocfs2: fix zero out valid data
KVM: add missing compat KVM_CLEAR_DIRTY_LOG
x86/kvm: fix vcpu-id indexed array sizes
ACPI: DPTF: Fix reading of attributes
Revert "ACPI: resources: Add checks for ACPI IRQ override"
btrfs: mark compressed range uptodate only if all bio succeed
btrfs: fix rw device counting in __btrfs_free_extra_devids
pipe: make pipe writes always wake up readers
x86/asm: Ensure asm/proto.h can be included stand-alone
io_uring: fix null-ptr-deref in io_sq_offload_start()
selftest: fix build error in tools/testing/selftests/vm/userfaultfd.c
Linux 5.10.55
ipv6: ip6_finish_output2: set sk into newly allocated nskb
ARM: dts: versatile: Fix up interrupt controller node names
iomap: remove the length variable in iomap_seek_hole
iomap: remove the length variable in iomap_seek_data
cifs: fix the out of range assignment to bit fields in parse_server_interfaces
firmware: arm_scmi: Fix range check for the maximum number of pending messages
firmware: arm_scmi: Fix possible scmi_linux_errmap buffer overflow
hfs: add lock nesting notation to hfs_find_init
hfs: fix high memory mapping in hfs_bnode_read
hfs: add missing clean-up in hfs_fill_super
drm/ttm: add a check against null pointer dereference
ipv6: allocate enough headroom in ip6_finish_output2()
rcu-tasks: Don't delete holdouts within trc_wait_for_one_reader()
rcu-tasks: Don't delete holdouts within trc_inspect_reader()
sctp: move 198 addresses from unusable to private scope
net: annotate data race around sk_ll_usec
net/802/garp: fix memleak in garp_request_join()
net/802/mrp: fix memleak in mrp_request_join()
cgroup1: fix leaked context root causing sporadic NULL deref in LTP
workqueue: fix UAF in pwq_unbound_release_workfn()
af_unix: fix garbage collect vs MSG_PEEK
KVM: x86: determine if an exception has an error code only when injecting it.
io_uring: fix link timeout refs
tools: Allow proper CC/CXX/... override with LLVM=1 in Makefile.include
Linux 5.10.54
skbuff: Fix build with SKB extensions disabled
xhci: add xhci_get_virt_ep() helper
sfc: ensure correct number of XDP queues
drm/i915/gvt: Clear d3_entered on elsp cmd submission.
usb: ehci: Prevent missed ehci interrupts with edge-triggered MSI
perf inject: Close inject.output on exit
Documentation: Fix intiramfs script name
skbuff: Release nfct refcount on napi stolen or re-used skbs
bonding: fix build issue
PCI: Mark AMD Navi14 GPU ATS as broken
net: dsa: mv88e6xxx: enable SerDes PCS register dump via ethtool -d on Topaz
net: dsa: mv88e6xxx: enable SerDes RX stats for Topaz
drm/amdgpu: update golden setting for sienna_cichlid
drm: Return -ENOTTY for non-drm ioctls
driver core: Prevent warning when removing a device link from unregistered consumer
nds32: fix up stack guard gap
misc: eeprom: at24: Always append device id even if label property is set.
rbd: always kick acquire on "acquired" and "released" notifications
rbd: don't hold lock_rwsem while running_list is being drained
hugetlbfs: fix mount mode command line processing
memblock: make for_each_mem_range() traverse MEMBLOCK_HOTPLUG regions
userfaultfd: do not untag user pointers
io_uring: remove double poll entry on arm failure
io_uring: explicitly count entries for poll reqs
selftest: use mmap instead of posix_memalign to allocate memory
posix-cpu-timers: Fix rearm racing against process tick
bus: mhi: core: Validate channel ID when processing command completions
ixgbe: Fix packet corruption due to missing DMA sync
media: ngene: Fix out-of-bounds bug in ngene_command_config_free_buf()
btrfs: check for missing device in btrfs_trim_fs
tracing: Synthetic event field_pos is an index not a boolean
tracing: Fix bug in rb_per_cpu_empty() that might cause deadloop.
tracing/histogram: Rename "cpu" to "common_cpu"
tracepoints: Update static_call before tp_funcs when adding a tracepoint
firmware/efi: Tell memblock about EFI iomem reservations
usb: typec: stusb160x: register role switch before interrupt registration
usb: dwc2: gadget: Fix sending zero length packet in DDMA mode.
usb: dwc2: gadget: Fix GOUTNAK flow for Slave mode.
usb: gadget: Fix Unbalanced pm_runtime_enable in tegra_xudc_probe
USB: serial: cp210x: add ID for CEL EM3588 USB ZigBee stick
USB: serial: cp210x: fix comments for GE CS1000
USB: serial: option: add support for u-blox LARA-R6 family
usb: renesas_usbhs: Fix superfluous irqs happen after usb_pkt_pop()
usb: max-3421: Prevent corruption of freed memory
USB: usb-storage: Add LaCie Rugged USB3-FW to IGNORE_UAS
usb: hub: Fix link power management max exit latency (MEL) calculations
usb: hub: Disable USB 3 device initiated lpm if exit latency is too high
KVM: PPC: Book3S HV Nested: Sanitise H_ENTER_NESTED TM state
KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow
xhci: Fix lost USB 2 remote wake
usb: xhci: avoid renesas_usb_fw.mem when it's unusable
Revert "usb: renesas-xhci: Fix handling of unknown ROM state"
ALSA: pcm: Fix mmap capability check
ALSA: pcm: Call substream ack() method upon compat mmap commit
ALSA: hdmi: Expose all pins on MSI MS-7C94 board
ALSA: hda/realtek: Fix pop noise and 2 Front Mic issues on a machine
ALSA: sb: Fix potential ABBA deadlock in CSP driver
ALSA: usb-audio: Add registration quirk for JBL Quantum headsets
ALSA: usb-audio: Add missing proc text entry for BESPOKEN type
s390/boot: fix use of expolines in the DMA code
s390/ftrace: fix ftrace_update_ftrace_func implementation
mmc: core: Don't allocate IDA for OF aliases
proc: Avoid mixing integer types in mem_rw()
cifs: fix fallocate when trying to allocate a hole.
cifs: only write 64kb at a time when fallocating a small region of a file
drm/panel: raspberrypi-touchscreen: Prevent double-free
net: sched: cls_api: Fix the the wrong parameter
net: dsa: sja1105: make VID 4095 a bridge VLAN too
tcp: disable TFO blackhole logic by default
sctp: update active_key for asoc when old key is being replaced
nvme: set the PRACT bit when using Write Zeroes with T10 PI
r8169: Avoid duplicate sysfs entry creation error
afs: Fix tracepoint string placement with built-in AFS
Revert "USB: quirks: ignore remote wake-up on Fibocom L850-GL LTE modem"
nvme-pci: don't WARN_ON in nvme_reset_work if ctrl.state is not RESETTING
ceph: don't WARN if we're still opening a session to an MDS
ipv6: fix another slab-out-of-bounds in fib6_nh_flush_exceptions
net/sched: act_skbmod: Skip non-Ethernet packets
spi: spi-bcm2835: Fix deadlock
net: hns3: fix rx VLAN offload state inconsistent issue
net: hns3: fix possible mismatches resp of mailbox
ALSA: hda: intel-dsp-cfg: add missing ElkhartLake PCI ID
net/tcp_fastopen: fix data races around tfo_active_disable_stamp
net: hisilicon: rename CACHE_LINE_MASK to avoid redefinition
bnxt_en: Check abort error state in bnxt_half_open_nic()
bnxt_en: Validate vlan protocol ID on RX packets
bnxt_en: Add missing check for BNXT_STATE_ABORT_ERR in bnxt_fw_rset_task()
bnxt_en: Refresh RoCE capabilities in bnxt_ulp_probe()
bnxt_en: don't disable an already disabled PCI device
ACPI: Kconfig: Fix table override from built-in initrd
spi: cadence: Correct initialisation of runtime PM again
scsi: target: Fix protect handling in WRITE SAME(32)
scsi: iscsi: Fix iface sysfs attr detection
netrom: Decrease sock refcount when sock timers expire
sctp: trim optlen when it's a huge value in sctp_setsockopt
net: sched: fix memory leak in tcindex_partial_destroy_work
KVM: PPC: Fix kvm_arch_vcpu_ioctl vcpu_load leak
KVM: PPC: Book3S: Fix CONFIG_TRANSACTIONAL_MEM=n crash
net: decnet: Fix sleeping inside in af_decnet
efi/tpm: Differentiate missing and invalid final event log table.
dma-mapping: handle vmalloc addresses in dma_common_{mmap,get_sgtable}
usb: hso: fix error handling code of hso_create_net_device
net: fix uninit-value in caif_seqpkt_sendmsg
bpftool: Check malloc return value in mount_bpffs_for_pin
bpf, sockmap, udp: sk_prot needs inuse_idx set for proc stats
bpf, sockmap, tcp: sk_prot needs inuse_idx set for proc stats
bpf, sockmap: Fix potential memory leak on unlikely error case
s390/bpf: Perform r1 range checking before accessing jit->seen_reg[r1]
liquidio: Fix unintentional sign extension issue on left shift of u16
timers: Fix get_next_timer_interrupt() with no timers pending
xdp, net: Fix use-after-free in bpf_xdp_link_release
bpf: Fix tail_call_reachable rejection for interpreter when jit failed
bpf, test: fix NULL pointer dereference on invalid expected_attach_type
ASoC: rt5631: Fix regcache sync errors on resume
spi: mediatek: fix fifo rx mode
regulator: hi6421: Fix getting wrong drvdata
regulator: hi6421: Use correct variable type for regmap api val argument
spi: stm32: fixes pm_runtime calls in probe/remove
spi: imx: add a check for speed_hz before calculating the clock
ASoC: wm_adsp: Correct wm_coeff_tlv_get handling
perf sched: Fix record failure when CONFIG_SCHEDSTATS is not set
perf data: Close all files in close_dir()
perf probe-file: Delete namelist in del_events() on the error path
perf lzma: Close lzma stream on exit
perf script: Fix memory 'threads' and 'cpus' leaks on exit
perf report: Free generated help strings for sort option
perf env: Fix memory leak of cpu_pmu_caps
perf test maps__merge_in: Fix memory leak of maps
perf dso: Fix memory leak in dso__new_map()
perf test event_update: Fix memory leak of evlist
perf test session_topology: Delete session->evlist
perf env: Fix sibling_dies memory leak
perf probe: Fix dso->nsinfo refcounting
perf map: Fix dso->nsinfo refcounting
perf inject: Fix dso->nsinfo refcounting
KVM: x86/pmu: Clear anythread deprecated bit when 0xa leaf is unsupported on the SVM
nvme-pci: do not call nvme_dev_remove_admin from nvme_remove
mptcp: fix warning in __skb_flow_dissect() when do syn cookie for subflow join
cxgb4: fix IRQ free race during driver unload
pwm: sprd: Ensure configuring period and duty_cycle isn't wrongly skipped
selftests: icmp_redirect: IPv6 PMTU info should be cleared after redirect
selftests: icmp_redirect: remove from checking for IPv6 route get
stmmac: platform: Fix signedness bug in stmmac_probe_config_dt()
ipv6: fix 'disable_policy' for fwd packets
bonding: fix incorrect return value of bond_ipsec_offload_ok()
bonding: fix suspicious RCU usage in bond_ipsec_offload_ok()
bonding: Add struct bond_ipesc to manage SA
bonding: disallow setting nested bonding + ipsec offload
bonding: fix suspicious RCU usage in bond_ipsec_del_sa()
ixgbevf: use xso.real_dev instead of xso.dev in callback functions of struct xfrmdev_ops
bonding: fix null dereference in bond_ipsec_add_sa()
bonding: fix suspicious RCU usage in bond_ipsec_add_sa()
net: add kcov handle to skb extensions
gve: Fix an error handling path in 'gve_probe()'
igb: Fix position of assignment to *ring
igb: Check if num of q_vectors is smaller than max before array access
iavf: Fix an error handling path in 'iavf_probe()'
e1000e: Fix an error handling path in 'e1000_probe()'
fm10k: Fix an error handling path in 'fm10k_probe()'
igb: Fix an error handling path in 'igb_probe()'
igc: Fix an error handling path in 'igc_probe()'
ixgbe: Fix an error handling path in 'ixgbe_probe()'
igc: change default return of igc_read_phy_reg()
igb: Fix use-after-free error during reset
igc: Fix use-after-free error during reset
Revert "bpf: Track subprog poke descriptors correctly and fix use-after-free"
Linux 5.10.53
udp: annotate data races around unix_sk(sk)->gso_size
drm/panel: nt35510: Do not fail if DSI read fails
perf test bpf: Free obj_buf
bpf: Track subprog poke descriptors correctly and fix use-after-free
bpftool: Properly close va_list 'ap' by va_end() on error
tools: bpf: Fix error in 'make -C tools/ bpf_install'
tcp: call sk_wmem_schedule before sk_mem_charge in zerocopy path
ipv6: tcp: drop silly ICMPv6 packet too big messages
tcp: fix tcp_init_transfer() to not reset icsk_ca_initialized
tcp: annotate data races around tp->mtu_info
tcp: consistently disable header prediction for mptcp
ARM: dts: tacoma: Add phase corrections for eMMC
ARM: dts: aspeed: Fix AST2600 machines line names
kbuild: do not suppress Kconfig prompts for silent build
dma-buf/sync_file: Don't leak fences on merge failure
net: fddi: fix UAF in fza_probe
net: dsa: properly check for the bridge_leave methods in dsa_switch_bridge_leave()
Revert "mm/shmem: fix shmem_swapin() race with swapoff"
net: validate lwtstate->data before returning from skb_tunnel_info()
net: send SYNACK packet with accepted fwmark
net: ti: fix UAF in tlan_remove_one
net: qcom/emac: fix UAF in emac_remove
net: moxa: fix UAF in moxart_mac_probe
net: ip_tunnel: fix mtu calculation for ETHER tunnel devices
net: bcmgenet: Ensure all TX/RX queues DMAs are disabled
net: netdevsim: use xso.real_dev instead of xso.dev in callback functions of struct xfrmdev_ops
net: bridge: sync fdb to new unicast-filtering ports
net/sched: act_ct: remove and free nf_table callbacks
vmxnet3: fix cksum offload issues for tunnels with non-default udp ports
net/sched: act_ct: fix err check for nf_conntrack_confirm
netfilter: ctnetlink: suspicious RCU usage in ctnetlink_dump_helpinfo
net: ipv6: fix return value of ip6_skb_dst_mtu
net: dsa: mv88e6xxx: enable devlink ATU hash param for Topaz
net: dsa: mv88e6xxx: enable .rmu_disable() on Topaz
net: dsa: mv88e6xxx: use correct .stats_set_histogram() on Topaz
net: dsa: mv88e6xxx: enable .port_set_policy() on Topaz
net: bcmgenet: ensure EXT_ENERGY_DET_MASK is clear
usb: cdns3: Enable TDL_CHK only for OUT ep
mm/page_alloc: fix memory map initialization for descending nodes
mm/userfaultfd: fix uffd-wp special cases for fork()
mm/thp: simplify copying of huge zero page pmd when fork
f2fs: Show casefolding support only when supported
Revert "swap: fix do_swap_page() race with swapoff"
arm64: dts: marvell: armada-37xx: move firmware node to generic dtsi file
firmware: turris-mox-rwtm: add marvell,armada-3700-rwtm-firmware compatible string
cifs: prevent NULL deref in cifs_compose_mount_options()
s390: introduce proper type handling call_on_stack() macro
s390/traps: do not test MONITOR CALL without CONFIG_BUG
thermal/core/thermal_of: Stop zone device before unregistering it
perf/x86/intel/uncore: Clean up error handling path of iio mapping
sched/fair: Fix CFS bandwidth hrtimer expiry type
scsi: qedf: Add check to synchronize abort and flush
scsi: libfc: Fix array index out of bound exception
scsi: libsas: Add LUN number check in .slave_alloc callback
scsi: aic7xxx: Fix unintentional sign extension issue on left shift of u8
rtc: max77686: Do not enforce (incorrect) interrupt trigger type
arch/arm64/boot/dts/marvell: fix NAND partitioning scheme
kbuild: mkcompile_h: consider timestamp if KBUILD_BUILD_TIMESTAMP is set
thermal/drivers/sprd: Add missing of_node_put for loop iteration
thermal/drivers/imx_sc: Add missing of_node_put for loop iteration
thermal/drivers/rcar_gen3_thermal: Do not shadow rcar_gen3_ths_tj_1
thermal/core: Correct function name thermal_zone_device_unregister()
arm64: dts: imx8mq: assign PCIe clocks
arm64: dts: ls208xa: remove bus-num from dspi node
firmware: tegra: bpmp: Fix Tegra234-only builds
soc/tegra: fuse: Fix Tegra234-only builds
ARM: OMAP2+: Block suspend for am3 and am4 if PM is not configured
ARM: dts: stm32: fix stpmic node for stm32mp1 boards
ARM: dts: stm32: Rename spi-flash/mx66l51235l@N to flash@N on DHCOM SoM
ARM: dts: stm32: Drop unused linux,wakeup from touchscreen node on DHCOM SoM
ARM: dts: stm32: fix the Odyssey SoM eMMC VQMMC supply
ARM: dts: stm32: move stmmac axi config in ethernet node on stm32mp15
ARM: dts: stm32: fix i2c node name on stm32f746 to prevent warnings
ARM: dts: rockchip: fix supply properties in io-domains nodes
arm64: dts: juno: Update SCPI nodes as per the YAML schema
ARM: dts: bcm283x: Fix up GPIO LED node names
ARM: dts: bcm283x: Fix up MMC node names
firmware: arm_scmi: Fix the build when CONFIG_MAILBOX is not selected
firmware: arm_scmi: Add SMCCC discovery dependency in Kconfig
memory: tegra: Fix compilation warnings on 64bit platforms
ARM: dts: stm32: fix timer nodes on STM32 MCU to prevent warnings
ARM: dts: stm32: fix RCC node name on stm32f429 MCU
ARM: dts: stm32: fix gpio-keys node on STM32 MCU boards
ARM: dts: stm32: fix stm32mp157c-odyssey card detect pin
ARM: dts: stm32: Fix touchscreen node on dhcom-pdk2
ARM: dts: stm32: Remove extra size-cells on dhcom-pdk2
arm64: dts: qcom: sc7180: Move rmtfs memory region
ARM: tegra: nexus7: Correct 3v3 regulator GPIO of PM269 variant
ARM: tegra: wm8903: Fix polarity of headphones-detection GPIO in device-trees
arm64: dts: ti: k3-am654x/j721e/j7200-common-proc-board: Fix MCU_RGMII1_TXC direction
ARM: dts: OMAP2+: Replace underscores in sub-mailbox node names
ARM: dts: am335x: fix ti,no-reset-on-init flag for gpios
ARM: dts: am437x-gp-evm: fix ti,no-reset-on-init flag for gpios
ARM: dts: am57xx-cl-som-am57x: fix ti,no-reset-on-init flag for gpios
kbuild: sink stdout from cmd for silent build
rtc: mxc_v2: add missing MODULE_DEVICE_TABLE
ARM: dts: imx6dl-riotboard: configure PHY clock and set proper EEE value
ARM: dts: ux500: Fix orientation of accelerometer
ARM: dts: ux500: Rename gpio-controller node
ARM: dts: ux500: Fix interrupt cells
arm64: dts: rockchip: fix regulator-gpio states array
ARM: imx: pm-imx5: Fix references to imx5_cpu_suspend_info
ARM: dts: imx6: phyFLEX: Fix UART hardware flow control
ARM: dts: Hurricane 2: Fix NAND nodes names
ARM: dts: BCM63xx: Fix NAND nodes names
ARM: NSP: dts: fix NAND nodes names
ARM: Cygnus: dts: fix NAND nodes names
ARM: brcmstb: dts: fix NAND nodes names
reset: ti-syscon: fix to_ti_syscon_reset_data macro
arm64: dts: rockchip: Fix power-controller node names for rk3399
arm64: dts: rockchip: Fix power-controller node names for rk3328
arm64: dts: rockchip: Fix power-controller node names for px30
ARM: dts: rockchip: Fix power-controller node names for rk3288
ARM: dts: rockchip: Fix power-controller node names for rk3188
ARM: dts: rockchip: Fix power-controller node names for rk3066a
ARM: dts: rockchip: Fix IOMMU nodes properties on rk322x
ARM: dts: rockchip: Fix the timer clocks order
arm64: dts: rockchip: fix pinctrl sleep nodename for rk3399.dtsi
ARM: dts: rockchip: fix pinctrl sleep nodename for rk3036-kylin and rk3288
ARM: dts: rockchip: Fix thermal sensor cells o rk322x
ARM: dts: gemini: add device_type on pci
ARM: dts: gemini: rename mdio to the right name
Linux 5.10.52
seq_file: disallow extremely large seq buffer allocations
scsi: scsi_dh_alua: Fix signedness bug in alua_rtpg()
MIPS: vdso: Invalid GIC access through VDSO
mips: disable branch profiling in boot/decompress.o
mips: always link byteswap helpers into decompressor
static_call: Fix static_call_text_reserved() vs __init
jump_label: Fix jump_label_text_reserved() vs __init
sched/uclamp: Ignore max aggregation if rq is idle
scsi: be2iscsi: Fix an error handling path in beiscsi_dev_probe()
arm64: dts: rockchip: Re-add regulator-always-on for vcc_sdio for rk3399-roc-pc
arm64: dts: rockchip: Re-add regulator-boot-on, regulator-always-on for vdd_gpu on rk3399-roc-pc
firmware: turris-mox-rwtm: show message about HWRNG registration
firmware: turris-mox-rwtm: fail probing when firmware does not support hwrng
firmware: turris-mox-rwtm: report failures better
firmware: turris-mox-rwtm: fix reply status decoding function
thermal/drivers/rcar_gen3_thermal: Fix coefficient calculations
ARM: dts: imx6q-dhcom: Add gpios pinctrl for i2c bus recovery
ARM: dts: imx6q-dhcom: Fix ethernet plugin detection problems
ARM: dts: imx6q-dhcom: Fix ethernet reset time properties
thermal/drivers/sprd: Add missing MODULE_DEVICE_TABLE
ARM: dts: am437x: align ti,pindir-d0-out-d1-in property with dt-shema
ARM: dts: am335x: align ti,pindir-d0-out-d1-in property with dt-shema
ARM: dts: dra7: Fix duplicate USB4 target module node
arm64: dts: allwinner: a64-sopine-baseboard: change RGMII mode to TXID
memory: fsl_ifc: fix leak of private memory on probe failure
memory: fsl_ifc: fix leak of IO mapping on probe failure
arm64: dts: ti: k3-j721e-main: Fix external refclk input to SERDES
arm64: dts: renesas: r8a779a0: Drop power-domains property from GIC node
reset: bail if try_module_get() fails
ARM: dts: BCM5301X: Fixup SPI binding
dt-bindings: i2c: at91: fix example for scl-gpios
firmware: arm_scmi: Reset Rx buffer to max size during async commands
firmware: tegra: Fix error return code in tegra210_bpmp_init()
arm64: dts: qcom: trogdor: Add no-hpd to DSI bridge node
ARM: dts: stm32: Rework LAN8710Ai PHY reset on DHCOM SoM
ARM: dts: stm32: Connect PHY IRQ line on DH STM32MP1 SoM
arm64: dts: renesas: r8a7796[01]: Fix OPP table entry voltages
arm64: dts: renesas: Add missing opp-suspend properties
arm64: dts: ti: j7200-main: Enable USB2 PHY RX sensitivity workaround
ARM: dts: r8a7779, marzen: Fix DU clock names
arm64: dts: renesas: v3msk: Fix memory size
rtc: fix snprintf() checking in is_rtc_hctosys()
ARM: dts: sun8i: h3: orangepi-plus: Fix ethernet phy-mode
memory: pl353: Fix error return code in pl353_smc_probe()
reset: brcmstb: Add missing MODULE_DEVICE_TABLE
memory: atmel-ebi: add missing of_node_put for loop iteration
memory: stm32-fmc2-ebi: add missing of_node_put for loop iteration
ARM: dts: exynos: fix PWM LED max brightness on Odroid XU4
ARM: dts: exynos: fix PWM LED max brightness on Odroid HC1
ARM: dts: exynos: fix PWM LED max brightness on Odroid XU/XU3
ARM: exynos: add missing of_node_put for loop iteration
reset: a10sr: add missing of_match_table reference
reset: RESET_INTEL_GW should depend on X86
reset: RESET_BRCMSTB_RESCAL should depend on ARCH_BRCMSTB
ARM: dts: gemini-rut1xx: remove duplicate ethernet node
hexagon: use common DISCARDS macro
hexagon: handle {,SOFT}IRQENTRY_TEXT in linker script
NFSv4/pNFS: Don't call _nfs4_pnfs_v3_ds_connect multiple times
NFSv4/pnfs: Fix layoutget behaviour after invalidation
NFSv4/pnfs: Fix the layout barrier update
vdpa/mlx5: Clear vq ready indication upon device reset
ALSA: isa: Fix error return code in snd_cmi8330_probe()
nfsd: Reduce contention for the nfsd_file nf_rwsem
nvme-tcp: can't set sk_user_data without write_lock
virtio_net: move tx vq operation under tx queue lock
vdpa/mlx5: Fix possible failure in umem size calculation
vdpa/mlx5: Fix umem sizes assignments on VQ create
PCI: tegra194: Fix tegra_pcie_ep_raise_msi_irq() ill-defined shift
pwm: imx1: Don't disable clocks at device remove time
PCI: intel-gw: Fix INTx enable
x86/fpu: Limit xstate copy size in xstateregs_set()
x86/fpu: Fix copy_xstate_to_kernel() gap handling
f2fs: fix to avoid adding tab before doc section
PCI: iproc: Support multi-MSI only on uniprocessor kernel
PCI: iproc: Fix multi-MSI base vector number allocation
ubifs: Set/Clear I_LINKABLE under i_lock for whiteout inode
nfs: fix acl memory leak of posix_acl_create()
SUNRPC: prevent port reuse on transports which don't request it.
watchdog: jz4740: Fix return value check in jz4740_wdt_probe()
watchdog: aspeed: fix hardware timeout calculation
ubifs: journal: Fix error return code in ubifs_jnl_write_inode()
ubifs: Fix off-by-one error
um: fix error return code in winch_tramp()
um: fix error return code in slip_open()
misc: alcor_pci: fix inverted branch condition
NFSv4: Fix an Oops in pnfs_mark_request_commit() when doing O_DIRECT
NFSv4: Initialise connection to the server in nfs4_alloc_client()
power: supply: rt5033_battery: Fix device tree enumeration
PCI/sysfs: Fix dsm_label_utf16s_to_utf8s() buffer overrun
remoteproc: k3-r5: Fix an error message
f2fs: compress: fix to disallow temp extension
f2fs: add MODULE_SOFTDEP to ensure crc32 is included in the initramfs
x86/signal: Detect and prevent an alternate signal stack overflow
NFSD: Fix TP_printk() format specifier in nfsd_clid_class
f2fs: atgc: fix to set default age threshold
virtio_console: Assure used length from device is limited
virtio_net: Fix error handling in virtnet_restore()
virtio-blk: Fix memory leak among suspend/resume procedure
PCI: rockchip: Register IRQ handlers after device and data are ready
ACPI: video: Add quirk for the Dell Vostro 3350
ACPI: AMBA: Fix resource name in /proc/iomem
pwm: tegra: Don't modify HW state in .remove callback
pwm: img: Fix PM reference leak in img_pwm_enable()
drm/amdkfd: fix sysfs kobj leak
power: supply: ab8500: add missing MODULE_DEVICE_TABLE
power: supply: charger-manager: add missing MODULE_DEVICE_TABLE
NFS: nfs_find_open_context() may only select open files
drm/gma500: Add the missed drm_gem_object_put() in psb_user_framebuffer_create()
ceph: remove bogus checks and WARN_ONs from ceph_set_page_dirty
orangefs: fix orangefs df output.
PCI: tegra: Add missing MODULE_DEVICE_TABLE
remoteproc: core: Fix cdev remove and rproc del
x86/fpu: Return proper error codes from user access functions
watchdog: iTCO_wdt: Account for rebooting on second timeout
watchdog: imx_sc_wdt: fix pretimeout
watchdog: Fix possible use-after-free by calling del_timer_sync()
watchdog: sc520_wdt: Fix possible use-after-free in wdt_turnoff()
watchdog: Fix possible use-after-free in wdt_startup()
PCI: pciehp: Ignore Link Down/Up caused by DPC
NFSv4: Fix delegation return in cases where we have to retry
PCI/P2PDMA: Avoid pci_get_slot(), which may sleep
ARM: 9087/1: kprobes: test-thumb: fix for LLVM_IAS=1
power: reset: gpio-poweroff: add missing MODULE_DEVICE_TABLE
power: supply: max17042: Do not enforce (incorrect) interrupt trigger type
PCI: hv: Fix a race condition when removing the device
power: supply: ab8500: Avoid NULL pointers
PCI: ftpci100: Rename macro name collision
pwm: spear: Don't modify HW state in .remove callback
power: supply: sc2731_charger: Add missing MODULE_DEVICE_TABLE
power: supply: sc27xx: Add missing MODULE_DEVICE_TABLE
kcov: add __no_sanitize_coverage to fix noinstr for all architectures
lib/decompress_unlz4.c: correctly handle zero-padding around initrds.
phy: intel: Fix for warnings due to EMMC clock 175Mhz change in FIP
i2c: core: Disable client irq on reboot/shutdown
intel_th: Wait until port is in reset before programming it
staging: rtl8723bs: fix macro value for 2.4Ghz only device
leds: turris-omnia: add missing MODULE_DEVICE_TABLE
ALSA: firewire-motu: fix detection for S/PDIF source on optical interface in v2 protocol
ALSA: usb-audio: scarlett2: Fix 6i6 Gen 2 line out descriptions
ALSA: hda: Add IRQ check for platform_get_irq()
backlight: lm3630a: Fix return code of .update_status() callback
ASoC: Intel: kbl_da7219_max98357a: shrink platform_id below 20 characters
powerpc/boot: Fixup device-tree on little endian
usb: gadget: hid: fix error return code in hid_bind()
usb: gadget: f_hid: fix endianness issue with descriptors
ALSA: usb-audio: scarlett2: Fix scarlett2_*_ctl_put() return values
ALSA: usb-audio: scarlett2: Fix data_mutex lock
ALSA: usb-audio: scarlett2: Fix 18i8 Gen 2 PCM Input count
ALSA: bebob: add support for ToneWeal FW66
Input: hideep - fix the uninitialized use in hideep_nvm_unlock()
s390/mem_detect: fix tprot() program check new psw handling
s390/mem_detect: fix diag260() program check new psw handling
s390/ipl_parm: fix program check new psw handling
s390/processor: always inline stap() and __load_psw_mask()
habanalabs: remove node from list before freeing the node
habanalabs/gaudi: set the correct cpu_id on MME2_QM failure
ASoC: soc-core: Fix the error return code in snd_soc_of_parse_audio_routing()
powerpc/mm/book3s64: Fix possible build error
gpio: pca953x: Add support for the On Semi pca9655
selftests/powerpc: Fix "no_handler" EBB selftest
ALSA: ppc: fix error return code in snd_pmac_probe()
scsi: storvsc: Correctly handle multiple flags in srb_status
gpio: zynq: Check return value of irq_get_irq_data
gpio: zynq: Check return value of pm_runtime_get_sync
ASoC: soc-pcm: fix the return value in dpcm_apply_symmetry()
iommu/arm-smmu: Fix arm_smmu_device refcount leak in address translation
iommu/arm-smmu: Fix arm_smmu_device refcount leak when arm_smmu_rpm_get fails
powerpc/ps3: Add dma_mask to ps3_dma_region
ALSA: sb: Fix potential double-free of CSP mixer elements
selftests: timers: rtcpie: skip test if default RTC device does not exist
s390: disable SSP when needed
s390/sclp_vt220: fix console name to match device
serial: tty: uartlite: fix console setup
fsi: Add missing MODULE_DEVICE_TABLE
ASoC: img: Fix PM reference leak in img_i2s_in_probe()
mfd: cpcap: Fix cpcap dmamask not set warnings
mfd: da9052/stmpe: Add and modify MODULE_DEVICE_TABLE
scsi: qedi: Fix cleanup session block/unblock use
scsi: qedi: Fix TMF session block/unblock use
scsi: qedi: Fix race during abort timeouts
scsi: qedi: Fix null ref during abort handling
scsi: iscsi: Fix shost->max_id use
scsi: iscsi: Fix conn use after free during resets
scsi: iscsi: Add iscsi_cls_conn refcount helpers
scsi: megaraid_sas: Handle missing interrupts while re-enabling IRQs
scsi: megaraid_sas: Early detection of VD deletion through RaidMap update
scsi: megaraid_sas: Fix resource leak in case of probe failure
fs/jfs: Fix missing error code in lmLogInit()
scsi: scsi_dh_alua: Check for negative result value
scsi: core: Fixup calling convention for scsi_mode_sense()
scsi: mpt3sas: Fix deadlock while cancelling the running firmware event
tty: serial: 8250: serial_cs: Fix a memory leak in error handling path
ALSA: ac97: fix PM reference leak in ac97_bus_remove()
scsi: core: Cap scsi_host cmd_per_lun at can_queue
scsi: lpfc: Fix crash when lpfc_sli4_hba_setup() fails to initialize the SGLs
scsi: lpfc: Fix "Unexpected timeout" error in direct attach topology
scsi: hisi_sas: Propagate errors in interrupt_init_v1_hw()
scsi: arcmsr: Fix doorbell status being updated late on ARC-1886
w1: ds2438: fixing bug that would always get page0
usb: common: usb-conn-gpio: fix NULL pointer dereference of charger
Revert "ALSA: bebob/oxfw: fix Kconfig entry for Mackie d.2 Pro"
ALSA: usx2y: Don't call free_pages_exact() with NULL address
ALSA: usx2y: Avoid camelCase
iio: magn: bmc150: Balance runtime pm + use pm_runtime_resume_and_get()
iio: gyro: fxa21002c: Balance runtime pm + use pm_runtime_resume_and_get().
partitions: msdos: fix one-byte get_unaligned()
ASoC: intel/boards: add missing MODULE_DEVICE_TABLE
misc: alcor_pci: fix null-ptr-deref when there is no PCI bridge
misc/libmasm/module: Fix two use after free in ibmasm_init_one
serial: fsl_lpuart: disable DMA for console and fix sysrq
tty: serial: fsl_lpuart: fix the potential risk of division or modulo by zero
rcu: Reject RCU_LOCKDEP_WARN() false positives
srcu: Fix broken node geometry after early ssp init
scsi: arcmsr: Fix the wrong CDB payload report to IOP
dmaengine: fsl-qdma: check dma_set_mask return value
ASoC: Intel: sof_sdw: add mutual exclusion between PCH DMIC and RT715
leds: tlc591xx: fix return value check in tlc591xx_probe()
net: bridge: multicast: fix MRD advertisement router port marking race
net: bridge: multicast: fix PIM hello router port marking race
Revert "drm/ast: Remove reference to struct drm_device.pdev"
drm/ingenic: Switch IPU plane to type OVERLAY
drm/ingenic: Fix non-OSD mode
drm/dp_mst: Add missing drm parameters to recently added call to drm_dbg_kms()
drm/dp_mst: Avoid to mess up payload table by ports in stale topology
drm/dp_mst: Do not set proposed vcpi directly
fbmem: Do not delete the mode that is still in use
cgroup: verify that source is a string
drm/i915/gt: Fix -EDEADLK handling regression
drm/i915/gtt: drop the page table optimisation
tracing: Do not reference char * as a string in histograms
scsi: zfcp: Report port fc_security as unknown early during remote cable pull
scsi: core: Fix bad pointer dereference when ehandler kthread is invalid
KVM: X86: Disable hardware breakpoints unconditionally before kvm_x86->run()
KVM: nSVM: Check the value written to MSR_VM_HSAVE_PA
KVM: x86/mmu: Do not apply HPA (memory encryption) mask to GPAs
KVM: x86: Use guest MAXPHYADDR from CPUID.0x8000_0008 iff TDP is enabled
KVM: mmio: Fix use-after-free Read in kvm_vm_ioctl_unregister_coalesced_mmio
cifs: handle reconnect of tcon when there is no cached dfs referral
certs: add 'x509_revocation_list' to gitignore
Revert "media: subdev: disallow ioctl for saa6588/davinci"
Linux 5.10.51
f2fs: fix to avoid racing on fsync_entry_slab by multi filesystem instances
ext4: fix memory leak in ext4_fill_super
smackfs: restrict bytes count in smk_set_cipso()
jfs: fix GPF in diFree
drm/ast: Remove reference to struct drm_device.pdev
pinctrl: mcp23s08: Fix missing unlock on error in mcp23s08_irq()
dm writecache: write at least 4k when committing
io_uring: fix clear IORING_SETUP_R_DISABLED in wrong function
media: uvcvideo: Fix pixel format change for Elgato Cam Link 4K
media: gspca/sunplus: fix zero-length control requests
media: gspca/sq905: fix control-request direction
media: zr364xx: fix memory leak in zr364xx_start_readpipe
media: dtv5100: fix control-request directions
media: subdev: disallow ioctl for saa6588/davinci
PCI: aardvark: Implement workaround for the readback value of VEND_ID
PCI: aardvark: Fix checking for PIO Non-posted Request
PCI: Leave Apple Thunderbolt controllers on for s2idle or standby
dm btree remove: assign new_root only when removal succeeds
dm writecache: flush origin device when writing and cache is full
dm zoned: check zone capacity
coresight: tmc-etf: Fix global-out-of-bounds in tmc_update_etf_buffer()
coresight: Propagate symlink failure
ipack/carriers/tpci200: Fix a double free in tpci200_pci_probe
tracing: Resize tgid_map to pid_max, not PID_MAX_DEFAULT
tracing: Simplify & fix saved_tgids logic
rq-qos: fix missed wake-ups in rq_qos_throttle try two
seq_buf: Fix overflow in seq_buf_putmem_hex()
extcon: intel-mrfld: Sync hardware and software state on init
selftests/lkdtm: Fix expected text for CR4 pinning
lkdtm/bugs: XFAIL UNALIGNED_LOAD_STORE_WRITE
nvmem: core: add a missing of_node_put
mfd: syscon: Free the allocated name field of struct regmap_config
power: supply: ab8500: Fix an old bug
ubifs: Fix races between xattr_{set|get} and listxattr operations
thermal/drivers/int340x/processor_thermal: Fix tcc setting
ipmi/watchdog: Stop watchdog timer when the current action is 'none'
qemu_fw_cfg: Make fw_cfg_rev_attr a proper kobj_attribute
i40e: fix PTP on 5Gb links
ASoC: tegra: Set driver_name=tegra for all machine drivers
fpga: stratix10-soc: Add missing fpga_mgr_free() call
clocksource/arm_arch_timer: Improve Allwinner A64 timer workaround
cpu/hotplug: Cure the cpusets trainwreck
arm64: tlb: fix the TTL value of tlb_get_level
ata: ahci_sunxi: Disable DIPM
mmc: core: Allow UHS-I voltage switch for SDSC cards if supported
mmc: core: clear flags before allowing to retune
mmc: sdhci: Fix warning message when accessing RPMB in HS400 mode
mmc: sdhci-acpi: Disable write protect detection on Toshiba Encore 2 WT8-B
drm/i915/display: Do not zero past infoframes.vsc
drm/nouveau: Don't set allow_fb_modifiers explicitly
drm/arm/malidp: Always list modifiers
drm/msm/mdp4: Fix modifier support enabling
drm/tegra: Don't set allow_fb_modifiers explicitly
drm/amd/display: Reject non-zero src_y and src_x for video planes
pinctrl/amd: Add device HID for new AMD GPIO controller
drm/amd/display: fix incorrrect valid irq check
drm/rockchip: dsi: remove extra component_del() call
drm/dp: Handle zeroed port counts in drm_dp_read_downstream_info()
drm/vc4: hdmi: Prevent clock unbalance
drm/vc4: crtc: Skip the TXP
drm/vc4: txp: Properly set the possible_crtcs mask
drm/radeon: Call radeon_suspend_kms() in radeon_pci_shutdown() for Loongson64
drm/radeon: Add the missed drm_gem_object_put() in radeon_user_framebuffer_create()
drm/amdgpu: enable sdma0 tmz for Raven/Renoir(V2)
drm/amdgpu: Update NV SIMD-per-CU to 2
powerpc/powernv/vas: Release reference to tgid during window close
powerpc/barrier: Avoid collision with clang's __lwsync macro
powerpc/mm: Fix lockup on kernel exec fault
scsi: iscsi: Fix iSCSI cls conn state
scsi: iscsi: Fix race condition between login and sync thread
io_uring: convert io_buffer_idr to XArray
io_uring: Convert personality_idr to XArray
io_uring: simplify io_remove_personalities()
mm,hwpoison: return -EBUSY when migration fails
loop: fix I/O error on fsync() in detached loop devices
arm64: dts: rockchip: Enable USB3 for rk3328 Rock64
arm64: dts: rockchip: add rk3328 dwc3 usb controller node
ath11k: unlock on error path in ath11k_mac_op_add_interface()
MIPS: MT extensions are not available on MIPS32r1
selftests/resctrl: Fix incorrect parsing of option "-t"
MIPS: set mips32r5 for virt extensions
MIPS: loongsoon64: Reserve memory below starting pfn to prevent Oops
sctp: add size validation when walking chunks
sctp: validate from_addr_param return
flow_offload: action should not be NULL when it is referenced
bpf: Fix false positive kmemleak report in bpf_ringbuf_area_alloc()
sched/fair: Ensure _sum and _avg values stay consistent
Bluetooth: btusb: fix bt fiwmare downloading failure issue for qca btsoc.
Bluetooth: mgmt: Fix the command returns garbage parameter value
Bluetooth: btusb: Add support USB ALT 3 for WBS
Bluetooth: L2CAP: Fix invalid access on ECRED Connection response
Bluetooth: L2CAP: Fix invalid access if ECRED Reconfigure fails
Bluetooth: btusb: Add a new QCA_ROME device (0cf3:e500)
Bluetooth: Shutdown controller after workqueues are flushed or cancelled
Bluetooth: Fix alt settings for incoming SCO with transparent coding format
Bluetooth: Fix the HCI to MGMT status conversion table
Bluetooth: btusb: Fixed too many in-token issue for Mediatek Chip.
RDMA/cma: Fix rdma_resolve_route() memory leak
net: ip: avoid OOM kills with large UDP sends over loopback
media, bpf: Do not copy more entries than user space requested
IB/isert: Align target max I/O size to initiator size
mac80211_hwsim: add concurrent channels scanning support over virtio
mac80211: consider per-CPU statistics if present
cfg80211: fix default HE tx bitrate mask in 2G band
wireless: wext-spy: Fix out-of-bounds warning
sfc: error code if SRIOV cannot be disabled
sfc: avoid double pci_remove of VFs
iwlwifi: pcie: fix context info freeing
iwlwifi: pcie: free IML DMA memory allocation
iwlwifi: mvm: fix error print when session protection ends
iwlwifi: mvm: don't change band on bound PHY contexts
RDMA/rxe: Don't overwrite errno from ib_umem_get()
vsock: notify server to shutdown when client has pending signal
atm: nicstar: register the interrupt handler in the right place
atm: nicstar: use 'dma_free_coherent' instead of 'kfree'
net: fec: add ndo_select_queue to fix TX bandwidth fluctuations
MIPS: add PMD table accounting into MIPS'pmd_alloc_one
rtl8xxxu: Fix device info for RTL8192EU devices
mt76: mt7915: fix IEEE80211_HE_PHY_CAP7_MAX_NC for station mode
drm/amdkfd: Walk through list with dqm lock hold
drm/amdgpu: fix bad address translation for sienna_cichlid
io_uring: fix false WARN_ONCE
net: sched: fix error return code in tcf_del_walker()
net: ipa: Add missing of_node_put() in ipa_firmware_load()
net: fix mistake path for netdev_features_strings
mt76: mt7615: fix fixed-rate tx status reporting
ice: mark PTYPE 2 as reserved
ice: fix incorrect payload indicator on PTYPE
bpf: Fix up register-based shifts in interpreter to silence KUBSAN
drm/amdkfd: Fix circular lock in nocpsch path
drm/amdkfd: fix circular locking on get_wave_state
cw1200: add missing MODULE_DEVICE_TABLE
wl1251: Fix possible buffer overflow in wl1251_cmd_scan
wlcore/wl12xx: Fix wl12xx get_mac error if device is in ELP
dm writecache: commit just one block, not a full page
xfrm: Fix error reporting in xfrm_state_construct.
drm/amd/display: Verify Gamma & Degamma LUT sizes in amdgpu_dm_atomic_check
r8169: avoid link-up interrupt issue on RTL8106e if user enables ASPM
selinux: use __GFP_NOWARN with GFP_NOWAIT in the AVC
fjes: check return value after calling platform_get_resource()
drm/amdkfd: use allowed domain for vmbo validation
net: sgi: ioc3-eth: check return value after calling platform_get_resource()
selftests: Clean forgotten resources as part of cleanup()
net: phy: realtek: add delay to fix RXC generation issue
drm/amd/display: Fix off-by-one error in DML
drm/amd/display: Set DISPCLK_MAX_ERRDET_CYCLES to 7
drm/amd/display: Release MST resources on switch from MST to SST
drm/amd/display: Update scaling settings on modeset
drm/amd/display: Fix DCN 3.01 DSCCLK validation
net: moxa: Use devm_platform_get_and_ioremap_resource()
net: micrel: check return value after calling platform_get_resource()
net: mvpp2: check return value after calling platform_get_resource()
net: bcmgenet: check return value after calling platform_get_resource()
net: mscc: ocelot: check return value after calling platform_get_resource()
virtio_net: Remove BUG() to avoid machine dead
ice: fix clang warning regarding deadcode.DeadStores
ice: set the value of global config lock timeout longer
pinctrl: mcp23s08: fix race condition in irq handler
net: bridge: mrp: Update ring transitions.
dm: Fix dm_accept_partial_bio() relative to zone management commands
dm writecache: don't split bios when overwriting contiguous cache content
dm space maps: don't reset space map allocation cursor when committing
RDMA/cxgb4: Fix missing error code in create_qp()
net: tcp better handling of reordering then loss cases
drm/amdgpu: remove unsafe optimization to drop preamble ib
drm/amd/display: Avoid HDCP over-read and corruption
MIPS: ingenic: Select CPU_SUPPORTS_CPUFREQ && MIPS_EXTERNAL_TIMER
MIPS: cpu-probe: Fix FPU detection on Ingenic JZ4760(B)
ipv6: use prandom_u32() for ID generation
virtio-net: Add validation for used length
drm: bridge: cdns-mhdp8546: Fix PM reference leak in
clk: tegra: Ensure that PLLU configuration is applied properly
clk: tegra: Fix refcounting of gate clocks
RDMA/rtrs: Change MAX_SESS_QUEUE_DEPTH
net: stmmac: the XPCS obscures a potential "PHY not found" error
drm: rockchip: add missing registers for RK3066
drm: rockchip: add missing registers for RK3188
net/mlx5: Fix lag port remapping logic
net/mlx5e: IPsec/rep_tc: Fix rep_tc_update_skb drops IPsec packet
clk: renesas: r8a77995: Add ZA2 clock
drm/bridge: cdns: Fix PM reference leak in cdns_dsi_transfer()
igb: fix assignment on big endian machines
igb: handle vlan types with checker enabled
e100: handle eeprom as little endian
drm/vc4: hdmi: Fix PM reference leak in vc4_hdmi_encoder_pre_crtc_co()
drm/vc4: Fix clock source for VEC PixelValve on BCM2711
udf: Fix NULL pointer dereference in udf_symlink function
drm/sched: Avoid data corruptions
drm/scheduler: Fix hang when sched_entity released
pinctrl: equilibrium: Add missing MODULE_DEVICE_TABLE
net/sched: cls_api: increase max_reclassify_loop
net: mdio: provide shim implementation of devm_of_mdiobus_register
drm/virtio: Fix double free on probe failure
reiserfs: add check for invalid 1st journal block
drm/bridge: lt9611: Add missing MODULE_DEVICE_TABLE
net: mdio: ipq8064: add regmap config to disable REGCACHE
drm/mediatek: Fix PM reference leak in mtk_crtc_ddp_hw_init()
net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT
atm: nicstar: Fix possible use-after-free in nicstar_cleanup()
mISDN: fix possible use-after-free in HFC_cleanup()
atm: iphase: fix possible use-after-free in ia_module_exit()
hugetlb: clear huge pte during flush function on mips platform
clk: renesas: rcar-usb2-clock-sel: Fix error handling in .probe()
drm/amd/display: fix use_max_lb flag for 420 pixel formats
net: pch_gbe: Use proper accessors to BE data in pch_ptp_match()
drm/bridge: nwl-dsi: Force a full modeset when crtc_state->active is changed to be true
drm/vc4: fix argument ordering in vc4_crtc_get_margins()
drm/amd/amdgpu/sriov disable all ip hw status by default
drm/amd/display: fix HDCP reset sequence on reinitialize
drm/ast: Fixed CVE for DP501
drm/zte: Don't select DRM_KMS_FB_HELPER
drm/mxsfb: Don't select DRM_KMS_FB_HELPER
ANDROID: GKI: fix up crc change in ip.h
Revert "Add a reference to ucounts for each cred"
Revert "cred: add missing return error code when set_cred_ucounts() failed"
Revert "Bluetooth: Fix Set Extended (Scan Response) Data"
Linux 5.10.50
powerpc/preempt: Don't touch the idle task's preempt_count during hotplug
iommu/dma: Fix compile warning in 32-bit builds
cred: add missing return error code when set_cred_ucounts() failed
s390: preempt: Fix preempt_count initialization
crypto: qce - fix error return code in qce_skcipher_async_req_handle()
scsi: core: Retry I/O for Notify (Enable Spinup) Required error
media: exynos4-is: remove a now unused integer
mmc: vub3000: fix control-request direction
mmc: block: Disable CMDQ on the ioctl path
io_uring: fix blocking inline submission
block: return the correct bvec when checking for gaps
erofs: fix error return code in erofs_read_superblock()
tpm: Replace WARN_ONCE() with dev_err_once() in tpm_tis_status()
fscrypt: fix derivation of SipHash keys on big endian CPUs
fscrypt: don't ignore minor_hash when hash is 0
mailbox: qcom-ipcc: Fix IPCC mbox channel exhaustion
scsi: target: cxgbit: Unmap DMA buffer before calling target_execute_cmd()
scsi: fc: Correct RHBA attributes length
exfat: handle wrong stream entry size in exfat_readdir()
csky: syscache: Fixup duplicate cache flush
csky: fix syscache.c fallthrough warning
perf llvm: Return -ENOMEM when asprintf() fails
selftests/vm/pkeys: refill shadow register after implicit kernel write
selftests/vm/pkeys: handle negative sys_pkey_alloc() return code
selftests/vm/pkeys: fix alloc_random_pkey() to make it really, really random
lib/math/rational.c: fix divide by zero
mm/z3fold: use release_z3fold_page_locked() to release locked z3fold page
mm/z3fold: fix potential memory leak in z3fold_destroy_pool()
include/linux/huge_mm.h: remove extern keyword
hugetlb: remove prep_compound_huge_page cleanup
mm/hugetlb: remove redundant check in preparing and destroying gigantic page
mm/hugetlb: use helper huge_page_order and pages_per_huge_page
mm/huge_memory.c: don't discard hugepage if other processes are mapping it
mm/huge_memory.c: add missing read-only THP checking in transparent_hugepage_enabled()
mm/huge_memory.c: remove dedicated macro HPAGE_CACHE_INDEX_MASK
mm/pmem: avoid inserting hugepage PTE entry with fsdax if hugepage support is disabled
vfio/pci: Handle concurrent vma faults
arm64: dts: marvell: armada-37xx: Fix reg for standard variant of UART
serial: mvebu-uart: correctly calculate minimal possible baudrate
serial: mvebu-uart: do not allow changing baudrate when uartclk is not available
ALSA: firewire-lib: Fix 'amdtp_domain_start()' when no AMDTP_OUT_STREAM stream is found
powerpc/papr_scm: Make 'perf_stats' invisible if perf-stats unavailable
powerpc/64s: Fix copy-paste data exposure into newly created tasks
powerpc/papr_scm: Properly handle UUID types and API
powerpc: Offline CPU in stop_this_cpu()
serial: 8250: 8250_omap: Fix possible interrupt storm on K3 SoCs
serial: 8250: 8250_omap: Disable RX interrupt after DMA enable
selftests/ftrace: fix event-no-pid on 1-core machine
leds: ktd2692: Fix an error handling path
leds: as3645a: Fix error return code in as3645a_parse_node()
ASoC: fsl_spdif: Fix unexpected interrupt after suspend
ASoC: Intel: sof_sdw: add SOF_RT715_DAI_ID_FIX for AlderLake
configfs: fix memleak in configfs_release_bin_file
ASoC: atmel-i2s: Fix usage of capture and playback at the same time
powerpc/powernv: Fix machine check reporting of async store errors
extcon: max8997: Add missing modalias string
extcon: sm5502: Drop invalid register write in sm5502_reg_data
phy: ti: dm816x: Fix the error handling path in 'dm816x_usb_phy_probe()
phy: uniphier-pcie: Fix updating phy parameters
soundwire: stream: Fix test for DP prepare complete
scsi: mpt3sas: Fix error return value in _scsih_expander_add()
habanalabs: Fix an error handling path in 'hl_pci_probe()'
mtd: rawnand: marvell: add missing clk_disable_unprepare() on error in marvell_nfc_resume()
of: Fix truncation of memory sizes on 32-bit platforms
ASoC: cs42l42: Correct definition of CS42L42_ADC_PDN_MASK
iio: prox: isl29501: Fix buffer alignment in iio_push_to_buffers_with_timestamp()
iio: light: vcnl4035: Fix buffer alignment in iio_push_to_buffers_with_timestamp()
serial: 8250: Actually allow UPF_MAGIC_MULTIPLIER baud rates
staging: mt7621-dts: fix pci address for PCI memory range
coresight: core: Fix use of uninitialized pointer
staging: rtl8712: fix memory leak in rtl871x_load_fw_cb
staging: rtl8712: fix error handling in r871xu_drv_init
staging: gdm724x: check for overflow in gdm_lte_netif_rx()
staging: gdm724x: check for buffer overflow in gdm_lte_multi_sdu_pkt()
ASoC: fsl_spdif: Fix error handler with pm_runtime_enable
iio: light: vcnl4000: Fix buffer alignment in iio_push_to_buffers_with_timestamp()
iio: magn: rm3100: Fix alignment of buffer in iio_push_to_buffers_with_timestamp()
iio: adc: ti-ads8688: Fix alignment of buffer in iio_push_to_buffers_with_timestamp()
iio: adc: mxs-lradc: Fix buffer alignment in iio_push_to_buffers_with_timestamp()
iio: adc: hx711: Fix buffer alignment in iio_push_to_buffers_with_timestamp()
iio: adc: at91-sama5d2: Fix buffer alignment in iio_push_to_buffers_with_timestamp()
thunderbolt: Bond lanes only when dual_link_port != NULL in alloc_dev_default()
eeprom: idt_89hpesx: Restore printing the unsupported fwnode name
eeprom: idt_89hpesx: Put fwnode in matching case during ->probe()
usb: dwc2: Don't reset the core after setting turnaround time
usb: gadget: f_fs: Fix setting of device and driver data cross-references
ASoC: mediatek: mtk-btcvsd: Fix an error handling path in 'mtk_btcvsd_snd_probe()'
ASoC: rt5682-sdw: set regcache_cache_only false before reading RT5682_DEVICE_ID
ASoC: rt5682: fix getting the wrong device id when the suspend_stress_test
ASoC: rt715-sdw: use first_hw_init flag on resume
ASoC: rt711-sdw: use first_hw_init flag on resume
ASoC: rt700-sdw: use first_hw_init flag on resume
ASoC: rt5682-sdw: use first_hw_init flag on resume
ASoC: rt1308-sdw: use first_hw_init flag on resume
ASoC: max98373-sdw: use first_hw_init flag on resume
iommu/dma: Fix IOVA reserve dma ranges
selftests: splice: Adjust for handler fallback removal
s390: appldata depends on PROC_SYSCTL
s390: enable HAVE_IOREMAP_PROT
s390/irq: select HAVE_IRQ_EXIT_ON_IRQ_STACK
iommu/amd: Fix extended features logging
visorbus: fix error return code in visorchipset_init()
fsi/sbefifo: Fix reset timeout
fsi/sbefifo: Clean up correct FIFO when receiving reset request from SBE
fsi: occ: Don't accept response from un-initialized OCC
fsi: scom: Reset the FSI2PIB engine for any error
fsi: core: Fix return of error values on failures
mfd: rn5t618: Fix IRQ trigger by changing it to level mode
mfd: mp2629: Select MFD_CORE to fix build error
scsi: iscsi: Flush block work before unblock
scsi: FlashPoint: Rename si_flags field
leds: lp50xx: Put fwnode in error case during ->probe()
leds: lm3697: Don't spam logs when probe is deferred
leds: lm3692x: Put fwnode in any case during ->probe()
leds: lm36274: Put fwnode in error case during ->probe()
leds: lm3532: select regmap I2C API
leds: class: The -ENOTSUPP should never be seen by user space
tty: nozomi: Fix the error handling path of 'nozomi_card_init()'
firmware: stratix10-svc: Fix a resource leak in an error handling path
char: pcmcia: error out if 'num_bytes_read' is greater than 4 in set_protocol()
staging: mmal-vchiq: Fix incorrect static vchiq_instance.
mtd: rawnand: arasan: Ensure proper configuration for the asserted target
mtd: partitions: redboot: seek fis-index-block in the right node
perf scripting python: Fix tuple_set_u64()
Input: hil_kbd - fix error return code in hil_dev_connect()
ASoC: rsnd: tidyup loop on rsnd_adg_clk_query()
backlight: lm3630a_bl: Put fwnode in error case during ->probe()
ASoC: hisilicon: fix missing clk_disable_unprepare() on error in hi6210_i2s_startup()
ASoC: rk3328: fix missing clk_disable_unprepare() on error in rk3328_platform_probe()
iio: potentiostat: lmp91000: Fix alignment of buffer in iio_push_to_buffers_with_timestamp()
iio: cros_ec_sensors: Fix alignment of buffer in iio_push_to_buffers_with_timestamp()
iio: chemical: atlas: Fix buffer alignment in iio_push_to_buffers_with_timestamp()
iio: light: tcs3472: Fix buffer alignment in iio_push_to_buffers_with_timestamp()
iio: light: tcs3414: Fix buffer alignment in iio_push_to_buffers_with_timestamp()
iio: light: isl29125: Fix buffer alignment in iio_push_to_buffers_with_timestamp()
iio: magn: bmc150: Fix buffer alignment in iio_push_to_buffers_with_timestamp()
iio: magn: hmc5843: Fix buffer alignment in iio_push_to_buffers_with_timestamp()
iio: prox: as3935: Fix buffer alignment in iio_push_to_buffers_with_timestamp()
iio: prox: pulsed-light: Fix buffer alignment in iio_push_to_buffers_with_timestamp()
iio: prox: srf08: Fix buffer alignment in iio_push_to_buffers_with_timestamp()
iio: humidity: am2315: Fix buffer alignment in iio_push_to_buffers_with_timestamp()
iio: gyro: bmg160: Fix buffer alignment in iio_push_to_buffers_with_timestamp()
iio: adc: vf610: Fix buffer alignment in iio_push_to_buffers_with_timestamp()
iio: adc: ti-ads1015: Fix buffer alignment in iio_push_to_buffers_with_timestamp()
iio: accel: stk8ba50: Fix buffer alignment in iio_push_to_buffers_with_timestamp()
iio: accel: stk8312: Fix buffer alignment in iio_push_to_buffers_with_timestamp()
iio: accel: mxc4005: Fix overread of data and alignment issue.
iio: accel: kxcjk-1013: Fix buffer alignment in iio_push_to_buffers_with_timestamp()
iio: accel: hid: Fix buffer alignment in iio_push_to_buffers_with_timestamp()
iio: accel: bma220: Fix buffer alignment in iio_push_to_buffers_with_timestamp()
iio: accel: bma180: Fix buffer alignment in iio_push_to_buffers_with_timestamp()
iio: adis16475: do not return ints in irq handlers
iio: adis16400: do not return ints in irq handlers
iio: adis_buffer: do not return ints in irq handlers
mwifiex: re-fix for unaligned accesses
tty: nozomi: Fix a resource leak in an error handling function
serial: 8250_omap: fix a timeout loop condition
serial: fsl_lpuart: remove RTSCTS handling from get_mctrl()
serial: fsl_lpuart: don't modify arbitrary data on lpuart32
rcu: Invoke rcu_spawn_core_kthreads() from rcu_spawn_gp_kthread()
ASoC: rt5682: Disable irq on shutdown
staging: fbtft: Don't spam logs when probe is deferred
staging: fbtft: Rectify GPIO handling
MIPS: Fix PKMAP with 32-bit MIPS huge page support
RDMA/core: Always release restrack object
RDMA/mlx5: Don't access NULL-cleared mpi pointer
net: tipc: fix FB_MTU eat two pages
net: sched: fix warning in tcindex_alloc_perfect_hash
net: lwtunnel: handle MTU calculation in forwading
writeback: fix obtain a reference to a freeing memcg css
clk: si5341: Update initialization magic
clk: si5341: Check for input clock presence and PLL lock on startup
clk: si5341: Avoid divide errors due to bogus register contents
clk: si5341: Wait for DEVICE_READY on startup
clk: qcom: clk-alpha-pll: fix CAL_L write in alpha_pll_fabia_prepare
clk: actions: Fix AHPPREDIV-H-AHB clock chain on Owl S500 SoC
clk: actions: Fix bisp_factor_table based clocks on Owl S500 SoC
clk: actions: Fix SD clocks factor table on Owl S500 SoC
clk: actions: Fix UART clock dividers on Owl S500 SoC
Bluetooth: Fix handling of HCI_LE_Advertising_Set_Terminated event
Bluetooth: Fix Set Extended (Scan Response) Data
Bluetooth: Fix not sending Set Extended Scan Response
Bluetooth: mgmt: Fix slab-out-of-bounds in tlv_data_is_valid
Revert "be2net: disable bh with spin_lock in be_process_mcc"
gve: Fix swapped vars when fetching max queues
RDMA/cma: Fix incorrect Packet Lifetime calculation
bpfilter: Specify the log level for the kmsg message
net: dsa: sja1105: fix NULL pointer dereference in sja1105_reload_cbs()
e1000e: Check the PCIm state
ipv6: fix out-of-bound access in ip6_parse_tlv()
net: atlantic: fix the macsec key length
net: phy: mscc: fix macsec key length
net: macsec: fix the length used to copy the key for offloading
RDMA/cma: Protect RMW with qp_mutex
ibmvnic: free tx_pool if tso_pool alloc fails
ibmvnic: set ltb->buff to NULL after freeing
Revert "ibmvnic: remove duplicate napi_schedule call in open function"
i40e: Fix missing rtnl locking when setting up pf switch
i40e: Fix autoneg disabling for non-10GBaseT links
i40e: Fix error handling in i40e_vsi_open
bpf: Do not change gso_size during bpf_skb_change_proto()
can: j1939: j1939_sk_setsockopt(): prevent allocation of j1939 filter for optlen == 0
ipv6: exthdrs: do not blindly use init_net
net: bcmgenet: Fix attaching to PYH failed on RPi 4B
mac80211: remove iwlwifi specific workaround NDPs of null_response
drm/msm/dpu: Fix error return code in dpu_mdss_init()
drm/msm: Fix error return code in msm_drm_init()
bpf: Fix null ptr deref with mixed tail calls and subprogs
ieee802154: hwsim: avoid possible crash in hwsim_del_edge_nl()
ieee802154: hwsim: Fix memory leak in hwsim_add_one
tc-testing: fix list handling
net: ti: am65-cpsw-nuss: Fix crash when changing number of TX queues
net/ipv4: swap flow ports when validating source
ip6_tunnel: fix GRE6 segmentation
vxlan: add missing rcu_read_lock() in neigh_reduce()
rtw88: 8822c: fix lc calibration timing
iwlwifi: increase PNVM load timeout
xfrm: Fix xfrm offload fallback fail case
pkt_sched: sch_qfq: fix qfq_change_class() error path
netfilter: nf_tables_offload: check FLOW_DISSECTOR_KEY_BASIC in VLAN transfer logic
tls: prevent oversized sendfile() hangs by ignoring MSG_MORE
net: sched: add barrier to ensure correct ordering for lockless qdisc
vrf: do not push non-ND strict packets with a source LLA through packet taps again
net: ethernet: ezchip: fix error handling
net: ethernet: ezchip: fix UAF in nps_enet_remove
net: ethernet: aeroflex: fix UAF in greth_of_remove
mt76: mt7615: fix NULL pointer dereference in tx_prepare_skb()
mt76: fix possible NULL pointer dereference in mt76_tx
samples/bpf: Fix the error return code of xdp_redirect's main()
samples/bpf: Fix Segmentation fault for xdp_redirect command
RDMA/rtrs-srv: Set minimal max_send_wr and max_recv_wr
bpf: Fix libelf endian handling in resolv_btfids
xsk: Fix broken Tx ring validation
xsk: Fix missing validation for skb and unaligned mode
selftests/bpf: Whitelist test_progs.h from .gitignore
RDMA/rxe: Fix qp reference counting for atomic ops
netfilter: nft_tproxy: restrict support to TCP and UDP transport protocols
netfilter: nft_osf: check for TCP packet before further processing
netfilter: nft_exthdr: check for IPv6 packet before further processing
RDMA/mlx5: Don't add slave port to unaffiliated list
netlabel: Fix memory leak in netlbl_mgmt_add_common
ath11k: send beacon template after vdev_start/restart during csa
ath10k: Fix an error code in ath10k_add_interface()
ath11k: Fix an error handling path in ath11k_core_fetch_board_data_api_n()
cw1200: Revert unnecessary patches that fix unreal use-after-free bugs
brcmsmac: mac80211_if: Fix a resource leak in an error handling path
brcmfmac: Fix a double-free in brcmf_sdio_bus_reset
brcmfmac: correctly report average RSSI in station info
brcmfmac: fix setting of station info chains bitmask
ssb: Fix error return code in ssb_bus_scan()
wcn36xx: Move hal_buf allocation to devm_kmalloc in probe
clk: imx8mq: remove SYS PLL 1/2 clock gates
ieee802154: hwsim: Fix possible memory leak in hwsim_subscribe_all_others
wireless: carl9170: fix LEDS build errors & warnings
ath10k: add missing error return code in ath10k_pci_probe()
ath10k: go to path err_unsupported when chip id is not supported
tools/bpftool: Fix error return code in do_batch()
drm: qxl: ensure surf.data is ininitialized
clk: vc5: fix output disabling when enabling a FOD
drm/vc4: hdmi: Fix error path of hpd-gpios
drm/pl111: Actually fix CONFIG_VEXPRESS_CONFIG depends
RDMA/rxe: Fix failure during driver load
drm/pl111: depend on CONFIG_VEXPRESS_CONFIG
RDMA/core: Sanitize WQ state received from the userspace
net/sched: act_vlan: Fix modify to allow 0
xfrm: remove the fragment check for ipv6 beet mode
clk: tegra30: Use 300MHz for video decoder by default
ehea: fix error return code in ehea_restart_qps()
RDMA/rtrs-clt: Fix memory leak of not-freed sess->stats and stats->pcpu_stats
RDMA/rtrs-clt: Check if the queue_depth has changed during a reconnection
RDMA/rtrs-srv: Fix memory leak when having multiple sessions
RDMA/rtrs-srv: Fix memory leak of unfreed rtrs_srv_stats object
RDMA/rtrs: Do not reset hb_missed_max after re-connection
RDMA/rtrs-clt: Check state of the rtrs_clt_sess before reading its stats
RDMA/srp: Fix a recently introduced memory leak
mptcp: generate subflow hmac after mptcp_finish_join()
mptcp: fix pr_debug in mptcp_token_new_connect
drm/rockchip: cdn-dp: fix sign extension on an int multiply for a u64 result
drm/rockchip: lvds: Fix an error handling path
drm/rockchip: dsi: move all lane config except LCDC mux to bind()
drm/rockchip: cdn-dp-core: add missing clk_disable_unprepare() on error in cdn_dp_grf_write()
drm: rockchip: set alpha_en to 0 if it is not used
net: ftgmac100: add missing error return code in ftgmac100_probe()
clk: meson: g12a: fix gp0 and hifi ranges
net: qrtr: ns: Fix error return code in qrtr_ns_init()
drm/vmwgfx: Fix cpu updates of coherent multisample surfaces
drm/vmwgfx: Mark a surface gpu-dirty after the SVGA3dCmdDXGenMips command
pinctrl: renesas: r8a77990: JTAG pins do not have pull-down capabilities
pinctrl: renesas: r8a7796: Add missing bias for PRESET# pin
net: pch_gbe: Propagate error from devm_gpio_request_one()
net: mvpp2: Put fwnode in error case during ->probe()
video: fbdev: imxfb: Fix an error message
drm/ast: Fix missing conversions to managed API
drm/amd/dc: Fix a missing check bug in dm_dp_mst_detect()
drm/bridge: Fix the stop condition of drm_bridge_chain_pre_enable()
drm/bridge/sii8620: fix dependency on extcon
xfrm: xfrm_state_mtu should return at least 1280 for ipv6
mm/page_alloc: fix counting of managed_pages
mm: page_alloc: refactor setup_per_zone_lowmem_reserve()
mm: memcg/slab: properly set up gfp flags for objcg pointer array
mm/shmem: fix shmem_swapin() race with swapoff
swap: fix do_swap_page() race with swapoff
mm/debug_vm_pgtable: ensure THP availability via has_transparent_hugepage()
mm/debug_vm_pgtable/basic: iterate over entire protection_map[]
mm/debug_vm_pgtable/basic: add validation for dirtiness after write protect
dax: fix ENOMEM handling in grab_mapping_entry()
ocfs2: fix snprintf() checking
blk-mq: update hctx->dispatch_busy in case of real scheduler
cpufreq: Make cpufreq_online() call driver->offline() on errors
ACPI: bgrt: Fix CFI violation
ACPI: Use DEVICE_ATTR_<RW|RO|WO> macros
blk-wbt: make sure throttle is enabled properly
blk-wbt: introduce a new disable state to prevent false positive by rwb_enabled()
ACPI: APEI: fix synchronous external aborts in user-mode
extcon: extcon-max8997: Fix IRQ freeing at error path
clocksource/drivers/timer-ti-dm: Save and restore timer TIOCP_CFG
mark pstore-blk as broken
ACPI: sysfs: Fix a buffer overrun problem with description_show()
nvme-pci: look for StorageD3Enable on companion ACPI device instead
block: avoid double io accounting for flush request
ACPI: PM / fan: Put fan device IDs into separate header file
PM / devfreq: Add missing error code in devfreq_add_device()
media: video-mux: Skip dangling endpoints
media: v4l2-async: Clean v4l2_async_notifier_add_fwnode_remote_subdev
psi: Fix race between psi_trigger_create/destroy
crypto: nx - Fix RCU warning in nx842_OF_upd_status
spi: spi-sun6i: Fix chipselect/clock bug
lockdep/selftests: Fix selftests vs PROVE_RAW_LOCK_NESTING
lockdep: Fix wait-type for empty stack
sched/uclamp: Fix uclamp_tg_restrict()
sched/rt: Fix Deadline utilization tracking during policy change
sched/rt: Fix RT utilization tracking during policy change
x86/sev: Split up runtime #VC handler for correct state tracking
x86/sev: Make sure IRQs are disabled while GHCB is active
btrfs: clear log tree recovering status if starting transaction fails
regulator: hi655x: Fix pass wrong pointer to config.driver_data
KVM: arm64: Don't zero the cycle count register when PMCR_EL0.P is set
perf/arm-cmn: Fix invalid pointer when access dtc object sharing the same IRQ number
KVM: x86/mmu: Fix return value in tdp_mmu_map_handle_target_level()
KVM: nVMX: Don't clobber nested MMU's A/D status on EPTP switch
KVM: nVMX: Ensure 64-bit shift when checking VMFUNC bitmap
KVM: nVMX: Sync all PGDs on nested transition with shadow paging
hwmon: (max31790) Fix fan speed reporting for fan7..12
hwmon: (max31722) Remove non-standard ACPI device IDs
hwmon: (lm70) Revert "hwmon: (lm70) Add support for ACPI"
hwmon: (lm70) Use device_get_match_data()
media: s5p-g2d: Fix a memory leak on ctx->fh.m2m_ctx
media: subdev: remove VIDIOC_DQEVENT_TIME32 handling
arm64/mm: Fix ttbr0 values stored in struct thread_info for software-pan
arm64: consistently use reserved_pg_dir
mmc: usdhi6rol0: fix error return code in usdhi6_probe()
crypto: sm2 - fix a memory leak in sm2
crypto: sm2 - remove unnecessary reset operations
crypto: x86/curve25519 - fix cpu feature checking logic in mod_exit
crypto: omap-sham - Fix PM reference leak in omap sham ops
crypto: nitrox - fix unchecked variable in nitrox_register_interrupts
regulator: fan53880: Fix vsel_mask setting for FAN53880_BUCK
media: siano: Fix out-of-bounds warnings in smscore_load_firmware_family2()
m68k: atari: Fix ATARI_KBD_CORE kconfig unmet dependency warning
media: gspca/gl860: fix zero-length control requests
media: tc358743: Fix error return code in tc358743_probe_of()
media: au0828: fix a NULL vs IS_ERR() check
media: exynos4-is: Fix a use after free in isp_video_release
media: rkvdec: Fix .buf_prepare
locking/lockdep: Reduce LOCKDEP dependency list
pata_ep93xx: fix deferred probing
media: rc: i2c: Fix an error message
crypto: ccp - Fix a resource leak in an error handling path
crypto: sa2ul - Fix pm_runtime enable in sa_ul_probe()
crypto: sa2ul - Fix leaks on failure paths with sa_dma_init()
x86/elf: Use _BITUL() macro in UAPI headers
evm: fix writing <securityfs>/evm overflow
pata_octeon_cf: avoid WARN_ON() in ata_host_activate()
kbuild: Fix objtool dependency for 'OBJECT_FILES_NON_STANDARD_<obj> := n'
sched/uclamp: Fix locking around cpu_util_update_eff()
sched/uclamp: Fix wrong implementation of cpu.uclamp.min
media: I2C: change 'RST' to "RSET" to fix multiple build errors
pata_rb532_cf: fix deferred probing
sata_highbank: fix deferred probing
crypto: ux500 - Fix error return code in hash_hw_final()
crypto: ixp4xx - update IV after requests
crypto: ixp4xx - dma_unmap the correct address
media: hantro: do a PM resume earlier
media: s5p_cec: decrement usage count if disabled
media: venus: Rework error fail recover logic
spi: Avoid undefined behaviour when counting unused native CSs
spi: Allow to have all native CSs in use along with GPIOs
writeback, cgroup: increment isw_nr_in_flight before grabbing an inode
ia64: mca_drv: fix incorrect array size calculation
kthread_worker: fix return value when kthread_mod_delayed_work() races with kthread_cancel_delayed_work_sync()
block: fix discard request merge
mailbox: qcom: Use PLATFORM_DEVID_AUTO to register platform device
cifs: fix missing spinlock around update to ses->status
HID: wacom: Correct base usage for capacitive ExpressKey status bits
ACPI: tables: Add custom DSDT file as makefile prerequisite
tpm_tis_spi: add missing SPI device ID entries
clocksource: Check per-CPU clock synchronization when marked unstable
clocksource: Retry clock read if long delays detected
ACPI: EC: trust DSDT GPE for certain HP laptop
cifs: improve fallocate emulation
PCI: hv: Add check for hyperv_initialized in init_hv_pci_drv()
EDAC/Intel: Do not load EDAC driver when running as a guest
nvmet-fc: do not check for invalid target port in nvmet_fc_handle_fcp_rqst()
nvme-pci: fix var. type for increasing cq_head
platform/x86: toshiba_acpi: Fix missing error code in toshiba_acpi_setup_keyboard()
platform/x86: asus-nb-wmi: Revert "add support for ASUS ROG Zephyrus G14 and G15"
platform/x86: asus-nb-wmi: Revert "Drop duplicate DMI quirk structures"
block: fix race between adding/removing rq qos and normal IO
ACPI: resources: Add checks for ACPI IRQ override
ACPI: bus: Call kobject_put() in acpi_init() error path
ACPICA: Fix memory leak caused by _CID repair function
fs: dlm: fix memory leak when fenced
drivers: hv: Fix missing error code in vmbus_connect()
open: don't silently ignore unknown O-flags in openat2()
random32: Fix implicit truncation warning in prandom_seed_state()
fs: dlm: cancel work sync othercon
blk-mq: clear stale request in tags->rq[] before freeing one request pool
blk-mq: grab rq->refcount before calling ->fn in blk_mq_tagset_busy_iter
block_dump: remove block_dump feature in mark_inode_dirty()
ACPI: EC: Make more Asus laptops use ECDT _GPE
platform/x86: touchscreen_dmi: Add info for the Goodix GT912 panel of TM800A550L tablets
platform/x86: touchscreen_dmi: Add an extra entry for the upside down Goodix touchscreen on Teclast X89 tablets
Input: goodix - platform/x86: touchscreen_dmi - Move upside down quirks to touchscreen_dmi.c
lib: vsprintf: Fix handling of number field widths in vsscanf
hv_utils: Fix passing zero to 'PTR_ERR' warning
ACPI: processor idle: Fix up C-state latency if not ordered
EDAC/ti: Add missing MODULE_DEVICE_TABLE
HID: do not use down_interruptible() when unbinding devices
ACPI: video: use native backlight for GA401/GA502/GA503
media: Fix Media Controller API config checks
regulator: da9052: Ensure enough delay time for .set_voltage_time_sel
regulator: mt6358: Fix vdram2 .vsel_mask
KVM: s390: get rid of register asm usage
lockding/lockdep: Avoid to find wrong lock dep path in check_irq_usage()
locking/lockdep: Fix the dep path printing for backwards BFS
btrfs: disable build on platforms having page size 256K
btrfs: don't clear page extent mapped if we're not invalidating the full page
btrfs: sysfs: fix format string for some discard stats
btrfs: abort transaction if we fail to update the delayed inode
btrfs: fix error handling in __btrfs_update_delayed_inode
KVM: PPC: Book3S HV: Fix TLB management on SMT8 POWER9 and POWER10 processors
drivers/perf: fix the missed ida_simple_remove() in ddr_perf_probe()
hwmon: (max31790) Fix pwmX_enable attributes
hwmon: (max31790) Report correct current pwm duty cycles
media: imx-csi: Skip first few frames from a BT.656 source
media: siano: fix device register error path
media: dvb_net: avoid speculation from net slot
crypto: shash - avoid comparing pointers to exported functions under CFI
spi: meson-spicc: fix memory leak in meson_spicc_probe
spi: meson-spicc: fix a wrong goto jump for avoiding memory leak.
mmc: via-sdmmc: add a check against NULL pointer dereference
mmc: sdhci-sprd: use sdhci_sprd_writew
memstick: rtsx_usb_ms: fix UAF
media: dvd_usb: memory leak in cinergyt2_fe_attach
Makefile: fix GDB warning with CONFIG_RELR
crypto: hisilicon/sec - fixup 3des minimum key size declaration
media: st-hva: Fix potential NULL pointer dereferences
media: bt8xx: Fix a missing check bug in bt878_probe
media: v4l2-core: Avoid the dangling pointer in v4l2_fh_release
media: cedrus: Fix .buf_prepare
media: hantro: Fix .buf_prepare
media: em28xx: Fix possible memory leak of em28xx struct
media: bt878: do not schedule tasklet when it is not setup
media: i2c: ov2659: Use clk_{prepare_enable,disable_unprepare}() to set xvclk on/off
sched/fair: Fix ascii art by relpacing tabs
arm64: perf: Convert snprintf to sysfs_emit
crypto: qce: skcipher: Fix incorrect sg count for dma transfers
crypto: qat - remove unused macro in FW loader
crypto: qat - check return code of qat_hal_rd_rel_reg()
media: imx: imx7_mipi_csis: Fix logging of only error event counters
media: pvrusb2: fix warning in pvr2_i2c_core_done
media: hevc: Fix dependent slice segment flags
media: cobalt: fix race condition in setting HPD
media: cpia2: fix memory leak in cpia2_usb_probe
media: sti: fix obj-$(config) targets
crypto: nx - add missing MODULE_DEVICE_TABLE
hwrng: exynos - Fix runtime PM imbalance on error
sched/core: Initialize the idle task with preemption disabled
regulator: uniphier: Add missing MODULE_DEVICE_TABLE
spi: omap-100k: Fix the length judgment problem
spi: spi-topcliff-pch: Fix potential double free in pch_spi_process_messages()
spi: spi-loopback-test: Fix 'tx_buf' might be 'rx_buf'
media: exynos-gsc: fix pm_runtime_get_sync() usage count
media: exynos4-is: fix pm_runtime_get_sync() usage count
media: sti/bdisp: fix pm_runtime_get_sync() usage count
media: sunxi: fix pm_runtime_get_sync() usage count
media: s5p-jpeg: fix pm_runtime_get_sync() usage count
media: mtk-vcodec: fix PM runtime get logic
media: sh_vou: fix pm_runtime_get_sync() usage count
media: am437x: fix pm_runtime_get_sync() usage count
media: s5p: fix pm_runtime_get_sync() usage count
media: mdk-mdp: fix pm_runtime_get_sync() usage count
media: marvel-ccic: fix some issues when getting pm_runtime
staging: media: rkvdec: fix pm_runtime_get_sync() usage count
Add a reference to ucounts for each cred
spi: Make of_register_spi_device also set the fwnode
thermal/cpufreq_cooling: Update offline CPUs per-cpu thermal_pressure
fuse: reject internal errno
fuse: check connected before queueing on fpq->io
fuse: ignore PG_workingset after stealing
fuse: Fix infinite loop in sget_fc()
fuse: Fix crash if superblock of submount gets killed early
fuse: Fix crash in fuse_dentry_automount() error path
evm: Refuse EVM_ALLOW_METADATA_WRITES only if an HMAC key is loaded
evm: Execute evm_inode_init_security() only when an HMAC key is loaded
loop: Fix missing discard support when using LOOP_CONFIGURE
powerpc/stacktrace: Fix spurious "stale" traces in raise_backtrace_ipi()
seq_buf: Make trace_seq_putmem_hex() support data longer than 8
tracepoint: Add tracepoint_probe_register_may_exist() for BPF tracing
tracing/histograms: Fix parsing of "sym-offset" modifier
rsi: fix AP mode with WPA failure due to encrypted EAPOL
rsi: Assign beacon rate settings to the correct rate_info descriptor field
ssb: sdio: Don't overwrite const buffer if block_write fails
ath9k: Fix kernel NULL pointer dereference during ath_reset_internal()
serial_cs: remove wrong GLOBETROTTER.cis entry
serial_cs: Add Option International GSM-Ready 56K/ISDN modem
serial: sh-sci: Stop dmaengine transfer in sci_stop_tx()
serial: mvebu-uart: fix calculation of clock divisor
iio: accel: bma180: Fix BMA25x bandwidth register values
iio: ltr501: ltr501_read_ps(): add missing endianness conversion
iio: ltr501: ltr559: fix initialization of LTR501_ALS_CONTR
iio: ltr501: mark register holding upper 8 bits of ALS_DATA{0,1} and PS_DATA as volatile, too
iio: light: tcs3472: do not free unallocated IRQ
iio: frequency: adf4350: disable reg and clk on error in adf4350_probe()
rtc: stm32: Fix unbalanced clk_disable_unprepare() on probe error path
clk: agilex/stratix10: fix bypass representation
clk: agilex/stratix10: remove noc_clk
clk: agilex/stratix10/n5x: fix how the bypass_reg is handled
f2fs: Prevent swap file in LFS mode
s390: mm: Fix secure storage access exception handling
s390/cio: dont call css_wait_for_slow_path() inside a lock
KVM: x86/mmu: Use MMU's role to detect CR4.SMEP value in nested NPT walk
KVM: x86/mmu: Treat NX as used (not reserved) for all !TDP shadow MMUs
KVM: PPC: Book3S HV: Workaround high stack usage with clang
KVM: nVMX: Handle split-lock #AC exceptions that happen in L2
perf/smmuv3: Don't trample existing events with global filter
mm/gup: fix try_grab_compound_head() race with split_huge_page()
bus: mhi: Wait for M2 state during system resume
SUNRPC: Should wake up the privileged task firstly.
SUNRPC: Fix the batch tasks count wraparound.
mac80211: remove iwlwifi specific workaround that broke sta NDP tx
can: peak_pciefd: pucan_handle_status(): fix a potential starvation issue in TX path
can: j1939: j1939_sk_init(): set SOCK_RCU_FREE to call sk_destruct() after RCU is done
can: isotp: isotp_release(): omit unintended hrtimer restart on socket release
can: gw: synchronize rcu operations before removing gw job entry
can: bcm: delay release of struct bcm_op after synchronize_rcu()
ext4: use ext4_grp_locked_error in mb_find_extent
ext4: fix avefreec in find_group_orlov
ext4: remove check for zero nr_to_scan in ext4_es_scan()
ext4: correct the cache_nr in tracepoint ext4_es_shrink_exit
ext4: return error code when ext4_fill_flex_info() fails
ext4: fix overflow in ext4_iomap_alloc()
ext4: fix kernel infoleak via ext4_extent_header
ext4: cleanup in-core orphan list if ext4_truncate() failed to get a transaction handle
btrfs: clear defrag status of a root if starting transaction fails
btrfs: compression: don't try to compress if we don't have enough pages
btrfs: send: fix invalid path for unlink operations after parent orphanization
ARM: dts: at91: sama5d4: fix pinctrl muxing
ARM: dts: ux500: Fix LED probing
arm_pmu: Fix write counter incorrect in ARMv7 big-endian mode
crypto: ccp - Annotate SEV Firmware file names
crypto: nx - Fix memcpy() over-reading in nonce
Input: joydev - prevent use of not validated data in JSIOCSBTNMAP ioctl
iov_iter_fault_in_readable() should do nothing in xarray case
copy_page_to_iter(): fix ITER_DISCARD case
selftests/lkdtm: Avoid needing explicit sub-shell
ntfs: fix validity check for file name attribute
gfs2: Fix error handling in init_statfs
gfs2: Fix underflow in gfs2_page_mkwrite
xhci: solve a double free problem while doing s4
usb: typec: Add the missed altmode_id_remove() in typec_register_altmode()
usb: dwc3: Fix debugfs creation flow
USB: cdc-acm: blacklist Heimann USB Appset device
usb: renesas-xhci: Fix handling of unknown ROM state
usb: gadget: eem: fix echo command packet response issue
net: can: ems_usb: fix use-after-free in ems_usb_disconnect()
Input: usbtouchscreen - fix control-request directions
media: dvb-usb: fix wrong definition
ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 830 G8 Notebook PC
ALSA: hda/realtek: Apply LED fixup for HP Dragonfly G1, too
ALSA: hda/realtek: Fix bass speaker DAC mapping for Asus UM431D
ALSA: hda/realtek: Improve fixup for HP Spectre x360 15-df0xxx
ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook x360 830 G8
ALSA: hda/realtek: Add another ALC236 variant support
ALSA: hda/realtek: fix mute/micmute LEDs for HP ProBook 630 G8
ALSA: hda/realtek: fix mute/micmute LEDs for HP ProBook 445 G8
ALSA: hda/realtek: fix mute/micmute LEDs for HP ProBook 450 G8
ALSA: intel8x0: Fix breakage at ac97 clock measurement
ALSA: usb-audio: scarlett2: Fix wrong resume call
ALSA: firewire-motu: fix stream format for MOTU 8pre FireWire
ALSA: usb-audio: Fix OOB access at proc output
ALSA: usb-audio: fix rate on Ozone Z90 USB headset
Bluetooth: Remove spurious error message
Bluetooth: btqca: Don't modify firmware contents in-place
Bluetooth: hci_qca: fix potential GPF
Linux 5.10.49
xen/events: reset active flag for lateeoi events later
Hexagon: change jumps to must-extend in futex_atomic_*
Hexagon: add target builtins to kernel
Hexagon: fix build errors
media: uvcvideo: Support devices that report an OT as an entity source
KVM: PPC: Book3S HV: Save and restore FSCR in the P9 path
Linux 5.10.48
Revert "KVM: x86/mmu: Drop kvm_mmu_extended_role.cr4_la57 hack"
RDMA/mlx5: Block FDB rules when not in switchdev mode
gpio: AMD8111 and TQMX86 require HAS_IOPORT_MAP
drm/nouveau: fix dma_address check for CPU/GPU sync
gpio: mxc: Fix disabled interrupt wake-up support
scsi: sr: Return appropriate error code when disk is ejected
ANDROID: ABI: update android12-5.10-lts ABI for 7/2 KMI update
ANDROID: ABI: hikey960_gki.fragment: Add cfg80211 and mac80211 as modules
ANDROID: ABI: gki_defconfig: Make cfg80211 and mac80211 modules
Revert "ANDROID: GKI: Enable some necessary CFG80211 configs for WIFI"
Linux 5.10.47
integrity: Load mokx variables into the blacklist keyring
certs: Add ability to preload revocation certs
certs: Move load_system_certificate_list to a common function
certs: Add EFI_CERT_X509_GUID support for dbx entries
Revert "drm: add a locked version of drm_is_current_master"
netfs: fix test for whether we can skip read when writing beyond EOF
swiotlb: manipulate orig_addr when tlb_addr has offset
KVM: SVM: Call SEV Guest Decommission if ASID binding fails
mm, futex: fix shared futex pgoff on shmem huge page
mm/thp: another PVMW_SYNC fix in page_vma_mapped_walk()
mm/thp: fix page_vma_mapped_walk() if THP mapped by ptes
mm: page_vma_mapped_walk(): get vma_address_end() earlier
mm: page_vma_mapped_walk(): use goto instead of while (1)
mm: page_vma_mapped_walk(): add a level of indentation
mm: page_vma_mapped_walk(): crossing page table boundary
mm: page_vma_mapped_walk(): prettify PVMW_MIGRATION block
mm: page_vma_mapped_walk(): use pmde for *pvmw->pmd
mm: page_vma_mapped_walk(): settle PageHuge on entry
mm: page_vma_mapped_walk(): use page for pvmw->page
mm: thp: replace DEBUG_VM BUG with VM_WARN when unmap fails for split
mm/thp: unmap_mapping_page() to fix THP truncate_cleanup_page()
mm/thp: fix page_address_in_vma() on file THP tails
mm/thp: fix vma_address() if virtual address below file offset
mm/thp: try_to_unmap() use TTU_SYNC for safe splitting
mm/thp: make is_huge_zero_pmd() safe and quicker
mm/thp: fix __split_huge_pmd_locked() on shmem migration entry
mm, thp: use head page in __migration_entry_wait()
mm/rmap: use page_not_mapped in try_to_unmap()
mm/rmap: remove unneeded semicolon in page_not_mapped()
mm: add VM_WARN_ON_ONCE_PAGE() macro
x86/fpu: Make init_fpstate correct with optimized XSAVE
x86/fpu: Preserve supervisor states in sanitize_restored_user_xstate()
kthread: prevent deadlock when kthread_mod_delayed_work() races with kthread_cancel_delayed_work_sync()
kthread_worker: split code for canceling the delayed work timer
ceph: must hold snap_rwsem when filling inode for async create
i2c: robotfuzz-osif: fix control-request directions
KVM: do not allow mapping valid but non-reference-counted pages
s390/stack: fix possible register corruption with stack switch helper
nilfs2: fix memory leak in nilfs_sysfs_delete_device_group
scsi: sd: Call sd_revalidate_disk() for ioctl(BLKRRPART)
gpiolib: cdev: zero padding during conversion to gpioline_info_changed
i2c: i801: Ensure that SMBHSTSTS_INUSE_STS is cleared when leaving i801_access
pinctrl: stm32: fix the reported number of GPIO lines per bank
perf/x86: Track pmu in per-CPU cpu_hw_events
net: ll_temac: Avoid ndo_start_xmit returning NETDEV_TX_BUSY
net: ll_temac: Add memory-barriers for TX BD access
PCI: Add AMD RS690 quirk to enable 64-bit DMA
recordmcount: Correct st_shndx handling
mac80211: handle various extensible elements correctly
mac80211: reset profile_periodicity/ema_ap
net: qed: Fix memcpy() overflow of qed_dcbx_params()
KVM: selftests: Fix kvm_check_cap() assertion
r8169: Avoid memcpy() over-reading of ETH_SS_STATS
sh_eth: Avoid memcpy() over-reading of ETH_SS_STATS
r8152: Avoid memcpy() over-reading of ETH_SS_STATS
net/packet: annotate accesses to po->ifindex
net/packet: annotate accesses to po->bind
net: caif: fix memory leak in ldisc_open
riscv32: Use medany C model for modules
net: phy: dp83867: perform soft reset and retain established link
net/packet: annotate data race in packet_sendmsg()
inet: annotate date races around sk->sk_txhash
net: annotate data race in sock_error()
ping: Check return value of function 'ping_queue_rcv_skb'
inet: annotate data race in inet_send_prepare() and inet_dgram_connect()
net: ethtool: clear heap allocations for ethtool function
mac80211: drop multicast fragments
net: ipv4: Remove unneed BUG() function
dmaengine: mediatek: use GFP_NOWAIT instead of GFP_ATOMIC in prep_dma
dmaengine: mediatek: do not issue a new desc if one is still current
dmaengine: mediatek: free the proper desc in desc_free handler
dmaengine: rcar-dmac: Fix PM reference leak in rcar_dmac_probe()
cfg80211: call cfg80211_leave_ocb when switching away from OCB
mac80211_hwsim: drop pending frames on stop
mac80211: remove warning in ieee80211_get_sband()
dmaengine: xilinx: dpdma: Limit descriptor IDs to 16 bits
dmaengine: xilinx: dpdma: Add missing dependencies to Kconfig
dmaengine: stm32-mdma: fix PM reference leak in stm32_mdma_alloc_chan_resourc()
dmaengine: zynqmp_dma: Fix PM reference leak in zynqmp_dma_alloc_chan_resourc()
perf/x86/intel/lbr: Zero the xstate buffer on allocation
perf/x86/lbr: Remove cpuc->lbr_xsave allocation from atomic context
locking/lockdep: Improve noinstr vs errors
x86/xen: Fix noinstr fail in exc_xen_unknown_trap()
x86/entry: Fix noinstr fail in __do_fast_syscall_32()
drm/vc4: hdmi: Make sure the controller is powered in detect
drm/vc4: hdmi: Move the HSM clock enable to runtime_pm
Revert "PCI: PM: Do not read power state in pci_enable_device_flags()"
spi: spi-nxp-fspi: move the register operation after the clock enable
arm64: Force NO_BLOCK_MAPPINGS if crashkernel reservation is required
arm64: Ignore any DMA offsets in the max_zone_phys() calculation
MIPS: generic: Update node names to avoid unit addresses
mmc: meson-gx: use memcpy_to/fromio for dram-access-quirk
ARM: 9081/1: fix gcc-10 thumb2-kernel regression
drm/amdgpu: wait for moving fence after pinning
drm/radeon: wait for moving fence after pinning
drm/nouveau: wait for moving fence after pinning v2
drm: add a locked version of drm_is_current_master
Revert "drm/amdgpu/gfx10: enlarge CP_MEC_DOORBELL_RANGE_UPPER to cover full doorbell."
Revert "drm/amdgpu/gfx9: fix the doorbell missing when in CGPG issue."
module: limit enabling module.sig_enforce
Revert "mm: relocate 'write_protect_seq' in struct mm_struct"
Linux 5.10.46
usb: dwc3: core: fix kernel panic when do reboot
usb: dwc3: debugfs: Add and remove endpoint dirs dynamically
perf beauty: Update copy of linux/socket.h with the kernel sources
tools headers UAPI: Sync linux/in.h copy with the kernel sources
net: fec_ptp: add clock rate zero check
net: stmmac: disable clocks in stmmac_remove_config_dt()
mm/slub.c: include swab.h
mm/slub: actually fix freelist pointer vs redzoning
mm/slub: fix redzoning for small allocations
mm/slub: clarify verification reporting
mm/swap: fix pte_same_as_swp() not removing uffd-wp bit when compare
net: bridge: fix vlan tunnel dst refcnt when egressing
net: bridge: fix vlan tunnel dst null pointer dereference
net: ll_temac: Fix TX BD buffer overwrite
net: ll_temac: Make sure to free skb when it is completely used
drm/amdgpu/gfx9: fix the doorbell missing when in CGPG issue.
drm/amdgpu/gfx10: enlarge CP_MEC_DOORBELL_RANGE_UPPER to cover full doorbell.
cfg80211: avoid double free of PMSR request
cfg80211: make certificate generation more robust
mac80211: Fix NULL ptr deref for injected rate info
dmaengine: pl330: fix wrong usage of spinlock flags in dma_cyclc
crash_core, vmcoreinfo: append 'SECTION_SIZE_BITS' to vmcoreinfo
x86/fpu: Reset state for all signal restore failures
x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
x86/fpu: Prevent state corruption in __fpu__restore_sig()
x86/pkru: Write hardware init value to PKRU when xstate is init
x86/ioremap: Map EFI-reserved memory as encrypted for SEV
x86/process: Check PF_KTHREAD and not current->mm for kernel threads
x86/mm: Avoid truncating memblocks for SGX memory
ARCv2: save ABI registers across signal handling
s390/ap: Fix hanging ioctl caused by wrong msg counter
s390/mcck: fix calculation of SIE critical section size
KVM: X86: Fix x86_emulator slab cache leak
KVM: x86/mmu: Calculate and check "full" mmu_role for nested MMU
KVM: x86: Immediately reset the MMU context when the SMM flag is cleared
PCI: Work around Huawei Intelligent NIC VF FLR erratum
PCI: Add ACS quirk for Broadcom BCM57414 NIC
PCI: aardvark: Fix kernel panic during PIO transfer
PCI: Mark some NVIDIA GPUs to avoid bus reset
PCI: Mark TI C667X to avoid bus reset
tracing: Do no increment trace_clock_global() by one
tracing: Do not stop recording comms if the trace file is being read
tracing: Do not stop recording cmdlines when tracing is off
usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
usb: core: hub: Disable autosuspend for Cypress CY7C65632
can: mcba_usb: fix memory leak in mcba_usb
can: j1939: fix Use-after-Free, hold skb ref while in use
can: bcm/raw/isotp: use per module netdevice notifier
can: bcm: fix infoleak in struct bcm_msg_head
bpf: Do not mark insn as seen under speculative path verification
bpf: Inherit expanded/patched seen count from old aux data
irqchip/gic-v3: Workaround inconsistent PMR setting on NMI entry
mm: relocate 'write_protect_seq' in struct mm_struct
hwmon: (scpi-hwmon) shows the negative temperature properly
radeon: use memcpy_to/fromio for UVD fw upload
ASoC: qcom: lpass-cpu: Fix pop noise during audio capture begin
drm/sun4i: dw-hdmi: Make HDMI PHY into a platform device
pinctrl: ralink: rt2880: avoid to error in calls is pin is already enabled
ASoC: rt5682: Fix the fast discharge for headset unplugging in soundwire mode
regulator: rt4801: Fix NULL pointer dereference if priv->enable_gpios is NULL
spi: stm32-qspi: Always wait BUSY bit to be cleared in stm32_qspi_wait_cmd()
ASoC: tas2562: Fix TDM_CFG0_SAMPRATE values
sched/pelt: Ensure that *_sum is always synced with *_avg
spi: spi-zynq-qspi: Fix some wrong goto jumps & missing error code
regulator: rtmv20: Fix to make regcache value first reading back from HW
ASoC: fsl-asoc-card: Set .owner attribute when registering card.
phy: phy-mtk-tphy: Fix some resource leaks in mtk_phy_init()
ASoC: rt5659: Fix the lost powers for the HDA header
platform/x86: thinkpad_acpi: Add X1 Carbon Gen 9 second fan support
regulator: bd70528: Fix off-by-one for buck123 .n_voltages setting
regulator: cros-ec: Fix error code in dev_err message
net: ethernet: fix potential use-after-free in ec_bhf_remove
icmp: don't send out ICMP messages with a source address of 0.0.0.0
bnxt_en: Call bnxt_ethtool_free() in bnxt_init_one() error path
bnxt_en: Fix TQM fastpath ring backing store computation
bnxt_en: Rediscover PHY capabilities after firmware reset
cxgb4: fix wrong shift.
net: cdc_eem: fix tx fixup skb leak
net: hamradio: fix memory leak in mkiss_close
be2net: Fix an error handling path in 'be_probe()'
net/mlx5: Reset mkey index on creation
net/mlx5: E-Switch, Allow setting GUID for host PF vport
net/mlx5: E-Switch, Read PF mac address
net/af_unix: fix a data-race in unix_dgram_sendmsg / unix_release_sock
net: ipv4: fix memory leak in ip_mc_add1_src
net: fec_ptp: fix issue caused by refactor the fec_devtype
net: usb: fix possible use-after-free in smsc75xx_bind
lantiq: net: fix duplicated skb in rx descriptor ring
net: cdc_ncm: switch to eth%d interface naming
ptp: improve max_adj check against unreasonable values
bpf: Fix leakage under speculation on mispredicted branches
net: qrtr: fix OOB Read in qrtr_endpoint_post
ipv4: Fix device used for dst_alloc with local routes
cxgb4: fix wrong ethtool n-tuple rule lookup
netxen_nic: Fix an error handling path in 'netxen_nic_probe()'
qlcnic: Fix an error handling path in 'qlcnic_probe()'
ethtool: strset: fix message length calculation
net: qualcomm: rmnet: don't over-count statistics
net: qualcomm: rmnet: Update rmnet device MTU based on real device
net: make get_net_ns return error if NET_NS is disabled
net: stmmac: dwmac1000: Fix extended MAC address registers definition
cxgb4: halt chip before flashing PHY firmware image
cxgb4: fix sleep in atomic when flashing PHY firmware
cxgb4: fix endianness when flashing boot image
alx: Fix an error handling path in 'alx_probe()'
selftests: mptcp: enable syncookie only in absence of reorders
mptcp: do not warn on bad input from the network
mptcp: try harder to borrow memory from subflow under pressure
sch_cake: Fix out of bounds when parsing TCP options and header
mptcp: Fix out of bounds when parsing TCP options
netfilter: synproxy: Fix out of bounds when parsing TCP options
net/mlx5e: Block offload of outer header csum for UDP tunnels
net/mlx5: DR, Don't use SW steering when RoCE is not supported
net/mlx5: DR, Allow SW steering for sw_owner_v2 devices
net/mlx5: Consider RoCE cap before init RDMA resources
net/mlx5e: Fix page reclaim for dead peer hairpin
net/mlx5e: Remove dependency in IPsec initialization flows
net/sched: act_ct: handle DNAT tuple collision
rtnetlink: Fix regression in bridge VLAN configuration
udp: fix race between close() and udp_abort()
ice: parameterize functions responsible for Tx ring management
ice: add ndo_bpf callback for safe mode netdev ops
netfilter: nft_fib_ipv6: skip ipv6 packets from any to link-local
net: lantiq: disable interrupt before sheduling NAPI
net: dsa: felix: re-enable TX flow control in ocelot_port_flush()
net: rds: fix memory leak in rds_recvmsg
vrf: fix maximum MTU
net: ipv4: fix memory leak in netlbl_cipsov4_add_std
libbpf: Fixes incorrect rx_ring_setup_done
mlxsw: core: Set thermal zone polling delay argument to real value at init
mlxsw: reg: Spectrum-3: Enforce lowest max-shaper burst size of 11
mac80211: fix skb length check in ieee80211_scan_rx()
batman-adv: Avoid WARN_ON timing related checks
fanotify: fix copy_event_to_user() fid error clean up
kvm: LAPIC: Restore guard to prevent illegal APIC register access
mm/memory-failure: make sure wait for page writeback in memory_failure
afs: Fix an IS_ERR() vs NULL check
dmaengine: stedma40: add missing iounmap() on error in d40_probe()
dmaengine: SF_PDMA depends on HAS_IOMEM
dmaengine: QCOM_HIDMA_MGMT depends on HAS_IOMEM
dmaengine: ALTERA_MSGDMA depends on HAS_IOMEM
dmaengine: xilinx: dpdma: initialize registers before request_irq
dmaengine: fsl-dpaa2-qdma: Fix error return code in two functions
dmaengine: idxd: add missing dsa driver unregister
Linux 5.10.45
fib: Return the correct errno code
net: Return the correct errno code
net/x25: Return the correct errno code
rtnetlink: Fix missing error code in rtnl_bridge_notify()
drm/amd/amdgpu:save psp ring wptr to avoid attack
drm/amd/display: Fix potential memory leak in DMUB hw_init
drm/amdgpu: refine amdgpu_fru_get_product_info
drm/amd/display: Allow bandwidth validation for 0 streams.
net: ipconfig: Don't override command-line hostnames or domains
nvme-loop: do not warn for deleted controllers during reset
nvme-loop: check for NVME_LOOP_Q_LIVE in nvme_loop_destroy_admin_queue()
nvme-loop: clear NVME_LOOP_Q_LIVE when nvme_loop_configure_admin_queue() fails
nvme-loop: reset queue count to 1 in nvme_loop_destroy_io_queues()
scsi: scsi_devinfo: Add blacklist entry for HPE OPEN-V
Bluetooth: Add a new USB ID for RTL8822CE
scsi: qedf: Do not put host in qedf_vport_create() unconditionally
ethernet: myri10ge: Fix missing error code in myri10ge_probe()
scsi: target: core: Fix warning on realtime kernels
gfs2: Fix use-after-free in gfs2_glock_shrink_scan
riscv: Use -mno-relax when using lld linker
HID: gt683r: add missing MODULE_DEVICE_TABLE
gfs2: fix a deadlock on withdraw-during-mount
gfs2: Prevent direct-I/O write fallback errors from getting lost
ARM: OMAP2+: Fix build warning when mmc_omap is not built
ARM: OMAP1: Fix use of possibly uninitialized irq variable
drm/tegra: sor: Fully initialize SOR before registration
gpu: host1x: Split up client initalization and registration
drm/tegra: sor: Do not leak runtime PM reference
HID: usbhid: fix info leak in hid_submit_ctrl
HID: Add BUS_VIRTUAL to hid_connect logging
HID: multitouch: set Stylus suffix for Stylus-application devices, too
HID: quirks: Add quirk for Lenovo optical mouse
HID: hid-sensor-hub: Return error for hid_set_field() failure
HID: hid-input: add mapping for emoji picker key
HID: a4tech: use A4_2WHEEL_MOUSE_HACK_B8 for A4TECH NB-95
HID: quirks: Set INCREMENT_USAGE_ON_DUPLICATE for Saitek X65
net: ieee802154: fix null deref in parse dev addr
Linux 5.10.44
proc: only require mm_struct for writing
tracing: Correct the length check which causes memory corruption
scsi: core: Only put parent device if host state differs from SHOST_CREATED
scsi: core: Put .shost_dev in failure path if host state changes to RUNNING
scsi: core: Fix failure handling of scsi_add_host_with_dma()
scsi: core: Fix error handling of scsi_host_alloc()
NFSv4: nfs4_proc_set_acl needs to restore NFS_CAP_UIDGID_NOMAP on error.
NFSv4: Fix second deadlock in nfs4_evict_inode()
NFS: Fix use-after-free in nfs4_init_client()
kvm: fix previous commit for 32-bit builds
perf session: Correct buffer copying when peeking events
NFSv4: Fix deadlock between nfs4_evict_inode() and nfs4_opendata_get_inode()
NFS: Fix a potential NULL dereference in nfs_get_client()
IB/mlx5: Fix initializing CQ fragments buffer
KVM: x86: Ensure liveliness of nested VM-Enter fail tracepoint message
x86/nmi_watchdog: Fix old-style NMI watchdog regression on old Intel CPUs
sched/fair: Fix util_est UTIL_AVG_UNCHANGED handling
sched/fair: Make sure to update tg contrib for blocked load
sched/fair: Keep load_avg and load_sum synced
perf: Fix data race between pin_count increment/decrement
gpio: wcd934x: Fix shift-out-of-bounds error
phy: ti: Fix an error code in wiz_probe()
ASoC: meson: gx-card: fix sound-dai dt schema
ASoC: core: Fix Null-point-dereference in fmt_single_name()
phy: cadence: Sierra: Fix error return code in cdns_sierra_phy_probe()
tools/bootconfig: Fix error return code in apply_xbc()
vmlinux.lds.h: Avoid orphan section with !SMP
ARM: cpuidle: Avoid orphan section warning
RDMA/mlx4: Do not map the core_clock page to user space unless enabled
RDMA/ipoib: Fix warning caused by destroying non-initial netns
drm/msm/a6xx: avoid shadow NULL reference in failure path
drm/msm/a6xx: update/fix CP_PROTECT initialization
drm/msm/a6xx: fix incorrectly set uavflagprd_inv field for A650
drm/mcde: Fix off by 10^3 in calculation
usb: typec: mux: Fix copy-paste mistake in typec_mux_match
usb: dwc3: gadget: Disable gadget IRQ during pullup disable
phy: usb: Fix misuse of IS_ENABLED
regulator: rtmv20: Fix .set_current_limit/.get_current_limit callbacks
regulator: bd71828: Fix .n_voltages settings
regulator: fan53880: Fix missing n_voltages setting
regulator: bd718x7: Fix the BUCK7 voltage setting on BD71837
regulator: max77620: Use device_set_of_node_from_dev()
regulator: core: resolve supply for boot-on/always-on regulators
usb: typec: tcpm: cancel frs hrtimer when unregister tcpm port
usb: typec: tcpm: cancel vdm and state machine hrtimer when unregister tcpm port
usb: fix various gadget panics on 10gbps cabling
usb: fix various gadgets null ptr deref on 10gbps cabling.
usb: gadget: eem: fix wrong eem header operation
USB: serial: cp210x: fix alternate function for CP2102N QFN20
USB: serial: quatech2: fix control-request directions
USB: serial: omninet: add device id for Zyxel Omni 56K Plus
USB: serial: ftdi_sio: add NovaTech OrionMX product ID
usb: gadget: f_fs: Ensure io_completion_wq is idle during unbind
usb: typec: intel_pmc_mux: Add missed error check for devm_ioremap_resource()
usb: typec: intel_pmc_mux: Put fwnode in error case during ->probe()
usb: typec: ucsi: Clear PPM capability data in ucsi_init() error path
usb: typec: wcove: Use LE to CPU conversion when accessing msg->header
usb: musb: fix MUSB_QUIRK_B_DISCONNECT_99 handling
usb: dwc3: ep0: fix NULL pointer exception
usb: dwc3: gadget: Bail from dwc3_gadget_exit() if dwc->gadget is NULL
usb: dwc3: meson-g12a: Disable the regulator in the error handling path of the probe
usb: dwc3-meson-g12a: fix usb2 PHY glue init when phy0 is disabled
usb: pd: Set PD_T_SINK_WAIT_CAP to 310ms
usb: f_ncm: only first packet of aggregate needs to start timer
USB: f_ncm: ncm_bitrate (speed) is unsigned
mmc: renesas_sdhi: Fix HS400 on R-Car M3-W+
mmc: renesas_sdhi: abort tuning when timeout detected
ftrace: Do not blindly read the ip address in ftrace_bug()
cgroup1: don't allow '\n' in renaming
btrfs: promote debugging asserts to full-fledged checks in validate_super
btrfs: return value from btrfs_mark_extent_written() in case of error
async_xor: check src_offs is not NULL before updating it
staging: rtl8723bs: Fix uninitialized variables
kvm: avoid speculation-based attacks from out-of-range memslot accesses
KVM: X86: MMU: Use the correct inherited permissions to get shadow page
perf/x86/intel/uncore: Fix M2M event umask for Ice Lake server
drm: Lock pointer access in drm_master_release()
drm: Fix use-after-free read in drm_getunique()
Revert "ACPI: sleep: Put the FACS table after using it"
spi: bcm2835: Fix out-of-bounds access with more than 4 slaves
ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840 Aero G8
ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP EliteBook x360 1040 G8
ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP Elite Dragonfly G2
ALSA: hda/realtek: headphone and mic don't work on an Acer laptop
ALSA: firewire-lib: fix the context to call snd_pcm_stop_xrun()
ALSA: seq: Fix race of snd_seq_timer_open()
i2c: mpc: implement erratum A-004447 workaround
i2c: mpc: Make use of i2c_recover_bus()
spi: Cleanup on failure of initial setup
spi: Don't have controller clean up spi device before driver unbind
powerpc/fsl: set fsl,i2c-erratum-a004447 flag for P1010 i2c controllers
powerpc/fsl: set fsl,i2c-erratum-a004447 flag for P2041 i2c controllers
nvmet: fix false keep-alive timeout when a controller is torn down
nvme-tcp: remove incorrect Kconfig dep in BLK_DEV_NVME
bnx2x: Fix missing error code in bnx2x_iov_init_one()
dm verity: fix require_signatures module_param permissions
MIPS: Fix kernel hang under FUNCTION_GRAPH_TRACER and PREEMPT_TRACER
nvme-fabrics: decode host pathing error for connect
net: dsa: microchip: enable phy errata workaround on 9567
net: appletalk: cops: Fix data race in cops_probe1
net: macb: ensure the device is available before accessing GEMGXL control registers
scsi: target: qla2xxx: Wait for stop_phase1 at WWN removal
scsi: hisi_sas: Drop free_irq() of devm_request_irq() allocated irq
scsi: vmw_pvscsi: Set correct residual data length
scsi: bnx2fc: Return failure if io_req is already in ABTS processing
net:sfc: fix non-freed irq in legacy irq mode
RDS tcp loopback connection can hang
net/qla3xxx: fix schedule while atomic in ql_sem_spinlock
wq: handle VM suspension in stall detection
cgroup: disable controllers at parse time
net: mdiobus: get rid of a BUG_ON()
netlink: disable IRQs for netlink_lock_table()
bonding: init notify_work earlier to avoid uninitialized use
isdn: mISDN: netjet: Fix crash in nj_probe:
usb: chipidea: udc: assign interrupt number to USB gadget structure
spi: sprd: Add missing MODULE_DEVICE_TABLE
ASoC: sti-sas: add missing MODULE_DEVICE_TABLE
vfio-ccw: Serialize FSM IDLE state with I/O completion
vfio-ccw: Reset FSM state to IDLE inside FSM
ASoC: Intel: bytcr_rt5640: Add quirk for the Lenovo Miix 3-830 tablet
ASoC: Intel: bytcr_rt5640: Add quirk for the Glavey TM800A550L tablet
usb: cdns3: Fix runtime PM imbalance on error
net/nfc/rawsock.c: fix a permission check bug
bpf: Forbid trampoline attach for functions with variable arguments
spi: spi-zynq-qspi: Fix stack violation bug
spi: Fix spi device unregister flow
ASoC: amd: fix for pcm_read() error
ASoC: max98088: fix ni clock divider calculation
proc: Track /proc/$pid/attr/ opener mm_struct
ANDROID: clang: update to 12.0.5
ANDROID: GKI: Refresh ABI following trimmed symbol CRC fix
FROMLIST: export: Make CRCs robust to symbol trimming
ANDROID: Add GKI_HIDDEN_MM_CONFIGS to support ballooning.
defconfig: Remove RESET_INTEL_GW/RESET_BRCMSTB_RESCAL from tuivm config
6ab9d62 reset: RESET_INTEL_GW should depend on X86
42f6a76 reset: RESET_BRCMSTB_RESCAL should depend on ARCH_BRCMSTB
Remove RESET_INTEL_GW/RESET_BRCMSTB_RESCAL from marking as 'n'
in trusted VM config due to below change.
interconnect: qcom: Fix compile error for LTS merge
Conflicts:
Documentation/devicetree/bindings
Documentation/devicetree/bindings/i2c/i2c-at91.txt
Documentation/devicetree/bindings/riscv/sifive-l2-cache.yaml
Documentation/devicetree/bindings/sound/amlogic,gx-sound-card.yaml
drivers/bus/mhi/core/main.c
drivers/iommu/arm/arm-smmu/arm-smmu.c
drivers/mmc/host/sdhci-msm.c
drivers/slimbus/messaging.c
drivers/slimbus/qcom-ngd-ctrl.c
net/qrtr/ns.c
net/qrtr/qrtr.c
Change-Id: I63018794287f1b197b83780a72d67267eb4ef0d2
Signed-off-by: Sivasri Kumar, Vanka <quic_svanka@quicinc.com>
|
||
Jay Jayanna
|
6b6f9a87e9 |
net: vmw_vsock: gunyah: Add detection between guest VMs
Master guest VM will start first and register with resource manager to get a notification when a second guest VM is started. It is expected that the master VM always comes up first and then the second guest VM. When the notification that the second guest VM is up is received by the master guest VM, this driver will register for the msgq to communicate with the secondary VM. Also, print error message if vsock_core_register fails. Change-Id: Ie9951144d5b07cb74184d25a8f03e498627a1f0e Signed-off-by: Jay Jayanna <jayanna@codeaurora.org> |
||
Sarannya S
|
9b7b4ed167 |
net: qrtr: Change error logging in callback
Print error logs in the callback by using pr_err_ratelimited so that watchdog bark will not occur due to excessive logging when the callback is triggered before probe is completed. Change-Id: I82bb84b7812cef5cb8a37e99c5cf1a54411cbdb8 Signed-off-by: Sarannya S <sarannya@codeaurora.org> |
||
|
qctecmdr
|
14c8e4d3d0 | Merge "net: vmw_vsock: gunyah: Add VMADDR_CID_ANY as supported cid" | ||
Chris Lew
|
44c539a0ac |
net: qrtr: gunyah: Delay RX doorbell registration
There are cases where the doorbell interrupt is handled before the probe can finish the endpoint registration with the qrtr core logic. Move the RX doorbell register until after the endpoint is registered and the qrtr core logic has initialized all the structures. Change-Id: I8200651b3874c2bef3cbc0bae35b85c67c851eff Signed-off-by: Chris Lew <clew@codeaurora.org> |
||
|
Jay Jayanna
|
70daeca40d |
net: vmw_vsock: gunyah: Add VMADDR_CID_ANY as supported cid
Allow the use of VMADDR_CID_ANY for creating AF_VSOCK family of sockets to communicate over gunyah vsock framework. Change-Id: I9d74e5c62b9fd13fa7697fa30a383e522655a44b Signed-off-by: Jay Jayanna <jayanna@codeaurora.org> |
||
Greg Kroah-Hartman
|
d3c86f460d |
This is the 5.10.66 stable release
-----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmFDIbAACgkQONu9yGCS aT7zaQ//aT/VgDrNmk5QaNnAAJlN0nsM2cbudR82bEwITkOg1bclrwAMqUXsg0dV d72300fSyrr9oSdD8lodPWi+Gt0OAMoYTZ4z/RE+TBRpfQYiVx1gQJ8QHqkS6oHA AebUrXxc/SuA50TvpLqxd+2De450X7g7ZLzprchlQQXI8T5V7ave1Co3/0nHXoAT rbEm8Zjp7Ge0K/mDDzMXTLVWPsEVeQ2TRmSQNdJlbfS2Fs4XCQV9lr1e1thjv3Zk bYSqVT92Okq/WIBbpzCwtbDNLXQSjGYuiTgsyat23Dc0De8jEg17BEwRE/NGudJa Lye+CTSuI95WCTYVd0JfJq4m49dizqIwxlb/7hRS4QizBnZAvcI3N4Itsqmg9Luv c6q5kVasIVWFBaiyLTEvpxuZJ6gGk8ekEz/qvtVrTPjxp+Y6im7VDH0+gtsaugsE y9ZWWQsPT2Q/S+Tuai3DPYzC53LniMg+gfKuxl3NGCsRv5Ig8G7M5qBhxK5ZglyW pwds2QP/Evr4VzsTMFvvEPezLsF+b8P0cD6auluSYsm1OU9Zjr1VawybqKECRNy3 kbm3TCUL2xzJ7Iet2V2iSB4wHaxYAPLHvXbw+rg0cw1L0Yt7eEAIbJzN+vgonpF/ uWUAA+awJqlJG8kkB5mQtB3hzI4Chh/UWZ93koW+vLXUKf8Iprc= =HYtp -----END PGP SIGNATURE----- Merge 5.10.66 into android12-5.10-lts Changes in 5.10.66 Revert "Bluetooth: Move shutdown callback before flushing tx and rx queue" Revert "block: nbd: add sanity check for first_minor" Revert "posix-cpu-timers: Force next expiration recalc after itimer reset" Revert "time: Handle negative seconds correctly in timespec64_to_ns()" Linux 5.10.66 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I2e40777590f9495135a5c7f78be91c058f3bafa6 |
||
Sasha Levin
|
d3c3f4e078 |
Revert "Bluetooth: Move shutdown callback before flushing tx and rx queue"
This reverts commit
|
||
|
Greg Kroah-Hartman
|
2300418cc6 |
This is the 5.10.65 stable release
-----BEGIN PGP SIGNATURE-----
iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmFBpvcACgkQONu9yGCS
aT7JVxAAof4h5rPObKwhFBu4qOHXEtlHrFAF1xTEaQZnIbv9CkEF0LPufWXP+nKS
mQDOdDmX3rZhWXZbnNK3ZxBADJXyHS6M0jHByuGrzQ8dmMONJtpjYUjxou6k/xg2
4ECHqzeVbwbWuKrJrAfC1xuZofIHXZBHrkAQmLoMw8ERp309lgPS2cXDOXRzn/n/
ri+5AhTaw1ZG1JXrXvyfoxjbdE/eEeJXx8N/zJf0sas5lYpsqeAWTgXBkNpPeJm7
G66ISwEVp6TPxihpRSKwUhADjuM2+EAok2WXwwTvO0s00vE7LL5ijK27hhP5ual1
+xtxBHag95oIZ+sq1t3z4BgmE1n3z/lHkQki98JQaWShABLGhMdKYPF75hMzR6Pw
j0TvLHdkPRSrtUelc7rGtqaT9tF9+RU59I5fPGlBpGckOJ5u2IHCKdjk1WadRgrj
JF7R8ApfP18y1X46tDfr/CIPIZfTVNJyd7hZ1zt11wdBYFmaw/oNyg81OalqzaWf
ckUIt6AucRQ04uuFfhSaTuxLSEl5Uuh6W30HuO/0N3CoDsfD1RMc+76sXORt/JdK
MPxTy124KM6VZADVW4tQXHMoGkLftqTAIgRKt4iRPz80rdhACJFoZJlmVON0MmKV
tSODsqGBxIxhkLj197vQzT152G4wBkmzPtqJfJH7lkGKmBpoKZE=
=lJCV
-----END PGP SIGNATURE-----
Merge 5.10.65 into android12-5.10-lts
Changes in 5.10.65
locking/mutex: Fix HANDOFF condition
regmap: fix the offset of register error log
regulator: tps65910: Silence deferred probe error
crypto: mxs-dcp - Check for DMA mapping errors
sched/deadline: Fix reset_on_fork reporting of DL tasks
power: supply: axp288_fuel_gauge: Report register-address on readb / writeb errors
crypto: omap-sham - clear dma flags only after omap_sham_update_dma_stop()
sched/deadline: Fix missing clock update in migrate_task_rq_dl()
rcu/tree: Handle VM stoppage in stall detection
EDAC/mce_amd: Do not load edac_mce_amd module on guests
posix-cpu-timers: Force next expiration recalc after itimer reset
hrtimer: Avoid double reprogramming in __hrtimer_start_range_ns()
hrtimer: Ensure timerfd notification for HIGHRES=n
udf: Check LVID earlier
udf: Fix iocharset=utf8 mount option
isofs: joliet: Fix iocharset=utf8 mount option
bcache: add proper error unwinding in bcache_device_init
blk-throtl: optimize IOPS throttle for large IO scenarios
nvme-tcp: don't update queue count when failing to set io queues
nvme-rdma: don't update queue count when failing to set io queues
nvmet: pass back cntlid on successful completion
power: supply: smb347-charger: Add missing pin control activation
power: supply: max17042_battery: fix typo in MAx17042_TOFF
s390/cio: add dev_busid sysfs entry for each subchannel
s390/zcrypt: fix wrong offset index for APKA master key valid state
libata: fix ata_host_start()
crypto: omap - Fix inconsistent locking of device lists
crypto: qat - do not ignore errors from enable_vf2pf_comms()
crypto: qat - handle both source of interrupt in VF ISR
crypto: qat - fix reuse of completion variable
crypto: qat - fix naming for init/shutdown VF to PF notifications
crypto: qat - do not export adf_iov_putmsg()
fcntl: fix potential deadlock for &fasync_struct.fa_lock
udf_get_extendedattr() had no boundary checks.
s390/kasan: fix large PMD pages address alignment check
s390/pci: fix misleading rc in clp_set_pci_fn()
s390/debug: keep debug data on resize
s390/debug: fix debug area life cycle
s390/ap: fix state machine hang after failure to enable irq
power: supply: cw2015: use dev_err_probe to allow deferred probe
m68k: emu: Fix invalid free in nfeth_cleanup()
sched/numa: Fix is_core_idle()
sched: Fix UCLAMP_FLAG_IDLE setting
rcu: Fix to include first blocked task in stall warning
rcu: Add lockdep_assert_irqs_disabled() to rcu_sched_clock_irq() and callees
rcu: Fix stall-warning deadlock due to non-release of rcu_node ->lock
m68k: Fix invalid RMW_INSNS on CPUs that lack CAS
block: return ELEVATOR_DISCARD_MERGE if possible
spi: spi-fsl-dspi: Fix issue with uninitialized dma_slave_config
spi: spi-pic32: Fix issue with uninitialized dma_slave_config
genirq/timings: Fix error return code in irq_timings_test_irqs()
irqchip/loongson-pch-pic: Improve edge triggered interrupt support
lib/mpi: use kcalloc in mpi_resize
clocksource/drivers/sh_cmt: Fix wrong setting if don't request IRQ for clock source channel
block: nbd: add sanity check for first_minor
spi: coldfire-qspi: Use clk_disable_unprepare in the remove function
irqchip/gic-v3: Fix priority comparison when non-secure priorities are used
crypto: qat - use proper type for vf_mask
certs: Trigger creation of RSA module signing key if it's not an RSA key
tpm: ibmvtpm: Avoid error message when process gets signal while waiting
x86/mce: Defer processing of early errors
spi: davinci: invoke chipselect callback
blk-crypto: fix check for too-large dun_bytes
regulator: vctrl: Use locked regulator_get_voltage in probe path
regulator: vctrl: Avoid lockdep warning in enable/disable ops
spi: sprd: Fix the wrong WDG_LOAD_VAL
spi: spi-zynq-qspi: use wait_for_completion_timeout to make zynq_qspi_exec_mem_op not interruptible
EDAC/i10nm: Fix NVDIMM detection
drm/panfrost: Fix missing clk_disable_unprepare() on error in panfrost_clk_init()
drm/gma500: Fix end of loop tests for list_for_each_entry
ASoC: mediatek: mt8183: Fix Unbalanced pm_runtime_enable in mt8183_afe_pcm_dev_probe
media: TDA1997x: enable EDID support
leds: is31fl32xx: Fix missing error code in is31fl32xx_parse_dt()
soc: rockchip: ROCKCHIP_GRF should not default to y, unconditionally
media: cxd2880-spi: Fix an error handling path
drm/of: free the right object
bpf: Fix a typo of reuseport map in bpf.h.
bpf: Fix potential memleak and UAF in the verifier.
drm/of: free the iterator object on failure
gve: fix the wrong AdminQ buffer overflow check
libbpf: Fix the possible memory leak on error
ARM: dts: aspeed-g6: Fix HVI3C function-group in pinctrl dtsi
arm64: dts: renesas: r8a77995: draak: Remove bogus adv7511w properties
i40e: improve locking of mac_filter_hash
soc: qcom: rpmhpd: Use corner in power_off
libbpf: Fix removal of inner map in bpf_object__create_map
gfs2: Fix memory leak of object lsi on error return path
firmware: fix theoretical UAF race with firmware cache and resume
driver core: Fix error return code in really_probe()
ionic: cleanly release devlink instance
media: dvb-usb: fix uninit-value in dvb_usb_adapter_dvb_init
media: dvb-usb: fix uninit-value in vp702x_read_mac_addr
media: dvb-usb: Fix error handling in dvb_usb_i2c_init
media: go7007: fix memory leak in go7007_usb_probe
media: go7007: remove redundant initialization
media: rockchip/rga: use pm_runtime_resume_and_get()
media: rockchip/rga: fix error handling in probe
media: coda: fix frame_mem_ctrl for YUV420 and YVU420 formats
media: atomisp: fix the uninitialized use and rename "retvalue"
Bluetooth: sco: prevent information leak in sco_conn_defer_accept()
6lowpan: iphc: Fix an off-by-one check of array index
drm/amdgpu/acp: Make PM domain really work
tcp: seq_file: Avoid skipping sk during tcp_seek_last_pos
ARM: dts: meson8: Use a higher default GPU clock frequency
ARM: dts: meson8b: odroidc1: Fix the pwm regulator supply properties
ARM: dts: meson8b: mxq: Fix the pwm regulator supply properties
ARM: dts: meson8b: ec100: Fix the pwm regulator supply properties
net/mlx5e: Prohibit inner indir TIRs in IPoIB
net/mlx5e: Block LRO if firmware asks for tunneled LRO
cgroup/cpuset: Fix a partition bug with hotplug
drm: mxsfb: Enable recovery on underflow
drm: mxsfb: Increase number of outstanding requests on V4 and newer HW
drm: mxsfb: Clear FIFO_CLEAR bit
net: cipso: fix warnings in netlbl_cipsov4_add_std
Bluetooth: mgmt: Fix wrong opcode in the response for add_adv cmd
arm64: dts: renesas: rzg2: Convert EtherAVB to explicit delay handling
arm64: dts: renesas: hihope-rzg2-ex: Add EtherAVB internal rx delay
devlink: Break parameter notification sequence to be before/after unload/load driver
net/mlx5: Fix missing return value in mlx5_devlink_eswitch_inline_mode_set()
i2c: highlander: add IRQ check
leds: lt3593: Put fwnode in any case during ->probe()
leds: trigger: audio: Add an activate callback to ensure the initial brightness is set
media: em28xx-input: fix refcount bug in em28xx_usb_disconnect
media: venus: venc: Fix potential null pointer dereference on pointer fmt
PCI: PM: Avoid forcing PCI_D0 for wakeup reasons inconsistently
PCI: PM: Enable PME if it can be signaled from D3cold
bpf, samples: Add missing mprog-disable to xdp_redirect_cpu's optstring
soc: qcom: smsm: Fix missed interrupts if state changes while masked
debugfs: Return error during {full/open}_proxy_open() on rmmod
Bluetooth: increase BTNAMSIZ to 21 chars to fix potential buffer overflow
PM: EM: Increase energy calculation precision
selftests/bpf: Fix bpf-iter-tcp4 test to print correctly the dest IP
drm/msm/mdp4: refactor HW revision detection into read_mdp_hw_revision
drm/msm/mdp4: move HW revision detection to earlier phase
drm/msm/dpu: make dpu_hw_ctl_clear_all_blendstages clear necessary LMs
arm64: dts: exynos: correct GIC CPU interfaces address range on Exynos7
counter: 104-quad-8: Return error when invalid mode during ceiling_write
cgroup/cpuset: Miscellaneous code cleanup
cgroup/cpuset: Fix violation of cpuset locking rule
ASoC: Intel: Fix platform ID matching
Bluetooth: fix repeated calls to sco_sock_kill
drm/msm/dsi: Fix some reference counted resource leaks
net/mlx5: Register to devlink ingress VLAN filter trap
net/mlx5: Fix unpublish devlink parameters
ASoC: rt5682: Implement remove callback
ASoC: rt5682: Properly turn off regulators if wrong device ID
usb: dwc3: meson-g12a: add IRQ check
usb: dwc3: qcom: add IRQ check
usb: gadget: udc: at91: add IRQ check
usb: gadget: udc: s3c2410: add IRQ check
usb: phy: fsl-usb: add IRQ check
usb: phy: twl6030: add IRQ checks
usb: gadget: udc: renesas_usb3: Fix soc_device_match() abuse
selftests/bpf: Fix test_core_autosize on big-endian machines
devlink: Clear whole devlink_flash_notify struct
samples: pktgen: add missing IPv6 option to pktgen scripts
Bluetooth: Move shutdown callback before flushing tx and rx queue
PM: cpu: Make notifier chain use a raw_spinlock_t
usb: host: ohci-tmio: add IRQ check
usb: phy: tahvo: add IRQ check
libbpf: Re-build libbpf.so when libbpf.map changes
mac80211: Fix insufficient headroom issue for AMSDU
locking/lockdep: Mark local_lock_t
locking/local_lock: Add missing owner initialization
lockd: Fix invalid lockowner cast after vfs_test_lock
nfsd4: Fix forced-expiry locking
arm64: dts: marvell: armada-37xx: Extend PCIe MEM space
clk: staging: correct reference to config IOMEM to config HAS_IOMEM
i2c: synquacer: fix deferred probing
firmware: raspberrypi: Keep count of all consumers
firmware: raspberrypi: Fix a leak in 'rpi_firmware_get()'
usb: gadget: mv_u3d: request_irq() after initializing UDC
mm/swap: consider max pages in iomap_swapfile_add_extent
lkdtm: replace SCSI_DISPATCH_CMD with SCSI_QUEUE_RQ
Bluetooth: add timeout sanity check to hci_inquiry
i2c: iop3xx: fix deferred probing
i2c: s3c2410: fix IRQ check
i2c: fix platform_get_irq.cocci warnings
i2c: hix5hd2: fix IRQ check
gfs2: init system threads before freeze lock
rsi: fix error code in rsi_load_9116_firmware()
rsi: fix an error code in rsi_probe()
ASoC: Intel: kbl_da7219_max98927: Fix format selection for max98373
ASoC: Intel: Skylake: Leave data as is when invoking TLV IPCs
ASoC: Intel: Skylake: Fix module resource and format selection
mmc: sdhci: Fix issue with uninitialized dma_slave_config
mmc: dw_mmc: Fix issue with uninitialized dma_slave_config
mmc: moxart: Fix issue with uninitialized dma_slave_config
bpf: Fix possible out of bound write in narrow load handling
CIFS: Fix a potencially linear read overflow
i2c: mt65xx: fix IRQ check
i2c: xlp9xx: fix main IRQ check
usb: ehci-orion: Handle errors of clk_prepare_enable() in probe
usb: bdc: Fix an error handling path in 'bdc_probe()' when no suitable DMA config is available
usb: bdc: Fix a resource leak in the error handling path of 'bdc_probe()'
tty: serial: fsl_lpuart: fix the wrong mapbase value
ASoC: wcd9335: Fix a double irq free in the remove function
ASoC: wcd9335: Fix a memory leak in the error handling path of the probe function
ASoC: wcd9335: Disable irq on slave ports in the remove function
iwlwifi: follow the new inclusive terminology
iwlwifi: skip first element in the WTAS ACPI table
ice: Only lock to update netdev dev_addr
ath6kl: wmi: fix an error code in ath6kl_wmi_sync_point()
atlantic: Fix driver resume flow.
bcma: Fix memory leak for internally-handled cores
brcmfmac: pcie: fix oops on failure to resume and reprobe
ipv6: make exception cache less predictible
ipv4: make exception cache less predictible
net: sched: Fix qdisc_rate_table refcount leak when get tcf_block failed
net: qualcomm: fix QCA7000 checksum handling
octeontx2-af: Fix loop in free and unmap counter
octeontx2-af: Fix static code analyzer reported issues
octeontx2-af: Set proper errorcode for IPv4 checksum errors
ipv4: fix endianness issue in inet_rtm_getroute_build_skb()
ASoC: rt5682: Remove unused variable in rt5682_i2c_remove()
iwlwifi Add support for ax201 in Samsung Galaxy Book Flex2 Alpha
f2fs: guarantee to write dirty data when enabling checkpoint back
time: Handle negative seconds correctly in timespec64_to_ns()
io_uring: IORING_OP_WRITE needs hash_reg_file set
bio: fix page leak bio_add_hw_page failure
tty: Fix data race between tiocsti() and flush_to_ldisc()
perf/x86/amd/ibs: Extend PERF_PMU_CAP_NO_EXCLUDE to IBS Op
x86/resctrl: Fix a maybe-uninitialized build warning treated as error
Revert "KVM: x86: mmu: Add guest physical address check in translate_gpa()"
KVM: s390: index kvm->arch.idle_mask by vcpu_idx
KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted
KVM: VMX: avoid running vmx_handle_exit_irqoff in case of emulation
KVM: nVMX: Unconditionally clear nested.pi_pending on nested VM-Enter
ARM: dts: at91: add pinctrl-{names, 0} for all gpios
fuse: truncate pagecache on atomic_o_trunc
fuse: flush extending writes
IMA: remove -Wmissing-prototypes warning
IMA: remove the dependency on CRYPTO_MD5
fbmem: don't allow too huge resolutions
backlight: pwm_bl: Improve bootloader/kernel device handover
clk: kirkwood: Fix a clocking boot regression
Linux 5.10.65
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
Change-Id: Ie0b9306ba6ee4193de3200df7cdacaeba152b83e
|
||
Eric Dumazet
|
c4f1ad3930 |
ipv4: fix endianness issue in inet_rtm_getroute_build_skb()
[ Upstream commit 92548b0ee220e000d81c27ac9a80e0ede895a881 ]
The UDP length field should be in network order.
This removes the following sparse error:
net/ipv4/route.c:3173:27: warning: incorrect type in assignment (different base types)
net/ipv4/route.c:3173:27: expected restricted __be16 [usertype] len
net/ipv4/route.c:3173:27: got unsigned long
Fixes:
|
||
Xiyu Yang
|
f96bc82e03 |
net: sched: Fix qdisc_rate_table refcount leak when get tcf_block failed
[ Upstream commit c66070125837900163b81a03063ddd657a7e9bfb ]
The reference counting issue happens in one exception handling path of
cbq_change_class(). When failing to get tcf_block, the function forgets
to decrease the refcount of "rtab" increased by qdisc_put_rtab(),
causing a refcount leak.
Fix this issue by jumping to "failure" label when get tcf_block failed.
Fixes:
|
||
|
Eric Dumazet
|
5867e20e18 |
ipv4: make exception cache less predictible
[ Upstream commit 67d6d681e15b578c1725bad8ad079e05d1c48a8e ]
Even after commit 6457378fe796 ("ipv4: use siphash instead of Jenkins in
fnhe_hashfun()"), an attacker can still use brute force to learn
some secrets from a victim linux host.
One way to defeat these attacks is to make the max depth of the hash
table bucket a random value.
Before this patch, each bucket of the hash table used to store exceptions
could contain 6 items under attack.
After the patch, each bucket would contains a random number of items,
between 6 and 10. The attacker can no longer infer secrets.
This is slightly increasing memory size used by the hash table,
by 50% in average, we do not expect this to be a problem.
This patch is more complex than the prior one (IPv6 equivalent),
because IPv4 was reusing the oldest entry.
Since we need to be able to evict more than one entry per
update_or_create_fnhe() call, I had to replace
fnhe_oldest() with fnhe_remove_oldest().
Also note that we will queue extra kfree_rcu() calls under stress,
which hopefully wont be a too big issue.
Fixes:
|
||
|
Eric Dumazet
|
8692f0bb29 |
ipv6: make exception cache less predictible
[ Upstream commit a00df2caffed3883c341d5685f830434312e4a43 ]
Even after commit 4785305c05b2 ("ipv6: use siphash in rt6_exception_hash()"),
an attacker can still use brute force to learn some secrets from a victim
linux host.
One way to defeat these attacks is to make the max depth of the hash
table bucket a random value.
Before this patch, each bucket of the hash table used to store exceptions
could contain 6 items under attack.
After the patch, each bucket would contains a random number of items,
between 6 and 10. The attacker can no longer infer secrets.
This is slightly increasing memory size used by the hash table,
we do not expect this to be a problem.
Following patch is dealing with the same issue in IPv4.
Fixes:
|
||
Pavel Skripkin
|
50e6f34499 |
Bluetooth: add timeout sanity check to hci_inquiry
[ Upstream commit f41a4b2b5eb7872109723dab8ae1603bdd9d9ec1 ]
Syzbot hit "task hung" bug in hci_req_sync(). The problem was in
unreasonable huge inquiry timeout passed from userspace.
Fix it by adding sanity check for timeout value to hci_inquiry().
Since hci_inquiry() is the only user of hci_req_sync() with user
controlled timeout value, it makes sense to check timeout value in
hci_inquiry() and don't touch hci_req_sync().
Fixes:
|
||
Chih-Kang Chang
|
22b106df73 |
mac80211: Fix insufficient headroom issue for AMSDU
[ Upstream commit f50d2ff8f016b79a2ff4acd5943a1eda40c545d4 ]
ieee80211_amsdu_realloc_pad() fails to account for extra_tx_headroom,
the original reserved headroom might be eaten. Add the necessary
extra_tx_headroom.
Fixes:
|
||
Kai-Heng Feng
|
4711284768 |
Bluetooth: Move shutdown callback before flushing tx and rx queue
[ Upstream commit 0ea53674d07fb6db2dd7a7ec2fdc85a12eb246c2 ]
Commit 0ea9fd001a14 ("Bluetooth: Shutdown controller after workqueues
are flushed or cancelled") introduced a regression that makes mtkbtsdio
driver stops working:
[ 36.593956] Bluetooth: hci0: Firmware already downloaded
[ 46.814613] Bluetooth: hci0: Execution of wmt command timed out
[ 46.814619] Bluetooth: hci0: Failed to send wmt func ctrl (-110)
The shutdown callback depends on the result of hdev->rx_work, so we
should call it before flushing rx_work:
-> btmtksdio_shutdown()
-> mtk_hci_wmt_sync()
-> __hci_cmd_send()
-> wait for BTMTKSDIO_TX_WAIT_VND_EVT gets cleared
-> btmtksdio_recv_event()
-> hci_recv_frame()
-> queue_work(hdev->workqueue, &hdev->rx_work)
-> clears BTMTKSDIO_TX_WAIT_VND_EVT
So move the shutdown callback before flushing TX/RX queue to resolve the
issue.
Reported-and-tested-by: Mattijs Korpershoek <mkorpershoek@baylibre.com>
Tested-by: Hsin-Yi Wang <hsinyi@chromium.org>
Cc: Guenter Roeck <linux@roeck-us.net>
Fixes: 0ea9fd001a14 ("Bluetooth: Shutdown controller after workqueues are flushed or cancelled")
Signed-off-by: Kai-Heng Feng <kai.heng.feng@canonical.com>
Signed-off-by: Marcel Holtmann <marcel@holtmann.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
|
||
Leon Romanovsky
|
2c0b826f4a |
devlink: Clear whole devlink_flash_notify struct
[ Upstream commit ed43fbac717882165a2a4bd64f7b1f56f7467bb7 ]
The { 0 } doesn't clear all fields in the struct, but tells to the
compiler to set all fields to zero and doesn't touch any sub-fields
if they exists.
The {} is an empty initialiser that instructs to fully initialize whole
struct including sub-fields, which is error-prone for future
devlink_flash_notify extensions.
Fixes:
|
||
Desmond Cheong Zhi Xi
|
059c2c09f4 |
Bluetooth: fix repeated calls to sco_sock_kill
[ Upstream commit e1dee2c1de2b4dd00eb44004a4bda6326ed07b59 ] In commit |
||
Colin Ian King
|
5014a8453f |
Bluetooth: increase BTNAMSIZ to 21 chars to fix potential buffer overflow
[ Upstream commit 713baf3dae8f45dc8ada4ed2f5fdcbf94a5c274d ]
An earlier commit replaced using batostr to using %pMR sprintf for the
construction of session->name. Static analysis detected that this new
method can use a total of 21 characters (including the trailing '\0')
so we need to increase the BTNAMSIZ from 18 to 21 to fix potential
buffer overflows.
Addresses-Coverity: ("Out-of-bounds write")
Fixes:
|
||
|
Leon Romanovsky
|
b376ae5597 |
devlink: Break parameter notification sequence to be before/after unload/load driver
[ Upstream commit 05a7f4a8dff19999ca8a83a35ff4782689de7bfc ]
The change of namespaces during devlink reload calls to driver unload
before it accesses devlink parameters. The commands below causes to
use-after-free bug when trying to get flow steering mode.
* ip netns add n1
* devlink dev reload pci/0000:00:09.0 netns n1
==================================================================
BUG: KASAN: use-after-free in mlx5_devlink_fs_mode_get+0x96/0xa0 [mlx5_core]
Read of size 4 at addr ffff888009d04308 by task devlink/275
CPU: 6 PID: 275 Comm: devlink Not tainted 5.12.0-rc2+ #2853
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.13.0-0-gf21b5a4aeb02-prebuilt.qemu.org 04/01/2014
Call Trace:
dump_stack+0x93/0xc2
print_address_description.constprop.0+0x18/0x140
? mlx5_devlink_fs_mode_get+0x96/0xa0 [mlx5_core]
? mlx5_devlink_fs_mode_get+0x96/0xa0 [mlx5_core]
kasan_report.cold+0x7c/0xd8
? mlx5_devlink_fs_mode_get+0x96/0xa0 [mlx5_core]
mlx5_devlink_fs_mode_get+0x96/0xa0 [mlx5_core]
devlink_nl_param_fill+0x1c8/0xe80
? __free_pages_ok+0x37a/0x8a0
? devlink_flash_update_timeout_notify+0xd0/0xd0
? lock_acquire+0x1a9/0x6d0
? fs_reclaim_acquire+0xb7/0x160
? lock_is_held_type+0x98/0x110
? 0xffffffff81000000
? lock_release+0x1f9/0x6c0
? fs_reclaim_release+0xa1/0xf0
? lock_downgrade+0x6d0/0x6d0
? lock_is_held_type+0x98/0x110
? lock_is_held_type+0x98/0x110
? memset+0x20/0x40
? __build_skb_around+0x1f8/0x2b0
devlink_param_notify+0x6d/0x180
devlink_reload+0x1c3/0x520
? devlink_remote_reload_actions_performed+0x30/0x30
? mutex_trylock+0x24b/0x2d0
? devlink_nl_cmd_reload+0x62b/0x1070
devlink_nl_cmd_reload+0x66d/0x1070
? devlink_reload+0x520/0x520
? devlink_get_from_attrs+0x1bc/0x260
? devlink_nl_pre_doit+0x64/0x4d0
genl_family_rcv_msg_doit+0x1e9/0x2f0
? mutex_lock_io_nested+0x1130/0x1130
? genl_family_rcv_msg_attrs_parse.constprop.0+0x240/0x240
? security_capable+0x51/0x90
genl_rcv_msg+0x27f/0x4a0
? genl_get_cmd+0x3c0/0x3c0
? lock_acquire+0x1a9/0x6d0
? devlink_reload+0x520/0x520
? lock_release+0x6c0/0x6c0
netlink_rcv_skb+0x11d/0x340
? genl_get_cmd+0x3c0/0x3c0
? netlink_ack+0x9f0/0x9f0
? lock_release+0x1f9/0x6c0
genl_rcv+0x24/0x40
netlink_unicast+0x433/0x700
? netlink_attachskb+0x730/0x730
? _copy_from_iter_full+0x178/0x650
? __alloc_skb+0x113/0x2b0
netlink_sendmsg+0x6f1/0xbd0
? netlink_unicast+0x700/0x700
? lock_is_held_type+0x98/0x110
? netlink_unicast+0x700/0x700
sock_sendmsg+0xb0/0xe0
__sys_sendto+0x193/0x240
? __x64_sys_getpeername+0xb0/0xb0
? do_sys_openat2+0x10b/0x370
? __up_read+0x1a1/0x7b0
? do_user_addr_fault+0x219/0xdc0
? __x64_sys_openat+0x120/0x1d0
? __x64_sys_open+0x1a0/0x1a0
__x64_sys_sendto+0xdd/0x1b0
? syscall_enter_from_user_mode+0x1d/0x50
do_syscall_64+0x2d/0x40
entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7fc69d0af14a
Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb b8 0f 1f 00 f3 0f 1e fa 41 89 ca 64 8b 04 25 18 00 00 00 85 c0 75 15 b8 2c 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 76 c3 0f 1f 44 00 00 55 48 83 ec 30 44 89 4c
RSP: 002b:00007ffc1d8292f8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fc69d0af14a
RDX: 0000000000000038 RSI: 0000555f57c56440 RDI: 0000000000000003
RBP: 0000555f57c56410 R08: 00007fc69d17b200 R09: 000000000000000c
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
Allocated by task 146:
kasan_save_stack+0x1b/0x40
__kasan_kmalloc+0x99/0xc0
mlx5_init_fs+0xf0/0x1c50 [mlx5_core]
mlx5_load+0xd2/0x180 [mlx5_core]
mlx5_init_one+0x2f6/0x450 [mlx5_core]
probe_one+0x47d/0x6e0 [mlx5_core]
pci_device_probe+0x2a0/0x4a0
really_probe+0x20a/0xc90
driver_probe_device+0xd8/0x380
device_driver_attach+0x1df/0x250
__driver_attach+0xff/0x240
bus_for_each_dev+0x11e/0x1a0
bus_add_driver+0x309/0x570
driver_register+0x1ee/0x380
0xffffffffa06b8062
do_one_initcall+0xd5/0x410
do_init_module+0x1c8/0x760
load_module+0x6d8b/0x9650
__do_sys_finit_module+0x118/0x1b0
do_syscall_64+0x2d/0x40
entry_SYSCALL_64_after_hwframe+0x44/0xae
Freed by task 275:
kasan_save_stack+0x1b/0x40
kasan_set_track+0x1c/0x30
kasan_set_free_info+0x20/0x30
__kasan_slab_free+0x102/0x140
slab_free_freelist_hook+0x74/0x1b0
kfree+0xd7/0x2a0
mlx5_unload+0x16/0xb0 [mlx5_core]
mlx5_unload_one+0xae/0x120 [mlx5_core]
mlx5_devlink_reload_down+0x1bc/0x380 [mlx5_core]
devlink_reload+0x141/0x520
devlink_nl_cmd_reload+0x66d/0x1070
genl_family_rcv_msg_doit+0x1e9/0x2f0
genl_rcv_msg+0x27f/0x4a0
netlink_rcv_skb+0x11d/0x340
genl_rcv+0x24/0x40
netlink_unicast+0x433/0x700
netlink_sendmsg+0x6f1/0xbd0
sock_sendmsg+0xb0/0xe0
__sys_sendto+0x193/0x240
__x64_sys_sendto+0xdd/0x1b0
do_syscall_64+0x2d/0x40
entry_SYSCALL_64_after_hwframe+0x44/0xae
The buggy address belongs to the object at ffff888009d04300
which belongs to the cache kmalloc-128 of size 128
The buggy address is located 8 bytes inside of
128-byte region [ffff888009d04300, ffff888009d04380)
The buggy address belongs to the page:
page:0000000086a64ecc refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888009d04000 pfn:0x9d04
head:0000000086a64ecc order:1 compound_mapcount:0
flags: 0x4000000000010200(slab|head)
raw: 4000000000010200 ffffea0000203980 0000000200000002 ffff8880050428c0
raw: ffff888009d04000 000000008020001d 00000001ffffffff 0000000000000000
page dumped because: kasan: bad access detected
Memory state around the buggy address:
ffff888009d04200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
ffff888009d04280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
>ffff888009d04300: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
^
ffff888009d04380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
ffff888009d04400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
==================================================================
The right solution to devlink reload is to notify about deletion of
parameters, unload driver, change net namespaces, load driver and notify
about addition of parameters.
Fixes:
|
||
Tedd Ho-Jeong An
|
61b1db2358 |
Bluetooth: mgmt: Fix wrong opcode in the response for add_adv cmd
[ Upstream commit a25fca4d3c18766b6f7a3c95fa8faec23ef464c5 ]
This patch fixes the MGMT add_advertising command repsones with the
wrong opcode when it is trying to return the not supported error.
Fixes:
|
||
|
Pavel Skripkin
|
bca46d2283 |
net: cipso: fix warnings in netlbl_cipsov4_add_std
[ Upstream commit 8ca34a13f7f9b3fa2c464160ffe8cc1a72088204 ]
Syzbot reported warning in netlbl_cipsov4_add(). The
problem was in too big doi_def->map.std->lvl.local_size
passed to kcalloc(). Since this value comes from userpace there is
no need to warn if value is not correct.
The same problem may occur with other kcalloc() calls in
this function, so, I've added __GFP_NOWARN flag to all
kcalloc() calls there.
Reported-and-tested-by: syzbot+cdd51ee2e6b0b2e18c0d@syzkaller.appspotmail.com
Fixes:
|
||
Martin KaFai Lau
|
a7d0a59e21 |
tcp: seq_file: Avoid skipping sk during tcp_seek_last_pos
[ Upstream commit 525e2f9fd0229eb10cb460a9e6d978257f24804e ]
st->bucket stores the current bucket number.
st->offset stores the offset within this bucket that is the sk to be
seq_show(). Thus, st->offset only makes sense within the same
st->bucket.
These two variables are an optimization for the common no-lseek case.
When resuming the seq_file iteration (i.e. seq_start()),
tcp_seek_last_pos() tries to continue from the st->offset
at bucket st->bucket.
However, it is possible that the bucket pointed by st->bucket
has changed and st->offset may end up skipping the whole st->bucket
without finding a sk. In this case, tcp_seek_last_pos() currently
continues to satisfy the offset condition in the next (and incorrect)
bucket. Instead, regardless of the offset value, the first sk of the
next bucket should be returned. Thus, "bucket == st->bucket" check is
added to tcp_seek_last_pos().
The chance of hitting this is small and the issue is a decade old,
so targeting for the next tree.
Fixes:
|
||
|
Colin Ian King
|
c7ebd3622b |
6lowpan: iphc: Fix an off-by-one check of array index
[ Upstream commit 9af417610b6142e826fd1ee8ba7ff3e9a2133a5a ]
The bounds check of id is off-by-one and the comparison should
be >= rather >. Currently the WARN_ON_ONCE check does not stop
the out of range indexing of &ldev->ctx.table[id] so also add
a return path if the bounds are out of range.
Addresses-Coverity: ("Illegal address computation").
Fixes:
|
||
Dan Carpenter
|
def6efdf91 |
Bluetooth: sco: prevent information leak in sco_conn_defer_accept()
[ Upstream commit 59da0b38bc2ea570ede23a3332ecb3e7574ce6b2 ]
Smatch complains that some of these struct members are not initialized
leading to a stack information disclosure:
net/bluetooth/sco.c:778 sco_conn_defer_accept() warn:
check that 'cp.retrans_effort' doesn't leak information
This seems like a valid warning. I've added a default case to fix
this issue.
Fixes:
|
||
|
Greg Kroah-Hartman
|
c8de3a470a |
This is the 5.10.64 stable release
-----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmE9pRsACgkQONu9yGCS aT4GqRAAzjCqjeEQ+JgWzP5N9YXXqzQI6s6PNqyEZpQiQF3tak12WZh02/zYhyZf nLiJgB/RitgPcbvSeRLSV9gYbAhL0HGI0DZ7wA821esA3+ywuS/21D2g49YuU0Cy mpTh4w1wm/dES4sZchhIMN+fzx81T/xHyiHkuA+wAU+o/bn4Qf+eCevKe2+8D2UC vr5Oc0k+RvAF16pFRd+MKSR0JNNPEpS962KnRFYUk47hjMk/aH4FhQCSP+nqXcJW 3WuI+FR/UTltGMDe4/WIwlxQxsf4wMOMwEwRi0v5oyhwC4oCpZD3FlcNPJ81J6MS GkNukV/mvIKZ/IVD2F3YY34nHLE2RMkGKMbYSc9ONYWPEgGFnxINnXQZonPkazEN IA7GSPjxS4ToxETmDVVErIGQx/iCYnp9FJk+wqgrJ3z/e/qKZpt8C7RUDGJFzKjC WeRDFHtvdZT1WcmiUfrXz8qcbf2e1dPorYJ5tRi7hztrEx4XzwARSGGeW7H5rXJT 50Q1oGL5IHj5lBe4BMbI59v1jQxzt0Tyyenv0xq/Jfrnmk0IrmUo0DiGZGO9Zxko as+HR3NNGl27uvlmz+bZ+ztL1DoXvJpkaGoCXTwBimg+/TAT9cSA+bFhI9+lvigx Ez6vInwcWkL6Tk5DlCeR7H0dBlKFGxktWHN5+qs0gSZoXPXZfK8= =AflS -----END PGP SIGNATURE----- Merge 5.10.64 into android12-5.10-lts Changes in 5.10.64 igmp: Add ip_mc_list lock in ip_check_mc_rcu USB: serial: mos7720: improve OOM-handling in read_mos_reg() net: ll_temac: Remove left-over debug message mm/page_alloc: speed up the iteration of max_order net: kcov: don't select SKB_EXTENSIONS when there is no NET serial: 8250: 8250_omap: Fix unused variable warning net: linux/skbuff.h: combine SKB_EXTENSIONS + KCOV handling tty: drop termiox user definitions Revert "r8169: avoid link-up interrupt issue on RTL8106e if user enables ASPM" x86/events/amd/iommu: Fix invalid Perf result due to IOMMU PMC power-gating blk-mq: fix kernel panic during iterating over flush request blk-mq: fix is_flush_rq netfilter: nftables: avoid potential overflows on 32bit arches netfilter: nf_tables: initialize set before expression setup netfilter: nftables: clone set element expression template blk-mq: clearing flush request reference in tags->rqs[] ALSA: usb-audio: Add registration quirk for JBL Quantum 800 usb: host: xhci-rcar: Don't reload firmware after the completion usb: gadget: tegra-xudc: fix the wrong mult value for HS isoc or intr usb: mtu3: restore HS function when set SS/SSP usb: mtu3: use @mult for HS isoc or intr usb: mtu3: fix the wrong HS mult value xhci: fix even more unsafe memory usage in xhci tracing xhci: fix unsafe memory usage in xhci tracing x86/reboot: Limit Dell Optiplex 990 quirk to early BIOS versions PCI: Call Max Payload Size-related fixup quirks early Linux 5.10.64 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I2269075a6d5eb6121b6e42a28d4f3fd0c252695c |
||
Pablo Neira Ayuso
|
e51ff3ffc3 |
netfilter: nftables: clone set element expression template
commit 4d8f9065830e526c83199186c5f56a6514f457d2 upstream.
memcpy() breaks when using connlimit in set elements. Use
nft_expr_clone() to initialize the connlimit expression list, otherwise
connlimit garbage collector crashes when walking on the list head copy.
[ 493.064656] Workqueue: events_power_efficient nft_rhash_gc [nf_tables]
[ 493.064685] RIP: 0010:find_or_evict+0x5a/0x90 [nf_conncount]
[ 493.064694] Code: 2b 43 40 83 f8 01 77 0d 48 c7 c0 f5 ff ff ff 44 39 63 3c 75 df 83 6d 18 01 48 8b 43 08 48 89 de 48 8b 13 48 8b 3d ee 2f 00 00 <48> 89 42 08 48 89 10 48 b8 00 01 00 00 00 00 ad de 48 89 03 48 83
[ 493.064699] RSP: 0018:ffffc90000417dc0 EFLAGS: 00010297
[ 493.064704] RAX: 0000000000000000 RBX: ffff888134f38410 RCX: 0000000000000000
[ 493.064708] RDX: 0000000000000000 RSI: ffff888134f38410 RDI: ffff888100060cc0
[ 493.064711] RBP: ffff88812ce594a8 R08: ffff888134f38438 R09: 00000000ebb9025c
[ 493.064714] R10: ffffffff8219f838 R11: 0000000000000017 R12: 0000000000000001
[ 493.064718] R13: ffffffff82146740 R14: ffff888134f38410 R15: 0000000000000000
[ 493.064721] FS: 0000000000000000(0000) GS:ffff88840e440000(0000) knlGS:0000000000000000
[ 493.064725] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 493.064729] CR2: 0000000000000008 CR3: 00000001330aa002 CR4: 00000000001706e0
[ 493.064733] Call Trace:
[ 493.064737] nf_conncount_gc_list+0x8f/0x150 [nf_conncount]
[ 493.064746] nft_rhash_gc+0x106/0x390 [nf_tables]
Reported-by: Laura Garcia Liebana <nevola@gmail.com>
Fixes:
|
||
|
Pablo Neira Ayuso
|
36983fc2f8 |
netfilter: nf_tables: initialize set before expression setup
commit ad9f151e560b016b6ad3280b48e42fa11e1a5440 upstream.
nft_set_elem_expr_alloc() needs an initialized set if expression sets on
the NFT_EXPR_GC flag. Move set fields initialization before expression
setup.
[4512935.019450] ==================================================================
[4512935.019456] BUG: KASAN: null-ptr-deref in nft_set_elem_expr_alloc+0x84/0xd0 [nf_tables]
[4512935.019487] Read of size 8 at addr 0000000000000070 by task nft/23532
[4512935.019494] CPU: 1 PID: 23532 Comm: nft Not tainted 5.12.0-rc4+ #48
[...]
[4512935.019502] Call Trace:
[4512935.019505] dump_stack+0x89/0xb4
[4512935.019512] ? nft_set_elem_expr_alloc+0x84/0xd0 [nf_tables]
[4512935.019536] ? nft_set_elem_expr_alloc+0x84/0xd0 [nf_tables]
[4512935.019560] kasan_report.cold.12+0x5f/0xd8
[4512935.019566] ? nft_set_elem_expr_alloc+0x84/0xd0 [nf_tables]
[4512935.019590] nft_set_elem_expr_alloc+0x84/0xd0 [nf_tables]
[4512935.019615] nf_tables_newset+0xc7f/0x1460 [nf_tables]
Reported-by: syzbot+ce96ca2b1d0b37c6422d@syzkaller.appspotmail.com
Fixes:
|
||
|
Eric Dumazet
|
3fda454f90 |
netfilter: nftables: avoid potential overflows on 32bit arches
commit 6c8774a94e6ad26f29ef103c8671f55c255c6201 upstream.
User space could ask for very large hash tables, we need to make sure
our size computations wont overflow.
nf_tables_newset() needs to double check the u64 size
will fit into size_t field.
Fixes:
|
||
Liu Jian
|
ddd7e8b7b8 |
igmp: Add ip_mc_list lock in ip_check_mc_rcu
commit 23d2b94043ca8835bd1e67749020e839f396a1c2 upstream. I got below panic when doing fuzz test: Kernel panic - not syncing: panic_on_warn set ... CPU: 0 PID: 4056 Comm: syz-executor.3 Tainted: G B 5.14.0-rc1-00195-gcff5c4254439-dirty #2 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 Call Trace: dump_stack_lvl+0x7a/0x9b panic+0x2cd/0x5af end_report.cold+0x5a/0x5a kasan_report+0xec/0x110 ip_check_mc_rcu+0x556/0x5d0 __mkroute_output+0x895/0x1740 ip_route_output_key_hash_rcu+0x2d0/0x1050 ip_route_output_key_hash+0x182/0x2e0 ip_route_output_flow+0x28/0x130 udp_sendmsg+0x165d/0x2280 udpv6_sendmsg+0x121e/0x24f0 inet6_sendmsg+0xf7/0x140 sock_sendmsg+0xe9/0x180 ____sys_sendmsg+0x2b8/0x7a0 ___sys_sendmsg+0xf0/0x160 __sys_sendmmsg+0x17e/0x3c0 __x64_sys_sendmmsg+0x9e/0x100 do_syscall_64+0x3b/0x90 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x462eb9 Code: f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f3df5af1c58 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 RAX: ffffffffffffffda RBX: 000000000073bf00 RCX: 0000000000462eb9 RDX: 0000000000000312 RSI: 0000000020001700 RDI: 0000000000000007 RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3df5af26bc R13: 00000000004c372d R14: 0000000000700b10 R15: 00000000ffffffff It is one use-after-free in ip_check_mc_rcu. In ip_mc_del_src, the ip_sf_list of pmc has been freed under pmc->lock protection. But access to ip_sf_list in ip_check_mc_rcu is not protected by the lock. Signed-off-by: Liu Jian <liujian56@huawei.com> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Lee Jones <lee.jones@linaro.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> |
||
|
Jay Jayanna
|
3cdd571875 |
net: vmw_vsock: gunyah: Transport for vsock communication
Implementation of a new gunyah transport that allows for communication between primary and secondary virtual machines. This used the af_vsock framework for socket operations. Change-Id: I0a2c911a07ba46039241f069795ee3866fc24ec8 Signed-off-by: Jay Jayanna <jayanna@codeaurora.org> |
||
|
Greg Kroah-Hartman
|
674d2ac211 |
This is the 5.10.62 stable release
-----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmEx2IsACgkQONu9yGCS aT6bihAA1pqL2x40IIk7nmu3XW/lNJxt4WLRjT7kGehDYE5gNz5VTQDaccb/+PiM 18XjLN0RcSkhiai8410A/SNoHBvPSMWrNvf093NpFcGm0WcvsZVyNUfRgdXfs1N8 FM1DAgA5eVowL+CthZyJIIRX6VllLAg1b3Z61frNO/t1nOUsS26enoxMSeaziqjz BuvajftaRGtJBMA3iNB1iKR3EEHRqfuWMT4swfQGDshdHlzXbdDOs0KV4bTYRo+f 76n1bvftiMH4vRONIR3T+ZeJWeaL6IfW01v7qYx+06hBa6TtkwDc+Ofw5zxWFtj1 7abou5U46gHIp4Ce8ANJzmnvd7iOssFk7+6y8Z7lZgUQCdwHFLP70VX9Jd3bRlsK UIwG0qiIG0jdLgUvjgritDWIcxuSniWIbecLr1xfHIzJAIvVr6bjRNyOz3gXgaa/ h16oHZRhprC3+4baUQPjPiSb54z+y0Xrx8x9ZSvgHe4gQmctjzoKMVr9Fy7NSpQv MVVNi9GvqRI+o+Tu7/N3yxShdXvuRvOOFgeOcyvA7BigrxMb+LvOsPcISFIBva6a 6+vKuRY79TMwEbDJkURnSNqkVyvMuqKhH5OGiKVHkQrp3AkltpDyDuap+6i2oar4 ba20HaVstcSdCfx8iCmiy/l0g16vOyNC8cVVdB4WoX1fU6aiv9Y= =g+cC -----END PGP SIGNATURE----- Merge 5.10.62 into android12-5.10-lts Changes in 5.10.62 net: qrtr: fix another OOB Read in qrtr_endpoint_post bpf: Fix ringbuf helper function compatibility bpf: Fix NULL pointer dereference in bpf_get_local_storage() helper ASoC: rt5682: Adjust headset volume button threshold ASoC: component: Remove misplaced prefix handling in pin control functions ARC: Fix CONFIG_STACKDEPOT netfilter: conntrack: collect all entries in one cycle once: Fix panic when module unload blk-iocost: fix lockdep warning on blkcg->lock ovl: fix uninitialized pointer read in ovl_lookup_real_one() net: mscc: Fix non-GPL export of regmap APIs can: usb: esd_usb2: esd_usb2_rx_event(): fix the interchange of the CAN RX and TX error counters ceph: correctly handle releasing an embedded cap flush riscv: Ensure the value of FP registers in the core dump file is up to date Revert "btrfs: compression: don't try to compress if we don't have enough pages" drm/amdgpu: Cancel delayed work when GFXOFF is disabled Revert "USB: serial: ch341: fix character loss at high transfer rates" USB: serial: option: add new VID/PID to support Fibocom FG150 usb: renesas-xhci: Prefer firmware loading on unknown ROM state usb: dwc3: gadget: Fix dwc3_calc_trbs_left() usb: dwc3: gadget: Stop EP0 transfers during pullup disable scsi: core: Fix hang of freezing queue between blocking and running device RDMA/bnxt_re: Add missing spin lock initialization IB/hfi1: Fix possible null-pointer dereference in _extend_sdma_tx_descs() RDMA/bnxt_re: Remove unpaired rtnl unlock in bnxt_re_dev_init() ice: do not abort devlink info if board identifier can't be found net: usb: pegasus: fixes of set_register(s) return value evaluation; igc: fix page fault when thunderbolt is unplugged igc: Use num_tx_queues when iterating over tx_ring queue e1000e: Fix the max snoop/no-snoop latency for 10M e1000e: Do not take care about recovery NVM checksum RDMA/efa: Free IRQ vectors on error flow ip_gre: add validation for csum_start xgene-v2: Fix a resource leak in the error handling path of 'xge_probe()' net: marvell: fix MVNETA_TX_IN_PRGRS bit number ucounts: Increase ucounts reference counter before the security hook net/sched: ets: fix crash when flipping from 'strict' to 'quantum' ipv6: use siphash in rt6_exception_hash() ipv4: use siphash instead of Jenkins in fnhe_hashfun() cxgb4: dont touch blocked freelist bitmap after free rtnetlink: Return correct error on changing device netns net: hns3: clear hardware resource when loading driver net: hns3: add waiting time before cmdq memory is released net: hns3: fix duplicate node in VLAN list net: hns3: fix get wrong pfc_en when query PFC configuration Revert "mmc: sdhci-iproc: Set SDHCI_QUIRK_CAP_CLOCK_BASE_BROKEN on BCM2711" net: stmmac: add mutex lock to protect est parameters net: stmmac: fix kernel panic due to NULL pointer dereference of plat->est drm/i915: Fix syncmap memory leak usb: gadget: u_audio: fix race condition on endpoint stop dt-bindings: sifive-l2-cache: Fix 'select' matching perf/x86/intel/uncore: Fix integer overflow on 23 bit left shift of a u32 clk: renesas: rcar-usb2-clock-sel: Fix kernel NULL pointer dereference iwlwifi: pnvm: accept multiple HW-type TLVs opp: remove WARN when no valid OPPs remain cpufreq: blocklist Qualcomm sm8150 in cpufreq-dt-platdev virtio: Improve vq->broken access to avoid any compiler optimization virtio_pci: Support surprise removal of virtio pci device virtio_vdpa: reject invalid vq indices vringh: Use wiov->used to check for read/write desc order tools/virtio: fix build qed: qed ll2 race condition fixes qed: Fix null-pointer dereference in qed_rdma_create_qp() Revert "drm/amd/pm: fix workload mismatch on vega10" drm/amd/pm: change the workload type for some cards blk-mq: don't grab rq's refcount in blk_mq_check_expired() drm: Copy drm_wait_vblank to user before returning drm/nouveau/disp: power down unused DP links during init drm/nouveau/kms/nv50: workaround EFI GOP window channel format differences net/rds: dma_map_sg is entitled to merge entries btrfs: fix race between marking inode needs to be logged and log syncing pipe: avoid unnecessary EPOLLET wakeups under normal loads pipe: do FASYNC notifications for every pipe IO, not just state changes mtd: spinand: Fix incorrect parameters for on-die ECC tipc: call tipc_wait_for_connect only when dlen is not 0 vt_kdsetmode: extend console locking Bluetooth: btusb: check conditions before enabling USB ALT 3 for WBS riscv: Fixup wrong ftrace remove cflag riscv: Fixup patch_text panic in ftrace perf env: Fix memory leak of bpf_prog_info_linear member perf symbol-elf: Fix memory leak by freeing sdt_note.args perf record: Fix memory leak in vDSO found using ASAN perf tools: Fix arm64 build error with gcc-11 perf annotate: Fix jump parsing for C++ code. powerpc/perf: Invoke per-CPU variable access with disabled interrupts srcu: Provide internal interface to start a Tree SRCU grace period srcu: Provide polling interfaces for Tree SRCU grace periods srcu: Provide internal interface to start a Tiny SRCU grace period srcu: Make Tiny SRCU use multi-bit grace-period counter srcu: Provide polling interfaces for Tiny SRCU grace periods tracepoint: Use rcu get state and cond sync for static call updates usb: typec: ucsi: acpi: Always decode connector change information usb: typec: ucsi: Work around PPM losing change information usb: typec: ucsi: Clear pending after acking connector change net: dsa: mt7530: fix VLAN traffic leaks again lkdtm: Enable DOUBLE_FAULT on all architectures arm64: dts: qcom: msm8994-angler: Fix gpio-reserved-ranges 85-88 btrfs: fix NULL pointer dereference when deleting device by invalid id kthread: Fix PF_KTHREAD vs to_kthread() race Revert "floppy: reintroduce O_NDELAY fix" Revert "parisc: Add assembly implementations for memset, strlen, strcpy, strncpy and strcat" net: don't unconditionally copy_from_user a struct ifreq for socket ioctls audit: move put_tree() to avoid trim_trees refcount underflow and UAF bpf: Fix potentially incorrect results with bpf_get_local_storage() Linux 5.10.62 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I5a9bf4b2c254ae21a10f838494cae1c3fa016be3 |
||
Peter Collingbourne
|
1890ee7ff8 |
net: don't unconditionally copy_from_user a struct ifreq for socket ioctls
commit d0efb16294d145d157432feda83877ae9d7cdf37 upstream.
A common implementation of isatty(3) involves calling a ioctl passing
a dummy struct argument and checking whether the syscall failed --
bionic and glibc use TCGETS (passing a struct termios), and musl uses
TIOCGWINSZ (passing a struct winsize). If the FD is a socket, we will
copy sizeof(struct ifreq) bytes of data from the argument and return
-EFAULT if that fails. The result is that the isatty implementations
may return a non-POSIX-compliant value in errno in the case where part
of the dummy struct argument is inaccessible, as both struct termios
and struct winsize are smaller than struct ifreq (at least on arm64).
Although there is usually enough stack space following the argument
on the stack that this did not present a practical problem up to now,
with MTE stack instrumentation it's more likely for the copy to fail,
as the memory following the struct may have a different tag.
Fix the problem by adding an early check for whether the ioctl is a
valid socket ioctl, and return -ENOTTY if it isn't.
Fixes:
|
||
Xin Long
|
0a178a0151 |
tipc: call tipc_wait_for_connect only when dlen is not 0
commit 7387a72c5f84f0dfb57618f9e4770672c0d2e4c9 upstream.
__tipc_sendmsg() is called to send SYN packet by either tipc_sendmsg()
or tipc_connect(). The difference is in tipc_connect(), it will call
tipc_wait_for_connect() after __tipc_sendmsg() to wait until connecting
is done. So there's no need to wait in __tipc_sendmsg() for this case.
This patch is to fix it by calling tipc_wait_for_connect() only when dlen
is not 0 in __tipc_sendmsg(), which means it's called by tipc_connect().
Note this also fixes the failure in tipcutils/test/ptts/:
# ./tipcTS &
# ./tipcTC 9
(hang)
Fixes: 36239dab6da7 ("tipc: fix implicit-connect for SYN+")
Reported-by: Shuang Li <shuali@redhat.com>
Signed-off-by: Xin Long <lucien.xin@gmail.com>
Acked-by: Jon Maloy <jmaloy@redhat.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Cc: Paul Gortmaker <paul.gortmaker@windriver.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
|
||
Gerd Rausch
|
6f38d95f33 |
net/rds: dma_map_sg is entitled to merge entries
[ Upstream commit fb4b1373dcab086d0619c29310f0466a0b2ceb8a ]
Function "dma_map_sg" is entitled to merge adjacent entries
and return a value smaller than what was passed as "nents".
Subsequently "ib_map_mr_sg" needs to work with this value ("sg_dma_len")
rather than the original "nents" parameter ("sg_len").
This old RDS bug was exposed and reliably causes kernel panics
(using RDMA operations "rds-stress -D") on x86_64 starting with:
commit c588072bba6b ("iommu/vt-d: Convert intel iommu driver to the iommu ops")
Simply put: Linux 5.11 and later.
Signed-off-by: Gerd Rausch <gerd.rausch@oracle.com>
Acked-by: Santosh Shilimkar <santosh.shilimkar@oracle.com>
Link: https://lore.kernel.org/r/60efc69f-1f35-529d-a7ef-da0549cad143@oracle.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
|
||
Andrey Ignatov
|
ad0db83855 |
rtnetlink: Return correct error on changing device netns
[ Upstream commit 96a6b93b69880b2c978e1b2be9cae6970b605008 ]
Currently when device is moved between network namespaces using
RTM_NEWLINK message type and one of netns attributes (FLA_NET_NS_PID,
IFLA_NET_NS_FD, IFLA_TARGET_NETNSID) but w/o specifying IFLA_IFNAME, and
target namespace already has device with same name, userspace will get
EINVAL what is confusing and makes debugging harder.
Fix it so that userspace gets more appropriate EEXIST instead what makes
debugging much easier.
Before:
# ./ifname.sh
+ ip netns add ns0
+ ip netns exec ns0 ip link add l0 type dummy
+ ip netns exec ns0 ip link show l0
8: l0: <BROADCAST,NOARP> mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000
link/ether 66:90:b5:d5:78:69 brd ff:ff:ff:ff:ff:ff
+ ip link add l0 type dummy
+ ip link show l0
10: l0: <BROADCAST,NOARP> mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000
link/ether 6e:c6:1f:15:20:8d brd ff:ff:ff:ff:ff:ff
+ ip link set l0 netns ns0
RTNETLINK answers: Invalid argument
After:
# ./ifname.sh
+ ip netns add ns0
+ ip netns exec ns0 ip link add l0 type dummy
+ ip netns exec ns0 ip link show l0
8: l0: <BROADCAST,NOARP> mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000
link/ether 1e:4a:72:e3:e3:8f brd ff:ff:ff:ff:ff:ff
+ ip link add l0 type dummy
+ ip link show l0
10: l0: <BROADCAST,NOARP> mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000
link/ether f2:fc:fe:2b:7d:a6 brd ff:ff:ff:ff:ff:ff
+ ip link set l0 netns ns0
RTNETLINK answers: File exists
The problem is that do_setlink() passes its `char *ifname` argument,
that it gets from a caller, to __dev_change_net_namespace() as is (as
`const char *pat`), but semantics of ifname and pat can be different.
For example, __rtnl_newlink() does this:
net/core/rtnetlink.c
3270 char ifname[IFNAMSIZ];
...
3286 if (tb[IFLA_IFNAME])
3287 nla_strscpy(ifname, tb[IFLA_IFNAME], IFNAMSIZ);
3288 else
3289 ifname[0] = '\0';
...
3364 if (dev) {
...
3394 return do_setlink(skb, dev, ifm, extack, tb, ifname, status);
3395 }
, i.e. do_setlink() gets ifname pointer that is always valid no matter
if user specified IFLA_IFNAME or not and then do_setlink() passes this
ifname pointer as is to __dev_change_net_namespace() as pat argument.
But the pat (pattern) in __dev_change_net_namespace() is used as:
net/core/dev.c
11198 err = -EEXIST;
11199 if (__dev_get_by_name(net, dev->name)) {
11200 /* We get here if we can't use the current device name */
11201 if (!pat)
11202 goto out;
11203 err = dev_get_valid_name(net, dev, pat);
11204 if (err < 0)
11205 goto out;
11206 }
As the result the `goto out` path on line 11202 is neven taken and
instead of returning EEXIST defined on line 11198,
__dev_change_net_namespace() returns an error from dev_get_valid_name()
and this, in turn, will be EINVAL for ifname[0] = '\0' set earlier.
Fixes:
|
||
|
Eric Dumazet
|
beefd5f0c6 |
ipv4: use siphash instead of Jenkins in fnhe_hashfun()
[ Upstream commit 6457378fe796815c973f631a1904e147d6ee33b1 ]
A group of security researchers brought to our attention
the weakness of hash function used in fnhe_hashfun().
Lets use siphash instead of Jenkins Hash, to considerably
reduce security risks.
Also remove the inline keyword, this really is distracting.
Fixes:
|
||
|
Eric Dumazet
|
dced8347a7 |
ipv6: use siphash in rt6_exception_hash()
[ Upstream commit 4785305c05b25a242e5314cc821f54ade4c18810 ]
A group of security researchers brought to our attention
the weakness of hash function used in rt6_exception_hash()
Lets use siphash instead of Jenkins Hash, to considerably
reduce security risks.
Following patch deals with IPv4.
Fixes:
|
||
Davide Caratti
|
f517335a61 |
net/sched: ets: fix crash when flipping from 'strict' to 'quantum'
[ Upstream commit cd9b50adc6bb9ad3f7d244590a389522215865c4 ]
While running kselftests, Hangbin observed that sch_ets.sh often crashes,
and splats like the following one are seen in the output of 'dmesg':
BUG: kernel NULL pointer dereference, address: 0000000000000000
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 159f12067 P4D 159f12067 PUD 159f13067 PMD 0
Oops: 0000 [#1] SMP NOPTI
CPU: 2 PID: 921 Comm: tc Not tainted 5.14.0-rc6+ #458
Hardware name: Red Hat KVM, BIOS 1.11.1-4.module+el8.1.0+4066+0f1aadab 04/01/2014
RIP: 0010:__list_del_entry_valid+0x2d/0x50
Code: 48 8b 57 08 48 b9 00 01 00 00 00 00 ad de 48 39 c8 0f 84 ac 6e 5b 00 48 b9 22 01 00 00 00 00 ad de 48 39 ca 0f 84 cf 6e 5b 00 <48> 8b 32 48 39 fe 0f 85 af 6e 5b 00 48 8b 50 08 48 39 f2 0f 85 94
RSP: 0018:ffffb2da005c3890 EFLAGS: 00010217
RAX: 0000000000000000 RBX: ffff9073ba23f800 RCX: dead000000000122
RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff9073ba23fbc8
RBP: ffff9073ba23f890 R08: 0000000000000001 R09: 0000000000000001
R10: 0000000000000001 R11: 0000000000000001 R12: dead000000000100
R13: ffff9073ba23fb00 R14: 0000000000000002 R15: 0000000000000002
FS: 00007f93e5564e40(0000) GS:ffff9073bba00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 000000014ad34000 CR4: 0000000000350ee0
Call Trace:
ets_qdisc_reset+0x6e/0x100 [sch_ets]
qdisc_reset+0x49/0x1d0
tbf_reset+0x15/0x60 [sch_tbf]
qdisc_reset+0x49/0x1d0
dev_reset_queue.constprop.42+0x2f/0x90
dev_deactivate_many+0x1d3/0x3d0
dev_deactivate+0x56/0x90
qdisc_graft+0x47e/0x5a0
tc_get_qdisc+0x1db/0x3e0
rtnetlink_rcv_msg+0x164/0x4c0
netlink_rcv_skb+0x50/0x100
netlink_unicast+0x1a5/0x280
netlink_sendmsg+0x242/0x480
sock_sendmsg+0x5b/0x60
____sys_sendmsg+0x1f2/0x260
___sys_sendmsg+0x7c/0xc0
__sys_sendmsg+0x57/0xa0
do_syscall_64+0x3a/0x80
entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f93e44b8338
Code: 89 02 48 c7 c0 ff ff ff ff eb b5 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 8d 05 25 43 2c 00 8b 00 85 c0 75 17 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 58 c3 0f 1f 80 00 00 00 00 41 54 41 89 d4 55
RSP: 002b:00007ffc0db737a8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 0000000061255c06 RCX: 00007f93e44b8338
RDX: 0000000000000000 RSI: 00007ffc0db73810 RDI: 0000000000000003
RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
R10: 000000000000000b R11: 0000000000000246 R12: 0000000000000001
R13: 0000000000687880 R14: 0000000000000000 R15: 0000000000000000
Modules linked in: sch_ets sch_tbf dummy rfkill iTCO_wdt iTCO_vendor_support intel_rapl_msr intel_rapl_common joydev i2c_i801 pcspkr i2c_smbus lpc_ich virtio_balloon ip_tables xfs libcrc32c crct10dif_pclmul crc32_pclmul crc32c_intel ahci libahci ghash_clmulni_intel libata serio_raw virtio_blk virtio_console virtio_net net_failover failover sunrpc dm_mirror dm_region_hash dm_log dm_mod
CR2: 0000000000000000
When the change() function decreases the value of 'nstrict', we must take
into account that packets might be already enqueued on a class that flips
from 'strict' to 'quantum': otherwise that class will not be added to the
bandwidth-sharing list. Then, a call to ets_qdisc_reset() will attempt to
do list_del(&alist) with 'alist' filled with zero, hence the NULL pointer
dereference.
For classes flipping from 'strict' to 'quantum', initialize an empty list
and eventually add it to the bandwidth-sharing list, if there are packets
already enqueued. In this way, the kernel will:
a) prevent crashing as described above.
b) avoid retaining the backlog packets (for an arbitrarily long time) in
case no packet is enqueued after a change from 'strict' to 'quantum'.
Reported-by: Hangbin Liu <liuhangbin@gmail.com>
Fixes:
|
||
Shreyansh Chouhan
|
fb45459d9d |
ip_gre: add validation for csum_start
[ Upstream commit 1d011c4803c72f3907eccfc1ec63caefb852fcbf ]
Validate csum_start in gre_handle_offloads before we call _gre_xmit so
that we do not crash later when the csum_start value is used in the
lco_csum function call.
This patch deals with ipv4 code.
Fixes:
|
||
Florian Westphal
|
f68ad168e2 |
netfilter: conntrack: collect all entries in one cycle
[ Upstream commit 4608fdfc07e116f9fc0895beb40abad7cdb5ee3d ] Michal Kubecek reports that conntrack gc is responsible for frequent wakeups (every 125ms) on idle systems. On busy systems, timed out entries are evicted during lookup. The gc worker is only needed to remove entries after system becomes idle after a busy period. To resolve this, always scan the entire table. If the scan is taking too long, reschedule so other work_structs can run and resume from next bucket. After a completed scan, wait for 2 minutes before the next cycle. Heuristics for faster re-schedule are removed. GC_SCAN_INTERVAL could be exposed as a sysctl in the future to allow tuning this as-needed or even turn the gc worker off. Reported-by: Michal Kubecek <mkubecek@suse.cz> Signed-off-by: Florian Westphal <fw@strlen.de> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> Signed-off-by: Sasha Levin <sashal@kernel.org> |
||
Yonghong Song
|
d81ddadabd |
bpf: Fix NULL pointer dereference in bpf_get_local_storage() helper
commit b910eaaaa4b89976ef02e5d6448f3f73dc671d91 upstream.
Jiri Olsa reported a bug ([1]) in kernel where cgroup local
storage pointer may be NULL in bpf_get_local_storage() helper.
There are two issues uncovered by this bug:
(1). kprobe or tracepoint prog incorrectly sets cgroup local storage
before prog run,
(2). due to change from preempt_disable to migrate_disable,
preemption is possible and percpu storage might be overwritten
by other tasks.
This issue (1) is fixed in [2]. This patch tried to address issue (2).
The following shows how things can go wrong:
task 1: bpf_cgroup_storage_set() for percpu local storage
preemption happens
task 2: bpf_cgroup_storage_set() for percpu local storage
preemption happens
task 1: run bpf program
task 1 will effectively use the percpu local storage setting by task 2
which will be either NULL or incorrect ones.
Instead of just one common local storage per cpu, this patch fixed
the issue by permitting 8 local storages per cpu and each local
storage is identified by a task_struct pointer. This way, we
allow at most 8 nested preemption between bpf_cgroup_storage_set()
and bpf_cgroup_storage_unset(). The percpu local storage slot
is released (calling bpf_cgroup_storage_unset()) by the same task
after bpf program finished running.
bpf_test_run() is also fixed to use the new bpf_cgroup_storage_set()
interface.
The patch is tested on top of [2] with reproducer in [1].
Without this patch, kernel will emit error in 2-3 minutes.
With this patch, after one hour, still no error.
[1] https://lore.kernel.org/bpf/CAKH8qBuXCfUz=w8L+Fj74OaUpbosO29niYwTki7e3Ag044_aww@mail.gmail.com/T
[2] https://lore.kernel.org/bpf/20210309185028.3763817-1-yhs@fb.com
Signed-off-by: Yonghong Song <yhs@fb.com>
Signed-off-by: Alexei Starovoitov <ast@kernel.org>
Acked-by: Roman Gushchin <guro@fb.com>
Link: https://lore.kernel.org/bpf/20210323055146.3334476-1-yhs@fb.com
Cc: <stable@vger.kernel.org> # 5.10.x
Signed-off-by: Stanislav Fomichev <sdf@google.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
|