3089 Commits

Author	SHA1	Message	Date
Greg Kroah-Hartman	d0782c9411	Merge tag 'android12-5.10.160_r00' into android12-5.10 ... This is the merge of the upstream LTS release of 5.10.160 into the android12-5.10 branch. It contains the following commits: 003c389455 Merge 5.10.160 into android12-5.10-lts a2428a8dcb Linux 5.10.160 54c15f67cb ASoC: ops: Correct bounds check for second channel on SX controls 74b139c63f nvme-pci: clear the prp2 field when not used 77ebf88e00 ASoC: cs42l51: Correct PGA Volume minimum value 4db1d19b74 can: mcba_usb: Fix termination command argument 683837f2f6 can: sja1000: fix size of OCR_MODE_MASK define 434b523671 pinctrl: meditatek: Startup with the IRQs disabled 5cb4abb0ca libbpf: Use page size as max_entries when probing ring buffer map 50b5f6d4d9 ASoC: ops: Check bounds for second channel in snd_soc_put_volsw_sx() 344739dc56 ASoC: fsl_micfil: explicitly clear CHnF flags a49c1a7307 ASoC: fsl_micfil: explicitly clear software reset bit 75454b4bbf io_uring: add missing item types for splice request 17f386e6b7 fuse: always revalidate if exclusive create eb6313c129 nfp: fix use-after-free in area_cache_get() 965d93fb39 vfs: fix copy_file_range() averts filesystem freeze protection ed96733949 vfs: fix copy_file_range() regression in cross-fs copies 970862a96c x86/smpboot: Move rcu_cpu_starting() earlier 32e45c58a0 Merge "Merge 5.10.159 into android12-5.10-lts" into android12-5.10-lts d31626cbea ANDROID: usb: gadget: uvc: remove duplicate code in unbind 01ef2d0b53 Merge 5.10.159 into android12-5.10-lts 931578be69 Linux 5.10.159 4fd6f84e0a can: esd_usb: Allow REC and TEC to return to zero cf0e423106 macsec: add missing attribute validation for offload 6b03e41767 net: mvneta: Fix an out of bounds check 8208d7e56b ipv6: avoid use-after-free in ip6_fragment() 3d59adad12 net: plip: don't call kfree_skb/dev_kfree_skb() under spin_lock_irq() a00444e25b xen/netback: fix build warning 87277bdf2c ethernet: aeroflex: fix potential skb leak in greth_init_rings() cc668fddde tipc: call tipc_lxc_xmit without holding node_read_lock 4be43e46c3 net: dsa: sja1105: fix memory leak in sja1105_setup_devlink_regions() 8e3f9ac009 ipv4: Fix incorrect route flushing when table ID 0 is used 5211e5ff9d ipv4: Fix incorrect route flushing when source address is deleted 36e248269a tipc: Fix potential OOB in tipc_link_proto_rcv() 93aaa4bb72 net: hisilicon: Fix potential use-after-free in hix5hd2_rx() 296a50aa8b net: hisilicon: Fix potential use-after-free in hisi_femac_rx() 8d1aed7a11 net: thunderx: Fix missing destroy_workqueue of nicvf_rx_mode_wq a5cfbc1995 ip_gre: do not report erspan version on GRE interface 696e34d54c net: stmmac: fix "snps,axi-config" node property parsing ca26f45083 nvme initialize core quirks before calling nvme_init_subsystem 27eb2d7a1b NFC: nci: Bounds check struct nfc_target arrays a2506b19d7 i40e: Disallow ip4 and ip6 l4_4_bytes 8329b65e34 i40e: Fix for VF MAC address 0 215f3ac53b i40e: Fix not setting default xps_cpus after reset 146ebee8fc net: mvneta: Prevent out of bounds read in mvneta_config_rss() e6860c889f xen-netfront: Fix NULL sring after live migration 3d3b30718a net: encx24j600: Fix invalid logic in reading of MISTAT register 51ba1820e7 net: encx24j600: Add parentheses to fix precedence 42c319635c mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add() 4c693330ce selftests: rtnetlink: correct xfrm policy rule in kci_test_ipsec_offload bccda3ad07 net: dsa: ksz: Check return value e7b9504581 Bluetooth: Fix not cleanup led when bt_init fails 1717354d77 Bluetooth: 6LoWPAN: add missing hci_dev_put() in get_l2cap_conn() 80c69b31aa vmxnet3: correctly report encapsulated LRO packet 575a6266f6 af_unix: Get user_ns from in_skb in unix_diag_get_exact(). 6c788c0a25 drm: bridge: dw_hdmi: fix preference of RGB modes over YUV420 de918d9738 igb: Allocate MSI-X vector when testing 6595c9208d e1000e: Fix TX dispatch condition 5ee6413d3d gpio: amd8111: Fix PCI device reference count leak b9aca69a6c drm/bridge: ti-sn65dsi86: Fix output polarity setting bug b46e8c50c3 netfilter: ctnetlink: fix compilation warning after data race fixes in ct mark 0a8e66e375 ca8210: Fix crash by zero initializing data 27c71825ff ieee802154: cc2520: Fix error return code in cc2520_hw_init() a0418d0a6b netfilter: nft_set_pipapo: Actually validate intervals in fields after the first one cb283cca1d rtc: mc146818-lib: fix signedness bug in mc146818_get_time() 5c432383b6 rtc: mc146818-lib: fix locking in mc146818_set_time 5e26531d81 rtc: cmos: Disable irq around direct invocation of cmos_interrupt() fccee93eb2 mm/hugetlb: fix races when looking up a CONT-PTE/PMD size hugetlb page c42221efb1 can: af_can: fix NULL pointer dereference in can_rcv_filter bc03f809da HID: core: fix shift-out-of-bounds in hid_report_raw_event 959a23a4d1 HID: hid-lg4ff: Add check for empty lbuf 4dde75945a HID: usbhid: Add ALWAYS_POLL quirk for some mice 11e95d85c3 drm/shmem-helper: Avoid vm_open error paths 6a4da05acd drm/shmem-helper: Remove errant put in error path 007f561f59 drm/vmwgfx: Don't use screen objects when SEV is active 3cb78c3925 KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field 549b46f813 Bluetooth: Fix crash when replugging CSR fake controllers 380d183e99 Bluetooth: btusb: Add debug message for CSR controllers f1cf856123 mm/gup: fix gup_pud_range() for dax f1f7f36cf6 memcg: fix possible use-after-free in memcg_write_event_control() 32f01f0306 media: v4l2-dv-timings.c: fix too strict blanking sanity checks 043b2bc96c Revert "ARM: dts: imx7: Fix NAND controller size-cells" abfb8ae69b media: videobuf2-core: take mmap_lock in vb2_get_unmapped_area() 83632fc414 xen/netback: don't call kfree_skb() with interrupts disabled 3eecd2bc10 xen/netback: do some code cleanup 49e07c0768 xen/netback: Ensure protocol headers don't fall in the non-linear area db44a9443e rtc: mc146818: Reduce spinlock section in mc146818_set_time() 17293d630f rtc: cmos: Replace spin_lock_irqsave with spin_lock in hard IRQ acfd8ef683 rtc: cmos: avoid UIP when reading alarm time 949bae0282 rtc: cmos: avoid UIP when writing alarm time 33ac73a41a rtc: mc146818-lib: extract mc146818_avoid_UIP 8bb5fe5830 rtc: mc146818-lib: fix RTC presence check 775d4661f1 rtc: Check return value from mc146818_get_time() b9a5c470e0 rtc: mc146818-lib: change return values of mc146818_get_time() 94eaf9966e rtc: cmos: remove stale REVISIT comments f5b51f8550 rtc: mc146818: Dont test for bit 0-5 in Register D 3736972360 rtc: mc146818: Detect and handle broken RTCs 7c7075c88d rtc: mc146818: Prevent reading garbage 7f445ca2e0 mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths 4a1cdb49d0 mm/khugepaged: fix GUP-fast interaction by sending IPI cdfd3739b2 mm/khugepaged: take the right locks for page table retraction 1c0eec6a1d net: usb: qmi_wwan: add u-blox 0x1342 composition a8c5ffb4df 9p/xen: check logical size for buffer size ec36ebae36 usb: dwc3: gadget: Disable GUSB2PHYCFG.SUSPHY for End Transfer d9b53caf01 fbcon: Use kzalloc() in fbcon_prepare_logo() 8b130c770d regulator: twl6030: fix get status of twl6032 regulators f6f45e5383 ASoC: soc-pcm: Add NULL check in BE reparenting 688a45aff2 btrfs: send: avoid unaligned encoded writes when attempting to clone range 15c42ab8d4 ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event d38e021416 regulator: slg51000: Wait after asserting CS pin 1331bcfcac 9p/fd: Use P9_HDRSZ for header size 96b43f36a5 ARM: dts: rockchip: disable arm_global_timer on rk3066 and rk3188 ddf58f5939 ASoC: wm8962: Wait for updated value of WM8962_CLOCKING1 register dbd78abd69 ARM: 9266/1: mm: fix no-MMU ZERO_PAGE() implementation bb1866cf1e ARM: 9251/1: perf: Fix stacktraces for tracepoint events in THUMB2 kernels b1f40a0cdf ARM: dts: rockchip: rk3188: fix lcdc1-rgb24 node name 5f9474d07b arm64: dts: rockchip: fix ir-receiver node names 060d58924a ARM: dts: rockchip: fix ir-receiver node names 3e0c466771 arm: dts: rockchip: fix node name for hym8563 rtc 3ada63a876 arm64: dts: rockchip: keep I2S1 disabled for GPIO function on ROCK Pi 4 series 202ee06349 Revert "mmc: sdhci: Fix voltage switch delay" 0b0939466f ANDROID: gki_defconfig: add CONFIG_FUNCTION_ERROR_INJECTION 5ab4c6b843 Merge 5.10.158 into android12-5.10-lts 592346d5dc Linux 5.10.158 cc1b4718cc ipc/sem: Fix dangling sem_array access in semtimedop race d072a10c81 v4l2: don't fall back to follow_pfn() if pin_user_pages_fast() fails 9ba389863a proc: proc_skip_spaces() shouldn't think it is working on C strings 4aa32aaef6 proc: avoid integer type confusion in get_proc_long 5f2f775605 block: unhash blkdev part inode when the part is deleted a82869ac52 Input: raydium_ts_i2c - fix memory leak in raydium_i2c_send() 4e0d6c687c char: tpm: Protect tpm_pm_suspend with locks 5a6f935ef3 Revert "clocksource/drivers/riscv: Events are stopped during CPU suspend" f075cf139f ACPI: HMAT: Fix initiator registration for single-initiator systems f3b76b4d38 ACPI: HMAT: remove unnecessary variable initialization 63e72417a1 i2c: imx: Only DMA messages with I2C_M_DMA_SAFE flag set df76136598 i2c: npcm7xx: Fix error handling in npcm_i2c_init() 7462cd2443 x86/pm: Add enumeration check before spec MSRs save/restore setup 5e3d4a68e2 x86/tsx: Add a feature bit for TSX control MSR support b7f7a0402e Revert "tty: n_gsm: avoid call of sleeping functions from atomic context" 481f9ed8eb ipv4: Fix route deletion when nexthop info is not specified 0b5394229e ipv4: Handle attempt to delete multipath route when fib_info contains an nh reference 4919503426 selftests: net: fix nexthop warning cleanup double ip typo 7ca14c5f24 selftests: net: add delete nexthop route warning test f09ac62f0e Kconfig.debug: provide a little extra FRAME_WARN leeway when KASAN is enabled 19d91d3798 parisc: Increase FRAME_WARN to 2048 bytes on parisc fcf20da099 xtensa: increase size of gcc stack frame check a1877001ed parisc: Increase size of gcc stack frame check a5c65cd56a iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init() 10ed7655a1 iommu/vt-d: Fix PCI device refcount leak in has_external_pci() 302edce1dd pinctrl: single: Fix potential division by zero b50c964189 ASoC: ops: Fix bounds check for _sx controls a2efc46524 io_uring: don't hold uring_lock when calling io_run_task_work* be111ebd88 tracing: Free buffers when a used dynamic event is removed 648b92e576 drm/i915: Never return 0 if not all requests retired 8649c023c4 drm/amdgpu: temporarily disable broken Clang builds due to blown stack-frame 940b774069 mmc: sdhci: Fix voltage switch delay ed19662453 mmc: sdhci-sprd: Fix no reset data and command after voltage switch ef767907e7 mmc: sdhci-esdhc-imx: correct CQHCI exit halt state check 46ee041cd6 mmc: core: Fix ambiguous TRIM and DISCARD arg b79be962b5 mmc: mmc_test: Fix removal of debugfs file d4fc344c0d net: stmmac: Set MAC's flow control register to reflect current settings 549e24409a pinctrl: intel: Save and restore pins in "direct IRQ" mode 471fb7b735 x86/bugs: Make sure MSR_SPEC_CTRL is updated properly upon resume from S3 e858917ab7 nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry() 6ddf788400 tools/vm/slabinfo-gnuplot: use "grep -E" instead of "egrep" c099d12c55 error-injection: Add prompt for function error injection 26b6f927bb riscv: vdso: fix section overlapping under some conditions 2b1d8f27e2 net/mlx5: DR, Fix uninitialized var warning c40db1e5f3 hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() f06e0cd01e hwmon: (coretemp) Check for null before removing sysfs attrs d93522d04f net: ethernet: renesas: ravb: Fix promiscuous mode after system resumed 176ee6c673 sctp: fix memory leak in sctp_stream_outq_migrate() 1c38c88acc packet: do not set TP_STATUS_CSUM_VALID on CHECKSUM_COMPLETE 5f442e1d40 net: tun: Fix use-after-free in tun_detach() 5fa0fc5876 afs: Fix fileserver probe RTT handling 7ca81a161e net: hsr: Fix potential use-after-free a1ba595e35 tipc: re-fetch skb cb after tipc_msg_validate 4621bdfff5 dsa: lan9303: Correct stat name 45752af024 net: ethernet: nixge: fix NULL dereference e01c154237 net/9p: Fix a potential socket leak in p9_socket_open b080d4668f net: net_netdev: Fix error handling in ntb_netdev_init_module() fe6bc99c27 net: phy: fix null-ptr-deref while probe() failed 0184ede0ec wifi: mac8021: fix possible oob access in ieee80211_get_rate_duration e2ed90fd3a wifi: cfg80211: don't allow multi-BSSID in S1G 9e6b79a3cd wifi: cfg80211: fix buffer overflow in elem comparison 6922948c2e aquantia: Do not purge addresses when setting the number of rings fa59d49a49 qlcnic: fix sleep-in-atomic-context bugs caused by msleep d753f554f2 can: cc770: cc770_isa_probe(): add missing free_cc770dev() e74746bf04 can: sja1000_isa: sja1000_isa_probe(): add missing free_sja1000dev() 0d2f9d95d9 net/mlx5e: Fix use-after-free when reverting termination table 2cb84ff349 net/mlx5: Fix uninitialized variable bug in outlen_write() b775f37d94 e100: Fix possible use after free in e100_xmit_prepare 086f656e44 e100: switch from 'pci_' to 'dma_' API 971c55f076 iavf: Fix error handling in iavf_init_module() d389a4c698 iavf: remove redundant ret variable fd4960ea53 fm10k: Fix error handling in fm10k_init_module() dd425cec79 i40e: Fix error handling in i40e_init_module() f166c62cad ixgbevf: Fix resource leak in ixgbevf_init_module() 8f7047f418 of: property: decrement node refcount in of_fwnode_get_reference_args() be006212bd bpf: Do not copy spin lock field from user in bpf_selem_alloc 90907cd4d1 hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails 7649bba263 hwmon: (i5500_temp) fix missing pci_disable_device() dddfc03f04 hwmon: (ina3221) Fix shunt sum critical calculation 984fcd3ec1 hwmon: (ltc2947) fix temperature scaling 8a549ab672 libbpf: Handle size overflow for ringbuf mmap cc140c729c ARM: at91: rm9200: fix usb device clock id 592724b14d scripts/faddr2line: Fix regression in name resolution on ppc64le 353c3aaaf3 bpf, perf: Use subprog name when reporting subprog ksymbol d48f6a5784 iio: light: rpr0521: add missing Kconfig dependencies 5eb114f55b iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw b1756af172 iio: health: afe4403: Fix oob read in afe4403_read_raw 01d7c41eac btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit() d3f5be8246 drm/amdgpu: Partially revert "drm/amdgpu: update drm_display_info correctly when the edid is read" 00570fafc2 drm/amdgpu: update drm_display_info correctly when the edid is read 44b204730b drm/display/dp_mst: Fix drm_dp_mst_add_affected_dsc_crtcs() return code 1faf21bdd1 btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker 6050872f9f spi: spi-imx: Fix spi_bus_clk if requested clock is higher than input clock 7b020665d4 btrfs: free btrfs_path before copying inodes to userspace d5b7a34379 btrfs: sink iterator parameter to btrfs_ioctl_logical_to_ino f3226d86f8 Revert "xfrm: fix "disable_policy" on ipv4 early demux" 982d7f3eb8 Merge 5.10.157 into android12-5.10-lts 37d3df60cb ANDROID: CRC ABI fixups in ip.h and ipv6.h f4245f0538 Linux 5.10.157 4801672fb0 fuse: lock inode unconditionally in fuse_fallocate() 86f0082fb9 drm/i915: fix TLB invalidation for Gen12 video and compute engines feb97cf45e drm/amdgpu: always register an MMU notifier for userptr 596b7d55d7 drm/amd/dc/dce120: Fix audio register mapping, stop triggering KASAN c86c1a7037 btrfs: sysfs: normalize the error handling branch in btrfs_init_sysfs() 1581830c0e btrfs: free btrfs_path before copying subvol info to userspace 0bdb8f7ef8 btrfs: free btrfs_path before copying fspath to userspace 24a37ba2cb btrfs: free btrfs_path before copying root refs to userspace b56d6e5585 genirq: Take the proposed affinity at face value if force==true 9d90a2b98e irqchip/gic-v3: Always trust the managed affinity provided by the core code e0d2c59ee9 genirq: Always limit the affinity to online CPUs f8f80d532f genirq/msi: Shutdown managed interrupts with unsatifiable affinities 3eb6b89a4e wifi: wilc1000: validate number of channels 5a068535c0 wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute 905f886eae wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute 7c6535fb4d wifi: wilc1000: validate pairwise and authentication suite offsets 64b7f9a7dd dm integrity: clear the journal on suspend d306f73079 dm integrity: flush the journal on suspend 79d9a11679 gpu: host1x: Avoid trying to use GART on Tegra20 a7f30b5b8d net: usb: qmi_wwan: add Telit 0x103a composition 7e8eaa939e tcp: configurable source port perturb table size 0acc008cf9 platform/x86: hp-wmi: Ignore Smart Experience App event 0964b77bab zonefs: fix zone report size in __zonefs_io_error() a5937dae66 platform/x86: acer-wmi: Enable SW_TABLET_MODE on Switch V 10 (SW5-017) 52fb7bcea0 platform/x86: asus-wmi: add missing pci_dev_put() in asus_wmi_set_xusb2pr() 4fa717ba2d xen/platform-pci: add missing free_irq() in error path f45a5a6c9f xen-pciback: Allow setting PCI_MSIX_FLAGS_MASKALL too 9bbb587472 Input: soc_button_array - add Acer Switch V 10 to dmi_use_low_level_irq[] 4ea4316dff Input: soc_button_array - add use_low_level_irq module parameter c1620e996d Input: goodix - try resetting the controller when no config is set f4db050958 serial: 8250: 8250_omap: Avoid RS485 RTS glitch on ->set_termios() 7c3e39ccf5 ASoC: Intel: bytcht_es8316: Add quirk for the Nanote UMPC-01 36e0b97619 Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode ae9e0cc973 binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0 017de84253 binder: Address corner cases in deferred copy and fixup 2e3c27f241 binder: fix pointer cast warning c9d3f25a7f binder: defer copies of pre-patched txn data 5204296fc7 binder: read pre-translated fds from sender buffer 23e9d815fa binder: avoid potential data leakage when copying txn 22870431cd x86/ioremap: Fix page aligned size calculation in __ioremap_caller() 3fdeacf087 KVM: x86: remove exit_int_info warning in svm_handle_exit 7e5cb13091 KVM: x86: nSVM: leave nested mode on vCPU free d925dd3e44 mm: vmscan: fix extreme overreclaim and swap floods a4a62a23fa gcov: clang: fix the buffer overflow issue e7f21d10e9 nilfs2: fix nilfs_sufile_mark_dirty() not set segment usage as dirty f06b7e6a77 usb: dwc3: gadget: Clear ep descriptor last cff7523ab8 usb: dwc3: gadget: Return -ESHUTDOWN on ep disable a32635528d usb: dwc3: gadget: conditionally remove requests ca3a08e9d9 ceph: fix NULL pointer dereference for req->r_session 00c004c070 ceph: Use kcalloc for allocating multiple elements 69263bf781 ceph: fix possible NULL pointer dereference for req->r_session 8e137ace53 ceph: put the requests/sessions when it fails to alloc memory 38993788f4 ceph: fix off by one bugs in unsafe_request_wait() 8a31ae7f77 ceph: flush the mdlog before waiting on unsafe reqs 78b2f546f7 ceph: flush mdlog before umounting d94ba7b3b7 ceph: make iterate_sessions a global symbol 9ac038d3c2 ceph: make ceph_create_session_msg a global symbol 8382cdf0ab usb: cdns3: Add support for DRD CDNSP 57112da86b mmc: sdhci-brcmstb: Fix SDHCI_RESET_ALL for CQHCI b5d770977b mmc: sdhci-brcmstb: Enable Clock Gating to save power 049194538c mmc: sdhci-brcmstb: Re-organize flags fbe955be26 nios2: add FORCE for vmlinuz.gz c0a9c9973d init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash 456e895fd0 iio: core: Fix entry not deleted when iio_register_sw_trigger_type() fails fa9efcbfbf iio: light: apds9960: fix wrong register for gesture gain bd1b8041c2 arm64: dts: rockchip: lower rk3399-puma-haikou SD controller clock frequency 86ba9c8595 ext4: fix use-after-free in ext4_ext_shift_extents 350e98a08a usb: dwc3: exynos: Fix remove() function d21d26e65b lib/vdso: use "grep -E" instead of "egrep" c0cf8bc259 net: enetc: preserve TX ring priority across reconfiguration de4dd4f9b3 net: enetc: cache accesses to &priv->si->hw 1f080b8caa net: enetc: manage ENETC_F_QBV in priv->active_offloads only when enabled 1d840c5d67 s390/crashdump: fix TOD programmable field size 11052f1188 net: thunderx: Fix the ACPI memory leak b034fe2a08 nfc: st-nci: fix memory leaks in EVT_TRANSACTION e14583073f nfc: st-nci: fix incorrect validating logic in EVT_TRANSACTION 9cc863d523 arcnet: fix potential memory leak in com20020_probe() 4d2be0cf27 net: arcnet: Fix RESET flag handling e61b00374a s390/dasd: fix no record found for raw_track_access aeebb07499 ipv4: Fix error return code in fib_table_insert() c0af4d005a dccp/tcp: Reset saddr on failure after inet6?_hash_connect(). b8e494240e netfilter: flowtable_offload: add missing locking af9de5cdcb dma-buf: fix racing conflict of dma_heap_add() c40b76dfa7 bnx2x: fix pci device refcount leak in bnx2x_vf_is_pcie_pending() f81e9c0510 regulator: twl6030: re-add TWL6032_SUBCLASS 32b944b9c4 NFC: nci: fix memory leak in nci_rx_data_packet() 68a7aec3f4 net: sched: allow act_ct to be built without NF_NAT 8e2664e12b sfc: fix potential memleak in __ef100_hard_start_xmit() 6b638a16ea xfrm: Fix ignored return value in xfrm6_init() c7788361a6 tipc: check skb_linearize() return value in tipc_disc_rcv() 4058e3b74a tipc: add an extra conn_get in tipc_conn_alloc e87a077d09 tipc: set con sock in tipc_conn_alloc 891daa95b0 net/mlx5: Fix handling of entry refcount when command is not issued to FW e06ff9f8fe net/mlx5: Fix FW tracer timestamp calculation 5689eba90a netfilter: ipset: regression in ip_set_hash_ip.c e62e62ea91 netfilter: ipset: Limit the maximal range of consecutive elements to add/delete 8dca384970 Drivers: hv: vmbus: fix possible memory leak in vmbus_device_register() 909186cf34 Drivers: hv: vmbus: fix double free in the error path of vmbus_add_channel_work() f42802e14a macsec: Fix invalid error code set 72be055615 nfp: add port from netdev validation for EEPROM access ce41e03cac nfp: fill splittable of devlink_port_attrs correctly 0b553ded34 net: pch_gbe: fix pci device refcount leak while module exiting 2c59ef9ab6 net/qla3xxx: fix potential memleak in ql3xxx_send() a24d5f6c8b net/mlx4: Check retval of mlx4_bitmap_init da86a63479 net: ethernet: mtk_eth_soc: fix error handling in mtk_open() 756534f7cf ARM: dts: imx6q-prti6q: Fix ref/tcxo-clock-frequency properties 290a71ff72 ARM: mxs: fix memory leak in mxs_machine_init() 5c97af75f5 netfilter: conntrack: Fix data-races around ct mark 459332f8db 9p/fd: fix issue of list_del corruption in p9_fd_cancel() 26bb8f6aaa net: pch_gbe: fix potential memleak in pch_gbe_tx_queue() 398a860a44 nfc/nci: fix race with opening and closing 3535c632e6 rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975] 23c03ee0ee rxrpc: Use refcount_t rather than atomic_t bddde342c6 rxrpc: Allow list of in-use local UDP endpoints to be viewed in /proc a2d5dba2fc net: liquidio: simplify if expression 8124a02e17 ARM: dts: at91: sam9g20ek: enable udc vbus gpio pinctrl b547bf71fa tee: optee: fix possible memory leak in optee_register_device() b76c5a99f4 bus: sunxi-rsb: Support atomic transfers 0c059b7d2a regulator: core: fix UAF in destroy_regulator() fcb2d28636 spi: dw-dma: decrease reference count in dw_spi_dma_init_mfld() 0b6441abfa regulator: core: fix kobject release warning and memory leak in regulator_register() 26d3d3ffa8 scsi: storvsc: Fix handling of srb_status and capacity change events c34db0d6b8 ASoC: soc-pcm: Don't zero TDM masks in __soc_pcm_open() 4f6c7344ab ASoC: sgtl5000: Reset the CHIP_CLK_CTRL reg on remove 164a5b50d1 ASoC: hdac_hda: fix hda pcm buffer overflow issue 7cfb4b8579 ARM: dts: am335x-pcm-953: Define fixed regulators in root node b7000254c1 af_key: Fix send_acquire race with pfkey_register 51969d679b xfrm: replay: Fix ESN wrap around for GSO 497653f6d2 xfrm: fix "disable_policy" on ipv4 early demux 836bbdfcf8 MIPS: pic32: treat port as signed integer c0bb600f07 RISC-V: vdso: Do not add missing symbols to version section in linker script 81cc6d8400 arm64/syscall: Include asm/ptrace.h in syscall_wrapper header. fa5f2c72d3 block, bfq: fix null pointer dereference in bfq_bio_bfqg() d29bde8689 drm: panel-orientation-quirks: Add quirk for Acer Switch V 10 (SW5-017) f7ce6fb04e scsi: scsi_debug: Make the READ CAPACITY response compliant with ZBC 2574903ee2 scsi: ibmvfc: Avoid path failures during live migration 7fc62181c1 platform/x86: touchscreen_dmi: Add info for the RCA Cambio W101 v2 2-in-1 f54a11b6bf Revert "net: macsec: report real_dev features when HW offloading is enabled" f4b8c0710a selftests/bpf: Add verifier test for release_reference() 361a165098 spi: stm32: fix stm32_spi_prepare_mbr() that halves spi clk for every run 2c1ca23555 wifi: mac80211: Fix ack frame idr leak when mesh has no route 8d39913158 wifi: airo: do not assign -1 to unsigned char 8552e6048e audit: fix undefined behavior in bit shift for AUDIT_BIT 1c9eb641d1 riscv: dts: sifive unleashed: Add PWM controlled LEDs 92ae6facd1 wifi: mac80211_hwsim: fix debugfs attribute ps with rc table support 2fcc593b50 wifi: mac80211: fix memory free error when registering wiphy fail 044bc6d3c2 ceph: avoid putting the realm twice when decoding snaps fails d43219bb33 ceph: do not update snapshot context when there is no new snapshot 49c71b6814 iio: pressure: ms5611: fixed value compensation bug 879139bc7a iio: ms5611: Simplify IO callback parameters 80c825e1e3 nvme-pci: add NVME_QUIRK_BOGUS_NID for Micron Nitro f4066fb910 nvme: add a bogus subsystem NQN quirk for Micron MTFDKBA2T0TFH 4f0cea018e drm/display: Don't assume dual mode adaptors support i2c sub-addressing 347f1793b5 bridge: switchdev: Fix memory leaks when changing VLAN protocol 89a7f155e6 bridge: switchdev: Notify about VLAN protocol changes f5cbd86ebf ata: libata-core: do not issue non-internal commands once EH is pending 4034d06a4d ata: libata-scsi: simplify __ata_scsi_queuecmd() 03aabcb88a scsi: scsi_transport_sas: Fix error handling in sas_phy_add() d9b90a99f3 Merge 5.10.156 into android12-5.10-lts 25af5a11f1 Merge 5.10.155 into android12-5.10-lts e5d2cd6ad8 ANDROID: abi preservation for fscrypt change in 5.10.154 5bc3ece380 Revert "serial: 8250: Let drivers request full 16550A feature probing" f466ca1247 Merge 5.10.154 into android12-5.10-lts 6d46ef50b1 Linux 5.10.156 7be134eb69 Revert "net: broadcom: Fix BCMGENET Kconfig" 957732a09c ntfs: check overflow when iterating ATTR_RECORDs 6322dda483 ntfs: fix out-of-bounds read in ntfs_attr_find() b825bfbbaa ntfs: fix use-after-free in ntfs_attr_find() 294ef12dcc mm: fs: initialize fsdata passed to write_begin/write_end interface a8e2fc8f7b 9p/trans_fd: always use O_NONBLOCK read/write a5da76df46 gfs2: Switch from strlcpy to strscpy 5fa30be7ba gfs2: Check sb_bsize_shift after reading superblock f14858bc77 9p: trans_fd/p9_conn_cancel: drop client lock earlier 4154b6afa2 kcm: close race conditions on sk_receive_queue 7deb7a9d33 kcm: avoid potential race in kcm_tx_work 35309be06b tcp: cdg: allow tcp_cdg_release() to be called multiple times e929ec98c0 macvlan: enforce a consistent minimal mtu 95ebea5a15 uapi/linux/stddef.h: Add include guards 3f25add5ec Input: i8042 - fix leaking of platform device on module removal 7d606ae1ab kprobes: Skip clearing aggrprobe's post_handler in kprobe-on-ftrace case 89ece5ff7d scsi: scsi_debug: Fix possible UAF in sdebug_add_host_helper() 75205f1b47 scsi: target: tcm_loop: Fix possible name leak in tcm_loop_setup_hba_bus() 6e9334436d net: use struct_group to copy ip/ipv6 header addresses 9fd7bdaffe stddef: Introduce struct_group() helper macro 47c3bdd955 usbnet: smsc95xx: Fix deadlock on runtime resume 8208c266fe ring-buffer: Include dropped pages in counting dirty patches 36b5095b07 net: fix a concurrency bug in l2tp_tunnel_register() 023435a095 nvme: ensure subsystem reset is single threaded b9a5ecf241 nvme: restrict management ioctls to admin 5e2f14d772 perf/x86/intel/pt: Fix sampling using single range output 62634b43d3 misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() c1eb46a65b docs: update mediator contact information in CoC doc 4423866d31 mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put() 440653a180 mmc: sdhci-pci-o2micro: fix card detect fail issue caused by CD# debounce timeout 8e70b14131 mmc: core: properly select voltage range without power cycle 05b0f6624d firmware: coreboot: Register bus in module init deda86a0d8 iommu/vt-d: Set SRE bit only when hardware has SRS cap d2c7d8f58e scsi: zfcp: Fix double free of FSF request when qdio send fails db744288af maccess: Fix writing offset in case of fault in strncpy_from_kernel_nofault() 24cc679abb Input: iforce - invert valid length check when fetching device IDs 5f4611fe01 serial: 8250_lpss: Configure DMA also w/o DMA filter 8679087e93 serial: 8250: Flush DMA Rx on RLSI a5eaad87bf serial: 8250: Fall back to non-DMA Rx if IIR_RDI occurs f59f5a269c dm ioctl: fix misbehavior if list_versions races with module loading 67a75a9480 iio: pressure: ms5611: changed hardcoded SPI speed to value limited d95b85c508 iio: adc: mp2629: fix potential array out of bound access 46b8bc62c5 iio: adc: mp2629: fix wrong comparison of channel 8dddf2699d iio: trigger: sysfs: fix possible memory leak in iio_sysfs_trig_init() 85d2a8b287 iio: adc: at91_adc: fix possible memory leak in at91_adc_allocate_trigger() 85cc1a2fd8 usb: typec: mux: Enter safe mode only when pins need to be reconfigured efaab05520 usb: chipidea: fix deadlock in ci_otg_del_timer 143ba5c2d2 usb: add NO_LPM quirk for Realforce 87U Keyboard 249cef723f USB: serial: option: add Fibocom FM160 0x0111 composition 5c44c60358 USB: serial: option: add u-blox LARA-L6 modem 0e88a3cfa6 USB: serial: option: add u-blox LARA-R6 00B modem de707957d9 USB: serial: option: remove old LARA-R6 PID 878227a3dd USB: serial: option: add Sierra Wireless EM9191 25c652811d USB: bcma: Make GPIO explicitly optional eb3af3ea5b speakup: fix a segfault caused by switching consoles 8cbaf4ed53 slimbus: stream: correct presence rate frequencies 15155f7c0e Revert "usb: dwc3: disable USB core PHY management" 100d1e53bb ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book Pro 360 c7dcc89482 ALSA: hda/realtek: fix speakers for Samsung Galaxy Book Pro a80369c8ca ALSA: usb-audio: Drop snd_BUG_ON() from snd_usbmidi_output_open() 28a54854a9 tracing: kprobe: Fix potential null-ptr-deref on trace_array in kprobe_event_gen_test_exit() bb70fcae41 tracing: kprobe: Fix potential null-ptr-deref on trace_event_file in kprobe_event_gen_test_exit() 315b149f08 tracing: Fix wild-memory-access in register_synth_event() 65ba7e7c24 tracing: Fix memory leak in test_gen_synth_cmd() and test_empty_synth_event() 5d4cc7bc1a tracing/ring-buffer: Have polling block on watermark 5fdebbeca5 ring_buffer: Do not deactivate non-existant pages 6a14828cad ftrace: Fix null pointer dereference in ftrace_add_mod() 6ed60c60ec ftrace: Optimize the allocation for mcount entries 9569eed79b ftrace: Fix the possible incorrect kernel message 5fc19c8313 cifs: add check for returning value of SMB2_set_info_init 0aeb0de528 net: thunderbolt: Fix error handling in tbnet_init() e13ef43813 cifs: Fix wrong return value checking when GETFLAGS 9f00da9c86 net/x25: Fix skb leak in x25_lapb_receive_frame() 94822d2331 net: ag71xx: call phylink_disconnect_phy if ag71xx_hw_enable() fail in ag71xx_open() 3aeb13bc3d cifs: add check for returning value of SMB2_close_init c24013273e platform/x86/intel: pmc: Don't unconditionally attach Intel PMC when virtualized 9ed51414ae drbd: use after free in drbd_create_device() 6b23a4b252 net: ena: Fix error handling in ena_init() 2d5a495501 net: ionic: Fix error handling in ionic_init_module() bb9924a6ed xen/pcpu: fix possible memory leak in register_pcpu() d6a561bd4c bnxt_en: Remove debugfs when pci_register_driver failed 389738f5db net: caif: fix double disconnect client in chnl_net_open() fb5ee1560b net: macvlan: Use built-in RCU list checking 709aa1f73d mISDN: fix misuse of put_device() in mISDN_register_device() 417f2d2edf net: liquidio: release resources when liquidio driver open failed 4cba73f2d6 net: hinic: Fix error handling in hinic_module_init() 083a2c9ef8 mISDN: fix possible memory leak in mISDN_dsp_element_register() 6b23993d5b net: bgmac: Drop free_netdev() from bgmac_enet_remove() 1f6a73b25d bpf: Initialize same number of free nodes for each pcpu_freelist ef2ac07ab8 ata: libata-transport: fix error handling in ata_tdev_add() 7377a14598 ata: libata-transport: fix error handling in ata_tlink_add() b5362dc163 ata: libata-transport: fix error handling in ata_tport_add() ac471468f7 ata: libata-transport: fix double ata_host_put() in ata_tport_add() ac4f404c25 arm64: dts: imx8mn: Fix NAND controller size-cells 30ece7dbee arm64: dts: imx8mm: Fix NAND controller size-cells f68a9efd78 ARM: dts: imx7: Fix NAND controller size-cells 1d160dfb3f drm: Fix potential null-ptr-deref in drm_vblank_destroy_worker() c47a823ea1 drm/drv: Fix potential memory leak in drm_dev_init() c776a49d09 drm/panel: simple: set bpc field for logic technologies displays 777430aa4d pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map bce3e6fe8b parport_pc: Avoid FIFO port location truncation a4b5423f88 siox: fix possible memory leak in siox_device_add() 0679f571d3 arm64: Fix bit-shifting UB in the MIDR_CPU_MODEL() macro 58636b5ff3 block: sed-opal: kmalloc the cmd/resp buffers e27458b18b sctp: clear out_curr if all frag chunks of current msg are pruned 0b4c259b63 sctp: remove the unnecessary sinfo_stream check in sctp_prsctp_prune_unsent 7360e7c29d ASoC: soc-utils: Remove __exit for snd_soc_util_exit() e60f37a1d3 bpf, test_run: Fix alignment problem in bpf_prog_test_run_skb() b8fe1a5aa7 tty: n_gsm: fix sleep-in-atomic-context bug in gsm_control_send 0a3160f4ff serial: imx: Add missing .thaw_noirq hook 7e1f908e65 serial: 8250: omap: Flush PM QOS work on remove d833cba201 serial: 8250: omap: Fix unpaired pm_runtime_put_sync() in omap8250_remove() b0b6ea651e serial: 8250_omap: remove wait loop from Errata i202 workaround f14c312c21 serial: 8250: omap: Fix missing PM runtime calls for omap8250_set_mctrl() 85cdbf04b4 serial: 8250: Remove serial_rs485 sanitization from em485 f5dedad405 ASoC: tas2764: Fix set_tdm_slot in case of single slot 9e82d78fbe ASoC: tas2770: Fix set_tdm_slot in case of single slot 8d21554ec7 ASoC: core: Fix use-after-free in snd_soc_exit() 38ca9bd336 spi: stm32: Print summary 'callbacks suppressed' message a180da5564 drm/amdgpu: disable BACO on special BEIGE_GOBY card f3adf0adf3 drm/amd/pm: disable BACO entry/exit completely on several sienna cichlid cards b0faeff69a drm/amd/pm: Read BIF STRAP also for BACO check 6958556285 drm/amd/pm: support power source switch on Sienna Cichlid 7daab001a6 mmc: sdhci-esdhc-imx: use the correct host caps for MMC_CAP_8_BIT_DATA 65ac4d1807 spi: intel: Use correct mask for flash and protected regions 23793518a7 mtd: spi-nor: intel-spi: Disable write protection only if asked a326fffdc7 ALSA: hda/realtek: fix speakers and micmute on HP 855 G8 24839d027c ASoC: codecs: jz4725b: Fix spelling mistake "Sourc" -> "Source", "Routee" -> "Route" bd48793240 Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm ce75e90859 btrfs: remove pointless and double ulist frees in error paths of qgroup tests 16743c4bf3 drm/imx: imx-tve: Fix return type of imx_tve_connector_mode_valid df2747f295 i2c: i801: add lis3lv02d's I2C address for Vostro 5568 959cb0fd69 i2c: tegra: Allocate DMA memory for DMA engine 6cb657722e NFSv4: Retry LOCK on OLD_STATEID during delegation return f0187227e2 drm/amd/display: Remove wrong pipe control lock bb3edbd092 ASoC: rt1308-sdw: add the default value of some registers b1619f0307 selftests/intel_pstate: fix build for ARCH=x86_64 fdf6807606 selftests/futex: fix build for clang c1f0defecb ASoC: codecs: jz4725b: fix capture selector naming aeb7e8bc0d ASoC: codecs: jz4725b: use right control for Capture Volume c87945c173 ASoC: codecs: jz4725b: fix reported volume for Master ctl 9aae00961a ASoC: codecs: jz4725b: add missed Line In power control bit 0b4d650f90 spi: intel: Fix the offset to get the 64K erase opcode 6910e7279f ASoC: wm8962: Add an event handler for TEMP_HP and TEMP_SPK c7432616f6 ASoC: mt6660: Keep the pm_runtime enables before component stuff in mt6660_i2c_probe a47606064c ASoC: wm8997: Revert "ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe" f8f254c8b5 ASoC: wm5110: Revert "ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe" c73aa2cc41 ASoC: wm5102: Revert "ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe" 673a7341bd Merge 5.10.153 into android12-5.10-lts 27b36ba7c2 Merge 5.10.152 into android12-5.10-lts bf759deb0f Merge 5.10.151 into android12-5.10-lts 6b31c548a1 ANDROID: fix up struct sk_buf ABI breakage bd66e91ad2 ANDROID: fix up CRC issue with struct tcp_sock 3905cfd1d6 Revert "serial: 8250: Toggle IER bits on only after irq has been set up" 41217963b1 Linux 5.10.155 0f544353fe io_uring: kill goto error handling in io_sqpoll_wait_sq() 154d744fbe x86/cpu: Restore AMD's DE_CFG MSR after resume e7294b01de mmc: sdhci-esdhc-imx: Convert the driver to DT-only 534762e261 net: tun: call napi_schedule_prep() to ensure we own a napi 367bc0fa98 dmaengine: at_hdmac: Check return code of dma_async_device_register 85f97c97ef dmaengine: at_hdmac: Fix impossible condition f53a233eaa dmaengine: at_hdmac: Don't allow CPU to reorder channel enable f451285522 dmaengine: at_hdmac: Fix completion of unissued descriptor in case of errors 6be4ab08c8 dmaengine: at_hdmac: Fix descriptor handling when issuing it to hardware a35dd5dd98 dmaengine: at_hdmac: Fix concurrency over the active list 0f603bf553 dmaengine: at_hdmac: Free the memset buf without holding the chan lock 7f07cecc74 dmaengine: at_hdmac: Fix concurrency over descriptor 1582cc3b48 dmaengine: at_hdmac: Fix concurrency problems by removing atc_complete_all() 9b69060a72 dmaengine: at_hdmac: Protect atchan->status with the channel lock ee35682261 dmaengine: at_hdmac: Do not call the complete callback on device_terminate_all 7078e935b4 dmaengine: at_hdmac: Fix premature completion of desc in issue_pending ad4cbe8e9c dmaengine: at_hdmac: Start transfer for cyclic channels in issue_pending 24f9e93e50 dmaengine: at_hdmac: Don't start transactions at tx_submit level 4b51cce72a dmaengine: at_hdmac: Fix at_lli struct definition d37dfb9357 cert host tools: Stop complaining about deprecated OpenSSL functions f8e0edeaa0 can: j1939: j1939_send_one(): fix missing CAN header initialization 0b692d41ee mm/memremap.c: map FS_DAX device memory as decrypted 03f9582a6a udf: Fix a slab-out-of-bounds write bug in udf_find_entry() 4ea3aa3b98 mms: sdhci-esdhc-imx: Fix SDHCI_RESET_ALL for CQHCI 9c0accfa5a btrfs: selftests: fix wrong error check in btrfs_free_dummy_root() 8fa0c22ef8 platform/x86: hp_wmi: Fix rfkill causing soft blocked wifi b5ee579fcb drm/i915/dmabuf: fix sg_table handling in map_dma_buf 4feedde548 nilfs2: fix use-after-free bug of ns_writer on remount 1d4ff73062 nilfs2: fix deadlock in nilfs_count_free_blocks() 344ddbd688 ata: libata-scsi: fix SYNCHRONIZE CACHE (16) command failure 516f9f2300 vmlinux.lds.h: Fix placement of '.data..decrypted' section f6896fb69d ALSA: usb-audio: Add DSD support for Accuphase DAC-60 2032c2d32b ALSA: usb-audio: Add quirk entry for M-Audio Micro a414a6d6ef ALSA: hda/realtek: Add Positivo C6300 model quirk 3a79f9568d ALSA: hda: fix potential memleak in 'add_widget_node' 380d64168d ALSA: hda/ca0132: add quirk for EVGA Z390 DARK 181cfff57b ALSA: hda/hdmi - enable runtime pm for more AMD display audio ea6787e482 mmc: sdhci-tegra: Fix SDHCI_RESET_ALL for CQHCI 0a8d4531a0 mmc: sdhci_am654: Fix SDHCI_RESET_ALL for CQHCI 3f558930ad mmc: sdhci-of-arasan: Fix SDHCI_RESET_ALL for CQHCI b55e64d0a3 mmc: cqhci: Provide helper for resetting both SDHCI and CQHCI 4631cb0406 MIPS: jump_label: Fix compat branch range check 475fd3991a arm64: efi: Fix handling of misaligned runtime regions and drop warning 94ab8f88fe riscv: fix reserved memory setup 0cf9cb0614 riscv: Separate memory init from paging init d7716240bc riscv: Enable CMA support ecf78af514 riscv: vdso: fix build with llvm e56d18a976 riscv: process: fix kernel info leakage 956e0216a1 net: macvlan: fix memory leaks of macvlan_common_newlink 59ec132386 ethernet: tundra: free irq when alloc ring failed in tsi108_open() dd7beaec8b net: mv643xx_eth: disable napi when init rxq or txq failed in mv643xx_eth_open() 56d3b5531b ethernet: s2io: disable napi when start nic failed in s2io_card_up() 05b2228434 net: atlantic: macsec: clear encryption keys from the stack 1a4e495edf net: phy: mscc: macsec: clear encryption keys when freeing a flow 4ad684ba02 cxgb4vf: shut down the adapter when t4vf_update_port_info() failed in cxgb4vf_open() 38aa7ed8c2 net: cxgb3_main: disable napi when bind qsets failed in cxgb_up() fd52dd2d6e net: cpsw: disable napi in cpsw_ndo_open() 3b27e20601 net/mlx5e: E-Switch, Fix comparing termination table instance eb6fa0ac2a net/mlx5: Allow async trigger completion execution on single CPU systems bdd282bba7 net: nixge: disable napi when enable interrupts failed in nixge_open() 5333cf1b7f net: marvell: prestera: fix memory leak in prestera_rxtx_switch_init() cf4853880e perf stat: Fix printing os->prefix in CSV metrics output 3a4a3c3b1f drivers: net: xgene: disable napi when register irq failed in xgene_enet_open() 0b7ee3d50f dmaengine: mv_xor_v2: Fix a resource leak in mv_xor_v2_remove() 6e2ffae69d dmaengine: pxa_dma: use platform_get_irq_optional f31dd15858 tipc: fix the msg->req tlv len check in tipc_nl_compat_name_table_dump_header fbb4e8e6dc net: broadcom: Fix BCMGENET Kconfig cb6d639bb1 net: stmmac: dwmac-meson8b: fix meson8b_devm_clk_prepare_enable() d68fa77ee3 can: af_can: fix NULL pointer dereference in can_rx_register() a033b86c7f ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network 02f8dfee75 tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent f3aa8a7d95 drm/vc4: Fix missing platform_unregister_drivers() call in vc4_drm_register() bcb3bb1069 hamradio: fix issue of dev reference count leakage in bpq_device_event() bc4591a86b net: lapbether: fix issue of dev reference count leakage in lapbeth_device_event() 2bf8b1c111 KVM: s390: pv: don't allow userspace to set the clock under PV a60cc64db7 KVM: s390x: fix SCK locking fcbd2b3368 capabilities: fix undefined behavior in bit shift for CAP_TO_MASK 8aae24b0ed net: fman: Unregister ethernet device on removal e2c5ee3b62 bnxt_en: fix potentially incorrect return value for ndo_rx_flow_steer 38147073c9 bnxt_en: Fix possible crash in bnxt_hwrm_set_coal() 3401f96402 net: tun: Fix memory leaks of napi_get_frags adaa0f180d macsec: clear encryption keys from the stack after setting up offload 9dc7503bae macsec: fix detection of RXSCs when toggling offloading 7f4456f011 macsec: fix secy->n_rx_sc accounting 3b05d9073a macsec: delete new rxsc when offload fails 50868de7dc net: gso: fix panic on frag_list with mixed head alloc types cedd4f01f6 bpf: Fix wrong reg type conversion in release_reference() 9069db2579 bpf: Add helper macro bpf_for_each_reg_in_vstate 95b6ec7337 bpf: Support for pointers beyond pkt_end. 8597b59e3d HID: hyperv: fix possible memory leak in mousevsc_probe() 8c80b2fca4 bpftool: Fix NULL pointer dereference when pin {PROG, MAP, LINK} without FILE cc21dc48a7 bpf, sockmap: Fix the sk->sk_forward_alloc warning of sk_stream_kill_queues e1e1218032 wifi: cfg80211: fix memory leak in query_regdb_file() 914cb94e73 wifi: cfg80211: silence a sparse RCU warning 72ea2fc299 phy: stm32: fix an error code in probe 925bf1ba76 hwspinlock: qcom: correct MMIO max register for newer SoCs 76eba54f0d fuse: fix readdir cache race 7bcea6c5c9 ANDROID: gki_defconfig: remove CONFIG_INIT_STACK_ALL_ZERO=y d2bc3376cd Revert "serial: 8250: Fix restoring termios speed after suspend" 0b500f5b16 Merge 5.10.150 into android12-5.10-lts f5b40c0eb9 Linux 5.10.154 bf506e366d ipc: remove memcg accounting for sops objects in do_semtimedop() c6678c8f4f wifi: brcmfmac: Fix potential buffer overflow in brcmf_fweh_event_worker() a6c57adec5 drm/i915/sdvo: Setup DDC fully before output init b86830cc95 drm/i915/sdvo: Filter out invalid outputs more sensibly 9f3b867808 drm/rockchip: dsi: Force synchronous probe 23f1fc7ce5 ext4,f2fs: fix readahead of verity data e5cef906cb KVM: x86: emulator: update the emulation mode after CR0 write ce9261accc KVM: x86: emulator: introduce emulator_recalc_and_set_mode c8a2fd7a71 KVM: x86: emulator: em_sysexit should update ctxt->mode e0c7410378 KVM: x86: Mask off reserved bits in CPUID.80000001H 9302ebc1c2 KVM: x86: Mask off reserved bits in CPUID.80000008H cc40c5f3e9 KVM: x86: Mask off reserved bits in CPUID.8000001AH bd64a88f36 KVM: x86: Mask off reserved bits in CPUID.80000006H 156451a67b ext4: fix BUG_ON() when directory entry has invalid rec_len 5370b965b7 ext4: fix warning in 'ext4_da_release_space' c9598cf629 parisc: Avoid printing the hardware path twice 98f836e80d parisc: Export iosapic_serial_irq() symbol for serial port driver 814af9a32b parisc: Make 8250_gsc driver dependend on CONFIG_PARISC 29d106d086 perf/x86/intel: Add Cooper Lake stepping to isolation_ucodes[] 98f6e7c337 perf/x86/intel: Fix pebs event constraints for ICL 3be2d66822 efi: random: Use 'ACPI reclaim' memory for random seed 83294f7c77 efi: random: reduce seed size to 32 bytes f8e8cda869 fuse: add file_modified() to fallocate cdf01c807e capabilities: fix potential memleak on error path from vfs_getxattr_alloc() ff32d8a099 tracing/histogram: Update document for KEYS_MAX size 533bfacbac tools/nolibc/string: Fix memcmp() implementation f100a02748 kprobe: reverse kp->flags when arm_kprobe failed bef08acbe5 tracing: kprobe: Fix memory leak in test_gen_kprobe/kretprobe_cmd() 2bf33b5ea4 tcp/udp: Make early_demux back namespacified. ea5f2fd464 ftrace: Fix use-after-free for dynamic ftrace_ops 06de93a47c btrfs: fix type of parameter generation in btrfs_get_dentry e33ce54cef coresight: cti: Fix hang in cti_disable_hw() 015ac18be7 binder: fix UAF of alloc->vma in race with munmap() 836686e1a0 memcg: enable accounting of ipc resources e4e4b24b42 mtd: rawnand: gpmi: Set WAIT_FOR_READY timeout based on program/erase times 818c36b988 tcp/udp: Fix memory leak in ipv6_renew_options(). 29997a6fa6 fscrypt: fix keyring memory leak on mount failure 391cceee6d fscrypt: stop using keyrings subsystem for fscrypt_master_key 092401142b fscrypt: simplify master key locking 54c13d3520 ALSA: usb-audio: Add quirks for MacroSilicon MS2100/MS2106 devices a0e2577cf3 block, bfq: protect 'bfqd->queued' by 'bfqd->lock' 26ca2ac091 Bluetooth: L2CAP: Fix attempting to access uninitialized memory 6b6f94fb9a Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM bfd5e62f9a i2c: piix4: Fix adapter not be removed in piix4_remove() fc3e2fa0a5 arm64: dts: juno: Add thermal critical trip points b743ecf29c firmware: arm_scmi: Make Rx chan_setup fail on memory errors 29e8e9bfc2 firmware: arm_scmi: Suppress the driver's bind attributes d7b1e2cbe0 ARM: dts: imx6qdl-gw59{10,13}: fix user pushbutton GPIO offset 160d8904b2 efi/tpm: Pass correct address to memblock_reserve c40b4d604b i2c: xiic: Add platform module alias 5bf8c7798b drm/amdgpu: set vm_update_mode=0 as default for Sienna Cichlid in SRIOV case 496eb203d0 HID: saitek: add madcatz variant of MMO7 mouse device ID ff06067b70 scsi: core: Restrict legal sdev_state transitions via sysfs 9edf20e5a1 ACPI: APEI: Fix integer overflow in ghes_estatus_pool_init() be6e22f546 media: meson: vdec: fix possible refcount leak in vdec_probe() c5fd54a65c media: dvb-frontends/drxk: initialize err to 0 7fdc58d8c2 media: cros-ec-cec: limit msg.len to CEC_MAX_MSG_SIZE 1609231f86 media: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE c46759e370 media: rkisp1: Zero v4l2_subdev_format fields in when validating links 3144ce5574 media: rkisp1: Initialize color space on resizer sink and source pads 6b24d9c2ac s390/boot: add secure boot trailer efc6420d65 xhci-pci: Set runtime PM as default policy on all xHC 1.2 or later devices 37bb57908d mtd: parsers: bcm47xxpart: Fix halfblock reads 85e458369c mtd: parsers: bcm47xxpart: print correct offset on read error ec54104feb fbdev: stifb: Fall back to cfb_fillrect() on 32-bit HCRX cards f8c86d7829 video/fbdev/stifb: Implement the stifb_fillrect() function e975d7aeca mmc: sdhci-pci-core: Disable ES for ASUS BIOS on Jasper Lake afeae13b8a mmc: sdhci-pci: Avoid comma separated statements a06721767c mmc: sdhci-esdhc-imx: Propagate ESDHC_FLAG_HS400* only on 8bit bus 59400c9b0d drm/msm/hdmi: fix IRQ lifetime 8225bdaec5 drm/msm/hdmi: Remove spurious IRQF_ONESHOT flag 5dbb47ee89 ipv6: fix WARNING in ip6_route_net_exit_late() 1c89642e7f net, neigh: Fix null-ptr-deref in neigh_table_clear() 634f066d02 net: mdio: fix undefined behavior in bit shift for __mdiobus_register d9ec6e2fbd Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del() cb1c012099 Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu 0a0dead4ad btrfs: fix ulist leaks in error paths of qgroup self tests 61e0612811 btrfs: fix inode list leak during backref walking at find_parent_nodes() a52e24c7fc btrfs: fix inode list leak during backref walking at resolve_indirect_refs() 81204283ea isdn: mISDN: netjet: fix wrong check of device registration e77d213843 mISDN: fix possible memory leak in mISDN_register_device() f06186e527 rose: Fix NULL pointer dereference in rose_send_frame() 2c8d81bdb2 ipvs: fix WARNING in ip_vs_app_net_cleanup() 931f56d59c ipvs: fix WARNING in __ip_vs_cleanup_batch() d69328cdb9 ipvs: use explicitly signed chars b2d7a92aff netfilter: nf_tables: release flow rule object from commit path 3583826b44 net: tun: fix bugs for oversize packet when napi frags enabled 5960b9081b net: sched: Fix use after free in red_enqueue() 24f9c41435 ata: pata_legacy: fix pdc20230_set_piomode() c85ee1c3cb net: fec: fix improper use of NETDEV_TX_BUSY 52438e734c nfc: nfcmrvl: Fix potential memory leak in nfcmrvl_i2c_nci_send() 0acfcd2aed nfc: s3fwrn5: Fix potential memory leak in s3fwrn5_nci_send() 9ae2c9a91f nfc: nxp-nci: Fix potential memory leak in nxp_nci_send() eecea068bf NFC: nxp-nci: remove unnecessary labels e8c11ee2d0 nfc: fdp: Fix potential memory leak in fdp_nci_send() 31b83d6990 nfc: fdp: drop ftrace-like debugging messages 4e1e4485b2 RDMA/qedr: clean up work queue on failure in qedr_alloc_resources() d360e875c0 RDMA/core: Fix null-ptr-deref in ib_core_cleanup() 37a098fc9b net: dsa: Fix possible memory leaks in dsa_loop_init() 45aea4fbf6 nfs4: Fix kmemleak when allocate slot failed f0f1c74fa6 NFSv4.1: We must always send RECLAIM_COMPLETE after a reboot 10c554d722 NFSv4.1: Handle RECLAIM_COMPLETE trunking errors 4813dd737d NFSv4: Fix a potential state reclaim deadlock 7c4260f8f1 IB/hfi1: Correctly move list in sc_disable() 87ac93c8dd RDMA/cma: Use output interface for net_dev check 4dbb739eb2 KVM: x86: Add compat handler for KVM_X86_SET_MSR_FILTER bb584caee8 KVM: x86: Copy filter arg outside kvm_vm_ioctl_set_msr_filter() 9faacf442d KVM: x86: Protect the unused bits in MSR exiting flags 5bdbccc79c x86/topology: Fix duplicated core ID within a package 6c31fc028a x86/topology: Fix multiple packages shown on a single-package system f5ad52da14 x86/topology: Set cpu_die_id only if DIE_TYPE found 570fa3bcd2 KVM: x86: Treat #DBs from the emulator as fault-like (code and DR7.GD=1) e5d7c6786b KVM: x86: Trace re-injected exceptions 8364786152 KVM: nVMX: Don't propagate vmcs12's PERF_GLOBAL_CTRL settings to vmcs02 523e1dd9f8 KVM: nVMX: Pull KVM L0's desired controls directly from vmcs01 028fcabd8a serial: ar933x: Deassert Transmit Enable on ->rs485_config() e6da7808c9 serial: 8250: Let drivers request full 16550A feature probing 95aa34f721 Linux 5.10.153 26a2b9c468 serial: Deassert Transmit Enable on probe in driver-specific way 4a230f65d6 serial: core: move RS485 configuration tasks from drivers into core eb69c07eca can: rcar_canfd: rcar_canfd_handle_global_receive(): fix IRQ storm on global FIFO receive d5924531dd arm64/kexec: Test page size support with new TGRAN range values c911f03f8d arm64/mm: Fix __enable_mmu() for new TGRAN range values d523384766 scsi: sd: Revert "scsi: sd: Remove a local variable" 52a43b8200 arm64: Add AMPERE1 to the Spectre-BHB affected list 9889ca7efa net: enetc: survive memory pressure without crashing fdba224ab0 net/mlx5: Fix crash during sync firmware reset bbcc06933f net/mlx5: Fix possible use-after-free in async command interface 16376ba5cf net/mlx5e: Do not increment ESN when updating IPsec ESN state 0d88359092 nh: fix scope used to find saddr when adding non gw nh 3519b5ddac net: ehea: fix possible memory leak in ehea_register_port() 79631daa5a openvswitch: switch from WARN to pr_warn 00d6f33f67 ALSA: aoa: Fix I2S device accounting ce6fd1c382 ALSA: aoa: i2sbus: fix possible memory leak in i2sbus_add_dev() 97262705c0 net: fec: limit register access on i.MX6UL df67a8e625 PM: domains: Fix handling of unavailable/disabled idle states 1f262d8088 net: ksz884x: fix missing pci_disable_device() on error in pcidev_init() 6170b4579f i40e: Fix flow-type by setting GL_HASH_INSET registers 9abae363af i40e: Fix VF hang when reset is triggered on another VF 23d5599058 i40e: Fix ethtool rx-flow-hash setting for X722 44affe7ede ipv6: ensure sane device mtu in tunnels 905f05c0ab media: vivid: set num_in/outputs to 0 if not supported b6c7446d0a media: videodev2.h: V4L2_DV_BT_BLANKING_HEIGHT should check 'interlaced' 683015ae16 media: v4l2-dv-timings: add sanity checks for blanking values 147b8f1892 media: vivid: dev->bitmap_cap wasn't freed in all cases 1cf51d5158 media: vivid: s_fbuf: add more sanity checks 3221c2701d PM: hibernate: Allow hybrid sleep to work with s2idle 0eb19ecbd0 can: mcp251x: mcp251x_can_probe(): add missing unregister_candev() in error path 6b2d07fc0b can: mscan: mpc5xxx: mpc5xxx_can_probe(): add missing put_clock() in error path 1634d5d39c tcp: fix indefinite deferral of RTO with SACK reneging 4f23cb2be5 tcp: fix a signed-integer-overflow bug in tcp_add_backlog() 49713d7c38 tcp: minor optimization in tcp_add_backlog() aab883bd60 net: lantiq_etop: don't free skb when returning NETDEV_TX_BUSY c3edc6e808 net: fix UAF issue in nfqnl_nf_hook_drop() when ops_init() failed e2a28807b1 kcm: annotate data-races around kcm->rx_wait c325f92d8d kcm: annotate data-races around kcm->rx_psock af7879529e atlantic: fix deadlock at aq_nic_stop d7ccd49c4d amd-xgbe: add the bit rate quirk for Molex cables 17350734fd amd-xgbe: fix the SFP compliance codes check for DAC cables b55d6ea965 x86/unwind/orc: Fix unreliable stack dump with gcov 0ce1ef3353 net: hinic: fix the issue of double release MBOX callback of VF 6603843c80 net: hinic: fix the issue of CMDQ memory leaks bb01910763 net: hinic: fix memory leak when reading function table ce605b68db net: hinic: fix incorrect assignment issue in hinic_set_interrupt_cfg() 62f0a08e82 net: netsec: fix error handling in netsec_register_mdio() 32a3d4660b tipc: fix a null-ptr-deref in tipc_topsrv_accept fb94152aae perf/x86/intel/lbr: Use setup_clear_cpu_cap() instead of clear_cpu_cap() bfce730886 ALSA: ac97: fix possible memory leak in snd_ac97_dev_register() 2663b16c76 ASoC: qcom: lpass-cpu: Mark HDMI TX parity register as volatile a527557299 arc: iounmap() arg is volatile 648ac633e7 ASoC: qcom: lpass-cpu: mark HDMI TX registers as volatile 6571f6ca8a drm/msm: Fix return type of mdp4_lvds_connector_mode_valid 4953a989b7 media: v4l2: Fix v4l2_i2c_subdev_set_name function documentation 9d00384270 net: ieee802154: fix error return code in dgram_bind() 568e3812b1 mm,hugetlb: take hugetlb_lock before decrementing h->resv_huge_pages 935a8b6202 mm/memory: add non-anonymous page check in the copy_present_page() 49db6cb814 xen/gntdev: Prevent leaking grants a3f2cc11d6 Xen/gntdev: don't ignore kernel unmapping error 467230b9ef s390/pci: add missing EX_TABLE entries to __pcistg_mio_inuser()/__pcilg_mio_inuser() fe187c801a s390/futex: add missing EX_TABLE entry to __futex_atomic_op() 449070996c perf auxtrace: Fix address filter symbol name match for modules 6f72a3977b kernfs: fix use-after-free in __kernfs_remove 0bcd1ab3e8 counter: microchip-tcb-capture: Handle Signal1 read and Synapse 8bf037279b mmc: core: Fix kernel panic when remove non-standard SDIO card 5684808b26 mmc: sdhci_am654: 'select', not 'depends' REGMAP_MMIO b686ffc0ac drm/msm/dp: fix IRQ lifetime 08c7375fa2 drm/msm/hdmi: fix memory corruption with too many bridges 21c4679af0 drm/msm/dsi: fix memory corruption with too many bridges 44a86d96fa scsi: qla2xxx: Use transport-defined speed mask for supported_speeds c368f751da mac802154: Fix LQI recording 9ba2990f4e exec: Copy oldsighand->action under spin-lock 7062153004 fs/binfmt_elf: Fix memory leak in load_elf_binary() d9ddfeb01f fbdev: smscufx: Fix several use-after-free bugs f19f1a75d3 iio: temperature: ltc2983: allocate iio channels once af236da855 iio: light: tsl2583: Fix module unloading 90ff5bef2b tools: iio: iio_utils: fix digit calculation 678d2cc204 xhci: Remove device endpoints from bandwidth list when freeing the device 3b250824b6 xhci: Add quirk to reset host back to default state at shutdown 63c7df3c81 mtd: rawnand: marvell: Use correct logic for nand-keep-config 228101fc83 usb: xhci: add XHCI_SPURIOUS_SUCCESS to ASM1042 despite being a V0.96 controller 2bc4f99ee2 usb: bdc: change state when port disconnected e440957f9c usb: dwc3: gadget: Don't set IMI for no_interrupt fb074d622c usb: dwc3: gadget: Stop processing more requests on IMI c29fcef579 USB: add RESET_RESUME quirk for NVIDIA Jetson devices in RCM 4cc7a360ec ALSA: rme9652: use explicitly signed char 8959092300 ALSA: au88x0: use explicitly signed char 2bf5b16315 ALSA: Use del_timer_sync() before freeing timer ca1034bff8 can: kvaser_usb: Fix possible completions during init_completion 370be31cde can: j1939: transport: j1939_session_skb_drop_old(): spin_unlock_irqrestore() before kfree_skb() 7d51b4c67c Linux 5.10.152 43d5109296 udp: Update reuse->has_conns under reuseport_lock. a50ed2d287 mm: /proc/pid/smaps_rollup: fix no vma's null-deref 31b1570677 blk-wbt: fix that 'rwb->wc' is always set to 1 in wbt_init() e2f9b62ead mmc: core: Add SD card quirk for broken discard 3a260e9844 Makefile.debug: re-enable debug info for .S files 6ab2287b26 x86/Kconfig: Drop check for -mabi=ms for CONFIG_EFI_STUB 67dafece56 ACPI: video: Force backlight native for more TongFang devices dcaf631320 hv_netvsc: Fix race between VF offering and VF association message from host da54c5f4b5 perf/x86/intel/pt: Relax address filter validation 79c3482fbe riscv: topology: fix default topology reporting a6e770733d arm64: topology: move store_cpu_topology() to shared code cb1024d8a4 arm64: dts: qcom: sc7180-trogdor: Fixup modem memory region f687e2111b fcntl: fix potential deadlocks for &fown_struct.lock b1efc19644 fcntl: make F_GETOWN(EX) return 0 on dead owner task ca4c498382 perf: Skip and warn on unknown format 'configN' attrs dea47fefa6 perf pmu: Validate raw event with sysfs exported format bits 86e995f964 riscv: always honor the CONFIG_CMDLINE_FORCE when parsing dtb 0e4c06ae7c riscv: Add machine name to kernel boot log and stack dump output 7fba4a389d mmc: sdhci-tegra: Use actual clock rate for SW tuning correction 3c6a888e35 xen/gntdev: Accommodate VMA splitting 5232411f37 xen: assume XENFEAT_gnttab_map_avail_bits being set for pv guests ea82edad0a tracing: Do not free snapshot if tracer is on cmdline bd6af07e79 tracing: Simplify conditional compilation code in tracing_set_tracer() 4e3a15ca24 dmaengine: mxs: use platform_driver_register 1da5d24970 dmaengine: mxs-dma: Remove the unused .id_table 1414e9bf3c drm/virtio: Use appropriate atomic state in virtio_gpu_plane_cleanup_fb() d74196bb27 iommu/vt-d: Clean up si_domain in the init_dmars() error path ef11e8ec00 iommu/vt-d: Allow NVS regions in arch_rmrr_sanity_check() 35c92435be net: phy: dp83822: disable MDI crossover status change interrupt 7aa3d623c1 net: sched: fix race condition in qdisc_graft() 2974f3b330 net: hns: fix possible memory leak in hnae_ae_register() 3032e316e0 sfc: include vport_id in filter spec hash and equal() ded86c4191 net: sched: sfb: fix null pointer access issue when sfb_init() fails 305aa36b62 net: sched: delete duplicate cleanup of backlog and qlen ae48bee283 net: sched: cake: fix null pointer access issue when cake_init() fails 2008ad08a2 nvme-hwmon: kmalloc the NVME SMART log buffer 770b7e3a2c nvme-hwmon: consistently ignore errors from nvme_hwmon_init 67106ac272 nvme-hwmon: Return error code when registration fails bc17f727b0 nvme-hwmon: rework to avoid devm allocation 191d71c635 ionic: catch NULL pointer issue on reconfig ff7ba76675 net: hsr: avoid possible NULL deref in skb_clone() 7286f87551 cifs: Fix xid leak in cifs_ses_add_channel() 2d08311aa3 cifs: Fix xid leak in cifs_flock() bf49d4fe4a cifs: Fix xid leak in cifs_copy_file_range() 05cc22c008 net: phy: dp83867: Extend RX strap quirk for SGMII mode 118f412bed net/atm: fix proc_mpc_write incorrect return value c8310a99e7 sfc: Change VF mac via PF as first preference if available. 39d10f0dfb HID: magicmouse: Do not set BTN_MOUSE on double report ed5baf3d0a i40e: Fix DMA mappings leak e558e14893 tipc: fix an information leak in tipc_topsrv_kern_subscr 1f4ed95ce6 tipc: Fix recognition of trial period fc8c6b8bb2 ACPI: extlog: Handle multiple records 57e157749a btrfs: fix processing of delayed tree block refs during backref walking 590929ef69 btrfs: fix processing of delayed data refs during backref walking cc841a8a70 r8152: add PID for the Lenovo OneLink+ Dock 51b96ecaed arm64: errata: Remove AES hwcap for COMPAT tasks 910ba49b33 blk-wbt: call rq_qos_add() after wb_normal is initialized 392536023d block: wbt: Remove unnecessary invoking of wbt_update_limits in wbt_init ab6aaa8210 media: venus: dec: Handle the case where find_format fails bce5808fc9 media: mceusb: set timeout to at least timeout provided 6d725672ce KVM: arm64: vgic: Fix exit condition in scan_its_table() 34db701dc6 kvm: Add support for arch compat vm ioctls e55feb31df cpufreq: qcom: fix memory leak in error path 303d0f7614 ata: ahci: Match EM_MAX_SLOTS with SATA_PMP_MAX_PORTS 6a2aadcb01 ata: ahci-imx: Fix MODULE_ALIAS d9f0159da0 hwmon/coretemp: Handle large core ID value 0fb04676c4 x86/microcode/AMD: Apply the patch early on every logical thread 6dcf1f0802 i2c: qcom-cci: Fix ordering of pm_runtime_xx and i2c_add_adapter 794ded0bc4 cpufreq: qcom: fix writes in read-only memory region 2723875e9d selinux: enable use of both GFP_KERNEL and GFP_ATOMIC in convert_context() 0d65f040fd ocfs2: fix BUG when iput after ocfs2_mknod fails b838dcfda1 ocfs2: clear dinode links count in case of error c34d1b22fe Linux 5.10.151 ecad331211 kbuild: Add skip_encoding_btf_enum64 option to pahole c5006abb80 kbuild: Unify options for BTF generation for vmlinux and modules f5f413cb3e kbuild: skip per-CPU BTF generation for pahole v1.18-v1.21 06481cd9f7 kbuild: Quote OBJCOPY var to avoid a pahole call break the build bbaea0f1cd bpf: Generate BTF_KIND_FLOAT when linking vmlinux a10a57a224 Linux 5.10.150 243c8f42ba Revert "drm/amdgpu: make sure to init common IP before gmc" 8026d58b49 gcov: support GCC 12.1 and newer compilers cbf2c43b36 f2fs: fix wrong condition to trigger background checkpoint correctly 7b19858803 thermal: intel_powerclamp: Use first online CPU as control_cpu f039b43cba inet: fully convert sk->sk_rx_dst to RCU rules 67de22cb0b ext4: continue to expand file system when the target size doesn't reach 357db159e9 Revert "drm/amdgpu: use dirty framebuffer helper" 98ab15bfdc Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega" 791489a5c5 net/ieee802154: don't warn zero-sized raw_sendmsg() a96336a5f2 Revert "net/ieee802154: reject zero-sized raw_sendmsg()" dc54ff9fc4 net: ieee802154: return -EINVAL for unknown addr type 45c3396675 mm: hugetlb: fix UAF in hugetlb_handle_userfault c378c479c5 io_uring/af_unix: defer registered files gc to io_uring release 67cbc8865a io_uring: correct pinned_vm accounting 904f881b57 arm64: topology: fix possible overflow in amu_fie_setup() b5dc2f2578 perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc 9b4e849777 clk: bcm2835: Make peripheral PLLC critical b8bbae3236 usb: idmouse: fix an uninit-value in idmouse_open d5bb45f47b nvmet-tcp: add bounds check on Transfer Tag b79da0080d nvme: copy firmware_rev on each init e6cc39db24 staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv() 3a5a34ed9d Revert "usb: storage: Add quirk for Samsung Fit flash" acf0006f2b usb: musb: Fix musb_gadget.c rxstate overflow bug 91271a3e77 usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info() 782b3e71c9 md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d dbcca76435 HID: roccat: Fix use-after-free in roccat_read() f00c049ede soundwire: intel: fix error handling on dai registration issues f04a673d4a soundwire: cadence: Don't overwrite msg->buf during write commands c263516c2c bcache: fix set_at_max_writeback_rate() for multiple attached devices fcad2ac863 ata: libahci_platform: Sanity check the DT child nodes number 19c010ae44 blk-throttle: prevent overflow while calculating wait time 1b3cebeca9 staging: vt6655: fix potential memory leak 89f305a714 power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type() b2700f98b3 nbd: Fix hung when signal interrupts nbd_start_device_ioctl() 5942e5c63d scsi: 3w-9xxx: Avoid disabling device if failing to enable it 48727117bd usb: host: xhci-plat: suspend/resume clks for brcm c13d0d2f5a usb: host: xhci-plat: suspend and resume clocks 12d31182de clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate c2257c8a50 media: cx88: Fix a null-ptr-deref bug in buffer_prepare() d9e2585c3b clk: zynqmp: Fix stack-out-of-bounds in strncpy` 70f8b48d0b btrfs: scrub: try to fix super block errors 8f554dd23c arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply 451ce2521c kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT 017cabfb3f ARM: dts: imx6sx: add missing properties for sram 9d3ca48722 ARM: dts: imx6sll: add missing properties for sram 9735f2b62b ARM: dts: imx6sl: add missing properties for sram 2829b6ad30 ARM: dts: imx6qp: add missing properties for sram 0c3a0b3d5e ARM: dts: imx6dl: add missing properties for sram 2763a3b43a ARM: dts: imx6q: add missing properties for sram 82e0d91484 ARM: dts: imx7d-sdb: config the max pressure for tsc2046 166feb964f drm/amd/display: Remove interface for periodic interrupt 1 1bb6f4a8db drm/dp: Don't rewrite link config when setting phy test pattern bb91c06b0b mmc: sdhci-msm: add compatible string check for sdm670 8a427a2283 drm/meson: explicitly remove aggregate driver at module unload time 1c7d957c5d drm/amdgpu: fix initial connector audio value 69130888b2 ASoC: SOF: pci: Change DMI match info to support all Chrome platforms 54f2585e2d platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading a9d6a7c9b6 platform/chrome: cros_ec: Notify the PM of wake events during resume e29d20deaf drm: panel-orientation-quirks: Add quirk for Anbernic Win600 bfdb391d57 drm/vc4: vec: Fix timings for VEC modes b70f8abc1a drm: bridge: dw_hdmi: only trigger hotplug event on link change bbe2f6f903 udmabuf: Set ubuf->sg = NULL if the creation of sg table fails 0a4fddc95c drm/amd/display: fix overflow on MIN_I64 definition 3959e8faf8 gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init() c28a8082b2 drm: Prevent drm_copy_field() to attempt copying a NULL pointer e7d7018003 drm: Use size_t type for len variable in drm_copy_field() 3339a51bcd drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc() 484400d433 r8152: Rate limit overflow messages 0c108cf3ad Bluetooth: L2CAP: Fix user-after-free 65029aaedd net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory 4851303c85 wifi: rt2x00: correctly set BBP register 86 for MT7620 a016144479 wifi: rt2x00: set SoC wmac clock register 5aa0461d11 wifi: rt2x00: set VGC gain for both chains of MT7620 8d9c00979a wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620 27ed98e8a9 wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620 3d67986e72 can: bcm: check the result of can_send() in bcm_can_tx() 7b674dce41 Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times e25ca9af8a Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create() b051d9bf98 regulator: core: Prevent integer underflow e01d96494a wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit() be81c44242 xfrm: Update ipcomp_scratches with NULL when freed 9661724f62 wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg() 0958e487e8 tcp: annotate data-race around tcp_md5sig_pool_populated 129ca0db95 openvswitch: Fix overreporting of drops in dropwatch 4398e8a7fd openvswitch: Fix double reporting of drops in dropwatch e3c9b94734 bpftool: Clear errno after libcap's checks 50e45034c5 wifi: brcmfmac: fix invalid address access when enabling SCAN log level bbacfcde5f NFSD: fix use-after-free on source server when doing inter-server copy 3de402a524 NFSD: Return nfserr_serverfault if splice_ok but buf->pages have data 1f730d4ae6 x86/entry: Work around Clang __bdos() bug 513943bf87 thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash 708b9abe1b powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue b434edb0e9 MIPS: BCM47XX: Cast memcmp() of function to (void *) 6c61a37ea7 ACPI: video: Add Toshiba Satellite/Portege Z830 quirk 0dd025483f rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE() 36d4ffbedf rcu: Back off upon fill_page_cache_func() allocation failure 278d8ba2b2 selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle b60aa21e2f f2fs: fix to account FS_CP_DATA_IO correctly 0b8230d44c f2fs: fix to avoid REQ_TIME and CP_TIME collision ecbd95958c f2fs: fix race condition on setting FI_NO_EXTENT flag 110146ce8f ACPI: APEI: do not add task_work to kernel thread to avoid memory leak dce07e87ee thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id 3a720eb890 crypto: cavium - prevent integer overflow loading firmware 7bfa7d6773 crypto: marvell/octeontx - prevent integer overflows cdd42eb468 kbuild: rpm-pkg: fix breakage when V=1 is used 6d1aef17e7 kbuild: remove the target in signal traps when interrupted 8d76dd5080 tracing: kprobe: Make gen test module work in arm and riscv c6512a6f0c tracing: kprobe: Fix kprobe event gen test module on exit 9e6ba62d41 iommu/iova: Fix module config properly 426d5bc089 crypto: qat - fix DMA transfer direction a43babc059 crypto: qat - use pre-allocated buffers in datapath a91af50850 crypto: qat - fix use of 'dma_map_single' 8a4ed09ed8 crypto: inside-secure - Change swab to swab32 d33935e666 crypto: ccp - Release dma channels before dmaengine unrgister a1354bdd19 crypto: akcipher - default implementation for setting a private key 2fee0dbfae iommu/omap: Fix buffer overflow in debugfs cfde58a8e4 cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset ab2485eb5d hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear() d88b88514e crypto: hisilicon/zip - fix mismatch in get/set sgl_sge_nr 25f1342473 crypto: sahara - don't sleep when in softirq 2d285164fb powerpc: Fix SPE Power ISA properties for e500v1 platforms 2bde4e1e4f powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5 7ae8bed908 x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition 6315998170 powerpc/powernv: add missing of_node_put() in opal_export_attrs() 434db6d17b powerpc/pci_dn: Add missing of_node_put() 718e2d8023 powerpc/sysdev/fsl_msi: Add missing of_node_put() 592d283a65 powerpc/math_emu/efp: Include module.h 44c26ceffa mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg b1616599c9 clk: ast2600: BCLK comes from EPLL 6d01017247 clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe 9b65fd6513 clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration 9a6087a438 clk: baikal-t1: Add SATA internal ref clock buffer 5f143f3bc2 clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent 823fd52391 clk: baikal-t1: Fix invalid xGMAC PTP clock divider 2f19a1050e clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD 92f52770a7 spmi: pmic-arb: correct duplicate APID to PPID mapping logic a01c0c1600 dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup() 1dd5148445 clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent 6e58f2469e mfd: sm501: Add check for platform_driver_register() 3469dd8e22 mfd: fsl-imx25: Fix check for platform_get_irq() errors b425e03c96 mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init() f7b4388636 mfd: lp8788: Fix an error handling path in lp8788_probe() 08d4051803 mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq() 28868b940b mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe() 382a5fc49e fsi: core: Check error number after calling ida_simple_get ed8e6011b9 clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical 884a788f06 scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername() a9e5176ead scsi: libsas: Fix use-after-free bug in smp_execute_task_sg() 8f740c11d8 serial: 8250: Fix restoring termios speed after suspend ab5a3e7144 firmware: google: Test spinlock on panic path to avoid lockups 95ac62e854 staging: vt6655: fix some erroneous memory clean-up loops 878f987166 phy: qualcomm: call clk_disable_unprepare in the error handling 9a56ade124 tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown 572fb97fce serial: 8250: Toggle IER bits on only after irq has been set up 3fbfa5e3cc serial: 8250: Add an empty line and remove some useless {} 71ffe5111f drivers: serial: jsm: fix some leaks in probe 7efdd91d54 usb: gadget: function: fix dangling pnp_string in f_printer.c cc952e3bf6 xhci: Don't show warning for reinit on known broken suspend dac769dd7d IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers 360386e11c RDMA/cm: Use SLID in the work completion as the DLID in responder side a1263294b5 md/raid5: Ensure stripe_fill happens on non-read IO with journal 76694e9ce0 md: Replace snprintf with scnprintf 7bd5f3b4a8 mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct() f5325f3202 ata: fix ata_id_has_dipm() f5a6fa1877 ata: fix ata_id_has_ncq_autosense() 3c34a91c8a ata: fix ata_id_has_devslp() fc61a0c820 ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting() e3917c85f4 RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall. 3a9d7d8dcf mtd: rawnand: fsl_elbc: Fix none ECC mode f87f720811 mtd: devices: docg3: check the return value of devm_ioremap() in the probe d06cc0e11d dyndbg: drop EXPORTed dynamic_debug_exec_queries 1d65985589 dyndbg: let query-modname override actual module name c0e206da44 dyndbg: fix module.dyndbg handling 5047bd3bd7 dyndbg: fix static_branch manipulation af12e209a9 dmaengine: hisilicon: Add multi-thread support for a DMA channel d3fd838536 dmaengine: hisilicon: Fix CQ head update d5065ca461 dmaengine: hisilicon: Disable channels when unregister hisi_dma f59861946f fpga: prevent integer overflow in dfl_feature_ioctl_set_irq() 7ba19a60c7 misc: ocxl: fix possible refcount leak in afu_ioctl() cf3bb86edd RDMA/rxe: Fix the error caused by qp->sk cdce36a88d RDMA/rxe: Fix "kernel NULL pointer dereference" error 2630cc8832 media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init 40aa0999a3 media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start() 551b87976a tty: xilinx_uartps: Fix the ignore_status 28cdf6c6fb media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop 1f683bff1a HSI: omap_ssi_port: Fix dma_map_sg error check 962f22e7f7 HSI: omap_ssi: Fix refcount leak in ssi_probe 70f0a0a27d clk: tegra20: Fix refcount leak in tegra20_clock_init c01bfd23cc clk: tegra: Fix refcount leak in tegra114_clock_init f487137a53 clk: tegra: Fix refcount leak in tegra210_clock_init 59e90c4d98 clk: sprd: Hold reference returned by of_get_parent() 57141b1dd6 clk: berlin: Add of_node_put() for of_get_parent() dc190b46c6 clk: qoriq: Hold reference returned by of_get_parent() baadc6f58f clk: oxnas: Hold reference returned by of_get_parent() b95f4f9054 clk: meson: Hold reference returned by of_get_parent() beec2f0255 usb: common: debug: Check non-standard control requests 9d965a22f6 usb: common: move function's kerneldoc next to its definition 20b63631a3 usb: common: add function to get interval expressed in us unit c1ef8c66a3 usb: common: Parse for USB SSP genXxY ffffb159e1 usb: ch9: Add USB 3.2 SSP attributes aa7aada4b7 iio: ABI: Fix wrong format of differential capacitance channel ABI. b9a0526cd0 iio: inkern: only release the device node when done with it 44ec4b04fc iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume 513c72d76d iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq d259b90f0c iio: adc: at91-sama5d2_adc: check return status for pressure and touch bc2b97e177 iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX 5b9bb0cbd9 ARM: dts: exynos: fix polarity of VBUS GPIO of Origen 657de36c72 arm64: ftrace: fix module PLTs with mcount 40e966a404 ARM: Drop CMDLINE_* dependency on ATAGS 477dbf9d1b ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family 5bbd3dd7f9 soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA 09c35f1520 ia64: export memory_add_physaddr_to_nid to fix cxl build error e31c0e14cf ARM: dts: kirkwood: lsxl: remove first ethernet port df4f05b356 ARM: dts: kirkwood: lsxl: fix serial line 43faaedf3a ARM: dts: turris-omnia: Fix mpp26 pin name and comment d5c2051898 soc: qcom: smem_state: Add refcounting for the 'state->of_node' 39781c98ad soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe() 1d312c12c9 memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings() daaec4b3fe memory: of: Fix refcount leak bug in of_get_ddr_timings() fde46754d5 memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe() 2c442b0c06 ALSA: hda/hdmi: Don't skip notification handling during PM operation f182de42d7 ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe 37e3e01c9a ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe fb23569699 ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe c1b269dda1 ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe 71704c2e1b mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe() c940636d9c ALSA: dmaengine: increment buffer pointer atomically 4993c1511d ASoC: da7219: Fix an error handling path in da7219_register_dai_clks() ef59819976 drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa() 598d8f7d86 drm/msm/dpu: index dpu_kms->hw_vbif using vbif_idx a9a60d6405 ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API ad0b8ed172 mmc: au1xmmc: Fix an error handling path in au1xmmc_probe() 1f340e1c1c drm/omap: dss: Fix refcount leak bugs cbe37857dd ALSA: hda: beep: Simplify keep-power-at-enable behavior f0fb0817eb ASoC: rsnd: Add check for rsnd_mod_power_on 877e92e9b1 drm/bridge: megachips: Fix a null pointer dereference bug c577b4e972 drm: fix drm_mipi_dbi build errors 804d8e59f3 platform/x86: msi-laptop: Fix resource cleanup c21c08fab7 platform/x86: msi-laptop: Fix old-ec check for backlight registering b77755f58e ASoC: tas2764: Fix mute/unmute 2e6b64df54 ASoC: tas2764: Drop conflicting set_bias_level power setting c2c6022e10 ASoC: tas2764: Allow mono streams 868fc93b61 platform/chrome: fix memory corruption in ioctl 84da5cdf43 platform/chrome: fix double-free in chromeos_laptop_prepare() 5e25bfcd12 drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node() ad06d6bed5 drm/dp_mst: fix drm_dp_dpcd_read return value checks 3f5889fd65 drm/bridge: parade-ps8640: Fix regulator supply order 45120fa5e5 drm/mipi-dsi: Detach devices when removing the host 050b650507 drm/bridge: Avoid uninitialized variable warning 7839f2b349 drm: bridge: adv7511: fix CEC power down control register offset 29f50bcf0f net: mvpp2: fix mvpp2 debugfs leak 6cb54f2162 once: add DO_ONCE_SLOW() for sleepable contexts 67cb80a9d2 net/ieee802154: reject zero-sized raw_sendmsg() 6cc0e2afc6 bnx2x: fix potential memory leak in bnx2x_tpa_stop() da349221c4 net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks() d9e25dc053 spi: Ensure that sg_table won't be used after being freed 96a3ddb870 tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited f65955340e sctp: handle the error returned from sctp_auth_asoc_init_active_key 2a1d036320 mISDN: fix use-after-free bugs in l1oip timer handlers b4a5905fd2 vhost/vsock: Use kvmalloc/kvfree for larger packets. d2b5dc3a53 wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM 17196f2f98 spi: s3c64xx: Fix large transfers with DMA b284e1fe15 netfilter: nft_fib: Fix for rpath check with VRF devices b384e8fb16 Bluetooth: hci_core: Fix not handling link timeouts propertly 129f01116b i2c: mlxbf: support lock mechanism 534909fe3c spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe 9da61e7b59 spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe 1ef5798638 x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype 6ed7b05a35 x86/microcode/AMD: Track patch allocation size explicitly 07299e52e5 wifi: ath11k: fix number of VHT beamformee spatial streams d7cc0d51ff Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure ed403bcd97 bpf: Ensure correct locking around vulnerable function find_vpid() 2a1c29dc9b net: fs_enet: Fix wrong check in do_pd_setup 795954d751 wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask 226e6f2412 wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration 0a60ac7a0d bpf: btf: fix truncated last_member_type_id in btf_struct_resolve 8398a45d3d spi: meson-spicc: do not rely on busy flag in pow2 clk ops 351cf55595 wifi: rtl8xxxu: Fix skb misuse in TX queue selection 1e91179057 spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime() 7b83d11d48 spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume() 5576008305 selftests/xsk: Avoid use-after-free on ctx c823df0679 wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse() ea1b6b5409 Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend 07194ccbb1 Bluetooth: btusb: fix excessive stack usage cdadf95435 Bluetooth: btusb: Fine-tune mt7663 mechanism. 294395caac x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register 029a1de92c spi: mt7621: Fix an error message in mt7621_spi_probe() 2afb93e4e4 bpftool: Fix a wrong type cast in btf_dumper_int 61905bbb61 wifi: mac80211: allow bw change during channel switch in mesh 7565207066 leds: lm3601x: Don't use mutex after it was destroyed 08faf07717 wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state() e060c4b9f3 nfsd: Fix a memory leak in an error handling path 730191a098 objtool: Preserve special st_shndx indexes in elf_update_symbol 84837738d4 ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE f1d6edeaa8 ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd() da2aecef86 MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create() 0c667858c0 MIPS: SGI-IP27: Free some unused memory 3598445698 sh: machvec: Use char[] for section boundaries 6e4be747f1 userfaultfd: open userfaultfds with O_RDONLY 28d9b39733 selinux: use "grep -E" instead of "egrep" d11e09953c smb3: must initialize two ACL struct fields to zero abd13b2100 drm/i915: Fix watermark calculations for gen12+ MC CCS modifier fd37286f39 drm/i915: Fix watermark calculations for gen12+ RC CCS modifier 5d6093c49c drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table() 57f1a89a8e drm/nouveau/kms/nv140-: Disable interlacing d0febad83e staging: greybus: audio_helper: remove unused and wrong debugfs usage ceeb8d4a43 KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS 83fe0b009b KVM: nVMX: Unconditionally purge queued/injected events on nested "exit" 085ca1d33b KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility bda8120e5b media: cedrus: Set the platform driver data earlier dbdd3b1448 efi: libstub: drop pointless get_memory_map() call 68158654b5 thunderbolt: Explicitly enable lane adapter hotplug events at startup fc08f84381 tracing: Disable interrupt or preemption before acquiring arch_spinlock_t 0cf6c09daf ring-buffer: Fix race between reset page and reading page 588f02f8b9 ring-buffer: Add ring_buffer_wake_waiters() 586f02c500 ring-buffer: Check pending waiters when doing wake ups as well 6617e5132c ring-buffer: Have the shortest_full queue be the shortest not longest 4a3bbd40e4 ring-buffer: Allow splice to read previous partially read pages f2ca4609d0 ftrace: Properly unset FTRACE_HASH_FL_MOD 846f041203 livepatch: fix race between fork and KLP transition 2189756eab ext4: update 'state->fc_regions_size' after successful memory allocation 2cfb769d60 ext4: fix potential memory leak in ext4_fc_record_regions() c9ce7766dc ext4: fix potential memory leak in ext4_fc_record_modified_inode() d575fb52c4 ext4: fix miss release buffer head in ext4_fc_write_inode 74d2a398d2 ext4: place buffer head allocation before handle start fbb0e601bd ext4: ext4_read_bh_lock() should submit IO if the buffer isn't uptodate 0e1764ad71 ext4: don't increase iversion counter for ea_inodes 483831ad04 ext4: fix check for block being out of directory size ac66db1a43 ext4: make ext4_lazyinit_thread freezable f34ab95162 ext4: fix null-ptr-deref in ext4_write_info fb98cb61ef ext4: avoid crash when inline data creation follows DIO write e65506ff18 jbd2: add miss release buffer head in fc_do_one_pass() 1d4d16daec jbd2: fix potential use-after-free in jbd2_fc_wait_bufs 7a33dde572 jbd2: fix potential buffer head reference count leak eea3e455a3 jbd2: wake up journal waiters in FIFO order, not LIFO ba52e685d2 hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero bdcb1d7cf2 hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO d621a87064 hardening: Clarify Kconfig text for auto-var-init 4a8e8bf280 f2fs: fix to do sanity check on summary info 73fb4bd2c0 f2fs: fix to do sanity check on destination blkaddr during recovery 12014eaf1b f2fs: increase the limit for reserve_root 47b5ffe863 btrfs: fix race between quota enable and quota rescan ioctl e504729496 fbdev: smscufx: Fix use-after-free in ufx_ops_open() 9931bd05bb scsi: qedf: Populate sysfs attributes for vport 102c4b6e8c powerpc/boot: Explicitly disable usage of SPE instructions 7db60fd46e powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain 9119a92ad9 PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge a3c08c0217 mm/mmap: undo ->mmap() when arch_validate_flags() fails 7d551b7d61 block: fix inflight statistics of part0 0a12979089 drm/udl: Restore display mode on resume f134f261d7 drm/virtio: Check whether transferred 2D BO is shmem 303436e301 nvme-pci: set min_align_mask before calculating max_hw_sectors 6a73e6edcb UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK 1a053f597f riscv: Pass -mno-relax only on lld < 15.0.0 d15dca1d46 riscv: Make VM_WRITE imply VM_READ d8c6f9b2e1 riscv: Allow PROT_WRITE-only mmap() a6dcc6cfa2 parisc: fbdev/stifb: Align graphics memory size to 4MB 2ce9fab94b RISC-V: Make port I/O string accessors actually work ffb571e123 regulator: qcom_rpm: Fix circular deferral regression 85909424a1 hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API 8ef0e1c0ae ASoC: wcd934x: fix order of Slimbus unprepare/disable 9b2c82af65 ASoC: wcd9335: fix order of Slimbus unprepare/disable 1c20d672e3 platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure 6b7ae4a904 quota: Check next/prev free block number after reading from quota file 5b1a56beb6 HID: multitouch: Add memory barriers bfe60d7641 fs: dlm: handle -EBUSY first in lock arg validation 0b2d8e4db4 fs: dlm: fix race between test_bit() and queue_work() 057d5838c7 mmc: sdhci-sprd: Fix minimum clock limit 448fffc1ae can: kvaser_usb_leaf: Fix CAN state after restart a3776e09b3 can: kvaser_usb_leaf: Fix TX queue out of sync after restart 0f8c88978d can: kvaser_usb_leaf: Fix overread with an invalid command 5d1cb7bfad can: kvaser_usb: Fix use of uninitialized completion b239a0993a usb: add quirks for Lenovo OneLink+ Dock afbbf305db iio: pressure: dps310: Reset chip after timeout 9daadd1d10 iio: pressure: dps310: Refactor startup procedure ae49d80400 iio: adc: ad7923: fix channel readings for some variants ea4dcd3d6a iio: ltc2497: Fix reading conversion results 30e1bd0d3e iio: dac: ad5593r: Fix i2c read protocol requirements 9312e04b6c cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message 64f23e5430 cifs: destage dirty pages before re-reading them for cache=none 50d3d89537 mtd: rawnand: atmel: Unmap streaming DMA mappings e8eb44eeee ALSA: hda/realtek: Add Intel Reference SSID to support headset keys 4491fbd0a7 ALSA: hda/realtek: Add quirk for ASUS GV601R laptop 4285d06d12 ALSA: hda/realtek: Correct pin configs for ASUS G533Z 768cd2cd1a ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530 3e29645fba ALSA: usb-audio: Fix NULL dererence at error path bc1d16d282 ALSA: usb-audio: Fix potential memory leaks ef1658bc48 ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free() 026fcb6336 ALSA: oss: Fix potential deadlock at unregistration Also update the .xml file to handle the few ABI changes in this merge that required an update due to private pointers changing types and ABI padding structures being used to preserve the ABI: Leaf changes summary: 4 artifacts changed (1 filtered out) Changed leaf types summary: 4 (1 filtered out) leaf types changed Removed/Changed/Added functions summary: 0 Removed, 0 Changed, 0 Added function Removed/Changed/Added variables summary: 0 Removed, 0 Changed, 0 Added variable 'struct fscrypt_info at fscrypt_private.h:195:1' changed: type size hasn't changed there are data member changes: type 'key*' of 'fscrypt_info::ci_master_key' changed: pointer type changed from: 'key*' to: 'fscrypt_master_key*' 5197 impacted interfaces 'struct sk_buff at skbuff.h:717:1' changed: type size hasn't changed there are data member changes: data member u64 android_kabi_reserved1 at offset 1472 (in bits) became anonymous data member 'union {struct {__u8 scm_io_uring; __u8 android_kabi_reserved1_padding1; __u16 android_kabi_reserved1_padding2; __u32 android_kabi_reserved1_padding3;}; struct {u64 android_kabi_reserved1;}; union {};}' 5197 impacted interfaces 'struct super_block at fs.h:1450:1' changed: type size hasn't changed there are data member changes: type 'key*' of 'super_block::s_master_keys' changed: pointer type changed from: 'key*' to: 'fscrypt_keyring*' 5197 impacted interfaces 'struct tcp_sock at tcp.h:146:1' changed: type size hasn't changed one impacted interface Change-Id: I6f2a7b91e1df96bede8aafa944a04b3e08ed33a1 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-01-21 12:06:54 +00:00
Eric Biggers	91e4675508	ANDROID: fips140: add crypto_memneq() back to the module ... crypto_memneq() is one of the utility functions that was intentionally included in the fips140 module, out of concerns that it would be seen as "cryptographic" and thus would be required to be included the module for the FIPS certification. It should not have been removed from the module, so add it back. Bug: 188620248 Fixes: 18cd39b706 ("Merge tag 'android12-5.10.136_r00' into android12-5.10") Change-Id: I8a19dfd73390f8c1348885f97fa42d900e47b82b Signed-off-by: Eric Biggers <ebiggers@google.com>	2023-01-09 10:55:19 +00:00
Greg Kroah-Hartman	0b500f5b16	This is the 5.10.150 stable release ... -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmNZGa8ACgkQONu9yGCS aT48lBAA04ORlv/P+tkaLh7gkJjuvnbsemni3KXdpq0hcOfUIpdquUvU06tD7T/P cnM20NPgBR+IZ1sIcGWdPhTpIOEId9yxu84HQT5ctOjAZPuGg98s2JOQaXWD3Jh2 g88kbWgMeThfrJebPYZMofy5vRSZ5eMatAixhtjaM/2b/MXDSu2rIL4AoHZ99CKr wovy1r1bN2niJADu8DwC+jANrPTfStMsjJ9dcOpAqVt83EKz0j3ktCDfzcUftFIw z4y5leEx1qftUOWtY1DKPZEAhMZSpjZYLC1nldopwEl2JvZ7z9aGx3fFJyr/7zOt 4/mNWT2Ra4S9Tqn2RuFnCdWfqGBOmrE0AJf37IdEdpnlcXol6NaGu4LsQsQq4ffk DxPc6tN6BGY1XXh+pNSlSW7jsXx6jbJ+OnL8JpSXV49ZOofz3XPTHQ/8tJEttfO4 rURa3iMk4GFeORw+mrHKOVJuWcfpnjVoxStGv6XiKqPpHjwbtB8ZGBlr9pMDYDQP i2RBwkr/cz5JJzlaA4Q/n96nbZFAKpsiy0Vh1MWboxxlojIqLe3yIlZT6b2M3CFf jsoqlLfaBjBa7RGQP1rW/im2SqxG2ftTiRdGZXPvjEZKnfIpUZEFszD9TmSuIk8f uuJY2Tj6rSJ2nJPS0iui/KVQ78IWLz9PG3Xwm5E2A9QcPz1JAfk= =pfwB -----END PGP SIGNATURE----- Merge 5.10.150 into android12-5.10-lts Changes in 5.10.150 ALSA: oss: Fix potential deadlock at unregistration ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free() ALSA: usb-audio: Fix potential memory leaks ALSA: usb-audio: Fix NULL dererence at error path ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530 ALSA: hda/realtek: Correct pin configs for ASUS G533Z ALSA: hda/realtek: Add quirk for ASUS GV601R laptop ALSA: hda/realtek: Add Intel Reference SSID to support headset keys mtd: rawnand: atmel: Unmap streaming DMA mappings cifs: destage dirty pages before re-reading them for cache=none cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message iio: dac: ad5593r: Fix i2c read protocol requirements iio: ltc2497: Fix reading conversion results iio: adc: ad7923: fix channel readings for some variants iio: pressure: dps310: Refactor startup procedure iio: pressure: dps310: Reset chip after timeout usb: add quirks for Lenovo OneLink+ Dock can: kvaser_usb: Fix use of uninitialized completion can: kvaser_usb_leaf: Fix overread with an invalid command can: kvaser_usb_leaf: Fix TX queue out of sync after restart can: kvaser_usb_leaf: Fix CAN state after restart mmc: sdhci-sprd: Fix minimum clock limit fs: dlm: fix race between test_bit() and queue_work() fs: dlm: handle -EBUSY first in lock arg validation HID: multitouch: Add memory barriers quota: Check next/prev free block number after reading from quota file platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure ASoC: wcd9335: fix order of Slimbus unprepare/disable ASoC: wcd934x: fix order of Slimbus unprepare/disable hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API regulator: qcom_rpm: Fix circular deferral regression RISC-V: Make port I/O string accessors actually work parisc: fbdev/stifb: Align graphics memory size to 4MB riscv: Allow PROT_WRITE-only mmap() riscv: Make VM_WRITE imply VM_READ riscv: Pass -mno-relax only on lld < 15.0.0 UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK nvme-pci: set min_align_mask before calculating max_hw_sectors drm/virtio: Check whether transferred 2D BO is shmem drm/udl: Restore display mode on resume block: fix inflight statistics of part0 mm/mmap: undo ->mmap() when arch_validate_flags() fails PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain powerpc/boot: Explicitly disable usage of SPE instructions scsi: qedf: Populate sysfs attributes for vport fbdev: smscufx: Fix use-after-free in ufx_ops_open() btrfs: fix race between quota enable and quota rescan ioctl f2fs: increase the limit for reserve_root f2fs: fix to do sanity check on destination blkaddr during recovery f2fs: fix to do sanity check on summary info hardening: Clarify Kconfig text for auto-var-init hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero jbd2: wake up journal waiters in FIFO order, not LIFO jbd2: fix potential buffer head reference count leak jbd2: fix potential use-after-free in jbd2_fc_wait_bufs jbd2: add miss release buffer head in fc_do_one_pass() ext4: avoid crash when inline data creation follows DIO write ext4: fix null-ptr-deref in ext4_write_info ext4: make ext4_lazyinit_thread freezable ext4: fix check for block being out of directory size ext4: don't increase iversion counter for ea_inodes ext4: ext4_read_bh_lock() should submit IO if the buffer isn't uptodate ext4: place buffer head allocation before handle start ext4: fix miss release buffer head in ext4_fc_write_inode ext4: fix potential memory leak in ext4_fc_record_modified_inode() ext4: fix potential memory leak in ext4_fc_record_regions() ext4: update 'state->fc_regions_size' after successful memory allocation livepatch: fix race between fork and KLP transition ftrace: Properly unset FTRACE_HASH_FL_MOD ring-buffer: Allow splice to read previous partially read pages ring-buffer: Have the shortest_full queue be the shortest not longest ring-buffer: Check pending waiters when doing wake ups as well ring-buffer: Add ring_buffer_wake_waiters() ring-buffer: Fix race between reset page and reading page tracing: Disable interrupt or preemption before acquiring arch_spinlock_t thunderbolt: Explicitly enable lane adapter hotplug events at startup efi: libstub: drop pointless get_memory_map() call media: cedrus: Set the platform driver data earlier KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility KVM: nVMX: Unconditionally purge queued/injected events on nested "exit" KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS staging: greybus: audio_helper: remove unused and wrong debugfs usage drm/nouveau/kms/nv140-: Disable interlacing drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table() drm/i915: Fix watermark calculations for gen12+ RC CCS modifier drm/i915: Fix watermark calculations for gen12+ MC CCS modifier smb3: must initialize two ACL struct fields to zero selinux: use "grep -E" instead of "egrep" userfaultfd: open userfaultfds with O_RDONLY sh: machvec: Use char[] for section boundaries MIPS: SGI-IP27: Free some unused memory MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create() ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd() ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE objtool: Preserve special st_shndx indexes in elf_update_symbol nfsd: Fix a memory leak in an error handling path wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state() leds: lm3601x: Don't use mutex after it was destroyed wifi: mac80211: allow bw change during channel switch in mesh bpftool: Fix a wrong type cast in btf_dumper_int spi: mt7621: Fix an error message in mt7621_spi_probe() x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register Bluetooth: btusb: Fine-tune mt7663 mechanism. Bluetooth: btusb: fix excessive stack usage Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse() selftests/xsk: Avoid use-after-free on ctx spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume() spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime() wifi: rtl8xxxu: Fix skb misuse in TX queue selection spi: meson-spicc: do not rely on busy flag in pow2 clk ops bpf: btf: fix truncated last_member_type_id in btf_struct_resolve wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask net: fs_enet: Fix wrong check in do_pd_setup bpf: Ensure correct locking around vulnerable function find_vpid() Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure wifi: ath11k: fix number of VHT beamformee spatial streams x86/microcode/AMD: Track patch allocation size explicitly x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe i2c: mlxbf: support lock mechanism Bluetooth: hci_core: Fix not handling link timeouts propertly netfilter: nft_fib: Fix for rpath check with VRF devices spi: s3c64xx: Fix large transfers with DMA wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM vhost/vsock: Use kvmalloc/kvfree for larger packets. mISDN: fix use-after-free bugs in l1oip timer handlers sctp: handle the error returned from sctp_auth_asoc_init_active_key tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited spi: Ensure that sg_table won't be used after being freed net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks() bnx2x: fix potential memory leak in bnx2x_tpa_stop() net/ieee802154: reject zero-sized raw_sendmsg() once: add DO_ONCE_SLOW() for sleepable contexts net: mvpp2: fix mvpp2 debugfs leak drm: bridge: adv7511: fix CEC power down control register offset drm/bridge: Avoid uninitialized variable warning drm/mipi-dsi: Detach devices when removing the host drm/bridge: parade-ps8640: Fix regulator supply order drm/dp_mst: fix drm_dp_dpcd_read return value checks drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node() platform/chrome: fix double-free in chromeos_laptop_prepare() platform/chrome: fix memory corruption in ioctl ASoC: tas2764: Allow mono streams ASoC: tas2764: Drop conflicting set_bias_level power setting ASoC: tas2764: Fix mute/unmute platform/x86: msi-laptop: Fix old-ec check for backlight registering platform/x86: msi-laptop: Fix resource cleanup drm: fix drm_mipi_dbi build errors drm/bridge: megachips: Fix a null pointer dereference bug ASoC: rsnd: Add check for rsnd_mod_power_on ALSA: hda: beep: Simplify keep-power-at-enable behavior drm/omap: dss: Fix refcount leak bugs mmc: au1xmmc: Fix an error handling path in au1xmmc_probe() ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API drm/msm/dpu: index dpu_kms->hw_vbif using vbif_idx drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa() ASoC: da7219: Fix an error handling path in da7219_register_dai_clks() ALSA: dmaengine: increment buffer pointer atomically mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe() ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe ALSA: hda/hdmi: Don't skip notification handling during PM operation memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe() memory: of: Fix refcount leak bug in of_get_ddr_timings() memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings() soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe() soc: qcom: smem_state: Add refcounting for the 'state->of_node' ARM: dts: turris-omnia: Fix mpp26 pin name and comment ARM: dts: kirkwood: lsxl: fix serial line ARM: dts: kirkwood: lsxl: remove first ethernet port ia64: export memory_add_physaddr_to_nid to fix cxl build error soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family ARM: Drop CMDLINE_* dependency on ATAGS arm64: ftrace: fix module PLTs with mcount ARM: dts: exynos: fix polarity of VBUS GPIO of Origen iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX iio: adc: at91-sama5d2_adc: check return status for pressure and touch iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume iio: inkern: only release the device node when done with it iio: ABI: Fix wrong format of differential capacitance channel ABI. usb: ch9: Add USB 3.2 SSP attributes usb: common: Parse for USB SSP genXxY usb: common: add function to get interval expressed in us unit usb: common: move function's kerneldoc next to its definition usb: common: debug: Check non-standard control requests clk: meson: Hold reference returned by of_get_parent() clk: oxnas: Hold reference returned by of_get_parent() clk: qoriq: Hold reference returned by of_get_parent() clk: berlin: Add of_node_put() for of_get_parent() clk: sprd: Hold reference returned by of_get_parent() clk: tegra: Fix refcount leak in tegra210_clock_init clk: tegra: Fix refcount leak in tegra114_clock_init clk: tegra20: Fix refcount leak in tegra20_clock_init HSI: omap_ssi: Fix refcount leak in ssi_probe HSI: omap_ssi_port: Fix dma_map_sg error check media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop tty: xilinx_uartps: Fix the ignore_status media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start() media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init RDMA/rxe: Fix "kernel NULL pointer dereference" error RDMA/rxe: Fix the error caused by qp->sk misc: ocxl: fix possible refcount leak in afu_ioctl() fpga: prevent integer overflow in dfl_feature_ioctl_set_irq() dmaengine: hisilicon: Disable channels when unregister hisi_dma dmaengine: hisilicon: Fix CQ head update dmaengine: hisilicon: Add multi-thread support for a DMA channel dyndbg: fix static_branch manipulation dyndbg: fix module.dyndbg handling dyndbg: let query-modname override actual module name dyndbg: drop EXPORTed dynamic_debug_exec_queries mtd: devices: docg3: check the return value of devm_ioremap() in the probe mtd: rawnand: fsl_elbc: Fix none ECC mode RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall. ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting() ata: fix ata_id_has_devslp() ata: fix ata_id_has_ncq_autosense() ata: fix ata_id_has_dipm() mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct() md: Replace snprintf with scnprintf md/raid5: Ensure stripe_fill happens on non-read IO with journal RDMA/cm: Use SLID in the work completion as the DLID in responder side IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers xhci: Don't show warning for reinit on known broken suspend usb: gadget: function: fix dangling pnp_string in f_printer.c drivers: serial: jsm: fix some leaks in probe serial: 8250: Add an empty line and remove some useless {} serial: 8250: Toggle IER bits on only after irq has been set up tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown phy: qualcomm: call clk_disable_unprepare in the error handling staging: vt6655: fix some erroneous memory clean-up loops firmware: google: Test spinlock on panic path to avoid lockups serial: 8250: Fix restoring termios speed after suspend scsi: libsas: Fix use-after-free bug in smp_execute_task_sg() scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername() clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical fsi: core: Check error number after calling ida_simple_get mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe() mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq() mfd: lp8788: Fix an error handling path in lp8788_probe() mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init() mfd: fsl-imx25: Fix check for platform_get_irq() errors mfd: sm501: Add check for platform_driver_register() clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup() spmi: pmic-arb: correct duplicate APID to PPID mapping logic clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD clk: baikal-t1: Fix invalid xGMAC PTP clock divider clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent clk: baikal-t1: Add SATA internal ref clock buffer clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe clk: ast2600: BCLK comes from EPLL mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg powerpc/math_emu/efp: Include module.h powerpc/sysdev/fsl_msi: Add missing of_node_put() powerpc/pci_dn: Add missing of_node_put() powerpc/powernv: add missing of_node_put() in opal_export_attrs() x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5 powerpc: Fix SPE Power ISA properties for e500v1 platforms crypto: sahara - don't sleep when in softirq crypto: hisilicon/zip - fix mismatch in get/set sgl_sge_nr hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear() cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset iommu/omap: Fix buffer overflow in debugfs crypto: akcipher - default implementation for setting a private key crypto: ccp - Release dma channels before dmaengine unrgister crypto: inside-secure - Change swab to swab32 crypto: qat - fix use of 'dma_map_single' crypto: qat - use pre-allocated buffers in datapath crypto: qat - fix DMA transfer direction iommu/iova: Fix module config properly tracing: kprobe: Fix kprobe event gen test module on exit tracing: kprobe: Make gen test module work in arm and riscv kbuild: remove the target in signal traps when interrupted kbuild: rpm-pkg: fix breakage when V=1 is used crypto: marvell/octeontx - prevent integer overflows crypto: cavium - prevent integer overflow loading firmware thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id ACPI: APEI: do not add task_work to kernel thread to avoid memory leak f2fs: fix race condition on setting FI_NO_EXTENT flag f2fs: fix to avoid REQ_TIME and CP_TIME collision f2fs: fix to account FS_CP_DATA_IO correctly selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle rcu: Back off upon fill_page_cache_func() allocation failure rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE() ACPI: video: Add Toshiba Satellite/Portege Z830 quirk MIPS: BCM47XX: Cast memcmp() of function to (void *) powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash x86/entry: Work around Clang __bdos() bug NFSD: Return nfserr_serverfault if splice_ok but buf->pages have data NFSD: fix use-after-free on source server when doing inter-server copy wifi: brcmfmac: fix invalid address access when enabling SCAN log level bpftool: Clear errno after libcap's checks openvswitch: Fix double reporting of drops in dropwatch openvswitch: Fix overreporting of drops in dropwatch tcp: annotate data-race around tcp_md5sig_pool_populated wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg() xfrm: Update ipcomp_scratches with NULL when freed wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit() regulator: core: Prevent integer underflow Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create() Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times can: bcm: check the result of can_send() in bcm_can_tx() wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620 wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620 wifi: rt2x00: set VGC gain for both chains of MT7620 wifi: rt2x00: set SoC wmac clock register wifi: rt2x00: correctly set BBP register 86 for MT7620 net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory Bluetooth: L2CAP: Fix user-after-free r8152: Rate limit overflow messages drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc() drm: Use size_t type for len variable in drm_copy_field() drm: Prevent drm_copy_field() to attempt copying a NULL pointer gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init() drm/amd/display: fix overflow on MIN_I64 definition udmabuf: Set ubuf->sg = NULL if the creation of sg table fails drm: bridge: dw_hdmi: only trigger hotplug event on link change drm/vc4: vec: Fix timings for VEC modes drm: panel-orientation-quirks: Add quirk for Anbernic Win600 platform/chrome: cros_ec: Notify the PM of wake events during resume platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading ASoC: SOF: pci: Change DMI match info to support all Chrome platforms drm/amdgpu: fix initial connector audio value drm/meson: explicitly remove aggregate driver at module unload time mmc: sdhci-msm: add compatible string check for sdm670 drm/dp: Don't rewrite link config when setting phy test pattern drm/amd/display: Remove interface for periodic interrupt 1 ARM: dts: imx7d-sdb: config the max pressure for tsc2046 ARM: dts: imx6q: add missing properties for sram ARM: dts: imx6dl: add missing properties for sram ARM: dts: imx6qp: add missing properties for sram ARM: dts: imx6sl: add missing properties for sram ARM: dts: imx6sll: add missing properties for sram ARM: dts: imx6sx: add missing properties for sram kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply btrfs: scrub: try to fix super block errors clk: zynqmp: Fix stack-out-of-bounds in strncpy` media: cx88: Fix a null-ptr-deref bug in buffer_prepare() clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate usb: host: xhci-plat: suspend and resume clocks usb: host: xhci-plat: suspend/resume clks for brcm scsi: 3w-9xxx: Avoid disabling device if failing to enable it nbd: Fix hung when signal interrupts nbd_start_device_ioctl() power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type() staging: vt6655: fix potential memory leak blk-throttle: prevent overflow while calculating wait time ata: libahci_platform: Sanity check the DT child nodes number bcache: fix set_at_max_writeback_rate() for multiple attached devices soundwire: cadence: Don't overwrite msg->buf during write commands soundwire: intel: fix error handling on dai registration issues HID: roccat: Fix use-after-free in roccat_read() md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info() usb: musb: Fix musb_gadget.c rxstate overflow bug Revert "usb: storage: Add quirk for Samsung Fit flash" staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv() nvme: copy firmware_rev on each init nvmet-tcp: add bounds check on Transfer Tag usb: idmouse: fix an uninit-value in idmouse_open clk: bcm2835: Make peripheral PLLC critical perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc arm64: topology: fix possible overflow in amu_fie_setup() io_uring: correct pinned_vm accounting io_uring/af_unix: defer registered files gc to io_uring release mm: hugetlb: fix UAF in hugetlb_handle_userfault net: ieee802154: return -EINVAL for unknown addr type Revert "net/ieee802154: reject zero-sized raw_sendmsg()" net/ieee802154: don't warn zero-sized raw_sendmsg() Revert "drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega" Revert "drm/amdgpu: use dirty framebuffer helper" ext4: continue to expand file system when the target size doesn't reach inet: fully convert sk->sk_rx_dst to RCU rules thermal: intel_powerclamp: Use first online CPU as control_cpu f2fs: fix wrong condition to trigger background checkpoint correctly gcov: support GCC 12.1 and newer compilers Revert "drm/amdgpu: make sure to init common IP before gmc" Linux 5.10.150 Change-Id: I54f32f1f0149ec614c8bc7944e15adb5d80cd51a Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2022-11-15 19:14:08 +00:00
Greg Kroah-Hartman	0118fb827b	Merge branch 'android12-5.10' into branch 'android12-5.10-lts' ... Sync up with android12-5.10 for the following commits: af699fd6a2 ANDROID: vendor_hook: skip trace_android_vh_page_trylock_set when ignore_references is true 5aec776ef8 BACKPORT: ANDROID: dma-buf: Move sysfs work out of DMA-BUF export path d61d7ebf6f UPSTREAM: wifi: mac80211: fix MBSSID parsing use-after-free 173913b365 UPSTREAM: wifi: mac80211: don't parse mbssid in assoc response 9ed9ab8ca9 UPSTREAM: mac80211: mlme: find auth challenge directly d6e68e31b8 UPSTREAM: wifi: cfg80211: update hidden BSSes to avoid WARN_ON 3ea906ba30 UPSTREAM: wifi: mac80211: fix crash in beacon protection for P2P-device 241426b24b UPSTREAM: wifi: mac80211_hwsim: avoid mac80211 warning on bad rate 50e27143a5 UPSTREAM: wifi: cfg80211: avoid nontransmitted BSS list corruption 05a0122295 UPSTREAM: wifi: cfg80211: fix BSS refcounting bugs 2e8c292e35 UPSTREAM: wifi: cfg80211: ensure length byte is present before access 5f6b14356a UPSTREAM: wifi: cfg80211/mac80211: reject bad MBSSID elements 6aeb3ccf09 UPSTREAM: wifi: cfg80211: fix u8 overflow in cfg80211_update_notlisted_nontrans() 13a84bfa4f ANDROID: GKI: Update symbols to symbol list 09f4246296 ANDROID: sched: add restricted hooks to replace the former hooks 376aaf803f ANDROID: GKI: Add symbol snd_pcm_stop_xrun 8512c353a2 ANDROID: ABI: update allowed list for galaxy 439fc06787 ANDROID: GKI: Update symbols to symbol list beaaa7bff8 UPSTREAM: dma-buf: ensure unique directory name for dmabuf stats d71115b1bf UPSTREAM: dma-buf: call dma_buf_stats_setup after dmabuf is in valid list f9a66cbe70 ANDROID: GKI: Update symbol list for mtk AIoT projects a3835ce695 UPSTREAM: psi: Fix psi state corruption when schedule() races with cgroup move 3b39e91301 BACKPORT: HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report c35cda5280 BACKPORT: mm: don't be stuck to rmap lock on reclaim path 9613bc53b5 Revert "firmware_loader: use kernel credentials when reading firmware" 95f23ced41 UPSTREAM: crypto: jitter - add oversampling of noise source b046e2dca5 ANDROID: Fix kenelci build-break for !CONFIG_PERF_EVENTS 24220df802 FROMGIT: f2fs: support recording stop_checkpoint reason into super_block f18e68a234 UPSTREAM: wifi: mac80211_hwsim: use 32-bit skb cookie 08cb67eb33 UPSTREAM: wifi: mac80211_hwsim: add back erroneously removed cast 9b080edfbd UPSTREAM: wifi: mac80211_hwsim: fix race condition in pending packet Update the .xml file with the newly tracked symbols: Leaf changes summary: 30 artifacts changed Changed leaf types summary: 0 leaf type changed Removed/Changed/Added functions summary: 0 Removed, 0 Changed, 24 Added functions Removed/Changed/Added variables summary: 0 Removed, 0 Changed, 6 Added variables 24 Added functions: [A] 'function void __rtnl_link_unregister(rtnl_link_ops*)' [A] 'function int __traceiter_android_rvh_alloc_si(void*, swap_info_struct**, bool*)' [A] 'function int __traceiter_android_rvh_alloc_swap_slot_cache(void*, swap_slots_cache*, int*, bool*)' [A] 'function int __traceiter_android_rvh_drain_slots_cache_cpu(void*, swap_slots_cache*, unsigned int, bool, bool*)' [A] 'function int __traceiter_android_rvh_free_swap_slot(void*, swp_entry_t, swap_slots_cache*, bool*)' [A] 'function int __traceiter_android_rvh_get_swap_page(void*, page*, swp_entry_t*, swap_slots_cache*, bool*)' [A] 'function int __traceiter_android_rvh_handle_pte_fault_end(void*, vm_fault*, unsigned long int)' [A] 'function net_device* dev_get_by_index_rcu(net*, int)' [A] 'function phy_device* fixed_phy_register(unsigned int, fixed_phy_status*, device_node*)' [A] 'function void fixed_phy_unregister(phy_device*)' [A] 'function irq_domain* irq_domain_add_simple(device_node*, unsigned int, unsigned int, const irq_domain_ops*, void*)' [A] 'function int nf_register_net_hook(net*, const nf_hook_ops*)' [A] 'function void nf_unregister_net_hook(net*, const nf_hook_ops*)' [A] 'function int phy_ethtool_set_wol(phy_device*, ethtool_wolinfo*)' [A] 'function int phy_register_fixup_for_uid(u32, u32, int (phy_device*)*)' [A] 'function int phy_save_page(phy_device*)' [A] 'function int phy_unregister_fixup_for_uid(u32, u32)' [A] 'function int snd_pcm_stop_xrun(snd_pcm_substream*)' [A] 'function void tty_encode_baud_rate(tty_struct*, speed_t, speed_t)' [A] 'function int usb_autopm_get_interface_async(usb_interface*)' [A] 'function void usb_autopm_put_interface_async(usb_interface*)' [A] 'function int usb_clear_halt(usb_device*, int)' [A] 'function int usb_interrupt_msg(usb_device*, unsigned int, void*, int, int*, int)' [A] 'function int usb_unlink_urb(urb*)' 6 Added variables: [A] 'tracepoint __tracepoint_android_rvh_alloc_si' [A] 'tracepoint __tracepoint_android_rvh_alloc_swap_slot_cache' [A] 'tracepoint __tracepoint_android_rvh_drain_slots_cache_cpu' [A] 'tracepoint __tracepoint_android_rvh_free_swap_slot' [A] 'tracepoint __tracepoint_android_rvh_get_swap_page' [A] 'tracepoint __tracepoint_android_rvh_handle_pte_fault_end' Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I225d5838de38d886151cf619654412ee8c5428b2	2022-10-27 09:01:03 +00:00
Ignat Korchagin	a1354bdd19	crypto: akcipher - default implementation for setting a private key ... [ Upstream commit bc155c6c188c2f0c5749993b1405673d25a80389 ] Changes from v1: * removed the default implementation from set_pub_key: it is assumed that an implementation must always have this callback defined as there are no use case for an algorithm, which doesn't need a public key Many akcipher implementations (like ECDSA) support only signature verifications, so they don't have all callbacks defined. Commit 78a0324f4a ("crypto: akcipher - default implementations for request callbacks") introduced default callbacks for sign/verify operations, which just return an error code. However, these are not enough, because before calling sign the caller would likely call set_priv_key first on the instantiated transform (as the in-kernel testmgr does). This function does not have a default stub, so the kernel crashes, when trying to set a private key on an akcipher, which doesn't support signature generation. I've noticed this, when trying to add a KAT vector for ECDSA signature to the testmgr. With this patch the testmgr returns an error in dmesg (as it should) instead of crashing the kernel NULL ptr dereference. Fixes: 78a0324f4a ("crypto: akcipher - default implementations for request callbacks") Signed-off-by: Ignat Korchagin <ignat@cloudflare.com> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-10-26 13:25:42 +02:00
Stephan Müller	95f23ced41	UPSTREAM: crypto: jitter - add oversampling of noise source ... The output n bits can receive more than n bits of min entropy, of course, but the fixed output of the conditioning function can only asymptotically approach the output size bits of min entropy, not attain that bound. Random maps will tend to have output collisions, which reduces the creditable output entropy (that is what SP 800-90B Section 3.1.5.1.2 attempts to bound). The value "64" is justified in Appendix A.4 of the current 90C draft, and aligns with NIST's in "epsilon" definition in this document, which is that a string can be considered "full entropy" if you can bound the min entropy in each bit of output to at least 1-epsilon, where epsilon is required to be <= 2^(-32). Note, this patch causes the Jitter RNG to cut its performance in half in FIPS mode because the conditioning function of the LFSR produces 64 bits of entropy in one block. The oversampling requires that additionally 64 bits of entropy are sampled from the noise source. If the conditioner is changed, such as using SHA-256, the impact of the oversampling is only one fourth, because for the 256 bit block of the conditioner, only 64 additional bits from the noise source must be sampled. This patch is derived from the user space jitterentropy-library. Signed-off-by: Stephan Mueller <smueller@chronox.de> Reviewed-by: Simo Sorce <simo@redhat.com> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Bug: 188620248 (cherry picked from commit 908dffaf88a248e542bdae3ca174f27b8f4ccf37) Change-Id: I7ae1fe58c1b5ea5f206a8f3675f0c20e255a97ec Signed-off-by: Eric Biggers <ebiggers@google.com>	2022-10-07 08:41:47 +00:00
Greg Kroah-Hartman	0e8dfc1216	Merge branch 'android12-5.10' into branch 'android12-5.10-lts' ... Sync up with android12-5.10 for the following commits: 5545801f5c ANDROID: abi_gki_aarch64_qcom: Add android_vh_madvise_cold_or_pageout d195c9f2bb ANDROID: force struct page_vma_mapped_walk to be defined in KMI 464a3706e6 Merge "Merge tag 'android12-5.10.136_r00' into android12-5.10" into android12-5.10 18cd39b706 Merge tag 'android12-5.10.136_r00' into android12-5.10 6d04d8ce90 ANDROID: vendor_hooks: Allow shared pages reclaim via MADV_PAGEOUT 2d8afda40e UPSTREAM: usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS 4135365b5d ANDROID: GKI: Update symbols to symbol list c6f7a0ebd8 ANDROID: make sure all types for hooks are defined in KMI b9ac329a83 ANDROID: force struct selinux_state to be defined in KMI b71060e6eb BACKPORT: erofs: fix use-after-free of on-stack io[] ecf5583fc7 ANDROID: GKI: Update symbols to symbol list 5c5b7a4da6 ANDROID: vendor_hook: rename the the name of hooks 2c625a20c0 ANDROID: ABI: Add extcon_get_property_capability symbol 72b1f9fd16 Revert "ANDROID: arm64: debug-monitors: export break hook APIs" cc51dcbc60 Revert "ANDROID: vendor_hooks:vendor hook for __alloc_pages_slowpath." 9072e986bd Revert "ANDROID: Export functions to be used with dma_map_ops in modules" 2fc96f32ee FROMLIST: f2fs: let FI_OPU_WRITE override FADVISE_COLD_BIT 06b301069f ANDROID: remove unused xhci_get_endpoint_address export bcf6dddd97 ANDROID: incfs: Add check for ATTR_KILL_SUID and ATTR_MODE in incfs_setattr d915364e92 ANDROID: GKI: Update symbols to symbol list db2516ff46 ANDROID: vendor_hooks: Add hooks for lookaround feedd14d14 Revert "Revert "ANDROID: add for tuning readahead size"" 9252f4d58b ANDROID: transsion: Update the ABI xml and symbol list f50f24e781 ANDROID: vendor_hooks: Add hooks for lookaround c762f435c0 BACKPORT: dm verity: set DM_TARGET_IMMUTABLE feature flag 2bd9e6cddc BACKPORT: pipe: Fix missing lock in pipe_resize_ring() d7586fa209 BACKPORT: KVM: x86: avoid calling x86 emulator without a decoded instruction cee231f83b ANDROID: GKI: add symbols in android/abi_gki_aarch64_oplus 8aaba3c5a1 BACKPORT: watchqueue: make sure to serialize 'wqueue->defunct' properly 7351343bc8 ANDROID: GKI: Update symbol list for Exynos SoC 9527907814 UPSTREAM: usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop bda2986f13 UPSTREAM: usb: typec: ucsi: Acknowledge the GET_ERROR_STATUS command completion eef3b6ff41 BACKPORT: scsi: ufs: core: Increase fDeviceInit poll frequency eaa7364bf7 FROMGIT: f2fs: increase the limit for reserve_root 42aa1955c2 FROMGIT: f2fs: complete checkpoints during remount 1c5313a9f7 FROMGIT: f2fs: flush pending checkpoints when freezing super 604f2f5656 BACKPORT: f2fs: don't get FREEZE lock in f2fs_evict_inode in frozen fs 594835143a BACKPORT: f2fs: introduce F2FS_IPU_HONOR_OPU_WRITE ipu policy 85aff72329 Revert "ANDROID: GKI: signal: Export for __lock_task_sighand" 22b447e9bd BACKPORT: f2fs: invalidate meta pages only for post_read required inode fa0cdb5b9d BACKPORT: f2fs: fix to invalidate META_MAPPING before DIO write 2301307412 BACKPORT: f2fs: invalidate META_MAPPING before IPU/DIO write 99f0160022 ANDROID: mm: page_pinner: use page_ext_get/put() to work with page_ext 2b3f9b8187 FROMLIST: mm: fix use-after free of page_ext after race with memory-offline dec2f52d08 ANDROID: vendor_hooks:vendor hook for __alloc_pages_slowpath. bc08447eb7 ANDROID: GKI: rockchip: add symbol netif_set_xps_queue 3f90d4f1f3 ANDROID: GKI: Update symbol list 7b0822a261 Revert "ANDROID: vendor_hooks: tune reclaim scan type for specified mem_cgroup" 425c0f18ed ANDROID: Fix a build warning inside early_memblock_nomap 84a0d243b6 ANDROID: mm/memory_hotplug: Fix error path handling 98e5fb34d1 Revert "ANDROID: add for tuning readahead size" 486580ffb5 Revert "ANDROID: vendor_hooks: Add hooks for mutex" Update the .xml file to add the following new symbols that were now started to be tracked in the android12-5.10 branch: Leaf changes summary: 40 artifacts changed Changed leaf types summary: 0 leaf type changed Removed/Changed/Added functions summary: 1 Removed, 0 Changed, 18 Added functions Removed/Changed/Added variables summary: 1 Removed, 0 Changed, 20 Added variables 1 Removed function: [D] 'function int __traceiter_android_vh_record_percpu_rwsem_lock_starttime(void*, task_struct*, unsigned long int)' 18 Added functions: [A] 'function void __page_frag_cache_drain(page*, unsigned int)' [A] 'function int __traceiter_android_vh_check_page_look_around_ref(void*, page*, int*)' [A] 'function int __traceiter_android_vh_do_futex(void*, int, unsigned int*, u32*)' [A] 'function int __traceiter_android_vh_futex_wait_end(void*, unsigned int, u32)' [A] 'function int __traceiter_android_vh_futex_wait_start(void*, unsigned int, u32)' [A] 'function int __traceiter_android_vh_futex_wake_this(void*, int, int, int, task_struct*)' [A] 'function int __traceiter_android_vh_futex_wake_traverse_plist(void*, plist_head*, int*, futex_key, u32)' [A] 'function int __traceiter_android_vh_futex_wake_up_q_finish(void*, int, int)' [A] 'function int __traceiter_android_vh_look_around(void*, page_vma_mapped_walk*, page*, vm_area_struct*, int*)' [A] 'function int __traceiter_android_vh_look_around_migrate_page(void*, page*, page*)' [A] 'function int __traceiter_android_vh_ra_tuning_max_page(void*, readahead_control*, unsigned long int*)' [A] 'function int __traceiter_android_vh_record_pcpu_rwsem_starttime(void*, task_struct*, unsigned long int)' [A] 'function int __traceiter_android_vh_test_clear_look_around_ref(void*, page*)' [A] 'function int extcon_get_property_capability(extcon_dev*, unsigned int, unsigned int)' [A] 'function int netif_set_xps_queue(net_device*, const cpumask*, u16)' [A] 'function void* page_frag_alloc(page_frag_cache*, unsigned int, gfp_t)' [A] 'function void page_frag_free(void*)' [A] 'function bool rng_is_initialized()' 1 Removed variable: [D] 'tracepoint __tracepoint_android_vh_record_percpu_rwsem_lock_starttime' 20 Added variables: [A] 'const gic_chip_data* GKI_struct_gic_chip_data' [A] 'selinux_state* GKI_struct_selinux_state' [A] 'const swap_slots_cache* GKI_struct_swap_slots_cache' [A] 'tracepoint __tracepoint_android_vh_check_page_look_around_ref' [A] 'tracepoint __tracepoint_android_vh_do_futex' [A] 'tracepoint __tracepoint_android_vh_futex_wait_end' [A] 'tracepoint __tracepoint_android_vh_futex_wait_start' [A] 'tracepoint __tracepoint_android_vh_futex_wake_this' [A] 'tracepoint __tracepoint_android_vh_futex_wake_traverse_plist' [A] 'tracepoint __tracepoint_android_vh_futex_wake_up_q_finish' [A] 'tracepoint __tracepoint_android_vh_look_around' [A] 'tracepoint __tracepoint_android_vh_look_around_migrate_page' [A] 'tracepoint __tracepoint_android_vh_madvise_cold_or_pageout' [A] 'tracepoint __tracepoint_android_vh_ra_tuning_max_page' [A] 'tracepoint __tracepoint_android_vh_record_pcpu_rwsem_starttime' [A] 'tracepoint __tracepoint_android_vh_test_clear_look_around_ref' [A] 'tracepoint __tracepoint_net_dev_queue' [A] 'tracepoint __tracepoint_net_dev_xmit' [A] 'tracepoint __tracepoint_netif_receive_skb' [A] 'tracepoint __tracepoint_netif_rx' Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I300286a8e658793249f37797cd2ede7555dfacc9	2022-10-01 14:58:20 +02:00
Greg Kroah-Hartman	18cd39b706	Merge tag 'android12-5.10.136_r00' into android12-5.10 ... This is the merge of the upstream LTS release of 5.10.136 into the android12-5.10 branch. It contains the following commits: ee965fe12d Merge branch 'android12-5.10' into branch 'android12-5.10-lts' b7247246f6 Merge 5.10.136 into android12-5.10-lts 6eae1503dd Linux 5.10.136 1bea03b44e x86/speculation: Add LFENCE to RSB fill sequence 509c2c9fe7 x86/speculation: Add RSB VM Exit protections e5b556a7b2 macintosh/adb: fix oob read in do_adb_query() function 75742ffc36 Bluetooth: btusb: Add Realtek RTL8852C support ID 0x13D3:0x3586 40e2e7f1bf Bluetooth: btusb: Add Realtek RTL8852C support ID 0x13D3:0x3587 9c45bb363e Bluetooth: btusb: Add Realtek RTL8852C support ID 0x0CB8:0xC558 3a292cb181 Bluetooth: btusb: Add Realtek RTL8852C support ID 0x04C5:0x1675 1a2a2e3456 Bluetooth: btusb: Add Realtek RTL8852C support ID 0x04CA:0x4007 e81f95d030 Bluetooth: btusb: Add support of IMC Networks PID 0x3568 918ce738e2 Bluetooth: hci_bcm: Add DT compatible for CYW55572 033a4455d9 Bluetooth: hci_bcm: Add BCM4349B1 variant 50763f0ac0 selftests: KVM: Handle compiler optimizations in ucall a56e1ccdb7 tools/kvm_stat: fix display of error when multiple processes are found 3c77292d52 crypto: arm64/poly1305 - fix a read out-of-bound e2c63e1afd ACPI: APEI: Better fix to avoid spamming the console with old error logs 6ccff35588 ACPI: video: Shortening quirk list by identifying Clevo by board_name only a2b472b152 ACPI: video: Force backlight native for some TongFang devices a01a4e9f5d tun: avoid double free in tun_free_netdev 1069087e2f selftests/bpf: Check dst_port only on the client socket 042fb1c281 selftests/bpf: Extend verifier and bpf_sock tests for dst_port loads 78c8397132 ath9k_htc: fix NULL pointer dereference at ath9k_htc_tx_get_packet() 4f3b852336 ath9k_htc: fix NULL pointer dereference at ath9k_htc_rxep() 45b69848a2 x86/speculation: Make all RETbleed mitigations 64-bit only 30abcdabf2 Merge 5.10.135 into android12-5.10-lts f6ce9a9115 Merge 5.10.134 into android12-5.10-lts 4fd9cb57a3 Linux 5.10.135 4bfc9dc608 selftests: bpf: Don't run sk_lookup in verifier tests 6d3fad2b44 bpf: Add PROG_TEST_RUN support for sk_lookup programs 6aad811b37 bpf: Consolidate shared test timing code 545fc3524c x86/bugs: Do not enable IBPB at firmware entry when IBPB is not available 14b494b7aa xfs: Enforce attr3 buffer recovery order e5f9d4e0f8 xfs: logging the on disk inode LSN can make it go backwards c1268acaa0 xfs: remove dead stale buf unpin handling code c85cbb0b21 xfs: hold buffer across unpin and potential shutdown processing d8f5bb0a09 xfs: force the log offline when log intent item recovery fails eccacbcbfd xfs: fix log intent recovery ENOSPC shutdowns when inactivating inodes 17c8097fb0 xfs: prevent UAF in xfs_log_item_in_current_chkpt 6d3605f84e xfs: xfs_log_force_lsn isn't passed a LSN 41fbfdaba9 xfs: refactor xfs_file_fsync aadc39fd5b docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed c4cd52ab1e EDAC/ghes: Set the DIMM label unconditionally c454639172 ARM: 9216/1: Fix MAX_DMA_ADDRESS overflow e500aa9f2d mt7601u: add USB device ID for some versions of XiaoDu WiFi Dongle. 2670f76a56 page_alloc: fix invalid watermark check on a negative value 8014246694 ARM: crypto: comment out gcc warning that breaks clang builds 6f3505588d sctp: leave the err path free in sctp_stream_init to sctp_stream_free 510e5b3791 sfc: disable softirqs for ptp TX 3ec42508a6 perf symbol: Correct address for bss symbols 6807897695 virtio-net: fix the race between refill work and close 440dccd80f netfilter: nf_queue: do not allow packet truncation below transport header offset aeb2ff9f9f sctp: fix sleep in atomic context bug in timer handlers fad6caf9b1 i40e: Fix interface init with MSI interrupts (no MSI-X) e4a7acd6b4 tcp: Fix data-races around sysctl_tcp_reflect_tos. f310fb69a0 tcp: Fix a data-race around sysctl_tcp_comp_sack_nr. d2476f2059 tcp: Fix a data-race around sysctl_tcp_comp_sack_slack_ns. 4832397891 tcp: Fix a data-race around sysctl_tcp_comp_sack_delay_ns. 530a4da37e net: macsec: fix potential resource leak in macsec_add_rxsa() and macsec_add_txsa() 6e0e0464f1 macsec: always read MACSEC_SA_ATTR_PN as a u64 2daf0a1261 macsec: limit replay window size with XPN 0755c9d05a macsec: fix error message in macsec_add_rxsa and _txsa 54c295a30f macsec: fix NULL deref in macsec_add_rxsa 034bfadc8f Documentation: fix sctp_wmem in ip-sysctl.rst 4aea33f404 tcp: Fix a data-race around sysctl_tcp_invalid_ratelimit. c4e6029a85 tcp: Fix a data-race around sysctl_tcp_autocorking. 83edb788e6 tcp: Fix a data-race around sysctl_tcp_min_rtt_wlen. f47e7e5b49 tcp: Fix a data-race around sysctl_tcp_min_tso_segs. 5584fe9718 net: sungem_phy: Add of_node_put() for reference returned by of_get_parent() b399ffafff igmp: Fix data-races around sysctl_igmp_qrv. 4c1318dabe net/tls: Remove the context from the list in tls_device_down 8008e797ec ipv6/addrconf: fix a null-ptr-deref bug for ip6_ptr a84b8b53a5 net: ping6: Fix memleak in ipv6_renew_options(). c37c7f35d7 tcp: Fix a data-race around sysctl_tcp_challenge_ack_limit. 9ffb4fdfd8 tcp: Fix a data-race around sysctl_tcp_limit_output_bytes. 3e93312583 tcp: Fix data-races around sysctl_tcp_moderate_rcvbuf. 77ac046a9a Revert "tcp: change pingpong threshold to 3" 54a73d6544 scsi: ufs: host: Hold reference returned by of_parse_phandle() 160f79561e ice: do not setup vlan for loopback VSI 9ed6f97c8d ice: check (DD | EOF) bits on Rx descriptor rather than (EOP | RS) 2b4b373271 tcp: Fix data-races around sysctl_tcp_no_ssthresh_metrics_save. 3fb21b67c0 tcp: Fix a data-race around sysctl_tcp_nometrics_save. 81c45f49e6 tcp: Fix a data-race around sysctl_tcp_frto. 312ce3901f tcp: Fix a data-race around sysctl_tcp_adv_win_scale. 3cddb7a7a5 tcp: Fix a data-race around sysctl_tcp_app_win. f10a5f905a tcp: Fix data-races around sysctl_tcp_dsack. 7fa8999b31 watch_queue: Fix missing locking in add_watch_to_object() 45a84f04a9 watch_queue: Fix missing rcu annotation b38a8802c5 nouveau/svm: Fix to migrate all requested pages bd46ca4146 s390/archrandom: prevent CPACF trng invocations in interrupt context 1228934cf2 ntfs: fix use-after-free in ntfs_ucsncmp() 5528990512 Revert "ocfs2: mount shared volume without ha stack" de5d4654ac Bluetooth: L2CAP: Fix use-after-free caused by l2cap_chan_put a46cc20143 Merge 5.10.133 into android12-5.10-lts 3f05c6dd13 ANDROID: fix up 5.10.132 merge with the virtio_mmio.c driver 7a62a4b621 Linux 5.10.134 bb1990a300 watch-queue: remove spurious double semicolon f7c1fc0dec net: usb: ax88179_178a needs FLAG_SEND_ZLP 08afa87f58 tty: use new tty_insert_flip_string_and_push_buffer() in pty_write() a4bb7ef2d6 tty: extract tty_flip_buffer_commit() from tty_flip_buffer_push() c84986d097 tty: drop tty_schedule_flip() 4d374625cc tty: the rest, stop using tty_schedule_flip() 6a81848252 tty: drivers/tty/, stop using tty_schedule_flip() 0adf21eec5 watchqueue: make sure to serialize 'wqueue->defunct' properly c0a3a9eb26 x86/alternative: Report missing return thunk details b7b9e5cc8b x86/amd: Use IBPB for firmware calls 14fc9233aa Bluetooth: Fix bt_skb_sendmmsg not allocating partial chunks f44e65e6f0 Bluetooth: SCO: Fix sco_send_frame returning skb->len a8feae8bd2 Bluetooth: Fix passing NULL to PTR_ERR 5283591c84 Bluetooth: RFCOMM: Replace use of memcpy_from_msg with bt_skb_sendmmsg 341a029cf3 Bluetooth: SCO: Replace use of memcpy_from_msg with bt_skb_sendmsg 3cce0e771f Bluetooth: Add bt_skb_sendmmsg helper c87b2bc9d7 Bluetooth: Add bt_skb_sendmsg helper 4faf4bbc2d ALSA: memalloc: Align buffer allocations in page size d1dc861cd6 bitfield.h: Fix "type of reg too small for mask" test f62ffdb5e2 drm/imx/dcss: fix unused but set variable warnings 577b624689 dlm: fix pending remove if msg allocation fails cdcd20aa2c x86/bugs: Warn when "ibrs" mitigation is selected on Enhanced IBRS parts 26d5eb3c25 sched/deadline: Fix BUG_ON condition for deboosted tasks 0c722a32f2 bpf: Make sure mac_header was set before using it ddb3f0b688 mm/mempolicy: fix uninit-value in mpol_rebind_policy() 3616776bc5 KVM: Don't null dereference ops->destroy 684896e675 spi: bcm2835: bcm2835_spi_handle_err(): fix NULL pointer deref for non DMA transfers 0648526633 tcp: Fix data-races around sysctl_tcp_max_reordering. 805f1c7ce4 tcp: Fix a data-race around sysctl_tcp_rfc1337. 03bb3892f3 tcp: Fix a data-race around sysctl_tcp_stdurg. daa8b5b869 tcp: Fix a data-race around sysctl_tcp_retrans_collapse. 0e3f82a03e tcp: Fix data-races around sysctl_tcp_slow_start_after_idle. cc133e4f4b tcp: Fix a data-race around sysctl_tcp_thin_linear_timeouts. d8781f7cd0 tcp: Fix data-races around sysctl_tcp_recovery. 11e8b013d1 tcp: Fix a data-race around sysctl_tcp_early_retrans. ffc388f6f0 tcp: Fix data-races around sysctl knobs related to SYN option. fcaef69c79 udp: Fix a data-race around sysctl_udp_l3mdev_accept. 9add240f76 ip: Fix data-races around sysctl_ip_prot_sock. e045d672ba ipv4: Fix a data-race around sysctl_fib_multipath_use_neigh. 36f1d9c607 drm/imx/dcss: Add missing of_node_put() in fail path 665cbe91de be2net: Fix buffer overflow in be_get_module_eeprom 4752392855 gpio: pca953x: use the correct register address when regcache sync during init a941e6d5ba gpio: pca953x: use the correct range when do regmap sync 928ded3fc1 gpio: pca953x: only use single read/write for No AI mode b82de63f8f ixgbe: Add locking to prevent panic when setting sriov_numvfs to zero 6f949e5615 i40e: Fix erroneous adapter reinitialization during recovery process c6af943249 iavf: Fix handling of dummy receive descriptors 0dc2f19d8c tcp: Fix data-races around sysctl_tcp_fastopen_blackhole_timeout. 22938534c6 tcp: Fix data-races around sysctl_tcp_fastopen. b3ce32e33a tcp: Fix data-races around sysctl_max_syn_backlog. b6c189aa80 tcp: Fix a data-race around sysctl_tcp_tw_reuse. fd6f1284e3 tcp: Fix a data-race around sysctl_tcp_notsent_lowat. 768e424607 tcp: Fix data-races around some timeout sysctl knobs. 474510e174 tcp: Fix data-races around sysctl_tcp_reordering. dc1a78a2b2 tcp: Fix data-races around sysctl_tcp_syncookies. fc489055e7 tcp: Fix data-races around keepalive sysctl knobs. f85119fb3f igmp: Fix data-races around sysctl_igmp_max_msf. 7d26db0053 igmp: Fix a data-race around sysctl_igmp_max_memberships. 473aad9ad5 igmp: Fix data-races around sysctl_igmp_llm_reports. e80ff0b966 net/tls: Fix race in TLS device down flow a3ac79f38d net: stmmac: fix dma queue left shift overflow issue f3da643d87 i2c: cadence: Change large transfer count reset logic to be unconditional dd7b5ba44b net: stmmac: fix unbalanced ptp clock issue in suspend/resume flow c61aede097 tcp: Fix a data-race around sysctl_tcp_probe_interval. d452ce36f2 tcp: Fix a data-race around sysctl_tcp_probe_threshold. d5bece4df6 tcp: Fix a data-race around sysctl_tcp_mtu_probe_floor. 97992e8fef tcp: Fix data-races around sysctl_tcp_min_snd_mss. 514d2254c7 tcp: Fix data-races around sysctl_tcp_base_mss. 77a04845f0 tcp: Fix data-races around sysctl_tcp_mtu_probing. d4f65615db tcp/dccp: Fix a data-race around sysctl_tcp_fwmark_accept. 0ee76fe01f ip: Fix a data-race around sysctl_fwmark_reflect. 611ba70e5a ip: Fix a data-race around sysctl_ip_autobind_reuse. 94269132d0 ip: Fix data-races around sysctl_ip_nonlocal_bind. 11038fa781 ip: Fix data-races around sysctl_ip_fwd_update_priority. b96ed5ccb0 ip: Fix data-races around sysctl_ip_fwd_use_pmtu. 5e343e3ef4 ip: Fix data-races around sysctl_ip_no_pmtu_disc. 77836dbe35 igc: Reinstate IGC_REMOVED logic and implement it properly fb6031203e drm/amdgpu/display: add quirk handling for stutter mode 43128b3eee perf/core: Fix data race between perf_event_set_output() and perf_mmap_close() 5694b162f2 pinctrl: ralink: Check for null return of devm_kcalloc 493ceca327 power/reset: arm-versatile: Fix refcount leak in versatile_reboot_probe 47b696dd65 xfrm: xfrm_policy: fix a possible double xfrm_pols_put() in xfrm_bundle_lookup() 3777ea39f0 serial: mvebu-uart: correctly report configured baudrate value e744aad0c4 PCI: hv: Fix interrupt mapping for multi-MSI 522bd31d6b PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() 73bf070408 PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI f1d2f1ce05 PCI: hv: Fix multi-MSI to allow more than one MSI vector b07240ce4a Revert "m68knommu: only set CONFIG_ISA_DMA_API for ColdFire sub-arch" 4f900c37f1 net: inline rollback_registered_many() bf2f3d1970 net: move rollback_registered_many() 672fac0a43 net: inline rollback_registered() b1158677d4 net: move net_set_todo inside rollback_registered() 2e11856ec3 net: make sure devices go through netdev_wait_all_refs ed6964ff47 net: make free_netdev() more lenient with unregistering devices 2686f62fa7 docs: net: explain struct net_device lifetime 7a99c7c32c xen/gntdev: Ignore failure to unmap INVALID_GRANT_HANDLE 2ee0cab11f io_uring: Use original task for req identity in io_identity_cow() ab5050fd74 lockdown: Fix kexec lockdown bypass with ima policy 426336de35 mlxsw: spectrum_router: Fix IPv4 nexthop gateway indication 15155fa898 riscv: add as-options for modules with assembly compontents 31f3bb363a pinctrl: stm32: fix optional IRQ support to gpios bbc03f7ab8 Revert "cgroup: Use separate src/dst nodes when preloading css_sets for migration" 0c724b692d Merge 5.10.132 into android12-5.10-lts ccdb3f9143 Merge 5.10.131 into android12-5.10-lts 50c9c56f73 Merge 5.10.130 into android12-5.10-lts 2be16baf4d Merge 5.10.129 into android12-5.10-lts 96fb478c9d Merge 5.10.128 into android12-5.10-lts 195692d0ab Merge 5.10.127 into android12-5.10-lts f93a6ac3d6 Merge 5.10.126 into android12-5.10-lts 36c687c707 Merge 5.10.125 into android12-5.10-lts 4e3458d6d3 Merge 5.10.124 into android12-5.10-lts fa431a5707 Merge 5.10.123 into android12-5.10-lts 8a8eb074ed Merge 5.10.122 into android12-5.10-lts 0ced6946ac Revert "drm: fix EDID struct for old ARM OABI format" dca272b05d Revert "mailbox: forward the hrtimer if not queued and under a lock" a73f6da5a3 Revert "Fonts: Make font size unsigned in font_desc" 8324f66c71 Revert "parisc/stifb: Keep track of hardware path of graphics card" 26e506a63e Revert "Bluetooth: Interleave with allowlist scan" 8046f2ad50 Revert "Bluetooth: use inclusive language when filtering devices" b41a77c33b Revert "Bluetooth: use hdev lock for accept_list and reject_list in conn req" fe07069084 Revert "thermal/drivers/core: Use a char pointer for the cooling device name" 361d75b4c1 Revert "thermal/core: Fix memory leak in __thermal_cooling_device_register()" 090d920be9 Revert "thermal/core: fix a UAF bug in __thermal_cooling_device_register()" 2dc56158cb Revert "thermal/core: Fix memory leak in the error path" 28fd8700b4 Revert "ALSA: jack: Access input_dev under mutex" 8636671438 Revert "gpiolib: of: Introduce hook for missing gpio-ranges" 0889c70b1f Revert "pinctrl: bcm2835: implement hook for missing gpio-ranges" eaa4878a26 Revert "ext4: fix use-after-free in ext4_rename_dir_prepare" f004760d69 Revert "ext4: verify dir block before splitting it" 5034934536 Linux 5.10.133 2fc7f18ba2 tools headers: Remove broken definition of __LITTLE_ENDIAN 060e39b8c2 tools arch: Update arch/x86/lib/mem{cpy,set}_64.S copies used in 'perf bench mem memcpy' - again fbf60f83e2 objtool: Fix elf_create_undef_symbol() endianness 39065d5434 kvm: fix objtool relocation warning 6849ed81a3 x86: Use -mindirect-branch-cs-prefix for RETPOLINE builds 8e2774270a um: Add missing apply_returns() 725da3e67c x86/bugs: Remove apostrophe typo 81604506c2 tools headers cpufeatures: Sync with the kernel sources 3f93b8630a tools arch x86: Sync the msr-index.h copy with the kernel sources 2ef1b06cea KVM: emulate: do not adjust size of fastop and setcc subroutines 8e31dfd630 x86/kvm: fix FASTOP_SIZE when return thunks are enabled 5779e2f0cc efi/x86: use naked RET on mixed mode call wrapper abf88ff134 x86/speculation: Use DECLARE_PER_CPU for x86_spec_ctrl_current ecc0d92a9f x86/asm/32: Fix ANNOTATE_UNRET_SAFE use on 32-bit 95d89ec7db x86/ftrace: Add UNWIND_HINT_FUNC annotation for ftrace_stub 668cb1ddf0 x86/xen: Fix initialisation in hypercall_page after rethunk 81f20e5000 x86, kvm: use proper ASM macros for kvm_vcpu_is_preempted 844947eee3 tools/insn: Restore the relative include paths for cross building c035ca88b0 x86/static_call: Serialize __static_call_fixup() properly eb38964b6f x86/speculation: Disable RRSBA behavior c2ca992144 x86/kexec: Disable RET on kexec 51552b6b52 x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported 609336351d x86/bugs: Add Cannon lake to RETBleed affected CPU list b24fdd0f1c x86/retbleed: Add fine grained Kconfig knobs f7851ed697 x86/cpu/amd: Enumerate BTC_NO a74f5d23e6 x86/common: Stamp out the stepping madness 4d7f72b6e1 x86/speculation: Fill RSB on vmexit for IBRS 47ae76fb27 KVM: VMX: Fix IBRS handling after vmexit 5269be9111 KVM: VMX: Prevent guest RSB poisoning attacks with eIBRS 84061fff2a KVM: VMX: Convert launched argument to flags 07401c2311 KVM: VMX: Flatten __vmx_vcpu_run() df93717a32 objtool: Re-add UNWIND_HINT_{SAVE_RESTORE} 1dbefa5772 x86/speculation: Remove x86_spec_ctrl_mask ce11f91b21 x86/speculation: Use cached host SPEC_CTRL value for guest entry/exit aad83db22e x86/speculation: Fix SPEC_CTRL write on SMT state change d29c07912a x86/speculation: Fix firmware entry SPEC_CTRL handling f1b01ace81 x86/speculation: Fix RSB filling with CONFIG_RETPOLINE=n ea1aa926f4 x86/cpu/amd: Add Spectral Chicken 0d1a8a16e6 objtool: Add entry UNRET validation fbab1c94eb x86/bugs: Do IBPB fallback check only once c8845b8754 x86/bugs: Add retbleed=ibpb f728eff263 x86/xen: Rename SYS* entry points 28aa3fa0b2 objtool: Update Retpoline validation 55bba093fd intel_idle: Disable IBRS during long idle e8142e2d6c x86/bugs: Report Intel retbleed vulnerability a0f8ef71d7 x86/bugs: Split spectre_v2_select_mitigation() and spectre_v2_user_select_mitigation() dabc2a1b40 x86/speculation: Add spectre_v2=ibrs option to support Kernel IBRS 6d7e13ccc4 x86/bugs: Optimize SPEC_CTRL MSR writes 3dddacf8c3 x86/entry: Add kernel IBRS implementation 9e727e0d94 x86/bugs: Keep a per-CPU IA32_SPEC_CTRL value a989e75136 x86/bugs: Enable STIBP for JMP2RET 3f29791d56 x86/bugs: Add AMD retbleed= boot parameter 876750cca4 x86/bugs: Report AMD retbleed vulnerability df748593c5 x86: Add magic AMD return-thunk c70d6f8214 objtool: Treat .text.__x86.* as noinstr c9eb5dcdc8 x86: Use return-thunk in asm code 5b2edaf709 x86/sev: Avoid using __x86_return_thunk d6eb50e9b7 x86/vsyscall_emu/64: Don't use RET in vsyscall emulation ee4996f07d x86/kvm: Fix SETcc emulation for return thunks e0e06a9227 x86/bpf: Use alternative RET encoding 00b136bb62 x86/ftrace: Use alternative RET encoding 7723edf5ed x86,static_call: Use alternative RET encoding 446eb6f089 objtool: skip non-text sections when adding return-thunk sites 8bdb25f7ae x86,objtool: Create .return_sites 716410960b x86: Undo return-thunk damage 270de63cf4 x86/retpoline: Use -mfunction-return 37b9bb0941 Makefile: Set retpoline cflags based on CONFIG_CC_IS_{CLANG,GCC} 3e519ed8d5 x86/retpoline: Swizzle retpoline thunk 6a2b142886 x86/retpoline: Cleanup some #ifdefery feec5277d5 x86/cpufeatures: Move RETPOLINE flags to word 11 7070bbb66c x86/kvm/vmx: Make noinstr clean accb8cfd50 x86/realmode: build with -D__DISABLE_EXPORTS 236b959da9 objtool: Fix objtool regression on x32 systems 148811a842 x86/entry: Remove skip_r11rcx e1db6c8a69 objtool: Fix symbol creation 3e8afd072d objtool: Fix type of reloc::addend 42ec4d7135 objtool: Fix code relocs vs weak symbols 831d5c07b7 objtool: Fix SLS validation for kcov tail-call replacement 9728af8857 crypto: x86/poly1305 - Fixup SLS 03c5c33e04 objtool: Default ignore INT3 for unreachable bef21f88b4 kvm/emulate: Fix SETcc emulation function offsets with SLS 494ed76c14 tools arch: Update arch/x86/lib/mem{cpy,set}_64.S copies used in 'perf bench mem memcpy' e9925a4584 x86: Add straight-line-speculation mitigation 0f8532c283 objtool: Add straight-line-speculation validation 1f6e6683c4 x86/alternative: Relax text_poke_bp() constraint 277f4ddc36 x86: Prepare inline-asm for straight-line-speculation 3c91e22576 x86: Prepare asm files for straight-line-speculation a512fcd881 x86/lib/atomic64_386_32: Rename things c2746d567d bpf,x86: Respect X86_FEATURE_RETPOLINE* 1713e5c4f8 bpf,x86: Simplify computing label offsets 38a80a3ca2 x86/alternative: Add debug prints to apply_retpolines() 3d13ee0d41 x86/alternative: Try inline spectre_v2=retpoline,amd b0e2dc9506 x86/alternative: Handle Jcc __x86_indirect_thunk_\reg 381fd04c97 x86/alternative: Implement .retpoline_sites support 6eb95718f3 x86/retpoline: Create a retpoline thunk array 0de47ad5b9 x86/retpoline: Move the retpoline thunk declarations to nospec-branch.h 41ef958070 x86/asm: Fixup odd GEN-for-each-reg.h usage 8ef808b3f4 x86/asm: Fix register order ccb8fc65a3 x86/retpoline: Remove unused replacement symbols 908bd980a8 objtool,x86: Replace alternatives with .retpoline_sites 023e78bbf1 objtool: Explicitly avoid self modifying code in .altinstr_replacement 6e4676f438 objtool: Classify symbols acc0be56b4 objtool: Handle __sanitize_cov*() tail calls 9d7ec2418a objtool: Introduce CFI hash e8b1128fb0 objtool: Make .altinstructions section entry size consistent 1afa44480b objtool: Remove reloc symbol type checks in get_alt_entry() e7118a25a8 objtool: print out the symbol type when complaining about it 7ea0731957 objtool: Teach get_alt_entry() about more relocation types 364e463097 objtool: Don't make .altinstructions writable f231b2ee85 objtool/x86: Ignore __x86_indirect_alt_* symbols e32542e9ed objtool: Only rewrite unconditional retpoline thunk calls a031925382 objtool: Fix .symtab_shndx handling for elf_create_undef_symbol() 76474a9dd3 x86/alternative: Optimize single-byte NOPs at an arbitrary position f3fe1b141d objtool: Support asm jump tables 0b2c8bf498 objtool/x86: Rewrite retpoline thunk calls ed7783dca5 objtool: Skip magical retpoline .altinstr_replacement e87c18c4a9 objtool: Cache instruction relocs 33092b4866 objtool: Keep track of retpoline call sites 8a6d73f7db objtool: Add elf_create_undef_symbol() b69e1b4b68 objtool: Extract elf_symbol_add() da962cd0a2 objtool: Extract elf_strtab_concat() b37c439250 objtool: Create reloc sections implicitly fcdb7926d3 objtool: Add elf_create_reloc() helper c9049cf480 objtool: Rework the elf_rebuild_reloc_section() logic d42fa5bf19 objtool: Handle per arch retpoline naming 6e95f8caff objtool: Correctly handle retpoline thunk calls 28ca351296 x86/retpoline: Simplify retpolines e68db6f780 x86/alternatives: Optimize optimize_nops() 9a6471666b x86: Add insn_decode_kernel() d9cd219114 x86/alternative: Use insn_decode() e6f8dc86a1 x86/insn-eval: Handle return values from the decoder 6bc6875b82 x86/insn: Add an insn_decode() API 76c513c87f x86/insn: Add a __ignore_sync_check__ marker a3d96c7439 x86/insn: Rename insn_decode() to insn_decode_from_regs() fd80da64cf x86/alternative: Use ALTERNATIVE_TERNARY() in _static_cpu_has() 341e6178c1 x86/alternative: Support ALTERNATIVE_TERNARY 0c4c698569 x86/alternative: Support not-feature c9cf908b89 x86/alternative: Merge include files 5f93d900b9 x86/xen: Support objtool vmlinux.o validation in xen-head.S b626e17c11 x86/xen: Support objtool validation in xen-asm.S 3116dee270 objtool: Combine UNWIND_HINT_RET_OFFSET and UNWIND_HINT_FUNC 53e89bc78e objtool: Assume only ELF functions do sibling calls 3e674f2652 objtool: Support retpoline jump detection for vmlinux.o 917a4f6348 objtool: Support stack layout changes in alternatives e9197d768f objtool: Add 'alt_group' struct 1d516bd72a objtool: Refactor ORC section generation dd87aa5f61 KVM/nVMX: Use __vmx_vcpu_run in nested_vmx_check_vmentry_hw 0ca2ba6e4d KVM/VMX: Use TEST %REG,%REG instead of CMP $0,%REG in vmenter.S 0e8e989142 Merge 5.10.121 into android12-5.10-lts 2de0a17df4 Merge 5.10.120 into android12-5.10-lts 7748091a31 Linux 5.10.132 06a5dc3911 x86/pat: Fix x86_has_pat_wp() d9cb6fabc9 serial: 8250: Fix PM usage_count for console handover e1bd94dd9e serial: pl011: UPSTAT_AUTORTS requires .throttle/unthrottle b8c4661126 serial: stm32: Clear prev values before setting RTS delays 039ffe436a serial: 8250: fix return error code in serial8250_request_std_resource() bfee93c9a6 vt: fix memory overlapping when deleting chars in the buffer 5450430199 tty: serial: samsung_tty: set dma burst_size to 1 0e5668ed7b usb: dwc3: gadget: Fix event pending check f1e01a42dc usb: typec: add missing uevent when partner support PD 61ab5d644e USB: serial: ftdi_sio: add Belimo device ids 58b94325ee signal handling: don't use BUG_ON() for debugging e75f692b79 nvme-pci: phison e16 has bogus namespace ids 54bf0b8c75 Revert "can: xilinx_can: Limit CANFD brp to 2" 35ce2c64e5 ARM: dts: stm32: use the correct clock source for CEC on stm32mp151 227ee155ea soc: ixp4xx/npe: Fix unused match warning 136d7987fc x86: Clear .brk area at early boot fd830d8dd5 irqchip: or1k-pic: Undefine mask_ack for level triggered hardware dae43b3792 ASoC: madera: Fix event generation for rate controls cae4b78f3c ASoC: madera: Fix event generation for OUT1 demux a7634527cb ASoC: cs47l15: Fix event generation for low power mux control 41f97b0ecf ASoC: dapm: Initialise kcontrol data for mux/demux controls 11a14e4f31 ASoC: wm5110: Fix DRE control 6cbbe59fdc ASoC: SOF: Intel: hda-loader: Clarify the cl_dsp_init() flow ef1e38532f pinctrl: aspeed: Fix potential NULL dereference in aspeed_pinmux_set_mux() 13fb9105cf ASoC: ops: Fix off by one in range control validation 67dc32542a net: sfp: fix memory leak in sfp_probe() 104594de27 nvme: fix regression when disconnect a recovering ctrl 5504e63832 nvme-tcp: always fail a request when sending it failed de876f36f9 NFC: nxp-nci: don't print header length mismatch on i2c error efa78f2ae3 net: tipc: fix possible refcount leak in tipc_sk_create() bacfef0bf2 platform/x86: hp-wmi: Ignore Sanitization Mode event 3ea9dbf7c2 cpufreq: pmac32-cpufreq: Fix refcount leak bug 24cd0b9bfd scsi: hisi_sas: Limit max hw sectors for v3 HW c458ebd659 netfilter: br_netfilter: do not skip all hooks with 0 priority 93135dca8c virtio_mmio: Restore guest page size on resume d611580032 virtio_mmio: Add missing PM calls to freeze/restore 31e16a5e11 mm: sysctl: fix missing numa_stat when !CONFIG_HUGETLB_PAGE c713de1d80 net/tls: Check for errors in tls_device_init eb58fd350a KVM: x86: Fully initialize 'struct kvm_lapic_irq' in kvm_pv_kick_cpu_op() c2978d0124 net: atlantic: remove aq_nic_deinit() when resume 38e081ee06 net: atlantic: remove deep parameter on suspend/resume functions b82e4ad58a sfc: fix kernel panic when creating VF 2d4efc9a0e seg6: bpf: fix skb checksum in bpf_push_seg6_encap() 7b38df59a8 seg6: fix skb checksum in SRv6 End.B6 and End.B6.Encaps behaviors 834fa0a22f seg6: fix skb checksum evaluation in SRH encapsulation/insertion c224050081 sfc: fix use after free when disabling sriov c1d9702ceb ima: Fix potential memory leak in ima_init_crypto() eb360267e1 ima: force signature verification when CONFIG_KEXEC_SIG is configured 29c6a632f8 net: ftgmac100: Hold reference returned by of_get_child_by_name() a51040d4b1 nexthop: Fix data-races around nexthop_compat_mode. 2c56958de8 ipv4: Fix data-races around sysctl_ip_dynaddr. 038a87b3e4 raw: Fix a data-race around sysctl_raw_l3mdev_accept. 38d78c7b4b icmp: Fix a data-race around sysctl_icmp_ratemask. 4ebf261532 icmp: Fix a data-race around sysctl_icmp_ratelimit. b8871d9186 sysctl: Fix data-races in proc_dointvec_ms_jiffies(). 2744e302e7 drm/i915/gt: Serialize TLB invalidates with GT resets 636e5dbaf0 drm/i915/selftests: fix a couple IS_ERR() vs NULL tests 359f2bca79 ARM: dts: sunxi: Fix SPI NOR campatible on Orange Pi Zero e1aa73454a ARM: dts: at91: sama5d2: Fix typo in i2s1 node 418b191d5f ipv4: Fix a data-race around sysctl_fib_sync_mem. e088ceb73c icmp: Fix data-races around sysctl. fe2a35fa2c cipso: Fix data-races around sysctl. f5811b8df2 net: Fix data-races around sysctl_mem. d54b6ef53c inetpeer: Fix data-races around sysctl. 6481a8a72a tcp: Fix a data-race around sysctl_tcp_max_orphans. 609ce7ff75 sysctl: Fix data races in proc_dointvec_jiffies(). a5ee448d38 sysctl: Fix data races in proc_doulongvec_minmax(). e3a2144b3b sysctl: Fix data races in proc_douintvec_minmax(). 71ddde27c2 sysctl: Fix data races in proc_dointvec_minmax(). d5d54714e3 sysctl: Fix data races in proc_douintvec(). 80cc28a4b4 sysctl: Fix data races in proc_dointvec(). 9cc8edc571 net: stmmac: dwc-qos: Disable split header for Tegra194 cd201332cc ASoC: Intel: Skylake: Correct the handling of fmt_config flexible array fbb87a0ed2 ASoC: Intel: Skylake: Correct the ssp rate discovery in skl_get_ssp_clks() bb8bf80387 ASoC: tas2764: Fix amp gain register offset & default f1cd988de4 ASoC: tas2764: Correct playback volume range 52d1b4250c ASoC: tas2764: Fix and extend FSYNC polarity handling 249fe2d20d ASoC: tas2764: Add post reset delays f160a1f970 ASoC: sgtl5000: Fix noise on shutdown/remove 831e190175 ima: Fix a potential integer overflow in ima_appraise_measurement 592f3bad00 drm/i915: fix a possible refcount leak in intel_dp_add_mst_connector() 4cb5c1950b net/mlx5e: Fix capability check for updating vnic env counters 6eb1d0c370 net/mlx5e: kTLS, Fix build time constant test in RX c87d5211be net/mlx5e: kTLS, Fix build time constant test in TX d6cab2e06c ARM: 9210/1: Mark the FDT_FIXED sections as shareable 3d82fba7d3 ARM: 9209/1: Spectre-BHB: avoid pr_info() every time a CPU comes out of idle 0c300e294d spi: amd: Limit max transfer and message size d8d42c92fe ARM: dts: imx6qdl-ts7970: Fix ngpio typo and count 91f90b571f ext4: fix race condition between ext4_write and ext4_convert_inline_data 9d883b3f00 Revert "evm: Fix memleak in init_desc" 41007669fc sh: convert nommu io{re,un}map() to static inline functions ea4dbcfb95 nilfs2: fix incorrect masking of permission flags for symlinks 14e63942d6 fs/remap: constrain dedupe of EOF blocks 0581613df7 drm/panfrost: Fix shrinker list corruption by madvise IOCTL 2e760fe05d drm/panfrost: Put mapping instead of shmem obj on panfrost_mmu_map_fault_addr() error c1ea39a77c btrfs: return -EAGAIN for NOWAIT dio reads/writes on compressed and inline extents 7657e39585 cgroup: Use separate src/dst nodes when preloading css_sets for migration e013ea2a51 wifi: mac80211: fix queue selection for mesh/OCB interfaces db6e8c3015 ARM: 9214/1: alignment: advance IT state after emulating Thumb instruction f851e4f402 ARM: 9213/1: Print message about disabled Spectre workarounds only once fa40bb3a5f ip: fix dflt addr selection for connected nexthop 4d3e0fb05e net: sock: tracing: Fix sock_exceed_buf_limit not to dereference stale pointer 78a1400c42 tracing/histograms: Fix memory leak problem 931dbcc2e0 mm: split huge PUD on wp_huge_pud fallback 91530f675e fix race between exit_itimers() and /proc/pid/timers b9c32a6886 xen/netback: avoid entering xenvif_rx_next_skb() with an empty rx queue 782a6b07b1 ALSA: hda/realtek - Enable the headset-mic on a Xiaomi's laptop cacac3e13a ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc221 08ab39027a ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc671 4d0d15d184 ALSA: hda/realtek: Fix headset mic for Acer SF313-51 b642a3476a ALSA: hda/conexant: Apply quirk for another HP ProDesk 600 G3 model 4486bbe928 ALSA: hda - Add fixup for Dell Latitidue E5430 8f95261a00 Linux 5.10.131 cc5ee0e0ee Revert "mtd: rawnand: gpmi: Fix setting busy timeout setting" ebc9fb07d2 ANDROID: random: fix CRC issues with the merge e61ebc6383 ANDROID: change function signatures for some random functions. 830f0202d7 ANDROID: cpu/hotplug: avoid breaking Android ABI by fusing cpuhp steps fee299e72e ANDROID: random: add back removed callback functions 6cc2db3cde UPSTREAM: Revert "net: af_key: add check for pfkey_broadcast in function pfkey_process" 05982f0cbb UPSTREAM: lib/crypto: add prompts back to crypto libraries f2eb31a498 Merge 5.10.119 into android12-5.10-lts 26ae9c3614 Linux 5.10.130 8365b151fd dmaengine: ti: Add missing put_device in ti_dra7_xbar_route_allocate 37147e22cd dmaengine: ti: Fix refcount leak in ti_dra7_xbar_route_allocate 1be247db20 dmaengine: at_xdma: handle errors of at_xdmac_alloc_desc() correctly 7b721f5aec dmaengine: pl330: Fix lockdep warning about non-static key e23cfb3fdc ida: don't use BUG_ON() for debugging 37995f034f dt-bindings: dma: allwinner,sun50i-a64-dma: Fix min/max typo ca4a919584 misc: rtsx_usb: set return value in rsp_buf alloc err path ff79e0ca2b misc: rtsx_usb: use separate command and response buffers af7d9d4abe misc: rtsx_usb: fix use of dma mapped buffer for usb bulk transfer 86884017bb dmaengine: imx-sdma: Allow imx8m for imx7 FW revs 9b329edd77 i2c: cadence: Unregister the clk notifier in error path 26938bd28c r8169: fix accessing unset transport header 904f622ec7 selftests: forwarding: fix error message in learning_test 9906c22340 selftests: forwarding: fix learning_test when h1 supports IFF_UNICAST_FLT 859b889029 selftests: forwarding: fix flood_unicast_test when h2 supports IFF_UNICAST_FLT 23cdc57d88 ibmvnic: Properly dispose of all skbs during a failover. 2b4659c145 i40e: Fix dropped jumbo frames statistics 5561bddd05 xsk: Clear page contiguity bit when unmapping pool 87d2bb8882 ARM: dts: at91: sama5d2_icp: fix eeprom compatibles 9b7d8e28b6 ARM: dts: at91: sam9x60ek: fix eeprom compatible and size ade03e5ea7 ARM: at91: pm: use proper compatibles for sam9x60's rtc and rtt b40ac801cb ARM: at91: pm: use proper compatible for sama5d2's rtc 4c3e73a66a arm64: dts: qcom: msm8992-*: Fix vdd_lvs1_2-supply typo 1d0c3ced2d pinctrl: sunxi: sunxi_pconf_set: use correct offset e1cda2a03d arm64: dts: imx8mp-evk: correct I2C3 pad settings 2ade1b1d92 arm64: dts: imx8mp-evk: correct gpio-led pad settings 17b3883ba5 arm64: dts: imx8mp-evk: correct the uart2 pinctl value 43319ee6a0 arm64: dts: imx8mp-evk: correct mmc pad settings 6bf74a1e74 arm64: dts: qcom: msm8994: Fix CPU6/7 reg values 2c0d10ce00 pinctrl: sunxi: a83t: Fix NAND function name for some pins 3d90607e7e ARM: meson: Fix refcount leak in meson_smp_prepare_cpus e14930e9f9 xfs: remove incorrect ASSERT in xfs_rename 852952ea0e can: kvaser_usb: kvaser_usb_leaf: fix bittiming limits a741e762e1 can: kvaser_usb: kvaser_usb_leaf: fix CAN clock frequency regression f439d08ef1 can: kvaser_usb: replace run-time checks with struct kvaser_usb_driver_info 79af7be44c powerpc/powernv: delay rng platform device creation until later in boot 19104425c9 video: of_display_timing.h: include errno.h 96fa24eb1a memregion: Fix memregion_free() fallback definition d6931bff1c PM: runtime: Redefine pm_runtime_release_supplier() cecb806c76 fbcon: Prevent that screen size is smaller than font size b727561ddc fbcon: Disallow setting font bigger than screen size b81212828a fbmem: Check virtual screen sizes in fb_set_var() d03e8ed72d fbdev: fbmem: Fix logo center image dx issue 963c80f070 iommu/vt-d: Fix PCI bus rescan device hot add 0a5e36dbcb netfilter: nf_tables: stricter validation of element data 4a6430b99f netfilter: nft_set_pipapo: release elements in clone from abort path 4f59d12efe net: rose: fix UAF bug caused by rose_t0timer_expiry 0085da9df3 usbnet: fix memory leak in error case e917be1f83 bpf: Fix insufficient bounds propagation from adjust_scalar_min_max_vals 9adec73349 bpf: Fix incorrect verifier simulation around jmp32's jeq/jne d0b8e22399 can: gs_usb: gs_usb_open/close(): fix memory leak b6f4b347a1 can: grcan: grcan_probe(): remove extra of_node_get() 85cd41070d can: bcm: use call_rcu() instead of costly synchronize_rcu() b75d4bec85 ALSA: hda/realtek: Add quirk for Clevo L140PU 6c32496964 mm/slub: add missing TID updates on slab deactivation 7208d1236f Linux 5.10.129 0e21ef1801 clocksource/drivers/ixp4xx: remove EXPORT_SYMBOL_GPL from ixp4xx_timer_setup() 7055e34462 net: usb: qmi_wwan: add Telit 0x1070 composition f1a53bb27f net: usb: qmi_wwan: add Telit 0x1060 composition 43c8d33ce3 xen/arm: Fix race in RB-tree based P2M accounting 547b7c640d xen-netfront: restore __skb_queue_tail() positioning in xennet_get_responses() cbbd2d2531 xen/blkfront: force data bouncing when backend is untrusted 4923217af5 xen/netfront: force data bouncing when backend is untrusted 728d68bfe6 xen/netfront: fix leaking data in shared pages cfea428030 xen/blkfront: fix leaking data in shared pages d341e5a754 selftests/rseq: Change type of rseq_offset to ptrdiff_t 7e617278bf selftests/rseq: x86-32: use %gs segment selector for accessing rseq thread area 27f6361cb4 selftests/rseq: x86-64: use %fs segment selector for accessing rseq thread area a4312e2d81 selftests/rseq: Fix: work-around asm goto compiler bugs 7e1a0a9a44 selftests/rseq: Remove arm/mips asm goto compiler work-around ba4d79af71 selftests/rseq: Fix warnings about #if checks of undefined tokens 35c6f5047f selftests/rseq: Fix ppc32 offsets by using long rather than off_t dbc1f0ee60 selftests/rseq: Fix ppc32 missing instruction selection "u" and "x" for load/store d4f631ea2d selftests/rseq: Fix ppc32: wrong rseq_cs 32-bit field pointer on big endian e85fdae4df selftests/rseq: Uplift rseq selftests for compatibility with glibc-2.35 c79e564535 selftests/rseq: Introduce thread pointer getters 4a78bf83e2 selftests/rseq: Introduce rseq_get_abi() helper 3c2a416c80 selftests/rseq: Remove volatile from __rseq_abi 68e1232c6e selftests/rseq: Remove useless assignment to cpu variable 3e77ed4f90 selftests/rseq: introduce own copy of rseq uapi header 54cd556487 selftests/rseq: remove ARRAY_SIZE define from individual tests 14894cf692 hwmon: (ibmaem) don't call platform_device_del() if platform_device_add() fails f72d410dbf ipv6/sit: fix ipip6_tunnel_get_prl return value 25055da22a sit: use min 652fd40eb0 drivers: cpufreq: Add missing of_node_put() in qoriq-cpufreq.c 79963021fd xen/gntdev: Avoid blocking in unmap_grant_pages() 5f614f5f70 tcp: add a missing nf_reset_ct() in 3WHS handling 9203dfb3ed xfs: fix xfs_reflink_unshare usage of filemap_write_and_wait_range f874e16870 xfs: update superblock counters correctly for !lazysbcount 7ab7458d7a xfs: fix xfs_trans slab cache name f12968a5a4 xfs: ensure xfs_errortag_random_default matches XFS_ERRTAG_MAX da61388f9a xfs: Skip repetitive warnings about mount options 6b7dab812c xfs: rename variable mp to parsing_mp b261cd005a xfs: use current->journal_info for detecting transaction recursion c36d41b65e net: tun: avoid disabling NAPI twice 59c51c3b54 tunnels: do not assume mac header is set in skb_tunnel_check_pmtu() c9fc52c173 io_uring: ensure that send/sendmsg and recv/recvmsg check sqe->ioprio b8def021ac epic100: fix use after free on rmmod 456bc33887 tipc: move bc link creation back to tipc_node_create 09f9946235 NFC: nxp-nci: Don't issue a zero length i2c_master_read() 7d363362e0 nfc: nfcmrvl: Fix irq_of_parse_and_map() return value 63b2fe509f net: bonding: fix use-after-free after 802.3ad slave unbind 7597ed348e net: bonding: fix possible NULL deref in rlb code ac12337229 net/sched: act_api: Notify user space if any actions were flushed before error 91d3bb82c4 netfilter: nft_dynset: restore set element counter when failing to update 4b480a7940 s390: remove unneeded 'select BUILD_BIN2C' e65027fdeb PM / devfreq: exynos-ppmu: Fix refcount leak in of_get_devfreq_events 653bdcd833 caif_virtio: fix race between virtio_device_ready() and ndo_open() 208ff79675 NFSD: restore EINVAL error translation in nfsd_commit() db82bb6054 net: ipv6: unexport __init-annotated seg6_hmac_net_init() eb1757ca20 usbnet: fix memory allocation in helpers fae2a9fb1e linux/dim: Fix divide by 0 in RDMA DIM b0cab8b517 RDMA/cm: Fix memory leak in ib_cm_insert_listen 9de276dfb2 RDMA/qedr: Fix reporting QP timeout attribute a42bd00f00 net: dp83822: disable rx error interrupt 9c06d84855 net: dp83822: disable false carrier interrupt c70ca16f72 net: tun: stop NAPI when detaching queues bec1be0a74 net: tun: unlink NAPI from device on destruction 0b2499c801 net: dsa: bcm_sf2: force pause link settings 3f55912a1a selftests/net: pass ipv6_args to udpgso_bench's IPv6 TCP test f7b8fb4584 virtio-net: fix race between ndo_open() and virtio_device_ready() c0a28f2ddf net: usb: ax88179_178a: Fix packet receiving 8f74cb27c2 net: rose: fix UAF bugs caused by timer handler 6a0b9512a6 SUNRPC: Fix READ_PLUS crasher ed03a650fb s390/archrandom: simplify back to earlier design and initialize earlier d8bca518d5 dm raid: fix KASAN warning in raid5_add_disks 9bf2b0757b dm raid: fix accesses beyond end of raid member array 213c550deb powerpc/bpf: Fix use of user_pt_regs in uapi 68a34e478a powerpc/book3e: Fix PUD allocation size in map_kernel_page() e188bbdb92 powerpc/prom_init: Fix kernel config grep e6a7d30b65 nvdimm: Fix badblocks clear off-by-one error 0b99c4a189 nvme-pci: add NVME_QUIRK_BOGUS_NID for ADATA XPG SX6000LNP (AKA SPECTRIX S40G) e77804158b ipv6: take care of disable_policy when restoring routes 03b9e01659 drm/amdgpu: To flush tlb for MMHUB of RAVEN series ea86c1430c Linux 5.10.128 2d10984d99 net: mscc: ocelot: allow unregistered IP multicast flooding 6a656280e7 powerpc/ftrace: Remove ftrace init tramp once kernel init is complete 6b734f7b70 xfs: check sb_meta_uuid for dabuf buffer recovery 071e750ffb xfs: remove all COW fork extents when remounting readonly 1e76bd4c67 xfs: Fix the free logic of state in xfs_attr_node_hasname 0cdccc05da xfs: punch out data fork delalloc blocks on COW writeback failure db3f8110c3 xfs: use kmem_cache_free() for kmem_cache objects 09c9902cd8 bcache: memset on stack variables in bch_btree_check() and bch_sectors_dirty_init() c4ff3ffe01 tick/nohz: unexport __init-annotated tick_nohz_full_setup() 069fff50d4 drm: remove drm_fb_helper_modinit 52dc7f3f6f MAINTAINERS: add Amir as xfs maintainer for 5.10.y fa7f6a5f56 Merge branch 'android12-5.10' into branch 'android12-5.10-lts' deb587b1a4 Linux 5.10.127 1cca46c205 powerpc/pseries: wire up rng during setup_arch() 95d73d510b kbuild: link vmlinux only once for CONFIG_TRIM_UNUSED_KSYMS (2nd attempt) feb5ab7986 random: update comment from copy_to_user() -> copy_to_iter() 959bbaf5b7 modpost: fix section mismatch check for exported init/exit sections c980392af1 ARM: cns3xxx: Fix refcount leak in cns3xxx_init 889aad2203 memory: samsung: exynos5422-dmc: Fix refcount leak in of_get_dram_timings 44a5b3a073 ARM: Fix refcount leak in axxia_boot_secondary 30bbfeb480 soc: bcm: brcmstb: pm: pm-arm: Fix refcount leak in brcmstb_pm_probe 68f28d52e6 ARM: exynos: Fix refcount leak in exynos_map_pmu 59fdf10814 ARM: dts: imx6qdl: correct PU regulator ramp delay fb70bd8675 ARM: dts: imx7: Move hsic_phy power domain to HSIC PHY node f78acc4288 powerpc/powernv: wire up rng during setup_arch 7db1ba660b powerpc/rtas: Allow ibm,platform-dump RTAS call with null buffer address 1f5a9205a3 powerpc: Enable execve syscall exit tracepoint ca144919af parisc: Enable ARCH_HAS_STRICT_MODULE_RWX a1c902349a parisc/stifb: Fix fb_is_primary_device() only available with CONFIG_FB_STI af0ff2da01 xtensa: Fix refcount leak bug in time.c 6c0839cf1b xtensa: xtfpga: Fix refcount leak bug in setup 501652a2ad iio: adc: adi-axi-adc: Fix refcount leak in adi_axi_adc_attach_client d40514d440 iio: adc: axp288: Override TS pin bias current for some models d579c893dd iio: adc: stm32: Fix IRQs on STM32F4 by removing custom spurious IRQs message 62284d45e2 iio: adc: stm32: Fix ADCs iteration in irq handler e3ebb9d16c iio: imu: inv_icm42600: Fix broken icm42600 (chip id 0 value) 3e0af68b99 iio: adc: stm32: fix maximum clock rate for stm32mp15x b07a30a774 iio: trigger: sysfs: fix use-after-free on remove 399788e819 iio: gyro: mpu3050: Fix the error handling in mpu3050_power_up() c1ec7d52a2 iio: accel: mma8452: ignore the return value of reset operation 42caf44906 iio:accel:mxc4005: rearrange iio trigger get and register e26dcf6279 iio:accel:bma180: rearrange iio trigger get and register f26379e199 iio:chemical:ccs811: rearrange iio trigger get and register 4b6cdcff7c f2fs: attach inline_data after setting compression 2d7bdb6a5a usb: chipidea: udc: check request status before setting device address 656eca37aa USB: gadget: Fix double-free bug in raw_gadget driver 54604108be usb: gadget: Fix non-unique driver names in raw-gadget driver d87dec22fd xhci-pci: Allow host runtime PM as default for Intel Meteor Lake xHCI 114080d04a xhci-pci: Allow host runtime PM as default for Intel Raptor Lake xHCI b8142a8465 xhci: turn off port power in shutdown 116c3e81b0 usb: typec: wcove: Drop wrong dependency to INTEL_SOC_PMIC a547662534 iio: adc: vf610: fix conversion mode sysfs node name 58c3a27e9c iio: mma8452: fix probe fail when device tree compatible is used. 5ee016f612 s390/cpumf: Handle events cycles and instructions identical abe487a88a gpio: winbond: Fix error code in winbond_gpio_get() 30531e0d7b nvme: move the Samsung X5 quirk entry to the core quirks 169f7d7705 nvme-pci: add NO APST quirk for Kioxia device 938f594266 nvme-pci: allocate nvme_command within driver pdu ba388d4e9a nvme: don't check nvme_req flags for new req e7ccaa1aba nvme: mark nvme_setup_passsthru() inline 3ee62a1f07 nvme: split nvme_alloc_request() fe06c692cd nvme: centralize setting the timeout in nvme_alloc_request afbc954e78 Revert "net/tls: fix tls_sk_proto_close executed repeatedly" 340fbdc801 virtio_net: fix xdp_rxq_info bug after suspend/resume 3bccf82169 igb: Make DMA faster when CPU is active on the PCIe link 7d7450363f regmap-irq: Fix a bug in regmap_irq_enable() for type_in_mask chips 40b3815b2c ice: ethtool: advertise 1000M speeds properly 7b564e3254 afs: Fix dynamic root getattr 3c22192db0 MIPS: Remove repetitive increase irq_err_count cc649a7865 x86/xen: Remove undefined behavior in setup_features() b60c375ad1 selftests: netfilter: correct PKTGEN_SCRIPT_PATHS in nft_concat_range.sh 20119c1e0f udmabuf: add back sanity check e82376b632 net/tls: fix tls_sk_proto_close executed repeatedly cec9867ee5 erspan: do not assume transport header is always set acf76125bb drm/msm/dp: fix connect/disconnect handled at irq_hpd 61f8f4034c drm/msm/dp: promote irq_hpd handle to handle link training correctly d11cb08215 drm/msm/dp: deinitialize mainlink if link training failed 3d67cb00cb drm/msm/dp: fixes wrong connection state caused by failure of link train efb2b69160 drm/msm/dp: check core_initialized before disable interrupts at dp_display_unbind() d16a433982 drm/msm/mdp4: Fix refcount leak in mdp4_modeset_init_intf 363fd6e346 net/sched: sch_netem: Fix arithmetic in netem_dump() for 32-bit platforms 2e3216b929 bonding: ARP monitor spams NETDEV_NOTIFY_PEERS notifiers c12a2c9b1b igb: fix a use-after-free issue in igb_clean_tx_ring 361c5521c1 tipc: fix use-after-free Read in tipc_named_reinit f299d3fbe4 tipc: simplify the finalize work queue ab7f565ac7 phy: aquantia: Fix AN when higher speeds than 1G are not advertised a51c199e4d bpf, x86: Fix tail call count offset calculation on bpf2bpf call 4ae116428e drm/sun4i: Fix crash during suspend after component bind failure 516760f1d2 bpf: Fix request_sock leak in sk lookup helpers 505a375eea drm/msm: use for_each_sgtable_sg to iterate over scatterlist 10eb239e29 scsi: scsi_debug: Fix zone transition to full condition 15cc30ac2a netfilter: use get_random_u32 instead of prandom 95f80c8843 netfilter: nftables: add nft_parse_register_store() and use it ec9b0a8d30 netfilter: nftables: add nft_parse_register_load() and use it 8adedb4711 drm/msm: Fix double pm_runtime_disable() call 8682335375 USB: serial: option: add Quectel RM500K module support 9e6e063e54 USB: serial: option: add Quectel EM05-G modem 0b3006a862 USB: serial: option: add Telit LE910Cx 0x1250 composition f6a266e0dc dm mirror log: clear log bits up to BITS_PER_LONG boundary 03d1874b82 dm era: commit metadata in postsuspend after worker stops 273106c2df ata: libata: add qc->flags in ata_qc_complete_template tracepoint 156427b312 mtd: rawnand: gpmi: Fix setting busy timeout setting 07e56884cd mmc: sdhci-pci-o2micro: Fix card detect by dealing with debouncing 0ae82e1ccb btrfs: add error messages to all unrecognized mount options 49e3e449bc net: openvswitch: fix parsing of nw_proto for IPv6 fragments 1508658aec ALSA: hda/realtek: Add quirk for Clevo NS50PU 6e8e503159 ALSA: hda/realtek: Add quirk for Clevo PD70PNT 80307458a1 ALSA: hda/realtek: Apply fixup for Lenovo Yoga Duet 7 properly 7fcbc89d47 ALSA: hda/realtek - ALC897 headset MIC no sound f5ea433d56 ALSA: hda/realtek: Add mute LED quirk for HP Omen laptop 6437329060 ALSA: hda/conexant: Fix missing beep setup 12a6be5d11 ALSA: hda/via: Fix missing beep setup 5e80f923b8 random: quiet urandom warning ratelimit suppression message 310ebbd9f5 random: schedule mix_interrupt_randomness() less often 3acb7dc242 vt: drop old FONT ioctls 9cae50bdfa Linux 5.10.126 fb2fbb3c10 io_uring: use separate list entry for iopoll requests 6a7c3bcc3c Linux 5.10.125 df3f3bb505 io_uring: add missing item types for various requests 1a264b3a69 arm64: mm: Don't invalidate FROM_DEVICE buffers at start of DMA transfer a1508d164e serial: core: Initialize rs485 RTS polarity already on probe 7ccb026ecb tcp: drop the hash_32() part from the index calculation 9429b75bc2 tcp: increase source port perturb table to 2^16 24b922a5da tcp: dynamically allocate the perturb table used by source ports d28e64b1c6 tcp: add small random increments to the source port dd46a868fc tcp: use different parts of the port_offset for index and offset 743acb5207 tcp: add some entropy in __inet_hash_connect() 16b1994679 usb: gadget: u_ether: fix regression in setting fixed MAC address 355be61311 zonefs: fix zonefs_iomap_begin() for reads ee4677b78e s390/mm: use non-quiescing sske for KVM switch to keyed guest 73c2a811f6 Revert "xfrm: Add possibility to set the default to block if we have no policy" e21944a82a Revert "net: xfrm: fix shift-out-of-bounce" f7160ab103 Revert "xfrm: make user policy API complete" df0ff8d194 Revert "xfrm: notify default policy on update" 4ead88c0e8 Revert "xfrm: fix dflt policy check when there is no policy configured" 42dadcf0a8 Revert "xfrm: rework default policy structure" ece9c2a70f Revert "xfrm: fix "disable_policy" flag use when arriving from different devices" 9dcde7a741 Revert "include/uapi/linux/xfrm.h: Fix XFRM_MSG_MAPPING ABI breakage" 4f3fee72a7 Linux 5.10.124 e0b6018894 clk: imx8mp: fix usb_root_clk parent a3e50506ea powerpc/book3e: get rid of #include <generated/compile.h> ff4443f3fc igc: Enable PCIe PTM f0a7adff63 Revert "PCI: Make pci_enable_ptm() private" e1513a714d net: openvswitch: fix misuse of the cached connection on tuple changes 09b55dc90b net/sched: act_police: more accurate MTU policing 73bc8a5e8e dma-direct: don't over-decrypt memory aa9a001efa virtio-pci: Remove wrong address verification in vp_del_vqs() be98641034 ALSA: hda/realtek: fix right sounds and mute/micmute LEDs for HP machine 401bef1f95 KVM: SVM: Use kzalloc for sev ioctl interfaces to prevent kernel data leak d6be031a2f KVM: x86: Account a variety of miscellaneous allocations d74d7865e2 KVM: arm64: Don't read a HW interrupt pending state in user context bfd004a1d3 ext4: add reserved GDT blocks check 0ca74dacfd ext4: make variable "count" signed 6fdaf31ad5 ext4: fix bug_on ext4_mb_use_inode_pa e27430c1f1 drm/amd/display: Cap OLED brightness per max frame-average luminance ba751f0d25 dm mirror log: round up region bitmap size to BITS_PER_LONG 33ba36351e serial: 8250: Store to lsr_save_flags after lsr read 57901c658f usb: gadget: lpc32xx_udc: Fix refcount leak in lpc32xx_udc_probe a44a8a762f usb: dwc2: Fix memory leak in dwc2_hcd_init 791da3e6c8 USB: serial: io_ti: add Agilent E5805A support 0e13274bc6 USB: serial: option: add support for Cinterion MV31 with new baseline d721986e96 crypto: memneq - move into lib/ 308b8f31c0 comedi: vmk80xx: fix expression for tx buffer size 9308be3d9a mei: me: add raptor lake point S DID 9ea9c92275 i2c: designware: Use standard optional ref clock implementation 506a88a5bf irqchip/gic-v3: Fix refcount leak in gic_populate_ppi_partitions 7c9dd9d23f irqchip/gic-v3: Fix error handling in gic_populate_ppi_partitions e52a58b79f irqchip/gic/realview: Fix refcount leak in realview_gic_of_init 716587a57a i2c: npcm7xx: Add check for platform_driver_register b559ef9dfc faddr2line: Fix overlapping text section failures, the sequel 7fa28a7c3d block: Fix handling of offline queues in blk_mq_alloc_request_hctx() 2d825fb53b certs/blacklist_hashes.c: fix const confusion in certs blacklist bc28fde909 arm64: ftrace: consistently handle PLTs. e177f17fe4 arm64: ftrace: fix branch range checks 64072389be net: ax25: Fix deadlock caused by skb_recv_datagram in ax25_recvmsg 28069e026e net: bgmac: Fix an erroneous kfree() in bgmac_remove() 984793f255 mlxsw: spectrum_cnt: Reorder counter pools b90ae84a8a nvme: add device name to warning in uuid_show() 42f7cbe2c2 nvme: use sysfs_emit instead of sprintf 63b26fe025 drm/i915/reset: Fix error_state_read ptr + offset use 2b2180449a misc: atmel-ssc: Fix IRQ check in ssc_probe 65ca4db68b tty: goldfish: Fix free_irq() on remove 5334455067 Drivers: hv: vmbus: Release cpu lock in error case 814092927a i40e: Fix call trace in setup_tx_descriptors 43dfd1169c i40e: Fix calculating the number of queue pairs ef4d73da0a i40e: Fix adding ADQ filter to TC0 db965e2757 clocksource: hyper-v: unexport __init-annotated hv_init_clocksource() 8acc3e228e pNFS: Avoid a live lock condition in pnfs_update_layout() 03ea83324a pNFS: Don't keep retrying if the server replied NFS4ERR_LAYOUTUNAVAILABLE 4603a37f6e random: credit cpu and bootloader seeds by default 9d667348dc gpio: dwapb: Don't print error on -EPROBE_DEFER f3c8bfd6dc MIPS: Loongson-3: fix compile mips cpu_hwmon as module build error. 85340c0634 mellanox: mlx5: avoid uninitialized variable warning with gcc-12 38c519df8e net: ethernet: mtk_eth_soc: fix misuse of mem alloc interface netdev[napi]_alloc_frag b8879ca1fd ipv6: Fix signed integer overflow in l2tp_ip6_sendmsg 0eeec1a8b0 nfc: nfcmrvl: Fix memory leak in nfcmrvl_play_deferred 6c18f47f47 virtio-mmio: fix missing put_device() when vm_cmdline_parent registration failed d539feb6df ALSA: hda/realtek - Add HW8326 support 16dd002eb8 scsi: pmcraid: Fix missing resource cleanup in error case 410b692621 scsi: ipr: Fix missing/incorrect resource cleanup in error case 85acc5bf05 scsi: lpfc: Allow reduced polling rate for nvme_admin_async_event cmd completion 916145bf9d scsi: lpfc: Fix port stuck in bypassed state after LIP in PT2PT topology f416fee125 scsi: vmw_pvscsi: Expand vcpuHint to 16 bits 0e9994b865 Input: soc_button_array - also add Lenovo Yoga Tablet2 1051F to dmi_use_low_level_irq 2e640e5e44 ASoC: wm_adsp: Fix event generation for wm_adsp_fw_put() a572c74402 ASoC: es8328: Fix event generation for deemphasis control c7b8c3758f ASoC: wm8962: Fix suspend while playing music 8656623bdc quota: Prevent memory allocation recursion while holding dq_lock 36cd19e7d4 ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo() 440b2a62da ASoC: cs42l51: Correct minimum value for SX volume control f93d8fe3dc ASoC: cs42l56: Correct typo in minimum level for SX volume controls 13e5b76d3d ASoC: cs42l52: Correct TLV for Bypass Volume b8a47bcc4d ASoC: cs53l30: Correct number of volume levels on SX controls 70e355867d ASoC: cs35l36: Update digital volume TLV cb6a0b83f1 ASoC: cs42l52: Fix TLV scales for mixer controls d7be05aff2 dma-debug: make things less spammy under memory pressure 1b54c00657 ASoC: nau8822: Add operation for internal PLL off and on 2c9548bc26 powerpc/kasan: Silence KASAN warnings in __get_wchan() b5699bff1d arm64: dts: imx8mm-beacon: Enable RTS-CTS on UART3 28bbdca6a7 bpf: Fix incorrect memory charge cost calculation in stack_map_alloc() f14816f2f9 nfsd: Replace use of rwsem with errseq_t 56a7f57da5 9p: missing chunk of "fs/9p: Don't update file type when updating file attributes" 2a59239b22 Linux 5.10.123 aa238a92cc x86/speculation/mmio: Print SMT warning bde15fdcce KVM: x86/speculation: Disable Fill buffer clear within guests 6df693dca3 x86/speculation/mmio: Reuse SRBDS mitigation for SBDS cf1c01a5e4 x86/speculation/srbds: Update SRBDS mitigation selection 001415e4e6 x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data 3eb1180564 x86/speculation/mmio: Enable CPU Fill buffer clearing on idle 56f0bca5e9 x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations 26f6f231f6 x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data f83d4e5be4 x86/speculation: Add a common function for MD_CLEAR mitigation update e66310bc96 x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug f8a85334a5 Documentation: Add documentation for Processor MMIO Stale Data 5754c570a5 Linux 5.10.122 9ba2b4ac35 tcp: fix tcp_mtup_probe_success vs wrong snd_cwnd 5e34b49756 dmaengine: idxd: add missing callback function to support DMA_INTERRUPT b8c17121f0 zonefs: fix handling of explicit_open option on mount ef51997771 PCI: qcom: Fix pipe clock imbalance 63bcb9da91 md/raid0: Ignore RAID0 layout if the second zone has only one device 418db40cc7 interconnect: Restore sync state by ignoring ipa-virt in provider count bcae8f8338 interconnect: qcom: sc7180: Drop IP0 interconnects fe6caf5122 powerpc/mm: Switch obsolete dssall to .long 3be74fc0af powerpc/32: Fix overread/overwrite of thread_struct via ptrace fa0d3d71dc drm/atomic: Force bridge self-refresh-exit on CRTC switch dbe04e874d drm/bridge: analogix_dp: Support PSR-exit to disable transition 61297ee0c3 Input: bcm5974 - set missing URB_NO_TRANSFER_DMA_MAP urb flag 2dba96d19d ixgbe: fix unexpected VLAN Rx in promisc mode on VF 91620cded9 ixgbe: fix bcast packets Rx on VF after promisc removal cdd9227373 nfc: st21nfca: fix incorrect sizing calculations in EVT_TRANSACTION 54423649bc nfc: st21nfca: fix memory leaks in EVT_TRANSACTION handling 4f0a2c46f5 nfc: st21nfca: fix incorrect validating logic in EVT_TRANSACTION c4e4c07d86 net: phy: dp83867: retrigger SGMII AN when link change 133c9870cd mmc: block: Fix CQE recovery reset success 0248a8c844 ata: libata-transport: fix {dma|pio|xfer}_mode sysfs files 471a413201 cifs: fix reconnect on smb3 mount types 9023ecfd33 cifs: return errors during session setup during reconnects b423cd2a81 ALSA: hda/realtek: Fix for quirk to enable speaker output on the Lenovo Yoga DuetITL 2021 94bd216d17 ALSA: hda/conexant - Fix loopback issue with CX20632 13639c970f scripts/gdb: change kernel config dumping method b6ea26873e vringh: Fix loop descriptors check in the indirect cases 362e3b3a59 nodemask: Fix return values to be unsigned a262e1255b cifs: version operations for smb20 unneeded when legacy support disabled 01137d8980 s390/gmap: voluntarily schedule during key setting f72df77600 nbd: fix io hung while disconnecting device 122e4adaff nbd: fix race between nbd_alloc_config() and module removal c0868f6e72 nbd: call genl_unregister_family() first in nbd_cleanup() cb8da20d71 jump_label,noinstr: Avoid instrumentation for JUMP_LABEL=n builds 320acaf84a x86/cpu: Elide KCSAN for cpu_has() and friends 8287687821 modpost: fix undefined behavior of is_arm_mapping_symbol() fee8ae0a0b drm/radeon: fix a possible null pointer dereference 3e57686830 ceph: allow ceph.dir.rctime xattr to be updatable 7fa8312879 Revert "net: af_key: add check for pfkey_broadcast in function pfkey_process" ebfe279725 scsi: myrb: Fix up null pointer access on myrb_cleanup() 7eb32f286e md: protect md_unregister_thread from reentrancy 668c3f9fa2 watchdog: wdat_wdt: Stop watchdog when rebooting the system e20bc8b5a2 kernfs: Separate kernfs_pr_cont_buf and rename_lock. 1e3b3a5762 serial: msm_serial: disable interrupts in __msm_console_write() ff727ab0b7 staging: rtl8712: fix uninit-value in r871xu_drv_init() 33ef21d554 staging: rtl8712: fix uninit-value in usb_read8() and friends f3f754d72d clocksource/drivers/sp804: Avoid error on multiple instances abf3b22261 extcon: Modify extcon device to be created after driver data is set 41ec946694 misc: rtsx: set NULL intfdata when probe fails 5b0c0298f7 usb: dwc2: gadget: don't reset gadget's driver->bus 468fe959ea sysrq: do not omit current cpu when showing backtrace of all active CPUs f4cb24706c USB: hcd-pci: Fully suspend across freeze/thaw cycle ffe9440d69 drivers: usb: host: Fix deadlock in oxu_bus_suspend() 6e2273eefa drivers: tty: serial: Fix deadlock in sa1100_set_termios() ee105039d3 USB: host: isp116x: check return value after calling platform_get_resource() 0f69d7d5e9 drivers: staging: rtl8192e: Fix deadlock in rtllib_beacons_stop() 66f769762f drivers: staging: rtl8192u: Fix deadlock in ieee80211_beacons_stop() cb7147afd3 tty: Fix a possible resource leak in icom_probe d68d5e68b7 tty: synclink_gt: Fix null-pointer-dereference in slgt_clean() 61ca1b97ad lkdtm/usercopy: Expand size of "out of frame" object 7821d743ab iio: st_sensors: Add a local lock for protecting odr 5a89a92efc staging: rtl8712: fix a potential memory leak in r871xu_drv_init() 8caa4b7d41 iio: dummy: iio_simple_dummy: check the return value of kstrdup() f091e29ed8 drm: imx: fix compiler warning with gcc-12 96bf5ed057 net: altera: Fix refcount leak in altera_tse_mdio_create fbeb8dfa8b ip_gre: test csum_start instead of transport header 1981cd7a77 net/mlx5: fs, fail conflicting actions 652418d82b net/mlx5: Rearm the FW tracer after each tracer event 5d9c1b081a net: ipv6: unexport __init-annotated seg6_hmac_init() be3884d5cd net: xfrm: unexport __init-annotated xfrm4_protocol_init() 7759c32228 net: mdio: unexport __init-annotated mdio_bus_init() b585b87fd5 SUNRPC: Fix the calculation of xdr->end in xdr_get_next_encode_buffer() 3d8122e169 net/mlx4_en: Fix wrong return value on ioctl EEPROM query failure c2ae49a113 net: dsa: lantiq_gswip: Fix refcount leak in gswip_gphy_fw_list 0cf7aaff29 bpf, arm64: Clear prog->jited_len along prog->jited c61848500a af_unix: Fix a data-race in unix_dgram_peer_wake_me(). be9581f4fd xen: unexport __init-annotated xen_xlate_map_ballooned_pages() 86c87d2c03 netfilter: nf_tables: bail out early if hardware offload is not supported 330c0c6cd2 netfilter: nf_tables: memleak flow rule from commit path 67e2d44873 netfilter: nf_tables: release new hooks on unsupported flowtable flags 19cb3ece14 ata: pata_octeon_cf: Fix refcount leak in octeon_cf_probe ec5548066d netfilter: nf_tables: always initialize flowtable hook list in transaction 7fd03e34f0 powerpc/kasan: Force thread size increase with KASAN 7a248f9c74 netfilter: nf_tables: delete flowtable hooks via transaction list 9edafbc7ec netfilter: nat: really support inet nat without l3 address 8dbae5affb xprtrdma: treat all calls not a bcall when bc_serv is NULL 8b3d5bafb1 video: fbdev: pxa3xx-gcu: release the resources correctly in pxa3xx_gcu_probe/remove() c09b873f3f video: fbdev: hyperv_fb: Allow resolutions with size > 64 MB for Gen1 0ee5b9644f NFSv4: Don't hold the layoutget locks across multiple RPC calls 95a0ba85c1 dmaengine: zynqmp_dma: In struct zynqmp_dma_chan fix desc_size data type 2c08cae19d m68knommu: fix undefined reference to `_init_sp' d99f04df32 m68knommu: set ZERO_PAGE() to the allocated zeroed page 344a55ccf5 i2c: cadence: Increase timeout per message if necessary 32bea51fe4 f2fs: remove WARN_ON in f2fs_is_valid_blkaddr 54c1e0e3bb iommu/arm-smmu-v3: check return value after calling platform_get_resource() 3660db29b0 iommu/arm-smmu: fix possible null-ptr-deref in arm_smmu_device_probe() 9e801c891a tracing: Avoid adding tracer option before update_tracer_options 1788e6dbb6 tracing: Fix sleeping function called from invalid context on RT kernel 2f452a3306 bootconfig: Make the bootconfig.o as a normal object file c667b3872a mips: cpc: Fix refcount leak in mips_cpc_default_phys_base 76b226eaf0 dmaengine: idxd: set DMA_INTERRUPT cap bit 32be2b805a perf c2c: Fix sorting in percent_rmt_hitm_cmp() 71cbce7503 driver core: Fix wait_for_device_probe() & deferred_probe_timeout interaction b8fac8e321 tipc: check attribute length for bearer name c1f0187025 scsi: sd: Fix potential NULL pointer dereference d2e297eaf4 afs: Fix infinite loop found by xfstest generic/676 04622d6318 gpio: pca953x: use the correct register address to do regcache sync 0a0f7f8414 tcp: tcp_rtx_synack() can be called from process context e05dd93826 net: sched: add barrier to fix packet stuck problem for lockless qdisc e9fe72b95d net/mlx5e: Update netdev features after changing XDP state b50eef7a38 net/mlx5: correct ECE offset in query qp output ea5edd015f net/mlx5: Don't use already freed action pointer bf2af9b243 sfc: fix wrong tx channel offset with efx_separate_tx_channels 8f81a4113e sfc: fix considering that all channels have TX queues 7ac3a034d9 nfp: only report pause frame configuration for physical device 630e0a10c0 net/smc: fixes for converting from "struct smc_cdc_tx_pend **" to "struct smc_wr_tx_pend_priv *" b97550e380 riscv: read-only pages should not be writable 8f49e1694c bpf: Fix probe read error in ___bpf_prog_run() 6d8d3f68cb ubi: ubi_create_volume: Fix use-after-free when volume creation failed f413e4d7cd ubi: fastmap: Fix high cpu usage of ubi_bgt by making sure wl_pool not empty 3252d327f9 jffs2: fix memory leak in jffs2_do_fill_super 741e49eacd modpost: fix removing numeric suffixes 42658e47f1 net: dsa: mv88e6xxx: Fix refcount leak in mv88e6xxx_mdios_register f7ba2cc57f net: ethernet: ti: am65-cpsw-nuss: Fix some refcount leaks 71ae30662e net: ethernet: mtk_eth_soc: out of bounds read in mtk_hwlro_get_fdir_entry() 503a3fd646 net: sched: fixed barrier to prevent skbuff sticking in qdisc backlog ee89d7fd49 s390/crypto: fix scatterwalk_unmap() callers in AES-GCM e892a7e60f clocksource/drivers/oxnas-rps: Fix irq_of_parse_and_map() return value 1d7361679f ASoC: fsl_sai: Fix FSL_SAI_xDR/xFR definition 910b1cdf6c watchdog: ts4800_wdt: Fix refcount leak in ts4800_wdt_probe b3354f2046 watchdog: rti-wdt: Fix pm_runtime_get_sync() error checking 36ee9ffca8 driver core: fix deadlock in __device_attach 823f24f2e3 driver: base: fix UAF when driver_attach failed 7a6337bfed bus: ti-sysc: Fix warnings for unbind for serial 985706bd3b firmware: dmi-sysfs: Fix memory leak in dmi_sysfs_register_handle 94acaaad47 serial: stm32-usart: Correct CSIZE, bits, and parity b7e560d2ff serial: st-asc: Sanitize CSIZE and correct PARENB for CS7 afcfc3183c serial: sifive: Sanitize CSIZE and c_iflag a9f6bee486 serial: sh-sci: Don't allow CS5-6 00456b932e serial: txx9: Don't allow CS5-6 22e975796f serial: rda-uart: Don't allow CS5-6 ff4ce2979b serial: digicolor-usart: Don't allow CS5-6 5cd331bcf0 serial: 8250_fintek: Check SER_RS485_RTS_* only with RS485 260792d5c9 serial: meson: acquire port->lock in startup() 82bfea344e rtc: mt6397: check return value after calling platform_get_resource() d54a51b518 clocksource/drivers/riscv: Events are stopped during CPU suspend 5b3e990f85 soc: rockchip: Fix refcount leak in rockchip_grf_init cfe8a0967d extcon: ptn5150: Add queue work sync before driver release 96414e2cdc coresight: cpu-debug: Replace mutex with mutex_trylock on panic notifier 47ebc50dc2 serial: sifive: Report actual baud base rather than fixed 115200 ab35308bbd phy: qcom-qmp: fix pipe-clock imbalance on power-on failure 52f327a45c rpmsg: qcom_smd: Fix returning 0 if irq_of_parse_and_map() fails c10333c451 iio: adc: sc27xx: Fine tune the scale calibration values 3747429834 iio: adc: sc27xx: fix read big scale voltage not right b30f2315a3 iio: proximity: vl53l0x: Fix return value check of wait_for_completion_timeout 43823ceb26 iio: adc: stmpe-adc: Fix wait_for_completion_timeout return value check 6f01c0fb8e usb: typec: mux: Check dev_set_name() return value 7027c890ff firmware: stratix10-svc: fix a missing check on list iterator 70ece3c5ec misc: fastrpc: fix an incorrect NULL check on list iterator 2a1bf8e5ad usb: dwc3: pci: Fix pm_runtime_get_sync() error checking 8ae4fed195 rpmsg: qcom_smd: Fix irq_of_parse_and_map() return value 572211d631 pwm: lp3943: Fix duty calculation in case period was clamped f9782b26d6 staging: fieldbus: Fix the error handling path in anybuss_host_common_probe() b382c0c3b8 usb: musb: Fix missing of_node_put() in omap2430_probe 6b7cf22122 USB: storage: karma: fix rio_karma_init return e100742823 usb: usbip: add missing device lock on tweak configuration cmd bcbb795a9e usb: usbip: fix a refcount leak in stub_probe() 4e3a2d77bd tty: serial: fsl_lpuart: fix potential bug when using both of_alias_get_id and ida_simple_get e27376f5aa tty: n_tty: Restore EOF push handling behavior 11bc6eff3a tty: serial: owl: Fix missing clk_disable_unprepare() in owl_uart_probe ee6c33b29e tty: goldfish: Use tty_port_destroy() to destroy port 56ac04f35f lkdtm/bugs: Check for the NULL pointer after calling kmalloc 03efa70eb0 iio: adc: ad7124: Remove shift from scan_type 4610b06761 staging: greybus: codecs: fix type confusion of list iterator variable 1509d2335d pcmcia: db1xxx_ss: restrict to MIPS_DB1XXX boards e2e52b40ef Linux 5.10.121 47c1680e51 md: bcache: check the return value of kzalloc() in detached_dev_do_request() a67100f426 ext4: only allow test_dummy_encryption when supported 96662c7746 MIPS: IP30: Remove incorrect `cpu_has_fpu' override 57e561573f MIPS: IP27: Remove incorrect `cpu_has_fpu' override bb55ca1612 RDMA/rxe: Generate a completion for unsupported/invalid opcode 72268945b1 Revert "random: use static branch for crng_ready()" 6b03dc67dd block: fix bio_clone_blkg_association() to associate with proper blkcg_gq 51f724bffa bfq: Make sure bfqg for which we are queueing requests is online 0285718e28 bfq: Get rid of __bio_blkcg() usage 80b0a2b3df bfq: Remove pointless bfq_init_rq() calls 13599aac1b bfq: Drop pointless unlock-lock pair 7d172b9dc9 bfq: Avoid merging queues with different parents 54cdc10ac7 thermal/core: Fix memory leak in the error path b132abaa65 thermal/core: fix a UAF bug in __thermal_cooling_device_register() ec1378f2fa kseltest/cgroup: Make test_stress.sh work if run interactively 82b2b60b67 xfs: assert in xfs_btree_del_cursor should take into account error f1916a88c8 xfs: consider shutdown in bmapbt cursor delete assert e3ffe7387c xfs: force log and push AIL to clear pinned inodes when aborting mount 0b229d03d0 xfs: restore shutdown check in mapped write fault path 3d05a855dc xfs: fix incorrect root dquot corruption error when switching group/project quota types 893cf5f68a xfs: fix chown leaking delalloc quota blocks when fssetxattr fails 643ceee253 xfs: sync lazy sb accounting on quiesce of read-only mounts af26bfb04a xfs: set inode size after creating symlink d27f0000d7 net: ipa: fix page free in ipa_endpoint_replenish_one() 70124d94f4 net: ipa: fix page free in ipa_endpoint_trans_release() 2156dc3904 phy: qcom-qmp: fix reset-controller leak on probe errors 67e3404889 coresight: core: Fix coresight device probe failure issue 77692c02e1 blk-iolatency: Fix inflight count imbalances and IO hangs on offline 19e5aac38a vdpasim: allow to enable a vq repeatedly ec029087df dt-bindings: gpio: altera: correct interrupt-cells 0ac587c61f docs/conf.py: Cope with removal of language=None in Sphinx 5.0.0 6182c71a0c SMB3: EBADF/EIO errors in rename/open caused by race condition in smb2_compound_op d6b9b220d1 ARM: pxa: maybe fix gpio lookup tables 39c61f4f7f ARM: dts: s5pv210: Remove spi-cs-high on panel in Aries 6f3673c8d8 phy: qcom-qmp: fix struct clk leak on probe errors 09a84dad95 arm64: dts: qcom: ipq8074: fix the sleep clock frequency 591c3481b1 gma500: fix an incorrect NULL check on list iterator c521f42dd2 tilcdc: tilcdc_external: fix an incorrect NULL check on list iterator 10c5088a31 serial: pch: don't overwrite xmit->buf[0] by x_char 59afd4f287 bcache: avoid journal no-space deadlock by reserving 1 journal bucket 0cf22f234e bcache: remove incremental dirty sector counting for bch_sectors_dirty_init() 3f686b249b bcache: improve multithreaded bch_sectors_dirty_init() 46c2b5f81c bcache: improve multithreaded bch_btree_check() 4e2fbe8cda stm: ltdc: fix two incorrect NULL checks on list iterator dc12a64cf8 carl9170: tx: fix an incorrect use of list iterator 8f1bc0edf5 ASoC: rt5514: Fix event generation for "DSP Voice Wake Up" control 769ec2a824 rtl818x: Prevent using not initialized queues d787a57a17 xtensa/simdisk: fix proc_read_simdisk() 63758dd959 hugetlb: fix huge_pmd_unshare address update 90ad54714e nodemask.h: fix compilation error with GCC12 e9514bce2f iommu/msm: Fix an incorrect NULL check on list iterator 82c888e51c ftrace: Clean up hash direct_functions on register failures c26ccbaeb8 kexec_file: drop weak attribute from arch_kexec_apply_relocations[_add] cf0dabc374 um: Fix out-of-bounds read in LDT setup 7f8fd5dd43 um: chan_user: Fix winch_tramp() return value 873069e393 mac80211: upgrade passive scan to active scan on DFS channels after beacon rx 22741dd048 cfg80211: declare MODULE_FIRMWARE for regulatory.db e87fedad4a irqchip: irq-xtensa-mx: fix initial IRQ affinity be7ae7cd1c irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375, A38x, A39x df7f0f8be3 csky: patch_text: Fixup last cpu should be master 31dca00d0c RDMA/hfi1: Fix potential integer multiplication overflow errors 09408080ad Kconfig: Add option for asm goto w/ tied outputs to workaround clang-13 bug b67adaec34 ima: remove the IMA_TEMPLATE Kconfig option 577a959cb0 media: coda: Add more H264 levels for CODA960 4005f6a25c media: coda: Fix reported H264 profile d09dad0057 mtd: cfi_cmdset_0002: Use chip_ready() for write on S29GL064N 08788b917b mtd: cfi_cmdset_0002: Move and rename chip_check/chip_ready/chip_good_for_write b2b0144422 md: fix an incorrect NULL check in md_reload_sb 2401f1cf3d md: fix an incorrect NULL check in does_sb_need_changing e28321e013 drm/i915/dsi: fix VBT send packet port selection for ICL+ 495ac77576 drm/bridge: analogix_dp: Grab runtime PM reference for DP-AUX addf0ae792 drm/nouveau/kms/nv50-: atom: fix an incorrect NULL check on list iterator 97a9ec86cc drm/nouveau/clk: Fix an incorrect NULL check on list iterator 436cff507f drm/etnaviv: check for reaped mapping in etnaviv_iommu_unmap_gem be585921f2 drm/amdgpu/cs: make commands with 0 chunks illegal behaviour. 556e404691 scsi: ufs: qcom: Add a readl() to make sure ref_clk gets enabled f297dc2364 scsi: dc395x: Fix a missing check on list iterator 337e365507 ocfs2: dlmfs: fix error handling of user_dlm_destroy_lock 4ca3ac06e7 dlm: fix missing lkb refcount handling 899bc44291 dlm: fix plock invalid read 74114d26e9 s390/perf: obtain sie_block from the right address 7994d89012 mm, compaction: fast_find_migrateblock() should return pfn in the target zone 99fd821f56 PCI: qcom: Fix unbalanced PHY init on probe errors c0e129dafc PCI: qcom: Fix runtime PM imbalance on probe errors 2b4c6ad382 PCI/PM: Fix bridge_d3_blacklist[] Elo i2 overwrite of Gigabyte X299 058cb6d86b tracing: Fix potential double free in create_var_ref() a2b9edc3f8 ACPI: property: Release subnode properties with data nodes ff4cafa517 ext4: avoid cycles in directory h-tree da2f059192 ext4: verify dir block before splitting it 4fd58b5cf1 ext4: fix bug_on in __es_tree_search cc5b09cb6d ext4: filter out EXT4_FC_REPLAY from on-disk superblock field s_state 1b061af037 ext4: fix bug_on in ext4_writepages adf490083c ext4: fix warning in ext4_handle_inode_extension dd887f83ea ext4: fix use-after-free in ext4_rename_dir_prepare 70a7dea846 bfq: Track whether bfq_group is still online b06691af08 bfq: Update cgroup information before merging bio 4dfc12f8c9 bfq: Split shared queues on move between cgroups c072cab98b efi: Do not import certificates from UEFI Secure Boot for T2 Macs 9a9dc60da7 fs-writeback: writeback_sb_inodes：Recalculate 'wrote' according skipped pages c1ad58de13 iwlwifi: mvm: fix assert 1F04 upon reconfig 6118bbdf69 wifi: mac80211: fix use-after-free in chanctx code efdefbe8b7 f2fs: fix to do sanity check for inline inode 2221a2d410 f2fs: fix fallocate to use file_modified to update permissions consistently ef221b738b f2fs: fix to do sanity check on total_data_blocks 196f72e089 f2fs: don't need inode lock for system hidden quota 2e790aa378 f2fs: fix deadloop in foreground GC ccd58045be f2fs: fix to clear dirty inode in f2fs_evict_inode() a34d7b4989 f2fs: fix to do sanity check on block address in f2fs_do_zero_range() 2766ddaf45 f2fs: fix to avoid f2fs_bug_on() in dec_valid_node_count() d8b6aaeb9a perf jevents: Fix event syntax error caused by ExtSel c8c2802407 perf c2c: Use stdio interface if slang is not supported c9542f5f90 i2c: rcar: fix PM ref counts in probe error paths ebd4f37ac1 i2c: npcm: Handle spurious interrupts 5c0dfca6b9 i2c: npcm: Correct register access width 06cb0f056b i2c: npcm: Fix timeout calculation de6f6b5400 iommu/amd: Increase timeout waiting for GA log enablement 3cfb546439 dmaengine: stm32-mdma: fix chan initialization in stm32_mdma_irq_handler() 13d8d11dfa dmaengine: stm32-mdma: rework interrupt handler 0f87bd8b5f dmaengine: stm32-mdma: remove GISR1 register c1c4405222 video: fbdev: clcdfb: Fix refcount leak in clcdfb_of_vram_setup 96fdbb1c85 NFSv4/pNFS: Do not fail I/O when we fail to allocate the pNFS layout 83839a333f NFS: Don't report errors from nfs_pageio_complete() more than once 040242365c NFS: Do not report flush errors in nfs_write_end() c5a0e59bbe NFS: fsync() should report filesystem errors over EINTR/ERESTARTSYS 418b9fa434 NFS: Do not report EINTR/ERESTARTSYS as mapping errors 6073af7815 dmaengine: idxd: Fix the error handling path in idxd_cdev_register() f57696bc63 i2c: at91: Initialize dma_buf in at91_twi_xfer() 8e49773a75 MIPS: Loongson: Use hwmon_device_register_with_groups() to register hwmon ec5ded7acb cpufreq: mediatek: Unregister platform device on exit 9d91400fff cpufreq: mediatek: Use module_init and add module_exit c7b0ec9744 cpufreq: mediatek: add missing platform_driver_unregister() on error in mtk_cpufreq_driver_init fb02d6b543 i2c: at91: use dma safe buffers da748d263a iommu/mediatek: Add list_del in mtk_iommu_remove 51d584704d f2fs: fix dereference of stale list iterator after loop body 0e0faa1431 OPP: call of_node_put() on error path in _bandwidth_supported() baf86afed7 Input: stmfts - do not leave device disabled in stmfts_input_open fc0750e659 RDMA/hfi1: Prevent use of lock before it is initialized bb2220e067 mailbox: forward the hrtimer if not queued and under a lock a1d4941d9a mfd: davinci_voicecodec: Fix possible null-ptr-deref davinci_vc_probe() 46fd994763 powerpc/fsl_rio: Fix refcount leak in fsl_rio_setup b8ef79697b macintosh: via-pmu and via-cuda need RTC_LIB cca915d691 powerpc/perf: Fix the threshold compare group constraint for power9 7620a280da powerpc/64: Only WARN if __pa()/__va() called with bad addresses 9b28515641 hwrng: omap3-rom - fix using wrong clk_disable() in omap_rom_rng_runtime_resume() 40d428b528 PCI/AER: Clear MULTI_ERR_COR/UNCOR_RCV bits 6e07ccc7d5 Input: sparcspkr - fix refcount leak in bbc_beep_probe 76badb0a4d crypto: cryptd - Protect per-CPU resource by disabling BH. 40c41a7bfd crypto: sun8i-ss - handle zero sized sg 5bea8f700a crypto: sun8i-ss - rework handling of IV 9834b13e8b tty: fix deadlock caused by calling printk() under tty_port->lock a21d4dab77 PCI: imx6: Fix PERST# start-up sequence 2a9d3b5118 ipc/mqueue: use get_tree_nodev() in mqueue_get_tree() f061ddfed9 proc: fix dentry/inode overinstantiating under /proc/${pid}/net ab0c26e441 ASoC: atmel-classd: Remove endianness flag on class d component b716e4168d ASoC: atmel-pdmic: Remove endianness flag on pdmic component 456105105e powerpc/4xx/cpm: Fix return value of __setup() handler de5bc92318 powerpc/idle: Fix return value of __setup() handler f991879762 pinctrl: renesas: core: Fix possible null-ptr-deref in sh_pfc_map_resources() f7c290eac8 powerpc/8xx: export 'cpm_setbrg' for modules 49a5b1735c drivers/base/memory: fix an unlikely reference counting issue in __add_memory_block() c121942917 dax: fix cache flush on PMD-mapped pages d8a5bdc767 drivers/base/node.c: fix compaction sysfs file leak 84958f066d pinctrl: mvebu: Fix irq_of_parse_and_map() return value 8a8b40d007 nvdimm: Allow overwrite in the presence of disabled dimms 641649f31e nvdimm: Fix firmware activation deadlock scenarios 1052f22e12 firmware: arm_scmi: Fix list protocols enumeration in the base protocol 7a55a5159d scsi: fcoe: Fix Wstringop-overflow warnings in fcoe_wwn_from_mac() 17d9d7d264 mfd: ipaq-micro: Fix error check return value of platform_get_irq() 82c6c8a66c powerpc/fadump: fix PT_LOAD segment for boot memory area 08b053d32b arm: mediatek: select arch timer for mt7629 ceb61ab22d pinctrl: bcm2835: implement hook for missing gpio-ranges cda45b715d gpiolib: of: Introduce hook for missing gpio-ranges a26dfdf0a6 crypto: marvell/cesa - ECB does not IV ee89d8dee5 misc: ocxl: fix possible double free in ocxl_file_register_afu 22c3fea20a ARM: dts: bcm2835-rpi-b: Fix GPIO line names 0a4ee6cdaa ARM: dts: bcm2837-rpi-3-b-plus: Fix GPIO line name of power LED bd7ffc171c ARM: dts: bcm2837-rpi-cm3-io3: Fix GPIO line names for SMPS I2C daffdb0830 ARM: dts: bcm2835-rpi-zero-w: Fix GPIO line name for Wifi/BT 95000ae680 ARM: dts: stm32: Fix PHY post-reset delay on Avenger96 b439f7addd can: xilinx_can: mark bit timing constants as const 875a17c3ad platform/chrome: Re-introduce cros_ec_cmd_xfer and use it for ioctls b0bf87b1b3 ARM: dts: imx6dl-colibri: Fix I2C pinmuxing acd2313bd9 platform/chrome: cros_ec: fix error handling in cros_ec_register() e690350d3d KVM: nVMX: Clear IDT vectoring on nested VM-Exit for double/triple fault fd7dca68a6 KVM: nVMX: Leave most VM-Exit info fields unmodified on failed VM-Entry 259c1fad9f soc: qcom: llcc: Add MODULE_DEVICE_TABLE() ca7ce579a7 ARM: dts: ci4x10: Adapt to changes in imx6qdl.dtsi regarding fec clocks acd99f384c PCI: dwc: Fix setting error return on MSI DMA mapping failure 92b7cab307 PCI: rockchip: Fix find_first_zero_bit() limit 266f5cf692 PCI: cadence: Fix find_first_zero_bit() limit a409d0b1f9 soc: qcom: smsm: Fix missing of_node_put() in smsm_parse_ipc 7cbe94d296 soc: qcom: smp2p: Fix missing of_node_put() in smp2p_parse_ipc 8365341798 ARM: dts: suniv: F1C100: fix watchdog compatible ea4f1c6bb9 memory: samsung: exynos5422-dmc: Avoid some over memory allocation 3960629bb5 arm64: dts: rockchip: Move drive-impedance-ohm to emmc phy on rk3399 0c5f04da02 net/smc: postpone sk_refcnt increment in connect() 8096e2d7c0 hinic: Avoid some over memory allocation dc7753d600 net: huawei: hinic: Use devm_kcalloc() instead of devm_kzalloc() 4790963ef4 rxrpc: Fix decision on when to generate an IDLE ACK 3eef677a25 rxrpc: Don't let ack.previousPacket regress 573de88fc1 rxrpc: Fix overlapping ACK accounting 4f1c34ee60 rxrpc: Don't try to resend the request if we're receiving the reply 5b4826657d rxrpc: Fix listen() setting the bar too high for the prealloc rings 541224201e hv_netvsc: Fix potential dereference of NULL pointer deb16df525 net: stmmac: fix out-of-bounds access in a selftest 5c2b34d072 net: stmmac: selftests: Use kcalloc() instead of kzalloc() 7386f69041 ASoC: max98090: Move check for invalid values before casting in max98090_put_enab_tlv() d015f6f694 NFC: hci: fix sleep in atomic context bugs in nfc_hci_hcp_message_tx 7a5e6a4898 ASoC: wm2000: fix missing clk_disable_unprepare() on error in wm2000_anc_transition() 8bbf522a2c thermal/drivers/imx_sc_thermal: Fix refcount leak in imx_sc_thermal_probe 18530bedd2 thermal/core: Fix memory leak in __thermal_cooling_device_register() dcf5ffc91c thermal/drivers/core: Use a char pointer for the cooling device name 79098339ac thermal/drivers/broadcom: Fix potential NULL dereference in sr_thermal_probe 8360380295 thermal/drivers/bcm2711: Don't clamp temperature at zero 3161044e75 drm/i915: Fix CFI violation with show_dynamic_id() ffbcfb1688 drm/msm/dpu: handle pm_runtime_get_sync() errors in bind path 2679de7d04 x86/sev: Annotate stack change in the #VC handler 656aa3c51f drm: msm: fix possible memory leak in mdp5_crtc_cursor_set() 48e82ce8cd drm/msm/a6xx: Fix refcount leak in a6xx_gpu_init d54ac6ca48 ext4: reject the 'commit' option on ext2 filesystems 63b7c08995 media: rkvdec: h264: Fix bit depth wrap in pps packet b4805a77d5 media: rkvdec: h264: Fix dpb_valid implementation 82239e30ab media: staging: media: rkvdec: Make use of the helper function devm_platform_ioremap_resource() 5c24566294 media: ov7670: remove ov7670_power_off from ov7670_remove 510e879420 ASoC: ti: j721e-evm: Fix refcount leak in j721e_soc_probe_* 33411945c9 net: hinic: add missing destroy_workqueue in hinic_pf_to_mgmt_init 8113eedbab sctp: read sk->sk_bound_dev_if once in sctp_rcv() 6950ee32c1 lsm,selinux: pass flowi_common instead of flowi to the LSM hooks a67a1661cf m68k: math-emu: Fix dependencies of math emulation support 4dcae15ff8 nvme: set dma alignment to dword 8ace1e6355 Bluetooth: use hdev lock for accept_list and reject_list in conn req 792f8b0e74 Bluetooth: use inclusive language when filtering devices d763aa352c Bluetooth: use inclusive language in HCI role comments c024f6f11d Bluetooth: LL privacy allow RPA 394df9f17e Bluetooth: L2CAP: Rudimentary typo fixes 5702c3c657 Bluetooth: Interleave with allowlist scan 36c644c63b Bluetooth: fix dangling sco_conn and use-after-free in sco_sock_timeout fc68385fcb media: vsp1: Fix offset calculation for plane cropping a3304766d9 media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init 7d792640d3 media: exynos4-is: Change clk_disable to clk_disable_unprepare b3e4837358 media: st-delta: Fix PM disable depth imbalance in delta_probe 8e4e0c4ac5 media: exynos4-is: Fix PM disable depth imbalance in fimc_is_probe 0572a5bd38 media: aspeed: Fix an error handling path in aspeed_video_probe() 34feaea3aa scripts/faddr2line: Fix overlapping text section failures 1472fb1c74 kselftest/cgroup: fix test_stress.sh to use OUTPUT dir cacea459f9 ASoC: samsung: Fix refcount leak in aries_audio_probe c1b08aa568 ASoC: samsung: Use dev_err_probe() helper 9f564e29a5 regulator: pfuze100: Fix refcount leak in pfuze_parse_regulators_dt 2a0da7641e ASoC: mxs-saif: Fix refcount leak in mxs_saif_probe e84aaf23ca ASoC: fsl: Fix refcount leak in imx_sgtl5000_probe 4024affd53 ath11k: Don't check arvif->is_started before sending management frames 779d41c80b perf/amd/ibs: Use interrupt regs ip for stack unwinding 37a9db0ee7 regulator: qcom_smd: Fix up PM8950 regulator configuration e2786db0a7 Revert "cpufreq: Fix possible race in cpufreq online error path" 560dcbe1c7 spi: spi-fsl-qspi: check return value after calling platform_get_resource_byname() f40549ce20 iomap: iomap_write_failed fix 7a79ab2596 media: uvcvideo: Fix missing check to determine if element is found in list d50b26221f drm/msm: return an error pointer in msm_gem_prime_get_sg_table() 883f1d52a5 drm/msm/mdp5: Return error code in mdp5_mixer_release when deadlock is detected 49dc28b4b2 drm/msm/mdp5: Return error code in mdp5_pipe_release when deadlock is detected a10092daba drm/msm/dp: fix event thread stuck in wait_event after kthread_stop() 369a712442 regulator: core: Fix enable_count imbalance with EXCLUSIVE_GET 018ebe4c18 arm64: fix types in copy_highpage() 49bfbaf6a0 x86/mm: Cleanup the control_va_addr_alignment() __setup handler 0d5c8ac922 irqchip/aspeed-scu-ic: Fix irq_of_parse_and_map() return value f4b503b4ef irqchip/aspeed-i2c-ic: Fix irq_of_parse_and_map() return value 5e76e51633 irqchip/exiu: Fix acknowledgment of edge triggered interrupts 35abf2081f x86: Fix return value of __setup handlers 940b12435b virtio_blk: fix the discard_granularity and discard_alignment queue limits 23716d7614 perf tools: Use Python devtools for version autodetection rather than runtime 3451852312 drm/rockchip: vop: fix possible null-ptr-deref in vop_bind() e19ece6f24 drm/panel: panel-simple: Fix proper bpc for AM-1280800N3TZQW-T00H 5a26a49470 drm/msm: add missing include to msm_drv.c 7b815e91ff drm/msm/hdmi: fix error check return value of irq_of_parse_and_map() d9cb951d11 drm/msm/hdmi: check return value after calling platform_get_resource_byname() e99755e6a9 drm/msm/dsi: fix error checks and return values for DSI xmit functions 3574e0b290 drm/msm/dp: fix error check return value of irq_of_parse_and_map() 04204612dd drm/msm/dp: stop event kernel thread when DP unbind 134760263f drm/msm/disp/dpu1: set vbif hw config to NULL to avoid use after memory free during pm runtime resume d5773db56c perf tools: Add missing headers needed by util/data.h e251a33fe8 ASoC: rk3328: fix disabling mclk on pclk probe failure e2fef34d78 x86/speculation: Add missing prototype for unpriv_ebpf_notify() 81f1ddffdc mtd: rawnand: cadence: fix possible null-ptr-deref in cadence_nand_dt_probe() b6ecf2b7e6 x86/pm: Fix false positive kmemleak report in msr_build_context() 0e1cd4edef mtd: spi-nor: core: Check written SR value in spi_nor_write_16bit_sr_and_check() ab88c8d906 libbpf: Fix logic for finding matching program for CO-RE relocation 97b56f17b3 selftests/resctrl: Fix null pointer dereference on open failed c54d66c514 scsi: ufs: core: Exclude UECxx from SFR dump list 02192ee936 scsi: ufs: qcom: Fix ufs_qcom_resume() 328cfeac73 drm/msm/dpu: adjust display_v_end for eDP and DP cc68e53f9a of: overlay: do not break notify on NOTIFY_{OK|STOP} f929416d5c fsnotify: fix wrong lockdep annotations 94845fc422 inotify: show inotify mask flags in proc fdinfo f2c68c5289 ALSA: pcm: Check for null pointer of pointer substream before dereferencing it d764a7d647 drm/panel: simple: Add missing bus flags for Innolux G070Y2-L01 b6b70cd3dd media: hantro: Empty encoder capture buffers by default 461e4c1f19 ath9k_htc: fix potential out of bounds access with invalid rxstatus->rs_keyix 96c848afbd cpufreq: Fix possible race in cpufreq online error path 172789fd95 spi: img-spfi: Fix pm_runtime_get_sync() error checking 147a376c1a sched/fair: Fix cfs_rq_clock_pelt() for throttled cfs_rq f35c3f2374 drm/bridge: Fix error handling in analogix_dp_probe 6d0726725c HID: elan: Fix potential double free in elan_input_configured 39d4bd3f59 HID: hid-led: fix maximum brightness for Dream Cheeky 3c68daf4a3 mtd: rawnand: denali: Use managed device resources dd2b1d70ef EDAC/dmc520: Don't print an error for each unconfigured interrupt line bea6985099 drbd: fix duplicate array initializer 3eba802d47 target: remove an incorrect unmap zeroes data deduction e7681199bb efi: Add missing prototype for efi_capsule_setup_info 2a1b5110c9 NFC: NULL out the dev->rfkill to prevent UAF 8e357f086d net: dsa: mt7530: 1G can also support 1000BASE-X link mode 4565d5be8b scftorture: Fix distribution of short handler delays 58eff5b73f spi: spi-ti-qspi: Fix return value handling of wait_for_completion_timeout b4c7dd0037 drm: mali-dp: potential dereference of null pointer 78a3e9fcdb drm/komeda: Fix an undefined behavior bug in komeda_plane_add() 3cea0259ed nl80211: show SSID for P2P_GO interfaces 6c0a8c771a bpf: Fix excessive memory allocation in stack_map_alloc() 7ff76dc2d8 libbpf: Don't error out on CO-RE relos for overriden weak subprogs 84b0e23e10 drm/vc4: txp: Force alpha to be 0xff if it's disabled ac904216b8 drm/vc4: txp: Don't set TXP_VSTART_AT_EOF 15cec7dfd3 drm/vc4: hvs: Reset muxes at probe time 2268f190af drm/mediatek: Fix mtk_cec_mask() 032f8c67fe drm/ingenic: Reset pixclock rate when parent clock rate changes 58c7c01577 x86/delay: Fix the wrong asm constraint in delay_loop() f279c49f17 ASoC: mediatek: Fix missing of_node_put in mt2701_wm8960_machine_probe fb66e0512e ASoC: mediatek: Fix error handling in mt8173_max98090_dev_probe 35db6e2e99 spi: qcom-qspi: Add minItems to interconnect-names 187ecfc3b7 drm/bridge: adv7511: clean up CEC adapter when probe fails 9072d62785 drm/edid: fix invalid EDID extension block filtering 0d6dc3efb1 ath9k: fix ar9003_get_eepmisc 822dac24b4 ath11k: acquire ab->base_lock in unassign when finding the peer by addr 3ed327b77d dt-bindings: display: sitronix, st7735r: Fix backlight in example 61bbbde9b6 drm: fix EDID struct for old ARM OABI format cc80d3c37c RDMA/hfi1: Prevent panic when SDMA is disabled dfc308d6f2 powerpc/iommu: Add missing of_node_put in iommu_init_early_dart b4e14e9beb macintosh/via-pmu: Fix build failure when CONFIG_INPUT is disabled 0230055fa6 powerpc/powernv: fix missing of_node_put in uv_init() 6a61a97106 powerpc/xics: fix refcount leak in icp_opal_init() 8a665c2791 powerpc/powernv/vas: Assign real address to rx_fifo in vas_rx_win_attr 5a3767ac79 tracing: incorrect isolate_mote_t cast in mm_vmscan_lru_isolate eff3587b9c PCI: Avoid pci_dev_lock() AB/BA deadlock with sriov_numvfs_store() 21a3effe44 ARM: hisi: Add missing of_node_put after of_find_compatible_node d2b3b380c1 ARM: dts: exynos: add atmel,24c128 fallback to Samsung EEPROM d146e2a986 ARM: versatile: Add missing of_node_put in dcscb_init b646e0cfeb pinctrl: renesas: rzn1: Fix possible null-ptr-deref in sh_pfc_map_resources() c16f1b3d72 fat: add ratelimit to fat*_ent_bread() f20c7cd2b2 powerpc/fadump: Fix fadump to work with a different endian capture kernel 039966775c ARM: OMAP1: clock: Fix UART rate reporting algorithm 9dfa8d087b fs: jfs: fix possible NULL pointer dereference in dbFree() 05efc4591f soc: ti: ti_sci_pm_domains: Check for null return of devm_kcalloc 0f9091f202 crypto: ccree - use fine grained DMA mapping dir 86b091b689 PM / devfreq: rk3399_dmc: Disable edev on remove() 7e391ec939 arm64: dts: qcom: msm8994: Fix BLSP[12]_DMA channels count c400439adc ARM: dts: s5pv210: align DMA channels with dtschema 0521c52978 ARM: dts: ox820: align interrupt controller node name with dtschema 968a668376 IB/rdmavt: add missing locks in rvt_ruc_loopback 6a2e275834 gfs2: use i_lock spin_lock for inode qadata 92ef7a8719 selftests/bpf: fix btf_dump/btf_dump due to recent clang change 340cf91293 eth: tg3: silence the GCC 12 array-bounds warning cb2ca93f8f rxrpc, afs: Fix selection of abort codes 4a4e2e90ec rxrpc: Return an error to sendmsg if call failed 6c18a0fcd6 m68k: atari: Make Atari ROM port I/O write macros return void 76744a016e x86/microcode: Add explicit CPU vendor dependency f29fb46232 can: mcp251xfd: silence clang's -Wunaligned-access warning ff383c1879 ASoC: rt1015p: remove dependency on GPIOLIB c73aee1946 ASoC: max98357a: remove dependency on GPIOLIB 86c02171bd media: exynos4-is: Fix compile warning abb5594ae2 net: phy: micrel: Allow probing without .driver_data 8d33585ffa nbd: Fix hung on disconnect request if socket is closed before 1a5a3dfd9f ASoC: rt5645: Fix errorenous cleanup order af98940dd3 nvme-pci: fix a NULL pointer dereference in nvme_alloc_admin_tags 8671aeeef2 openrisc: start CPU timer early in boot 22cdbb1354 media: cec-adap.c: fix is_configuring state 4cf6ba9367 media: imon: reorganize serialization f3915b4665 media: coda: limit frame interval enumeration to supported encoder frame sizes 8ddc89437c media: rga: fix possible memory leak in rga_probe f9413b9023 rtlwifi: Use pr_warn instead of WARN_ONCE eb7a71b7b2 ipmi: Fix pr_fmt to avoid compilation issues fa390c8b62 ipmi:ssif: Check for NULL msg when handling events and messages 0b7c1dc7ee ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default 1ecd01d77c dma-debug: change allocation mode from GFP_NOWAIT to GFP_ATIOMIC a61583744e spi: stm32-qspi: Fix wait_cmd timeout in APM mode 0c05c03c51 perf/amd/ibs: Cascade pmu init functions' return value 4605458398 s390/preempt: disable __preempt_count_add() optimization for PROFILE_ALL_BRANCHES 312c43e98e net: remove two BUG() from skb_checksum_help() 4f99bde59e ASoC: tscs454: Add endianness flag in snd_soc_component_driver 296f8ca0f7 HID: bigben: fix slab-out-of-bounds Write in bigben_probe 3ee67465f7 drm/amdgpu/ucode: Remove firmware load type check in amdgpu_ucode_free_bo 6f19abe031 mlxsw: Treat LLDP packets as control b30e727f09 mlxsw: spectrum_dcb: Do not warn about priority changes d68a5eb7b3 ASoC: dapm: Don't fold register value changes into notifications 9b42659cb3 net/mlx5: fs, delete the FTE when there are no rules attached to it 4d85201adb ipv6: Don't send rs packets to the interface of ARPHRD_TUNNEL 0325c08ae2 drm: msm: fix error check return value of irq_of_parse_and_map() ad97425d23 arm64: compat: Do not treat syscall number as ESR_ELx for a bad syscall 8aa3750986 ath10k: skip ath10k_halt during suspend for driver state RESTARTING 20ad91d08a drm/amd/pm: fix the compile warning b5cd108143 drm/plane: Move range check for format_count earlier 8c3fe9ff80 ASoC: Intel: bytcr_rt5640: Add quirk for the HP Pro Tablet 408 60afa4f4e1 ath11k: disable spectral scan during spectral deinit fa1b509d41 scsi: lpfc: Fix resource leak in lpfc_sli4_send_seq_to_ulp() 1869f9bfaf scsi: ufs: Use pm_runtime_resume_and_get() instead of pm_runtime_get_sync() 508add11af scsi: megaraid: Fix error check return value of register_chrdev() 95050b9847 drivers: mmc: sdhci_am654: Add the quirk to set TESTCD bit 90281cadf5 mmc: jz4740: Apply DMA engine limits to maximum segment size e69e93120f md/bitmap: don't set sb values if can't pass sanity check 3f94169aff media: cx25821: Fix the warning when removing the module ca17e7a532 media: pci: cx23885: Fix the error handling in cx23885_initdev() 27ad46da44 media: venus: hfi: avoid null dereference in deinit e68270a786 ath9k: fix QCA9561 PA bias level ca1ce20689 drm/amd/pm: fix double free in si_parse_power_table() 3102e9d7e5 tools/power turbostat: fix ICX DRAM power numbers fbfeb9bc94 spi: spi-rspi: Remove setting {src,dst}_{addr,addr_width} based on DMA direction e2b8681769 ALSA: jack: Access input_dev under mutex 005990e30d sfc: ef10: Fix assigning negative value to unsigned variable 10f30cba8f rcu: Make TASKS_RUDE_RCU select IRQ_WORK 1c6c3f2336 rcu-tasks: Fix race in schedule and flush work c977d63b8c drm/komeda: return early if drm_universal_plane_init() fails. cd97a481ea ACPICA: Avoid cache flush inside virtual machines 29cb802966 x86/platform/uv: Update TSC sync state for UV5 59dd1a07ee fbcon: Consistently protect deferred_takeover with console_lock() 5bfb65e92f ipv6: fix locking issues with loops over idev->addr_list 98d1dc32f8 ipw2x00: Fix potential NULL dereference in libipw_xmit() cc575b8558 b43: Fix assigning negative value to unsigned variable 4ae5a2ccf5 b43legacy: Fix assigning negative value to unsigned variable 74ad0d7450 mwifiex: add mutex lock for call in mwifiex_dfs_chan_sw_work_queue fadc626cae drm/virtio: fix NULL pointer dereference in virtio_gpu_conn_get_modes c6380d9d2d iommu/vt-d: Add RPLS to quirk list to skip TE disabling 509e9710b8 btrfs: repair super block num_devices automatically 4093eea47d btrfs: add "0x" prefix for unsupported optional features b49516583f ptrace: Reimplement PTRACE_KILL by always sending SIGKILL f8ef79687b ptrace/xtensa: Replace PT_SINGLESTEP with TIF_SINGLESTEP 6580673b17 ptrace/um: Replace PT_DTRACE with TIF_SINGLESTEP 92fb46536a perf/x86/intel: Fix event constraints for ICL b4acb8e7f1 x86/MCE/AMD: Fix memory leak when threshold_create_bank() fails 860e44f21f parisc/stifb: Keep track of hardware path of graphics card 78e008dca2 Fonts: Make font size unsigned in font_desc c5b9b7fb12 xhci: Allow host runtime PM as default for Intel Alder Lake N xHCI c9ac773715 cifs: when extending a file with falloc we should make files not-sparse ce4627f09e usb: core: hcd: Add support for deferring roothub registration a2532c4417 usb: dwc3: gadget: Move null pinter check to proper place 0420275d64 USB: new quirk for Dell Gen 2 devices 19b3fe8a7c USB: serial: option: add Quectel BG95 modem 40bdb5ec95 ALSA: usb-audio: Cancel pending work at closing a MIDI substream 1cf70d5c15 ALSA: hda/realtek - Fix microphone noise on ASUS TUF B550M-PLUS 223368eaf6 ALSA: hda/realtek: Enable 4-speaker output for Dell XPS 15 9520 laptop d2f3acde3d riscv: Fix irq_work when SMP is disabled 4a5c7a61ff riscv: Initialize thread pointer before calling C functions 6b45437959 parisc/stifb: Implement fb_is_primary_device() 9cef71ecea binfmt_flat: do not stop relocating GOT entries prematurely on riscv 43ca8e1dfb Merge 5.10.118 into android12-5.10-lts 70dd2d169d Linux 5.10.120 886eeb0460 bpf: Enlarge offset check value to INT_MAX in bpf_skb_{load,store}_bytes 7f845de286 bpf: Fix potential array overflow in bpf_trampoline_get_progs() 3097f38e91 NFSD: Fix possible sleep during nfsd4_release_lockowner() 78a62e09d8 NFS: Memory allocation failures are not server fatal errors 1d100fcc1d docs: submitting-patches: Fix crossref to 'The canonical patch format' ebbbffae71 tpm: ibmvtpm: Correct the return value in tpm_ibmvtpm_probe() 5933a191ac tpm: Fix buffer access in tpm2_get_tpm_pt() 0c56e5d0e6 HID: multitouch: add quirks to enable Lenovo X12 trackpoint d6822d82c0 HID: multitouch: Add support for Google Whiskers Touchpad 0f03885059 raid5: introduce MD_BROKEN 8df42bcd36 dm verity: set DM_TARGET_IMMUTABLE feature flag e39b536d70 dm stats: add cond_resched when looping over entries 4617778417 dm crypt: make printing of the key constant-time bb64957c47 dm integrity: fix error code in dm_integrity_ctr() 8845027e55 ARM: dts: s5pv210: Correct interrupt name for bluetooth in Aries 4989bb0334 Bluetooth: hci_qca: Use del_timer_sync() before freeing fae05b2314 zsmalloc: fix races between asynchronous zspage free and page migration 6a1cc25494 crypto: ecrdsa - Fix incorrect use of vli_cmp c013f7d1cd crypto: caam - fix i.MX6SX entropy delay value 3d8fc6e28f KVM: x86: avoid calling x86 emulator without a decoded instruction a2a3fa5b61 x86, kvm: use correct GFP flags for preemption disabled 4a9f3a9c28 x86/kvm: Alloc dummy async #PF token outside of raw spinlock 4c4a11c74a KVM: PPC: Book3S HV: fix incorrect NULL check on list iterator 91a36ec160 netfilter: conntrack: re-fetch conntrack after insertion c0aff1faf6 netfilter: nf_tables: sanitize nft_set_desc_concat_parse() 44f1ce5530 crypto: drbg - make reseeding from get_random_bytes() synchronous e744e34a3c crypto: drbg - move dynamic ->reseed_threshold adjustments to __drbg_seed() 54700e82a7 crypto: drbg - track whether DRBG was seeded with !rng_is_initialized() b2bef5500e crypto: drbg - prepare for more fine-grained tracking of seeding state 630192aa45 lib/crypto: add prompts back to crypto libraries 82f723b8a5 exfat: check if cluster num is valid 1f0681f3bd drm/i915: Fix -Wstringop-overflow warning in call to intel_read_wm_latency() 2728d95c6c xfs: Fix CIL throttle hang when CIL space used going backwards a9e7f19a55 xfs: fix an ABBA deadlock in xfs_rename 72464fd2b4 xfs: fix the forward progress assertion in xfs_iwalk_run_callbacks 45d97f70da xfs: show the proper user quota options f20e67b455 xfs: detect overflows in bmbt records ffc8d61387 net: ipa: compute proper aggregation limit 8adb751d29 io_uring: fix using under-expanded iters 57d01bcae7 io_uring: don't re-import iovecs from callbacks 6029f86740 assoc_array: Fix BUG_ON during garbage collect b96b4aa65b cfg80211: set custom regdomain after wiphy registration 8fbd54ab06 pipe: Fix missing lock in pipe_resize_ring() cd720fad8b pipe: make poll_usage boolean and annotate its access ea62d169b6 netfilter: nf_tables: disallow non-stateful expression in sets earlier 5525af175b drivers: i2c: thunderx: Allow driver to work with ACPI defined TWSI controllers f0749aecb2 i2c: ismt: Provide a DMA buffer for Interrupt Cause Logging 828309eee5 net: ftgmac100: Disable hardware checksum on AST2600 640397afdf nfc: pn533: Fix buggy cleanup order ac8d5eb26c net: af_key: check encryption module availability consistency d007f49ab7 percpu_ref_init(): clean ->percpu_count_ref on failure 75e35951d6 pinctrl: sunxi: fix f1c100s uart2 function 56c31ac1d8 Linux 5.10.119 7c57f21349 ALSA: ctxfi: Add SB046x PCI ID 514f587340 random: check for signals after page of pool writes 18c261e948 random: wire up fops->splice_{read,write}_iter() cf8f8d3758 random: convert to using fops->write_iter() affa1ae522 random: convert to using fops->read_iter() 4bb374a118 random: unify batched entropy implementations 552ae8e484 random: move randomize_page() into mm where it belongs 5f2a040b2f random: move initialization functions out of hot pages 02102b63bd random: make consistent use of buf and len 33783ca355 random: use proper return types on get_random_{int,long}_wait() 1fdd7eef21 random: remove extern from functions in header 811afd06e0 random: use static branch for crng_ready() 04d61b96bd random: credit architectural init the exact amount 5123cc61e2 random: handle latent entropy and command line from random_init() 9320e087f2 random: use proper jiffies comparison macro 31ac294037 random: remove ratelimiting for in-kernel unseeded randomness b50f2830b3 random: move initialization out of reseeding hot path 4c4110c052 random: avoid initializing twice in credit race cef9010b78 random: use symbolic constants for crng_init states 30e9f36266 siphash: use one source of truth for siphash permutations 772edeb8c7 random: help compiler out with fast_mix() by using simpler arguments 1841347233 random: do not use input pool from hard IRQs 999b0c9e8a random: order timer entropy functions below interrupt functions ce3c4ff381 random: do not pretend to handle premature next security model 24d3275685 random: use first 128 bits of input as fast init 273aebb50b random: do not use batches when !crng_ready() f4c98fe1d1 random: insist on random_get_entropy() existing in order to simplify ffcfdd5de9 xtensa: use fallback for random_get_entropy() instead of zero e1ea0e26d3 sparc: use fallback for random_get_entropy() instead of zero a5092be129 um: use fallback for random_get_entropy() instead of zero 25d4fdf1f0 x86/tsc: Use fallback for random_get_entropy() instead of zero 0b93f40cbe nios2: use fallback for random_get_entropy() instead of zero fdca775081 arm: use fallback for random_get_entropy() instead of zero d5531246af mips: use fallback for random_get_entropy() instead of just c0 random 714def4497 riscv: use fallback for random_get_entropy() instead of zero 84397906a6 m68k: use fallback for random_get_entropy() instead of zero 7690be1adf timekeeping: Add raw clock fallback for random_get_entropy() 07b5d0b3e2 powerpc: define get_cycles macro for arch-override 30ee01bcdc alpha: define get_cycles macro for arch-override c55a863c30 parisc: define get_cycles macro for arch-override 641d1fbd96 s390: define get_cycles macro for arch-override c895438b17 ia64: define get_cycles macro for arch-override 7d9eab78be init: call time_init() before rand_initialize() ec25e386d3 random: fix sysctl documentation nits 9dff512945 random: document crng_fast_key_erasure() destination possibility a1b5c849d8 random: make random_get_entropy() return an unsigned long 72a9ec8d75 random: allow partial reads if later user copies fail 1805d20dfb random: check for signals every PAGE_SIZE chunk of /dev/[u]random 9641d9b430 random: check for signal_pending() outside of need_resched() check 26ee8fa4df random: do not allow user to keep crng key around on stack bb515a5bef random: do not split fast init input in add_hwgenerator_randomness() be0d4e3e96 random: mix build-time latent entropy into pool at init bb563d06c5 random: re-add removed comment about get_random_{u32,u64} reseeding f3bc5eca83 random: treat bootloader trust toggle the same way as cpu trust toggle 7cb6782146 random: skip fast_init if hwrng provides large chunk of entropy 083ab33951 random: check for signal and try earlier when generating entropy 20da9c6079 random: reseed more often immediately after booting 9891211dfe random: make consistent usage of crng_ready() 95a1c94a1b random: use SipHash as interrupt entropy accumulator 849e7b744c random: replace custom notifier chain with standard one 66307429b5 random: don't let 644 read-only sysctls be written to 4c74ca006a random: give sysctl_random_min_urandom_seed a more sensible value 0964a76fd5 random: do crng pre-init loading in worker rather than irq 192d4c6cb3 random: unify cycles_t and jiffies usage and types 47f0e89b71 random: cleanup UUID handling 9b0e0e2714 random: only wake up writers after zap if threshold was passed c47f215ab3 random: round-robin registers as ulong, not u32 5064550d42 random: clear fast pool, crng, and batches in cpuhp bring up 6e1cb84cc6 random: pull add_hwgenerator_randomness() declaration into random.h 32252548b5 random: check for crng_init == 0 in add_device_randomness() 684e9fe92d random: unify early init crng load accounting f656bd0011 random: do not take pool spinlock at boot 5d73e69a5d random: defer fast pool mixing to worker 7873321cd8 random: rewrite header introductory comment 6d1671b6d2 random: group sysctl functions 21ae543e3a random: group userspace read/write functions f04580811d random: group entropy collection functions e9ff357860 random: group entropy extraction functions d7e5b1925a random: group crng functions 6b1ffb3b5a random: group initialization wait functions 6c9cee1555 random: remove whitespace and reorder includes 7b0f36f7c2 random: remove useless header comment b390181654 random: introduce drain_entropy() helper to declutter crng_reseed() 0971c1c2fd random: deobfuscate irq u32/u64 contributions ae1b8f1954 random: add proper SPDX header 9342656c01 random: remove unused tracepoints 17ad693cd2 random: remove ifdef'd out interrupt bench 28683a1885 random: tie batched entropy generation to base_crng generation adc32acf23 random: fix locking for crng_init in crng_reseed() bb63851c25 random: zero buffer after reading entropy from userspace 63c1aae40a random: remove outdated INT_MAX >> 6 check in urandom_read() 07280d2c3f random: make more consistent use of integer types 655a69cb41 random: use hash function for crng_slow_load() 95026060d8 random: use simpler fast key erasure flow on per-cpu keys 732872aa2c random: absorb fast pool into input pool after fast load 7a5b9ca583 random: do not xor RDRAND when writing into /dev/random 16a6e4ae71 random: ensure early RDSEED goes through mixer on init c521bf08ee random: inline leaves of rand_initialize() 70377ee074 random: get rid of secondary crngs c36e71b5a5 random: use RDSEED instead of RDRAND in entropy extraction 1d1582e5fe random: fix locking in crng_fast_load() 0762b7d1f1 random: remove batched entropy locking 8d07e2a226 random: remove use_input_pool parameter from crng_reseed() b07fcd9e53 random: make credit_entropy_bits() always safe 32d1d7ce3a random: always wake up entropy writers after extraction 9852922061 random: use linear min-entropy accumulation crediting bb9c45cfb9 random: simplify entropy debiting de0727c0c4 random: use computational hash for entropy extraction e0cc561e47 random: only call crng_finalize_init() for primary_crng 480fd91dcd random: access primary_pool directly rather than through pointer 0b9e36e895 random: continually use hwgenerator randomness 6d2d29f051 random: simplify arithmetic function flow in account() a0653a9ec1 random: selectively clang-format where it makes sense bccc8d9231 random: access input_pool_data directly rather than through pointer a9db850c21 random: cleanup fractional entropy shift constants edd294052e random: prepend remaining pool constants with POOL_ f87f50b843 random: de-duplicate INPUT_POOL constants 09ae6b8519 random: remove unused OUTPUT_POOL constants 8cc5260c19 random: rather than entropy_store abstraction, use global 5897e06ac1 random: remove unused extract_entropy() reserved argument ae093ca125 random: remove incomplete last_data logic 7abbc9809f random: cleanup integer types c9e108e36d random: cleanup poolinfo abstraction 8a3b78f917 random: fix typo in comments 0ad5d6384d random: don't reset crng_init_cnt on urandom_read() 17420c77f0 random: avoid superfluous call to RDRAND in CRNG extraction c245231aec random: early initialization of ChaCha constants efaddd56bc random: use IS_ENABLED(CONFIG_NUMA) instead of ifdefs 6443204102 random: harmonize "crng init done" messages ca57d51126 random: mix bootloader randomness into pool 542d8ebedb random: do not re-init if crng_reseed completes before primary init 2bfdf588a8 random: do not sign extend bytes for rotation when mixing 685200b076 random: use BLAKE2s instead of SHA1 in extraction 33c30bfe4f random: remove unused irq_flags argument from add_interrupt_randomness() b57a888740 random: document add_hwgenerator_randomness() with other input functions ae33c501e0 lib/crypto: blake2s: avoid indirect calls to compression function for Clang CFI 07918ddba3 lib/crypto: sha1: re-roll loops to reduce code size 5fb6a3ba3a lib/crypto: blake2s: move hmac construction into wireguard 62531d446a lib/crypto: blake2s: include as built-in aec0878b1d crypto: blake2s - include <linux/bug.h> instead of <asm/bug.h> 030d3443aa crypto: blake2s - adjust include guard naming fea91e9070 crypto: blake2s - add comment for blake2s_state fields d45ae768b7 crypto: blake2s - optimize blake2s initialization 6c362b7c77 crypto: blake2s - share the "shash" API boilerplate code 72e5b68f33 crypto: blake2s - move update and final logic to internal/blake2s.h e467a55bd0 crypto: blake2s - remove unneeded includes 198a19d7ee crypto: x86/blake2s - define shash_alg structs using macros 89f9ee998e crypto: blake2s - define shash_alg structs using macros 0f8fcf5b6e crypto: lib/blake2s - Move selftest prototype into header file c3a4645d80 MAINTAINERS: add git tree for random.c c4882c6e1e MAINTAINERS: co-maintain random.c acb198c4d1 random: remove dead code left over from blocking pool 6227458fef random: avoid arch_get_random_seed_long() when collecting IRQ randomness 257fbea15a ACPI: sysfs: Fix BERT error region memory mapping 14fa2769ea ACPI: sysfs: Make sparse happy about address space in use 0debc69f00 media: vim2m: initialize the media device earlier ed0e71cc3f media: vim2m: Register video device after setting up internals a5c68f457f secure_seq: use the 64 bits of the siphash for port offset calculation 33f1b4a27a tcp: change source port randomizarion at connect() time 9b4aa0d80b KVM: x86/mmu: fix NULL pointer dereference on guest INVPCID 74c6e5d584 KVM: x86: Properly handle APF vs disabled LAPIC situation c06e5f751a staging: rtl8723bs: prevent ->Ssid overflow in rtw_wx_set_scan() a8f4d63142 lockdown: also lock down previous kgdb use c204ee3350 Linux 5.10.118 56642f6af2 module: check for exit sections in layout_sections() instead of module_init_section() 633be494c3 include/uapi/linux/xfrm.h: Fix XFRM_MSG_MAPPING ABI breakage 61a4cc41e5 afs: Fix afs_getattr() to refetch file status if callback break occurred 606011cb6a i2c: mt7621: fix missing clk_disable_unprepare() on error in mtk_i2c_probe() 030de84d45 module: treat exit sections the same as init sections when !CONFIG_MODULE_UNLOAD 355141fdbf dt-bindings: pinctrl: aspeed-g6: remove FWQSPID group d30fdf7d13 Input: ili210x - fix reset timing a698bf1f72 arm64: Enable repeat tlbi workaround on KRYO4XX gold CPUs 696292b9b5 net: atlantic: verify hw_head_ lies within TX buffer ring cd66ab20a8 net: atlantic: add check for MAX_SKB_FRAGS 9bee8b4275 net: atlantic: reduce scope of is_rsc_complete 9b84e83a92 net: atlantic: fix "frag[0] not initialized" 0ae23a1d47 net: stmmac: fix missing pci_disable_device() on error in stmmac_pci_probe() d4c6e5cebc ethernet: tulip: fix missing pci_disable_device() on error in tulip_init_one() 3a6dee284f nl80211: fix locking in nl80211_set_tx_bitrate_mask() efe580c436 selftests: add ping test with ping_group_range tuned 1cfbf6d3a7 nl80211: validate S1G channel width a0f5ff2049 mac80211: fix rx reordering with non explicit / psmp ack policy e21d734fd0 scsi: qla2xxx: Fix missed DMA unmap for aborted commands c5af341747 perf bench numa: Address compiler error on s390 210ea7da5c gpio: mvebu/pwm: Refuse requests with inverted polarity 30d4721fec gpio: gpio-vf610: do not touch other bits when set the target bit ea8a9cb4a7 riscv: dts: sifive: fu540-c000: align dma node name with dtschema dfd1f0cb62 net: bridge: Clear offload_fwd_mark when passing frame up bridge interface. 579061f391 igb: skip phy status check where unavailable a89888648e ARM: 9197/1: spectre-bhb: fix loop8 sequence for Thumb2 1756b45d8d ARM: 9196/1: spectre-bhb: enable for Cortex-A15 7b676abe32 net: af_key: add check for pfkey_broadcast in function pfkey_process 697f3219ee net/mlx5e: Properly block LRO when XDP is enabled b503d0228c NFC: nci: fix sleep in atomic context bugs caused by nci_skb_alloc 42d4287cc1 net/qla3xxx: Fix a test in ql_reset_work() d35bf8d766 clk: at91: generated: consider range when calculating best rate 9e0e75a5e7 ice: fix possible under reporting of ethtool Tx and Rx statistics 6e2caee5cd net: vmxnet3: fix possible NULL pointer dereference in vmxnet3_rq_cleanup() a54d86cf41 net: vmxnet3: fix possible use-after-free bugs in vmxnet3_rq_alloc_rx_buf() 201e5b5c27 net: systemport: Fix an error handling path in bcm_sysport_probe() 9bfe898e2b net/sched: act_pedit: sanitize shift argument before usage 47f04f95ed xfrm: fix "disable_policy" flag use when arriving from different devices 0d2e9d8000 xfrm: rework default policy structure 57c1bbe709 xfrm: fix dflt policy check when there is no policy configured 9856c3a129 xfrm: notify default policy on update 20fd28df40 xfrm: make user policy API complete ab610ee1d1 net: xfrm: fix shift-out-of-bounce 5b7f84b1f9 xfrm: Add possibility to set the default to block if we have no policy 243e72e204 net: evaluate net.ipvX.conf.all.disable_policy and disable_xfrm 1bc27eb71b net: macb: Increment rx bd head after allocating skb and buffer 998e305bd1 net: ipa: record proper RX transaction count 0599d5a8b4 ARM: dts: aspeed-g6: fix SPI1/SPI2 quad pin group 0a2847d448 pinctrl: pinctrl-aspeed-g6: remove FWQSPID group in pinctrl d8ca684c3d ARM: dts: aspeed-g6: remove FWQSPID group in pinctrl dtsi 3fc2846099 dma-buf: fix use of DMA_BUF_SET_NAME_{A,B} in userspace e5289affba drm/dp/mst: fix a possible memory leak in fetch_monitor_name() 8ceca1a069 libceph: fix potential use-after-free on linger ping and resends 233a3cc60e crypto: qcom-rng - fix infinite loop on requests not multiple of WORD_SZ 6013ef5f51 arm64: mte: Ensure the cleared tags are visible before setting the PTE a817f78ed6 arm64: paravirt: Use RCU read locks to guard stolen_time b49bc8d615 KVM: x86/mmu: Update number of zapped pages even if page list is stable 146128ba26 PCI/PM: Avoid putting Elo i2 PCIe Ports in D3cold ec0d801d1a Fix double fget() in vhost_net_set_backend() b42e5e3a84 selinux: fix bad cleanup on error in hashtab_duplicate() 3ee8e109c3 perf: Fix sys_perf_event_open() race against self 18fb7d533c ALSA: hda/realtek: Add quirk for TongFang devices with pop noise 3eaf770163 ALSA: wavefront: Proper check of get_user() error a34d018b6e ALSA: usb-audio: Restore Rane SL-1 quirk f3f2247ac3 Reinstate some of "swiotlb: rework "fix info leak with DMA_FROM_DEVICE"" e2cfa7b093 Revert "swiotlb: fix info leak with DMA_FROM_DEVICE" fe5ac3da50 nilfs2: fix lockdep warnings during disk space reclamation d626fcdabe nilfs2: fix lockdep warnings in page operations for btree nodes aca18bacdb ARM: 9191/1: arm/stacktrace, kasan: Silence KASAN warnings in unwind_frame() 0acaf9cacd platform/chrome: cros_ec_debugfs: detach log reader wq from devm 5a19f3c2d3 drbd: remove usage of list iterator variable after loop 9b7f321106 MIPS: lantiq: check the return value of kzalloc() 05c073b1ad fs: fix an infinite loop in iomap_fiemap 00d8b06a4e rtc: mc146818-lib: Fix the AltCentury for AMD platforms 87fd0dd43e nvme-multipath: fix hang when disk goes live over reconnect 3663d6023a tools/virtio: compile with -pthread 5a4cbcb3df vhost_vdpa: don't setup irq offloading when irq_num < 0 f0931ee125 s390/pci: improve zpci_dev reference counting 7d3f69cbde ALSA: hda/realtek: Enable headset mic on Lenovo P360 a59450656b crypto: x86/chacha20 - Avoid spurious jumps to other functions 39acee8aea crypto: stm32 - fix reference leak in stm32_crc_remove 703c80ff43 rtc: sun6i: Fix time overflow handling bab037ebbe gfs2: Disable page faults during lockless buffered reads e803f12ea2 nvme-pci: add quirks for Samsung X5 SSDs 5565fc538d Input: stmfts - fix reference leak in stmfts_input_open d5e88c2d76 Input: add bounds checking to input_set_capability() ea6a86886c um: Cleanup syscall_handler_t definition/cast, fix warning c39b91fcd5 rtc: pcf2127: fix bug when reading alarm registers 2b4e5a2d7d rtc: fix use-after-free on device removal 67136fff5b igc: Update I226_K device ID d0229838b6 igc: Remove phy->type checking 170110adbe igc: Remove _I_PHY_ID checking 55c820c1b2 Revert "drm/i915/opregion: check port number bounds for SWSCI display power state" 911b362678 floppy: use a statically allocated error counter 3c48558be5 io_uring: always grab file table for deferred statx a1a2c957da usb: gadget: fix race when gadget driver register via ioctl ABI updated to add a new symbol that is needed to be tracked: Leaf changes summary: 1 artifact changed Changed leaf types summary: 0 leaf type changed Removed/Changed/Added functions summary: 0 Removed, 0 Changed, 1 Added function Removed/Changed/Added variables summary: 0 Removed, 0 Changed, 0 Added variable 1 Added function: [A] 'function bool rng_is_initialized()' Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: Ib7f64defc72960f3603eb23b9a401a9fd42ec217	2022-09-28 09:54:28 +02:00
Greg Kroah-Hartman	fbe6a13851	This is the 5.10.137 stable release ... -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmMCMDQACgkQONu9yGCS aT6TwRAAvj1dnV1nLVVNET3jcelTO65SVUUpQjiyGD1npZQaQdH5PoGR0VhMWk7y mLUIwJyp/rR7+OLD3BMFwxDimDWHviFGdbmm/8fsyDrARuOeRd/M1fvtHXjIRQdb nOvfo1yTQWp4xA1k/JwJZslkvRFDsofXWHCRf+ffEryTRanFAVc7u5aFIg92W0b/ JWYWEFe99C4TJ7LACpDoGaP9gE6WXsupaxSZBIu+Wxa+PfDmIeRRTkQn+j4Khn0h I6w+LkLd6ZP3l7sbe9KfS9ZGo1wWLgSng4zz742Z9IaFgxyj2ArS9tNsYCLkkhAM gLSXXkiPBAxUvAtDxR1tc0YROHc1bjAttSoxNXcaaacspSo/Vi0VAtp7t6boK0bI /8P3dh+Hq9u/Q1ClhZtVoFpp+GVj0fDbDd56qVcr2Cp6IokpqRJog1Jhgj0CVCoG iElr3n0+y7/IZfmE6/U1cK00SNcW86e2YduuIy4ifCawRT574zkRiSYZalpaO3qM z1lF9p+zUNq3v2q0wxXuBDLi/yPoJzbJgmCGScj4ryjjr6TOvR1udSVWkJ02dR4H s9km3lNLgoUPCYCLBMlZl7em4T49E09/+4YCrnj/Ezp+YdImf2+QzZyd/gG3ITl2 fW7lpbK1dx3d/19JFP6Xkj9PaIlMl9e8Ne04G+Dabv67uN+0U+g= =Z4rz -----END PGP SIGNATURE----- Merge 5.10.137 into android12-5.10-lts Changes in 5.10.137 Makefile: link with -z noexecstack --no-warn-rwx-segments x86: link vdso and boot with -z noexecstack --no-warn-rwx-segments Revert "pNFS: nfs3_set_ds_client should set NFS_CS_NOPING" scsi: Revert "scsi: qla2xxx: Fix disk failure to rediscover" ALSA: bcd2000: Fix a UAF bug on the error path of probing ALSA: hda/realtek: Add quirk for Clevo NV45PZ ALSA: hda/realtek: Add quirk for HP Spectre x360 15-eb0xxx wifi: mac80211_hwsim: fix race condition in pending packet wifi: mac80211_hwsim: add back erroneously removed cast wifi: mac80211_hwsim: use 32-bit skb cookie add barriers to buffer_uptodate and set_buffer_uptodate HID: wacom: Only report rotation for art pen HID: wacom: Don't register pad_input for touch switch KVM: nVMX: Snapshot pre-VM-Enter BNDCFGS for !nested_run_pending case KVM: nVMX: Snapshot pre-VM-Enter DEBUGCTL for !nested_run_pending case KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 KVM: s390: pv: don't present the ecall interrupt twice KVM: nVMX: Let userspace set nVMX MSR to any _host_ supported value KVM: x86: Mark TSS busy during LTR emulation _after_ all fault checks KVM: x86: Set error code to segment selector on LLDT/LTR non-canonical #GP KVM: x86: Tag kvm_mmu_x86_module_init() with __init riscv: set default pm_power_off to NULL mm: Add kvrealloc() xfs: only set IOMAP_F_SHARED when providing a srcmap to a write xfs: fix I_DONTCACHE mm/mremap: hold the rmap lock in write mode when moving page table entries. ALSA: hda/conexant: Add quirk for LENOVO 20149 Notebook model ALSA: hda/cirrus - support for iMac 12,1 model ALSA: hda/realtek: Add quirk for another Asus K42JZ model ALSA: hda/realtek: Add a quirk for HP OMEN 15 (8786) mute LED tty: vt: initialize unicode screen buffer vfs: Check the truncate maximum size in inode_newsize_ok() fs: Add missing umask strip in vfs_tmpfile thermal: sysfs: Fix cooling_device_stats_setup() error code path fbcon: Fix boundary checks for fbcon=vc:n1-n2 parameters fbcon: Fix accelerated fbdev scrolling while logo is still shown usbnet: Fix linkwatch use-after-free on disconnect ovl: drop WARN_ON() dentry is NULL in ovl_encode_fh() parisc: Fix device names in /proc/iomem parisc: Check the return value of ioremap() in lba_driver_probe() parisc: io_pgetevents_time64() needs compat syscall in 32-bit compat mode drm/gem: Properly annotate WW context on drm_gem_lock_reservations() error drm/vc4: hdmi: Disable audio if dmas property is present but empty drm/nouveau: fix another off-by-one in nvbios_addr drm/nouveau: Don't pm_runtime_put_sync(), only pm_runtime_put_autosuspend() drm/nouveau/acpi: Don't print error when we get -EINPROGRESS from pm_runtime drm/amdgpu: Check BO's requested pinning domains against its preferred_domains mtd: rawnand: arasan: Update NAND bus clock instead of system clock iio: light: isl29028: Fix the warning in isl29028_remove() scsi: sg: Allow waiting for commands to complete on removed device scsi: qla2xxx: Fix incorrect display of max frame size scsi: qla2xxx: Zero undefined mailbox IN registers fuse: limit nsec serial: mvebu-uart: uart2 error bits clearing md-raid: destroy the bitmap after destroying the thread md-raid10: fix KASAN warning media: [PATCH] pci: atomisp_cmd: fix three missing checks on list iterator ia64, processor: fix -Wincompatible-pointer-types in ia64_get_irr() PCI: Add defines for normal and subtractive PCI bridges powerpc/fsl-pci: Fix Class Code of PCIe Root Port powerpc/ptdump: Fix display of RW pages on FSL_BOOK3E powerpc/powernv: Avoid crashing if rng is NULL MIPS: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK coresight: Clear the connection field properly usb: typec: ucsi: Acknowledge the GET_ERROR_STATUS command completion USB: HCD: Fix URB giveback issue in tasklet function ARM: dts: uniphier: Fix USB interrupts for PXs2 SoC arm64: dts: uniphier: Fix USB interrupts for PXs3 SoC usb: dwc3: gadget: refactor dwc3_repare_one_trb usb: dwc3: gadget: fix high speed multiplier setting lockdep: Allow tuning tracing capacity constants. netfilter: nf_tables: do not allow SET_ID to refer to another table netfilter: nf_tables: do not allow CHAIN_ID to refer to another table netfilter: nf_tables: do not allow RULE_ID to refer to another chain netfilter: nf_tables: fix null deref due to zeroed list head epoll: autoremove wakers even more aggressively x86: Handle idle=nomwait cmdline properly for x86_idle arm64: Do not forget syscall when starting a new thread. arm64: fix oops in concurrently setting insn_emulation sysctls ext2: Add more validity checks for inode counts genirq: Don't return error on missing optional irq_request_resources() irqchip/mips-gic: Only register IPI domain when SMP is enabled genirq: GENERIC_IRQ_IPI depends on SMP irqchip/mips-gic: Check the return value of ioremap() in gic_of_init() wait: Fix __wait_event_hrtimeout for RT/DL tasks ARM: dts: imx6ul: add missing properties for sram ARM: dts: imx6ul: change operating-points to uint32-matrix ARM: dts: imx6ul: fix keypad compatible ARM: dts: imx6ul: fix csi node compatible ARM: dts: imx6ul: fix lcdif node compatible ARM: dts: imx6ul: fix qspi node compatible ARM: dts: BCM5301X: Add DT for Meraki MR26 spi: synquacer: Add missing clk_disable_unprepare() ARM: OMAP2+: display: Fix refcount leak bug ACPI: EC: Remove duplicate ThinkPad X1 Carbon 6th entry from DMI quirks ACPI: EC: Drop the EC_FLAGS_IGNORE_DSDT_GPE quirk ACPI: PM: save NVS memory for Lenovo G40-45 ACPI: LPSS: Fix missing check in register_device_clock() arm64: dts: qcom: ipq8074: fix NAND node name arm64: dts: allwinner: a64: orangepi-win: Fix LED node name ARM: shmobile: rcar-gen2: Increase refcount for new reference firmware: tegra: Fix error check return value of debugfs_create_file() PM: hibernate: defer device probing when resuming from hibernation selinux: Add boundary check in put_entry() powerpc/64s: Disable stack variable initialisation for prom_init spi: spi-rspi: Fix PIO fallback on RZ platforms ARM: findbit: fix overflowing offset meson-mx-socinfo: Fix refcount leak in meson_mx_socinfo_init arm64: dts: renesas: beacon: Fix regulator node names ARM: bcm: Fix refcount leak in bcm_kona_smc_init ACPI: processor/idle: Annotate more functions to live in cpuidle section ARM: dts: imx7d-colibri-emmc: add cpu1 supply Input: atmel_mxt_ts - fix up inverted RESET handler soc: renesas: r8a779a0-sysc: Fix A2DP1 and A2CV[2357] PDR values soc: amlogic: Fix refcount leak in meson-secure-pwrc.c arm64: dts: renesas: Fix thermal-sensors on single-zone sensors x86/pmem: Fix platform-device leak in error path ARM: dts: ast2500-evb: fix board compatible ARM: dts: ast2600-evb: fix board compatible hexagon: select ARCH_WANT_LD_ORPHAN_WARN arm64: cpufeature: Allow different PMU versions in ID_DFR0_EL1 locking/lockdep: Fix lockdep_init_map_*() confusion soc: fsl: guts: machine variable might be unset block: fix infinite loop for invalid zone append ARM: dts: qcom: mdm9615: add missing PMIC GPIO reg ARM: OMAP2+: Fix refcount leak in omapdss_init_of ARM: OMAP2+: Fix refcount leak in omap3xxx_prm_late_init cpufreq: zynq: Fix refcount leak in zynq_get_revision regulator: qcom_smd: Fix pm8916_pldo range ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP soc: qcom: ocmem: Fix refcount leak in of_get_ocmem soc: qcom: aoss: Fix refcount leak in qmp_cooling_devices_register ARM: dts: qcom: pm8841: add required thermal-sensor-cells bus: hisi_lpc: fix missing platform_device_put() in hisi_lpc_acpi_probe() arm64: dts: mt7622: fix BPI-R64 WPS button arm64: tegra: Fix SDMMC1 CD on P2888 erofs: avoid consecutive detection for Highmem memory blk-mq: don't create hctx debugfs dir until q->debugfs_dir is created hwmon: (drivetemp) Add module alias block: remove the request_queue to argument request based tracepoints blktrace: Trace remapped requests correctly regulator: of: Fix refcount leak bug in of_get_regulation_constraints() soc: qcom: Make QCOM_RPMPD depend on PM arm64: dts: qcom: qcs404: Fix incorrect USB2 PHYs assignment drivers/perf: arm_spe: Fix consistency of SYS_PMSCR_EL1.CX nohz/full, sched/rt: Fix missed tick-reenabling bug in dequeue_task_rt() selftests/seccomp: Fix compile warning when CC=clang thermal/tools/tmon: Include pthread and time headers in tmon.h dm: return early from dm_pr_call() if DM device is suspended pwm: sifive: Don't check the return code of pwmchip_remove() pwm: sifive: Simplify offset calculation for PWMCMP registers pwm: sifive: Ensure the clk is enabled exactly once per running PWM pwm: sifive: Shut down hardware only after pwmchip_remove() completed pwm: lpc18xx-sct: Convert to devm_platform_ioremap_resource() drm/bridge: tc358767: Move (e)DP bridge endpoint parsing into dedicated function drm/bridge: tc358767: Make sure Refclk clock are enabled ath10k: do not enforce interrupt trigger type drm/st7735r: Fix module autoloading for Okaya RH128128T wifi: rtlwifi: fix error codes in rtl_debugfs_set_write_h2c() ath11k: fix netdev open race drm/mipi-dbi: align max_chunk to 2 in spi_transfer ath11k: Fix incorrect debug_mask mappings drm/radeon: fix potential buffer overflow in ni_set_mc_special_registers() drm/mediatek: Modify dsi funcs to atomic operations drm/mediatek: Separate poweron/poweroff from enable/disable and define new funcs drm/mediatek: Add pull-down MIPI operation in mtk_dsi_poweroff function i2c: npcm: Remove own slave addresses 2:10 i2c: npcm: Correct slave role behavior virtio-gpu: fix a missing check to avoid NULL dereference drm: adv7511: override i2c address of cec before accessing it crypto: sun8i-ss - do not allocate memory when handling hash requests crypto: sun8i-ss - fix error codes in allocate_flows() net: fix sk_wmem_schedule() and sk_rmem_schedule() errors i2c: Fix a potential use after free crypto: sun8i-ss - fix infinite loop in sun8i_ss_setup_ivs() media: tw686x: Register the irq at the end of probe ath9k: fix use-after-free in ath9k_hif_usb_rx_cb wifi: iwlegacy: 4965: fix potential off-by-one overflow in il4965_rs_fill_link_cmd() drm/radeon: fix incorrrect SPDX-License-Identifiers test_bpf: fix incorrect netdev features crypto: ccp - During shutdown, check SEV data pointer before using drm: bridge: adv7511: Add check for mipi_dsi_driver_register drm/mcde: Fix refcount leak in mcde_dsi_bind media: hdpvr: fix error value returns in hdpvr_read media: v4l2-mem2mem: prevent pollerr when last_buffer_dequeued is set media: tw686x: Fix memory leak in tw686x_video_init drm/vc4: plane: Remove subpixel positioning check drm/vc4: plane: Fix margin calculations for the right/bottom edges drm/vc4: dsi: Correct DSI divider calculations drm/vc4: dsi: Correct pixel order for DSI0 drm/vc4: drv: Remove the DSI pointer in vc4_drv drm/vc4: dsi: Use snprintf for the PHY clocks instead of an array drm/vc4: dsi: Introduce a variant structure drm/vc4: dsi: Register dsi0 as the correct vc4 encoder type drm/vc4: dsi: Fix dsi0 interrupt support drm/vc4: dsi: Add correct stop condition to vc4_dsi_encoder_disable iteration drm/vc4: hdmi: Remove firmware logic for MAI threshold setting drm/vc4: hdmi: Avoid full hdmi audio fifo writes drm/vc4: hdmi: Don't access the connector state in reset if kmalloc fails drm/vc4: hdmi: Limit the BCM2711 to the max without scrambling drm/vc4: hdmi: Fix timings for interlaced modes drm/vc4: hdmi: Correct HDMI timing registers for interlaced modes crypto: arm64/gcm - Select AEAD for GHASH_ARM64_CE selftests/xsk: Destroy BPF resources only when ctx refcount drops to 0 drm/rockchip: vop: Don't crash for invalid duplicate_state() drm/rockchip: Fix an error handling path rockchip_dp_probe() drm/mediatek: dpi: Remove output format of YUV drm/mediatek: dpi: Only enable dpi after the bridge is enabled drm: bridge: sii8620: fix possible off-by-one lib: bitmap: order includes alphabetically lib: bitmap: provide devm_bitmap_alloc() and devm_bitmap_zalloc() hinic: Use the bitmap API when applicable net: hinic: fix bug that ethtool get wrong stats net: hinic: avoid kernel hung in hinic_get_stats64() drm/msm/mdp5: Fix global state lock backoff crypto: hisilicon/sec - fixes some coding style crypto: hisilicon/sec - don't sleep when in softirq crypto: hisilicon - Kunpeng916 crypto driver don't sleep when in softirq media: platform: mtk-mdp: Fix mdp_ipi_comm structure alignment mt76: mt76x02u: fix possible memory leak in __mt76x02u_mcu_send_msg mediatek: mt76: mac80211: Fix missing of_node_put() in mt76_led_init() drm/exynos/exynos7_drm_decon: free resources when clk_set_parent() failed. tcp: make retransmitted SKB fit into the send window libbpf: Fix the name of a reused map selftests: timers: valid-adjtimex: build fix for newer toolchains selftests: timers: clocksource-switch: fix passing errors from child bpf: Fix subprog names in stack traces. fs: check FMODE_LSEEK to control internal pipe splicing wifi: wil6210: debugfs: fix info leak in wil_write_file_wmi() wifi: p54: Fix an error handling path in p54spi_probe() wifi: p54: add missing parentheses in p54_flush() selftests/bpf: fix a test for snprintf() overflow can: pch_can: do not report txerr and rxerr during bus-off can: rcar_can: do not report txerr and rxerr during bus-off can: sja1000: do not report txerr and rxerr during bus-off can: hi311x: do not report txerr and rxerr during bus-off can: sun4i_can: do not report txerr and rxerr during bus-off can: kvaser_usb_hydra: do not report txerr and rxerr during bus-off can: kvaser_usb_leaf: do not report txerr and rxerr during bus-off can: usb_8dev: do not report txerr and rxerr during bus-off can: error: specify the values of data[5..7] of CAN error frames can: pch_can: pch_can_error(): initialize errc before using it Bluetooth: hci_intel: Add check for platform_driver_register i2c: cadence: Support PEC for SMBus block read i2c: mux-gpmux: Add of_node_put() when breaking out of loop wifi: wil6210: debugfs: fix uninitialized variable use in `wil_write_file_wmi()` wifi: iwlwifi: mvm: fix double list_add at iwl_mvm_mac_wake_tx_queue wifi: libertas: Fix possible refcount leak in if_usb_probe() media: cedrus: hevc: Add check for invalid timestamp net/mlx5e: Remove WARN_ON when trying to offload an unsupported TLS cipher/version net/mlx5e: Fix the value of MLX5E_MAX_RQ_NUM_MTTS crypto: hisilicon/hpre - don't use GFP_KERNEL to alloc mem during softirq crypto: inside-secure - Add missing MODULE_DEVICE_TABLE for of crypto: hisilicon/sec - fix auth key size error inet: add READ_ONCE(sk->sk_bound_dev_if) in INET_MATCH() tcp: sk->sk_bound_dev_if once in inet_request_bound_dev_if() ipv6: add READ_ONCE(sk->sk_bound_dev_if) in INET6_MATCH() tcp: Fix data-races around sysctl_tcp_l3mdev_accept. net: allow unbound socket for packets in VRF when tcp_l3mdev_accept set iavf: Fix max_rate limiting netdevsim: Avoid allocation warnings triggered from user space net: rose: fix netdev reference changes net: ionic: fix error check for vlan flags in ionic_set_nic_features() dccp: put dccp_qpolicy_full() and dccp_qpolicy_push() in the same lock wireguard: ratelimiter: use hrtimer in selftest wireguard: allowedips: don't corrupt stack when detecting overflow clk: renesas: r9a06g032: Fix UART clkgrp bitsel mtd: maps: Fix refcount leak in of_flash_probe_versatile mtd: maps: Fix refcount leak in ap_flash_init mtd: rawnand: meson: Fix a potential double free issue PCI: tegra194: Fix PM error handling in tegra_pcie_config_ep() HID: cp2112: prevent a buffer overflow in cp2112_xfer() mtd: sm_ftl: Fix deadlock caused by cancel_work_sync in sm_release mtd: partitions: Fix refcount leak in parse_redboot_of mtd: st_spi_fsm: Add a clk_disable_unprepare() in .probe()'s error path fpga: altera-pr-ip: fix unsigned comparison with less than zero usb: host: Fix refcount leak in ehci_hcd_ppc_of_probe usb: ohci-nxp: Fix refcount leak in ohci_hcd_nxp_probe usb: gadget: tegra-xudc: Fix error check in tegra_xudc_powerdomain_init() usb: xhci: tegra: Fix error check netfilter: xtables: Bring SPDX identifier back iio: accel: bma400: Fix the scale min and max macro values platform/chrome: cros_ec: Always expose last resume result iio: accel: bma400: Reordering of header files clk: mediatek: reset: Fix written reset bit offset KVM: Don't set Accessed/Dirty bits for ZERO_PAGE mwifiex: Ignore BTCOEX events from the 88W8897 firmware mwifiex: fix sleep in atomic context bugs caused by dev_coredumpv dmaengine: dw-edma: Fix eDMA Rd/Wr-channels and DMA-direction semantics misc: rtsx: Fix an error handling path in rtsx_pci_probe() driver core: fix potential deadlock in __driver_attach clk: qcom: clk-krait: unlock spin after mux completion usb: host: xhci: use snprintf() in xhci_decode_trb() clk: qcom: ipq8074: fix NSS core PLL-s clk: qcom: ipq8074: SW workaround for UBI32 PLL lock clk: qcom: ipq8074: fix NSS port frequency tables clk: qcom: ipq8074: set BRANCH_HALT_DELAY flag for UBI clocks clk: qcom: camcc-sdm845: Fix topology around titan_top power domain PCI: dwc: Add unroll iATU space support to dw_pcie_disable_atu() PCI: dwc: Deallocate EPC memory on dw_pcie_ep_init() errors PCI: dwc: Always enable CDM check if "snps,enable-cdm-check" exists soundwire: bus_type: fix remove and shutdown support KVM: arm64: Don't return from void function dmaengine: sf-pdma: apply proper spinlock flags in sf_pdma_prep_dma_memcpy() dmaengine: sf-pdma: Add multithread support for a DMA channel PCI: endpoint: Don't stop controller when unbinding endpoint function intel_th: Fix a resource leak in an error handling path intel_th: msu-sink: Potential dereference of null pointer intel_th: msu: Fix vmalloced buffers staging: rtl8192u: Fix sleep in atomic context bug in dm_fsync_timer_callback mmc: sdhci-of-esdhc: Fix refcount leak in esdhc_signal_voltage_switch memstick/ms_block: Fix some incorrect memory allocation memstick/ms_block: Fix a memory leak mmc: sdhci-of-at91: fix set_uhs_signaling rewriting of MC1R mmc: block: Add single read for 4k sector cards KVM: s390: pv: leak the topmost page table when destroy fails PCI/portdrv: Don't disable AER reporting in get_port_device_capability() PCI: qcom: Set up rev 2.1.0 PARF_PHY before enabling clocks scsi: smartpqi: Fix DMA direction for RAID requests xtensa: iss/network: provide release() callback xtensa: iss: fix handling error cases in iss_net_configure() usb: gadget: udc: amd5536 depends on HAS_DMA usb: aspeed-vhub: Fix refcount leak bug in ast_vhub_init_desc() usb: dwc3: core: Deprecate GCTL.CORESOFTRESET usb: dwc3: core: Do not perform GCTL_CORE_SOFTRESET during bootup usb: dwc3: qcom: fix missing optional irq warnings eeprom: idt_89hpesx: uninitialized data in idt_dbgfs_csr_write() interconnect: imx: fix max_node_id um: random: Don't initialise hwrng struct with zero RDMA/rtrs: Define MIN_CHUNK_SIZE RDMA/rtrs: Avoid Wtautological-constant-out-of-range-compare RDMA/rtrs-srv: Fix modinfo output for stringify RDMA/qedr: Improve error logs for rdma_alloc_tid error return RDMA/qedr: Fix potential memory leak in __qedr_alloc_mr() RDMA/hns: Fix incorrect clearing of interrupt status register RDMA/siw: Fix duplicated reported IW_CM_EVENT_CONNECT_REPLY event RDMA/hfi1: fix potential memory leak in setup_base_ctxt() gpio: gpiolib-of: Fix refcount bugs in of_mm_gpiochip_add_data() HID: mcp2221: prevent a buffer overflow in mcp_smbus_write() mmc: cavium-octeon: Add of_node_put() when breaking out of loop mmc: cavium-thunderx: Add of_node_put() when breaking out of loop HID: alps: Declare U1_UNICORN_LEGACY support PCI: tegra194: Fix Root Port interrupt handling PCI: tegra194: Fix link up retry sequence USB: serial: fix tty-port initialized comments usb: cdns3: change place of 'priv_ep' assignment in cdns3_gadget_ep_dequeue(), cdns3_gadget_ep_enable() platform/olpc: Fix uninitialized data in debugfs write RDMA/srpt: Duplicate port name members RDMA/srpt: Introduce a reference count in struct srpt_device RDMA/srpt: Fix a use-after-free mm/mmap.c: fix missing call to vm_unacct_memory in mmap_region selftests: kvm: set rax before vmcall RDMA/mlx5: Add missing check for return value in get namespace flow RDMA/rxe: Fix error unwind in rxe_create_qp() null_blk: fix ida error handling in null_add_dev() nvme: use command_id instead of req->tag in trace_nvme_complete_rq() jbd2: fix outstanding credits assert in jbd2_journal_commit_transaction() ext4: recover csum seed of tmp_inode after migrating to extents jbd2: fix assertion 'jh->b_frozen_data == NULL' failure when journal aborted usb: cdns3: Don't use priv_dev uninitialized in cdns3_gadget_ep_enable() opp: Fix error check in dev_pm_opp_attach_genpd() ASoC: cros_ec_codec: Fix refcount leak in cros_ec_codec_platform_probe ASoC: samsung: Fix error handling in aries_audio_probe ASoC: mediatek: mt8173: Fix refcount leak in mt8173_rt5650_rt5676_dev_probe ASoC: mt6797-mt6351: Fix refcount leak in mt6797_mt6351_dev_probe ASoC: codecs: da7210: add check for i2c_add_driver ASoC: mediatek: mt8173-rt5650: Fix refcount leak in mt8173_rt5650_dev_probe serial: 8250: Export ICR access helpers for internal use serial: 8250_dw: Store LSR into lsr_saved_flags in dw8250_tx_wait_empty() ASoC: codecs: msm8916-wcd-digital: move gains from SX_TLV to S8_TLV ASoC: codecs: wcd9335: move gains from SX_TLV to S8_TLV rpmsg: mtk_rpmsg: Fix circular locking dependency remoteproc: k3-r5: Fix refcount leak in k3_r5_cluster_of_init selftests/livepatch: better synchronize test_klp_callbacks_busy profiling: fix shift too large makes kernel panic ASoC: samsung: h1940_uda1380: include proepr GPIO consumer header powerpc/perf: Optimize clearing the pending PMI and remove WARN_ON for PMI check in power_pmu_disable ASoC: samsung: change gpiod_speaker_power and rx1950_audio from global to static variables tty: n_gsm: Delete gsmtty open SABM frame when config requester tty: n_gsm: fix user open not possible at responder until initiator open tty: n_gsm: fix wrong queuing behavior in gsm_dlci_data_output() tty: n_gsm: fix non flow control frames during mux flow off tty: n_gsm: fix packet re-transmission without open control channel tty: n_gsm: fix race condition in gsmld_write() ASoC: qcom: Fix missing of_node_put() in asoc_qcom_lpass_cpu_platform_probe() remoteproc: qcom: wcnss: Fix handling of IRQs vfio: Remove extra put/gets around vfio_device->group vfio: Simplify the lifetime logic for vfio_device vfio: Split creation of a vfio_device into init and register ops vfio/mdev: Make to_mdev_device() into a static inline vfio/ccw: Do not change FSM state in subchannel event tty: n_gsm: fix wrong T1 retry count handling tty: n_gsm: fix DM command tty: n_gsm: fix missing corner cases in gsmld_poll() iommu/exynos: Handle failed IOMMU device registration properly rpmsg: qcom_smd: Fix refcount leak in qcom_smd_parse_edge kfifo: fix kfifo_to_user() return type lib/smp_processor_id: fix imbalanced instrumentation_end() call remoteproc: sysmon: Wait for SSCTL service to come up mfd: t7l66xb: Drop platform disable callback mfd: max77620: Fix refcount leak in max77620_initialise_fps iommu/arm-smmu: qcom_iommu: Add of_node_put() when breaking out of loop perf tools: Fix dso_id inode generation comparison s390/dump: fix old lowcore virtual vs physical address confusion s390/zcore: fix race when reading from hardware system area ASoC: fsl_easrc: use snd_pcm_format_t type for sample_format ASoC: qcom: q6dsp: Fix an off-by-one in q6adm_alloc_copp() fuse: Remove the control interface for virtio-fs ASoC: audio-graph-card: Add of_node_put() in fail path watchdog: armada_37xx_wdt: check the return value of devm_ioremap() in armada_37xx_wdt_probe() video: fbdev: amba-clcd: Fix refcount leak bugs video: fbdev: sis: fix typos in SiS_GetModeID() ASoC: mchp-spdifrx: disable end of block interrupt on failures powerpc/32: Do not allow selection of e5500 or e6500 CPUs on PPC32 powerpc/pci: Prefer PCI domain assignment via DT 'linux,pci-domain' and alias f2fs: don't set GC_FAILURE_PIN for background GC f2fs: write checkpoint during FG_GC f2fs: fix to remove F2FS_COMPR_FL and tag F2FS_NOCOMP_FL at the same time powerpc/spufs: Fix refcount leak in spufs_init_isolated_loader powerpc/xive: Fix refcount leak in xive_get_max_prio powerpc/cell/axon_msi: Fix refcount leak in setup_msi_msg_address perf symbol: Fail to read phdr workaround kprobes: Forbid probing on trampoline and BPF code areas powerpc/pci: Fix PHB numbering when using opal-phbid genelf: Use HAVE_LIBCRYPTO_SUPPORT, not the never defined HAVE_LIBCRYPTO scripts/faddr2line: Fix vmlinux detection on arm64 sched/deadline: Merge dl_task_can_attach() and dl_cpu_busy() sched, cpuset: Fix dl_cpu_busy() panic due to empty cs->cpus_allowed x86/numa: Use cpumask_available instead of hardcoded NULL check video: fbdev: arkfb: Fix a divide-by-zero bug in ark_set_pixclock() tools/thermal: Fix possible path truncations sched: Fix the check of nr_running at queue wakelist x86/entry: Build thunk_$(BITS) only if CONFIG_PREEMPTION=y video: fbdev: vt8623fb: Check the size of screen before memset_io() video: fbdev: arkfb: Check the size of screen before memset_io() video: fbdev: s3fb: Check the size of screen before memset_io() scsi: zfcp: Fix missing auto port scan and thus missing target ports scsi: qla2xxx: Fix discovery issues in FC-AL topology scsi: qla2xxx: Turn off multi-queue for 8G adapters scsi: qla2xxx: Fix erroneous mailbox timeout after PCI error injection scsi: qla2xxx: Fix losing FCP-2 targets on long port disable with I/Os scsi: qla2xxx: Fix losing FCP-2 targets during port perturbation tests x86/bugs: Enable STIBP for IBPB mitigated RETBleed ftrace/x86: Add back ftrace_expected assignment x86/olpc: fix 'logical not is only applied to the left hand side' posix-cpu-timers: Cleanup CPU timers before freeing them during exec Input: gscps2 - check return value of ioremap() in gscps2_probe() __follow_mount_rcu(): verify that mount_lock remains unchanged spmi: trace: fix stack-out-of-bound access in SPMI tracing functions drm/i915/dg1: Update DMC_DEBUG3 register drm/mediatek: Allow commands to be sent during video mode drm/mediatek: Keep dsi as LP00 before dcs cmds transfer HID: Ignore battery for Elan touchscreen on HP Spectre X360 15-df0xxx HID: hid-input: add Surface Go battery quirk drm/vc4: drv: Adopt the dma configuration from the HVS or V3D component mtd: rawnand: Add a helper to clarify the interface configuration mtd: rawnand: arasan: Check the proposed data interface is supported mtd: rawnand: Add NV-DDR timings mtd: rawnand: arasan: Fix a macro parameter mtd: rawnand: arasan: Support NV-DDR interface mtd: rawnand: arasan: Fix clock rate in NV-DDR usbnet: smsc95xx: Don't clear read-only PHY interrupt usbnet: smsc95xx: Avoid link settings race on interrupt reception firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails intel_th: pci: Add Meteor Lake-P support intel_th: pci: Add Raptor Lake-S PCH support intel_th: pci: Add Raptor Lake-S CPU support KVM: set_msr_mce: Permit guests to ignore single-bit ECC errors KVM: x86: Signal #GP, not -EPERM, on bad WRMSR(MCi_CTL/STATUS) iommu/vt-d: avoid invalid memory access via node_online(NUMA_NO_NODE) PCI/AER: Write AER Capability only when we control it PCI/ERR: Bind RCEC devices to the Root Port driver PCI/ERR: Rename reset_link() to reset_subordinates() PCI/ERR: Simplify by using pci_upstream_bridge() PCI/ERR: Simplify by computing pci_pcie_type() once PCI/ERR: Use "bridge" for clarity in pcie_do_recovery() PCI/ERR: Avoid negated conditional for clarity PCI/ERR: Add pci_walk_bridge() to pcie_do_recovery() PCI/ERR: Recover from RCEC AER errors PCI/AER: Iterate over error counters instead of error strings serial: 8250: Dissociate 4MHz Titan ports from Oxford ports serial: 8250: Correct the clock for OxSemi PCIe devices serial: 8250_pci: Refactor the loop in pci_ite887x_init() serial: 8250_pci: Replace dev_*() by pci_*() macros serial: 8250: Fold EndRun device support into OxSemi Tornado code dm writecache: set a default MAX_WRITEBACK_JOBS kexec, KEYS, s390: Make use of built-in and secondary keyring for signature verification dm thin: fix use-after-free crash in dm_sm_register_threshold_callback timekeeping: contribute wall clock to rng on time change um: Allow PM with suspend-to-idle btrfs: reject log replay if there is unsupported RO compat flag btrfs: reset block group chunk force if we have to wait ACPI: CPPC: Do not prevent CPPC from working in the future KVM: VMX: Drop guest CPUID check for VMXE in vmx_set_cr4() KVM: VMX: Drop explicit 'nested' check from vmx_set_cr4() KVM: SVM: Drop VMXE check from svm_set_cr4() KVM: x86: Move vendor CR4 validity check to dedicated kvm_x86_ops hook KVM: nVMX: Inject #UD if VMXON is attempted with incompatible CR0/CR4 KVM: x86/pmu: preserve IA32_PERF_CAPABILITIES across CPUID refresh KVM: x86/pmu: Use binary search to check filtered events KVM: x86/pmu: Use different raw event masks for AMD and Intel KVM: x86/pmu: Introduce the ctrl_mask value for fixed counter KVM: VMX: Mark all PERF_GLOBAL_(OVF)_CTRL bits reserved if there's no vPMU KVM: x86/pmu: Ignore pmu->global_ctrl check if vPMU doesn't support global_ctrl xen-blkback: fix persistent grants negotiation xen-blkback: Apply 'feature_persistent' parameter when connect xen-blkfront: Apply 'feature_persistent' parameter when connect KEYS: asymmetric: enforce SM2 signature use pkey algo tpm: eventlog: Fix section mismatch for DEBUG_SECTION_MISMATCH tracing: Use a struct alignof to determine trace event field alignment ext4: check if directory block is within i_size ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h ext4: fix warning in ext4_iomap_begin as race between bmap and write ext4: make sure ext4_append() always allocates new block ext4: fix use-after-free in ext4_xattr_set_entry ext4: update s_overhead_clusters in the superblock during an on-line resize ext4: fix extent status tree race in writeback error recovery path ext4: correct max_inline_xattr_value_size computing ext4: correct the misjudgment in ext4_iget_extra_inode dm raid: fix address sanitizer warning in raid_resume dm raid: fix address sanitizer warning in raid_status net_sched: cls_route: remove from list when handle is 0 KVM: Add infrastructure and macro to mark VM as bugged KVM: x86: Check lapic_in_kernel() before attempting to set a SynIC irq KVM: x86: Avoid theoretical NULL pointer dereference in kvm_irq_delivery_to_apic_fast() mac80211: fix a memory leak where sta_info is not freed tcp: fix over estimation in sk_forced_mem_schedule() Revert "mwifiex: fix sleep in atomic context bugs caused by dev_coredumpv" drm/bridge: tc358767: Fix (e)DP bridge endpoint parsing in dedicated function drm/vc4: change vc4_dma_range_matches from a global to static Revert "net: usb: ax88179_178a needs FLAG_SEND_ZLP" Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm regression mtd: rawnand: arasan: Prevent an unsupported configuration kvm: x86/pmu: Fix the compare function used by the pmu event filter tee: add overflow check in register_shm_helper() net/9p: Initialize the iounit field during fid creation net_sched: cls_route: disallow handle of 0 sched/fair: Fix fault in reweight_entity btrfs: only write the sectors in the vertical stripe which has data stripes btrfs: raid56: don't trust any cached sector in __raid56_parity_recover() Linux 5.10.137 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I5775ddfad6460c5a737b1ad3f8e0b8f798338786	2022-08-29 16:53:14 +02:00
Tianjia Zhang	0e48eaf75d	KEYS: asymmetric: enforce SM2 signature use pkey algo ... commit 0815291a8fd66cdcf7db1445d4d99b0d16065829 upstream. The signature verification of SM2 needs to add the Za value and recalculate sig->digest, which requires the detection of the pkey_algo in public_key_verify_signature(). As Eric Biggers said, the pkey_algo field in sig is attacker-controlled and should be use pkey->pkey_algo instead of sig->pkey_algo, and secondly, if sig->pkey_algo is NULL, it will also cause signature verification failure. The software_key_determine_akcipher() already forces the algorithms are matched, so the SM3 algorithm is enforced in the SM2 signature, although this has been checked, we still avoid using any algorithm information in the signature as input. Fixes: 2155256396 ("X.509: support OSCCA SM2-with-SM3 certificate verification") Reported-by: Eric Biggers <ebiggers@google.com> Cc: stable@vger.kernel.org # v5.10+ Signed-off-by: Tianjia Zhang <tianjia.zhang@linux.alibaba.com> Reviewed-by: Jarkko Sakkinen <jarkko@kernel.org> Signed-off-by: Jarkko Sakkinen <jarkko@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-08-21 15:16:22 +02:00
Greg Kroah-Hartman	4e3458d6d3	This is the 5.10.124 stable release ... -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmKzB2QACgkQONu9yGCS aT4veQ/+KF0bH3WbgK07ZD1KTGKLzpwsIbaOLyGbiD91b2DfZgbGN6fzsZGgwALs 4B2olDy2r06aTzPWxZ4eqBms59l9kK0ES0FYlNU3LjxBYA6mtL6ryEEUjXdaX+zp Vd4TGdAEMWKvXmpa2Vq6U5v4NBRIC85iwzS6foAkffgv+8tj2ApYQWIth4fN0mm6 d5aRAtcyPEtQ+hI8V3jufM2ZWnuzuy892xKG2WiAHXLJhJ4fOURe/CRrhIQCx8VW 53cZzAuXf3XfoK60DBvLvB856oUUTPu0MUpj6x1bSpxe25RZZDErt07cCo4FTTRM sOaAdHSpiu3NJRoufzWPCIKLb4dlMjsaQ3QpXGazjfbd+nCVGRDHvUF1pPdUyssy 3QPXo/d8VeFbZLGwC6FJrnybF01VpGqz+89nW3sBFxg8Qx0FN061uebC6LVNgabT 9szE1n9R6QvfFFeZ4RQeiWNZTGazPR5+tdlsue/RoYB9/5bOhDOCl91qxhiqKa/M 1wgZfhxPuxrMDAMo2gWueUT6DZW/psMGDNpgrMDxuVp9EbDLJKXupDP9NOLg0RNv ar0gCCkdxUakpg+LdN5mznpdQo+t1mYy1PB6/5c/P7xEi50rhkJFPq/K180oldZV WtIqyp4eeOGbXsu/I+BaJV1sCIeWuia0WUuwBtExQosK/8JHb8g= =yAJW -----END PGP SIGNATURE----- Merge 5.10.124 into android12-5.10-lts Changes in 5.10.124 9p: missing chunk of "fs/9p: Don't update file type when updating file attributes" nfsd: Replace use of rwsem with errseq_t bpf: Fix incorrect memory charge cost calculation in stack_map_alloc() arm64: dts: imx8mm-beacon: Enable RTS-CTS on UART3 powerpc/kasan: Silence KASAN warnings in __get_wchan() ASoC: nau8822: Add operation for internal PLL off and on dma-debug: make things less spammy under memory pressure ASoC: cs42l52: Fix TLV scales for mixer controls ASoC: cs35l36: Update digital volume TLV ASoC: cs53l30: Correct number of volume levels on SX controls ASoC: cs42l52: Correct TLV for Bypass Volume ASoC: cs42l56: Correct typo in minimum level for SX volume controls ASoC: cs42l51: Correct minimum value for SX volume control ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo() quota: Prevent memory allocation recursion while holding dq_lock ASoC: wm8962: Fix suspend while playing music ASoC: es8328: Fix event generation for deemphasis control ASoC: wm_adsp: Fix event generation for wm_adsp_fw_put() Input: soc_button_array - also add Lenovo Yoga Tablet2 1051F to dmi_use_low_level_irq scsi: vmw_pvscsi: Expand vcpuHint to 16 bits scsi: lpfc: Fix port stuck in bypassed state after LIP in PT2PT topology scsi: lpfc: Allow reduced polling rate for nvme_admin_async_event cmd completion scsi: ipr: Fix missing/incorrect resource cleanup in error case scsi: pmcraid: Fix missing resource cleanup in error case ALSA: hda/realtek - Add HW8326 support virtio-mmio: fix missing put_device() when vm_cmdline_parent registration failed nfc: nfcmrvl: Fix memory leak in nfcmrvl_play_deferred ipv6: Fix signed integer overflow in l2tp_ip6_sendmsg net: ethernet: mtk_eth_soc: fix misuse of mem alloc interface netdev[napi]_alloc_frag mellanox: mlx5: avoid uninitialized variable warning with gcc-12 MIPS: Loongson-3: fix compile mips cpu_hwmon as module build error. gpio: dwapb: Don't print error on -EPROBE_DEFER random: credit cpu and bootloader seeds by default pNFS: Don't keep retrying if the server replied NFS4ERR_LAYOUTUNAVAILABLE pNFS: Avoid a live lock condition in pnfs_update_layout() clocksource: hyper-v: unexport __init-annotated hv_init_clocksource() i40e: Fix adding ADQ filter to TC0 i40e: Fix calculating the number of queue pairs i40e: Fix call trace in setup_tx_descriptors Drivers: hv: vmbus: Release cpu lock in error case tty: goldfish: Fix free_irq() on remove misc: atmel-ssc: Fix IRQ check in ssc_probe drm/i915/reset: Fix error_state_read ptr + offset use nvme: use sysfs_emit instead of sprintf nvme: add device name to warning in uuid_show() mlxsw: spectrum_cnt: Reorder counter pools net: bgmac: Fix an erroneous kfree() in bgmac_remove() net: ax25: Fix deadlock caused by skb_recv_datagram in ax25_recvmsg arm64: ftrace: fix branch range checks arm64: ftrace: consistently handle PLTs. certs/blacklist_hashes.c: fix const confusion in certs blacklist block: Fix handling of offline queues in blk_mq_alloc_request_hctx() faddr2line: Fix overlapping text section failures, the sequel i2c: npcm7xx: Add check for platform_driver_register irqchip/gic/realview: Fix refcount leak in realview_gic_of_init irqchip/gic-v3: Fix error handling in gic_populate_ppi_partitions irqchip/gic-v3: Fix refcount leak in gic_populate_ppi_partitions i2c: designware: Use standard optional ref clock implementation mei: me: add raptor lake point S DID comedi: vmk80xx: fix expression for tx buffer size crypto: memneq - move into lib/ USB: serial: option: add support for Cinterion MV31 with new baseline USB: serial: io_ti: add Agilent E5805A support usb: dwc2: Fix memory leak in dwc2_hcd_init usb: gadget: lpc32xx_udc: Fix refcount leak in lpc32xx_udc_probe serial: 8250: Store to lsr_save_flags after lsr read dm mirror log: round up region bitmap size to BITS_PER_LONG drm/amd/display: Cap OLED brightness per max frame-average luminance ext4: fix bug_on ext4_mb_use_inode_pa ext4: make variable "count" signed ext4: add reserved GDT blocks check KVM: arm64: Don't read a HW interrupt pending state in user context KVM: x86: Account a variety of miscellaneous allocations KVM: SVM: Use kzalloc for sev ioctl interfaces to prevent kernel data leak ALSA: hda/realtek: fix right sounds and mute/micmute LEDs for HP machine virtio-pci: Remove wrong address verification in vp_del_vqs() dma-direct: don't over-decrypt memory net/sched: act_police: more accurate MTU policing net: openvswitch: fix misuse of the cached connection on tuple changes Revert "PCI: Make pci_enable_ptm() private" igc: Enable PCIe PTM powerpc/book3e: get rid of #include <generated/compile.h> clk: imx8mp: fix usb_root_clk parent Linux 5.10.124 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I805be804872dfaf5e17d772f439ccf6d5061670e	2022-07-28 15:53:46 +02:00
Greg Kroah-Hartman	0e8e989142	This is the 5.10.121 stable release ... -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmKhrZIACgkQONu9yGCS aT4bxhAAsahNlwa6uWf6brIeZkHy62w0LrZAEr6+TvO2CHLWwhcKIol5ZjdaJD5y KX7A839Vcdo5iAk0eNUV2MTigp7YK0f7XH9y/u/L3yNLc9YA4isA9PQhnnPc4R7N mgkmGT7Oz7BbQydyDiLvSwtXJDxBMOzCDTF3/4/42PsdmRmPzLBxzoTpH8wcY4vG jwGyiyUjUVWAF99uHo0O/Yp8sw8UvudpOX+lbKed76V+fXsbH0PYk1yMMJfWhZ60 TrFh1dmZY7j2bW0+F7rkVPXVGeQGyOlLSUVSFWlugJ8qvxVNpAItjcBUXZ+nChGe O25/5UiaBHprTIoms05yG1jPZtBbAO2MgLhw6zBCOySBr/e0bligNfJWpjt5D6H3 17+CQ1QeaL9BlzcYr4Ug/y60o2CkfUc/vr2CEQRQBRgj1gjsFWwBI4HVdO982fKC QClnC55h1wYDsjSJ6Z4l4TKBuEN8rV9D3RfdIaPex5C6JJMAoUNeAojCL+6iyuem ODSIufKm1I1eHeIS49+tw0Uu4jiAtn9RJfR4+uiV8zftfrDZ1qM/RPuHZTsE9wAl 3jHx6+8mT8NYjxb9Omn4Dp3aOl7Fcx/vPxx9uoj8YjrJtQ3L0EGgCnk0djmMi0b3 sBdKw15ftoJvNNrhQaLiCo+0M3XkcUUBk37ttNuIo4lvqIY23RE= =piEC -----END PGP SIGNATURE----- Merge 5.10.121 into android12-5.10-lts Changes in 5.10.121 binfmt_flat: do not stop relocating GOT entries prematurely on riscv parisc/stifb: Implement fb_is_primary_device() riscv: Initialize thread pointer before calling C functions riscv: Fix irq_work when SMP is disabled ALSA: hda/realtek: Enable 4-speaker output for Dell XPS 15 9520 laptop ALSA: hda/realtek - Fix microphone noise on ASUS TUF B550M-PLUS ALSA: usb-audio: Cancel pending work at closing a MIDI substream USB: serial: option: add Quectel BG95 modem USB: new quirk for Dell Gen 2 devices usb: dwc3: gadget: Move null pinter check to proper place usb: core: hcd: Add support for deferring roothub registration cifs: when extending a file with falloc we should make files not-sparse xhci: Allow host runtime PM as default for Intel Alder Lake N xHCI Fonts: Make font size unsigned in font_desc parisc/stifb: Keep track of hardware path of graphics card x86/MCE/AMD: Fix memory leak when threshold_create_bank() fails perf/x86/intel: Fix event constraints for ICL ptrace/um: Replace PT_DTRACE with TIF_SINGLESTEP ptrace/xtensa: Replace PT_SINGLESTEP with TIF_SINGLESTEP ptrace: Reimplement PTRACE_KILL by always sending SIGKILL btrfs: add "0x" prefix for unsupported optional features btrfs: repair super block num_devices automatically iommu/vt-d: Add RPLS to quirk list to skip TE disabling drm/virtio: fix NULL pointer dereference in virtio_gpu_conn_get_modes mwifiex: add mutex lock for call in mwifiex_dfs_chan_sw_work_queue b43legacy: Fix assigning negative value to unsigned variable b43: Fix assigning negative value to unsigned variable ipw2x00: Fix potential NULL dereference in libipw_xmit() ipv6: fix locking issues with loops over idev->addr_list fbcon: Consistently protect deferred_takeover with console_lock() x86/platform/uv: Update TSC sync state for UV5 ACPICA: Avoid cache flush inside virtual machines drm/komeda: return early if drm_universal_plane_init() fails. rcu-tasks: Fix race in schedule and flush work rcu: Make TASKS_RUDE_RCU select IRQ_WORK sfc: ef10: Fix assigning negative value to unsigned variable ALSA: jack: Access input_dev under mutex spi: spi-rspi: Remove setting {src,dst}_{addr,addr_width} based on DMA direction tools/power turbostat: fix ICX DRAM power numbers drm/amd/pm: fix double free in si_parse_power_table() ath9k: fix QCA9561 PA bias level media: venus: hfi: avoid null dereference in deinit media: pci: cx23885: Fix the error handling in cx23885_initdev() media: cx25821: Fix the warning when removing the module md/bitmap: don't set sb values if can't pass sanity check mmc: jz4740: Apply DMA engine limits to maximum segment size drivers: mmc: sdhci_am654: Add the quirk to set TESTCD bit scsi: megaraid: Fix error check return value of register_chrdev() scsi: ufs: Use pm_runtime_resume_and_get() instead of pm_runtime_get_sync() scsi: lpfc: Fix resource leak in lpfc_sli4_send_seq_to_ulp() ath11k: disable spectral scan during spectral deinit ASoC: Intel: bytcr_rt5640: Add quirk for the HP Pro Tablet 408 drm/plane: Move range check for format_count earlier drm/amd/pm: fix the compile warning ath10k: skip ath10k_halt during suspend for driver state RESTARTING arm64: compat: Do not treat syscall number as ESR_ELx for a bad syscall drm: msm: fix error check return value of irq_of_parse_and_map() ipv6: Don't send rs packets to the interface of ARPHRD_TUNNEL net/mlx5: fs, delete the FTE when there are no rules attached to it ASoC: dapm: Don't fold register value changes into notifications mlxsw: spectrum_dcb: Do not warn about priority changes mlxsw: Treat LLDP packets as control drm/amdgpu/ucode: Remove firmware load type check in amdgpu_ucode_free_bo HID: bigben: fix slab-out-of-bounds Write in bigben_probe ASoC: tscs454: Add endianness flag in snd_soc_component_driver net: remove two BUG() from skb_checksum_help() s390/preempt: disable __preempt_count_add() optimization for PROFILE_ALL_BRANCHES perf/amd/ibs: Cascade pmu init functions' return value spi: stm32-qspi: Fix wait_cmd timeout in APM mode dma-debug: change allocation mode from GFP_NOWAIT to GFP_ATIOMIC ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default ipmi:ssif: Check for NULL msg when handling events and messages ipmi: Fix pr_fmt to avoid compilation issues rtlwifi: Use pr_warn instead of WARN_ONCE media: rga: fix possible memory leak in rga_probe media: coda: limit frame interval enumeration to supported encoder frame sizes media: imon: reorganize serialization media: cec-adap.c: fix is_configuring state openrisc: start CPU timer early in boot nvme-pci: fix a NULL pointer dereference in nvme_alloc_admin_tags ASoC: rt5645: Fix errorenous cleanup order nbd: Fix hung on disconnect request if socket is closed before net: phy: micrel: Allow probing without .driver_data media: exynos4-is: Fix compile warning ASoC: max98357a: remove dependency on GPIOLIB ASoC: rt1015p: remove dependency on GPIOLIB can: mcp251xfd: silence clang's -Wunaligned-access warning x86/microcode: Add explicit CPU vendor dependency m68k: atari: Make Atari ROM port I/O write macros return void rxrpc: Return an error to sendmsg if call failed rxrpc, afs: Fix selection of abort codes eth: tg3: silence the GCC 12 array-bounds warning selftests/bpf: fix btf_dump/btf_dump due to recent clang change gfs2: use i_lock spin_lock for inode qadata IB/rdmavt: add missing locks in rvt_ruc_loopback ARM: dts: ox820: align interrupt controller node name with dtschema ARM: dts: s5pv210: align DMA channels with dtschema arm64: dts: qcom: msm8994: Fix BLSP[12]_DMA channels count PM / devfreq: rk3399_dmc: Disable edev on remove() crypto: ccree - use fine grained DMA mapping dir soc: ti: ti_sci_pm_domains: Check for null return of devm_kcalloc fs: jfs: fix possible NULL pointer dereference in dbFree() ARM: OMAP1: clock: Fix UART rate reporting algorithm powerpc/fadump: Fix fadump to work with a different endian capture kernel fat: add ratelimit to fat*_ent_bread() pinctrl: renesas: rzn1: Fix possible null-ptr-deref in sh_pfc_map_resources() ARM: versatile: Add missing of_node_put in dcscb_init ARM: dts: exynos: add atmel,24c128 fallback to Samsung EEPROM ARM: hisi: Add missing of_node_put after of_find_compatible_node PCI: Avoid pci_dev_lock() AB/BA deadlock with sriov_numvfs_store() tracing: incorrect isolate_mote_t cast in mm_vmscan_lru_isolate powerpc/powernv/vas: Assign real address to rx_fifo in vas_rx_win_attr powerpc/xics: fix refcount leak in icp_opal_init() powerpc/powernv: fix missing of_node_put in uv_init() macintosh/via-pmu: Fix build failure when CONFIG_INPUT is disabled powerpc/iommu: Add missing of_node_put in iommu_init_early_dart RDMA/hfi1: Prevent panic when SDMA is disabled drm: fix EDID struct for old ARM OABI format dt-bindings: display: sitronix, st7735r: Fix backlight in example ath11k: acquire ab->base_lock in unassign when finding the peer by addr ath9k: fix ar9003_get_eepmisc drm/edid: fix invalid EDID extension block filtering drm/bridge: adv7511: clean up CEC adapter when probe fails spi: qcom-qspi: Add minItems to interconnect-names ASoC: mediatek: Fix error handling in mt8173_max98090_dev_probe ASoC: mediatek: Fix missing of_node_put in mt2701_wm8960_machine_probe x86/delay: Fix the wrong asm constraint in delay_loop() drm/ingenic: Reset pixclock rate when parent clock rate changes drm/mediatek: Fix mtk_cec_mask() drm/vc4: hvs: Reset muxes at probe time drm/vc4: txp: Don't set TXP_VSTART_AT_EOF drm/vc4: txp: Force alpha to be 0xff if it's disabled libbpf: Don't error out on CO-RE relos for overriden weak subprogs bpf: Fix excessive memory allocation in stack_map_alloc() nl80211: show SSID for P2P_GO interfaces drm/komeda: Fix an undefined behavior bug in komeda_plane_add() drm: mali-dp: potential dereference of null pointer spi: spi-ti-qspi: Fix return value handling of wait_for_completion_timeout scftorture: Fix distribution of short handler delays net: dsa: mt7530: 1G can also support 1000BASE-X link mode NFC: NULL out the dev->rfkill to prevent UAF efi: Add missing prototype for efi_capsule_setup_info target: remove an incorrect unmap zeroes data deduction drbd: fix duplicate array initializer EDAC/dmc520: Don't print an error for each unconfigured interrupt line mtd: rawnand: denali: Use managed device resources HID: hid-led: fix maximum brightness for Dream Cheeky HID: elan: Fix potential double free in elan_input_configured drm/bridge: Fix error handling in analogix_dp_probe sched/fair: Fix cfs_rq_clock_pelt() for throttled cfs_rq spi: img-spfi: Fix pm_runtime_get_sync() error checking cpufreq: Fix possible race in cpufreq online error path ath9k_htc: fix potential out of bounds access with invalid rxstatus->rs_keyix media: hantro: Empty encoder capture buffers by default drm/panel: simple: Add missing bus flags for Innolux G070Y2-L01 ALSA: pcm: Check for null pointer of pointer substream before dereferencing it inotify: show inotify mask flags in proc fdinfo fsnotify: fix wrong lockdep annotations of: overlay: do not break notify on NOTIFY_{OK|STOP} drm/msm/dpu: adjust display_v_end for eDP and DP scsi: ufs: qcom: Fix ufs_qcom_resume() scsi: ufs: core: Exclude UECxx from SFR dump list selftests/resctrl: Fix null pointer dereference on open failed libbpf: Fix logic for finding matching program for CO-RE relocation mtd: spi-nor: core: Check written SR value in spi_nor_write_16bit_sr_and_check() x86/pm: Fix false positive kmemleak report in msr_build_context() mtd: rawnand: cadence: fix possible null-ptr-deref in cadence_nand_dt_probe() x86/speculation: Add missing prototype for unpriv_ebpf_notify() ASoC: rk3328: fix disabling mclk on pclk probe failure perf tools: Add missing headers needed by util/data.h drm/msm/disp/dpu1: set vbif hw config to NULL to avoid use after memory free during pm runtime resume drm/msm/dp: stop event kernel thread when DP unbind drm/msm/dp: fix error check return value of irq_of_parse_and_map() drm/msm/dsi: fix error checks and return values for DSI xmit functions drm/msm/hdmi: check return value after calling platform_get_resource_byname() drm/msm/hdmi: fix error check return value of irq_of_parse_and_map() drm/msm: add missing include to msm_drv.c drm/panel: panel-simple: Fix proper bpc for AM-1280800N3TZQW-T00H drm/rockchip: vop: fix possible null-ptr-deref in vop_bind() perf tools: Use Python devtools for version autodetection rather than runtime virtio_blk: fix the discard_granularity and discard_alignment queue limits x86: Fix return value of __setup handlers irqchip/exiu: Fix acknowledgment of edge triggered interrupts irqchip/aspeed-i2c-ic: Fix irq_of_parse_and_map() return value irqchip/aspeed-scu-ic: Fix irq_of_parse_and_map() return value x86/mm: Cleanup the control_va_addr_alignment() __setup handler arm64: fix types in copy_highpage() regulator: core: Fix enable_count imbalance with EXCLUSIVE_GET drm/msm/dp: fix event thread stuck in wait_event after kthread_stop() drm/msm/mdp5: Return error code in mdp5_pipe_release when deadlock is detected drm/msm/mdp5: Return error code in mdp5_mixer_release when deadlock is detected drm/msm: return an error pointer in msm_gem_prime_get_sg_table() media: uvcvideo: Fix missing check to determine if element is found in list iomap: iomap_write_failed fix spi: spi-fsl-qspi: check return value after calling platform_get_resource_byname() Revert "cpufreq: Fix possible race in cpufreq online error path" regulator: qcom_smd: Fix up PM8950 regulator configuration perf/amd/ibs: Use interrupt regs ip for stack unwinding ath11k: Don't check arvif->is_started before sending management frames ASoC: fsl: Fix refcount leak in imx_sgtl5000_probe ASoC: mxs-saif: Fix refcount leak in mxs_saif_probe regulator: pfuze100: Fix refcount leak in pfuze_parse_regulators_dt ASoC: samsung: Use dev_err_probe() helper ASoC: samsung: Fix refcount leak in aries_audio_probe kselftest/cgroup: fix test_stress.sh to use OUTPUT dir scripts/faddr2line: Fix overlapping text section failures media: aspeed: Fix an error handling path in aspeed_video_probe() media: exynos4-is: Fix PM disable depth imbalance in fimc_is_probe media: st-delta: Fix PM disable depth imbalance in delta_probe media: exynos4-is: Change clk_disable to clk_disable_unprepare media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init media: vsp1: Fix offset calculation for plane cropping Bluetooth: fix dangling sco_conn and use-after-free in sco_sock_timeout Bluetooth: Interleave with allowlist scan Bluetooth: L2CAP: Rudimentary typo fixes Bluetooth: LL privacy allow RPA Bluetooth: use inclusive language in HCI role comments Bluetooth: use inclusive language when filtering devices Bluetooth: use hdev lock for accept_list and reject_list in conn req nvme: set dma alignment to dword m68k: math-emu: Fix dependencies of math emulation support lsm,selinux: pass flowi_common instead of flowi to the LSM hooks sctp: read sk->sk_bound_dev_if once in sctp_rcv() net: hinic: add missing destroy_workqueue in hinic_pf_to_mgmt_init ASoC: ti: j721e-evm: Fix refcount leak in j721e_soc_probe_* media: ov7670: remove ov7670_power_off from ov7670_remove media: staging: media: rkvdec: Make use of the helper function devm_platform_ioremap_resource() media: rkvdec: h264: Fix dpb_valid implementation media: rkvdec: h264: Fix bit depth wrap in pps packet ext4: reject the 'commit' option on ext2 filesystems drm/msm/a6xx: Fix refcount leak in a6xx_gpu_init drm: msm: fix possible memory leak in mdp5_crtc_cursor_set() x86/sev: Annotate stack change in the #VC handler drm/msm/dpu: handle pm_runtime_get_sync() errors in bind path drm/i915: Fix CFI violation with show_dynamic_id() thermal/drivers/bcm2711: Don't clamp temperature at zero thermal/drivers/broadcom: Fix potential NULL dereference in sr_thermal_probe thermal/drivers/core: Use a char pointer for the cooling device name thermal/core: Fix memory leak in __thermal_cooling_device_register() thermal/drivers/imx_sc_thermal: Fix refcount leak in imx_sc_thermal_probe ASoC: wm2000: fix missing clk_disable_unprepare() on error in wm2000_anc_transition() NFC: hci: fix sleep in atomic context bugs in nfc_hci_hcp_message_tx ASoC: max98090: Move check for invalid values before casting in max98090_put_enab_tlv() net: stmmac: selftests: Use kcalloc() instead of kzalloc() net: stmmac: fix out-of-bounds access in a selftest hv_netvsc: Fix potential dereference of NULL pointer rxrpc: Fix listen() setting the bar too high for the prealloc rings rxrpc: Don't try to resend the request if we're receiving the reply rxrpc: Fix overlapping ACK accounting rxrpc: Don't let ack.previousPacket regress rxrpc: Fix decision on when to generate an IDLE ACK net: huawei: hinic: Use devm_kcalloc() instead of devm_kzalloc() hinic: Avoid some over memory allocation net/smc: postpone sk_refcnt increment in connect() arm64: dts: rockchip: Move drive-impedance-ohm to emmc phy on rk3399 memory: samsung: exynos5422-dmc: Avoid some over memory allocation ARM: dts: suniv: F1C100: fix watchdog compatible soc: qcom: smp2p: Fix missing of_node_put() in smp2p_parse_ipc soc: qcom: smsm: Fix missing of_node_put() in smsm_parse_ipc PCI: cadence: Fix find_first_zero_bit() limit PCI: rockchip: Fix find_first_zero_bit() limit PCI: dwc: Fix setting error return on MSI DMA mapping failure ARM: dts: ci4x10: Adapt to changes in imx6qdl.dtsi regarding fec clocks soc: qcom: llcc: Add MODULE_DEVICE_TABLE() KVM: nVMX: Leave most VM-Exit info fields unmodified on failed VM-Entry KVM: nVMX: Clear IDT vectoring on nested VM-Exit for double/triple fault platform/chrome: cros_ec: fix error handling in cros_ec_register() ARM: dts: imx6dl-colibri: Fix I2C pinmuxing platform/chrome: Re-introduce cros_ec_cmd_xfer and use it for ioctls can: xilinx_can: mark bit timing constants as const ARM: dts: stm32: Fix PHY post-reset delay on Avenger96 ARM: dts: bcm2835-rpi-zero-w: Fix GPIO line name for Wifi/BT ARM: dts: bcm2837-rpi-cm3-io3: Fix GPIO line names for SMPS I2C ARM: dts: bcm2837-rpi-3-b-plus: Fix GPIO line name of power LED ARM: dts: bcm2835-rpi-b: Fix GPIO line names misc: ocxl: fix possible double free in ocxl_file_register_afu crypto: marvell/cesa - ECB does not IV gpiolib: of: Introduce hook for missing gpio-ranges pinctrl: bcm2835: implement hook for missing gpio-ranges arm: mediatek: select arch timer for mt7629 powerpc/fadump: fix PT_LOAD segment for boot memory area mfd: ipaq-micro: Fix error check return value of platform_get_irq() scsi: fcoe: Fix Wstringop-overflow warnings in fcoe_wwn_from_mac() firmware: arm_scmi: Fix list protocols enumeration in the base protocol nvdimm: Fix firmware activation deadlock scenarios nvdimm: Allow overwrite in the presence of disabled dimms pinctrl: mvebu: Fix irq_of_parse_and_map() return value drivers/base/node.c: fix compaction sysfs file leak dax: fix cache flush on PMD-mapped pages drivers/base/memory: fix an unlikely reference counting issue in __add_memory_block() powerpc/8xx: export 'cpm_setbrg' for modules pinctrl: renesas: core: Fix possible null-ptr-deref in sh_pfc_map_resources() powerpc/idle: Fix return value of __setup() handler powerpc/4xx/cpm: Fix return value of __setup() handler ASoC: atmel-pdmic: Remove endianness flag on pdmic component ASoC: atmel-classd: Remove endianness flag on class d component proc: fix dentry/inode overinstantiating under /proc/${pid}/net ipc/mqueue: use get_tree_nodev() in mqueue_get_tree() PCI: imx6: Fix PERST# start-up sequence tty: fix deadlock caused by calling printk() under tty_port->lock crypto: sun8i-ss - rework handling of IV crypto: sun8i-ss - handle zero sized sg crypto: cryptd - Protect per-CPU resource by disabling BH. Input: sparcspkr - fix refcount leak in bbc_beep_probe PCI/AER: Clear MULTI_ERR_COR/UNCOR_RCV bits hwrng: omap3-rom - fix using wrong clk_disable() in omap_rom_rng_runtime_resume() powerpc/64: Only WARN if __pa()/__va() called with bad addresses powerpc/perf: Fix the threshold compare group constraint for power9 macintosh: via-pmu and via-cuda need RTC_LIB powerpc/fsl_rio: Fix refcount leak in fsl_rio_setup mfd: davinci_voicecodec: Fix possible null-ptr-deref davinci_vc_probe() mailbox: forward the hrtimer if not queued and under a lock RDMA/hfi1: Prevent use of lock before it is initialized Input: stmfts - do not leave device disabled in stmfts_input_open OPP: call of_node_put() on error path in _bandwidth_supported() f2fs: fix dereference of stale list iterator after loop body iommu/mediatek: Add list_del in mtk_iommu_remove i2c: at91: use dma safe buffers cpufreq: mediatek: add missing platform_driver_unregister() on error in mtk_cpufreq_driver_init cpufreq: mediatek: Use module_init and add module_exit cpufreq: mediatek: Unregister platform device on exit MIPS: Loongson: Use hwmon_device_register_with_groups() to register hwmon i2c: at91: Initialize dma_buf in at91_twi_xfer() dmaengine: idxd: Fix the error handling path in idxd_cdev_register() NFS: Do not report EINTR/ERESTARTSYS as mapping errors NFS: fsync() should report filesystem errors over EINTR/ERESTARTSYS NFS: Do not report flush errors in nfs_write_end() NFS: Don't report errors from nfs_pageio_complete() more than once NFSv4/pNFS: Do not fail I/O when we fail to allocate the pNFS layout video: fbdev: clcdfb: Fix refcount leak in clcdfb_of_vram_setup dmaengine: stm32-mdma: remove GISR1 register dmaengine: stm32-mdma: rework interrupt handler dmaengine: stm32-mdma: fix chan initialization in stm32_mdma_irq_handler() iommu/amd: Increase timeout waiting for GA log enablement i2c: npcm: Fix timeout calculation i2c: npcm: Correct register access width i2c: npcm: Handle spurious interrupts i2c: rcar: fix PM ref counts in probe error paths perf c2c: Use stdio interface if slang is not supported perf jevents: Fix event syntax error caused by ExtSel f2fs: fix to avoid f2fs_bug_on() in dec_valid_node_count() f2fs: fix to do sanity check on block address in f2fs_do_zero_range() f2fs: fix to clear dirty inode in f2fs_evict_inode() f2fs: fix deadloop in foreground GC f2fs: don't need inode lock for system hidden quota f2fs: fix to do sanity check on total_data_blocks f2fs: fix fallocate to use file_modified to update permissions consistently f2fs: fix to do sanity check for inline inode wifi: mac80211: fix use-after-free in chanctx code iwlwifi: mvm: fix assert 1F04 upon reconfig fs-writeback: writeback_sb_inodes：Recalculate 'wrote' according skipped pages efi: Do not import certificates from UEFI Secure Boot for T2 Macs bfq: Split shared queues on move between cgroups bfq: Update cgroup information before merging bio bfq: Track whether bfq_group is still online ext4: fix use-after-free in ext4_rename_dir_prepare ext4: fix warning in ext4_handle_inode_extension ext4: fix bug_on in ext4_writepages ext4: filter out EXT4_FC_REPLAY from on-disk superblock field s_state ext4: fix bug_on in __es_tree_search ext4: verify dir block before splitting it ext4: avoid cycles in directory h-tree ACPI: property: Release subnode properties with data nodes tracing: Fix potential double free in create_var_ref() PCI/PM: Fix bridge_d3_blacklist[] Elo i2 overwrite of Gigabyte X299 PCI: qcom: Fix runtime PM imbalance on probe errors PCI: qcom: Fix unbalanced PHY init on probe errors mm, compaction: fast_find_migrateblock() should return pfn in the target zone s390/perf: obtain sie_block from the right address dlm: fix plock invalid read dlm: fix missing lkb refcount handling ocfs2: dlmfs: fix error handling of user_dlm_destroy_lock scsi: dc395x: Fix a missing check on list iterator scsi: ufs: qcom: Add a readl() to make sure ref_clk gets enabled drm/amdgpu/cs: make commands with 0 chunks illegal behaviour. drm/etnaviv: check for reaped mapping in etnaviv_iommu_unmap_gem drm/nouveau/clk: Fix an incorrect NULL check on list iterator drm/nouveau/kms/nv50-: atom: fix an incorrect NULL check on list iterator drm/bridge: analogix_dp: Grab runtime PM reference for DP-AUX drm/i915/dsi: fix VBT send packet port selection for ICL+ md: fix an incorrect NULL check in does_sb_need_changing md: fix an incorrect NULL check in md_reload_sb mtd: cfi_cmdset_0002: Move and rename chip_check/chip_ready/chip_good_for_write mtd: cfi_cmdset_0002: Use chip_ready() for write on S29GL064N media: coda: Fix reported H264 profile media: coda: Add more H264 levels for CODA960 ima: remove the IMA_TEMPLATE Kconfig option Kconfig: Add option for asm goto w/ tied outputs to workaround clang-13 bug RDMA/hfi1: Fix potential integer multiplication overflow errors csky: patch_text: Fixup last cpu should be master irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375, A38x, A39x irqchip: irq-xtensa-mx: fix initial IRQ affinity cfg80211: declare MODULE_FIRMWARE for regulatory.db mac80211: upgrade passive scan to active scan on DFS channels after beacon rx um: chan_user: Fix winch_tramp() return value um: Fix out-of-bounds read in LDT setup kexec_file: drop weak attribute from arch_kexec_apply_relocations[_add] ftrace: Clean up hash direct_functions on register failures iommu/msm: Fix an incorrect NULL check on list iterator nodemask.h: fix compilation error with GCC12 hugetlb: fix huge_pmd_unshare address update xtensa/simdisk: fix proc_read_simdisk() rtl818x: Prevent using not initialized queues ASoC: rt5514: Fix event generation for "DSP Voice Wake Up" control carl9170: tx: fix an incorrect use of list iterator stm: ltdc: fix two incorrect NULL checks on list iterator bcache: improve multithreaded bch_btree_check() bcache: improve multithreaded bch_sectors_dirty_init() bcache: remove incremental dirty sector counting for bch_sectors_dirty_init() bcache: avoid journal no-space deadlock by reserving 1 journal bucket serial: pch: don't overwrite xmit->buf[0] by x_char tilcdc: tilcdc_external: fix an incorrect NULL check on list iterator gma500: fix an incorrect NULL check on list iterator arm64: dts: qcom: ipq8074: fix the sleep clock frequency phy: qcom-qmp: fix struct clk leak on probe errors ARM: dts: s5pv210: Remove spi-cs-high on panel in Aries ARM: pxa: maybe fix gpio lookup tables SMB3: EBADF/EIO errors in rename/open caused by race condition in smb2_compound_op docs/conf.py: Cope with removal of language=None in Sphinx 5.0.0 dt-bindings: gpio: altera: correct interrupt-cells vdpasim: allow to enable a vq repeatedly blk-iolatency: Fix inflight count imbalances and IO hangs on offline coresight: core: Fix coresight device probe failure issue phy: qcom-qmp: fix reset-controller leak on probe errors net: ipa: fix page free in ipa_endpoint_trans_release() net: ipa: fix page free in ipa_endpoint_replenish_one() xfs: set inode size after creating symlink xfs: sync lazy sb accounting on quiesce of read-only mounts xfs: fix chown leaking delalloc quota blocks when fssetxattr fails xfs: fix incorrect root dquot corruption error when switching group/project quota types xfs: restore shutdown check in mapped write fault path xfs: force log and push AIL to clear pinned inodes when aborting mount xfs: consider shutdown in bmapbt cursor delete assert xfs: assert in xfs_btree_del_cursor should take into account error kseltest/cgroup: Make test_stress.sh work if run interactively thermal/core: fix a UAF bug in __thermal_cooling_device_register() thermal/core: Fix memory leak in the error path bfq: Avoid merging queues with different parents bfq: Drop pointless unlock-lock pair bfq: Remove pointless bfq_init_rq() calls bfq: Get rid of __bio_blkcg() usage bfq: Make sure bfqg for which we are queueing requests is online block: fix bio_clone_blkg_association() to associate with proper blkcg_gq Revert "random: use static branch for crng_ready()" RDMA/rxe: Generate a completion for unsupported/invalid opcode MIPS: IP27: Remove incorrect `cpu_has_fpu' override MIPS: IP30: Remove incorrect `cpu_has_fpu' override ext4: only allow test_dummy_encryption when supported md: bcache: check the return value of kzalloc() in detached_dev_do_request() Linux 5.10.121 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I52dd11dc43acfa0ebddd2b6e277c823b96b07327	2022-07-23 16:10:22 +02:00
Greg Kroah-Hartman	2de0a17df4	This is the 5.10.120 stable release ... -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmKdoegACgkQONu9yGCS aT6ytRAAjBTL+El1JeJ5W14PjtQEl45XhEqJ300SuF9Ob0ZBgooPbBa3rwPBw05T xpyT4/vLGmG87s2+KTUkAtfX8lhoWLbE+xx4zrOx49plbFVYYvqugzvzliXvZ8Zb 2h1aP0SG8hrIFHMsN+qOZnmY3k9m8Z7rNZu/Eyq8zQ/z0SCmQ0EExq3PiKskrfyb 4AcC5Y77UfUl9r7loyFVAPj5z5AOyE+d/5biFdLsJgHa+qHmoYTMKYy53BF8aD3v jIOZ4JzYZ+ybtkGSrPtXmay02c15TqWXgzlYRjpYQm75C69yFugxFt5usBsVAZmK JraaBEr13EdZhBvove2cV0ZK8afJfwoo2NuTBuxw52ZmEDvifkb7ESwPa/1kbAqI 267e+yTtqRoge2STMXqU4J3GNbMNf9vmOq4x6NaaPF+Q2K05Z9xO64yh0uxhYx7i n/EoT2ESOrWguhICf+Gets58dmY6jbWNzlCKFJnbXiuYvx1AxcS1nzP0OrzeWsq8 qii9QS8VouzLnKGXanRZKmjznxSWMyQ3UjA/u4pqL4ISsDy25ICxeSemLvtHIdSU Ksd+RQgL39e+V9ZXUZ+KQ6zm6a4gKXHsqxuq1UO4xzxYNnR7sgvDS4ACquLRae+N ISNrz0LP0bDDXHFK4ElU0LBs5jwdYRm67TSVSAOVjCl5B5tB8zk= =o88P -----END PGP SIGNATURE----- Merge 5.10.120 into android12-5.10-lts Changes in 5.10.120 pinctrl: sunxi: fix f1c100s uart2 function percpu_ref_init(): clean ->percpu_count_ref on failure net: af_key: check encryption module availability consistency nfc: pn533: Fix buggy cleanup order net: ftgmac100: Disable hardware checksum on AST2600 i2c: ismt: Provide a DMA buffer for Interrupt Cause Logging drivers: i2c: thunderx: Allow driver to work with ACPI defined TWSI controllers netfilter: nf_tables: disallow non-stateful expression in sets earlier pipe: make poll_usage boolean and annotate its access pipe: Fix missing lock in pipe_resize_ring() cfg80211: set custom regdomain after wiphy registration assoc_array: Fix BUG_ON during garbage collect io_uring: don't re-import iovecs from callbacks io_uring: fix using under-expanded iters net: ipa: compute proper aggregation limit xfs: detect overflows in bmbt records xfs: show the proper user quota options xfs: fix the forward progress assertion in xfs_iwalk_run_callbacks xfs: fix an ABBA deadlock in xfs_rename xfs: Fix CIL throttle hang when CIL space used going backwards drm/i915: Fix -Wstringop-overflow warning in call to intel_read_wm_latency() exfat: check if cluster num is valid lib/crypto: add prompts back to crypto libraries crypto: drbg - prepare for more fine-grained tracking of seeding state crypto: drbg - track whether DRBG was seeded with !rng_is_initialized() crypto: drbg - move dynamic ->reseed_threshold adjustments to __drbg_seed() crypto: drbg - make reseeding from get_random_bytes() synchronous netfilter: nf_tables: sanitize nft_set_desc_concat_parse() netfilter: conntrack: re-fetch conntrack after insertion KVM: PPC: Book3S HV: fix incorrect NULL check on list iterator x86/kvm: Alloc dummy async #PF token outside of raw spinlock x86, kvm: use correct GFP flags for preemption disabled KVM: x86: avoid calling x86 emulator without a decoded instruction crypto: caam - fix i.MX6SX entropy delay value crypto: ecrdsa - Fix incorrect use of vli_cmp zsmalloc: fix races between asynchronous zspage free and page migration Bluetooth: hci_qca: Use del_timer_sync() before freeing ARM: dts: s5pv210: Correct interrupt name for bluetooth in Aries dm integrity: fix error code in dm_integrity_ctr() dm crypt: make printing of the key constant-time dm stats: add cond_resched when looping over entries dm verity: set DM_TARGET_IMMUTABLE feature flag raid5: introduce MD_BROKEN HID: multitouch: Add support for Google Whiskers Touchpad HID: multitouch: add quirks to enable Lenovo X12 trackpoint tpm: Fix buffer access in tpm2_get_tpm_pt() tpm: ibmvtpm: Correct the return value in tpm_ibmvtpm_probe() docs: submitting-patches: Fix crossref to 'The canonical patch format' NFS: Memory allocation failures are not server fatal errors NFSD: Fix possible sleep during nfsd4_release_lockowner() bpf: Fix potential array overflow in bpf_trampoline_get_progs() bpf: Enlarge offset check value to INT_MAX in bpf_skb_{load,store}_bytes Linux 5.10.120 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I48c0d649a50bd16ad719b2cb9f0ffccd0a74519a	2022-07-23 16:09:48 +02:00
Justin M. Forbes	05982f0cbb	UPSTREAM: lib/crypto: add prompts back to crypto libraries ... commit e56e18985596617ae426ed5997fb2e737cffb58b upstream. Commit 6048fdcc5f269 ("lib/crypto: blake2s: include as built-in") took away a number of prompt texts from other crypto libraries. This makes values flip from built-in to module when oldconfig runs, and causes problems when these crypto libs need to be built in for thingslike BIG_KEYS. Fixes: 6048fdcc5f269 ("lib/crypto: blake2s: include as built-in") Cc: Herbert Xu <herbert@gondor.apana.org.au> Cc: linux-crypto@vger.kernel.org Signed-off-by: Justin M. Forbes <jforbes@fedoraproject.org> [Jason: - moved menu into submenu of lib/ instead of root menu - fixed chacha sub-dependencies for CONFIG_CRYPTO] Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> (cherry picked from commit 630192aa45) Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I9f92399d94f5b00408203ce4a9237925e7435ec1	2022-07-14 14:32:55 +02:00
Greg Kroah-Hartman	f2eb31a498	Merge 5.10.119 into android12-5.10-lts ... Changes in 5.10.119 lockdown: also lock down previous kgdb use staging: rtl8723bs: prevent ->Ssid overflow in rtw_wx_set_scan() KVM: x86: Properly handle APF vs disabled LAPIC situation KVM: x86/mmu: fix NULL pointer dereference on guest INVPCID tcp: change source port randomizarion at connect() time secure_seq: use the 64 bits of the siphash for port offset calculation media: vim2m: Register video device after setting up internals media: vim2m: initialize the media device earlier ACPI: sysfs: Make sparse happy about address space in use ACPI: sysfs: Fix BERT error region memory mapping random: avoid arch_get_random_seed_long() when collecting IRQ randomness random: remove dead code left over from blocking pool MAINTAINERS: co-maintain random.c MAINTAINERS: add git tree for random.c crypto: lib/blake2s - Move selftest prototype into header file crypto: blake2s - define shash_alg structs using macros crypto: x86/blake2s - define shash_alg structs using macros crypto: blake2s - remove unneeded includes crypto: blake2s - move update and final logic to internal/blake2s.h crypto: blake2s - share the "shash" API boilerplate code crypto: blake2s - optimize blake2s initialization crypto: blake2s - add comment for blake2s_state fields crypto: blake2s - adjust include guard naming crypto: blake2s - include <linux/bug.h> instead of <asm/bug.h> lib/crypto: blake2s: include as built-in lib/crypto: blake2s: move hmac construction into wireguard lib/crypto: sha1: re-roll loops to reduce code size lib/crypto: blake2s: avoid indirect calls to compression function for Clang CFI random: document add_hwgenerator_randomness() with other input functions random: remove unused irq_flags argument from add_interrupt_randomness() random: use BLAKE2s instead of SHA1 in extraction random: do not sign extend bytes for rotation when mixing random: do not re-init if crng_reseed completes before primary init random: mix bootloader randomness into pool random: harmonize "crng init done" messages random: use IS_ENABLED(CONFIG_NUMA) instead of ifdefs random: early initialization of ChaCha constants random: avoid superfluous call to RDRAND in CRNG extraction random: don't reset crng_init_cnt on urandom_read() random: fix typo in comments random: cleanup poolinfo abstraction random: cleanup integer types random: remove incomplete last_data logic random: remove unused extract_entropy() reserved argument random: rather than entropy_store abstraction, use global random: remove unused OUTPUT_POOL constants random: de-duplicate INPUT_POOL constants random: prepend remaining pool constants with POOL_ random: cleanup fractional entropy shift constants random: access input_pool_data directly rather than through pointer random: selectively clang-format where it makes sense random: simplify arithmetic function flow in account() random: continually use hwgenerator randomness random: access primary_pool directly rather than through pointer random: only call crng_finalize_init() for primary_crng random: use computational hash for entropy extraction random: simplify entropy debiting random: use linear min-entropy accumulation crediting random: always wake up entropy writers after extraction random: make credit_entropy_bits() always safe random: remove use_input_pool parameter from crng_reseed() random: remove batched entropy locking random: fix locking in crng_fast_load() random: use RDSEED instead of RDRAND in entropy extraction random: get rid of secondary crngs random: inline leaves of rand_initialize() random: ensure early RDSEED goes through mixer on init random: do not xor RDRAND when writing into /dev/random random: absorb fast pool into input pool after fast load random: use simpler fast key erasure flow on per-cpu keys random: use hash function for crng_slow_load() random: make more consistent use of integer types random: remove outdated INT_MAX >> 6 check in urandom_read() random: zero buffer after reading entropy from userspace random: fix locking for crng_init in crng_reseed() random: tie batched entropy generation to base_crng generation random: remove ifdef'd out interrupt bench random: remove unused tracepoints random: add proper SPDX header random: deobfuscate irq u32/u64 contributions random: introduce drain_entropy() helper to declutter crng_reseed() random: remove useless header comment random: remove whitespace and reorder includes random: group initialization wait functions random: group crng functions random: group entropy extraction functions random: group entropy collection functions random: group userspace read/write functions random: group sysctl functions random: rewrite header introductory comment random: defer fast pool mixing to worker random: do not take pool spinlock at boot random: unify early init crng load accounting random: check for crng_init == 0 in add_device_randomness() random: pull add_hwgenerator_randomness() declaration into random.h random: clear fast pool, crng, and batches in cpuhp bring up random: round-robin registers as ulong, not u32 random: only wake up writers after zap if threshold was passed random: cleanup UUID handling random: unify cycles_t and jiffies usage and types random: do crng pre-init loading in worker rather than irq random: give sysctl_random_min_urandom_seed a more sensible value random: don't let 644 read-only sysctls be written to random: replace custom notifier chain with standard one random: use SipHash as interrupt entropy accumulator random: make consistent usage of crng_ready() random: reseed more often immediately after booting random: check for signal and try earlier when generating entropy random: skip fast_init if hwrng provides large chunk of entropy random: treat bootloader trust toggle the same way as cpu trust toggle random: re-add removed comment about get_random_{u32,u64} reseeding random: mix build-time latent entropy into pool at init random: do not split fast init input in add_hwgenerator_randomness() random: do not allow user to keep crng key around on stack random: check for signal_pending() outside of need_resched() check random: check for signals every PAGE_SIZE chunk of /dev/[u]random random: allow partial reads if later user copies fail random: make random_get_entropy() return an unsigned long random: document crng_fast_key_erasure() destination possibility random: fix sysctl documentation nits init: call time_init() before rand_initialize() ia64: define get_cycles macro for arch-override s390: define get_cycles macro for arch-override parisc: define get_cycles macro for arch-override alpha: define get_cycles macro for arch-override powerpc: define get_cycles macro for arch-override timekeeping: Add raw clock fallback for random_get_entropy() m68k: use fallback for random_get_entropy() instead of zero riscv: use fallback for random_get_entropy() instead of zero mips: use fallback for random_get_entropy() instead of just c0 random arm: use fallback for random_get_entropy() instead of zero nios2: use fallback for random_get_entropy() instead of zero x86/tsc: Use fallback for random_get_entropy() instead of zero um: use fallback for random_get_entropy() instead of zero sparc: use fallback for random_get_entropy() instead of zero xtensa: use fallback for random_get_entropy() instead of zero random: insist on random_get_entropy() existing in order to simplify random: do not use batches when !crng_ready() random: use first 128 bits of input as fast init random: do not pretend to handle premature next security model random: order timer entropy functions below interrupt functions random: do not use input pool from hard IRQs random: help compiler out with fast_mix() by using simpler arguments siphash: use one source of truth for siphash permutations random: use symbolic constants for crng_init states random: avoid initializing twice in credit race random: move initialization out of reseeding hot path random: remove ratelimiting for in-kernel unseeded randomness random: use proper jiffies comparison macro random: handle latent entropy and command line from random_init() random: credit architectural init the exact amount random: use static branch for crng_ready() random: remove extern from functions in header random: use proper return types on get_random_{int,long}_wait() random: make consistent use of buf and len random: move initialization functions out of hot pages random: move randomize_page() into mm where it belongs random: unify batched entropy implementations random: convert to using fops->read_iter() random: convert to using fops->write_iter() random: wire up fops->splice_{read,write}_iter() random: check for signals after page of pool writes ALSA: ctxfi: Add SB046x PCI ID Linux 5.10.119 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I65f898474b7704881a3dd528012e7e91b09b3767	2022-07-14 14:31:17 +02:00
Jason A. Donenfeld	d721986e96	crypto: memneq - move into lib/ ... commit abfed87e2a12bd246047d78c01d81eb9529f1d06 upstream. This is used by code that doesn't need CONFIG_CRYPTO, so move this into lib/ with a Kconfig option so that it can be selected by whatever needs it. This fixes a linker error Zheng pointed out when CRYPTO_MANAGER_DISABLE_TESTS!=y and CRYPTO=m: lib/crypto/curve25519-selftest.o: In function `curve25519_selftest': curve25519-selftest.c:(.init.text+0x60): undefined reference to `__crypto_memneq' curve25519-selftest.c:(.init.text+0xec): undefined reference to `__crypto_memneq' curve25519-selftest.c:(.init.text+0x114): undefined reference to `__crypto_memneq' curve25519-selftest.c:(.init.text+0x154): undefined reference to `__crypto_memneq' Reported-by: Zheng Bin <zhengbin13@huawei.com> Cc: Eric Biggers <ebiggers@kernel.org> Cc: stable@vger.kernel.org Fixes: aa127963f1 ("crypto: lib/curve25519 - re-add selftests") Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com> Reviewed-by: Eric Biggers <ebiggers@google.com> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-06-22 14:13:18 +02:00
Sebastian Andrzej Siewior	76badb0a4d	crypto: cryptd - Protect per-CPU resource by disabling BH. ... [ Upstream commit 91e8bcd7b4da182e09ea19a2c73167345fe14c98 ] The access to cryptd_queue::cpu_queue is synchronized by disabling preemption in cryptd_enqueue_request() and disabling BH in cryptd_queue_worker(). This implies that access is allowed from BH. If cryptd_enqueue_request() is invoked from preemptible context _and_ soft interrupt then this can lead to list corruption since cryptd_enqueue_request() is not protected against access from soft interrupt. Replace get_cpu() in cryptd_enqueue_request() with local_bh_disable() to ensure BH is always disabled. Remove preempt_disable() from cryptd_queue_worker() since it is not needed because local_bh_disable() ensures synchronisation. Fixes: 254eff7714 ("crypto: cryptd - Per-CPU thread implementation...") Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-06-09 10:21:17 +02:00
Vitaly Chikunov	6a1cc25494	crypto: ecrdsa - Fix incorrect use of vli_cmp ... commit 7cc7ab73f83ee6d50dc9536bc3355495d8600fad upstream. Correctly compare values that shall be greater-or-equal and not just greater. Fixes: 0d7a78643f ("crypto: ecrdsa - add EC-RDSA (GOST 34.10) algorithm") Cc: <stable@vger.kernel.org> Signed-off-by: Vitaly Chikunov <vt@altlinux.org> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-06-06 08:42:43 +02:00
Nicolai Stange	44f1ce5530	crypto: drbg - make reseeding from get_random_bytes() synchronous ... commit 074bcd4000e0d812bc253f86fedc40f81ed59ccc upstream. get_random_bytes() usually hasn't full entropy available by the time DRBG instances are first getting seeded from it during boot. Thus, the DRBG implementation registers random_ready_callbacks which would in turn schedule some work for reseeding the DRBGs once get_random_bytes() has sufficient entropy available. For reference, the relevant history around handling DRBG (re)seeding in the context of a not yet fully seeded get_random_bytes() is: commit 16b369a91d ("random: Blocking API for accessing nonblocking_pool") commit 4c7879907e ("crypto: drbg - add async seeding operation") commit 205a525c33 ("random: Add callback API for random pool readiness") commit 57225e6797 ("crypto: drbg - Use callback API for random readiness") commit c2719503f5 ("random: Remove kernel blocking API") However, some time later, the initialization state of get_random_bytes() has been made queryable via rng_is_initialized() introduced with commit 9a47249d44 ("random: Make crng state queryable"). This primitive now allows for streamlining the DRBG reseeding from get_random_bytes() by replacing that aforementioned asynchronous work scheduling from random_ready_callbacks with some simpler, synchronous code in drbg_generate() next to the related logic already present therein. Apart from improving overall code readability, this change will also enable DRBG users to rely on wait_for_random_bytes() for ensuring that the initial seeding has completed, if desired. The previous patches already laid the grounds by making drbg_seed() to record at each DRBG instance whether it was being seeded at a time when rng_is_initialized() still had been false as indicated by ->seeded == DRBG_SEED_STATE_PARTIAL. All that remains to be done now is to make drbg_generate() check for this condition, determine whether rng_is_initialized() has flipped to true in the meanwhile and invoke a reseed from get_random_bytes() if so. Make this move: - rename the former drbg_async_seed() work handler, i.e. the one in charge of reseeding a DRBG instance from get_random_bytes(), to "drbg_seed_from_random()", - change its signature as appropriate, i.e. make it take a struct drbg_state rather than a work_struct and change its return type from "void" to "int" in order to allow for passing error information from e.g. its __drbg_seed() invocation onwards to callers, - make drbg_generate() invoke this drbg_seed_from_random() once it encounters a DRBG instance with ->seeded == DRBG_SEED_STATE_PARTIAL by the time rng_is_initialized() has flipped to true and - prune everything related to the former, random_ready_callback based mechanism. As drbg_seed_from_random() is now getting invoked from drbg_generate() with the ->drbg_mutex being held, it must not attempt to recursively grab it once again. Remove the corresponding mutex operations from what is now drbg_seed_from_random(). Furthermore, as drbg_seed_from_random() can now report errors directly to its caller, there's no need for it to temporarily switch the DRBG's ->seeded state to DRBG_SEED_STATE_UNSEEDED so that a failure of the subsequently invoked __drbg_seed() will get signaled to drbg_generate(). Don't do it then. Signed-off-by: Nicolai Stange <nstange@suse.de> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> [Jason: for stable, undid the modifications for the backport of 5acd3548.] Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-06-06 08:42:42 +02:00
Nicolai Stange	e744e34a3c	crypto: drbg - move dynamic ->reseed_threshold adjustments to __drbg_seed() ... commit 262d83a4290c331cd4f617a457408bdb82fbb738 upstream. Since commit 42ea507fae ("crypto: drbg - reseed often if seedsource is degraded"), the maximum seed lifetime represented by ->reseed_threshold gets temporarily lowered if the get_random_bytes() source cannot provide sufficient entropy yet, as is common during boot, and restored back to the original value again once that has changed. More specifically, if the add_random_ready_callback() invoked from drbg_prepare_hrng() in the course of DRBG instantiation does not return -EALREADY, that is, if get_random_bytes() has not been fully initialized at this point yet, drbg_prepare_hrng() will lower ->reseed_threshold to a value of 50. The drbg_async_seed() scheduled from said random_ready_callback will eventually restore the original value. A future patch will replace the random_ready_callback based notification mechanism and thus, there will be no add_random_ready_callback() return value anymore which could get compared to -EALREADY. However, there's __drbg_seed() which gets invoked in the course of both, the DRBG instantiation as well as the eventual reseeding from get_random_bytes() in aforementioned drbg_async_seed(), if any. Moreover, it knows about the get_random_bytes() initialization state by the time the seed data had been obtained from it: the new_seed_state argument introduced with the previous patch would get set to DRBG_SEED_STATE_PARTIAL in case get_random_bytes() had not been fully initialized yet and to DRBG_SEED_STATE_FULL otherwise. Thus, __drbg_seed() provides a convenient alternative for managing that ->reseed_threshold lowering and restoring at a central place. Move all ->reseed_threshold adjustment code from drbg_prepare_hrng() and drbg_async_seed() respectively to __drbg_seed(). Make __drbg_seed() lower the ->reseed_threshold to 50 in case its new_seed_state argument equals DRBG_SEED_STATE_PARTIAL and let it restore the original value otherwise. There is no change in behaviour. Signed-off-by: Nicolai Stange <nstange@suse.de> Reviewed-by: Stephan Müller <smueller@chronox.de> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-06-06 08:42:42 +02:00
Nicolai Stange	54700e82a7	crypto: drbg - track whether DRBG was seeded with !rng_is_initialized() ... commit 2bcd25443868aa8863779a6ebc6c9319633025d2 upstream. Currently, the DRBG implementation schedules asynchronous works from random_ready_callbacks for reseeding the DRBG instances with output from get_random_bytes() once the latter has sufficient entropy available. However, as the get_random_bytes() initialization state can get queried by means of rng_is_initialized() now, there is no real need for this asynchronous reseeding logic anymore and it's better to keep things simple by doing it synchronously when needed instead, i.e. from drbg_generate() once rng_is_initialized() has flipped to true. Of course, for this to work, drbg_generate() would need some means by which it can tell whether or not rng_is_initialized() has flipped to true since the last seeding from get_random_bytes(). Or equivalently, whether or not the last seed from get_random_bytes() has happened when rng_is_initialized() was still evaluating to false. As it currently stands, enum drbg_seed_state allows for the representation of two different DRBG seeding states: DRBG_SEED_STATE_UNSEEDED and DRBG_SEED_STATE_FULL. The former makes drbg_generate() to invoke a full reseeding operation involving both, the rather expensive jitterentropy as well as the get_random_bytes() randomness sources. The DRBG_SEED_STATE_FULL state on the other hand implies that no reseeding at all is required for a !->pr DRBG variant. Introduce the new DRBG_SEED_STATE_PARTIAL state to enum drbg_seed_state for representing the condition that a DRBG was being seeded when rng_is_initialized() had still been false. In particular, this new state implies that - the given DRBG instance has been fully seeded from the jitterentropy source (if enabled) - and drbg_generate() is supposed to reseed from get_random_bytes() *only* once rng_is_initialized() turns to true. Up to now, the __drbg_seed() helper used to set the given DRBG instance's ->seeded state to constant DRBG_SEED_STATE_FULL. Introduce a new argument allowing for the specification of the to be written ->seeded value instead. Make the first of its two callers, drbg_seed(), determine the appropriate value based on rng_is_initialized(). The remaining caller, drbg_async_seed(), is known to get invoked only once rng_is_initialized() is true, hence let it pass constant DRBG_SEED_STATE_FULL for the new argument to __drbg_seed(). There is no change in behaviour, except for that the pr_devel() in drbg_generate() would now report "unseeded" for ->pr DRBG instances which had last been seeded when rng_is_initialized() was still evaluating to false. Signed-off-by: Nicolai Stange <nstange@suse.de> Reviewed-by: Stephan Müller <smueller@chronox.de> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-06-06 08:42:42 +02:00
Nicolai Stange	b2bef5500e	crypto: drbg - prepare for more fine-grained tracking of seeding state ... commit ce8ce31b2c5c8b18667784b8c515650c65d57b4e upstream. There are two different randomness sources the DRBGs are getting seeded from, namely the jitterentropy source (if enabled) and get_random_bytes(). At initial DRBG seeding time during boot, the latter might not have collected sufficient entropy for seeding itself yet and thus, the DRBG implementation schedules a reseed work from a random_ready_callback once that has happened. This is particularly important for the !->pr DRBG instances, for which (almost) no further reseeds are getting triggered during their lifetime. Because collecting data from the jitterentropy source is a rather expensive operation, the aforementioned asynchronously scheduled reseed work restricts itself to get_random_bytes() only. That is, it in some sense amends the initial DRBG seed derived from jitterentropy output at full (estimated) entropy with fresh randomness obtained from get_random_bytes() once that has been seeded with sufficient entropy itself. With the advent of rng_is_initialized(), there is no real need for doing the reseed operation from an asynchronously scheduled work anymore and a subsequent patch will make it synchronous by moving it next to related logic already present in drbg_generate(). However, for tracking whether a full reseed including the jitterentropy source is required or a "partial" reseed involving only get_random_bytes() would be sufficient already, the boolean struct drbg_state's ->seeded member must become a tristate value. Prepare for this by introducing the new enum drbg_seed_state and change struct drbg_state's ->seeded member's type from bool to that type. For facilitating review, enum drbg_seed_state is made to only contain two members corresponding to the former ->seeded values of false and true resp. at this point: DRBG_SEED_STATE_UNSEEDED and DRBG_SEED_STATE_FULL. A third one for tracking the intermediate state of "seeded from jitterentropy only" will be introduced with a subsequent patch. There is no change in behaviour at this point. Signed-off-by: Nicolai Stange <nstange@suse.de> Reviewed-by: Stephan Müller <smueller@chronox.de> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-06-06 08:42:42 +02:00
Justin M. Forbes	630192aa45	lib/crypto: add prompts back to crypto libraries ... commit e56e18985596617ae426ed5997fb2e737cffb58b upstream. Commit 6048fdcc5f269 ("lib/crypto: blake2s: include as built-in") took away a number of prompt texts from other crypto libraries. This makes values flip from built-in to module when oldconfig runs, and causes problems when these crypto libs need to be built in for thingslike BIG_KEYS. Fixes: 6048fdcc5f269 ("lib/crypto: blake2s: include as built-in") Cc: Herbert Xu <herbert@gondor.apana.org.au> Cc: linux-crypto@vger.kernel.org Signed-off-by: Justin M. Forbes <jforbes@fedoraproject.org> [Jason: - moved menu into submenu of lib/ instead of root menu - fixed chacha sub-dependencies for CONFIG_CRYPTO] Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-06-06 08:42:42 +02:00
Jason A. Donenfeld	849e7b744c	random: replace custom notifier chain with standard one ... commit 5acd35487dc911541672b3ffc322851769c32a56 upstream. We previously rolled our own randomness readiness notifier, which only has two users in the whole kernel. Replace this with a more standard atomic notifier block that serves the same purpose with less code. Also unexport the symbols, because no modules use it, only unconditional builtins. The only drawback is that it's possible for a notification handler returning the "stop" code to prevent further processing, but given that there are only two users, and that we're unexporting this anyway, that doesn't seem like a significant drawback for the simplification we receive here. Cc: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Cc: Theodore Ts'o <tytso@mit.edu> Reviewed-by: Dominik Brodowski <linux@dominikbrodowski.net> [Jason: for stable, also backported to crypto/drbg.c, not unexporting.] Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-05-30 09:33:38 +02:00
Jason A. Donenfeld	ae33c501e0	lib/crypto: blake2s: avoid indirect calls to compression function for Clang CFI ... commit d2a02e3c8bb6b347818518edff5a4b40ff52d6d8 upstream. blake2s_compress_generic is weakly aliased by blake2s_compress. The current harness for function selection uses a function pointer, which is ordinarily inlined and resolved at compile time. But when Clang's CFI is enabled, CFI still triggers when making an indirect call via a weak symbol. This seems like a bug in Clang's CFI, as though it's bucketing weak symbols and strong symbols differently. It also only seems to trigger when "full LTO" mode is used, rather than "thin LTO". [ 0.000000][ T0] Kernel panic - not syncing: CFI failure (target: blake2s_compress_generic+0x0/0x1444) [ 0.000000][ T0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.16.0-mainline-06981-g076c855b846e #1 [ 0.000000][ T0] Hardware name: MT6873 (DT) [ 0.000000][ T0] Call trace: [ 0.000000][ T0] dump_backtrace+0xfc/0x1dc [ 0.000000][ T0] dump_stack_lvl+0xa8/0x11c [ 0.000000][ T0] panic+0x194/0x464 [ 0.000000][ T0] __cfi_check_fail+0x54/0x58 [ 0.000000][ T0] __cfi_slowpath_diag+0x354/0x4b0 [ 0.000000][ T0] blake2s_update+0x14c/0x178 [ 0.000000][ T0] _extract_entropy+0xf4/0x29c [ 0.000000][ T0] crng_initialize_primary+0x24/0x94 [ 0.000000][ T0] rand_initialize+0x2c/0x6c [ 0.000000][ T0] start_kernel+0x2f8/0x65c [ 0.000000][ T0] __primary_switched+0xc4/0x7be4 [ 0.000000][ T0] Rebooting in 5 seconds.. Nonetheless, the function pointer method isn't so terrific anyway, so this patch replaces it with a simple boolean, which also gets inlined away. This successfully works around the Clang bug. In general, I'm not too keen on all of the indirection involved here; it clearly does more harm than good. Hopefully the whole thing can get cleaned up down the road when lib/crypto is overhauled more comprehensively. But for now, we go with a simple bandaid. Fixes: 6048fdcc5f26 ("lib/crypto: blake2s: include as built-in") Link: https://github.com/ClangBuiltLinux/linux/issues/1567 Reported-by: Miles Chen <miles.chen@mediatek.com> Tested-by: Miles Chen <miles.chen@mediatek.com> Tested-by: Nathan Chancellor <nathan@kernel.org> Tested-by: John Stultz <john.stultz@linaro.org> Acked-by: Nick Desaulniers <ndesaulniers@google.com> Reviewed-by: Eric Biggers <ebiggers@google.com> Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-05-30 09:33:26 +02:00
Jason A. Donenfeld	62531d446a	lib/crypto: blake2s: include as built-in ... commit 6048fdcc5f269c7f31d774c295ce59081b36e6f9 upstream. In preparation for using blake2s in the RNG, we change the way that it is wired-in to the build system. Instead of using ifdefs to select the right symbol, we use weak symbols. And because ARM doesn't need the generic implementation, we make the generic one default only if an arch library doesn't need it already, and then have arch libraries that do need it opt-in. So that the arch libraries can remain tristate rather than bool, we then split the shash part from the glue code. Acked-by: Herbert Xu <herbert@gondor.apana.org.au> Acked-by: Ard Biesheuvel <ardb@kernel.org> Acked-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Cc: Masahiro Yamada <masahiroy@kernel.org> Cc: linux-kbuild@vger.kernel.org Cc: linux-crypto@vger.kernel.org Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-05-30 09:33:26 +02:00
Eric Biggers	6c362b7c77	crypto: blake2s - share the "shash" API boilerplate code ... commit 8c4a93a1270ddffc7660ae43fa8030ecfe9c06d9 upstream. Add helper functions for shash implementations of BLAKE2s to include/crypto/internal/blake2s.h, taking advantage of __blake2s_update() and __blake2s_final() that were added by the previous patch to share more code between the library and shash implementations. crypto_blake2s_setkey() and crypto_blake2s_init() are usable as shash_alg::setkey and shash_alg::init directly, while crypto_blake2s_update() and crypto_blake2s_final() take an extra 'blake2s_compress_t' function pointer parameter. This allows the implementation of the compression function to be overridden, which is the only part that optimized implementations really care about. The new functions are inline functions (similar to those in sha1_base.h, sha256_base.h, and sm3_base.h) because this avoids needing to add a new module blake2s_helpers.ko, they aren't *too* long, and this avoids indirect calls which are expensive these days. Note that they can't go in blake2s_generic.ko, as that would require selecting CRYPTO_BLAKE2S from CRYPTO_BLAKE2S_X86, which would cause a recursive dependency. Finally, use these new helper functions in the x86 implementation of BLAKE2s. (This part should be a separate patch, but unfortunately the x86 implementation used the exact same function names like "crypto_blake2s_update()", so it had to be updated at the same time.) Signed-off-by: Eric Biggers <ebiggers@google.com> Acked-by: Ard Biesheuvel <ardb@kernel.org> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-05-30 09:33:25 +02:00
Eric Biggers	e467a55bd0	crypto: blake2s - remove unneeded includes ... commit df412e7efda1e2c5b5fcb06701bba77434cbd1e8 upstream. It doesn't make sense for the generic implementation of BLAKE2s to include <crypto/internal/simd.h> and <linux/jump_label.h>, as these are things that would only be useful in an architecture-specific implementation. Remove these unnecessary includes. Acked-by: Ard Biesheuvel <ardb@kernel.org> Signed-off-by: Eric Biggers <ebiggers@google.com> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-05-30 09:33:25 +02:00
Eric Biggers	89f9ee998e	crypto: blake2s - define shash_alg structs using macros ... commit 0d396058f92ae7e5ac62839fed54bc2bba630ab5 upstream. The shash_alg structs for the four variants of BLAKE2s are identical except for the algorithm name, driver name, and digest size. So, avoid code duplication by using a macro to define these structs. Acked-by: Ard Biesheuvel <ardb@kernel.org> Signed-off-by: Eric Biggers <ebiggers@google.com> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-05-30 09:33:24 +02:00
Greg Kroah-Hartman	95f4203fc9	This is the 5.10.110 stable release ... -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmJQLWwACgkQONu9yGCS aT4R2BAAr/cGnf2/BQ6+zNPW+LlfGn75803yd+oWNL8WzjNiQGrTsQavE1jL0LXP 45iPxvY6eOlP9oEoJGYyNYhzQfUM92Unysa/KemB/xUBsb2If0ZdWk1WB9Lnw0xq m65kACXovbcg4LsZGpgCv7ln1ykogo+bNMES9P6CLxwKR/DMKUeJxbRNKE/AkD5l DxF7IJEP+YRbKAtoLM2Xj4KdjVSfRIfs+Pf0A1t43GqAw6tt3beqmzeCwDzuzz5a DHpXS6PeJjTZOjz4LkuBSbyK5cKGFv1C6o7JVjWSZhDyI5E4OLdNDpNKqcjsXAN+ wMqS1eh4gYUBXmPE44BGwkkugPyaR0/KHUebfkFZG2/H/8DfvrGqlbvsGSFNXxsV jH2/AV/rOxAFeM/U0c1I4Ve42MU18kdf1MRBo0Dq5xSoN9HFQhNp+HE5jpppgsvi FYpMqZoQzH31GIjOq7g0zLdj4NTBrkO9dh7kbpH0Xay1yBmigvD2PA4qpsL1+VMI v73Iq/RJVGUJFAeiYFjn9IGs9EsiKNG08v9uoKS+1m1VLrpVdgwtzo+RjJ/E51Mt Nk4WK94MyoivkRFKulDasv9yBWdcZCfljc91271UCKCERlyO/bmsTqhffeATGGRh N/7oxa71BHvxp0VYqvKD6xFUs+jFt9DQmIX7Pl1/yLpaz+sN0no= =31mv -----END PGP SIGNATURE----- Merge 5.10.110 into android12-5.10-lts Changes in 5.10.110 swiotlb: fix info leak with DMA_FROM_DEVICE USB: serial: pl2303: add IBM device IDs USB: serial: simple: add Nokia phone driver hv: utils: add PTP_1588_CLOCK to Kconfig to fix build netdevice: add the case if dev is NULL HID: logitech-dj: add new lightspeed receiver id xfrm: fix tunnel model fragmentation behavior ARM: mstar: Select HAVE_ARM_ARCH_TIMER virtio_console: break out of buf poll on remove vdpa/mlx5: should verify CTRL_VQ feature exists for MQ tools/virtio: fix virtio_test execution ethernet: sun: Free the coherent when failing in probing gpio: Revert regression in sysfs-gpio (gpiolib.c) spi: Fix invalid sgs value net:mcf8390: Use platform_get_irq() to get the interrupt Revert "gpio: Revert regression in sysfs-gpio (gpiolib.c)" spi: Fix erroneous sgs value with min_t() Input: zinitix - do not report shadow fingers af_key: add __GFP_ZERO flag for compose_sadb_supported in function pfkey_register net: dsa: microchip: add spi_device_id tables locking/lockdep: Avoid potential access of invalid memory in lock_class iommu/iova: Improve 32-bit free space estimate tpm: fix reference counting for struct tpm_chip virtio-blk: Use blk_validate_block_size() to validate block size USB: usb-storage: Fix use of bitfields for hardware data in ene_ub6250.c xhci: fix garbage USBSTS being logged in some cases xhci: fix runtime PM imbalance in USB2 resume xhci: make xhci_handshake timeout for xhci_reset() adjustable xhci: fix uninitialized string returned by xhci_decode_ctrl_ctx() mei: me: add Alder Lake N device id. mei: avoid iterator usage outside of list_for_each_entry coresight: Fix TRCCONFIGR.QE sysfs interface iio: afe: rescale: use s64 for temporary scale calculations iio: inkern: apply consumer scale on IIO_VAL_INT cases iio: inkern: apply consumer scale when no channel scale is available iio: inkern: make a best effort on offset calculation greybus: svc: fix an error handling bug in gb_svc_hello() clk: uniphier: Fix fixed-rate initialization ptrace: Check PTRACE_O_SUSPEND_SECCOMP permission on PTRACE_SEIZE KEYS: fix length validation in keyctl_pkey_params_get_2() Documentation: add link to stable release candidate tree Documentation: update stable tree link firmware: stratix10-svc: add missing callback parameter on RSU HID: intel-ish-hid: Use dma_alloc_coherent for firmware update SUNRPC: avoid race between mod_timer() and del_timer_sync() NFSD: prevent underflow in nfssvc_decode_writeargs() NFSD: prevent integer overflow on 32 bit systems f2fs: fix to unlock page correctly in error path of is_alive() f2fs: quota: fix loop condition at f2fs_quota_sync() f2fs: fix to do sanity check on .cp_pack_total_block_count remoteproc: Fix count check in rproc_coredump_write() pinctrl: samsung: drop pin banks references on error paths spi: mxic: Fix the transmit path mtd: rawnand: protect access to rawnand devices while in suspend can: ems_usb: ems_usb_start_xmit(): fix double dev_kfree_skb() in error path jffs2: fix use-after-free in jffs2_clear_xattr_subsystem jffs2: fix memory leak in jffs2_do_mount_fs jffs2: fix memory leak in jffs2_scan_medium mm/pages_alloc.c: don't create ZONE_MOVABLE beyond the end of a node mm: invalidate hwpoison page cache page in fault path mempolicy: mbind_range() set_policy() after vma_merge() scsi: libsas: Fix sas_ata_qc_issue() handling of NCQ NON DATA commands qed: display VF trust config qed: validate and restrict untrusted VFs vlan promisc mode riscv: Fix fill_callchain return value riscv: Increase stack size under KASAN Revert "Input: clear BTN_RIGHT/MIDDLE on buttonpads" cifs: prevent bad output lengths in smb2_ioctl_query_info() cifs: fix NULL ptr dereference in smb2_ioctl_query_info() ALSA: cs4236: fix an incorrect NULL check on list iterator ALSA: hda: Avoid unsol event during RPM suspending ALSA: pcm: Fix potential AB/BA lock with buffer_mutex and mmap_lock ALSA: hda/realtek: Fix audio regression on Mi Notebook Pro 2020 mm: madvise: skip unmapped vma holes passed to process_madvise mm: madvise: return correct bytes advised with process_madvise Revert "mm: madvise: skip unmapped vma holes passed to process_madvise" mm,hwpoison: unmap poisoned page before invalidation mm/kmemleak: reset tag when compare object pointer dm integrity: set journal entry unused when shrinking device drbd: fix potential silent data corruption can: isotp: sanitize CAN ID checks in isotp_bind() powerpc/kvm: Fix kvm_use_magic_page udp: call udp_encap_enable for v6 sockets when enabling encap arm64: signal: nofpsimd: Do not allocate fp/simd context when not available arm64: dts: ti: k3-am65: Fix gic-v3 compatible regs arm64: dts: ti: k3-j721e: Fix gic-v3 compatible regs arm64: dts: ti: k3-j7200: Fix gic-v3 compatible regs ACPI: properties: Consistently return -ENOENT if there are no more references coredump: Also dump first pages of non-executable ELF libraries ext4: fix ext4_fc_stats trace point ext4: fix fs corruption when tring to remove a non-empty directory with IO error drivers: hamradio: 6pack: fix UAF bug caused by mod_timer() mailbox: tegra-hsp: Flush whole channel block: limit request dispatch loop duration block: don't merge across cgroup boundaries if blkcg is enabled drm/edid: check basic audio support on CEA extension block video: fbdev: sm712fb: Fix crash in smtcfb_read() video: fbdev: atari: Atari 2 bpp (STe) palette bugfix ARM: dts: at91: sama5d2: Fix PMERRLOC resource size ARM: dts: exynos: fix UART3 pins configuration in Exynos5250 ARM: dts: exynos: add missing HDMI supplies on SMDK5250 ARM: dts: exynos: add missing HDMI supplies on SMDK5420 mgag200 fix memmapsl configuration in GCTL6 register carl9170: fix missing bit-wise or operator for tx_params pstore: Don't use semaphores in always-atomic-context code thermal: int340x: Increase bitmap size lib/raid6/test: fix multiple definition linking error exec: Force single empty string when argv is empty crypto: rsa-pkcs1pad - only allow with rsa crypto: rsa-pkcs1pad - correctly get hash from source scatterlist crypto: rsa-pkcs1pad - restore signature length check crypto: rsa-pkcs1pad - fix buffer overread in pkcs1pad_verify_complete() bcache: fixup multiple threads crash DEC: Limit PMAX memory probing to R3k systems media: gpio-ir-tx: fix transmit with long spaces on Orange Pi PC media: davinci: vpif: fix unbalanced runtime PM get media: davinci: vpif: fix unbalanced runtime PM enable xtensa: fix stop_machine_cpuslocked call in patch_text xtensa: fix xtensa_wsr always writing 0 brcmfmac: firmware: Allocate space for default boardrev in nvram brcmfmac: pcie: Release firmwares in the brcmf_pcie_setup error path brcmfmac: pcie: Replace brcmf_pcie_copy_mem_todev with memcpy_toio brcmfmac: pcie: Fix crashes due to early IRQs drm/i915/opregion: check port number bounds for SWSCI display power state drm/i915/gem: add missing boundary check in vm_access PCI: pciehp: Clear cmd_busy bit in polling mode PCI: xgene: Revert "PCI: xgene: Fix IB window setup" regulator: qcom_smd: fix for_each_child.cocci warnings selinux: check return value of sel_make_avc_files hwrng: cavium - Check health status while reading random data hwrng: cavium - HW_RANDOM_CAVIUM should depend on ARCH_THUNDER crypto: sun8i-ss - really disable hash on A80 crypto: authenc - Fix sleep in atomic context in decrypt_tail crypto: mxs-dcp - Fix scatterlist processing thermal: int340x: Check for NULL after calling kmemdup() spi: tegra114: Add missing IRQ check in tegra_spi_probe arm64/mm: avoid fixmap race condition when create pud mapping selftests/x86: Add validity check and allow field splitting crypto: rockchip - ECB does not need IV audit: log AUDIT_TIME_* records only from rules EVM: fix the evm= __setup handler return value crypto: ccree - don't attempt 0 len DMA mappings spi: pxa2xx-pci: Balance reference count for PCI DMA device hwmon: (pmbus) Add mutex to regulator ops hwmon: (sch56xx-common) Replace WDOG_ACTIVE with WDOG_HW_RUNNING nvme: cleanup __nvme_check_ids block: don't delete queue kobject before its children PM: hibernate: fix __setup handler error handling PM: suspend: fix return value of __setup handler spi: spi-zynqmp-gqspi: Handle error for dma_set_mask hwrng: atmel - disable trng on failure path crypto: sun8i-ss - call finalize with bh disabled crypto: sun8i-ce - call finalize with bh disabled crypto: amlogic - call finalize with bh disabled crypto: vmx - add missing dependencies clocksource/drivers/timer-ti-dm: Fix regression from errata i940 fix clocksource/drivers/exynos_mct: Refactor resources allocation clocksource/drivers/exynos_mct: Handle DTS with higher number of interrupts clocksource/drivers/timer-microchip-pit64b: Use notrace clocksource/drivers/timer-of: Check return value of of_iomap in timer_of_base_init() ACPI: APEI: fix return value of __setup handlers crypto: ccp - ccp_dmaengine_unregister release dma channels crypto: ccree - Fix use after free in cc_cipher_exit() vfio: platform: simplify device removal amba: Make the remove callback return void hwrng: nomadik - Change clk_disable to clk_disable_unprepare hwmon: (pmbus) Add Vin unit off handling clocksource: acpi_pm: fix return value of __setup handler io_uring: terminate manual loop iterator loop correctly for non-vecs watch_queue: Fix NULL dereference in error cleanup watch_queue: Actually free the watch f2fs: fix to enable ATGC correctly via gc_idle sysfs interface sched/debug: Remove mpol_get/put and task_lock/unlock from sched_show_numa sched/core: Export pelt_thermal_tp rseq: Optimise rseq_get_rseq_cs() and clear_rseq_cs() rseq: Remove broken uapi field layout on 32-bit little endian perf/core: Fix address filter parser for multiple filters perf/x86/intel/pt: Fix address filter config for 32-bit kernel f2fs: fix missing free nid in f2fs_handle_failed_inode nfsd: more robust allocation failure handling in nfsd_file_cache_init f2fs: fix to avoid potential deadlock btrfs: fix unexpected error path when reflinking an inline extent f2fs: compress: remove unneeded read when rewrite whole cluster f2fs: fix compressed file start atomic write may cause data corruption selftests, x86: fix how check_cc.sh is being invoked kunit: make kunit_test_timeout compatible with comment media: staging: media: zoran: fix usage of vb2_dma_contig_set_max_seg_size media: v4l2-mem2mem: Apply DST_QUEUE_OFF_BASE on MMAP buffers across ioctls media: mtk-vcodec: potential dereference of null pointer media: bttv: fix WARNING regression on tunerless devices ASoC: xilinx: xlnx_formatter_pcm: Handle sysclk setting ASoC: generic: simple-card-utils: remove useless assignment media: coda: Fix missing put_device() call in coda_get_vdoa_data media: meson: vdec: potential dereference of null pointer media: hantro: Fix overfill bottom register field name media: aspeed: Correct value for h-total-pixels video: fbdev: matroxfb: set maxvram of vbG200eW to the same as vbG200 to avoid black screen video: fbdev: controlfb: Fix set but not used warnings video: fbdev: controlfb: Fix COMPILE_TEST build video: fbdev: smscufx: Fix null-ptr-deref in ufx_usb_probe() video: fbdev: atmel_lcdfb: fix an error code in atmel_lcdfb_probe() video: fbdev: fbcvt.c: fix printing in fb_cvt_print_name() firmware: qcom: scm: Remove reassignment to desc following initializer ARM: dts: qcom: ipq4019: fix sleep clock soc: qcom: rpmpd: Check for null return of devm_kcalloc soc: qcom: ocmem: Fix missing put_device() call in of_get_ocmem soc: qcom: aoss: remove spurious IRQF_ONESHOT flags arm64: dts: qcom: sdm845: fix microphone bias properties and values arm64: dts: qcom: sm8150: Correct TCS configuration for apps rsc firmware: ti_sci: Fix compilation failure when CONFIG_TI_SCI_PROTOCOL is not defined soc: ti: wkup_m3_ipc: Fix IRQ check in wkup_m3_ipc_probe ARM: dts: sun8i: v3s: Move the csi1 block to follow address order ARM: dts: imx: Add missing LVDS decoder on M53Menlo media: video/hdmi: handle short reads of hdmi info frame. media: em28xx: initialize refcount before kref_get media: usb: go7007: s2250-board: fix leak in probe() media: cedrus: H265: Fix neighbour info buffer size media: cedrus: h264: Fix neighbour info buffer size ASoC: codecs: wcd934x: fix return value of wcd934x_rx_hph_mode_put uaccess: fix nios2 and microblaze get_user_8() ASoC: rt5663: check the return value of devm_kzalloc() in rt5663_parse_dp() ASoC: ti: davinci-i2s: Add check for clk_enable() ALSA: spi: Add check for clk_enable() arm64: dts: ns2: Fix spi-cpol and spi-cpha property arm64: dts: broadcom: Fix sata nodename printk: fix return value of printk.devkmsg __setup handler ASoC: mxs-saif: Handle errors for clk_enable ASoC: atmel_ssc_dai: Handle errors for clk_enable ASoC: dwc-i2s: Handle errors for clk_enable ASoC: soc-compress: prevent the potentially use of null pointer memory: emif: Add check for setup_interrupts memory: emif: check the pointer temp in get_device_details() ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction arm64: dts: rockchip: Fix SDIO regulator supply properties on rk3399-firefly m68k: coldfire/device.c: only build for MCF_EDMA when h/w macros are defined media: stk1160: If start stream fails, return buffers with VB2_BUF_STATE_QUEUED media: vidtv: Check for null return of vzalloc ASoC: atmel: Add missing of_node_put() in at91sam9g20ek_audio_probe ASoC: wm8350: Handle error for wm8350_register_irq ASoC: fsi: Add check for clk_enable video: fbdev: omapfb: Add missing of_node_put() in dvic_probe_of media: saa7134: convert list_for_each to entry variant media: saa7134: fix incorrect use to determine if list is empty ivtv: fix incorrect device_caps for ivtvfb ASoC: rockchip: i2s: Use devm_platform_get_and_ioremap_resource() ASoC: rockchip: i2s: Fix missing clk_disable_unprepare() in rockchip_i2s_probe ASoC: SOF: Add missing of_node_put() in imx8m_probe ASoC: dmaengine: do not use a NULL prepare_slave_config() callback ASoC: mxs: Fix error handling in mxs_sgtl5000_probe ASoC: fsl_spdif: Disable TX clock when stop ASoC: imx-es8328: Fix error return code in imx_es8328_probe() ASoC: msm8916-wcd-digital: Fix missing clk_disable_unprepare() in msm8916_wcd_digital_probe mmc: davinci_mmc: Handle error for clk_enable ASoC: atmel: sam9x5_wm8731: use devm_snd_soc_register_card() ASoC: atmel: Fix error handling in sam9x5_wm8731_driver_probe ASoC: msm8916-wcd-analog: Fix error handling in pm8916_wcd_analog_spmi_probe ASoC: codecs: wcd934x: Add missing of_node_put() in wcd934x_codec_parse_data ARM: configs: multi_v5_defconfig: re-enable CONFIG_V4L_PLATFORM_DRIVERS drm/meson: osd_afbcd: Add an exit callback to struct meson_afbcd_ops drm/bridge: Fix free wrong object in sii8620_init_rcp_input_dev drm/bridge: Add missing pm_runtime_disable() in __dw_mipi_dsi_probe drm/bridge: nwl-dsi: Fix PM disable depth imbalance in nwl_dsi_probe drm: bridge: adv7511: Fix ADV7535 HPD enablement ath10k: fix memory overwrite of the WoWLAN wakeup packet pattern drm/panfrost: Check for error num after setting mask libbpf: Fix possible NULL pointer dereference when destroying skeleton udmabuf: validate ubuf->pagecount Bluetooth: hci_serdev: call init_rwsem() before p->open() mtd: onenand: Check for error irq mtd: rawnand: gpmi: fix controller timings setting drm/edid: Don't clear formats if using deep color ionic: fix type complaint in ionic_dev_cmd_clean() drm/nouveau/acr: Fix undefined behavior in nvkm_acr_hsfw_load_bl() drm/amd/display: Fix a NULL pointer dereference in amdgpu_dm_connector_add_common_modes() drm/amd/pm: return -ENOTSUPP if there is no get_dpm_ultimate_freq function ath9k_htc: fix uninit value bugs RDMA/core: Set MR type in ib_reg_user_mr KVM: PPC: Fix vmx/vsx mixup in mmio emulation i40e: don't reserve excessive XDP_PACKET_HEADROOM on XSK Rx to skb i40e: respect metadata on XSK Rx to skb power: reset: gemini-poweroff: Fix IRQ check in gemini_poweroff_probe ray_cs: Check ioremap return value powerpc: dts: t1040rdb: fix ports names for Seville Ethernet switch KVM: PPC: Book3S HV: Check return value of kvmppc_radix_init powerpc/perf: Don't use perf_hw_context for trace IMC PMU mt76: mt7915: use proper aid value in mt7915_mcu_wtbl_generic_tlv in sta mode mt76: mt7915: use proper aid value in mt7915_mcu_sta_basic_tlv mt76: mt7603: check sta_rates pointer in mt7603_sta_rate_tbl_update mt76: mt7615: check sta_rates pointer in mt7615_sta_rate_tbl_update net: dsa: mv88e6xxx: Enable port policy support on 6097 scripts/dtc: Call pkg-config POSIXly correct livepatch: Fix build failure on 32 bits processors PCI: aardvark: Fix reading PCI_EXP_RTSTA_PME bit on emulated bridge drm/bridge: dw-hdmi: use safe format when first in bridge chain power: supply: ab8500: Fix memory leak in ab8500_fg_sysfs_init HID: i2c-hid: fix GET/SET_REPORT for unnumbered reports iommu/ipmmu-vmsa: Check for error num after setting mask drm/amd/pm: enable pm sysfs write for one VF mode drm/amd/display: Add affected crtcs to atomic state for dsc mst unplug IB/cma: Allow XRC INI QPs to set their local ACK timeout dax: make sure inodes are flushed before destroy cache iwlwifi: Fix -EIO error code that is never returned iwlwifi: mvm: Fix an error code in iwl_mvm_up() drm/msm/dp: populate connector of struct dp_panel drm/msm/dpu: add DSPP blocks teardown drm/msm/dpu: fix dp audio condition dm crypt: fix get_key_size compiler warning if !CONFIG_KEYS scsi: pm8001: Fix command initialization in pm80XX_send_read_log() scsi: pm8001: Fix command initialization in pm8001_chip_ssp_tm_req() scsi: pm8001: Fix payload initialization in pm80xx_set_thermal_config() scsi: pm8001: Fix le32 values handling in pm80xx_set_sas_protocol_timer_config() scsi: pm8001: Fix payload initialization in pm80xx_encrypt_update() scsi: pm8001: Fix le32 values handling in pm80xx_chip_ssp_io_req() scsi: pm8001: Fix le32 values handling in pm80xx_chip_sata_req() scsi: pm8001: Fix NCQ NON DATA command task initialization scsi: pm8001: Fix NCQ NON DATA command completion handling scsi: pm8001: Fix abort all task initialization RDMA/mlx5: Fix the flow of a miss in the allocation of a cache ODP MR drm/amd/display: Remove vupdate_int_entry definition TOMOYO: fix __setup handlers return values ext2: correct max file size computing drm/tegra: Fix reference leak in tegra_dsi_ganged_probe power: supply: bq24190_charger: Fix bq24190_vbus_is_enabled() wrong false return scsi: hisi_sas: Change permission of parameter prot_mask drm/bridge: cdns-dsi: Make sure to to create proper aliases for dt bpf, arm64: Call build_prologue() first in first JIT pass bpf, arm64: Feed byte-offset into bpf line info gpu: host1x: Fix a memory leak in 'host1x_remove()' libbpf: Skip forward declaration when counting duplicated type names powerpc/mm/numa: skip NUMA_NO_NODE onlining in parse_numa_properties() powerpc/Makefile: Don't pass -mcpu=powerpc64 when building 32-bit KVM: x86: Fix emulation in writing cr8 KVM: x86/emulator: Defer not-present segment check in __load_segment_descriptor() hv_balloon: rate-limit "Unhandled message" warning i2c: xiic: Make bus names unique power: supply: wm8350-power: Handle error for wm8350_register_irq power: supply: wm8350-power: Add missing free in free_charger_irq IB/hfi1: Allow larger MTU without AIP PCI: Reduce warnings on possible RW1C corruption net: axienet: fix RX ring refill allocation failure handling mips: DEC: honor CONFIG_MIPS_FP_SUPPORT=n powerpc/sysdev: fix incorrect use to determine if list is empty mfd: mc13xxx: Add check for mc13xxx_irq_request libbpf: Unmap rings when umem deleted selftests/bpf: Make test_lwt_ip_encap more stable and faster platform/x86: huawei-wmi: check the return value of device_create_file() powerpc: 8xx: fix a return value error in mpc8xx_pic_init vxcan: enable local echo for sent CAN frames ath10k: Fix error handling in ath10k_setup_msa_resources mips: cdmm: Fix refcount leak in mips_cdmm_phys_base MIPS: RB532: fix return value of __setup handler MIPS: pgalloc: fix memory leak caused by pgd_free() mtd: rawnand: atmel: fix refcount issue in atmel_nand_controller_init RDMA/mlx5: Fix memory leak in error flow for subscribe event routine bpf, sockmap: Fix memleak in tcp_bpf_sendmsg while sk msg is full bpf, sockmap: Fix more uncharged while msg has more_data bpf, sockmap: Fix double uncharge the mem of sk_msg samples/bpf, xdpsock: Fix race when running for fix duration of time USB: storage: ums-realtek: fix error code in rts51x_read_mem() can: isotp: return -EADDRNOTAVAIL when reading from unbound socket can: isotp: support MSG_TRUNC flag when reading from socket bareudp: use ipv6_mod_enabled to check if IPv6 enabled selftests/bpf: Fix error reporting from sock_fields programs Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed Bluetooth: btmtksdio: Fix kernel oops in btmtksdio_interrupt ipv4: Fix route lookups when handling ICMP redirects and PMTU updates af_netlink: Fix shift out of bounds in group mask calculation i2c: meson: Fix wrong speed use from probe i2c: mux: demux-pinctrl: do not deactivate a master that is not active selftests/bpf/test_lirc_mode2.sh: Exit with proper code PCI: Avoid broken MSI on SB600 USB devices net: bcmgenet: Use stronger register read/writes to assure ordering tcp: ensure PMTU updates are processed during fastopen openvswitch: always update flow key after nat tipc: fix the timer expires after interval 100ms mfd: asic3: Add missing iounmap() on error asic3_mfd_probe mxser: fix xmit_buf leak in activate when LSR == 0xff pwm: lpc18xx-sct: Initialize driver data and hardware before pwmchip_add() fsi: aspeed: convert to devm_platform_ioremap_resource fsi: Aspeed: Fix a potential double free misc: alcor_pci: Fix an error handling path cpufreq: qcom-cpufreq-nvmem: fix reading of PVS Valid fuse soundwire: intel: fix wrong register name in intel_shim_wake clk: qcom: ipq8074: fix PCI-E clock oops iio: mma8452: Fix probe failing when an i2c_device_id is used staging:iio:adc:ad7280a: Fix handing of device address bit reversing. pinctrl: renesas: r8a77470: Reduce size for narrow VIN1 channel pinctrl: renesas: checker: Fix miscalculation of number of states clk: qcom: ipq8074: Use floor ops for SDCC1 clock phy: dphy: Correct lpx parameter and its derivatives(ta_{get,go,sure}) serial: 8250_mid: Balance reference count for PCI DMA device serial: 8250_lpss: Balance reference count for PCI DMA device NFS: Use of mapping_set_error() results in spurious errors serial: 8250: Fix race condition in RTS-after-send handling iio: adc: Add check for devm_request_threaded_irq habanalabs: Add check for pci_enable_device NFS: Return valid errors from nfs2/3_decode_dirent() dma-debug: fix return value of __setup handlers clk: imx7d: Remove audio_mclk_root_clk clk: at91: sama7g5: fix parents of PDMCs' GCLK clk: qcom: clk-rcg2: Update logic to calculate D value for RCG clk: qcom: clk-rcg2: Update the frac table for pixel clock dmaengine: hisi_dma: fix MSI allocate fail when reload hisi_dma remoteproc: qcom: Fix missing of_node_put in adsp_alloc_memory_region remoteproc: qcom_wcnss: Add missing of_node_put() in wcnss_alloc_memory_region remoteproc: qcom_q6v5_mss: Fix some leaks in q6v5_alloc_memory_region nvdimm/region: Fix default alignment for small regions clk: actions: Terminate clk_div_table with sentinel element clk: loongson1: Terminate clk_div_table with sentinel element clk: clps711x: Terminate clk_div_table with sentinel element clk: tegra: tegra124-emc: Fix missing put_device() call in emc_ensure_emc_driver NFS: remove unneeded check in decode_devicenotify_args() staging: mt7621-dts: fix LEDs and pinctrl on GB-PC1 devicetree staging: mt7621-dts: fix formatting staging: mt7621-dts: fix pinctrl properties for ethernet staging: mt7621-dts: fix GB-PC2 devicetree pinctrl: mediatek: Fix missing of_node_put() in mtk_pctrl_init pinctrl: mediatek: paris: Fix PIN_CONFIG_BIAS_* readback pinctrl: mediatek: paris: Fix "argument" argument type for mtk_pinconf_get() pinctrl: mediatek: paris: Fix pingroup pin config state readback pinctrl: mediatek: paris: Skip custom extra pin config dump for virtual GPIOs pinctrl: nomadik: Add missing of_node_put() in nmk_pinctrl_probe pinctrl/rockchip: Add missing of_node_put() in rockchip_pinctrl_probe tty: hvc: fix return value of __setup handler kgdboc: fix return value of __setup handler serial: 8250: fix XOFF/XON sending when DMA is used kgdbts: fix return value of __setup handler firmware: google: Properly state IOMEM dependency driver core: dd: fix return value of __setup handler jfs: fix divide error in dbNextAG netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options NFSv4.1: don't retry BIND_CONN_TO_SESSION on session error kdb: Fix the putarea helper function clk: qcom: gcc-msm8994: Fix gpll4 width clk: Initialize orphan req_rate xen: fix is_xen_pmu() net: enetc: report software timestamping via SO_TIMESTAMPING net: hns3: fix bug when PF set the duplicate MAC address for VFs net: phy: broadcom: Fix brcm_fet_config_init() selftests: test_vxlan_under_vrf: Fix broken test case qlcnic: dcb: default to returning -EOPNOTSUPP net/x25: Fix null-ptr-deref caused by x25_disconnect NFSv4/pNFS: Fix another issue with a list iterator pointing to the head net: dsa: bcm_sf2_cfp: fix an incorrect NULL check on list iterator fs: fd tables have to be multiples of BITS_PER_LONG lib/test: use after free in register_test_dev_kmod() fs: fix fd table size alignment properly LSM: general protection fault in legacy_parse_param regulator: rpi-panel: Handle I2C errors/timing to the Atmel gcc-plugins/stackleak: Exactly match strings instead of prefixes pinctrl: npcm: Fix broken references to chip->parent_device block, bfq: don't move oom_bfqq selinux: use correct type for context length selinux: allow FIOCLEX and FIONCLEX with policy capability loop: use sysfs_emit() in the sysfs xxx show() Fix incorrect type in assignment of ipv6 port for audit irqchip/qcom-pdc: Fix broken locking irqchip/nvic: Release nvic_base upon failure fs/binfmt_elf: Fix AT_PHDR for unusual ELF files bfq: fix use-after-free in bfq_dispatch_request ACPICA: Avoid walking the ACPI Namespace if it is not there lib/raid6/test/Makefile: Use $(pound) instead of \# for Make 4.3 Revert "Revert "block, bfq: honor already-setup queue merges"" ACPI/APEI: Limit printable size of BERT table data PM: core: keep irq flags in device_pm_check_callbacks() parisc: Fix handling off probe non-access faults nvme-tcp: lockdep: annotate in-kernel sockets spi: tegra20: Use of_device_get_match_data() locking/lockdep: Iterate lock_classes directly when reading lockdep files ext4: correct cluster len and clusters changed accounting in ext4_mb_mark_bb ext4: fix ext4_mb_mark_bb() with flex_bg with fast_commit ext4: don't BUG if someone dirty pages without asking ext4 first f2fs: fix to do sanity check on curseg->alloc_type NFSD: Fix nfsd_breaker_owns_lease() return values f2fs: compress: fix to print raw data size in error path of lz4 decompression ntfs: add sanity check on allocation size media: staging: media: zoran: move videodev alloc media: staging: media: zoran: calculate the right buffer number for zoran_reap_stat_com media: staging: media: zoran: fix various V4L2 compliance errors media: ir_toy: free before error exiting video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow video: fbdev: w100fb: Reset global state video: fbdev: cirrusfb: check pixclock to avoid divide by zero video: fbdev: omapfb: acx565akm: replace snprintf with sysfs_emit ARM: dts: qcom: fix gic_irq_domain_translate warnings for msm8960 ARM: dts: bcm2837: Add the missing L1/L2 cache information ASoC: madera: Add dependencies on MFD media: atomisp_gmin_platform: Add DMI quirk to not turn AXP ELDO2 regulator off on some boards media: atomisp: fix dummy_ptr check to avoid duplicate active_bo ARM: ftrace: avoid redundant loads or clobbering IP ARM: dts: imx7: Use audio_mclk_post_div instead audio_mclk_root_clk arm64: defconfig: build imx-sdma as a module video: fbdev: omapfb: panel-dsi-cm: Use sysfs_emit() instead of snprintf() video: fbdev: omapfb: panel-tpo-td043mtea1: Use sysfs_emit() instead of snprintf() video: fbdev: udlfb: replace snprintf in show functions with sysfs_emit ARM: dts: bcm2711: Add the missing L1/L2 cache information ASoC: soc-core: skip zero num_dai component in searching dai name media: cx88-mpeg: clear interrupt status register before streaming video uaccess: fix type mismatch warnings from access_ok() lib/test_lockup: fix kernel pointer check for separate address spaces ARM: tegra: tamonten: Fix I2C3 pad setting ARM: mmp: Fix failure to remove sram device video: fbdev: sm712fb: Fix crash in smtcfb_write() media: Revert "media: em28xx: add missing em28xx_close_extension" media: hdpvr: initialize dev->worker at hdpvr_register_videodev mmc: host: Return an error when ->enable_sdio_irq() ops is missing media: atomisp: fix bad usage at error handling logic ALSA: hda/realtek: Add alc256-samsung-headphone fixup KVM: x86/mmu: Check for present SPTE when clearing dirty bit in TDP MMU powerpc/kasan: Fix early region not updated correctly powerpc/lib/sstep: Fix 'sthcx' instruction powerpc/lib/sstep: Fix build errors with newer binutils powerpc: Fix build errors with newer binutils scsi: qla2xxx: Fix stuck session in gpdb scsi: qla2xxx: Fix scheduling while atomic scsi: qla2xxx: Fix wrong FDMI data for 64G adapter scsi: qla2xxx: Fix warning for missing error code scsi: qla2xxx: Fix device reconnect in loop topology scsi: qla2xxx: Add devids and conditionals for 28xx scsi: qla2xxx: Check for firmware dump already collected scsi: qla2xxx: Suppress a kernel complaint in qla_create_qpair() scsi: qla2xxx: Fix disk failure to rediscover scsi: qla2xxx: Fix incorrect reporting of task management failure scsi: qla2xxx: Fix hang due to session stuck scsi: qla2xxx: Fix missed DMA unmap for NVMe ls requests scsi: qla2xxx: Fix N2N inconsistent PLOGI scsi: qla2xxx: Reduce false trigger to login scsi: qla2xxx: Use correct feature type field during RFF_ID processing platform: chrome: Split trace include file KVM: x86: Forbid VMM to set SYNIC/STIMER MSRs when SynIC wasn't activated KVM: Prevent module exit until all VMs are freed KVM: x86: fix sending PV IPI KVM: SVM: fix panic on out-of-bounds guest IRQ ASoC: SOF: Intel: Fix NULL ptr dereference when ENOMEM ubifs: rename_whiteout: Fix double free for whiteout_ui->data ubifs: Fix deadlock in concurrent rename whiteout and inode writeback ubifs: Add missing iput if do_tmpfile() failed in rename whiteout ubifs: setflags: Make dirtied_ino_d 8 bytes aligned ubifs: Fix read out-of-bounds in ubifs_wbuf_write_nolock() ubifs: Fix to add refcount once page is set private ubifs: rename_whiteout: correct old_dir size computing wireguard: queueing: use CFI-safe ptr_ring cleanup function wireguard: socket: free skb in send6 when ipv6 is disabled wireguard: socket: ignore v6 endpoints when ipv6 is disabled XArray: Fix xas_create_range() when multi-order entry present can: mcba_usb: mcba_usb_start_xmit(): fix double dev_kfree_skb in error path can: mcba_usb: properly check endpoint type can: mcp251xfd: mcp251xfd_register_get_dev_id(): fix return of error value XArray: Update the LRU list in xas_split() rtc: check if __rtc_read_time was successful gfs2: Make sure FITRIM minlen is rounded up to fs block size net: hns3: fix software vlan talbe of vlan 0 inconsistent with hardware rxrpc: Fix call timer start racing with call destruction mailbox: imx: fix wakeup failure from freeze mode crypto: arm/aes-neonbs-cbc - Select generic cbc and aes watch_queue: Free the page array when watch_queue is dismantled pinctrl: pinconf-generic: Print arguments for bias-pull-* watchdog: rti-wdt: Add missing pm_runtime_disable() in probe function pinctrl: nuvoton: npcm7xx: Rename DS() macro to DSTR() pinctrl: nuvoton: npcm7xx: Use %zu printk format for ARRAY_SIZE() ASoC: mediatek: mt6358: add missing EXPORT_SYMBOLs ubi: Fix race condition between ctrl_cdev_ioctl and ubi_cdev_ioctl ARM: iop32x: offset IRQ numbers by 1 io_uring: fix memory leak of uid in files registration riscv module: remove (NOLOAD) ACPI: CPPC: Avoid out of bounds access when parsing _CPC data platform/chrome: cros_ec_typec: Check for EC device can: isotp: restore accidentally removed MSG_PEEK feature proc: bootconfig: Add null pointer check staging: mt7621-dts: fix pinctrl-0 items to be size-1 items on ethernet ASoC: soc-compress: Change the check for codec_dai batman-adv: Check ptr for NULL before reducing its refcnt mm/mmap: return 1 from stack_guard_gap __setup() handler ARM: 9187/1: JIVE: fix return value of __setup handler mm/memcontrol: return 1 from cgroup.memory __setup() handler mm/usercopy: return 1 from hardened_usercopy __setup() handler bpf: Adjust BPF stack helper functions to accommodate skip > 0 bpf: Fix comment for helper bpf_current_task_under_cgroup() dt-bindings: mtd: nand-controller: Fix the reg property description dt-bindings: mtd: nand-controller: Fix a comment in the examples dt-bindings: spi: mxic: The interrupt property is not mandatory ubi: fastmap: Return error code if memory allocation fails in add_aeb() ASoC: topology: Allow TLV control to be either read or write ARM: dts: spear1340: Update serial node properties ARM: dts: spear13xx: Update SPI dma properties um: Fix uml_mconsole stop/go docs: sysctl/kernel: add missing bit to panic_print openvswitch: Fixed nd target mask field in the flow dump. KVM: x86/mmu: do compare-and-exchange of gPTE via the user address can: m_can: m_can_tx_handler(): fix use after free of skb can: usb_8dev: usb_8dev_start_xmit(): fix double dev_kfree_skb() in error path coredump: Snapshot the vmas in do_coredump coredump: Remove the WARN_ON in dump_vma_snapshot coredump/elf: Pass coredump_params into fill_note_info coredump: Use the vma snapshot in fill_files_note arm64: Do not defer reserve_crashkernel() for platforms with no DMA memory zones PCI: xgene: Revert "PCI: xgene: Use inbound resources for setup" Linux 5.10.110 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I12fbe227793dd40c0582588e1700cf88cafd0ac6	2022-04-18 17:41:18 +02:00
Herbert Xu	ec1d372974	crypto: authenc - Fix sleep in atomic context in decrypt_tail ... [ Upstream commit 66eae850333d639fc278d6f915c6fc01499ea893 ] The function crypto_authenc_decrypt_tail discards its flags argument and always relies on the flags from the original request when starting its sub-request. This is clearly wrong as it may cause the SLEEPABLE flag to be set when it shouldn't. Fixes: 92d95ba917 ("crypto: authenc - Convert to new AEAD interface") Reported-by: Corentin Labbe <clabbe.montjoie@gmail.com> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Tested-by: Corentin Labbe <clabbe.montjoie@gmail.com> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-04-08 14:39:59 +02:00
Eric Biggers	37d2b4fa5c	crypto: rsa-pkcs1pad - fix buffer overread in pkcs1pad_verify_complete() ... commit a24611ea356c7f3f0ec926da11b9482ac1f414fd upstream. Before checking whether the expected digest_info is present, we need to check that there are enough bytes remaining. Fixes: a49de377e0 ("crypto: Add hash param to pkcs1pad") Cc: <stable@vger.kernel.org> # v4.6+ Cc: Tadeusz Struk <tadeusz.struk@linaro.org> Signed-off-by: Eric Biggers <ebiggers@google.com> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-04-08 14:39:57 +02:00
Eric Biggers	b89fb8b882	crypto: rsa-pkcs1pad - restore signature length check ... commit d3481accd974541e6a5d6a1fb588924a3519c36e upstream. RSA PKCS#1 v1.5 signatures are required to be the same length as the RSA key size. RFC8017 specifically requires the verifier to check this (https://datatracker.ietf.org/doc/html/rfc8017#section-8.2.2). Commit a49de377e0 ("crypto: Add hash param to pkcs1pad") changed the kernel to allow longer signatures, but didn't explain this part of the change; it seems to be unrelated to the rest of the commit. Revert this change, since it doesn't appear to be correct. We can be pretty sure that no one is relying on overly-long signatures (which would have to be front-padded with zeroes) being supported, given that they would have been broken since commit c7381b0128 ("crypto: akcipher - new verify API for public key algorithms"). Fixes: a49de377e0 ("crypto: Add hash param to pkcs1pad") Cc: <stable@vger.kernel.org> # v4.6+ Cc: Tadeusz Struk <tadeusz.struk@linaro.org> Suggested-by: Vitaly Chikunov <vt@altlinux.org> Signed-off-by: Eric Biggers <ebiggers@google.com> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-04-08 14:39:57 +02:00
Eric Biggers	f38c318068	crypto: rsa-pkcs1pad - correctly get hash from source scatterlist ... commit e316f7179be22912281ce6331d96d7c121fb2b17 upstream. Commit c7381b0128 ("crypto: akcipher - new verify API for public key algorithms") changed akcipher_alg::verify to take in both the signature and the actual hash and do the signature verification, rather than just return the hash expected by the signature as was the case before. To do this, it implemented a hack where the signature and hash are concatenated with each other in one scatterlist. Obviously, for this to work correctly, akcipher_alg::verify needs to correctly extract the two items from the scatterlist it is given. Unfortunately, it doesn't correctly extract the hash in the case where the signature is longer than the RSA key size, as it assumes that the signature's length is equal to the RSA key size. This causes a prefix of the hash, or even the entire hash, to be taken from the *signature*. (Note, the case of a signature longer than the RSA key size should not be allowed in the first place; a separate patch will fix that.) It is unclear whether the resulting scheme has any useful security properties. Fix this by correctly extracting the hash from the scatterlist. Fixes: c7381b0128 ("crypto: akcipher - new verify API for public key algorithms") Cc: <stable@vger.kernel.org> # v5.2+ Reviewed-by: Vitaly Chikunov <vt@altlinux.org> Signed-off-by: Eric Biggers <ebiggers@google.com> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-04-08 14:39:57 +02:00
Eric Biggers	c1db3f44f2	crypto: rsa-pkcs1pad - only allow with rsa ... commit 9b30430ea356f237945e52f8a3a42158877bd5a9 upstream. The pkcs1pad template can be instantiated with an arbitrary akcipher algorithm, which doesn't make sense; it is specifically an RSA padding scheme. Make it check that the underlying algorithm really is RSA. Fixes: 3d5b1ecdea ("crypto: rsa - RSA padding algorithm") Cc: <stable@vger.kernel.org> # v4.5+ Signed-off-by: Eric Biggers <ebiggers@google.com> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-04-08 14:39:57 +02:00
Greg Kroah-Hartman	86e6176a42	This is the 5.10.100 stable release ... -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmIGGagACgkQONu9yGCS aT48rBAAin0WRL4yvqtF5Oji7oIi3WqKk6mIUGNbAzkhJCF09n179aCIV+jDy2oQ Q5wYNwwjMxqSUKu4hyfVNCdOAcYkcqMfrcn2RDAaLnwTdjhaCCYZcdiDI5ODZiM9 BatqSZIv4JIM4kuwSzNEALy1QdCZ2SGpQbIC8q+TLze5K5N7lLzx0J8DY8nZt4Wr +ZDSNBWLof4BYD3XI/Sxx70OJCOUiOoNDOKqYOBQ349wNEfeiGNDz90ooPkYevLb 9w4R+CH5P/KSnLNda06ziaTLEbApOVwdDJrCBQG3iZ2OVouGYICmNc24v4/TCCqJ 2h/6y/+fZ47sphdDDZCsk1lUwMsK9SZLIY1Y4NhnObl6Yhpe53zFOuno/putiEXi /pQCaRPj/E1LdzoIJF54Sj5QOh1V6itm5eRPvNsIys8AyIG8DYcp+TGj4fBCRHMy MNeqtPKOtrDX5poFoLgAt6SDmWgM6dUIQii0dJlEBAYWfaJBXx4+EZ3Ld92PkVJq lqMyCmcW4L/6UlrpazBWTZI7H0hzfhCV+Bc9loAWECRC/21KZb4W0wc6XdaxqPTW Jckm1wb4ou/zVWWzIJ9+jVFrkzdZjPlUKzUJP6ZczFW36XDo9t3RSfx9flvbiPh+ /PYxADJX0sQTAIhiNUKVombiz7LP/GGtI3HHOwwReMI4KkQzbL8= =VIYg -----END PGP SIGNATURE----- Merge 5.10.100 into android12-5.10-lts Changes in 5.10.100 moxart: fix potential use-after-free on remove path KVM: s390: Return error on SIDA memop on normal guest crypto: api - Move cryptomgr soft dependency into algapi tipc: improve size validations for received domain records Linux 5.10.100 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I171e1de80869482794b41d437fd66993a0c8a1d5	2022-02-11 09:19:01 +01:00
Herbert Xu	2951d21689	crypto: api - Move cryptomgr soft dependency into algapi ... commit c6ce9c5831cae515d375a01b97ae1778689acf19 upstream. The soft dependency on cryptomgr is only needed in algapi because if algapi isn't present then no algorithms can be loaded. This also fixes the case where api is built-in but algapi is built as a module as the soft dependency would otherwise get lost. Fixes: 8ab23d547f ("crypto: api - Add softdep on cryptomgr") Reported-by: Jan Beulich <jbeulich@suse.com> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Tested-by: Jan Beulich <jbeulich@suse.com> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-02-11 09:09:03 +01:00
Greg Kroah-Hartman	4ec3c2eea5	This is the 5.10.94 stable release ... -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmHya+IACgkQONu9yGCS aT7k/RAAqdd8bNhAiO6iDpvZbQtxq9jepx4KCkcd+gsYvSvePEnBQHaTaavfCK/7 +taWsc2i6Hwc1Z4oVfUiU02cCsqMJJXqb0nfJaavE5cZspbTc7QeS0zv9BkzSKUZ +DxXWyjzeJquI7EbdU0n7inb0iwvBxmTGNIg2j1pPi81Q7XnpjmDsSvuoftRQ0AN DGYefowWL1VcfsZRfhEudnpxWC/DjOdB8zD34SgXxKat6/O8YG4T5pM2BOUlKtOW QcXFhpG6gU0XqmI3QQDvAESujOQxzC1u3AwIOHYJ/tlFYsUJXjiZIEVnMqPYGpNl fXS8xcNSeo6fipXWkzsc489Tteq9H+bfm8sBG0jhExRnyGckkihJDhRFZ9yBrzo/ 1PtUdUIJ4d5fUmdZp7gxucncFyIYFsyJm/5nsYmObP794oStPGKsH8llhp/PcEFF ua1+Gy2WW2f6BOaDVFmt+jWZRMa/3oZnFhe8/FPRsAjGOj+q/+V6bsksGDYupsrM x8/QQI6OVlnOZsrdpX7zkW46qLov0J0bO9cANTm7kcRaesrkikFKqiIF2uIW2OU6 W0tZZf0Jy/gSLEljkZ3SuMHCmldWKm/KxMYSjnQ3Y34QvOLYPNAZGF78rbV3s8/0 otGR3ra5TKCz1kxuDaE1FqZXxpPQidXbF4QUoaRIaPwA1k5NvLY= =ktJL -----END PGP SIGNATURE----- Merge 5.10.94 into android12-5.10-lts Changes in 5.10.94 KVM: VMX: switch blocked_vcpu_on_cpu_lock to raw spinlock HID: uhid: Fix worker destroying device without any protection HID: wacom: Reset expected and received contact counts at the same time HID: wacom: Ignore the confidence flag when a touch is removed HID: wacom: Avoid using stale array indicies to read contact count f2fs: fix to do sanity check in is_alive() nfc: llcp: fix NULL error pointer dereference on sendmsg() after failed bind() mtd: rawnand: gpmi: Add ERR007117 protection for nfc_apply_timings mtd: rawnand: gpmi: Remove explicit default gpmi clock setting for i.MX6 mtd: Fixed breaking list in __mtd_del_partition. mtd: rawnand: davinci: Don't calculate ECC when reading page mtd: rawnand: davinci: Avoid duplicated page read mtd: rawnand: davinci: Rewrite function description x86/gpu: Reserve stolen memory for first integrated Intel GPU tools/nolibc: x86-64: Fix startup code bug tools/nolibc: i386: fix initial stack alignment tools/nolibc: fix incorrect truncation of exit code rtc: cmos: take rtc_lock while reading from CMOS media: v4l2-ioctl.c: readbuffers depends on V4L2_CAP_READWRITE media: flexcop-usb: fix control-message timeouts media: mceusb: fix control-message timeouts media: em28xx: fix control-message timeouts media: cpia2: fix control-message timeouts media: s2255: fix control-message timeouts media: dib0700: fix undefined behavior in tuner shutdown media: redrat3: fix control-message timeouts media: pvrusb2: fix control-message timeouts media: stk1160: fix control-message timeouts media: cec-pin: fix interrupt en/disable handling can: softing_cs: softingcs_probe(): fix memleak on registration failure iio: adc: ti-adc081c: Partial revert of removal of ACPI IDs lkdtm: Fix content of section containing lkdtm_rodata_do_nothing() iommu/io-pgtable-arm-v7s: Add error handle for page table allocation failure gpu: host1x: Add back arm_iommu_detach_device() dma_fence_array: Fix PENDING_ERROR leak in dma_fence_array_signaled() PCI: Add function 1 DMA alias quirk for Marvell 88SE9125 SATA controller mm_zone: add function to check if managed dma zone exists dma/pool: create dma atomic pool only if dma zone has managed pages mm/page_alloc.c: do not warn allocation failure on zone DMA if no managed pages shmem: fix a race between shmem_unused_huge_shrink and shmem_evict_inode drm/ttm: Put BO in its memory manager's lru list Bluetooth: L2CAP: Fix not initializing sk_peer_pid drm/bridge: display-connector: fix an uninitialized pointer in probe() drm: fix null-ptr-deref in drm_dev_init_release() drm/panel: kingdisplay-kd097d04: Delete panel on attach() failure drm/panel: innolux-p079zca: Delete panel on attach() failure drm/rockchip: dsi: Fix unbalanced clock on probe error drm/rockchip: dsi: Hold pm-runtime across bind/unbind drm/rockchip: dsi: Disable PLL clock on bind error drm/rockchip: dsi: Reconfigure hardware on resume() Bluetooth: cmtp: fix possible panic when cmtp_init_sockets() fails clk: bcm-2835: Pick the closest clock rate clk: bcm-2835: Remove rounding up the dividers drm/vc4: hdmi: Set a default HSM rate wcn36xx: ensure pairing of init_scan/finish_scan and start_scan/end_scan wcn36xx: Indicate beacon not connection loss on MISSED_BEACON_IND wcn36xx: Fix DMA channel enable/disable cycle wcn36xx: Release DMA channel descriptor allocations wcn36xx: Put DXE block into reset before freeing memory wcn36xx: populate band before determining rate on RX wcn36xx: fix RX BD rate mapping for 5GHz legacy rates ath11k: Send PPDU_STATS_CFG with proper pdev mask to firmware mtd: hyperbus: rpc-if: Check return value of rpcif_sw_init() media: videobuf2: Fix the size printk format media: atomisp: add missing media_device_cleanup() in atomisp_unregister_entities() media: atomisp: fix punit_ddr_dvfs_enable() argument for mrfld_power up case media: atomisp: fix inverted logic in buffers_needed() media: atomisp: do not use err var when checking port validity for ISP2400 media: atomisp: fix inverted error check for ia_css_mipi_is_source_port_valid() media: atomisp: fix ifdefs in sh_css.c media: staging: media: atomisp: pci: Balance braces around conditional statements in file atomisp_cmd.c media: atomisp: add NULL check for asd obtained from atomisp_video_pipe media: atomisp: fix enum formats logic media: atomisp: fix uninitialized bug in gmin_get_pmic_id_and_addr() media: aspeed: fix mode-detect always time out at 2nd run media: em28xx: fix memory leak in em28xx_init_dev media: aspeed: Update signal status immediately to ensure sane hw state arm64: dts: amlogic: meson-g12: Fix GPU operating point table node name arm64: dts: amlogic: Fix SPI NOR flash node name for ODROID N2/N2+ arm64: dts: meson-gxbb-wetek: fix HDMI in early boot arm64: dts: meson-gxbb-wetek: fix missing GPIO binding fs: dlm: use sk->sk_socket instead of con->sock fs: dlm: don't call kernel_getpeername() in error_report() memory: renesas-rpc-if: Return error in case devm_ioremap_resource() fails Bluetooth: stop proccessing malicious adv data ath11k: Fix ETSI regd with weather radar overlap ath11k: clear the keys properly via DISABLE_KEY ath11k: reset RSN/WPA present state for open BSS tee: fix put order in teedev_close_context() fs: dlm: fix build with CONFIG_IPV6 disabled drm/vboxvideo: fix a NULL vs IS_ERR() check arm64: dts: renesas: cat875: Add rx/tx delays media: dmxdev: fix UAF when dvb_register_device() fails crypto: qce - fix uaf on qce_ahash_register_one crypto: qce - fix uaf on qce_skcipher_register_one mtd: hyperbus: rpc-if: fix bug in rpcif_hb_remove ARM: dts: stm32: fix dtbs_check warning on ili9341 dts binding on stm32f429 disco crypto: qat - fix spelling mistake: "messge" -> "message" crypto: qat - remove unnecessary collision prevention step in PFVF crypto: qat - make pfvf send message direction agnostic crypto: qat - fix undetected PFVF timeout in ACK loop ath11k: Use host CE parameters for CE interrupts configuration arm64: dts: ti: k3-j721e: correct cache-sets info tty: serial: atmel: Check return code of dmaengine_submit() tty: serial: atmel: Call dma_async_issue_pending() mfd: atmel-flexcom: Remove #ifdef CONFIG_PM_SLEEP mfd: atmel-flexcom: Use .resume_noirq media: rcar-csi2: Correct the selection of hsfreqrange media: imx-pxp: Initialize the spinlock prior to using it media: si470x-i2c: fix possible memory leak in si470x_i2c_probe() media: mtk-vcodec: call v4l2_m2m_ctx_release first when file is released media: coda: fix CODA960 JPEG encoder buffer overflow media: venus: pm_helpers: Control core power domain manually media: venus: core, venc, vdec: Fix probe dependency error media: venus: core: Fix a potential NULL pointer dereference in an error handling path media: venus: core: Fix a resource leak in the error handling path of 'venus_probe()' thermal/drivers/imx: Implement runtime PM support netfilter: bridge: add support for pppoe filtering arm64: dts: qcom: msm8916: fix MMC controller aliases cgroup: Trace event cgroup id fields should be u64 ACPI: EC: Rework flushing of EC work while suspended to idle thermal/drivers/imx8mm: Enable ADC when enabling monitor drm/amdgpu: Fix a NULL pointer dereference in amdgpu_connector_lcd_native_mode() drm/radeon/radeon_kms: Fix a NULL pointer dereference in radeon_driver_open_kms() arm64: dts: ti: k3-j7200: Fix the L2 cache sets arm64: dts: ti: k3-j721e: Fix the L2 cache sets arm64: dts: ti: k3-j7200: Correct the d-cache-sets info tty: serial: uartlite: allow 64 bit address serial: amba-pl011: do not request memory region twice floppy: Fix hang in watchdog when disk is ejected staging: rtl8192e: return error code from rtllib_softmac_init() staging: rtl8192e: rtllib_module: fix error handle case in alloc_rtllib() Bluetooth: btmtksdio: fix resume failure sched/fair: Fix detection of per-CPU kthreads waking a task sched/fair: Fix per-CPU kthread and wakee stacking for asym CPU capacity bpf: Adjust BTF log size limit. bpf: Disallow BPF_LOG_KERNEL log level for bpf(BPF_BTF_LOAD) bpf: Remove config check to enable bpf support for branch records arm64: lib: Annotate {clear, copy}_page() as position-independent arm64: clear_page() shouldn't use DC ZVA when DCZID_EL0.DZP == 1 media: dib8000: Fix a memleak in dib8000_init() media: saa7146: mxb: Fix a NULL pointer dereference in mxb_attach() media: si2157: Fix "warm" tuner state detection wireless: iwlwifi: Fix a double free in iwl_txq_dyn_alloc_dma sched/rt: Try to restart rt period timer when rt runtime exceeded drm/msm/dp: displayPort driver need algorithm rational rcu/exp: Mark current CPU as exp-QS in IPI loop second pass mwifiex: Fix possible ABBA deadlock xfrm: fix a small bug in xfrm_sa_len() x86/uaccess: Move variable into switch case statement selftests: clone3: clone3: add case CLONE3_ARGS_NO_TEST selftests: harness: avoid false negatives if test has no ASSERTs crypto: stm32 - Fix last sparse warning in stm32_cryp_check_ctr_counter crypto: stm32/cryp - fix CTR counter carry crypto: stm32/cryp - fix xts and race condition in crypto_engine requests crypto: stm32/cryp - check early input data crypto: stm32/cryp - fix double pm exit crypto: stm32/cryp - fix lrw chaining mode crypto: stm32/cryp - fix bugs and crash in tests crypto: stm32 - Revert broken pm_runtime_resume_and_get changes ath11k: Fix deleting uninitialized kernel timer during fragment cache flush ARM: dts: gemini: NAS4220-B: fis-index-block with 128 KiB sectors media: dw2102: Fix use after free media: msi001: fix possible null-ptr-deref in msi001_probe() media: coda/imx-vdoa: Handle dma_set_coherent_mask error codes ath11k: Fix a NULL pointer dereference in ath11k_mac_op_hw_scan() arm64: dts: qcom: c630: Fix soundcard setup arm64: dts: qcom: ipq6018: Fix gpio-ranges property drm/msm/dpu: fix safe status debugfs file drm/bridge: ti-sn65dsi86: Set max register for regmap drm/tegra: vic: Fix DMA API misuse media: hantro: Fix probe func error path xfrm: interface with if_id 0 should return error xfrm: state and policy should fail if XFRMA_IF_ID 0 ARM: 9159/1: decompressor: Avoid UNPREDICTABLE NOP encoding usb: ftdi-elan: fix memory leak on device disconnect arm64: dts: marvell: cn9130: add GPIO and SPI aliases arm64: dts: marvell: cn9130: enable CP0 GPIO controllers ARM: dts: armada-38x: Add generic compatible to UART nodes iwlwifi: mvm: fix 32-bit build in FTM iwlwifi: mvm: test roc running status bits before removing the sta mmc: meson-mx-sdhc: add IRQ check mmc: meson-mx-sdio: add IRQ check selinux: fix potential memleak in selinux_add_opt() um: fix ndelay/udelay defines um: virtio_uml: Fix time-travel external time propagation Bluetooth: L2CAP: Fix using wrong mode bpftool: Enable line buffering for stdout backlight: qcom-wled: Validate enabled string indices in DT backlight: qcom-wled: Pass number of elements to read to read_u32_array backlight: qcom-wled: Fix off-by-one maximum with default num_strings backlight: qcom-wled: Override default length with qcom,enabled-strings backlight: qcom-wled: Use cpu_to_le16 macro to perform conversion backlight: qcom-wled: Respect enabled-strings in set_brightness software node: fix wrong node passed to find nargs_prop Bluetooth: hci_qca: Stop IBS timer during BT OFF x86/boot/compressed: Move CLANG_FLAGS to beginning of KBUILD_CFLAGS hwmon: (mr75203) fix wrong power-up delay value x86/mce/inject: Avoid out-of-bounds write when setting flags ACPI: scan: Create platform device for BCM4752 and LNV4752 ACPI nodes pcmcia: rsrc_nonstatic: Fix a NULL pointer dereference in __nonstatic_find_io_region() pcmcia: rsrc_nonstatic: Fix a NULL pointer dereference in nonstatic_find_mem_region() power: reset: mt6397: Check for null res pointer netfilter: ipt_CLUSTERIP: fix refcount leak in clusterip_tg_check() bpf: Don't promote bogus looking registers after null check. bpf: Fix SO_RCVBUF/SO_SNDBUF handling in _bpf_setsockopt(). netfilter: nft_set_pipapo: allocate pcpu scratch maps on clone ppp: ensure minimum packet size in ppp_write() rocker: fix a sleeping in atomic bug staging: greybus: audio: Check null pointer fsl/fman: Check for null pointer after calling devm_ioremap Bluetooth: hci_bcm: Check for error irq Bluetooth: hci_qca: Fix NULL vs IS_ERR_OR_NULL check in qca_serdev_probe usb: dwc3: qcom: Fix NULL vs IS_ERR checking in dwc3_qcom_probe HID: hid-uclogic-params: Invalid parameter check in uclogic_params_init HID: hid-uclogic-params: Invalid parameter check in uclogic_params_get_str_desc HID: hid-uclogic-params: Invalid parameter check in uclogic_params_huion_init HID: hid-uclogic-params: Invalid parameter check in uclogic_params_frame_init_v1_buttonpad debugfs: lockdown: Allow reading debugfs files that are not world readable net/mlx5e: Fix page DMA map/unmap attributes net/mlx5e: Don't block routes with nexthop objects in SW Revert "net/mlx5e: Block offload of outer header csum for UDP tunnels" net/mlx5: Set command entry semaphore up once got index free lib/mpi: Add the return value check of kcalloc() Bluetooth: L2CAP: uninitialized variables in l2cap_sock_setsockopt() spi: spi-meson-spifc: Add missing pm_runtime_disable() in meson_spifc_probe ax25: uninitialized variable in ax25_setsockopt() netrom: fix api breakage in nr_setsockopt() regmap: Call regmap_debugfs_exit() prior to _init() can: mcp251xfd: add missing newline to printed strings tpm: add request_locality before write TPM_INT_ENABLE tpm_tis: Fix an error handling path in 'tpm_tis_core_init()' can: softing: softing_startstop(): fix set but not used variable warning can: xilinx_can: xcan_probe(): check for error irq pcmcia: fix setting of kthread task states iwlwifi: mvm: Use div_s64 instead of do_div in iwl_mvm_ftm_rtt_smoothing() net: mcs7830: handle usb read errors properly ext4: avoid trim error on fs with small groups ALSA: jack: Add missing rwsem around snd_ctl_remove() calls ALSA: PCM: Add missing rwsem around snd_ctl_remove() calls ALSA: hda: Add missing rwsem around snd_ctl_remove() calls RDMA/bnxt_re: Scan the whole bitmap when checking if "disabling RCFW with pending cmd-bit" RDMA/hns: Validate the pkey index scsi: pm80xx: Update WARN_ON check in pm8001_mpi_build_cmd() clk: imx8mn: Fix imx8mn_clko1_sels powerpc/prom_init: Fix improper check of prom_getprop() ASoC: uniphier: drop selecting non-existing SND_SOC_UNIPHIER_AIO_DMA dt-bindings: thermal: Fix definition of cooling-maps contribution property powerpc/64s: Convert some cpu_setup() and cpu_restore() functions to C powerpc/perf: MMCR0 control for PMU registers under PMCC=00 powerpc/perf: move perf irq/nmi handling details into traps.c powerpc/irq: Add helper to set regs->softe powerpc/perf: Fix PMU callbacks to clear pending PMI before resetting an overflown PMC powerpc/32s: Fix shift-out-of-bounds in KASAN init clocksource: Reduce clocksource-skew threshold clocksource: Avoid accidental unstable marking of clocksources ALSA: oss: fix compile error when OSS_DEBUG is enabled ALSA: usb-audio: Drop superfluous '0' in Presonus Studio 1810c's ID char/mwave: Adjust io port register size binder: fix handling of error during copy openrisc: Add clone3 ABI wrapper iommu/io-pgtable-arm: Fix table descriptor paddr formatting scsi: ufs: Fix race conditions related to driver data RDMA/qedr: Fix reporting max_{send/recv}_wr attrs PCI/MSI: Fix pci_irq_vector()/pci_irq_get_affinity() powerpc/powermac: Add additional missing lockdep_register_key() RDMA/core: Let ib_find_gid() continue search even after empty entry RDMA/cma: Let cma_resolve_ib_dev() continue search even after empty entry ASoC: rt5663: Handle device_property_read_u32_array error codes of: unittest: fix warning on PowerPC frame size warning of: unittest: 64 bit dma address test requires arch support clk: stm32: Fix ltdc's clock turn off by clk_disable_unused() after system enter shell mips: add SYS_HAS_CPU_MIPS64_R5 config for MIPS Release 5 support mips: fix Kconfig reference to PHYS_ADDR_T_64BIT dmaengine: pxa/mmp: stop referencing config->slave_id iommu/amd: Remove iommu_init_ga() iommu/amd: Restore GA log/tail pointer on host resume ASoC: Intel: catpt: Test dmaengine_submit() result before moving on iommu/iova: Fix race between FQ timeout and teardown scsi: block: pm: Always set request queue runtime active in blk_post_runtime_resume() phy: uniphier-usb3ss: fix unintended writing zeros to PHY register ASoC: mediatek: Check for error clk pointer ASoC: samsung: idma: Check of ioremap return value misc: lattice-ecp3-config: Fix task hung when firmware load failed counter: stm32-lptimer-cnt: remove iio counter abi arm64: tegra: Fix Tegra194 HDA {clock,reset}-names ordering arm64: tegra: Remove non existent Tegra194 reset mips: lantiq: add support for clk_set_parent() mips: bcm63xx: add support for clk_set_parent() powerpc/xive: Add missing null check after calling kmalloc ASoC: fsl_mqs: fix MODULE_ALIAS RDMA/cxgb4: Set queue pair state when being queried ASoC: fsl_asrc: refine the check of available clock divider clk: bm1880: remove kfrees on static allocations of: base: Fix phandle argument length mismatch error message ARM: dts: omap3-n900: Fix lp5523 for multi color Bluetooth: Fix debugfs entry leak in hci_register_dev() fs: dlm: filter user dlm messages for kernel locks drm/lima: fix warning when CONFIG_DEBUG_SG=y & CONFIG_DMA_API_DEBUG=y selftests/bpf: Fix bpf_object leak in skb_ctx selftest ar5523: Fix null-ptr-deref with unexpected WDCMSG_TARGET_START reply drm/bridge: dw-hdmi: handle ELD when DRM_BRIDGE_ATTACH_NO_CONNECTOR drm/nouveau/pmu/gm200-: avoid touching PMU outside of DEVINIT/PREOS/ACR media: atomisp: fix try_fmt logic media: atomisp: set per-device's default mode media: atomisp-ov2680: Fix ov2680_set_fmt() clobbering the exposure ARM: shmobile: rcar-gen2: Add missing of_node_put() batman-adv: allow netlink usage in unprivileged containers media: atomisp: handle errors at sh_css_create_isp_params() ath11k: Fix crash caused by uninitialized TX ring usb: gadget: f_fs: Use stream_open() for endpoint files drm: panel-orientation-quirks: Add quirk for the Lenovo Yoga Book X91F/L HID: apple: Do not reset quirks when the Fn key is not found media: b2c2: Add missing check in flexcop_pci_isr: EDAC/synopsys: Use the quirk for version instead of ddr version ARM: imx: rename DEBUG_IMX21_IMX27_UART to DEBUG_IMX27_UART drm/amd/display: check top_pipe_to_program pointer drm/amdgpu/display: set vblank_disable_immediate for DC soc: ti: pruss: fix referenced node in error message mlxsw: pci: Add shutdown method in PCI driver drm/bridge: megachips: Ensure both bridges are probed before registration tty: serial: imx: disable UCR4_OREN in .stop_rx() instead of .shutdown() gpiolib: acpi: Do not set the IRQ type if the IRQ is already in use HSI: core: Fix return freed object in hsi_new_client crypto: jitter - consider 32 LSB for APT mwifiex: Fix skb_over_panic in mwifiex_usb_recv() rsi: Fix use-after-free in rsi_rx_done_handler() rsi: Fix out-of-bounds read in rsi_read_pkt() ath11k: Avoid NULL ptr access during mgmt tx cleanup media: venus: avoid calling core_clk_setrate() concurrently during concurrent video sessions ACPI / x86: Drop PWM2 device on Lenovo Yoga Book from always present table ACPI: Change acpi_device_always_present() into acpi_device_override_status() ACPI / x86: Allow specifying acpi_device_override_status() quirks by path ACPI / x86: Add not-present quirk for the PCI0.SDHB.BRC1 device on the GPD win arm64: dts: ti: j7200-main: Fix 'dtbs_check' serdes_ln_ctrl node usb: uhci: add aspeed ast2600 uhci support floppy: Add max size check for user space request x86/mm: Flush global TLB when switching to trampoline page-table drm: rcar-du: Fix CRTC timings when CMM is used media: uvcvideo: Increase UVC_CTRL_CONTROL_TIMEOUT to 5 seconds. media: rcar-vin: Update format alignment constraints media: saa7146: hexium_orion: Fix a NULL pointer dereference in hexium_attach() media: m920x: don't use stack on USB reads thunderbolt: Runtime PM activate both ends of the device link iwlwifi: mvm: synchronize with FW after multicast commands iwlwifi: mvm: avoid clearing a just saved session protection id ath11k: avoid deadlock by change ieee80211_queue_work for regd_update_work ath10k: Fix tx hanging net-sysfs: update the queue counts in the unregistration path net: phy: prefer 1000baseT over 1000baseKX gpio: aspeed: Convert aspeed_gpio.lock to raw_spinlock selftests/ftrace: make kprobe profile testcase description unique ath11k: Avoid false DEADLOCK warning reported by lockdep x86/mce: Allow instrumentation during task work queueing x86/mce: Mark mce_panic() noinstr x86/mce: Mark mce_end() noinstr x86/mce: Mark mce_read_aux() noinstr net: bonding: debug: avoid printing debug logs when bond is not notifying peers bpf: Do not WARN in bpf_warn_invalid_xdp_action() HID: quirks: Allow inverting the absolute X/Y values media: igorplugusb: receiver overflow should be reported media: saa7146: hexium_gemini: Fix a NULL pointer dereference in hexium_attach() mmc: core: Fixup storing of OCR for MMC_QUIRK_NONSTD_SDIO audit: ensure userspace is penalized the same as the kernel when under pressure arm64: dts: ls1028a-qds: move rtc node to the correct i2c bus arm64: tegra: Adjust length of CCPLEX cluster MMIO region PM: runtime: Add safety net to supplier device release cpufreq: Fix initialization of min and max frequency QoS requests usb: hub: Add delay for SuperSpeed hub resume to let links transit to U0 ath9k: Fix out-of-bound memcpy in ath9k_hif_usb_rx_stream rtw88: 8822c: update rx settings to prevent potential hw deadlock PM: AVS: qcom-cpr: Use div64_ul instead of do_div iwlwifi: fix leaks/bad data after failed firmware load iwlwifi: remove module loading failure message iwlwifi: mvm: Fix calculation of frame length iwlwifi: pcie: make sure prph_info is set when treating wakeup IRQ um: registers: Rename function names to avoid conflicts and build problems ath11k: Fix napi related hang Bluetooth: vhci: Set HCI_QUIRK_VALID_LE_STATES xfrm: rate limit SA mapping change message to user space drm/etnaviv: consider completed fence seqno in hang check jffs2: GC deadlock reading a page that is used in jffs2_write_begin() ACPICA: actypes.h: Expand the ACPI_ACCESS_ definitions ACPICA: Utilities: Avoid deleting the same object twice in a row ACPICA: Executer: Fix the REFCLASS_REFOF case in acpi_ex_opcode_1A_0T_1R() ACPICA: Fix wrong interpretation of PCC address ACPICA: Hardware: Do not flush CPU cache when entering S4 and S5 drm/amdgpu: fixup bad vram size on gmc v8 amdgpu/pm: Make sysfs pm attributes as read-only for VFs ACPI: battery: Add the ThinkPad "Not Charging" quirk btrfs: remove BUG_ON() in find_parent_nodes() btrfs: remove BUG_ON(!eie) in find_parent_nodes net: mdio: Demote probed message to debug print mac80211: allow non-standard VHT MCS-10/11 dm btree: add a defensive bounds check to insert_at() dm space map common: add bounds check to sm_ll_lookup_bitmap() mlxsw: pci: Avoid flow control for EMAD packets net: phy: marvell: configure RGMII delays for 88E1118 net: gemini: allow any RGMII interface mode regulator: qcom_smd: Align probe function with rpmh-regulator serial: pl010: Drop CR register reset on set_termios serial: core: Keep mctrl register state and cached copy in sync random: do not throw away excess input to crng_fast_load parisc: Avoid calling faulthandler_disabled() twice x86/kbuild: Enable CONFIG_KALLSYMS_ALL=y in the defconfigs powerpc/6xx: add missing of_node_put powerpc/powernv: add missing of_node_put powerpc/cell: add missing of_node_put powerpc/btext: add missing of_node_put powerpc/watchdog: Fix missed watchdog reset due to memory ordering race i2c: i801: Don't silently correct invalid transfer size powerpc/smp: Move setup_profiling_timer() under CONFIG_PROFILING i2c: mpc: Correct I2C reset procedure clk: meson: gxbb: Fix the SDM_EN bit for MPLL0 on GXBB powerpc/powermac: Add missing lockdep_register_key() KVM: PPC: Book3S: Suppress warnings when allocating too big memory slots KVM: PPC: Book3S: Suppress failed alloc warning in H_COPY_TOFROM_GUEST w1: Misuse of get_user()/put_user() reported by sparse nvmem: core: set size for sysfs bin file dm: fix alloc_dax error handling in alloc_dev scsi: lpfc: Trigger SLI4 firmware dump before doing driver cleanup ALSA: seq: Set upper limit of processed events MIPS: Loongson64: Use three arguments for slti powerpc/40x: Map 32Mbytes of memory at startup selftests/powerpc/spectre_v2: Return skip code when miss_percent is high powerpc: handle kdump appropriately with crash_kexec_post_notifiers option powerpc/fadump: Fix inaccurate CPU state info in vmcore generated with panic udf: Fix error handling in udf_new_inode() MIPS: OCTEON: add put_device() after of_find_device_by_node() irqchip/gic-v4: Disable redistributors' view of the VPE table at boot time i2c: designware-pci: Fix to change data types of hcnt and lcnt parameters MIPS: Octeon: Fix build errors using clang scsi: sr: Don't use GFP_DMA ASoC: mediatek: mt8173: fix device_node leak ASoC: mediatek: mt8183: fix device_node leak phy: mediatek: Fix missing check in mtk_mipi_tx_probe rpmsg: core: Clean up resources on announce_create failure. crypto: omap-aes - Fix broken pm_runtime_and_get() usage crypto: stm32/crc32 - Fix kernel BUG triggered in probe() crypto: caam - replace this_cpu_ptr with raw_cpu_ptr ubifs: Error path in ubifs_remount_rw() seems to wrongly free write buffers tpm: fix NPE on probe for missing device spi: uniphier: Fix a bug that doesn't point to private data correctly xen/gntdev: fix unmap notification order fuse: Pass correct lend value to filemap_write_and_wait_range() serial: Fix incorrect rs485 polarity on uart open cputime, cpuacct: Include guest time in user time in cpuacct.stat tracing/kprobes: 'nmissed' not showed correctly for kretprobe iwlwifi: mvm: Increase the scan timeout guard to 30 seconds s390/mm: fix 2KB pgtable release race device property: Fix fwnode_graph_devcon_match() fwnode leak drm/etnaviv: limit submit sizes drm/nouveau/kms/nv04: use vzalloc for nv04_display drm/bridge: analogix_dp: Make PSR-exit block less parisc: Fix lpa and lpa_user defines powerpc/64s/radix: Fix huge vmap false positive PCI: xgene: Fix IB window setup PCI: pciehp: Use down_read/write_nested(reset_lock) to fix lockdep errors PCI: pci-bridge-emul: Make expansion ROM Base Address register read-only PCI: pci-bridge-emul: Properly mark reserved PCIe bits in PCI config space PCI: pci-bridge-emul: Fix definitions of reserved bits PCI: pci-bridge-emul: Correctly set PCIe capabilities PCI: pci-bridge-emul: Set PCI_STATUS_CAP_LIST for PCIe device xfrm: fix policy lookup for ipv6 gre packets btrfs: fix deadlock between quota enable and other quota operations btrfs: check the root node for uptodate before returning it btrfs: respect the max size in the header when activating swap file ext4: make sure to reset inode lockdep class when quota enabling fails ext4: make sure quota gets properly shutdown on error ext4: fix a possible ABBA deadlock due to busy PA ext4: initialize err_blk before calling __ext4_get_inode_loc ext4: fix fast commit may miss tracking range for FALLOC_FL_ZERO_RANGE ext4: set csum seed in tmp inode while migrating to extents ext4: Fix BUG_ON in ext4_bread when write quota data ext4: use ext4_ext_remove_space() for fast commit replay delete range ext4: fast commit may miss tracking unwritten range during ftruncate ext4: destroy ext4_fc_dentry_cachep kmemcache on module removal ext4: fix null-ptr-deref in '__ext4_journal_ensure_credits' ext4: don't use the orphan list when migrating an inode drm/radeon: fix error handling in radeon_driver_open_kms of: base: Improve argument length mismatch error firmware: Update Kconfig help text for Google firmware can: mcp251xfd: mcp251xfd_tef_obj_read(): fix typo in error message media: rcar-csi2: Optimize the selection PHTW register drm/vc4: hdmi: Make sure the device is powered with CEC media: correct MEDIA_TEST_SUPPORT help text Documentation: dmaengine: Correctly describe dmatest with channel unset Documentation: ACPI: Fix data node reference documentation Documentation: refer to config RANDOMIZE_BASE for kernel address-space randomization Documentation: fix firewire.rst ABI file path error Bluetooth: hci_sync: Fix not setting adv set duration scsi: core: Show SCMD_LAST in text form dmaengine: uniphier-xdmac: Fix type of address variables RDMA/hns: Modify the mapping attribute of doorbell to device RDMA/rxe: Fix a typo in opcode name dmaengine: stm32-mdma: fix STM32_MDMA_CTBR_TSEL_MASK Revert "net/mlx5: Add retry mechanism to the command entry index allocation" powerpc/cell: Fix clang -Wimplicit-fallthrough warning powerpc/fsl/dts: Enable WA for erratum A-009885 on fman3l MDIO buses block: Fix fsync always failed if once failed bpftool: Remove inclusion of utilities.mak from Makefiles xdp: check prog type before updating BPF link perf evsel: Override attr->sample_period for non-libpfm4 events ipv4: update fib_info_cnt under spinlock protection ipv4: avoid quadratic behavior in netns dismantle net/fsl: xgmac_mdio: Add workaround for erratum A-009885 net/fsl: xgmac_mdio: Fix incorrect iounmap when removing module parisc: pdc_stable: Fix memory leak in pdcs_register_pathentries f2fs: compress: fix potential deadlock of compress file f2fs: fix to reserve space for IO align feature af_unix: annote lockless accesses to unix_tot_inflight & gc_in_progress clk: Emit a stern warning with writable debugfs enabled clk: si5341: Fix clock HW provider cleanup net/smc: Fix hung_task when removing SMC-R devices net: axienet: increase reset timeout net: axienet: Wait for PhyRstCmplt after core reset net: axienet: reset core on initialization prior to MDIO access net: axienet: add missing memory barriers net: axienet: limit minimum TX ring size net: axienet: Fix TX ring slot available check net: axienet: fix number of TX ring slots for available check net: axienet: fix for TX busy handling net: axienet: increase default TX ring size to 128 HID: vivaldi: fix handling devices not using numbered reports rtc: pxa: fix null pointer dereference vdpa/mlx5: Fix wrong configuration of virtio_version_1_0 virtio_ring: mark ring unused on error taskstats: Cleanup the use of task->exit_code inet: frags: annotate races around fqdir->dead and fqdir->high_thresh netns: add schedule point in ops_exit_list() xfrm: Don't accidentally set RTO_ONLINK in decode_session4() gre: Don't accidentally set RTO_ONLINK in gre_fill_metadata_dst() libcxgb: Don't accidentally set RTO_ONLINK in cxgb_find_route() perf script: Fix hex dump character output dmaengine: at_xdmac: Don't start transactions at tx_submit level dmaengine: at_xdmac: Start transfer for cyclic channels in issue_pending dmaengine: at_xdmac: Print debug message after realeasing the lock dmaengine: at_xdmac: Fix concurrency over xfers_list dmaengine: at_xdmac: Fix lld view setting dmaengine: at_xdmac: Fix at_xdmac_lld struct definition perf probe: Fix ppc64 'perf probe add events failed' case devlink: Remove misleading internal_flags from health reporter dump arm64: dts: qcom: msm8996: drop not documented adreno properties net: bonding: fix bond_xmit_broadcast return value error bug net_sched: restore "mpu xxx" handling bcmgenet: add WOL IRQ check net: ethernet: mtk_eth_soc: fix error checking in mtk_mac_config() net: sfp: fix high power modules without diagnostic monitoring net: mscc: ocelot: fix using match before it is set dt-bindings: display: meson-dw-hdmi: add missing sound-name-prefix property dt-bindings: display: meson-vpu: Add missing amlogic,canvas property dt-bindings: watchdog: Require samsung,syscon-phandle for Exynos7 scripts/dtc: dtx_diff: remove broken example from help text lib82596: Fix IRQ check in sni_82596_probe mm/hmm.c: allow VM_MIXEDMAP to work with hmm_range_fault lib/test_meminit: destroy cache in kmem_cache_alloc_bulk() test mtd: nand: bbt: Fix corner case in bad block table handling ath10k: Fix the MTU size on QCA9377 SDIO scripts: sphinx-pre-install: add required ctex dependency scripts: sphinx-pre-install: Fix ctex support on Debian Linux 5.10.94 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I857f2417c899508815a1ba13d1285fd400a1f133	2022-01-27 11:49:22 +01:00
Stephan Müller	8a6371d84c	crypto: jitter - consider 32 LSB for APT ... [ Upstream commit 552d03a223eda3df84526ab2c1f4d82e15eaee7a ] The APT compares the current time stamp with a pre-set value. The current code only considered the 4 LSB only. Yet, after reviews by mathematicians of the user space Jitter RNG version >= 3.1.0, it was concluded that the APT can be calculated on the 32 LSB of the time delta. Thi change is applied to the kernel. This fixes a bug where an AMD EPYC fails this test as its RDTSC value contains zeros in the LSB. The most appropriate fix would have been to apply a GCD calculation and divide the time stamp by the GCD. Yet, this is a significant code change that will be considered for a future update. Note, tests showed that constantly the GCD always was 32 on these systems, i.e. the 5 LSB were always zero (thus failing the APT since it only considered the 4 LSB for its calculation). Signed-off-by: Stephan Mueller <smueller@chronox.de> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-01-27 10:54:12 +01:00
Greg Kroah-Hartman	bc8ae0e2af	Merge branch 'android12-5.10' into android12-5.10-lts ... Sync up with android12-5.10 for the following commits: 32432740cd ANDROID: GKI: Add symbols abi for USB IP kernel modules. c27d7f71b5 ANDROID: GKI: Fix file mode on mtk abi file ca9ee53cea UPSTREAM: erofs: fix deadlock when shrink erofs slab 898e7ec950 ANDROID: init_task: Init android vendor and oem data 3c54070823 UPSTREAM: sched/core: Mitigate race cpus_share_cache()/update_top_cache_domain() f0a7e5394b ANDROID: Update symbol list for mtk b943d32888 UPSTREAM: erofs: fix unsafe pagevec reuse of hooked pclusters 028f7128c4 UPSTREAM: erofs: remove the occupied parameter from z_erofs_pagevec_enqueue() 504b13fb83 UPSTREAM: usb: dwc3: gadget: Fix null pointer exception 143ac63130 ANDROID: fips140: support "evaluation testing" builds via build.sh cbd64e25c2 FROMGIT: sched/scs: Reset task stack state in bringup_cpu() 3ed40fb65a ANDROID: dma-buf: heaps: fix dma-buf heap pool pages stat 851990cc99 ANDROID: ABI: Add several spi_mem related symbols be30f0ce33 UPSTREAM: spi: spi-mem: add spi_mem_dtr_supports_op() e5dfa89138 ANDROID: gki_defconfig: enable CONFIG_SPI_MEM bb18be4257 ANDROID: ABI: Add several iio related symbols 1407b7e124 ANDROID: ABI: Update symbol list for IMX 575a552ac7 ANDROID: usb: gadget: f_accessory: Mitgate handling of non-existent USB request 376046be3b ANDROID: GKI: fix up abi break in ehci code bf13278d66 UPSTREAM: usb: ehci: handshake CMD_RUN instead of STS_HALT c3c2bb34ac ANDROID: arm64/mm: Add command line option to make ZONE_DMA32 empty f8f6c7332b ANDROID: GKI: Add newly added vendor hook to abi symbol list 109f31ac23 ANDROID: fips140: add userspace interface for evaluation testing 97fb2104fe ANDROID: fips140: add support for injecting integrity error 903e97a0ca ANDROID: fips140: refactor evaluation testing support 53a812c6bb ANDROID: sched: add hook point in do_sched_yield() 00d29953bb ANDROID: GKI: Update symbols to symbol list 7a069c6071 FROMGIT: usb: gadget: f_fs: Use stream_open() for endpoint files Due to api additions in android12-5.10, this also adds more api symbols to track: Leaf changes summary: 44 artifacts changed Changed leaf types summary: 0 leaf type changed Removed/Changed/Added functions summary: 0 Removed, 0 Changed, 38 Added functions Removed/Changed/Added variables summary: 0 Removed, 0 Changed, 6 Added variables 38 Added functions: [A] 'function int __traceiter_android_rvh_binder_transaction(void*, binder_proc*, binder_proc*, binder_thread*, binder_transaction_data*)' [A] 'function int __traceiter_android_rvh_do_sched_yield(void*, rq*)' [A] 'function int __traceiter_android_vh_binder_del_ref(void*, task_struct*, uint32_t)' [A] 'function int __traceiter_android_vh_binder_new_ref(void*, task_struct*, uint32_t, int)' [A] 'function int __traceiter_android_vh_binder_proc_transaction(void*, task_struct*, task_struct*, task_struct*, int, unsigned int, bool)' [A] 'function i3c_device* dev_to_i3cdev(device*)' [A] 'function spi_mem_dirmap_desc* devm_spi_mem_dirmap_create(device*, spi_mem*, const spi_mem_dirmap_info*)' [A] 'function int genphy_restart_aneg(phy_device*)' [A] 'function const i3c_device_id* i3c_device_match_id(i3c_device*, const i3c_device_id*)' [A] 'function int iio_device_claim_direct_mode(iio_dev*)' [A] 'function void iio_device_release_direct_mode(iio_dev*)' [A] 'function int iio_push_event(iio_dev*, u64, s64)' [A] 'function int iio_read_mount_matrix(device*, const char*, iio_mount_matrix*)' [A] 'function ssize_t iio_show_mount_matrix(iio_dev*, uintptr_t, const iio_chan_spec*, char*)' [A] 'function int kernel_sock_shutdown(socket*, sock_shutdown_cmd)' [A] 'function int kill_pid(pid*, int, int)' [A] 'function bool kthread_freezable_should_stop(bool*)' [A] 'function int phy_modify_mmd(phy_device*, int, u32, u16, u16)' [A] 'function int snd_interval_ranges(snd_interval*, unsigned int, const snd_interval*, unsigned int)' [A] 'function int snd_pcm_hw_constraint_ratnums(snd_pcm_runtime*, unsigned int, snd_pcm_hw_param_t, const snd_pcm_hw_constraint_ratnums*)' [A] 'function int snd_soc_limit_volume(snd_soc_card*, const char*, int)' [A] 'function int sock_recvmsg(socket*, msghdr*, int)' [A] 'function socket* sockfd_lookup(int, int*)' [A] 'function const spi_device_id* spi_get_device_id(const spi_device*)' [A] 'function int spi_mem_adjust_op_size(spi_mem*, spi_mem_op*)' [A] 'function bool spi_mem_default_supports_op(spi_mem*, const spi_mem_op*)' [A] 'function ssize_t spi_mem_dirmap_read(spi_mem_dirmap_desc*, u64, size_t, void*)' [A] 'function ssize_t spi_mem_dirmap_write(spi_mem_dirmap_desc*, u64, size_t, void*)' [A] 'function int spi_mem_driver_register_with_owner(spi_mem_driver*, module*)' [A] 'function void spi_mem_driver_unregister(spi_mem_driver*)' [A] 'function bool spi_mem_dtr_supports_op(spi_mem*, const spi_mem_op*)' [A] 'function int spi_mem_exec_op(spi_mem*, const spi_mem_op*)' [A] 'function const char* spi_mem_get_name(spi_mem*)' [A] 'function bool spi_mem_supports_op(spi_mem*, const spi_mem_op*)' [A] 'function void touchscreen_parse_properties(input_dev*, bool, touchscreen_properties*)' [A] 'function void touchscreen_report_pos(input_dev*, const touchscreen_properties*, unsigned int, unsigned int, bool)' [A] 'function int trace_set_clr_event(const char*, const char*, int)' [A] 'function int vsscanf(const char*, const char*, va_list)' 6 Added variables: [A] 'tracepoint __tracepoint_android_rvh_binder_transaction' [A] 'tracepoint __tracepoint_android_rvh_do_sched_yield' [A] 'tracepoint __tracepoint_android_vh_binder_del_ref' [A] 'tracepoint __tracepoint_android_vh_binder_new_ref' [A] 'tracepoint __tracepoint_android_vh_binder_proc_transaction' [A] 'device platform_bus' Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I6de103b0d75261c17c11454051e2559bb6d1eecf	2021-12-03 11:46:34 +01:00
Eric Biggers	109f31ac23	ANDROID: fips140: add userspace interface for evaluation testing ... The FIPS lab is required to test the service indicators and version information services of the module, i.e. the fips140_is_approved_service() and fips140_module_version() functions. There are several ways we could support this: - Implement the tests in the module ourselves. However it's unclear that CMVP would allow this, and we would need the full list of tests, which could change over time depending on what the lab decides to do. - Support the lab writing, building, and loading a custom kernel module (or a custom kernel image) that tests these functions. - Provide a userspace interface to these services, restricted to builds with CONFIG_CRYPTO_FIPS140_MOD_EVAL_TESTING=y. This would allow writing the tests in userspace, which would be much easier. Implement the last solution, since it's the easier of the two solutions that are "guaranteed" to be allowed. Make the module register a char device which supports some ioctls, one per function that needs to be tested. Also provide some sample userspace code in samples/crypto/. Note: copy_to_user() would break the integrity check, so take some care to exclude it. This is allowed since this is non-production code. Bug: 188620248 Change-Id: Ic256d9c5bd4d0c57ede88a3e3e76e89554909b38 Signed-off-by: Eric Biggers <ebiggers@google.com>	2021-11-23 18:02:43 +00:00
Eric Biggers	97fb2104fe	ANDROID: fips140: add support for injecting integrity error ... The lab is required to test injecting an integrity error, so add a module parameter fail_integrity_check=1 which does this. This parameter is only supported when CONFIG_CRYPTO_FIPS140_MOD_EVAL_TESTING=y. Bug: 188620248 Change-Id: I1f3683837706dc1df2755ca5b6e88f21f7956135 Signed-off-by: Eric Biggers <ebiggers@google.com>	2021-11-23 18:02:33 +00:00
Eric Biggers	903e97a0ca	ANDROID: fips140: refactor evaluation testing support ... It turns out that we have to add more code to the module to support lab evaluation testing, beyond the error injection support we currently have. Therefore, rename CONFIG_CRYPTO_FIPS140_MOD_ERROR_INJECTION to CONFIG_CRYPTO_FIPS140_MOD_EVAL_TESTING, and move the relevant code into a new file fips140-eval-testing.c which is conditionally compiled. Also rename the "broken_alg" module parameter to "fail_selftest" so that it is similar to "fail_integrity_check" which we'll be adding. Bug: 188620248 Change-Id: I01bcbf7525690e277854ba4ed8dd89e7cd08d98e Signed-off-by: Eric Biggers <ebiggers@google.com>	2021-11-23 18:02:24 +00:00
Greg Kroah-Hartman	c553d9a246	This is the 5.10.80 stable release ... -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmGWT+QACgkQONu9yGCS aT5mYw//ZXKzugaeJjuIaFqr7tcM7x8EefbKd2H4oMr8SW3IFElJIbNPJGMJAG/C tLZVWZvIum7QzZoxTL+JCCKpDzBERNTo4e5u7UwzAdVqiEX69YkNU0FBOzb4qXJ7 gOZMBhy4UMIKdKD12CSXXf7ZspocsNXfzdmulRQ7CQcPoPrIMKpc4vuagN1Fy/Dz JgXYvRUAkLxtFHoQ/TeXvR4Gv9+w2ToMdb02mI48QBO+YYrFaGt+Rza2eHTv75H+ Lydz37Nv1Pk32tA1q2jWxCzz16+Kzn+AviKiCfQK0Fb9IqnJksUIWLHSiODlVIcf kQHejanPn/p1BnBl8puPk1KFtDW45p2GwYhXG7hjGh08DGlR7QLHBS5Aa3xPYfdd uOy4ctygSVTx5nLjPH5vr3OE0wk/TuSSf/eyk2fmcUCspwAgBOnSYSmnJOem7LTK VqIgXFdCRplsqN415D35ddruP2BLCKqBu4KjwJ1LGIwgsx/Pmz4hlc5YcpLm8uRg XMqGTdcieQFOGmZJjJ2q3ecaCjfb0nmTrOylP5b55/74TFwFo042YR1ua0fEtpD4 euoHLfYv3BY1dCp34TOUFGX0l+J1kAtf//vfD/JgJx/nX+ksdFBHhYwdbSi2oQG/ 9CceXYJ5duEnG+JmDOWJvcZ3T49K5XaIDNfY2zGpcSu1VZKubWg= =tQ0m -----END PGP SIGNATURE----- Merge 5.10.80 into android12-5.10-lts Changes in 5.10.80 xhci: Fix USB 3.1 enumeration issues by increasing roothub power-on-good delay usb: xhci: Enable runtime-pm by default on AMD Yellow Carp platform binder: use euid from cred instead of using task binder: use cred instead of task for selinux checks binder: use cred instead of task for getsecid Input: iforce - fix control-message timeout Input: elantench - fix misreporting trackpoint coordinates Input: i8042 - Add quirk for Fujitsu Lifebook T725 libata: fix read log timeout value ocfs2: fix data corruption on truncate scsi: core: Remove command size deduction from scsi_setup_scsi_cmnd() scsi: qla2xxx: Fix kernel crash when accessing port_speed sysfs file scsi: qla2xxx: Fix use after free in eh_abort path mmc: mtk-sd: Add wait dma stop done flow mmc: dw_mmc: Dont wait for DRTO on Write RSP error exfat: fix incorrect loading of i_blocks for large files parisc: Fix set_fixmap() on PA1.x CPUs parisc: Fix ptrace check on syscall return tpm: Check for integer overflow in tpm2_map_response_body() firmware/psci: fix application of sizeof to pointer crypto: s5p-sss - Add error handling in s5p_aes_probe() media: rkvdec: Do not override sizeimage for output format media: ite-cir: IR receiver stop working after receive overflow media: rkvdec: Support dynamic resolution changes media: ir-kbd-i2c: improve responsiveness of hauppauge zilog receivers media: v4l2-ioctl: Fix check_ext_ctrls ALSA: hda/realtek: Fix mic mute LED for the HP Spectre x360 14 ALSA: hda/realtek: Add a quirk for HP OMEN 15 mute LED ALSA: hda/realtek: Add quirk for Clevo PC70HS ALSA: hda/realtek: Headset fixup for Clevo NH77HJQ ALSA: hda/realtek: Add a quirk for Acer Spin SP513-54N ALSA: hda/realtek: Add quirk for ASUS UX550VE ALSA: hda/realtek: Add quirk for HP EliteBook 840 G7 mute LED ALSA: ua101: fix division by zero at probe ALSA: 6fire: fix control and bulk message timeouts ALSA: line6: fix control and interrupt message timeouts ALSA: usb-audio: Line6 HX-Stomp XL USB_ID for 48k-fixed quirk ALSA: usb-audio: Add registration quirk for JBL Quantum 400 ALSA: hda: Free card instance properly at probe errors ALSA: synth: missing check for possible NULL after the call to kstrdup ALSA: timer: Fix use-after-free problem ALSA: timer: Unconditionally unlink slave instances, too ext4: fix lazy initialization next schedule time computation in more granular unit ext4: ensure enough credits in ext4_ext_shift_path_extents ext4: refresh the ext4_ext_path struct after dropping i_data_sem. fuse: fix page stealing x86/sme: Use #define USE_EARLY_PGTABLE_L5 in mem_encrypt_identity.c x86/cpu: Fix migration safety with X86_BUG_NULL_SEL x86/irq: Ensure PI wakeup handler is unregistered before module unload ASoC: soc-core: fix null-ptr-deref in snd_soc_del_component_unlocked() ALSA: hda/realtek: Fixes HP Spectre x360 15-eb1xxx speakers cavium: Return negative value when pci_alloc_irq_vectors() fails scsi: qla2xxx: Return -ENOMEM if kzalloc() fails scsi: qla2xxx: Fix unmap of already freed sgl mISDN: Fix return values of the probe function cavium: Fix return values of the probe function sfc: Export fibre-specific supported link modes sfc: Don't use netif_info before net_device setup hyperv/vmbus: include linux/bitops.h ARM: dts: sun7i: A20-olinuxino-lime2: Fix ethernet phy-mode reset: socfpga: add empty driver allowing consumers to probe mmc: winbond: don't build on M68K drm: panel-orientation-quirks: Add quirk for Aya Neo 2021 fcnal-test: kill hanging ping/nettest binaries on cleanup bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT bpf: Prevent increasing bpf_jit_limit above max gpio: mlxbf2.c: Add check for bgpio_init failure xen/netfront: stop tx queues during live migration nvmet-tcp: fix a memory leak when releasing a queue spi: spl022: fix Microwire full duplex mode net: multicast: calculate csum of looped-back and forwarded packets watchdog: Fix OMAP watchdog early handling drm: panel-orientation-quirks: Add quirk for GPD Win3 block: schedule queue restart after BLK_STS_ZONE_RESOURCE nvmet-tcp: fix header digest verification r8169: Add device 10ec:8162 to driver r8169 vmxnet3: do not stop tx queues after netif_device_detach() nfp: bpf: relax prog rejection for mtu check through max_pkt_offset net/smc: Fix smc_link->llc_testlink_time overflow net/smc: Correct spelling mistake to TCPF_SYN_RECV rds: stop using dmapool btrfs: clear MISSING device status bit in btrfs_close_one_device btrfs: fix lost error handling when replaying directory deletes btrfs: call btrfs_check_rw_degradable only if there is a missing device KVM: VMX: Unregister posted interrupt wakeup handler on hardware unsetup ia64: kprobes: Fix to pass correct trampoline address to the handler selinux: fix race condition when computing ocontext SIDs hwmon: (pmbus/lm25066) Add offset coefficients regulator: s5m8767: do not use reset value as DVS voltage if GPIO DVS is disabled regulator: dt-bindings: samsung,s5m8767: correct s5m8767,pmic-buck-default-dvs-idx property EDAC/sb_edac: Fix top-of-high-memory value for Broadwell/Haswell mwifiex: fix division by zero in fw download path ath6kl: fix division by zero in send path ath6kl: fix control-message timeout ath10k: fix control-message timeout ath10k: fix division by zero in send path PCI: Mark Atheros QCA6174 to avoid bus reset rtl8187: fix control-message timeouts evm: mark evm_fixmode as __ro_after_init ifb: Depend on netfilter alternatively to tc wcn36xx: Fix HT40 capability for 2Ghz band wcn36xx: Fix tx_status mechanism wcn36xx: Fix (QoS) null data frame bitrate/modulation PM: sleep: Do not let "syscore" devices runtime-suspend during system transitions mwifiex: Read a PCI register after writing the TX ring write pointer mwifiex: Try waking the firmware until we get an interrupt libata: fix checking of DMA state wcn36xx: handle connection loss indication rsi: fix occasional initialisation failure with BT coex rsi: fix key enabled check causing unwanted encryption for vap_id > 0 rsi: fix rate mask set leading to P2P failure rsi: Fix module dev_oper_mode parameter description perf/x86/intel/uncore: Support extra IMC channel on Ice Lake server perf/x86/intel/uncore: Fix Intel ICX IIO event constraints RDMA/qedr: Fix NULL deref for query_qp on the GSI QP signal: Remove the bogus sigkill_pending in ptrace_stop memory: renesas-rpc-if: Correct QSPI data transfer in Manual mode signal/mips: Update (_save|_restore)_fp_context to fail with -EFAULT soc: fsl: dpio: replace smp_processor_id with raw_smp_processor_id soc: fsl: dpio: use the combined functions to protect critical zone mtd: rawnand: socrates: Keep the driver compatible with on-die ECC engines power: supply: max17042_battery: Prevent int underflow in set_soc_threshold power: supply: max17042_battery: use VFSOC for capacity when no rsns KVM: arm64: Extract ESR_ELx.EC only KVM: nVMX: Query current VMCS when determining if MSR bitmaps are in use can: j1939: j1939_tp_cmd_recv(): ignore abort message in the BAM transport can: j1939: j1939_can_recv(): ignore messages with invalid source address powerpc/85xx: Fix oops when mpc85xx_smp_guts_ids node cannot be found ring-buffer: Protect ring_buffer_reset() from reentrancy serial: core: Fix initializing and restoring termios speed ifb: fix building without CONFIG_NET_CLS_ACT ALSA: mixer: oss: Fix racy access to slots ALSA: mixer: fix deadlock in snd_mixer_oss_set_volume xen/balloon: add late_initcall_sync() for initial ballooning done ovl: fix use after free in struct ovl_aio_req PCI: pci-bridge-emul: Fix emulation of W1C bits PCI: cadence: Add cdns_plat_pcie_probe() missing return PCI: aardvark: Do not clear status bits of masked interrupts PCI: aardvark: Fix checking for link up via LTSSM state PCI: aardvark: Do not unmask unused interrupts PCI: aardvark: Fix reporting Data Link Layer Link Active PCI: aardvark: Fix configuring Reference clock PCI: aardvark: Fix return value of MSI domain .alloc() method PCI: aardvark: Read all 16-bits from PCIE_MSI_PAYLOAD_REG PCI: aardvark: Fix support for bus mastering and PCI_COMMAND on emulated bridge PCI: aardvark: Fix support for PCI_BRIDGE_CTL_BUS_RESET on emulated bridge PCI: aardvark: Set PCI Bridge Class Code to PCI Bridge PCI: aardvark: Fix support for PCI_ROM_ADDRESS1 on emulated bridge quota: check block number when reading the block in quota file quota: correct error number in free_dqentry() pinctrl: core: fix possible memory leak in pinctrl_enable() coresight: cti: Correct the parameter for pm_runtime_put iio: dac: ad5446: Fix ad5622_write() return value iio: ad5770r: make devicetree property reading consistent USB: serial: keyspan: fix memleak on probe errors serial: 8250: fix racy uartclk update most: fix control-message timeouts USB: iowarrior: fix control-message timeouts USB: chipidea: fix interrupt deadlock power: supply: max17042_battery: Clear status bits in interrupt handler dma-buf: WARN on dmabuf release with pending attachments drm: panel-orientation-quirks: Update the Lenovo Ideapad D330 quirk (v2) drm: panel-orientation-quirks: Add quirk for KD Kurio Smart C15200 2-in-1 drm: panel-orientation-quirks: Add quirk for the Samsung Galaxy Book 10.6 Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg() Bluetooth: fix use-after-free error in lock_sock_nested() drm/panel-orientation-quirks: add Valve Steam Deck rcutorture: Avoid problematic critical section nesting on PREEMPT_RT platform/x86: wmi: do not fail if disabling fails MIPS: lantiq: dma: add small delay after reset MIPS: lantiq: dma: reset correct number of channel locking/lockdep: Avoid RCU-induced noinstr fail net: sched: update default qdisc visibility after Tx queue cnt changes rcu-tasks: Move RTGS_WAIT_CBS to beginning of rcu_tasks_kthread() loop smackfs: Fix use-after-free in netlbl_catmap_walk() ath11k: Align bss_chan_info structure with firmware x86: Increase exception stack sizes mwifiex: Run SET_BSS_MODE when changing from P2P to STATION vif-type mwifiex: Properly initialize private structure on interface type changes fscrypt: allow 256-bit master keys with AES-256-XTS drm/amdgpu: Fix MMIO access page fault ath11k: Avoid reg rules update during firmware recovery ath11k: add handler for scan event WMI_SCAN_EVENT_DEQUEUED ath11k: Change DMA_FROM_DEVICE to DMA_TO_DEVICE when map reinjected packets ath10k: high latency fixes for beacon buffer media: mt9p031: Fix corrupted frame after restarting stream media: netup_unidvb: handle interrupt properly according to the firmware media: atomisp: Fix error handling in probe media: stm32: Potential NULL pointer dereference in dcmi_irq_thread() media: uvcvideo: Set capability in s_param media: uvcvideo: Return -EIO for control errors media: uvcvideo: Set unique vdev name based in type media: s5p-mfc: fix possible null-pointer dereference in s5p_mfc_probe() media: s5p-mfc: Add checking to s5p_mfc_probe(). media: imx: set a media_device bus_info string media: mceusb: return without resubmitting URB in case of -EPROTO error. ia64: don't do IA64_CMPXCHG_DEBUG without CONFIG_PRINTK rtw88: fix RX clock gate setting while fifo dump brcmfmac: Add DMI nvram filename quirk for Cyberbook T116 tablet media: rcar-csi2: Add checking to rcsi2_start_receiver() ipmi: Disable some operations during a panic fs/proc/uptime.c: Fix idle time reporting in /proc/uptime ACPICA: Avoid evaluating methods too early during system resume media: ipu3-imgu: imgu_fmt: Handle properly try media: ipu3-imgu: VIDIOC_QUERYCAP: Fix bus_info media: usb: dvd-usb: fix uninit-value bug in dibusb_read_eeprom_byte() net-sysfs: try not to restart the syscall if it will fail eventually tracefs: Have tracefs directories not set OTH permission bits by default ath: dfs_pattern_detector: Fix possible null-pointer dereference in channel_detector_create() mmc: moxart: Fix reference count leaks in moxart_probe iov_iter: Fix iov_iter_get_pages{,_alloc} page fault return value ACPI: battery: Accept charges over the design capacity as full drm/amdkfd: fix resume error when iommu disabled in Picasso net: phy: micrel: make *-skew-ps check more lenient leaking_addresses: Always print a trailing newline drm/msm: prevent NULL dereference in msm_gpu_crashstate_capture() block: bump max plugged deferred size from 16 to 32 md: update superblock after changing rdev flags in state_store memstick: r592: Fix a UAF bug when removing the driver lib/xz: Avoid overlapping memcpy() with invalid input with in-place decompression lib/xz: Validate the value before assigning it to an enum variable workqueue: make sysfs of unbound kworker cpumask more clever tracing/cfi: Fix cmp_entries_* functions signature mismatch mt76: mt7915: fix an off-by-one bound check mwl8k: Fix use-after-free in mwl8k_fw_state_machine() block: remove inaccurate requeue check media: allegro: ignore interrupt if mailbox is not initialized nvmet: fix use-after-free when a port is removed nvmet-rdma: fix use-after-free when a port is removed nvmet-tcp: fix use-after-free when a port is removed nvme: drop scan_lock and always kick requeue list when removing namespaces PM: hibernate: Get block device exclusively in swsusp_check() selftests: kvm: fix mismatched fclose() after popen() selftests/bpf: Fix perf_buffer test on system with offline cpus iwlwifi: mvm: disable RX-diversity in powersave smackfs: use __GFP_NOFAIL for smk_cipso_doi() ARM: clang: Do not rely on lr register for stacktrace gre/sit: Don't generate link-local addr if addr_gen_mode is IN6_ADDR_GEN_MODE_NONE gfs2: Cancel remote delete work asynchronously gfs2: Fix glock_hash_walk bugs ARM: 9136/1: ARMv7-M uses BE-8, not BE-32 vrf: run conntrack only in context of lower/physdev for locally generated packets net: annotate data-race in neigh_output() ACPI: AC: Quirk GK45 to skip reading _PSR btrfs: reflink: initialize return value to 0 in btrfs_extent_same() btrfs: do not take the uuid_mutex in btrfs_rm_device spi: bcm-qspi: Fix missing clk_disable_unprepare() on error in bcm_qspi_probe() wcn36xx: Correct band/freq reporting on RX x86/hyperv: Protect set_hv_tscchange_cb() against getting preempted drm/amd/display: dcn20_resource_construct reduce scope of FPU enabled selftests/core: fix conflicting types compile error for close_range() parisc: fix warning in flush_tlb_all task_stack: Fix end_of_stack() for architectures with upwards-growing stack erofs: don't trigger WARN() when decompression fails parisc/unwind: fix unwinder when CONFIG_64BIT is enabled parisc/kgdb: add kgdb_roundup() to make kgdb work with idle polling netfilter: conntrack: set on IPS_ASSURED if flows enters internal stream state selftests/bpf: Fix strobemeta selftest regression Bluetooth: fix init and cleanup of sco_conn.timeout_work rcu: Fix existing exp request check in sync_sched_exp_online_cleanup() MIPS: lantiq: dma: fix burst length for DEU objtool: Add xen_start_kernel() to noreturn list x86/xen: Mark cpu_bringup_and_idle() as dead_end_function objtool: Fix static_call list generation drm/v3d: fix wait for TMU write combiner flush virtio-gpu: fix possible memory allocation failure lockdep: Let lock_is_held_type() detect recursive read as read net: net_namespace: Fix undefined member in key_remove_domain() cgroup: Make rebind_subsystems() disable v2 controllers all at once wcn36xx: Fix Antenna Diversity Switching wilc1000: fix possible memory leak in cfg_scan_result() Bluetooth: btmtkuart: fix a memleak in mtk_hci_wmt_sync crypto: caam - disable pkc for non-E SoCs rxrpc: Fix _usecs_to_jiffies() by using usecs_to_jiffies() net: dsa: rtl8366rb: Fix off-by-one bug ath11k: fix some sleeping in atomic bugs ath11k: Avoid race during regd updates ath11k: fix packet drops due to incorrect 6 GHz freq value in rx status ath11k: Fix memory leak in ath11k_qmi_driver_event_work ath10k: Fix missing frame timestamp for beacon/probe-resp ath10k: sdio: Add missing BH locking around napi_schdule() drm/ttm: stop calling tt_swapin in vm_access arm64: mm: update max_pfn after memory hotplug drm/amdgpu: fix warning for overflow check media: em28xx: add missing em28xx_close_extension media: cxd2880-spi: Fix a null pointer dereference on error handling path media: dvb-usb: fix ununit-value in az6027_rc_query media: v4l2-ioctl: S_CTRL output the right value media: TDA1997x: handle short reads of hdmi info frame. media: mtk-vpu: Fix a resource leak in the error handling path of 'mtk_vpu_probe()' media: radio-wl1273: Avoid card name truncation media: si470x: Avoid card name truncation media: tm6000: Avoid card name truncation media: cx23885: Fix snd_card_free call on null card pointer kprobes: Do not use local variable when creating debugfs file crypto: ecc - fix CRYPTO_DEFAULT_RNG dependency cpuidle: Fix kobject memory leaks in error paths media: em28xx: Don't use ops->suspend if it is NULL ath9k: Fix potential interrupt storm on queue reset PM: EM: Fix inefficient states detection EDAC/amd64: Handle three rank interleaving mode rcu: Always inline rcu_dynticks_task*_{enter,exit}() netfilter: nft_dynset: relax superfluous check on set updates media: dvb-frontends: mn88443x: Handle errors of clk_prepare_enable() crypto: qat - detect PFVF collision after ACK crypto: qat - disregard spurious PFVF interrupts hwrng: mtk - Force runtime pm ops for sleep ops b43legacy: fix a lower bounds test b43: fix a lower bounds test gve: Recover from queue stall due to missed IRQ mmc: sdhci-omap: Fix NULL pointer exception if regulator is not configured mmc: sdhci-omap: Fix context restore memstick: avoid out-of-range warning memstick: jmb38x_ms: use appropriate free function in jmb38x_ms_alloc_host() net, neigh: Fix NTF_EXT_LEARNED in combination with NTF_USE hwmon: Fix possible memleak in __hwmon_device_register() hwmon: (pmbus/lm25066) Let compiler determine outer dimension of lm25066_coeff ath10k: fix max antenna gain unit kernel/sched: Fix sched_fork() access an invalid sched_task_group tcp: switch orphan_count to bare per-cpu counters drm/msm: potential error pointer dereference in init() drm/msm: uninitialized variable in msm_gem_import() net: stream: don't purge sk_error_queue in sk_stream_kill_queues() media: ir_toy: assignment to be16 should be of correct type mmc: mxs-mmc: disable regulator on error and in the remove function platform/x86: thinkpad_acpi: Fix bitwise vs. logical warning mt76: mt7615: fix endianness warning in mt7615_mac_write_txwi mt76: mt76x02: fix endianness warnings in mt76x02_mac.c mt76: mt7915: fix possible infinite loop release semaphore mt76: mt7915: fix sta_rec_wtbl tag len mt76: mt7915: fix muar_idx in mt7915_mcu_alloc_sta_req() rsi: stop thread firstly in rsi_91x_init() error handling mwifiex: Send DELBA requests according to spec net: enetc: unmap DMA in enetc_send_cmd() phy: micrel: ksz8041nl: do not use power down mode nvme-rdma: fix error code in nvme_rdma_setup_ctrl PM: hibernate: fix sparse warnings clocksource/drivers/timer-ti-dm: Select TIMER_OF x86/sev: Fix stack type check in vc_switch_off_ist() drm/msm: Fix potential NULL dereference in DPU SSPP smackfs: use netlbl_cfg_cipsov4_del() for deleting cipso_v4_doi KVM: selftests: Add operand to vmsave/vmload/vmrun in svm.c KVM: selftests: Fix nested SVM tests when built with clang bpftool: Avoid leaking the JSON writer prepared for program metadata libbpf: Fix BTF data layout checks and allow empty BTF libbpf: Allow loading empty BTFs libbpf: Fix overflow in BTF sanity checks libbpf: Fix BTF header parsing checks s390/gmap: don't unconditionally call pte_unmap_unlock() in __gmap_zap() KVM: s390: pv: avoid double free of sida page KVM: s390: pv: avoid stalls for kvm_s390_pv_init_vm irq: mips: avoid nested irq_enter() tpm: fix Atmel TPM crash caused by too frequent queries tpm_tis_spi: Add missing SPI ID libbpf: Fix endianness detection in BPF_CORE_READ_BITFIELD_PROBED() tcp: don't free a FIN sk_buff in tcp_remove_empty_skb() spi: spi-rpc-if: Check return value of rpcif_sw_init() samples/kretprobes: Fix return value if register_kretprobe() failed KVM: s390: Fix handle_sske page fault handling libertas_tf: Fix possible memory leak in probe and disconnect libertas: Fix possible memory leak in probe and disconnect wcn36xx: add proper DMA memory barriers in rx path wcn36xx: Fix discarded frames due to wrong sequence number drm/amdgpu/gmc6: fix DMA mask from 44 to 40 bits selftests: bpf: Convert sk_lookup ctx access tests to PROG_TEST_RUN selftests/bpf: Fix fd cleanup in sk_lookup test net: amd-xgbe: Toggle PLL settings during rate change net: phylink: avoid mvneta warning when setting pause parameters crypto: pcrypt - Delay write to padata->info selftests/bpf: Fix fclose/pclose mismatch in test_progs udp6: allow SO_MARK ctrl msg to affect routing ibmvnic: don't stop queue in xmit ibmvnic: Process crqs after enabling interrupts cgroup: Fix rootcg cpu.stat guest double counting bpf: Fix propagation of bounds from 64-bit min/max into 32-bit and var_off. bpf: Fix propagation of signed bounds from 64-bit min/max into 32-bit. of: unittest: fix EXPECT text for gpio hog errors iio: st_sensors: Call st_sensors_power_enable() from bus drivers iio: st_sensors: disable regulators after device unregistration RDMA/rxe: Fix wrong port_cap_flags ARM: dts: BCM5301X: Fix memory nodes names clk: mvebu: ap-cpu-clk: Fix a memory leak in error handling paths ARM: s3c: irq-s3c24xx: Fix return value check for s3c24xx_init_intc() arm64: dts: rockchip: Fix GPU register width for RK3328 ARM: dts: qcom: msm8974: Add xo_board reference clock to DSI0 PHY RDMA/bnxt_re: Fix query SRQ failure arm64: dts: ti: k3-j721e-main: Fix "max-virtual-functions" in PCIe EP nodes arm64: dts: ti: k3-j721e-main: Fix "bus-range" upto 256 bus number for PCIe arm64: dts: meson-g12a: Fix the pwm regulator supply properties arm64: dts: meson-g12b: Fix the pwm regulator supply properties bus: ti-sysc: Fix timekeeping_suspended warning on resume ARM: dts: at91: tse850: the emac<->phy interface is rmii scsi: dc395: Fix error case unwinding MIPS: loongson64: make CPU_LOONGSON64 depends on MIPS_FP_SUPPORT JFS: fix memleak in jfs_mount arm64: dts: qcom: msm8916: Fix Secondary MI2S bit clock arm64: dts: renesas: beacon: Fix Ethernet PHY mode arm64: dts: qcom: pm8916: Remove wrong reg-names for rtc@6000 ALSA: hda: Reduce udelay() at SKL+ position reporting ALSA: hda: Release controller display power during shutdown/reboot ALSA: hda: Fix hang during shutdown due to link reset ALSA: hda: Use position buffer for SKL+ again soundwire: debugfs: use controller id and link_id for debugfs scsi: pm80xx: Fix misleading log statement in pm8001_mpi_get_nvmd_resp() driver core: Fix possible memory leak in device_link_add() arm: dts: omap3-gta04a4: accelerometer irq fix ASoC: SOF: topology: do not power down primary core during topology removal soc/tegra: Fix an error handling path in tegra_powergate_power_up() memory: fsl_ifc: fix leak of irq and nand_irq in fsl_ifc_ctrl_probe clk: at91: check pmc node status before registering syscore ops video: fbdev: chipsfb: use memset_io() instead of memset() powerpc: Refactor is_kvm_guest() declaration to new header powerpc: Rename is_kvm_guest() to check_kvm_guest() powerpc: Reintroduce is_kvm_guest() as a fast-path check powerpc: Fix is_kvm_guest() / kvm_para_available() powerpc: fix unbalanced node refcount in check_kvm_guest() serial: 8250_dw: Drop wrong use of ACPI_PTR() usb: gadget: hid: fix error code in do_config() power: supply: rt5033_battery: Change voltage values to µV power: supply: max17040: fix null-ptr-deref in max17040_probe() scsi: csiostor: Uninitialized data in csio_ln_vnp_read_cbfn() RDMA/mlx4: Return missed an error if device doesn't support steering usb: musb: select GENERIC_PHY instead of depending on it staging: most: dim2: do not double-register the same device staging: ks7010: select CRYPTO_HASH/CRYPTO_MICHAEL_MIC pinctrl: renesas: checker: Fix off-by-one bug in drive register check ARM: dts: stm32: Reduce DHCOR SPI NOR frequency to 50 MHz ARM: dts: stm32: fix SAI sub nodes register range ARM: dts: stm32: fix AV96 board SAI2 pin muxing on stm32mp15 ASoC: cs42l42: Correct some register default values ASoC: cs42l42: Defer probe if request_threaded_irq() returns EPROBE_DEFER soc: qcom: rpmhpd: Provide some missing struct member descriptions soc: qcom: rpmhpd: Make power_on actually enable the domain usb: typec: STUSB160X should select REGMAP_I2C iio: adis: do not disabe IRQs in 'adis_init()' scsi: ufs: Refactor ufshcd_setup_clocks() to remove skip_ref_clk scsi: ufs: ufshcd-pltfrm: Fix memory leak due to probe defer serial: imx: fix detach/attach of serial console usb: dwc2: drd: fix dwc2_force_mode call in dwc2_ovr_init usb: dwc2: drd: fix dwc2_drd_role_sw_set when clock could be disabled usb: dwc2: drd: reset current session before setting the new one firmware: qcom_scm: Fix error retval in __qcom_scm_is_call_available() soc: qcom: apr: Add of_node_put() before return pinctrl: equilibrium: Fix function addition in multiple groups phy: qcom-qusb2: Fix a memory leak on probe phy: ti: gmii-sel: check of_get_address() for failure phy: qcom-snps: Correct the FSEL_MASK serial: xilinx_uartps: Fix race condition causing stuck TX clk: at91: sam9x60-pll: use DIV_ROUND_CLOSEST_ULL HID: u2fzero: clarify error check and length calculations HID: u2fzero: properly handle timeouts in usb_submit_urb powerpc/44x/fsp2: add missing of_node_put ASoC: cs42l42: Disable regulators if probe fails ASoC: cs42l42: Use device_property API instead of of_property ASoC: cs42l42: Correct configuring of switch inversion from ts-inv virtio_ring: check desc == NULL when using indirect with packed mips: cm: Convert to bitfield API to fix out-of-bounds access power: supply: bq27xxx: Fix kernel crash on IRQ handler register error apparmor: fix error check rpmsg: Fix rpmsg_create_ept return when RPMSG config is not defined nfsd: don't alloc under spinlock in rpc_parse_scope_id i2c: mediatek: fixing the incorrect register offset NFS: Fix dentry verifier races pnfs/flexfiles: Fix misplaced barrier in nfs4_ff_layout_prepare_ds drm/plane-helper: fix uninitialized variable reference PCI: aardvark: Don't spam about PIO Response Status PCI: aardvark: Fix preserving PCI_EXP_RTCTL_CRSSVE flag on emulated bridge opp: Fix return in _opp_add_static_v2() NFS: Fix deadlocks in nfs_scan_commit_list() fs: orangefs: fix error return code of orangefs_revalidate_lookup() mtd: spi-nor: hisi-sfc: Remove excessive clk_disable_unprepare() PCI: uniphier: Serialize INTx masking/unmasking and fix the bit operation mtd: core: don't remove debugfs directory if device is in use remoteproc: Fix a memory leak in an error handling path in 'rproc_handle_vdev()' rtc: rv3032: fix error handling in rv3032_clkout_set_rate() dmaengine: at_xdmac: fix AT_XDMAC_CC_PERID() macro NFS: Fix up commit deadlocks NFS: Fix an Oops in pnfs_mark_request_commit() Fix user namespace leak auxdisplay: img-ascii-lcd: Fix lock-up when displaying empty string auxdisplay: ht16k33: Connect backlight to fbdev auxdisplay: ht16k33: Fix frame buffer device blanking soc: fsl: dpaa2-console: free buffer before returning from dpaa2_console_read netfilter: nfnetlink_queue: fix OOB when mac header was cleared dmaengine: dmaengine_desc_callback_valid(): Check for `callback_result` signal/sh: Use force_sig(SIGKILL) instead of do_group_exit(SIGKILL) m68k: set a default value for MEMORY_RESERVE watchdog: f71808e_wdt: fix inaccurate report in WDIOC_GETTIMEOUT ar7: fix kernel builds for compiler test scsi: qla2xxx: Changes to support FCP2 Target scsi: qla2xxx: Relogin during fabric disturbance scsi: qla2xxx: Fix gnl list corruption scsi: qla2xxx: Turn off target reset during issue_lip NFSv4: Fix a regression in nfs_set_open_stateid_locked() i2c: xlr: Fix a resource leak in the error handling path of 'xlr_i2c_probe()' xen-pciback: Fix return in pm_ctrl_init() net: davinci_emac: Fix interrupt pacing disable ethtool: fix ethtool msg len calculation for pause stats openrisc: fix SMP tlb flush NULL pointer dereference net: vlan: fix a UAF in vlan_dev_real_dev() ice: Fix replacing VF hardware MAC to existing MAC filter ice: Fix not stopping Tx queues for VFs ACPI: PMIC: Fix intel_pmic_regs_handler() read accesses drm/nouveau/svm: Fix refcount leak bug and missing check against null bug net: phy: fix duplex out of sync problem while changing settings bonding: Fix a use-after-free problem when bond_sysfs_slave_add() failed mfd: core: Add missing of_node_put for loop iteration can: mcp251xfd: mcp251xfd_chip_start(): fix error handling for mcp251xfd_chip_rx_int_enable() mm/zsmalloc.c: close race window between zs_pool_dec_isolated() and zs_unregister_migration() zram: off by one in read_block_state() perf bpf: Add missing free to bpf_event__print_bpf_prog_info() llc: fix out-of-bound array index in llc_sk_dev_hash() nfc: pn533: Fix double free when pn533_fill_fragment_skbs() fails arm64: pgtable: make __pte_to_phys/__phys_to_pte_val inline functions bpf, sockmap: Remove unhash handler for BPF sockmap usage bpf: sockmap, strparser, and tls are reusing qdisc_skb_cb and colliding gve: Fix off by one in gve_tx_timeout() seq_file: fix passing wrong private data net/sched: sch_taprio: fix undefined behavior in ktime_mono_to_any net: hns3: fix kernel crash when unload VF while it is being reset net: hns3: allow configure ETS bandwidth of all TCs net: stmmac: allow a tc-taprio base-time of zero vsock: prevent unnecessary refcnt inc for nonblocking connect net/smc: fix sk_refcnt underflow on linkdown and fallback cxgb4: fix eeprom len when diagnostics not implemented selftests/net: udpgso_bench_rx: fix port argument ARM: 9155/1: fix early early_iounmap() ARM: 9156/1: drop cc-option fallbacks for architecture selection parisc: Fix backtrace to always include init funtion names MIPS: Fix assembly error from MIPSr2 code used within MIPS_ISA_ARCH_LEVEL x86/mce: Add errata workaround for Skylake SKX37 posix-cpu-timers: Clear task::posix_cputimers_work in copy_process() irqchip/sifive-plic: Fixup EOI failed when masked f2fs: should use GFP_NOFS for directory inodes net, neigh: Enable state migration between NUD_PERMANENT and NTF_USE 9p/net: fix missing error check in p9_check_errors memcg: prohibit unconditional exceeding the limit of dying tasks powerpc/lib: Add helper to check if offset is within conditional branch range powerpc/bpf: Validate branch ranges powerpc/security: Add a helper to query stf_barrier type powerpc/bpf: Emit stf barrier instruction sequences for BPF_NOSPEC mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks mm, oom: do not trigger out_of_memory from the #PF mfd: dln2: Add cell for initializing DLN2 ADC video: backlight: Drop maximum brightness override for brightness zero s390/cio: check the subchannel validity for dev_busid s390/tape: fix timer initialization in tape_std_assign() s390/ap: Fix hanging ioctl caused by orphaned replies s390/cio: make ccw_device_dma_* more robust mtd: rawnand: ams-delta: Keep the driver compatible with on-die ECC engines mtd: rawnand: xway: Keep the driver compatible with on-die ECC engines mtd: rawnand: mpc5121: Keep the driver compatible with on-die ECC engines mtd: rawnand: gpio: Keep the driver compatible with on-die ECC engines mtd: rawnand: pasemi: Keep the driver compatible with on-die ECC engines mtd: rawnand: orion: Keep the driver compatible with on-die ECC engines mtd: rawnand: plat_nand: Keep the driver compatible with on-die ECC engines mtd: rawnand: au1550nd: Keep the driver compatible with on-die ECC engines powerpc/powernv/prd: Unregister OPAL_MSG_PRD2 notifier during module unload powerpc/85xx: fix timebase sync issue when CONFIG_HOTPLUG_CPU=n drm/sun4i: Fix macros in sun8i_csc.h PCI: Add PCI_EXP_DEVCTL_PAYLOAD_* macros PCI: aardvark: Fix PCIe Max Payload Size setting SUNRPC: Partial revert of commit 6f9f17287e ath10k: fix invalid dma_addr_t token assignment mmc: moxart: Fix null pointer dereference on pointer host selftests/bpf: Fix also no-alu32 strobemeta selftest arch/cc: Introduce a function to check for confidential computing features x86/sev: Add an x86 version of cc_platform_has() x86/sev: Make the #VC exception stacks part of the default stacks storage soc/tegra: pmc: Fix imbalanced clock disabling in error code path Linux 5.10.80 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I21c750863965fbf584251fa2de3c941ae5922d3f	2021-11-19 11:50:41 +01:00
Daniel Jordan	71ec65c700	crypto: pcrypt - Delay write to padata->info ... [ Upstream commit 68b6dea802cea0dbdd8bd7ccc60716b5a32a5d8a ] These three events can race when pcrypt is used multiple times in a template ("pcrypt(pcrypt(...))"): 1. [taskA] The caller makes the crypto request via crypto_aead_encrypt() 2. [kworkerB] padata serializes the inner pcrypt request 3. [kworkerC] padata serializes the outer pcrypt request 3 might finish before the call to crypto_aead_encrypt() returns in 1, resulting in two possible issues. First, a use-after-free of the crypto request's memory when, for example, taskA writes to the outer pcrypt request's padata->info in pcrypt_aead_enc() after kworkerC completes the request. Second, the outer pcrypt request overwrites the inner pcrypt request's return code with -EINPROGRESS, making a successful request appear to fail. For instance, kworkerB writes the outer pcrypt request's padata->info in pcrypt_aead_done() and then taskA overwrites it in pcrypt_aead_enc(). Avoid both situations by delaying the write of padata->info until after the inner crypto request's return code is checked. This prevents the use-after-free by not touching the crypto request's memory after the next-inner crypto request is made, and stops padata->info from being overwritten. Fixes: 5068c7a883 ("crypto: pcrypt - Add pcrypt crypto parallelization wrapper") Reported-by: syzbot+b187b77c8474f9648fae@syzkaller.appspotmail.com Signed-off-by: Daniel Jordan <daniel.m.jordan@oracle.com> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Signed-off-by: Sasha Levin <sashal@kernel.org>	2021-11-18 14:04:12 +01:00
Arnd Bergmann	66f7de13d1	crypto: ecc - fix CRYPTO_DEFAULT_RNG dependency ... [ Upstream commit 38aa192a05f22f9778f9420e630f0322525ef12e ] The ecc.c file started out as part of the ECDH algorithm but got moved out into a standalone module later. It does not build without CRYPTO_DEFAULT_RNG, so now that other modules are using it as well we can run into this link error: aarch64-linux-ld: ecc.c:(.text+0xfc8): undefined reference to `crypto_default_rng' aarch64-linux-ld: ecc.c:(.text+0xff4): undefined reference to `crypto_put_default_rng' Move the 'select CRYPTO_DEFAULT_RNG' statement into the correct symbol. Fixes: 0d7a78643f ("crypto: ecrdsa - add EC-RDSA (GOST 34.10) algorithm") Fixes: 4e6602916bc6 ("crypto: ecdsa - Add support for ECDSA signature verification") Signed-off-by: Arnd Bergmann <arnd@arndb.de> Reviewed-by: Stefan Berger <stefanb@linux.ibm.com> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Signed-off-by: Sasha Levin <sashal@kernel.org>	2021-11-18 14:04:05 +01:00
Eric Biggers	6b7c37f6c4	ANDROID: fips140: use UTS_RELEASE as FIPS version ... Use the standard auto-generated kernel version string instead of a manually assigned version number that will get out-of-date. There was discussion of custom version numbers being needed for certification purposes, but it appears that they won't be needed after all. This will produce a version string like "5.10.66-android12-9-00017-g0b8a0a4df237". Bug: 188620248 Change-Id: Ia369e91e4a18f489418123c672686e05ca99063d Signed-off-by: Eric Biggers <ebiggers@google.com> (cherry picked from commit 4e0c1040758540aac34b753ed41792c8ad322a8c)	2021-11-11 21:20:25 +00:00
Eric Biggers	8d7f609cda	ANDROID: fips140: add name and version, and a function to retrieve them ... This is needed to meet a FIPS 140-3 requirement that modules provide a service that retrieves their name and versioning information. Bug: 188620248 Change-Id: I36049c839c4217e3616daab52ec536b46479c12a Signed-off-by: Eric Biggers <ebiggers@google.com> (cherry picked from commit 2888f960d09f3af00d1e45f1facd311ccd5b778a)	2021-11-03 09:23:35 -07:00
Eric Biggers	64d769e53f	ANDROID: fips140: add service indicators ... To satisfy the FIPS 140-3 "service indicators" requirement, add a function which checks whether the given algorithm is "approved" or not. Note that this function is a bit different from the module's other APIs in that it is an exported symbol rather than a registration-based API. This avoids needing to make kernel/KMI changes, so I think we should do it this way if possible, given that it's unlikely this function will be used in practice outside of the lab test. Built-in code can still call this function via symbol_get() if it really wants to. Bug: 188620248 Change-Id: I26c976258fa9446b34eb189bba7154142d85da16 Signed-off-by: Eric Biggers <ebiggers@google.com> (cherry picked from commit fe4b8d3c687efcf27064e472730291edbd81dad6)	2021-11-03 09:23:35 -07:00
Eric Biggers	482b0323cf	ANDROID: fips140: zeroize temporary values from integrity check ... FIPS 140-3 requires this for some reason. Bug: 188620248 Change-Id: I7c286532097e1d8971faf4d8be31b801f9007e3b Signed-off-by: Eric Biggers <ebiggers@google.com> (cherry picked from commit c14d52059bd86d27ce3c8e581196b011d0cc4d32)	2021-10-29 13:32:14 -07:00