36050 Commits

Author	SHA1	Message	Date
Greg Kroah-Hartman	f64cd19a00	Merge branch 'android12-5.10' into android12-5.10-lts ... Sync up with android12-5.10 for the following commits: 503435dc8c FROMGIT: usb: gadget: uvc: allow for application to cleanly shutdown 3736ae703b FROMGIT: usb: dwc3: gadget: increase tx fifo size for ss isoc endpoints 300cec3502 UPSTREAM: usb: gadget: configfs: clear deactivation flag in configfs_composite_unbind() a35bc53848 FROMGIT: usb: gadget: uvc: remove pause flag use 36aa07174b FROMGIT: usb: gadget: uvc: allow changing interface name via configfs 74b55107d0 UPSTREAM: usb: gadget: uvc: Fix crash when encoding data for usb request 53129aceec UPSTREAM: usb: gadget: uvc: test if ep->desc is valid on ep_queue 23cca7ad30 UPSTREAM: usb: gadget: uvc: only pump video data if necessary 6692312df6 UPSTREAM: usb: gadget: uvc: only schedule stream in streaming state 1c14550b60 UPSTREAM: usb: dwc3: gadget: Give some time to schedule isoc 5d084e9710 UPSTREAM: usb: gadget: uvc: make uvc_num_requests depend on gadget speed 15a663ebbe UPSTREAM: usb: gadget: composite: Show warning if function driver's descriptors are incomplete. 3172c95582 FROMLIST: kbuild: Add environment variables for userprogs flags a07b60e85c ANDROID: dm-bow: Protect Ranges fetched and erased from the RB tree 0d752f78b2 BACKPORT: staging: ion: Prevent incorrect reference counting behavour 1e037dd790 FROMGIT: net: fix wrong network header length a37eec78a6 UPSTREAM: mm: fix unexpected zeroed page mapping with zram swap 2f55d5cbe2 ANDROID: vendor_hooks: Add hooks for mutex 0780756946 UPSTREAM: usb: dwc3: gadget: Replace list_for_each_entry_safe() if using giveback 1a73ed4b2e UPSTREAM: usb: dwc3: Issue core soft reset before enabling run/stop fe513e1c26 UPSTREAM: usb: dwc3: gadget: Wait for ep0 xfers to complete during dequeue 75059d208e ANDROID: Update QCOM symbol list for trace_map/unmap 7c9d15f68b ANDROID: fix KCFLAGS override by __ANDROID_COMMON_KERNEL__ e5b4949bfc ANDROID: vendor_hooks: tune reclaim scan type for specified mem_cgroup eb80a7e84f ANDROID: vendor_hooks: Add hooks for rwsem 5558db2674 ANDROID: Add flag to indicate compiling against ACK bb18f818ee ANDROID: GKI: build damon reclaim 0453acd7fb FROMLIST: mm/damon/reclaim: Fix the timer always stays active 2522f6c4da BACKPORT: treewide: Add missing includes masked by cgroup -> bpf dependency 70ff0aeea7 UPSTREAM: mm/damon: modify damon_rand() macro to static inline function 3ecd29b57b UPSTREAM: mm/damon: add 'age' of region tracepoint support 94006b8a3a UPSTREAM: mm/damon: hide kernel pointer from tracepoint event 4c350065aa UPSTREAM: mm/damon/vaddr: hide kernel pointer from damon_va_three_regions() failure log c44028a162 UPSTREAM: mm/damon/vaddr: use pr_debug() for damon_va_three_regions() failure logging 98dcd2427c UPSTREAM: mm/damon/dbgfs: remove an unnecessary variable 21dc18f9a0 UPSTREAM: mm/damon: move the implementation of damon_insert_region to damon.h 73faa856e9 UPSTREAM: mm/damon: add access checking for hugetlb pages b0cf3ac6d3 UPSTREAM: mm/damon/dbgfs: support all DAMOS stats 1c400b8796 UPSTREAM: mm/damon/reclaim: provide reclamation statistics f755f1a2bc UPSTREAM: mm/damon/schemes: account how many times quota limit has exceeded 7cecfab158 UPSTREAM: mm/damon/schemes: account scheme actions that successfully applied 943c0cd13f UPSTREAM: mm/damon: convert macro functions to static inline functions 947d088b1f UPSTREAM: mm/damon: move damon_rand() definition into damon.h b45423116e UPSTREAM: mm/damon/schemes: add the validity judgment of thresholds b198e86d5a UPSTREAM: mm/damon/vaddr: remove swap_ranges() and replace it with swap() 9a8de9c702 UPSTREAM: mm/damon: remove some unneeded function definitions in damon.h 07045a0e5a UPSTREAM: mm/damon/core: use abs() instead of diff_of() 8b02bed759 UPSTREAM: mm/damon: unified access_check function naming rules d4d20c7ef5 UPSTREAM: mm/damon/dbgfs: fix 'struct pid' leaks in 'dbgfs_target_ids_write()' c3939031fb UPSTREAM: mm/damon/dbgfs: protect targets destructions with kdamond_lock 82bb332bf0 UPSTREAM: mm/damon/vaddr-test: remove unnecessary variables 4f0e48e5e9 UPSTREAM: mm/damon/vaddr-test: split a test function having >1024 bytes frame size 90af7e344b UPSTREAM: mm/damon/vaddr: remove an unnecessary warning message 4e19846848 UPSTREAM: mm/damon/core: remove unnecessary error messages a7969dac5a UPSTREAM: mm/damon/dbgfs: remove an unnecessary error message f37ab7f595 UPSTREAM: mm/damon/core: use better timer mechanisms selection threshold 63e8bc85e6 UPSTREAM: mm/damon/core: fix fake load reports due to uninterruptible sleeps a9ec7ed936 BACKPORT: timers: implement usleep_idle_range() 2581464867 UPSTREAM: mm/damon/dbgfs: fix missed use of damon_dbgfs_lock dbbff9155c UPSTREAM: mm/damon/dbgfs: use '__GFP_NOWARN' for user-specified size buffer allocation 55a2d2f5a7 UPSTREAM: mm/damon: remove return value from before_terminate callback b48f28f49c UPSTREAM: mm/damon: fix a few spelling mistakes in comments and a pr_debug message bb15a07842 UPSTREAM: mm/damon: simplify stop mechanism f1456aa48d UPSTREAM: mm/damon/dbgfs: add adaptive_targets list check before enable monitor_on 8c2db14f3f UPSTREAM: mm/damon: remove unnecessary variable initialization 4d321b786f UPSTREAM: mm/damon: introduce DAMON-based Reclamation (DAMON_RECLAIM) 57b0fb6229 UPSTREAM: selftests/damon: support watermarks 88d44101df UPSTREAM: mm/damon/dbgfs: support watermarks fb7d5f3b1a UPSTREAM: mm/damon/schemes: activate schemes based on a watermarks mechanism d4ba5298be UPSTREAM: tools/selftests/damon: update for regions prioritization of schemes eb9cf87aa8 UPSTREAM: mm/damon/dbgfs: support prioritization weights 798e889699 UPSTREAM: mm/damon/vaddr,paddr: support pageout prioritization dd1947047e UPSTREAM: mm/damon/schemes: prioritize regions within the quotas 1990bcb746 UPSTREAM: mm/damon/selftests: support schemes quotas 8c491daa0f UPSTREAM: mm/damon/dbgfs: support quotas of schemes 2c090a6bc6 UPSTREAM: mm/damon/schemes: implement time quota 8c0c30e2f0 UPSTREAM: mm/damon/schemes: skip already charged targets and regions a9af0008be UPSTREAM: mm/damon/schemes: implement size quota for schemes application speed control 780cd6f930 UPSTREAM: mm/damon/paddr: support the pageout scheme 71a23818ca UPSTREAM: mm/damon/dbgfs: remove unnecessary variables 1d68b96800 UPSTREAM: mm/damon/vaddr: constify static mm_walk_ops 932c8c61e1 UPSTREAM: mm/damon/dbgfs: support physical memory monitoring f348ba2256 UPSTREAM: mm/damon: implement primitives for physical address space monitoring 3c4a2c1428 UPSTREAM: mm/damon/vaddr: separate commonly usable functions c7f64c7f78 UPSTREAM: mm/damon/dbgfs-test: add a unit test case for 'init_regions' 27b2b8d255 UPSTREAM: mm/damon/dbgfs: allow users to set initial monitoring target regions cc2e33ff7c UPSTREAM: selftests/damon: add 'schemes' debugfs tests ef678357b3 UPSTREAM: mm/damon/schemes: implement statistics feature 5203491dbb UPSTREAM: mm/damon/dbgfs: support DAMON-based Operation Schemes cad23cd779 UPSTREAM: mm/damon/vaddr: support DAMON-based Operation Schemes 2a437378a5 UPSTREAM: mm/damon/core: implement DAMON-based Operation Schemes (DAMOS) 3d9ce6d28b UPSTREAM: mm/damon/core: account age of target regions b1209ff347 UPSTREAM: mm/damon/core: nullify pointer ctx->kdamond with a NULL e0fad2fbbe UPSTREAM: mm/damon: needn't hold kdamond_lock to print pid of kdamond bcf5bbcaf4 UPSTREAM: mm/damon: remove unnecessary do_exit() from kdamond 526b5029ad UPSTREAM: mm/damon/core: print kdamond start log in debug mode only 6239bbbcea UPSTREAM: include/linux/damon.h: fix kernel-doc comments for 'damon_callback' 8c5ef4d641 UPSTREAM: mm/damon: grammar s/works/work/ e31da16e69 UPSTREAM: mm/damon/core-test: fix wrong expectations for 'damon_split_regions_of()' b25e76d9c3 UPSTREAM: mm/damon: don't use strnlen() with known-bogus source length c1a4fca349 UPSTREAM: mm/damon: add kunit tests b5131d9c10 UPSTREAM: mm/damon: add user space selftests fe62a24792 UPSTREAM: mm/damon/dbgfs: support multiple contexts 562b676ce9 UPSTREAM: mm/damon/dbgfs: export kdamond pid to the user space c10dc7808e UPSTREAM: mm/damon: implement a debugfs-based user space interface 3ea808dca1 UPSTREAM: mm/damon: add a tracepoint 2afdd88030 UPSTREAM: mm/damon: implement primitives for the virtual memory address spaces 75e13bad97 UPSTREAM: mm/idle_page_tracking: make PG_idle reusable 0f1bc2a61d UPSTREAM: mm/damon: adaptively adjust regions 488e19fc91 UPSTREAM: mm/damon/core: implement region-based sampling bc19dd9a51 UPSTREAM: mm: introduce Data Access MONitor (DAMON) 35a697cab4 BACKPORT: net/packet: fix slab-out-of-bounds access in packet_recvmsg() 24d464d38b BACKPORT: fuse: fix pipe buffer lifetime for direct_io 2e3c211e7e BACKPORT: dm: fix NULL pointer issue when free bio aed2e27d51 UPSTREAM: kfence, x86: fix preemptible warning on KPTI-enabled systems e0513ed978 ANDROID: ABI: Update allowed list for galaxy 6ed058a9bf ANDROID: abi_gki_aarch64.xml: update based on proper LTO=full setting 46f414b1c2 BACKPORT: virtio-blk: Use blk_validate_block_size() to validate block size f06daa5a0b ANDROID: add for tuning readahead size 6def3a5ed8 BACKPORT: media: v4l2-mem2mem: Apply DST_QUEUE_OFF_BASE on MMAP buffers across ioctls 31beefbf14 BACKPORT: nl80211: correctly check NL80211_ATTR_REG_ALPHA2 size b07625698e BACKPORT: ext4: don't BUG if someone dirty pages without asking ext4 first 3628acf6b8 ANDROID: GKI: Update symbols to abi_gki_aarch64_oplus b8bb3b43a4 BACKPORT: iommu: Extend mutex lock scope in iommu_probe_device() 00f2b55cc4 BACKPORT: iommu: Fix race condition during default domain allocation 0dcfc2c036 ANDROID: GKI: Update symbols to symbol list 9608dc38a0 FROMLIST: remoteproc: Use unbounded workqueue for recovery work b5bcf0d667 UPSTREAM: xfrm: fix tunnel model fragmentation behavior 20e11d7969 ANDROID: GKI: Enable CRYPTO_DES eff1ffbf0c ANDROID: GKI: set more vfs-only exports into their own namespace 3c06a5ce5e ANDROID: Split ANDROID_STRUCT_PADDING into separate configs 5b1bb43708 ANDROID: selftests: incfs: skip large_file_test test is not enough free space 3b25a439ce ANDROID: selftests: incfs: Add -fno-omit-frame-pointer 3e45af8a72 ANDROID: incremental-fs: limit mount stack depth d8fade2b40 ANDROID: GKI: Update symbols to abi_gki_aarch64_oplus ceb6918d1d ANDROID: vendor_hooks: Reduce pointless modversions CRC churn 002528dfb5 UPSTREAM: locking/lockdep: Avoid potential access of invalid memory in lock_class 404df4751a ANDROID: mm: Fix implicit declaration of function 'isolate_lru_page' e2c0e8502e ANDROID: GKI: Update symbols to symbol list 51513a1775 ANDROID: GKI: Update symbols to symbol list 7b7125914c ANDROID: GKI: Add hook symbol to symbol list 7a7eadac58 Revert "ANDROID: dm-bow: Protect Ranges fetched and erased from the RB tree" cb7c1a4c78 ANDROID: vendor_hooks: Add hooks to for free_unref_page_commit a2485b8abd ANDROID: vendor_hooks: Add hooks to for alloc_contig_range bc159fee3d ANDROID: GKI: Update symbols to symbol list 95380146ce ANDROID: vendor_hooks: Add hook in shrink_node_memcgs a3f112353c ANDROID: GKI: Add symbols to symbol list ec48b1892e FROMGIT: iommu/iova: Improve 32-bit free space estimate d9845e9e5c ANDROID: export walk_page_range and swp_swap_info 71d560e017 ANDROID: vendor_hooks: export shrink_slab 74720dae8b ANDROID: usb: gadget: f_accessory: add compat_ioctl support e7f39d0aa2 UPSTREAM: sr9700: sanity check for packet length 6282531a84 UPSTREAM: io_uring: return back safer resurrect 87c1f135bf UPSTREAM: Revert "xfrm: state and policy should fail if XFRMA_IF_ID 0" ff0000fe82 UPSTREAM: usb: gadget: don't release an existing dev->buf 590a98d5d1 UPSTREAM: usb: gadget: clear related members when goto fail Update the abi.xml file with the following addtions that are now being tracked: Leaf changes summary: 184 artifacts changed Changed leaf types summary: 0 leaf type changed Removed/Changed/Added functions summary: 0 Removed, 0 Changed, 178 Added functions Removed/Changed/Added variables summary: 0 Removed, 0 Changed, 6 Added variables 178 Added functions: [A] 'function int __cleancache_get_page(page*)' [A] 'function int __dquot_alloc_space(inode*, qsize_t, int)' [A] 'function void __dquot_free_space(inode*, qsize_t, int)' [A] 'function int __dquot_transfer(inode*, dquot**)' [A] 'function int __fscrypt_encrypt_symlink(inode*, const char*, unsigned int, fscrypt_str*)' [A] 'function bool __fscrypt_inode_uses_inline_crypto(const inode*)' [A] 'function int __fscrypt_prepare_link(inode*, inode*, dentry*)' [A] 'function int __fscrypt_prepare_lookup(inode*, dentry*, fscrypt_name*)' [A] 'function int __fscrypt_prepare_readdir(inode*)' [A] 'function int __fscrypt_prepare_rename(inode*, dentry*, inode*, dentry*, unsigned int)' [A] 'function int __fscrypt_prepare_setattr(dentry*, iattr*)' [A] 'function ssize_t __generic_file_write_iter(kiocb*, iov_iter*)' [A] 'function sock* __inet6_lookup_established(net*, inet_hashinfo*, const in6_addr*, const __be16, const in6_addr*, const u16, const int, const int)' [A] 'function sock* __inet_lookup_established(net*, inet_hashinfo*, const __be32, const __be16, const __be32, const u16, const int, const int)' [A] 'function unsigned long int __page_file_index(page*)' [A] 'function address_space* __page_file_mapping(page*)' [A] 'function int __percpu_counter_init(percpu_counter*, s64, gfp_t, lock_class_key*)' [A] 'function s64 __percpu_counter_sum(percpu_counter*)' [A] 'function int __traceiter_android_vh_cma_drain_all_pages_bypass(void*, unsigned int, bool*)' [A] 'function int __traceiter_android_vh_pcplist_add_cma_pages_bypass(void*, int, bool*)' [A] 'function int __traceiter_android_vh_shrink_node_memcgs(void*, mem_cgroup*, bool*)' [A] 'function int __traceiter_map(void*, unsigned long int, phys_addr_t, size_t)' [A] 'function int __traceiter_unmap(void*, unsigned long int, size_t, size_t)' [A] 'function void __xa_clear_mark(xarray*, unsigned long int, xa_mark_t)' [A] 'function int add_swap_extent(swap_info_struct*, unsigned long int, unsigned long int, sector_t)' [A] 'function int add_to_page_cache_lru(page*, address_space*, unsigned long int, gfp_t)' [A] 'function void bio_associate_blkg_from_css(bio*, cgroup_subsys_state*)' [A] 'function const char* blk_op_str(unsigned int)' [A] 'function int blkdev_issue_zeroout(block_device*, sector_t, sector_t, gfp_t, unsigned int)' [A] 'function void clear_nlink(inode*)' [A] 'function long int congestion_wait(int, long int)' [A] 'function dentry* d_find_alias(inode*)' [A] 'function void d_instantiate_new(dentry*, inode*)' [A] 'function void d_invalidate(dentry*)' [A] 'function void d_tmpfile(dentry*, inode*)' [A] 'function char* dentry_path_raw(dentry*, char*, int)' [A] 'function dquot* dqget(super_block*, kqid)' [A] 'function void dqput(dquot*)' [A] 'function int dquot_acquire(dquot*)' [A] 'function dquot* dquot_alloc(super_block*, int)' [A] 'function int dquot_alloc_inode(inode*)' [A] 'function int dquot_claim_space_nodirty(inode*, qsize_t)' [A] 'function int dquot_commit(dquot*)' [A] 'function int dquot_commit_info(super_block*, int)' [A] 'function void dquot_destroy(dquot*)' [A] 'function int dquot_disable(super_block*, int, unsigned int)' [A] 'function void dquot_drop(inode*)' [A] 'function int dquot_file_open(inode*, file*)' [A] 'function void dquot_free_inode(inode*)' [A] 'function int dquot_get_dqblk(super_block*, kqid, qc_dqblk*)' [A] 'function int dquot_get_next_dqblk(super_block*, kqid*, qc_dqblk*)' [A] 'function int dquot_get_next_id(super_block*, kqid*)' [A] 'function int dquot_get_state(super_block*, qc_state*)' [A] 'function int dquot_initialize(inode*)' [A] 'function bool dquot_initialize_needed(inode*)' [A] 'function int dquot_load_quota_inode(inode*, int, int, unsigned int)' [A] 'function int dquot_mark_dquot_dirty(dquot*)' [A] 'function int dquot_quota_off(super_block*, int)' [A] 'function int dquot_quota_on(super_block*, int, int, const path*)' [A] 'function int dquot_quota_on_mount(super_block*, char*, int, int)' [A] 'function int dquot_release(dquot*)' [A] 'function int dquot_resume(super_block*, int)' [A] 'function int dquot_set_dqblk(super_block*, kqid, qc_dqblk*)' [A] 'function int dquot_set_dqinfo(super_block*, int, qc_info*)' [A] 'function int dquot_transfer(inode*, iattr*)' [A] 'function int dquot_writeback_dquots(super_block*, int)' [A] 'function void evict_inodes(super_block*)' [A] 'function bool filemap_allow_speculation()' [A] 'function int filemap_check_errors(address_space*)' [A] 'function vm_fault_t filemap_map_pages(vm_fault*, unsigned long int, unsigned long int)' [A] 'function inode* find_inode_nowait(super_block*, unsigned long int, int (inode*, unsigned long int, void*)*, void*)' [A] 'function int freeze_bdev(block_device*)' [A] 'function int freeze_super(super_block*)' [A] 'function void fscrypt_decrypt_bio(bio*)' [A] 'function bool fscrypt_dio_supported(kiocb*, iov_iter*)' [A] 'function int fscrypt_drop_inode(inode*)' [A] 'function page* fscrypt_encrypt_pagecache_blocks(page*, unsigned int, unsigned int, gfp_t)' [A] 'function int fscrypt_file_open(inode*, file*)' [A] 'function int fscrypt_fname_alloc_buffer(u32, fscrypt_str*)' [A] 'function int fscrypt_fname_disk_to_usr(const inode*, u32, u32, const fscrypt_str*, fscrypt_str*)' [A] 'function void fscrypt_fname_free_buffer(fscrypt_str*)' [A] 'function u64 fscrypt_fname_siphash(const inode*, const qstr*)' [A] 'function void fscrypt_free_bounce_page(page*)' [A] 'function void fscrypt_free_inode(inode*)' [A] 'function const char* fscrypt_get_symlink(inode*, void*, unsigned int, delayed_call*)' [A] 'function int fscrypt_has_permitted_context(inode*, inode*)' [A] 'function int fscrypt_ioctl_add_key(file*, void*)' [A] 'function int fscrypt_ioctl_get_key_status(file*, void*)' [A] 'function int fscrypt_ioctl_get_nonce(file*, void*)' [A] 'function int fscrypt_ioctl_get_policy(file*, void*)' [A] 'function int fscrypt_ioctl_get_policy_ex(file*, void*)' [A] 'function int fscrypt_ioctl_remove_key(file*, void*)' [A] 'function int fscrypt_ioctl_remove_key_all_users(file*, void*)' [A] 'function int fscrypt_ioctl_set_policy(file*, void*)' [A] 'function bool fscrypt_match_name(const fscrypt_name*, const u8*, u32)' [A] 'function bool fscrypt_mergeable_bio(bio*, const inode*, u64)' [A] 'function int fscrypt_prepare_new_inode(inode*, inode*, bool*)' [A] 'function int fscrypt_prepare_symlink(inode*, const char*, unsigned int, unsigned int, fscrypt_str*)' [A] 'function void fscrypt_put_encryption_info(inode*)' [A] 'function void fscrypt_set_bio_crypt_ctx(bio*, const inode*, u64, gfp_t)' [A] 'function int fscrypt_set_context(inode*, void*)' [A] 'function int fscrypt_set_test_dummy_encryption(super_block*, const char*, fscrypt_dummy_policy*)' [A] 'function int fscrypt_setup_filename(inode*, const qstr*, int, fscrypt_name*)' [A] 'function void fscrypt_show_test_dummy_encryption(seq_file*, char, super_block*)' [A] 'function int fscrypt_symlink_getattr(const path*, kstat*)' [A] 'function int fscrypt_zeroout_range(const inode*, unsigned long int, sector_t, unsigned int)' [A] 'function void fsverity_cleanup_inode(inode*)' [A] 'function void fsverity_enqueue_verify_work(work_struct*)' [A] 'function int fsverity_file_open(inode*, file*)' [A] 'function int fsverity_ioctl_enable(file*, void*)' [A] 'function int fsverity_ioctl_measure(file*, void*)' [A] 'function int fsverity_ioctl_read_metadata(file*, void*)' [A] 'function int fsverity_prepare_setattr(dentry*, iattr*)' [A] 'function void fsverity_verify_bio(bio*)' [A] 'function bool fsverity_verify_page(page*)' [A] 'function void generate_random_uuid(unsigned char*)' [A] 'function dentry* generic_fh_to_dentry(super_block*, fid*, int, int, inode* (super_block*, typedef u64, typedef u32)*)' [A] 'function dentry* generic_fh_to_parent(super_block*, fid*, int, int, inode* (super_block*, typedef u64, typedef u32)*)' [A] 'function loff_t generic_file_llseek_size(file*, loff_t, int, loff_t, loff_t)' [A] 'function void generic_set_encrypted_ci_d_ops(dentry*)' [A] 'function int gpiochip_irqchip_add_key(gpio_chip*, irq_chip*, unsigned int, irq_flow_handler_t, unsigned int, bool, lock_class_key*, lock_class_key*)' [A] 'function void gpiochip_set_nested_irqchip(gpio_chip*, irq_chip*, unsigned int)' [A] 'function usb_request* gs_alloc_req(usb_ep*, unsigned int, gfp_t)' [A] 'function void gs_free_req(usb_ep*, usb_request*)' [A] 'function void gserial_free_line(unsigned char)' [A] 'function void gserial_resume(gserial*)' [A] 'function void gserial_suspend(gserial*)' [A] 'function void iget_failed(inode*)' [A] 'function inode* iget_locked(super_block*, unsigned long int)' [A] 'function inode* ilookup(super_block*, unsigned long int)' [A] 'function void inode_nohighmem(inode*)' [A] 'function int insert_inode_locked(inode*)' [A] 'function int kset_register(kset*)' [A] 'function char* match_strdup(const substring_t*)' [A] 'function void migrate_page_copy(page*, page*)' [A] 'function int migrate_page_move_mapping(address_space*, page*, page*, int)' [A] 'function void migrate_page_states(page*, page*)' [A] 'function void page_cache_ra_unbounded(readahead_control*, unsigned long int, unsigned long int)' [A] 'function void page_cache_sync_ra(readahead_control*, file_ra_state*, unsigned long int)' [A] 'function const char* page_get_link(dentry*, inode*, delayed_call*)' [A] 'function int page_symlink(inode*, const char*, int)' [A] 'function int pagecache_write_begin(file*, address_space*, loff_t, unsigned int, unsigned int, page**, void**)' [A] 'function int pagecache_write_end(file*, address_space*, loff_t, unsigned int, unsigned int, page*, void*)' [A] 'function void percpu_counter_add_batch(percpu_counter*, s64, s32)' [A] 'function void percpu_counter_destroy(percpu_counter*)' [A] 'function void percpu_counter_set(percpu_counter*, s64)' [A] 'function posix_acl* posix_acl_alloc(int, gfp_t)' [A] 'function int posix_acl_chmod(inode*, umode_t)' [A] 'function int posix_acl_equiv_mode(const posix_acl*, umode_t*)' [A] 'function unsigned int radix_tree_gang_lookup(const xarray*, void**, unsigned long int, unsigned int)' [A] 'function int radix_tree_preload(gfp_t)' [A] 'function page* read_cache_page_gfp(address_space*, unsigned long int, gfp_t)' [A] 'function void seq_escape(seq_file*, const char*, const char*)' [A] 'function void set_cached_acl(inode*, int, posix_acl*)' [A] 'function int set_task_ioprio(task_struct*, int)' [A] 'function void shrink_dcache_sb(super_block*)' [A] 'function unsigned long int shrink_slab(gfp_t, int, mem_cgroup*, int)' [A] 'function swap_info_struct* swp_swap_info(swp_entry_t)' [A] 'function void sync_inodes_sb(super_block*)' [A] 'function int thaw_bdev(block_device*)' [A] 'function int thaw_super(super_block*)' [A] 'function void truncate_inode_pages_range(address_space*, loff_t, loff_t)' [A] 'function void truncate_pagecache_range(inode*, loff_t, loff_t)' [A] 'function int utf8_casefold(const unicode_map*, const qstr*, unsigned char*, size_t)' [A] 'function unicode_map* utf8_load(const char*)' [A] 'function int utf8_strncasecmp_folded(const unicode_map*, const qstr*, const qstr*)' [A] 'function void utf8_unload(unicode_map*)' [A] 'function int utf8s_to_utf16s(const u8*, int, utf16_endian, wchar_t*, int)' [A] 'function int vfs_ioc_fssetxattr_check(inode*, const fsxattr*, fsxattr*)' [A] 'function int vfs_ioc_setflags_prepare(inode*, unsigned int, unsigned int)' [A] 'function loff_t vfs_setpos(file*, loff_t, loff_t)' [A] 'function void vm_unmap_aliases()' [A] 'function void wait_for_completion_io(completion*)' [A] 'function void wait_for_stable_page(page*)' [A] 'function void wait_on_page_writeback(page*)' [A] 'function int walk_page_range(mm_struct*, unsigned long int, unsigned long int, const mm_walk_ops*, void*)' [A] 'function void wbc_account_cgroup_owner(writeback_control*, page*, size_t)' [A] 'function bool xa_get_mark(xarray*, unsigned long int, xa_mark_t)' 6 Added variables: [A] 'tracepoint __tracepoint_android_vh_cma_drain_all_pages_bypass' [A] 'tracepoint __tracepoint_android_vh_pcplist_add_cma_pages_bypass' [A] 'tracepoint __tracepoint_android_vh_shrink_node_memcgs' [A] 'tracepoint __tracepoint_map' [A] 'tracepoint __tracepoint_unmap' [A] 'inet_hashinfo tcp_hashinfo' Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: Id62d82c18aeac7b909440af67860c93969108553	2022-05-11 19:17:15 +02:00
Liujie Xie	2f55d5cbe2	ANDROID: vendor_hooks: Add hooks for mutex ... Current might be preempt after spin_unlock(&lock->wait_lock), we want to add a hook after wake_up_q(&wake_q) in which to disable owner's privilege in scheduler. Bug: 231647361 Change-Id: I3016da2fd31b8bdc8435df4e800f91381a64af4f Signed-off-by: Liujie Xie <xieliujie@oppo.com>	2022-05-06 14:09:25 +08:00
Peifeng LI	eb80a7e84f	ANDROID: vendor_hooks: Add hooks for rwsem ... we want to record tasks who will own sem, so we need to add some hook in rwsem.c Bug: 230829284 Change-Id: Ide66540aa38d6058d8aad5f94f4403be991078a4 Signed-off-by: Peifeng Li <lipeifeng@oppo.com>	2022-04-29 16:57:10 +08:00
Greg Kroah-Hartman	de64d941a7	Merge 5.10.112 into android12-5.10-lts ... Changes in 5.10.112 drm/amdkfd: Use drm_priv to pass VM from KFD to amdgpu hamradio: defer 6pack kfree after unregister_netdev hamradio: remove needs_free_netdev to avoid UAF cpuidle: PSCI: Move the `has_lpi` check to the beginning of the function ACPI: processor idle: Check for architectural support for LPI btrfs: remove unused variable in btrfs_{start,write}_dirty_block_groups() drm/msm: Add missing put_task_struct() in debugfs path memory: atmel-ebi: Fix missing of_node_put in atmel_ebi_probe firmware: arm_scmi: Fix sorting of retrieved clock rates media: rockchip/rga: do proper error checking in probe SUNRPC: Fix the svc_deferred_event trace class net/sched: flower: fix parsing of ethertype following VLAN header veth: Ensure eth header is in skb's linear part gpiolib: acpi: use correct format characters net: mdio: Alphabetically sort header inclusion mlxsw: i2c: Fix initialization error flow net/sched: fix initialization order when updating chain 0 head net: dsa: felix: suppress -EPROBE_DEFER errors net: ethernet: stmmac: fix altr_tse_pcs function when using a fixed-link net/sched: taprio: Check if socket flags are valid cfg80211: hold bss_lock while updating nontrans_list drm/msm: Fix range size vs end confusion drm/msm/dsi: Use connector directly in msm_dsi_manager_connector_init() net/smc: Fix NULL pointer dereference in smc_pnet_find_ib() scsi: pm80xx: Mask and unmask upper interrupt vectors 32-63 scsi: pm80xx: Enable upper inbound, outbound queues scsi: iscsi: Stop queueing during ep_disconnect scsi: iscsi: Force immediate failure during shutdown scsi: iscsi: Use system_unbound_wq for destroy_work scsi: iscsi: Rel ref after iscsi_lookup_endpoint() scsi: iscsi: Fix in-kernel conn failure handling scsi: iscsi: Move iscsi_ep_disconnect() scsi: iscsi: Fix offload conn cleanup when iscsid restarts scsi: iscsi: Fix conn cleanup and stop race during iscsid restart sctp: Initialize daddr on peeled off socket testing/selftests/mqueue: Fix mq_perf_tests to free the allocated cpu set perf tools: Fix misleading add event PMU debug message nfc: nci: add flush_workqueue to prevent uaf cifs: potential buffer overflow in handling symlinks dm mpath: only use ktime_get_ns() in historical selector net: bcmgenet: Revert "Use stronger register read/writes to assure ordering" drm/amd: Add USBC connector ID btrfs: fix fallocate to use file_modified to update permissions consistently btrfs: do not warn for free space inode in cow_file_range drm/amd/display: fix audio format not updated after edid updated drm/amd/display: FEC check in timing validation drm/amd/display: Update VTEM Infopacket definition drm/amdkfd: Fix Incorrect VMIDs passed to HWS drm/amdgpu/vcn: improve vcn dpg stop procedure drm/amdkfd: Check for potential null return of kmalloc_array() Drivers: hv: vmbus: Prevent load re-ordering when reading ring buffer scsi: target: tcmu: Fix possible page UAF scsi: lpfc: Fix queue failures when recovering from PCI parity error scsi: ibmvscsis: Increase INITIAL_SRP_LIMIT to 1024 net: micrel: fix KS8851_MLL Kconfig ata: libata-core: Disable READ LOG DMA EXT for Samsung 840 EVOs gpu: ipu-v3: Fix dev_dbg frequency output regulator: wm8994: Add an off-on delay for WM8994 variant arm64: alternatives: mark patch_alternative() as `noinstr` tlb: hugetlb: Add more sizes to tlb_remove_huge_tlb_entry net: axienet: setup mdio unconditionally net: usb: aqc111: Fix out-of-bounds accesses in RX fixup myri10ge: fix an incorrect free for skb in myri10ge_sw_tso drm/amd/display: Revert FEC check in validation drm/amd/display: Fix allocate_mst_payload assert on resume scsi: mvsas: Add PCI ID of RocketRaid 2640 scsi: megaraid_sas: Target with invalid LUN ID is deleted during scan drivers: net: slip: fix NPD bug in sl_tx_timeout() perf/imx_ddr: Fix undefined behavior due to shift overflowing the constant mm, page_alloc: fix build_zonerefs_node() mm: fix unexpected zeroed page mapping with zram swap mm: kmemleak: take a full lowmem check in kmemleak_*_phys() KVM: x86/mmu: Resolve nx_huge_pages when kvm.ko is loaded memory: renesas-rpc-if: fix platform-device leak in error path gcc-plugins: latent_entropy: use /dev/urandom ath9k: Properly clear TX status area before reporting to mac80211 ath9k: Fix usage of driver-private space in tx_info btrfs: fix root ref counts in error handling in btrfs_get_root_ref btrfs: mark resumed async balance as writing ALSA: hda/realtek: Add quirk for Clevo PD50PNT ALSA: hda/realtek: add quirk for Lenovo Thinkpad X12 speakers ALSA: pcm: Test for "silence" field in struct "pcm_format_data" nl80211: correctly check NL80211_ATTR_REG_ALPHA2 size ipv6: fix panic when forwarding a pkt with no in6 dev drm/amd/display: don't ignore alpha property on pre-multiplied mode drm/amdgpu: Enable gfxoff quirk on MacBook Pro genirq/affinity: Consider that CPUs on nodes can be unbalanced tick/nohz: Use WARN_ON_ONCE() to prevent console saturation ARM: davinci: da850-evm: Avoid NULL pointer dereference dm integrity: fix memory corruption when tag_size is less than digest size smp: Fix offline cpu check in flush_smp_call_function_queue() i2c: pasemi: Wait for write xfers to finish timers: Fix warning condition in __run_timers() dma-direct: avoid redundant memory sync for swiotlb scsi: iscsi: Fix endpoint reuse regression scsi: iscsi: Fix unbound endpoint error handling ax25: add refcount in ax25_dev to avoid UAF bugs ax25: fix reference count leaks of ax25_dev ax25: fix UAF bugs of net_device caused by rebinding operation ax25: Fix refcount leaks caused by ax25_cb_del() ax25: fix UAF bug in ax25_send_control() ax25: fix NPD bug in ax25_disconnect ax25: Fix NULL pointer dereferences in ax25 timers ax25: Fix UAF bugs in ax25 timers Linux 5.10.112 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I9ce7b432f335445dbfb4a67a34a8a1c279011954	2022-04-29 09:15:09 +02:00
SeongJae Park	a9ec7ed936	BACKPORT: timers: implement usleep_idle_range() ... Patch series "mm/damon: Fix fake /proc/loadavg reports", v3. This patchset fixes DAMON's fake load report issue. The first patch makes yet another variant of usleep_range() for this fix, and the second patch fixes the issue of DAMON by making it using the newly introduced function. This patch (of 2): Some kernel threads such as DAMON could need to repeatedly sleep in micro seconds level. Because usleep_range() sleeps in uninterruptible state, however, such threads would make /proc/loadavg reports fake load. To help such cases, this commit implements a variant of usleep_range() called usleep_idle_range(). It is same to usleep_range() but sets the state of the current task as TASK_IDLE while sleeping. Link: https://lkml.kernel.org/r/20211126145015.15862-1-sj@kernel.org Link: https://lkml.kernel.org/r/20211126145015.15862-2-sj@kernel.org Signed-off-by: SeongJae Park <sj@kernel.org> Suggested-by: Andrew Morton <akpm@linux-foundation.org> Reviewed-by: Thomas Gleixner <tglx@linutronix.de> Tested-by: Oleksandr Natalenko <oleksandr@natalenko.name> Cc: John Stultz <john.stultz@linaro.org> Cc: <stable@vger.kernel.org> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org> (cherry picked from commit e4779015fd5d2fb8390c258268addff24d6077c7) Bug: 228223814 Signed-off-by: Hailong Tu <tuhailong@oppo.com> Change-Id: Ie590ba5fcff22c981d0a7ecae6d8e551160136f3	2022-04-28 23:09:17 +08:00
Greg Kroah-Hartman	5dadf6321c	Merge 5.10.111 into android12-5.10-lts ... Changes in 5.10.111 ubifs: Rectify space amount budget for mkdir/tmpfile operations gfs2: Check for active reservation in gfs2_release gfs2: Fix gfs2_release for non-writers regression gfs2: gfs2_setattr_size error path fix rtc: wm8350: Handle error for wm8350_register_irq KVM: x86/svm: Clear reserved bits written to PerfEvtSeln MSRs KVM: x86/emulator: Emulate RDPID only if it is enabled in guest drm: Add orientation quirk for GPD Win Max ath5k: fix OOB in ath5k_eeprom_read_pcal_info_5111 drm/amd/display: Add signal type check when verify stream backends same drm/amd/amdgpu/amdgpu_cs: fix refcount leak of a dma_fence obj usb: gadget: tegra-xudc: Do not program SPARAM usb: gadget: tegra-xudc: Fix control endpoint's definitions ptp: replace snprintf with sysfs_emit powerpc: dts: t104xrdb: fix phy type for FMAN 4/5 ath11k: fix kernel panic during unload/load ath11k modules ath11k: mhi: use mhi_sync_power_up() bpf: Make dst_port field in struct bpf_sock 16-bit wide scsi: mvsas: Replace snprintf() with sysfs_emit() scsi: bfa: Replace snprintf() with sysfs_emit() power: supply: axp20x_battery: properly report current when discharging mt76: dma: initialize skip_unmap in mt76_dma_rx_fill cfg80211: don't add non transmitted BSS to 6GHz scanned channels libbpf: Fix build issue with llvm-readelf ipv6: make mc_forwarding atomic powerpc: Set crashkernel offset to mid of RMA region drm/amdgpu: Fix recursive locking warning PCI: aardvark: Fix support for MSI interrupts iommu/arm-smmu-v3: fix event handling soft lockup usb: ehci: add pci device support for Aspeed platforms PCI: endpoint: Fix alignment fault error in copy tests tcp: Don't acquire inet_listen_hashbucket::lock with disabled BH. PCI: pciehp: Add Qualcomm quirk for Command Completed erratum power: supply: axp288-charger: Set Vhold to 4.4V iwlwifi: mvm: Correctly set fragmented EBS ipv4: Invalidate neighbour for broadcast address upon address addition dm ioctl: prevent potential spectre v1 gadget dm: requeue IO if mapping table not yet available drm/amdkfd: make CRAT table missing message informational only scsi: pm8001: Fix pm80xx_pci_mem_copy() interface scsi: pm8001: Fix pm8001_mpi_task_abort_resp() scsi: pm8001: Fix task leak in pm8001_send_abort_all() scsi: pm8001: Fix tag leaks on error scsi: pm8001: Fix memory leak in pm8001_chip_fw_flash_update_req() mt76: mt7615: Fix assigning negative values to unsigned variable scsi: aha152x: Fix aha152x_setup() __setup handler return value scsi: hisi_sas: Free irq vectors in order for v3 HW net/smc: correct settings of RMB window update limit mips: ralink: fix a refcount leak in ill_acc_of_setup() macvtap: advertise link netns via netlink tuntap: add sanity checks about msg_controllen in sendmsg Bluetooth: Fix not checking for valid hdev on bt_dev_{info,warn,err,dbg} Bluetooth: use memset avoid memory leaks bnxt_en: Eliminate unintended link toggle during FW reset PCI: endpoint: Fix misused goto label MIPS: fix fortify panic when copying asm exception handlers powerpc/secvar: fix refcount leak in format_show() scsi: libfc: Fix use after free in fc_exch_abts_resp() can: isotp: set default value for N_As to 50 micro seconds net: account alternate interface name memory net: limit altnames to 64k total net: sfp: add 2500base-X quirk for Lantech SFP module usb: dwc3: omap: fix "unbalanced disables for smps10_out1" on omap5evm xtensa: fix DTC warning unit_address_format MIPS: ingenic: correct unit node address Bluetooth: Fix use after free in hci_send_acl netlabel: fix out-of-bounds memory accesses ceph: fix memory leak in ceph_readdir when note_last_dentry returns error init/main.c: return 1 from handled __setup() functions minix: fix bug when opening a file with O_DIRECT clk: si5341: fix reported clk_rate when output divider is 2 staging: vchiq_core: handle NULL result of find_service_by_handle phy: amlogic: meson8b-usb2: Use dev_err_probe() staging: wfx: fix an error handling in wfx_init_common() w1: w1_therm: fixes w1_seq for ds28ea00 sensors NFSv4.2: fix reference count leaks in _nfs42_proc_copy_notify() NFSv4: Protect the state recovery thread against direct reclaim xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32 clk: ti: Preserve node in ti_dt_clocks_register() clk: Enforce that disjoints limits are invalid SUNRPC/call_alloc: async tasks mustn't block waiting for memory SUNRPC/xprt: async tasks mustn't block waiting for memory SUNRPC: remove scheduling boost for "SWAPPER" tasks. NFS: swap IO handling is slightly different for O_DIRECT IO NFS: swap-out must always use STABLE writes. x86/Kconfig: Do not allow CONFIG_X86_X32_ABI=y with llvm-objcopy serial: samsung_tty: do not unlock port->lock for uart_write_wakeup() virtio_console: eliminate anonymous module_init & module_exit jfs: prevent NULL deref in diFree SUNRPC: Fix socket waits for write buffer space NFS: nfsiod should not block forever in mempool_alloc() NFS: Avoid writeback threads getting stuck in mempool_alloc() parisc: Fix CPU affinity for Lasi, WAX and Dino chips parisc: Fix patch code locking and flushing mm: fix race between MADV_FREE reclaim and blkdev direct IO read Revert "hv: utils: add PTP_1588_CLOCK to Kconfig to fix build" drm/amdgpu: fix off by one in amdgpu_gfx_kiq_acquire() Drivers: hv: vmbus: Fix potential crash on module unload Revert "NFSv4: Handle the special Linux file open access mode" NFSv4: fix open failure with O_ACCMODE flag scsi: zorro7xx: Fix a resource leak in zorro7xx_remove_one() net/tls: fix slab-out-of-bounds bug in decrypt_internal ice: Clear default forwarding VSI during VSI release net: ipv4: fix route with nexthop object delete warning net: stmmac: Fix unset max_speed difference between DT and non-DT platforms drm/imx: imx-ldb: Check for null pointer after calling kmemdup drm/imx: Fix memory leak in imx_pd_connector_get_modes bnxt_en: reserve space inside receive page for skb_shared_info sfc: Do not free an empty page_ring RDMA/mlx5: Don't remove cache MRs when a delay is needed IB/rdmavt: add lock to call to rvt_error_qp to prevent a race condition dpaa2-ptp: Fix refcount leak in dpaa2_ptp_probe ice: Set txq_teid to ICE_INVAL_TEID on ring creation ice: Do not skip not enabled queues in ice_vc_dis_qs_msg ipv6: Fix stats accounting in ip6_pkt_drop ice: synchronize_rcu() when terminating rings net: openvswitch: don't send internal clone attribute to the userspace. net: openvswitch: fix leak of nested actions rxrpc: fix a race in rxrpc_exit_net() net: phy: mscc-miim: reject clause 45 register accesses qede: confirm skb is allocated before using spi: bcm-qspi: fix MSPI only access with bcm_qspi_exec_mem_op() bpf: Support dual-stack sockets in bpf_tcp_check_syncookie drbd: Fix five use after free bugs in get_initial_state io_uring: don't touch scm_fp_list after queueing skb SUNRPC: Handle ENOMEM in call_transmit_status() SUNRPC: Handle low memory situations in call_status() SUNRPC: svc_tcp_sendmsg() should handle errors from xdr_alloc_bvec() iommu/omap: Fix regression in probe for NULL pointer dereference perf: arm-spe: Fix perf report --mem-mode perf tools: Fix perf's libperf_print callback perf session: Remap buf if there is no space for event arm64: Add part number for Arm Cortex-A78AE Revert "mmc: sdhci-xenon: fix annoying 1.8V regulator warning" mmc: mmci: stm32: correctly check all elements of sg list mmc: renesas_sdhi: don't overwrite TAP settings when HS400 tuning is complete lz4: fix LZ4_decompress_safe_partial read out of bound mmmremap.c: avoid pointless invalidate_range_start/end on mremap(old_size=0) mm/mempolicy: fix mpol_new leak in shared_policy_replace io_uring: fix race between timeout flush and removal x86/pm: Save the MSR validity status at context setup x86/speculation: Restore speculation related MSRs during S3 resume btrfs: fix qgroup reserve overflow the qgroup limit btrfs: prevent subvol with swapfile from being deleted arm64: patch_text: Fixup last cpu should be master RDMA/hfi1: Fix use-after-free bug for mm struct gpio: Restrict usage of GPIO chip irq members before initialization ata: sata_dwc_460ex: Fix crash due to OOB write perf: qcom_l2_pmu: fix an incorrect NULL check on list iterator irqchip/gic-v3: Fix GICR_CTLR.RWP polling drm/amdgpu/smu10: fix SoC/fclk units in auto mode drm/nouveau/pmu: Add missing callbacks for Tegra devices drm/amdkfd: Create file descriptor after client is added to smi_clients list perf build: Don't use -ffat-lto-objects in the python feature test when building with clang-13 perf python: Fix probing for some clang command line options tools build: Filter out options and warnings not supported by clang tools build: Use $(shell ) instead of `` to get embedded libperl's ccopts dmaengine: Revert "dmaengine: shdma: Fix runtime PM imbalance on error" ubsan: remove CONFIG_UBSAN_OBJECT_SIZE mm: don't skip swap entry even if zap_details specified cgroup: Use open-time credentials for process migraton perm checks selftests/cgroup: Fix build on older distros selftests: cgroup: Make cg_create() use 0755 for permission instead of 0644 selftests: cgroup: Test open-time credential usage for migration checks selftests: cgroup: Test open-time cgroup namespace usage for migration checks arm64: module: remove (NOLOAD) from linker script Drivers: hv: vmbus: Replace smp_store_mb() with virt_store_mb() irqchip/gic, gic-v3: Prevent GSI to SGI translations mm/sparsemem: fix 'mem_section' will never be NULL gcc 12 warning powerpc: Fix virt_addr_valid() for 64-bit Book3E & 32-bit Linux 5.10.111 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I9b4c1d30ae226b865494df03d871db2a2b9281c7	2022-04-21 14:27:41 +02:00
Chao Gao	26f827e095	dma-direct: avoid redundant memory sync for swiotlb ... commit 9e02977bfad006af328add9434c8bffa40e053bb upstream. When we looked into FIO performance with swiotlb enabled in VM, we found swiotlb_bounce() is always called one more time than expected for each DMA read request. It turns out that the bounce buffer is copied to original DMA buffer twice after the completion of a DMA request (one is done by in dma_direct_sync_single_for_cpu(), the other by swiotlb_tbl_unmap_single()). But the content in bounce buffer actually doesn't change between the two rounds of copy. So, one round of copy is redundant. Pass DMA_ATTR_SKIP_CPU_SYNC flag to swiotlb_tbl_unmap_single() to skip the memory copy in it. This fix increases FIO 64KB sequential read throughput in a guest with swiotlb=force by 5.6%. Fixes: 55897af630 ("dma-direct: merge swiotlb_dma_ops into the dma_direct code") Reported-by: Wang Zhaoyang1 <zhaoyang1.wang@intel.com> Reported-by: Gao Liang <liang.gao@intel.com> Signed-off-by: Chao Gao <chao.gao@intel.com> Reviewed-by: Kevin Tian <kevin.tian@intel.com> Signed-off-by: Christoph Hellwig <hch@lst.de> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-04-20 09:23:30 +02:00
Anna-Maria Behnsen	9a5a4d23e2	timers: Fix warning condition in __run_timers() ... commit c54bc0fc84214b203f7a0ebfd1bd308ce2abe920 upstream. When the timer base is empty, base::next_expiry is set to base::clk + NEXT_TIMER_MAX_DELTA and base::next_expiry_recalc is false. When no timer is queued until jiffies reaches base::next_expiry value, the warning for not finding any expired timer and base::next_expiry_recalc is false in __run_timers() triggers. To prevent triggering the warning in this valid scenario base::timers_pending needs to be added to the warning condition. Fixes: 31cd0e119d ("timers: Recalculate next timer interrupt only when necessary") Reported-by: Johannes Berg <johannes@sipsolutions.net> Signed-off-by: Anna-Maria Behnsen <anna-maria@linutronix.de> Signed-off-by: Thomas Gleixner <tglx@linutronix.de> Reviewed-by: Frederic Weisbecker <frederic@kernel.org> Link: https://lore.kernel.org/r/20220405191732.7438-3-anna-maria@linutronix.de Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-04-20 09:23:30 +02:00
Nadav Amit	89496d80bf	smp: Fix offline cpu check in flush_smp_call_function_queue() ... commit 9e949a3886356fe9112c6f6f34a6e23d1d35407f upstream. The check in flush_smp_call_function_queue() for callbacks that are sent to offline CPUs currently checks whether the queue is empty. However, flush_smp_call_function_queue() has just deleted all the callbacks from the queue and moved all the entries into a local list. This checks would only be positive if some callbacks were added in the short time after llist_del_all() was called. This does not seem to be the intention of this check. Change the check to look at the local list to which the entries were moved instead of the queue from which all the callbacks were just removed. Fixes: 8d056c48e4 ("CPU hotplug, smp: flush any pending IPI callbacks before CPU offline") Signed-off-by: Nadav Amit <namit@vmware.com> Signed-off-by: Thomas Gleixner <tglx@linutronix.de> Link: https://lore.kernel.org/r/20220319072015.1495036-1-namit@vmware.com Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-04-20 09:23:29 +02:00
Paul Gortmaker	0806f19305	tick/nohz: Use WARN_ON_ONCE() to prevent console saturation ... commit 40e97e42961f8c6cc7bd5fe67cc18417e02d78f1 upstream. While running some testing on code that happened to allow the variable tick_nohz_full_running to get set but with no "possible" NOHZ cores to back up that setting, this warning triggered: if (unlikely(tick_do_timer_cpu == TICK_DO_TIMER_NONE)) WARN_ON(tick_nohz_full_running); The console was overwhemled with an endless stream of one WARN per tick per core and there was no way to even see what was going on w/o using a serial console to capture it and then trace it back to this. Change it to WARN_ON_ONCE(). Fixes: 08ae95f4fd ("nohz_full: Allow the boot CPU to be nohz_full") Signed-off-by: Paul Gortmaker <paul.gortmaker@windriver.com> Signed-off-by: Thomas Gleixner <tglx@linutronix.de> Cc: stable@vger.kernel.org Link: https://lore.kernel.org/r/20211206145950.10927-3-paul.gortmaker@windriver.com Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-04-20 09:23:29 +02:00
Rei Yamamoto	0275c75955	genirq/affinity: Consider that CPUs on nodes can be unbalanced ... commit 08d835dff916bfe8f45acc7b92c7af6c4081c8a7 upstream. If CPUs on a node are offline at boot time, the number of nodes is different when building affinity masks for present cpus and when building affinity masks for possible cpus. This causes the following problem: In the case that the number of vectors is less than the number of nodes there are cases where bits of masks for present cpus are overwritten when building masks for possible cpus. Fix this by excluding CPUs, which are not part of the current build mask (present/possible). [ tglx: Massaged changelog and added comment ] Fixes: b825921990 ("genirq/affinity: Spread IRQs to all available NUMA nodes") Signed-off-by: Rei Yamamoto <yamamoto.rei@jp.fujitsu.com> Signed-off-by: Thomas Gleixner <tglx@linutronix.de> Reviewed-by: Ming Lei <ming.lei@redhat.com> Cc: stable@vger.kernel.org Link: https://lore.kernel.org/r/20220331003309.10891-1-yamamoto.rei@jp.fujitsu.com Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-04-20 09:23:29 +02:00
Greg Kroah-Hartman	95f4203fc9	Merge 5.10.110 into android12-5.10-lts ... Changes in 5.10.110 swiotlb: fix info leak with DMA_FROM_DEVICE USB: serial: pl2303: add IBM device IDs USB: serial: simple: add Nokia phone driver hv: utils: add PTP_1588_CLOCK to Kconfig to fix build netdevice: add the case if dev is NULL HID: logitech-dj: add new lightspeed receiver id xfrm: fix tunnel model fragmentation behavior ARM: mstar: Select HAVE_ARM_ARCH_TIMER virtio_console: break out of buf poll on remove vdpa/mlx5: should verify CTRL_VQ feature exists for MQ tools/virtio: fix virtio_test execution ethernet: sun: Free the coherent when failing in probing gpio: Revert regression in sysfs-gpio (gpiolib.c) spi: Fix invalid sgs value net:mcf8390: Use platform_get_irq() to get the interrupt Revert "gpio: Revert regression in sysfs-gpio (gpiolib.c)" spi: Fix erroneous sgs value with min_t() Input: zinitix - do not report shadow fingers af_key: add __GFP_ZERO flag for compose_sadb_supported in function pfkey_register net: dsa: microchip: add spi_device_id tables locking/lockdep: Avoid potential access of invalid memory in lock_class iommu/iova: Improve 32-bit free space estimate tpm: fix reference counting for struct tpm_chip virtio-blk: Use blk_validate_block_size() to validate block size USB: usb-storage: Fix use of bitfields for hardware data in ene_ub6250.c xhci: fix garbage USBSTS being logged in some cases xhci: fix runtime PM imbalance in USB2 resume xhci: make xhci_handshake timeout for xhci_reset() adjustable xhci: fix uninitialized string returned by xhci_decode_ctrl_ctx() mei: me: add Alder Lake N device id. mei: avoid iterator usage outside of list_for_each_entry coresight: Fix TRCCONFIGR.QE sysfs interface iio: afe: rescale: use s64 for temporary scale calculations iio: inkern: apply consumer scale on IIO_VAL_INT cases iio: inkern: apply consumer scale when no channel scale is available iio: inkern: make a best effort on offset calculation greybus: svc: fix an error handling bug in gb_svc_hello() clk: uniphier: Fix fixed-rate initialization ptrace: Check PTRACE_O_SUSPEND_SECCOMP permission on PTRACE_SEIZE KEYS: fix length validation in keyctl_pkey_params_get_2() Documentation: add link to stable release candidate tree Documentation: update stable tree link firmware: stratix10-svc: add missing callback parameter on RSU HID: intel-ish-hid: Use dma_alloc_coherent for firmware update SUNRPC: avoid race between mod_timer() and del_timer_sync() NFSD: prevent underflow in nfssvc_decode_writeargs() NFSD: prevent integer overflow on 32 bit systems f2fs: fix to unlock page correctly in error path of is_alive() f2fs: quota: fix loop condition at f2fs_quota_sync() f2fs: fix to do sanity check on .cp_pack_total_block_count remoteproc: Fix count check in rproc_coredump_write() pinctrl: samsung: drop pin banks references on error paths spi: mxic: Fix the transmit path mtd: rawnand: protect access to rawnand devices while in suspend can: ems_usb: ems_usb_start_xmit(): fix double dev_kfree_skb() in error path jffs2: fix use-after-free in jffs2_clear_xattr_subsystem jffs2: fix memory leak in jffs2_do_mount_fs jffs2: fix memory leak in jffs2_scan_medium mm/pages_alloc.c: don't create ZONE_MOVABLE beyond the end of a node mm: invalidate hwpoison page cache page in fault path mempolicy: mbind_range() set_policy() after vma_merge() scsi: libsas: Fix sas_ata_qc_issue() handling of NCQ NON DATA commands qed: display VF trust config qed: validate and restrict untrusted VFs vlan promisc mode riscv: Fix fill_callchain return value riscv: Increase stack size under KASAN Revert "Input: clear BTN_RIGHT/MIDDLE on buttonpads" cifs: prevent bad output lengths in smb2_ioctl_query_info() cifs: fix NULL ptr dereference in smb2_ioctl_query_info() ALSA: cs4236: fix an incorrect NULL check on list iterator ALSA: hda: Avoid unsol event during RPM suspending ALSA: pcm: Fix potential AB/BA lock with buffer_mutex and mmap_lock ALSA: hda/realtek: Fix audio regression on Mi Notebook Pro 2020 mm: madvise: skip unmapped vma holes passed to process_madvise mm: madvise: return correct bytes advised with process_madvise Revert "mm: madvise: skip unmapped vma holes passed to process_madvise" mm,hwpoison: unmap poisoned page before invalidation mm/kmemleak: reset tag when compare object pointer dm integrity: set journal entry unused when shrinking device drbd: fix potential silent data corruption can: isotp: sanitize CAN ID checks in isotp_bind() powerpc/kvm: Fix kvm_use_magic_page udp: call udp_encap_enable for v6 sockets when enabling encap arm64: signal: nofpsimd: Do not allocate fp/simd context when not available arm64: dts: ti: k3-am65: Fix gic-v3 compatible regs arm64: dts: ti: k3-j721e: Fix gic-v3 compatible regs arm64: dts: ti: k3-j7200: Fix gic-v3 compatible regs ACPI: properties: Consistently return -ENOENT if there are no more references coredump: Also dump first pages of non-executable ELF libraries ext4: fix ext4_fc_stats trace point ext4: fix fs corruption when tring to remove a non-empty directory with IO error drivers: hamradio: 6pack: fix UAF bug caused by mod_timer() mailbox: tegra-hsp: Flush whole channel block: limit request dispatch loop duration block: don't merge across cgroup boundaries if blkcg is enabled drm/edid: check basic audio support on CEA extension block video: fbdev: sm712fb: Fix crash in smtcfb_read() video: fbdev: atari: Atari 2 bpp (STe) palette bugfix ARM: dts: at91: sama5d2: Fix PMERRLOC resource size ARM: dts: exynos: fix UART3 pins configuration in Exynos5250 ARM: dts: exynos: add missing HDMI supplies on SMDK5250 ARM: dts: exynos: add missing HDMI supplies on SMDK5420 mgag200 fix memmapsl configuration in GCTL6 register carl9170: fix missing bit-wise or operator for tx_params pstore: Don't use semaphores in always-atomic-context code thermal: int340x: Increase bitmap size lib/raid6/test: fix multiple definition linking error exec: Force single empty string when argv is empty crypto: rsa-pkcs1pad - only allow with rsa crypto: rsa-pkcs1pad - correctly get hash from source scatterlist crypto: rsa-pkcs1pad - restore signature length check crypto: rsa-pkcs1pad - fix buffer overread in pkcs1pad_verify_complete() bcache: fixup multiple threads crash DEC: Limit PMAX memory probing to R3k systems media: gpio-ir-tx: fix transmit with long spaces on Orange Pi PC media: davinci: vpif: fix unbalanced runtime PM get media: davinci: vpif: fix unbalanced runtime PM enable xtensa: fix stop_machine_cpuslocked call in patch_text xtensa: fix xtensa_wsr always writing 0 brcmfmac: firmware: Allocate space for default boardrev in nvram brcmfmac: pcie: Release firmwares in the brcmf_pcie_setup error path brcmfmac: pcie: Replace brcmf_pcie_copy_mem_todev with memcpy_toio brcmfmac: pcie: Fix crashes due to early IRQs drm/i915/opregion: check port number bounds for SWSCI display power state drm/i915/gem: add missing boundary check in vm_access PCI: pciehp: Clear cmd_busy bit in polling mode PCI: xgene: Revert "PCI: xgene: Fix IB window setup" regulator: qcom_smd: fix for_each_child.cocci warnings selinux: check return value of sel_make_avc_files hwrng: cavium - Check health status while reading random data hwrng: cavium - HW_RANDOM_CAVIUM should depend on ARCH_THUNDER crypto: sun8i-ss - really disable hash on A80 crypto: authenc - Fix sleep in atomic context in decrypt_tail crypto: mxs-dcp - Fix scatterlist processing thermal: int340x: Check for NULL after calling kmemdup() spi: tegra114: Add missing IRQ check in tegra_spi_probe arm64/mm: avoid fixmap race condition when create pud mapping selftests/x86: Add validity check and allow field splitting crypto: rockchip - ECB does not need IV audit: log AUDIT_TIME_* records only from rules EVM: fix the evm= __setup handler return value crypto: ccree - don't attempt 0 len DMA mappings spi: pxa2xx-pci: Balance reference count for PCI DMA device hwmon: (pmbus) Add mutex to regulator ops hwmon: (sch56xx-common) Replace WDOG_ACTIVE with WDOG_HW_RUNNING nvme: cleanup __nvme_check_ids block: don't delete queue kobject before its children PM: hibernate: fix __setup handler error handling PM: suspend: fix return value of __setup handler spi: spi-zynqmp-gqspi: Handle error for dma_set_mask hwrng: atmel - disable trng on failure path crypto: sun8i-ss - call finalize with bh disabled crypto: sun8i-ce - call finalize with bh disabled crypto: amlogic - call finalize with bh disabled crypto: vmx - add missing dependencies clocksource/drivers/timer-ti-dm: Fix regression from errata i940 fix clocksource/drivers/exynos_mct: Refactor resources allocation clocksource/drivers/exynos_mct: Handle DTS with higher number of interrupts clocksource/drivers/timer-microchip-pit64b: Use notrace clocksource/drivers/timer-of: Check return value of of_iomap in timer_of_base_init() ACPI: APEI: fix return value of __setup handlers crypto: ccp - ccp_dmaengine_unregister release dma channels crypto: ccree - Fix use after free in cc_cipher_exit() vfio: platform: simplify device removal amba: Make the remove callback return void hwrng: nomadik - Change clk_disable to clk_disable_unprepare hwmon: (pmbus) Add Vin unit off handling clocksource: acpi_pm: fix return value of __setup handler io_uring: terminate manual loop iterator loop correctly for non-vecs watch_queue: Fix NULL dereference in error cleanup watch_queue: Actually free the watch f2fs: fix to enable ATGC correctly via gc_idle sysfs interface sched/debug: Remove mpol_get/put and task_lock/unlock from sched_show_numa sched/core: Export pelt_thermal_tp rseq: Optimise rseq_get_rseq_cs() and clear_rseq_cs() rseq: Remove broken uapi field layout on 32-bit little endian perf/core: Fix address filter parser for multiple filters perf/x86/intel/pt: Fix address filter config for 32-bit kernel f2fs: fix missing free nid in f2fs_handle_failed_inode nfsd: more robust allocation failure handling in nfsd_file_cache_init f2fs: fix to avoid potential deadlock btrfs: fix unexpected error path when reflinking an inline extent f2fs: compress: remove unneeded read when rewrite whole cluster f2fs: fix compressed file start atomic write may cause data corruption selftests, x86: fix how check_cc.sh is being invoked kunit: make kunit_test_timeout compatible with comment media: staging: media: zoran: fix usage of vb2_dma_contig_set_max_seg_size media: v4l2-mem2mem: Apply DST_QUEUE_OFF_BASE on MMAP buffers across ioctls media: mtk-vcodec: potential dereference of null pointer media: bttv: fix WARNING regression on tunerless devices ASoC: xilinx: xlnx_formatter_pcm: Handle sysclk setting ASoC: generic: simple-card-utils: remove useless assignment media: coda: Fix missing put_device() call in coda_get_vdoa_data media: meson: vdec: potential dereference of null pointer media: hantro: Fix overfill bottom register field name media: aspeed: Correct value for h-total-pixels video: fbdev: matroxfb: set maxvram of vbG200eW to the same as vbG200 to avoid black screen video: fbdev: controlfb: Fix set but not used warnings video: fbdev: controlfb: Fix COMPILE_TEST build video: fbdev: smscufx: Fix null-ptr-deref in ufx_usb_probe() video: fbdev: atmel_lcdfb: fix an error code in atmel_lcdfb_probe() video: fbdev: fbcvt.c: fix printing in fb_cvt_print_name() firmware: qcom: scm: Remove reassignment to desc following initializer ARM: dts: qcom: ipq4019: fix sleep clock soc: qcom: rpmpd: Check for null return of devm_kcalloc soc: qcom: ocmem: Fix missing put_device() call in of_get_ocmem soc: qcom: aoss: remove spurious IRQF_ONESHOT flags arm64: dts: qcom: sdm845: fix microphone bias properties and values arm64: dts: qcom: sm8150: Correct TCS configuration for apps rsc firmware: ti_sci: Fix compilation failure when CONFIG_TI_SCI_PROTOCOL is not defined soc: ti: wkup_m3_ipc: Fix IRQ check in wkup_m3_ipc_probe ARM: dts: sun8i: v3s: Move the csi1 block to follow address order ARM: dts: imx: Add missing LVDS decoder on M53Menlo media: video/hdmi: handle short reads of hdmi info frame. media: em28xx: initialize refcount before kref_get media: usb: go7007: s2250-board: fix leak in probe() media: cedrus: H265: Fix neighbour info buffer size media: cedrus: h264: Fix neighbour info buffer size ASoC: codecs: wcd934x: fix return value of wcd934x_rx_hph_mode_put uaccess: fix nios2 and microblaze get_user_8() ASoC: rt5663: check the return value of devm_kzalloc() in rt5663_parse_dp() ASoC: ti: davinci-i2s: Add check for clk_enable() ALSA: spi: Add check for clk_enable() arm64: dts: ns2: Fix spi-cpol and spi-cpha property arm64: dts: broadcom: Fix sata nodename printk: fix return value of printk.devkmsg __setup handler ASoC: mxs-saif: Handle errors for clk_enable ASoC: atmel_ssc_dai: Handle errors for clk_enable ASoC: dwc-i2s: Handle errors for clk_enable ASoC: soc-compress: prevent the potentially use of null pointer memory: emif: Add check for setup_interrupts memory: emif: check the pointer temp in get_device_details() ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction arm64: dts: rockchip: Fix SDIO regulator supply properties on rk3399-firefly m68k: coldfire/device.c: only build for MCF_EDMA when h/w macros are defined media: stk1160: If start stream fails, return buffers with VB2_BUF_STATE_QUEUED media: vidtv: Check for null return of vzalloc ASoC: atmel: Add missing of_node_put() in at91sam9g20ek_audio_probe ASoC: wm8350: Handle error for wm8350_register_irq ASoC: fsi: Add check for clk_enable video: fbdev: omapfb: Add missing of_node_put() in dvic_probe_of media: saa7134: convert list_for_each to entry variant media: saa7134: fix incorrect use to determine if list is empty ivtv: fix incorrect device_caps for ivtvfb ASoC: rockchip: i2s: Use devm_platform_get_and_ioremap_resource() ASoC: rockchip: i2s: Fix missing clk_disable_unprepare() in rockchip_i2s_probe ASoC: SOF: Add missing of_node_put() in imx8m_probe ASoC: dmaengine: do not use a NULL prepare_slave_config() callback ASoC: mxs: Fix error handling in mxs_sgtl5000_probe ASoC: fsl_spdif: Disable TX clock when stop ASoC: imx-es8328: Fix error return code in imx_es8328_probe() ASoC: msm8916-wcd-digital: Fix missing clk_disable_unprepare() in msm8916_wcd_digital_probe mmc: davinci_mmc: Handle error for clk_enable ASoC: atmel: sam9x5_wm8731: use devm_snd_soc_register_card() ASoC: atmel: Fix error handling in sam9x5_wm8731_driver_probe ASoC: msm8916-wcd-analog: Fix error handling in pm8916_wcd_analog_spmi_probe ASoC: codecs: wcd934x: Add missing of_node_put() in wcd934x_codec_parse_data ARM: configs: multi_v5_defconfig: re-enable CONFIG_V4L_PLATFORM_DRIVERS drm/meson: osd_afbcd: Add an exit callback to struct meson_afbcd_ops drm/bridge: Fix free wrong object in sii8620_init_rcp_input_dev drm/bridge: Add missing pm_runtime_disable() in __dw_mipi_dsi_probe drm/bridge: nwl-dsi: Fix PM disable depth imbalance in nwl_dsi_probe drm: bridge: adv7511: Fix ADV7535 HPD enablement ath10k: fix memory overwrite of the WoWLAN wakeup packet pattern drm/panfrost: Check for error num after setting mask libbpf: Fix possible NULL pointer dereference when destroying skeleton udmabuf: validate ubuf->pagecount Bluetooth: hci_serdev: call init_rwsem() before p->open() mtd: onenand: Check for error irq mtd: rawnand: gpmi: fix controller timings setting drm/edid: Don't clear formats if using deep color ionic: fix type complaint in ionic_dev_cmd_clean() drm/nouveau/acr: Fix undefined behavior in nvkm_acr_hsfw_load_bl() drm/amd/display: Fix a NULL pointer dereference in amdgpu_dm_connector_add_common_modes() drm/amd/pm: return -ENOTSUPP if there is no get_dpm_ultimate_freq function ath9k_htc: fix uninit value bugs RDMA/core: Set MR type in ib_reg_user_mr KVM: PPC: Fix vmx/vsx mixup in mmio emulation i40e: don't reserve excessive XDP_PACKET_HEADROOM on XSK Rx to skb i40e: respect metadata on XSK Rx to skb power: reset: gemini-poweroff: Fix IRQ check in gemini_poweroff_probe ray_cs: Check ioremap return value powerpc: dts: t1040rdb: fix ports names for Seville Ethernet switch KVM: PPC: Book3S HV: Check return value of kvmppc_radix_init powerpc/perf: Don't use perf_hw_context for trace IMC PMU mt76: mt7915: use proper aid value in mt7915_mcu_wtbl_generic_tlv in sta mode mt76: mt7915: use proper aid value in mt7915_mcu_sta_basic_tlv mt76: mt7603: check sta_rates pointer in mt7603_sta_rate_tbl_update mt76: mt7615: check sta_rates pointer in mt7615_sta_rate_tbl_update net: dsa: mv88e6xxx: Enable port policy support on 6097 scripts/dtc: Call pkg-config POSIXly correct livepatch: Fix build failure on 32 bits processors PCI: aardvark: Fix reading PCI_EXP_RTSTA_PME bit on emulated bridge drm/bridge: dw-hdmi: use safe format when first in bridge chain power: supply: ab8500: Fix memory leak in ab8500_fg_sysfs_init HID: i2c-hid: fix GET/SET_REPORT for unnumbered reports iommu/ipmmu-vmsa: Check for error num after setting mask drm/amd/pm: enable pm sysfs write for one VF mode drm/amd/display: Add affected crtcs to atomic state for dsc mst unplug IB/cma: Allow XRC INI QPs to set their local ACK timeout dax: make sure inodes are flushed before destroy cache iwlwifi: Fix -EIO error code that is never returned iwlwifi: mvm: Fix an error code in iwl_mvm_up() drm/msm/dp: populate connector of struct dp_panel drm/msm/dpu: add DSPP blocks teardown drm/msm/dpu: fix dp audio condition dm crypt: fix get_key_size compiler warning if !CONFIG_KEYS scsi: pm8001: Fix command initialization in pm80XX_send_read_log() scsi: pm8001: Fix command initialization in pm8001_chip_ssp_tm_req() scsi: pm8001: Fix payload initialization in pm80xx_set_thermal_config() scsi: pm8001: Fix le32 values handling in pm80xx_set_sas_protocol_timer_config() scsi: pm8001: Fix payload initialization in pm80xx_encrypt_update() scsi: pm8001: Fix le32 values handling in pm80xx_chip_ssp_io_req() scsi: pm8001: Fix le32 values handling in pm80xx_chip_sata_req() scsi: pm8001: Fix NCQ NON DATA command task initialization scsi: pm8001: Fix NCQ NON DATA command completion handling scsi: pm8001: Fix abort all task initialization RDMA/mlx5: Fix the flow of a miss in the allocation of a cache ODP MR drm/amd/display: Remove vupdate_int_entry definition TOMOYO: fix __setup handlers return values ext2: correct max file size computing drm/tegra: Fix reference leak in tegra_dsi_ganged_probe power: supply: bq24190_charger: Fix bq24190_vbus_is_enabled() wrong false return scsi: hisi_sas: Change permission of parameter prot_mask drm/bridge: cdns-dsi: Make sure to to create proper aliases for dt bpf, arm64: Call build_prologue() first in first JIT pass bpf, arm64: Feed byte-offset into bpf line info gpu: host1x: Fix a memory leak in 'host1x_remove()' libbpf: Skip forward declaration when counting duplicated type names powerpc/mm/numa: skip NUMA_NO_NODE onlining in parse_numa_properties() powerpc/Makefile: Don't pass -mcpu=powerpc64 when building 32-bit KVM: x86: Fix emulation in writing cr8 KVM: x86/emulator: Defer not-present segment check in __load_segment_descriptor() hv_balloon: rate-limit "Unhandled message" warning i2c: xiic: Make bus names unique power: supply: wm8350-power: Handle error for wm8350_register_irq power: supply: wm8350-power: Add missing free in free_charger_irq IB/hfi1: Allow larger MTU without AIP PCI: Reduce warnings on possible RW1C corruption net: axienet: fix RX ring refill allocation failure handling mips: DEC: honor CONFIG_MIPS_FP_SUPPORT=n powerpc/sysdev: fix incorrect use to determine if list is empty mfd: mc13xxx: Add check for mc13xxx_irq_request libbpf: Unmap rings when umem deleted selftests/bpf: Make test_lwt_ip_encap more stable and faster platform/x86: huawei-wmi: check the return value of device_create_file() powerpc: 8xx: fix a return value error in mpc8xx_pic_init vxcan: enable local echo for sent CAN frames ath10k: Fix error handling in ath10k_setup_msa_resources mips: cdmm: Fix refcount leak in mips_cdmm_phys_base MIPS: RB532: fix return value of __setup handler MIPS: pgalloc: fix memory leak caused by pgd_free() mtd: rawnand: atmel: fix refcount issue in atmel_nand_controller_init RDMA/mlx5: Fix memory leak in error flow for subscribe event routine bpf, sockmap: Fix memleak in tcp_bpf_sendmsg while sk msg is full bpf, sockmap: Fix more uncharged while msg has more_data bpf, sockmap: Fix double uncharge the mem of sk_msg samples/bpf, xdpsock: Fix race when running for fix duration of time USB: storage: ums-realtek: fix error code in rts51x_read_mem() can: isotp: return -EADDRNOTAVAIL when reading from unbound socket can: isotp: support MSG_TRUNC flag when reading from socket bareudp: use ipv6_mod_enabled to check if IPv6 enabled selftests/bpf: Fix error reporting from sock_fields programs Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed Bluetooth: btmtksdio: Fix kernel oops in btmtksdio_interrupt ipv4: Fix route lookups when handling ICMP redirects and PMTU updates af_netlink: Fix shift out of bounds in group mask calculation i2c: meson: Fix wrong speed use from probe i2c: mux: demux-pinctrl: do not deactivate a master that is not active selftests/bpf/test_lirc_mode2.sh: Exit with proper code PCI: Avoid broken MSI on SB600 USB devices net: bcmgenet: Use stronger register read/writes to assure ordering tcp: ensure PMTU updates are processed during fastopen openvswitch: always update flow key after nat tipc: fix the timer expires after interval 100ms mfd: asic3: Add missing iounmap() on error asic3_mfd_probe mxser: fix xmit_buf leak in activate when LSR == 0xff pwm: lpc18xx-sct: Initialize driver data and hardware before pwmchip_add() fsi: aspeed: convert to devm_platform_ioremap_resource fsi: Aspeed: Fix a potential double free misc: alcor_pci: Fix an error handling path cpufreq: qcom-cpufreq-nvmem: fix reading of PVS Valid fuse soundwire: intel: fix wrong register name in intel_shim_wake clk: qcom: ipq8074: fix PCI-E clock oops iio: mma8452: Fix probe failing when an i2c_device_id is used staging:iio:adc:ad7280a: Fix handing of device address bit reversing. pinctrl: renesas: r8a77470: Reduce size for narrow VIN1 channel pinctrl: renesas: checker: Fix miscalculation of number of states clk: qcom: ipq8074: Use floor ops for SDCC1 clock phy: dphy: Correct lpx parameter and its derivatives(ta_{get,go,sure}) serial: 8250_mid: Balance reference count for PCI DMA device serial: 8250_lpss: Balance reference count for PCI DMA device NFS: Use of mapping_set_error() results in spurious errors serial: 8250: Fix race condition in RTS-after-send handling iio: adc: Add check for devm_request_threaded_irq habanalabs: Add check for pci_enable_device NFS: Return valid errors from nfs2/3_decode_dirent() dma-debug: fix return value of __setup handlers clk: imx7d: Remove audio_mclk_root_clk clk: at91: sama7g5: fix parents of PDMCs' GCLK clk: qcom: clk-rcg2: Update logic to calculate D value for RCG clk: qcom: clk-rcg2: Update the frac table for pixel clock dmaengine: hisi_dma: fix MSI allocate fail when reload hisi_dma remoteproc: qcom: Fix missing of_node_put in adsp_alloc_memory_region remoteproc: qcom_wcnss: Add missing of_node_put() in wcnss_alloc_memory_region remoteproc: qcom_q6v5_mss: Fix some leaks in q6v5_alloc_memory_region nvdimm/region: Fix default alignment for small regions clk: actions: Terminate clk_div_table with sentinel element clk: loongson1: Terminate clk_div_table with sentinel element clk: clps711x: Terminate clk_div_table with sentinel element clk: tegra: tegra124-emc: Fix missing put_device() call in emc_ensure_emc_driver NFS: remove unneeded check in decode_devicenotify_args() staging: mt7621-dts: fix LEDs and pinctrl on GB-PC1 devicetree staging: mt7621-dts: fix formatting staging: mt7621-dts: fix pinctrl properties for ethernet staging: mt7621-dts: fix GB-PC2 devicetree pinctrl: mediatek: Fix missing of_node_put() in mtk_pctrl_init pinctrl: mediatek: paris: Fix PIN_CONFIG_BIAS_* readback pinctrl: mediatek: paris: Fix "argument" argument type for mtk_pinconf_get() pinctrl: mediatek: paris: Fix pingroup pin config state readback pinctrl: mediatek: paris: Skip custom extra pin config dump for virtual GPIOs pinctrl: nomadik: Add missing of_node_put() in nmk_pinctrl_probe pinctrl/rockchip: Add missing of_node_put() in rockchip_pinctrl_probe tty: hvc: fix return value of __setup handler kgdboc: fix return value of __setup handler serial: 8250: fix XOFF/XON sending when DMA is used kgdbts: fix return value of __setup handler firmware: google: Properly state IOMEM dependency driver core: dd: fix return value of __setup handler jfs: fix divide error in dbNextAG netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options NFSv4.1: don't retry BIND_CONN_TO_SESSION on session error kdb: Fix the putarea helper function clk: qcom: gcc-msm8994: Fix gpll4 width clk: Initialize orphan req_rate xen: fix is_xen_pmu() net: enetc: report software timestamping via SO_TIMESTAMPING net: hns3: fix bug when PF set the duplicate MAC address for VFs net: phy: broadcom: Fix brcm_fet_config_init() selftests: test_vxlan_under_vrf: Fix broken test case qlcnic: dcb: default to returning -EOPNOTSUPP net/x25: Fix null-ptr-deref caused by x25_disconnect NFSv4/pNFS: Fix another issue with a list iterator pointing to the head net: dsa: bcm_sf2_cfp: fix an incorrect NULL check on list iterator fs: fd tables have to be multiples of BITS_PER_LONG lib/test: use after free in register_test_dev_kmod() fs: fix fd table size alignment properly LSM: general protection fault in legacy_parse_param regulator: rpi-panel: Handle I2C errors/timing to the Atmel gcc-plugins/stackleak: Exactly match strings instead of prefixes pinctrl: npcm: Fix broken references to chip->parent_device block, bfq: don't move oom_bfqq selinux: use correct type for context length selinux: allow FIOCLEX and FIONCLEX with policy capability loop: use sysfs_emit() in the sysfs xxx show() Fix incorrect type in assignment of ipv6 port for audit irqchip/qcom-pdc: Fix broken locking irqchip/nvic: Release nvic_base upon failure fs/binfmt_elf: Fix AT_PHDR for unusual ELF files bfq: fix use-after-free in bfq_dispatch_request ACPICA: Avoid walking the ACPI Namespace if it is not there lib/raid6/test/Makefile: Use $(pound) instead of \# for Make 4.3 Revert "Revert "block, bfq: honor already-setup queue merges"" ACPI/APEI: Limit printable size of BERT table data PM: core: keep irq flags in device_pm_check_callbacks() parisc: Fix handling off probe non-access faults nvme-tcp: lockdep: annotate in-kernel sockets spi: tegra20: Use of_device_get_match_data() locking/lockdep: Iterate lock_classes directly when reading lockdep files ext4: correct cluster len and clusters changed accounting in ext4_mb_mark_bb ext4: fix ext4_mb_mark_bb() with flex_bg with fast_commit ext4: don't BUG if someone dirty pages without asking ext4 first f2fs: fix to do sanity check on curseg->alloc_type NFSD: Fix nfsd_breaker_owns_lease() return values f2fs: compress: fix to print raw data size in error path of lz4 decompression ntfs: add sanity check on allocation size media: staging: media: zoran: move videodev alloc media: staging: media: zoran: calculate the right buffer number for zoran_reap_stat_com media: staging: media: zoran: fix various V4L2 compliance errors media: ir_toy: free before error exiting video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow video: fbdev: w100fb: Reset global state video: fbdev: cirrusfb: check pixclock to avoid divide by zero video: fbdev: omapfb: acx565akm: replace snprintf with sysfs_emit ARM: dts: qcom: fix gic_irq_domain_translate warnings for msm8960 ARM: dts: bcm2837: Add the missing L1/L2 cache information ASoC: madera: Add dependencies on MFD media: atomisp_gmin_platform: Add DMI quirk to not turn AXP ELDO2 regulator off on some boards media: atomisp: fix dummy_ptr check to avoid duplicate active_bo ARM: ftrace: avoid redundant loads or clobbering IP ARM: dts: imx7: Use audio_mclk_post_div instead audio_mclk_root_clk arm64: defconfig: build imx-sdma as a module video: fbdev: omapfb: panel-dsi-cm: Use sysfs_emit() instead of snprintf() video: fbdev: omapfb: panel-tpo-td043mtea1: Use sysfs_emit() instead of snprintf() video: fbdev: udlfb: replace snprintf in show functions with sysfs_emit ARM: dts: bcm2711: Add the missing L1/L2 cache information ASoC: soc-core: skip zero num_dai component in searching dai name media: cx88-mpeg: clear interrupt status register before streaming video uaccess: fix type mismatch warnings from access_ok() lib/test_lockup: fix kernel pointer check for separate address spaces ARM: tegra: tamonten: Fix I2C3 pad setting ARM: mmp: Fix failure to remove sram device video: fbdev: sm712fb: Fix crash in smtcfb_write() media: Revert "media: em28xx: add missing em28xx_close_extension" media: hdpvr: initialize dev->worker at hdpvr_register_videodev mmc: host: Return an error when ->enable_sdio_irq() ops is missing media: atomisp: fix bad usage at error handling logic ALSA: hda/realtek: Add alc256-samsung-headphone fixup KVM: x86/mmu: Check for present SPTE when clearing dirty bit in TDP MMU powerpc/kasan: Fix early region not updated correctly powerpc/lib/sstep: Fix 'sthcx' instruction powerpc/lib/sstep: Fix build errors with newer binutils powerpc: Fix build errors with newer binutils scsi: qla2xxx: Fix stuck session in gpdb scsi: qla2xxx: Fix scheduling while atomic scsi: qla2xxx: Fix wrong FDMI data for 64G adapter scsi: qla2xxx: Fix warning for missing error code scsi: qla2xxx: Fix device reconnect in loop topology scsi: qla2xxx: Add devids and conditionals for 28xx scsi: qla2xxx: Check for firmware dump already collected scsi: qla2xxx: Suppress a kernel complaint in qla_create_qpair() scsi: qla2xxx: Fix disk failure to rediscover scsi: qla2xxx: Fix incorrect reporting of task management failure scsi: qla2xxx: Fix hang due to session stuck scsi: qla2xxx: Fix missed DMA unmap for NVMe ls requests scsi: qla2xxx: Fix N2N inconsistent PLOGI scsi: qla2xxx: Reduce false trigger to login scsi: qla2xxx: Use correct feature type field during RFF_ID processing platform: chrome: Split trace include file KVM: x86: Forbid VMM to set SYNIC/STIMER MSRs when SynIC wasn't activated KVM: Prevent module exit until all VMs are freed KVM: x86: fix sending PV IPI KVM: SVM: fix panic on out-of-bounds guest IRQ ASoC: SOF: Intel: Fix NULL ptr dereference when ENOMEM ubifs: rename_whiteout: Fix double free for whiteout_ui->data ubifs: Fix deadlock in concurrent rename whiteout and inode writeback ubifs: Add missing iput if do_tmpfile() failed in rename whiteout ubifs: setflags: Make dirtied_ino_d 8 bytes aligned ubifs: Fix read out-of-bounds in ubifs_wbuf_write_nolock() ubifs: Fix to add refcount once page is set private ubifs: rename_whiteout: correct old_dir size computing wireguard: queueing: use CFI-safe ptr_ring cleanup function wireguard: socket: free skb in send6 when ipv6 is disabled wireguard: socket: ignore v6 endpoints when ipv6 is disabled XArray: Fix xas_create_range() when multi-order entry present can: mcba_usb: mcba_usb_start_xmit(): fix double dev_kfree_skb in error path can: mcba_usb: properly check endpoint type can: mcp251xfd: mcp251xfd_register_get_dev_id(): fix return of error value XArray: Update the LRU list in xas_split() rtc: check if __rtc_read_time was successful gfs2: Make sure FITRIM minlen is rounded up to fs block size net: hns3: fix software vlan talbe of vlan 0 inconsistent with hardware rxrpc: Fix call timer start racing with call destruction mailbox: imx: fix wakeup failure from freeze mode crypto: arm/aes-neonbs-cbc - Select generic cbc and aes watch_queue: Free the page array when watch_queue is dismantled pinctrl: pinconf-generic: Print arguments for bias-pull-* watchdog: rti-wdt: Add missing pm_runtime_disable() in probe function pinctrl: nuvoton: npcm7xx: Rename DS() macro to DSTR() pinctrl: nuvoton: npcm7xx: Use %zu printk format for ARRAY_SIZE() ASoC: mediatek: mt6358: add missing EXPORT_SYMBOLs ubi: Fix race condition between ctrl_cdev_ioctl and ubi_cdev_ioctl ARM: iop32x: offset IRQ numbers by 1 io_uring: fix memory leak of uid in files registration riscv module: remove (NOLOAD) ACPI: CPPC: Avoid out of bounds access when parsing _CPC data platform/chrome: cros_ec_typec: Check for EC device can: isotp: restore accidentally removed MSG_PEEK feature proc: bootconfig: Add null pointer check staging: mt7621-dts: fix pinctrl-0 items to be size-1 items on ethernet ASoC: soc-compress: Change the check for codec_dai batman-adv: Check ptr for NULL before reducing its refcnt mm/mmap: return 1 from stack_guard_gap __setup() handler ARM: 9187/1: JIVE: fix return value of __setup handler mm/memcontrol: return 1 from cgroup.memory __setup() handler mm/usercopy: return 1 from hardened_usercopy __setup() handler bpf: Adjust BPF stack helper functions to accommodate skip > 0 bpf: Fix comment for helper bpf_current_task_under_cgroup() dt-bindings: mtd: nand-controller: Fix the reg property description dt-bindings: mtd: nand-controller: Fix a comment in the examples dt-bindings: spi: mxic: The interrupt property is not mandatory ubi: fastmap: Return error code if memory allocation fails in add_aeb() ASoC: topology: Allow TLV control to be either read or write ARM: dts: spear1340: Update serial node properties ARM: dts: spear13xx: Update SPI dma properties um: Fix uml_mconsole stop/go docs: sysctl/kernel: add missing bit to panic_print openvswitch: Fixed nd target mask field in the flow dump. KVM: x86/mmu: do compare-and-exchange of gPTE via the user address can: m_can: m_can_tx_handler(): fix use after free of skb can: usb_8dev: usb_8dev_start_xmit(): fix double dev_kfree_skb() in error path coredump: Snapshot the vmas in do_coredump coredump: Remove the WARN_ON in dump_vma_snapshot coredump/elf: Pass coredump_params into fill_note_info coredump: Use the vma snapshot in fill_files_note arm64: Do not defer reserve_crashkernel() for platforms with no DMA memory zones PCI: xgene: Revert "PCI: xgene: Use inbound resources for setup" Linux 5.10.110 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I12fbe227793dd40c0582588e1700cf88cafd0ac6	2022-04-18 17:41:18 +02:00
Tejun Heo	4665722d36	cgroup: Use open-time credentials for process migraton perm checks ... commit 1756d7994ad85c2479af6ae5a9750b92324685af upstream. cgroup process migration permission checks are performed at write time as whether a given operation is allowed or not is dependent on the content of the write - the PID. This currently uses current's credentials which is a potential security weakness as it may allow scenarios where a less privileged process tricks a more privileged one into writing into a fd that it created. This patch makes both cgroup2 and cgroup1 process migration interfaces to use the credentials saved at the time of open (file->f_cred) instead of current's. Reported-by: "Eric W. Biederman" <ebiederm@xmission.com> Suggested-by: Linus Torvalds <torvalds@linuxfoundation.org> Fixes: 187fe84067 ("cgroup: require write perm on common ancestor when moving processes on the default hierarchy") Reviewed-by: Michal Koutný <mkoutny@suse.com> Signed-off-by: Tejun Heo <tj@kernel.org> [OP: apply original __cgroup_procs_write() changes to cgroup_threads_write() and cgroup_procs_write(), as the refactoring commit da70862efe006 ("cgroup: cgroup.{procs,threads} factor out common parts") is not present in 5.10-stable] Signed-off-by: Ovidiu Panait <ovidiu.panait@windriver.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-04-13 21:01:10 +02:00
Namhyung Kim	90805175a2	bpf: Adjust BPF stack helper functions to accommodate skip > 0 ... commit ee2a098851bfbe8bcdd964c0121f4246f00ff41e upstream. Let's say that the caller has storage for num_elem stack frames. Then, the BPF stack helper functions walk the stack for only num_elem frames. This means that if skip > 0, one keeps only 'num_elem - skip' frames. This is because it sets init_nr in the perf_callchain_entry to the end of the buffer to save num_elem entries only. I believe it was because the perf callchain code unwound the stack frames until it reached the global max size (sysctl_perf_event_max_stack). However it now has perf_callchain_entry_ctx.max_stack to limit the iteration locally. This simplifies the code to handle init_nr in the BPF callstack entries and removes the confusion with the perf_event's __PERF_SAMPLE_CALLCHAIN_EARLY which sets init_nr to 0. Also change the comment on bpf_get_stack() in the header file to be more explicit what the return value means. Fixes: c195651e56 ("bpf: add bpf_get_stack helper") Signed-off-by: Namhyung Kim <namhyung@kernel.org> Signed-off-by: Alexei Starovoitov <ast@kernel.org> Acked-by: Yonghong Song <yhs@fb.com> Link: https://lore.kernel.org/bpf/30a7b5d5-6726-1cc2-eaee-8da2828a9a9c@oracle.com Link: https://lore.kernel.org/bpf/20220314182042.71025-1-namhyung@kernel.org Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Based-on-patch-by: Eugene Loh <eugene.loh@oracle.com>	2022-04-08 14:40:43 +02:00
Eric Dumazet	7169f60110	watch_queue: Free the page array when watch_queue is dismantled ... commit b490207017ba237d97b735b2aa66dc241ccd18f5 upstream. Commit 7ea1a0124b6d ("watch_queue: Free the alloc bitmap when the watch_queue is torn down") took care of the bitmap, but not the page array. BUG: memory leak unreferenced object 0xffff88810d9bc140 (size 32): comm "syz-executor335", pid 3603, jiffies 4294946994 (age 12.840s) hex dump (first 32 bytes): 40 a7 40 04 00 ea ff ff 00 00 00 00 00 00 00 00 @.@............. 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: kmalloc_array include/linux/slab.h:621 [inline] kcalloc include/linux/slab.h:652 [inline] watch_queue_set_size+0x12f/0x2e0 kernel/watch_queue.c:251 pipe_ioctl+0x82/0x140 fs/pipe.c:632 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:874 [inline] __se_sys_ioctl fs/ioctl.c:860 [inline] __x64_sys_ioctl+0xfc/0x140 fs/ioctl.c:860 do_syscall_x64 arch/x86/entry/common.c:50 [inline] Reported-by: syzbot+25ea042ae28f3888727a@syzkaller.appspotmail.com Fixes: c73be61ced ("pipe: Add general notification queue support") Signed-off-by: Eric Dumazet <edumazet@google.com> Signed-off-by: David Howells <dhowells@redhat.com> Cc: Jann Horn <jannh@google.com> Link: https://lore.kernel.org/r/20220322004654.618274-1-eric.dumazet@gmail.com/ Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-04-08 14:40:41 +02:00
Waiman Long	ecd384c436	locking/lockdep: Iterate lock_classes directly when reading lockdep files ... [ Upstream commit fb7275acd6fb988313dddd8d3d19efa70d9015ad ] When dumping lock_classes information via /proc/lockdep, we can't take the lockdep lock as the lock hold time is indeterminate. Iterating over all_lock_classes without holding lock can be dangerous as there is a slight chance that it may branch off to other lists leading to infinite loop or even access invalid memory if changes are made to all_lock_classes list in parallel. To avoid this problem, iteration of lock classes is now done directly on the lock_classes array itself. The lock_classes_in_use bitmap is checked to see if the lock class is being used. To avoid iterating the full array all the times, a new max_lock_class_idx value is added to track the maximum lock_class index that is currently being used. We can theoretically take the lockdep lock for iterating all_lock_classes when other lockdep files (lockdep_stats and lock_stat) are accessed as the lock hold time will be shorter for them. For consistency, they are also modified to iterate the lock_classes array directly. Signed-off-by: Waiman Long <longman@redhat.com> Signed-off-by: Peter Zijlstra (Intel) <peterz@infradead.org> Link: https://lkml.kernel.org/r/20220211035526.1329503-2-longman@redhat.com Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-04-08 14:40:32 +02:00
Daniel Thompson	e2a2625392	kdb: Fix the putarea helper function ... [ Upstream commit c1cb81429df462eca1b6ba615cddd21dd3103c46 ] Currently kdb_putarea_size() uses copy_from_kernel_nofault() to write *to* arbitrary kernel memory. This is obviously wrong and means the memory modify ('mm') command is a serious risk to debugger stability: if we poke to a bad address we'll double-fault and lose our debug session. Fix this the (very) obvious way. Note that there are two Fixes: tags because the API was renamed and this patch will only trivially backport as far as the rename (and this is probably enough). Nevertheless Christoph's rename did not introduce this problem so I wanted to record that! Fixes: fe557319aa ("maccess: rename probe_kernel_{read,write} to copy_{from,to}_kernel_nofault") Fixes: 5d5314d679 ("kdb: core for kgdb back end (1 of 2)") Signed-off-by: Daniel Thompson <daniel.thompson@linaro.org> Reviewed-by: Douglas Anderson <dianders@chromium.org> Link: https://lore.kernel.org/r/20220128144055.207267-1-daniel.thompson@linaro.org Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-04-08 14:40:29 +02:00
Randy Dunlap	867258d3f3	dma-debug: fix return value of __setup handlers ... [ Upstream commit 80e4390981618e290616dbd06ea190d4576f219d ] When valid kernel command line parameters dma_debug=off dma_debug_entries=100 are used, they are reported as Unknown parameters and added to init's environment strings, polluting it. Unknown kernel command line parameters "BOOT_IMAGE=/boot/bzImage-517rc5 dma_debug=off dma_debug_entries=100", will be passed to user space. and Run /sbin/init as init process with arguments: /sbin/init with environment: HOME=/ TERM=linux BOOT_IMAGE=/boot/bzImage-517rc5 dma_debug=off dma_debug_entries=100 Return 1 from these __setup handlers to indicate that the command line option has been handled. Fixes: 59d3daafa1 ("dma-debug: add kernel command line parameters") Signed-off-by: Randy Dunlap <rdunlap@infradead.org> Reported-by: Igor Zhbanov <i.zhbanov@omprussia.ru> Link: lore.kernel.org/r/64644a2f-4a20-bab3-1e15-3b2cdd0defe3@omprussia.ru Cc: Joerg Roedel <joro@8bytes.org> Cc: Christoph Hellwig <hch@lst.de> Cc: Marek Szyprowski <m.szyprowski@samsung.com> Cc: iommu@lists.linux-foundation.org Cc: Robin Murphy <robin.murphy@arm.com> Signed-off-by: Christoph Hellwig <hch@lst.de> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-04-08 14:40:25 +02:00
Christophe Leroy	b1af8b9ec0	livepatch: Fix build failure on 32 bits processors ... [ Upstream commit 2f293651eca3eacaeb56747dede31edace7329d2 ] Trying to build livepatch on powerpc/32 results in: kernel/livepatch/core.c: In function 'klp_resolve_symbols': kernel/livepatch/core.c:221:23: warning: cast to pointer from integer of different size [-Wint-to-pointer-cast] 221 | sym = (Elf64_Sym *)sechdrs[symndx].sh_addr + ELF_R_SYM(relas[i].r_info); | ^ kernel/livepatch/core.c:221:21: error: assignment to 'Elf32_Sym *' {aka 'struct elf32_sym *'} from incompatible pointer type 'Elf64_Sym *' {aka 'struct elf64_sym *'} [-Werror=incompatible-pointer-types] 221 | sym = (Elf64_Sym *)sechdrs[symndx].sh_addr + ELF_R_SYM(relas[i].r_info); | ^ kernel/livepatch/core.c: In function 'klp_apply_section_relocs': kernel/livepatch/core.c:312:35: error: passing argument 1 of 'klp_resolve_symbols' from incompatible pointer type [-Werror=incompatible-pointer-types] 312 | ret = klp_resolve_symbols(sechdrs, strtab, symndx, sec, sec_objname); | ^~~~~~~ | | | Elf32_Shdr * {aka struct elf32_shdr *} kernel/livepatch/core.c:193:44: note: expected 'Elf64_Shdr *' {aka 'struct elf64_shdr *'} but argument is of type 'Elf32_Shdr *' {aka 'struct elf32_shdr *'} 193 | static int klp_resolve_symbols(Elf64_Shdr *sechdrs, const char *strtab, | ~~~~~~~~~~~~^~~~~~~ Fix it by using the right types instead of forcing 64 bits types. Fixes: 7c8e2bdd5f ("livepatch: Apply vmlinux-specific KLP relocations early") Signed-off-by: Christophe Leroy <christophe.leroy@csgroup.eu> Acked-by: Petr Mladek <pmladek@suse.com> Acked-by: Joe Lawrence <joe.lawrence@redhat.com> Acked-by: Miroslav Benes <mbenes@suse.cz> Signed-off-by: Michael Ellerman <mpe@ellerman.id.au> Link: https://lore.kernel.org/r/5288e11b018a762ea3351cc8fb2d4f15093a4457.1640017960.git.christophe.leroy@csgroup.eu Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-04-08 14:40:15 +02:00
Randy Dunlap	a754ea0de3	printk: fix return value of printk.devkmsg __setup handler ... [ Upstream commit b665eae7a788c5e2bc10f9ac3c0137aa0ad1fc97 ] If an invalid option value is used with "printk.devkmsg=<value>", it is silently ignored. If a valid option value is used, it is honored but the wrong return value (0) is used, indicating that the command line option had an error and was not handled. This string is not added to init's environment strings due to init/main.c::unknown_bootoption() checking for a '.' in the boot option string and then considering that string to be an "Unused module parameter". Print a warning message if a bad option string is used. Always return 1 from the __setup handler to indicate that the command line option has been handled. Fixes: 750afe7bab ("printk: add kernel parameter to control writes to /dev/kmsg") Signed-off-by: Randy Dunlap <rdunlap@infradead.org> Reported-by: Igor Zhbanov <i.zhbanov@omprussia.ru> Link: lore.kernel.org/r/64644a2f-4a20-bab3-1e15-3b2cdd0defe3@omprussia.ru Cc: Borislav Petkov <bp@suse.de> Cc: Andrew Morton <akpm@linux-foundation.org> Cc: Petr Mladek <pmladek@suse.com> Cc: Sergey Senozhatsky <senozhatsky@chromium.org> Cc: Steven Rostedt <rostedt@goodmis.org> Cc: John Ogness <john.ogness@linutronix.de> Reviewed-by: John Ogness <john.ogness@linutronix.de> Reviewed-by: Sergey Senozhatsky <senozhatsky@chromium.org> Reviewed-by: Petr Mladek <pmladek@suse.com> Signed-off-by: Petr Mladek <pmladek@suse.com> Link: https://lore.kernel.org/r/20220228220556.23484-1-rdunlap@infradead.org Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-04-08 14:40:08 +02:00
Adrian Hunter	13c8e37e1f	perf/core: Fix address filter parser for multiple filters ... [ Upstream commit d680ff24e9e14444c63945b43a37ede7cd6958f9 ] Reset appropriate variables in the parser loop between parsing separate filters, so that they do not interfere with parsing the next filter. Fixes: 375637bc52 ("perf/core: Introduce address range filtering") Signed-off-by: Adrian Hunter <adrian.hunter@intel.com> Signed-off-by: Peter Zijlstra (Intel) <peterz@infradead.org> Link: https://lore.kernel.org/r/20220131072453.2839535-4-adrian.hunter@intel.com Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-04-08 14:40:03 +02:00
Mathieu Desnoyers	a9faa5beda	rseq: Remove broken uapi field layout on 32-bit little endian ... [ Upstream commit bfdf4e6208051ed7165b2e92035b4bf11f43eb63 ] The rseq rseq_cs.ptr.{ptr32,padding} uapi endianness handling is entirely wrong on 32-bit little endian: a preprocessor logic mistake wrongly uses the big endian field layout on 32-bit little endian architectures. Fortunately, those ptr32 accessors were never used within the kernel, and only meant as a convenience for user-space. Remove those and replace the whole rseq_cs union by a __u64 type, as this is the only thing really needed to express the ABI. Document how 32-bit architectures are meant to interact with this field. Fixes: ec9c82e03a ("rseq: uapi: Declare rseq_cs field as union, update includes") Signed-off-by: Mathieu Desnoyers <mathieu.desnoyers@efficios.com> Signed-off-by: Peter Zijlstra (Intel) <peterz@infradead.org> Link: https://lkml.kernel.org/r/20220127152720.25898-1-mathieu.desnoyers@efficios.com Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-04-08 14:40:03 +02:00
Eric Dumazet	f0250e05e5	rseq: Optimise rseq_get_rseq_cs() and clear_rseq_cs() ... [ Upstream commit 5e0ccd4a3b01c5a71732a13186ca110a138516ea ] Commit ec9c82e03a ("rseq: uapi: Declare rseq_cs field as union, update includes") added regressions for our servers. Using copy_from_user() and clear_user() for 64bit values is suboptimal. We can use faster put_user() and get_user() on 64bit arches. Signed-off-by: Eric Dumazet <edumazet@google.com> Signed-off-by: Peter Zijlstra (Intel) <peterz@infradead.org> Reviewed-by: Mathieu Desnoyers <mathieu.desnoyers@efficios.com> Link: https://lkml.kernel.org/r/20210413203352.71350-4-eric.dumazet@gmail.com Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-04-08 14:40:03 +02:00
Qais Yousef	ecc17de4b9	sched/core: Export pelt_thermal_tp ... [ Upstream commit 77cf151b7bbdfa3577b3c3f3a5e267a6c60a263b ] We can't use this tracepoint in modules without having the symbol exported first, fix that. Fixes: 765047932f ("sched/pelt: Add support to track thermal pressure") Signed-off-by: Qais Yousef <qais.yousef@arm.com> Signed-off-by: Peter Zijlstra (Intel) <peterz@infradead.org> Link: https://lkml.kernel.org/r/20211028115005.873539-1-qais.yousef@arm.com Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-04-08 14:40:03 +02:00
Bharata B Rao	40732cab51	sched/debug: Remove mpol_get/put and task_lock/unlock from sched_show_numa ... [ Upstream commit 28c988c3ec29db74a1dda631b18785958d57df4f ] The older format of /proc/pid/sched printed home node info which required the mempolicy and task lock around mpol_get(). However the format has changed since then and there is no need for sched_show_numa() any more to have mempolicy argument, asssociated mpol_get/put and task_lock/unlock. Remove them. Fixes: 397f2378f1 ("sched/numa: Fix numa balancing stats in /proc/pid/sched") Signed-off-by: Bharata B Rao <bharata@amd.com> Signed-off-by: Peter Zijlstra (Intel) <peterz@infradead.org> Reviewed-by: Srikar Dronamraju <srikar@linux.vnet.ibm.com> Acked-by: Mel Gorman <mgorman@suse.de> Link: https://lore.kernel.org/r/20220118050515.2973-1-bharata@amd.com Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-04-08 14:40:03 +02:00
David Howells	9d92be1a09	watch_queue: Actually free the watch ... [ Upstream commit 3d8dcf278b1ee1eff1e90be848fa2237db4c07a7 ] free_watch() does everything barring actually freeing the watch object. Fix this by adding the missing kfree. kmemleak produces a report something like the following. Note that as an address can be seen in the first word, the watch would appear to have gone through call_rcu(). BUG: memory leak unreferenced object 0xffff88810ce4a200 (size 96): comm "syz-executor352", pid 3605, jiffies 4294947473 (age 13.720s) hex dump (first 32 bytes): e0 82 48 0d 81 88 ff ff 00 00 00 00 00 00 00 00 ..H............. 80 a2 e4 0c 81 88 ff ff 00 00 00 00 00 00 00 00 ................ backtrace: [<ffffffff8214e6cc>] kmalloc include/linux/slab.h:581 [inline] [<ffffffff8214e6cc>] kzalloc include/linux/slab.h:714 [inline] [<ffffffff8214e6cc>] keyctl_watch_key+0xec/0x2e0 security/keys/keyctl.c:1800 [<ffffffff8214ec84>] __do_sys_keyctl+0x3c4/0x490 security/keys/keyctl.c:2016 [<ffffffff84493a25>] do_syscall_x64 arch/x86/entry/common.c:50 [inline] [<ffffffff84493a25>] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 [<ffffffff84600068>] entry_SYSCALL_64_after_hwframe+0x44/0xae Fixes: c73be61ced ("pipe: Add general notification queue support") Reported-and-tested-by: syzbot+6e2de48f06cdb2884bfc@syzkaller.appspotmail.com Signed-off-by: David Howells <dhowells@redhat.com> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-04-08 14:40:03 +02:00
David Howells	5ae75b4ed3	watch_queue: Fix NULL dereference in error cleanup ... [ Upstream commit a635415a064e77bcfbf43da413fd9dfe0bbed9cb ] In watch_queue_set_size(), the error cleanup code doesn't take account of the fact that __free_page() can't handle a NULL pointer when trying to free up buffer pages that did get allocated. Fix this by only calling __free_page() on the pages actually allocated. Without the fix, this can lead to something like the following: BUG: KASAN: null-ptr-deref in __free_pages+0x1f/0x1b0 mm/page_alloc.c:5473 Read of size 4 at addr 0000000000000034 by task syz-executor168/3599 ... Call Trace: <TASK> __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:106 __kasan_report mm/kasan/report.c:446 [inline] kasan_report.cold+0x66/0xdf mm/kasan/report.c:459 check_region_inline mm/kasan/generic.c:183 [inline] kasan_check_range+0x13d/0x180 mm/kasan/generic.c:189 instrument_atomic_read include/linux/instrumented.h:71 [inline] atomic_read include/linux/atomic/atomic-instrumented.h:27 [inline] page_ref_count include/linux/page_ref.h:67 [inline] put_page_testzero include/linux/mm.h:717 [inline] __free_pages+0x1f/0x1b0 mm/page_alloc.c:5473 watch_queue_set_size+0x499/0x630 kernel/watch_queue.c:275 pipe_ioctl+0xac/0x2b0 fs/pipe.c:632 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:874 [inline] __se_sys_ioctl fs/ioctl.c:860 [inline] __x64_sys_ioctl+0x193/0x200 fs/ioctl.c:860 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae Fixes: c73be61ced ("pipe: Add general notification queue support") Reported-and-tested-by: syzbot+d55757faa9b80590767b@syzkaller.appspotmail.com Signed-off-by: David Howells <dhowells@redhat.com> Reviewed-by: Fabio M. De Francesco <fmdefrancesco@gmail.com> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-04-08 14:40:03 +02:00
Randy Dunlap	3928a04bc6	PM: suspend: fix return value of __setup handler ... [ Upstream commit 7a64ca17e4dd50d5f910769167f3553902777844 ] If an invalid option is given for "test_suspend=<option>", the entire string is added to init's environment, so return 1 instead of 0 from the __setup handler. Unknown kernel command line parameters "BOOT_IMAGE=/boot/bzImage-517rc5 test_suspend=invalid" and Run /sbin/init as init process with arguments: /sbin/init with environment: HOME=/ TERM=linux BOOT_IMAGE=/boot/bzImage-517rc5 test_suspend=invalid Fixes: 2ce986892f ("PM / sleep: Enhance test_suspend option with repeat capability") Fixes: 27ddcc6596 ("PM / sleep: Add state field to pm_states[] entries") Fixes: a9d7052363 ("PM: Separate suspend to RAM functionality from core") Signed-off-by: Randy Dunlap <rdunlap@infradead.org> Reported-by: Igor Zhbanov <i.zhbanov@omprussia.ru> Link: lore.kernel.org/r/64644a2f-4a20-bab3-1e15-3b2cdd0defe3@omprussia.ru Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@intel.com> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-04-08 14:40:01 +02:00
Randy Dunlap	052a218db0	PM: hibernate: fix __setup handler error handling ... [ Upstream commit ba7ffcd4c4da374b0f64666354eeeda7d3827131 ] If an invalid value is used in "resumedelay=<seconds>", it is silently ignored. Add a warning message and then let the __setup handler return 1 to indicate that the kernel command line option has been handled. Fixes: 317cf7e5e8 ("PM / hibernate: convert simple_strtoul to kstrtoul") Signed-off-by: Randy Dunlap <rdunlap@infradead.org> Reported-by: Igor Zhbanov <i.zhbanov@omprussia.ru> Link: lore.kernel.org/r/64644a2f-4a20-bab3-1e15-3b2cdd0defe3@omprussia.ru Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@intel.com> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-04-08 14:40:01 +02:00
Richard Guy Briggs	a137f93ae5	audit: log AUDIT_TIME_* records only from rules ... [ Upstream commit 272ceeaea355214b301530e262a0df8600bfca95 ] AUDIT_TIME_* events are generated when there are syscall rules present that are not related to time keeping. This will produce noisy log entries that could flood the logs and hide events we really care about. Rather than immediately produce the AUDIT_TIME_* records, store the data in the context and log it at syscall exit time respecting the filter rules. Note: This eats the audit_buffer, unlike any others in show_special(). Please see https://bugzilla.redhat.com/show_bug.cgi?id=1991919 Fixes: 7e8eda734d ("ntp: Audit NTP parameters adjustment") Fixes: 2d87a0674b ("timekeeping: Audit clock adjustments") Signed-off-by: Richard Guy Briggs <rgb@redhat.com> [PM: fixed style/whitespace issues] Signed-off-by: Paul Moore <paul@paul-moore.com> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-04-08 14:40:00 +02:00
Jann Horn	5a41a3033a	ptrace: Check PTRACE_O_SUSPEND_SECCOMP permission on PTRACE_SEIZE ... commit ee1fee900537b5d9560e9f937402de5ddc8412f3 upstream. Setting PTRACE_O_SUSPEND_SECCOMP is supposed to be a highly privileged operation because it allows the tracee to completely bypass all seccomp filters on kernels with CONFIG_CHECKPOINT_RESTORE=y. It is only supposed to be settable by a process with global CAP_SYS_ADMIN, and only if that process is not subject to any seccomp filters at all. However, while these permission checks were done on the PTRACE_SETOPTIONS path, they were missing on the PTRACE_SEIZE path, which also sets user-specified ptrace flags. Move the permissions checks out into a helper function and let both ptrace_attach() and ptrace_setoptions() call it. Cc: stable@kernel.org Fixes: 13c4a90119 ("seccomp: add ptrace options for suspend/resume") Signed-off-by: Jann Horn <jannh@google.com> Link: https://lkml.kernel.org/r/20220319010838.1386861-1-jannh@google.com Signed-off-by: Eric W. Biederman <ebiederm@xmission.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-04-08 14:39:50 +02:00
Waiman Long	68c80088f5	locking/lockdep: Avoid potential access of invalid memory in lock_class ... commit 61cc4534b6550997c97a03759ab46b29d44c0017 upstream. It was found that reading /proc/lockdep after a lockdep splat may potentially cause an access to freed memory if lockdep_unregister_key() is called after the splat but before access to /proc/lockdep [1]. This is due to the fact that graph_lock() call in lockdep_unregister_key() fails after the clearing of debug_locks by the splat process. After lockdep_unregister_key() is called, the lock_name may be freed but the corresponding lock_class structure still have a reference to it. That invalid memory pointer will then be accessed when /proc/lockdep is read by a user and a use-after-free (UAF) error will be reported if KASAN is enabled. To fix this problem, lockdep_unregister_key() is now modified to always search for a matching key irrespective of the debug_locks state and zap the corresponding lock class if a matching one is found. [1] https://lore.kernel.org/lkml/77f05c15-81b6-bddd-9650-80d5f23fe330@i-love.sakura.ne.jp/ Fixes: 8b39adbee8 ("locking/lockdep: Make lockdep_unregister_key() honor 'debug_locks' again") Reported-by: Tetsuo Handa <penguin-kernel@i-love.sakura.ne.jp> Signed-off-by: Waiman Long <longman@redhat.com> Signed-off-by: Peter Zijlstra (Intel) <peterz@infradead.org> Reviewed-by: Bart Van Assche <bvanassche@acm.org> Cc: Cheng-Jui Wang <cheng-jui.wang@mediatek.com> Link: https://lkml.kernel.org/r/20220103023558.1377055-1-longman@redhat.com Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-04-08 14:39:48 +02:00
Halil Pasic	d4d975e792	swiotlb: fix info leak with DMA_FROM_DEVICE ... commit ddbd89deb7d32b1fbb879f48d68fda1a8ac58e8e upstream. The problem I'm addressing was discovered by the LTP test covering cve-2018-1000204. A short description of what happens follows: 1) The test case issues a command code 00 (TEST UNIT READY) via the SG_IO interface with: dxfer_len == 524288, dxdfer_dir == SG_DXFER_FROM_DEV and a corresponding dxferp. The peculiar thing about this is that TUR is not reading from the device. 2) In sg_start_req() the invocation of blk_rq_map_user() effectively bounces the user-space buffer. As if the device was to transfer into it. Since commit a45b599ad8 ("scsi: sg: allocate with __GFP_ZERO in sg_build_indirect()") we make sure this first bounce buffer is allocated with GFP_ZERO. 3) For the rest of the story we keep ignoring that we have a TUR, so the device won't touch the buffer we prepare as if the we had a DMA_FROM_DEVICE type of situation. My setup uses a virtio-scsi device and the buffer allocated by SG is mapped by the function virtqueue_add_split() which uses DMA_FROM_DEVICE for the "in" sgs (here scatter-gather and not scsi generics). This mapping involves bouncing via the swiotlb (we need swiotlb to do virtio in protected guest like s390 Secure Execution, or AMD SEV). 4) When the SCSI TUR is done, we first copy back the content of the second (that is swiotlb) bounce buffer (which most likely contains some previous IO data), to the first bounce buffer, which contains all zeros. Then we copy back the content of the first bounce buffer to the user-space buffer. 5) The test case detects that the buffer, which it zero-initialized, ain't all zeros and fails. One can argue that this is an swiotlb problem, because without swiotlb we leak all zeros, and the swiotlb should be transparent in a sense that it does not affect the outcome (if all other participants are well behaved). Copying the content of the original buffer into the swiotlb buffer is the only way I can think of to make swiotlb transparent in such scenarios. So let's do just that if in doubt, but allow the driver to tell us that the whole mapped buffer is going to be overwritten, in which case we can preserve the old behavior and avoid the performance impact of the extra bounce. Signed-off-by: Halil Pasic <pasic@linux.ibm.com> Signed-off-by: Christoph Hellwig <hch@lst.de> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-04-08 14:39:46 +02:00
Waiman Long	002528dfb5	UPSTREAM: locking/lockdep: Avoid potential access of invalid memory in lock_class ... commit 61cc4534b6550997c97a03759ab46b29d44c0017 upstream. It was found that reading /proc/lockdep after a lockdep splat may potentially cause an access to freed memory if lockdep_unregister_key() is called after the splat but before access to /proc/lockdep [1]. This is due to the fact that graph_lock() call in lockdep_unregister_key() fails after the clearing of debug_locks by the splat process. After lockdep_unregister_key() is called, the lock_name may be freed but the corresponding lock_class structure still have a reference to it. That invalid memory pointer will then be accessed when /proc/lockdep is read by a user and a use-after-free (UAF) error will be reported if KASAN is enabled. To fix this problem, lockdep_unregister_key() is now modified to always search for a matching key irrespective of the debug_locks state and zap the corresponding lock class if a matching one is found. [1] https://lore.kernel.org/lkml/77f05c15-81b6-bddd-9650-80d5f23fe330@i-love.sakura.ne.jp/ Bug: 225086211 Fixes: 8b39adbee8 ("locking/lockdep: Make lockdep_unregister_key() honor 'debug_locks' again") Reported-by: Tetsuo Handa <penguin-kernel@i-love.sakura.ne.jp> Signed-off-by: Waiman Long <longman@redhat.com> Signed-off-by: Peter Zijlstra (Intel) <peterz@infradead.org> Reviewed-by: Bart Van Assche <bvanassche@acm.org> Link: https://lkml.kernel.org/r/20220103023558.1377055-1-longman@redhat.com Signed-off-by: Cheng Jui Wang <cheng-jui.wang@mediatek.com> Change-Id: I1b03e363142d2b9905f8f263b02d3c7cfdbc515a	2022-04-01 17:14:44 +00:00
Greg Kroah-Hartman	51790ed529	Merge 5.10.109 into android12-5.10-lts ... Changes in 5.10.109 nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION net: ipv6: fix skb_over_panic in __ip6_append_data exfat: avoid incorrectly releasing for root inode cgroup: Allocate cgroup_file_ctx for kernfs_open_file->priv cgroup: Use open-time cgroup namespace for process migration perm checks cgroup-v1: Correct privileges check in release_agent writes tpm: Fix error handling in async work staging: fbtft: fb_st7789v: reset display before initialization llc: fix netdevice reference leaks in llc_ui_bind() ASoC: sti: Fix deadlock via snd_pcm_stop_xrun() call ALSA: oss: Fix PCM OSS buffer allocation overflow ALSA: usb-audio: add mapping for new Corsair Virtuoso SE ALSA: hda/realtek: Add quirk for Clevo NP70PNJ ALSA: hda/realtek: Add quirk for Clevo NP50PNJ ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc671 ALSA: hda/realtek: Add quirk for ASUS GA402 ALSA: pcm: Fix races among concurrent hw_params and hw_free calls ALSA: pcm: Fix races among concurrent read/write and buffer changes ALSA: pcm: Fix races among concurrent prepare and hw_params/hw_free calls ALSA: pcm: Fix races among concurrent prealloc proc writes ALSA: pcm: Add stream lock during PCM reset ioctl operations ALSA: usb-audio: Add mute TLV for playback volumes on RODE NT-USB ALSA: cmipci: Restore aux vol on suspend/resume ALSA: pci: fix reading of swapped values from pcmreg in AC97 codec drivers: net: xgene: Fix regression in CRC stripping netfilter: nf_tables: initialize registers in nft_do_chain() ACPI / x86: Work around broken XSDT on Advantech DAC-BJ01 board ACPI: battery: Add device HID and quirk for Microsoft Surface Go 3 ACPI: video: Force backlight native for Clevo NL5xRU and NL5xNU crypto: qat - disable registration of algorithms Revert "ath: add support for special 0x0 regulatory domain" rcu: Don't deboost before reporting expedited quiescent state mac80211: fix potential double free on mesh join tpm: use try_get_ops() in tpm-space.c wcn36xx: Differentiate wcn3660 from wcn3620 nds32: fix access_ok() checks in get/put_user llc: only change llc->dev when bind() succeeds Linux 5.10.109 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: Ifd757f0ec4ba643f7cbaf78aa899d3c159c4b877	2022-03-28 10:10:32 +02:00
Paul E. McKenney	fcc9797d0d	rcu: Don't deboost before reporting expedited quiescent state ... commit 10c535787436d62ea28156a4b91365fd89b5a432 upstream. Currently rcu_preempt_deferred_qs_irqrestore() releases rnp->boost_mtx before reporting the expedited quiescent state. Under heavy real-time load, this can result in this function being preempted before the quiescent state is reported, which can in turn prevent the expedited grace period from completing. Tim Murray reports that the resulting expedited grace periods can take hundreds of milliseconds and even more than one second, when they should normally complete in less than a millisecond. This was fine given that there were no particular response-time constraints for synchronize_rcu_expedited(), as it was designed for throughput rather than latency. However, some users now need sub-100-millisecond response-time constratints. This patch therefore follows Neeraj's suggestion (seconded by Tim and by Uladzislau Rezki) of simply reversing the two operations. Reported-by: Tim Murray <timmurray@google.com> Reported-by: Joel Fernandes <joelaf@google.com> Reported-by: Neeraj Upadhyay <quic_neeraju@quicinc.com> Reviewed-by: Neeraj Upadhyay <quic_neeraju@quicinc.com> Reviewed-by: Uladzislau Rezki (Sony) <urezki@gmail.com> Tested-by: Tim Murray <timmurray@google.com> Cc: Todd Kjos <tkjos@google.com> Cc: Sandeep Patil <sspatil@google.com> Cc: <stable@vger.kernel.org> # 5.4.x Signed-off-by: Paul E. McKenney <paulmck@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-03-28 09:57:10 +02:00
Michal Koutný	ea21245cdc	cgroup-v1: Correct privileges check in release_agent writes ... commit 467a726b754f474936980da793b4ff2ec3e382a7 upstream. The idea is to check: a) the owning user_ns of cgroup_ns, b) capabilities in init_user_ns. The commit 24f600856418 ("cgroup-v1: Require capabilities to set release_agent") got this wrong in the write handler of release_agent since it checked user_ns of the opener (may be different from the owning user_ns of cgroup_ns). Secondly, to avoid possibly confused deputy, the capability of the opener must be checked. Fixes: 24f600856418 ("cgroup-v1: Require capabilities to set release_agent") Cc: stable@vger.kernel.org Link: https://lore.kernel.org/stable/20220216121142.GB30035@blackbody.suse.cz/ Signed-off-by: Michal Koutný <mkoutny@suse.com> Reviewed-by: Masami Ichikawa(CIP) <masami.ichikawa@cybertrust.co.jp> Signed-off-by: Tejun Heo <tj@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-03-28 09:57:08 +02:00
Tejun Heo	824a950c3f	cgroup: Use open-time cgroup namespace for process migration perm checks ... commit e57457641613fef0d147ede8bd6a3047df588b95 upstream. cgroup process migration permission checks are performed at write time as whether a given operation is allowed or not is dependent on the content of the write - the PID. This currently uses current's cgroup namespace which is a potential security weakness as it may allow scenarios where a less privileged process tricks a more privileged one into writing into a fd that it created. This patch makes cgroup remember the cgroup namespace at the time of open and uses it for migration permission checks instad of current's. Note that this only applies to cgroup2 as cgroup1 doesn't have namespace support. This also fixes a use-after-free bug on cgroupns reported in https://lore.kernel.org/r/00000000000048c15c05d0083397@google.com Note that backporting this fix also requires the preceding patch. Reported-by: "Eric W. Biederman" <ebiederm@xmission.com> Suggested-by: Linus Torvalds <torvalds@linuxfoundation.org> Cc: Michal Koutný <mkoutny@suse.com> Cc: Oleg Nesterov <oleg@redhat.com> Reviewed-by: Michal Koutný <mkoutny@suse.com> Reported-by: syzbot+50f5cf33a284ce738b62@syzkaller.appspotmail.com Link: https://lore.kernel.org/r/00000000000048c15c05d0083397@google.com Fixes: 5136f6365c ("cgroup: implement "nsdelegate" mount option") Signed-off-by: Tejun Heo <tj@kernel.org> [mkoutny: v5.10: duplicate ns check in procs/threads write handler, adjust context] Signed-off-by: Michal Koutný <mkoutny@suse.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-03-28 09:57:07 +02:00
Tejun Heo	f28364fe38	cgroup: Allocate cgroup_file_ctx for kernfs_open_file->priv ... commit 0d2b5955b36250a9428c832664f2079cbf723bec upstream. of->priv is currently used by each interface file implementation to store private information. This patch collects the current two private data usages into struct cgroup_file_ctx which is allocated and freed by the common path. This allows generic private data which applies to multiple files, which will be used to in the following patch. Note that cgroup_procs iterator is now embedded as procs.iter in the new cgroup_file_ctx so that it doesn't need to be allocated and freed separately. v2: union dropped from cgroup_file_ctx and the procs iterator is embedded in cgroup_file_ctx as suggested by Linus. v3: Michal pointed out that cgroup1's procs pidlist uses of->priv too. Converted. Didn't change to embedded allocation as cgroup1 pidlists get stored for caching. Signed-off-by: Tejun Heo <tj@kernel.org> Cc: Linus Torvalds <torvalds@linux-foundation.org> Reviewed-by: Michal Koutný <mkoutny@suse.com> [mkoutny: v5.10: modify cgroup.pressure handlers, adjust context] Signed-off-by: Michal Koutný <mkoutny@suse.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-03-28 09:57:07 +02:00
Greg Kroah-Hartman	9a559b8868	Merge branch 'android12-5.10' into android12-5.10-lts ... Sync up with android12-5.10 for the following commits: 1419b69403 Merge tag 'android12-5.10.101_r00' into android12-5.10 3eec441822 UPSTREAM: usb: gadget: Fix use-after-free bug by not setting udc->dev.driver 821f3e53d9 UPSTREAM: usb: gadget: rndis: prevent integer overflow in rndis_set_response() 39aca15979 FROMGIT: mm/migrate: fix race between lock page and clear PG_Isolated de0334216b UPSTREAM: arm64: proton-pack: Include unprivileged eBPF status in Spectre v2 mitigation reporting d236f7b4cb UPSTREAM: arm64: Use the clearbhb instruction in mitigations 98b16e808f UPSTREAM: KVM: arm64: Allow SMCCC_ARCH_WORKAROUND_3 to be discovered and migrated 0f76dfc55d UPSTREAM: arm64: Mitigate spectre style branch history side channels 5411474f65 UPSTREAM: arm64: Do not include __READ_ONCE() block in assembly files e9a39a642c UPSTREAM: KVM: arm64: Allow indirect vectors to be used without SPECTRE_V3A fee1ae7c7c UPSTREAM: arm64: proton-pack: Report Spectre-BHB vulnerabilities as part of Spectre-v2 d95b0b4e5d UPSTREAM: arm64: Add percpu vectors for EL1 30180ef431 Revert "BACKPORT: FROMLIST: scsi: core: Reserve one tag for the UFS driver" 28837e415d UPSTREAM: arm64: entry: Add macro for reading symbol addresses from the trampoline e322fe26a1 UPSTREAM: arm64: entry: Add vectors that have the bhb mitigation sequences 2a90cf9af2 UPSTREAM: arm64: entry: Add non-kpti __bp_harden_el1_vectors for mitigations 0db372ec4b UPSTREAM: arm64: entry: Allow the trampoline text to occupy multiple pages 158c87e50a UPSTREAM: arm64: entry: Make the kpti trampoline's kpti sequence optional e6408b96a0 UPSTREAM: arm64: entry: Move trampoline macros out of ifdef'd section 00d8bb6b90 UPSTREAM: arm64: entry: Don't assume tramp_vectors is the start of the vectors 0defb52ce6 UPSTREAM: arm64: entry: Allow tramp_alias to access symbols after the 4K boundary 6e48449c91 UPSTREAM: arm64: entry: Move the trampoline data page before the text page bb8baaf3af UPSTREAM: arm64: entry: Free up another register on kpti's tramp_exit path 32ba6d5d61 UPSTREAM: arm64: entry: Make the trampoline cleanup optional c8b567d888 UPSTREAM: arm64: spectre: Rename spectre_v4_patch_fw_mitigation_conduit 17867c11a2 UPSTREAM: arm64: entry.S: Add ventry overflow sanity checks 81ec26aafe UPSTREAM: arm64: cpufeature: add HWCAP for FEAT_RPRES 18c4e4fa56 UPSTREAM: arm64: cpufeature: add HWCAP for FEAT_AFP 68bc555a23 UPSTREAM: arm64: add ID_AA64ISAR2_EL1 sys register 2e2eef400b UPSTREAM: arm64: Add HWCAP for self-synchronising virtual counter 6d1f2678e2 UPSTREAM: arm64: Add Cortex-X2 CPU part definition 51eded5d1b UPSTREAM: arm64: cputype: Add CPU implementor & types for the Apple M1 cores 803ff1161c UPSTREAM: binder: Add invalid handle info in user error log a40cd23755 UPSTREAM: ARM: fix Thumb2 regression with Spectre BHB 56186c7e4a UPSTREAM: ARM: Spectre-BHB: provide empty stub for non-config 1ea0d91588 UPSTREAM: ARM: fix build warning in proc-v7-bugs.c fdf3cb8a00 UPSTREAM: ARM: Do not use NOCROSSREFS directive with ld.lld 57bc1e13f0 UPSTREAM: ARM: fix co-processor register typo a4e68d43f5 UPSTREAM: ARM: fix build error when BPF_SYSCALL is disabled bd2376838d UPSTREAM: ARM: include unprivileged BPF status in Spectre V2 reporting afbbe4048f UPSTREAM: ARM: Spectre-BHB workaround 5a41f364e7 UPSTREAM: ARM: use LOADADDR() to get load address of sections 3bfcb356df UPSTREAM: ARM: early traps initialisation 5a64a66802 UPSTREAM: ARM: report Spectre v2 status through sysfs 9362cd2b47 UPSTREAM: x86/speculation: Warn about eIBRS + LFENCE + Unprivileged eBPF + SMT 54a2bd029f UPSTREAM: x86/speculation: Warn about Spectre v2 LFENCE mitigation f1b1f893b4 UPSTREAM: x86/speculation: Update link to AMD speculation whitepaper c4188388a3 UPSTREAM: x86/speculation: Use generic retpoline by default on AMD bd02dc4329 UPSTREAM: x86/speculation: Include unprivileged eBPF status in Spectre v2 mitigation reporting 3883503747 UPSTREAM: Documentation/hw-vuln: Update spectre doc 1c3e98581b UPSTREAM: x86/speculation: Add eIBRS + Retpoline options cc9e9aa4e0 UPSTREAM: x86/speculation: Rename RETPOLINE_AMD to RETPOLINE_LFENCE 414a6076ac UPSTREAM: x86,bugs: Unconditionally allow spectre_v2=retpoline,amd f27f62fecd UPSTREAM: bpf: Add kconfig knob for disabling unpriv bpf by default f3ca80cced ANDROID: dm-bow: Protect Ranges fetched and erased from the RB tree 4ebb639f0d ANDROID: mm: page_pinner: fix build warning fe75d58387 ANDROID: fault: Add vendor hook for TLB conflict 8248a3e758 BACKPORT: sched: Fix yet more sched_fork() races cd6e5d5d7d ANDROID: mm/slub: Fix Kasan issue with for_each_object_track 8dbcaf63b2 ANDROID: dm kcopyd: Use reserved memory for the copy buffer 7b5fea2f46 ANDROID: GKI: add allowed list file for xiaomi ae38f9954b ANDROID: GKI: Update symbols to symbol list 786bcb1109 FROMGIT: f2fs: quota: fix loop condition at f2fs_quota_sync() 91fef75d48 FROMGIT: f2fs: Restore rwsem lockdep support 4cc8ec84be ANDROID: ABI: update allowed list for galaxy fcaaaaae6d UPSTREAM: mac80211_hwsim: initialize ieee80211_tx_info at hw_scan_work 91be4236fb ANDROID: GKI: remove vfs-only namespace from 2 symbols a817d6ed87 ANDROID: mm: Fix page table lookup in speculative fault path e53b1b9ad4 UPSTREAM: xhci: re-initialize the HC during resume if HCE was set 767f384155 FROMGIT: xhci: make xhci_handshake timeout for xhci_reset() adjustable ebbf267fc0 ANDROID: vendor_hooks: Add hooks for __alloc_pages_direct_reclaim 135406cecb ANDROID: dma-direct: Document disable_dma32 bf96382fb9 ANDROID: dma-direct: Make DMA32 disablement work for CONFIG_NUMA 8f66dc1a78 UPSTREAM: mmc: block: fix read single on recovery logic cf221db753 UPSTREAM: fget: check that the fd still exists after getting a ref to it 43754d8b7f ANDROID: GKI: Update symbols to symbol list f2d0c30576 ANDROID: vendor_hooks: Add hooks for shrink_active_list 62412e5b8c FROMGIT: mm: count time in drain_all_pages during direct reclaim as memory pressure 3b9fe10e46 ANDROID: incremental-fs: remove spurious kfree() acefa91e51 ANDROID: vendor_hooks: Add hooks for binder c3ac7418e6 ANDROID: qcom: Add sysfs related symbol Change-Id: Icbe5fb26e3cef602e3bbc01745a755a95d72a1a0	2022-03-21 16:49:21 +01:00
Greg Kroah-Hartman	1419b69403	Merge tag 'android12-5.10.101_r00' into android12-5.10 ... This is the merge of the upstream LTS release of 5.10.101 into the android12-5.10 branch. This merge contains the following new commits: c194212a03 Merge 5.10.101 into android12-5.10-lts 3969aba589 Linux 5.10.101 cb86e511e7 iommu: Fix potential use-after-free during probe f6b5d51976 perf: Fix list corruption in perf_cgroup_switch() ce3ca12c63 arm64: dts: imx8mq: fix lcdif port node 759aeacdfe scsi: lpfc: Reduce log messages seen after firmware download 57c5d7d420 scsi: lpfc: Remove NVMe support if kernel has NVME_FC disabled 199dab00f0 can: isotp: fix error path in isotp_sendmsg() to unlock wait queue 3b10ebeb95 Makefile.extrawarn: Move -Wunaligned-access to W=1 ad53060bdf hwmon: (dell-smm) Speed up setting of fan speed 3c75d1017c phy: ti: Fix missing sentinel for clk_div_table 6eabe53492 speakup-dectlk: Restore pitch setting 3836a5ff4b USB: serial: cp210x: add CPI Bulk Coin Recycler id 51b03a9bcd USB: serial: cp210x: add NCR Retail IO box id a21e6b2e08 USB: serial: ch341: add support for GW Instek USB2.0-Serial devices 7113440a36 USB: serial: option: add ZTE MF286D modem b7ed2f9619 USB: serial: ftdi_sio: add support for Brainboxes US-159/235/320 e07dde31ac usb: raw-gadget: fix handling of dual-direction-capable endpoints e9f9b877eb usb: gadget: f_uac2: Define specific wTerminalType fb4ff0f96d usb: gadget: rndis: check size of RNDIS_MSG_SET command 22ec100472 USB: gadget: validate interface OS descriptor requests 351159167c usb: gadget: udc: renesas_usb3: Fix host to USB_ROLE_NONE transition 3bfca38914 usb: dwc3: gadget: Prevent core from processing stale TRBs 2a17bd9f52 usb: ulpi: Call of_node_put correctly 8b89a69166 usb: ulpi: Move of_node_put to ulpi_dev_release 758290defe net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup a66a2b17b8 Revert "usb: dwc2: drd: fix soft connect when gadget is unconfigured" 73961057e9 usb: dwc2: drd: fix soft connect when gadget is unconfigured a37960df7e eeprom: ee1004: limit i2c reads to I2C_SMBUS_BLOCK_MAX 1b99fe34e2 n_tty: wake up poll(POLLRDNORM) on receiving data f1b2573715 vt_ioctl: add array_index_nospec to VT_ACTIVATE 778302ca09 vt_ioctl: fix array_index_nospec in vt_setactivate 22249886dc net: dsa: mv88e6xxx: fix use-after-free in mv88e6xxx_mdios_unregister 3a3c65c487 net: mscc: ocelot: fix mutex lock error during ethtool stats read 809f030745 ice: fix IPIP and SIT TSO offload cf11949b91 ice: fix an error code in ice_cfg_phy_fec() f8edc6feab dpaa2-eth: unregister the netdev before disconnecting from the PHY ff6c9e0fce net: amd-xgbe: disable interrupts during pci removal 657aea7828 tipc: rate limit warning for received illegal binding update ef5cdae8bc net: mdio: aspeed: Add missing MODULE_DEVICE_TABLE bf99c14436 veth: fix races around rq->rx_notify_masked 00e6d6c3bc net: fix a memleak when uncloning an skb dst and its metadata 2e9fd2d0f6 net: do not keep the dst cache when uncloning an skb dst and its metadata 0bae953d7a nfp: flower: fix ida_idx not being released 09ac0fcb0a ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path e177d2e85e net: dsa: lantiq_gswip: don't use devres for mdiobus 95e5402f94 net: dsa: felix: don't use devres for mdiobus 2770b79529 net: dsa: bcm_sf2: don't use devres for mdiobus 475ce5dcf2 net: dsa: ar9331: register the mdiobus under devres 8ccebe77df net: dsa: mv88e6xxx: don't use devres for mdiobus 4a384c1e40 bonding: pair enable_port with slave_arr_updates 1ba45dd326 gpio: sifive: use the correct register to read output values 48e413087d ACPI: PM: s2idle: Cancel wakeup before dispatching EC GPE 3b72d3f020 drm/panel: simple: Assign data from panel_dpi_probe() correctly bf35639192 ixgbevf: Require large buffers for build_skb on 82599VF e5a64f548a arm64: dts: meson-g12b-odroid-n2: fix typo 'dio2133' 04fe6569a7 netfilter: ctnetlink: disable helper autoassign a5ce7ee5fc misc: fastrpc: avoid double fput() on failed usercopy 21c890ca8e drm/vc4: hdmi: Allow DBLCLK modes even if horz timing is odd. 70ea005626 gpio: aggregator: Fix calling into sleeping GPIO controllers 0042178a69 usb: f_fs: Fix use-after-free for epfile 5a37fd9fdc ARM: dts: imx7ulp: Fix 'assigned-clocks-parents' typo 39bf132a6e phy: xilinx: zynqmp: Fix bus width setting for SGMII 108868dae2 ARM: dts: imx6qdl-udoo: Properly describe the SD card detect 0a7b5e8d8c staging: fbtft: Fix error path in fbtft_driver_module_init() 74cd5cb219 ARM: dts: meson8b: Fix the UART device-tree schema validation 566b558e94 ARM: dts: meson8: Fix the UART device-tree schema validation 210d70f081 ARM: dts: meson: Fix the UART compatible strings 88f0e61354 ARM: dts: Fix timer regression for beagleboard revision c c943a297ec drm/rockchip: vop: Correct RK3399 VOP register fields a941384fba PM: s2idle: ACPI: Fix wakeup interrupts handling fcbac51a64 ACPI/IORT: Check node revision for PMCG resources 57ede0ce65 nvme-tcp: fix bogus request completion when failing to send AER 3a669d77e5 ARM: socfpga: fix missing RESET_CONTROLLER 435e62d566 ARM: dts: Fix boot regression on Skomer b217b89e60 ARM: dts: imx23-evk: Remove MX23_PAD_SSP1_DETECT from hog group 3f9843f2f6 riscv: fix build with binutils 2.38 3aa5c86572 KVM: VMX: Set vmcs.PENDING_DBG.BS on #DB in STI/MOVSS blocking shadow bd39fe29bb KVM: SVM: Don't kill SEV guest if SMAP erratum triggers in usermode 9efad4cb03 KVM: nVMX: Also filter MSR_IA32_VMX_TRUE_PINBASED_CTLS when eVMCS db58a3d978 KVM: nVMX: eVMCS: Filter out VM_EXIT_SAVE_VMX_PREEMPTION_TIMER dc129275a7 KVM: eventfd: Fix false positive RCU usage warning 87bbd78a2c net: stmmac: dwmac-sun8i: use return val of readl_poll_timeout() c9b8cc1046 nvme-pci: add the IGNORE_DEV_SUBNQN quirk for Intel P4500/P4600 SSDs d0774cf730 perf: Always wake the parent event a117e986e9 usb: dwc2: gadget: don't try to disable ep0 in dwc2_hsotg_suspend 4607218fde PM: hibernate: Remove register_nosave_region_late() 0e42c4a3d7 scsi: myrs: Fix crash in error case 3bc5b128b9 scsi: ufs: Treat link loss as fatal error 12cf120803 scsi: pm8001: Fix bogus FW crash for maxcpus=1 87f187e526 scsi: qedf: Fix refcount issue when LOGO is received during TMF aa7352aa15 scsi: qedf: Add stag_work to all the vports 150d448c66 scsi: ufs: ufshcd-pltfrm: Check the return value of devm_kstrdup() 7dbda616fc scsi: target: iscsi: Make sure the np under each tpg is unique 67baac10dd powerpc/fixmap: Fix VM debug warning on unmap 3d0eafd459 net: sched: Clarify error message when qdisc kind is unknown 9b569faabd drm: panel-orientation-quirks: Add quirk for the 1Netbook OneXPlayer 0d6b9d15ec x86/perf: Avoid warning for Arch LBR without XSAVE b37dd03f2f NFSv4 handle port presence in fs_location server string 6f2974b52b NFSv4 expose nfs_parse_server_name function 5a9c613a29 NFSv4 remove zero number of fs_locations entries error check 1c79aad118 NFSv4.1: Fix uninitialised variable in devicenotify c5619c510f nfs: nfs4clinet: check the return value of kstrdup() db053bdece NFSv4 only print the label when its queried e2b4435fd3 NFS: change nfs_access_get_cached to only report the mask b4e0c9bcf1 tracing: Propagate is_signed to expression 5234de6c79 drm/amdgpu: Set a suitable dev_info.gart_page_size 6215fb4558 NFSD: Fix offset type in I/O trace points 3a6a2d43e3 NFSD: Clamp WRITE offsets c72f7c2ec3 NFS: Fix initialisation of nfs_client cl_flags field f47ee3a35f net: phy: marvell: Fix MDI-x polarity setting in 88e1118-compatible PHYs 6a33aa7113 net: phy: marvell: Fix RGMII Tx/Rx delays setting in 88e1121-compatible PHYs 7b53d2204c can: isotp: fix potential CAN frame reception race in isotp_rcv() c9cc027c55 mmc: sdhci-of-esdhc: Check for error num after setting mask 8027ba480c ima: Do not print policy rule with inactive LSM labels 8171c8a99f ima: Allow template selection with ima_template[_fmt]= after ima_hash= 0795b7100d ima: Remove ima_policy file before directory 7fea2e5200 integrity: check the return value of audit_log_start() 86e6176a42 Merge 5.10.100 into android12-5.10-lts d4f7d322a4 Linux 5.10.100 3c7e594355 tipc: improve size validations for received domain records 2951d21689 crypto: api - Move cryptomgr soft dependency into algapi b62267b8b0 KVM: s390: Return error on SIDA memop on normal guest be93028d30 moxart: fix potential use-after-free on remove path ca562bf79c Merge branch 'android12-5.10' into `android12-5.10-lts` c3b53fcd90 Merge 5.10.99 into android12-5.10-lts fb063a6465 Linux 5.10.99 4889d6ee9e selftests: nft_concat_range: add test for reload with no element add/del 5577273135 cgroup/cpuset: Fix "suspicious RCU usage" lockdep warning f1f7d1a22f net: dsa: mt7530: make NET_DSA_MT7530 select MEDIATEK_GE_PHY 84b76a509c ext4: fix incorrect type issue during replay_del_range 62e46e0ffc ext4: fix error handling in ext4_fc_record_modified_inode() 764793b4a5 ext4: fix error handling in ext4_restore_inline_data() 6c5bd55e36 ext4: modify the logic of ext4_mb_new_blocks_simple 8d71fc23fc ext4: prevent used blocks from being allocated during fast commit replay ef2053afd7 EDAC/xgene: Fix deferred probing 2a12faf55b EDAC/altera: Fix deferred probing dd274cf852 x86/perf: Default set FREEZE_ON_SMI for all 456f041e03 perf/x86/intel/pt: Fix crash with stop filters in single-range mode 8c0e6a8a63 perf stat: Fix display of grouped aliased events 57e8859acc fbcon: Add option to enable legacy hardware acceleration 460f6b1a23 Revert "fbcon: Disable accelerated scrolling" 460aa9d873 rtc: cmos: Evaluate century appropriate 2324f5fcdf tools/resolve_btfids: Do not print any commands when building silently 1536fafa23 selftests: futex: Use variable MAKE instead of make 8f0fff8b59 selftests/exec: Remove pipe from TEST_GEN_FILES 6304a613a9 bpf: Use VM_MAP instead of VM_ALLOC for ringbuf f744a06404 gve: fix the wrong AdminQ buffer queue index check 51e88e8922 nfsd: nfsd4_setclientid_confirm mistakenly expires confirmed client. ec4334152d scsi: bnx2fc: Make bnx2fc_recv_frame() mp safe fd482f2d63 pinctrl: bcm2835: Fix a few error paths 752d9eafc6 pinctrl: intel: fix unexpected interrupt 14bc9978b4 pinctrl: intel: Fix a glitch when updating IRQ flags on a preconfigured line 5a45448ac9 ASoC: max9759: fix underflow in speaker_gain_control_put() 02f4597198 ASoC: cpcap: Check for NULL pointer after calling of_get_child_by_name cb5f1fbd1f ASoC: xilinx: xlnx_formatter_pcm: Make buffer bytes multiple of period bytes 56e0747d59 ASoC: fsl: Add missing error handling in pcm030_fabric_probe 3e69837551 drm/i915/overlay: Prevent divide by zero bugs in scaling 9ea0185361 net: stmmac: ensure PTP time register reads are consistent 41df2da2c1 net: stmmac: dump gmac4 DMA registers correctly 114bf93504 net: macsec: Verify that send_sci is on when setting Tx sci explicitly 2e7f5b6ee1 net: macsec: Fix offload support for NETDEV_UNREGISTER event 87b1c9fab6 net: ieee802154: Return meaningful error codes from the netlink helpers 78b3f20c17 net: ieee802154: ca8210: Stop leaking skb's 0bfe50dc5d net: ieee802154: mcr20a: Fix lifs/sifs periods 75bbda3189 net: ieee802154: hwsim: Ensure proper channel selection at probe time e895e067d7 spi: uniphier: fix reference count leak in uniphier_spi_probe() ec942d08e0 spi: meson-spicc: add IRQ check in meson_spicc_probe c2cf65e100 spi: mediatek: Avoid NULL pointer crash in interrupt 30e05c98b9 spi: bcm-qspi: check for valid cs before applying chip select 6d226e8afe iommu/amd: Fix loop timeout issue in iommu_ga_log_enable() 9d9995b037 iommu/vt-d: Fix potential memory leak in intel_setup_irq_remapping() b3958d3151 RDMA/mlx4: Don't continue event handler after memory allocation failure d3f8b927df RDMA/siw: Fix broken RDMA Read Fence/Resume logic. c7db20f5be IB/rdmavt: Validate remote_addr during loopback atomic tests 75c610212b RDMA/ucma: Protect mc during concurrent multicast leaves 371979069a RDMA/cma: Use correct address when leaving multicast group aa4ecd995f memcg: charge fs_context and legacy_fs_context 080f371d98 Revert "ASoC: mediatek: Check for error clk pointer" 4a9bd1e678 IB/hfi1: Fix AIP early init panic 5d40f1bdad dma-buf: heaps: Fix potential spectre v1 gadget 30de3bc099 block: bio-integrity: Advance seed correctly for larger interval sizes 352715593e mm/kmemleak: avoid scanning potential huge holes 7053188ddb mm/pgtable: define pte_index so that preprocessor could recognize it bce7f5d74d mm/debug_vm_pgtable: remove pte entry from the page table 2d83a7463d nvme-fabrics: fix state check in nvmf_ctlr_matches_baseopts() a0c73dbdd1 drm/amd/display: Force link_rate as LINK_RATE_RBR2 for 2018 15" Apple Retina panels f071d9fa85 drm/nouveau: fix off by one in BIOS boundary checking 32747e0143 btrfs: fix deadlock between quota disable and qgroup rescan worker aa5d406153 ALSA: hda/realtek: Fix silent output on Gigabyte X570 Aorus Xtreme after reboot from Windows d4aa3a9859 ALSA: hda/realtek: Fix silent output on Gigabyte X570S Aorus Master (newer chipset) 3a8a8072e3 ALSA: hda/realtek: Add missing fixup-model entry for Gigabyte X570 ALC1220 quirks 532cde962f ALSA: hda/realtek: Add quirk for ASUS GU603 410f231fd7 ALSA: hda: realtek: Fix race at concurrent COEF updates a7de100213 ALSA: hda: Fix UAF of leds class devs at unbinding 470bbb9cbd ALSA: usb-audio: Correct quirk for VF0770 6877f87579 ASoC: ops: Reject out of bounds values in snd_soc_put_xr_sx() 038f8b7caa ASoC: ops: Reject out of bounds values in snd_soc_put_volsw_sx() a9394f21fb ASoC: ops: Reject out of bounds values in snd_soc_put_volsw() 0ff6b80506 audit: improve audit queue handling when "audit=1" on cmdline f446089a26 selinux: fix double free of cond_list on error paths 08942dae64 Merge 5.10.98 into android-5.10 26d02dc8ef Merge 5.10.97 into android12-5.10-lts e33a5b611c Revert "perf: Fix perf_event_read_local() time" 0b4470b56e Merge 5.10.96 into android12-5.10-lts 12a0a56cba Linux 5.10.98 97a47e2555 Revert "drm/vc4: hdmi: Make sure the device is powered with CEC" again e27042060f Revert "drm/vc4: hdmi: Make sure the device is powered with CEC" c8ed22bd97 Linux 5.10.97 176356550c tcp: add missing tcp_skb_can_collapse() test in tcp_shift_skb_data() 32e1799710 af_packet: fix data-race in packet_setsockopt / packet_setsockopt aa9e96db31 cpuset: Fix the bug that subpart_cpus updated wrongly in update_cpumask() 3bbe2019dd rtnetlink: make sure to refresh master_dev/m_ops in __rtnl_newlink() e7be569263 net: sched: fix use-after-free in tc_new_tfilter() 7b4741644c fanotify: Fix stale file descriptor in copy_event_to_user() 4d3fcfe846 net: amd-xgbe: Fix skb data length underflow cadfa7dce5 net: amd-xgbe: ensure to reset the tx_timer_active flag 77534b114f ipheth: fix EOVERFLOW in ipheth_rcvbulk_callback b4ced7a46d net/mlx5: E-Switch, Fix uninitialized variable modact 502c37b033 net/mlx5: Use del_timer_sync in fw reset flow of halting poll a01ee1b816 net/mlx5e: Fix handling of wrong devices during bond netevent 1fc3444cda cgroup-v1: Require capabilities to set release_agent ac4ba79bb0 drm/vc4: hdmi: Make sure the device is powered with CEC 46f919c6bd x86/cpu: Add Xeon Icelake-D to list of CPUs that support PPIN fbdbf6743f x86/mce: Add Xeon Sapphire Rapids to list of CPUs that support PPIN d4e4e61d4a psi: Fix uaf issue when psi trigger is destroyed while being polled 080dbe7e9b KVM: x86: Forcibly leave nested virt when SMM state is toggled 063029a882 Revert "drivers: bus: simple-pm-bus: Add support for probing simple bus only devices" 42fdbf8b7d net: ipa: prevent concurrent replenish ad81380d3a net: ipa: use a bitmap for endpoint replenish_enabled 2ed912e3e0 net: ipa: fix atomic update in ipa_endpoint_replenish() 3b4c966fb1 PCI: pciehp: Fix infinite loop in IRQ handler upon power fault a9839858b5 Merge 5.10.95 into android12-5.10-lts f255ac9e87 Linux 5.10.96 b43e9d2f6f mtd: rawnand: mpc5121: Remove unused variable in ads5121_select_chip() b63e120189 block: Fix wrong offset in bio_truncate() 0b4e82403c fsnotify: invalidate dcache before IN_DELETE event 8bae6db29c usr/include/Makefile: add linux/nfc.h to the compile-test coverage f36554de78 dt-bindings: can: tcan4x5x: fix mram-cfg RX FIFO config 446ff1fc37 net: bridge: vlan: fix memory leak in __allowed_ingress bc58a5bb9e ipv4: remove sparse error in ip_neigh_gw4() ebc5b8e471 ipv4: tcp: send zero IPID in SYNACK messages 58f72918f9 ipv4: raw: lock the socket in raw_bind() 9ffc94a81b net: bridge: vlan: fix single net device option dumping 869f1704f1 Revert "ipv6: Honor all IPv6 PIO Valid Lifetime values" 699eef4ed9 net: hns3: handle empty unknown interrupt for VF c9c81b393c net: cpsw: Properly initialise struct page_pool_params 729e54636b yam: fix a memory leak in yam_siocdevprivate() 93a6e920d8 drm/msm/dpu: invalid parameter check in dpu_setup_dspp_pcc 0b7d8db87d drm/msm/hdmi: Fix missing put_device() call in msm_hdmi_get_phy d1d4616d3e video: hyperv_fb: Fix validation of screen resolution 0a60d04abc ibmvnic: don't spin in tasklet 55258b5059 ibmvnic: init ->running_cap_crqs early b469cf91fb ipv4: fix ip option filtering for locally generated fragments 9b44441972 net: ipv4: Fix the warning for dereference 2f56c4845d net: ipv4: Move ip_options_fragment() out of loop 55402a4618 powerpc/perf: Fix power_pmu_disable to call clear_pmi_irq_pending only if PMI is pending 0bdbf93ee2 hwmon: (lm90) Mark alert as broken for MAX6654 c534287a57 efi/libstub: arm64: Fix image check alignment at entry 3572205b19 rxrpc: Adjust retransmission backoff 5067f5699d octeontx2-pf: Forward error codes to VF bd024e36f6 phylib: fix potential use-after-free a839a79f4d net: phy: broadcom: hook up soft_reset for BCM54616S 57b2f3632b sched/pelt: Relax the sync of util_sum with util_avg 91b04e83c7 perf: Fix perf_event_read_local() time cffed7e631 kernel: delete repeated words in comments 1af995c98b netfilter: conntrack: don't increment invalid counter on NF_REPEAT 129c71829d powerpc64/bpf: Limit 'ldbrx' to processors compliant with ISA v2.06 7a32824f7a NFS: Ensure the server has an up to date ctime before renaming 666f6ab882 NFS: Ensure the server has an up to date ctime before hardlinking 4cd0ef6215 ipv6: annotate accesses to fn->fn_sernum 79c0b5287d drm/msm/dsi: invalid parameter check in msm_dsi_phy_enable 3ab44a408b drm/msm/dsi: Fix missing put_device() call in dsi_get_phy 82c310d04b drm/msm: Fix wrong size calculation f57a99c9a5 net-procfs: show net devices bound packet types 87880e3803 NFSv4: nfs_atomic_open() can race when looking up a non-regular file ce8c552b88 NFSv4: Handle case where the lookup of a directory fails b48a05cee2 hwmon: (lm90) Reduce maximum conversion rate for G781 b26fed25e6 ipv4: avoid using shared IP generator for connected sockets 283aa5a5af ping: fix the sk_bound_dev_if match in ping_lookup 7bcb0c19ab hwmon: (lm90) Mark alert as broken for MAX6680 925cbd596a hwmon: (lm90) Mark alert as broken for MAX6646/6647/6649 db044d9746 net: fix information leakage in /proc/net/ptype feb770cc00 ipv6_tunnel: Rate limit warning messages 00849de10f scsi: bnx2fc: Flush destroy_work queue before calling bnx2fc_interface_put() fcaf94c49a rpmsg: char: Fix race between the release of rpmsg_eptdev and cdev 1dbb206730 rpmsg: char: Fix race between the release of rpmsg_ctrldev and cdev 20f6675821 usb: roles: fix include/linux/usb/role.h compile issue 6aeff8a7c7 i40e: fix unsigned stat widths d2ed5997a9 i40e: Fix for failed to init adminq while VF reset 768eb705e6 i40e: Fix queues reservation for XDP 39896710f7 i40e: Fix issue when maximum queues is exceeded 9068bcb219 i40e: Increase delay to 1 s after global EMP reset b4c9b6afa3 powerpc/32: Fix boot failure with GCC latent entropy plugin 50f5d0a8bd powerpc/32s: Fix kasan_init_region() for KASAN 5d3af1dfdf powerpc/32s: Allocate one 256k IBAT instead of two consecutives 128k IBATs 08f090bb9b x86/MCE/AMD: Allow thresholding interface updates after init 791e5d5daa sched/membarrier: Fix membarrier-rseq fence command missing from query bitmask afbde455eb ocfs2: fix a deadlock when commit trans 97f75e7d4c jbd2: export jbd2_journal_[grab|put]_journal_head 3921d081c9 ucsi_ccg: Check DEV_INT bit only when starting CCG4 598a884c77 usb: typec: tcpm: Do not disconnect while receiving VBUS off e3b131e30e USB: core: Fix hang in usb_kill_urb by adding memory barriers 3ca928c824 usb: gadget: f_sourcesink: Fix isoc transfer for USB_SPEED_SUPER_PLUS 053274bc6b usb: common: ulpi: Fix crash in ulpi_match() 20c51a4c52 usb: xhci-plat: fix crash when suspend if remote wake enable 38d1bf67a3 usb-storage: Add unusual-devs entry for VL817 USB-SATA bridge e0fcae7bd7 tty: Add support for Brainboxes UC cards. 7079283d32 tty: n_gsm: fix SW flow control encoding/handling 2683b0d5d7 serial: stm32: fix software flow control transfer 4628b26df5 serial: 8250: of: Fix mapped region size when using reg-offset property 94b23988c3 netfilter: nft_payload: do not update layer 4 checksum when mangling fragments bf0d4ae5c6 arm64: errata: Fix exec handling in erratum 1418040 workaround e92cac1dd8 KVM: x86: Update vCPU's runtime CPUID on write to MSR_IA32_XSS 6b55af102b drm/etnaviv: relax submit size limits 7a32d17fb7 perf/x86/intel/uncore: Fix CAS_COUNT_WRITE issue for ICX a2c8e1d9e4 Revert "KVM: SVM: avoid infinite loop on NPF from bad address" abae88fb37 fsnotify: fix fsnotify hooks in pseudo filesystems 6ceac38e9b ceph: set pool_ns in new inode layout for async creates e7be12ca7d ceph: properly put ceph_string reference after async create attempt 39986696fe tracing: Don't inc err_log entry count if entry allocation fails d71b06aa99 tracing/histogram: Fix a potential memory leak for kstrdup() 561a22d44a PM: wakeup: simplify the output logic of pm_show_wakelocks() b0f1cc093b efi: runtime: avoid EFIv2 runtime services on Apple x86 machines de7cc8bcca udf: Fix NULL ptr deref when converting from inline format 0a3cfd2589 udf: Restore i_lenAlloc when inode expansion fails f08801252d scsi: zfcp: Fix failed recovery on gone remote port with non-NPIV FCP devices ff6bdc205f bpf: Guard against accessing NULL pt_regs in bpf_get_task_stack() 6520fedfce s390/hypfs: include z/VM guests with access control group set c10e0627c7 s390/module: fix loading modules with a lot of relocations ba7c71a777 net: stmmac: skip only stmmac_ptp_register when resume from suspend 11191406f2 net: sfp: ignore disabled SFP node e651772adc media: venus: core: Drop second v4l2 device unregister 83d5196b65 Bluetooth: refactor malicious adv data check 34fd8cb7e7 ANDROID: Fix CRC issue up with xfrm headers in 5.10.94 a50b069165 Revert "xfrm: rate limit SA mapping change message to user space" 67ea95e0e8 Revert "clocksource: Reduce clocksource-skew threshold" fae0741a78 Revert "clocksource: Avoid accidental unstable marking of clocksources" 77656fde3c Linux 5.10.95 ae2b20f277 drm/vmwgfx: Fix stale file descriptors on failed usercopy 11ba2c6dfb select: Fix indefinitely sleeping task in poll_schedule_timeout() a447d7f786 KVM: x86/mmu: Fix write-protection of PTs mapped by the TDP MMU 12d3389b7a rcu: Tighten rcu_advance_cbs_nowake() checks 4d63363c88 bnx2x: Invalidate fastpath HSI version for VFs fdcfabd095 bnx2x: Utilize firmware 7.13.21.0 6a6acf9278 drm/i915: Flush TLBs before releasing backing store 4ec3c2eea5 Merge 5.10.94 into android12-5.10-lts c525532e4f Linux 5.10.94 c76c132444 scripts: sphinx-pre-install: Fix ctex support on Debian 133cef0b61 scripts: sphinx-pre-install: add required ctex dependency 15ce9329a5 ath10k: Fix the MTU size on QCA9377 SDIO 25b1a6d330 mtd: nand: bbt: Fix corner case in bad block table handling 8104e589fa lib/test_meminit: destroy cache in kmem_cache_alloc_bulk() test 6292503700 mm/hmm.c: allow VM_MIXEDMAP to work with hmm_range_fault 33bb7f027b lib82596: Fix IRQ check in sni_82596_probe 078b5a4498 scripts/dtc: dtx_diff: remove broken example from help text 21513c4615 dt-bindings: watchdog: Require samsung,syscon-phandle for Exynos7 23bcf3615b dt-bindings: display: meson-vpu: Add missing amlogic,canvas property 66467cc87a dt-bindings: display: meson-dw-hdmi: add missing sound-name-prefix property 4496e4a427 net: mscc: ocelot: fix using match before it is set ee64479c9c net: sfp: fix high power modules without diagnostic monitoring 819e76bc57 net: ethernet: mtk_eth_soc: fix error checking in mtk_mac_config() 4691c9f047 bcmgenet: add WOL IRQ check 6973b38b9d net_sched: restore "mpu xxx" handling 20949c3816 net: bonding: fix bond_xmit_broadcast return value error bug 799730d182 arm64: dts: qcom: msm8996: drop not documented adreno properties f6d4c0e017 devlink: Remove misleading internal_flags from health reporter dump 2e51a761b7 perf probe: Fix ppc64 'perf probe add events failed' case 59b44f7760 dmaengine: at_xdmac: Fix at_xdmac_lld struct definition 0078f05371 dmaengine: at_xdmac: Fix lld view setting 7ab120636d dmaengine: at_xdmac: Fix concurrency over xfers_list b5b27c5e33 dmaengine: at_xdmac: Print debug message after realeasing the lock c536b351a7 dmaengine: at_xdmac: Start transfer for cyclic channels in issue_pending cd22e22e8e dmaengine: at_xdmac: Don't start transactions at tx_submit level 68a83051c8 perf script: Fix hex dump character output 7b9d40e9f6 libcxgb: Don't accidentally set RTO_ONLINK in cxgb_find_route() cd5c24d223 gre: Don't accidentally set RTO_ONLINK in gre_fill_metadata_dst() 7f2ca96bd2 xfrm: Don't accidentally set RTO_ONLINK in decode_session4() 2b1415c60b netns: add schedule point in ops_exit_list() edc09548ff inet: frags: annotate races around fqdir->dead and fqdir->high_thresh 69e7e979ed taskstats: Cleanup the use of task->exit_code 56daa21414 virtio_ring: mark ring unused on error 0c4ebcb00d vdpa/mlx5: Fix wrong configuration of virtio_version_1_0 c736ec01a2 rtc: pxa: fix null pointer dereference 8b8ff4c793 HID: vivaldi: fix handling devices not using numbered reports d7544cf693 net: axienet: increase default TX ring size to 128 557829d42d net: axienet: fix for TX busy handling 41831d4967 net: axienet: fix number of TX ring slots for available check 6301f3566a net: axienet: Fix TX ring slot available check 7a3d3d7f6d net: axienet: limit minimum TX ring size 2f548489d6 net: axienet: add missing memory barriers bcc5d57e60 net: axienet: reset core on initialization prior to MDIO access 46c0ccaff2 net: axienet: Wait for PhyRstCmplt after core reset 34942a228a net: axienet: increase reset timeout a66b9bccf7 net/smc: Fix hung_task when removing SMC-R devices 51b52cf354 clk: si5341: Fix clock HW provider cleanup fe40f7aef3 clk: Emit a stern warning with writable debugfs enabled 38221afa03 af_unix: annote lockless accesses to unix_tot_inflight & gc_in_progress a49e402f23 f2fs: fix to reserve space for IO align feature 39ad058117 f2fs: compress: fix potential deadlock of compress file e1840365ed parisc: pdc_stable: Fix memory leak in pdcs_register_pathentries d806eb5f4e net/fsl: xgmac_mdio: Fix incorrect iounmap when removing module 38c798384b net/fsl: xgmac_mdio: Add workaround for erratum A-009885 734f4b0f83 ipv4: avoid quadratic behavior in netns dismantle 86f0587f74 ipv4: update fib_info_cnt under spinlock protection 10e99ae9b5 perf evsel: Override attr->sample_period for non-libpfm4 events 58fa3e9002 xdp: check prog type before updating BPF link 38ee417f59 bpftool: Remove inclusion of utilities.mak from Makefiles 2bcab471a2 block: Fix fsync always failed if once failed 5e59f88535 powerpc/fsl/dts: Enable WA for erratum A-009885 on fman3l MDIO buses 19aaef6519 powerpc/cell: Fix clang -Wimplicit-fallthrough warning 4cb7aba1e0 Revert "net/mlx5: Add retry mechanism to the command entry index allocation" 78cf5f63a3 dmaengine: stm32-mdma: fix STM32_MDMA_CTBR_TSEL_MASK 16ad0aa917 RDMA/rxe: Fix a typo in opcode name 885860717c RDMA/hns: Modify the mapping attribute of doorbell to device 57cd8597c3 dmaengine: uniphier-xdmac: Fix type of address variables 4fe77b7cd2 scsi: core: Show SCMD_LAST in text form b30240911d Bluetooth: hci_sync: Fix not setting adv set duration 55698d11c8 Documentation: fix firewire.rst ABI file path error 5d38cbf66d Documentation: refer to config RANDOMIZE_BASE for kernel address-space randomization abecf9d748 Documentation: ACPI: Fix data node reference documentation d1e85fcd73 Documentation: dmaengine: Correctly describe dmatest with channel unset f6736bd81d media: correct MEDIA_TEST_SUPPORT help text 55b10b88ac drm/vc4: hdmi: Make sure the device is powered with CEC 81ac08a800 media: rcar-csi2: Optimize the selection PHTW register 0baa3729d2 can: mcp251xfd: mcp251xfd_tef_obj_read(): fix typo in error message f62bf6ee4f firmware: Update Kconfig help text for Google firmware 12224c0d19 of: base: Improve argument length mismatch error 7bb99c7e13 drm/radeon: fix error handling in radeon_driver_open_kms 0ca7ec6db2 ext4: don't use the orphan list when migrating an inode 679fb06532 ext4: fix null-ptr-deref in '__ext4_journal_ensure_credits' d60e9daba2 ext4: destroy ext4_fc_dentry_cachep kmemcache on module removal f26b24b4c1 ext4: fast commit may miss tracking unwritten range during ftruncate 04b5627306 ext4: use ext4_ext_remove_space() for fast commit replay delete range 53998b3f6d ext4: Fix BUG_ON in ext4_bread when write quota data da364ab358 ext4: set csum seed in tmp inode while migrating to extents e4221629d5 ext4: fix fast commit may miss tracking range for FALLOC_FL_ZERO_RANGE 720508dd11 ext4: initialize err_blk before calling __ext4_get_inode_loc f9ed0ea0a9 ext4: fix a possible ABBA deadlock due to busy PA 115b762b48 ext4: make sure quota gets properly shutdown on error 762e4c33e9 ext4: make sure to reset inode lockdep class when quota enabling fails f8c3ec2e21 btrfs: respect the max size in the header when activating swap file e7764bccae btrfs: check the root node for uptodate before returning it 09e0ef287e btrfs: fix deadlock between quota enable and other quota operations 56f974d583 xfrm: fix policy lookup for ipv6 gre packets 84166c1177 PCI: pci-bridge-emul: Set PCI_STATUS_CAP_LIST for PCIe device 7aeeb9fe9c PCI: pci-bridge-emul: Correctly set PCIe capabilities af1d0acdac PCI: pci-bridge-emul: Fix definitions of reserved bits 0f2ae6691e PCI: pci-bridge-emul: Properly mark reserved PCIe bits in PCI config space 2a0d437d8a PCI: pci-bridge-emul: Make expansion ROM Base Address register read-only def2825b09 PCI: pciehp: Use down_read/write_nested(reset_lock) to fix lockdep errors 6cbe8f8deb PCI: xgene: Fix IB window setup e09f47e77b powerpc/64s/radix: Fix huge vmap false positive eb44b1386a parisc: Fix lpa and lpa_user defines 9b78ee2341 drm/bridge: analogix_dp: Make PSR-exit block less 8cbbf4a6f1 drm/nouveau/kms/nv04: use vzalloc for nv04_display 605583fccc drm/etnaviv: limit submit sizes 6c1e3d8b1b device property: Fix fwnode_graph_devcon_match() fwnode leak ecb71f7bd5 s390/mm: fix 2KB pgtable release race 798754ba48 iwlwifi: mvm: Increase the scan timeout guard to 30 seconds c524f4cfb3 tracing/kprobes: 'nmissed' not showed correctly for kretprobe b72075e395 cputime, cpuacct: Include guest time in user time in cpuacct.stat 13518f058f serial: Fix incorrect rs485 polarity on uart open 9668cf9e4a fuse: Pass correct lend value to filemap_write_and_wait_range() 9fbaddd783 xen/gntdev: fix unmap notification order 67b078d996 spi: uniphier: Fix a bug that doesn't point to private data correctly 05026c4e94 tpm: fix NPE on probe for missing device 76006d33f1 ubifs: Error path in ubifs_remount_rw() seems to wrongly free write buffers 4f0762ac32 crypto: caam - replace this_cpu_ptr with raw_cpu_ptr 9e6ff2d572 crypto: stm32/crc32 - Fix kernel BUG triggered in probe() 2031e0246e crypto: omap-aes - Fix broken pm_runtime_and_get() usage 43e94431c3 rpmsg: core: Clean up resources on announce_create failure. 082ff9e12b phy: mediatek: Fix missing check in mtk_mipi_tx_probe ff08cf1e34 ASoC: mediatek: mt8183: fix device_node leak f28672eef4 ASoC: mediatek: mt8173: fix device_node leak 0df5104008 scsi: sr: Don't use GFP_DMA de9a936b04 MIPS: Octeon: Fix build errors using clang da7df943e2 i2c: designware-pci: Fix to change data types of hcnt and lcnt parameters f09f7ccb28 irqchip/gic-v4: Disable redistributors' view of the VPE table at boot time bc2d961d82 MIPS: OCTEON: add put_device() after of_find_device_by_node() ce34b03a71 udf: Fix error handling in udf_new_inode() 15be042e7f powerpc/fadump: Fix inaccurate CPU state info in vmcore generated with panic f2e658d9bd powerpc: handle kdump appropriately with crash_kexec_post_notifiers option 044164b419 selftests/powerpc/spectre_v2: Return skip code when miss_percent is high 21125e0116 powerpc/40x: Map 32Mbytes of memory at startup c330442f46 MIPS: Loongson64: Use three arguments for slti af8d077350 ALSA: seq: Set upper limit of processed events 297210783a scsi: lpfc: Trigger SLI4 firmware dump before doing driver cleanup dfde7afed7 dm: fix alloc_dax error handling in alloc_dev 2e2086f49e nvmem: core: set size for sysfs bin file 4a273a94bd w1: Misuse of get_user()/put_user() reported by sparse 87e91d6c6a KVM: PPC: Book3S: Suppress failed alloc warning in H_COPY_TOFROM_GUEST 23bb3f01ce KVM: PPC: Book3S: Suppress warnings when allocating too big memory slots 03c1595a18 powerpc/powermac: Add missing lockdep_register_key() df29c01b9f clk: meson: gxbb: Fix the SDM_EN bit for MPLL0 on GXBB 30d35a1abd i2c: mpc: Correct I2C reset procedure 4b25aad655 powerpc/smp: Move setup_profiling_timer() under CONFIG_PROFILING 25714ad6bf i2c: i801: Don't silently correct invalid transfer size 75e2cfa5fa powerpc/watchdog: Fix missed watchdog reset due to memory ordering race a83639521a powerpc/btext: add missing of_node_put fc10d8f00a powerpc/cell: add missing of_node_put 297ff7d5f1 powerpc/powernv: add missing of_node_put c83ba875d7 powerpc/6xx: add missing of_node_put d240b08d8a x86/kbuild: Enable CONFIG_KALLSYMS_ALL=y in the defconfigs 3681e9f3f0 parisc: Avoid calling faulthandler_disabled() twice f2a27dd7a2 random: do not throw away excess input to crng_fast_load f8fdebfb4b serial: core: Keep mctrl register state and cached copy in sync a03fd1b198 serial: pl010: Drop CR register reset on set_termios 40ac338926 regulator: qcom_smd: Align probe function with rpmh-regulator 3dc751213f net: gemini: allow any RGMII interface mode 1063de8975 net: phy: marvell: configure RGMII delays for 88E1118 00580670b9 mlxsw: pci: Avoid flow control for EMAD packets eaf8cffcf5 dm space map common: add bounds check to sm_ll_lookup_bitmap() 5850bef8e9 dm btree: add a defensive bounds check to insert_at() 754b663ea9 mac80211: allow non-standard VHT MCS-10/11 e8da60b3a6 net: mdio: Demote probed message to debug print 6b22c9824d btrfs: remove BUG_ON(!eie) in find_parent_nodes 623c65bc73 btrfs: remove BUG_ON() in find_parent_nodes() 44cbd2a16a ACPI: battery: Add the ThinkPad "Not Charging" quirk 7b6dc07c6e amdgpu/pm: Make sysfs pm attributes as read-only for VFs 516e332d6f drm/amdgpu: fixup bad vram size on gmc v8 ee88ff140d ACPICA: Hardware: Do not flush CPU cache when entering S4 and S5 8544074762 ACPICA: Fix wrong interpretation of PCC address e70be17696 ACPICA: Executer: Fix the REFCLASS_REFOF case in acpi_ex_opcode_1A_0T_1R() 8ea9216d20 ACPICA: Utilities: Avoid deleting the same object twice in a row fcfd8282c5 ACPICA: actypes.h: Expand the ACPI_ACCESS_ definitions e3a51d6c90 jffs2: GC deadlock reading a page that is used in jffs2_write_begin() e35cb5b122 drm/etnaviv: consider completed fence seqno in hang check a0b13335a3 xfrm: rate limit SA mapping change message to user space 0b7beb2fea Bluetooth: vhci: Set HCI_QUIRK_VALID_LE_STATES 6ac117edac ath11k: Fix napi related hang 756a7188b2 um: registers: Rename function names to avoid conflicts and build problems d817d10f7a iwlwifi: pcie: make sure prph_info is set when treating wakeup IRQ f266e1c5bf iwlwifi: mvm: Fix calculation of frame length 6e44b60054 iwlwifi: remove module loading failure message febab6b60d iwlwifi: fix leaks/bad data after failed firmware load 81d2e96aba PM: AVS: qcom-cpr: Use div64_ul instead of do_div c0a1d844e3 rtw88: 8822c: update rx settings to prevent potential hw deadlock 3ef25f3122 ath9k: Fix out-of-bound memcpy in ath9k_hif_usb_rx_stream e10de31055 usb: hub: Add delay for SuperSpeed hub resume to let links transit to U0 282286c632 cpufreq: Fix initialization of min and max frequency QoS requests 37b25de3af PM: runtime: Add safety net to supplier device release 5dfc6fa0b8 arm64: tegra: Adjust length of CCPLEX cluster MMIO region b68c56a149 arm64: dts: ls1028a-qds: move rtc node to the correct i2c bus b6f7f0ad5a audit: ensure userspace is penalized the same as the kernel when under pressure 5d54ed1550 mmc: core: Fixup storing of OCR for MMC_QUIRK_NONSTD_SDIO 51a5156bb7 media: saa7146: hexium_gemini: Fix a NULL pointer dereference in hexium_attach() f6bc6b178c media: igorplugusb: receiver overflow should be reported d698e024be HID: quirks: Allow inverting the absolute X/Y values 59f0363346 bpf: Do not WARN in bpf_warn_invalid_xdp_action() 0e8805f73b net: bonding: debug: avoid printing debug logs when bond is not notifying peers 8c72de32ff x86/mce: Mark mce_read_aux() noinstr 1ad3e60f1f x86/mce: Mark mce_end() noinstr f21ca973b4 x86/mce: Mark mce_panic() noinstr de360d9443 x86/mce: Allow instrumentation during task work queueing af371e0abb ath11k: Avoid false DEADLOCK warning reported by lockdep aec69e2f33 selftests/ftrace: make kprobe profile testcase description unique 07ecabf15a gpio: aspeed: Convert aspeed_gpio.lock to raw_spinlock 7e09f9d15e net: phy: prefer 1000baseT over 1000baseKX 443133330a net-sysfs: update the queue counts in the unregistration path 58b4c1ce83 ath10k: Fix tx hanging fcba0bce33 ath11k: avoid deadlock by change ieee80211_queue_work for regd_update_work 93a108d466 iwlwifi: mvm: avoid clearing a just saved session protection id ec01e0fe21 iwlwifi: mvm: synchronize with FW after multicast commands c1976a4248 thunderbolt: Runtime PM activate both ends of the device link 830e5d1b43 media: m920x: don't use stack on USB reads c33f0f22bf media: saa7146: hexium_orion: Fix a NULL pointer dereference in hexium_attach() 526b6c9b45 media: rcar-vin: Update format alignment constraints 74e60c1dce media: uvcvideo: Increase UVC_CTRL_CONTROL_TIMEOUT to 5 seconds. d0e3ab637d drm: rcar-du: Fix CRTC timings when CMM is used e61aa46d0f x86/mm: Flush global TLB when switching to trampoline page-table 0946fdd929 floppy: Add max size check for user space request 409d45bcd3 usb: uhci: add aspeed ast2600 uhci support d0aec428c0 arm64: dts: ti: j7200-main: Fix 'dtbs_check' serdes_ln_ctrl node fcb45ac39f ACPI / x86: Add not-present quirk for the PCI0.SDHB.BRC1 device on the GPD win b8b2e74a87 ACPI / x86: Allow specifying acpi_device_override_status() quirks by path cda755506d ACPI: Change acpi_device_always_present() into acpi_device_override_status() b029625063 ACPI / x86: Drop PWM2 device on Lenovo Yoga Book from always present table cf3b1a160d media: venus: avoid calling core_clk_setrate() concurrently during concurrent video sessions adbe148672 ath11k: Avoid NULL ptr access during mgmt tx cleanup ab523ea096 rsi: Fix out-of-bounds read in rsi_read_pkt() 7525876750 rsi: Fix use-after-free in rsi_rx_done_handler() 6036500fdf mwifiex: Fix skb_over_panic in mwifiex_usb_recv() 8a6371d84c crypto: jitter - consider 32 LSB for APT 240cf5d3cb HSI: core: Fix return freed object in hsi_new_client f4295b7dca gpiolib: acpi: Do not set the IRQ type if the IRQ is already in use f0653cd4da tty: serial: imx: disable UCR4_OREN in .stop_rx() instead of .shutdown() b8d10f601f drm/bridge: megachips: Ensure both bridges are probed before registration 43fc9e267e mlxsw: pci: Add shutdown method in PCI driver b2e921fa92 soc: ti: pruss: fix referenced node in error message 07fbbc4dc7 drm/amdgpu/display: set vblank_disable_immediate for DC 019fe9723a drm/amd/display: check top_pipe_to_program pointer 3c3c0b6c4a ARM: imx: rename DEBUG_IMX21_IMX27_UART to DEBUG_IMX27_UART f54d8cd831 EDAC/synopsys: Use the quirk for version instead of ddr version 0b85d73fdb media: b2c2: Add missing check in flexcop_pci_isr: c978d39a8b HID: apple: Do not reset quirks when the Fn key is not found 2df002e327 drm: panel-orientation-quirks: Add quirk for the Lenovo Yoga Book X91F/L 5aa57672c6 usb: gadget: f_fs: Use stream_open() for endpoint files 129e8faaee ath11k: Fix crash caused by uninitialized TX ring e8b271f2aa media: atomisp: handle errors at sh_css_create_isp_params() ebe9c978d9 batman-adv: allow netlink usage in unprivileged containers ff452db961 ARM: shmobile: rcar-gen2: Add missing of_node_put() ff2138d6c2 media: atomisp-ov2680: Fix ov2680_set_fmt() clobbering the exposure 51ef6582a2 media: atomisp: set per-device's default mode ac08140677 media: atomisp: fix try_fmt logic 518e059789 drm/nouveau/pmu/gm200-: avoid touching PMU outside of DEVINIT/PREOS/ACR e3ba02b043 drm/bridge: dw-hdmi: handle ELD when DRM_BRIDGE_ATTACH_NO_CONNECTOR 2f13f10fdd ar5523: Fix null-ptr-deref with unexpected WDCMSG_TARGET_START reply a9d2ccfc7d selftests/bpf: Fix bpf_object leak in skb_ctx selftest b207356933 drm/lima: fix warning when CONFIG_DEBUG_SG=y & CONFIG_DMA_API_DEBUG=y db1e878373 fs: dlm: filter user dlm messages for kernel locks f9c9a46efd Bluetooth: Fix debugfs entry leak in hci_register_dev() 852d7d436f ARM: dts: omap3-n900: Fix lp5523 for multi color b5793aff11 of: base: Fix phandle argument length mismatch error message e16e836d51 clk: bm1880: remove kfrees on static allocations 36d46e21c9 ASoC: fsl_asrc: refine the check of available clock divider 5a6864e2e6 RDMA/cxgb4: Set queue pair state when being queried 80524c8cdf ASoC: fsl_mqs: fix MODULE_ALIAS 74988d017d powerpc/xive: Add missing null check after calling kmalloc 588e0b81ce mips: bcm63xx: add support for clk_set_parent() e3de89d010 mips: lantiq: add support for clk_set_parent() 8f8468a089 arm64: tegra: Remove non existent Tegra194 reset 702902fc7f arm64: tegra: Fix Tegra194 HDA {clock,reset}-names ordering 24b047d72c counter: stm32-lptimer-cnt: remove iio counter abi a394606104 misc: lattice-ecp3-config: Fix task hung when firmware load failed 696a50abbc ASoC: samsung: idma: Check of ioremap return value d491a2c2cf ASoC: mediatek: Check for error clk pointer c73ccdd62d phy: uniphier-usb3ss: fix unintended writing zeros to PHY register d781f4cd8c scsi: block: pm: Always set request queue runtime active in blk_post_runtime_resume() 6e2a169544 iommu/iova: Fix race between FQ timeout and teardown 57bc898575 ASoC: Intel: catpt: Test dmaengine_submit() result before moving on 676049a3d2 iommu/amd: Restore GA log/tail pointer on host resume c2bd7c31de iommu/amd: Remove iommu_init_ga() 62ea255f2b dmaengine: pxa/mmp: stop referencing config->slave_id 0be9ae1e53 mips: fix Kconfig reference to PHYS_ADDR_T_64BIT 88d78b25db mips: add SYS_HAS_CPU_MIPS64_R5 config for MIPS Release 5 support 51b8e814bc clk: stm32: Fix ltdc's clock turn off by clk_disable_unused() after system enter shell dff359e042 of: unittest: 64 bit dma address test requires arch support 918105df78 of: unittest: fix warning on PowerPC frame size warning 0e04518b1d ASoC: rt5663: Handle device_property_read_u32_array error codes 7c0d9c815c RDMA/cma: Let cma_resolve_ib_dev() continue search even after empty entry 2432d325f9 RDMA/core: Let ib_find_gid() continue search even after empty entry d77916df16 powerpc/powermac: Add additional missing lockdep_register_key() 8b3783e517 PCI/MSI: Fix pci_irq_vector()/pci_irq_get_affinity() 7be2a0bcaf RDMA/qedr: Fix reporting max_{send/recv}_wr attrs e19469468b scsi: ufs: Fix race conditions related to driver data ed43b2e048 iommu/io-pgtable-arm: Fix table descriptor paddr formatting e9e4d1fb45 openrisc: Add clone3 ABI wrapper 551a785c26 binder: fix handling of error during copy 88ddf033a5 char/mwave: Adjust io port register size 8937aee4c0 ALSA: usb-audio: Drop superfluous '0' in Presonus Studio 1810c's ID bcd533417f ALSA: oss: fix compile error when OSS_DEBUG is enabled fd99aeb978 clocksource: Avoid accidental unstable marking of clocksources cacc6c30e3 clocksource: Reduce clocksource-skew threshold 86ad478c99 powerpc/32s: Fix shift-out-of-bounds in KASAN init ef798cd035 powerpc/perf: Fix PMU callbacks to clear pending PMI before resetting an overflown PMC 58014442a9 powerpc/irq: Add helper to set regs->softe c9ffa84a3b powerpc/perf: move perf irq/nmi handling details into traps.c a0758b3be4 powerpc/perf: MMCR0 control for PMU registers under PMCC=00 f4df6db5b0 powerpc/64s: Convert some cpu_setup() and cpu_restore() functions to C a9c9d2ff64 dt-bindings: thermal: Fix definition of cooling-maps contribution property 2bd8d93795 ASoC: uniphier: drop selecting non-existing SND_SOC_UNIPHIER_AIO_DMA 5a821af769 powerpc/prom_init: Fix improper check of prom_getprop() 9ca761ef94 clk: imx8mn: Fix imx8mn_clko1_sels 999528d8a7 scsi: pm80xx: Update WARN_ON check in pm8001_mpi_build_cmd() c5f414d69a RDMA/hns: Validate the pkey index 04a032ea24 RDMA/bnxt_re: Scan the whole bitmap when checking if "disabling RCFW with pending cmd-bit" 84cd5c029d ALSA: hda: Add missing rwsem around snd_ctl_remove() calls 180e9d7384 ALSA: PCM: Add missing rwsem around snd_ctl_remove() calls 49d76154ba ALSA: jack: Add missing rwsem around snd_ctl_remove() calls f871cd8ee0 ext4: avoid trim error on fs with small groups 99590e820f net: mcs7830: handle usb read errors properly 2b948524ae iwlwifi: mvm: Use div_s64 instead of do_div in iwl_mvm_ftm_rtt_smoothing() 04ce9e2aed pcmcia: fix setting of kthread task states 5064bfe046 can: xilinx_can: xcan_probe(): check for error irq b6dd1577bc can: softing: softing_startstop(): fix set but not used variable warning b9ac866c23 tpm_tis: Fix an error handling path in 'tpm_tis_core_init()' fb46223c9f tpm: add request_locality before write TPM_INT_ENABLE 20edf903a3 can: mcp251xfd: add missing newline to printed strings d71fca5d01 regmap: Call regmap_debugfs_exit() prior to _init() 838acddcdf netrom: fix api breakage in nr_setsockopt() 0d04479857 ax25: uninitialized variable in ax25_setsockopt() 27e9910c45 spi: spi-meson-spifc: Add missing pm_runtime_disable() in meson_spifc_probe 9d6350cf8e Bluetooth: L2CAP: uninitialized variables in l2cap_sock_setsockopt() 9defd7d4c0 lib/mpi: Add the return value check of kcalloc() e801f81cee net/mlx5: Set command entry semaphore up once got index free d2b9ce705d Revert "net/mlx5e: Block offload of outer header csum for UDP tunnels" 67e1a449a1 net/mlx5e: Don't block routes with nexthop objects in SW cc40fa05c0 net/mlx5e: Fix page DMA map/unmap attributes b3dda01d1d debugfs: lockdown: Allow reading debugfs files that are not world readable b9b5da3e18 HID: hid-uclogic-params: Invalid parameter check in uclogic_params_frame_init_v1_buttonpad 541c3a044b HID: hid-uclogic-params: Invalid parameter check in uclogic_params_huion_init c47f842e0c HID: hid-uclogic-params: Invalid parameter check in uclogic_params_get_str_desc cf5ad827ee HID: hid-uclogic-params: Invalid parameter check in uclogic_params_init 94177fcecc usb: dwc3: qcom: Fix NULL vs IS_ERR checking in dwc3_qcom_probe 4579954bf4 Bluetooth: hci_qca: Fix NULL vs IS_ERR_OR_NULL check in qca_serdev_probe f6bf3d6639 Bluetooth: hci_bcm: Check for error irq f5e4f68d57 fsl/fman: Check for null pointer after calling devm_ioremap 60aca6fdc1 staging: greybus: audio: Check null pointer a1068bfee4 rocker: fix a sleeping in atomic bug 2db344725e ppp: ensure minimum packet size in ppp_write() 45643b1b6c netfilter: nft_set_pipapo: allocate pcpu scratch maps on clone 8772700a9f bpf: Fix SO_RCVBUF/SO_SNDBUF handling in _bpf_setsockopt(). 342332fb0b bpf: Don't promote bogus looking registers after null check. 0036c78c49 netfilter: ipt_CLUSTERIP: fix refcount leak in clusterip_tg_check() 2e718389b9 power: reset: mt6397: Check for null res pointer 4210c35fe8 pcmcia: rsrc_nonstatic: Fix a NULL pointer dereference in nonstatic_find_mem_region() 2dee347f35 pcmcia: rsrc_nonstatic: Fix a NULL pointer dereference in __nonstatic_find_io_region() 0f03132191 ACPI: scan: Create platform device for BCM4752 and LNV4752 ACPI nodes 595e1ec55b x86/mce/inject: Avoid out-of-bounds write when setting flags df12681819 hwmon: (mr75203) fix wrong power-up delay value aea5302d9d x86/boot/compressed: Move CLANG_FLAGS to beginning of KBUILD_CFLAGS 70eec71f32 Bluetooth: hci_qca: Stop IBS timer during BT OFF 1d4e722b62 software node: fix wrong node passed to find nargs_prop f8f3c1720d backlight: qcom-wled: Respect enabled-strings in set_brightness de79bcbfaf backlight: qcom-wled: Use cpu_to_le16 macro to perform conversion c79f9b8d8e backlight: qcom-wled: Override default length with qcom,enabled-strings bf4daf6153 backlight: qcom-wled: Fix off-by-one maximum with default num_strings 09aed85e8c backlight: qcom-wled: Pass number of elements to read to read_u32_array f4ed4fc504 backlight: qcom-wled: Validate enabled string indices in DT e668ac6506 bpftool: Enable line buffering for stdout 009bb7ee15 Bluetooth: L2CAP: Fix using wrong mode 1a2241ad40 um: virtio_uml: Fix time-travel external time propagation 8411722e56 um: fix ndelay/udelay defines b2b1b490bd selinux: fix potential memleak in selinux_add_opt() 3253cf0914 mmc: meson-mx-sdio: add IRQ check decb209954 mmc: meson-mx-sdhc: add IRQ check bdc6c9fc5f iwlwifi: mvm: test roc running status bits before removing the sta a750fcd604 iwlwifi: mvm: fix 32-bit build in FTM 86b0122d26 ARM: dts: armada-38x: Add generic compatible to UART nodes 1f5428e438 arm64: dts: marvell: cn9130: enable CP0 GPIO controllers 874b97e862 arm64: dts: marvell: cn9130: add GPIO and SPI aliases 407ef1db40 usb: ftdi-elan: fix memory leak on device disconnect 2a65da5a1e ARM: 9159/1: decompressor: Avoid UNPREDICTABLE NOP encoding 47dd693c94 xfrm: state and policy should fail if XFRMA_IF_ID 0 db369047e3 xfrm: interface with if_id 0 should return error 37441ddadc media: hantro: Fix probe func error path 3849ec830b drm/tegra: vic: Fix DMA API misuse b230114bc5 drm/bridge: ti-sn65dsi86: Set max register for regmap db97fc2c44 drm/msm/dpu: fix safe status debugfs file 3580055d1f arm64: dts: qcom: ipq6018: Fix gpio-ranges property 6f20a5a98a arm64: dts: qcom: c630: Fix soundcard setup 394ee480aa ath11k: Fix a NULL pointer dereference in ath11k_mac_op_hw_scan() f6e4a6cbdb media: coda/imx-vdoa: Handle dma_set_coherent_mask error codes 1a8869de32 media: msi001: fix possible null-ptr-deref in msi001_probe() a79327bb01 media: dw2102: Fix use after free 958a8819d4 ARM: dts: gemini: NAS4220-B: fis-index-block with 128 KiB sectors 3e51460638 ath11k: Fix deleting uninitialized kernel timer during fragment cache flush b35263f000 crypto: stm32 - Revert broken pm_runtime_resume_and_get changes 1f5b81874f crypto: stm32/cryp - fix bugs and crash in tests 1f6151b077 crypto: stm32/cryp - fix lrw chaining mode 2bd40e3a3a crypto: stm32/cryp - fix double pm exit 533af1621d crypto: stm32/cryp - check early input data 5deb24e503 crypto: stm32/cryp - fix xts and race condition in crypto_engine requests e9e0dd5da8 crypto: stm32/cryp - fix CTR counter carry c40b1bc851 crypto: stm32 - Fix last sparse warning in stm32_cryp_check_ctr_counter 93033bbbdc selftests: harness: avoid false negatives if test has no ASSERTs f568fd97d7 selftests: clone3: clone3: add case CLONE3_ARGS_NO_TEST d21b47c607 x86/uaccess: Move variable into switch case statement 3e801ea43c xfrm: fix a small bug in xfrm_sa_len() b87034d7a2 mwifiex: Fix possible ABBA deadlock 0836f94040 rcu/exp: Mark current CPU as exp-QS in IPI loop second pass 027165c491 drm/msm/dp: displayPort driver need algorithm rational 268f352456 sched/rt: Try to restart rt period timer when rt runtime exceeded bb0579ab50 wireless: iwlwifi: Fix a double free in iwl_txq_dyn_alloc_dma b4b911b164 media: si2157: Fix "warm" tuner state detection 7009a5fbc5 media: saa7146: mxb: Fix a NULL pointer dereference in mxb_attach() df79d2bf95 media: dib8000: Fix a memleak in dib8000_init() f0cb43a2c6 arm64: clear_page() shouldn't use DC ZVA when DCZID_EL0.DZP == 1 88ed31aab4 arm64: lib: Annotate {clear, copy}_page() as position-independent 69e402a985 bpf: Remove config check to enable bpf support for branch records 924886fa22 bpf: Disallow BPF_LOG_KERNEL log level for bpf(BPF_BTF_LOAD) 218d952160 bpf: Adjust BTF log size limit. b77ef5b4ea sched/fair: Fix per-CPU kthread and wakee stacking for asym CPU capacity d7d5b3bc52 sched/fair: Fix detection of per-CPU kthreads waking a task ec121517ac Bluetooth: btmtksdio: fix resume failure 2a7edcb3ef staging: rtl8192e: rtllib_module: fix error handle case in alloc_rtllib() 49f5cd2b7c staging: rtl8192e: return error code from rtllib_softmac_init() 04fdd426ce floppy: Fix hang in watchdog when disk is ejected 45bbe00801 serial: amba-pl011: do not request memory region twice 8409d2394c tty: serial: uartlite: allow 64 bit address a001a15ab3 arm64: dts: ti: k3-j7200: Correct the d-cache-sets info 75919207c1 arm64: dts: ti: k3-j721e: Fix the L2 cache sets 2dcfa3c765 arm64: dts: ti: k3-j7200: Fix the L2 cache sets f277978d6c drm/radeon/radeon_kms: Fix a NULL pointer dereference in radeon_driver_open_kms() 3ca1b3b82f drm/amdgpu: Fix a NULL pointer dereference in amdgpu_connector_lcd_native_mode() 96e05d2d93 thermal/drivers/imx8mm: Enable ADC when enabling monitor ef72449e2d ACPI: EC: Rework flushing of EC work while suspended to idle c0acd5a097 cgroup: Trace event cgroup id fields should be u64 e7e178e264 arm64: dts: qcom: msm8916: fix MMC controller aliases 894d91c633 netfilter: bridge: add support for pppoe filtering 13f64bbe42 thermal/drivers/imx: Implement runtime PM support c3a59f34e8 media: venus: core: Fix a resource leak in the error handling path of 'venus_probe()' 50c4244906 media: venus: core: Fix a potential NULL pointer dereference in an error handling path eeefa2eae8 media: venus: core, venc, vdec: Fix probe dependency error 53f65afc26 media: venus: pm_helpers: Control core power domain manually 89f518b153 media: coda: fix CODA960 JPEG encoder buffer overflow 1da628d351 media: mtk-vcodec: call v4l2_m2m_ctx_release first when file is released 2028fb832d media: si470x-i2c: fix possible memory leak in si470x_i2c_probe() e8d78f924f media: imx-pxp: Initialize the spinlock prior to using it 621e8ce75d media: rcar-csi2: Correct the selection of hsfreqrange ad52b9890b mfd: atmel-flexcom: Use .resume_noirq 46d6a23114 mfd: atmel-flexcom: Remove #ifdef CONFIG_PM_SLEEP f93c9aa1d3 tty: serial: atmel: Call dma_async_issue_pending() 755a6c873b tty: serial: atmel: Check return code of dmaengine_submit() bd85b2e77a arm64: dts: ti: k3-j721e: correct cache-sets info 32e9947e66 ath11k: Use host CE parameters for CE interrupts configuration 6a49acfaca crypto: qat - fix undetected PFVF timeout in ACK loop 475ac5c565 crypto: qat - make pfvf send message direction agnostic ee1c74c3c9 crypto: qat - remove unnecessary collision prevention step in PFVF 472f768352 crypto: qat - fix spelling mistake: "messge" -> "message" ae766527e6 ARM: dts: stm32: fix dtbs_check warning on ili9341 dts binding on stm32f429 disco eab4204588 mtd: hyperbus: rpc-if: fix bug in rpcif_hb_remove 867d4ace48 crypto: qce - fix uaf on qce_skcipher_register_one e19b3c1b57 crypto: qce - fix uaf on qce_ahash_register_one 5de640f59f media: dmxdev: fix UAF when dvb_register_device() fails 1d64e2bd22 arm64: dts: renesas: cat875: Add rx/tx delays a33eef23a6 drm/vboxvideo: fix a NULL vs IS_ERR() check 43220a61e7 fs: dlm: fix build with CONFIG_IPV6 disabled 0d7c5d10e7 tee: fix put order in teedev_close_context() 097e601eb8 ath11k: reset RSN/WPA present state for open BSS fa51addd39 ath11k: clear the keys properly via DISABLE_KEY df94b37e90 ath11k: Fix ETSI regd with weather radar overlap ffc9019bd9 Bluetooth: stop proccessing malicious adv data 3273541fed memory: renesas-rpc-if: Return error in case devm_ioremap_resource() fails 55917db359 fs: dlm: don't call kernel_getpeername() in error_report() 98923ebb03 fs: dlm: use sk->sk_socket instead of con->sock 6edd1bd8e3 arm64: dts: meson-gxbb-wetek: fix missing GPIO binding eb1f75fa24 arm64: dts: meson-gxbb-wetek: fix HDMI in early boot 6f012f2c44 arm64: dts: amlogic: Fix SPI NOR flash node name for ODROID N2/N2+ 96d710b1c6 arm64: dts: amlogic: meson-g12: Fix GPU operating point table node name 0b57480ed5 media: aspeed: Update signal status immediately to ensure sane hw state 0ff0ae69d2 media: em28xx: fix memory leak in em28xx_init_dev b441d94287 media: aspeed: fix mode-detect always time out at 2nd run 8d132d9dd8 media: atomisp: fix uninitialized bug in gmin_get_pmic_id_and_addr() fc2b95e7ae media: atomisp: fix enum formats logic 6e5353238c media: atomisp: add NULL check for asd obtained from atomisp_video_pipe 6cbabad304 media: staging: media: atomisp: pci: Balance braces around conditional statements in file atomisp_cmd.c 22b0b68f7d media: atomisp: fix ifdefs in sh_css.c 0bf5e8af6e media: atomisp: fix inverted error check for ia_css_mipi_is_source_port_valid() 3cb3e66f58 media: atomisp: do not use err var when checking port validity for ISP2400 08e43223fb media: atomisp: fix inverted logic in buffers_needed() fb370f6dc7 media: atomisp: fix punit_ddr_dvfs_enable() argument for mrfld_power up case 1daacf9bb6 media: atomisp: add missing media_device_cleanup() in atomisp_unregister_entities() e1da9301cf media: videobuf2: Fix the size printk format 90807ab437 mtd: hyperbus: rpc-if: Check return value of rpcif_sw_init() 9bfed11dcf ath11k: Send PPDU_STATS_CFG with proper pdev mask to firmware 2fe056d979 wcn36xx: fix RX BD rate mapping for 5GHz legacy rates 22406ed4e3 wcn36xx: populate band before determining rate on RX 92fea7bd5a wcn36xx: Put DXE block into reset before freeing memory 0d53c47f6a wcn36xx: Release DMA channel descriptor allocations 1850195a85 wcn36xx: Fix DMA channel enable/disable cycle 38a7842889 wcn36xx: Indicate beacon not connection loss on MISSED_BEACON_IND fcb267bb95 wcn36xx: ensure pairing of init_scan/finish_scan and start_scan/end_scan e53ff4dd70 drm/vc4: hdmi: Set a default HSM rate b9c2343373 clk: bcm-2835: Remove rounding up the dividers 836dd37fe2 clk: bcm-2835: Pick the closest clock rate 88f1b613c3 Bluetooth: cmtp: fix possible panic when cmtp_init_sockets() fails 9ddfa1c191 drm/rockchip: dsi: Reconfigure hardware on resume() 58904ed186 drm/rockchip: dsi: Disable PLL clock on bind error 6215cde020 drm/rockchip: dsi: Hold pm-runtime across bind/unbind 8ccaafa1ca drm/rockchip: dsi: Fix unbalanced clock on probe error 9bc19022aa drm/panel: innolux-p079zca: Delete panel on attach() failure b01b7b8684 drm/panel: kingdisplay-kd097d04: Delete panel on attach() failure 0499c863a8 drm: fix null-ptr-deref in drm_dev_init_release() 7798757013 drm/bridge: display-connector: fix an uninitialized pointer in probe() cb5813b0e5 Bluetooth: L2CAP: Fix not initializing sk_peer_pid ed0b1fd3ec drm/ttm: Put BO in its memory manager's lru list 7b9fa915a5 shmem: fix a race between shmem_unused_huge_shrink and shmem_evict_inode 6c6f86bb61 mm/page_alloc.c: do not warn allocation failure on zone DMA if no managed pages e04b1dfe15 dma/pool: create dma atomic pool only if dma zone has managed pages d2e5724117 mm_zone: add function to check if managed dma zone exists 2142a7e9bd PCI: Add function 1 DMA alias quirk for Marvell 88SE9125 SATA controller 45c74f4f54 dma_fence_array: Fix PENDING_ERROR leak in dma_fence_array_signaled() 191a24ceae gpu: host1x: Add back arm_iommu_detach_device() 0680674536 iommu/io-pgtable-arm-v7s: Add error handle for page table allocation failure 3dae11f8e3 lkdtm: Fix content of section containing lkdtm_rodata_do_nothing() e4a2c924a1 iio: adc: ti-adc081c: Partial revert of removal of ACPI IDs 256302cb2f can: softing_cs: softingcs_probe(): fix memleak on registration failure aa57725e2d media: cec-pin: fix interrupt en/disable handling 2e566cacc3 media: stk1160: fix control-message timeouts 1a0ca711df media: pvrusb2: fix control-message timeouts 2dbf430ead media: redrat3: fix control-message timeouts 6e9c120bf9 media: dib0700: fix undefined behavior in tuner shutdown 5e98ac260d media: s2255: fix control-message timeouts 09b0b918a6 media: cpia2: fix control-message timeouts d90833106c media: em28xx: fix control-message timeouts 2182575c83 media: mceusb: fix control-message timeouts 460525acc9 media: flexcop-usb: fix control-message timeouts 7cac8a5624 media: v4l2-ioctl.c: readbuffers depends on V4L2_CAP_READWRITE 1da0b1cd42 rtc: cmos: take rtc_lock while reading from CMOS 14f6cfe0d7 tools/nolibc: fix incorrect truncation of exit code 5e258640ba tools/nolibc: i386: fix initial stack alignment 06f7528d64 tools/nolibc: x86-64: Fix startup code bug 98259dd54e x86/gpu: Reserve stolen memory for first integrated Intel GPU e2a17dcad5 mtd: rawnand: davinci: Rewrite function description 8933138a66 mtd: rawnand: davinci: Avoid duplicated page read 677764634b mtd: rawnand: davinci: Don't calculate ECC when reading page a8a607b004 mtd: Fixed breaking list in __mtd_del_partition. ff10cd7bb2 mtd: rawnand: gpmi: Remove explicit default gpmi clock setting for i.MX6 538a5e208e mtd: rawnand: gpmi: Add ERR007117 protection for nfc_apply_timings 777a700ccf nfc: llcp: fix NULL error pointer dereference on sendmsg() after failed bind() 08283b076f f2fs: fix to do sanity check in is_alive() 57cfc965e3 HID: wacom: Avoid using stale array indicies to read contact count 7fd22c99bb HID: wacom: Ignore the confidence flag when a touch is removed 9a4800e0f6 HID: wacom: Reset expected and received contact counts at the same time c2e39d5df0 HID: uhid: Fix worker destroying device without any protection aa1346113c KVM: VMX: switch blocked_vcpu_on_cpu_lock to raw spinlock 0347b16583 Merge 5.10.93 into android12-5.10-lts fd187a4925 Linux 5.10.93 bed97c9036 mtd: fixup CFI on ixp4xx f50803b519 powerpc/pseries: Get entry and uaccess flush required bits from H_GET_CPU_CHARACTERISTICS 68c1aa82be ALSA: hda/realtek: Re-order quirk entries for Lenovo 4d15a17d06 ALSA: hda/realtek: Add quirk for Legion Y9000X 2020 d7b41464f1 ALSA: hda: ALC287: Add Lenovo IdeaPad Slim 9i 14ITL5 speaker quirk 87246ae94b ALSA: hda/realtek - Fix silent output on Gigabyte X570 Aorus Master after reboot from Windows 9c27e513fb ALSA: hda/realtek: Add speaker fixup for some Yoga 15ITL5 devices 4c7fb4d519 KVM: x86: remove PMU FIXED_CTR3 from msrs_to_save_all 6b8c3a1853 firmware: qemu_fw_cfg: fix kobject leak in probe error path 889c73305b firmware: qemu_fw_cfg: fix NULL-pointer deref on duplicate entries ff9588cf15 firmware: qemu_fw_cfg: fix sysfs information leak 358a4b054a rtlwifi: rtl8192cu: Fix WARNING when calling local_irq_restore() with interrupts enabled 93c4506f9f media: uvcvideo: fix division by zero at stream start 4c3f70be6f video: vga16fb: Only probe for EGA and VGA 16 color graphic cards 161e43ab8c 9p: only copy valid iattrs in 9P2000.L setattr implementation 0e6c0f3f40 KVM: s390: Clarify SIGP orders versus STOP/RESTART 413b427f5f KVM: x86: Register Processor Trace interrupt hook iff PT enabled in guest 723acd75a0 perf: Protect perf_guest_cbs with RCU eadde287a6 vfs: fs_context: fix up param length parsing in legacy_parse_param c5f3827716 remoteproc: qcom: pil_info: Don't memcpy_toio more than is provided 5d88e24b23 orangefs: Fix the size of a memory allocation in orangefs_bufmap_alloc() 0084fefe29 devtmpfs regression fix: reconfigure on each mount ee40594c95 kbuild: Add $(KBUILD_HOSTLDFLAGS) to 'has_libelf' test f45f895af5 Merge branch 'android12-5.10' into `android12-5.10-lts` 7dd0d263fe Merge 5.10.92 into android12-5.10-lts c982c1a839 Linux 5.10.92 c0091233f3 staging: greybus: fix stack size warning with UBSAN 66d21c005d drm/i915: Avoid bitwise vs logical OR warning in snb_wm_latency_quirk() 2d4fda471d staging: wlan-ng: Avoid bitwise vs logical OR warning in hfa384x_usb_throttlefn() 3609fed7ac media: Revert "media: uvcvideo: Set unique vdev name based in type" 9b3c761e78 random: fix crash on multiple early calls to add_bootloader_randomness() 61cca7d191 random: fix data race on crng init time 3de9478230 random: fix data race on crng_node_pool 43c494294f can: gs_usb: gs_can_start_xmit(): zero-initialize hf->{flags,reserved} 45221a57b6 can: isotp: convert struct tpcon::{idx,len} to unsigned int bd61ae808b can: gs_usb: fix use of uninitialized variable, detach device on reception of invalid USB data f68e600017 mfd: intel-lpss: Fix too early PM enablement in the ACPI ->probe() 5f76445a31 veth: Do not record rx queue hint in veth_xmit ddfa53825f mmc: sdhci-pci: Add PCI ID for Intel ADL 2e691f9894 ath11k: Fix buffer overflow when scanning with extraie a87cecf943 USB: Fix "slab-out-of-bounds Write" bug in usb_hcd_poll_rh_status 15982330b6 USB: core: Fix bug in resuming hub's handling of wakeup requests 413108ce3b ARM: dts: exynos: Fix BCM4330 Bluetooth reset polarity in I9100 b6dd070236 Bluetooth: bfusb: fix division by zero in send path 869e1677a0 Bluetooth: btusb: Add support for Foxconn QCA 0xe0d0 c20021ce94 Bluetooth: btusb: Add support for Foxconn MT7922A 8349391838 Bluetooth: btusb: Add two more Bluetooth parts for WCN6855 294c0dd80d Bluetooth: btusb: fix memory leak in btusb_mtk_submit_wmt_recv_urb() 35ab8c9085 bpf: Fix out of bounds access from invalid *_or_null type verification c84fbba8a9 workqueue: Fix unbind_workers() VS wq_worker_running() race c39d68ab38 md: revert io stats accounting d605f2f30d Merge 5.10.91 into android12-5.10-lts df395c763b Linux 5.10.91 674071c9eb Input: zinitix - make sure the IRQ is allocated before it gets enabled ef81f7d406 ARM: dts: gpio-ranges property is now required f63fa1a0d4 ipv6: raw: check passed optlen before reading cf07884e6b drm/amd/display: Added power down for DCN10 10b9ccd067 mISDN: change function names to avoid conflicts dd8a09cfbb atlantic: Fix buff_ring OOB in aq_ring_rx_clean c2f4bb251e net: udp: fix alignment problem in udp4_seq_show() f82b48d1d8 ip6_vti: initialize __ip6_tnl_parm struct in vti6_siocdevprivate 8c87a83ef8 scsi: libiscsi: Fix UAF in iscsi_conn_get_param()/iscsi_conn_teardown() b798b677f9 usb: mtu3: fix interval value for intr and isoc 498d77fc5e ipv6: Do cleanup if attribute validation fails in multipath route 72b0d14a0a ipv6: Continue processing multipath route even if gateway attribute is invalid 5a7d650bb1 power: bq25890: Enable continuous conversion for ADC at charging 4f260ea553 phonet: refcount leak in pep_sock_accep 6195293460 rndis_host: support Hytera digital radios 62cbde77d9 power: reset: ltc2952: Fix use of floating point literals 998d157e3b power: supply: core: Break capacity loop 16d8568378 xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate aa606b82cd net: ena: Fix error handling when calculating max IO queues number e7f5480978 net: ena: Fix undefined state when tx request id is out of bounds 2de3d961f8 sch_qfq: prevent shift-out-of-bounds in qfq_init_qdisc 4c34d5fd8c batman-adv: mcast: don't send link-local multicast to mcast routers f403b5f96e lwtunnel: Validate RTA_ENCAP_TYPE attribute length 48d5adb08d ipv6: Check attribute length for RTA_GATEWAY when deleting multipath route 173bfa2782 ipv6: Check attribute length for RTA_GATEWAY in multipath route 914420a2a6 ipv4: Check attribute length for RTA_FLOW in multipath route a8fe915be6 ipv4: Check attribute length for RTA_GATEWAY in multipath route 786a335fef ftrace/samples: Add missing prototypes direct functions c859c4de0b i40e: Fix incorrect netdev's real number of RX/TX queues d0ad64438f i40e: Fix for displaying message regarding NVM version 32845aa602 i40e: fix use-after-free in i40e_sync_filters_subtask() f7edb6b943 sfc: The RX page_ring is optional 2b3f34da0d mac80211: initialize variable have_higher_than_11mbit 16e5cad6ec RDMA/uverbs: Check for null return of kmalloc_array a7c2cae997 netrom: fix copying in user data in nr_setsockopt beeb0fdeda RDMA/core: Don't infoleak GRH fields 3ca132e6b0 iavf: Fix limit of total number of queues to active queues of VF 396e301690 i40e: Fix to not show opcode msg on unsuccessful VF MAC change 7f13d14e56 ieee802154: atusb: fix uninit value in atusb_set_extended_addr 7db1e245cb tracing: Tag trace_percpu_buffer as a percpu pointer 760c6a6255 tracing: Fix check for trace_percpu_buffer validity in get_trace_buf() c1e2da4b3f selftests: x86: fix [-Wstringop-overread] warn in test_process_vm_readv() 384111e123 f2fs: quota: fix potential deadlock a1bb21475e Merge 5.10.90 into android12-5.10-lts d3e491a20d Linux 5.10.90 8c15bfb36a bpf: Add kconfig knob for disabling unpriv bpf by default d8a5b1377b perf script: Fix CPU filtering of a script's switch events 2386e81a1d net: fix use-after-free in tw_timer_handler 34087cf960 Input: spaceball - fix parsing of movement data packets 9f329d0d6c Input: appletouch - initialize work before device registration 2a4f551dec scsi: vmw_pvscsi: Set residual data length conditionally 1cb8444f31 binder: fix async_free_space accounting for empty parcels a6e26251dd usb: mtu3: set interval of FS intr and isoc endpoint 3b6efe0b7b usb: mtu3: fix list_head check warning f10b01c48f usb: mtu3: add memory barrier before set GPD's HWO 1c4ace3e6b usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear. 1933fe8ce7 xhci: Fresco FL1100 controller should not have BROKEN_MSI quirk set. b8553330a0 drm/amdgpu: add support for IP discovery gc_info table v2 28863ffe21 drm/amdgpu: When the VCN(1.0) block is suspended, powergating is explicitly enabled a0f3ac399e uapi: fix linux/nfc.h userspace compilation errors 818c9e0a04 nfc: uapi: use kernel size_t to fix user-space builds 8d31cbab4c i2c: validate user data in compat ioctl 51c94d8fbd fsl/fman: Fix missing put_device() call in fman_port_probe 920932b20e net/ncsi: check for error return from call to nla_put_u32 610af55f9f selftests/net: udpgso_bench_tx: fix dst ip argument 78503589b1 net/mlx5e: Fix wrong features assignment in case of error 6114600808 ionic: Initialize the 'lif->dbid_inuse' bitmap b7c9a1427b igc: Fix TX timestamp support for non-MSI-X platforms e8a5988a85 net/smc: fix kernel panic caused by race of smc_sock 97c87c1db9 net/smc: don't send CDC/LLC message if link not ready 99f19566b1 net/smc: improved fix wait on already cleared link e553265ea5 NFC: st21nfca: Fix memory leak in device probe and remove 8d70dc0eec net: lantiq_xrx200: fix statistics of received bytes 7ef89bd1e8 net: ag71xx: Fix a potential double free in error handling paths 40d3618691 net: usb: pegasus: Do not drop long Ethernet frames a67becdaa8 net/smc: fix using of uninitialized completions 769d14abd3 sctp: use call_rcu to free endpoint 13c1bf43b6 selftests: Calculate udpgso segment count without header adjustment abe74fb433 udp: using datalen to cap ipv6 udp max gso segments 5e6ad649e9 net/mlx5e: Fix ICOSQ recovery flow for XSK 73665165b6 net/mlx5e: Wrap the tx reporter dump callback to extract the sq 4cd1da02f0 net/mlx5: DR, Fix NULL vs IS_ERR checking in dr_domain_init_resources fcb32eb3d0 scsi: lpfc: Terminate string in lpfc_debugfs_nvmeio_trc_write() 4833ad4908 selinux: initialize proto variable in selinux_ip_postroute_compat() ec941a2277 recordmcount.pl: fix typo in s390 mcount regex a0e82d5ef9 memblock: fix memblock_phys_alloc() section mismatch error 7da855e939 platform/x86: apple-gmux: use resource_size() with res d01e9ce1af parisc: Clear stale IIR value on instruction access rights trap 0643d9175d tomoyo: use hwight16() in tomoyo_domain_quota_is_ok() e2048a1f91 tomoyo: Check exceeded quota early in tomoyo_domain_quota_is_ok(). 210c7c6908 Input: i8042 - enable deferred probe quirk for ASUS UM325UA bb672eff74 Input: i8042 - add deferred probe support 9b28b48fb3 Merge 5.10.89 into android12-5.10-lts eb967e323f Linux 5.10.89 52ad5da8e3 phonet/pep: refuse to enable an unbound pipe 7dd52af1eb hamradio: improve the incomplete fix to avoid NPD 450121075a hamradio: defer ax25 kfree after unregister_netdev 8e34d07dd4 ax25: NPD bug when detaching AX25 device 50f78486f9 hwmon: (lm90) Do not report 'busy' status bit as alarm ec1d222d37 hwmom: (lm90) Fix citical alarm status for MAX6680/MAX6681 441d387366 pinctrl: mediatek: fix global-out-of-bounds issue 9c75a9657b ASoC: rt5682: fix the wrong jack type detected 94caab5af1 ASoC: tas2770: Fix setting of high sample rates c7282790c7 Input: goodix - add id->model mapping for the "9111" model 3bb3bf50d6 Input: elants_i2c - do not check Remark ID on eKTH3900/eKTH5312 ee6f34215c mm: mempolicy: fix THP allocations escaping mempolicy restrictions 8008fc1d0b KVM: VMX: Fix stale docs for kvm-intel.emulate_invalid_guest_state d91ed251fd usb: gadget: u_ether: fix race in setting MAC address in setup phase 6697f29bf5 ceph: fix up non-directory creation in SGID directories fffb6581a2 f2fs: fix to do sanity check on last xattr entry in __f2fs_setxattr() ad338d825e tee: optee: Fix incorrect page free bug 1f20707674 mm/hwpoison: clear MF_COUNT_INCREASED before retrying get_any_page() ac61b9c6c0 mac80211: fix locking in ieee80211_start_ap error path 89876d1083 ARM: 9169/1: entry: fix Thumb2 bug in iWMMXt exception handling c3253d3a38 mmc: mmci: stm32: clear DLYB_CR after sending tuning command 0d66b39521 mmc: core: Disable card detect during shutdown c8e366a01c mmc: meson-mx-sdhc: Set MANUAL_STOP for multi-block SDIO commands 4af7915361 mmc: sdhci-tegra: Fix switch to HS400ES mode 9a7ec79797 gpio: dln2: Fix interrupts when replugging the device f5b02912e2 pinctrl: stm32: consider the GPIO offset to expose all the GPIO lines 28626e76ba KVM: VMX: Wake vCPU when delivering posted IRQ even if vCPU == this vCPU 7a37f2e370 platform/x86: intel_pmc_core: fix memleak on registration failure b57afd1240 x86/pkey: Fix undefined behaviour with PKRU_WD_BIT c05d8f66ec tee: handle lookup of shm with reference count 0 0ffb9f83e4 parisc: Fix mask used to select futex spinlock 5deeb9ad59 parisc: Correct completer in lws start 8b745616ba ipmi: fix initialization when workqueue allocation fails 1f6ab84746 ipmi: ssif: initialize ssif_info->client early a5192f3116 ipmi: bail out if init_srcu_struct fails bc674f1b21 Input: atmel_mxt_ts - fix double free in mxt_read_info_block 30140e252f ASoC: meson: aiu: Move AIU_I2S_MISC hold setting to aiu-fifo-i2s 2b4c020b70 ALSA: hda/realtek: Fix quirk for Clevo NJ51CU 7470780f3b ALSA: hda/realtek: Add new alc285-hp-amp-init model 4cb7dc2e30 ALSA: hda/realtek: Amp init fixup for HP ZBook 15 G6 69e492161c ALSA: drivers: opl3: Fix incorrect use of vp->state a96c08e0b4 ALSA: jack: Check the return value of kstrdup() 51c7b2a7b8 hwmon: (lm90) Drop critical attribute support for MAX6654 2464738d0e hwmon: (lm90) Introduce flag indicating extended temperature support 196df56c3d hwmon: (lm90) Add basic support for TI TMP461 fa2e149260 hwmon: (lm90) Fix usage of CONFIG2 register in detect function ba696b4708 pinctrl: bcm2835: Change init order for gpio hogs 676c572439 Input: elantech - fix stack out of bound access in elantech_change_report_id() 2792fde84c sfc: falcon: Check null pointer of rx_queue->page_ring d70b4001ef sfc: Check null pointer of rx_queue->page_ring 75c962f02a net: ks8851: Check for error irq 9db0f8d395 drivers: net: smc911x: Check for error irq ca2a15053b fjes: Check for error irq c6d2754006 bonding: fix ad_actor_system option setting to default 6809da5185 ipmi: Fix UAF when uninstall ipmi_si and ipmi_msghandler module 61e6b82e7b igb: fix deadlock caused by taking RTNL in RPM resume path e00eace232 net: skip virtio_net_hdr_set_proto if protocol already set ed05e4dcfb net: accept UFOv6 packages in virtio_net_hdr_to_skb 56b0bbba78 qlcnic: potential dereference null pointer of rx_queue->page_ring 78e49d77e5 net: marvell: prestera: fix incorrect return of port_find 861b4413e4 ARM: dts: imx6qdl-wandboard: Fix Ethernet support d79f5e0d45 netfilter: fix regression in looped (broad|multi)cast's MAC handling 579cefef7c RDMA/hns: Replace kfree() with kvfree() 7cf6466e00 IB/qib: Fix memory leak in qib_user_sdma_queue_pkts() cd9c90682b ASoC: meson: aiu: fifo: Add missing dma_coerce_mask_and_coherent() 580ecf86e7 spi: change clk_disable_unprepare to clk_unprepare 93a957bbf4 arm64: dts: allwinner: orangepi-zero-plus: fix PHY mode ef2dce4325 HID: potential dereference of null pointer 3110bc5862 HID: holtek: fix mouse probing 0875873b2a ext4: check for inconsistent extents between index and leaf block 76366c024f ext4: check for out-of-order index extents in ext4_valid_extent_entries() 1d4b1c4e8b ext4: prevent partial update of the extent blocks f69a47fcbb net: usb: lan78xx: add Allied Telesis AT29M2-AF 8c0059a25c arm64: vdso32: require CROSS_COMPILE_COMPAT for gcc+bfd b16b124a42 arm64: vdso32: drop -no-integrated-as flag ba13eb1927 Merge 5.10.88 into android12-5.10-lts 856f88f27b Linux 5.10.88 88f20cccbe xen/netback: don't queue unlimited number of packages 525875c410 xen/netback: fix rx queue stall detection 8fa3a370cc xen/console: harden hvc_xen against event channel storms d31b337917 xen/netfront: harden netfront against event channel storms 8ac3b6ee7c xen/blkfront: harden blkfront against event channel storms 76ec7fe2d8 Revert "xsk: Do not sleep in poll() when need_wakeup set" e24fc89830 bus: ti-sysc: Fix variable set but not used warning for reinit_modules 70692b0620 rcu: Mark accesses to rcu_state.n_force_qs a9078e7914 scsi: scsi_debug: Sanity check block descriptor length in resp_mode_select() bdb854f134 scsi: scsi_debug: Fix type in min_t to avoid stack OOB aa1f912712 scsi: scsi_debug: Don't call kcalloc() if size arg is zero 6859985a2f ovl: fix warning in ovl_create_real() 5fd7d62daa fuse: annotate lock in fuse_reverse_inval_entry() b99bdf127a media: mxl111sf: change mutex_init() location 0413f7a1a5 xsk: Do not sleep in poll() when need_wakeup set 6b8d8ecdd9 ARM: dts: imx6ull-pinfunc: Fix CSI_DATA07__ESAI_TX0 pad name 8affa1b68d Input: touchscreen - avoid bitwise vs logical OR warning aec5897b27 drm/amdgpu: correct register access for RLC_JUMP_TABLE_RESTORE c1d519263d libata: if T_LENGTH is zero, dma direction should be DMA_NONE a9f2c6af5a timekeeping: Really make sure wall_to_monotonic isn't positive 6471ebcd6f serial: 8250_fintek: Fix garbled text for console a7c8067453 iocost: Fix divide-by-zero on donation from low hweight cgroup bcebb8eb19 zonefs: add MODULE_ALIAS_FS 1c414ff63b btrfs: fix double free of anon_dev after failure to create subvolume 005d9292b5 btrfs: fix memory leak in __add_inode_ref() cd98cb5216 USB: serial: option: add Telit FN990 compositions 5c93584d9a USB: serial: cp210x: fix CP2105 GPIO registration 8f207f1263 usb: xhci: Extend support for runtime power management for AMD's Yellow carp. e5949933f3 PCI/MSI: Mask MSI-X vectors only on success f8aa09186c PCI/MSI: Clear PCI_MSIX_FLAGS_MASKALL on error d17c5a3897 usb: dwc2: fix STM ID/VBUS detection startup delay in dwc2_driver_probe 2b2edc8fc5 USB: NO_LPM quirk Lenovo USB-C to Ethernet Adapher(RTL8153-04) fd623e16b2 tty: n_hdlc: make n_hdlc_tty_wakeup() asynchronous 9439fabfc3 KVM: x86: Drop guest CPUID check for host initiated writes to MSR_IA32_PERF_CAPABILITIES 5fe305c6d4 Revert "usb: early: convert to readl_poll_timeout_atomic()" 2b54f485f2 USB: gadget: bRequestType is a bitfield, not a enum 151ffac3ac powerpc/85xx: Fix oops when CONFIG_FSL_PMC=n fcf9194d36 bpf, selftests: Fix racing issue in btf_skc_cls_ingress test 6f46c59e60 sit: do not call ipip6_dev_free() from sit_init_net() 6e1011cd18 net: systemport: Add global locking for descriptor lifecycle d1765f984c net/smc: Prevent smc_release() from long blocking 337bb7bf7c net: Fix double 0x prefix print in SKB dump 734a3f3106 sfc_ef100: potential dereference of null pointer 7da349f07e net/packet: rx_owner_map depends on pg_vec 1a34fb9e2b netdevsim: Zero-initialize memory for new map's value in function nsim_bpf_map_alloc d3e1f54508 ixgbe: set X550 MDIO speed before talking to PHY 48e01e3881 ixgbe: Document how to enable NBASE-T support 776ed8b366 igc: Fix typo in i225 LTR functions 74a16e062b igbvf: fix double free in `igbvf_probe` ddac50d04f igb: Fix removal of unicast MAC filters of VFs 12c1938870 soc/tegra: fuse: Fix bitwise vs. logical OR warning 451f1eded7 mptcp: clear 'kern' flag from fallback sockets 222cebd995 drm/amd/pm: fix a potential gpu_metrics_table memory leak 74dc97dfb2 rds: memory leak in __rds_conn_create() 67f4362ae2 flow_offload: return EOPNOTSUPP for the unsupported mpls action type 03fd6ca056 mac80211: fix lookup when adding AddBA extension element bef59d6a83 mac80211: agg-tx: don't schedule_and_wake_txq() under sta->lock 96bc86cac0 drm/ast: potential dereference of null pointer cac0fd4b9b selftest/net/forwarding: declare NETIFS p9 p10 81fbdd4565 net/sched: sch_ets: don't remove idle classes from the round-robin list be32c8a788 dmaengine: st_fdma: fix MODULE_ALIAS dfff1d5e85 selftests: Fix IPv6 address bind tests 08896ecfff selftests: Fix raw socket bind tests with VRF 5ba4dfb8b8 selftests: Add duplicate config only for MD5 VRF tests 12512bc8f2 net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg 3a4f6dba1e inet_diag: fix kernel-infoleak for UDP sockets 20ad1ef02f sch_cake: do not call cake_destroy() from cake_init() 1208b445a4 s390/kexec_file: fix error handling when applying relocations c058c544e7 selftests: net: Correct ping6 expected rc from 2 to 1 9983425c20 virtio/vsock: fix the transport to work with VMADDR_CID_ANY 94a01e6fb2 soc: imx: Register SoC device only on i.MX boards cc426a91d3 clk: Don't parent clks until the parent is fully registered 429bb01e4d ARM: socfpga: dts: fix qspi node compatible 7b4cc168d9 ceph: initialize pathlen variable in reconnect_caps_cb e0f06c32af ceph: fix duplicate increment of opened_inodes metric 640e28d618 tee: amdtee: fix an IS_ERR() vs NULL bug eed897a222 mac80211: track only QoS data frames for admission control 24983f7508 arm64: dts: rockchip: fix audio-supply for Rock Pi 4 49bd597719 arm64: dts: rockchip: fix rk3399-leez-p710 vcc3v3-lan supply 9fcdbbf396 arm64: dts: rockchip: fix rk3308-roc-cc vcc-sd supply ba866840b2 arm64: dts: rockchip: remove mmc-hs400-enhanced-strobe from rk3399-khadas-edge 3516bc1492 arm64: dts: imx8mp-evk: Improve the Ethernet PHY description 06294e7e34 arm64: dts: imx8m: correct assigned clocks for FEC 4cc6badff9 audit: improve robustness of the audit queue handling 0e21e6cd5e dm btree remove: fix use after free in rebalance_children() f5187a9d52 recordmcount.pl: look for jgnop instruction as well as bcrl on s390 51f6302f81 vdpa: check that offsets are within bounds e3a1ab5aea virtio_ring: Fix querying of maximum DMA mapping size for virtio device 0612679e48 bpf, selftests: Add test case trying to taint map value pointer 279e0bf80d bpf: Make 32->64 bounds propagation slightly more robust e2aad0b5f2 bpf: Fix signed bounds propagation after mov32 f0f484714f firmware: arm_scpi: Fix string overflow in SCPI genpd driver 7fd214fc7f mac80211: validate extended element ID is present 0bb50470f1 mac80211: send ADDBA requests using the tid/queue of the aggregation session 29bb131dbb mac80211: mark TX-during-stop for TX in in_reconfig 15640e40e3 mac80211: fix regression in SSN handling of addba tx 49b7e49692 KVM: downgrade two BUG_ONs to WARN_ON_ONCE 8d0f56c2ed KVM: selftests: Make sure kvm_create_max_vcpus test won't hit RLIMIT_NOFILE c4d08791d9 Merge 5.10.87 into android12-5.10-lts 272aedd4a3 Linux 5.10.87 8dd559d53b arm: ioremap: don't abuse pfn_valid() to check if pfn is in RAM 65c578935b arm: extend pfn_valid to take into account freed memory map alignment 6e634c0e71 memblock: ensure there is no overflow in memblock_overlaps_region() 74551f13c6 memblock: align freed memory map on pageblock boundaries with SPARSEMEM b4b54c7ba1 memblock: free_unused_memmap: use pageblock units instead of MAX_ORDER b6a1cbd187 perf intel-pt: Fix error timestamp setting on the decoder error path 0612aa02c2 perf intel-pt: Fix missing 'instruction' events with 'q' option 71c795028b perf intel-pt: Fix next 'err' value, walking trace 02681dd178 perf intel-pt: Fix state setting when receiving overflow (OVF) packet cbed09b44c perf intel-pt: Fix intel_pt_fup_event() assumptions about setting state type 3bb7fd4be8 perf intel-pt: Fix sync state when a PSB (synchronization) packet is found 731ff78841 perf intel-pt: Fix some PGE (packet generation enable/control flow packets) usage b23f9252a4 perf inject: Fix itrace space allowed for new attributes 7c26da3be1 ethtool: do not perform operations on net devices being unregistered 6992d8c215 hwmon: (dell-smm) Fix warning on /proc/i8k creation error c31470a30c fuse: make sure reclaim doesn't write the inode 613725436e bpf: Fix integer overflow in argument calculation for bpf_map_area_alloc 9099f35126 staging: most: dim2: use device release method ac76adc87a KVM: x86: Ignore sparse banks size for an "all CPUs", non-sparse IPI req 6f0d9d3e74 tracing: Fix a kmemleak false positive in tracing_map f35f7f04aa drm/amd/display: add connector type check for CRC source set dd3cea3425 drm/amd/display: Fix for the no Audio bug with Tiled Displays dadce61247 net: netlink: af_netlink: Prevent empty skb by adding a check on len. bca6af4325 i2c: rk3x: Handle a spurious start completion interrupt flag d6edec8a7b parisc/agp: Annotate parisc agp init functions with __init cf520ccffd ALSA: hda/hdmi: fix HDA codec entry table order for ADL-P 701a07fd02 ALSA: hda: Add Intel DG2 PCI ID and HDMI codec vid 6d22a96d12 net/mlx4_en: Update reported link modes for 1/10G 999069d8b0 Revert "tty: serial: fsl_lpuart: drop earlycon entry for i.MX8QXP" 27f4ce02b3 s390/test_unwind: use raw opcode instead of invalid instruction 9eab949e2b KVM: arm64: Save PSTATE early on exit 990fd815ec drm/msm/dsi: set default num_data_lanes c602863ad2 nfc: fix segfault in nfc_genl_dump_devices_done 4f0b8b90b8 Merge 5.10.86 into android12-5.10-lts 37050f17f2 Linux 5.10.86 3241449183 netfilter: selftest: conntrack_vrf.sh: fix file permission afc997898e Merge 5.10.85 into android12-5.10-lts e4f2aee661 Linux 5.10.85 47301c06f6 Documentation/Kbuild: Remove references to gcc-plugin.sh af5ba49cf7 MAINTAINERS: adjust GCC PLUGINS after gcc-plugin.sh removal ad13421fd2 doc: gcc-plugins: update gcc-plugins.rst 9fc17c3af5 kbuild: simplify GCC_PLUGINS enablement in dummy-tools/gcc d428e54774 bpf: Add selftests to cover packet access corner cases 0ec0eda3f3 misc: fastrpc: fix improper packet size calculation 261d45a4c2 irqchip: nvic: Fix offset for Interrupt Priority Offsets cd946f0ebe irqchip/irq-gic-v3-its.c: Force synchronisation when issuing INVALL e1c6611f82 irqchip/armada-370-xp: Fix support for Multi-MSI interrupts 8f3ed9deaa irqchip/armada-370-xp: Fix return value of armada_370_xp_msi_alloc() d530e9943d irqchip/aspeed-scu: Replace update_bits with write_bits. 014c2fa5dc csky: fix typo of fpu config macro ee86d0bad8 iio: accel: kxcjk-1013: Fix possible memory leak in probe and remove c10c53419d iio: ad7768-1: Call iio_trigger_notify_done() on error 0f86c9e818 iio: adc: axp20x_adc: fix charging current reporting on AXP22x af7fbb8c0b iio: adc: stm32: fix a current leak by resetting pcsel before disabling vdda fff92f3712 iio: at91-sama5d2: Fix incorrect sign extension a2545b147d iio: dln2: Check return value of devm_iio_trigger_register() 69ae78c1ab iio: dln2-adc: Fix lockdep complaint 416383999c iio: itg3200: Call iio_trigger_notify_done() on error bc4d8367ed iio: kxsd9: Don't return error code in trigger handler 28ea539a31 iio: ltr501: Don't return error code in trigger handler db12d95085 iio: mma8452: Fix trigger reference couting 4e78529110 iio: stk3310: Don't return error code in interrupt handler 5c4a0f307f iio: trigger: stm32-timer: fix MODULE_ALIAS 5de9c5b130 iio: trigger: Fix reference counting cbc04c0c9a iio: gyro: adxrs290: fix data signedness fee8be5bde xhci: avoid race between disable slot command and host runtime suspend 1b43c9b65f usb: core: config: using bit mask instead of individual bits 74b6a6a239 xhci: Remove CONFIG_USB_DEFAULT_PERSIST to prevent xHCI from runtime suspending ef284f086d usb: core: config: fix validation of wMaxPacketValue entries e4de8ca013 USB: gadget: zero allocate endpoint 0 buffers 7193ad3e50 USB: gadget: detect too-big endpoint 0 requests 63fc70bffa selftests/fib_tests: Rework fib_rp_filter_test() 126d1897cb net/qla3xxx: fix an error code in ql_adapter_up() 5e663bcd9a net, neigh: clear whole pneigh_entry at alloc time ae67383208 net: fec: only clear interrupt of handling queue in fec_enet_rx_queue() 83b16b9c44 net: altera: set a couple error code in probe() 385ffd31eb net: cdc_ncm: Allow for dwNtbOutMaxSize to be unset or zero 47322fddb4 tools build: Remove needless libpython-version feature check that breaks test-all fast path 42bea3a1b7 dt-bindings: net: Reintroduce PHY no lane swap binding 3f57215f74 Documentation/locking/locktypes: Update migrate_disable() bits. 77d255d28b perf tools: Fix SMT detection fast read path 391ca20ea1 Revert "PCI: aardvark: Fix support for PCI_ROM_ADDRESS1 on emulated bridge" e5b7fb2198 i40e: Fix NULL pointer dereference in i40e_dbg_dump_desc 347cc9b4d9 mtd: rawnand: fsmc: Fix timing computation 0b2e1fccdf mtd: rawnand: fsmc: Take instruction delay into account 57f290572f i40e: Fix pre-set max number of queues for VF eb87117c27 i40e: Fix failed opcode appearing if handling messages from VF 82ed3829c9 clk: imx: use module_platform_driver 4d12546cf9 RDMA/hns: Do not destroy QP resources in the hw resetting phase 33f320c35d RDMA/hns: Do not halt commands during reset until later 4458938b29 ASoC: codecs: wcd934x: return correct value from mixer put 1089dac26c ASoC: codecs: wcd934x: handle channel mappping list correctly 83dae68fc0 ASoC: codecs: wsa881x: fix return values from kcontrol put 62e4dc5e13 ASoC: qdsp6: q6routing: Fix return value from msm_routing_put_audio_mixer 2f4764fe36 ASoC: rt5682: Fix crash due to out of scope stack vars bdd8129c66 PM: runtime: Fix pm_runtime_active() kerneldoc comment 661c4412c5 qede: validate non LSO skb length c4d2d7c935 scsi: scsi_debug: Fix buffer size of REPORT ZONES command 1e434d2687 scsi: pm80xx: Do not call scsi_remove_host() in pm8001_alloc() 5dfe611474 block: fix ioprio_get(IOPRIO_WHO_PGRP) vs setuid(2) 5f1f94c26b tracefs: Set all files to the same group ownership as the mount option 2ba0738f71 net: mvpp2: fix XDP rx queues registering 47ffefd88a aio: fix use-after-free due to missing POLLFREE handling e4d19740bc aio: keep poll requests on waitqueue until completed fc2f636ffc signalfd: use wake_up_pollfree() 9f3acee7ea binder: use wake_up_pollfree() 8e04c8397b wait: add wake_up_pollfree() 2f8eb4c4c8 libata: add horkage for ASMedia 1092 f76580d82c can: m_can: Disable and ignore ELO interrupt 703dde1120 can: pch_can: pch_can_rx_normal: fix use after free 2737d0bc21 drm/syncobj: Deal with signalled fences in drm_syncobj_find_fence. 17edb38e76 clk: qcom: regmap-mux: fix parent clock lookup 172a982244 mmc: renesas_sdhi: initialize variable properly when tuning 33204825cc tracefs: Have new files inherit the ownership of their parent c520943a00 nfsd: Fix nsfd startup race (again) eeb0711801 nfsd: fix use-after-free due to delegation race 8b4264c27b md: fix update super 1.0 on rdev size change caf9b352dc btrfs: replace the BUG_ON in btrfs_del_root_ref with proper error handling 41b3cc57d6 btrfs: clear extent buffer uptodate when we fail to write it 75490bcbd0 scsi: qla2xxx: Format log strings only if needed 07977a3f3d ALSA: pcm: oss: Handle missing errors in snd_pcm_oss_change_params*() ad45babf78 ALSA: pcm: oss: Limit the period size to 16MB 02b2b691b7 ALSA: pcm: oss: Fix negative period/buffer sizes 6760e6ddeb ALSA: hda/realtek: Fix quirk for TongFang PHxTxX1 7fe903d354 ALSA: hda/realtek - Add headset Mic support for Lenovo ALC897 platform 3063ee5164 ALSA: ctl: Fix copy of updated id with element read/write c581090228 mm: bdi: initialize bdi_min_ratio when bdi is unregistered 06368922f3 KVM: x86: Wait for IPIs to be delivered when handling Hyper-V TLB flush hypercall 2a51edaf5c net/sched: fq_pie: prevent dismantle issue 4b7e90672a devlink: fix netns refcount leak in devlink_nl_cmd_reload() 9d683d14f6 IB/hfi1: Correct guard on eager buffer deallocation 2e2edebb5d iavf: Fix reporting when setting descriptor count aada0b3f33 iavf: restore MSI state on reset 32a329b731 netfilter: conntrack: annotate data-races around ct->timeout 5e39de85b7 udp: using datalen to cap max gso segments 666521b385 seg6: fix the iif in the IPv6 socket control block 484069b5de nfp: Fix memory leak in nfp_cpp_area_cache_add() b1830ede16 bonding: make tx_rebalance_counter an atomic a59df4ea71 ice: ignore dropped packets during init 349e83c0cf bpf: Fix the off-by-two error in range markings f26951db84 bpf, x86: Fix "no previous prototype" warning 74685aaece vrf: don't run conntrack on vrf with !dflt qdisc d5cf399a6d selftests: netfilter: add a vrf+conntrack testcase 83ea620a1b nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done f3d9114ac9 drm/amdkfd: fix boot failure when iommu is disabled in Picasso. 7508a9aa65 drm/amdgpu: init iommu after amdkfd device init ac9db04ee3 drm/amdgpu: move iommu_resume before ip init/resume fe9dca7dda drm/amdgpu: add amdgpu_amdkfd_resume_iommu 5d191b0976 drm/amdkfd: separate kfd_iommu_resume from kfd_resume 46dcf66d6e drm/amd/amdkfd: adjust dummy functions' placement dded8d76a7 x86/sme: Explicitly map new EFI memmap table as encrypted 923f4dc5df can: sja1000: fix use after free in ems_pcmcia_add_card() 819251da71 can: kvaser_pciefd: kvaser_pciefd_rx_error_frame(): increase correct stats->{rx,tx}_errors counter 854a2bede1 can: kvaser_usb: get CAN clock frequency from device 2c08271f4e IB/hfi1: Fix leak of rcvhdrtail_dummy_kvaddr d87c10607b IB/hfi1: Fix early init panic d60dd3685d IB/hfi1: Insure use of smp_processor_id() is preempt disabled 05eb0e4a12 nft_set_pipapo: Fix bucket load in AVX2 lookup routine for six 8-bit groups 89f3edc98f HID: check for valid USB device for many HID drivers 889c39113f HID: wacom: fix problems when device is not a valid USB device 6272b17001 HID: bigbenff: prevent null pointer dereference d877651afd HID: add USB_HID dependancy on some USB HID drivers a7e9c5ddf5 HID: add USB_HID dependancy to hid-chicony 28989ed4d7 HID: add USB_HID dependancy to hid-prodikeys 6114432960 HID: add hid_is_usb() function to make it simpler for USB detection 2298d5edd8 HID: google: add eel USB id 12362cd3a4 HID: quirks: Add quirk for the Microsoft Surface 3 type-cover cc97d73215 gcc-plugins: fix gcc 11 indigestion with plugins... 1eee36a552 gcc-plugins: simplify GCC plugin-dev capability test 518c3f98e5 usb: gadget: uvc: fix multiple opens e2aed161fc ANDROID: GKI: fix up abi breakage in fib_rules.h 1b71a028a2 Merge 5.10.84 into android12-5.10-lts a0582e24d3 Linux 5.10.84 e6edaf2677 ipmi: msghandler: Make symbol 'remove_work_wq' static a8d18fb4d1 net/tls: Fix authentication failure in CCM mode dbe73dace9 parisc: Mark cr16 CPU clocksource unstable on all SMP machines 01300d2150 iwlwifi: mvm: retry init flow if failed a5d0a72b80 serial: 8250: Fix RTS modem control while in rs485 mode f9802d7049 serial: 8250_pci: rewrite pericom_do_set_divisor() 50b06889c8 serial: 8250_pci: Fix ACCES entries in pci_serial_quirks array e1722acf4f serial: core: fix transmit-buffer reset and memleak bda142bbeb serial: tegra: Change lower tolerance baud rate limit for tegra20 and tegra30 901f7e0aa4 serial: pl011: Add ACPI SBSA UART match id 946ded2287 tty: serial: msm_serial: Deactivate RX DMA for polling support 67d08450a0 x86/64/mm: Map all kernel memory into trampoline_pgd b3a519b5a5 x86/tsc: Disable clocksource watchdog for TSC on qualified platorms 1ed4a8fd36 x86/tsc: Add a timer to make sure TSC_adjust is always checked a92f044a9f usb: typec: tcpm: Wait in SNK_DEBOUNCED until disconnect 6d8c191bf4 USB: NO_LPM quirk Lenovo Powered USB-C Travel Hub 90c915051c xhci: Fix commad ring abort, write all 64 bits to CRCR register. 1235485c63 vgacon: Propagate console boot parameters before calling `vc_resize' 92b9113c6d parisc: Fix "make install" on newer debian releases c27a548d3f parisc: Fix KBUILD_IMAGE for self-extracting kernel 92f309c838 x86/entry: Add a fence for kernel entry SWAPGS in paranoid_entry() 4bbbc9c4f3 x86/pv: Switch SWAPGS to ALTERNATIVE 4d42b7bcf0 sched/uclamp: Fix rq->uclamp_max not set on first enqueue 2015ffa3a4 x86/xen: Add xenpv_restore_regs_and_return_to_usermode() 8b9279cad2 x86/entry: Use the correct fence macro after swapgs in kernel CR3 c8e3411918 x86/sev: Fix SEV-ES INS/OUTS instructions for word, dword, and qword 64ca109bf8 KVM: VMX: Set failure code in prepare_vmcs02() 60ce9a7540 KVM: x86/pmu: Fix reserved bits for AMD PerfEvtSeln register cfebd5a277 atlantic: Remove warn trace message. 95f6fae9a0 atlantic: Fix statistics logic for production hardware 695d9c6bc6 Remove Half duplex mode speed capabilities. 0c67e7b98f atlantic: Add missing DIDs and fix 115c. ca350298bc atlantic: Fix to display FW bundle version instead of FW mac version. 93a4f3f4fd atlatnic: enable Nbase-t speeds with base-t 44812111a3 atlantic: Increase delay for fw transactions 13f290d5aa drm/msm: Do hw_init() before capturing GPU state d646856a60 drm/msm/a6xx: Allocate enough space for GMU registers a792b3d564 net/smc: Keep smc_close_final rc during active close e226180acc net/rds: correct socket tunable error in rds_tcp_tune() 77731fede2 net/smc: fix wrong list_del in smc_lgr_cleanup_early 9a40a1e0eb ipv4: convert fib_num_tclassid_users to atomic_t fa973bf5fd net: annotate data-races on txq->xmit_lock_owner e26dab79e1 dpaa2-eth: destroy workqueue at the end of remove function dde240695d net: marvell: mvpp2: Fix the computation of shared CPUs 3260b8d120 net: usb: lan78xx: lan78xx_phy_init(): use PHY_POLL instead of "0" if no IRQ is available acef1c2b15 ALSA: intel-dsp-config: add quirk for CML devices based on ES8336 codec 60f0b9c42c rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer() 35b40f724c rxrpc: Fix rxrpc_peer leak in rxrpc_look_up_bundle() 4afb32090a ASoC: tegra: Fix kcontrol put callback in AHUB fe4eb5297a ASoC: tegra: Fix kcontrol put callback in DSPK 256aa15aac ASoC: tegra: Fix kcontrol put callback in DMIC 1cf1f9a1f3 ASoC: tegra: Fix kcontrol put callback in I2S 0ee53a1d88 ASoC: tegra: Fix kcontrol put callback in ADMAIF e6fb4c3fd3 ASoC: tegra: Fix wrong value type in DSPK 0265ef0dff ASoC: tegra: Fix wrong value type in DMIC e66e75fb22 ASoC: tegra: Fix wrong value type in I2S 6b54c0d845 ASoC: tegra: Fix wrong value type in ADMAIF 932b338f4e mt76: mt7915: fix NULL pointer dereference in mt7915_get_phy_mode a0335cda6d selftests: net: Correct case name f1d43efa59 net/mlx4_en: Fix an use-after-free bug in mlx4_en_try_alloc_resources() 59d2dc7710 arm64: ftrace: add missing BTIs ef55f0f8af siphash: use _unaligned version by default fd52e1f8c0 net: mpls: Fix notifications when deleting a device 15fa12c119 net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic_83xx_add_rings() c6f340a331 tcp: fix page frag corruption on page fault aa6c393a3c natsemi: xtensa: fix section mismatch warnings 289ee320b5 i2c: cbus-gpio: set atomic transfer callback 58d5c53f25 i2c: stm32f7: stop dma transfer in case of NACK c221244917 i2c: stm32f7: recover the bus on access timeout 8de6ea757c i2c: stm32f7: flush TX FIFO upon transfer errors 1c75779dd9 wireguard: ratelimiter: use kvcalloc() instead of kvzalloc() cb2d7c1992 wireguard: receive: drop handshakes if queue lock is contended 8a29a50dbd wireguard: receive: use ring buffer for incoming handshakes e3be118327 wireguard: device: reset peer src endpoint when netns exits f7b6672fab wireguard: selftests: rename DEBUG_PI_LIST to DEBUG_PLIST 0584bf51c3 wireguard: selftests: actually test for routing loops 3d1dc3c677 wireguard: allowedips: add missing __rcu annotation to satisfy sparse 4caf965f6c wireguard: selftests: increase default dmesg log size 3d73021f8d tracing/histograms: String compares should not care about signed values d4af6d9749 KVM: X86: Use vcpu->arch.walk_mmu for kvm_mmu_invlpg() c71b5f37b5 KVM: arm64: Avoid setting the upper 32 bits of TCR_EL2 and CPTR_EL2 to 1 5f33887a36 KVM: x86: Use a stable condition around all VT-d PI paths 7722e88505 KVM: nVMX: Flush current VPID (L1 vs. L2) for KVM_REQ_TLB_FLUSH_GUEST 6a44f200f1 KVM: Disallow user memslot with size that exceeds "unsigned long" 775191dd4c drm/amd/display: Allow DSC on supported MST branch devices 209d35ee34 ipv6: fix memory leak in fib6_rule_suppress 16c242b091 sata_fsl: fix warning in remove_proc_entry when rmmod sata_fsl 4a46b2f5dc sata_fsl: fix UAF in sata_fsl_port_stop when rmmod sata_fsl 4baba6ba56 fget: check that the fd still exists after getting a ref to it 80bfed369b s390/pci: move pseudo-MMIO to prevent MIO overlap 92283c2728 cpufreq: Fix get_cpu_device() failure in add_cpu_dev_symlink() f717f29e84 ipmi: Move remove_work to dedicated workqueue de4f5eb02c rt2x00: do not mark device gone on EPROTO errors during start c200721f8e kprobes: Limit max data_size of the kretprobe instances 2a74c13dfe vrf: Reset IPCB/IP6CB when processing outbound pkts in vrf dev xmit 136cabf157 ACPI: Add stubs for wakeup handler functions cc443ac5bb net/smc: Avoid warning of possible recursive locking ff061b5bda perf report: Fix memory leaks around perf_tip() a4c17ebdd6 perf hist: Fix memory leak of a perf_hpp_fmt d9b72274f3 perf inject: Fix ARM SPE handling 2c15d2a6ba net: ethernet: dec: tulip: de4x5: fix possible array overflows in type3_infoblock() f059fa40f0 net: tulip: de4x5: fix the problem that the array 'lp->phy[8]' may be out of bound 4d5968ea06 ipv6: check return value of ipv6_skip_exthdr 22519eff7d ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port() 9a32d3c08d ata: ahci: Add Green Sardine vendor ID as board_ahci_mobile c746945fb6 drm/amd/amdgpu: fix potential memleak 74aafe99ef drm/amd/amdkfd: Fix kernel panic when reset failed and been triggered again f0c9f49b0c scsi: iscsi: Unblock session then wake up error handler bc8c423a28 thermal: core: Reset previous low and high trip during thermal zone init 8e4d2ac434 btrfs: check-integrity: fix a warning on write caching disabled disk 0395722905 s390/setup: avoid using memblock_enforce_memory_limit fd1e70ef65 platform/x86: thinkpad_acpi: Fix WWAN device disabled issue after S3 deep 226b21ad01 platform/x86: thinkpad_acpi: Add support for dual fan control 3fc88660ed net: return correct error code 2c514d2500 atlantic: Fix OOB read and write in hw_atl_utils_fw_rpc_wait ff6eeb6278 net/smc: Transfer remaining wait queue entries during fallback e1a165599a mac80211: do not access the IV when it was stripped c386d7aa59 drm/sun4i: fix unmet dependency on RESET_CONTROLLER for PHY_SUN6I_MIPI_DPHY 57e36973fa powerpc/pseries/ddw: Revert "Extend upper limit for huge DMA window for persistent memory" 7b2b7e03e8 gfs2: Fix length of holes reported at end-of-file 664cceab6f gfs2: release iopen glock early in evict bcce010f92 ovl: fix deadlock in splice write dca4f9a581 ovl: simplify file splice 7774dd934a can: j1939: j1939_tp_cmd_recv(): check the dst address of TP.CM_BAM 60ae63ef19 NFSv42: Fix pagecache invalidation after COPY/CLONE 6e6898e23c ANDROID: GKI: update abi_gki_aarch64.xml due to bpf changes in 5.10.83 cd1062d64e Revert "net: ipv6: add fib6_nh_release_dsts stub" 0bf59ac0b2 Revert "net: nexthop: release IPv6 per-cpu dsts when replacing a nexthop group" 65836a68d9 Revert "mmc: sdhci: Fix ADMA for PAGE_SIZE >= 64KiB" 249dae115a Merge 5.10.83 into android-5.10 bc8ae0e2af Merge branch 'android12-5.10' into `android12-5.10-lts` a324ad7945 Linux 5.10.83 45b42cd053 drm/amdgpu/gfx9: switch to golden tsc registers for renoir+ 98b02755d5 net: stmmac: platform: fix build warning when with !CONFIG_PM_SLEEP a15261d2a1 shm: extend forced shm destroy to support objects from several IPC nses aa20e966d8 s390/mm: validate VMA in PGSTE manipulation functions a94e4a7b77 tty: hvc: replace BUG_ON() with negative return value 1c5f722a8f xen/netfront: don't trust the backend response data blindly 334b0f2787 xen/netfront: disentangle tx_skb_freelist e17ee047ee xen/netfront: don't read data from request on the ring page f5e4937098 xen/netfront: read response from backend only once 1ffb20f052 xen/blkfront: don't trust the backend response data blindly 8e147855fc xen/blkfront: don't take local copy of a request from the ring page 273f04d5d1 xen/blkfront: read response from backend only once b98284aa3f xen: sync include/xen/interface/io/ring.h with Xen's newest version 406f2d5fe3 tracing: Check pid filtering when creating events 4fd0ad08ee vhost/vsock: fix incorrect used length reported to the guest fbc0514e1a iommu/amd: Clarify AMD IOMMUv2 initialization messages 5655b8bccb smb3: do not error on fsync when readonly c380062d08 ceph: properly handle statfs on multifs setups 22423c966e f2fs: set SBI_NEED_FSCK flag when inconsistent node block found e6ee7abd6b sched/scs: Reset task stack state in bringup_cpu() 71e38a0c7c tcp: correctly handle increased zerocopy args struct size 72f2117e45 net: mscc: ocelot: correctly report the timestamping RX filters in ethtool 73115a2b38 net: mscc: ocelot: don't downgrade timestamping RX filters in SIOCSHWTSTAMP 62343dadbb net: hns3: fix VF RSS failed problem after PF enable multi-TCs 215167df45 net/smc: Don't call clcsock shutdown twice when smc shutdown 6e800ee432 net: vlan: fix underflow for the real_dev refcnt ae2659d2c6 net/sched: sch_ets: don't peek at classes beyond 'nbands' e3509feb46 tls: fix replacing proto_ops 22156242b1 tls: splice_read: fix record type check 3b6c71c097 MIPS: use 3-level pgtable for 64KB page size on MIPS_VA_BITS_48 a6a5d853f1 MIPS: loongson64: fix FTLB configuration 5e823dbee2 igb: fix netpoll exit with traffic f2a58ff3e3 nvmet: use IOCB_NOWAIT only if the filesystem supports it 12ceb52f2c net/smc: Fix loop in smc_listen c94cbd262b net/smc: Fix NULL pointer dereferencing in smc_vlan_by_tcpsk() 3d4937c6a3 net: phylink: Force retrigger in case of latched link-fail indicator 50162ff3c8 net: phylink: Force link down and retrigger resolve on interface change 95ba8f0d57 lan743x: fix deadlock in lan743x_phy_link_status_change() c5e4316d9c tcp_cubic: fix spurious Hystart ACK train detections for not-cwnd-limited flows 3187623096 drm/amd/display: Set plane update flags for all planes in reset f634c755a0 PM: hibernate: use correct mode for swsusp_close() 440bd9faad net/ncsi : Add payload to be 32-bit aligned to fix dropped packets ac88cb3c44 nvmet-tcp: fix incomplete data digest send 8889ff80fd net: marvell: mvpp2: increase MTU limit when XDP enabled 90d0736876 mlxsw: spectrum: Protect driver from buggy firmware 33d89128a9 mlxsw: Verify the accessed index doesn't exceed the array length 29e1b57347 net/smc: Ensure the active closing peer first closes clcsock 77d9c2efa8 erofs: fix deadlock when shrink erofs slab 9f540c7ffb scsi: scsi_debug: Zero clear zones at reset write pointer 725ba12895 scsi: core: sysfs: Fix setting device state to SDEV_RUNNING e65a8707b4 ice: avoid bpf_prog refcount underflow 1eb5395add ice: fix vsi->txq_map sizing 26ed13d064 net: nexthop: release IPv6 per-cpu dsts when replacing a nexthop group 3c40584595 net: ipv6: add fib6_nh_release_dsts stub dc2f7e9d8d net: stmmac: retain PTP clock time during SIOCSHWTSTAMP ioctls 79068e6b1c net: stmmac: fix system hang caused by eee_ctrl_timer during suspend/resume cc301ad312 nfp: checking parameter process for rx-usecs/tx-usecs is invalid 9b44cb67d3 ipv6: fix typos in __ip6_finish_output() 6d9e8dabd4 firmware: smccc: Fix check for ARCH_SOC_ID not implemented bbd1683e79 mptcp: fix delack timer 061542815a ALSA: intel-dsp-config: add quirk for JSL devices based on ES8336 codec f5af2def7e iavf: Prevent changing static ITR values if adaptive moderation is on 5dca8eff46 net: marvell: prestera: fix double free issue on err path b33c5c8281 drm/vc4: fix error code in vc4_create_object() 2bf9c5a503 scsi: mpt3sas: Fix kernel panic during drive powercycle test 29ecb4c0f0 drm/nouveau/acr: fix a couple NULL vs IS_ERR() checks 0effb7f51b ARM: socfpga: Fix crash with CONFIG_FORTIRY_SOURCE 86c5adc780 NFSv42: Don't fail clone() unless the OP_CLONE operation failed c9ba7864d3 firmware: arm_scmi: pm: Propagate return value to caller 8730a679c3 net: ieee802154: handle iftypes as u32 2925aadd1f ASoC: codecs: wcd934x: return error code correctly from hw_params 3a25def06d ASoC: topology: Add missing rwsem around snd_ctl_remove() calls 4a4f900e04 ASoC: qdsp6: q6asm: fix q6asm_dai_prepare error handling 9196a68581 ASoC: qdsp6: q6routing: Conditionally reset FrontEnd Mixer 2be17eca48 ARM: dts: bcm2711: Fix PCIe interrupts 9db1d4a3c2 ARM: dts: BCM5301X: Add interrupt properties to GPIO node b2cd6fdcbe ARM: dts: BCM5301X: Fix I2C controller interrupt b7ef25e8c2 netfilter: flowtable: fix IPv6 tunnel addr match d689176e0e netfilter: ipvs: Fix reuse connection if RS weight is 0 994065f6ef netfilter: ctnetlink: do not erase error code with EINVAL a3d829e5f3 netfilter: ctnetlink: fix filtering with CTA_TUPLE_REPLY a8a917058f proc/vmcore: fix clearing user buffer by properly using clear_user() 1f520a0d78 PCI: aardvark: Fix link training aec0751f61 PCI: aardvark: Simplify initialization of rootcap on virtual bridge df57480988 PCI: aardvark: Implement re-issuing config requests on CRS response e7f2e2c758 PCI: aardvark: Update comment about disabling link training 2b7bc1c4b2 PCI: aardvark: Deduplicate code in advk_pcie_rd_conf() dfe906da9a powerpc/32: Fix hardlockup on vmap stack overflow bf00edd9e6 mdio: aspeed: Fix "Link is Down" issue 14c3ce30dd mmc: sdhci: Fix ADMA for PAGE_SIZE >= 64KiB 63195705b3 mmc: sdhci-esdhc-imx: disable CMDQ support 092a58f0d9 tracing: Fix pid filtering when triggers are attached 68fa6bf7f1 tracing/uprobe: Fix uprobe_perf_open probes iteration b777c866aa KVM: PPC: Book3S HV: Prevent POWER7/8 TLB flush flushing SLB bfed9c2f2f xen: detect uninitialized xenbus in xenbus_init e1d492c275 xen: don't continue xenstore initialization in case of errors 8f4d0719f3 fuse: release pipe buf after last use 8d0163cec7 staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect() 0bfed81b2c staging: greybus: Add missing rwsem around snd_ctl_remove() calls 146283f16b staging/fbtft: Fix backlight 8fc5e3c7ca HID: wacom: Use "Confidence" flag to prevent reporting invalid contacts 6ca32e2e77 Revert "parisc: Fix backtrace to always include init funtion names" 3a4aeb37a7 media: cec: copy sequence field for the reply 3798218a1a ALSA: hda/realtek: Fix LED on HP ProBook 435 G7 60274e248e ALSA: hda/realtek: Add quirk for ASRock NUC Box 1100 172167bc8d ALSA: ctxfi: Fix out-of-range access 4402cf0402 binder: fix test regression due to sender_euid change aea184ae64 usb: hub: Fix locking issues with address0_mutex 5bf3a0c778 usb: hub: Fix usb enumeration issue due to address0 race 00f1038c72 usb: typec: fusb302: Fix masking of comparator and bc_lvl interrupts 56fbab4937 usb: chipidea: ci_hdrc_imx: fix potential error pointer dereference in probe b70ff391de net: nexthop: fix null pointer dereference when IPv6 is not enabled 0755f3f322 usb: dwc3: gadget: Fix null pointer exception 140e2df472 usb: dwc3: gadget: Check for L1/L2/U3 for Start Transfer 3abf746e80 usb: dwc3: gadget: Ignore NoStream after End Transfer 2b7ab82f51 usb: dwc2: hcd_queue: Fix use of floating point literal 4b18ccad96 usb: dwc2: gadget: Fix ISOC flow for elapsed frames 16f1cac8f7 USB: serial: option: add Fibocom FM101-GL variants ff72128636 USB: serial: option: add Telit LE910S1 0x9200 composition 854c14b2a1 ACPI: Get acpi_device's parent from the parent field 33fe044f6a bpf: Fix toctou on read-only map's constant scalar tracking 8d21bcc704 Merge 5.10.82 into android12-5.10-lts d5259a9ba6 Linux 5.10.82 d35250ec5a Revert "perf: Rework perf_event_exit_event()" 6718f79c40 ALSA: hda: hdac_stream: fix potential locking issue in snd_hdac_stream_assign() f751fb54f2 ALSA: hda: hdac_ext_stream: fix potential locking issues b3ef5051a7 x86/Kconfig: Fix an unused variable error in dell-smm-hwmon 2ec78af152 btrfs: update device path inode time instead of bd_inode 9febc9d8d2 fs: export an inode_update_time helper cade5d7a28 ice: Delete always true check of PF pointer fe65cecd27 usb: max-3421: Use driver data instead of maintaining a list of bound devices 6186c7b9bd ASoC: DAPM: Cover regression by kctl change notification fix b17dd53cac selinux: fix NULL-pointer dereference when hashtab allocation fails 1ae0d59c4f RDMA/netlink: Add __maybe_unused to static inline in C file 40bc831ab5 hugetlbfs: flush TLBs correctly after huge_pmd_unshare 86ab0f8ff0 scsi: ufs: core: Fix task management completion timeout race ddd4e46cff scsi: ufs: core: Fix task management completion 04c586a601 drm/amdgpu: fix set scaling mode Full/Full aspect/Center not works on vga and dvi connectors 47901b77bf drm/i915/dp: Ensure sink rate values are always valid 82de15ca6b drm/nouveau: clean up all clients on device removal c81c90fbf5 drm/nouveau: use drm_dev_unplug() during device removal 9221aff33e drm/nouveau: Add a dedicated mutex for the clients list 65517975cb drm/udl: fix control-message timeout 3d68d6ee83 drm/amd/display: Update swizzle mode enums 7b97b5776d cfg80211: call cfg80211_stop_ap when switch from P2P_GO type 1ab297809d parisc/sticon: fix reverse colors 6adbc07ebc btrfs: fix memory ordering between normal and ordered work functions 6289b494b3 net: stmmac: socfpga: add runtime suspend/resume callback for stratix10 platform 5875f87e2f udf: Fix crash after seekdir 6b43cf113a KVM: nVMX: don't use vcpu->arch.efer when checking host state on nested state load cc73242889 block: Check ADMIN before NICE for IOPRIO_CLASS_RT 63e2f34abc s390/kexec: fix memory leak of ipl report buffer b1cf0d2fc4 scsi: qla2xxx: Fix mailbox direction flags in qla2xxx_get_adapter_id() 08fd6df8ea powerpc/8xx: Fix pinned TLBs with CONFIG_STRICT_KERNEL_RWX 9c177eee11 x86/hyperv: Fix NULL deref in set_hv_tscchange_cb() if Hyper-V setup fails b2e2fb6407 mm: kmemleak: slob: respect SLAB_NOLEAKTRACE flag 99032adf7d ipc: WARN if trying to remove ipc object which is absent a7d9162586 tipc: check for null after calling kmemdup f5995fcb75 hexagon: clean up timer-regs.h 0854c9ff21 hexagon: export raw I/O routines for modules 528971af64 tun: fix bonding active backup with arp monitoring af1d3c437e arm64: vdso32: suppress error message for 'make mrproper' 97653ba562 net: stmmac: dwmac-rk: Fix ethernet on rk3399 based devices 4cebe23c03 s390/kexec: fix return code handling d4fb80ae98 perf/x86/intel/uncore: Fix IIO event constraints for Skylake Server 175135a5ea perf/x86/intel/uncore: Fix filter_tid mask for CHA events on Skylake Server 84f64c7c52 pinctrl: qcom: sdm845: Enable dual edge errata a8230fb74b KVM: PPC: Book3S HV: Use GLOBAL_TOC for kvmppc_h_set_dabr/xdabr() 4e6cce20fb e100: fix device suspend/resume 34e54703fb NFC: add NCI_UNREG flag to eliminate the race b2a60b4a01 net: nfc: nci: Change the NCI close sequence 73a0d12114 NFC: reorder the logic in nfc_{un,}register_device cb14b196d9 NFC: reorganize the functions in nci_request 41dc8dcb49 i40e: Fix display error code in dmesg 028ea7b090 i40e: Fix creation of first queue by omitting it if is not power of two 69868d7a88 i40e: Fix warning message and call stack during rmmod i40e driver 20645482d1 i40e: Fix ping is lost after configuring ADq on VF 6d64743045 i40e: Fix changing previously set num_queue_pairs for PFs f866513ead i40e: Fix NULL ptr dereference on VSI filter sync 0719488565 i40e: Fix correct max_pkt_size on VF RX queue 8e6bae950d net: virtio_net_hdr_to_skb: count transport header in UFO 1c4099dc0d net: dpaa2-eth: fix use-after-free in dpaa2_eth_remove 381a30f7e3 net: sched: act_mirred: drop dst for the direction from egress to ingress a792e0128d scsi: core: sysfs: Fix hang when device state is set via sysfs 4b4302a02b net/mlx5: E-Switch, return error if encap isn't supported 68748ea4d1 net/mlx5: E-Switch, Change mode lock from mutex to rw semaphore 6190e1a2d4 net/mlx5: Lag, update tracker when state change event received 471c492890 net/mlx5e: nullify cq->dbg pointer in mlx5_debug_cq_remove() d1f8f1e04a platform/x86: hp_accel: Fix an error handling path in 'lis3lv02d_probe()' da16f907cb mips: lantiq: add support for clk_get_parent() 17dfbe1b2f mips: bcm63xx: add support for clk_get_parent() 34284b3a2f MIPS: generic/yamon-dt: fix uninitialized variable error a61f90b216 iavf: Fix for setting queues to 0 a8a1e601c2 iavf: Fix for the false positive ASQ/ARQ errors while issuing VF reset 77f5ae5441 iavf: validate pointers ddcc185baa iavf: prevent accidental free of filter structure a420b26128 iavf: Fix failure to exit out from last all-multicast mode 78638b4713 iavf: free q_vectors before queues in iavf_disable_vf 84a13bfe27 iavf: check for null in iavf_fix_features 1555d83ddb iavf: Fix return of set the new channel count 09decd0a10 net/smc: Make sure the link_id is unique 437e21e2c9 sock: fix /proc/net/sockstat underflow in sk_clone_lock() 4da14ddad1 net: reduce indentation level in sk_clone_lock() 9c3c2ef6ca tipc: only accept encrypted MSG_CRYPTO msgs 3d59416647 bnxt_en: reject indirect blk offload when hw-tc-offload is off 4fc060abaa net: bnx2x: fix variable dereferenced before check 3ae75cc38a net: ipa: disable HOLB drop when updating timer 3984876f91 tracing: Add length protection to histogram string copies 900ea2f628 tcp: Fix uninitialized access in skb frags array for Rx 0cp. d1a6150ca6 net-zerocopy: Refactor skb frag fast-forward op. 5f7aadf03f net-zerocopy: Copy straggler unaligned data for TCP Rx. zerocopy. 8da80ec6d4 drm/nouveau: hdmigv100.c: fix corrupted HDMI Vendor InfoFrame aa31e3fda6 perf tests: Remove bash construct from record+zstd_comp_decomp.sh 2ada5c0877 perf bench futex: Fix memory leak of perf_cpu_map__new() 11589d3144 perf bpf: Avoid memory leak from perf_env__insert_btf() 5b2f2cbbc9 tracing/histogram: Do not copy the fixed-size char array field over the field size 1d61255327 blkcg: Remove extra blkcg_bio_issue_init dadcc935f4 perf/x86/vlbr: Add c->flags to vlbr event constraints 68fcb52b61 sched/core: Mitigate race cpus_share_cache()/update_top_cache_domain() 91191d47af mips: BCM63XX: ensure that CPU_SUPPORTS_32BIT_KERNEL is set fbe27d0e1d clk: qcom: gcc-msm8996: Drop (again) gcc_aggre1_pnoc_ahb_clk 9b3d3b72be clk/ast2600: Fix soc revision for AHB 03bc8ea0ae clk: ingenic: Fix bugs with divided dividers 7a5439474e f2fs: fix incorrect return value in f2fs_sanity_check_ckpt() 0a17fff6f0 f2fs: compress: disallow disabling compress on non-empty compressed file 4ce685cc9a sh: define __BIG_ENDIAN for math-emu 73383f670d sh: math-emu: drop unused functions f44defd569 sh: fix kconfig unmet dependency warning for FRAME_POINTER 3d7c5d08a4 f2fs: fix to use WHINT_MODE e8bd5e3305 f2fs: fix up f2fs_lookup tracepoints 5d5bf899e5 maple: fix wrong return value of maple_bus_init(). 8748f08a2f sh: check return code of request_irq 29b742690a powerpc/8xx: Fix Oops with STRICT_KERNEL_RWX without DEBUG_RODATA_TEST bc4bc07fb4 powerpc/dcr: Use cmplwi instead of 3-argument cmpli 1ac6cd87d8 ALSA: gus: fix null pointer dereference on pointer block 850416bead ARM: dts: qcom: fix memory and mdio nodes naming for RB3011 8c4d9764e7 powerpc/5200: dts: fix memory node unit name 833ad27927 iio: imu: st_lsm6dsx: Avoid potential array overflow in st_lsm6dsx_set_odr() e0fef1c8cd scsi: target: Fix alua_tg_pt_gps_count tracking 8176441373 scsi: target: Fix ordered tag handling 8440377e1a scsi: scsi_debug: Fix out-of-bound read in resp_report_tgtpgs() 3e20cb0726 scsi: scsi_debug: Fix out-of-bound read in resp_readcap16() 9635581aa9 MIPS: sni: Fix the build 77e9fed330 tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc da82a207c4 ALSA: ISA: not for M68K c788ac4750 ARM: dts: ls1021a-tsn: use generic "jedec,spi-nor" compatible for flash cbba09f869 ARM: dts: ls1021a: move thermal-zones node out of soc/ 2474eb7fc3 usb: host: ohci-tmio: check return value after calling platform_get_resource() 02d9ebe0cc ARM: dts: omap: fix gpmc,mux-add-data type c6c9bbe7fa firmware_loader: fix pre-allocated buf built-in firmware use 02a22911ed ALSA: intel-dsp-config: add quirk for APL/GLK/TGL devices based on ES8336 codec 055eced3ed scsi: advansys: Fix kernel pointer leak 97f3cbb57b ASoC: nau8824: Add DMI quirk mechanism for active-high jack-detect ae2207a078 clk: imx: imx6ul: Move csi_sel mux to correct base register 0c6daf4799 ASoC: SOF: Intel: hda-dai: fix potential locking issue 19d193c576 arm64: dts: freescale: fix arm,sp805 compatible string 36446a094a arm64: dts: qcom: ipq6018: Fix qcom,controlled-remotely property e52fecdd0c arm64: dts: qcom: msm8998: Fix CPU/L2 idle state latency and residency 568d94c5c9 ARM: BCM53016: Specify switch ports for Meraki MR32 3a53d9ad9b staging: rtl8723bs: remove possible deadlock when disconnect (v2) 3544c33879 ARM: dts: ux500: Skomer regulator fixes eff8b76284 usb: typec: tipd: Remove WARN_ON in tps6598x_block_read 679eee466d usb: musb: tusb6010: check return value after calling platform_get_resource() 2492de6f5e bus: ti-sysc: Use context lost quirk for otg 5eca1c8412 bus: ti-sysc: Add quirk handling for reinit on context lost dcd6eefcee RDMA/bnxt_re: Check if the vlan is valid before reporting 4e5bc9fb23 arm64: dts: hisilicon: fix arm,sp805 compatible string 109a63bb07 arm64: dts: rockchip: Disable CDN DP on Pinebook Pro c097bd5a59 scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq() db90c50783 ARM: dts: NSP: Fix mpcore, mmc node names 5010df76ab staging: wfx: ensure IRQ is ready before enabling it 2651d06e46 arm64: dts: allwinner: a100: Fix thermal zone node name fa98ac472e arm64: dts: allwinner: h5: Fix GPU thermal zone node name aed195558f ARM: dts: sunxi: Fix OPPs node name e2e1056312 arm64: zynqmp: Fix serial compatible string 48f154e8b9 arm64: zynqmp: Do not duplicate flash partition label property Some minor ABI signatures have changed due to internal structures changing. All of these have been pre-approved already: Leaf changes summary: 3 artifacts changed Changed leaf types summary: 3 leaf types changed Removed/Changed/Added functions summary: 0 Removed, 0 Changed, 0 Added function Removed/Changed/Added variables summary: 0 Removed, 0 Changed, 0 Added variable 'struct bpf_map at bpf.h:146:1' changed: type size hasn't changed there are data member changes: type 'typedef u64' of 'bpf_map::writecnt' changed: typedef name changed from u64 to atomic64_t at types.h:175:1 underlying type 'typedef __u64' at int-ll64.h:31:1 changed: entity changed from 'typedef __u64' to 'struct {s64 counter;}' at types.h:173:1 type size hasn't changed 4790 impacted interfaces 'struct bpf_offloaded_map at bpf.h:229:1' changed (indirectly): type size hasn't changed there are data member changes: type 'struct bpf_map' of 'bpf_offloaded_map::map' changed, as reported earlier 4790 impacted interfaces 'struct fib_rules_ops at fib_rules.h:60:1' changed: type size hasn't changed there are data member changes: type 'typedef bool (fib_rule*, fib_lookup_arg*)*' of 'fib_rules_ops::suppress' changed: pointer type changed from: 'typedef bool (fib_rule*, fib_lookup_arg*)*' to: 'typedef bool (fib_rule*, int, fib_lookup_arg*)*' 4790 impacted interfaces Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: Id7f25c9e0edb30698178b138cc1b15a82ca5ef48	2022-03-21 14:29:02 +01:00
Greg Kroah-Hartman	5287773dba	Merge 5.10.106 into android12-5.10-lts ... Changes in 5.10.106 ARM: boot: dts: bcm2711: Fix HVS register range clk: qcom: gdsc: Add support to update GDSC transition delay HID: vivaldi: fix sysfs attributes leak arm64: dts: armada-3720-turris-mox: Add missing ethernet0 alias tipc: fix kernel panic when enabling bearer mISDN: Remove obsolete PIPELINE_DEBUG debugging information mISDN: Fix memory leak in dsp_pipeline_build() virtio-blk: Don't use MAX_DISCARD_SEGMENTS if max_discard_seg is zero isdn: hfcpci: check the return value of dma_set_mask() in setup_hw() net: qlogic: check the return value of dma_alloc_coherent() in qed_vf_hw_prepare() esp: Fix BEET mode inter address family tunneling on GSO qed: return status of qed_iov_get_link drm/sun4i: mixer: Fix P010 and P210 format numbers net: dsa: mt7530: fix incorrect test in mt753x_phylink_validate() ARM: dts: aspeed: Fix AST2600 quad spi group i40e: stop disabling VFs due to PF error responses ice: stop disabling VFs due to PF error responses ice: Align macro names to the specification ice: Remove unnecessary checker loop ice: Rename a couple of variables ice: Fix curr_link_speed advertised speed ethernet: Fix error handling in xemaclite_of_probe tipc: fix incorrect order of state message data sanity check net: ethernet: ti: cpts: Handle error for clk_enable net: ethernet: lpc_eth: Handle error for clk_enable ax25: Fix NULL pointer dereference in ax25_kill_by_device net/mlx5: Fix size field in bufferx_reg struct net/mlx5: Fix a race on command flush flow net/mlx5e: Lag, Only handle events from highest priority multipath entry NFC: port100: fix use-after-free in port100_send_complete selftests: pmtu.sh: Kill tcpdump processes launched by subshell. gpio: ts4900: Do not set DAT and OE together gianfar: ethtool: Fix refcount leak in gfar_get_ts_info net: phy: DP83822: clear MISR2 register to disable interrupts sctp: fix kernel-infoleak for SCTP sockets net: bcmgenet: Don't claim WOL when its not available selftests/bpf: Add test for bpf_timer overwriting crash spi: rockchip: Fix error in getting num-cs property spi: rockchip: terminate dma transmission when slave abort net-sysfs: add check for netdevice being present to speed_show hwmon: (pmbus) Clear pmbus fault/warning bits after read gpio: Return EPROBE_DEFER if gc->to_irq is NULL Revert "xen-netback: remove 'hotplug-status' once it has served its purpose" Revert "xen-netback: Check for hotplug-status existence before watching" ipv6: prevent a possible race condition with lifetimes tracing: Ensure trace buffer is at least 4096 bytes large selftest/vm: fix map_fixed_noreplace test failure selftests/memfd: clean up mapping in mfd_fail_write ARM: Spectre-BHB: provide empty stub for non-config fuse: fix pipe buffer lifetime for direct_io staging: rtl8723bs: Fix access-point mode deadlock staging: gdm724x: fix use after free in gdm_lte_rx() net: macb: Fix lost RX packet wakeup race in NAPI receive mmc: meson: Fix usage of meson_mmc_post_req() riscv: Fix auipc+jalr relocation range checks arm64: dts: marvell: armada-37xx: Remap IO space to bus address 0x0 virtio: unexport virtio_finalize_features virtio: acknowledge all features before access watch_queue, pipe: Free watchqueue state after clearing pipe ring watch_queue: Fix to release page in ->release() watch_queue: Fix to always request a pow-of-2 pipe ring size watch_queue: Fix the alloc bitmap size to reflect notes allocated watch_queue: Free the alloc bitmap when the watch_queue is torn down watch_queue: Fix lack of barrier/sync/lock between post and read watch_queue: Make comment about setting ->defunct more accurate x86/boot: Fix memremap of setup_indirect structures x86/boot: Add setup_indirect support in early_memremap_is_setup_data() x86/traps: Mark do_int3() NOKPROBE_SYMBOL ext4: add check to prevent attempting to resize an fs with sparse_super2 ARM: fix Thumb2 regression with Spectre BHB watch_queue: Fix filter limit check Linux 5.10.106 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: Ic7943bdf8c771bff4a95fcf0585ec9c24057cb5b	2022-03-18 15:02:31 +01:00
David Howells	648895da69	watch_queue: Fix filter limit check ... commit c993ee0f9f81caf5767a50d1faeba39a0dc82af2 upstream. In watch_queue_set_filter(), there are a couple of places where we check that the filter type value does not exceed what the type_filter bitmap can hold. One place calculates the number of bits by: if (tf[i].type >= sizeof(wfilter->type_filter) * 8) which is fine, but the second does: if (tf[i].type >= sizeof(wfilter->type_filter) * BITS_PER_LONG) which is not. This can lead to a couple of out-of-bounds writes due to a too-large type: (1) __set_bit() on wfilter->type_filter (2) Writing more elements in wfilter->filters[] than we allocated. Fix this by just using the proper WATCH_TYPE__NR instead, which is the number of types we actually know about. The bug may cause an oops looking something like: BUG: KASAN: slab-out-of-bounds in watch_queue_set_filter+0x659/0x740 Write of size 4 at addr ffff88800d2c66bc by task watch_queue_oob/611 ... Call Trace: <TASK> dump_stack_lvl+0x45/0x59 print_address_description.constprop.0+0x1f/0x150 ... kasan_report.cold+0x7f/0x11b ... watch_queue_set_filter+0x659/0x740 ... __x64_sys_ioctl+0x127/0x190 do_syscall_64+0x43/0x90 entry_SYSCALL_64_after_hwframe+0x44/0xae Allocated by task 611: kasan_save_stack+0x1e/0x40 __kasan_kmalloc+0x81/0xa0 watch_queue_set_filter+0x23a/0x740 __x64_sys_ioctl+0x127/0x190 do_syscall_64+0x43/0x90 entry_SYSCALL_64_after_hwframe+0x44/0xae The buggy address belongs to the object at ffff88800d2c66a0 which belongs to the cache kmalloc-32 of size 32 The buggy address is located 28 bytes inside of 32-byte region [ffff88800d2c66a0, ffff88800d2c66c0) Fixes: c73be61ced ("pipe: Add general notification queue support") Reported-by: Jann Horn <jannh@google.com> Signed-off-by: David Howells <dhowells@redhat.com> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-03-16 14:16:03 +01:00
David Howells	24d268130e	watch_queue: Make comment about setting ->defunct more accurate ... commit 4edc0760412b0c4ecefc7e02cb855b310b122825 upstream. watch_queue_clear() has a comment stating that setting ->defunct to true preventing new additions as well as preventing notifications. Whilst the latter is true, the first bit is superfluous since at the time this function is called, the pipe cannot be accessed to add new event sources. Remove the "new additions" bit from the comment. Fixes: c73be61ced ("pipe: Add general notification queue support") Reported-by: Jann Horn <jannh@google.com> Signed-off-by: David Howells <dhowells@redhat.com> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-03-16 14:16:02 +01:00
David Howells	ec03510e0a	watch_queue: Fix lack of barrier/sync/lock between post and read ... commit 2ed147f015af2b48f41c6f0b6746aa9ea85c19f3 upstream. There's nothing to synchronise post_one_notification() versus pipe_read(). Whilst posting is done under pipe->rd_wait.lock, the reader only takes pipe->mutex which cannot bar notification posting as that may need to be made from contexts that cannot sleep. Fix this by setting pipe->head with a barrier in post_one_notification() and reading pipe->head with a barrier in pipe_read(). If that's not sufficient, the rd_wait.lock will need to be taken, possibly in a ->confirm() op so that it only applies to notifications. The lock would, however, have to be dropped before copy_page_to_iter() is invoked. Fixes: c73be61ced ("pipe: Add general notification queue support") Reported-by: Jann Horn <jannh@google.com> Signed-off-by: David Howells <dhowells@redhat.com> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-03-16 14:16:02 +01:00
David Howells	06ab844439	watch_queue: Free the alloc bitmap when the watch_queue is torn down ... commit 7ea1a0124b6da246b5bc8c66cddaafd36acf3ecb upstream. Free the watch_queue note allocation bitmap when the watch_queue is destroyed. Fixes: c73be61ced ("pipe: Add general notification queue support") Reported-by: Jann Horn <jannh@google.com> Signed-off-by: David Howells <dhowells@redhat.com> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-03-16 14:16:02 +01:00
David Howells	880acbb718	watch_queue: Fix the alloc bitmap size to reflect notes allocated ... commit 3b4c0371928c17af03e8397ac842346624017ce6 upstream. Currently, watch_queue_set_size() sets the number of notes available in wqueue->nr_notes according to the number of notes allocated, but sets the size of the bitmap to the unrounded number of notes originally asked for. Fix this by setting the bitmap size to the number of notes we're actually going to make available (ie. the number allocated). Fixes: c73be61ced ("pipe: Add general notification queue support") Reported-by: Jann Horn <jannh@google.com> Signed-off-by: David Howells <dhowells@redhat.com> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-03-16 14:16:02 +01:00
David Howells	e2b52ca498	watch_queue: Fix to always request a pow-of-2 pipe ring size ... commit 96a4d8912b28451cd62825fd7caa0e66e091d938 upstream. The pipe ring size must always be a power of 2 as the head and tail pointers are masked off by AND'ing with the size of the ring - 1. watch_queue_set_size(), however, lets you specify any number of notes between 1 and 511. This number is passed through to pipe_resize_ring() without checking/forcing its alignment. Fix this by rounding the number of slots required up to the nearest power of two. The request is meant to guarantee that at least that many notifications can be generated before the queue is full, so rounding down isn't an option, but, alternatively, it may be better to give an error if we aren't allowed to allocate that much ring space. Fixes: c73be61ced ("pipe: Add general notification queue support") Reported-by: Jann Horn <jannh@google.com> Signed-off-by: David Howells <dhowells@redhat.com> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-03-16 14:16:02 +01:00
David Howells	2039900aad	watch_queue: Fix to release page in ->release() ... commit c1853fbadcba1497f4907971e7107888e0714c81 upstream. When a pipe ring descriptor points to a notification message, the refcount on the backing page is incremented by the generic get function, but the release function, which marks the bitmap, doesn't drop the page ref. Fix this by calling generic_pipe_buf_release() at the end of watch_queue_pipe_buf_release(). Fixes: c73be61ced ("pipe: Add general notification queue support") Reported-by: Jann Horn <jannh@google.com> Signed-off-by: David Howells <dhowells@redhat.com> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-03-16 14:16:02 +01:00
Sven Schnelle	8d276f10e8	tracing: Ensure trace buffer is at least 4096 bytes large ... [ Upstream commit 7acf3a127bb7c65ff39099afd78960e77b2ca5de ] Booting the kernel with 'trace_buf_size=1' give a warning at boot during the ftrace selftests: [ 0.892809] Running postponed tracer tests: [ 0.892893] Testing tracer function: [ 0.901899] Callback from call_rcu_tasks_trace() invoked. [ 0.983829] Callback from call_rcu_tasks_rude() invoked. [ 1.072003] .. bad ring buffer .. corrupted trace buffer .. [ 1.091944] Callback from call_rcu_tasks() invoked. [ 1.097695] PASSED [ 1.097701] Testing dynamic ftrace: .. filter failed count=0 ..FAILED! [ 1.353474] ------------[ cut here ]------------ [ 1.353478] WARNING: CPU: 0 PID: 1 at kernel/trace/trace.c:1951 run_tracer_selftest+0x13c/0x1b0 Therefore enforce a minimum of 4096 bytes to make the selftest pass. Link: https://lkml.kernel.org/r/20220214134456.1751749-1-svens@linux.ibm.com Signed-off-by: Sven Schnelle <svens@linux.ibm.com> Signed-off-by: Steven Rostedt (Google) <rostedt@goodmis.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-03-16 14:16:00 +01:00