kernel_google_redbull

Evolution-X-Devices/kernel_google_redbull

Author	SHA1	Message	Date
Eric W. Biederman	809a07ebaf	UPSTREAM: umd: Track user space drivers with struct pid Use struct pid instead of user space pid values that are prone to wrap araound. In addition track the entire thread group instead of just the first thread that is started by exec. There are no multi-threaded user mode drivers today but there is nothing preclucing user drivers from being multi-threaded, so it is just a good idea to track the entire process. Take a reference count on the tgid's in question to make it possible to remove exit_umh in a future change. As a struct pid is available directly use kill_pid_info. The prior process signalling code was iffy in using a userspace pid known to be in the initial pid namespace and then looking up it's task in whatever the current pid namespace is. It worked only because kernel threads always run in the initial pid namespace. As the tgid is now refcounted verify the tgid is NULL at the start of fork_usermode_driver to avoid the possibility of silent pid leaks. v1: https://lkml.kernel.org/r/87mu4qdlv2.fsf_-_@x220.int.ebiederm.org v2: https://lkml.kernel.org/r/a70l4oy8.fsf_-_@x220.int.ebiederm.org Link: https://lkml.kernel.org/r/20200702164140.4468-12-ebiederm@xmission.com Reviewed-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Acked-by: Alexei Starovoitov <ast@kernel.org> Tested-by: Alexei Starovoitov <ast@kernel.org> Change-Id: Idbcdcb5839f427a3366903f9a332b97232d452c0 Signed-off-by: "Eric W. Biederman" <ebiederm@xmission.com>	2025-09-08 17:27:41 +03:00
Eric W. Biederman	0bba9b8d3d	UPSTREAM: umh: Separate the user mode driver and the user mode helper support This makes it clear which code is part of the core user mode helper support and which code is needed to implement user mode drivers. This makes the kernel smaller for everyone who does not use a usermode driver. v1: https://lkml.kernel.org/r/87tuyyf0ln.fsf_-_@x220.int.ebiederm.org v2: https://lkml.kernel.org/r/87imf963s6.fsf_-_@x220.int.ebiederm.org Link: https://lkml.kernel.org/r/20200702164140.4468-5-ebiederm@xmission.com Reviewed-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Acked-by: Alexei Starovoitov <ast@kernel.org> Tested-by: Alexei Starovoitov <ast@kernel.org> Change-Id: I8c6cccf3642dba08de38b3d8d4222575d5c624da Signed-off-by: "Eric W. Biederman" <ebiederm@xmission.com>	2025-09-08 17:27:40 +03:00
Taehee Yoo	f36b001021	UPSTREAM: umh: add exit routine for UMH process A UMH process which is created by the fork_usermode_blob() such as bpfilter needs to release members of the umh_info when process is terminated. But the do_exit() does not release members of the umh_info. hence module which uses UMH needs own code to detect whether UMH process is terminated or not. But this implementation needs extra code for checking the status of UMH process. it eventually makes the code more complex. The new PF_UMH flag is added and it is used to identify UMH processes. The exit_umh() does not release members of the umh_info. Hence umh_info->cleanup callback should release both members of the umh_info and the private data. Suggested-by: David S. Miller <davem@davemloft.net> Change-Id: I581d3b91cfa04cc763d8979688468248713449ad Signed-off-by: Taehee Yoo <ap420073@gmail.com> Signed-off-by: David S. Miller <davem@davemloft.net>	2025-09-08 17:27:40 +03:00
Michael Bestas	0d750eaafc	Merge tag 'ASB-2024-08-05_4.19-stable' of https://android.googlesource.com/kernel/common into android-msm-pixel-4.19 https://source.android.com/docs/security/bulletin/2024-08-01 CVE-2024-36971 * tag 'ASB-2024-08-05_4.19-stable' of https://android.googlesource.com/kernel/common: (2363 commits) Linux 4.19.318 i2c: rcar: bring hardware to known state when probing nilfs2: fix kernel bug on rename operation of broken directory SUNRPC: Fix RPC client cleaned up the freed pipefs dentries tcp: avoid too many retransmit packets tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() net: tcp: fix unexcepted socket die when snd_wnd is 0 tcp: refactor tcp_retransmit_timer() libceph: fix race between delayed_work() and ceph_monc_stop() hpet: Support 32-bit userspace USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor usb: gadget: configfs: Prevent OOB read/write in usb_string_copy() USB: Add USB_QUIRK_NO_SET_INTF quirk for START BP-850k USB: serial: option: add Rolling RW350-GL variants USB: serial: option: add Netprisma LCUK54 series modules USB: serial: option: add support for Foxconn T99W651 USB: serial: option: add Fibocom FM350-GL USB: serial: option: add Telit FN912 rmnet compositions USB: serial: option: add Telit generic core-dump composition ARM: davinci: Convert comma to semicolon ... Conflicts: Documentation/devicetree/bindings/sound/rt5645.txt android/abi_gki_aarch64.xml drivers/clk/qcom/clk-rcg2.c drivers/hwtracing/coresight/coresight-etm4x.c drivers/leds/leds-pwm.c drivers/mmc/core/host.c drivers/mmc/core/sdio.c drivers/mmc/host/cqhci.c drivers/net/ethernet/qualcomm/rmnet/rmnet_config.c drivers/rpmsg/qcom_glink_native.c drivers/scsi/ufs/ufshcd.c drivers/thermal/thermal_core.c drivers/usb/dwc3/core.c drivers/usb/gadget/function/f_ncm.c fs/f2fs/gc.c fs/pstore/ram_core.c include/linux/fs.h include/linux/timer.h include/net/tcp.h init/initramfs.c kernel/events/core.c kernel/sched/idle.c kernel/time/timer.c mm/page_alloc.c net/wireless/scan.c scripts/checkpatch.pl Change-Id: Ice08f3ba5dc64a093bc381710ef2408d963cb983	2024-09-06 02:00:44 +03:00
Greg Kroah-Hartman	82f9317bbb	Merge 4.19.318 into android-4.19-stable Changes in 4.19.318 asm-generic: Move common compat types to asm-generic/compat.h media: dvb: as102-fe: Fix as10x_register_addr packing media: dvb-usb: dib0700_devices: Add missing release_firmware() IB/core: Implement a limit on UMAD receive List drm/amd/display: Skip finding free audio for unknown engine_id media: dw2102: Don't translate i2c read into write sctp: prefer struct_size over open coded arithmetic firmware: dmi: Stop decoding on broken entry Input: ff-core - prefer struct_size over open coded arithmetic net: dsa: mv88e6xxx: Correct check for empty list media: dvb-frontends: tda18271c2dd: Remove casting during div media: s2255: Use refcount_t instead of atomic_t for num_channels media: dvb-frontends: tda10048: Fix integer overflow i2c: i801: Annotate apanel_addr as __ro_after_init powerpc/64: Set _IO_BASE to POISON_POINTER_DELTA not 0 for CONFIG_PCI=n orangefs: fix out-of-bounds fsid access powerpc/xmon: Check cpu id in commands "c#", "dp#" and "dx#" jffs2: Fix potential illegal address access in jffs2_free_inode s390/pkey: Wipe sensitive data on failure tcp: take care of compressed acks in tcp_add_reno_sack() tcp: tcp_mark_head_lost is only valid for sack-tcp tcp: add ece_ack flag to reno sack functions net: tcp better handling of reordering then loss cases UPSTREAM: tcp: fix DSACK undo in fast recovery to call tcp_try_to_open() tcp_metrics: validate source addr length bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() selftests: fix OOM in msg_zerocopy selftest selftests: make order checking verbose in msg_zerocopy selftest inet_diag: Initialize pad field in struct inet_diag_req_v2 nilfs2: fix inode number range checks nilfs2: add missing check for inode numbers on directory entries mm: optimize the redundant loop of mm_update_owner_next() Bluetooth: Fix incorrect pointer arithmatic in ext_adv_report_evt can: kvaser_usb: Explicitly initialize family in leafimx driver_info struct fsnotify: Do not generate events for O_PATH file descriptors Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes drm/amdgpu/atomfirmware: silence UBSAN warning bnx2x: Fix multiple UBSAN array-index-out-of-bounds media: dw2102: fix a potential buffer overflow i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr nilfs2: fix incorrect inode allocation from reserved inodes drm/i915: make find_fw_domain work on intel_uncore tcp: fix incorrect undo caused by DSACK of TLP retransmit net: lantiq_etop: add blank line after declaration net: ethernet: lantiq_etop: fix double free in detach ppp: reject claimed-as-LCP but actually malformed packets ARM: davinci: Convert comma to semicolon USB: serial: option: add Telit generic core-dump composition USB: serial: option: add Telit FN912 rmnet compositions USB: serial: option: add Fibocom FM350-GL USB: serial: option: add support for Foxconn T99W651 USB: serial: option: add Netprisma LCUK54 series modules USB: serial: option: add Rolling RW350-GL variants USB: Add USB_QUIRK_NO_SET_INTF quirk for START BP-850k usb: gadget: configfs: Prevent OOB read/write in usb_string_copy() USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor hpet: Support 32-bit userspace libceph: fix race between delayed_work() and ceph_monc_stop() tcp: refactor tcp_retransmit_timer() net: tcp: fix unexcepted socket die when snd_wnd is 0 tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() tcp: avoid too many retransmit packets SUNRPC: Fix RPC client cleaned up the freed pipefs dentries nilfs2: fix kernel bug on rename operation of broken directory i2c: rcar: bring hardware to known state when probing Linux 4.19.318 Change-Id: I6d2646a308c3f44976d00ee372e87568c3e40c23 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2024-07-19 13:17:59 +00:00
Jinliang Zheng	2890a7faf5	mm: optimize the redundant loop of mm_update_owner_next() commit cf3f9a593dab87a032d2b6a6fb205e7f3de4f0a1 upstream. When mm_update_owner_next() is racing with swapoff (try_to_unuse()) or /proc or ptrace or page migration (get_task_mm()), it is impossible to find an appropriate task_struct in the loop whose mm_struct is the same as the target mm_struct. If the above race condition is combined with the stress-ng-zombie and stress-ng-dup tests, such a long loop can easily cause a Hard Lockup in write_lock_irq() for tasklist_lock. Recognize this situation in advance and exit early. Link: https://lkml.kernel.org/r/20240620122123.3877432-1-alexjlzheng@tencent.com Signed-off-by: Jinliang Zheng <alexjlzheng@tencent.com> Acked-by: Michal Hocko <mhocko@suse.com> Cc: Christian Brauner <brauner@kernel.org> Cc: Jens Axboe <axboe@kernel.dk> Cc: Mateusz Guzik <mjguzik@gmail.com> Cc: Matthew Wilcox (Oracle) <willy@infradead.org> Cc: Oleg Nesterov <oleg@redhat.com> Cc: Tycho Andersen <tandersen@netflix.com> Cc: <stable@vger.kernel.org> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2024-07-18 11:39:35 +02:00
Wilson Sung	e3167a4609	Merge android-4.19-stable (4.19.294) into android-msm-pixel-4.19-lts Merge 4.19.294 into android-4.19-stable Linux 4.19.294 Revert "ARM: ep93xx: fix missing-prototype warnings" Revert "MIPS: Alchemy: fix dbdma2" Merge 4.19.293 into android-4.19-stable Linux 4.19.293 dma-buf/sw_sync: Avoid recursive lock during fence signal * clk: Fix undefined reference to `clk_rate_exclusive_{get,put}' include/linux/clk.h * scsi: core: raid_class: Remove raid_component_add() include/linux/raid_class.h scsi: snic: Fix double free in snic_tgt_create() irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable * rtnetlink: Reject negative ifindexes in RTM_NEWLINK net/core/rtnetlink.c * netfilter: nf_queue: fix socket leak net/netfilter/nf_queue.c * sched/rt: pick_next_rt_entity(): check list_entry kernel/sched/rt.c * mmc: block: Fix in_flight[issue_type] value error drivers/mmc/core/block.c x86/fpu: Set X86_FEATURE_OSXSAVE feature after enabling OSXSAVE in CR4 PCI: acpiphp: Use pci_assign_unassigned_bridge_resources() only for non-root bus media: vcodec: Fix potential array out-of-bounds in encoder queue_setup * lib/clz_ctz.c: Fix __clzdi2() and __ctzdi2() for 32-bit kernels lib/clz_ctz.c batman-adv: Fix batadv_v_ogm_aggr_send memory leak batman-adv: Fix TT global entry leak when client roamed back batman-adv: Do not get eth header before batadv_check_management_packet batman-adv: Don't increase MTU when set by user batman-adv: Trigger events for auto adjusted MTU nfsd: Fix race to FREE_STATEID and cl_revoked ibmveth: Use dcbf rather than dcbfl ipvs: fix racy memcpy in proc_do_sync_threshold ipvs: Improve robustness to the ipvs sysctl * bonding: fix macvlan over alb bond support drivers/net/bonding/bond_alb.c include/net/bonding.h * net: remove bond_slave_has_mac_rcu() include/net/bonding.h * net/sched: fix a qdisc modification with ambiguous command request net/sched/sch_api.c igb: Avoid starting unnecessary workqueues dccp: annotate data-races in dccp_poll() * sock: annotate data-races around prot->memory_pressure include/net/sock.h net/sctp/socket.c * tracing: Fix memleak due to race between current_tracer and trace kernel/trace/trace.c drm/amd/display: check TG is non-null before checking if enabled drm/amd/display: do not wait for mpc idle if tg is disabled * regmap: Account for register length in SMBus I/O limits drivers/base/regmap/regmap-i2c.c dm integrity: reduce vmalloc space footprint on 32-bit architectures dm integrity: increase RECALC_SECTORS to improve recalculate speed powerpc: Fail build if using recordmcount with binutils v2.37 powerpc: remove leftover code of old GCC version checks powerpc/32: add stack protector support fbdev: fix potential OOB read in fast_imageblit() fbdev: Fix sys_imageblit() for arbitrary image widths fbdev: Improve performance of sys_imageblit() tty: serial: fsl_lpuart: add earlycon for imx8ulp platform Revert "tty: serial: fsl_lpuart: drop earlycon entry for i.MX8QXP" MIPS: cpu-features: Use boot_cpu_type for CPU type based features MIPS: cpu-features: Enable octeon_cache by cpu_type fs: dlm: fix mismatch of plock results from userspace fs: dlm: use dlm_plock_info for do_unlock_close fs: dlm: change plock interrupted message to debug again fs: dlm: add pid to debug log dlm: replace usage of found with dedicated list iterator variable dlm: improve plock logging if interrupted PCI: acpiphp: Reassign resources on bridge if necessary net: phy: broadcom: stub c45 read/write for 54810 * net: xfrm: Amend XFRMA_SEC_CTX nla_policy structure net/xfrm/xfrm_user.c * net: fix the RTO timer retransmitting skb every 1ms if linear option is enabled net/ipv4/tcp_timer.c virtio-net: set queues after driver_ok * af_unix: Fix null-ptr-deref in unix_stream_sendpage(). net/unix/af_unix.c * netfilter: set default timeout to 3 secs for sctp shutdown send and recv state net/netfilter/nf_conntrack_proto_sctp.c test_firmware: prevent race conditions by a correct implementation of locking mmc: wbsd: fix double mmc_free_host() in wbsd_init() cifs: Release folio lock on fscache read hit. * ALSA: usb-audio: Add support for Mythware XA001AU capture and playback interfaces. sound/usb/quirks-table.h serial: 8250: Fix oops for port->pm on uart_change_pm() ASoC: meson: axg-tdm-formatter: fix channel slot allocation ASoC: rt5665: add missed regulator_bulk_disable * net: do not allow gso_size to be set to GSO_BY_FRAGS include/linux/virtio_net.h * sock: Fix misuse of sk_under_memory_pressure() include/net/sock.h net/core/sock.c i40e: fix misleading debug logs team: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves netfilter: nft_dynset: disallow object maps selftests: mirror_gre_changes: Tighten up the TTL test match * xfrm: add NULL check in xfrm_update_ae_params net/xfrm/xfrm_user.c * ip_vti: fix potential slab-use-after-free in decode_session6 net/ipv4/ip_vti.c * ip6_vti: fix slab-use-after-free in decode_session6 net/ipv6/ip6_vti.c * xfrm: fix slab-use-after-free in decode_session6 net/xfrm/xfrm_interface_core.c * xfrm: interface: rename xfrm_interface.c to xfrm_interface_core.c net/xfrm/Makefile * net: af_key: fix sadb_x_filter validation net/key/af_key.c * net: xfrm: Fix xfrm_address_filter OOB read net/xfrm/xfrm_user.c btrfs: fix BUG_ON condition in btrfs_cancel_balance powerpc/rtas_flash: allow user copy to flash block cache objects fbdev: mmp: fix value check in mmphw_probe() virtio-mmio: don't break lifecycle of vm_dev virtio-mmio: Use to_virtio_mmio_device() to simply code virtio-mmio: convert to devm_platform_ioremap_resource nfsd: Remove incorrect check in nfsd4_validate_stateid nfsd4: kill warnings on testing stateids with mismatched clientids block: fix signed int overflow in Amiga partition support mmc: sunxi: fix deferred probing mmc: bcm2835: fix deferred probing * mmc: Remove dev_err() usage after platform_get_irq() drivers/mmc/host/sdhci-msm.c mmc: tmio: move tmio_mmc_set_clock() to platform hook mmc: tmio: replace tmio_mmc_clk_stop() calls with tmio_mmc_set_clock() mmc: meson-gx: remove redundant mmc_request_done() call from irq context mmc: meson-gx: remove useless lock * USB: dwc3: qcom: fix NULL-deref on suspend drivers/usb/dwc3/dwc3-qcom.c * usb: dwc3: qcom: Add helper functions to enable,disable wake irqs drivers/usb/dwc3/dwc3-qcom.c irqchip/mips-gic: Use raw spinlock for gic_lock irqchip/mips-gic: Get rid of the reliance on irq_cpu_online() x86/topology: Fix erroneous smp_num_siblings on Intel Hybrid platforms powerpc/64s/radix: Fix soft dirty tracking powerpc: Move page table dump files in a dedicated subdirectory powerpc/mm: dump block address translation on book3s/32 powerpc/mm: dump segment registers on book3s/32 powerpc/mm: Move pgtable_t into platform headers powerpc/mm: move platform specific mmu-xxx.h in platform directories iio: addac: stx104: Fix race condition when converting analog-to-digital iio: addac: stx104: Fix race condition for stx104_write_raw() iio: adc: stx104: Implement and utilize register structures iio: adc: stx104: Utilize iomap interface * iio: add addac subdirectory drivers/iio/Kconfig drivers/iio/Makefile drivers/iio/addac/Kconfig drivers/iio/addac/Makefile * IMA: allow/fix UML builds security/integrity/ima/Kconfig drm/amdgpu: Fix potential fence use-after-free v2 * Bluetooth: L2CAP: Fix use-after-free net/bluetooth/l2cap_core.c pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db() gfs2: Fix possible data races in gfs2_show_options() media: platform: mediatek: vpu: fix NULL ptr dereference * media: v4l2-mem2mem: add lock to protect parameter num_rdy include/media/v4l2-mem2mem.h FS: JFS: Check for read-only mounted filesystem in txBegin FS: JFS: Fix null-ptr-deref Read in txBegin MIPS: dec: prom: Address -Warray-bounds warning fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev udf: Fix uninitialized array access for some pathnames * HID: add quirk for 03f0:464a HP Elite Presenter Mouse drivers/hid/hid-ids.h drivers/hid/hid-quirks.c * quota: fix warning in dqgrab() fs/quota/dquot.c * quota: Properly disable quotas when add_dquot_ref() fails fs/quota/dquot.c ALSA: emu10k1: roll up loops in DSP setup code for Audigy drm/radeon: Fix integer overflow in radeon_cs_parser_init selftests: forwarding: tc_flower: Relax success criterion * lib/mpi: Eliminate unused umul_ppmm definitions for MIPS lib/mpi/longlong.h Merge 4.19.292 into android-4.19-stable * Revert "posix-timers: Ensure timer ID search-loop limit is valid" include/linux/sched/signal.h kernel/time/posix-timers.c Merge 4.19.291 into android-4.19-stable Merge 4.19.290 into android-4.19-stable UPSTREAM: media: usb: siano: Fix warning due to null work_func_t function pointer * UPSTREAM: Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb net/bluetooth/l2cap_sock.c UPSTREAM: net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free * UPSTREAM: net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free net/sched/cls_u32.c Linux 4.19.292 * sch_netem: fix issues in netem_change() vs get_dist_table() net/sched/sch_netem.c alpha: remove __init annotation from exported page_is_ram() scsi: core: Fix possible memory leak if device_add() fails scsi: snic: Fix possible memory leak if device_add() fails scsi: 53c700: Check that command slot is not NULL scsi: storvsc: Fix handling of virtual Fibre Channel timeouts * scsi: core: Fix legacy /proc parsing buffer overflow drivers/scsi/scsi_proc.c * netfilter: nf_tables: report use refcount overflow include/net/netfilter/nf_tables.h * netfilter: nf_tables: bogus EBUSY when deleting flowtable after flush include/net/netfilter/nf_tables.h btrfs: don't stop integrity writeback too early ibmvnic: Handle DMA unmapping of login buffs in release functions * wifi: cfg80211: fix sband iftype data lookup for AP_VLAN include/net/cfg80211.h IB/hfi1: Fix possible panic during hotplug remove * drivers: net: prevent tun_build_skb() to exceed the packet size limit drivers/net/tun.c dccp: fix data-race around dp->dccps_mss_cache * bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves drivers/net/bonding/bond_main.c * net/packet: annotate data-races around tp->status net/packet/af_packet.c mISDN: Update parameter type of dsp_cmx_send() drm/nouveau/disp: Revert a NULL check inside nouveau_connector_get_modes x86: Move gds_ucode_mitigated() declaration to header x86/mm: Fix VDSO and VVAR placement on 5-level paging machines x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405 * usb: dwc3: Properly handle processing of pending events drivers/usb/dwc3/gadget.c usb-storage: alauda: Fix uninit-value in alauda_check_media() * binder: fix memory leak in binder_init() drivers/android/binder.c drivers/android/binder_alloc.c drivers/android/binder_alloc.h iio: cros_ec: Fix the allocation size for cros_ec_command nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput radix tree test suite: fix incorrect allocation size for pthreads drm/nouveau/gr: enable memory loads on helper invocation on all channels dmaengine: pl330: Return DMA_PAUSED when transaction is paused * ipv6: adjust ndisc_is_useropt() to also return true for PIO net/ipv6/ndisc.c mmc: moxart: read scr register without changing byte order sparc: fix up arch_cpu_finalize_init() build breakage. * UPSTREAM: net/sched: cls_fw: Fix improper refcount update leads to use-after-free net/sched/cls_fw.c Linux 4.19.291 * drm/edid: fix objtool warning in drm_cvt_modes() drivers/gpu/drm/drm_edid.c arm64: dts: stratix10: fix incorrect I2C property for SCL signal * drivers core: Use sysfs_emit and sysfs_emit_at for show(device ...) functions drivers/base/arch_topology.c drivers/base/cacheinfo.c drivers/base/core.c drivers/base/cpu.c drivers/base/firmware_loader/fallback.c drivers/base/platform.c drivers/base/power/sysfs.c drivers/base/soc.c ARM: dts: nxp/imx6sll: fix wrong property name in usbphy node ARM: dts: imx6sll: fixup of operating points ARM: dts: imx: add usb alias ARM: dts: imx6sll: Make ssi node name same as other platforms PM: sleep: wakeirq: fix wake irq arming drivers/base/power/power.h drivers/base/power/wakeirq.c * PM / wakeirq: support enabling wake-up irq after runtime_suspend called drivers/base/power/power.h drivers/base/power/runtime.c drivers/base/power/wakeirq.c include/linux/pm_wakeirq.h powerpc/mm/altmap: Fix altmap boundary check mtd: rawnand: omap_elm: Fix incorrect type in assignment test_firmware: return ENOMEM instead of ENOSPC on failed memory allocation test_firmware: fix a memory leak with reqs buffer ext2: Drop fragment support * net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb drivers/net/usb/usbnet.c * Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb net/bluetooth/l2cap_sock.c fs/sysv: Null check to prevent null-ptr-deref bug * USB: zaurus: Add ID for A-300/B-500/C-700 drivers/net/usb/cdc_ether.c drivers/net/usb/zaurus.c libceph: fix potential hang in ceph_osdc_notify() scsi: zfcp: Defer fc_rport blocking until after ADISC response * tcp_metrics: fix data-race in tcpm_suck_dst() vs fastopen net/ipv4/tcp_metrics.c * tcp_metrics: annotate data-races around tm->tcpm_net net/ipv4/tcp_metrics.c * tcp_metrics: annotate data-races around tm->tcpm_vals[] net/ipv4/tcp_metrics.c * tcp_metrics: annotate data-races around tm->tcpm_lock net/ipv4/tcp_metrics.c * tcp_metrics: annotate data-races around tm->tcpm_stamp net/ipv4/tcp_metrics.c * tcp_metrics: fix addr_same() helper net/ipv4/tcp_metrics.c ip6mr: Fix skb_under_panic in ip6mr_cache_report() net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free * net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free net/sched/cls_u32.c * net: add missing data-race annotation for sk_ll_usec net/core/sock.c * net: add missing data-race annotations around sk->sk_peek_off net/core/sock.c net/unix/af_unix.c * net: sched: cls_u32: Fix match key mis-addressing net/sched/cls_u32.c perf test uprobe_from_different_cu: Skip if there is no gcc net/mlx5e: fix return value check in mlx5e_ipsec_remove_trailer() KVM: s390: fix sthyi error handling * word-at-a-time: use the same return type for has_zero regardless of endianness include/asm-generic/word-at-a-time.h * loop: Select I/O scheduler 'none' from inside add_disk() drivers/block/loop.c * perf: Fix function pointer case kernel/events/core.c * net/sched: cls_u32: Fix reference counter leak leading to overflow net/sched/cls_u32.c ASoC: cs42l51: fix driver to properly autoload with automatic module loading net/sched: sch_qfq: account for stab overhead in qfq_enqueue * net/sched: cls_fw: Fix improper refcount update leads to use-after-free net/sched/cls_fw.c drm/client: Fix memory leak in drm_client_target_cloned dm cache policy smq: ensure IO doesn't prevent cleaner policy progress ASoC: wm8904: Fill the cache for WM8904_ADC_TEST_0 register s390/dasd: fix hanging device after quiesce/resume virtio-net: fix race between set queues and probe serial: 8250_dw: Preserve original value of DLF register * serial: 8250_dw: split Synopsys DesignWare 8250 common functions drivers/tty/serial/8250/Kconfig irq-bcm6345-l1: Do not assume a fixed block to cpu mapping tpm_tis: Explicitly check for error code btrfs: check for commit error at btrfs_attach_transaction_barrier() hwmon: (nct7802) Fix for temp6 (PECI1) processed even if PECI1 disabled staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext() Documentation: security-bugs.rst: clarify CVE handling Documentation: security-bugs.rst: update preferences when dealing with the linux-distros group usb: xhci-mtk: set the dma max_seg_size * USB: quirks: add quirk for Focusrite Scarlett drivers/usb/core/quirks.c usb: ohci-at91: Fix the unhandle interrupt when resume * usb: dwc3: don't reset device side if dwc3 was configured as host-only drivers/usb/dwc3/core.c usb: dwc3: pci: skip BYT GPIO lookup table for hardwired phy * Revert "usb: dwc3: core: Enable AutoRetry feature in the controller" drivers/usb/dwc3/core.c drivers/usb/dwc3/core.h can: gs_usb: gs_can_close(): add missing set of CAN state to CAN_STATE_STOPPED USB: serial: simple: sort driver entries USB: serial: simple: add Kaufmann RKS+CAN VCP USB: serial: option: add Quectel EC200A module support USB: serial: option: support Quectel EM060K_128 * tracing: Fix warning in trace_buffered_event_disable() kernel/trace/trace_events.c * ring-buffer: Fix wrong stat of cpu_buffer->read kernel/trace/ring_buffer.c ata: pata_ns87415: mark ns87560_tf_read static dm raid: fix missing reconfig_mutex unlock in raid_ctr() error paths * block: Fix a source code comment in include/uapi/linux/blkzoned.h include/uapi/linux/blkzoned.h ASoC: fsl_spdif: Silence output on stop drm/msm: Fix IS_ERR_OR_NULL() vs NULL check in a5xx_submit_in_rb() RDMA/mlx4: Make check for invalid flags stricter benet: fix return value check in be_lancer_xmit_workarounds() net/sched: mqprio: Add length check for TCA_MQPRIO_{MAX/MIN}_RATE64 net/sched: mqprio: add extack to mqprio_parse_nlattr() net/sched: mqprio: refactor nlattr parsing to a separate function platform/x86: msi-laptop: Fix rfkill out-of-sync on MSI Wind U100 team: reset team's flags when down link is P2P device * bonding: reset bond's flags when down link is P2P device drivers/net/bonding/bond_main.c * tcp: Reduce chance of collisions in inet6_hashfn(). include/net/ipv6.h * ipv6 addrconf: fix bug where deleting a mngtmpaddr can create a new temporary address net/ipv6/addrconf.c ethernet: atheros: fix return value check in atl1e_tso_csum() phy: hisilicon: Fix an out of bounds check in hisi_inno_phy_probe() i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir() * ext4: fix to check return value of freeze_bdev() in ext4_shutdown() fs/ext4/ioctl.c scsi: qla2xxx: Array index may go out of bound scsi: qla2xxx: Fix inconsistent format argument type in qla_os.c ftrace: Fix possible warning on checking all pages used in ftrace_process_locs() ftrace: Store the order of pages allocated in ftrace_page ftrace: Check if pages were allocated before calling free_pages() * ftrace: Add information on number of page groups allocated kernel/trace/trace.c kernel/trace/trace.h fs: dlm: interrupt posix locks only when process is killed dlm: rearrange async condition return dlm: cleanup plock_op vs plock_xop PCI/ASPM: Avoid link retraining race PCI/ASPM: Factor out pcie_wait_for_retrain() PCI/ASPM: Return 0 or -ETIMEDOUT from pcie_retrain_link() PCI: Rework pcie_retrain_link() wait loop * ext4: Fix reusing stale buffer heads from last failed mounting fs/ext4/super.c * ext4: rename journal_dev to s_journal_dev inside ext4_sb_info fs/ext4/ext4.h fs/ext4/fsmap.c fs/ext4/super.c btrfs: fix extent buffer leak after tree mod log failure at split_node() bcache: Fix __bch_btree_node_alloc to make the failure behavior consistent bcache: remove 'int n' from parameter list of bch_bucket_alloc_set() bcache: use MAX_CACHES_PER_SET instead of magic number 8 in __bch_bucket_alloc_set gpio: tps68470: Make tps68470_gpio_output() always set the initial value tracing/histograms: Return an error if we fail to add histogram to hist_vars list * tcp: annotate data-races around fastopenq.max_qlen include/linux/tcp.h net/ipv4/tcp.c net/ipv4/tcp_fastopen.c * tcp: annotate data-races around tp->notsent_lowat include/net/tcp.h net/ipv4/tcp.c * tcp: annotate data-races around rskq_defer_accept net/ipv4/tcp.c * tcp: annotate data-races around tp->linger2 net/ipv4/tcp.c * net: Replace the limit of TCP_LINGER2 with TCP_FIN_TIMEOUT_MAX include/net/tcp.h net/ipv4/tcp.c netfilter: nf_tables: can't schedule in nft_chain_validate netfilter: nf_tables: fix spurious set element insertion failure * llc: Don't drop packet from non-root netns. net/llc/llc_input.c fbdev: au1200fb: Fix missing IRQ check in au1200fb_drv_probe * Revert "tcp: avoid the lookup process failing to get sk in ehash table" net/ipv4/inet_hashtables.c net/ipv4/inet_timewait_sock.c net:ipv6: check return value of pskb_trim() net: ethernet: ti: cpsw_ale: Fix cpsw_ale_get_field()/cpsw_ale_set_field() pinctrl: amd: Use amd_pinconf_set() for all config options fbdev: imxfb: warn about invalid left/right margin spi: bcm63xx: fix max prepend length igb: Fix igb_down hung on surprise removal wifi: iwlwifi: mvm: avoid baid size integer overflow * wifi: wext-core: Fix -Wstringop-overflow warning in ioctl_standard_iw_point() net/wireless/wext-core.c * bpf: Address KCSAN report on bpf_lru_list kernel/bpf/bpf_lru_list.c kernel/bpf/bpf_lru_list.h * sched/fair: Don't balance task to its current running CPU kernel/sched/fair.c * posix-timers: Ensure timer ID search-loop limit is valid include/linux/sched/signal.h kernel/time/posix-timers.c md/raid10: prevent soft lockup while flush writes md: fix data corruption for raid456 when reshape restart while grow up nbd: Add the maximum limit of allocated index in nbd_dev_add debugobjects: Recheck debug_objects_enabled before reporting * ext4: correct inline offset when handling xattrs in inode body fs/ext4/xattr.c can: bcm: Fix UAF in bcm_proc_show() * fuse: revalidate: don't invalidate if interrupted fs/fuse/dir.c perf probe: Add test for regression introduced by switch to die_get_decl_file() tracing/histograms: Add histograms to hist_vars if they have referenced variables * drm/atomic: Fix potential use-after-free in nonblocking commits drivers/gpu/drm/drm_atomic.c scsi: qla2xxx: Pointer may be dereferenced scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport() scsi: qla2xxx: Fix potential NULL pointer dereference scsi: qla2xxx: Wait for io return on terminate rport xtensa: ISS: fix call to split_if_spec * ring-buffer: Fix deadloop issue on reading trace_pipe kernel/trace/ring_buffer.c tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() when iterating clk tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() in case of error * Revert "8250: add support for ASIX devices with a FIFO bug" include/linux/serial_8250.h meson saradc: fix clock divider mask length ceph: don't let check_caps skip sending responses for revoke msgs hwrng: imx-rngc - fix the timeout for init and self check serial: atmel: don't enable IRQs prematurely fs: dlm: return positive pid value for F_GETLK md/raid0: add discard support for the 'original' layout misc: pci_endpoint_test: Re-init completion for every test misc: pci_endpoint_test: Free IRQs before removing the device PCI: rockchip: Use u32 variable to access 32-bit registers PCI: rockchip: Fix legacy IRQ generation for RK3399 PCIe endpoint core PCI: rockchip: Add poll and timeout to wait for PHY PLLs to be locked PCI: rockchip: Write PCI Device ID to correct register PCI: rockchip: Assert PCI Configuration Enable bit after probe PCI: qcom: Disable write access to read only registers for IP v2.3.3 * PCI: Add function 1 DMA alias quirk for Marvell 88SE9235 drivers/pci/quirks.c * PCI/PM: Avoid putting EloPOS E2/S2/H2 PCIe Ports in D3cold drivers/pci/pci.c jfs: jfs_dmap: Validate db_l2nbperpage while mounting * ext4: only update i_reserved_data_blocks on successful block allocation fs/ext4/indirect.c fs/ext4/inode.c * ext4: fix wrong unit use in ext4_mb_clear_bb fs/ext4/mballoc.c perf intel-pt: Fix CYC timestamps after standalone CBR SUNRPC: Fix UAF in svc_tcp_listen_data_ready() net: bcmgenet: Ensure MDIO unregistration has clocks enabled tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation pinctrl: amd: Only use special debounce behavior for GPIO 0 pinctrl: amd: Detect internal GPIO0 debounce handling pinctrl: amd: Fix mistake in handling clearing pins at startup * net/sched: make psched_mtu() RTNL-less safe include/net/pkt_sched.h wifi: airo: avoid uninitialized warning in airo_get_rate() * ipv6/addrconf: fix a potential refcount underflow for idev net/ipv6/addrconf.c NTB: ntb_tool: Add check for devm_kcalloc NTB: ntb_transport: fix possible memory leak while device_register() fails ntb: intel: Fix error handling in intel_ntb_pci_driver_init() NTB: amd: Fix error handling in amd_ntb_pci_driver_init() ntb: idt: Fix error handling in idt_pci_driver_init() * udp6: fix udp6_ehashfn() typo net/ipv6/udp.c * icmp6: Fix null-ptr-deref of ip6_null_entry->rt6i_idev in icmp6_dev(). net/ipv6/icmp.c * vrf: Increment Icmp6InMsgs on the original netdev include/net/addrconf.h net/ipv6/icmp.c net/ipv6/reassembly.c net: mvneta: fix txq_map in case of txq_number==1 * workqueue: clean up WORK_* constant types, clarify masking include/linux/workqueue.h kernel/workqueue.c net: lan743x: Don't sleep in atomic context netfilter: nf_tables: prevent OOB access in nft_byteorder_eval * netfilter: conntrack: Avoid nf_ct_helper_hash uses after free net/netfilter/nf_conntrack_helper.c netfilter: nf_tables: fix scheduling-while-atomic splat netfilter: nf_tables: unbind non-anonymous set if rule construction fails * netfilter: nf_tables: reject unbound anonymous set before commit phase include/net/netfilter/nf_tables.h * netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain include/net/netfilter/nf_tables.h netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE * netfilter: nf_tables: use net_generic infra for transaction data include/net/netfilter/nf_tables.h include/net/netns/nftables.h * netfilter: add helper function to set up the nfnetlink header and use it include/linux/netfilter/nfnetlink.h net/netfilter/nf_conntrack_netlink.c net/netfilter/nfnetlink_log.c net/netfilter/nfnetlink_queue.c netfilter: nftables: add helper function to set the base sequence number netfilter: nf_tables: add rescheduling points during loop detection walks netfilter: nf_tables: fix nat hook table deletion spi: spi-fsl-spi: allow changing bits_per_word while CS is still active spi: spi-fsl-spi: relax message sanity checking a little spi: spi-fsl-spi: remove always-true conditional in fsl_spi_do_one_msg ARM: orion5x: fix d2net gpio initialization btrfs: fix race when deleting quota root from the dirty cow roots list jffs2: reduce stack usage in jffs2_build_xattr_subsystem() * integrity: Fix possible multiple allocation in integrity_inode_get() security/integrity/iint.c bcache: Remove unnecessary NULL point check in node allocations mmc: core: disable TRIM on Micron MTFC4GACAJCN-1M mmc: core: disable TRIM on Kingston EMMC04G-M627 NFSD: add encoding of op_recall flag for write delegation * ALSA: jack: Fix mutex call in snd_jack_report() sound/core/jack.c i2c: xiic: Don't try to handle more interrupt events after error i2c: xiic: Defer xiic_wakeup() and __xiic_start_xfer() in xiic_process() sh: dma: Fix DMA channel offset calculation net/sched: act_pedit: Add size check for TCA_PEDIT_PARMS_EX * tcp: annotate data races in __tcp_oow_rate_limited() net/ipv4/tcp_input.c * net: bridge: keep ports without IFF_UNICAST_FLT in BR_PROMISC mode net/bridge/br_if.c powerpc: allow PPC_EARLY_DEBUG_CPM only when SERIAL_CPM=y * f2fs: fix error path handling in truncate_dnode() fs/f2fs/node.c mailbox: ti-msgmgr: Fill non-message tx data fields with 0x0 spi: bcm-qspi: return error if neither hif_mspi nor mspi is available Add MODULE_FIRMWARE() for FIRMWARE_TG357766. * sctp: fix potential deadlock on &net->sctp.addr_wq_lock net/sctp/socket.c rtc: st-lpc: Release some resources in st_rtc_probe() in case of error mfd: stmpe: Only disable the regulators if they are enabled mfd: intel-lpss: Add missing check for platform_get_resource KVM: s390: fix KVM_S390_GET_CMMA_BITS for GFNs in memslot holes mfd: rt5033: Drop rt5033-battery sub-device usb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe() * extcon: Fix kernel doc of property capability fields to avoid warnings drivers/extcon/extcon.c * extcon: Fix kernel doc of property fields to avoid warnings drivers/extcon/extcon.c media: usb: siano: Fix warning due to null work_func_t function pointer * media: videodev2.h: Fix struct v4l2_input tuner index comment include/uapi/linux/videodev2.h media: usb: Check az6007_read() return value sh: j2: Use ioremap() to translate device tree address into kernel memory w1: fix loop in w1_fini() * block: change all __u32 annotations to __be32 in affs_hardblocks.h include/uapi/linux/affs_hardblocks.h USB: serial: option: add LARA-R6 01B PIDs ARC: define ASM_NL and __ALIGN(_STR) outside #ifdef __ASSEMBLY__ guard ARCv2: entry: rewrite to enable use of double load/stores LDD/STD ARCv2: entry: avoid a branch ARCv2: entry: push out the Z flag unclobber from common EXCEPTION_PROLOGUE ARCv2: entry: comments about hardware auto-save on taken interrupts * modpost: fix section mismatch message for R_ARM_{PC24,CALL,JUMP24} scripts/mod/modpost.c * modpost: fix section mismatch message for R_ARM_ABS32 scripts/mod/modpost.c crypto: nx - fix build warnings when DEBUG_FS is not enabled hwrng: virtio - Fix race on data_avail and actual data hwrng: virtio - always add a pending request hwrng: virtio - don't waste entropy hwrng: virtio - don't wait on cleanup hwrng: virtio - add an internal buffer pinctrl: at91-pio4: check return value of devm_kasprintf() perf dwarf-aux: Fix off-by-one in die_get_varname() pinctrl: cherryview: Return correct value if pin in push-pull mode * PCI: Add pci_clear_master() stub for non-CONFIG_PCI include/linux/pci.h scsi: 3w-xxxx: Add error handling for initialization failure in tw_probe() ALSA: ac97: Fix possible NULL dereference in snd_ac97_mixer drm/radeon: fix possible division-by-zero errors fbdev: omapfb: lcd_mipid: Fix an error handling path in mipid_spi_probe() arm64: dts: renesas: ulcb-kf: Remove flow control for SCIF1 IB/hfi1: Fix sdma.h tx->num_descs off-by-one errors * soc/fsl/qe: fix usb.c build errors drivers/soc/fsl/qe/Kconfig ASoC: es8316: Increment max value for ALC Capture Target Volume control ARM: ep93xx: fix missing-prototype warnings drm/panel: simple: fix active size for Ampire AM-480272H3TMQW-T01H Input: adxl34x - do not hardcode interrupt trigger type ARM: dts: BCM5301X: Drop "clock-names" from the SPI node Input: drv260x - sleep between polling GO bit radeon: avoid double free in ci_dpm_init() * netlink: Add __sock_i_ino() for __netlink_diag_dump(). include/net/sock.h net/core/sock.c ipvlan: Fix return value of ipvlan_queue_xmit() netfilter: nf_conntrack_sip: fix the ct_sip_parse_numerical_param() return value. * lib/ts_bm: reset initial match offset for every block of text lib/ts_bm.c gtp: Fix use-after-free in __gtp_encap_destroy(). * netlink: do not hard code device address lenth in fdb dumps net/core/rtnetlink.c * netlink: fix potential deadlock in netlink_set_err() net/netlink/af_netlink.c wifi: ath9k: convert msecs to jiffies where needed wifi: ath9k: Fix possible stall on ath9k_txq_list_has_key() memstick r592: make memstick_debug_get_tpc_name() static kexec: fix a memory leak in crash_shrink_memory() watchdog/perf: more properly prevent false positives with turbo modes * watchdog/perf: define dummy watchdog_update_hrtimer_threshold() on correct config include/linux/nmi.h wifi: rsi: Do not set MMC_PM_KEEP_POWER in shutdown wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes wifi: ray_cs: Fix an error handling path in ray_probe() wifi: ray_cs: Drop useless status variable in parse_addr() wifi: ray_cs: Utilize strnlen() in parse_addr() wifi: wl3501_cs: Fix an error handling path in wl3501_probe() wl3501_cs: use eth_hw_addr_set() * net: create netdev->dev_addr assignment helpers include/linux/etherdevice.h include/linux/netdevice.h wl3501_cs: Fix misspelling and provide missing documentation wl3501_cs: Remove unnecessary NULL check wl3501_cs: Fix a bunch of formatting issues related to function docs wifi: atmel: Fix an error handling path in atmel_probe() wifi: orinoco: Fix an error handling path in orinoco_cs_probe() wifi: orinoco: Fix an error handling path in spectrum_cs_probe() nfc: llcp: fix possible use of uninitialized variable in nfc_llcp_send_connect() * nfc: constify several pointers to u8, char and sk_buff include/net/nfc/nfc.h wifi: mwifiex: Fix the size of a memory allocation in mwifiex_ret_802_11_scan() samples/bpf: Fix buffer overflow in tcp_basertt wifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx wifi: ath9k: fix AR9003 mac hardware hang check register offset calculation evm: Complete description of evm_inode_setattr() ARM: 9303/1: kprobes: avoid missing-declaration warnings * PM: domains: fix integer overflow issues in genpd_parse_state() drivers/base/power/domain.c clocksource/drivers/cadence-ttc: Fix memory leak in ttc_timer_probe clocksource/drivers/cadence-ttc: Use ttc driver as platform driver * clocksource/drivers: Unify the names to timer-* format drivers/clocksource/Makefile irqchip/jcore-aic: Fix missing allocation of IRQ descriptors irqchip/jcore-aic: Kill use of irq_create_strict_mappings() md/raid10: fix io loss while replacement replace rdev md/raid10: fix wrong setting of max_corr_read_errors md/raid10: fix overflow of md/safe_mode_delay md/raid10: check slab-out-of-bounds in md_bitmap_get_counter * treewide: Remove uninitialized_var() usage drivers/clk/clk-gate.c drivers/gpu/drm/drm_edid.c drivers/md/dm-io.c drivers/md/dm-ioctl.c drivers/md/dm-snap-persistent.c drivers/md/dm-table.c fs/fat/dir.c fs/fuse/control.c fs/fuse/file.c fs/overlayfs/copy_up.c kernel/async.c kernel/audit.c kernel/events/core.c kernel/events/uprobes.c kernel/exit.c kernel/futex.c kernel/trace/ring_buffer.c lib/radix-tree.c mm/memcontrol.c mm/percpu.c mm/slub.c mm/swap.c net/ipv4/netfilter/nf_socket_ipv4.c net/ipv6/ip6_flowlabel.c net/ipv6/netfilter/nf_socket_ipv6.c net/netfilter/nf_conntrack_ftp.c net/netfilter/nfnetlink_log.c net/netfilter/nfnetlink_queue.c net/sched/cls_flow.c sound/core/control_compat.c sound/usb/endpoint.c drm/amdgpu: Validate VM ioctl flags. scripts/tags.sh: Resolve gtags empty index generation * drm/edid: Fix uninitialized variable in drm_cvt_modes() drivers/gpu/drm/drm_edid.c fbdev: imsttfb: Fix use after free bug in imsttfb_probe video: imsttfb: check for ioremap() failures x86/smp: Use dedicated cache-line for mwait_play_dead() gfs2: Don't deref jdesc in evict Linux 4.19.290 x86: fix backwards merge of GDS/SRSO bit xen/netback: Fix buffer overrun triggered by unusual packet Documentation/x86: Fix backwards on/off logic about YMM support x86/xen: Fix secondary processors' FPU initialization KVM: Add GDS_NO support to KVM x86/speculation: Add Kconfig option for GDS x86/speculation: Add force option to GDS mitigation * x86/speculation: Add Gather Data Sampling mitigation drivers/base/cpu.c x86/fpu: Move FPU initialization into arch_cpu_finalize_init() x86/fpu: Mark init functions __init x86/fpu: Remove cpuinfo argument from init functions * init, x86: Move mem_encrypt_init() into arch_cpu_finalize_init() init/main.c * init: Invoke arch_cpu_finalize_init() earlier init/main.c * init: Remove check_bugs() leftovers init/main.c um/cpu: Switch to arch_cpu_finalize_init() sparc/cpu: Switch to arch_cpu_finalize_init() sh/cpu: Switch to arch_cpu_finalize_init() mips/cpu: Switch to arch_cpu_finalize_init() m68k/cpu: Switch to arch_cpu_finalize_init() ia64/cpu: Switch to arch_cpu_finalize_init() ARM: cpu: Switch to arch_cpu_finalize_init() x86/cpu: Switch to arch_cpu_finalize_init() * init: Provide arch_cpu_finalize_init() arch/Kconfig include/linux/cpu.h init/main.c Merge 4.19.289 into android-4.19-stable Linux 4.19.289 x86/cpu/amd: Add a Zenbleed fix x86/cpu/amd: Move the errata checking functionality up x86/microcode/AMD: Load late on both threads too Merge 4.19.288 into android-4.19-stable Linux 4.19.288 i2c: imx-lpi2c: fix type char overflow issue when calculating the clock cycle x86/apic: Fix kernel panic when booting with intremap=off and x2apic_phys drm/radeon: fix race condition UAF in radeon_gem_set_domain_ioctl drm/exynos: fix race condition UAF in exynos_g2d_exec_ioctl drm/exynos: vidi: fix a wrong error return ASoC: nau8824: Add quirk to active-high jack-detect s390/cio: unregister device when the only path is gone usb: gadget: udc: fix NULL dereference in remove() nfcsim.c: Fix error checking for debugfs_create_dir media: cec: core: don't set last_initiator if tx in progress * arm64: Add missing Set/Way CMO encodings arch/arm64/include/asm/sysreg.h * HID: wacom: Add error check to wacom_parse_and_register() drivers/hid/wacom_sys.c scsi: target: iscsi: Prevent login threads from racing between each other * sch_netem: acquire qdisc lock in netem_change() net/sched/sch_netem.c netfilter: nfnetlink_osf: fix module autoload netfilter: nf_tables: disallow element updates of bound anonymous sets be2net: Extend xmit workaround to BE3 chip mmc: usdhi60rol0: fix deferred probing mmc: sdhci-acpi: fix deferred probing mmc: omap_hsmmc: fix deferred probing mmc: omap: fix deferred probing mmc: mvsdio: fix deferred probing mmc: mvsdio: convert to devm_platform_ioremap_resource mmc: mtk-sd: fix deferred probing net: qca_spi: Avoid high load if QCA7000 is not available xfrm: Linearize the skb after offloading if needed. ieee802154: hwsim: Fix possible memory leaks * rcu: Upgrade rcu_swap_protected() to rcu_replace_pointer() include/linux/rcupdate.h nilfs2: prevent general protection fault in nilfs_clear_dirty_page() * cgroup: Do not corrupt task iteration when rebinding subsystem kernel/cgroup/cgroup.c PCI: hv: Fix a race condition bug in hv_pci_query_relations() Drivers: hv: vmbus: Fix vmbus_wait_for_unload() to scan present CPUs nilfs2: fix buffer corruption due to concurrent device reads ipmi: move message error checking to avoid deadlock * ipmi: Make the smi watcher be disabled immediately when not needed include/linux/ipmi_smi.h x86/purgatory: remove PGO flags nilfs2: reject devices with insufficient block count serial: lantiq: add missing interrupt ack serial: lantiq: Do not swap register read/writes serial: lantiq: Use readl/writel instead of ltq_r32/ltq_w32 serial: lantiq: Change ltq_w32_mask to asc_update_bits Merge 4.19.287 into android-4.19-stable Linux 4.19.287 * mmc: block: ensure error propagation for non-blk drivers/mmc/core/block.c powerpc: Fix defconfig choice logic when cross compiling drm/nouveau/kms: Fix NULL pointer dereference in nouveau_connector_detect_depth * neighbour: delete neigh_lookup_nodev as not used include/net/neighbour.h net/core/neighbour.c * net: Remove unused inline function dst_hold_and_use() include/net/dst.h * neighbour: Remove unused inline function neigh_key_eq16() include/net/neighbour.h selftests/ptp: Fix timestamp printf format for PTP_SYS_OFFSET * net: tipc: resize nlattr array to correct size net/tipc/bearer.c net: lapbether: only support ethernet devices drm/nouveau: add nv_encoder pointer check for NULL drm/nouveau/kms: Don't change EDID when it hasn't actually changed drm/nouveau/dp: check for NULL nv_connector->native_mode igb: fix nvm.ops.read() error handling * sctp: fix an error code in sctp_sf_eat_auth() net/sctp/sm_statefuns.c IB/isert: Fix incorrect release of isert connection IB/isert: Fix possible list corruption in CMA handler IB/isert: Fix dead lock in ib_isert IB/uverbs: Fix to consider event queue closing also upon non-blocking mode RDMA/rxe: Fix the use-before-initialization error of resp_pkts RDMA/rxe: Removed unused name from rxe_task struct RDMA/rxe: Remove the unused variable obj * ping6: Fix send to link-local addresses with VRF. net/ipv6/ping.c * netfilter: nfnetlink: skip error delivery on batch in case of ENOMEM net/netfilter/nfnetlink.c * usb: gadget: f_ncm: Fix NTP-32 support drivers/usb/gadget/function/f_ncm.c * usb: gadget: f_ncm: Add OS descriptor support drivers/usb/gadget/function/f_ncm.c drivers/usb/gadget/function/u_ncm.h * usb: dwc3: gadget: Reset num TRBs before giving back the request drivers/usb/dwc3/gadget.c USB: serial: option: add Quectel EM061KGL series * Remove DECnet support from kernel include/linux/netdevice.h include/linux/netfilter.h include/linux/netfilter_defs.h include/net/netns/netfilter.h include/uapi/linux/netlink.h net/Kconfig net/Makefile net/core/dev.c net/core/neighbour.c net/netfilter/core.c net: usb: qmi_wwan: add support for Compal RXM-G1 RDMA/uverbs: Restrict usage of privileged QKEYs nouveau: fix client work fence deletion race powerpc/purgatory: remove PGO flags kexec: support purgatories with .text.hot sections nilfs2: fix possible out-of-bounds segment allocation in resize ioctl nilfs2: fix incomplete buffer cleanup in nilfs_btnode_abort_change_key() nios2: dts: Fix tse_mac "max-frame-size" property ocfs2: check new file size on fallocate call ocfs2: fix use-after-free when unmounting read-only filesystem xen/blkfront: Only check REQ_FUA for writes mips: Move initrd_start check after initrd address sanitisation. MIPS: Alchemy: fix dbdma2 parisc: Improve cache flushing for PCXL in arch_sync_dma_for_cpu() * power: supply: Fix logic checking if system is running from battery drivers/power/supply/power_supply_core.c irqchip/meson-gpio: Mark OF related data as maybe unused * regulator: Fix error checking for debugfs_create_dir drivers/regulator/core.c * power: supply: Ratelimit no data debug output drivers/power/supply/power_supply_sysfs.c ARM: dts: vexpress: add missing cache properties power: supply: bq27xxx: Use mod_delayed_work() instead of cancel() + schedule() power: supply: ab8500: Fix external_power_changed race Merge "Merge 4.19.286 into android-4.19-stable" into android-4.19-stable * Revert "tcp: deny tcp_disconnect() when threads are waiting" include/net/sock.h net/ipv4/af_inet.c net/ipv4/inet_connection_sock.c net/ipv4/tcp.c Merge "Merge 4.19.285 into android-4.19-stable" into android-4.19-stable Merge 4.19.286 into android-4.19-stable * Revert "tcp: deny tcp_disconnect() when threads are waiting" include/net/sock.h net/ipv4/af_inet.c net/ipv4/inet_connection_sock.c net/ipv4/tcp.c * ANDROID: GKI: update ABI xml for incrementalfs.ko android/abi_gki_aarch64.xml Merge 4.19.285 into android-4.19-stable Linux 4.19.286 Revert "staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE" btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() btrfs: check return value of btrfs_commit_transaction in relocation * ext4: only check dquot_initialize_needed() when debugging fs/ext4/xattr.c i2c: sprd: Delete i2c adapter in .remove's error path pinctrl: meson-axg: add missing GPIOA_18 gpio group * Bluetooth: Fix use-after-free in hci_remove_ltk/hci_remove_irk net/bluetooth/hci_core.c ceph: fix use-after-free bug for inodes when flushing capsnaps drm/amdgpu: fix xclk freq on CHIP_STONEY Input: psmouse - fix OOB access in Elantech protocol * Input: xpad - delete a Razer DeathAdder mouse VID/PID entry drivers/input/joystick/xpad.c batman-adv: Broken sync while rescheduling delayed work * lib: cpu_rmap: Fix potential use-after-free in irq_cpu_rmap_release() lib/cpu_rmap.c * net: sched: fix possible refcount leak in tc_chain_tmplt_add() net/sched/cls_api.c * net: sched: move rtm_tca_policy declaration to include file include/net/pkt_sched.h net/sched/cls_api.c * rfs: annotate lockless accesses to RFS sock flow table include/linux/netdevice.h net/core/dev.c * rfs: annotate lockless accesses to sk->sk_rxhash include/net/sock.h * Bluetooth: L2CAP: Add missing checks for invalid DCID net/bluetooth/l2cap_core.c * Bluetooth: Fix l2cap_disconnect_req deadlock net/bluetooth/l2cap_core.c net: dsa: lan9303: allow vid != 0 in port_fdb_{add\|del} methods spi: qup: Request DMA before enabling clocks i40e: fix build warnings in i40e_alloc.h i40iw: fix build warning in i40iw_manage_apbvt() * UPSTREAM: net: cdc_ncm: Deal with too low values of dwNtbOutMaxSize drivers/net/usb/cdc_ncm.c * UPSTREAM: cdc_ncm: Fix the build warning drivers/net/usb/cdc_ncm.c * UPSTREAM: cdc_ncm: Implement the 32-bit version of NCM Transfer Block drivers/net/usb/cdc_ncm.c include/linux/usb/cdc_ncm.h * Revert "tcp: reduce POLLOUT events caused by TCP_NOTSENT_LOWAT" include/net/sock.h include/net/tcp.h net/core/stream.c * Revert "tcp: return EPOLLOUT from tcp_poll only when notsent_bytes is half the limit" net/ipv4/tcp.c * Revert "tcp: factor out __tcp_close() helper" include/net/tcp.h net/ipv4/tcp.c * Revert "tcp: add annotations around sk->sk_shutdown accesses" net/ipv4/af_inet.c net/ipv4/tcp.c net/ipv4/tcp_input.c * ANDROID: fix abi break in 4.19.284 for cpuhotplug.h include/linux/cpuhotplug.h Merge "Merge 4.19.284 into android-4.19-stable" into android-4.19-stable UPSTREAM: mailbox: mailbox-test: fix a locking issue in mbox_test_message_write() UPSTREAM: mailbox: mailbox-test: Fix potential double-free in mbox_test_message_write() Linux 4.19.285 wifi: rtlwifi: 8192de: correct checking of IQK reload * scsi: dpt_i2o: Do not process completions with invalid addresses drivers/scsi/Kconfig scsi: dpt_i2o: Remove broken pass-through ioctl (I2OUSERCMD) * regmap: Account for register length when chunking drivers/base/regmap/regmap.c fbcon: Fix null-ptr-deref in soft_cursor * ext4: add lockdep annotations for i_data_sem for ea_inode's fs/ext4/ext4.h fs/ext4/xattr.c * selinux: don't use make's grouped targets feature yet security/selinux/Makefile tty: serial: fsl_lpuart: use UARTCTRL_TXINV to send break instead of UARTCTRL_SBK mmc: vub300: fix invalid response handling rsi: Remove unnecessary boolean condition regulator: da905{2,5}: Remove unnecessary array check hwmon: (scmi) Remove redundant pointer check wifi: rtlwifi: remove always-true condition pointed out by GCC 12 lib/dynamic_debug.c: use address-of operator on section symbols * kernel/extable.c: use address-of operator on section symbols kernel/extable.c eth: sun: cassini: remove dead code * gcc-12: disable '-Wdangling-pointer' warning for now Makefile ACPI: thermal: drop an always true check x86/boot: Wrap literal addresses in absolute_pointer() ata: libata-scsi: Use correct device no in ata_find_dev() scsi: stex: Fix gcc 13 warnings * usb: gadget: f_fs: Add unbind event before functionfs_unbind drivers/usb/gadget/function/f_fs.c net: usb: qmi_wwan: Set DTR quirk for BroadMobi BM818 * iio: dac: build ad5758 driver when AD5758 is selected drivers/iio/dac/Makefile iio: dac: mcp4725: Fix i2c_master_send() return value handling * HID: wacom: avoid integer overflow in wacom_intuos_inout() drivers/hid/wacom_wac.c * HID: google: add jewel USB id drivers/hid/hid-ids.h iio: adc: mxs-lradc: fix the order of two cleanup operations mailbox: mailbox-test: fix a locking issue in mbox_test_message_write() atm: hide unused procfs functions ALSA: oss: avoid missing-prototype warnings * netfilter: conntrack: define variables exp_nat_nla_policy and any_addr with CONFIG_NF_NAT net/netfilter/nf_conntrack_netlink.c wifi: b43: fix incorrect __packed annotation * scsi: core: Decrease scsi_device's iorequest_cnt if dispatch failed drivers/scsi/scsi_lib.c * arm64/mm: mark private VM_FAULT_X defines as vm_fault_t arch/arm64/mm/fault.c ARM: dts: stm32: add pin map for CAN controller on stm32f7 wifi: rtl8xxxu: fix authentication timeout due to incorrect RCR value media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 media: dvb-core: Fix kernel WARNING for blocking operation in wait_event() media: dvb-core: Fix use-after-free due on race condition at dvb_net include/media/dvb_net.h media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr from ID table media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb() media: dvb_ca_en50221: fix a size write bug media: netup_unidvb: fix irq init by register it at the end of probe media: dvb-usb: dw2102: fix uninit-value in su3000_read_mac_address media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer() media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in rtl28xxu_i2c_xfer media: dvb-usb-v2: ce6230: fix null-ptr-deref in ce6230_i2c_master_xfer() media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer() media: dvb-usb: az6027: fix three null-ptr-deref in az6027_i2c_xfer() * media: dvb_demux: fix a bug for the continuity counter drivers/media/dvb-core/dvb_demux.c ASoC: ssm2602: Add workaround for playback distortions * xfrm: Check if_id in inbound policy/secpath match net/xfrm/xfrm_policy.c ASoC: dwc: limit the number of overrun messages nbd: Fix debugfs_create_dir error checking fbdev: stifb: Fix info entry in sti_struct on error path fbdev: modedb: Add 1920x1080 at 60 Hz video mode media: rcar-vin: Select correct interrupt mode for V4L2_FIELD_ALTERNATE ARM: 9295/1: unwind:fix unwind abort for uleb128 case mailbox: mailbox-test: Fix potential double-free in mbox_test_message_write() watchdog: menz069_wdt: fix watchdog initialisation net: dsa: mv88e6xxx: Increase wait after reset deactivation net/sched: flower: fix possible OOB write in fl_set_geneve_opt() * udp6: Fix race condition in udp6_sendmsg & connect net/core/sock.c * net/netlink: fix NETLINK_LIST_MEMBERSHIPS length report net/netlink/af_netlink.c * ocfs2/dlm: move BITS_TO_BYTES() to bitops.h for wider use include/linux/bitops.h * net: sched: fix NULL pointer dereference in mq_attach net/sched/sch_api.c * net/sched: Prohibit regrafting ingress or clsact Qdiscs net/sched/sch_api.c * net/sched: Reserve TC_H_INGRESS (TC_H_CLSACT) for ingress (clsact) Qdiscs net/sched/sch_api.c net/sched/sch_ingress.c * net/sched: sch_clsact: Only create under TC_H_CLSACT net/sched/sch_ingress.c * net/sched: sch_ingress: Only create under TC_H_INGRESS net/sched/sch_ingress.c * tcp: Return user_mss for TCP_MAXSEG in CLOSE/LISTEN state if user_mss set net/ipv4/tcp.c * tcp: deny tcp_disconnect() when threads are waiting include/net/sock.h net/ipv4/af_inet.c net/ipv4/inet_connection_sock.c net/ipv4/tcp.c * af_packet: do not use READ_ONCE() in packet_bind() net/packet/af_packet.c amd-xgbe: fix the false linkup in xgbe_phy_status * af_packet: Fix data-races of pkt_sk(sk)->num. net/packet/af_packet.c netrom: fix info-leak in nr_write_internal() net/mlx5: fw_tracer, Fix event handling dmaengine: pl330: rename _start to prevent build error * netfilter: ctnetlink: Support offloaded conntrack entry deletion net/netfilter/nf_conntrack_netlink.c * ipv{4,6}/raw: fix output xfrm lookup wrt protocol include/net/ip.h include/uapi/linux/in.h net/ipv4/ip_sockglue.c net/ipv4/raw.c net/ipv6/raw.c * bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() net/bluetooth/hci_sock.c * cdc_ncm: Fix the build warning drivers/net/usb/cdc_ncm.c power: supply: bq24190: Call power_supply_changed() after updating input current * power: supply: core: Refactor power_supply_set_input_current_limit_from_supplier() drivers/power/supply/power_supply_core.c include/linux/power_supply.h power: supply: bq27xxx: After charger plug in/out wait 0.5s for things to stabilize * net: cdc_ncm: Deal with too low values of dwNtbOutMaxSize drivers/net/usb/cdc_ncm.c * cdc_ncm: Implement the 32-bit version of NCM Transfer Block drivers/net/usb/cdc_ncm.c include/linux/usb/cdc_ncm.h Merge 4.19.284 into android-4.19-stable UPSTREAM: efi: rt-wrapper: Add missing include * BACKPORT: arm64: efi: Execute runtime services from a dedicated stack arch/arm64/include/asm/efi.h * Revert "uapi/linux/const.h: prefer ISO-friendly __typeof__" include/uapi/linux/const.h Merge "Merge 4.19.283 into android-4.19-stable" into android-4.19-stable Linux 4.19.284 * drivers: depend on HAS_IOMEM for devm_platform_ioremap_resource() drivers/base/platform.c 3c589_cs: Fix an error handling path in tc589_probe() forcedeth: Fix an error handling path in nv_probe() * ASoC: Intel: Skylake: Fix declaration of enum skl_ch_cfg include/uapi/sound/skl-tplg-interface.h x86/show_trace_log_lvl: Ensure stack pointer is aligned, again xen/pvcalls-back: fix double frees with pvcalls_new_active_socket() * coresight: Fix signedness bug in tmc_etr_buf_insert_barrier_packet() drivers/hwtracing/coresight/coresight-tmc-etr.c power: supply: sbs-charger: Fix INHIBITED bit for Status reg * power: supply: bq27xxx: Fix poll_interval handling and races on remove include/linux/power/bq27xxx_battery.h power: supply: bq27xxx: Fix I2C IRQ race on remove power: supply: bq27xxx: Fix bq27xxx_battery_update() race condition * power: supply: leds: Fix blink to LED on transition drivers/power/supply/power_supply_leds.c * ipv6: Fix out-of-bounds access in ipv6_find_tlv() net/ipv6/exthdrs_core.c * bpf: Fix mask generation for 32-bit narrow loads of 64-bit fields kernel/bpf/verifier.c * net: fix skb leak in __skb_tstamp_tx() net/core/skbuff.c media: radio-shark: Add endpoint checks USB: sisusbvga: Add endpoint checks * USB: core: Add routines for endpoint checks in old drivers drivers/usb/core/usb.c include/linux/usb.h * udplite: Fix NULL pointer dereference in __sk_mem_raise_allocated(). net/ipv4/udplite.c net/ipv6/udplite.c ALSA: hda/realtek - Fix inverted bass GPIO pin on Acer 8951G ALSA: hda/realtek - Fixed one of HP ALC671 platform Headset Mic supported parisc: Fix flush_dcache_page() for usage from irq context selftests/memfd: Fix unknown type name build failure x86/mm: Avoid incomplete Global INVLPG flushes btrfs: use nofs when cleaning up aborted transactions parisc: Allow to reboot machine after system halt m68k: Move signal frame following exception on 68020/030 ALSA: hda/ca0132: add quirk for EVGA X299 DARK spi: fsl-cpm: Use 16 bit mode for large transfers with even size spi: fsl-spi: Re-organise transfer bits_per_word adaptation spi: spi-fsl-spi: automatically adapt bits-per-word in cpu mode s390/qdio: fix do_sqbs() inline assembly constraint s390/qdio: get rid of register asm vc_screen: reload load of struct vc_data pointer in vcs_write() to avoid UAF vc_screen: rewrite vcs_size to accept vc, not inode * usb: gadget: u_ether: Fix host MAC address case drivers/usb/gadget/function/u_ether.c * usb: gadget: u_ether: Convert prints to device prints drivers/usb/gadget/function/u_ether.c * lib/string_helpers: Introduce string_upper() and string_lower() helpers include/linux/string_helpers.h ALSA: hda/realtek: Add a quirk for HP EliteDesk 805 ALSA: hda/realtek - ALC897 headset MIC no sound ALSA: hda/realtek - Add headset Mic support for Lenovo ALC897 platform ALSA: hda/realtek: Fix the mic type detection issue for ASUS G551JW ALSA: hda/realtek - The front Mic on a HP machine doesn't work ALSA: hda/realtek - Enable the headset of Acer N50-600 with ALC662 ALSA: hda/realtek - Enable headset mic of Acer X2660G with ALC662 ALSA: hda/realtek - Add Headset Mic supported for HP cPC ALSA: hda/realtek - More constifications Add Acer Aspire Ethos 8951G model quirk * HID: wacom: Force pen out of prox if no events have been received in a while drivers/hid/wacom.h drivers/hid/wacom_sys.c drivers/hid/wacom_wac.c netfilter: nf_tables: do not allow RULE_ID to refer to another chain netfilter: nf_tables: validate NFTA_SET_ELEM_OBJREF based on NFT_SET_OBJECT flag netfilter: nf_tables: stricter validation of element data * netfilter: nf_tables: allow up to 64 bytes in the set element data area include/net/netfilter/nf_tables.h netfilter: nf_tables: add nft_setelem_parse_key() netfilter: nf_tables: validate registers coming from userspace. * netfilter: nftables: statify nft_parse_register() include/net/netfilter/nf_tables.h * netfilter: nftables: add nft_parse_register_store() and use it include/net/netfilter/nf_tables.h include/net/netfilter/nf_tables_core.h include/net/netfilter/nft_fib.h * netfilter: nftables: add nft_parse_register_load() and use it include/net/netfilter/nf_tables.h include/net/netfilter/nf_tables_core.h include/net/netfilter/nft_masq.h include/net/netfilter/nft_redir.h nilfs2: fix use-after-free bug of nilfs_root in nilfs_evict_inode() tpm/tpm_tis: Disable interrupts for more Lenovo devices ceph: force updating the msg pointer in non-split case serial: Add support for Advantech PCI-1611U card * statfs: enforce statfs[64] structure initialization fs/statfs.c ALSA: hda: Add NVIDIA codec IDs a3 through a7 to patch table ALSA: hda: Fix Oops by 9.1 surround channel names usb: typec: altmodes/displayport: fix pin_assignment_show * usb-storage: fix deadlock when a scsi command timeouts more than once drivers/usb/storage/scsiglue.c vlan: fix a potential uninit-value in vlan_dev_hard_start_xmit() igb: fix bit_shift to be in [1..8] range cassini: Fix a memory leak in the error handling path of cas_init_one() net: bcmgenet: Restore phy_stop() depending upon suspend/close net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop() net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() drm/exynos: fix g2d_open/close helper function definitions media: netup_unidvb: fix use-after-free at del_timer() erspan: get the proto with the md version for collect_md * ip_gre, ip6_gre: Fix race condition on o_seqno in collect_md mode include/net/ip6_tunnel.h include/net/ip_tunnels.h ip6_gre: Make o_seqno start from 0 in native mode ip6_gre: Fix skb_under_panic in __gre6_xmit() serial: arc_uart: fix of_iomap leak in `arc_serial_probe` * drivers: provide devm_platform_ioremap_resource() drivers/base/platform.c include/linux/platform_device.h vsock: avoid to close connected socket after the timeout net: fec: Better handle pm_runtime_get() failing in .remove() * af_key: Reject optional tunnel/BEET mode templates in outbound policies net/key/af_key.c cpupower: Make TSC read per CPU for Mperf monitor btrfs: fix space cache inconsistency after error loading it from disk btrfs: replace calls to btrfs_find_free_ino with btrfs_find_free_objectid mfd: dln2: Fix memory leak in dln2_probe() phy: st: miphy28lp: use _poll_timeout functions for waits * Input: xpad - add constants for GIP interface numbers drivers/input/joystick/xpad.c clk: tegra20: fix gcc-7 constant overflow warning recordmcount: Fix memory leaks in the uwrite function * sched: Fix KCSAN noinstr violation include/linux/sched/task_stack.h mcb-pci: Reallocate memory region to avoid memory overlapping serial: 8250: Reinit port->pm on port specific driver unbind usb: typec: tcpm: fix multiple times discover svids error * HID: wacom: generic: Set battery quirk only when we see battery data drivers/hid/wacom_wac.c spi: spi-imx: fix MX51_ECSPI_* macros when cs > 3 HID: logitech-hidpp: Reconcile USB and Unifying serials HID: logitech-hidpp: Don't use the USB serial for USB devices staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE * Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp net/bluetooth/l2cap_core.c wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace * f2fs: fix to drop all dirty pages during umount() if cp_error is set fs/f2fs/checkpoint.c fs/f2fs/data.c * ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa() fs/ext4/mballoc.c * ext4: set goal start correctly in ext4_mb_normalize_request fs/ext4/mballoc.c gfs2: Fix inode height consistency check scsi: message: mptlan: Fix use after free bug in mptlan_remove() due to race condition * lib: cpu_rmap: Avoid use after free on rmap->obj array entries lib/cpu_rmap.c * net: Catch invalid index in XPS mapping net/core/dev.c net: pasemi: Fix return type of pasemi_mac_start_tx() ext2: Check block size validity during mount wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex ACPICA: ACPICA: check null return of ACPI_ALLOCATE_ZEROED in acpi_db_display_objects ACPICA: Avoid undefined behavior: applying zero offset to null pointer drm/tegra: Avoid potential 32-bit integer overflow ACPI: EC: Fix oops when removing custom query handlers * firmware: arm_sdei: Fix sleep from invalid context BUG include/linux/cpuhotplug.h memstick: r592: Fix UAF bug in r592_remove due to race condition * regmap: cache: Return error in cache sync operations for REGCACHE_NONE drivers/base/regmap/regcache.c drm/amd/display: Use DC_LOG_DC in the trasform pixel function fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode() * af_unix: Fix data races around sk->sk_shutdown. net/unix/af_unix.c * af_unix: Fix a data race of sk->sk_receive_queue->qlen. net/unix/af_unix.c * net: datagram: fix data-races in datagram_poll() net/core/datagram.c ipvlan:Fix out-of-bounds caused by unclear skb->cb * tcp: add annotations around sk->sk_shutdown accesses net/ipv4/af_inet.c net/ipv4/tcp.c net/ipv4/tcp_input.c * tcp: factor out __tcp_close() helper include/net/tcp.h net/ipv4/tcp.c * tcp: return EPOLLOUT from tcp_poll only when notsent_bytes is half the limit net/ipv4/tcp.c * tcp: reduce POLLOUT events caused by TCP_NOTSENT_LOWAT include/net/sock.h include/net/tcp.h net/core/stream.c * net: annotate sk->sk_err write from do_recvmmsg() net/socket.c * netlink: annotate accesses to nlk->cb_running net/netlink/af_netlink.c * net: Fix load-tearing on sk->sk_stamp in sock_recv_cmsgs(). include/net/sock.h * UPSTREAM: ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum fs/ext4/super.c Merge 4.19.283 into android-4.19-stable * UPSTREAM: ext4: fix invalid free tracking in ext4_xattr_move_to_block() fs/ext4/xattr.c Linux 4.19.283 * mm/page_alloc: fix potential deadlock on zonelist_update_seq seqlock mm/page_alloc.c * printk: declare printk_deferred_{enter,safe}() in include/linux/printk.h include/linux/printk.h PCI: pciehp: Fix AB-BA deadlock between reset_lock and device_lock PCI: pciehp: Use down_read/write_nested(reset_lock) to fix lockdep errors drbd: correctly submit flush bio on barrier serial: 8250: Fix serial8250_tx_empty() race with DMA Tx * tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH drivers/tty/tty_io.c drivers/tty/tty_ioctl.c include/linux/tty.h * ext4: fix invalid free tracking in ext4_xattr_move_to_block() fs/ext4/xattr.c * ext4: remove a BUG_ON in ext4_mb_release_group_pa() fs/ext4/mballoc.c * ext4: bail out of ext4_xattr_ibody_get() fails for any reason fs/ext4/inline.c * ext4: add bounds checking in get_max_inline_xattr_value_size() fs/ext4/inline.c * ext4: improve error recovery code paths in __ext4_remount() fs/ext4/super.c * ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum fs/ext4/super.c * ext4: fix WARNING in mb_find_extent fs/ext4/balloc.c * HID: wacom: Set a default resolution for older tablets drivers/hid/wacom_wac.c drm/panel: otm8009a: Set backlight parent to panel device ARM: dts: s5pv210: correct MIPI CSIS clock name ARM: dts: exynos: fix WM8960 clock name in Itop Elite sh: nmi_debug: fix return value of __setup handler sh: init: use OF_EARLY_FLATTREE for early init sh: math-emu: fix macro redefined warning platform/x86: touchscreen_dmi: Add info for the Dexp Ursus KX210i cifs: fix pcchunk length type in smb2_copychunk_range btrfs: print-tree: parent bytenr must be aligned to sector size btrfs: fix btrfs_prev_leaf() to not return the same key twice perf symbols: Fix return incorrect build_id size in elf_read_build_id() perf map: Delete two variable initialisations before null pointer checks in sort__sym_from_cmp() perf vendor events power9: Remove UTF-8 characters from JSON files virtio_net: suppress cpu stall when free_unused_bufs virtio_net: split free_unused_bufs() ALSA: caiaq: input: Add error handling for unsupported input methods in `snd_usb_caiaq_input_init` drm/amdgpu: add a missing lock for AMDGPU_SCHED * drm/amdgpu: Add command to override the context priority. include/uapi/drm/amdgpu_drm.h drm/amdgpu: Put enable gfx off feature to a delay thread drm/amdgpu: Add amdgpu_gfx_off_ctrl function * af_packet: Don't send zero-byte data in packet_sendmsg_spkt(). net/packet/af_packet.c rxrpc: Fix hard call timeout units * net/sched: act_mirred: Add carrier check net/sched/act_mirred.c * writeback: fix call of incorrect macro fs/fs-writeback.c net: dsa: mv88e6xxx: add mv88e6321 rsvd2cpu net: dsa: mv88e6xxx: Add missing watchdog ops for 6320 family * sit: update dev->needed_headroom in ipip6_tunnel_bind_dev() net/ipv6/sit.c relayfs: fix out-of-bounds access in relay_file_read kernel/relay.c: fix read_pos error when multiple readers * dm verity: fix error handling for check_at_most_once on FEC drivers/md/dm-verity-target.c * dm verity: skip redundant verity_handle_err() on I/O errors drivers/md/dm-verity-target.c ipmi: fix SSIF not responding under certain cond. ipmi_ssif: Rename idle state and check * ipmi: Fix how the lower layers are told to watch for messages include/linux/ipmi_smi.h ipmi: Fix SSIF flag requests * tick/nohz: Fix cpu_is_hotpluggable() by checking with nohz subsystem drivers/base/cpu.c include/linux/tick.h kernel/time/tick-sched.c * nohz: Add TICK_DEP_BIT_RCU include/linux/tick.h include/trace/events/timer.h kernel/time/tick-sched.c * netfilter: nf_tables: deactivate anonymous set from preparation phase include/net/netfilter/nf_tables.h debugobject: Ensure pool refill (again) perf auxtrace: Fix address filter entire kernel size * dm ioctl: fix nested locking in table_clear() to remove deadlock concern drivers/md/dm-ioctl.c dm flakey: fix a crash with invalid table line dm integrity: call kmem_cache_destroy() in dm_integrity_init() error path s390/dasd: fix hanging blockdevice after request requeue * btrfs: scrub: reject unsupported scrub flags include/uapi/linux/btrfs.h clk: rockchip: rk3399: allow clk_cifout to force clk_cifout_src to reparent wifi: rtl8xxxu: RTL8192EU always needs full init md/raid10: fix null-ptr-deref in raid10_sync_request nilfs2: fix infinite loop in nilfs_mdt_get_block() nilfs2: do not write dirty data after degenerating to read-only parisc: Fix argument pointer in real64_call_asm() dmaengine: at_xdmac: do not enable all cyclic channels phy: tegra: xusb: Add missing tegra_xusb_port_unregister for usb2_port and ulpi_port pwm: mtk-disp: Disable shadow registers before setting backlight values pwm: mtk-disp: Adjust the clocks to avoid them mismatch pwm: mtk-disp: Don't check the return code of pwmchip_remove() openrisc: Properly store r31 to pt_regs on unhandled exceptions RDMA/mlx5: Use correct device num_ports when modify DC * SUNRPC: remove the maximum number of retries in call_bind_status include/linux/sunrpc/sched.h NFSv4.1: Always send a RECLAIM_COMPLETE after establishing lease IB/hfi1: Fix SDMA mmu_rb_node not being evicted in LRU order * clk: add missing of_node_put() in "assigned-clocks" property parsing drivers/clk/clk-conf.c power: supply: generic-adc-battery: fix unit scaling RDMA/mlx4: Prevent shift wrapping in set_user_sq_size() RDMA/rdmavt: Delete unnecessary NULL check * perf/core: Fix hardlockup failure caused by perf throttle kernel/events/core.c powerpc/rtas: use memmove for potentially overlapping buffer copy * macintosh: via-pmu-led: requires ATA to be set drivers/macintosh/Kconfig powerpc/sysdev/tsi108: fix resource printk format warnings powerpc/wii: fix resource printk format warnings powerpc/mpc512x: fix resource printk format warning macintosh/windfarm_smu_sat: Add missing of_node_put() * spmi: Add a check for remove callback when removing a SPMI driver drivers/spmi/spmi.c staging: rtl8192e: Fix W_DISABLE# does not work after stop/start serial: 8250: Add missing wakeup event reporting tty: serial: fsl_lpuart: adjust buffer length to the intended size usb: chipidea: fix missing goto in `ci_hdrc_probe` sh: sq: Fix incorrect element size for allocating bitmap buffer * uapi/linux/const.h: prefer ISO-friendly __typeof__ include/uapi/linux/const.h spi: cadence-quadspi: fix suspend-resume implementations mtd: spi-nor: cadence-quadspi: Handle probe deferral while requesting DMA channel mtd: spi-nor: cadence-quadspi: Don't initialize rx_dma_complete on failure mtd: spi-nor: cadence-quadspi: Make driver independent of flash geometry ia64: salinfo: placate defined-but-not-used warning ia64: mm/contig: fix section mismatch warning/error * of: Fix modalias string generation drivers/of/device.c vmci_host: fix a race condition in vmci_host_poll() causing GPF spi: fsl-spi: Fix CPM/QE mode Litte Endian spi: qup: Don't skip cleanup in remove's error path spi: qup: fix PM reference leak in spi_qup_remove() * linux/vt_buffer.h: allow either builtin or modular for macros include/linux/vt_buffer.h usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition fpga: bridge: fix kernel-doc parameter description usb: host: xhci-rcar: remove leftover quirk handling * pstore: Revert pmsg_lock back to a normal mutex fs/pstore/pmsg.c * tcp/udp: Fix memleaks of sk and zerocopy skbs with TX timestamp. net/core/skbuff.c net: amd: Fix link leak when verifying config failed * netlink: Use copy_to_user() for optval in netlink_getsockopt(). net/netlink/af_netlink.c Revert "Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work" * ipv4: Fix potential uninit variable access bug in __ip_make_skb() net/ipv4/ip_output.c * netfilter: nf_tables: don't write table validation state without mutex include/linux/netfilter/nfnetlink.h net/netfilter/nfnetlink.c ixgbe: Enable setting RSS table to default values ixgbe: Allow flow hash to be set via ethtool wifi: iwlwifi: mvm: check firmware response size wifi: iwlwifi: make the loop for card preparation effective md/raid10: fix memleak of md thread md: update the optimal I/O size on reshape md/raid10: fix memleak for 'conf->bio_split' md/raid10: fix leak of 'r10bio->remaining' for recovery * crypto: drbg - Only fail when jent is unavailable in FIPS mode crypto/drbg.c * crypto: drbg - make drbg_prepare_hrng() handle jent instantiation errors crypto/drbg.c bpftool: Fix bug for long instructions in program CFG dumps wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_reg() wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_rfreg() rtlwifi: Replace RT_TRACE with rtl_dbg rtlwifi: Start changing RT_TRACE into rtl_dbg rtlwifi: rtl_pci: Fix memory leak when hardware init fails scsi: megaraid: Fix mega_cmd_done() CMDID_INT_CMDS scsi: target: iscsit: Fix TAS handling during conn cleanup * net/packet: convert po->auxdata to an atomic flag net/packet/af_packet.c net/packet/internal.h * net/packet: convert po->origdev to an atomic flag net/packet/af_packet.c net/packet/internal.h vlan: partially enable SIOCSHWTSTAMP in container * scm: fix MSG_CTRUNC setting condition for SO_PASSSEC include/net/scm.h tools: bpftool: Remove invalid \' json escape wifi: ath6kl: reduce WARN to dev_dbg() in callback wifi: ath5k: fix an off by one check in ath5k_eeprom_read_freq_list() wifi: ath9k: hif_usb: fix memory leak of remain_skbs wifi: ath6kl: minor fix for allocation size debugobject: Prevent init race with static objects debugobjects: Move printk out of db->lock critical sections debugobjects: Add percpu free pools * arm64: kgdb: Set PSTATE.SS to 1 to re-enable single-step arch/arm64/include/asm/debug-monitors.h arch/arm64/kernel/debug-monitors.c x86/ioapic: Don't return 0 from arch_dynirq_lower_bound() media: rc: gpio-ir-recv: Fix support for wake-up media: rcar_fdp1: Fix refcount leak in probe and remove function media: rcar_fdp1: Fix the correct variable assignments media: saa7134: fix use after free bug in saa7134_finidev due to race condition media: dm1105: Fix use after free bug in dm1105_remove due to race condition x86/apic: Fix atomic update of offset in reserve_eilvt_offset() drm/msm/adreno: drop bogus pm_runtime_set_active() drm/msm/adreno: Defer enabling runpm until hw_init() * firmware: qcom_scm: Clear download bit during reboot drivers/firmware/qcom_scm.c media: av7110: prevent underflow in write_ts_to_decoder() * media: uapi: add MEDIA_BUS_FMT_METADATA_FIXED media bus format. include/uapi/linux/media-bus-format.h media: bdisp: Add missing check for create_workqueue ARM: dts: qcom: ipq4019: Fix the PCI I/O port range EDAC/skx: Fix overflows on the DRAM row address mapping arrays EDAC, skx: Move debugfs node under EDAC's hierarchy * drm/probe-helper: Cancel previous job before starting new one drivers/gpu/drm/drm_probe_helper.c drm/vgem: add missing mutex_destroy drm/rockchip: Drop unbalanced obj unref * selinux: ensure av_permissions.h is built when needed security/selinux/Makefile * selinux: fix Makefile dependencies of flask.h security/selinux/Makefile ubifs: Free memory for tmpfile name ubi: Fix return value overwrite issue in try_write_vid_and_data() ubifs: Fix memleak when insert_old_idx() failed Revert "ubifs: dirty_cow_znode: Fix memleak in error handling path" i2c: omap: Fix standard mode false ACK readings KVM: nVMX: Emulate NOPs in L2, and PAUSE if it's not intercepted reiserfs: Add security prefix to xattr name in reiserfs_security_write() * ring-buffer: Sync IRQ works before buffer destruction kernel/trace/ring_buffer.c pwm: meson: Fix axg ao mux parents MIPS: fw: Allow firmware to pass a empty env * xhci: fix debugfs register accesses while suspended drivers/usb/host/xhci-debugfs.c * debugfs: regset32: Add Runtime PM support fs/debugfs/file.c include/linux/debugfs.h staging: iio: resolver: ads1210: fix config mode perf sched: Cast PTHREAD_STACK_MIN to int as it may turn into sysconf(__SC_THREAD_STACK_MIN_VALUE) * USB: dwc3: fix runtime pm imbalance on unbind drivers/usb/dwc3/core.c stmmac: debugfs entry name is not be changed when udev rename device name. ASoC: Intel: bytcr_rt5640: Add quirk for the Acer Iconia One 7 B1-750 iio: adc: palmas_gpadc: fix NULL dereference on rmmod USB: serial: option: add UNISOC vendor and TOZED LT70C product * bluetooth: Perform careful capability checks in hci_sock_ioctl() net/bluetooth/hci_sock.c wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() * ANDROID: incremental fs: Evict inodes before freeing mount data fs/incfs/main.c fs/incfs/vfs.c * Revert "Revert "mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse"" android/abi_gki_aarch64.xml include/linux/rmap.h mm/rmap.c Bug: 299241959 Change-Id: Ib8c4ff87b1b0b720abce0f5fcdf1a51f01a472a9 Signed-off-by: Wilson Sung <wilsonsung@google.com> Signed-off-by: ChangYan Lee <changyan@google.com>	2023-10-17 05:00:19 +00:00
Greg Kroah-Hartman	813e482b1b	Merge 4.19.291 into android-4.19-stable Changes in 4.19.291 gfs2: Don't deref jdesc in evict x86/smp: Use dedicated cache-line for mwait_play_dead() video: imsttfb: check for ioremap() failures fbdev: imsttfb: Fix use after free bug in imsttfb_probe drm/edid: Fix uninitialized variable in drm_cvt_modes() scripts/tags.sh: Resolve gtags empty index generation drm/amdgpu: Validate VM ioctl flags. treewide: Remove uninitialized_var() usage md/raid10: check slab-out-of-bounds in md_bitmap_get_counter md/raid10: fix overflow of md/safe_mode_delay md/raid10: fix wrong setting of max_corr_read_errors md/raid10: fix io loss while replacement replace rdev irqchip/jcore-aic: Kill use of irq_create_strict_mappings() irqchip/jcore-aic: Fix missing allocation of IRQ descriptors clocksource/drivers: Unify the names to timer-* format clocksource/drivers/cadence-ttc: Use ttc driver as platform driver clocksource/drivers/cadence-ttc: Fix memory leak in ttc_timer_probe PM: domains: fix integer overflow issues in genpd_parse_state() ARM: 9303/1: kprobes: avoid missing-declaration warnings evm: Complete description of evm_inode_setattr() wifi: ath9k: fix AR9003 mac hardware hang check register offset calculation wifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx samples/bpf: Fix buffer overflow in tcp_basertt wifi: mwifiex: Fix the size of a memory allocation in mwifiex_ret_802_11_scan() nfc: constify several pointers to u8, char and sk_buff nfc: llcp: fix possible use of uninitialized variable in nfc_llcp_send_connect() wifi: orinoco: Fix an error handling path in spectrum_cs_probe() wifi: orinoco: Fix an error handling path in orinoco_cs_probe() wifi: atmel: Fix an error handling path in atmel_probe() wl3501_cs: Fix a bunch of formatting issues related to function docs wl3501_cs: Remove unnecessary NULL check wl3501_cs: Fix misspelling and provide missing documentation net: create netdev->dev_addr assignment helpers wl3501_cs: use eth_hw_addr_set() wifi: wl3501_cs: Fix an error handling path in wl3501_probe() wifi: ray_cs: Utilize strnlen() in parse_addr() wifi: ray_cs: Drop useless status variable in parse_addr() wifi: ray_cs: Fix an error handling path in ray_probe() wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes wifi: rsi: Do not set MMC_PM_KEEP_POWER in shutdown watchdog/perf: define dummy watchdog_update_hrtimer_threshold() on correct config watchdog/perf: more properly prevent false positives with turbo modes kexec: fix a memory leak in crash_shrink_memory() memstick r592: make memstick_debug_get_tpc_name() static wifi: ath9k: Fix possible stall on ath9k_txq_list_has_key() wifi: ath9k: convert msecs to jiffies where needed netlink: fix potential deadlock in netlink_set_err() netlink: do not hard code device address lenth in fdb dumps gtp: Fix use-after-free in __gtp_encap_destroy(). lib/ts_bm: reset initial match offset for every block of text netfilter: nf_conntrack_sip: fix the ct_sip_parse_numerical_param() return value. ipvlan: Fix return value of ipvlan_queue_xmit() netlink: Add __sock_i_ino() for __netlink_diag_dump(). radeon: avoid double free in ci_dpm_init() Input: drv260x - sleep between polling GO bit ARM: dts: BCM5301X: Drop "clock-names" from the SPI node Input: adxl34x - do not hardcode interrupt trigger type drm/panel: simple: fix active size for Ampire AM-480272H3TMQW-T01H ARM: ep93xx: fix missing-prototype warnings ASoC: es8316: Increment max value for ALC Capture Target Volume control soc/fsl/qe: fix usb.c build errors IB/hfi1: Fix sdma.h tx->num_descs off-by-one errors arm64: dts: renesas: ulcb-kf: Remove flow control for SCIF1 fbdev: omapfb: lcd_mipid: Fix an error handling path in mipid_spi_probe() drm/radeon: fix possible division-by-zero errors ALSA: ac97: Fix possible NULL dereference in snd_ac97_mixer scsi: 3w-xxxx: Add error handling for initialization failure in tw_probe() PCI: Add pci_clear_master() stub for non-CONFIG_PCI pinctrl: cherryview: Return correct value if pin in push-pull mode perf dwarf-aux: Fix off-by-one in die_get_varname() pinctrl: at91-pio4: check return value of devm_kasprintf() hwrng: virtio - add an internal buffer hwrng: virtio - don't wait on cleanup hwrng: virtio - don't waste entropy hwrng: virtio - always add a pending request hwrng: virtio - Fix race on data_avail and actual data crypto: nx - fix build warnings when DEBUG_FS is not enabled modpost: fix section mismatch message for R_ARM_ABS32 modpost: fix section mismatch message for R_ARM_{PC24,CALL,JUMP24} ARCv2: entry: comments about hardware auto-save on taken interrupts ARCv2: entry: push out the Z flag unclobber from common EXCEPTION_PROLOGUE ARCv2: entry: avoid a branch ARCv2: entry: rewrite to enable use of double load/stores LDD/STD ARC: define ASM_NL and __ALIGN(_STR) outside #ifdef __ASSEMBLY__ guard USB: serial: option: add LARA-R6 01B PIDs block: change all __u32 annotations to __be32 in affs_hardblocks.h w1: fix loop in w1_fini() sh: j2: Use ioremap() to translate device tree address into kernel memory media: usb: Check az6007_read() return value media: videodev2.h: Fix struct v4l2_input tuner index comment media: usb: siano: Fix warning due to null work_func_t function pointer extcon: Fix kernel doc of property fields to avoid warnings extcon: Fix kernel doc of property capability fields to avoid warnings usb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe() mfd: rt5033: Drop rt5033-battery sub-device KVM: s390: fix KVM_S390_GET_CMMA_BITS for GFNs in memslot holes mfd: intel-lpss: Add missing check for platform_get_resource mfd: stmpe: Only disable the regulators if they are enabled rtc: st-lpc: Release some resources in st_rtc_probe() in case of error sctp: fix potential deadlock on &net->sctp.addr_wq_lock Add MODULE_FIRMWARE() for FIRMWARE_TG357766. spi: bcm-qspi: return error if neither hif_mspi nor mspi is available mailbox: ti-msgmgr: Fill non-message tx data fields with 0x0 f2fs: fix error path handling in truncate_dnode() powerpc: allow PPC_EARLY_DEBUG_CPM only when SERIAL_CPM=y net: bridge: keep ports without IFF_UNICAST_FLT in BR_PROMISC mode tcp: annotate data races in __tcp_oow_rate_limited() net/sched: act_pedit: Add size check for TCA_PEDIT_PARMS_EX sh: dma: Fix DMA channel offset calculation i2c: xiic: Defer xiic_wakeup() and __xiic_start_xfer() in xiic_process() i2c: xiic: Don't try to handle more interrupt events after error ALSA: jack: Fix mutex call in snd_jack_report() NFSD: add encoding of op_recall flag for write delegation mmc: core: disable TRIM on Kingston EMMC04G-M627 mmc: core: disable TRIM on Micron MTFC4GACAJCN-1M bcache: Remove unnecessary NULL point check in node allocations integrity: Fix possible multiple allocation in integrity_inode_get() jffs2: reduce stack usage in jffs2_build_xattr_subsystem() btrfs: fix race when deleting quota root from the dirty cow roots list ARM: orion5x: fix d2net gpio initialization spi: spi-fsl-spi: remove always-true conditional in fsl_spi_do_one_msg spi: spi-fsl-spi: relax message sanity checking a little spi: spi-fsl-spi: allow changing bits_per_word while CS is still active netfilter: nf_tables: fix nat hook table deletion netfilter: nf_tables: add rescheduling points during loop detection walks netfilter: nftables: add helper function to set the base sequence number netfilter: add helper function to set up the nfnetlink header and use it netfilter: nf_tables: use net_generic infra for transaction data netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain netfilter: nf_tables: reject unbound anonymous set before commit phase netfilter: nf_tables: unbind non-anonymous set if rule construction fails netfilter: nf_tables: fix scheduling-while-atomic splat netfilter: conntrack: Avoid nf_ct_helper_hash uses after free netfilter: nf_tables: prevent OOB access in nft_byteorder_eval net: lan743x: Don't sleep in atomic context workqueue: clean up WORK_* constant types, clarify masking net: mvneta: fix txq_map in case of txq_number==1 vrf: Increment Icmp6InMsgs on the original netdev icmp6: Fix null-ptr-deref of ip6_null_entry->rt6i_idev in icmp6_dev(). udp6: fix udp6_ehashfn() typo ntb: idt: Fix error handling in idt_pci_driver_init() NTB: amd: Fix error handling in amd_ntb_pci_driver_init() ntb: intel: Fix error handling in intel_ntb_pci_driver_init() NTB: ntb_transport: fix possible memory leak while device_register() fails NTB: ntb_tool: Add check for devm_kcalloc ipv6/addrconf: fix a potential refcount underflow for idev wifi: airo: avoid uninitialized warning in airo_get_rate() net/sched: make psched_mtu() RTNL-less safe pinctrl: amd: Fix mistake in handling clearing pins at startup pinctrl: amd: Detect internal GPIO0 debounce handling pinctrl: amd: Only use special debounce behavior for GPIO 0 tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation net: bcmgenet: Ensure MDIO unregistration has clocks enabled SUNRPC: Fix UAF in svc_tcp_listen_data_ready() perf intel-pt: Fix CYC timestamps after standalone CBR ext4: fix wrong unit use in ext4_mb_clear_bb ext4: only update i_reserved_data_blocks on successful block allocation jfs: jfs_dmap: Validate db_l2nbperpage while mounting PCI/PM: Avoid putting EloPOS E2/S2/H2 PCIe Ports in D3cold PCI: Add function 1 DMA alias quirk for Marvell 88SE9235 PCI: qcom: Disable write access to read only registers for IP v2.3.3 PCI: rockchip: Assert PCI Configuration Enable bit after probe PCI: rockchip: Write PCI Device ID to correct register PCI: rockchip: Add poll and timeout to wait for PHY PLLs to be locked PCI: rockchip: Fix legacy IRQ generation for RK3399 PCIe endpoint core PCI: rockchip: Use u32 variable to access 32-bit registers misc: pci_endpoint_test: Free IRQs before removing the device misc: pci_endpoint_test: Re-init completion for every test md/raid0: add discard support for the 'original' layout fs: dlm: return positive pid value for F_GETLK serial: atmel: don't enable IRQs prematurely hwrng: imx-rngc - fix the timeout for init and self check ceph: don't let check_caps skip sending responses for revoke msgs meson saradc: fix clock divider mask length Revert "8250: add support for ASIX devices with a FIFO bug" tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() in case of error tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() when iterating clk ring-buffer: Fix deadloop issue on reading trace_pipe xtensa: ISS: fix call to split_if_spec scsi: qla2xxx: Wait for io return on terminate rport scsi: qla2xxx: Fix potential NULL pointer dereference scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport() scsi: qla2xxx: Pointer may be dereferenced drm/atomic: Fix potential use-after-free in nonblocking commits tracing/histograms: Add histograms to hist_vars if they have referenced variables perf probe: Add test for regression introduced by switch to die_get_decl_file() fuse: revalidate: don't invalidate if interrupted can: bcm: Fix UAF in bcm_proc_show() ext4: correct inline offset when handling xattrs in inode body debugobjects: Recheck debug_objects_enabled before reporting nbd: Add the maximum limit of allocated index in nbd_dev_add md: fix data corruption for raid456 when reshape restart while grow up md/raid10: prevent soft lockup while flush writes posix-timers: Ensure timer ID search-loop limit is valid sched/fair: Don't balance task to its current running CPU bpf: Address KCSAN report on bpf_lru_list wifi: wext-core: Fix -Wstringop-overflow warning in ioctl_standard_iw_point() wifi: iwlwifi: mvm: avoid baid size integer overflow igb: Fix igb_down hung on surprise removal spi: bcm63xx: fix max prepend length fbdev: imxfb: warn about invalid left/right margin pinctrl: amd: Use amd_pinconf_set() for all config options net: ethernet: ti: cpsw_ale: Fix cpsw_ale_get_field()/cpsw_ale_set_field() net:ipv6: check return value of pskb_trim() Revert "tcp: avoid the lookup process failing to get sk in ehash table" fbdev: au1200fb: Fix missing IRQ check in au1200fb_drv_probe llc: Don't drop packet from non-root netns. netfilter: nf_tables: fix spurious set element insertion failure netfilter: nf_tables: can't schedule in nft_chain_validate net: Replace the limit of TCP_LINGER2 with TCP_FIN_TIMEOUT_MAX tcp: annotate data-races around tp->linger2 tcp: annotate data-races around rskq_defer_accept tcp: annotate data-races around tp->notsent_lowat tcp: annotate data-races around fastopenq.max_qlen tracing/histograms: Return an error if we fail to add histogram to hist_vars list gpio: tps68470: Make tps68470_gpio_output() always set the initial value bcache: use MAX_CACHES_PER_SET instead of magic number 8 in __bch_bucket_alloc_set bcache: remove 'int n' from parameter list of bch_bucket_alloc_set() bcache: Fix __bch_btree_node_alloc to make the failure behavior consistent btrfs: fix extent buffer leak after tree mod log failure at split_node() ext4: rename journal_dev to s_journal_dev inside ext4_sb_info ext4: Fix reusing stale buffer heads from last failed mounting PCI: Rework pcie_retrain_link() wait loop PCI/ASPM: Return 0 or -ETIMEDOUT from pcie_retrain_link() PCI/ASPM: Factor out pcie_wait_for_retrain() PCI/ASPM: Avoid link retraining race dlm: cleanup plock_op vs plock_xop dlm: rearrange async condition return fs: dlm: interrupt posix locks only when process is killed ftrace: Add information on number of page groups allocated ftrace: Check if pages were allocated before calling free_pages() ftrace: Store the order of pages allocated in ftrace_page ftrace: Fix possible warning on checking all pages used in ftrace_process_locs() scsi: qla2xxx: Fix inconsistent format argument type in qla_os.c scsi: qla2xxx: Array index may go out of bound ext4: fix to check return value of freeze_bdev() in ext4_shutdown() i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir() phy: hisilicon: Fix an out of bounds check in hisi_inno_phy_probe() ethernet: atheros: fix return value check in atl1e_tso_csum() ipv6 addrconf: fix bug where deleting a mngtmpaddr can create a new temporary address tcp: Reduce chance of collisions in inet6_hashfn(). bonding: reset bond's flags when down link is P2P device team: reset team's flags when down link is P2P device platform/x86: msi-laptop: Fix rfkill out-of-sync on MSI Wind U100 net/sched: mqprio: refactor nlattr parsing to a separate function net/sched: mqprio: add extack to mqprio_parse_nlattr() net/sched: mqprio: Add length check for TCA_MQPRIO_{MAX/MIN}_RATE64 benet: fix return value check in be_lancer_xmit_workarounds() RDMA/mlx4: Make check for invalid flags stricter drm/msm: Fix IS_ERR_OR_NULL() vs NULL check in a5xx_submit_in_rb() ASoC: fsl_spdif: Silence output on stop block: Fix a source code comment in include/uapi/linux/blkzoned.h dm raid: fix missing reconfig_mutex unlock in raid_ctr() error paths ata: pata_ns87415: mark ns87560_tf_read static ring-buffer: Fix wrong stat of cpu_buffer->read tracing: Fix warning in trace_buffered_event_disable() USB: serial: option: support Quectel EM060K_128 USB: serial: option: add Quectel EC200A module support USB: serial: simple: add Kaufmann RKS+CAN VCP USB: serial: simple: sort driver entries can: gs_usb: gs_can_close(): add missing set of CAN state to CAN_STATE_STOPPED Revert "usb: dwc3: core: Enable AutoRetry feature in the controller" usb: dwc3: pci: skip BYT GPIO lookup table for hardwired phy usb: dwc3: don't reset device side if dwc3 was configured as host-only usb: ohci-at91: Fix the unhandle interrupt when resume USB: quirks: add quirk for Focusrite Scarlett usb: xhci-mtk: set the dma max_seg_size Documentation: security-bugs.rst: update preferences when dealing with the linux-distros group Documentation: security-bugs.rst: clarify CVE handling staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext() hwmon: (nct7802) Fix for temp6 (PECI1) processed even if PECI1 disabled btrfs: check for commit error at btrfs_attach_transaction_barrier() tpm_tis: Explicitly check for error code irq-bcm6345-l1: Do not assume a fixed block to cpu mapping serial: 8250_dw: split Synopsys DesignWare 8250 common functions serial: 8250_dw: Preserve original value of DLF register virtio-net: fix race between set queues and probe s390/dasd: fix hanging device after quiesce/resume ASoC: wm8904: Fill the cache for WM8904_ADC_TEST_0 register dm cache policy smq: ensure IO doesn't prevent cleaner policy progress drm/client: Fix memory leak in drm_client_target_cloned net/sched: cls_fw: Fix improper refcount update leads to use-after-free net/sched: sch_qfq: account for stab overhead in qfq_enqueue ASoC: cs42l51: fix driver to properly autoload with automatic module loading net/sched: cls_u32: Fix reference counter leak leading to overflow perf: Fix function pointer case loop: Select I/O scheduler 'none' from inside add_disk() word-at-a-time: use the same return type for has_zero regardless of endianness KVM: s390: fix sthyi error handling net/mlx5e: fix return value check in mlx5e_ipsec_remove_trailer() perf test uprobe_from_different_cu: Skip if there is no gcc net: sched: cls_u32: Fix match key mis-addressing net: add missing data-race annotations around sk->sk_peek_off net: add missing data-race annotation for sk_ll_usec net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free ip6mr: Fix skb_under_panic in ip6mr_cache_report() tcp_metrics: fix addr_same() helper tcp_metrics: annotate data-races around tm->tcpm_stamp tcp_metrics: annotate data-races around tm->tcpm_lock tcp_metrics: annotate data-races around tm->tcpm_vals[] tcp_metrics: annotate data-races around tm->tcpm_net tcp_metrics: fix data-race in tcpm_suck_dst() vs fastopen scsi: zfcp: Defer fc_rport blocking until after ADISC response libceph: fix potential hang in ceph_osdc_notify() USB: zaurus: Add ID for A-300/B-500/C-700 fs/sysv: Null check to prevent null-ptr-deref bug Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb ext2: Drop fragment support test_firmware: fix a memory leak with reqs buffer test_firmware: return ENOMEM instead of ENOSPC on failed memory allocation mtd: rawnand: omap_elm: Fix incorrect type in assignment powerpc/mm/altmap: Fix altmap boundary check PM / wakeirq: support enabling wake-up irq after runtime_suspend called PM: sleep: wakeirq: fix wake irq arming ARM: dts: imx6sll: Make ssi node name same as other platforms ARM: dts: imx: add usb alias ARM: dts: imx6sll: fixup of operating points ARM: dts: nxp/imx6sll: fix wrong property name in usbphy node drivers core: Use sysfs_emit and sysfs_emit_at for show(device *...) functions arm64: dts: stratix10: fix incorrect I2C property for SCL signal drm/edid: fix objtool warning in drm_cvt_modes() Linux 4.19.291 Change-Id: I4f78e25efd18415989ecf5e227a17e05b0d6386c Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-08-25 11:24:56 +00:00
Kees Cook	b7e389235c	treewide: Remove uninitialized_var() usage commit 3f649ab728cda8038259d8f14492fe400fbab911 upstream. Using uninitialized_var() is dangerous as it papers over real bugs[1] (or can in the future), and suppresses unrelated compiler warnings (e.g. "unused variable"). If the compiler thinks it is uninitialized, either simply initialize the variable or make compiler changes. In preparation for removing[2] the[3] macro[4], remove all remaining needless uses with the following script: git grep '\buninitialized_var\b' \| cut -d: -f1 \| sort -u \| \ xargs perl -pi -e \ 's/\buninitialized_var$([^$]+)\)/\1/g; s:\s/\ (GCC be quiet\|to make compiler happy) \*/$::g;' drivers/video/fbdev/riva/riva_hw.c was manually tweaked to avoid pathological white-space. No outstanding warnings were found building allmodconfig with GCC 9.3.0 for x86_64, i386, arm64, arm, powerpc, powerpc64le, s390x, mips, sparc64, alpha, and m68k. [1] https://lore.kernel.org/lkml/20200603174714.192027-1-glider@google.com/ [2] https://lore.kernel.org/lkml/CA+55aFw+Vbj0i=1TGqCR5vQkCzWJ0QxK6CernOU6eedsudAixw@mail.gmail.com/ [3] https://lore.kernel.org/lkml/CA+55aFwgbgqhbp1fkxvRKEpzyR5J8n1vKT1VZdz9knmPuXhOeg@mail.gmail.com/ [4] https://lore.kernel.org/lkml/CA+55aFz2500WfbKXAx8s67wrm9=yVJu65TpLgN_ybYNv0VEOKA@mail.gmail.com/ Reviewed-by: Leon Romanovsky <leonro@mellanox.com> # drivers/infiniband and mlx4/mlx5 Acked-by: Jason Gunthorpe <jgg@mellanox.com> # IB Acked-by: Kalle Valo <kvalo@codeaurora.org> # wireless drivers Reviewed-by: Chao Yu <yuchao0@huawei.com> # erofs Signed-off-by: Kees Cook <keescook@chromium.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-08-11 11:45:01 +02:00
Wilson Sung	63376759a1	Merge android-4.19-stable (4.19.272) into android-msm-pixel-4.19-lts Merge 4.19.272 into android-4.19-stable Linux 4.19.272 * usb: host: xhci-plat: add wakeup entry at sysfs drivers/usb/host/xhci-plat.c * ipv6: ensure sane device mtu in tunnels net/ipv6/ip6_tunnel.c net/ipv6/sit.c * exit: Use READ_ONCE() for all oops/warn limit reads kernel/exit.c kernel/panic.c docs: Fix path paste-o for /sys/kernel/warn_count * panic: Expose "warn_count" to sysfs kernel/panic.c * panic: Introduce warn_limit kernel/panic.c * panic: Consolidate open-coded panic_on_warn checks include/linux/kernel.h kernel/panic.c kernel/sched/core.c * exit: Allow oops_limit to be disabled kernel/exit.c * exit: Expose "oops_count" to sysfs kernel/exit.c * exit: Put an upper limit on how often we can oops kernel/exit.c ia64: make IA64_MCA_RECOVERY bool instead of tristate h8300: Fix build errors from do_exit() to make_task_dead() transition hexagon: Fix function name in die() objtool: Add a missing comma to avoid string concatenation * exit: Add and use make_task_dead. arch/arm64/kernel/traps.c arch/arm64/mm/fault.c include/linux/sched/task.h kernel/exit.c * panic: unset panic_on_warn inside panic() kernel/panic.c * sysctl: add a new register_sysctl_init() interface fs/proc/proc_sysctl.c include/linux/sysctl.h dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init ARM: dts: imx: Fix pca9547 i2c-mux node name x86/entry/64: Add instruction suffix to SYSRET x86/asm: Fix an assembler warning with current binutils drm/i915/display: fix compiler warning about array overrun x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL Revert "Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode" net/tg3: resolve deadlock in tg3_reset_task() during EEH net: ravb: Fix possible hang if RIS2_QFF1 happen * sctp: fail if no bound addresses can be used for a given scope net/sctp/bind_addr.c netrom: Fix use-after-free of a listening socket. * netfilter: conntrack: fix vtag checks for ABORT/SHUTDOWN_COMPLETE net/netfilter/nf_conntrack_proto_sctp.c * ipv4: prevent potential spectre v1 gadget in ip_metrics_convert() net/ipv4/metrics.c * netlink: annotate data races around sk_state net/netlink/af_netlink.c * netlink: annotate data races around dst_portid and dst_group net/netlink/af_netlink.c * netlink: annotate data races around nlk->portid net/netlink/af_netlink.c * netlink: remove hash::nelems check in netlink_insert net/netlink/af_netlink.c netfilter: nft_set_rbtree: skip elements in transaction from garbage collection * net: fix UaF in netns ops registration error path net/core/net_namespace.c * EDAC/device: Respect any driver-supplied workqueue polling value drivers/edac/edac_device.c ARM: 9280/1: mm: fix warning on phys_addr_t to void pointer assignment cifs: Fix oops due to uncleared server->smbd_conn in reconnect smbd: Make upper layer decide when to destroy the transport trace_events_hist: add check for return value of 'create_hist_field' * tracing: Make sure trace_printk() can output as soon as it can be used kernel/trace/trace.c kernel/trace/trace.h kernel/trace/trace_output.c * module: Don't wait for GOING modules kernel/module.c scsi: hpsa: Fix allocation size for scsi_host_alloc() * Bluetooth: hci_sync: cancel cmd_timer if hci_open failed net/bluetooth/hci_core.c fs: reiserfs: remove useless new_opts in reiserfs_remount perf env: Do not return pointers to local variables * block: fix and cleanup bio_check_ro block/blk-core.c * netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state net/netfilter/nf_conntrack_proto_tcp.c w1: fix WARNING after calling w1_process() w1: fix deadloop in __w1_remove_master_device() * tcp: avoid the lookup process failing to get sk in ehash table net/ipv4/inet_hashtables.c net/ipv4/inet_timewait_sock.c dmaengine: xilinx_dma: call of_node_put() when breaking out of for_each_child_of_node() dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling dmaengine: xilinx_dma: program hardware supported buffer length dmaengine: xilinx_dma: commonize DMA copy size calculation HID: betop: check shape of output reports net: macb: fix PTP TX timestamp failure due to packet padding * dmaengine: Fix double increment of client_count in dma_chan_get() drivers/dma/dmaengine.c net: mlx5: eliminate anonymous module_init & module_exit * usb: gadget: f_fs: Ensure ep0req is dequeued before free_request drivers/usb/gadget/function/f_fs.c * usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait drivers/usb/gadget/function/f_fs.c * HID: check empty report_list in hid_validate_values() drivers/hid/hid-core.c * net: mdio: validate parameter addr in mdiobus_get_phy() drivers/net/phy/mdio_bus.c net: usb: sr9700: Handle negative len wifi: rndis_wlan: Prevent buffer overflow in rndis_query_oid net: nfc: Fix use-after-free in local_cleanup() phy: rockchip-inno-usb2: Fix missing clk_disable_unprepare() in rockchip_usb2phy_power_on() * bpf: Fix pointer-leak due to insufficient speculative store bypass mitigation kernel/bpf/verifier.c amd-xgbe: Delay AN timeout during KR training amd-xgbe: TX Flow Ctrl Registers are h/w ver dependent affs: initialize fsdata in affs_truncate() IB/hfi1: Fix expected receive setup error exit issues IB/hfi1: Reserve user expected TIDs IB/hfi1: Reject a zero-length user expected buffer tomoyo: fix broken dependency on .conf.default EDAC/highbank: Fix memory leak in highbank_mc_probe() HID: intel_ish-hid: Add check for ishtp_dma_tx_map ARM: dts: imx6qdl-gw560x: Remove incorrect 'uart-has-rtscts' UPSTREAM: tcp: fix tcp_rmem documentation UPSTREAM: nvmem: core: skip child nodes not matching binding drivers/nvmem/core.c * BACKPORT: nvmem: core: Fix a resource leak on error in nvmem_add_cells_from_of() drivers/nvmem/core.c * UPSTREAM: sched/eas: Don't update misfit status if the task is pinned kernel/sched/fair.c * BACKPORT: arm64: link with -z norelro for LLD or aarch64-elf arch/arm64/Makefile * UPSTREAM: driver: core: Fix list corruption after device_del() drivers/base/core.c * UPSTREAM: coresight: tmc-etr: Fix barrier packet insertion for perf buffer drivers/hwtracing/coresight/coresight-tmc-etr.c * UPSTREAM: f2fs: fix double free of unicode map fs/f2fs/super.c * BACKPORT: net: xfrm: fix memory leak in xfrm_user_policy() net/xfrm/xfrm_state.c UPSTREAM: xfrm/compat: Don't allocate memory with __GFP_ZERO UPSTREAM: xfrm/compat: memset(0) 64-bit padding at right place UPSTREAM: xfrm/compat: Translate by copying XFRMA_UNSPEC attribute * UPSTREAM: scsi: ufs: Fix missing brace warning for old compilers drivers/scsi/ufs/ufshcd-crypto.c * UPSTREAM: arm64: vdso32: make vdso32 install conditional arch/arm64/Makefile * UPSTREAM: loop: unset GENHD_FL_NO_PART_SCAN on LOOP_CONFIGURE drivers/block/loop.c BACKPORT: drm/virtio: fix missing dma_fence_put() in virtio_gpu_execbuffer_ioctl() * BACKPORT: sched/uclamp: Protect uclamp fast path code with static key kernel/sched/core.c kernel/sched/cpufreq_schedutil.c kernel/sched/sched.h * BACKPORT: sched/uclamp: Fix initialization of struct uclamp_rq kernel/sched/core.c * UPSTREAM: coresight: etmv4: Fix CPU power management setup in probe() function drivers/hwtracing/coresight/coresight-etm4x.c * UPSTREAM: arm64: vdso: Add --eh-frame-hdr to ldflags arch/arm64/kernel/vdso/Makefile * BACKPORT: arm64: vdso: Add '-Bsymbolic' to ldflags arch/arm64/kernel/vdso/Makefile UPSTREAM: drm/virtio: fix a wait_event condition * BACKPORT: sched/topology: Don't try to build empty sched domains kernel/cgroup/cpuset.c kernel/sched/topology.c * BACKPORT: binder: prevent UAF read in print_binder_transaction_log_entry() drivers/android/binder.c drivers/android/binder_internal.h * BACKPORT: copy_process(): don't use ksys_close() on cleanups kernel/fork.c * BACKPORT: arm64: vdso: Remove unnecessary asm-offsets.c definitions arch/arm64/kernel/asm-offsets.c * UPSTREAM: locking/lockdep, cpu/hotplug: Annotate AP thread kernel/cpu.c * Revert "xhci: Add a flag to disable USB3 lpm on a xhci root port level." drivers/usb/host/xhci.c drivers/usb/host/xhci.h Merge 4.19.271 into android-4.19-stable BACKPORT: mac80211_hwsim: add concurrent channels scanning support over virtio * BACKPORT: mac80211_hwsim: add frame transmission support over virtio This allows communication with external entities. include/uapi/linux/virtio_ids.h * BACKPORT: driver core: Skip unnecessary work when device doesn't have sync_state() drivers/base/core.c Linux 4.19.271 x86/fpu: Use _Alignof to avoid undefined behavior in TYPE_ALIGN * Revert "ext4: generalize extents status tree search functions" fs/ext4/ext4.h fs/ext4/extents.c fs/ext4/extents_status.c fs/ext4/extents_status.h fs/ext4/inode.c include/trace/events/ext4.h * Revert "ext4: add new pending reservation mechanism" fs/ext4/ext4.h fs/ext4/extents_status.c fs/ext4/extents_status.h fs/ext4/super.c * Revert "ext4: fix reserved cluster accounting at delayed write time" fs/ext4/ext4.h fs/ext4/extents.c fs/ext4/extents_status.c fs/ext4/extents_status.h fs/ext4/inode.c include/trace/events/ext4.h * Revert "ext4: fix delayed allocation bug in ext4_clu_mapped for bigalloc + inline" fs/ext4/extents.c gsmi: fix null-deref in gsmi_get_variable serial: atmel: fix incorrect baudrate setup serial: pch_uart: Pass correct sg to dma_unmap_sg() usb-storage: apply IGNORE_UAS only for HIKSEMI MD202 on RTL9210 * usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate() drivers/usb/gadget/function/f_ncm.c usb: gadget: g_webcam: Send color matching descriptor per frame usb: typec: altmodes/displayport: Fix pin assignment calculation usb: typec: altmodes/displayport: Add pin assignment helper usb: host: ehci-fsl: Fix module alias USB: serial: cp210x: add SCALANCE LPE-9000 device id cifs: do not include page data when checking signature mmc: sunxi-mmc: Fix clock refcount imbalance during unbind comedi: adv_pci1760: Fix PWM instruction handling * usb: core: hub: disable autosuspend for TI TUSB8041 drivers/usb/core/hub.c USB: misc: iowarrior: fix up header size for USB_DEVICE_ID_CODEMERCS_IOW100 USB: serial: option: add Quectel EM05CN modem USB: serial: option: add Quectel EM05CN (SG) modem USB: serial: option: add Quectel EC200U modem USB: serial: option: add Quectel EM05-G (RS) modem USB: serial: option: add Quectel EM05-G (CS) modem USB: serial: option: add Quectel EM05-G (GR) modem * prlimit: do_prlimit needs to have a speculation check kernel/sys.c * xhci: Add a flag to disable USB3 lpm on a xhci root port level. drivers/usb/host/xhci.c drivers/usb/host/xhci.h * xhci: Fix null pointer dereference when host dies drivers/usb/host/xhci.c * usb: xhci: Check endpoint is valid before dereferencing it drivers/usb/host/xhci-ring.c * xhci-pci: set the dma max_seg_size drivers/usb/host/xhci-pci.c nilfs2: fix general protection fault in nilfs_btree_insert() Add exception protection processing for vd in axi_chan_handle_err function * f2fs: let's avoid panic if extent_tree is not created fs/f2fs/extent_cache.c RDMA/srp: Move large values to a new enum for gcc13 * net/ethtool/ioctl: return -EOPNOTSUPP if we have no phy stats net/core/ethtool.c pNFS/filelayout: Fix coalescing test for single DS * ANDROID: usb: f_accessory: Check buffer size when initialised via composite drivers/usb/gadget/configfs.c drivers/usb/gadget/function/f_accessory.c Merge 4.19.270 into android-4.19-stable Linux 4.19.270 serial: tegra: Change lower tolerance baud rate limit for tegra20 and tegra30 serial: tegra: Only print FIFO error message when an error occurs tty: serial: tegra: Handle RX transfer in PIO mode if DMA wasn't started Revert "usb: ulpi: defer ulpi_register on ulpi_read_id timeout" efi: fix NULL-deref in init error path * arm64: cmpxchg_double: hazard against entire exchange variable arch/arm64/include/asm/atomic_ll_sc.h arch/arm64/include/asm/atomic_lse.h drm/virtio: Fix GEM handle creation UAF x86/resctrl: Fix task CLOSID/RMID update race x86/resctrl: Use task_curr() instead of task_struct->on_cpu to prevent unnecessary IPI iommu/mediatek-v1: Fix an error handling path in mtk_iommu_v1_probe() iommu/mediatek-v1: Add error handle for mtk_iommu_probe net/mlx5: Fix ptp max frequency adjustment range net/mlx5: Rename ptp clock info nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame() hvc/xen: lock console list traversal regulator: da9211: Use irq handler when ready EDAC/device: Fix period calculation in edac_device_reset_delay_period() drivers/edac/edac_device.c drivers/edac/edac_module.h x86/boot: Avoid using Intel mnemonics in AT&T syntax asm netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function. * ext4: fix delayed allocation bug in ext4_clu_mapped for bigalloc + inline fs/ext4/exten Conflicts: drivers/edac/edac_device.c drivers/hwtracing/coresight/coresight-etm4x.c drivers/usb/core/hub.c drivers/usb/gadget/function/f_fs.c drivers/usb/gadget/function/f_hid.c kernel/panic.c mm/kasan/report.cts.c * ext4: fix reserved cluster accounting at delayed write time fs/ext4/ext4.h fs/ext4/extents.c fs/ext4/extents_status.c fs/ext4/extents_status.h fs/ext4/inode.c include/trace/events/ext4.h * ext4: add new pending reservation mechanism fs/ext4/ext4.h fs/ext4/extents_status.c fs/ext4/extents_status.h fs/ext4/super.c * ext4: generalize extents status tree search functions fs/ext4/ext4.h fs/ext4/extents.c fs/ext4/extents_status.c fs/ext4/extents_status.h fs/ext4/inode.c include/trace/events/ext4.h * ext4: fix uninititialized value in 'ext4_evict_inode' fs/ext4/super.c * ext4: fix use-after-free in ext4_orphan_cleanup fs/ext4/inode.c * ext4: lost matching-pair of trace in ext4_truncate fs/ext4/inode.c * ext4: fix bug_on in __es_tree_search caused by bad quota inode fs/quota/dquot.c * quota: Factor out setup of quota inode fs/quota/dquot.c include/linux/quotaops.h usb: ulpi: defer ulpi_register on ulpi_read_id timeout kest.pl: Fix grub2 menu handling for rebooting ktest.pl: Fix incorrect reboot for grub2bls ktest: introduce grub2bls REBOOT_TYPE option ktest: cleanup get_grub_index ktest: introduce _get_grub_index ktest: Add support for meta characters in GRUB_MENU ALSA: hda/hdmi: fix failures at PCM open on Intel ICL and later wifi: wilc1000: sdio: fix module autoloading * ipv6: raw: Deduct extension header length in rawv6_push_pending_frames net/ipv6/raw.c platform/x86: sony-laptop: Don't turn off 0x153 keyboard backlight during probe cifs: Fix uninitialized memory read for smb311 posix symlink create * ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF sound/core/control_compat.c * net/ulp: prevent ULP without clone op from entering the LISTEN status net/ipv4/inet_connection_sock.c s390/percpu: add READ_ONCE() to arch_this_cpu_to_op_simple() perf auxtrace: Fix address filter duplicate symbol selection docs: Fix the docs build with Sphinx 6.0 * net: sched: disallow noqueue for qdisc classes net/sched/sch_api.c * driver core: Fix bus_type.match() error handling in __driver_attach() drivers/base/dd.c parisc: Align parisc MADV_XXX constants with all other architectures * mbcache: Avoid nesting of cache->c_list_lock under bit locks fs/mbcache.c hfs/hfsplus: avoid WARN_ON() for sanity check, use proper error handling hfs/hfsplus: use WARN_ON for sanity check * ext4: don't allow journal inode to have encrypt flag fs/ext4/super.c riscv: uaccess: fix type of 0 variable on error in get_user() nfsd: fix handling of readdir in v4root vs. mount upcall timeout x86/bugs: Flush IBP in ib_prctl_set() ASoC: Intel: bytcr_rt5640: Add quirk for the Advantech MICA-071 tablet udf: Fix extension of the last extent in the file caif: fix memory leak in cfctrl_linkup_request() usb: rndis_host: Secure rndis_query check against int overflow net: sched: atm: dont intepret cls results when asked to drop RDMA/mlx5: Fix validation of max_rd_atomic caps for DC net: phy: xgmiitorgmii: Fix refcount leak in xgmiitorgmii_probe net: amd-xgbe: add missed tasklet_kill nfc: Fix potential resource leaks qlcnic: prevent ->dcb use-after-free on qlcnic_dcb_enable() failure * bpf: pull before calling skb_postpull_rcsum() net/core/filter.c * SUNRPC: ensure the matching upcall is in-flight upon downcall include/linux/sunrpc/rpc_pipe_fs.h * ext4: fix deadlock due to mbcache entry corruption fs/ext4/xattr.c fs/mbcache.c include/linux/mbcache.h * mbcache: automatically delete entries from cache on freeing fs/mbcache.c include/linux/mbcache.h * ext4: fix race when reusing xattr blocks fs/ext4/xattr.c * ext4: unindent codeblock in ext4_xattr_block_set() fs/ext4/xattr.c * ext4: remove EA inode entry from mbcache on inode eviction fs/ext4/inode.c fs/ext4/xattr.c fs/ext4/xattr.h * mbcache: add functions to delete entry if unused fs/mbcache.c include/linux/mbcache.h * mbcache: don't reclaim used entries fs/mbcache.c * ext4: use kmemdup() to replace kmalloc + memcpy fs/ext4/xattr.c * ext4: correct inconsistent error msg in nojournal mode fs/ext4/super.c * ext4: goto right label 'failed_mount3a' fs/ext4/super.c * driver core: Set deferred_probe_timeout to a longer default if CONFIG_MODULES is set drivers/base/dd.c ravb: Fix "failed to switch device to config mode" message during unbind perf probe: Fix to get the DW_AT_decl_file and DW_AT_call_file as unsinged data perf probe: Use dwarf_attr_integrate as generic DWARF attr accessor dm thin: resume even if in FAIL mode media: s5p-mfc: Fix in register read and write for H264 media: s5p-mfc: Clear workbit to handle error condition media: s5p-mfc: Fix to handle reference queue during finishing btrfs: replace strncpy() with strscpy() btrfs: send: avoid unnecessary backref lookups when finding clone source * ext4: allocate extended attribute value in vmalloc area fs/ext4/xattr.c * ext4: avoid unaccounted block allocation when expanding inode fs/ext4/inode.c * ext4: initialize quota before expanding inode in setproject ioctl fs/ext4/ioctl.c * ext4: fix inode leak in ext4_xattr_inode_create() on an error path fs/ext4/xattr.c * ext4: avoid BUG_ON when creating xattrs fs/ext4/xattr.c * ext4: fix error code return to user-space in ext4_get_branch() fs/ext4/indirect.c * ext4: fix corruption when online resizing a 1K bigalloc fs fs/ext4/resize.c * ext4: init quota for 'old.inode' in 'ext4_rename' fs/ext4/namei.c * ext4: fix bug_on in __es_tree_search caused by bad boot loader inode fs/ext4/ioctl.c * ext4: add helper to check quota inums fs/ext4/super.c * ext4: fix undefined behavior in bit shift for ext4_check_flag_values fs/ext4/ext4.h * ext4: add inode table check in __ext4_get_inode_loc to aovid possible infinite loop fs/ext4/inode.c drm/vmwgfx: Validate the box size for the snooped cursor * drm/connector: send hotplug uevent on connector cleanup drivers/gpu/drm/drm_connector.c device_cgroup: Roll back to original exceptions after copy failure parisc: led: Fix potential null-ptr-deref in start_task() iommu/amd: Fix ivrs_acpihid cmdline parsing code crypto: n2 - add missing hash statesize * PCI/sysfs: Fix double free in error path drivers/pci/pci-sysfs.c * PCI: Fix pci_device_is_present() for VFs by checking PF drivers/pci/pci.c ipmi: fix use after free in _ipmi_destroy_user() ima: Fix a potential NULL pointer access in ima_restore_measurement_list ipmi: fix long wait in unload when IPMI disconnect md/bitmap: Fix bitmap chunk size overflow issues cifs: fix confusing debug message media: dvb-core: Fix UAF due to refcount races at releasing media: dvb-core: Fix double free in dvb_register_device() ARM: 9256/1: NWFPE: avoid compiler-generated __aeabi_uldivmod * tracing: Fix infinite loop in tracing_read_pipe on overflowed print_trace_line kernel/trace/trace.c x86/microcode/intel: Do not retry microcode reloading on the APs dm cache: set needs_check flag after aborting metadata dm cache: Fix UAF in destroy() dm thin: Fix UAF in run_timer_softirq() dm thin: Use last transaction's pmd->root when commit failed dm cache: Fix ABBA deadlock between shrink_slab and dm_cache_metadata_abort binfmt: Fix error return code in load_elf_fdpic_binary() binfmt: Move install_exec_creds after setup_new_exec to match binfmt_elf selftests: Use optional USERCFLAGS and USERLDFLAGS ARM: ux500: do not directly dereference __iomem ktest.pl minconfig: Unset configs instead of just removing them * soc: qcom: Select REMAP_MMIO for LLCC driver drivers/soc/qcom/Kconfig media: stv0288: use explicitly signed char SUNRPC: Don't leak netobj memory when gss_read_proxy_verf() fails tpm: tpm_tis: Add the missed acpi_put_table() to fix memory leak tpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak mmc: vub300: fix warning - do not call blocking ops when !TASK_RUNNING md: fix a crash in mempool_free * pnode: terminate at peers of source fs/pnode.c ALSA: line6: fix stack overflow in line6_midi_transmit ALSA: line6: correct midi status byte when receiving data from podxt * ovl: Use ovl mounter's fsuid and fsgid in ovl_link() fs/overlayfs/dir.c hfsplus: fix bug causing custom uid and gid being unable to be assigned with mount * HID: plantronics: Additional PIDs for double volume key presses quirk drivers/hid/hid-ids.h drivers/hid/hid-plantronics.c powerpc/rtas: avoid scheduling in rtas_os_term() powerpc/rtas: avoid device tree lookups in rtas_os_term() ata: ahci: Fix PCS quirk application for suspend media: dvbdev: fix refcnt bug * media: dvbdev: fix build warning due to comments include/media/dvbdev.h gcov: add support for checksum field iio: adc: ad_sigma_delta: do not use internal iio_dev lock reiserfs: Add missing calls to reiserfs_security_free() * HID: wacom: Ensure bootloader PID is usable in hidraw mode drivers/hid/wacom_sys.c drivers/hid/wacom_wac.c drivers/hid/wacom_wac.h * usb: dwc3: core: defer probe on ulpi_read_id timeout drivers/usb/dwc3/core.c * pstore: Make sure CONFIG_PSTORE_PMSG selects CONFIG_RT_MUTEXES fs/pstore/Kconfig * pstore: Switch pmsg_lock to an rt_mutex to avoid priority inversion fs/pstore/pmsg.c ASoC: rt5670: Remove unbalanced pm_runtime_put() ASoC: rockchip: spdif: Add missing clk_disable_unprepare() in rk_spdif_runtime_resume() ASoC: wm8994: Fix potential deadlock ASoC: rockchip: pdm: Add missing clk_disable_unprepare() in rockchip_pdm_runtime_resume() ASoC: mediatek: mt8173-rt5650-rt5514: fix refcount leak in mt8173_rt5650_rt5514_dev_probe() orangefs: Fix kmemleak in orangefs_prepare_debugfs_help_string() drm/sti: Fix return type of sti_{dvo,hda,hdmi}_connector_mode_valid() drm/fsl-dcu: Fix return type of fsl_dcu_drm_connector_mode_valid() clk: st: Fix memory leak in st_of_quadfs_setup() media: si470x: Fix use-after-free in si470x_int_in_callback() mmc: f-sdh30: Add quirks for broken timeout clock capability * regulator: core: fix use_count leakage when handling boot-on drivers/regulator/core.c * blk-mq: fix possible memleak when register 'hctx' failed block/blk-mq-sysfs.c media: dvb-usb: fix memory leak in dvb_usb_adapter_init() * media: dvbdev: adopts refcnt to avoid UAF include/media/dvbdev.h media: dvb-frontends: fix leak of memory fw * ppp: associate skb with a device at tx drivers/net/ppp/ppp_generic.c * mrp: introduce active flags to prevent UAF when applicant uninit include/net/mrp.h md/raid1: stop mdx_raid1 thread when raid1 array run failed drivers/md/md-bitmap: check the return value of md_bitmap_get_counter() drm/sti: Use drm_mode_copy() s390/lcs: Fix return type of lcs_start_xmit() s390/netiucv: Fix return type of netiucv_tx() s390/ctcm: Fix return type of ctc{mp,}m_tx() drm/amdgpu: Fix type of second parameter in trans_msg() callback igb: Do not free q_vector unless new one was allocated wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmf_fw_alloc_request() hamradio: baycom_epp: Fix return type of baycom_send_packet() net: ethernet: ti: Fix return type of netcp_ndo_start_xmit() * bpf: make sure skb->len != 0 when redirecting to a tunneling device net/core/filter.c ipmi: fix memleak when unload ipmi driver ASoC: codecs: rt298: Add quirk for KBL-R RVP platform wifi: ar5523: Fix use-after-free on ar5523_cmd() timed out wifi: ath9k: verify the expected usb_endpoints are present hfs: fix OOB Read in __hfs_brec_find acct: fix potential integer overflow in encode_comp_t() nilfs2: fix shift-out-of-bounds/overflow in nilfs_sb2_bad_offset() ACPICA: Fix error code path in acpi_ds_call_control_method() fs: jfs: fix shift-out-of-bounds in dbDiscardAG udf: Avoid double brelse() in udf_rename() fs: jfs: fix shift-out-of-bounds in dbAllocAG binfmt_misc: fix shift-out-of-bounds in check_special_flags * net: stream: purge sk_error_queue in sk_stream_kill_queues() net/core/stream.c myri10ge: Fix an error handling path in myri10ge_probe() rxrpc: Fix missing unlock in rxrpc_do_sendmsg() * net_sched: reject TCF_EM_SIMPLE case for complex ematch module net/sched/ematch.c * skbuff: Account for tail adjustment during pull operations net/core/skbuff.c openvswitch: Fix flow lookup to use unmasked key rtc: mxc_v2: Add missing clk_disable_unprepare() r6040: Fix kmemleak in probe and remove nfc: pn533: Clear nfc_target before being used mISDN: hfcmulti: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() mISDN: hfcpci: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() mISDN: hfcsusb: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() nfsd: under NFSv4.1, fix double svc_xprt_put on rpc_create failure rtc: st-lpc: Add missing clk_disable_unprepare in st_rtc_probe() selftests/powerpc: Fix resource leaks powerpc/hv-gpci: Fix hv_gpci event list powerpc/83xx/mpc832x_rdb: call platform_device_put() in error case in of_fsl_spi_probe() powerpc/perf: callchain validate kernel stack pointer bounds powerpc/xive: add missing iounmap() in error path in xive_spapr_populate_irq_data() cxl: Fix refcount leak in cxl_calc_capp_routing powerpc/52xx: Fix a resource leak in an error handling path macintosh/macio-adb: check the return value of ioremap() macintosh: fix possible memory leak in macio_add_one_device() iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe() iommu/amd: Fix pci device refcount leak in ppr_notifier() rtc: snvs: Allow a time difference on clock register read * include/uapi/linux/swab: Fix potentially missing __always_inline include/uapi/linux/swab.h HSI: omap_ssi_core: Fix error handling in ssi_init() perf symbol: correction while adjusting symbol * power: supply: fix residue sysfs file in error handle route of __power_supply_register() drivers/power/supply/power_supply_core.c HSI: omap_ssi_core: fix possible memory leak in ssi_probe() HSI: omap_ssi_core: fix unbalanced pm_runtime_disable() fbdev: uvesafb: Fixes an error handling path in uvesafb_probe() fbdev: vermilion: decrease reference count in error path fbdev: via: Fix error in via_core_init() fbdev: pm2fb: fix missing pci_disable_device() * fbdev: ssd1307fb: Drop optional dependency drivers/video/fbdev/Kconfig samples: vfio-mdev: Fix missing pci_disable_device() in mdpy_fb_probe() tracing/hist: Fix issue of losting command info in error_log usb: storage: Add check for kcalloc i2c: ismt: Fix an out-of-bounds bug in ismt_access() vme: Fix error not catched in fake_init() staging: rtl8192e: Fix potential use-after-free in rtllib_rx_Monitor() staging: rtl8192u: Fix use after free in ieee80211_rx() i2c: pxa-pci: fix missing pci_disable_device() on error in ce4100_i2c_probe * chardev: fix error handling in cdev_device_add() fs/char_dev.c mcb: mcb-parse: fix error handing in chameleon_parse_gdd() drivers: mcb: fix resource leak in mcb_probe() * usb: gadget: f_hid: fix refcount leak on error path drivers/usb/gadget/function/f_hid.c * usb: gadget: f_hid: fix f_hidg lifetime vs cdev drivers/usb/gadget/function/f_hid.c * usb: gadget: f_hid: optional SETUP/SET_REPORT mode drivers/usb/gadget/function/f_hid.c drivers/usb/gadget/function/u_hid.h cxl: fix possible null-ptr-deref in cxl_pci_init_afu\|adapter() cxl: fix possible null-ptr-deref in cxl_guest_init_afu\|adapter() misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os misc: tifm: fix possible memory leak in tifm_7xx1_switch_media() test_firmware: fix memory leak in test_firmware_init() serial: sunsab: Fix error handling in sunsab_init() serial: altera_uart: fix locking in polling mode tty: serial: altera_uart_{r,t}x_chars() need only uart_port tty: serial: clean up stop-tx part in altera_uart_tx_chars() serial: pch: Fix PCI device refcount leak in pch_request_dma() serial: pl011: Do not clear RX FIFO & RX interrupt in unthrottle. serial: amba-pl011: avoid SBSA UART accessing DMACR register * usb: typec: Check for ops->exit instead of ops->enter in altmode_exit drivers/usb/typec/bus.c staging: vme_user: Fix possible UAF in tsi148_dma_list_add usb: fotg210-udc: Fix ages old endianness issues uio: uio_dmem_genirq: Fix deadlock between irq config and handling uio: uio_dmem_genirq: Fix missing unlock in irq configuration vfio: platform: Do not pass return buffer to ACPI _RST method * class: fix possible memory leak in __class_register() drivers/base/class.c serial: tegra: Read DMA status before terminating tty: serial: tegra: Activate RX DMA transfer by request serial: tegra: Add PIO mode support serial: tegra: report clk rate errors serial: tegra: add support to adjust baud rate serial: tegra: add support to use 8 bytes trigger serial: tegra: set maximum num of uart ports to 8 serial: tegra: check for FIFO mode enabled status serial: tegra: avoid reg access when clk disabled drivers: dio: fix possible memory leak in dio_init() IB/IPoIB: Fix queue count inconsistency for PKEY child interfaces hwrng: geode - Fix PCI device refcount leak hwrng: amd - Fix PCI device refcount leak crypto: img-hash - Fix variable dereferenced before check 'hdev->req' orangefs: Fix sysfs not cleanup when dev init failed RDMA/hfi1: Fix error return code in parse_platform_config() scsi: snic: Fix possible UAF in snic_tgt_create() scsi: fcoe: Fix transport not deattached when fcoe_if_init() fails scsi: ipr: Fix WARNING in ipr_init() scsi: fcoe: Fix possible name leak when device_register() fails scsi: hpsa: Fix possible memory leak in hpsa_add_sas_device() scsi: hpsa: Fix error handling in hpsa_add_sas_host() crypto: tcrypt - Fix multibuffer skcipher speed test mem leak scsi: hpsa: Fix possible memory leak in hpsa_init_one() scsi: hpsa: use local workqueues instead of system workqueues RDMA/rxe: Fix NULL-ptr-deref in rxe_qp_do_cleanup() when socket create failed crypto: ccree - Make cc_debugfs_global_fini() available for module init function RDMA/hfi: Decrease PCI device reference count in error path * PCI: Check for alloc failure in pci_request_irq() drivers/pci/irq.c scsi: scsi_debug: Fix a warning in resp_write_scat() RDMA/nldev: Return "-EAGAIN" if the cm_id isn't from expected port * f2fs: fix normal discard process fs/f2fs/segment.c apparmor: Fix abi check to include v8 abi apparmor: fix lockdep warning when removing a namespace apparmor: fix a memleak in multi_transaction_new() stmmac: fix potential division by 0 Bluetooth: RFCOMM: don't call kfree_skb() under spin_lock_irqsave() * Bluetooth: hci_core: don't call kfree_skb() under spin_lock_irqsave() net/bluetooth/hci_core.c Bluetooth: hci_bcsp: don't call kfree_skb() under spin_lock_irqsave() Bluetooth: hci_h5: don't call kfree_skb() under spin_lock_irqsave() Bluetooth: hci_qca: don't call kfree_skb() under spin_lock_irqsave() Bluetooth: btusb: don't call kfree_skb() under spin_lock_irqsave() ntb_netdev: Use dev_kfree_skb_any() in interrupt context net: lan9303: Fix read error execution path net: amd-xgbe: Check only the minimum speed for active/passive cables net: amd-xgbe: Fix logic around active and passive cables net: amd: lance: don't call dev_kfree_skb() under spin_lock_irqsave() hamradio: don't call dev_kfree_skb() under spin_lock_irqsave() net: ethernet: dnet: don't call dev_kfree_skb() under spin_lock_irqsave() net: emaclite: don't call dev_kfree_skb() under spin_lock_irqsave() net: apple: bmac: don't call dev_kfree_skb() under spin_lock_irqsave() net: apple: mace: don't call dev_kfree_skb() under spin_lock_irqsave() * net/tunnel: wait until all sk_user_data reader finish before releasing the sock net/ipv4/udp_tunnel.c net: farsync: Fix kmemleak when rmmods farsync ethernet: s2io: don't call dev_kfree_skb() under spin_lock_irqsave() drivers: net: qlcnic: Fix potential memory leak in qlcnic_sriov_init() net: defxx: Fix missing err handling in dfx_init() net: vmw_vsock: vmci: Check memcpy_from_msg() clk: socfpga: use clk_hw_register for a5/c5 clk: socfpga: clk-pll: Remove unused variable 'rc' * blktrace: Fix output non-blktrace event when blk_classic option enabled kernel/trace/blktrace.c wifi: brcmfmac: Fix error return code in brcmf_sdio_download_firmware() rtl8xxxu: add enumeration for channel bandwidth wifi: rtl8xxxu: Add __packed to struct rtl8723bu_c2h clk: samsung: Fix memory leak in _samsung_clk_register_pll() media: coda: Add check for kmalloc media: coda: Add check for dcoda_iram_alloc media: c8sectpfe: Add of_node_put() when breaking out of loop mmc: mmci: fix return value check of mmc_add_host() mmc: wbsd: fix return value check of mmc_add_host() mmc: via-sdmmc: fix return value check of mmc_add_host() mmc: meson-gx: fix return value check of mmc_add_host() mmc: atmel-mci: fix return value check of mmc_add_host() mmc: wmt-sdmmc: fix return value check of mmc_add_host() mmc: vub300: fix return value check of mmc_add_host() mmc: toshsd: fix return value check of mmc_add_host() mmc: rtsx_usb_sdmmc: fix return value check of mmc_add_host() mmc: mxcmmc: fix return value check of mmc_add_host() mmc: moxart: fix return value check of mmc_add_host() NFSv4.x: Fail client initialisation if state manager thread can't run SUNRPC: Fix missing release socket in rpc_sockname() ALSA: mts64: fix possible null-ptr-defer in snd_mts64_interrupt media: saa7164: fix missing pci_disable_device() * regulator: core: fix module refcount leak in set_supply() drivers/regulator/core.c * wifi: cfg80211: Fix not unregister reg_pdev when load_builtin_regdb_keys() fails net/wireless/reg.c * bonding: uninitialized variable in bond_miimon_inspect() drivers/net/bonding/bond_main.c ASoC: pcm512x: Fix PM disable depth imbalance in pcm512x_probe drm/amdgpu: Fix PCI device refcount leak in amdgpu_atrm_get_bios() drm/radeon: Fix PCI device refcount leak in radeon_atrm_get_bios() ALSA: asihpi: fix missing pci_disable_device() NFSv4: Fix a deadlock between nfs4_open_recover_helper() and delegreturn NFSv4.2: Fix a memory stomp in decode_attr_security_label drm/tegra: Add missing clk_disable_unprepare() in tegra_dc_probe() media: s5p-mfc: Add variant data for MFC v7 hardware for Exynos 3250 SoC media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() media: dvb-core: Fix ignored return value in dvb_register_frontend() * pinctrl: pinconf-generic: add missing of_node_put() drivers/pinctrl/pinconf-generic.c media: imon: fix a race condition in send_packet() drbd: remove call to memset before free device/resource/connection mtd: maps: pxa2xx-flash: fix memory leak in probe * bonding: Export skip slave logic to function drivers/net/bonding/bond_main.c clk: rockchip: Fix memory leak in rockchip_clk_register_pll() * ALSA: seq: fix undefined behavior in bit shift for SNDRV_SEQ_FILTER_USE_EVENT include/uapi/sound/asequencer.h HID: hid-sensor-custom: set fixed size for custom attributes media: platform: exynos4-is: Fix error handling in fimc_md_init() media: solo6x10: fix possible memory leak in solo_sysfs_init() Input: elants_i2c - properly handle the reset GPIO when power is off mtd: lpddr2_nvm: Fix possible null-ptr-deref wifi: ath10k: Fix return value in ath10k_pci_init() ima: Fix misuse of dereference of pointer in template_desc_init_fields() * regulator: core: fix unbalanced of node refcount in regulator_dev_lookup() drivers/regulator/core.c ASoC: pxa: fix null-pointer dereference in filter() drm/radeon: Add the missed acpi_put_table() to fix memory leak * net, proc: Provide PROC_FS=n fallback for proc_create_net_single_write() include/linux/proc_fs.h media: camss: Clean up received buffers on failed start of streaming wifi: rsi: Fix handling of 802.3 EAPOL frames sent via control port mtd: Fix device name leak when register device failed in add_mtd_device() media: vivid: fix compose size exceed boundary spi: Update reference to struct spi_controller can: kvaser_usb: Compare requested bittiming parameters with actual parameters in do_set_{,data}_bittiming can: kvaser_usb: Add struct kvaser_usb_busparams can: kvaser_usb_leaf: Fix bogus restart events can: kvaser_usb_leaf: Fix wrong CAN state after stopping can: kvaser_usb_leaf: Fix improved state not being reported can: kvaser_usb_leaf: Set Warning state even without bus errors can: kvaser_usb: kvaser_usb_leaf: Handle CMD_ERROR_EVENT can: kvaser_usb: kvaser_usb_leaf: Rename {leaf,usbcan}_cmd_error_event to {leaf,usbcan}_cmd_can_error_event can: kvaser_usb: kvaser_usb_leaf: Get capabilities from device can: kvaser_usb: do not increase tx statistics when sending error message frames media: i2c: ad5820: Fix error path pata_ipx4xx_cf: Fix unsigned comparison with less than zero wifi: rtl8xxxu: Fix reading the vendor of combo chips wifi: ath9k: hif_usb: Fix use-after-free in ath9k_hif_usb_reg_in_cb() wifi: ath9k: hif_usb: fix memory leak of urbs in ath9k_hif_usb_dealloc_tx_urbs() rapidio: devices: fix missing put_device in mport_cdev_open hfs: Fix OOB Write in hfs_asc2mac relay: fix type mismatch when allocating memory in relay_create_buf() * eventfd: change int to __u64 in eventfd_signal() ifndef CONFIG_EVENTFD include/linux/eventfd.h rapidio: fix possible UAF when kfifo_alloc() fails fs: sysv: Fix sysv_nblocks() returns wrong value MIPS: BCM63xx: Add check for NULL for clk in clk_enable platform/x86: mxm-wmi: fix memleak in mxm_wmi_call_mx[ds\|mx]() * PM: runtime: Do not call __rpm_callback() from rpm_idle() drivers/base/power/runtime.c * PM: runtime: Improve path in rpm_idle() when no callback drivers/base/power/runtime.c xen/privcmd: Fix a possible warning in privcmd_ioctl_mmap_resource() x86/xen: Fix memory leak in xen_init_lock_cpu() x86/xen: Fix memory leak in xen_smp_intr_init{_pv}() xen/events: only register debug interrupt for 2-level events uprobes/x86: Allow to probe a NOP instruction with 0x66 prefix ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage() clocksource/drivers/sh_cmt: Make sure channel clock supply is enabled rapidio: rio: fix possible name leak in rio_register_mport() rapidio: fix possible name leaks when rio_add_device() fails * debugfs: fix error when writing negative value to atomic_t debugfs file fs/debugfs/file.c include/linux/debugfs.h lib/notifier-error-inject: fix error when writing -errno to debugfs file * libfs: add DEFINE_SIMPLE_ATTRIBUTE_SIGNED for signed value fs/libfs.c include/linux/fs.h cpufreq: amd_freq_sensitivity: Add missing pci_dev_put() irqchip: gic-pm: Use pm_runtime_resume_and_get() in gic_probe() perf/x86/intel/uncore: Fix reference count leak in hswep_has_limit_sbox() PNP: fix name memory leak in pnp_alloc_dev() MIPS: vpe-cmp: fix possible memory leak while module exiting MIPS: vpe-mt: fix possible memory leak while module exiting ocfs2: fix memory leak in ocfs2_stack_glue_init() proc: fixup uptime selftest * timerqueue: Use rb_entry_safe() in timerqueue_getnext() include/linux/timerqueue.h * perf: Fix possible memleak in pmu_dev_alloc() kernel/events/core.c selftests/ftrace: event_triggers: wait longer for test_event_enable * fs: don't audit the capability check in simple_xattr_list() fs/xattr.c alpha: fix syscall entry in !AUDUT_SYSCALL case * cpuidle: dt: Return the correct numbers of parsed idle states drivers/cpuidle/dt_idle_states.c tpm/tpm_crb: Fix error message in __crb_relinquish_locality() * pstore: Avoid kcore oops by vmap()ing with VM_IOREMAP fs/pstore/ram_core.c ARM: mmp: fix timer_read delay * pstore/ram: Fix error return code in ramoops_probe() fs/pstore/ram.c ARM: dts: turris-omnia: Add switch port 6 node ARM: dts: turris-omnia: Add ethernet aliases ARM: dts: armada-39x: Fix assigned-addresses for every PCIe Root Port ARM: dts: armada-38x: Fix assigned-addresses for every PCIe Root Port ARM: dts: armada-375: Fix assigned-addresses for every PCIe Root Port ARM: dts: armada-xp: Fix assigned-addresses for every PCIe Root Port ARM: dts: armada-370: Fix assigned-addresses for every PCIe Root Port ARM: dts: dove: Fix assigned-addresses for every PCIe Root Port arm64: dts: mediatek: mt6797: Fix 26M oscillator unit name arm64: dts: mt2712-evb: Fix vproc fixed regulators unit names arm64: dts: mt2712e: Fix unit address for pinctrl node arm64: dts: mt2712e: Fix unit_address_vs_reg warning for oscillators perf: arm_dsu: Fix hotplug callback leak in dsu_pmu_init() soc: ti: smartreflex: Fix PM disable depth imbalance in omap_sr_probe arm: dts: spear600: Fix clcd interrupt drivers: soc: ti: knav_qmss_queue: Mark knav_acc_firmwares as static ARM: dts: qcom: apq8064: fix coresight compatible usb: musb: remove extra check in musb_gadget_vbus_draw * net: loopback: use NET_NAME_PREDICTABLE for name_assign_type drivers/net/loopback.c * Bluetooth: L2CAP: Fix u8 overflow net/bluetooth/l2cap_core.c igb: Initialize mailbox message for VF reset USB: serial: f81534: fix division by zero on line-speed change USB: serial: cp210x: add Kamstrup RF sniffer PIDs USB: serial: option: add Quectel EM05-G modem usb: gadget: uvc: Prevent buffer overflow in setup handler udf: Fix extending file within last block udf: Do not bother looking for prealloc extents if i_lenExtents matches i_size udf: Fix preallocation discarding at indirect extent boundary udf: Discard preallocation before extending file with a hole perf script python: Remove explicit shebang from tests/attr.c * ASoC: ops: Correct bounds check for second channel on SX controls sound/soc/soc-ops.c can: mcba_usb: Fix termination command argument * can: sja1000: fix size of OCR_MODE_MASK define include/linux/can/platform/sja1000.h pinctrl: meditatek: Startup with the IRQs disabled * ASoC: ops: Check bounds for second channel in snd_soc_put_volsw_sx() sound/soc/soc-ops.c nfp: fix use-after-free in area_cache_get() * block: unhash blkdev part inode when the part is deleted block/partition-generic.c mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths * mm/khugepaged: fix GUP-fast interaction by sending IPI include/asm-generic/tlb.h mm/memory.c ANDROID: Add more hvc devices for virtio-console. ANDROID: Add allowed symbols required from Qualcomm drivers * BACKPORT: lib: introduce copy_struct_from_user() helper include/linux/bitops.h include/linux/uaccess.h lib/strnlen_user.c lib/usercopy.c * ANDROID: fix BIT() redefinition include/linux/bits.h include/vdso/bits.h Bug: 268137599 Change-Id: I1ae5c7cfdd0387ced375d87341327c27bd3ae454 Signed-off-by: JohnnLee <johnnlee@google.com>	2023-02-20 03:23:16 +00:00
Greg Kroah-Hartman	c97f22d970	Merge 4.19.272 into android-4.19-stable Changes in 4.19.272 ARM: dts: imx6qdl-gw560x: Remove incorrect 'uart-has-rtscts' HID: intel_ish-hid: Add check for ishtp_dma_tx_map EDAC/highbank: Fix memory leak in highbank_mc_probe() tomoyo: fix broken dependency on *.conf.default IB/hfi1: Reject a zero-length user expected buffer IB/hfi1: Reserve user expected TIDs IB/hfi1: Fix expected receive setup error exit issues affs: initialize fsdata in affs_truncate() amd-xgbe: TX Flow Ctrl Registers are h/w ver dependent amd-xgbe: Delay AN timeout during KR training bpf: Fix pointer-leak due to insufficient speculative store bypass mitigation phy: rockchip-inno-usb2: Fix missing clk_disable_unprepare() in rockchip_usb2phy_power_on() net: nfc: Fix use-after-free in local_cleanup() wifi: rndis_wlan: Prevent buffer overflow in rndis_query_oid net: usb: sr9700: Handle negative len net: mdio: validate parameter addr in mdiobus_get_phy() HID: check empty report_list in hid_validate_values() usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait usb: gadget: f_fs: Ensure ep0req is dequeued before free_request net: mlx5: eliminate anonymous module_init & module_exit dmaengine: Fix double increment of client_count in dma_chan_get() net: macb: fix PTP TX timestamp failure due to packet padding HID: betop: check shape of output reports dmaengine: xilinx_dma: commonize DMA copy size calculation dmaengine: xilinx_dma: program hardware supported buffer length dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling dmaengine: xilinx_dma: call of_node_put() when breaking out of for_each_child_of_node() tcp: avoid the lookup process failing to get sk in ehash table w1: fix deadloop in __w1_remove_master_device() w1: fix WARNING after calling w1_process() netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state block: fix and cleanup bio_check_ro perf env: Do not return pointers to local variables fs: reiserfs: remove useless new_opts in reiserfs_remount Bluetooth: hci_sync: cancel cmd_timer if hci_open failed scsi: hpsa: Fix allocation size for scsi_host_alloc() module: Don't wait for GOING modules tracing: Make sure trace_printk() can output as soon as it can be used trace_events_hist: add check for return value of 'create_hist_field' smbd: Make upper layer decide when to destroy the transport cifs: Fix oops due to uncleared server->smbd_conn in reconnect ARM: 9280/1: mm: fix warning on phys_addr_t to void pointer assignment EDAC/device: Respect any driver-supplied workqueue polling value net: fix UaF in netns ops registration error path netfilter: nft_set_rbtree: skip elements in transaction from garbage collection netlink: remove hash::nelems check in netlink_insert netlink: annotate data races around nlk->portid netlink: annotate data races around dst_portid and dst_group netlink: annotate data races around sk_state ipv4: prevent potential spectre v1 gadget in ip_metrics_convert() netfilter: conntrack: fix vtag checks for ABORT/SHUTDOWN_COMPLETE netrom: Fix use-after-free of a listening socket. sctp: fail if no bound addresses can be used for a given scope net: ravb: Fix possible hang if RIS2_QFF1 happen net/tg3: resolve deadlock in tg3_reset_task() during EEH Revert "Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode" x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL drm/i915/display: fix compiler warning about array overrun x86/asm: Fix an assembler warning with current binutils x86/entry/64: Add instruction suffix to SYSRET ARM: dts: imx: Fix pca9547 i2c-mux node name dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init sysctl: add a new register_sysctl_init() interface panic: unset panic_on_warn inside panic() exit: Add and use make_task_dead. objtool: Add a missing comma to avoid string concatenation hexagon: Fix function name in die() h8300: Fix build errors from do_exit() to make_task_dead() transition ia64: make IA64_MCA_RECOVERY bool instead of tristate exit: Put an upper limit on how often we can oops exit: Expose "oops_count" to sysfs exit: Allow oops_limit to be disabled panic: Consolidate open-coded panic_on_warn checks panic: Introduce warn_limit panic: Expose "warn_count" to sysfs docs: Fix path paste-o for /sys/kernel/warn_count exit: Use READ_ONCE() for all oops/warn limit reads ipv6: ensure sane device mtu in tunnels usb: host: xhci-plat: add wakeup entry at sysfs Linux 4.19.272 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I4f9ddce1e108e81409d47e00fdeef2bc0d34f793	2023-02-06 08:16:47 +01:00
Kees Cook	a25982f544	exit: Use READ_ONCE() for all oops/warn limit reads commit 7535b832c6399b5ebfc5b53af5c51dd915ee2538 upstream. Use a temporary variable to take full advantage of READ_ONCE() behavior. Without this, the report (and even the test) might be out of sync with the initial test. Reported-by: Peter Zijlstra <peterz@infradead.org> Link: https://lore.kernel.org/lkml/Y5x7GXeluFmZ8E0E@hirez.programming.kicks-ass.net Fixes: 9fc9e278a5c0 ("panic: Introduce warn_limit") Fixes: d4ccd54d28d3 ("exit: Put an upper limit on how often we can oops") Cc: "Eric W. Biederman" <ebiederm@xmission.com> Cc: Jann Horn <jannh@google.com> Cc: Arnd Bergmann <arnd@arndb.de> Cc: Petr Mladek <pmladek@suse.com> Cc: Andrew Morton <akpm@linux-foundation.org> Cc: Luis Chamberlain <mcgrof@kernel.org> Cc: Marco Elver <elver@google.com> Cc: tangmeng <tangmeng@uniontech.com> Cc: Sebastian Andrzej Siewior <bigeasy@linutronix.de> Cc: Tiezhu Yang <yangtiezhu@loongson.cn> Signed-off-by: Kees Cook <keescook@chromium.org> Signed-off-by: Eric Biggers <ebiggers@google.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-02-06 07:49:46 +01:00
Kees Cook	326716f32f	exit: Allow oops_limit to be disabled commit de92f65719cd672f4b48397540b9f9eff67eca40 upstream. In preparation for keeping oops_limit logic in sync with warn_limit, have oops_limit == 0 disable checking the Oops counter. Cc: Jann Horn <jannh@google.com> Cc: Jonathan Corbet <corbet@lwn.net> Cc: Andrew Morton <akpm@linux-foundation.org> Cc: Baolin Wang <baolin.wang@linux.alibaba.com> Cc: "Jason A. Donenfeld" <Jason@zx2c4.com> Cc: Eric Biggers <ebiggers@google.com> Cc: Huang Ying <ying.huang@intel.com> Cc: "Eric W. Biederman" <ebiederm@xmission.com> Cc: Arnd Bergmann <arnd@arndb.de> Cc: linux-doc@vger.kernel.org Signed-off-by: Kees Cook <keescook@chromium.org> Signed-off-by: Eric Biggers <ebiggers@google.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-02-06 07:49:45 +01:00
Kees Cook	bad855964e	exit: Expose "oops_count" to sysfs commit 9db89b41117024f80b38b15954017fb293133364 upstream. Since Oops count is now tracked and is a fairly interesting signal, add the entry /sys/kernel/oops_count to expose it to userspace. Cc: "Eric W. Biederman" <ebiederm@xmission.com> Cc: Jann Horn <jannh@google.com> Cc: Arnd Bergmann <arnd@arndb.de> Reviewed-by: Luis Chamberlain <mcgrof@kernel.org> Signed-off-by: Kees Cook <keescook@chromium.org> Link: https://lore.kernel.org/r/20221117234328.594699-3-keescook@chromium.org Signed-off-by: Eric Biggers <ebiggers@google.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-02-06 07:49:45 +01:00
Jann Horn	ebf39c590a	exit: Put an upper limit on how often we can oops commit d4ccd54d28d3c8598e2354acc13e28c060961dbb upstream. Many Linux systems are configured to not panic on oops; but allowing an attacker to oops the system really often can make even bugs that look completely unexploitable exploitable (like NULL dereferences and such) if each crash elevates a refcount by one or a lock is taken in read mode, and this causes a counter to eventually overflow. The most interesting counters for this are 32 bits wide (like open-coded refcounts that don't use refcount_t). (The ldsem reader count on 32-bit platforms is just 16 bits, but probably nobody cares about 32-bit platforms that much nowadays.) So let's panic the system if the kernel is constantly oopsing. The speed of oopsing 2^32 times probably depends on several factors, like how long the stack trace is and which unwinder you're using; an empirically important one is whether your console is showing a graphical environment or a text console that oopses will be printed to. In a quick single-threaded benchmark, it looks like oopsing in a vfork() child with a very short stack trace only takes ~510 microseconds per run when a graphical console is active; but switching to a text console that oopses are printed to slows it down around 87x, to ~45 milliseconds per run. (Adding more threads makes this faster, but the actual oops printing happens under &die_lock on x86, so you can maybe speed this up by a factor of around 2 and then any further improvement gets eaten up by lock contention.) It looks like it would take around 8-12 days to overflow a 32-bit counter with repeated oopsing on a multi-core X86 system running a graphical environment; both me (in an X86 VM) and Seth (with a distro kernel on normal hardware in a standard configuration) got numbers in that ballpark. 12 days aren't that short on a desktop system, and you'd likely need much longer on a typical server system (assuming that people don't run graphical desktop environments on their servers), and this is a very noisy and violent approach to exploiting the kernel; and it also seems to take orders of magnitude longer on some machines, probably because stuff like EFI pstore will slow it down a ton if that's active. Signed-off-by: Jann Horn <jannh@google.com> Link: https://lore.kernel.org/r/20221107201317.324457-1-jannh@google.com Reviewed-by: Luis Chamberlain <mcgrof@kernel.org> Signed-off-by: Kees Cook <keescook@chromium.org> Link: https://lore.kernel.org/r/20221117234328.594699-2-keescook@chromium.org Signed-off-by: Eric Biggers <ebiggers@google.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-02-06 07:49:45 +01:00
Eric W. Biederman	7d5de91a9a	exit: Add and use make_task_dead. commit 0e25498f8cd43c1b5aa327f373dd094e9a006da7 upstream. There are two big uses of do_exit. The first is it's design use to be the guts of the exit(2) system call. The second use is to terminate a task after something catastrophic has happened like a NULL pointer in kernel code. Add a function make_task_dead that is initialy exactly the same as do_exit to cover the cases where do_exit is called to handle catastrophic failure. In time this can probably be reduced to just a light wrapper around do_task_dead. For now keep it exactly the same so that there will be no behavioral differences introducing this new concept. Replace all of the uses of do_exit that use it for catastraphic task cleanup with make_task_dead to make it clear what the code is doing. As part of this rename rewind_stack_do_exit rewind_stack_and_make_dead. Signed-off-by: "Eric W. Biederman" <ebiederm@xmission.com> Signed-off-by: Eric Biggers <ebiggers@google.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-02-06 07:49:45 +01:00
JohnnLee	abdeca1fd7	Revert "tasks: Add a count of task RCU users" This reverts commit `041827a4b9`. Bug: 257368563 Change-Id: I93743c8cc8323a806c2faa1b51bf308da840f78b Signed-off-by: JohnnLee <johnnlee@google.com>	2022-12-20 15:33:21 +08:00
JohnnLee	bb9406fd87	Merge branch 'LA.UM.9.12.C10.11.00.00.840.415' via branch 'qcom-msm-4.19-7250' into android-msm-pixel-4.19 Conflicts: arch/arm64/configs/vendor/kona_defconfig drivers/char/adsprpc.c drivers/dma-buf/dma-buf.c drivers/firmware/qcom/tz_log.c drivers/hid/hid-holtek-mouse.c drivers/mmc/host/cqhci-crypto-qti.c drivers/soc/qcom/qmi_rmnet.c drivers/usb/gadget/composite.c drivers/usb/gadget/function/f_uac1.c drivers/usb/gadget/function/rndis.c fs/f2fs/super.c net/sctp/input.c Bug: 253163588 Change-Id: Ie21081a2d496960b56a3a2ac9cb6c45e285e698e Signed-off-by: JohnnLee <johnnlee@google.com>	2022-12-20 15:31:17 +08:00
Eric W. Biederman	041827a4b9	tasks: Add a count of task RCU users Add a count of the number of RCU users (currently 1) of the task struct so that we can later add the scheduler case and get rid of the very subtle task_rcu_dereference(), and just use rcu_dereference(). As suggested by Oleg have the count overlap rcu_head so that no additional space in task_struct is required. Change-Id: Ib1f00439f5e119cce4af2bf712df5a60b47fa81f Inspired-by: Linus Torvalds <torvalds@linux-foundation.org> Inspired-by: Oleg Nesterov <oleg@redhat.com> Signed-off-by: Eric W. Biederman <ebiederm@xmission.com> Signed-off-by: Peter Zijlstra (Intel) <peterz@infradead.org> Cc: Chris Metcalf <cmetcalf@ezchip.com> Cc: Christoph Lameter <cl@linux.com> Cc: Davidlohr Bueso <dave@stgolabs.net> Cc: Kirill Tkhai <tkhai@yandex.ru> Cc: Linus Torvalds <torvalds@linux-foundation.org> Cc: Mike Galbraith <efault@gmx.de> Cc: Paul E. McKenney <paulmck@kernel.org> Cc: Peter Zijlstra <peterz@infradead.org> Cc: Russell King - ARM Linux admin <linux@armlinux.org.uk> Cc: Thomas Gleixner <tglx@linutronix.de> Link: https://lkml.kernel.org/r/87woebdplt.fsf_-_@x220.int.ebiederm.org Signed-off-by: Ingo Molnar <mingo@kernel.org> Git-commit: 3fbd7ee285b2bbc6eebd15a3c8786d9776a402a8 Git-repo: https://android.googlesource.com/kernel/common/ [quic_spathi@quicinc.com: resolved trivial merge conflicts] Signed-off-by: Srinivasarao Pathipati <quic_spathi@quicinc.com>	2022-04-06 12:09:11 +05:30
Lucas Wei	ee773cdcc6	Merge android-4.19-stable (4.19.177) into android-msm-pixel-4.19-lts Merge 4.19.177 into android-4.19-stable Linux 4.19.177 kvm: check tlbs_dirty directly scsi: qla2xxx: Fix crash during driver load on big endian machines xen-blkback: fix error handling in xen_blkbk_map() xen-scsiback: don't "handle" error by BUG() xen-netback: don't "handle" error by BUG() xen-blkback: don't "handle" error by BUG() xen/arm: don't ignore return errors from set_phys_to_machine * Xen/gntdev: correct error checking in gntdev_map_grant_pages() include/xen/grant_table.h Xen/gntdev: correct dev_bus_addr handling in gntdev_map_grant_pages() Xen/x86: also check kernel mapping in set_foreign_p2m_mapping() Xen/x86: don't bail early from clear_foreign_p2m_mapping() * net: qrtr: Fix port ID for control messages net/qrtr/qrtr.c KVM: SEV: fix double locking due to incorrect backport x86/build: Disable CET instrumentation in the kernel for 32-bit too * ovl: expand warning in ovl_d_real() fs/overlayfs/super.c net/qrtr: restrict user-controlled length in qrtr_tun_write_iter() net/rds: restrict iovecs length for RDS_CMSG_RDMA_ARGS vsock: fix locking in vsock_shutdown() vsock/virtio: update credit only if socket is not closed * net: watchdog: hold device global xmit lock during tx disable include/linux/netdevice.h net/vmw_vsock: improve locking in vsock_connect_timeout() * net: fix iteration for sctp transport seq_files net/sctp/proc.c usb: dwc3: ulpi: Replace CPU-based busyloop with Protocol-based one usb: dwc3: ulpi: fix checkpatch warning h8300: fix PREEMPTION build, TI_PRE_COUNT undefined i2c: stm32f7: fix configuration of the digital filter * firmware_loader: align .builtin_fw to 8 include/asm-generic/vmlinux.lds.h net: hns3: add a check for queue_id in hclge_reset_vf_queue() * netfilter: conntrack: skip identical origin tuple in same zone only net/netfilter/nf_conntrack_core.c net: stmmac: set TxQ mode back to DCB after disabling CBS xen/netback: avoid race in xenvif_rx_ring_slots_available() netfilter: flowtable: fix tcp and udp header checksum update netfilter: xt_recent: Fix attempt to update deleted entry * bpf: Check for integer overflow when using roundup_pow_of_two() kernel/bpf/stackmap.c mt76: dma: fix a possible memory leak in mt76_add_fragment() ARM: kexec: fix oops after TLB are invalidated ARM: ensure the signal page contains defined contents ARM: dts: lpc32xx: Revert set default clock rate of HCLK PLL bfq-iosched: Revert "bfq: Fix computation of shallow depth" riscv: virt_addr_valid must check the address belongs to linear mapping drm/amd/display: Free atomic state after drm_atomic_commit drm/amd/display: Fix dc_sink kref count in emulated_link_detect * ovl: skip getxattr of security labels fs/overlayfs/copy_up.c * cap: fix conversions on getxattr security/commoncap.c * ovl: perform vfs_getxattr() with mounter creds fs/overlayfs/inode.c platform/x86: hp-wmi: Disable tablet-mode reporting by default arm64: dts: rockchip: Fix PCIe DT properties on rk3399 * arm/xen: Don't probe xenbus as part of an early initcall include/xen/xenbus.h * tracing: Check length before giving out the filter buffer kernel/trace/trace.c * tracing: Do not count ftrace events in top level enable output kernel/trace/trace_events.c ANDROID: build_config: drop CONFIG_KASAN_PANIC_ON_WARN Merge 4.19.176 into android-4.19-stable Linux 4.19.176 * regulator: Fix lockdep warning resolving supplies drivers/regulator/core.c * regulator: core: Clean enabling always-on regulators + their supplies drivers/regulator/core.c * regulator: core: enable power when setting up constraints drivers/regulator/core.c squashfs: add more sanity checks in xattr id lookup squashfs: add more sanity checks in inode lookup squashfs: add more sanity checks in id lookup * blk-mq: don't hold q->sysfs_lock in blk_mq_map_swqueue block/blk-mq.c * block: don't hold q->sysfs_lock in elevator_init_mq block/elevator.c Fix unsynchronized access to sev members through svm_register_enc_region * memcg: fix a crash in wb_workfn when a device disappears fs/fs-writeback.c include/linux/backing-dev.h include/trace/events/writeback.h mm/backing-dev.c * include/trace/events/writeback.h: fix -Wstringop-truncation warnings include/trace/events/writeback.h * lib/string: Add strscpy_pad() function include/linux/string.h lib/string.c SUNRPC: Handle 0 length opaque XDR object data properly * SUNRPC: Move simple_get_bytes and simple_get_netobj into private header include/linux/sunrpc/xdr.h iwlwifi: mvm: guard against device removal in reprobe iwlwifi: pcie: fix context info memory leak iwlwifi: pcie: add a NULL check in iwl_pcie_txq_unmap iwlwifi: mvm: take mutex for calling iwl_mvm_get_sync_time() pNFS/NFSv4: Try to return invalid layout in pnfs_layout_process() chtls: Fix potential resource leak * regulator: core: avoid regulator_resolve_supply() race condition drivers/regulator/core.c * af_key: relax availability checks for skb size calculation net/key/af_key.c remoteproc: qcom_q6v5_mss: Validate MBA firmware size before load remoteproc: qcom_q6v5_mss: Validate modem blob firmware size before load * fgraph: Initialize tracing_graph_pause at task creation init/init_task.c * block: fix NULL pointer dereference in register_disk block/genhd.c * tracing/kprobe: Fix to support kretprobe events on unloaded modules include/linux/kprobes.h * BACKPORT: bpf: add bpf_ktime_get_boot_ns() include/linux/bpf.h include/uapi/linux/bpf.h kernel/bpf/core.c kernel/bpf/helpers.c kernel/trace/bpf_trace.c net/core/filter.c Merge 4.19.175 into android-4.19-stable Linux 4.19.175 net: dsa: mv88e6xxx: override existent unicast portvec in port_fdb_add * net: ip_tunnel: fix mtu calculation net/ipv4/ip_tunnel.c md: Set prev_flush_start and flush_bio in an atomic way iommu/vt-d: Do not use flush-queue when caching-mode is on * Input: xpad - sync supported devices with fork on GitHub drivers/input/joystick/xpad.c x86/apic: Add extra serialization for non-serializing MSRs * x86/build: Disable CET instrumentation in the kernel Makefile mm: thp: fix MADV_REMOVE deadlock on shmem THP mm: hugetlb: remove VM_BUG_ON_PAGE from page_huge_active mm: hugetlb: fix a race between isolating and freeing page mm: hugetlb: fix a race between freeing and dissolving the page * mm: hugetlbfs: fix cannot migrate the fallocated HugeTLB page include/linux/hugetlb.h ARM: footbridge: fix dc21285 PCI configuration accessors KVM: SVM: Treat SVM as unsupported when running as an SEV guest nvme-pci: avoid the deepest sleep state on Kingston A2000 SSDs mmc: core: Limit retries when analyse of SDIO tuples fails smb3: Fix out-of-bounds bug in SMB2_negotiate() cifs: report error instead of invalid when revalidating a dentry fails * xhci: fix bounce buffer usage for non-sg list case drivers/usb/host/xhci-ring.c * genirq/msi: Activate Multi-MSI early when MSI_FLAG_ACTIVATE_EARLY is set include/linux/msi.h kernel/irq/msi.c kretprobe: Avoid re-registration of the same kretprobe earlier mac80211: fix station rate table updates on assoc * ovl: fix dentry leak in ovl_get_redirect fs/overlayfs/dir.c * usb: dwc3: fix clock issue during resume in OTG mode drivers/usb/dwc3/core.c usb: dwc2: Fix endpoint direction check in ep_from_windex usb: renesas_usbhs: Clear pipe running flag in usbhs_pkt_pop() USB: usblp: don't call usb_set_interface if there's a single alt USB: gadget: legacy: fix an error code in eth_bind() * memblock: do not start bottom-up allocations with kernel_end mm/memblock.c net: mvpp2: TCAM entry enable should be written after SRAM data net: lapb: Copy the skb before sending a packet arm64: dts: ls1046a: fix dcfg address range rxrpc: Fix deadlock around release of dst cached on udp tunnel Input: i8042 - unbreak Pegatron C15B * elfcore: fix building with clang include/linux/elfcore.h kernel/Makefile USB: serial: option: Adding support for Cinterion MV31 USB: serial: cp210x: add new VID/PID for supporting Teraoka AD2000 USB: serial: cp210x: add pid/vid for WSDA-200-USB * UPSTREAM: dma-buf: Fix SET_NAME ioctl uapi drivers/dma-buf/dma-buf.c include/uapi/linux/dma-buf.h ANDROID: GKI: Update ABI for coresight-clk-amba-dummy.ko. Merge 4.19.174 into android-4.19-stable Linux 4.19.174 * workqueue: Restrict affinity change to rescuer kernel/workqueue.c * kthread: Extract KTHREAD_IS_PER_CPU include/linux/kthread.h kernel/kthread.c kernel/smpboot.c objtool: Don't fail on missing symbol table selftests/powerpc: Only test lwm/stmw on big endian scsi: ibmvfc: Set default timeout to avoid crash during migration mac80211: fix fast-rx encryption check scsi: libfc: Avoid invoking response handler twice if ep is already completed scsi: scsi_transport_srp: Don't block target in failfast state x86: __always_inline __{rd,wr}msr() platform/x86: intel-vbtn: Support for tablet mode on Dell Inspiron 7352 platform/x86: touchscreen_dmi: Add swap-x-y quirk for Goodix touchscreen on Estar Beauty HD tablet phy: cpcap-usb: Fix warning for missing regulator_disable * net_sched: gen_estimator: support large ewma log net/core/gen_estimator.c * sysctl: handle overflow in proc_get_long kernel/sysctl.c ACPI: thermal: Do not call acpi_thermal_check() directly ibmvnic: Ensure that CRQ entry read are correctly ordered net: dsa: bcm_sf2: put device node before return Merge 4.19.173 into android-4.19-stable Linux 4.19.173 * tcp: fix TLP timer not set when CA_STATE changes from DISORDER to OPEN include/net/tcp.h net/ipv4/tcp_input.c net/ipv4/tcp_recovery.c team: protect features update by RCU to avoid deadlock NFC: fix possible resource leak NFC: fix resource leak when target index is invalid rxrpc: Fix memory leak in rxrpc_lookup_local * iommu/vt-d: Don't dereference iommu_device if IOMMU_API is not built include/linux/intel-iommu.h iommu/vt-d: Gracefully handle DMAR units with no supported address widths can: dev: prevent potential information leak in can_fill_info() net/mlx5: Fix memory leak on flow table creation error flow mac80211: pause TX while changing interface type iwlwifi: pcie: reschedule in long-running memory reads iwlwifi: pcie: use jiffies for memory read spin time limit pNFS/NFSv4: Fix a layout segment leak in pnfs_layout_process() RDMA/cxgb4: Fix the reported max_recv_sge value * xfrm: fix disable_xfrm sysctl when used on xfrm interfaces net/xfrm/xfrm_policy.c * xfrm: Fix oops in xfrm_replay_advance_bmp net/xfrm/xfrm_input.c netfilter: nft_dynset: add timeout extension to template ARM: imx: build suspend-imx6.S with arm instruction set xen-blkfront: allow discard-* nodes to be optional mt7601u: fix rx buffer refcounting mt7601u: fix kernel crash unplugging the device * leds: trigger: fix potential deadlock with libata drivers/leds/led-triggers.c xen: Fix XenStore initialisation for XS_LOCAL KVM: x86: get smi pending status correctly KVM: x86/pmu: Fix HW_REF_CPU_CYCLES event pseudo-encoding in intel_arch_events[] drivers: soc: atmel: add null entry at the end of at91_soc_allowed_list[] drivers: soc: atmel: Avoid calling at91_soc_init on non AT91 SoCs PM: hibernate: flush swap writer after marking net: usb: qmi_wwan: added support for Thales Cinterion PLSx3 modem family * wext: fix NULL-ptr-dereference with cfg80211's lack of commit() net/wireless/wext-core.c ARM: dts: imx6qdl-gw52xx: fix duplicate regulator naming media: rc: ensure that uevent can be read directly after rc device register ALSA: hda/via: Apply the workaround generically for Clevo machines xen/privcmd: allow fetching resource sizes kernel: kexec: remove the lock operation of system_transition_mutex ACPI: sysfs: Prefer "compatible" modalias nbd: freeze the queue while we're adding connections Revert "Revert "ANDROID: enable LLVM_IAS=1 for clang's integrated assembler for x86_64"" ANDROID: GKI: Update ABI ANDROID: GKI: Update cuttlefish symbol list * ANDROID: GKI: fix up abi issues with 4.19.172 include/linux/sched.h Merge 4.19.172 into android-4.19-stable Linux 4.19.172 * fs: fix lazytime expiration handling in __writeback_single_inode() fs/fs-writeback.c * writeback: Drop I_DIRTY_TIME_EXPIRE fs/ext4/inode.c fs/fs-writeback.c include/linux/fs.h include/trace/events/writeback.h dm integrity: conditionally disable "recalculate" feature tools: Factor HOSTCC, HOSTLD, HOSTAR definitions * tracing: Fix race in trace_open and buffer resize call kernel/trace/ring_buffer.c HID: wacom: Correct NULL dereference on AES pen proximity * futex: Handle faults correctly for PI futexes kernel/futex.c * futex: Simplify fixup_pi_state_owner() kernel/futex.c * futex: Use pi_state_update_owner() in put_pi_state() kernel/futex.c * rtmutex: Remove unused argument from rt_mutex_proxy_unlock() kernel/futex.c kernel/locking/rtmutex.c kernel/locking/rtmutex_common.h * futex: Provide and use pi_state_update_owner() kernel/futex.c * futex: Replace pointless printk in fixup_owner() kernel/futex.c * futex: Ensure the correct return value from futex_lock_pi() kernel/futex.c * futex: Prevent exit livelock kernel/futex.c * futex: Provide distinct return value when owner is exiting kernel/futex.c * futex: Add mutex around futex exit include/linux/futex.h include/linux/sched.h kernel/futex.c * futex: Provide state handling for exec() as well kernel/futex.c * futex: Sanitize exit state handling kernel/futex.c * futex: Mark the begin of futex exit explicitly include/linux/futex.h kernel/exit.c kernel/futex.c * futex: Set task::futex_state to DEAD right after handling futex exit kernel/exit.c kernel/futex.c * futex: Split futex_mm_release() for exit/exec include/linux/futex.h kernel/fork.c kernel/futex.c * exit/exec: Seperate mm_release() fs/exec.c include/linux/sched/mm.h kernel/exit.c kernel/fork.c * futex: Replace PF_EXITPIDONE with a state include/linux/futex.h include/linux/sched.h kernel/exit.c kernel/futex.c * futex: Move futex exit handling into futex code include/linux/compat.h include/linux/futex.h kernel/fork.c kernel/futex.c * Revert "mm/slub: fix a memory leak in sysfs_slab_add()" mm/slub.c gpio: mvebu: fix pwm .get_state period calculation * FROMGIT: f2fs: flush data when enabling checkpoint back fs/f2fs/super.c ANDROID: GKI: Added the get_task_pid function Bug: 181732917 Change-Id: I371506c789fee218749bb057bc7b8d159970847c Signed-off-by: Lucas Wei <lucaswei@google.com>	2021-03-12 15:01:56 +08:00
Greg Kroah-Hartman	1a02ec69a6	Merge 4.19.172 into android-4.19-stable Changes in 4.19.172 gpio: mvebu: fix pwm .get_state period calculation Revert "mm/slub: fix a memory leak in sysfs_slab_add()" futex: Move futex exit handling into futex code futex: Replace PF_EXITPIDONE with a state exit/exec: Seperate mm_release() futex: Split futex_mm_release() for exit/exec futex: Set task::futex_state to DEAD right after handling futex exit futex: Mark the begin of futex exit explicitly futex: Sanitize exit state handling futex: Provide state handling for exec() as well futex: Add mutex around futex exit futex: Provide distinct return value when owner is exiting futex: Prevent exit livelock futex: Ensure the correct return value from futex_lock_pi() futex: Replace pointless printk in fixup_owner() futex: Provide and use pi_state_update_owner() rtmutex: Remove unused argument from rt_mutex_proxy_unlock() futex: Use pi_state_update_owner() in put_pi_state() futex: Simplify fixup_pi_state_owner() futex: Handle faults correctly for PI futexes HID: wacom: Correct NULL dereference on AES pen proximity tracing: Fix race in trace_open and buffer resize call tools: Factor HOSTCC, HOSTLD, HOSTAR definitions dm integrity: conditionally disable "recalculate" feature writeback: Drop I_DIRTY_TIME_EXPIRE fs: fix lazytime expiration handling in __writeback_single_inode() Linux 4.19.172 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I9b5391e9e955a105ab9c144fa6258dcbea234211	2021-02-01 12:59:33 +01:00
Thomas Gleixner	226eed1ef7	futex: Mark the begin of futex exit explicitly commit 18f694385c4fd77a09851fd301236746ca83f3cb upstream Instead of relying on PF_EXITING use an explicit state for the futex exit and set it in the futex exit function. This moves the smp barrier and the lock/unlock serialization into the futex code. As with the DEAD state this is restricted to the exit path as exec continues to use the same task struct. This allows to simplify that logic in a next step. Signed-off-by: Thomas Gleixner <tglx@linutronix.de> Reviewed-by: Ingo Molnar <mingo@kernel.org> Acked-by: Peter Zijlstra (Intel) <peterz@infradead.org> Link: https://lkml.kernel.org/r/20191106224556.539409004@linutronix.de Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2021-01-30 13:32:11 +01:00
Thomas Gleixner	8f9a98a0e0	futex: Set task::futex_state to DEAD right after handling futex exit commit f24f22435dcc11389acc87e5586239c1819d217c upstream Setting task::futex_state in do_exit() is rather arbitrarily placed for no reason. Move it into the futex code. Note, this is only done for the exit cleanup as the exec cleanup cannot set the state to FUTEX_STATE_DEAD because the task struct is still in active use. Signed-off-by: Thomas Gleixner <tglx@linutronix.de> Reviewed-by: Ingo Molnar <mingo@kernel.org> Acked-by: Peter Zijlstra (Intel) <peterz@infradead.org> Link: https://lkml.kernel.org/r/20191106224556.439511191@linutronix.de Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2021-01-30 13:32:11 +01:00
Thomas Gleixner	9425476fb1	exit/exec: Seperate mm_release() commit 4610ba7ad877fafc0a25a30c6c82015304120426 upstream mm_release() contains the futex exit handling. mm_release() is called from do_exit()->exit_mm() and from exec()->exec_mm(). In the exit_mm() case PF_EXITING and the futex state is updated. In the exec_mm() case these states are not touched. As the futex exit code needs further protections against exit races, this needs to be split into two functions. Preparatory only, no functional change. Signed-off-by: Thomas Gleixner <tglx@linutronix.de> Reviewed-by: Ingo Molnar <mingo@kernel.org> Acked-by: Peter Zijlstra (Intel) <peterz@infradead.org> Link: https://lkml.kernel.org/r/20191106224556.240518241@linutronix.de Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2021-01-30 13:32:11 +01:00
Thomas Gleixner	095444fad7	futex: Replace PF_EXITPIDONE with a state commit 3d4775df0a89240f671861c6ab6e8d59af8e9e41 upstream The futex exit handling relies on PF_ flags. That's suboptimal as it requires a smp_mb() and an ugly lock/unlock of the exiting tasks pi_lock in the middle of do_exit() to enforce the observability of PF_EXITING in the futex code. Add a futex_state member to task_struct and convert the PF_EXITPIDONE logic over to the new state. The PF_EXITING dependency will be cleaned up in a later step. This prepares for handling various futex exit issues later. Signed-off-by: Thomas Gleixner <tglx@linutronix.de> Reviewed-by: Ingo Molnar <mingo@kernel.org> Acked-by: Peter Zijlstra (Intel) <peterz@infradead.org> Link: https://lkml.kernel.org/r/20191106224556.149449274@linutronix.de Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2021-01-30 13:32:11 +01:00
lucaswei	3ff70092e4	Merge android-4.19-stable (4.19.160) into android-msm-pixel-4.19-lts Merge 4.19.160 into android-4.19-stable Linux 4.19.160 mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault() x86/microcode/intel: Check patch signature before saving microcode for early loading * seccomp: Set PF_SUPERPRIV when checking capability kernel/seccomp.c * ptrace: Set PF_SUPERPRIV when checking capability kernel/ptrace.c s390/dasd: fix null pointer dereference for ERP requests s390/cpum_sf.c: fix file permission for cpum_sfb_size mac80211: free sta in sta_info_insert_finish() on errors mac80211: minstrel: fix tx status processing corner case mac80211: minstrel: remove deferred sampling code xtensa: disable preemption around cache alias management calls * regulator: workaround self-referent regulators drivers/regulator/core.c * regulator: avoid resolve_supply() infinite recursion drivers/regulator/core.c * regulator: fix memory leak with repeated set_machine_constraints() drivers/regulator/core.c regulator: pfuze100: limit pfuze-support-disable-sw to pfuze{100,200} iio: accel: kxcjk1013: Add support for KIOX010A ACPI DSM for setting tablet-mode iio: accel: kxcjk1013: Replace is_smo8500_device with an acpi_type enum * ext4: fix bogus warning in ext4_update_dx_flag() fs/ext4/ext4.h staging: rtl8723bs: Add 024c:0627 to the list of SDIO device-ids efivarfs: fix memory leak in efivarfs_create() tty: serial: imx: keep console clocks always on ALSA: hda/realtek: Add some Clove SSID in the ALC293(ALC1220) ALSA: mixart: Fix mutex deadlock * ALSA: ctl: fix error path at adding user-defined element set sound/core/control.c * ALSA: usb-audio: Add delay quirk for all Logitech USB devices sound/usb/quirks.c ALSA: firewire: Clean up a locking issue in copy_resp_to_buf() speakup: Do not let the line discipline be used several times * libfs: fix error cast of negative value in simple_attr_write() fs/libfs.c efi/x86: Free efi_pgd with free_pages() xfs: revert "xfs: fix rmap key and record comparison functions" fail_function: Remove a redundant mutex unlock regulator: ti-abb: Fix array out of bound read access on the first transition xfs: strengthen rmap record flags checking xfs: fix the minrecs logic when dealing with inode root child blocks can: kvaser_usb: kvaser_usb_hydra: Fix KCAN bittiming limits drm/sun4i: dw-hdmi: fix error return code in sun8i_dw_hdmi_bind() MIPS: Alchemy: Fix memleak in alchemy_clk_setup_cpu ASoC: qcom: lpass-platform: Fix memory leak can: m_can: m_can_handle_state_change(): fix state change can: peak_usb: fix potential integer overflow on shift of a int can: mcba_usb: mcba_usb_start_xmit(): first fill skb, then pass to can_put_echo_skb() can: ti_hecc: Fix memleak in ti_hecc_probe can: dev: can_restart(): post buffer from the right context can: af_can: prevent potential access of uninitialized member in canfd_rcv() can: af_can: prevent potential access of uninitialized member in can_rcv() * ip_tunnels: Set tunnel option flag when tunnel metadata is present include/net/ip_tunnels.h perf lock: Don't free "lock_seq_stat" if read_count isn't zero * Input: resistive-adc-touch - fix kconfig dependency on IIO_BUFFER drivers/input/touchscreen/Kconfig ARM: dts: imx50-evk: Fix the chip select 1 IOMUX arm: dts: imx6qdl-udoo: fix rgmii phy-mode for ksz9031 phy arm64: dts: allwinner: h5: OrangePi Prime: Fix ethernet node MIPS: export has_transparent_hugepage() for modules Input: adxl34x - clean up a data type in adxl34x_probe() arm64: dts: allwinner: a64: bananapi-m64: Enable RGMII RX/TX delay on PHY ARM: dts: sun8i: a83t: Enable both RGMII RX/TX delay on Ethernet PHY ARM: dts: sun8i: h3: orangepi-plus2e: Enable RGMII RX/TX delay on Ethernet PHY Revert "arm: sun8i: orangepi-pc-plus: Set EMAC activity LEDs to active high" ARM: dts: sun8i: r40: bananapi-m2-ultra: Fix ethernet node arm64: dts: allwinner: h5: OrangePi PC2: Fix ethernet node arm64: dts: allwinner: a64: Pine64 Plus: Fix ethernet node * vfs: remove lockdep bogosity in __sb_start_write fs/super.c * arm64: psci: Avoid printing in cpu_psci_cpu_die() arch/arm64/kernel/psci.c ACPI: button: Add DMI quirk for Medion Akoya E2228T selftests: kvm: Fix the segment descriptor layout to match the actual layout * scsi: ufs: Fix unbalanced scsi_block_reqs_cnt caused by ufshcd_hold() drivers/scsi/ufs/ufshcd.c pinctrl: rockchip: enable gpio pclk for rockchip_gpio_to_irq net: ftgmac100: Fix crash when removing driver net/ncsi: Fix netlink registration net: usb: qmi_wwan: Set DTR quirk for MR400 net/mlx5: Disable QoS when min_rates on all VFs are zero tcp: only postpone PROBE_RTT if RTT is < current min_rtt estimate * sctp: change to hold/put transport for proto_unreach_timer net/sctp/input.c net/sctp/sm_sideeffect.c net/sctp/transport.c qlcnic: fix error return code in qlcnic_83xx_restart_hw() qed: fix error return code in qed_iwarp_ll2_start() * page_frag: Recover from memory pressure mm/page_alloc.c net: x25: Increase refcnt of "struct x25_neigh" in x25_rx_call_request * net: qualcomm: rmnet: Fix incorrect receive packet handling during cleanup drivers/net/ethernet/qualcomm/rmnet/rmnet_handlers.c net/mlx4_core: Fix init_hca fields offset * netlabel: fix an uninitialized warning in netlbl_unlabel_staticlist() net/netlabel/netlabel_unlabeled.c * netlabel: fix our progress tracking in netlbl_unlabel_staticlist() net/netlabel/netlabel_unlabeled.c net: Have netpoll bring-up DSA management interface net: dsa: mv88e6xxx: Avoid VTU corruption on 6097 * net: bridge: add missing counters to ndo_get_stats64 callback net/bridge/br_device.c net: b44: fix error return code in b44_init_one() mlxsw: core: Use variable timeout for EMAD retries lan743x: prevent entire kernel HANG on open, for some platforms lan743x: fix issue causing intermittent kernel log warnings * inet_diag: Fix error path to cancel the meseage in inet_req_diag_fill() net/ipv4/inet_diag.c devlink: Add missing genlmsg_cancel() in devlink_nl_sb_port_pool_fill() bnxt_en: read EEPROM A2h address using page 0 atm: nicstar: Unmap DMA on send error * ah6: fix error return code in ah6_input() net/ipv6/ah6.c Merge 4.19.159 into android-4.19-stable Linux 4.19.159 ACPI: GED: fix -Wformat KVM: x86: clflushopt should be treated as a no-op by emulation can: proc: can_remove_proc(): silence remove_proc_entry warning mac80211: always wind down STA state Input: sunkbd - avoid use-after-free in teardown paths powerpc/8xx: Always fault when _PAGE_ACCESSED is not set Revert "perf cs-etm: Move definition of 'traceid_list' global variable from header file" powerpc/64s: flush L1D after user accesses powerpc/uaccess: Evaluate macro arguments once, before user access is allowed powerpc: Fix __clear_user() with KUAP enabled powerpc: Implement user_access_begin and friends powerpc: Add a framework for user access tracking powerpc/64s: flush L1D on kernel entry powerpc/64s: move some exception handlers out of line ANDROID: GKI: Update ABI for incfs and dm-user Revert "ANDROID: Add dependencies of dm-user.ko" * ANDROID: Incremental fs: Add zstd compression support fs/incfs/Kconfig fs/incfs/data_mgmt.c fs/incfs/data_mgmt.h fs/incfs/format.h include/uapi/linux/incrementalfs.h * ANDROID: Incremental fs: Small improvements fs/incfs/data_mgmt.c fs/incfs/data_mgmt.h fs/incfs/format.c fs/incfs/format.h fs/incfs/pseudo_files.c fs/incfs/vfs.c * ANDROID: Incremental fs: Initialize mount options correctly fs/incfs/vfs.c ANDROID: Incremental fs: Fix read_log_test which failed sporadically * ANDROID: Incremental fs: Fix misuse of cpu_to_leXX and poll return fs/incfs/format.c fs/incfs/pseudo_files.c * ANDROID: Incremental fs: Add per UID read timeouts fs/incfs/data_mgmt.c fs/incfs/data_mgmt.h fs/incfs/pseudo_files.c fs/incfs/vfs.c include/uapi/linux/incrementalfs.h * ANDROID: Incremental fs: Add .incomplete folder fs/incfs/data_mgmt.c fs/incfs/data_mgmt.h fs/incfs/pseudo_files.c fs/incfs/vfs.c * ANDROID: Incremental fs: Fix dangling else fs/incfs/data_mgmt.c * ANDROID: Incremental fs: Fix uninitialized variable fs/incfs/vfs.c * ANDROID: Incremental fs: Fix filled block count from get filled blocks fs/incfs/data_mgmt.c fs/incfs/data_mgmt.h fs/incfs/format.c fs/incfs/format.h fs/incfs/pseudo_files.c fs/incfs/vfs.c fs/incfs/vfs.h * ANDROID: Incremental fs: Add hash block counts to IOC_IOCTL_GET_BLOCK_COUNT fs/incfs/data_mgmt.c fs/incfs/data_mgmt.h fs/incfs/format.c fs/incfs/format.h fs/incfs/vfs.c include/uapi/linux/incrementalfs.h * ANDROID: Incremental fs: Add INCFS_IOC_GET_BLOCK_COUNT fs/incfs/data_mgmt.c fs/incfs/data_mgmt.h fs/incfs/format.c fs/incfs/format.h fs/incfs/vfs.c include/uapi/linux/incrementalfs.h * ANDROID: Incremental fs: Make compatible with existing files fs/incfs/format.c fs/incfs/format.h * ANDROID: Incremental fs: Remove block HASH flag fs/incfs/format.c fs/incfs/format.h * ANDROID: Incremental fs: Remove back links and crcs fs/incfs/format.c fs/incfs/format.h * ANDROID: Incremental fs: Remove attributes from file fs/incfs/data_mgmt.c fs/incfs/format.c fs/incfs/format.h fs/incfs/pseudo_files.c * ANDROID: Incremental fs: Add .blocks_written file fs/incfs/data_mgmt.c fs/incfs/data_mgmt.h fs/incfs/pseudo_files.c fs/incfs/pseudo_files.h include/uapi/linux/incrementalfs.h * ANDROID: Incremental fs: Separate pseudo-file code fs/incfs/Makefile fs/incfs/pseudo_files.c fs/incfs/pseudo_files.h fs/incfs/vfs.c fs/incfs/vfs.h * ANDROID: Incremental fs: Add UID to pending_read fs/incfs/data_mgmt.c fs/incfs/data_mgmt.h fs/incfs/main.c fs/incfs/vfs.c include/uapi/linux/incrementalfs.h * ANDROID: Incremental fs: Create mapped file fs/incfs/data_mgmt.c fs/incfs/data_mgmt.h fs/incfs/format.c fs/incfs/format.h fs/incfs/vfs.c include/uapi/linux/incrementalfs.h * ANDROID: Incremental fs: Don't allow renaming .index directory. fs/incfs/vfs.c * ANDROID: Incremental fs: Fix incfs to work on virtio-9p fs/incfs/format.c fs/incfs/vfs.c ANDROID: Incremental fs: Allow running a single test ANDROID: Incremental fs: Adding perf test ANDROID: Incremental fs: Stress tool * ANDROID: Incremental fs: Use R/W locks to read/write segment blockmap. fs/incfs/data_mgmt.c fs/incfs/data_mgmt.h fs/incfs/vfs.c * ANDROID: Incremental fs: Remove unnecessary dependencies fs/incfs/Kconfig * ANDROID: Incremental fs: Remove annoying pr_debugs fs/incfs/data_mgmt.c * ANDROID: Incremental fs: dentry_revalidate should not return -EBADF. fs/incfs/vfs.c * ANDROID: Incremental fs: Fix minor bugs fs/incfs/data_mgmt.c fs/incfs/vfs.c * ANDROID: Incremental fs: RCU locks instead of mutex for pending_reads. fs/incfs/data_mgmt.c fs/incfs/data_mgmt.h * ANDROID: Incremental fs: fix up attempt to copy structures with READ/WRITE_ONCE fs/incfs/vfs.c Merge 4.19.158 into android-4.19-stable Revert "ANDROID: clang: update to 11.0.5" Linux 4.19.158 Convert trailing spaces and periods in path components * net: sch_generic: fix the missing new qdisc assignment bug net/sched/sch_generic.c * reboot: fix overflow parsing reboot cpu number kernel/reboot.c * Revert "kernel/reboot.c: convert simple_strtoul to kstrtoint" kernel/reboot.c * perf/core: Fix race in the perf_mmap_close() function kernel/events/core.c perf scripting python: Avoid declaring function pointers with a visibility attribute x86/speculation: Allow IBPB to be conditionally enabled on CPUs with always-on STIBP * random32: make prandom_u32() output unpredictable drivers/char/random.c include/linux/prandom.h kernel/time/timer.c lib/random32.c r8169: fix potential skb double free in an error path vrf: Fix fast path output packet handling with async Netfilter rules * tipc: fix memory leak in tipc_topsrv_start() net/tipc/topsrv.c net/x25: Fix null-ptr-deref in x25_connect * net: Update window_clamp if SOCK_RCVBUF is set net/ipv4/syncookies.c net/ipv6/syncookies.c net/af_iucv: fix null pointer dereference on shutdown * IPv6: Set SIT tunnel hard_header_len to zero net/ipv6/sit.c * swiotlb: fix "x86: Don't panic if can not alloc buffer for swiotlb" kernel/dma/swiotlb.c erofs: derive atime instead of leaving it empty pinctrl: amd: fix incorrect way to disable debounce filter pinctrl: amd: use higher precision for 512 RtcClk drm/gma500: Fix out-of-bounds access to struct drm_device.vblank[] * don't dump the threads that had been already exiting when zapped. kernel/exit.c mmc: renesas_sdhi_core: Add missing tmio_mmc_host_free() at remove gpio: pcie-idio-24: Enable PEX8311 interrupts gpio: pcie-idio-24: Fix IRQ Enable Register value gpio: pcie-idio-24: Fix irq mask when masking selinux: Fix error return code in sel_ib_pkey_sid_slow() btrfs: fix potential overflow in cluster_pages_for_defrag on 32bit arch ocfs2: initialize ip_next_orphan * futex: Don't enable IRQs unconditionally in put_pi_state() kernel/futex.c mei: protect mei_cl_mtu from null dereference xhci: hisilicon: fix refercence leak in xhci_histb_probe usb: cdc-acm: Add DISABLE_ECHO for Renesas USB Download mode * uio: Fix use-after-free in uio_unregister_device() drivers/uio/uio.c thunderbolt: Add the missed ida_simple_remove() in ring_request_msix() thunderbolt: Fix memory leak if ida_simple_get() fails in enumerate_services() btrfs: dev-replace: fail mount if we don't have replace item with target device btrfs: ref-verify: fix memory leak in btrfs_ref_tree_mod * ext4: unlock xattr_sem properly in ext4_inline_data_truncate() fs/ext4/inline.c * ext4: correctly report "not supported" for {usr,grp}jquota when !CONFIG_QUOTA fs/ext4/super.c * perf: Fix get_recursion_context() kernel/events/internal.h cosa: Add missing kfree in error path of cosa_write * of/address: Fix of_node memory leak in of_dma_is_coherent drivers/of/address.c xfs: fix a missing unlock on error in xfs_fs_map_blocks lan743x: fix "BUG: invalid wait context" when setting rx mode xfs: fix brainos in the refcount scrubber's rmap fragment processor xfs: fix rmap key and record comparison functions xfs: set the unwritten bit in rmap lookup flags in xchk_bmap_get_rmapextents xfs: fix flags argument to rmap lookup when converting shared file rmaps nbd: fix a block_device refcount leak in nbd_release pinctrl: aspeed: Fix GPI only function problem. ARM: 9019/1: kprobes: Avoid fortify_panic() when copying optprobe template pinctrl: intel: Set default bias in case no particular value given mfd: sprd: Add wakeup capability for PMIC IRQ * tick/common: Touch watchdog in tick_unfreeze() on all CPUs kernel/time/tick-common.c tpm_tis: Disable interrupts on ThinkPad T490s selftests: proc: fix warning: _GNU_SOURCE redefined vfio: platform: fix reference leak in vfio_platform_open s390/smp: move rcu_cpu_starting() earlier iommu/amd: Increase interrupt remapping table limit to 512 entries scsi: scsi_dh_alua: Avoid crash during alua_bus_detach() * cfg80211: regulatory: Fix inconsistent format argument net/wireless/reg.c mac80211: fix use of skb payload instead of header drm/amd/pm: do not use ixFEATURE_STATUS for checking smc running drm/amd/pm: perform SMC reset on suspend/hibernation drm/amdgpu: perform srbm soft reset always on SDMA resume scsi: hpsa: Fix memory leak in hpsa_init_one() gfs2: check for live vs. read-only file system in gfs2_fitrim gfs2: Add missing truncate_inode_pages_final for sd_aspace gfs2: Free rd_bits later in gfs2_clear_rgrpd to fix use-after-free usb: gadget: goku_udc: fix potential crashes in probe * crypto: arm64/aes-modes - get rid of literal load of addend vector arch/arm64/crypto/aes-modes.S * netfilter: use actual socket sk rather than skb sk when routing harder include/linux/netfilter_ipv4.h include/linux/netfilter_ipv6.h net/ipv4/netfilter.c net/ipv4/netfilter/iptable_mangle.c net/ipv4/netfilter/nf_nat_l3proto_ipv4.c net/ipv4/netfilter/nf_reject_ipv4.c net/ipv6/netfilter.c net/ipv6/netfilter/ip6table_mangle.c ath9k_htc: Use appropriate rs_datalen type Btrfs: fix missing error return if writeback for extent buffer never started tpm: efi: Don't create binary_bios_measurements file for an empty log xfs: fix scrub flagging rtinherit even if there is no rt device xfs: flush new eof page on truncate to avoid post-eof corruption can: flexcan: remove FLEXCAN_QUIRK_DISABLE_MECR quirk for LS1021A can: peak_canfd: pucan_handle_can_rx(): fix echo management when loopback is on can: peak_usb: peak_usb_get_ts_time(): fix timestamp wrapping can: peak_usb: add range checking in decode operations * can: can_create_echo_skb(): fix echo skb generation: always use skb_clone() include/linux/can/skb.h can: dev: __can_get_echo_skb(): fix real payload length return value for RTR frames can: dev: can_get_echo_skb(): prevent call to kfree_skb() in hard IRQ context can: rx-offload: don't call kfree_skb() from IRQ context ALSA: hda: prevent undefined shift in snd_hdac_ext_bus_get_link() perf tools: Add missing swap for ino_generation netfilter: ipset: Update byte and packet counters regardless of whether they match xfs: set xefi_discard when creating a deferred agfl free log intent item * net: xfrm: fix a race condition during allocing spi net/xfrm/xfrm_state.c hv_balloon: disable warning when floor reached * genirq: Let GENERIC_IRQ_IPI select IRQ_DOMAIN_HIERARCHY kernel/irq/Kconfig btrfs: reschedule when cloning lots of extents btrfs: sysfs: init devices outside of the chunk_mutex * usb: dwc3: gadget: Reclaim extra TRBs after request completion drivers/usb/dwc3/gadget.c * usb: dwc3: gadget: Continue to process pending requests drivers/usb/dwc3/gadget.c nbd: don't update block size after device is started * time: Prevent undefined behaviour in timespec64_to_ns() include/linux/time64.h kernel/time/itimer.c * regulator: defer probe when trying to get voltage from unresolved supply drivers/regulator/core.c * FROMGIT: Input: Add devices for HID_QUIRK_INCREMENT_USAGE_ON_DUPLICATE drivers/hid/hid-ids.h drivers/hid/hid-quirks.c * ANDROID: arm64: Fix off-by-one vdso trampoline return value arch/arm64/include/asm/vdso.h ANDROID: Add dependencies of dm-user.ko * UPSTREAM: arm64: vdso: Add -fasynchronous-unwind-tables to cflags arch/arm64/kernel/vdso/Makefile * UPSTREAM: of: property: Fix create device links for all child-supplier dependencies drivers/of/property.c * UPSTREAM: of: property: Do not link to disabled devices drivers/of/property.c * UPSTREAM: drm: Fix doc warning in drm_connector_attach_edid_property() drivers/gpu/drm/drm_connector.c * UPSTREAM: selinux: fix non-MLS handling in mls_context_to_sid() security/selinux/ss/mls.c * UPSTREAM: drm/prime: Fix drm_gem_prime_mmap() stack use drivers/gpu/drm/drm_prime.c * UPSTREAM: crypto: chacha-generic - fix use as arm64 no-NEON fallback crypto/chacha_generic.c UPSTREAM: slab: store tagged freelist for off-slab slabmgmt UPSTREAM: parisc: Switch from DISCONTIGMEM to SPARSEMEM * UPSTREAM: cgroup: Move cgroup_parse_float() implementation out of CONFIG_SYSFS kernel/cgroup/cgroup.c * UPSTREAM: fork: don't check parent_tidptr with CLONE_PIDFD kernel/fork.c * UPSTREAM: vdso: Remove superfluous #ifdef __KERNEL__ in vdso/datapage.h include/vdso/datapage.h * UPSTREAM: arm64: compat: No need for pre-ARMv7 barriers on an ARMv8 system arch/arm64/include/asm/vdso/compat_barrier.h * UPSTREAM: timekeeping/vsyscall: Use __iter_div_u64_rem() kernel/time/vsyscall.c * UPSTREAM: kasan: remove clang version check for KASAN_STACK lib/Kconfig.kasan * UPSTREAM: page flags: prioritize kasan bits over last-cpuid include/linux/page-flags-layout.h * UPSTREAM: timekeeping/vsyscall: Prevent math overflow in BOOTTIME update include/linux/timekeeper_internal.h kernel/time/timekeeping.c kernel/time/vsyscall.c UPSTREAM: kcm: disable preemption in kcm_parse_func_strparser() * UPSTREAM: cfg80211: validate SSID/MBSSID element ordering assumption net/wireless/scan.c UPSTREAM: MIPS: VDSO: Fix build for binutils < 2.25 UPSTREAM: virt_wifi: fix refcnt leak in module exit routine * UPSTREAM: sched/topology: Allow sched_asym_cpucapacity to be disabled kernel/sched/topology.c * UPSTREAM: scripts/tools-support-relr.sh: un-quote variables scripts/tools-support-relr.sh * UPSTREAM: fork: fix pidfd_poll()'s return type kernel/fork.c UPSTREAM: virt_wifi: fix use-after-free in virt_wifi_newlink() * UPSTREAM: of/platform: Unconditionally pause/resume sync state during kernel init drivers/of/platform.c * UPSTREAM: selinux: ensure the policy has been loaded before reading the sidtab stats security/selinux/ss/services.c * UPSTREAM: raid6/test: fix a compilation error include/linux/raid/pq.h UPSTREAM: PM: hibernate: fix crashes with init_on_free=1 UPSTREAM: ARM: bcm2835_defconfig: Explicitly restore CONFIG_DEBUG_FS UPSTREAM: ARM: socfpga_defconfig: Add back DEBUG_FS * UPSTREAM: binderfs: use refcount for binder control devices too drivers/android/binderfs.c UPSTREAM: um: Fix header inclusion * UPSTREAM: PM: sleep: wakeup: Skip wakeup_source_sysfs_remove() if device is not there drivers/base/power/wakeup.c * UPSTREAM: Input: fix stale timestamp on key autorepeat events drivers/input/input.c * UPSTREAM: mm/filemap.c: don't bother dropping mmap_sem for zero size readahead mm/filemap.c * UPSTREAM: arm64: vdso: don't free unallocated pages arch/arm64/kernel/vdso.c * UPSTREAM: usb: typec: altmode: Fix typec_altmode_get_partner sometimes returning an invalid pointer drivers/usb/typec/bus.c * UPSTREAM: ipv6: ndisc: RFC-ietf-6man-ra-pref64-09 is now published as RFC8781 include/net/ndisc.h UPSTREAM: s390/setup: init jump labels before command line parsing * UPSTREAM: dma-buf: free dmabuf->name in dma_buf_release() drivers/dma-buf/dma-buf.c * UPSTREAM: driver core: Don't do deferred probe in parallel with kernel_init thread drivers/base/base.h drivers/base/core.c drivers/base/dd.c * UPSTREAM: fscrypt: restrict IV_INO_LBLK_* to AES-256-XTS fs/crypto/policy.c * UPSTREAM: fscrypt: use smp_load_acquire() for fscrypt_prepared_key fs/crypto/fscrypt_private.h fs/crypto/inline_crypt.c fs/crypto/keysetup.c * UPSTREAM: mm/page_alloc: silence a KASAN false positive mm/page_alloc.c * UPSTREAM: ARM64: vdso32: Install vdso32 from vdso_install arch/arm64/Makefile arch/arm64/kernel/vdso32/Makefile * UPSTREAM: fscrypt: restrict IV_INO_LBLK_32 to ino_bits <= 32 fs/crypto/policy.c * UPSTREAM: coresight: tmc: Fix bad register address for CLAIM drivers/hwtracing/coresight/coresight-tmc-etf.c * UPSTREAM: coresight: etm4x: Fix unused function warning drivers/hwtracing/coresight/coresight-etm4x.c * UPSTREAM: coresight: etm4x: Fix use-after-free of per-cpu etm drvdata drivers/hwtracing/coresight/coresight-etm4x.c * UPSTREAM: coresight: etm4x: Fix save/restore during cpu idle drivers/hwtracing/coresight/coresight-etm4x.c drivers/hwtracing/coresight/coresight-etm4x.h * UPSTREAM: coresight: etm4x: Handle unreachable sink in perf mode drivers/hwtracing/coresight/coresight-etm-perf.c * UPSTREAM: coresight: etm4x: Fix issues on trcseqevr access drivers/hwtracing/coresight/coresight-etm4x.c * UPSTREAM: coresight: etm: perf: Fix warning caused by etm_setup_aux failure drivers/hwtracing/coresight/coresight-etm-perf.c * UPSTREAM: coresight: etm4x: Fix save and restore of TRCVMIDCCTLR1 register drivers/hwtracing/coresight/coresight-etm4x.c Merge 4.19.157 into android-4.19-stable Linux 4.19.157 powercap: restrict energy meter to root access * Revert "ANDROID: Kbuild, LLVMLinux: allow overriding clang target triple" Makefile build.config.aarch64 build.config.allmodconfig build.config.arm build.config.x86_64 Merge 4.19.156 into android-4.19-stable Linux 4.19.156 arm64: dts: marvell: espressobin: Add ethernet switch aliases * net: dsa: read mac address from DT for slave device include/net/dsa.h tools: perf: Fix build error in v4.19.y * perf/core: Fix a memory leak in perf_event_parse_addr_filter() kernel/events/core.c * PM: runtime: Resume the device earlier in __device_release_driver() drivers/base/dd.c Revert "ARC: entry: fix potential EFA clobber when TIF_SYSCALL_TRACE" ARC: stack unwinding: avoid indefinite looping usb: mtu3: fix panic in mtu3_gadget_stop() * USB: Add NO_LPM quirk for Kingston flash drive drivers/usb/core/quirks.c USB: serial: option: add Telit FN980 composition 0x1055 USB: serial: option: add LE910Cx compositions 0x1203, 0x1230, 0x1231 USB: serial: option: add Quectel EC200T module support USB: serial: cyberjack: fix write-URB completion race serial: txx9: add missing platform_driver_unregister() on error in serial_txx9_init serial: 8250_mtk: Fix uart_get_baud_rate warning * fork: fix copy_process(CLONE_PARENT) race with the exiting ->real_parent kernel/fork.c vt: Disable KD_FONT_OP_COPY ACPI: NFIT: Fix comparison to '-ENXIO' drm/vc4: drv: Add error handding for bind vsock: use ns_capable_noaudit() on socket create * scsi: core: Don't start concurrent async scan on same host drivers/scsi/scsi_scan.c * blk-cgroup: Pre-allocate tree node on blkg_conf_prep block/blk-cgroup.c * blk-cgroup: Fix memleak on error path block/blk-cgroup.c * of: Fix reserved-memory overlap detection drivers/of/of_reserved_mem.c x86/kexec: Use up-to-dated screen_info copy to fill boot params ARM: dts: sun4i-a10: fix cpu_alert temperature * futex: Handle transient "ownerless" rtmutex state correctly kernel/futex.c * tracing: Fix out of bounds write in get_trace_buf kernel/trace/trace.c * ftrace: Handle tracing when switching between context kernel/trace/trace.h * ftrace: Fix recursion check for NMI test kernel/trace/trace.h * ring-buffer: Fix recursion protection transitions between interrupt context kernel/trace/ring_buffer.c gfs2: Wake up when sd_glock_disposal becomes zero * mm: always have io_remap_pfn_range() set pgprot_decrypted() include/asm-generic/pgtable.h include/linux/mm.h * kthread_worker: prevent queuing delayed work from timer_fn when it is being canceled kernel/kthread.c lib/crc32test: remove extra local_irq_disable/enable mm: mempolicy: fix potential pte_unmap_unlock pte error * ALSA: usb-audio: Add implicit feedback quirk for MODX sound/usb/pcm.c * ALSA: usb-audio: Add implicit feedback quirk for Qu-16 sound/usb/pcm.c * ALSA: usb-audio: add usb vendor id as DSD-capable for Khadas devices sound/usb/quirks.c * ALSA: usb-audio: Add implicit feedback quirk for Zoom UAC-2 sound/usb/pcm.c Fonts: Replace discarded const qualifier btrfs: tree-checker: fix the error message for transid error btrfs: tree-checker: Verify inode item btrfs: tree-checker: Enhance chunk checker to validate chunk profile btrfs: tree-checker: Fix wrong check on max devid btrfs: tree-checker: Verify dev item btrfs: tree-checker: Check chunk item at tree block read time btrfs: tree-checker: Make btrfs_check_chunk_valid() return EUCLEAN instead of EIO btrfs: tree-checker: Make chunk item checker messages more readable btrfs: Move btrfs_check_chunk_valid() to tree-check.[ch] and export it btrfs: Don't submit any btree write bio if the fs has errors Btrfs: fix unwritten extent buffers and hangs on future writeback attempts btrfs: extent_io: add proper error handling to lock_extent_buffer_for_io() btrfs: extent_io: Handle errors better in btree_write_cache_pages() btrfs: extent_io: Handle errors better in extent_write_full_page() btrfs: flush write bio if we loop in extent_write_cache_pages Revert "btrfs: flush write bio if we loop in extent_write_cache_pages" btrfs: extent_io: Move the BUG_ON() in flush_write_bio() one level up btrfs: extent_io: Kill the forward declaration of flush_write_bio * blktrace: fix debugfs use after free kernel/trace/blktrace.c sfp: Fix error handing in sfp_probe() * sctp: Fix COMM_LOST/CANT_STR_ASSOC err reporting on big-endian platforms net/sctp/sm_sideeffect.c net: usb: qmi_wwan: add Telit LE910Cx 0x1230 composition gianfar: Account for Tx PTP timestamp in the skb headroom gianfar: Replace skb_realloc_headroom with skb_cow_head for PTP chelsio/chtls: fix always leaking ctrl_skb chelsio/chtls: fix memory leaks caused by a race cadence: force nonlinear buffers to be cloned * ptrace: fix task_join_group_stop() for the case when current is traced kernel/signal.c * tipc: fix use-after-free in tipc_bcast_get_mode net/tipc/core.c drm/i915: Break up error capture compression loops with cond_resched() * ANDROID: fuse: Add support for d_canonical_path fs/fuse/dev.c fs/fuse/dir.c fs/fuse/fuse_i.h include/uapi/linux/fuse.h * ANDROID: vfs: add d_canonical_path for stacked filesystem support fs/notify/inotify/inotify_user.c include/linux/dcache.h include/linux/fsnotify.h * ANDROID: Temporarily disable XFRM_USER_COMPAT filtering net/xfrm/xfrm_state.c net/xfrm/xfrm_user.c Merge 4.19.155 into android-4.19-stable Linux 4.19.155 staging: octeon: Drop on uncorrectable alignment or FCS error staging: octeon: repair "fixed-link" support staging: comedi: cb_pcidas: Allow 2-channel commands for AO subdevice * KVM: arm64: Fix AArch32 handling of DBGD{CCINT,SCRext} and DBGVCR arch/arm64/include/asm/kvm_host.h * device property: Don't clear secondary pointer for shared primary firmware node drivers/base/core.c * device property: Keep secondary firmware node secondary by type drivers/base/core.c ARM: s3c24xx: fix missing system reset ARM: samsung: fix PM debug build with DEBUG_LL but !MMU arm: dts: mt7623: add missing pause for switchport * hil/parisc: Disable HIL driver when it gets stuck include/linux/hil_mlc.h cachefiles: Handle readpage error correctly * arm64: berlin: Select DW_APB_TIMER_OF arch/arm64/Kconfig.platforms tty: make FONTX ioctl use the tty pointer they were actually passed rtc: rx8010: don't modify the global rtc ops drm/ttm: fix eviction valuable range check. * ext4: fix invalid inode checksum fs/ext4/inode.c * ext4: fix error handling code in add_new_gdb fs/ext4/resize.c * ext4: fix leaking sysfs kobject after failed mount fs/ext4/super.c vringh: fix __vringh_iov() when riov and wiov are different * ring-buffer: Return 0 on success from ring_buffer_resize() kernel/trace/ring_buffer.c 9P: Cast to loff_t before multiplying libceph: clear con->out_msg on Policy::stateful_server faults ceph: promote to unsigned long long before shifting drm/amd/display: Don't invoke kgdb_breakpoint() unconditionally drm/amdgpu: don't map BO in reserved region i2c: imx: Fix external abort on interrupt in exit paths ia64: fix build error with !COREDUMP ubi: check kthread_should_stop() after the setting of task state perf python scripting: Fix printable strings in python3 scripts ubifs: dent: Fix some potential memory leaks while iterating entries NFSD: Add missing NFSv2 .pc_func methods * NFSv4.2: support EXCHGID4_FLAG_SUPP_FENCE_OPS 4.2 EXCHANGE_ID flag include/uapi/linux/nfs4.h powerpc: Fix undetected data corruption with P9N DD2.1 VSX CI load emulation powerpc/powernv/elog: Fix race while processing OPAL error log event. powerpc: Warn about use of smt_snooze_delay powerpc/rtas: Restrict RTAS requests from userspace s390/stp: add locking to sysfs functions powerpc/drmem: Make lmb_size 64 bit iio:gyro:itg3200: Fix timestamp alignment and prevent data leak. iio:adc:ti-adc12138 Fix alignment issue with timestamp iio:adc:ti-adc0832 Fix alignment issue with timestamp iio:light:si1145: Fix timestamp alignment and prevent data leak. dmaengine: dma-jz4780: Fix race in jz4780_dma_tx_status udf: Fix memory leak when mounting HID: wacom: Avoid entering wacom_wac_pen_report for pad / battery vt: keyboard, extend func_buf_lock to readers vt: keyboard, simplify vt_kdgkbsent drm/i915: Force VT'd workarounds when running as a guest OS usb: host: fsl-mph-dr-of: check return of dma_set_mask() usb: typec: tcpm: reset hard_reset_count for any disconnect usb: cdc-acm: fix cooldown mechanism * usb: dwc3: core: don't trigger runtime pm when remove driver drivers/usb/dwc3/core.c * usb: dwc3: core: add phy cleanup for probe error handling drivers/usb/dwc3/core.c * usb: dwc3: gadget: Check MPS of the request length drivers/usb/dwc3/gadget.c * usb: dwc3: ep0: Fix ZLP for OUT ep0 requests drivers/usb/dwc3/ep0.c * usb: xhci: Workaround for S3 issue on AMD SNPS 3.0 xHC drivers/usb/host/xhci-pci.c drivers/usb/host/xhci.h btrfs: fix use-after-free on readahead extent after failure to create it btrfs: cleanup cow block on error btrfs: use kvzalloc() to allocate clone_roots in btrfs_ioctl_send() btrfs: send, recompute reference path after orphanization of a directory btrfs: reschedule if necessary when logging directory items btrfs: improve device scanning messages btrfs: qgroup: fix wrong qgroup metadata reserve for delayed inode scsi: qla2xxx: Fix crash on session cleanup with unload scsi: mptfusion: Fix null pointer dereferences in mptscsih_remove() w1: mxc_w1: Fix timeout resolution problem leading to bus error acpi-cpufreq: Honor _PSD table setting on new AMD CPUs ACPI: debug: don't allow debugging when ACPI is disabled ACPI: video: use ACPI backlight for HP 635 Notebook ACPI / extlog: Check for RDMSR failure ACPI: button: fix handling lid state changes when input device closed NFS: fix nfs_path in case of a rename retry * fs: Don't invalidate page buffers in block_write_full_page() fs/buffer.c media: uvcvideo: Fix uvc_ctrl_fixup_xu_info() not having any effect leds: bcm6328, bcm6358: use devres LED registering function perf/x86/amd/ibs: Fix raw sample data accumulation perf/x86/amd/ibs: Don't include randomized bits in get_ibs_op_count() mmc: sdhci-acpi: AMDI0040: Set SDHCI_QUIRK2_PRESET_VALUE_BROKEN md/raid5: fix oops during stripe resizing nvme-rdma: fix crash when connect rejected * sgl_alloc_order: fix memory leak lib/scatterlist.c nbd: make the config put is called before the notifying the waiter ARM: dts: s5pv210: remove dedicated 'audio-subsystem' node ARM: dts: s5pv210: move PMU node out of clock controller ARM: dts: s5pv210: remove DMA controller bus node name to fix dtschema warnings memory: emif: Remove bogus debugfs error handling ARM: dts: omap4: Fix sgx clock rate for 4430 arm64: dts: renesas: ulcb: add full-pwr-cycle-in-suspend into eMMC nodes cifs: handle -EINTR in cifs_setattr gfs2: add validation checks for size of superblock * ext4: Detect already used quota file early fs/ext4/super.c drivers: watchdog: rdc321x_wdt: Fix race condition bugs net: 9p: initialize sun_server.sun_path to have addr's value only when addr is valid clk: ti: clockdomain: fix static checker warning * rpmsg: glink: Use complete_all for open states drivers/rpmsg/qcom_glink_native.c bnxt_en: Log unknown link speed appropriately. md/bitmap: md_bitmap_get_counter returns wrong blocks btrfs: fix replace of seed device drm/amd/display: HDMI remote sink need mode validation for Linux power: supply: test_power: add missing newlines when printing parameters by sysfs bus/fsl_mc: Do not rely on caller to provide non NULL mc_io drivers/net/wan/hdlc_fr: Correctly handle special skb->protocol values ACPI: Add out of bounds and numa_off protections to pxm_to_node() xfs: don't free rt blocks when we're doing a REMAP bunmapi call * arm64/mm: return cpu_all_mask when node is NUMA_NO_NODE arch/arm64/include/asm/numa.h * usb: xhci: omit duplicate actions when suspending a runtime suspended host. drivers/usb/host/xhci.c * uio: free uio id after uio file node is freed drivers/uio/uio.c USB: adutux: fix debugging cpufreq: sti-cpufreq: add stih418 support riscv: Define AT_VECTOR_SIZE_ARCH for ARCH_DLINFO media: uvcvideo: Fix dereference of out-of-bound list iterator kgdb: Make "kgdbcon" work properly with "kgdb_earlycon" ia64: kprobes: Use generic kretprobe trampoline handler * printk: reduce LOG_BUF_SHIFT range for H8300 init/Kconfig * arm64: topology: Stop using MPIDR for topology information arch/arm64/kernel/topology.c drm/bridge/synopsys: dsi: add support for non-continuous HS clock mmc: via-sdmmc: Fix data race bug media: imx274: fix frame interval handling media: tw5864: check status of tw5864_frameinterval_get * usb: typec: tcpm: During PR_SWAP, source caps should be sent only after tSwapSourceStart include/linux/usb/pd.h media: platform: Improve queue set up flow for bug fixing * media: videodev2.h: RGB BT2020 and HSV are always full range include/uapi/linux/videodev2.h drm/brige/megachips: Add checking if ge_b850v3_lvds_init() is working correctly ath10k: fix VHT NSS calculation when STBC is enabled ath10k: start recovery process when payload length exceeds max htc length for sdio video: fbdev: pvr2fb: initialize variables xfs: fix realtime bitmap/summary file truncation when growing rt volume power: supply: bq27xxx: report "not charging" on all types ARM: 8997/2: hw_breakpoint: Handle inexact watchpoint addresses um: change sigio_spinlock to a mutex * f2fs: fix to check segment boundary during SIT page readahead fs/f2fs/checkpoint.c * f2fs: fix uninit-value in f2fs_lookup fs/f2fs/dir.c * f2fs: add trace exit in exception path fs/f2fs/checkpoint.c sparc64: remove mm_cpumask clearing to fix kthread_use_mm race powerpc: select ARCH_WANT_IRQS_OFF_ACTIVATE_MM * mm: fix exec activate_mm vs TLB shootdown and lazy tlb switching race arch/Kconfig fs/exec.c powerpc/powernv/smp: Fix spurious DBG() warning * futex: Fix incorrect should_fail_futex() handling kernel/futex.c ata: sata_nv: Fix retrieving of active qcs RDMA/qedr: Fix memory leak in iWARP CM mlxsw: core: Fix use-after-free in mlxsw_emad_trans_finish() x86/unwind/orc: Fix inactive tasks with stack pointer in %sp on GCC 10 compiled kernels xen/events: block rogue events for some time xen/events: defer eoi in case of excessive number of events xen/events: use a common cpu hotplug hook for event channels xen/events: switch user event channels to lateeoi model xen/pciback: use lateeoi irq binding xen/pvcallsback: use lateeoi irq binding xen/scsiback: use lateeoi irq binding xen/netback: use lateeoi irq binding xen/blkback: use lateeoi irq binding * xen/events: add a new "late EOI" evtchn framework include/xen/events.h xen/events: fix race in evtchn_fifo_unmask() xen/events: add a proper barrier to 2-level uevent unmasking xen/events: avoid removing an event channel while handling it xen/events: don't use chip_data for legacy IRQs * Revert "block: ratelimit handle_bad_sector() message" block/blk-core.c * fscrypt: fix race where ->lookup() marks plaintext dentry as ciphertext fs/crypto/fname.c fs/crypto/hooks.c fs/ext4/ext4.h fs/ext4/namei.c fs/f2fs/namei.c include/linux/fscrypt.h * fscrypt: only set dentry_operations on ciphertext dentries fs/crypto/hooks.c * fs, fscrypt: clear DCACHE_ENCRYPTED_NAME when unaliasing directory fs/dcache.c * fscrypt: fix race allowing rename() and link() of ciphertext dentries fs/crypto/hooks.c include/linux/fscrypt.h * fscrypt: clean up and improve dentry revalidation fs/crypto/crypto.c fs/crypto/hooks.c include/linux/dcache.h include/linux/fscrypt.h * fscrypt: return -EXDEV for incompatible rename or link into encrypted dir fs/crypto/hooks.c fs/crypto/policy.c include/linux/fscrypt.h ata: sata_rcar: Fix DMA boundary mask serial: pl011: Fix lockdep splat when handling magic-sysrq interrupt * mtd: lpddr: Fix bad logic in print_drs_error include/linux/mtd/pfow.h RDMA/addr: Fix race with netevent_callback()/rdma_addr_cancel() cxl: Rework error message for incompatible slots p54: avoid accessing the data mapped to streaming DMA evm: Check size of security.evm before using it * bpf: Fix comment for helper bpf_current_task_under_cgroup() include/uapi/linux/bpf.h * fuse: fix page dereference after free fs/fuse/dev.c x86/xen: disable Firmware First mode for correctable memory errors arch/x86/amd/ibs: Fix re-arming IBS Fetch cxgb4: set up filter action after rewrites r8169: fix issue with forced threading in combination with shared interrupts * tipc: fix memory leak caused by tipc_buf_append() net/tipc/msg.c * tcp: Prevent low rmem stalls with SO_RCVLOWAT. net/ipv4/tcp.c net/ipv4/tcp_input.c ravb: Fix bit fields checking in ravb_hwtstamp_get() * netem: fix zero division in tabledist net/sched/sch_netem.c mlxsw: core: Fix memory leak on module removal gtp: fix an use-before-init in gtp_newlink() chelsio/chtls: fix tls record info to user chelsio/chtls: fix memory leaks in CPL handlers chelsio/chtls: fix deadlock issue efivarfs: Replace invalid slashes with exclamation marks in dentries. x86/PCI: Fix intel_mid_pci.c build error when ACPI is not enabled * arm64: link with -z norelro regardless of CONFIG_RELOCATABLE arch/arm64/Makefile * arm64: Run ARCH_WORKAROUND_1 enabling code on all CPUs arch/arm64/kernel/cpu_errata.c * scripts/setlocalversion: make git describe output more reliable scripts/setlocalversion objtool: Support Clang non-section symbols in ORC generation ANDROID: GKI: Enable DEBUG_INFO_DWARF4 * UPSTREAM: mm/sl[uo]b: export __kmalloc_track(_node)_caller mm/slub.c * BACKPORT: xfrm/compat: Translate 32-bit user_policy from sockptr include/net/xfrm.h net/xfrm/xfrm_state.c * BACKPORT: xfrm/compat: Add 32=>64-bit messages translator include/net/xfrm.h net/xfrm/Kconfig net/xfrm/xfrm_user.c * UPSTREAM: xfrm/compat: Attach xfrm dumps to 64=>32 bit translator net/xfrm/xfrm_user.c * UPSTREAM: xfrm/compat: Add 64=>32-bit messages translator include/net/xfrm.h net/xfrm/xfrm_user.c * BACKPORT: xfrm: Provide API to register translator module include/net/xfrm.h net/xfrm/Kconfig net/xfrm/Makefile net/xfrm/xfrm_state.c * ANDROID: Publish uncompressed Image on aarch64 build.config.aarch64 FROMLIST: crypto: arm64/poly1305-neon - reorder PAC authentication with SP update UPSTREAM: crypto: arm64/chacha - fix chacha_4block_xor_neon() for big endian UPSTREAM: crypto: arm64/chacha - fix hchacha_block_neon() for big endian Merge 4.19.154 into android-4.19-stable Linux 4.19.154 * usb: gadget: f_ncm: allow using NCM in SuperSpeed Plus gadgets. drivers/usb/gadget/function/f_ncm.c eeprom: at25: set minimum read/write access stride to 1 USB: cdc-wdm: Make wdm_flush() interruptible and add wdm_fsync(). usb: cdc-acm: add quirk to blacklist ETAS ES58X devices tty: serial: fsl_lpuart: fix lpuart32_poll_get_char net: korina: cast KSEG0 address to pointer in kfree ath10k: check idx validity in __ath10k_htt_rx_ring_fill_n() * scsi: ufs: ufs-qcom: Fix race conditions caused by ufs_qcom_testbus_config() drivers/scsi/ufs/ufs-qcom.c * usb: core: Solve race condition in anchor cleanup functions drivers/usb/core/urb.c brcm80211: fix possible memleak in brcmf_proto_msgbuf_attach mwifiex: don't call del_timer_sync() on uninitialized timer reiserfs: Fix memory leak in reiserfs_parse_options() ipvs: Fix uninit-value in do_ip_vs_set_ctl() tty: ipwireless: fix error handling scsi: qedi: Fix list_del corruption while removing active I/O scsi: qedi: Protect active command list to avoid list corruption Fix use after free in get_capset_info callback. rtl8xxxu: prevent potential memory leak brcmsmac: fix memory leak in wlc_phy_attach_lcnphy scsi: ibmvfc: Fix error return in ibmvfc_probe() * Bluetooth: Only mark socket zapped after unlocking net/bluetooth/l2cap_sock.c * usb: ohci: Default to per-port over-current protection drivers/usb/host/ohci-hcd.c xfs: make sure the rt allocator doesn't run off the end reiserfs: only call unlock_new_inode() if I_NEW misc: rtsx: Fix memory leak in rtsx_pci_probe ath9k: hif_usb: fix race condition between usb_get_urb() and usb_kill_anchored_urbs() can: flexcan: flexcan_chip_stop(): add error handling and propagate error value * usb: dwc3: simple: add support for Hikey 970 drivers/usb/dwc3/dwc3-of-simple.c USB: cdc-acm: handle broken union descriptors udf: Avoid accessing uninitialized data on failed inode read udf: Limit sparing table size usb: gadget: function: printer: fix use-after-free in __lock_acquire misc: vop: add round_up(x,4) for vring_size to avoid kernel panic mic: vop: copy data to kernel space then write to io memory * scsi: target: core: Add CONTROL field for trace events include/scsi/scsi_common.h include/trace/events/target.h scsi: mvumi: Fix error return in mvumi_io_attach() PM: hibernate: remove the bogus call to get_gendisk() in software_resume() mac80211: handle lack of sband->bitrates in rates ip_gre: set dev->hard_header_len and dev->needed_headroom properly ntfs: add check for mft record size in superblock media: venus: core: Fix runtime PM imbalance in venus_probe fs: dlm: fix configfs memory leak media: saa7134: avoid a shift overflow mmc: sdio: Check for CISTPL_VERS_1 buffer size media: uvcvideo: Ensure all probed info is returned to v4l2 media: media/pci: prevent memory leak in bttv_probe media: bdisp: Fix runtime PM imbalance on error media: platform: sti: hva: Fix runtime PM imbalance on error media: platform: s3c-camif: Fix runtime PM imbalance on error media: vsp1: Fix runtime PM imbalance on error media: exynos4-is: Fix a reference count leak media: exynos4-is: Fix a reference count leak due to pm_runtime_get_sync media: exynos4-is: Fix several reference count leaks due to pm_runtime_get_sync media: sti: Fix reference count leaks media: st-delta: Fix reference count leak in delta_run_work media: ati_remote: sanity check for both endpoints media: firewire: fix memory leak crypto: ccp - fix error handling * block: ratelimit handle_bad_sector() message block/blk-core.c i2c: core: Restore acpi_walk_dep_device_list() getting called after registering the ACPI i2c devs * perf: correct SNOOPX field offset include/uapi/linux/perf_event.h * sched/features: Fix !CONFIG_JUMP_LABEL case kernel/sched/core.c kernel/sched/sched.h NTB: hw: amd: fix an issue about leak system resources nvmet: fix uninitialized work for zero kato powerpc/powernv/dump: Fix race while processing OPAL dump arm64: dts: zynqmp: Remove additional compatible string for i2c IPs ARM: dts: owl-s500: Fix incorrect PPI interrupt specifiers arm64: dts: qcom: msm8916: Fix MDP/DSI interrupts arm64: dts: qcom: pm8916: Remove invalid reg size from wcd_codec memory: fsl-corenet-cf: Fix handling of platform_get_irq() error memory: omap-gpmc: Fix build error without CONFIG_OF memory: omap-gpmc: Fix a couple off by ones ARM: dts: sun8i: r40: bananapi-m2-ultra: Fix dcdc1 regulator ARM: dts: imx6sl: fix rng node netfilter: nf_fwd_netdev: clear timestamp in forwarding path * netfilter: conntrack: connection timeout after re-register net/netfilter/nf_conntrack_proto_tcp.c KVM: x86: emulating RDPID failure shall return #UD rather than #GP Input: sun4i-ps2 - fix handling of platform_get_irq() error Input: twl4030_keypad - fix handling of platform_get_irq() error Input: omap4-keypad - fix handling of platform_get_irq() error Input: ep93xx_keypad - fix handling of platform_get_irq() error Input: stmfts - fix a & vs && typo Input: imx6ul_tsc - clean up some errors in imx6ul_tsc_resume() SUNRPC: fix copying of multiple pages in gss_read_proxy_verf() vfio iommu type1: Fix memory leak in vfio_iommu_type1_pin_pages vfio/pci: Clear token on bypass registration failure * ext4: limit entries returned when counting fsmap records fs/ext4/fsmap.c svcrdma: fix bounce buffers for unaligned offsets and multiple pages watchdog: sp5100: Fix definition of EFCH_PM_DECODEEN3 * watchdog: Use put_device on error drivers/watchdog/watchdog_dev.c * watchdog: Fix memleak in watchdog_cdev_register drivers/watchdog/watchdog_dev.c clk: bcm2835: add missing release if devm_clk_hw_register fails clk: at91: clk-main: update key before writing AT91_CKGR_MOR clk: rockchip: Initialize hw to error to avoid undefined behavior pwm: img: Fix null pointer access in probe rpmsg: smd: Fix a kobj leak in in qcom_smd_parse_edge() PCI: iproc: Set affinity mask on MSI interrupts * i2c: rcar: Auto select RESET_CONTROLLER drivers/i2c/busses/Kconfig * mailbox: avoid timer start from callback drivers/mailbox/mailbox.c rapidio: fix the missed put_device() for rio_mport_add_riodev rapidio: fix error handling path ramfs: fix nommu mmap with gaps in the page cache * lib/crc32.c: fix trivial typo in preprocessor condition lib/crc32.c * f2fs: wait for sysfs kobject removal before freeing f2fs_sb_info fs/f2fs/sysfs.c IB/rdmavt: Fix sizeof mismatch cpufreq: powernv: Fix frame-size-overflow in powernv_cpufreq_reboot_notifier powerpc/perf/hv-gpci: Fix starting index value powerpc/perf: Exclude pmc5/6 from the irrelevant PMU group constraints * overflow: Include header file with SIZE_MAX declaration include/linux/overflow.h kdb: Fix pager search for multi-line strings RDMA/hns: Fix missing sq_sig_type when querying QP RDMA/hns: Set the unsupported wr opcode perf intel-pt: Fix "context_switch event has no tid" error RDMA/cma: Consolidate the destruction of a cma_multicast in one place RDMA/cma: Remove dead code for kernel rdmacm multicast powerpc/64s/radix: Fix mm_cpumask trimming race vs kthread_use_mm powerpc/tau: Disable TAU between measurements powerpc/tau: Check processor type before enabling TAU interrupt ANDROID: GKI: update the ABI xml Merge 4.19.153 into android-4.19-stable Linux 4.19.153 powerpc/tau: Remove duplicated set_thresholds() call powerpc/tau: Convert from timer to workqueue powerpc/tau: Use appropriate temperature sample interval RDMA/qedr: Fix inline size returned for iWARP RDMA/qedr: Fix use of uninitialized field xfs: fix high key handling in the rt allocator's query_range function xfs: limit entries returned when counting fsmap records arc: plat-hsdk: fix kconfig dependency warning when !RESET_CONTROLLER ARM: 9007/1: l2c: fix prefetch bits init in L2X0_AUX_CTRL using DT values mtd: mtdoops: Don't write panic data twice powerpc/pseries: explicitly reschedule during drmem_lmb list traversal mtd: lpddr: fix excessive stack usage with clang RDMA/ucma: Add missing locking around rdma_leave_multicast() RDMA/ucma: Fix locking for ctx->events_reported powerpc/icp-hv: Fix missing of_node_put() in success path powerpc/pseries: Fix missing of_node_put() in rng_init() IB/mlx4: Adjust delayed work when a dup is observed IB/mlx4: Fix starvation in paravirt mux/demux * mm, oom_adj: don't loop through tasks in __set_oom_adj when not necessary fs/proc/base.c include/linux/oom.h include/linux/sched/coredump.h kernel/fork.c mm/oom_kill.c * mm/memcg: fix device private memcg accounting mm/memcontrol.c * netfilter: nf_log: missing vlan offload tag and proto include/net/netfilter/nf_log.h net/ipv4/netfilter/nf_log_ipv4.c net/ipv6/netfilter/nf_log_ipv6.c net/netfilter/nf_log_common.c net: korina: fix kfree of rx/tx descriptor array ipvs: clear skb->tstamp in forwarding path mwifiex: fix double free platform/x86: mlx-platform: Remove PSU EEPROM configuration scsi: be2iscsi: Fix a theoretical leak in beiscsi_create_eqs() scsi: target: tcmu: Fix warning: 'page' may be used uninitialized usb: dwc2: Fix INTR OUT transfers in DDMA mode. * nl80211: fix non-split wiphy information net/wireless/nl80211.c * usb: gadget: u_ether: enable qmult on SuperSpeed Plus as well drivers/usb/gadget/function/u_ether.c * usb: gadget: f_ncm: fix ncm_bitrate for SuperSpeed and above. drivers/usb/gadget/function/f_ncm.c iwlwifi: mvm: split a print to avoid a WARNING in ROC mfd: sm501: Fix leaks in probe() net: enic: Cure the enic api locking trainwreck qtnfmac: fix resource leaks on unsupported iftype error return path * HID: hid-input: fix stylus battery reporting drivers/hid/hid-input.c slimbus: qcom-ngd-ctrl: disable ngd in qmi server down callback slimbus: core: do not enter to clock pause mode in core slimbus: core: check get_addr before removing laddr ida * quota: clear padding in v2r1_mem2diskdqb() fs/quota/quota_v2.c usb: dwc2: Fix parameter type in function pointer prototype ALSA: seq: oss: Avoid mutex lock for a long-time ioctl misc: mic: scif: Fix error handling path ath6kl: wmi: prevent a shift wrapping bug in ath6kl_wmi_delete_pstream_cmd() net: dsa: rtl8366rb: Support all 4096 VLANs net: dsa: rtl8366: Skip PVID setting if not requested net: dsa: rtl8366: Refactor VLAN/PVID init net: dsa: rtl8366: Check validity of passed VLANs cpufreq: armada-37xx: Add missing MODULE_DEVICE_TABLE net: stmmac: use netif_tx_start\|stop_all_queues() function net/mlx5: Don't call timecounter cyc2time directly from 1PPS flow pinctrl: mcp23s08: Fix mcp23x17 precious range pinctrl: mcp23s08: Fix mcp23x17_regmap initialiser HID: roccat: add bounds checking in kone_sysfs_write_settings() video: fbdev: radeon: Fix memleak in radeonfb_pci_register video: fbdev: sis: fix null ptr dereference video: fbdev: vga16fb: fix setting of pixclock because a pass-by-value error drivers/virt/fsl_hypervisor: Fix error handling path pwm: lpss: Add range limit check for the base_unit register value pwm: lpss: Fix off by one error in base_unit math in pwm_lpss_prepare() * pty: do tty_flip_buffer_push without port->lock in pty_write drivers/tty/pty.c tty: hvcs: Don't NULL tty->driver_data until hvcs_cleanup() * tty: serial: earlycon dependency drivers/tty/serial/Kconfig VMCI: check return value of get_user_pages_fast() for errors backlight: sky81452-backlight: Fix refcount imbalance on error scsi: csiostor: Fix wrong return value in csio_hw_prep_fw() scsi: qla2xxx: Fix wrong return value in qla_nvme_register_hba() scsi: qla4xxx: Fix an error handling path in 'qla4xxx_get_host_stats()' drm/gma500: fix error check staging: rtl8192u: Do not use GFP_KERNEL in atomic context mwifiex: Do not use GFP_KERNEL in atomic context brcmfmac: check ndev pointer ASoC: qcom: lpass-cpu: fix concurrency issue ASoC: qcom: lpass-platform: fix memory leak wcn36xx: Fix reported 802.11n rx_highest rate wcn3660/wcn3680 ath10k: Fix the size used in a 'dma_free_coherent()' call in an error handling path ath9k: Fix potential out of bounds in ath9k_htc_txcompletion_cb() ath6kl: prevent potential array overflow in ath6kl_add_new_sta() Bluetooth: hci_uart: Cancel init work before unregistering ath10k: provide survey info as accumulated data spi: spi-s3c64xx: Check return values spi: spi-s3c64xx: swap s3c64xx_spi_set_cs() and s3c64xx_enable_datapath() * pinctrl: bcm: fix kconfig dependency warning when !GPIOLIB drivers/pinctrl/bcm/Kconfig * regulator: resolve supply after creating regulator drivers/regulator/core.c media: ti-vpe: Fix a missing check and reference count leak media: stm32-dcmi: Fix a reference count leak media: s5p-mfc: Fix a reference count leak media: camss: Fix a reference count leak. media: platform: fcp: Fix a reference count leak. media: rockchip/rga: Fix a reference count leak. media: rcar-vin: Fix a reference count leak. media: tc358743: cleanup tc358743_cec_isr media: tc358743: initialize variable media: mx2_emmaprp: Fix memleak in emmaprp_probe cypto: mediatek - fix leaks in mtk_desc_ring_alloc hwmon: (pmbus/max34440) Fix status register reads for MAX344{51,60,61} crypto: omap-sham - fix digcnt register handling with export/import media: omap3isp: Fix memleak in isp_probe media: uvcvideo: Silence shift-out-of-bounds warning media: uvcvideo: Set media controller entity functions media: m5mols: Check function pointer in m5mols_sensor_power media: Revert "media: exynos4-is: Add missed check for pinctrl_lookup_state()" media: tuner-simple: fix regression in simple_set_radio_freq crypto: picoxcell - Fix potential race condition bug crypto: ixp4xx - Fix the size used in a 'dma_free_coherent()' call crypto: mediatek - Fix wrong return value in mtk_desc_ring_alloc() crypto: algif_skcipher - EBUSY on aio should be an error x86/events/amd/iommu: Fix sizeof mismatch x86/nmi: Fix nmi_handle() duration miscalculation drivers/perf: xgene_pmu: Fix uninitialized resource struct x86/fpu: Allow multiple bits in clearcpuid= parameter EDAC/ti: Fix handling of platform_get_irq() error EDAC/i5100: Fix error handling order in i5100_init_one() crypto: algif_aead - Do not set MAY_BACKLOG on the async path ima: Don't ignore errors from crypto_shash_update() KVM: SVM: Initialize prev_ga_tag before use KVM: x86/mmu: Commit zap of remaining invalid pages when recovering lpages cifs: Return the error from crypt_message when enc/dec key not found. cifs: remove bogus debug code ALSA: hda/realtek: Enable audio jacks of ASUS D700SA with ALC887 * icmp: randomize the global rate limiter net/ipv4/icmp.c r8169: fix operation under forced interrupt threading * tcp: fix to update snd_wl1 in bulk receiver fast path net/ipv4/tcp_input.c nfc: Ensure presence of NFC_ATTR_FIRMWARE_NAME attribute in nfc_genl_fw_download() net/sched: act_tunnel_key: fix OOB write in case of IPv6 ERSPAN tunnels net: hdlc_raw_eth: Clear the IFF_TX_SKB_SHARING flag after calling ether_setup net: hdlc: In hdlc_rcv, check to make sure dev is an HDLC device chelsio/chtls: correct function return and return type chelsio/chtls: correct netdevice for vlan interface chelsio/chtls: fix socket lock ALSA: bebob: potential info leak in hwdep_read() * binder: fix UAF when releasing todo list drivers/android/binder.c net/tls: sendfile fails with ktls offload r8169: fix data corruption issue on RTL8402 * net/ipv4: always honour route mtu during forwarding include/net/ip.h * tipc: fix the skb_unshare() in tipc_buf_append() net/tipc/msg.c net: usb: qmi_wwan: add Cellient MPL200 card net/smc: fix valid DMBE buffer sizes * net: fix pos incrementment in ipv6_route_seq_next net/ipv6/ip6_fib.c net: fec: Fix PHY init after phy_reset_after_clk_enable() net: fec: Fix phy_device lookup for phy_reset_after_clk_enable() mlx4: handle non-napi callers to napi_poll * ipv4: Restore flowi4_oif update before call to xfrm_lookup_route net/ipv4/route.c ibmveth: Identify ingress large send packets. ibmveth: Switch order of ibmveth_helper calls. ANDROID: clang: update to 11.0.5 * FROMLIST: arm64: link with -z norelro regardless of CONFIG_RELOCATABLE arch/arm64/Makefile ANDROID: GKI: enable CONFIG_WIREGUARD UPSTREAM: wireguard: peerlookup: take lock before checking hash in replace operation UPSTREAM: wireguard: noise: take lock when removing handshake entry from table UPSTREAM: wireguard: queueing: make use of ip_tunnel_parse_protocol * UPSTREAM: net: ip_tunnel: add header_ops for layer 3 devices include/net/ip_tunnels.h net/ipv4/ip_tunnel_core.c UPSTREAM: wireguard: receive: account for napi_gro_receive never returning GRO_DROP UPSTREAM: wireguard: device: avoid circular netns references UPSTREAM: wireguard: noise: do not assign initiation time in if condition UPSTREAM: wireguard: noise: separate receive counter from send counter UPSTREAM: wireguard: queueing: preserve flow hash across packet scrubbing UPSTREAM: wireguard: noise: read preshared key while taking lock UPSTREAM: wireguard: selftests: use newer iproute2 for gcc-10 UPSTREAM: wireguard: send/receive: use explicit unlikely branch instead of implicit coalescing UPSTREAM: wireguard: selftests: initalize ipv6 members to NULL to squelch clang warning UPSTREAM: wireguard: send/receive: cond_resched() when processing worker ringbuffers UPSTREAM: wireguard: socket: remove errant restriction on looping to self UPSTREAM: wireguard: selftests: use normal kernel stack size on ppc64 UPSTREAM: wireguard: receive: use tunnel helpers for decapsulating ECN markings UPSTREAM: wireguard: queueing: cleanup ptr_ring in error path of packet_queue_init UPSTREAM: wireguard: send: remove errant newline from packet_encrypt_worker UPSTREAM: wireguard: noise: error out precomputed DH during handshake rather than config UPSTREAM: wireguard: receive: remove dead code from default packet type case UPSTREAM: wireguard: queueing: account for skb->protocol==0 UPSTREAM: wireguard: selftests: remove duplicated include <sys/types.h> UPSTREAM: wireguard: socket: remove extra call to synchronize_net UPSTREAM: wireguard: send: account for mtu=0 devices UPSTREAM: wireguard: receive: reset last_under_load to zero UPSTREAM: wireguard: selftests: reduce complexity and fix make races UPSTREAM: wireguard: device: use icmp_ndo_send helper UPSTREAM: wireguard: selftests: tie socket waiting to target pid UPSTREAM: wireguard: selftests: ensure non-addition of peers with failed precomputation UPSTREAM: wireguard: noise: reject peers with low order public keys UPSTREAM: wireguard: allowedips: fix use-after-free in root_remove_peer_lists * UPSTREAM: net: skbuff: disambiguate argument and member for skb_list_walk_safe helper include/linux/skbuff.h * UPSTREAM: net: introduce skb_list_walk_safe for skb segment walking include/linux/skbuff.h UPSTREAM: wireguard: socket: mark skbs as not on list when receiving via gro UPSTREAM: wireguard: queueing: do not account for pfmemalloc when clearing skb header UPSTREAM: wireguard: selftests: remove ancient kernel compatibility code UPSTREAM: wireguard: allowedips: use kfree_rcu() instead of call_rcu() UPSTREAM: wireguard: main: remove unused include <linux/version.h> * UPSTREAM: wireguard: global: fix spelling mistakes in comments include/uapi/linux/wireguard.h * UPSTREAM: wireguard: Kconfig: select parent dependency for crypto drivers/net/Kconfig UPSTREAM: wireguard: selftests: import harness makefile for test suite * UPSTREAM: net: WireGuard secure network tunnel drivers/net/Kconfig drivers/net/Makefile include/uapi/linux/wireguard.h * UPSTREAM: timekeeping: Boot should be boottime for coarse ns accessor include/linux/timekeeping.h * UPSTREAM: timekeeping: Add missing _ns functions for coarse accessors include/linux/timekeeping.h * UPSTREAM: icmp: introduce helper for nat'd source address in network device context include/linux/icmpv6.h include/net/icmp.h net/ipv4/icmp.c net/ipv6/ip6_icmp.c UPSTREAM: crypto: poly1305-x86_64 - Use XORL r32,32 UPSTREAM: crypto: curve25519-x86_64 - Use XORL r32,32 UPSTREAM: crypto: arm/poly1305 - Add prototype for poly1305_blocks_neon UPSTREAM: crypto: arm/curve25519 - include <linux/scatterlist.h> UPSTREAM: crypto: x86/curve25519 - Remove unused carry variables * UPSTREAM: crypto: x86/chacha-sse3 - use unaligned loads for state array include/crypto/chacha.h * UPSTREAM: crypto: lib/chacha20poly1305 - Add missing function declaration include/crypto/chacha20poly1305.h UPSTREAM: crypto: arch/lib - limit simd usage to 4k chunks UPSTREAM: crypto: arm[64]/poly1305 - add artifact to .gitignore files UPSTREAM: crypto: x86/curve25519 - leave r12 as spare register UPSTREAM: crypto: x86/curve25519 - replace with formally verified implementation UPSTREAM: crypto: arm64/chacha - correctly walk through blocks * UPSTREAM: crypto: x86/curve25519 - support assemblers with no adx support include/crypto/curve25519.h UPSTREAM: crypto: chacha20poly1305 - prevent integer overflow on large input * UPSTREAM: crypto: Kconfig - allow tests to be disabled when manager is disabled crypto/Kconfig UPSTREAM: crypto: arm/chacha - fix build failured when kernel mode NEON is disabled UPSTREAM: crypto: x86/poly1305 - emit does base conversion itself UPSTREAM: crypto: chacha20poly1305 - add back missing test vectors and test chunking UPSTREAM: crypto: x86/poly1305 - fix .gitignore typo * UPSTREAM: crypto: curve25519 - Fix selftest build error lib/crypto/Makefile UPSTREAM: crypto: {arm,arm64,mips}/poly1305 - remove redundant non-reduction from emit * UPSTREAM: crypto: x86/poly1305 - wire up faster implementations for kernel lib/crypto/Kconfig UPSTREAM: crypto: x86/poly1305 - import unmodified cryptogams implementation * UPSTREAM: crypto: poly1305 - add new 32 and 64-bit generic versions crypto/poly1305_generic.c include/crypto/internal/poly1305.h include/crypto/nhpoly1305.h include/crypto/poly1305.h lib/crypto/Makefile lib/crypto/poly1305-donna64.c lib/crypto/poly1305.c * UPSTREAM: crypto: lib/curve25519 - re-add selftests lib/crypto/Makefile UPSTREAM: crypto: arm/curve25519 - add arch-specific key generation function * UPSTREAM: crypto: chacha - fix warning message in header file include/crypto/internal/chacha.h UPSTREAM: crypto: arch - conditionalize crypto api in arch glue for lib code UPSTREAM: crypto: lib/chacha20poly1305 - use chacha20_crypt() UPSTREAM: crypto: x86/chacha - only unregister algorithms if registered * UPSTREAM: crypto: chacha_generic - remove unnecessary setkey() functions crypto/chacha_generic.c * UPSTREAM: crypto: lib/chacha20poly1305 - reimplement crypt_from_sg() routine include/crypto/chacha20poly1305.h * UPSTREAM: crypto: chacha20poly1305 - import construction and selftest from Zinc include/crypto/chacha20poly1305.h lib/crypto/Kconfig lib/crypto/Makefile UPSTREAM: crypto: arm/curve25519 - wire up NEON implementation UPSTREAM: crypto: arm/curve25519 - import Bernstein and Schwabe's Curve25519 ARM implementation * UPSTREAM: crypto: curve25519 - x86_64 library and KPP implementations crypto/Kconfig UPSTREAM: crypto: lib/curve25519 - work around Clang stack spilling issue * UPSTREAM: crypto: curve25519 - implement generic KPP driver crypto/Kconfig crypto/Makefile * UPSTREAM: crypto: curve25519 - add kpp selftest crypto/testmgr.c * UPSTREAM: crypto: curve25519 - generic C library implementations include/crypto/curve25519.h lib/crypto/Kconfig lib/crypto/Makefile * UPSTREAM: crypto: blake2s - x86_64 SIMD implementation crypto/Kconfig * UPSTREAM: crypto: blake2s - implement generic shash driver crypto/Kconfig crypto/Makefile include/crypto/internal/blake2s.h * UPSTREAM: crypto: testmgr - add test cases for Blake2s crypto/testmgr.c * UPSTREAM: crypto: blake2s - generic C library implementation and selftest include/crypto/blake2s.h include/crypto/internal/blake2s.h lib/crypto/Kconfig lib/crypto/Makefile * UPSTREAM: crypto: mips/poly1305 - incorporate OpenSSL/CRYPTOGAMS optimized implementation crypto/Kconfig lib/crypto/Kconfig * UPSTREAM: crypto: arm/poly1305 - incorporate OpenSSL/CRYPTOGAMS NEON implementation lib/crypto/Kconfig * UPSTREAM: crypto: arm64/poly1305 - incorporate OpenSSL/CRYPTOGAMS NEON implementation arch/arm64/crypto/Kconfig arch/arm64/crypto/Makefile lib/crypto/Kconfig * UPSTREAM: crypto: x86/poly1305 - expose existing driver as poly1305 library crypto/Kconfig lib/crypto/Kconfig * UPSTREAM: crypto: x86/poly1305 - depend on generic library not generic shash crypto/Kconfig crypto/poly1305_generic.c include/crypto/internal/poly1305.h * UPSTREAM: crypto: poly1305 - expose init/update/final library interface crypto/poly1305_generic.c include/crypto/poly1305.h lib/crypto/Kconfig lib/crypto/poly1305.c * UPSTREAM: crypto: x86/poly1305 - unify Poly1305 state struct with generic code crypto/poly1305_generic.c include/crypto/internal/poly1305.h include/crypto/poly1305.h * UPSTREAM: crypto: poly1305 - move core routines into a separate library crypto/Kconfig crypto/poly1305_generic.c include/crypto/internal/poly1305.h include/crypto/poly1305.h lib/crypto/Kconfig lib/crypto/Makefile lib/crypto/poly1305.c * UPSTREAM: crypto: chacha - unexport chacha_generic routines crypto/chacha_generic.c include/crypto/internal/chacha.h * UPSTREAM: crypto: mips/chacha - wire up accelerated 32r2 code from Zinc crypto/Kconfig UPSTREAM: crypto: mips/chacha - import 32r2 ChaCha code from Zinc UPSTREAM: crypto: arm/chacha - expose ARM ChaCha routine as library function UPSTREAM: crypto: arm/chacha - remove dependency on generic ChaCha driver UPSTREAM: crypto: arm/chacha - import Eric Biggers's scalar accelerated ChaCha code * UPSTREAM: crypto: arm64/chacha - expose arm64 ChaCha routine as library function arch/arm64/crypto/Kconfig * UPSTREAM: crypto: arm64/chacha - depend on generic chacha library instead of crypto driver arch/arm64/crypto/Kconfig UPSTREAM: crypto: arm64/chacha - use combined SIMD/ALU routine for more speed UPSTREAM: crypto: arm64/chacha - optimize for arbitrary length inputs * UPSTREAM: crypto: x86/chacha - expose SIMD ChaCha routine as library function crypto/Kconfig include/crypto/chacha.h * UPSTREAM: crypto: x86/chacha - depend on generic chacha library instead of crypto driver crypto/Kconfig * UPSTREAM: crypto: chacha - move existing library code into lib/crypto crypto/Kconfig crypto/chacha_generic.c include/crypto/chacha.h include/crypto/internal/chacha.h lib/Makefile lib/crypto/Kconfig lib/crypto/Makefile lib/crypto/libchacha.c * UPSTREAM: crypto: lib - tidy up lib/crypto Kconfig and Makefile crypto/Kconfig lib/Makefile lib/crypto/Kconfig lib/crypto/Makefile * UPSTREAM: crypto: chacha - constify ctx and iv arguments crypto/chacha_generic.c include/crypto/chacha.h UPSTREAM: crypto: x86/poly1305 - Clear key material from stack in SSE2 variant UPSTREAM: crypto: xchacha20 - fix comments for test vectors UPSTREAM: crypto: xchacha - add test vector from XChaCha20 draft RFC * UPSTREAM: crypto: arm64/chacha - add XChaCha12 support arch/arm64/crypto/Kconfig * UPSTREAM: crypto: arm64/chacha20 - refactor to allow varying number of rounds arch/arm64/crypto/Makefile * UPSTREAM: crypto: arm64/chacha20 - add XChaCha20 support arch/arm64/crypto/Kconfig UPSTREAM: crypto: x86/chacha - avoid sleeping under kernel_fpu_begin() UPSTREAM: crypto: x86/chacha - yield the FPU occasionally * UPSTREAM: crypto: x86/chacha - add XChaCha12 support crypto/Kconfig UPSTREAM: crypto: x86/chacha20 - refactor to allow varying number of rounds * UPSTREAM: crypto: x86/chacha20 - add XChaCha20 support crypto/Kconfig UPSTREAM: crypto: x86/chacha20 - Add a 4-block AVX-512VL variant UPSTREAM: crypto: x86/chacha20 - Add a 2-block AVX-512VL variant UPSTREAM: crypto: x86/chacha20 - Add a 8-block AVX-512VL variant UPSTREAM: crypto: x86/chacha20 - Add a 4-block AVX2 variant UPSTREAM: crypto: x86/chacha20 - Add a 2-block AVX2 variant UPSTREAM: crypto: x86/chacha20 - Use larger block functions more aggressively UPSTREAM: crypto: x86/chacha20 - Support partial lengths in 8-block AVX2 variant UPSTREAM: crypto: x86/chacha20 - Support partial lengths in 4-block SSSE3 variant UPSTREAM: crypto: x86/chacha20 - Support partial lengths in 1-block SSSE3 variant ANDROID: GKI: Enable CONFIG_USB_ANNOUNCE_NEW_DEVICES ANDROID: GKI: Enable CONFIG_X86_X2APIC * ANDROID: move builds to use gas prebuilts build.config.aarch64 build.config.arm build.config.x86_64 * UPSTREAM: binder: fix UAF when releasing todo list drivers/android/binder.c Merge 4.19.152 into android-4.19-stable Linux 4.19.152 crypto: qat - check cipher length for aead AES-CBC-HMAC-SHA crypto: bcm - Verify GCM/CCM key length in setkey drivers/net/ethernet/marvell/mvmdio.c: Fix non OF case reiserfs: Fix oops during mount reiserfs: Initialize inode keys properly USB: serial: ftdi_sio: add support for FreeCalypso JTAG+UART adapters USB: serial: pl2303: add device-id for HP GC device staging: comedi: check validity of wMaxPacketSize of usb endpoints found USB: serial: option: Add Telit FT980-KS composition USB: serial: option: add Cellient MPL200 card media: usbtv: Fix refcounting mixup * Bluetooth: Disconnect if E0 is used for Level 4 include/net/bluetooth/hci_core.h net/bluetooth/hci_conn.c net/bluetooth/hci_event.c * Bluetooth: Fix update of connection state in `hci_encrypt_cfm` include/net/bluetooth/hci_core.h * Bluetooth: Consolidate encryption handling in hci_encrypt_cfm include/net/bluetooth/hci_core.h net/bluetooth/hci_event.c * Bluetooth: MGMT: Fix not checking if BT_HS is enabled net/bluetooth/mgmt.c * Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel include/net/bluetooth/l2cap.h net/bluetooth/l2cap_core.c net/bluetooth/l2cap_sock.c * Bluetooth: A2MP: Fix not initializing all members net/bluetooth/a2mp.c ARM: 8867/1: vdso: pass --be8 to linker if necessary ARM: 8939/1: kbuild: use correct nm executable ARM: 8858/1: vdso: use $(LD) instead of $(CC) to link VDSO perf cs-etm: Move definition of 'traceid_list' global variable from header file * FROMLIST: arm64: vdso32: Allow ld.lld to properly link the VDSO arch/arm64/kernel/vdso32/Makefile Merge 4.19.151 into android-4.19-stable Linux 4.19.151 * net: usb: rtl8150: set random MAC address when set_ethernet_addr() fails drivers/net/usb/rtl8150.c * mm: khugepaged: recalculate min_free_kbytes after memory hotplug as expected by khugepaged include/linux/khugepaged.h mm/page_alloc.c mmc: core: don't set limits.discard_granularity as 0 * perf: Fix task_function_call() error handling kernel/events/core.c rxrpc: Fix server keyring leak rxrpc: Fix some missing _bh annotations on locking conn->state_lock rxrpc: Downgrade the BUG() for unsupported token type in rxrpc_read() rxrpc: Fix rxkad token xdr encoding net/mlx5e: Fix VLAN create flow net/mlx5e: Fix VLAN cleanup flow * net: usb: ax88179_178a: fix missing stop entry in driver_info drivers/net/usb/ax88179_178a.c * mdio: fix mdio-thunder.c dependency & build error drivers/net/phy/Kconfig * bonding: set dev->needed_headroom in bond_setup_by_slave() drivers/net/bonding/bond_main.c * xfrm: Use correct address family in xfrm_state_find net/xfrm/xfrm_state.c * platform/x86: fix kconfig dependency warning for FUJITSU_LAPTOP drivers/platform/x86/Kconfig net: stmmac: removed enabling eee in EEE set callback * xfrm: clone whole liftime_cur structure in xfrm_do_migrate net/xfrm/xfrm_state.c * xfrm: clone XFRMA_SEC_CTX in xfrm_do_migrate net/xfrm/xfrm_state.c * xfrm: clone XFRMA_REPLAY_ESN_VAL in xfrm_do_migrate include/net/xfrm.h * xfrm: clone XFRMA_SET_MARK in xfrm_do_migrate net/xfrm/xfrm_state.c drm/amdgpu: prevent double kfree ttm->sg openvswitch: handle DNAT tuple collision net: team: fix memory leak in __team_options_register team: set dev->needed_headroom in team_setup_by_port() * sctp: fix sctp_auth_init_hmacs() error path net/sctp/auth.c i2c: owl: Clear NACK and BUS error bits i2c: meson: fixup rate calculation with filter delay i2c: meson: fix clock setting overwrite cifs: Fix incomplete memory allocation on setxattr path * xfrmi: drop ignore_df check before updating pmtu net/xfrm/xfrm_interface.c mm/khugepaged: fix filemap page_to_pgoff(page) != offset macsec: avoid use-after-free in macsec_handle_frame() nvme-core: put ctrl ref when module ref get fail arm64: dts: stratix10: add status to qspi dts node mtd: rawnand: sunxi: Fix the probe error path i2c: i801: Exclude device from suspend direct complete optimization perf top: Fix stdio interface input handling with glibc 2.28+ * driver core: Fix probe_count imbalance in really_probe() drivers/base/dd.c platform/x86: thinkpad_acpi: re-initialize ACPI buffer size when reuse platform/x86: intel-vbtn: Switch to an allow-list for SW_TABLET_MODE reporting platform/x86: thinkpad_acpi: initialize tp_nvram_state variable platform/x86: intel-vbtn: Fix SW_TABLET_MODE always reporting 1 on the HP Pavilion 11 x360 * usermodehelper: reset umask to default before executing user process kernel/umh.c drm/nouveau/mem: guard against NULL pointer access in mem_del * net: wireless: nl80211: fix out-of-bounds access in nl80211_del_key() net/wireless/nl80211.c Revert "ravb: Fixed to be able to unload modules" fbcon: Fix global-out-of-bounds read in fbcon_get_font() * Fonts: Support FONT_EXTRA_WORDS macros for built-in fonts include/linux/font.h * fbdev, newport_con: Move FONT_EXTRA_WORDS macros into linux/font.h include/linux/font.h Merge 4.19.150 into android-4.19-stable Linux 4.19.150 * netfilter: ctnetlink: add a range check for l3/l4 protonum net/netfilter/nf_conntrack_netlink.c * ep_create_wakeup_source(): dentry name can change under you... fs/eventpoll.c * epoll: EPOLL_CTL_ADD: close the race in decision to take fast path fs/eventpoll.c * epoll: replace ->visited/visited_list with generation count fs/eventpoll.c * epoll: do not insert into poll queues until all sanity checks are done fs/eventpoll.c * net/packet: fix overflow in tpacket_rcv net/packet/af_packet.c * mm: don't rely on system state to detect hot-plug operations include/linux/node.h * mm: replace memmap_context by meminit_context include/linux/mm.h include/linux/mmzone.h mm/page_alloc.c * random32: Restore __latent_entropy attribute on net_rand_state lib/random32.c Input: trackpoint - enable Synaptics trackpoints i2c: cpm: Fix i2c_ram structure iommu/exynos: add missing put_device() call in exynos_iommu_of_xlate() clk: samsung: exynos4: mark 'chipid' clock as CLK_IGNORE_UNUSED nfs: Fix security label length not being reset pinctrl: mvebu: Fix i2c sda definition for 98DX3236 gpio: sprd: Clear interrupt when setting the type as edge nvme-fc: fail new connections to a deleted host or remote port spi: fsl-espi: Only process interrupts for expected events mac80211: do not allow bigger VHT MPDUs than the hardware supports drivers/net/wan/hdlc: Set skb->protocol before transmitting drivers/net/wan/lapbether: Make skb->protocol consistent with the header nvme-core: get/put ctrl and transport module in nvme_dev_open/release() rndis_host: increase sleep time in the query-response loop net: dec: de2104x: Increase receive ring size for Tulip drm/sun4i: mixer: Extend regmap max_register drivers/net/wan/hdlc_fr: Add needed_headroom for PVC devices drm/amdgpu: restore proper ref count in amdgpu_display_crtc_set_config ftrace: Move RCU is watching check after recursion check Input: i8042 - add nopnp quirk for Acer Aspire 5 A515 net: virtio_vsock: Enhance connection semantics * vsock/virtio: add transport parameter to the virtio_transport_reset_no_sock() include/linux/virtio_vsock.h vsock/virtio: stop workers during the .remove() vsock/virtio: use RCU to avoid use-after-free on the_virtio_vsock clk: socfpga: stratix10: fix the divider for the emac_ptp_free_clk gpio: tc35894: fix up tc35894 interrupt configuration gpio: mockup: fix resource leak in error path * USB: gadget: f_ncm: Fix NDP16 datagram validation drivers/usb/gadget/function/f_ncm.c mmc: sdhci: Workaround broken command queuing on Intel GLK based IRBIS models * ANDROID: use arm-linux-androidkernel- for CROSS_COMPILE_COMPAT build.config.aarch64 ANDROID: build.config.common: enable LLVM=1 Merge 4.19.149 into android-4.19-stable Linux 4.19.149 * KVM: arm64: Assume write fault on S1PTW permission fault on instruction fetch arch/arm64/include/asm/kvm_emulate.h ata: sata_mv, avoid trigerrable BUG_ON * ata: make qc_prep return ata_completion_errors include/linux/libata.h * ata: define AC_ERR_OK include/linux/libata.h kprobes: Fix compiler warning for !CONFIG_KPROBES_ON_FTRACE s390/zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl * mm, THP, swap: fix allocating cluster for swapfile by mistake mm/swapfile.c kprobes: Fix to check probe enabled before disarm_kprobe_ftrace() s390/dasd: Fix zero write for FBA devices tracing: fix double free KVM: SVM: Add a dedicated INVD intercept routine KVM: x86: Reset MMU context if guest toggles CR4.SMAP or CR4.PKE MIPS: Add the missing 'CPU_1074K' into __get_cpu_type() * regmap: fix page selection for noinc reads drivers/base/regmap/regmap.c ALSA: asihpi: fix iounmap in error handler * bpf: Fix a rcu warning for bpffs map pretty-print kernel/bpf/inode.c batman-adv: mcast: fix duplicate mcast packets from BLA backbone to mesh batman-adv: mcast: fix duplicate mcast packets in BLA backbone from mesh batman-adv: Add missing include for in_interrupt() drm/sun4i: sun8i-csc: Secondary CSC register correction net: qed: RDMA personality shouldn't fail VF load drm/vc4/vc4_hdmi: fill ASoC card owner * bpf: Fix clobbering of r2 in bpf_gen_ld_abs net/core/filter.c mac802154: tx: fix use-after-free batman-adv: mcast/TT: fix wrongly dropped or rerouted packets atm: eni: fix the missed pci_disable_device() for eni_init_one() batman-adv: bla: fix type misuse for backbone_gw hash indexing mwifiex: Increase AES key storage size to 256 bits clocksource/drivers/h8300_timer8: Fix wrong return value in h8300_8timer_init() ieee802154/adf7242: check status of adf7242_read_reg ieee802154: fix one possible memleak in ca8210_dev_com_init objtool: Fix noreturn detection for ignored functions * i2c: core: Call i2c_acpi_install_space_handler() before i2c_acpi_register_devices() drivers/i2c/i2c-core-base.c drm/amdkfd: fix a memory leak issue lockdep: fix order in trace_hardirqs_off_caller() s390/init: add missing __init annotations RISC-V: Take text_mutex in ftrace_init_nop() ASoC: Intel: bytcr_rt5640: Add quirk for MPMAN Converter9 2-in-1 ASoC: wm8994: Ensure the device is resumed in wm89xx_mic_detect functions ASoC: wm8994: Skip setting of the WM8994_MICBIAS register for WM1811 nvme: explicitly update mpath disk capacity on revalidation net: openvswitch: use div_u64() for 64-by-32 divisions perf parse-events: Use strcmp() to compare the PMU name ubi: fastmap: Free unused fastmap anchor peb during detach btrfs: qgroup: fix data leak caused by race between writeback and truncate vfio/pci: fix racy on error and request eventfd ctx selftests/x86/syscall_nt: Clear weird flags after each test scsi: libfc: Skip additional kref updating work event scsi: libfc: Handling of extra kref nvme: fix possible deadlock when I/O is blocked cifs: Fix double add page to memcg when cifs_readpages vfio/pci: Clear error and request eventfd ctx after releasing x86/speculation/mds: Mark mds_user_clear_cpu_buffers() __always_inline mtd: parser: cmdline: Support MTD names containing one or more colons rapidio: avoid data race between file operation callbacks and mport_cdev_add(). * mm/swap_state: fix a data race in swapin_nr_pages mm/swap_state.c ceph: fix potential race in ceph_check_caps PCI: tegra: Fix runtime PM imbalance on error mtd: rawnand: omap_elm: Fix runtime PM imbalance on error wlcore: fix runtime pm imbalance in wlcore_regdomain_config wlcore: fix runtime pm imbalance in wl1271_tx_work ASoC: img-i2s-out: Fix runtime PM imbalance on error perf kcore_copy: Fix module map when there are no modules loaded perf metricgroup: Free metric_events on error perf util: Fix memory leak of prefix_if_not_in perf stat: Fix duration_time value for higher intervals perf trace: Fix the selection for architectures to generate the errno name tables perf evsel: Fix 2 memory leaks vfio/pci: fix memory leaks of eventfd ctx btrfs: don't force read-only after error in drop snapshot * usb: dwc3: Increase timeout for CmdAct cleared by device controller drivers/usb/dwc3/gadget.c * printk: handle blank console arguments passed in. kernel/printk/printk.c drm/nouveau/dispnv50: fix runtime pm imbalance on error drm/nouveau: fix runtime pm imbalance on error drm/nouveau/debugfs: fix runtime pm imbalance on error e1000: Do not perform reset in reset_task if we are already down * arm64/cpufeature: Drop TraceFilt feature exposure from ID_DFR0 register arch/arm64/kernel/cpufeature.c scsi: cxlflash: Fix error return code in cxlflash_probe() USB: EHCI: ehci-mv: fix less than zero comparison of an unsigned int * fuse: don't check refcount after stealing page fs/fuse/dev.c powerpc/traps: Make unrecoverable NMIs die instead of panic ALSA: hda: Fix potential race in unsol event handler tty: serial: samsung: Correct clock selection logic * tipc: fix memory leak in service subscripting net/tipc/topsrv.c USB: EHCI: ehci-mv: fix error handling in mv_ehci_probe() * Bluetooth: Handle Inquiry Cancel error after Inquiry Complete net/bluetooth/hci_event.c phy: samsung: s5pv210-usb2: Add delay after reset power: supply: max17040: Correct voltage reading perf mem2node: Avoid double free related to realloc atm: fix a memory leak of vcc->user_back dt-bindings: sound: wm8994: Correct required supplies based on actual implementaion * arm64: cpufeature: Relax checks for AArch32 support at EL[0-2] arch/arm64/kernel/cpufeature.c sparc64: vcc: Fix error return code in vcc_probe() staging:r8188eu: avoid skb_clone for amsdu to msdu conversion scsi: aacraid: Fix error handling paths in aac_probe_one() net: openvswitch: use u64 for meter bucket KVM: arm64: vgic-its: Fix memory leak on the error path of vgic_add_lpi() drivers: char: tlclk.c: Avoid data race between init and interrupt handler * bdev: Reduce time holding bd_mutex in sync in blkdev_close() fs/block_dev.c KVM: Remove CREATE_IRQCHIP/SET_PIT2 race serial: uartps: Wait for tx_empty in console setup scsi: qedi: Fix termination timeouts in session logout * mm/mmap.c: initialize align_offset explicitly for vm_unmapped_area mm/mmap.c nvmet-rdma: fix double free of rdma queue * mm/vmscan.c: fix data races using kswapd_classzone_idx mm/vmscan.c * mm/filemap.c: clear page error before actual read mm/filemap.c mm/kmemleak.c: use address-of operator on section symbols * NFS: Fix races nfs_page_group_destroy() vs nfs_destroy_unlinked_subrequests() include/linux/nfs_page.h PCI: pciehp: Fix MSI interrupt race * ALSA: usb-audio: Fix case when USB MIDI interface has more than one extra endpoint descriptor sound/usb/midi.c ubifs: Fix out-of-bounds memory access caused by abnormal value of node_len * PCI: Use ioremap(), not phys_to_virt() for platform ROM drivers/pci/rom.c include/linux/pci.h svcrdma: Fix leak of transport addresses SUNRPC: Fix a potential buffer overflow in 'svc_print_xprts()' scsi: hpsa: correct race condition in offload enabled RDMA/rxe: Set sys_image_guid to be aligned with HW IB devices nvme: Fix controller creation races with teardown flow nvme-multipath: do not reset on unknown status tools: gpio-hammer: Avoid potential overflow in main cpufreq: powernv: Fix frame-size-overflow in powernv_cpufreq_work_fn perf cpumap: Fix snprintf overflow check serial: 8250: 8250_omap: Terminate DMA before pushing data on RX timeout serial: 8250_omap: Fix sleeping function called from invalid context during probe serial: 8250_port: Don't service RX FIFO if throttled perf parse-events: Fix 3 use after frees found with clang ASAN thermal: rcar_thermal: Handle probe error gracefully * tracing: Use address-of operator on section symbols kernel/trace/trace.c drm/msm/a5xx: Always set an OPP supported hardware value drm/msm: fix leaks if initialization fails KVM: PPC: Book3S HV: Treat TM-related invalid form instructions on P9 like the valid ones RDMA/cm: Remove a race freeing timewait_info nfsd: Don't add locks to closed or closing open stateids rtc: ds1374: fix possible race condition rtc: sa1100: fix possible race condition tpm: ibmvtpm: Wait for buffer to be set before proceeding * ext4: mark block bitmap corrupted when found instead of BUGON fs/ext4/mballoc.c xfs: mark dir corrupt when lookup-by-hash fails xfs: don't ever return a stale pointer from __xfs_dir3_free_read media: tda10071: fix unsigned sign extension overflow * Bluetooth: L2CAP: handle l2cap config request during open state net/bluetooth/l2cap_core.c scsi: aacraid: Disabling TM path and only processing IOP reset ath10k: use kzalloc to read for ath10k_sdio_hif_diag_read drm/amd/display: Stop if retimer is not available drm/amdgpu: increase atombios cmd timeout * mm: avoid data corruption on CoW fault into PFN-mapped VMA mm/memory.c perf jevents: Fix leak of mapfile memory * ext4: fix a data race at inode->i_disksize fs/ext4/inode.c * timekeeping: Prevent 32bit truncation in scale64_check_overflow() kernel/time/timekeeping.c * Bluetooth: guard against controllers sending zero'd events net/bluetooth/hci_event.c media: go7007: Fix URB type for interrupt handling bus: hisi_lpc: Fixup IO ports addresses to avoid use-after-free in host removal * random: fix data races at timer_rand_state drivers/char/random.c firmware: arm_sdei: Use cpus_read_lock() to avoid races with cpuhp drm/amd/display: dal_ddc_i2c_payloads_create can fail causing panic dmaengine: tegra-apb: Prevent race conditions on channel's freeing dmaengine: stm32-dma: use vchan_terminate_vdesc() in .terminate_all * bpf: Remove recursion prevention from rcu free callback kernel/bpf/hashtab.c x86/pkeys: Add check for pkey "overflow" media: staging/imx: Missing assignment in imx_media_capture_device_register() dmaengine: stm32-mdma: use vchan_terminate_vdesc() in .terminate_all KVM: x86: fix incorrect comparison in trace event RDMA/rxe: Fix configuration of atomic queue pair attributes perf test: Fix test trace+probe_vfs_getname.sh on s390 * ALSA: usb-audio: Don't create a mixer element with bogus volume range sound/usb/mixer.c mt76: clear skb pointers from rx aggregation reorder buffer during cleanup crypto: chelsio - This fixes the kernel panic which occurs during a libkcapi test clk: stratix10: use do_div() for 64-bit calculation drm/omap: fix possible object reference leak scsi: lpfc: Fix coverity errors in fmdi attribute handling scsi: lpfc: Fix RQ buffer leakage when no IOCBs available * selinux: sel_avc_get_stat_idx should increase position index security/selinux/selinuxfs.c * audit: CONFIG_CHANGE don't log internal bookkeeping as an event kernel/audit_watch.c * skbuff: fix a data race in skb_queue_len() include/linux/skbuff.h net/unix/af_unix.c ALSA: hda: Clear RIRB status before reading WP KVM: fix overflow of zero page refcount with ksm running * Bluetooth: prefetch channel before killing sock net/bluetooth/l2cap_sock.c * mm: pagewalk: fix termination condition in walk_pte_range() mm/pagewalk.c * mm/swapfile.c: swap_next should increase position index mm/swapfile.c * Bluetooth: Fix refcount use-after-free issue net/bluetooth/l2cap_core.c net/bluetooth/l2cap_sock.c tools/power/x86/intel_pstate_tracer: changes for python 3 compatibility selftests/ftrace: fix glob selftest ceph: ensure we have a new cap before continuing in fill_inode ar5523: Add USB ID of SMCWUSBT-G2 wireless adapter ARM: 8948/1: Prevent OOB access in stacktrace * tracing: Set kernel_stack's caller size properly kernel/trace/trace_entries.h Bluetooth: btrtl: Use kvmalloc for FW allocations powerpc/eeh: Only dump stack once if an MMIO loop is detected s390/cpum_sf: Use kzalloc and minor changes dmaengine: zynqmp_dma: fix burst length configuration * scsi: ufs: Fix a race condition in the tracing code drivers/scsi/ufs/ufshcd.c * scsi: ufs: Make ufshcd_add_command_trace() easier to read drivers/scsi/ufs/ufshcd.c ACPI: EC: Reference count query handlers under lock * sctp: move trace_sctp_probe_path into sctp_outq_sack include/trace/events/sctp.h net/sctp/outqueue.c media: ti-vpe: cal: Restrict DMA to avoid memory corruption * seqlock: Require WRITE_ONCE surrounding raw_seqcount_barrier include/linux/seqlock.h * ipv6_route_seq_next should increase position index net/ipv6/ip6_fib.c * rt_cpu_seq_next should increase position index net/ipv4/route.c * neigh_stat_seq_next() should increase position index net/core/neighbour.c xfs: fix log reservation overflows when allocating large rt extents KVM: arm/arm64: vgic: Fix potential double free dist->spis in __kvm_vgic_destroy() * kernel/sys.c: avoid copying possible padding bytes in copy_to_user kernel/sys.c ASoC: max98090: remove msleep in PLL unlocked workaround CIFS: Properly process SMB3 lease breaks * debugfs: Fix !DEBUG_FS debugfs_create_automount include/linux/debugfs.h scsi: pm80xx: Cleanup command when a reset times out gfs2: clean up iopen glock mess in gfs2_create_inode * mmc: core: Fix size overflow for mmc partitions include/linux/mmc/card.h ubi: Fix producing anchor PEBs RDMA/iw_cgxb4: Fix an error handling path in 'c4iw_connect()' xfs: fix attr leaf header freemap.size underflow * fix dget_parent() fastpath race fs/dcache.c RDMA/i40iw: Fix potential use after free RDMA/qedr: Fix potential use after free dmaengine: mediatek: hsdma_probe: fixed a memory leak when devm_request_irq fails bcache: fix a lost wake-up problem caused by mca_cannibalize_lock * tracing: Adding NULL checks for trace_array descriptor pointer kernel/trace/trace.c kernel/trace/trace_events.c tpm_crb: fix fTPM on AMD Zen+ CPUs drm/amdgpu/powerplay/smu7: fix AVFS handling with custom powerplay table * mfd: mfd-core: Protect against NULL call-back function pointer drivers/mfd/mfd-core.c mtd: cfi_cmdset_0002: don't free cfi->cfiq in error path of cfi_amdstd_setup() drm/amdgpu/powerplay: fix AVFS handling with custom powerplay table clk/ti/adpll: allocate room for terminating null * net: silence data-races on sk_backlog.tail include/net/sock.h net/ipv4/tcp.c scsi: lpfc: Fix kernel crash at lpfc_nvme_info_show during remote port bounce scsi: fnic: fix use after free PM / devfreq: tegra30: Fix integer overflow on CPU's freq max out leds: mlxreg: Fix possible buffer overflow * lib/string.c: implement stpcpy lib/string.c ALSA: hda/realtek: Enable front panel headset LED on Lenovo ThinkStation P520 ALSA: hda/realtek - Couldn't detect Mic if booting with headset plugged * ALSA: usb-audio: Add delay quirk for H570e USB headsets sound/usb/quirks.c x86/ioapic: Unbreak check_timer() arch/x86/lib/usercopy_64.c: fix __copy_user_flushcache() cache writeback media: smiapp: Fix error handling at NVM reading ASoC: kirkwood: fix IRQ error handling gma/gma500: fix a memory disclosure bug due to uninitialized bytes m68k: q40: Fix info-leak in rtc_ioctl scsi: aacraid: fix illegal IO beyond last LBA * mm: fix double page fault on arm64 if PTE_AF is cleared mm/memory.c ath10k: fix memory leak for tpc_stats_final ath10k: fix array out-of-bounds access * dma-fence: Serialise signal enabling (dma_fence_enable_sw_signaling) drivers/dma-buf/dma-fence.c * media: mc-device.c: fix memleak in media_device_register_entity drivers/media/media-device.c * selinux: allow labeling before policy is loaded security/selinux/hooks.c ANDROID: GKI: prevent removal of monitored symbols ANDROID: Refresh ABI.xmls with libabigail 1.8.0-98bbf30d Merge 4.19.148 into android-4.19-stable Linux 4.19.148 serial: 8250: Avoid error message on reprobe * tcp_bbr: adapt cwnd based on ack aggregation estimation include/net/inet_connection_sock.h tcp_bbr: refactor bbr_target_cwnd() for general inflight provisioning * mm: memcg: fix memcg reclaim soft lockup mm/vmscan.c * kbuild: support LLVM=1 to switch the default tools to Clang/LLVM Makefile * kbuild: replace AS=clang with LLVM_IAS=1 Makefile * kbuild: remove AS variable Makefile * x86/boot: kbuild: allow readelf executable to be specified Makefile net: wan: wanxl: use $(M68KCC) instead of $(M68KAS) for rebuilding firmware * net: wan: wanxl: use allow to pass CROSS_COMPILE_M68k for rebuilding firmware drivers/net/wan/Kconfig Documentation/llvm: fix the name of llvm-size Documentation/llvm: add documentation on building w/ Clang/LLVM * kbuild: add OBJSIZE variable for the size tool Makefile MAINTAINERS: add CLANG/LLVM BUILD SUPPORT info * ipv4: Update exception handling for multipath routes via same device net/ipv4/route.c * net: add __must_check to skb_put_padto() include/linux/skbuff.h * net: qrtr: check skb_put_padto() return value net/qrtr/qrtr.c * net: phy: Avoid NPD upon phy_detach() when driver is unbound drivers/net/phy/phy_device.c bnxt_en: Protect bnxt_set_eee() and bnxt_set_pauseparam() with mutex. bnxt_en: return proper error codes in bnxt_show_temp * tipc: use skb_unshare() instead in tipc_buf_append() net/tipc/msg.c * tipc: fix shutdown() of connection oriented socket net/tipc/socket.c * tipc: Fix memory leak in tipc_group_create_member() net/tipc/group.c nfp: use correct define to return NONE fec * net: sch_generic: aviod concurrent reset and enqueue op for lockless qdisc net/sched/sch_generic.c * net: ipv6: fix kconfig dependency warning for IPV6_SEG6_HMAC net/ipv6/Kconfig net: dsa: rtl8366: Properly clear member config net: DCB: Validate DCB_ATTR_DCB_BUFFER argument * ipv6: avoid lockdep issue in fib6_del() net/ipv6/ip6_fib.c * ip: fix tos reflection in ack and reset packets net/ipv4/ip_output.c hdlc_ppp: add range checks in ppp_cp_parse_cr() geneve: add transport ports in route lookup for geneve cxgb4: Fix offset when clearing filter byte counters mm/thp: fix __split_huge_pmd_locked() for migration PMD kprobes: fix kill kprobe which has been marked as gone KVM: fix memory leak in kvm_io_bus_unregister_dev() * af_key: pfkey_dump needs parameter validation net/key/af_key.c ANDROID: drop KERNEL_DIR setting in build.config.common Merge 4.19.147 into android-4.19-stable Linux 4.19.147 x86/defconfig: Enable CONFIG_USB_XHCI_HCD=y powerpc/dma: Fix dma_map_ops::get_required_mask * ehci-hcd: Move include to keep CRC stable drivers/usb/host/ehci-hcd.c drivers/usb/host/ehci-hub.c x86/boot/compressed: Disable relocation relaxation serial: 8250_pci: Add Realtek 816a and 816b Input: i8042 - add Entroware Proteus EL07R4 to nomux and reset lists Input: trackpoint - add new trackpoint variant IDs * percpu: fix first chunk size calculation for populated bitmap mm/percpu.c Revert "ALSA: hda - Fix silent audio output and corrupted input on MSI X570-A PRO" i2c: i801: Fix resume bug usblp: fix race between disconnect() and read() USB: UAS: fix disconnect by unplugging a hub * USB: quirks: Add USB_QUIRK_IGNORE_REMOTE_WAKEUP quirk for BYD zhaoxin notebook drivers/usb/core/quirks.c drm/mediatek: Add missing put_device() call in mtk_hdmi_dt_parse_pdata() drm/mediatek: Add exception handing in mtk_drm_probe() if component init fail MIPS: SNI: Fix spurious interrupts fbcon: Fix user font detection test at fbcon_resize(). perf test: Free formats for perf pmu parse test MIPS: SNI: Fix MIPS_L1_CACHE_SHIFT perf test: Fix the "signal" test inline assembly Drivers: hv: vmbus: Add timeout to vmbus_wait_for_unload ASoC: qcom: Set card->owner to avoid warnings clk: rockchip: Fix initialization of mux_pll_src_4plls_p clk: davinci: Use the correct size when allocating memory * KVM: MIPS: Change the definition of kvm type include/uapi/linux/kvm.h * spi: Fix memory leak on splited transfers drivers/spi/spi.c * i2c: algo: pca: Reapply i2c bus settings after reset include/linux/i2c-algo-pca.h * f2fs: Return EOF on unaligned end of file DIO read fs/f2fs/data.c * f2fs: fix indefinite loop scanning for free nid fs/f2fs/node.c nvme-rdma: cancel async events before freeing event struct nvme-fc: cancel async events before freeing event struct openrisc: Fix cache API compile issue when not inlining rapidio: Replace 'select' DMAENGINES 'with depends on' SUNRPC: stop printk reading past end of string NFS: Zero-stateid SETATTR should first return delegation spi: spi-loopback-test: Fix out-of-bounds read regulator: pwm: Fix machine constraints application scsi: lpfc: Fix FLOGI/PLOGI receive race condition in pt2pt discovery scsi: libfc: Fix for double free() scsi: pm8001: Fix memleak in pm8001_exec_internal_task_abort NFSv4.1 handle ERR_DELAY error reclaiming locking state on delegation recall hv_netvsc: Remove "unlikely" from netvsc_select_queue * net: handle the return value of pskb_carve_frag_list() correctly net/core/skbuff.c RDMA/bnxt_re: Restrict the max_gids to 256 gfs2: initialize transaction tr_ailX_lists earlier scsi: qla2xxx: Reduce holding sess_lock to prevent CPU lock-up scsi: qla2xxx: Move rport registration out of internal work_list scsi: qla2xxx: Update rscn_rcvd field to more meaningful scan_needed dsa: Allow forwarding of redirected IGMP traffic ANDROID: Refresh ABI.xmls with libabigail 1.8.0-1dca710a ANDROID: KMI symbol lists: migrate section name Merge 4.19.146 into android-4.19-stable Linux 4.19.146 * gcov: add support for GCC 10.1 kernel/gcov/Kconfig usb: typec: ucsi: acpi: Check the _DEP dependencies * usb: Fix out of sync data toggle if a configured device is reconfigured drivers/usb/core/message.c USB: serial: option: add support for SIM7070/SIM7080/SIM7090 modules USB: serial: option: support dynamic Quectel USB compositions USB: serial: ftdi_sio: add IDs for Xsens Mti USB converter * usb: core: fix slab-out-of-bounds Read in read_descriptors drivers/usb/core/sysfs.c phy: qcom-qmp: Use correct values for ipq8074 PCIe Gen2 PHY init staging: greybus: audio: fix uninitialized value issue video: fbdev: fix OOB read in vga_8planes_imageblit() ARM: dts: vfxxx: Add syscon compatible with OCOTP KVM: VMX: Don't freeze guest when event delivery causes an APIC-access exit fbcon: remove now unusued 'softback_lines' cursor() argument fbcon: remove soft scrollback code * vgacon: remove software scrollback support drivers/video/console/Kconfig RDMA/rxe: Fix the parent sysfs read when the interface has 15 chars rbd: require global CAP_SYS_ADMIN for mapping and unmapping drm/msm: Disable preemption on all 5xx targets drm/tve200: Stabilize enable/disable scsi: target: iscsi: Fix hang in iscsit_access_np() when getting tpg->np_login_sem scsi: target: iscsi: Fix data digest calculation * regulator: push allocation in set_consumer_device_supply() out of lock drivers/regulator/core.c btrfs: fix wrong address when faulting in pages in the search ioctl btrfs: fix lockdep splat in add_missing_dev btrfs: require only sector size alignment for parent eb bytenr staging: wlan-ng: fix out of bounds read in prism2sta_probe_usb() iio:accel:mma8452: Fix timestamp alignment and prevent data leak. iio:accel:mma7455: Fix timestamp alignment and prevent data leak. iio: accel: kxsd9: Fix alignment of local buffer. iio:chemical:ccs811: Fix timestamp alignment and prevent data leak. iio:light:max44000 Fix timestamp alignment and prevent data leak. iio:magnetometer:ak8975 Fix alignment and data leak issues. iio:adc:ti-adc081c Fix alignment and data leak issues iio:adc:max1118 Fix alignment of timestamp and data leak issues iio:adc:ina2xx Fix timestamp alignment issue. iio:adc:ti-adc084s021 Fix alignment and data leak issues. iio:accel:bmc150-accel: Fix timestamp alignment and prevent data leak. iio:light:ltr501 Fix timestamp alignment issue. iio: adc: ti-ads1015: fix conversion when CONFIG_PM is not set iio: adc: mcp3422: fix locking on error path iio: adc: mcp3422: fix locking scope * gcov: Disable gcov build with GCC 10 kernel/gcov/Kconfig iommu/amd: Do not use IOMMUv2 functionality when SME is active drm/amdgpu: Fix bug in reporting voltage for CIK ALSA: hda: fix a runtime pm issue in SOF when integrated GPU is disabled cpufreq: intel_pstate: Fix intel_pstate_get_hwp_max() for turbo disabled cpufreq: intel_pstate: Refuse to turn off with HWP enabled ARC: [plat-hsdk]: Switch ethernet phy-mode to rgmii-id HID: elan: Fix memleak in elan_input_configured drivers/net/wan/hdlc_cisco: Add hard_header_len * HID: quirks: Set INCREMENT_USAGE_ON_DUPLICATE for all Saitek X52 devices drivers/hid/hid-ids.h drivers/hid/hid-quirks.c nvme-rdma: serialize controller teardown sequences nvme-fabrics: don't check state NVME_CTRL_NEW for request acceptance * irqchip/eznps: Fix build error for !ARC700 builds include/soc/nps/common.h xfs: initialize the shortform attr header padding entry drivers/net/wan/lapbether: Set network_header before transmitting ALSA: hda: Fix 2 channel swapping for Tegra firestream: Fix memleak in fs_open NFC: st95hf: Fix memleak in st95hf_in_send_cmd drivers/net/wan/lapbether: Added needed_tailroom * netfilter: conntrack: allow sctp hearbeat after connection re-use include/linux/netfilter/nf_conntrack_sctp.h net/netfilter/nf_conntrack_proto_sctp.c dmaengine: acpi: Put the CSRT table after using it ARC: HSDK: wireup perf irq arm64: dts: ns2: Fixed QSPI compatible string ARM: dts: BCM5301X: Fixed QSPI compatible string ARM: dts: NSP: Fixed QSPI compatible string ARM: dts: bcm: HR2: Fixed QSPI compatible string mmc: sdhci-msm: Add retries when all tuning phases are found valid RDMA/core: Fix reported speed and width scsi: libsas: Set data_dir as DMA_NONE if libata marks qc as NODATA drm/sun4i: Fix dsi dcs long write function RDMA/bnxt_re: Do not report transparent vlan from QP1 RDMA/rxe: Drop pointless checks in rxe_init_ports RDMA/rxe: Fix memleak in rxe_mem_init_user ARM: dts: ls1021a: fix QuadSPI-memory reg range ARM: dts: socfpga: fix register entry for timer3 on Arria10 ARM: dts: logicpd-som-lv-baseboard: Fix broken audio ARM: dts: logicpd-torpedo-baseboard: Fix broken audio ANDROID: ABI: refresh with latest libabigail 94f5d4ae Change-Id: Iae064df7e1dd74cd417c0f1b30a86a2f26686ac1 Signed-off-by: Lucas Wei <lucaswei@google.com>	2021-01-27 11:46:29 +08:00
Greg Kroah-Hartman	67730020fa	Merge 4.19.158 into android-4.19-stable Changes in 4.19.158 regulator: defer probe when trying to get voltage from unresolved supply time: Prevent undefined behaviour in timespec64_to_ns() nbd: don't update block size after device is started usb: dwc3: gadget: Continue to process pending requests usb: dwc3: gadget: Reclaim extra TRBs after request completion btrfs: sysfs: init devices outside of the chunk_mutex btrfs: reschedule when cloning lots of extents genirq: Let GENERIC_IRQ_IPI select IRQ_DOMAIN_HIERARCHY hv_balloon: disable warning when floor reached net: xfrm: fix a race condition during allocing spi xfs: set xefi_discard when creating a deferred agfl free log intent item netfilter: ipset: Update byte and packet counters regardless of whether they match perf tools: Add missing swap for ino_generation ALSA: hda: prevent undefined shift in snd_hdac_ext_bus_get_link() can: rx-offload: don't call kfree_skb() from IRQ context can: dev: can_get_echo_skb(): prevent call to kfree_skb() in hard IRQ context can: dev: __can_get_echo_skb(): fix real payload length return value for RTR frames can: can_create_echo_skb(): fix echo skb generation: always use skb_clone() can: peak_usb: add range checking in decode operations can: peak_usb: peak_usb_get_ts_time(): fix timestamp wrapping can: peak_canfd: pucan_handle_can_rx(): fix echo management when loopback is on can: flexcan: remove FLEXCAN_QUIRK_DISABLE_MECR quirk for LS1021A xfs: flush new eof page on truncate to avoid post-eof corruption xfs: fix scrub flagging rtinherit even if there is no rt device tpm: efi: Don't create binary_bios_measurements file for an empty log Btrfs: fix missing error return if writeback for extent buffer never started ath9k_htc: Use appropriate rs_datalen type netfilter: use actual socket sk rather than skb sk when routing harder crypto: arm64/aes-modes - get rid of literal load of addend vector usb: gadget: goku_udc: fix potential crashes in probe gfs2: Free rd_bits later in gfs2_clear_rgrpd to fix use-after-free gfs2: Add missing truncate_inode_pages_final for sd_aspace gfs2: check for live vs. read-only file system in gfs2_fitrim scsi: hpsa: Fix memory leak in hpsa_init_one() drm/amdgpu: perform srbm soft reset always on SDMA resume drm/amd/pm: perform SMC reset on suspend/hibernation drm/amd/pm: do not use ixFEATURE_STATUS for checking smc running mac80211: fix use of skb payload instead of header cfg80211: regulatory: Fix inconsistent format argument scsi: scsi_dh_alua: Avoid crash during alua_bus_detach() iommu/amd: Increase interrupt remapping table limit to 512 entries s390/smp: move rcu_cpu_starting() earlier vfio: platform: fix reference leak in vfio_platform_open selftests: proc: fix warning: _GNU_SOURCE redefined tpm_tis: Disable interrupts on ThinkPad T490s tick/common: Touch watchdog in tick_unfreeze() on all CPUs mfd: sprd: Add wakeup capability for PMIC IRQ pinctrl: intel: Set default bias in case no particular value given ARM: 9019/1: kprobes: Avoid fortify_panic() when copying optprobe template pinctrl: aspeed: Fix GPI only function problem. nbd: fix a block_device refcount leak in nbd_release xfs: fix flags argument to rmap lookup when converting shared file rmaps xfs: set the unwritten bit in rmap lookup flags in xchk_bmap_get_rmapextents xfs: fix rmap key and record comparison functions xfs: fix brainos in the refcount scrubber's rmap fragment processor lan743x: fix "BUG: invalid wait context" when setting rx mode xfs: fix a missing unlock on error in xfs_fs_map_blocks of/address: Fix of_node memory leak in of_dma_is_coherent cosa: Add missing kfree in error path of cosa_write perf: Fix get_recursion_context() ext4: correctly report "not supported" for {usr,grp}jquota when !CONFIG_QUOTA ext4: unlock xattr_sem properly in ext4_inline_data_truncate() btrfs: ref-verify: fix memory leak in btrfs_ref_tree_mod btrfs: dev-replace: fail mount if we don't have replace item with target device thunderbolt: Fix memory leak if ida_simple_get() fails in enumerate_services() thunderbolt: Add the missed ida_simple_remove() in ring_request_msix() uio: Fix use-after-free in uio_unregister_device() usb: cdc-acm: Add DISABLE_ECHO for Renesas USB Download mode xhci: hisilicon: fix refercence leak in xhci_histb_probe mei: protect mei_cl_mtu from null dereference futex: Don't enable IRQs unconditionally in put_pi_state() ocfs2: initialize ip_next_orphan btrfs: fix potential overflow in cluster_pages_for_defrag on 32bit arch selinux: Fix error return code in sel_ib_pkey_sid_slow() gpio: pcie-idio-24: Fix irq mask when masking gpio: pcie-idio-24: Fix IRQ Enable Register value gpio: pcie-idio-24: Enable PEX8311 interrupts mmc: renesas_sdhi_core: Add missing tmio_mmc_host_free() at remove don't dump the threads that had been already exiting when zapped. drm/gma500: Fix out-of-bounds access to struct drm_device.vblank[] pinctrl: amd: use higher precision for 512 RtcClk pinctrl: amd: fix incorrect way to disable debounce filter erofs: derive atime instead of leaving it empty swiotlb: fix "x86: Don't panic if can not alloc buffer for swiotlb" IPv6: Set SIT tunnel hard_header_len to zero net/af_iucv: fix null pointer dereference on shutdown net: Update window_clamp if SOCK_RCVBUF is set net/x25: Fix null-ptr-deref in x25_connect tipc: fix memory leak in tipc_topsrv_start() vrf: Fix fast path output packet handling with async Netfilter rules r8169: fix potential skb double free in an error path random32: make prandom_u32() output unpredictable x86/speculation: Allow IBPB to be conditionally enabled on CPUs with always-on STIBP perf scripting python: Avoid declaring function pointers with a visibility attribute perf/core: Fix race in the perf_mmap_close() function Revert "kernel/reboot.c: convert simple_strtoul to kstrtoint" reboot: fix overflow parsing reboot cpu number net: sch_generic: fix the missing new qdisc assignment bug Convert trailing spaces and periods in path components Linux 4.19.158 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: Ic626f4e05969543a701587d14bce4476cb146303	2020-11-19 12:25:33 +01:00
Al Viro	9bb7c38254	don't dump the threads that had been already exiting when zapped. commit 77f6ab8b7768cf5e6bdd0e72499270a0671506ee upstream. Coredump logics needs to report not only the registers of the dumping thread, but (since 2.5.43) those of other threads getting killed. Doing that might require extra state saved on the stack in asm glue at kernel entry; signal delivery logics does that (we need to be able to save sigcontext there, at the very least) and so does seccomp. That covers all callers of do_coredump(). Secondary threads get hit with SIGKILL and caught as soon as they reach exit_mm(), which normally happens in signal delivery, so those are also fine most of the time. Unfortunately, it is possible to end up with secondary zapped when it has already entered exit(2) (or, worse yet, is oopsing). In those cases we reach exit_mm() when mm->core_state is already set, but the stack contents is not what we would have in signal delivery. At least on two architectures (alpha and m68k) it leads to infoleaks - we end up with a chunk of kernel stack written into coredump, with the contents consisting of normal C stack frames of the call chain leading to exit_mm() instead of the expected copy of userland registers. In case of alpha we leak 312 bytes of stack. Other architectures (including the regset-using ones) might have similar problems - the normal user of regsets is ptrace and the state of tracee at the time of such calls is special in the same way signal delivery is. Note that had the zapper gotten to the exiting thread slightly later, it wouldn't have been included into coredump anyway - we skip the threads that have already cleared their ->mm. So let's pretend that zapper always loses the race. IOW, have exit_mm() only insert into the dumper list if we'd gotten there from handling a fatal signal[] As the result, the callers of do_exit() that have not* gone through get_signal() are not seen by coredump logics as secondary threads. Which excludes voluntary exit()/oopsen/traps/etc. The dumper thread itself is unaffected by that, so seccomp is fine. [*] originally I intended to add a new flag in tsk->flags, but ebiederman pointed out that PF_SIGNALED is already doing just what we need. Cc: stable@vger.kernel.org Fixes: d89f3847def4 ("[PATCH] thread-aware coredumps, 2.5.43-C3") History-tree: https://git.kernel.org/pub/scm/linux/kernel/git/tglx/history.git Acked-by: "Eric W. Biederman" <ebiederm@xmission.com> Signed-off-by: Al Viro <viro@zeniv.linux.org.uk> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2020-11-18 19:18:50 +01:00
lucaswei	1c4149c525	Merge android-4.19-stable (4.19.135) into android-msm-pixel-4.19-lts Merge 4.19.135 into android-4.19-stable Linux 4.19.135 ath9k: Fix regression with Atheros 9271 ath9k: Fix general protection fault in ath9k_hif_usb_rx_cb * dm integrity: fix integrity recalculation that is improperly skipped drivers/md/dm.c include/linux/device-mapper.h * ASoC: qcom: Drop HAS_DMA dependency to fix link failure sound/soc/qcom/Kconfig * ASoC: rt5670: Add new gpio1_is_ext_spk_en quirk and enable it on the Lenovo Miix 2 10 include/sound/rt5670.h * x86, vmlinux.lds: Page-align end of ..page_aligned sections include/asm-generic/vmlinux.lds.h parisc: Add atomic64_set_release() define to avoid CPU soft lockups drm/amd/powerplay: fix a crash when overclocking Vega M drm/amdgpu: Fix NULL dereference in dpm sysfs handlers * io-mapping: indicate mapping failure include/linux/io-mapping.h * mm: memcg/slab: fix memory leak at non-root kmem_cache destroy mm/slab_common.c * mm: memcg/slab: synchronize access to kmem_cache dying flag using a spinlock mm/slab_common.c * mm/memcg: fix refcount error while moving and swapping mm/memcontrol.c * Makefile: Fix GCC_TOOLCHAIN_DIR prefix for Clang cross compilation Makefile vt: Reject zero-sized screen buffer size. fbdev: Detect integer underflow at "struct fbcon_ops"->clear_margins. serial: 8250_mtk: Fix high-speed baud rates clamping serial: 8250: fix null-ptr-deref in serial8250_start_tx() staging: comedi: addi_apci_1564: check INSN_CONFIG_DIGITAL_TRIG shift staging: comedi: addi_apci_1500: check INSN_CONFIG_DIGITAL_TRIG shift staging: comedi: ni_6527: fix INSN_CONFIG_DIGITAL_TRIG support staging: comedi: addi_apci_1032: check INSN_CONFIG_DIGITAL_TRIG shift staging: wlan-ng: properly check endpoint types Revert "cifs: Fix the target file was deleted when rename failed." * usb: xhci: Fix ASM2142/ASM3142 DMA addressing drivers/usb/host/xhci-pci.c usb: xhci-mtk: fix the failure of bandwidth allocation * binder: Don't use mmput() from shrinker function. drivers/android/binder_alloc.c RISC-V: Upgrade smp_mb__after_spinlock() to iorw,iorw x86: math-emu: Fix up 'cmp' insn for clang ias * arm64: Use test_tsk_thread_flag() for checking TIF_SINGLESTEP arch/arm64/kernel/debug-monitors.c hwmon: (scmi) Fix potential buffer overflow in scmi_hwmon_probe() hwmon: (adm1275) Make sure we are reading enough data for different chips usb: gadget: udc: gr_udc: fix memleak on error handling path in gr_ep_init() Input: synaptics - enable InterTouch for ThinkPad X1E 1st gen dmaengine: ioat setting ioat timeout as module parameter hwmon: (aspeed-pwm-tacho) Avoid possible buffer overflow * regmap: dev_get_regmap_match(): fix string comparison drivers/base/regmap/regmap.c spi: mediatek: use correct SPI_CFG2_REG MACRO * Input: add `SW_MACHINE_COVER` include/linux/mod_devicetable.h include/uapi/linux/input-event-codes.h dmaengine: tegra210-adma: Fix runtime PM imbalance on error * HID: apple: Disable Fn-key key-re-mapping on clone keyboards drivers/hid/hid-apple.c HID: steam: fixes race in handling device list. HID: alps: support devices with report id 2 HID: i2c-hid: add Mediacom FlexBook edge13 to descriptor override scripts/gdb: fix lx-symbols 'gdb.error' while loading modules scripts/decode_stacktrace: strip basepath from all paths serial: exar: Fix GPIO configuration for Sealevel cards based on XR17V35X * bonding: check return value of register_netdevice() in bond_newlink() drivers/net/bonding/bond_netlink.c i2c: rcar: always clear ICSAR to avoid side effects net: ethernet: ave: Fix error returns in ave_init ipvs: fix the connection sync failed in some cases qed: suppress "don't support RoCE & iWARP" flooding on HW init mlxsw: destroy workqueue when trap_register in mlxsw_emad_init * bonding: check error value of register_netdevice() immediately drivers/net/bonding/bond_main.c net: smc91x: Fix possible memory leak in smc_drv_probe() drm: sun4i: hdmi: Fix inverted HPD result ieee802154: fix one possible memleak in adf7242_probe net: dp83640: fix SIOCSHWTSTAMP to update the struct with actual configuration * ax88172a: fix ax88172a_unbind() failures drivers/net/usb/ax88172a.c hippi: Fix a size used in a 'pci_free_consistent()' in an error handling path fpga: dfl: fix bug in port reset handshake bnxt_en: Fix race when modifying pause settings. btrfs: fix page leaks after failure to lock page for delalloc btrfs: fix mount failure caused by race with umount btrfs: fix double free on ulist after backref resolution failure ASoC: rt5670: Correct RT5670_LDO_SEL_MASK * ALSA: info: Drop WARN_ON() from buffer NULL sanity check sound/core/info.c * uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression kernel/events/uprobes.c IB/umem: fix reference count leak in ib_umem_odp_get() * tipc: clean up skb list lock handling on send path net/tipc/bcast.c net/tipc/group.c net/tipc/link.c net/tipc/node.c net/tipc/socket.c spi: spi-fsl-dspi: Exit the ISR with IRQ_NONE when it's not ours SUNRPC reverting d03727b248d0 ("NFSv4 fix CLOSE not waiting for direct IO compeletion") irqdomain/treewide: Keep firmware node unconditionally allocated * fuse: fix weird page warning fs/fuse/dev.c drivers/firmware/psci: Fix memory leakage in alloc_init_cpu_groups() drm/nouveau/i2c/g94-: increase NV_PMGR_DP_AUXCTL_TRANSACTREQ timeout net: sky2: initialize return of gm_phy_read drivers/net/wan/lapbether: Fixed the value of hard_header_len xtensa: update pos in cpuinfo_op.next xtensa: fix __sync_fetch_and_{and,or}_4 declarations scsi: scsi_transport_spi: Fix function pointer check mac80211: allow rx of mesh eapol frames with default rx key pinctrl: amd: fix npins for uart0 in kerncz_groups gpio: arizona: put pm_runtime in case of failure gpio: arizona: handle pm_runtime_get_sync failure case soc: qcom: rpmh: Dirt can only make you dirtier, not cleaner drivers/soc/qcom/rpmh.c ANDROID: build: update ABI definitions * ANDROID: update the kernel release format for GKI Makefile scripts/setlocalversion * ANDROID: Incremental fs: magic number compatible 32-bit fs/incfs/vfs.c * ANDROID: kbuild: don't merge ...compoundliteral in modules scripts/module-lto.lds.S ANDROID: GKI: preserve ABI for struct sock_cgroup_data include/linux/cgroup-defs.h * Revert "genetlink: remove genl_bind" include/net/genetlink.h net/netlink/genetlink.c * Revert "arm64/alternatives: use subsections for replacement sequences" arch/arm64/include/asm/alternative.h arch/arm64/kernel/vmlinux.lds.S Merge 4.19.134 into android-4.19-stable Linux 4.19.134 spi: sprd: switch the sequence of setting WDG_LOAD_LOW and _HIGH * rxrpc: Fix trace string include/trace/events/rxrpc.h libceph: don't omit recovery_deletes in target_copy() * printk: queue wake_up_klogd irq_work only if per-CPU areas are ready include/linux/printk.h init/main.c kernel/printk/internal.h kernel/printk/printk.c kernel/printk/printk_safe.c * genirq/affinity: Handle affinity setting on inactive interrupts correctly kernel/irq/manage.c * sched/fair: handle case of task_h_load() returning 0 kernel/sched/fair.c * sched: Fix unreliable rseq cpu_id for new tasks kernel/sched/core.c * arm64: compat: Ensure upper 32 bits of x0 are zero on syscall return arch/arm64/include/asm/syscall.h arch/arm64/kernel/syscall.c * arm64: ptrace: Consistently use pseudo-singlestep exceptions arch/arm64/include/asm/thread_info.h arch/arm64/kernel/ptrace.c arch/arm64/kernel/signal.c arch/arm64/kernel/syscall.c * arm64: ptrace: Override SPSR.SS when single-stepping is enabled arch/arm64/include/asm/debug-monitors.h arch/arm64/kernel/debug-monitors.c arch/arm64/kernel/ptrace.c * thermal/drivers/cpufreq_cooling: Fix wrong frequency converted from power drivers/thermal/cpu_cooling.c misc: atmel-ssc: lock with mutex instead of spinlock dmaengine: fsl-edma: Fix NULL pointer exception in fsl_edma_tx_handler intel_th: Fix a NULL dereference when hub driver is not loaded intel_th: pci: Add Emmitsburg PCH support intel_th: pci: Add Tiger Lake PCH-H support intel_th: pci: Add Jasper Lake CPU support powerpc/book3s64/pkeys: Fix pkey_access_permitted() for execute disable pkey hwmon: (emc2103) fix unable to change fan pwm1_enable attribute riscv: use 16KB kernel stack on 64-bit MIPS: Fix build for LTS kernel caused by backporting lpj adjustment * timer: Fix wheel index calculation on last level kernel/time/timer.c * timer: Prevent base->clk from moving backward kernel/time/timer.c uio_pdrv_genirq: fix use without device tree and no interrupt Input: i8042 - add Lenovo XiaoXin Air 12 to i8042 nomux list mei: bus: don't clean driver pointer * Revert "zram: convert remaining CLASS_ATTR() to CLASS_ATTR_RO()" drivers/block/zram/zram_drv.c * fuse: Fix parameter for FS_IOC_{GET,SET}FLAGS fs/fuse/file.c * ovl: fix unneeded call to ovl_change_flags() fs/overlayfs/file.c * ovl: relax WARN_ON() when decoding lower directory file handle fs/overlayfs/export.c * ovl: inode reference leak in ovl_is_inuse true case. fs/overlayfs/super.c serial: mxs-auart: add missed iounmap() in probe failure and remove virtio: virtio_console: add missing MODULE_DEVICE_TABLE() for rproc serial virt: vbox: Fix guest capabilities mask check * virt: vbox: Fix VBGL_IOCTL_VMMDEV_REQUEST_BIG and _LOG req numbers to match upstream include/uapi/linux/vboxguest.h USB: serial: option: add Quectel EG95 LTE modem USB: serial: option: add GosunCn GM500 series USB: serial: ch341: add new Product ID for CH340 USB: serial: cypress_m8: enable Simply Automated UPB PIM USB: serial: iuu_phoenix: fix memory corruption usb: gadget: function: fix missing spinlock in f_uac1_legacy usb: chipidea: core: add wakeup support for extcon usb: dwc2: Fix shutdown callback in platform USB: c67x00: fix use after free in c67x00_giveback_urb ALSA: hda/realtek - Enable Speaker for ASUS UX533 and UX534 ALSA: hda/realtek - change to suitable link model for ASUS platform * ALSA: usb-audio: Fix race against the error recovery URB submission sound/usb/midi.c ALSA: line6: Sync the pending work cancel at disconnection ALSA: line6: Perform sanity check for each URB creation * HID: quirks: Ignore Simply Automated UPB PIM drivers/hid/hid-ids.h drivers/hid/hid-quirks.c * HID: quirks: Always poll Obins Anne Pro 2 keyboard drivers/hid/hid-ids.h drivers/hid/hid-quirks.c * HID: magicmouse: do not set up autorepeat drivers/hid/hid-magicmouse.c slimbus: core: Fix mismatch in of_node_get/put mtd: rawnand: oxnas: Release all devices in the _remove() path mtd: rawnand: oxnas: Unregister all devices on error mtd: rawnand: oxnas: Keep track of registered devices mtd: rawnand: brcmnand: fix CS0 layout mtd: rawnand: timings: Fix default tR_max and tCCS_min timings mtd: rawnand: marvell: Fix probe error path mtd: rawnand: marvell: Use nand_cleanup() when the device is not yet registered * soc: qcom: rpmh-rsc: Allow using free WAKE TCS for active request drivers/soc/qcom/rpmh-rsc.c * soc: qcom: rpmh-rsc: Clear active mode configuration for wake TCS drivers/soc/qcom/rpmh-rsc.c * soc: qcom: rpmh: Invalidate SLEEP and WAKE TCSes before flushing new data drivers/soc/qcom/rpmh.c * soc: qcom: rpmh: Update dirty flag only when data changes drivers/soc/qcom/rpmh.c perf stat: Zero all the 'ena' and 'run' array slot stats for interval mode apparmor: ensure that dfa state tables have entries copy_xstate_to_kernel: Fix typo which caused GDB regression * regmap: debugfs: Don't sleep while atomic for fast_io regmaps drivers/base/regmap/regmap-debugfs.c ARM: dts: socfpga: Align L2 cache-controller nodename with dtschema Revert "thermal: mediatek: fix register index error" staging: comedi: verify array index is correct before using it usb: gadget: udc: atmel: fix uninitialized read in debug printk spi: spi-sun6i: sun6i_spi_transfer_one(): fix setting of clock rate arm64: dts: meson: add missing gxl rng clock phy: sun4i-usb: fix dereference of pointer phy0 before it is null checked iio:health:afe4404 Fix timestamp alignment and prevent data leak. * ALSA: usb-audio: Add registration quirk for Kingston HyperX Cloud Flight S sound/usb/quirks.c ACPI: video: Use native backlight on Acer TravelMate 5735Z Input: mms114 - add extra compatible for mms345l * ALSA: usb-audio: Add registration quirk for Kingston HyperX Cloud Alpha S sound/usb/quirks.c ACPI: video: Use native backlight on Acer Aspire 5783z * ALSA: usb-audio: Rewrite registration quirk handling sound/usb/card.c sound/usb/quirks.c sound/usb/quirks.h mmc: sdhci: do not enable card detect interrupt for gpio cd type doc: dt: bindings: usb: dwc3: Update entries for disabling SS instances in park mode * ALSA: usb-audio: Create a registration quirk for Kingston HyperX Amp (0951:16d8) sound/usb/card.c sound/usb/quirks.c sound/usb/quirks.h * scsi: sr: remove references to BLK_DEV_SR_VENDOR, leave it enabled drivers/scsi/Kconfig ARM: at91: pm: add quirk for sam9x60's ulp1 * HID: quirks: Remove ITE 8595 entry from hid_have_special_driver drivers/hid/hid-quirks.c net: sfp: add some quirks for GPON modules net: sfp: add support for module quirks * Revert "usb/ehci-platform: Set PM runtime as active on resume" drivers/usb/host/ehci-platform.c * Revert "usb/xhci-plat: Set PM runtime as active on resume" drivers/usb/host/xhci-plat.c * Revert "usb/ohci-platform: Fix a warning when hibernating" drivers/usb/host/ohci-platform.c * of: of_mdio: Correct loop scanning logic drivers/of/of_mdio.c net: dsa: bcm_sf2: Fix node reference count spi: spi-fsl-dspi: Fix lockup if device is shutdown during SPI transfer spi: fix initial SPI_SR value in spi-fsl-dspi iio:health:afe4403 Fix timestamp alignment and prevent data leak. iio:pressure:ms5611 Fix buffer element alignment iio:humidity:hts221 Fix alignment and data leak issues iio: pressure: zpa2326: handle pm_runtime_get_sync failure iio: mma8452: Add missed iio_device_unregister() call in mma8452_probe() iio: magnetometer: ak8974: Fix runtime PM imbalance on error iio:humidity:hdc100x Fix alignment and data leak issues iio:magnetometer:ak8974: Fix alignment and data leak issues * arm64/alternatives: don't patch up internal branches arch/arm64/kernel/alternative.c i2c: eg20t: Load module automatically if ID matches gfs2: read-only mounts should grab the sd_freeze_gl glock tpm_tis: extra chip->ops check on error path in tpm_tis_core_init * arm64/alternatives: use subsections for replacement sequences arch/arm64/include/asm/alternative.h arch/arm64/kernel/vmlinux.lds.S m68k: mm: fix node memblock init m68k: nommu: register start of the memory with memblock drm/exynos: fix ref count leak in mic_pre_enable drm/msm: fix potential memleak in error branch * vlan: consolidate VLAN parsing code and limit max parsing depth include/linux/if_vlan.h * sched: consistently handle layer3 header accesses in the presence of VLANs include/linux/if_vlan.h include/net/inet_ecn.h include/net/pkt_sched.h net/core/filter.c net/sched/act_skbedit.c net/sched/cls_api.c net/sched/cls_flow.c net/sched/em_meta.c * cgroup: Fix sock_cgroup_data on big-endian. include/linux/cgroup-defs.h * cgroup: fix cgroup_sk_alloc() for sk_clone_lock() include/linux/cgroup-defs.h include/linux/cgroup.h kernel/cgroup/cgroup.c net/core/sock.c * tcp: md5: allow changing MD5 keys in all socket states net/ipv4/tcp.c * tcp: md5: refine tcp_md5_do_add()/tcp_md5_hash_key() barriers net/ipv4/tcp.c net/ipv4/tcp_ipv4.c * tcp: md5: do not send silly options in SYNCOOKIES net/ipv4/tcp_output.c * tcp: md5: add missing memory barriers in tcp_md5_do_add()/tcp_md5_hash_key() net/ipv4/tcp.c net/ipv4/tcp_ipv4.c * tcp: make sure listeners don't initialize congestion-control state net/ipv4/tcp.c net/ipv4/tcp_cong.c * tcp: fix SO_RCVLOWAT possible hangs under high mem pressure net/ipv4/tcp_input.c net: usb: qmi_wwan: add support for Quectel EG95 LTE modem net_sched: fix a memory leak in atm_tc_init() * net: Added pointer check for dst->ops->neigh_lookup in dst_neigh_lookup_skb include/net/dst.h llc: make sure applications use ARPHRD_ETHER * l2tp: remove skb_dst_set() from l2tp_xmit_skb() net/l2tp/l2tp_core.c * ipv4: fill fl4_icmp_{type,code} in ping_v4_sendmsg net/ipv4/ping.c * genetlink: remove genl_bind include/net/genetlink.h net/netlink/genetlink.c * net: rmnet: fix lower interface leak drivers/net/ethernet/qualcomm/rmnet/rmnet_config.c perf: Make perf able to build with latest libbfd * UPSTREAM: media: v4l2-ctrl: Add H264 profile and levels drivers/media/v4l2-core/v4l2-ctrls.c include/uapi/linux/v4l2-controls.h * UPSTREAM: media: v4l2-ctrl: Add control for h.264 chroma qp offset drivers/media/v4l2-core/v4l2-ctrls.c include/uapi/linux/v4l2-controls.h * ANDROID: GKI: ASoC: compress: revert some code to avoid race condition sound/core/compress_offload.c ANDROID: GKI: Update the ABI xml representation. * ANDROID: GKI: kernel: tick-sched: Add an API for wakeup callbacks include/linux/tick.h kernel/time/tick-sched.c * ANDROID: ASoC: Compress: Check and set pcm_new driver op sound/soc/soc-compress.c Revert "ANDROID: GKI: arm64: gki_defconfig: Disable CONFIG_ARM64_TAGGED_ADDR_ABI" ANDROID: arm64: configs: enabe CONFIG_TMPFS * Revert "ALSA: compress: fix partial_drain completion state" include/sound/compress_driver.h sound/core/compress_offload.c Merge 4.19.133 into android-4.19-stable ANDROID: GKI: enable CONFIG_EXT4_FS_POSIX_ACL. ANDROID: GKI: set CONFIG_STATIC_USERMODEHELPER_PATH Linux 4.19.133 s390/mm: fix huge pte soft dirty copying ARC: elf: use right ELF_ARCH ARC: entry: fix potential EFA clobber when TIF_SYSCALL_TRACE * dm: use noio when sending kobject event drivers/md/dm.c drm/radeon: fix double free btrfs: fix fatal extent_buffer readahead vs releasepage race Revert "ath9k: Fix general protection fault in ath9k_hif_usb_rx_cb" * bpf: Check correct cred for CAP_SYSLOG in bpf_dump_raw_ok() include/linux/filter.h kernel/bpf/syscall.c net/core/sysctl_net_core.c kprobes: Do not expose probe addresses to non-CAP_SYSLOG * module: Do not expose section addresses to non-CAP_SYSLOG kernel/module.c * module: Refactor section attr into bin attribute kernel/module.c * kernel: module: Use struct_size() helper kernel/module.c * kallsyms: Refactor kallsyms_show_value() to take cred include/linux/filter.h include/linux/kallsyms.h kernel/kallsyms.c kernel/module.c KVM: x86: Mark CR4.TSD as being possibly owned by the guest KVM: x86: Inject #GP if guest attempts to toggle CR4.LA57 in 64-bit mode KVM: x86: bit 8 of non-leaf PDPEs is not reserved KVM: arm64: Stop clobbering x0 for HVC_SOFT_RESTART * KVM: arm64: Fix definition of PAGE_HYP_DEVICE arch/arm64/include/asm/pgtable-prot.h * ALSA: usb-audio: add quirk for MacroSilicon MS2109 sound/usb/quirks-table.h ALSA: hda - let hs_mic be picked ahead of hp_mic ALSA: opl3: fix infoleak in opl3 mlxsw: spectrum_router: Remove inappropriate usage of WARN_ON() net: macb: mark device wake capable when "magic-packet" property present bnxt_en: fix NULL dereference in case SR-IOV configuration fails cxgb4: fix all-mask IP address comparison nbd: Fix memory leak in nbd_add_socket arm64: kgdb: Fix single-step exception handling oops * ALSA: compress: fix partial_drain completion state include/sound/compress_driver.h sound/core/compress_offload.c net: hns3: fix use-after-free when doing self test smsc95xx: avoid memory leak in smsc95xx_bind smsc95xx: check return value of smsc95xx_reset net: cxgb4: fix return error value in t4_prep_fw drm/mediatek: Check plane visibility in atomic_update * net: qrtr: Fix an out of bounds read qrtr_endpoint_post() net/qrtr/qrtr.c x86/entry: Increase entry_stack size to a full page nvme-rdma: assign completion vector correctly block: release bip in a right way in error path usb: dwc3: pci: Fix reference count leak in dwc3_pci_resume_work scsi: mptscsih: Fix read sense data size ARM: imx6: add missing put_device() call in imx6q_suspend_init() cifs: update ctime and mtime during truncate s390/kasan: fix early pgm check handler execution * drm: panel-orientation-quirks: Use generic orientation-data for Acer S1003 drivers/gpu/drm/drm_panel_orientation_quirks.c * drm: panel-orientation-quirks: Add quirk for Asus T101HA panel drivers/gpu/drm/drm_panel_orientation_quirks.c i40e: protect ring accesses with READ- and WRITE_ONCE ixgbe: protect ring accesses with READ- and WRITE_ONCE * spi: spidev: fix a potential use-after-free in spidev_release() drivers/spi/spidev.c * spi: spidev: fix a race between spidev_release and spidev_remove drivers/spi/spidev.c gpu: host1x: Detach driver on unregister drm/tegra: hub: Do not enable orphaned window group ARM: dts: omap4-droid4: Fix spi configuration and increase rate * regmap: fix alignment issue drivers/base/regmap/regmap.c spi: spi-fsl-dspi: Fix external abort on interrupt in resume or exit paths spi: spi-fsl-dspi: use IRQF_SHARED mode to request IRQ spi: spi-fsl-dspi: Fix lockup if device is removed during SPI transfer spi: spi-fsl-dspi: Adding shutdown hook KVM: s390: reduce number of IO pins to 1 ANDROID: GKI: update abi based on padding fields being added * ANDROID: GKI: USB: Gadget: add Android ABI padding to struct usb_gadget include/linux/usb/gadget.h * ANDROID: GKI: sound/usb/card.h: add Android ABI padding to struct snd_usb_endpoint sound/usb/card.h * ANDROID: fscrypt: fix DUN contiguity with inline encryption + IV_INO_LBLK_32 policies fs/crypto/bio.c fs/crypto/inline_crypt.c * ANDROID: f2fs: add back compress inode check fs/f2fs/f2fs.h Merge 4.19.132 into android-4.19-stable Linux 4.19.132 * efi: Make it possible to disable efivar_ssdt entirely drivers/firmware/efi/Kconfig dm zoned: assign max_io_len correctly * irqchip/gic: Atomically update affinity drivers/irqchip/irq-gic.c MIPS: Add missing EHB in mtc0 -> mfc0 sequence for DSPen cifs: Fix the target file was deleted when rename failed. SMB3: Honor lease disabling for multiuser mounts SMB3: Honor persistent/resilient handle flags for multiuser mounts SMB3: Honor 'seal' flag for multiuser mounts * Revert "ALSA: usb-audio: Improve frames size computation" sound/usb/card.h sound/usb/endpoint.c sound/usb/endpoint.h sound/usb/pcm.c nfsd: apply umask on fs without ACL support i2c: mlxcpld: check correct size of maximum RECV_LEN packet i2c: algo-pca: Add 0x78 as SCL stuck low status for PCA9665 nvme: fix a crash in nvme_mpath_add_disk SMB3: Honor 'posix' flag for multiuser mounts virtio-blk: free vblk-vqs in error path of virtblk_probe() drm: sun4i: hdmi: Remove extra HPD polling hwmon: (acpi_power_meter) Fix potential memory leak in acpi_power_meter_add() hwmon: (max6697) Make sure the OVERT mask is set correctly cxgb4: fix SGE queue dump destination buffer context cxgb4: use correct type for all-mask IP address comparison cxgb4: parse TC-U32 key values and masks natively cxgb4: use unaligned conversion for fetching timestamp drm/msm/dpu: fix error return code in dpu_encoder_init * crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() include/crypto/if_alg.h kgdb: Avoid suspicious RCU usage warning nvme-multipath: fix deadlock between ana_work and scan_work nvme-multipath: set bdi capabilities once s390/debug: avoid kernel warning on too large number of pages usb: usbtest: fix missing kfree(dev->buf) in usbtest_disconnect * mm/slub: fix stack overruns with SLUB_STATS mm/slub.c * mm/slub.c: fix corrupted freechain in deactivate_slab() mm/slub.c usbnet: smsc95xx: Fix use-after-free after removal EDAC/amd64: Read back the scrub rate PCI register on F15h * mm: fix swap cache node allocation mask mm/swap_state.c btrfs: fix a block group ref counter leak after failure to remove block group ANDROID: Update ABI representation for libabigail update ANDROID: Update the ABI representation ANDROID: Update the ABI xml representation * ANDROID: GKI: fix ABI diffs caused by GPU heap and pool vmstat additions include/linux/mmzone.h mm/vmstat.c * ANDROID: sched: consider stune boost margin when computing energy kernel/sched/cpufreq_schedutil.c kernel/sched/fair.c kernel/sched/sched.h kernel/sched/tune.c kernel/sched/tune.h ANDROID: GKI: move abi files to android/ ANDROID: GKI: drop unneeded "_whitelist" off of symbol filenames * UPSTREAM: binder: fix null deref of proc->context drivers/android/binder.c * ANDROID: cpufreq: schedutil: maintain raw cache when next_f is not changed kernel/sched/cpufreq_schedutil.c * UPSTREAM: net: bpf: Make bpf_ktime_get_ns() available to non GPL programs kernel/bpf/helpers.c UPSTREAM: usb: musb: mediatek: add reset FADDR to zero in reset interrupt handle * ANDROID: GKI: scripts: Makefile: update the lz4 command (#2) scripts/Makefile.lib ANDROID: Update the ABI xml representation * Revert "drm/dsi: Fix byte order of DCS set/get brightness" drivers/gpu/drm/drm_mipi_dsi.c include/drm/drm_mipi_dsi.h Merge 4.19.131 into android-4.19-stable Linux 4.19.131 Revert "tty: hvc: Fix data abort due to race in hvc_open" xfs: add agf freeblocks verify in xfs_agf_verify dm writecache: add cond_resched to loop in persistent_memory_claim() dm writecache: correct uncommitted_block when discarding uncommitted entry NFSv4 fix CLOSE not waiting for direct IO compeletion pNFS/flexfiles: Fix list corruption if the mirror count changes SUNRPC: Properly set the @subbuf parameter of xdr_buf_subsegment() sunrpc: fixed rollback in rpc_gssd_dummy_populate() Staging: rtl8723bs: prevent buffer overflow in update_sta_support_rate() drm/radeon: fix fb_div check in ni_init_smc_spll_table() * drm: rcar-du: Fix build error drivers/gpu/drm/rcar-du/Kconfig * ring-buffer: Zero out time extend if it is nested and not absolute kernel/trace/ring_buffer.c * tracing: Fix event trigger to accept redundant spaces kernel/trace/trace_events_trigger.c * arm64: perf: Report the PC value in REGS_ABI_32 mode arch/arm64/kernel/perf_regs.c ocfs2: fix panic on nfs server over ocfs2 ocfs2: fix value of OCFS2_INVALID_SLOT ocfs2: load global_inode_alloc ocfs2: avoid inode removal while nfsd is accessing it * mm/slab: use memzero_explicit() in kzfree() mm/slab_common.c btrfs: fix failure of RWF_NOWAIT write into prealloc extent beyond eof btrfs: fix data block group relocation failure due to concurrent scrub x86/asm/64: Align start of __clear_user() loop to 16-bytes KVM: nVMX: Plumb L2 GPA through to PML emulation KVM: X86: Fix MSR range of APIC registers in X2APIC mode erofs: fix partially uninitialized misuse in z_erofs_onlinepage_fixup ACPI: sysfs: Fix pm_profile_attr type ALSA: hda/realtek - Add quirk for MSI GE63 laptop ALSA: hda: Add NVIDIA codec IDs 9a & 9d through a0 to patch table RISC-V: Don't allow write+exec only page mapping request in mmap * blktrace: break out of blktrace setup on concurrent calls kernel/trace/blktrace.c * kbuild: improve cc-option to clean up all temporary files scripts/Kbuild.include * arm64: sve: Fix build failure when ARM64_SVE=y and SYSCTL=n arch/arm64/kernel/fpsimd.c s390/vdso: fix vDSO clock_getres() s390/ptrace: fix setting syscall number net: alx: fix race condition in alx_remove ibmvnic: Harden device login requests hwrng: ks-sa - Fix runtime PM imbalance on error riscv/atomic: Fix sign extension for RV64I drm/amd/display: Use kfree() to free rgb_user in calculate_user_regamma_ramp() ata/libata: Fix usage of page address by page_address in ata_scsi_mode_select_xlat function sata_rcar: handle pm_runtime_get_sync failure cases * sched/core: Fix PI boosting between RT and DEADLINE tasks kernel/sched/core.c * sched/deadline: Initialize ->dl_boosted kernel/sched/deadline.c * i2c: core: check returned size of emulated smbus block read drivers/i2c/i2c-core-smbus.c i2c: fsi: Fix the port number field in status register net: bcmgenet: use hardware padding of runt frames netfilter: ipset: fix unaligned atomic access usb: gadget: udc: Potential Oops in error handling code ARM: imx5: add missing put_device() call in imx_suspend_alloc_ocram() cxgb4: move handling L2T ARP failures to caller net: qed: fix excessive QM ILT lines consumption net: qed: fix NVMe login fails over VFs * net: qed: fix left elements count calculation include/linux/qed/qed_chain.h RDMA/mad: Fix possible memory leak in ib_mad_post_receive_mads() ASoC: rockchip: Fix a reference count leak. RDMA/cma: Protect bind_list and listen_list while finding matching cm id RDMA/qedr: Fix KASAN: use-after-free in ucma_event_handler+0x532 rxrpc: Fix handling of rwind from an ACK packet ARM: dts: NSP: Correct FA2 mailbox node * regmap: Fix memory leak from regmap_register_patch drivers/base/regmap/regmap.c x86/resctrl: Fix a NULL vs IS_ERR() static checker warning in rdt_cdp_peer_get() ARM: dts: Fix duovero smsc interrupt for suspend ASoC: fsl_ssi: Fix bclk calculation for mono channel regualtor: pfuze100: correct sw1a/sw2 on pfuze3000 efi/esrt: Fix reference count leak in esre_create_sysfs_entry. ASoC: q6asm: handle EOS correctly * xfrm: Fix double ESP trailer insertion in IPsec crypto offload. include/net/xfrm.h net/xfrm/xfrm_device.c cifs/smb3: Fix data inconsistent when zero file range cifs/smb3: Fix data inconsistent when punch hole IB/mad: Fix use after free when destroying MAD agent * loop: replace kill_bdev with invalidate_bdev drivers/block/loop.c cdc-acm: Add DISABLE_ECHO quirk for Microchip/SMSC chip * xhci: Return if xHCI doesn't support LPM drivers/usb/host/xhci.c * xhci: Fix enumeration issue when setting max packet size for FS devices. drivers/usb/host/xhci.c * xhci: Fix incorrect EP_STATE_MASK drivers/usb/host/xhci.h scsi: zfcp: Fix panic on ERP timeout for previously dismissed ERP action * ALSA: usb-audio: Fix OOB access of mixer element list sound/usb/mixer.c sound/usb/mixer.h sound/usb/mixer_quirks.c * ALSA: usb-audio: add quirk for Samsung USBC Headset (AKG) sound/usb/quirks.c * ALSA: usb-audio: add quirk for Denon DCD-1500RE sound/usb/quirks.c usb: typec: tcpci_rt1711h: avoid screaming irq causing boot hangs usb: host: ehci-exynos: Fix error check in exynos_ehci_probe() * xhci: Poll for U0 after disabling USB2 LPM drivers/usb/host/xhci.c usb: host: xhci-mtk: avoid runtime suspend when removing hcd * USB: ehci: reopen solution for Synopsys HC bug drivers/usb/host/ehci-pci.c * usb: add USB_QUIRK_DELAY_INIT for Logitech C922 drivers/usb/core/quirks.c usb: dwc2: Postponed gadget registration to the udc class driver USB: ohci-sm501: Add missed iounmap() in remove * net: core: reduce recursion limit value include/linux/netdevice.h * net: Do not clear the sock TX queue in sk_set_socket() include/net/sock.h net/core/sock.c * net: Fix the arp error in some cases net/ipv4/fib_semantics.c sch_cake: don't call diffserv parsing code when it is not needed * tcp_cubic: fix spurious HYSTART_DELAY exit upon drop in min RTT net/ipv4/tcp_cubic.c sch_cake: fix a few style nits sch_cake: don't try to reallocate or unshare skb unconditionally * ip_tunnel: fix use-after-free in ip_tunnel_lookup() net/ipv4/ip_tunnel.c * net: phy: Check harder for errors in get_phy_id() drivers/net/phy/phy_device.c ip6_gre: fix use-after-free in ip6gre_tunnel_lookup() tg3: driver sleeps indefinitely when EEH errors exceed eeh_max_freezes * tcp: grow window for OOO packets only for SACK flows net/ipv4/tcp_input.c * tcp: don't ignore ECN CWR on pure ACK net/ipv4/tcp_input.c * sctp: Don't advertise IPv4 addresses if ipv6only is set on the socket include/net/sctp/constants.h net/sctp/associola.c net/sctp/bind_addr.c net/sctp/protocol.c rxrpc: Fix notification call on completion of discarded calls rocker: fix incorrect error handling in dma_rings_init * net: usb: ax88179_178a: fix packet alignment padding drivers/net/usb/ax88179_178a.c * net: increment xmit_recursion level in dev_direct_xmit() net/core/dev.c net/core/sock.c * net: use correct this_cpu primitive in dev_recursion_level include/linux/netdevice.h * net: place xmit recursion in softnet data include/linux/netdevice.h net/core/dev.c net/core/filter.c * net: fix memleak in register_netdevice() net/core/dev.c * net: bridge: enfore alignment for ethernet address net/bridge/br_private.h * mld: fix memory leak in ipv6_mc_destroy_dev() net/ipv6/mcast.c ibmveth: Fix max MTU limit apparmor: don't try to replace stale label in ptraceme check ALSA: hda/realtek - Enable micmute LED on and HP system ALSA: hda/realtek: Enable mute LED on an HP system ALSA: hda/realtek - Enable the headset of ASUS B9450FA with ALC294 fix a braino in "sparc32: fix register window handling in genregs32_[gs]et()" i2c: tegra: Fix Maximum transfer size i2c: tegra: Add missing kerneldoc for some fields i2c: tegra: Cleanup kerneldoc comments EDAC/amd64: Add Family 17h Model 30h PCI IDs * net: sched: export __netdev_watchdog_up() net/sched/sch_generic.c net: bcmgenet: remove HFB_CTRL access mtd: rawnand: marvell: Fix the condition on a return code fanotify: fix ignore mask logic for events on child and on dir block/bio-integrity: don't free 'buf' if bio_integrity_add_page() failed * net: be more gentle about silly gso requests coming from user include/linux/virtio_net.h * ANDROID: lib/vdso: do not update timespec if clock_getres() fails lib/vdso/gettimeofday.c * Revert "ANDROID: fscrypt: add key removal notifier chain" fs/crypto/keyring.c include/linux/fscrypt.h ANDROID: update the ABI xml and qcom whitelist * ANDROID: fs: export vfs_{read\|write} fs/read_write.c ANDROID: GKI: update abi definitions now that sdcardfs is gone * Revert "ANDROID: sdcardfs: Enable modular sdcardfs" fs/fs_struct.c fs/read_write.c security/security.c * Revert "ANDROID: vfs: Add setattr2 for filesystems with per mount permissions" fs/attr.c fs/coredump.c fs/inode.c fs/namei.c fs/open.c fs/utimes.c include/linux/fs.h * Revert "ANDROID: vfs: fix export symbol type" fs/attr.c * Revert "ANDROID: vfs: Add permission2 for filesystems with per mount permissions" fs/attr.c fs/exec.c fs/namei.c fs/notify/inotify/inotify_user.c fs/open.c fs/xattr.c include/linux/fs.h include/linux/namei.h * Revert "ANDROID: vfs: fix export symbol types" fs/namei.c * Revert "ANDROID: vfs: add d_canonical_path for stacked filesystem support" fs/notify/inotify/inotify_user.c include/linux/dcache.h include/linux/fsnotify.h * Revert "ANDROID: fs: Restore vfs_path_lookup() export" fs/internal.h include/linux/namei.h * ANDROID: sdcardfs: remove sdcardfs from system fs/Kconfig fs/Makefile * Revert "ALSA: usb-audio: Improve frames size computation" sound/usb/card.h sound/usb/endpoint.c sound/usb/endpoint.h sound/usb/pcm.c Merge 4.19.130 into android-4.19-stable * ANDROID: Makefile: append BUILD_NUMBER to version string when defined Makefile ANDROID: GKI: Update ABI for incremental fs ANDROID: GKI: Update cuttlefish whitelist ANDROID: GKI: Disable INCREMENTAL_FS on x86 too * ANDROID: cpufreq: schedutil: drop cache when update skipped due to rate limit kernel/sched/cpufreq_schedutil.c Linux 4.19.130 KVM: x86/mmu: Set mmio_value to '0' if reserved #PF can't be generated kvm: x86: Fix reserved bits related calculation errors caused by MKTME kvm: x86: Move kvm_set_mmio_spte_mask() from x86.c to mmu.c * md: add feature flag MD_FEATURE_RAID0_LAYOUT include/uapi/linux/raid/md_p.h Revert "dpaa_eth: fix usage as DSA master, try 3" * net: core: device_rename: Use rwsem instead of a seqcount net/core/dev.c * sched/rt, net: Use CONFIG_PREEMPTION.patch net/core/dev.c * kretprobe: Prevent triggering kretprobe from within kprobe_flush_task include/linux/kprobes.h net: octeon: mgmt: Repair filling of RX ring e1000e: Do not wake up the system via WOL if device wakeup is disabled kprobes: Fix to protect kick_kprobe_optimizer() by kprobe_mutex * crypto: algboss - don't wait during notifier callback crypto/algboss.c crypto: algif_skcipher - Cap recv SG list at ctx->used drm/i915/icl+: Fix hotplug interrupt disabling after storm detection drm/i915: Whitelist context-local timestamp in the gen9 cmdparser s390: fix syscall_get_error for compat processes mtd: rawnand: tmio: Fix the probe error path mtd: rawnand: mtk: Fix the probe error path mtd: rawnand: plat_nand: Fix the probe error path mtd: rawnand: socrates: Fix the probe error path mtd: rawnand: oxnas: Fix the probe error path mtd: rawnand: oxnas: Add of_node_put() mtd: rawnand: orion: Fix the probe error path mtd: rawnand: xway: Fix the probe error path mtd: rawnand: sharpsl: Fix the probe error path mtd: rawnand: diskonchip: Fix the probe error path * mtd: rawnand: Pass a nand_chip object to nand_release() include/linux/mtd/rawnand.h * mtd: rawnand: Pass a nand_chip object to nand_scan() include/linux/mtd/rawnand.h * block: nr_sects_write(): Disable preemption on seqcount write include/linux/genhd.h x86/boot/compressed: Relax sed symbol type regex for LLVM ld.lld * drm/dp_mst: Increase ACT retry timeout to 3s drivers/gpu/drm/drm_dp_mst_topology.c * ext4: avoid race conditions when remounting with options that change dax fs/ext4/super.c * ext4: fix partial cluster initialization when splitting extent fs/ext4/extents.c * selinux: fix double free security/selinux/ss/services.c drm/amdgpu: Replace invalid device ID with a valid device ID drm/qxl: Use correct notify port address when creating cursor ring * drm/dp_mst: Reformat drm_dp_check_act_status() a bit drivers/gpu/drm/drm_dp_mst_topology.c * drm: encoder_slave: fix refcouting error for modules drivers/gpu/drm/drm_encoder_slave.c * libata: Use per port sync for detach include/linux/libata.h * arm64: hw_breakpoint: Don't invoke overflow handler on uaccess watchpoints arch/arm64/kernel/hw_breakpoint.c * block: Fix use-after-free in blkdev_get() fs/block_dev.c afs: afs_write_end() should change i_size under the right lock afs: Fix non-setting of mtime when writing into mmap bcache: fix potential deadlock problem in btree_gc_coalesce * ext4: stop overwrite the errcode in ext4_setup_super fs/ext4/super.c perf report: Fix NULL pointer dereference in hists__fprintf_nr_sample_events() * usb/ehci-platform: Set PM runtime as active on resume drivers/usb/host/ehci-platform.c * usb: host: ehci-platform: add a quirk to avoid stuck drivers/usb/host/ehci-platform.c include/linux/usb/ehci_def.h * usb/xhci-plat: Set PM runtime as active on resume drivers/usb/host/xhci-plat.c xdp: Fix xsk_generic_xmit errno * net/filter: Permit reading NET in load_bytes_relative when MAC not set net/core/filter.c x86/idt: Keep spurious entries unset in system_vectors scsi: acornscsi: Fix an error handling path in acornscsi_probe() drm/sun4i: hdmi ddc clk: Fix size of m divider ASoC: rt5645: Add platform-data for Asus T101HA ASoC: Intel: bytcr_rt5640: Add quirk for Toshiba Encore WT10-A tablet * ASoC: core: only convert non DPCM link to DPCM link sound/soc/soc-core.c afs: Fix memory leak in afs_put_sysnames() selftests/net: in timestamping, strncpy needs to preserve null byte drivers/perf: hisi: Fix wrong value for all counters enable NTB: ntb_test: Fix bug when counting remote files NTB: perf: Fix race condition when run with ntb_test NTB: perf: Fix support for hardware that doesn't have port numbers NTB: perf: Don't require one more memory window than number of peers NTB: Revert the change to use the NTB device dev for DMA allocations NTB: ntb_tool: reading the link file should not end in a NULL byte ntb_tool: pass correct struct device to dma_alloc_coherent ntb_perf: pass correct struct device to dma_alloc_coherent gfs2: fix use-after-free on transaction ail lists * blktrace: fix endianness for blk_log_remap() kernel/trace/blktrace.c * blktrace: fix endianness in get_pdu_int() kernel/trace/blktrace.c * blktrace: use errno instead of bi_status kernel/trace/blktrace.c selftests/vm/pkeys: fix alloc_random_pkey() to make it really random * elfnote: mark all .note sections SHF_ALLOC include/linux/elfnote.h * include/linux/bitops.h: avoid clang shift-count-overflow warnings include/linux/bitops.h * lib/zlib: remove outdated and incorrect pre-increment optimization lib/zlib_inflate/inffast.c geneve: change from tx_error to tx_dropped on missing metadata crypto: omap-sham - add proper load balancing support for multicore pinctrl: freescale: imx: Fix an error handling path in 'imx_pinctrl_probe()' pinctrl: imxl: Fix an error handling path in 'imx1_pinctrl_core_probe()' * scsi: ufs: Don't update urgent bkops level when toggling auto bkops drivers/scsi/ufs/ufshcd.c scsi: iscsi: Fix reference count leak in iscsi_boot_create_kobj gfs2: Allow lock_nolock mount to specify jid=X openrisc: Fix issue with argument clobbering for clone/fork rxrpc: Adjust /proc/net/rxrpc/calls to display call->debug_id not user_ID vfio/mdev: Fix reference count leak in add_mdev_supported_type ASoC: fsl_asrc_dma: Fix dma_chan leak when config DMA channel failed extcon: adc-jack: Fix an error handling path in 'adc_jack_probe()' powerpc/4xx: Don't unmap NULL mbase * of: Fix a refcounting bug in __of_attach_node_sysfs() drivers/of/kobj.c NFSv4.1 fix rpc_call_done assignment for BIND_CONN_TO_SESSION net: sunrpc: Fix off-by-one issues in 'rpc_ntop6' clk: sprd: return correct type of value for _sprd_pll_recalc_rate KVM: PPC: Book3S HV: Ignore kmemleak false positives * scsi: ufs-qcom: Fix scheduling while atomic issue drivers/scsi/ufs/ufs-qcom.c clk: bcm2835: Fix return type of bcm2835_register_gate scsi: target: tcmu: Fix a use after free in tcmu_check_expired_queue_cmd() ASoC: fix incomplete error-handling in img_i2s_in_probe. x86/apic: Make TSC deadline timer detection message visible RDMA/iw_cxgb4: cleanup device debugfs entries on ULD remove * usb: gadget: Fix issue with config_ep_by_speed function drivers/usb/gadget/composite.c include/linux/usb/composite.h usb: gadget: fix potential double-free in m66592_probe. usb: gadget: lpc32xx_udc: don't dereference ep pointer before null check USB: gadget: udc: s3c2410_udc: Remove pointless NULL check in s3c2410_udc_nuke usb: dwc2: gadget: move gadget resume after the core is in L0 state watchdog: da9062: No need to ping manually before setting timeout IB/cma: Fix ports memory leak in cma_configfs PCI: dwc: Fix inner MSI IRQ domain registration PCI/PTM: Inherit Switch Downstream Port PTM settings from Upstream Port dm zoned: return NULL if dmz_get_zone_for_reclaim() fails to find a zone powerpc/64s/pgtable: fix an undefined behaviour arm64: tegra: Fix ethernet phy-mode for Jetson Xavier scsi: target: tcmu: Userspace must not complete queued commands clk: samsung: exynos5433: Add IGNORE_UNUSED flag to sclk_i2s1 fpga: dfl: afu: Corrected error handling levels tty: n_gsm: Fix bogus i++ in gsm_data_kick USB: host: ehci-mxc: Add error handling in ehci_mxc_drv_probe() ASoC: Intel: bytcr_rt5640: Add quirk for Toshiba Encore WT8-A tablet drm/msm/mdp5: Fix mdp5_init error path for failed mdp5_kms allocation * usb/ohci-platform: Fix a warning when hibernating drivers/usb/host/ohci-platform.c vfio-pci: Mask cap zero powerpc/ps3: Fix kexec shutdown hang powerpc/pseries/ras: Fix FWNMI_VALID off by one ipmi: use vzalloc instead of kmalloc for user creation * HID: Add quirks for Trust Panora Graphic Tablet drivers/hid/hid-ids.h drivers/hid/hid-quirks.c tty: n_gsm: Fix waking up upper tty layer when room available tty: n_gsm: Fix SOF skipping powerpc/64: Don't initialise init_task->thread.regs * PCI: Fix pci_register_host_bridge() device_register() error handling drivers/pci/probe.c clk: ti: composite: fix memory leak dlm: remove BUG() before panic() pinctrl: rockchip: fix memleak in rockchip_dt_node_to_map scsi: mpt3sas: Fix double free warnings power: supply: smb347-charger: IRQSTAT_D is volatile power: supply: lp8788: Fix an error handling path in 'lp8788_charger_probe()' scsi: qla2xxx: Fix warning after FC target reset PCI/ASPM: Allow ASPM on links to PCIe-to-PCI/PCI-X Bridges PCI: rcar: Fix incorrect programming of OB windows * drivers: base: Fix NULL pointer exception in __platform_driver_probe() if a driver developer is foolish drivers/base/platform.c serial: amba-pl011: Make sure we initialize the port.lock spinlock i2c: pxa: fix i2c_pxa_scream_blue_murder() debug output PCI: v3-semi: Fix a memory leak in v3_pci_probe() error handling paths staging: sm750fb: add missing case while setting FB_VISUAL * usb: dwc3: gadget: Properly handle failed kick_transfer drivers/usb/dwc3/gadget.c thermal/drivers/ti-soc-thermal: Avoid dereferencing ERR_PTR slimbus: ngd: get drvdata from correct device tty: hvc: Fix data abort due to race in hvc_open s390/qdio: put thinint indicator after early error * ALSA: usb-audio: Fix racy list management in output queue sound/usb/endpoint.c * ALSA: usb-audio: Improve frames size computation sound/usb/card.h sound/usb/endpoint.c sound/usb/endpoint.h sound/usb/pcm.c staging: gasket: Fix mapping refcnt leak when register/store fails staging: gasket: Fix mapping refcnt leak when put attribute fails * firmware: qcom_scm: fix bogous abuse of dma-direct internals drivers/firmware/qcom_scm.c pinctrl: rza1: Fix wrong array assignment of rza1l_swio_entries scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing gpio: dwapb: Append MODULE_ALIAS for platform driver ARM: dts: sun8i-h2-plus-bananapi-m2-zero: Fix led polarity scsi: qedi: Do not flush offload work if ARP not resolved arm64: dts: mt8173: fix unit name warnings staging: greybus: fix a missing-check bug in gb_lights_light_config() x86/purgatory: Disable various profiling and sanitizing options apparmor: fix nnp subset test for unconfined scsi: ibmvscsi: Don't send host info in adapter info MAD after LPM scsi: sr: Fix sr_probe() missing deallocate of device minor ASoC: meson: add missing free_irq() in error path apparmor: check/put label on apparmor_sk_clone_security() apparmor: fix introspection of of task mode for unconfined tasks * mksysmap: Fix the mismatch of '.L' symbols in System.map scripts/mksysmap NTB: Fix the default port and peer numbers for legacy drivers NTB: ntb_pingpong: Choose doorbells based on port number yam: fix possible memory leak in yam_init_driver pwm: img: Call pm_runtime_put() in pm_runtime_get_sync() failed case powerpc/crashkernel: Take "mem=" option into account PCI: vmd: Filter resource type bits from shadow register nfsd: Fix svc_xprt refcnt leak when setup callback client failed powerpc/perf/hv-24x7: Fix inconsistent output values incase multiple hv-24x7 events run clk: clk-flexgen: fix clock-critical handling scsi: lpfc: Fix lpfc_nodelist leak when processing unsolicited event mfd: wm8994: Fix driver operation if loaded as modules gpio: dwapb: Call acpi_gpiochip_free_interrupts() on GPIO chip de-registration m68k/PCI: Fix a memory leak in an error handling path RDMA/mlx5: Add init2init as a modify command vfio/pci: fix memory leaks in alloc_perm_bits() ps3disk: use the default segment boundary PCI: aardvark: Don't blindly enable ASPM L0s and don't write to read-only register dm mpath: switch paths in dm_blk_ioctl() code path serial: 8250: Fix max baud limit in generic 8250 port usblp: poison URBs upon disconnect clk: samsung: Mark top ISP and CAM clocks on Exynos542x as critical i2c: pxa: clear all master action bits in i2c_pxa_stop_message() * f2fs: report delalloc reserve as non-free in statfs for project quota fs/f2fs/super.c iio: bmp280: fix compensation of humidity scsi: qla2xxx: Fix issue with adapter's stopping state * PCI: Allow pci_resize_resource() for devices on root bus drivers/pci/setup-res.c ALSA: isa/wavefront: prevent out of bounds write in ioctl ALSA: hda/realtek - Introduce polarity for micmute LED GPIO scsi: qedi: Check for buffer overflow in qedi_set_path() ARM: integrator: Add some Kconfig selections ASoC: davinci-mcasp: Fix dma_chan refcnt leak when getting dma type backlight: lp855x: Ensure regulators are disabled on probe failure clk: qcom: msm8916: Fix the address location of pll->config_reg remoteproc: Fix IDR initialisation in rproc_alloc() iio: pressure: bmp280: Tolerate IRQ before registering i2c: piix4: Detect secondary SMBus controller on AMD AM4 chipsets ASoC: tegra: tegra_wm8903: Support nvidia, headset property clk: sunxi: Fix incorrect usage of round_down() * power: supply: bq24257_charger: Replace depends on REGMAP_I2C with select drivers/power/supply/Kconfig * ANDROID: ext4: Optimize match for casefolded encrypted dirs fs/ext4/ext4.h fs/ext4/namei.c * ANDROID: ext4: Handle casefolding with encryption fs/ext4/dir.c fs/ext4/ext4.h fs/ext4/hash.c fs/ext4/ialloc.c fs/ext4/inline.c fs/ext4/namei.c fs/ext4/super.c Merge remote-tracking branch 'aosp/upstream-f2fs-stable-linux-4.19.y' into android-4.19-stable * ANDROID: extcon: Remove redundant EXPORT_SYMBOL_GPL include/linux/extcon.h ANDROID: update the ABI xml representation * ANDROID: GKI: cfg80211: add ABI changes for CONFIG_NL80211_TESTMODE include/net/cfg80211.h include/net/mac80211.h ANDROID: gki_defconfig: x86: Enable KERNEL_LZ4 * ANDROID: GKI: scripts: Makefile: update the lz4 command scripts/Makefile.lib * FROMLIST: f2fs: fix use-after-free when accessing bio->bi_crypt_context fs/f2fs/data.c Merge remote-tracking branch 'aosp/upstream-f2fs-stable-linux-4.19.y' into android-4.19-stable * UPSTREAM: fdt: Update CRC check for rng-seed drivers/of/fdt.c ANDROID: GKI: Update ABI for incremental fs ANDROID: GKI: Update whitelist and defconfig for incfs ANDROID: Use depmod from the hermetic toolchain Merge 4.19.129 into android-4.19-stable Linux 4.19.129 perf symbols: Fix debuginfo search for Ubuntu perf probe: Check address correctness by map instead of _etext perf probe: Fix to check blacklist address correctly perf probe: Do not show the skipped events w1: omap-hdq: cleanup to add missing newline for some dev_dbg mtd: rawnand: pasemi: Fix the probe error path mtd: rawnand: brcmnand: fix hamming oob layout * sunrpc: clean up properly in gss_mech_unregister() include/linux/sunrpc/gss_api.h include/linux/sunrpc/svcauth_gss.h sunrpc: svcauth_gss_register_pseudoflavor must reject duplicate registrations. * kbuild: force to build vmlinux if CONFIG_MODVERSION=y Makefile powerpc/64s: Save FSCR to init_task.thread.fscr after feature init powerpc/64s: Don't let DT CPU features set FSCR_DSCR drivers/macintosh: Fix memleak in windfarm_pm112 driver ARM: dts: s5pv210: Set keep-power-in-suspend for SDHCI1 on Aries ARM: dts: at91: sama5d2_ptc_ek: fix vbus pin ARM: dts: exynos: Fix GPIO polarity for thr GalaxyS3 CM36651 sensor's bus ARM: tegra: Correct PL310 Auxiliary Control Register initialization * kernel/cpu_pm: Fix uninitted local in cpu_pm kernel/cpu_pm.c alpha: fix memory barriers so that they conform to the specification dm crypt: avoid truncating the logical block size sparc64: fix misuses of access_process_vm() in genregs32_[sg]et() sparc32: fix register window handling in genregs32_[gs]et() gnss: sirf: fix error return code in sirf_probe() pinctrl: samsung: Save/restore eint_mask over suspend for EINT_TYPE GPIOs pinctrl: samsung: Correct setting of eint wakeup mask on s5pv210 power: vexpress: add suppress_bind_attrs to true igb: Report speed and duplex as unknown when device is runtime suspended media: ov5640: fix use of destroyed mutex b43_legacy: Fix connection problem with WPA3 b43: Fix connection problem with WPA3 b43legacy: Fix case where channel status is corrupted Bluetooth: hci_bcm: fix freeing not-requested IRQ media: go7007: fix a miss of snd_card_free carl9170: remove P2P_GO support e1000e: Relax condition to trigger reset for ME workaround e1000e: Disable TSO for buffer overrun workaround * PCI: Program MPS for RCiEP devices drivers/pci/probe.c ima: Call ima_calc_boot_aggregate() in ima_eventdigest_init() btrfs: fix wrong file range cleanup after an error filling dealloc range btrfs: fix error handling when submitting direct I/O bio * PCI: Generalize multi-function power dependency device links drivers/pci/quirks.c * PCI: Unify ACS quirk desired vs provided checking drivers/pci/quirks.c * PCI: Make ACS quirk implementations more uniform drivers/pci/quirks.c * serial: 8250_pci: Move Pericom IDs to pci_ids.h include/linux/pci_ids.h * PCI: Add Loongson vendor ID include/linux/pci_ids.h * x86/amd_nb: Add Family 19h PCI IDs include/linux/pci_ids.h * PCI: vmd: Add device id for VMD device 8086:9A0B include/linux/pci_ids.h * PCI: Add Amazon's Annapurna Labs vendor ID include/linux/pci_ids.h * PCI: Add Genesys Logic, Inc. Vendor ID include/linux/pci_ids.h * ALSA: lx6464es - add support for LX6464ESe pci express variant include/linux/pci_ids.h * x86/amd_nb: Add PCI device IDs for family 17h, model 70h include/linux/pci_ids.h * PCI: mediatek: Add controller support for MT7629 include/linux/pci_ids.h * PCI: Enable NVIDIA HDA controllers drivers/pci/quirks.c include/linux/pci_ids.h * PCI: Add NVIDIA GPU multi-function power dependencies drivers/pci/quirks.c * PCI: Add Synopsys endpoint EDDA Device ID include/linux/pci_ids.h misc: pci_endpoint_test: Add support to test PCI EP in AM654x misc: pci_endpoint_test: Add the layerscape EP device support * PCI: Move Rohm Vendor ID to generic list include/linux/pci_ids.h * PCI: Move Synopsys HAPS platform device IDs drivers/usb/dwc3/dwc3-haps.c include/linux/pci_ids.h * PCI: add USR vendor id and use it in r8169 and w6692 driver include/linux/pci_ids.h * x86/amd_nb: Add PCI device IDs for family 17h, model 30h include/linux/pci_ids.h * hwmon/k10temp, x86/amd_nb: Consolidate shared device IDs include/linux/pci_ids.h * pci:ipmi: Move IPMI PCI class id defines to pci_ids.h include/linux/pci_ids.h * PCI: Remove unused NFP32xx IDs include/linux/pci_ids.h * PCI: Add ACS quirk for Intel Root Complex Integrated Endpoints drivers/pci/quirks.c * PCI: Add ACS quirk for iProc PAXB drivers/pci/quirks.c * PCI: Avoid FLR for AMD Starship USB 3.0 drivers/pci/quirks.c * PCI: Avoid FLR for AMD Matisse HD Audio & USB 3.0 drivers/pci/quirks.c * PCI: Avoid Pericom USB controller OHCI/EHCI PME# defect drivers/pci/quirks.c * ext4: fix race between ext4_sync_parent() and rename() fs/ext4/fsync.c * ext4: fix error pointer dereference fs/ext4/xattr.c * ext4: fix EXT_MAX_EXTENT/INDEX to check for zeroed eh_max fs/ext4/ext4_extents.h evm: Fix possible memory leak in evm_calc_hmac_or_hash() ima: Directly assign the ima_default_policy pointer to ima_rules ima: Fix ima digest hash table key calculation * mm: initialize deferred pages with interrupts enabled include/linux/mmzone.h mm/page_alloc.c mm: thp: make the THP mapcount atomic against __split_huge_pmd_locked() btrfs: send: emit file capabilities after chown btrfs: include non-missing as a qualifier for the latest_bdev * string.h: fix incompatibility between FORTIFY_SOURCE and KASAN include/linux/string.h platform/x86: intel-vbtn: Only blacklist SW_TABLET_MODE on the 9 / "Laptop" chasis-type platform/x86: intel-hid: Add a quirk to support HP Spectre X2 (2015) platform/x86: hp-wmi: Convert simple_strtoul() to kstrtou32() * cpuidle: Fix three reference count leaks drivers/cpuidle/sysfs.c spi: dw: Return any value retrieved from the dma_transfer callback mmc: sdhci-esdhc-imx: fix the mask for tuning start point ixgbe: fix signed-integer-overflow warning mmc: via-sdmmc: Respect the cmd->busy_timeout from the mmc core staging: greybus: sdio: Respect the cmd->busy_timeout from the mmc core mmc: sdhci-msm: Set SDHCI_QUIRK_MULTIBLOCK_READ_ACMD12 quirk bcache: fix refcount underflow in bcache_device_free() MIPS: Fix IRQ tracing when call handle_fpe() and handle_msa_fpe() * PCI: Don't disable decoding when mmio_always_on is set drivers/pci/probe.c macvlan: Skip loopback packets in RX handler btrfs: qgroup: mark qgroup inconsistent if we're inherting snapshot to a new qgroup m68k: mac: Don't call via_flush_cache() on Mac IIfx x86/mm: Stop printing BRK addresses crypto: stm32/crc32 - fix multi-instance crypto: stm32/crc32 - fix run-time self test issue. crypto: stm32/crc32 - fix ext4 chksum BUG_ON() mips: Add udelay lpj numbers adjustment mips: MAAR: Use more precise address mask x86/boot: Correct relocation destination on old linkers mwifiex: Fix memory corruption in dump_station rtlwifi: Fix a double free in _rtl_usb_tx_urb_setup() net/mlx5e: IPoIB, Drop multicast packets that this interface sent * veth: Adjust hard_start offset on redirect XDP frames drivers/net/veth.c md: don't flush workqueue unconditionally in md_open mt76: avoid rx reorder buffer overflow net: qed: Reduce RX and TX default ring count when running inside kdump kernel wcn36xx: Fix error handling path in 'wcn36xx_probe()' ath10k: Remove msdu from idr when management pkt send fails nvme: refine the Qemu Identify CNS quirk platform/x86: intel-vbtn: Also handle tablet-mode switch on "Detachable" and "Portable" chassis-types platform/x86: intel-vbtn: Do not advertise switches to userspace if they are not there platform/x86: intel-vbtn: Split keymap into buttons and switches parts platform/x86: intel-vbtn: Use acpi_evaluate_integer() xfs: fix duplicate verification from xfs_qm_dqflush() xfs: reset buffer write failure state on successful completion kgdb: Fix spurious true from in_dbg_master() include/linux/kgdb.h mips: cm: Fix an invalid error code of INTVN__ERR MIPS: Truncate link address into 32bit for 32bit kernel Crypto/chcr: fix for ccm(aes) failed test xfs: clean up the error handling in xfs_swap_extents powerpc/spufs: fix copy_to_user while atomic net: allwinner: Fix use correct return type for ndo_start_xmit() media: cec: silence shift wrapping warning in __cec_s_log_addrs() net: lpc-enet: fix error return code in lpc_mii_init() drivers/perf: hisi: Fix typo in events attribute array sched/core: Fix illegal RCU from offline CPUs include/linux/sched/mm.h kernel/cpu.c kernel/sched/core.c * exit: Move preemption fixup up, move blocking operations down kernel/exit.c * lib/mpi: Fix 64-bit MIPS build with Clang lib/mpi/longlong.h net: bcmgenet: set Rx mode before starting netif selftests/bpf: Fix memory leak in extract_build_id() netfilter: nft_nat: return EOPNOTSUPP if type or flags are not supported * audit: fix a net reference leak in audit_list_rules_send() kernel/audit.c kernel/audit.h kernel/auditfilter.c Bluetooth: btbcm: Add 2 missing models to subver tables MIPS: Make sparse_init() using top-down allocation media: platform: fcp: Set appropriate DMA parameters media: dvb: return -EREMOTEIO on i2c transfer failure. * audit: fix a net reference leak in audit_send_reply() kernel/audit.c dt-bindings: display: mediatek: control dpi pins mode to avoid leakage e1000: Distribute switch variables for initialization tools api fs: Make xxx__mountpoint() more scalable brcmfmac: fix wrong location to get firmware feature * staging: android: ion: use vmap instead of vm_map_ram drivers/staging/android/ion/ion_heap.c net: vmxnet3: fix possible buffer overflow caused by bad DMA value in vmxnet3_get_rss() * x86/kvm/hyper-v: Explicitly align hcall param for kvm_hyperv_exit include/uapi/linux/kvm.h spi: dw: Fix Rx-only DMA transfers mmc: meson-mx-sdio: trigger a soft reset after a timeout or CRC error batman-adv: Revert "disable ethtool link speed detection when auto negotiation off" ARM: 8978/1: mm: make act_mm() respect THREAD_SIZE btrfs: do not ignore error from btrfs_next_leaf() when inserting checksums clocksource: dw_apb_timer_of: Fix missing clockevent timers clocksource: dw_apb_timer: Make CPU-affiliation being optional spi: dw: Enable interrupts in accordance with DMA xfer mode kgdb: Prevent infinite recursive entries to the debugger kgdb: Disable WARN_CONSOLE_UNLOCKED for all kgdb * Bluetooth: Add SCO fallback for invalid LMP parameters error net/bluetooth/hci_event.c MIPS: Loongson: Build ATI Radeon GPU driver as module ixgbe: Fix XDP redirect on archs with PAGE_SIZE above 4K * arm64: insn: Fix two bugs in encoding 32-bit logical immediates arch/arm64/kernel/insn.c spi: dw: Zero DMA Tx and Rx configurations on stack * arm64: cacheflush: Fix KGDB trap detection arch/arm64/include/asm/cacheflush.h efi/libstub/x86: Work around LLVM ELF quirk build regression net: ena: fix error returning in ena_com_get_hash_function() net: atlantic: make hw_get_regs optional spi: pxa2xx: Apply CS clk quirk to BXT objtool: Ignore empty alternatives media: si2157: Better check for running tuner in init * crypto: ccp -- don't "select" CONFIG_DMADEVICES drivers/crypto/ccp/Kconfig drm: bridge: adv7511: Extend list of audio sample rates ACPI: GED: use correct trigger type field in _Exx / _Lxx handling * KVM: arm64: Synchronize sysreg state on injecting an AArch32 exception arch/arm64/include/asm/kvm_host.h xen/pvcalls-back: test for errors when calling backend_connect() mmc: sdio: Fix potential NULL pointer error in mmc_sdio_init_card() ARM: dts: at91: sama5d2_ptc_ek: fix sdmmc0 node description mmc: sdhci-msm: Clear tuning done flag while hs400 tuning agp/intel: Reinforce the barrier after GTT updates * perf: Add cond_resched() to task_function_call() kernel/events/core.c * fat: don't allow to mount if the FAT length == 0 fs/fat/inode.c * mm/slub: fix a memory leak in sysfs_slab_add() mm/slub.c drm/vkms: Hold gem object while still in-use * Smack: slab-out-of-bounds in vsscanf security/smack/smackfs.c ath9k: Fix general protection fault in ath9k_hif_usb_rx_cb ath9x: Fix stack-out-of-bounds Write in ath9k_hif_usb_rx_cb ath9k: Fix use-after-free Write in ath9k_htc_rx_msg ath9k: Fix use-after-free Read in ath9k_wmi_ctrl_rx scsi: megaraid_sas: TM command refire leads to controller firmware crash * KVM: arm64: Make vcpu_cp1x() work on Big Endian hosts arch/arm64/include/asm/kvm_host.h KVM: MIPS: Fix VPN2_MASK definition for variable cpu_vmbits KVM: MIPS: Define KVM_ENTRYHI_ASID to cpu_asid_mask(&boot_cpu_data) KVM: nVMX: Consult only the "basic" exit reason when routing nested exit KVM: nSVM: leave ASID aside in copy_vmcb_control_area KVM: nSVM: fix condition for filtering async PF video: fbdev: w100fb: Fix a potential double free. * proc: Use new_inode not new_inode_pseudo fs/proc/inode.c fs/proc/self.c fs/proc/thread_self.c * ovl: initialize error in ovl_copy_xattr fs/overlayfs/copy_up.c selftests/net: in rxtimestamp getopt_long needs terminating null entry crypto: virtio: Fix dest length calculation in __virtio_crypto_skcipher_do_req() crypto: virtio: Fix src/dst scatterlist calculation in __virtio_crypto_skcipher_do_req() crypto: virtio: Fix use-after-free in virtio_crypto_skcipher_finalize_req() spi: pxa2xx: Fix runtime PM ref imbalance on probe error spi: pxa2xx: Balance runtime PM enable/disable on error spi: bcm2835: Fix controller unregister order spi: pxa2xx: Fix controller unregister order * spi: Fix controller unregister order drivers/spi/spi.c * spi: No need to assign dummy value in spi_unregister_controller() drivers/spi/spi.c x86/speculation: PR_SPEC_FORCE_DISABLE enforcement for indirect branches. x86/speculation: Avoid force-disabling IBPB based on STIBP and enhanced IBRS. x86/speculation: Add support for STIBP always-on preferred mode x86/speculation: Change misspelled STIPB to STIBP KVM: x86: only do L1TF workaround on affected processors KVM: x86/mmu: Consolidate "is MMIO SPTE" code kvm: x86: Fix L1TF mitigation for shadow MMU * KVM: x86: Fix APIC page invalidation race include/linux/kvm_host.h * x86/{mce,mm}: Unmap the entire page if the whole page is affected and poisoned include/linux/set_memory.h * ALSA: pcm: disallow linking stream to itself sound/core/pcm_native.c crypto: cavium/nitrox - Fix 'nitrox_get_first_device()' when ndevlist is fully iterated * PM: runtime: clk: Fix clk_pm_runtime_get() error path drivers/clk/clk.c spi: bcm-qspi: when tx/rx buffer is NULL set to 0 spi: bcm2835aux: Fix controller unregister order spi: dw: Fix controller unregister order nilfs2: fix null pointer dereference at nilfs_segctor_do_construct() * cgroup, blkcg: Prepare some symbols for module and !CONFIG_CGROUP usages fs/fs-writeback.c ACPI: PM: Avoid using power resources if there are none for D0 ACPI: GED: add support for _Exx / _Lxx handler methods ACPI: CPPC: Fix reference count leak in acpi_cppc_processor_probe() ACPI: sysfs: Fix reference count leak in acpi_sysfs_add_hotplug_profile() * ALSA: usb-audio: Add vendor, product and profile name for HP Thunderbolt Dock sound/usb/quirks-table.h * ALSA: usb-audio: Fix inconsistent card PM state after resume sound/usb/card.c sound/usb/usbaudio.h ALSA: hda/realtek - add a pintbl quirk for several Lenovo machines ALSA: es1688: Add the missed snd_card_free() efi/efivars: Add missing kobject_put() in sysfs entry creation error path x86/reboot/quirks: Add MacBook6,1 reboot quirk x86/speculation: Prevent rogue cross-process SSBD shutdown x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs x86_64: Fix jiffies ODR violation btrfs: tree-checker: Check level for leaves and nodes * aio: fix async fsync creds fs/aio.c * mm: add kvfree_sensitive() for freeing sensitive data objects include/linux/mm.h mm/util.c security/keys/internal.h security/keys/keyctl.c perf probe: Accept the instance number of kretprobe event x86/cpu/amd: Make erratum #1054 a legacy erratum RDMA/uverbs: Make the event_queue fds return POLLERR when disassociated ath9k_htc: Silence undersized packet warnings powerpc/xive: Clear the page tables for the ESB IO mapping drivers/net/ibmvnic: Update VNIC protocol version reporting Input: synaptics - add a second working PNP_ID for Lenovo T470s * sched/fair: Don't NUMA balance for kthreads kernel/sched/fair.c ARM: 8977/1: ptrace: Fix mask for thumb breakpoint hook Input: mms114 - fix handling of mms345l crypto: talitos - fix ECB and CBC algs ivsize btrfs: Detect unbalanced tree with empty leaf before crashing btree operations btrfs: merge btrfs_find_device and find_device * lib: Reduce user_access_begin() boundaries in strncpy_from_user() and strnlen_user() lib/strncpy_from_user.c lib/strnlen_user.c x86: uaccess: Inhibit speculation past access_ok() in user_access_begin() arch/openrisc: Fix issues with access_ok() Fix 'acccess_ok()' on alpha and SH * make 'user_access_begin()' do 'access_ok()' include/linux/uaccess.h kernel/compat.c kernel/exit.c lib/strncpy_from_user.c lib/strnlen_user.c selftests: bpf: fix use of undeclared RET_IF macro * tun: correct header offsets in napi frags mode drivers/net/tun.c vxlan: Avoid infinite loop when suppressing NS messages with invalid options * bridge: Avoid infinite loop when suppressing NS messages with invalid options net/bridge/br_arp_nd_proxy.c net_failover: fixed rollback in net_failover_open() * ipv6: fix IPV6_ADDRFORM operation logic net/ipv6/ipv6_sockglue.c * writeback: Drop I_DIRTY_TIME_EXPIRE fs/ext4/inode.c fs/fs-writeback.c include/linux/fs.h include/trace/events/writeback.h * writeback: Fix sync livelock due to b_dirty_time processing fs/fs-writeback.c include/trace/events/writeback.h * writeback: Avoid skipping inode writeback fs/fs-writeback.c include/linux/fs.h * writeback: Protect inode->i_io_list with inode->i_lock fs/fs-writeback.c * Revert "writeback: Avoid skipping inode writeback" fs/fs-writeback.c include/linux/fs.h ANDROID: gki_defconfig: increase vbus_draw to 500mA * fscrypt: remove stale definition include/linux/fscrypt.h * fs-verity: remove unnecessary extern keywords fs/verity/fsverity_private.h include/linux/fsverity.h * fs-verity: fix all kerneldoc warnings fs/verity/enable.c fs/verity/fsverity_private.h fs/verity/measure.c fs/verity/open.c fs/verity/signature.c fs/verity/verify.c include/linux/fsverity.h * fscrypt: add support for IV_INO_LBLK_32 policies fs/crypto/crypto.c fs/crypto/fscrypt_private.h fs/crypto/keyring.c fs/crypto/keysetup.c fs/crypto/policy.c include/uapi/linux/fscrypt.h * fscrypt: make test_dummy_encryption use v2 by default fs/crypto/policy.c * fscrypt: support test_dummy_encryption=v2 fs/crypto/keysetup.c fs/crypto/policy.c fs/ext4/ext4.h fs/ext4/super.c fs/ext4/sysfs.c fs/f2fs/f2fs.h fs/f2fs/super.c fs/f2fs/sysfs.c include/linux/fscrypt.h * fscrypt: add fscrypt_add_test_dummy_key() fs/crypto/fscrypt_private.h fs/crypto/keyring.c * linux/parser.h: add include guards include/linux/parser.h * fscrypt: remove unnecessary extern keywords fs/crypto/fscrypt_private.h include/linux/fscrypt.h * fscrypt: name all function parameters include/linux/fscrypt.h * fscrypt: fix all kerneldoc warnings fs/crypto/crypto.c fs/crypto/fname.c fs/crypto/fscrypt_private.h fs/crypto/hooks.c fs/crypto/keysetup.c fs/crypto/policy.c include/linux/fscrypt.h ANDROID: Update the ABI * ANDROID: GKI: power: power-supply: Add POWER_SUPPLY_PROP_CHARGER_STATUS property drivers/power/supply/power_supply_sysfs.c include/linux/power_supply.h * ANDROID: GKI: add dev to usb_gsi_request include/linux/usb/gadget.h * ANDROID: GKI: dma-buf: add dent_count to dma_buf include/linux/dma-buf.h Merge remote-tracking branch 'aosp/upstream-f2fs-stable-linux-4.19.y' into android-4.19-stable ANDROID: Update the ABI xml and whitelist ANDROID: GKI: update whitelist * ANDROID: extcon: Export symbol of `extcon_get_edev_name` drivers/extcon/extcon.c include/linux/extcon.h * ANDROID: kbuild: merge more sections with LTO scripts/module-lto.lds.S * UPSTREAM: timekeeping/vsyscall: Update VDSO data unconditionally arch/arm64/include/asm/vdso/vsyscall.h include/asm-generic/vdso/vsyscall.h kernel/time/vsyscall.c * ANDROID: GKI: Revert "genetlink: disallow subscribing to unknown mcast groups" net/netlink/genetlink.c * BACKPORT: usb: musb: Add support for MediaTek musb controller drivers/usb/musb/Kconfig UPSTREAM: usb: musb: Add musb_clearb/w() interface UPSTREAM: usb: musb: Add noirq type of dma create interface UPSTREAM: usb: musb: Add get/set toggle hooks UPSTREAM: dt-bindings: usb: musb: Add support for MediaTek musb controller Merge 4.19.128 into android-4.19-stable * FROMGIT: driver core: Remove unnecessary is_fwnode_dev variable in device_add() drivers/base/core.c * FROMGIT: driver core: Remove check in driver_deferred_probe_force_trigger() drivers/base/dd.c * FROMGIT: of: platform: Batch fwnode parsing when adding all top level devices drivers/of/platform.c * FROMGIT: BACKPORT: driver core: fw_devlink: Add support for batching fwnode parsing drivers/base/base.h drivers/base/core.c drivers/base/dd.c include/linux/fwnode.h * BACKPORT: driver core: Look for waiting consumers only for a fwnode's primary device drivers/base/core.c * BACKPORT: driver core: Add device links from fwnode only for the primary device drivers/base/core.c Linux 4.19.128 Revert "net/mlx5: Annotate mutex destroy for root ns" * uprobes: ensure that uprobe->offset and ->ref_ctr_offset are properly aligned kernel/events/uprobes.c x86/speculation: Add Ivy Bridge to affected list x86/speculation: Add SRBDS vulnerability and mitigation documentation * x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation drivers/base/cpu.c x86/cpu: Add 'table' argument to cpu_matches() * x86/cpu: Add a steppings field to struct x86_cpu_id include/linux/mod_devicetable.h * nvmem: qfprom: remove incorrect write support drivers/nvmem/qfprom.c CDC-ACM: heed quirk also in error handling staging: rtl8712: Fix IEEE80211_ADDBA_PARAM_BUF_SIZE_MASK tty: hvc_console, fix crashes on parallel open/close vt: keyboard: avoid signed integer overflow in k_ascii usb: musb: Fix runtime PM imbalance on error usb: musb: start session in resume for host port iio: vcnl4000: Fix i2c swapped word reading. USB: serial: option: add Telit LE910C1-EUX compositions USB: serial: usb_wwan: do not resubmit rx urb on fatal errors USB: serial: qcserial: add DW5816e QDL support * net: check untrusted gso_size at kernel entry include/linux/virtio_net.h vsock: fix timeout in vsock_accept() NFC: st21nfca: add missed kfree_skb() in an error path net: usb: qmi_wwan: add Telit LE910C1-EUX composition * l2tp: do not use inet_hash()/inet_unhash() net/l2tp/l2tp_ip.c net/l2tp/l2tp_ip6.c * l2tp: add sk_family checks to l2tp_validate_socket net/l2tp/l2tp_core.c * devinet: fix memleak in inetdev_init() net/ipv4/devinet.c * Revert "ANDROID: Remove default y on BRIDGE_IGMP_SNOOPING" net/bridge/Kconfig ANDROID: Update the ABI xml and whitelist ANDROID: GKI: update whitelist * ANDROID: arch: arm64: vdso: export the symbols for time() arch/arm64/include/asm/vdso/compat_gettimeofday.h arch/arm64/include/asm/vdso/gettimeofday.h arch/arm64/kernel/vdso/vdso.lds.S arch/arm64/kernel/vdso/vgettimeofday.c arch/arm64/kernel/vdso32/vdso.lds.S arch/arm64/kernel/vdso32/vgettimeofday.c * ANDROID: Incremental fs: Remove dependency on PKCS7_MESSAGE_PARSER fs/incfs/Kconfig fs/incfs/integrity.c ANDROID: dm-bow: Add block_size option * f2fs: attach IO flags to the missing cases fs/f2fs/data.c * f2fs: add node_io_flag for bio flags likewise data_io_flag fs/f2fs/data.c fs/f2fs/f2fs.h fs/f2fs/sysfs.c f2fs: remove unused parameter of f2fs_put_rpages_mapping() * f2fs: handle readonly filesystem in f2fs_ioc_shutdown() fs/f2fs/file.c * f2fs: avoid utf8_strncasecmp() with unstable name fs/f2fs/dir.c * f2fs: don't return vmalloc() memory from f2fs_kmalloc() fs/f2fs/checkpoint.c fs/f2fs/f2fs.h fs/f2fs/node.c fs/f2fs/super.c ANDROID: GKI: set CONFIG_BLK_DEV_LOOP_MIN_COUNT to 16 * ANDROID: Incremental fs: Cache successful hash calculations fs/incfs/data_mgmt.c fs/incfs/data_mgmt.h fs/incfs/vfs.c * ANDROID: Incremental fs: Fix four error-path bugs fs/incfs/data_mgmt.c fs/incfs/data_mgmt.h Merge 4.19.127 into android-4.19-stable Linux 4.19.127 net: smsc911x: Fix runtime PM imbalance on error net: ethernet: stmmac: Enable interface clocks on probe for IPQ806x net/ethernet/freescale: rework quiesce/activate for ucc_geth null_blk: return error for invalid zone size s390/mm: fix set_huge_pte_at() for empty ptes * drm/edid: Add Oculus Rift S to non-desktop list drivers/gpu/drm/drm_edid.c net: bmac: Fix read of MAC address from ROM x86/mmiotrace: Use cpumask_available() for cpumask_var_t variables i2c: altera: Fix race between xfer_msg and isr thread evm: Fix RCU list related warnings ARC: [plat-eznps]: Restrict to CONFIG_ISA_ARCOMPACT ARC: Fix ICCM & DCCM runtime size checks s390/ftrace: save traced function caller spi: dw: use "smp_mb()" to avoid sending spi data error powerpc/powernv: Avoid re-registration of imc debugfs directory scsi: hisi_sas: Check sas_port before using it drm/i915: fix port checks for MST support on gen >= 11 airo: Fix read overflows sending packets net: dsa: mt7530: set CPU port to fallback mode * scsi: ufs: Release clock if DMA map fails drivers/scsi/ufs/ufshcd.c * mmc: fix compilation of user API include/uapi/linux/mmc/ioctl.h kernel/relay.c: handle alloc_percpu returning NULL in relay_open p54usb: add AirVasT USB stick device-id HID: i2c-hid: add Schneider SCL142ALM to descriptor override * HID: sony: Fix for broken buttons on DS3 USB dongles drivers/hid/hid-sony.c * mm: Fix mremap not considering huge pmd devmap mm/mremap.c libnvdimm: Fix endian conversion issues * Revert "cgroup: Add memory barriers to plug cgroup_rstat_updated() race window" kernel/cgroup/rstat.c * f2fs: fix retry logic in f2fs_write_cache_pages() fs/f2fs/data.c ANDROID: Update ABI representation Merge 4.19.126 into android-4.19-stable Linux 4.19.126 * mm/vmalloc.c: don't dereference possible NULL pointer in __vunmap() mm/vmalloc.c * netfilter: nf_conntrack_pptp: fix compilation warning with W=1 build include/linux/netfilter/nf_conntrack_pptp.h net/netfilter/nf_conntrack_pptp.c * bonding: Fix reference count leak in bond_sysfs_slave_add. drivers/net/bonding/bond_sysfs_slave.c crypto: chelsio/chtls: properly set tp->lsndtime qlcnic: fix missing release in qlcnic_83xx_interrupt_test. xsk: Add overflow check for u64 division, stored into u32 bnxt_en: Fix accumulation of bp->net_stats_prev. esp6: get the right proto for transport mode in esp6_gso_encap * netfilter: nf_conntrack_pptp: prevent buffer overflows in debug code include/linux/netfilter/nf_conntrack_pptp.h net/ipv4/netfilter/nf_nat_pptp.c net/netfilter/nf_conntrack_pptp.c netfilter: nfnetlink_cthelper: unbreak userspace helper support netfilter: ipset: Fix subcounter update skip netfilter: nft_reject_bridge: enable reject with bridge vlan * ip_vti: receive ipip packet by calling ip_tunnel_rcv net/ipv4/ip_vti.c * vti4: eliminated some duplicate code. net/ipv4/ip_vti.c * xfrm: fix error in comment include/uapi/linux/xfrm.h * xfrm: fix a NULL-ptr deref in xfrm_local_error net/xfrm/xfrm_output.c * xfrm: fix a warning in xfrm_policy_insert_list net/xfrm/xfrm_policy.c * xfrm interface: fix oops when deleting a x-netns interface net/xfrm/xfrm_interface.c * xfrm: call xfrm_output_gso when inner_protocol is set in xfrm_output net/xfrm/xfrm_output.c * xfrm: allow to accept packets with ipv6 NEXTHDR_HOP in xfrm_input net/xfrm/xfrm_input.c copy_xstate_to_kernel(): don't leave parts of destination uninitialized x86/dma: Fix max PFN arithmetic overflow on 32 bit systems mac80211: mesh: fix discovery timer re-arming issue / crash * RDMA/core: Fix double destruction of uobject include/rdma/uverbs_std_types.h mmc: core: Fix recursive locking issue in CQE recovery path parisc: Fix kernel panic in mem_init() * iommu: Fix reference count leak in iommu_group_alloc. drivers/iommu/iommu.c * include/asm-generic/topology.h: guard cpumask_of_node() macro argument include/asm-generic/topology.h * fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() fs/binfmt_elf.c * mm: remove VM_BUG_ON(PageSlab()) from page_mapcount() include/linux/mm.h IB/ipoib: Fix double free of skb in case of multicast traffic in CM mode libceph: ignore pool overlay and cache logic on redirects ALSA: hda/realtek - Add new codec supported for ALC287 * ALSA: usb-audio: Quirks for Gigabyte TRX40 Aorus Master onboard audio sound/usb/mixer_maps.c sound/usb/quirks-table.h * exec: Always set cap_ambient in cap_bprm_set_creds security/commoncap.c * ALSA: usb-audio: mixer: volume quirk for ESS Technology Asus USB DAC sound/usb/mixer.c ALSA: hda/realtek - Add a model for Thinkpad T570 without DAC workaround * ALSA: hwdep: fix a left shifting 1 by 31 UB bug sound/core/hwdep.c RDMA/pvrdma: Fix missing pci disable in pvrdma_pci_probe() mmc: block: Fix use-after-free issue for rpmb ARM: dts: bcm: HR2: Fix PPI interrupt types ARM: dts: bcm2835-rpi-zero-w: Fix led polarity ARM: dts/imx6q-bx50v3: Set display interface clock parents IB/qib: Call kobject_put() when kobject_init_and_add() fails gpio: exar: Fix bad handling for ida_simple_get error path ARM: uaccess: fix DACR mismatch with nested exceptions ARM: uaccess: integrate uaccess_save and uaccess_restore ARM: uaccess: consolidate uaccess asm to asm/uaccess-asm.h ARM: 8843/1: use unified assembler in headers ARM: 8970/1: decompressor: increase tag size Input: synaptics-rmi4 - fix error return code in rmi_driver_probe() Input: synaptics-rmi4 - really fix attn_data use-after-free Input: i8042 - add ThinkPad S230u to i8042 reset list Input: dlink-dir685-touchkeys - fix a typo in driver name * Input: xpad - add custom init packet for Xbox One S controllers drivers/input/joystick/xpad.c * Input: evdev - call input_flush_device() on release(), not flush() drivers/input/evdev.c Input: usbtouchscreen - add support for BonXeon TP samples: bpf: Fix build error cifs: Fix null pointer check in cifs_read riscv: stacktrace: Fix undefined reference to `walk_stackframe' IB/i40iw: Remove bogus call to netdev_master_upper_dev_get() * net: freescale: select CONFIG_FIXED_PHY where needed drivers/net/ethernet/freescale/Kconfig drivers/net/ethernet/freescale/dpaa/Kconfig usb: gadget: legacy: fix redundant initialization warnings usb: dwc3: pci: Enable extcon driver for Intel Merrifield cachefiles: Fix race between read_waiter and read_copier involving op->to_do gfs2: move privileged user check to gfs2_quota_lock_check net: microchip: encx24j600: add missed kthread_stop * ALSA: usb-audio: add mapping for ASRock TRX40 Creator sound/usb/mixer_maps.c sound/usb/quirks-table.h gpio: tegra: mask GPIO IRQs during IRQ shutdown ARM: dts: rockchip: fix pinctrl sub nodename for spi in rk322x.dtsi ARM: dts: rockchip: swap clock-names of gpu nodes arm64: dts: rockchip: swap interrupts interrupt-names rk3399 gpu node arm64: dts: rockchip: fix status for &gmac2phy in rk3328-evb.dts ARM: dts: rockchip: fix phy nodename for rk3228-evb mlxsw: spectrum: Fix use-after-free of split/unsplit/type_set in case reload fails net/mlx4_core: fix a memory leak bug. net: sun: fix missing release regions in cas_init_one(). net/mlx5: Annotate mutex destroy for root ns net/mlx5e: Update netdev txq on completions during closure * sctp: Start shutdown on association restart if in SHUTDOWN-SENT state and socket is closed net/sctp/sm_statefuns.c * sctp: Don't add the shutdown timer if its already been added net/sctp/sm_sideeffect.c * r8152: support additional Microsoft Surface Ethernet Adapter variant drivers/net/usb/cdc_ether.c drivers/net/usb/r8152.c * net sched: fix reporting the first-time use timestamp include/net/act_api.h * net: revert "net: get rid of an signed integer overflow in ip_idents_reserve()" net/ipv4/route.c * net: qrtr: Fix passing invalid reference to qrtr_local_enqueue() net/qrtr/qrtr.c * net/mlx5: Add command entry handling completion include/linux/mlx5/driver.h net: ipip: fix wrong address family in init error path * net: inet_csk: Fix so_reuseport bind-address cache in tb->fast* net/ipv4/inet_connection_sock.c * __netif_receive_skb_core: pass skb by reference net/core/dev.c net: dsa: mt7530: fix roaming from DSA user ports dpaa_eth: fix usage as DSA master, try 3 ax25: fix setsockopt(SO_BINDTODEVICE) * ANDROID: modules: fix lockprove warning kernel/module.c FROMGIT: USB: dummy-hcd: use configurable endpoint naming scheme UPSTREAM: usb: raw-gadget: fix null-ptr-deref when reenabling endpoints UPSTREAM: usb: raw-gadget: documentation updates * UPSTREAM: usb: raw-gadget: support stalling/halting/wedging endpoints include/uapi/linux/usb/raw_gadget.h * UPSTREAM: usb: raw-gadget: fix gadget endpoint selection include/uapi/linux/usb/raw_gadget.h * UPSTREAM: usb: raw-gadget: improve uapi headers comments include/uapi/linux/usb/raw_gadget.h UPSTREAM: usb: raw-gadget: fix return value of ep read ioctls UPSTREAM: usb: raw-gadget: fix raw_event_queue_fetch locking UPSTREAM: usb: raw-gadget: Fix copy_to/from_user() checks * f2fs: fix wrong discard space fs/f2fs/segment.c f2fs: compress: don't compress any datas after cp stop * f2fs: remove unneeded return value of __insert_discard_tree() fs/f2fs/segment.c * f2fs: fix wrong value of tracepoint parameter fs/f2fs/namei.c * f2fs: protect new segment allocation in expand_inode_data fs/f2fs/file.c * f2fs: code cleanup by removing ifdef macro surrounding fs/f2fs/file.c fs/f2fs/namei.c fs/f2fs/xattr.h * writeback: Avoid skipping inode writeback fs/fs-writeback.c include/linux/fs.h ANDROID: GKI: Update the ABI ANDROID: GKI: update whitelist * ANDROID: GKI: support mm_event for FS/IO/UFS path include/linux/blk_types.h include/linux/mm_event.h mm/mm_event.c * ANDROID: net: bpf: permit redirect from ingress L3 to egress L2 devices at near max mtu net/core/filter.c * FROMGIT: driver core: Update device link status correctly for SYNC_STATE_ONLY links drivers/base/core.c * UPSTREAM: driver core: Fix handling of SYNC_STATE_ONLY + STATELESS device links drivers/base/core.c * BACKPORT: driver core: Fix SYNC_STATE_ONLY device link implementation drivers/base/core.c ANDROID: Bulk update the ABI xml and qcom whitelist * Revert "ANDROID: Incremental fs: Avoid continually recalculating hashes" fs/incfs/data_mgmt.c * f2fs: avoid inifinite loop to wait for flushing node pages at cp_error fs/f2fs/node.c f2fs: compress: fix zstd data corruption * f2fs: add compressed/gc data read IO stat fs/f2fs/data.c fs/f2fs/f2fs.h fs/f2fs/gc.c fs/f2fs/sysfs.c include/trace/events/f2fs.h * f2fs: fix potential use-after-free issue fs/f2fs/data.c * f2fs: compress: don't handle non-compressed data in workqueue fs/f2fs/data.c * f2fs: remove redundant assignment to variable err fs/f2fs/namei.c * f2fs: refactor resize_fs to avoid meta updates in progress fs/f2fs/checkpoint.c fs/f2fs/f2fs.h fs/f2fs/file.c fs/f2fs/gc.c fs/f2fs/super.c include/trace/events/f2fs.h * f2fs: use round_up to enhance calculation fs/f2fs/file.c * f2fs: introduce F2FS_IOC_RESERVE_COMPRESS_BLOCKS fs/f2fs/f2fs.h fs/f2fs/file.c * f2fs: Avoid double lock for cp_rwsem during checkpoint fs/f2fs/checkpoint.c fs/f2fs/f2fs.h fs/f2fs/node.c * f2fs: report delalloc reserve as non-free in statfs for project quota fs/f2fs/super.c * f2fs: Fix wrong stub helper update_sit_info fs/f2fs/f2fs.h f2fs: compress: let lz4 compressor handle output buffer budget properly * f2fs: remove blk_plugging in block_operations fs/f2fs/checkpoint.c * f2fs: introduce F2FS_IOC_RELEASE_COMPRESS_BLOCKS fs/f2fs/f2fs.h fs/f2fs/file.c * f2fs: shrink spinlock coverage fs/f2fs/node.c fs/f2fs/node.h * f2fs: correctly fix the parent inode number during fsync() fs/f2fs/file.c * f2fs: introduce mempool for {,de}compress intermediate page allocation fs/f2fs/f2fs.h fs/f2fs/super.c * f2fs: introduce f2fs_bmap_compress() fs/f2fs/data.c * f2fs: support fiemap on compressed inode fs/f2fs/data.c * f2fs: support partial truncation on compressed inode fs/f2fs/f2fs.h fs/f2fs/file.c * f2fs: remove redundant compress inode check fs/f2fs/f2fs.h * f2fs: use strcmp() in parse_options() fs/f2fs/super.c * f2fs: Use the correct style for SPDX License Identifier fs/f2fs/acl.h fs/f2fs/f2fs.h fs/f2fs/gc.h fs/f2fs/node.h fs/f2fs/segment.h fs/f2fs/trace.h fs/f2fs/xattr.h Change-Id: I2a678a32a4d72309fd00887a7ac56241293304a9 Signed-off-by: lucaswei <lucaswei@google.com>	2020-10-27 15:33:35 +08:00
Srinivasarao P	0cc34620e8	Merge android-4.19-stable.136 (`204dd19`) into msm-4.19 * refs/heads/tmp-204dd19: UPSTREAM: driver core: Avoid deferred probe due to fw_devlink_pause/resume() UPSTREAM: driver core: Rename dev_links_info.defer_sync to defer_hook UPSTREAM: driver core: Don't do deferred probe in parallel with kernel_init thread Restore sdcardfs feature Revert rpmh and usb changes Linux 4.19.136 regmap: debugfs: check count when read regmap file rtnetlink: Fix memory(net_device) leak when ->newlink fails udp: Improve load balancing for SO_REUSEPORT. udp: Copy has_conns in reuseport_grow(). sctp: shrink stream outq when fails to do addstream reconf sctp: shrink stream outq only when new outcnt < old outcnt AX.25: Prevent integer overflows in connect and sendmsg tcp: allow at most one TLP probe per flight rxrpc: Fix sendmsg() returning EPIPE due to recvmsg() returning ENODATA qrtr: orphan socket in qrtr_release() net: udp: Fix wrong clean up for IS_UDPLITE macro net-sysfs: add a newline when printing 'tx_timeout' by sysfs ip6_gre: fix null-ptr-deref in ip6gre_init_net() drivers/net/wan/x25_asy: Fix to make it work dev: Defer free of skbs in flush_backlog AX.25: Prevent out-of-bounds read in ax25_sendmsg() AX.25: Fix out-of-bounds read in ax25_connect() Linux 4.19.135 ath9k: Fix regression with Atheros 9271 ath9k: Fix general protection fault in ath9k_hif_usb_rx_cb dm integrity: fix integrity recalculation that is improperly skipped ASoC: qcom: Drop HAS_DMA dependency to fix link failure ASoC: rt5670: Add new gpio1_is_ext_spk_en quirk and enable it on the Lenovo Miix 2 10 x86, vmlinux.lds: Page-align end of ..page_aligned sections parisc: Add atomic64_set_release() define to avoid CPU soft lockups drm/amd/powerplay: fix a crash when overclocking Vega M drm/amdgpu: Fix NULL dereference in dpm sysfs handlers io-mapping: indicate mapping failure mm: memcg/slab: fix memory leak at non-root kmem_cache destroy mm: memcg/slab: synchronize access to kmem_cache dying flag using a spinlock mm/memcg: fix refcount error while moving and swapping Makefile: Fix GCC_TOOLCHAIN_DIR prefix for Clang cross compilation vt: Reject zero-sized screen buffer size. fbdev: Detect integer underflow at "struct fbcon_ops"->clear_margins. serial: 8250_mtk: Fix high-speed baud rates clamping serial: 8250: fix null-ptr-deref in serial8250_start_tx() staging: comedi: addi_apci_1564: check INSN_CONFIG_DIGITAL_TRIG shift staging: comedi: addi_apci_1500: check INSN_CONFIG_DIGITAL_TRIG shift staging: comedi: ni_6527: fix INSN_CONFIG_DIGITAL_TRIG support staging: comedi: addi_apci_1032: check INSN_CONFIG_DIGITAL_TRIG shift staging: wlan-ng: properly check endpoint types Revert "cifs: Fix the target file was deleted when rename failed." usb: xhci: Fix ASM2142/ASM3142 DMA addressing usb: xhci-mtk: fix the failure of bandwidth allocation binder: Don't use mmput() from shrinker function. RISC-V: Upgrade smp_mb__after_spinlock() to iorw,iorw x86: math-emu: Fix up 'cmp' insn for clang ias arm64: Use test_tsk_thread_flag() for checking TIF_SINGLESTEP hwmon: (scmi) Fix potential buffer overflow in scmi_hwmon_probe() hwmon: (adm1275) Make sure we are reading enough data for different chips usb: gadget: udc: gr_udc: fix memleak on error handling path in gr_ep_init() Input: synaptics - enable InterTouch for ThinkPad X1E 1st gen dmaengine: ioat setting ioat timeout as module parameter hwmon: (aspeed-pwm-tacho) Avoid possible buffer overflow regmap: dev_get_regmap_match(): fix string comparison spi: mediatek: use correct SPI_CFG2_REG MACRO Input: add `SW_MACHINE_COVER` dmaengine: tegra210-adma: Fix runtime PM imbalance on error HID: apple: Disable Fn-key key-re-mapping on clone keyboards HID: steam: fixes race in handling device list. HID: alps: support devices with report id 2 HID: i2c-hid: add Mediacom FlexBook edge13 to descriptor override scripts/gdb: fix lx-symbols 'gdb.error' while loading modules scripts/decode_stacktrace: strip basepath from all paths serial: exar: Fix GPIO configuration for Sealevel cards based on XR17V35X bonding: check return value of register_netdevice() in bond_newlink() i2c: rcar: always clear ICSAR to avoid side effects net: ethernet: ave: Fix error returns in ave_init ipvs: fix the connection sync failed in some cases qed: suppress "don't support RoCE & iWARP" flooding on HW init mlxsw: destroy workqueue when trap_register in mlxsw_emad_init bonding: check error value of register_netdevice() immediately net: smc91x: Fix possible memory leak in smc_drv_probe() drm: sun4i: hdmi: Fix inverted HPD result ieee802154: fix one possible memleak in adf7242_probe net: dp83640: fix SIOCSHWTSTAMP to update the struct with actual configuration ax88172a: fix ax88172a_unbind() failures hippi: Fix a size used in a 'pci_free_consistent()' in an error handling path fpga: dfl: fix bug in port reset handshake bnxt_en: Fix race when modifying pause settings. btrfs: fix page leaks after failure to lock page for delalloc btrfs: fix mount failure caused by race with umount btrfs: fix double free on ulist after backref resolution failure ASoC: rt5670: Correct RT5670_LDO_SEL_MASK ALSA: info: Drop WARN_ON() from buffer NULL sanity check uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression IB/umem: fix reference count leak in ib_umem_odp_get() tipc: clean up skb list lock handling on send path spi: spi-fsl-dspi: Exit the ISR with IRQ_NONE when it's not ours SUNRPC reverting d03727b248d0 ("NFSv4 fix CLOSE not waiting for direct IO compeletion") irqdomain/treewide: Keep firmware node unconditionally allocated fuse: fix weird page warning drivers/firmware/psci: Fix memory leakage in alloc_init_cpu_groups() drm/nouveau/i2c/g94-: increase NV_PMGR_DP_AUXCTL_TRANSACTREQ timeout net: sky2: initialize return of gm_phy_read drivers/net/wan/lapbether: Fixed the value of hard_header_len xtensa: update pos in cpuinfo_op.next xtensa: fix __sync_fetch_and_{and,or}_4 declarations scsi: scsi_transport_spi: Fix function pointer check mac80211: allow rx of mesh eapol frames with default rx key pinctrl: amd: fix npins for uart0 in kerncz_groups gpio: arizona: put pm_runtime in case of failure gpio: arizona: handle pm_runtime_get_sync failure case soc: qcom: rpmh: Dirt can only make you dirtier, not cleaner ANDROID: build: update ABI definitions ANDROID: update the kernel release format for GKI ANDROID: Incremental fs: magic number compatible 32-bit ANDROID: kbuild: don't merge ...compoundliteral in modules ANDROID: GKI: preserve ABI for struct sock_cgroup_data Revert "genetlink: remove genl_bind" Revert "arm64/alternatives: use subsections for replacement sequences" Linux 4.19.134 spi: sprd: switch the sequence of setting WDG_LOAD_LOW and _HIGH rxrpc: Fix trace string libceph: don't omit recovery_deletes in target_copy() printk: queue wake_up_klogd irq_work only if per-CPU areas are ready genirq/affinity: Handle affinity setting on inactive interrupts correctly sched/fair: handle case of task_h_load() returning 0 sched: Fix unreliable rseq cpu_id for new tasks arm64: compat: Ensure upper 32 bits of x0 are zero on syscall return arm64: ptrace: Consistently use pseudo-singlestep exceptions arm64: ptrace: Override SPSR.SS when single-stepping is enabled thermal/drivers/cpufreq_cooling: Fix wrong frequency converted from power misc: atmel-ssc: lock with mutex instead of spinlock dmaengine: fsl-edma: Fix NULL pointer exception in fsl_edma_tx_handler intel_th: Fix a NULL dereference when hub driver is not loaded intel_th: pci: Add Emmitsburg PCH support intel_th: pci: Add Tiger Lake PCH-H support intel_th: pci: Add Jasper Lake CPU support powerpc/book3s64/pkeys: Fix pkey_access_permitted() for execute disable pkey hwmon: (emc2103) fix unable to change fan pwm1_enable attribute riscv: use 16KB kernel stack on 64-bit MIPS: Fix build for LTS kernel caused by backporting lpj adjustment timer: Fix wheel index calculation on last level timer: Prevent base->clk from moving backward uio_pdrv_genirq: fix use without device tree and no interrupt Input: i8042 - add Lenovo XiaoXin Air 12 to i8042 nomux list mei: bus: don't clean driver pointer Revert "zram: convert remaining CLASS_ATTR() to CLASS_ATTR_RO()" fuse: Fix parameter for FS_IOC_{GET,SET}FLAGS ovl: fix unneeded call to ovl_change_flags() ovl: relax WARN_ON() when decoding lower directory file handle ovl: inode reference leak in ovl_is_inuse true case. serial: mxs-auart: add missed iounmap() in probe failure and remove virtio: virtio_console: add missing MODULE_DEVICE_TABLE() for rproc serial virt: vbox: Fix guest capabilities mask check virt: vbox: Fix VBGL_IOCTL_VMMDEV_REQUEST_BIG and _LOG req numbers to match upstream USB: serial: option: add Quectel EG95 LTE modem USB: serial: option: add GosunCn GM500 series USB: serial: ch341: add new Product ID for CH340 USB: serial: cypress_m8: enable Simply Automated UPB PIM USB: serial: iuu_phoenix: fix memory corruption usb: gadget: function: fix missing spinlock in f_uac1_legacy usb: chipidea: core: add wakeup support for extcon usb: dwc2: Fix shutdown callback in platform USB: c67x00: fix use after free in c67x00_giveback_urb ALSA: hda/realtek - Enable Speaker for ASUS UX533 and UX534 ALSA: hda/realtek - change to suitable link model for ASUS platform ALSA: usb-audio: Fix race against the error recovery URB submission ALSA: line6: Sync the pending work cancel at disconnection ALSA: line6: Perform sanity check for each URB creation HID: quirks: Ignore Simply Automated UPB PIM HID: quirks: Always poll Obins Anne Pro 2 keyboard HID: magicmouse: do not set up autorepeat slimbus: core: Fix mismatch in of_node_get/put mtd: rawnand: oxnas: Release all devices in the _remove() path mtd: rawnand: oxnas: Unregister all devices on error mtd: rawnand: oxnas: Keep track of registered devices mtd: rawnand: brcmnand: fix CS0 layout mtd: rawnand: timings: Fix default tR_max and tCCS_min timings mtd: rawnand: marvell: Fix probe error path mtd: rawnand: marvell: Use nand_cleanup() when the device is not yet registered soc: qcom: rpmh-rsc: Allow using free WAKE TCS for active request soc: qcom: rpmh-rsc: Clear active mode configuration for wake TCS soc: qcom: rpmh: Invalidate SLEEP and WAKE TCSes before flushing new data soc: qcom: rpmh: Update dirty flag only when data changes perf stat: Zero all the 'ena' and 'run' array slot stats for interval mode apparmor: ensure that dfa state tables have entries copy_xstate_to_kernel: Fix typo which caused GDB regression regmap: debugfs: Don't sleep while atomic for fast_io regmaps ARM: dts: socfpga: Align L2 cache-controller nodename with dtschema Revert "thermal: mediatek: fix register index error" staging: comedi: verify array index is correct before using it usb: gadget: udc: atmel: fix uninitialized read in debug printk spi: spi-sun6i: sun6i_spi_transfer_one(): fix setting of clock rate arm64: dts: meson: add missing gxl rng clock phy: sun4i-usb: fix dereference of pointer phy0 before it is null checked iio:health:afe4404 Fix timestamp alignment and prevent data leak. ALSA: usb-audio: Add registration quirk for Kingston HyperX Cloud Flight S ACPI: video: Use native backlight on Acer TravelMate 5735Z Input: mms114 - add extra compatible for mms345l ALSA: usb-audio: Add registration quirk for Kingston HyperX Cloud Alpha S ACPI: video: Use native backlight on Acer Aspire 5783z ALSA: usb-audio: Rewrite registration quirk handling mmc: sdhci: do not enable card detect interrupt for gpio cd type doc: dt: bindings: usb: dwc3: Update entries for disabling SS instances in park mode ALSA: usb-audio: Create a registration quirk for Kingston HyperX Amp (0951:16d8) scsi: sr: remove references to BLK_DEV_SR_VENDOR, leave it enabled ARM: at91: pm: add quirk for sam9x60's ulp1 HID: quirks: Remove ITE 8595 entry from hid_have_special_driver net: sfp: add some quirks for GPON modules net: sfp: add support for module quirks Revert "usb/ehci-platform: Set PM runtime as active on resume" Revert "usb/xhci-plat: Set PM runtime as active on resume" Revert "usb/ohci-platform: Fix a warning when hibernating" of: of_mdio: Correct loop scanning logic net: dsa: bcm_sf2: Fix node reference count spi: spi-fsl-dspi: Fix lockup if device is shutdown during SPI transfer spi: fix initial SPI_SR value in spi-fsl-dspi iio:health:afe4403 Fix timestamp alignment and prevent data leak. iio:pressure:ms5611 Fix buffer element alignment iio:humidity:hts221 Fix alignment and data leak issues iio: pressure: zpa2326: handle pm_runtime_get_sync failure iio: mma8452: Add missed iio_device_unregister() call in mma8452_probe() iio: magnetometer: ak8974: Fix runtime PM imbalance on error iio:humidity:hdc100x Fix alignment and data leak issues iio:magnetometer:ak8974: Fix alignment and data leak issues arm64/alternatives: don't patch up internal branches i2c: eg20t: Load module automatically if ID matches gfs2: read-only mounts should grab the sd_freeze_gl glock tpm_tis: extra chip->ops check on error path in tpm_tis_core_init arm64/alternatives: use subsections for replacement sequences m68k: mm: fix node memblock init m68k: nommu: register start of the memory with memblock drm/exynos: fix ref count leak in mic_pre_enable drm/msm: fix potential memleak in error branch vlan: consolidate VLAN parsing code and limit max parsing depth sched: consistently handle layer3 header accesses in the presence of VLANs cgroup: Fix sock_cgroup_data on big-endian. cgroup: fix cgroup_sk_alloc() for sk_clone_lock() tcp: md5: allow changing MD5 keys in all socket states tcp: md5: refine tcp_md5_do_add()/tcp_md5_hash_key() barriers tcp: md5: do not send silly options in SYNCOOKIES tcp: md5: add missing memory barriers in tcp_md5_do_add()/tcp_md5_hash_key() tcp: make sure listeners don't initialize congestion-control state tcp: fix SO_RCVLOWAT possible hangs under high mem pressure net: usb: qmi_wwan: add support for Quectel EG95 LTE modem net_sched: fix a memory leak in atm_tc_init() net: Added pointer check for dst->ops->neigh_lookup in dst_neigh_lookup_skb llc: make sure applications use ARPHRD_ETHER l2tp: remove skb_dst_set() from l2tp_xmit_skb() ipv4: fill fl4_icmp_{type,code} in ping_v4_sendmsg genetlink: remove genl_bind net: rmnet: fix lower interface leak perf: Make perf able to build with latest libbfd UPSTREAM: media: v4l2-ctrl: Add H264 profile and levels UPSTREAM: media: v4l2-ctrl: Add control for h.264 chroma qp offset ANDROID: GKI: ASoC: compress: revert some code to avoid race condition ANDROID: GKI: Update the ABI xml representation. ANDROID: GKI: kernel: tick-sched: Add an API for wakeup callbacks ANDROID: ASoC: Compress: Check and set pcm_new driver op Revert "ANDROID: GKI: arm64: gki_defconfig: Disable CONFIG_ARM64_TAGGED_ADDR_ABI" ANDROID: arm64: configs: enabe CONFIG_TMPFS Revert "ALSA: compress: fix partial_drain completion state" ANDROID: GKI: enable CONFIG_EXT4_FS_POSIX_ACL. ANDROID: GKI: set CONFIG_STATIC_USERMODEHELPER_PATH Linux 4.19.133 s390/mm: fix huge pte soft dirty copying ARC: elf: use right ELF_ARCH ARC: entry: fix potential EFA clobber when TIF_SYSCALL_TRACE dm: use noio when sending kobject event drm/radeon: fix double free btrfs: fix fatal extent_buffer readahead vs releasepage race Revert "ath9k: Fix general protection fault in ath9k_hif_usb_rx_cb" bpf: Check correct cred for CAP_SYSLOG in bpf_dump_raw_ok() kprobes: Do not expose probe addresses to non-CAP_SYSLOG module: Do not expose section addresses to non-CAP_SYSLOG module: Refactor section attr into bin attribute kernel: module: Use struct_size() helper kallsyms: Refactor kallsyms_show_value() to take cred KVM: x86: Mark CR4.TSD as being possibly owned by the guest KVM: x86: Inject #GP if guest attempts to toggle CR4.LA57 in 64-bit mode KVM: x86: bit 8 of non-leaf PDPEs is not reserved KVM: arm64: Stop clobbering x0 for HVC_SOFT_RESTART KVM: arm64: Fix definition of PAGE_HYP_DEVICE ALSA: usb-audio: add quirk for MacroSilicon MS2109 ALSA: hda - let hs_mic be picked ahead of hp_mic ALSA: opl3: fix infoleak in opl3 mlxsw: spectrum_router: Remove inappropriate usage of WARN_ON() net: macb: mark device wake capable when "magic-packet" property present bnxt_en: fix NULL dereference in case SR-IOV configuration fails cxgb4: fix all-mask IP address comparison nbd: Fix memory leak in nbd_add_socket arm64: kgdb: Fix single-step exception handling oops ALSA: compress: fix partial_drain completion state net: hns3: fix use-after-free when doing self test smsc95xx: avoid memory leak in smsc95xx_bind smsc95xx: check return value of smsc95xx_reset net: cxgb4: fix return error value in t4_prep_fw drm/mediatek: Check plane visibility in atomic_update net: qrtr: Fix an out of bounds read qrtr_endpoint_post() x86/entry: Increase entry_stack size to a full page nvme-rdma: assign completion vector correctly block: release bip in a right way in error path usb: dwc3: pci: Fix reference count leak in dwc3_pci_resume_work scsi: mptscsih: Fix read sense data size ARM: imx6: add missing put_device() call in imx6q_suspend_init() cifs: update ctime and mtime during truncate s390/kasan: fix early pgm check handler execution drm: panel-orientation-quirks: Use generic orientation-data for Acer S1003 drm: panel-orientation-quirks: Add quirk for Asus T101HA panel i40e: protect ring accesses with READ- and WRITE_ONCE ixgbe: protect ring accesses with READ- and WRITE_ONCE spi: spidev: fix a potential use-after-free in spidev_release() spi: spidev: fix a race between spidev_release and spidev_remove gpu: host1x: Detach driver on unregister drm/tegra: hub: Do not enable orphaned window group ARM: dts: omap4-droid4: Fix spi configuration and increase rate regmap: fix alignment issue spi: spi-fsl-dspi: Fix external abort on interrupt in resume or exit paths spi: spi-fsl-dspi: use IRQF_SHARED mode to request IRQ spi: spi-fsl-dspi: Fix lockup if device is removed during SPI transfer spi: spi-fsl-dspi: Adding shutdown hook KVM: s390: reduce number of IO pins to 1 ANDROID: GKI: update abi based on padding fields being added ANDROID: GKI: USB: Gadget: add Android ABI padding to struct usb_gadget ANDROID: GKI: sound/usb/card.h: add Android ABI padding to struct snd_usb_endpoint ANDROID: fscrypt: fix DUN contiguity with inline encryption + IV_INO_LBLK_32 policies ANDROID: f2fs: add back compress inode check Linux 4.19.132 efi: Make it possible to disable efivar_ssdt entirely dm zoned: assign max_io_len correctly irqchip/gic: Atomically update affinity MIPS: Add missing EHB in mtc0 -> mfc0 sequence for DSPen cifs: Fix the target file was deleted when rename failed. SMB3: Honor lease disabling for multiuser mounts SMB3: Honor persistent/resilient handle flags for multiuser mounts SMB3: Honor 'seal' flag for multiuser mounts Revert "ALSA: usb-audio: Improve frames size computation" nfsd: apply umask on fs without ACL support i2c: mlxcpld: check correct size of maximum RECV_LEN packet i2c: algo-pca: Add 0x78 as SCL stuck low status for PCA9665 nvme: fix a crash in nvme_mpath_add_disk SMB3: Honor 'posix' flag for multiuser mounts virtio-blk: free vblk-vqs in error path of virtblk_probe() drm: sun4i: hdmi: Remove extra HPD polling hwmon: (acpi_power_meter) Fix potential memory leak in acpi_power_meter_add() hwmon: (max6697) Make sure the OVERT mask is set correctly cxgb4: fix SGE queue dump destination buffer context cxgb4: use correct type for all-mask IP address comparison cxgb4: parse TC-U32 key values and masks natively cxgb4: use unaligned conversion for fetching timestamp drm/msm/dpu: fix error return code in dpu_encoder_init crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() kgdb: Avoid suspicious RCU usage warning nvme-multipath: fix deadlock between ana_work and scan_work nvme-multipath: set bdi capabilities once s390/debug: avoid kernel warning on too large number of pages usb: usbtest: fix missing kfree(dev->buf) in usbtest_disconnect mm/slub: fix stack overruns with SLUB_STATS mm/slub.c: fix corrupted freechain in deactivate_slab() usbnet: smsc95xx: Fix use-after-free after removal EDAC/amd64: Read back the scrub rate PCI register on F15h mm: fix swap cache node allocation mask btrfs: fix a block group ref counter leak after failure to remove block group ANDROID: Update ABI representation for libabigail update ANDROID: Update the ABI representation ANDROID: Update the ABI xml representation ANDROID: GKI: fix ABI diffs caused by GPU heap and pool vmstat additions ANDROID: sched: consider stune boost margin when computing energy ANDROID: GKI: move abi files to android/ ANDROID: GKI: drop unneeded "_whitelist" off of symbol filenames UPSTREAM: binder: fix null deref of proc->context ANDROID: cpufreq: schedutil: maintain raw cache when next_f is not changed UPSTREAM: net: bpf: Make bpf_ktime_get_ns() available to non GPL programs UPSTREAM: usb: musb: mediatek: add reset FADDR to zero in reset interrupt handle ANDROID: GKI: scripts: Makefile: update the lz4 command (#2) ANDROID: Update the ABI xml representation Revert "drm/dsi: Fix byte order of DCS set/get brightness" Linux 4.19.131 Revert "tty: hvc: Fix data abort due to race in hvc_open" xfs: add agf freeblocks verify in xfs_agf_verify dm writecache: add cond_resched to loop in persistent_memory_claim() dm writecache: correct uncommitted_block when discarding uncommitted entry NFSv4 fix CLOSE not waiting for direct IO compeletion pNFS/flexfiles: Fix list corruption if the mirror count changes SUNRPC: Properly set the @subbuf parameter of xdr_buf_subsegment() sunrpc: fixed rollback in rpc_gssd_dummy_populate() Staging: rtl8723bs: prevent buffer overflow in update_sta_support_rate() drm/radeon: fix fb_div check in ni_init_smc_spll_table() drm: rcar-du: Fix build error ring-buffer: Zero out time extend if it is nested and not absolute tracing: Fix event trigger to accept redundant spaces arm64: perf: Report the PC value in REGS_ABI_32 mode ocfs2: fix panic on nfs server over ocfs2 ocfs2: fix value of OCFS2_INVALID_SLOT ocfs2: load global_inode_alloc ocfs2: avoid inode removal while nfsd is accessing it mm/slab: use memzero_explicit() in kzfree() btrfs: fix failure of RWF_NOWAIT write into prealloc extent beyond eof btrfs: fix data block group relocation failure due to concurrent scrub x86/asm/64: Align start of __clear_user() loop to 16-bytes KVM: nVMX: Plumb L2 GPA through to PML emulation KVM: X86: Fix MSR range of APIC registers in X2APIC mode erofs: fix partially uninitialized misuse in z_erofs_onlinepage_fixup ACPI: sysfs: Fix pm_profile_attr type ALSA: hda/realtek - Add quirk for MSI GE63 laptop ALSA: hda: Add NVIDIA codec IDs 9a & 9d through a0 to patch table RISC-V: Don't allow write+exec only page mapping request in mmap blktrace: break out of blktrace setup on concurrent calls kbuild: improve cc-option to clean up all temporary files arm64: sve: Fix build failure when ARM64_SVE=y and SYSCTL=n s390/vdso: fix vDSO clock_getres() s390/ptrace: fix setting syscall number net: alx: fix race condition in alx_remove ibmvnic: Harden device login requests hwrng: ks-sa - Fix runtime PM imbalance on error riscv/atomic: Fix sign extension for RV64I drm/amd/display: Use kfree() to free rgb_user in calculate_user_regamma_ramp() ata/libata: Fix usage of page address by page_address in ata_scsi_mode_select_xlat function sata_rcar: handle pm_runtime_get_sync failure cases sched/core: Fix PI boosting between RT and DEADLINE tasks sched/deadline: Initialize ->dl_boosted i2c: core: check returned size of emulated smbus block read i2c: fsi: Fix the port number field in status register net: bcmgenet: use hardware padding of runt frames netfilter: ipset: fix unaligned atomic access usb: gadget: udc: Potential Oops in error handling code ARM: imx5: add missing put_device() call in imx_suspend_alloc_ocram() cxgb4: move handling L2T ARP failures to caller net: qed: fix excessive QM ILT lines consumption net: qed: fix NVMe login fails over VFs net: qed: fix left elements count calculation RDMA/mad: Fix possible memory leak in ib_mad_post_receive_mads() ASoC: rockchip: Fix a reference count leak. RDMA/cma: Protect bind_list and listen_list while finding matching cm id RDMA/qedr: Fix KASAN: use-after-free in ucma_event_handler+0x532 rxrpc: Fix handling of rwind from an ACK packet ARM: dts: NSP: Correct FA2 mailbox node regmap: Fix memory leak from regmap_register_patch x86/resctrl: Fix a NULL vs IS_ERR() static checker warning in rdt_cdp_peer_get() ARM: dts: Fix duovero smsc interrupt for suspend ASoC: fsl_ssi: Fix bclk calculation for mono channel regualtor: pfuze100: correct sw1a/sw2 on pfuze3000 efi/esrt: Fix reference count leak in esre_create_sysfs_entry. ASoC: q6asm: handle EOS correctly xfrm: Fix double ESP trailer insertion in IPsec crypto offload. cifs/smb3: Fix data inconsistent when zero file range cifs/smb3: Fix data inconsistent when punch hole IB/mad: Fix use after free when destroying MAD agent loop: replace kill_bdev with invalidate_bdev cdc-acm: Add DISABLE_ECHO quirk for Microchip/SMSC chip xhci: Return if xHCI doesn't support LPM xhci: Fix enumeration issue when setting max packet size for FS devices. xhci: Fix incorrect EP_STATE_MASK scsi: zfcp: Fix panic on ERP timeout for previously dismissed ERP action ALSA: usb-audio: Fix OOB access of mixer element list ALSA: usb-audio: add quirk for Samsung USBC Headset (AKG) ALSA: usb-audio: add quirk for Denon DCD-1500RE usb: typec: tcpci_rt1711h: avoid screaming irq causing boot hangs usb: host: ehci-exynos: Fix error check in exynos_ehci_probe() xhci: Poll for U0 after disabling USB2 LPM usb: host: xhci-mtk: avoid runtime suspend when removing hcd USB: ehci: reopen solution for Synopsys HC bug usb: add USB_QUIRK_DELAY_INIT for Logitech C922 usb: dwc2: Postponed gadget registration to the udc class driver USB: ohci-sm501: Add missed iounmap() in remove net: core: reduce recursion limit value net: Do not clear the sock TX queue in sk_set_socket() net: Fix the arp error in some cases sch_cake: don't call diffserv parsing code when it is not needed tcp_cubic: fix spurious HYSTART_DELAY exit upon drop in min RTT sch_cake: fix a few style nits sch_cake: don't try to reallocate or unshare skb unconditionally ip_tunnel: fix use-after-free in ip_tunnel_lookup() net: phy: Check harder for errors in get_phy_id() ip6_gre: fix use-after-free in ip6gre_tunnel_lookup() tg3: driver sleeps indefinitely when EEH errors exceed eeh_max_freezes tcp: grow window for OOO packets only for SACK flows tcp: don't ignore ECN CWR on pure ACK sctp: Don't advertise IPv4 addresses if ipv6only is set on the socket rxrpc: Fix notification call on completion of discarded calls rocker: fix incorrect error handling in dma_rings_init net: usb: ax88179_178a: fix packet alignment padding net: increment xmit_recursion level in dev_direct_xmit() net: use correct this_cpu primitive in dev_recursion_level net: place xmit recursion in softnet data net: fix memleak in register_netdevice() net: bridge: enfore alignment for ethernet address mld: fix memory leak in ipv6_mc_destroy_dev() ibmveth: Fix max MTU limit apparmor: don't try to replace stale label in ptraceme check ALSA: hda/realtek - Enable micmute LED on and HP system ALSA: hda/realtek: Enable mute LED on an HP system ALSA: hda/realtek - Enable the headset of ASUS B9450FA with ALC294 fix a braino in "sparc32: fix register window handling in genregs32_[gs]et()" i2c: tegra: Fix Maximum transfer size i2c: tegra: Add missing kerneldoc for some fields i2c: tegra: Cleanup kerneldoc comments EDAC/amd64: Add Family 17h Model 30h PCI IDs net: sched: export __netdev_watchdog_up() net: bcmgenet: remove HFB_CTRL access mtd: rawnand: marvell: Fix the condition on a return code fanotify: fix ignore mask logic for events on child and on dir block/bio-integrity: don't free 'buf' if bio_integrity_add_page() failed net: be more gentle about silly gso requests coming from user ANDROID: lib/vdso: do not update timespec if clock_getres() fails Revert "ANDROID: fscrypt: add key removal notifier chain" ANDROID: update the ABI xml and qcom whitelist ANDROID: fs: export vfs_{read\|write} ANDROID: GKI: update abi definitions now that sdcardfs is gone Revert "ANDROID: sdcardfs: Enable modular sdcardfs" Revert "ANDROID: vfs: Add setattr2 for filesystems with per mount permissions" Revert "ANDROID: vfs: fix export symbol type" Revert "ANDROID: vfs: Add permission2 for filesystems with per mount permissions" Revert "ANDROID: vfs: fix export symbol types" Revert "ANDROID: vfs: add d_canonical_path for stacked filesystem support" Revert "ANDROID: fs: Restore vfs_path_lookup() export" ANDROID: sdcardfs: remove sdcardfs from system Revert "ALSA: usb-audio: Improve frames size computation" ANDROID: Makefile: append BUILD_NUMBER to version string when defined ANDROID: GKI: Update ABI for incremental fs ANDROID: GKI: Update cuttlefish whitelist ANDROID: GKI: Disable INCREMENTAL_FS on x86 too ANDROID: cpufreq: schedutil: drop cache when update skipped due to rate limit Linux 4.19.130 KVM: x86/mmu: Set mmio_value to '0' if reserved #PF can't be generated kvm: x86: Fix reserved bits related calculation errors caused by MKTME kvm: x86: Move kvm_set_mmio_spte_mask() from x86.c to mmu.c md: add feature flag MD_FEATURE_RAID0_LAYOUT Revert "dpaa_eth: fix usage as DSA master, try 3" net: core: device_rename: Use rwsem instead of a seqcount sched/rt, net: Use CONFIG_PREEMPTION.patch kretprobe: Prevent triggering kretprobe from within kprobe_flush_task net: octeon: mgmt: Repair filling of RX ring e1000e: Do not wake up the system via WOL if device wakeup is disabled kprobes: Fix to protect kick_kprobe_optimizer() by kprobe_mutex crypto: algboss - don't wait during notifier callback crypto: algif_skcipher - Cap recv SG list at ctx->used drm/i915/icl+: Fix hotplug interrupt disabling after storm detection drm/i915: Whitelist context-local timestamp in the gen9 cmdparser s390: fix syscall_get_error for compat processes mtd: rawnand: tmio: Fix the probe error path mtd: rawnand: mtk: Fix the probe error path mtd: rawnand: plat_nand: Fix the probe error path mtd: rawnand: socrates: Fix the probe error path mtd: rawnand: oxnas: Fix the probe error path mtd: rawnand: oxnas: Add of_node_put() mtd: rawnand: orion: Fix the probe error path mtd: rawnand: xway: Fix the probe error path mtd: rawnand: sharpsl: Fix the probe error path mtd: rawnand: diskonchip: Fix the probe error path mtd: rawnand: Pass a nand_chip object to nand_release() mtd: rawnand: Pass a nand_chip object to nand_scan() block: nr_sects_write(): Disable preemption on seqcount write x86/boot/compressed: Relax sed symbol type regex for LLVM ld.lld drm/dp_mst: Increase ACT retry timeout to 3s ext4: avoid race conditions when remounting with options that change dax ext4: fix partial cluster initialization when splitting extent selinux: fix double free drm/amdgpu: Replace invalid device ID with a valid device ID drm/qxl: Use correct notify port address when creating cursor ring drm/dp_mst: Reformat drm_dp_check_act_status() a bit drm: encoder_slave: fix refcouting error for modules libata: Use per port sync for detach arm64: hw_breakpoint: Don't invoke overflow handler on uaccess watchpoints block: Fix use-after-free in blkdev_get() afs: afs_write_end() should change i_size under the right lock afs: Fix non-setting of mtime when writing into mmap bcache: fix potential deadlock problem in btree_gc_coalesce ext4: stop overwrite the errcode in ext4_setup_super perf report: Fix NULL pointer dereference in hists__fprintf_nr_sample_events() usb/ehci-platform: Set PM runtime as active on resume usb: host: ehci-platform: add a quirk to avoid stuck usb/xhci-plat: Set PM runtime as active on resume xdp: Fix xsk_generic_xmit errno net/filter: Permit reading NET in load_bytes_relative when MAC not set x86/idt: Keep spurious entries unset in system_vectors scsi: acornscsi: Fix an error handling path in acornscsi_probe() drm/sun4i: hdmi ddc clk: Fix size of m divider ASoC: rt5645: Add platform-data for Asus T101HA ASoC: Intel: bytcr_rt5640: Add quirk for Toshiba Encore WT10-A tablet ASoC: core: only convert non DPCM link to DPCM link afs: Fix memory leak in afs_put_sysnames() selftests/net: in timestamping, strncpy needs to preserve null byte drivers/perf: hisi: Fix wrong value for all counters enable NTB: ntb_test: Fix bug when counting remote files NTB: perf: Fix race condition when run with ntb_test NTB: perf: Fix support for hardware that doesn't have port numbers NTB: perf: Don't require one more memory window than number of peers NTB: Revert the change to use the NTB device dev for DMA allocations NTB: ntb_tool: reading the link file should not end in a NULL byte ntb_tool: pass correct struct device to dma_alloc_coherent ntb_perf: pass correct struct device to dma_alloc_coherent gfs2: fix use-after-free on transaction ail lists blktrace: fix endianness for blk_log_remap() blktrace: fix endianness in get_pdu_int() blktrace: use errno instead of bi_status selftests/vm/pkeys: fix alloc_random_pkey() to make it really random elfnote: mark all .note sections SHF_ALLOC include/linux/bitops.h: avoid clang shift-count-overflow warnings lib/zlib: remove outdated and incorrect pre-increment optimization geneve: change from tx_error to tx_dropped on missing metadata crypto: omap-sham - add proper load balancing support for multicore pinctrl: freescale: imx: Fix an error handling path in 'imx_pinctrl_probe()' pinctrl: imxl: Fix an error handling path in 'imx1_pinctrl_core_probe()' scsi: ufs: Don't update urgent bkops level when toggling auto bkops scsi: iscsi: Fix reference count leak in iscsi_boot_create_kobj gfs2: Allow lock_nolock mount to specify jid=X openrisc: Fix issue with argument clobbering for clone/fork rxrpc: Adjust /proc/net/rxrpc/calls to display call->debug_id not user_ID vfio/mdev: Fix reference count leak in add_mdev_supported_type ASoC: fsl_asrc_dma: Fix dma_chan leak when config DMA channel failed extcon: adc-jack: Fix an error handling path in 'adc_jack_probe()' powerpc/4xx: Don't unmap NULL mbase of: Fix a refcounting bug in __of_attach_node_sysfs() NFSv4.1 fix rpc_call_done assignment for BIND_CONN_TO_SESSION net: sunrpc: Fix off-by-one issues in 'rpc_ntop6' clk: sprd: return correct type of value for _sprd_pll_recalc_rate KVM: PPC: Book3S HV: Ignore kmemleak false positives scsi: ufs-qcom: Fix scheduling while atomic issue clk: bcm2835: Fix return type of bcm2835_register_gate scsi: target: tcmu: Fix a use after free in tcmu_check_expired_queue_cmd() ASoC: fix incomplete error-handling in img_i2s_in_probe. x86/apic: Make TSC deadline timer detection message visible RDMA/iw_cxgb4: cleanup device debugfs entries on ULD remove usb: gadget: Fix issue with config_ep_by_speed function usb: gadget: fix potential double-free in m66592_probe. usb: gadget: lpc32xx_udc: don't dereference ep pointer before null check USB: gadget: udc: s3c2410_udc: Remove pointless NULL check in s3c2410_udc_nuke usb: dwc2: gadget: move gadget resume after the core is in L0 state watchdog: da9062: No need to ping manually before setting timeout IB/cma: Fix ports memory leak in cma_configfs PCI: dwc: Fix inner MSI IRQ domain registration PCI/PTM: Inherit Switch Downstream Port PTM settings from Upstream Port dm zoned: return NULL if dmz_get_zone_for_reclaim() fails to find a zone powerpc/64s/pgtable: fix an undefined behaviour arm64: tegra: Fix ethernet phy-mode for Jetson Xavier scsi: target: tcmu: Userspace must not complete queued commands clk: samsung: exynos5433: Add IGNORE_UNUSED flag to sclk_i2s1 fpga: dfl: afu: Corrected error handling levels tty: n_gsm: Fix bogus i++ in gsm_data_kick USB: host: ehci-mxc: Add error handling in ehci_mxc_drv_probe() ASoC: Intel: bytcr_rt5640: Add quirk for Toshiba Encore WT8-A tablet drm/msm/mdp5: Fix mdp5_init error path for failed mdp5_kms allocation usb/ohci-platform: Fix a warning when hibernating vfio-pci: Mask cap zero powerpc/ps3: Fix kexec shutdown hang powerpc/pseries/ras: Fix FWNMI_VALID off by one ipmi: use vzalloc instead of kmalloc for user creation HID: Add quirks for Trust Panora Graphic Tablet tty: n_gsm: Fix waking up upper tty layer when room available tty: n_gsm: Fix SOF skipping powerpc/64: Don't initialise init_task->thread.regs PCI: Fix pci_register_host_bridge() device_register() error handling clk: ti: composite: fix memory leak dlm: remove BUG() before panic() pinctrl: rockchip: fix memleak in rockchip_dt_node_to_map scsi: mpt3sas: Fix double free warnings power: supply: smb347-charger: IRQSTAT_D is volatile power: supply: lp8788: Fix an error handling path in 'lp8788_charger_probe()' scsi: qla2xxx: Fix warning after FC target reset PCI/ASPM: Allow ASPM on links to PCIe-to-PCI/PCI-X Bridges PCI: rcar: Fix incorrect programming of OB windows drivers: base: Fix NULL pointer exception in __platform_driver_probe() if a driver developer is foolish serial: amba-pl011: Make sure we initialize the port.lock spinlock i2c: pxa: fix i2c_pxa_scream_blue_murder() debug output PCI: v3-semi: Fix a memory leak in v3_pci_probe() error handling paths staging: sm750fb: add missing case while setting FB_VISUAL usb: dwc3: gadget: Properly handle failed kick_transfer thermal/drivers/ti-soc-thermal: Avoid dereferencing ERR_PTR slimbus: ngd: get drvdata from correct device tty: hvc: Fix data abort due to race in hvc_open s390/qdio: put thinint indicator after early error ALSA: usb-audio: Fix racy list management in output queue ALSA: usb-audio: Improve frames size computation staging: gasket: Fix mapping refcnt leak when register/store fails staging: gasket: Fix mapping refcnt leak when put attribute fails firmware: qcom_scm: fix bogous abuse of dma-direct internals pinctrl: rza1: Fix wrong array assignment of rza1l_swio_entries scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing gpio: dwapb: Append MODULE_ALIAS for platform driver ARM: dts: sun8i-h2-plus-bananapi-m2-zero: Fix led polarity scsi: qedi: Do not flush offload work if ARP not resolved arm64: dts: mt8173: fix unit name warnings staging: greybus: fix a missing-check bug in gb_lights_light_config() x86/purgatory: Disable various profiling and sanitizing options apparmor: fix nnp subset test for unconfined scsi: ibmvscsi: Don't send host info in adapter info MAD after LPM scsi: sr: Fix sr_probe() missing deallocate of device minor ASoC: meson: add missing free_irq() in error path apparmor: check/put label on apparmor_sk_clone_security() apparmor: fix introspection of of task mode for unconfined tasks mksysmap: Fix the mismatch of '.L' symbols in System.map NTB: Fix the default port and peer numbers for legacy drivers NTB: ntb_pingpong: Choose doorbells based on port number yam: fix possible memory leak in yam_init_driver pwm: img: Call pm_runtime_put() in pm_runtime_get_sync() failed case powerpc/crashkernel: Take "mem=" option into account PCI: vmd: Filter resource type bits from shadow register nfsd: Fix svc_xprt refcnt leak when setup callback client failed powerpc/perf/hv-24x7: Fix inconsistent output values incase multiple hv-24x7 events run clk: clk-flexgen: fix clock-critical handling scsi: lpfc: Fix lpfc_nodelist leak when processing unsolicited event mfd: wm8994: Fix driver operation if loaded as modules gpio: dwapb: Call acpi_gpiochip_free_interrupts() on GPIO chip de-registration m68k/PCI: Fix a memory leak in an error handling path RDMA/mlx5: Add init2init as a modify command vfio/pci: fix memory leaks in alloc_perm_bits() ps3disk: use the default segment boundary PCI: aardvark: Don't blindly enable ASPM L0s and don't write to read-only register dm mpath: switch paths in dm_blk_ioctl() code path serial: 8250: Fix max baud limit in generic 8250 port usblp: poison URBs upon disconnect clk: samsung: Mark top ISP and CAM clocks on Exynos542x as critical i2c: pxa: clear all master action bits in i2c_pxa_stop_message() f2fs: report delalloc reserve as non-free in statfs for project quota iio: bmp280: fix compensation of humidity scsi: qla2xxx: Fix issue with adapter's stopping state PCI: Allow pci_resize_resource() for devices on root bus ALSA: isa/wavefront: prevent out of bounds write in ioctl ALSA: hda/realtek - Introduce polarity for micmute LED GPIO scsi: qedi: Check for buffer overflow in qedi_set_path() ARM: integrator: Add some Kconfig selections ASoC: davinci-mcasp: Fix dma_chan refcnt leak when getting dma type backlight: lp855x: Ensure regulators are disabled on probe failure clk: qcom: msm8916: Fix the address location of pll->config_reg remoteproc: Fix IDR initialisation in rproc_alloc() iio: pressure: bmp280: Tolerate IRQ before registering i2c: piix4: Detect secondary SMBus controller on AMD AM4 chipsets ASoC: tegra: tegra_wm8903: Support nvidia, headset property clk: sunxi: Fix incorrect usage of round_down() power: supply: bq24257_charger: Replace depends on REGMAP_I2C with select ANDROID: ext4: Optimize match for casefolded encrypted dirs ANDROID: ext4: Handle casefolding with encryption ANDROID: extcon: Remove redundant EXPORT_SYMBOL_GPL ANDROID: update the ABI xml representation ANDROID: GKI: cfg80211: add ABI changes for CONFIG_NL80211_TESTMODE ANDROID: gki_defconfig: x86: Enable KERNEL_LZ4 ANDROID: GKI: scripts: Makefile: update the lz4 command FROMLIST: f2fs: fix use-after-free when accessing bio->bi_crypt_context UPSTREAM: fdt: Update CRC check for rng-seed ANDROID: GKI: Update ABI for incremental fs ANDROID: GKI: Update whitelist and defconfig for incfs ANDROID: Use depmod from the hermetic toolchain Linux 4.19.129 perf symbols: Fix debuginfo search for Ubuntu perf probe: Check address correctness by map instead of _etext perf probe: Fix to check blacklist address correctly perf probe: Do not show the skipped events w1: omap-hdq: cleanup to add missing newline for some dev_dbg mtd: rawnand: pasemi: Fix the probe error path mtd: rawnand: brcmnand: fix hamming oob layout sunrpc: clean up properly in gss_mech_unregister() sunrpc: svcauth_gss_register_pseudoflavor must reject duplicate registrations. kbuild: force to build vmlinux if CONFIG_MODVERSION=y powerpc/64s: Save FSCR to init_task.thread.fscr after feature init powerpc/64s: Don't let DT CPU features set FSCR_DSCR drivers/macintosh: Fix memleak in windfarm_pm112 driver ARM: dts: s5pv210: Set keep-power-in-suspend for SDHCI1 on Aries ARM: dts: at91: sama5d2_ptc_ek: fix vbus pin ARM: dts: exynos: Fix GPIO polarity for thr GalaxyS3 CM36651 sensor's bus ARM: tegra: Correct PL310 Auxiliary Control Register initialization kernel/cpu_pm: Fix uninitted local in cpu_pm alpha: fix memory barriers so that they conform to the specification dm crypt: avoid truncating the logical block size sparc64: fix misuses of access_process_vm() in genregs32_[sg]et() sparc32: fix register window handling in genregs32_[gs]et() gnss: sirf: fix error return code in sirf_probe() pinctrl: samsung: Save/restore eint_mask over suspend for EINT_TYPE GPIOs pinctrl: samsung: Correct setting of eint wakeup mask on s5pv210 power: vexpress: add suppress_bind_attrs to true igb: Report speed and duplex as unknown when device is runtime suspended media: ov5640: fix use of destroyed mutex b43_legacy: Fix connection problem with WPA3 b43: Fix connection problem with WPA3 b43legacy: Fix case where channel status is corrupted Bluetooth: hci_bcm: fix freeing not-requested IRQ media: go7007: fix a miss of snd_card_free carl9170: remove P2P_GO support e1000e: Relax condition to trigger reset for ME workaround e1000e: Disable TSO for buffer overrun workaround PCI: Program MPS for RCiEP devices ima: Call ima_calc_boot_aggregate() in ima_eventdigest_init() btrfs: fix wrong file range cleanup after an error filling dealloc range btrfs: fix error handling when submitting direct I/O bio PCI: Generalize multi-function power dependency device links PCI: Unify ACS quirk desired vs provided checking PCI: Make ACS quirk implementations more uniform serial: 8250_pci: Move Pericom IDs to pci_ids.h PCI: Add Loongson vendor ID x86/amd_nb: Add Family 19h PCI IDs PCI: vmd: Add device id for VMD device 8086:9A0B PCI: Add Amazon's Annapurna Labs vendor ID PCI: Add Genesys Logic, Inc. Vendor ID ALSA: lx6464es - add support for LX6464ESe pci express variant x86/amd_nb: Add PCI device IDs for family 17h, model 70h PCI: mediatek: Add controller support for MT7629 PCI: Enable NVIDIA HDA controllers PCI: Add NVIDIA GPU multi-function power dependencies PCI: Add Synopsys endpoint EDDA Device ID misc: pci_endpoint_test: Add support to test PCI EP in AM654x misc: pci_endpoint_test: Add the layerscape EP device support PCI: Move Rohm Vendor ID to generic list PCI: Move Synopsys HAPS platform device IDs PCI: add USR vendor id and use it in r8169 and w6692 driver x86/amd_nb: Add PCI device IDs for family 17h, model 30h hwmon/k10temp, x86/amd_nb: Consolidate shared device IDs pci:ipmi: Move IPMI PCI class id defines to pci_ids.h PCI: Remove unused NFP32xx IDs PCI: Add ACS quirk for Intel Root Complex Integrated Endpoints PCI: Add ACS quirk for iProc PAXB PCI: Avoid FLR for AMD Starship USB 3.0 PCI: Avoid FLR for AMD Matisse HD Audio & USB 3.0 PCI: Avoid Pericom USB controller OHCI/EHCI PME# defect ext4: fix race between ext4_sync_parent() and rename() ext4: fix error pointer dereference ext4: fix EXT_MAX_EXTENT/INDEX to check for zeroed eh_max evm: Fix possible memory leak in evm_calc_hmac_or_hash() ima: Directly assign the ima_default_policy pointer to ima_rules ima: Fix ima digest hash table key calculation mm: initialize deferred pages with interrupts enabled mm: thp: make the THP mapcount atomic against __split_huge_pmd_locked() btrfs: send: emit file capabilities after chown btrfs: include non-missing as a qualifier for the latest_bdev string.h: fix incompatibility between FORTIFY_SOURCE and KASAN platform/x86: intel-vbtn: Only blacklist SW_TABLET_MODE on the 9 / "Laptop" chasis-type platform/x86: intel-hid: Add a quirk to support HP Spectre X2 (2015) platform/x86: hp-wmi: Convert simple_strtoul() to kstrtou32() cpuidle: Fix three reference count leaks spi: dw: Return any value retrieved from the dma_transfer callback mmc: sdhci-esdhc-imx: fix the mask for tuning start point ixgbe: fix signed-integer-overflow warning mmc: via-sdmmc: Respect the cmd->busy_timeout from the mmc core staging: greybus: sdio: Respect the cmd->busy_timeout from the mmc core mmc: sdhci-msm: Set SDHCI_QUIRK_MULTIBLOCK_READ_ACMD12 quirk bcache: fix refcount underflow in bcache_device_free() MIPS: Fix IRQ tracing when call handle_fpe() and handle_msa_fpe() PCI: Don't disable decoding when mmio_always_on is set macvlan: Skip loopback packets in RX handler btrfs: qgroup: mark qgroup inconsistent if we're inherting snapshot to a new qgroup m68k: mac: Don't call via_flush_cache() on Mac IIfx x86/mm: Stop printing BRK addresses crypto: stm32/crc32 - fix multi-instance crypto: stm32/crc32 - fix run-time self test issue. crypto: stm32/crc32 - fix ext4 chksum BUG_ON() mips: Add udelay lpj numbers adjustment mips: MAAR: Use more precise address mask x86/boot: Correct relocation destination on old linkers mwifiex: Fix memory corruption in dump_station rtlwifi: Fix a double free in _rtl_usb_tx_urb_setup() net/mlx5e: IPoIB, Drop multicast packets that this interface sent veth: Adjust hard_start offset on redirect XDP frames md: don't flush workqueue unconditionally in md_open mt76: avoid rx reorder buffer overflow net: qed: Reduce RX and TX default ring count when running inside kdump kernel wcn36xx: Fix error handling path in 'wcn36xx_probe()' ath10k: Remove msdu from idr when management pkt send fails nvme: refine the Qemu Identify CNS quirk platform/x86: intel-vbtn: Also handle tablet-mode switch on "Detachable" and "Portable" chassis-types platform/x86: intel-vbtn: Do not advertise switches to userspace if they are not there platform/x86: intel-vbtn: Split keymap into buttons and switches parts platform/x86: intel-vbtn: Use acpi_evaluate_integer() xfs: fix duplicate verification from xfs_qm_dqflush() xfs: reset buffer write failure state on successful completion kgdb: Fix spurious true from in_dbg_master() mips: cm: Fix an invalid error code of INTVN__ERR MIPS: Truncate link address into 32bit for 32bit kernel Crypto/chcr: fix for ccm(aes) failed test xfs: clean up the error handling in xfs_swap_extents powerpc/spufs: fix copy_to_user while atomic net: allwinner: Fix use correct return type for ndo_start_xmit() media: cec: silence shift wrapping warning in __cec_s_log_addrs() net: lpc-enet: fix error return code in lpc_mii_init() drivers/perf: hisi: Fix typo in events attribute array sched/core: Fix illegal RCU from offline CPUs exit: Move preemption fixup up, move blocking operations down lib/mpi: Fix 64-bit MIPS build with Clang net: bcmgenet: set Rx mode before starting netif selftests/bpf: Fix memory leak in extract_build_id() netfilter: nft_nat: return EOPNOTSUPP if type or flags are not supported audit: fix a net reference leak in audit_list_rules_send() Bluetooth: btbcm: Add 2 missing models to subver tables MIPS: Make sparse_init() using top-down allocation media: platform: fcp: Set appropriate DMA parameters media: dvb: return -EREMOTEIO on i2c transfer failure. audit: fix a net reference leak in audit_send_reply() dt-bindings: display: mediatek: control dpi pins mode to avoid leakage e1000: Distribute switch variables for initialization tools api fs: Make xxx__mountpoint() more scalable brcmfmac: fix wrong location to get firmware feature staging: android: ion: use vmap instead of vm_map_ram net: vmxnet3: fix possible buffer overflow caused by bad DMA value in vmxnet3_get_rss() x86/kvm/hyper-v: Explicitly align hcall param for kvm_hyperv_exit spi: dw: Fix Rx-only DMA transfers mmc: meson-mx-sdio: trigger a soft reset after a timeout or CRC error batman-adv: Revert "disable ethtool link speed detection when auto negotiation off" ARM: 8978/1: mm: make act_mm() respect THREAD_SIZE btrfs: do not ignore error from btrfs_next_leaf() when inserting checksums clocksource: dw_apb_timer_of: Fix missing clockevent timers clocksource: dw_apb_timer: Make CPU-affiliation being optional spi: dw: Enable interrupts in accordance with DMA xfer mode kgdb: Prevent infinite recursive entries to the debugger kgdb: Disable WARN_CONSOLE_UNLOCKED for all kgdb Bluetooth: Add SCO fallback for invalid LMP parameters error MIPS: Loongson: Build ATI Radeon GPU driver as module ixgbe: Fix XDP redirect on archs with PAGE_SIZE above 4K arm64: insn: Fix two bugs in encoding 32-bit logical immediates spi: dw: Zero DMA Tx and Rx configurations on stack arm64: cacheflush: Fix KGDB trap detection efi/libstub/x86: Work around LLVM ELF quirk build regression net: ena: fix error returning in ena_com_get_hash_function() net: atlantic: make hw_get_regs optional spi: pxa2xx: Apply CS clk quirk to BXT objtool: Ignore empty alternatives media: si2157: Better check for running tuner in init crypto: ccp -- don't "select" CONFIG_DMADEVICES drm: bridge: adv7511: Extend list of audio sample rates ACPI: GED: use correct trigger type field in _Exx / _Lxx handling KVM: arm64: Synchronize sysreg state on injecting an AArch32 exception xen/pvcalls-back: test for errors when calling backend_connect() mmc: sdio: Fix potential NULL pointer error in mmc_sdio_init_card() ARM: dts: at91: sama5d2_ptc_ek: fix sdmmc0 node description mmc: sdhci-msm: Clear tuning done flag while hs400 tuning agp/intel: Reinforce the barrier after GTT updates perf: Add cond_resched() to task_function_call() fat: don't allow to mount if the FAT length == 0 mm/slub: fix a memory leak in sysfs_slab_add() drm/vkms: Hold gem object while still in-use Smack: slab-out-of-bounds in vsscanf ath9k: Fix general protection fault in ath9k_hif_usb_rx_cb ath9x: Fix stack-out-of-bounds Write in ath9k_hif_usb_rx_cb ath9k: Fix use-after-free Write in ath9k_htc_rx_msg ath9k: Fix use-after-free Read in ath9k_wmi_ctrl_rx scsi: megaraid_sas: TM command refire leads to controller firmware crash KVM: arm64: Make vcpu_cp1x() work on Big Endian hosts KVM: MIPS: Fix VPN2_MASK definition for variable cpu_vmbits KVM: MIPS: Define KVM_ENTRYHI_ASID to cpu_asid_mask(&boot_cpu_data) KVM: nVMX: Consult only the "basic" exit reason when routing nested exit KVM: nSVM: leave ASID aside in copy_vmcb_control_area KVM: nSVM: fix condition for filtering async PF video: fbdev: w100fb: Fix a potential double free. proc: Use new_inode not new_inode_pseudo ovl: initialize error in ovl_copy_xattr selftests/net: in rxtimestamp getopt_long needs terminating null entry crypto: virtio: Fix dest length calculation in __virtio_crypto_skcipher_do_req() crypto: virtio: Fix src/dst scatterlist calculation in __virtio_crypto_skcipher_do_req() crypto: virtio: Fix use-after-free in virtio_crypto_skcipher_finalize_req() spi: pxa2xx: Fix runtime PM ref imbalance on probe error spi: pxa2xx: Balance runtime PM enable/disable on error spi: bcm2835: Fix controller unregister order spi: pxa2xx: Fix controller unregister order spi: Fix controller unregister order spi: No need to assign dummy value in spi_unregister_controller() x86/speculation: PR_SPEC_FORCE_DISABLE enforcement for indirect branches. x86/speculation: Avoid force-disabling IBPB based on STIBP and enhanced IBRS. x86/speculation: Add support for STIBP always-on preferred mode x86/speculation: Change misspelled STIPB to STIBP KVM: x86: only do L1TF workaround on affected processors KVM: x86/mmu: Consolidate "is MMIO SPTE" code kvm: x86: Fix L1TF mitigation for shadow MMU KVM: x86: Fix APIC page invalidation race x86/{mce,mm}: Unmap the entire page if the whole page is affected and poisoned ALSA: pcm: disallow linking stream to itself crypto: cavium/nitrox - Fix 'nitrox_get_first_device()' when ndevlist is fully iterated PM: runtime: clk: Fix clk_pm_runtime_get() error path spi: bcm-qspi: when tx/rx buffer is NULL set to 0 spi: bcm2835aux: Fix controller unregister order spi: dw: Fix controller unregister order nilfs2: fix null pointer dereference at nilfs_segctor_do_construct() cgroup, blkcg: Prepare some symbols for module and !CONFIG_CGROUP usages ACPI: PM: Avoid using power resources if there are none for D0 ACPI: GED: add support for _Exx / _Lxx handler methods ACPI: CPPC: Fix reference count leak in acpi_cppc_processor_probe() ACPI: sysfs: Fix reference count leak in acpi_sysfs_add_hotplug_profile() ALSA: usb-audio: Add vendor, product and profile name for HP Thunderbolt Dock ALSA: usb-audio: Fix inconsistent card PM state after resume ALSA: hda/realtek - add a pintbl quirk for several Lenovo machines ALSA: es1688: Add the missed snd_card_free() efi/efivars: Add missing kobject_put() in sysfs entry creation error path x86/reboot/quirks: Add MacBook6,1 reboot quirk x86/speculation: Prevent rogue cross-process SSBD shutdown x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs x86_64: Fix jiffies ODR violation btrfs: tree-checker: Check level for leaves and nodes aio: fix async fsync creds mm: add kvfree_sensitive() for freeing sensitive data objects perf probe: Accept the instance number of kretprobe event x86/cpu/amd: Make erratum #1054 a legacy erratum RDMA/uverbs: Make the event_queue fds return POLLERR when disassociated ath9k_htc: Silence undersized packet warnings powerpc/xive: Clear the page tables for the ESB IO mapping drivers/net/ibmvnic: Update VNIC protocol version reporting Input: synaptics - add a second working PNP_ID for Lenovo T470s sched/fair: Don't NUMA balance for kthreads ARM: 8977/1: ptrace: Fix mask for thumb breakpoint hook Input: mms114 - fix handling of mms345l crypto: talitos - fix ECB and CBC algs ivsize btrfs: Detect unbalanced tree with empty leaf before crashing btree operations btrfs: merge btrfs_find_device and find_device lib: Reduce user_access_begin() boundaries in strncpy_from_user() and strnlen_user() x86: uaccess: Inhibit speculation past access_ok() in user_access_begin() arch/openrisc: Fix issues with access_ok() Fix 'acccess_ok()' on alpha and SH make 'user_access_begin()' do 'access_ok()' selftests: bpf: fix use of undeclared RET_IF macro tun: correct header offsets in napi frags mode vxlan: Avoid infinite loop when suppressing NS messages with invalid options bridge: Avoid infinite loop when suppressing NS messages with invalid options net_failover: fixed rollback in net_failover_open() ipv6: fix IPV6_ADDRFORM operation logic writeback: Drop I_DIRTY_TIME_EXPIRE writeback: Fix sync livelock due to b_dirty_time processing writeback: Avoid skipping inode writeback writeback: Protect inode->i_io_list with inode->i_lock Revert "writeback: Avoid skipping inode writeback" ANDROID: gki_defconfig: increase vbus_draw to 500mA fscrypt: remove stale definition fs-verity: remove unnecessary extern keywords fs-verity: fix all kerneldoc warnings fscrypt: add support for IV_INO_LBLK_32 policies fscrypt: make test_dummy_encryption use v2 by default fscrypt: support test_dummy_encryption=v2 fscrypt: add fscrypt_add_test_dummy_key() linux/parser.h: add include guards fscrypt: remove unnecessary extern keywords fscrypt: name all function parameters fscrypt: fix all kerneldoc warnings ANDROID: Update the ABI ANDROID: GKI: power: power-supply: Add POWER_SUPPLY_PROP_CHARGER_STATUS property ANDROID: GKI: add dev to usb_gsi_request ANDROID: GKI: dma-buf: add dent_count to dma_buf ANDROID: Update the ABI xml and whitelist ANDROID: GKI: update whitelist ANDROID: extcon: Export symbol of `extcon_get_edev_name` ANDROID: kbuild: merge more sections with LTO UPSTREAM: timekeeping/vsyscall: Update VDSO data unconditionally ANDROID: GKI: Revert "genetlink: disallow subscribing to unknown mcast groups" BACKPORT: usb: musb: Add support for MediaTek musb controller UPSTREAM: usb: musb: Add musb_clearb/w() interface UPSTREAM: usb: musb: Add noirq type of dma create interface UPSTREAM: usb: musb: Add get/set toggle hooks UPSTREAM: dt-bindings: usb: musb: Add support for MediaTek musb controller FROMGIT: driver core: Remove unnecessary is_fwnode_dev variable in device_add() FROMGIT: driver core: Remove check in driver_deferred_probe_force_trigger() FROMGIT: of: platform: Batch fwnode parsing when adding all top level devices FROMGIT: BACKPORT: driver core: fw_devlink: Add support for batching fwnode parsing BACKPORT: driver core: Look for waiting consumers only for a fwnode's primary device BACKPORT: driver core: Add device links from fwnode only for the primary device Linux 4.19.128 Revert "net/mlx5: Annotate mutex destroy for root ns" uprobes: ensure that uprobe->offset and ->ref_ctr_offset are properly aligned x86/speculation: Add Ivy Bridge to affected list x86/speculation: Add SRBDS vulnerability and mitigation documentation x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation x86/cpu: Add 'table' argument to cpu_matches() x86/cpu: Add a steppings field to struct x86_cpu_id nvmem: qfprom: remove incorrect write support CDC-ACM: heed quirk also in error handling staging: rtl8712: Fix IEEE80211_ADDBA_PARAM_BUF_SIZE_MASK tty: hvc_console, fix crashes on parallel open/close vt: keyboard: avoid signed integer overflow in k_ascii usb: musb: Fix runtime PM imbalance on error usb: musb: start session in resume for host port iio: vcnl4000: Fix i2c swapped word reading. USB: serial: option: add Telit LE910C1-EUX compositions USB: serial: usb_wwan: do not resubmit rx urb on fatal errors USB: serial: qcserial: add DW5816e QDL support net: check untrusted gso_size at kernel entry vsock: fix timeout in vsock_accept() NFC: st21nfca: add missed kfree_skb() in an error path net: usb: qmi_wwan: add Telit LE910C1-EUX composition l2tp: do not use inet_hash()/inet_unhash() l2tp: add sk_family checks to l2tp_validate_socket devinet: fix memleak in inetdev_init() Revert "ANDROID: Remove default y on BRIDGE_IGMP_SNOOPING" ANDROID: Update the ABI xml and whitelist ANDROID: GKI: update whitelist ANDROID: arch: arm64: vdso: export the symbols for time() ANDROID: Incremental fs: Remove dependency on PKCS7_MESSAGE_PARSER ANDROID: dm-bow: Add block_size option f2fs: attach IO flags to the missing cases f2fs: add node_io_flag for bio flags likewise data_io_flag f2fs: remove unused parameter of f2fs_put_rpages_mapping() f2fs: handle readonly filesystem in f2fs_ioc_shutdown() f2fs: avoid utf8_strncasecmp() with unstable name f2fs: don't return vmalloc() memory from f2fs_kmalloc() ANDROID: GKI: set CONFIG_BLK_DEV_LOOP_MIN_COUNT to 16 ANDROID: Incremental fs: Cache successful hash calculations ANDROID: Incremental fs: Fix four error-path bugs Linux 4.19.127 net: smsc911x: Fix runtime PM imbalance on error net: ethernet: stmmac: Enable interface clocks on probe for IPQ806x net/ethernet/freescale: rework quiesce/activate for ucc_geth null_blk: return error for invalid zone size s390/mm: fix set_huge_pte_at() for empty ptes drm/edid: Add Oculus Rift S to non-desktop list net: bmac: Fix read of MAC address from ROM x86/mmiotrace: Use cpumask_available() for cpumask_var_t variables i2c: altera: Fix race between xfer_msg and isr thread evm: Fix RCU list related warnings ARC: [plat-eznps]: Restrict to CONFIG_ISA_ARCOMPACT ARC: Fix ICCM & DCCM runtime size checks s390/ftrace: save traced function caller spi: dw: use "smp_mb()" to avoid sending spi data error powerpc/powernv: Avoid re-registration of imc debugfs directory scsi: hisi_sas: Check sas_port before using it drm/i915: fix port checks for MST support on gen >= 11 airo: Fix read overflows sending packets net: dsa: mt7530: set CPU port to fallback mode scsi: ufs: Release clock if DMA map fails mmc: fix compilation of user API kernel/relay.c: handle alloc_percpu returning NULL in relay_open p54usb: add AirVasT USB stick device-id HID: i2c-hid: add Schneider SCL142ALM to descriptor override HID: sony: Fix for broken buttons on DS3 USB dongles mm: Fix mremap not considering huge pmd devmap libnvdimm: Fix endian conversion issues Revert "cgroup: Add memory barriers to plug cgroup_rstat_updated() race window" f2fs: fix retry logic in f2fs_write_cache_pages() ANDROID: Update ABI representation Linux 4.19.126 mm/vmalloc.c: don't dereference possible NULL pointer in __vunmap() netfilter: nf_conntrack_pptp: fix compilation warning with W=1 build bonding: Fix reference count leak in bond_sysfs_slave_add. crypto: chelsio/chtls: properly set tp->lsndtime qlcnic: fix missing release in qlcnic_83xx_interrupt_test. xsk: Add overflow check for u64 division, stored into u32 bnxt_en: Fix accumulation of bp->net_stats_prev. esp6: get the right proto for transport mode in esp6_gso_encap netfilter: nf_conntrack_pptp: prevent buffer overflows in debug code netfilter: nfnetlink_cthelper: unbreak userspace helper support netfilter: ipset: Fix subcounter update skip netfilter: nft_reject_bridge: enable reject with bridge vlan ip_vti: receive ipip packet by calling ip_tunnel_rcv vti4: eliminated some duplicate code. xfrm: fix error in comment xfrm: fix a NULL-ptr deref in xfrm_local_error xfrm: fix a warning in xfrm_policy_insert_list xfrm interface: fix oops when deleting a x-netns interface xfrm: call xfrm_output_gso when inner_protocol is set in xfrm_output xfrm: allow to accept packets with ipv6 NEXTHDR_HOP in xfrm_input copy_xstate_to_kernel(): don't leave parts of destination uninitialized x86/dma: Fix max PFN arithmetic overflow on 32 bit systems mac80211: mesh: fix discovery timer re-arming issue / crash RDMA/core: Fix double destruction of uobject mmc: core: Fix recursive locking issue in CQE recovery path parisc: Fix kernel panic in mem_init() iommu: Fix reference count leak in iommu_group_alloc. include/asm-generic/topology.h: guard cpumask_of_node() macro argument fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() mm: remove VM_BUG_ON(PageSlab()) from page_mapcount() IB/ipoib: Fix double free of skb in case of multicast traffic in CM mode libceph: ignore pool overlay and cache logic on redirects ALSA: hda/realtek - Add new codec supported for ALC287 ALSA: usb-audio: Quirks for Gigabyte TRX40 Aorus Master onboard audio exec: Always set cap_ambient in cap_bprm_set_creds ALSA: usb-audio: mixer: volume quirk for ESS Technology Asus USB DAC ALSA: hda/realtek - Add a model for Thinkpad T570 without DAC workaround ALSA: hwdep: fix a left shifting 1 by 31 UB bug RDMA/pvrdma: Fix missing pci disable in pvrdma_pci_probe() mmc: block: Fix use-after-free issue for rpmb ARM: dts: bcm: HR2: Fix PPI interrupt types ARM: dts: bcm2835-rpi-zero-w: Fix led polarity ARM: dts/imx6q-bx50v3: Set display interface clock parents IB/qib: Call kobject_put() when kobject_init_and_add() fails gpio: exar: Fix bad handling for ida_simple_get error path ARM: uaccess: fix DACR mismatch with nested exceptions ARM: uaccess: integrate uaccess_save and uaccess_restore ARM: uaccess: consolidate uaccess asm to asm/uaccess-asm.h ARM: 8843/1: use unified assembler in headers ARM: 8970/1: decompressor: increase tag size Input: synaptics-rmi4 - fix error return code in rmi_driver_probe() Input: synaptics-rmi4 - really fix attn_data use-after-free Input: i8042 - add ThinkPad S230u to i8042 reset list Input: dlink-dir685-touchkeys - fix a typo in driver name Input: xpad - add custom init packet for Xbox One S controllers Input: evdev - call input_flush_device() on release(), not flush() Input: usbtouchscreen - add support for BonXeon TP samples: bpf: Fix build error cifs: Fix null pointer check in cifs_read riscv: stacktrace: Fix undefined reference to `walk_stackframe' IB/i40iw: Remove bogus call to netdev_master_upper_dev_get() net: freescale: select CONFIG_FIXED_PHY where needed usb: gadget: legacy: fix redundant initialization warnings usb: dwc3: pci: Enable extcon driver for Intel Merrifield cachefiles: Fix race between read_waiter and read_copier involving op->to_do gfs2: move privileged user check to gfs2_quota_lock_check net: microchip: encx24j600: add missed kthread_stop ALSA: usb-audio: add mapping for ASRock TRX40 Creator gpio: tegra: mask GPIO IRQs during IRQ shutdown ARM: dts: rockchip: fix pinctrl sub nodename for spi in rk322x.dtsi ARM: dts: rockchip: swap clock-names of gpu nodes arm64: dts: rockchip: swap interrupts interrupt-names rk3399 gpu node arm64: dts: rockchip: fix status for &gmac2phy in rk3328-evb.dts ARM: dts: rockchip: fix phy nodename for rk3228-evb mlxsw: spectrum: Fix use-after-free of split/unsplit/type_set in case reload fails net/mlx4_core: fix a memory leak bug. net: sun: fix missing release regions in cas_init_one(). net/mlx5: Annotate mutex destroy for root ns net/mlx5e: Update netdev txq on completions during closure sctp: Start shutdown on association restart if in SHUTDOWN-SENT state and socket is closed sctp: Don't add the shutdown timer if its already been added r8152: support additional Microsoft Surface Ethernet Adapter variant net sched: fix reporting the first-time use timestamp net: revert "net: get rid of an signed integer overflow in ip_idents_reserve()" net: qrtr: Fix passing invalid reference to qrtr_local_enqueue() net/mlx5: Add command entry handling completion net: ipip: fix wrong address family in init error path net: inet_csk: Fix so_reuseport bind-address cache in tb->fast* __netif_receive_skb_core: pass skb by reference net: dsa: mt7530: fix roaming from DSA user ports dpaa_eth: fix usage as DSA master, try 3 ax25: fix setsockopt(SO_BINDTODEVICE) ANDROID: modules: fix lockprove warning FROMGIT: USB: dummy-hcd: use configurable endpoint naming scheme UPSTREAM: usb: raw-gadget: fix null-ptr-deref when reenabling endpoints UPSTREAM: usb: raw-gadget: documentation updates UPSTREAM: usb: raw-gadget: support stalling/halting/wedging endpoints UPSTREAM: usb: raw-gadget: fix gadget endpoint selection UPSTREAM: usb: raw-gadget: improve uapi headers comments UPSTREAM: usb: raw-gadget: fix return value of ep read ioctls UPSTREAM: usb: raw-gadget: fix raw_event_queue_fetch locking UPSTREAM: usb: raw-gadget: Fix copy_to/from_user() checks f2fs: fix wrong discard space f2fs: compress: don't compress any datas after cp stop f2fs: remove unneeded return value of __insert_discard_tree() f2fs: fix wrong value of tracepoint parameter f2fs: protect new segment allocation in expand_inode_data f2fs: code cleanup by removing ifdef macro surrounding writeback: Avoid skipping inode writeback ANDROID: GKI: Update the ABI ANDROID: GKI: update whitelist ANDROID: GKI: support mm_event for FS/IO/UFS path ANDROID: net: bpf: permit redirect from ingress L3 to egress L2 devices at near max mtu FROMGIT: driver core: Update device link status correctly for SYNC_STATE_ONLY links UPSTREAM: driver core: Fix handling of SYNC_STATE_ONLY + STATELESS device links BACKPORT: driver core: Fix SYNC_STATE_ONLY device link implementation ANDROID: Bulk update the ABI xml and qcom whitelist Revert "ANDROID: Incremental fs: Avoid continually recalculating hashes" f2fs: avoid inifinite loop to wait for flushing node pages at cp_error f2fs: compress: fix zstd data corruption f2fs: add compressed/gc data read IO stat f2fs: fix potential use-after-free issue f2fs: compress: don't handle non-compressed data in workqueue f2fs: remove redundant assignment to variable err f2fs: refactor resize_fs to avoid meta updates in progress f2fs: use round_up to enhance calculation f2fs: introduce F2FS_IOC_RESERVE_COMPRESS_BLOCKS f2fs: Avoid double lock for cp_rwsem during checkpoint f2fs: report delalloc reserve as non-free in statfs for project quota f2fs: Fix wrong stub helper update_sit_info f2fs: compress: let lz4 compressor handle output buffer budget properly f2fs: remove blk_plugging in block_operations f2fs: introduce F2FS_IOC_RELEASE_COMPRESS_BLOCKS f2fs: shrink spinlock coverage f2fs: correctly fix the parent inode number during fsync() f2fs: introduce mempool for {,de}compress intermediate page allocation f2fs: introduce f2fs_bmap_compress() f2fs: support fiemap on compressed inode f2fs: support partial truncation on compressed inode f2fs: remove redundant compress inode check f2fs: use strcmp() in parse_options() f2fs: Use the correct style for SPDX License Identifier Conflicts: Documentation/devicetree/bindings Documentation/devicetree/bindings/display/mediatek/mediatek,dpi.txt Documentation/devicetree/bindings/usb/dwc3.txt drivers/media/v4l2-core/v4l2-ctrls.c drivers/mmc/core/queue.c drivers/mmc/host/sdhci-msm.c drivers/scsi/ufs/ufs-qcom.c drivers/slimbus/qcom-ngd-ctrl.c drivers/usb/gadget/composite.c fs/crypto/keyring.c fs/f2fs/data.c include/linux/fs.h include/linux/usb/gadget.h include/uapi/linux/v4l2-controls.h kernel/sched/cpufreq_schedutil.c kernel/sched/fair.c kernel/time/tick-sched.c mm/vmalloc.c net/netlink/genetlink.c net/qrtr/qrtr.c sound/core/compress_offload.c sound/soc/soc-compress.c Fixed errors: drivers/scsi/ufs/ufshcd.c drivers/soc/qcom/rq_stats.c Change-Id: I06ea6a6c3f239045e2947f27af617aa6f523bfdb Signed-off-by: Srinivasarao P <spathi@codeaurora.org>	2020-10-14 20:04:29 +05:30
Greg Kroah-Hartman	4d01d462e6	Merge 4.19.129 into android-4.19-stable Changes in 4.19.129 ipv6: fix IPV6_ADDRFORM operation logic net_failover: fixed rollback in net_failover_open() bridge: Avoid infinite loop when suppressing NS messages with invalid options vxlan: Avoid infinite loop when suppressing NS messages with invalid options tun: correct header offsets in napi frags mode selftests: bpf: fix use of undeclared RET_IF macro make 'user_access_begin()' do 'access_ok()' Fix 'acccess_ok()' on alpha and SH arch/openrisc: Fix issues with access_ok() x86: uaccess: Inhibit speculation past access_ok() in user_access_begin() lib: Reduce user_access_begin() boundaries in strncpy_from_user() and strnlen_user() btrfs: merge btrfs_find_device and find_device btrfs: Detect unbalanced tree with empty leaf before crashing btree operations crypto: talitos - fix ECB and CBC algs ivsize Input: mms114 - fix handling of mms345l ARM: 8977/1: ptrace: Fix mask for thumb breakpoint hook sched/fair: Don't NUMA balance for kthreads Input: synaptics - add a second working PNP_ID for Lenovo T470s drivers/net/ibmvnic: Update VNIC protocol version reporting powerpc/xive: Clear the page tables for the ESB IO mapping ath9k_htc: Silence undersized packet warnings RDMA/uverbs: Make the event_queue fds return POLLERR when disassociated x86/cpu/amd: Make erratum #1054 a legacy erratum perf probe: Accept the instance number of kretprobe event mm: add kvfree_sensitive() for freeing sensitive data objects aio: fix async fsync creds btrfs: tree-checker: Check level for leaves and nodes x86_64: Fix jiffies ODR violation x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs x86/speculation: Prevent rogue cross-process SSBD shutdown x86/reboot/quirks: Add MacBook6,1 reboot quirk efi/efivars: Add missing kobject_put() in sysfs entry creation error path ALSA: es1688: Add the missed snd_card_free() ALSA: hda/realtek - add a pintbl quirk for several Lenovo machines ALSA: usb-audio: Fix inconsistent card PM state after resume ALSA: usb-audio: Add vendor, product and profile name for HP Thunderbolt Dock ACPI: sysfs: Fix reference count leak in acpi_sysfs_add_hotplug_profile() ACPI: CPPC: Fix reference count leak in acpi_cppc_processor_probe() ACPI: GED: add support for _Exx / _Lxx handler methods ACPI: PM: Avoid using power resources if there are none for D0 cgroup, blkcg: Prepare some symbols for module and !CONFIG_CGROUP usages nilfs2: fix null pointer dereference at nilfs_segctor_do_construct() spi: dw: Fix controller unregister order spi: bcm2835aux: Fix controller unregister order spi: bcm-qspi: when tx/rx buffer is NULL set to 0 PM: runtime: clk: Fix clk_pm_runtime_get() error path crypto: cavium/nitrox - Fix 'nitrox_get_first_device()' when ndevlist is fully iterated ALSA: pcm: disallow linking stream to itself x86/{mce,mm}: Unmap the entire page if the whole page is affected and poisoned KVM: x86: Fix APIC page invalidation race kvm: x86: Fix L1TF mitigation for shadow MMU KVM: x86/mmu: Consolidate "is MMIO SPTE" code KVM: x86: only do L1TF workaround on affected processors x86/speculation: Change misspelled STIPB to STIBP x86/speculation: Add support for STIBP always-on preferred mode x86/speculation: Avoid force-disabling IBPB based on STIBP and enhanced IBRS. x86/speculation: PR_SPEC_FORCE_DISABLE enforcement for indirect branches. spi: No need to assign dummy value in spi_unregister_controller() spi: Fix controller unregister order spi: pxa2xx: Fix controller unregister order spi: bcm2835: Fix controller unregister order spi: pxa2xx: Balance runtime PM enable/disable on error spi: pxa2xx: Fix runtime PM ref imbalance on probe error crypto: virtio: Fix use-after-free in virtio_crypto_skcipher_finalize_req() crypto: virtio: Fix src/dst scatterlist calculation in __virtio_crypto_skcipher_do_req() crypto: virtio: Fix dest length calculation in __virtio_crypto_skcipher_do_req() selftests/net: in rxtimestamp getopt_long needs terminating null entry ovl: initialize error in ovl_copy_xattr proc: Use new_inode not new_inode_pseudo video: fbdev: w100fb: Fix a potential double free. KVM: nSVM: fix condition for filtering async PF KVM: nSVM: leave ASID aside in copy_vmcb_control_area KVM: nVMX: Consult only the "basic" exit reason when routing nested exit KVM: MIPS: Define KVM_ENTRYHI_ASID to cpu_asid_mask(&boot_cpu_data) KVM: MIPS: Fix VPN2_MASK definition for variable cpu_vmbits KVM: arm64: Make vcpu_cp1x() work on Big Endian hosts scsi: megaraid_sas: TM command refire leads to controller firmware crash ath9k: Fix use-after-free Read in ath9k_wmi_ctrl_rx ath9k: Fix use-after-free Write in ath9k_htc_rx_msg ath9x: Fix stack-out-of-bounds Write in ath9k_hif_usb_rx_cb ath9k: Fix general protection fault in ath9k_hif_usb_rx_cb Smack: slab-out-of-bounds in vsscanf drm/vkms: Hold gem object while still in-use mm/slub: fix a memory leak in sysfs_slab_add() fat: don't allow to mount if the FAT length == 0 perf: Add cond_resched() to task_function_call() agp/intel: Reinforce the barrier after GTT updates mmc: sdhci-msm: Clear tuning done flag while hs400 tuning ARM: dts: at91: sama5d2_ptc_ek: fix sdmmc0 node description mmc: sdio: Fix potential NULL pointer error in mmc_sdio_init_card() xen/pvcalls-back: test for errors when calling backend_connect() KVM: arm64: Synchronize sysreg state on injecting an AArch32 exception ACPI: GED: use correct trigger type field in _Exx / _Lxx handling drm: bridge: adv7511: Extend list of audio sample rates crypto: ccp -- don't "select" CONFIG_DMADEVICES media: si2157: Better check for running tuner in init objtool: Ignore empty alternatives spi: pxa2xx: Apply CS clk quirk to BXT net: atlantic: make hw_get_regs optional net: ena: fix error returning in ena_com_get_hash_function() efi/libstub/x86: Work around LLVM ELF quirk build regression arm64: cacheflush: Fix KGDB trap detection spi: dw: Zero DMA Tx and Rx configurations on stack arm64: insn: Fix two bugs in encoding 32-bit logical immediates ixgbe: Fix XDP redirect on archs with PAGE_SIZE above 4K MIPS: Loongson: Build ATI Radeon GPU driver as module Bluetooth: Add SCO fallback for invalid LMP parameters error kgdb: Disable WARN_CONSOLE_UNLOCKED for all kgdb kgdb: Prevent infinite recursive entries to the debugger spi: dw: Enable interrupts in accordance with DMA xfer mode clocksource: dw_apb_timer: Make CPU-affiliation being optional clocksource: dw_apb_timer_of: Fix missing clockevent timers btrfs: do not ignore error from btrfs_next_leaf() when inserting checksums ARM: 8978/1: mm: make act_mm() respect THREAD_SIZE batman-adv: Revert "disable ethtool link speed detection when auto negotiation off" mmc: meson-mx-sdio: trigger a soft reset after a timeout or CRC error spi: dw: Fix Rx-only DMA transfers x86/kvm/hyper-v: Explicitly align hcall param for kvm_hyperv_exit net: vmxnet3: fix possible buffer overflow caused by bad DMA value in vmxnet3_get_rss() staging: android: ion: use vmap instead of vm_map_ram brcmfmac: fix wrong location to get firmware feature tools api fs: Make xxx__mountpoint() more scalable e1000: Distribute switch variables for initialization dt-bindings: display: mediatek: control dpi pins mode to avoid leakage audit: fix a net reference leak in audit_send_reply() media: dvb: return -EREMOTEIO on i2c transfer failure. media: platform: fcp: Set appropriate DMA parameters MIPS: Make sparse_init() using top-down allocation Bluetooth: btbcm: Add 2 missing models to subver tables audit: fix a net reference leak in audit_list_rules_send() netfilter: nft_nat: return EOPNOTSUPP if type or flags are not supported selftests/bpf: Fix memory leak in extract_build_id() net: bcmgenet: set Rx mode before starting netif lib/mpi: Fix 64-bit MIPS build with Clang exit: Move preemption fixup up, move blocking operations down sched/core: Fix illegal RCU from offline CPUs drivers/perf: hisi: Fix typo in events attribute array net: lpc-enet: fix error return code in lpc_mii_init() media: cec: silence shift wrapping warning in __cec_s_log_addrs() net: allwinner: Fix use correct return type for ndo_start_xmit() powerpc/spufs: fix copy_to_user while atomic xfs: clean up the error handling in xfs_swap_extents Crypto/chcr: fix for ccm(aes) failed test MIPS: Truncate link address into 32bit for 32bit kernel mips: cm: Fix an invalid error code of INTVN__ERR kgdb: Fix spurious true from in_dbg_master() xfs: reset buffer write failure state on successful completion xfs: fix duplicate verification from xfs_qm_dqflush() platform/x86: intel-vbtn: Use acpi_evaluate_integer() platform/x86: intel-vbtn: Split keymap into buttons and switches parts platform/x86: intel-vbtn: Do not advertise switches to userspace if they are not there platform/x86: intel-vbtn: Also handle tablet-mode switch on "Detachable" and "Portable" chassis-types nvme: refine the Qemu Identify CNS quirk ath10k: Remove msdu from idr when management pkt send fails wcn36xx: Fix error handling path in 'wcn36xx_probe()' net: qed: Reduce RX and TX default ring count when running inside kdump kernel mt76: avoid rx reorder buffer overflow md: don't flush workqueue unconditionally in md_open veth: Adjust hard_start offset on redirect XDP frames net/mlx5e: IPoIB, Drop multicast packets that this interface sent rtlwifi: Fix a double free in _rtl_usb_tx_urb_setup() mwifiex: Fix memory corruption in dump_station x86/boot: Correct relocation destination on old linkers mips: MAAR: Use more precise address mask mips: Add udelay lpj numbers adjustment crypto: stm32/crc32 - fix ext4 chksum BUG_ON() crypto: stm32/crc32 - fix run-time self test issue. crypto: stm32/crc32 - fix multi-instance x86/mm: Stop printing BRK addresses m68k: mac: Don't call via_flush_cache() on Mac IIfx btrfs: qgroup: mark qgroup inconsistent if we're inherting snapshot to a new qgroup macvlan: Skip loopback packets in RX handler PCI: Don't disable decoding when mmio_always_on is set MIPS: Fix IRQ tracing when call handle_fpe() and handle_msa_fpe() bcache: fix refcount underflow in bcache_device_free() mmc: sdhci-msm: Set SDHCI_QUIRK_MULTIBLOCK_READ_ACMD12 quirk staging: greybus: sdio: Respect the cmd->busy_timeout from the mmc core mmc: via-sdmmc: Respect the cmd->busy_timeout from the mmc core ixgbe: fix signed-integer-overflow warning mmc: sdhci-esdhc-imx: fix the mask for tuning start point spi: dw: Return any value retrieved from the dma_transfer callback cpuidle: Fix three reference count leaks platform/x86: hp-wmi: Convert simple_strtoul() to kstrtou32() platform/x86: intel-hid: Add a quirk to support HP Spectre X2 (2015) platform/x86: intel-vbtn: Only blacklist SW_TABLET_MODE on the 9 / "Laptop" chasis-type string.h: fix incompatibility between FORTIFY_SOURCE and KASAN btrfs: include non-missing as a qualifier for the latest_bdev btrfs: send: emit file capabilities after chown mm: thp: make the THP mapcount atomic against __split_huge_pmd_locked() mm: initialize deferred pages with interrupts enabled ima: Fix ima digest hash table key calculation ima: Directly assign the ima_default_policy pointer to ima_rules evm: Fix possible memory leak in evm_calc_hmac_or_hash() ext4: fix EXT_MAX_EXTENT/INDEX to check for zeroed eh_max ext4: fix error pointer dereference ext4: fix race between ext4_sync_parent() and rename() PCI: Avoid Pericom USB controller OHCI/EHCI PME# defect PCI: Avoid FLR for AMD Matisse HD Audio & USB 3.0 PCI: Avoid FLR for AMD Starship USB 3.0 PCI: Add ACS quirk for iProc PAXB PCI: Add ACS quirk for Intel Root Complex Integrated Endpoints PCI: Remove unused NFP32xx IDs pci:ipmi: Move IPMI PCI class id defines to pci_ids.h hwmon/k10temp, x86/amd_nb: Consolidate shared device IDs x86/amd_nb: Add PCI device IDs for family 17h, model 30h PCI: add USR vendor id and use it in r8169 and w6692 driver PCI: Move Synopsys HAPS platform device IDs PCI: Move Rohm Vendor ID to generic list misc: pci_endpoint_test: Add the layerscape EP device support misc: pci_endpoint_test: Add support to test PCI EP in AM654x PCI: Add Synopsys endpoint EDDA Device ID PCI: Add NVIDIA GPU multi-function power dependencies PCI: Enable NVIDIA HDA controllers PCI: mediatek: Add controller support for MT7629 x86/amd_nb: Add PCI device IDs for family 17h, model 70h ALSA: lx6464es - add support for LX6464ESe pci express variant PCI: Add Genesys Logic, Inc. Vendor ID PCI: Add Amazon's Annapurna Labs vendor ID PCI: vmd: Add device id for VMD device 8086:9A0B x86/amd_nb: Add Family 19h PCI IDs PCI: Add Loongson vendor ID serial: 8250_pci: Move Pericom IDs to pci_ids.h PCI: Make ACS quirk implementations more uniform PCI: Unify ACS quirk desired vs provided checking PCI: Generalize multi-function power dependency device links btrfs: fix error handling when submitting direct I/O bio btrfs: fix wrong file range cleanup after an error filling dealloc range ima: Call ima_calc_boot_aggregate() in ima_eventdigest_init() PCI: Program MPS for RCiEP devices e1000e: Disable TSO for buffer overrun workaround e1000e: Relax condition to trigger reset for ME workaround carl9170: remove P2P_GO support media: go7007: fix a miss of snd_card_free Bluetooth: hci_bcm: fix freeing not-requested IRQ b43legacy: Fix case where channel status is corrupted b43: Fix connection problem with WPA3 b43_legacy: Fix connection problem with WPA3 media: ov5640: fix use of destroyed mutex igb: Report speed and duplex as unknown when device is runtime suspended power: vexpress: add suppress_bind_attrs to true pinctrl: samsung: Correct setting of eint wakeup mask on s5pv210 pinctrl: samsung: Save/restore eint_mask over suspend for EINT_TYPE GPIOs gnss: sirf: fix error return code in sirf_probe() sparc32: fix register window handling in genregs32_[gs]et() sparc64: fix misuses of access_process_vm() in genregs32_[sg]et() dm crypt: avoid truncating the logical block size alpha: fix memory barriers so that they conform to the specification kernel/cpu_pm: Fix uninitted local in cpu_pm ARM: tegra: Correct PL310 Auxiliary Control Register initialization ARM: dts: exynos: Fix GPIO polarity for thr GalaxyS3 CM36651 sensor's bus ARM: dts: at91: sama5d2_ptc_ek: fix vbus pin ARM: dts: s5pv210: Set keep-power-in-suspend for SDHCI1 on Aries drivers/macintosh: Fix memleak in windfarm_pm112 driver powerpc/64s: Don't let DT CPU features set FSCR_DSCR powerpc/64s: Save FSCR to init_task.thread.fscr after feature init kbuild: force to build vmlinux if CONFIG_MODVERSION=y sunrpc: svcauth_gss_register_pseudoflavor must reject duplicate registrations. sunrpc: clean up properly in gss_mech_unregister() mtd: rawnand: brcmnand: fix hamming oob layout mtd: rawnand: pasemi: Fix the probe error path w1: omap-hdq: cleanup to add missing newline for some dev_dbg perf probe: Do not show the skipped events perf probe: Fix to check blacklist address correctly perf probe: Check address correctness by map instead of _etext perf symbols: Fix debuginfo search for Ubuntu Linux 4.19.129 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I7b1108d90ee1109a28fe488a4358b7a3e101d9c9	2020-06-22 10:50:54 +02:00
Jann Horn	fb020dcd62	exit: Move preemption fixup up, move blocking operations down [ Upstream commit 586b58cac8b4683eb58a1446fbc399de18974e40 ] With CONFIG_DEBUG_ATOMIC_SLEEP=y and CONFIG_CGROUPS=y, kernel oopses in non-preemptible context look untidy; after the main oops, the kernel prints a "sleeping function called from invalid context" report because exit_signals() -> cgroup_threadgroup_change_begin() -> percpu_down_read() can sleep, and that happens before the preempt_count_set(PREEMPT_ENABLED) fixup. It looks like the same thing applies to profile_task_exit() and kcov_task_exit(). Fix it by moving the preemption fixup up and the calls to profile_task_exit() and kcov_task_exit() down. Fixes: `1dc0fffc48` ("sched/core: Robustify preemption leak checks") Signed-off-by: Jann Horn <jannh@google.com> Signed-off-by: Peter Zijlstra (Intel) <peterz@infradead.org> Link: https://lkml.kernel.org/r/20200305220657.46800-1-jannh@google.com Signed-off-by: Sasha Levin <sashal@kernel.org>	2020-06-22 09:05:14 +02:00
Linus Torvalds	216284c4a1	make 'user_access_begin()' do 'access_ok()' commit 594cc251fdd0d231d342d88b2fdff4bc42fb0690 upstream. Originally, the rule used to be that you'd have to do access_ok() separately, and then user_access_begin() before actually doing the direct (optimized) user access. But experience has shown that people then decide not to do access_ok() at all, and instead rely on it being implied by other operations or similar. Which makes it very hard to verify that the access has actually been range-checked. If you use the unsafe direct user accesses, hardware features (either SMAP - Supervisor Mode Access Protection - on x86, or PAN - Privileged Access Never - on ARM) do force you to use user_access_begin(). But nothing really forces the range check. By putting the range check into user_access_begin(), we actually force people to do the right thing (tm), and the range check vill be visible near the actual accesses. We have way too long a history of people trying to avoid them. Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org> Signed-off-by: Miles Chen <miles.chen@mediatek.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2020-06-22 09:04:58 +02:00
Ivaylo Georgiev	44bb576a7a	Merge android-4.19.73 (`8ca5759`) into msm-4.19 * refs/heads/tmp-8ca5759: BACKPORT: make 'user_access_begin()' do 'access_ok()' ABI update for 4.19.72 ANDROID: first pass cuttlefish GKI modularization ANDROID: GKI: enable CONFIG_TIPC for x86 ANDROID: GKI: enable CONFIG_SPI for x86 ANDROID: update abi for 4.19.69 ANDROID: update ABI dump UPSTREAM: lib/test_meminit.c: use GFP_ATOMIC in RCU critical section UPSTREAM: mm: slub: Fix slab walking for init_on_free UPSTREAM: lib/test_meminit.c: minor test fixes UPSTREAM: lib/test_meminit.c: fix -Wmaybe-uninitialized false positive UPSTREAM: lib: introduce test_meminit module UPSTREAM: mm: init: report memory auto-initialization features at boot time UPSTREAM: mm: security: introduce init_on_alloc=1 and init_on_free=1 boot options UPSTREAM: arm64: move jump_label_init() before parse_early_param() ANDROID: update ABI dump ANDROID: gki_defconfig: enable CONFIG_QCOM_{COMMAND_DB,RPMH,PDC} ANDROID: cuttlefish: overlayfs: regression ANDROID: gki_defconfig enable CONFIG_SPARSEMEM_VMEMMAP ANDROID: update ABI for EFI, SCHED_TUNE ANDROID: gki_defconfig: Enable SCHED_TUNE ANDROID: gki_defconfig: Minimally enable EFI ANDROID: Add a tracepoint for mapping inode to full path ANDROID: update ABI for CONFIG_NR_CPUS=32 ANDROID: gki_defconfig: set CONFIG_NR_CPUS=32 ANDROID: gki_defconfig: set CONFIG_NR_CPUS=32 (x86_64) ANDROID: update ABI for CONFIG_TIPC ANDROID: gki_defconfig: enable CONFIG_TIPC BACKPORT: arch: add pidfd and io_uring syscalls everywhere ANDROID: update ABI dump UPSTREAM: dma-buf: add show_fdinfo handler UPSTREAM: dma-buf: add DMA_BUF_SET_NAME ioctls UPSTREAM: dma-buf: give each buffer a full-fledged inode ANDROID: Update the expected ABI UPSTREAM: drm/virtio: Fix cache entry creation race. UPSTREAM: drm/virtio: Wake up all waiters when capset response comes in. UPSTREAM: drm/virtio: Ensure cached capset entries are valid before copying. UPSTREAM: drm/virtio: use u64_to_user_ptr macro UPSTREAM: drm/virtio: remove irrelevant DRM_UNLOCKED flag UPSTREAM: drm/virtio: Remove redundant return type UPSTREAM: drm/virtio: allocate fences with GFP_KERNEL UPSTREAM: drm/virtio: add trace events for commands UPSTREAM: drm/virtio: trace drm_fence_emit BACKPORT: drm/virtio: set seqno for dma-fence UPSTREAM: drm/virtio: move drm_connector_update_edid_property() call UPSTREAM: drm/virtio: add missing drm_atomic_helper_shutdown() call. UPSTREAM: drm/virtio: rework resource creation workflow. UPSTREAM: drm/virtio: params struct for virtio_gpu_cmd_create_resource_3d() UPSTREAM: drm/virtio: params struct for virtio_gpu_cmd_create_resource() UPSTREAM: drm/virtio: use struct to pass params to virtio_gpu_object_create() UPSTREAM: drm/virtio: move virtio_gpu_object_{attach, detach} calls. UPSTREAM: drm/virtio: add virtio-gpu-features debugfs file. UPSTREAM: drm/virtio: remove set but not used variable 'vgdev' BACKPORT: drm/virtio: implement prime export UPSTREAM: drm/virtio: remove prime pin/unpin callbacks. UPSTREAM: drm/virtio: implement prime mmap BACKPORT: Revert "drm/virtio: drop prime import/export callbacks" UPSTREAM: drm/virtio: drop prime import/export callbacks UPSTREAM: drm/virtio: do NOT reuse resource ids UPSTREAM: drm/virtio: drop virtio_gpu_fence_cleanup() UPSTREAM: drm/virtio: fix pageflip flush UPSTREAM: drm/virtio: log error responses UPSTREAM: drm/virtio: Add missing virtqueue reset UPSTREAM: drm/virtio: Remove incorrect kfree() UPSTREAM: drm/virtio: switch to generic fbdev emulation UPSTREAM: drm/virtio: virtio_gpu_cmd_resource_create_3d: drop unused fence arg UPSTREAM: drm/virtio: fence: pass plain pointer UPSTREAM: drm/virtio: add edid support UPSTREAM: virtio-gpu: add VIRTIO_GPU_F_EDID feature UPSTREAM: drm/virtio: fix memory leak of vfpriv on error return path UPSTREAM: drm/virtio: bump driver version after explicit synchronization addition UPSTREAM: drm/virtio: add in/out fence support for explicit synchronization UPSTREAM: drm/virtio: add uapi for in and out explicit fences UPSTREAM: drm/virtio: add virtio_gpu_alloc_fence() UPSTREAM: drm/virtio: Use IDAs more efficiently UPSTREAM: drm/virtio: Handle error from virtio_gpu_resource_id_get UPSTREAM: gpu/drm/virtio/virtgpu_vq.c: Use kmem_cache_zalloc UPSTREAM: drm/virtio: Handle context ID allocation errors UPSTREAM: drm/virtio: Replace IDRs with IDAs UPSTREAM: drm/virtio: fix resource id handling UPSTREAM: drm/virtio: drop resource_id argument. UPSTREAM: drm/virtio: use virtio_gpu_object->hw_res_handle in virtio_gpu_resource_create_ioctl() UPSTREAM: drm/virtio: use virtio_gpu_object->hw_res_handle in virtio_gpu_mode_dumb_create() UPSTREAM: drm/virtio: use virtio_gpu_object->hw_res_handle in virtio_gpufb_create() BACKPORT: drm/virtio: track created object state UPSTREAM: drm/virtio: document drm_dev_set_unique workaround UPSTREAM: virtio: Support prime objects vmap/vunmap BACKPORT: virtio: Rework virtio_gpu_object_kmap() UPSTREAM: drm/virtio: pass virtio_gpu_object to virtio_gpu_cmd_transfer_to_host_{2d, 3d} UPSTREAM: drm/virtio: add dma sync for dma mapped virtio gpu framebuffer pages UPSTREAM: drm/virtio: Remove set but not used variable 'bo' UPSTREAM: drm/virtio: add iommu support. UPSTREAM: drm/virtio: add virtio_gpu_object_detach() function UPSTREAM: drm/virtio: track virtual output state UPSTREAM: drm/virtio: fix bounds check in virtio_gpu_cmd_get_capset() UPSTREAM: drm/virtio: Replace ttm_bo_unref with ttm_bo_put UPSTREAM: drm/virtio: Replace ttm_bo_reference with ttm_bo_get UPSTREAM: drm/virtio: Replace drm_dev_unref with drm_dev_put UPSTREAM: gpu: drm: virtio: code cleanup UPSTREAM: drm: byteorder: add DRM_FORMAT_HOST_* UPSTREAM: drm: add drm_connector_attach_edid_property() UPSTREAM: drm/prime: Add drm_gem_prime_mmap() ANDROID: Remove unused cuttlefish build infra f2fs: fix build error on android tracepoints ANDROID: sched/fair: Cap transient util in stune ANDROID: update ABI for 4.19.66 Adding GKI Ramdisk to gki config ANDROID: Removed unnecessary modules from cuttlefish. UPSTREAM: pidfd: fix a poll race when setting exit_state BACKPORT: arch: wire-up pidfd_open() UPSTREAM: pid: add pidfd_open() UPSTREAM: pidfd: add polling support UPSTREAM: signal: improve comments UPSTREAM: fork: do not release lock that wasn't taken UPSTREAM: signal: support CLONE_PIDFD with pidfd_send_signal UPSTREAM: clone: add CLONE_PIDFD UPSTREAM: Make anon_inodes unconditional UPSTREAM: signal: use fdget() since we don't allow O_PATH UPSTREAM: signal: don't silently convert SI_USER signals to non-current pidfd BACKPORT: signal: add pidfd_send_signal() syscall Conflicts: arch/arm64/configs/cuttlefish_defconfig arch/x86/configs/x86_64_cuttlefish_defconfig arch/x86/entry/syscalls/syscall_64.tbl build.config.cuttlefish.aarch64 build.config.cuttlefish.x86_64 drivers/dma-buf/dma-buf.c fs/userfaultfd.c include/linux/dma-buf.h kernel/sched/fair.c Change-Id: I65d7949be7c228000f94ad9118f2d80a8fa45a1b Signed-off-by: Ivaylo Georgiev <irgeorgiev@codeaurora.org>	2020-02-24 07:44:16 -08:00
Ivaylo Georgiev	9e52135608	Merge android-4.19-q.94 (`dabb11d`) into msm-4.19 * refs/heads/tmp-dabb11d: Revert "dt-bindings: clock: renesas: rcar-usb2-clock-sel: Fix typo in example" Linux 4.19.94 perf/x86/intel/bts: Fix the use of page_private() xen/blkback: Avoid unmapping unmapped grant pages s390/smp: fix physical to logical CPU map for SMT ubifs: ubifs_tnc_start_commit: Fix OOB in layout_in_gaps net: add annotations on hh->hh_len lockless accesses xfs: periodically yield scrub threads to the scheduler ath9k_htc: Discard undersized packets ath9k_htc: Modify byte order for an error message net: core: limit nested device depth tcp: annotate tp->rcv_nxt lockless reads rxrpc: Fix possible NULL pointer access in ICMP handling KVM: PPC: Book3S HV: use smp_mb() when setting/clearing host_ipi flag selftests: rtnetlink: add addresses with fixed life time powerpc/pseries/hvconsole: Fix stack overread via udbg drm/mst: Fix MST sideband up-reply failure handling scsi: qedf: Do not retry ELS request if qedf_alloc_cmd fails bdev: Refresh bdev size for disks without partitioning bdev: Factor out bdev revalidation into a common helper fix compat handling of FICLONERANGE, FIDEDUPERANGE and FS_IOC_FIEMAP tty: serial: msm_serial: Fix lockup for sysrq and oops arm64: dts: meson: odroid-c2: Disable usb_otg bus to avoid power failed warning dt-bindings: clock: renesas: rcar-usb2-clock-sel: Fix typo in example media: usb: fix memory leak in af9005_identify_state regulator: ab8500: Remove AB8505 USB regulator media: flexcop-usb: ensure -EIO is returned on error condition Bluetooth: Fix memory leak in hci_connect_le_scan Bluetooth: delete a stray unlock Bluetooth: btusb: fix PM leak in error case of setup platform/x86: pmc_atom: Add Siemens CONNECT X300 to critclk_systems DMI table xfs: don't check for AG deadlock for realtime files in bunmapi ACPI: sysfs: Change ACPI_MASKABLE_GPE_MAX to 0x100 HID: i2c-hid: Reset ALPS touchpads on resume nfsd4: fix up replay_matches_cache() PM / devfreq: Check NULL governor in available_governors_show drm/msm: include linux/sched/task.h ftrace: Avoid potential division by zero in function profiler arm64: Revert support for execute-only user mappings exit: panic before exit_mm() on global init exit ALSA: firewire-motu: Correct a typo in the clock proc string ALSA: cs4236: fix error return comparison of an unsigned integer apparmor: fix aa_xattrs_match() may sleep while holding a RCU lock tracing: Fix endianness bug in histogram trigger tracing: Have the histogram compare functions convert to u64 first tracing: Avoid memory leak in process_system_preds() tracing: Fix lock inversion in trace_event_enable_tgid_record() rseq/selftests: Fix: Namespace gettid() for compatibility with glibc 2.30 riscv: ftrace: correct the condition logic in function graph tracer gpiolib: fix up emulated open drain outputs libata: Fix retrieving of active qcs ata: ahci_brcm: BCM7425 AHCI requires AHCI_HFLAG_DELAY_ENGINE ata: ahci_brcm: Add missing clock management during recovery ata: ahci_brcm: Allow optional reset controller to be used ata: ahci_brcm: Fix AHCI resources management ata: libahci_platform: Export again ahci_platform_<en/dis>able_phys() compat_ioctl: block: handle BLKREPORTZONE/BLKRESETZONE compat_ioctl: block: handle Persistent Reservations dmaengine: Fix access to uninitialized dma_slave_caps locks: print unsigned ino in /proc/locks pstore/ram: Write new dumps to start of recycled zones mm: move_pages: return valid node id in status if the page is already on the target node memcg: account security cred as well to kmemcg mm/zsmalloc.c: fix the migrated zspage statistics. media: cec: check 'transmit_in_progress', not 'transmitting' media: cec: avoid decrementing transmit_queue_sz if it is 0 media: cec: CEC 2.0-only bcast messages were ignored media: pulse8-cec: fix lost cec_transmit_attempt_done() call MIPS: Avoid VDSO ABI breakage due to global register variable drm/sun4i: hdmi: Remove duplicate cleanup calls ALSA: hda/realtek - Add headset Mic no shutup for ALC283 ALSA: usb-audio: set the interface format after resume on Dell WD19 ALSA: usb-audio: fix set_format altsetting sanity check ALSA: ice1724: Fix sleep-in-atomic in Infrasonic Quartet support code netfilter: nft_tproxy: Fix port selector on Big Endian drm: limit to INT_MAX in create_blob ioctl taskstats: fix data-race xfs: fix mount failure crash on invalid iclog memory access ALSA: hda - fixup for the bass speaker on Lenovo Carbon X1 7th gen ALSA: hda/realtek - Enable the bass speaker of ASUS UX431FLC ALSA: hda/realtek - Add Bass Speaker and fixed dac for bass speaker PM / hibernate: memory_bm_find_bit(): Tighten node optimisation xen/balloon: fix ballooned page accounting without hotplug enabled xen-blkback: prevent premature module unload IB/mlx5: Fix steering rule of drop and count IB/mlx4: Follow mirror sequence of device add during device removal s390/cpum_sf: Avoid SBD overflow condition in irq handler s390/cpum_sf: Adjust sampling interval to avoid hitting sample limits md: raid1: check rdev before reference in raid1_sync_request func afs: Fix creation calls in the dynamic root to fail with EOPNOTSUPP net: make socket read/write_iter() honor IOCB_NOWAIT usb: gadget: fix wrong endpoint desc drm/nouveau: Move the declaration of struct nouveau_conn_atom up a bit scsi: libsas: stop discovering if oob mode is disconnected scsi: iscsi: qla4xxx: fix double free in probe scsi: qla2xxx: Ignore PORT UPDATE after N2N PLOGI scsi: qla2xxx: Send Notify ACK after N2N PLOGI scsi: qla2xxx: Configure local loop for N2N target scsi: qla2xxx: Fix PLOGI payload and ELS IOCB dump length scsi: qla2xxx: Don't call qlt_async_event twice scsi: qla2xxx: Drop superfluous INIT_WORK of del_work scsi: lpfc: Fix memory leak on lpfc_bsg_write_ebuf_set func rxe: correctly calculate iCRC for unaligned payloads RDMA/cma: add missed unregister_pernet_subsys in init failure afs: Fix SELinux setting security label on /afs afs: Fix afs_find_server lookups for ipv4 peers PM / devfreq: Don't fail devfreq_dev_release if not in list PM / devfreq: Set scaling_max_freq to max on OPP notifier error PM / devfreq: Fix devfreq_notifier_call returning errno iio: adc: max9611: Fix too short conversion time delay drm/amd/display: Fixed kernel panic when booting with DP-to-HDMI dongle drm/amdgpu: add cache flush workaround to gfx8 emit_fence drm/amdgpu: add check before enabling/disabling broadcast mode nvme-fc: fix double-free scenarios on hw queues nvme_fc: add module to ops template to allow module references Conflicts: drivers/devfreq/devfreq.c drivers/gpu/drm/drm_dp_mst_topology.c drivers/gpu/drm/drm_property.c Change-Id: Iad80571bea0a2197ea36a70c425c61a66c0cf0bc Signed-off-by: Ivaylo Georgiev <irgeorgiev@codeaurora.org>	2020-02-03 21:41:48 -08:00
chenqiwu	b9227aacdc	exit: panic before exit_mm() on global init exit commit 43cf75d96409a20ef06b756877a2e72b10a026fc upstream. Currently, when global init and all threads in its thread-group have exited we panic via: do_exit() -> exit_notify() -> forget_original_parent() -> find_child_reaper() This makes it hard to extract a useable coredump for global init from a kernel crashdump because by the time we panic exit_mm() will have already released global init's mm. This patch moves the panic futher up before exit_mm() is called. As was the case previously, we only panic when global init and all its threads in the thread-group have exited. Signed-off-by: chenqiwu <chenqiwu@xiaomi.com> Acked-by: Christian Brauner <christian.brauner@ubuntu.com> Acked-by: Oleg Nesterov <oleg@redhat.com> [christian.brauner@ubuntu.com: fix typo, rewrite commit message] Link: https://lore.kernel.org/r/1576736993-10121-1-git-send-email-qiwuchen55@gmail.com Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2020-01-09 10:19:02 +01:00
chenqiwu	146c22ecde	UPSTREAM: exit: panic before exit_mm() on global init exit Currently, when global init and all threads in its thread-group have exited we panic via: do_exit() -> exit_notify() -> forget_original_parent() -> find_child_reaper() This makes it hard to extract a useable coredump for global init from a kernel crashdump because by the time we panic exit_mm() will have already released global init's mm. This patch moves the panic futher up before exit_mm() is called. As was the case previously, we only panic when global init and all its threads in the thread-group have exited. Signed-off-by: chenqiwu <chenqiwu@xiaomi.com> Acked-by: Christian Brauner <christian.brauner@ubuntu.com> Acked-by: Oleg Nesterov <oleg@redhat.com> [christian.brauner@ubuntu.com: fix typo, rewrite commit message] Link: https://lore.kernel.org/r/1576736993-10121-1-git-send-email-qiwuchen55@gmail.com Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com> (cherry picked from commit 43cf75d96409a20ef06b756877a2e72b10a026fc) Bug: 146789558 Change-Id: Icff81267e8c49bf1d332773351d1b47cb8cbac4a Signed-off-by: Alistair Delva <adelva@google.com>	2020-01-03 23:18:17 +00:00
Linus Torvalds	ac351de9dd	BACKPORT: make 'user_access_begin()' do 'access_ok()' upstream commit 594cc251fdd0 ("make 'user_access_begin()' do 'access_ok()'") Originally, the rule used to be that you'd have to do access_ok() separately, and then user_access_begin() before actually doing the direct (optimized) user access. But experience has shown that people then decide not to do access_ok() at all, and instead rely on it being implied by other operations or similar. Which makes it very hard to verify that the access has actually been range-checked. If you use the unsafe direct user accesses, hardware features (either SMAP - Supervisor Mode Access Protection - on x86, or PAN - Privileged Access Never - on ARM) do force you to use user_access_begin(). But nothing really forces the range check. By putting the range check into user_access_begin(), we actually force people to do the right thing (tm), and the range check vill be visible near the actual accesses. We have way too long a history of people trying to avoid them. Bug: 135368228 Change-Id: I4ca0e4566ea080fa148c5e768bb1a0b6f7201c01 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>	2019-09-12 11:28:03 +00:00
Ivaylo Georgiev	a8afaca46b	Merge android-4.19-q.66 (`5118163`) into msm-4.19 * refs/heads/tmp-5118163: Linux 4.19.66 spi: bcm2835: Fix 3-wire mode if DMA is enabled cgroup: Fix css_task_iter_advance_css_set() cset skip condition cgroup: css_task_iter_skip()'d iterators must be advanced before accessed cgroup: Include dying leaders with live threads in PROCS iterations cgroup: Implement css_task_iter_skip() cgroup: Call cgroup_release() before __exit_signal() compat_ioctl: pppoe: fix PPPOEIOCSFWD handling r8169: don't use MSI before RTL8168d net/mlx5e: Prevent encap flow counter update async to user query net/mlx5: Fix modify_cq_in alignment tun: mark small packets as owned by the tap sock tipc: compat: allow tipc commands without arguments ocelot: Cancel delayed work before wq destruction NFC: nfcmrvl: fix gpio-handling regression net/smc: do not schedule tx_work in SMC_CLOSED state net: sched: use temporary variable for actions indexes net sched: update vlan action for batched events operations net: sched: Fix a possible null-pointer dereference in dequeue_func() net: qualcomm: rmnet: Fix incorrect UL checksum offload logic net: phylink: Fix flow control for fixed-link net/mlx5: Use reversed order when unregister devices net/mlx5e: always initialize frag->last_in_page net: fix ifindex collision during namespace removal net: bridge: mcast: don't delete permanent entries when fast leave is enabled net: bridge: delete local fdb on device init failure mvpp2: refactor MTU change code mvpp2: fix panic on module removal mlxsw: spectrum: Fix error path in mlxsw_sp_module_init() ipip: validate header length in ipip_tunnel_xmit ip6_tunnel: fix possible use-after-free on xmit ip6_gre: reload ipv6h in prepare_ip6gre_xmit_ipv6 ife: error out when nla attributes are empty bnx2x: Disable multi-cos feature. atm: iphase: Fix Spectre v1 vulnerability IB: directly cast the sockaddr union to aockaddr HID: Add quirk for HP X1200 PIXART OEM mouse HID: wacom: fix bit shift for Cintiq Companion 2 libnvdimm/bus: Fix wait_nvdimm_bus_probe_idle() ABBA deadlock libnvdimm/bus: Prepare the nd_ioctl() path to be re-entrant libnvdimm/region: Register badblocks before namespaces libnvdimm/bus: Prevent duplicate device_unregister() calls drivers/base: Introduce kill_device() driver core: Establish order of operations for device_add and device_del via bitflag gcc-9: don't warn about uninitialized variable scsi: fcoe: Embed fc_rport_priv in fcoe_rport structure Change-Id: Id10478edd741fd55ffa841c4ed7c608d9ece3bbb Signed-off-by: Ivaylo Georgiev <irgeorgiev@codeaurora.org>	2019-08-14 04:56:34 -07:00
Suren Baghdasaryan	0c4addb718	UPSTREAM: pidfd: fix a poll race when setting exit_state There is a race between reading task->exit_state in pidfd_poll and writing it after do_notify_parent calls do_notify_pidfd. Expected sequence of events is: CPU 0 CPU 1 ------------------------------------------------ exit_notify do_notify_parent do_notify_pidfd tsk->exit_state = EXIT_DEAD pidfd_poll if (tsk->exit_state) However nothing prevents the following sequence: CPU 0 CPU 1 ------------------------------------------------ exit_notify do_notify_parent do_notify_pidfd pidfd_poll if (tsk->exit_state) tsk->exit_state = EXIT_DEAD This causes a polling task to wait forever, since poll blocks because exit_state is 0 and the waiting task is not notified again. A stress test continuously doing pidfd poll and process exits uncovered this bug. To fix it, we make sure that the task's exit_state is always set before calling do_notify_pidfd. Fixes: b53b0b9d9a6 ("pidfd: add polling support") Cc: kernel-team@android.com Cc: Oleg Nesterov <oleg@redhat.com> Signed-off-by: Suren Baghdasaryan <surenb@google.com> Signed-off-by: Joel Fernandes (Google) <joel@joelfernandes.org> Link: https://lore.kernel.org/r/20190717172100.261204-1-joel@joelfernandes.org [christian@brauner.io: adapt commit message and drop unneeded changes from wait_task_zombie] Signed-off-by: Christian Brauner <christian@brauner.io> (cherry picked from commit b191d6491be67cef2b3fa83015561caca1394ab9) Bug: 135608568 Test: test program using syscall(__NR_sys_pidfd_open,..) and poll() Change-Id: Ife81348ae3c3b6f5f8caac0c2f9bacd656582b31 Signed-off-by: Suren Baghdasaryan <surenb@google.com>	2019-08-12 13:36:37 -04:00
Tejun Heo	7528e95b75	cgroup: Call cgroup_release() before __exit_signal() commit 6b115bf58e6f013ca75e7115aabcbd56c20ff31d upstream. cgroup_release() calls cgroup_subsys->release() which is used by the pids controller to uncharge its pid. We want to use it to manage iteration of dying tasks which requires putting it before __unhash_process(). Move cgroup_release() above __exit_signal(). While this makes it uncharge before the pid is freed, pid is RCU freed anyway and the window is very narrow. Signed-off-by: Tejun Heo <tj@kernel.org> Cc: Oleg Nesterov <oleg@redhat.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2019-08-09 17:52:34 +02:00
Ivaylo Georgiev	35c3faa19f	Merge android-4.19.34 (`d885da6`) into msm-4.19 * refs/heads/tmp-d885da6: Revert "coresight: etm4x: Add support to enable ETMv4.2" Revert "usb: dwc3: gadget: Fix OTG events when gadget driver isn't loaded" Linux 4.19.34 kprobes/x86: Blacklist non-attachable interrupt functions bcache: fix potential div-zero error of writeback_rate_p_term_inverse ACPI / video: Extend chassis-type detection with a "Lunch Box" check net: stmmac: Avoid one more sometimes uninitialized Clang warning drm/dp/mst: Configure no_stop_bit correctly for remote i2c xfers Input: soc_button_array - fix mapping of the 5th GPIO in a PNP0C40 device dmaengine: tegra: avoid overflow of byte tracking clk: rockchip: fix frac settings of GPLL clock for rk3328 clk: meson: clean-up clock registration drm/fb-helper: fix leaks in error path of drm_fb_helper_fbdev_setup x86/build: Mark per-CPU symbols as absolute explicitly for LLD wlcore: Fix memory leak in case wl12xx_fetch_firmware failure brcmfmac: Use firmware_request_nowarn for the clm_blob selinux: do not override context on context mounts x86/build: Specify elf_i386 linker emulation explicitly for i386 objects drm/nouveau: Stop using drm_crtc_force_disable drm: Auto-set allow_fb_modifiers when given modifiers at plane init pinctrl: meson: meson8b: add the eth_rxd2 and eth_rxd3 pins regulator: act8865: Fix act8600_sudcdc_voltage_ranges setting media: s5p-jpeg: Check for fmt_ver_flag when doing fmt enumeration media: rcar-vin: Allow independent VIN link enablement netfilter: physdev: relax br_netfilter dependency dmaengine: qcom_hidma: initialize tx flags in hidma_prep_dma_* dmaengine: qcom_hidma: assign channel cookie correctly dmaengine: imx-dma: fix warning comparison of distinct pointer types cpu/hotplug: Mute hotplug lockdep during init hpet: Fix missing '=' character in the __setup() code of hpet_mmap_enable f2fs: UBSAN: set boolean value iostat_enable correctly HID: intel-ish: ipc: handle PIMR before ish_wakeup also clear PISR busy_clear bit soc/tegra: fuse: Fix illegal free of IO base address hwrng: virtio - Avoid repeated init of completion media: mt9m111: set initial frame size other than 0x0 perf script python: Add trace_context extension module to sys.modules perf script python: Use PyBytes for attr in trace-event-python platform/x86: intel-hid: Missing power button release on some Dell models usb: dwc3: gadget: Fix OTG events when gadget driver isn't loaded ALSA: dice: add support for Solid State Logic Duende Classic/Mini drm/amd/display: Enable vblank interrupt during CRC capture powerpc/pseries: Perform full re-add of CPU for topology update post-migration tty: increase the default flip buffer limit to 2*640K backlight: pwm_bl: Use gpiod_get_value_cansleep() to get initial state cgroup/pids: turn cgroup_subsys->free() into cgroup_subsys->release() to fix the accounting powerpc/64s: Clear on-stack exception marker upon exception return selftests/bpf: skip verifier tests for unsupported program types bpf: fix missing prototype warnings block, bfq: fix in-service-queue check for queue merging ARM: avoid Cortex-A9 livelock on tight dmb loops ARM: 8830/1: NOMMU: Toggle only bits in EXC_RETURN we are really care of mt7601u: bump supported EEPROM version soc: qcom: gsbi: Fix error handling in gsbi_probe() efi/arm/arm64: Allow SetVirtualAddressMap() to be omitted ARM: dts: lpc32xx: Remove leading 0x and 0s from bindings notation drm/vkms: Bugfix extra vblank frame sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() efi/memattr: Don't bail on zero VA if it equals the region's PA sched/debug: Initialize sd_sysctl_cpus if !CONFIG_CPUMASK_OFFSTACK ASoC: fsl-asoc-card: fix object reference leaks in fsl_asoc_card_probe iwlwifi: mvm: fix RFH config command with >=10 CPUs staging: spi: mt7621: Add return code check on device_reset() i2c: of: Try to find an I2C adapter matching the parent platform/x86: intel_pmc_core: Fix PCH IP sts reading e1000e: Exclude device from suspend direct complete optimization e1000e: fix cyclic resets at link up with active tx perf/aux: Make perf_event accessible to setup_aux() drm/amd/display: Disconnect mpcc when changing tg drm/amd/display: Don't re-program planes for DPMS changes drm: rcar-du: add missing of_node_put cdrom: Fix race condition in cdrom_sysctl_register fbdev: fbmem: fix memory access if logo is bigger than the screen net: phy: consider latched link-down status in polling mode iw_cxgb4: fix srqidx leak during connection abort net: marvell: mvpp2: fix stuck in-band SGMII negotiation genirq: Avoid summation loops for /proc/stat bcache: improve sysfs_strtoul_clamp() bcache: fix potential div-zero error of writeback_rate_i_term_inverse bcache: fix input overflow to sequential_cutoff bcache: fix input overflow to cache set sysfs file io_error_halflife sched/topology: Fix percpu data types in struct sd_data & struct s_data usb: f_fs: Avoid crash due to out-of-scope stack ptr access ath10k: fix shadow register implementation for WCN3990 ALSA: PCM: check if ops are defined before suspending PCM ARM: dts: meson8b: fix the Ethernet data line signals in eth_rgmii_pins ARM: 8833/1: Ensure that NEON code always compiles with Clang netfilter: conntrack: fix cloned unconfirmed skb->_nfct race in __nf_conntrack_confirm kprobes: Prohibit probing on RCU debug routine kprobes: Prohibit probing on bsearch() selftests: skip seccomp get_metadata test if not real root ACPI / video: Refactor and fix dmi_is_desktop() iwlwifi: pcie: fix emergency path perf report: Add s390 diagnosic sampling descriptor size leds: lp55xx: fix null deref on firmware load failure jbd2: fix race when writing superblock cgroup, rstat: Don't flush subtree root unless necessary HID: intel-ish-hid: avoid binding wrong ishtp_cl_device vfs: fix preadv64v2 and pwritev64v2 compat syscalls with offset == -1 xen/gntdev: Do not destroy context while dma-bufs are in use mt76: usb: do not run mt76u_queues_deinit twice media: mtk-jpeg: Correct return type for mem2mem buffer helpers media: mx2_emmaprp: Correct return type for mem2mem buffer helpers media: s5p-g2d: Correct return type for mem2mem buffer helpers media: rockchip/rga: Correct return type for mem2mem buffer helpers media: s5p-jpeg: Correct return type for mem2mem buffer helpers media: sh_veu: Correct return type for mem2mem buffer helpers media: ov7740: fix runtime pm initialization SoC: imx-sgtl5000: add missing put_device() perf report: Don't shadow inlined symbol with different addr range mwifiex: don't advertise IBSS features without FW support perf test: Fix failure of 'evsel-tp-sched' test on s390 drm/amd/display: Clear stream->mode_changed after commit scsi: fcoe: make use of fip_mode enum complete scsi: megaraid_sas: return error when create DMA pool failed s390/ism: ignore some errors during deregistration efi: cper: Fix possible out-of-bounds access cpufreq: acpi-cpufreq: Report if CPU doesn't support boost technologies ASoC: qcom: Fix of-node refcount unbalance in qcom_snd_parse_of() perf annotate: Fix getting source line failure clk: fractional-divider: check parent rate only if flag is set IB/mlx4: Increase the timeout for CM cache loop: set GENHD_FL_NO_PART_SCAN after blkdev_reread_part() platform/mellanox: mlxreg-hotplug: Fix KASAN warning platform/x86: ideapad-laptop: Fix no_hw_rfkill_list for Lenovo RESCUER R720-15IKBN mlxsw: spectrum: Avoid -Wformat-truncation warnings e1000e: Fix -Wformat-truncation warnings net: dsa: mv88e6xxx: Add lockdep classes to fix false positive splat mmc: omap: fix the maximum timeout setting btrfs: qgroup: Make qgroup async transaction commit more aggressive powerpc/hugetlb: Handle mmap_min_addr correctly in get_unmapped_area callback iommu/io-pgtable-arm-v7s: Only kmemleak_ignore L2 tables ARM: 8840/1: use a raw_spinlock_t in unwind serial: 8250_pxa: honor the port number from devicetree coresight: etm4x: Add support to enable ETMv4.2 powerpc/xmon: Fix opcode being uninitialized in print_insn_powerpc kbuild: invoke syncconfig if include/config/auto.conf.cmd is missing scsi: core: replace GFP_ATOMIC with GFP_KERNEL in scsi_scan.c powerpc/powernv/ioda: Fix locked_vm counting for memory used by IOMMU tables usb: chipidea: Grab the (legacy) USB PHY by phandle first crypto: cavium/zip - fix collision with generic cra_driver_name crypto: crypto4xx - add missing of_node_put after of_device_is_available mt76: fix a leaked reference by adding a missing of_node_put wil6210: check null pointer in _wil_cfg80211_merge_extra_ies PCI/PME: Fix hotplug/sysfs remove deadlock in pcie_pme_remove() tools lib traceevent: Fix buffer overflow in arg_eval fs: fix guard_bio_eod to check for real EOD errors jbd2: fix invalid descriptor block checksum netfilter: conntrack: tcp: only close if RST matches exact sequence netfilter: nf_tables: check the result of dereferencing base_chain->stats cifs: Fix NULL pointer dereference of devname cifs: Accept validate negotiate if server return NT_STATUS_NOT_SUPPORTED f2fs: fix to check inline_xattr_size boundary correctly dm thin: add sanity checks to thin-pool and external snapshot creation cifs: use correct format characters page_poison: play nicely with KASAN fs/file.c: initialize init_files.resize_wait f2fs: do not use mutex lock in atomic context ocfs2: fix a panic problem caused by o2cb_ctl mm/slab.c: kmemleak no scan alien caches mm/vmalloc.c: fix kernel BUG at mm/vmalloc.c:512! mm, mempolicy: fix uninit memory access memcg: killed threads should not invoke memcg OOM killer mm,oom: don't kill global init via memory.oom.group mm, swap: bounds check swap_info array accesses to avoid NULL derefs mm/page_ext.c: fix an imbalance with kmemleak mm/cma.c: cma_declare_contiguous: correct err handling mm/sparse: fix a bad comparison perf c2c: Fix c2c report for empty numa node x86/hyperv: Fix kernel panic when kexec on HyperV iio: adc: fix warning in Qualcomm PM8xxx HK/XOADC driver scsi: hisi_sas: Fix a timeout race of driver internal and SMP IO scsi: hisi_sas: Set PHY linkrate when disconnected libbpf: force fixdep compilation at the start of the build enic: fix build warning without CONFIG_CPUMASK_OFFSTACK net: stmmac: Avoid sometimes uninitialized Clang warnings sysctl: handle overflow for file-max include/linux/relay.h: fix percpu annotation in struct rchan gpio: gpio-omap: fix level interrupt idling net/mlx5: Avoid panic when setting vport mac, getting vport config net/mlx5: Avoid panic when setting vport rate tracing: kdb: Fix ftdump to not sleep f2fs: fix to avoid deadlock in f2fs_read_inline_dir() f2fs: fix to adapt small inline xattr space in __find_inline_xattr() h8300: use cc-cross-prefix instead of hardcoding h8300-unknown-linux- CIFS: fix POSIX lock leak and invalid ptr deref tty/serial: atmel: RS485 HD w/DMA: enable RX after TX is stopped tty/serial: atmel: Add is_half_duplex helper ext4: cleanup bh release code in ext4_ind_remove_space() arm64: debug: Don't propagate UNKNOWN FAR into si_code for debug signals ANDROID: cuttlefish_defconfig: Enable CONFIG_OVERLAY_FS ANDROID: cuttlefish: enable CONFIG_NET_SCH_INGRESS=y Conflicts: drivers/usb/gadget/function/f_fs.c mm/page_alloc.c Change-Id: Ia2a8e99bfdae84d3933749f45ba86f33c5acd713 Signed-off-by: Ivaylo Georgiev <irgeorgiev@codeaurora.org>	2019-05-16 04:50:34 -07:00
Oleg Nesterov	d0bc74c563	cgroup/pids: turn cgroup_subsys->free() into cgroup_subsys->release() to fix the accounting [ Upstream commit 51bee5abeab2058ea5813c5615d6197a23dbf041 ] The only user of cgroup_subsys->free() callback is pids_cgrp_subsys which needs pids_free() to uncharge the pid. However, ->free() is called from __put_task_struct()->cgroup_free() and this is too late. Even the trivial program which does for (;;) { int pid = fork(); assert(pid >= 0); if (pid) wait(NULL); else exit(0); } can run out of limits because release_task()->call_rcu(delayed_put_task_struct) implies an RCU gp after the task/pid goes away and before the final put(). Test-case: mkdir -p /tmp/CG mount -t cgroup2 none /tmp/CG echo '+pids' > /tmp/CG/cgroup.subtree_control mkdir /tmp/CG/PID echo 2 > /tmp/CG/PID/pids.max perl -e 'while ($p = fork) { wait; } $p // die "fork failed: $!\n"' & echo $! > /tmp/CG/PID/cgroup.procs Without this patch the forking process fails soon after migration. Rename cgroup_subsys->free() to cgroup_subsys->release() and move the callsite into the new helper, cgroup_release(), called by release_task() which actually frees the pid(s). Reported-by: Herton R. Krzesinski <hkrzesin@redhat.com> Reported-by: Jan Stancek <jstancek@redhat.com> Signed-off-by: Oleg Nesterov <oleg@redhat.com> Signed-off-by: Tejun Heo <tj@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2019-04-05 22:33:13 +02:00
Ivaylo Georgiev	bd72c908a7	Merge android-4.19.27 (`36d178b`) into msm-4.19 * refs/heads/tmp-36d178b: Linux 4.19.27 x86/uaccess: Don't leak the AC flag into __put_user() value evaluation MIPS: eBPF: Fix icache flush end address MIPS: BCM63XX: provide DMA masks for ethernet devices MIPS: fix truncation in __cmpxchg_small for short values hugetlbfs: fix races and page leaks during migration drm: Block fb changes for async plane updates mm: enforce min addr even if capable() in expand_downwards() mmc: sdhci-esdhc-imx: correct the fix of ERR004536 mmc: cqhci: Fix a tiny potential memory leak on error condition mmc: cqhci: fix space allocated for transfer descriptor mmc: core: Fix NULL ptr crash from mmc_should_fail_request mmc: tmio: fix access width of Block Count Register mmc: tmio_mmc_core: don't claim spurious interrupts mmc: spi: Fix card detection during probe kvm: selftests: Fix region overlap check in kvm_util KVM: nSVM: clear events pending from svm_complete_interrupts() when exiting to L1 svm: Fix AVIC incomplete IPI emulation cfg80211: extend range deviation for DMG mac80211: Add attribute aligned(2) to struct 'action' mac80211: don't initiate TDLS connection if station is not associated to AP ibmveth: Do not process frames after calling napi_reschedule net: dev_is_mac_header_xmit() true for ARPHRD_RAWIP net: usb: asix: ax88772_bind return error when hw_reset fail drm/msm: Fix A6XX support for opp-level nvme-multipath: drop optimization for static ANA group IDs nvme-rdma: fix timeout handler hv_netvsc: Fix hash key value reset after other ops hv_netvsc: Refactor assignments of struct netvsc_device_info hv_netvsc: Fix ethtool change hash key error net: altera_tse: fix connect_local_phy error path scsi: csiostor: fix NULL pointer dereference in csio_vport_set_state() scsi: lpfc: nvmet: avoid hang / use-after-free when destroying targetport scsi: lpfc: nvme: avoid hang / use-after-free when destroying localport writeback: synchronize sync(2) against cgroup writeback membership switches direct-io: allow direct writes to empty inodes staging: android: ion: Support cpu access during dma_buf_detach drm/sun4i: hdmi: Fix usage of TMDS clock serial: fsl_lpuart: fix maximum acceptable baud rate with over-sampling tty: serial: qcom_geni_serial: Allow mctrl when flow control is disabled drm/amd/powerplay: OD setting fix on Vega10 locking/rwsem: Fix (possible) missed wakeup futex: Fix (possible) missed wakeup sched/wake_q: Fix wakeup ordering for wake_q sched/wait: Fix rcuwait_wake_up() ordering mac80211: fix miscounting of ttl-dropped frames staging: rtl8723bs: Fix build error with Clang when inlining is disabled drivers: thermal: int340x_thermal: Fix sysfs race condition ARC: show_regs: lockdep: avoid page allocator... ARC: fix __ffs return value to avoid build warnings irqchip/gic-v3-mbi: Fix uninitialized mbi_lock selftests: gpio-mockup-chardev: Check asprintf() for error selftests: seccomp: use LDLIBS instead of LDFLAGS phy: ath79-usb: Fix the main reset name to match the DT binding phy: ath79-usb: Fix the power on error path selftests/vm/gup_benchmark.c: match gup struct to kernel ASoC: imx-audmux: change snprintf to scnprintf for possible overflow ASoC: dapm: change snprintf to scnprintf for possible overflow ASoC: rt5682: Fix PLL source register definitions x86/mm/mem_encrypt: Fix erroneous sizeof() genirq: Make sure the initial affinity is not empty selftests: rtc: rtctest: add alarm test on minute boundary selftests: rtc: rtctest: fix alarm tests usb: gadget: Potential NULL dereference on allocation error usb: dwc3: gadget: Fix the uninitialized link_state when udc starts usb: dwc3: gadget: synchronize_irq dwc irq in suspend thermal: int340x_thermal: Fix a NULL vs IS_ERR() check clk: vc5: Abort clock configuration without upstream clock clk: sysfs: fix invalid JSON in clk_dump clk: tegra: dfll: Fix a potential Oop in remove() ASoC: Variable "val" in function rt274_i2c_probe() could be uninitialized ALSA: compress: prevent potential divide by zero bugs ASoC: Intel: Haswell/Broadwell: fix setting for .dynamic field drm/msm: Unblock writer if reader closes file scsi: libsas: Fix rphy phy_identifier for PHYs with end devices attached mac80211: Change default tx_sk_pacing_shift to 7 genirq/matrix: Improve target CPU selection for managed interrupts. irq/matrix: Spread managed interrupts on allocation irq/matrix: Split out the CPU selection code into a helper FROMGIT: binder: create node flag to request sender's security context Modify include/uapi/linux/android/binder.h, as commit: FROMGIT: binder: create node flag to request sender's security context introduces enums and structures, which are already defined in other userspace files that include the binder uapi file. Thus, the redeclaration of these enums and structures can lead to build errors. To avoid this, guard the redundant declarations in the uapi header with the __KERNEL__ header guard, so they are not exported to userspace. Conflicts: drivers/staging/android/ion/ion.c sound/core/compress_offload.c Change-Id: Ibf422b9b32ea1315515c33036b20ae635b8c8e4c Signed-off-by: Ivaylo Georgiev <irgeorgiev@codeaurora.org> Signed-off-by: Isaac J. Manjarres <isaacm@codeaurora.org>	2019-03-21 01:42:04 -07:00
Prateek Sood	5024f0a29a	sched/wait: Fix rcuwait_wake_up() ordering [ Upstream commit 6dc080eeb2ba01973bfff0d79844d7a59e12542e ] For some peculiar reason rcuwait_wake_up() has the right barrier in the comment, but not in the code. This mistake has been observed to cause a deadlock in the following situation: P1 P2 percpu_up_read() percpu_down_write() rcu_sync_is_idle() // false rcu_sync_enter() ... __percpu_up_read() [S] ,- __this_cpu_dec(*sem->read_count) \| smp_rmb(); [L] \| task = rcu_dereference(w->task) // NULL \| \| [S] w->task = current \| smp_mb(); \| [L] readers_active_check() // fail `-> <store happens here> Where the smp_rmb() (obviously) fails to constrain the store. [ peterz: Added changelog. ] Signed-off-by: Prateek Sood <prsood@codeaurora.org> Signed-off-by: Peter Zijlstra (Intel) <peterz@infradead.org> Reviewed-by: Andrea Parri <andrea.parri@amarulasolutions.com> Acked-by: Davidlohr Bueso <dbueso@suse.de> Cc: Linus Torvalds <torvalds@linux-foundation.org> Cc: Peter Zijlstra <peterz@infradead.org> Cc: Thomas Gleixner <tglx@linutronix.de> Fixes: `8f95c90ceb` ("sched/wait, RCU: Introduce rcuwait machinery") Link: https://lkml.kernel.org/r/1543590656-7157-1-git-send-email-prsood@codeaurora.org Signed-off-by: Ingo Molnar <mingo@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2019-03-05 17:58:49 +01:00
Ivaylo Georgiev	c26cab8987	Merge android-4.19.20 (`c28f73f`) into msm-4.19 * refs/heads/tmp-c28f73f: Linux 4.19.20 cifs: Always resolve hostname before reconnecting md/raid5: fix 'out of memory' during raid cache recovery of: overlay: do not duplicate properties from overlay for new nodes of: overlay: use prop add changeset entry for property in new nodes of: overlay: add missing of_node_get() in __of_attach_node_sysfs of: overlay: add tests to validate kfrees from overlay removal of: Convert to using %pOFn instead of device_node.name mm: migrate: don't rely on __PageMovable() of newpage after unlocking it mm: hwpoison: use do_send_sig_info() instead of force_sig() mm, oom: fix use-after-free in oom_kill_process mm,memory_hotplug: fix scan_movable_pages() for gigantic hugepages oom, oom_reaper: do not enqueue same task twice mm/hugetlb.c: teach follow_hugetlb_page() to handle FOLL_NOWAIT kernel/exit.c: release ptraced tasks before zap_pid_ns_processes btrfs: On error always free subvol_name in btrfs_mount Btrfs: fix deadlock when allocating tree block during leaf/node split mmc: sdhci-iproc: handle mmc_of_parse() errors during probe platform/x86: asus-nb-wmi: Drop mapping of 0x33 and 0x34 scan codes platform/x86: asus-nb-wmi: Map 0x35 to KEY_SCREENLOCK IB/hfi1: Remove overly conservative VM_EXEC flag check ALSA: hda/realtek - Fixed hp_pin no value ALSA: usb-audio: Add Opus #3 to quirks for native DSD support mmc: mediatek: fix incorrect register setting of hs400_cmd_int_delay mmc: bcm2835: Fix DMA channel leak on probe error gfs2: Revert "Fix loop in gfs2_rbm_find" gpio: sprd: Fix incorrect irq type setting for the async EIC gpio: sprd: Fix the incorrect data register gpio: pcf857x: Fix interrupts on multiple instances gpiolib: fix line event timestamps for nested irqs gpio: altera-a10sr: Set proper output level for direction_output arm64: hibernate: Clean the __hyp_text to PoC after resume arm64: hyp-stub: Forbid kprobing of the hyp-stub arm64: Do not issue IPIs for user executable ptes arm64: kaslr: ensure randomized quantities are clean also when kaslr is off ARM: cns3xxx: Fix writing to wrong PCI config registers after alignment NFS: Fix up return value on fatal errors in nfs_page_async_flush() selftests/seccomp: Enhance per-arch ptrace syscall skip tests iommu/vt-d: Fix memory leak in intel_iommu_put_resv_regions() fs/dcache: Fix incorrect nr_dentry_unused accounting in shrink_dcache_sb() CIFS: Do not consider -ENODATA as stat failure for reads CIFS: Fix trace command logging for SMB2 reads and writes CIFS: Do not count -ENODATA as failure for query directory virtio_net: Differentiate sk_buff and xdp_frame on freeing virtio_net: Use xdp_return_frame to free xdp_frames on destroying vqs virtio_net: Don't process redirected XDP frames when XDP is disabled virtio_net: Fix out of bounds access of sq virtio_net: Fix not restoring real_num_rx_queues virtio_net: Don't call free_old_xmit_skbs for xdp_frames virtio_net: Don't enable NAPI when interface is down sctp: set flow sport from saddr only when it's 0 sctp: set chunk transport correctly when it's a new asoc Revert "net/mlx5e: E-Switch, Initialize eswitch only if eswitch manager" ip6mr: Fix notifiers call on mroute_clean_tables() net/mlx5e: Allow MAC invalidation while spoofchk is ON sctp: improve the events for sctp stream adding net: ip6_gre: always reports o_key to userspace vhost: fix OOB in get_rx_bufs() ucc_geth: Reset BQL queue when stopping device tun: move the call to tun_set_real_num_queues sctp: improve the events for sctp stream reset ravb: expand rx descriptor data to accommodate hw checksum net: set default network namespace in init_dummy_netdev() net/rose: fix NULL ax25_cb kernel panic netrom: switch to sock timer API net/mlx4_core: Add masking for a few queries on HCA caps net: ip_gre: use erspan key field for tunnel lookup net: ip_gre: always reports o_key to userspace l2tp: fix reading optional fields of L2TPv3 l2tp: copy 4 more bytes to linear part if necessary ipvlan, l3mdev: fix broken l3s mode wrt local routes ipv6: sr: clear IP6CB(skb) on SRH ip4ip6 encapsulation ipv6: Consider sk_bound_dev_if when binding a socket to an address drm/msm/gpu: fix building without debugfs Fix "net: ipv4: do not handle duplicate fragments as overlapping" UPSTREAM: net: dev_is_mac_header_xmit() true for ARPHRD_RAWIP UPSTREAM: binder: filter out nodes when showing binder procs UPSTREAM: xfrm: Make set-mark default behavior backward compatible ANDROID: cuttlefish_defconfig: Enable CONFIG_RTC_HCTOSYS Conflicts: mm/oom_kill.c Change-Id: I95452a9f286b95924096afd2dfe439f9d638d404 Signed-off-by: Ivaylo Georgiev <irgeorgiev@codeaurora.org>	2019-02-27 02:23:31 -08:00
Andrei Vagin	c7122344f9	kernel/exit.c: release ptraced tasks before zap_pid_ns_processes commit 8fb335e078378c8426fabeed1ebee1fbf915690c upstream. Currently, exit_ptrace() adds all ptraced tasks in a dead list, then zap_pid_ns_processes() waits on all tasks in a current pidns, and only then are tasks from the dead list released. zap_pid_ns_processes() can get stuck on waiting tasks from the dead list. In this case, we will have one unkillable process with one or more dead children. Thanks to Oleg for the advice to release tasks in find_child_reaper(). Link: http://lkml.kernel.org/r/20190110175200.12442-1-avagin@gmail.com Fixes: `7c8bd2322c` ("exit: ptrace: shift "reap dead" code from exit_ptrace() to forget_original_parent()") Signed-off-by: Andrei Vagin <avagin@gmail.com> Signed-off-by: Oleg Nesterov <oleg@redhat.com> Cc: "Eric W. Biederman" <ebiederm@xmission.com> Cc: <stable@vger.kernel.org> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2019-02-06 17:30:14 +01:00
Satya Durga Srinivasu Prabhala	7ebdf76d85	sched: Add snapshot of Window Assisted Load Tracking (WALT) This snapshot is taken from msm-4.14 as of commit 871eac76e6be567 ("sched: Improve the scheduler"). Change-Id: Ib4e0b39526d3009cedebb626ece5a767d8247846 Signed-off-by: Satya Durga Srinivasu Prabhala <satyap@codeaurora.org>	2019-01-02 10:56:07 -08:00
Eric W. Biederman	0102498083	signal: Pass pid type into group_send_sig_info This passes the information we already have at the call sight into group_send_sig_info. Ultimatelly allowing for to better handle signals sent to a group of processes. Signed-off-by: "Eric W. Biederman" <ebiederm@xmission.com>	2018-07-21 12:57:35 -05:00
Eric W. Biederman	6883f81aac	pid: Implement PIDTYPE_TGID Everywhere except in the pid array we distinguish between a tasks pid and a tasks tgid (thread group id). Even in the enumeration we want that distinction sometimes so we have added __PIDTYPE_TGID. With leader_pid we almost have an implementation of PIDTYPE_TGID in struct signal_struct. Add PIDTYPE_TGID as a first class member of the pid_type enumeration and into the pids array. Then remove the __PIDTYPE_TGID special case and the leader_pid in signal_struct. The net size increase is just an extra pointer added to struct pid and an extra pair of pointers of an hlist_node added to task_struct. The effect on code maintenance is the removal of a number of special cases today and the potential to remove many more special cases as PIDTYPE_TGID gets used to it's fullest. The long term potential is allowing zombie thread group leaders to exit, which will remove a lot more special cases in the code. Signed-off-by: "Eric W. Biederman" <ebiederm@xmission.com>	2018-07-21 10:43:12 -05:00

1 2 3 4 5 ...

626 Commits