7412 Commits

Author	SHA1	Message	Date
Greg Kroah-Hartman	5155624549	Merge tag 'android13-5.15.94_r00' into android13-5.15 ... This is the merge of the upstream LTS release of 5.15.94 into the android13-5.15 branch. It contains the following commits: * 5448b2fda8 Merge 5.15.94 into android13-5.15-lts |\ | * e2c1a934fd Linux 5.15.94 | * 17170acdc7 Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions | * 5122e0e443 KVM: x86: Mitigate the cross-thread return address predictions bug | * 8f12dcab90 x86/speculation: Identify processors vulnerable to SMT RSB predictions | * e63c434de8 drm/i915: Fix VBT DSI DVO port handling | * fc88c68381 drm/i915: Initialize the obj flags for shmem objects | * 2e557c8ca2 drm/amdgpu/fence: Fix oops due to non-matching drm_sched init/fini | * 3af734f3ea Fix page corruption caused by racy check in __free_pages | * c94ce5ea68 arm64: dts: meson-axg: Make mmc host controller interrupts level-sensitive | * b796c02df3 arm64: dts: meson-g12-common: Make mmc host controller interrupts level-sensitive | * 5d9b771f53 arm64: dts: meson-gx: Make mmc host controller interrupts level-sensitive | * ac39dce119 rtmutex: Ensure that the top waiter is always woken up | * 86f7e42393 powerpc/64s/interrupt: Fix interrupt exit race with security mitigation switch | * 2907cf3f2e riscv: Fixup race condition on PG_dcache_clean in flush_icache_pte | * beb1cefa3c ceph: flush cap releases when the session is flushed | * 86733ab239 clk: ingenic: jz4760: Update M/N/OD calculation algorithm | * 239e927eb2 usb: typec: altmodes/displayport: Fix probe pin assign check | * 48aecce116 usb: core: add quirk for Alcor Link AK9563 smartcard reader | * a8178bb1c7 btrfs: free device in btrfs_close_devices for a single device filesystem | * 8d13f2c3e2 mptcp: be careful on subflow status propagation on errors | * 25141fb411 net: USB: Fix wrong-direction WARNING in plusb.c | * d1fba1e096 cifs: Fix use-after-free in rdata->read_into_pages() | * 1b83e7e174 pinctrl: intel: Restore the pins that used to be in Direct IRQ mode | * f5f025b703 spi: dw: Fix wrong FIFO level setting for long xfers | * 71668706fb pinctrl: single: fix potential NULL dereference | * a2a1065739 pinctrl: aspeed: Fix confusing types in return value | * 99450163bc pinctrl: mediatek: Fix the drive register definition of some Pins | * 9f0d2c2684 ASoC: topology: Return -ENOMEM on memory allocation failure | * 1a52ef89e3 riscv: stacktrace: Fix missing the first frame | * 5fb8154334 ALSA: pci: lx6464es: fix a debug loop | * 105ea562f6 selftests: forwarding: lib: quote the sysctl values | * 528e3f3a4b rds: rds_rm_zerocopy_callback() use list_first_entry() | * 48d6d8f2f6 igc: Add ndo_tx_timeout support | * 62ff7dd961 net/mlx5: Serialize module cleanup with reload and remove | * 95d2394f84 net/mlx5: fw_tracer, Zero consumer index when reloading the tracer | * ab7f3f6a9d net/mlx5: fw_tracer, Clear load bit when freeing string DBs buffers | * 193528646e net/mlx5e: IPoIB, Show unknown speed instead of error | * 7c6e8eb617 net/mlx5: Bridge, fix ageing of peer FDB entries | * 49ece61a07 net/mlx5e: Update rx ring hw mtu upon each rx-fcs flag change | * 31172267ba net/mlx5e: Introduce the mlx5e_flush_rq function | * e4e4e93d31 net/mlx5e: Move repeating clear_bit in mlx5e_rx_reporter_err_rq_cqe_recover | * 3f18b9ed8c net: mscc: ocelot: fix VCAP filters not matching on MAC with "protocol 802.1Q" | * 6acb5d853b net: dsa: mt7530: don't change PVC_EG_TAG when CPU port becomes VLAN-aware | * ca834a0178 ice: Do not use WQ_MEM_RECLAIM flag for workqueue | * 70d48c7992 uapi: add missing ip/ipv6 header dependencies for linux/stddef.h | * 3cec44036f ionic: clean interrupt before enabling queue to avoid credit race | * fad12afe87 net: phy: meson-gxl: use MMD access dummy stubs for GXL, internal PHY | * d23385a200 bonding: fix error checking in bond_debug_reregister() | * 11006d9d08 net: phylink: move phy_device_free() to correctly release phy device | * fb022d7b1c xfrm: fix bug with DSCP copy to v6 from v4 tunnel | * 6fe1ad42af RDMA/usnic: use iommu_map_atomic() under spin_lock() | * 8f5fe1cd8e RDMA/irdma: Fix potential NULL-ptr-dereference | * 1b4ef90cbc IB/IPoIB: Fix legacy IPoIB due to wrong number of queues | * 5dc688fae6 xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr() | * 9bae58d58b IB/hfi1: Restore allocated resources on failed copyout | * 558b1fa01c xfrm: compat: change expression for switch in xfrm_xlate64 | * 238b38e89f can: j1939: do not wait 250 ms if the same addr was already claimed | * d859184b60 of/address: Return an error when no valid dma-ranges are found | * 70f37b3118 tracing: Fix poll() and select() do not work on per_cpu trace_pipe and trace_pipe_raw | * df01749503 ALSA: hda/realtek: Enable mute/micmute LEDs on HP Elitebook, 645 G9 | * ca9d542203 ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book2 Pro 360 | * 706b6d86a6 ALSA: emux: Avoid potential array out-of-bound in snd_emux_xg_control() | * 731fc29de6 ALSA: hda/realtek: Add Positivo N14KP6-TG | * b938059807 btrfs: zlib: zero-initialize zlib workspace | * e65faa7e39 btrfs: limit device extents to the device size | * 2e4dd07fda migrate: hugetlb: check for hugetlb shared PMD in node migration | * 072e7412e8 mm/migration: return errno when isolate_huge_page failed * | f977f92131 Revert "nvmem: core: remove nvmem_config wp_gpio" * | 787413edad Merge 5.15.93 into android13-5.15-lts |\| | * 85d7786c66 Linux 5.15.93 | * 6e2fac197d bpf: Skip invalid kfunc call in backtrack_insn | * 46c9088cab gfs2: Always check inode size of inline inodes | * 8eb2e58a92 gfs2: Cosmetic gfs2_dinode_{in,out} cleanup | * e4991910f1 wifi: brcmfmac: Check the count value of channel spec to prevent out-of-bounds reads | * 97ccfffcc0 f2fs: fix to do sanity check on i_extra_isize in is_alive() | * 64fa364ad3 fbdev: smscufx: fix error handling code in ufx_usb_probe | * a77141a063 ovl: Use "buf" flexible array for memcpy() destination | * 1692fedd0f fs/ntfs3: Validate attribute data and valid sizes | * a5b9cb7276 powerpc/imc-pmu: Revert nest_init_lock to being a mutex | * 3691f43a09 iio:adc:twl6030: Enable measurement of VAC | * 8c84f50390 bpf: Do not reject when the stack read size is different from the tracked scalar size | * 14b6198abb bpf: Fix incorrect state pruning for <8B spill/fill | * 575a9f6fef phy: qcom-qmp-combo: fix runtime suspend | * e58df87394 phy: qcom-qmp-combo: fix broken power on | * 368ea32e0a phy: qcom-qmp-usb: fix memleak on probe deferral | * 2f27d3811a phy: qcom-qmp-combo: fix memleak on probe deferral | * 0cb10ddab7 phy: qcom-qmp-combo: disable runtime PM on unbind | * 0ef5ffe116 serial: 8250_dma: Fix DMA Rx rearm race | * e30328f599 serial: 8250_dma: Fix DMA Rx completion race | * a5a171f61a nvmem: core: fix cell removal on error | * 6d9fa3ff65 nvmem: core: remove nvmem_config wp_gpio | * adf80e072c nvmem: core: initialise nvmem->id early | * e3ebc3e23b drm/i915: Fix potential bit_17 double-free | * 997bed0f3c Squashfs: fix handling and sanity checking of xattr_ids count | * 7a0cfaf9d4 highmem: round down the address passed to kunmap_flush_on_unmap() | * 5dbe1ebd56 mm/swapfile: add cond_resched() in get_swap_pages() | * daf8241804 fpga: stratix10-soc: Fix return value check in s10_ops_write_init() | * afd32b6831 x86/debug: Fix stack recursion caused by wrongly ordered DR7 accesses | * 066ecbf1a5 kernel/irq/irqdomain.c: fix memory leak with using debugfs_lookup() | * 481bf49f58 usb: gadget: f_uac2: Fix incorrect increment of bNumEndpoints | * fdf40e5824 mm: hugetlb: proc: check for hugetlb shared PMD in /proc/PID/smaps | * 6c300351c5 riscv: disable generation of unwind tables | * a5c275add9 parisc: Wire up PTRACE_GETREGS/PTRACE_SETREGS for compat case | * a964decd13 parisc: Fix return code of pdc_iodc_print() | * 488eaf0625 nvmem: qcom-spmi-sdam: fix module autoloading | * 8569beb66f iio: imu: fxos8700: fix MAGN sensor scale and unit | * 8aa5cdcfaf iio: imu: fxos8700: remove definition FXOS8700_CTRL_ODR_MIN | * 4112ba1ad5 iio: imu: fxos8700: fix failed initialization ODR mode assignment | * abf7b2ba51 iio: imu: fxos8700: fix incorrect ODR mode readback | * 412757741c iio: imu: fxos8700: fix swapped ACCEL and MAGN channels readback | * 34909532b1 iio: imu: fxos8700: fix map label of channel type to MAGN sensor | * 8346eb4987 iio: imu: fxos8700: fix IMU data bits returned to user space | * 7567cdf3ce iio: imu: fxos8700: fix incomplete ACCEL and MAGN channels readback | * 6969852220 iio: imu: fxos8700: fix ACCEL measurement range selection | * cdacfb2205 iio:adc:twl6030: Enable measurements of VUSB, VBAT and others | * 9988063dce iio: adc: berlin2-adc: Add missing of_node_put() in error path | * c691a5c0fd iio: hid: fix the retval in gyro_3d_capture_sample | * ef80a34699 iio: hid: fix the retval in accel_3d_capture_sample | * c4eae85c73 efi: Accept version 2 of memory attributes table | * 710db82063 ALSA: hda/realtek: Add Acer Predator PH315-54 | * 3fbddf86d9 watchdog: diag288_wdt: fix __diag288() inline assembly | * 700dd5bc72 watchdog: diag288_wdt: do not use stack buffers for hardware data | * 21bc51e29e net: qrtr: free memory on error path in radix_tree_insert() | * dccbd062d7 fbcon: Check font dimension limits | * 5d7500d991 Input: i8042 - add Clevo PCX0DX to i8042 quirk table | * fc9e27f3ba vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF | * 9ba1188a71 usb: gadget: f_fs: Fix unbalanced spinlock in __ffs_ep0_queue_wait | * fe86480e90 usb: dwc3: qcom: enable vbus override when in OTG dr-mode | * a412fe7baf iio: adc: stm32-dfsdm: fill module aliases | * 9944659398 drm/amd/display: Fix timing not changning when freesync video is enabled | * a3967128bc net/x25: Fix to not accept on connected socket | * 396ea318e7 platform/x86: gigabyte-wmi: add support for B450M DS3H WIFI-CF | * 1577524633 platform/x86: dell-wmi: Add a keymap for KEY_MUTE in type 0x0010 table | * 540cea9f9b i2c: rk3x: fix a bunch of kernel-doc warnings | * 0aaabdb900 scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress | * 17b738590b scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress | * 8cd0499f9c perf/x86/intel: Add Emerald Rapids | * 7093515370 scsi: target: core: Fix warning on RT kernels | * b7960f5436 i2c: mxs: suppress probe-deferral error message | * b9b87fc34b i2c: designware-pci: Add new PCI IDs for AMD NAVI GPU | * d8fc0b5fb3 efi: fix potential NULL deref in efi_mem_reserve_persistent | * f423c2efd5 net: openvswitch: fix flow memory leak in ovs_flow_cmd_new | * 7985028647 virtio-net: Keep stop() to follow mirror sequence of open() | * 5d884f9e80 selftests: net: udpgso_bench_tx: Cater for pending datagrams zerocopy benchmarking | * 63aa63af3a selftests: net: udpgso_bench: Fix racing bug between the rx/tx programs | * d41a3f9cc2 selftests: net: udpgso_bench_rx/tx: Stop when wrong CLI args are provided | * 5af98283e5 selftests: net: udpgso_bench_rx: Fix 'used uninitialized' compiler warning | * 89e0701e03 ata: libata: Fix sata_down_spd_limit() when no link speed is reported | * 9ab896775f can: j1939: fix errant WARN_ON_ONCE in j1939_session_deactivate | * 02d77d98e0 igc: return an error if the mac type is unknown in igc_ptp_systim_to_hwtstamp() | * 04a7355820 riscv: kprobe: Fixup kernel panic when probing an illegal position | * 206c367b6a ip/ip6_gre: Fix non-point-to-point tunnel not generating IPv6 link local address | * 90178bc0f2 ip/ip6_gre: Fix changing addr gen mode not generating IPv6 link local address | * dfe2f0ea38 net: phy: meson-gxl: Add generic dummy stubs for MMD register access | * b7398efe24 squashfs: harden sanity check in squashfs_read_xattr_id_table | * 89a69216f1 netfilter: br_netfilter: disable sabotage_in hook after first suppression | * cdb444e73f drm/i915/adlp: Fix typo for reference clock | * 960f20d858 drm/i915/guc: Fix locking when searching for a hung request | * c27e0eac56 netrom: Fix use-after-free caused by accept on already connected socket | * 511c922c5b block, bfq: fix uaf for bfqq in bic_set_bfqq() | * a62c129dcb block, bfq: replace 0/1 with false/true in bic apis | * 37a744a068 block/bfq-iosched.c: use "false" rather than "BLK_RW_ASYNC" | * 2cd1e9c013 net: phy: dp83822: Fix null pointer access on DP83825/DP83826 devices | * 18c18c2110 sfc: correctly advertise tunneled IPv6 segmentation | * 878b06f60a dpaa2-eth: execute xdp_do_flush() before napi_complete_done() | * 3b5774cd6b dpaa_eth: execute xdp_do_flush() before napi_complete_done() | * 5a7040a649 virtio-net: execute xdp_do_flush() before napi_complete_done() | * 94add5b272 qede: execute xdp_do_flush() before napi_complete_done() | * a273f8e3ab ice: Prevent set_channel from changing queues while RDMA active | * b432e183c2 fix "direction" argument of iov_iter_kvec() | * d8b8306e96 fix iov_iter_bvec() "direction" argument | * 389c7c0ef9 READ is "data destination", not source... | * 7a3649bf5b WRITE is "data source", not destination... | * 83cc6a7bb7 vhost/net: Clear the pending messages when the backend is removed | * 7c7d344bc3 scsi: Revert "scsi: core: map PQ=1, PDT=other values to SCSI_SCAN_TARGET_PRESENT" | * 4b199dc094 drm/vc4: hdmi: make CEC adapter name unique | * dc1f8ab25a arm64: dts: imx8mm: Fix pad control for UART1_DTE_RX | * c681d7a4ed bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener | * 34ad5d8885 bpf: Fix to preserve reg parent/live fields when copying range info | * 7b86f9ab56 bpf: Support <8-byte scalar spill and refill | * 1b9256c962 ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path() | * b7abeb6916 bpf: Fix a possible task gone issue with bpf_send_signal[_thread]() helpers | * cfcc2390db ASoC: Intel: bytcr_wm5102: Drop reference count of ACPI device after use | * b4b204565a ASoC: Intel: bytcr_rt5640: Drop reference count of ACPI device after use | * 1f1e7635c5 ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use | * 41d323c352 ASoC: Intel: bytcht_es8316: Drop reference count of ACPI device after use | * 6a9990e1d9 ASoC: Intel: bytcht_es8316: move comment to the right place | * ffcdf35455 ASoC: Intel: boards: fix spelling in comments | * bd0b17ab1b bus: sunxi-rsb: Fix error handling in sunxi_rsb_init() | * 5f4543c938 firewire: fix memory leak for payload of request subaction to IEC 61883-1 FCP region * | 5020746bff Merge 5.15.92 into android13-5.15-lts |\| | * e515b9902f Linux 5.15.92 | * c7caf669b8 net: mctp: purge receive queues on sk destruction | * 046de74f9a net: fix NULL pointer in skb_segment_list | * 7ab3376703 selftests: Provide local define of __cpuid_count() | * e92e311ced selftests/vm: remove ARRAY_SIZE define from individual tests | * c9e52db900 tools: fix ARRAY_SIZE defines in tools and selftests hdrs | * c1aa0dd52d Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt | * 02e61196c5 ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems | * 79dd676b44 extcon: usbc-tusb320: fix kernel-doc warning | * c2bd60ef20 ext4: fix bad checksum after online resize | * 4cd1e18bc0 cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() | * 43acd767bd dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init | * a54c5ad007 HID: playstation: sanity check DualSense calibration data. | * 6d7686cc11 blk-cgroup: fix missing pd_online_fn() while activating policy | * 2144859229 erofs/zmap.c: Fix incorrect offset calculation | * 0dfef50313 bpf: Skip task with pid=1 in send_signal_common() | * e8bb772f74 firmware: arm_scmi: Clear stale xfer->hdr.status | * 80cb9f1a76 arm64: dts: imx8mq-thor96: fix no-mmc property for SDHCI | * 162fad24d2 arm64: dts: freescale: Fix pca954x i2c-mux node names | * 82ad105e1a ARM: dts: vf610: Fix pca9548 i2c-mux node names | * 5aee5f33e0 ARM: dts: imx: Fix pca9547 i2c-mux node name * | 7e0097918f Revert "scsi: ufs: core: Fix devfreq deadlocks" * | 6ce0fcdcc2 Revert "thermal/core: Rename 'trips' to 'num_trips'" * | 49a5232dfb Revert "thermal: Validate new state in cur_state_store()" * | be0ca2fc43 Revert "thermal/core: fix error code in __thermal_cooling_device_register()" * | 9617a003cc Revert "thermal: core: call put_device() only after device_register() fails" * | ccb2c48531 Revert "cpufreq: governor: Use kobject release() method to free dbs_data" * | 0108f014a5 Revert "gpio: use raw spinlock for gpio chip shadowed data" * | 1d2449f6be Revert "gpio: mxc: Protect GPIO irqchip RMW with bgpio spinlock" * | 5f51aedcba Revert "gpio: mxc: Unlock on error path in mxc_flip_edge()" * | 7622c50ba6 Merge 5.15.91 into android13-5.15-lts |\| | * 9cf4111cdf Linux 5.15.91 | * 14cc13e433 perf/x86/amd: fix potential integer overflow on shift of a int | * 033636b322 netfilter: conntrack: unify established states for SCTP paths | * 0b08201158 x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL | * b577400367 block: fix and cleanup bio_check_ro | * 1d152437e4 kbuild: Allow kernel installation packaging to override pkg-config | * a196468858 cpufreq: governor: Use kobject release() method to free dbs_data | * 7c513ced0d cpufreq: Move to_gov_attr_set() to cpufreq.h | * cf7a08622d Revert "Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode" | * 53c5d61198 tools: gpio: fix -c option of gpio-event-mon | * a7d1a303ff treewide: fix up files incorrectly marked executable | * 046fe53907 net: mdio-mux-meson-g12a: force internal PHY off on mux switch | * 86bdccde78 net/tg3: resolve deadlock in tg3_reset_task() during EEH | * 4364bf79d8 thermal: intel: int340x: Add locking to int340x_thermal_get_trip_type() | * e69c3a0d9d net: mctp: mark socks as dead on unhash, prevent re-add | * 954cc215cd net: ravb: Fix possible hang if RIS2_QFF1 happen | * 0f7218bf0a net: ravb: Fix lack of register setting after system resumed for Gen3 | * 3db4ca2938 ravb: Rename "no_ptp_cfg_active" and "ptp_cfg_active" variables | * 621f296f11 gpio: mxc: Unlock on error path in mxc_flip_edge() | * 071a839286 nvme: fix passthrough csi check | * 614471b7f7 riscv/kprobe: Fix instruction simulation of JALR | * 3391bd4235 sctp: fail if no bound addresses can be used for a given scope | * b0784860e1 net/sched: sch_taprio: do not schedule in taprio_reset() | * d2d3ab1b1d netrom: Fix use-after-free of a listening socket. | * 9df5ab02c6 netfilter: conntrack: fix vtag checks for ABORT/SHUTDOWN_COMPLETE | * ca3cf94776 ipv4: prevent potential spectre v1 gadget in fib_metrics_match() | * d50e7348b4 ipv4: prevent potential spectre v1 gadget in ip_metrics_convert() | * ead06e3449 netlink: annotate data races around sk_state | * c4eb423c6b netlink: annotate data races around dst_portid and dst_group | * fac9b69a93 netlink: annotate data races around nlk->portid | * 8a13595600 netfilter: nft_set_rbtree: skip elements in transaction from garbage collection | * 2bf1435fa1 netfilter: nft_set_rbtree: Switch to node list walk for overlap detection | * e481654426 drm/i915/selftest: fix intel_selftest_modify_policy argument types | * 66689a72ba net: fix UaF in netns ops registration error path | * 41b74e95f2 netlink: prevent potential spectre v1 gadgets | * 2f29d780bd i2c: designware: use casting of u64 in clock multiplication to avoid overflow | * b03f7ed9af scsi: ufs: core: Fix devfreq deadlocks | * 858d7e9218 net: mana: Fix IRQ name - add PCI and queue number | * bff5243bd3 EDAC/qcom: Do not pass llcc_driv_data as edac_device_ctl_info's pvt_info | * 5eedf4568d EDAC/device: Respect any driver-supplied workqueue polling value | * 4b7dfd0a68 ARM: 9280/1: mm: fix warning on phys_addr_t to void pointer assignment | * 7807871f28 ipv6: fix reachability confirmation with proxy_ndp | * f9a22f6fa1 thermal: intel: int340x: Protect trip temperature from concurrent updates | * 036093c08d KVM: arm64: GICv4.1: Fix race with doorbell on VPE activation/deactivation | * c56683c062 KVM: x86/vmx: Do not skip segment attributes if unusable bit is set | * e91308e637 ovl: fail on invalid uid/gid mapping at copy up | * 33a9657d67 ksmbd: limit pdu length size according to connection status | * 8d83a758ee ksmbd: downgrade ndr version error message to debug | * 87a7f38a90 ksmbd: do not sign response to session request for guest login | * 4210c3555d ksmbd: add max connections parameter | * cc6742b160 ksmbd: add smbd max io size parameter | * 3c8a5648a5 i2c: mv64xxx: Add atomic_xfer method to driver | * e619ab4fb3 i2c: mv64xxx: Remove shutdown method from driver | * 4b83bc6f87 cifs: Fix oops due to uncleared server->smbd_conn in reconnect | * 89042d3d85 ftrace/scripts: Update the instructions for ftrace-bisect.sh | * 592ba7116f trace_events_hist: add check for return value of 'create_hist_field' | * b0af180514 tracing: Make sure trace_printk() can output as soon as it can be used | * 91135d7233 module: Don't wait for GOING modules | * 85ee9919ad KVM: SVM: fix tsc scaling cache logic | * f0227eca97 scsi: hpsa: Fix allocation size for scsi_host_alloc() | * e5af9a458a drm/amdgpu: complete gfxoff allow signal during suspend without delay | * 62b9e9f921 Bluetooth: hci_sync: cancel cmd_timer if hci_open failed | * 21998acd31 exit: Use READ_ONCE() for all oops/warn limit reads | * e82b1598eb docs: Fix path paste-o for /sys/kernel/warn_count | * 1c51698ad6 panic: Expose "warn_count" to sysfs | * 0691ddae56 panic: Introduce warn_limit | * 7b98914a6c panic: Consolidate open-coded panic_on_warn checks | * fc636b1362 exit: Allow oops_limit to be disabled | * 339f8a8e52 exit: Expose "oops_count" to sysfs | * f80fb0001f exit: Put an upper limit on how often we can oops | * 2857ce7f47 panic: Separate sysctl logic from CONFIG_SMP | * e156d4dcb0 ia64: make IA64_MCA_RECOVERY bool instead of tristate | * 9024f77224 csky: Fix function name in csky_alignment() and die() | * 2ea497d153 h8300: Fix build errors from do_exit() to make_task_dead() transition | * a452ca0228 hexagon: Fix function name in die() | * 3b39f47474 objtool: Add a missing comma to avoid string concatenation | * 39a26d8721 exit: Add and use make_task_dead. | * b5c1acaa43 kasan: no need to unset panic_on_warn in end_report() | * b5c967dc68 ubsan: no need to unset panic_on_warn in ubsan_epilogue() | * e4cd210032 panic: unset panic_on_warn inside panic() | * 191f1f1f6a kernel/panic: move panic sysctls to its own file | * 654f6e8512 sysctl: add a new register_sysctl_init() interface | * 3aa991cde9 fs: reiserfs: remove useless new_opts in reiserfs_remount | * d830531f8f x86: ACPI: cstate: Optimize C3 entry on AMD CPUs | * 1f54762231 drm/i915: Remove unused variable | * 6e10127093 Revert "selftests/bpf: check null propagation only neither reg is PTR_TO_BTF_ID" | * 619ee31b96 drm/i915: Allow switching away via vga-switcheroo if uninitialized | * ea435ba9eb firmware: coreboot: Check size of table entry and use flex-array | * a4e70bcf2e lockref: stop doing cpu_relax in the cmpxchg loop | * b0ee61f5ee platform/x86: asus-nb-wmi: Add alternate mapping for KEY_SCREENLOCK | * e8d2f7f566 platform/x86: touchscreen_dmi: Add info for the CSL Panther Tab HD | * 2e0a8bacbe r8152: add vendor/device ID pair for Microsoft Devkit | * d4b717e34d scsi: hisi_sas: Set a port invalid only if there are no devices attached when refreshing port id | * e15750aa28 KVM: s390: interrupt: use READ_ONCE() before cmpxchg() | * 9300c65207 spi: spidev: remove debug messages that access spidev->spi without locking | * 48ff5d3812 ASoC: fsl-asoc-card: Fix naming of AC'97 CODEC widgets | * 5001ffb31d ASoC: fsl_ssi: Rename AC'97 streams to avoid collisions with AC'97 CODEC | * b76120e206 cpufreq: armada-37xx: stop using 0 as NULL pointer | * eda26fa856 perf/x86/intel/uncore: Add Emerald Rapids | * 544f9d4e9d perf/x86/msr: Add Emerald Rapids | * b1eb964d78 s390: expicitly align _edata and _end symbols on page boundary | * fb45ec279b s390/debug: add _ASM_S390_ prefix to header guard | * cd488abed9 drm: Add orientation quirk for Lenovo ideapad D330-10IGL | * ff7ab370b8 net: usb: cdc_ether: add support for Thales Cinterion PLS62-W modem | * d6935084e4 ASoC: fsl_micfil: Correct the number of steps on SX controls | * ac07316b2d cpufreq: Add SM6375 to cpufreq-dt-platdev blocklist | * f0e6dcae14 kcsan: test: don't put the expect array on the stack | * c51c0b3754 cpufreq: Add Tegra234 to cpufreq-dt-platdev blocklist | * 28e4e8ca9e scsi: iscsi: Fix multiple iSCSI session unbind events sent to userspace | * 14b1df2004 tcp: fix rate_app_limited to default to 1 | * 120b8e527e net: stmmac: enable all safety features by default | * a7d736cc3c thermal: core: call put_device() only after device_register() fails | * ed08f958e4 thermal/core: fix error code in __thermal_cooling_device_register() | * 108a6f91e2 thermal: Validate new state in cur_state_store() | * bd0ea77edf thermal/core: Rename 'trips' to 'num_trips' | * 521c6ebd4f thermal/core: Remove duplicate information when an error occurs | * 6504afa263 net: dsa: microchip: ksz9477: port map correction in ALU table entry register | * 18346db185 selftests/net: toeplitz: fix race on tpacket_v3 block close | * caa28c7c83 driver core: Fix test_async_probe_init saves device in wrong array | * 89c62cee5d w1: fix WARNING after calling w1_process() | * 3d0eafe413 w1: fix deadloop in __w1_remove_master_device() | * 7701a4bd45 device property: fix of node refcount leak in fwnode_graph_get_next_endpoint() | * ed0d8f731e ptdma: pt_core_execute_cmd() should use spinlock | * 29e9c67bf3 octeontx2-pf: Fix the use of GFP_KERNEL in atomic context on rt | * 03bff5819a tcp: avoid the lookup process failing to get sk in ehash table | * 5bd69d2ea8 nvme-pci: fix timeout request state check | * 39178dfe86 drm/amd/display: fix issues with driver unload | * 9a5a537e14 phy: phy-can-transceiver: Skip warning if no "max-bitrate" | * 4095065b59 dmaengine: xilinx_dma: call of_node_put() when breaking out of for_each_child_of_node() | * 5bd3c1c1bc cifs: fix potential deadlock in cache_refresh_path() | * 1a2a47b85c HID: betop: check shape of output reports | * b2a7309743 l2tp: prevent lockdep issue in l2tp_tunnel_register() | * edf0e509ce virtio-net: correctly enable callback during start_xmit | * d3401c7624 net: macb: fix PTP TX timestamp failure due to packet padding | * 71c6019655 dmaengine: Fix double increment of client_count in dma_chan_get() | * 1e7919f0b1 drm/panfrost: fix GENERIC_ATOMIC64 dependency | * a1b3e50e21 net: mlx5: eliminate anonymous module_init & module_exit | * 09e3fb6f53 net/mlx5: E-switch, Fix setting of reserved fields on MODIFY_SCHEDULING_ELEMENT | * 01a6e10810 net: ipa: disable ipa interrupt during suspend | * 98aec50ff7 Bluetooth: Fix possible deadlock in rfcomm_sk_state_change | * 0e59f60b74 usb: gadget: f_fs: Ensure ep0req is dequeued before free_request | * ae8e136bca usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait | * f25cd2b731 HID: revert CHERRY_MOUSE_000C quirk | * 39483511fd pinctrl: rockchip: fix mux route data for rk3568 | * 1dae88a0b4 net: stmmac: fix invalid call to mdiobus_get_phy() | * 6716838bf8 HID: check empty report_list in bigben_probe() | * 2b49568254 HID: check empty report_list in hid_validate_values() | * ad67de330d net: mdio: validate parameter addr in mdiobus_get_phy() | * 4869129379 net: usb: sr9700: Handle negative len | * 2827c4eb42 octeontx2-pf: Avoid use of GFP_KERNEL in atomic context | * 77e8ed776c l2tp: close all race conditions in l2tp_tunnel_register() | * af22d2c0b4 l2tp: convert l2tp_tunnel_list to idr | * 22c7d45ca3 l2tp: Don't sleep and disable BH under writer-side sk_callback_lock | * 87d9205d9a l2tp: Serialize access to sk_user_data with sk_callback_lock | * c53acbf2fa net/sched: sch_taprio: fix possible use-after-free | * 40516d042b net: stmmac: Fix queue statistics reading | * 620aa67f80 pinctrl: rockchip: fix reading pull type on rk3568 | * ddca674af1 pinctrl/rockchip: add error handling for pull/drive register getters | * 259ab8fb8c pinctrl/rockchip: Use temporary variable for struct device | * 8cbf932c5c wifi: rndis_wlan: Prevent buffer overflow in rndis_query_oid | * f792d26e5c gpio: mxc: Always set GPIOs used as interrupt source to INPUT mode | * 8335f877ef gpio: mxc: Protect GPIO irqchip RMW with bgpio spinlock | * fb4fb3d267 gpio: use raw spinlock for gpio chip shadowed data | * 52e3eebfe6 sch_htb: Avoid grafting on htb_destroy_class_offload when destroying htb | * 8232e5a84d net: enetc: avoid deadlock in enetc_tx_onestep_tstamp() | * 95347e41ca net: wan: Add checks for NULL for utdm in undo_uhdlc_init and unmap_si_regs | * 7f129927fe net: nfc: Fix use-after-free in local_cleanup() | * 397aaac884 phy: rockchip-inno-usb2: Fix missing clk_disable_unprepare() in rockchip_usb2phy_power_on() | * 01bdcc73db bpf: Fix pointer-leak due to insufficient speculative store bypass mitigation | * 261e2f12b6 amd-xgbe: Delay AN timeout during KR training | * a8cf4af544 amd-xgbe: TX Flow Ctrl Registers are h/w ver dependent | * 8e897cb674 ARM: dts: at91: sam9x60: fix the ddr clock for sam9x60 | * 0a27dcd534 NFSD: fix use-after-free in nfsd4_ssc_setup_dul() | * 24af570c99 phy: ti: fix Kconfig warning and operator precedence | * 631fc36685 arm64: dts: qcom: msm8992-libra: Fix the memory map | * dda20ffec8 arm64: dts: qcom: msm8992-libra: Add CPU regulators | * 37ba5e9293 arm64: dts: qcom: msm8992: Don't use sfpb mutex | * bab87524f6 PM: AVS: qcom-cpr: Fix an error handling path in cpr_probe() | * b7a479c764 affs: initialize fsdata in affs_truncate() | * 623d111689 IB/hfi1: Remove user expected buffer invalidate race | * 47d5fc0dcd IB/hfi1: Immediately remove invalid memory from hardware | * 85caef2cfd IB/hfi1: Fix expected receive setup error exit issues | * cb193984d4 IB/hfi1: Reserve user expected TIDs | * 891ddfae39 IB/hfi1: Reject a zero-length user expected buffer | * 362c948972 RDMA/core: Fix ib block iterator counter overflow | * e26c571c3b tomoyo: fix broken dependency on *.conf.default | * 7dfe83ecc3 firmware: arm_scmi: Harden shared memory access in fetch_notification | * a653dbb70c firmware: arm_scmi: Harden shared memory access in fetch_response | * caffa7fed1 EDAC/highbank: Fix memory leak in highbank_mc_probe() | * 95de286200 reset: uniphier-glue: Fix possible null-ptr-deref | * 4773a8cf9a reset: uniphier-glue: Use reset_control_bulk API | * 7b33accc8f soc: imx8m: Fix incorrect check for of_clk_get_by_name() | * f07427f8d9 arm64: dts: imx8mm-venice-gw7901: fix USB2 controller OC polarity | * c4cb73febe HID: intel_ish-hid: Add check for ishtp_dma_tx_map | * 25f97c9883 ARM: imx: add missing of_node_put() | * 3e9d79ded9 arm64: dts: imx8mm-beacon: Fix ecspi2 pinmux | * 5381350761 ARM: dts: imx6qdl-gw560x: Remove incorrect 'uart-has-rtscts' | * 0e4bba1656 ARM: dts: imx7d-pico: Use 'clock-frequency' | * 108cf4c6d5 ARM: dts: imx6ul-pico-dwarf: Use 'clock-frequency' | * 207c9e64ed arm64: dts: imx8mp-phycore-som: Remove invalid PMIC property | * 7ce380fe75 dmaengine: ti: k3-udma: Do conditional decrement of UDMA_CHAN_RT_PEER_BCNT_REG | * edba9b7a70 memory: mvebu-devbus: Fix missing clk_disable_unprepare in mvebu_devbus_probe() | * e66f6949da memory: atmel-sdramc: Fix missing clk_disable_unprepare in atmel_ramc_probe() | * eda11ab556 memory: tegra: Remove clients SID override programming * | cab35cbd71 Revert "xhci: Add update_hub_device override for PCI xHCI hosts" * | 29e8f224d8 Revert "xhci: Detect lpm incapable xHC USB3 roothub ports from ACPI tables" * | 5739b27e8f Revert "xhci: Add a flag to disable USB3 lpm on a xhci root port level." * | 5b60fdf2e0 Merge 5.15.90 into android13-5.15-lts |\| | * aabd5ba7e9 Linux 5.15.90 | * 4b6f8263e9 io_uring/rw: remove leftover debug statement | * b10acfcd61 io_uring/rw: ensure kiocb_end_write() is always called | * 124fb13cc7 io_uring: fix double poll leak on repolling | * e944f1e37b io_uring: Clean up a false-positive warning from GCC 9.3.0 | * 940e8922c1 mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma | * e83cc8a780 soc: qcom: apr: Make qcom,protection-domain optional again | * 982c8b1e95 Revert "wifi: mac80211: fix memory leak in ieee80211_if_add()" | * 40a4797e08 block: mq-deadline: Rename deadline_is_seq_writes() | * 3abf10b4c4 net/mlx5: fix missing mutex_unlock in mlx5_fw_fatal_reporter_err_work() | * 1aab00aa41 net/ulp: use consistent error code when blocking ULP | * 2e4c95a404 io_uring/net: fix fast_iov assignment in io_setup_async_msg() | * 311b298a33 io_uring: io_kiocb_update_pos() should not touch file for non -1 offset | * 487a086595 tracing: Use alignof__(struct {type b;}) instead of offsetof() | * 430443f856 x86/fpu: Use _Alignof to avoid undefined behavior in TYPE_ALIGN | * f114717dfa Revert "drm/amdgpu: make display pinning more flexible (v2)" | * 7a993c1be5 efi: rt-wrapper: Add missing include | * de2af657ca arm64: efi: Execute runtime services from a dedicated stack | * 9cca110cf8 fs/ntfs3: Fix attr_punch_hole() null pointer derenference | * d4d112e5c4 drm/amdgpu: drop experimental flag on aldebaran | * c82fa690da drm/amd/display: Fix COLOR_SPACE_YCBCR2020_TYPE matrix | * 88c3375224 drm/amd/display: Calculate output_color_space after pixel encoding adjustment | * 87e605b161 drm/amd/display: Fix set scaling doesn's work | * 8687b8cdc3 drm/i915/display: Check source height is > 0 | * 5d96179166 drm/i915: re-disable RC6p on Sandy Bridge | * e9a7ec188b mei: me: add meteor lake point M DID | * eb0421d90f gsmi: fix null-deref in gsmi_get_variable | * b8d99cda52 serial: atmel: fix incorrect baudrate setup | * b85498385a serial: amba-pl011: fix high priority character transmission in rs486 mode | * 0f150134dd dmaengine: idxd: Let probe fail when workqueue cannot be enabled | * 1e8c127c2e dmaengine: tegra210-adma: fix global intr clear | * 473e2281f7 dmaengine: lgm: Move DT parsing after initialization | * 73337724cb serial: pch_uart: Pass correct sg to dma_unmap_sg() | * 4307a41cbc dt-bindings: phy: g12a-usb3-pcie-phy: fix compatible string documentation | * c9d55f564a dt-bindings: phy: g12a-usb2-phy: fix compatible string documentation | * 78aa45bb7a usb-storage: apply IGNORE_UAS only for HIKSEMI MD202 on RTL9210 | * a69c8dfb85 usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate() | * 1ab67e87b1 usb: gadget: g_webcam: Send color matching descriptor per frame | * b08167d8f0 usb: typec: altmodes/displayport: Fix pin assignment calculation | * 7fb1322e7a usb: typec: altmodes/displayport: Add pin assignment helper | * 59f9ee3796 usb: typec: tcpm: Fix altmode re-registration causes sysfs create fail | * a1c8a5c2f8 usb: host: ehci-fsl: Fix module alias | * f073d10cd5 usb: cdns3: remove fetched trb from cache before dequeuing | * 73f4bde973 USB: serial: cp210x: add SCALANCE LPE-9000 device id | * a2e075f401 USB: gadgetfs: Fix race between mounting and unmounting | * 2da67bff29 tty: fix possible null-ptr-defer in spk_ttyio_release | * cb53a3366e tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer | * f322dd2e4a staging: mt7621-dts: change some node hex addresses to lower case | * 6508788b2c bpf: restore the ebpf program ID for BPF_AUDIT_UNLOAD and PERF_BPF_EVENT_PROG_UNLOAD | * 7b122c33bd riscv: dts: sifive: fu740: fix size of pcie 32bit memory | * 701f9c3da6 thunderbolt: Use correct function to calculate maximum USB3 link rate | * 5b1b03a3d3 cifs: do not include page data when checking signature | * 64287cd456 btrfs: fix race between quota rescan and disable leading to NULL pointer deref | * f2e0e1615d btrfs: do not abort transaction on failure to write log tree when syncing log | * f653abe619 mmc: sdhci-esdhc-imx: correct the tuning start tap and step setting | * 9881436f01 mmc: sunxi-mmc: Fix clock refcount imbalance during unbind | * 33bd0db750 ACPI: PRM: Check whether EFI runtime is available | * 87e1ee6058 comedi: adv_pci1760: Fix PWM instruction handling | * b5d24a8e4a usb: core: hub: disable autosuspend for TI TUSB8041 | * 61a0890cb9 misc: fastrpc: Fix use-after-free race condition for maps | * 1b7b7bb400 misc: fastrpc: Don't remove map on creater_process and device_release | * e7e41fcf90 USB: misc: iowarrior: fix up header size for USB_DEVICE_ID_CODEMERCS_IOW100 | * f3de34d90d staging: vchiq_arm: fix enum vchiq_status return types | * 16d09c4bc9 USB: serial: option: add Quectel EM05CN modem | * 34d769f0c6 USB: serial: option: add Quectel EM05CN (SG) modem | * 768d56ed24 USB: serial: option: add Quectel EC200U modem | * 829916f069 USB: serial: option: add Quectel EM05-G (RS) modem | * eb8808f769 USB: serial: option: add Quectel EM05-G (CS) modem | * 6e0430db19 USB: serial: option: add Quectel EM05-G (GR) modem | * f01aefe374 prlimit: do_prlimit needs to have a speculation check | * 418e2c756d xhci: Detect lpm incapable xHC USB3 roothub ports from ACPI tables | * 10cb7d53be usb: acpi: add helper to check port lpm capability using acpi _DSM | * 1818e2a97d xhci: Add a flag to disable USB3 lpm on a xhci root port level. | * 8911ff7963 xhci: Add update_hub_device override for PCI xHCI hosts | * c462ac871f xhci: Fix null pointer dereference when host dies | * f39c813af0 usb: xhci: Check endpoint is valid before dereferencing it | * 0f175cebc4 xhci-pci: set the dma max_seg_size | * 89a410dbd0 io_uring/rw: defer fsnotify calls to task context | * 05d69b372b io_uring: do not recalculate ppos unnecessarily | * ff8a070253 io_uring: update kiocb->ki_pos at execution time | * b7958caf41 io_uring: remove duplicated calls to io_kiocb_ppos | * 86e2d6901a io_uring: ensure that cached task references are always put on exit | * 30b9068934 io_uring: fix async accept on O_NONBLOCK sockets | * a79b13f249 io_uring: allow re-poll if we made progress | * 3c1a3d0269 io_uring: support MSG_WAITALL for IORING_OP_SEND(MSG) | * 390b881631 io_uring: add flag for disabling provided buffer recycling | * 9b7b0f2116 io_uring: ensure recv and recvmsg handle MSG_WAITALL correctly | * cdc68e714d io_uring: improve send/recv error handling | * ccf06b5a98 io_uring: pass in EPOLL_URING_WAKE for eventfd signaling and wakeups | * 77baf39227 eventfd: provide a eventfd_signal_mask() helper | * a2d8ff00a7 eventpoll: add EPOLL_URING_WAKE poll wakeup flag | * a9aa4aa7a5 io_uring: don't gate task_work run on TIF_NOTIFY_SIGNAL | * bd9a23a4bb hugetlb: unshare some PMDs when splitting VMAs | * 393d9e3ed1 drm/amd: Delay removal of the firmware framebuffer | * 865e244e06 drm/amdgpu: disable runtime pm on several sienna cichlid cards(v2) | * 560373fb1e ALSA: hda/realtek: fix mute/micmute LEDs don't work for a HP platform | * 26264260a8 ALSA: hda/realtek: fix mute/micmute LEDs for a HP ProBook | * 1026756321 efi: fix userspace infinite retry read efivars after EFI runtime services page fault | * 45627a1a64 nilfs2: fix general protection fault in nilfs_btree_insert() | * 350d66d9e7 zonefs: Detect append writes at invalid locations | * 5054d001ff Add exception protection processing for vd in axi_chan_handle_err function | * a12fd43bd1 wifi: mac80211: sdata can be NULL during AMPDU start | * f96a6c009e wifi: brcmfmac: fix regression for Broadcom PCIe wifi devices | * 908d1742b6 Bluetooth: hci_qca: Fix driver shutdown on closed serdev | * 7530fbc05f fbdev: omapfb: avoid stack overflow warning | * e1df7f0b27 perf/x86/rapl: Treat Tigerlake like Icelake | * 2c129e8689 f2fs: let's avoid panic if extent_tree is not created | * 58bac74402 x86/asm: Fix an assembler warning with current binutils | * fdb4a70bb7 btrfs: always report error in run_one_delayed_ref() | * f641067ea2 RDMA/srp: Move large values to a new enum for gcc13 | * 793f8ac218 r8169: move rtl_wol_enable_rx() and rtl_prepare_power_down() | * dc072762f9 net/ethtool/ioctl: return -EOPNOTSUPP if we have no phy stats | * 308d24d875 vduse: Validate vq_num in vduse_validate_config() | * 8e1eb926a0 virtio_pci: modify ENOENT to EINVAL | * 64a6f3689d tools/virtio: initialize spinlocks in vring_test.c | * 95fc28a8e9 selftests/bpf: check null propagation only neither reg is PTR_TO_BTF_ID | * d4a9d2944f pNFS/filelayout: Fix coalescing test for single DS | * 6a3319af6b btrfs: fix trace event name typo for FLUSH_DELAYED_REFS * | 52cea9ba91 Merge "Merge 5.15.89 into android13-5.15-lts" into android13-5.15-lts |\ \ | * | de550d72f1 Merge 5.15.89 into android13-5.15-lts | |\| | | * 3bcc86eb3e Linux 5.15.89 | | * 37c18ef49e pinctrl: amd: Add dynamic debugging for active GPIOs | | * a5841b81ad Revert "usb: ulpi: defer ulpi_register on ulpi_read_id timeout" | | * 7ec9a45fc4 block: handle bio_split_to_limits() NULL return | | * ba86db02d4 io_uring/io-wq: only free worker if it was allocated for creation | | * bb135bcc94 io_uring/io-wq: free worker if task_work creation is canceled | | * 63c2fa09b8 scsi: mpt3sas: Remove scsi_dma_map() error messages | | * e2ea555642 efi: fix NULL-deref in init error path | | * 94b6cf84db arm64: cmpxchg_double*: hazard against entire exchange variable | | * 3891fa4982 arm64: atomics: remove LL/SC trampolines | | * 61e86339af arm64: atomics: format whitespace consistently | | * ed4629d1e9 io_uring: lock overflowing for IOPOLL | | * fbf5015141 KVM: x86: Do not return host topology information from KVM_GET_SUPPORTED_CPUID | | * ee16841134 Documentation: KVM: add API issues section | | * b8f3b3cffb mm: Always release pages to the buddy allocator in memblock_free_late(). | | * d2dc110dea platform/surface: aggregator: Add missing call to ssam_request_sync_free() | | * cfd5978411 igc: Fix PPS delta between two synchronized end-points | | * 0bf52601ce perf build: Properly guard libbpf includes | | * 205f35eee7 net/mlx5e: Don't support encap rules with gbp option | | * 0526fc9330 net/mlx5: Fix ptp max frequency adjustment range | | * 9e2c38827c net/sched: act_mpls: Fix warning during failed attribute validation | | * e3bb44beaf tools/nolibc: fix the O_* fcntl/open macro definitions for riscv | | * 1e6ec75bb3 tools/nolibc: restore mips branch ordering in the _start block | | * bd0431a66c tools/nolibc: Remove .global _start from the entry point code | | * a77c54f5b5 tools/nolibc/arch: mark the _start symbol as weak | | * da51e086d1 tools/nolibc/arch: split arch-specific code into individual files | | * 8591e788be tools/nolibc/types: split syscall-specific definitions into their own files | | * 4fceecdeaa tools/nolibc/std: move the standard type definitions to std.h | | * 1792136f22 tools/nolibc: use pselect6 on RISCV | | * 487386a49e tools/nolibc: x86-64: Use `mov $60,%eax` instead of `mov $60,%rax` | | * 27af4f2260 tools/nolibc: x86: Remove `r8`, `r9` and `r10` from the clobber list | | * a60b24192b af_unix: selftest: Fix the size of the parameter to connect() | | * 39ae73e581 nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame() | | * f6003784b1 hvc/xen: lock console list traversal | | * 79c58b7424 octeontx2-af: Fix LMAC config in cgx_lmac_rx_tx_enable | | * 303d062881 tipc: fix unexpected link reset due to discovery messages | | * e79d0f97cc ALSA: usb-audio: Relax hw constraints for implicit fb sync | | * c9557906bd ALSA: usb-audio: Make sure to stop endpoints before closing EPs | | * 83e758105b ASoC: wm8904: fix wrong outputs volume after power reactivation | | * 7c26d21872 scsi: ufs: core: WLUN suspend SSU/enter hibern8 fail recovery | | * 513fdf0b8e scsi: ufs: Stop using the clock scaling lock in the error handler | | * 13259b60b7 scsi: mpi3mr: Refer CONFIG_SCSI_MPI3MR in Makefile | | * 470f6a9175 regulator: da9211: Use irq handler when ready | | * 24107ad469 x86/resctrl: Fix task CLOSID/RMID update race | | * cd3da505fb EDAC/device: Fix period calculation in edac_device_reset_delay_period() | | * ab0d02c53a x86/boot: Avoid using Intel mnemonics in AT&T syntax asm | | * a90d339f1f powerpc/imc-pmu: Fix use of mutex in IRQs disabled section | | * 511cf17b24 netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function. | | * b22faa21b6 sched/core: Fix use-after-free bug in dup_user_cpus_ptr() | | * d766ccadbe iommu/mediatek-v1: Fix an error handling path in mtk_iommu_v1_probe() | | * c929a230c8 iommu/iova: Fix alloc iova overflows issue | | * 4b51aa263a usb: ulpi: defer ulpi_register on ulpi_read_id timeout | | * 9a8bf443f6 bus: mhi: host: Fix race between channel preparation and M0 event | | * 456e3794e0 ipv6: raw: Deduct extension header length in rawv6_push_pending_frames | | * 4c93422a54 ixgbe: fix pci device refcount leak | | * e97da5d97a platform/x86: sony-laptop: Don't turn off 0x153 keyboard backlight during probe | | * f3b1e04daf dt-bindings: msm/dsi: Don't require vcca-supply on 14nm PHY | | * 52a5f596c6 dt-bindings: msm/dsi: Don't require vdds-supply on 10nm PHY | | * 984ad875db drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer | | * 92ae83665e platform/x86: ideapad-laptop: Add Legion 5 15ARH05 DMI id to set_fn_lock_led_list[] | | * e38b5f81df dt-bindings: msm: dsi-phy-28nm: Add missing qcom, dsi-phy-regulator-ldo-mode | | * bb32ab40cb dt-bindings: msm: dsi-controller-main: Fix description of core clock | | * 3fb8d10bee dt-bindings: msm: dsi-controller-main: Fix power-domain constraint | | * dc5b651cad drm/msm/adreno: Make adreno quirks not overwrite each other | | * 757d665ee1 dt-bindings: msm: dsi-controller-main: Fix operating-points-v2 constraint | | * c90cf47d30 platform/x86: dell-privacy: Fix SW_CAMERA_LENS_COVER reporting | | * 25b5f693bc platform/surface: aggregator: Ignore command messages not intended for us | | * ee7b8ce2cc platform/x86: dell-privacy: Only register SW_CAMERA_LENS_COVER if present | | * e0072068ad cifs: Fix uninitialized memory read for smb311 posix symlink create | | * f3495b5e9e net/mlx5e: Set action fwd flag when parsing tc action goto | | * 1a8431cc20 drm/i915/gt: Reset twice | | * 011ecdbcd5 drm/virtio: Fix GEM handle creation UAF | | * 798dfeeae3 s390/percpu: add READ_ONCE() to arch_this_cpu_to_op_simple() | | * a400593eb3 s390/cpum_sf: add READ_ONCE() semantics to compare and swap loops | | * d4fa65960a ASoC: qcom: lpass-cpu: Fix fallback SD line index handling | | * 8400b91c11 s390/kexec: fix ipl report address for kdump | | * c07e0babd1 perf auxtrace: Fix address filter duplicate symbol selection | | * e81d82da61 net: stmmac: add aux timestamps fifo clearance wait | | * 44167b74a8 docs: Fix the docs build with Sphinx 6.0 | | * 24176bf2a1 efi: tpm: Avoid READ_ONCE() for accessing the event log | | * 01b966b14c selftests: kvm: Fix a compile error in selftests/kvm/rseq_test.c | | * c773ebe11c KVM: arm64: nvhe: Fix build with profile optimization | | * c1d6a72fc8 KVM: arm64: Fix S1PTW handling on RO memslots | | * e04e6cd883 ALSA: hda/realtek: Enable mute/micmute LEDs on HP Spectre x360 13-aw0xxx | | * b983c9a971 ALSA: hda/realtek - Turn on power early | | * 9ab3696881 ALSA: control-led: use strscpy in set_led_id() | | * a8acfe2c6f netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits * | | 2c4f6d72f1 Merge "Merge 5.15.88 into android13-5.15-lts" into android13-5.15-lts |\| | | * | 773ec50a8a Merge 5.15.88 into android13-5.15-lts | |\| | | * 90bb4f8f39 Linux 5.15.88 | | * cbd3e6d5e5 ALSA: hda - Enable headset mic on another Dell laptop with ALC3254 | | * b98dee4746 ALSA: hda/hdmi: Add a HP device 0x8715 to force connect list | | * 26350c21bc ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF | | * dadd0dcaa6 net/ulp: prevent ULP without clone op from entering the LISTEN status | | * 04941c1d5b net: sched: disallow noqueue for qdisc classes | | * 068b512193 serial: fixup backport of "serial: Deassert Transmit Enable on probe in driver-specific way" | | * 46aa155758 selftests/vm/pkeys: Add a regression test for setting PKRU through ptrace | | * 3c1940c549 x86/fpu: Emulate XRSTOR's behavior if the xfeatures PKRU bit is not set | | * 3f1c81426a x86/fpu: Allow PKRU to be (once again) written by ptrace. | | * b29773d6b0 x86/fpu: Add a pkru argument to copy_uabi_to_xstate() | | * 9813c5fc22 x86/fpu: Add a pkru argument to copy_uabi_from_kernel_to_xstate(). | | * fea26e83a1 x86/fpu: Take task_struct* in copy_sigframe_from_user_to_xstate() | | * d4d152017e parisc: Align parisc MADV_XXX constants with all other architectures | * | 1867565896 Revert "ASoC/SoundWire: dai: expand 'stream' concept beyond SoundWire" | * | 43064ed394 Revert "ASoC: Intel/SOF: use set_stream() instead of set_tdm_slots() for HDAudio" | * | 959d50edd2 Revert "PM/devfreq: governor: Add a private governor_data for governor" * | | c34c76a947 Revert "ASoC/SoundWire: dai: expand 'stream' concept beyond SoundWire" * | | 33ef84070b Revert "ASoC: Intel/SOF: use set_stream() instead of set_tdm_slots() for HDAudio" * | | e60641bdca Revert "PM/devfreq: governor: Add a private governor_data for governor" * | | 793ec0a9cc Merge "Merge 5.15.87 into android13-5.15-lts" into android13-5.15-lts |\| | | * | fc4de343bd Merge 5.15.87 into android13-5.15-lts | |\| | | * d57287729e Linux 5.15.87 | | * 24186c6822 drm/mgag200: Fix PLL setup for G200_SE_A rev >=4 | | * e326ee018a io_uring: Fix unsigned 'res' comparison with zero in io_fixup_rw_res() | | * b2b6eefab4 efi: random: combine bootloader provided RNG seed with RNG protocol output | | * 99c0759495 mbcache: Avoid nesting of cache->c_list_lock under bit locks | | * d50d6c193a net: hns3: fix return value check bug of rx copybreak | | * d4e6a13eb9 btrfs: make thaw time super block check to also verify checksum | | * 70a1dccd0e selftests: set the BUILD variable to absolute path | | * 58fef3ebc8 ext4: don't allow journal inode to have encrypt flag | | * bd5dc96fea mptcp: use proper req destructor for IPv6 | | * 78bd6ab52c mptcp: dedicated request sock for subflow in v6 | | * 6e9c1aef3e Revert "ACPI: PM: Add support for upcoming AMD uPEP HID AMDI007" | | * e32f867b37 ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob | | * 4136f1ac1e ksmbd: fix infinite loop in ksmbd_conn_handler_loop() | | * f10defb0be hfs/hfsplus: avoid WARN_ON() for sanity check, use proper error handling | | * 48d9e2e6de hfs/hfsplus: use WARN_ON for sanity check | | * f5a9bbf962 drm/i915/gvt: fix vgpu debugfs clean in remove | | * ae9a615117 drm/i915/gvt: fix gvt debugfs destroy | | * eb3e943a32 riscv, kprobes: Stricter c.jr/c.jalr decoding | | * 620a229f57 riscv: uaccess: fix type of 0 variable on error in get_user() | | * 8e05a993f8 thermal: int340x: Add missing attribute for data rate base | | * c3222fd282 io_uring: fix CQ waiting timeout handling | | * b7b9bc9305 block: don't allow splitting of a REQ_NOWAIT bio | | * e1358c8787 fbdev: matroxfb: G200eW: Increase max memory from 1 MB to 16 MB | | * 682a7d064f nfsd: fix handling of readdir in v4root vs. mount upcall timeout | | * cb42aa7b5f x86/bugs: Flush IBP in ib_prctl_set() | | * 554a880a1f x86/kexec: Fix double-free of elf header buffer | | * 264241a610 btrfs: check superblock to ensure the fs was not modified at thaw time | | * 69f4bda5f4 nvme: also return I/O command effects from nvme_command_effects | | * a6a4b057cd nvmet: use NVME_CMD_EFFECTS_CSUPP instead of open coding it | | * f9309dcaa9 io_uring: check for valid register opcode earlier | | * 4df413d469 nvme: fix multipath crash caused by flush request when blktrace is enabled | | * 03ce792128 ASoC: Intel: bytcr_rt5640: Add quirk for the Advantech MICA-071 tablet | | * 0dca7375e2 udf: Fix extension of the last extent in the file | | * dc1bc90397 caif: fix memory leak in cfctrl_linkup_request() | | * bce3680b48 drm/i915: unpin on error in intel_vgpu_shadow_mm_pin() | | * da6a3653b8 perf stat: Fix handling of --for-each-cgroup with --bpf-counters to match non BPF mode | | * 11cd4ec635 usb: rndis_host: Secure rndis_query check against int overflow | | * 6ea5273c71 octeontx2-pf: Fix lmtst ID used in aura free | | * 4e5f2c74cb drivers/net/bonding/bond_3ad: return when there's no aggregator | | * 8414983c2e fs/ntfs3: don't hold ni_lock when calling truncate_setsize() | | * a23e8376e6 drm/imx: ipuv3-plane: Fix overlay plane width | | * a8f7fd322f perf tools: Fix resources leak in perf_data__open_dir() | | * a1e1521b46 netfilter: ipset: Rework long task execution when adding/deleting entries | | * 6f19a38483 netfilter: ipset: fix hash:net,port,net hang with /0 subnet | | * 774d259749 net: sparx5: Fix reading of the MAC address | | * 04dc4003e5 net: sched: cbq: dont intepret cls results when asked to drop | | * f02327a487 net: sched: atm: dont intepret cls results when asked to drop | | * 95da1882ce gpio: sifive: Fix refcount leak in sifive_gpio_probe | | * da9c9883ec ceph: switch to vfs_inode_has_locks() to fix file lock bug | | * 54e72ce5f1 filelock: new helper: vfs_inode_has_locks | | * f34b03ce3a drm/meson: Reduce the FIFO lines held when AFBC is not used | | * 05a8410b0f RDMA/mlx5: Fix validation of max_rd_atomic caps for DC | | * 8d89870d63 RDMA/mlx5: Fix mlx5_ib_get_hw_stats when used for device | | * 4d112f0016 net: phy: xgmiitorgmii: Fix refcount leak in xgmiitorgmii_probe | | * e5fbeb3d16 net: ena: Update NUMA TPH hint register upon NUMA node update | | * 7840b93cfd net: ena: Set default value for RX interrupt moderation | | * d09b7a9d2f net: ena: Fix rx_copybreak value update | | * 0e7ad9b006 net: ena: Use bitmask to indicate packet redirection | | * 5d4964984b net: ena: Account for the number of processed bytes in XDP | | * f17d9aec07 net: ena: Don't register memory info on XDP exchange | | * a4aa727ad0 net: ena: Fix toeplitz initial hash value | | * 0bec17f1ce net: amd-xgbe: add missed tasklet_kill | | * cb2f74685f net/mlx5e: Fix hw mtu initializing at XDP SQ allocation | | * 6c72abb78b net/mlx5e: Always clear dest encap in neigh-update-del | | * b36783bc11 net/mlx5e: TC, Refactor mlx5e_tc_add_flow_mod_hdr() to get flow attr | | * f8c10eeba3 net/mlx5e: IPoIB, Don't allow CQE compression to be turned on by default | | * 7227bbb7c1 net/mlx5: Avoid recovery in probe flows | | * 9369b9afa8 net/mlx5: Add forgotten cleanup calls into mlx5_init_once() error path | | * d966f2ee4b net/mlx5: E-Switch, properly handle ingress tagged packets on VST | | * 6a37a01aba vdpa_sim: fix vringh initialization in vdpasim_queue_ready() | | * e3462410c3 vhost: fix range used in translate_desc() | | * 13871f60ec vringh: fix range used in iotlb_translate() | | * e05d4c8c28 vhost/vsock: Fix error handling in vhost_vsock_init() | | * 586e6fd7d5 vdpa_sim: fix possible memory leak in vdpasim_net_init() and vdpasim_blk_init() | | * b63bc2db24 nfc: Fix potential resource leaks | | * 945e58bdaf net: dsa: mv88e6xxx: depend on PTP conditionally | | * 95df720e64 qlcnic: prevent ->dcb use-after-free on qlcnic_dcb_enable() failure | | * 6c55953e23 net: sched: fix memory leak in tcindex_set_parms | | * d14a4b24d5 net: hns3: fix VF promisc mode not update when mac table full | | * 7ed205b947 net: hns3: fix miss L3E checking for rx packet | | * 47868cb77f net: hns3: extract macro to simplify ring stats update code | | * 7457c5a776 net: hns3: refactor hns3_nic_reuse_page() | | * 4a6e9fb534 net: hns3: add interrupts re-initialization while doing VF FLR | | * 5e48ed805c nfsd: shut down the NFSv4 state objects before the filecache | | * 7e2825f5fb veth: Fix race with AF_XDP exposing old or uninitialized descriptors | | * ac95cdafac netfilter: nf_tables: honor set timeout and garbage collection updates | | * 49677ea151 vmxnet3: correctly report csum_level for encapsulated packet | | * 9d30cb4421 netfilter: nf_tables: perform type checking for existing sets | | * c3bfb7784a netfilter: nf_tables: add function to create set stateful expressions | | * 996cd779c2 netfilter: nf_tables: consolidate set description | | * 4f1105ee72 drm/panfrost: Fix GEM handle creation ref-counting | | * df493f676f bpf: pull before calling skb_postpull_rcsum() | | * d7e817e689 btrfs: fix an error handling path in btrfs_defrag_leaves() | | * 4d69cdba2c SUNRPC: ensure the matching upcall is in-flight upon downcall | | * af0265dfef drm/i915/migrate: fix length calculation | | * 8b25a526a5 drm/i915/migrate: fix offset calculation | | * a3d1e6f9b6 drm/i915/migrate: don't check the scratch page | | * 5bc0b2fda4 ext4: fix deadlock due to mbcache entry corruption | | * a6e4094faf mbcache: automatically delete entries from cache on freeing | | * 1872549129 ext4: correct inconsistent error msg in nojournal mode | | * 761f88f82e ext4: goto right label 'failed_mount3a' | | * eb16602140 ravb: Fix "failed to switch device to config mode" message during unbind | | * 4216995dbd perf probe: Fix to get the DW_AT_decl_file and DW_AT_call_file as unsinged data | | * d8bbbf2b52 perf probe: Use dwarf_attr_integrate as generic DWARF attr accessor | | * b131b5f136 media: s5p-mfc: Fix in register read and write for H264 | | * ff27800c0a media: s5p-mfc: Clear workbit to handle error condition | | * 4653ba32ad media: s5p-mfc: Fix to handle reference queue during finishing | | * 1bd7283dc0 x86/MCE/AMD: Clear DFR errors found in THR handler | | * 5ddcd349d9 x86/mce: Get rid of msr_ops | | * b8e7ed42bc btrfs: fix extent map use-after-free when handling missing device in read_one_chunk | | * 9c3beebd21 btrfs: move missing device handling in a dedicate function | | * 7528b21ceb btrfs: replace strncpy() with strscpy() | | * 4cef44525f phy: qcom-qmp-combo: fix out-of-bounds clock access | | * 855edc4ec6 ARM: renumber bits related to _TIF_WORK_MASK | | * 18f28f1330 ext4: fix off-by-one errors in fast-commit block filling | | * b205332b6b ext4: fix unaligned memory access in ext4_fc_reserve_space() | | * 9c197dcbac ext4: add missing validation of fast-commit record lengths | | * 6220ec4055 ext4: don't set up encryption key during jbd2 transaction | | * 6482d42baf ext4: disable fast-commit of encrypted dir operations | | * 6969367c15 ext4: fix potential out of bound read in ext4_fc_replay_scan() | | * 818175ae3b ext4: factor out ext4_fc_get_tl() | | * ffd84d0bc5 ext4: introduce EXT4_FC_TAG_BASE_LEN helper | | * 37914e029b ext4: use ext4_debug() instead of jbd_debug() | | * b0ed9a032e ext4: remove unused enum EXT4_FC_COMMIT_FAILED | | * 394514ddf9 tracing: Fix issue of missing one synthetic field | | * 5234dd5d20 block: mq-deadline: Fix dd_finish_request() for zoned devices | | * 78623b10fc drm/amdgpu: make display pinning more flexible (v2) | | * 6363da2c85 drm/amdgpu: handle polaris10/11 overlap asics (v2) | | * 2771c7a0ee ext4: allocate extended attribute value in vmalloc area | | * e995ff918e ext4: avoid unaccounted block allocation when expanding inode | | * 877247222a ext4: initialize quota before expanding inode in setproject ioctl | | * 322cf639b0 ext4: fix inode leak in ext4_xattr_inode_create() on an error path | | * 6380a93b57 ext4: fix kernel BUG in 'ext4_write_inline_data_end()' | | * dc3bbc9753 ext4: avoid BUG_ON when creating xattrs | | * 844c405552 ext4: fix error code return to user-space in ext4_get_branch() | | * b870b28e29 ext4: fix corruption when online resizing a 1K bigalloc fs | | * d440d6427a ext4: fix delayed allocation bug in ext4_clu_mapped for bigalloc + inline | | * def7a39091 ext4: init quota for 'old.inode' in 'ext4_rename' | | * 3c31d8d3ad ext4: fix uninititialized value in 'ext4_evict_inode' | | * 871800770d ext4: fix leaking uninitialized memory in fast-commit journal | | * d480a49c15 ext4: fix bug_on in __es_tree_search caused by bad boot loader inode | | * 91009e361e ext4: check and assert if marking an no_delete evicting inode dirty | | * 820eacbc4e ext4: fix reserved cluster accounting in __es_remove_extent() | | * 0dcbf4dc3d ext4: fix bug_on in __es_tree_search caused by bad quota inode | | * 06a20a68bb ext4: add helper to check quota inums | | * f7e6b5548f ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inode | | * 205ac16628 ext4: fix undefined behavior in bit shift for ext4_check_flag_values | | * cf0e0817b0 ext4: fix use-after-free in ext4_orphan_cleanup | | * 970bfd7a41 fs: ext4: initialize fsdata in pagecache_write() | | * 744bbde378 ext4: remove trailing newline from ext4_msg() message | | * 7192afa5e4 ext4: add inode table check in __ext4_get_inode_loc to aovid possible infinite loop | | * 0d041b7251 ext4: silence the warning when evicting inode with dioread_nolock | | * af4ceb00eb drm/ingenic: Fix missing platform_driver_unregister() call in ingenic_drm_init() | | * c919e1154b drm/i915/dsi: fix VBT send packet port selection for dual link DSI | | * 6948e570f5 drm/vmwgfx: Validate the box size for the snooped cursor | | * 5594fde1ef drm/connector: send hotplug uevent on connector cleanup | | * 317ebe61a6 device_cgroup: Roll back to original exceptions after copy failure | | * ac838c663b parisc: led: Fix potential null-ptr-deref in start_task() | | * 2c1881f081 remoteproc: core: Do pm_relax when in RPROC_OFFLINE state | | * 9b615f957c iommu/amd: Fix ivrs_acpihid cmdline parsing code | | * 35b792179b phy: qcom-qmp-combo: fix sc8180x reset | | * dfd05a1335 driver core: Fix bus_type.match() error handling in __driver_attach() | | * 44618a3397 crypto: ccp - Add support for TEE for PCI ID 0x14CA | | * c55507a94b crypto: n2 - add missing hash statesize | | * 4830750696 riscv: mm: notify remote harts about mmu cache updates | | * 16b6d9525d riscv: stacktrace: Fixup ftrace_graph_ret_addr retp argument | | * 657b440a27 PCI/sysfs: Fix double free in error path | | * 67fd41bbb0 PCI: Fix pci_device_is_present() for VFs by checking PF | | * bfce073089 ipmi: fix use after free in _ipmi_destroy_user() | | * 3b4984035c ima: Fix a potential NULL pointer access in ima_restore_measurement_list | | * a843699f16 mtd: spi-nor: Check for zero erase size in spi_nor_find_best_erase_type() | | * 24f4649cd8 ipmi: fix long wait in unload when IPMI disconnect | | * fa6bbb4894 ipu3-imgu: Fix NULL pointer dereference in imgu_subdev_set_selection() | | * cdb208b090 ASoC: jz4740-i2s: Handle independent FIFO flush bits | | * 2d0d083d8a wifi: wilc1000: sdio: fix module autoloading | | * 2e4a088804 efi: Add iMac Pro 2017 to uefi skip cert quirk | | * c49fb9b760 md/bitmap: Fix bitmap chunk size overflow issues | | * 94fe975d54 block: mq-deadline: Do not break sequential write streams to zoned HDDs | | * 8e91679f7b rtc: ds1347: fix value written to century register | | * 5eb8296d73 cifs: fix missing display of three mount options | | * cfa9f66f91 cifs: fix confusing debug message | | * 8b45a3b19a media: dvb-core: Fix UAF due to refcount races at releasing | | * acf984a371 media: dvb-core: Fix double free in dvb_register_device() | | * 5fac317bee ARM: 9256/1: NWFPE: avoid compiler-generated __aeabi_uldivmod | | * ce50c61245 staging: media: tegra-video: fix device_node use after free | | * 6b16758215 staging: media: tegra-video: fix chan->mipi value on error | | * 4f5de49d8c tracing: Fix infinite loop in tracing_read_pipe on overflowed print_trace_line | | * 17becbc4dd tracing/probes: Handle system names with hyphens | | * 2442e655a6 tracing/hist: Fix wrong return value in parse_action_params() | | * 2a81ff5ce8 tracing: Fix complicated dependency of CONFIG_TRACER_MAX_TRACE | | * fe8c35c6ff tracing: Fix race where eprobes can be called before the event | | * eb20f6ed37 x86/kprobes: Fix optprobe optimization check with CONFIG_RETHUNK | | * 3e0fbc06db x86/kprobes: Fix kprobes instruction boudary check with CONFIG_RETHUNK | | * 6268a0704b ftrace/x86: Add back ftrace_expected for ftrace bug reports | | * c95cf30dd4 x86/microcode/intel: Do not retry microcode reloading on the APs | | * f8fe2f4178 KVM: nVMX: Properly expose ENABLE_USR_WAIT_PAUSE control to L1 | | * ca3483d71b KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails | | * 2c73b349fd KVM: VMX: Resume guest immediately when injecting #GP on ECREATE | | * 4a19f48bee of/kexec: Fix reading 32-bit "linux,initrd-{start,end}" values | | * 7eddcdb09f perf/core: Call LSM hook after copying perf_event_attr | | * 15697f6533 tracing/hist: Fix out-of-bound write on 'action_data.var_ref_idx' | | * fd52b86a72 dm cache: set needs_check flag after aborting metadata | | * d2a0b298eb dm cache: Fix UAF in destroy() | | * 856edd0e92 dm clone: Fix UAF in clone_dtr() | | * 9215b25f2e dm integrity: Fix UAF in dm_integrity_dtr() | | * 34cd15d83b dm thin: Fix UAF in run_timer_softirq() | | * ac362c40e3 dm thin: resume even if in FAIL mode | | * 4b710e8481 dm thin: Use last transaction's pmd->root when commit failed | | * f8c26c33fe dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata | | * 28d307f380 dm cache: Fix ABBA deadlock between shrink_slab and dm_cache_metadata_abort | | * a9e89a567f mptcp: remove MPTCP 'ifdef' in TCP SYN cookies | | * 13b9fd0dee mptcp: mark ops structures as ro_after_init | | * b2120ed7fd fs: dlm: retry accept() until -EAGAIN or error returns | | * 5b4478615f fs: dlm: fix sock release if listen fails | | * b7ede8a63d ALSA: hda/realtek: Apply dual codec fixup for Dell Latitude laptops | | * dbd1f30191 ALSA: patch_realtek: Fix Dell Inspiron Plus 16 | | * 8fb4c98f20 cpufreq: Init completion before kobject_init_and_add() | | * 876c6ab967 PM/devfreq: governor: Add a private governor_data for governor | | * 0e945ea733 selftests: Use optional USERCFLAGS and USERLDFLAGS | | * 31697c5953 arm64: dts: qcom: sdm850-lenovo-yoga-c630: correct I2C12 pins drive strength | | * 1630498660 ARM: ux500: do not directly dereference __iomem | | * 99590f29b2 btrfs: fix resolving backrefs for inline extent followed by prealloc | | * 1f9cf4daf2 mmc: sdhci-sprd: Disable CLK_AUTO when the clock is less than 400K | | * 58d53ff30a arm64: dts: qcom: sdm845-db845c: correct SPI2 pins drive strength | | * a777b90a05 perf/x86/intel/uncore: Clear attr_update properly | | * ca77ac238c perf/x86/intel/uncore: Disable I/O stacks to PMU mapping on ICX-D | | * df06e7777c jbd2: use the correct print format | | * 8e75b1dd4b ktest.pl minconfig: Unset configs instead of just removing them | | * 55e5e8b445 kest.pl: Fix grub2 menu handling for rebooting | | * 823fed7c40 soc: qcom: Select REMAP_MMIO for LLCC driver | | * 8dabeeb1ff media: stv0288: use explicitly signed char | | * d167ebea90 net/af_packet: make sure to pull mac header | | * 9ff46c36df net/af_packet: add VLAN support for AF_PACKET SOCK_RAW GSO | | * cd0f597c8a rcu-tasks: Simplify trc_read_check_handler() atomic operations | | * 593ca69668 ASoC/SoundWire: dai: expand 'stream' concept beyond SoundWire | | * a7874dac6b ASoC: Intel/SOF: use set_stream() instead of set_tdm_slots() for HDAudio | | * ae4f70b2fe kcsan: Instrument memcpy/memset/memmove with newer Clang | | * d01fa993eb SUNRPC: Don't leak netobj memory when gss_read_proxy_verf() fails | | * 43135fb098 tpm: tpm_tis: Add the missed acpi_put_table() to fix memory leak | | * 986cd9a9b9 tpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak | | * 638cd298df tpm: acpi: Call acpi_put_table() to fix memory leak | | * d58289fc77 mmc: vub300: fix warning - do not call blocking ops when !TASK_RUNNING | | * 7eb57bc92f f2fs: allow to read node block after shutdown | | * acc13987fd f2fs: should put a page when checking the summary info | | * 35d8a89862 mm, compaction: fix fast_isolate_around() to stay within boundaries | | * 91bd504128 md: fix a crash in mempool_free | | * 29328fbce5 mfd: mt6360: Add bounds checking in Regmap read/write call-backs | | * c24cc476ac pnode: terminate at peers of source | | * 0c9118e381 ALSA: line6: fix stack overflow in line6_midi_transmit | | * ac4b4fdf32 ALSA: line6: correct midi status byte when receiving data from podxt | | * 83c44f0ebf ovl: Use ovl mounter's fsuid and fsgid in ovl_link() | | * fcb94283e0 binfmt: Fix error return code in load_elf_fdpic_binary() | | * ed9947277b hfsplus: fix bug causing custom uid and gid being unable to be assigned with mount | | * 76d52b5412 pstore/zone: Use GFP_ATOMIC to allocate zone buffer | | * 74b0a2fcc3 pstore: Properly assign mem_type property | | * d25aac3489 HID: plantronics: Additional PIDs for double volume key presses quirk | | * 9d4294545c HID: multitouch: fix Asus ExpertBook P2 P2451FA trackpoint | | * 7280fdb80b powerpc/rtas: avoid scheduling in rtas_os_term() | | * d8939315b7 powerpc/rtas: avoid device tree lookups in rtas_os_term() | | * 23a249b118 objtool: Fix SEGFAULT | | * ed686e7a26 fs/ntfs3: Fix slab-out-of-bounds in r_page | | * dd34665cb0 fs/ntfs3: Delete duplicate condition in ntfs_read_mft() | | * a9847a11b6 fs/ntfs3: Use __GFP_NOWARN allocation at ntfs_fill_super() | | * abd2ee2cf4 fs/ntfs3: Use __GFP_NOWARN allocation at wnd_init() | | * d7ce7bb688 fs/ntfs3: Validate index root when initialize NTFS security | | * f29676cc3a soundwire: dmi-quirks: add quirk variant for LAPBC710 NUC15 | | * 9c8471a17f fs/ntfs3: Fix slab-out-of-bounds read in run_unpack | | * 3a52f17867 fs/ntfs3: Validate resident attribute name | | * 3cd9e5b41b fs/ntfs3: Validate buffer length while parsing index | | * c878a915bc fs/ntfs3: Validate attribute name offset | | * f62506f5e4 fs/ntfs3: Add null pointer check for inode operations | | * 2dd9ccfb06 fs/ntfs3: Fix memory leak on ntfs_fill_super() error path | | * ea6b359840 fs/ntfs3: Add null pointer check to attr_load_runs_vcn | | * de5e095524 fs/ntfs3: Validate data run offset | | * d4489ba8fb fs/ntfs3: Add overflow check for attribute size | | * af7a195dea fs/ntfs3: Validate BOOT record_size | | * 8e228ac90c nvmet: don't defer passthrough commands with trivial effects to the workqueue | | * f068a7315a nvme: fix the NVME_CMD_EFFECTS_CSE_MASK definition | | * 576502f25f ata: ahci: Fix PCS quirk application for suspend | | * 7949b0df3d block, bfq: fix uaf for bfqq in bfq_exit_icq_bfqq | | * ff3d9ab51c ACPI: resource: do IRQ override on Lenovo 14ALC7 | | * 698a0813ce ACPI: resource: do IRQ override on XMG Core 15 | | * a9ac7633bb ACPI: resource: do IRQ override on LENOVO IdeaPad | | * 5fe31f2950 ACPI: resource: Skip IRQ override on Asus Vivobook K3402ZA/K3502ZA | | * 4c5fee0d88 nvme-pci: fix page size checks | | * 9141144b37 nvme-pci: fix mempool alloc size | | * f17cf8fa2c nvme-pci: fix doorbell buffer value endianness | | * ead99ec669 Revert "selftests/bpf: Add test for unstable CT lookup API" | | * bf0543b937 cifs: fix oops during encryption | | * 56f6de394f usb: dwc3: qcom: Fix memory leak in dwc3_qcom_interconnect_init * | | 2ce8e6e296 ANDROID: add __dev_kfree_skb_irq to virtual_device abi list |/ / * | 24bc28221f Revert "net: add atomic_long_t to net_device_stats fields" * | 34d878c5b3 Revert "ipv6/sit: use DEV_STATS_INC() to avoid data-races" * | 956e2924f3 Revert "arm64: Treat ESR_ELx as a 64-bit register" * | 8a3baaa85e Revert "arm64: mm: kfence: only handle translation faults" * | 8b3730f922 Revert "gpiolib: protect the GPIO device against being dropped while in use by user-space" * | b0e87c106d Revert "soreuseport: Fix socket selection for SO_INCOMING_CPU." * | 8a8a0cb6c6 Revert "bpf, sockmap: Fix missing BPF_F_INGRESS flag when using apply_bytes" * | 2d4c48bff9 Revert "xhci: Prevent infinite loop in transaction errors recovery for streams" * | 20ec745823 Merge 5.15.86 into android13-5.15-lts |\| | * 90ffbb727c Linux 5.15.86 | * 3082f8705e pwm: tegra: Fix 32 bit build | * caa40d1f85 mfd: qcom_rpm: Use devm_of_platform_populate() to simplify code | * 408dbaa065 extcon: usbc-tusb320: Call the Type-C IRQ handler only if a port is registered | * 2471a44769 media: dvbdev: fix refcnt bug | * 579fb0a332 media: dvbdev: fix build warning due to comments | * 1115e77c4f net: stmmac: fix errno when create_singlethread_workqueue() fails | * d3871af13a scsi: qla2xxx: Fix crash when I/O abort times out | * 50f993da94 btrfs: do not BUG_ON() on ENOMEM when dropping extent items for a range | * 1c65d50315 ovl: fix use inode directly in rcu-walk mode | * 88ec6d1105 fbdev: fbcon: release buffer when fbcon_do_set_font() failed | * ca8bcb348a gcov: add support for checksum field | * f36d8c8651 floppy: Fix memory leak in do_floppy_init() | * 4193a6745b regulator: core: fix deadlock on regulator enable | * ce5d0ef1cf iio: adc128s052: add proper .data members in adc128_of_match table | * aec1058f2a iio: adc: ad_sigma_delta: do not use internal iio_dev lock | * dc6afd6070 iio: fix memory leak in iio_device_register_eventset() | * 38c257ee6a reiserfs: Add missing calls to reiserfs_security_free() | * 8a4236456a security: Restrict CONFIG_ZERO_CALL_USED_REGS to gcc or clang > 15.0.6 | * 1cabce5662 9p: set req refcount to zero to avoid uninitialized usage | * dd2157a98f loop: Fix the max_loop commandline argument treatment when it is set to 0 | * fd03bd4c7b HID: mcp2221: don't connect hidraw | * 6c886be1ff HID: wacom: Ensure bootloader PID is usable in hidraw mode | * 4d640eb112 xhci: Prevent infinite loop in transaction errors recovery for streams | * 936c5f96c8 usb: dwc3: core: defer probe on ulpi_read_id timeout | * e6bf6c4022 usb: dwc3: Fix race between dwc3_set_mode and __dwc3_set_mode | * 0e883f3bc8 arm64: dts: qcom: sm8250: fix USB-DP PHY registers | * ffb14aac26 usb: xhci-mtk: fix leakage of shared hcd when fail to set wakeup irq | * fcacd970e0 usb: cdnsp: fix lack of ZLP for ep0 | * bcac79df08 ALSA: hda/hdmi: Add HP Device 0x8711 to force connect list | * 50c23a1107 ALSA: hda/realtek: Add quirk for Lenovo TianYi510Pro-14IOB | * 76574b3465 ALSA: usb-audio: add the quirk for KT0206 device | * 9e787dab98 ima: Simplify ima_lsm_copy_rule | * 2cd365029c pstore: Make sure CONFIG_PSTORE_PMSG selects CONFIG_RT_MUTEXES | * 2068d41a3d afs: Fix lost servers_outstanding count | * 0def8af038 perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() | * 41cccae10e pstore: Switch pmsg_lock to an rt_mutex to avoid priority inversion | * 8877df8135 LoadPin: Ignore the "contents" argument of the LSM hooks | * 584202b0f1 drm/i915/display: Don't disable DDI/Transcoder when setting phy test pattern | * b253e075b1 ASoC: rt5670: Remove unbalanced pm_runtime_put() | * 59f797a913 ASoC: rockchip: spdif: Add missing clk_disable_unprepare() in rk_spdif_runtime_resume() | * 132844d92f ASoC: wm8994: Fix potential deadlock | * 82f7c814ed ASoC: mediatek: mt8183: fix refcount leak in mt8183_mt6358_ts3a227_max98357_dev_probe() | * e5d6bf3e5a ASoC: rockchip: pdm: Add missing clk_disable_unprepare() in rockchip_pdm_runtime_resume() | * 85eb5c952b ASoC: audio-graph-card: fix refcount leak of cpu_ep in __graph_for_each_link() | * 9ff07316ca ASoC: mediatek: mt8173-rt5650-rt5514: fix refcount leak in mt8173_rt5650_rt5514_dev_probe() | * 7643909cf0 ASoC: Intel: Skylake: Fix driver hang during shutdown | * 33ff0f9f9c ALSA: hda: add snd_hdac_stop_streams() helper | * 78649a624d ALSA/ASoC: hda: move/rename snd_hdac_ext_stop_streams to hdac_stream.c | * 98b0f50fec hwmon: (jc42) Fix missing unlock on error in jc42_write() | * 5e69233508 KVM: selftests: Fix build regression by using accessor function | * 6215904fe2 tools/include: Add _RET_IP_ and math definitions to kernel.h | * c885326728 orangefs: Fix kmemleak in orangefs_{kernel,client}_debug_init() | * 39529b79b0 orangefs: Fix kmemleak in orangefs_prepare_debugfs_help_string() | * a075c21ee0 drm/sti: Fix return type of sti_{dvo,hda,hdmi}_connector_mode_valid() | * f3c14b99f3 drm/fsl-dcu: Fix return type of fsl_dcu_drm_connector_mode_valid() | * 9a8862820c hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param() | * 4f6b206998 scsi: elx: libefc: Fix second parameter type in state callbacks | * 23f0e9f863 scsi: ufs: Reduce the START STOP UNIT timeout | * 2cf66428a2 scsi: lpfc: Fix hard lockup when reading the rx_monitor from debugfs | * 2b3e3ecdb4 crypto: hisilicon/hpre - fix resource leak in remove process | * adf6a00859 clk: st: Fix memory leak in st_of_quadfs_setup() | * 6c8aee0c8f media: si470x: Fix use-after-free in si470x_int_in_callback() | * 58b6496a74 mmc: renesas_sdhi: better reset from HS400 mode | * c33c904124 mmc: f-sdh30: Add quirks for broken timeout clock capability | * 69346de0eb wifi: mt76: do not run mt76u_status_worker if the device is not running | * feb847e659 regulator: core: fix use_count leakage when handling boot-on | * 474e70bd90 libbpf: Avoid enum forward-declarations in public API in C++ mode | * 6209542869 drm/amd/display: Use the largest vready_offset in pipe group | * eff45bfbc2 blk-mq: fix possible memleak when register 'hctx' failed | * d0af6220bb media: dvb-usb: fix memory leak in dvb_usb_adapter_init() | * 88a6f8a72d media: dvbdev: adopts refcnt to avoid UAF | * 438cd29fec media: dvb-frontends: fix leak of memory fw | * a96841f5aa ethtool: avoiding integer overflow in ethtool_phys_id() | * b327c68ace bpf: Prevent decl_tag from being referenced in func_proto arg | * 4b8f3b9392 ppp: associate skb with a device at tx | * 5d5a481a7f mrp: introduce active flags to prevent UAF when applicant uninit | * 222cc04356 ipv6/sit: use DEV_STATS_INC() to avoid data-races | * 8a3b023710 net: add atomic_long_t to net_device_stats fields | * 58dd11f624 drm/amd/display: fix array index out of bound error in bios parser | * a3cc41e05e md/raid1: stop mdx_raid1 thread when raid1 array run failed | * b621d17fe8 drivers/md/md-bitmap: check the return value of md_bitmap_get_counter() | * 5afac74f15 drm/mediatek: Fix return type of mtk_hdmi_bridge_mode_valid() | * 072508e99d drm/sti: Use drm_mode_copy() | * 673a3e0199 drm/rockchip: Use drm_mode_copy() | * b9b07900d2 drm/msm: Use drm_mode_copy() | * 5ad774fb82 s390/lcs: Fix return type of lcs_start_xmit() | * dfbf0122ea s390/netiucv: Fix return type of netiucv_tx() | * 8131d1880c s390/ctcm: Fix return type of ctc{mp,}m_tx() | * f9084e9930 drm/amdgpu: Fix type of second parameter in odn_edit_dpm_table() callback | * b74580d618 drm/amdgpu: Fix type of second parameter in trans_msg() callback | * 314f7092b2 igb: Do not free q_vector unless new one was allocated | * 0b12d2aa26 wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmf_fw_alloc_request() | * 19bb9e98e1 hamradio: baycom_epp: Fix return type of baycom_send_packet() | * a413ebb604 net: ethernet: ti: Fix return type of netcp_ndo_start_xmit() | * 5d3f4478d2 bpf: make sure skb->len != 0 when redirecting to a tunneling device | * be2803dd29 qed (gcc13): use u16 for fid to be big enough | * a8bc0ac438 Revert "drm/amd/display: Limit max DSC target bpp for specific monitors" | * cc8deb82cc drm/amd/display: prevent memory leak | * 49dd0e8029 ipmi: fix memleak when unload ipmi driver | * 68871c005f ASoC: codecs: rt298: Add quirk for KBL-R RVP platform | * 3eca9697c2 wifi: ar5523: Fix use-after-free on ar5523_cmd() timed out | * c319196a0e wifi: ath9k: verify the expected usb_endpoints are present | * 10c4b63d09 brcmfmac: return error when getting invalid max_flowrings from dongle | * ad31bc146f media: imx-jpeg: Disable useless interrupt to avoid kernel panic | * 6e1a6880e1 drm/etnaviv: add missing quirks for GC300 | * 367296925c hfs: fix OOB Read in __hfs_brec_find | * ebe16676e1 acct: fix potential integer overflow in encode_comp_t() | * 8b6ef451b5 nilfs2: fix shift-out-of-bounds due to too large exponent of block size | * b47f5c579c nilfs2: fix shift-out-of-bounds/overflow in nilfs_sb2_bad_offset() | * 5777432eba ACPICA: Fix error code path in acpi_ds_call_control_method() | * 10b87da8fa fs: jfs: fix shift-out-of-bounds in dbDiscardAG | * 5059ea84a8 jfs: Fix fortify moan in symlink | * e7a6a53c87 udf: Avoid double brelse() in udf_rename() | * 0536f76a2b fs: jfs: fix shift-out-of-bounds in dbAllocAG | * 88cea1676a binfmt_misc: fix shift-out-of-bounds in check_special_flags | * cadb938a5e x86/hyperv: Remove unregister syscore call from Hyper-V cleanup | * 659747f6f6 video: hyperv_fb: Avoid taking busy spinlock on panic path | * 9d05c20b0a arm64: make is_ttbrX_addr() noinstr-safe | * 98a5b1265a rcu: Fix __this_cpu_read() lockdep warning in rcu_force_quiescent_state() | * d238f94b2b HID: amd_sfh: Add missing check for dma_alloc_coherent | * 9da204cd67 net: stream: purge sk_error_queue in sk_stream_kill_queues() | * f47426250f myri10ge: Fix an error handling path in myri10ge_probe() | * 1ec0a7d5b0 rxrpc: Fix missing unlock in rxrpc_do_sendmsg() | * 5478eb7adc net_sched: reject TCF_EM_SIMPLE case for complex ematch module | * 4f05d8e2fb mailbox: zynq-ipi: fix error handling while device_register() fails | * 550f403e46 mailbox: arm_mhuv2: Fix return value check in mhuv2_probe() | * 28604a960c mailbox: mpfs: read the system controller's status | * 8fb773eed4 skbuff: Account for tail adjustment during pull operations | * dc0f38957a arm64: dts: mt8183: Fix Mali GPU clock | * 790b396f6b soc: mediatek: pm-domains: Fix the power glitch issue | * 0133615a06 openvswitch: Fix flow lookup to use unmasked key | * 04e454bd97 selftests: devlink: fix the fd redirect in dummy_reporter_test | * d52646a46c rtc: mxc_v2: Add missing clk_disable_unprepare() | * ac95c4e35f igc: Set Qbv start_time and end_time to end_time if not being configured in GCL | * af59985138 igc: Lift TAPRIO schedule restriction | * 4d50d640ed igc: recalculate Qbv end_time by considering cycle time | * 1ef9416957 igc: allow BaseTime 0 enrollment for Qbv | * c0df8e7ba6 igc: Add checking for basetime less than zero | * 5b46b53f45 igc: Use strict cycles for Qbv scheduling | * fd7d029436 igc: Enhance Qbv scheduling by using first flag bit | * 9b5b50329e r6040: Fix kmemleak in probe and remove | * 1b428ba31b unix: Fix race in SOCK_SEQPACKET's unix_dgram_sendmsg() | * aae9c24ebd nfc: pn533: Clear nfc_target before being used | * bcf2c1dc53 net: enetc: avoid buffer leaks on xdp_do_redirect() failure | * f463a1295c selftests/bpf: Add test for unstable CT lookup API | * 094f3d9314 block, bfq: fix possible uaf for 'bfqq->bic' | * cf48cb8deb mISDN: hfcmulti: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() | * 5607353751 mISDN: hfcpci: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() | * ada4022f48 mISDN: hfcsusb: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() | * 0578f9929f net: macsec: fix net device access prior to holding a lock | * a472f069ce nfsd: under NFSv4.1, fix double svc_xprt_put on rpc_create failure | * f8f1d037d6 rtc: pcf85063: fix pcf85063_clkout_control | * 35a174552b rtc: pic32: Move devm_rtc_allocate_device earlier in pic32_rtc_probe() | * eea105c4e4 rtc: st-lpc: Add missing clk_disable_unprepare in st_rtc_probe() | * 74248b5560 netfilter: flowtable: really fix NAT IPv6 offload | * 5c940632ca mfd: pm8008: Fix return value check in pm8008_probe() | * ec10848e26 mfd: pm8008: Remove driver data structure pm8008_data | * 38959417d3 mfd: qcom_rpm: Fix an error handling path in qcom_rpm_probe() | * b95ae3543e mfd: bd957x: Fix Kconfig dependency on REGMAP_IRQ | * 615d3c8a46 powerpc/pseries/eeh: use correct API for error log size | * 68de42e008 powerpc/eeh: Drop redundant spinlock initialization | * 2b157b4b13 remoteproc: qcom: q6v5: Fix missing clk_disable_unprepare() in q6v5_wcss_qcs404_power_on() | * 4b191533f5 remoteproc: qcom_q6v5_pas: Fix missing of_node_put() in adsp_alloc_memory_region() | * d7628ebca8 remoteproc: qcom_q6v5_pas: detach power domains on remove | * fdf47f462a remoteproc: qcom_q6v5_pas: disable wakeup on probe fail or remove | * 098ebb9089 remoteproc: qcom: q6v5: Fix potential null-ptr-deref in q6v5_wcss_init_mmio() | * 131c0a3ead remoteproc: sysmon: fix memory leak in qcom_add_sysmon_subdev() | * 4507c6a672 pwm: mediatek: always use bus clock for PWM on MT7622 | * 4fbbb14f0e pwm: mtk-disp: Fix the parameters calculated by the enabled flag of disp_pwm | * eec59807a2 pwm: sifive: Call pwm_sifive_update_clock() while mutex is held | * 37ea9a6c41 iommu/sun50i: Remove IOMMU_DOMAIN_IDENTITY | * 8de2c29db6 selftests/powerpc: Fix resource leaks | * dd49c5031e powerpc/hv-gpci: Fix hv_gpci event list | * 65d3469f3b powerpc/83xx/mpc832x_rdb: call platform_device_put() in error case in of_fsl_spi_probe() | * cf03db2896 powerpc/perf: callchain validate kernel stack pointer bounds | * 5de1902244 powerpc/xive: add missing iounmap() in error path in xive_spapr_populate_irq_data() | * b31e9647f1 powerpc/xmon: Fix -Wswitch-unreachable warning in bpt_cmds | * 6a310e8db5 cxl: Fix refcount leak in cxl_calc_capp_routing | * 0accd460dc powerpc/52xx: Fix a resource leak in an error handling path | * be2b9b1a60 macintosh/macio-adb: check the return value of ioremap() | * 19ded60b40 macintosh: fix possible memory leak in macio_add_one_device() | * e42b543d08 iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe() | * 6e501b3fd7 iommu/amd: Fix pci device refcount leak in ppr_notifier() | * 9383921e8b rtc: pcf85063: Fix reading alarm | * b66aa7b306 rtc: snvs: Allow a time difference on clock register read | * 7a6cc22eab rtc: cmos: Disable ACPI RTC event on removal | * 689f757f0a rtc: cmos: Rename ACPI-related functions | * 1c74bbecda rtc: cmos: Eliminate forward declarations of some functions | * 3a439a2cab rtc: cmos: Call rtc_wake_setup() from cmos_do_probe() | * 9febdff75c rtc: cmos: Call cmos_wake_setup() from cmos_do_probe() | * d9324fb3ee rtc: cmos: fix build on non-ACPI platforms | * fe46b9303e rtc: cmos: Fix wake alarm breakage | * 60c6e563a8 rtc: cmos: Fix event handler registration ordering issue | * d3aa083469 rtc: rtc-cmos: Do not check ACPI_FADT_LOW_POWER_S0 | * 6e98a93c75 dmaengine: idxd: Fix crc_val field for completion record | * ab53749c32 fs/ntfs3: Fix slab-out-of-bounds read in ntfs_trim_fs | * 1ba0968b33 pwm: tegra: Improve required rate calculation | * c160505c9b include/uapi/linux/swab: Fix potentially missing __always_inline | * 59463193b0 phy: usb: s2 WoL wakeup_count not incremented for USB->Eth devices | * ae00848e55 iommu/rockchip: fix permission bits in page table entries v2 | * a7f6ad2c42 iommu/sun50i: Fix flush size | * 38ccb9b469 iommu/sun50i: Fix R/W permission check | * ae4ab47a0b iommu/sun50i: Consider all fault sources for reset | * 84fee3ce82 iommu/sun50i: Fix reset release | * 6f9fe31a48 fs/ntfs3: Harden against integer overflows | * 30f20ceb87 overflow: Implement size_t saturating arithmetic helpers | * 4b51f27d44 fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst() | * 28f345bec7 RDMA/siw: Fix pointer cast warning | * 01d925e2a5 perf stat: Do not delay the workload with --delay | * a273f1dd5d perf stat: Refactor __run_perf_stat() common code | * d21534ab4f power: supply: fix null pointer dereferencing in power_supply_get_battery_info | * d4898d8de6 power: supply: ab8500: Fix error handling in ab8500_charger_init() | * 30b191798f HSI: omap_ssi_core: Fix error handling in ssi_init() | * a72fe8eb55 power: supply: z2_battery: Fix possible memleak in z2_batt_probe() | * 5ba0e8fa15 perf symbol: correction while adjusting symbol | * a34027b63d perf trace: Handle failure when trace point folder is missed | * 60aeacce64 perf trace: Use macro RAW_SYSCALL_ARGS_NUM to replace number | * e4700f62dc perf trace: Return error if a system call doesn't exist | * 870ad0917d power: supply: fix residue sysfs file in error handle route of __power_supply_register() | * 1c2b9c8100 HSI: omap_ssi_core: fix possible memory leak in ssi_probe() | * c5f729d3d6 HSI: omap_ssi_core: fix unbalanced pm_runtime_disable() | * ea37831f83 fbdev: uvesafb: Fixes an error handling path in uvesafb_probe() | * 5bcae36b58 fbdev: uvesafb: don't build on UML | * 07c1a3c2df fbdev: geode: don't build on UML | * ace8312b5d fbdev: ep93xx-fb: Add missing clk_disable_unprepare in ep93xxfb_probe() | * 04946113fb fbdev: vermilion: decrease reference count in error path | * fc0d5034fa fbdev: via: Fix error in via_core_init() | * 9827246333 fbdev: pm2fb: fix missing pci_disable_device() | * 3aa4205134 fbdev: ssd1307fb: Drop optional dependency | * 4958316a6d thermal/drivers/qcom/lmh: Fix irq handler return value | * ad72205ac6 thermal/drivers/qcom/temp-alarm: Fix inaccurate warning for gen2 | * 37fb4e13d2 thermal/drivers/imx8mm_thermal: Validate temperature range | * 95c18f4a3c samples: vfio-mdev: Fix missing pci_disable_device() in mdpy_fb_probe() | * 31c1b5d300 ksmbd: Fix resource leak in ksmbd_session_rpc_open() | * a44102d36a tracing/hist: Fix issue of losting command info in error_log | * 8308ccfcbd usb: storage: Add check for kcalloc | * 96c12fd0ec i2c: ismt: Fix an out-of-bounds bug in ismt_access() | * 8212800943 i2c: mux: reg: check return value after calling platform_get_resource() | * 46d8f63bb8 gpiolib: protect the GPIO device against being dropped while in use by user-space | * 333a271dfd gpiolib: make struct comments into real kernel docs | * 7c755a2d6d gpiolib: cdev: fix NULL-pointer dereferences | * b0a26e1999 gpiolib: Get rid of redundant 'else' | * 4bc217b25e vme: Fix error not catched in fake_init() | * 31bfe024a9 staging: rtl8192e: Fix potential use-after-free in rtllib_rx_Monitor() | * b0aaec894a staging: rtl8192u: Fix use after free in ieee80211_rx() | * ed4580c3f8 i2c: pxa-pci: fix missing pci_disable_device() on error in ce4100_i2c_probe | * 28dc61cc49 chardev: fix error handling in cdev_device_add() | * 43bfc7c240 mcb: mcb-parse: fix error handing in chameleon_parse_gdd() | * f3686e5e8d drivers: mcb: fix resource leak in mcb_probe() | * 9d4a0aca8a usb: gadget: f_hid: fix refcount leak on error path | * d3136b7970 usb: gadget: f_hid: fix f_hidg lifetime vs cdev | * a41c2bba7f usb: roles: fix of node refcount leak in usb_role_switch_is_parent() | * 18b9202188 coresight: trbe: remove cpuhp instance node before remove cpuhp state | * e854a4ab38 counter: stm32-lptimer-cnt: fix the check on arr and cmp registers update | * 39a156715f iio: adis: add '__adis_enable_irq()' implementation | * 3a2dde8e5d iio:imu:adis: Move exports into IIO_ADISLIB namespace | * 3c2e13025b iio: adis: stylistic changes | * de3e358912 iio: adis: handle devices that cannot unmask the drdy pin | * 994243de7a iio: temperature: ltc2983: make bulk write buffer DMA-safe | * 22511eefa6 cxl: fix possible null-ptr-deref in cxl_pci_init_afu|adapter() | * e5021bbf11 cxl: fix possible null-ptr-deref in cxl_guest_init_afu|adapter() | * b308fdedef firmware: raspberrypi: fix possible memory leak in rpi_firmware_probe() | * d5c8f9003a misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os | * 848c45964d misc: tifm: fix possible memory leak in tifm_7xx1_switch_media() | * 37a13b274e ocxl: fix pci device refcount leak when calling get_function_0() | * 3299983a6b misc: ocxl: fix possible name leak in ocxl_file_register_afu() | * 357379d504 test_firmware: fix memory leak in test_firmware_init() | * 07d547d742 serial: sunsab: Fix error handling in sunsab_init() | * 919e745fdd serial: altera_uart: fix locking in polling mode | * e1c4f18214 tty: serial: altera_uart_{r,t}x_chars() need only uart_port | * b133b45ba6 tty: serial: clean up stop-tx part in altera_uart_tx_chars() | * 6f7d82380f serial: pch: Fix PCI device refcount leak in pch_request_dma() | * 0dfc7dfe5b serial: stm32: move dma_request_chan() before clk_prepare_enable() | * 926b0967f7 serial: pl011: Do not clear RX FIFO & RX interrupt in unthrottle. | * d71a611fca serial: amba-pl011: avoid SBSA UART accessing DMACR register | * f46f9d2e16 extcon: usbc-tusb320: Update state on probe even if no IRQ pending | * ac067e75c4 extcon: usbc-tusb320: Add USB TYPE-C support | * 9280761167 extcon: usbc-tusb320: Factor out extcon into dedicated functions | * 05aa8ff22d usb: typec: Factor out non-PD fwnode properties | * 31e9c27510 extcon: usbc-tusb320: Add support for TUSB320L | * b9c8820d91 extcon: usbc-tusb320: Add support for mode setting and reset | * 4524599a6a usb: typec: tipd: Fix spurious fwnode_handle_put in error path | * b0d86eacc8 usb: typec: tipd: Cleanup resources if devm_tps6598_psy_register fails | * ba75be6f0d usb: typec: tcpci: fix of node refcount leak in tcpci_register_port() | * 154d5713a2 usb: typec: Check for ops->exit instead of ops->enter in altmode_exit | * 1f5661388f staging: vme_user: Fix possible UAF in tsi148_dma_list_add | * a3c4bc2616 usb: fotg210-udc: Fix ages old endianness issues | * 5e87d41221 uio: uio_dmem_genirq: Fix deadlock between irq config and handling | * 79a4bdb6b9 uio: uio_dmem_genirq: Fix missing unlock in irq configuration | * 3f22a273ef vfio: platform: Do not pass return buffer to ACPI _RST method | * 417ef049e3 class: fix possible memory leak in __class_register() | * f76824ab2b serial: 8250_bcm7271: Fix error handling in brcmuart_init() | * 6b4424efcf serial: tegra: Read DMA status before terminating | * a0ead7e8da drivers: dio: fix possible memory leak in dio_init() | * e8985caf05 RISC-V: Align the shadow stack | * ca48174a76 IB/IPoIB: Fix queue count inconsistency for PKEY child interfaces | * 82bd423ed9 hwrng: geode - Fix PCI device refcount leak | * 2b79a5e560 hwrng: amd - Fix PCI device refcount leak | * 42cbff35f4 crypto: img-hash - Fix variable dereferenced before check 'hdev->req' | * b9634f99b6 RDMA/hns: Fix error code of CMD | * b06bb747ce RDMA/hns: Fix page size cap from firmware | * 4c05c7cf25 RDMA/hns: Fix PBL page MTR find | * fa267c4192 RDMA/hns: Fix AH attr queried by query_qp | * e27fb26e75 orangefs: Fix sysfs not cleanup when dev init failed | * 3e9c395ef2 PCI: mt7621: Add sentinel to quirks table | * bcc65c2e2a PCI: mt7621: Rename mt7621_pci_ to mt7621_pcie_ | * 0a7eab1cc4 RDMA/srp: Fix error return code in srp_parse_options() | * 6301100179 RDMA/hfi1: Fix error return code in parse_platform_config() | * 339ca035af riscv/mm: add arch hook arch_clear_hugepage_flags | * 20d363dcd6 crypto: omap-sham - Use pm_runtime_resume_and_get() in omap_sham_probe() | * 815b65d714 crypto: amlogic - Remove kcalloc without check | * af71199291 RDMA/nldev: Fix failure to send large messages | * bb895786a4 f2fs: avoid victim selection from previous victim section | * 655e955deb RDMA/nldev: Add checks for nla_nest_start() in fill_stat_counter_qps() | * 1895e908b3 scsi: snic: Fix possible UAF in snic_tgt_create() | * 09a60f908d scsi: fcoe: Fix transport not deattached when fcoe_if_init() fails | * e59da17205 scsi: ipr: Fix WARNING in ipr_init() | * c444f58fda scsi: scsi_debug: Fix possible name leak in sdebug_add_host_helper() | * 4e4968dfb5 scsi: fcoe: Fix possible name leak when device_register() fails | * 0f5006d7d1 scsi: scsi_debug: Fix a warning in resp_report_zones() | * 2432719b1a scsi: scsi_debug: Fix a warning in resp_verify() | * 038359eecc scsi: efct: Fix possible memleak in efct_device_init() | * 23053a7926 scsi: hpsa: Fix possible memory leak in hpsa_add_sas_device() | * 2ab6d5927c scsi: hpsa: Fix error handling in hpsa_add_sas_host() | * 6a92129c8f scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add() | * 26c0f7e1ac padata: Fix list iterator in padata_do_serial() | * 17afa98bcc padata: Always leave BHs disabled when running ->parallel() | * 221afb2a1b crypto: tcrypt - Fix multibuffer skcipher speed test mem leak | * bfe10a1d9f scsi: hpsa: Fix possible memory leak in hpsa_init_one() | * 38ef0c0b09 dt-bindings: visconti-pcie: Fix interrupts array max constraints | * 83aad8111b dt-bindings: imx6q-pcie: Fix clock names for imx6sx and imx8mq | * f64f08b9e6 RDMA/rxe: Fix NULL-ptr-deref in rxe_qp_do_cleanup() when socket create failed | * 35f9cd060e RDMA/hns: fix memory leak in hns_roce_alloc_mr() | * 6d5220a553 crypto: ccree - Make cc_debugfs_global_fini() available for module init function | * 2e9cf3e783 RDMA/hfi: Decrease PCI device reference count in error path | * 7f476d639c PCI: Check for alloc failure in pci_request_irq() | * 49bc2be897 RDMA/hns: Fix ext_sge num error when post send | * 0e6160d79d RDMA/hns: Repacing 'dseg_len' by macros in fill_ext_sge_inl_data() | * e5ea48788e crypto: hisilicon/qm - add missing pci_dev_put() in q_num_set() | * 442caec12f crypto: cryptd - Use request context instead of stack for sub-request | * ab677729fc crypto: ccree - Remove debugfs when platform_driver_register failed | * 0328ca389a scsi: scsi_debug: Fix a warning in resp_write_scat() | * 1ba8ecb664 RDMA/siw: Set defined status for work completion with undefined status | * 6e757005ba RDMA/nldev: Return "-EAGAIN" if the cm_id isn't from expected port | * f981c697b2 RDMA/core: Make sure "ib_port" is valid when access sysfs node | * 13586753ae RDMA/restrack: Release MR restrack when delete | * 6e78ca677f PCI: vmd: Disable MSI remapping after suspend | * 47e31b86ed IB/mad: Don't call to function that might sleep while in atomic context | * f8d8fbd3b6 RDMA/siw: Fix immediate work request flush to completion queue | * 2a26849d79 scsi: qla2xxx: Fix set-but-not-used variable warnings | * 799ed37559 RDMA/irdma: Report the correct link speed | * d40d1b1c61 f2fs: fix to destroy sbi->post_read_wq in error path of f2fs_fill_super() | * 847f725006 f2fs: fix normal discard process | * 865bb7b5a7 f2fs: fix to invalidate dcc->f2fs_issue_discard in error path | * 5f509fa740 apparmor: Fix memleak in alloc_ns() | * 46f3cb83e4 crypto: rockchip - rework by using crypto_engine | * 3ed0548d39 crypto: rockchip - remove non-aligned handling | * 5562009f5f crypto: rockchip - better handle cipher key | * 26f3971356 crypto: rockchip - add fallback for ahash | * 34fe54af3c crypto: rockchip - add fallback for cipher | * 314217591e crypto: rockchip - do not store mode globally | * 853cd97d2b crypto: rockchip - do not do custom power management | * d5100272e4 f2fs: Fix the race condition of resize flag between resizefs | * db72c5dffc PCI: pci-epf-test: Register notifier if only core_init_notifier is enabled | * 26ffeff67b RDMA/core: Fix order of nldev_exit call | * a00a7ac251 PCI: dwc: Fix n_fts[] array overrun | * 10ae636115 apparmor: Use pointer to struct aa_label for lbs_cred | * 8d50ccfbe2 scsi: core: Fix a race between scsi_done() and scsi_timeout() | * 9bdf3a59b3 crypto: nitrox - avoid double free on error path in nitrox_sriov_init() | * 7efc0d39ee crypto: sun8i-ss - use dma_addr instead u32 | * aaef0bdd7a crypto: hisilicon/qm - fix missing destroy qp_idr | * d567776ae2 apparmor: Fix abi check to include v8 abi | * bc9d2cbbdc apparmor: fix lockdep warning when removing a namespace | * 775a37ffa9 apparmor: fix a memleak in multi_transaction_new() | * 09f30f394e net: dsa: tag_8021q: avoid leaking ctx on dsa_tag_8021q_register() error path | * 86664b8652 i40e: Fix the inability to attach XDP program on downed interface | * 0abd337acd stmmac: fix potential division by 0 | * 93a4a04558 Bluetooth: RFCOMM: don't call kfree_skb() under spin_lock_irqsave() | * 8d6bbe5241 Bluetooth: hci_core: don't call kfree_skb() under spin_lock_irqsave() | * 804de4e24a Bluetooth: hci_bcsp: don't call kfree_skb() under spin_lock_irqsave() | * 1030c3aeee Bluetooth: hci_h5: don't call kfree_skb() under spin_lock_irqsave() | * 9fcb5b367e Bluetooth: hci_ll: don't call kfree_skb() under spin_lock_irqsave() | * 14cc94a598 Bluetooth: hci_qca: don't call kfree_skb() under spin_lock_irqsave() | * 06467130d5 Bluetooth: btusb: don't call kfree_skb() under spin_lock_irqsave() | * e52b7d460a Bluetooth: btintel: Fix missing free skb in btintel_setup_combined() | * f7c9de3bcf Bluetooth: MGMT: Fix error report for ADD_EXT_ADV_PARAMS | * 2addf3cb63 sctp: sysctl: make extra pointers netns aware | * 21296a52ca ntb_netdev: Use dev_kfree_skb_any() in interrupt context | * 0fff763f11 net: lan9303: Fix read error execution path | * 882bad40a0 can: tcan4x5x: Fix use of register error status mask | * d50092f662 can: m_can: Call the RAM init directly from m_can_chip_config | * 55064642aa can: tcan4x5x: Remove invalid write in clear_interrupts | * 641eef8766 net: amd-xgbe: Check only the minimum speed for active/passive cables | * 60b35e28dc net: amd-xgbe: Fix logic around active and passive cables | * d436bf39f4 af_unix: call proto_unregister() in the error path in af_unix_init() | * ee9d03bf89 net: amd: lance: don't call dev_kfree_skb() under spin_lock_irqsave() | * 6f1c4c01cc hamradio: don't call dev_kfree_skb() under spin_lock_irqsave() | * eb2c6a6e8f net: ethernet: dnet: don't call dev_kfree_skb() under spin_lock_irqsave() | * ef08e1082c net: emaclite: don't call dev_kfree_skb() under spin_lock_irqsave() | * 2786ef4066 net: apple: bmac: don't call dev_kfree_skb() under spin_lock_irqsave() | * d81314e2dd net: apple: mace: don't call dev_kfree_skb() under spin_lock_irqsave() | * 9a6544343b net/tunnel: wait until all sk_user_data reader finish before releasing the sock | * 998b4e54f5 net: farsync: Fix kmemleak when rmmods farsync | * 71605c6906 ethernet: s2io: don't call dev_kfree_skb() under spin_lock_irqsave() | * ce1b3a41e7 of: overlay: fix null pointer dereferencing in find_dup_cset_node_entry() and find_dup_cset_prop() | * 8399b98935 drivers: net: qlcnic: Fix potential memory leak in qlcnic_sriov_init() | * 96e5089702 net: stmmac: fix possible memory leak in stmmac_dvr_probe() | * ecaf934e44 net: stmmac: selftests: fix potential memleak in stmmac_test_arpoffload() | * e1359bc90a net: defxx: Fix missing err handling in dfx_init() | * c65603abc3 net: vmw_vsock: vmci: Check memcpy_from_msg() | * 9de42116fc clk: socfpga: Fix memory leak in socfpga_gate_init() | * e515881ade bpf: Do not zero-extend kfunc return values | * ce61a877c7 blktrace: Fix output non-blktrace event when blk_classic option enabled | * f2ae56fa0b wifi: brcmfmac: Fix error return code in brcmf_sdio_download_firmware() | * 23060daf37 wifi: rtl8xxxu: Fix the channel width reporting | * 6d0e00334e wifi: rtl8xxxu: Add __packed to struct rtl8723bu_c2h | * e69d380650 spi: spi-gpio: Don't set MOSI as an input if not 3WIRE mode | * 4e501a31af clk: samsung: Fix memory leak in _samsung_clk_register_pll() | * 441c05485c media: coda: Add check for kmalloc | * b99872178e media: coda: Add check for dcoda_iram_alloc | * fbf081ebe2 media: c8sectpfe: Add of_node_put() when breaking out of loop | * 2a7330d820 regulator: qcom-labibb: Fix missing of_node_put() in qcom_labibb_regulator_probe() | * ecf1b317a8 mmc: core: Normalize the error handling branch in sd_read_ext_regs() | * 7fecca429e memstick/ms_block: Add check for alloc_ordered_workqueue | * b77ced3fce memstick: ms_block: Add error handling support for add_disk() | * ae00eb6779 mmc: renesas_sdhi: alway populate SCC pointer | * 88fa6a4e39 mmc: mmci: fix return value check of mmc_add_host() | * 29c3690969 mmc: wbsd: fix return value check of mmc_add_host() | * 0959cc1685 mmc: via-sdmmc: fix return value check of mmc_add_host() | * e0cfe7aa41 mmc: meson-gx: fix return value check of mmc_add_host() | * 62005dfcc3 mmc: omap_hsmmc: fix return value check of mmc_add_host() | * 1925472dec mmc: atmel-mci: fix return value check of mmc_add_host() | * 58c3a8d0f1 mmc: wmt-sdmmc: fix return value check of mmc_add_host() | * afc898019e mmc: vub300: fix return value check of mmc_add_host() | * 6444079767 mmc: toshsd: fix return value check of mmc_add_host() | * df683201c7 mmc: rtsx_usb_sdmmc: fix return value check of mmc_add_host() | * 30dc645461 mmc: rtsx_pci: fix return value check of mmc_add_host() | * bc7e8744f5 mmc: pxamci: fix return value check of mmc_add_host() | * 2d496050de mmc: mxcmmc: fix return value check of mmc_add_host() | * f0502fe86a mmc: moxart: fix return value check of mmc_add_host() | * 29c5b4da41 mmc: alcor: fix return value check of mmc_add_host() | * 52e0d8a8dd riscv, bpf: Emit fixed-length instructions for BPF_PSEUDO_FUNC | * 0de70ed675 NFSv4.x: Fail client initialisation if state manager thread can't run | * 7055c878a0 SUNRPC: Fix missing release socket in rpc_sockname() | * 79d4cd40da xprtrdma: Fix regbuf data not freed in rpcrdma_req_create() | * cba633b24a ALSA: mts64: fix possible null-ptr-defer in snd_mts64_interrupt | * 9018550d96 media: saa7164: fix missing pci_disable_device() | * 2df1e2a6ec ALSA: pcm: Set missing stop_operating flag at undoing trigger start | * a443c55d96 bpf, sockmap: fix race in sock_map_free() | * 5229b90337 hwmon: (jc42) Restore the min/max/critical temperatures on resume | * 785f5c732a hwmon: (jc42) Convert register access and caching to regmap/regcache | * c4c64d8abd regulator: core: fix resource leak in regulator_register() | * 07f82dca11 configfs: fix possible memory leak in configfs_create_dir() | * 21a061772b hsr: Synchronize sequence number updates. | * a82f5b2e08 hsr: Synchronize sending frames to have always incremented outgoing seq nr. | * bb3b40cd6a hsr: Disable netpoll. | * 8e148d981b hsr: Avoid double remove of a node. | * 9387cbf7f7 hsr: Add a rcu-read lock to hsr_forward_skb(). | * a051e10bfc clk: qcom: clk-krait: fix wrong div2 functions | * 8275c7465d clk: qcom: lpass-sc7180: Fix pm_runtime usage | * 91657ec4d0 regulator: core: fix module refcount leak in set_supply() | * 66976a3be9 wifi: mt76: fix coverity overrun-call in mt76_get_txpower() | * a21e3f6f41 wifi: mt76: mt7921: fix reporting of TX AGGR histogram | * c8659018b6 mt76: stop the radar detector after leaving dfs channel | * ae19622e7f wifi: cfg80211: Fix not unregister reg_pdev when load_builtin_regdb_keys() fails | * 2e32f12998 wifi: mac80211: fix memory leak in ieee80211_if_add() | * f58888434d spi: spidev: mask SPI_CS_HIGH in SPI_IOC_RD_MODE | * b6d27d9250 bonding: uninitialized variable in bond_miimon_inspect() | * 7201e4f4f5 bpf, sockmap: Fix data loss caused by using apply_bytes on ingress redirect | * 6105ed3598 bpf, sockmap: Fix missing BPF_F_INGRESS flag when using apply_bytes | * 8786bde11a bpf, sockmap: Fix repeated calls to sock_put() when msg has more_data | * a222f992ce Input: wistron_btns - disable on UML | * d78649c21b netfilter: conntrack: set icmpv6 redirects as RELATED | * 09fe3b1392 ASoC: pcm512x: Fix PM disable depth imbalance in pcm512x_probe | * 8876793e56 drm/amdkfd: Fix memory leakage | * 8f2d2badf8 drm/amdgpu: Fix PCI device refcount leak in amdgpu_atrm_get_bios() | * 88c6e0995c drm/radeon: Fix PCI device refcount leak in radeon_atrm_get_bios() | * 0af0ff9fc0 drm/amd/pm/smu11: BACO is supported when it's in BACO state | * 27e7cf595d ASoC: mediatek: mt8173: Enable IRQ when pdata is ready | * 905e565375 ASoC: mediatek: mt8173: Fix debugfs registration for components | * d8e32f1bf1 wifi: iwlwifi: mvm: fix double free on tx path. | * d0bb44775c ALSA: asihpi: fix missing pci_disable_device() | * f12377abac NFS: Fix an Oops in nfs_d_automount() | * 9a96aff53c NFSv4: Fix a deadlock between nfs4_open_recover_helper() and delegreturn | * c6aca4c7ba NFSv4: Fix a credential leak in _nfs4_discover_trunking() | * 7f6607c884 NFSv4.2: Fix initialisation of struct nfs4_label | * 51899eefd1 NFSv4.2: Fix a memory stomp in decode_attr_security_label | * 34dffc77dd NFSv4.2: Clear FATTR4_WORD2_SECURITY_LABEL when done decoding | * d926611c89 ASoC: mediatek: mtk-btcvsd: Add checks for write and read of mtk_btcvsd_snd | * f243ff92d6 ASoC: dt-bindings: wcd9335: fix reset line polarity in example | * 41d7b8291c drm/tegra: Add missing clk_disable_unprepare() in tegra_dc_probe() | * 2376d7fa08 media: s5p-mfc: Add variant data for MFC v7 hardware for Exynos 3250 SoC | * 210fcf64be media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() | * b223cc15f9 media: dvb-core: Fix ignored return value in dvb_register_frontend() | * 825a8af31d pinctrl: pinconf-generic: add missing of_node_put() | * eedc698d66 clk: imx8mn: fix imx8mn_enet_phy_sels clocks list | * f86a432604 clk: imx8mn: fix imx8mn_sai2_sels clocks list | * 5e98c3a345 clk: imx: replace osc_hdmi with dummy | * 9453e097b8 clk: imx8mn: rename vpu_pll to m7_alt_pll | * bffc80bac8 media: imon: fix a race condition in send_packet() | * 9c9ff35d68 media: vimc: Fix wrong function called when vimc_init() fails | * f849c116d3 ASoC: qcom: Add checks for devm_kcalloc | * 16437645dd drbd: destroy workqueue when drbd device was freed | * cdaf45415c drbd: remove call to memset before free device/resource/connection | * f35981083c mtd: maps: pxa2xx-flash: fix memory leak in probe | * 87c750affd bonding: fix link recovery in mode 2 when updelay is nonzero | * 02105f0b30 drm/amdgpu: fix pci device refcount leak | * 5b0a1f1247 clk: rockchip: Fix memory leak in rockchip_clk_register_pll() | * 27aac5c012 regulator: core: use kfree_const() to free space conditionally | * a69b1faa9b ALSA: seq: fix undefined behavior in bit shift for SNDRV_SEQ_FILTER_USE_EVENT | * 9c0f3617ba ALSA: pcm: fix undefined behavior in bit shift for SNDRV_PCM_RATE_KNOT | * 6159424e2d pinctrl: k210: call of_node_put() | * 18a973fcb1 HID: hid-sensor-custom: set fixed size for custom attributes | * 0fc4280dbe bpf: Move skb->len == 0 checks into __bpf_redirect | * 8dbcb4c284 mtd: spi-nor: Fix the number of bytes for the dummy cycles | * 58e1a0ef52 mtd: spi-nor: hide jedec_id sysfs attribute if not present | * 348d95e39f inet: add READ_ONCE(sk->sk_bound_dev_if) in inet_csk_bind_conflict() | * 4451bef1a3 media: videobuf-dma-contig: use dma_mmap_coherent | * b2781a8626 media: platform: exynos4-is: Fix error handling in fimc_md_init() | * 7cf71bbe5d media: solo6x10: fix possible memory leak in solo_sysfs_init() | * c290aa527f media: vidtv: Fix use-after-free in vidtv_bridge_dvb_init() | * 648f303102 Input: elants_i2c - properly handle the reset GPIO when power is off | * e0d3e46ac6 mtd: lpddr2_nvm: Fix possible null-ptr-deref | * ab4e42f519 drm/msm/a6xx: Fix speed-bin detection vs probe-defer | * fea795f7c7 wifi: ath10k: Fix return value in ath10k_pci_init() | * 77482c4dd4 block: clear ->slave_dir when dropping the main slave_dir reference | * 62251948e2 ima: Fix misuse of dereference of pointer in template_desc_init_fields() | * 29d6c69ba4 integrity: Fix memory leakage in keyring allocation error path | * 8e6df95717 drm/fourcc: Fix vsub/hsub for Q410 and Q401 | * ec1727f89e drm/fourcc: Add packed 10bit YUV 4:2:0 format | * f72608b8dd regulator: qcom-rpmh: Fix PMR735a S3 regulator spec | * 63d011ad05 nvme: return err on nvme_init_non_mdts_limits fail | * f289a38df0 amdgpu/pm: prevent array underflow in vega20_odn_edit_dpm_table() | * cda1895f3b regulator: core: fix unbalanced of node refcount in regulator_dev_lookup() | * 1a5aaa5736 nvmet: only allocate a single slab for bvecs | * cb3033a432 libbpf: Fix uninitialized warning in btf_dump_dump_type_data | * 83baa50939 ASoC: pxa: fix null-pointer dereference in filter() | * a06ba0f7f8 drm/mediatek: Modify dpi power on/off sequence. | * 6d25bc6370 drm/radeon: Add the missed acpi_put_table() to fix memory leak | * 4cf11e9d31 bfq: fix waker_bfqq inconsistency crash | * 55e822212e rxrpc: Fix ack.bufferSize to be 0 when generating an ack | * 5ef8bf0df1 net, proc: Provide PROC_FS=n fallback for proc_create_net_single_write() | * d1c44928bb media: camss: Clean up received buffers on failed start of streaming | * 3b4b4df3f8 wifi: rsi: Fix handling of 802.3 EAPOL frames sent via control port | * 9e1440c858 Input: joystick - fix Kconfig warning for JOYSTICK_ADC | * 71212d7318 mtd: Fix device name leak when register device failed in add_mtd_device() | * 106311677b clk: qcom: gcc-sm8250: Use retention mode for USB GDSCs | * 322c7415e7 bpf: propagate precision across all frames, not just the last one | * 07c286c10a bpf: Check the other end of slot_type for STACK_SPILL | * fdbc363bc1 bpf: propagate precision in ALU/ALU64 operations | * b29e46610c media: platform: exynos4-is: fix return value check in fimc_md_probe() | * ab54081a28 media: vivid: fix compose size exceed boundary | * 3c58c83c6f bpf: Fix slot type check in check_stack_write_var_off | * cffa75198c drm/msm/hdmi: use devres helper for runtime PM management | * 58d002b72e drm/msm/hdmi: drop unused GPIO support | * 2d4bc60693 ima: Handle -ESTALE returned by ima_filter_rule_match() | * 13fc167e16 drm/panel/panel-sitronix-st7701: Remove panel on DSI attach failure | * c20672cfa0 spi: Update reference to struct spi_controller | * 2858d038c5 clk: renesas: r9a06g032: Repair grave increment error | * f6ed73db39 drm/rockchip: lvds: fix PM usage counter unbalance in poweron | * 13fab6322b can: kvaser_usb: Compare requested bittiming parameters with actual parameters in do_set_{,data}_bittiming | * 4e55d61e87 can: kvaser_usb: Add struct kvaser_usb_busparams | * fcfd4df200 can: kvaser_usb_leaf: Fix bogus restart events | * 51f07da38b can: kvaser_usb_leaf: Fix wrong CAN state after stopping | * 647c26887b can: kvaser_usb_leaf: Fix improved state not being reported | * 9676d65a4a can: kvaser_usb: make use of units.h in assignment of frequency | * c761108562 can: kvaser_usb_leaf: Set Warning state even without bus errors | * a60bf9d814 can: kvaser_usb: kvaser_usb_leaf: Handle CMD_ERROR_EVENT | * 8aae6bddc1 can: kvaser_usb: kvaser_usb_leaf: Rename {leaf,usbcan}_cmd_error_event to {leaf,usbcan}_cmd_can_error_event | * 972270be24 can: kvaser_usb: kvaser_usb_leaf: Get capabilities from device | * e9e0d9945f can: kvaser_usb: do not increase tx statistics when sending error message frames | * e39bce64e5 libbpf: Btf dedup identical struct test needs check for nested structs/arrays | * d4419f93e2 media: exynos4-is: don't rely on the v4l2_async_subdev internals | * 8741792d82 soreuseport: Fix socket selection for SO_INCOMING_CPU. | * 094f56192c venus: pm_helpers: Fix error check in vcodec_domains_get() | * 3c793a9ad9 media: i2c: ad5820: Fix error path | * 07611f9e44 media: adv748x: afe: Select input port when initializing AFE | * aa81257dbf media: coda: jpeg: Add check for kmalloc | * 9a402adc9f media: v4l2-ctrls: Fix off-by-one error in integer menu control check | * 1caed03305 drm/amdgpu/powerplay/psm: Fix memory leak in power state init | * f66a877083 ipmi: kcs: Poll OBF briefly to reduce OBE latency | * 983320199e ata: libata: fix NCQ autosense logic | * a9caf71aeb ata: add/use ata_taskfile::{error|status} fields | * 3483c3fb48 ata: libata: move ata_{port,link,dev}_dbg to standard pr_XXX() macros | * 6706135577 libbpf: Fix null-pointer dereference in find_prog_by_sec_insn() | * a733bf1019 libbpf: Fix use-after-free in btf_dump_name_dups | * b5ec2a04fe drm/bridge: adv7533: remove dynamic lane switching from adv7533 bridge | * 6d40a49d05 wifi: rtl8xxxu: Fix reading the vendor of combo chips | * 355f16f756 wifi: ath9k: hif_usb: Fix use-after-free in ath9k_hif_usb_reg_in_cb() | * d856f7574b wifi: ath9k: hif_usb: fix memory leak of urbs in ath9k_hif_usb_dealloc_tx_urbs() | * 12229a2523 platform/mellanox: mlxbf-pmc: Fix event typo | * a0d93aac54 rapidio: devices: fix missing put_device in mport_cdev_open | * 7af9cb8cbb hfs: Fix OOB Write in hfs_asc2mac | * 90962b3b1c relay: fix type mismatch when allocating memory in relay_create_buf() | * 0d60b11f8f eventfd: change int to __u64 in eventfd_signal() ifndef CONFIG_EVENTFD | * 2f5cc7fd73 rapidio: fix possible UAF when kfifo_alloc() fails | * 337b68da68 fs: sysv: Fix sysv_nblocks() returns wrong value | * 95d42a8d3d lockd: set other missing fields when unlocking files | * 318229b4d3 MIPS: OCTEON: warn only once if deprecated link status is being used | * 5e6d37a93a MIPS: BCM63xx: Add check for NULL for clk in clk_enable | * 50af0ba3e1 platform/x86: intel_scu_ipc: fix possible name leak in __intel_scu_ipc_register() | * 3cf8150135 platform/x86: mxm-wmi: fix memleak in mxm_wmi_call_mx[ds|mx]() | * 0ceadb5a3e platform/chrome: cros_ec_typec: zero out stale pointers | * 49c98b5688 platform/chrome: cros_ec_typec: Cleanup switch handle return paths | * b55ef8508a PM: runtime: Do not call __rpm_callback() from rpm_idle() | * 0bf874183b xen/privcmd: Fix a possible warning in privcmd_ioctl_mmap_resource() | * 70966d6b0f x86/xen: Fix memory leak in xen_init_lock_cpu() | * 23aef94eea x86/xen: Fix memory leak in xen_smp_intr_init{_pv}() | * 03ab1c5c2f uprobes/x86: Allow to probe a NOP instruction with 0x66 prefix | * 6fde666278 ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage() | * 9cabd5f4f1 clocksource/drivers/timer-ti-dm: Fix missing clk_disable_unprepare in dmtimer_systimer_init_clock() | * b73c76c3c4 cpu/hotplug: Do not bail-out in DYING/STARTING sections | * 6eb1802184 cpu/hotplug: Make target_store() a nop when target == state | * cd130e2676 futex: Resend potentially swallowed owner death notification | * fd8a10d44c futex: Move to kernel/futex/ | * 156144bd18 mips: ralink: mt7621: do not use kzalloc too early | * 186d59bb6a mips: ralink: mt7621: soc queries and tests as functions | * 8348da01e5 mips: ralink: mt7621: define MT7621_SYSC_BASE with __iomem | * 0f8e6fe09c clocksource/drivers/sh_cmt: Access registers according to spec | * a47de2fd3f rapidio: rio: fix possible name leak in rio_register_mport() | * ec3f04f74f rapidio: fix possible name leaks when rio_add_device() fails | * 4662d8e6ab debugfs: fix error when writing negative value to atomic_t debugfs file | * 7e8e8cc136 lib/notifier-error-inject: fix error when writing -errno to debugfs file | * 39b5e6130b libfs: add DEFINE_SIMPLE_ATTRIBUTE_SIGNED for signed value | * 19c202e6e5 cpufreq: amd_freq_sensitivity: Add missing pci_dev_put() | * 93e3c80338 genirq/irqdesc: Don't try to remove non-existing sysfs files | * 435cc7d18c nfsd: don't call nfsd_file_put from client states seqfile display | * 5030d4d2bf NFSD: Finish converting the NFSv2 GETACL result encoder | * e498675e06 SUNRPC: Return true/false (not 1/0) from bool functions | * 3e255dc210 EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() | * 740efb64ca irqchip/wpcm450: Fix memory leak in wpcm450_aic_of_init() | * 77b99b483f irqchip: gic-pm: Use pm_runtime_resume_and_get() in gic_probe() | * 5139cbc0c6 thermal: core: fix some possible name leaks in error paths | * cab345f9d5 platform/chrome: cros_usbpd_notify: Fix error handling in cros_usbpd_notify_init() | * 0358bc7cc2 perf/x86/intel/uncore: Fix reference count leak in __uncore_imc_init_box() | * 433bd587dc perf/x86/intel/uncore: Fix reference count leak in snr_uncore_mmio_map() | * 3485f19751 perf/x86/intel/uncore: Fix reference count leak in hswep_has_limit_sbox() | * 0021ef7dc6 perf/x86/intel/uncore: Fix reference count leak in sad_cfg_iio_topology() | * c12b314bb2 PNP: fix name memory leak in pnp_alloc_dev() | * f1c7a6af71 selftests/efivarfs: Add checking of the test return value | * 46be3ee1ca MIPS: vpe-cmp: fix possible memory leak while module exiting | * e820a8192f MIPS: vpe-mt: fix possible memory leak while module exiting | * 61d68cf2ba ocfs2: fix memory leak in ocfs2_stack_glue_init() | * e83b47580a lib/fonts: fix undefined behavior in bit shift for get_default_font | * 0df7d9ab6b proc: fixup uptime selftest | * 07b8659b8e timerqueue: Use rb_entry_safe() in timerqueue_getnext() | * 413b18866b platform/x86: huawei-wmi: fix return value calculation | * 4b46932283 lib/debugobjects: fix stat count and optimize debug_objects_mem_init | * f790dfe816 perf: Fix possible memleak in pmu_dev_alloc() | * 418d21c0df selftests/ftrace: event_triggers: wait longer for test_event_enable | * 4ea765b106 cpufreq: qcom-hw: Fix memory leak in qcom_cpufreq_hw_read_lut() | * c52d9c25d9 fs: don't audit the capability check in simple_xattr_list() | * e4d0d13b46 PM: hibernate: Fix mistake in kerneldoc comment | * 1f62b8e50d x86/sgx: Reduce delay and interference of enclave release | * f5b88170f0 alpha: fix syscall entry in !AUDUT_SYSCALL case | * a819ba80b9 alpha: fix TIF_NOTIFY_SIGNAL handling | * eb2a732ef4 cpuidle: dt: Return the correct numbers of parsed idle states | * 3af4f5cb8a sched/uclamp: Make asym_fits_capacity() use util_fits_cpu() | * 23cb580e0c sched/core: Introduce sched_asym_cpucap_active() | * 41c2dba388 sched/fair: Removed useless update of p->recent_used_cpu | * 55ffeab089 sched/uclamp: Make select_idle_capacity() use util_fits_cpu() | * 4639bfbb83 sched/uclamp: Make task_fits_capacity() use util_fits_cpu() | * 309e50cbfe sched/uclamp: Fix relationship between uclamp and migration margin | * 54a766e196 sched/fair: Cleanup task_util and capacity type | * 26bffaf678 ovl: remove privs in ovl_fallocate() | * 5dc34f9aaa ovl: remove privs in ovl_copyfile() | * 9636e70ee2 ovl: use ovl_copy_{real,upper}attr() wrappers | * a54843833c ovl: store lower path in ovl_inode | * 163c5bbe7d tpm/tpm_crb: Fix error message in __crb_relinquish_locality() | * fe880e9df9 tpm/tpm_ftpm_tee: Fix error handling in ftpm_mod_init() | * ebc73c4f26 pstore: Avoid kcore oops by vmap()ing with VM_IOREMAP | * d4dcde11bf ARM: mmp: fix timer_read delay | * 95916147dc pstore/ram: Fix error return code in ramoops_probe() | * a31a647a3d seccomp: Move copy_seccomp() to no failure path. | * b8b76b8da6 arm64: dts: armada-3720-turris-mox: Add missing interrupt for RTC | * 820a5ccca7 ARM: dts: turris-omnia: Add switch port 6 node | * b311f8e9f5 ARM: dts: turris-omnia: Add ethernet aliases | * 48ebdd06c9 ARM: dts: armada-39x: Fix assigned-addresses for every PCIe Root Port | * f27dd04e44 ARM: dts: armada-38x: Fix assigned-addresses for every PCIe Root Port | * 1e53c63da8 ARM: dts: armada-375: Fix assigned-addresses for every PCIe Root Port | * 3af1a73e9e ARM: dts: armada-xp: Fix assigned-addresses for every PCIe Root Port | * e4ed8133c4 ARM: dts: armada-370: Fix assigned-addresses for every PCIe Root Port | * b335b6344e ARM: dts: dove: Fix assigned-addresses for every PCIe Root Port | * 5b3415e683 arm64: dts: mediatek: mt6797: Fix 26M oscillator unit name | * 93f5e66496 arm64: dts: mediatek: pumpkin-common: Fix devicetree warnings | * debd938e21 arm64: dts: mt2712-evb: Fix usb vbus regulators unit names | * b2c6397754 arm64: dts: mt2712-evb: Fix vproc fixed regulators unit names | * 96c972f835 arm64: dts: mt2712e: Fix unit address for pinctrl node | * 2cd1391c28 arm64: dts: mt2712e: Fix unit_address_vs_reg warning for oscillators | * 39877a3636 arm64: dts: mt6779: Fix devicetree build warnings | * af431ce47e ARM: dts: nuvoton: Remove bogus unit addresses from fixed-partition nodes | * 0a616049ec arm64: dts: ti: k3-j721e-main: Drop dma-coherent in crypto node | * 22a740824a arm64: dts: ti: k3-am65-main: Drop dma-coherent in crypto node | * b131304fe7 perf/smmuv3: Fix hotplug callback leak in arm_smmu_pmu_init() | * b99fbe8d94 perf/arm_dmc620: Fix hotplug callback leak in dmc620_pmu_init() | * 9285b623bb perf: arm_dsu: Fix hotplug callback leak in dsu_pmu_init() | * e6318a7e19 arm64: mm: kfence: only handle translation faults | * 46ddfb9d1e arm64: Treat ESR_ELx as a 64-bit register | * 681e340128 soc: ti: smartreflex: Fix PM disable depth imbalance in omap_sr_probe | * 6eca7a2535 soc: ti: knav_qmss_queue: Fix PM disable depth imbalance in knav_queue_probe | * 972f8fc065 soc: ti: knav_qmss_queue: Use pm_runtime_resume_and_get instead of pm_runtime_get_sync | * fe53048f2a arm: dts: spear600: Fix clcd interrupt | * 75baeec464 arm64: dts: qcom: sm6125: fix SDHCI CQE reg names | * 0f9ac04191 soc: qcom: apr: Add check for idr_alloc and of_property_read_string_index | * 6855dd02c5 soc: qcom: apr: make code more reuseable | * c9fb81a835 arm64: dts: qcom: sm8250: drop bogus DP PHY clock | * 53ffa57464 arm64: dts: qcom: sm8350: fix UFS PHY registers | * d5a6bbd7a2 arm64: dts: qcom: sm8250: fix UFS PHY registers | * 3a52ff845f arm64: dts: qcom: sm8150: fix UFS PHY registers | * 800f8165e0 arm64: dts: qcom: Correct QMP PHY child node name | * ee136f275b soc: qcom: llcc: make irq truly optional | * aa7ffd4174 arm64: dts: qcom: sm8250: correct LPASS pin pull down | * f94bacc616 arm64: dts: qcom: pm660: Use unique ADC5_VCOIN address in node name | * d5bf119781 drivers: soc: ti: knav_qmss_queue: Mark knav_acc_firmwares as static | * 4707d5daf8 ARM: dts: stm32: Fix AV96 WLAN regulator gpio property | * 33647d7a46 ARM: dts: stm32: Drop stm32mp15xc.dtsi from Avenger96 | * 9f271a8660 objtool, kcsan: Add volatile read/write instrumentation to whitelist | * 51fe2dcba8 arm64: dts: qcom: msm8916: Drop MSS fallback compatible | * a9fff3524f arm64: dts: qcom: sdm845-cheza: fix AP suspend pin bias | * 6487f48ea3 arm64: dts: qcom: sdm630: fix UART1 pin bias | * 6c0c9c5458 ARM: dts: qcom: apq8064: fix coresight compatible | * 0f9b088d68 arm64: dts: qcom: msm8996: fix GPU OPP table | * 270683fc7b arm64: dts: qcom: msm8996: fix supported-hw in cpufreq OPP tables | * 5c5a628914 arm64: dts: qcom: msm8996: Add MSM8996 Pro support | * 3f14048ee4 arm64: dts: qcom: sm8250-sony-xperia-edo: fix touchscreen bias-disable | * 89f79f8d7f arm64: dts: qcom: ipq6018-cp01-c1: use BLSPI1 pins | * 9db5992e72 usb: musb: remove extra check in musb_gadget_vbus_draw | * adc063a491 drm/amd/display: Manually adjust strobe for DCN303 * | 50e12445ab Merge 5.15.85 into android13-5.15-lts |\| | * 5827ddaf45 Linux 5.15.85 | * e22dbadac8 net: loopback: use NET_NAME_PREDICTABLE for name_assign_type | * 314e7a7836 selftests: net: Use "grep -E" instead of "egrep" | * 19a7814396 Bluetooth: L2CAP: Fix u8 overflow | * f692abf139 HID: uclogic: Add HID_QUIRK_HIDINPUT_FORCE quirk | * 5325a884e2 usb: dwc3: pci: Update PCIe device ID for USB3 controller on CPU sub-system for Raptor Lake | * 367e1e3399 igb: Initialize mailbox message for VF reset | * a301742b35 xhci: Apply XHCI_RESET_TO_DEFAULT quirk to ADL-N | * 5e959f0c4c USB: serial: f81534: fix division by zero on line-speed change | * 68fbe268d2 USB: serial: f81232: fix division by zero on line-speed change | * 3ec7f24b8b USB: serial: cp210x: add Kamstrup RF sniffer PIDs | * 2b092fab23 USB: serial: option: add Quectel EM05-G modem | * 6b41a35b41 usb: gadget: uvc: Prevent buffer overflow in setup handler | * 828112571c udf: Fix extending file within last block | * df1a2596c7 udf: Do not bother looking for prealloc extents if i_lenExtents matches i_size | * 63dbbd8f14 udf: Fix preallocation discarding at indirect extent boundary | * 79a97f08ae udf: Discard preallocation before extending file with a hole * | fb8d543b61 Merge 5.15.84 into android13-5.15-lts |\| | * d68f50bfb0 Linux 5.15.84 | * 972707bae3 net: fec: properly guard irq coalesce setup | * 289721fe09 ASoC: ops: Correct bounds check for second channel on SX controls | * de0866b94a nvme-pci: clear the prp2 field when not used | * 8bffa95ac1 perf: Fix perf_pending_task() UaF | * 825bd2af42 ASoC: cs42l51: Correct PGA Volume minimum value | * 91582b3a1a net: fec: don't reset irq coalesce settings to defaults on "ip link up" | * c772dab247 can: mcba_usb: Fix termination command argument | * aa822de7de can: sja1000: fix size of OCR_MODE_MASK define | * 09e08740d7 pinctrl: meditatek: Startup with the IRQs disabled | * 172a95026f libbpf: Use page size as max_entries when probing ring buffer map | * cf611d7867 ASoC: ops: Check bounds for second channel in snd_soc_put_volsw_sx() | * a74b88e170 ASoC: fsl_micfil: explicitly clear CHnF flags | * afac1e7d78 ASoC: fsl_micfil: explicitly clear software reset bit | * 9d933af8fe nfp: fix use-after-free in area_cache_get() | * e1a4f5880d vfs: fix copy_file_range() averts filesystem freeze protection | * 86e28ed25b x86/vdso: Conditionally export __vdso_sgx_enter_enclave() * | bfbd2237c1 Merge 5.15.83 into android13-5.15-lts |\| | * fd6d66840b Linux 5.15.83 | * f895511de9 io_uring: Fix a null-ptr-deref in io_tctx_exit_cb() | * f435c66d23 io_uring: move to separate directory | * d9e1e5d8a7 block: move CONFIG_BLOCK guard to top Makefile | * e5c0bc4ff5 can: esd_usb: Allow REC and TEC to return to zero | * db6343a5b0 s390/qeth: fix use-after-free in hsci | * a56c1cebe4 s390/qeth: fix various format strings | * a6dba316c9 macsec: add missing attribute validation for offload | * 40500f1f47 net: mvneta: Fix an out of bounds check | * b9274dbe39 net: thunderbolt: fix memory leak in tbnet_open() | * 7390c70bd4 ipv6: avoid use-after-free in ip6_fragment() | * 1beb475892 net: plip: don't call kfree_skb/dev_kfree_skb() under spin_lock_irq() | * b08412a9cf net: phy: mxl-gpy: fix version reporting | * dec5abd91a xen/netback: fix build warning | * 54d830e242 dpaa2-switch: Fix memory leak in dpaa2_switch_acl_entry_add() and dpaa2_switch_acl_entry_remove() | * c7adcbd0fd ethernet: aeroflex: fix potential skb leak in greth_init_rings() | * d962d42d63 tipc: call tipc_lxc_xmit without holding node_read_lock | * f3b5dda26c net: dsa: sja1105: fix memory leak in sja1105_setup_devlink_regions() | * 5dab6fa068 ipv4: Fix incorrect route flushing when table ID 0 is used | * ac566bd577 ipv4: Fix incorrect route flushing when source address is deleted | * af4ccae4b7 tipc: Fix potential OOB in tipc_link_proto_rcv() | * b8ce0e6f9f net: hisilicon: Fix potential use-after-free in hix5hd2_rx() | * 1685417774 net: mdio: fix unbalanced fwnode reference count in mdio_device_release() | * 6f4798ac9c net: hisilicon: Fix potential use-after-free in hisi_femac_rx() | * 114e65a221 net: thunderx: Fix missing destroy_workqueue of nicvf_rx_mode_wq | * 51c0494575 net: microchip: sparx5: Fix missing destroy_workqueue of mact_queue | * 99eec0a766 ip_gre: do not report erspan version on GRE interface | * 2891957853 net: stmmac: fix "snps,axi-config" node property parsing | * 5cb8f1a784 gpio/rockchip: fix refcount leak in rockchip_gpiolib_register() | * b8c2f0392d nvme initialize core quirks before calling nvme_init_subsystem | * 908b2da426 NFC: nci: Bounds check struct nfc_target arrays | * d841cc1563 i40e: Disallow ip4 and ip6 l4_4_bytes | * 625a13850b i40e: Fix for VF MAC address 0 | * 5538794dbd i40e: Fix not setting default xps_cpus after reset | * a6b30598fe net: mvneta: Prevent out of bounds read in mvneta_config_rss() | * e6e897d4fe xen-netfront: Fix NULL sring after live migration | * eefd8953a7 octeontx2-pf: Fix potential memory leak in otx2_init_tc() | * f88acaed07 net: mdiobus: fix double put fwnode in the error path | * cc62d76928 net: mdiobus: fwnode_mdiobus_register_phy() rework error handling | * ea113b570e net: encx24j600: Fix invalid logic in reading of MISTAT register | * 8aae746d06 net: encx24j600: Add parentheses to fix precedence | * a110287ef4 mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add() | * e046421bed selftests: rtnetlink: correct xfrm policy rule in kci_test_ipsec_offload | * 4fa8988a36 net: dsa: sja1105: Check return value | * b35be171df net: dsa: hellcreek: Check return value | * a4c342e645 net: dsa: ksz: Check return value | * edf7284a98 Bluetooth: Fix not cleanup led when bt_init fails | * 3322193949 Bluetooth: 6LoWPAN: add missing hci_dev_put() in get_l2cap_conn() | * 6c88c764e0 vmxnet3: use correct intrConf reference when using extended queues | * 5ad0d85757 vmxnet3: correctly report encapsulated LRO packet | * 5c014eb0ed af_unix: Get user_ns from in_skb in unix_diag_get_exact(). | * 807a01a329 drm: bridge: dw_hdmi: fix preference of RGB modes over YUV420 | * eb96fd3983 net: broadcom: Add PTP_1588_CLOCK_OPTIONAL dependency for BCMGENET under ARCH_BCM2835 | * 16eb678bca igb: Allocate MSI-X vector when testing | * 34c6367c94 e1000e: Fix TX dispatch condition | * 4271515f18 gpio: amd8111: Fix PCI device reference count leak | * d57b60e9b3 drm/bridge: ti-sn65dsi86: Fix output polarity setting bug | * f8b2965601 netfilter: ctnetlink: fix compilation warning after data race fixes in ct mark | * 246bcd05ba ca8210: Fix crash by zero initializing data | * 80dad8df5f ieee802154: cc2520: Fix error return code in cc2520_hw_init() | * dd9dcfb85c drm/vmwgfx: Fix race issue calling pin_user_pages | * 7b09ba9036 netfilter: nft_set_pipapo: Actually validate intervals in fields after the first one | * 6daaa84b62 gpiolib: fix memory leak in gpiochip_setup_dev() | * 1a1075d371 gpiolib: check the 'ngpios' property in core gpiolib code | * 70c5515c1c gpiolib: improve coding style for local variables | * 3b714f25fc clk: Fix pointer casting to prevent oops in devm_clk_release() | * c142cba37d can: af_can: fix NULL pointer dereference in can_rcv_filter | * 104bb1f67e HID: ite: Enable QUIRK_TOUCHPAD_ON_OFF_REPORT on Acer Aspire Switch V 10 | * f755d11c55 HID: core: fix shift-out-of-bounds in hid_report_raw_event | * 2d4b310c32 HID: hid-lg4ff: Add check for empty lbuf | * 5e8021ae08 HID: usbhid: Add ALWAYS_POLL quirk for some mice | * 5e88c6f4aa net: dsa: sja1105: avoid out of bounds access in sja1105_init_l2_policing() | * 1074fefce9 drm/shmem-helper: Avoid vm_open error paths | * 83e3da8bb9 drm/shmem-helper: Remove errant put in error path | * 249011f4c3 drm/amdgpu/sdma_v4_0: turn off SDMA ring buffer in the s2idle suspend | * 1e4fe9a154 drm/vmwgfx: Don't use screen objects when SEV is active | * f6550976fe KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field | * fe50a9bbeb net: mana: Fix race on per-CQ variable napi work_done | * a49894a5ac Bluetooth: Fix crash when replugging CSR fake controllers | * 1dee2b5047 Bluetooth: btusb: Add debug message for CSR controllers | * 3ac29732a2 mm/gup: fix gup_pud_range() for dax | * aad8bbd17a memcg: fix possible use-after-free in memcg_write_event_control() | * 6fb8bc29bf media: v4l2-dv-timings.c: fix too strict blanking sanity checks | * a4c575541e Revert "ARM: dts: imx7: Fix NAND controller size-cells" | * 28abc11459 soundwire: intel: Initialize clock stop timeout | * 22d800b378 media: videobuf2-core: take mmap_lock in vb2_get_unmapped_area() | * 5d0fa6fc88 xen/netback: don't call kfree_skb() with interrupts disabled | * 4422241cef xen/netback: do some code cleanup | * 0fe29bd925 xen/netback: Ensure protocol headers don't fall in the non-linear area | * f01677be31 drm/bridge: anx7625: Fix edid_read break case in sp_tx_edid_read() | * ee2536830b cifs: fix use-after-free caused by invalid pointer `hostname` | * dc62f05f66 rtc: cmos: avoid UIP when reading alarm time | * 48ea4199af rtc: cmos: avoid UIP when writing alarm time | * 3f52afc6ed rtc: mc146818-lib: extract mc146818_avoid_UIP | * 1a3f8c6cd2 mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths | * 79ad784c9d mm/khugepaged: fix GUP-fast interaction by sending IPI | * d15cd6de01 mm/khugepaged: take the right locks for page table retraction | * 26f084e554 net: usb: qmi_wwan: add u-blox 0x1342 composition | * 029a7f1c5d 9p/xen: check logical size for buffer size | * b398832893 usb: dwc3: gadget: Disable GUSB2PHYCFG.SUSPHY for End Transfer | * e70a572440 fbcon: Use kzalloc() in fbcon_prepare_logo() | * fd3768597d regulator: twl6030: fix get status of twl6032 regulators | * 9f74b9aa8d ASoC: soc-pcm: Add NULL check in BE reparenting | * dae93f4168 btrfs: send: avoid unaligned encoded writes when attempting to clone range | * f54e1edf57 selftests/net: Find nettest in current directory | * fccd454129 ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event | * 542a563bb7 regulator: slg51000: Wait after asserting CS pin | * 3d1b5fde36 9p/fd: Use P9_HDRSZ for header size | * fe2d44e86e ASoC: rt711-sdca: fix the latency time of clock stop prepare state machine transitions | * e945f3d809 ARM: dts: rockchip: disable arm_global_timer on rk3066 and rk3188 | * c3b818c91a spi: mediatek: Fix DEVAPC Violation at KO Remove | * d9f0107be1 ASoC: wm8962: Wait for updated value of WM8962_CLOCKING1 register | * 7ae0262748 ARM: 9266/1: mm: fix no-MMU ZERO_PAGE() implementation | * d81c62e312 ARM: 9251/1: perf: Fix stacktraces for tracepoint events in THUMB2 kernels | * 66717ad03b fs: use acquire ordering in __fget_light() | * 1222e2364a ARM: dts: rockchip: rk3188: fix lcdc1-rgb24 node name | * 996fb29b06 arm64: dts: rockchip: fix ir-receiver node names | * 752138ef89 ARM: dts: rockchip: fix ir-receiver node names | * 8045971e40 arm: dts: rockchip: remove clock-frequency from rtc | * 5e9fb8013a arm: dts: rockchip: fix node name for hym8563 rtc | * 2ed7137e91 arm64: dts: rockchip: keep I2S1 disabled for GPIO function on ROCK Pi 4 series | * 5a1122e1a8 mmc: mtk-sd: Fix missing clk_disable_unprepare in msdc_of_clock_parse() | * 282f52c954 clk: Provide new devm_clk helpers for prepared and enabled clocks | * eb94a7a20f clk: generalize devm_clk_get() a bit * | 20de784185 ANDROID: fix up abi change in struct sdhci_host * | ebd1f8013d ANDROID: gki_defconfig: add CONFIG_FUNCTION_ERROR_INJECTION * | 112ff45bb5 Merge 5.15.82 into android13-5.15-lts |\| | * d979030136 Linux 5.15.82 | * 48642f9431 proc: proc_skip_spaces() shouldn't think it is working on C strings | * 3eb9213f66 proc: avoid integer type confusion in get_proc_long | * 4a4073a2e2 ipc/sem: Fix dangling sem_array access in semtimedop race | * 53b9b1201e Input: raydium_ts_i2c - fix memory leak in raydium_i2c_send() | * 571b6bbbf5 char: tpm: Protect tpm_pm_suspend with locks | * f39891cfe7 Revert "clocksource/drivers/riscv: Events are stopped during CPU suspend" | * a759057af7 ACPI: HMAT: Fix initiator registration for single-initiator systems | * da8a794d71 ACPI: HMAT: remove unnecessary variable initialization | * 2d16161a2c i2c: imx: Only DMA messages with I2C_M_DMA_SAFE flag set | * 950a05cb15 i2c: npcm7xx: Fix error handling in npcm_i2c_init() | * db3f8da033 serial: stm32: Deassert Transmit Enable on ->rs485_config() | * 45f628f4fd serial: stm32: Use TC interrupt to deassert GPIO RTS in RS485 mode | * c60eae5b1d serial: stm32: Factor out GPIO RTS toggling into separate function | * 041f8dc882 ipv4: Fix route deletion when nexthop info is not specified | * 25174d91e4 ipv4: Handle attempt to delete multipath route when fib_info contains an nh reference | * a0ad247e55 selftests: net: fix nexthop warning cleanup double ip typo | * 532847b69c selftests: net: add delete nexthop route warning test | * e078355881 Kconfig.debug: provide a little extra FRAME_WARN leeway when KASAN is enabled | * 723fa02e0e parisc: Increase FRAME_WARN to 2048 bytes on parisc | * b951ab4b35 mm: migrate: fix THP's mapcount on isolation | * c5eda6029c mm: __isolate_lru_page_prepare() in isolate_migratepages_block() | * bdb613ef17 iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init() | * b6eea8b2e8 iommu/vt-d: Fix PCI device refcount leak in has_external_pci() | * 787d81d4eb nvme: fix SRCU protection of nvme_ns_head list | * 12f237200c riscv: kexec: Fixup irq controller broken in kexec crash path | * ac00301adb riscv: fix race when vmap stack overflow | * fa7a7d185e riscv: Sync efi page table's kernel mappings before switching | * d86d698925 pinctrl: single: Fix potential division by zero | * 98b15c7066 ASoC: ops: Fix bounds check for _sx controls | * f88a6977f8 KVM: x86/mmu: Fix race condition in direct_page_fault | * df4b177b48 io_uring/poll: fix poll_refs race with cancelation | * 4b702b7d11 io_uring: make poll refs more robust | * 1d58849ac2 io_uring: cmpxchg for poll arm refs release | * cd1981a8c3 io_uring: fix tw losing poll events | * 62321dc7b0 io_uring: update res mask in io_poll_check_events | * 417d5ea6e7 tracing: Free buffers when a used dynamic event is removed | * 52fc245d15 tracing: Fix race where histograms can be called before the event | * cb2b0612cd tracing/osnoise: Fix duration type | * 615a996ff3 drm/i915: Never return 0 if not all requests retired | * 01a2b25ef2 drm/i915: Fix negative value passed as remaining time | * ff1591ba33 drm/amdgpu: enable Vangogh VCN indirect sram mode | * ac2d7fa908 drm/amdgpu: temporarily disable broken Clang builds due to blown stack-frame | * 57ee7bc4c6 mmc: sdhci: Fix voltage switch delay | * bb8f809514 mmc: sdhci-sprd: Fix no reset data and command after voltage switch | * 4c7681c1a5 mmc: sdhci-esdhc-imx: correct CQHCI exit halt state check | * 01dbe4db59 mmc: core: Fix ambiguous TRIM and DISCARD arg | * 738946e355 mmc: mmc_test: Fix removal of debugfs file | * 635d051734 net: stmmac: Set MAC's flow control register to reflect current settings | * 9132dcdf3b v4l2: don't fall back to follow_pfn() if pin_user_pages_fast() fails | * 76ad884be0 pinctrl: intel: Save and restore pins in "direct IRQ" mode | * 41296b85fa x86/bugs: Make sure MSR_SPEC_CTRL is updated properly upon resume from S3 | * 33021419fd nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry() | * 2e44dd9a8d tools/vm/slabinfo-gnuplot: use "grep -E" instead of "egrep" | * b60a8ad771 error-injection: Add prompt for function error injection | * 757eb00c4c ALSA: dice: fix regression for Lexicon I-ONIX FW810S | * a1a96a6f30 riscv: mm: Proper page permissions after initmem free | * 823df3607d riscv: vdso: fix section overlapping under some conditions | * 6e035d5a2a hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() | * 7692700ac8 hwmon: (coretemp) Check for null before removing sysfs attrs | * 9b5836b9c4 net: ethernet: renesas: ravb: Fix promiscuous mode after system resumed | * 0dfb9a5663 sctp: fix memory leak in sctp_stream_outq_migrate() | * fcb3e02161 packet: do not set TP_STATUS_CSUM_VALID on CHECKSUM_COMPLETE | * 04b995e963 net: tun: Fix use-after-free in tun_detach() | * 43ca0adf79 afs: Fix fileserver probe RTT handling | * 543d917f69 net: mdiobus: fix unbalanced node reference count | * dca370e575 net: hsr: Fix potential use-after-free | * 1daec08156 tipc: re-fetch skb cb after tipc_msg_validate | * 16a64dc265 dsa: lan9303: Correct stat name | * 766086ea8c net: wwan: iosm: fix dma_alloc_coherent incompatible pointer type | * c667751a42 net: wwan: iosm: fix kernel test robot reported error | * 9c584d6d9c net: ethernet: nixge: fix NULL dereference | * 8782b32ef8 net/9p: Fix a potential socket leak in p9_socket_open | * 6fc9425bff net: net_netdev: Fix error handling in ntb_netdev_init_module() | * 3bc893ef36 net: ethernet: ti: am65-cpsw: fix error handling in am65_cpsw_nuss_probe() | * 7730904f50 net: phy: fix null-ptr-deref while probe() failed | * 59b54f0563 wifi: mac8021: fix possible oob access in ieee80211_get_rate_duration | * dc0853f8b5 wifi: cfg80211: don't allow multi-BSSID in S1G | * 88a6fe3707 wifi: cfg80211: fix buffer overflow in elem comparison | * 08fff7aaeb aquantia: Do not purge addresses when setting the number of rings | * 2a7aa52573 qlcnic: fix sleep-in-atomic-context bugs caused by msleep | * 7b734d26f0 can: m_can: Add check for devm_clk_get | * ea8dc27bb0 can: m_can: pci: add missing m_can_class_free_dev() in probe/remove methods | * b1d2a8e02a can: etas_es58x: es58x_init_netdev(): free netdev when register_candev() | * e53da04e37 can: cc770: cc770_isa_probe(): add missing free_cc770dev() | * d452a71995 can: sja1000_isa: sja1000_isa_probe(): add missing free_sja1000dev() | * 372eb550fa net/mlx5e: Fix use-after-free when reverting termination table | * 839eeab03c net/mlx5: Fix uninitialized variable bug in outlen_write() | * 34feea3bfb net/mlx5: DR, Fix uninitialized var warning | * 3485ef2aab net/mlx5: DR, Rename list field in matcher struct to list_node | * 9fc27d22cd e100: Fix possible use after free in e100_xmit_prepare | * 0d9f5bd54b iavf: Fix error handling in iavf_init_module() | * b0b2b9050c iavf: remove redundant ret variable | * 69501d8205 fm10k: Fix error handling in fm10k_init_module() | * 5e3657dede i40e: Fix error handling in i40e_init_module() | * 7109e94109 ixgbevf: Fix resource leak in ixgbevf_init_module() | * 196ea810e2 of: property: decrement node refcount in of_fwnode_get_reference_args() | * 36164db278 nvmem: rmem: Fix return value check in rmem_read() | * e376183167 bpf: Do not copy spin lock field from user in bpf_selem_alloc | * 45f6e81863 hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails | * a90251376c hwmon: (i5500_temp) fix missing pci_disable_device() | * eeb31b828d hwmon: (ina3221) Fix shunt sum critical calculation | * 9514b95cac hwmon: (ltc2947) fix temperature scaling | * 0140e079a4 libbpf: Handle size overflow for ringbuf mmap | * 06d5790e7d ARM: at91: rm9200: fix usb device clock id | * d074f173fb scripts/faddr2line: Fix regression in name resolution on ppc64le | * ee3d37d796 bpf, perf: Use subprog name when reporting subprog ksymbol | * ec02fc0a41 iio: light: rpr0521: add missing Kconfig dependencies | * f7419fc42a iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw | * e7e76a77aa iio: health: afe4403: Fix oob read in afe4403_read_raw | * ebdca90efb drm/amdgpu: Partially revert "drm/amdgpu: update drm_display_info correctly when the edid is read" | * c365d3c3e5 drm/amdgpu: update drm_display_info correctly when the edid is read | * df5346466e drm/display/dp_mst: Fix drm_dp_mst_add_affected_dsc_crtcs() return code | * 044da1a371 btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit() | * da86809ab8 btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker | * 5d66eadc1c spi: spi-imx: Fix spi_bus_clk if requested clock is higher than input clock | * 6b4544a131 btrfs: free btrfs_path before copying inodes to userspace | * c7ae3becee btrfs: sink iterator parameter to btrfs_ioctl_logical_to_ino | * acc2f40b98 erofs: fix order >= MAX_ORDER warning due to crafted negative i_size | * ca9f27448a drm/i915/gt: Use i915_vm_put on ppgtt_create error paths | * c2f2972889 drm/i915: Create a dummy object for gen6 ppgtt | * 918002bdbe arm64: mte: Avoid setting PG_mte_tagged if no tags cleared or restored * | d753150bdc Revert "serial: Add rs485_supported to uart_port" * | 8ccd9528be Revert "serial: fsl_lpuart: Fill in rs485_supported" * | a924bb92c6 Merge 5.15.81 into android13-5.15-lts |\| | * e4a7232c91 Linux 5.15.81 | * 5c5c563a08 cifs: fix missed refcounting of ipc tcon | * ee2d04f23b drm/i915: fix TLB invalidation for Gen12 video and compute engines | * bef834845d drm/amdgpu: always register an MMU notifier for userptr | * 7901de7aa8 drm/amdgpu: Enable Aldebaran devices to report CU Occupancy | * e7bf1fe538 drm/amd/display: No display after resume from WB/CB | * 5033cba00c drm/amd/dc/dce120: Fix audio register mapping, stop triggering KASAN | * b8dc245909 btrfs: sysfs: normalize the error handling branch in btrfs_init_sysfs() | * 914baca57a btrfs: use kvcalloc in btrfs_get_dev_zone_info | * c1e6d4bfde btrfs: zoned: fix missing endianness conversion in sb_write_pointer | * d88bf6be02 btrfs: free btrfs_path before copying subvol info to userspace | * f218b404fc btrfs: free btrfs_path before copying fspath to userspace | * fea9397101 btrfs: free btrfs_path before copying root refs to userspace | * 7d0c25b5fe genirq: Take the proposed affinity at face value if force==true | * f17657cce0 irqchip/gic-v3: Always trust the managed affinity provided by the core code | * 52a93f2dcf genirq: Always limit the affinity to online CPUs | * 599cf4b845 genirq/msi: Shutdown managed interrupts with unsatifiable affinities | * 7aed1dd5d2 wifi: wilc1000: validate number of channels | * e9de501cf7 wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute | * 143232cb5a wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute | * cd9c486971 wifi: wilc1000: validate pairwise and authentication suite offsets | * f2fb18d429 fuse: lock inode unconditionally in fuse_fallocate() | * bb1c33bdf4 dm integrity: clear the journal on suspend | * 20ad31b09e dm integrity: flush the journal on suspend | * 5ca2110ba5 gpu: host1x: Avoid trying to use GART on Tegra20 | * 97f47617e8 scsi: iscsi: Fix possible memory leak when device_register() failed | * 56ab7f237e net: usb: qmi_wwan: add Telit 0x103a composition | * e2e33f213d tcp: configurable source port perturb table size | * 269928e5c7 platform/x86: ideapad-laptop: Fix interrupt storm on fn-lock toggle on some Yoga laptops | * 17d995dc69 platform/x86: hp-wmi: Ignore Smart Experience App event | * e85bdc7872 zonefs: fix zone report size in __zonefs_io_error() | * 982fcd83fb drm/amdgpu: disable BACO support on more cards | * ea11f8197d platform/x86: acer-wmi: Enable SW_TABLET_MODE on Switch V 10 (SW5-017) | * 09af15e691 platform/x86: asus-wmi: add missing pci_dev_put() in asus_wmi_set_xusb2pr() | * ba040bea9d xen/platform-pci: add missing free_irq() in error path | * 6815b2087d xen-pciback: Allow setting PCI_MSIX_FLAGS_MASKALL too | * 4c13ddb74f ASoC: stm32: dfsdm: manage cb buffers cleanup | * dd82295a23 Input: i8042 - apply probe defer to more ASUS ZenBook models | * e12e121feb Input: soc_button_array - add Acer Switch V 10 to dmi_use_low_level_irq[] | * 9f5c167074 Input: soc_button_array - add use_low_level_irq module parameter | * aaef86eac9 Input: goodix - try resetting the controller when no config is set | * e2223f5fbb serial: 8250: 8250_omap: Avoid RS485 RTS glitch on ->set_termios() | * 4e208294de tools: iio: iio_generic_buffer: Fix read size | * 0d0e2545fa ASoC: Intel: bytcht_es8316: Add quirk for the Nanote UMPC-01 | * e394cf9d7a Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode | * 96b5d11777 x86/ioremap: Fix page aligned size calculation in __ioremap_caller() | * d048f74815 x86/pm: Add enumeration check before spec MSRs save/restore setup | * 070e3560bf x86/tsx: Add a feature bit for TSX control MSR support | * 1430c98ebb KVM: x86: remove exit_int_info warning in svm_handle_exit | * 27550a5930 KVM: x86: add kvm_leave_nested | * 3e87cb0caa KVM: x86: nSVM: harden svm_free_nested against freeing vmcb02 while still in use | * 6425c590d0 KVM: x86: forcibly leave nested mode on vCPU reset | * f42ebf972a KVM: x86: nSVM: leave nested mode on vCPU free | * 7b3c9405b2 mm: vmscan: fix extreme overreclaim and swap floods | * feb2eda5e1 gcov: clang: fix the buffer overflow issue | * ea6aa25c9a nilfs2: fix nilfs_sufile_mark_dirty() not set segment usage as dirty | * 9d97a9fbfc usb: dwc3: gadget: Clear ep descriptor last | * 02632ea4df usb: dwc3: gadget: Return -ESHUTDOWN on ep disable | * 765ca3e63f usb: dwc3: gadget: conditionally remove requests | * 7945cbf866 bus: ixp4xx: Don't touch bit 7 on IXP42x | * 39c039018a iio: core: Fix entry not deleted when iio_register_sw_trigger_type() fails | * 0791a5ddba iio: light: apds9960: fix wrong register for gesture gain | * f0158b9bfc arm64: dts: rockchip: lower rk3399-puma-haikou SD controller clock frequency | * 277d19ec28 ext4: fix use-after-free in ext4_ext_shift_extents | * c9d133100b usb: cdnsp: fix issue with ZLP - added TD_SIZE = 1 | * c2ad434cd4 usb: cdnsp: Fix issue with Clear Feature Halt Endpoint | * 1d91c64887 usb: dwc3: exynos: Fix remove() function | * 0a216625c3 KVM: arm64: pkvm: Fixup boot mode to reflect that the kernel resumes from EL1 | * f0044a4a31 mmc: sdhci-brcmstb: Fix SDHCI_RESET_ALL for CQHCI | * 8e6940979b mmc: sdhci-brcmstb: Enable Clock Gating to save power | * 24b46bfa96 mmc: sdhci-brcmstb: Re-organize flags | * 227543ccac nios2: add FORCE for vmlinuz.gz | * 6a4ea16a67 init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash | * c4a9046c27 lib/vdso: use "grep -E" instead of "egrep" | * 5fefdceafb s390/crashdump: fix TOD programmable field size | * 592b6fd74a net: thunderx: Fix the ACPI memory leak | * 697eb30a35 octeontx2-af: Fix reference count issue in rvu_sdp_init() | * 6ba1687ea1 octeontx2-pf: Add check for devm_kcalloc | * 26c31e7c73 net: enetc: preserve TX ring priority across reconfiguration | * 0e16bbf616 net: enetc: cache accesses to &priv->si->hw | * 68de40f66a net: enetc: manage ENETC_F_QBV in priv->active_offloads only when enabled | * 5c0858e142 nfc: st-nci: fix incorrect sizing calculations in EVT_TRANSACTION | * e09243fb16 nfc: st-nci: fix memory leaks in EVT_TRANSACTION | * dca20b7a19 nfc: st-nci: fix incorrect validating logic in EVT_TRANSACTION | * 67d638f8ef s390/dasd: fix no record found for raw_track_access | * 88277853cf arcnet: fix potential memory leak in com20020_probe() | * 1d44ec8507 ipv4: Fix error return code in fib_table_insert() | * 918e83c6bf dccp/tcp: Reset saddr on failure after inet6?_hash_connect(). | * 8ce9b1c97f fs: do not update freeing inode i_io_list | * 8db9e60cdf netfilter: flowtable_offload: add missing locking | * c1da3bfca1 netfilter: ipset: restore allowing 64 clashing elements in hash:net,iface | * 606091b2f6 dma-buf: fix racing conflict of dma_heap_add() | * 8af9450bef bnx2x: fix pci device refcount leak in bnx2x_vf_is_pcie_pending() | * 251bcf6cfb regulator: twl6030: re-add TWL6032_SUBCLASS | * 6258a8f913 NFC: nci: fix memory leak in nci_rx_data_packet() | * ffe6021154 net: sched: allow act_ct to be built without NF_NAT | * a05c0f9511 net: sparx5: fix error handling in sparx5_port_open() | * 182ef20f0f sfc: fix potential memleak in __ef100_hard_start_xmit() | * 2da022fac9 net: wwan: iosm: use ACPI_FREE() but not kfree() in ipc_pcie_read_bios_cfg() | * a48b345b87 xfrm: Fix ignored return value in xfrm6_init() | * 19989e1635 xfrm: Fix oops in __xfrm_state_delete() | * 46d450067f tipc: check skb_linearize() return value in tipc_disc_rcv() | * 33fb115a76 tipc: add an extra conn_get in tipc_conn_alloc | * 4ae907c45f tipc: set con sock in tipc_conn_alloc | * ef866d9ea9 net/mlx5: Fix handling of entry refcount when command is not issued to FW | * 3101318939 net/mlx5: Fix FW tracer timestamp calculation | * 1eaabb5bbb net/mlx5: Do not query pci info while pci disabled | * 8180099b2a netfilter: ipset: regression in ip_set_hash_ip.c | * 448b627370 Drivers: hv: vmbus: fix possible memory leak in vmbus_device_register() | * 082c31cb99 Drivers: hv: vmbus: fix double free in the error path of vmbus_add_channel_work() | * 7fdd9daa5b macsec: Fix invalid error code set | * e8fb93a079 nfp: add port from netdev validation for EEPROM access | * e44e424ed9 nfp: fill splittable of devlink_port_attrs correctly | * 527046c138 net: pch_gbe: fix pci device refcount leak while module exiting | * f77c84dd5b octeontx2-af: debugsfs: fix pci device refcount leak | * cd581ffd8d net/qla3xxx: fix potential memleak in ql3xxx_send() | * a8976074e2 net: mvpp2: fix possible invalid pointer dereference | * 3a4cc56cd1 net/mlx4: Check retval of mlx4_bitmap_init | * c368220e17 net: ethernet: mtk_eth_soc: fix error handling in mtk_open() | * d9729437b2 ARM: dts: imx6q-prti6q: Fix ref/tcxo-clock-frequency properties | * 1c0b6a97c4 ARM: mxs: fix memory leak in mxs_machine_init() | * ecff08f3c4 iavf: Fix race condition between iavf_shutdown and iavf_remove | * 31147d4e90 iavf: Do not restart Tx queues after reset task failure | * 232942b26c iavf: Fix a crash during reset task | * 0600615d01 netfilter: nf_tables: do not set up extensions for end interval | * 60387731e6 netfilter: conntrack: Fix data-races around ct mark | * ee3ccd1abb 9p/fd: fix issue of list_del corruption in p9_fd_cancel() | * 131c2eeabc net: pch_gbe: fix potential memleak in pch_gbe_tx_queue() | * f58df483ff nfc/nci: fix race with opening and closing | * da22d7410a net: dsa: sja1105: disallow C45 transactions on the BASE-TX MDIO bus | * 38fe0988bd rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975] | * d92151b465 rxrpc: Use refcount_t rather than atomic_t | * 3c33e41fa5 rxrpc: Allow list of in-use local UDP endpoints to be viewed in /proc | * 46cefa2689 net: liquidio: simplify if expression | * 95500ee0b3 selftests: mptcp: fix mibit vs mbit mix up | * f8c4da198e selftests: mptcp: more stable simult_flows tests | * 1c0efab08c ARM: dts: at91: sam9g20ek: enable udc vbus gpio pinctrl | * ade662f3f2 tee: optee: fix possible memory leak in optee_register_device() | * d1dd119134 bus: sunxi-rsb: Support atomic transfers | * b1ed61e706 bus: sunxi-rsb: Remove the shutdown callback | * 61a41d1abc regulator: core: fix UAF in destroy_regulator() | * a85c0db3f5 spi: dw-dma: decrease reference count in dw_spi_dma_init_mfld() | * d9f9b3255b regulator: core: fix kobject release warning and memory leak in regulator_register() | * bd419c7c68 ASoC: max98373: Add checks for devm_kcalloc | * f9bc4a18e7 scsi: storvsc: Fix handling of srb_status and capacity change events | * c2153fe2d0 x86/hyperv: Restore VP assist page after cpu offlining/onlining | * b2ddd76237 ASoC: soc-pcm: Don't zero TDM masks in __soc_pcm_open() | * dd62cb7e6f ASoC: sgtl5000: Reset the CHIP_CLK_CTRL reg on remove | * d80ffd4823 ASoC: hdac_hda: fix hda pcm buffer overflow issue | * 10bee7eb2a ARM: dts: am335x-pcm-953: Define fixed regulators in root node | * 8fe533c0f9 af_key: Fix send_acquire race with pfkey_register | * 0c69a4658e xfrm: replay: Fix ESN wrap around for GSO | * ecc6ce4fdf xfrm: fix "disable_policy" on ipv4 early demux | * 5a792c1d4d MIPS: pic32: treat port as signed integer | * 144452b421 RISC-V: vdso: Do not add missing symbols to version section in linker script | * 799970b8cc ALSA: usb-audio: add quirk to fix Hamedal C20 disconnect issue | * 38b09dc14f Revert "drm/amdgpu: Revert "drm/amdgpu: getting fan speed pwm for vega10 properly"" | * 44d50fccf8 nvmet: fix memory leak in nvmet_subsys_attr_model_store_locked | * 5adc12d9e2 arm64/syscall: Include asm/ptrace.h in syscall_wrapper header. | * 1340f02773 block, bfq: fix null pointer dereference in bfq_bio_bfqg() | * 86d4dca4a6 drm: panel-orientation-quirks: Add quirk for Acer Switch V 10 (SW5-017) | * b90e6234f5 scsi: scsi_debug: Make the READ CAPACITY response compliant with ZBC | * cdbba6a4de scsi: ibmvfc: Avoid path failures during live migration | * 6e8124a151 platform/x86/intel/hid: Add some ACPI device IDs | * 32735e24f4 platform/x86/intel/pmt: Sapphire Rapids PMT errata fix | * 83a6823016 platform/x86: touchscreen_dmi: Add info for the RCA Cambio W101 v2 2-in-1 | * f707986a14 platform/x86: ideapad-laptop: Disable touchpad_switch | * 5e38740ae5 Revert "net: macsec: report real_dev features when HW offloading is enabled" | * 26b72202ee selftests/bpf: Add verifier test for release_reference() | * 8395e3f98c spi: stm32: fix stm32_spi_prepare_mbr() that halves spi clk for every run | * d04722f280 wifi: ath11k: Fix QCN9074 firmware boot on x86 | * 9cc96a20a9 wifi: mac80211: Fix ack frame idr leak when mesh has no route | * 86f90014e7 wifi: airo: do not assign -1 to unsigned char | * f5558fbda0 audit: fix undefined behavior in bit shift for AUDIT_BIT | * af5de982ff riscv: dts: sifive unleashed: Add PWM controlled LEDs | * ee34a19dbe wifi: mac80211_hwsim: fix debugfs attribute ps with rc table support | * 3513785dc1 wifi: mac80211: fix memory free error when registering wiphy fail | * 855485d31e ceph: fix NULL pointer dereference for req->r_session | * 729c9ad294 ceph: Use kcalloc for allocating multiple elements | * d276fb4a7e binder: validate alloc->mm in ->mmap() handler | * 5277e3d633 x86/sgx: Add overflow check in sgx_validate_offset_length() | * b5a838ba47 x86/sgx: Create utility to validate user provided offset and length | * 2f6e2de3a5 ceph: avoid putting the realm twice when decoding snaps fails | * 8bef55d793 ceph: do not update snapshot context when there is no new snapshot | * cdee3136c9 iio: pressure: ms5611: fixed value compensation bug | * 5d6696e79d iio: ms5611: Simplify IO callback parameters | * f0ee88e83c nvme-pci: add NVME_QUIRK_BOGUS_NID for Netac NV7000 | * a61716cd24 nvme-pci: disable write zeroes on various Kingston SSD | * 19b60f3363 nvme-pci: disable namespace identifiers for the MAXIO MAP1001 | * d537e19306 nvme-pci: add NVME_QUIRK_BOGUS_NID for Micron Nitro | * af03ce894c nvme: add a bogus subsystem NQN quirk for Micron MTFDKBA2T0TFH | * c6803faa6a drm/display: Don't assume dual mode adaptors support i2c sub-addressing | * d2284fe43c ata: libata-core: do not issue non-internal commands once EH is pending | * e09583e83e ata: libata-scsi: simplify __ata_scsi_queuecmd() | * a9059e338f cifs: Fix connections leak when tlink setup failed | * 81d583baa5 cifs: support nested dfs links over reconnect | * dbc0ea91be cifs: split out dfs code from cifs_reconnect() | * b3ce844d23 cifs: introduce new helper for cifs_reconnect() | * 2ea600b598 sctp: clear out_curr if all frag chunks of current msg are pruned | * 1f9f346fbb sctp: remove the unnecessary sinfo_stream check in sctp_prsctp_prune_unsent | * e8915faa9f tty: serial: fsl_lpuart: don't break the on-going transfer when global reset | * bd19013935 serial: fsl_lpuart: Fill in rs485_supported | * 87c81c19cd serial: Add rs485_supported to uart_port | * c08f4ea79f ASoC: fsl_asrc fsl_esai fsl_sai: allow CONFIG_PM=N | * d1e4288d2a ASoC: fsl_sai: use local device pointer * | e66b45d527 Merge branch 'android13-5.15' into android13-5.15-lts * | 72d681a01d Revert "net: use struct_group to copy ip/ipv6 header addresses" * | c46ed1b2d7 Merge 5.15.80 into android13-5.15-lts |\| | * 71e496bd33 Linux 5.15.80 | * b63ddb3ba6 ntfs: check overflow when iterating ATTR_RECORDs | * ab6a1bb17e ntfs: fix out-of-bounds read in ntfs_attr_find() | * 5330c423b8 ntfs: fix use-after-free in ntfs_attr_find() | * 43bbadb7e4 net/9p: use a dedicated spinlock for trans_fd | * 9357fca9da mm: fs: initialize fsdata passed to write_begin/write_end interface | * b334ab4c33 wifi: wext: use flex array destination for memcpy() | * 0e07032b4b 9p/trans_fd: always use O_NONBLOCK read/write | * 7c7b7476b5 gfs2: Switch from strlcpy to strscpy | * 28275a7c84 gfs2: Check sb_bsize_shift after reading superblock | * a4f1a01b2e 9p: trans_fd/p9_conn_cancel: drop client lock earlier | * f7b0e95071 kcm: close race conditions on sk_receive_queue | * 27d706b0d3 kcm: avoid potential race in kcm_tx_work | * b49026d9c8 tcp: cdg: allow tcp_cdg_release() to be called multiple times | * e41cbf98df macvlan: enforce a consistent minimal mtu | * d5f7f6e63f Input: i8042 - fix leaking of platform device on module removal | * c49cc2c059 kprobes: Skip clearing aggrprobe's post_handler in kprobe-on-ftrace case | * 71beab7119 scsi: scsi_debug: Fix possible UAF in sdebug_add_host_helper() | * a636772988 scsi: target: tcm_loop: Fix possible name leak in tcm_loop_setup_hba_bus() | * cb7893c85e net: use struct_group to copy ip/ipv6 header addresses | * 9b8c0c88f4 tracing: Fix warning on variable 'struct trace_array' | * 73cf0ff9a3 ring-buffer: Include dropped pages in counting dirty patches | * 35c60b4e8c perf: Improve missing SIGTRAP checking | * 2ac6276864 serial: 8250_lpss: Use 16B DMA burst with Elkhart Lake | * b1a27b2aad nvme: ensure subsystem reset is single threaded | * bccece3c33 nvme: restrict management ioctls to admin | * 8cddb0d96b perf/x86/intel/pt: Fix sampling using single range output | * 8e2f33c598 misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() | * 9a72a46cb0 docs: update mediator contact information in CoC doc | * a99a547658 mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put() | * 4a1b6f7839 mmc: sdhci-pci-o2micro: fix card detect fail issue caused by CD# debounce timeout | * fd285d4215 mmc: core: properly select voltage range without power cycle | * 8a9bae5f1b firmware: coreboot: Register bus in module init | * 052d0e79ef iommu/vt-d: Set SRE bit only when hardware has SRS cap | * c31a792a82 iommu/vt-d: Preset Access bit for IOVA in FL non-leaf paging entries | * 11edbdee43 scsi: zfcp: Fix double free of FSF request when qdio send fails | * fdf87b5b30 net: phy: marvell: add sleep time after enabling the loopback bit | * 9648d760ed maccess: Fix writing offset in case of fault in strncpy_from_kernel_nofault() | * fdd57c20d4 Input: iforce - invert valid length check when fetching device IDs | * 0cafb719be serial: 8250_lpss: Configure DMA also w/o DMA filter | * 59f6596697 serial: 8250: Flush DMA Rx on RLSI | * 118b52c2ae serial: 8250: Fall back to non-DMA Rx if IIR_RDI occurs | * 6ffce7a92e dm ioctl: fix misbehavior if list_versions races with module loading | * 2b104973f7 iio: pressure: ms5611: changed hardcoded SPI speed to value limited | * 1678d4abb2 iio: adc: mp2629: fix potential array out of bound access | * bd22c232ea iio: adc: mp2629: fix wrong comparison of channel | * 656f670613 iio: trigger: sysfs: fix possible memory leak in iio_sysfs_trig_init() | * 1bf8c0aff8 iio: adc: at91_adc: fix possible memory leak in at91_adc_allocate_trigger() | * afc0aea702 usb: typec: mux: Enter safe mode only when pins need to be reconfigured | * 8236628a54 usb: cdns3: host: fix endless superspeed hub port reset | * ead83b0db8 usb: chipidea: fix deadlock in ci_otg_del_timer | * cc9e6d8c55 usb: add NO_LPM quirk for Realforce 87U Keyboard | * 70eca1d261 USB: serial: option: add Fibocom FM160 0x0111 composition | * 1b6a54885c USB: serial: option: add u-blox LARA-L6 modem | * b0467d0059 USB: serial: option: add u-blox LARA-R6 00B modem | * 95688a8a57 USB: serial: option: remove old LARA-R6 PID | * 53dee78ea3 USB: serial: option: add Sierra Wireless EM9191 | * e7764e88e6 USB: bcma: Make GPIO explicitly optional | * a190a83db2 speakup: fix a segfault caused by switching consoles | * b3c6edbee4 slimbus: stream: correct presence rate frequencies | * 6b35ac8315 slimbus: qcom-ngd: Fix build error when CONFIG_SLIM_QCOM_NGD_CTRL=y && CONFIG_QCOM_RPROC_COMMON=m | * 0f847462fe Revert "usb: dwc3: disable USB core PHY management" | * 23ad214a86 ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book Pro 360 | * a36b505749 ALSA: hda/realtek: fix speakers for Samsung Galaxy Book Pro | * 02b94885b2 ALSA: usb-audio: Drop snd_BUG_ON() from snd_usbmidi_output_open() | * 7176d6f3ad drm/amd/display: Add HUBP surface flip interrupt handler | * e57daa7503 tracing: kprobe: Fix potential null-ptr-deref on trace_array in kprobe_event_gen_test_exit() | * 3a41c0f2a5 tracing: kprobe: Fix potential null-ptr-deref on trace_event_file in kprobe_event_gen_test_exit() | * 7291dec4f2 tracing: Fix race where eprobes can be called before the event | * 6517b97134 tracing: Fix wild-memory-access in register_synth_event() | * 07ba4f0603 tracing: Fix memory leak in test_gen_synth_cmd() and test_empty_synth_event() | * 8b318f3032 tracing/ring-buffer: Have polling block on watermark | * 2c21ee020c tracing: Fix memory leak in tracing_read_pipe() | * 00f74b1a98 ring_buffer: Do not deactivate non-existant pages | * 1bea037a1a ftrace: Fix null pointer dereference in ftrace_add_mod() | * fadfcf39fb ftrace: Optimize the allocation for mcount entries | * 5c5f264289 ftrace: Fix the possible incorrect kernel message | * 2ab2494162 cifs: add check for returning value of SMB2_set_info_init | * 5783abda58 net: thunderbolt: Fix error handling in tbnet_init() | * 80e590aeb1 net: microchip: sparx5: Fix potential null-ptr-deref in sparx_stats_init() and sparx5_start() | * 4a55aec142 cifs: Fix wrong return value checking when GETFLAGS | * c8baf1fc24 net/x25: Fix skb leak in x25_lapb_receive_frame() | * af4b57fa6b net: ag71xx: call phylink_disconnect_phy if ag71xx_hw_enable() fail in ag71xx_open() | * 61404a182e cifs: add check for returning value of SMB2_close_init | * d3233f4bf3 platform/surface: aggregator: Do not check for repeated unsequenced packets | * 6969171403 platform/x86/intel: pmc: Don't unconditionally attach Intel PMC when virtualized | * 7d93417d59 drbd: use after free in drbd_create_device() | * fc16a2c81a bridge: switchdev: Fix memory leaks when changing VLAN protocol | * 3d90a668c4 net: hns3: fix setting incorrect phy link ksettings for firmware in resetting process | * 3f7b2ef8fe net: ena: Fix error handling in ena_init() | * 2540eea1bd net: ionic: Fix error handling in ionic_init_module() | * c08c13cb13 xen/pcpu: fix possible memory leak in register_pcpu() | * 97009f07f2 net: dsa: make dsa_master_ioctl() see through port_hwtstamp_get() shims | * 88da008e5e net: mhi: Fix memory leak in mhi_net_dellink() | * 8f839715d0 bnxt_en: Remove debugfs when pci_register_driver failed | * b88713d92b net: caif: fix double disconnect client in chnl_net_open() | * 6d24034160 net: macvlan: Use built-in RCU list checking | * 596230471d mISDN: fix misuse of put_device() in mISDN_register_device() | * 07a6a8cf17 net: liquidio: release resources when liquidio driver open failed | * 19feb6cf41 soc: imx8m: Enable OCOTP clock before reading the register | * 8c54d706d8 net: stmmac: ensure tx function is not running in stmmac_xdp_release() | * 6219f46c2b net: hinic: Fix error handling in hinic_module_init() | * 7a05e39296 mISDN: fix possible memory leak in mISDN_dsp_element_register() | * 0ee6455c9c net: bgmac: Drop free_netdev() from bgmac_enet_remove() | * 7ff4fa179e bpf: Initialize same number of free nodes for each pcpu_freelist | * 12f178cf05 MIPS: Loongson64: Add WARN_ON on kexec related kmalloc failed | * a4d6e024be MIPS: fix duplicate definitions for exported symbols | * 44142b652a nfp: change eeprom length to max length enumerators | * f23058dc23 ata: libata-transport: fix error handling in ata_tdev_add() | * 67b2193146 ata: libata-transport: fix error handling in ata_tlink_add() | * e7bb1b7a7b ata: libata-transport: fix error handling in ata_tport_add() | * 377ff82c33 ata: libata-transport: fix double ata_host_put() in ata_tport_add() | * 494df0b0ef arm64: dts: imx8mn: Fix NAND controller size-cells | * 7178d568f7 arm64: dts: imx8mm: Fix NAND controller size-cells | * 8ccf18c82a ARM: dts: imx7: Fix NAND controller size-cells | * e884a6c2d4 drm: Fix potential null-ptr-deref in drm_vblank_destroy_worker() | * 07e56de876 drm/drv: Fix potential memory leak in drm_dev_init() | * 45c300613b drm/panel: simple: set bpc field for logic technologies displays | * 779f3f9e0c drm/vc4: kms: Fix IS_ERR() vs NULL check for vc4_kms | * 97e5b508e9 pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map | * 9a77b8557f parport_pc: Avoid FIFO port location truncation | * 5d03c2911c siox: fix possible memory leak in siox_device_add() | * 530e987a02 arm64: Fix bit-shifting UB in the MIDR_CPU_MODEL() macro | * d494449782 bpf: Fix memory leaks in __check_func_call | * 25521fd2e2 block: sed-opal: kmalloc the cmd/resp buffers | * 2f21d653c6 scsi: scsi_transport_sas: Fix error handling in sas_phy_add() | * 7cd28bc410 pinctrl: rockchip: list all pins in a possible mux route for PX30 | * ab79b8dbe2 ASoC: soc-utils: Remove __exit for snd_soc_util_exit() | * eaa8edd865 bpf, test_run: Fix alignment problem in bpf_prog_test_run_skb() | * 33cabe04d2 tty: n_gsm: fix sleep-in-atomic-context bug in gsm_control_send | * ae22294e21 serial: imx: Add missing .thaw_noirq hook | * 26db1cd519 serial: 8250: omap: Flush PM QOS work on remove | * e0db709a58 serial: 8250: omap: Fix unpaired pm_runtime_put_sync() in omap8250_remove() | * 83b6d4d6da serial: 8250_omap: remove wait loop from Errata i202 workaround | * 76db05ab70 serial: 8250: omap: Fix missing PM runtime calls for omap8250_set_mctrl() | * 2aee616a6b ARM: at91: pm: avoid soft resetting AC DLL | * 188546c780 ASoC: tas2764: Fix set_tdm_slot in case of single slot | * 5782896daf ASoC: tas2770: Fix set_tdm_slot in case of single slot | * 34eee4189b ASoC: core: Fix use-after-free in snd_soc_exit() | * aa6f8aecbb ARM: dts: at91: sama7g5: fix signal name of pin PB2 | * 487fff700f spi: stm32: Print summary 'callbacks suppressed' message | * 2cec2f65c1 arm64: dts: qcom: sm8350-hdk: Specify which LDO modes are allowed | * 44dbe66bb3 arm64: dts: qcom: sm8250-xperia-edo: Specify which LDO modes are allowed | * 8b2eae7def arm64: dts: qcom: sm8150-xperia-kumano: Specify which LDO modes are allowed | * c8e76eeea7 arm64: dts: qcom: sa8155p-adp: Specify which LDO modes are allowed | * 30571f28bb hugetlbfs: don't delete error page from pagecache | * 14ddbb83c3 KVM: x86/pmu: Do not speculatively query Intel GP PMCs that don't exist yet | * a9b964ed7c spi: intel: Use correct mask for flash and protected regions | * f4eb68642e mtd: spi-nor: intel-spi: Disable write protection only if asked | * 156d0c823c ASoC: codecs: jz4725b: Fix spelling mistake "Sourc" -> "Source", "Routee" -> "Route" | * 5907ff9f2c x86/cpu: Add several Intel server CPU model numbers | * 41e37d04e3 Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm | * b02a025dd1 btrfs: remove pointless and double ulist frees in error paths of qgroup tests | * 1c366c206f drm/imx: imx-tve: Fix return type of imx_tve_connector_mode_valid | * 1c8ded1b38 i2c: i801: add lis3lv02d's I2C address for Vostro 5568 | * b432581f19 i2c: tegra: Allocate DMA memory for DMA engine | * 7b0ae4c7b9 firmware: arm_scmi: Cleanup the core driver removal callback | * 1a8a2fef27 ACPI: x86: Add another system to quirk list for forcing StorageD3Enable | * 8a03a4a5cf NFSv4: Retry LOCK on OLD_STATEID during delegation return | * 49ca2227c4 btrfs: raid56: properly handle the error when unable to find the missing stripe | * 0f7bd3a2df RDMA/efa: Add EFA 0xefa2 PCI ID | * a42d4363e7 ACPI: scan: Add LATT2021 to acpi_ignore_dep_ids[] | * 004decd41b drm/amd/display: Remove wrong pipe control lock | * 7779efbb99 ASoC: rt1308-sdw: add the default value of some registers | * ef1e4ed858 selftests/intel_pstate: fix build for ARCH=x86_64 | * dfd3cc1ef3 selftests/futex: fix build for clang | * 648467236c ASoC: Intel: sof_sdw: add quirk variant for LAPBC710 NUC15 | * 64ee750c29 ASoC: codecs: jz4725b: fix capture selector naming | * 150b74cd06 ASoC: codecs: jz4725b: use right control for Capture Volume | * 5352d8b315 ASoC: codecs: jz4725b: fix reported volume for Master ctl | * 85134577a7 ASoC: codecs: jz4725b: add missed Line In power control bit | * 5e61dffb16 spi: intel: Fix the offset to get the 64K erase opcode | * c697cb2e66 ASoC: wm8962: Add an event handler for TEMP_HP and TEMP_SPK | * 569085124d ASoC: rt1019: Fix the TDM settings | * 4160a515c7 ASoC: mt6660: Keep the pm_runtime enables before component stuff in mt6660_i2c_probe | * 2963ec4535 ASoC: wm8997: Revert "ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe" | * 30a2f9479c ASoC: wm5110: Revert "ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe" | * 3bf6da38a2 ASoC: wm5102: Revert "ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe" | * 94fa250ea5 mm: shmem: don't truncate page if memory failure happens | * 003fa19591 mm: hwpoison: handle non-anonymous THP correctly | * a62b1bc603 mm: hwpoison: refactor refcount check handling * | 49ca4a5978 Revert "bpf, sockmap: Fix sk->sk_forward_alloc warn_on in sk_stream_kill_queues" * | 6fa2a43acd Revert "ALSA: usb-audio: Yet more regression for for the delayed card registration" * | ac2a7a141f Merge 5.15.79 into android13-5.15-lts |/ * 3df0eeae4d Linux 5.15.79 * 599b24eedf x86/cpu: Restore AMD's DE_CFG MSR after resume * 9132fa043f net: tun: call napi_schedule_prep() to ensure we own a napi * 1dea25e25a drm/amdkfd: Migrate in CPU page fault use current mm * a1c303fbd4 marvell: octeontx2: build error: unknown type name 'u64' * d948b22834 dmaengine: at_hdmac: Check return code of dma_async_device_register * c556ecf32a dmaengine: at_hdmac: Fix impossible condition * 8a941ff34e dmaengine: at_hdmac: Don't allow CPU to reorder channel enable * 53831f7a13 dmaengine: at_hdmac: Fix completion of unissued descriptor in case of errors * 14f5462e4a dmaengine: at_hdmac: Fix descriptor handling when issuing it to hardware * 5482403228 dmaengine: at_hdmac: Fix concurrency over the active list * 82ca19414f dmaengine: at_hdmac: Free the memset buf without holding the chan lock * 8fd36e069d dmaengine: at_hdmac: Fix concurrency over descriptor * 1ee012d452 dmaengine: at_hdmac: Fix concurrency problems by removing atc_complete_all() * 90c1b07406 dmaengine: at_hdmac: Protect atchan->status with the channel lock * b5ee1fe06a dmaengine: at_hdmac: Do not call the complete callback on device_terminate_all * 9bbf5df0fc dmaengine: at_hdmac: Fix premature completion of desc in issue_pending * f7d1aaa903 dmaengine: at_hdmac: Start transfer for cyclic channels in issue_pending * e9777b4efc dmaengine: at_hdmac: Don't start transactions at tx_submit level * 4e28674a0e dmaengine: at_hdmac: Fix at_lli struct definition * 49eba53137 cert host tools: Stop complaining about deprecated OpenSSL functions * 69e86c6268 can: j1939: j1939_send_one(): fix missing CAN header initialization * 81fc8f90b8 mm/shmem: use page_mapping() to detect page cache for uffd continue * e91451af11 mm/memremap.c: map FS_DAX device memory as decrypted * 48998c1773 mm/damon/dbgfs: check if rm_contexts input is for a real context * c736ed8541 udf: Fix a slab-out-of-bounds write bug in udf_find_entry() * 2e87eddf57 mms: sdhci-esdhc-imx: Fix SDHCI_RESET_ALL for CQHCI * 91c38504e5 btrfs: zoned: initialize device's zone info for seeding * 432c30ba3f btrfs: selftests: fix wrong error check in btrfs_free_dummy_root() * c9fe4719c6 btrfs: fix match incorrectly in dev_args_match_device * f96fd36936 wifi: ath11k: avoid deadlock during regulatory update in ath11k_regd_update() * 8e2b576caf platform/x86: hp_wmi: Fix rfkill causing soft blocked wifi * cb3ab0e1e0 drm/amdgpu: disable BACO on special BEIGE_GOBY card * dc066a7850 drm/i915/dmabuf: fix sg_table handling in map_dma_buf * afbd118838 nilfs2: fix use-after-free bug of ns_writer on remount * abc082aac0 nilfs2: fix deadlock in nilfs_count_free_blocks() * 589da22881 ata: libata-scsi: fix SYNCHRONIZE CACHE (16) command failure * 51ae4579a5 vmlinux.lds.h: Fix placement of '.data..decrypted' section * 1f8e08ab32 ALSA: usb-audio: Add DSD support for Accuphase DAC-60 * c2451f62b2 ALSA: usb-audio: Add quirk entry for M-Audio Micro * 031d1480a0 ALSA: usb-audio: Yet more regression for for the delayed card registration * 574f51e4aa ALSA: hda/realtek: Add Positivo C6300 model quirk * 7140d7aaf9 ALSA: hda: fix potential memleak in 'add_widget_node' * f6d7a487aa ALSA: hda/ca0132: add quirk for EVGA Z390 DARK * 1ccd55b390 ALSA: hda/hdmi - enable runtime pm for more AMD display audio * 29100c6742 mmc: sdhci-esdhc-imx: use the correct host caps for MMC_CAP_8_BIT_DATA * 3dce99e2eb mmc: sdhci-tegra: Fix SDHCI_RESET_ALL for CQHCI * 9d6bd33e6a mmc: sdhci_am654: Fix SDHCI_RESET_ALL for CQHCI * ad01f16ca9 mmc: sdhci-of-arasan: Fix SDHCI_RESET_ALL for CQHCI * 1aa78c1d01 mmc: cqhci: Provide helper for resetting both SDHCI and CQHCI * c198524a99 MIPS: jump_label: Fix compat branch range check * 9713ceffa4 arm64: efi: Fix handling of misaligned runtime regions and drop warning * 518e49f059 riscv: fix reserved memory setup * d07c3d7491 riscv: vdso: fix build with llvm * cc36c7fa5d riscv: process: fix kernel info leakage * a8d67367ab net: macvlan: fix memory leaks of macvlan_common_newlink * 7b194dd32b ethernet: tundra: free irq when alloc ring failed in tsi108_open() * 7de10342fe net: mv643xx_eth: disable napi when init rxq or txq failed in mv643xx_eth_open() * 88e1dd2d92 ethernet: s2io: disable napi when start nic failed in s2io_card_up() * 3652f1f8d3 net: atlantic: macsec: clear encryption keys from the stack * fca3b0a1fd net: phy: mscc: macsec: clear encryption keys when freeing a flow * 60a0af8813 stmmac: dwmac-loongson: fix missing of_node_put() while module exiting * ee4a9bd2c7 stmmac: dwmac-loongson: fix missing pci_disable_device() in loongson_dwmac_probe() * 4a8770eebc stmmac: dwmac-loongson: fix missing pci_disable_msi() while module exiting * 83196d8dc5 cxgb4vf: shut down the adapter when t4vf_update_port_info() failed in cxgb4vf_open() * 49d8a6e24a mctp: Fix an error handling path in mctp_init() * 29961d2332 stmmac: intel: Update PCH PTP clock rate from 200MHz to 204.8MHz * 8604bebc5c stmmac: intel: Enable 2.5Gbps for Intel AlderLake-S * 7dec6dae2b net: cxgb3_main: disable napi when bind qsets failed in cxgb_up() * 960f9d30de net: cpsw: disable napi in cpsw_ndo_open() * 1360778fdb net/mlx5e: E-Switch, Fix comparing termination table instance * f13e9ebd29 net/mlx5: Allow async trigger completion execution on single CPU systems * 48b73b46a5 net/mlx5: Bridge, verify LAG state when adding bond to bridge * 13b1ea861e net: wwan: iosm: fix memory leak in ipc_pcie_read_bios_cfg * 7e4dcacb4d net: nixge: disable napi when enable interrupts failed in nixge_open() * 409731df63 net: marvell: prestera: fix memory leak in prestera_rxtx_switch_init() * 77ff31cba9 netfilter: Cleanup nft_net->module_list from nf_tables_exit_net() * e62cb1c093 netfilter: nfnetlink: fix potential dead lock in nfnetlink_rcv_msg() * 0bd20318da perf tools: Add the include/perf/ directory to .gitignore * a733671e38 perf stat: Fix printing os->prefix in CSV metrics output * c36e9e2c4a drivers: net: xgene: disable napi when register irq failed in xgene_enet_open() * 4689bd3a1b net: lapbether: fix issue of invalid opcode in lapbeth_open() * 1dd27541aa dmaengine: ti: k3-udma-glue: fix memory leak when register device fail * 992e966caf dmaengine: mv_xor_v2: Fix a resource leak in mv_xor_v2_remove() * 9766af75ba dmaengine: pxa_dma: use platform_get_irq_optional * 301caa0609 tipc: fix the msg->req tlv len check in tipc_nl_compat_name_table_dump_header * 6a264203db net: broadcom: Fix BCMGENET Kconfig * e7871b9a21 net: stmmac: dwmac-meson8b: fix meson8b_devm_clk_prepare_enable() * 261178a1c2 can: af_can: fix NULL pointer dereference in can_rx_register() * 2acb2779b1 ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network * 13ecaa6832 tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent * bc79cb9fb0 drm/vc4: Fix missing platform_unregister_drivers() call in vc4_drm_register() * 2845bc9070 net: wwan: mhi: fix memory leak in mhi_mbim_dellink * 2ce2348c28 net: wwan: iosm: fix memory leak in ipc_wwan_dellink * 7b6bc50f65 hamradio: fix issue of dev reference count leakage in bpq_device_event() * f59adebb8c net: lapbether: fix issue of dev reference count leakage in lapbeth_device_event() * 119407dc32 KVM: s390: pv: don't allow userspace to set the clock under PV * 500bcd3a99 phy: ralink: mt7621-pci: add sentinel to quirks table * 151dc8087b capabilities: fix undefined behavior in bit shift for CAP_TO_MASK * 435c7ddfd5 net: fman: Unregister ethernet device on removal * 3a504d6d96 bnxt_en: fix potentially incorrect return value for ndo_rx_flow_steer * ac257c43fa bnxt_en: Fix possible crash in bnxt_hwrm_set_coal() * d7569302a7 net: tun: Fix memory leaks of napi_get_frags * 430d1f4964 octeontx2-pf: NIX TX overwrites SQ_CTX_HW_S[SQ_INT] * ec0db81883 octeontx2-pf: Use hardware register for CQE count * b89a0d8859 macsec: clear encryption keys from the stack after setting up offload * eeba7f07a0 macsec: fix detection of RXSCs when toggling offloading * 3070a880eb macsec: fix secy->n_rx_sc accounting * e957555a36 macsec: delete new rxsc when offload fails * ad25a115f5 net: gso: fix panic on frag_list with mixed head alloc types * 466ce46f25 bpf: Fix wrong reg type conversion in release_reference() * 35d8130f2a bpf: Add helper macro bpf_for_each_reg_in_vstate * 61274498fb bpf, sock_map: Move cancel_work_sync() out of sock lock * 32b5dd03be bpf: Fix sockmap calling sleepable function in teardown path * e991558189 bpf, sockmap: Fix sk->sk_forward_alloc warn_on in sk_stream_kill_queues * 5ad95d7134 HID: hyperv: fix possible memory leak in mousevsc_probe() * 6dcdd1b68b bpftool: Fix NULL pointer dereference when pin {PROG, MAP, LINK} without FILE * 2fc902245c wifi: mac80211: Set TWT Information Frame Disabled bit as 1 * 95adbd2ac8 bpf, sockmap: Fix the sk->sk_forward_alloc warning of sk_stream_kill_queues * 06615967d4 bpf, verifier: Fix memory leak in array reallocation for stack state * 4335a82c4f soundwire: qcom: check for outanding writes before doing a read * ae4dad2e53 soundwire: qcom: reinit broadcast completion * 38c9fa2cc6 wifi: cfg80211: fix memory leak in query_regdb_file() * 2c6ba0a787 wifi: cfg80211: silence a sparse RCU warning * 921738c280 phy: stm32: fix an error code in probe * fa722006f7 hwspinlock: qcom: correct MMIO max register for newer SoCs * 3c1bb6187e drm/amdkfd: Fix NULL pointer dereference in svm_migrate_to_ram() * b1f8522771 drm/amdkfd: handle CPU fault on COW mapping * 36770c045a drm/amdkfd: avoid recursive lock in migrations back to RAM * 93a5de7e88 fuse: fix readdir cache race * 1920cf9454 thunderbolt: Add DP OUT resource when DP tunnel is discovered * 47dbf24969 thunderbolt: Tear down existing tunnels when resuming from hibernate And update the .xml file with the new symbol that we are tracking and the abi preservation fix: 1 function symbol(s) added 'void __dev_kfree_skb_irq(struct sk_buff *, enum skb_free_reason)' type 'struct sdhci_host' changed member 'union { struct { u8 reinit_uhs; u8 reserve01; u8 drv_type; u16 reserve02; u32 reserve03; }; struct { u64 android_kabi_reserved1; }; union { }; }' was added member 'u64 android_kabi_reserved1' was removed Change-Id: If4a059230a137dee54298fff61ec87306bf96b0f Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-03-24 08:44:06 +00:00
Aran Dalton	a6c4727f6a	UPSTREAM: loop: Fix use-after-free issues ... do_req_filebacked() calls blk_mq_complete_request() synchronously or asynchronously when using asynchronous I/O unless memory allocation fails. Hence, modify loop_handle_cmd() such that it does not dereference 'cmd' nor 'rq' after do_req_filebacked() finished unless we are sure that the request has not yet been completed. This patch fixes the following kernel crash: Unable to handle kernel NULL pointer dereference at virtual address 0000000000000054 Call trace: css_put.42938+0x1c/0x1ac loop_process_work+0xc8c/0xfd4 loop_rootcg_workfn+0x24/0x34 process_one_work+0x244/0x558 worker_thread+0x400/0x8fc kthread+0x16c/0x1e0 ret_from_fork+0x10/0x20 Cc: Christoph Hellwig <hch@lst.de> Cc: Ming Lei <ming.lei@redhat.com> Cc: Jan Kara <jack@suse.cz> Cc: Johannes Weiner <hannes@cmpxchg.org> Cc: Dan Schatzberg <schatzberg.dan@gmail.com> Fixes: c74d40e8b5 ("loop: charge i/o to mem and blk cg") Fixes: bc07c10a36 ("block: loop: support DIO & AIO") Signed-off-by: Bart Van Assche <bvanassche@acm.org> Reviewed-by: Ming Lei <ming.lei@redhat.com> Link: https://lore.kernel.org/r/20230314182155.80625-1-bvanassche@acm.org Signed-off-by: Jens Axboe <axboe@kernel.dk> Bug: 274539241 (cherry picked from commit 9b0cb770f5d7b1ff40bea7ca385438ee94570eec) Signed-off-by: liuyu <liuyu@allwinnertech.com> Signed-off-by: Aran Dalton <arda@allwinnertech.com> Change-Id: I33b1e1fdc722a6fa87bc830531f3cf565fc83248	2023-03-21 17:19:14 +00:00
Greg Kroah-Hartman	de550d72f1	Merge 5.15.89 into android13-5.15-lts ... Changes in 5.15.89 netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits ALSA: control-led: use strscpy in set_led_id() ALSA: hda/realtek - Turn on power early ALSA: hda/realtek: Enable mute/micmute LEDs on HP Spectre x360 13-aw0xxx KVM: arm64: Fix S1PTW handling on RO memslots KVM: arm64: nvhe: Fix build with profile optimization selftests: kvm: Fix a compile error in selftests/kvm/rseq_test.c efi: tpm: Avoid READ_ONCE() for accessing the event log docs: Fix the docs build with Sphinx 6.0 net: stmmac: add aux timestamps fifo clearance wait perf auxtrace: Fix address filter duplicate symbol selection s390/kexec: fix ipl report address for kdump ASoC: qcom: lpass-cpu: Fix fallback SD line index handling s390/cpum_sf: add READ_ONCE() semantics to compare and swap loops s390/percpu: add READ_ONCE() to arch_this_cpu_to_op_simple() drm/virtio: Fix GEM handle creation UAF drm/i915/gt: Reset twice net/mlx5e: Set action fwd flag when parsing tc action goto cifs: Fix uninitialized memory read for smb311 posix symlink create platform/x86: dell-privacy: Only register SW_CAMERA_LENS_COVER if present platform/surface: aggregator: Ignore command messages not intended for us platform/x86: dell-privacy: Fix SW_CAMERA_LENS_COVER reporting dt-bindings: msm: dsi-controller-main: Fix operating-points-v2 constraint drm/msm/adreno: Make adreno quirks not overwrite each other dt-bindings: msm: dsi-controller-main: Fix power-domain constraint dt-bindings: msm: dsi-controller-main: Fix description of core clock dt-bindings: msm: dsi-phy-28nm: Add missing qcom, dsi-phy-regulator-ldo-mode platform/x86: ideapad-laptop: Add Legion 5 15ARH05 DMI id to set_fn_lock_led_list[] drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer dt-bindings: msm/dsi: Don't require vdds-supply on 10nm PHY dt-bindings: msm/dsi: Don't require vcca-supply on 14nm PHY platform/x86: sony-laptop: Don't turn off 0x153 keyboard backlight during probe ixgbe: fix pci device refcount leak ipv6: raw: Deduct extension header length in rawv6_push_pending_frames bus: mhi: host: Fix race between channel preparation and M0 event usb: ulpi: defer ulpi_register on ulpi_read_id timeout iommu/iova: Fix alloc iova overflows issue iommu/mediatek-v1: Fix an error handling path in mtk_iommu_v1_probe() sched/core: Fix use-after-free bug in dup_user_cpus_ptr() netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function. powerpc/imc-pmu: Fix use of mutex in IRQs disabled section x86/boot: Avoid using Intel mnemonics in AT&T syntax asm EDAC/device: Fix period calculation in edac_device_reset_delay_period() x86/resctrl: Fix task CLOSID/RMID update race regulator: da9211: Use irq handler when ready scsi: mpi3mr: Refer CONFIG_SCSI_MPI3MR in Makefile scsi: ufs: Stop using the clock scaling lock in the error handler scsi: ufs: core: WLUN suspend SSU/enter hibern8 fail recovery ASoC: wm8904: fix wrong outputs volume after power reactivation ALSA: usb-audio: Make sure to stop endpoints before closing EPs ALSA: usb-audio: Relax hw constraints for implicit fb sync tipc: fix unexpected link reset due to discovery messages octeontx2-af: Fix LMAC config in cgx_lmac_rx_tx_enable hvc/xen: lock console list traversal nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame() af_unix: selftest: Fix the size of the parameter to connect() tools/nolibc: x86: Remove `r8`, `r9` and `r10` from the clobber list tools/nolibc: x86-64: Use `mov $60,%eax` instead of `mov $60,%rax` tools/nolibc: use pselect6 on RISCV tools/nolibc/std: move the standard type definitions to std.h tools/nolibc/types: split syscall-specific definitions into their own files tools/nolibc/arch: split arch-specific code into individual files tools/nolibc/arch: mark the _start symbol as weak tools/nolibc: Remove .global _start from the entry point code tools/nolibc: restore mips branch ordering in the _start block tools/nolibc: fix the O_* fcntl/open macro definitions for riscv net/sched: act_mpls: Fix warning during failed attribute validation net/mlx5: Fix ptp max frequency adjustment range net/mlx5e: Don't support encap rules with gbp option perf build: Properly guard libbpf includes igc: Fix PPS delta between two synchronized end-points platform/surface: aggregator: Add missing call to ssam_request_sync_free() mm: Always release pages to the buddy allocator in memblock_free_late(). Documentation: KVM: add API issues section KVM: x86: Do not return host topology information from KVM_GET_SUPPORTED_CPUID io_uring: lock overflowing for IOPOLL arm64: atomics: format whitespace consistently arm64: atomics: remove LL/SC trampolines arm64: cmpxchg_double*: hazard against entire exchange variable efi: fix NULL-deref in init error path scsi: mpt3sas: Remove scsi_dma_map() error messages io_uring/io-wq: free worker if task_work creation is canceled io_uring/io-wq: only free worker if it was allocated for creation block: handle bio_split_to_limits() NULL return Revert "usb: ulpi: defer ulpi_register on ulpi_read_id timeout" pinctrl: amd: Add dynamic debugging for active GPIOs Linux 5.15.89 Change-Id: Idc8ec1dab91a73d4ea8e55ae241506c2638ef7af Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-01-31 14:44:09 +00:00
Greg Kroah-Hartman	20ec745823	Merge 5.15.86 into android13-5.15-lts ... Changes in 5.15.86 drm/amd/display: Manually adjust strobe for DCN303 usb: musb: remove extra check in musb_gadget_vbus_draw arm64: dts: qcom: ipq6018-cp01-c1: use BLSPI1 pins arm64: dts: qcom: sm8250-sony-xperia-edo: fix touchscreen bias-disable arm64: dts: qcom: msm8996: Add MSM8996 Pro support arm64: dts: qcom: msm8996: fix supported-hw in cpufreq OPP tables arm64: dts: qcom: msm8996: fix GPU OPP table ARM: dts: qcom: apq8064: fix coresight compatible arm64: dts: qcom: sdm630: fix UART1 pin bias arm64: dts: qcom: sdm845-cheza: fix AP suspend pin bias arm64: dts: qcom: msm8916: Drop MSS fallback compatible objtool, kcsan: Add volatile read/write instrumentation to whitelist ARM: dts: stm32: Drop stm32mp15xc.dtsi from Avenger96 ARM: dts: stm32: Fix AV96 WLAN regulator gpio property drivers: soc: ti: knav_qmss_queue: Mark knav_acc_firmwares as static arm64: dts: qcom: pm660: Use unique ADC5_VCOIN address in node name arm64: dts: qcom: sm8250: correct LPASS pin pull down soc: qcom: llcc: make irq truly optional arm64: dts: qcom: Correct QMP PHY child node name arm64: dts: qcom: sm8150: fix UFS PHY registers arm64: dts: qcom: sm8250: fix UFS PHY registers arm64: dts: qcom: sm8350: fix UFS PHY registers arm64: dts: qcom: sm8250: drop bogus DP PHY clock soc: qcom: apr: make code more reuseable soc: qcom: apr: Add check for idr_alloc and of_property_read_string_index arm64: dts: qcom: sm6125: fix SDHCI CQE reg names arm: dts: spear600: Fix clcd interrupt soc: ti: knav_qmss_queue: Use pm_runtime_resume_and_get instead of pm_runtime_get_sync soc: ti: knav_qmss_queue: Fix PM disable depth imbalance in knav_queue_probe soc: ti: smartreflex: Fix PM disable depth imbalance in omap_sr_probe arm64: Treat ESR_ELx as a 64-bit register arm64: mm: kfence: only handle translation faults perf: arm_dsu: Fix hotplug callback leak in dsu_pmu_init() perf/arm_dmc620: Fix hotplug callback leak in dmc620_pmu_init() perf/smmuv3: Fix hotplug callback leak in arm_smmu_pmu_init() arm64: dts: ti: k3-am65-main: Drop dma-coherent in crypto node arm64: dts: ti: k3-j721e-main: Drop dma-coherent in crypto node ARM: dts: nuvoton: Remove bogus unit addresses from fixed-partition nodes arm64: dts: mt6779: Fix devicetree build warnings arm64: dts: mt2712e: Fix unit_address_vs_reg warning for oscillators arm64: dts: mt2712e: Fix unit address for pinctrl node arm64: dts: mt2712-evb: Fix vproc fixed regulators unit names arm64: dts: mt2712-evb: Fix usb vbus regulators unit names arm64: dts: mediatek: pumpkin-common: Fix devicetree warnings arm64: dts: mediatek: mt6797: Fix 26M oscillator unit name ARM: dts: dove: Fix assigned-addresses for every PCIe Root Port ARM: dts: armada-370: Fix assigned-addresses for every PCIe Root Port ARM: dts: armada-xp: Fix assigned-addresses for every PCIe Root Port ARM: dts: armada-375: Fix assigned-addresses for every PCIe Root Port ARM: dts: armada-38x: Fix assigned-addresses for every PCIe Root Port ARM: dts: armada-39x: Fix assigned-addresses for every PCIe Root Port ARM: dts: turris-omnia: Add ethernet aliases ARM: dts: turris-omnia: Add switch port 6 node arm64: dts: armada-3720-turris-mox: Add missing interrupt for RTC seccomp: Move copy_seccomp() to no failure path. pstore/ram: Fix error return code in ramoops_probe() ARM: mmp: fix timer_read delay pstore: Avoid kcore oops by vmap()ing with VM_IOREMAP tpm/tpm_ftpm_tee: Fix error handling in ftpm_mod_init() tpm/tpm_crb: Fix error message in __crb_relinquish_locality() ovl: store lower path in ovl_inode ovl: use ovl_copy_{real,upper}attr() wrappers ovl: remove privs in ovl_copyfile() ovl: remove privs in ovl_fallocate() sched/fair: Cleanup task_util and capacity type sched/uclamp: Fix relationship between uclamp and migration margin sched/uclamp: Make task_fits_capacity() use util_fits_cpu() sched/uclamp: Make select_idle_capacity() use util_fits_cpu() sched/fair: Removed useless update of p->recent_used_cpu sched/core: Introduce sched_asym_cpucap_active() sched/uclamp: Make asym_fits_capacity() use util_fits_cpu() cpuidle: dt: Return the correct numbers of parsed idle states alpha: fix TIF_NOTIFY_SIGNAL handling alpha: fix syscall entry in !AUDUT_SYSCALL case x86/sgx: Reduce delay and interference of enclave release PM: hibernate: Fix mistake in kerneldoc comment fs: don't audit the capability check in simple_xattr_list() cpufreq: qcom-hw: Fix memory leak in qcom_cpufreq_hw_read_lut() selftests/ftrace: event_triggers: wait longer for test_event_enable perf: Fix possible memleak in pmu_dev_alloc() lib/debugobjects: fix stat count and optimize debug_objects_mem_init platform/x86: huawei-wmi: fix return value calculation timerqueue: Use rb_entry_safe() in timerqueue_getnext() proc: fixup uptime selftest lib/fonts: fix undefined behavior in bit shift for get_default_font ocfs2: fix memory leak in ocfs2_stack_glue_init() MIPS: vpe-mt: fix possible memory leak while module exiting MIPS: vpe-cmp: fix possible memory leak while module exiting selftests/efivarfs: Add checking of the test return value PNP: fix name memory leak in pnp_alloc_dev() perf/x86/intel/uncore: Fix reference count leak in sad_cfg_iio_topology() perf/x86/intel/uncore: Fix reference count leak in hswep_has_limit_sbox() perf/x86/intel/uncore: Fix reference count leak in snr_uncore_mmio_map() perf/x86/intel/uncore: Fix reference count leak in __uncore_imc_init_box() platform/chrome: cros_usbpd_notify: Fix error handling in cros_usbpd_notify_init() thermal: core: fix some possible name leaks in error paths irqchip: gic-pm: Use pm_runtime_resume_and_get() in gic_probe() irqchip/wpcm450: Fix memory leak in wpcm450_aic_of_init() EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() SUNRPC: Return true/false (not 1/0) from bool functions NFSD: Finish converting the NFSv2 GETACL result encoder nfsd: don't call nfsd_file_put from client states seqfile display genirq/irqdesc: Don't try to remove non-existing sysfs files cpufreq: amd_freq_sensitivity: Add missing pci_dev_put() libfs: add DEFINE_SIMPLE_ATTRIBUTE_SIGNED for signed value lib/notifier-error-inject: fix error when writing -errno to debugfs file debugfs: fix error when writing negative value to atomic_t debugfs file rapidio: fix possible name leaks when rio_add_device() fails rapidio: rio: fix possible name leak in rio_register_mport() clocksource/drivers/sh_cmt: Access registers according to spec mips: ralink: mt7621: define MT7621_SYSC_BASE with __iomem mips: ralink: mt7621: soc queries and tests as functions mips: ralink: mt7621: do not use kzalloc too early futex: Move to kernel/futex/ futex: Resend potentially swallowed owner death notification cpu/hotplug: Make target_store() a nop when target == state cpu/hotplug: Do not bail-out in DYING/STARTING sections clocksource/drivers/timer-ti-dm: Fix missing clk_disable_unprepare in dmtimer_systimer_init_clock() ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage() uprobes/x86: Allow to probe a NOP instruction with 0x66 prefix x86/xen: Fix memory leak in xen_smp_intr_init{_pv}() x86/xen: Fix memory leak in xen_init_lock_cpu() xen/privcmd: Fix a possible warning in privcmd_ioctl_mmap_resource() PM: runtime: Do not call __rpm_callback() from rpm_idle() platform/chrome: cros_ec_typec: Cleanup switch handle return paths platform/chrome: cros_ec_typec: zero out stale pointers platform/x86: mxm-wmi: fix memleak in mxm_wmi_call_mx[ds|mx]() platform/x86: intel_scu_ipc: fix possible name leak in __intel_scu_ipc_register() MIPS: BCM63xx: Add check for NULL for clk in clk_enable MIPS: OCTEON: warn only once if deprecated link status is being used lockd: set other missing fields when unlocking files fs: sysv: Fix sysv_nblocks() returns wrong value rapidio: fix possible UAF when kfifo_alloc() fails eventfd: change int to __u64 in eventfd_signal() ifndef CONFIG_EVENTFD relay: fix type mismatch when allocating memory in relay_create_buf() hfs: Fix OOB Write in hfs_asc2mac rapidio: devices: fix missing put_device in mport_cdev_open platform/mellanox: mlxbf-pmc: Fix event typo wifi: ath9k: hif_usb: fix memory leak of urbs in ath9k_hif_usb_dealloc_tx_urbs() wifi: ath9k: hif_usb: Fix use-after-free in ath9k_hif_usb_reg_in_cb() wifi: rtl8xxxu: Fix reading the vendor of combo chips drm/bridge: adv7533: remove dynamic lane switching from adv7533 bridge libbpf: Fix use-after-free in btf_dump_name_dups libbpf: Fix null-pointer dereference in find_prog_by_sec_insn() ata: libata: move ata_{port,link,dev}_dbg to standard pr_XXX() macros ata: add/use ata_taskfile::{error|status} fields ata: libata: fix NCQ autosense logic ipmi: kcs: Poll OBF briefly to reduce OBE latency drm/amdgpu/powerplay/psm: Fix memory leak in power state init media: v4l2-ctrls: Fix off-by-one error in integer menu control check media: coda: jpeg: Add check for kmalloc media: adv748x: afe: Select input port when initializing AFE media: i2c: ad5820: Fix error path venus: pm_helpers: Fix error check in vcodec_domains_get() soreuseport: Fix socket selection for SO_INCOMING_CPU. media: exynos4-is: don't rely on the v4l2_async_subdev internals libbpf: Btf dedup identical struct test needs check for nested structs/arrays can: kvaser_usb: do not increase tx statistics when sending error message frames can: kvaser_usb: kvaser_usb_leaf: Get capabilities from device can: kvaser_usb: kvaser_usb_leaf: Rename {leaf,usbcan}_cmd_error_event to {leaf,usbcan}_cmd_can_error_event can: kvaser_usb: kvaser_usb_leaf: Handle CMD_ERROR_EVENT can: kvaser_usb_leaf: Set Warning state even without bus errors can: kvaser_usb: make use of units.h in assignment of frequency can: kvaser_usb_leaf: Fix improved state not being reported can: kvaser_usb_leaf: Fix wrong CAN state after stopping can: kvaser_usb_leaf: Fix bogus restart events can: kvaser_usb: Add struct kvaser_usb_busparams can: kvaser_usb: Compare requested bittiming parameters with actual parameters in do_set_{,data}_bittiming drm/rockchip: lvds: fix PM usage counter unbalance in poweron clk: renesas: r9a06g032: Repair grave increment error spi: Update reference to struct spi_controller drm/panel/panel-sitronix-st7701: Remove panel on DSI attach failure ima: Handle -ESTALE returned by ima_filter_rule_match() drm/msm/hdmi: drop unused GPIO support drm/msm/hdmi: use devres helper for runtime PM management bpf: Fix slot type check in check_stack_write_var_off media: vivid: fix compose size exceed boundary media: platform: exynos4-is: fix return value check in fimc_md_probe() bpf: propagate precision in ALU/ALU64 operations bpf: Check the other end of slot_type for STACK_SPILL bpf: propagate precision across all frames, not just the last one clk: qcom: gcc-sm8250: Use retention mode for USB GDSCs mtd: Fix device name leak when register device failed in add_mtd_device() Input: joystick - fix Kconfig warning for JOYSTICK_ADC wifi: rsi: Fix handling of 802.3 EAPOL frames sent via control port media: camss: Clean up received buffers on failed start of streaming net, proc: Provide PROC_FS=n fallback for proc_create_net_single_write() rxrpc: Fix ack.bufferSize to be 0 when generating an ack bfq: fix waker_bfqq inconsistency crash drm/radeon: Add the missed acpi_put_table() to fix memory leak drm/mediatek: Modify dpi power on/off sequence. ASoC: pxa: fix null-pointer dereference in filter() libbpf: Fix uninitialized warning in btf_dump_dump_type_data nvmet: only allocate a single slab for bvecs regulator: core: fix unbalanced of node refcount in regulator_dev_lookup() amdgpu/pm: prevent array underflow in vega20_odn_edit_dpm_table() nvme: return err on nvme_init_non_mdts_limits fail regulator: qcom-rpmh: Fix PMR735a S3 regulator spec drm/fourcc: Add packed 10bit YUV 4:2:0 format drm/fourcc: Fix vsub/hsub for Q410 and Q401 integrity: Fix memory leakage in keyring allocation error path ima: Fix misuse of dereference of pointer in template_desc_init_fields() block: clear ->slave_dir when dropping the main slave_dir reference wifi: ath10k: Fix return value in ath10k_pci_init() drm/msm/a6xx: Fix speed-bin detection vs probe-defer mtd: lpddr2_nvm: Fix possible null-ptr-deref Input: elants_i2c - properly handle the reset GPIO when power is off media: vidtv: Fix use-after-free in vidtv_bridge_dvb_init() media: solo6x10: fix possible memory leak in solo_sysfs_init() media: platform: exynos4-is: Fix error handling in fimc_md_init() media: videobuf-dma-contig: use dma_mmap_coherent inet: add READ_ONCE(sk->sk_bound_dev_if) in inet_csk_bind_conflict() mtd: spi-nor: hide jedec_id sysfs attribute if not present mtd: spi-nor: Fix the number of bytes for the dummy cycles bpf: Move skb->len == 0 checks into __bpf_redirect HID: hid-sensor-custom: set fixed size for custom attributes pinctrl: k210: call of_node_put() ALSA: pcm: fix undefined behavior in bit shift for SNDRV_PCM_RATE_KNOT ALSA: seq: fix undefined behavior in bit shift for SNDRV_SEQ_FILTER_USE_EVENT regulator: core: use kfree_const() to free space conditionally clk: rockchip: Fix memory leak in rockchip_clk_register_pll() drm/amdgpu: fix pci device refcount leak bonding: fix link recovery in mode 2 when updelay is nonzero mtd: maps: pxa2xx-flash: fix memory leak in probe drbd: remove call to memset before free device/resource/connection drbd: destroy workqueue when drbd device was freed ASoC: qcom: Add checks for devm_kcalloc media: vimc: Fix wrong function called when vimc_init() fails media: imon: fix a race condition in send_packet() clk: imx8mn: rename vpu_pll to m7_alt_pll clk: imx: replace osc_hdmi with dummy clk: imx8mn: fix imx8mn_sai2_sels clocks list clk: imx8mn: fix imx8mn_enet_phy_sels clocks list pinctrl: pinconf-generic: add missing of_node_put() media: dvb-core: Fix ignored return value in dvb_register_frontend() media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() media: s5p-mfc: Add variant data for MFC v7 hardware for Exynos 3250 SoC drm/tegra: Add missing clk_disable_unprepare() in tegra_dc_probe() ASoC: dt-bindings: wcd9335: fix reset line polarity in example ASoC: mediatek: mtk-btcvsd: Add checks for write and read of mtk_btcvsd_snd NFSv4.2: Clear FATTR4_WORD2_SECURITY_LABEL when done decoding NFSv4.2: Fix a memory stomp in decode_attr_security_label NFSv4.2: Fix initialisation of struct nfs4_label NFSv4: Fix a credential leak in _nfs4_discover_trunking() NFSv4: Fix a deadlock between nfs4_open_recover_helper() and delegreturn NFS: Fix an Oops in nfs_d_automount() ALSA: asihpi: fix missing pci_disable_device() wifi: iwlwifi: mvm: fix double free on tx path. ASoC: mediatek: mt8173: Fix debugfs registration for components ASoC: mediatek: mt8173: Enable IRQ when pdata is ready drm/amd/pm/smu11: BACO is supported when it's in BACO state drm/radeon: Fix PCI device refcount leak in radeon_atrm_get_bios() drm/amdgpu: Fix PCI device refcount leak in amdgpu_atrm_get_bios() drm/amdkfd: Fix memory leakage ASoC: pcm512x: Fix PM disable depth imbalance in pcm512x_probe netfilter: conntrack: set icmpv6 redirects as RELATED Input: wistron_btns - disable on UML bpf, sockmap: Fix repeated calls to sock_put() when msg has more_data bpf, sockmap: Fix missing BPF_F_INGRESS flag when using apply_bytes bpf, sockmap: Fix data loss caused by using apply_bytes on ingress redirect bonding: uninitialized variable in bond_miimon_inspect() spi: spidev: mask SPI_CS_HIGH in SPI_IOC_RD_MODE wifi: mac80211: fix memory leak in ieee80211_if_add() wifi: cfg80211: Fix not unregister reg_pdev when load_builtin_regdb_keys() fails mt76: stop the radar detector after leaving dfs channel wifi: mt76: mt7921: fix reporting of TX AGGR histogram wifi: mt76: fix coverity overrun-call in mt76_get_txpower() regulator: core: fix module refcount leak in set_supply() clk: qcom: lpass-sc7180: Fix pm_runtime usage clk: qcom: clk-krait: fix wrong div2 functions hsr: Add a rcu-read lock to hsr_forward_skb(). hsr: Avoid double remove of a node. hsr: Disable netpoll. hsr: Synchronize sending frames to have always incremented outgoing seq nr. hsr: Synchronize sequence number updates. configfs: fix possible memory leak in configfs_create_dir() regulator: core: fix resource leak in regulator_register() hwmon: (jc42) Convert register access and caching to regmap/regcache hwmon: (jc42) Restore the min/max/critical temperatures on resume bpf, sockmap: fix race in sock_map_free() ALSA: pcm: Set missing stop_operating flag at undoing trigger start media: saa7164: fix missing pci_disable_device() ALSA: mts64: fix possible null-ptr-defer in snd_mts64_interrupt xprtrdma: Fix regbuf data not freed in rpcrdma_req_create() SUNRPC: Fix missing release socket in rpc_sockname() NFSv4.x: Fail client initialisation if state manager thread can't run riscv, bpf: Emit fixed-length instructions for BPF_PSEUDO_FUNC mmc: alcor: fix return value check of mmc_add_host() mmc: moxart: fix return value check of mmc_add_host() mmc: mxcmmc: fix return value check of mmc_add_host() mmc: pxamci: fix return value check of mmc_add_host() mmc: rtsx_pci: fix return value check of mmc_add_host() mmc: rtsx_usb_sdmmc: fix return value check of mmc_add_host() mmc: toshsd: fix return value check of mmc_add_host() mmc: vub300: fix return value check of mmc_add_host() mmc: wmt-sdmmc: fix return value check of mmc_add_host() mmc: atmel-mci: fix return value check of mmc_add_host() mmc: omap_hsmmc: fix return value check of mmc_add_host() mmc: meson-gx: fix return value check of mmc_add_host() mmc: via-sdmmc: fix return value check of mmc_add_host() mmc: wbsd: fix return value check of mmc_add_host() mmc: mmci: fix return value check of mmc_add_host() mmc: renesas_sdhi: alway populate SCC pointer memstick: ms_block: Add error handling support for add_disk() memstick/ms_block: Add check for alloc_ordered_workqueue mmc: core: Normalize the error handling branch in sd_read_ext_regs() regulator: qcom-labibb: Fix missing of_node_put() in qcom_labibb_regulator_probe() media: c8sectpfe: Add of_node_put() when breaking out of loop media: coda: Add check for dcoda_iram_alloc media: coda: Add check for kmalloc clk: samsung: Fix memory leak in _samsung_clk_register_pll() spi: spi-gpio: Don't set MOSI as an input if not 3WIRE mode wifi: rtl8xxxu: Add __packed to struct rtl8723bu_c2h wifi: rtl8xxxu: Fix the channel width reporting wifi: brcmfmac: Fix error return code in brcmf_sdio_download_firmware() blktrace: Fix output non-blktrace event when blk_classic option enabled bpf: Do not zero-extend kfunc return values clk: socfpga: Fix memory leak in socfpga_gate_init() net: vmw_vsock: vmci: Check memcpy_from_msg() net: defxx: Fix missing err handling in dfx_init() net: stmmac: selftests: fix potential memleak in stmmac_test_arpoffload() net: stmmac: fix possible memory leak in stmmac_dvr_probe() drivers: net: qlcnic: Fix potential memory leak in qlcnic_sriov_init() of: overlay: fix null pointer dereferencing in find_dup_cset_node_entry() and find_dup_cset_prop() ethernet: s2io: don't call dev_kfree_skb() under spin_lock_irqsave() net: farsync: Fix kmemleak when rmmods farsync net/tunnel: wait until all sk_user_data reader finish before releasing the sock net: apple: mace: don't call dev_kfree_skb() under spin_lock_irqsave() net: apple: bmac: don't call dev_kfree_skb() under spin_lock_irqsave() net: emaclite: don't call dev_kfree_skb() under spin_lock_irqsave() net: ethernet: dnet: don't call dev_kfree_skb() under spin_lock_irqsave() hamradio: don't call dev_kfree_skb() under spin_lock_irqsave() net: amd: lance: don't call dev_kfree_skb() under spin_lock_irqsave() af_unix: call proto_unregister() in the error path in af_unix_init() net: amd-xgbe: Fix logic around active and passive cables net: amd-xgbe: Check only the minimum speed for active/passive cables can: tcan4x5x: Remove invalid write in clear_interrupts can: m_can: Call the RAM init directly from m_can_chip_config can: tcan4x5x: Fix use of register error status mask net: lan9303: Fix read error execution path ntb_netdev: Use dev_kfree_skb_any() in interrupt context sctp: sysctl: make extra pointers netns aware Bluetooth: MGMT: Fix error report for ADD_EXT_ADV_PARAMS Bluetooth: btintel: Fix missing free skb in btintel_setup_combined() Bluetooth: btusb: don't call kfree_skb() under spin_lock_irqsave() Bluetooth: hci_qca: don't call kfree_skb() under spin_lock_irqsave() Bluetooth: hci_ll: don't call kfree_skb() under spin_lock_irqsave() Bluetooth: hci_h5: don't call kfree_skb() under spin_lock_irqsave() Bluetooth: hci_bcsp: don't call kfree_skb() under spin_lock_irqsave() Bluetooth: hci_core: don't call kfree_skb() under spin_lock_irqsave() Bluetooth: RFCOMM: don't call kfree_skb() under spin_lock_irqsave() stmmac: fix potential division by 0 i40e: Fix the inability to attach XDP program on downed interface net: dsa: tag_8021q: avoid leaking ctx on dsa_tag_8021q_register() error path apparmor: fix a memleak in multi_transaction_new() apparmor: fix lockdep warning when removing a namespace apparmor: Fix abi check to include v8 abi crypto: hisilicon/qm - fix missing destroy qp_idr crypto: sun8i-ss - use dma_addr instead u32 crypto: nitrox - avoid double free on error path in nitrox_sriov_init() scsi: core: Fix a race between scsi_done() and scsi_timeout() apparmor: Use pointer to struct aa_label for lbs_cred PCI: dwc: Fix n_fts[] array overrun RDMA/core: Fix order of nldev_exit call PCI: pci-epf-test: Register notifier if only core_init_notifier is enabled f2fs: Fix the race condition of resize flag between resizefs crypto: rockchip - do not do custom power management crypto: rockchip - do not store mode globally crypto: rockchip - add fallback for cipher crypto: rockchip - add fallback for ahash crypto: rockchip - better handle cipher key crypto: rockchip - remove non-aligned handling crypto: rockchip - rework by using crypto_engine apparmor: Fix memleak in alloc_ns() f2fs: fix to invalidate dcc->f2fs_issue_discard in error path f2fs: fix normal discard process f2fs: fix to destroy sbi->post_read_wq in error path of f2fs_fill_super() RDMA/irdma: Report the correct link speed scsi: qla2xxx: Fix set-but-not-used variable warnings RDMA/siw: Fix immediate work request flush to completion queue IB/mad: Don't call to function that might sleep while in atomic context PCI: vmd: Disable MSI remapping after suspend RDMA/restrack: Release MR restrack when delete RDMA/core: Make sure "ib_port" is valid when access sysfs node RDMA/nldev: Return "-EAGAIN" if the cm_id isn't from expected port RDMA/siw: Set defined status for work completion with undefined status scsi: scsi_debug: Fix a warning in resp_write_scat() crypto: ccree - Remove debugfs when platform_driver_register failed crypto: cryptd - Use request context instead of stack for sub-request crypto: hisilicon/qm - add missing pci_dev_put() in q_num_set() RDMA/hns: Repacing 'dseg_len' by macros in fill_ext_sge_inl_data() RDMA/hns: Fix ext_sge num error when post send PCI: Check for alloc failure in pci_request_irq() RDMA/hfi: Decrease PCI device reference count in error path crypto: ccree - Make cc_debugfs_global_fini() available for module init function RDMA/hns: fix memory leak in hns_roce_alloc_mr() RDMA/rxe: Fix NULL-ptr-deref in rxe_qp_do_cleanup() when socket create failed dt-bindings: imx6q-pcie: Fix clock names for imx6sx and imx8mq dt-bindings: visconti-pcie: Fix interrupts array max constraints scsi: hpsa: Fix possible memory leak in hpsa_init_one() crypto: tcrypt - Fix multibuffer skcipher speed test mem leak padata: Always leave BHs disabled when running ->parallel() padata: Fix list iterator in padata_do_serial() scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add() scsi: hpsa: Fix error handling in hpsa_add_sas_host() scsi: hpsa: Fix possible memory leak in hpsa_add_sas_device() scsi: efct: Fix possible memleak in efct_device_init() scsi: scsi_debug: Fix a warning in resp_verify() scsi: scsi_debug: Fix a warning in resp_report_zones() scsi: fcoe: Fix possible name leak when device_register() fails scsi: scsi_debug: Fix possible name leak in sdebug_add_host_helper() scsi: ipr: Fix WARNING in ipr_init() scsi: fcoe: Fix transport not deattached when fcoe_if_init() fails scsi: snic: Fix possible UAF in snic_tgt_create() RDMA/nldev: Add checks for nla_nest_start() in fill_stat_counter_qps() f2fs: avoid victim selection from previous victim section RDMA/nldev: Fix failure to send large messages crypto: amlogic - Remove kcalloc without check crypto: omap-sham - Use pm_runtime_resume_and_get() in omap_sham_probe() riscv/mm: add arch hook arch_clear_hugepage_flags RDMA/hfi1: Fix error return code in parse_platform_config() RDMA/srp: Fix error return code in srp_parse_options() PCI: mt7621: Rename mt7621_pci_ to mt7621_pcie_ PCI: mt7621: Add sentinel to quirks table orangefs: Fix sysfs not cleanup when dev init failed RDMA/hns: Fix AH attr queried by query_qp RDMA/hns: Fix PBL page MTR find RDMA/hns: Fix page size cap from firmware RDMA/hns: Fix error code of CMD crypto: img-hash - Fix variable dereferenced before check 'hdev->req' hwrng: amd - Fix PCI device refcount leak hwrng: geode - Fix PCI device refcount leak IB/IPoIB: Fix queue count inconsistency for PKEY child interfaces RISC-V: Align the shadow stack drivers: dio: fix possible memory leak in dio_init() serial: tegra: Read DMA status before terminating serial: 8250_bcm7271: Fix error handling in brcmuart_init() class: fix possible memory leak in __class_register() vfio: platform: Do not pass return buffer to ACPI _RST method uio: uio_dmem_genirq: Fix missing unlock in irq configuration uio: uio_dmem_genirq: Fix deadlock between irq config and handling usb: fotg210-udc: Fix ages old endianness issues staging: vme_user: Fix possible UAF in tsi148_dma_list_add usb: typec: Check for ops->exit instead of ops->enter in altmode_exit usb: typec: tcpci: fix of node refcount leak in tcpci_register_port() usb: typec: tipd: Cleanup resources if devm_tps6598_psy_register fails usb: typec: tipd: Fix spurious fwnode_handle_put in error path extcon: usbc-tusb320: Add support for mode setting and reset extcon: usbc-tusb320: Add support for TUSB320L usb: typec: Factor out non-PD fwnode properties extcon: usbc-tusb320: Factor out extcon into dedicated functions extcon: usbc-tusb320: Add USB TYPE-C support extcon: usbc-tusb320: Update state on probe even if no IRQ pending serial: amba-pl011: avoid SBSA UART accessing DMACR register serial: pl011: Do not clear RX FIFO & RX interrupt in unthrottle. serial: stm32: move dma_request_chan() before clk_prepare_enable() serial: pch: Fix PCI device refcount leak in pch_request_dma() tty: serial: clean up stop-tx part in altera_uart_tx_chars() tty: serial: altera_uart_{r,t}x_chars() need only uart_port serial: altera_uart: fix locking in polling mode serial: sunsab: Fix error handling in sunsab_init() test_firmware: fix memory leak in test_firmware_init() misc: ocxl: fix possible name leak in ocxl_file_register_afu() ocxl: fix pci device refcount leak when calling get_function_0() misc: tifm: fix possible memory leak in tifm_7xx1_switch_media() misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os firmware: raspberrypi: fix possible memory leak in rpi_firmware_probe() cxl: fix possible null-ptr-deref in cxl_guest_init_afu|adapter() cxl: fix possible null-ptr-deref in cxl_pci_init_afu|adapter() iio: temperature: ltc2983: make bulk write buffer DMA-safe iio: adis: handle devices that cannot unmask the drdy pin iio: adis: stylistic changes iio:imu:adis: Move exports into IIO_ADISLIB namespace iio: adis: add '__adis_enable_irq()' implementation counter: stm32-lptimer-cnt: fix the check on arr and cmp registers update coresight: trbe: remove cpuhp instance node before remove cpuhp state usb: roles: fix of node refcount leak in usb_role_switch_is_parent() usb: gadget: f_hid: fix f_hidg lifetime vs cdev usb: gadget: f_hid: fix refcount leak on error path drivers: mcb: fix resource leak in mcb_probe() mcb: mcb-parse: fix error handing in chameleon_parse_gdd() chardev: fix error handling in cdev_device_add() i2c: pxa-pci: fix missing pci_disable_device() on error in ce4100_i2c_probe staging: rtl8192u: Fix use after free in ieee80211_rx() staging: rtl8192e: Fix potential use-after-free in rtllib_rx_Monitor() vme: Fix error not catched in fake_init() gpiolib: Get rid of redundant 'else' gpiolib: cdev: fix NULL-pointer dereferences gpiolib: make struct comments into real kernel docs gpiolib: protect the GPIO device against being dropped while in use by user-space i2c: mux: reg: check return value after calling platform_get_resource() i2c: ismt: Fix an out-of-bounds bug in ismt_access() usb: storage: Add check for kcalloc tracing/hist: Fix issue of losting command info in error_log ksmbd: Fix resource leak in ksmbd_session_rpc_open() samples: vfio-mdev: Fix missing pci_disable_device() in mdpy_fb_probe() thermal/drivers/imx8mm_thermal: Validate temperature range thermal/drivers/qcom/temp-alarm: Fix inaccurate warning for gen2 thermal/drivers/qcom/lmh: Fix irq handler return value fbdev: ssd1307fb: Drop optional dependency fbdev: pm2fb: fix missing pci_disable_device() fbdev: via: Fix error in via_core_init() fbdev: vermilion: decrease reference count in error path fbdev: ep93xx-fb: Add missing clk_disable_unprepare in ep93xxfb_probe() fbdev: geode: don't build on UML fbdev: uvesafb: don't build on UML fbdev: uvesafb: Fixes an error handling path in uvesafb_probe() HSI: omap_ssi_core: fix unbalanced pm_runtime_disable() HSI: omap_ssi_core: fix possible memory leak in ssi_probe() power: supply: fix residue sysfs file in error handle route of __power_supply_register() perf trace: Return error if a system call doesn't exist perf trace: Use macro RAW_SYSCALL_ARGS_NUM to replace number perf trace: Handle failure when trace point folder is missed perf symbol: correction while adjusting symbol power: supply: z2_battery: Fix possible memleak in z2_batt_probe() HSI: omap_ssi_core: Fix error handling in ssi_init() power: supply: ab8500: Fix error handling in ab8500_charger_init() power: supply: fix null pointer dereferencing in power_supply_get_battery_info perf stat: Refactor __run_perf_stat() common code perf stat: Do not delay the workload with --delay RDMA/siw: Fix pointer cast warning fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst() overflow: Implement size_t saturating arithmetic helpers fs/ntfs3: Harden against integer overflows iommu/sun50i: Fix reset release iommu/sun50i: Consider all fault sources for reset iommu/sun50i: Fix R/W permission check iommu/sun50i: Fix flush size iommu/rockchip: fix permission bits in page table entries v2 phy: usb: s2 WoL wakeup_count not incremented for USB->Eth devices include/uapi/linux/swab: Fix potentially missing __always_inline pwm: tegra: Improve required rate calculation fs/ntfs3: Fix slab-out-of-bounds read in ntfs_trim_fs dmaengine: idxd: Fix crc_val field for completion record rtc: rtc-cmos: Do not check ACPI_FADT_LOW_POWER_S0 rtc: cmos: Fix event handler registration ordering issue rtc: cmos: Fix wake alarm breakage rtc: cmos: fix build on non-ACPI platforms rtc: cmos: Call cmos_wake_setup() from cmos_do_probe() rtc: cmos: Call rtc_wake_setup() from cmos_do_probe() rtc: cmos: Eliminate forward declarations of some functions rtc: cmos: Rename ACPI-related functions rtc: cmos: Disable ACPI RTC event on removal rtc: snvs: Allow a time difference on clock register read rtc: pcf85063: Fix reading alarm iommu/amd: Fix pci device refcount leak in ppr_notifier() iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe() macintosh: fix possible memory leak in macio_add_one_device() macintosh/macio-adb: check the return value of ioremap() powerpc/52xx: Fix a resource leak in an error handling path cxl: Fix refcount leak in cxl_calc_capp_routing powerpc/xmon: Fix -Wswitch-unreachable warning in bpt_cmds powerpc/xive: add missing iounmap() in error path in xive_spapr_populate_irq_data() powerpc/perf: callchain validate kernel stack pointer bounds powerpc/83xx/mpc832x_rdb: call platform_device_put() in error case in of_fsl_spi_probe() powerpc/hv-gpci: Fix hv_gpci event list selftests/powerpc: Fix resource leaks iommu/sun50i: Remove IOMMU_DOMAIN_IDENTITY pwm: sifive: Call pwm_sifive_update_clock() while mutex is held pwm: mtk-disp: Fix the parameters calculated by the enabled flag of disp_pwm pwm: mediatek: always use bus clock for PWM on MT7622 remoteproc: sysmon: fix memory leak in qcom_add_sysmon_subdev() remoteproc: qcom: q6v5: Fix potential null-ptr-deref in q6v5_wcss_init_mmio() remoteproc: qcom_q6v5_pas: disable wakeup on probe fail or remove remoteproc: qcom_q6v5_pas: detach power domains on remove remoteproc: qcom_q6v5_pas: Fix missing of_node_put() in adsp_alloc_memory_region() remoteproc: qcom: q6v5: Fix missing clk_disable_unprepare() in q6v5_wcss_qcs404_power_on() powerpc/eeh: Drop redundant spinlock initialization powerpc/pseries/eeh: use correct API for error log size mfd: bd957x: Fix Kconfig dependency on REGMAP_IRQ mfd: qcom_rpm: Fix an error handling path in qcom_rpm_probe() mfd: pm8008: Remove driver data structure pm8008_data mfd: pm8008: Fix return value check in pm8008_probe() netfilter: flowtable: really fix NAT IPv6 offload rtc: st-lpc: Add missing clk_disable_unprepare in st_rtc_probe() rtc: pic32: Move devm_rtc_allocate_device earlier in pic32_rtc_probe() rtc: pcf85063: fix pcf85063_clkout_control nfsd: under NFSv4.1, fix double svc_xprt_put on rpc_create failure net: macsec: fix net device access prior to holding a lock mISDN: hfcsusb: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() mISDN: hfcpci: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() mISDN: hfcmulti: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() block, bfq: fix possible uaf for 'bfqq->bic' selftests/bpf: Add test for unstable CT lookup API net: enetc: avoid buffer leaks on xdp_do_redirect() failure nfc: pn533: Clear nfc_target before being used unix: Fix race in SOCK_SEQPACKET's unix_dgram_sendmsg() r6040: Fix kmemleak in probe and remove igc: Enhance Qbv scheduling by using first flag bit igc: Use strict cycles for Qbv scheduling igc: Add checking for basetime less than zero igc: allow BaseTime 0 enrollment for Qbv igc: recalculate Qbv end_time by considering cycle time igc: Lift TAPRIO schedule restriction igc: Set Qbv start_time and end_time to end_time if not being configured in GCL rtc: mxc_v2: Add missing clk_disable_unprepare() selftests: devlink: fix the fd redirect in dummy_reporter_test openvswitch: Fix flow lookup to use unmasked key soc: mediatek: pm-domains: Fix the power glitch issue arm64: dts: mt8183: Fix Mali GPU clock skbuff: Account for tail adjustment during pull operations mailbox: mpfs: read the system controller's status mailbox: arm_mhuv2: Fix return value check in mhuv2_probe() mailbox: zynq-ipi: fix error handling while device_register() fails net_sched: reject TCF_EM_SIMPLE case for complex ematch module rxrpc: Fix missing unlock in rxrpc_do_sendmsg() myri10ge: Fix an error handling path in myri10ge_probe() net: stream: purge sk_error_queue in sk_stream_kill_queues() HID: amd_sfh: Add missing check for dma_alloc_coherent rcu: Fix __this_cpu_read() lockdep warning in rcu_force_quiescent_state() arm64: make is_ttbrX_addr() noinstr-safe video: hyperv_fb: Avoid taking busy spinlock on panic path x86/hyperv: Remove unregister syscore call from Hyper-V cleanup binfmt_misc: fix shift-out-of-bounds in check_special_flags fs: jfs: fix shift-out-of-bounds in dbAllocAG udf: Avoid double brelse() in udf_rename() jfs: Fix fortify moan in symlink fs: jfs: fix shift-out-of-bounds in dbDiscardAG ACPICA: Fix error code path in acpi_ds_call_control_method() nilfs2: fix shift-out-of-bounds/overflow in nilfs_sb2_bad_offset() nilfs2: fix shift-out-of-bounds due to too large exponent of block size acct: fix potential integer overflow in encode_comp_t() hfs: fix OOB Read in __hfs_brec_find drm/etnaviv: add missing quirks for GC300 media: imx-jpeg: Disable useless interrupt to avoid kernel panic brcmfmac: return error when getting invalid max_flowrings from dongle wifi: ath9k: verify the expected usb_endpoints are present wifi: ar5523: Fix use-after-free on ar5523_cmd() timed out ASoC: codecs: rt298: Add quirk for KBL-R RVP platform ipmi: fix memleak when unload ipmi driver drm/amd/display: prevent memory leak Revert "drm/amd/display: Limit max DSC target bpp for specific monitors" qed (gcc13): use u16 for fid to be big enough bpf: make sure skb->len != 0 when redirecting to a tunneling device net: ethernet: ti: Fix return type of netcp_ndo_start_xmit() hamradio: baycom_epp: Fix return type of baycom_send_packet() wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmf_fw_alloc_request() igb: Do not free q_vector unless new one was allocated drm/amdgpu: Fix type of second parameter in trans_msg() callback drm/amdgpu: Fix type of second parameter in odn_edit_dpm_table() callback s390/ctcm: Fix return type of ctc{mp,}m_tx() s390/netiucv: Fix return type of netiucv_tx() s390/lcs: Fix return type of lcs_start_xmit() drm/msm: Use drm_mode_copy() drm/rockchip: Use drm_mode_copy() drm/sti: Use drm_mode_copy() drm/mediatek: Fix return type of mtk_hdmi_bridge_mode_valid() drivers/md/md-bitmap: check the return value of md_bitmap_get_counter() md/raid1: stop mdx_raid1 thread when raid1 array run failed drm/amd/display: fix array index out of bound error in bios parser net: add atomic_long_t to net_device_stats fields ipv6/sit: use DEV_STATS_INC() to avoid data-races mrp: introduce active flags to prevent UAF when applicant uninit ppp: associate skb with a device at tx bpf: Prevent decl_tag from being referenced in func_proto arg ethtool: avoiding integer overflow in ethtool_phys_id() media: dvb-frontends: fix leak of memory fw media: dvbdev: adopts refcnt to avoid UAF media: dvb-usb: fix memory leak in dvb_usb_adapter_init() blk-mq: fix possible memleak when register 'hctx' failed drm/amd/display: Use the largest vready_offset in pipe group libbpf: Avoid enum forward-declarations in public API in C++ mode regulator: core: fix use_count leakage when handling boot-on wifi: mt76: do not run mt76u_status_worker if the device is not running mmc: f-sdh30: Add quirks for broken timeout clock capability mmc: renesas_sdhi: better reset from HS400 mode media: si470x: Fix use-after-free in si470x_int_in_callback() clk: st: Fix memory leak in st_of_quadfs_setup() crypto: hisilicon/hpre - fix resource leak in remove process scsi: lpfc: Fix hard lockup when reading the rx_monitor from debugfs scsi: ufs: Reduce the START STOP UNIT timeout scsi: elx: libefc: Fix second parameter type in state callbacks hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param() drm/fsl-dcu: Fix return type of fsl_dcu_drm_connector_mode_valid() drm/sti: Fix return type of sti_{dvo,hda,hdmi}_connector_mode_valid() orangefs: Fix kmemleak in orangefs_prepare_debugfs_help_string() orangefs: Fix kmemleak in orangefs_{kernel,client}_debug_init() tools/include: Add _RET_IP_ and math definitions to kernel.h KVM: selftests: Fix build regression by using accessor function hwmon: (jc42) Fix missing unlock on error in jc42_write() ALSA/ASoC: hda: move/rename snd_hdac_ext_stop_streams to hdac_stream.c ALSA: hda: add snd_hdac_stop_streams() helper ASoC: Intel: Skylake: Fix driver hang during shutdown ASoC: mediatek: mt8173-rt5650-rt5514: fix refcount leak in mt8173_rt5650_rt5514_dev_probe() ASoC: audio-graph-card: fix refcount leak of cpu_ep in __graph_for_each_link() ASoC: rockchip: pdm: Add missing clk_disable_unprepare() in rockchip_pdm_runtime_resume() ASoC: mediatek: mt8183: fix refcount leak in mt8183_mt6358_ts3a227_max98357_dev_probe() ASoC: wm8994: Fix potential deadlock ASoC: rockchip: spdif: Add missing clk_disable_unprepare() in rk_spdif_runtime_resume() ASoC: rt5670: Remove unbalanced pm_runtime_put() drm/i915/display: Don't disable DDI/Transcoder when setting phy test pattern LoadPin: Ignore the "contents" argument of the LSM hooks pstore: Switch pmsg_lock to an rt_mutex to avoid priority inversion perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() afs: Fix lost servers_outstanding count pstore: Make sure CONFIG_PSTORE_PMSG selects CONFIG_RT_MUTEXES ima: Simplify ima_lsm_copy_rule ALSA: usb-audio: add the quirk for KT0206 device ALSA: hda/realtek: Add quirk for Lenovo TianYi510Pro-14IOB ALSA: hda/hdmi: Add HP Device 0x8711 to force connect list usb: cdnsp: fix lack of ZLP for ep0 usb: xhci-mtk: fix leakage of shared hcd when fail to set wakeup irq arm64: dts: qcom: sm8250: fix USB-DP PHY registers usb: dwc3: Fix race between dwc3_set_mode and __dwc3_set_mode usb: dwc3: core: defer probe on ulpi_read_id timeout xhci: Prevent infinite loop in transaction errors recovery for streams HID: wacom: Ensure bootloader PID is usable in hidraw mode HID: mcp2221: don't connect hidraw loop: Fix the max_loop commandline argument treatment when it is set to 0 9p: set req refcount to zero to avoid uninitialized usage security: Restrict CONFIG_ZERO_CALL_USED_REGS to gcc or clang > 15.0.6 reiserfs: Add missing calls to reiserfs_security_free() iio: fix memory leak in iio_device_register_eventset() iio: adc: ad_sigma_delta: do not use internal iio_dev lock iio: adc128s052: add proper .data members in adc128_of_match table regulator: core: fix deadlock on regulator enable floppy: Fix memory leak in do_floppy_init() gcov: add support for checksum field fbdev: fbcon: release buffer when fbcon_do_set_font() failed ovl: fix use inode directly in rcu-walk mode btrfs: do not BUG_ON() on ENOMEM when dropping extent items for a range scsi: qla2xxx: Fix crash when I/O abort times out net: stmmac: fix errno when create_singlethread_workqueue() fails media: dvbdev: fix build warning due to comments media: dvbdev: fix refcnt bug extcon: usbc-tusb320: Call the Type-C IRQ handler only if a port is registered mfd: qcom_rpm: Use devm_of_platform_populate() to simplify code pwm: tegra: Fix 32 bit build Linux 5.15.86 Change-Id: I4ec30b690e8dbd554044495e26360a86cc042069 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-01-30 14:44:15 +00:00
Greg Kroah-Hartman	e66b45d527	Merge branch 'android13-5.15' into android13-5.15-lts ... Sync up with android13-5.15 for the following commits: a60104c6cc Merge tag 'android13-5.15.78_r00' into android13-5.15 0c8a58469b UPSTREAM: usb: gadget: uvc: Prevent buffer overflow in setup handler 85b6370411 UPSTREAM: usb: gadget: uvc: also use try_format in set_format 0a1c1e4f64 UPSTREAM: usb: gadget: uvc: default the ctrl request interface offsets fce2002702 UPSTREAM: usb: gadget: uvc: don't put item still in use 38ce45512f UPSTREAM: usb: gadget: uvc: Fix argument to sizeof() in uvc_register_video() eae0c310a5 UPSTREAM: usb: gadget: uvc: add v4l2 try_format api call 5f385970be UPSTREAM: usb: gadget: uvc: add v4l2 enumeration api calls 4aa53ed66b BACKPORT: media: uvcvideo: move uvc_format_desc to common header fc7969e41e BACKPORT: media: v4l: move helper functions for fractions from uvc to v4l2-common 0f48a44f70 UPSTREAM: usb: gadget: uvc: increase worker prio to WQ_HIGHPRI 8792df01c4 UPSTREAM: usb: move from strlcpy with unused retval to strscpy 1b2bc88b59 UPSTREAM: usb: gadget: uvc: Fix comment blocks style 8bc4e80471 UPSTREAM: usb: gadget: uvc: track frames in format entries 28431ab172 ANDROID: clocksource/arm_arch_timer: Add workaround for erratum 858921 6b4d1d8995 UPSTREAM: usb: gadget: f_fs: Ensure ep0req is dequeued before free_request 001fc069da UPSTREAM: usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait c190539f4e UPSTREAM: usb: gadget: uvc: move structs to common header e5fe1a95c3 UPSTREAM: usb: gadget: uvc: prevent index variables to start from 0 413bfd5f1b UPSTREAM: usb: gadget: uvc: implement dwPresentationTime and scrSourceClock baa5c6d923 UPSTREAM: usb: gadget: uvc: ensure the vdev is unset 82beac34d8 BACKPORT: UPSTREAM: usb: dwc3: EP clear halt leading to clearing of delayed_status 016d61094b ANDROID: mm/oom_kill: fix task_struct refcount_t: underflow; use-after-free. 2f40ae382f ANDROID: ABI: Update allowed list for QCOM c7562e628c ANDROID: GKI: update allowed list for exynosauto SoC 8945ccdb22 ANDROID: GKI: update xiaomi symbol list 8501db9cda ANDROID: loop: Add vendor hook to update cmd b73474bacc ANDROID: GKI: Update abi_gki_aarch64_qcom 0f1629ced8 ANDROID: direct_io: Add a vendor hook to update OEM-specific field of struct bio 647d9c21bc ANDROID: GKI: update xiaomi symbol list 5e05d41272 ANDROID: GKI: Update abi_gki_aarch64_qcom symbols. 4fa690983d ANDROID: GKI: Update abi_gki_aarch64_qcom 5d96c24be9 ANDROID: uid_sys_stats: defer process_notifier work if uid_lock is contended 75aa4c087e FROMGIT: bpf: btf: limit logging of ignored BTF mismatches f162762e3a UPSTREAM: skbuff: Account for tail adjustment during pull operations 25f2c8b4c7 ANDROID: Update the ABI symbol list and xml d0822a3f9b ANDROID: mm: Export find_vm_area 37d8fe8dc3 ANDROID: GKI: update xiaomi symbol list b3084d784b ANDROID: vendor_hooks:vendor hook for control memory dirty rate 6d9e986186 FROMGIT: mm/cma.c: delete kmemleak objects when freeing CMA areas to buddy at boot e51492910c BACKPORT: FROMGIT: mm/cma.c: make kmemleak aware of all CMA regions bac2fa84f7 UPSTREAM: mm: kmemleak: alloc gray object for reserved region with direct map b1b50c61eb UPSTREAM: usb: dwc3: gadget: Don't delay End Transfer on delayed_status f77134986a UPSTREAM: usb: dwc3: gadget: Do not clear ep delayed stop flag during ep disable 70947d4104 UPSTREAM: usb: dwc3: gadget: Skip waiting for CMDACT cleared during endxfer 6cac29527d UPSTREAM: usb: dwc3: Increase DWC3 controller halt timeout c24377e58a ANDROID: mm: fix vma refcounting for SPF in vm_area_dup 1b8d144a47 UPSTREAM: usb: dwc3: Remove DWC3 locking during gadget suspend/resume 25e07b302b UPSTREAM: usb: dwc3: Avoid unmapping USB requests if endxfer is not complete adcf982b9a UPSTREAM: usb: dwc3: gadget: Continue handling EP0 xfercomplete events 5dedf5e350 UPSTREAM: usb: dwc3: gadget: Synchronize IRQ between soft connect/disconnect 4483376b15 UPSTREAM: usb: dwc3: gadget: Force sending delayed status during soft disconnect fec000d477 UPSTREAM: usb: dwc3: Do not service EP0 and conndone events if soft disconnected c2a767880d UPSTREAM: usb: dwc3: gadget: conditionally remove requests ad7838324a UPSTREAM: usb: dwc3: ep0: Properly handle setup_packet_pending scenario in data stage f0c8e8fb26 UPSTREAM: usb: dwc3: gadget: Fix IN endpoint max packet size allocation 7dcee70181 UPSTREAM: usb: dwc3: gadget: Delay issuing End Transfer 7ec08af1cc UPSTREAM: usb: dwc3: gadget: Only End Transfer for ep0 data phase 1fd897b8fd UPSTREAM: usb: dwc3: ep0: Don't prepare beyond Setup stage aa96dec5f3 UPSTREAM: usb: dwc3: gadget: move cmd_endtransfer to extra function fd0d0cdd6d UPSTREAM: usb: dwc3: gadget: ep_queue simplify isoc start condition 8dd53dc29a UPSTREAM: usb: dwc3: gadget: Skip reading GEVNTSIZn f99c14b160 UPSTREAM: usb: dwc3: gadget: Ignore Update Transfer cmd params 3c022868a2 UPSTREAM: usb: dwc3: gadget: Skip checking Update Transfer status 4baf5030d0 ANDROID: fips140: add crypto_memneq() back to the module 55dd45162b ANDROID: kbuild: Search external devicetree path when running clean target a2593b3a74 ANDROID: Re-enable fast mremap and fix UAF with SPF 28e537ca36 Revert "ANDROID: Make SPF aware of fast mremaps" 11662bc7d0 ANDROID: fips140: add dump_jitterentropy command to fips140_lab_util 8e10ceb0f1 ANDROID: GKI: Update allowed list for QCOM 74ccad59c9 Revert "ANDROID: ABI: Update symbols to unisoc whitelist" ab2dfaed45 ANDROID: page_pinner: prevent pp_buffer uninitialized access 0ef8ae8d3a ANDROID: cpufreq: add macro guard to protect vendor hook 7a3d34495c ANDROID: remove unnecessary SPECULATIVE_PAGE_FAULT config dependency f5ade1a7ad ANDROID: usb: gadget: f_accessory: update SS/SSP descriptors c265df840a ANDROID: Update the ABI symbol list and xml ed6f0796dd ANDROID: sched/pelt: export ___update_load_[sum|avg] 85aa38928c ANDROID: GKI: add symbol list file for honor 6525e159bb ANDROID: Update the GKI symbol list and ABI XML 9d0ccb89bc ANDROID: irqchip/irq-gic-v3: Add vendor hook for gic suspend b3c4378d24 ANDROID: ABI: Update symbols to unisoc whitelist af027c97fc ANDROID: Make SPF aware of fast mremaps 8d58de2c76 ANDROID: abi_gki_aarch64_qcom: Add secure hibernation APIs 57c0c76264 ANDROID: GKI: Update symbol list for mtk cb0ff59972 ANDROID: cpufreq: add vendor hook in cpufreq_offline b5b2dbf1a2 UPSTREAM: locks: fix TOCTOU race when granting write lease 22b130dfad ANDROID: Update symbol list for sunxi 69fefbb3db ANDROID: GKI: Source GKI_BUILD_CONFIG_FRAGMENT after setting all variables e80bb46694 ANDROID: Revert "ANDROID: allmodconfig: disable WERROR" 6bbccfc63e UPSTREAM: drm/amdgpu: temporarily disable broken Clang builds due to blown stack-frame 0667e5dfa3 BACKPORT: Kconfig.debug: provide a little extra FRAME_WARN leeway when KASAN is enabled 9c8074484f UPSTREAM: crypto: algboss - compile out test-related code when tests disabled 02ffa3bd9d UPSTREAM: crypto: api - compile out crypto_boot_test_finished when tests disabled 7bf98ba526 UPSTREAM: crypto: algboss - optimize registration of internal algorithms 46b75c8648 BACKPORT: crypto: api - optimize algorithm registration when self-tests disabled 9662706fb0 UPSTREAM: crypto: api - Fix boot-up crash when crypto manager is disabled 3f5a00a5ef UPSTREAM: crypto: api - Do not create test larvals if manager is disabled da83ad2055 UPSTREAM: crypto: api - Export crypto_boot_test_finished e07f20669c UPSTREAM: crypto: api - Fix built-in testing dependency failures f72cb1622f ANDROID: GKI: Add a general aarch64 symbol list ac16892391 ANDROID: GKI: db845c: remove led-multicolor override 39b026b051 ANDROID: GKI: enable mulitcolor-led cf8edf1928 UPSTREAM: HID: playstation: support updated DualSense rumble mode. a7bb941a00 UPSTREAM: HID: playstation: add initial DualSense Edge controller support 72fd652689 UPSTREAM: HID: playstation: stop DualSense output work on remove. 2096eced42 UPSTREAM: HID: playstation: convert to use dev_groups 4281e23610 UPSTREAM: HID: playstation: fix return from dualsense_player_led_set_brightness() 1c2aceb8d7 UPSTREAM: HID: playstation: expose DualSense player LEDs through LED class. 8abc9ed234 UPSTREAM: leds: add new LED_FUNCTION_PLAYER for player LEDs for game controllers. 392b327fe0 UPSTREAM: HID: playstation: expose DualSense lightbar through a multi-color LED. f0ecfd1af7 ANDROID: GKI: Add Tuxera symbol list ac26e9c7b8 ANDROID: cma: allow to use CMA in swap-in path 60a61c1a04 ANDROID: GKI: update xiaomi symbol list cac282fc1a ANDROID: dm: Add a vendor hook to update bio after clone be6c9a9b11 ANDROID: GKI: Update symbol list 4ff88497a3 ANDROID: GKI: export symbols to modify lru stats f8c2625ba0 ANDROID: GKI: Update exynos_wear symbol list 3cc69a0a0a ANDROID: vendor hooks: Encrypt snapshot for bootloader based hibernation 72ec9e1cd2 ANDROID: vendor hooks: Export symbols for bootloader based hibernation 37a7d66607 ANDROID: abi_gki_aarch64_qcom: Update symbol list 474a540f29 ANDROID: irq: put irq_resolve_mapping under protection of __irq_enter_raw aea6e535a2 BACKPORT: UPSTREAM: usb: typec: ucsi: Wait for the USB role switches 680c12419c UPSTREAM: rpmsg: char: Avoid double destroy of default endpoint 1a1ee4bb87 BACKPORT: exfat: fix overflow for large capacity partition 737bf2358f UPSTREAM: usb: gadget: uvc: fix changing interface name via configfs 1b90823b62 UPSTREAM: dma-mapping: Fix build error unused-value 6fcc6343c3 UPSTREAM: bpf: Ensure correct locking around vulnerable function find_vpid() 5df791308b ANDROID: abi_gki_aarch64_qcom: whitelist symbols added for cma retries 6f0ba6ad99 ANDROID: mm/cma: add vendor_hook in cma_alloc for retries 8022d8faf6 ANDROID: arm64: mm: perform clean & invalidation in __dma_map_area 28f65c4aa3 FROMLIST: sched: Fix use-after-free bug in dup_user_cpus_ptr() 6be735d61e UPSTREAM: HID: roccat: Fix use-after-free in roccat_read() 8e0c2cedbc UPSTREAM: mm/damon: use set_huge_pte_at() to make huge pte old 1d0c369729 UPSTREAM: usb: gadget: f_mass_storage: Make CD-ROM emulation works with Windows OS bcf5cce758 UPSTREAM: gen_compile_commands: handle multiple lines per .mod file 96ce46922d UPSTREAM: scripts/nsdeps: adjust to the format change of *.mod files 19be6b818a BACKPORT: kbuild: avoid regex RS for POSIX awk 61f4b98fe0 UPSTREAM: KVM: arm64: Always start with clearing SVE flag on load a11aae86d8 UPSTREAM: powerpc/64: Include cache.h directly in paca.h a3eb9c5744 UPSTREAM: KVM: arm64: vgic-v3: Consistently populate ID_AA64PFR0_EL1.GIC bf995d5fbf UPSTREAM: module.h: simplify MODULE_IMPORT_NS 4009f67147 UPSTREAM: mac80211_hwsim: fix RCU protected chanctx access e295ae9c84 UPSTREAM: KVM: arm64: nvhe: Eliminate kernel-doc warnings b1cad5be29 BACKPORT: KVM: arm64: Actually prevent SMC64 SYSTEM_RESET2 from AArch32 46d726e380 UPSTREAM: KVM: arm64: Generally disallow SMC64 for AArch32 guests 35c5fa9834 UPSTREAM: virtio: use virtio_device_ready() in virtio_device_restore() aa7f73725f UPSTREAM: mm: fix use-after-free bug when mm->mmap is reused after being freed bc920538bb UPSTREAM: kasan: test: prevent cache merging in kmem_cache_double_destroy 435eac40de UPSTREAM: arm64: Ensure that the 'bti' macro is defined where linkage.h is included 03a56596ef UPSTREAM: mmc: mediatek: free the ext_csd when mmc_get_ext_csd success ac6122b362 UPSTREAM: scsi: ufs: Fix double space in SCSI_UFS_HWMON description a094f7c2d4 UPSTREAM: scsi: ufs: mediatek: Avoid sched_clock() misuse 9fe6ac18f7 UPSTREAM: scsi: ufs: core: SCSI_UFS_HWMON depends on HWMON=y ce550b4d77 ANDROID: GKI: db845c: Update symbols list and ABI f9bfdf7a59 BACKPORT: f2fs: invalidate meta pages only for post_read required inode 9b96bd8907 ANDROID: GKI: Update symbols to symbol list 65d4d9d5da ANDROID: cpu/hotplug: call perf event through function pointer 5feed5b144 Merge tag 'android13-5.15.74_r00' into android13-5.15 35c0e672b8 ANDROID: abi_gki_aarch64_qcom: Update symbol list f5cbc8d09c UPSTREAM: usb: dwc3: gadget: Submit endxfer command if delayed during disconnect 150b3c4e4b BACKPORT: ANDROID: dma-buf: heaps: replace mutex lock with spinlock 1e8b8c6263 ANDROID: Update symbol list for mtk fa068ecbc8 ANDROID: Fix license for BUILD.bazel file. d47ef1a984 UPSTREAM: gcov: clang: fix the buffer overflow issue 4951a62804 ANDROID: kleaf: load() then package(). d2cfc10a38 UPSTREAM: perf/arm-cmn: Add debugfs topology info 942d043ca8 UPSTREAM: perf/arm-cmn: Add CI-700 Support ef74c2d064 UPSTREAM: dt-bindings: perf: arm-cmn: Add CI-700 d14ad92dd0 UPSTREAM: perf/arm-cmn: Support new IP features d0205771e2 UPSTREAM: perf/arm-cmn: Demarcate CMN-600 specifics b6a7974310 UPSTREAM: perf/arm-cmn: Move group validation data off-stack 9a74f34abd UPSTREAM: perf/arm-cmn: Optimise DTC counter accesses fb9091356e UPSTREAM: perf/arm-cmn: Optimise DTM counter reads 86d818633c UPSTREAM: perf/arm-cmn: Refactor DTM handling 3081baf827 UPSTREAM: perf/arm-cmn: Streamline node iteration 534bc126aa UPSTREAM: perf/arm-cmn: Refactor node ID handling 11319db7b8 UPSTREAM: perf/arm-cmn: Drop compile-test restriction 40b2978978 UPSTREAM: perf/arm-cmn: Account for NUMA affinity e82a3f108d UPSTREAM: fs: erofs: add sanity check for kobject in erofs_unregister_sysfs 8ff9996c5d ANDROID: cpufreq: times: record fast switch frequency transitions 09d0ae9798 ANDROID: abi_gki_aarch64_qcom: Add android_vh_madvise_cold_or_pageout 485c0121e7 ANDROID: GKI: MGLRU ABI Fixup 3263c8d514 ANDROID: GKI: Build multi-gen LRU 383505860c BACKPORT: mm: multi-gen LRU: design doc 3fa3e8ad5d UPSTREAM: mm: multi-gen LRU: admin guide a95784fdac BACKPORT: mm: multi-gen LRU: debugfs interface dd4f2bd6c0 UPSTREAM: mm: multi-gen LRU: thrashing prevention 94d1a38c47 BACKPORT: mm: multi-gen LRU: kill switch 8726e22e86 BACKPORT: mm: multi-gen LRU: optimize multiple memcgs 35e2163024 BACKPORT: mm: multi-gen LRU: support page table walks 009d857059 BACKPORT: mm: multi-gen LRU: exploit locality in rmap 53af55e4cc BACKPORT: mm: multi-gen LRU: minimal implementation f4d4c46c3a BACKPORT: mm: multi-gen LRU: groundwork ce62ece686 UPSTREAM: Revert "include/linux/mm_inline.h: fold __update_lru_size() into its sole caller" 3cebab25d5 BACKPORT: mm/vmscan.c: refactor shrink_node() f3f123ebb5 BACKPORT: mm: x86: add CONFIG_ARCH_HAS_NONLEAF_PMD_YOUNG de96dbc641 BACKPORT: mm: x86, arm64: add arch_has_hw_pte_young() 970353b36e Revert "FROMLIST: mm: x86, arm64: add arch_has_hw_pte_young()" 475108fadd Revert "FROMLIST: mm: x86: add CONFIG_ARCH_HAS_NONLEAF_PMD_YOUNG" 8d47a32fa8 Revert "FROMLIST: mm/vmscan.c: refactor shrink_node()" e849bd2f88 Revert "FROMLIST: Revert "include/linux/mm_inline.h: fold __update_lru_size() into its sole caller"" 60f9c51c88 Revert "FROMLIST: mm: multi-gen LRU: groundwork" 6e620d5117 Revert "FROMLIST: mm: multi-gen LRU: minimal implementation" 4bce99229a Revert "FROMLIST: mm: multi-gen LRU: exploit locality in rmap" 16e5220b3d Revert "FROMLIST: mm: multi-gen LRU: support page table walks" 4124cf4b02 Revert "FROMLIST: mm: multi-gen LRU: optimize multiple memcgs" 3a3733721b Revert "FROMLIST: mm: multi-gen LRU: kill switch" a62a81e770 Revert "FROMLIST: mm: multi-gen LRU: thrashing prevention" f4b12ac3bc Revert "FROMLIST: mm: multi-gen LRU: debugfs interface" 81c19190ff Revert "FROMLIST: mm: multi-gen LRU: admin guide" b49c49542f Revert "FROMLIST: mm: multi-gen LRU: design doc" d8c59190ad Revert "ANDROID: GKI: build multi-gen LRU" 4931d96eb3 ANDROID: mm: Use intended order-adjusted batch size 1bb821dcab ANDROID: ABI: Update allowed list for QCOM e47b11059b ANDROID: GKI: Add exynos_wear symbol list 23fb3111f6 ANDROID: page_pinner: prevent pp_buffer access before initialization 2bd8e6670e ANDROID: KVM: arm64: Use 32-bit function ID for PSCI MEM_PROTECT call 050466c42e ANDROID: ABI: Update allowed list for QCOM 9449b4f1af ANDROID: mm: preserve vma->anon_vma after MREMAP_DONTUNMAP for SPF cf5cad44fd ANDROID: mm: disable speculative page faults for CONFIG_NUMA 5fcb50b055 ANDROID: mm: fix speculative walk which is unsafe under RCU 749aa64ba8 ANDROID: mm: avoid using vmacache in lockless vma search 3e7526c672 ANDROID: disable page table moves when speculative page faults are enabled 3b43f23348 ANDROID: mm: skip pte_alloc during speculative page fault d9d7f843da ANDROID: mm: introduce vma refcounting to protect vma during SPF d7c52b0cd0 UPSTREAM: crypto: arm/xor - make vectorized C code Clang-friendly f759aa5f65 UPSTREAM: efi: capsule-loader: Fix use-after-free in efi_capsule_write 564233e471 ANDROID: mm: add a vendor hook to rmqueue_bulk() 979df868f5 FROMGIT: mm/madvise: fix madvise_pageout for private file mappings 99e3951ea4 ANDROID: vendor_hooks: Allow shared pages reclaim via MADV_PAGEOUT ec736ca13a ANDROID: abi_gki_aarch64_qcom: Update symbol list 710fd74d1d FROMGIT: tty: serial: qcom-geni-serial: Add support for Hibernation feature 6196aa68f6 ANDROID: GKI: Update symbol list for Amlogic 0be362f248 UPSTREAM: KVM: x86: do not report a vCPU as preempted outside instruction boundaries 50358d6729 ANDROID: mm/slab: Use EXPORT_SYMBOL for android_kmalloc_64_create e161b0c43c ANDROID: GKI: update symbol list for ExynosAuto SoC 1da102d4e3 ANDROID: KVM: arm64: s2mpu: Fix SYNC latency regression ce39549d92 ANDROID: KVM: arm64: iommu: Add host_stage2_idmap_complete f0c53a5637 ANDROID: KVM: arm64: Issue CMOs when tearing down shadow pages aec224bb9e ANDROID: GKI: Update symbol list for xiaomi 4bc79ed42f ANDROID: Add ashmem ioctl to return a unique file identifier 3a049b038e ANDROID: KVM: arm64: Fix repainting of PSCI SYSTEM_RESET2 calls c2162eca3f ANDROID: reimplement vm_file protection during speculative page fault a07770525e Revert "ANDROID: add vma->file_ref_count to synchronize vma->vm_file destruction" 578745e43f Revert "ANDROID: arm64/mm: protect vm_file during speculative page fault handling" 24894a547e Revert "ANDROID: x86/mm: protect vm_file during speculative page fault handling" e9a7e9f2ff Revert "ANDROID: powerpc/mm: protect vm_file during speculative page fault handling" 4288911d5e FROMGIT: usb: core: stop USB enumeration if too many retries b8b0948987 FROMGIT: f2fs: allow to read node block after shutdown e796ee5695 ANDROID: KVM: arm64: Adjust PSCI MEM_PROTECT refcount across share/unshare 5e82339f4b UPSTREAM: ext4,f2fs: fix readahead of verity data 3605981d8a FROMLIST: f2fs: fix the msg data type f9965bb807 BACKPORT: FROMLIST: f2fs: fix the assign logic of iocb c95f78db38 ANDROID: Update the GKI symbol list and ABI XML 8a7073c106 ANDROID: mm/slab: Create 64-byte slab caches if the hardware supports it 34e03c38fd ANDROID: dma-buf: Add vendor hook for deferred dmabuf sysfs stats release e4923174ba FROMLIST: cfi: free old cfi shadow asynchronously 9b7bf9c529 FROMLIST: cfi: enable sanitize for cfi.c 432cf292eb ANDROID: GKI: Update abi_gki_aarch64_qcom a382999851 ANDROID: ABI: Add usb_pipe_type_check symbol f2f619baa5 ANDROID: GKI: Update symbols to symbol list 69ec48c6a0 ANDROID: GKI: Update symbol list for Amlogic 6707ada5f7 ANDROID: dm-user: Remove bio recount in I/O path 654e0ed6fc UPSTREAM: drm/meson: Fix overflow implicit truncation warnings aaa6cd7d0d UPSTREAM: irqchip/tegra: Fix overflow implicit truncation warnings d75ef462c3 UPSTREAM: video: fbdev: pxa3xx-gcu: Fix integer overflow in pxa3xx_gcu_write 777857c7a1 UPSTREAM: i2c: ismt: prevent memory corruption in ismt_access() b006f3a809 ANDROID: GKI: Update symbol list for mtk STB projects 7266895825 FROMLIST: KVM: arm64: pkvm: Fixup boot mode to reflect that the kernel resumes from EL1 b72960ae91 ANDROID: ABI: Add teace_android_rvh_rto_next_cpu to unisoc whitelist 02ac822b3d BACKPORT: rcu: Remove __read_mostly annotations from rcu_scheduler_active externs 4baff5cba1 ANDROID: ABI: Export vendor_hook to be used by memcgv2 optimization mechanism 5993940dd7 FROMLIST: xfrm: Fix oops in __xfrm_state_delete() aaf18200c3 BACKPORT: KVM: arm64: Fix bad dereference on MTE-enabled systems 201d5f4a3e FROMLIST: binder: fix UAF of alloc->vma in race with munmap() 20af947ec9 Revert "Revert "BACKPORT: FROMLIST: ext4: implement speculative fault handling"" 365ffc56b4 ANDROID: fix a race between speculative page walk and unmap operations 68f9882b75 ANDROID: GKI: update .xml file after cfg80211 changes f6fa00feb4 UPSTREAM: wifi: cfg80211: add hardware timestamps to frame RX info 2a2c366c47 UPSTREAM: wifi: cfg80211: add a function for reporting TX status with hardware timestamps 1148c260a1 BACKPORT: wifi: nl80211: add RX and TX timestamp attributes 9c20617add BACKPORT: wifi: nl80211: add EML/MLD capabilities to per-iftype capabilities 23c1ff4ec5 FROMGIT: wifi: cfg80211: support reporting failed links 5bdebe9301 FROMGIT: wifi: cfg80211: Fix bitrates overflow issue 41f5642f15 UPSTREAM: wifi: cfg80211: fix MCS divisor value 3658e1b900 BACKPORT: wifi: nl80211: add MLD address to assoc BSS entries 20d705c31e UPSTREAM: wifi: nl80211: remove redundant err variable acf72eda07 BACKPORT: wifi: nl80211: Add POWERED_ADDR_CHANGE feature 4743d0ad6c BACKPORT: wifi: cfg80211/mac80211: check EHT capability size correctly 89abd0e78b UPSTREAM: wifi: cfg80211: Update RNR parsing to align with Draft P802.11be_D2.0 d4ecf4c3c4 UPSTREAM: wifi: cfg80211: debugfs: fix return type in ht40allow_map_read() da9a72662d FROMGIT: wifi: nl80211: use link ID in NL80211_CMD_SET_BSS 94afbcfb15 UPSTREAM: wifi: cfg80211: add link id to txq params 8e9375450e BACKPORT: wifi: mac80211: Align with Draft P802.11be_D2.0 fadbf9a2ca BACKPORT: wifi: mac80211: Align with Draft P802.11be_D1.5 3ae950a584 UPSTREAM: wifi: nl80211: add MLO link ID to the NL80211_CMD_FRAME TX API 483086ceca UPSTREAM: wifi: cfg80211: report link ID in NL80211_CMD_FRAME 46c8675945 UPSTREAM: wifi: cfg80211/nl80211: move rx management data into a struct 6d81ebd631 BACKPORT: wifi: nl80211/mac80211: clarify link ID in control port TX dfdfc3041e UPSTREAM: wifi: nl80211: require MLD address on link STA add/modify 5697efd6e4 UPSTREAM: wifi: cfg80211: add cfg80211_get_iftype_ext_capa() 2c60081d52 UPSTREAM: wifi: nl80211: fix some attribute policy entries 9e73ea479d UPSTREAM: wifi: nl80211: reject fragmented and non-inheritance elements c74a4e8436 UPSTREAM: wifi: nl80211: reject link specific elements on assoc link 3594b5cb98 UPSTREAM: wifi: cfg80211: set country_elem to NULL 2d971fdf0a UPSTREAM: wifi: nl80211: advertise MLO support 8f37e21b18 UPSTREAM: wifi: nl80211: allow link ID in set_wiphy with frequency eed91854a5 BACKPORT: wifi: cfg80211/mac80211: Support control port TX from specific link 3120619c1b UPSTREAM: wifi: nl80211: Support MLD parameters in nl80211_set_station() eab9f6c4ab UPSTREAM: wifi: nl80211: check MLO support in authenticate 85f1514d21 UPSTREAM: wifi: nl80211: set BSS to NULL if IS_ERR() d9847463ac ANDROID: abi_gki_aarch64_qcom: Add drm_plane_from_index c6432173e0 ANDROID: GKI: Update symbols to symbol list 0051c6ca25 ANDROID: add func in mm/memcontrol.c 671ba4d337 UPSTREAM: af_key: Do not call xfrm_probe_algs in parallel 4431f52671 UPSTREAM: mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region() c0a7deb29d ANDROID: KVM: arm64: Donate memory per vcpu for each vcpu shadow state 76094a9979 ANDROID: KVM: arm64: Initialize shadow vcpus with separate hypercalls 31d3b09cb7 ANDROID: KVM: arm64: Refactor unpinning host vcpu bf48426928 ANDROID: KVM: arm64: Separate functions for shadow vm and vcpu init bf94ae1300 ANDROID: KVM: arm64: Refactor code for reclaiming guest memory into a function 2c4a77c9b4 UPSTREAM: mm: Force TLB flush for PFNMAP mappings before unlink_file_vma() e8e8278ea7 ANDROID: sched: check on_rq in freezer_should_skip() 15a4d4c54f BACKPORT: mm: don't be stuck to rmap lock on reclaim path 2ac3611cdf UPSTREAM: crypto: x86/polyval - Fix crashes when keys are not 16-byte aligned 379be12c0f ANDROID: KVM: arm64: Only unpin a vCPU SVE state if set d6b5e9db8c ANDROID: GKI: Update symbol list for xiaomi 9527695a56 FROMGIT: f2fs: let's avoid to get cp_rwsem twice by f2fs_evict_inode by d_invalidate d9b344dc29 ANDROID: ABI: Update symbols to unisoc whitelist for the scheduler 6st 2f4a562ed8 UPSTREAM: virtio_mmio: add support to set IRQ of a virtio device as wakeup source 56a0806bcb UPSTREAM: dt-bindings: virtio: mmio: add optional wakeup-source property c4ef0b793d BACKPORT: mm: re-allow pinning of zero pfns 45cda0a886 BACKPORT: mm: fix is_pinnable_page against a cma page 7d53a26b25 ANDROID: Update symbol list for mtk 1f44f2214d UPSTREAM: thermal: sysfs: Fix cooling_device_stats_setup() error code path 161b98aa4c FROMGIT: usb: dwc3: gadget: Don't set IMI for no_interrupt 7947f2f48a FROMGIT: usb: dwc3: gadget: Stop processing more requests on IMI 3bdd7e23e2 FROMGIT: usb: gadget: uvc: fix sg handling during video encode 55249e0b76 FROMGIT: usb: gadget: uvc: fix sg handling in error case 45238b84d8 FROMGIT: usb: gadget: uvc: fix dropped frame after missed isoc 2d2cd1af72 UPSTREAM: usb: gadget: uvc: improve sg exit condition 3248ae0d9d UPSTREAM: usb: gadget: uvc: giveback vb2 buffer on req complete 23616a2948 UPSTREAM: usb: gadget: uvc: rework uvcg_queue_next_buffer to uvcg_complete_buffer a50df26246 UPSTREAM: usb: gadget: uvc: use on returned header len in video_encode_isoc_sg c91c6e0a3f UPSTREAM: usb: gadget: uvc: consistently use define for headerlen 2616a2072c FROMGIT: arm64: io: Use asm-generic high level MMIO accessors 15fbf32b75 ANDROID: GKI: Update abi_gki_aarch64_qcom for trace_mmio 93602bed42 UPSTREAM: usb: dwc3: gadget: fix high speed multiplier setting 14bd2d1473 UPSTREAM: usb: dwc3: gadget: refactor dwc3_repare_one_trb 68d8dea7fe ANDROID: GKI: Update abi_gki_aarch64_qcom for timespec64_to_jiffies fdf67142f3 ANDROID: vendor_hook: skip trace_android_vh_page_trylock_set when ignore_references is true a9092347ad ANDROID: ABI: Export psi_system symbol to be used by memcgv2 optimization mechanism 6d81bca908 ANDROID: ABI: export psi_system for memcgv2's vh function optimization ecb0dcb24a UPSTREAM: mm/damon/dbgfs: fix memory leak when using debugfs_lookup() 52808991c0 UPSTREAM: wifi: mac80211: fix MBSSID parsing use-after-free ec4ab62846 UPSTREAM: mac80211: fix memory leaks with element parsing 4ae50d8935 UPSTREAM: mac80211: always allocate struct ieee802_11_elems 33c9746293 UPSTREAM: mac80211: mlme: find auth challenge directly d3f1cd61da UPSTREAM: mac80211: move CRC into struct ieee802_11_elems 397e82f22b UPSTREAM: mac80211: mesh: clean up rx_bcn_presp API 1b7036d9ee UPSTREAM: wifi: cfg80211: update hidden BSSes to avoid WARN_ON db5865ed3c UPSTREAM: wifi: mac80211: fix crash in beacon protection for P2P-device b2126d0131 UPSTREAM: wifi: mac80211_hwsim: avoid mac80211 warning on bad rate 64265011ea UPSTREAM: wifi: cfg80211: avoid nontransmitted BSS list corruption 56203e0ecb UPSTREAM: wifi: cfg80211: fix BSS refcounting bugs 3ebea46325 UPSTREAM: wifi: cfg80211: ensure length byte is present before access 0abe9e97c8 UPSTREAM: wifi: cfg80211/mac80211: reject bad MBSSID elements 50802a459b UPSTREAM: wifi: cfg80211: fix u8 overflow in cfg80211_update_notlisted_nontrans() 0a4e0e56b6 UPSTREAM: usb: gadget: f_serial: Ensure gserial disconnected during unbind a42bb7b44d UPSTREAM: wifi: nl80211: better validate link ID for stations 3ce62ab9f9 UPSTREAM: wifi: cfg80211: clean up links appropriately 6b5b4300ba UPSTREAM: wifi: cfg80211: add ieee80211_chanwidth_rate_flags() dda95a93f4 UPSTREAM: wifi: cfg80211: extend cfg80211_rx_assoc_resp() for MLO a4670eb422 BACKPORT: wifi: cfg80211: put cfg80211_rx_assoc_resp() arguments into a struct c1bcc88a92 BACKPORT: wifi: cfg80211: adjust assoc comeback for MLO db5bcd0cd8 BACKPORT: wifi: cfg80211: prepare association failure APIs for MLO 4c026e7989 BACKPORT: wifi: cfg80211: remove BSS pointer from cfg80211_disassoc_request 54c7401e6f UPSTREAM: wifi: nl80211: acquire wdev mutex for dump_survey cedf0a45f1 UPSTREAM: wifi: cfg80211: drop BSS elements from assoc trace for now 85139f4bfc UPSTREAM: wifi: cfg80211: make cfg80211_auth_request::key_idx signed e75dfe1943 UPSTREAM: wifi: nl80211: enable setting the link address at new station d104fc76c4 UPSTREAM: wifi: nl80211: hold wdev mutex for station APIs 80f8155cfc UPSTREAM: wifi: nl80211: hold wdev mutex for channel switch APIs 7f076a74a7 UPSTREAM: wifi: nl80211: hold wdev mutex in add/mod/del link station b1bdeb8543 UPSTREAM: wifi: cfg80211: Allow MLO TX with link source address 6f2a6c919a ANDROID: ABI: add debugfs_lookup_and_remove to whitelist cabd649d1b UPSTREAM: sched/debug: fix dentry leak in update_sched_domain_debugfs e681f878fc UPSTREAM: debugfs: add debugfs_lookup_and_remove() 08ef164027 ANDROID: sched: Move scratch_mask to a percpu variable c61797f241 ANDROID: sched: Keep sched_class::set_cpus_allowed stable 448eb7ef25 FROMGIT: sched: Always clear user_cpus_ptr in do_set_cpus_allowed() ec8cf94166 BACKPORT: FROMGIT: sched: Enforce user requested affinity 50a3a47c14 BACKPORT: FROMGIT: sched: Always preserve the user requested cpumask 54aeb5c372 BACKPORT: FROMGIT: sched: Introduce affinity_context 5001781910 FROMGIT: sched: Add __releases annotations to affine_move_task() b3bb41cebd ANDROID: GKI: Update abi_gki_aarch64_qcom for DMA dba7a32ef7 ANDROID: GKI: Update symbols to symbol list ba5d7b443e ANDROID: GKI: Update symbol list for Exynos SoC 2eb7ccbee2 BACKPORT: FROMGIT: mmc: core: SD: Add BROKEN-SD-DISCARD quirk 3ade531891 BACKPORT: wifi: cfg80211: Fix validating BSS pointers in __cfg80211_connect_result 0436dc8907 UPSTREAM: mmc: sdhci: Fix host->cmd is null e91ba0b70e ANDROID: ABI: Update symbols to unisoc whitelist for the wlan ea095dd932 ANDROID: ABI: Update symbols to unisoc whitelist 545bb8eb6b FROMGIT: seccomp: Move copy_seccomp() to no failure path. 41300cf104 BACKPORT: FROMLIST: tracing: Add register read/write tracing support e8a2596dec UPSTREAM: fbcon: Prevent that screen size is smaller than font size b54f2a0d7b UPSTREAM: fbcon: Disallow setting font bigger than screen size 52833e8faf UPSTREAM: fbmem: Check virtual screen sizes in fb_set_var() ea2a1b81e8 ANDROID: GKI: Update symbol list for VIVO e0a18fbf05 ANDROID: GKI: Update symbol list for sunxi 3d7ba02e51 ANDROID: ABI: update allowed list for galaxy ed0b913a4b ANDROID: ABI: Update symbols to unisoc whitelist for UFS the 1st 16aecf0f68 UPSTREAM: usb: gadget: f_fs: change ep->ep safe in ffs_epfile_io() 9dec42d377 UPSTREAM: usb: gadget: f_fs: change ep->status safe in ffs_epfile_io() 6f90f3b9c9 ANDROID: KVM: arm64: Fix MMIO guard map error handling 8324bb0aed ANDROID: GKI: Update symbols to symbol list 95af22de88 UPSTREAM: cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() 546f62e71b FROMLIST: locking/rwsem: Limit # of null owner retries for handoff writer 4ece302f35 FROMLIST: locking/rwsem: Prevent non-first waiter from spinning in down_write() slowpath b5e4b8916f ANDROID: abi_gki_aarch64_sony: Export block driver symbols to collect device info ca65be56ed ANDROID: GKI: block: export block_rq_complete 316e668d5f ANDROID: ABI: update allowed list for galaxy 6d4b5281a6 ANDROID: KVM: arm64: s2mpu: Add SysMMU_SYNC timeout c0a46be9dc ANDROID: KVM: arm64: Force CMOs with FWB when reclaiming guest pages 24d27dff64 BACKPORT: locking/rwsem: Allow slowpath writer to ignore handoff bit if not set by first waiter 48b7cad9b0 ANDROID: Update mtktv symbol list 38e30fccb8 ANDROID: arm64: Reclaim some cpucaps to aid in backporting e76686ed1d ANDROID: GKI: Update symbol list for mtk STB projects 7639b80540 ANDROID: debug_symbols: Add put_task_stack 807d95c66b ANDROID: abi_gki_aarch64_qcom: Add hibernation APIs fae48a3639 ANDROID: fix kernelci build-break for !CONFIG_ANDROID_VENDOR_OEM_DATA 6232eecfa7 ANDROID: mm/filemap: Fix missing put_page() for speculative page fault 0555154508 ANDROID: abi_gki_aarch64_qcom: Add clk_restore_context and clk_save_context fa951e233f BACKPORT: HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report 1554564451 ANDROID: abi_gki_aarch64_qcom: Add drm driver APIs 16a71479cb ANDROID: sched: Export sched_domains_mutex for lockdep d2cb755a43 ANDROID: vendor hooks: Add hooks to support bootloader based hibernation c297152a18 ANDROID: GKI: Update Amlogic symbol list 2455f6610a ANDROID: fix ABI breakage in struct psi_group 9ed7219990 FROMLIST: psi: stop relying on timer_pending for poll_work rescheduling 9040c2052e ANDROID: ABI: Update symbols to unisoc whitelist 646452113d ANDROID: ABI: Update oplus symbol list b55a937270 ANDROID: GKI: Update symbol list for sunxi 1eedea5f8d ANDROID: abi_gki_aarch64_qcom: Export update_readahead_gfp_mask VH 041ffcd941 ANDROID: mm: add a vendor_hook to change the gfp flags ee928517b9 ANDROID: GKI: Update vendor symbol list for vivo 4c1cf366ac ANDROID: vendor_hooks: add new parameter to android_vh_blk_alloc_rqs() 5923781e8c ANDROID: KVM: arm64: Do not advertise SVE capability in protected mode f803a7997d ANDROID: ABI: Update symbols to unisoc whitelist for the drm ebf773d748 ANDROID: ABI: Update symbols to unisoc whitelist for clock 372abe5b53 ANDROID: KVM: arm64: Fix MMIO guard unmap 809ec777ea ANDROID: GKI: Add RTK TV KMI symbol list 85eea22b5e ANDROID: Update QCOM symbol list for __tracepoint_android_vh_mmc_sd_update_cmdline_timing b84c40ff60 UPSTREAM: crypto: jitter - add oversampling of noise source 4b6af87d6e BACKPORT: writeback avoid use-after-free after removing device 75b1bf99a9 ANDROID: GKI: Update abi_gki_aarch64_qcom 3ee1075693 FROMGIT: f2fs: support recording stop_checkpoint reason into super_block e82a19427e FROMLIST: mm: fix use-after free of page_ext after race with memory-offline 898cfbf094 ANDROID: mm: introduce page_pinner 8dea6e5e50 ANDROID: ABI: Add extcon_get_property_capability symbol 8409443201 ANDROID: gki_config: enable F2FS_UNFAIR_RWSEM 285d4132a6 ANDROID: scsi: ufs: add complete init vendor hook 5756b89437 ANDROID: ABI: update allowed list for galaxy 4ec2c6e2d1 ANDROID: GKI: Update symbol list for mtk AI-vision projects d6b20ddcd9 ANDROID: GKI: Enable HCTR2 2496e06b21 UPSTREAM: fscrypt: Add HCTR2 support for filename encryption 731238ab38 UPSTREAM: crypto: arm64/polyval - Add PMULL accelerated implementation of POLYVAL 6606d9507e UPSTREAM: crypto: x86/polyval - Add PCLMULQDQ accelerated implementation of POLYVAL e3431e9f2b UPSTREAM: crypto: arm64/aes-xctr - Improve readability of XCTR and CTR modes 8a794a25ae UPSTREAM: crypto: arm64/aes-xctr - Add accelerated implementation of XCTR 9a11762fde UPSTREAM: crypto: x86/aesni-xctr - Add accelerated implementation of XCTR 927d58494f UPSTREAM: crypto: hctr2 - Add HCTR2 support b07dcba017 UPSTREAM: crypto: polyval - Add POLYVAL support 24a19f56b4 UPSTREAM: crypto: xctr - Add XCTR support 96c87ab88b UPSTREAM: arm64: Add macro version of the BTI instruction 1fd5d6489a UPSTREAM: crypto: arm64/aes-neon-ctr - improve handling of single tail block b760d25fca ANDROID: GKI: Update symbols to symbol list 8b49e4bee6 ANDROID: KVM: arm64: Initialize ptr auth in protected mode 5405862223 FROMGIT: KVM: arm64: Ignore kvm-arm.mode if !is_hyp_mode_available() c101b51fb6 UPSTREAM: wifi: mac80211_hwsim: use 32-bit skb cookie eb82ad82b1 UPSTREAM: wifi: mac80211_hwsim: add back erroneously removed cast e154458b37 UPSTREAM: wifi: mac80211_hwsim: fix race condition in pending packet 5e1321eb79 ANDROID: abi_gki_aarch64_qcom: Add protocol related symbols 9122cbfc55 ANDROID: Fix lost track action type in save_track_hash bcb5f0547e UPSTREAM: usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS c2ab21a729 ANDROID: GKI: Update symbols to symbol list ac82d34706 ANDROID: vendor_hook: rename the the name of hooks 4a9e3b2ca6 ANDROID: vendor_hooks: Add hook in kmalloc_slab() fcacd896ec BACKPORT: wifi: cfg80211/mac80211: separate link params from station params 5b0ceee1bd UPSTREAM: wifi: cfg80211: add API to add/modify/remove a link station 54f780d093 ANDROID: signal: Add vendor hook for memory reaping 5edc332cee ANDROID: GKI: Update abi_gki_aarch64_pixel b80df8c286 Revert "ANDROID: vendor_hooks: Add hooks to tcp/udp send/recv msg functions." 8c09081fc0 Revert "ANDROID: sched: Add vendor hook for util-update related functions" 587cfd8e66 ANDROID: fix alignment of struct shash_desc member e15184fefe BACKPORT: mm: make minimum slab alignment a runtime property 273bbfc4d7 BACKPORT: printk: stop including cache.h from printk.h 088ce42ab0 UPSTREAM: kasan: fix a missing header include of static_keys.h 17e4c2a950 BACKPORT: kasan: split kasan_*enabled() functions into a separate header afa76a1c3a ANDROID: scsi: ufs: Improve MCQ error handling 9dcd74deff ANDROID: GKI: Add Sony KMI symbol list b9707158ac ANDROID: ABI: update allowed list for galaxy daac36f215 ANDROID: GKI: Update symbols to symbol list effc9c940a ANDROID: GKI: Update abi_gki_aarch64_qcom symbols. 3561c27eeb UPSTREAM: Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()" a89fbc0de0 ANDROID: fix add vendor hooks for unusual abort cases 0fd0345839 ANDROID: regmap: Unhide REGMAP_SPMI 314e242119 ANDROID: ABI: update allowed list for galaxy 6b1ae1157f ANDROID: Enable BUILD_GKI_CERTIFICATION_TOOLS for x86_64 GKI cbc497caa2 ANDROID: irqchip: Fix vendor hook arguments 898941454f UPSTREAM: usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop 7bdc155a70 Revert "FROMLIST: usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop" 94c8c2f858 ANDROID: add symbol file for type visibility symbols 0e0c25fffd ANDROID: selftests: incfs: Increase timeout in concurrent_reads_and_writes_test bba227bfd0 ANDROID: abi_gki_aarch64_qcom: Add iio symbol list for qcom 0c3d2d04cc ANDROID: make sure all types for hooks are defined in KMI 1aeba1eea1 ANDROID: mm: cma: proper ret type for tasks interrupted by fatal signal c2b91dc63c BACKPORT: erofs: fix use-after-free of on-stack io[] a75431c61b ANDROID: kleaf: Explicit list of ABI files. 41a23cd26e FROMGIT: kasan: call kasan_malloc() from __kmalloc_*track_caller() e1c0ed46cf FROMLIST: f2fs: let FI_OPU_WRITE override FADVISE_COLD_BIT d7735e03b7 ANDROID: GKI: update the ABI xml and pixel symbol list f8c9fae007 ANDROID: incfs: Add check for ATTR_KILL_SUID and ATTR_MODE in incfs_setattr 66e0726ca5 ANDROID: GKI: update vendor hook for sd 010f93525d UPSTREAM: kbuild: rename cmd_{bzip2,lzma,lzo,lz4,xzkern,zstd22} 8833039066 ANDROID: ABI: Update symbols to unisoc whitelist a3525f6e75 ANDROID: ABI: Update symbols to unisoc whitelist for sync from local code 7c0b04f044 ANDROID: ABI: Update symbols to unisoc whitelist e6c55bbd43 ANDROID: GKI: Update symbol list for sunxi a3e20edea9 ANDROID: GKI: Update symbol list ef9a35b2e6 ANDROID: ABI: Update symbols for unisoc whitelist Android13-k5.15 70a5111957 ANDROID: net: export symbol for tracepoint_consume_skb 13bedfc2f2 ANDROID: gki_defconfig: Enable CONFIG_HIBERNATION flag 32e1ff60db ANDROID: ABI: Update symbols to unisoc whitelist for sync from local code 42f39fcf09 ANDROID: GKI: update xiaomi symbol list ca319dfc39 ANDROID: Add headers to vendor_hooks.c for type visibility e85a386df9 BACKPORT: KVM: x86: avoid calling x86 emulator without a decoded instruction 6b2fb25eac ANDROID: ABI: Update symbols to unisoc whitelist 678d7a0952 BACKPORT: dm verity: set DM_TARGET_IMMUTABLE feature flag a2c2b6c914 BACKPORT: pipe: Fix missing lock in pipe_resize_ring() 3c2cc4561f FROMLIST: locking/rwsem: Disable preemption while trying for rwsem lock c82312f9b0 BACKPORT: rpmsg: virtio: Fix possible double free in rpmsg_probe() e0440af8b2 BACKPORT: rpmsg: virtio: Fix possible double free in rpmsg_virtio_add_ctrl_dev() cff4cc7a64 Revert "ANDROID: arm64: smp: fix Lockdep warning: RCU used illegally from idle CPU." 6a2905d352 FROMLIST: arm64: mte: move register initialization to C 7a67b48b62 Revert "BACKPORT: FROMLIST: ext4: implement speculative fault handling" 9f7ac5d820 Revert "FROMLIST: arm64: mte: move register initialization to C" b9f272d887 ANDROID: vendor_hooks:vendor hook for mmput c96092a914 ANDROID: GKI: Upate sunxi symbol list 5dc0a0bd6b ANDROID: remove CONFIG_TRACEPOINTS from hook definition headers ecb7d6b106 ANDROID: remove inclusions from hook definition headers ea45eaaaae BACKPORT: scsi: ufs: core: Increase fDeviceInit poll frequency c17b8c3da8 FROMGIT: f2fs: increase the limit for reserve_root 35666bb866 FROMGIT: f2fs: complete checkpoints during remount 9e14ab97fe FROMGIT: f2fs: flush pending checkpoints when freezing super b52dcd4e22 FROMGIT: f2fs: remove gc_urgent_high_limited for cleanup e4c3ce6f7d FROMGIT: f2fs: fix wrong continue condition in GC 619b99d2d4 BACKPORT: f2fs: handle decompress only post processing in softirq c119114518 BACKPORT: f2fs: introduce memory mode 3ec6819bff ANDROID: kleaf: Do not include GKI modules in default output of //common:kernel_aarch64. fe1e4c55de ANDROID: GKI: Update symbols to symbol list 08b9a0b8aa ANDROID: GKI: Update symbol list for Exynos SoC ca7f18ea25 ANDROID: ABI: Update oplus symbol list fb2bb8f3ad ANDROID: mm: Add vendor hook in rmqueue() 193dcfee4d ANDROID: abi_gki_aarch64_qcom: Update symbol list. 1cf95b1e07 ANDROID: GKI: Update symbols to symbol list e1b8ef44fd ANDROID: Revert "psi: allow unprivileged users with CAP_SYS_RESOURCE to write psi files" c9ee361850 ANDROID: abi_gki_aarch64_qcom: Add hook for set_cpus_allowed_by_task 2508098b95 ANDROID: GKI: Update symbol list 06a2fffcf3 ANDROID: GKI: Update symbol list for mtk AI-vision projects 1f0f167b62 FROMGIT: wifi: cfg80211: Add link_id to cfg80211_ch_switch_started_notify() c9375148db FROMGIT: wifi: nl80211: send MLO links channel info in GET_INTERFACE df92dc5573 FROMGIT: wifi: cfg80211: Prevent cfg80211_wext_siwencodeext() on MLD 460e2bc5da FROMGIT: wifi: cfg80211: reject connect response with MLO params for WEP cad63b2cf1 FROMGIT: wifi: cfg80211: get correct AP link chandef e6c826aa9b ANDROID: reduce number of opaque structs in KMI 0226fc2e18 ANDROID: vendor_hooks: tune reclaim inactive ratio 8de5430cb7 BACKPORT: FROMGIT: PCI: dwc: Add support for 64-bit MSI target address 8181ea8d96 BACKPORT: FROMGIT: PCI: dwc: Drop dependency on ZONE_DMA32 a8dfddb2b9 Revert "BACKPORT: FROMLIST: PCI: dwc: Drop dependency on ZONE_DMA32" c5e662db60 Revert "BACKPORT: FROMLIST: PCI: dwc: Add support for 64-bit MSI target address" ff81c8d3f5 ANDROID: GKI: create initial PASA symbol list 55f112e068 ANDROID: vendor_hooks: Add hooks for cpufreq_acct_update_power 76be364a84 BACKPORT: irq_work: use kasan_record_aux_stack_noalloc() record callstack cc724041ce ANDROID: vendor_hooks: Add hooks for oem futex optimization eb6c8ea051 BACKPORT: fuse: send security context of inode on file 05e1c47bbc UPSTREAM: security: Return xattr name from security_dentry_init_security() e8ac12a811 BACKPORT: fuse: extend init flags a43215959d BACKPORT: scsi: ufs: core: Fix missing clk change notification on host reset 773f36077b ANDROID: ABI: Dedup the repeated symbols for Unisoc c4ebf71500 FROMLIST: arm64: mte: move register initialization to C f42e2933f0 FROMLIST: ufs: allow host driver to disable wb toggling during clock scaling 8d76ae003b ANDROID: GKI: update xiaomi symbol list be69ad8227 ANDROID: Expand user_struct size. 776d084118 UPSTREAM: usb: gadget: uvc: calculate the number of request depending on framesize 26e36e62c9 UPSTREAM: usb: dwc3: gadget: increase tx fifo size for ss isoc endpoints 928bb2bbe1 UPSTREAM: usb: gadget: uvc: remove pause flag use 85791a9e63 UPSTREAM: usb: gadget: uvc: allow changing interface name via configfs 499ea1f89b UPSTREAM: usb: gadget: uvc: fix list double add in uvcg_video_pump 0db028444c ANDROID: abi_gki_aarch64_qcom: Add blk_mq_free_request b58af507bf ANDROID: GKI: Update symbols to symbol list 0312e9cd22 ANDROID: vendor_hooks:vendor hook for __alloc_pages_slowpath. 22c312bbde ANDROID: nl80211: enable reserved attributes with upstream assignments 17e63e8b13 ANDROID: fix declaration mismatch for ns_to_kernel_old_timeval 13e5af1463 ANDROID: avoid huge-page not to clear trylock-bit after shrink_page_list. b337f6e1a9 ANDROID: mm/memory_hotplug: Fix error path handling 695e36b60e ANDROID: GKI: Update symbol list for imx 4d91f7dff5 ANDROID: GKI: update xiaomi symbol list 39088bd0f1 UPSTREAM: usb: gadget: uvc: test if ep->desc is valid on ep_queue 48ffd4d42d UPSTREAM: usb: gadget: uvc: only pump video data if necessary 1b5de9bdc4 UPSTREAM: usb: gadget: uvc: only schedule stream in streaming state 75b799c801 UPSTREAM: usb: dwc3: gadget: Give some time to schedule isoc 8398037818 UPSTREAM: usb: gadget: composite: Show warning if function driver's descriptors are incomplete. 77672b2424 ANDROID: GKI: Add symbol list file for sunxi 555400c6f7 ANDROID: ABI: Update symbols to unisoc whitelist 73b352b9bc ANDROID: GKI: Update Symbol List for Vendor 175fa88bc2 ANDROID: kernel/sched: rebuild_sched_domains export 5dc0125847 ANDROID: vendor_hooks: Add hooks for page_cache_sync_ra 5a3e902fed FROMLIST: cgroup: Fix race condition at rebind_subsystems() 6aafd4a7e6 ANDROID: GKI: Update symbols to symbol list 7e1756dacc ANDROID: GKI: Add initial symbol list for amlogic 885f16fab6 ANDROID: gki_defconfig: enable CONFIG_USB_CONFIGFS_F_UVC b2a6221a18 ANDROID: GKI: Update symbols to symbol list 7fa896f92d ANDROID: GKI: Update symbols to symbol list 212c9a7426 ANDROID: ABI: Update symbols to unisoc whitelist for mmc 3st fb9c12a0f6 ANDROID: ABI: Update oplus symbol list a54b0cc492 ANDROID: Update mtktv symbol list bc2b2529f6 BACKPORT: cgroup: Fix threadgroup_rwsem <-> cpus_read_lock() deadlock a30c0961dd UPSTREAM: cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree b38034b5d5 BACKPORT: FROMLIST: PCI: dwc: Add support for 64-bit MSI target address 6c9828727f BACKPORT: FROMLIST: PCI: dwc: Drop dependency on ZONE_DMA32 cfaccedb79 BACKPORT: f2fs: do not allow to decompress files have FI_COMPRESS_RELEASED 70d1b9fe5f BACKPORT: f2fs: do not set compression bit if kernel doesn't support 66a0472aac BACKPORT: f2fs: fix to remove F2FS_COMPR_FL and tag F2FS_NOCOMP_FL at the same time b57cdff123 BACKPORT: f2fs: do not skip updating inode when retrying to flush node page db198f61d0 BACKPORT: f2fs: do not count ENOENT for error case 39886a23bb BACKPORT: f2fs: attach inline_data after setting compression d85467fdca BACKPORT: f2fs: allow compression for mmap files in compress_mode=user 0e65382de3 BACKPORT: f2fs: fix fallocate to use file_modified to update permissions consistently 0d0b29daf8 BACKPORT: f2fs: don't need inode lock for system hidden quota 089aeb07ab BACKPORT: f2fs: fix to clear dirty inode in f2fs_evict_inode() 05a794d93a BACKPORT: f2fs: avoid infinite loop to flush node pages 9449d07f3f BACKPORT: f2fs: fix to do sanity check on inline_dots inode 820c876e42 BACKPORT: f2fs: introduce data read/write showing path info 8637bc7602 BACKPORT: f2fs: fix wrong condition check when failing metapage read ffb7e4633b BACKPORT: f2fs: replace congestion_wait() calls with io_schedule_timeout() a60c2d4f12 ANDROID: vendor_hooks: Add hooks for ipa e956d16bc2 ANDROID: GKI: add restricted vendor hook for mmc fc9630b3cb ANDROID: vendor_hooks: add vendor hook for dma_heap_buffer_alloc 47351f748e ANDROID: GKI: Update symbol list for Exynos SoC f729494767 ANDROID: vendor_hook: add hooks to protect locking-tsk in cpu scheduler e5e38b46e5 ANDROID: GKI: Update symbols to symbol list 1f925159e2 ANDROID: fix kernelci issue: visibility of struct cgroup_subsys aea5730216 ANDROID: ABI: Update symbols to unisoc whitelist for sync from local code 4899ed313f ANDROID: GKI: update the ABI xml and pixel symbol list e7cbfabf82 ANDROID: export reclaim_pages 309a6bf81a ANDROID: vendor_hook: Add hook to not be stuck ro rmap lock in kswapd or direct_reclaim 4f5025129f FROMLIST: usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop d4d10fb574 Revert "FROMLIST: usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop" 2487db8d59 ANDROID: freezer: Add vendor hook to freezer for GKI purpose. 9ac0923ef5 ANDROID: user: Add vendor hook to user for GKI purpose 8b885a54ba ANDROID: GKI: Update symbol list for imx d1bc61dd85 ANDROID: android: Export symbols for invoking cpufreq_update_util() b109cefd6f FROMGIT: usb: typec: ucsi: Acknowledge the GET_ERROR_STATUS command completion 6349c3bbd5 ANDROID: GKI: add vendor hook to support emmc FFU 64ae41d79b ANDROID: GKI: Update symbols to symbol list 58c2de6dd0 ANDROID: Update symbol list of mediatek c3677a966d ANDROID: ABI: update allowed list for galaxy 6581a0bfa7 FROMLIST: usb: gadget: f_uac2: fix superspeed transfer e2c216a2af UPSTREAM: usb: gadget: f_uac2: clean up some inconsistent indenting 2b0d64ba20 UPSTREAM: wifi: cfg80211: Allow P2P client interface to indicate port authorization 5fad12ed63 UPSTREAM: bcache: move uapi header bcache.h to bcache code directory 99b2e4c942 UPSTREAM: arm64: perf: Support new DT compatibles 08f07e3d42 UPSTREAM: arm64: perf: Simplify registration boilerplate 48af748d03 UPSTREAM: arm64: perf: Support Denver and Carmel PMUs 952fbc560f ANDROID: Add symbols required for NVMe in abi_gki_aarch64_qcom ce8b55bb08 ANDROID: vendor_hooks: protect multi-mapcount pages in kernel 09ebd2be6e ANDROID: add func:do_traversal_all_lruvec in mm/memcontrol.c efbe140e82 ANDROID: vendor_hooks: account page-mapcount bf19ba7dd0 ANDROID: GKI: allow mm vendor hooks header inclusion from header files e99fffe1d4 ANDROID: Update symbol list for mtk 42f3a7e05f UPSTREAM: dma-buf: remove restriction of IOCTL:DMA_BUF_SET_NAME dbe7eb9794 ANDROID: abi_gki_aarch64_qcom: Update symbol list 1d7ab182b7 ANDROID: ABI update for virtual device virtio_gpu changes e0bf6839e7 ANDROID: mm: always destroy mmu_notifier percpu_rwsem asynchronously 3c5af3f431 UPSTREAM: kbuild: link vmlinux only once for CONFIG_TRIM_UNUSED_KSYMS (2nd attempt) a379c27044 ANDROID: ABI: Update symbols to unisoc whitelist for mmc 2st 7b610b2916 ANDROID: Update symbol list of mediatek 5b6fcb2222 UPSTREAM: kbuild: Ignore __this_module in gen_autoksyms.sh d78c536fe7 UPSTREAM: binder: fix redefinition of seq_file attributes b52b0debf7 ANDROID: Add a script to collect information about a device's dependencies af6d390801 BACKPORT: FROMLIST: wifi: cfg80211: Add link_id parameter to various key operations for MLO 359b4ecb6b ANDROID: Update symbol list for mtk 6360c456ed ANDROID: update symbol list for pixel 60714690fe ANDROID: scsi: ufs: add vendor hook to override key reprogramming cacbff013b BACKPORT: Bluetooth: L2CAP: Fix use-after-free caused by l2cap_chan_put c4fbc06424 BACKPORT: KVM: x86/mmu: fix NULL pointer dereference on guest INVPCID 6bb5d6b3f7 ANDROID: GKI: update symbol list a2f552f49c ANDROID: GKI: vendor code needs __balance_callbacks access Change-Id: Ibee4a43f0ecbddf17851d4db250e95e83800a5a2 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-01-23 12:28:00 +00:00
Greg Kroah-Hartman	a60104c6cc	Merge tag 'android13-5.15.78_r00' into android13-5.15 ... This is the merge of the upstream LTS release of 5.15.78 into the android13-5.15 branch. It contains the following commits: c73b4619ad ANDROID: abi preservation for fscrypt change in 5.15.78 1960b1e610 Merge 5.15.78 into android13-5.15-lts 7048384c98 Revert "net: macb: Specify PHY PM management done by MAC" 845a2cc2e8 Revert "perf: Fix missing SIGTRAPs" 6f88ababa4 Merge 5.15.77 into android13-5.15-lts 92f701cae0 Revert "net: phylink: add mac_managed_pm in phylink_config structure" 8d9f3b2315 Revert "arm64: errata: Remove AES hwcap for COMPAT tasks" eaa46dd972 Merge 5.15.76 into android13-5.15-lts d9d889009b ANDROID: properly copy the scm_io_uring field in struct sk_buff 16d4484281 ANDROID: fix up struct sk_buf ABI breakage 2d19e77e73 Revert "bpf: Fix reference state management for synchronous callbacks" c18696c060 Revert "tracing: Wake up ring buffer waiters on closing of the file" d122aaf804 Revert "tracing: Add ioctl() to force ring buffer waiters to wake up" dfd3aa1729 ANDROID: rename struct tcm_sock.cwnd_usage_seq to fix ABI c51f6b79ce ANDROID: rename struct task_struct.in_eventfd to fix ABI 85725fbe42 Revert "ALSA: usb-audio: Register card at the last interface" 8f38fb79b5 Revert "ALSA: usb-audio: Fix last interface check for registration" 3ebc180a96 Revert "serial: 8250: Let drivers request full 16550A feature probing" f6d7d7caaa Revert "serial: 8250: Request full 16550A feature probing for OxSemi PCIe devices" d1096112e5 Revert "usb: dwc3: core: Enable GUCTL1 bit 10 for fixing termination error after resume bug" 3447743ef1 Revert "serial: 8250: Toggle IER bits on only after irq has been set up" b049ff121c Merge 5.15.75 into android13-5.15-lts 4ec71a9ec7 ANDROID: cpu/hotplug: call perf event through function pointer 509a32764e Linux 5.15.78 7038af4ce9 wifi: brcmfmac: Fix potential buffer overflow in brcmf_fweh_event_worker() b66617cc3c drm/i915/sdvo: Setup DDC fully before output init 73d52322c4 drm/i915/sdvo: Filter out invalid outputs more sensibly 2219b6aad3 drm/rockchip: dsi: Force synchronous probe dd955eb4e6 drm/rockchip: dsi: Clean up 'usage_mode' when failing to attach cfa8a89af9 cifs: fix regression in very old smb1 mounts 3189de0ac3 ext4,f2fs: fix readahead of verity data a663e6ab17 tee: Fix tee_shm_register() for kernel TEE drivers d46db722a0 KVM: x86: emulator: update the emulation mode after CR0 write 942aec252b KVM: x86: emulator: update the emulation mode after rsm 9df4bb7b38 KVM: x86: emulator: introduce emulator_recalc_and_set_mode 311f1e51a2 KVM: x86: emulator: em_sysexit should update ctxt->mode 37a03de2d0 KVM: arm64: Fix bad dereference on MTE-enabled systems 167dca5e21 KVM: VMX: fully disable SGX if SECONDARY_EXEC_ENCLS_EXITING unavailable 19c2b2ffbe KVM: x86: Mask off reserved bits in CPUID.8000001FH 553fd40d3b KVM: x86: Mask off reserved bits in CPUID.80000001H 006366b96c KVM: x86: Mask off reserved bits in CPUID.80000008H fc796fd861 KVM: x86: Mask off reserved bits in CPUID.8000001AH ef7716398a KVM: x86: Mask off reserved bits in CPUID.80000006H a88998446b x86/syscall: Include asm/ptrace.h in syscall_wrapper header 999cff2b6c ext4: fix BUG_ON() when directory entry has invalid rec_len 0a43c015e9 ext4: fix warning in 'ext4_da_release_space' ada82803a7 parisc: Avoid printing the hardware path twice 081ff43a77 parisc: Export iosapic_serial_irq() symbol for serial port driver 5daf985dd0 parisc: Make 8250_gsc driver dependend on CONFIG_PARISC 425fe99771 perf/x86/intel: Fix pebs event constraints for SPR 4613a45017 perf/x86/intel: Add Cooper Lake stepping to isolation_ucodes[] 7de3fe6a13 perf/x86/intel: Fix pebs event constraints for ICL 71d6c33fe2 arm64: entry: avoid kprobe recursion 52be536155 efi: random: Use 'ACPI reclaim' memory for random seed 83b5ec7ee8 efi: random: reduce seed size to 32 bytes 0417f70b85 fuse: add file_modified() to fallocate 2de8eec8af capabilities: fix potential memleak on error path from vfs_getxattr_alloc() bd07f8067b tracing/histogram: Update document for KEYS_MAX size 27b4406f9c tools/nolibc/string: Fix memcmp() implementation b5074df412 ring-buffer: Check for NULL cpu_buffer in ring_buffer_wake_waiters() 85f3caa955 kprobe: reverse kp->flags when arm_kprobe failed d1b6a8e341 tracing: kprobe: Fix memory leak in test_gen_kprobe/kretprobe_cmd() 828577e0ba tcp/udp: Make early_demux back namespacified. 88561a6677 ftrace: Fix use-after-free for dynamic ftrace_ops 450d748070 btrfs: fix type of parameter generation in btrfs_get_dentry 007058eb82 btrfs: fix tree mod log mishandling of reallocated nodes 336fdd295c btrfs: fix lost file sync on direct IO write with nowait and dsync iocb cff805b151 fscrypt: fix keyring memory leak on mount failure e6f4fd85ef fscrypt: stop using keyrings subsystem for fscrypt_master_key 3975affcf5 af_unix: Fix memory leaks of the whole sk due to OOB skb. 4302806dbf block, bfq: protect 'bfqd->queued' by 'bfqd->lock' 3e4697ffdf Bluetooth: L2CAP: Fix attempting to access uninitialized memory 81035e1201 Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM d78ccdce66 i2c: piix4: Fix adapter not be removed in piix4_remove() c76ff8ae11 arm64: dts: juno: Add thermal critical trip points 7398435e61 firmware: arm_scmi: Fix devres allocation device in virtio transport 3653cdc21b firmware: arm_scmi: Make Rx chan_setup fail on memory errors e514d67b23 firmware: arm_scmi: Suppress the driver's bind attributes 4e68c5da60 block: Fix possible memory leak for rq_wb on add_disk failure bf822b6980 arm64: dts: ls208xa: specify clock frequencies for the MDIO controllers f2329886e5 arm64: dts: ls1088a: specify clock frequencies for the MDIO controllers 33fcc55dbc arm64: dts: lx2160a: specify clock frequencies for the MDIO controllers f3429a1e49 arm64: dts: imx8: correct clock order de2a83186a ARM: dts: imx6qdl-gw59{10,13}: fix user pushbutton GPIO offset cb9ce8910a clk: qcom: Update the force mem core bit for GPU clocks bdc1182496 efi/tpm: Pass correct address to memblock_reserve 3a4d6f165e i2c: xiic: Add platform module alias 62eea4014a drm/amdgpu: set vm_update_mode=0 as default for Sienna Cichlid in SRIOV case 7a2547cac2 HID: saitek: add madcatz variant of MMO7 mouse device ID 931c97a54c scsi: core: Restrict legal sdev_state transitions via sysfs c50ec15725 ACPI: APEI: Fix integer overflow in ghes_estatus_pool_init() 8ecd1db58b media: v4l: subdev: Fail graciously when getting try data for NULL state f96ad391d0 media: meson: vdec: fix possible refcount leak in vdec_probe() 8b785cdcd3 media: dvb-frontends/drxk: initialize err to 0 73dfb64213 media: cros-ec-cec: limit msg.len to CEC_MAX_MSG_SIZE cbfa26936f media: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE 647c12c47e media: rkisp1: Zero v4l2_subdev_format fields in when validating links abbeb8f727 media: rkisp1: Use correct macro for gradient registers 03b30e5a36 media: rkisp1: Initialize color space on resizer sink and source pads d58b6b665c media: rkisp1: Don't pass the quantization to rkisp1_csm_config() 0e501fd0f3 s390/cio: fix out-of-bounds access on cio_ignore free c65cc56937 s390/cio: derive cdev information only for IO-subchannels c64be93f1e s390/boot: add secure boot trailer 1cdaca8f00 s390/uaccess: add missing EX_TABLE entries to __clear_user() 509cbbdec9 mtd: parsers: bcm47xxpart: Fix halfblock reads 5b8797e9db mtd: parsers: bcm47xxpart: print correct offset on read error 2f07635876 fbdev: stifb: Fall back to cfb_fillrect() on 32-bit HCRX cards 154934c74f video/fbdev/stifb: Implement the stifb_fillrect() function b524b41806 drm/msm/hdmi: fix IRQ lifetime c55dd62001 drm/msm/hdmi: Remove spurious IRQF_ONESHOT flag d153d468c4 vsock: fix possible infinite sleep in vsock_connectible_wait_data() 0ed71af4d0 ipv6: fix WARNING in ip6_route_net_exit_late() 2b45d6d0c4 net, neigh: Fix null-ptr-deref in neigh_table_clear() 61defd6450 net/smc: Fix possible leaked pernet namespace in smc_init() de88977427 stmmac: dwmac-loongson: fix invalid mdio_node 535b78739a ibmvnic: Free rwi on reset success 985a88bf0b net: mdio: fix undefined behavior in bit shift for __mdiobus_register aa16cac06b Bluetooth: L2CAP: Fix memory leak in vhci_write a3a7b2ac64 Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del() cf2719a21f Bluetooth: virtio_bt: Use skb_put to set length 8278a87bb1 Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu 42d20d5e24 netfilter: ipset: enforce documented limit to prevent allocating huge memory f46ea5fa33 btrfs: fix ulist leaks in error paths of qgroup self tests 222a3d5330 btrfs: fix inode list leak during backref walking at find_parent_nodes() 6ba3479f9e btrfs: fix inode list leak during backref walking at resolve_indirect_refs() a80634f392 isdn: mISDN: netjet: fix wrong check of device registration 029d5b7688 mISDN: fix possible memory leak in mISDN_register_device() 3e2129c67d rose: Fix NULL pointer dereference in rose_send_frame() 06d7596d18 ipvs: fix WARNING in ip_vs_app_net_cleanup() 5ee2d6b726 ipvs: fix WARNING in __ip_vs_cleanup_batch() 33e7783bc0 ipvs: use explicitly signed chars 6044791b7b netfilter: nf_tables: release flow rule object from commit path 1ffe710041 netfilter: nf_tables: netlink notifier might race to release objects dcc79cf735 net: tun: fix bugs for oversize packet when napi frags enabled fc4b50adb4 net: sched: Fix use after free in red_enqueue() ab80025ea7 ata: pata_legacy: fix pdc20230_set_piomode() dede9ba027 net: fec: fix improper use of NETDEV_TX_BUSY 5dfdac5e3f nfc: nfcmrvl: Fix potential memory leak in nfcmrvl_i2c_nci_send() 7486f5c900 nfc: s3fwrn5: Fix potential memory leak in s3fwrn5_nci_send() 3cba1f061b nfc: nxp-nci: Fix potential memory leak in nxp_nci_send() 44bc1868a4 nfc: fdp: Fix potential memory leak in fdp_nci_send() 4bef9a89f2 net: dsa: fall back to default tagger if we can't load the one from DT 06f9e0b37f RDMA/qedr: clean up work queue on failure in qedr_alloc_resources() 6b3d5dcb12 RDMA/core: Fix null-ptr-deref in ib_core_cleanup() 9f555b1584 net: dsa: Fix possible memory leaks in dsa_loop_init() 24641993a7 nfs4: Fix kmemleak when allocate slot failed 0797c85433 NFSv4.2: Fixup CLONE dest file size for zero-length count d59722d088 SUNRPC: Fix null-ptr-deref when xps sysfs alloc failed dea7ef05de NFSv4.1: We must always send RECLAIM_COMPLETE after a reboot 7b1c2458de NFSv4.1: Handle RECLAIM_COMPLETE trunking errors 4ec017e300 NFSv4: Fix a potential state reclaim deadlock e3e53c5af5 RDMA/hns: Disable local invalidate operation 85ab79ac94 RDMA/hns: Use hr_reg_xxx() instead of remaining roce_set_xxx() be16cc7abd RDMA/hns: Remove magic number ba95409d6b IB/hfi1: Correctly move list in sc_disable() 484d969037 RDMA/cma: Use output interface for net_dev check f7d9de8a0d KVM: x86: Add compat handler for KVM_X86_SET_MSR_FILTER b7b66f13ac KVM: x86: Copy filter arg outside kvm_vm_ioctl_set_msr_filter() 0c60fa7f55 KVM: x86: Protect the unused bits in MSR exiting flags ad8e4868dd HID: playstation: add initial DualSense Edge controller support 3a44ae4afa mm/hugetlb: fix races when looking up a CONT-PTE/PMD size hugetlb page 8576d7edea drm/amd/display: explicitly disable psr_feature_enable appropriately 058b3a11f7 KVM: x86: Treat #DBs from the emulator as fault-like (code and DR7.GD=1) 9ee32892c7 KVM: x86: Trace re-injected exceptions 0c9c1306d6 serial: ar933x: Deassert Transmit Enable on ->rs485_config() 21d65b3516 scsi: lpfc: Rework MIB Rx Monitor debug info logic d70705e131 scsi: lpfc: Adjust CMF total bytes and rxmonitor 9ebc6e8ad1 scsi: lpfc: Adjust bytes received vales during cmf timer interval 793d8378b7 Linux 5.15.77 1401e9336b tcp/udp: Fix memory leak in ipv6_renew_options(). b079d37752 serial: Deassert Transmit Enable on probe in driver-specific way 63f75fea3a serial: core: move RS485 configuration tasks from drivers into core 0753069d44 can: rcar_canfd: rcar_canfd_handle_global_receive(): fix IRQ storm on global FIFO receive 17ff99e224 can: rcar_canfd: fix channel specific IRQ handling for RZ/G2L aad798a0b3 scsi: sd: Revert "scsi: sd: Remove a local variable" 52c2329147 arm64: Add AMPERE1 to the Spectre-BHB affected list 5397ea6a08 net: enetc: survive memory pressure without crashing 885a454e97 kcm: do not sense pfmemalloc status in kcm_sendpage() 92b4c5c3fa net: do not sense pfmemalloc status in skb_append_pagefrags() ae1b08592e net/mlx5: Fix crash during sync firmware reset 37ada47d01 net/mlx5: Update fw fatal reporter state on PCI handlers successful recover 9e6523d06a net/mlx5: Print more info on pci error handlers ab3de780c1 net/mlx5: Fix possible use-after-free in async command interface 8bbff203e3 net/mlx5e: Extend SKB room check to include PTP-SQ ee1c0ca1af net/mlx5e: Do not increment ESN when updating IPsec ESN state eefa97a7a0 netdevsim: remove dir in nsim_dev_debugfs_init() when creating ports dir failed c9589e18a6 net: broadcom: bcm4908_enet: update TX stats after actual transmission 9711616a49 net: broadcom: bcm4908enet: remove redundant variable bytes b317d53680 nh: fix scope used to find saddr when adding non gw nh 2ad284ac88 net: bcmsysport: Indicate MAC is in charge of PHY PM d1cfa71d5b net: ehea: fix possible memory leak in ehea_register_port() 588bdd7ee4 openvswitch: switch from WARN to pr_warn 9a1c1df925 ALSA: aoa: Fix I2S device accounting e81d7826b8 ALSA: aoa: i2sbus: fix possible memory leak in i2sbus_add_dev() 77a754fcfe net: ethernet: ave: Fix MAC to be in charge of PHY PM bc2518ec71 net: fec: limit register access on i.MX6UL f710deeea7 perf vendor events arm64: Fix incorrect Hisi hip08 L3 metrics eb59cb2fab PM: domains: Fix handling of unavailable/disabled idle states bde7c2acef net: ksz884x: fix missing pci_disable_device() on error in pcidev_init() 8927d90d56 i40e: Fix flow-type by setting GL_HASH_INSET registers c39de3ae50 i40e: Fix VF hang when reset is triggered on another VF 250bf8ab78 i40e: Fix ethtool rx-flow-hash setting for X722 ad3f1d9bf1 ipv6: ensure sane device mtu in tunnels e2ec5bb78c perf vendor events power10: Fix hv-24x7 metric events f9df388ed6 media: vivid: set num_in/outputs to 0 if not supported 4cc7d8d420 media: videodev2.h: V4L2_DV_BT_BLANKING_HEIGHT should check 'interlaced' 491c0959f0 media: v4l2-dv-timings: add sanity checks for blanking values 0f83edbe4f media: vivid: dev->bitmap_cap wasn't freed in all cases 5b1fb2a28d media: vivid: s_fbuf: add more sanity checks 3436e56337 PM: hibernate: Allow hybrid sleep to work with s2idle 3cc8c4088f can: mcp251x: mcp251x_can_probe(): add missing unregister_candev() in error path a3e09eff32 can: mscan: mpc5xxx: mpc5xxx_can_probe(): add missing put_clock() in error path 304a101616 drm/amdkfd: Fix memory leak in kfd_mem_dmamap_userptr() 2fe6b24ce2 net-memcg: avoid stalls when under memory pressure 9b171fdcbf tcp: fix indefinite deferral of RTO with SACK reneging a85d39f14a tcp: fix a signed-integer-overflow bug in tcp_add_backlog() 2437f3c5c6 tcp: minor optimization in tcp_add_backlog() ef27df7591 net: lantiq_etop: don't free skb when returning NETDEV_TX_BUSY a1e18acb02 net: fix UAF issue in nfqnl_nf_hook_drop() when ops_init() failed 62086d1c46 kcm: annotate data-races around kcm->rx_wait 342d918cf9 kcm: annotate data-races around kcm->rx_psock 6bb23225bb atlantic: fix deadlock at aq_nic_stop 4e2cbc1f0e drm/i915/dp: Reset frl trained flag before restarting FRL training 3d92ab0865 amd-xgbe: add the bit rate quirk for Molex cables 75a6d1ebf8 amd-xgbe: fix the SFP compliance codes check for DAC cables 98bada8fa0 x86/unwind/orc: Fix unreliable stack dump with gcov 88e879c9f5 nfc: virtual_ncidev: Fix memory leak in virtual_nci_send() 18c60b383d net: macb: Specify PHY PM management done by MAC 95c22fc1e8 net: hinic: fix the issue of double release MBOX callback of VF 6016d96a6a net: hinic: fix the issue of CMDQ memory leaks e6765fe8de net: hinic: fix memory leak when reading function table 62aa78a0c3 net: hinic: fix incorrect assignment issue in hinic_set_interrupt_cfg() 1e0bee973e net: netsec: fix error handling in netsec_register_mdio() 7a939503fc tipc: fix a null-ptr-deref in tipc_topsrv_accept c638b520ba perf/x86/intel/lbr: Use setup_clear_cpu_cap() instead of clear_cpu_cap() 4fdf6f978c ALSA: ac97: fix possible memory leak in snd_ac97_dev_register() b688736903 ASoC: qcom: lpass-cpu: Mark HDMI TX parity register as volatile eca851572d mtd: rawnand: intel: Add missing of_node_put() in ebu_nand_probe() 08c246c7df arc: iounmap() arg is volatile 739eac37ff sched/core: Fix comparison in sched_group_cookie_match() ca7b0a1028 perf: Fix missing SIGTRAPs eb77474a2a ASoC: qcom: lpass-cpu: mark HDMI TX registers as volatile 9b6841ab70 KVM: selftests: Fix number of pages for memory slot in memslot_modification_stress_test 59de8738ed drm/msm: Fix return type of mdp4_lvds_connector_mode_valid a560aeac2f media: atomisp: prevent integer overflow in sh_css_set_black_frame() 32f93e4608 media: v4l2: Fix v4l2_i2c_subdev_set_name function documentation 5a93a8288c net: ieee802154: fix error return code in dgram_bind() 138a13d8f5 ethtool: eeprom: fix null-deref on genl_info in dump 1c2b1d3bba mmc: block: Remove error check of hw_reset on reset 0b0d169723 Revert "scsi: lpfc: SLI path split: Refactor lpfc_iocbq" 7a0fce24de Revert "scsi: lpfc: SLI path split: Refactor fast and slow paths to native SLI4" 7a36c9de43 Revert "scsi: lpfc: SLI path split: Refactor SCSI paths" eb8be2dbfb Revert "scsi: lpfc: Fix locking for lpfc_sli_iocbq_lookup()" 065bf71a8a Revert "scsi: lpfc: Fix element offset in __lpfc_sli_release_iocbq_s4()" 97dc9076ea Revert "scsi: lpfc: Resolve some cleanup issues following SLI path refactoring" b32b766be4 s390/pci: add missing EX_TABLE entries to __pcistg_mio_inuser()/__pcilg_mio_inuser() 1ad7213fcf s390/futex: add missing EX_TABLE entry to __futex_atomic_op() ae9398e837 perf auxtrace: Fix address filter symbol name match for modules 14009ada57 ARC: mm: fix leakage of memory allocated for PTE eb9ed3343c pinctrl: Ingenic: JZ4755 bug fixes 94d2643df1 kernfs: fix use-after-free in __kernfs_remove f1204dfc4c counter: microchip-tcb-capture: Handle Signal1 read and Synapse 6fb0106c64 mmc: sdhci-esdhc-imx: Propagate ESDHC_FLAG_HS400* only on 8bit bus 73e3901e70 mmc: sdhci-pci-core: Disable ES for ASUS BIOS on Jasper Lake 1e8cd93ae5 mmc: core: Fix kernel panic when remove non-standard SDIO card 02e51e7cd1 mmc: sdhci_am654: 'select', not 'depends' REGMAP_MMIO 4c365a0c21 coresight: cti: Fix hang in cti_disable_hw() b32775e039 drm/msm/dp: fix IRQ lifetime b48949ab45 drm/msm/hdmi: fix memory corruption with too many bridges 9f035d1fb3 drm/msm/dsi: fix memory corruption with too many bridges 986a89b371 drm/amdgpu: disallow gfxoff until GC IP blocks complete s2idle resume a2f0934e6b scsi: qla2xxx: Use transport-defined speed mask for supported_speeds 2b1a3172ee mac802154: Fix LQI recording 46b4b1e11e exec: Copy oldsighand->action under spin-lock 265b6fb780 fs/binfmt_elf: Fix memory leak in load_elf_binary() 24030742a7 cpufreq: intel_pstate: hybrid: Use known scaling factor for P-cores 3423a3417f cpufreq: intel_pstate: Read all MSRs on the target CPU cc6a724984 fbdev: smscufx: Fix several use-after-free bugs 1a8b22e3f3 iio: adxl372: Fix unsafe buffer attributes 2f08cad213 iio: temperature: ltc2983: allocate iio channels once 1bfe97f497 iio: light: tsl2583: Fix module unloading 569709540e tools: iio: iio_utils: fix digit calculation c892a81c74 xhci: Remove device endpoints from bandwidth list when freeing the device dfacb5c7f0 xhci-pci: Set runtime PM as default policy on all xHC 1.2 or later devices 64058af657 xhci: Add quirk to reset host back to default state at shutdown 022f21e850 mtd: rawnand: marvell: Use correct logic for nand-keep-config f90897c0f6 usb: xhci: add XHCI_SPURIOUS_SUCCESS to ASM1042 despite being a V0.96 controller a0c54d5152 usb: bdc: change state when port disconnected e0fd70ab48 usb: dwc3: gadget: Don't set IMI for no_interrupt ad538aea64 usb: dwc3: gadget: Stop processing more requests on IMI f2f53be617 usb: gadget: uvc: fix sg handling during video encode 80ff4ef777 usb: gadget: uvc: fix sg handling in error case 555011f6b2 USB: add RESET_RESUME quirk for NVIDIA Jetson devices in RCM 311428871b ALSA: rme9652: use explicitly signed char fa8b39c7ed ALSA: au88x0: use explicitly signed char 8af82d330d ALSA: usb-audio: Add quirks for M-Audio Fast Track C400/600 259cb4dee1 ALSA: Use del_timer_sync() before freeing timer 33ddee2b95 can: kvaser_usb: Fix possible completions during init_completion 86da269c75 can: j1939: transport: j1939_session_skb_drop_old(): spin_unlock_irqrestore() before kfree_skb() ead0495627 NFSv4: Add an fattr allocation to _nfs4_discover_trunking() eb1fe9600b NFSv4: Fix free of uninitialized nfs4_label on referral lookup. 4f5365f770 Linux 5.15.76 33fc9e26b7 mm: /proc/pid/smaps_rollup: fix no vma's null-deref b9d8cbe90a mmc: core: Add SD card quirk for broken discard 0ee2f0567a Makefile.debug: re-enable debug info for .S files 117825e9bb x86/Kconfig: Drop check for -mabi=ms for CONFIG_EFI_STUB 0983205085 ACPI: video: Force backlight native for more TongFang devices 289b56715b perf: Skip and warn on unknown format 'configN' attrs 9d912a3853 mmc: sdhci-tegra: Use actual clock rate for SW tuning correction 7aeda81191 tracing: Do not free snapshot if tracer is on cmdline 57252e7bd4 tracing: Simplify conditional compilation code in tracing_set_tracer() 20bc6d23f7 ksmbd: fix incorrect handling of iterate_dir 3c8cfcaa2d ksmbd: handle smb2 query dir request for OutputBufferLength that is too small 8754fa5dbc arm64: mte: move register initialization to C ea7be82fd7 fs: dlm: fix invalid derefence of sb_lvbptr 0365d6af75 iommu/vt-d: Clean up si_domain in the init_dmars() error path 5c95d0c9d0 iommu/vt-d: Allow NVS regions in arch_rmrr_sanity_check() 209740fd13 net: phy: dp83822: disable MDI crossover status change interrupt ce1234573d net: sched: fix race condition in qdisc_graft() 91f8f5342b net: hns: fix possible memory leak in hnae_ae_register() 50c31fa952 wwan_hwsim: fix possible memory leak in wwan_hwsim_dev_new() d2fc83a6b5 sfc: include vport_id in filter spec hash and equal() c2e1e59d59 net: sched: sfb: fix null pointer access issue when sfb_init() fails 34f2a4eedc net: sched: delete duplicate cleanup of backlog and qlen 154f4c06d9 net: sched: cake: fix null pointer access issue when cake_init() fails 5efed7578d nvmet: fix workqueue MEM_RECLAIM flushing dependency 2f2b84b020 nvme-hwmon: kmalloc the NVME SMART log buffer 66c56b2328 nvme-hwmon: consistently ignore errors from nvme_hwmon_init d77f6908f9 netfilter: nf_tables: relax NFTA_SET_ELEM_KEY_END set flags requirements efa9dd7e67 ionic: catch NULL pointer issue on reconfig 35ece85866 net: hsr: avoid possible NULL deref in skb_clone() e326df21da dm: remove unnecessary assignment statement in alloc_dev() 847301f0ee cifs: Fix xid leak in cifs_ses_add_channel() 8905d13b9e cifs: Fix xid leak in cifs_flock() 27cfd3afaa cifs: Fix xid leak in cifs_copy_file_range() 593d877c39 cifs: Fix xid leak in cifs_create() a8df9d0428 udp: Update reuse->has_conns under reuseport_lock. 9749595feb scsi: lpfc: Fix memory leak in lpfc_create_port() b9122e0e0e net: phylink: add mac_managed_pm in phylink_config structure 412db9b06d net: phy: dp83867: Extend RX strap quirk for SGMII mode 5ce6130519 net/atm: fix proc_mpc_write incorrect return value 0eb17faedc sfc: Change VF mac via PF as first preference if available. 0f58940ca3 HID: magicmouse: Do not set BTN_MOUSE on double report 94a171c982 i40e: Fix DMA mappings leak dbc01c0a4e tipc: fix an information leak in tipc_topsrv_kern_subscr b294cad6f0 tipc: Fix recognition of trial period 6161c364e3 ACPI: extlog: Handle multiple records 40e5fceddf drm/vc4: Add module dependency on hdmi-codec 6c5041a103 btrfs: fix processing of delayed tree block refs during backref walking af67578d56 btrfs: fix processing of delayed data refs during backref walking c439cafce8 x86/topology: Fix duplicated core ID within a package d31f4bc225 x86/topology: Fix multiple packages shown on a single-package system fcc96e89b3 media: venus: dec: Handle the case where find_format fails b22b4823a0 media: mceusb: set timeout to at least timeout provided 5265cc1202 media: ipu3-imgu: Fix NULL pointer dereference in active selection access 1e4e71f9e1 KVM: arm64: vgic: Fix exit condition in scan_its_table() 5bf2fda26a kvm: Add support for arch compat vm ioctls 112a005d1d mm,hugetlb: take hugetlb_lock before decrementing h->resv_huge_pages 2d508b4e65 drm/amdgpu: fix sdma doorbell init ordering on APUs b5606e3ab1 cpufreq: qcom: fix memory leak in error path d866f5982c x86/resctrl: Fix min_cbm_bits for AMD 8fbe13de1c ata: ahci: Match EM_MAX_SLOTS with SATA_PMP_MAX_PORTS 5d6a037b3a ata: ahci-imx: Fix MODULE_ALIAS 30cf0dee37 hwmon/coretemp: Handle large core ID value 2f7171465f x86/microcode/AMD: Apply the patch early on every logical thread 93d7e2b47a i2c: qcom-cci: Fix ordering of pm_runtime_xx and i2c_add_adapter 14d260f94f cpufreq: qcom: fix writes in read-only memory region 3006766d24 selinux: enable use of both GFP_KERNEL and GFP_ATOMIC in convert_context() 1b31cb0065 ocfs2: fix BUG when iput after ocfs2_mknod fails e469db818e ocfs2: clear dinode links count in case of error ded9d535be btrfs: enhance unsupported compat RO flags handling 537412c547 perf/x86/intel/pt: Relax address filter validation 8ddc58e0e3 arm64: errata: Remove AES hwcap for COMPAT tasks 738515cf8b usb: gadget: uvc: improve sg exit condition db11d8c72a usb: gadget: uvc: giveback vb2 buffer on req complete aee340dccf usb: gadget: uvc: rework uvcg_queue_next_buffer to uvcg_complete_buffer 2f54ce7392 usb: gadget: uvc: use on returned header len in video_encode_isoc_sg d80db2f145 usb: gadget: uvc: consistently use define for headerlen f9681a6750 arm64/mm: Consolidate TCR_EL1 fields 5b20aacff7 r8152: add PID for the Lenovo OneLink+ Dock bd8a595958 Linux 5.15.75 b6e2c54be3 io-wq: Fix memory leak in worker creation 7c359e2849 gcov: support GCC 12.1 and newer compilers 8418c1672c thermal: intel_powerclamp: Use first online CPU as control_cpu 55c824b620 ext4: continue to expand file system when the target size doesn't reach 0e63de6d7e lib/Kconfig.debug: Add check for non-constant .{s,u}leb128 support to DWARF5 84cd0b20fa Kconfig.debug: add toolchain checks for DEBUG_INFO_DWARF_TOOLCHAIN_DEFAULT 371aaf6b48 Kconfig.debug: simplify the dependency of DEBUG_INFO_DWARF4/5 e1591557e3 drm/amd/display: Fix build breakage with CONFIG_DEBUG_FS=n 34f31a2b66 net/ieee802154: don't warn zero-sized raw_sendmsg() de904d0fe1 Revert "net/ieee802154: reject zero-sized raw_sendmsg()" 9c65eef9d6 net: ethernet: ti: davinci_mdio: fix build for mdio bitbang uses d7eadffce0 blk-wbt: fix that 'rwb->wc' is always set to 1 in wbt_init() 28787ff9fb ALSA: usb-audio: Fix last interface check for registration b8989e95d7 net: ieee802154: return -EINVAL for unknown addr type 0db2efb3bf mm: hugetlb: fix UAF in hugetlb_handle_userfault 98aada6e22 io_uring/rw: fix unexpected link breakage d6b7efc722 io_uring/rw: fix error'ed retry return values e857457c6f io_uring/rw: fix short rw error handling cd148d4e31 io_uring: correct pinned_vm accounting 813d8fe5d3 io_uring/af_unix: defer registered files gc to io_uring release c69a2324fc perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc e81bf40b28 clk: bcm2835: Round UART input clock up da17cbb229 clk: bcm2835: Make peripheral PLLC critical 20b8c456df usb: idmouse: fix an uninit-value in idmouse_open ec8adf767e nvmet-tcp: add bounds check on Transfer Tag 1c64328840 nvme: copy firmware_rev on each init b9b5560b34 ext2: Use kvmalloc() for group descriptor array 8c067a3051 scsi: tracing: Fix compile error in trace_array calls when TRACING is disabled 39bef9c6a9 staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv() b4573a2bad staging: rtl8723bs: fix potential memory leak in rtw_init_drv_sw() eb24d93e3e Revert "usb: storage: Add quirk for Samsung Fit flash" 3a38985d8b usb: dwc3: core: Enable GUCTL1 bit 10 for fixing termination error after resume bug 9d4f84a15f arm64: dts: imx8mp: Add snps,gfladj-refclk-lpm-sel quirk to USB nodes 3c84c7f592 usb: musb: Fix musb_gadget.c rxstate overflow bug fcd594da0b usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info() 9e86dffd0b md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d f8e80792c1 eventfd: guard wake_up in eventfd fs calls as well c61786dc72 HID: roccat: Fix use-after-free in roccat_read() f7f425d61d soundwire: intel: fix error handling on dai registration issues 093a5463ae soundwire: cadence: Don't overwrite msg->buf during write commands 1b4ed920b2 bcache: fix set_at_max_writeback_rate() for multiple attached devices eecb5ccc84 ata: libahci_platform: Sanity check the DT child nodes number 70b2adb1d6 blk-throttle: prevent overflow while calculating wait time ff8551d411 staging: vt6655: fix potential memory leak 7c8bc37465 power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type() 3d69461807 iommu/arm-smmu-v3: Make default domain type of HiSilicon PTT device to identity c0d73be0af nbd: Fix hung when signal interrupts nbd_start_device_ioctl() 9d54de8660 scsi: 3w-9xxx: Avoid disabling device if failing to enable it d68da10b0c dmaengine: ti: k3-udma: Reset UDMA_CHAN_RT byte counters to prevent overflow 518a2a1cc3 usb: host: xhci-plat: suspend/resume clks for brcm f002aa7c0a usb: host: xhci-plat: suspend and resume clocks 6bcd745c87 clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate 5c32cbf6cc media: platform: fix some double free in meson-ge2d and mtk-jpeg and s5p-mfc 6f21976095 media: cx88: Fix a null-ptr-deref bug in buffer_prepare() 0a07b13af0 clk: zynqmp: Fix stack-out-of-bounds in strncpy` 3680442cba ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n 4a89c0befc btrfs: don't print information about space cache or tree every remount 39a07058c7 btrfs: scrub: try to fix super block errors f3857dd7c0 btrfs: dump extra info if one free space cache has more bitmaps than it should d3c6d5be46 arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply 82046b6a84 kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT 3536541733 ARM: dts: imx6sx: add missing properties for sram 602813650c ARM: dts: imx6sll: add missing properties for sram 6a12e1e23c ARM: dts: imx6sl: add missing properties for sram 8c24dc621b ARM: dts: imx6qp: add missing properties for sram 47666b9a11 ARM: dts: imx6dl: add missing properties for sram 19fe40c518 ARM: dts: imx6q: add missing properties for sram 9361ba7791 ARM: dts: imx7d-sdb: config the max pressure for tsc2046 0f90671ff9 drm/amd/display: Remove interface for periodic interrupt 1 88fd067406 drm/dp: Don't rewrite link config when setting phy test pattern 668806a826 mmc: sdhci-msm: add compatible string check for sdm670 587c7da877 drm/meson: explicitly remove aggregate driver at module unload time d76ff04a72 drm/meson: reorder driver deinit sequence to fix use-after-free bug d894db3561 drm/amdgpu: fix initial connector audio value e3675f688d ASoC: SOF: pci: Change DMI match info to support all Chrome platforms f16e1b7b39 platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading 39da49ffa2 platform/chrome: cros_ec: Notify the PM of wake events during resume 7463604784 drm: panel-orientation-quirks: Add quirk for Anbernic Win600 2810061452 drm/vc4: vec: Fix timings for VEC modes 0506c4eae9 ALSA: usb-audio: Register card at the last interface 39d7a81bbb drm: bridge: dw_hdmi: only trigger hotplug event on link change dfbed8c92e udmabuf: Set ubuf->sg = NULL if the creation of sg table fails a47d92c74b drm/amd/display: fix overflow on MIN_I64 definition a29f742704 gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init() 5ff7bec678 drm/komeda: Fix handling of atomic commits in the atomic_commit_tail hook ca163e389f drm: Prevent drm_copy_field() to attempt copying a NULL pointer df5ac93926 drm: Use size_t type for len variable in drm_copy_field() 5ab84b1596 drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc() b3179865cf r8152: Rate limit overflow messages d1e894f950 Bluetooth: L2CAP: Fix user-after-free 124b7c7732 net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory 5b94d48898 hwmon: (sht4x) do not overflow clamping operation on 32-bit platforms a269c3e390 wifi: rt2x00: correctly set BBP register 86 for MT7620 b5e6ada5a5 wifi: rt2x00: set SoC wmac clock register 357c89074a wifi: rt2x00: set VGC gain for both chains of MT7620 92e2e04da5 wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620 4304b8e075 wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620 4a5eab200e can: bcm: check the result of can_send() in bcm_can_tx() 3423a50fa0 Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times 3ac837cef1 Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create() af46b2b9b0 wifi: mt76: mt7921: reset msta->airtime_ac while clearing up hw value e33da263e9 regulator: core: Prevent integer underflow d58c8781c0 Bluetooth: btintel: Mark Intel controller to support LE_STATES quirk 232d59eca0 wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit() 37f15edba2 iavf: Fix race between iavf_close and iavf_reset_task 0315568019 xfrm: Update ipcomp_scratches with NULL when freed 716c526d66 thunderbolt: Add back Intel Falcon Ridge end-to-end flow control workaround b1b4144508 wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg() 839f563c5d x86/mce: Retrieve poison range from hardware 1663629bc3 tcp: annotate data-race around tcp_md5sig_pool_populated 7b03296b4f openvswitch: Fix overreporting of drops in dropwatch ffd7a1dcae openvswitch: Fix double reporting of drops in dropwatch d449d00a8d net: ethernet: ti: davinci_mdio: Add workaround for errata i2329 624f03a027 ice: set tx_tstamps when creating new Tx rings via ethtool 2e52d858de bpftool: Clear errno after libcap's checks 75995ce1c9 wifi: brcmfmac: fix invalid address access when enabling SCAN log level 83b9496975 NFSD: fix use-after-free on source server when doing inter-server copy 118dc74b2b NFSD: Return nfserr_serverfault if splice_ok but buf->pages have data 066b1302f2 x86/entry: Work around Clang __bdos() bug 06c56c9d5d ACPI: x86: Add a quirk for Dell Inspiron 14 2-in-1 for StorageD3Enable 6733222f2c ARM: decompressor: Include .data.rel.ro.local 5614908434 thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash 139bbbd011 powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue a1387ae83e MIPS: BCM47XX: Cast memcmp() of function to (void *) c2790fede9 cpufreq: intel_pstate: Add Tigerlake support in no-HWP mode 30eca146c8 ACPI: tables: FPDT: Don't call acpi_os_map_memory() on invalid phys address 5374638222 ACPI: video: Add Toshiba Satellite/Portege Z830 quirk 7ed95b0803 rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE() cf38a05eb1 rcu: Back off upon fill_page_cache_func() allocation failure 3e2d8b89f0 rcu: Avoid triggering strict-GP irq-work when RCU is idle 27d3e646dd fs: dlm: fix race in lowcomms b6b87460f4 selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle 497d736784 f2fs: fix to account FS_CP_DATA_IO correctly fb1dcc2a9e f2fs: fix race condition on setting FI_NO_EXTENT flag 6ddbd411a0 ACPI: APEI: do not add task_work to kernel thread to avoid memory leak 21f1ba52b8 thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id 172c8a24fc crypto: cavium - prevent integer overflow loading firmware 12acfa1059 crypto: marvell/octeontx - prevent integer overflows c963ce2fa0 kbuild: rpm-pkg: fix breakage when V=1 is used 059ce6b68b kbuild: remove the target in signal traps when interrupted 1e9c23db31 tracing/osnoise: Fix possible recursive locking in stop_per_cpu_kthreads 84795de93e tracing: kprobe: Make gen test module work in arm and riscv 867fce09aa tracing: kprobe: Fix kprobe event gen test module on exit a9990f24ad iommu/iova: Fix module config properly f0cac6cc02 cifs: return correct error in ->calc_signature() 1f1ab76e25 crypto: qat - fix DMA transfer direction 393307b99a crypto: inside-secure - Change swab to swab32 93538944ab crypto: ccp - Release dma channels before dmaengine unrgister 779a9930f3 crypto: akcipher - default implementation for setting a private key 0c7043a5b5 iommu/omap: Fix buffer overflow in debugfs 046803b74d cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset 771d8aa02d crypto: hisilicon/qm - fix missing put dfx access 9bf3ec61a2 crypto: qat - fix default value of WDT timer 3bfc220e5c hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear() 507128a0e3 cgroup: Honor caller's cgroup NS when resolving path 8ffe511b7d hwrng: arm-smccc-trng - fix NO_ENTROPY handling 2720934713 crypto: hisilicon/zip - fix mismatch in get/set sgl_sge_nr e0b4ebf598 crypto: sahara - don't sleep when in softirq 8484023b57 powerpc/pseries/vas: Pass hw_cpu_id to node associativity HCALL 7f536a8cb6 powerpc/kprobes: Fix null pointer reference in arch_prepare_kprobe() 1f98f8f435 powerpc: Fix SPE Power ISA properties for e500v1 platforms 72c5b7110f powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5 399afe92f6 x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition 592b302d8b powerpc: Fix fallocate and fadvise64_64 compat parameter combination 61af84b3db powerpc/powernv: add missing of_node_put() in opal_export_attrs() 5be9cb6c06 powerpc/pci_dn: Add missing of_node_put() 5a13d3f1af powerpc/sysdev/fsl_msi: Add missing of_node_put() b0c0490b3c powerpc/math_emu/efp: Include module.h 93379dc92d powerpc/configs: Properly enable PAPR_SCM in pseries_defconfig 25a4fb0e1a mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg b8fcd9ab0f mailbox: mpfs: account for mbox offsets while sending ba22643595 mailbox: mpfs: fix handling of the reg property fad007a315 clk: ast2600: BCLK comes from EPLL 3441076f83 clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe 9209e6bab7 clk: imx: scu: fix memleak on platform_device_add() fails bdf72f2d64 clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration e338131e98 clk: baikal-t1: Add SATA internal ref clock buffer 35b7660275 clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent b2db8b2c53 clk: baikal-t1: Fix invalid xGMAC PTP clock divider 435a8a39c6 clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD b0bc75fe67 spmi: pmic-arb: correct duplicate APID to PPID mapping logic faabbb103d usb: mtu3: fix failed runtime suspend in host only mode 57f66534a4 dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup() 8aa96c5bc3 clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent 2dafc5afd9 mfd: sm501: Add check for platform_driver_register() d43d93dbd8 mfd: fsl-imx25: Fix check for platform_get_irq() errors b940bb3c81 mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init() 0715005c48 mfd: lp8788: Fix an error handling path in lp8788_probe() aec1f073f9 mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq() 53bfc1c3c7 mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe() 2f921d62c2 fsi: core: Check error number after calling ida_simple_get 041c79f6ae RDMA/rxe: Fix resize_finish() in rxe_queue.c 959d4ee095 clk: qcom: gcc-sm6115: Override default Alpha PLL regs 8e556f5573 clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical a26b065875 scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername() e87fb1fcf8 scsi: iscsi: Run recv path from workqueue c2af03a7c1 scsi: iscsi: Add recv workqueue helpers d6aafc21be scsi: iscsi: Rename iscsi_conn_queue_work() e45a1516d2 scsi: libsas: Fix use-after-free bug in smp_execute_task_sg() 6a54f76974 serial: 8250: Fix restoring termios speed after suspend a5dba09338 firmware: google: Test spinlock on panic path to avoid lockups 60d14575d0 slimbus: qcom-ngd-ctrl: allow compile testing without QCOM_RPROC_COMMON f19e5b7df5 staging: vt6655: fix some erroneous memory clean-up loops 433c33c554 phy: qualcomm: call clk_disable_unprepare in the error handling c4293def88 tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown a91a3c2d8d serial: 8250: Toggle IER bits on only after irq has been set up 6be8e565a4 drivers: serial: jsm: fix some leaks in probe 1d05df7757 usb: gadget: function: fix dangling pnp_string in f_printer.c ed2c66b752 xhci: Don't show warning for reinit on known broken suspend 4d7d8f5cb2 IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers e221b4f16e RDMA/cm: Use SLID in the work completion as the DLID in responder side 7a37c58ee7 md/raid5: Remove unnecessary bio_put() in raid5_read_one_chunk() b467d9460e md/raid5: Ensure stripe_fill happens on non-read IO with journal 5d8259c9d1 md: Replace snprintf with scnprintf 9e92d5ca54 mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct() 058833dbeb ata: fix ata_id_has_dipm() dad910a6d4 ata: fix ata_id_has_ncq_autosense() 21faddeff7 ata: fix ata_id_has_devslp() 204cc767dc ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting() 5c75d608fa RDMA/siw: Fix QP destroy to wait for all references dropped. 308cd50f17 RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall. e58a0b9100 RDMA/srp: Fix srp_abort() dc9e4ef6b0 RDMA/irdma: Align AE id codes to correct flush code and event 84ce1a8e36 mtd: rawnand: fsl_elbc: Fix none ECC mode be424a7d53 mtd: rawnand: intel: Remove undocumented compatible string 445395900b mtd: rawnand: intel: Read the chip-select line from the correct OF node cbbf9cca47 phy: phy-mtk-tphy: fix the phy type setting issue e4be7c9495 phy: amlogic: phy-meson-axg-mipi-pcie-analog: Hold reference returned by of_get_parent() 88263152ff mtd: devices: docg3: check the return value of devm_ioremap() in the probe a0e4ac6988 clk: qcom: sm6115: Select QCOM_GDSC aecb632674 dyndbg: drop EXPORTed dynamic_debug_exec_queries 0d4421f2cb dyndbg: let query-modname override actual module name 0c0d9f38b0 dyndbg: fix module.dyndbg handling 49d85932f7 dyndbg: fix static_branch manipulation 7cb9b20941 dmaengine: hisilicon: Add multi-thread support for a DMA channel b88630d9aa dmaengine: hisilicon: Fix CQ head update e84aeeafe8 dmaengine: hisilicon: Disable channels when unregister hisi_dma b94605f5cb fpga: prevent integer overflow in dfl_feature_ioctl_set_irq() 11bd8bbdf8 misc: ocxl: fix possible refcount leak in afu_ioctl() c23c5e1845 RDMA/rxe: Fix the error caused by qp->sk f2f405af70 RDMA/rxe: Fix "kernel NULL pointer dereference" error 2ea7caa968 media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init 23624abbc9 media: uvcvideo: Use entity get_cur in uvc_ctrl_set 6c5da92103 media: uvcvideo: Fix memory leak in uvc_gpio_parse 4e2042f1ad media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start() aeffca4344 tty: xilinx_uartps: Fix the ignore_status a8d772c7b8 media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop 6225501072 HSI: omap_ssi_port: Fix dma_map_sg error check 691f23a847 HSI: omap_ssi: Fix refcount leak in ssi_probe d6e750535b clk: tegra20: Fix refcount leak in tegra20_clock_init e7a57fb92a clk: tegra: Fix refcount leak in tegra114_clock_init 417ed4432b clk: tegra: Fix refcount leak in tegra210_clock_init ca5f338ef1 clk: sprd: Hold reference returned by of_get_parent() 49343bdf95 clk: berlin: Add of_node_put() for of_get_parent() 857b719bed clk: qoriq: Hold reference returned by of_get_parent() a8cbce0305 clk: oxnas: Hold reference returned by of_get_parent() e0001a565c clk: meson: Hold reference returned by of_get_parent() e900ec4c4f usb: common: debug: Check non-standard control requests c11f48764c RDMA/mlx5: Don't compare mkey tags in DEVX indirect mkey cd35ad9a7d iio: magnetometer: yas530: Change data type of hard_offsets to signed 23fafc2e2c iio: ABI: Fix wrong format of differential capacitance channel ABI. 8169da520e iio: inkern: fix return value in devm_of_iio_channel_get_by_name() 504e8807fe iio: inkern: only release the device node when done with it b0d4fcc3ec iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume 5db9b840ac iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq c5c63736d2 iio: adc: at91-sama5d2_adc: check return status for pressure and touch 5f1654a0e5 iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX 017cf3b0a6 ARM: dts: exynos: fix polarity of VBUS GPIO of Origen 6c93b683ce arm64: ftrace: fix module PLTs with mcount bbf64eb102 ext4: don't run ext4lazyinit for read-only filesystems 7a00a23207 ARM: Drop CMDLINE_* dependency on ATAGS 2af04fe87e ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family 2134214bc4 arm64: dts: ti: k3-j7200: fix main pinmux range 7247a1d7a4 soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA 4f7892f242 ia64: export memory_add_physaddr_to_nid to fix cxl build error 2ef01657b2 ARM: dts: kirkwood: lsxl: remove first ethernet port bf7caa3c5c ARM: dts: kirkwood: lsxl: fix serial line 42ce4c73a4 ARM: dts: turris-omnia: Fix mpp26 pin name and comment 96d8f2b43e ARM: dts: imx6qdl-kontron-samx6i: hook up DDC i2c bus 08ada28d1d soc: qcom: smem_state: Add refcounting for the 'state->of_node' 96e0028deb soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe() a29b6eb959 locks: fix TOCTOU race when granting write lease 7e053784c4 memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings() 2680690f9c memory: of: Fix refcount leak bug in of_get_ddr_timings() 566b143aa5 memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe() 10df962300 ALSA: hda/hdmi: Don't skip notification handling during PM operation cc756b79a5 ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe f9cb3bd557 ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe b7dda65fa8 ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe b2bc9fc56a ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe 3c3ef19a88 mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe() b14dc26227 ALSA: dmaengine: increment buffer pointer atomically f5f1f5ee50 ASoC: da7219: Fix an error handling path in da7219_register_dai_clks() f910aca076 ASoC: codecs: tx-macro: fix kcontrol put b47a37ad4a drm/vmwgfx: Fix memory leak in vmw_mksstat_add_ioctl() bdf54d4b00 drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa() 635e7700c5 drm/msm/dpu: index dpu_kms->hw_vbif using vbif_idx 4f85988467 ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API 64545b8a96 mmc: au1xmmc: Fix an error handling path in au1xmmc_probe() 3ba3814c00 drm/amdgpu: Fix memory leak in hpd_rx_irq_create_workqueue() a5ce83e85d drm/omap: dss: Fix refcount leak bugs f5f599daa0 drm/bochs: fix blanking 928ac9fc1a ALSA: hda: beep: Simplify keep-power-at-enable behavior fbb88a7c84 ASoC: rsnd: Add check for rsnd_mod_power_on 4610e7a411 drm/bridge: megachips: Fix a null pointer dereference bug 079c550c57 drm/amdgpu: add missing pci_disable_device() in amdgpu_pmops_runtime_resume() c12daccc90 platform/chrome: cros_ec_typec: Correct alt mode index c317d2b8a4 platform/x86: msi-laptop: Fix resource cleanup 0e21d41bc7 platform/x86: msi-laptop: Fix old-ec check for backlight registering 6bc81c1b63 ASoC: tas2764: Fix mute/unmute e644497c53 ASoC: tas2764: Drop conflicting set_bias_level power setting 35bd912ed6 ASoC: tas2764: Allow mono streams fd1d3b2657 platform/chrome: fix memory corruption in ioctl 27bb672c04 platform/chrome: fix double-free in chromeos_laptop_prepare() 57dfb855bc ASoC: mt6359: fix tests for platform_get_irq() failure 8a475a7732 drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node() 56d2233cf5 drm/dp_mst: fix drm_dp_dpcd_read return value checks fe6eb3d0c8 drm/bridge: parade-ps8640: Fix regulator supply order 60630834fa drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling 26c1b4cfe5 drm/mipi-dsi: Detach devices when removing the host 652042135e drm/bridge: Avoid uninitialized variable warning f369fb4dee drm: bridge: adv7511: unregister cec i2c device after cec adapter 20609125b8 drm: bridge: adv7511: fix CEC power down control register offset a624161ebe net: mvpp2: fix mvpp2 debugfs leak 7aef5082c5 once: add DO_ONCE_SLOW() for sleepable contexts 77bfd26cbb net/ieee802154: reject zero-sized raw_sendmsg() dc4e9cd6d6 net: wwan: iosm: Call mutex_init before locking it 0b6516a4e3 bnx2x: fix potential memory leak in bnx2x_tpa_stop() 30bfa5aa72 net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks() f828333ca9 hwmon: (pmbus/mp2888) Fix sensors readouts for MPS Multi-phase mp2888 controller c91b922b41 spi: Ensure that sg_table won't be used after being freed 49d429760d tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited 19d636b663 sctp: handle the error returned from sctp_auth_asoc_init_active_key 7bfa18b05f mISDN: fix use-after-free bugs in l1oip timer handlers 6f1991a940 eth: alx: take rtnl_lock on resume e28a4e7f02 vhost/vsock: Use kvmalloc/kvfree for larger packets. 5dbdd690ed wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM 432eecffcf spi: s3c64xx: Fix large transfers with DMA 1454a26cb1 netfilter: nft_fib: Fix for rpath check with VRF devices 7d98b26684 xfrm: Reinject transport-mode packets through workqueue 397e880acf Bluetooth: hci_core: Fix not handling link timeouts propertly 1331d3e1f9 i2c: mlxbf: support lock mechanism 9233ab8198 skmsg: Schedule psock work if the cached skb exists on the psock 44f1dc2e82 spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe daa5239ea4 spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe 6b94115186 x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype 3c27a13807 x86/microcode/AMD: Track patch allocation size explicitly 3e2b805a68 wifi: ath11k: fix number of VHT beamformee spatial streams 5a6827cdc2 netfilter: conntrack: revisit the gc initial rescheduling bias 9c39ca418b netfilter: conntrack: fix the gc rescheduling delay b8917dce21 Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure c087c35292 bpf: Ensure correct locking around vulnerable function find_vpid() a0f15af17b net: fs_enet: Fix wrong check in do_pd_setup ee7c5e814f Bluetooth: RFCOMM: Fix possible deadlock on socket shutdown/release 57d4f2f8a6 wifi: mt76: mt7915: do not check state before configuring implicit beamform dea9093f24 wifi: mt76: mt7615: add mt7615_mutex_acquire/release in mt7615_sta_set_decap_offload 817e8b75ae wifi: mt76: sdio: fix transmitting packet hangs 5dc095a37f wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask 9973f78c19 wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration 5d9222c680 bpf: btf: fix truncated last_member_type_id in btf_struct_resolve 4ce47c5545 spi: meson-spicc: do not rely on busy flag in pow2 clk ops 36c484bac9 wifi: rtl8xxxu: Fix skb misuse in TX queue selection fefd2269e6 spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime() e22f649918 spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume() 37005a9486 selftests/xsk: Avoid use-after-free on ctx 69995c64e5 wifi: rtw88: add missing destroy_workqueue() on error path in rtw_core_init() 6f9484e969 wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse() d091771f51 Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend f91e25cfa5 bpf: Use this_cpu_{inc|dec|inc_return} for bpf_task_storage_busy 0e13425104 bpf: Propagate error from htab_lock_bucket() to userspace 0b00c6130c bpf: Disable preemption when increasing per-cpu map_locked 68ab769033 xsk: Fix backpressure mechanism on Tx 0559a6d96a x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register e962e458bf spi: mt7621: Fix an error message in mt7621_spi_probe() 0a16bbc8b0 bpftool: Fix a wrong type cast in btf_dumper_int 6e8eadfa9b wifi: mac80211: allow bw change during channel switch in mesh 4ed5155043 bpf: Fix reference state management for synchronous callbacks 3d0a101e71 leds: lm3601x: Don't use mutex after it was destroyed 54a3201f3c wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state() 714536ff6f wifi: rtlwifi: 8192de: correct checking of IQK reload 80a474502e NFSD: Fix handling of oversized NFSv4 COMPOUND requests dc7f225090 NFSD: Protect against send buffer overflow in NFSv2 READDIR cedaf73c8b SUNRPC: Fix svcxdr_init_encode's buflen calculation 6b55707ff8 SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation aed8816305 nfsd: Fix a memory leak in an error handling path 5c4b234c44 objtool: Preserve special st_shndx indexes in elf_update_symbol 425a2a9469 ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE 2647b20e04 ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd() 93296e7ab7 MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create() 993b13abde MIPS: SGI-IP27: Free some unused memory 959855093f sh: machvec: Use char[] for section boundaries 91fafd22f8 thermal: cpufreq_cooling: Check the policy first in cpufreq_cooling_register() 81fb3ee298 ntfs3: rework xattr handlers and switch to POSIX ACL VFS helpers 33d478eee2 userfaultfd: open userfaultfds with O_RDONLY 10918ebecd ima: fix blocking of security.ima xattrs of unsupported algorithms b7af9b8be8 selinux: use "grep -E" instead of "egrep" 73b8218ef4 smb3: must initialize two ACL struct fields to zero adf428ae46 drm/amd/display: Fix vblank refcount in vrr transition 60a5174525 drm/i915: Fix watermark calculations for gen12+ CCS+CC modifier 01bd3eaa53 drm/i915: Fix watermark calculations for gen12+ MC CCS modifier 20018a252f drm/i915: Fix watermark calculations for gen12+ RC CCS modifier 861f085f81 drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table() 446d40e2a8 drm/nouveau/kms/nv140-: Disable interlacing 4dab0d27a4 staging: greybus: audio_helper: remove unused and wrong debugfs usage 28eb4bdb23 KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS 4f7b1e7d0f KVM: nVMX: Don't propagate vmcs12's PERF_GLOBAL_CTRL settings to vmcs02 be1a6a61f1 KVM: nVMX: Unconditionally purge queued/injected events on nested "exit" 379de01906 KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility e3e5baa368 blk-wbt: call rq_qos_add() after wb_normal is initialized e8e0a6f4b8 media: cedrus: Fix endless loop in cedrus_h265_skip_bits() b76fac61c3 media: cedrus: Set the platform driver data earlier b19254eada efi: libstub: drop pointless get_memory_map() call 5cda4a11b4 thunderbolt: Explicitly enable lane adapter hotplug events at startup d9c79fbcbd tracing: Fix reading strings from synthetic events b9ab154d22 tracing: Add "(fault)" name injection to kernel probes 8ae88c4842 tracing: Move duplicate code of trace_kprobe/eprobe.c into header 84f4be2093 tracing: Add ioctl() to force ring buffer waiters to wake up 32eb54a986 tracing: Wake up waiters when tracing is disabled 2475de2bc0 tracing: Wake up ring buffer waiters on closing of the file 48272aa48d tracing: Disable interrupt or preemption before acquiring arch_spinlock_t d4ab9bc5f5 ring-buffer: Fix race between reset page and reading page be60f698c2 ring-buffer: Add ring_buffer_wake_waiters() 5201dd81ae ring-buffer: Check pending waiters when doing wake ups as well bc6d4e9d64 ring-buffer: Have the shortest_full queue be the shortest not longest e8d1167385 ring-buffer: Allow splice to read previous partially read pages fb96b7489f ftrace: Properly unset FTRACE_HASH_FL_MOD 31dc1727c1 livepatch: fix race between fork and KLP transition 36997b75bb ext4: update 'state->fc_regions_size' after successful memory allocation 417b0455a0 ext4: fix potential memory leak in ext4_fc_record_regions() 9b5eb368a8 ext4: fix potential memory leak in ext4_fc_record_modified_inode() ef1607c991 ext4: fix miss release buffer head in ext4_fc_write_inode d29fa1ab4e ext4: fix dir corruption when ext4_dx_add_entry() fails d12471b416 ext4: place buffer head allocation before handle start 46e5f470a1 ext4: ext4_read_bh_lock() should submit IO if the buffer isn't uptodate 1f5e643b38 ext4: don't increase iversion counter for ea_inodes dd366295d1 ext4: fix check for block being out of directory size 4a967fe8b0 ext4: make ext4_lazyinit_thread freezable 533c60a0b9 ext4: fix null-ptr-deref in ext4_write_info d8e4af8314 ext4: avoid crash when inline data creation follows DIO write 56fcd0788f jbd2: add miss release buffer head in fc_do_one_pass() d11d2ded29 jbd2: fix potential use-after-free in jbd2_fc_wait_bufs e7385c868e jbd2: fix potential buffer head reference count leak d87fe290a5 jbd2: wake up journal waiters in FIFO order, not LIFO 7434626c5e hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero 095493833b hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO 73687c5391 f2fs: fix to do sanity check on summary info ed854f10e6 f2fs: fix to do sanity check on destination blkaddr during recovery 7f10357c90 f2fs: increase the limit for reserve_root 0035b84223 f2fs: flush pending checkpoints when freezing super ab49589754 f2fs: complete checkpoints during remount 0a408c6212 btrfs: set generation before calling btrfs_clean_tree_block in btrfs_init_new_buffer 4b996a3014 btrfs: fix race between quota enable and quota rescan ioctl 0d94230343 fs: record I_DIRTY_TIME even if inode already has I_DIRTY_INODE 95a520b591 ksmbd: Fix user namespace mapping a19f316406 ksmbd: Fix wrong return value and message length check in smb2_ioctl() 39b6855628 ksmbd: fix endless loop when encryption for response fails 2b0897e336 fbdev: smscufx: Fix use-after-free in ufx_ops_open() aa7b2c927e pinctrl: rockchip: add pinmux_ops.gpio_set_direction callback 5d97378b36 gpio: rockchip: request GPIO mux to pinctrl when setting direction e0b1c16fda scsi: qedf: Populate sysfs attributes for vport 1d567179f2 slimbus: qcom-ngd: cleanup in probe error path fa0aab2e45 slimbus: qcom-ngd: use correct error in message of pdr_add_lookup() failure ba2159df18 powerpc/boot: Explicitly disable usage of SPE instructions 9df2a9cdad powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain 75d9de25a6 NFSD: Protect against send buffer overflow in NFSv3 READ 2be9331ca6 NFSD: Protect against send buffer overflow in NFSv2 READ 071a076fd1 NFSD: Protect against send buffer overflow in NFSv3 READDIR 209a94c519 serial: 8250: Request full 16550A feature probing for OxSemi PCIe devices 63a3d75cf1 serial: 8250: Let drivers request full 16550A feature probing 26e5c79e67 PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge 7c16d0a4e6 xen/gntdev: Accommodate VMA splitting 1cb73704cb xen/gntdev: Prevent leaking grants 43bed0a13a mm/mmap: undo ->mmap() when arch_validate_flags() fails 2b0072d33e mm/damon: validate if the pmd entry is present before accessing 91c4eb16e8 arm64: errata: Add Cortex-A55 to the repeat tlbi list fc0f921b7e drm/udl: Restore display mode on resume 0640934725 drm/virtio: Use appropriate atomic state in virtio_gpu_plane_cleanup_fb() fb3910436b drm/virtio: Unlock reservations on virtio_gpu_object_shmem_init() error f122bcb34f drm/virtio: Check whether transferred 2D BO is shmem a95fb5d55a dmaengine: mxs: use platform_driver_register e7a3334e83 Revert "drm/amdgpu: use dirty framebuffer helper" 4bdedc3b53 nvme-pci: set min_align_mask before calculating max_hw_sectors 32aa0b3f0c nvme-multipath: fix possible hang in live ns resize with ANA access 9391cc3a78 nvmem: core: Fix memleak in nvmem_register() 7efe61dc6a UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK 81ab826a28 riscv: Pass -mno-relax only on lld < 15.0.0 7780bb02a0 riscv: always honor the CONFIG_CMDLINE_FORCE when parsing dtb c657b70e80 riscv: Make VM_WRITE imply VM_READ 3c3c4fa118 riscv: Allow PROT_WRITE-only mmap() af3aaee08d parisc: fbdev/stifb: Align graphics memory size to 4MB dc235db7b7 RISC-V: Make port I/O string accessors actually work 8c487db000 riscv: topology: fix default topology reporting d46c24f307 arm64: topology: move store_cpu_topology() to shared code fcf0f6cbb6 regulator: qcom_rpm: Fix circular deferral regression 78d81a8a8c net: thunderbolt: Enable DMA paths only after rings are enabled 3281e81ce9 hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API e1ab98ec2b ASoC: wcd934x: fix order of Slimbus unprepare/disable a2140a9922 ASoC: wcd9335: fix order of Slimbus unprepare/disable d0507b36da platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure fcfeecca15 quota: Check next/prev free block number after reading from quota file 17214cfab7 HID: multitouch: Add memory barriers 219e4a0f9d fs: dlm: handle -EBUSY first in lock arg validation 34ed22dd28 fs: dlm: fix race between test_bit() and queue_work() 7fa5304c4b i2c: designware: Fix handling of real but unexpected device interrupts f9effcefa8 mmc: sdhci-sprd: Fix minimum clock limit a4df91a88c can: kvaser_usb_leaf: Fix CAN state after restart 0c28c2c0cf can: kvaser_usb_leaf: Fix TX queue out of sync after restart b8c4f6345e can: kvaser_usb_leaf: Fix overread with an invalid command de4434d682 can: kvaser_usb: Fix use of uninitialized completion 354d768e31 usb: add quirks for Lenovo OneLink+ Dock 103b459590 xhci: dbc: Fix memory leak in xhci_alloc_dbc() 39f4c90b99 iio: pressure: dps310: Reset chip after timeout bc493cd754 iio: pressure: dps310: Refactor startup procedure 5f6bfc1926 iio: adc: ad7923: fix channel readings for some variants 1be580ed84 iio: ltc2497: Fix reading conversion results ef4018707d iio: dac: ad5593r: Fix i2c read protocol requirements 60480291c1 cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message 0d814a2199 cifs: destage dirty pages before re-reading them for cache=none 15993e9a9b hv_netvsc: Fix race between VF offering and VF association message from host f9dc33f231 io_uring/net: don't update msg_name if not provided a1bd289c10 mtd: rawnand: atmel: Unmap streaming DMA mappings 3e4d2375d1 ALSA: hda/realtek: Add Intel Reference SSID to support headset keys 41e83faf03 ALSA: hda/realtek: Add quirk for ASUS GV601R laptop c01f385c70 ALSA: hda/realtek: Correct pin configs for ASUS G533Z 0d50e05ecc ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530 ec439b97d9 ALSA: usb-audio: Fix NULL dererence at error path 0672215994 ALSA: usb-audio: Fix potential memory leaks 550ca3082e ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free() 45899fae65 ALSA: oss: Fix potential deadlock at unregistration 5ca155aa79 Revert "fs: check FMODE_LSEEK to control internal pipe splicing" And update the .xml file to handle some private pointer changes and an abi preservation change: type 'struct sk_buff' changed member 'union { struct { __u8 scm_io_uring; __u8 android_kabi_reserved1_padding1; __u16 android_kabi_reserved1_padding2; __u32 android_kabi_reserved1_padding3; }; struct { u64 android_kabi_reserved1; }; union { }; }' was added member 'u64 android_kabi_reserved1' was removed type 'struct super_block' changed member changed from 'struct key * s_master_keys' to 'struct fscrypt_keyring * s_master_keys' type changed from 'struct key *' to 'struct fscrypt_keyring *' pointed-to type changed from 'struct key' to 'struct fscrypt_keyring' type 'struct fscrypt_info' changed member changed from 'struct key * ci_master_key' to 'struct fscrypt_master_key * ci_master_key' type changed from 'struct key *' to 'struct fscrypt_master_key *' pointed-to type changed from 'struct key' to 'struct fscrypt_master_key' Change-Id: Id0a60a4e0d8a036fffd52dad04135cf57d98f09f Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-01-21 15:48:02 +00:00
Greg Kroah-Hartman	c46ed1b2d7	Merge 5.15.80 into android13-5.15-lts ... Changes in 5.15.80 mm: hwpoison: refactor refcount check handling mm: hwpoison: handle non-anonymous THP correctly mm: shmem: don't truncate page if memory failure happens ASoC: wm5102: Revert "ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe" ASoC: wm5110: Revert "ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe" ASoC: wm8997: Revert "ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe" ASoC: mt6660: Keep the pm_runtime enables before component stuff in mt6660_i2c_probe ASoC: rt1019: Fix the TDM settings ASoC: wm8962: Add an event handler for TEMP_HP and TEMP_SPK spi: intel: Fix the offset to get the 64K erase opcode ASoC: codecs: jz4725b: add missed Line In power control bit ASoC: codecs: jz4725b: fix reported volume for Master ctl ASoC: codecs: jz4725b: use right control for Capture Volume ASoC: codecs: jz4725b: fix capture selector naming ASoC: Intel: sof_sdw: add quirk variant for LAPBC710 NUC15 selftests/futex: fix build for clang selftests/intel_pstate: fix build for ARCH=x86_64 ASoC: rt1308-sdw: add the default value of some registers drm/amd/display: Remove wrong pipe control lock ACPI: scan: Add LATT2021 to acpi_ignore_dep_ids[] RDMA/efa: Add EFA 0xefa2 PCI ID btrfs: raid56: properly handle the error when unable to find the missing stripe NFSv4: Retry LOCK on OLD_STATEID during delegation return ACPI: x86: Add another system to quirk list for forcing StorageD3Enable firmware: arm_scmi: Cleanup the core driver removal callback i2c: tegra: Allocate DMA memory for DMA engine i2c: i801: add lis3lv02d's I2C address for Vostro 5568 drm/imx: imx-tve: Fix return type of imx_tve_connector_mode_valid btrfs: remove pointless and double ulist frees in error paths of qgroup tests Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm x86/cpu: Add several Intel server CPU model numbers ASoC: codecs: jz4725b: Fix spelling mistake "Sourc" -> "Source", "Routee" -> "Route" mtd: spi-nor: intel-spi: Disable write protection only if asked spi: intel: Use correct mask for flash and protected regions KVM: x86/pmu: Do not speculatively query Intel GP PMCs that don't exist yet hugetlbfs: don't delete error page from pagecache arm64: dts: qcom: sa8155p-adp: Specify which LDO modes are allowed arm64: dts: qcom: sm8150-xperia-kumano: Specify which LDO modes are allowed arm64: dts: qcom: sm8250-xperia-edo: Specify which LDO modes are allowed arm64: dts: qcom: sm8350-hdk: Specify which LDO modes are allowed spi: stm32: Print summary 'callbacks suppressed' message ARM: dts: at91: sama7g5: fix signal name of pin PB2 ASoC: core: Fix use-after-free in snd_soc_exit() ASoC: tas2770: Fix set_tdm_slot in case of single slot ASoC: tas2764: Fix set_tdm_slot in case of single slot ARM: at91: pm: avoid soft resetting AC DLL serial: 8250: omap: Fix missing PM runtime calls for omap8250_set_mctrl() serial: 8250_omap: remove wait loop from Errata i202 workaround serial: 8250: omap: Fix unpaired pm_runtime_put_sync() in omap8250_remove() serial: 8250: omap: Flush PM QOS work on remove serial: imx: Add missing .thaw_noirq hook tty: n_gsm: fix sleep-in-atomic-context bug in gsm_control_send bpf, test_run: Fix alignment problem in bpf_prog_test_run_skb() ASoC: soc-utils: Remove __exit for snd_soc_util_exit() pinctrl: rockchip: list all pins in a possible mux route for PX30 scsi: scsi_transport_sas: Fix error handling in sas_phy_add() block: sed-opal: kmalloc the cmd/resp buffers bpf: Fix memory leaks in __check_func_call arm64: Fix bit-shifting UB in the MIDR_CPU_MODEL() macro siox: fix possible memory leak in siox_device_add() parport_pc: Avoid FIFO port location truncation pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map drm/vc4: kms: Fix IS_ERR() vs NULL check for vc4_kms drm/panel: simple: set bpc field for logic technologies displays drm/drv: Fix potential memory leak in drm_dev_init() drm: Fix potential null-ptr-deref in drm_vblank_destroy_worker() ARM: dts: imx7: Fix NAND controller size-cells arm64: dts: imx8mm: Fix NAND controller size-cells arm64: dts: imx8mn: Fix NAND controller size-cells ata: libata-transport: fix double ata_host_put() in ata_tport_add() ata: libata-transport: fix error handling in ata_tport_add() ata: libata-transport: fix error handling in ata_tlink_add() ata: libata-transport: fix error handling in ata_tdev_add() nfp: change eeprom length to max length enumerators MIPS: fix duplicate definitions for exported symbols MIPS: Loongson64: Add WARN_ON on kexec related kmalloc failed bpf: Initialize same number of free nodes for each pcpu_freelist net: bgmac: Drop free_netdev() from bgmac_enet_remove() mISDN: fix possible memory leak in mISDN_dsp_element_register() net: hinic: Fix error handling in hinic_module_init() net: stmmac: ensure tx function is not running in stmmac_xdp_release() soc: imx8m: Enable OCOTP clock before reading the register net: liquidio: release resources when liquidio driver open failed mISDN: fix misuse of put_device() in mISDN_register_device() net: macvlan: Use built-in RCU list checking net: caif: fix double disconnect client in chnl_net_open() bnxt_en: Remove debugfs when pci_register_driver failed net: mhi: Fix memory leak in mhi_net_dellink() net: dsa: make dsa_master_ioctl() see through port_hwtstamp_get() shims xen/pcpu: fix possible memory leak in register_pcpu() net: ionic: Fix error handling in ionic_init_module() net: ena: Fix error handling in ena_init() net: hns3: fix setting incorrect phy link ksettings for firmware in resetting process bridge: switchdev: Fix memory leaks when changing VLAN protocol drbd: use after free in drbd_create_device() platform/x86/intel: pmc: Don't unconditionally attach Intel PMC when virtualized platform/surface: aggregator: Do not check for repeated unsequenced packets cifs: add check for returning value of SMB2_close_init net: ag71xx: call phylink_disconnect_phy if ag71xx_hw_enable() fail in ag71xx_open() net/x25: Fix skb leak in x25_lapb_receive_frame() cifs: Fix wrong return value checking when GETFLAGS net: microchip: sparx5: Fix potential null-ptr-deref in sparx_stats_init() and sparx5_start() net: thunderbolt: Fix error handling in tbnet_init() cifs: add check for returning value of SMB2_set_info_init ftrace: Fix the possible incorrect kernel message ftrace: Optimize the allocation for mcount entries ftrace: Fix null pointer dereference in ftrace_add_mod() ring_buffer: Do not deactivate non-existant pages tracing: Fix memory leak in tracing_read_pipe() tracing/ring-buffer: Have polling block on watermark tracing: Fix memory leak in test_gen_synth_cmd() and test_empty_synth_event() tracing: Fix wild-memory-access in register_synth_event() tracing: Fix race where eprobes can be called before the event tracing: kprobe: Fix potential null-ptr-deref on trace_event_file in kprobe_event_gen_test_exit() tracing: kprobe: Fix potential null-ptr-deref on trace_array in kprobe_event_gen_test_exit() drm/amd/display: Add HUBP surface flip interrupt handler ALSA: usb-audio: Drop snd_BUG_ON() from snd_usbmidi_output_open() ALSA: hda/realtek: fix speakers for Samsung Galaxy Book Pro ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book Pro 360 Revert "usb: dwc3: disable USB core PHY management" slimbus: qcom-ngd: Fix build error when CONFIG_SLIM_QCOM_NGD_CTRL=y && CONFIG_QCOM_RPROC_COMMON=m slimbus: stream: correct presence rate frequencies speakup: fix a segfault caused by switching consoles USB: bcma: Make GPIO explicitly optional USB: serial: option: add Sierra Wireless EM9191 USB: serial: option: remove old LARA-R6 PID USB: serial: option: add u-blox LARA-R6 00B modem USB: serial: option: add u-blox LARA-L6 modem USB: serial: option: add Fibocom FM160 0x0111 composition usb: add NO_LPM quirk for Realforce 87U Keyboard usb: chipidea: fix deadlock in ci_otg_del_timer usb: cdns3: host: fix endless superspeed hub port reset usb: typec: mux: Enter safe mode only when pins need to be reconfigured iio: adc: at91_adc: fix possible memory leak in at91_adc_allocate_trigger() iio: trigger: sysfs: fix possible memory leak in iio_sysfs_trig_init() iio: adc: mp2629: fix wrong comparison of channel iio: adc: mp2629: fix potential array out of bound access iio: pressure: ms5611: changed hardcoded SPI speed to value limited dm ioctl: fix misbehavior if list_versions races with module loading serial: 8250: Fall back to non-DMA Rx if IIR_RDI occurs serial: 8250: Flush DMA Rx on RLSI serial: 8250_lpss: Configure DMA also w/o DMA filter Input: iforce - invert valid length check when fetching device IDs maccess: Fix writing offset in case of fault in strncpy_from_kernel_nofault() net: phy: marvell: add sleep time after enabling the loopback bit scsi: zfcp: Fix double free of FSF request when qdio send fails iommu/vt-d: Preset Access bit for IOVA in FL non-leaf paging entries iommu/vt-d: Set SRE bit only when hardware has SRS cap firmware: coreboot: Register bus in module init mmc: core: properly select voltage range without power cycle mmc: sdhci-pci-o2micro: fix card detect fail issue caused by CD# debounce timeout mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put() docs: update mediator contact information in CoC doc misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() perf/x86/intel/pt: Fix sampling using single range output nvme: restrict management ioctls to admin nvme: ensure subsystem reset is single threaded serial: 8250_lpss: Use 16B DMA burst with Elkhart Lake perf: Improve missing SIGTRAP checking ring-buffer: Include dropped pages in counting dirty patches tracing: Fix warning on variable 'struct trace_array' net: use struct_group to copy ip/ipv6 header addresses scsi: target: tcm_loop: Fix possible name leak in tcm_loop_setup_hba_bus() scsi: scsi_debug: Fix possible UAF in sdebug_add_host_helper() kprobes: Skip clearing aggrprobe's post_handler in kprobe-on-ftrace case Input: i8042 - fix leaking of platform device on module removal macvlan: enforce a consistent minimal mtu tcp: cdg: allow tcp_cdg_release() to be called multiple times kcm: avoid potential race in kcm_tx_work kcm: close race conditions on sk_receive_queue 9p: trans_fd/p9_conn_cancel: drop client lock earlier gfs2: Check sb_bsize_shift after reading superblock gfs2: Switch from strlcpy to strscpy 9p/trans_fd: always use O_NONBLOCK read/write wifi: wext: use flex array destination for memcpy() mm: fs: initialize fsdata passed to write_begin/write_end interface net/9p: use a dedicated spinlock for trans_fd ntfs: fix use-after-free in ntfs_attr_find() ntfs: fix out-of-bounds read in ntfs_attr_find() ntfs: check overflow when iterating ATTR_RECORDs Linux 5.15.80 Change-Id: Id31868a01739f6c1e688f4730980dc572d6681bf Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-01-20 10:30:06 +00:00
Jens Axboe	7ec9a45fc4	block: handle bio_split_to_limits() NULL return ... commit 613b14884b8595e20b9fac4126bf627313827fbe upstream. This can't happen right now, but in preparation for allowing bio_split_to_limits() returning NULL if it ended the bio, check for it in all the callers. Signed-off-by: Jens Axboe <axboe@kernel.dk> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-01-18 11:48:58 +01:00
lijiaming	8501db9cda	ANDROID: loop: Add vendor hook to update cmd ... According to the value of OEM-specific field of struct bio, we need to update the value of "iocb->ki_flags" or "iocb->ki_ioprio", so that we can distinguish different IO's in lower level drivers and take different measures. Bug: 265611433 Change-Id: Id8ea3c3d064967b7a79fe24c48bf58d92c5d6e41 Signed-off-by: lijiaming <lijiaming3@xiaomi.com>	2023-01-16 21:01:33 +00:00
Yuan Can	f36d8c8651	floppy: Fix memory leak in do_floppy_init() ... commit f8ace2e304c5dd8a7328db9cd2b8a4b1b98d83ec upstream. A memory leak was reported when floppy_alloc_disk() failed in do_floppy_init(). unreferenced object 0xffff888115ed25a0 (size 8): comm "modprobe", pid 727, jiffies 4295051278 (age 25.529s) hex dump (first 8 bytes): 00 ac 67 5b 81 88 ff ff ..g[.... backtrace: [<000000007f457abb>] __kmalloc_node+0x4c/0xc0 [<00000000a87bfa9e>] blk_mq_realloc_tag_set_tags.part.0+0x6f/0x180 [<000000006f02e8b1>] blk_mq_alloc_tag_set+0x573/0x1130 [<0000000066007fd7>] 0xffffffffc06b8b08 [<0000000081f5ac40>] do_one_initcall+0xd0/0x4f0 [<00000000e26d04ee>] do_init_module+0x1a4/0x680 [<000000001bb22407>] load_module+0x6249/0x7110 [<00000000ad31ac4d>] __do_sys_finit_module+0x140/0x200 [<000000007bddca46>] do_syscall_64+0x35/0x80 [<00000000b5afec39>] entry_SYSCALL_64_after_hwframe+0x46/0xb0 unreferenced object 0xffff88810fc30540 (size 32): comm "modprobe", pid 727, jiffies 4295051278 (age 25.529s) hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [<000000007f457abb>] __kmalloc_node+0x4c/0xc0 [<000000006b91eab4>] blk_mq_alloc_tag_set+0x393/0x1130 [<0000000066007fd7>] 0xffffffffc06b8b08 [<0000000081f5ac40>] do_one_initcall+0xd0/0x4f0 [<00000000e26d04ee>] do_init_module+0x1a4/0x680 [<000000001bb22407>] load_module+0x6249/0x7110 [<00000000ad31ac4d>] __do_sys_finit_module+0x140/0x200 [<000000007bddca46>] do_syscall_64+0x35/0x80 [<00000000b5afec39>] entry_SYSCALL_64_after_hwframe+0x46/0xb0 If the floppy_alloc_disk() failed, disks of current drive will not be set, thus the lastest allocated set->tag cannot be freed in the error handling path. A simple call graph shown as below: floppy_module_init() floppy_init() do_floppy_init() for (drive = 0; drive < N_DRIVE; drive++) blk_mq_alloc_tag_set() blk_mq_alloc_tag_set_tags() blk_mq_realloc_tag_set_tags() # set->tag allocated floppy_alloc_disk() blk_mq_alloc_disk() # error occurred, disks failed to allocated ->out_put_disk: for (drive = 0; drive < N_DRIVE; drive++) if (!disks[drive][0]) # the last disks is not set and loop break break; blk_mq_free_tag_set() # the latest allocated set->tag leaked Fix this problem by free the set->tag of current drive before jump to error handling path. Cc: stable@vger.kernel.org Fixes: 302cfee150 ("floppy: use a separate gendisk for each media format") Signed-off-by: Yuan Can <yuancan@huawei.com> [efremov: added stable list, changed title] Signed-off-by: Denis Efremov <efremov@linux.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-12-31 13:14:47 +01:00
Isaac J. Manjarres	dd2157a98f	loop: Fix the max_loop commandline argument treatment when it is set to 0 ... commit 85c50197716c60fe57f411339c579462e563ac57 upstream. Currently, the max_loop commandline argument can be used to specify how many loop block devices are created at init time. If it is not specified on the commandline, CONFIG_BLK_DEV_LOOP_MIN_COUNT loop block devices will be created. The max_loop commandline argument can be used to override the value of CONFIG_BLK_DEV_LOOP_MIN_COUNT. However, when max_loop is set to 0 through the commandline, the current logic treats it as if it had not been set, and creates CONFIG_BLK_DEV_LOOP_MIN_COUNT devices anyway. Fix this by starting max_loop off as set to CONFIG_BLK_DEV_LOOP_MIN_COUNT. This preserves the intended behavior of creating CONFIG_BLK_DEV_LOOP_MIN_COUNT loop block devices if the max_loop commandline parameter is not specified, and allowing max_loop to be respected for all values, including 0. This allows environments that can create all of their required loop block devices on demand to not have to unnecessarily preallocate loop block devices. Fixes: 7328508274 ("remove artificial software max_loop limit") Cc: stable@vger.kernel.org Cc: Ken Chen <kenchen@google.com> Signed-off-by: Isaac J. Manjarres <isaacmanjarres@google.com> Link: https://lore.kernel.org/r/20221208212902.765781-1-isaacmanjarres@google.com Signed-off-by: Jens Axboe <axboe@kernel.dk> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-12-31 13:14:46 +01:00
Wang ShaoBo	16437645dd	drbd: destroy workqueue when drbd device was freed ... [ Upstream commit 8692814b77ca4228a99da8a005de0acf40af6132 ] A submitter workqueue is dynamically allocated by init_submitter() called by drbd_create_device(), we should destroy it when this device is not needed or destroyed. Fixes: 113fef9e20 ("drbd: prepare to queue write requests on a submit worker") Signed-off-by: Wang ShaoBo <bobo.shaobowang@huawei.com> Link: https://lore.kernel.org/r/20221124015817.2729789-3-bobo.shaobowang@huawei.com Signed-off-by: Jens Axboe <axboe@kernel.dk> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-12-31 13:14:12 +01:00
Wang ShaoBo	cdaf45415c	drbd: remove call to memset before free device/resource/connection ... [ Upstream commit 6e7b854e4c1b02dba00760dfa79d8dbf6cce561e ] This revert c2258ffc56 ("drbd: poison free'd device, resource and connection structs"), add memset is odd here for debugging, there are some methods to accurately show what happened, such as kdump. Signed-off-by: Wang ShaoBo <bobo.shaobowang@huawei.com> Link: https://lore.kernel.org/r/20221124015817.2729789-2-bobo.shaobowang@huawei.com Signed-off-by: Jens Axboe <axboe@kernel.dk> Stable-dep-of: 8692814b77ca ("drbd: destroy workqueue when drbd device was freed") Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-12-31 13:14:12 +01:00
Dan Carpenter	7d93417d59	drbd: use after free in drbd_create_device() ... [ Upstream commit a7a1598189228b5007369a9622ccdf587be0730f ] The drbd_destroy_connection() frees the "connection" so use the _safe() iterator to prevent a use after free. Fixes: b6f85ef953 ("drbd: Iterate over all connections") Signed-off-by: Dan Carpenter <error27@gmail.com> Reviewed-by: Christoph Böhmwalder <christoph.boehmwalder@linbit.com> Link: https://lore.kernel.org/r/Y3Jd5iZRbNQ9w6gm@kili Signed-off-by: Jens Axboe <axboe@kernel.dk> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-11-26 09:24:40 +01:00
Greg Kroah-Hartman	b049ff121c	Merge 5.15.75 into android13-5.15-lts ... Changes in 5.15.75 Revert "fs: check FMODE_LSEEK to control internal pipe splicing" ALSA: oss: Fix potential deadlock at unregistration ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free() ALSA: usb-audio: Fix potential memory leaks ALSA: usb-audio: Fix NULL dererence at error path ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530 ALSA: hda/realtek: Correct pin configs for ASUS G533Z ALSA: hda/realtek: Add quirk for ASUS GV601R laptop ALSA: hda/realtek: Add Intel Reference SSID to support headset keys mtd: rawnand: atmel: Unmap streaming DMA mappings io_uring/net: don't update msg_name if not provided hv_netvsc: Fix race between VF offering and VF association message from host cifs: destage dirty pages before re-reading them for cache=none cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message iio: dac: ad5593r: Fix i2c read protocol requirements iio: ltc2497: Fix reading conversion results iio: adc: ad7923: fix channel readings for some variants iio: pressure: dps310: Refactor startup procedure iio: pressure: dps310: Reset chip after timeout xhci: dbc: Fix memory leak in xhci_alloc_dbc() usb: add quirks for Lenovo OneLink+ Dock can: kvaser_usb: Fix use of uninitialized completion can: kvaser_usb_leaf: Fix overread with an invalid command can: kvaser_usb_leaf: Fix TX queue out of sync after restart can: kvaser_usb_leaf: Fix CAN state after restart mmc: sdhci-sprd: Fix minimum clock limit i2c: designware: Fix handling of real but unexpected device interrupts fs: dlm: fix race between test_bit() and queue_work() fs: dlm: handle -EBUSY first in lock arg validation HID: multitouch: Add memory barriers quota: Check next/prev free block number after reading from quota file platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure ASoC: wcd9335: fix order of Slimbus unprepare/disable ASoC: wcd934x: fix order of Slimbus unprepare/disable hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API net: thunderbolt: Enable DMA paths only after rings are enabled regulator: qcom_rpm: Fix circular deferral regression arm64: topology: move store_cpu_topology() to shared code riscv: topology: fix default topology reporting RISC-V: Make port I/O string accessors actually work parisc: fbdev/stifb: Align graphics memory size to 4MB riscv: Allow PROT_WRITE-only mmap() riscv: Make VM_WRITE imply VM_READ riscv: always honor the CONFIG_CMDLINE_FORCE when parsing dtb riscv: Pass -mno-relax only on lld < 15.0.0 UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK nvmem: core: Fix memleak in nvmem_register() nvme-multipath: fix possible hang in live ns resize with ANA access nvme-pci: set min_align_mask before calculating max_hw_sectors Revert "drm/amdgpu: use dirty framebuffer helper" dmaengine: mxs: use platform_driver_register drm/virtio: Check whether transferred 2D BO is shmem drm/virtio: Unlock reservations on virtio_gpu_object_shmem_init() error drm/virtio: Use appropriate atomic state in virtio_gpu_plane_cleanup_fb() drm/udl: Restore display mode on resume arm64: errata: Add Cortex-A55 to the repeat tlbi list mm/damon: validate if the pmd entry is present before accessing mm/mmap: undo ->mmap() when arch_validate_flags() fails xen/gntdev: Prevent leaking grants xen/gntdev: Accommodate VMA splitting PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge serial: 8250: Let drivers request full 16550A feature probing serial: 8250: Request full 16550A feature probing for OxSemi PCIe devices NFSD: Protect against send buffer overflow in NFSv3 READDIR NFSD: Protect against send buffer overflow in NFSv2 READ NFSD: Protect against send buffer overflow in NFSv3 READ powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain powerpc/boot: Explicitly disable usage of SPE instructions slimbus: qcom-ngd: use correct error in message of pdr_add_lookup() failure slimbus: qcom-ngd: cleanup in probe error path scsi: qedf: Populate sysfs attributes for vport gpio: rockchip: request GPIO mux to pinctrl when setting direction pinctrl: rockchip: add pinmux_ops.gpio_set_direction callback fbdev: smscufx: Fix use-after-free in ufx_ops_open() ksmbd: fix endless loop when encryption for response fails ksmbd: Fix wrong return value and message length check in smb2_ioctl() ksmbd: Fix user namespace mapping fs: record I_DIRTY_TIME even if inode already has I_DIRTY_INODE btrfs: fix race between quota enable and quota rescan ioctl btrfs: set generation before calling btrfs_clean_tree_block in btrfs_init_new_buffer f2fs: complete checkpoints during remount f2fs: flush pending checkpoints when freezing super f2fs: increase the limit for reserve_root f2fs: fix to do sanity check on destination blkaddr during recovery f2fs: fix to do sanity check on summary info hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero jbd2: wake up journal waiters in FIFO order, not LIFO jbd2: fix potential buffer head reference count leak jbd2: fix potential use-after-free in jbd2_fc_wait_bufs jbd2: add miss release buffer head in fc_do_one_pass() ext4: avoid crash when inline data creation follows DIO write ext4: fix null-ptr-deref in ext4_write_info ext4: make ext4_lazyinit_thread freezable ext4: fix check for block being out of directory size ext4: don't increase iversion counter for ea_inodes ext4: ext4_read_bh_lock() should submit IO if the buffer isn't uptodate ext4: place buffer head allocation before handle start ext4: fix dir corruption when ext4_dx_add_entry() fails ext4: fix miss release buffer head in ext4_fc_write_inode ext4: fix potential memory leak in ext4_fc_record_modified_inode() ext4: fix potential memory leak in ext4_fc_record_regions() ext4: update 'state->fc_regions_size' after successful memory allocation livepatch: fix race between fork and KLP transition ftrace: Properly unset FTRACE_HASH_FL_MOD ring-buffer: Allow splice to read previous partially read pages ring-buffer: Have the shortest_full queue be the shortest not longest ring-buffer: Check pending waiters when doing wake ups as well ring-buffer: Add ring_buffer_wake_waiters() ring-buffer: Fix race between reset page and reading page tracing: Disable interrupt or preemption before acquiring arch_spinlock_t tracing: Wake up ring buffer waiters on closing of the file tracing: Wake up waiters when tracing is disabled tracing: Add ioctl() to force ring buffer waiters to wake up tracing: Move duplicate code of trace_kprobe/eprobe.c into header tracing: Add "(fault)" name injection to kernel probes tracing: Fix reading strings from synthetic events thunderbolt: Explicitly enable lane adapter hotplug events at startup efi: libstub: drop pointless get_memory_map() call media: cedrus: Set the platform driver data earlier media: cedrus: Fix endless loop in cedrus_h265_skip_bits() blk-wbt: call rq_qos_add() after wb_normal is initialized KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility KVM: nVMX: Unconditionally purge queued/injected events on nested "exit" KVM: nVMX: Don't propagate vmcs12's PERF_GLOBAL_CTRL settings to vmcs02 KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS staging: greybus: audio_helper: remove unused and wrong debugfs usage drm/nouveau/kms/nv140-: Disable interlacing drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table() drm/i915: Fix watermark calculations for gen12+ RC CCS modifier drm/i915: Fix watermark calculations for gen12+ MC CCS modifier drm/i915: Fix watermark calculations for gen12+ CCS+CC modifier drm/amd/display: Fix vblank refcount in vrr transition smb3: must initialize two ACL struct fields to zero selinux: use "grep -E" instead of "egrep" ima: fix blocking of security.ima xattrs of unsupported algorithms userfaultfd: open userfaultfds with O_RDONLY ntfs3: rework xattr handlers and switch to POSIX ACL VFS helpers thermal: cpufreq_cooling: Check the policy first in cpufreq_cooling_register() sh: machvec: Use char[] for section boundaries MIPS: SGI-IP27: Free some unused memory MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create() ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd() ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE objtool: Preserve special st_shndx indexes in elf_update_symbol nfsd: Fix a memory leak in an error handling path SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation SUNRPC: Fix svcxdr_init_encode's buflen calculation NFSD: Protect against send buffer overflow in NFSv2 READDIR NFSD: Fix handling of oversized NFSv4 COMPOUND requests wifi: rtlwifi: 8192de: correct checking of IQK reload wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state() leds: lm3601x: Don't use mutex after it was destroyed bpf: Fix reference state management for synchronous callbacks wifi: mac80211: allow bw change during channel switch in mesh bpftool: Fix a wrong type cast in btf_dumper_int spi: mt7621: Fix an error message in mt7621_spi_probe() x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register xsk: Fix backpressure mechanism on Tx bpf: Disable preemption when increasing per-cpu map_locked bpf: Propagate error from htab_lock_bucket() to userspace bpf: Use this_cpu_{inc|dec|inc_return} for bpf_task_storage_busy Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse() wifi: rtw88: add missing destroy_workqueue() on error path in rtw_core_init() selftests/xsk: Avoid use-after-free on ctx spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume() spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime() wifi: rtl8xxxu: Fix skb misuse in TX queue selection spi: meson-spicc: do not rely on busy flag in pow2 clk ops bpf: btf: fix truncated last_member_type_id in btf_struct_resolve wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask wifi: mt76: sdio: fix transmitting packet hangs wifi: mt76: mt7615: add mt7615_mutex_acquire/release in mt7615_sta_set_decap_offload wifi: mt76: mt7915: do not check state before configuring implicit beamform Bluetooth: RFCOMM: Fix possible deadlock on socket shutdown/release net: fs_enet: Fix wrong check in do_pd_setup bpf: Ensure correct locking around vulnerable function find_vpid() Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure netfilter: conntrack: fix the gc rescheduling delay netfilter: conntrack: revisit the gc initial rescheduling bias wifi: ath11k: fix number of VHT beamformee spatial streams x86/microcode/AMD: Track patch allocation size explicitly x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe skmsg: Schedule psock work if the cached skb exists on the psock i2c: mlxbf: support lock mechanism Bluetooth: hci_core: Fix not handling link timeouts propertly xfrm: Reinject transport-mode packets through workqueue netfilter: nft_fib: Fix for rpath check with VRF devices spi: s3c64xx: Fix large transfers with DMA wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM vhost/vsock: Use kvmalloc/kvfree for larger packets. eth: alx: take rtnl_lock on resume mISDN: fix use-after-free bugs in l1oip timer handlers sctp: handle the error returned from sctp_auth_asoc_init_active_key tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited spi: Ensure that sg_table won't be used after being freed hwmon: (pmbus/mp2888) Fix sensors readouts for MPS Multi-phase mp2888 controller net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks() bnx2x: fix potential memory leak in bnx2x_tpa_stop() net: wwan: iosm: Call mutex_init before locking it net/ieee802154: reject zero-sized raw_sendmsg() once: add DO_ONCE_SLOW() for sleepable contexts net: mvpp2: fix mvpp2 debugfs leak drm: bridge: adv7511: fix CEC power down control register offset drm: bridge: adv7511: unregister cec i2c device after cec adapter drm/bridge: Avoid uninitialized variable warning drm/mipi-dsi: Detach devices when removing the host drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling drm/bridge: parade-ps8640: Fix regulator supply order drm/dp_mst: fix drm_dp_dpcd_read return value checks drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node() ASoC: mt6359: fix tests for platform_get_irq() failure platform/chrome: fix double-free in chromeos_laptop_prepare() platform/chrome: fix memory corruption in ioctl ASoC: tas2764: Allow mono streams ASoC: tas2764: Drop conflicting set_bias_level power setting ASoC: tas2764: Fix mute/unmute platform/x86: msi-laptop: Fix old-ec check for backlight registering platform/x86: msi-laptop: Fix resource cleanup platform/chrome: cros_ec_typec: Correct alt mode index drm/amdgpu: add missing pci_disable_device() in amdgpu_pmops_runtime_resume() drm/bridge: megachips: Fix a null pointer dereference bug ASoC: rsnd: Add check for rsnd_mod_power_on ALSA: hda: beep: Simplify keep-power-at-enable behavior drm/bochs: fix blanking drm/omap: dss: Fix refcount leak bugs drm/amdgpu: Fix memory leak in hpd_rx_irq_create_workqueue() mmc: au1xmmc: Fix an error handling path in au1xmmc_probe() ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API drm/msm/dpu: index dpu_kms->hw_vbif using vbif_idx drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa() drm/vmwgfx: Fix memory leak in vmw_mksstat_add_ioctl() ASoC: codecs: tx-macro: fix kcontrol put ASoC: da7219: Fix an error handling path in da7219_register_dai_clks() ALSA: dmaengine: increment buffer pointer atomically mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe() ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe ALSA: hda/hdmi: Don't skip notification handling during PM operation memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe() memory: of: Fix refcount leak bug in of_get_ddr_timings() memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings() locks: fix TOCTOU race when granting write lease soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe() soc: qcom: smem_state: Add refcounting for the 'state->of_node' ARM: dts: imx6qdl-kontron-samx6i: hook up DDC i2c bus ARM: dts: turris-omnia: Fix mpp26 pin name and comment ARM: dts: kirkwood: lsxl: fix serial line ARM: dts: kirkwood: lsxl: remove first ethernet port ia64: export memory_add_physaddr_to_nid to fix cxl build error soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA arm64: dts: ti: k3-j7200: fix main pinmux range ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family ARM: Drop CMDLINE_* dependency on ATAGS ext4: don't run ext4lazyinit for read-only filesystems arm64: ftrace: fix module PLTs with mcount ARM: dts: exynos: fix polarity of VBUS GPIO of Origen iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX iio: adc: at91-sama5d2_adc: check return status for pressure and touch iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume iio: inkern: only release the device node when done with it iio: inkern: fix return value in devm_of_iio_channel_get_by_name() iio: ABI: Fix wrong format of differential capacitance channel ABI. iio: magnetometer: yas530: Change data type of hard_offsets to signed RDMA/mlx5: Don't compare mkey tags in DEVX indirect mkey usb: common: debug: Check non-standard control requests clk: meson: Hold reference returned by of_get_parent() clk: oxnas: Hold reference returned by of_get_parent() clk: qoriq: Hold reference returned by of_get_parent() clk: berlin: Add of_node_put() for of_get_parent() clk: sprd: Hold reference returned by of_get_parent() clk: tegra: Fix refcount leak in tegra210_clock_init clk: tegra: Fix refcount leak in tegra114_clock_init clk: tegra20: Fix refcount leak in tegra20_clock_init HSI: omap_ssi: Fix refcount leak in ssi_probe HSI: omap_ssi_port: Fix dma_map_sg error check media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop tty: xilinx_uartps: Fix the ignore_status media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start() media: uvcvideo: Fix memory leak in uvc_gpio_parse media: uvcvideo: Use entity get_cur in uvc_ctrl_set media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init RDMA/rxe: Fix "kernel NULL pointer dereference" error RDMA/rxe: Fix the error caused by qp->sk misc: ocxl: fix possible refcount leak in afu_ioctl() fpga: prevent integer overflow in dfl_feature_ioctl_set_irq() dmaengine: hisilicon: Disable channels when unregister hisi_dma dmaengine: hisilicon: Fix CQ head update dmaengine: hisilicon: Add multi-thread support for a DMA channel dyndbg: fix static_branch manipulation dyndbg: fix module.dyndbg handling dyndbg: let query-modname override actual module name dyndbg: drop EXPORTed dynamic_debug_exec_queries clk: qcom: sm6115: Select QCOM_GDSC mtd: devices: docg3: check the return value of devm_ioremap() in the probe phy: amlogic: phy-meson-axg-mipi-pcie-analog: Hold reference returned by of_get_parent() phy: phy-mtk-tphy: fix the phy type setting issue mtd: rawnand: intel: Read the chip-select line from the correct OF node mtd: rawnand: intel: Remove undocumented compatible string mtd: rawnand: fsl_elbc: Fix none ECC mode RDMA/irdma: Align AE id codes to correct flush code and event RDMA/srp: Fix srp_abort() RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall. RDMA/siw: Fix QP destroy to wait for all references dropped. ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting() ata: fix ata_id_has_devslp() ata: fix ata_id_has_ncq_autosense() ata: fix ata_id_has_dipm() mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct() md: Replace snprintf with scnprintf md/raid5: Ensure stripe_fill happens on non-read IO with journal md/raid5: Remove unnecessary bio_put() in raid5_read_one_chunk() RDMA/cm: Use SLID in the work completion as the DLID in responder side IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers xhci: Don't show warning for reinit on known broken suspend usb: gadget: function: fix dangling pnp_string in f_printer.c drivers: serial: jsm: fix some leaks in probe serial: 8250: Toggle IER bits on only after irq has been set up tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown phy: qualcomm: call clk_disable_unprepare in the error handling staging: vt6655: fix some erroneous memory clean-up loops slimbus: qcom-ngd-ctrl: allow compile testing without QCOM_RPROC_COMMON firmware: google: Test spinlock on panic path to avoid lockups serial: 8250: Fix restoring termios speed after suspend scsi: libsas: Fix use-after-free bug in smp_execute_task_sg() scsi: iscsi: Rename iscsi_conn_queue_work() scsi: iscsi: Add recv workqueue helpers scsi: iscsi: Run recv path from workqueue scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername() clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical clk: qcom: gcc-sm6115: Override default Alpha PLL regs RDMA/rxe: Fix resize_finish() in rxe_queue.c fsi: core: Check error number after calling ida_simple_get mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe() mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq() mfd: lp8788: Fix an error handling path in lp8788_probe() mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init() mfd: fsl-imx25: Fix check for platform_get_irq() errors mfd: sm501: Add check for platform_driver_register() clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup() usb: mtu3: fix failed runtime suspend in host only mode spmi: pmic-arb: correct duplicate APID to PPID mapping logic clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD clk: baikal-t1: Fix invalid xGMAC PTP clock divider clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent clk: baikal-t1: Add SATA internal ref clock buffer clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration clk: imx: scu: fix memleak on platform_device_add() fails clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe clk: ast2600: BCLK comes from EPLL mailbox: mpfs: fix handling of the reg property mailbox: mpfs: account for mbox offsets while sending mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg powerpc/configs: Properly enable PAPR_SCM in pseries_defconfig powerpc/math_emu/efp: Include module.h powerpc/sysdev/fsl_msi: Add missing of_node_put() powerpc/pci_dn: Add missing of_node_put() powerpc/powernv: add missing of_node_put() in opal_export_attrs() powerpc: Fix fallocate and fadvise64_64 compat parameter combination x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5 powerpc: Fix SPE Power ISA properties for e500v1 platforms powerpc/kprobes: Fix null pointer reference in arch_prepare_kprobe() powerpc/pseries/vas: Pass hw_cpu_id to node associativity HCALL crypto: sahara - don't sleep when in softirq crypto: hisilicon/zip - fix mismatch in get/set sgl_sge_nr hwrng: arm-smccc-trng - fix NO_ENTROPY handling cgroup: Honor caller's cgroup NS when resolving path hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear() crypto: qat - fix default value of WDT timer crypto: hisilicon/qm - fix missing put dfx access cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset iommu/omap: Fix buffer overflow in debugfs crypto: akcipher - default implementation for setting a private key crypto: ccp - Release dma channels before dmaengine unrgister crypto: inside-secure - Change swab to swab32 crypto: qat - fix DMA transfer direction cifs: return correct error in ->calc_signature() iommu/iova: Fix module config properly tracing: kprobe: Fix kprobe event gen test module on exit tracing: kprobe: Make gen test module work in arm and riscv tracing/osnoise: Fix possible recursive locking in stop_per_cpu_kthreads kbuild: remove the target in signal traps when interrupted kbuild: rpm-pkg: fix breakage when V=1 is used crypto: marvell/octeontx - prevent integer overflows crypto: cavium - prevent integer overflow loading firmware thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id ACPI: APEI: do not add task_work to kernel thread to avoid memory leak f2fs: fix race condition on setting FI_NO_EXTENT flag f2fs: fix to account FS_CP_DATA_IO correctly selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle fs: dlm: fix race in lowcomms rcu: Avoid triggering strict-GP irq-work when RCU is idle rcu: Back off upon fill_page_cache_func() allocation failure rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE() ACPI: video: Add Toshiba Satellite/Portege Z830 quirk ACPI: tables: FPDT: Don't call acpi_os_map_memory() on invalid phys address cpufreq: intel_pstate: Add Tigerlake support in no-HWP mode MIPS: BCM47XX: Cast memcmp() of function to (void *) powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash ARM: decompressor: Include .data.rel.ro.local ACPI: x86: Add a quirk for Dell Inspiron 14 2-in-1 for StorageD3Enable x86/entry: Work around Clang __bdos() bug NFSD: Return nfserr_serverfault if splice_ok but buf->pages have data NFSD: fix use-after-free on source server when doing inter-server copy wifi: brcmfmac: fix invalid address access when enabling SCAN log level bpftool: Clear errno after libcap's checks ice: set tx_tstamps when creating new Tx rings via ethtool net: ethernet: ti: davinci_mdio: Add workaround for errata i2329 openvswitch: Fix double reporting of drops in dropwatch openvswitch: Fix overreporting of drops in dropwatch tcp: annotate data-race around tcp_md5sig_pool_populated x86/mce: Retrieve poison range from hardware wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg() thunderbolt: Add back Intel Falcon Ridge end-to-end flow control workaround xfrm: Update ipcomp_scratches with NULL when freed iavf: Fix race between iavf_close and iavf_reset_task wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit() Bluetooth: btintel: Mark Intel controller to support LE_STATES quirk regulator: core: Prevent integer underflow wifi: mt76: mt7921: reset msta->airtime_ac while clearing up hw value Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create() Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times can: bcm: check the result of can_send() in bcm_can_tx() wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620 wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620 wifi: rt2x00: set VGC gain for both chains of MT7620 wifi: rt2x00: set SoC wmac clock register wifi: rt2x00: correctly set BBP register 86 for MT7620 hwmon: (sht4x) do not overflow clamping operation on 32-bit platforms net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory Bluetooth: L2CAP: Fix user-after-free r8152: Rate limit overflow messages drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc() drm: Use size_t type for len variable in drm_copy_field() drm: Prevent drm_copy_field() to attempt copying a NULL pointer drm/komeda: Fix handling of atomic commits in the atomic_commit_tail hook gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init() drm/amd/display: fix overflow on MIN_I64 definition udmabuf: Set ubuf->sg = NULL if the creation of sg table fails drm: bridge: dw_hdmi: only trigger hotplug event on link change ALSA: usb-audio: Register card at the last interface drm/vc4: vec: Fix timings for VEC modes drm: panel-orientation-quirks: Add quirk for Anbernic Win600 platform/chrome: cros_ec: Notify the PM of wake events during resume platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading ASoC: SOF: pci: Change DMI match info to support all Chrome platforms drm/amdgpu: fix initial connector audio value drm/meson: reorder driver deinit sequence to fix use-after-free bug drm/meson: explicitly remove aggregate driver at module unload time mmc: sdhci-msm: add compatible string check for sdm670 drm/dp: Don't rewrite link config when setting phy test pattern drm/amd/display: Remove interface for periodic interrupt 1 ARM: dts: imx7d-sdb: config the max pressure for tsc2046 ARM: dts: imx6q: add missing properties for sram ARM: dts: imx6dl: add missing properties for sram ARM: dts: imx6qp: add missing properties for sram ARM: dts: imx6sl: add missing properties for sram ARM: dts: imx6sll: add missing properties for sram ARM: dts: imx6sx: add missing properties for sram kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply btrfs: dump extra info if one free space cache has more bitmaps than it should btrfs: scrub: try to fix super block errors btrfs: don't print information about space cache or tree every remount ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n clk: zynqmp: Fix stack-out-of-bounds in strncpy` media: cx88: Fix a null-ptr-deref bug in buffer_prepare() media: platform: fix some double free in meson-ge2d and mtk-jpeg and s5p-mfc clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate usb: host: xhci-plat: suspend and resume clocks usb: host: xhci-plat: suspend/resume clks for brcm dmaengine: ti: k3-udma: Reset UDMA_CHAN_RT byte counters to prevent overflow scsi: 3w-9xxx: Avoid disabling device if failing to enable it nbd: Fix hung when signal interrupts nbd_start_device_ioctl() iommu/arm-smmu-v3: Make default domain type of HiSilicon PTT device to identity power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type() staging: vt6655: fix potential memory leak blk-throttle: prevent overflow while calculating wait time ata: libahci_platform: Sanity check the DT child nodes number bcache: fix set_at_max_writeback_rate() for multiple attached devices soundwire: cadence: Don't overwrite msg->buf during write commands soundwire: intel: fix error handling on dai registration issues HID: roccat: Fix use-after-free in roccat_read() eventfd: guard wake_up in eventfd fs calls as well md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info() usb: musb: Fix musb_gadget.c rxstate overflow bug arm64: dts: imx8mp: Add snps,gfladj-refclk-lpm-sel quirk to USB nodes usb: dwc3: core: Enable GUCTL1 bit 10 for fixing termination error after resume bug Revert "usb: storage: Add quirk for Samsung Fit flash" staging: rtl8723bs: fix potential memory leak in rtw_init_drv_sw() staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv() scsi: tracing: Fix compile error in trace_array calls when TRACING is disabled ext2: Use kvmalloc() for group descriptor array nvme: copy firmware_rev on each init nvmet-tcp: add bounds check on Transfer Tag usb: idmouse: fix an uninit-value in idmouse_open clk: bcm2835: Make peripheral PLLC critical clk: bcm2835: Round UART input clock up perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc io_uring/af_unix: defer registered files gc to io_uring release io_uring: correct pinned_vm accounting io_uring/rw: fix short rw error handling io_uring/rw: fix error'ed retry return values io_uring/rw: fix unexpected link breakage mm: hugetlb: fix UAF in hugetlb_handle_userfault net: ieee802154: return -EINVAL for unknown addr type ALSA: usb-audio: Fix last interface check for registration blk-wbt: fix that 'rwb->wc' is always set to 1 in wbt_init() net: ethernet: ti: davinci_mdio: fix build for mdio bitbang uses Revert "net/ieee802154: reject zero-sized raw_sendmsg()" net/ieee802154: don't warn zero-sized raw_sendmsg() drm/amd/display: Fix build breakage with CONFIG_DEBUG_FS=n Kconfig.debug: simplify the dependency of DEBUG_INFO_DWARF4/5 Kconfig.debug: add toolchain checks for DEBUG_INFO_DWARF_TOOLCHAIN_DEFAULT lib/Kconfig.debug: Add check for non-constant .{s,u}leb128 support to DWARF5 ext4: continue to expand file system when the target size doesn't reach thermal: intel_powerclamp: Use first online CPU as control_cpu gcov: support GCC 12.1 and newer compilers io-wq: Fix memory leak in worker creation Linux 5.15.75 Change-Id: I5a3ef9688fb31003940d7e1828f863b9d50f1da9 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2022-11-16 16:28:57 +00:00
Shigeru Yoshida	c0d73be0af	nbd: Fix hung when signal interrupts nbd_start_device_ioctl() ... [ Upstream commit 1de7c3cf48fc41cd95adb12bd1ea9033a917798a ] syzbot reported hung task [1]. The following program is a simplified version of the reproducer: int main(void) { int sv[2], fd; if (socketpair(AF_UNIX, SOCK_STREAM, 0, sv) < 0) return 1; if ((fd = open("/dev/nbd0", 0)) < 0) return 1; if (ioctl(fd, NBD_SET_SIZE_BLOCKS, 0x81) < 0) return 1; if (ioctl(fd, NBD_SET_SOCK, sv[0]) < 0) return 1; if (ioctl(fd, NBD_DO_IT) < 0) return 1; return 0; } When signal interrupt nbd_start_device_ioctl() waiting the condition atomic_read(&config->recv_threads) == 0, the task can hung because it waits the completion of the inflight IOs. This patch fixes the issue by clearing queue, not just shutdown, when signal interrupt nbd_start_device_ioctl(). Link: https://syzkaller.appspot.com/bug?id=7d89a3ffacd2b83fdd39549bc4d8e0a89ef21239 [1] Reported-by: syzbot+38e6c55d4969a14c1534@syzkaller.appspotmail.com Signed-off-by: Shigeru Yoshida <syoshida@redhat.com> Reviewed-by: Josef Bacik <josef@toxicpanda.com> Link: https://lore.kernel.org/r/20220907163502.577561-1-syoshida@redhat.com Signed-off-by: Jens Axboe <axboe@kernel.dk> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-10-26 12:35:47 +02:00
Greg Kroah-Hartman	affdbc37bd	Merge 5.15.66 into android13-5.15-lts ... Changes in 5.15.66 drm/msm/dsi: fix the inconsistent indenting drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4 drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg drm/msm/dsi: Fix number of regulators for SDM660 platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask iio: adc: mcp3911: make use of the sign bit skmsg: Fix wrong last sg check in sk_msg_recvmsg() bpf: Restrict bpf_sys_bpf to CAP_PERFMON bpf, cgroup: Fix kernel BUG in purge_effective_progs ieee802154/adf7242: defer destroy_workqueue call drm/i915/backlight: extract backlight code to a separate file drm/i915/display: avoid warnings when registering dual panel backlight ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array wifi: cfg80211: debugfs: fix return type in ht40allow_map_read() Revert "xhci: turn off port power in shutdown" net: sparx5: fix handling uneven length packets in manual extraction net: smsc911x: Stop and start PHY during suspend and resume openvswitch: fix memory leak at failed datapath creation net: dsa: xrs700x: Use irqsave variant for u64 stats update net: sched: tbf: don't call qdisc_put() while holding tree lock net/sched: fix netdevice reference leaks in attach_default_qdiscs() ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler mlxbf_gige: compute MDIO period based on i1clk kcm: fix strp_init() order and cleanup sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb tcp: annotate data-race around challenge_timestamp Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb" net/smc: Remove redundant refcount increase soundwire: qcom: fix device status array range serial: fsl_lpuart: RS485 RTS polariy is inverse staging: rtl8712: fix use after free bugs staging: r8188eu: add firmware dependency powerpc: align syscall table for ppc32 vt: Clear selection before changing the font musb: fix USB_MUSB_TUSB6010 dependency tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag iio: ad7292: Prevent regulator double disable iio: adc: mcp3911: use correct formula for AD conversion misc: fastrpc: fix memory corruption on probe misc: fastrpc: fix memory corruption on open USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id mmc: core: Fix UHS-I SD 1.8V workaround branch mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure binder: fix UAF of ref->proc caused by race condition binder: fix alloc->vma_vm_mm null-ptr dereference cifs: fix small mempool leak in SMB2_negotiate() KVM: VMX: Heed the 'msr' argument in msr_write_intercepted() drm/i915/reg: Fix spelling mistake "Unsupport" -> "Unsupported" clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops" clk: core: Fix runtime PM sequence in clk_core_unprepare() Input: rk805-pwrkey - fix module autoloading clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc() clk: bcm: rpi: Prevent out-of-bounds access clk: bcm: rpi: Add missing newline hwmon: (gpio-fan) Fix array out of bounds access gpio: pca953x: Add mutex_lock for regcache sync in PM KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES xen/grants: prevent integer overflow in gnttab_dma_alloc_pages() mm: pagewalk: Fix race between unmap and page walker xen-blkback: Advertise feature-persistent as user requested xen-blkfront: Advertise feature-persistent as user requested xen-blkfront: Cache feature_persistent value before advertisement thunderbolt: Use the actual buffer in tb_async_error() usb: dwc3: pci: Add support for Intel Raptor Lake media: mceusb: Use new usb_control_msg_*() routines xhci: Add grace period after xHC start to prevent premature runtime suspend. USB: serial: cp210x: add Decagon UCA device id USB: serial: option: add support for OPPO R11 diag port USB: serial: option: add Quectel EM060K modem USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device usb: typec: tcpm: Return ENOTSUPP for power supply prop writes usb: dwc2: fix wrong order of phy_power_on and phy_init usb: cdns3: fix issue with rearming ISO OUT endpoint usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020) usb-storage: Add ignore-residue quirk for NXP PN7462AU s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages s390: fix nospec table alignments USB: core: Prevent nested device-reset calls usb: xhci-mtk: relax TT periodic bandwidth allocation usb: xhci-mtk: fix bandwidth release issue usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS driver core: Don't probe devices after bus_type.match() probe deferral wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected wifi: mac80211: Fix UAF in ieee80211_scan_rx() ip: fix triggering of 'icmp redirect' net: Use u64_stats_fetch_begin_irq() for stats fetch. net: mac802154: Fix a condition in the receive path ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298 ALSA: seq: oss: Fix data-race for max_midi_devs access ALSA: seq: Fix data-race at module auto-loading drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk drm/i915: Skip wm/ddb readout for disabled pipes tty: n_gsm: add sanity check for gsm->receive in gsm_receive_buf() kbuild: Unify options for BTF generation for vmlinux and modules kbuild: Add skip_encoding_btf_enum64 option to pahole usb: dwc3: fix PHY disable sequence usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup usb: dwc3: disable USB core PHY management USB: serial: ch341: fix lost character on LCR updates USB: serial: ch341: fix disabled rx timer on older devices Linux 5.15.66 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: Ifa86fa6b6b75a7f51ca178f139355c7688eabf2a	2022-09-23 14:07:17 +02:00
SeongJae Park	e31db376f6	xen-blkfront: Cache feature_persistent value before advertisement ... commit fe8f65b018effbf473f53af3538d0c1878b8b329 upstream. Xen blkfront advertises its support of the persistent grants feature when it first setting up and when resuming in 'talk_to_blkback()'. Then, blkback reads the advertised value when it connects with blkfront and decides if it will use the persistent grants feature or not, and advertises its decision to blkfront. Blkfront reads the blkback's decision and it also makes the decision for the use of the feature. Commit 402c43ea6b34 ("xen-blkfront: Apply 'feature_persistent' parameter when connect"), however, made the blkfront's read of the parameter for disabling the advertisement, namely 'feature_persistent', to be done when it negotiate, not when advertise. Therefore blkfront advertises without reading the parameter. As the field for caching the parameter value is zero-initialized, it always advertises as the feature is disabled, so that the persistent grants feature becomes always disabled. This commit fixes the issue by making the blkfront does parmeter caching just before the advertisement. Fixes: 402c43ea6b34 ("xen-blkfront: Apply 'feature_persistent' parameter when connect") Cc: <stable@vger.kernel.org> # 5.10.x Reported-by: Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Signed-off-by: SeongJae Park <sj@kernel.org> Tested-by: Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Reviewed-by: Juergen Gross <jgross@suse.com> Link: https://lore.kernel.org/r/20220831165824.94815-4-sj@kernel.org Signed-off-by: Juergen Gross <jgross@suse.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-09-08 12:28:05 +02:00
SeongJae Park	895a90ad7b	xen-blkfront: Advertise feature-persistent as user requested ... commit 9f5e0fe5d05f7e8de7f39b2b10089834eb0ff787 upstream. The advertisement of the persistent grants feature (writing 'feature-persistent' to xenbus) should mean not the decision for using the feature but only the availability of the feature. However, commit 74a852479c ("xen-blkfront: add a parameter for disabling of persistent grants") made a field of blkfront, which was a place for saving only the negotiation result, to be used for yet another purpose: caching of the 'feature_persistent' parameter value. As a result, the advertisement, which should follow only the parameter value, becomes inconsistent. This commit fixes the misuse of the semantic by making blkfront saves the parameter value in a separate place and advertises the support based on only the saved value. Fixes: 74a852479c ("xen-blkfront: add a parameter for disabling of persistent grants") Cc: <stable@vger.kernel.org> # 5.10.x Suggested-by: Juergen Gross <jgross@suse.com> Signed-off-by: SeongJae Park <sj@kernel.org> Tested-by: Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Reviewed-by: Juergen Gross <jgross@suse.com> Link: https://lore.kernel.org/r/20220831165824.94815-3-sj@kernel.org Signed-off-by: Juergen Gross <jgross@suse.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-09-08 12:28:05 +02:00
SeongJae Park	3e8107d69f	xen-blkback: Advertise feature-persistent as user requested ... commit 06ba5d2e943e97bb66e75c152e87f1d2c7027a67 upstream. The advertisement of the persistent grants feature (writing 'feature-persistent' to xenbus) should mean not the decision for using the feature but only the availability of the feature. However, commit aac8a70db2 ("xen-blkback: add a parameter for disabling of persistent grants") made a field of blkback, which was a place for saving only the negotiation result, to be used for yet another purpose: caching of the 'feature_persistent' parameter value. As a result, the advertisement, which should follow only the parameter value, becomes inconsistent. This commit fixes the misuse of the semantic by making blkback saves the parameter value in a separate place and advertises the support based on only the saved value. Fixes: aac8a70db2 ("xen-blkback: add a parameter for disabling of persistent grants") Cc: <stable@vger.kernel.org> # 5.10.x Suggested-by: Juergen Gross <jgross@suse.com> Signed-off-by: SeongJae Park <sj@kernel.org> Tested-by: Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Reviewed-by: Juergen Gross <jgross@suse.com> Link: https://lore.kernel.org/r/20220831165824.94815-2-sj@kernel.org Signed-off-by: Juergen Gross <jgross@suse.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-09-08 12:28:05 +02:00
Greg Kroah-Hartman	889a0c39fe	Merge 5.15.64 into android13-5.15-lts ... Changes in 5.15.64 wifi: rtlwifi: remove always-true condition pointed out by GCC 12 eth: sun: cassini: remove dead code audit: fix potential double free on error path from fsnotify_add_inode_mark cgroup: Fix race condition at rebind_subsystems() parisc: Make CONFIG_64BIT available for ARCH=parisc64 only parisc: Fix exception handler for fldw and fstw instructions kernel/sys_ni: add compat entry for fadvise64_64 x86/entry: Move CLD to the start of the idtentry macro block: add a bdev_max_zone_append_sectors helper block: add bdev_max_segments() helper btrfs: zoned: revive max_zone_append_bytes btrfs: replace BTRFS_MAX_EXTENT_SIZE with fs_info->max_extent_size btrfs: convert count_max_extents() to use fs_info->max_extent_size Input: i8042 - move __initconst to fix code styling warning Input: i8042 - merge quirk tables Input: i8042 - add TUXEDO devices to i8042 quirk tables Input: i8042 - add additional TUXEDO devices to i8042 quirk tables drivers/base: fix userspace break from using bin_attributes for cpumap and cpulist scsi: qla2xxx: Fix response queue handler reading stale packets scsi: qla2xxx: edif: Fix dropped IKE message btrfs: put initial index value of a directory in a constant btrfs: pass the dentry to btrfs_log_new_name() instead of the inode btrfs: remove unnecessary parameter delalloc_start for writepage_delalloc() riscv: lib: uaccess: fold fixups into body riscv: lib: uaccess: fix CSR_STATUS SR_SUM bit xfrm: fix refcount leak in __xfrm_policy_check() xfrm: clone missing x->lastused in xfrm_do_migrate af_key: Do not call xfrm_probe_algs in parallel xfrm: policy: fix metadata dst->dev xmit null pointer dereference fs: require CAP_SYS_ADMIN in target namespace for idmapped mounts net: use eth_hw_addr_set() instead of ether_addr_copy() Revert "net: macsec: update SCI upon MAC address change." NFS: Don't allocate nfs_fattr on the stack in __nfs42_ssc_open() NFSv4.2 fix problems with __nfs42_ssc_open SUNRPC: RPC level errors should set task->tk_rpc_status mm/smaps: don't access young/dirty bit if pte unpresent ntfs: fix acl handling rose: check NULL rose_loopback_neigh->loopback r8152: fix the units of some registers for RTL8156A r8152: fix the RX FIFO settings when suspending nfc: pn533: Fix use-after-free bugs caused by pn532_cmd_timeout ice: xsk: Force rings to be sized to power of 2 ice: xsk: prohibit usage of non-balanced queue id net/mlx5e: Properly disable vlan strip on non-UL reps net/mlx5: Avoid false positive lockdep warning by adding lock_class_key net/mlx5e: Fix wrong application of the LRO state net/mlx5e: Fix wrong tc flag used when set hw-tc-offload off net: ipa: don't assume SMEM is page-aligned net: phy: Don't WARN for PHY_READY state in mdio_bus_phy_resume() net: moxa: get rid of asymmetry in DMA mapping/unmapping bonding: 802.3ad: fix no transmission of LACPDUs net: ipvtap - add __init/__exit annotations to module init/exit funcs netfilter: ebtables: reject blobs that don't provide all entry points bnxt_en: fix NQ resource accounting during vf creation on 57500 chips netfilter: nf_tables: disallow updates of implicit chain netfilter: nf_tables: make table handle allocation per-netns friendly netfilter: nft_payload: report ERANGE for too long offset and length netfilter: nft_payload: do not truncate csum_offset and csum_type netfilter: nf_tables: do not leave chain stats enabled on error netfilter: nft_osf: restrict osf to ipv4, ipv6 and inet families netfilter: nft_tunnel: restrict it to netdev family netfilter: nf_tables: consolidate rule verdict trace call netfilter: nft_cmp: optimize comparison for 16-bytes netfilter: bitwise: improve error goto labels netfilter: nf_tables: upfront validation of data via nft_data_init() netfilter: nf_tables: disallow jump to implicit chain from set element netfilter: nf_tables: disallow binding to already bound chain netfilter: flowtable: add function to invoke garbage collection immediately netfilter: flowtable: fix stuck flows on cleanup due to pending work net: Fix data-races around sysctl_[rw]mem_(max|default). net: Fix data-races around weight_p and dev_weight_[rt]x_bias. net: Fix data-races around netdev_max_backlog. net: Fix data-races around netdev_tstamp_prequeue. ratelimit: Fix data-races in ___ratelimit(). net: Fix data-races around sysctl_optmem_max. net: Fix a data-race around sysctl_tstamp_allow_data. net: Fix a data-race around sysctl_net_busy_poll. net: Fix a data-race around sysctl_net_busy_read. net: Fix a data-race around netdev_budget. tcp: expose the tcp_mark_push() and tcp_skb_entail() helpers mptcp: stop relying on tcp_tx_skb_cache net: Fix data-races around sysctl_max_skb_frags. net: Fix a data-race around netdev_budget_usecs. net: Fix data-races around sysctl_fb_tunnels_only_for_init_net. net: Fix data-races around sysctl_devconf_inherit_init_net. net: Fix a data-race around sysctl_somaxconn. ixgbe: stop resetting SYSTIME in ixgbe_ptp_start_cyclecounter i40e: Fix incorrect address type for IPv6 flow rules rxrpc: Fix locking in rxrpc's sendmsg ionic: widen queue_lock use around lif init and deinit ionic: clear broken state on generation change ionic: fix up issues with handling EAGAIN on FW cmds ionic: VF initial random MAC address if no assigned mac net: stmmac: work around sporadic tx issue on link-up btrfs: fix silent failure when deleting root reference btrfs: replace: drop assert for suspended replace btrfs: add info when mount fails due to stale replace target btrfs: check if root is readonly while setting security xattr btrfs: fix possible memory leak in btrfs_get_dev_args_from_path() perf/x86/lbr: Enable the branch type for the Arch LBR by default x86/unwind/orc: Unwind ftrace trampolines with correct ORC entry x86/bugs: Add "unknown" reporting for MMIO Stale Data x86/nospec: Unwreck the RSB stuffing loop: Check for overflow while configuring loop writeback: avoid use-after-free after removing device asm-generic: sections: refactor memory_intersects mm/damon/dbgfs: avoid duplicate context directory creation s390/mm: do not trigger write fault when vma does not allow VM_WRITE bootmem: remove the vmemmap pages from kmemleak in put_page_bootmem s390: fix double free of GS and RI CBs on fork() failure fbdev: fbcon: Properly revert changes when vc_resize() failed Revert "memcg: cleanup racy sum avoidance code" ACPI: processor: Remove freq Qos request for all CPUs nouveau: explicitly wait on the fence in nouveau_bo_move_m2mf smb3: missing inode locks in punch hole xen/privcmd: fix error exit of privcmd_ioctl_dm_op() riscv: traps: add missing prototype io_uring: fix issue with io_write() not always undoing sb_start_write() Revert "usbnet: smsc95xx: Fix deadlock on runtime resume" Revert "usbnet: smsc95xx: Forward PHY interrupts to PHY driver to avoid polling" mm/hugetlb: fix hugetlb not supporting softdirty tracking Revert "md-raid: destroy the bitmap after destroying the thread" md: call __md_stop_writes in md_stop mptcp: Fix crash due to tcp_tsorted_anchor was initialized before release skb arm64: Fix match_list for erratum 1286807 on Arm Cortex-A76 binder_alloc: add missing mmap_lock calls when using the VMA x86/nospec: Fix i386 RSB stuffing Documentation/ABI: Mention retbleed vulnerability info file for sysfs blk-mq: fix io hung due to missing commit_rqs perf python: Fix build when PYTHON_CONFIG is user supplied perf/x86/intel/uncore: Fix broken read_counter() for SNB IMC PMU perf/x86/intel/ds: Fix precise store latency handling perf stat: Clear evsel->reset_group for each stat run scsi: ufs: core: Enable link lost interrupt scsi: storvsc: Remove WQ_MEM_RECLAIM from storvsc_error_wq bpf: Don't use tnum_range on array range checking for poke descriptors Linux 5.15.64 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: Iaba96c173ad668df1c20b3bee08ce0e34f1068e1	2022-08-31 17:29:10 +02:00
Siddh Raman Pant	0455bef690	loop: Check for overflow while configuring loop ... commit c490a0b5a4f36da3918181a8acdc6991d967c5f3 upstream. The userspace can configure a loop using an ioctl call, wherein a configuration of type loop_config is passed (see lo_ioctl()'s case on line 1550 of drivers/block/loop.c). This proceeds to call loop_configure() which in turn calls loop_set_status_from_info() (see line 1050 of loop.c), passing &config->info which is of type loop_info64*. This function then sets the appropriate values, like the offset. loop_device has lo_offset of type loff_t (see line 52 of loop.c), which is typdef-chained to long long, whereas loop_info64 has lo_offset of type __u64 (see line 56 of include/uapi/linux/loop.h). The function directly copies offset from info to the device as follows (See line 980 of loop.c): lo->lo_offset = info->lo_offset; This results in an overflow, which triggers a warning in iomap_iter() due to a call to iomap_iter_done() which has: WARN_ON_ONCE(iter->iomap.offset > iter->pos); Thus, check for negative value during loop_set_status_from_info(). Bug report: https://syzkaller.appspot.com/bug?id=c620fe14aac810396d3c3edc9ad73848bf69a29e Reported-and-tested-by: syzbot+a8e049cd3abd342936b6@syzkaller.appspotmail.com Cc: stable@vger.kernel.org Reviewed-by: Matthew Wilcox (Oracle) <willy@infradead.org> Signed-off-by: Siddh Raman Pant <code@siddh.me> Reviewed-by: Christoph Hellwig <hch@lst.de> Link: https://lore.kernel.org/r/20220823160810.181275-1-code@siddh.me Signed-off-by: Jens Axboe <axboe@kernel.dk> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-08-31 17:16:47 +02:00
Greg Kroah-Hartman	c4be56dac8	Merge 5.15.63 into android13-5.15-lts ... Changes in 5.15.63 ALSA: info: Fix llseek return value when using callback ALSA: hda/realtek: Add quirk for Clevo NS50PU, NS70PU KVM: Unconditionally get a ref to /dev/kvm module when creating a VM x86/mm: Use proper mask when setting PUD mapping rds: add missing barrier to release_refill locking/atomic: Make test_and_*_bit() ordered on failure drm/nouveau: recognise GA103 drm/ttm: Fix dummy res NULL ptr deref bug drm/amd/display: Check correct bounds for stream encoder instances for DCN303 ata: libata-eh: Add missing command name mmc: pxamci: Fix another error handling path in pxamci_probe() mmc: pxamci: Fix an error handling path in pxamci_probe() mmc: meson-gx: Fix an error handling path in meson_mmc_probe() btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() btrfs: reset RO counter on block group if we fail to relocate btrfs: fix lost error handling when looking up extended ref on log replay cifs: Fix memory leak on the deferred close x86/kprobes: Fix JNG/JNLE emulation tracing/perf: Fix double put of trace event when init fails tracing/eprobes: Do not allow eprobes to use $stack, or % for regs tracing/eprobes: Do not hardcode $comm as a string tracing/eprobes: Have event probes be consistent with kprobes and uprobes tracing/probes: Have kprobes and uprobes use $COMM too tracing: Have filter accept "common_cpu" to be consistent ALSA: usb-audio: More comprehensive mixer map for ASUS ROG Zenith II dt-bindings: usb: mtk-xhci: Allow wakeup interrupt-names to be optional can: ems_usb: fix clang's -Wunaligned-access warning apparmor: fix quiet_denied for file rules apparmor: fix absroot causing audited secids to begin with = apparmor: Fix failed mount permission check error message apparmor: fix aa_label_asxprint return check apparmor: fix setting unconfined mode on a loaded profile apparmor: fix overlapping attachment computation apparmor: fix reference count leak in aa_pivotroot() apparmor: Fix memleak in aa_simple_write_to_buffer() Documentation: ACPI: EINJ: Fix obsolete example NFSv4.1: Don't decrease the value of seq_nr_highest_sent NFSv4.1: Handle NFS4ERR_DELAY replies to OP_SEQUENCE correctly NFSv4: Fix races in the legacy idmapper upcall NFSv4.1: RECLAIM_COMPLETE must handle EACCES NFSv4/pnfs: Fix a use-after-free bug in open BPF: Fix potential bad pointer dereference in bpf_sys_bpf() bpf: Don't reinit map value in prealloc_lru_pop bpf: Acquire map uref in .init_seq_private for array map iterator bpf: Acquire map uref in .init_seq_private for hash map iterator bpf: Acquire map uref in .init_seq_private for sock local storage map iterator bpf: Acquire map uref in .init_seq_private for sock{map,hash} iterator bpf: Check the validity of max_rdwr_access for sock local storage map iterator can: mcp251x: Fix race condition on receive interrupt can: j1939: j1939_session_destroy(): fix memory leak of skbs net: atlantic: fix aq_vec index out of range error m68k: coldfire/device.c: protect FLEXCAN blocks sunrpc: fix expiry of auth creds SUNRPC: Fix xdr_encode_bool() SUNRPC: Reinitialise the backchannel request buffers before reuse virtio_net: fix memory leak inside XPD_TX with mergeable devlink: Fix use-after-free after a failed reload net: phy: Warn about incorrect mdio_bus_phy_resume() state net: bcmgenet: Indicate MAC is in charge of PHY PM net: bgmac: Fix a BUG triggered by wrong bytes_compl selftests: forwarding: Fix failing tests with old libnet dt-bindings: arm: qcom: fix Alcatel OneTouch Idol 3 compatibles pinctrl: nomadik: Fix refcount leak in nmk_pinctrl_dt_subnode_to_map pinctrl: qcom: msm8916: Allow CAMSS GP clocks to be muxed pinctrl: amd: Don't save/restore interrupt status and wake status bits pinctrl: sunxi: Add I/O bias setting for H6 R-PIO pinctrl: qcom: sm8250: Fix PDC map Input: exc3000 - fix return value check of wait_for_completion_timeout octeontx2-pf: Fix NIX_AF_TL3_TL2X_LINKX_CFG register configuration octeontx2-af: Apply tx nibble fixup always octeontx2-af: suppress external profile loading warning octeontx2-af: Fix mcam entry resource leak octeontx2-af: Fix key checking for source mac ACPI: property: Return type of acpi_add_nondev_subnodes() should be bool geneve: do not use RT_TOS for IPv6 flowlabel mlx5: do not use RT_TOS for IPv6 flowlabel ipv6: do not use RT_TOS for IPv6 flowlabel plip: avoid rcu debug splat vsock: Fix memory leak in vsock_connect() vsock: Set socket state back to SS_UNCONNECTED in vsock_connect_timeout() dt-bindings: gpio: zynq: Add missing compatible strings dt-bindings: arm: qcom: fix Longcheer L8150 compatibles dt-bindings: arm: qcom: fix MSM8916 MTP compatibles dt-bindings: arm: qcom: fix MSM8994 boards compatibles dt-bindings: clock: qcom,gcc-msm8996: add more GCC clock sources spi: dt-bindings: cadence: add missing 'required' spi: dt-bindings: zynqmp-qspi: add missing 'required' ceph: use correct index when encoding client supported features tools/vm/slabinfo: use alphabetic order when two values are equal ceph: don't leak snap_rwsem in handle_cap_grant kbuild: dummy-tools: avoid tmpdir leak in dummy gcc tools build: Switch to new openssl API for test-libcrypto NTB: ntb_tool: uninitialized heap data in tool_fn_write() nfp: ethtool: fix the display error of `ethtool -m DEVNAME` xen/xenbus: fix return type in xenbus_file_read() atm: idt77252: fix use-after-free bugs caused by tst_timer geneve: fix TOS inheriting for ipv4 perf probe: Fix an error handling path in 'parse_perf_probe_command()' perf parse-events: Fix segfault when event parser gets an error perf tests: Fix Track with sched_switch test for hybrid case dpaa2-eth: trace the allocated address instead of page struct fs/ntfs3: Fix using uninitialized value n when calling indx_read fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr fs/ntfs3: Don't clear upper bits accidentally in log_replay() fs/ntfs3: Fix double free on remount fs/ntfs3: Do not change mode if ntfs_set_ea failed fs/ntfs3: Fix missing i_op in ntfs_read_mft nios2: page fault et.al. are *not* restartable syscalls... nios2: don't leave NULLs in sys_call_table[] nios2: traced syscall does need to check the syscall number nios2: fix syscall restart checks nios2: restarts apply only to the first sigframe we build... nios2: add force_successful_syscall_return() iavf: Fix adminq error handling iavf: Fix reset error handling ASoC: SOF: debug: Fix potential buffer overflow by snprintf() ASoC: tas2770: Set correct FSYNC polarity ASoC: tas2770: Allow mono streams ASoC: tas2770: Drop conflicting set_bias_level power setting ASoC: tas2770: Fix handling of mute/unmute ASoC: codec: tlv320aic32x4: fix mono playback via I2S netfilter: nf_tables: use READ_ONCE and WRITE_ONCE for shared generation id access fs/ntfs3: uninitialized variable in ntfs_set_acl_ex() netfilter: nf_tables: disallow NFTA_SET_ELEM_KEY_END with NFT_SET_ELEM_INTERVAL_END flag netfilter: nf_tables: possible module reference underflow in error path netfilter: nf_tables: really skip inactive sets when allocating name netfilter: nf_tables: validate NFTA_SET_ELEM_OBJREF based on NFT_SET_OBJECT flag netfilter: nf_tables: NFTA_SET_ELEM_KEY_END requires concat and interval flags netfilter: nf_tables: disallow NFT_SET_ELEM_CATCHALL and NFT_SET_ELEM_INTERVAL_END netfilter: nf_tables: check NFT_SET_CONCAT flag if field_count is specified powerpc/pci: Fix get_phb_number() locking spi: meson-spicc: add local pow2 clock ops to preserve rate between messages net/sunrpc: fix potential memory leaks in rpc_sysfs_xprt_state_change() net: dsa: mv88e6060: prevent crash on an unused port mlxsw: spectrum: Clear PTP configuration after unregistering the netdevice net: moxa: pass pdev instead of ndev to DMA functions net: fix potential refcount leak in ndisc_router_discovery() net: dsa: microchip: ksz9477: fix fdb_dump last invalid entry net: dsa: felix: fix ethtool 256-511 and 512-1023 TX packet counters net: genl: fix error path memory leak in policy dumping net: dsa: don't warn in dsa_port_set_state_now() when driver doesn't support it net: dsa: sja1105: fix buffer overflow in sja1105_setup_devlink_regions() ice: Ignore EEXIST when setting promisc mode i2c: imx: Make sure to unregister adapter on remove() regulator: pca9450: Remove restrictions for regulator-name i40e: Fix to stop tx_timeout recovery if GLOBR fails fec: Fix timer capture timing in `fec_ptp_enable_pps()` stmmac: intel: Add a missing clk_disable_unprepare() call in intel_eth_pci_remove() igb: Add lock to avoid data race kbuild: fix the modules order between drivers and libs gcc-plugins: Undefine LATENT_ENTROPY_PLUGIN when plugin disabled for a file tracing/eprobes: Fix reading of string fields drm/imx/dcss: get rid of HPD warning message ASoC: SOF: Intel: hda: Define rom_status_reg in sof_intel_dsp_desc ASoC: SOF: Intel: hda: Fix potential buffer overflow by snprintf() drm/meson: Fix refcount bugs in meson_vpu_has_available_connectors() drm/sun4i: dsi: Prevent underflow when computing packet sizes net: qrtr: start MHI channel after endpoit creation KVM: arm64: Treat PMCR_EL1.LC as RES1 on asymmetric systems KVM: arm64: Reject 32bit user PSTATE on asymmetric systems HID: multitouch: new device class fix Lenovo X12 trackpad sticky PCI: Add ACS quirk for Broadcom BCM5750x NICs platform/chrome: cros_ec_proto: don't show MKBP version if unsupported usb: cdns3 fix use-after-free at workaround 2 usb: cdns3: fix random warning message when driver load usb: gadget: uvc: calculate the number of request depending on framesize usb: gadget: uvc: call uvc uvcg_warn on completed status instead of uvcg_info PCI: aardvark: Fix reporting Slot capabilities on emulated bridge irqchip/tegra: Fix overflow implicit truncation warnings drm/meson: Fix overflow implicit truncation warnings clk: ti: Stop using legacy clkctrl names for omap4 and 5 scsi: ufs: ufs-mediatek: Fix the timing of configuring device regulators usb: host: ohci-ppc-of: Fix refcount leak bug usb: renesas: Fix refcount leak bug usb: dwc2: gadget: remove D+ pull-up while no vbus with usb-role-switch vboxguest: Do not use devm for irq clk: qcom: ipq8074: dont disable gcc_sleep_clk_src uacce: Handle parent device removal or parent driver module rmmod zram: do not lookup algorithm in backends table clk: qcom: clk-alpha-pll: fix clk_trion_pll_configure description scsi: lpfc: Prevent buffer overflow crashes in debugfs with malformed user input scsi: lpfc: Fix possible memory leak when failing to issue CMF WQE gadgetfs: ep_io - wait until IRQ finishes coresight: etm4x: avoid build failure with unrolled loops habanalabs/gaudi: fix shift out of bounds habanalabs/gaudi: mask constant value before cast mmc: tmio: avoid glitches when resetting pinctrl: intel: Check against matching data instead of ACPI companion cxl: Fix a memory leak in an error handling path PCI/ACPI: Guard ARM64-specific mcfg_quirks um: add "noreboot" command line option for PANIC_TIMEOUT=-1 setups dmaengine: dw-axi-dmac: do not print NULL LLI during error dmaengine: dw-axi-dmac: ignore interrupt if no descriptor RDMA/rxe: Limit the number of calls to each tasklet csky/kprobe: reclaim insn_slot on kprobe unregistration selftests/kprobe: Do not test for GRP/ without event failures dmaengine: sprd: Cleanup in .remove() after pm_runtime_get_sync() failed openrisc: io: Define iounmap argument as volatile phy: samsung: phy-exynos-pcie: sanitize init/power_on callbacks md: Notify sysfs sync_completed in md_reap_sync_thread() nvmet-tcp: fix lockdep complaint on nvmet_tcp_wq flush during queue teardown drivers:md:fix a potential use-after-free bug ext4: avoid remove directory when directory is corrupted ext4: avoid resizing to a partial cluster size lib/list_debug.c: Detect uninitialized lists tty: serial: Fix refcount leak bug in ucc_uart.c KVM: PPC: Book3S HV: Fix "rm_exit" entry in debugfs timings vfio: Clear the caps->buf to NULL after free mips: cavium-octeon: Fix missing of_node_put() in octeon2_usb_clocks_start iommu/io-pgtable-arm-v7s: Add a quirk to allow pgtable PA up to 35bit modules: Ensure natural alignment for .altinstructions and __bug_table sections ASoC: rsnd: care default case on rsnd_ssiu_busif_err_irq_ctrl() riscv: dts: sifive: Add fu740 topology information riscv: dts: canaan: Add k210 topology information riscv: mmap with PROT_WRITE but no PROT_READ is invalid RISC-V: Add fast call path of crash_kexec() watchdog: export lockup_detector_reconfigure powerpc/32: Set an IBAT covering up to _einittext during init powerpc/32: Don't always pass -mcpu=powerpc to the compiler ovl: warn if trusted xattr creation fails powerpc/ioda/iommu/debugfs: Generate unique debugfs entries ALSA: core: Add async signal helpers ALSA: timer: Use deferred fasync helper ALSA: control: Use deferred fasync helper f2fs: fix to avoid use f2fs_bug_on() in f2fs_new_node_page() f2fs: fix to do sanity check on segment type in build_sit_entries() smb3: check xattr value length earlier powerpc/64: Init jump labels before parse_early_param() venus: pm_helpers: Fix warning in OPP during probe video: fbdev: i740fb: Check the argument of i740_calc_vclk() MIPS: tlbex: Explicitly compare _PAGE_NO_EXEC against 0 can: j1939: j1939_sk_queue_activate_next_locked(): replace WARN_ON_ONCE with netdev_warn_once() scsi: ufs: ufs-mediatek: Fix build error and type mismatch xfs: flush inodegc workqueue tasks before cancel xfs: reserve quota for dir expansion when linking/unlinking files xfs: reserve quota for target dir expansion when renaming files xfs: remove infinite loop when reserving free block pool xfs: always succeed at setting the reserve pool size xfs: fix overfilling of reserve pool xfs: fix soft lockup via spinning in filestream ag selection loop xfs: revert "xfs: actually bump warning counts when we send warnings" xfs: reject crazy array sizes being fed to XFS_IOC_GETBMAP* Linux 5.15.63 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I7fda993b776ff638dff390f0ae7e3b26c45ca9e4	2022-08-29 16:32:18 +02:00
Sergey Senozhatsky	2504102938	zram: do not lookup algorithm in backends table ... [ Upstream commit dc89997264de565999a1cb55db3f295d3a8e457b ] Always use crypto_has_comp() so that crypto can lookup module, call usermodhelper to load the modules, wait for usermodhelper to finish and so on. Otherwise crypto will do all of these steps under CPU hot-plug lock and this looks like too much stuff to handle under the CPU hot-plug lock. Besides this can end up in a deadlock when usermodhelper triggers a code path that attempts to lock the CPU hot-plug lock, that zram already holds. An example of such deadlock: - path A. zram grabs CPU hot-plug lock, execs /sbin/modprobe from crypto and waits for modprobe to finish disksize_store zcomp_create __cpuhp_state_add_instance __cpuhp_state_add_instance_cpuslocked zcomp_cpu_up_prepare crypto_alloc_base crypto_alg_mod_lookup call_usermodehelper_exec wait_for_completion_killable do_wait_for_common schedule - path B. async work kthread that brings in scsi device. It wants to register CPUHP states at some point, and it needs the CPU hot-plug lock for that, which is owned by zram. async_run_entry_fn scsi_probe_and_add_lun scsi_mq_alloc_queue blk_mq_init_queue blk_mq_init_allocated_queue blk_mq_realloc_hw_ctxs __cpuhp_state_add_instance __cpuhp_state_add_instance_cpuslocked mutex_lock schedule - path C. modprobe sleeps, waiting for all aync works to finish. load_module do_init_module async_synchronize_full async_synchronize_cookie_domain schedule [senozhatsky@chromium.org: add comment] Link: https://lkml.kernel.org/r/20220624060606.1014474-1-senozhatsky@chromium.org Link: https://lkml.kernel.org/r/20220622023501.517125-1-senozhatsky@chromium.org Signed-off-by: Sergey Senozhatsky <senozhatsky@chromium.org> Cc: Minchan Kim <minchan@kernel.org> Cc: Nitin Gupta <ngupta@vflare.org> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-08-25 11:40:34 +02:00
Greg Kroah-Hartman	8fd5b33ea5	Merge 5.15.61 into android13-5.15-lts ... Changes in 5.15.61 Makefile: link with -z noexecstack --no-warn-rwx-segments x86: link vdso and boot with -z noexecstack --no-warn-rwx-segments Revert "pNFS: nfs3_set_ds_client should set NFS_CS_NOPING" scsi: Revert "scsi: qla2xxx: Fix disk failure to rediscover" pNFS/flexfiles: Report RDMA connection errors to the server NFSD: Clean up the show_nf_flags() macro nfsd: eliminate the NFSD_FILE_BREAK_* flags ALSA: usb-audio: Add quirk for Behringer UMC202HD ALSA: bcd2000: Fix a UAF bug on the error path of probing ALSA: hda/realtek: Add quirk for Clevo NV45PZ ALSA: hda/realtek: Add quirk for HP Spectre x360 15-eb0xxx wifi: mac80211_hwsim: fix race condition in pending packet wifi: mac80211_hwsim: add back erroneously removed cast wifi: mac80211_hwsim: use 32-bit skb cookie add barriers to buffer_uptodate and set_buffer_uptodate lockd: detect and reject lock arguments that overflow HID: hid-input: add Surface Go battery quirk HID: wacom: Only report rotation for art pen HID: wacom: Don't register pad_input for touch switch KVM: nVMX: Snapshot pre-VM-Enter BNDCFGS for !nested_run_pending case KVM: nVMX: Snapshot pre-VM-Enter DEBUGCTL for !nested_run_pending case KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 KVM: s390: pv: don't present the ecall interrupt twice KVM: x86: Split kvm_is_valid_cr4() and export only the non-vendor bits KVM: nVMX: Let userspace set nVMX MSR to any _host_ supported value KVM: nVMX: Account for KVM reserved CR4 bits in consistency checks KVM: nVMX: Inject #UD if VMXON is attempted with incompatible CR0/CR4 KVM: x86: Mark TSS busy during LTR emulation _after_ all fault checks KVM: x86: Set error code to segment selector on LLDT/LTR non-canonical #GP KVM: nVMX: Always enable TSC scaling for L2 when it was enabled for L1 KVM: x86: Tag kvm_mmu_x86_module_init() with __init KVM: x86: do not report preemption if the steal time cache is stale KVM: x86: revalidate steal time cache if MSR value changes riscv: set default pm_power_off to NULL ALSA: hda/conexant: Add quirk for LENOVO 20149 Notebook model ALSA: hda/cirrus - support for iMac 12,1 model ALSA: hda/realtek: Add quirk for another Asus K42JZ model ALSA: hda/realtek: Add a quirk for HP OMEN 15 (8786) mute LED tty: vt: initialize unicode screen buffer vfs: Check the truncate maximum size in inode_newsize_ok() fs: Add missing umask strip in vfs_tmpfile thermal: sysfs: Fix cooling_device_stats_setup() error code path fbcon: Fix boundary checks for fbcon=vc:n1-n2 parameters fbcon: Fix accelerated fbdev scrolling while logo is still shown usbnet: Fix linkwatch use-after-free on disconnect fix short copy handling in copy_mc_pipe_to_iter() crypto: ccp - Use kzalloc for sev ioctl interfaces to prevent kernel memory leak ovl: drop WARN_ON() dentry is NULL in ovl_encode_fh() parisc: Fix device names in /proc/iomem parisc: Drop pa_swapper_pg_lock spinlock parisc: Check the return value of ioremap() in lba_driver_probe() parisc: io_pgetevents_time64() needs compat syscall in 32-bit compat mode riscv:uprobe fix SR_SPIE set/clear handling dt-bindings: riscv: fix SiFive l2-cache's cache-sets RISC-V: kexec: Fixup use of smp_processor_id() in preemptible context RISC-V: Fixup get incorrect user mode PC for kernel mode regs RISC-V: Fixup schedule out issue in machine_crash_shutdown() RISC-V: Add modules to virtual kernel memory layout dump rtc: rx8025: fix 12/24 hour mode detection on RX-8035 drm/gem: Properly annotate WW context on drm_gem_lock_reservations() error drm/shmem-helper: Add missing vunmap on error drm/vc4: hdmi: Disable audio if dmas property is present but empty drm/hyperv-drm: Include framebuffer and EDID headers drm/nouveau: fix another off-by-one in nvbios_addr drm/nouveau: Don't pm_runtime_put_sync(), only pm_runtime_put_autosuspend() drm/nouveau/acpi: Don't print error when we get -EINPROGRESS from pm_runtime drm/nouveau/kms: Fix failure path for creating DP connectors drm/amdgpu: Check BO's requested pinning domains against its preferred_domains drm/amdgpu: fix check in fbdev init bpf: Fix KASAN use-after-free Read in compute_effective_progs btrfs: reject log replay if there is unsupported RO compat flag mtd: rawnand: arasan: Fix clock rate in NV-DDR mtd: rawnand: arasan: Update NAND bus clock instead of system clock um: Remove straying parenthesis um: seed rng using host OS rng iio: fix iio_format_avail_range() printing for none IIO_VAL_INT iio: light: isl29028: Fix the warning in isl29028_remove() scsi: sg: Allow waiting for commands to complete on removed device scsi: qla2xxx: Fix incorrect display of max frame size scsi: qla2xxx: Zero undefined mailbox IN registers soundwire: qcom: Check device status before reading devid ksmbd: fix memory leak in smb2_handle_negotiate ksmbd: prevent out of bound read for SMB2_TREE_CONNNECT ksmbd: fix use-after-free bug in smb2_tree_disconect fuse: limit nsec fuse: ioctl: translate ENOSYS serial: mvebu-uart: uart2 error bits clearing md-raid: destroy the bitmap after destroying the thread md-raid10: fix KASAN warning mbcache: don't reclaim used entries mbcache: add functions to delete entry if unused media: [PATCH] pci: atomisp_cmd: fix three missing checks on list iterator ia64, processor: fix -Wincompatible-pointer-types in ia64_get_irr() PCI: Add defines for normal and subtractive PCI bridges powerpc/fsl-pci: Fix Class Code of PCIe Root Port powerpc/ptdump: Fix display of RW pages on FSL_BOOK3E powerpc/powernv: Avoid crashing if rng is NULL MIPS: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK coresight: Clear the connection field properly usb: typec: ucsi: Acknowledge the GET_ERROR_STATUS command completion USB: HCD: Fix URB giveback issue in tasklet function ARM: dts: uniphier: Fix USB interrupts for PXs2 SoC arm64: dts: uniphier: Fix USB interrupts for PXs3 SoC usb: dwc3: gadget: refactor dwc3_repare_one_trb usb: dwc3: gadget: fix high speed multiplier setting netfilter: nf_tables: do not allow SET_ID to refer to another table netfilter: nf_tables: do not allow CHAIN_ID to refer to another table netfilter: nf_tables: do not allow RULE_ID to refer to another chain netfilter: nf_tables: fix null deref due to zeroed list head epoll: autoremove wakers even more aggressively x86: Handle idle=nomwait cmdline properly for x86_idle arch: make TRACE_IRQFLAGS_NMI_SUPPORT generic arm64: Do not forget syscall when starting a new thread. arm64: fix oops in concurrently setting insn_emulation sysctls arm64: kasan: Revert "arm64: mte: reset the page tag in page->flags" ext2: Add more validity checks for inode counts sched/fair: Introduce SIS_UTIL to search idle CPU based on sum of util_avg genirq: Don't return error on missing optional irq_request_resources() irqchip/mips-gic: Only register IPI domain when SMP is enabled genirq: GENERIC_IRQ_IPI depends on SMP sched/core: Always flush pending blk_plug irqchip/mips-gic: Check the return value of ioremap() in gic_of_init() wait: Fix __wait_event_hrtimeout for RT/DL tasks ARM: dts: imx6ul: add missing properties for sram ARM: dts: imx6ul: change operating-points to uint32-matrix ARM: dts: imx6ul: fix keypad compatible ARM: dts: imx6ul: fix csi node compatible ARM: dts: imx6ul: fix lcdif node compatible ARM: dts: imx6ul: fix qspi node compatible ARM: dts: BCM5301X: Add DT for Meraki MR26 ARM: dts: ux500: Fix Codina accelerometer mounting matrix ARM: dts: ux500: Fix Gavini accelerometer mounting matrix spi: synquacer: Add missing clk_disable_unprepare() ARM: OMAP2+: display: Fix refcount leak bug ARM: OMAP2+: pdata-quirks: Fix refcount leak bug ACPI: EC: Remove duplicate ThinkPad X1 Carbon 6th entry from DMI quirks ACPI: EC: Drop the EC_FLAGS_IGNORE_DSDT_GPE quirk ACPI: PM: save NVS memory for Lenovo G40-45 ACPI: LPSS: Fix missing check in register_device_clock() ARM: dts: qcom: sdx55: Fix the IRQ trigger type for UART arm64: dts: qcom: ipq8074: fix NAND node name arm64: dts: allwinner: a64: orangepi-win: Fix LED node name ARM: shmobile: rcar-gen2: Increase refcount for new reference firmware: tegra: Fix error check return value of debugfs_create_file() hwmon: (dell-smm) Add Dell XPS 13 7390 to fan control whitelist hwmon: (sht15) Fix wrong assumptions in device remove callback PM: hibernate: defer device probing when resuming from hibernation selinux: fix memleak in security_read_state_kernel() selinux: Add boundary check in put_entry() kasan: test: Silence GCC 12 warnings drm/amdgpu: Remove one duplicated ef removal powerpc/64s: Disable stack variable initialisation for prom_init spi: spi-rspi: Fix PIO fallback on RZ platforms ARM: findbit: fix overflowing offset meson-mx-socinfo: Fix refcount leak in meson_mx_socinfo_init arm64: dts: renesas: beacon: Fix regulator node names spi: spi-altera-dfl: Fix an error handling path ARM: bcm: Fix refcount leak in bcm_kona_smc_init ACPI: processor/idle: Annotate more functions to live in cpuidle section ARM: dts: imx7d-colibri-emmc: add cpu1 supply soc: renesas: r8a779a0-sysc: Fix A2DP1 and A2CV[2357] PDR values scsi: hisi_sas: Use managed PCI functions dt-bindings: iio: accel: Add DT binding doc for ADXL355 soc: amlogic: Fix refcount leak in meson-secure-pwrc.c arm64: dts: renesas: Fix thermal-sensors on single-zone sensors x86/pmem: Fix platform-device leak in error path ARM: dts: ast2500-evb: fix board compatible ARM: dts: ast2600-evb: fix board compatible ARM: dts: ast2600-evb-a1: fix board compatible arm64: dts: mt8192: Fix idle-states nodes naming scheme arm64: dts: mt8192: Fix idle-states entry-method arm64: select TRACE_IRQFLAGS_NMI_SUPPORT arm64: cpufeature: Allow different PMU versions in ID_DFR0_EL1 locking/lockdep: Fix lockdep_init_map_*() confusion arm64: dts: qcom: sc7180: Remove ipa_fw_mem node on trogdor soc: fsl: guts: machine variable might be unset block: fix infinite loop for invalid zone append ARM: dts: qcom: mdm9615: add missing PMIC GPIO reg ARM: OMAP2+: Fix refcount leak in omapdss_init_of ARM: OMAP2+: Fix refcount leak in omap3xxx_prm_late_init arm64: dts: qcom: sdm630: disable GPU by default arm64: dts: qcom: sdm630: fix the qusb2phy ref clock arm64: dts: qcom: sdm630: fix gpu's interconnect path arm64: dts: qcom: sdm636-sony-xperia-ganges-mermaid: correct sdc2 pinconf cpufreq: zynq: Fix refcount leak in zynq_get_revision regulator: qcom_smd: Fix pm8916_pldo range ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP ARM: dts: qcom-msm8974: fix irq type on blsp2_uart1 soc: qcom: ocmem: Fix refcount leak in of_get_ocmem soc: qcom: aoss: Fix refcount leak in qmp_cooling_devices_register ARM: dts: qcom: pm8841: add required thermal-sensor-cells bus: hisi_lpc: fix missing platform_device_put() in hisi_lpc_acpi_probe() stack: Declare {randomize_,}kstack_offset to fix Sparse warnings arm64: dts: qcom: msm8916: Fix typo in pronto remoteproc node ACPI: APEI: explicit init of HEST and GHES in apci_init() drivers/iio: Remove all strcpy() uses ACPI: VIOT: Fix ACS setup arm64: dts: qcom: sm6125: Move sdc2 pinctrl from seine-pdx201 to sm6125 arm64: dts: qcom: sm6125: Append -state suffix to pinctrl nodes arm64: dts: qcom: sm8250: add missing PCIe PHY clock-cells arm64: dts: mt7622: fix BPI-R64 WPS button arm64: tegra: Fixup SYSRAM references arm64: tegra: Update Tegra234 BPMP channel addresses arm64: tegra: Mark BPMP channels as no-memory-wc arm64: tegra: Fix SDMMC1 CD on P2888 erofs: avoid consecutive detection for Highmem memory blk-mq: don't create hctx debugfs dir until q->debugfs_dir is created spi: Fix simplification of devm_spi_register_controller spi: tegra20-slink: fix UAF in tegra_slink_remove() hwmon: (drivetemp) Add module alias blktrace: Trace remapped requests correctly PM: domains: Ensure genpd_debugfs_dir exists before remove dm writecache: return void from functions dm writecache: count number of blocks read, not number of read bios dm writecache: count number of blocks written, not number of write bios dm writecache: count number of blocks discarded, not number of discard bios regulator: of: Fix refcount leak bug in of_get_regulation_constraints() soc: qcom: Make QCOM_RPMPD depend on PM arm64: dts: qcom: qcs404: Fix incorrect USB2 PHYs assignment irqdomain: Report irq number for NOMAP domains drivers/perf: arm_spe: Fix consistency of SYS_PMSCR_EL1.CX nohz/full, sched/rt: Fix missed tick-reenabling bug in dequeue_task_rt() x86/extable: Fix ex_handler_msr() print condition selftests/seccomp: Fix compile warning when CC=clang thermal/tools/tmon: Include pthread and time headers in tmon.h dm: return early from dm_pr_call() if DM device is suspended pwm: sifive: Simplify offset calculation for PWMCMP registers pwm: sifive: Ensure the clk is enabled exactly once per running PWM pwm: sifive: Shut down hardware only after pwmchip_remove() completed pwm: lpc18xx-sct: Reduce number of devm memory allocations pwm: lpc18xx-sct: Simplify driver by not using pwm_[gs]et_chip_data() pwm: lpc18xx: Fix period handling drm/dp: Export symbol / kerneldoc fixes for DP AUX bus drm/bridge: tc358767: Move (e)DP bridge endpoint parsing into dedicated function ath10k: do not enforce interrupt trigger type drm/st7735r: Fix module autoloading for Okaya RH128128T drm/panel: Fix build error when CONFIG_DRM_PANEL_SAMSUNG_ATNA33XC20=y && CONFIG_DRM_DISPLAY_HELPER=m wifi: rtlwifi: fix error codes in rtl_debugfs_set_write_h2c() ath11k: fix netdev open race drm/mipi-dbi: align max_chunk to 2 in spi_transfer ath11k: Fix incorrect debug_mask mappings drm/radeon: fix potential buffer overflow in ni_set_mc_special_registers() drm/mediatek: Modify dsi funcs to atomic operations drm/mediatek: Separate poweron/poweroff from enable/disable and define new funcs drm/mediatek: Add pull-down MIPI operation in mtk_dsi_poweroff function drm/meson: encoder_hdmi: switch to bridge DRM_BRIDGE_ATTACH_NO_CONNECTOR drm/meson: encoder_hdmi: Fix refcount leak in meson_encoder_hdmi_init drm/bridge: lt9611uxc: Cancel only driver's work i2c: npcm: Remove own slave addresses 2:10 i2c: npcm: Correct slave role behavior i2c: mxs: Silence a clang warning virtio-gpu: fix a missing check to avoid NULL dereference drm/shmem-helper: Unexport drm_gem_shmem_create_with_handle() drm/shmem-helper: Export dedicated wrappers for GEM object functions drm/shmem-helper: Pass GEM shmem object in public interfaces drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init drm: adv7511: override i2c address of cec before accessing it crypto: sun8i-ss - do not allocate memory when handling hash requests crypto: sun8i-ss - fix error codes in allocate_flows() net: fix sk_wmem_schedule() and sk_rmem_schedule() errors can: netlink: allow configuring of fixed bit rates without need for do_set_bittiming callback can: netlink: allow configuring of fixed data bit rates without need for do_set_data_bittiming callback i2c: Fix a potential use after free crypto: sun8i-ss - fix infinite loop in sun8i_ss_setup_ivs() media: atmel: atmel-sama7g5-isc: fix warning in configs without OF media: tw686x: Register the irq at the end of probe media: imx-jpeg: Correct some definition according specification media: imx-jpeg: Leave a blank space before the configuration data media: imx-jpeg: Add pm-runtime support for imx-jpeg media: imx-jpeg: use NV12M to represent non contiguous NV12 media: imx-jpeg: Set V4L2_BUF_FLAG_LAST at eos media: imx-jpeg: Refactor function mxc_jpeg_parse media: imx-jpeg: Identify and handle precision correctly media: imx-jpeg: Handle source change in a function media: imx-jpeg: Support dynamic resolution change media: imx-jpeg: Align upwards buffer size media: imx-jpeg: Implement drain using v4l2-mem2mem helpers ath9k: fix use-after-free in ath9k_hif_usb_rx_cb wifi: iwlegacy: 4965: fix potential off-by-one overflow in il4965_rs_fill_link_cmd() drm/radeon: fix incorrrect SPDX-License-Identifiers rcutorture: Warn on individual rcu_torture_init() error conditions rcutorture: Don't cpuhp_remove_state() if cpuhp_setup_state() failed rcutorture: Fix ksoftirqd boosting timing and iteration test_bpf: fix incorrect netdev features crypto: ccp - During shutdown, check SEV data pointer before using drm: bridge: adv7511: Add check for mipi_dsi_driver_register media: imx-jpeg: Disable slot interrupt when frame done drm/mcde: Fix refcount leak in mcde_dsi_bind media: hdpvr: fix error value returns in hdpvr_read media: v4l2-mem2mem: prevent pollerr when last_buffer_dequeued is set media: driver/nxp/imx-jpeg: fix a unexpected return value problem media: tw686x: Fix memory leak in tw686x_video_init drm/vc4: plane: Remove subpixel positioning check drm/vc4: plane: Fix margin calculations for the right/bottom edges drm/bridge: Add a function to abstract away panels drm/vc4: dsi: Switch to devm_drm_of_get_bridge drm/vc4: Use of_device_get_match_data() drm/vc4: dsi: Release workaround buffer and DMA drm/vc4: dsi: Correct DSI divider calculations drm/vc4: dsi: Correct pixel order for DSI0 drm/vc4: dsi: Register dsi0 as the correct vc4 encoder type drm/vc4: dsi: Fix dsi0 interrupt support drm/vc4: dsi: Add correct stop condition to vc4_dsi_encoder_disable iteration drm/vc4: hdmi: Fix HPD GPIO detection drm/vc4: hdmi: Avoid full hdmi audio fifo writes drm/vc4: hdmi: Reset HDMI MISC_CONTROL register drm/vc4: hdmi: Fix timings for interlaced modes drm/vc4: hdmi: Correct HDMI timing registers for interlaced modes crypto: arm64/gcm - Select AEAD for GHASH_ARM64_CE selftests/xsk: Destroy BPF resources only when ctx refcount drops to 0 drm/rockchip: vop: Don't crash for invalid duplicate_state() drm/rockchip: Fix an error handling path rockchip_dp_probe() drm/mediatek: dpi: Remove output format of YUV drm/mediatek: dpi: Only enable dpi after the bridge is enabled drm: bridge: sii8620: fix possible off-by-one hinic: Use the bitmap API when applicable net: hinic: fix bug that ethtool get wrong stats net: hinic: avoid kernel hung in hinic_get_stats64() drm/msm/mdp5: Fix global state lock backoff crypto: hisilicon/sec - don't sleep when in softirq crypto: hisilicon - Kunpeng916 crypto driver don't sleep when in softirq media: platform: mtk-mdp: Fix mdp_ipi_comm structure alignment drm/msm: Avoid dirtyfb stalls on video mode displays (v2) drm/msm/dpu: Fix for non-visible planes mt76: mt76x02u: fix possible memory leak in __mt76x02u_mcu_send_msg mt76: mt7615: do not update pm stats in case of error ieee80211: add EHT 1K aggregation definitions mt76: mt7921: fix aggregation subframes setting to HE max mt76: mt7921: enlarge maximum VHT MPDU length to 11454 mediatek: mt76: mac80211: Fix missing of_node_put() in mt76_led_init() mediatek: mt76: eeprom: fix missing of_node_put() in mt76_find_power_limits_node() skmsg: Fix invalid last sg check in sk_msg_recvmsg() drm/exynos/exynos7_drm_decon: free resources when clk_set_parent() failed. tcp: make retransmitted SKB fit into the send window libbpf: Fix the name of a reused map selftests: timers: valid-adjtimex: build fix for newer toolchains selftests: timers: clocksource-switch: fix passing errors from child bpf: Fix subprog names in stack traces. fs: check FMODE_LSEEK to control internal pipe splicing media: cedrus: h265: Fix flag name media: hantro: postproc: Fix motion vector space size media: hantro: Simplify postprocessor media: hevc: Embedded indexes in RPS media: staging: media: hantro: Fix typos wifi: wil6210: debugfs: fix info leak in wil_write_file_wmi() wifi: p54: Fix an error handling path in p54spi_probe() wifi: p54: add missing parentheses in p54_flush() selftests/bpf: fix a test for snprintf() overflow libbpf: fix an snprintf() overflow check can: pch_can: do not report txerr and rxerr during bus-off can: rcar_can: do not report txerr and rxerr during bus-off can: sja1000: do not report txerr and rxerr during bus-off can: hi311x: do not report txerr and rxerr during bus-off can: sun4i_can: do not report txerr and rxerr during bus-off can: kvaser_usb_hydra: do not report txerr and rxerr during bus-off can: kvaser_usb_leaf: do not report txerr and rxerr during bus-off can: usb_8dev: do not report txerr and rxerr during bus-off can: error: specify the values of data[5..7] of CAN error frames can: pch_can: pch_can_error(): initialize errc before using it Bluetooth: hci_intel: Add check for platform_driver_register i2c: cadence: Support PEC for SMBus block read i2c: mux-gpmux: Add of_node_put() when breaking out of loop wifi: wil6210: debugfs: fix uninitialized variable use in `wil_write_file_wmi()` wifi: iwlwifi: mvm: fix double list_add at iwl_mvm_mac_wake_tx_queue wifi: libertas: Fix possible refcount leak in if_usb_probe() media: cedrus: hevc: Add check for invalid timestamp net/mlx5e: Remove WARN_ON when trying to offload an unsupported TLS cipher/version net/mlx5e: Fix the value of MLX5E_MAX_RQ_NUM_MTTS net/mlx5: Adjust log_max_qp to be 18 at most crypto: hisilicon/hpre - don't use GFP_KERNEL to alloc mem during softirq crypto: inside-secure - Add missing MODULE_DEVICE_TABLE for of crypto: hisilicon/sec - fix auth key size error inet: add READ_ONCE(sk->sk_bound_dev_if) in INET_MATCH() ipv6: add READ_ONCE(sk->sk_bound_dev_if) in INET6_MATCH() net: allow unbound socket for packets in VRF when tcp_l3mdev_accept set netdevsim: fib: Fix reference count leak on route deletion failure wifi: rtw88: check the return value of alloc_workqueue() iavf: Fix max_rate limiting iavf: Fix 'tc qdisc show' listing too many queues netdevsim: Avoid allocation warnings triggered from user space net: rose: fix netdev reference changes net: ionic: fix error check for vlan flags in ionic_set_nic_features() dccp: put dccp_qpolicy_full() and dccp_qpolicy_push() in the same lock net: usb: make USB_RTL8153_ECM non user configurable wireguard: ratelimiter: use hrtimer in selftest wireguard: allowedips: don't corrupt stack when detecting overflow HID: amd_sfh: Don't show client init failed as error when discovery fails clk: renesas: r9a06g032: Fix UART clkgrp bitsel mtd: maps: Fix refcount leak in of_flash_probe_versatile mtd: maps: Fix refcount leak in ap_flash_init mtd: rawnand: meson: Fix a potential double free issue of: check previous kernel's ima-kexec-buffer against memory bounds scsi: qla2xxx: edif: Reduce Initiator-Initiator thrashing scsi: qla2xxx: edif: Fix potential stuck session in sa update scsi: qla2xxx: edif: Reduce connection thrash scsi: qla2xxx: edif: Fix inconsistent check of db_flags scsi: qla2xxx: edif: Synchronize NPIV deletion with authentication application scsi: qla2xxx: edif: Add retry for ELS passthrough scsi: qla2xxx: edif: Fix n2n discovery issue with secure target scsi: qla2xxx: edif: Fix n2n login retry for secure device KVM: SVM: Unwind "speculative" RIP advancement if INTn injection "fails" KVM: SVM: Stuff next_rip on emulated INT3 injection if NRIPS is supported phy: samsung: exynosautov9-ufs: correct TSRV register configurations PCI: microchip: Fix refcount leak in mc_pcie_init_irq_domains() PCI: tegra194: Fix PM error handling in tegra_pcie_config_ep() HID: cp2112: prevent a buffer overflow in cp2112_xfer() mtd: sm_ftl: Fix deadlock caused by cancel_work_sync in sm_release mtd: partitions: Fix refcount leak in parse_redboot_of mtd: parsers: ofpart: Fix refcount leak in bcm4908_partitions_fw_offset mtd: st_spi_fsm: Add a clk_disable_unprepare() in .probe()'s error path PCI: mediatek-gen3: Fix refcount leak in mtk_pcie_init_irq_domains() fpga: altera-pr-ip: fix unsigned comparison with less than zero usb: host: Fix refcount leak in ehci_hcd_ppc_of_probe usb: ohci-nxp: Fix refcount leak in ohci_hcd_nxp_probe usb: gadget: tegra-xudc: Fix error check in tegra_xudc_powerdomain_init() usb: xhci: tegra: Fix error check netfilter: xtables: Bring SPDX identifier back scsi: qla2xxx: edif: Send LOGO for unexpected IKE message scsi: qla2xxx: edif: Reduce disruption due to multiple app start scsi: qla2xxx: edif: Fix no login after app start scsi: qla2xxx: edif: Tear down session if keys have been removed scsi: qla2xxx: edif: Fix session thrash scsi: qla2xxx: edif: Fix no logout on delete for N2N iio: accel: bma400: Fix the scale min and max macro values platform/chrome: cros_ec: Always expose last resume result iio: accel: bma400: Reordering of header files clk: mediatek: reset: Fix written reset bit offset lib/test_hmm: avoid accessing uninitialized pages memremap: remove support for external pgmap refcounts mm/memremap: fix memunmap_pages() race with get_dev_pagemap() KVM: Don't set Accessed/Dirty bits for ZERO_PAGE mwifiex: Ignore BTCOEX events from the 88W8897 firmware mwifiex: fix sleep in atomic context bugs caused by dev_coredumpv scsi: iscsi: Allow iscsi_if_stop_conn() to be called from kernel scsi: iscsi: Add helper to remove a session from the kernel scsi: iscsi: Fix session removal on shutdown dmaengine: dw-edma: Fix eDMA Rd/Wr-channels and DMA-direction semantics mtd: dataflash: Add SPI ID table clk: qcom: camcc-sm8250: Fix halt on boot by reducing driver's init level misc: rtsx: Fix an error handling path in rtsx_pci_probe() driver core: fix potential deadlock in __driver_attach clk: qcom: clk-krait: unlock spin after mux completion clk: qcom: gcc-msm8939: Add missing SYSTEM_MM_NOC_BFDCD_CLK_SRC clk: qcom: gcc-msm8939: Fix bimc_ddr_clk_src rcgr base address clk: qcom: gcc-msm8939: Add missing system_mm_noc_bfdcd_clk_src clk: qcom: gcc-msm8939: Point MM peripherals to system_mm_noc clock usb: host: xhci: use snprintf() in xhci_decode_trb() RDMA/rxe: Fix deadlock in rxe_do_local_ops() clk: qcom: ipq8074: fix NSS core PLL-s clk: qcom: ipq8074: SW workaround for UBI32 PLL lock clk: qcom: ipq8074: fix NSS port frequency tables clk: qcom: ipq8074: set BRANCH_HALT_DELAY flag for UBI clocks clk: qcom: camcc-sdm845: Fix topology around titan_top power domain clk: qcom: camcc-sm8250: Fix topology around titan_top power domain clk: qcom: clk-rcg2: Fail Duty-Cycle configuration if MND divider is not enabled. clk: qcom: clk-rcg2: Make sure to not write d=0 to the NMD register mm/mempolicy: fix get_nodes out of bound access PCI: dwc: Stop link on host_init errors and de-initialization PCI: dwc: Add unroll iATU space support to dw_pcie_disable_atu() PCI: dwc: Disable outbound windows only for controllers using iATU PCI: dwc: Set INCREASE_REGION_SIZE flag based on limit address PCI: dwc: Deallocate EPC memory on dw_pcie_ep_init() errors PCI: dwc: Always enable CDM check if "snps,enable-cdm-check" exists soundwire: bus_type: fix remove and shutdown support soundwire: revisit driver bind/unbind and callbacks KVM: arm64: Don't return from void function dmaengine: sf-pdma: Add multithread support for a DMA channel PCI: endpoint: Don't stop controller when unbinding endpoint function scsi: qla2xxx: Check correct variable in qla24xx_async_gffid() intel_th: Fix a resource leak in an error handling path intel_th: msu-sink: Potential dereference of null pointer intel_th: msu: Fix vmalloced buffers binder: fix redefinition of seq_file attributes staging: rtl8192u: Fix sleep in atomic context bug in dm_fsync_timer_callback mmc: sdhci-of-esdhc: Fix refcount leak in esdhc_signal_voltage_switch mmc: mxcmmc: Silence a clang warning mmc: renesas_sdhi: Get the reset handle early in the probe memstick/ms_block: Fix some incorrect memory allocation memstick/ms_block: Fix a memory leak mmc: sdhci-of-at91: fix set_uhs_signaling rewriting of MC1R of: device: Fix missing of_node_put() in of_dma_set_restricted_buffer mmc: block: Add single read for 4k sector cards KVM: s390: pv: leak the topmost page table when destroy fails PCI/portdrv: Don't disable AER reporting in get_port_device_capability() PCI: qcom: Set up rev 2.1.0 PARF_PHY before enabling clocks scsi: smartpqi: Fix DMA direction for RAID requests xtensa: iss/network: provide release() callback xtensa: iss: fix handling error cases in iss_net_configure() usb: gadget: udc: amd5536 depends on HAS_DMA usb: aspeed-vhub: Fix refcount leak bug in ast_vhub_init_desc() usb: dwc3: core: Deprecate GCTL.CORESOFTRESET usb: dwc3: core: Do not perform GCTL_CORE_SOFTRESET during bootup usb: dwc3: qcom: fix missing optional irq warnings eeprom: idt_89hpesx: uninitialized data in idt_dbgfs_csr_write() phy: stm32: fix error return in stm32_usbphyc_phy_init interconnect: imx: fix max_node_id um: random: Don't initialise hwrng struct with zero RDMA/irdma: Fix a window for use-after-free RDMA/irdma: Fix VLAN connection with wildcard address RDMA/irdma: Fix setting of QP context err_rq_idx_valid field RDMA/rtrs-srv: Fix modinfo output for stringify RDMA/rtrs: Fix warning when use poll mode on client side. RDMA/rtrs: Replace duplicate check with is_pollqueue helper RDMA/rtrs: Introduce destroy_cq helper RDMA/rtrs: Do not allow sessname to contain special symbols / and . RDMA/rtrs: Rename rtrs_sess to rtrs_path RDMA/rtrs-srv: Rename rtrs_srv_sess to rtrs_srv_path RDMA/rtrs-clt: Rename rtrs_clt_sess to rtrs_clt_path RDMA/rtrs-clt: Replace list_next_or_null_rr_rcu with an inline function RDMA/qedr: Fix potential memory leak in __qedr_alloc_mr() RDMA/hns: Fix incorrect clearing of interrupt status register RDMA/siw: Fix duplicated reported IW_CM_EVENT_CONNECT_REPLY event iio: cros: Register FIFO callback after sensor is registered clk: qcom: gcc-msm8939: Fix weird field spacing in ftbl_gcc_camss_cci_clk RDMA/hfi1: fix potential memory leak in setup_base_ctxt() gpio: gpiolib-of: Fix refcount bugs in of_mm_gpiochip_add_data() HID: mcp2221: prevent a buffer overflow in mcp_smbus_write() HID: amd_sfh: Add NULL check for hid device dmaengine: imx-dma: Cast of_device_get_match_data() with (uintptr_t) scripts/gdb: lx-dmesg: read records individually scripts/gdb: fix 'lx-dmesg' on 32 bits arch RDMA/rxe: Fix mw bind to allow any consumer key portion mmc: cavium-octeon: Add of_node_put() when breaking out of loop mmc: cavium-thunderx: Add of_node_put() when breaking out of loop HID: alps: Declare U1_UNICORN_LEGACY support RDMA/rxe: For invalidate compare according to set keys in mr PCI: tegra194: Fix Root Port interrupt handling PCI: tegra194: Fix link up retry sequence HID: amd_sfh: Handle condition of "no sensors" USB: serial: fix tty-port initialized comments usb: cdns3: change place of 'priv_ep' assignment in cdns3_gadget_ep_dequeue(), cdns3_gadget_ep_enable() mtd: spi-nor: fix spi_nor_spimem_setup_op() call in spi_nor_erase_{sector,chip}() KVM: nVMX: Set UMIP bit CR4_FIXED1 MSR when emulating UMIP platform/olpc: Fix uninitialized data in debugfs write RDMA/srpt: Duplicate port name members RDMA/srpt: Introduce a reference count in struct srpt_device RDMA/srpt: Fix a use-after-free android: binder: stop saving a pointer to the VMA mm/mmap.c: fix missing call to vm_unacct_memory in mmap_region selftests: kvm: set rax before vmcall of/fdt: declared return type does not match actual return type RDMA/mlx5: Add missing check for return value in get namespace flow RDMA/rxe: Add memory barriers to kernel queues RDMA/rxe: Remove the is_user members of struct rxe_sq/rxe_rq/rxe_srq RDMA/rxe: Fix error unwind in rxe_create_qp() block/rnbd-srv: Set keep_id to true after mutex_trylock null_blk: fix ida error handling in null_add_dev() nvme: use command_id instead of req->tag in trace_nvme_complete_rq() nvme: define compat_ioctl again to unbreak 32-bit userspace. nvme: disable namespace access for unsupported metadata nvme: don't return an error from nvme_configure_metadata nvme: catch -ENODEV from nvme_revalidate_zones again block/bio: remove duplicate append pages code block: ensure iov_iter advances for added pages jbd2: fix outstanding credits assert in jbd2_journal_commit_transaction() ext4: recover csum seed of tmp_inode after migrating to extents jbd2: fix assertion 'jh->b_frozen_data == NULL' failure when journal aborted usb: cdns3: Don't use priv_dev uninitialized in cdns3_gadget_ep_enable() opp: Fix error check in dev_pm_opp_attach_genpd() ASoC: cros_ec_codec: Fix refcount leak in cros_ec_codec_platform_probe ASoC: samsung: Fix error handling in aries_audio_probe ASoC: imx-audmux: Silence a clang warning ASoC: mediatek: mt8173: Fix refcount leak in mt8173_rt5650_rt5676_dev_probe ASoC: mt6797-mt6351: Fix refcount leak in mt6797_mt6351_dev_probe ASoC: codecs: da7210: add check for i2c_add_driver ASoC: mediatek: mt8173-rt5650: Fix refcount leak in mt8173_rt5650_dev_probe serial: 8250: Export ICR access helpers for internal use serial: 8250: dma: Allow driver operations before starting DMA transfers serial: 8250_dw: Store LSR into lsr_saved_flags in dw8250_tx_wait_empty() ASoC: codecs: msm8916-wcd-digital: move gains from SX_TLV to S8_TLV ASoC: codecs: wcd9335: move gains from SX_TLV to S8_TLV rpmsg: char: Add mutex protection for rpmsg_eptdev_open() rpmsg: mtk_rpmsg: Fix circular locking dependency remoteproc: k3-r5: Fix refcount leak in k3_r5_cluster_of_init selftests/livepatch: better synchronize test_klp_callbacks_busy profiling: fix shift too large makes kernel panic remoteproc: imx_rproc: Fix refcount leak in imx_rproc_addr_init ASoC: samsung: h1940_uda1380: include proepr GPIO consumer header powerpc/perf: Optimize clearing the pending PMI and remove WARN_ON for PMI check in power_pmu_disable ASoC: samsung: change gpiod_speaker_power and rx1950_audio from global to static variables tty: n_gsm: Delete gsmtty open SABM frame when config requester tty: n_gsm: fix user open not possible at responder until initiator open tty: n_gsm: fix tty registration before control channel open tty: n_gsm: fix wrong queuing behavior in gsm_dlci_data_output() tty: n_gsm: fix missing timer to handle stalled links tty: n_gsm: fix non flow control frames during mux flow off tty: n_gsm: fix packet re-transmission without open control channel tty: n_gsm: fix race condition in gsmld_write() tty: n_gsm: fix resource allocation order in gsm_activate_mux() ASoC: qcom: Fix missing of_node_put() in asoc_qcom_lpass_cpu_platform_probe() ASoC: imx-card: Fix DSD/PDM mclk frequency remoteproc: qcom: wcnss: Fix handling of IRQs vfio/ccw: Do not change FSM state in subchannel event serial: 8250_fsl: Don't report FE, PE and OE twice tty: n_gsm: fix wrong T1 retry count handling tty: n_gsm: fix DM command tty: n_gsm: fix missing corner cases in gsmld_poll() MIPS: vdso: Utilize __pa() for gic_pfn swiotlb: fail map correctly with failed io_tlb_default_mem ASoC: mt6359: Fix refcount leak bug serial: 8250_bcm7271: Save/restore RTS in suspend/resume iommu/exynos: Handle failed IOMMU device registration properly 9p: fix a bunch of checkpatch warnings 9p: Drop kref usage 9p: Add client parameter to p9_req_put() net: 9p: fix refcount leak in p9_read_work() error handling MIPS: Fixed __debug_virt_addr_valid() rpmsg: qcom_smd: Fix refcount leak in qcom_smd_parse_edge kfifo: fix kfifo_to_user() return type lib/smp_processor_id: fix imbalanced instrumentation_end() call proc: fix a dentry lock race between release_task and lookup remoteproc: qcom: pas: Check if coredump is enabled remoteproc: sysmon: Wait for SSCTL service to come up mfd: t7l66xb: Drop platform disable callback mfd: max77620: Fix refcount leak in max77620_initialise_fps iommu/arm-smmu: qcom_iommu: Add of_node_put() when breaking out of loop perf tools: Fix dso_id inode generation comparison s390/dump: fix old lowcore virtual vs physical address confusion s390/maccess: fix semantics of memcpy_real() and its callers s390/crash: fix incorrect number of bytes to copy to user space s390/zcore: fix race when reading from hardware system area ASoC: fsl_asrc: force cast the asrc_format type ASoC: fsl-asoc-card: force cast the asrc_format type ASoC: fsl_easrc: use snd_pcm_format_t type for sample_format ASoC: imx-card: use snd_pcm_format_t type for asrc_format ASoC: qcom: q6dsp: Fix an off-by-one in q6adm_alloc_copp() fuse: Remove the control interface for virtio-fs ASoC: audio-graph-card: Add of_node_put() in fail path watchdog: sp5100_tco: Fix a memory leak of EFCH MMIO resource watchdog: armada_37xx_wdt: check the return value of devm_ioremap() in armada_37xx_wdt_probe() video: fbdev: amba-clcd: Fix refcount leak bugs video: fbdev: sis: fix typos in SiS_GetModeID() ASoC: mchp-spdifrx: disable end of block interrupt on failures powerpc/32: Call mmu_mark_initmem_nx() regardless of data block mapping. powerpc/32: Do not allow selection of e5500 or e6500 CPUs on PPC32 powerpc/iommu: Fix iommu_table_in_use for a small default DMA window case powerpc/pci: Prefer PCI domain assignment via DT 'linux,pci-domain' and alias tty: serial: fsl_lpuart: correct the count of break characters s390/dump: fix os_info virtual vs physical address confusion s390/smp: cleanup target CPU callback starting s390/smp: cleanup control register update routines s390/maccess: rework absolute lowcore accessors s390/smp: enforce lowcore protection on CPU restart f2fs: fix to remove F2FS_COMPR_FL and tag F2FS_NOCOMP_FL at the same time powerpc/spufs: Fix refcount leak in spufs_init_isolated_loader powerpc/xive: Fix refcount leak in xive_get_max_prio powerpc/cell/axon_msi: Fix refcount leak in setup_msi_msg_address perf symbol: Fail to read phdr workaround kprobes: Forbid probing on trampoline and BPF code areas x86/bus_lock: Don't assume the init value of DEBUGCTLMSR.BUS_LOCK_DETECT to be zero powerpc/pci: Fix PHB numbering when using opal-phbid genelf: Use HAVE_LIBCRYPTO_SUPPORT, not the never defined HAVE_LIBCRYPTO scripts/faddr2line: Fix vmlinux detection on arm64 sched/deadline: Merge dl_task_can_attach() and dl_cpu_busy() sched, cpuset: Fix dl_cpu_busy() panic due to empty cs->cpus_allowed x86/numa: Use cpumask_available instead of hardcoded NULL check video: fbdev: arkfb: Fix a divide-by-zero bug in ark_set_pixclock() tools/thermal: Fix possible path truncations sched: Fix the check of nr_running at queue wakelist sched: Remove the limitation of WF_ON_CPU on wakelist if wakee cpu is idle sched/core: Do not requeue task on CPU excluded from cpus_mask x86/entry: Build thunk_$(BITS) only if CONFIG_PREEMPTION=y f2fs: allow compression for mmap files in compress_mode=user f2fs: do not allow to decompress files have FI_COMPRESS_RELEASED video: fbdev: vt8623fb: Check the size of screen before memset_io() video: fbdev: arkfb: Check the size of screen before memset_io() video: fbdev: s3fb: Check the size of screen before memset_io() scsi: ufs: core: Correct ufshcd_shutdown() flow scsi: zfcp: Fix missing auto port scan and thus missing target ports scsi: qla2xxx: Fix imbalance vha->vref_count scsi: qla2xxx: Fix discovery issues in FC-AL topology scsi: qla2xxx: Turn off multi-queue for 8G adapters scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts scsi: qla2xxx: Fix excessive I/O error messages by default scsi: qla2xxx: Fix erroneous mailbox timeout after PCI error injection scsi: qla2xxx: Wind down adapter after PCIe error scsi: qla2xxx: Fix losing FCP-2 targets on long port disable with I/Os scsi: qla2xxx: Fix losing target when it reappears during delete scsi: qla2xxx: Fix losing FCP-2 targets during port perturbation tests x86/bugs: Enable STIBP for IBPB mitigated RETBleed ftrace/x86: Add back ftrace_expected assignment x86/kprobes: Update kcb status flag after singlestepping x86/olpc: fix 'logical not is only applied to the left hand side' SMB3: fix lease break timeout when multiple deferred close handles for the same file. posix-cpu-timers: Cleanup CPU timers before freeing them during exec Input: gscps2 - check return value of ioremap() in gscps2_probe() __follow_mount_rcu(): verify that mount_lock remains unchanged spmi: trace: fix stack-out-of-bound access in SPMI tracing functions drm/mediatek: Allow commands to be sent during video mode drm/mediatek: Keep dsi as LP00 before dcs cmds transfer crypto: blake2s - remove shash module drm/dp/mst: Read the extended DPCD capabilities during system resume drm/vc4: drv: Adopt the dma configuration from the HVS or V3D component usbnet: smsc95xx: Don't clear read-only PHY interrupt usbnet: smsc95xx: Avoid link settings race on interrupt reception usbnet: smsc95xx: Forward PHY interrupts to PHY driver to avoid polling usbnet: smsc95xx: Fix deadlock on runtime resume firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails scsi: lpfc: Fix EEH support for NVMe I/O scsi: lpfc: SLI path split: Refactor lpfc_iocbq scsi: lpfc: SLI path split: Refactor fast and slow paths to native SLI4 scsi: lpfc: SLI path split: Refactor SCSI paths scsi: lpfc: Remove extra atomic_inc on cmd_pending in queuecommand after VMID intel_th: pci: Add Meteor Lake-P support intel_th: pci: Add Raptor Lake-S PCH support intel_th: pci: Add Raptor Lake-S CPU support KVM: set_msr_mce: Permit guests to ignore single-bit ECC errors KVM: x86: Signal #GP, not -EPERM, on bad WRMSR(MCi_CTL/STATUS) iommu/vt-d: avoid invalid memory access via node_online(NUMA_NO_NODE) PCI/AER: Iterate over error counters instead of error strings PCI: qcom: Power on PHY before IPQ8074 DBI register accesses serial: 8250_pci: Refactor the loop in pci_ite887x_init() serial: 8250_pci: Replace dev_*() by pci_*() macros serial: 8250: Fold EndRun device support into OxSemi Tornado code serial: 8250: Add proper clock handling for OxSemi PCIe devices tty: 8250: Add support for Brainboxes PX cards. dm writecache: set a default MAX_WRITEBACK_JOBS kexec, KEYS, s390: Make use of built-in and secondary keyring for signature verification dm thin: fix use-after-free crash in dm_sm_register_threshold_callback net/9p: Initialize the iounit field during fid creation ARM: remove some dead code timekeeping: contribute wall clock to rng on time change locking/csd_lock: Change csdlock_debug from early_param to __setup block: remove the struct blk_queue_ctx forward declaration block: don't allow the same type rq_qos add more than once btrfs: ensure pages are unlocked on cow_file_range() failure btrfs: reset block group chunk force if we have to wait btrfs: properly flag filesystem with BTRFS_FEATURE_INCOMPAT_BIG_METADATA ACPI: CPPC: Do not prevent CPPC from working in the future powerpc/powernv/kvm: Use darn for H_RANDOM on Power9 KVM: x86/pmu: Introduce the ctrl_mask value for fixed counter KVM: VMX: Mark all PERF_GLOBAL_(OVF)_CTRL bits reserved if there's no vPMU KVM: x86/pmu: Ignore pmu->global_ctrl check if vPMU doesn't support global_ctrl KVM: VMX: Add helper to check if the guest PMU has PERF_GLOBAL_CTRL KVM: nVMX: Attempt to load PERF_GLOBAL_CTRL on nVMX xfer iff it exists dm raid: fix address sanitizer warning in raid_status dm raid: fix address sanitizer warning in raid_resume tracing: Add '__rel_loc' using trace event macros tracing: Avoid -Warray-bounds warning for __rel_loc macro ext4: update s_overhead_clusters in the superblock during an on-line resize ext4: fix extent status tree race in writeback error recovery path ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h ext4: fix use-after-free in ext4_xattr_set_entry ext4: correct max_inline_xattr_value_size computing ext4: correct the misjudgment in ext4_iget_extra_inode ext4: fix warning in ext4_iomap_begin as race between bmap and write ext4: check if directory block is within i_size ext4: make sure ext4_append() always allocates new block ext4: remove EA inode entry from mbcache on inode eviction ext4: use kmemdup() to replace kmalloc + memcpy ext4: unindent codeblock in ext4_xattr_block_set() ext4: fix race when reusing xattr blocks KEYS: asymmetric: enforce SM2 signature use pkey algo tpm: eventlog: Fix section mismatch for DEBUG_SECTION_MISMATCH xen-blkback: fix persistent grants negotiation xen-blkback: Apply 'feature_persistent' parameter when connect xen-blkfront: Apply 'feature_persistent' parameter when connect powerpc: Fix eh field when calling lwarx on PPC32 tracing: Use a struct alignof to determine trace event field alignment net_sched: cls_route: remove from list when handle is 0 mac80211: fix a memory leak where sta_info is not freed tcp: fix over estimation in sk_forced_mem_schedule() crypto: lib/blake2s - reduce stack frame usage in self test Revert "mwifiex: fix sleep in atomic context bugs caused by dev_coredumpv" Revert "s390/smp: enforce lowcore protection on CPU restart" drm/bridge: tc358767: Fix (e)DP bridge endpoint parsing in dedicated function net: phy: smsc: Disable Energy Detect Power-Down in interrupt mode drm/vc4: change vc4_dma_range_matches from a global to static tracing/perf: Avoid -Warray-bounds warning for __rel_loc macro drm/msm: Fix dirtyfb refcounting drm/meson: Fix refcount leak in meson_encoder_hdmi_init io_uring: mem-account pbuf buckets Revert "net: usb: ax88179_178a needs FLAG_SEND_ZLP" Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm regression drm/bridge: Move devm_drm_of_get_bridge to bridge/panel.c scsi: lpfc: Fix locking for lpfc_sli_iocbq_lookup() scsi: lpfc: Fix element offset in __lpfc_sli_release_iocbq_s4() scsi: lpfc: Resolve some cleanup issues following SLI path refactoring Linux 5.15.61 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I0849e49fb265651bf6277e4ead9c440d50ed7536	2022-08-22 14:29:30 +02:00
SeongJae Park	c98e956ef4	xen-blkfront: Apply 'feature_persistent' parameter when connect ... commit 402c43ea6b34a1b371ffeed9adf907402569eaf5 upstream. In some use cases[1], the backend is created while the frontend doesn't support the persistent grants feature, but later the frontend can be changed to support the feature and reconnect. In the past, 'blkback' enabled the persistent grants feature since it unconditionally checked if frontend supports the persistent grants feature for every connect ('connect_ring()') and decided whether it should use persistent grans or not. However, commit aac8a70db2 ("xen-blkback: add a parameter for disabling of persistent grants") has mistakenly changed the behavior. It made the frontend feature support check to not be repeated once it shown the 'feature_persistent' as 'false', or the frontend doesn't support persistent grants. Similar behavioral change has made on 'blkfront' by commit 74a852479c ("xen-blkfront: add a parameter for disabling of persistent grants"). This commit changes the behavior of the parameter to make effect for every connect, so that the previous behavior of 'blkfront' can be restored. [1] https://lore.kernel.org/xen-devel/CAJwUmVB6H3iTs-C+U=v-pwJB7-_ZRHPxHzKRJZ22xEPW7z8a=g@mail.gmail.com/ Fixes: 74a852479c ("xen-blkfront: add a parameter for disabling of persistent grants") Cc: <stable@vger.kernel.org> # 5.10.x Signed-off-by: SeongJae Park <sj@kernel.org> Reviewed-by: Maximilian Heyne <mheyne@amazon.de> Reviewed-by: Juergen Gross <jgross@suse.com> Link: https://lore.kernel.org/r/20220715225108.193398-4-sj@kernel.org Signed-off-by: Juergen Gross <jgross@suse.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-08-17 14:24:28 +02:00
Maximilian Heyne	ef26b5d530	xen-blkback: Apply 'feature_persistent' parameter when connect ... commit e94c6101e151b019b8babc518ac2a6ada644a5a1 upstream. In some use cases[1], the backend is created while the frontend doesn't support the persistent grants feature, but later the frontend can be changed to support the feature and reconnect. In the past, 'blkback' enabled the persistent grants feature since it unconditionally checked if frontend supports the persistent grants feature for every connect ('connect_ring()') and decided whether it should use persistent grans or not. However, commit aac8a70db2 ("xen-blkback: add a parameter for disabling of persistent grants") has mistakenly changed the behavior. It made the frontend feature support check to not be repeated once it shown the 'feature_persistent' as 'false', or the frontend doesn't support persistent grants. This commit changes the behavior of the parameter to make effect for every connect, so that the previous workflow can work again as expected. [1] https://lore.kernel.org/xen-devel/CAJwUmVB6H3iTs-C+U=v-pwJB7-_ZRHPxHzKRJZ22xEPW7z8a=g@mail.gmail.com/ Reported-by: Andrii Chepurnyi <andrii.chepurnyi82@gmail.com> Fixes: aac8a70db2 ("xen-blkback: add a parameter for disabling of persistent grants") Cc: <stable@vger.kernel.org> # 5.10.x Signed-off-by: Maximilian Heyne <mheyne@amazon.de> Signed-off-by: SeongJae Park <sj@kernel.org> Reviewed-by: Maximilian Heyne <mheyne@amazon.de> Reviewed-by: Juergen Gross <jgross@suse.com> Link: https://lore.kernel.org/r/20220715225108.193398-3-sj@kernel.org Signed-off-by: Juergen Gross <jgross@suse.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-08-17 14:24:28 +02:00
SeongJae Park	7304be4c98	xen-blkback: fix persistent grants negotiation ... commit fc9be616bb8f3ed9cf560308f86904f5c06be205 upstream. Persistent grants feature can be used only when both backend and the frontend supports the feature. The feature was always supported by 'blkback', but commit aac8a70db2 ("xen-blkback: add a parameter for disabling of persistent grants") has introduced a parameter for disabling it runtime. To avoid the parameter be updated while being used by 'blkback', the commit caches the parameter into 'vbd->feature_gnt_persistent' in 'xen_vbd_create()', and then check if the guest also supports the feature and finally updates the field in 'connect_ring()'. However, 'connect_ring()' could be called before 'xen_vbd_create()', so later execution of 'xen_vbd_create()' can wrongly overwrite 'true' to 'vbd->feature_gnt_persistent'. As a result, 'blkback' could try to use 'persistent grants' feature even if the guest doesn't support the feature. This commit fixes the issue by moving the parameter value caching to 'xen_blkif_alloc()', which allocates the 'blkif'. Because the struct embeds 'vbd' object, which will be used by 'connect_ring()' later, this should be called before 'connect_ring()' and therefore this should be the right and safe place to do the caching. Fixes: aac8a70db2 ("xen-blkback: add a parameter for disabling of persistent grants") Cc: <stable@vger.kernel.org> # 5.10.x Signed-off-by: Maximilian Heyne <mheyne@amazon.de> Signed-off-by: SeongJae Park <sj@kernel.org> Reviewed-by: Maximilian Heyne <mheyne@amazon.de> Reviewed-by: Juergen Gross <jgross@suse.com> Link: https://lore.kernel.org/r/20220715225108.193398-2-sj@kernel.org Signed-off-by: Juergen Gross <jgross@suse.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-08-17 14:24:28 +02:00
Dan Carpenter	87e7ba8b0b	null_blk: fix ida error handling in null_add_dev() ... [ Upstream commit ee452a8d984f94fa8e894f003a52e776e4572881 ] There needs to be some error checking if ida_simple_get() fails. Also call ida_free() if there are errors later. Fixes: 94bc02e30f ("nullb: use ida to manage index") Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com> Link: https://lore.kernel.org/r/YtEhXsr6vJeoiYhd@kili Signed-off-by: Jens Axboe <axboe@kernel.dk> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-08-17 14:24:00 +02:00
Md Haris Iqbal	06f39bc5a7	block/rnbd-srv: Set keep_id to true after mutex_trylock ... [ Upstream commit 4bc14f3101364877dd59085f39e068a2a7ec9f2d ] After setting keep_id if the mutex trylock fails, the keep_id stays set for the rest of the sess_dev lifetime. Therefore, set keep_id to true after mutex_trylock succeeds, so that a failure of trylock does'nt touch keep_id. Fixes: b168e1d85c ("block/rnbd-srv: Prevent a deadlock generated by accessing sysfs in parallel") Cc: gi-oh.kim@ionos.com Signed-off-by: Md Haris Iqbal <haris.iqbal@ionos.com> Signed-off-by: Jack Wang <jinpu.wang@ionos.com> Link: https://lore.kernel.org/r/20220707143122.460362-2-haris.iqbal@ionos.com Signed-off-by: Jens Axboe <axboe@kernel.dk> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-08-17 14:24:00 +02:00
Vaishali Thakkar	bab17b761c	RDMA/rtrs-srv: Rename rtrs_srv_sess to rtrs_srv_path ... [ Upstream commit ae4c81644e9105d9f7f713bb0d444737bb6a0cf1 ] rtrs_srv_sess is used for paths and not sessions on the server side. This creates confusion so let's rename it to rtrs_srv_path. Also, rename related variables and functions. Coccinelle is used to do the transformations for most of the occurrences and remaining ones were handled manually. Link: https://lore.kernel.org/r/20220105180708.7774-3-jinpu.wang@ionos.com Signed-off-by: Vaishali Thakkar <vaishali.thakkar@ionos.com> Signed-off-by: Jack Wang <jinpu.wang@ionos.com> Signed-off-by: Jason Gunthorpe <jgg@nvidia.com> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-08-17 14:23:54 +02:00
Greg Kroah-Hartman	85e3c21eb8	Merge 5.15.54 into android13-5.15-lts ... Changes in 5.15.54 mm/slub: add missing TID updates on slab deactivation mm/filemap: fix UAF in find_lock_entries Revert "selftests/bpf: Add test for bpf_timer overwriting crash" ALSA: usb-audio: Workarounds for Behringer UMC 204/404 HD ALSA: hda/realtek: Add quirk for Clevo L140PU ALSA: cs46xx: Fix missing snd_card_free() call at probe error can: bcm: use call_rcu() instead of costly synchronize_rcu() can: grcan: grcan_probe(): remove extra of_node_get() can: gs_usb: gs_usb_open/close(): fix memory leak can: m_can: m_can_chip_config(): actually enable internal timestamping can: m_can: m_can_{read_fifo,echo_tx_event}(): shift timestamp to full 32 bits can: mcp251xfd: mcp251xfd_regmap_crc_read(): improve workaround handling for mcp2517fd can: mcp251xfd: mcp251xfd_regmap_crc_read(): update workaround broken CRC on TBC register bpf: Fix incorrect verifier simulation around jmp32's jeq/jne bpf: Fix insufficient bounds propagation from adjust_scalar_min_max_vals usbnet: fix memory leak in error case net: rose: fix UAF bug caused by rose_t0timer_expiry netfilter: nft_set_pipapo: release elements in clone from abort path netfilter: nf_tables: stricter validation of element data btrfs: rename btrfs_alloc_chunk to btrfs_create_chunk btrfs: add additional parameters to btrfs_init_tree_ref/btrfs_init_data_ref btrfs: fix invalid delayed ref after subvolume creation failure btrfs: fix warning when freeing leaf after subvolume creation failure Input: cpcap-pwrbutton - handle errors from platform_get_irq() Input: goodix - change goodix_i2c_write() len parameter type to int Input: goodix - add a goodix.h header file Input: goodix - refactor reset handling Input: goodix - try not to touch the reset-pin on x86/ACPI devices dma-buf/poll: Get a file reference for outstanding fence callbacks btrfs: fix deadlock between chunk allocation and chunk btree modifications drm/i915: Disable bonding on gen12+ platforms drm/i915/gt: Register the migrate contexts with their engines drm/i915: Replace the unconditional clflush with drm_clflush_virt_range() PCI/portdrv: Rename pm_iter() to pcie_port_device_iter() PCI: pciehp: Ignore Link Down/Up caused by error-induced Hot Reset media: ir_toy: prevent device from hanging during transmit memory: renesas-rpc-if: Avoid unaligned bus access for HyperFlash ath11k: add hw_param for wakeup_mhi qed: Improve the stack space of filter_config() platform/x86: wmi: introduce helper to convert driver to WMI driver platform/x86: wmi: Replace read_takes_no_args with a flags field platform/x86: wmi: Fix driver->notify() vs ->probe() race mt76: mt7921: get rid of mt7921_mac_set_beacon_filter mt76: mt7921: introduce mt7921_mcu_set_beacon_filter utility routine mt76: mt7921: fix a possible race enabling/disabling runtime-pm bpf: Stop caching subprog index in the bpf_pseudo_func insn bpf, arm64: Use emit_addr_mov_i64() for BPF_PSEUDO_FUNC riscv: defconfig: enable DRM_NOUVEAU RISC-V: defconfigs: Set CONFIG_FB=y, for FB console net/mlx5e: Check action fwd/drop flag exists also for nic flows net/mlx5e: Split actions_match_supported() into a sub function net/mlx5e: TC, Reject rules with drop and modify hdr action net/mlx5e: TC, Reject rules with forward and drop actions ASoC: rt5682: Avoid the unexpected IRQ event during going to suspend ASoC: rt5682: Re-detect the combo jack after resuming ASoC: rt5682: Fix deadlock on resume netfilter: nf_tables: convert pktinfo->tprot_set to flags field netfilter: nft_payload: support for inner header matching / mangling netfilter: nft_payload: don't allow th access for fragments s390/boot: allocate amode31 section in decompressor s390/setup: use physical pointers for memblock_reserve() s390/setup: preserve memory at OLDMEM_BASE and OLDMEM_SIZE ibmvnic: init init_done_rc earlier ibmvnic: clear fop when retrying probe ibmvnic: Allow queueing resets during probe virtio-blk: avoid preallocating big SGL for data io_uring: ensure that fsnotify is always called block: use bdev_get_queue() in bio.c block: only mark bio as tracked if it really is tracked block: fix rq-qos breakage from skipping rq_qos_done_bio() stddef: Introduce struct_group() helper macro media: omap3isp: Use struct_group() for memcpy() region media: davinci: vpif: fix use-after-free on driver unbind mt76: mt76_connac: fix MCU_CE_CMD_SET_ROC definition error mt76: mt7921: do not always disable fw runtime-pm cxl/port: Hold port reference until decoder release clk: renesas: r9a07g044: Update multiplier and divider values for PLL2/3 KVM: x86/mmu: Use yield-safe TDP MMU root iter in MMU notifier unmapping KVM: x86/mmu: Use common TDP MMU zap helper for MMU notifier unmap hook scsi: qla2xxx: Move heartbeat handling from DPC thread to workqueue scsi: qla2xxx: Fix laggy FC remote port session recovery scsi: qla2xxx: edif: Replace list_for_each_safe with list_for_each_entry_safe scsi: qla2xxx: Fix crash during module load unload test gfs2: Fix gfs2_file_buffered_write endless loop workaround vdpa/mlx5: Avoid processing works if workqueue was destroyed btrfs: handle device lookup with btrfs_dev_lookup_args btrfs: add a btrfs_get_dev_args_from_path helper btrfs: use btrfs_get_dev_args_from_path in dev removal ioctls btrfs: remove device item and update super block in the same transaction drbd: add error handling support for add_disk() drbd: Fix double free problem in drbd_create_device drbd: fix an invalid memory access caused by incorrect use of list iterator drm/amd/display: Set min dcfclk if pipe count is 0 drm/amd/display: Fix by adding FPU protection for dcn30_internal_validate_bw NFSD: De-duplicate net_generic(nf->nf_net, nfsd_net_id) NFSD: COMMIT operations must not return NFS?ERR_INVAL riscv/mm: Add XIP_FIXUP for riscv_pfn_base iio: accel: mma8452: use the correct logic to get mma8452_data batman-adv: Use netif_rx(). mtd: spi-nor: Skip erase logic when SPI_NOR_NO_ERASE is set Compiler Attributes: add __alloc_size() for better bounds checking mm: vmalloc: introduce array allocation functions KVM: use __vcalloc for very large allocations btrfs: don't access possibly stale fs_info data in device_list_add KVM: s390x: fix SCK locking scsi: qla2xxx: Fix loss of NVMe namespaces after driver reload test powerpc/32: Don't use lmw/stmw for saving/restoring non volatile regs powerpc: flexible GPR range save/restore macros powerpc/tm: Fix more userspace r13 corruption serial: sc16is7xx: Clear RS485 bits in the shutdown bus: mhi: core: Use correctly sized arguments for bit field bus: mhi: Fix pm_state conversion to string stddef: Introduce DECLARE_FLEX_ARRAY() helper uapi/linux/stddef.h: Add include guards ASoC: rt5682: move clk related code to rt5682_i2c_probe ASoC: rt5682: fix an incorrect NULL check on list iterator drm/amd/vcn: fix an error msg on vcn 3.0 KVM: Don't create VM debugfs files outside of the VM directory tty: n_gsm: Modify CR,PF bit when config requester tty: n_gsm: Save dlci address open status when config requester tty: n_gsm: fix frame reception handling ALSA: usb-audio: add mapping for MSI MPG X570S Carbon Max Wifi. ALSA: usb-audio: add mapping for MSI MAG X570S Torpedo MAX. tty: n_gsm: fix missing update of modem controls after DLCI open btrfs: zoned: encapsulate inode locking for zoned relocation btrfs: zoned: use dedicated lock for data relocation KVM: Initialize debugfs_dentry when a VM is created to avoid NULL deref mm/hwpoison: mf_mutex for soft offline and unpoison mm/hwpoison: avoid the impact of hwpoison_filter() return value on mce handler mm/memory-failure.c: fix race with changing page compound again mm/hwpoison: fix race between hugetlb free/demotion and memory_failure_hugetlb() tty: n_gsm: fix invalid use of MSC in advanced option tty: n_gsm: fix sometimes uninitialized warning in gsm_dlci_modem_output() serial: 8250_mtk: Make sure to select the right FEATURE_SEL tty: n_gsm: fix invalid gsmtty_write_room() result drm/amd: Refactor `amdgpu_aspm` to be evaluated per device drm/amdgpu: vi: disable ASPM on Intel Alder Lake based systems drm/i915: Fix a race between vma / object destruction and unbinding drm/mediatek: Use mailbox rx_callback instead of cmdq_task_cb drm/mediatek: Remove the pointer of struct cmdq_client drm/mediatek: Detect CMDQ execution timeout drm/mediatek: Add cmdq_handle in mtk_crtc drm/mediatek: Add vblank register/unregister callback functions Bluetooth: protect le accept and resolv lists with hdev->lock Bluetooth: btmtksdio: fix use-after-free at btmtksdio_recv_event io_uring: avoid io-wq -EAGAIN looping for !IOPOLL irqchip/gic-v3: Ensure pseudo-NMIs have an ISB between ack and handling irqchip/gic-v3: Refactor ISB + EOIR at ack time rxrpc: Fix locking issue dt-bindings: soc: qcom: smd-rpm: Add compatible for MSM8953 SoC dt-bindings: soc: qcom: smd-rpm: Fix missing MSM8936 compatible module: change to print useful messages from elf_validity_check() module: fix [e_shstrndx].sh_size=0 OOB access iommu/vt-d: Fix PCI bus rescan device hot add fbdev: fbmem: Fix logo center image dx issue fbmem: Check virtual screen sizes in fb_set_var() fbcon: Disallow setting font bigger than screen size fbcon: Prevent that screen size is smaller than font size PM: runtime: Redefine pm_runtime_release_supplier() memregion: Fix memregion_free() fallback definition video: of_display_timing.h: include errno.h powerpc/powernv: delay rng platform device creation until later in boot net: dsa: qca8k: reset cpu port on MTU change can: kvaser_usb: replace run-time checks with struct kvaser_usb_driver_info can: kvaser_usb: kvaser_usb_leaf: fix CAN clock frequency regression can: kvaser_usb: kvaser_usb_leaf: fix bittiming limits xfs: remove incorrect ASSERT in xfs_rename Revert "serial: sc16is7xx: Clear RS485 bits in the shutdown" btrfs: fix error pointer dereference in btrfs_ioctl_rm_dev_v2() virtio-blk: modify the value type of num in virtio_queue_rq() btrfs: fix use of uninitialized variable at rm device ioctl tty: n_gsm: fix encoding of command/response bit ARM: meson: Fix refcount leak in meson_smp_prepare_cpus pinctrl: sunxi: a83t: Fix NAND function name for some pins ASoC: rt711: Add endianness flag in snd_soc_component_driver ASoC: rt711-sdca: Add endianness flag in snd_soc_component_driver ASoC: codecs: rt700/rt711/rt711-sdca: resume bus/codec in .set_jack_detect arm64: dts: qcom: msm8994: Fix CPU6/7 reg values arm64: dts: qcom: sdm845: use dispcc AHB clock for mdss node ARM: mxs_defconfig: Enable the framebuffer arm64: dts: imx8mp-evk: correct mmc pad settings arm64: dts: imx8mp-evk: correct the uart2 pinctl value arm64: dts: imx8mp-evk: correct gpio-led pad settings arm64: dts: imx8mp-evk: correct vbus pad settings arm64: dts: imx8mp-evk: correct eqos pad settings arm64: dts: imx8mp-evk: correct I2C1 pad settings arm64: dts: imx8mp-evk: correct I2C3 pad settings arm64: dts: imx8mp-phyboard-pollux-rdk: correct uart pad settings arm64: dts: imx8mp-phyboard-pollux-rdk: correct eqos pad settings arm64: dts: imx8mp-phyboard-pollux-rdk: correct i2c2 & mmc settings pinctrl: sunxi: sunxi_pconf_set: use correct offset arm64: dts: qcom: msm8992-*: Fix vdd_lvs1_2-supply typo ARM: at91: pm: use proper compatible for sama5d2's rtc ARM: at91: pm: use proper compatibles for sam9x60's rtc and rtt ARM: at91: pm: use proper compatibles for sama7g5's rtc and rtt ARM: dts: at91: sam9x60ek: fix eeprom compatible and size ARM: dts: at91: sama5d2_icp: fix eeprom compatibles ARM: at91: fix soc detection for SAM9X60 SiPs xsk: Clear page contiguity bit when unmapping pool i2c: piix4: Fix a memory leak in the EFCH MMIO support i40e: Fix dropped jumbo frames statistics i40e: Fix VF's MAC Address change on VM ARM: dts: stm32: use usbphyc ck_usbo_48m as USBH OHCI clock on stm32mp151 ARM: dts: stm32: add missing usbh clock and fix clk order on stm32mp15 ibmvnic: Properly dispose of all skbs during a failover. selftests: forwarding: fix flood_unicast_test when h2 supports IFF_UNICAST_FLT selftests: forwarding: fix learning_test when h1 supports IFF_UNICAST_FLT selftests: forwarding: fix error message in learning_test r8169: fix accessing unset transport header i2c: cadence: Unregister the clk notifier in error path dmaengine: imx-sdma: Allow imx8m for imx7 FW revs misc: rtsx_usb: fix use of dma mapped buffer for usb bulk transfer misc: rtsx_usb: use separate command and response buffers misc: rtsx_usb: set return value in rsp_buf alloc err path Revert "mm/memory-failure.c: fix race with changing page compound again" Revert "serial: 8250_mtk: Make sure to select the right FEATURE_SEL" dt-bindings: dma: allwinner,sun50i-a64-dma: Fix min/max typo ida: don't use BUG_ON() for debugging dmaengine: pl330: Fix lockdep warning about non-static key dmaengine: lgm: Fix an error handling path in intel_ldma_probe() dmaengine: at_xdma: handle errors of at_xdmac_alloc_desc() correctly dmaengine: ti: Fix refcount leak in ti_dra7_xbar_route_allocate dmaengine: qcom: bam_dma: fix runtime PM underflow dmaengine: ti: Add missing put_device in ti_dra7_xbar_route_allocate dmaengine: idxd: force wq context cleanup on device disable path selftests/net: fix section name when using xdp_dummy.o Linux 5.15.54 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I5434cb4ec4ac9e6d1f619f47a5139a11352b98e1	2022-08-10 13:23:20 +02:00
Greg Kroah-Hartman	ecf030179f	Merge 5.15.53 into android13-5.15-lts ... Changes in 5.15.53 Revert "drm/amdgpu/display: set vblank_disable_immediate for DC" drm/amdgpu: To flush tlb for MMHUB of RAVEN series ksmbd: set the range of bytes to zero without extending file size in FSCTL_ZERO_DATA ksmbd: check invalid FileOffset and BeyondFinalZero in FSCTL_ZERO_DATA ksmbd: use vfs_llseek instead of dereferencing NULL ipv6: take care of disable_policy when restoring routes net: phy: Don't trigger state machine while in suspend nvme-pci: add NVME_QUIRK_BOGUS_NID for ADATA XPG SX6000LNP (AKA SPECTRIX S40G) nvme-pci: add NVME_QUIRK_BOGUS_NID for ADATA IM2P33F8ABR1 nvdimm: Fix badblocks clear off-by-one error powerpc/prom_init: Fix kernel config grep powerpc/book3e: Fix PUD allocation size in map_kernel_page() powerpc/bpf: Fix use of user_pt_regs in uapi dm raid: fix accesses beyond end of raid member array dm raid: fix KASAN warning in raid5_add_disks s390/archrandom: simplify back to earlier design and initialize earlier SUNRPC: Fix READ_PLUS crasher net: rose: fix UAF bugs caused by timer handler net: usb: ax88179_178a: Fix packet receiving virtio-net: fix race between ndo_open() and virtio_device_ready() selftests/net: pass ipv6_args to udpgso_bench's IPv6 TCP test net: dsa: bcm_sf2: force pause link settings net: tun: unlink NAPI from device on destruction net: tun: stop NAPI when detaching queues net: dp83822: disable false carrier interrupt net: dp83822: disable rx error interrupt RDMA/qedr: Fix reporting QP timeout attribute RDMA/cm: Fix memory leak in ib_cm_insert_listen linux/dim: Fix divide by 0 in RDMA DIM net: usb: asix: do not force pause frames support usbnet: fix memory allocation in helpers selftests: mptcp: more stable diag tests net: ipv6: unexport __init-annotated seg6_hmac_net_init() NFSD: restore EINVAL error translation in nfsd_commit() vfs: fix copy_file_range() regression in cross-fs copies caif_virtio: fix race between virtio_device_ready() and ndo_open() PM / devfreq: exynos-ppmu: Fix refcount leak in of_get_devfreq_events vdpa/mlx5: Update Control VQ callback information s390: remove unneeded 'select BUILD_BIN2C' netfilter: nft_dynset: restore set element counter when failing to update net/dsa/hirschmann: Add missing of_node_get() in hellcreek_led_setup() net/sched: act_api: Notify user space if any actions were flushed before error net: asix: fix "can't send until first packet is send" issue net: bonding: fix possible NULL deref in rlb code net: phy: ax88772a: fix lost pause advertisement configuration net: bonding: fix use-after-free after 802.3ad slave unbind powerpc/memhotplug: Add add_pages override for PPC nfc: nfcmrvl: Fix irq_of_parse_and_map() return value NFC: nxp-nci: Don't issue a zero length i2c_master_read() tipc: move bc link creation back to tipc_node_create epic100: fix use after free on rmmod io_uring: ensure that send/sendmsg and recv/recvmsg check sqe->ioprio ACPI: video: Change how we determine if brightness key-presses are handled tunnels: do not assume mac header is set in skb_tunnel_check_pmtu() ipv6/sit: fix ipip6_tunnel_get_prl return value ipv6: fix lockdep splat in in6_dump_addrs() mlxsw: spectrum_router: Fix rollback in tunnel next hop init net: tun: avoid disabling NAPI twice MAINTAINERS: add Leah as xfs maintainer for 5.15.y tcp: add a missing nf_reset_ct() in 3WHS handling selftests/bpf: Add test_verifier support to fixup kfunc call insns selftests/rseq: remove ARRAY_SIZE define from individual tests selftests/rseq: introduce own copy of rseq uapi header selftests/rseq: Remove useless assignment to cpu variable selftests/rseq: Remove volatile from __rseq_abi selftests/rseq: Introduce rseq_get_abi() helper selftests/rseq: Introduce thread pointer getters selftests/rseq: Uplift rseq selftests for compatibility with glibc-2.35 selftests/rseq: Fix ppc32: wrong rseq_cs 32-bit field pointer on big endian selftests/rseq: Fix ppc32 missing instruction selection "u" and "x" for load/store selftests/rseq: Fix ppc32 offsets by using long rather than off_t selftests/rseq: Fix warnings about #if checks of undefined tokens selftests/rseq: Remove arm/mips asm goto compiler work-around selftests/rseq: Fix: work-around asm goto compiler bugs selftests/rseq: x86-64: use %fs segment selector for accessing rseq thread area selftests/rseq: x86-32: use %gs segment selector for accessing rseq thread area selftests/rseq: Change type of rseq_offset to ptrdiff_t xen/blkfront: fix leaking data in shared pages xen/netfront: fix leaking data in shared pages xen/netfront: force data bouncing when backend is untrusted xen/blkfront: force data bouncing when backend is untrusted xen-netfront: restore __skb_queue_tail() positioning in xennet_get_responses() xen/arm: Fix race in RB-tree based P2M accounting net: usb: qmi_wwan: add Telit 0x1070 composition clocksource/drivers/ixp4xx: remove EXPORT_SYMBOL_GPL from ixp4xx_timer_setup() fsi: occ: Force sequence numbering per OCC net: fix IFF_TX_SKB_NO_LINEAR definition drm/i915/gem: add missing else drm/msm/gem: Fix error return on fence id alloc fail drivers: cpufreq: Add missing of_node_put() in qoriq-cpufreq.c platform/x86: panasonic-laptop: de-obfuscate button codes platform/x86: panasonic-laptop: sort includes alphabetically platform/x86: panasonic-laptop: revert "Resolve hotkey double trigger bug" platform/x86: panasonic-laptop: don't report duplicate brightness key-presses platform/x86: panasonic-laptop: filter out duplicate volume up/down/mute keypresses drm/fourcc: fix integer type usage in uapi header hwmon: (occ) Remove sequence numbering and checksum calculation hwmon: (occ) Prevent power cap command overwriting poll response hwmon: (ibmaem) don't call platform_device_del() if platform_device_add() fails Linux 5.15.53 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: Ia725fa748b108ad71b6d90bdf7d704aa269c5976	2022-08-08 17:13:32 +02:00
Greg Kroah-Hartman	09b3a27222	Merge 5.15.51 into android13-5.15-lts ... Changes in 5.15.51 random: schedule mix_interrupt_randomness() less often random: quiet urandom warning ratelimit suppression message ALSA: hda/via: Fix missing beep setup ALSA: hda/conexant: Fix missing beep setup ALSA: hda/realtek: Add mute LED quirk for HP Omen laptop ALSA: hda/realtek - ALC897 headset MIC no sound ALSA: hda/realtek: Apply fixup for Lenovo Yoga Duet 7 properly ALSA: hda/realtek: Add quirk for Clevo PD70PNT ALSA: hda/realtek: Add quirk for Clevo NS50PU net: openvswitch: fix parsing of nw_proto for IPv6 fragments 9p: Fix refcounting during full path walks for fid lookups 9p: fix fid refcount leak in v9fs_vfs_atomic_open_dotl 9p: fix fid refcount leak in v9fs_vfs_get_link btrfs: fix hang during unmount when block group reclaim task is running btrfs: prevent remounting to v1 space cache for subpage mount btrfs: add error messages to all unrecognized mount options scsi: ibmvfc: Store vhost pointer during subcrq allocation scsi: ibmvfc: Allocate/free queue resource only during probe/remove mmc: sdhci-pci-o2micro: Fix card detect by dealing with debouncing mmc: mediatek: wait dma stop bit reset to 0 xen/gntdev: Avoid blocking in unmap_grant_pages() MAINTAINERS: Add new IOMMU development mailing list mtd: rawnand: gpmi: Fix setting busy timeout setting ata: libata: add qc->flags in ata_qc_complete_template tracepoint dm era: commit metadata in postsuspend after worker stops dm mirror log: clear log bits up to BITS_PER_LONG boundary tracing/kprobes: Check whether get_kretprobe() returns NULL in kretprobe_dispatcher() drm/i915: Implement w/a 22010492432 for adl-s USB: serial: pl2303: add support for more HXN (G) types USB: serial: option: add Telit LE910Cx 0x1250 composition USB: serial: option: add Quectel EM05-G modem USB: serial: option: add Quectel RM500K module support drm/msm: Ensure mmap offset is initialized drm/msm: Fix double pm_runtime_disable() call netfilter: use get_random_u32 instead of prandom scsi: scsi_debug: Fix zone transition to full condition drm/msm: Switch ordering of runpm put vs devfreq_idle scsi: iscsi: Exclude zero from the endpoint ID range xsk: Fix generic transmit when completion queue reservation fails drm/msm: use for_each_sgtable_sg to iterate over scatterlist bpf: Fix request_sock leak in sk lookup helpers drm/sun4i: Fix crash during suspend after component bind failure bpf, x86: Fix tail call count offset calculation on bpf2bpf call scsi: storvsc: Correct reporting of Hyper-V I/O size limits phy: aquantia: Fix AN when higher speeds than 1G are not advertised KVM: arm64: Prevent kmemleak from accessing pKVM memory net: Write lock dev_base_lock without disabling bottom halves. net: fix data-race in dev_isalive() tipc: fix use-after-free Read in tipc_named_reinit igb: fix a use-after-free issue in igb_clean_tx_ring bonding: ARP monitor spams NETDEV_NOTIFY_PEERS notifiers ethtool: Fix get module eeprom fallback net/sched: sch_netem: Fix arithmetic in netem_dump() for 32-bit platforms drm/msm/mdp4: Fix refcount leak in mdp4_modeset_init_intf drm/msm/dp: check core_initialized before disable interrupts at dp_display_unbind() drm/msm/dp: Drop now unused hpd_high member drm/msm/dp: dp_link_parse_sink_count() return immediately if aux read failed drm/msm/dp: do not initialize phy until plugin interrupt received drm/msm/dp: force link training for display resolution change perf arm-spe: Don't set data source if it's not a memory operation erspan: do not assume transport header is always set net/tls: fix tls_sk_proto_close executed repeatedly udmabuf: add back sanity check selftests: netfilter: correct PKTGEN_SCRIPT_PATHS in nft_concat_range.sh xen-blkfront: Handle NULL gendisk x86/xen: Remove undefined behavior in setup_features() MIPS: Remove repetitive increase irq_err_count afs: Fix dynamic root getattr ice: ethtool: advertise 1000M speeds properly regmap-irq: Fix a bug in regmap_irq_enable() for type_in_mask chips regmap-irq: Fix offset/index mismatch in read_sub_irq_data() igb: Make DMA faster when CPU is active on the PCIe link virtio_net: fix xdp_rxq_info bug after suspend/resume Revert "net/tls: fix tls_sk_proto_close executed repeatedly" sock: redo the psock vs ULP protection check nvme-pci: add NO APST quirk for Kioxia device nvme: move the Samsung X5 quirk entry to the core quirks gpio: winbond: Fix error code in winbond_gpio_get() s390/cpumf: Handle events cycles and instructions identical iio: mma8452: fix probe fail when device tree compatible is used. iio: magnetometer: yas530: Fix memchr_inv() misuse iio: adc: vf610: fix conversion mode sysfs node name usb: typec: wcove: Drop wrong dependency to INTEL_SOC_PMIC xhci: turn off port power in shutdown xhci-pci: Allow host runtime PM as default for Intel Raptor Lake xHCI xhci-pci: Allow host runtime PM as default for Intel Meteor Lake xHCI usb: gadget: Fix non-unique driver names in raw-gadget driver USB: gadget: Fix double-free bug in raw_gadget driver usb: chipidea: udc: check request status before setting device address dt-bindings: usb: ohci: Increase the number of PHYs dt-bindings: usb: ehci: Increase the number of PHYs btrfs: don't set lock_owner when locking extent buffer for reading btrfs: fix deadlock with fsync+fiemap+transaction commit f2fs: attach inline_data after setting compression iio:humidity:hts221: rearrange iio trigger get and register iio:chemical:ccs811: rearrange iio trigger get and register iio:accel:kxcjk-1013: rearrange iio trigger get and register iio:accel:bma180: rearrange iio trigger get and register iio:accel:mxc4005: rearrange iio trigger get and register iio: accel: mma8452: ignore the return value of reset operation iio: gyro: mpu3050: Fix the error handling in mpu3050_power_up() iio: trigger: sysfs: fix use-after-free on remove iio: adc: stm32: fix maximum clock rate for stm32mp15x iio: imu: inv_icm42600: Fix broken icm42600 (chip id 0 value) iio: afe: rescale: Fix boolean logic bug iio: adc: stm32: Fix ADCs iteration in irq handler iio: adc: stm32: Fix IRQs on STM32F4 by removing custom spurious IRQs message iio: adc: axp288: Override TS pin bias current for some models iio: adc: rzg2l_adc: add missing fwnode_handle_put() in rzg2l_adc_parse_properties() iio: adc: adi-axi-adc: Fix refcount leak in adi_axi_adc_attach_client iio: adc: ti-ads131e08: add missing fwnode_handle_put() in ads131e08_alloc_channels() xtensa: xtfpga: Fix refcount leak bug in setup xtensa: Fix refcount leak bug in time.c parisc/stifb: Fix fb_is_primary_device() only available with CONFIG_FB_STI parisc: Enable ARCH_HAS_STRICT_MODULE_RWX powerpc/microwatt: wire up rng during setup_arch() powerpc: Enable execve syscall exit tracepoint powerpc/rtas: Allow ibm,platform-dump RTAS call with null buffer address powerpc/powernv: wire up rng during setup_arch drm/msm/dp: Always clear mask bits to disable interrupts at dp_ctrl_reset_irq_ctrl() ARM: dts: imx7: Move hsic_phy power domain to HSIC PHY node ARM: dts: imx6qdl: correct PU regulator ramp delay arm64: dts: ti: k3-am64-main: Remove support for HS400 speed mode ARM: exynos: Fix refcount leak in exynos_map_pmu soc: bcm: brcmstb: pm: pm-arm: Fix refcount leak in brcmstb_pm_probe ARM: Fix refcount leak in axxia_boot_secondary memory: samsung: exynos5422-dmc: Fix refcount leak in of_get_dram_timings ARM: cns3xxx: Fix refcount leak in cns3xxx_init modpost: fix section mismatch check for exported init/exit sections ARM: dts: bcm2711-rpi-400: Fix GPIO line names random: update comment from copy_to_user() -> copy_to_iter() perf build-id: Fix caching files with a wrong build ID dma-direct: use the correct size for dma_set_encrypted() kbuild: link vmlinux only once for CONFIG_TRIM_UNUSED_KSYMS (2nd attempt) powerpc/pseries: wire up rng during setup_arch() Linux 5.15.51 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: Iac87c7937a5517ad126a1b4512680a2bbfb6447d	2022-08-08 16:02:45 +02:00
Greg Kroah-Hartman	f3a0b5d245	Merge 5.15.47 into android13-5.15-lts ... Changes in 5.15.47 pcmcia: db1xxx_ss: restrict to MIPS_DB1XXX boards staging: greybus: codecs: fix type confusion of list iterator variable iio: adc: ad7124: Remove shift from scan_type lkdtm/bugs: Check for the NULL pointer after calling kmalloc lkdtm/bugs: Don't expect thread termination without CONFIG_UBSAN_TRAP tty: goldfish: Use tty_port_destroy() to destroy port tty: serial: owl: Fix missing clk_disable_unprepare() in owl_uart_probe tty: n_tty: Restore EOF push handling behavior serial: 8250_aspeed_vuart: Fix potential NULL dereference in aspeed_vuart_probe tty: serial: fsl_lpuart: fix potential bug when using both of_alias_get_id and ida_simple_get remoteproc: imx_rproc: Ignore create mem entry for resource table usb: usbip: fix a refcount leak in stub_probe() usb: usbip: add missing device lock on tweak configuration cmd USB: storage: karma: fix rio_karma_init return usb: musb: Fix missing of_node_put() in omap2430_probe staging: fieldbus: Fix the error handling path in anybuss_host_common_probe() pwm: lp3943: Fix duty calculation in case period was clamped pwm: raspberrypi-poe: Fix endianness in firmware struct rpmsg: qcom_smd: Fix irq_of_parse_and_map() return value usb: dwc3: gadget: Replace list_for_each_entry_safe() if using giveback usb: dwc3: pci: Fix pm_runtime_get_sync() error checking misc: fastrpc: fix an incorrect NULL check on list iterator firmware: stratix10-svc: fix a missing check on list iterator usb: typec: mux: Check dev_set_name() return value rpmsg: virtio: Fix possible double free in rpmsg_probe() rpmsg: virtio: Fix possible double free in rpmsg_virtio_add_ctrl_dev() rpmsg: virtio: Fix the unregistration of the device rpmsg_ctrl iio: adc: stmpe-adc: Fix wait_for_completion_timeout return value check iio: proximity: vl53l0x: Fix return value check of wait_for_completion_timeout iio: adc: sc27xx: fix read big scale voltage not right iio: adc: sc27xx: Fine tune the scale calibration values rpmsg: qcom_smd: Fix returning 0 if irq_of_parse_and_map() fails pvpanic: Fix typos in the comments misc/pvpanic: Convert regular spinlock into trylock on panic path phy: qcom-qmp: fix pipe-clock imbalance on power-on failure power: supply: axp288_fuel_gauge: Drop BIOS version check from "T3 MRD" DMI quirk serial: sifive: Report actual baud base rather than fixed 115200 export: fix string handling of namespace in EXPORT_SYMBOL_NS soundwire: intel: prevent pm_runtime resume prior to system suspend coresight: cpu-debug: Replace mutex with mutex_trylock on panic notifier ksmbd: fix reference count leak in smb_check_perm_dacl() extcon: ptn5150: Add queue work sync before driver release soc: rockchip: Fix refcount leak in rockchip_grf_init clocksource/drivers/riscv: Events are stopped during CPU suspend ARM: dts: aspeed: ast2600-evb: Enable RX delay for MAC0/MAC1 rtc: mt6397: check return value after calling platform_get_resource() rtc: ftrtc010: Use platform_get_irq() to get the interrupt rtc: ftrtc010: Fix error handling in ftrtc010_rtc_probe staging: r8188eu: add check for kzalloc tty: n_gsm: Don't ignore write return value in gsmld_output() tty: n_gsm: Fix packet data hex dump output serial: meson: acquire port->lock in startup() serial: 8250_fintek: Check SER_RS485_RTS_* only with RS485 serial: cpm_uart: Fix build error without CONFIG_SERIAL_CPM_CONSOLE serial: digicolor-usart: Don't allow CS5-6 serial: rda-uart: Don't allow CS5-6 serial: txx9: Don't allow CS5-6 serial: sh-sci: Don't allow CS5-6 serial: sifive: Sanitize CSIZE and c_iflag serial: st-asc: Sanitize CSIZE and correct PARENB for CS7 serial: stm32-usart: Correct CSIZE, bits, and parity firmware: dmi-sysfs: Fix memory leak in dmi_sysfs_register_handle bus: ti-sysc: Fix warnings for unbind for serial driver: base: fix UAF when driver_attach failed driver core: fix deadlock in __device_attach watchdog: rti-wdt: Fix pm_runtime_get_sync() error checking watchdog: ts4800_wdt: Fix refcount leak in ts4800_wdt_probe blk-mq: don't touch ->tagset in blk_mq_get_sq_hctx ASoC: fsl_sai: Fix FSL_SAI_xDR/xFR definition clocksource/drivers/oxnas-rps: Fix irq_of_parse_and_map() return value s390/crypto: fix scatterwalk_unmap() callers in AES-GCM net: sched: fixed barrier to prevent skbuff sticking in qdisc backlog net: ethernet: mtk_eth_soc: out of bounds read in mtk_hwlro_get_fdir_entry() net: ethernet: ti: am65-cpsw-nuss: Fix some refcount leaks net: dsa: mv88e6xxx: Fix refcount leak in mv88e6xxx_mdios_register modpost: fix removing numeric suffixes jffs2: fix memory leak in jffs2_do_fill_super ubi: fastmap: Fix high cpu usage of ubi_bgt by making sure wl_pool not empty ubi: ubi_create_volume: Fix use-after-free when volume creation failed selftests/bpf: fix selftest after random: Urandom_read tracepoint removal selftests/bpf: fix stacktrace_build_id with missing kprobe/urandom_read bpf: Fix probe read error in ___bpf_prog_run() block: take destination bvec offsets into account in bio_copy_data_iter riscv: read-only pages should not be writable net/smc: fixes for converting from "struct smc_cdc_tx_pend **" to "struct smc_wr_tx_pend_priv *" tcp: add accessors to read/set tp->snd_cwnd nfp: only report pause frame configuration for physical device sfc: fix considering that all channels have TX queues sfc: fix wrong tx channel offset with efx_separate_tx_channels block: make bioset_exit() fully resilient against being called twice vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit virtio: pci: Fix an error handling path in vp_modern_probe() net/mlx5: Don't use already freed action pointer net/mlx5e: TC NIC mode, fix tc chains miss table net/mlx5: CT: Fix header-rewrite re-use for tupels net/mlx5: correct ECE offset in query qp output net/mlx5e: Update netdev features after changing XDP state net: sched: add barrier to fix packet stuck problem for lockless qdisc tcp: tcp_rtx_synack() can be called from process context vdpa: ifcvf: set pci driver data in probe octeontx2-af: fix error code in is_valid_offset() s390/mcck: isolate SIE instruction when setting CIF_MCCK_GUEST flag regulator: mt6315-regulator: fix invalid allowed mode gpio: pca953x: use the correct register address to do regcache sync afs: Fix infinite loop found by xfstest generic/676 scsi: sd: Fix potential NULL pointer dereference tipc: check attribute length for bearer name driver core: Fix wait_for_device_probe() & deferred_probe_timeout interaction perf c2c: Fix sorting in percent_rmt_hitm_cmp() dmaengine: idxd: set DMA_INTERRUPT cap bit mips: cpc: Fix refcount leak in mips_cpc_default_phys_base bootconfig: Make the bootconfig.o as a normal object file tracing: Make tp_printk work on syscall tracepoints tracing: Fix sleeping function called from invalid context on RT kernel tracing: Avoid adding tracer option before update_tracer_options iommu/arm-smmu: fix possible null-ptr-deref in arm_smmu_device_probe() iommu/arm-smmu-v3: check return value after calling platform_get_resource() f2fs: remove WARN_ON in f2fs_is_valid_blkaddr i2c: cadence: Increase timeout per message if necessary m68knommu: set ZERO_PAGE() to the allocated zeroed page m68knommu: fix undefined reference to `_init_sp' dmaengine: zynqmp_dma: In struct zynqmp_dma_chan fix desc_size data type NFSv4: Don't hold the layoutget locks across multiple RPC calls video: fbdev: hyperv_fb: Allow resolutions with size > 64 MB for Gen1 video: fbdev: pxa3xx-gcu: release the resources correctly in pxa3xx_gcu_probe/remove() RISC-V: use memcpy for kexec_file mode m68knommu: fix undefined reference to `mach_get_rtc_pll' f2fs: fix to tag gcing flag on page during file defragment xprtrdma: treat all calls not a bcall when bc_serv is NULL drm/bridge: sn65dsi83: Fix an error handling path in sn65dsi83_probe() drm/bridge: ti-sn65dsi83: Handle dsi_lanes == 0 as invalid netfilter: nat: really support inet nat without l3 address netfilter: nf_tables: use kfree_rcu(ptr, rcu) to release hooks in clean_net path netfilter: nf_tables: delete flowtable hooks via transaction list powerpc/kasan: Force thread size increase with KASAN SUNRPC: Trap RDMA segment overflows netfilter: nf_tables: always initialize flowtable hook list in transaction ata: pata_octeon_cf: Fix refcount leak in octeon_cf_probe netfilter: nf_tables: release new hooks on unsupported flowtable flags netfilter: nf_tables: memleak flow rule from commit path netfilter: nf_tables: bail out early if hardware offload is not supported xen: unexport __init-annotated xen_xlate_map_ballooned_pages() stmmac: intel: Fix an error handling path in intel_eth_pci_probe() af_unix: Fix a data-race in unix_dgram_peer_wake_me(). bpf, arm64: Clear prog->jited_len along prog->jited net: dsa: lantiq_gswip: Fix refcount leak in gswip_gphy_fw_list net/mlx4_en: Fix wrong return value on ioctl EEPROM query failure i40e: xsk: Move tmp desc array from driver to pool xsk: Fix handling of invalid descriptors in XSK TX batching API SUNRPC: Fix the calculation of xdr->end in xdr_get_next_encode_buffer() net: mdio: unexport __init-annotated mdio_bus_init() net: xfrm: unexport __init-annotated xfrm4_protocol_init() net: ipv6: unexport __init-annotated seg6_hmac_init() net/mlx5: Lag, filter non compatible devices net/mlx5: Fix mlx5_get_next_dev() peer device matching net/mlx5: Rearm the FW tracer after each tracer event net/mlx5: fs, fail conflicting actions ip_gre: test csum_start instead of transport header net: altera: Fix refcount leak in altera_tse_mdio_create net: dsa: mv88e6xxx: use BMSR_ANEGCOMPLETE bit for filling an_complete tcp: use alloc_large_system_hash() to allocate table_perturb drm: imx: fix compiler warning with gcc-12 nfp: flower: restructure flow-key for gre+vlan combination iov_iter: Fix iter_xarray_get_pages{,_alloc}() iio: dummy: iio_simple_dummy: check the return value of kstrdup() staging: rtl8712: fix a potential memory leak in r871xu_drv_init() iio: st_sensors: Add a local lock for protecting odr lkdtm/usercopy: Expand size of "out of frame" object drivers: staging: rtl8723bs: Fix deadlock in rtw_surveydone_event_callback() drivers: staging: rtl8192bs: Fix deadlock in rtw_joinbss_event_prehandle() tty: synclink_gt: Fix null-pointer-dereference in slgt_clean() tty: Fix a possible resource leak in icom_probe thunderbolt: Use different lane for second DisplayPort tunnel drivers: staging: rtl8192u: Fix deadlock in ieee80211_beacons_stop() drivers: staging: rtl8192e: Fix deadlock in rtllib_beacons_stop() USB: host: isp116x: check return value after calling platform_get_resource() drivers: tty: serial: Fix deadlock in sa1100_set_termios() drivers: usb: host: Fix deadlock in oxu_bus_suspend() USB: hcd-pci: Fully suspend across freeze/thaw cycle char: xillybus: fix a refcount leak in cleanup_dev() sysrq: do not omit current cpu when showing backtrace of all active CPUs usb: dwc2: gadget: don't reset gadget's driver->bus soundwire: qcom: adjust autoenumeration timeout misc: rtsx: set NULL intfdata when probe fails extcon: Fix extcon_get_extcon_dev() error handling extcon: Modify extcon device to be created after driver data is set clocksource/drivers/sp804: Avoid error on multiple instances staging: rtl8712: fix uninit-value in usb_read8() and friends staging: rtl8712: fix uninit-value in r871xu_drv_init() serial: msm_serial: disable interrupts in __msm_console_write() kernfs: Separate kernfs_pr_cont_buf and rename_lock. watchdog: wdat_wdt: Stop watchdog when rebooting the system md: protect md_unregister_thread from reentrancy scsi: myrb: Fix up null pointer access on myrb_cleanup() Revert "net: af_key: add check for pfkey_broadcast in function pfkey_process" ceph: allow ceph.dir.rctime xattr to be updatable ceph: flush the mdlog for filesystem sync drm/amd/display: Check if modulo is 0 before dividing. drm/radeon: fix a possible null pointer dereference drm/amd/pm: Fix missing thermal throttler status um: line: Use separate IRQs per line modpost: fix undefined behavior of is_arm_mapping_symbol() x86/cpu: Elide KCSAN for cpu_has() and friends jump_label,noinstr: Avoid instrumentation for JUMP_LABEL=n builds nbd: call genl_unregister_family() first in nbd_cleanup() nbd: fix race between nbd_alloc_config() and module removal nbd: fix io hung while disconnecting device s390/gmap: voluntarily schedule during key setting cifs: version operations for smb20 unneeded when legacy support disabled drm/amd/pm: use bitmap_{from,to}_arr32 where appropriate nodemask: Fix return values to be unsigned vringh: Fix loop descriptors check in the indirect cases scripts/gdb: change kernel config dumping method ALSA: usb-audio: Skip generic sync EP parse for secondary EP ALSA: usb-audio: Set up (implicit) sync for Saffire 6 ALSA: hda/conexant - Fix loopback issue with CX20632 ALSA: hda/realtek: Fix for quirk to enable speaker output on the Lenovo Yoga DuetITL 2021 ALSA: hda/realtek: Add quirk for HP Dev One cifs: return errors during session setup during reconnects cifs: fix reconnect on smb3 mount types KEYS: trusted: tpm2: Fix migratable logic ata: libata-transport: fix {dma|pio|xfer}_mode sysfs files mmc: block: Fix CQE recovery reset success net: phy: dp83867: retrigger SGMII AN when link change net: openvswitch: fix misuse of the cached connection on tuple changes writeback: Fix inode->i_io_list not be protected by inode->i_lock error nfc: st21nfca: fix incorrect validating logic in EVT_TRANSACTION nfc: st21nfca: fix memory leaks in EVT_TRANSACTION handling nfc: st21nfca: fix incorrect sizing calculations in EVT_TRANSACTION ixgbe: fix bcast packets Rx on VF after promisc removal ixgbe: fix unexpected VLAN Rx in promisc mode on VF Input: bcm5974 - set missing URB_NO_TRANSFER_DMA_MAP urb flag vduse: Fix NULL pointer dereference on sysfs access powerpc: Don't select HAVE_IRQ_EXIT_ON_IRQ_STACK drm/bridge: analogix_dp: Support PSR-exit to disable transition drm/atomic: Force bridge self-refresh-exit on CRTC switch drm/amdgpu: update VCN codec support for Yellow Carp powerpc/32: Fix overread/overwrite of thread_struct via ptrace powerpc/mm: Switch obsolete dssall to .long drm/ast: Create threshold values for AST2600 random: avoid checking crng_ready() twice in random_init() random: mark bootloader randomness code as __init random: account for arch randomness in bits md/raid0: Ignore RAID0 layout if the second zone has only one device net/sched: act_police: more accurate MTU policing PCI: qcom: Fix pipe clock imbalance zonefs: fix handling of explicit_open option on mount iov_iter: fix build issue due to possible type mis-match dmaengine: idxd: add missing callback function to support DMA_INTERRUPT tcp: fix tcp_mtup_probe_success vs wrong snd_cwnd xsk: Fix possible crash when multiple sockets are created Linux 5.15.47 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I4f53567cd8a0a13927a16f41a2be8bc0db21ce5b	2022-08-08 12:12:20 +02:00
Greg Kroah-Hartman	a9422ed2f1	Merge 5.15.46 into android13-5.15-lts ... Changes in 5.15.46 binfmt_flat: do not stop relocating GOT entries prematurely on riscv parisc/stifb: Implement fb_is_primary_device() parisc/stifb: Keep track of hardware path of graphics card RISC-V: Mark IORESOURCE_EXCLUSIVE for reserved mem instead of IORESOURCE_BUSY riscv: Initialize thread pointer before calling C functions riscv: Fix irq_work when SMP is disabled riscv: Wire up memfd_secret in UAPI header riscv: Move alternative length validation into subsection ALSA: hda/realtek - Add new type for ALC245 ALSA: hda/realtek: Enable 4-speaker output for Dell XPS 15 9520 laptop ALSA: hda/realtek - Fix microphone noise on ASUS TUF B550M-PLUS ALSA: usb-audio: Cancel pending work at closing a MIDI substream USB: serial: pl2303: fix type detection for odd device USB: serial: option: add Quectel BG95 modem USB: new quirk for Dell Gen 2 devices usb: isp1760: Fix out-of-bounds array access usb: dwc3: gadget: Move null pinter check to proper place usb: core: hcd: Add support for deferring roothub registration fs/ntfs3: Update valid size if -EIOCBQUEUED fs/ntfs3: Fix fiemap + fix shrink file size (to remove preallocated space) fs/ntfs3: Keep preallocated only if option prealloc enabled fs/ntfs3: Check new size for limits fs/ntfs3: In function ntfs_set_acl_ex do not change inode->i_mode if called from function ntfs_init_acl fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()' fs/ntfs3: Update i_ctime when xattr is added fs/ntfs3: Restore ntfs_xattr_get_acl and ntfs_xattr_set_acl functions cifs: fix potential double free during failed mount cifs: when extending a file with falloc we should make files not-sparse xhci: Allow host runtime PM as default for Intel Alder Lake N xHCI platform/x86: intel-hid: fix _DSM function index handling x86/MCE/AMD: Fix memory leak when threshold_create_bank() fails perf/x86/intel: Fix event constraints for ICL x86/kexec: fix memory leak of elf header buffer x86/sgx: Set active memcg prior to shmem allocation ptrace/um: Replace PT_DTRACE with TIF_SINGLESTEP ptrace/xtensa: Replace PT_SINGLESTEP with TIF_SINGLESTEP ptrace: Reimplement PTRACE_KILL by always sending SIGKILL btrfs: add "0x" prefix for unsupported optional features btrfs: return correct error number for __extent_writepage_io() btrfs: repair super block num_devices automatically btrfs: fix the error handling for submit_extent_page() for btrfs_do_readpage() iommu/vt-d: Add RPLS to quirk list to skip TE disabling drm/vmwgfx: validate the screen formats drm/virtio: fix NULL pointer dereference in virtio_gpu_conn_get_modes selftests/bpf: Fix vfs_link kprobe definition selftests/bpf: Fix parsing of prog types in UAPI hdr for bpftool sync mwifiex: add mutex lock for call in mwifiex_dfs_chan_sw_work_queue b43legacy: Fix assigning negative value to unsigned variable b43: Fix assigning negative value to unsigned variable ipw2x00: Fix potential NULL dereference in libipw_xmit() ipv6: fix locking issues with loops over idev->addr_list fbcon: Consistently protect deferred_takeover with console_lock() x86/platform/uv: Update TSC sync state for UV5 ACPICA: Avoid cache flush inside virtual machines mac80211: minstrel_ht: fix where rate stats are stored (fixes debugfs output) drm/komeda: return early if drm_universal_plane_init() fails. drm/amd/display: Disabling Z10 on DCN31 rcu-tasks: Fix race in schedule and flush work rcu: Make TASKS_RUDE_RCU select IRQ_WORK sfc: ef10: Fix assigning negative value to unsigned variable ALSA: jack: Access input_dev under mutex rtw88: 8821c: fix debugfs rssi value spi: spi-rspi: Remove setting {src,dst}_{addr,addr_width} based on DMA direction tools/power turbostat: fix ICX DRAM power numbers scsi: lpfc: Move cfg_log_verbose check before calling lpfc_dmp_dbg() scsi: lpfc: Fix SCSI I/O completion and abort handler deadlock scsi: lpfc: Fix call trace observed during I/O with CMF enabled cpuidle: PSCI: Improve support for suspend-to-RAM for PSCI OSI mode drm/amd/pm: fix double free in si_parse_power_table() ASoC: rsnd: care default case on rsnd_ssiu_busif_err_status_clear() ASoC: rsnd: care return value from rsnd_node_fixed_index() ath9k: fix QCA9561 PA bias level media: venus: hfi: avoid null dereference in deinit media: pci: cx23885: Fix the error handling in cx23885_initdev() media: cx25821: Fix the warning when removing the module md/bitmap: don't set sb values if can't pass sanity check mmc: jz4740: Apply DMA engine limits to maximum segment size drivers: mmc: sdhci_am654: Add the quirk to set TESTCD bit scsi: megaraid: Fix error check return value of register_chrdev() drm/amdgpu/sdma: Fix incorrect calculations of the wptr of the doorbells scsi: ufs: Use pm_runtime_resume_and_get() instead of pm_runtime_get_sync() scsi: lpfc: Fix resource leak in lpfc_sli4_send_seq_to_ulp() ath11k: disable spectral scan during spectral deinit ASoC: Intel: bytcr_rt5640: Add quirk for the HP Pro Tablet 408 drm/plane: Move range check for format_count earlier drm/amd/pm: fix the compile warning ath10k: skip ath10k_halt during suspend for driver state RESTARTING arm64: compat: Do not treat syscall number as ESR_ELx for a bad syscall drm: msm: fix error check return value of irq_of_parse_and_map() scsi: target: tcmu: Fix possible data corruption ipv6: Don't send rs packets to the interface of ARPHRD_TUNNEL net/mlx5: fs, delete the FTE when there are no rules attached to it ASoC: dapm: Don't fold register value changes into notifications mlxsw: spectrum_dcb: Do not warn about priority changes mlxsw: Treat LLDP packets as control drm/amdgpu/psp: move PSP memory alloc from hw_init to sw_init drm/amdgpu/ucode: Remove firmware load type check in amdgpu_ucode_free_bo regulator: mt6315: Enforce regulator-compatible, not name HID: bigben: fix slab-out-of-bounds Write in bigben_probe of: Support more than one crash kernel regions for kexec -s ASoC: tscs454: Add endianness flag in snd_soc_component_driver scsi: lpfc: Alter FPIN stat accounting logic net: remove two BUG() from skb_checksum_help() s390/preempt: disable __preempt_count_add() optimization for PROFILE_ALL_BRANCHES perf/amd/ibs: Cascade pmu init functions' return value sched/core: Avoid obvious double update_rq_clock warning spi: stm32-qspi: Fix wait_cmd timeout in APM mode dma-debug: change allocation mode from GFP_NOWAIT to GFP_ATIOMIC ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default ipmi:ssif: Check for NULL msg when handling events and messages ipmi: Fix pr_fmt to avoid compilation issues rtlwifi: Use pr_warn instead of WARN_ONCE mt76: mt7921: accept rx frames with non-standard VHT MCS10-11 mt76: fix encap offload ethernet type check media: rga: fix possible memory leak in rga_probe media: coda: limit frame interval enumeration to supported encoder frame sizes media: hantro: HEVC: unconditionnaly set pps_{cb/cr}_qp_offset values media: ccs-core.c: fix failure to call clk_disable_unprepare media: imon: reorganize serialization media: cec-adap.c: fix is_configuring state usbnet: Run unregister_netdev() before unbind() again openrisc: start CPU timer early in boot nvme-pci: fix a NULL pointer dereference in nvme_alloc_admin_tags ASoC: rt5645: Fix errorenous cleanup order nbd: Fix hung on disconnect request if socket is closed before drm/amd/pm: update smartshift powerboost calc for smu12 drm/amd/pm: update smartshift powerboost calc for smu13 net: phy: micrel: Allow probing without .driver_data media: exynos4-is: Fix compile warning media: hantro: Stop using H.264 parameter pic_num ASoC: max98357a: remove dependency on GPIOLIB ASoC: rt1015p: remove dependency on GPIOLIB ACPI: CPPC: Assume no transition latency if no PCCT nvme: set non-mdts limits in nvme_scan_work can: mcp251xfd: silence clang's -Wunaligned-access warning x86/microcode: Add explicit CPU vendor dependency net: ipa: ignore endianness if there is no header m68k: atari: Make Atari ROM port I/O write macros return void rxrpc: Return an error to sendmsg if call failed rxrpc, afs: Fix selection of abort codes afs: Adjust ACK interpretation to try and cope with NAT eth: tg3: silence the GCC 12 array-bounds warning char: tpm: cr50_i2c: Suppress duplicated error message in .remove() selftests/bpf: fix btf_dump/btf_dump due to recent clang change gfs2: use i_lock spin_lock for inode qadata scsi: target: tcmu: Avoid holding XArray lock when calling lock_page IB/rdmavt: add missing locks in rvt_ruc_loopback ARM: dts: ox820: align interrupt controller node name with dtschema ARM: dts: socfpga: align interrupt controller node name with dtschema ARM: dts: s5pv210: align DMA channels with dtschema arm64: dts: qcom: msm8994: Fix the cont_splash_mem address arm64: dts: qcom: msm8994: Fix BLSP[12]_DMA channels count PM / devfreq: rk3399_dmc: Disable edev on remove() crypto: ccree - use fine grained DMA mapping dir soc: ti: ti_sci_pm_domains: Check for null return of devm_kcalloc fs: jfs: fix possible NULL pointer dereference in dbFree() arm64: dts: qcom: sdm845-xiaomi-beryllium: fix typo in panel's vddio-supply property ALSA: usb-audio: Add quirk bits for enabling/disabling generic implicit fb ALSA: usb-audio: Move generic implicit fb quirk entries into quirks.c ARM: OMAP1: clock: Fix UART rate reporting algorithm powerpc/fadump: Fix fadump to work with a different endian capture kernel fat: add ratelimit to fat*_ent_bread() pinctrl: renesas: rzn1: Fix possible null-ptr-deref in sh_pfc_map_resources() ARM: versatile: Add missing of_node_put in dcscb_init ARM: dts: exynos: add atmel,24c128 fallback to Samsung EEPROM ARM: hisi: Add missing of_node_put after of_find_compatible_node cpufreq: Avoid unnecessary frequency updates due to mismatch powerpc/rtas: Keep MSR[RI] set when calling RTAS PCI: Avoid pci_dev_lock() AB/BA deadlock with sriov_numvfs_store() KVM: PPC: Book3S HV Nested: L2 LPCR should inherit L1 LPES setting alpha: fix alloc_zeroed_user_highpage_movable() tracing: incorrect isolate_mote_t cast in mm_vmscan_lru_isolate powerpc/powernv/vas: Assign real address to rx_fifo in vas_rx_win_attr powerpc/xics: fix refcount leak in icp_opal_init() powerpc/powernv: fix missing of_node_put in uv_init() macintosh/via-pmu: Fix build failure when CONFIG_INPUT is disabled powerpc/iommu: Add missing of_node_put in iommu_init_early_dart smb3: check for null tcon RDMA/hfi1: Prevent panic when SDMA is disabled Input: gpio-keys - cancel delayed work only in case of GPIO drm: fix EDID struct for old ARM OABI format drm/bridge_connector: enable HPD by default if supported dt-bindings: display: sitronix, st7735r: Fix backlight in example drm/vmwgfx: Fix an invalid read ath11k: acquire ab->base_lock in unassign when finding the peer by addr drm: bridge: it66121: Fix the register page length ath9k: fix ar9003_get_eepmisc drm/edid: fix invalid EDID extension block filtering drm/bridge: adv7511: clean up CEC adapter when probe fails drm: bridge: icn6211: Fix register layout drm: bridge: icn6211: Fix HFP_HSW_HBP_HI and HFP_MIN handling mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG spi: qcom-qspi: Add minItems to interconnect-names ASoC: mediatek: Fix error handling in mt8173_max98090_dev_probe ASoC: mediatek: Fix missing of_node_put in mt2701_wm8960_machine_probe x86/delay: Fix the wrong asm constraint in delay_loop() drm/vc4: hvs: Fix frame count register readout drm/mediatek: Fix mtk_cec_mask() drm/vc4: hvs: Reset muxes at probe time drm/vc4: txp: Don't set TXP_VSTART_AT_EOF drm/vc4: txp: Force alpha to be 0xff if it's disabled libbpf: Don't error out on CO-RE relos for overriden weak subprogs x86/PCI: Fix ALi M1487 (IBC) PIRQ router link value interpretation mptcp: reset the packet scheduler on PRIO change nl80211: show SSID for P2P_GO interfaces drm/komeda: Fix an undefined behavior bug in komeda_plane_add() drm: mali-dp: potential dereference of null pointer spi: spi-ti-qspi: Fix return value handling of wait_for_completion_timeout scftorture: Fix distribution of short handler delays net: dsa: mt7530: 1G can also support 1000BASE-X link mode ixp4xx_eth: fix error check return value of platform_get_irq() NFC: NULL out the dev->rfkill to prevent UAF efi: Add missing prototype for efi_capsule_setup_info device property: Check fwnode->secondary when finding properties device property: Allow error pointer to be passed to fwnode APIs target: remove an incorrect unmap zeroes data deduction drbd: fix duplicate array initializer EDAC/dmc520: Don't print an error for each unconfigured interrupt line mtd: rawnand: denali: Use managed device resources HID: hid-led: fix maximum brightness for Dream Cheeky HID: elan: Fix potential double free in elan_input_configured drm/bridge: Fix error handling in analogix_dp_probe regulator: da9121: Fix uninit-value in da9121_assign_chip_model() drm/mediatek: dpi: Use mt8183 output formats for mt8192 signal: Deliver SIGTRAP on perf event asynchronously if blocked sched/fair: Fix cfs_rq_clock_pelt() for throttled cfs_rq sched/psi: report zeroes for CPU full at the system level spi: img-spfi: Fix pm_runtime_get_sync() error checking cpufreq: Fix possible race in cpufreq online error path printk: use atomic updates for klogd work printk: add missing memory barrier to wake_up_klogd() printk: wake waiters for safe and NMI contexts ath9k_htc: fix potential out of bounds access with invalid rxstatus->rs_keyix media: i2c: max9286: Use dev_err_probe() helper media: i2c: max9286: Use "maxim,gpio-poc" property media: i2c: max9286: fix kernel oops when removing module media: hantro: Empty encoder capture buffers by default drm/panel: simple: Add missing bus flags for Innolux G070Y2-L01 ALSA: pcm: Check for null pointer of pointer substream before dereferencing it mtdblock: warn if opened on NAND inotify: show inotify mask flags in proc fdinfo fsnotify: fix wrong lockdep annotations spi: rockchip: Stop spi slave dma receiver when cs inactive spi: rockchip: Preset cs-high and clk polarity in setup progress spi: rockchip: fix missing error on unsupported SPI_CS_HIGH of: overlay: do not break notify on NOTIFY_{OK|STOP} selftests/damon: add damon to selftests root Makefile drm/msm/dp: Modify prototype of encoder based API drm/msm/hdmi: switch to drm_bridge_connector drm/msm/dpu: adjust display_v_end for eDP and DP scsi: iscsi: Fix harmless double shift bug scsi: ufs: qcom: Fix ufs_qcom_resume() scsi: ufs: core: Exclude UECxx from SFR dump list drm/v3d: Fix null pointer dereference of pointer perfmon selftests/resctrl: Fix null pointer dereference on open failed libbpf: Fix logic for finding matching program for CO-RE relocation mtd: spi-nor: core: Check written SR value in spi_nor_write_16bit_sr_and_check() x86/pm: Fix false positive kmemleak report in msr_build_context() mtd: rawnand: cadence: fix possible null-ptr-deref in cadence_nand_dt_probe() mtd: rawnand: intel: fix possible null-ptr-deref in ebu_nand_probe() x86/speculation: Add missing prototype for unpriv_ebpf_notify() ASoC: rk3328: fix disabling mclk on pclk probe failure perf tools: Add missing headers needed by util/data.h drm/msm/disp/dpu1: set vbif hw config to NULL to avoid use after memory free during pm runtime resume drm/msm/dp: stop event kernel thread when DP unbind drm/msm/dp: fix error check return value of irq_of_parse_and_map() drm/msm/dp: reset DP controller before transmit phy test pattern drm/msm/dp: do not stop transmitting phy test pattern during DP phy compliance test drm/msm/dsi: fix error checks and return values for DSI xmit functions drm/msm/hdmi: check return value after calling platform_get_resource_byname() drm/msm/hdmi: fix error check return value of irq_of_parse_and_map() drm/msm: add missing include to msm_drv.c drm/panel: panel-simple: Fix proper bpc for AM-1280800N3TZQW-T00H kunit: fix debugfs code to use enum kunit_status, not bool drm/rockchip: vop: fix possible null-ptr-deref in vop_bind() spi: cadence-quadspi: fix Direct Access Mode disable for SoCFPGA perf tools: Use Python devtools for version autodetection rather than runtime virtio_blk: fix the discard_granularity and discard_alignment queue limits nl80211: don't hold RTNL in color change request x86: Fix return value of __setup handlers irqchip/exiu: Fix acknowledgment of edge triggered interrupts irqchip/aspeed-i2c-ic: Fix irq_of_parse_and_map() return value irqchip/aspeed-scu-ic: Fix irq_of_parse_and_map() return value x86/mm: Cleanup the control_va_addr_alignment() __setup handler arm64: fix types in copy_highpage() regulator: core: Fix enable_count imbalance with EXCLUSIVE_GET drm/msm/dsi: fix address for second DSI PHY on SDM660 drm/msm/dp: fix event thread stuck in wait_event after kthread_stop() drm/msm/mdp5: Return error code in mdp5_pipe_release when deadlock is detected drm/msm/mdp5: Return error code in mdp5_mixer_release when deadlock is detected drm/msm: return an error pointer in msm_gem_prime_get_sg_table() media: uvcvideo: Fix missing check to determine if element is found in list arm64: stackleak: fix current_top_of_stack() iomap: iomap_write_failed fix spi: spi-fsl-qspi: check return value after calling platform_get_resource_byname() Revert "cpufreq: Fix possible race in cpufreq online error path" regulator: qcom_smd: Fix up PM8950 regulator configuration samples: bpf: Don't fail for a missing VMLINUX_BTF when VMLINUX_H is provided perf/amd/ibs: Use interrupt regs ip for stack unwinding ath11k: Don't check arvif->is_started before sending management frames wilc1000: fix crash observed in AP mode with cfg80211_register_netdevice() HID: amd_sfh: Modify the bus name HID: amd_sfh: Modify the hid name ASoC: fsl: Use dev_err_probe() helper ASoC: fsl: Fix refcount leak in imx_sgtl5000_probe ASoC: imx-hdmi: Fix refcount leak in imx_hdmi_probe ASoC: mxs-saif: Fix refcount leak in mxs_saif_probe regulator: pfuze100: Fix refcount leak in pfuze_parse_regulators_dt dma-direct: factor out a helper for DMA_ATTR_NO_KERNEL_MAPPING allocations dma-direct: don't fail on highmem CMA pages in dma_direct_alloc_pages ASoC: samsung: Use dev_err_probe() helper ASoC: samsung: Fix refcount leak in aries_audio_probe block: Fix the bio.bi_opf comment kselftest/cgroup: fix test_stress.sh to use OUTPUT dir scripts/faddr2line: Fix overlapping text section failures media: aspeed: Fix an error handling path in aspeed_video_probe() media: exynos4-is: Fix PM disable depth imbalance in fimc_is_probe mt76: mt7921: Fix the error handling path of mt7921_pci_probe() mt76: do not attempt to reorder received 802.3 packets without agg session media: st-delta: Fix PM disable depth imbalance in delta_probe media: atmel: atmel-isc: Fix PM disable depth imbalance in atmel_isc_probe media: i2c: rdacm2x: properly set subdev entity function media: exynos4-is: Change clk_disable to clk_disable_unprepare media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init media: vsp1: Fix offset calculation for plane cropping media: atmel: atmel-sama5d2-isc: fix wrong mask in YUYV format check media: hantro: HEVC: Fix tile info buffer value computation Bluetooth: fix dangling sco_conn and use-after-free in sco_sock_timeout Bluetooth: use hdev lock in activate_scan for hci_is_adv_monitoring Bluetooth: use hdev lock for accept_list and reject_list in conn req nvme: set dma alignment to dword m68k: math-emu: Fix dependencies of math emulation support sctp: read sk->sk_bound_dev_if once in sctp_rcv() net: hinic: add missing destroy_workqueue in hinic_pf_to_mgmt_init ASoC: ti: j721e-evm: Fix refcount leak in j721e_soc_probe_* kselftest/arm64: bti: force static linking media: ov7670: remove ov7670_power_off from ov7670_remove media: i2c: ov5648: fix wrong pointer passed to IS_ERR() and PTR_ERR() media: staging: media: rkvdec: Make use of the helper function devm_platform_ioremap_resource() media: rkvdec: h264: Fix dpb_valid implementation media: rkvdec: h264: Fix bit depth wrap in pps packet regulator: scmi: Fix refcount leak in scmi_regulator_probe ext4: reject the 'commit' option on ext2 filesystems drm/msm/a6xx: Fix refcount leak in a6xx_gpu_init drm: msm: fix possible memory leak in mdp5_crtc_cursor_set() x86/sev: Annotate stack change in the #VC handler drm/msm: don't free the IRQ if it was not requested selftests/bpf: Add missed ima_setup.sh in Makefile drm/msm/dpu: handle pm_runtime_get_sync() errors in bind path drm/i915: Fix CFI violation with show_dynamic_id() thermal/drivers/bcm2711: Don't clamp temperature at zero thermal/drivers/broadcom: Fix potential NULL dereference in sr_thermal_probe thermal/core: Fix memory leak in __thermal_cooling_device_register() thermal/drivers/imx_sc_thermal: Fix refcount leak in imx_sc_thermal_probe bfq: Relax waker detection for shared queues bfq: Allow current waker to defend against a tentative one ASoC: wm2000: fix missing clk_disable_unprepare() on error in wm2000_anc_transition() PM: domains: Fix initialization of genpd's next_wakeup net: macb: Fix PTP one step sync support NFC: hci: fix sleep in atomic context bugs in nfc_hci_hcp_message_tx ASoC: max98090: Move check for invalid values before casting in max98090_put_enab_tlv() net: stmmac: selftests: Use kcalloc() instead of kzalloc() net: stmmac: fix out-of-bounds access in a selftest hv_netvsc: Fix potential dereference of NULL pointer hwmon: (pmbus) Check PEC support before reading other registers rxrpc: Fix listen() setting the bar too high for the prealloc rings rxrpc: Don't try to resend the request if we're receiving the reply rxrpc: Fix overlapping ACK accounting rxrpc: Don't let ack.previousPacket regress rxrpc: Fix decision on when to generate an IDLE ACK net: huawei: hinic: Use devm_kcalloc() instead of devm_kzalloc() hinic: Avoid some over memory allocation net: dsa: restrict SMSC_LAN9303_I2C kconfig net/smc: postpone sk_refcnt increment in connect() dma-direct: factor out dma_set_{de,en}crypted helpers dma-direct: don't call dma_set_decrypted for remapped allocations dma-direct: always leak memory that can't be re-encrypted dma-direct: don't over-decrypt memory arm64: dts: rockchip: Move drive-impedance-ohm to emmc phy on rk3399 arm64: dts: mt8192: Fix nor_flash status disable typo PCI/ACPI: Allow D3 only if Root Port can signal and wake from D3 memory: samsung: exynos5422-dmc: Avoid some over memory allocation ARM: dts: BCM5301X: update CRU block description ARM: dts: BCM5301X: Update pin controller node name ARM: dts: suniv: F1C100: fix watchdog compatible soc: qcom: smp2p: Fix missing of_node_put() in smp2p_parse_ipc soc: qcom: smsm: Fix missing of_node_put() in smsm_parse_ipc PCI: cadence: Fix find_first_zero_bit() limit PCI: rockchip: Fix find_first_zero_bit() limit PCI: mediatek: Fix refcount leak in mtk_pcie_subsys_powerup() PCI: dwc: Fix setting error return on MSI DMA mapping failure ARM: dts: ci4x10: Adapt to changes in imx6qdl.dtsi regarding fec clocks soc: qcom: llcc: Add MODULE_DEVICE_TABLE() KVM: nVMX: Leave most VM-Exit info fields unmodified on failed VM-Entry KVM: nVMX: Clear IDT vectoring on nested VM-Exit for double/triple fault crypto: qat - set CIPHER capability for QAT GEN2 crypto: qat - set COMPRESSION capability for QAT GEN2 crypto: qat - set CIPHER capability for DH895XCC crypto: qat - set COMPRESSION capability for DH895XCC platform/chrome: cros_ec: fix error handling in cros_ec_register() ARM: dts: imx6dl-colibri: Fix I2C pinmuxing platform/chrome: Re-introduce cros_ec_cmd_xfer and use it for ioctls can: xilinx_can: mark bit timing constants as const ARM: dts: stm32: Fix PHY post-reset delay on Avenger96 ARM: dts: bcm2835-rpi-zero-w: Fix GPIO line name for Wifi/BT ARM: dts: bcm2837-rpi-cm3-io3: Fix GPIO line names for SMPS I2C ARM: dts: bcm2837-rpi-3-b-plus: Fix GPIO line name of power LED ARM: dts: bcm2835-rpi-b: Fix GPIO line names misc: ocxl: fix possible double free in ocxl_file_register_afu crypto: marvell/cesa - ECB does not IV gpiolib: of: Introduce hook for missing gpio-ranges pinctrl: bcm2835: implement hook for missing gpio-ranges arm: mediatek: select arch timer for mt7629 pinctrl/rockchip: support deferring other gpio params pinctrl: mediatek: mt8195: enable driver on mtk platforms arm64: dts: qcom: qrb5165-rb5: Fix can-clock node name Drivers: hv: vmbus: Fix handling of messages with transaction ID of zero powerpc/fadump: fix PT_LOAD segment for boot memory area mfd: ipaq-micro: Fix error check return value of platform_get_irq() scsi: fcoe: Fix Wstringop-overflow warnings in fcoe_wwn_from_mac() soc: bcm: Check for NULL return of devm_kzalloc() arm64: dts: ti: k3-am64-mcu: remove incorrect UART base clock rates ASoC: sh: rz-ssi: Check return value of pm_runtime_resume_and_get() ASoC: sh: rz-ssi: Propagate error codes returned from platform_get_irq_byname() ASoC: sh: rz-ssi: Release the DMA channels in rz_ssi_probe() error path firmware: arm_scmi: Fix list protocols enumeration in the base protocol nvdimm: Fix firmware activation deadlock scenarios nvdimm: Allow overwrite in the presence of disabled dimms pinctrl: mvebu: Fix irq_of_parse_and_map() return value drivers/base/node.c: fix compaction sysfs file leak dax: fix cache flush on PMD-mapped pages drivers/base/memory: fix an unlikely reference counting issue in __add_memory_block() firmware: arm_ffa: Fix uuid parameter to ffa_partition_probe firmware: arm_ffa: Remove incorrect assignment of driver_data list: introduce list_is_head() helper and re-use it in list.h list: fix a data-race around ep->rdllist drm/msm/dpu: fix error check return value of irq_of_parse_and_map() powerpc/8xx: export 'cpm_setbrg' for modules pinctrl: renesas: r8a779a0: Fix GPIO function on I2C-capable pins pinctrl: renesas: core: Fix possible null-ptr-deref in sh_pfc_map_resources() powerpc/idle: Fix return value of __setup() handler powerpc/4xx/cpm: Fix return value of __setup() handler RDMA/hns: Add the detection for CMDQ status in the device initialization process arm64: dts: marvell: espressobin-ultra: fix SPI-NOR config arm64: dts: marvell: espressobin-ultra: enable front USB3 port ASoC: atmel-pdmic: Remove endianness flag on pdmic component ASoC: atmel-classd: Remove endianness flag on class d component proc: fix dentry/inode overinstantiating under /proc/${pid}/net ipc/mqueue: use get_tree_nodev() in mqueue_get_tree() PCI: imx6: Fix PERST# start-up sequence tty: fix deadlock caused by calling printk() under tty_port->lock crypto: sun8i-ss - rework handling of IV crypto: sun8i-ss - handle zero sized sg crypto: cryptd - Protect per-CPU resource by disabling BH. ARM: dts: at91: sama7g5: remove interrupt-parent from gic node hugetlbfs: fix hugetlbfs_statfs() locking Input: sparcspkr - fix refcount leak in bbc_beep_probe PCI/AER: Clear MULTI_ERR_COR/UNCOR_RCV bits PCI: microchip: Fix potential race in interrupt handling hwrng: omap3-rom - fix using wrong clk_disable() in omap_rom_rng_runtime_resume() powerpc/64: Only WARN if __pa()/__va() called with bad addresses powerpc/perf: Fix the threshold compare group constraint for power10 powerpc/perf: Fix the threshold compare group constraint for power9 macintosh: via-pmu and via-cuda need RTC_LIB powerpc/xive: Add some error handling code to 'xive_spapr_init()' powerpc/xive: Fix refcount leak in xive_spapr_init powerpc/fsl_rio: Fix refcount leak in fsl_rio_setup mfd: davinci_voicecodec: Fix possible null-ptr-deref davinci_vc_probe() nfsd: destroy percpu stats counters after reply cache shutdown mailbox: forward the hrtimer if not queued and under a lock RDMA/hfi1: Prevent use of lock before it is initialized KVM: LAPIC: Drop pending LAPIC timer injection when canceling the timer Input: stmfts - do not leave device disabled in stmfts_input_open OPP: call of_node_put() on error path in _bandwidth_supported() f2fs: support fault injection for dquot_initialize() f2fs: fix to do sanity check on inline_dots inode f2fs: fix dereference of stale list iterator after loop body iommu/amd: Enable swiotlb in all cases iommu/mediatek: Fix 2 HW sharing pgtable issue iommu/mediatek: Add list_del in mtk_iommu_remove iommu/mediatek: Remove clk_disable in mtk_iommu_remove iommu/mediatek: Add mutex for m4u_group and m4u_dom in data i2c: at91: use dma safe buffers cpufreq: mediatek: Use module_init and add module_exit cpufreq: mediatek: Unregister platform device on exit iommu/arm-smmu-v3-sva: Fix mm use-after-free MIPS: Loongson: Use hwmon_device_register_with_groups() to register hwmon iommu/mediatek: Fix NULL pointer dereference when printing dev_name i2c: at91: Initialize dma_buf in at91_twi_xfer() dmaengine: idxd: Fix the error handling path in idxd_cdev_register() NFS: Do not report EINTR/ERESTARTSYS as mapping errors NFS: fsync() should report filesystem errors over EINTR/ERESTARTSYS NFS: Don't report ENOSPC write errors twice NFS: Do not report flush errors in nfs_write_end() NFS: Don't report errors from nfs_pageio_complete() more than once NFSv4/pNFS: Do not fail I/O when we fail to allocate the pNFS layout NFS: Further fixes to the writeback error handling video: fbdev: clcdfb: Fix refcount leak in clcdfb_of_vram_setup dmaengine: stm32-mdma: remove GISR1 register dmaengine: stm32-mdma: fix chan initialization in stm32_mdma_irq_handler() iommu/amd: Increase timeout waiting for GA log enablement i2c: npcm: Fix timeout calculation i2c: npcm: Correct register access width i2c: npcm: Handle spurious interrupts i2c: rcar: fix PM ref counts in probe error paths perf build: Fix btf__load_from_kernel_by_id() feature check perf c2c: Use stdio interface if slang is not supported perf jevents: Fix event syntax error caused by ExtSel video: fbdev: vesafb: Fix a use-after-free due early fb_info cleanup NFS: Always initialise fattr->label in nfs_fattr_alloc() NFS: Create a new nfs_alloc_fattr_with_label() function NFS: Convert GFP_NOFS to GFP_KERNEL NFSv4.1 mark qualified async operations as MOVEABLE tasks f2fs: fix to avoid f2fs_bug_on() in dec_valid_node_count() f2fs: fix to do sanity check on block address in f2fs_do_zero_range() f2fs: fix to clear dirty inode in f2fs_evict_inode() f2fs: fix deadloop in foreground GC f2fs: don't need inode lock for system hidden quota f2fs: fix to do sanity check on total_data_blocks f2fs: don't use casefolded comparison for "." and ".." f2fs: fix fallocate to use file_modified to update permissions consistently f2fs: fix to do sanity check for inline inode objtool: Fix objtool regression on x32 systems objtool: Fix symbol creation wifi: mac80211: fix use-after-free in chanctx code iwlwifi: mvm: fix assert 1F04 upon reconfig fs-writeback: writeback_sb_inodes：Recalculate 'wrote' according skipped pages efi: Do not import certificates from UEFI Secure Boot for T2 Macs bfq: Avoid false marking of bic as stably merged bfq: Avoid merging queues with different parents bfq: Split shared queues on move between cgroups bfq: Update cgroup information before merging bio bfq: Drop pointless unlock-lock pair bfq: Remove pointless bfq_init_rq() calls bfq: Track whether bfq_group is still online bfq: Get rid of __bio_blkcg() usage bfq: Make sure bfqg for which we are queueing requests is online ext4: mark group as trimmed only if it was fully scanned ext4: fix use-after-free in ext4_rename_dir_prepare ext4: fix race condition between ext4_write and ext4_convert_inline_data ext4: fix warning in ext4_handle_inode_extension ext4: fix bug_on in ext4_writepages ext4: filter out EXT4_FC_REPLAY from on-disk superblock field s_state ext4: fix bug_on in __es_tree_search ext4: verify dir block before splitting it ext4: avoid cycles in directory h-tree ACPI: property: Release subnode properties with data nodes tty: goldfish: Introduce gf_ioread32()/gf_iowrite32() tracing: Fix potential double free in create_var_ref() tracing: Initialize integer variable to prevent garbage return value drm/amdgpu: add beige goby PCI ID PCI/PM: Fix bridge_d3_blacklist[] Elo i2 overwrite of Gigabyte X299 PCI: qcom: Fix runtime PM imbalance on probe errors PCI: qcom: Fix unbalanced PHY init on probe errors staging: r8188eu: prevent ->Ssid overflow in rtw_wx_set_scan() mm, compaction: fast_find_migrateblock() should return pfn in the target zone s390/perf: obtain sie_block from the right address s390/stp: clock_delta should be signed dlm: fix plock invalid read dlm: uninitialized variable on error in dlm_listen_for_all() dlm: fix missing lkb refcount handling ocfs2: dlmfs: fix error handling of user_dlm_destroy_lock scsi: dc395x: Fix a missing check on list iterator scsi: ufs: qcom: Add a readl() to make sure ref_clk gets enabled landlock: Add clang-format exceptions landlock: Format with clang-format selftests/landlock: Add clang-format exceptions selftests/landlock: Normalize array assignment selftests/landlock: Format with clang-format samples/landlock: Add clang-format exceptions samples/landlock: Format with clang-format landlock: Fix landlock_add_rule(2) documentation selftests/landlock: Make tests build with old libc selftests/landlock: Extend tests for minimal valid attribute size selftests/landlock: Add tests for unknown access rights selftests/landlock: Extend access right tests to directories selftests/landlock: Fully test file rename with "remove" access selftests/landlock: Add tests for O_PATH landlock: Change landlock_add_rule(2) argument check ordering landlock: Change landlock_restrict_self(2) check ordering selftests/landlock: Test landlock_create_ruleset(2) argument check ordering landlock: Define access_mask_t to enforce a consistent access mask size landlock: Reduce the maximum number of layers to 16 landlock: Create find_rule() from unmask_layers() landlock: Fix same-layer rule unions drm/amdgpu/cs: make commands with 0 chunks illegal behaviour. drm/nouveau/subdev/bus: Ratelimit logging for fault errors drm/etnaviv: check for reaped mapping in etnaviv_iommu_unmap_gem drm/nouveau/clk: Fix an incorrect NULL check on list iterator drm/nouveau/kms/nv50-: atom: fix an incorrect NULL check on list iterator drm/bridge: analogix_dp: Grab runtime PM reference for DP-AUX drm/i915/dsi: fix VBT send packet port selection for ICL+ md: fix an incorrect NULL check in does_sb_need_changing md: fix an incorrect NULL check in md_reload_sb mtd: cfi_cmdset_0002: Move and rename chip_check/chip_ready/chip_good_for_write mtd: cfi_cmdset_0002: Use chip_ready() for write on S29GL064N media: coda: Fix reported H264 profile media: coda: Add more H264 levels for CODA960 ima: remove the IMA_TEMPLATE Kconfig option Kconfig: Add option for asm goto w/ tied outputs to workaround clang-13 bug RDMA/hfi1: Fix potential integer multiplication overflow errors mmc: core: Allows to override the timeout value for ioctl() path csky: patch_text: Fixup last cpu should be master irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375, A38x, A39x irqchip: irq-xtensa-mx: fix initial IRQ affinity thermal: devfreq_cooling: use local ops instead of global ops cfg80211: declare MODULE_FIRMWARE for regulatory.db mac80211: upgrade passive scan to active scan on DFS channels after beacon rx um: Use asm-generic/dma-mapping.h um: chan_user: Fix winch_tramp() return value um: Fix out-of-bounds read in LDT setup kexec_file: drop weak attribute from arch_kexec_apply_relocations[_add] ftrace: Clean up hash direct_functions on register failures ksmbd: fix outstanding credits related bugs iommu/msm: Fix an incorrect NULL check on list iterator iommu/dma: Fix iova map result check bug Revert "mm/cma.c: remove redundant cma_mutex lock" mm/page_alloc: always attempt to allocate at least one page during bulk allocation nodemask.h: fix compilation error with GCC12 hugetlb: fix huge_pmd_unshare address update mm/memremap: fix missing call to untrack_pfn() in pagemap_range() xtensa/simdisk: fix proc_read_simdisk() rtl818x: Prevent using not initialized queues ASoC: rt5514: Fix event generation for "DSP Voice Wake Up" control carl9170: tx: fix an incorrect use of list iterator stm: ltdc: fix two incorrect NULL checks on list iterator bcache: improve multithreaded bch_btree_check() bcache: improve multithreaded bch_sectors_dirty_init() bcache: remove incremental dirty sector counting for bch_sectors_dirty_init() bcache: avoid journal no-space deadlock by reserving 1 journal bucket serial: pch: don't overwrite xmit->buf[0] by x_char tilcdc: tilcdc_external: fix an incorrect NULL check on list iterator gma500: fix an incorrect NULL check on list iterator arm64: dts: qcom: ipq8074: fix the sleep clock frequency arm64: tegra: Add missing DFLL reset on Tegra210 clk: tegra: Add missing reset deassertion phy: qcom-qmp: fix struct clk leak on probe errors ARM: dts: s5pv210: Remove spi-cs-high on panel in Aries ARM: pxa: maybe fix gpio lookup tables SMB3: EBADF/EIO errors in rename/open caused by race condition in smb2_compound_op docs/conf.py: Cope with removal of language=None in Sphinx 5.0.0 dt-bindings: gpio: altera: correct interrupt-cells vdpasim: allow to enable a vq repeatedly blk-iolatency: Fix inflight count imbalances and IO hangs on offline coresight: core: Fix coresight device probe failure issue phy: qcom-qmp: fix reset-controller leak on probe errors net: ipa: fix page free in ipa_endpoint_trans_release() net: ipa: fix page free in ipa_endpoint_replenish_one() kseltest/cgroup: Make test_stress.sh work if run interactively list: test: Add a test for list_is_head() Revert "random: use static branch for crng_ready()" staging: r8188eu: delete rtw_wx_read/write32() RDMA/hns: Remove the num_cqc_timer variable RDMA/rxe: Generate a completion for unsupported/invalid opcode MIPS: IP27: Remove incorrect `cpu_has_fpu' override MIPS: IP30: Remove incorrect `cpu_has_fpu' override ext4: only allow test_dummy_encryption when supported interconnect: qcom: sc7180: Drop IP0 interconnects interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate fs: add two trivial lookup helpers exportfs: support idmapped mounts fs/ntfs3: Fix invalid free in log_replay md: Don't set mddev private to NULL in raid0 pers->free md: fix double free of io_acct_set bioset md: bcache: check the return value of kzalloc() in detached_dev_do_request() pinctrl/rockchip: support setting input-enable param block: fix bio_clone_blkg_association() to associate with proper blkcg_gq Linux 5.15.46 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: Id50a95d816e662c0cba3d09dbfd561f386d7a52e	2022-08-04 14:37:04 +02:00
Ye Guojin	cb91c0548f	virtio-blk: modify the value type of num in virtio_queue_rq() ... commit 0466a39bd0b6c462338f10d18076703d14a552de upstream. This was found by coccicheck: ./drivers/block/virtio_blk.c, 334, 14-17, WARNING Unsigned expression compared with zero num < 0 Reported-by: Zeal Robot <zealci@zte.com.cn> Signed-off-by: Ye Guojin <ye.guojin@zte.com.cn> Link: https://lore.kernel.org/r/20211117063955.160777-1-ye.guojin@zte.com.cn Signed-off-by: Michael S. Tsirkin <mst@redhat.com> Fixes: 02746e26c39e ("virtio-blk: avoid preallocating big SGL for data") Reviewed-by: Stefano Garzarella <sgarzare@redhat.com> Reviewed-by: Max Gurtovoy <mgurtovoy@nvidia.com> Reviewed-by: Stefan Hajnoczi <stefanha@redhat.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-07-12 16:35:11 +02:00
Xiaomeng Tong	f799df4569	drbd: fix an invalid memory access caused by incorrect use of list iterator ... [ Upstream commit ae4d37b5df749926891583d42a6801b5da11e3c1 ] The bug is here: idr_remove(&connection->peer_devices, vnr); If the previous for_each_connection() don't exit early (no goto hit inside the loop), the iterator 'connection' after the loop will be a bogus pointer to an invalid structure object containing the HEAD (&resource->connections). As a result, the use of 'connection' above will lead to a invalid memory access (including a possible invalid free as idr_remove could call free_layer). The original intention should have been to remove all peer_devices, but the following lines have already done the work. So just remove this line and the unneeded label, to fix this bug. Cc: stable@vger.kernel.org Fixes: c06ece6ba6 ("drbd: Turn connection->volumes into connection->peer_devices") Signed-off-by: Xiaomeng Tong <xiam0nd.tong@gmail.com> Reviewed-by: Christoph Böhmwalder <christoph.boehmwalder@linbit.com> Reviewed-by: Lars Ellenberg <lars.ellenberg@linbit.com> Signed-off-by: Jens Axboe <axboe@kernel.dk> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-07-12 16:35:00 +02:00
Wu Bo	5bb1df0bfd	drbd: Fix double free problem in drbd_create_device ... [ Upstream commit 27548088ac628109f70eb0b1eb521d035844dba8 ] In drbd_create_device(), the 'out_no_io_page' lable has called blk_cleanup_disk() when return failed. So remove the 'out_cleanup_disk' lable to avoid double free the disk pointer. Fixes: e92ab4eda516 ("drbd: add error handling support for add_disk()") Signed-off-by: Wu Bo <wubo40@huawei.com> Reviewed-by: Christoph Hellwig <hch@lst.de> Link: https://lore.kernel.org/r/1636013229-26309-1-git-send-email-wubo40@huawei.com Signed-off-by: Jens Axboe <axboe@kernel.dk> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-07-12 16:35:00 +02:00
Luis Chamberlain	dbbcf21ad6	drbd: add error handling support for add_disk() ... [ Upstream commit e92ab4eda516a5bfd96c087282ebe9521deba4f4 ] We never checked for errors on add_disk() as this function returned void. Now that this is fixed, use the shiny new error handling. Signed-off-by: Luis Chamberlain <mcgrof@kernel.org> Signed-off-by: Jens Axboe <axboe@kernel.dk> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-07-12 16:35:00 +02:00
Max Gurtovoy	5c82c94b0b	virtio-blk: avoid preallocating big SGL for data ... [ Upstream commit 02746e26c39ee473b975e0f68d1295abc92672ed ] No need to pre-allocate a big buffer for the IO SGL anymore. If a device has lots of deep queues, preallocation for the sg list can consume substantial amounts of memory. For HW virtio-blk device, nr_hw_queues can be 64 or 128 and each queue's depth might be 128. This means the resulting preallocation for the data SGLs is big. Switch to runtime allocation for SGL for lists longer than 2 entries. This is the approach used by NVMe drivers so it should be reasonable for virtio block as well. Runtime SGL allocation has always been the case for the legacy I/O path so this is nothing new. The preallocated small SGL depends on SG_CHAIN so if the ARCH doesn't support SG_CHAIN, use only runtime allocation for the SGL. Re-organize the setup of the IO request to fit the new sg chain mechanism. No performance degradation was seen (fio libaio engine with 16 jobs and 128 iodepth): IO size IOPs Rand Read (before/after) IOPs Rand Write (before/after) -------- --------------------------------- ---------------------------------- 512B 318K/316K 329K/325K 4KB 323K/321K 353K/349K 16KB 199K/208K 250K/275K 128KB 36K/36.1K 39.2K/41.7K Signed-off-by: Max Gurtovoy <mgurtovoy@nvidia.com> Reviewed-by: Israel Rukshin <israelr@nvidia.com> Link: https://lore.kernel.org/r/20210901131434.31158-1-mgurtovoy@nvidia.com Reviewed-by: Feng Li <lifeng1519@gmail.com> Reviewed-by: Stefan Hajnoczi <stefanha@redhat.com> Tested-by: Stefan Hajnoczi <stefanha@redhat.com> Reviewed-by: Christoph Hellwig <hch@lst.de> Signed-off-by: Arnd Bergmann <arnd@arndb.de> # kconfig fixups Signed-off-by: Michael S. Tsirkin <mst@redhat.com> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-07-12 16:34:56 +02:00
Roger Pau Monne	6d0a912727	xen/blkfront: force data bouncing when backend is untrusted ... commit 2400617da7eebf9167d71a46122828bc479d64c9 upstream. Split the current bounce buffering logic used with persistent grants into it's own option, and allow enabling it independently of persistent grants. This allows to reuse the same code paths to perform the bounce buffering required to avoid leaking contiguous data in shared pages not part of the request fragments. Reporting whether the backend is to be trusted can be done using a module parameter, or from the xenstore frontend path as set by the toolstack when adding the device. This is CVE-2022-33742, part of XSA-403. Signed-off-by: Roger Pau Monné <roger.pau@citrix.com> Reviewed-by: Juergen Gross <jgross@suse.com> Signed-off-by: Juergen Gross <jgross@suse.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-07-07 17:53:32 +02:00
Roger Pau Monne	7ed65a4ad8	xen/blkfront: fix leaking data in shared pages ... commit 2f446ffe9d737e9a844b97887919c4fda18246e7 upstream. When allocating pages to be used for shared communication with the backend always zero them, this avoids leaking unintended data present on the pages. This is CVE-2022-26365, part of XSA-403. Signed-off-by: Roger Pau Monné <roger.pau@citrix.com> Reviewed-by: Jan Beulich <jbeulich@suse.com> Reviewed-by: Juergen Gross <jgross@suse.com> Signed-off-by: Juergen Gross <jgross@suse.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-07-07 17:53:31 +02:00
Jason Andryuk	ffa12a3264	xen-blkfront: Handle NULL gendisk ... [ Upstream commit f9710c357e5bbf64d7ce45ba0bc75a52222491c1 ] When a VBD is not fully created and then closed, the kernel can have a NULL pointer dereference: The reproducer is trivial: [user@dom0 ~]$ sudo xl block-attach work backend=sys-usb vdev=xvdi target=/dev/sdz [user@dom0 ~]$ xl block-list work Vdev BE handle state evt-ch ring-ref BE-path 51712 0 241 4 -1 -1 /local/domain/0/backend/vbd/241/51712 51728 0 241 4 -1 -1 /local/domain/0/backend/vbd/241/51728 51744 0 241 4 -1 -1 /local/domain/0/backend/vbd/241/51744 51760 0 241 4 -1 -1 /local/domain/0/backend/vbd/241/51760 51840 3 241 3 -1 -1 /local/domain/3/backend/vbd/241/51840 ^ note state, the /dev/sdz doesn't exist in the backend [user@dom0 ~]$ sudo xl block-detach work xvdi [user@dom0 ~]$ xl block-list work Vdev BE handle state evt-ch ring-ref BE-path work is an invalid domain identifier And its console has: BUG: kernel NULL pointer dereference, address: 0000000000000050 PGD 80000000edebb067 P4D 80000000edebb067 PUD edec2067 PMD 0 Oops: 0000 [#1] PREEMPT SMP PTI CPU: 1 PID: 52 Comm: xenwatch Not tainted 5.16.18-2.43.fc32.qubes.x86_64 #1 RIP: 0010:blk_mq_stop_hw_queues+0x5/0x40 Code: 00 48 83 e0 fd 83 c3 01 48 89 85 a8 00 00 00 41 39 5c 24 50 77 c0 5b 5d 41 5c 41 5d c3 c3 0f 1f 80 00 00 00 00 0f 1f 44 00 00 <8b> 47 50 85 c0 74 32 41 54 49 89 fc 55 53 31 db 49 8b 44 24 48 48 RSP: 0018:ffffc90000bcfe98 EFLAGS: 00010293 RAX: ffffffffc0008370 RBX: 0000000000000005 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000000 RBP: ffff88800775f000 R08: 0000000000000001 R09: ffff888006e620b8 R10: ffff888006e620b0 R11: f000000000000000 R12: ffff8880bff39000 R13: ffff8880bff39000 R14: 0000000000000000 R15: ffff88800604be00 FS: 0000000000000000(0000) GS:ffff8880f3300000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000050 CR3: 00000000e932e002 CR4: 00000000003706e0 Call Trace: <TASK> blkback_changed+0x95/0x137 [xen_blkfront] ? read_reply+0x160/0x160 xenwatch_thread+0xc0/0x1a0 ? do_wait_intr_irq+0xa0/0xa0 kthread+0x16b/0x190 ? set_kthread_struct+0x40/0x40 ret_from_fork+0x22/0x30 </TASK> Modules linked in: snd_seq_dummy snd_hrtimer snd_seq snd_seq_device snd_timer snd soundcore ipt_REJECT nf_reject_ipv4 xt_state xt_conntrack nft_counter nft_chain_nat xt_MASQUERADE nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 nft_compat nf_tables nfnetlink intel_rapl_msr intel_rapl_common crct10dif_pclmul crc32_pclmul crc32c_intel ghash_clmulni_intel xen_netfront pcspkr xen_scsiback target_core_mod xen_netback xen_privcmd xen_gntdev xen_gntalloc xen_blkback xen_evtchn ipmi_devintf ipmi_msghandler fuse bpf_preload ip_tables overlay xen_blkfront CR2: 0000000000000050 ---[ end trace 7bc9597fd06ae89d ]--- RIP: 0010:blk_mq_stop_hw_queues+0x5/0x40 Code: 00 48 83 e0 fd 83 c3 01 48 89 85 a8 00 00 00 41 39 5c 24 50 77 c0 5b 5d 41 5c 41 5d c3 c3 0f 1f 80 00 00 00 00 0f 1f 44 00 00 <8b> 47 50 85 c0 74 32 41 54 49 89 fc 55 53 31 db 49 8b 44 24 48 48 RSP: 0018:ffffc90000bcfe98 EFLAGS: 00010293 RAX: ffffffffc0008370 RBX: 0000000000000005 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000000 RBP: ffff88800775f000 R08: 0000000000000001 R09: ffff888006e620b8 R10: ffff888006e620b0 R11: f000000000000000 R12: ffff8880bff39000 R13: ffff8880bff39000 R14: 0000000000000000 R15: ffff88800604be00 FS: 0000000000000000(0000) GS:ffff8880f3300000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000050 CR3: 00000000e932e002 CR4: 00000000003706e0 Kernel panic - not syncing: Fatal exception Kernel Offset: disabled info->rq and info->gd are only set in blkfront_connect(), which is called for state 4 (XenbusStateConnected). Guard against using NULL variables in blkfront_closing() to avoid the issue. The rest of blkfront_closing looks okay. If info->nr_rings is 0, then for_each_rinfo won't do anything. blkfront_remove also needs to check for non-NULL pointers before cleaning up the gendisk and request queue. Fixes: 05d69d950d "xen-blkfront: sanitize the removal state machine" Reported-by: Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> Signed-off-by: Jason Andryuk <jandryuk@gmail.com> Reviewed-by: Juergen Gross <jgross@suse.com> Link: https://lore.kernel.org/r/20220601195341.28581-1-jandryuk@gmail.com Signed-off-by: Juergen Gross <jgross@suse.com> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-06-29 09:03:24 +02:00
Yu Kuai	c4ba982bd5	nbd: fix io hung while disconnecting device ... [ Upstream commit 09dadb5985023e27d4740ebd17e6fea4640110e5 ] In our tests, "qemu-nbd" triggers a io hung: INFO: task qemu-nbd:11445 blocked for more than 368 seconds. Not tainted 5.18.0-rc3-next-20220422-00003-g2176915513ca #884 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:qemu-nbd state:D stack: 0 pid:11445 ppid: 1 flags:0x00000000 Call Trace: <TASK> __schedule+0x480/0x1050 ? _raw_spin_lock_irqsave+0x3e/0xb0 schedule+0x9c/0x1b0 blk_mq_freeze_queue_wait+0x9d/0xf0 ? ipi_rseq+0x70/0x70 blk_mq_freeze_queue+0x2b/0x40 nbd_add_socket+0x6b/0x270 [nbd] nbd_ioctl+0x383/0x510 [nbd] blkdev_ioctl+0x18e/0x3e0 __x64_sys_ioctl+0xac/0x120 do_syscall_64+0x35/0x80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7fd8ff706577 RSP: 002b:00007fd8fcdfebf8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 00007fd8ff706577 RDX: 000000000000000d RSI: 000000000000ab00 RDI: 000000000000000f RBP: 000000000000000f R08: 000000000000fbe8 R09: 000055fe497c62b0 R10: 00000002aff20000 R11: 0000000000000246 R12: 000000000000006d R13: 0000000000000000 R14: 00007ffe82dc5e70 R15: 00007fd8fcdff9c0 "qemu-ndb -d" will call ioctl 'NBD_DISCONNECT' first, however, following message was found: block nbd0: Send disconnect failed -32 Which indicate that something is wrong with the server. Then, "qemu-nbd -d" will call ioctl 'NBD_CLEAR_SOCK', however ioctl can't clear requests after commit 2516ab1543fd("nbd: only clear the queue on device teardown"). And in the meantime, request can't complete through timeout because nbd_xmit_timeout() will always return 'BLK_EH_RESET_TIMER', which means such request will never be completed in this situation. Now that the flag 'NBD_CMD_INFLIGHT' can make sure requests won't complete multiple times, switch back to call nbd_clear_sock() in nbd_clear_sock_ioctl(), so that inflight requests can be cleared. Signed-off-by: Yu Kuai <yukuai3@huawei.com> Reviewed-by: Josef Bacik <josef@toxicpanda.com> Link: https://lore.kernel.org/r/20220521073749.3146892-5-yukuai3@huawei.com Signed-off-by: Jens Axboe <axboe@kernel.dk> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-06-14 18:36:24 +02:00
Yu Kuai	71c142f910	nbd: fix race between nbd_alloc_config() and module removal ... [ Upstream commit c55b2b983b0fa012942c3eb16384b2b722caa810 ] When nbd module is being removing, nbd_alloc_config() may be called concurrently by nbd_genl_connect(), although try_module_get() will return false, but nbd_alloc_config() doesn't handle it. The race may lead to the leak of nbd_config and its related resources (e.g, recv_workq) and oops in nbd_read_stat() due to the unload of nbd module as shown below: BUG: kernel NULL pointer dereference, address: 0000000000000040 Oops: 0000 [#1] SMP PTI CPU: 5 PID: 13840 Comm: kworker/u17:33 Not tainted 5.14.0+ #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996) Workqueue: knbd16-recv recv_work [nbd] RIP: 0010:nbd_read_stat.cold+0x130/0x1a4 [nbd] Call Trace: recv_work+0x3b/0xb0 [nbd] process_one_work+0x1ed/0x390 worker_thread+0x4a/0x3d0 kthread+0x12a/0x150 ret_from_fork+0x22/0x30 Fixing it by checking the return value of try_module_get() in nbd_alloc_config(). As nbd_alloc_config() may return ERR_PTR(-ENODEV), assign nbd->config only when nbd_alloc_config() succeeds to ensure the value of nbd->config is binary (valid or NULL). Also adding a debug message to check the reference counter of nbd_config during module removal. Signed-off-by: Hou Tao <houtao1@huawei.com> Signed-off-by: Yu Kuai <yukuai3@huawei.com> Reviewed-by: Josef Bacik <josef@toxicpanda.com> Link: https://lore.kernel.org/r/20220521073749.3146892-3-yukuai3@huawei.com Signed-off-by: Jens Axboe <axboe@kernel.dk> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-06-14 18:36:24 +02:00
Yu Kuai	cbeafa7a79	nbd: call genl_unregister_family() first in nbd_cleanup() ... [ Upstream commit 06c4da89c24e7023ea448cadf8e9daf06a0aae6e ] Otherwise there may be race between module removal and the handling of netlink command, which can lead to the oops as shown below: BUG: kernel NULL pointer dereference, address: 0000000000000098 Oops: 0002 [#1] SMP PTI CPU: 1 PID: 31299 Comm: nbd-client Tainted: G E 5.14.0-rc4 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996) RIP: 0010:down_write+0x1a/0x50 Call Trace: start_creating+0x89/0x130 debugfs_create_dir+0x1b/0x130 nbd_start_device+0x13d/0x390 [nbd] nbd_genl_connect+0x42f/0x748 [nbd] genl_family_rcv_msg_doit.isra.0+0xec/0x150 genl_rcv_msg+0xe5/0x1e0 netlink_rcv_skb+0x55/0x100 genl_rcv+0x29/0x40 netlink_unicast+0x1a8/0x250 netlink_sendmsg+0x21b/0x430 ____sys_sendmsg+0x2a4/0x2d0 ___sys_sendmsg+0x81/0xc0 __sys_sendmsg+0x62/0xb0 __x64_sys_sendmsg+0x1f/0x30 do_syscall_64+0x3b/0xc0 entry_SYSCALL_64_after_hwframe+0x44/0xae Modules linked in: nbd(E-) Signed-off-by: Hou Tao <houtao1@huawei.com> Signed-off-by: Yu Kuai <yukuai3@huawei.com> Reviewed-by: Josef Bacik <josef@toxicpanda.com> Link: https://lore.kernel.org/r/20220521073749.3146892-2-yukuai3@huawei.com Signed-off-by: Jens Axboe <axboe@kernel.dk> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-06-14 18:36:23 +02:00
Christoph Hellwig	bd85a268bf	virtio_blk: fix the discard_granularity and discard_alignment queue limits ... [ Upstream commit 62952cc5bccd89b76d710de1d0b43244af0f2903 ] The discard_alignment queue limit is named a bit misleading means the offset into the block device at which the discard granularity starts. On the other hand the discard_sector_alignment from the virtio 1.1 looks similar to what Linux uses as discard granularity (even if not very well described): "discard_sector_alignment can be used by OS when splitting a request based on alignment. " And at least qemu does set it to the discard granularity. So stop setting the discard_alignment and use the virtio discard_sector_alignment to set the discard granularity. Fixes: 1f23816b8e ("virtio_blk: add discard and write zeroes support") Signed-off-by: Christoph Hellwig <hch@lst.de> Reviewed-by: Martin K. Petersen <martin.petersen@oracle.com> Link: https://lore.kernel.org/r/20220418045314.360785-5-hch@lst.de Signed-off-by: Jens Axboe <axboe@kernel.dk> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-06-09 10:22:53 +02:00
Arnd Bergmann	4400e542b8	drbd: fix duplicate array initializer ... [ Upstream commit 33cb0917bbe241dd17a2b87ead63514c1b7e5615 ] There are two initializers for P_RETRY_WRITE: drivers/block/drbd/drbd_main.c:3676:22: warning: initialized field overwritten [-Woverride-init] Remove the first one since it was already ignored by the compiler and reorder the list to match the enum definition. As P_ZEROES had no entry, add that one instead. Fixes: 036b17eaab ("drbd: Receiving part for the PROTOCOL_UPDATE packet") Fixes: f31e583aa2 ("drbd: introduce P_ZEROES (REQ_OP_WRITE_ZEROES on the "wire")") Signed-off-by: Arnd Bergmann <arnd@arndb.de> Reviewed-by: Christoph Böhmwalder <christoph.boehmwalder@linbit.com> Link: https://lore.kernel.org/r/20220406190715.1938174-2-christoph.boehmwalder@linbit.com Signed-off-by: Jens Axboe <axboe@kernel.dk> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-06-09 10:22:47 +02:00
Xie Yongji	c2673b86b4	nbd: Fix hung on disconnect request if socket is closed before ... [ Upstream commit 491bf8f236fdeec698fa6744993f1ecf3fafd1a5 ] When userspace closes the socket before sending a disconnect request, the following I/O requests will be blocked in wait_for_reconnect() until dead timeout. This will cause the following disconnect request also hung on blk_mq_quiesce_queue(). That means we have no way to disconnect a nbd device if there are some I/O requests waiting for reconnecting until dead timeout. It's not expected. So let's wake up the thread waiting for reconnecting directly when a disconnect request is sent. Reported-by: Xu Jianhai <zero.xu@bytedance.com> Signed-off-by: Xie Yongji <xieyongji@bytedance.com> Reviewed-by: Josef Bacik <josef@toxicpanda.com> Link: https://lore.kernel.org/r/20220322080639.142-1-xieyongji@bytedance.com Signed-off-by: Jens Axboe <axboe@kernel.dk> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-06-09 10:22:38 +02:00