380 Commits

Author	SHA1	Message	Date
Greg Kroah-Hartman	5155624549	Merge tag 'android13-5.15.94_r00' into android13-5.15 ... This is the merge of the upstream LTS release of 5.15.94 into the android13-5.15 branch. It contains the following commits: * 5448b2fda8 Merge 5.15.94 into android13-5.15-lts |\ | * e2c1a934fd Linux 5.15.94 | * 17170acdc7 Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions | * 5122e0e443 KVM: x86: Mitigate the cross-thread return address predictions bug | * 8f12dcab90 x86/speculation: Identify processors vulnerable to SMT RSB predictions | * e63c434de8 drm/i915: Fix VBT DSI DVO port handling | * fc88c68381 drm/i915: Initialize the obj flags for shmem objects | * 2e557c8ca2 drm/amdgpu/fence: Fix oops due to non-matching drm_sched init/fini | * 3af734f3ea Fix page corruption caused by racy check in __free_pages | * c94ce5ea68 arm64: dts: meson-axg: Make mmc host controller interrupts level-sensitive | * b796c02df3 arm64: dts: meson-g12-common: Make mmc host controller interrupts level-sensitive | * 5d9b771f53 arm64: dts: meson-gx: Make mmc host controller interrupts level-sensitive | * ac39dce119 rtmutex: Ensure that the top waiter is always woken up | * 86f7e42393 powerpc/64s/interrupt: Fix interrupt exit race with security mitigation switch | * 2907cf3f2e riscv: Fixup race condition on PG_dcache_clean in flush_icache_pte | * beb1cefa3c ceph: flush cap releases when the session is flushed | * 86733ab239 clk: ingenic: jz4760: Update M/N/OD calculation algorithm | * 239e927eb2 usb: typec: altmodes/displayport: Fix probe pin assign check | * 48aecce116 usb: core: add quirk for Alcor Link AK9563 smartcard reader | * a8178bb1c7 btrfs: free device in btrfs_close_devices for a single device filesystem | * 8d13f2c3e2 mptcp: be careful on subflow status propagation on errors | * 25141fb411 net: USB: Fix wrong-direction WARNING in plusb.c | * d1fba1e096 cifs: Fix use-after-free in rdata->read_into_pages() | * 1b83e7e174 pinctrl: intel: Restore the pins that used to be in Direct IRQ mode | * f5f025b703 spi: dw: Fix wrong FIFO level setting for long xfers | * 71668706fb pinctrl: single: fix potential NULL dereference | * a2a1065739 pinctrl: aspeed: Fix confusing types in return value | * 99450163bc pinctrl: mediatek: Fix the drive register definition of some Pins | * 9f0d2c2684 ASoC: topology: Return -ENOMEM on memory allocation failure | * 1a52ef89e3 riscv: stacktrace: Fix missing the first frame | * 5fb8154334 ALSA: pci: lx6464es: fix a debug loop | * 105ea562f6 selftests: forwarding: lib: quote the sysctl values | * 528e3f3a4b rds: rds_rm_zerocopy_callback() use list_first_entry() | * 48d6d8f2f6 igc: Add ndo_tx_timeout support | * 62ff7dd961 net/mlx5: Serialize module cleanup with reload and remove | * 95d2394f84 net/mlx5: fw_tracer, Zero consumer index when reloading the tracer | * ab7f3f6a9d net/mlx5: fw_tracer, Clear load bit when freeing string DBs buffers | * 193528646e net/mlx5e: IPoIB, Show unknown speed instead of error | * 7c6e8eb617 net/mlx5: Bridge, fix ageing of peer FDB entries | * 49ece61a07 net/mlx5e: Update rx ring hw mtu upon each rx-fcs flag change | * 31172267ba net/mlx5e: Introduce the mlx5e_flush_rq function | * e4e4e93d31 net/mlx5e: Move repeating clear_bit in mlx5e_rx_reporter_err_rq_cqe_recover | * 3f18b9ed8c net: mscc: ocelot: fix VCAP filters not matching on MAC with "protocol 802.1Q" | * 6acb5d853b net: dsa: mt7530: don't change PVC_EG_TAG when CPU port becomes VLAN-aware | * ca834a0178 ice: Do not use WQ_MEM_RECLAIM flag for workqueue | * 70d48c7992 uapi: add missing ip/ipv6 header dependencies for linux/stddef.h | * 3cec44036f ionic: clean interrupt before enabling queue to avoid credit race | * fad12afe87 net: phy: meson-gxl: use MMD access dummy stubs for GXL, internal PHY | * d23385a200 bonding: fix error checking in bond_debug_reregister() | * 11006d9d08 net: phylink: move phy_device_free() to correctly release phy device | * fb022d7b1c xfrm: fix bug with DSCP copy to v6 from v4 tunnel | * 6fe1ad42af RDMA/usnic: use iommu_map_atomic() under spin_lock() | * 8f5fe1cd8e RDMA/irdma: Fix potential NULL-ptr-dereference | * 1b4ef90cbc IB/IPoIB: Fix legacy IPoIB due to wrong number of queues | * 5dc688fae6 xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr() | * 9bae58d58b IB/hfi1: Restore allocated resources on failed copyout | * 558b1fa01c xfrm: compat: change expression for switch in xfrm_xlate64 | * 238b38e89f can: j1939: do not wait 250 ms if the same addr was already claimed | * d859184b60 of/address: Return an error when no valid dma-ranges are found | * 70f37b3118 tracing: Fix poll() and select() do not work on per_cpu trace_pipe and trace_pipe_raw | * df01749503 ALSA: hda/realtek: Enable mute/micmute LEDs on HP Elitebook, 645 G9 | * ca9d542203 ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book2 Pro 360 | * 706b6d86a6 ALSA: emux: Avoid potential array out-of-bound in snd_emux_xg_control() | * 731fc29de6 ALSA: hda/realtek: Add Positivo N14KP6-TG | * b938059807 btrfs: zlib: zero-initialize zlib workspace | * e65faa7e39 btrfs: limit device extents to the device size | * 2e4dd07fda migrate: hugetlb: check for hugetlb shared PMD in node migration | * 072e7412e8 mm/migration: return errno when isolate_huge_page failed * | f977f92131 Revert "nvmem: core: remove nvmem_config wp_gpio" * | 787413edad Merge 5.15.93 into android13-5.15-lts |\| | * 85d7786c66 Linux 5.15.93 | * 6e2fac197d bpf: Skip invalid kfunc call in backtrack_insn | * 46c9088cab gfs2: Always check inode size of inline inodes | * 8eb2e58a92 gfs2: Cosmetic gfs2_dinode_{in,out} cleanup | * e4991910f1 wifi: brcmfmac: Check the count value of channel spec to prevent out-of-bounds reads | * 97ccfffcc0 f2fs: fix to do sanity check on i_extra_isize in is_alive() | * 64fa364ad3 fbdev: smscufx: fix error handling code in ufx_usb_probe | * a77141a063 ovl: Use "buf" flexible array for memcpy() destination | * 1692fedd0f fs/ntfs3: Validate attribute data and valid sizes | * a5b9cb7276 powerpc/imc-pmu: Revert nest_init_lock to being a mutex | * 3691f43a09 iio:adc:twl6030: Enable measurement of VAC | * 8c84f50390 bpf: Do not reject when the stack read size is different from the tracked scalar size | * 14b6198abb bpf: Fix incorrect state pruning for <8B spill/fill | * 575a9f6fef phy: qcom-qmp-combo: fix runtime suspend | * e58df87394 phy: qcom-qmp-combo: fix broken power on | * 368ea32e0a phy: qcom-qmp-usb: fix memleak on probe deferral | * 2f27d3811a phy: qcom-qmp-combo: fix memleak on probe deferral | * 0cb10ddab7 phy: qcom-qmp-combo: disable runtime PM on unbind | * 0ef5ffe116 serial: 8250_dma: Fix DMA Rx rearm race | * e30328f599 serial: 8250_dma: Fix DMA Rx completion race | * a5a171f61a nvmem: core: fix cell removal on error | * 6d9fa3ff65 nvmem: core: remove nvmem_config wp_gpio | * adf80e072c nvmem: core: initialise nvmem->id early | * e3ebc3e23b drm/i915: Fix potential bit_17 double-free | * 997bed0f3c Squashfs: fix handling and sanity checking of xattr_ids count | * 7a0cfaf9d4 highmem: round down the address passed to kunmap_flush_on_unmap() | * 5dbe1ebd56 mm/swapfile: add cond_resched() in get_swap_pages() | * daf8241804 fpga: stratix10-soc: Fix return value check in s10_ops_write_init() | * afd32b6831 x86/debug: Fix stack recursion caused by wrongly ordered DR7 accesses | * 066ecbf1a5 kernel/irq/irqdomain.c: fix memory leak with using debugfs_lookup() | * 481bf49f58 usb: gadget: f_uac2: Fix incorrect increment of bNumEndpoints | * fdf40e5824 mm: hugetlb: proc: check for hugetlb shared PMD in /proc/PID/smaps | * 6c300351c5 riscv: disable generation of unwind tables | * a5c275add9 parisc: Wire up PTRACE_GETREGS/PTRACE_SETREGS for compat case | * a964decd13 parisc: Fix return code of pdc_iodc_print() | * 488eaf0625 nvmem: qcom-spmi-sdam: fix module autoloading | * 8569beb66f iio: imu: fxos8700: fix MAGN sensor scale and unit | * 8aa5cdcfaf iio: imu: fxos8700: remove definition FXOS8700_CTRL_ODR_MIN | * 4112ba1ad5 iio: imu: fxos8700: fix failed initialization ODR mode assignment | * abf7b2ba51 iio: imu: fxos8700: fix incorrect ODR mode readback | * 412757741c iio: imu: fxos8700: fix swapped ACCEL and MAGN channels readback | * 34909532b1 iio: imu: fxos8700: fix map label of channel type to MAGN sensor | * 8346eb4987 iio: imu: fxos8700: fix IMU data bits returned to user space | * 7567cdf3ce iio: imu: fxos8700: fix incomplete ACCEL and MAGN channels readback | * 6969852220 iio: imu: fxos8700: fix ACCEL measurement range selection | * cdacfb2205 iio:adc:twl6030: Enable measurements of VUSB, VBAT and others | * 9988063dce iio: adc: berlin2-adc: Add missing of_node_put() in error path | * c691a5c0fd iio: hid: fix the retval in gyro_3d_capture_sample | * ef80a34699 iio: hid: fix the retval in accel_3d_capture_sample | * c4eae85c73 efi: Accept version 2 of memory attributes table | * 710db82063 ALSA: hda/realtek: Add Acer Predator PH315-54 | * 3fbddf86d9 watchdog: diag288_wdt: fix __diag288() inline assembly | * 700dd5bc72 watchdog: diag288_wdt: do not use stack buffers for hardware data | * 21bc51e29e net: qrtr: free memory on error path in radix_tree_insert() | * dccbd062d7 fbcon: Check font dimension limits | * 5d7500d991 Input: i8042 - add Clevo PCX0DX to i8042 quirk table | * fc9e27f3ba vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF | * 9ba1188a71 usb: gadget: f_fs: Fix unbalanced spinlock in __ffs_ep0_queue_wait | * fe86480e90 usb: dwc3: qcom: enable vbus override when in OTG dr-mode | * a412fe7baf iio: adc: stm32-dfsdm: fill module aliases | * 9944659398 drm/amd/display: Fix timing not changning when freesync video is enabled | * a3967128bc net/x25: Fix to not accept on connected socket | * 396ea318e7 platform/x86: gigabyte-wmi: add support for B450M DS3H WIFI-CF | * 1577524633 platform/x86: dell-wmi: Add a keymap for KEY_MUTE in type 0x0010 table | * 540cea9f9b i2c: rk3x: fix a bunch of kernel-doc warnings | * 0aaabdb900 scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress | * 17b738590b scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress | * 8cd0499f9c perf/x86/intel: Add Emerald Rapids | * 7093515370 scsi: target: core: Fix warning on RT kernels | * b7960f5436 i2c: mxs: suppress probe-deferral error message | * b9b87fc34b i2c: designware-pci: Add new PCI IDs for AMD NAVI GPU | * d8fc0b5fb3 efi: fix potential NULL deref in efi_mem_reserve_persistent | * f423c2efd5 net: openvswitch: fix flow memory leak in ovs_flow_cmd_new | * 7985028647 virtio-net: Keep stop() to follow mirror sequence of open() | * 5d884f9e80 selftests: net: udpgso_bench_tx: Cater for pending datagrams zerocopy benchmarking | * 63aa63af3a selftests: net: udpgso_bench: Fix racing bug between the rx/tx programs | * d41a3f9cc2 selftests: net: udpgso_bench_rx/tx: Stop when wrong CLI args are provided | * 5af98283e5 selftests: net: udpgso_bench_rx: Fix 'used uninitialized' compiler warning | * 89e0701e03 ata: libata: Fix sata_down_spd_limit() when no link speed is reported | * 9ab896775f can: j1939: fix errant WARN_ON_ONCE in j1939_session_deactivate | * 02d77d98e0 igc: return an error if the mac type is unknown in igc_ptp_systim_to_hwtstamp() | * 04a7355820 riscv: kprobe: Fixup kernel panic when probing an illegal position | * 206c367b6a ip/ip6_gre: Fix non-point-to-point tunnel not generating IPv6 link local address | * 90178bc0f2 ip/ip6_gre: Fix changing addr gen mode not generating IPv6 link local address | * dfe2f0ea38 net: phy: meson-gxl: Add generic dummy stubs for MMD register access | * b7398efe24 squashfs: harden sanity check in squashfs_read_xattr_id_table | * 89a69216f1 netfilter: br_netfilter: disable sabotage_in hook after first suppression | * cdb444e73f drm/i915/adlp: Fix typo for reference clock | * 960f20d858 drm/i915/guc: Fix locking when searching for a hung request | * c27e0eac56 netrom: Fix use-after-free caused by accept on already connected socket | * 511c922c5b block, bfq: fix uaf for bfqq in bic_set_bfqq() | * a62c129dcb block, bfq: replace 0/1 with false/true in bic apis | * 37a744a068 block/bfq-iosched.c: use "false" rather than "BLK_RW_ASYNC" | * 2cd1e9c013 net: phy: dp83822: Fix null pointer access on DP83825/DP83826 devices | * 18c18c2110 sfc: correctly advertise tunneled IPv6 segmentation | * 878b06f60a dpaa2-eth: execute xdp_do_flush() before napi_complete_done() | * 3b5774cd6b dpaa_eth: execute xdp_do_flush() before napi_complete_done() | * 5a7040a649 virtio-net: execute xdp_do_flush() before napi_complete_done() | * 94add5b272 qede: execute xdp_do_flush() before napi_complete_done() | * a273f8e3ab ice: Prevent set_channel from changing queues while RDMA active | * b432e183c2 fix "direction" argument of iov_iter_kvec() | * d8b8306e96 fix iov_iter_bvec() "direction" argument | * 389c7c0ef9 READ is "data destination", not source... | * 7a3649bf5b WRITE is "data source", not destination... | * 83cc6a7bb7 vhost/net: Clear the pending messages when the backend is removed | * 7c7d344bc3 scsi: Revert "scsi: core: map PQ=1, PDT=other values to SCSI_SCAN_TARGET_PRESENT" | * 4b199dc094 drm/vc4: hdmi: make CEC adapter name unique | * dc1f8ab25a arm64: dts: imx8mm: Fix pad control for UART1_DTE_RX | * c681d7a4ed bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener | * 34ad5d8885 bpf: Fix to preserve reg parent/live fields when copying range info | * 7b86f9ab56 bpf: Support <8-byte scalar spill and refill | * 1b9256c962 ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path() | * b7abeb6916 bpf: Fix a possible task gone issue with bpf_send_signal[_thread]() helpers | * cfcc2390db ASoC: Intel: bytcr_wm5102: Drop reference count of ACPI device after use | * b4b204565a ASoC: Intel: bytcr_rt5640: Drop reference count of ACPI device after use | * 1f1e7635c5 ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use | * 41d323c352 ASoC: Intel: bytcht_es8316: Drop reference count of ACPI device after use | * 6a9990e1d9 ASoC: Intel: bytcht_es8316: move comment to the right place | * ffcdf35455 ASoC: Intel: boards: fix spelling in comments | * bd0b17ab1b bus: sunxi-rsb: Fix error handling in sunxi_rsb_init() | * 5f4543c938 firewire: fix memory leak for payload of request subaction to IEC 61883-1 FCP region * | 5020746bff Merge 5.15.92 into android13-5.15-lts |\| | * e515b9902f Linux 5.15.92 | * c7caf669b8 net: mctp: purge receive queues on sk destruction | * 046de74f9a net: fix NULL pointer in skb_segment_list | * 7ab3376703 selftests: Provide local define of __cpuid_count() | * e92e311ced selftests/vm: remove ARRAY_SIZE define from individual tests | * c9e52db900 tools: fix ARRAY_SIZE defines in tools and selftests hdrs | * c1aa0dd52d Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt | * 02e61196c5 ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems | * 79dd676b44 extcon: usbc-tusb320: fix kernel-doc warning | * c2bd60ef20 ext4: fix bad checksum after online resize | * 4cd1e18bc0 cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() | * 43acd767bd dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init | * a54c5ad007 HID: playstation: sanity check DualSense calibration data. | * 6d7686cc11 blk-cgroup: fix missing pd_online_fn() while activating policy | * 2144859229 erofs/zmap.c: Fix incorrect offset calculation | * 0dfef50313 bpf: Skip task with pid=1 in send_signal_common() | * e8bb772f74 firmware: arm_scmi: Clear stale xfer->hdr.status | * 80cb9f1a76 arm64: dts: imx8mq-thor96: fix no-mmc property for SDHCI | * 162fad24d2 arm64: dts: freescale: Fix pca954x i2c-mux node names | * 82ad105e1a ARM: dts: vf610: Fix pca9548 i2c-mux node names | * 5aee5f33e0 ARM: dts: imx: Fix pca9547 i2c-mux node name * | 7e0097918f Revert "scsi: ufs: core: Fix devfreq deadlocks" * | 6ce0fcdcc2 Revert "thermal/core: Rename 'trips' to 'num_trips'" * | 49a5232dfb Revert "thermal: Validate new state in cur_state_store()" * | be0ca2fc43 Revert "thermal/core: fix error code in __thermal_cooling_device_register()" * | 9617a003cc Revert "thermal: core: call put_device() only after device_register() fails" * | ccb2c48531 Revert "cpufreq: governor: Use kobject release() method to free dbs_data" * | 0108f014a5 Revert "gpio: use raw spinlock for gpio chip shadowed data" * | 1d2449f6be Revert "gpio: mxc: Protect GPIO irqchip RMW with bgpio spinlock" * | 5f51aedcba Revert "gpio: mxc: Unlock on error path in mxc_flip_edge()" * | 7622c50ba6 Merge 5.15.91 into android13-5.15-lts |\| | * 9cf4111cdf Linux 5.15.91 | * 14cc13e433 perf/x86/amd: fix potential integer overflow on shift of a int | * 033636b322 netfilter: conntrack: unify established states for SCTP paths | * 0b08201158 x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL | * b577400367 block: fix and cleanup bio_check_ro | * 1d152437e4 kbuild: Allow kernel installation packaging to override pkg-config | * a196468858 cpufreq: governor: Use kobject release() method to free dbs_data | * 7c513ced0d cpufreq: Move to_gov_attr_set() to cpufreq.h | * cf7a08622d Revert "Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode" | * 53c5d61198 tools: gpio: fix -c option of gpio-event-mon | * a7d1a303ff treewide: fix up files incorrectly marked executable | * 046fe53907 net: mdio-mux-meson-g12a: force internal PHY off on mux switch | * 86bdccde78 net/tg3: resolve deadlock in tg3_reset_task() during EEH | * 4364bf79d8 thermal: intel: int340x: Add locking to int340x_thermal_get_trip_type() | * e69c3a0d9d net: mctp: mark socks as dead on unhash, prevent re-add | * 954cc215cd net: ravb: Fix possible hang if RIS2_QFF1 happen | * 0f7218bf0a net: ravb: Fix lack of register setting after system resumed for Gen3 | * 3db4ca2938 ravb: Rename "no_ptp_cfg_active" and "ptp_cfg_active" variables | * 621f296f11 gpio: mxc: Unlock on error path in mxc_flip_edge() | * 071a839286 nvme: fix passthrough csi check | * 614471b7f7 riscv/kprobe: Fix instruction simulation of JALR | * 3391bd4235 sctp: fail if no bound addresses can be used for a given scope | * b0784860e1 net/sched: sch_taprio: do not schedule in taprio_reset() | * d2d3ab1b1d netrom: Fix use-after-free of a listening socket. | * 9df5ab02c6 netfilter: conntrack: fix vtag checks for ABORT/SHUTDOWN_COMPLETE | * ca3cf94776 ipv4: prevent potential spectre v1 gadget in fib_metrics_match() | * d50e7348b4 ipv4: prevent potential spectre v1 gadget in ip_metrics_convert() | * ead06e3449 netlink: annotate data races around sk_state | * c4eb423c6b netlink: annotate data races around dst_portid and dst_group | * fac9b69a93 netlink: annotate data races around nlk->portid | * 8a13595600 netfilter: nft_set_rbtree: skip elements in transaction from garbage collection | * 2bf1435fa1 netfilter: nft_set_rbtree: Switch to node list walk for overlap detection | * e481654426 drm/i915/selftest: fix intel_selftest_modify_policy argument types | * 66689a72ba net: fix UaF in netns ops registration error path | * 41b74e95f2 netlink: prevent potential spectre v1 gadgets | * 2f29d780bd i2c: designware: use casting of u64 in clock multiplication to avoid overflow | * b03f7ed9af scsi: ufs: core: Fix devfreq deadlocks | * 858d7e9218 net: mana: Fix IRQ name - add PCI and queue number | * bff5243bd3 EDAC/qcom: Do not pass llcc_driv_data as edac_device_ctl_info's pvt_info | * 5eedf4568d EDAC/device: Respect any driver-supplied workqueue polling value | * 4b7dfd0a68 ARM: 9280/1: mm: fix warning on phys_addr_t to void pointer assignment | * 7807871f28 ipv6: fix reachability confirmation with proxy_ndp | * f9a22f6fa1 thermal: intel: int340x: Protect trip temperature from concurrent updates | * 036093c08d KVM: arm64: GICv4.1: Fix race with doorbell on VPE activation/deactivation | * c56683c062 KVM: x86/vmx: Do not skip segment attributes if unusable bit is set | * e91308e637 ovl: fail on invalid uid/gid mapping at copy up | * 33a9657d67 ksmbd: limit pdu length size according to connection status | * 8d83a758ee ksmbd: downgrade ndr version error message to debug | * 87a7f38a90 ksmbd: do not sign response to session request for guest login | * 4210c3555d ksmbd: add max connections parameter | * cc6742b160 ksmbd: add smbd max io size parameter | * 3c8a5648a5 i2c: mv64xxx: Add atomic_xfer method to driver | * e619ab4fb3 i2c: mv64xxx: Remove shutdown method from driver | * 4b83bc6f87 cifs: Fix oops due to uncleared server->smbd_conn in reconnect | * 89042d3d85 ftrace/scripts: Update the instructions for ftrace-bisect.sh | * 592ba7116f trace_events_hist: add check for return value of 'create_hist_field' | * b0af180514 tracing: Make sure trace_printk() can output as soon as it can be used | * 91135d7233 module: Don't wait for GOING modules | * 85ee9919ad KVM: SVM: fix tsc scaling cache logic | * f0227eca97 scsi: hpsa: Fix allocation size for scsi_host_alloc() | * e5af9a458a drm/amdgpu: complete gfxoff allow signal during suspend without delay | * 62b9e9f921 Bluetooth: hci_sync: cancel cmd_timer if hci_open failed | * 21998acd31 exit: Use READ_ONCE() for all oops/warn limit reads | * e82b1598eb docs: Fix path paste-o for /sys/kernel/warn_count | * 1c51698ad6 panic: Expose "warn_count" to sysfs | * 0691ddae56 panic: Introduce warn_limit | * 7b98914a6c panic: Consolidate open-coded panic_on_warn checks | * fc636b1362 exit: Allow oops_limit to be disabled | * 339f8a8e52 exit: Expose "oops_count" to sysfs | * f80fb0001f exit: Put an upper limit on how often we can oops | * 2857ce7f47 panic: Separate sysctl logic from CONFIG_SMP | * e156d4dcb0 ia64: make IA64_MCA_RECOVERY bool instead of tristate | * 9024f77224 csky: Fix function name in csky_alignment() and die() | * 2ea497d153 h8300: Fix build errors from do_exit() to make_task_dead() transition | * a452ca0228 hexagon: Fix function name in die() | * 3b39f47474 objtool: Add a missing comma to avoid string concatenation | * 39a26d8721 exit: Add and use make_task_dead. | * b5c1acaa43 kasan: no need to unset panic_on_warn in end_report() | * b5c967dc68 ubsan: no need to unset panic_on_warn in ubsan_epilogue() | * e4cd210032 panic: unset panic_on_warn inside panic() | * 191f1f1f6a kernel/panic: move panic sysctls to its own file | * 654f6e8512 sysctl: add a new register_sysctl_init() interface | * 3aa991cde9 fs: reiserfs: remove useless new_opts in reiserfs_remount | * d830531f8f x86: ACPI: cstate: Optimize C3 entry on AMD CPUs | * 1f54762231 drm/i915: Remove unused variable | * 6e10127093 Revert "selftests/bpf: check null propagation only neither reg is PTR_TO_BTF_ID" | * 619ee31b96 drm/i915: Allow switching away via vga-switcheroo if uninitialized | * ea435ba9eb firmware: coreboot: Check size of table entry and use flex-array | * a4e70bcf2e lockref: stop doing cpu_relax in the cmpxchg loop | * b0ee61f5ee platform/x86: asus-nb-wmi: Add alternate mapping for KEY_SCREENLOCK | * e8d2f7f566 platform/x86: touchscreen_dmi: Add info for the CSL Panther Tab HD | * 2e0a8bacbe r8152: add vendor/device ID pair for Microsoft Devkit | * d4b717e34d scsi: hisi_sas: Set a port invalid only if there are no devices attached when refreshing port id | * e15750aa28 KVM: s390: interrupt: use READ_ONCE() before cmpxchg() | * 9300c65207 spi: spidev: remove debug messages that access spidev->spi without locking | * 48ff5d3812 ASoC: fsl-asoc-card: Fix naming of AC'97 CODEC widgets | * 5001ffb31d ASoC: fsl_ssi: Rename AC'97 streams to avoid collisions with AC'97 CODEC | * b76120e206 cpufreq: armada-37xx: stop using 0 as NULL pointer | * eda26fa856 perf/x86/intel/uncore: Add Emerald Rapids | * 544f9d4e9d perf/x86/msr: Add Emerald Rapids | * b1eb964d78 s390: expicitly align _edata and _end symbols on page boundary | * fb45ec279b s390/debug: add _ASM_S390_ prefix to header guard | * cd488abed9 drm: Add orientation quirk for Lenovo ideapad D330-10IGL | * ff7ab370b8 net: usb: cdc_ether: add support for Thales Cinterion PLS62-W modem | * d6935084e4 ASoC: fsl_micfil: Correct the number of steps on SX controls | * ac07316b2d cpufreq: Add SM6375 to cpufreq-dt-platdev blocklist | * f0e6dcae14 kcsan: test: don't put the expect array on the stack | * c51c0b3754 cpufreq: Add Tegra234 to cpufreq-dt-platdev blocklist | * 28e4e8ca9e scsi: iscsi: Fix multiple iSCSI session unbind events sent to userspace | * 14b1df2004 tcp: fix rate_app_limited to default to 1 | * 120b8e527e net: stmmac: enable all safety features by default | * a7d736cc3c thermal: core: call put_device() only after device_register() fails | * ed08f958e4 thermal/core: fix error code in __thermal_cooling_device_register() | * 108a6f91e2 thermal: Validate new state in cur_state_store() | * bd0ea77edf thermal/core: Rename 'trips' to 'num_trips' | * 521c6ebd4f thermal/core: Remove duplicate information when an error occurs | * 6504afa263 net: dsa: microchip: ksz9477: port map correction in ALU table entry register | * 18346db185 selftests/net: toeplitz: fix race on tpacket_v3 block close | * caa28c7c83 driver core: Fix test_async_probe_init saves device in wrong array | * 89c62cee5d w1: fix WARNING after calling w1_process() | * 3d0eafe413 w1: fix deadloop in __w1_remove_master_device() | * 7701a4bd45 device property: fix of node refcount leak in fwnode_graph_get_next_endpoint() | * ed0d8f731e ptdma: pt_core_execute_cmd() should use spinlock | * 29e9c67bf3 octeontx2-pf: Fix the use of GFP_KERNEL in atomic context on rt | * 03bff5819a tcp: avoid the lookup process failing to get sk in ehash table | * 5bd69d2ea8 nvme-pci: fix timeout request state check | * 39178dfe86 drm/amd/display: fix issues with driver unload | * 9a5a537e14 phy: phy-can-transceiver: Skip warning if no "max-bitrate" | * 4095065b59 dmaengine: xilinx_dma: call of_node_put() when breaking out of for_each_child_of_node() | * 5bd3c1c1bc cifs: fix potential deadlock in cache_refresh_path() | * 1a2a47b85c HID: betop: check shape of output reports | * b2a7309743 l2tp: prevent lockdep issue in l2tp_tunnel_register() | * edf0e509ce virtio-net: correctly enable callback during start_xmit | * d3401c7624 net: macb: fix PTP TX timestamp failure due to packet padding | * 71c6019655 dmaengine: Fix double increment of client_count in dma_chan_get() | * 1e7919f0b1 drm/panfrost: fix GENERIC_ATOMIC64 dependency | * a1b3e50e21 net: mlx5: eliminate anonymous module_init & module_exit | * 09e3fb6f53 net/mlx5: E-switch, Fix setting of reserved fields on MODIFY_SCHEDULING_ELEMENT | * 01a6e10810 net: ipa: disable ipa interrupt during suspend | * 98aec50ff7 Bluetooth: Fix possible deadlock in rfcomm_sk_state_change | * 0e59f60b74 usb: gadget: f_fs: Ensure ep0req is dequeued before free_request | * ae8e136bca usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait | * f25cd2b731 HID: revert CHERRY_MOUSE_000C quirk | * 39483511fd pinctrl: rockchip: fix mux route data for rk3568 | * 1dae88a0b4 net: stmmac: fix invalid call to mdiobus_get_phy() | * 6716838bf8 HID: check empty report_list in bigben_probe() | * 2b49568254 HID: check empty report_list in hid_validate_values() | * ad67de330d net: mdio: validate parameter addr in mdiobus_get_phy() | * 4869129379 net: usb: sr9700: Handle negative len | * 2827c4eb42 octeontx2-pf: Avoid use of GFP_KERNEL in atomic context | * 77e8ed776c l2tp: close all race conditions in l2tp_tunnel_register() | * af22d2c0b4 l2tp: convert l2tp_tunnel_list to idr | * 22c7d45ca3 l2tp: Don't sleep and disable BH under writer-side sk_callback_lock | * 87d9205d9a l2tp: Serialize access to sk_user_data with sk_callback_lock | * c53acbf2fa net/sched: sch_taprio: fix possible use-after-free | * 40516d042b net: stmmac: Fix queue statistics reading | * 620aa67f80 pinctrl: rockchip: fix reading pull type on rk3568 | * ddca674af1 pinctrl/rockchip: add error handling for pull/drive register getters | * 259ab8fb8c pinctrl/rockchip: Use temporary variable for struct device | * 8cbf932c5c wifi: rndis_wlan: Prevent buffer overflow in rndis_query_oid | * f792d26e5c gpio: mxc: Always set GPIOs used as interrupt source to INPUT mode | * 8335f877ef gpio: mxc: Protect GPIO irqchip RMW with bgpio spinlock | * fb4fb3d267 gpio: use raw spinlock for gpio chip shadowed data | * 52e3eebfe6 sch_htb: Avoid grafting on htb_destroy_class_offload when destroying htb | * 8232e5a84d net: enetc: avoid deadlock in enetc_tx_onestep_tstamp() | * 95347e41ca net: wan: Add checks for NULL for utdm in undo_uhdlc_init and unmap_si_regs | * 7f129927fe net: nfc: Fix use-after-free in local_cleanup() | * 397aaac884 phy: rockchip-inno-usb2: Fix missing clk_disable_unprepare() in rockchip_usb2phy_power_on() | * 01bdcc73db bpf: Fix pointer-leak due to insufficient speculative store bypass mitigation | * 261e2f12b6 amd-xgbe: Delay AN timeout during KR training | * a8cf4af544 amd-xgbe: TX Flow Ctrl Registers are h/w ver dependent | * 8e897cb674 ARM: dts: at91: sam9x60: fix the ddr clock for sam9x60 | * 0a27dcd534 NFSD: fix use-after-free in nfsd4_ssc_setup_dul() | * 24af570c99 phy: ti: fix Kconfig warning and operator precedence | * 631fc36685 arm64: dts: qcom: msm8992-libra: Fix the memory map | * dda20ffec8 arm64: dts: qcom: msm8992-libra: Add CPU regulators | * 37ba5e9293 arm64: dts: qcom: msm8992: Don't use sfpb mutex | * bab87524f6 PM: AVS: qcom-cpr: Fix an error handling path in cpr_probe() | * b7a479c764 affs: initialize fsdata in affs_truncate() | * 623d111689 IB/hfi1: Remove user expected buffer invalidate race | * 47d5fc0dcd IB/hfi1: Immediately remove invalid memory from hardware | * 85caef2cfd IB/hfi1: Fix expected receive setup error exit issues | * cb193984d4 IB/hfi1: Reserve user expected TIDs | * 891ddfae39 IB/hfi1: Reject a zero-length user expected buffer | * 362c948972 RDMA/core: Fix ib block iterator counter overflow | * e26c571c3b tomoyo: fix broken dependency on *.conf.default | * 7dfe83ecc3 firmware: arm_scmi: Harden shared memory access in fetch_notification | * a653dbb70c firmware: arm_scmi: Harden shared memory access in fetch_response | * caffa7fed1 EDAC/highbank: Fix memory leak in highbank_mc_probe() | * 95de286200 reset: uniphier-glue: Fix possible null-ptr-deref | * 4773a8cf9a reset: uniphier-glue: Use reset_control_bulk API | * 7b33accc8f soc: imx8m: Fix incorrect check for of_clk_get_by_name() | * f07427f8d9 arm64: dts: imx8mm-venice-gw7901: fix USB2 controller OC polarity | * c4cb73febe HID: intel_ish-hid: Add check for ishtp_dma_tx_map | * 25f97c9883 ARM: imx: add missing of_node_put() | * 3e9d79ded9 arm64: dts: imx8mm-beacon: Fix ecspi2 pinmux | * 5381350761 ARM: dts: imx6qdl-gw560x: Remove incorrect 'uart-has-rtscts' | * 0e4bba1656 ARM: dts: imx7d-pico: Use 'clock-frequency' | * 108cf4c6d5 ARM: dts: imx6ul-pico-dwarf: Use 'clock-frequency' | * 207c9e64ed arm64: dts: imx8mp-phycore-som: Remove invalid PMIC property | * 7ce380fe75 dmaengine: ti: k3-udma: Do conditional decrement of UDMA_CHAN_RT_PEER_BCNT_REG | * edba9b7a70 memory: mvebu-devbus: Fix missing clk_disable_unprepare in mvebu_devbus_probe() | * e66f6949da memory: atmel-sdramc: Fix missing clk_disable_unprepare in atmel_ramc_probe() | * eda11ab556 memory: tegra: Remove clients SID override programming * | cab35cbd71 Revert "xhci: Add update_hub_device override for PCI xHCI hosts" * | 29e8f224d8 Revert "xhci: Detect lpm incapable xHC USB3 roothub ports from ACPI tables" * | 5739b27e8f Revert "xhci: Add a flag to disable USB3 lpm on a xhci root port level." * | 5b60fdf2e0 Merge 5.15.90 into android13-5.15-lts |\| | * aabd5ba7e9 Linux 5.15.90 | * 4b6f8263e9 io_uring/rw: remove leftover debug statement | * b10acfcd61 io_uring/rw: ensure kiocb_end_write() is always called | * 124fb13cc7 io_uring: fix double poll leak on repolling | * e944f1e37b io_uring: Clean up a false-positive warning from GCC 9.3.0 | * 940e8922c1 mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma | * e83cc8a780 soc: qcom: apr: Make qcom,protection-domain optional again | * 982c8b1e95 Revert "wifi: mac80211: fix memory leak in ieee80211_if_add()" | * 40a4797e08 block: mq-deadline: Rename deadline_is_seq_writes() | * 3abf10b4c4 net/mlx5: fix missing mutex_unlock in mlx5_fw_fatal_reporter_err_work() | * 1aab00aa41 net/ulp: use consistent error code when blocking ULP | * 2e4c95a404 io_uring/net: fix fast_iov assignment in io_setup_async_msg() | * 311b298a33 io_uring: io_kiocb_update_pos() should not touch file for non -1 offset | * 487a086595 tracing: Use alignof__(struct {type b;}) instead of offsetof() | * 430443f856 x86/fpu: Use _Alignof to avoid undefined behavior in TYPE_ALIGN | * f114717dfa Revert "drm/amdgpu: make display pinning more flexible (v2)" | * 7a993c1be5 efi: rt-wrapper: Add missing include | * de2af657ca arm64: efi: Execute runtime services from a dedicated stack | * 9cca110cf8 fs/ntfs3: Fix attr_punch_hole() null pointer derenference | * d4d112e5c4 drm/amdgpu: drop experimental flag on aldebaran | * c82fa690da drm/amd/display: Fix COLOR_SPACE_YCBCR2020_TYPE matrix | * 88c3375224 drm/amd/display: Calculate output_color_space after pixel encoding adjustment | * 87e605b161 drm/amd/display: Fix set scaling doesn's work | * 8687b8cdc3 drm/i915/display: Check source height is > 0 | * 5d96179166 drm/i915: re-disable RC6p on Sandy Bridge | * e9a7ec188b mei: me: add meteor lake point M DID | * eb0421d90f gsmi: fix null-deref in gsmi_get_variable | * b8d99cda52 serial: atmel: fix incorrect baudrate setup | * b85498385a serial: amba-pl011: fix high priority character transmission in rs486 mode | * 0f150134dd dmaengine: idxd: Let probe fail when workqueue cannot be enabled | * 1e8c127c2e dmaengine: tegra210-adma: fix global intr clear | * 473e2281f7 dmaengine: lgm: Move DT parsing after initialization | * 73337724cb serial: pch_uart: Pass correct sg to dma_unmap_sg() | * 4307a41cbc dt-bindings: phy: g12a-usb3-pcie-phy: fix compatible string documentation | * c9d55f564a dt-bindings: phy: g12a-usb2-phy: fix compatible string documentation | * 78aa45bb7a usb-storage: apply IGNORE_UAS only for HIKSEMI MD202 on RTL9210 | * a69c8dfb85 usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate() | * 1ab67e87b1 usb: gadget: g_webcam: Send color matching descriptor per frame | * b08167d8f0 usb: typec: altmodes/displayport: Fix pin assignment calculation | * 7fb1322e7a usb: typec: altmodes/displayport: Add pin assignment helper | * 59f9ee3796 usb: typec: tcpm: Fix altmode re-registration causes sysfs create fail | * a1c8a5c2f8 usb: host: ehci-fsl: Fix module alias | * f073d10cd5 usb: cdns3: remove fetched trb from cache before dequeuing | * 73f4bde973 USB: serial: cp210x: add SCALANCE LPE-9000 device id | * a2e075f401 USB: gadgetfs: Fix race between mounting and unmounting | * 2da67bff29 tty: fix possible null-ptr-defer in spk_ttyio_release | * cb53a3366e tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer | * f322dd2e4a staging: mt7621-dts: change some node hex addresses to lower case | * 6508788b2c bpf: restore the ebpf program ID for BPF_AUDIT_UNLOAD and PERF_BPF_EVENT_PROG_UNLOAD | * 7b122c33bd riscv: dts: sifive: fu740: fix size of pcie 32bit memory | * 701f9c3da6 thunderbolt: Use correct function to calculate maximum USB3 link rate | * 5b1b03a3d3 cifs: do not include page data when checking signature | * 64287cd456 btrfs: fix race between quota rescan and disable leading to NULL pointer deref | * f2e0e1615d btrfs: do not abort transaction on failure to write log tree when syncing log | * f653abe619 mmc: sdhci-esdhc-imx: correct the tuning start tap and step setting | * 9881436f01 mmc: sunxi-mmc: Fix clock refcount imbalance during unbind | * 33bd0db750 ACPI: PRM: Check whether EFI runtime is available | * 87e1ee6058 comedi: adv_pci1760: Fix PWM instruction handling | * b5d24a8e4a usb: core: hub: disable autosuspend for TI TUSB8041 | * 61a0890cb9 misc: fastrpc: Fix use-after-free race condition for maps | * 1b7b7bb400 misc: fastrpc: Don't remove map on creater_process and device_release | * e7e41fcf90 USB: misc: iowarrior: fix up header size for USB_DEVICE_ID_CODEMERCS_IOW100 | * f3de34d90d staging: vchiq_arm: fix enum vchiq_status return types | * 16d09c4bc9 USB: serial: option: add Quectel EM05CN modem | * 34d769f0c6 USB: serial: option: add Quectel EM05CN (SG) modem | * 768d56ed24 USB: serial: option: add Quectel EC200U modem | * 829916f069 USB: serial: option: add Quectel EM05-G (RS) modem | * eb8808f769 USB: serial: option: add Quectel EM05-G (CS) modem | * 6e0430db19 USB: serial: option: add Quectel EM05-G (GR) modem | * f01aefe374 prlimit: do_prlimit needs to have a speculation check | * 418e2c756d xhci: Detect lpm incapable xHC USB3 roothub ports from ACPI tables | * 10cb7d53be usb: acpi: add helper to check port lpm capability using acpi _DSM | * 1818e2a97d xhci: Add a flag to disable USB3 lpm on a xhci root port level. | * 8911ff7963 xhci: Add update_hub_device override for PCI xHCI hosts | * c462ac871f xhci: Fix null pointer dereference when host dies | * f39c813af0 usb: xhci: Check endpoint is valid before dereferencing it | * 0f175cebc4 xhci-pci: set the dma max_seg_size | * 89a410dbd0 io_uring/rw: defer fsnotify calls to task context | * 05d69b372b io_uring: do not recalculate ppos unnecessarily | * ff8a070253 io_uring: update kiocb->ki_pos at execution time | * b7958caf41 io_uring: remove duplicated calls to io_kiocb_ppos | * 86e2d6901a io_uring: ensure that cached task references are always put on exit | * 30b9068934 io_uring: fix async accept on O_NONBLOCK sockets | * a79b13f249 io_uring: allow re-poll if we made progress | * 3c1a3d0269 io_uring: support MSG_WAITALL for IORING_OP_SEND(MSG) | * 390b881631 io_uring: add flag for disabling provided buffer recycling | * 9b7b0f2116 io_uring: ensure recv and recvmsg handle MSG_WAITALL correctly | * cdc68e714d io_uring: improve send/recv error handling | * ccf06b5a98 io_uring: pass in EPOLL_URING_WAKE for eventfd signaling and wakeups | * 77baf39227 eventfd: provide a eventfd_signal_mask() helper | * a2d8ff00a7 eventpoll: add EPOLL_URING_WAKE poll wakeup flag | * a9aa4aa7a5 io_uring: don't gate task_work run on TIF_NOTIFY_SIGNAL | * bd9a23a4bb hugetlb: unshare some PMDs when splitting VMAs | * 393d9e3ed1 drm/amd: Delay removal of the firmware framebuffer | * 865e244e06 drm/amdgpu: disable runtime pm on several sienna cichlid cards(v2) | * 560373fb1e ALSA: hda/realtek: fix mute/micmute LEDs don't work for a HP platform | * 26264260a8 ALSA: hda/realtek: fix mute/micmute LEDs for a HP ProBook | * 1026756321 efi: fix userspace infinite retry read efivars after EFI runtime services page fault | * 45627a1a64 nilfs2: fix general protection fault in nilfs_btree_insert() | * 350d66d9e7 zonefs: Detect append writes at invalid locations | * 5054d001ff Add exception protection processing for vd in axi_chan_handle_err function | * a12fd43bd1 wifi: mac80211: sdata can be NULL during AMPDU start | * f96a6c009e wifi: brcmfmac: fix regression for Broadcom PCIe wifi devices | * 908d1742b6 Bluetooth: hci_qca: Fix driver shutdown on closed serdev | * 7530fbc05f fbdev: omapfb: avoid stack overflow warning | * e1df7f0b27 perf/x86/rapl: Treat Tigerlake like Icelake | * 2c129e8689 f2fs: let's avoid panic if extent_tree is not created | * 58bac74402 x86/asm: Fix an assembler warning with current binutils | * fdb4a70bb7 btrfs: always report error in run_one_delayed_ref() | * f641067ea2 RDMA/srp: Move large values to a new enum for gcc13 | * 793f8ac218 r8169: move rtl_wol_enable_rx() and rtl_prepare_power_down() | * dc072762f9 net/ethtool/ioctl: return -EOPNOTSUPP if we have no phy stats | * 308d24d875 vduse: Validate vq_num in vduse_validate_config() | * 8e1eb926a0 virtio_pci: modify ENOENT to EINVAL | * 64a6f3689d tools/virtio: initialize spinlocks in vring_test.c | * 95fc28a8e9 selftests/bpf: check null propagation only neither reg is PTR_TO_BTF_ID | * d4a9d2944f pNFS/filelayout: Fix coalescing test for single DS | * 6a3319af6b btrfs: fix trace event name typo for FLUSH_DELAYED_REFS * | 52cea9ba91 Merge "Merge 5.15.89 into android13-5.15-lts" into android13-5.15-lts |\ \ | * | de550d72f1 Merge 5.15.89 into android13-5.15-lts | |\| | | * 3bcc86eb3e Linux 5.15.89 | | * 37c18ef49e pinctrl: amd: Add dynamic debugging for active GPIOs | | * a5841b81ad Revert "usb: ulpi: defer ulpi_register on ulpi_read_id timeout" | | * 7ec9a45fc4 block: handle bio_split_to_limits() NULL return | | * ba86db02d4 io_uring/io-wq: only free worker if it was allocated for creation | | * bb135bcc94 io_uring/io-wq: free worker if task_work creation is canceled | | * 63c2fa09b8 scsi: mpt3sas: Remove scsi_dma_map() error messages | | * e2ea555642 efi: fix NULL-deref in init error path | | * 94b6cf84db arm64: cmpxchg_double*: hazard against entire exchange variable | | * 3891fa4982 arm64: atomics: remove LL/SC trampolines | | * 61e86339af arm64: atomics: format whitespace consistently | | * ed4629d1e9 io_uring: lock overflowing for IOPOLL | | * fbf5015141 KVM: x86: Do not return host topology information from KVM_GET_SUPPORTED_CPUID | | * ee16841134 Documentation: KVM: add API issues section | | * b8f3b3cffb mm: Always release pages to the buddy allocator in memblock_free_late(). | | * d2dc110dea platform/surface: aggregator: Add missing call to ssam_request_sync_free() | | * cfd5978411 igc: Fix PPS delta between two synchronized end-points | | * 0bf52601ce perf build: Properly guard libbpf includes | | * 205f35eee7 net/mlx5e: Don't support encap rules with gbp option | | * 0526fc9330 net/mlx5: Fix ptp max frequency adjustment range | | * 9e2c38827c net/sched: act_mpls: Fix warning during failed attribute validation | | * e3bb44beaf tools/nolibc: fix the O_* fcntl/open macro definitions for riscv | | * 1e6ec75bb3 tools/nolibc: restore mips branch ordering in the _start block | | * bd0431a66c tools/nolibc: Remove .global _start from the entry point code | | * a77c54f5b5 tools/nolibc/arch: mark the _start symbol as weak | | * da51e086d1 tools/nolibc/arch: split arch-specific code into individual files | | * 8591e788be tools/nolibc/types: split syscall-specific definitions into their own files | | * 4fceecdeaa tools/nolibc/std: move the standard type definitions to std.h | | * 1792136f22 tools/nolibc: use pselect6 on RISCV | | * 487386a49e tools/nolibc: x86-64: Use `mov $60,%eax` instead of `mov $60,%rax` | | * 27af4f2260 tools/nolibc: x86: Remove `r8`, `r9` and `r10` from the clobber list | | * a60b24192b af_unix: selftest: Fix the size of the parameter to connect() | | * 39ae73e581 nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame() | | * f6003784b1 hvc/xen: lock console list traversal | | * 79c58b7424 octeontx2-af: Fix LMAC config in cgx_lmac_rx_tx_enable | | * 303d062881 tipc: fix unexpected link reset due to discovery messages | | * e79d0f97cc ALSA: usb-audio: Relax hw constraints for implicit fb sync | | * c9557906bd ALSA: usb-audio: Make sure to stop endpoints before closing EPs | | * 83e758105b ASoC: wm8904: fix wrong outputs volume after power reactivation | | * 7c26d21872 scsi: ufs: core: WLUN suspend SSU/enter hibern8 fail recovery | | * 513fdf0b8e scsi: ufs: Stop using the clock scaling lock in the error handler | | * 13259b60b7 scsi: mpi3mr: Refer CONFIG_SCSI_MPI3MR in Makefile | | * 470f6a9175 regulator: da9211: Use irq handler when ready | | * 24107ad469 x86/resctrl: Fix task CLOSID/RMID update race | | * cd3da505fb EDAC/device: Fix period calculation in edac_device_reset_delay_period() | | * ab0d02c53a x86/boot: Avoid using Intel mnemonics in AT&T syntax asm | | * a90d339f1f powerpc/imc-pmu: Fix use of mutex in IRQs disabled section | | * 511cf17b24 netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function. | | * b22faa21b6 sched/core: Fix use-after-free bug in dup_user_cpus_ptr() | | * d766ccadbe iommu/mediatek-v1: Fix an error handling path in mtk_iommu_v1_probe() | | * c929a230c8 iommu/iova: Fix alloc iova overflows issue | | * 4b51aa263a usb: ulpi: defer ulpi_register on ulpi_read_id timeout | | * 9a8bf443f6 bus: mhi: host: Fix race between channel preparation and M0 event | | * 456e3794e0 ipv6: raw: Deduct extension header length in rawv6_push_pending_frames | | * 4c93422a54 ixgbe: fix pci device refcount leak | | * e97da5d97a platform/x86: sony-laptop: Don't turn off 0x153 keyboard backlight during probe | | * f3b1e04daf dt-bindings: msm/dsi: Don't require vcca-supply on 14nm PHY | | * 52a5f596c6 dt-bindings: msm/dsi: Don't require vdds-supply on 10nm PHY | | * 984ad875db drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer | | * 92ae83665e platform/x86: ideapad-laptop: Add Legion 5 15ARH05 DMI id to set_fn_lock_led_list[] | | * e38b5f81df dt-bindings: msm: dsi-phy-28nm: Add missing qcom, dsi-phy-regulator-ldo-mode | | * bb32ab40cb dt-bindings: msm: dsi-controller-main: Fix description of core clock | | * 3fb8d10bee dt-bindings: msm: dsi-controller-main: Fix power-domain constraint | | * dc5b651cad drm/msm/adreno: Make adreno quirks not overwrite each other | | * 757d665ee1 dt-bindings: msm: dsi-controller-main: Fix operating-points-v2 constraint | | * c90cf47d30 platform/x86: dell-privacy: Fix SW_CAMERA_LENS_COVER reporting | | * 25b5f693bc platform/surface: aggregator: Ignore command messages not intended for us | | * ee7b8ce2cc platform/x86: dell-privacy: Only register SW_CAMERA_LENS_COVER if present | | * e0072068ad cifs: Fix uninitialized memory read for smb311 posix symlink create | | * f3495b5e9e net/mlx5e: Set action fwd flag when parsing tc action goto | | * 1a8431cc20 drm/i915/gt: Reset twice | | * 011ecdbcd5 drm/virtio: Fix GEM handle creation UAF | | * 798dfeeae3 s390/percpu: add READ_ONCE() to arch_this_cpu_to_op_simple() | | * a400593eb3 s390/cpum_sf: add READ_ONCE() semantics to compare and swap loops | | * d4fa65960a ASoC: qcom: lpass-cpu: Fix fallback SD line index handling | | * 8400b91c11 s390/kexec: fix ipl report address for kdump | | * c07e0babd1 perf auxtrace: Fix address filter duplicate symbol selection | | * e81d82da61 net: stmmac: add aux timestamps fifo clearance wait | | * 44167b74a8 docs: Fix the docs build with Sphinx 6.0 | | * 24176bf2a1 efi: tpm: Avoid READ_ONCE() for accessing the event log | | * 01b966b14c selftests: kvm: Fix a compile error in selftests/kvm/rseq_test.c | | * c773ebe11c KVM: arm64: nvhe: Fix build with profile optimization | | * c1d6a72fc8 KVM: arm64: Fix S1PTW handling on RO memslots | | * e04e6cd883 ALSA: hda/realtek: Enable mute/micmute LEDs on HP Spectre x360 13-aw0xxx | | * b983c9a971 ALSA: hda/realtek - Turn on power early | | * 9ab3696881 ALSA: control-led: use strscpy in set_led_id() | | * a8acfe2c6f netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits * | | 2c4f6d72f1 Merge "Merge 5.15.88 into android13-5.15-lts" into android13-5.15-lts |\| | | * | 773ec50a8a Merge 5.15.88 into android13-5.15-lts | |\| | | * 90bb4f8f39 Linux 5.15.88 | | * cbd3e6d5e5 ALSA: hda - Enable headset mic on another Dell laptop with ALC3254 | | * b98dee4746 ALSA: hda/hdmi: Add a HP device 0x8715 to force connect list | | * 26350c21bc ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF | | * dadd0dcaa6 net/ulp: prevent ULP without clone op from entering the LISTEN status | | * 04941c1d5b net: sched: disallow noqueue for qdisc classes | | * 068b512193 serial: fixup backport of "serial: Deassert Transmit Enable on probe in driver-specific way" | | * 46aa155758 selftests/vm/pkeys: Add a regression test for setting PKRU through ptrace | | * 3c1940c549 x86/fpu: Emulate XRSTOR's behavior if the xfeatures PKRU bit is not set | | * 3f1c81426a x86/fpu: Allow PKRU to be (once again) written by ptrace. | | * b29773d6b0 x86/fpu: Add a pkru argument to copy_uabi_to_xstate() | | * 9813c5fc22 x86/fpu: Add a pkru argument to copy_uabi_from_kernel_to_xstate(). | | * fea26e83a1 x86/fpu: Take task_struct* in copy_sigframe_from_user_to_xstate() | | * d4d152017e parisc: Align parisc MADV_XXX constants with all other architectures | * | 1867565896 Revert "ASoC/SoundWire: dai: expand 'stream' concept beyond SoundWire" | * | 43064ed394 Revert "ASoC: Intel/SOF: use set_stream() instead of set_tdm_slots() for HDAudio" | * | 959d50edd2 Revert "PM/devfreq: governor: Add a private governor_data for governor" * | | c34c76a947 Revert "ASoC/SoundWire: dai: expand 'stream' concept beyond SoundWire" * | | 33ef84070b Revert "ASoC: Intel/SOF: use set_stream() instead of set_tdm_slots() for HDAudio" * | | e60641bdca Revert "PM/devfreq: governor: Add a private governor_data for governor" * | | 793ec0a9cc Merge "Merge 5.15.87 into android13-5.15-lts" into android13-5.15-lts |\| | | * | fc4de343bd Merge 5.15.87 into android13-5.15-lts | |\| | | * d57287729e Linux 5.15.87 | | * 24186c6822 drm/mgag200: Fix PLL setup for G200_SE_A rev >=4 | | * e326ee018a io_uring: Fix unsigned 'res' comparison with zero in io_fixup_rw_res() | | * b2b6eefab4 efi: random: combine bootloader provided RNG seed with RNG protocol output | | * 99c0759495 mbcache: Avoid nesting of cache->c_list_lock under bit locks | | * d50d6c193a net: hns3: fix return value check bug of rx copybreak | | * d4e6a13eb9 btrfs: make thaw time super block check to also verify checksum | | * 70a1dccd0e selftests: set the BUILD variable to absolute path | | * 58fef3ebc8 ext4: don't allow journal inode to have encrypt flag | | * bd5dc96fea mptcp: use proper req destructor for IPv6 | | * 78bd6ab52c mptcp: dedicated request sock for subflow in v6 | | * 6e9c1aef3e Revert "ACPI: PM: Add support for upcoming AMD uPEP HID AMDI007" | | * e32f867b37 ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob | | * 4136f1ac1e ksmbd: fix infinite loop in ksmbd_conn_handler_loop() | | * f10defb0be hfs/hfsplus: avoid WARN_ON() for sanity check, use proper error handling | | * 48d9e2e6de hfs/hfsplus: use WARN_ON for sanity check | | * f5a9bbf962 drm/i915/gvt: fix vgpu debugfs clean in remove | | * ae9a615117 drm/i915/gvt: fix gvt debugfs destroy | | * eb3e943a32 riscv, kprobes: Stricter c.jr/c.jalr decoding | | * 620a229f57 riscv: uaccess: fix type of 0 variable on error in get_user() | | * 8e05a993f8 thermal: int340x: Add missing attribute for data rate base | | * c3222fd282 io_uring: fix CQ waiting timeout handling | | * b7b9bc9305 block: don't allow splitting of a REQ_NOWAIT bio | | * e1358c8787 fbdev: matroxfb: G200eW: Increase max memory from 1 MB to 16 MB | | * 682a7d064f nfsd: fix handling of readdir in v4root vs. mount upcall timeout | | * cb42aa7b5f x86/bugs: Flush IBP in ib_prctl_set() | | * 554a880a1f x86/kexec: Fix double-free of elf header buffer | | * 264241a610 btrfs: check superblock to ensure the fs was not modified at thaw time | | * 69f4bda5f4 nvme: also return I/O command effects from nvme_command_effects | | * a6a4b057cd nvmet: use NVME_CMD_EFFECTS_CSUPP instead of open coding it | | * f9309dcaa9 io_uring: check for valid register opcode earlier | | * 4df413d469 nvme: fix multipath crash caused by flush request when blktrace is enabled | | * 03ce792128 ASoC: Intel: bytcr_rt5640: Add quirk for the Advantech MICA-071 tablet | | * 0dca7375e2 udf: Fix extension of the last extent in the file | | * dc1bc90397 caif: fix memory leak in cfctrl_linkup_request() | | * bce3680b48 drm/i915: unpin on error in intel_vgpu_shadow_mm_pin() | | * da6a3653b8 perf stat: Fix handling of --for-each-cgroup with --bpf-counters to match non BPF mode | | * 11cd4ec635 usb: rndis_host: Secure rndis_query check against int overflow | | * 6ea5273c71 octeontx2-pf: Fix lmtst ID used in aura free | | * 4e5f2c74cb drivers/net/bonding/bond_3ad: return when there's no aggregator | | * 8414983c2e fs/ntfs3: don't hold ni_lock when calling truncate_setsize() | | * a23e8376e6 drm/imx: ipuv3-plane: Fix overlay plane width | | * a8f7fd322f perf tools: Fix resources leak in perf_data__open_dir() | | * a1e1521b46 netfilter: ipset: Rework long task execution when adding/deleting entries | | * 6f19a38483 netfilter: ipset: fix hash:net,port,net hang with /0 subnet | | * 774d259749 net: sparx5: Fix reading of the MAC address | | * 04dc4003e5 net: sched: cbq: dont intepret cls results when asked to drop | | * f02327a487 net: sched: atm: dont intepret cls results when asked to drop | | * 95da1882ce gpio: sifive: Fix refcount leak in sifive_gpio_probe | | * da9c9883ec ceph: switch to vfs_inode_has_locks() to fix file lock bug | | * 54e72ce5f1 filelock: new helper: vfs_inode_has_locks | | * f34b03ce3a drm/meson: Reduce the FIFO lines held when AFBC is not used | | * 05a8410b0f RDMA/mlx5: Fix validation of max_rd_atomic caps for DC | | * 8d89870d63 RDMA/mlx5: Fix mlx5_ib_get_hw_stats when used for device | | * 4d112f0016 net: phy: xgmiitorgmii: Fix refcount leak in xgmiitorgmii_probe | | * e5fbeb3d16 net: ena: Update NUMA TPH hint register upon NUMA node update | | * 7840b93cfd net: ena: Set default value for RX interrupt moderation | | * d09b7a9d2f net: ena: Fix rx_copybreak value update | | * 0e7ad9b006 net: ena: Use bitmask to indicate packet redirection | | * 5d4964984b net: ena: Account for the number of processed bytes in XDP | | * f17d9aec07 net: ena: Don't register memory info on XDP exchange | | * a4aa727ad0 net: ena: Fix toeplitz initial hash value | | * 0bec17f1ce net: amd-xgbe: add missed tasklet_kill | | * cb2f74685f net/mlx5e: Fix hw mtu initializing at XDP SQ allocation | | * 6c72abb78b net/mlx5e: Always clear dest encap in neigh-update-del | | * b36783bc11 net/mlx5e: TC, Refactor mlx5e_tc_add_flow_mod_hdr() to get flow attr | | * f8c10eeba3 net/mlx5e: IPoIB, Don't allow CQE compression to be turned on by default | | * 7227bbb7c1 net/mlx5: Avoid recovery in probe flows | | * 9369b9afa8 net/mlx5: Add forgotten cleanup calls into mlx5_init_once() error path | | * d966f2ee4b net/mlx5: E-Switch, properly handle ingress tagged packets on VST | | * 6a37a01aba vdpa_sim: fix vringh initialization in vdpasim_queue_ready() | | * e3462410c3 vhost: fix range used in translate_desc() | | * 13871f60ec vringh: fix range used in iotlb_translate() | | * e05d4c8c28 vhost/vsock: Fix error handling in vhost_vsock_init() | | * 586e6fd7d5 vdpa_sim: fix possible memory leak in vdpasim_net_init() and vdpasim_blk_init() | | * b63bc2db24 nfc: Fix potential resource leaks | | * 945e58bdaf net: dsa: mv88e6xxx: depend on PTP conditionally | | * 95df720e64 qlcnic: prevent ->dcb use-after-free on qlcnic_dcb_enable() failure | | * 6c55953e23 net: sched: fix memory leak in tcindex_set_parms | | * d14a4b24d5 net: hns3: fix VF promisc mode not update when mac table full | | * 7ed205b947 net: hns3: fix miss L3E checking for rx packet | | * 47868cb77f net: hns3: extract macro to simplify ring stats update code | | * 7457c5a776 net: hns3: refactor hns3_nic_reuse_page() | | * 4a6e9fb534 net: hns3: add interrupts re-initialization while doing VF FLR | | * 5e48ed805c nfsd: shut down the NFSv4 state objects before the filecache | | * 7e2825f5fb veth: Fix race with AF_XDP exposing old or uninitialized descriptors | | * ac95cdafac netfilter: nf_tables: honor set timeout and garbage collection updates | | * 49677ea151 vmxnet3: correctly report csum_level for encapsulated packet | | * 9d30cb4421 netfilter: nf_tables: perform type checking for existing sets | | * c3bfb7784a netfilter: nf_tables: add function to create set stateful expressions | | * 996cd779c2 netfilter: nf_tables: consolidate set description | | * 4f1105ee72 drm/panfrost: Fix GEM handle creation ref-counting | | * df493f676f bpf: pull before calling skb_postpull_rcsum() | | * d7e817e689 btrfs: fix an error handling path in btrfs_defrag_leaves() | | * 4d69cdba2c SUNRPC: ensure the matching upcall is in-flight upon downcall | | * af0265dfef drm/i915/migrate: fix length calculation | | * 8b25a526a5 drm/i915/migrate: fix offset calculation | | * a3d1e6f9b6 drm/i915/migrate: don't check the scratch page | | * 5bc0b2fda4 ext4: fix deadlock due to mbcache entry corruption | | * a6e4094faf mbcache: automatically delete entries from cache on freeing | | * 1872549129 ext4: correct inconsistent error msg in nojournal mode | | * 761f88f82e ext4: goto right label 'failed_mount3a' | | * eb16602140 ravb: Fix "failed to switch device to config mode" message during unbind | | * 4216995dbd perf probe: Fix to get the DW_AT_decl_file and DW_AT_call_file as unsinged data | | * d8bbbf2b52 perf probe: Use dwarf_attr_integrate as generic DWARF attr accessor | | * b131b5f136 media: s5p-mfc: Fix in register read and write for H264 | | * ff27800c0a media: s5p-mfc: Clear workbit to handle error condition | | * 4653ba32ad media: s5p-mfc: Fix to handle reference queue during finishing | | * 1bd7283dc0 x86/MCE/AMD: Clear DFR errors found in THR handler | | * 5ddcd349d9 x86/mce: Get rid of msr_ops | | * b8e7ed42bc btrfs: fix extent map use-after-free when handling missing device in read_one_chunk | | * 9c3beebd21 btrfs: move missing device handling in a dedicate function | | * 7528b21ceb btrfs: replace strncpy() with strscpy() | | * 4cef44525f phy: qcom-qmp-combo: fix out-of-bounds clock access | | * 855edc4ec6 ARM: renumber bits related to _TIF_WORK_MASK | | * 18f28f1330 ext4: fix off-by-one errors in fast-commit block filling | | * b205332b6b ext4: fix unaligned memory access in ext4_fc_reserve_space() | | * 9c197dcbac ext4: add missing validation of fast-commit record lengths | | * 6220ec4055 ext4: don't set up encryption key during jbd2 transaction | | * 6482d42baf ext4: disable fast-commit of encrypted dir operations | | * 6969367c15 ext4: fix potential out of bound read in ext4_fc_replay_scan() | | * 818175ae3b ext4: factor out ext4_fc_get_tl() | | * ffd84d0bc5 ext4: introduce EXT4_FC_TAG_BASE_LEN helper | | * 37914e029b ext4: use ext4_debug() instead of jbd_debug() | | * b0ed9a032e ext4: remove unused enum EXT4_FC_COMMIT_FAILED | | * 394514ddf9 tracing: Fix issue of missing one synthetic field | | * 5234dd5d20 block: mq-deadline: Fix dd_finish_request() for zoned devices | | * 78623b10fc drm/amdgpu: make display pinning more flexible (v2) | | * 6363da2c85 drm/amdgpu: handle polaris10/11 overlap asics (v2) | | * 2771c7a0ee ext4: allocate extended attribute value in vmalloc area | | * e995ff918e ext4: avoid unaccounted block allocation when expanding inode | | * 877247222a ext4: initialize quota before expanding inode in setproject ioctl | | * 322cf639b0 ext4: fix inode leak in ext4_xattr_inode_create() on an error path | | * 6380a93b57 ext4: fix kernel BUG in 'ext4_write_inline_data_end()' | | * dc3bbc9753 ext4: avoid BUG_ON when creating xattrs | | * 844c405552 ext4: fix error code return to user-space in ext4_get_branch() | | * b870b28e29 ext4: fix corruption when online resizing a 1K bigalloc fs | | * d440d6427a ext4: fix delayed allocation bug in ext4_clu_mapped for bigalloc + inline | | * def7a39091 ext4: init quota for 'old.inode' in 'ext4_rename' | | * 3c31d8d3ad ext4: fix uninititialized value in 'ext4_evict_inode' | | * 871800770d ext4: fix leaking uninitialized memory in fast-commit journal | | * d480a49c15 ext4: fix bug_on in __es_tree_search caused by bad boot loader inode | | * 91009e361e ext4: check and assert if marking an no_delete evicting inode dirty | | * 820eacbc4e ext4: fix reserved cluster accounting in __es_remove_extent() | | * 0dcbf4dc3d ext4: fix bug_on in __es_tree_search caused by bad quota inode | | * 06a20a68bb ext4: add helper to check quota inums | | * f7e6b5548f ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inode | | * 205ac16628 ext4: fix undefined behavior in bit shift for ext4_check_flag_values | | * cf0e0817b0 ext4: fix use-after-free in ext4_orphan_cleanup | | * 970bfd7a41 fs: ext4: initialize fsdata in pagecache_write() | | * 744bbde378 ext4: remove trailing newline from ext4_msg() message | | * 7192afa5e4 ext4: add inode table check in __ext4_get_inode_loc to aovid possible infinite loop | | * 0d041b7251 ext4: silence the warning when evicting inode with dioread_nolock | | * af4ceb00eb drm/ingenic: Fix missing platform_driver_unregister() call in ingenic_drm_init() | | * c919e1154b drm/i915/dsi: fix VBT send packet port selection for dual link DSI | | * 6948e570f5 drm/vmwgfx: Validate the box size for the snooped cursor | | * 5594fde1ef drm/connector: send hotplug uevent on connector cleanup | | * 317ebe61a6 device_cgroup: Roll back to original exceptions after copy failure | | * ac838c663b parisc: led: Fix potential null-ptr-deref in start_task() | | * 2c1881f081 remoteproc: core: Do pm_relax when in RPROC_OFFLINE state | | * 9b615f957c iommu/amd: Fix ivrs_acpihid cmdline parsing code | | * 35b792179b phy: qcom-qmp-combo: fix sc8180x reset | | * dfd05a1335 driver core: Fix bus_type.match() error handling in __driver_attach() | | * 44618a3397 crypto: ccp - Add support for TEE for PCI ID 0x14CA | | * c55507a94b crypto: n2 - add missing hash statesize | | * 4830750696 riscv: mm: notify remote harts about mmu cache updates | | * 16b6d9525d riscv: stacktrace: Fixup ftrace_graph_ret_addr retp argument | | * 657b440a27 PCI/sysfs: Fix double free in error path | | * 67fd41bbb0 PCI: Fix pci_device_is_present() for VFs by checking PF | | * bfce073089 ipmi: fix use after free in _ipmi_destroy_user() | | * 3b4984035c ima: Fix a potential NULL pointer access in ima_restore_measurement_list | | * a843699f16 mtd: spi-nor: Check for zero erase size in spi_nor_find_best_erase_type() | | * 24f4649cd8 ipmi: fix long wait in unload when IPMI disconnect | | * fa6bbb4894 ipu3-imgu: Fix NULL pointer dereference in imgu_subdev_set_selection() | | * cdb208b090 ASoC: jz4740-i2s: Handle independent FIFO flush bits | | * 2d0d083d8a wifi: wilc1000: sdio: fix module autoloading | | * 2e4a088804 efi: Add iMac Pro 2017 to uefi skip cert quirk | | * c49fb9b760 md/bitmap: Fix bitmap chunk size overflow issues | | * 94fe975d54 block: mq-deadline: Do not break sequential write streams to zoned HDDs | | * 8e91679f7b rtc: ds1347: fix value written to century register | | * 5eb8296d73 cifs: fix missing display of three mount options | | * cfa9f66f91 cifs: fix confusing debug message | | * 8b45a3b19a media: dvb-core: Fix UAF due to refcount races at releasing | | * acf984a371 media: dvb-core: Fix double free in dvb_register_device() | | * 5fac317bee ARM: 9256/1: NWFPE: avoid compiler-generated __aeabi_uldivmod | | * ce50c61245 staging: media: tegra-video: fix device_node use after free | | * 6b16758215 staging: media: tegra-video: fix chan->mipi value on error | | * 4f5de49d8c tracing: Fix infinite loop in tracing_read_pipe on overflowed print_trace_line | | * 17becbc4dd tracing/probes: Handle system names with hyphens | | * 2442e655a6 tracing/hist: Fix wrong return value in parse_action_params() | | * 2a81ff5ce8 tracing: Fix complicated dependency of CONFIG_TRACER_MAX_TRACE | | * fe8c35c6ff tracing: Fix race where eprobes can be called before the event | | * eb20f6ed37 x86/kprobes: Fix optprobe optimization check with CONFIG_RETHUNK | | * 3e0fbc06db x86/kprobes: Fix kprobes instruction boudary check with CONFIG_RETHUNK | | * 6268a0704b ftrace/x86: Add back ftrace_expected for ftrace bug reports | | * c95cf30dd4 x86/microcode/intel: Do not retry microcode reloading on the APs | | * f8fe2f4178 KVM: nVMX: Properly expose ENABLE_USR_WAIT_PAUSE control to L1 | | * ca3483d71b KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails | | * 2c73b349fd KVM: VMX: Resume guest immediately when injecting #GP on ECREATE | | * 4a19f48bee of/kexec: Fix reading 32-bit "linux,initrd-{start,end}" values | | * 7eddcdb09f perf/core: Call LSM hook after copying perf_event_attr | | * 15697f6533 tracing/hist: Fix out-of-bound write on 'action_data.var_ref_idx' | | * fd52b86a72 dm cache: set needs_check flag after aborting metadata | | * d2a0b298eb dm cache: Fix UAF in destroy() | | * 856edd0e92 dm clone: Fix UAF in clone_dtr() | | * 9215b25f2e dm integrity: Fix UAF in dm_integrity_dtr() | | * 34cd15d83b dm thin: Fix UAF in run_timer_softirq() | | * ac362c40e3 dm thin: resume even if in FAIL mode | | * 4b710e8481 dm thin: Use last transaction's pmd->root when commit failed | | * f8c26c33fe dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata | | * 28d307f380 dm cache: Fix ABBA deadlock between shrink_slab and dm_cache_metadata_abort | | * a9e89a567f mptcp: remove MPTCP 'ifdef' in TCP SYN cookies | | * 13b9fd0dee mptcp: mark ops structures as ro_after_init | | * b2120ed7fd fs: dlm: retry accept() until -EAGAIN or error returns | | * 5b4478615f fs: dlm: fix sock release if listen fails | | * b7ede8a63d ALSA: hda/realtek: Apply dual codec fixup for Dell Latitude laptops | | * dbd1f30191 ALSA: patch_realtek: Fix Dell Inspiron Plus 16 | | * 8fb4c98f20 cpufreq: Init completion before kobject_init_and_add() | | * 876c6ab967 PM/devfreq: governor: Add a private governor_data for governor | | * 0e945ea733 selftests: Use optional USERCFLAGS and USERLDFLAGS | | * 31697c5953 arm64: dts: qcom: sdm850-lenovo-yoga-c630: correct I2C12 pins drive strength | | * 1630498660 ARM: ux500: do not directly dereference __iomem | | * 99590f29b2 btrfs: fix resolving backrefs for inline extent followed by prealloc | | * 1f9cf4daf2 mmc: sdhci-sprd: Disable CLK_AUTO when the clock is less than 400K | | * 58d53ff30a arm64: dts: qcom: sdm845-db845c: correct SPI2 pins drive strength | | * a777b90a05 perf/x86/intel/uncore: Clear attr_update properly | | * ca77ac238c perf/x86/intel/uncore: Disable I/O stacks to PMU mapping on ICX-D | | * df06e7777c jbd2: use the correct print format | | * 8e75b1dd4b ktest.pl minconfig: Unset configs instead of just removing them | | * 55e5e8b445 kest.pl: Fix grub2 menu handling for rebooting | | * 823fed7c40 soc: qcom: Select REMAP_MMIO for LLCC driver | | * 8dabeeb1ff media: stv0288: use explicitly signed char | | * d167ebea90 net/af_packet: make sure to pull mac header | | * 9ff46c36df net/af_packet: add VLAN support for AF_PACKET SOCK_RAW GSO | | * cd0f597c8a rcu-tasks: Simplify trc_read_check_handler() atomic operations | | * 593ca69668 ASoC/SoundWire: dai: expand 'stream' concept beyond SoundWire | | * a7874dac6b ASoC: Intel/SOF: use set_stream() instead of set_tdm_slots() for HDAudio | | * ae4f70b2fe kcsan: Instrument memcpy/memset/memmove with newer Clang | | * d01fa993eb SUNRPC: Don't leak netobj memory when gss_read_proxy_verf() fails | | * 43135fb098 tpm: tpm_tis: Add the missed acpi_put_table() to fix memory leak | | * 986cd9a9b9 tpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak | | * 638cd298df tpm: acpi: Call acpi_put_table() to fix memory leak | | * d58289fc77 mmc: vub300: fix warning - do not call blocking ops when !TASK_RUNNING | | * 7eb57bc92f f2fs: allow to read node block after shutdown | | * acc13987fd f2fs: should put a page when checking the summary info | | * 35d8a89862 mm, compaction: fix fast_isolate_around() to stay within boundaries | | * 91bd504128 md: fix a crash in mempool_free | | * 29328fbce5 mfd: mt6360: Add bounds checking in Regmap read/write call-backs | | * c24cc476ac pnode: terminate at peers of source | | * 0c9118e381 ALSA: line6: fix stack overflow in line6_midi_transmit | | * ac4b4fdf32 ALSA: line6: correct midi status byte when receiving data from podxt | | * 83c44f0ebf ovl: Use ovl mounter's fsuid and fsgid in ovl_link() | | * fcb94283e0 binfmt: Fix error return code in load_elf_fdpic_binary() | | * ed9947277b hfsplus: fix bug causing custom uid and gid being unable to be assigned with mount | | * 76d52b5412 pstore/zone: Use GFP_ATOMIC to allocate zone buffer | | * 74b0a2fcc3 pstore: Properly assign mem_type property | | * d25aac3489 HID: plantronics: Additional PIDs for double volume key presses quirk | | * 9d4294545c HID: multitouch: fix Asus ExpertBook P2 P2451FA trackpoint | | * 7280fdb80b powerpc/rtas: avoid scheduling in rtas_os_term() | | * d8939315b7 powerpc/rtas: avoid device tree lookups in rtas_os_term() | | * 23a249b118 objtool: Fix SEGFAULT | | * ed686e7a26 fs/ntfs3: Fix slab-out-of-bounds in r_page | | * dd34665cb0 fs/ntfs3: Delete duplicate condition in ntfs_read_mft() | | * a9847a11b6 fs/ntfs3: Use __GFP_NOWARN allocation at ntfs_fill_super() | | * abd2ee2cf4 fs/ntfs3: Use __GFP_NOWARN allocation at wnd_init() | | * d7ce7bb688 fs/ntfs3: Validate index root when initialize NTFS security | | * f29676cc3a soundwire: dmi-quirks: add quirk variant for LAPBC710 NUC15 | | * 9c8471a17f fs/ntfs3: Fix slab-out-of-bounds read in run_unpack | | * 3a52f17867 fs/ntfs3: Validate resident attribute name | | * 3cd9e5b41b fs/ntfs3: Validate buffer length while parsing index | | * c878a915bc fs/ntfs3: Validate attribute name offset | | * f62506f5e4 fs/ntfs3: Add null pointer check for inode operations | | * 2dd9ccfb06 fs/ntfs3: Fix memory leak on ntfs_fill_super() error path | | * ea6b359840 fs/ntfs3: Add null pointer check to attr_load_runs_vcn | | * de5e095524 fs/ntfs3: Validate data run offset | | * d4489ba8fb fs/ntfs3: Add overflow check for attribute size | | * af7a195dea fs/ntfs3: Validate BOOT record_size | | * 8e228ac90c nvmet: don't defer passthrough commands with trivial effects to the workqueue | | * f068a7315a nvme: fix the NVME_CMD_EFFECTS_CSE_MASK definition | | * 576502f25f ata: ahci: Fix PCS quirk application for suspend | | * 7949b0df3d block, bfq: fix uaf for bfqq in bfq_exit_icq_bfqq | | * ff3d9ab51c ACPI: resource: do IRQ override on Lenovo 14ALC7 | | * 698a0813ce ACPI: resource: do IRQ override on XMG Core 15 | | * a9ac7633bb ACPI: resource: do IRQ override on LENOVO IdeaPad | | * 5fe31f2950 ACPI: resource: Skip IRQ override on Asus Vivobook K3402ZA/K3502ZA | | * 4c5fee0d88 nvme-pci: fix page size checks | | * 9141144b37 nvme-pci: fix mempool alloc size | | * f17cf8fa2c nvme-pci: fix doorbell buffer value endianness | | * ead99ec669 Revert "selftests/bpf: Add test for unstable CT lookup API" | | * bf0543b937 cifs: fix oops during encryption | | * 56f6de394f usb: dwc3: qcom: Fix memory leak in dwc3_qcom_interconnect_init * | | 2ce8e6e296 ANDROID: add __dev_kfree_skb_irq to virtual_device abi list |/ / * | 24bc28221f Revert "net: add atomic_long_t to net_device_stats fields" * | 34d878c5b3 Revert "ipv6/sit: use DEV_STATS_INC() to avoid data-races" * | 956e2924f3 Revert "arm64: Treat ESR_ELx as a 64-bit register" * | 8a3baaa85e Revert "arm64: mm: kfence: only handle translation faults" * | 8b3730f922 Revert "gpiolib: protect the GPIO device against being dropped while in use by user-space" * | b0e87c106d Revert "soreuseport: Fix socket selection for SO_INCOMING_CPU." * | 8a8a0cb6c6 Revert "bpf, sockmap: Fix missing BPF_F_INGRESS flag when using apply_bytes" * | 2d4c48bff9 Revert "xhci: Prevent infinite loop in transaction errors recovery for streams" * | 20ec745823 Merge 5.15.86 into android13-5.15-lts |\| | * 90ffbb727c Linux 5.15.86 | * 3082f8705e pwm: tegra: Fix 32 bit build | * caa40d1f85 mfd: qcom_rpm: Use devm_of_platform_populate() to simplify code | * 408dbaa065 extcon: usbc-tusb320: Call the Type-C IRQ handler only if a port is registered | * 2471a44769 media: dvbdev: fix refcnt bug | * 579fb0a332 media: dvbdev: fix build warning due to comments | * 1115e77c4f net: stmmac: fix errno when create_singlethread_workqueue() fails | * d3871af13a scsi: qla2xxx: Fix crash when I/O abort times out | * 50f993da94 btrfs: do not BUG_ON() on ENOMEM when dropping extent items for a range | * 1c65d50315 ovl: fix use inode directly in rcu-walk mode | * 88ec6d1105 fbdev: fbcon: release buffer when fbcon_do_set_font() failed | * ca8bcb348a gcov: add support for checksum field | * f36d8c8651 floppy: Fix memory leak in do_floppy_init() | * 4193a6745b regulator: core: fix deadlock on regulator enable | * ce5d0ef1cf iio: adc128s052: add proper .data members in adc128_of_match table | * aec1058f2a iio: adc: ad_sigma_delta: do not use internal iio_dev lock | * dc6afd6070 iio: fix memory leak in iio_device_register_eventset() | * 38c257ee6a reiserfs: Add missing calls to reiserfs_security_free() | * 8a4236456a security: Restrict CONFIG_ZERO_CALL_USED_REGS to gcc or clang > 15.0.6 | * 1cabce5662 9p: set req refcount to zero to avoid uninitialized usage | * dd2157a98f loop: Fix the max_loop commandline argument treatment when it is set to 0 | * fd03bd4c7b HID: mcp2221: don't connect hidraw | * 6c886be1ff HID: wacom: Ensure bootloader PID is usable in hidraw mode | * 4d640eb112 xhci: Prevent infinite loop in transaction errors recovery for streams | * 936c5f96c8 usb: dwc3: core: defer probe on ulpi_read_id timeout | * e6bf6c4022 usb: dwc3: Fix race between dwc3_set_mode and __dwc3_set_mode | * 0e883f3bc8 arm64: dts: qcom: sm8250: fix USB-DP PHY registers | * ffb14aac26 usb: xhci-mtk: fix leakage of shared hcd when fail to set wakeup irq | * fcacd970e0 usb: cdnsp: fix lack of ZLP for ep0 | * bcac79df08 ALSA: hda/hdmi: Add HP Device 0x8711 to force connect list | * 50c23a1107 ALSA: hda/realtek: Add quirk for Lenovo TianYi510Pro-14IOB | * 76574b3465 ALSA: usb-audio: add the quirk for KT0206 device | * 9e787dab98 ima: Simplify ima_lsm_copy_rule | * 2cd365029c pstore: Make sure CONFIG_PSTORE_PMSG selects CONFIG_RT_MUTEXES | * 2068d41a3d afs: Fix lost servers_outstanding count | * 0def8af038 perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() | * 41cccae10e pstore: Switch pmsg_lock to an rt_mutex to avoid priority inversion | * 8877df8135 LoadPin: Ignore the "contents" argument of the LSM hooks | * 584202b0f1 drm/i915/display: Don't disable DDI/Transcoder when setting phy test pattern | * b253e075b1 ASoC: rt5670: Remove unbalanced pm_runtime_put() | * 59f797a913 ASoC: rockchip: spdif: Add missing clk_disable_unprepare() in rk_spdif_runtime_resume() | * 132844d92f ASoC: wm8994: Fix potential deadlock | * 82f7c814ed ASoC: mediatek: mt8183: fix refcount leak in mt8183_mt6358_ts3a227_max98357_dev_probe() | * e5d6bf3e5a ASoC: rockchip: pdm: Add missing clk_disable_unprepare() in rockchip_pdm_runtime_resume() | * 85eb5c952b ASoC: audio-graph-card: fix refcount leak of cpu_ep in __graph_for_each_link() | * 9ff07316ca ASoC: mediatek: mt8173-rt5650-rt5514: fix refcount leak in mt8173_rt5650_rt5514_dev_probe() | * 7643909cf0 ASoC: Intel: Skylake: Fix driver hang during shutdown | * 33ff0f9f9c ALSA: hda: add snd_hdac_stop_streams() helper | * 78649a624d ALSA/ASoC: hda: move/rename snd_hdac_ext_stop_streams to hdac_stream.c | * 98b0f50fec hwmon: (jc42) Fix missing unlock on error in jc42_write() | * 5e69233508 KVM: selftests: Fix build regression by using accessor function | * 6215904fe2 tools/include: Add _RET_IP_ and math definitions to kernel.h | * c885326728 orangefs: Fix kmemleak in orangefs_{kernel,client}_debug_init() | * 39529b79b0 orangefs: Fix kmemleak in orangefs_prepare_debugfs_help_string() | * a075c21ee0 drm/sti: Fix return type of sti_{dvo,hda,hdmi}_connector_mode_valid() | * f3c14b99f3 drm/fsl-dcu: Fix return type of fsl_dcu_drm_connector_mode_valid() | * 9a8862820c hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param() | * 4f6b206998 scsi: elx: libefc: Fix second parameter type in state callbacks | * 23f0e9f863 scsi: ufs: Reduce the START STOP UNIT timeout | * 2cf66428a2 scsi: lpfc: Fix hard lockup when reading the rx_monitor from debugfs | * 2b3e3ecdb4 crypto: hisilicon/hpre - fix resource leak in remove process | * adf6a00859 clk: st: Fix memory leak in st_of_quadfs_setup() | * 6c8aee0c8f media: si470x: Fix use-after-free in si470x_int_in_callback() | * 58b6496a74 mmc: renesas_sdhi: better reset from HS400 mode | * c33c904124 mmc: f-sdh30: Add quirks for broken timeout clock capability | * 69346de0eb wifi: mt76: do not run mt76u_status_worker if the device is not running | * feb847e659 regulator: core: fix use_count leakage when handling boot-on | * 474e70bd90 libbpf: Avoid enum forward-declarations in public API in C++ mode | * 6209542869 drm/amd/display: Use the largest vready_offset in pipe group | * eff45bfbc2 blk-mq: fix possible memleak when register 'hctx' failed | * d0af6220bb media: dvb-usb: fix memory leak in dvb_usb_adapter_init() | * 88a6f8a72d media: dvbdev: adopts refcnt to avoid UAF | * 438cd29fec media: dvb-frontends: fix leak of memory fw | * a96841f5aa ethtool: avoiding integer overflow in ethtool_phys_id() | * b327c68ace bpf: Prevent decl_tag from being referenced in func_proto arg | * 4b8f3b9392 ppp: associate skb with a device at tx | * 5d5a481a7f mrp: introduce active flags to prevent UAF when applicant uninit | * 222cc04356 ipv6/sit: use DEV_STATS_INC() to avoid data-races | * 8a3b023710 net: add atomic_long_t to net_device_stats fields | * 58dd11f624 drm/amd/display: fix array index out of bound error in bios parser | * a3cc41e05e md/raid1: stop mdx_raid1 thread when raid1 array run failed | * b621d17fe8 drivers/md/md-bitmap: check the return value of md_bitmap_get_counter() | * 5afac74f15 drm/mediatek: Fix return type of mtk_hdmi_bridge_mode_valid() | * 072508e99d drm/sti: Use drm_mode_copy() | * 673a3e0199 drm/rockchip: Use drm_mode_copy() | * b9b07900d2 drm/msm: Use drm_mode_copy() | * 5ad774fb82 s390/lcs: Fix return type of lcs_start_xmit() | * dfbf0122ea s390/netiucv: Fix return type of netiucv_tx() | * 8131d1880c s390/ctcm: Fix return type of ctc{mp,}m_tx() | * f9084e9930 drm/amdgpu: Fix type of second parameter in odn_edit_dpm_table() callback | * b74580d618 drm/amdgpu: Fix type of second parameter in trans_msg() callback | * 314f7092b2 igb: Do not free q_vector unless new one was allocated | * 0b12d2aa26 wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmf_fw_alloc_request() | * 19bb9e98e1 hamradio: baycom_epp: Fix return type of baycom_send_packet() | * a413ebb604 net: ethernet: ti: Fix return type of netcp_ndo_start_xmit() | * 5d3f4478d2 bpf: make sure skb->len != 0 when redirecting to a tunneling device | * be2803dd29 qed (gcc13): use u16 for fid to be big enough | * a8bc0ac438 Revert "drm/amd/display: Limit max DSC target bpp for specific monitors" | * cc8deb82cc drm/amd/display: prevent memory leak | * 49dd0e8029 ipmi: fix memleak when unload ipmi driver | * 68871c005f ASoC: codecs: rt298: Add quirk for KBL-R RVP platform | * 3eca9697c2 wifi: ar5523: Fix use-after-free on ar5523_cmd() timed out | * c319196a0e wifi: ath9k: verify the expected usb_endpoints are present | * 10c4b63d09 brcmfmac: return error when getting invalid max_flowrings from dongle | * ad31bc146f media: imx-jpeg: Disable useless interrupt to avoid kernel panic | * 6e1a6880e1 drm/etnaviv: add missing quirks for GC300 | * 367296925c hfs: fix OOB Read in __hfs_brec_find | * ebe16676e1 acct: fix potential integer overflow in encode_comp_t() | * 8b6ef451b5 nilfs2: fix shift-out-of-bounds due to too large exponent of block size | * b47f5c579c nilfs2: fix shift-out-of-bounds/overflow in nilfs_sb2_bad_offset() | * 5777432eba ACPICA: Fix error code path in acpi_ds_call_control_method() | * 10b87da8fa fs: jfs: fix shift-out-of-bounds in dbDiscardAG | * 5059ea84a8 jfs: Fix fortify moan in symlink | * e7a6a53c87 udf: Avoid double brelse() in udf_rename() | * 0536f76a2b fs: jfs: fix shift-out-of-bounds in dbAllocAG | * 88cea1676a binfmt_misc: fix shift-out-of-bounds in check_special_flags | * cadb938a5e x86/hyperv: Remove unregister syscore call from Hyper-V cleanup | * 659747f6f6 video: hyperv_fb: Avoid taking busy spinlock on panic path | * 9d05c20b0a arm64: make is_ttbrX_addr() noinstr-safe | * 98a5b1265a rcu: Fix __this_cpu_read() lockdep warning in rcu_force_quiescent_state() | * d238f94b2b HID: amd_sfh: Add missing check for dma_alloc_coherent | * 9da204cd67 net: stream: purge sk_error_queue in sk_stream_kill_queues() | * f47426250f myri10ge: Fix an error handling path in myri10ge_probe() | * 1ec0a7d5b0 rxrpc: Fix missing unlock in rxrpc_do_sendmsg() | * 5478eb7adc net_sched: reject TCF_EM_SIMPLE case for complex ematch module | * 4f05d8e2fb mailbox: zynq-ipi: fix error handling while device_register() fails | * 550f403e46 mailbox: arm_mhuv2: Fix return value check in mhuv2_probe() | * 28604a960c mailbox: mpfs: read the system controller's status | * 8fb773eed4 skbuff: Account for tail adjustment during pull operations | * dc0f38957a arm64: dts: mt8183: Fix Mali GPU clock | * 790b396f6b soc: mediatek: pm-domains: Fix the power glitch issue | * 0133615a06 openvswitch: Fix flow lookup to use unmasked key | * 04e454bd97 selftests: devlink: fix the fd redirect in dummy_reporter_test | * d52646a46c rtc: mxc_v2: Add missing clk_disable_unprepare() | * ac95c4e35f igc: Set Qbv start_time and end_time to end_time if not being configured in GCL | * af59985138 igc: Lift TAPRIO schedule restriction | * 4d50d640ed igc: recalculate Qbv end_time by considering cycle time | * 1ef9416957 igc: allow BaseTime 0 enrollment for Qbv | * c0df8e7ba6 igc: Add checking for basetime less than zero | * 5b46b53f45 igc: Use strict cycles for Qbv scheduling | * fd7d029436 igc: Enhance Qbv scheduling by using first flag bit | * 9b5b50329e r6040: Fix kmemleak in probe and remove | * 1b428ba31b unix: Fix race in SOCK_SEQPACKET's unix_dgram_sendmsg() | * aae9c24ebd nfc: pn533: Clear nfc_target before being used | * bcf2c1dc53 net: enetc: avoid buffer leaks on xdp_do_redirect() failure | * f463a1295c selftests/bpf: Add test for unstable CT lookup API | * 094f3d9314 block, bfq: fix possible uaf for 'bfqq->bic' | * cf48cb8deb mISDN: hfcmulti: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() | * 5607353751 mISDN: hfcpci: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() | * ada4022f48 mISDN: hfcsusb: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() | * 0578f9929f net: macsec: fix net device access prior to holding a lock | * a472f069ce nfsd: under NFSv4.1, fix double svc_xprt_put on rpc_create failure | * f8f1d037d6 rtc: pcf85063: fix pcf85063_clkout_control | * 35a174552b rtc: pic32: Move devm_rtc_allocate_device earlier in pic32_rtc_probe() | * eea105c4e4 rtc: st-lpc: Add missing clk_disable_unprepare in st_rtc_probe() | * 74248b5560 netfilter: flowtable: really fix NAT IPv6 offload | * 5c940632ca mfd: pm8008: Fix return value check in pm8008_probe() | * ec10848e26 mfd: pm8008: Remove driver data structure pm8008_data | * 38959417d3 mfd: qcom_rpm: Fix an error handling path in qcom_rpm_probe() | * b95ae3543e mfd: bd957x: Fix Kconfig dependency on REGMAP_IRQ | * 615d3c8a46 powerpc/pseries/eeh: use correct API for error log size | * 68de42e008 powerpc/eeh: Drop redundant spinlock initialization | * 2b157b4b13 remoteproc: qcom: q6v5: Fix missing clk_disable_unprepare() in q6v5_wcss_qcs404_power_on() | * 4b191533f5 remoteproc: qcom_q6v5_pas: Fix missing of_node_put() in adsp_alloc_memory_region() | * d7628ebca8 remoteproc: qcom_q6v5_pas: detach power domains on remove | * fdf47f462a remoteproc: qcom_q6v5_pas: disable wakeup on probe fail or remove | * 098ebb9089 remoteproc: qcom: q6v5: Fix potential null-ptr-deref in q6v5_wcss_init_mmio() | * 131c0a3ead remoteproc: sysmon: fix memory leak in qcom_add_sysmon_subdev() | * 4507c6a672 pwm: mediatek: always use bus clock for PWM on MT7622 | * 4fbbb14f0e pwm: mtk-disp: Fix the parameters calculated by the enabled flag of disp_pwm | * eec59807a2 pwm: sifive: Call pwm_sifive_update_clock() while mutex is held | * 37ea9a6c41 iommu/sun50i: Remove IOMMU_DOMAIN_IDENTITY | * 8de2c29db6 selftests/powerpc: Fix resource leaks | * dd49c5031e powerpc/hv-gpci: Fix hv_gpci event list | * 65d3469f3b powerpc/83xx/mpc832x_rdb: call platform_device_put() in error case in of_fsl_spi_probe() | * cf03db2896 powerpc/perf: callchain validate kernel stack pointer bounds | * 5de1902244 powerpc/xive: add missing iounmap() in error path in xive_spapr_populate_irq_data() | * b31e9647f1 powerpc/xmon: Fix -Wswitch-unreachable warning in bpt_cmds | * 6a310e8db5 cxl: Fix refcount leak in cxl_calc_capp_routing | * 0accd460dc powerpc/52xx: Fix a resource leak in an error handling path | * be2b9b1a60 macintosh/macio-adb: check the return value of ioremap() | * 19ded60b40 macintosh: fix possible memory leak in macio_add_one_device() | * e42b543d08 iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe() | * 6e501b3fd7 iommu/amd: Fix pci device refcount leak in ppr_notifier() | * 9383921e8b rtc: pcf85063: Fix reading alarm | * b66aa7b306 rtc: snvs: Allow a time difference on clock register read | * 7a6cc22eab rtc: cmos: Disable ACPI RTC event on removal | * 689f757f0a rtc: cmos: Rename ACPI-related functions | * 1c74bbecda rtc: cmos: Eliminate forward declarations of some functions | * 3a439a2cab rtc: cmos: Call rtc_wake_setup() from cmos_do_probe() | * 9febdff75c rtc: cmos: Call cmos_wake_setup() from cmos_do_probe() | * d9324fb3ee rtc: cmos: fix build on non-ACPI platforms | * fe46b9303e rtc: cmos: Fix wake alarm breakage | * 60c6e563a8 rtc: cmos: Fix event handler registration ordering issue | * d3aa083469 rtc: rtc-cmos: Do not check ACPI_FADT_LOW_POWER_S0 | * 6e98a93c75 dmaengine: idxd: Fix crc_val field for completion record | * ab53749c32 fs/ntfs3: Fix slab-out-of-bounds read in ntfs_trim_fs | * 1ba0968b33 pwm: tegra: Improve required rate calculation | * c160505c9b include/uapi/linux/swab: Fix potentially missing __always_inline | * 59463193b0 phy: usb: s2 WoL wakeup_count not incremented for USB->Eth devices | * ae00848e55 iommu/rockchip: fix permission bits in page table entries v2 | * a7f6ad2c42 iommu/sun50i: Fix flush size | * 38ccb9b469 iommu/sun50i: Fix R/W permission check | * ae4ab47a0b iommu/sun50i: Consider all fault sources for reset | * 84fee3ce82 iommu/sun50i: Fix reset release | * 6f9fe31a48 fs/ntfs3: Harden against integer overflows | * 30f20ceb87 overflow: Implement size_t saturating arithmetic helpers | * 4b51f27d44 fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst() | * 28f345bec7 RDMA/siw: Fix pointer cast warning | * 01d925e2a5 perf stat: Do not delay the workload with --delay | * a273f1dd5d perf stat: Refactor __run_perf_stat() common code | * d21534ab4f power: supply: fix null pointer dereferencing in power_supply_get_battery_info | * d4898d8de6 power: supply: ab8500: Fix error handling in ab8500_charger_init() | * 30b191798f HSI: omap_ssi_core: Fix error handling in ssi_init() | * a72fe8eb55 power: supply: z2_battery: Fix possible memleak in z2_batt_probe() | * 5ba0e8fa15 perf symbol: correction while adjusting symbol | * a34027b63d perf trace: Handle failure when trace point folder is missed | * 60aeacce64 perf trace: Use macro RAW_SYSCALL_ARGS_NUM to replace number | * e4700f62dc perf trace: Return error if a system call doesn't exist | * 870ad0917d power: supply: fix residue sysfs file in error handle route of __power_supply_register() | * 1c2b9c8100 HSI: omap_ssi_core: fix possible memory leak in ssi_probe() | * c5f729d3d6 HSI: omap_ssi_core: fix unbalanced pm_runtime_disable() | * ea37831f83 fbdev: uvesafb: Fixes an error handling path in uvesafb_probe() | * 5bcae36b58 fbdev: uvesafb: don't build on UML | * 07c1a3c2df fbdev: geode: don't build on UML | * ace8312b5d fbdev: ep93xx-fb: Add missing clk_disable_unprepare in ep93xxfb_probe() | * 04946113fb fbdev: vermilion: decrease reference count in error path | * fc0d5034fa fbdev: via: Fix error in via_core_init() | * 9827246333 fbdev: pm2fb: fix missing pci_disable_device() | * 3aa4205134 fbdev: ssd1307fb: Drop optional dependency | * 4958316a6d thermal/drivers/qcom/lmh: Fix irq handler return value | * ad72205ac6 thermal/drivers/qcom/temp-alarm: Fix inaccurate warning for gen2 | * 37fb4e13d2 thermal/drivers/imx8mm_thermal: Validate temperature range | * 95c18f4a3c samples: vfio-mdev: Fix missing pci_disable_device() in mdpy_fb_probe() | * 31c1b5d300 ksmbd: Fix resource leak in ksmbd_session_rpc_open() | * a44102d36a tracing/hist: Fix issue of losting command info in error_log | * 8308ccfcbd usb: storage: Add check for kcalloc | * 96c12fd0ec i2c: ismt: Fix an out-of-bounds bug in ismt_access() | * 8212800943 i2c: mux: reg: check return value after calling platform_get_resource() | * 46d8f63bb8 gpiolib: protect the GPIO device against being dropped while in use by user-space | * 333a271dfd gpiolib: make struct comments into real kernel docs | * 7c755a2d6d gpiolib: cdev: fix NULL-pointer dereferences | * b0a26e1999 gpiolib: Get rid of redundant 'else' | * 4bc217b25e vme: Fix error not catched in fake_init() | * 31bfe024a9 staging: rtl8192e: Fix potential use-after-free in rtllib_rx_Monitor() | * b0aaec894a staging: rtl8192u: Fix use after free in ieee80211_rx() | * ed4580c3f8 i2c: pxa-pci: fix missing pci_disable_device() on error in ce4100_i2c_probe | * 28dc61cc49 chardev: fix error handling in cdev_device_add() | * 43bfc7c240 mcb: mcb-parse: fix error handing in chameleon_parse_gdd() | * f3686e5e8d drivers: mcb: fix resource leak in mcb_probe() | * 9d4a0aca8a usb: gadget: f_hid: fix refcount leak on error path | * d3136b7970 usb: gadget: f_hid: fix f_hidg lifetime vs cdev | * a41c2bba7f usb: roles: fix of node refcount leak in usb_role_switch_is_parent() | * 18b9202188 coresight: trbe: remove cpuhp instance node before remove cpuhp state | * e854a4ab38 counter: stm32-lptimer-cnt: fix the check on arr and cmp registers update | * 39a156715f iio: adis: add '__adis_enable_irq()' implementation | * 3a2dde8e5d iio:imu:adis: Move exports into IIO_ADISLIB namespace | * 3c2e13025b iio: adis: stylistic changes | * de3e358912 iio: adis: handle devices that cannot unmask the drdy pin | * 994243de7a iio: temperature: ltc2983: make bulk write buffer DMA-safe | * 22511eefa6 cxl: fix possible null-ptr-deref in cxl_pci_init_afu|adapter() | * e5021bbf11 cxl: fix possible null-ptr-deref in cxl_guest_init_afu|adapter() | * b308fdedef firmware: raspberrypi: fix possible memory leak in rpi_firmware_probe() | * d5c8f9003a misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os | * 848c45964d misc: tifm: fix possible memory leak in tifm_7xx1_switch_media() | * 37a13b274e ocxl: fix pci device refcount leak when calling get_function_0() | * 3299983a6b misc: ocxl: fix possible name leak in ocxl_file_register_afu() | * 357379d504 test_firmware: fix memory leak in test_firmware_init() | * 07d547d742 serial: sunsab: Fix error handling in sunsab_init() | * 919e745fdd serial: altera_uart: fix locking in polling mode | * e1c4f18214 tty: serial: altera_uart_{r,t}x_chars() need only uart_port | * b133b45ba6 tty: serial: clean up stop-tx part in altera_uart_tx_chars() | * 6f7d82380f serial: pch: Fix PCI device refcount leak in pch_request_dma() | * 0dfc7dfe5b serial: stm32: move dma_request_chan() before clk_prepare_enable() | * 926b0967f7 serial: pl011: Do not clear RX FIFO & RX interrupt in unthrottle. | * d71a611fca serial: amba-pl011: avoid SBSA UART accessing DMACR register | * f46f9d2e16 extcon: usbc-tusb320: Update state on probe even if no IRQ pending | * ac067e75c4 extcon: usbc-tusb320: Add USB TYPE-C support | * 9280761167 extcon: usbc-tusb320: Factor out extcon into dedicated functions | * 05aa8ff22d usb: typec: Factor out non-PD fwnode properties | * 31e9c27510 extcon: usbc-tusb320: Add support for TUSB320L | * b9c8820d91 extcon: usbc-tusb320: Add support for mode setting and reset | * 4524599a6a usb: typec: tipd: Fix spurious fwnode_handle_put in error path | * b0d86eacc8 usb: typec: tipd: Cleanup resources if devm_tps6598_psy_register fails | * ba75be6f0d usb: typec: tcpci: fix of node refcount leak in tcpci_register_port() | * 154d5713a2 usb: typec: Check for ops->exit instead of ops->enter in altmode_exit | * 1f5661388f staging: vme_user: Fix possible UAF in tsi148_dma_list_add | * a3c4bc2616 usb: fotg210-udc: Fix ages old endianness issues | * 5e87d41221 uio: uio_dmem_genirq: Fix deadlock between irq config and handling | * 79a4bdb6b9 uio: uio_dmem_genirq: Fix missing unlock in irq configuration | * 3f22a273ef vfio: platform: Do not pass return buffer to ACPI _RST method | * 417ef049e3 class: fix possible memory leak in __class_register() | * f76824ab2b serial: 8250_bcm7271: Fix error handling in brcmuart_init() | * 6b4424efcf serial: tegra: Read DMA status before terminating | * a0ead7e8da drivers: dio: fix possible memory leak in dio_init() | * e8985caf05 RISC-V: Align the shadow stack | * ca48174a76 IB/IPoIB: Fix queue count inconsistency for PKEY child interfaces | * 82bd423ed9 hwrng: geode - Fix PCI device refcount leak | * 2b79a5e560 hwrng: amd - Fix PCI device refcount leak | * 42cbff35f4 crypto: img-hash - Fix variable dereferenced before check 'hdev->req' | * b9634f99b6 RDMA/hns: Fix error code of CMD | * b06bb747ce RDMA/hns: Fix page size cap from firmware | * 4c05c7cf25 RDMA/hns: Fix PBL page MTR find | * fa267c4192 RDMA/hns: Fix AH attr queried by query_qp | * e27fb26e75 orangefs: Fix sysfs not cleanup when dev init failed | * 3e9c395ef2 PCI: mt7621: Add sentinel to quirks table | * bcc65c2e2a PCI: mt7621: Rename mt7621_pci_ to mt7621_pcie_ | * 0a7eab1cc4 RDMA/srp: Fix error return code in srp_parse_options() | * 6301100179 RDMA/hfi1: Fix error return code in parse_platform_config() | * 339ca035af riscv/mm: add arch hook arch_clear_hugepage_flags | * 20d363dcd6 crypto: omap-sham - Use pm_runtime_resume_and_get() in omap_sham_probe() | * 815b65d714 crypto: amlogic - Remove kcalloc without check | * af71199291 RDMA/nldev: Fix failure to send large messages | * bb895786a4 f2fs: avoid victim selection from previous victim section | * 655e955deb RDMA/nldev: Add checks for nla_nest_start() in fill_stat_counter_qps() | * 1895e908b3 scsi: snic: Fix possible UAF in snic_tgt_create() | * 09a60f908d scsi: fcoe: Fix transport not deattached when fcoe_if_init() fails | * e59da17205 scsi: ipr: Fix WARNING in ipr_init() | * c444f58fda scsi: scsi_debug: Fix possible name leak in sdebug_add_host_helper() | * 4e4968dfb5 scsi: fcoe: Fix possible name leak when device_register() fails | * 0f5006d7d1 scsi: scsi_debug: Fix a warning in resp_report_zones() | * 2432719b1a scsi: scsi_debug: Fix a warning in resp_verify() | * 038359eecc scsi: efct: Fix possible memleak in efct_device_init() | * 23053a7926 scsi: hpsa: Fix possible memory leak in hpsa_add_sas_device() | * 2ab6d5927c scsi: hpsa: Fix error handling in hpsa_add_sas_host() | * 6a92129c8f scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add() | * 26c0f7e1ac padata: Fix list iterator in padata_do_serial() | * 17afa98bcc padata: Always leave BHs disabled when running ->parallel() | * 221afb2a1b crypto: tcrypt - Fix multibuffer skcipher speed test mem leak | * bfe10a1d9f scsi: hpsa: Fix possible memory leak in hpsa_init_one() | * 38ef0c0b09 dt-bindings: visconti-pcie: Fix interrupts array max constraints | * 83aad8111b dt-bindings: imx6q-pcie: Fix clock names for imx6sx and imx8mq | * f64f08b9e6 RDMA/rxe: Fix NULL-ptr-deref in rxe_qp_do_cleanup() when socket create failed | * 35f9cd060e RDMA/hns: fix memory leak in hns_roce_alloc_mr() | * 6d5220a553 crypto: ccree - Make cc_debugfs_global_fini() available for module init function | * 2e9cf3e783 RDMA/hfi: Decrease PCI device reference count in error path | * 7f476d639c PCI: Check for alloc failure in pci_request_irq() | * 49bc2be897 RDMA/hns: Fix ext_sge num error when post send | * 0e6160d79d RDMA/hns: Repacing 'dseg_len' by macros in fill_ext_sge_inl_data() | * e5ea48788e crypto: hisilicon/qm - add missing pci_dev_put() in q_num_set() | * 442caec12f crypto: cryptd - Use request context instead of stack for sub-request | * ab677729fc crypto: ccree - Remove debugfs when platform_driver_register failed | * 0328ca389a scsi: scsi_debug: Fix a warning in resp_write_scat() | * 1ba8ecb664 RDMA/siw: Set defined status for work completion with undefined status | * 6e757005ba RDMA/nldev: Return "-EAGAIN" if the cm_id isn't from expected port | * f981c697b2 RDMA/core: Make sure "ib_port" is valid when access sysfs node | * 13586753ae RDMA/restrack: Release MR restrack when delete | * 6e78ca677f PCI: vmd: Disable MSI remapping after suspend | * 47e31b86ed IB/mad: Don't call to function that might sleep while in atomic context | * f8d8fbd3b6 RDMA/siw: Fix immediate work request flush to completion queue | * 2a26849d79 scsi: qla2xxx: Fix set-but-not-used variable warnings | * 799ed37559 RDMA/irdma: Report the correct link speed | * d40d1b1c61 f2fs: fix to destroy sbi->post_read_wq in error path of f2fs_fill_super() | * 847f725006 f2fs: fix normal discard process | * 865bb7b5a7 f2fs: fix to invalidate dcc->f2fs_issue_discard in error path | * 5f509fa740 apparmor: Fix memleak in alloc_ns() | * 46f3cb83e4 crypto: rockchip - rework by using crypto_engine | * 3ed0548d39 crypto: rockchip - remove non-aligned handling | * 5562009f5f crypto: rockchip - better handle cipher key | * 26f3971356 crypto: rockchip - add fallback for ahash | * 34fe54af3c crypto: rockchip - add fallback for cipher | * 314217591e crypto: rockchip - do not store mode globally | * 853cd97d2b crypto: rockchip - do not do custom power management | * d5100272e4 f2fs: Fix the race condition of resize flag between resizefs | * db72c5dffc PCI: pci-epf-test: Register notifier if only core_init_notifier is enabled | * 26ffeff67b RDMA/core: Fix order of nldev_exit call | * a00a7ac251 PCI: dwc: Fix n_fts[] array overrun | * 10ae636115 apparmor: Use pointer to struct aa_label for lbs_cred | * 8d50ccfbe2 scsi: core: Fix a race between scsi_done() and scsi_timeout() | * 9bdf3a59b3 crypto: nitrox - avoid double free on error path in nitrox_sriov_init() | * 7efc0d39ee crypto: sun8i-ss - use dma_addr instead u32 | * aaef0bdd7a crypto: hisilicon/qm - fix missing destroy qp_idr | * d567776ae2 apparmor: Fix abi check to include v8 abi | * bc9d2cbbdc apparmor: fix lockdep warning when removing a namespace | * 775a37ffa9 apparmor: fix a memleak in multi_transaction_new() | * 09f30f394e net: dsa: tag_8021q: avoid leaking ctx on dsa_tag_8021q_register() error path | * 86664b8652 i40e: Fix the inability to attach XDP program on downed interface | * 0abd337acd stmmac: fix potential division by 0 | * 93a4a04558 Bluetooth: RFCOMM: don't call kfree_skb() under spin_lock_irqsave() | * 8d6bbe5241 Bluetooth: hci_core: don't call kfree_skb() under spin_lock_irqsave() | * 804de4e24a Bluetooth: hci_bcsp: don't call kfree_skb() under spin_lock_irqsave() | * 1030c3aeee Bluetooth: hci_h5: don't call kfree_skb() under spin_lock_irqsave() | * 9fcb5b367e Bluetooth: hci_ll: don't call kfree_skb() under spin_lock_irqsave() | * 14cc94a598 Bluetooth: hci_qca: don't call kfree_skb() under spin_lock_irqsave() | * 06467130d5 Bluetooth: btusb: don't call kfree_skb() under spin_lock_irqsave() | * e52b7d460a Bluetooth: btintel: Fix missing free skb in btintel_setup_combined() | * f7c9de3bcf Bluetooth: MGMT: Fix error report for ADD_EXT_ADV_PARAMS | * 2addf3cb63 sctp: sysctl: make extra pointers netns aware | * 21296a52ca ntb_netdev: Use dev_kfree_skb_any() in interrupt context | * 0fff763f11 net: lan9303: Fix read error execution path | * 882bad40a0 can: tcan4x5x: Fix use of register error status mask | * d50092f662 can: m_can: Call the RAM init directly from m_can_chip_config | * 55064642aa can: tcan4x5x: Remove invalid write in clear_interrupts | * 641eef8766 net: amd-xgbe: Check only the minimum speed for active/passive cables | * 60b35e28dc net: amd-xgbe: Fix logic around active and passive cables | * d436bf39f4 af_unix: call proto_unregister() in the error path in af_unix_init() | * ee9d03bf89 net: amd: lance: don't call dev_kfree_skb() under spin_lock_irqsave() | * 6f1c4c01cc hamradio: don't call dev_kfree_skb() under spin_lock_irqsave() | * eb2c6a6e8f net: ethernet: dnet: don't call dev_kfree_skb() under spin_lock_irqsave() | * ef08e1082c net: emaclite: don't call dev_kfree_skb() under spin_lock_irqsave() | * 2786ef4066 net: apple: bmac: don't call dev_kfree_skb() under spin_lock_irqsave() | * d81314e2dd net: apple: mace: don't call dev_kfree_skb() under spin_lock_irqsave() | * 9a6544343b net/tunnel: wait until all sk_user_data reader finish before releasing the sock | * 998b4e54f5 net: farsync: Fix kmemleak when rmmods farsync | * 71605c6906 ethernet: s2io: don't call dev_kfree_skb() under spin_lock_irqsave() | * ce1b3a41e7 of: overlay: fix null pointer dereferencing in find_dup_cset_node_entry() and find_dup_cset_prop() | * 8399b98935 drivers: net: qlcnic: Fix potential memory leak in qlcnic_sriov_init() | * 96e5089702 net: stmmac: fix possible memory leak in stmmac_dvr_probe() | * ecaf934e44 net: stmmac: selftests: fix potential memleak in stmmac_test_arpoffload() | * e1359bc90a net: defxx: Fix missing err handling in dfx_init() | * c65603abc3 net: vmw_vsock: vmci: Check memcpy_from_msg() | * 9de42116fc clk: socfpga: Fix memory leak in socfpga_gate_init() | * e515881ade bpf: Do not zero-extend kfunc return values | * ce61a877c7 blktrace: Fix output non-blktrace event when blk_classic option enabled | * f2ae56fa0b wifi: brcmfmac: Fix error return code in brcmf_sdio_download_firmware() | * 23060daf37 wifi: rtl8xxxu: Fix the channel width reporting | * 6d0e00334e wifi: rtl8xxxu: Add __packed to struct rtl8723bu_c2h | * e69d380650 spi: spi-gpio: Don't set MOSI as an input if not 3WIRE mode | * 4e501a31af clk: samsung: Fix memory leak in _samsung_clk_register_pll() | * 441c05485c media: coda: Add check for kmalloc | * b99872178e media: coda: Add check for dcoda_iram_alloc | * fbf081ebe2 media: c8sectpfe: Add of_node_put() when breaking out of loop | * 2a7330d820 regulator: qcom-labibb: Fix missing of_node_put() in qcom_labibb_regulator_probe() | * ecf1b317a8 mmc: core: Normalize the error handling branch in sd_read_ext_regs() | * 7fecca429e memstick/ms_block: Add check for alloc_ordered_workqueue | * b77ced3fce memstick: ms_block: Add error handling support for add_disk() | * ae00eb6779 mmc: renesas_sdhi: alway populate SCC pointer | * 88fa6a4e39 mmc: mmci: fix return value check of mmc_add_host() | * 29c3690969 mmc: wbsd: fix return value check of mmc_add_host() | * 0959cc1685 mmc: via-sdmmc: fix return value check of mmc_add_host() | * e0cfe7aa41 mmc: meson-gx: fix return value check of mmc_add_host() | * 62005dfcc3 mmc: omap_hsmmc: fix return value check of mmc_add_host() | * 1925472dec mmc: atmel-mci: fix return value check of mmc_add_host() | * 58c3a8d0f1 mmc: wmt-sdmmc: fix return value check of mmc_add_host() | * afc898019e mmc: vub300: fix return value check of mmc_add_host() | * 6444079767 mmc: toshsd: fix return value check of mmc_add_host() | * df683201c7 mmc: rtsx_usb_sdmmc: fix return value check of mmc_add_host() | * 30dc645461 mmc: rtsx_pci: fix return value check of mmc_add_host() | * bc7e8744f5 mmc: pxamci: fix return value check of mmc_add_host() | * 2d496050de mmc: mxcmmc: fix return value check of mmc_add_host() | * f0502fe86a mmc: moxart: fix return value check of mmc_add_host() | * 29c5b4da41 mmc: alcor: fix return value check of mmc_add_host() | * 52e0d8a8dd riscv, bpf: Emit fixed-length instructions for BPF_PSEUDO_FUNC | * 0de70ed675 NFSv4.x: Fail client initialisation if state manager thread can't run | * 7055c878a0 SUNRPC: Fix missing release socket in rpc_sockname() | * 79d4cd40da xprtrdma: Fix regbuf data not freed in rpcrdma_req_create() | * cba633b24a ALSA: mts64: fix possible null-ptr-defer in snd_mts64_interrupt | * 9018550d96 media: saa7164: fix missing pci_disable_device() | * 2df1e2a6ec ALSA: pcm: Set missing stop_operating flag at undoing trigger start | * a443c55d96 bpf, sockmap: fix race in sock_map_free() | * 5229b90337 hwmon: (jc42) Restore the min/max/critical temperatures on resume | * 785f5c732a hwmon: (jc42) Convert register access and caching to regmap/regcache | * c4c64d8abd regulator: core: fix resource leak in regulator_register() | * 07f82dca11 configfs: fix possible memory leak in configfs_create_dir() | * 21a061772b hsr: Synchronize sequence number updates. | * a82f5b2e08 hsr: Synchronize sending frames to have always incremented outgoing seq nr. | * bb3b40cd6a hsr: Disable netpoll. | * 8e148d981b hsr: Avoid double remove of a node. | * 9387cbf7f7 hsr: Add a rcu-read lock to hsr_forward_skb(). | * a051e10bfc clk: qcom: clk-krait: fix wrong div2 functions | * 8275c7465d clk: qcom: lpass-sc7180: Fix pm_runtime usage | * 91657ec4d0 regulator: core: fix module refcount leak in set_supply() | * 66976a3be9 wifi: mt76: fix coverity overrun-call in mt76_get_txpower() | * a21e3f6f41 wifi: mt76: mt7921: fix reporting of TX AGGR histogram | * c8659018b6 mt76: stop the radar detector after leaving dfs channel | * ae19622e7f wifi: cfg80211: Fix not unregister reg_pdev when load_builtin_regdb_keys() fails | * 2e32f12998 wifi: mac80211: fix memory leak in ieee80211_if_add() | * f58888434d spi: spidev: mask SPI_CS_HIGH in SPI_IOC_RD_MODE | * b6d27d9250 bonding: uninitialized variable in bond_miimon_inspect() | * 7201e4f4f5 bpf, sockmap: Fix data loss caused by using apply_bytes on ingress redirect | * 6105ed3598 bpf, sockmap: Fix missing BPF_F_INGRESS flag when using apply_bytes | * 8786bde11a bpf, sockmap: Fix repeated calls to sock_put() when msg has more_data | * a222f992ce Input: wistron_btns - disable on UML | * d78649c21b netfilter: conntrack: set icmpv6 redirects as RELATED | * 09fe3b1392 ASoC: pcm512x: Fix PM disable depth imbalance in pcm512x_probe | * 8876793e56 drm/amdkfd: Fix memory leakage | * 8f2d2badf8 drm/amdgpu: Fix PCI device refcount leak in amdgpu_atrm_get_bios() | * 88c6e0995c drm/radeon: Fix PCI device refcount leak in radeon_atrm_get_bios() | * 0af0ff9fc0 drm/amd/pm/smu11: BACO is supported when it's in BACO state | * 27e7cf595d ASoC: mediatek: mt8173: Enable IRQ when pdata is ready | * 905e565375 ASoC: mediatek: mt8173: Fix debugfs registration for components | * d8e32f1bf1 wifi: iwlwifi: mvm: fix double free on tx path. | * d0bb44775c ALSA: asihpi: fix missing pci_disable_device() | * f12377abac NFS: Fix an Oops in nfs_d_automount() | * 9a96aff53c NFSv4: Fix a deadlock between nfs4_open_recover_helper() and delegreturn | * c6aca4c7ba NFSv4: Fix a credential leak in _nfs4_discover_trunking() | * 7f6607c884 NFSv4.2: Fix initialisation of struct nfs4_label | * 51899eefd1 NFSv4.2: Fix a memory stomp in decode_attr_security_label | * 34dffc77dd NFSv4.2: Clear FATTR4_WORD2_SECURITY_LABEL when done decoding | * d926611c89 ASoC: mediatek: mtk-btcvsd: Add checks for write and read of mtk_btcvsd_snd | * f243ff92d6 ASoC: dt-bindings: wcd9335: fix reset line polarity in example | * 41d7b8291c drm/tegra: Add missing clk_disable_unprepare() in tegra_dc_probe() | * 2376d7fa08 media: s5p-mfc: Add variant data for MFC v7 hardware for Exynos 3250 SoC | * 210fcf64be media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() | * b223cc15f9 media: dvb-core: Fix ignored return value in dvb_register_frontend() | * 825a8af31d pinctrl: pinconf-generic: add missing of_node_put() | * eedc698d66 clk: imx8mn: fix imx8mn_enet_phy_sels clocks list | * f86a432604 clk: imx8mn: fix imx8mn_sai2_sels clocks list | * 5e98c3a345 clk: imx: replace osc_hdmi with dummy | * 9453e097b8 clk: imx8mn: rename vpu_pll to m7_alt_pll | * bffc80bac8 media: imon: fix a race condition in send_packet() | * 9c9ff35d68 media: vimc: Fix wrong function called when vimc_init() fails | * f849c116d3 ASoC: qcom: Add checks for devm_kcalloc | * 16437645dd drbd: destroy workqueue when drbd device was freed | * cdaf45415c drbd: remove call to memset before free device/resource/connection | * f35981083c mtd: maps: pxa2xx-flash: fix memory leak in probe | * 87c750affd bonding: fix link recovery in mode 2 when updelay is nonzero | * 02105f0b30 drm/amdgpu: fix pci device refcount leak | * 5b0a1f1247 clk: rockchip: Fix memory leak in rockchip_clk_register_pll() | * 27aac5c012 regulator: core: use kfree_const() to free space conditionally | * a69b1faa9b ALSA: seq: fix undefined behavior in bit shift for SNDRV_SEQ_FILTER_USE_EVENT | * 9c0f3617ba ALSA: pcm: fix undefined behavior in bit shift for SNDRV_PCM_RATE_KNOT | * 6159424e2d pinctrl: k210: call of_node_put() | * 18a973fcb1 HID: hid-sensor-custom: set fixed size for custom attributes | * 0fc4280dbe bpf: Move skb->len == 0 checks into __bpf_redirect | * 8dbcb4c284 mtd: spi-nor: Fix the number of bytes for the dummy cycles | * 58e1a0ef52 mtd: spi-nor: hide jedec_id sysfs attribute if not present | * 348d95e39f inet: add READ_ONCE(sk->sk_bound_dev_if) in inet_csk_bind_conflict() | * 4451bef1a3 media: videobuf-dma-contig: use dma_mmap_coherent | * b2781a8626 media: platform: exynos4-is: Fix error handling in fimc_md_init() | * 7cf71bbe5d media: solo6x10: fix possible memory leak in solo_sysfs_init() | * c290aa527f media: vidtv: Fix use-after-free in vidtv_bridge_dvb_init() | * 648f303102 Input: elants_i2c - properly handle the reset GPIO when power is off | * e0d3e46ac6 mtd: lpddr2_nvm: Fix possible null-ptr-deref | * ab4e42f519 drm/msm/a6xx: Fix speed-bin detection vs probe-defer | * fea795f7c7 wifi: ath10k: Fix return value in ath10k_pci_init() | * 77482c4dd4 block: clear ->slave_dir when dropping the main slave_dir reference | * 62251948e2 ima: Fix misuse of dereference of pointer in template_desc_init_fields() | * 29d6c69ba4 integrity: Fix memory leakage in keyring allocation error path | * 8e6df95717 drm/fourcc: Fix vsub/hsub for Q410 and Q401 | * ec1727f89e drm/fourcc: Add packed 10bit YUV 4:2:0 format | * f72608b8dd regulator: qcom-rpmh: Fix PMR735a S3 regulator spec | * 63d011ad05 nvme: return err on nvme_init_non_mdts_limits fail | * f289a38df0 amdgpu/pm: prevent array underflow in vega20_odn_edit_dpm_table() | * cda1895f3b regulator: core: fix unbalanced of node refcount in regulator_dev_lookup() | * 1a5aaa5736 nvmet: only allocate a single slab for bvecs | * cb3033a432 libbpf: Fix uninitialized warning in btf_dump_dump_type_data | * 83baa50939 ASoC: pxa: fix null-pointer dereference in filter() | * a06ba0f7f8 drm/mediatek: Modify dpi power on/off sequence. | * 6d25bc6370 drm/radeon: Add the missed acpi_put_table() to fix memory leak | * 4cf11e9d31 bfq: fix waker_bfqq inconsistency crash | * 55e822212e rxrpc: Fix ack.bufferSize to be 0 when generating an ack | * 5ef8bf0df1 net, proc: Provide PROC_FS=n fallback for proc_create_net_single_write() | * d1c44928bb media: camss: Clean up received buffers on failed start of streaming | * 3b4b4df3f8 wifi: rsi: Fix handling of 802.3 EAPOL frames sent via control port | * 9e1440c858 Input: joystick - fix Kconfig warning for JOYSTICK_ADC | * 71212d7318 mtd: Fix device name leak when register device failed in add_mtd_device() | * 106311677b clk: qcom: gcc-sm8250: Use retention mode for USB GDSCs | * 322c7415e7 bpf: propagate precision across all frames, not just the last one | * 07c286c10a bpf: Check the other end of slot_type for STACK_SPILL | * fdbc363bc1 bpf: propagate precision in ALU/ALU64 operations | * b29e46610c media: platform: exynos4-is: fix return value check in fimc_md_probe() | * ab54081a28 media: vivid: fix compose size exceed boundary | * 3c58c83c6f bpf: Fix slot type check in check_stack_write_var_off | * cffa75198c drm/msm/hdmi: use devres helper for runtime PM management | * 58d002b72e drm/msm/hdmi: drop unused GPIO support | * 2d4bc60693 ima: Handle -ESTALE returned by ima_filter_rule_match() | * 13fc167e16 drm/panel/panel-sitronix-st7701: Remove panel on DSI attach failure | * c20672cfa0 spi: Update reference to struct spi_controller | * 2858d038c5 clk: renesas: r9a06g032: Repair grave increment error | * f6ed73db39 drm/rockchip: lvds: fix PM usage counter unbalance in poweron | * 13fab6322b can: kvaser_usb: Compare requested bittiming parameters with actual parameters in do_set_{,data}_bittiming | * 4e55d61e87 can: kvaser_usb: Add struct kvaser_usb_busparams | * fcfd4df200 can: kvaser_usb_leaf: Fix bogus restart events | * 51f07da38b can: kvaser_usb_leaf: Fix wrong CAN state after stopping | * 647c26887b can: kvaser_usb_leaf: Fix improved state not being reported | * 9676d65a4a can: kvaser_usb: make use of units.h in assignment of frequency | * c761108562 can: kvaser_usb_leaf: Set Warning state even without bus errors | * a60bf9d814 can: kvaser_usb: kvaser_usb_leaf: Handle CMD_ERROR_EVENT | * 8aae6bddc1 can: kvaser_usb: kvaser_usb_leaf: Rename {leaf,usbcan}_cmd_error_event to {leaf,usbcan}_cmd_can_error_event | * 972270be24 can: kvaser_usb: kvaser_usb_leaf: Get capabilities from device | * e9e0d9945f can: kvaser_usb: do not increase tx statistics when sending error message frames | * e39bce64e5 libbpf: Btf dedup identical struct test needs check for nested structs/arrays | * d4419f93e2 media: exynos4-is: don't rely on the v4l2_async_subdev internals | * 8741792d82 soreuseport: Fix socket selection for SO_INCOMING_CPU. | * 094f56192c venus: pm_helpers: Fix error check in vcodec_domains_get() | * 3c793a9ad9 media: i2c: ad5820: Fix error path | * 07611f9e44 media: adv748x: afe: Select input port when initializing AFE | * aa81257dbf media: coda: jpeg: Add check for kmalloc | * 9a402adc9f media: v4l2-ctrls: Fix off-by-one error in integer menu control check | * 1caed03305 drm/amdgpu/powerplay/psm: Fix memory leak in power state init | * f66a877083 ipmi: kcs: Poll OBF briefly to reduce OBE latency | * 983320199e ata: libata: fix NCQ autosense logic | * a9caf71aeb ata: add/use ata_taskfile::{error|status} fields | * 3483c3fb48 ata: libata: move ata_{port,link,dev}_dbg to standard pr_XXX() macros | * 6706135577 libbpf: Fix null-pointer dereference in find_prog_by_sec_insn() | * a733bf1019 libbpf: Fix use-after-free in btf_dump_name_dups | * b5ec2a04fe drm/bridge: adv7533: remove dynamic lane switching from adv7533 bridge | * 6d40a49d05 wifi: rtl8xxxu: Fix reading the vendor of combo chips | * 355f16f756 wifi: ath9k: hif_usb: Fix use-after-free in ath9k_hif_usb_reg_in_cb() | * d856f7574b wifi: ath9k: hif_usb: fix memory leak of urbs in ath9k_hif_usb_dealloc_tx_urbs() | * 12229a2523 platform/mellanox: mlxbf-pmc: Fix event typo | * a0d93aac54 rapidio: devices: fix missing put_device in mport_cdev_open | * 7af9cb8cbb hfs: Fix OOB Write in hfs_asc2mac | * 90962b3b1c relay: fix type mismatch when allocating memory in relay_create_buf() | * 0d60b11f8f eventfd: change int to __u64 in eventfd_signal() ifndef CONFIG_EVENTFD | * 2f5cc7fd73 rapidio: fix possible UAF when kfifo_alloc() fails | * 337b68da68 fs: sysv: Fix sysv_nblocks() returns wrong value | * 95d42a8d3d lockd: set other missing fields when unlocking files | * 318229b4d3 MIPS: OCTEON: warn only once if deprecated link status is being used | * 5e6d37a93a MIPS: BCM63xx: Add check for NULL for clk in clk_enable | * 50af0ba3e1 platform/x86: intel_scu_ipc: fix possible name leak in __intel_scu_ipc_register() | * 3cf8150135 platform/x86: mxm-wmi: fix memleak in mxm_wmi_call_mx[ds|mx]() | * 0ceadb5a3e platform/chrome: cros_ec_typec: zero out stale pointers | * 49c98b5688 platform/chrome: cros_ec_typec: Cleanup switch handle return paths | * b55ef8508a PM: runtime: Do not call __rpm_callback() from rpm_idle() | * 0bf874183b xen/privcmd: Fix a possible warning in privcmd_ioctl_mmap_resource() | * 70966d6b0f x86/xen: Fix memory leak in xen_init_lock_cpu() | * 23aef94eea x86/xen: Fix memory leak in xen_smp_intr_init{_pv}() | * 03ab1c5c2f uprobes/x86: Allow to probe a NOP instruction with 0x66 prefix | * 6fde666278 ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage() | * 9cabd5f4f1 clocksource/drivers/timer-ti-dm: Fix missing clk_disable_unprepare in dmtimer_systimer_init_clock() | * b73c76c3c4 cpu/hotplug: Do not bail-out in DYING/STARTING sections | * 6eb1802184 cpu/hotplug: Make target_store() a nop when target == state | * cd130e2676 futex: Resend potentially swallowed owner death notification | * fd8a10d44c futex: Move to kernel/futex/ | * 156144bd18 mips: ralink: mt7621: do not use kzalloc too early | * 186d59bb6a mips: ralink: mt7621: soc queries and tests as functions | * 8348da01e5 mips: ralink: mt7621: define MT7621_SYSC_BASE with __iomem | * 0f8e6fe09c clocksource/drivers/sh_cmt: Access registers according to spec | * a47de2fd3f rapidio: rio: fix possible name leak in rio_register_mport() | * ec3f04f74f rapidio: fix possible name leaks when rio_add_device() fails | * 4662d8e6ab debugfs: fix error when writing negative value to atomic_t debugfs file | * 7e8e8cc136 lib/notifier-error-inject: fix error when writing -errno to debugfs file | * 39b5e6130b libfs: add DEFINE_SIMPLE_ATTRIBUTE_SIGNED for signed value | * 19c202e6e5 cpufreq: amd_freq_sensitivity: Add missing pci_dev_put() | * 93e3c80338 genirq/irqdesc: Don't try to remove non-existing sysfs files | * 435cc7d18c nfsd: don't call nfsd_file_put from client states seqfile display | * 5030d4d2bf NFSD: Finish converting the NFSv2 GETACL result encoder | * e498675e06 SUNRPC: Return true/false (not 1/0) from bool functions | * 3e255dc210 EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() | * 740efb64ca irqchip/wpcm450: Fix memory leak in wpcm450_aic_of_init() | * 77b99b483f irqchip: gic-pm: Use pm_runtime_resume_and_get() in gic_probe() | * 5139cbc0c6 thermal: core: fix some possible name leaks in error paths | * cab345f9d5 platform/chrome: cros_usbpd_notify: Fix error handling in cros_usbpd_notify_init() | * 0358bc7cc2 perf/x86/intel/uncore: Fix reference count leak in __uncore_imc_init_box() | * 433bd587dc perf/x86/intel/uncore: Fix reference count leak in snr_uncore_mmio_map() | * 3485f19751 perf/x86/intel/uncore: Fix reference count leak in hswep_has_limit_sbox() | * 0021ef7dc6 perf/x86/intel/uncore: Fix reference count leak in sad_cfg_iio_topology() | * c12b314bb2 PNP: fix name memory leak in pnp_alloc_dev() | * f1c7a6af71 selftests/efivarfs: Add checking of the test return value | * 46be3ee1ca MIPS: vpe-cmp: fix possible memory leak while module exiting | * e820a8192f MIPS: vpe-mt: fix possible memory leak while module exiting | * 61d68cf2ba ocfs2: fix memory leak in ocfs2_stack_glue_init() | * e83b47580a lib/fonts: fix undefined behavior in bit shift for get_default_font | * 0df7d9ab6b proc: fixup uptime selftest | * 07b8659b8e timerqueue: Use rb_entry_safe() in timerqueue_getnext() | * 413b18866b platform/x86: huawei-wmi: fix return value calculation | * 4b46932283 lib/debugobjects: fix stat count and optimize debug_objects_mem_init | * f790dfe816 perf: Fix possible memleak in pmu_dev_alloc() | * 418d21c0df selftests/ftrace: event_triggers: wait longer for test_event_enable | * 4ea765b106 cpufreq: qcom-hw: Fix memory leak in qcom_cpufreq_hw_read_lut() | * c52d9c25d9 fs: don't audit the capability check in simple_xattr_list() | * e4d0d13b46 PM: hibernate: Fix mistake in kerneldoc comment | * 1f62b8e50d x86/sgx: Reduce delay and interference of enclave release | * f5b88170f0 alpha: fix syscall entry in !AUDUT_SYSCALL case | * a819ba80b9 alpha: fix TIF_NOTIFY_SIGNAL handling | * eb2a732ef4 cpuidle: dt: Return the correct numbers of parsed idle states | * 3af4f5cb8a sched/uclamp: Make asym_fits_capacity() use util_fits_cpu() | * 23cb580e0c sched/core: Introduce sched_asym_cpucap_active() | * 41c2dba388 sched/fair: Removed useless update of p->recent_used_cpu | * 55ffeab089 sched/uclamp: Make select_idle_capacity() use util_fits_cpu() | * 4639bfbb83 sched/uclamp: Make task_fits_capacity() use util_fits_cpu() | * 309e50cbfe sched/uclamp: Fix relationship between uclamp and migration margin | * 54a766e196 sched/fair: Cleanup task_util and capacity type | * 26bffaf678 ovl: remove privs in ovl_fallocate() | * 5dc34f9aaa ovl: remove privs in ovl_copyfile() | * 9636e70ee2 ovl: use ovl_copy_{real,upper}attr() wrappers | * a54843833c ovl: store lower path in ovl_inode | * 163c5bbe7d tpm/tpm_crb: Fix error message in __crb_relinquish_locality() | * fe880e9df9 tpm/tpm_ftpm_tee: Fix error handling in ftpm_mod_init() | * ebc73c4f26 pstore: Avoid kcore oops by vmap()ing with VM_IOREMAP | * d4dcde11bf ARM: mmp: fix timer_read delay | * 95916147dc pstore/ram: Fix error return code in ramoops_probe() | * a31a647a3d seccomp: Move copy_seccomp() to no failure path. | * b8b76b8da6 arm64: dts: armada-3720-turris-mox: Add missing interrupt for RTC | * 820a5ccca7 ARM: dts: turris-omnia: Add switch port 6 node | * b311f8e9f5 ARM: dts: turris-omnia: Add ethernet aliases | * 48ebdd06c9 ARM: dts: armada-39x: Fix assigned-addresses for every PCIe Root Port | * f27dd04e44 ARM: dts: armada-38x: Fix assigned-addresses for every PCIe Root Port | * 1e53c63da8 ARM: dts: armada-375: Fix assigned-addresses for every PCIe Root Port | * 3af1a73e9e ARM: dts: armada-xp: Fix assigned-addresses for every PCIe Root Port | * e4ed8133c4 ARM: dts: armada-370: Fix assigned-addresses for every PCIe Root Port | * b335b6344e ARM: dts: dove: Fix assigned-addresses for every PCIe Root Port | * 5b3415e683 arm64: dts: mediatek: mt6797: Fix 26M oscillator unit name | * 93f5e66496 arm64: dts: mediatek: pumpkin-common: Fix devicetree warnings | * debd938e21 arm64: dts: mt2712-evb: Fix usb vbus regulators unit names | * b2c6397754 arm64: dts: mt2712-evb: Fix vproc fixed regulators unit names | * 96c972f835 arm64: dts: mt2712e: Fix unit address for pinctrl node | * 2cd1391c28 arm64: dts: mt2712e: Fix unit_address_vs_reg warning for oscillators | * 39877a3636 arm64: dts: mt6779: Fix devicetree build warnings | * af431ce47e ARM: dts: nuvoton: Remove bogus unit addresses from fixed-partition nodes | * 0a616049ec arm64: dts: ti: k3-j721e-main: Drop dma-coherent in crypto node | * 22a740824a arm64: dts: ti: k3-am65-main: Drop dma-coherent in crypto node | * b131304fe7 perf/smmuv3: Fix hotplug callback leak in arm_smmu_pmu_init() | * b99fbe8d94 perf/arm_dmc620: Fix hotplug callback leak in dmc620_pmu_init() | * 9285b623bb perf: arm_dsu: Fix hotplug callback leak in dsu_pmu_init() | * e6318a7e19 arm64: mm: kfence: only handle translation faults | * 46ddfb9d1e arm64: Treat ESR_ELx as a 64-bit register | * 681e340128 soc: ti: smartreflex: Fix PM disable depth imbalance in omap_sr_probe | * 6eca7a2535 soc: ti: knav_qmss_queue: Fix PM disable depth imbalance in knav_queue_probe | * 972f8fc065 soc: ti: knav_qmss_queue: Use pm_runtime_resume_and_get instead of pm_runtime_get_sync | * fe53048f2a arm: dts: spear600: Fix clcd interrupt | * 75baeec464 arm64: dts: qcom: sm6125: fix SDHCI CQE reg names | * 0f9ac04191 soc: qcom: apr: Add check for idr_alloc and of_property_read_string_index | * 6855dd02c5 soc: qcom: apr: make code more reuseable | * c9fb81a835 arm64: dts: qcom: sm8250: drop bogus DP PHY clock | * 53ffa57464 arm64: dts: qcom: sm8350: fix UFS PHY registers | * d5a6bbd7a2 arm64: dts: qcom: sm8250: fix UFS PHY registers | * 3a52ff845f arm64: dts: qcom: sm8150: fix UFS PHY registers | * 800f8165e0 arm64: dts: qcom: Correct QMP PHY child node name | * ee136f275b soc: qcom: llcc: make irq truly optional | * aa7ffd4174 arm64: dts: qcom: sm8250: correct LPASS pin pull down | * f94bacc616 arm64: dts: qcom: pm660: Use unique ADC5_VCOIN address in node name | * d5bf119781 drivers: soc: ti: knav_qmss_queue: Mark knav_acc_firmwares as static | * 4707d5daf8 ARM: dts: stm32: Fix AV96 WLAN regulator gpio property | * 33647d7a46 ARM: dts: stm32: Drop stm32mp15xc.dtsi from Avenger96 | * 9f271a8660 objtool, kcsan: Add volatile read/write instrumentation to whitelist | * 51fe2dcba8 arm64: dts: qcom: msm8916: Drop MSS fallback compatible | * a9fff3524f arm64: dts: qcom: sdm845-cheza: fix AP suspend pin bias | * 6487f48ea3 arm64: dts: qcom: sdm630: fix UART1 pin bias | * 6c0c9c5458 ARM: dts: qcom: apq8064: fix coresight compatible | * 0f9b088d68 arm64: dts: qcom: msm8996: fix GPU OPP table | * 270683fc7b arm64: dts: qcom: msm8996: fix supported-hw in cpufreq OPP tables | * 5c5a628914 arm64: dts: qcom: msm8996: Add MSM8996 Pro support | * 3f14048ee4 arm64: dts: qcom: sm8250-sony-xperia-edo: fix touchscreen bias-disable | * 89f79f8d7f arm64: dts: qcom: ipq6018-cp01-c1: use BLSPI1 pins | * 9db5992e72 usb: musb: remove extra check in musb_gadget_vbus_draw | * adc063a491 drm/amd/display: Manually adjust strobe for DCN303 * | 50e12445ab Merge 5.15.85 into android13-5.15-lts |\| | * 5827ddaf45 Linux 5.15.85 | * e22dbadac8 net: loopback: use NET_NAME_PREDICTABLE for name_assign_type | * 314e7a7836 selftests: net: Use "grep -E" instead of "egrep" | * 19a7814396 Bluetooth: L2CAP: Fix u8 overflow | * f692abf139 HID: uclogic: Add HID_QUIRK_HIDINPUT_FORCE quirk | * 5325a884e2 usb: dwc3: pci: Update PCIe device ID for USB3 controller on CPU sub-system for Raptor Lake | * 367e1e3399 igb: Initialize mailbox message for VF reset | * a301742b35 xhci: Apply XHCI_RESET_TO_DEFAULT quirk to ADL-N | * 5e959f0c4c USB: serial: f81534: fix division by zero on line-speed change | * 68fbe268d2 USB: serial: f81232: fix division by zero on line-speed change | * 3ec7f24b8b USB: serial: cp210x: add Kamstrup RF sniffer PIDs | * 2b092fab23 USB: serial: option: add Quectel EM05-G modem | * 6b41a35b41 usb: gadget: uvc: Prevent buffer overflow in setup handler | * 828112571c udf: Fix extending file within last block | * df1a2596c7 udf: Do not bother looking for prealloc extents if i_lenExtents matches i_size | * 63dbbd8f14 udf: Fix preallocation discarding at indirect extent boundary | * 79a97f08ae udf: Discard preallocation before extending file with a hole * | fb8d543b61 Merge 5.15.84 into android13-5.15-lts |\| | * d68f50bfb0 Linux 5.15.84 | * 972707bae3 net: fec: properly guard irq coalesce setup | * 289721fe09 ASoC: ops: Correct bounds check for second channel on SX controls | * de0866b94a nvme-pci: clear the prp2 field when not used | * 8bffa95ac1 perf: Fix perf_pending_task() UaF | * 825bd2af42 ASoC: cs42l51: Correct PGA Volume minimum value | * 91582b3a1a net: fec: don't reset irq coalesce settings to defaults on "ip link up" | * c772dab247 can: mcba_usb: Fix termination command argument | * aa822de7de can: sja1000: fix size of OCR_MODE_MASK define | * 09e08740d7 pinctrl: meditatek: Startup with the IRQs disabled | * 172a95026f libbpf: Use page size as max_entries when probing ring buffer map | * cf611d7867 ASoC: ops: Check bounds for second channel in snd_soc_put_volsw_sx() | * a74b88e170 ASoC: fsl_micfil: explicitly clear CHnF flags | * afac1e7d78 ASoC: fsl_micfil: explicitly clear software reset bit | * 9d933af8fe nfp: fix use-after-free in area_cache_get() | * e1a4f5880d vfs: fix copy_file_range() averts filesystem freeze protection | * 86e28ed25b x86/vdso: Conditionally export __vdso_sgx_enter_enclave() * | bfbd2237c1 Merge 5.15.83 into android13-5.15-lts |\| | * fd6d66840b Linux 5.15.83 | * f895511de9 io_uring: Fix a null-ptr-deref in io_tctx_exit_cb() | * f435c66d23 io_uring: move to separate directory | * d9e1e5d8a7 block: move CONFIG_BLOCK guard to top Makefile | * e5c0bc4ff5 can: esd_usb: Allow REC and TEC to return to zero | * db6343a5b0 s390/qeth: fix use-after-free in hsci | * a56c1cebe4 s390/qeth: fix various format strings | * a6dba316c9 macsec: add missing attribute validation for offload | * 40500f1f47 net: mvneta: Fix an out of bounds check | * b9274dbe39 net: thunderbolt: fix memory leak in tbnet_open() | * 7390c70bd4 ipv6: avoid use-after-free in ip6_fragment() | * 1beb475892 net: plip: don't call kfree_skb/dev_kfree_skb() under spin_lock_irq() | * b08412a9cf net: phy: mxl-gpy: fix version reporting | * dec5abd91a xen/netback: fix build warning | * 54d830e242 dpaa2-switch: Fix memory leak in dpaa2_switch_acl_entry_add() and dpaa2_switch_acl_entry_remove() | * c7adcbd0fd ethernet: aeroflex: fix potential skb leak in greth_init_rings() | * d962d42d63 tipc: call tipc_lxc_xmit without holding node_read_lock | * f3b5dda26c net: dsa: sja1105: fix memory leak in sja1105_setup_devlink_regions() | * 5dab6fa068 ipv4: Fix incorrect route flushing when table ID 0 is used | * ac566bd577 ipv4: Fix incorrect route flushing when source address is deleted | * af4ccae4b7 tipc: Fix potential OOB in tipc_link_proto_rcv() | * b8ce0e6f9f net: hisilicon: Fix potential use-after-free in hix5hd2_rx() | * 1685417774 net: mdio: fix unbalanced fwnode reference count in mdio_device_release() | * 6f4798ac9c net: hisilicon: Fix potential use-after-free in hisi_femac_rx() | * 114e65a221 net: thunderx: Fix missing destroy_workqueue of nicvf_rx_mode_wq | * 51c0494575 net: microchip: sparx5: Fix missing destroy_workqueue of mact_queue | * 99eec0a766 ip_gre: do not report erspan version on GRE interface | * 2891957853 net: stmmac: fix "snps,axi-config" node property parsing | * 5cb8f1a784 gpio/rockchip: fix refcount leak in rockchip_gpiolib_register() | * b8c2f0392d nvme initialize core quirks before calling nvme_init_subsystem | * 908b2da426 NFC: nci: Bounds check struct nfc_target arrays | * d841cc1563 i40e: Disallow ip4 and ip6 l4_4_bytes | * 625a13850b i40e: Fix for VF MAC address 0 | * 5538794dbd i40e: Fix not setting default xps_cpus after reset | * a6b30598fe net: mvneta: Prevent out of bounds read in mvneta_config_rss() | * e6e897d4fe xen-netfront: Fix NULL sring after live migration | * eefd8953a7 octeontx2-pf: Fix potential memory leak in otx2_init_tc() | * f88acaed07 net: mdiobus: fix double put fwnode in the error path | * cc62d76928 net: mdiobus: fwnode_mdiobus_register_phy() rework error handling | * ea113b570e net: encx24j600: Fix invalid logic in reading of MISTAT register | * 8aae746d06 net: encx24j600: Add parentheses to fix precedence | * a110287ef4 mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add() | * e046421bed selftests: rtnetlink: correct xfrm policy rule in kci_test_ipsec_offload | * 4fa8988a36 net: dsa: sja1105: Check return value | * b35be171df net: dsa: hellcreek: Check return value | * a4c342e645 net: dsa: ksz: Check return value | * edf7284a98 Bluetooth: Fix not cleanup led when bt_init fails | * 3322193949 Bluetooth: 6LoWPAN: add missing hci_dev_put() in get_l2cap_conn() | * 6c88c764e0 vmxnet3: use correct intrConf reference when using extended queues | * 5ad0d85757 vmxnet3: correctly report encapsulated LRO packet | * 5c014eb0ed af_unix: Get user_ns from in_skb in unix_diag_get_exact(). | * 807a01a329 drm: bridge: dw_hdmi: fix preference of RGB modes over YUV420 | * eb96fd3983 net: broadcom: Add PTP_1588_CLOCK_OPTIONAL dependency for BCMGENET under ARCH_BCM2835 | * 16eb678bca igb: Allocate MSI-X vector when testing | * 34c6367c94 e1000e: Fix TX dispatch condition | * 4271515f18 gpio: amd8111: Fix PCI device reference count leak | * d57b60e9b3 drm/bridge: ti-sn65dsi86: Fix output polarity setting bug | * f8b2965601 netfilter: ctnetlink: fix compilation warning after data race fixes in ct mark | * 246bcd05ba ca8210: Fix crash by zero initializing data | * 80dad8df5f ieee802154: cc2520: Fix error return code in cc2520_hw_init() | * dd9dcfb85c drm/vmwgfx: Fix race issue calling pin_user_pages | * 7b09ba9036 netfilter: nft_set_pipapo: Actually validate intervals in fields after the first one | * 6daaa84b62 gpiolib: fix memory leak in gpiochip_setup_dev() | * 1a1075d371 gpiolib: check the 'ngpios' property in core gpiolib code | * 70c5515c1c gpiolib: improve coding style for local variables | * 3b714f25fc clk: Fix pointer casting to prevent oops in devm_clk_release() | * c142cba37d can: af_can: fix NULL pointer dereference in can_rcv_filter | * 104bb1f67e HID: ite: Enable QUIRK_TOUCHPAD_ON_OFF_REPORT on Acer Aspire Switch V 10 | * f755d11c55 HID: core: fix shift-out-of-bounds in hid_report_raw_event | * 2d4b310c32 HID: hid-lg4ff: Add check for empty lbuf | * 5e8021ae08 HID: usbhid: Add ALWAYS_POLL quirk for some mice | * 5e88c6f4aa net: dsa: sja1105: avoid out of bounds access in sja1105_init_l2_policing() | * 1074fefce9 drm/shmem-helper: Avoid vm_open error paths | * 83e3da8bb9 drm/shmem-helper: Remove errant put in error path | * 249011f4c3 drm/amdgpu/sdma_v4_0: turn off SDMA ring buffer in the s2idle suspend | * 1e4fe9a154 drm/vmwgfx: Don't use screen objects when SEV is active | * f6550976fe KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field | * fe50a9bbeb net: mana: Fix race on per-CQ variable napi work_done | * a49894a5ac Bluetooth: Fix crash when replugging CSR fake controllers | * 1dee2b5047 Bluetooth: btusb: Add debug message for CSR controllers | * 3ac29732a2 mm/gup: fix gup_pud_range() for dax | * aad8bbd17a memcg: fix possible use-after-free in memcg_write_event_control() | * 6fb8bc29bf media: v4l2-dv-timings.c: fix too strict blanking sanity checks | * a4c575541e Revert "ARM: dts: imx7: Fix NAND controller size-cells" | * 28abc11459 soundwire: intel: Initialize clock stop timeout | * 22d800b378 media: videobuf2-core: take mmap_lock in vb2_get_unmapped_area() | * 5d0fa6fc88 xen/netback: don't call kfree_skb() with interrupts disabled | * 4422241cef xen/netback: do some code cleanup | * 0fe29bd925 xen/netback: Ensure protocol headers don't fall in the non-linear area | * f01677be31 drm/bridge: anx7625: Fix edid_read break case in sp_tx_edid_read() | * ee2536830b cifs: fix use-after-free caused by invalid pointer `hostname` | * dc62f05f66 rtc: cmos: avoid UIP when reading alarm time | * 48ea4199af rtc: cmos: avoid UIP when writing alarm time | * 3f52afc6ed rtc: mc146818-lib: extract mc146818_avoid_UIP | * 1a3f8c6cd2 mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths | * 79ad784c9d mm/khugepaged: fix GUP-fast interaction by sending IPI | * d15cd6de01 mm/khugepaged: take the right locks for page table retraction | * 26f084e554 net: usb: qmi_wwan: add u-blox 0x1342 composition | * 029a7f1c5d 9p/xen: check logical size for buffer size | * b398832893 usb: dwc3: gadget: Disable GUSB2PHYCFG.SUSPHY for End Transfer | * e70a572440 fbcon: Use kzalloc() in fbcon_prepare_logo() | * fd3768597d regulator: twl6030: fix get status of twl6032 regulators | * 9f74b9aa8d ASoC: soc-pcm: Add NULL check in BE reparenting | * dae93f4168 btrfs: send: avoid unaligned encoded writes when attempting to clone range | * f54e1edf57 selftests/net: Find nettest in current directory | * fccd454129 ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event | * 542a563bb7 regulator: slg51000: Wait after asserting CS pin | * 3d1b5fde36 9p/fd: Use P9_HDRSZ for header size | * fe2d44e86e ASoC: rt711-sdca: fix the latency time of clock stop prepare state machine transitions | * e945f3d809 ARM: dts: rockchip: disable arm_global_timer on rk3066 and rk3188 | * c3b818c91a spi: mediatek: Fix DEVAPC Violation at KO Remove | * d9f0107be1 ASoC: wm8962: Wait for updated value of WM8962_CLOCKING1 register | * 7ae0262748 ARM: 9266/1: mm: fix no-MMU ZERO_PAGE() implementation | * d81c62e312 ARM: 9251/1: perf: Fix stacktraces for tracepoint events in THUMB2 kernels | * 66717ad03b fs: use acquire ordering in __fget_light() | * 1222e2364a ARM: dts: rockchip: rk3188: fix lcdc1-rgb24 node name | * 996fb29b06 arm64: dts: rockchip: fix ir-receiver node names | * 752138ef89 ARM: dts: rockchip: fix ir-receiver node names | * 8045971e40 arm: dts: rockchip: remove clock-frequency from rtc | * 5e9fb8013a arm: dts: rockchip: fix node name for hym8563 rtc | * 2ed7137e91 arm64: dts: rockchip: keep I2S1 disabled for GPIO function on ROCK Pi 4 series | * 5a1122e1a8 mmc: mtk-sd: Fix missing clk_disable_unprepare in msdc_of_clock_parse() | * 282f52c954 clk: Provide new devm_clk helpers for prepared and enabled clocks | * eb94a7a20f clk: generalize devm_clk_get() a bit * | 20de784185 ANDROID: fix up abi change in struct sdhci_host * | ebd1f8013d ANDROID: gki_defconfig: add CONFIG_FUNCTION_ERROR_INJECTION * | 112ff45bb5 Merge 5.15.82 into android13-5.15-lts |\| | * d979030136 Linux 5.15.82 | * 48642f9431 proc: proc_skip_spaces() shouldn't think it is working on C strings | * 3eb9213f66 proc: avoid integer type confusion in get_proc_long | * 4a4073a2e2 ipc/sem: Fix dangling sem_array access in semtimedop race | * 53b9b1201e Input: raydium_ts_i2c - fix memory leak in raydium_i2c_send() | * 571b6bbbf5 char: tpm: Protect tpm_pm_suspend with locks | * f39891cfe7 Revert "clocksource/drivers/riscv: Events are stopped during CPU suspend" | * a759057af7 ACPI: HMAT: Fix initiator registration for single-initiator systems | * da8a794d71 ACPI: HMAT: remove unnecessary variable initialization | * 2d16161a2c i2c: imx: Only DMA messages with I2C_M_DMA_SAFE flag set | * 950a05cb15 i2c: npcm7xx: Fix error handling in npcm_i2c_init() | * db3f8da033 serial: stm32: Deassert Transmit Enable on ->rs485_config() | * 45f628f4fd serial: stm32: Use TC interrupt to deassert GPIO RTS in RS485 mode | * c60eae5b1d serial: stm32: Factor out GPIO RTS toggling into separate function | * 041f8dc882 ipv4: Fix route deletion when nexthop info is not specified | * 25174d91e4 ipv4: Handle attempt to delete multipath route when fib_info contains an nh reference | * a0ad247e55 selftests: net: fix nexthop warning cleanup double ip typo | * 532847b69c selftests: net: add delete nexthop route warning test | * e078355881 Kconfig.debug: provide a little extra FRAME_WARN leeway when KASAN is enabled | * 723fa02e0e parisc: Increase FRAME_WARN to 2048 bytes on parisc | * b951ab4b35 mm: migrate: fix THP's mapcount on isolation | * c5eda6029c mm: __isolate_lru_page_prepare() in isolate_migratepages_block() | * bdb613ef17 iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init() | * b6eea8b2e8 iommu/vt-d: Fix PCI device refcount leak in has_external_pci() | * 787d81d4eb nvme: fix SRCU protection of nvme_ns_head list | * 12f237200c riscv: kexec: Fixup irq controller broken in kexec crash path | * ac00301adb riscv: fix race when vmap stack overflow | * fa7a7d185e riscv: Sync efi page table's kernel mappings before switching | * d86d698925 pinctrl: single: Fix potential division by zero | * 98b15c7066 ASoC: ops: Fix bounds check for _sx controls | * f88a6977f8 KVM: x86/mmu: Fix race condition in direct_page_fault | * df4b177b48 io_uring/poll: fix poll_refs race with cancelation | * 4b702b7d11 io_uring: make poll refs more robust | * 1d58849ac2 io_uring: cmpxchg for poll arm refs release | * cd1981a8c3 io_uring: fix tw losing poll events | * 62321dc7b0 io_uring: update res mask in io_poll_check_events | * 417d5ea6e7 tracing: Free buffers when a used dynamic event is removed | * 52fc245d15 tracing: Fix race where histograms can be called before the event | * cb2b0612cd tracing/osnoise: Fix duration type | * 615a996ff3 drm/i915: Never return 0 if not all requests retired | * 01a2b25ef2 drm/i915: Fix negative value passed as remaining time | * ff1591ba33 drm/amdgpu: enable Vangogh VCN indirect sram mode | * ac2d7fa908 drm/amdgpu: temporarily disable broken Clang builds due to blown stack-frame | * 57ee7bc4c6 mmc: sdhci: Fix voltage switch delay | * bb8f809514 mmc: sdhci-sprd: Fix no reset data and command after voltage switch | * 4c7681c1a5 mmc: sdhci-esdhc-imx: correct CQHCI exit halt state check | * 01dbe4db59 mmc: core: Fix ambiguous TRIM and DISCARD arg | * 738946e355 mmc: mmc_test: Fix removal of debugfs file | * 635d051734 net: stmmac: Set MAC's flow control register to reflect current settings | * 9132dcdf3b v4l2: don't fall back to follow_pfn() if pin_user_pages_fast() fails | * 76ad884be0 pinctrl: intel: Save and restore pins in "direct IRQ" mode | * 41296b85fa x86/bugs: Make sure MSR_SPEC_CTRL is updated properly upon resume from S3 | * 33021419fd nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry() | * 2e44dd9a8d tools/vm/slabinfo-gnuplot: use "grep -E" instead of "egrep" | * b60a8ad771 error-injection: Add prompt for function error injection | * 757eb00c4c ALSA: dice: fix regression for Lexicon I-ONIX FW810S | * a1a96a6f30 riscv: mm: Proper page permissions after initmem free | * 823df3607d riscv: vdso: fix section overlapping under some conditions | * 6e035d5a2a hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() | * 7692700ac8 hwmon: (coretemp) Check for null before removing sysfs attrs | * 9b5836b9c4 net: ethernet: renesas: ravb: Fix promiscuous mode after system resumed | * 0dfb9a5663 sctp: fix memory leak in sctp_stream_outq_migrate() | * fcb3e02161 packet: do not set TP_STATUS_CSUM_VALID on CHECKSUM_COMPLETE | * 04b995e963 net: tun: Fix use-after-free in tun_detach() | * 43ca0adf79 afs: Fix fileserver probe RTT handling | * 543d917f69 net: mdiobus: fix unbalanced node reference count | * dca370e575 net: hsr: Fix potential use-after-free | * 1daec08156 tipc: re-fetch skb cb after tipc_msg_validate | * 16a64dc265 dsa: lan9303: Correct stat name | * 766086ea8c net: wwan: iosm: fix dma_alloc_coherent incompatible pointer type | * c667751a42 net: wwan: iosm: fix kernel test robot reported error | * 9c584d6d9c net: ethernet: nixge: fix NULL dereference | * 8782b32ef8 net/9p: Fix a potential socket leak in p9_socket_open | * 6fc9425bff net: net_netdev: Fix error handling in ntb_netdev_init_module() | * 3bc893ef36 net: ethernet: ti: am65-cpsw: fix error handling in am65_cpsw_nuss_probe() | * 7730904f50 net: phy: fix null-ptr-deref while probe() failed | * 59b54f0563 wifi: mac8021: fix possible oob access in ieee80211_get_rate_duration | * dc0853f8b5 wifi: cfg80211: don't allow multi-BSSID in S1G | * 88a6fe3707 wifi: cfg80211: fix buffer overflow in elem comparison | * 08fff7aaeb aquantia: Do not purge addresses when setting the number of rings | * 2a7aa52573 qlcnic: fix sleep-in-atomic-context bugs caused by msleep | * 7b734d26f0 can: m_can: Add check for devm_clk_get | * ea8dc27bb0 can: m_can: pci: add missing m_can_class_free_dev() in probe/remove methods | * b1d2a8e02a can: etas_es58x: es58x_init_netdev(): free netdev when register_candev() | * e53da04e37 can: cc770: cc770_isa_probe(): add missing free_cc770dev() | * d452a71995 can: sja1000_isa: sja1000_isa_probe(): add missing free_sja1000dev() | * 372eb550fa net/mlx5e: Fix use-after-free when reverting termination table | * 839eeab03c net/mlx5: Fix uninitialized variable bug in outlen_write() | * 34feea3bfb net/mlx5: DR, Fix uninitialized var warning | * 3485ef2aab net/mlx5: DR, Rename list field in matcher struct to list_node | * 9fc27d22cd e100: Fix possible use after free in e100_xmit_prepare | * 0d9f5bd54b iavf: Fix error handling in iavf_init_module() | * b0b2b9050c iavf: remove redundant ret variable | * 69501d8205 fm10k: Fix error handling in fm10k_init_module() | * 5e3657dede i40e: Fix error handling in i40e_init_module() | * 7109e94109 ixgbevf: Fix resource leak in ixgbevf_init_module() | * 196ea810e2 of: property: decrement node refcount in of_fwnode_get_reference_args() | * 36164db278 nvmem: rmem: Fix return value check in rmem_read() | * e376183167 bpf: Do not copy spin lock field from user in bpf_selem_alloc | * 45f6e81863 hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails | * a90251376c hwmon: (i5500_temp) fix missing pci_disable_device() | * eeb31b828d hwmon: (ina3221) Fix shunt sum critical calculation | * 9514b95cac hwmon: (ltc2947) fix temperature scaling | * 0140e079a4 libbpf: Handle size overflow for ringbuf mmap | * 06d5790e7d ARM: at91: rm9200: fix usb device clock id | * d074f173fb scripts/faddr2line: Fix regression in name resolution on ppc64le | * ee3d37d796 bpf, perf: Use subprog name when reporting subprog ksymbol | * ec02fc0a41 iio: light: rpr0521: add missing Kconfig dependencies | * f7419fc42a iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw | * e7e76a77aa iio: health: afe4403: Fix oob read in afe4403_read_raw | * ebdca90efb drm/amdgpu: Partially revert "drm/amdgpu: update drm_display_info correctly when the edid is read" | * c365d3c3e5 drm/amdgpu: update drm_display_info correctly when the edid is read | * df5346466e drm/display/dp_mst: Fix drm_dp_mst_add_affected_dsc_crtcs() return code | * 044da1a371 btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit() | * da86809ab8 btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker | * 5d66eadc1c spi: spi-imx: Fix spi_bus_clk if requested clock is higher than input clock | * 6b4544a131 btrfs: free btrfs_path before copying inodes to userspace | * c7ae3becee btrfs: sink iterator parameter to btrfs_ioctl_logical_to_ino | * acc2f40b98 erofs: fix order >= MAX_ORDER warning due to crafted negative i_size | * ca9f27448a drm/i915/gt: Use i915_vm_put on ppgtt_create error paths | * c2f2972889 drm/i915: Create a dummy object for gen6 ppgtt | * 918002bdbe arm64: mte: Avoid setting PG_mte_tagged if no tags cleared or restored * | d753150bdc Revert "serial: Add rs485_supported to uart_port" * | 8ccd9528be Revert "serial: fsl_lpuart: Fill in rs485_supported" * | a924bb92c6 Merge 5.15.81 into android13-5.15-lts |\| | * e4a7232c91 Linux 5.15.81 | * 5c5c563a08 cifs: fix missed refcounting of ipc tcon | * ee2d04f23b drm/i915: fix TLB invalidation for Gen12 video and compute engines | * bef834845d drm/amdgpu: always register an MMU notifier for userptr | * 7901de7aa8 drm/amdgpu: Enable Aldebaran devices to report CU Occupancy | * e7bf1fe538 drm/amd/display: No display after resume from WB/CB | * 5033cba00c drm/amd/dc/dce120: Fix audio register mapping, stop triggering KASAN | * b8dc245909 btrfs: sysfs: normalize the error handling branch in btrfs_init_sysfs() | * 914baca57a btrfs: use kvcalloc in btrfs_get_dev_zone_info | * c1e6d4bfde btrfs: zoned: fix missing endianness conversion in sb_write_pointer | * d88bf6be02 btrfs: free btrfs_path before copying subvol info to userspace | * f218b404fc btrfs: free btrfs_path before copying fspath to userspace | * fea9397101 btrfs: free btrfs_path before copying root refs to userspace | * 7d0c25b5fe genirq: Take the proposed affinity at face value if force==true | * f17657cce0 irqchip/gic-v3: Always trust the managed affinity provided by the core code | * 52a93f2dcf genirq: Always limit the affinity to online CPUs | * 599cf4b845 genirq/msi: Shutdown managed interrupts with unsatifiable affinities | * 7aed1dd5d2 wifi: wilc1000: validate number of channels | * e9de501cf7 wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute | * 143232cb5a wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute | * cd9c486971 wifi: wilc1000: validate pairwise and authentication suite offsets | * f2fb18d429 fuse: lock inode unconditionally in fuse_fallocate() | * bb1c33bdf4 dm integrity: clear the journal on suspend | * 20ad31b09e dm integrity: flush the journal on suspend | * 5ca2110ba5 gpu: host1x: Avoid trying to use GART on Tegra20 | * 97f47617e8 scsi: iscsi: Fix possible memory leak when device_register() failed | * 56ab7f237e net: usb: qmi_wwan: add Telit 0x103a composition | * e2e33f213d tcp: configurable source port perturb table size | * 269928e5c7 platform/x86: ideapad-laptop: Fix interrupt storm on fn-lock toggle on some Yoga laptops | * 17d995dc69 platform/x86: hp-wmi: Ignore Smart Experience App event | * e85bdc7872 zonefs: fix zone report size in __zonefs_io_error() | * 982fcd83fb drm/amdgpu: disable BACO support on more cards | * ea11f8197d platform/x86: acer-wmi: Enable SW_TABLET_MODE on Switch V 10 (SW5-017) | * 09af15e691 platform/x86: asus-wmi: add missing pci_dev_put() in asus_wmi_set_xusb2pr() | * ba040bea9d xen/platform-pci: add missing free_irq() in error path | * 6815b2087d xen-pciback: Allow setting PCI_MSIX_FLAGS_MASKALL too | * 4c13ddb74f ASoC: stm32: dfsdm: manage cb buffers cleanup | * dd82295a23 Input: i8042 - apply probe defer to more ASUS ZenBook models | * e12e121feb Input: soc_button_array - add Acer Switch V 10 to dmi_use_low_level_irq[] | * 9f5c167074 Input: soc_button_array - add use_low_level_irq module parameter | * aaef86eac9 Input: goodix - try resetting the controller when no config is set | * e2223f5fbb serial: 8250: 8250_omap: Avoid RS485 RTS glitch on ->set_termios() | * 4e208294de tools: iio: iio_generic_buffer: Fix read size | * 0d0e2545fa ASoC: Intel: bytcht_es8316: Add quirk for the Nanote UMPC-01 | * e394cf9d7a Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode | * 96b5d11777 x86/ioremap: Fix page aligned size calculation in __ioremap_caller() | * d048f74815 x86/pm: Add enumeration check before spec MSRs save/restore setup | * 070e3560bf x86/tsx: Add a feature bit for TSX control MSR support | * 1430c98ebb KVM: x86: remove exit_int_info warning in svm_handle_exit | * 27550a5930 KVM: x86: add kvm_leave_nested | * 3e87cb0caa KVM: x86: nSVM: harden svm_free_nested against freeing vmcb02 while still in use | * 6425c590d0 KVM: x86: forcibly leave nested mode on vCPU reset | * f42ebf972a KVM: x86: nSVM: leave nested mode on vCPU free | * 7b3c9405b2 mm: vmscan: fix extreme overreclaim and swap floods | * feb2eda5e1 gcov: clang: fix the buffer overflow issue | * ea6aa25c9a nilfs2: fix nilfs_sufile_mark_dirty() not set segment usage as dirty | * 9d97a9fbfc usb: dwc3: gadget: Clear ep descriptor last | * 02632ea4df usb: dwc3: gadget: Return -ESHUTDOWN on ep disable | * 765ca3e63f usb: dwc3: gadget: conditionally remove requests | * 7945cbf866 bus: ixp4xx: Don't touch bit 7 on IXP42x | * 39c039018a iio: core: Fix entry not deleted when iio_register_sw_trigger_type() fails | * 0791a5ddba iio: light: apds9960: fix wrong register for gesture gain | * f0158b9bfc arm64: dts: rockchip: lower rk3399-puma-haikou SD controller clock frequency | * 277d19ec28 ext4: fix use-after-free in ext4_ext_shift_extents | * c9d133100b usb: cdnsp: fix issue with ZLP - added TD_SIZE = 1 | * c2ad434cd4 usb: cdnsp: Fix issue with Clear Feature Halt Endpoint | * 1d91c64887 usb: dwc3: exynos: Fix remove() function | * 0a216625c3 KVM: arm64: pkvm: Fixup boot mode to reflect that the kernel resumes from EL1 | * f0044a4a31 mmc: sdhci-brcmstb: Fix SDHCI_RESET_ALL for CQHCI | * 8e6940979b mmc: sdhci-brcmstb: Enable Clock Gating to save power | * 24b46bfa96 mmc: sdhci-brcmstb: Re-organize flags | * 227543ccac nios2: add FORCE for vmlinuz.gz | * 6a4ea16a67 init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash | * c4a9046c27 lib/vdso: use "grep -E" instead of "egrep" | * 5fefdceafb s390/crashdump: fix TOD programmable field size | * 592b6fd74a net: thunderx: Fix the ACPI memory leak | * 697eb30a35 octeontx2-af: Fix reference count issue in rvu_sdp_init() | * 6ba1687ea1 octeontx2-pf: Add check for devm_kcalloc | * 26c31e7c73 net: enetc: preserve TX ring priority across reconfiguration | * 0e16bbf616 net: enetc: cache accesses to &priv->si->hw | * 68de40f66a net: enetc: manage ENETC_F_QBV in priv->active_offloads only when enabled | * 5c0858e142 nfc: st-nci: fix incorrect sizing calculations in EVT_TRANSACTION | * e09243fb16 nfc: st-nci: fix memory leaks in EVT_TRANSACTION | * dca20b7a19 nfc: st-nci: fix incorrect validating logic in EVT_TRANSACTION | * 67d638f8ef s390/dasd: fix no record found for raw_track_access | * 88277853cf arcnet: fix potential memory leak in com20020_probe() | * 1d44ec8507 ipv4: Fix error return code in fib_table_insert() | * 918e83c6bf dccp/tcp: Reset saddr on failure after inet6?_hash_connect(). | * 8ce9b1c97f fs: do not update freeing inode i_io_list | * 8db9e60cdf netfilter: flowtable_offload: add missing locking | * c1da3bfca1 netfilter: ipset: restore allowing 64 clashing elements in hash:net,iface | * 606091b2f6 dma-buf: fix racing conflict of dma_heap_add() | * 8af9450bef bnx2x: fix pci device refcount leak in bnx2x_vf_is_pcie_pending() | * 251bcf6cfb regulator: twl6030: re-add TWL6032_SUBCLASS | * 6258a8f913 NFC: nci: fix memory leak in nci_rx_data_packet() | * ffe6021154 net: sched: allow act_ct to be built without NF_NAT | * a05c0f9511 net: sparx5: fix error handling in sparx5_port_open() | * 182ef20f0f sfc: fix potential memleak in __ef100_hard_start_xmit() | * 2da022fac9 net: wwan: iosm: use ACPI_FREE() but not kfree() in ipc_pcie_read_bios_cfg() | * a48b345b87 xfrm: Fix ignored return value in xfrm6_init() | * 19989e1635 xfrm: Fix oops in __xfrm_state_delete() | * 46d450067f tipc: check skb_linearize() return value in tipc_disc_rcv() | * 33fb115a76 tipc: add an extra conn_get in tipc_conn_alloc | * 4ae907c45f tipc: set con sock in tipc_conn_alloc | * ef866d9ea9 net/mlx5: Fix handling of entry refcount when command is not issued to FW | * 3101318939 net/mlx5: Fix FW tracer timestamp calculation | * 1eaabb5bbb net/mlx5: Do not query pci info while pci disabled | * 8180099b2a netfilter: ipset: regression in ip_set_hash_ip.c | * 448b627370 Drivers: hv: vmbus: fix possible memory leak in vmbus_device_register() | * 082c31cb99 Drivers: hv: vmbus: fix double free in the error path of vmbus_add_channel_work() | * 7fdd9daa5b macsec: Fix invalid error code set | * e8fb93a079 nfp: add port from netdev validation for EEPROM access | * e44e424ed9 nfp: fill splittable of devlink_port_attrs correctly | * 527046c138 net: pch_gbe: fix pci device refcount leak while module exiting | * f77c84dd5b octeontx2-af: debugsfs: fix pci device refcount leak | * cd581ffd8d net/qla3xxx: fix potential memleak in ql3xxx_send() | * a8976074e2 net: mvpp2: fix possible invalid pointer dereference | * 3a4cc56cd1 net/mlx4: Check retval of mlx4_bitmap_init | * c368220e17 net: ethernet: mtk_eth_soc: fix error handling in mtk_open() | * d9729437b2 ARM: dts: imx6q-prti6q: Fix ref/tcxo-clock-frequency properties | * 1c0b6a97c4 ARM: mxs: fix memory leak in mxs_machine_init() | * ecff08f3c4 iavf: Fix race condition between iavf_shutdown and iavf_remove | * 31147d4e90 iavf: Do not restart Tx queues after reset task failure | * 232942b26c iavf: Fix a crash during reset task | * 0600615d01 netfilter: nf_tables: do not set up extensions for end interval | * 60387731e6 netfilter: conntrack: Fix data-races around ct mark | * ee3ccd1abb 9p/fd: fix issue of list_del corruption in p9_fd_cancel() | * 131c2eeabc net: pch_gbe: fix potential memleak in pch_gbe_tx_queue() | * f58df483ff nfc/nci: fix race with opening and closing | * da22d7410a net: dsa: sja1105: disallow C45 transactions on the BASE-TX MDIO bus | * 38fe0988bd rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975] | * d92151b465 rxrpc: Use refcount_t rather than atomic_t | * 3c33e41fa5 rxrpc: Allow list of in-use local UDP endpoints to be viewed in /proc | * 46cefa2689 net: liquidio: simplify if expression | * 95500ee0b3 selftests: mptcp: fix mibit vs mbit mix up | * f8c4da198e selftests: mptcp: more stable simult_flows tests | * 1c0efab08c ARM: dts: at91: sam9g20ek: enable udc vbus gpio pinctrl | * ade662f3f2 tee: optee: fix possible memory leak in optee_register_device() | * d1dd119134 bus: sunxi-rsb: Support atomic transfers | * b1ed61e706 bus: sunxi-rsb: Remove the shutdown callback | * 61a41d1abc regulator: core: fix UAF in destroy_regulator() | * a85c0db3f5 spi: dw-dma: decrease reference count in dw_spi_dma_init_mfld() | * d9f9b3255b regulator: core: fix kobject release warning and memory leak in regulator_register() | * bd419c7c68 ASoC: max98373: Add checks for devm_kcalloc | * f9bc4a18e7 scsi: storvsc: Fix handling of srb_status and capacity change events | * c2153fe2d0 x86/hyperv: Restore VP assist page after cpu offlining/onlining | * b2ddd76237 ASoC: soc-pcm: Don't zero TDM masks in __soc_pcm_open() | * dd62cb7e6f ASoC: sgtl5000: Reset the CHIP_CLK_CTRL reg on remove | * d80ffd4823 ASoC: hdac_hda: fix hda pcm buffer overflow issue | * 10bee7eb2a ARM: dts: am335x-pcm-953: Define fixed regulators in root node | * 8fe533c0f9 af_key: Fix send_acquire race with pfkey_register | * 0c69a4658e xfrm: replay: Fix ESN wrap around for GSO | * ecc6ce4fdf xfrm: fix "disable_policy" on ipv4 early demux | * 5a792c1d4d MIPS: pic32: treat port as signed integer | * 144452b421 RISC-V: vdso: Do not add missing symbols to version section in linker script | * 799970b8cc ALSA: usb-audio: add quirk to fix Hamedal C20 disconnect issue | * 38b09dc14f Revert "drm/amdgpu: Revert "drm/amdgpu: getting fan speed pwm for vega10 properly"" | * 44d50fccf8 nvmet: fix memory leak in nvmet_subsys_attr_model_store_locked | * 5adc12d9e2 arm64/syscall: Include asm/ptrace.h in syscall_wrapper header. | * 1340f02773 block, bfq: fix null pointer dereference in bfq_bio_bfqg() | * 86d4dca4a6 drm: panel-orientation-quirks: Add quirk for Acer Switch V 10 (SW5-017) | * b90e6234f5 scsi: scsi_debug: Make the READ CAPACITY response compliant with ZBC | * cdbba6a4de scsi: ibmvfc: Avoid path failures during live migration | * 6e8124a151 platform/x86/intel/hid: Add some ACPI device IDs | * 32735e24f4 platform/x86/intel/pmt: Sapphire Rapids PMT errata fix | * 83a6823016 platform/x86: touchscreen_dmi: Add info for the RCA Cambio W101 v2 2-in-1 | * f707986a14 platform/x86: ideapad-laptop: Disable touchpad_switch | * 5e38740ae5 Revert "net: macsec: report real_dev features when HW offloading is enabled" | * 26b72202ee selftests/bpf: Add verifier test for release_reference() | * 8395e3f98c spi: stm32: fix stm32_spi_prepare_mbr() that halves spi clk for every run | * d04722f280 wifi: ath11k: Fix QCN9074 firmware boot on x86 | * 9cc96a20a9 wifi: mac80211: Fix ack frame idr leak when mesh has no route | * 86f90014e7 wifi: airo: do not assign -1 to unsigned char | * f5558fbda0 audit: fix undefined behavior in bit shift for AUDIT_BIT | * af5de982ff riscv: dts: sifive unleashed: Add PWM controlled LEDs | * ee34a19dbe wifi: mac80211_hwsim: fix debugfs attribute ps with rc table support | * 3513785dc1 wifi: mac80211: fix memory free error when registering wiphy fail | * 855485d31e ceph: fix NULL pointer dereference for req->r_session | * 729c9ad294 ceph: Use kcalloc for allocating multiple elements | * d276fb4a7e binder: validate alloc->mm in ->mmap() handler | * 5277e3d633 x86/sgx: Add overflow check in sgx_validate_offset_length() | * b5a838ba47 x86/sgx: Create utility to validate user provided offset and length | * 2f6e2de3a5 ceph: avoid putting the realm twice when decoding snaps fails | * 8bef55d793 ceph: do not update snapshot context when there is no new snapshot | * cdee3136c9 iio: pressure: ms5611: fixed value compensation bug | * 5d6696e79d iio: ms5611: Simplify IO callback parameters | * f0ee88e83c nvme-pci: add NVME_QUIRK_BOGUS_NID for Netac NV7000 | * a61716cd24 nvme-pci: disable write zeroes on various Kingston SSD | * 19b60f3363 nvme-pci: disable namespace identifiers for the MAXIO MAP1001 | * d537e19306 nvme-pci: add NVME_QUIRK_BOGUS_NID for Micron Nitro | * af03ce894c nvme: add a bogus subsystem NQN quirk for Micron MTFDKBA2T0TFH | * c6803faa6a drm/display: Don't assume dual mode adaptors support i2c sub-addressing | * d2284fe43c ata: libata-core: do not issue non-internal commands once EH is pending | * e09583e83e ata: libata-scsi: simplify __ata_scsi_queuecmd() | * a9059e338f cifs: Fix connections leak when tlink setup failed | * 81d583baa5 cifs: support nested dfs links over reconnect | * dbc0ea91be cifs: split out dfs code from cifs_reconnect() | * b3ce844d23 cifs: introduce new helper for cifs_reconnect() | * 2ea600b598 sctp: clear out_curr if all frag chunks of current msg are pruned | * 1f9f346fbb sctp: remove the unnecessary sinfo_stream check in sctp_prsctp_prune_unsent | * e8915faa9f tty: serial: fsl_lpuart: don't break the on-going transfer when global reset | * bd19013935 serial: fsl_lpuart: Fill in rs485_supported | * 87c81c19cd serial: Add rs485_supported to uart_port | * c08f4ea79f ASoC: fsl_asrc fsl_esai fsl_sai: allow CONFIG_PM=N | * d1e4288d2a ASoC: fsl_sai: use local device pointer * | e66b45d527 Merge branch 'android13-5.15' into android13-5.15-lts * | 72d681a01d Revert "net: use struct_group to copy ip/ipv6 header addresses" * | c46ed1b2d7 Merge 5.15.80 into android13-5.15-lts |\| | * 71e496bd33 Linux 5.15.80 | * b63ddb3ba6 ntfs: check overflow when iterating ATTR_RECORDs | * ab6a1bb17e ntfs: fix out-of-bounds read in ntfs_attr_find() | * 5330c423b8 ntfs: fix use-after-free in ntfs_attr_find() | * 43bbadb7e4 net/9p: use a dedicated spinlock for trans_fd | * 9357fca9da mm: fs: initialize fsdata passed to write_begin/write_end interface | * b334ab4c33 wifi: wext: use flex array destination for memcpy() | * 0e07032b4b 9p/trans_fd: always use O_NONBLOCK read/write | * 7c7b7476b5 gfs2: Switch from strlcpy to strscpy | * 28275a7c84 gfs2: Check sb_bsize_shift after reading superblock | * a4f1a01b2e 9p: trans_fd/p9_conn_cancel: drop client lock earlier | * f7b0e95071 kcm: close race conditions on sk_receive_queue | * 27d706b0d3 kcm: avoid potential race in kcm_tx_work | * b49026d9c8 tcp: cdg: allow tcp_cdg_release() to be called multiple times | * e41cbf98df macvlan: enforce a consistent minimal mtu | * d5f7f6e63f Input: i8042 - fix leaking of platform device on module removal | * c49cc2c059 kprobes: Skip clearing aggrprobe's post_handler in kprobe-on-ftrace case | * 71beab7119 scsi: scsi_debug: Fix possible UAF in sdebug_add_host_helper() | * a636772988 scsi: target: tcm_loop: Fix possible name leak in tcm_loop_setup_hba_bus() | * cb7893c85e net: use struct_group to copy ip/ipv6 header addresses | * 9b8c0c88f4 tracing: Fix warning on variable 'struct trace_array' | * 73cf0ff9a3 ring-buffer: Include dropped pages in counting dirty patches | * 35c60b4e8c perf: Improve missing SIGTRAP checking | * 2ac6276864 serial: 8250_lpss: Use 16B DMA burst with Elkhart Lake | * b1a27b2aad nvme: ensure subsystem reset is single threaded | * bccece3c33 nvme: restrict management ioctls to admin | * 8cddb0d96b perf/x86/intel/pt: Fix sampling using single range output | * 8e2f33c598 misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() | * 9a72a46cb0 docs: update mediator contact information in CoC doc | * a99a547658 mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put() | * 4a1b6f7839 mmc: sdhci-pci-o2micro: fix card detect fail issue caused by CD# debounce timeout | * fd285d4215 mmc: core: properly select voltage range without power cycle | * 8a9bae5f1b firmware: coreboot: Register bus in module init | * 052d0e79ef iommu/vt-d: Set SRE bit only when hardware has SRS cap | * c31a792a82 iommu/vt-d: Preset Access bit for IOVA in FL non-leaf paging entries | * 11edbdee43 scsi: zfcp: Fix double free of FSF request when qdio send fails | * fdf87b5b30 net: phy: marvell: add sleep time after enabling the loopback bit | * 9648d760ed maccess: Fix writing offset in case of fault in strncpy_from_kernel_nofault() | * fdd57c20d4 Input: iforce - invert valid length check when fetching device IDs | * 0cafb719be serial: 8250_lpss: Configure DMA also w/o DMA filter | * 59f6596697 serial: 8250: Flush DMA Rx on RLSI | * 118b52c2ae serial: 8250: Fall back to non-DMA Rx if IIR_RDI occurs | * 6ffce7a92e dm ioctl: fix misbehavior if list_versions races with module loading | * 2b104973f7 iio: pressure: ms5611: changed hardcoded SPI speed to value limited | * 1678d4abb2 iio: adc: mp2629: fix potential array out of bound access | * bd22c232ea iio: adc: mp2629: fix wrong comparison of channel | * 656f670613 iio: trigger: sysfs: fix possible memory leak in iio_sysfs_trig_init() | * 1bf8c0aff8 iio: adc: at91_adc: fix possible memory leak in at91_adc_allocate_trigger() | * afc0aea702 usb: typec: mux: Enter safe mode only when pins need to be reconfigured | * 8236628a54 usb: cdns3: host: fix endless superspeed hub port reset | * ead83b0db8 usb: chipidea: fix deadlock in ci_otg_del_timer | * cc9e6d8c55 usb: add NO_LPM quirk for Realforce 87U Keyboard | * 70eca1d261 USB: serial: option: add Fibocom FM160 0x0111 composition | * 1b6a54885c USB: serial: option: add u-blox LARA-L6 modem | * b0467d0059 USB: serial: option: add u-blox LARA-R6 00B modem | * 95688a8a57 USB: serial: option: remove old LARA-R6 PID | * 53dee78ea3 USB: serial: option: add Sierra Wireless EM9191 | * e7764e88e6 USB: bcma: Make GPIO explicitly optional | * a190a83db2 speakup: fix a segfault caused by switching consoles | * b3c6edbee4 slimbus: stream: correct presence rate frequencies | * 6b35ac8315 slimbus: qcom-ngd: Fix build error when CONFIG_SLIM_QCOM_NGD_CTRL=y && CONFIG_QCOM_RPROC_COMMON=m | * 0f847462fe Revert "usb: dwc3: disable USB core PHY management" | * 23ad214a86 ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book Pro 360 | * a36b505749 ALSA: hda/realtek: fix speakers for Samsung Galaxy Book Pro | * 02b94885b2 ALSA: usb-audio: Drop snd_BUG_ON() from snd_usbmidi_output_open() | * 7176d6f3ad drm/amd/display: Add HUBP surface flip interrupt handler | * e57daa7503 tracing: kprobe: Fix potential null-ptr-deref on trace_array in kprobe_event_gen_test_exit() | * 3a41c0f2a5 tracing: kprobe: Fix potential null-ptr-deref on trace_event_file in kprobe_event_gen_test_exit() | * 7291dec4f2 tracing: Fix race where eprobes can be called before the event | * 6517b97134 tracing: Fix wild-memory-access in register_synth_event() | * 07ba4f0603 tracing: Fix memory leak in test_gen_synth_cmd() and test_empty_synth_event() | * 8b318f3032 tracing/ring-buffer: Have polling block on watermark | * 2c21ee020c tracing: Fix memory leak in tracing_read_pipe() | * 00f74b1a98 ring_buffer: Do not deactivate non-existant pages | * 1bea037a1a ftrace: Fix null pointer dereference in ftrace_add_mod() | * fadfcf39fb ftrace: Optimize the allocation for mcount entries | * 5c5f264289 ftrace: Fix the possible incorrect kernel message | * 2ab2494162 cifs: add check for returning value of SMB2_set_info_init | * 5783abda58 net: thunderbolt: Fix error handling in tbnet_init() | * 80e590aeb1 net: microchip: sparx5: Fix potential null-ptr-deref in sparx_stats_init() and sparx5_start() | * 4a55aec142 cifs: Fix wrong return value checking when GETFLAGS | * c8baf1fc24 net/x25: Fix skb leak in x25_lapb_receive_frame() | * af4b57fa6b net: ag71xx: call phylink_disconnect_phy if ag71xx_hw_enable() fail in ag71xx_open() | * 61404a182e cifs: add check for returning value of SMB2_close_init | * d3233f4bf3 platform/surface: aggregator: Do not check for repeated unsequenced packets | * 6969171403 platform/x86/intel: pmc: Don't unconditionally attach Intel PMC when virtualized | * 7d93417d59 drbd: use after free in drbd_create_device() | * fc16a2c81a bridge: switchdev: Fix memory leaks when changing VLAN protocol | * 3d90a668c4 net: hns3: fix setting incorrect phy link ksettings for firmware in resetting process | * 3f7b2ef8fe net: ena: Fix error handling in ena_init() | * 2540eea1bd net: ionic: Fix error handling in ionic_init_module() | * c08c13cb13 xen/pcpu: fix possible memory leak in register_pcpu() | * 97009f07f2 net: dsa: make dsa_master_ioctl() see through port_hwtstamp_get() shims | * 88da008e5e net: mhi: Fix memory leak in mhi_net_dellink() | * 8f839715d0 bnxt_en: Remove debugfs when pci_register_driver failed | * b88713d92b net: caif: fix double disconnect client in chnl_net_open() | * 6d24034160 net: macvlan: Use built-in RCU list checking | * 596230471d mISDN: fix misuse of put_device() in mISDN_register_device() | * 07a6a8cf17 net: liquidio: release resources when liquidio driver open failed | * 19feb6cf41 soc: imx8m: Enable OCOTP clock before reading the register | * 8c54d706d8 net: stmmac: ensure tx function is not running in stmmac_xdp_release() | * 6219f46c2b net: hinic: Fix error handling in hinic_module_init() | * 7a05e39296 mISDN: fix possible memory leak in mISDN_dsp_element_register() | * 0ee6455c9c net: bgmac: Drop free_netdev() from bgmac_enet_remove() | * 7ff4fa179e bpf: Initialize same number of free nodes for each pcpu_freelist | * 12f178cf05 MIPS: Loongson64: Add WARN_ON on kexec related kmalloc failed | * a4d6e024be MIPS: fix duplicate definitions for exported symbols | * 44142b652a nfp: change eeprom length to max length enumerators | * f23058dc23 ata: libata-transport: fix error handling in ata_tdev_add() | * 67b2193146 ata: libata-transport: fix error handling in ata_tlink_add() | * e7bb1b7a7b ata: libata-transport: fix error handling in ata_tport_add() | * 377ff82c33 ata: libata-transport: fix double ata_host_put() in ata_tport_add() | * 494df0b0ef arm64: dts: imx8mn: Fix NAND controller size-cells | * 7178d568f7 arm64: dts: imx8mm: Fix NAND controller size-cells | * 8ccf18c82a ARM: dts: imx7: Fix NAND controller size-cells | * e884a6c2d4 drm: Fix potential null-ptr-deref in drm_vblank_destroy_worker() | * 07e56de876 drm/drv: Fix potential memory leak in drm_dev_init() | * 45c300613b drm/panel: simple: set bpc field for logic technologies displays | * 779f3f9e0c drm/vc4: kms: Fix IS_ERR() vs NULL check for vc4_kms | * 97e5b508e9 pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map | * 9a77b8557f parport_pc: Avoid FIFO port location truncation | * 5d03c2911c siox: fix possible memory leak in siox_device_add() | * 530e987a02 arm64: Fix bit-shifting UB in the MIDR_CPU_MODEL() macro | * d494449782 bpf: Fix memory leaks in __check_func_call | * 25521fd2e2 block: sed-opal: kmalloc the cmd/resp buffers | * 2f21d653c6 scsi: scsi_transport_sas: Fix error handling in sas_phy_add() | * 7cd28bc410 pinctrl: rockchip: list all pins in a possible mux route for PX30 | * ab79b8dbe2 ASoC: soc-utils: Remove __exit for snd_soc_util_exit() | * eaa8edd865 bpf, test_run: Fix alignment problem in bpf_prog_test_run_skb() | * 33cabe04d2 tty: n_gsm: fix sleep-in-atomic-context bug in gsm_control_send | * ae22294e21 serial: imx: Add missing .thaw_noirq hook | * 26db1cd519 serial: 8250: omap: Flush PM QOS work on remove | * e0db709a58 serial: 8250: omap: Fix unpaired pm_runtime_put_sync() in omap8250_remove() | * 83b6d4d6da serial: 8250_omap: remove wait loop from Errata i202 workaround | * 76db05ab70 serial: 8250: omap: Fix missing PM runtime calls for omap8250_set_mctrl() | * 2aee616a6b ARM: at91: pm: avoid soft resetting AC DLL | * 188546c780 ASoC: tas2764: Fix set_tdm_slot in case of single slot | * 5782896daf ASoC: tas2770: Fix set_tdm_slot in case of single slot | * 34eee4189b ASoC: core: Fix use-after-free in snd_soc_exit() | * aa6f8aecbb ARM: dts: at91: sama7g5: fix signal name of pin PB2 | * 487fff700f spi: stm32: Print summary 'callbacks suppressed' message | * 2cec2f65c1 arm64: dts: qcom: sm8350-hdk: Specify which LDO modes are allowed | * 44dbe66bb3 arm64: dts: qcom: sm8250-xperia-edo: Specify which LDO modes are allowed | * 8b2eae7def arm64: dts: qcom: sm8150-xperia-kumano: Specify which LDO modes are allowed | * c8e76eeea7 arm64: dts: qcom: sa8155p-adp: Specify which LDO modes are allowed | * 30571f28bb hugetlbfs: don't delete error page from pagecache | * 14ddbb83c3 KVM: x86/pmu: Do not speculatively query Intel GP PMCs that don't exist yet | * a9b964ed7c spi: intel: Use correct mask for flash and protected regions | * f4eb68642e mtd: spi-nor: intel-spi: Disable write protection only if asked | * 156d0c823c ASoC: codecs: jz4725b: Fix spelling mistake "Sourc" -> "Source", "Routee" -> "Route" | * 5907ff9f2c x86/cpu: Add several Intel server CPU model numbers | * 41e37d04e3 Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm | * b02a025dd1 btrfs: remove pointless and double ulist frees in error paths of qgroup tests | * 1c366c206f drm/imx: imx-tve: Fix return type of imx_tve_connector_mode_valid | * 1c8ded1b38 i2c: i801: add lis3lv02d's I2C address for Vostro 5568 | * b432581f19 i2c: tegra: Allocate DMA memory for DMA engine | * 7b0ae4c7b9 firmware: arm_scmi: Cleanup the core driver removal callback | * 1a8a2fef27 ACPI: x86: Add another system to quirk list for forcing StorageD3Enable | * 8a03a4a5cf NFSv4: Retry LOCK on OLD_STATEID during delegation return | * 49ca2227c4 btrfs: raid56: properly handle the error when unable to find the missing stripe | * 0f7bd3a2df RDMA/efa: Add EFA 0xefa2 PCI ID | * a42d4363e7 ACPI: scan: Add LATT2021 to acpi_ignore_dep_ids[] | * 004decd41b drm/amd/display: Remove wrong pipe control lock | * 7779efbb99 ASoC: rt1308-sdw: add the default value of some registers | * ef1e4ed858 selftests/intel_pstate: fix build for ARCH=x86_64 | * dfd3cc1ef3 selftests/futex: fix build for clang | * 648467236c ASoC: Intel: sof_sdw: add quirk variant for LAPBC710 NUC15 | * 64ee750c29 ASoC: codecs: jz4725b: fix capture selector naming | * 150b74cd06 ASoC: codecs: jz4725b: use right control for Capture Volume | * 5352d8b315 ASoC: codecs: jz4725b: fix reported volume for Master ctl | * 85134577a7 ASoC: codecs: jz4725b: add missed Line In power control bit | * 5e61dffb16 spi: intel: Fix the offset to get the 64K erase opcode | * c697cb2e66 ASoC: wm8962: Add an event handler for TEMP_HP and TEMP_SPK | * 569085124d ASoC: rt1019: Fix the TDM settings | * 4160a515c7 ASoC: mt6660: Keep the pm_runtime enables before component stuff in mt6660_i2c_probe | * 2963ec4535 ASoC: wm8997: Revert "ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe" | * 30a2f9479c ASoC: wm5110: Revert "ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe" | * 3bf6da38a2 ASoC: wm5102: Revert "ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe" | * 94fa250ea5 mm: shmem: don't truncate page if memory failure happens | * 003fa19591 mm: hwpoison: handle non-anonymous THP correctly | * a62b1bc603 mm: hwpoison: refactor refcount check handling * | 49ca4a5978 Revert "bpf, sockmap: Fix sk->sk_forward_alloc warn_on in sk_stream_kill_queues" * | 6fa2a43acd Revert "ALSA: usb-audio: Yet more regression for for the delayed card registration" * | ac2a7a141f Merge 5.15.79 into android13-5.15-lts |/ * 3df0eeae4d Linux 5.15.79 * 599b24eedf x86/cpu: Restore AMD's DE_CFG MSR after resume * 9132fa043f net: tun: call napi_schedule_prep() to ensure we own a napi * 1dea25e25a drm/amdkfd: Migrate in CPU page fault use current mm * a1c303fbd4 marvell: octeontx2: build error: unknown type name 'u64' * d948b22834 dmaengine: at_hdmac: Check return code of dma_async_device_register * c556ecf32a dmaengine: at_hdmac: Fix impossible condition * 8a941ff34e dmaengine: at_hdmac: Don't allow CPU to reorder channel enable * 53831f7a13 dmaengine: at_hdmac: Fix completion of unissued descriptor in case of errors * 14f5462e4a dmaengine: at_hdmac: Fix descriptor handling when issuing it to hardware * 5482403228 dmaengine: at_hdmac: Fix concurrency over the active list * 82ca19414f dmaengine: at_hdmac: Free the memset buf without holding the chan lock * 8fd36e069d dmaengine: at_hdmac: Fix concurrency over descriptor * 1ee012d452 dmaengine: at_hdmac: Fix concurrency problems by removing atc_complete_all() * 90c1b07406 dmaengine: at_hdmac: Protect atchan->status with the channel lock * b5ee1fe06a dmaengine: at_hdmac: Do not call the complete callback on device_terminate_all * 9bbf5df0fc dmaengine: at_hdmac: Fix premature completion of desc in issue_pending * f7d1aaa903 dmaengine: at_hdmac: Start transfer for cyclic channels in issue_pending * e9777b4efc dmaengine: at_hdmac: Don't start transactions at tx_submit level * 4e28674a0e dmaengine: at_hdmac: Fix at_lli struct definition * 49eba53137 cert host tools: Stop complaining about deprecated OpenSSL functions * 69e86c6268 can: j1939: j1939_send_one(): fix missing CAN header initialization * 81fc8f90b8 mm/shmem: use page_mapping() to detect page cache for uffd continue * e91451af11 mm/memremap.c: map FS_DAX device memory as decrypted * 48998c1773 mm/damon/dbgfs: check if rm_contexts input is for a real context * c736ed8541 udf: Fix a slab-out-of-bounds write bug in udf_find_entry() * 2e87eddf57 mms: sdhci-esdhc-imx: Fix SDHCI_RESET_ALL for CQHCI * 91c38504e5 btrfs: zoned: initialize device's zone info for seeding * 432c30ba3f btrfs: selftests: fix wrong error check in btrfs_free_dummy_root() * c9fe4719c6 btrfs: fix match incorrectly in dev_args_match_device * f96fd36936 wifi: ath11k: avoid deadlock during regulatory update in ath11k_regd_update() * 8e2b576caf platform/x86: hp_wmi: Fix rfkill causing soft blocked wifi * cb3ab0e1e0 drm/amdgpu: disable BACO on special BEIGE_GOBY card * dc066a7850 drm/i915/dmabuf: fix sg_table handling in map_dma_buf * afbd118838 nilfs2: fix use-after-free bug of ns_writer on remount * abc082aac0 nilfs2: fix deadlock in nilfs_count_free_blocks() * 589da22881 ata: libata-scsi: fix SYNCHRONIZE CACHE (16) command failure * 51ae4579a5 vmlinux.lds.h: Fix placement of '.data..decrypted' section * 1f8e08ab32 ALSA: usb-audio: Add DSD support for Accuphase DAC-60 * c2451f62b2 ALSA: usb-audio: Add quirk entry for M-Audio Micro * 031d1480a0 ALSA: usb-audio: Yet more regression for for the delayed card registration * 574f51e4aa ALSA: hda/realtek: Add Positivo C6300 model quirk * 7140d7aaf9 ALSA: hda: fix potential memleak in 'add_widget_node' * f6d7a487aa ALSA: hda/ca0132: add quirk for EVGA Z390 DARK * 1ccd55b390 ALSA: hda/hdmi - enable runtime pm for more AMD display audio * 29100c6742 mmc: sdhci-esdhc-imx: use the correct host caps for MMC_CAP_8_BIT_DATA * 3dce99e2eb mmc: sdhci-tegra: Fix SDHCI_RESET_ALL for CQHCI * 9d6bd33e6a mmc: sdhci_am654: Fix SDHCI_RESET_ALL for CQHCI * ad01f16ca9 mmc: sdhci-of-arasan: Fix SDHCI_RESET_ALL for CQHCI * 1aa78c1d01 mmc: cqhci: Provide helper for resetting both SDHCI and CQHCI * c198524a99 MIPS: jump_label: Fix compat branch range check * 9713ceffa4 arm64: efi: Fix handling of misaligned runtime regions and drop warning * 518e49f059 riscv: fix reserved memory setup * d07c3d7491 riscv: vdso: fix build with llvm * cc36c7fa5d riscv: process: fix kernel info leakage * a8d67367ab net: macvlan: fix memory leaks of macvlan_common_newlink * 7b194dd32b ethernet: tundra: free irq when alloc ring failed in tsi108_open() * 7de10342fe net: mv643xx_eth: disable napi when init rxq or txq failed in mv643xx_eth_open() * 88e1dd2d92 ethernet: s2io: disable napi when start nic failed in s2io_card_up() * 3652f1f8d3 net: atlantic: macsec: clear encryption keys from the stack * fca3b0a1fd net: phy: mscc: macsec: clear encryption keys when freeing a flow * 60a0af8813 stmmac: dwmac-loongson: fix missing of_node_put() while module exiting * ee4a9bd2c7 stmmac: dwmac-loongson: fix missing pci_disable_device() in loongson_dwmac_probe() * 4a8770eebc stmmac: dwmac-loongson: fix missing pci_disable_msi() while module exiting * 83196d8dc5 cxgb4vf: shut down the adapter when t4vf_update_port_info() failed in cxgb4vf_open() * 49d8a6e24a mctp: Fix an error handling path in mctp_init() * 29961d2332 stmmac: intel: Update PCH PTP clock rate from 200MHz to 204.8MHz * 8604bebc5c stmmac: intel: Enable 2.5Gbps for Intel AlderLake-S * 7dec6dae2b net: cxgb3_main: disable napi when bind qsets failed in cxgb_up() * 960f9d30de net: cpsw: disable napi in cpsw_ndo_open() * 1360778fdb net/mlx5e: E-Switch, Fix comparing termination table instance * f13e9ebd29 net/mlx5: Allow async trigger completion execution on single CPU systems * 48b73b46a5 net/mlx5: Bridge, verify LAG state when adding bond to bridge * 13b1ea861e net: wwan: iosm: fix memory leak in ipc_pcie_read_bios_cfg * 7e4dcacb4d net: nixge: disable napi when enable interrupts failed in nixge_open() * 409731df63 net: marvell: prestera: fix memory leak in prestera_rxtx_switch_init() * 77ff31cba9 netfilter: Cleanup nft_net->module_list from nf_tables_exit_net() * e62cb1c093 netfilter: nfnetlink: fix potential dead lock in nfnetlink_rcv_msg() * 0bd20318da perf tools: Add the include/perf/ directory to .gitignore * a733671e38 perf stat: Fix printing os->prefix in CSV metrics output * c36e9e2c4a drivers: net: xgene: disable napi when register irq failed in xgene_enet_open() * 4689bd3a1b net: lapbether: fix issue of invalid opcode in lapbeth_open() * 1dd27541aa dmaengine: ti: k3-udma-glue: fix memory leak when register device fail * 992e966caf dmaengine: mv_xor_v2: Fix a resource leak in mv_xor_v2_remove() * 9766af75ba dmaengine: pxa_dma: use platform_get_irq_optional * 301caa0609 tipc: fix the msg->req tlv len check in tipc_nl_compat_name_table_dump_header * 6a264203db net: broadcom: Fix BCMGENET Kconfig * e7871b9a21 net: stmmac: dwmac-meson8b: fix meson8b_devm_clk_prepare_enable() * 261178a1c2 can: af_can: fix NULL pointer dereference in can_rx_register() * 2acb2779b1 ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network * 13ecaa6832 tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent * bc79cb9fb0 drm/vc4: Fix missing platform_unregister_drivers() call in vc4_drm_register() * 2845bc9070 net: wwan: mhi: fix memory leak in mhi_mbim_dellink * 2ce2348c28 net: wwan: iosm: fix memory leak in ipc_wwan_dellink * 7b6bc50f65 hamradio: fix issue of dev reference count leakage in bpq_device_event() * f59adebb8c net: lapbether: fix issue of dev reference count leakage in lapbeth_device_event() * 119407dc32 KVM: s390: pv: don't allow userspace to set the clock under PV * 500bcd3a99 phy: ralink: mt7621-pci: add sentinel to quirks table * 151dc8087b capabilities: fix undefined behavior in bit shift for CAP_TO_MASK * 435c7ddfd5 net: fman: Unregister ethernet device on removal * 3a504d6d96 bnxt_en: fix potentially incorrect return value for ndo_rx_flow_steer * ac257c43fa bnxt_en: Fix possible crash in bnxt_hwrm_set_coal() * d7569302a7 net: tun: Fix memory leaks of napi_get_frags * 430d1f4964 octeontx2-pf: NIX TX overwrites SQ_CTX_HW_S[SQ_INT] * ec0db81883 octeontx2-pf: Use hardware register for CQE count * b89a0d8859 macsec: clear encryption keys from the stack after setting up offload * eeba7f07a0 macsec: fix detection of RXSCs when toggling offloading * 3070a880eb macsec: fix secy->n_rx_sc accounting * e957555a36 macsec: delete new rxsc when offload fails * ad25a115f5 net: gso: fix panic on frag_list with mixed head alloc types * 466ce46f25 bpf: Fix wrong reg type conversion in release_reference() * 35d8130f2a bpf: Add helper macro bpf_for_each_reg_in_vstate * 61274498fb bpf, sock_map: Move cancel_work_sync() out of sock lock * 32b5dd03be bpf: Fix sockmap calling sleepable function in teardown path * e991558189 bpf, sockmap: Fix sk->sk_forward_alloc warn_on in sk_stream_kill_queues * 5ad95d7134 HID: hyperv: fix possible memory leak in mousevsc_probe() * 6dcdd1b68b bpftool: Fix NULL pointer dereference when pin {PROG, MAP, LINK} without FILE * 2fc902245c wifi: mac80211: Set TWT Information Frame Disabled bit as 1 * 95adbd2ac8 bpf, sockmap: Fix the sk->sk_forward_alloc warning of sk_stream_kill_queues * 06615967d4 bpf, verifier: Fix memory leak in array reallocation for stack state * 4335a82c4f soundwire: qcom: check for outanding writes before doing a read * ae4dad2e53 soundwire: qcom: reinit broadcast completion * 38c9fa2cc6 wifi: cfg80211: fix memory leak in query_regdb_file() * 2c6ba0a787 wifi: cfg80211: silence a sparse RCU warning * 921738c280 phy: stm32: fix an error code in probe * fa722006f7 hwspinlock: qcom: correct MMIO max register for newer SoCs * 3c1bb6187e drm/amdkfd: Fix NULL pointer dereference in svm_migrate_to_ram() * b1f8522771 drm/amdkfd: handle CPU fault on COW mapping * 36770c045a drm/amdkfd: avoid recursive lock in migrations back to RAM * 93a5de7e88 fuse: fix readdir cache race * 1920cf9454 thunderbolt: Add DP OUT resource when DP tunnel is discovered * 47dbf24969 thunderbolt: Tear down existing tunnels when resuming from hibernate And update the .xml file with the new symbol that we are tracking and the abi preservation fix: 1 function symbol(s) added 'void __dev_kfree_skb_irq(struct sk_buff *, enum skb_free_reason)' type 'struct sdhci_host' changed member 'union { struct { u8 reinit_uhs; u8 reserve01; u8 drv_type; u16 reserve02; u32 reserve03; }; struct { u64 android_kabi_reserved1; }; union { }; }' was added member 'u64 android_kabi_reserved1' was removed Change-Id: If4a059230a137dee54298fff61ec87306bf96b0f Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-03-24 08:44:06 +00:00
Aran Dalton	a6c4727f6a	UPSTREAM: loop: Fix use-after-free issues ... do_req_filebacked() calls blk_mq_complete_request() synchronously or asynchronously when using asynchronous I/O unless memory allocation fails. Hence, modify loop_handle_cmd() such that it does not dereference 'cmd' nor 'rq' after do_req_filebacked() finished unless we are sure that the request has not yet been completed. This patch fixes the following kernel crash: Unable to handle kernel NULL pointer dereference at virtual address 0000000000000054 Call trace: css_put.42938+0x1c/0x1ac loop_process_work+0xc8c/0xfd4 loop_rootcg_workfn+0x24/0x34 process_one_work+0x244/0x558 worker_thread+0x400/0x8fc kthread+0x16c/0x1e0 ret_from_fork+0x10/0x20 Cc: Christoph Hellwig <hch@lst.de> Cc: Ming Lei <ming.lei@redhat.com> Cc: Jan Kara <jack@suse.cz> Cc: Johannes Weiner <hannes@cmpxchg.org> Cc: Dan Schatzberg <schatzberg.dan@gmail.com> Fixes: c74d40e8b5 ("loop: charge i/o to mem and blk cg") Fixes: bc07c10a36 ("block: loop: support DIO & AIO") Signed-off-by: Bart Van Assche <bvanassche@acm.org> Reviewed-by: Ming Lei <ming.lei@redhat.com> Link: https://lore.kernel.org/r/20230314182155.80625-1-bvanassche@acm.org Signed-off-by: Jens Axboe <axboe@kernel.dk> Bug: 274539241 (cherry picked from commit 9b0cb770f5d7b1ff40bea7ca385438ee94570eec) Signed-off-by: liuyu <liuyu@allwinnertech.com> Signed-off-by: Aran Dalton <arda@allwinnertech.com> Change-Id: I33b1e1fdc722a6fa87bc830531f3cf565fc83248	2023-03-21 17:19:14 +00:00
Greg Kroah-Hartman	20ec745823	Merge 5.15.86 into android13-5.15-lts ... Changes in 5.15.86 drm/amd/display: Manually adjust strobe for DCN303 usb: musb: remove extra check in musb_gadget_vbus_draw arm64: dts: qcom: ipq6018-cp01-c1: use BLSPI1 pins arm64: dts: qcom: sm8250-sony-xperia-edo: fix touchscreen bias-disable arm64: dts: qcom: msm8996: Add MSM8996 Pro support arm64: dts: qcom: msm8996: fix supported-hw in cpufreq OPP tables arm64: dts: qcom: msm8996: fix GPU OPP table ARM: dts: qcom: apq8064: fix coresight compatible arm64: dts: qcom: sdm630: fix UART1 pin bias arm64: dts: qcom: sdm845-cheza: fix AP suspend pin bias arm64: dts: qcom: msm8916: Drop MSS fallback compatible objtool, kcsan: Add volatile read/write instrumentation to whitelist ARM: dts: stm32: Drop stm32mp15xc.dtsi from Avenger96 ARM: dts: stm32: Fix AV96 WLAN regulator gpio property drivers: soc: ti: knav_qmss_queue: Mark knav_acc_firmwares as static arm64: dts: qcom: pm660: Use unique ADC5_VCOIN address in node name arm64: dts: qcom: sm8250: correct LPASS pin pull down soc: qcom: llcc: make irq truly optional arm64: dts: qcom: Correct QMP PHY child node name arm64: dts: qcom: sm8150: fix UFS PHY registers arm64: dts: qcom: sm8250: fix UFS PHY registers arm64: dts: qcom: sm8350: fix UFS PHY registers arm64: dts: qcom: sm8250: drop bogus DP PHY clock soc: qcom: apr: make code more reuseable soc: qcom: apr: Add check for idr_alloc and of_property_read_string_index arm64: dts: qcom: sm6125: fix SDHCI CQE reg names arm: dts: spear600: Fix clcd interrupt soc: ti: knav_qmss_queue: Use pm_runtime_resume_and_get instead of pm_runtime_get_sync soc: ti: knav_qmss_queue: Fix PM disable depth imbalance in knav_queue_probe soc: ti: smartreflex: Fix PM disable depth imbalance in omap_sr_probe arm64: Treat ESR_ELx as a 64-bit register arm64: mm: kfence: only handle translation faults perf: arm_dsu: Fix hotplug callback leak in dsu_pmu_init() perf/arm_dmc620: Fix hotplug callback leak in dmc620_pmu_init() perf/smmuv3: Fix hotplug callback leak in arm_smmu_pmu_init() arm64: dts: ti: k3-am65-main: Drop dma-coherent in crypto node arm64: dts: ti: k3-j721e-main: Drop dma-coherent in crypto node ARM: dts: nuvoton: Remove bogus unit addresses from fixed-partition nodes arm64: dts: mt6779: Fix devicetree build warnings arm64: dts: mt2712e: Fix unit_address_vs_reg warning for oscillators arm64: dts: mt2712e: Fix unit address for pinctrl node arm64: dts: mt2712-evb: Fix vproc fixed regulators unit names arm64: dts: mt2712-evb: Fix usb vbus regulators unit names arm64: dts: mediatek: pumpkin-common: Fix devicetree warnings arm64: dts: mediatek: mt6797: Fix 26M oscillator unit name ARM: dts: dove: Fix assigned-addresses for every PCIe Root Port ARM: dts: armada-370: Fix assigned-addresses for every PCIe Root Port ARM: dts: armada-xp: Fix assigned-addresses for every PCIe Root Port ARM: dts: armada-375: Fix assigned-addresses for every PCIe Root Port ARM: dts: armada-38x: Fix assigned-addresses for every PCIe Root Port ARM: dts: armada-39x: Fix assigned-addresses for every PCIe Root Port ARM: dts: turris-omnia: Add ethernet aliases ARM: dts: turris-omnia: Add switch port 6 node arm64: dts: armada-3720-turris-mox: Add missing interrupt for RTC seccomp: Move copy_seccomp() to no failure path. pstore/ram: Fix error return code in ramoops_probe() ARM: mmp: fix timer_read delay pstore: Avoid kcore oops by vmap()ing with VM_IOREMAP tpm/tpm_ftpm_tee: Fix error handling in ftpm_mod_init() tpm/tpm_crb: Fix error message in __crb_relinquish_locality() ovl: store lower path in ovl_inode ovl: use ovl_copy_{real,upper}attr() wrappers ovl: remove privs in ovl_copyfile() ovl: remove privs in ovl_fallocate() sched/fair: Cleanup task_util and capacity type sched/uclamp: Fix relationship between uclamp and migration margin sched/uclamp: Make task_fits_capacity() use util_fits_cpu() sched/uclamp: Make select_idle_capacity() use util_fits_cpu() sched/fair: Removed useless update of p->recent_used_cpu sched/core: Introduce sched_asym_cpucap_active() sched/uclamp: Make asym_fits_capacity() use util_fits_cpu() cpuidle: dt: Return the correct numbers of parsed idle states alpha: fix TIF_NOTIFY_SIGNAL handling alpha: fix syscall entry in !AUDUT_SYSCALL case x86/sgx: Reduce delay and interference of enclave release PM: hibernate: Fix mistake in kerneldoc comment fs: don't audit the capability check in simple_xattr_list() cpufreq: qcom-hw: Fix memory leak in qcom_cpufreq_hw_read_lut() selftests/ftrace: event_triggers: wait longer for test_event_enable perf: Fix possible memleak in pmu_dev_alloc() lib/debugobjects: fix stat count and optimize debug_objects_mem_init platform/x86: huawei-wmi: fix return value calculation timerqueue: Use rb_entry_safe() in timerqueue_getnext() proc: fixup uptime selftest lib/fonts: fix undefined behavior in bit shift for get_default_font ocfs2: fix memory leak in ocfs2_stack_glue_init() MIPS: vpe-mt: fix possible memory leak while module exiting MIPS: vpe-cmp: fix possible memory leak while module exiting selftests/efivarfs: Add checking of the test return value PNP: fix name memory leak in pnp_alloc_dev() perf/x86/intel/uncore: Fix reference count leak in sad_cfg_iio_topology() perf/x86/intel/uncore: Fix reference count leak in hswep_has_limit_sbox() perf/x86/intel/uncore: Fix reference count leak in snr_uncore_mmio_map() perf/x86/intel/uncore: Fix reference count leak in __uncore_imc_init_box() platform/chrome: cros_usbpd_notify: Fix error handling in cros_usbpd_notify_init() thermal: core: fix some possible name leaks in error paths irqchip: gic-pm: Use pm_runtime_resume_and_get() in gic_probe() irqchip/wpcm450: Fix memory leak in wpcm450_aic_of_init() EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() SUNRPC: Return true/false (not 1/0) from bool functions NFSD: Finish converting the NFSv2 GETACL result encoder nfsd: don't call nfsd_file_put from client states seqfile display genirq/irqdesc: Don't try to remove non-existing sysfs files cpufreq: amd_freq_sensitivity: Add missing pci_dev_put() libfs: add DEFINE_SIMPLE_ATTRIBUTE_SIGNED for signed value lib/notifier-error-inject: fix error when writing -errno to debugfs file debugfs: fix error when writing negative value to atomic_t debugfs file rapidio: fix possible name leaks when rio_add_device() fails rapidio: rio: fix possible name leak in rio_register_mport() clocksource/drivers/sh_cmt: Access registers according to spec mips: ralink: mt7621: define MT7621_SYSC_BASE with __iomem mips: ralink: mt7621: soc queries and tests as functions mips: ralink: mt7621: do not use kzalloc too early futex: Move to kernel/futex/ futex: Resend potentially swallowed owner death notification cpu/hotplug: Make target_store() a nop when target == state cpu/hotplug: Do not bail-out in DYING/STARTING sections clocksource/drivers/timer-ti-dm: Fix missing clk_disable_unprepare in dmtimer_systimer_init_clock() ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage() uprobes/x86: Allow to probe a NOP instruction with 0x66 prefix x86/xen: Fix memory leak in xen_smp_intr_init{_pv}() x86/xen: Fix memory leak in xen_init_lock_cpu() xen/privcmd: Fix a possible warning in privcmd_ioctl_mmap_resource() PM: runtime: Do not call __rpm_callback() from rpm_idle() platform/chrome: cros_ec_typec: Cleanup switch handle return paths platform/chrome: cros_ec_typec: zero out stale pointers platform/x86: mxm-wmi: fix memleak in mxm_wmi_call_mx[ds|mx]() platform/x86: intel_scu_ipc: fix possible name leak in __intel_scu_ipc_register() MIPS: BCM63xx: Add check for NULL for clk in clk_enable MIPS: OCTEON: warn only once if deprecated link status is being used lockd: set other missing fields when unlocking files fs: sysv: Fix sysv_nblocks() returns wrong value rapidio: fix possible UAF when kfifo_alloc() fails eventfd: change int to __u64 in eventfd_signal() ifndef CONFIG_EVENTFD relay: fix type mismatch when allocating memory in relay_create_buf() hfs: Fix OOB Write in hfs_asc2mac rapidio: devices: fix missing put_device in mport_cdev_open platform/mellanox: mlxbf-pmc: Fix event typo wifi: ath9k: hif_usb: fix memory leak of urbs in ath9k_hif_usb_dealloc_tx_urbs() wifi: ath9k: hif_usb: Fix use-after-free in ath9k_hif_usb_reg_in_cb() wifi: rtl8xxxu: Fix reading the vendor of combo chips drm/bridge: adv7533: remove dynamic lane switching from adv7533 bridge libbpf: Fix use-after-free in btf_dump_name_dups libbpf: Fix null-pointer dereference in find_prog_by_sec_insn() ata: libata: move ata_{port,link,dev}_dbg to standard pr_XXX() macros ata: add/use ata_taskfile::{error|status} fields ata: libata: fix NCQ autosense logic ipmi: kcs: Poll OBF briefly to reduce OBE latency drm/amdgpu/powerplay/psm: Fix memory leak in power state init media: v4l2-ctrls: Fix off-by-one error in integer menu control check media: coda: jpeg: Add check for kmalloc media: adv748x: afe: Select input port when initializing AFE media: i2c: ad5820: Fix error path venus: pm_helpers: Fix error check in vcodec_domains_get() soreuseport: Fix socket selection for SO_INCOMING_CPU. media: exynos4-is: don't rely on the v4l2_async_subdev internals libbpf: Btf dedup identical struct test needs check for nested structs/arrays can: kvaser_usb: do not increase tx statistics when sending error message frames can: kvaser_usb: kvaser_usb_leaf: Get capabilities from device can: kvaser_usb: kvaser_usb_leaf: Rename {leaf,usbcan}_cmd_error_event to {leaf,usbcan}_cmd_can_error_event can: kvaser_usb: kvaser_usb_leaf: Handle CMD_ERROR_EVENT can: kvaser_usb_leaf: Set Warning state even without bus errors can: kvaser_usb: make use of units.h in assignment of frequency can: kvaser_usb_leaf: Fix improved state not being reported can: kvaser_usb_leaf: Fix wrong CAN state after stopping can: kvaser_usb_leaf: Fix bogus restart events can: kvaser_usb: Add struct kvaser_usb_busparams can: kvaser_usb: Compare requested bittiming parameters with actual parameters in do_set_{,data}_bittiming drm/rockchip: lvds: fix PM usage counter unbalance in poweron clk: renesas: r9a06g032: Repair grave increment error spi: Update reference to struct spi_controller drm/panel/panel-sitronix-st7701: Remove panel on DSI attach failure ima: Handle -ESTALE returned by ima_filter_rule_match() drm/msm/hdmi: drop unused GPIO support drm/msm/hdmi: use devres helper for runtime PM management bpf: Fix slot type check in check_stack_write_var_off media: vivid: fix compose size exceed boundary media: platform: exynos4-is: fix return value check in fimc_md_probe() bpf: propagate precision in ALU/ALU64 operations bpf: Check the other end of slot_type for STACK_SPILL bpf: propagate precision across all frames, not just the last one clk: qcom: gcc-sm8250: Use retention mode for USB GDSCs mtd: Fix device name leak when register device failed in add_mtd_device() Input: joystick - fix Kconfig warning for JOYSTICK_ADC wifi: rsi: Fix handling of 802.3 EAPOL frames sent via control port media: camss: Clean up received buffers on failed start of streaming net, proc: Provide PROC_FS=n fallback for proc_create_net_single_write() rxrpc: Fix ack.bufferSize to be 0 when generating an ack bfq: fix waker_bfqq inconsistency crash drm/radeon: Add the missed acpi_put_table() to fix memory leak drm/mediatek: Modify dpi power on/off sequence. ASoC: pxa: fix null-pointer dereference in filter() libbpf: Fix uninitialized warning in btf_dump_dump_type_data nvmet: only allocate a single slab for bvecs regulator: core: fix unbalanced of node refcount in regulator_dev_lookup() amdgpu/pm: prevent array underflow in vega20_odn_edit_dpm_table() nvme: return err on nvme_init_non_mdts_limits fail regulator: qcom-rpmh: Fix PMR735a S3 regulator spec drm/fourcc: Add packed 10bit YUV 4:2:0 format drm/fourcc: Fix vsub/hsub for Q410 and Q401 integrity: Fix memory leakage in keyring allocation error path ima: Fix misuse of dereference of pointer in template_desc_init_fields() block: clear ->slave_dir when dropping the main slave_dir reference wifi: ath10k: Fix return value in ath10k_pci_init() drm/msm/a6xx: Fix speed-bin detection vs probe-defer mtd: lpddr2_nvm: Fix possible null-ptr-deref Input: elants_i2c - properly handle the reset GPIO when power is off media: vidtv: Fix use-after-free in vidtv_bridge_dvb_init() media: solo6x10: fix possible memory leak in solo_sysfs_init() media: platform: exynos4-is: Fix error handling in fimc_md_init() media: videobuf-dma-contig: use dma_mmap_coherent inet: add READ_ONCE(sk->sk_bound_dev_if) in inet_csk_bind_conflict() mtd: spi-nor: hide jedec_id sysfs attribute if not present mtd: spi-nor: Fix the number of bytes for the dummy cycles bpf: Move skb->len == 0 checks into __bpf_redirect HID: hid-sensor-custom: set fixed size for custom attributes pinctrl: k210: call of_node_put() ALSA: pcm: fix undefined behavior in bit shift for SNDRV_PCM_RATE_KNOT ALSA: seq: fix undefined behavior in bit shift for SNDRV_SEQ_FILTER_USE_EVENT regulator: core: use kfree_const() to free space conditionally clk: rockchip: Fix memory leak in rockchip_clk_register_pll() drm/amdgpu: fix pci device refcount leak bonding: fix link recovery in mode 2 when updelay is nonzero mtd: maps: pxa2xx-flash: fix memory leak in probe drbd: remove call to memset before free device/resource/connection drbd: destroy workqueue when drbd device was freed ASoC: qcom: Add checks for devm_kcalloc media: vimc: Fix wrong function called when vimc_init() fails media: imon: fix a race condition in send_packet() clk: imx8mn: rename vpu_pll to m7_alt_pll clk: imx: replace osc_hdmi with dummy clk: imx8mn: fix imx8mn_sai2_sels clocks list clk: imx8mn: fix imx8mn_enet_phy_sels clocks list pinctrl: pinconf-generic: add missing of_node_put() media: dvb-core: Fix ignored return value in dvb_register_frontend() media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() media: s5p-mfc: Add variant data for MFC v7 hardware for Exynos 3250 SoC drm/tegra: Add missing clk_disable_unprepare() in tegra_dc_probe() ASoC: dt-bindings: wcd9335: fix reset line polarity in example ASoC: mediatek: mtk-btcvsd: Add checks for write and read of mtk_btcvsd_snd NFSv4.2: Clear FATTR4_WORD2_SECURITY_LABEL when done decoding NFSv4.2: Fix a memory stomp in decode_attr_security_label NFSv4.2: Fix initialisation of struct nfs4_label NFSv4: Fix a credential leak in _nfs4_discover_trunking() NFSv4: Fix a deadlock between nfs4_open_recover_helper() and delegreturn NFS: Fix an Oops in nfs_d_automount() ALSA: asihpi: fix missing pci_disable_device() wifi: iwlwifi: mvm: fix double free on tx path. ASoC: mediatek: mt8173: Fix debugfs registration for components ASoC: mediatek: mt8173: Enable IRQ when pdata is ready drm/amd/pm/smu11: BACO is supported when it's in BACO state drm/radeon: Fix PCI device refcount leak in radeon_atrm_get_bios() drm/amdgpu: Fix PCI device refcount leak in amdgpu_atrm_get_bios() drm/amdkfd: Fix memory leakage ASoC: pcm512x: Fix PM disable depth imbalance in pcm512x_probe netfilter: conntrack: set icmpv6 redirects as RELATED Input: wistron_btns - disable on UML bpf, sockmap: Fix repeated calls to sock_put() when msg has more_data bpf, sockmap: Fix missing BPF_F_INGRESS flag when using apply_bytes bpf, sockmap: Fix data loss caused by using apply_bytes on ingress redirect bonding: uninitialized variable in bond_miimon_inspect() spi: spidev: mask SPI_CS_HIGH in SPI_IOC_RD_MODE wifi: mac80211: fix memory leak in ieee80211_if_add() wifi: cfg80211: Fix not unregister reg_pdev when load_builtin_regdb_keys() fails mt76: stop the radar detector after leaving dfs channel wifi: mt76: mt7921: fix reporting of TX AGGR histogram wifi: mt76: fix coverity overrun-call in mt76_get_txpower() regulator: core: fix module refcount leak in set_supply() clk: qcom: lpass-sc7180: Fix pm_runtime usage clk: qcom: clk-krait: fix wrong div2 functions hsr: Add a rcu-read lock to hsr_forward_skb(). hsr: Avoid double remove of a node. hsr: Disable netpoll. hsr: Synchronize sending frames to have always incremented outgoing seq nr. hsr: Synchronize sequence number updates. configfs: fix possible memory leak in configfs_create_dir() regulator: core: fix resource leak in regulator_register() hwmon: (jc42) Convert register access and caching to regmap/regcache hwmon: (jc42) Restore the min/max/critical temperatures on resume bpf, sockmap: fix race in sock_map_free() ALSA: pcm: Set missing stop_operating flag at undoing trigger start media: saa7164: fix missing pci_disable_device() ALSA: mts64: fix possible null-ptr-defer in snd_mts64_interrupt xprtrdma: Fix regbuf data not freed in rpcrdma_req_create() SUNRPC: Fix missing release socket in rpc_sockname() NFSv4.x: Fail client initialisation if state manager thread can't run riscv, bpf: Emit fixed-length instructions for BPF_PSEUDO_FUNC mmc: alcor: fix return value check of mmc_add_host() mmc: moxart: fix return value check of mmc_add_host() mmc: mxcmmc: fix return value check of mmc_add_host() mmc: pxamci: fix return value check of mmc_add_host() mmc: rtsx_pci: fix return value check of mmc_add_host() mmc: rtsx_usb_sdmmc: fix return value check of mmc_add_host() mmc: toshsd: fix return value check of mmc_add_host() mmc: vub300: fix return value check of mmc_add_host() mmc: wmt-sdmmc: fix return value check of mmc_add_host() mmc: atmel-mci: fix return value check of mmc_add_host() mmc: omap_hsmmc: fix return value check of mmc_add_host() mmc: meson-gx: fix return value check of mmc_add_host() mmc: via-sdmmc: fix return value check of mmc_add_host() mmc: wbsd: fix return value check of mmc_add_host() mmc: mmci: fix return value check of mmc_add_host() mmc: renesas_sdhi: alway populate SCC pointer memstick: ms_block: Add error handling support for add_disk() memstick/ms_block: Add check for alloc_ordered_workqueue mmc: core: Normalize the error handling branch in sd_read_ext_regs() regulator: qcom-labibb: Fix missing of_node_put() in qcom_labibb_regulator_probe() media: c8sectpfe: Add of_node_put() when breaking out of loop media: coda: Add check for dcoda_iram_alloc media: coda: Add check for kmalloc clk: samsung: Fix memory leak in _samsung_clk_register_pll() spi: spi-gpio: Don't set MOSI as an input if not 3WIRE mode wifi: rtl8xxxu: Add __packed to struct rtl8723bu_c2h wifi: rtl8xxxu: Fix the channel width reporting wifi: brcmfmac: Fix error return code in brcmf_sdio_download_firmware() blktrace: Fix output non-blktrace event when blk_classic option enabled bpf: Do not zero-extend kfunc return values clk: socfpga: Fix memory leak in socfpga_gate_init() net: vmw_vsock: vmci: Check memcpy_from_msg() net: defxx: Fix missing err handling in dfx_init() net: stmmac: selftests: fix potential memleak in stmmac_test_arpoffload() net: stmmac: fix possible memory leak in stmmac_dvr_probe() drivers: net: qlcnic: Fix potential memory leak in qlcnic_sriov_init() of: overlay: fix null pointer dereferencing in find_dup_cset_node_entry() and find_dup_cset_prop() ethernet: s2io: don't call dev_kfree_skb() under spin_lock_irqsave() net: farsync: Fix kmemleak when rmmods farsync net/tunnel: wait until all sk_user_data reader finish before releasing the sock net: apple: mace: don't call dev_kfree_skb() under spin_lock_irqsave() net: apple: bmac: don't call dev_kfree_skb() under spin_lock_irqsave() net: emaclite: don't call dev_kfree_skb() under spin_lock_irqsave() net: ethernet: dnet: don't call dev_kfree_skb() under spin_lock_irqsave() hamradio: don't call dev_kfree_skb() under spin_lock_irqsave() net: amd: lance: don't call dev_kfree_skb() under spin_lock_irqsave() af_unix: call proto_unregister() in the error path in af_unix_init() net: amd-xgbe: Fix logic around active and passive cables net: amd-xgbe: Check only the minimum speed for active/passive cables can: tcan4x5x: Remove invalid write in clear_interrupts can: m_can: Call the RAM init directly from m_can_chip_config can: tcan4x5x: Fix use of register error status mask net: lan9303: Fix read error execution path ntb_netdev: Use dev_kfree_skb_any() in interrupt context sctp: sysctl: make extra pointers netns aware Bluetooth: MGMT: Fix error report for ADD_EXT_ADV_PARAMS Bluetooth: btintel: Fix missing free skb in btintel_setup_combined() Bluetooth: btusb: don't call kfree_skb() under spin_lock_irqsave() Bluetooth: hci_qca: don't call kfree_skb() under spin_lock_irqsave() Bluetooth: hci_ll: don't call kfree_skb() under spin_lock_irqsave() Bluetooth: hci_h5: don't call kfree_skb() under spin_lock_irqsave() Bluetooth: hci_bcsp: don't call kfree_skb() under spin_lock_irqsave() Bluetooth: hci_core: don't call kfree_skb() under spin_lock_irqsave() Bluetooth: RFCOMM: don't call kfree_skb() under spin_lock_irqsave() stmmac: fix potential division by 0 i40e: Fix the inability to attach XDP program on downed interface net: dsa: tag_8021q: avoid leaking ctx on dsa_tag_8021q_register() error path apparmor: fix a memleak in multi_transaction_new() apparmor: fix lockdep warning when removing a namespace apparmor: Fix abi check to include v8 abi crypto: hisilicon/qm - fix missing destroy qp_idr crypto: sun8i-ss - use dma_addr instead u32 crypto: nitrox - avoid double free on error path in nitrox_sriov_init() scsi: core: Fix a race between scsi_done() and scsi_timeout() apparmor: Use pointer to struct aa_label for lbs_cred PCI: dwc: Fix n_fts[] array overrun RDMA/core: Fix order of nldev_exit call PCI: pci-epf-test: Register notifier if only core_init_notifier is enabled f2fs: Fix the race condition of resize flag between resizefs crypto: rockchip - do not do custom power management crypto: rockchip - do not store mode globally crypto: rockchip - add fallback for cipher crypto: rockchip - add fallback for ahash crypto: rockchip - better handle cipher key crypto: rockchip - remove non-aligned handling crypto: rockchip - rework by using crypto_engine apparmor: Fix memleak in alloc_ns() f2fs: fix to invalidate dcc->f2fs_issue_discard in error path f2fs: fix normal discard process f2fs: fix to destroy sbi->post_read_wq in error path of f2fs_fill_super() RDMA/irdma: Report the correct link speed scsi: qla2xxx: Fix set-but-not-used variable warnings RDMA/siw: Fix immediate work request flush to completion queue IB/mad: Don't call to function that might sleep while in atomic context PCI: vmd: Disable MSI remapping after suspend RDMA/restrack: Release MR restrack when delete RDMA/core: Make sure "ib_port" is valid when access sysfs node RDMA/nldev: Return "-EAGAIN" if the cm_id isn't from expected port RDMA/siw: Set defined status for work completion with undefined status scsi: scsi_debug: Fix a warning in resp_write_scat() crypto: ccree - Remove debugfs when platform_driver_register failed crypto: cryptd - Use request context instead of stack for sub-request crypto: hisilicon/qm - add missing pci_dev_put() in q_num_set() RDMA/hns: Repacing 'dseg_len' by macros in fill_ext_sge_inl_data() RDMA/hns: Fix ext_sge num error when post send PCI: Check for alloc failure in pci_request_irq() RDMA/hfi: Decrease PCI device reference count in error path crypto: ccree - Make cc_debugfs_global_fini() available for module init function RDMA/hns: fix memory leak in hns_roce_alloc_mr() RDMA/rxe: Fix NULL-ptr-deref in rxe_qp_do_cleanup() when socket create failed dt-bindings: imx6q-pcie: Fix clock names for imx6sx and imx8mq dt-bindings: visconti-pcie: Fix interrupts array max constraints scsi: hpsa: Fix possible memory leak in hpsa_init_one() crypto: tcrypt - Fix multibuffer skcipher speed test mem leak padata: Always leave BHs disabled when running ->parallel() padata: Fix list iterator in padata_do_serial() scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add() scsi: hpsa: Fix error handling in hpsa_add_sas_host() scsi: hpsa: Fix possible memory leak in hpsa_add_sas_device() scsi: efct: Fix possible memleak in efct_device_init() scsi: scsi_debug: Fix a warning in resp_verify() scsi: scsi_debug: Fix a warning in resp_report_zones() scsi: fcoe: Fix possible name leak when device_register() fails scsi: scsi_debug: Fix possible name leak in sdebug_add_host_helper() scsi: ipr: Fix WARNING in ipr_init() scsi: fcoe: Fix transport not deattached when fcoe_if_init() fails scsi: snic: Fix possible UAF in snic_tgt_create() RDMA/nldev: Add checks for nla_nest_start() in fill_stat_counter_qps() f2fs: avoid victim selection from previous victim section RDMA/nldev: Fix failure to send large messages crypto: amlogic - Remove kcalloc without check crypto: omap-sham - Use pm_runtime_resume_and_get() in omap_sham_probe() riscv/mm: add arch hook arch_clear_hugepage_flags RDMA/hfi1: Fix error return code in parse_platform_config() RDMA/srp: Fix error return code in srp_parse_options() PCI: mt7621: Rename mt7621_pci_ to mt7621_pcie_ PCI: mt7621: Add sentinel to quirks table orangefs: Fix sysfs not cleanup when dev init failed RDMA/hns: Fix AH attr queried by query_qp RDMA/hns: Fix PBL page MTR find RDMA/hns: Fix page size cap from firmware RDMA/hns: Fix error code of CMD crypto: img-hash - Fix variable dereferenced before check 'hdev->req' hwrng: amd - Fix PCI device refcount leak hwrng: geode - Fix PCI device refcount leak IB/IPoIB: Fix queue count inconsistency for PKEY child interfaces RISC-V: Align the shadow stack drivers: dio: fix possible memory leak in dio_init() serial: tegra: Read DMA status before terminating serial: 8250_bcm7271: Fix error handling in brcmuart_init() class: fix possible memory leak in __class_register() vfio: platform: Do not pass return buffer to ACPI _RST method uio: uio_dmem_genirq: Fix missing unlock in irq configuration uio: uio_dmem_genirq: Fix deadlock between irq config and handling usb: fotg210-udc: Fix ages old endianness issues staging: vme_user: Fix possible UAF in tsi148_dma_list_add usb: typec: Check for ops->exit instead of ops->enter in altmode_exit usb: typec: tcpci: fix of node refcount leak in tcpci_register_port() usb: typec: tipd: Cleanup resources if devm_tps6598_psy_register fails usb: typec: tipd: Fix spurious fwnode_handle_put in error path extcon: usbc-tusb320: Add support for mode setting and reset extcon: usbc-tusb320: Add support for TUSB320L usb: typec: Factor out non-PD fwnode properties extcon: usbc-tusb320: Factor out extcon into dedicated functions extcon: usbc-tusb320: Add USB TYPE-C support extcon: usbc-tusb320: Update state on probe even if no IRQ pending serial: amba-pl011: avoid SBSA UART accessing DMACR register serial: pl011: Do not clear RX FIFO & RX interrupt in unthrottle. serial: stm32: move dma_request_chan() before clk_prepare_enable() serial: pch: Fix PCI device refcount leak in pch_request_dma() tty: serial: clean up stop-tx part in altera_uart_tx_chars() tty: serial: altera_uart_{r,t}x_chars() need only uart_port serial: altera_uart: fix locking in polling mode serial: sunsab: Fix error handling in sunsab_init() test_firmware: fix memory leak in test_firmware_init() misc: ocxl: fix possible name leak in ocxl_file_register_afu() ocxl: fix pci device refcount leak when calling get_function_0() misc: tifm: fix possible memory leak in tifm_7xx1_switch_media() misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os firmware: raspberrypi: fix possible memory leak in rpi_firmware_probe() cxl: fix possible null-ptr-deref in cxl_guest_init_afu|adapter() cxl: fix possible null-ptr-deref in cxl_pci_init_afu|adapter() iio: temperature: ltc2983: make bulk write buffer DMA-safe iio: adis: handle devices that cannot unmask the drdy pin iio: adis: stylistic changes iio:imu:adis: Move exports into IIO_ADISLIB namespace iio: adis: add '__adis_enable_irq()' implementation counter: stm32-lptimer-cnt: fix the check on arr and cmp registers update coresight: trbe: remove cpuhp instance node before remove cpuhp state usb: roles: fix of node refcount leak in usb_role_switch_is_parent() usb: gadget: f_hid: fix f_hidg lifetime vs cdev usb: gadget: f_hid: fix refcount leak on error path drivers: mcb: fix resource leak in mcb_probe() mcb: mcb-parse: fix error handing in chameleon_parse_gdd() chardev: fix error handling in cdev_device_add() i2c: pxa-pci: fix missing pci_disable_device() on error in ce4100_i2c_probe staging: rtl8192u: Fix use after free in ieee80211_rx() staging: rtl8192e: Fix potential use-after-free in rtllib_rx_Monitor() vme: Fix error not catched in fake_init() gpiolib: Get rid of redundant 'else' gpiolib: cdev: fix NULL-pointer dereferences gpiolib: make struct comments into real kernel docs gpiolib: protect the GPIO device against being dropped while in use by user-space i2c: mux: reg: check return value after calling platform_get_resource() i2c: ismt: Fix an out-of-bounds bug in ismt_access() usb: storage: Add check for kcalloc tracing/hist: Fix issue of losting command info in error_log ksmbd: Fix resource leak in ksmbd_session_rpc_open() samples: vfio-mdev: Fix missing pci_disable_device() in mdpy_fb_probe() thermal/drivers/imx8mm_thermal: Validate temperature range thermal/drivers/qcom/temp-alarm: Fix inaccurate warning for gen2 thermal/drivers/qcom/lmh: Fix irq handler return value fbdev: ssd1307fb: Drop optional dependency fbdev: pm2fb: fix missing pci_disable_device() fbdev: via: Fix error in via_core_init() fbdev: vermilion: decrease reference count in error path fbdev: ep93xx-fb: Add missing clk_disable_unprepare in ep93xxfb_probe() fbdev: geode: don't build on UML fbdev: uvesafb: don't build on UML fbdev: uvesafb: Fixes an error handling path in uvesafb_probe() HSI: omap_ssi_core: fix unbalanced pm_runtime_disable() HSI: omap_ssi_core: fix possible memory leak in ssi_probe() power: supply: fix residue sysfs file in error handle route of __power_supply_register() perf trace: Return error if a system call doesn't exist perf trace: Use macro RAW_SYSCALL_ARGS_NUM to replace number perf trace: Handle failure when trace point folder is missed perf symbol: correction while adjusting symbol power: supply: z2_battery: Fix possible memleak in z2_batt_probe() HSI: omap_ssi_core: Fix error handling in ssi_init() power: supply: ab8500: Fix error handling in ab8500_charger_init() power: supply: fix null pointer dereferencing in power_supply_get_battery_info perf stat: Refactor __run_perf_stat() common code perf stat: Do not delay the workload with --delay RDMA/siw: Fix pointer cast warning fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst() overflow: Implement size_t saturating arithmetic helpers fs/ntfs3: Harden against integer overflows iommu/sun50i: Fix reset release iommu/sun50i: Consider all fault sources for reset iommu/sun50i: Fix R/W permission check iommu/sun50i: Fix flush size iommu/rockchip: fix permission bits in page table entries v2 phy: usb: s2 WoL wakeup_count not incremented for USB->Eth devices include/uapi/linux/swab: Fix potentially missing __always_inline pwm: tegra: Improve required rate calculation fs/ntfs3: Fix slab-out-of-bounds read in ntfs_trim_fs dmaengine: idxd: Fix crc_val field for completion record rtc: rtc-cmos: Do not check ACPI_FADT_LOW_POWER_S0 rtc: cmos: Fix event handler registration ordering issue rtc: cmos: Fix wake alarm breakage rtc: cmos: fix build on non-ACPI platforms rtc: cmos: Call cmos_wake_setup() from cmos_do_probe() rtc: cmos: Call rtc_wake_setup() from cmos_do_probe() rtc: cmos: Eliminate forward declarations of some functions rtc: cmos: Rename ACPI-related functions rtc: cmos: Disable ACPI RTC event on removal rtc: snvs: Allow a time difference on clock register read rtc: pcf85063: Fix reading alarm iommu/amd: Fix pci device refcount leak in ppr_notifier() iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe() macintosh: fix possible memory leak in macio_add_one_device() macintosh/macio-adb: check the return value of ioremap() powerpc/52xx: Fix a resource leak in an error handling path cxl: Fix refcount leak in cxl_calc_capp_routing powerpc/xmon: Fix -Wswitch-unreachable warning in bpt_cmds powerpc/xive: add missing iounmap() in error path in xive_spapr_populate_irq_data() powerpc/perf: callchain validate kernel stack pointer bounds powerpc/83xx/mpc832x_rdb: call platform_device_put() in error case in of_fsl_spi_probe() powerpc/hv-gpci: Fix hv_gpci event list selftests/powerpc: Fix resource leaks iommu/sun50i: Remove IOMMU_DOMAIN_IDENTITY pwm: sifive: Call pwm_sifive_update_clock() while mutex is held pwm: mtk-disp: Fix the parameters calculated by the enabled flag of disp_pwm pwm: mediatek: always use bus clock for PWM on MT7622 remoteproc: sysmon: fix memory leak in qcom_add_sysmon_subdev() remoteproc: qcom: q6v5: Fix potential null-ptr-deref in q6v5_wcss_init_mmio() remoteproc: qcom_q6v5_pas: disable wakeup on probe fail or remove remoteproc: qcom_q6v5_pas: detach power domains on remove remoteproc: qcom_q6v5_pas: Fix missing of_node_put() in adsp_alloc_memory_region() remoteproc: qcom: q6v5: Fix missing clk_disable_unprepare() in q6v5_wcss_qcs404_power_on() powerpc/eeh: Drop redundant spinlock initialization powerpc/pseries/eeh: use correct API for error log size mfd: bd957x: Fix Kconfig dependency on REGMAP_IRQ mfd: qcom_rpm: Fix an error handling path in qcom_rpm_probe() mfd: pm8008: Remove driver data structure pm8008_data mfd: pm8008: Fix return value check in pm8008_probe() netfilter: flowtable: really fix NAT IPv6 offload rtc: st-lpc: Add missing clk_disable_unprepare in st_rtc_probe() rtc: pic32: Move devm_rtc_allocate_device earlier in pic32_rtc_probe() rtc: pcf85063: fix pcf85063_clkout_control nfsd: under NFSv4.1, fix double svc_xprt_put on rpc_create failure net: macsec: fix net device access prior to holding a lock mISDN: hfcsusb: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() mISDN: hfcpci: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() mISDN: hfcmulti: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() block, bfq: fix possible uaf for 'bfqq->bic' selftests/bpf: Add test for unstable CT lookup API net: enetc: avoid buffer leaks on xdp_do_redirect() failure nfc: pn533: Clear nfc_target before being used unix: Fix race in SOCK_SEQPACKET's unix_dgram_sendmsg() r6040: Fix kmemleak in probe and remove igc: Enhance Qbv scheduling by using first flag bit igc: Use strict cycles for Qbv scheduling igc: Add checking for basetime less than zero igc: allow BaseTime 0 enrollment for Qbv igc: recalculate Qbv end_time by considering cycle time igc: Lift TAPRIO schedule restriction igc: Set Qbv start_time and end_time to end_time if not being configured in GCL rtc: mxc_v2: Add missing clk_disable_unprepare() selftests: devlink: fix the fd redirect in dummy_reporter_test openvswitch: Fix flow lookup to use unmasked key soc: mediatek: pm-domains: Fix the power glitch issue arm64: dts: mt8183: Fix Mali GPU clock skbuff: Account for tail adjustment during pull operations mailbox: mpfs: read the system controller's status mailbox: arm_mhuv2: Fix return value check in mhuv2_probe() mailbox: zynq-ipi: fix error handling while device_register() fails net_sched: reject TCF_EM_SIMPLE case for complex ematch module rxrpc: Fix missing unlock in rxrpc_do_sendmsg() myri10ge: Fix an error handling path in myri10ge_probe() net: stream: purge sk_error_queue in sk_stream_kill_queues() HID: amd_sfh: Add missing check for dma_alloc_coherent rcu: Fix __this_cpu_read() lockdep warning in rcu_force_quiescent_state() arm64: make is_ttbrX_addr() noinstr-safe video: hyperv_fb: Avoid taking busy spinlock on panic path x86/hyperv: Remove unregister syscore call from Hyper-V cleanup binfmt_misc: fix shift-out-of-bounds in check_special_flags fs: jfs: fix shift-out-of-bounds in dbAllocAG udf: Avoid double brelse() in udf_rename() jfs: Fix fortify moan in symlink fs: jfs: fix shift-out-of-bounds in dbDiscardAG ACPICA: Fix error code path in acpi_ds_call_control_method() nilfs2: fix shift-out-of-bounds/overflow in nilfs_sb2_bad_offset() nilfs2: fix shift-out-of-bounds due to too large exponent of block size acct: fix potential integer overflow in encode_comp_t() hfs: fix OOB Read in __hfs_brec_find drm/etnaviv: add missing quirks for GC300 media: imx-jpeg: Disable useless interrupt to avoid kernel panic brcmfmac: return error when getting invalid max_flowrings from dongle wifi: ath9k: verify the expected usb_endpoints are present wifi: ar5523: Fix use-after-free on ar5523_cmd() timed out ASoC: codecs: rt298: Add quirk for KBL-R RVP platform ipmi: fix memleak when unload ipmi driver drm/amd/display: prevent memory leak Revert "drm/amd/display: Limit max DSC target bpp for specific monitors" qed (gcc13): use u16 for fid to be big enough bpf: make sure skb->len != 0 when redirecting to a tunneling device net: ethernet: ti: Fix return type of netcp_ndo_start_xmit() hamradio: baycom_epp: Fix return type of baycom_send_packet() wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmf_fw_alloc_request() igb: Do not free q_vector unless new one was allocated drm/amdgpu: Fix type of second parameter in trans_msg() callback drm/amdgpu: Fix type of second parameter in odn_edit_dpm_table() callback s390/ctcm: Fix return type of ctc{mp,}m_tx() s390/netiucv: Fix return type of netiucv_tx() s390/lcs: Fix return type of lcs_start_xmit() drm/msm: Use drm_mode_copy() drm/rockchip: Use drm_mode_copy() drm/sti: Use drm_mode_copy() drm/mediatek: Fix return type of mtk_hdmi_bridge_mode_valid() drivers/md/md-bitmap: check the return value of md_bitmap_get_counter() md/raid1: stop mdx_raid1 thread when raid1 array run failed drm/amd/display: fix array index out of bound error in bios parser net: add atomic_long_t to net_device_stats fields ipv6/sit: use DEV_STATS_INC() to avoid data-races mrp: introduce active flags to prevent UAF when applicant uninit ppp: associate skb with a device at tx bpf: Prevent decl_tag from being referenced in func_proto arg ethtool: avoiding integer overflow in ethtool_phys_id() media: dvb-frontends: fix leak of memory fw media: dvbdev: adopts refcnt to avoid UAF media: dvb-usb: fix memory leak in dvb_usb_adapter_init() blk-mq: fix possible memleak when register 'hctx' failed drm/amd/display: Use the largest vready_offset in pipe group libbpf: Avoid enum forward-declarations in public API in C++ mode regulator: core: fix use_count leakage when handling boot-on wifi: mt76: do not run mt76u_status_worker if the device is not running mmc: f-sdh30: Add quirks for broken timeout clock capability mmc: renesas_sdhi: better reset from HS400 mode media: si470x: Fix use-after-free in si470x_int_in_callback() clk: st: Fix memory leak in st_of_quadfs_setup() crypto: hisilicon/hpre - fix resource leak in remove process scsi: lpfc: Fix hard lockup when reading the rx_monitor from debugfs scsi: ufs: Reduce the START STOP UNIT timeout scsi: elx: libefc: Fix second parameter type in state callbacks hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param() drm/fsl-dcu: Fix return type of fsl_dcu_drm_connector_mode_valid() drm/sti: Fix return type of sti_{dvo,hda,hdmi}_connector_mode_valid() orangefs: Fix kmemleak in orangefs_prepare_debugfs_help_string() orangefs: Fix kmemleak in orangefs_{kernel,client}_debug_init() tools/include: Add _RET_IP_ and math definitions to kernel.h KVM: selftests: Fix build regression by using accessor function hwmon: (jc42) Fix missing unlock on error in jc42_write() ALSA/ASoC: hda: move/rename snd_hdac_ext_stop_streams to hdac_stream.c ALSA: hda: add snd_hdac_stop_streams() helper ASoC: Intel: Skylake: Fix driver hang during shutdown ASoC: mediatek: mt8173-rt5650-rt5514: fix refcount leak in mt8173_rt5650_rt5514_dev_probe() ASoC: audio-graph-card: fix refcount leak of cpu_ep in __graph_for_each_link() ASoC: rockchip: pdm: Add missing clk_disable_unprepare() in rockchip_pdm_runtime_resume() ASoC: mediatek: mt8183: fix refcount leak in mt8183_mt6358_ts3a227_max98357_dev_probe() ASoC: wm8994: Fix potential deadlock ASoC: rockchip: spdif: Add missing clk_disable_unprepare() in rk_spdif_runtime_resume() ASoC: rt5670: Remove unbalanced pm_runtime_put() drm/i915/display: Don't disable DDI/Transcoder when setting phy test pattern LoadPin: Ignore the "contents" argument of the LSM hooks pstore: Switch pmsg_lock to an rt_mutex to avoid priority inversion perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() afs: Fix lost servers_outstanding count pstore: Make sure CONFIG_PSTORE_PMSG selects CONFIG_RT_MUTEXES ima: Simplify ima_lsm_copy_rule ALSA: usb-audio: add the quirk for KT0206 device ALSA: hda/realtek: Add quirk for Lenovo TianYi510Pro-14IOB ALSA: hda/hdmi: Add HP Device 0x8711 to force connect list usb: cdnsp: fix lack of ZLP for ep0 usb: xhci-mtk: fix leakage of shared hcd when fail to set wakeup irq arm64: dts: qcom: sm8250: fix USB-DP PHY registers usb: dwc3: Fix race between dwc3_set_mode and __dwc3_set_mode usb: dwc3: core: defer probe on ulpi_read_id timeout xhci: Prevent infinite loop in transaction errors recovery for streams HID: wacom: Ensure bootloader PID is usable in hidraw mode HID: mcp2221: don't connect hidraw loop: Fix the max_loop commandline argument treatment when it is set to 0 9p: set req refcount to zero to avoid uninitialized usage security: Restrict CONFIG_ZERO_CALL_USED_REGS to gcc or clang > 15.0.6 reiserfs: Add missing calls to reiserfs_security_free() iio: fix memory leak in iio_device_register_eventset() iio: adc: ad_sigma_delta: do not use internal iio_dev lock iio: adc128s052: add proper .data members in adc128_of_match table regulator: core: fix deadlock on regulator enable floppy: Fix memory leak in do_floppy_init() gcov: add support for checksum field fbdev: fbcon: release buffer when fbcon_do_set_font() failed ovl: fix use inode directly in rcu-walk mode btrfs: do not BUG_ON() on ENOMEM when dropping extent items for a range scsi: qla2xxx: Fix crash when I/O abort times out net: stmmac: fix errno when create_singlethread_workqueue() fails media: dvbdev: fix build warning due to comments media: dvbdev: fix refcnt bug extcon: usbc-tusb320: Call the Type-C IRQ handler only if a port is registered mfd: qcom_rpm: Use devm_of_platform_populate() to simplify code pwm: tegra: Fix 32 bit build Linux 5.15.86 Change-Id: I4ec30b690e8dbd554044495e26360a86cc042069 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-01-30 14:44:15 +00:00
lijiaming	8501db9cda	ANDROID: loop: Add vendor hook to update cmd ... According to the value of OEM-specific field of struct bio, we need to update the value of "iocb->ki_flags" or "iocb->ki_ioprio", so that we can distinguish different IO's in lower level drivers and take different measures. Bug: 265611433 Change-Id: Id8ea3c3d064967b7a79fe24c48bf58d92c5d6e41 Signed-off-by: lijiaming <lijiaming3@xiaomi.com>	2023-01-16 21:01:33 +00:00
Isaac J. Manjarres	dd2157a98f	loop: Fix the max_loop commandline argument treatment when it is set to 0 ... commit 85c50197716c60fe57f411339c579462e563ac57 upstream. Currently, the max_loop commandline argument can be used to specify how many loop block devices are created at init time. If it is not specified on the commandline, CONFIG_BLK_DEV_LOOP_MIN_COUNT loop block devices will be created. The max_loop commandline argument can be used to override the value of CONFIG_BLK_DEV_LOOP_MIN_COUNT. However, when max_loop is set to 0 through the commandline, the current logic treats it as if it had not been set, and creates CONFIG_BLK_DEV_LOOP_MIN_COUNT devices anyway. Fix this by starting max_loop off as set to CONFIG_BLK_DEV_LOOP_MIN_COUNT. This preserves the intended behavior of creating CONFIG_BLK_DEV_LOOP_MIN_COUNT loop block devices if the max_loop commandline parameter is not specified, and allowing max_loop to be respected for all values, including 0. This allows environments that can create all of their required loop block devices on demand to not have to unnecessarily preallocate loop block devices. Fixes: 7328508274 ("remove artificial software max_loop limit") Cc: stable@vger.kernel.org Cc: Ken Chen <kenchen@google.com> Signed-off-by: Isaac J. Manjarres <isaacmanjarres@google.com> Link: https://lore.kernel.org/r/20221208212902.765781-1-isaacmanjarres@google.com Signed-off-by: Jens Axboe <axboe@kernel.dk> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-12-31 13:14:46 +01:00
Siddh Raman Pant	0455bef690	loop: Check for overflow while configuring loop ... commit c490a0b5a4f36da3918181a8acdc6991d967c5f3 upstream. The userspace can configure a loop using an ioctl call, wherein a configuration of type loop_config is passed (see lo_ioctl()'s case on line 1550 of drivers/block/loop.c). This proceeds to call loop_configure() which in turn calls loop_set_status_from_info() (see line 1050 of loop.c), passing &config->info which is of type loop_info64*. This function then sets the appropriate values, like the offset. loop_device has lo_offset of type loff_t (see line 52 of loop.c), which is typdef-chained to long long, whereas loop_info64 has lo_offset of type __u64 (see line 56 of include/uapi/linux/loop.h). The function directly copies offset from info to the device as follows (See line 980 of loop.c): lo->lo_offset = info->lo_offset; This results in an overflow, which triggers a warning in iomap_iter() due to a call to iomap_iter_done() which has: WARN_ON_ONCE(iter->iomap.offset > iter->pos); Thus, check for negative value during loop_set_status_from_info(). Bug report: https://syzkaller.appspot.com/bug?id=c620fe14aac810396d3c3edc9ad73848bf69a29e Reported-and-tested-by: syzbot+a8e049cd3abd342936b6@syzkaller.appspotmail.com Cc: stable@vger.kernel.org Reviewed-by: Matthew Wilcox (Oracle) <willy@infradead.org> Signed-off-by: Siddh Raman Pant <code@siddh.me> Reviewed-by: Christoph Hellwig <hch@lst.de> Link: https://lore.kernel.org/r/20220823160810.181275-1-code@siddh.me Signed-off-by: Jens Axboe <axboe@kernel.dk> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-08-31 17:16:47 +02:00
Chaitanya Kulkarni	860d36424d	loop: use sysfs_emit() in the sysfs xxx show() ... [ Upstream commit b27824d31f09ea7b4a6ba2c1b18bd328df3e8bed ] sprintf does not know the PAGE_SIZE maximum of the temporary buffer used for outputting sysfs content and it's possible to overrun the PAGE_SIZE buffer length. Use a generic sysfs_emit function that knows the size of the temporary buffer and ensures that no overrun is done for offset attribute in loop_attr_[offset|sizelimit|autoclear|partscan|dio]_show() callbacks. Signed-off-by: Chaitanya Kulkarni <kch@nvidia.com> Reviewed-by: Himanshu Madhani <himanshu.madhani@oracle.com> Link: https://lore.kernel.org/r/20220215213310.7264-2-kch@nvidia.com Signed-off-by: Jens Axboe <axboe@kernel.dk> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-04-08 14:23:55 +02:00
Ming Lei	1ccc12f224	block: loop:use kstatfs.f_bsize of backing file to set discard granularity ... [ Upstream commit 06582bc86d7f48d35cd044098ca1e246e8c7c52e ] If backing file's filesystem has implemented ->fallocate(), we think the loop device can support discard, then pass sb->s_blocksize as discard_granularity. However, some underlying FS, such as overlayfs, doesn't set sb->s_blocksize, and causes discard_granularity to be set as zero, then the warning in __blkdev_issue_discard() is triggered. Christoph suggested to pass kstatfs.f_bsize as discard granularity, and this way is fine because kstatfs.f_bsize means 'Optimal transfer block size', which still matches with definition of discard granularity. So fix the issue by setting discard_granularity as kstatfs.f_bsize if it is available, otherwise claims discard isn't supported. Cc: Christoph Hellwig <hch@lst.de> Cc: Vivek Goyal <vgoyal@redhat.com> Reported-by: Pei Zhang <pezhang@redhat.com> Signed-off-by: Ming Lei <ming.lei@redhat.com> Reviewed-by: Christoph Hellwig <hch@lst.de> Link: https://lore.kernel.org/r/20220126035830.296465-1-ming.lei@redhat.com Signed-off-by: Jens Axboe <axboe@kernel.dk> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-03-08 19:12:30 +01:00
Tetsuo Handa	ced9b762f2	loop: Use pr_warn_once() for loop_control_remove() warning ... [ Upstream commit e3f9387aea67742b9d1f4de8e5bb2fd08a8a4584 ] kernel test robot reported that RCU stall via printk() flooding is possible [1] when stress testing. Link: https://lkml.kernel.org/r/20211129073709.GA18483@xsang-OptiPlex-9020 [1] Reported-by: kernel test robot <oliver.sang@intel.com> Reviewed-by: Christoph Hellwig <hch@lst.de> Signed-off-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp> Signed-off-by: Jens Axboe <axboe@kernel.dk> Signed-off-by: Sasha Levin <sashal@kernel.org>	2021-12-17 10:30:15 +01:00
Xie Yongji	c0991182ac	loop: Use blk_validate_block_size() to validate block size ... commit af3c570fb0df422b4906ebd11c1bf363d89961d5 upstream. Remove loop_validate_block_size() and use the block layer helper to validate block size. Signed-off-by: Xie Yongji <xieyongji@bytedance.com> Link: https://lore.kernel.org/r/20211026144015.188-4-xieyongji@bytedance.com Signed-off-by: Jens Axboe <axboe@kernel.dk> Cc: Tadeusz Struk <tadeusz.struk@linaro.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2021-11-21 13:44:13 +01:00
Tetsuo Handa	1c500ad706	loop: reduce the loop_ctl_mutex scope ... syzbot is reporting circular locking problem at __loop_clr_fd() [1], for commit a160c6159d ("block: add an optional probe callback to major_names") is calling the module's probe function with major_names_lock held. Fortunately, since commit 990e78116d ("block: loop: fix deadlock between open and remove") stopped holding loop_ctl_mutex in lo_open(), current role of loop_ctl_mutex is to serialize access to loop_index_idr and loop_add()/loop_remove(); in other words, management of id for IDR. To avoid holding loop_ctl_mutex during whole add/remove operation, use a bool flag to indicate whether the loop device is ready for use. loop_unregister_transfer() which is called from cleanup_cryptoloop() currently has possibility of use-after-free problem due to lack of serialization between kfree() from loop_remove() from loop_control_remove() and mutex_lock() from unregister_transfer_cb(). But since lo->lo_encryption should be already NULL when this function is called due to module unload, and commit 222013f9ac ("cryptoloop: add a deprecation warning") indicates that we will remove this function shortly, this patch updates this function to emit warning instead of checking lo->lo_encryption. Holding loop_ctl_mutex in loop_exit() is pointless, for all users must close /dev/loop-control and /dev/loop$num (in order to drop module's refcount to 0) before loop_exit() starts, and nobody can open /dev/loop-control or /dev/loop$num afterwards. Link: https://syzkaller.appspot.com/bug?id=7bb10e8b62f83e4d445cdf4c13d69e407e629558 [1] Reported-by: syzbot <syzbot+f61766d5763f9e7a118f@syzkaller.appspotmail.com> Signed-off-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp> Reviewed-by: Christoph Hellwig <hch@lst.de> Link: https://lore.kernel.org/r/adb1e792-fc0e-ee81-7ea0-0906fc36419d@i-love.sakura.ne.jp Signed-off-by: Jens Axboe <axboe@kernel.dk>	2021-09-03 22:14:40 -06:00
Bart Van Assche	2112f5c133	loop: Select I/O scheduler 'none' from inside add_disk() ... We noticed that the user interface of Android devices becomes very slow under memory pressure. This is because Android uses the zram driver on top of the loop driver for swapping, because under memory pressure the swap code alternates reads and writes quickly, because mq-deadline is the default scheduler for loop devices and because mq-deadline delays writes by five seconds for such a workload with default settings. Fix this by making the kernel select I/O scheduler 'none' from inside add_disk() for loop devices. This default can be overridden at any time from user space, e.g. via a udev rule. This approach has an advantage compared to changing the I/O scheduler from userspace from 'mq-deadline' into 'none', namely that synchronize_rcu() does not get called. This patch changes the default I/O scheduler for loop devices from 'mq-deadline' into 'none'. Additionally, this patch reduces the Android boot time on my test setup with 0.5 seconds compared to configuring the loop I/O scheduler from user space. Cc: Christoph Hellwig <hch@lst.de> Cc: Ming Lei <ming.lei@redhat.com> Cc: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp> Cc: Martijn Coenen <maco@android.com> Cc: Jaegeuk Kim <jaegeuk@kernel.org> Signed-off-by: Bart Van Assche <bvanassche@acm.org> Link: https://lore.kernel.org/r/20210805174200.3250718-3-bvanassche@acm.org Signed-off-by: Jens Axboe <axboe@kernel.dk>	2021-08-05 11:49:21 -06:00
Matteo Croce	9f65c489b6	loop: raise media_change event ... Make the loop device raise a DISK_MEDIA_CHANGE event on attach or detach. # udevadm monitor -up |grep -e DISK_MEDIA_CHANGE -e DEVNAME & # losetup -f zero [ 7.454235] loop0: detected capacity change from 0 to 16384 DISK_MEDIA_CHANGE=1 DEVNAME=/dev/loop0 DEVNAME=/dev/loop0 DEVNAME=/dev/loop0 # losetup -f zero [ 10.205245] loop1: detected capacity change from 0 to 16384 DISK_MEDIA_CHANGE=1 DEVNAME=/dev/loop1 DEVNAME=/dev/loop1 DEVNAME=/dev/loop1 # losetup -f zero2 [ 13.532368] loop2: detected capacity change from 0 to 40960 DISK_MEDIA_CHANGE=1 DEVNAME=/dev/loop2 DEVNAME=/dev/loop2 # losetup -D DEVNAME=/dev/loop1 DISK_MEDIA_CHANGE=1 DEVNAME=/dev/loop1 DEVNAME=/dev/loop2 DISK_MEDIA_CHANGE=1 DEVNAME=/dev/loop2 DEVNAME=/dev/loop0 DISK_MEDIA_CHANGE=1 DEVNAME=/dev/loop0 Signed-off-by: Matteo Croce <mcroce@microsoft.com> Reviewed-by: Christoph Hellwig <hch@lst.de> Tested-by: Luca Boccassi <bluca@debian.org> Link: https://lore.kernel.org/r/20210712230530.29323-7-mcroce@linux.microsoft.com Signed-off-by: Jens Axboe <axboe@kernel.dk>	2021-08-02 13:37:29 -06:00
Christoph Hellwig	4b2731226d	loop: don't grab a reference to the block device ... The whole device block device won't be removed while the disk is still alive, so don't bother to grab a reference to it. Signed-off-by: Christoph Hellwig <hch@lst.de> Reviewed-by: Josef Bacik <josef@toxicpanda.com> Reviewed-by: Ming Lei <ming.lei@rehat.com> Reviewed-by: Chaitanya Kulkarni <ckulkarnilinux@gmail.com> Link: https://lore.kernel.org/r/20210722075402.983367-8-hch@lst.de Signed-off-by: Jens Axboe <axboe@kernel.dk>	2021-08-02 13:37:28 -06:00
Tetsuo Handa	3ce6e1f662	loop: reintroduce global lock for safe loop_validate_file() traversal ... Commit 6cc8e74308 ("loop: scale loop device by introducing per device lock") re-opened a race window for NULL pointer dereference at loop_validate_file() where commit 310ca162d7 ("block/loop: Use global lock for ioctl() operation.") has closed. Although we need to guarantee that other loop devices will not change during traversal, we can't take remote "struct loop_device"->lo_mutex inside loop_validate_file() in order to avoid AB-BA deadlock. Therefore, introduce a global lock dedicated for loop_validate_file() which is conditionally taken before local "struct loop_device"->lo_mutex is taken. Signed-off-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp> Fixes: 6cc8e74308 ("loop: scale loop device by introducing per device lock") Signed-off-by: Jens Axboe <axboe@kernel.dk>	2021-07-23 10:18:25 -06:00
Tetsuo Handa	585af8ede7	loop: remove unused variable in loop_set_status() ... Commit 0384264ea8 ("block: pass a gendisk to bdev_disk_changed") changed to pass lo->lo_disk instead of lo->lo_device. Fixes: 0384264ea8 ("block: pass a gendisk to bdev_disk_changed") Signed-off-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp> Link: https://lore.kernel.org/r/20210702152714.7978-1-penguin-kernel@I-love.SAKURA.ne.jp Signed-off-by: Jens Axboe <axboe@kernel.dk>	2021-07-02 09:28:42 -06:00
Christoph Hellwig	8e60947d2f	loop: rewrite loop_exit using idr_for_each_entry ... Use idr_for_each_entry to simplify removing all devices. Signed-off-by: Christoph Hellwig <hch@lst.de> Reviewed-by: Chaitanya Kulkarni <chaitanya.kulkarni@wdc.com> Link: https://lore.kernel.org/r/20210623145908.92973-10-hch@lst.de Signed-off-by: Jens Axboe <axboe@kernel.dk>	2021-06-30 15:34:13 -06:00
Christoph Hellwig	b984808146	loop: split loop_lookup ... loop_lookup has two callers - one wants to do the a find by index and the other wants any unbound loop device. Open code the respective functionality in each caller. Signed-off-by: Christoph Hellwig <hch@lst.de> Link: https://lore.kernel.org/r/20210623145908.92973-9-hch@lst.de Signed-off-by: Jens Axboe <axboe@kernel.dk>	2021-06-30 15:34:13 -06:00
Christoph Hellwig	e5d66a1032	loop: don't allow deleting an unspecified loop device ... Passing a negative index to loop_lookup while return any unbound device. Doing that for a delete does not make much sense, so add check to explicitly reject that case. Signed-off-by: Christoph Hellwig <hch@lst.de> Link: https://lore.kernel.org/r/20210623145908.92973-8-hch@lst.de Signed-off-by: Jens Axboe <axboe@kernel.dk>	2021-06-30 15:34:13 -06:00
Christoph Hellwig	18d1f200b3	loop: move loop_ctl_mutex locking into loop_add ... Move acquiring and releasing loop_ctl_mutex from the callers into loop_add. Signed-off-by: Christoph Hellwig <hch@lst.de> Reviewed-by: Chaitanya Kulkarni <chaitanya.kulkarni@wdc.com> Link: https://lore.kernel.org/r/20210623145908.92973-7-hch@lst.de Signed-off-by: Jens Axboe <axboe@kernel.dk>	2021-06-30 15:34:13 -06:00
Christoph Hellwig	f9d107644a	loop: split loop_control_ioctl ... Split loop_control_ioctl into a helper for each command. This keeps the code nicely separated for the upcoming locking changes. Signed-off-by: Christoph Hellwig <hch@lst.de> Reviewed-by: Chaitanya Kulkarni <chaitanya.kulkarni@wdc.com> Link: https://lore.kernel.org/r/20210623145908.92973-6-hch@lst.de Signed-off-by: Jens Axboe <axboe@kernel.dk>	2021-06-30 15:34:13 -06:00
Christoph Hellwig	4157fe0b3d	loop: don't call loop_lookup before adding a loop device ... loop_add returns the right error if the slot wasn't available. Signed-off-by: Christoph Hellwig <hch@lst.de> Link: https://lore.kernel.org/r/20210623145908.92973-5-hch@lst.de Signed-off-by: Jens Axboe <axboe@kernel.dk>	2021-06-30 15:34:13 -06:00
Christoph Hellwig	d6da83d072	loop: remove the l argument to loop_add ... None of the callers cares about the allocated struct loop_device. Signed-off-by: Christoph Hellwig <hch@lst.de> Reviewed-by: Chaitanya Kulkarni <chaitanya.kulkarni@wdc.com> Link: https://lore.kernel.org/r/20210623145908.92973-4-hch@lst.de Signed-off-by: Jens Axboe <axboe@kernel.dk>	2021-06-30 15:34:13 -06:00
Christoph Hellwig	bd5c39edad	loop: reduce loop_ctl_mutex coverage in loop_exit ... loop_ctl_mutex is only needed to iterate the IDR for removing the loop devices, so reduce the coverage. Signed-off-by: Christoph Hellwig <hch@lst.de> Reviewed-by: Chaitanya Kulkarni <chaitanya.kulkarni@wdc.com> Link: https://lore.kernel.org/r/20210623145908.92973-3-hch@lst.de Signed-off-by: Jens Axboe <axboe@kernel.dk>	2021-06-30 15:34:13 -06:00
Christoph Hellwig	8b52d8be86	loop: reorder loop_exit ... Unregister the misc and blockdevice first to prevent further access, and only then iterate to remove the devices. Signed-off-by: Christoph Hellwig <hch@lst.de> Reviewed-by: Chaitanya Kulkarni <chaitanya.kulkarni@wdc.com> Link: https://lore.kernel.org/r/20210623145908.92973-2-hch@lst.de Signed-off-by: Jens Axboe <axboe@kernel.dk>	2021-06-30 15:34:13 -06:00
Linus Torvalds	440462198d	Merge tag 'for-5.14/drivers-2021-06-29' of git://git.kernel.dk/linux-block ... Pull block driver updates from Jens Axboe: "Pretty calm round, mostly just NVMe and a bit of MD: - NVMe updates (via Christoph) - improve the APST configuration algorithm (Alexey Bogoslavsky) - look for StorageD3Enable on companion ACPI device (Mario Limonciello) - allow selecting the network interface for TCP connections (Martin Belanger) - misc cleanups (Amit Engel, Chaitanya Kulkarni, Colin Ian King, Christoph) - move the ACPI StorageD3 code to drivers/acpi/ and add quirks for certain AMD CPUs (Mario Limonciello) - zoned device support for nvmet (Chaitanya Kulkarni) - fix the rules for changing the serial number in nvmet (Noam Gottlieb) - various small fixes and cleanups (Dan Carpenter, JK Kim, Chaitanya Kulkarni, Hannes Reinecke, Wesley Sheng, Geert Uytterhoeven, Daniel Wagner) - MD updates (Via Song) - iostats rewrite (Guoqing Jiang) - raid5 lock contention optimization (Gal Ofri) - Fall through warning fix (Gustavo) - Misc fixes (Gustavo, Jiapeng)" * tag 'for-5.14/drivers-2021-06-29' of git://git.kernel.dk/linux-block: (78 commits) nvmet: use NVMET_MAX_NAMESPACES to set nn value loop: Fix missing discard support when using LOOP_CONFIGURE nvme.h: add missing nvme_lba_range_type endianness annotations nvme: remove zeroout memset call for struct nvme-pci: remove zeroout memset call for struct nvmet: remove zeroout memset call for struct nvmet: add ZBD over ZNS backend support nvmet: add Command Set Identifier support nvmet: add nvmet_req_bio put helper for backends nvmet: add req cns error complete helper block: export blk_next_bio() nvmet: remove local variable nvmet: use nvme status value directly nvmet: use u32 type for the local variable nsid nvmet: use u32 for nvmet_subsys max_nsid nvmet: use req->cmd directly in file-ns fast path nvmet: use req->cmd directly in bdev-ns fast path nvmet: make ver stable once connection established nvmet: allow mn change if subsys not discovered nvmet: make sn stable once connection was established ...	2021-06-30 12:21:16 -07:00
Linus Torvalds	df668a5fe4	Merge tag 'for-5.14/block-2021-06-29' of git://git.kernel.dk/linux-block ... Pull core block updates from Jens Axboe: - disk events cleanup (Christoph) - gendisk and request queue allocation simplifications (Christoph) - bdev_disk_changed cleanups (Christoph) - IO priority improvements (Bart) - Chained bio completion trace fix (Edward) - blk-wbt fixes (Jan) - blk-wbt enable/disable fix (Zhang) - Scheduler dispatch improvements (Jan, Ming) - Shared tagset scheduler improvements (John) - BFQ updates (Paolo, Luca, Pietro) - BFQ lock inversion fix (Jan) - Documentation improvements (Kir) - CLONE_IO block cgroup fix (Tejun) - Remove of ancient and deprecated block dump feature (zhangyi) - Discard merge fix (Ming) - Misc fixes or followup fixes (Colin, Damien, Dan, Long, Max, Thomas, Yang) * tag 'for-5.14/block-2021-06-29' of git://git.kernel.dk/linux-block: (129 commits) block: fix discard request merge block/mq-deadline: Remove a WARN_ON_ONCE() call blk-mq: update hctx->dispatch_busy in case of real scheduler blk: Fix lock inversion between ioc lock and bfqd lock bfq: Remove merged request already in bfq_requests_merged() block: pass a gendisk to bdev_disk_changed block: move bdev_disk_changed block: add the events* attributes to disk_attrs block: move the disk events code to a separate file block: fix trace completion for chained bio block/partitions/msdos: Fix typo inidicator -> indicator block, bfq: reset waker pointer with shared queues block, bfq: check waker only for queues with no in-flight I/O block, bfq: avoid delayed merge of async queues block, bfq: boost throughput by extending queue-merging times block, bfq: consider also creation time in delayed stable merge block, bfq: fix delayed stable merge check block, bfq: let also stably merged queues enjoy weight raising blk-wbt: make sure throttle is enabled properly blk-wbt: introduce a new disable state to prevent false positive by rwb_enabled() ...	2021-06-30 12:12:56 -07:00
Dan Schatzberg	c74d40e8b5	loop: charge i/o to mem and blk cg ... The current code only associates with the existing blkcg when aio is used to access the backing file. This patch covers all types of i/o to the backing file and also associates the memcg so if the backing file is on tmpfs, memory is charged appropriately. This patch also exports cgroup_get_e_css and int_active_memcg so it can be used by the loop module. Link: https://lkml.kernel.org/r/20210610173944.1203706-4-schatzberg.dan@gmail.com Signed-off-by: Dan Schatzberg <schatzberg.dan@gmail.com> Acked-by: Johannes Weiner <hannes@cmpxchg.org> Acked-by: Jens Axboe <axboe@kernel.dk> Cc: Chris Down <chris@chrisdown.name> Cc: Michal Hocko <mhocko@suse.com> Cc: Ming Lei <ming.lei@redhat.com> Cc: Shakeel Butt <shakeelb@google.com> Cc: Tejun Heo <tj@kernel.org> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>	2021-06-29 10:53:50 -07:00
Dan Schatzberg	87579e9b7d	loop: use worker per cgroup instead of kworker ... Patch series "Charge loop device i/o to issuing cgroup", v14. The loop device runs all i/o to the backing file on a separate kworker thread which results in all i/o being charged to the root cgroup. This allows a loop device to be used to trivially bypass resource limits and other policy. This patch series fixes this gap in accounting. A simple script to demonstrate this behavior on cgroupv2 machine: ''' #!/bin/bash set -e CGROUP=/sys/fs/cgroup/test.slice LOOP_DEV=/dev/loop0 if [[ ! -d $CGROUP ]] then sudo mkdir $CGROUP fi grep oom_kill $CGROUP/memory.events # Set a memory limit, write more than that limit to tmpfs -> OOM kill sudo unshare -m bash -c " echo \$\$ > $CGROUP/cgroup.procs; echo 0 > $CGROUP/memory.swap.max; echo 64M > $CGROUP/memory.max; mount -t tmpfs -o size=512m tmpfs /tmp; dd if=/dev/zero of=/tmp/file bs=1M count=256" || true grep oom_kill $CGROUP/memory.events # Set a memory limit, write more than that limit through loopback # device -> no OOM kill sudo unshare -m bash -c " echo \$\$ > $CGROUP/cgroup.procs; echo 0 > $CGROUP/memory.swap.max; echo 64M > $CGROUP/memory.max; mount -t tmpfs -o size=512m tmpfs /tmp; truncate -s 512m /tmp/backing_file losetup $LOOP_DEV /tmp/backing_file dd if=/dev/zero of=$LOOP_DEV bs=1M count=256; losetup -D $LOOP_DEV" || true grep oom_kill $CGROUP/memory.events ''' Naively charging cgroups could result in priority inversions through the single kworker thread in the case where multiple cgroups are reading/writing to the same loop device. This patch series does some minor modification to the loop driver so that each cgroup can make forward progress independently to avoid this inversion. With this patch series applied, the above script triggers OOM kills when writing through the loop device as expected. This patch (of 3): Existing uses of loop device may have multiple cgroups reading/writing to the same device. Simply charging resources for I/O to the backing file could result in priority inversion where one cgroup gets synchronously blocked, holding up all other I/O to the loop device. In order to avoid this priority inversion, we use a single workqueue where each work item is a "struct loop_worker" which contains a queue of struct loop_cmds to issue. The loop device maintains a tree mapping blk css_id -> loop_worker. This allows each cgroup to independently make forward progress issuing I/O to the backing file. There is also a single queue for I/O associated with the rootcg which can be used in cases of extreme memory shortage where we cannot allocate a loop_worker. The locking for the tree and queues is fairly heavy handed - we acquire a per-loop-device spinlock any time either is accessed. The existing implementation serializes all I/O through a single thread anyways, so I don't believe this is any worse. [colin.king@canonical.com: fixes] Link: https://lkml.kernel.org/r/20210610173944.1203706-1-schatzberg.dan@gmail.com Link: https://lkml.kernel.org/r/20210610173944.1203706-2-schatzberg.dan@gmail.com Signed-off-by: Dan Schatzberg <schatzberg.dan@gmail.com> Reviewed-by: Ming Lei <ming.lei@redhat.com> Acked-by: Jens Axboe <axboe@kernel.dk> Cc: Johannes Weiner <hannes@cmpxchg.org> Cc: Michal Hocko <mhocko@suse.com> Cc: Chris Down <chris@chrisdown.name> Cc: Shakeel Butt <shakeelb@google.com> Cc: Tejun Heo <tj@kernel.org> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>	2021-06-29 10:53:50 -07:00
Christoph Hellwig	0384264ea8	block: pass a gendisk to bdev_disk_changed ... bdev_disk_changed can only operate on whole devices. Make that clear by passing a gendisk instead of the struct block_device. Signed-off-by: Christoph Hellwig <hch@lst.de> Link: https://lore.kernel.org/r/20210624123240.441814-3-hch@lst.de Signed-off-by: Jens Axboe <axboe@kernel.dk>	2021-06-24 12:01:06 -06:00
Kristian Klausen	2b9ac22b12	loop: Fix missing discard support when using LOOP_CONFIGURE ... Without calling loop_config_discard() the discard flag and parameters aren't set/updated for the loop device and worst-case they could indicate discard support when it isn't the case (ex: if the LOOP_SET_STATUS ioctl was used with a different file prior to LOOP_CONFIGURE). Cc: <stable@vger.kernel.org> # 5.8.x- Fixes: 3448914e8c ("loop: Add LOOP_CONFIGURE ioctl") Signed-off-by: Kristian Klausen <kristian@klausen.dk> Link: https://lore.kernel.org/r/20210618115157.31452-1-kristian@klausen.dk Signed-off-by: Jens Axboe <axboe@kernel.dk>	2021-06-18 08:52:37 -06:00
Christoph Hellwig	6a03cd9843	loop: fix order of cleaning up the queue and freeing the tagset ... We must release the queue before freeing the tagset. Fixes: 1c99502fae ("loop: use blk_mq_alloc_disk and blk_cleanup_disk") Reported-by: Bruno Goncalves <bgoncalv@redhat.com> Signed-off-by: Christoph Hellwig <hch@lst.de> Signed-off-by: Jens Axboe <axboe@kernel.dk>	2021-06-16 06:53:51 -06:00
Linus Torvalds	efc1fd601a	Merge tag 'block-5.13-2021-06-12' of git://git.kernel.dk/linux-block ... Pull block fixes from Jens Axboe: "A few fixes that should go into 5.13: - Fix a regression deadlock introduced in this release between open and remove of a bdev (Christoph) - Fix an async_xor md regression in this release (Xiao) - Fix bcache oversized read issue (Coly)" * tag 'block-5.13-2021-06-12' of git://git.kernel.dk/linux-block: block: loop: fix deadlock between open and remove async_xor: check src_offs is not NULL before updating it bcache: avoid oversized read request in cache missing code path bcache: remove bcache device self-defined readahead	2021-06-12 11:59:58 -07:00
Christoph Hellwig	1c99502fae	loop: use blk_mq_alloc_disk and blk_cleanup_disk ... Use blk_mq_alloc_disk and blk_cleanup_disk to simplify the gendisk and request_queue allocation. Signed-off-by: Christoph Hellwig <hch@lst.de> Reviewed-by: Chaitanya Kulkarni <chaitanya.kulkarni@wdc.com> Link: https://lore.kernel.org/r/20210602065345.355274-19-hch@lst.de Signed-off-by: Jens Axboe <axboe@kernel.dk>	2021-06-11 11:53:03 -06:00
Christoph Hellwig	990e78116d	block: loop: fix deadlock between open and remove ... Commit c76f48eb5c ("block: take bd_mutex around delete_partitions in del_gendisk") adds disk->part0->bd_mutex in del_gendisk(), this way causes the following AB/BA deadlock between removing loop and opening loop: 1) loop_control_ioctl(LOOP_CTL_REMOVE) -> mutex_lock(&loop_ctl_mutex) -> del_gendisk -> mutex_lock(&disk->part0->bd_mutex) 2) blkdev_get_by_dev -> mutex_lock(&disk->part0->bd_mutex) -> lo_open -> mutex_lock(&loop_ctl_mutex) Add a new Lo_deleting state to remove the need for clearing ->private_data and thus holding loop_ctl_mutex in the ioctl LOOP_CTL_REMOVE path. Based on an analysis and earlier patch from Ming Lei <ming.lei@redhat.com>. Reported-by: Colin Ian King <colin.king@canonical.com> Fixes: c76f48eb5c ("block: take bd_mutex around delete_partitions in del_gendisk") Signed-off-by: Christoph Hellwig <hch@lst.de> Tested-by: Colin Ian King <colin.king@canonical.com> Reviewed-by: Ming Lei <ming.lei@redhat.com> Link: https://lore.kernel.org/r/20210605140950.5800-1-hch@lst.de Signed-off-by: Jens Axboe <axboe@kernel.dk>	2021-06-11 11:50:54 -06:00
Christoph Hellwig	a8698707a1	block: move bd_mutex to struct gendisk ... Replace the per-block device bd_mutex with a per-gendisk open_mutex, thus simplifying locking wherever we deal with partitions. Signed-off-by: Christoph Hellwig <hch@lst.de> Reviewed-by: Ming Lei <ming.lei@redhat.com> Acked-by: Roger Pau Monné <roger.pau@citrix.com> Link: https://lore.kernel.org/r/20210525061301.2242282-4-hch@lst.de Signed-off-by: Jens Axboe <axboe@kernel.dk>	2021-06-01 07:44:32 -06:00
Matthew Wilcox (Oracle)	4ee60ec156	include: remove pagemap.h from blkdev.h ... My UEK-derived config has 1030 files depending on pagemap.h before this change. Afterwards, just 326 files need to be rebuilt when I touch pagemap.h. I think blkdev.h is probably included too widely, but untangling that dependency is harder and this solves my problem. x86 allmodconfig builds, but there may be implicit include problems on other architectures. Link: https://lkml.kernel.org/r/20210309195747.283796-1-willy@infradead.org Signed-off-by: Matthew Wilcox (Oracle) <willy@infradead.org> Acked-by: Dan Williams <dan.j.williams@intel.com> [nvdimm] Acked-by: Jens Axboe <axboe@kernel.dk> [block] Reviewed-by: Christoph Hellwig <hch@lst.de> Acked-by: Coly Li <colyli@suse.de> [bcache] Acked-by: Martin K. Petersen <martin.petersen@oracle.com> [scsi] Reviewed-by: William Kucharski <william.kucharski@oracle.com> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>	2021-05-06 19:24:11 -07:00
Linus Torvalds	3ab6608e66	Merge tag 'block-5.12-2021-02-27' of git://git.kernel.dk/linux-block ... Pull more block updates from Jens Axboe: "A few stragglers (and one due to me missing it originally), and fixes for changes in this merge window mostly. In particular: - blktrace cleanups (Chaitanya, Greg) - Kill dead blk_pm_* functions (Bart) - Fixes for the bio alloc changes (Christoph) - Fix for the partition changes (Christoph, Ming) - Fix for turning off iopoll with polled IO inflight (Jeffle) - nbd disconnect fix (Josef) - loop fsync error fix (Mauricio) - kyber update depth fix (Yang) - max_sectors alignment fix (Mikulas) - Add bio_max_segs helper (Matthew)" * tag 'block-5.12-2021-02-27' of git://git.kernel.dk/linux-block: (21 commits) block: Add bio_max_segs blktrace: fix documentation for blk_fill_rw() block: memory allocations in bounce_clone_bio must not fail block: remove the gfp_mask argument to bounce_clone_bio block: fix bounce_clone_bio for passthrough bios block-crypto-fallback: use a bio_set for splitting bios block: fix logging on capacity change blk-settings: align max_sectors on "logical_block_size" boundary block: reopen the device in blkdev_reread_part block: don't skip empty device in in disk_uevent blktrace: remove debugfs file dentries from struct blk_trace nbd: handle device refs for DESTROY_ON_DISCONNECT properly kyber: introduce kyber_depth_updated() loop: fix I/O error on fsync() in detached loop devices block: fix potential IO hang when turning off io_poll block: get rid of the trace rq insert wrapper blktrace: fix blk_rq_merge documentation blktrace: fix blk_rq_issue documentation blktrace: add blk_fill_rwbs documentation comment block: remove superfluous param in blk_fill_rwbs() ...	2021-02-28 11:23:38 -08:00
Linus Torvalds	5ceabb6078	Merge branch 'work.misc' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs ... Pull misc vfs updates from Al Viro: "Assorted stuff pile - no common topic here" * 'work.misc' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs: whack-a-mole: don't open-code iminor/imajor 9p: fix misuse of sscanf() in v9fs_stat2inode() audit_alloc_mark(): don't open-code ERR_CAST() fs/inode.c: make inode_init_always() initialize i_ino to 0 vfs: don't unnecessarily clone write access for writable fds	2021-02-27 08:07:12 -08:00
Al Viro	6f24784f00	whack-a-mole: don't open-code iminor/imajor ... several instances creeped back into the tree... Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>	2021-02-23 10:25:29 -05:00
Mauricio Faria de Oliveira	4ceddce55e	loop: fix I/O error on fsync() in detached loop devices ... There's an I/O error on fsync() in a detached loop device if it has been previously attached. The issue is write cache is enabled in the attach path in loop_configure() but it isn't disabled in the detach path; thus it remains enabled in the block device regardless of whether it is attached or not. Now fsync() can get an I/O request that will just be failed later in loop_queue_rq() as device's state is not 'Lo_bound'. So, disable write cache in the detach path. Do so based on the queue flag, not the loop device flag for read-only (used to enable) as the queue flag can be changed via sysfs even on read-only loop devices (e.g., losetup -r.) Test-case: # DEV=/dev/loop7 # IMG=/tmp/image # truncate --size 1M $IMG # losetup $DEV $IMG # losetup -d $DEV Before: # strace -e fsync parted -s $DEV print 2>&1 | grep fsync fsync(3) = -1 EIO (Input/output error) Warning: Error fsyncing/closing /dev/loop7: Input/output error [ 982.529929] blk_update_request: I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 After: # strace -e fsync parted -s $DEV print 2>&1 | grep fsync fsync(3) = 0 Co-developed-by: Eric Desrochers <eric.desrochers@canonical.com> Signed-off-by: Eric Desrochers <eric.desrochers@canonical.com> Signed-off-by: Mauricio Faria de Oliveira <mfo@canonical.com> Tested-by: Gabriel Krisman Bertazi <krisman@collabora.com> Reviewed-by: Ming Lei <ming.lei@redhat.com> Signed-off-by: Jens Axboe <axboe@kernel.dk>	2021-02-22 08:43:57 -07:00
Pavel Tatashin	6cc8e74308	loop: scale loop device by introducing per device lock ... Currently, loop device has only one global lock: loop_ctl_mutex. This becomes hot in scenarios where many loop devices are used. Scale it by introducing per-device lock: lo_mutex that protects modifications of all fields in struct loop_device. Keep loop_ctl_mutex to protect global data: loop_index_idr, loop_lookup, loop_add. The new lock ordering requirement is that loop_ctl_mutex must be taken before lo_mutex. Signed-off-by: Pavel Tatashin <pasha.tatashin@soleen.com> Reviewed-by: Tyler Hicks <tyhicks@linux.microsoft.com> Reviewed-by: Petr Vorel <pvorel@suse.cz> Signed-off-by: Jens Axboe <axboe@kernel.dk>	2021-01-26 13:08:54 -07:00
Linus Torvalds	69f637c335	Merge tag 'for-5.11/drivers-2020-12-14' of git://git.kernel.dk/linux-block ... Pull block driver updates from Jens Axboe: "Nothing major in here: - NVMe pull request from Christoph: - nvmet passthrough improvements (Chaitanya Kulkarni) - fcloop error injection support (James Smart) - read-only support for zoned namespaces without Zone Append (Javier González) - improve some error message (Minwoo Im) - reject I/O to offline fabrics namespaces (Victor Gladkov) - PCI queue allocation cleanups (Niklas Schnelle) - remove an unused allocation in nvmet (Amit Engel) - a Kconfig spelling fix (Colin Ian King) - nvme_req_qid simplication (Baolin Wang) - MD pull request from Song: - Fix race condition in md_ioctl() (Dae R. Jeong) - Initialize read_slot properly for raid10 (Kevin Vigor) - Code cleanup (Pankaj Gupta) - md-cluster resync/reshape fix (Zhao Heming) - Move null_blk into its own directory (Damien Le Moal) - null_blk zone and discard improvements (Damien Le Moal) - bcache race fix (Dongsheng Yang) - Set of rnbd fixes/improvements (Gioh Kim, Guoqing Jiang, Jack Wang, Lutz Pogrell, Md Haris Iqbal) - lightnvm NULL pointer deref fix (tangzhenhao) - sr in_interrupt() removal (Sebastian Andrzej Siewior) - FC endpoint security support for s390/dasd (Jan Höppner, Sebastian Ott, Vineeth Vijayan). From the s390 arch guys, arch bits included as it made it easier for them to funnel the feature through the block driver tree. - Follow up fixes (Colin Ian King)" * tag 'for-5.11/drivers-2020-12-14' of git://git.kernel.dk/linux-block: (64 commits) block: drop dead assignments in loop_init() sr: Remove in_interrupt() usage in sr_init_command(). sr: Switch the sector size back to 2048 if sr_read_sector() changed it. cdrom: Reset sector_size back it is not 2048. drivers/lightnvm: fix a null-ptr-deref bug in pblk-core.c null_blk: Move driver into its own directory null_blk: Allow controlling max_hw_sectors limit null_blk: discard zones on reset null_blk: cleanup discard handling null_blk: Improve implicit zone close null_blk: improve zone locking block: Align max_hw_sectors to logical blocksize null_blk: Fail zone append to conventional zones null_blk: Fix zone size initialization bcache: fix race between setting bdev state to none and new write request direct to backing block/rnbd: fix a null pointer dereference on dev->blk_symlink_name block/rnbd-clt: Dynamically alloc buffer for pathname & blk_symlink_name block/rnbd: call kobject_put in the failure path Documentation/ABI/rnbd-srv: add document for force_close block/rnbd-srv: close a mapped device from server side. ...	2020-12-16 13:09:32 -08:00
Lukas Bulwahn	aeb2b0b1a3	block: drop dead assignments in loop_init() ... Commit 8410d38c25 ("loop: use __register_blkdev to allocate devices on demand") simplified loop_init(); so computing the range of the block region is not required anymore and can be dropped. Drop dead assignments in loop_init(). As compilers will detect these unneeded assignments and optimize this, the resulting object code is identical before and after this change. No functional change. No change in object code. Signed-off-by: Lukas Bulwahn <lukas.bulwahn@gmail.com> Signed-off-by: Jens Axboe <axboe@kernel.dk>	2020-12-12 11:18:56 -07:00
Christoph Hellwig	a782483cc1	block: remove the nr_sects field in struct hd_struct ... Now that the hd_struct always has a block device attached to it, there is no need for having two size field that just get out of sync. Additionally the field in hd_struct did not use proper serialization, possibly allowing for torn writes. By only using the block_device field this problem also gets fixed. Signed-off-by: Christoph Hellwig <hch@lst.de> Reviewed-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Reviewed-by: Jan Kara <jack@suse.cz> Reviewed-by: Hannes Reinecke <hare@suse.de> Acked-by: Coly Li <colyli@suse.de> [bcache] Acked-by: Chao Yu <yuchao0@huawei.com> [f2fs] Signed-off-by: Jens Axboe <axboe@kernel.dk>	2020-12-01 14:53:40 -07:00
Christoph Hellwig	37c3fc9abb	block: simplify the block device claiming interface ... Stop passing the whole device as a separate argument given that it can be trivially deducted and cleanup the !holder debug check. Signed-off-by: Christoph Hellwig <hch@lst.de> Reviewed-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Reviewed-by: Jan Kara <jack@suse.cz> Reviewed-by: Hannes Reinecke <hare@suse.de> Acked-by: Tejun Heo <tj@kernel.org> Signed-off-by: Jens Axboe <axboe@kernel.dk>	2020-12-01 14:53:39 -07:00
Christoph Hellwig	a954ea8120	block: remove ->bd_contains ... Now that each hd_struct has a reference to the corresponding block_device, there is no need for the bd_contains pointer. Add a bdev_whole() helper to look up the whole device block_device struture instead. Signed-off-by: Christoph Hellwig <hch@lst.de> Reviewed-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Reviewed-by: Jan Kara <jack@suse.cz> Reviewed-by: Hannes Reinecke <hare@suse.de> Acked-by: Tejun Heo <tj@kernel.org> Signed-off-by: Jens Axboe <axboe@kernel.dk>	2020-12-01 14:53:39 -07:00
Christoph Hellwig	4e7b5671c6	block: remove i_bdev ... Switch the block device lookup interfaces to directly work with a dev_t so that struct block_device references are only acquired by the blkdev_get variants (and the blk-cgroup special case). This means that we now don't need an extra reference in the inode and can generally simplify handling of struct block_device to keep the lookups contained in the core block layer code. Signed-off-by: Christoph Hellwig <hch@lst.de> Reviewed-by: Jan Kara <jack@suse.cz> Reviewed-by: Hannes Reinecke <hare@suse.de> Acked-by: Tejun Heo <tj@kernel.org> Acked-by: Coly Li <colyli@suse.de> [bcache] Signed-off-by: Jens Axboe <axboe@kernel.dk>	2020-12-01 14:53:39 -07:00
Christoph Hellwig	f46f2a3198	loop: do not call set_blocksize ... set_blocksize is used by file systems to use their preferred buffer cache block size. Block drivers should not set it. Signed-off-by: Christoph Hellwig <hch@lst.de> Reviewed-by: Jan Kara <jack@suse.cz> Reviewed-by: Hannes Reinecke <hare@suse.de> Reviewed-by: Johannes Thumshirn <johannes.thumshirn@wdc.com> Signed-off-by: Jens Axboe <axboe@kernel.dk>	2020-12-01 14:53:39 -07:00
Christoph Hellwig	449f4ec989	block: remove the update_bdev parameter to set_capacity_revalidate_and_notify ... The update_bdev argument is always set to true, so remove it. Also rename the function to the slighly less verbose set_capacity_and_notify, as propagating the disk size to the block device isn't really revalidation. Signed-off-by: Christoph Hellwig <hch@lst.de> Reviewed-by: Hannes Reinecke <hare@suse.de> Reviewed-by: Petr Vorel <pvorel@suse.cz> Signed-off-by: Jens Axboe <axboe@kernel.dk>	2020-11-16 08:34:14 -07:00