8316 Commits

Author	SHA1	Message	Date
Greg Kroah-Hartman	5155624549	Merge tag 'android13-5.15.94_r00' into android13-5.15 ... This is the merge of the upstream LTS release of 5.15.94 into the android13-5.15 branch. It contains the following commits: * 5448b2fda8 Merge 5.15.94 into android13-5.15-lts |\ | * e2c1a934fd Linux 5.15.94 | * 17170acdc7 Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions | * 5122e0e443 KVM: x86: Mitigate the cross-thread return address predictions bug | * 8f12dcab90 x86/speculation: Identify processors vulnerable to SMT RSB predictions | * e63c434de8 drm/i915: Fix VBT DSI DVO port handling | * fc88c68381 drm/i915: Initialize the obj flags for shmem objects | * 2e557c8ca2 drm/amdgpu/fence: Fix oops due to non-matching drm_sched init/fini | * 3af734f3ea Fix page corruption caused by racy check in __free_pages | * c94ce5ea68 arm64: dts: meson-axg: Make mmc host controller interrupts level-sensitive | * b796c02df3 arm64: dts: meson-g12-common: Make mmc host controller interrupts level-sensitive | * 5d9b771f53 arm64: dts: meson-gx: Make mmc host controller interrupts level-sensitive | * ac39dce119 rtmutex: Ensure that the top waiter is always woken up | * 86f7e42393 powerpc/64s/interrupt: Fix interrupt exit race with security mitigation switch | * 2907cf3f2e riscv: Fixup race condition on PG_dcache_clean in flush_icache_pte | * beb1cefa3c ceph: flush cap releases when the session is flushed | * 86733ab239 clk: ingenic: jz4760: Update M/N/OD calculation algorithm | * 239e927eb2 usb: typec: altmodes/displayport: Fix probe pin assign check | * 48aecce116 usb: core: add quirk for Alcor Link AK9563 smartcard reader | * a8178bb1c7 btrfs: free device in btrfs_close_devices for a single device filesystem | * 8d13f2c3e2 mptcp: be careful on subflow status propagation on errors | * 25141fb411 net: USB: Fix wrong-direction WARNING in plusb.c | * d1fba1e096 cifs: Fix use-after-free in rdata->read_into_pages() | * 1b83e7e174 pinctrl: intel: Restore the pins that used to be in Direct IRQ mode | * f5f025b703 spi: dw: Fix wrong FIFO level setting for long xfers | * 71668706fb pinctrl: single: fix potential NULL dereference | * a2a1065739 pinctrl: aspeed: Fix confusing types in return value | * 99450163bc pinctrl: mediatek: Fix the drive register definition of some Pins | * 9f0d2c2684 ASoC: topology: Return -ENOMEM on memory allocation failure | * 1a52ef89e3 riscv: stacktrace: Fix missing the first frame | * 5fb8154334 ALSA: pci: lx6464es: fix a debug loop | * 105ea562f6 selftests: forwarding: lib: quote the sysctl values | * 528e3f3a4b rds: rds_rm_zerocopy_callback() use list_first_entry() | * 48d6d8f2f6 igc: Add ndo_tx_timeout support | * 62ff7dd961 net/mlx5: Serialize module cleanup with reload and remove | * 95d2394f84 net/mlx5: fw_tracer, Zero consumer index when reloading the tracer | * ab7f3f6a9d net/mlx5: fw_tracer, Clear load bit when freeing string DBs buffers | * 193528646e net/mlx5e: IPoIB, Show unknown speed instead of error | * 7c6e8eb617 net/mlx5: Bridge, fix ageing of peer FDB entries | * 49ece61a07 net/mlx5e: Update rx ring hw mtu upon each rx-fcs flag change | * 31172267ba net/mlx5e: Introduce the mlx5e_flush_rq function | * e4e4e93d31 net/mlx5e: Move repeating clear_bit in mlx5e_rx_reporter_err_rq_cqe_recover | * 3f18b9ed8c net: mscc: ocelot: fix VCAP filters not matching on MAC with "protocol 802.1Q" | * 6acb5d853b net: dsa: mt7530: don't change PVC_EG_TAG when CPU port becomes VLAN-aware | * ca834a0178 ice: Do not use WQ_MEM_RECLAIM flag for workqueue | * 70d48c7992 uapi: add missing ip/ipv6 header dependencies for linux/stddef.h | * 3cec44036f ionic: clean interrupt before enabling queue to avoid credit race | * fad12afe87 net: phy: meson-gxl: use MMD access dummy stubs for GXL, internal PHY | * d23385a200 bonding: fix error checking in bond_debug_reregister() | * 11006d9d08 net: phylink: move phy_device_free() to correctly release phy device | * fb022d7b1c xfrm: fix bug with DSCP copy to v6 from v4 tunnel | * 6fe1ad42af RDMA/usnic: use iommu_map_atomic() under spin_lock() | * 8f5fe1cd8e RDMA/irdma: Fix potential NULL-ptr-dereference | * 1b4ef90cbc IB/IPoIB: Fix legacy IPoIB due to wrong number of queues | * 5dc688fae6 xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr() | * 9bae58d58b IB/hfi1: Restore allocated resources on failed copyout | * 558b1fa01c xfrm: compat: change expression for switch in xfrm_xlate64 | * 238b38e89f can: j1939: do not wait 250 ms if the same addr was already claimed | * d859184b60 of/address: Return an error when no valid dma-ranges are found | * 70f37b3118 tracing: Fix poll() and select() do not work on per_cpu trace_pipe and trace_pipe_raw | * df01749503 ALSA: hda/realtek: Enable mute/micmute LEDs on HP Elitebook, 645 G9 | * ca9d542203 ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book2 Pro 360 | * 706b6d86a6 ALSA: emux: Avoid potential array out-of-bound in snd_emux_xg_control() | * 731fc29de6 ALSA: hda/realtek: Add Positivo N14KP6-TG | * b938059807 btrfs: zlib: zero-initialize zlib workspace | * e65faa7e39 btrfs: limit device extents to the device size | * 2e4dd07fda migrate: hugetlb: check for hugetlb shared PMD in node migration | * 072e7412e8 mm/migration: return errno when isolate_huge_page failed * | f977f92131 Revert "nvmem: core: remove nvmem_config wp_gpio" * | 787413edad Merge 5.15.93 into android13-5.15-lts |\| | * 85d7786c66 Linux 5.15.93 | * 6e2fac197d bpf: Skip invalid kfunc call in backtrack_insn | * 46c9088cab gfs2: Always check inode size of inline inodes | * 8eb2e58a92 gfs2: Cosmetic gfs2_dinode_{in,out} cleanup | * e4991910f1 wifi: brcmfmac: Check the count value of channel spec to prevent out-of-bounds reads | * 97ccfffcc0 f2fs: fix to do sanity check on i_extra_isize in is_alive() | * 64fa364ad3 fbdev: smscufx: fix error handling code in ufx_usb_probe | * a77141a063 ovl: Use "buf" flexible array for memcpy() destination | * 1692fedd0f fs/ntfs3: Validate attribute data and valid sizes | * a5b9cb7276 powerpc/imc-pmu: Revert nest_init_lock to being a mutex | * 3691f43a09 iio:adc:twl6030: Enable measurement of VAC | * 8c84f50390 bpf: Do not reject when the stack read size is different from the tracked scalar size | * 14b6198abb bpf: Fix incorrect state pruning for <8B spill/fill | * 575a9f6fef phy: qcom-qmp-combo: fix runtime suspend | * e58df87394 phy: qcom-qmp-combo: fix broken power on | * 368ea32e0a phy: qcom-qmp-usb: fix memleak on probe deferral | * 2f27d3811a phy: qcom-qmp-combo: fix memleak on probe deferral | * 0cb10ddab7 phy: qcom-qmp-combo: disable runtime PM on unbind | * 0ef5ffe116 serial: 8250_dma: Fix DMA Rx rearm race | * e30328f599 serial: 8250_dma: Fix DMA Rx completion race | * a5a171f61a nvmem: core: fix cell removal on error | * 6d9fa3ff65 nvmem: core: remove nvmem_config wp_gpio | * adf80e072c nvmem: core: initialise nvmem->id early | * e3ebc3e23b drm/i915: Fix potential bit_17 double-free | * 997bed0f3c Squashfs: fix handling and sanity checking of xattr_ids count | * 7a0cfaf9d4 highmem: round down the address passed to kunmap_flush_on_unmap() | * 5dbe1ebd56 mm/swapfile: add cond_resched() in get_swap_pages() | * daf8241804 fpga: stratix10-soc: Fix return value check in s10_ops_write_init() | * afd32b6831 x86/debug: Fix stack recursion caused by wrongly ordered DR7 accesses | * 066ecbf1a5 kernel/irq/irqdomain.c: fix memory leak with using debugfs_lookup() | * 481bf49f58 usb: gadget: f_uac2: Fix incorrect increment of bNumEndpoints | * fdf40e5824 mm: hugetlb: proc: check for hugetlb shared PMD in /proc/PID/smaps | * 6c300351c5 riscv: disable generation of unwind tables | * a5c275add9 parisc: Wire up PTRACE_GETREGS/PTRACE_SETREGS for compat case | * a964decd13 parisc: Fix return code of pdc_iodc_print() | * 488eaf0625 nvmem: qcom-spmi-sdam: fix module autoloading | * 8569beb66f iio: imu: fxos8700: fix MAGN sensor scale and unit | * 8aa5cdcfaf iio: imu: fxos8700: remove definition FXOS8700_CTRL_ODR_MIN | * 4112ba1ad5 iio: imu: fxos8700: fix failed initialization ODR mode assignment | * abf7b2ba51 iio: imu: fxos8700: fix incorrect ODR mode readback | * 412757741c iio: imu: fxos8700: fix swapped ACCEL and MAGN channels readback | * 34909532b1 iio: imu: fxos8700: fix map label of channel type to MAGN sensor | * 8346eb4987 iio: imu: fxos8700: fix IMU data bits returned to user space | * 7567cdf3ce iio: imu: fxos8700: fix incomplete ACCEL and MAGN channels readback | * 6969852220 iio: imu: fxos8700: fix ACCEL measurement range selection | * cdacfb2205 iio:adc:twl6030: Enable measurements of VUSB, VBAT and others | * 9988063dce iio: adc: berlin2-adc: Add missing of_node_put() in error path | * c691a5c0fd iio: hid: fix the retval in gyro_3d_capture_sample | * ef80a34699 iio: hid: fix the retval in accel_3d_capture_sample | * c4eae85c73 efi: Accept version 2 of memory attributes table | * 710db82063 ALSA: hda/realtek: Add Acer Predator PH315-54 | * 3fbddf86d9 watchdog: diag288_wdt: fix __diag288() inline assembly | * 700dd5bc72 watchdog: diag288_wdt: do not use stack buffers for hardware data | * 21bc51e29e net: qrtr: free memory on error path in radix_tree_insert() | * dccbd062d7 fbcon: Check font dimension limits | * 5d7500d991 Input: i8042 - add Clevo PCX0DX to i8042 quirk table | * fc9e27f3ba vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF | * 9ba1188a71 usb: gadget: f_fs: Fix unbalanced spinlock in __ffs_ep0_queue_wait | * fe86480e90 usb: dwc3: qcom: enable vbus override when in OTG dr-mode | * a412fe7baf iio: adc: stm32-dfsdm: fill module aliases | * 9944659398 drm/amd/display: Fix timing not changning when freesync video is enabled | * a3967128bc net/x25: Fix to not accept on connected socket | * 396ea318e7 platform/x86: gigabyte-wmi: add support for B450M DS3H WIFI-CF | * 1577524633 platform/x86: dell-wmi: Add a keymap for KEY_MUTE in type 0x0010 table | * 540cea9f9b i2c: rk3x: fix a bunch of kernel-doc warnings | * 0aaabdb900 scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress | * 17b738590b scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress | * 8cd0499f9c perf/x86/intel: Add Emerald Rapids | * 7093515370 scsi: target: core: Fix warning on RT kernels | * b7960f5436 i2c: mxs: suppress probe-deferral error message | * b9b87fc34b i2c: designware-pci: Add new PCI IDs for AMD NAVI GPU | * d8fc0b5fb3 efi: fix potential NULL deref in efi_mem_reserve_persistent | * f423c2efd5 net: openvswitch: fix flow memory leak in ovs_flow_cmd_new | * 7985028647 virtio-net: Keep stop() to follow mirror sequence of open() | * 5d884f9e80 selftests: net: udpgso_bench_tx: Cater for pending datagrams zerocopy benchmarking | * 63aa63af3a selftests: net: udpgso_bench: Fix racing bug between the rx/tx programs | * d41a3f9cc2 selftests: net: udpgso_bench_rx/tx: Stop when wrong CLI args are provided | * 5af98283e5 selftests: net: udpgso_bench_rx: Fix 'used uninitialized' compiler warning | * 89e0701e03 ata: libata: Fix sata_down_spd_limit() when no link speed is reported | * 9ab896775f can: j1939: fix errant WARN_ON_ONCE in j1939_session_deactivate | * 02d77d98e0 igc: return an error if the mac type is unknown in igc_ptp_systim_to_hwtstamp() | * 04a7355820 riscv: kprobe: Fixup kernel panic when probing an illegal position | * 206c367b6a ip/ip6_gre: Fix non-point-to-point tunnel not generating IPv6 link local address | * 90178bc0f2 ip/ip6_gre: Fix changing addr gen mode not generating IPv6 link local address | * dfe2f0ea38 net: phy: meson-gxl: Add generic dummy stubs for MMD register access | * b7398efe24 squashfs: harden sanity check in squashfs_read_xattr_id_table | * 89a69216f1 netfilter: br_netfilter: disable sabotage_in hook after first suppression | * cdb444e73f drm/i915/adlp: Fix typo for reference clock | * 960f20d858 drm/i915/guc: Fix locking when searching for a hung request | * c27e0eac56 netrom: Fix use-after-free caused by accept on already connected socket | * 511c922c5b block, bfq: fix uaf for bfqq in bic_set_bfqq() | * a62c129dcb block, bfq: replace 0/1 with false/true in bic apis | * 37a744a068 block/bfq-iosched.c: use "false" rather than "BLK_RW_ASYNC" | * 2cd1e9c013 net: phy: dp83822: Fix null pointer access on DP83825/DP83826 devices | * 18c18c2110 sfc: correctly advertise tunneled IPv6 segmentation | * 878b06f60a dpaa2-eth: execute xdp_do_flush() before napi_complete_done() | * 3b5774cd6b dpaa_eth: execute xdp_do_flush() before napi_complete_done() | * 5a7040a649 virtio-net: execute xdp_do_flush() before napi_complete_done() | * 94add5b272 qede: execute xdp_do_flush() before napi_complete_done() | * a273f8e3ab ice: Prevent set_channel from changing queues while RDMA active | * b432e183c2 fix "direction" argument of iov_iter_kvec() | * d8b8306e96 fix iov_iter_bvec() "direction" argument | * 389c7c0ef9 READ is "data destination", not source... | * 7a3649bf5b WRITE is "data source", not destination... | * 83cc6a7bb7 vhost/net: Clear the pending messages when the backend is removed | * 7c7d344bc3 scsi: Revert "scsi: core: map PQ=1, PDT=other values to SCSI_SCAN_TARGET_PRESENT" | * 4b199dc094 drm/vc4: hdmi: make CEC adapter name unique | * dc1f8ab25a arm64: dts: imx8mm: Fix pad control for UART1_DTE_RX | * c681d7a4ed bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener | * 34ad5d8885 bpf: Fix to preserve reg parent/live fields when copying range info | * 7b86f9ab56 bpf: Support <8-byte scalar spill and refill | * 1b9256c962 ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path() | * b7abeb6916 bpf: Fix a possible task gone issue with bpf_send_signal[_thread]() helpers | * cfcc2390db ASoC: Intel: bytcr_wm5102: Drop reference count of ACPI device after use | * b4b204565a ASoC: Intel: bytcr_rt5640: Drop reference count of ACPI device after use | * 1f1e7635c5 ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use | * 41d323c352 ASoC: Intel: bytcht_es8316: Drop reference count of ACPI device after use | * 6a9990e1d9 ASoC: Intel: bytcht_es8316: move comment to the right place | * ffcdf35455 ASoC: Intel: boards: fix spelling in comments | * bd0b17ab1b bus: sunxi-rsb: Fix error handling in sunxi_rsb_init() | * 5f4543c938 firewire: fix memory leak for payload of request subaction to IEC 61883-1 FCP region * | 5020746bff Merge 5.15.92 into android13-5.15-lts |\| | * e515b9902f Linux 5.15.92 | * c7caf669b8 net: mctp: purge receive queues on sk destruction | * 046de74f9a net: fix NULL pointer in skb_segment_list | * 7ab3376703 selftests: Provide local define of __cpuid_count() | * e92e311ced selftests/vm: remove ARRAY_SIZE define from individual tests | * c9e52db900 tools: fix ARRAY_SIZE defines in tools and selftests hdrs | * c1aa0dd52d Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt | * 02e61196c5 ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems | * 79dd676b44 extcon: usbc-tusb320: fix kernel-doc warning | * c2bd60ef20 ext4: fix bad checksum after online resize | * 4cd1e18bc0 cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() | * 43acd767bd dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init | * a54c5ad007 HID: playstation: sanity check DualSense calibration data. | * 6d7686cc11 blk-cgroup: fix missing pd_online_fn() while activating policy | * 2144859229 erofs/zmap.c: Fix incorrect offset calculation | * 0dfef50313 bpf: Skip task with pid=1 in send_signal_common() | * e8bb772f74 firmware: arm_scmi: Clear stale xfer->hdr.status | * 80cb9f1a76 arm64: dts: imx8mq-thor96: fix no-mmc property for SDHCI | * 162fad24d2 arm64: dts: freescale: Fix pca954x i2c-mux node names | * 82ad105e1a ARM: dts: vf610: Fix pca9548 i2c-mux node names | * 5aee5f33e0 ARM: dts: imx: Fix pca9547 i2c-mux node name * | 7e0097918f Revert "scsi: ufs: core: Fix devfreq deadlocks" * | 6ce0fcdcc2 Revert "thermal/core: Rename 'trips' to 'num_trips'" * | 49a5232dfb Revert "thermal: Validate new state in cur_state_store()" * | be0ca2fc43 Revert "thermal/core: fix error code in __thermal_cooling_device_register()" * | 9617a003cc Revert "thermal: core: call put_device() only after device_register() fails" * | ccb2c48531 Revert "cpufreq: governor: Use kobject release() method to free dbs_data" * | 0108f014a5 Revert "gpio: use raw spinlock for gpio chip shadowed data" * | 1d2449f6be Revert "gpio: mxc: Protect GPIO irqchip RMW with bgpio spinlock" * | 5f51aedcba Revert "gpio: mxc: Unlock on error path in mxc_flip_edge()" * | 7622c50ba6 Merge 5.15.91 into android13-5.15-lts |\| | * 9cf4111cdf Linux 5.15.91 | * 14cc13e433 perf/x86/amd: fix potential integer overflow on shift of a int | * 033636b322 netfilter: conntrack: unify established states for SCTP paths | * 0b08201158 x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL | * b577400367 block: fix and cleanup bio_check_ro | * 1d152437e4 kbuild: Allow kernel installation packaging to override pkg-config | * a196468858 cpufreq: governor: Use kobject release() method to free dbs_data | * 7c513ced0d cpufreq: Move to_gov_attr_set() to cpufreq.h | * cf7a08622d Revert "Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode" | * 53c5d61198 tools: gpio: fix -c option of gpio-event-mon | * a7d1a303ff treewide: fix up files incorrectly marked executable | * 046fe53907 net: mdio-mux-meson-g12a: force internal PHY off on mux switch | * 86bdccde78 net/tg3: resolve deadlock in tg3_reset_task() during EEH | * 4364bf79d8 thermal: intel: int340x: Add locking to int340x_thermal_get_trip_type() | * e69c3a0d9d net: mctp: mark socks as dead on unhash, prevent re-add | * 954cc215cd net: ravb: Fix possible hang if RIS2_QFF1 happen | * 0f7218bf0a net: ravb: Fix lack of register setting after system resumed for Gen3 | * 3db4ca2938 ravb: Rename "no_ptp_cfg_active" and "ptp_cfg_active" variables | * 621f296f11 gpio: mxc: Unlock on error path in mxc_flip_edge() | * 071a839286 nvme: fix passthrough csi check | * 614471b7f7 riscv/kprobe: Fix instruction simulation of JALR | * 3391bd4235 sctp: fail if no bound addresses can be used for a given scope | * b0784860e1 net/sched: sch_taprio: do not schedule in taprio_reset() | * d2d3ab1b1d netrom: Fix use-after-free of a listening socket. | * 9df5ab02c6 netfilter: conntrack: fix vtag checks for ABORT/SHUTDOWN_COMPLETE | * ca3cf94776 ipv4: prevent potential spectre v1 gadget in fib_metrics_match() | * d50e7348b4 ipv4: prevent potential spectre v1 gadget in ip_metrics_convert() | * ead06e3449 netlink: annotate data races around sk_state | * c4eb423c6b netlink: annotate data races around dst_portid and dst_group | * fac9b69a93 netlink: annotate data races around nlk->portid | * 8a13595600 netfilter: nft_set_rbtree: skip elements in transaction from garbage collection | * 2bf1435fa1 netfilter: nft_set_rbtree: Switch to node list walk for overlap detection | * e481654426 drm/i915/selftest: fix intel_selftest_modify_policy argument types | * 66689a72ba net: fix UaF in netns ops registration error path | * 41b74e95f2 netlink: prevent potential spectre v1 gadgets | * 2f29d780bd i2c: designware: use casting of u64 in clock multiplication to avoid overflow | * b03f7ed9af scsi: ufs: core: Fix devfreq deadlocks | * 858d7e9218 net: mana: Fix IRQ name - add PCI and queue number | * bff5243bd3 EDAC/qcom: Do not pass llcc_driv_data as edac_device_ctl_info's pvt_info | * 5eedf4568d EDAC/device: Respect any driver-supplied workqueue polling value | * 4b7dfd0a68 ARM: 9280/1: mm: fix warning on phys_addr_t to void pointer assignment | * 7807871f28 ipv6: fix reachability confirmation with proxy_ndp | * f9a22f6fa1 thermal: intel: int340x: Protect trip temperature from concurrent updates | * 036093c08d KVM: arm64: GICv4.1: Fix race with doorbell on VPE activation/deactivation | * c56683c062 KVM: x86/vmx: Do not skip segment attributes if unusable bit is set | * e91308e637 ovl: fail on invalid uid/gid mapping at copy up | * 33a9657d67 ksmbd: limit pdu length size according to connection status | * 8d83a758ee ksmbd: downgrade ndr version error message to debug | * 87a7f38a90 ksmbd: do not sign response to session request for guest login | * 4210c3555d ksmbd: add max connections parameter | * cc6742b160 ksmbd: add smbd max io size parameter | * 3c8a5648a5 i2c: mv64xxx: Add atomic_xfer method to driver | * e619ab4fb3 i2c: mv64xxx: Remove shutdown method from driver | * 4b83bc6f87 cifs: Fix oops due to uncleared server->smbd_conn in reconnect | * 89042d3d85 ftrace/scripts: Update the instructions for ftrace-bisect.sh | * 592ba7116f trace_events_hist: add check for return value of 'create_hist_field' | * b0af180514 tracing: Make sure trace_printk() can output as soon as it can be used | * 91135d7233 module: Don't wait for GOING modules | * 85ee9919ad KVM: SVM: fix tsc scaling cache logic | * f0227eca97 scsi: hpsa: Fix allocation size for scsi_host_alloc() | * e5af9a458a drm/amdgpu: complete gfxoff allow signal during suspend without delay | * 62b9e9f921 Bluetooth: hci_sync: cancel cmd_timer if hci_open failed | * 21998acd31 exit: Use READ_ONCE() for all oops/warn limit reads | * e82b1598eb docs: Fix path paste-o for /sys/kernel/warn_count | * 1c51698ad6 panic: Expose "warn_count" to sysfs | * 0691ddae56 panic: Introduce warn_limit | * 7b98914a6c panic: Consolidate open-coded panic_on_warn checks | * fc636b1362 exit: Allow oops_limit to be disabled | * 339f8a8e52 exit: Expose "oops_count" to sysfs | * f80fb0001f exit: Put an upper limit on how often we can oops | * 2857ce7f47 panic: Separate sysctl logic from CONFIG_SMP | * e156d4dcb0 ia64: make IA64_MCA_RECOVERY bool instead of tristate | * 9024f77224 csky: Fix function name in csky_alignment() and die() | * 2ea497d153 h8300: Fix build errors from do_exit() to make_task_dead() transition | * a452ca0228 hexagon: Fix function name in die() | * 3b39f47474 objtool: Add a missing comma to avoid string concatenation | * 39a26d8721 exit: Add and use make_task_dead. | * b5c1acaa43 kasan: no need to unset panic_on_warn in end_report() | * b5c967dc68 ubsan: no need to unset panic_on_warn in ubsan_epilogue() | * e4cd210032 panic: unset panic_on_warn inside panic() | * 191f1f1f6a kernel/panic: move panic sysctls to its own file | * 654f6e8512 sysctl: add a new register_sysctl_init() interface | * 3aa991cde9 fs: reiserfs: remove useless new_opts in reiserfs_remount | * d830531f8f x86: ACPI: cstate: Optimize C3 entry on AMD CPUs | * 1f54762231 drm/i915: Remove unused variable | * 6e10127093 Revert "selftests/bpf: check null propagation only neither reg is PTR_TO_BTF_ID" | * 619ee31b96 drm/i915: Allow switching away via vga-switcheroo if uninitialized | * ea435ba9eb firmware: coreboot: Check size of table entry and use flex-array | * a4e70bcf2e lockref: stop doing cpu_relax in the cmpxchg loop | * b0ee61f5ee platform/x86: asus-nb-wmi: Add alternate mapping for KEY_SCREENLOCK | * e8d2f7f566 platform/x86: touchscreen_dmi: Add info for the CSL Panther Tab HD | * 2e0a8bacbe r8152: add vendor/device ID pair for Microsoft Devkit | * d4b717e34d scsi: hisi_sas: Set a port invalid only if there are no devices attached when refreshing port id | * e15750aa28 KVM: s390: interrupt: use READ_ONCE() before cmpxchg() | * 9300c65207 spi: spidev: remove debug messages that access spidev->spi without locking | * 48ff5d3812 ASoC: fsl-asoc-card: Fix naming of AC'97 CODEC widgets | * 5001ffb31d ASoC: fsl_ssi: Rename AC'97 streams to avoid collisions with AC'97 CODEC | * b76120e206 cpufreq: armada-37xx: stop using 0 as NULL pointer | * eda26fa856 perf/x86/intel/uncore: Add Emerald Rapids | * 544f9d4e9d perf/x86/msr: Add Emerald Rapids | * b1eb964d78 s390: expicitly align _edata and _end symbols on page boundary | * fb45ec279b s390/debug: add _ASM_S390_ prefix to header guard | * cd488abed9 drm: Add orientation quirk for Lenovo ideapad D330-10IGL | * ff7ab370b8 net: usb: cdc_ether: add support for Thales Cinterion PLS62-W modem | * d6935084e4 ASoC: fsl_micfil: Correct the number of steps on SX controls | * ac07316b2d cpufreq: Add SM6375 to cpufreq-dt-platdev blocklist | * f0e6dcae14 kcsan: test: don't put the expect array on the stack | * c51c0b3754 cpufreq: Add Tegra234 to cpufreq-dt-platdev blocklist | * 28e4e8ca9e scsi: iscsi: Fix multiple iSCSI session unbind events sent to userspace | * 14b1df2004 tcp: fix rate_app_limited to default to 1 | * 120b8e527e net: stmmac: enable all safety features by default | * a7d736cc3c thermal: core: call put_device() only after device_register() fails | * ed08f958e4 thermal/core: fix error code in __thermal_cooling_device_register() | * 108a6f91e2 thermal: Validate new state in cur_state_store() | * bd0ea77edf thermal/core: Rename 'trips' to 'num_trips' | * 521c6ebd4f thermal/core: Remove duplicate information when an error occurs | * 6504afa263 net: dsa: microchip: ksz9477: port map correction in ALU table entry register | * 18346db185 selftests/net: toeplitz: fix race on tpacket_v3 block close | * caa28c7c83 driver core: Fix test_async_probe_init saves device in wrong array | * 89c62cee5d w1: fix WARNING after calling w1_process() | * 3d0eafe413 w1: fix deadloop in __w1_remove_master_device() | * 7701a4bd45 device property: fix of node refcount leak in fwnode_graph_get_next_endpoint() | * ed0d8f731e ptdma: pt_core_execute_cmd() should use spinlock | * 29e9c67bf3 octeontx2-pf: Fix the use of GFP_KERNEL in atomic context on rt | * 03bff5819a tcp: avoid the lookup process failing to get sk in ehash table | * 5bd69d2ea8 nvme-pci: fix timeout request state check | * 39178dfe86 drm/amd/display: fix issues with driver unload | * 9a5a537e14 phy: phy-can-transceiver: Skip warning if no "max-bitrate" | * 4095065b59 dmaengine: xilinx_dma: call of_node_put() when breaking out of for_each_child_of_node() | * 5bd3c1c1bc cifs: fix potential deadlock in cache_refresh_path() | * 1a2a47b85c HID: betop: check shape of output reports | * b2a7309743 l2tp: prevent lockdep issue in l2tp_tunnel_register() | * edf0e509ce virtio-net: correctly enable callback during start_xmit | * d3401c7624 net: macb: fix PTP TX timestamp failure due to packet padding | * 71c6019655 dmaengine: Fix double increment of client_count in dma_chan_get() | * 1e7919f0b1 drm/panfrost: fix GENERIC_ATOMIC64 dependency | * a1b3e50e21 net: mlx5: eliminate anonymous module_init & module_exit | * 09e3fb6f53 net/mlx5: E-switch, Fix setting of reserved fields on MODIFY_SCHEDULING_ELEMENT | * 01a6e10810 net: ipa: disable ipa interrupt during suspend | * 98aec50ff7 Bluetooth: Fix possible deadlock in rfcomm_sk_state_change | * 0e59f60b74 usb: gadget: f_fs: Ensure ep0req is dequeued before free_request | * ae8e136bca usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait | * f25cd2b731 HID: revert CHERRY_MOUSE_000C quirk | * 39483511fd pinctrl: rockchip: fix mux route data for rk3568 | * 1dae88a0b4 net: stmmac: fix invalid call to mdiobus_get_phy() | * 6716838bf8 HID: check empty report_list in bigben_probe() | * 2b49568254 HID: check empty report_list in hid_validate_values() | * ad67de330d net: mdio: validate parameter addr in mdiobus_get_phy() | * 4869129379 net: usb: sr9700: Handle negative len | * 2827c4eb42 octeontx2-pf: Avoid use of GFP_KERNEL in atomic context | * 77e8ed776c l2tp: close all race conditions in l2tp_tunnel_register() | * af22d2c0b4 l2tp: convert l2tp_tunnel_list to idr | * 22c7d45ca3 l2tp: Don't sleep and disable BH under writer-side sk_callback_lock | * 87d9205d9a l2tp: Serialize access to sk_user_data with sk_callback_lock | * c53acbf2fa net/sched: sch_taprio: fix possible use-after-free | * 40516d042b net: stmmac: Fix queue statistics reading | * 620aa67f80 pinctrl: rockchip: fix reading pull type on rk3568 | * ddca674af1 pinctrl/rockchip: add error handling for pull/drive register getters | * 259ab8fb8c pinctrl/rockchip: Use temporary variable for struct device | * 8cbf932c5c wifi: rndis_wlan: Prevent buffer overflow in rndis_query_oid | * f792d26e5c gpio: mxc: Always set GPIOs used as interrupt source to INPUT mode | * 8335f877ef gpio: mxc: Protect GPIO irqchip RMW with bgpio spinlock | * fb4fb3d267 gpio: use raw spinlock for gpio chip shadowed data | * 52e3eebfe6 sch_htb: Avoid grafting on htb_destroy_class_offload when destroying htb | * 8232e5a84d net: enetc: avoid deadlock in enetc_tx_onestep_tstamp() | * 95347e41ca net: wan: Add checks for NULL for utdm in undo_uhdlc_init and unmap_si_regs | * 7f129927fe net: nfc: Fix use-after-free in local_cleanup() | * 397aaac884 phy: rockchip-inno-usb2: Fix missing clk_disable_unprepare() in rockchip_usb2phy_power_on() | * 01bdcc73db bpf: Fix pointer-leak due to insufficient speculative store bypass mitigation | * 261e2f12b6 amd-xgbe: Delay AN timeout during KR training | * a8cf4af544 amd-xgbe: TX Flow Ctrl Registers are h/w ver dependent | * 8e897cb674 ARM: dts: at91: sam9x60: fix the ddr clock for sam9x60 | * 0a27dcd534 NFSD: fix use-after-free in nfsd4_ssc_setup_dul() | * 24af570c99 phy: ti: fix Kconfig warning and operator precedence | * 631fc36685 arm64: dts: qcom: msm8992-libra: Fix the memory map | * dda20ffec8 arm64: dts: qcom: msm8992-libra: Add CPU regulators | * 37ba5e9293 arm64: dts: qcom: msm8992: Don't use sfpb mutex | * bab87524f6 PM: AVS: qcom-cpr: Fix an error handling path in cpr_probe() | * b7a479c764 affs: initialize fsdata in affs_truncate() | * 623d111689 IB/hfi1: Remove user expected buffer invalidate race | * 47d5fc0dcd IB/hfi1: Immediately remove invalid memory from hardware | * 85caef2cfd IB/hfi1: Fix expected receive setup error exit issues | * cb193984d4 IB/hfi1: Reserve user expected TIDs | * 891ddfae39 IB/hfi1: Reject a zero-length user expected buffer | * 362c948972 RDMA/core: Fix ib block iterator counter overflow | * e26c571c3b tomoyo: fix broken dependency on *.conf.default | * 7dfe83ecc3 firmware: arm_scmi: Harden shared memory access in fetch_notification | * a653dbb70c firmware: arm_scmi: Harden shared memory access in fetch_response | * caffa7fed1 EDAC/highbank: Fix memory leak in highbank_mc_probe() | * 95de286200 reset: uniphier-glue: Fix possible null-ptr-deref | * 4773a8cf9a reset: uniphier-glue: Use reset_control_bulk API | * 7b33accc8f soc: imx8m: Fix incorrect check for of_clk_get_by_name() | * f07427f8d9 arm64: dts: imx8mm-venice-gw7901: fix USB2 controller OC polarity | * c4cb73febe HID: intel_ish-hid: Add check for ishtp_dma_tx_map | * 25f97c9883 ARM: imx: add missing of_node_put() | * 3e9d79ded9 arm64: dts: imx8mm-beacon: Fix ecspi2 pinmux | * 5381350761 ARM: dts: imx6qdl-gw560x: Remove incorrect 'uart-has-rtscts' | * 0e4bba1656 ARM: dts: imx7d-pico: Use 'clock-frequency' | * 108cf4c6d5 ARM: dts: imx6ul-pico-dwarf: Use 'clock-frequency' | * 207c9e64ed arm64: dts: imx8mp-phycore-som: Remove invalid PMIC property | * 7ce380fe75 dmaengine: ti: k3-udma: Do conditional decrement of UDMA_CHAN_RT_PEER_BCNT_REG | * edba9b7a70 memory: mvebu-devbus: Fix missing clk_disable_unprepare in mvebu_devbus_probe() | * e66f6949da memory: atmel-sdramc: Fix missing clk_disable_unprepare in atmel_ramc_probe() | * eda11ab556 memory: tegra: Remove clients SID override programming * | cab35cbd71 Revert "xhci: Add update_hub_device override for PCI xHCI hosts" * | 29e8f224d8 Revert "xhci: Detect lpm incapable xHC USB3 roothub ports from ACPI tables" * | 5739b27e8f Revert "xhci: Add a flag to disable USB3 lpm on a xhci root port level." * | 5b60fdf2e0 Merge 5.15.90 into android13-5.15-lts |\| | * aabd5ba7e9 Linux 5.15.90 | * 4b6f8263e9 io_uring/rw: remove leftover debug statement | * b10acfcd61 io_uring/rw: ensure kiocb_end_write() is always called | * 124fb13cc7 io_uring: fix double poll leak on repolling | * e944f1e37b io_uring: Clean up a false-positive warning from GCC 9.3.0 | * 940e8922c1 mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma | * e83cc8a780 soc: qcom: apr: Make qcom,protection-domain optional again | * 982c8b1e95 Revert "wifi: mac80211: fix memory leak in ieee80211_if_add()" | * 40a4797e08 block: mq-deadline: Rename deadline_is_seq_writes() | * 3abf10b4c4 net/mlx5: fix missing mutex_unlock in mlx5_fw_fatal_reporter_err_work() | * 1aab00aa41 net/ulp: use consistent error code when blocking ULP | * 2e4c95a404 io_uring/net: fix fast_iov assignment in io_setup_async_msg() | * 311b298a33 io_uring: io_kiocb_update_pos() should not touch file for non -1 offset | * 487a086595 tracing: Use alignof__(struct {type b;}) instead of offsetof() | * 430443f856 x86/fpu: Use _Alignof to avoid undefined behavior in TYPE_ALIGN | * f114717dfa Revert "drm/amdgpu: make display pinning more flexible (v2)" | * 7a993c1be5 efi: rt-wrapper: Add missing include | * de2af657ca arm64: efi: Execute runtime services from a dedicated stack | * 9cca110cf8 fs/ntfs3: Fix attr_punch_hole() null pointer derenference | * d4d112e5c4 drm/amdgpu: drop experimental flag on aldebaran | * c82fa690da drm/amd/display: Fix COLOR_SPACE_YCBCR2020_TYPE matrix | * 88c3375224 drm/amd/display: Calculate output_color_space after pixel encoding adjustment | * 87e605b161 drm/amd/display: Fix set scaling doesn's work | * 8687b8cdc3 drm/i915/display: Check source height is > 0 | * 5d96179166 drm/i915: re-disable RC6p on Sandy Bridge | * e9a7ec188b mei: me: add meteor lake point M DID | * eb0421d90f gsmi: fix null-deref in gsmi_get_variable | * b8d99cda52 serial: atmel: fix incorrect baudrate setup | * b85498385a serial: amba-pl011: fix high priority character transmission in rs486 mode | * 0f150134dd dmaengine: idxd: Let probe fail when workqueue cannot be enabled | * 1e8c127c2e dmaengine: tegra210-adma: fix global intr clear | * 473e2281f7 dmaengine: lgm: Move DT parsing after initialization | * 73337724cb serial: pch_uart: Pass correct sg to dma_unmap_sg() | * 4307a41cbc dt-bindings: phy: g12a-usb3-pcie-phy: fix compatible string documentation | * c9d55f564a dt-bindings: phy: g12a-usb2-phy: fix compatible string documentation | * 78aa45bb7a usb-storage: apply IGNORE_UAS only for HIKSEMI MD202 on RTL9210 | * a69c8dfb85 usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate() | * 1ab67e87b1 usb: gadget: g_webcam: Send color matching descriptor per frame | * b08167d8f0 usb: typec: altmodes/displayport: Fix pin assignment calculation | * 7fb1322e7a usb: typec: altmodes/displayport: Add pin assignment helper | * 59f9ee3796 usb: typec: tcpm: Fix altmode re-registration causes sysfs create fail | * a1c8a5c2f8 usb: host: ehci-fsl: Fix module alias | * f073d10cd5 usb: cdns3: remove fetched trb from cache before dequeuing | * 73f4bde973 USB: serial: cp210x: add SCALANCE LPE-9000 device id | * a2e075f401 USB: gadgetfs: Fix race between mounting and unmounting | * 2da67bff29 tty: fix possible null-ptr-defer in spk_ttyio_release | * cb53a3366e tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer | * f322dd2e4a staging: mt7621-dts: change some node hex addresses to lower case | * 6508788b2c bpf: restore the ebpf program ID for BPF_AUDIT_UNLOAD and PERF_BPF_EVENT_PROG_UNLOAD | * 7b122c33bd riscv: dts: sifive: fu740: fix size of pcie 32bit memory | * 701f9c3da6 thunderbolt: Use correct function to calculate maximum USB3 link rate | * 5b1b03a3d3 cifs: do not include page data when checking signature | * 64287cd456 btrfs: fix race between quota rescan and disable leading to NULL pointer deref | * f2e0e1615d btrfs: do not abort transaction on failure to write log tree when syncing log | * f653abe619 mmc: sdhci-esdhc-imx: correct the tuning start tap and step setting | * 9881436f01 mmc: sunxi-mmc: Fix clock refcount imbalance during unbind | * 33bd0db750 ACPI: PRM: Check whether EFI runtime is available | * 87e1ee6058 comedi: adv_pci1760: Fix PWM instruction handling | * b5d24a8e4a usb: core: hub: disable autosuspend for TI TUSB8041 | * 61a0890cb9 misc: fastrpc: Fix use-after-free race condition for maps | * 1b7b7bb400 misc: fastrpc: Don't remove map on creater_process and device_release | * e7e41fcf90 USB: misc: iowarrior: fix up header size for USB_DEVICE_ID_CODEMERCS_IOW100 | * f3de34d90d staging: vchiq_arm: fix enum vchiq_status return types | * 16d09c4bc9 USB: serial: option: add Quectel EM05CN modem | * 34d769f0c6 USB: serial: option: add Quectel EM05CN (SG) modem | * 768d56ed24 USB: serial: option: add Quectel EC200U modem | * 829916f069 USB: serial: option: add Quectel EM05-G (RS) modem | * eb8808f769 USB: serial: option: add Quectel EM05-G (CS) modem | * 6e0430db19 USB: serial: option: add Quectel EM05-G (GR) modem | * f01aefe374 prlimit: do_prlimit needs to have a speculation check | * 418e2c756d xhci: Detect lpm incapable xHC USB3 roothub ports from ACPI tables | * 10cb7d53be usb: acpi: add helper to check port lpm capability using acpi _DSM | * 1818e2a97d xhci: Add a flag to disable USB3 lpm on a xhci root port level. | * 8911ff7963 xhci: Add update_hub_device override for PCI xHCI hosts | * c462ac871f xhci: Fix null pointer dereference when host dies | * f39c813af0 usb: xhci: Check endpoint is valid before dereferencing it | * 0f175cebc4 xhci-pci: set the dma max_seg_size | * 89a410dbd0 io_uring/rw: defer fsnotify calls to task context | * 05d69b372b io_uring: do not recalculate ppos unnecessarily | * ff8a070253 io_uring: update kiocb->ki_pos at execution time | * b7958caf41 io_uring: remove duplicated calls to io_kiocb_ppos | * 86e2d6901a io_uring: ensure that cached task references are always put on exit | * 30b9068934 io_uring: fix async accept on O_NONBLOCK sockets | * a79b13f249 io_uring: allow re-poll if we made progress | * 3c1a3d0269 io_uring: support MSG_WAITALL for IORING_OP_SEND(MSG) | * 390b881631 io_uring: add flag for disabling provided buffer recycling | * 9b7b0f2116 io_uring: ensure recv and recvmsg handle MSG_WAITALL correctly | * cdc68e714d io_uring: improve send/recv error handling | * ccf06b5a98 io_uring: pass in EPOLL_URING_WAKE for eventfd signaling and wakeups | * 77baf39227 eventfd: provide a eventfd_signal_mask() helper | * a2d8ff00a7 eventpoll: add EPOLL_URING_WAKE poll wakeup flag | * a9aa4aa7a5 io_uring: don't gate task_work run on TIF_NOTIFY_SIGNAL | * bd9a23a4bb hugetlb: unshare some PMDs when splitting VMAs | * 393d9e3ed1 drm/amd: Delay removal of the firmware framebuffer | * 865e244e06 drm/amdgpu: disable runtime pm on several sienna cichlid cards(v2) | * 560373fb1e ALSA: hda/realtek: fix mute/micmute LEDs don't work for a HP platform | * 26264260a8 ALSA: hda/realtek: fix mute/micmute LEDs for a HP ProBook | * 1026756321 efi: fix userspace infinite retry read efivars after EFI runtime services page fault | * 45627a1a64 nilfs2: fix general protection fault in nilfs_btree_insert() | * 350d66d9e7 zonefs: Detect append writes at invalid locations | * 5054d001ff Add exception protection processing for vd in axi_chan_handle_err function | * a12fd43bd1 wifi: mac80211: sdata can be NULL during AMPDU start | * f96a6c009e wifi: brcmfmac: fix regression for Broadcom PCIe wifi devices | * 908d1742b6 Bluetooth: hci_qca: Fix driver shutdown on closed serdev | * 7530fbc05f fbdev: omapfb: avoid stack overflow warning | * e1df7f0b27 perf/x86/rapl: Treat Tigerlake like Icelake | * 2c129e8689 f2fs: let's avoid panic if extent_tree is not created | * 58bac74402 x86/asm: Fix an assembler warning with current binutils | * fdb4a70bb7 btrfs: always report error in run_one_delayed_ref() | * f641067ea2 RDMA/srp: Move large values to a new enum for gcc13 | * 793f8ac218 r8169: move rtl_wol_enable_rx() and rtl_prepare_power_down() | * dc072762f9 net/ethtool/ioctl: return -EOPNOTSUPP if we have no phy stats | * 308d24d875 vduse: Validate vq_num in vduse_validate_config() | * 8e1eb926a0 virtio_pci: modify ENOENT to EINVAL | * 64a6f3689d tools/virtio: initialize spinlocks in vring_test.c | * 95fc28a8e9 selftests/bpf: check null propagation only neither reg is PTR_TO_BTF_ID | * d4a9d2944f pNFS/filelayout: Fix coalescing test for single DS | * 6a3319af6b btrfs: fix trace event name typo for FLUSH_DELAYED_REFS * | 52cea9ba91 Merge "Merge 5.15.89 into android13-5.15-lts" into android13-5.15-lts |\ \ | * | de550d72f1 Merge 5.15.89 into android13-5.15-lts | |\| | | * 3bcc86eb3e Linux 5.15.89 | | * 37c18ef49e pinctrl: amd: Add dynamic debugging for active GPIOs | | * a5841b81ad Revert "usb: ulpi: defer ulpi_register on ulpi_read_id timeout" | | * 7ec9a45fc4 block: handle bio_split_to_limits() NULL return | | * ba86db02d4 io_uring/io-wq: only free worker if it was allocated for creation | | * bb135bcc94 io_uring/io-wq: free worker if task_work creation is canceled | | * 63c2fa09b8 scsi: mpt3sas: Remove scsi_dma_map() error messages | | * e2ea555642 efi: fix NULL-deref in init error path | | * 94b6cf84db arm64: cmpxchg_double*: hazard against entire exchange variable | | * 3891fa4982 arm64: atomics: remove LL/SC trampolines | | * 61e86339af arm64: atomics: format whitespace consistently | | * ed4629d1e9 io_uring: lock overflowing for IOPOLL | | * fbf5015141 KVM: x86: Do not return host topology information from KVM_GET_SUPPORTED_CPUID | | * ee16841134 Documentation: KVM: add API issues section | | * b8f3b3cffb mm: Always release pages to the buddy allocator in memblock_free_late(). | | * d2dc110dea platform/surface: aggregator: Add missing call to ssam_request_sync_free() | | * cfd5978411 igc: Fix PPS delta between two synchronized end-points | | * 0bf52601ce perf build: Properly guard libbpf includes | | * 205f35eee7 net/mlx5e: Don't support encap rules with gbp option | | * 0526fc9330 net/mlx5: Fix ptp max frequency adjustment range | | * 9e2c38827c net/sched: act_mpls: Fix warning during failed attribute validation | | * e3bb44beaf tools/nolibc: fix the O_* fcntl/open macro definitions for riscv | | * 1e6ec75bb3 tools/nolibc: restore mips branch ordering in the _start block | | * bd0431a66c tools/nolibc: Remove .global _start from the entry point code | | * a77c54f5b5 tools/nolibc/arch: mark the _start symbol as weak | | * da51e086d1 tools/nolibc/arch: split arch-specific code into individual files | | * 8591e788be tools/nolibc/types: split syscall-specific definitions into their own files | | * 4fceecdeaa tools/nolibc/std: move the standard type definitions to std.h | | * 1792136f22 tools/nolibc: use pselect6 on RISCV | | * 487386a49e tools/nolibc: x86-64: Use `mov $60,%eax` instead of `mov $60,%rax` | | * 27af4f2260 tools/nolibc: x86: Remove `r8`, `r9` and `r10` from the clobber list | | * a60b24192b af_unix: selftest: Fix the size of the parameter to connect() | | * 39ae73e581 nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame() | | * f6003784b1 hvc/xen: lock console list traversal | | * 79c58b7424 octeontx2-af: Fix LMAC config in cgx_lmac_rx_tx_enable | | * 303d062881 tipc: fix unexpected link reset due to discovery messages | | * e79d0f97cc ALSA: usb-audio: Relax hw constraints for implicit fb sync | | * c9557906bd ALSA: usb-audio: Make sure to stop endpoints before closing EPs | | * 83e758105b ASoC: wm8904: fix wrong outputs volume after power reactivation | | * 7c26d21872 scsi: ufs: core: WLUN suspend SSU/enter hibern8 fail recovery | | * 513fdf0b8e scsi: ufs: Stop using the clock scaling lock in the error handler | | * 13259b60b7 scsi: mpi3mr: Refer CONFIG_SCSI_MPI3MR in Makefile | | * 470f6a9175 regulator: da9211: Use irq handler when ready | | * 24107ad469 x86/resctrl: Fix task CLOSID/RMID update race | | * cd3da505fb EDAC/device: Fix period calculation in edac_device_reset_delay_period() | | * ab0d02c53a x86/boot: Avoid using Intel mnemonics in AT&T syntax asm | | * a90d339f1f powerpc/imc-pmu: Fix use of mutex in IRQs disabled section | | * 511cf17b24 netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function. | | * b22faa21b6 sched/core: Fix use-after-free bug in dup_user_cpus_ptr() | | * d766ccadbe iommu/mediatek-v1: Fix an error handling path in mtk_iommu_v1_probe() | | * c929a230c8 iommu/iova: Fix alloc iova overflows issue | | * 4b51aa263a usb: ulpi: defer ulpi_register on ulpi_read_id timeout | | * 9a8bf443f6 bus: mhi: host: Fix race between channel preparation and M0 event | | * 456e3794e0 ipv6: raw: Deduct extension header length in rawv6_push_pending_frames | | * 4c93422a54 ixgbe: fix pci device refcount leak | | * e97da5d97a platform/x86: sony-laptop: Don't turn off 0x153 keyboard backlight during probe | | * f3b1e04daf dt-bindings: msm/dsi: Don't require vcca-supply on 14nm PHY | | * 52a5f596c6 dt-bindings: msm/dsi: Don't require vdds-supply on 10nm PHY | | * 984ad875db drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer | | * 92ae83665e platform/x86: ideapad-laptop: Add Legion 5 15ARH05 DMI id to set_fn_lock_led_list[] | | * e38b5f81df dt-bindings: msm: dsi-phy-28nm: Add missing qcom, dsi-phy-regulator-ldo-mode | | * bb32ab40cb dt-bindings: msm: dsi-controller-main: Fix description of core clock | | * 3fb8d10bee dt-bindings: msm: dsi-controller-main: Fix power-domain constraint | | * dc5b651cad drm/msm/adreno: Make adreno quirks not overwrite each other | | * 757d665ee1 dt-bindings: msm: dsi-controller-main: Fix operating-points-v2 constraint | | * c90cf47d30 platform/x86: dell-privacy: Fix SW_CAMERA_LENS_COVER reporting | | * 25b5f693bc platform/surface: aggregator: Ignore command messages not intended for us | | * ee7b8ce2cc platform/x86: dell-privacy: Only register SW_CAMERA_LENS_COVER if present | | * e0072068ad cifs: Fix uninitialized memory read for smb311 posix symlink create | | * f3495b5e9e net/mlx5e: Set action fwd flag when parsing tc action goto | | * 1a8431cc20 drm/i915/gt: Reset twice | | * 011ecdbcd5 drm/virtio: Fix GEM handle creation UAF | | * 798dfeeae3 s390/percpu: add READ_ONCE() to arch_this_cpu_to_op_simple() | | * a400593eb3 s390/cpum_sf: add READ_ONCE() semantics to compare and swap loops | | * d4fa65960a ASoC: qcom: lpass-cpu: Fix fallback SD line index handling | | * 8400b91c11 s390/kexec: fix ipl report address for kdump | | * c07e0babd1 perf auxtrace: Fix address filter duplicate symbol selection | | * e81d82da61 net: stmmac: add aux timestamps fifo clearance wait | | * 44167b74a8 docs: Fix the docs build with Sphinx 6.0 | | * 24176bf2a1 efi: tpm: Avoid READ_ONCE() for accessing the event log | | * 01b966b14c selftests: kvm: Fix a compile error in selftests/kvm/rseq_test.c | | * c773ebe11c KVM: arm64: nvhe: Fix build with profile optimization | | * c1d6a72fc8 KVM: arm64: Fix S1PTW handling on RO memslots | | * e04e6cd883 ALSA: hda/realtek: Enable mute/micmute LEDs on HP Spectre x360 13-aw0xxx | | * b983c9a971 ALSA: hda/realtek - Turn on power early | | * 9ab3696881 ALSA: control-led: use strscpy in set_led_id() | | * a8acfe2c6f netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits * | | 2c4f6d72f1 Merge "Merge 5.15.88 into android13-5.15-lts" into android13-5.15-lts |\| | | * | 773ec50a8a Merge 5.15.88 into android13-5.15-lts | |\| | | * 90bb4f8f39 Linux 5.15.88 | | * cbd3e6d5e5 ALSA: hda - Enable headset mic on another Dell laptop with ALC3254 | | * b98dee4746 ALSA: hda/hdmi: Add a HP device 0x8715 to force connect list | | * 26350c21bc ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF | | * dadd0dcaa6 net/ulp: prevent ULP without clone op from entering the LISTEN status | | * 04941c1d5b net: sched: disallow noqueue for qdisc classes | | * 068b512193 serial: fixup backport of "serial: Deassert Transmit Enable on probe in driver-specific way" | | * 46aa155758 selftests/vm/pkeys: Add a regression test for setting PKRU through ptrace | | * 3c1940c549 x86/fpu: Emulate XRSTOR's behavior if the xfeatures PKRU bit is not set | | * 3f1c81426a x86/fpu: Allow PKRU to be (once again) written by ptrace. | | * b29773d6b0 x86/fpu: Add a pkru argument to copy_uabi_to_xstate() | | * 9813c5fc22 x86/fpu: Add a pkru argument to copy_uabi_from_kernel_to_xstate(). | | * fea26e83a1 x86/fpu: Take task_struct* in copy_sigframe_from_user_to_xstate() | | * d4d152017e parisc: Align parisc MADV_XXX constants with all other architectures | * | 1867565896 Revert "ASoC/SoundWire: dai: expand 'stream' concept beyond SoundWire" | * | 43064ed394 Revert "ASoC: Intel/SOF: use set_stream() instead of set_tdm_slots() for HDAudio" | * | 959d50edd2 Revert "PM/devfreq: governor: Add a private governor_data for governor" * | | c34c76a947 Revert "ASoC/SoundWire: dai: expand 'stream' concept beyond SoundWire" * | | 33ef84070b Revert "ASoC: Intel/SOF: use set_stream() instead of set_tdm_slots() for HDAudio" * | | e60641bdca Revert "PM/devfreq: governor: Add a private governor_data for governor" * | | 793ec0a9cc Merge "Merge 5.15.87 into android13-5.15-lts" into android13-5.15-lts |\| | | * | fc4de343bd Merge 5.15.87 into android13-5.15-lts | |\| | | * d57287729e Linux 5.15.87 | | * 24186c6822 drm/mgag200: Fix PLL setup for G200_SE_A rev >=4 | | * e326ee018a io_uring: Fix unsigned 'res' comparison with zero in io_fixup_rw_res() | | * b2b6eefab4 efi: random: combine bootloader provided RNG seed with RNG protocol output | | * 99c0759495 mbcache: Avoid nesting of cache->c_list_lock under bit locks | | * d50d6c193a net: hns3: fix return value check bug of rx copybreak | | * d4e6a13eb9 btrfs: make thaw time super block check to also verify checksum | | * 70a1dccd0e selftests: set the BUILD variable to absolute path | | * 58fef3ebc8 ext4: don't allow journal inode to have encrypt flag | | * bd5dc96fea mptcp: use proper req destructor for IPv6 | | * 78bd6ab52c mptcp: dedicated request sock for subflow in v6 | | * 6e9c1aef3e Revert "ACPI: PM: Add support for upcoming AMD uPEP HID AMDI007" | | * e32f867b37 ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob | | * 4136f1ac1e ksmbd: fix infinite loop in ksmbd_conn_handler_loop() | | * f10defb0be hfs/hfsplus: avoid WARN_ON() for sanity check, use proper error handling | | * 48d9e2e6de hfs/hfsplus: use WARN_ON for sanity check | | * f5a9bbf962 drm/i915/gvt: fix vgpu debugfs clean in remove | | * ae9a615117 drm/i915/gvt: fix gvt debugfs destroy | | * eb3e943a32 riscv, kprobes: Stricter c.jr/c.jalr decoding | | * 620a229f57 riscv: uaccess: fix type of 0 variable on error in get_user() | | * 8e05a993f8 thermal: int340x: Add missing attribute for data rate base | | * c3222fd282 io_uring: fix CQ waiting timeout handling | | * b7b9bc9305 block: don't allow splitting of a REQ_NOWAIT bio | | * e1358c8787 fbdev: matroxfb: G200eW: Increase max memory from 1 MB to 16 MB | | * 682a7d064f nfsd: fix handling of readdir in v4root vs. mount upcall timeout | | * cb42aa7b5f x86/bugs: Flush IBP in ib_prctl_set() | | * 554a880a1f x86/kexec: Fix double-free of elf header buffer | | * 264241a610 btrfs: check superblock to ensure the fs was not modified at thaw time | | * 69f4bda5f4 nvme: also return I/O command effects from nvme_command_effects | | * a6a4b057cd nvmet: use NVME_CMD_EFFECTS_CSUPP instead of open coding it | | * f9309dcaa9 io_uring: check for valid register opcode earlier | | * 4df413d469 nvme: fix multipath crash caused by flush request when blktrace is enabled | | * 03ce792128 ASoC: Intel: bytcr_rt5640: Add quirk for the Advantech MICA-071 tablet | | * 0dca7375e2 udf: Fix extension of the last extent in the file | | * dc1bc90397 caif: fix memory leak in cfctrl_linkup_request() | | * bce3680b48 drm/i915: unpin on error in intel_vgpu_shadow_mm_pin() | | * da6a3653b8 perf stat: Fix handling of --for-each-cgroup with --bpf-counters to match non BPF mode | | * 11cd4ec635 usb: rndis_host: Secure rndis_query check against int overflow | | * 6ea5273c71 octeontx2-pf: Fix lmtst ID used in aura free | | * 4e5f2c74cb drivers/net/bonding/bond_3ad: return when there's no aggregator | | * 8414983c2e fs/ntfs3: don't hold ni_lock when calling truncate_setsize() | | * a23e8376e6 drm/imx: ipuv3-plane: Fix overlay plane width | | * a8f7fd322f perf tools: Fix resources leak in perf_data__open_dir() | | * a1e1521b46 netfilter: ipset: Rework long task execution when adding/deleting entries | | * 6f19a38483 netfilter: ipset: fix hash:net,port,net hang with /0 subnet | | * 774d259749 net: sparx5: Fix reading of the MAC address | | * 04dc4003e5 net: sched: cbq: dont intepret cls results when asked to drop | | * f02327a487 net: sched: atm: dont intepret cls results when asked to drop | | * 95da1882ce gpio: sifive: Fix refcount leak in sifive_gpio_probe | | * da9c9883ec ceph: switch to vfs_inode_has_locks() to fix file lock bug | | * 54e72ce5f1 filelock: new helper: vfs_inode_has_locks | | * f34b03ce3a drm/meson: Reduce the FIFO lines held when AFBC is not used | | * 05a8410b0f RDMA/mlx5: Fix validation of max_rd_atomic caps for DC | | * 8d89870d63 RDMA/mlx5: Fix mlx5_ib_get_hw_stats when used for device | | * 4d112f0016 net: phy: xgmiitorgmii: Fix refcount leak in xgmiitorgmii_probe | | * e5fbeb3d16 net: ena: Update NUMA TPH hint register upon NUMA node update | | * 7840b93cfd net: ena: Set default value for RX interrupt moderation | | * d09b7a9d2f net: ena: Fix rx_copybreak value update | | * 0e7ad9b006 net: ena: Use bitmask to indicate packet redirection | | * 5d4964984b net: ena: Account for the number of processed bytes in XDP | | * f17d9aec07 net: ena: Don't register memory info on XDP exchange | | * a4aa727ad0 net: ena: Fix toeplitz initial hash value | | * 0bec17f1ce net: amd-xgbe: add missed tasklet_kill | | * cb2f74685f net/mlx5e: Fix hw mtu initializing at XDP SQ allocation | | * 6c72abb78b net/mlx5e: Always clear dest encap in neigh-update-del | | * b36783bc11 net/mlx5e: TC, Refactor mlx5e_tc_add_flow_mod_hdr() to get flow attr | | * f8c10eeba3 net/mlx5e: IPoIB, Don't allow CQE compression to be turned on by default | | * 7227bbb7c1 net/mlx5: Avoid recovery in probe flows | | * 9369b9afa8 net/mlx5: Add forgotten cleanup calls into mlx5_init_once() error path | | * d966f2ee4b net/mlx5: E-Switch, properly handle ingress tagged packets on VST | | * 6a37a01aba vdpa_sim: fix vringh initialization in vdpasim_queue_ready() | | * e3462410c3 vhost: fix range used in translate_desc() | | * 13871f60ec vringh: fix range used in iotlb_translate() | | * e05d4c8c28 vhost/vsock: Fix error handling in vhost_vsock_init() | | * 586e6fd7d5 vdpa_sim: fix possible memory leak in vdpasim_net_init() and vdpasim_blk_init() | | * b63bc2db24 nfc: Fix potential resource leaks | | * 945e58bdaf net: dsa: mv88e6xxx: depend on PTP conditionally | | * 95df720e64 qlcnic: prevent ->dcb use-after-free on qlcnic_dcb_enable() failure | | * 6c55953e23 net: sched: fix memory leak in tcindex_set_parms | | * d14a4b24d5 net: hns3: fix VF promisc mode not update when mac table full | | * 7ed205b947 net: hns3: fix miss L3E checking for rx packet | | * 47868cb77f net: hns3: extract macro to simplify ring stats update code | | * 7457c5a776 net: hns3: refactor hns3_nic_reuse_page() | | * 4a6e9fb534 net: hns3: add interrupts re-initialization while doing VF FLR | | * 5e48ed805c nfsd: shut down the NFSv4 state objects before the filecache | | * 7e2825f5fb veth: Fix race with AF_XDP exposing old or uninitialized descriptors | | * ac95cdafac netfilter: nf_tables: honor set timeout and garbage collection updates | | * 49677ea151 vmxnet3: correctly report csum_level for encapsulated packet | | * 9d30cb4421 netfilter: nf_tables: perform type checking for existing sets | | * c3bfb7784a netfilter: nf_tables: add function to create set stateful expressions | | * 996cd779c2 netfilter: nf_tables: consolidate set description | | * 4f1105ee72 drm/panfrost: Fix GEM handle creation ref-counting | | * df493f676f bpf: pull before calling skb_postpull_rcsum() | | * d7e817e689 btrfs: fix an error handling path in btrfs_defrag_leaves() | | * 4d69cdba2c SUNRPC: ensure the matching upcall is in-flight upon downcall | | * af0265dfef drm/i915/migrate: fix length calculation | | * 8b25a526a5 drm/i915/migrate: fix offset calculation | | * a3d1e6f9b6 drm/i915/migrate: don't check the scratch page | | * 5bc0b2fda4 ext4: fix deadlock due to mbcache entry corruption | | * a6e4094faf mbcache: automatically delete entries from cache on freeing | | * 1872549129 ext4: correct inconsistent error msg in nojournal mode | | * 761f88f82e ext4: goto right label 'failed_mount3a' | | * eb16602140 ravb: Fix "failed to switch device to config mode" message during unbind | | * 4216995dbd perf probe: Fix to get the DW_AT_decl_file and DW_AT_call_file as unsinged data | | * d8bbbf2b52 perf probe: Use dwarf_attr_integrate as generic DWARF attr accessor | | * b131b5f136 media: s5p-mfc: Fix in register read and write for H264 | | * ff27800c0a media: s5p-mfc: Clear workbit to handle error condition | | * 4653ba32ad media: s5p-mfc: Fix to handle reference queue during finishing | | * 1bd7283dc0 x86/MCE/AMD: Clear DFR errors found in THR handler | | * 5ddcd349d9 x86/mce: Get rid of msr_ops | | * b8e7ed42bc btrfs: fix extent map use-after-free when handling missing device in read_one_chunk | | * 9c3beebd21 btrfs: move missing device handling in a dedicate function | | * 7528b21ceb btrfs: replace strncpy() with strscpy() | | * 4cef44525f phy: qcom-qmp-combo: fix out-of-bounds clock access | | * 855edc4ec6 ARM: renumber bits related to _TIF_WORK_MASK | | * 18f28f1330 ext4: fix off-by-one errors in fast-commit block filling | | * b205332b6b ext4: fix unaligned memory access in ext4_fc_reserve_space() | | * 9c197dcbac ext4: add missing validation of fast-commit record lengths | | * 6220ec4055 ext4: don't set up encryption key during jbd2 transaction | | * 6482d42baf ext4: disable fast-commit of encrypted dir operations | | * 6969367c15 ext4: fix potential out of bound read in ext4_fc_replay_scan() | | * 818175ae3b ext4: factor out ext4_fc_get_tl() | | * ffd84d0bc5 ext4: introduce EXT4_FC_TAG_BASE_LEN helper | | * 37914e029b ext4: use ext4_debug() instead of jbd_debug() | | * b0ed9a032e ext4: remove unused enum EXT4_FC_COMMIT_FAILED | | * 394514ddf9 tracing: Fix issue of missing one synthetic field | | * 5234dd5d20 block: mq-deadline: Fix dd_finish_request() for zoned devices | | * 78623b10fc drm/amdgpu: make display pinning more flexible (v2) | | * 6363da2c85 drm/amdgpu: handle polaris10/11 overlap asics (v2) | | * 2771c7a0ee ext4: allocate extended attribute value in vmalloc area | | * e995ff918e ext4: avoid unaccounted block allocation when expanding inode | | * 877247222a ext4: initialize quota before expanding inode in setproject ioctl | | * 322cf639b0 ext4: fix inode leak in ext4_xattr_inode_create() on an error path | | * 6380a93b57 ext4: fix kernel BUG in 'ext4_write_inline_data_end()' | | * dc3bbc9753 ext4: avoid BUG_ON when creating xattrs | | * 844c405552 ext4: fix error code return to user-space in ext4_get_branch() | | * b870b28e29 ext4: fix corruption when online resizing a 1K bigalloc fs | | * d440d6427a ext4: fix delayed allocation bug in ext4_clu_mapped for bigalloc + inline | | * def7a39091 ext4: init quota for 'old.inode' in 'ext4_rename' | | * 3c31d8d3ad ext4: fix uninititialized value in 'ext4_evict_inode' | | * 871800770d ext4: fix leaking uninitialized memory in fast-commit journal | | * d480a49c15 ext4: fix bug_on in __es_tree_search caused by bad boot loader inode | | * 91009e361e ext4: check and assert if marking an no_delete evicting inode dirty | | * 820eacbc4e ext4: fix reserved cluster accounting in __es_remove_extent() | | * 0dcbf4dc3d ext4: fix bug_on in __es_tree_search caused by bad quota inode | | * 06a20a68bb ext4: add helper to check quota inums | | * f7e6b5548f ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inode | | * 205ac16628 ext4: fix undefined behavior in bit shift for ext4_check_flag_values | | * cf0e0817b0 ext4: fix use-after-free in ext4_orphan_cleanup | | * 970bfd7a41 fs: ext4: initialize fsdata in pagecache_write() | | * 744bbde378 ext4: remove trailing newline from ext4_msg() message | | * 7192afa5e4 ext4: add inode table check in __ext4_get_inode_loc to aovid possible infinite loop | | * 0d041b7251 ext4: silence the warning when evicting inode with dioread_nolock | | * af4ceb00eb drm/ingenic: Fix missing platform_driver_unregister() call in ingenic_drm_init() | | * c919e1154b drm/i915/dsi: fix VBT send packet port selection for dual link DSI | | * 6948e570f5 drm/vmwgfx: Validate the box size for the snooped cursor | | * 5594fde1ef drm/connector: send hotplug uevent on connector cleanup | | * 317ebe61a6 device_cgroup: Roll back to original exceptions after copy failure | | * ac838c663b parisc: led: Fix potential null-ptr-deref in start_task() | | * 2c1881f081 remoteproc: core: Do pm_relax when in RPROC_OFFLINE state | | * 9b615f957c iommu/amd: Fix ivrs_acpihid cmdline parsing code | | * 35b792179b phy: qcom-qmp-combo: fix sc8180x reset | | * dfd05a1335 driver core: Fix bus_type.match() error handling in __driver_attach() | | * 44618a3397 crypto: ccp - Add support for TEE for PCI ID 0x14CA | | * c55507a94b crypto: n2 - add missing hash statesize | | * 4830750696 riscv: mm: notify remote harts about mmu cache updates | | * 16b6d9525d riscv: stacktrace: Fixup ftrace_graph_ret_addr retp argument | | * 657b440a27 PCI/sysfs: Fix double free in error path | | * 67fd41bbb0 PCI: Fix pci_device_is_present() for VFs by checking PF | | * bfce073089 ipmi: fix use after free in _ipmi_destroy_user() | | * 3b4984035c ima: Fix a potential NULL pointer access in ima_restore_measurement_list | | * a843699f16 mtd: spi-nor: Check for zero erase size in spi_nor_find_best_erase_type() | | * 24f4649cd8 ipmi: fix long wait in unload when IPMI disconnect | | * fa6bbb4894 ipu3-imgu: Fix NULL pointer dereference in imgu_subdev_set_selection() | | * cdb208b090 ASoC: jz4740-i2s: Handle independent FIFO flush bits | | * 2d0d083d8a wifi: wilc1000: sdio: fix module autoloading | | * 2e4a088804 efi: Add iMac Pro 2017 to uefi skip cert quirk | | * c49fb9b760 md/bitmap: Fix bitmap chunk size overflow issues | | * 94fe975d54 block: mq-deadline: Do not break sequential write streams to zoned HDDs | | * 8e91679f7b rtc: ds1347: fix value written to century register | | * 5eb8296d73 cifs: fix missing display of three mount options | | * cfa9f66f91 cifs: fix confusing debug message | | * 8b45a3b19a media: dvb-core: Fix UAF due to refcount races at releasing | | * acf984a371 media: dvb-core: Fix double free in dvb_register_device() | | * 5fac317bee ARM: 9256/1: NWFPE: avoid compiler-generated __aeabi_uldivmod | | * ce50c61245 staging: media: tegra-video: fix device_node use after free | | * 6b16758215 staging: media: tegra-video: fix chan->mipi value on error | | * 4f5de49d8c tracing: Fix infinite loop in tracing_read_pipe on overflowed print_trace_line | | * 17becbc4dd tracing/probes: Handle system names with hyphens | | * 2442e655a6 tracing/hist: Fix wrong return value in parse_action_params() | | * 2a81ff5ce8 tracing: Fix complicated dependency of CONFIG_TRACER_MAX_TRACE | | * fe8c35c6ff tracing: Fix race where eprobes can be called before the event | | * eb20f6ed37 x86/kprobes: Fix optprobe optimization check with CONFIG_RETHUNK | | * 3e0fbc06db x86/kprobes: Fix kprobes instruction boudary check with CONFIG_RETHUNK | | * 6268a0704b ftrace/x86: Add back ftrace_expected for ftrace bug reports | | * c95cf30dd4 x86/microcode/intel: Do not retry microcode reloading on the APs | | * f8fe2f4178 KVM: nVMX: Properly expose ENABLE_USR_WAIT_PAUSE control to L1 | | * ca3483d71b KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails | | * 2c73b349fd KVM: VMX: Resume guest immediately when injecting #GP on ECREATE | | * 4a19f48bee of/kexec: Fix reading 32-bit "linux,initrd-{start,end}" values | | * 7eddcdb09f perf/core: Call LSM hook after copying perf_event_attr | | * 15697f6533 tracing/hist: Fix out-of-bound write on 'action_data.var_ref_idx' | | * fd52b86a72 dm cache: set needs_check flag after aborting metadata | | * d2a0b298eb dm cache: Fix UAF in destroy() | | * 856edd0e92 dm clone: Fix UAF in clone_dtr() | | * 9215b25f2e dm integrity: Fix UAF in dm_integrity_dtr() | | * 34cd15d83b dm thin: Fix UAF in run_timer_softirq() | | * ac362c40e3 dm thin: resume even if in FAIL mode | | * 4b710e8481 dm thin: Use last transaction's pmd->root when commit failed | | * f8c26c33fe dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata | | * 28d307f380 dm cache: Fix ABBA deadlock between shrink_slab and dm_cache_metadata_abort | | * a9e89a567f mptcp: remove MPTCP 'ifdef' in TCP SYN cookies | | * 13b9fd0dee mptcp: mark ops structures as ro_after_init | | * b2120ed7fd fs: dlm: retry accept() until -EAGAIN or error returns | | * 5b4478615f fs: dlm: fix sock release if listen fails | | * b7ede8a63d ALSA: hda/realtek: Apply dual codec fixup for Dell Latitude laptops | | * dbd1f30191 ALSA: patch_realtek: Fix Dell Inspiron Plus 16 | | * 8fb4c98f20 cpufreq: Init completion before kobject_init_and_add() | | * 876c6ab967 PM/devfreq: governor: Add a private governor_data for governor | | * 0e945ea733 selftests: Use optional USERCFLAGS and USERLDFLAGS | | * 31697c5953 arm64: dts: qcom: sdm850-lenovo-yoga-c630: correct I2C12 pins drive strength | | * 1630498660 ARM: ux500: do not directly dereference __iomem | | * 99590f29b2 btrfs: fix resolving backrefs for inline extent followed by prealloc | | * 1f9cf4daf2 mmc: sdhci-sprd: Disable CLK_AUTO when the clock is less than 400K | | * 58d53ff30a arm64: dts: qcom: sdm845-db845c: correct SPI2 pins drive strength | | * a777b90a05 perf/x86/intel/uncore: Clear attr_update properly | | * ca77ac238c perf/x86/intel/uncore: Disable I/O stacks to PMU mapping on ICX-D | | * df06e7777c jbd2: use the correct print format | | * 8e75b1dd4b ktest.pl minconfig: Unset configs instead of just removing them | | * 55e5e8b445 kest.pl: Fix grub2 menu handling for rebooting | | * 823fed7c40 soc: qcom: Select REMAP_MMIO for LLCC driver | | * 8dabeeb1ff media: stv0288: use explicitly signed char | | * d167ebea90 net/af_packet: make sure to pull mac header | | * 9ff46c36df net/af_packet: add VLAN support for AF_PACKET SOCK_RAW GSO | | * cd0f597c8a rcu-tasks: Simplify trc_read_check_handler() atomic operations | | * 593ca69668 ASoC/SoundWire: dai: expand 'stream' concept beyond SoundWire | | * a7874dac6b ASoC: Intel/SOF: use set_stream() instead of set_tdm_slots() for HDAudio | | * ae4f70b2fe kcsan: Instrument memcpy/memset/memmove with newer Clang | | * d01fa993eb SUNRPC: Don't leak netobj memory when gss_read_proxy_verf() fails | | * 43135fb098 tpm: tpm_tis: Add the missed acpi_put_table() to fix memory leak | | * 986cd9a9b9 tpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak | | * 638cd298df tpm: acpi: Call acpi_put_table() to fix memory leak | | * d58289fc77 mmc: vub300: fix warning - do not call blocking ops when !TASK_RUNNING | | * 7eb57bc92f f2fs: allow to read node block after shutdown | | * acc13987fd f2fs: should put a page when checking the summary info | | * 35d8a89862 mm, compaction: fix fast_isolate_around() to stay within boundaries | | * 91bd504128 md: fix a crash in mempool_free | | * 29328fbce5 mfd: mt6360: Add bounds checking in Regmap read/write call-backs | | * c24cc476ac pnode: terminate at peers of source | | * 0c9118e381 ALSA: line6: fix stack overflow in line6_midi_transmit | | * ac4b4fdf32 ALSA: line6: correct midi status byte when receiving data from podxt | | * 83c44f0ebf ovl: Use ovl mounter's fsuid and fsgid in ovl_link() | | * fcb94283e0 binfmt: Fix error return code in load_elf_fdpic_binary() | | * ed9947277b hfsplus: fix bug causing custom uid and gid being unable to be assigned with mount | | * 76d52b5412 pstore/zone: Use GFP_ATOMIC to allocate zone buffer | | * 74b0a2fcc3 pstore: Properly assign mem_type property | | * d25aac3489 HID: plantronics: Additional PIDs for double volume key presses quirk | | * 9d4294545c HID: multitouch: fix Asus ExpertBook P2 P2451FA trackpoint | | * 7280fdb80b powerpc/rtas: avoid scheduling in rtas_os_term() | | * d8939315b7 powerpc/rtas: avoid device tree lookups in rtas_os_term() | | * 23a249b118 objtool: Fix SEGFAULT | | * ed686e7a26 fs/ntfs3: Fix slab-out-of-bounds in r_page | | * dd34665cb0 fs/ntfs3: Delete duplicate condition in ntfs_read_mft() | | * a9847a11b6 fs/ntfs3: Use __GFP_NOWARN allocation at ntfs_fill_super() | | * abd2ee2cf4 fs/ntfs3: Use __GFP_NOWARN allocation at wnd_init() | | * d7ce7bb688 fs/ntfs3: Validate index root when initialize NTFS security | | * f29676cc3a soundwire: dmi-quirks: add quirk variant for LAPBC710 NUC15 | | * 9c8471a17f fs/ntfs3: Fix slab-out-of-bounds read in run_unpack | | * 3a52f17867 fs/ntfs3: Validate resident attribute name | | * 3cd9e5b41b fs/ntfs3: Validate buffer length while parsing index | | * c878a915bc fs/ntfs3: Validate attribute name offset | | * f62506f5e4 fs/ntfs3: Add null pointer check for inode operations | | * 2dd9ccfb06 fs/ntfs3: Fix memory leak on ntfs_fill_super() error path | | * ea6b359840 fs/ntfs3: Add null pointer check to attr_load_runs_vcn | | * de5e095524 fs/ntfs3: Validate data run offset | | * d4489ba8fb fs/ntfs3: Add overflow check for attribute size | | * af7a195dea fs/ntfs3: Validate BOOT record_size | | * 8e228ac90c nvmet: don't defer passthrough commands with trivial effects to the workqueue | | * f068a7315a nvme: fix the NVME_CMD_EFFECTS_CSE_MASK definition | | * 576502f25f ata: ahci: Fix PCS quirk application for suspend | | * 7949b0df3d block, bfq: fix uaf for bfqq in bfq_exit_icq_bfqq | | * ff3d9ab51c ACPI: resource: do IRQ override on Lenovo 14ALC7 | | * 698a0813ce ACPI: resource: do IRQ override on XMG Core 15 | | * a9ac7633bb ACPI: resource: do IRQ override on LENOVO IdeaPad | | * 5fe31f2950 ACPI: resource: Skip IRQ override on Asus Vivobook K3402ZA/K3502ZA | | * 4c5fee0d88 nvme-pci: fix page size checks | | * 9141144b37 nvme-pci: fix mempool alloc size | | * f17cf8fa2c nvme-pci: fix doorbell buffer value endianness | | * ead99ec669 Revert "selftests/bpf: Add test for unstable CT lookup API" | | * bf0543b937 cifs: fix oops during encryption | | * 56f6de394f usb: dwc3: qcom: Fix memory leak in dwc3_qcom_interconnect_init * | | 2ce8e6e296 ANDROID: add __dev_kfree_skb_irq to virtual_device abi list |/ / * | 24bc28221f Revert "net: add atomic_long_t to net_device_stats fields" * | 34d878c5b3 Revert "ipv6/sit: use DEV_STATS_INC() to avoid data-races" * | 956e2924f3 Revert "arm64: Treat ESR_ELx as a 64-bit register" * | 8a3baaa85e Revert "arm64: mm: kfence: only handle translation faults" * | 8b3730f922 Revert "gpiolib: protect the GPIO device against being dropped while in use by user-space" * | b0e87c106d Revert "soreuseport: Fix socket selection for SO_INCOMING_CPU." * | 8a8a0cb6c6 Revert "bpf, sockmap: Fix missing BPF_F_INGRESS flag when using apply_bytes" * | 2d4c48bff9 Revert "xhci: Prevent infinite loop in transaction errors recovery for streams" * | 20ec745823 Merge 5.15.86 into android13-5.15-lts |\| | * 90ffbb727c Linux 5.15.86 | * 3082f8705e pwm: tegra: Fix 32 bit build | * caa40d1f85 mfd: qcom_rpm: Use devm_of_platform_populate() to simplify code | * 408dbaa065 extcon: usbc-tusb320: Call the Type-C IRQ handler only if a port is registered | * 2471a44769 media: dvbdev: fix refcnt bug | * 579fb0a332 media: dvbdev: fix build warning due to comments | * 1115e77c4f net: stmmac: fix errno when create_singlethread_workqueue() fails | * d3871af13a scsi: qla2xxx: Fix crash when I/O abort times out | * 50f993da94 btrfs: do not BUG_ON() on ENOMEM when dropping extent items for a range | * 1c65d50315 ovl: fix use inode directly in rcu-walk mode | * 88ec6d1105 fbdev: fbcon: release buffer when fbcon_do_set_font() failed | * ca8bcb348a gcov: add support for checksum field | * f36d8c8651 floppy: Fix memory leak in do_floppy_init() | * 4193a6745b regulator: core: fix deadlock on regulator enable | * ce5d0ef1cf iio: adc128s052: add proper .data members in adc128_of_match table | * aec1058f2a iio: adc: ad_sigma_delta: do not use internal iio_dev lock | * dc6afd6070 iio: fix memory leak in iio_device_register_eventset() | * 38c257ee6a reiserfs: Add missing calls to reiserfs_security_free() | * 8a4236456a security: Restrict CONFIG_ZERO_CALL_USED_REGS to gcc or clang > 15.0.6 | * 1cabce5662 9p: set req refcount to zero to avoid uninitialized usage | * dd2157a98f loop: Fix the max_loop commandline argument treatment when it is set to 0 | * fd03bd4c7b HID: mcp2221: don't connect hidraw | * 6c886be1ff HID: wacom: Ensure bootloader PID is usable in hidraw mode | * 4d640eb112 xhci: Prevent infinite loop in transaction errors recovery for streams | * 936c5f96c8 usb: dwc3: core: defer probe on ulpi_read_id timeout | * e6bf6c4022 usb: dwc3: Fix race between dwc3_set_mode and __dwc3_set_mode | * 0e883f3bc8 arm64: dts: qcom: sm8250: fix USB-DP PHY registers | * ffb14aac26 usb: xhci-mtk: fix leakage of shared hcd when fail to set wakeup irq | * fcacd970e0 usb: cdnsp: fix lack of ZLP for ep0 | * bcac79df08 ALSA: hda/hdmi: Add HP Device 0x8711 to force connect list | * 50c23a1107 ALSA: hda/realtek: Add quirk for Lenovo TianYi510Pro-14IOB | * 76574b3465 ALSA: usb-audio: add the quirk for KT0206 device | * 9e787dab98 ima: Simplify ima_lsm_copy_rule | * 2cd365029c pstore: Make sure CONFIG_PSTORE_PMSG selects CONFIG_RT_MUTEXES | * 2068d41a3d afs: Fix lost servers_outstanding count | * 0def8af038 perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() | * 41cccae10e pstore: Switch pmsg_lock to an rt_mutex to avoid priority inversion | * 8877df8135 LoadPin: Ignore the "contents" argument of the LSM hooks | * 584202b0f1 drm/i915/display: Don't disable DDI/Transcoder when setting phy test pattern | * b253e075b1 ASoC: rt5670: Remove unbalanced pm_runtime_put() | * 59f797a913 ASoC: rockchip: spdif: Add missing clk_disable_unprepare() in rk_spdif_runtime_resume() | * 132844d92f ASoC: wm8994: Fix potential deadlock | * 82f7c814ed ASoC: mediatek: mt8183: fix refcount leak in mt8183_mt6358_ts3a227_max98357_dev_probe() | * e5d6bf3e5a ASoC: rockchip: pdm: Add missing clk_disable_unprepare() in rockchip_pdm_runtime_resume() | * 85eb5c952b ASoC: audio-graph-card: fix refcount leak of cpu_ep in __graph_for_each_link() | * 9ff07316ca ASoC: mediatek: mt8173-rt5650-rt5514: fix refcount leak in mt8173_rt5650_rt5514_dev_probe() | * 7643909cf0 ASoC: Intel: Skylake: Fix driver hang during shutdown | * 33ff0f9f9c ALSA: hda: add snd_hdac_stop_streams() helper | * 78649a624d ALSA/ASoC: hda: move/rename snd_hdac_ext_stop_streams to hdac_stream.c | * 98b0f50fec hwmon: (jc42) Fix missing unlock on error in jc42_write() | * 5e69233508 KVM: selftests: Fix build regression by using accessor function | * 6215904fe2 tools/include: Add _RET_IP_ and math definitions to kernel.h | * c885326728 orangefs: Fix kmemleak in orangefs_{kernel,client}_debug_init() | * 39529b79b0 orangefs: Fix kmemleak in orangefs_prepare_debugfs_help_string() | * a075c21ee0 drm/sti: Fix return type of sti_{dvo,hda,hdmi}_connector_mode_valid() | * f3c14b99f3 drm/fsl-dcu: Fix return type of fsl_dcu_drm_connector_mode_valid() | * 9a8862820c hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param() | * 4f6b206998 scsi: elx: libefc: Fix second parameter type in state callbacks | * 23f0e9f863 scsi: ufs: Reduce the START STOP UNIT timeout | * 2cf66428a2 scsi: lpfc: Fix hard lockup when reading the rx_monitor from debugfs | * 2b3e3ecdb4 crypto: hisilicon/hpre - fix resource leak in remove process | * adf6a00859 clk: st: Fix memory leak in st_of_quadfs_setup() | * 6c8aee0c8f media: si470x: Fix use-after-free in si470x_int_in_callback() | * 58b6496a74 mmc: renesas_sdhi: better reset from HS400 mode | * c33c904124 mmc: f-sdh30: Add quirks for broken timeout clock capability | * 69346de0eb wifi: mt76: do not run mt76u_status_worker if the device is not running | * feb847e659 regulator: core: fix use_count leakage when handling boot-on | * 474e70bd90 libbpf: Avoid enum forward-declarations in public API in C++ mode | * 6209542869 drm/amd/display: Use the largest vready_offset in pipe group | * eff45bfbc2 blk-mq: fix possible memleak when register 'hctx' failed | * d0af6220bb media: dvb-usb: fix memory leak in dvb_usb_adapter_init() | * 88a6f8a72d media: dvbdev: adopts refcnt to avoid UAF | * 438cd29fec media: dvb-frontends: fix leak of memory fw | * a96841f5aa ethtool: avoiding integer overflow in ethtool_phys_id() | * b327c68ace bpf: Prevent decl_tag from being referenced in func_proto arg | * 4b8f3b9392 ppp: associate skb with a device at tx | * 5d5a481a7f mrp: introduce active flags to prevent UAF when applicant uninit | * 222cc04356 ipv6/sit: use DEV_STATS_INC() to avoid data-races | * 8a3b023710 net: add atomic_long_t to net_device_stats fields | * 58dd11f624 drm/amd/display: fix array index out of bound error in bios parser | * a3cc41e05e md/raid1: stop mdx_raid1 thread when raid1 array run failed | * b621d17fe8 drivers/md/md-bitmap: check the return value of md_bitmap_get_counter() | * 5afac74f15 drm/mediatek: Fix return type of mtk_hdmi_bridge_mode_valid() | * 072508e99d drm/sti: Use drm_mode_copy() | * 673a3e0199 drm/rockchip: Use drm_mode_copy() | * b9b07900d2 drm/msm: Use drm_mode_copy() | * 5ad774fb82 s390/lcs: Fix return type of lcs_start_xmit() | * dfbf0122ea s390/netiucv: Fix return type of netiucv_tx() | * 8131d1880c s390/ctcm: Fix return type of ctc{mp,}m_tx() | * f9084e9930 drm/amdgpu: Fix type of second parameter in odn_edit_dpm_table() callback | * b74580d618 drm/amdgpu: Fix type of second parameter in trans_msg() callback | * 314f7092b2 igb: Do not free q_vector unless new one was allocated | * 0b12d2aa26 wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmf_fw_alloc_request() | * 19bb9e98e1 hamradio: baycom_epp: Fix return type of baycom_send_packet() | * a413ebb604 net: ethernet: ti: Fix return type of netcp_ndo_start_xmit() | * 5d3f4478d2 bpf: make sure skb->len != 0 when redirecting to a tunneling device | * be2803dd29 qed (gcc13): use u16 for fid to be big enough | * a8bc0ac438 Revert "drm/amd/display: Limit max DSC target bpp for specific monitors" | * cc8deb82cc drm/amd/display: prevent memory leak | * 49dd0e8029 ipmi: fix memleak when unload ipmi driver | * 68871c005f ASoC: codecs: rt298: Add quirk for KBL-R RVP platform | * 3eca9697c2 wifi: ar5523: Fix use-after-free on ar5523_cmd() timed out | * c319196a0e wifi: ath9k: verify the expected usb_endpoints are present | * 10c4b63d09 brcmfmac: return error when getting invalid max_flowrings from dongle | * ad31bc146f media: imx-jpeg: Disable useless interrupt to avoid kernel panic | * 6e1a6880e1 drm/etnaviv: add missing quirks for GC300 | * 367296925c hfs: fix OOB Read in __hfs_brec_find | * ebe16676e1 acct: fix potential integer overflow in encode_comp_t() | * 8b6ef451b5 nilfs2: fix shift-out-of-bounds due to too large exponent of block size | * b47f5c579c nilfs2: fix shift-out-of-bounds/overflow in nilfs_sb2_bad_offset() | * 5777432eba ACPICA: Fix error code path in acpi_ds_call_control_method() | * 10b87da8fa fs: jfs: fix shift-out-of-bounds in dbDiscardAG | * 5059ea84a8 jfs: Fix fortify moan in symlink | * e7a6a53c87 udf: Avoid double brelse() in udf_rename() | * 0536f76a2b fs: jfs: fix shift-out-of-bounds in dbAllocAG | * 88cea1676a binfmt_misc: fix shift-out-of-bounds in check_special_flags | * cadb938a5e x86/hyperv: Remove unregister syscore call from Hyper-V cleanup | * 659747f6f6 video: hyperv_fb: Avoid taking busy spinlock on panic path | * 9d05c20b0a arm64: make is_ttbrX_addr() noinstr-safe | * 98a5b1265a rcu: Fix __this_cpu_read() lockdep warning in rcu_force_quiescent_state() | * d238f94b2b HID: amd_sfh: Add missing check for dma_alloc_coherent | * 9da204cd67 net: stream: purge sk_error_queue in sk_stream_kill_queues() | * f47426250f myri10ge: Fix an error handling path in myri10ge_probe() | * 1ec0a7d5b0 rxrpc: Fix missing unlock in rxrpc_do_sendmsg() | * 5478eb7adc net_sched: reject TCF_EM_SIMPLE case for complex ematch module | * 4f05d8e2fb mailbox: zynq-ipi: fix error handling while device_register() fails | * 550f403e46 mailbox: arm_mhuv2: Fix return value check in mhuv2_probe() | * 28604a960c mailbox: mpfs: read the system controller's status | * 8fb773eed4 skbuff: Account for tail adjustment during pull operations | * dc0f38957a arm64: dts: mt8183: Fix Mali GPU clock | * 790b396f6b soc: mediatek: pm-domains: Fix the power glitch issue | * 0133615a06 openvswitch: Fix flow lookup to use unmasked key | * 04e454bd97 selftests: devlink: fix the fd redirect in dummy_reporter_test | * d52646a46c rtc: mxc_v2: Add missing clk_disable_unprepare() | * ac95c4e35f igc: Set Qbv start_time and end_time to end_time if not being configured in GCL | * af59985138 igc: Lift TAPRIO schedule restriction | * 4d50d640ed igc: recalculate Qbv end_time by considering cycle time | * 1ef9416957 igc: allow BaseTime 0 enrollment for Qbv | * c0df8e7ba6 igc: Add checking for basetime less than zero | * 5b46b53f45 igc: Use strict cycles for Qbv scheduling | * fd7d029436 igc: Enhance Qbv scheduling by using first flag bit | * 9b5b50329e r6040: Fix kmemleak in probe and remove | * 1b428ba31b unix: Fix race in SOCK_SEQPACKET's unix_dgram_sendmsg() | * aae9c24ebd nfc: pn533: Clear nfc_target before being used | * bcf2c1dc53 net: enetc: avoid buffer leaks on xdp_do_redirect() failure | * f463a1295c selftests/bpf: Add test for unstable CT lookup API | * 094f3d9314 block, bfq: fix possible uaf for 'bfqq->bic' | * cf48cb8deb mISDN: hfcmulti: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() | * 5607353751 mISDN: hfcpci: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() | * ada4022f48 mISDN: hfcsusb: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() | * 0578f9929f net: macsec: fix net device access prior to holding a lock | * a472f069ce nfsd: under NFSv4.1, fix double svc_xprt_put on rpc_create failure | * f8f1d037d6 rtc: pcf85063: fix pcf85063_clkout_control | * 35a174552b rtc: pic32: Move devm_rtc_allocate_device earlier in pic32_rtc_probe() | * eea105c4e4 rtc: st-lpc: Add missing clk_disable_unprepare in st_rtc_probe() | * 74248b5560 netfilter: flowtable: really fix NAT IPv6 offload | * 5c940632ca mfd: pm8008: Fix return value check in pm8008_probe() | * ec10848e26 mfd: pm8008: Remove driver data structure pm8008_data | * 38959417d3 mfd: qcom_rpm: Fix an error handling path in qcom_rpm_probe() | * b95ae3543e mfd: bd957x: Fix Kconfig dependency on REGMAP_IRQ | * 615d3c8a46 powerpc/pseries/eeh: use correct API for error log size | * 68de42e008 powerpc/eeh: Drop redundant spinlock initialization | * 2b157b4b13 remoteproc: qcom: q6v5: Fix missing clk_disable_unprepare() in q6v5_wcss_qcs404_power_on() | * 4b191533f5 remoteproc: qcom_q6v5_pas: Fix missing of_node_put() in adsp_alloc_memory_region() | * d7628ebca8 remoteproc: qcom_q6v5_pas: detach power domains on remove | * fdf47f462a remoteproc: qcom_q6v5_pas: disable wakeup on probe fail or remove | * 098ebb9089 remoteproc: qcom: q6v5: Fix potential null-ptr-deref in q6v5_wcss_init_mmio() | * 131c0a3ead remoteproc: sysmon: fix memory leak in qcom_add_sysmon_subdev() | * 4507c6a672 pwm: mediatek: always use bus clock for PWM on MT7622 | * 4fbbb14f0e pwm: mtk-disp: Fix the parameters calculated by the enabled flag of disp_pwm | * eec59807a2 pwm: sifive: Call pwm_sifive_update_clock() while mutex is held | * 37ea9a6c41 iommu/sun50i: Remove IOMMU_DOMAIN_IDENTITY | * 8de2c29db6 selftests/powerpc: Fix resource leaks | * dd49c5031e powerpc/hv-gpci: Fix hv_gpci event list | * 65d3469f3b powerpc/83xx/mpc832x_rdb: call platform_device_put() in error case in of_fsl_spi_probe() | * cf03db2896 powerpc/perf: callchain validate kernel stack pointer bounds | * 5de1902244 powerpc/xive: add missing iounmap() in error path in xive_spapr_populate_irq_data() | * b31e9647f1 powerpc/xmon: Fix -Wswitch-unreachable warning in bpt_cmds | * 6a310e8db5 cxl: Fix refcount leak in cxl_calc_capp_routing | * 0accd460dc powerpc/52xx: Fix a resource leak in an error handling path | * be2b9b1a60 macintosh/macio-adb: check the return value of ioremap() | * 19ded60b40 macintosh: fix possible memory leak in macio_add_one_device() | * e42b543d08 iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe() | * 6e501b3fd7 iommu/amd: Fix pci device refcount leak in ppr_notifier() | * 9383921e8b rtc: pcf85063: Fix reading alarm | * b66aa7b306 rtc: snvs: Allow a time difference on clock register read | * 7a6cc22eab rtc: cmos: Disable ACPI RTC event on removal | * 689f757f0a rtc: cmos: Rename ACPI-related functions | * 1c74bbecda rtc: cmos: Eliminate forward declarations of some functions | * 3a439a2cab rtc: cmos: Call rtc_wake_setup() from cmos_do_probe() | * 9febdff75c rtc: cmos: Call cmos_wake_setup() from cmos_do_probe() | * d9324fb3ee rtc: cmos: fix build on non-ACPI platforms | * fe46b9303e rtc: cmos: Fix wake alarm breakage | * 60c6e563a8 rtc: cmos: Fix event handler registration ordering issue | * d3aa083469 rtc: rtc-cmos: Do not check ACPI_FADT_LOW_POWER_S0 | * 6e98a93c75 dmaengine: idxd: Fix crc_val field for completion record | * ab53749c32 fs/ntfs3: Fix slab-out-of-bounds read in ntfs_trim_fs | * 1ba0968b33 pwm: tegra: Improve required rate calculation | * c160505c9b include/uapi/linux/swab: Fix potentially missing __always_inline | * 59463193b0 phy: usb: s2 WoL wakeup_count not incremented for USB->Eth devices | * ae00848e55 iommu/rockchip: fix permission bits in page table entries v2 | * a7f6ad2c42 iommu/sun50i: Fix flush size | * 38ccb9b469 iommu/sun50i: Fix R/W permission check | * ae4ab47a0b iommu/sun50i: Consider all fault sources for reset | * 84fee3ce82 iommu/sun50i: Fix reset release | * 6f9fe31a48 fs/ntfs3: Harden against integer overflows | * 30f20ceb87 overflow: Implement size_t saturating arithmetic helpers | * 4b51f27d44 fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst() | * 28f345bec7 RDMA/siw: Fix pointer cast warning | * 01d925e2a5 perf stat: Do not delay the workload with --delay | * a273f1dd5d perf stat: Refactor __run_perf_stat() common code | * d21534ab4f power: supply: fix null pointer dereferencing in power_supply_get_battery_info | * d4898d8de6 power: supply: ab8500: Fix error handling in ab8500_charger_init() | * 30b191798f HSI: omap_ssi_core: Fix error handling in ssi_init() | * a72fe8eb55 power: supply: z2_battery: Fix possible memleak in z2_batt_probe() | * 5ba0e8fa15 perf symbol: correction while adjusting symbol | * a34027b63d perf trace: Handle failure when trace point folder is missed | * 60aeacce64 perf trace: Use macro RAW_SYSCALL_ARGS_NUM to replace number | * e4700f62dc perf trace: Return error if a system call doesn't exist | * 870ad0917d power: supply: fix residue sysfs file in error handle route of __power_supply_register() | * 1c2b9c8100 HSI: omap_ssi_core: fix possible memory leak in ssi_probe() | * c5f729d3d6 HSI: omap_ssi_core: fix unbalanced pm_runtime_disable() | * ea37831f83 fbdev: uvesafb: Fixes an error handling path in uvesafb_probe() | * 5bcae36b58 fbdev: uvesafb: don't build on UML | * 07c1a3c2df fbdev: geode: don't build on UML | * ace8312b5d fbdev: ep93xx-fb: Add missing clk_disable_unprepare in ep93xxfb_probe() | * 04946113fb fbdev: vermilion: decrease reference count in error path | * fc0d5034fa fbdev: via: Fix error in via_core_init() | * 9827246333 fbdev: pm2fb: fix missing pci_disable_device() | * 3aa4205134 fbdev: ssd1307fb: Drop optional dependency | * 4958316a6d thermal/drivers/qcom/lmh: Fix irq handler return value | * ad72205ac6 thermal/drivers/qcom/temp-alarm: Fix inaccurate warning for gen2 | * 37fb4e13d2 thermal/drivers/imx8mm_thermal: Validate temperature range | * 95c18f4a3c samples: vfio-mdev: Fix missing pci_disable_device() in mdpy_fb_probe() | * 31c1b5d300 ksmbd: Fix resource leak in ksmbd_session_rpc_open() | * a44102d36a tracing/hist: Fix issue of losting command info in error_log | * 8308ccfcbd usb: storage: Add check for kcalloc | * 96c12fd0ec i2c: ismt: Fix an out-of-bounds bug in ismt_access() | * 8212800943 i2c: mux: reg: check return value after calling platform_get_resource() | * 46d8f63bb8 gpiolib: protect the GPIO device against being dropped while in use by user-space | * 333a271dfd gpiolib: make struct comments into real kernel docs | * 7c755a2d6d gpiolib: cdev: fix NULL-pointer dereferences | * b0a26e1999 gpiolib: Get rid of redundant 'else' | * 4bc217b25e vme: Fix error not catched in fake_init() | * 31bfe024a9 staging: rtl8192e: Fix potential use-after-free in rtllib_rx_Monitor() | * b0aaec894a staging: rtl8192u: Fix use after free in ieee80211_rx() | * ed4580c3f8 i2c: pxa-pci: fix missing pci_disable_device() on error in ce4100_i2c_probe | * 28dc61cc49 chardev: fix error handling in cdev_device_add() | * 43bfc7c240 mcb: mcb-parse: fix error handing in chameleon_parse_gdd() | * f3686e5e8d drivers: mcb: fix resource leak in mcb_probe() | * 9d4a0aca8a usb: gadget: f_hid: fix refcount leak on error path | * d3136b7970 usb: gadget: f_hid: fix f_hidg lifetime vs cdev | * a41c2bba7f usb: roles: fix of node refcount leak in usb_role_switch_is_parent() | * 18b9202188 coresight: trbe: remove cpuhp instance node before remove cpuhp state | * e854a4ab38 counter: stm32-lptimer-cnt: fix the check on arr and cmp registers update | * 39a156715f iio: adis: add '__adis_enable_irq()' implementation | * 3a2dde8e5d iio:imu:adis: Move exports into IIO_ADISLIB namespace | * 3c2e13025b iio: adis: stylistic changes | * de3e358912 iio: adis: handle devices that cannot unmask the drdy pin | * 994243de7a iio: temperature: ltc2983: make bulk write buffer DMA-safe | * 22511eefa6 cxl: fix possible null-ptr-deref in cxl_pci_init_afu|adapter() | * e5021bbf11 cxl: fix possible null-ptr-deref in cxl_guest_init_afu|adapter() | * b308fdedef firmware: raspberrypi: fix possible memory leak in rpi_firmware_probe() | * d5c8f9003a misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os | * 848c45964d misc: tifm: fix possible memory leak in tifm_7xx1_switch_media() | * 37a13b274e ocxl: fix pci device refcount leak when calling get_function_0() | * 3299983a6b misc: ocxl: fix possible name leak in ocxl_file_register_afu() | * 357379d504 test_firmware: fix memory leak in test_firmware_init() | * 07d547d742 serial: sunsab: Fix error handling in sunsab_init() | * 919e745fdd serial: altera_uart: fix locking in polling mode | * e1c4f18214 tty: serial: altera_uart_{r,t}x_chars() need only uart_port | * b133b45ba6 tty: serial: clean up stop-tx part in altera_uart_tx_chars() | * 6f7d82380f serial: pch: Fix PCI device refcount leak in pch_request_dma() | * 0dfc7dfe5b serial: stm32: move dma_request_chan() before clk_prepare_enable() | * 926b0967f7 serial: pl011: Do not clear RX FIFO & RX interrupt in unthrottle. | * d71a611fca serial: amba-pl011: avoid SBSA UART accessing DMACR register | * f46f9d2e16 extcon: usbc-tusb320: Update state on probe even if no IRQ pending | * ac067e75c4 extcon: usbc-tusb320: Add USB TYPE-C support | * 9280761167 extcon: usbc-tusb320: Factor out extcon into dedicated functions | * 05aa8ff22d usb: typec: Factor out non-PD fwnode properties | * 31e9c27510 extcon: usbc-tusb320: Add support for TUSB320L | * b9c8820d91 extcon: usbc-tusb320: Add support for mode setting and reset | * 4524599a6a usb: typec: tipd: Fix spurious fwnode_handle_put in error path | * b0d86eacc8 usb: typec: tipd: Cleanup resources if devm_tps6598_psy_register fails | * ba75be6f0d usb: typec: tcpci: fix of node refcount leak in tcpci_register_port() | * 154d5713a2 usb: typec: Check for ops->exit instead of ops->enter in altmode_exit | * 1f5661388f staging: vme_user: Fix possible UAF in tsi148_dma_list_add | * a3c4bc2616 usb: fotg210-udc: Fix ages old endianness issues | * 5e87d41221 uio: uio_dmem_genirq: Fix deadlock between irq config and handling | * 79a4bdb6b9 uio: uio_dmem_genirq: Fix missing unlock in irq configuration | * 3f22a273ef vfio: platform: Do not pass return buffer to ACPI _RST method | * 417ef049e3 class: fix possible memory leak in __class_register() | * f76824ab2b serial: 8250_bcm7271: Fix error handling in brcmuart_init() | * 6b4424efcf serial: tegra: Read DMA status before terminating | * a0ead7e8da drivers: dio: fix possible memory leak in dio_init() | * e8985caf05 RISC-V: Align the shadow stack | * ca48174a76 IB/IPoIB: Fix queue count inconsistency for PKEY child interfaces | * 82bd423ed9 hwrng: geode - Fix PCI device refcount leak | * 2b79a5e560 hwrng: amd - Fix PCI device refcount leak | * 42cbff35f4 crypto: img-hash - Fix variable dereferenced before check 'hdev->req' | * b9634f99b6 RDMA/hns: Fix error code of CMD | * b06bb747ce RDMA/hns: Fix page size cap from firmware | * 4c05c7cf25 RDMA/hns: Fix PBL page MTR find | * fa267c4192 RDMA/hns: Fix AH attr queried by query_qp | * e27fb26e75 orangefs: Fix sysfs not cleanup when dev init failed | * 3e9c395ef2 PCI: mt7621: Add sentinel to quirks table | * bcc65c2e2a PCI: mt7621: Rename mt7621_pci_ to mt7621_pcie_ | * 0a7eab1cc4 RDMA/srp: Fix error return code in srp_parse_options() | * 6301100179 RDMA/hfi1: Fix error return code in parse_platform_config() | * 339ca035af riscv/mm: add arch hook arch_clear_hugepage_flags | * 20d363dcd6 crypto: omap-sham - Use pm_runtime_resume_and_get() in omap_sham_probe() | * 815b65d714 crypto: amlogic - Remove kcalloc without check | * af71199291 RDMA/nldev: Fix failure to send large messages | * bb895786a4 f2fs: avoid victim selection from previous victim section | * 655e955deb RDMA/nldev: Add checks for nla_nest_start() in fill_stat_counter_qps() | * 1895e908b3 scsi: snic: Fix possible UAF in snic_tgt_create() | * 09a60f908d scsi: fcoe: Fix transport not deattached when fcoe_if_init() fails | * e59da17205 scsi: ipr: Fix WARNING in ipr_init() | * c444f58fda scsi: scsi_debug: Fix possible name leak in sdebug_add_host_helper() | * 4e4968dfb5 scsi: fcoe: Fix possible name leak when device_register() fails | * 0f5006d7d1 scsi: scsi_debug: Fix a warning in resp_report_zones() | * 2432719b1a scsi: scsi_debug: Fix a warning in resp_verify() | * 038359eecc scsi: efct: Fix possible memleak in efct_device_init() | * 23053a7926 scsi: hpsa: Fix possible memory leak in hpsa_add_sas_device() | * 2ab6d5927c scsi: hpsa: Fix error handling in hpsa_add_sas_host() | * 6a92129c8f scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add() | * 26c0f7e1ac padata: Fix list iterator in padata_do_serial() | * 17afa98bcc padata: Always leave BHs disabled when running ->parallel() | * 221afb2a1b crypto: tcrypt - Fix multibuffer skcipher speed test mem leak | * bfe10a1d9f scsi: hpsa: Fix possible memory leak in hpsa_init_one() | * 38ef0c0b09 dt-bindings: visconti-pcie: Fix interrupts array max constraints | * 83aad8111b dt-bindings: imx6q-pcie: Fix clock names for imx6sx and imx8mq | * f64f08b9e6 RDMA/rxe: Fix NULL-ptr-deref in rxe_qp_do_cleanup() when socket create failed | * 35f9cd060e RDMA/hns: fix memory leak in hns_roce_alloc_mr() | * 6d5220a553 crypto: ccree - Make cc_debugfs_global_fini() available for module init function | * 2e9cf3e783 RDMA/hfi: Decrease PCI device reference count in error path | * 7f476d639c PCI: Check for alloc failure in pci_request_irq() | * 49bc2be897 RDMA/hns: Fix ext_sge num error when post send | * 0e6160d79d RDMA/hns: Repacing 'dseg_len' by macros in fill_ext_sge_inl_data() | * e5ea48788e crypto: hisilicon/qm - add missing pci_dev_put() in q_num_set() | * 442caec12f crypto: cryptd - Use request context instead of stack for sub-request | * ab677729fc crypto: ccree - Remove debugfs when platform_driver_register failed | * 0328ca389a scsi: scsi_debug: Fix a warning in resp_write_scat() | * 1ba8ecb664 RDMA/siw: Set defined status for work completion with undefined status | * 6e757005ba RDMA/nldev: Return "-EAGAIN" if the cm_id isn't from expected port | * f981c697b2 RDMA/core: Make sure "ib_port" is valid when access sysfs node | * 13586753ae RDMA/restrack: Release MR restrack when delete | * 6e78ca677f PCI: vmd: Disable MSI remapping after suspend | * 47e31b86ed IB/mad: Don't call to function that might sleep while in atomic context | * f8d8fbd3b6 RDMA/siw: Fix immediate work request flush to completion queue | * 2a26849d79 scsi: qla2xxx: Fix set-but-not-used variable warnings | * 799ed37559 RDMA/irdma: Report the correct link speed | * d40d1b1c61 f2fs: fix to destroy sbi->post_read_wq in error path of f2fs_fill_super() | * 847f725006 f2fs: fix normal discard process | * 865bb7b5a7 f2fs: fix to invalidate dcc->f2fs_issue_discard in error path | * 5f509fa740 apparmor: Fix memleak in alloc_ns() | * 46f3cb83e4 crypto: rockchip - rework by using crypto_engine | * 3ed0548d39 crypto: rockchip - remove non-aligned handling | * 5562009f5f crypto: rockchip - better handle cipher key | * 26f3971356 crypto: rockchip - add fallback for ahash | * 34fe54af3c crypto: rockchip - add fallback for cipher | * 314217591e crypto: rockchip - do not store mode globally | * 853cd97d2b crypto: rockchip - do not do custom power management | * d5100272e4 f2fs: Fix the race condition of resize flag between resizefs | * db72c5dffc PCI: pci-epf-test: Register notifier if only core_init_notifier is enabled | * 26ffeff67b RDMA/core: Fix order of nldev_exit call | * a00a7ac251 PCI: dwc: Fix n_fts[] array overrun | * 10ae636115 apparmor: Use pointer to struct aa_label for lbs_cred | * 8d50ccfbe2 scsi: core: Fix a race between scsi_done() and scsi_timeout() | * 9bdf3a59b3 crypto: nitrox - avoid double free on error path in nitrox_sriov_init() | * 7efc0d39ee crypto: sun8i-ss - use dma_addr instead u32 | * aaef0bdd7a crypto: hisilicon/qm - fix missing destroy qp_idr | * d567776ae2 apparmor: Fix abi check to include v8 abi | * bc9d2cbbdc apparmor: fix lockdep warning when removing a namespace | * 775a37ffa9 apparmor: fix a memleak in multi_transaction_new() | * 09f30f394e net: dsa: tag_8021q: avoid leaking ctx on dsa_tag_8021q_register() error path | * 86664b8652 i40e: Fix the inability to attach XDP program on downed interface | * 0abd337acd stmmac: fix potential division by 0 | * 93a4a04558 Bluetooth: RFCOMM: don't call kfree_skb() under spin_lock_irqsave() | * 8d6bbe5241 Bluetooth: hci_core: don't call kfree_skb() under spin_lock_irqsave() | * 804de4e24a Bluetooth: hci_bcsp: don't call kfree_skb() under spin_lock_irqsave() | * 1030c3aeee Bluetooth: hci_h5: don't call kfree_skb() under spin_lock_irqsave() | * 9fcb5b367e Bluetooth: hci_ll: don't call kfree_skb() under spin_lock_irqsave() | * 14cc94a598 Bluetooth: hci_qca: don't call kfree_skb() under spin_lock_irqsave() | * 06467130d5 Bluetooth: btusb: don't call kfree_skb() under spin_lock_irqsave() | * e52b7d460a Bluetooth: btintel: Fix missing free skb in btintel_setup_combined() | * f7c9de3bcf Bluetooth: MGMT: Fix error report for ADD_EXT_ADV_PARAMS | * 2addf3cb63 sctp: sysctl: make extra pointers netns aware | * 21296a52ca ntb_netdev: Use dev_kfree_skb_any() in interrupt context | * 0fff763f11 net: lan9303: Fix read error execution path | * 882bad40a0 can: tcan4x5x: Fix use of register error status mask | * d50092f662 can: m_can: Call the RAM init directly from m_can_chip_config | * 55064642aa can: tcan4x5x: Remove invalid write in clear_interrupts | * 641eef8766 net: amd-xgbe: Check only the minimum speed for active/passive cables | * 60b35e28dc net: amd-xgbe: Fix logic around active and passive cables | * d436bf39f4 af_unix: call proto_unregister() in the error path in af_unix_init() | * ee9d03bf89 net: amd: lance: don't call dev_kfree_skb() under spin_lock_irqsave() | * 6f1c4c01cc hamradio: don't call dev_kfree_skb() under spin_lock_irqsave() | * eb2c6a6e8f net: ethernet: dnet: don't call dev_kfree_skb() under spin_lock_irqsave() | * ef08e1082c net: emaclite: don't call dev_kfree_skb() under spin_lock_irqsave() | * 2786ef4066 net: apple: bmac: don't call dev_kfree_skb() under spin_lock_irqsave() | * d81314e2dd net: apple: mace: don't call dev_kfree_skb() under spin_lock_irqsave() | * 9a6544343b net/tunnel: wait until all sk_user_data reader finish before releasing the sock | * 998b4e54f5 net: farsync: Fix kmemleak when rmmods farsync | * 71605c6906 ethernet: s2io: don't call dev_kfree_skb() under spin_lock_irqsave() | * ce1b3a41e7 of: overlay: fix null pointer dereferencing in find_dup_cset_node_entry() and find_dup_cset_prop() | * 8399b98935 drivers: net: qlcnic: Fix potential memory leak in qlcnic_sriov_init() | * 96e5089702 net: stmmac: fix possible memory leak in stmmac_dvr_probe() | * ecaf934e44 net: stmmac: selftests: fix potential memleak in stmmac_test_arpoffload() | * e1359bc90a net: defxx: Fix missing err handling in dfx_init() | * c65603abc3 net: vmw_vsock: vmci: Check memcpy_from_msg() | * 9de42116fc clk: socfpga: Fix memory leak in socfpga_gate_init() | * e515881ade bpf: Do not zero-extend kfunc return values | * ce61a877c7 blktrace: Fix output non-blktrace event when blk_classic option enabled | * f2ae56fa0b wifi: brcmfmac: Fix error return code in brcmf_sdio_download_firmware() | * 23060daf37 wifi: rtl8xxxu: Fix the channel width reporting | * 6d0e00334e wifi: rtl8xxxu: Add __packed to struct rtl8723bu_c2h | * e69d380650 spi: spi-gpio: Don't set MOSI as an input if not 3WIRE mode | * 4e501a31af clk: samsung: Fix memory leak in _samsung_clk_register_pll() | * 441c05485c media: coda: Add check for kmalloc | * b99872178e media: coda: Add check for dcoda_iram_alloc | * fbf081ebe2 media: c8sectpfe: Add of_node_put() when breaking out of loop | * 2a7330d820 regulator: qcom-labibb: Fix missing of_node_put() in qcom_labibb_regulator_probe() | * ecf1b317a8 mmc: core: Normalize the error handling branch in sd_read_ext_regs() | * 7fecca429e memstick/ms_block: Add check for alloc_ordered_workqueue | * b77ced3fce memstick: ms_block: Add error handling support for add_disk() | * ae00eb6779 mmc: renesas_sdhi: alway populate SCC pointer | * 88fa6a4e39 mmc: mmci: fix return value check of mmc_add_host() | * 29c3690969 mmc: wbsd: fix return value check of mmc_add_host() | * 0959cc1685 mmc: via-sdmmc: fix return value check of mmc_add_host() | * e0cfe7aa41 mmc: meson-gx: fix return value check of mmc_add_host() | * 62005dfcc3 mmc: omap_hsmmc: fix return value check of mmc_add_host() | * 1925472dec mmc: atmel-mci: fix return value check of mmc_add_host() | * 58c3a8d0f1 mmc: wmt-sdmmc: fix return value check of mmc_add_host() | * afc898019e mmc: vub300: fix return value check of mmc_add_host() | * 6444079767 mmc: toshsd: fix return value check of mmc_add_host() | * df683201c7 mmc: rtsx_usb_sdmmc: fix return value check of mmc_add_host() | * 30dc645461 mmc: rtsx_pci: fix return value check of mmc_add_host() | * bc7e8744f5 mmc: pxamci: fix return value check of mmc_add_host() | * 2d496050de mmc: mxcmmc: fix return value check of mmc_add_host() | * f0502fe86a mmc: moxart: fix return value check of mmc_add_host() | * 29c5b4da41 mmc: alcor: fix return value check of mmc_add_host() | * 52e0d8a8dd riscv, bpf: Emit fixed-length instructions for BPF_PSEUDO_FUNC | * 0de70ed675 NFSv4.x: Fail client initialisation if state manager thread can't run | * 7055c878a0 SUNRPC: Fix missing release socket in rpc_sockname() | * 79d4cd40da xprtrdma: Fix regbuf data not freed in rpcrdma_req_create() | * cba633b24a ALSA: mts64: fix possible null-ptr-defer in snd_mts64_interrupt | * 9018550d96 media: saa7164: fix missing pci_disable_device() | * 2df1e2a6ec ALSA: pcm: Set missing stop_operating flag at undoing trigger start | * a443c55d96 bpf, sockmap: fix race in sock_map_free() | * 5229b90337 hwmon: (jc42) Restore the min/max/critical temperatures on resume | * 785f5c732a hwmon: (jc42) Convert register access and caching to regmap/regcache | * c4c64d8abd regulator: core: fix resource leak in regulator_register() | * 07f82dca11 configfs: fix possible memory leak in configfs_create_dir() | * 21a061772b hsr: Synchronize sequence number updates. | * a82f5b2e08 hsr: Synchronize sending frames to have always incremented outgoing seq nr. | * bb3b40cd6a hsr: Disable netpoll. | * 8e148d981b hsr: Avoid double remove of a node. | * 9387cbf7f7 hsr: Add a rcu-read lock to hsr_forward_skb(). | * a051e10bfc clk: qcom: clk-krait: fix wrong div2 functions | * 8275c7465d clk: qcom: lpass-sc7180: Fix pm_runtime usage | * 91657ec4d0 regulator: core: fix module refcount leak in set_supply() | * 66976a3be9 wifi: mt76: fix coverity overrun-call in mt76_get_txpower() | * a21e3f6f41 wifi: mt76: mt7921: fix reporting of TX AGGR histogram | * c8659018b6 mt76: stop the radar detector after leaving dfs channel | * ae19622e7f wifi: cfg80211: Fix not unregister reg_pdev when load_builtin_regdb_keys() fails | * 2e32f12998 wifi: mac80211: fix memory leak in ieee80211_if_add() | * f58888434d spi: spidev: mask SPI_CS_HIGH in SPI_IOC_RD_MODE | * b6d27d9250 bonding: uninitialized variable in bond_miimon_inspect() | * 7201e4f4f5 bpf, sockmap: Fix data loss caused by using apply_bytes on ingress redirect | * 6105ed3598 bpf, sockmap: Fix missing BPF_F_INGRESS flag when using apply_bytes | * 8786bde11a bpf, sockmap: Fix repeated calls to sock_put() when msg has more_data | * a222f992ce Input: wistron_btns - disable on UML | * d78649c21b netfilter: conntrack: set icmpv6 redirects as RELATED | * 09fe3b1392 ASoC: pcm512x: Fix PM disable depth imbalance in pcm512x_probe | * 8876793e56 drm/amdkfd: Fix memory leakage | * 8f2d2badf8 drm/amdgpu: Fix PCI device refcount leak in amdgpu_atrm_get_bios() | * 88c6e0995c drm/radeon: Fix PCI device refcount leak in radeon_atrm_get_bios() | * 0af0ff9fc0 drm/amd/pm/smu11: BACO is supported when it's in BACO state | * 27e7cf595d ASoC: mediatek: mt8173: Enable IRQ when pdata is ready | * 905e565375 ASoC: mediatek: mt8173: Fix debugfs registration for components | * d8e32f1bf1 wifi: iwlwifi: mvm: fix double free on tx path. | * d0bb44775c ALSA: asihpi: fix missing pci_disable_device() | * f12377abac NFS: Fix an Oops in nfs_d_automount() | * 9a96aff53c NFSv4: Fix a deadlock between nfs4_open_recover_helper() and delegreturn | * c6aca4c7ba NFSv4: Fix a credential leak in _nfs4_discover_trunking() | * 7f6607c884 NFSv4.2: Fix initialisation of struct nfs4_label | * 51899eefd1 NFSv4.2: Fix a memory stomp in decode_attr_security_label | * 34dffc77dd NFSv4.2: Clear FATTR4_WORD2_SECURITY_LABEL when done decoding | * d926611c89 ASoC: mediatek: mtk-btcvsd: Add checks for write and read of mtk_btcvsd_snd | * f243ff92d6 ASoC: dt-bindings: wcd9335: fix reset line polarity in example | * 41d7b8291c drm/tegra: Add missing clk_disable_unprepare() in tegra_dc_probe() | * 2376d7fa08 media: s5p-mfc: Add variant data for MFC v7 hardware for Exynos 3250 SoC | * 210fcf64be media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() | * b223cc15f9 media: dvb-core: Fix ignored return value in dvb_register_frontend() | * 825a8af31d pinctrl: pinconf-generic: add missing of_node_put() | * eedc698d66 clk: imx8mn: fix imx8mn_enet_phy_sels clocks list | * f86a432604 clk: imx8mn: fix imx8mn_sai2_sels clocks list | * 5e98c3a345 clk: imx: replace osc_hdmi with dummy | * 9453e097b8 clk: imx8mn: rename vpu_pll to m7_alt_pll | * bffc80bac8 media: imon: fix a race condition in send_packet() | * 9c9ff35d68 media: vimc: Fix wrong function called when vimc_init() fails | * f849c116d3 ASoC: qcom: Add checks for devm_kcalloc | * 16437645dd drbd: destroy workqueue when drbd device was freed | * cdaf45415c drbd: remove call to memset before free device/resource/connection | * f35981083c mtd: maps: pxa2xx-flash: fix memory leak in probe | * 87c750affd bonding: fix link recovery in mode 2 when updelay is nonzero | * 02105f0b30 drm/amdgpu: fix pci device refcount leak | * 5b0a1f1247 clk: rockchip: Fix memory leak in rockchip_clk_register_pll() | * 27aac5c012 regulator: core: use kfree_const() to free space conditionally | * a69b1faa9b ALSA: seq: fix undefined behavior in bit shift for SNDRV_SEQ_FILTER_USE_EVENT | * 9c0f3617ba ALSA: pcm: fix undefined behavior in bit shift for SNDRV_PCM_RATE_KNOT | * 6159424e2d pinctrl: k210: call of_node_put() | * 18a973fcb1 HID: hid-sensor-custom: set fixed size for custom attributes | * 0fc4280dbe bpf: Move skb->len == 0 checks into __bpf_redirect | * 8dbcb4c284 mtd: spi-nor: Fix the number of bytes for the dummy cycles | * 58e1a0ef52 mtd: spi-nor: hide jedec_id sysfs attribute if not present | * 348d95e39f inet: add READ_ONCE(sk->sk_bound_dev_if) in inet_csk_bind_conflict() | * 4451bef1a3 media: videobuf-dma-contig: use dma_mmap_coherent | * b2781a8626 media: platform: exynos4-is: Fix error handling in fimc_md_init() | * 7cf71bbe5d media: solo6x10: fix possible memory leak in solo_sysfs_init() | * c290aa527f media: vidtv: Fix use-after-free in vidtv_bridge_dvb_init() | * 648f303102 Input: elants_i2c - properly handle the reset GPIO when power is off | * e0d3e46ac6 mtd: lpddr2_nvm: Fix possible null-ptr-deref | * ab4e42f519 drm/msm/a6xx: Fix speed-bin detection vs probe-defer | * fea795f7c7 wifi: ath10k: Fix return value in ath10k_pci_init() | * 77482c4dd4 block: clear ->slave_dir when dropping the main slave_dir reference | * 62251948e2 ima: Fix misuse of dereference of pointer in template_desc_init_fields() | * 29d6c69ba4 integrity: Fix memory leakage in keyring allocation error path | * 8e6df95717 drm/fourcc: Fix vsub/hsub for Q410 and Q401 | * ec1727f89e drm/fourcc: Add packed 10bit YUV 4:2:0 format | * f72608b8dd regulator: qcom-rpmh: Fix PMR735a S3 regulator spec | * 63d011ad05 nvme: return err on nvme_init_non_mdts_limits fail | * f289a38df0 amdgpu/pm: prevent array underflow in vega20_odn_edit_dpm_table() | * cda1895f3b regulator: core: fix unbalanced of node refcount in regulator_dev_lookup() | * 1a5aaa5736 nvmet: only allocate a single slab for bvecs | * cb3033a432 libbpf: Fix uninitialized warning in btf_dump_dump_type_data | * 83baa50939 ASoC: pxa: fix null-pointer dereference in filter() | * a06ba0f7f8 drm/mediatek: Modify dpi power on/off sequence. | * 6d25bc6370 drm/radeon: Add the missed acpi_put_table() to fix memory leak | * 4cf11e9d31 bfq: fix waker_bfqq inconsistency crash | * 55e822212e rxrpc: Fix ack.bufferSize to be 0 when generating an ack | * 5ef8bf0df1 net, proc: Provide PROC_FS=n fallback for proc_create_net_single_write() | * d1c44928bb media: camss: Clean up received buffers on failed start of streaming | * 3b4b4df3f8 wifi: rsi: Fix handling of 802.3 EAPOL frames sent via control port | * 9e1440c858 Input: joystick - fix Kconfig warning for JOYSTICK_ADC | * 71212d7318 mtd: Fix device name leak when register device failed in add_mtd_device() | * 106311677b clk: qcom: gcc-sm8250: Use retention mode for USB GDSCs | * 322c7415e7 bpf: propagate precision across all frames, not just the last one | * 07c286c10a bpf: Check the other end of slot_type for STACK_SPILL | * fdbc363bc1 bpf: propagate precision in ALU/ALU64 operations | * b29e46610c media: platform: exynos4-is: fix return value check in fimc_md_probe() | * ab54081a28 media: vivid: fix compose size exceed boundary | * 3c58c83c6f bpf: Fix slot type check in check_stack_write_var_off | * cffa75198c drm/msm/hdmi: use devres helper for runtime PM management | * 58d002b72e drm/msm/hdmi: drop unused GPIO support | * 2d4bc60693 ima: Handle -ESTALE returned by ima_filter_rule_match() | * 13fc167e16 drm/panel/panel-sitronix-st7701: Remove panel on DSI attach failure | * c20672cfa0 spi: Update reference to struct spi_controller | * 2858d038c5 clk: renesas: r9a06g032: Repair grave increment error | * f6ed73db39 drm/rockchip: lvds: fix PM usage counter unbalance in poweron | * 13fab6322b can: kvaser_usb: Compare requested bittiming parameters with actual parameters in do_set_{,data}_bittiming | * 4e55d61e87 can: kvaser_usb: Add struct kvaser_usb_busparams | * fcfd4df200 can: kvaser_usb_leaf: Fix bogus restart events | * 51f07da38b can: kvaser_usb_leaf: Fix wrong CAN state after stopping | * 647c26887b can: kvaser_usb_leaf: Fix improved state not being reported | * 9676d65a4a can: kvaser_usb: make use of units.h in assignment of frequency | * c761108562 can: kvaser_usb_leaf: Set Warning state even without bus errors | * a60bf9d814 can: kvaser_usb: kvaser_usb_leaf: Handle CMD_ERROR_EVENT | * 8aae6bddc1 can: kvaser_usb: kvaser_usb_leaf: Rename {leaf,usbcan}_cmd_error_event to {leaf,usbcan}_cmd_can_error_event | * 972270be24 can: kvaser_usb: kvaser_usb_leaf: Get capabilities from device | * e9e0d9945f can: kvaser_usb: do not increase tx statistics when sending error message frames | * e39bce64e5 libbpf: Btf dedup identical struct test needs check for nested structs/arrays | * d4419f93e2 media: exynos4-is: don't rely on the v4l2_async_subdev internals | * 8741792d82 soreuseport: Fix socket selection for SO_INCOMING_CPU. | * 094f56192c venus: pm_helpers: Fix error check in vcodec_domains_get() | * 3c793a9ad9 media: i2c: ad5820: Fix error path | * 07611f9e44 media: adv748x: afe: Select input port when initializing AFE | * aa81257dbf media: coda: jpeg: Add check for kmalloc | * 9a402adc9f media: v4l2-ctrls: Fix off-by-one error in integer menu control check | * 1caed03305 drm/amdgpu/powerplay/psm: Fix memory leak in power state init | * f66a877083 ipmi: kcs: Poll OBF briefly to reduce OBE latency | * 983320199e ata: libata: fix NCQ autosense logic | * a9caf71aeb ata: add/use ata_taskfile::{error|status} fields | * 3483c3fb48 ata: libata: move ata_{port,link,dev}_dbg to standard pr_XXX() macros | * 6706135577 libbpf: Fix null-pointer dereference in find_prog_by_sec_insn() | * a733bf1019 libbpf: Fix use-after-free in btf_dump_name_dups | * b5ec2a04fe drm/bridge: adv7533: remove dynamic lane switching from adv7533 bridge | * 6d40a49d05 wifi: rtl8xxxu: Fix reading the vendor of combo chips | * 355f16f756 wifi: ath9k: hif_usb: Fix use-after-free in ath9k_hif_usb_reg_in_cb() | * d856f7574b wifi: ath9k: hif_usb: fix memory leak of urbs in ath9k_hif_usb_dealloc_tx_urbs() | * 12229a2523 platform/mellanox: mlxbf-pmc: Fix event typo | * a0d93aac54 rapidio: devices: fix missing put_device in mport_cdev_open | * 7af9cb8cbb hfs: Fix OOB Write in hfs_asc2mac | * 90962b3b1c relay: fix type mismatch when allocating memory in relay_create_buf() | * 0d60b11f8f eventfd: change int to __u64 in eventfd_signal() ifndef CONFIG_EVENTFD | * 2f5cc7fd73 rapidio: fix possible UAF when kfifo_alloc() fails | * 337b68da68 fs: sysv: Fix sysv_nblocks() returns wrong value | * 95d42a8d3d lockd: set other missing fields when unlocking files | * 318229b4d3 MIPS: OCTEON: warn only once if deprecated link status is being used | * 5e6d37a93a MIPS: BCM63xx: Add check for NULL for clk in clk_enable | * 50af0ba3e1 platform/x86: intel_scu_ipc: fix possible name leak in __intel_scu_ipc_register() | * 3cf8150135 platform/x86: mxm-wmi: fix memleak in mxm_wmi_call_mx[ds|mx]() | * 0ceadb5a3e platform/chrome: cros_ec_typec: zero out stale pointers | * 49c98b5688 platform/chrome: cros_ec_typec: Cleanup switch handle return paths | * b55ef8508a PM: runtime: Do not call __rpm_callback() from rpm_idle() | * 0bf874183b xen/privcmd: Fix a possible warning in privcmd_ioctl_mmap_resource() | * 70966d6b0f x86/xen: Fix memory leak in xen_init_lock_cpu() | * 23aef94eea x86/xen: Fix memory leak in xen_smp_intr_init{_pv}() | * 03ab1c5c2f uprobes/x86: Allow to probe a NOP instruction with 0x66 prefix | * 6fde666278 ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage() | * 9cabd5f4f1 clocksource/drivers/timer-ti-dm: Fix missing clk_disable_unprepare in dmtimer_systimer_init_clock() | * b73c76c3c4 cpu/hotplug: Do not bail-out in DYING/STARTING sections | * 6eb1802184 cpu/hotplug: Make target_store() a nop when target == state | * cd130e2676 futex: Resend potentially swallowed owner death notification | * fd8a10d44c futex: Move to kernel/futex/ | * 156144bd18 mips: ralink: mt7621: do not use kzalloc too early | * 186d59bb6a mips: ralink: mt7621: soc queries and tests as functions | * 8348da01e5 mips: ralink: mt7621: define MT7621_SYSC_BASE with __iomem | * 0f8e6fe09c clocksource/drivers/sh_cmt: Access registers according to spec | * a47de2fd3f rapidio: rio: fix possible name leak in rio_register_mport() | * ec3f04f74f rapidio: fix possible name leaks when rio_add_device() fails | * 4662d8e6ab debugfs: fix error when writing negative value to atomic_t debugfs file | * 7e8e8cc136 lib/notifier-error-inject: fix error when writing -errno to debugfs file | * 39b5e6130b libfs: add DEFINE_SIMPLE_ATTRIBUTE_SIGNED for signed value | * 19c202e6e5 cpufreq: amd_freq_sensitivity: Add missing pci_dev_put() | * 93e3c80338 genirq/irqdesc: Don't try to remove non-existing sysfs files | * 435cc7d18c nfsd: don't call nfsd_file_put from client states seqfile display | * 5030d4d2bf NFSD: Finish converting the NFSv2 GETACL result encoder | * e498675e06 SUNRPC: Return true/false (not 1/0) from bool functions | * 3e255dc210 EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() | * 740efb64ca irqchip/wpcm450: Fix memory leak in wpcm450_aic_of_init() | * 77b99b483f irqchip: gic-pm: Use pm_runtime_resume_and_get() in gic_probe() | * 5139cbc0c6 thermal: core: fix some possible name leaks in error paths | * cab345f9d5 platform/chrome: cros_usbpd_notify: Fix error handling in cros_usbpd_notify_init() | * 0358bc7cc2 perf/x86/intel/uncore: Fix reference count leak in __uncore_imc_init_box() | * 433bd587dc perf/x86/intel/uncore: Fix reference count leak in snr_uncore_mmio_map() | * 3485f19751 perf/x86/intel/uncore: Fix reference count leak in hswep_has_limit_sbox() | * 0021ef7dc6 perf/x86/intel/uncore: Fix reference count leak in sad_cfg_iio_topology() | * c12b314bb2 PNP: fix name memory leak in pnp_alloc_dev() | * f1c7a6af71 selftests/efivarfs: Add checking of the test return value | * 46be3ee1ca MIPS: vpe-cmp: fix possible memory leak while module exiting | * e820a8192f MIPS: vpe-mt: fix possible memory leak while module exiting | * 61d68cf2ba ocfs2: fix memory leak in ocfs2_stack_glue_init() | * e83b47580a lib/fonts: fix undefined behavior in bit shift for get_default_font | * 0df7d9ab6b proc: fixup uptime selftest | * 07b8659b8e timerqueue: Use rb_entry_safe() in timerqueue_getnext() | * 413b18866b platform/x86: huawei-wmi: fix return value calculation | * 4b46932283 lib/debugobjects: fix stat count and optimize debug_objects_mem_init | * f790dfe816 perf: Fix possible memleak in pmu_dev_alloc() | * 418d21c0df selftests/ftrace: event_triggers: wait longer for test_event_enable | * 4ea765b106 cpufreq: qcom-hw: Fix memory leak in qcom_cpufreq_hw_read_lut() | * c52d9c25d9 fs: don't audit the capability check in simple_xattr_list() | * e4d0d13b46 PM: hibernate: Fix mistake in kerneldoc comment | * 1f62b8e50d x86/sgx: Reduce delay and interference of enclave release | * f5b88170f0 alpha: fix syscall entry in !AUDUT_SYSCALL case | * a819ba80b9 alpha: fix TIF_NOTIFY_SIGNAL handling | * eb2a732ef4 cpuidle: dt: Return the correct numbers of parsed idle states | * 3af4f5cb8a sched/uclamp: Make asym_fits_capacity() use util_fits_cpu() | * 23cb580e0c sched/core: Introduce sched_asym_cpucap_active() | * 41c2dba388 sched/fair: Removed useless update of p->recent_used_cpu | * 55ffeab089 sched/uclamp: Make select_idle_capacity() use util_fits_cpu() | * 4639bfbb83 sched/uclamp: Make task_fits_capacity() use util_fits_cpu() | * 309e50cbfe sched/uclamp: Fix relationship between uclamp and migration margin | * 54a766e196 sched/fair: Cleanup task_util and capacity type | * 26bffaf678 ovl: remove privs in ovl_fallocate() | * 5dc34f9aaa ovl: remove privs in ovl_copyfile() | * 9636e70ee2 ovl: use ovl_copy_{real,upper}attr() wrappers | * a54843833c ovl: store lower path in ovl_inode | * 163c5bbe7d tpm/tpm_crb: Fix error message in __crb_relinquish_locality() | * fe880e9df9 tpm/tpm_ftpm_tee: Fix error handling in ftpm_mod_init() | * ebc73c4f26 pstore: Avoid kcore oops by vmap()ing with VM_IOREMAP | * d4dcde11bf ARM: mmp: fix timer_read delay | * 95916147dc pstore/ram: Fix error return code in ramoops_probe() | * a31a647a3d seccomp: Move copy_seccomp() to no failure path. | * b8b76b8da6 arm64: dts: armada-3720-turris-mox: Add missing interrupt for RTC | * 820a5ccca7 ARM: dts: turris-omnia: Add switch port 6 node | * b311f8e9f5 ARM: dts: turris-omnia: Add ethernet aliases | * 48ebdd06c9 ARM: dts: armada-39x: Fix assigned-addresses for every PCIe Root Port | * f27dd04e44 ARM: dts: armada-38x: Fix assigned-addresses for every PCIe Root Port | * 1e53c63da8 ARM: dts: armada-375: Fix assigned-addresses for every PCIe Root Port | * 3af1a73e9e ARM: dts: armada-xp: Fix assigned-addresses for every PCIe Root Port | * e4ed8133c4 ARM: dts: armada-370: Fix assigned-addresses for every PCIe Root Port | * b335b6344e ARM: dts: dove: Fix assigned-addresses for every PCIe Root Port | * 5b3415e683 arm64: dts: mediatek: mt6797: Fix 26M oscillator unit name | * 93f5e66496 arm64: dts: mediatek: pumpkin-common: Fix devicetree warnings | * debd938e21 arm64: dts: mt2712-evb: Fix usb vbus regulators unit names | * b2c6397754 arm64: dts: mt2712-evb: Fix vproc fixed regulators unit names | * 96c972f835 arm64: dts: mt2712e: Fix unit address for pinctrl node | * 2cd1391c28 arm64: dts: mt2712e: Fix unit_address_vs_reg warning for oscillators | * 39877a3636 arm64: dts: mt6779: Fix devicetree build warnings | * af431ce47e ARM: dts: nuvoton: Remove bogus unit addresses from fixed-partition nodes | * 0a616049ec arm64: dts: ti: k3-j721e-main: Drop dma-coherent in crypto node | * 22a740824a arm64: dts: ti: k3-am65-main: Drop dma-coherent in crypto node | * b131304fe7 perf/smmuv3: Fix hotplug callback leak in arm_smmu_pmu_init() | * b99fbe8d94 perf/arm_dmc620: Fix hotplug callback leak in dmc620_pmu_init() | * 9285b623bb perf: arm_dsu: Fix hotplug callback leak in dsu_pmu_init() | * e6318a7e19 arm64: mm: kfence: only handle translation faults | * 46ddfb9d1e arm64: Treat ESR_ELx as a 64-bit register | * 681e340128 soc: ti: smartreflex: Fix PM disable depth imbalance in omap_sr_probe | * 6eca7a2535 soc: ti: knav_qmss_queue: Fix PM disable depth imbalance in knav_queue_probe | * 972f8fc065 soc: ti: knav_qmss_queue: Use pm_runtime_resume_and_get instead of pm_runtime_get_sync | * fe53048f2a arm: dts: spear600: Fix clcd interrupt | * 75baeec464 arm64: dts: qcom: sm6125: fix SDHCI CQE reg names | * 0f9ac04191 soc: qcom: apr: Add check for idr_alloc and of_property_read_string_index | * 6855dd02c5 soc: qcom: apr: make code more reuseable | * c9fb81a835 arm64: dts: qcom: sm8250: drop bogus DP PHY clock | * 53ffa57464 arm64: dts: qcom: sm8350: fix UFS PHY registers | * d5a6bbd7a2 arm64: dts: qcom: sm8250: fix UFS PHY registers | * 3a52ff845f arm64: dts: qcom: sm8150: fix UFS PHY registers | * 800f8165e0 arm64: dts: qcom: Correct QMP PHY child node name | * ee136f275b soc: qcom: llcc: make irq truly optional | * aa7ffd4174 arm64: dts: qcom: sm8250: correct LPASS pin pull down | * f94bacc616 arm64: dts: qcom: pm660: Use unique ADC5_VCOIN address in node name | * d5bf119781 drivers: soc: ti: knav_qmss_queue: Mark knav_acc_firmwares as static | * 4707d5daf8 ARM: dts: stm32: Fix AV96 WLAN regulator gpio property | * 33647d7a46 ARM: dts: stm32: Drop stm32mp15xc.dtsi from Avenger96 | * 9f271a8660 objtool, kcsan: Add volatile read/write instrumentation to whitelist | * 51fe2dcba8 arm64: dts: qcom: msm8916: Drop MSS fallback compatible | * a9fff3524f arm64: dts: qcom: sdm845-cheza: fix AP suspend pin bias | * 6487f48ea3 arm64: dts: qcom: sdm630: fix UART1 pin bias | * 6c0c9c5458 ARM: dts: qcom: apq8064: fix coresight compatible | * 0f9b088d68 arm64: dts: qcom: msm8996: fix GPU OPP table | * 270683fc7b arm64: dts: qcom: msm8996: fix supported-hw in cpufreq OPP tables | * 5c5a628914 arm64: dts: qcom: msm8996: Add MSM8996 Pro support | * 3f14048ee4 arm64: dts: qcom: sm8250-sony-xperia-edo: fix touchscreen bias-disable | * 89f79f8d7f arm64: dts: qcom: ipq6018-cp01-c1: use BLSPI1 pins | * 9db5992e72 usb: musb: remove extra check in musb_gadget_vbus_draw | * adc063a491 drm/amd/display: Manually adjust strobe for DCN303 * | 50e12445ab Merge 5.15.85 into android13-5.15-lts |\| | * 5827ddaf45 Linux 5.15.85 | * e22dbadac8 net: loopback: use NET_NAME_PREDICTABLE for name_assign_type | * 314e7a7836 selftests: net: Use "grep -E" instead of "egrep" | * 19a7814396 Bluetooth: L2CAP: Fix u8 overflow | * f692abf139 HID: uclogic: Add HID_QUIRK_HIDINPUT_FORCE quirk | * 5325a884e2 usb: dwc3: pci: Update PCIe device ID for USB3 controller on CPU sub-system for Raptor Lake | * 367e1e3399 igb: Initialize mailbox message for VF reset | * a301742b35 xhci: Apply XHCI_RESET_TO_DEFAULT quirk to ADL-N | * 5e959f0c4c USB: serial: f81534: fix division by zero on line-speed change | * 68fbe268d2 USB: serial: f81232: fix division by zero on line-speed change | * 3ec7f24b8b USB: serial: cp210x: add Kamstrup RF sniffer PIDs | * 2b092fab23 USB: serial: option: add Quectel EM05-G modem | * 6b41a35b41 usb: gadget: uvc: Prevent buffer overflow in setup handler | * 828112571c udf: Fix extending file within last block | * df1a2596c7 udf: Do not bother looking for prealloc extents if i_lenExtents matches i_size | * 63dbbd8f14 udf: Fix preallocation discarding at indirect extent boundary | * 79a97f08ae udf: Discard preallocation before extending file with a hole * | fb8d543b61 Merge 5.15.84 into android13-5.15-lts |\| | * d68f50bfb0 Linux 5.15.84 | * 972707bae3 net: fec: properly guard irq coalesce setup | * 289721fe09 ASoC: ops: Correct bounds check for second channel on SX controls | * de0866b94a nvme-pci: clear the prp2 field when not used | * 8bffa95ac1 perf: Fix perf_pending_task() UaF | * 825bd2af42 ASoC: cs42l51: Correct PGA Volume minimum value | * 91582b3a1a net: fec: don't reset irq coalesce settings to defaults on "ip link up" | * c772dab247 can: mcba_usb: Fix termination command argument | * aa822de7de can: sja1000: fix size of OCR_MODE_MASK define | * 09e08740d7 pinctrl: meditatek: Startup with the IRQs disabled | * 172a95026f libbpf: Use page size as max_entries when probing ring buffer map | * cf611d7867 ASoC: ops: Check bounds for second channel in snd_soc_put_volsw_sx() | * a74b88e170 ASoC: fsl_micfil: explicitly clear CHnF flags | * afac1e7d78 ASoC: fsl_micfil: explicitly clear software reset bit | * 9d933af8fe nfp: fix use-after-free in area_cache_get() | * e1a4f5880d vfs: fix copy_file_range() averts filesystem freeze protection | * 86e28ed25b x86/vdso: Conditionally export __vdso_sgx_enter_enclave() * | bfbd2237c1 Merge 5.15.83 into android13-5.15-lts |\| | * fd6d66840b Linux 5.15.83 | * f895511de9 io_uring: Fix a null-ptr-deref in io_tctx_exit_cb() | * f435c66d23 io_uring: move to separate directory | * d9e1e5d8a7 block: move CONFIG_BLOCK guard to top Makefile | * e5c0bc4ff5 can: esd_usb: Allow REC and TEC to return to zero | * db6343a5b0 s390/qeth: fix use-after-free in hsci | * a56c1cebe4 s390/qeth: fix various format strings | * a6dba316c9 macsec: add missing attribute validation for offload | * 40500f1f47 net: mvneta: Fix an out of bounds check | * b9274dbe39 net: thunderbolt: fix memory leak in tbnet_open() | * 7390c70bd4 ipv6: avoid use-after-free in ip6_fragment() | * 1beb475892 net: plip: don't call kfree_skb/dev_kfree_skb() under spin_lock_irq() | * b08412a9cf net: phy: mxl-gpy: fix version reporting | * dec5abd91a xen/netback: fix build warning | * 54d830e242 dpaa2-switch: Fix memory leak in dpaa2_switch_acl_entry_add() and dpaa2_switch_acl_entry_remove() | * c7adcbd0fd ethernet: aeroflex: fix potential skb leak in greth_init_rings() | * d962d42d63 tipc: call tipc_lxc_xmit without holding node_read_lock | * f3b5dda26c net: dsa: sja1105: fix memory leak in sja1105_setup_devlink_regions() | * 5dab6fa068 ipv4: Fix incorrect route flushing when table ID 0 is used | * ac566bd577 ipv4: Fix incorrect route flushing when source address is deleted | * af4ccae4b7 tipc: Fix potential OOB in tipc_link_proto_rcv() | * b8ce0e6f9f net: hisilicon: Fix potential use-after-free in hix5hd2_rx() | * 1685417774 net: mdio: fix unbalanced fwnode reference count in mdio_device_release() | * 6f4798ac9c net: hisilicon: Fix potential use-after-free in hisi_femac_rx() | * 114e65a221 net: thunderx: Fix missing destroy_workqueue of nicvf_rx_mode_wq | * 51c0494575 net: microchip: sparx5: Fix missing destroy_workqueue of mact_queue | * 99eec0a766 ip_gre: do not report erspan version on GRE interface | * 2891957853 net: stmmac: fix "snps,axi-config" node property parsing | * 5cb8f1a784 gpio/rockchip: fix refcount leak in rockchip_gpiolib_register() | * b8c2f0392d nvme initialize core quirks before calling nvme_init_subsystem | * 908b2da426 NFC: nci: Bounds check struct nfc_target arrays | * d841cc1563 i40e: Disallow ip4 and ip6 l4_4_bytes | * 625a13850b i40e: Fix for VF MAC address 0 | * 5538794dbd i40e: Fix not setting default xps_cpus after reset | * a6b30598fe net: mvneta: Prevent out of bounds read in mvneta_config_rss() | * e6e897d4fe xen-netfront: Fix NULL sring after live migration | * eefd8953a7 octeontx2-pf: Fix potential memory leak in otx2_init_tc() | * f88acaed07 net: mdiobus: fix double put fwnode in the error path | * cc62d76928 net: mdiobus: fwnode_mdiobus_register_phy() rework error handling | * ea113b570e net: encx24j600: Fix invalid logic in reading of MISTAT register | * 8aae746d06 net: encx24j600: Add parentheses to fix precedence | * a110287ef4 mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add() | * e046421bed selftests: rtnetlink: correct xfrm policy rule in kci_test_ipsec_offload | * 4fa8988a36 net: dsa: sja1105: Check return value | * b35be171df net: dsa: hellcreek: Check return value | * a4c342e645 net: dsa: ksz: Check return value | * edf7284a98 Bluetooth: Fix not cleanup led when bt_init fails | * 3322193949 Bluetooth: 6LoWPAN: add missing hci_dev_put() in get_l2cap_conn() | * 6c88c764e0 vmxnet3: use correct intrConf reference when using extended queues | * 5ad0d85757 vmxnet3: correctly report encapsulated LRO packet | * 5c014eb0ed af_unix: Get user_ns from in_skb in unix_diag_get_exact(). | * 807a01a329 drm: bridge: dw_hdmi: fix preference of RGB modes over YUV420 | * eb96fd3983 net: broadcom: Add PTP_1588_CLOCK_OPTIONAL dependency for BCMGENET under ARCH_BCM2835 | * 16eb678bca igb: Allocate MSI-X vector when testing | * 34c6367c94 e1000e: Fix TX dispatch condition | * 4271515f18 gpio: amd8111: Fix PCI device reference count leak | * d57b60e9b3 drm/bridge: ti-sn65dsi86: Fix output polarity setting bug | * f8b2965601 netfilter: ctnetlink: fix compilation warning after data race fixes in ct mark | * 246bcd05ba ca8210: Fix crash by zero initializing data | * 80dad8df5f ieee802154: cc2520: Fix error return code in cc2520_hw_init() | * dd9dcfb85c drm/vmwgfx: Fix race issue calling pin_user_pages | * 7b09ba9036 netfilter: nft_set_pipapo: Actually validate intervals in fields after the first one | * 6daaa84b62 gpiolib: fix memory leak in gpiochip_setup_dev() | * 1a1075d371 gpiolib: check the 'ngpios' property in core gpiolib code | * 70c5515c1c gpiolib: improve coding style for local variables | * 3b714f25fc clk: Fix pointer casting to prevent oops in devm_clk_release() | * c142cba37d can: af_can: fix NULL pointer dereference in can_rcv_filter | * 104bb1f67e HID: ite: Enable QUIRK_TOUCHPAD_ON_OFF_REPORT on Acer Aspire Switch V 10 | * f755d11c55 HID: core: fix shift-out-of-bounds in hid_report_raw_event | * 2d4b310c32 HID: hid-lg4ff: Add check for empty lbuf | * 5e8021ae08 HID: usbhid: Add ALWAYS_POLL quirk for some mice | * 5e88c6f4aa net: dsa: sja1105: avoid out of bounds access in sja1105_init_l2_policing() | * 1074fefce9 drm/shmem-helper: Avoid vm_open error paths | * 83e3da8bb9 drm/shmem-helper: Remove errant put in error path | * 249011f4c3 drm/amdgpu/sdma_v4_0: turn off SDMA ring buffer in the s2idle suspend | * 1e4fe9a154 drm/vmwgfx: Don't use screen objects when SEV is active | * f6550976fe KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field | * fe50a9bbeb net: mana: Fix race on per-CQ variable napi work_done | * a49894a5ac Bluetooth: Fix crash when replugging CSR fake controllers | * 1dee2b5047 Bluetooth: btusb: Add debug message for CSR controllers | * 3ac29732a2 mm/gup: fix gup_pud_range() for dax | * aad8bbd17a memcg: fix possible use-after-free in memcg_write_event_control() | * 6fb8bc29bf media: v4l2-dv-timings.c: fix too strict blanking sanity checks | * a4c575541e Revert "ARM: dts: imx7: Fix NAND controller size-cells" | * 28abc11459 soundwire: intel: Initialize clock stop timeout | * 22d800b378 media: videobuf2-core: take mmap_lock in vb2_get_unmapped_area() | * 5d0fa6fc88 xen/netback: don't call kfree_skb() with interrupts disabled | * 4422241cef xen/netback: do some code cleanup | * 0fe29bd925 xen/netback: Ensure protocol headers don't fall in the non-linear area | * f01677be31 drm/bridge: anx7625: Fix edid_read break case in sp_tx_edid_read() | * ee2536830b cifs: fix use-after-free caused by invalid pointer `hostname` | * dc62f05f66 rtc: cmos: avoid UIP when reading alarm time | * 48ea4199af rtc: cmos: avoid UIP when writing alarm time | * 3f52afc6ed rtc: mc146818-lib: extract mc146818_avoid_UIP | * 1a3f8c6cd2 mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths | * 79ad784c9d mm/khugepaged: fix GUP-fast interaction by sending IPI | * d15cd6de01 mm/khugepaged: take the right locks for page table retraction | * 26f084e554 net: usb: qmi_wwan: add u-blox 0x1342 composition | * 029a7f1c5d 9p/xen: check logical size for buffer size | * b398832893 usb: dwc3: gadget: Disable GUSB2PHYCFG.SUSPHY for End Transfer | * e70a572440 fbcon: Use kzalloc() in fbcon_prepare_logo() | * fd3768597d regulator: twl6030: fix get status of twl6032 regulators | * 9f74b9aa8d ASoC: soc-pcm: Add NULL check in BE reparenting | * dae93f4168 btrfs: send: avoid unaligned encoded writes when attempting to clone range | * f54e1edf57 selftests/net: Find nettest in current directory | * fccd454129 ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event | * 542a563bb7 regulator: slg51000: Wait after asserting CS pin | * 3d1b5fde36 9p/fd: Use P9_HDRSZ for header size | * fe2d44e86e ASoC: rt711-sdca: fix the latency time of clock stop prepare state machine transitions | * e945f3d809 ARM: dts: rockchip: disable arm_global_timer on rk3066 and rk3188 | * c3b818c91a spi: mediatek: Fix DEVAPC Violation at KO Remove | * d9f0107be1 ASoC: wm8962: Wait for updated value of WM8962_CLOCKING1 register | * 7ae0262748 ARM: 9266/1: mm: fix no-MMU ZERO_PAGE() implementation | * d81c62e312 ARM: 9251/1: perf: Fix stacktraces for tracepoint events in THUMB2 kernels | * 66717ad03b fs: use acquire ordering in __fget_light() | * 1222e2364a ARM: dts: rockchip: rk3188: fix lcdc1-rgb24 node name | * 996fb29b06 arm64: dts: rockchip: fix ir-receiver node names | * 752138ef89 ARM: dts: rockchip: fix ir-receiver node names | * 8045971e40 arm: dts: rockchip: remove clock-frequency from rtc | * 5e9fb8013a arm: dts: rockchip: fix node name for hym8563 rtc | * 2ed7137e91 arm64: dts: rockchip: keep I2S1 disabled for GPIO function on ROCK Pi 4 series | * 5a1122e1a8 mmc: mtk-sd: Fix missing clk_disable_unprepare in msdc_of_clock_parse() | * 282f52c954 clk: Provide new devm_clk helpers for prepared and enabled clocks | * eb94a7a20f clk: generalize devm_clk_get() a bit * | 20de784185 ANDROID: fix up abi change in struct sdhci_host * | ebd1f8013d ANDROID: gki_defconfig: add CONFIG_FUNCTION_ERROR_INJECTION * | 112ff45bb5 Merge 5.15.82 into android13-5.15-lts |\| | * d979030136 Linux 5.15.82 | * 48642f9431 proc: proc_skip_spaces() shouldn't think it is working on C strings | * 3eb9213f66 proc: avoid integer type confusion in get_proc_long | * 4a4073a2e2 ipc/sem: Fix dangling sem_array access in semtimedop race | * 53b9b1201e Input: raydium_ts_i2c - fix memory leak in raydium_i2c_send() | * 571b6bbbf5 char: tpm: Protect tpm_pm_suspend with locks | * f39891cfe7 Revert "clocksource/drivers/riscv: Events are stopped during CPU suspend" | * a759057af7 ACPI: HMAT: Fix initiator registration for single-initiator systems | * da8a794d71 ACPI: HMAT: remove unnecessary variable initialization | * 2d16161a2c i2c: imx: Only DMA messages with I2C_M_DMA_SAFE flag set | * 950a05cb15 i2c: npcm7xx: Fix error handling in npcm_i2c_init() | * db3f8da033 serial: stm32: Deassert Transmit Enable on ->rs485_config() | * 45f628f4fd serial: stm32: Use TC interrupt to deassert GPIO RTS in RS485 mode | * c60eae5b1d serial: stm32: Factor out GPIO RTS toggling into separate function | * 041f8dc882 ipv4: Fix route deletion when nexthop info is not specified | * 25174d91e4 ipv4: Handle attempt to delete multipath route when fib_info contains an nh reference | * a0ad247e55 selftests: net: fix nexthop warning cleanup double ip typo | * 532847b69c selftests: net: add delete nexthop route warning test | * e078355881 Kconfig.debug: provide a little extra FRAME_WARN leeway when KASAN is enabled | * 723fa02e0e parisc: Increase FRAME_WARN to 2048 bytes on parisc | * b951ab4b35 mm: migrate: fix THP's mapcount on isolation | * c5eda6029c mm: __isolate_lru_page_prepare() in isolate_migratepages_block() | * bdb613ef17 iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init() | * b6eea8b2e8 iommu/vt-d: Fix PCI device refcount leak in has_external_pci() | * 787d81d4eb nvme: fix SRCU protection of nvme_ns_head list | * 12f237200c riscv: kexec: Fixup irq controller broken in kexec crash path | * ac00301adb riscv: fix race when vmap stack overflow | * fa7a7d185e riscv: Sync efi page table's kernel mappings before switching | * d86d698925 pinctrl: single: Fix potential division by zero | * 98b15c7066 ASoC: ops: Fix bounds check for _sx controls | * f88a6977f8 KVM: x86/mmu: Fix race condition in direct_page_fault | * df4b177b48 io_uring/poll: fix poll_refs race with cancelation | * 4b702b7d11 io_uring: make poll refs more robust | * 1d58849ac2 io_uring: cmpxchg for poll arm refs release | * cd1981a8c3 io_uring: fix tw losing poll events | * 62321dc7b0 io_uring: update res mask in io_poll_check_events | * 417d5ea6e7 tracing: Free buffers when a used dynamic event is removed | * 52fc245d15 tracing: Fix race where histograms can be called before the event | * cb2b0612cd tracing/osnoise: Fix duration type | * 615a996ff3 drm/i915: Never return 0 if not all requests retired | * 01a2b25ef2 drm/i915: Fix negative value passed as remaining time | * ff1591ba33 drm/amdgpu: enable Vangogh VCN indirect sram mode | * ac2d7fa908 drm/amdgpu: temporarily disable broken Clang builds due to blown stack-frame | * 57ee7bc4c6 mmc: sdhci: Fix voltage switch delay | * bb8f809514 mmc: sdhci-sprd: Fix no reset data and command after voltage switch | * 4c7681c1a5 mmc: sdhci-esdhc-imx: correct CQHCI exit halt state check | * 01dbe4db59 mmc: core: Fix ambiguous TRIM and DISCARD arg | * 738946e355 mmc: mmc_test: Fix removal of debugfs file | * 635d051734 net: stmmac: Set MAC's flow control register to reflect current settings | * 9132dcdf3b v4l2: don't fall back to follow_pfn() if pin_user_pages_fast() fails | * 76ad884be0 pinctrl: intel: Save and restore pins in "direct IRQ" mode | * 41296b85fa x86/bugs: Make sure MSR_SPEC_CTRL is updated properly upon resume from S3 | * 33021419fd nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry() | * 2e44dd9a8d tools/vm/slabinfo-gnuplot: use "grep -E" instead of "egrep" | * b60a8ad771 error-injection: Add prompt for function error injection | * 757eb00c4c ALSA: dice: fix regression for Lexicon I-ONIX FW810S | * a1a96a6f30 riscv: mm: Proper page permissions after initmem free | * 823df3607d riscv: vdso: fix section overlapping under some conditions | * 6e035d5a2a hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() | * 7692700ac8 hwmon: (coretemp) Check for null before removing sysfs attrs | * 9b5836b9c4 net: ethernet: renesas: ravb: Fix promiscuous mode after system resumed | * 0dfb9a5663 sctp: fix memory leak in sctp_stream_outq_migrate() | * fcb3e02161 packet: do not set TP_STATUS_CSUM_VALID on CHECKSUM_COMPLETE | * 04b995e963 net: tun: Fix use-after-free in tun_detach() | * 43ca0adf79 afs: Fix fileserver probe RTT handling | * 543d917f69 net: mdiobus: fix unbalanced node reference count | * dca370e575 net: hsr: Fix potential use-after-free | * 1daec08156 tipc: re-fetch skb cb after tipc_msg_validate | * 16a64dc265 dsa: lan9303: Correct stat name | * 766086ea8c net: wwan: iosm: fix dma_alloc_coherent incompatible pointer type | * c667751a42 net: wwan: iosm: fix kernel test robot reported error | * 9c584d6d9c net: ethernet: nixge: fix NULL dereference | * 8782b32ef8 net/9p: Fix a potential socket leak in p9_socket_open | * 6fc9425bff net: net_netdev: Fix error handling in ntb_netdev_init_module() | * 3bc893ef36 net: ethernet: ti: am65-cpsw: fix error handling in am65_cpsw_nuss_probe() | * 7730904f50 net: phy: fix null-ptr-deref while probe() failed | * 59b54f0563 wifi: mac8021: fix possible oob access in ieee80211_get_rate_duration | * dc0853f8b5 wifi: cfg80211: don't allow multi-BSSID in S1G | * 88a6fe3707 wifi: cfg80211: fix buffer overflow in elem comparison | * 08fff7aaeb aquantia: Do not purge addresses when setting the number of rings | * 2a7aa52573 qlcnic: fix sleep-in-atomic-context bugs caused by msleep | * 7b734d26f0 can: m_can: Add check for devm_clk_get | * ea8dc27bb0 can: m_can: pci: add missing m_can_class_free_dev() in probe/remove methods | * b1d2a8e02a can: etas_es58x: es58x_init_netdev(): free netdev when register_candev() | * e53da04e37 can: cc770: cc770_isa_probe(): add missing free_cc770dev() | * d452a71995 can: sja1000_isa: sja1000_isa_probe(): add missing free_sja1000dev() | * 372eb550fa net/mlx5e: Fix use-after-free when reverting termination table | * 839eeab03c net/mlx5: Fix uninitialized variable bug in outlen_write() | * 34feea3bfb net/mlx5: DR, Fix uninitialized var warning | * 3485ef2aab net/mlx5: DR, Rename list field in matcher struct to list_node | * 9fc27d22cd e100: Fix possible use after free in e100_xmit_prepare | * 0d9f5bd54b iavf: Fix error handling in iavf_init_module() | * b0b2b9050c iavf: remove redundant ret variable | * 69501d8205 fm10k: Fix error handling in fm10k_init_module() | * 5e3657dede i40e: Fix error handling in i40e_init_module() | * 7109e94109 ixgbevf: Fix resource leak in ixgbevf_init_module() | * 196ea810e2 of: property: decrement node refcount in of_fwnode_get_reference_args() | * 36164db278 nvmem: rmem: Fix return value check in rmem_read() | * e376183167 bpf: Do not copy spin lock field from user in bpf_selem_alloc | * 45f6e81863 hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails | * a90251376c hwmon: (i5500_temp) fix missing pci_disable_device() | * eeb31b828d hwmon: (ina3221) Fix shunt sum critical calculation | * 9514b95cac hwmon: (ltc2947) fix temperature scaling | * 0140e079a4 libbpf: Handle size overflow for ringbuf mmap | * 06d5790e7d ARM: at91: rm9200: fix usb device clock id | * d074f173fb scripts/faddr2line: Fix regression in name resolution on ppc64le | * ee3d37d796 bpf, perf: Use subprog name when reporting subprog ksymbol | * ec02fc0a41 iio: light: rpr0521: add missing Kconfig dependencies | * f7419fc42a iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw | * e7e76a77aa iio: health: afe4403: Fix oob read in afe4403_read_raw | * ebdca90efb drm/amdgpu: Partially revert "drm/amdgpu: update drm_display_info correctly when the edid is read" | * c365d3c3e5 drm/amdgpu: update drm_display_info correctly when the edid is read | * df5346466e drm/display/dp_mst: Fix drm_dp_mst_add_affected_dsc_crtcs() return code | * 044da1a371 btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit() | * da86809ab8 btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker | * 5d66eadc1c spi: spi-imx: Fix spi_bus_clk if requested clock is higher than input clock | * 6b4544a131 btrfs: free btrfs_path before copying inodes to userspace | * c7ae3becee btrfs: sink iterator parameter to btrfs_ioctl_logical_to_ino | * acc2f40b98 erofs: fix order >= MAX_ORDER warning due to crafted negative i_size | * ca9f27448a drm/i915/gt: Use i915_vm_put on ppgtt_create error paths | * c2f2972889 drm/i915: Create a dummy object for gen6 ppgtt | * 918002bdbe arm64: mte: Avoid setting PG_mte_tagged if no tags cleared or restored * | d753150bdc Revert "serial: Add rs485_supported to uart_port" * | 8ccd9528be Revert "serial: fsl_lpuart: Fill in rs485_supported" * | a924bb92c6 Merge 5.15.81 into android13-5.15-lts |\| | * e4a7232c91 Linux 5.15.81 | * 5c5c563a08 cifs: fix missed refcounting of ipc tcon | * ee2d04f23b drm/i915: fix TLB invalidation for Gen12 video and compute engines | * bef834845d drm/amdgpu: always register an MMU notifier for userptr | * 7901de7aa8 drm/amdgpu: Enable Aldebaran devices to report CU Occupancy | * e7bf1fe538 drm/amd/display: No display after resume from WB/CB | * 5033cba00c drm/amd/dc/dce120: Fix audio register mapping, stop triggering KASAN | * b8dc245909 btrfs: sysfs: normalize the error handling branch in btrfs_init_sysfs() | * 914baca57a btrfs: use kvcalloc in btrfs_get_dev_zone_info | * c1e6d4bfde btrfs: zoned: fix missing endianness conversion in sb_write_pointer | * d88bf6be02 btrfs: free btrfs_path before copying subvol info to userspace | * f218b404fc btrfs: free btrfs_path before copying fspath to userspace | * fea9397101 btrfs: free btrfs_path before copying root refs to userspace | * 7d0c25b5fe genirq: Take the proposed affinity at face value if force==true | * f17657cce0 irqchip/gic-v3: Always trust the managed affinity provided by the core code | * 52a93f2dcf genirq: Always limit the affinity to online CPUs | * 599cf4b845 genirq/msi: Shutdown managed interrupts with unsatifiable affinities | * 7aed1dd5d2 wifi: wilc1000: validate number of channels | * e9de501cf7 wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute | * 143232cb5a wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute | * cd9c486971 wifi: wilc1000: validate pairwise and authentication suite offsets | * f2fb18d429 fuse: lock inode unconditionally in fuse_fallocate() | * bb1c33bdf4 dm integrity: clear the journal on suspend | * 20ad31b09e dm integrity: flush the journal on suspend | * 5ca2110ba5 gpu: host1x: Avoid trying to use GART on Tegra20 | * 97f47617e8 scsi: iscsi: Fix possible memory leak when device_register() failed | * 56ab7f237e net: usb: qmi_wwan: add Telit 0x103a composition | * e2e33f213d tcp: configurable source port perturb table size | * 269928e5c7 platform/x86: ideapad-laptop: Fix interrupt storm on fn-lock toggle on some Yoga laptops | * 17d995dc69 platform/x86: hp-wmi: Ignore Smart Experience App event | * e85bdc7872 zonefs: fix zone report size in __zonefs_io_error() | * 982fcd83fb drm/amdgpu: disable BACO support on more cards | * ea11f8197d platform/x86: acer-wmi: Enable SW_TABLET_MODE on Switch V 10 (SW5-017) | * 09af15e691 platform/x86: asus-wmi: add missing pci_dev_put() in asus_wmi_set_xusb2pr() | * ba040bea9d xen/platform-pci: add missing free_irq() in error path | * 6815b2087d xen-pciback: Allow setting PCI_MSIX_FLAGS_MASKALL too | * 4c13ddb74f ASoC: stm32: dfsdm: manage cb buffers cleanup | * dd82295a23 Input: i8042 - apply probe defer to more ASUS ZenBook models | * e12e121feb Input: soc_button_array - add Acer Switch V 10 to dmi_use_low_level_irq[] | * 9f5c167074 Input: soc_button_array - add use_low_level_irq module parameter | * aaef86eac9 Input: goodix - try resetting the controller when no config is set | * e2223f5fbb serial: 8250: 8250_omap: Avoid RS485 RTS glitch on ->set_termios() | * 4e208294de tools: iio: iio_generic_buffer: Fix read size | * 0d0e2545fa ASoC: Intel: bytcht_es8316: Add quirk for the Nanote UMPC-01 | * e394cf9d7a Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode | * 96b5d11777 x86/ioremap: Fix page aligned size calculation in __ioremap_caller() | * d048f74815 x86/pm: Add enumeration check before spec MSRs save/restore setup | * 070e3560bf x86/tsx: Add a feature bit for TSX control MSR support | * 1430c98ebb KVM: x86: remove exit_int_info warning in svm_handle_exit | * 27550a5930 KVM: x86: add kvm_leave_nested | * 3e87cb0caa KVM: x86: nSVM: harden svm_free_nested against freeing vmcb02 while still in use | * 6425c590d0 KVM: x86: forcibly leave nested mode on vCPU reset | * f42ebf972a KVM: x86: nSVM: leave nested mode on vCPU free | * 7b3c9405b2 mm: vmscan: fix extreme overreclaim and swap floods | * feb2eda5e1 gcov: clang: fix the buffer overflow issue | * ea6aa25c9a nilfs2: fix nilfs_sufile_mark_dirty() not set segment usage as dirty | * 9d97a9fbfc usb: dwc3: gadget: Clear ep descriptor last | * 02632ea4df usb: dwc3: gadget: Return -ESHUTDOWN on ep disable | * 765ca3e63f usb: dwc3: gadget: conditionally remove requests | * 7945cbf866 bus: ixp4xx: Don't touch bit 7 on IXP42x | * 39c039018a iio: core: Fix entry not deleted when iio_register_sw_trigger_type() fails | * 0791a5ddba iio: light: apds9960: fix wrong register for gesture gain | * f0158b9bfc arm64: dts: rockchip: lower rk3399-puma-haikou SD controller clock frequency | * 277d19ec28 ext4: fix use-after-free in ext4_ext_shift_extents | * c9d133100b usb: cdnsp: fix issue with ZLP - added TD_SIZE = 1 | * c2ad434cd4 usb: cdnsp: Fix issue with Clear Feature Halt Endpoint | * 1d91c64887 usb: dwc3: exynos: Fix remove() function | * 0a216625c3 KVM: arm64: pkvm: Fixup boot mode to reflect that the kernel resumes from EL1 | * f0044a4a31 mmc: sdhci-brcmstb: Fix SDHCI_RESET_ALL for CQHCI | * 8e6940979b mmc: sdhci-brcmstb: Enable Clock Gating to save power | * 24b46bfa96 mmc: sdhci-brcmstb: Re-organize flags | * 227543ccac nios2: add FORCE for vmlinuz.gz | * 6a4ea16a67 init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash | * c4a9046c27 lib/vdso: use "grep -E" instead of "egrep" | * 5fefdceafb s390/crashdump: fix TOD programmable field size | * 592b6fd74a net: thunderx: Fix the ACPI memory leak | * 697eb30a35 octeontx2-af: Fix reference count issue in rvu_sdp_init() | * 6ba1687ea1 octeontx2-pf: Add check for devm_kcalloc | * 26c31e7c73 net: enetc: preserve TX ring priority across reconfiguration | * 0e16bbf616 net: enetc: cache accesses to &priv->si->hw | * 68de40f66a net: enetc: manage ENETC_F_QBV in priv->active_offloads only when enabled | * 5c0858e142 nfc: st-nci: fix incorrect sizing calculations in EVT_TRANSACTION | * e09243fb16 nfc: st-nci: fix memory leaks in EVT_TRANSACTION | * dca20b7a19 nfc: st-nci: fix incorrect validating logic in EVT_TRANSACTION | * 67d638f8ef s390/dasd: fix no record found for raw_track_access | * 88277853cf arcnet: fix potential memory leak in com20020_probe() | * 1d44ec8507 ipv4: Fix error return code in fib_table_insert() | * 918e83c6bf dccp/tcp: Reset saddr on failure after inet6?_hash_connect(). | * 8ce9b1c97f fs: do not update freeing inode i_io_list | * 8db9e60cdf netfilter: flowtable_offload: add missing locking | * c1da3bfca1 netfilter: ipset: restore allowing 64 clashing elements in hash:net,iface | * 606091b2f6 dma-buf: fix racing conflict of dma_heap_add() | * 8af9450bef bnx2x: fix pci device refcount leak in bnx2x_vf_is_pcie_pending() | * 251bcf6cfb regulator: twl6030: re-add TWL6032_SUBCLASS | * 6258a8f913 NFC: nci: fix memory leak in nci_rx_data_packet() | * ffe6021154 net: sched: allow act_ct to be built without NF_NAT | * a05c0f9511 net: sparx5: fix error handling in sparx5_port_open() | * 182ef20f0f sfc: fix potential memleak in __ef100_hard_start_xmit() | * 2da022fac9 net: wwan: iosm: use ACPI_FREE() but not kfree() in ipc_pcie_read_bios_cfg() | * a48b345b87 xfrm: Fix ignored return value in xfrm6_init() | * 19989e1635 xfrm: Fix oops in __xfrm_state_delete() | * 46d450067f tipc: check skb_linearize() return value in tipc_disc_rcv() | * 33fb115a76 tipc: add an extra conn_get in tipc_conn_alloc | * 4ae907c45f tipc: set con sock in tipc_conn_alloc | * ef866d9ea9 net/mlx5: Fix handling of entry refcount when command is not issued to FW | * 3101318939 net/mlx5: Fix FW tracer timestamp calculation | * 1eaabb5bbb net/mlx5: Do not query pci info while pci disabled | * 8180099b2a netfilter: ipset: regression in ip_set_hash_ip.c | * 448b627370 Drivers: hv: vmbus: fix possible memory leak in vmbus_device_register() | * 082c31cb99 Drivers: hv: vmbus: fix double free in the error path of vmbus_add_channel_work() | * 7fdd9daa5b macsec: Fix invalid error code set | * e8fb93a079 nfp: add port from netdev validation for EEPROM access | * e44e424ed9 nfp: fill splittable of devlink_port_attrs correctly | * 527046c138 net: pch_gbe: fix pci device refcount leak while module exiting | * f77c84dd5b octeontx2-af: debugsfs: fix pci device refcount leak | * cd581ffd8d net/qla3xxx: fix potential memleak in ql3xxx_send() | * a8976074e2 net: mvpp2: fix possible invalid pointer dereference | * 3a4cc56cd1 net/mlx4: Check retval of mlx4_bitmap_init | * c368220e17 net: ethernet: mtk_eth_soc: fix error handling in mtk_open() | * d9729437b2 ARM: dts: imx6q-prti6q: Fix ref/tcxo-clock-frequency properties | * 1c0b6a97c4 ARM: mxs: fix memory leak in mxs_machine_init() | * ecff08f3c4 iavf: Fix race condition between iavf_shutdown and iavf_remove | * 31147d4e90 iavf: Do not restart Tx queues after reset task failure | * 232942b26c iavf: Fix a crash during reset task | * 0600615d01 netfilter: nf_tables: do not set up extensions for end interval | * 60387731e6 netfilter: conntrack: Fix data-races around ct mark | * ee3ccd1abb 9p/fd: fix issue of list_del corruption in p9_fd_cancel() | * 131c2eeabc net: pch_gbe: fix potential memleak in pch_gbe_tx_queue() | * f58df483ff nfc/nci: fix race with opening and closing | * da22d7410a net: dsa: sja1105: disallow C45 transactions on the BASE-TX MDIO bus | * 38fe0988bd rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975] | * d92151b465 rxrpc: Use refcount_t rather than atomic_t | * 3c33e41fa5 rxrpc: Allow list of in-use local UDP endpoints to be viewed in /proc | * 46cefa2689 net: liquidio: simplify if expression | * 95500ee0b3 selftests: mptcp: fix mibit vs mbit mix up | * f8c4da198e selftests: mptcp: more stable simult_flows tests | * 1c0efab08c ARM: dts: at91: sam9g20ek: enable udc vbus gpio pinctrl | * ade662f3f2 tee: optee: fix possible memory leak in optee_register_device() | * d1dd119134 bus: sunxi-rsb: Support atomic transfers | * b1ed61e706 bus: sunxi-rsb: Remove the shutdown callback | * 61a41d1abc regulator: core: fix UAF in destroy_regulator() | * a85c0db3f5 spi: dw-dma: decrease reference count in dw_spi_dma_init_mfld() | * d9f9b3255b regulator: core: fix kobject release warning and memory leak in regulator_register() | * bd419c7c68 ASoC: max98373: Add checks for devm_kcalloc | * f9bc4a18e7 scsi: storvsc: Fix handling of srb_status and capacity change events | * c2153fe2d0 x86/hyperv: Restore VP assist page after cpu offlining/onlining | * b2ddd76237 ASoC: soc-pcm: Don't zero TDM masks in __soc_pcm_open() | * dd62cb7e6f ASoC: sgtl5000: Reset the CHIP_CLK_CTRL reg on remove | * d80ffd4823 ASoC: hdac_hda: fix hda pcm buffer overflow issue | * 10bee7eb2a ARM: dts: am335x-pcm-953: Define fixed regulators in root node | * 8fe533c0f9 af_key: Fix send_acquire race with pfkey_register | * 0c69a4658e xfrm: replay: Fix ESN wrap around for GSO | * ecc6ce4fdf xfrm: fix "disable_policy" on ipv4 early demux | * 5a792c1d4d MIPS: pic32: treat port as signed integer | * 144452b421 RISC-V: vdso: Do not add missing symbols to version section in linker script | * 799970b8cc ALSA: usb-audio: add quirk to fix Hamedal C20 disconnect issue | * 38b09dc14f Revert "drm/amdgpu: Revert "drm/amdgpu: getting fan speed pwm for vega10 properly"" | * 44d50fccf8 nvmet: fix memory leak in nvmet_subsys_attr_model_store_locked | * 5adc12d9e2 arm64/syscall: Include asm/ptrace.h in syscall_wrapper header. | * 1340f02773 block, bfq: fix null pointer dereference in bfq_bio_bfqg() | * 86d4dca4a6 drm: panel-orientation-quirks: Add quirk for Acer Switch V 10 (SW5-017) | * b90e6234f5 scsi: scsi_debug: Make the READ CAPACITY response compliant with ZBC | * cdbba6a4de scsi: ibmvfc: Avoid path failures during live migration | * 6e8124a151 platform/x86/intel/hid: Add some ACPI device IDs | * 32735e24f4 platform/x86/intel/pmt: Sapphire Rapids PMT errata fix | * 83a6823016 platform/x86: touchscreen_dmi: Add info for the RCA Cambio W101 v2 2-in-1 | * f707986a14 platform/x86: ideapad-laptop: Disable touchpad_switch | * 5e38740ae5 Revert "net: macsec: report real_dev features when HW offloading is enabled" | * 26b72202ee selftests/bpf: Add verifier test for release_reference() | * 8395e3f98c spi: stm32: fix stm32_spi_prepare_mbr() that halves spi clk for every run | * d04722f280 wifi: ath11k: Fix QCN9074 firmware boot on x86 | * 9cc96a20a9 wifi: mac80211: Fix ack frame idr leak when mesh has no route | * 86f90014e7 wifi: airo: do not assign -1 to unsigned char | * f5558fbda0 audit: fix undefined behavior in bit shift for AUDIT_BIT | * af5de982ff riscv: dts: sifive unleashed: Add PWM controlled LEDs | * ee34a19dbe wifi: mac80211_hwsim: fix debugfs attribute ps with rc table support | * 3513785dc1 wifi: mac80211: fix memory free error when registering wiphy fail | * 855485d31e ceph: fix NULL pointer dereference for req->r_session | * 729c9ad294 ceph: Use kcalloc for allocating multiple elements | * d276fb4a7e binder: validate alloc->mm in ->mmap() handler | * 5277e3d633 x86/sgx: Add overflow check in sgx_validate_offset_length() | * b5a838ba47 x86/sgx: Create utility to validate user provided offset and length | * 2f6e2de3a5 ceph: avoid putting the realm twice when decoding snaps fails | * 8bef55d793 ceph: do not update snapshot context when there is no new snapshot | * cdee3136c9 iio: pressure: ms5611: fixed value compensation bug | * 5d6696e79d iio: ms5611: Simplify IO callback parameters | * f0ee88e83c nvme-pci: add NVME_QUIRK_BOGUS_NID for Netac NV7000 | * a61716cd24 nvme-pci: disable write zeroes on various Kingston SSD | * 19b60f3363 nvme-pci: disable namespace identifiers for the MAXIO MAP1001 | * d537e19306 nvme-pci: add NVME_QUIRK_BOGUS_NID for Micron Nitro | * af03ce894c nvme: add a bogus subsystem NQN quirk for Micron MTFDKBA2T0TFH | * c6803faa6a drm/display: Don't assume dual mode adaptors support i2c sub-addressing | * d2284fe43c ata: libata-core: do not issue non-internal commands once EH is pending | * e09583e83e ata: libata-scsi: simplify __ata_scsi_queuecmd() | * a9059e338f cifs: Fix connections leak when tlink setup failed | * 81d583baa5 cifs: support nested dfs links over reconnect | * dbc0ea91be cifs: split out dfs code from cifs_reconnect() | * b3ce844d23 cifs: introduce new helper for cifs_reconnect() | * 2ea600b598 sctp: clear out_curr if all frag chunks of current msg are pruned | * 1f9f346fbb sctp: remove the unnecessary sinfo_stream check in sctp_prsctp_prune_unsent | * e8915faa9f tty: serial: fsl_lpuart: don't break the on-going transfer when global reset | * bd19013935 serial: fsl_lpuart: Fill in rs485_supported | * 87c81c19cd serial: Add rs485_supported to uart_port | * c08f4ea79f ASoC: fsl_asrc fsl_esai fsl_sai: allow CONFIG_PM=N | * d1e4288d2a ASoC: fsl_sai: use local device pointer * | e66b45d527 Merge branch 'android13-5.15' into android13-5.15-lts * | 72d681a01d Revert "net: use struct_group to copy ip/ipv6 header addresses" * | c46ed1b2d7 Merge 5.15.80 into android13-5.15-lts |\| | * 71e496bd33 Linux 5.15.80 | * b63ddb3ba6 ntfs: check overflow when iterating ATTR_RECORDs | * ab6a1bb17e ntfs: fix out-of-bounds read in ntfs_attr_find() | * 5330c423b8 ntfs: fix use-after-free in ntfs_attr_find() | * 43bbadb7e4 net/9p: use a dedicated spinlock for trans_fd | * 9357fca9da mm: fs: initialize fsdata passed to write_begin/write_end interface | * b334ab4c33 wifi: wext: use flex array destination for memcpy() | * 0e07032b4b 9p/trans_fd: always use O_NONBLOCK read/write | * 7c7b7476b5 gfs2: Switch from strlcpy to strscpy | * 28275a7c84 gfs2: Check sb_bsize_shift after reading superblock | * a4f1a01b2e 9p: trans_fd/p9_conn_cancel: drop client lock earlier | * f7b0e95071 kcm: close race conditions on sk_receive_queue | * 27d706b0d3 kcm: avoid potential race in kcm_tx_work | * b49026d9c8 tcp: cdg: allow tcp_cdg_release() to be called multiple times | * e41cbf98df macvlan: enforce a consistent minimal mtu | * d5f7f6e63f Input: i8042 - fix leaking of platform device on module removal | * c49cc2c059 kprobes: Skip clearing aggrprobe's post_handler in kprobe-on-ftrace case | * 71beab7119 scsi: scsi_debug: Fix possible UAF in sdebug_add_host_helper() | * a636772988 scsi: target: tcm_loop: Fix possible name leak in tcm_loop_setup_hba_bus() | * cb7893c85e net: use struct_group to copy ip/ipv6 header addresses | * 9b8c0c88f4 tracing: Fix warning on variable 'struct trace_array' | * 73cf0ff9a3 ring-buffer: Include dropped pages in counting dirty patches | * 35c60b4e8c perf: Improve missing SIGTRAP checking | * 2ac6276864 serial: 8250_lpss: Use 16B DMA burst with Elkhart Lake | * b1a27b2aad nvme: ensure subsystem reset is single threaded | * bccece3c33 nvme: restrict management ioctls to admin | * 8cddb0d96b perf/x86/intel/pt: Fix sampling using single range output | * 8e2f33c598 misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() | * 9a72a46cb0 docs: update mediator contact information in CoC doc | * a99a547658 mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put() | * 4a1b6f7839 mmc: sdhci-pci-o2micro: fix card detect fail issue caused by CD# debounce timeout | * fd285d4215 mmc: core: properly select voltage range without power cycle | * 8a9bae5f1b firmware: coreboot: Register bus in module init | * 052d0e79ef iommu/vt-d: Set SRE bit only when hardware has SRS cap | * c31a792a82 iommu/vt-d: Preset Access bit for IOVA in FL non-leaf paging entries | * 11edbdee43 scsi: zfcp: Fix double free of FSF request when qdio send fails | * fdf87b5b30 net: phy: marvell: add sleep time after enabling the loopback bit | * 9648d760ed maccess: Fix writing offset in case of fault in strncpy_from_kernel_nofault() | * fdd57c20d4 Input: iforce - invert valid length check when fetching device IDs | * 0cafb719be serial: 8250_lpss: Configure DMA also w/o DMA filter | * 59f6596697 serial: 8250: Flush DMA Rx on RLSI | * 118b52c2ae serial: 8250: Fall back to non-DMA Rx if IIR_RDI occurs | * 6ffce7a92e dm ioctl: fix misbehavior if list_versions races with module loading | * 2b104973f7 iio: pressure: ms5611: changed hardcoded SPI speed to value limited | * 1678d4abb2 iio: adc: mp2629: fix potential array out of bound access | * bd22c232ea iio: adc: mp2629: fix wrong comparison of channel | * 656f670613 iio: trigger: sysfs: fix possible memory leak in iio_sysfs_trig_init() | * 1bf8c0aff8 iio: adc: at91_adc: fix possible memory leak in at91_adc_allocate_trigger() | * afc0aea702 usb: typec: mux: Enter safe mode only when pins need to be reconfigured | * 8236628a54 usb: cdns3: host: fix endless superspeed hub port reset | * ead83b0db8 usb: chipidea: fix deadlock in ci_otg_del_timer | * cc9e6d8c55 usb: add NO_LPM quirk for Realforce 87U Keyboard | * 70eca1d261 USB: serial: option: add Fibocom FM160 0x0111 composition | * 1b6a54885c USB: serial: option: add u-blox LARA-L6 modem | * b0467d0059 USB: serial: option: add u-blox LARA-R6 00B modem | * 95688a8a57 USB: serial: option: remove old LARA-R6 PID | * 53dee78ea3 USB: serial: option: add Sierra Wireless EM9191 | * e7764e88e6 USB: bcma: Make GPIO explicitly optional | * a190a83db2 speakup: fix a segfault caused by switching consoles | * b3c6edbee4 slimbus: stream: correct presence rate frequencies | * 6b35ac8315 slimbus: qcom-ngd: Fix build error when CONFIG_SLIM_QCOM_NGD_CTRL=y && CONFIG_QCOM_RPROC_COMMON=m | * 0f847462fe Revert "usb: dwc3: disable USB core PHY management" | * 23ad214a86 ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book Pro 360 | * a36b505749 ALSA: hda/realtek: fix speakers for Samsung Galaxy Book Pro | * 02b94885b2 ALSA: usb-audio: Drop snd_BUG_ON() from snd_usbmidi_output_open() | * 7176d6f3ad drm/amd/display: Add HUBP surface flip interrupt handler | * e57daa7503 tracing: kprobe: Fix potential null-ptr-deref on trace_array in kprobe_event_gen_test_exit() | * 3a41c0f2a5 tracing: kprobe: Fix potential null-ptr-deref on trace_event_file in kprobe_event_gen_test_exit() | * 7291dec4f2 tracing: Fix race where eprobes can be called before the event | * 6517b97134 tracing: Fix wild-memory-access in register_synth_event() | * 07ba4f0603 tracing: Fix memory leak in test_gen_synth_cmd() and test_empty_synth_event() | * 8b318f3032 tracing/ring-buffer: Have polling block on watermark | * 2c21ee020c tracing: Fix memory leak in tracing_read_pipe() | * 00f74b1a98 ring_buffer: Do not deactivate non-existant pages | * 1bea037a1a ftrace: Fix null pointer dereference in ftrace_add_mod() | * fadfcf39fb ftrace: Optimize the allocation for mcount entries | * 5c5f264289 ftrace: Fix the possible incorrect kernel message | * 2ab2494162 cifs: add check for returning value of SMB2_set_info_init | * 5783abda58 net: thunderbolt: Fix error handling in tbnet_init() | * 80e590aeb1 net: microchip: sparx5: Fix potential null-ptr-deref in sparx_stats_init() and sparx5_start() | * 4a55aec142 cifs: Fix wrong return value checking when GETFLAGS | * c8baf1fc24 net/x25: Fix skb leak in x25_lapb_receive_frame() | * af4b57fa6b net: ag71xx: call phylink_disconnect_phy if ag71xx_hw_enable() fail in ag71xx_open() | * 61404a182e cifs: add check for returning value of SMB2_close_init | * d3233f4bf3 platform/surface: aggregator: Do not check for repeated unsequenced packets | * 6969171403 platform/x86/intel: pmc: Don't unconditionally attach Intel PMC when virtualized | * 7d93417d59 drbd: use after free in drbd_create_device() | * fc16a2c81a bridge: switchdev: Fix memory leaks when changing VLAN protocol | * 3d90a668c4 net: hns3: fix setting incorrect phy link ksettings for firmware in resetting process | * 3f7b2ef8fe net: ena: Fix error handling in ena_init() | * 2540eea1bd net: ionic: Fix error handling in ionic_init_module() | * c08c13cb13 xen/pcpu: fix possible memory leak in register_pcpu() | * 97009f07f2 net: dsa: make dsa_master_ioctl() see through port_hwtstamp_get() shims | * 88da008e5e net: mhi: Fix memory leak in mhi_net_dellink() | * 8f839715d0 bnxt_en: Remove debugfs when pci_register_driver failed | * b88713d92b net: caif: fix double disconnect client in chnl_net_open() | * 6d24034160 net: macvlan: Use built-in RCU list checking | * 596230471d mISDN: fix misuse of put_device() in mISDN_register_device() | * 07a6a8cf17 net: liquidio: release resources when liquidio driver open failed | * 19feb6cf41 soc: imx8m: Enable OCOTP clock before reading the register | * 8c54d706d8 net: stmmac: ensure tx function is not running in stmmac_xdp_release() | * 6219f46c2b net: hinic: Fix error handling in hinic_module_init() | * 7a05e39296 mISDN: fix possible memory leak in mISDN_dsp_element_register() | * 0ee6455c9c net: bgmac: Drop free_netdev() from bgmac_enet_remove() | * 7ff4fa179e bpf: Initialize same number of free nodes for each pcpu_freelist | * 12f178cf05 MIPS: Loongson64: Add WARN_ON on kexec related kmalloc failed | * a4d6e024be MIPS: fix duplicate definitions for exported symbols | * 44142b652a nfp: change eeprom length to max length enumerators | * f23058dc23 ata: libata-transport: fix error handling in ata_tdev_add() | * 67b2193146 ata: libata-transport: fix error handling in ata_tlink_add() | * e7bb1b7a7b ata: libata-transport: fix error handling in ata_tport_add() | * 377ff82c33 ata: libata-transport: fix double ata_host_put() in ata_tport_add() | * 494df0b0ef arm64: dts: imx8mn: Fix NAND controller size-cells | * 7178d568f7 arm64: dts: imx8mm: Fix NAND controller size-cells | * 8ccf18c82a ARM: dts: imx7: Fix NAND controller size-cells | * e884a6c2d4 drm: Fix potential null-ptr-deref in drm_vblank_destroy_worker() | * 07e56de876 drm/drv: Fix potential memory leak in drm_dev_init() | * 45c300613b drm/panel: simple: set bpc field for logic technologies displays | * 779f3f9e0c drm/vc4: kms: Fix IS_ERR() vs NULL check for vc4_kms | * 97e5b508e9 pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map | * 9a77b8557f parport_pc: Avoid FIFO port location truncation | * 5d03c2911c siox: fix possible memory leak in siox_device_add() | * 530e987a02 arm64: Fix bit-shifting UB in the MIDR_CPU_MODEL() macro | * d494449782 bpf: Fix memory leaks in __check_func_call | * 25521fd2e2 block: sed-opal: kmalloc the cmd/resp buffers | * 2f21d653c6 scsi: scsi_transport_sas: Fix error handling in sas_phy_add() | * 7cd28bc410 pinctrl: rockchip: list all pins in a possible mux route for PX30 | * ab79b8dbe2 ASoC: soc-utils: Remove __exit for snd_soc_util_exit() | * eaa8edd865 bpf, test_run: Fix alignment problem in bpf_prog_test_run_skb() | * 33cabe04d2 tty: n_gsm: fix sleep-in-atomic-context bug in gsm_control_send | * ae22294e21 serial: imx: Add missing .thaw_noirq hook | * 26db1cd519 serial: 8250: omap: Flush PM QOS work on remove | * e0db709a58 serial: 8250: omap: Fix unpaired pm_runtime_put_sync() in omap8250_remove() | * 83b6d4d6da serial: 8250_omap: remove wait loop from Errata i202 workaround | * 76db05ab70 serial: 8250: omap: Fix missing PM runtime calls for omap8250_set_mctrl() | * 2aee616a6b ARM: at91: pm: avoid soft resetting AC DLL | * 188546c780 ASoC: tas2764: Fix set_tdm_slot in case of single slot | * 5782896daf ASoC: tas2770: Fix set_tdm_slot in case of single slot | * 34eee4189b ASoC: core: Fix use-after-free in snd_soc_exit() | * aa6f8aecbb ARM: dts: at91: sama7g5: fix signal name of pin PB2 | * 487fff700f spi: stm32: Print summary 'callbacks suppressed' message | * 2cec2f65c1 arm64: dts: qcom: sm8350-hdk: Specify which LDO modes are allowed | * 44dbe66bb3 arm64: dts: qcom: sm8250-xperia-edo: Specify which LDO modes are allowed | * 8b2eae7def arm64: dts: qcom: sm8150-xperia-kumano: Specify which LDO modes are allowed | * c8e76eeea7 arm64: dts: qcom: sa8155p-adp: Specify which LDO modes are allowed | * 30571f28bb hugetlbfs: don't delete error page from pagecache | * 14ddbb83c3 KVM: x86/pmu: Do not speculatively query Intel GP PMCs that don't exist yet | * a9b964ed7c spi: intel: Use correct mask for flash and protected regions | * f4eb68642e mtd: spi-nor: intel-spi: Disable write protection only if asked | * 156d0c823c ASoC: codecs: jz4725b: Fix spelling mistake "Sourc" -> "Source", "Routee" -> "Route" | * 5907ff9f2c x86/cpu: Add several Intel server CPU model numbers | * 41e37d04e3 Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm | * b02a025dd1 btrfs: remove pointless and double ulist frees in error paths of qgroup tests | * 1c366c206f drm/imx: imx-tve: Fix return type of imx_tve_connector_mode_valid | * 1c8ded1b38 i2c: i801: add lis3lv02d's I2C address for Vostro 5568 | * b432581f19 i2c: tegra: Allocate DMA memory for DMA engine | * 7b0ae4c7b9 firmware: arm_scmi: Cleanup the core driver removal callback | * 1a8a2fef27 ACPI: x86: Add another system to quirk list for forcing StorageD3Enable | * 8a03a4a5cf NFSv4: Retry LOCK on OLD_STATEID during delegation return | * 49ca2227c4 btrfs: raid56: properly handle the error when unable to find the missing stripe | * 0f7bd3a2df RDMA/efa: Add EFA 0xefa2 PCI ID | * a42d4363e7 ACPI: scan: Add LATT2021 to acpi_ignore_dep_ids[] | * 004decd41b drm/amd/display: Remove wrong pipe control lock | * 7779efbb99 ASoC: rt1308-sdw: add the default value of some registers | * ef1e4ed858 selftests/intel_pstate: fix build for ARCH=x86_64 | * dfd3cc1ef3 selftests/futex: fix build for clang | * 648467236c ASoC: Intel: sof_sdw: add quirk variant for LAPBC710 NUC15 | * 64ee750c29 ASoC: codecs: jz4725b: fix capture selector naming | * 150b74cd06 ASoC: codecs: jz4725b: use right control for Capture Volume | * 5352d8b315 ASoC: codecs: jz4725b: fix reported volume for Master ctl | * 85134577a7 ASoC: codecs: jz4725b: add missed Line In power control bit | * 5e61dffb16 spi: intel: Fix the offset to get the 64K erase opcode | * c697cb2e66 ASoC: wm8962: Add an event handler for TEMP_HP and TEMP_SPK | * 569085124d ASoC: rt1019: Fix the TDM settings | * 4160a515c7 ASoC: mt6660: Keep the pm_runtime enables before component stuff in mt6660_i2c_probe | * 2963ec4535 ASoC: wm8997: Revert "ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe" | * 30a2f9479c ASoC: wm5110: Revert "ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe" | * 3bf6da38a2 ASoC: wm5102: Revert "ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe" | * 94fa250ea5 mm: shmem: don't truncate page if memory failure happens | * 003fa19591 mm: hwpoison: handle non-anonymous THP correctly | * a62b1bc603 mm: hwpoison: refactor refcount check handling * | 49ca4a5978 Revert "bpf, sockmap: Fix sk->sk_forward_alloc warn_on in sk_stream_kill_queues" * | 6fa2a43acd Revert "ALSA: usb-audio: Yet more regression for for the delayed card registration" * | ac2a7a141f Merge 5.15.79 into android13-5.15-lts |/ * 3df0eeae4d Linux 5.15.79 * 599b24eedf x86/cpu: Restore AMD's DE_CFG MSR after resume * 9132fa043f net: tun: call napi_schedule_prep() to ensure we own a napi * 1dea25e25a drm/amdkfd: Migrate in CPU page fault use current mm * a1c303fbd4 marvell: octeontx2: build error: unknown type name 'u64' * d948b22834 dmaengine: at_hdmac: Check return code of dma_async_device_register * c556ecf32a dmaengine: at_hdmac: Fix impossible condition * 8a941ff34e dmaengine: at_hdmac: Don't allow CPU to reorder channel enable * 53831f7a13 dmaengine: at_hdmac: Fix completion of unissued descriptor in case of errors * 14f5462e4a dmaengine: at_hdmac: Fix descriptor handling when issuing it to hardware * 5482403228 dmaengine: at_hdmac: Fix concurrency over the active list * 82ca19414f dmaengine: at_hdmac: Free the memset buf without holding the chan lock * 8fd36e069d dmaengine: at_hdmac: Fix concurrency over descriptor * 1ee012d452 dmaengine: at_hdmac: Fix concurrency problems by removing atc_complete_all() * 90c1b07406 dmaengine: at_hdmac: Protect atchan->status with the channel lock * b5ee1fe06a dmaengine: at_hdmac: Do not call the complete callback on device_terminate_all * 9bbf5df0fc dmaengine: at_hdmac: Fix premature completion of desc in issue_pending * f7d1aaa903 dmaengine: at_hdmac: Start transfer for cyclic channels in issue_pending * e9777b4efc dmaengine: at_hdmac: Don't start transactions at tx_submit level * 4e28674a0e dmaengine: at_hdmac: Fix at_lli struct definition * 49eba53137 cert host tools: Stop complaining about deprecated OpenSSL functions * 69e86c6268 can: j1939: j1939_send_one(): fix missing CAN header initialization * 81fc8f90b8 mm/shmem: use page_mapping() to detect page cache for uffd continue * e91451af11 mm/memremap.c: map FS_DAX device memory as decrypted * 48998c1773 mm/damon/dbgfs: check if rm_contexts input is for a real context * c736ed8541 udf: Fix a slab-out-of-bounds write bug in udf_find_entry() * 2e87eddf57 mms: sdhci-esdhc-imx: Fix SDHCI_RESET_ALL for CQHCI * 91c38504e5 btrfs: zoned: initialize device's zone info for seeding * 432c30ba3f btrfs: selftests: fix wrong error check in btrfs_free_dummy_root() * c9fe4719c6 btrfs: fix match incorrectly in dev_args_match_device * f96fd36936 wifi: ath11k: avoid deadlock during regulatory update in ath11k_regd_update() * 8e2b576caf platform/x86: hp_wmi: Fix rfkill causing soft blocked wifi * cb3ab0e1e0 drm/amdgpu: disable BACO on special BEIGE_GOBY card * dc066a7850 drm/i915/dmabuf: fix sg_table handling in map_dma_buf * afbd118838 nilfs2: fix use-after-free bug of ns_writer on remount * abc082aac0 nilfs2: fix deadlock in nilfs_count_free_blocks() * 589da22881 ata: libata-scsi: fix SYNCHRONIZE CACHE (16) command failure * 51ae4579a5 vmlinux.lds.h: Fix placement of '.data..decrypted' section * 1f8e08ab32 ALSA: usb-audio: Add DSD support for Accuphase DAC-60 * c2451f62b2 ALSA: usb-audio: Add quirk entry for M-Audio Micro * 031d1480a0 ALSA: usb-audio: Yet more regression for for the delayed card registration * 574f51e4aa ALSA: hda/realtek: Add Positivo C6300 model quirk * 7140d7aaf9 ALSA: hda: fix potential memleak in 'add_widget_node' * f6d7a487aa ALSA: hda/ca0132: add quirk for EVGA Z390 DARK * 1ccd55b390 ALSA: hda/hdmi - enable runtime pm for more AMD display audio * 29100c6742 mmc: sdhci-esdhc-imx: use the correct host caps for MMC_CAP_8_BIT_DATA * 3dce99e2eb mmc: sdhci-tegra: Fix SDHCI_RESET_ALL for CQHCI * 9d6bd33e6a mmc: sdhci_am654: Fix SDHCI_RESET_ALL for CQHCI * ad01f16ca9 mmc: sdhci-of-arasan: Fix SDHCI_RESET_ALL for CQHCI * 1aa78c1d01 mmc: cqhci: Provide helper for resetting both SDHCI and CQHCI * c198524a99 MIPS: jump_label: Fix compat branch range check * 9713ceffa4 arm64: efi: Fix handling of misaligned runtime regions and drop warning * 518e49f059 riscv: fix reserved memory setup * d07c3d7491 riscv: vdso: fix build with llvm * cc36c7fa5d riscv: process: fix kernel info leakage * a8d67367ab net: macvlan: fix memory leaks of macvlan_common_newlink * 7b194dd32b ethernet: tundra: free irq when alloc ring failed in tsi108_open() * 7de10342fe net: mv643xx_eth: disable napi when init rxq or txq failed in mv643xx_eth_open() * 88e1dd2d92 ethernet: s2io: disable napi when start nic failed in s2io_card_up() * 3652f1f8d3 net: atlantic: macsec: clear encryption keys from the stack * fca3b0a1fd net: phy: mscc: macsec: clear encryption keys when freeing a flow * 60a0af8813 stmmac: dwmac-loongson: fix missing of_node_put() while module exiting * ee4a9bd2c7 stmmac: dwmac-loongson: fix missing pci_disable_device() in loongson_dwmac_probe() * 4a8770eebc stmmac: dwmac-loongson: fix missing pci_disable_msi() while module exiting * 83196d8dc5 cxgb4vf: shut down the adapter when t4vf_update_port_info() failed in cxgb4vf_open() * 49d8a6e24a mctp: Fix an error handling path in mctp_init() * 29961d2332 stmmac: intel: Update PCH PTP clock rate from 200MHz to 204.8MHz * 8604bebc5c stmmac: intel: Enable 2.5Gbps for Intel AlderLake-S * 7dec6dae2b net: cxgb3_main: disable napi when bind qsets failed in cxgb_up() * 960f9d30de net: cpsw: disable napi in cpsw_ndo_open() * 1360778fdb net/mlx5e: E-Switch, Fix comparing termination table instance * f13e9ebd29 net/mlx5: Allow async trigger completion execution on single CPU systems * 48b73b46a5 net/mlx5: Bridge, verify LAG state when adding bond to bridge * 13b1ea861e net: wwan: iosm: fix memory leak in ipc_pcie_read_bios_cfg * 7e4dcacb4d net: nixge: disable napi when enable interrupts failed in nixge_open() * 409731df63 net: marvell: prestera: fix memory leak in prestera_rxtx_switch_init() * 77ff31cba9 netfilter: Cleanup nft_net->module_list from nf_tables_exit_net() * e62cb1c093 netfilter: nfnetlink: fix potential dead lock in nfnetlink_rcv_msg() * 0bd20318da perf tools: Add the include/perf/ directory to .gitignore * a733671e38 perf stat: Fix printing os->prefix in CSV metrics output * c36e9e2c4a drivers: net: xgene: disable napi when register irq failed in xgene_enet_open() * 4689bd3a1b net: lapbether: fix issue of invalid opcode in lapbeth_open() * 1dd27541aa dmaengine: ti: k3-udma-glue: fix memory leak when register device fail * 992e966caf dmaengine: mv_xor_v2: Fix a resource leak in mv_xor_v2_remove() * 9766af75ba dmaengine: pxa_dma: use platform_get_irq_optional * 301caa0609 tipc: fix the msg->req tlv len check in tipc_nl_compat_name_table_dump_header * 6a264203db net: broadcom: Fix BCMGENET Kconfig * e7871b9a21 net: stmmac: dwmac-meson8b: fix meson8b_devm_clk_prepare_enable() * 261178a1c2 can: af_can: fix NULL pointer dereference in can_rx_register() * 2acb2779b1 ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network * 13ecaa6832 tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent * bc79cb9fb0 drm/vc4: Fix missing platform_unregister_drivers() call in vc4_drm_register() * 2845bc9070 net: wwan: mhi: fix memory leak in mhi_mbim_dellink * 2ce2348c28 net: wwan: iosm: fix memory leak in ipc_wwan_dellink * 7b6bc50f65 hamradio: fix issue of dev reference count leakage in bpq_device_event() * f59adebb8c net: lapbether: fix issue of dev reference count leakage in lapbeth_device_event() * 119407dc32 KVM: s390: pv: don't allow userspace to set the clock under PV * 500bcd3a99 phy: ralink: mt7621-pci: add sentinel to quirks table * 151dc8087b capabilities: fix undefined behavior in bit shift for CAP_TO_MASK * 435c7ddfd5 net: fman: Unregister ethernet device on removal * 3a504d6d96 bnxt_en: fix potentially incorrect return value for ndo_rx_flow_steer * ac257c43fa bnxt_en: Fix possible crash in bnxt_hwrm_set_coal() * d7569302a7 net: tun: Fix memory leaks of napi_get_frags * 430d1f4964 octeontx2-pf: NIX TX overwrites SQ_CTX_HW_S[SQ_INT] * ec0db81883 octeontx2-pf: Use hardware register for CQE count * b89a0d8859 macsec: clear encryption keys from the stack after setting up offload * eeba7f07a0 macsec: fix detection of RXSCs when toggling offloading * 3070a880eb macsec: fix secy->n_rx_sc accounting * e957555a36 macsec: delete new rxsc when offload fails * ad25a115f5 net: gso: fix panic on frag_list with mixed head alloc types * 466ce46f25 bpf: Fix wrong reg type conversion in release_reference() * 35d8130f2a bpf: Add helper macro bpf_for_each_reg_in_vstate * 61274498fb bpf, sock_map: Move cancel_work_sync() out of sock lock * 32b5dd03be bpf: Fix sockmap calling sleepable function in teardown path * e991558189 bpf, sockmap: Fix sk->sk_forward_alloc warn_on in sk_stream_kill_queues * 5ad95d7134 HID: hyperv: fix possible memory leak in mousevsc_probe() * 6dcdd1b68b bpftool: Fix NULL pointer dereference when pin {PROG, MAP, LINK} without FILE * 2fc902245c wifi: mac80211: Set TWT Information Frame Disabled bit as 1 * 95adbd2ac8 bpf, sockmap: Fix the sk->sk_forward_alloc warning of sk_stream_kill_queues * 06615967d4 bpf, verifier: Fix memory leak in array reallocation for stack state * 4335a82c4f soundwire: qcom: check for outanding writes before doing a read * ae4dad2e53 soundwire: qcom: reinit broadcast completion * 38c9fa2cc6 wifi: cfg80211: fix memory leak in query_regdb_file() * 2c6ba0a787 wifi: cfg80211: silence a sparse RCU warning * 921738c280 phy: stm32: fix an error code in probe * fa722006f7 hwspinlock: qcom: correct MMIO max register for newer SoCs * 3c1bb6187e drm/amdkfd: Fix NULL pointer dereference in svm_migrate_to_ram() * b1f8522771 drm/amdkfd: handle CPU fault on COW mapping * 36770c045a drm/amdkfd: avoid recursive lock in migrations back to RAM * 93a5de7e88 fuse: fix readdir cache race * 1920cf9454 thunderbolt: Add DP OUT resource when DP tunnel is discovered * 47dbf24969 thunderbolt: Tear down existing tunnels when resuming from hibernate And update the .xml file with the new symbol that we are tracking and the abi preservation fix: 1 function symbol(s) added 'void __dev_kfree_skb_irq(struct sk_buff *, enum skb_free_reason)' type 'struct sdhci_host' changed member 'union { struct { u8 reinit_uhs; u8 reserve01; u8 drv_type; u16 reserve02; u32 reserve03; }; struct { u64 android_kabi_reserved1; }; union { }; }' was added member 'u64 android_kabi_reserved1' was removed Change-Id: If4a059230a137dee54298fff61ec87306bf96b0f Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-03-24 08:44:06 +00:00
Laurent Vivier	f8c9753a12	UPSTREAM: hwrng: virtio - add an internal buffer ... hwrng core uses two buffers that can be mixed in the virtio-rng queue. If the buffer is provided with wait=0 it is enqueued in the virtio-rng queue but unused by the caller. On the next call, core provides another buffer but the first one is filled instead and the new one queued. And the caller reads the data from the new one that is not updated, and the data in the first one are lost. To avoid this mix, virtio-rng needs to use its own unique internal buffer at a cost of a data copy to the caller buffer. Signed-off-by: Laurent Vivier <lvivier@redhat.com> Link: https://lore.kernel.org/r/20211028101111.128049-2-lvivier@redhat.com Signed-off-by: Michael S. Tsirkin <mst@redhat.com> (cherry picked from commit bf3175bc50a3754dc427e2f5046e17a9fafc8be7) Bug: 249566340 Change-Id: Ica2fd680de4bb359923b94dae48c00f6207a6876 Signed-off-by: Alistair Delva <adelva@google.com>	2023-03-23 18:47:35 +00:00
Greg Kroah-Hartman	fc4de343bd	Merge 5.15.87 into android13-5.15-lts ... Changes in 5.15.87 usb: dwc3: qcom: Fix memory leak in dwc3_qcom_interconnect_init cifs: fix oops during encryption Revert "selftests/bpf: Add test for unstable CT lookup API" nvme-pci: fix doorbell buffer value endianness nvme-pci: fix mempool alloc size nvme-pci: fix page size checks ACPI: resource: Skip IRQ override on Asus Vivobook K3402ZA/K3502ZA ACPI: resource: do IRQ override on LENOVO IdeaPad ACPI: resource: do IRQ override on XMG Core 15 ACPI: resource: do IRQ override on Lenovo 14ALC7 block, bfq: fix uaf for bfqq in bfq_exit_icq_bfqq ata: ahci: Fix PCS quirk application for suspend nvme: fix the NVME_CMD_EFFECTS_CSE_MASK definition nvmet: don't defer passthrough commands with trivial effects to the workqueue fs/ntfs3: Validate BOOT record_size fs/ntfs3: Add overflow check for attribute size fs/ntfs3: Validate data run offset fs/ntfs3: Add null pointer check to attr_load_runs_vcn fs/ntfs3: Fix memory leak on ntfs_fill_super() error path fs/ntfs3: Add null pointer check for inode operations fs/ntfs3: Validate attribute name offset fs/ntfs3: Validate buffer length while parsing index fs/ntfs3: Validate resident attribute name fs/ntfs3: Fix slab-out-of-bounds read in run_unpack soundwire: dmi-quirks: add quirk variant for LAPBC710 NUC15 fs/ntfs3: Validate index root when initialize NTFS security fs/ntfs3: Use __GFP_NOWARN allocation at wnd_init() fs/ntfs3: Use __GFP_NOWARN allocation at ntfs_fill_super() fs/ntfs3: Delete duplicate condition in ntfs_read_mft() fs/ntfs3: Fix slab-out-of-bounds in r_page objtool: Fix SEGFAULT powerpc/rtas: avoid device tree lookups in rtas_os_term() powerpc/rtas: avoid scheduling in rtas_os_term() HID: multitouch: fix Asus ExpertBook P2 P2451FA trackpoint HID: plantronics: Additional PIDs for double volume key presses quirk pstore: Properly assign mem_type property pstore/zone: Use GFP_ATOMIC to allocate zone buffer hfsplus: fix bug causing custom uid and gid being unable to be assigned with mount binfmt: Fix error return code in load_elf_fdpic_binary() ovl: Use ovl mounter's fsuid and fsgid in ovl_link() ALSA: line6: correct midi status byte when receiving data from podxt ALSA: line6: fix stack overflow in line6_midi_transmit pnode: terminate at peers of source mfd: mt6360: Add bounds checking in Regmap read/write call-backs md: fix a crash in mempool_free mm, compaction: fix fast_isolate_around() to stay within boundaries f2fs: should put a page when checking the summary info f2fs: allow to read node block after shutdown mmc: vub300: fix warning - do not call blocking ops when !TASK_RUNNING tpm: acpi: Call acpi_put_table() to fix memory leak tpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak tpm: tpm_tis: Add the missed acpi_put_table() to fix memory leak SUNRPC: Don't leak netobj memory when gss_read_proxy_verf() fails kcsan: Instrument memcpy/memset/memmove with newer Clang ASoC: Intel/SOF: use set_stream() instead of set_tdm_slots() for HDAudio ASoC/SoundWire: dai: expand 'stream' concept beyond SoundWire rcu-tasks: Simplify trc_read_check_handler() atomic operations net/af_packet: add VLAN support for AF_PACKET SOCK_RAW GSO net/af_packet: make sure to pull mac header media: stv0288: use explicitly signed char soc: qcom: Select REMAP_MMIO for LLCC driver kest.pl: Fix grub2 menu handling for rebooting ktest.pl minconfig: Unset configs instead of just removing them jbd2: use the correct print format perf/x86/intel/uncore: Disable I/O stacks to PMU mapping on ICX-D perf/x86/intel/uncore: Clear attr_update properly arm64: dts: qcom: sdm845-db845c: correct SPI2 pins drive strength mmc: sdhci-sprd: Disable CLK_AUTO when the clock is less than 400K btrfs: fix resolving backrefs for inline extent followed by prealloc ARM: ux500: do not directly dereference __iomem arm64: dts: qcom: sdm850-lenovo-yoga-c630: correct I2C12 pins drive strength selftests: Use optional USERCFLAGS and USERLDFLAGS PM/devfreq: governor: Add a private governor_data for governor cpufreq: Init completion before kobject_init_and_add() ALSA: patch_realtek: Fix Dell Inspiron Plus 16 ALSA: hda/realtek: Apply dual codec fixup for Dell Latitude laptops fs: dlm: fix sock release if listen fails fs: dlm: retry accept() until -EAGAIN or error returns mptcp: mark ops structures as ro_after_init mptcp: remove MPTCP 'ifdef' in TCP SYN cookies dm cache: Fix ABBA deadlock between shrink_slab and dm_cache_metadata_abort dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata dm thin: Use last transaction's pmd->root when commit failed dm thin: resume even if in FAIL mode dm thin: Fix UAF in run_timer_softirq() dm integrity: Fix UAF in dm_integrity_dtr() dm clone: Fix UAF in clone_dtr() dm cache: Fix UAF in destroy() dm cache: set needs_check flag after aborting metadata tracing/hist: Fix out-of-bound write on 'action_data.var_ref_idx' perf/core: Call LSM hook after copying perf_event_attr of/kexec: Fix reading 32-bit "linux,initrd-{start,end}" values KVM: VMX: Resume guest immediately when injecting #GP on ECREATE KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails KVM: nVMX: Properly expose ENABLE_USR_WAIT_PAUSE control to L1 x86/microcode/intel: Do not retry microcode reloading on the APs ftrace/x86: Add back ftrace_expected for ftrace bug reports x86/kprobes: Fix kprobes instruction boudary check with CONFIG_RETHUNK x86/kprobes: Fix optprobe optimization check with CONFIG_RETHUNK tracing: Fix race where eprobes can be called before the event tracing: Fix complicated dependency of CONFIG_TRACER_MAX_TRACE tracing/hist: Fix wrong return value in parse_action_params() tracing/probes: Handle system names with hyphens tracing: Fix infinite loop in tracing_read_pipe on overflowed print_trace_line staging: media: tegra-video: fix chan->mipi value on error staging: media: tegra-video: fix device_node use after free ARM: 9256/1: NWFPE: avoid compiler-generated __aeabi_uldivmod media: dvb-core: Fix double free in dvb_register_device() media: dvb-core: Fix UAF due to refcount races at releasing cifs: fix confusing debug message cifs: fix missing display of three mount options rtc: ds1347: fix value written to century register block: mq-deadline: Do not break sequential write streams to zoned HDDs md/bitmap: Fix bitmap chunk size overflow issues efi: Add iMac Pro 2017 to uefi skip cert quirk wifi: wilc1000: sdio: fix module autoloading ASoC: jz4740-i2s: Handle independent FIFO flush bits ipu3-imgu: Fix NULL pointer dereference in imgu_subdev_set_selection() ipmi: fix long wait in unload when IPMI disconnect mtd: spi-nor: Check for zero erase size in spi_nor_find_best_erase_type() ima: Fix a potential NULL pointer access in ima_restore_measurement_list ipmi: fix use after free in _ipmi_destroy_user() PCI: Fix pci_device_is_present() for VFs by checking PF PCI/sysfs: Fix double free in error path riscv: stacktrace: Fixup ftrace_graph_ret_addr retp argument riscv: mm: notify remote harts about mmu cache updates crypto: n2 - add missing hash statesize crypto: ccp - Add support for TEE for PCI ID 0x14CA driver core: Fix bus_type.match() error handling in __driver_attach() phy: qcom-qmp-combo: fix sc8180x reset iommu/amd: Fix ivrs_acpihid cmdline parsing code remoteproc: core: Do pm_relax when in RPROC_OFFLINE state parisc: led: Fix potential null-ptr-deref in start_task() device_cgroup: Roll back to original exceptions after copy failure drm/connector: send hotplug uevent on connector cleanup drm/vmwgfx: Validate the box size for the snooped cursor drm/i915/dsi: fix VBT send packet port selection for dual link DSI drm/ingenic: Fix missing platform_driver_unregister() call in ingenic_drm_init() ext4: silence the warning when evicting inode with dioread_nolock ext4: add inode table check in __ext4_get_inode_loc to aovid possible infinite loop ext4: remove trailing newline from ext4_msg() message fs: ext4: initialize fsdata in pagecache_write() ext4: fix use-after-free in ext4_orphan_cleanup ext4: fix undefined behavior in bit shift for ext4_check_flag_values ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inode ext4: add helper to check quota inums ext4: fix bug_on in __es_tree_search caused by bad quota inode ext4: fix reserved cluster accounting in __es_remove_extent() ext4: check and assert if marking an no_delete evicting inode dirty ext4: fix bug_on in __es_tree_search caused by bad boot loader inode ext4: fix leaking uninitialized memory in fast-commit journal ext4: fix uninititialized value in 'ext4_evict_inode' ext4: init quota for 'old.inode' in 'ext4_rename' ext4: fix delayed allocation bug in ext4_clu_mapped for bigalloc + inline ext4: fix corruption when online resizing a 1K bigalloc fs ext4: fix error code return to user-space in ext4_get_branch() ext4: avoid BUG_ON when creating xattrs ext4: fix kernel BUG in 'ext4_write_inline_data_end()' ext4: fix inode leak in ext4_xattr_inode_create() on an error path ext4: initialize quota before expanding inode in setproject ioctl ext4: avoid unaccounted block allocation when expanding inode ext4: allocate extended attribute value in vmalloc area drm/amdgpu: handle polaris10/11 overlap asics (v2) drm/amdgpu: make display pinning more flexible (v2) block: mq-deadline: Fix dd_finish_request() for zoned devices tracing: Fix issue of missing one synthetic field ext4: remove unused enum EXT4_FC_COMMIT_FAILED ext4: use ext4_debug() instead of jbd_debug() ext4: introduce EXT4_FC_TAG_BASE_LEN helper ext4: factor out ext4_fc_get_tl() ext4: fix potential out of bound read in ext4_fc_replay_scan() ext4: disable fast-commit of encrypted dir operations ext4: don't set up encryption key during jbd2 transaction ext4: add missing validation of fast-commit record lengths ext4: fix unaligned memory access in ext4_fc_reserve_space() ext4: fix off-by-one errors in fast-commit block filling ARM: renumber bits related to _TIF_WORK_MASK phy: qcom-qmp-combo: fix out-of-bounds clock access btrfs: replace strncpy() with strscpy() btrfs: move missing device handling in a dedicate function btrfs: fix extent map use-after-free when handling missing device in read_one_chunk x86/mce: Get rid of msr_ops x86/MCE/AMD: Clear DFR errors found in THR handler media: s5p-mfc: Fix to handle reference queue during finishing media: s5p-mfc: Clear workbit to handle error condition media: s5p-mfc: Fix in register read and write for H264 perf probe: Use dwarf_attr_integrate as generic DWARF attr accessor perf probe: Fix to get the DW_AT_decl_file and DW_AT_call_file as unsinged data ravb: Fix "failed to switch device to config mode" message during unbind ext4: goto right label 'failed_mount3a' ext4: correct inconsistent error msg in nojournal mode mbcache: automatically delete entries from cache on freeing ext4: fix deadlock due to mbcache entry corruption drm/i915/migrate: don't check the scratch page drm/i915/migrate: fix offset calculation drm/i915/migrate: fix length calculation SUNRPC: ensure the matching upcall is in-flight upon downcall btrfs: fix an error handling path in btrfs_defrag_leaves() bpf: pull before calling skb_postpull_rcsum() drm/panfrost: Fix GEM handle creation ref-counting netfilter: nf_tables: consolidate set description netfilter: nf_tables: add function to create set stateful expressions netfilter: nf_tables: perform type checking for existing sets vmxnet3: correctly report csum_level for encapsulated packet netfilter: nf_tables: honor set timeout and garbage collection updates veth: Fix race with AF_XDP exposing old or uninitialized descriptors nfsd: shut down the NFSv4 state objects before the filecache net: hns3: add interrupts re-initialization while doing VF FLR net: hns3: refactor hns3_nic_reuse_page() net: hns3: extract macro to simplify ring stats update code net: hns3: fix miss L3E checking for rx packet net: hns3: fix VF promisc mode not update when mac table full net: sched: fix memory leak in tcindex_set_parms qlcnic: prevent ->dcb use-after-free on qlcnic_dcb_enable() failure net: dsa: mv88e6xxx: depend on PTP conditionally nfc: Fix potential resource leaks vdpa_sim: fix possible memory leak in vdpasim_net_init() and vdpasim_blk_init() vhost/vsock: Fix error handling in vhost_vsock_init() vringh: fix range used in iotlb_translate() vhost: fix range used in translate_desc() vdpa_sim: fix vringh initialization in vdpasim_queue_ready() net/mlx5: E-Switch, properly handle ingress tagged packets on VST net/mlx5: Add forgotten cleanup calls into mlx5_init_once() error path net/mlx5: Avoid recovery in probe flows net/mlx5e: IPoIB, Don't allow CQE compression to be turned on by default net/mlx5e: TC, Refactor mlx5e_tc_add_flow_mod_hdr() to get flow attr net/mlx5e: Always clear dest encap in neigh-update-del net/mlx5e: Fix hw mtu initializing at XDP SQ allocation net: amd-xgbe: add missed tasklet_kill net: ena: Fix toeplitz initial hash value net: ena: Don't register memory info on XDP exchange net: ena: Account for the number of processed bytes in XDP net: ena: Use bitmask to indicate packet redirection net: ena: Fix rx_copybreak value update net: ena: Set default value for RX interrupt moderation net: ena: Update NUMA TPH hint register upon NUMA node update net: phy: xgmiitorgmii: Fix refcount leak in xgmiitorgmii_probe RDMA/mlx5: Fix mlx5_ib_get_hw_stats when used for device RDMA/mlx5: Fix validation of max_rd_atomic caps for DC drm/meson: Reduce the FIFO lines held when AFBC is not used filelock: new helper: vfs_inode_has_locks ceph: switch to vfs_inode_has_locks() to fix file lock bug gpio: sifive: Fix refcount leak in sifive_gpio_probe net: sched: atm: dont intepret cls results when asked to drop net: sched: cbq: dont intepret cls results when asked to drop net: sparx5: Fix reading of the MAC address netfilter: ipset: fix hash:net,port,net hang with /0 subnet netfilter: ipset: Rework long task execution when adding/deleting entries perf tools: Fix resources leak in perf_data__open_dir() drm/imx: ipuv3-plane: Fix overlay plane width fs/ntfs3: don't hold ni_lock when calling truncate_setsize() drivers/net/bonding/bond_3ad: return when there's no aggregator octeontx2-pf: Fix lmtst ID used in aura free usb: rndis_host: Secure rndis_query check against int overflow perf stat: Fix handling of --for-each-cgroup with --bpf-counters to match non BPF mode drm/i915: unpin on error in intel_vgpu_shadow_mm_pin() caif: fix memory leak in cfctrl_linkup_request() udf: Fix extension of the last extent in the file ASoC: Intel: bytcr_rt5640: Add quirk for the Advantech MICA-071 tablet nvme: fix multipath crash caused by flush request when blktrace is enabled io_uring: check for valid register opcode earlier nvmet: use NVME_CMD_EFFECTS_CSUPP instead of open coding it nvme: also return I/O command effects from nvme_command_effects btrfs: check superblock to ensure the fs was not modified at thaw time x86/kexec: Fix double-free of elf header buffer x86/bugs: Flush IBP in ib_prctl_set() nfsd: fix handling of readdir in v4root vs. mount upcall timeout fbdev: matroxfb: G200eW: Increase max memory from 1 MB to 16 MB block: don't allow splitting of a REQ_NOWAIT bio io_uring: fix CQ waiting timeout handling thermal: int340x: Add missing attribute for data rate base riscv: uaccess: fix type of 0 variable on error in get_user() riscv, kprobes: Stricter c.jr/c.jalr decoding drm/i915/gvt: fix gvt debugfs destroy drm/i915/gvt: fix vgpu debugfs clean in remove hfs/hfsplus: use WARN_ON for sanity check hfs/hfsplus: avoid WARN_ON() for sanity check, use proper error handling ksmbd: fix infinite loop in ksmbd_conn_handler_loop() ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob Revert "ACPI: PM: Add support for upcoming AMD uPEP HID AMDI007" mptcp: dedicated request sock for subflow in v6 mptcp: use proper req destructor for IPv6 ext4: don't allow journal inode to have encrypt flag selftests: set the BUILD variable to absolute path btrfs: make thaw time super block check to also verify checksum net: hns3: fix return value check bug of rx copybreak mbcache: Avoid nesting of cache->c_list_lock under bit locks efi: random: combine bootloader provided RNG seed with RNG protocol output io_uring: Fix unsigned 'res' comparison with zero in io_fixup_rw_res() drm/mgag200: Fix PLL setup for G200_SE_A rev >=4 Linux 5.15.87 Change-Id: I1df39ccb245b1e224417ee8deb8c7a5f9be2650a Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-01-31 12:22:42 +00:00
Greg Kroah-Hartman	20ec745823	Merge 5.15.86 into android13-5.15-lts ... Changes in 5.15.86 drm/amd/display: Manually adjust strobe for DCN303 usb: musb: remove extra check in musb_gadget_vbus_draw arm64: dts: qcom: ipq6018-cp01-c1: use BLSPI1 pins arm64: dts: qcom: sm8250-sony-xperia-edo: fix touchscreen bias-disable arm64: dts: qcom: msm8996: Add MSM8996 Pro support arm64: dts: qcom: msm8996: fix supported-hw in cpufreq OPP tables arm64: dts: qcom: msm8996: fix GPU OPP table ARM: dts: qcom: apq8064: fix coresight compatible arm64: dts: qcom: sdm630: fix UART1 pin bias arm64: dts: qcom: sdm845-cheza: fix AP suspend pin bias arm64: dts: qcom: msm8916: Drop MSS fallback compatible objtool, kcsan: Add volatile read/write instrumentation to whitelist ARM: dts: stm32: Drop stm32mp15xc.dtsi from Avenger96 ARM: dts: stm32: Fix AV96 WLAN regulator gpio property drivers: soc: ti: knav_qmss_queue: Mark knav_acc_firmwares as static arm64: dts: qcom: pm660: Use unique ADC5_VCOIN address in node name arm64: dts: qcom: sm8250: correct LPASS pin pull down soc: qcom: llcc: make irq truly optional arm64: dts: qcom: Correct QMP PHY child node name arm64: dts: qcom: sm8150: fix UFS PHY registers arm64: dts: qcom: sm8250: fix UFS PHY registers arm64: dts: qcom: sm8350: fix UFS PHY registers arm64: dts: qcom: sm8250: drop bogus DP PHY clock soc: qcom: apr: make code more reuseable soc: qcom: apr: Add check for idr_alloc and of_property_read_string_index arm64: dts: qcom: sm6125: fix SDHCI CQE reg names arm: dts: spear600: Fix clcd interrupt soc: ti: knav_qmss_queue: Use pm_runtime_resume_and_get instead of pm_runtime_get_sync soc: ti: knav_qmss_queue: Fix PM disable depth imbalance in knav_queue_probe soc: ti: smartreflex: Fix PM disable depth imbalance in omap_sr_probe arm64: Treat ESR_ELx as a 64-bit register arm64: mm: kfence: only handle translation faults perf: arm_dsu: Fix hotplug callback leak in dsu_pmu_init() perf/arm_dmc620: Fix hotplug callback leak in dmc620_pmu_init() perf/smmuv3: Fix hotplug callback leak in arm_smmu_pmu_init() arm64: dts: ti: k3-am65-main: Drop dma-coherent in crypto node arm64: dts: ti: k3-j721e-main: Drop dma-coherent in crypto node ARM: dts: nuvoton: Remove bogus unit addresses from fixed-partition nodes arm64: dts: mt6779: Fix devicetree build warnings arm64: dts: mt2712e: Fix unit_address_vs_reg warning for oscillators arm64: dts: mt2712e: Fix unit address for pinctrl node arm64: dts: mt2712-evb: Fix vproc fixed regulators unit names arm64: dts: mt2712-evb: Fix usb vbus regulators unit names arm64: dts: mediatek: pumpkin-common: Fix devicetree warnings arm64: dts: mediatek: mt6797: Fix 26M oscillator unit name ARM: dts: dove: Fix assigned-addresses for every PCIe Root Port ARM: dts: armada-370: Fix assigned-addresses for every PCIe Root Port ARM: dts: armada-xp: Fix assigned-addresses for every PCIe Root Port ARM: dts: armada-375: Fix assigned-addresses for every PCIe Root Port ARM: dts: armada-38x: Fix assigned-addresses for every PCIe Root Port ARM: dts: armada-39x: Fix assigned-addresses for every PCIe Root Port ARM: dts: turris-omnia: Add ethernet aliases ARM: dts: turris-omnia: Add switch port 6 node arm64: dts: armada-3720-turris-mox: Add missing interrupt for RTC seccomp: Move copy_seccomp() to no failure path. pstore/ram: Fix error return code in ramoops_probe() ARM: mmp: fix timer_read delay pstore: Avoid kcore oops by vmap()ing with VM_IOREMAP tpm/tpm_ftpm_tee: Fix error handling in ftpm_mod_init() tpm/tpm_crb: Fix error message in __crb_relinquish_locality() ovl: store lower path in ovl_inode ovl: use ovl_copy_{real,upper}attr() wrappers ovl: remove privs in ovl_copyfile() ovl: remove privs in ovl_fallocate() sched/fair: Cleanup task_util and capacity type sched/uclamp: Fix relationship between uclamp and migration margin sched/uclamp: Make task_fits_capacity() use util_fits_cpu() sched/uclamp: Make select_idle_capacity() use util_fits_cpu() sched/fair: Removed useless update of p->recent_used_cpu sched/core: Introduce sched_asym_cpucap_active() sched/uclamp: Make asym_fits_capacity() use util_fits_cpu() cpuidle: dt: Return the correct numbers of parsed idle states alpha: fix TIF_NOTIFY_SIGNAL handling alpha: fix syscall entry in !AUDUT_SYSCALL case x86/sgx: Reduce delay and interference of enclave release PM: hibernate: Fix mistake in kerneldoc comment fs: don't audit the capability check in simple_xattr_list() cpufreq: qcom-hw: Fix memory leak in qcom_cpufreq_hw_read_lut() selftests/ftrace: event_triggers: wait longer for test_event_enable perf: Fix possible memleak in pmu_dev_alloc() lib/debugobjects: fix stat count and optimize debug_objects_mem_init platform/x86: huawei-wmi: fix return value calculation timerqueue: Use rb_entry_safe() in timerqueue_getnext() proc: fixup uptime selftest lib/fonts: fix undefined behavior in bit shift for get_default_font ocfs2: fix memory leak in ocfs2_stack_glue_init() MIPS: vpe-mt: fix possible memory leak while module exiting MIPS: vpe-cmp: fix possible memory leak while module exiting selftests/efivarfs: Add checking of the test return value PNP: fix name memory leak in pnp_alloc_dev() perf/x86/intel/uncore: Fix reference count leak in sad_cfg_iio_topology() perf/x86/intel/uncore: Fix reference count leak in hswep_has_limit_sbox() perf/x86/intel/uncore: Fix reference count leak in snr_uncore_mmio_map() perf/x86/intel/uncore: Fix reference count leak in __uncore_imc_init_box() platform/chrome: cros_usbpd_notify: Fix error handling in cros_usbpd_notify_init() thermal: core: fix some possible name leaks in error paths irqchip: gic-pm: Use pm_runtime_resume_and_get() in gic_probe() irqchip/wpcm450: Fix memory leak in wpcm450_aic_of_init() EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() SUNRPC: Return true/false (not 1/0) from bool functions NFSD: Finish converting the NFSv2 GETACL result encoder nfsd: don't call nfsd_file_put from client states seqfile display genirq/irqdesc: Don't try to remove non-existing sysfs files cpufreq: amd_freq_sensitivity: Add missing pci_dev_put() libfs: add DEFINE_SIMPLE_ATTRIBUTE_SIGNED for signed value lib/notifier-error-inject: fix error when writing -errno to debugfs file debugfs: fix error when writing negative value to atomic_t debugfs file rapidio: fix possible name leaks when rio_add_device() fails rapidio: rio: fix possible name leak in rio_register_mport() clocksource/drivers/sh_cmt: Access registers according to spec mips: ralink: mt7621: define MT7621_SYSC_BASE with __iomem mips: ralink: mt7621: soc queries and tests as functions mips: ralink: mt7621: do not use kzalloc too early futex: Move to kernel/futex/ futex: Resend potentially swallowed owner death notification cpu/hotplug: Make target_store() a nop when target == state cpu/hotplug: Do not bail-out in DYING/STARTING sections clocksource/drivers/timer-ti-dm: Fix missing clk_disable_unprepare in dmtimer_systimer_init_clock() ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage() uprobes/x86: Allow to probe a NOP instruction with 0x66 prefix x86/xen: Fix memory leak in xen_smp_intr_init{_pv}() x86/xen: Fix memory leak in xen_init_lock_cpu() xen/privcmd: Fix a possible warning in privcmd_ioctl_mmap_resource() PM: runtime: Do not call __rpm_callback() from rpm_idle() platform/chrome: cros_ec_typec: Cleanup switch handle return paths platform/chrome: cros_ec_typec: zero out stale pointers platform/x86: mxm-wmi: fix memleak in mxm_wmi_call_mx[ds|mx]() platform/x86: intel_scu_ipc: fix possible name leak in __intel_scu_ipc_register() MIPS: BCM63xx: Add check for NULL for clk in clk_enable MIPS: OCTEON: warn only once if deprecated link status is being used lockd: set other missing fields when unlocking files fs: sysv: Fix sysv_nblocks() returns wrong value rapidio: fix possible UAF when kfifo_alloc() fails eventfd: change int to __u64 in eventfd_signal() ifndef CONFIG_EVENTFD relay: fix type mismatch when allocating memory in relay_create_buf() hfs: Fix OOB Write in hfs_asc2mac rapidio: devices: fix missing put_device in mport_cdev_open platform/mellanox: mlxbf-pmc: Fix event typo wifi: ath9k: hif_usb: fix memory leak of urbs in ath9k_hif_usb_dealloc_tx_urbs() wifi: ath9k: hif_usb: Fix use-after-free in ath9k_hif_usb_reg_in_cb() wifi: rtl8xxxu: Fix reading the vendor of combo chips drm/bridge: adv7533: remove dynamic lane switching from adv7533 bridge libbpf: Fix use-after-free in btf_dump_name_dups libbpf: Fix null-pointer dereference in find_prog_by_sec_insn() ata: libata: move ata_{port,link,dev}_dbg to standard pr_XXX() macros ata: add/use ata_taskfile::{error|status} fields ata: libata: fix NCQ autosense logic ipmi: kcs: Poll OBF briefly to reduce OBE latency drm/amdgpu/powerplay/psm: Fix memory leak in power state init media: v4l2-ctrls: Fix off-by-one error in integer menu control check media: coda: jpeg: Add check for kmalloc media: adv748x: afe: Select input port when initializing AFE media: i2c: ad5820: Fix error path venus: pm_helpers: Fix error check in vcodec_domains_get() soreuseport: Fix socket selection for SO_INCOMING_CPU. media: exynos4-is: don't rely on the v4l2_async_subdev internals libbpf: Btf dedup identical struct test needs check for nested structs/arrays can: kvaser_usb: do not increase tx statistics when sending error message frames can: kvaser_usb: kvaser_usb_leaf: Get capabilities from device can: kvaser_usb: kvaser_usb_leaf: Rename {leaf,usbcan}_cmd_error_event to {leaf,usbcan}_cmd_can_error_event can: kvaser_usb: kvaser_usb_leaf: Handle CMD_ERROR_EVENT can: kvaser_usb_leaf: Set Warning state even without bus errors can: kvaser_usb: make use of units.h in assignment of frequency can: kvaser_usb_leaf: Fix improved state not being reported can: kvaser_usb_leaf: Fix wrong CAN state after stopping can: kvaser_usb_leaf: Fix bogus restart events can: kvaser_usb: Add struct kvaser_usb_busparams can: kvaser_usb: Compare requested bittiming parameters with actual parameters in do_set_{,data}_bittiming drm/rockchip: lvds: fix PM usage counter unbalance in poweron clk: renesas: r9a06g032: Repair grave increment error spi: Update reference to struct spi_controller drm/panel/panel-sitronix-st7701: Remove panel on DSI attach failure ima: Handle -ESTALE returned by ima_filter_rule_match() drm/msm/hdmi: drop unused GPIO support drm/msm/hdmi: use devres helper for runtime PM management bpf: Fix slot type check in check_stack_write_var_off media: vivid: fix compose size exceed boundary media: platform: exynos4-is: fix return value check in fimc_md_probe() bpf: propagate precision in ALU/ALU64 operations bpf: Check the other end of slot_type for STACK_SPILL bpf: propagate precision across all frames, not just the last one clk: qcom: gcc-sm8250: Use retention mode for USB GDSCs mtd: Fix device name leak when register device failed in add_mtd_device() Input: joystick - fix Kconfig warning for JOYSTICK_ADC wifi: rsi: Fix handling of 802.3 EAPOL frames sent via control port media: camss: Clean up received buffers on failed start of streaming net, proc: Provide PROC_FS=n fallback for proc_create_net_single_write() rxrpc: Fix ack.bufferSize to be 0 when generating an ack bfq: fix waker_bfqq inconsistency crash drm/radeon: Add the missed acpi_put_table() to fix memory leak drm/mediatek: Modify dpi power on/off sequence. ASoC: pxa: fix null-pointer dereference in filter() libbpf: Fix uninitialized warning in btf_dump_dump_type_data nvmet: only allocate a single slab for bvecs regulator: core: fix unbalanced of node refcount in regulator_dev_lookup() amdgpu/pm: prevent array underflow in vega20_odn_edit_dpm_table() nvme: return err on nvme_init_non_mdts_limits fail regulator: qcom-rpmh: Fix PMR735a S3 regulator spec drm/fourcc: Add packed 10bit YUV 4:2:0 format drm/fourcc: Fix vsub/hsub for Q410 and Q401 integrity: Fix memory leakage in keyring allocation error path ima: Fix misuse of dereference of pointer in template_desc_init_fields() block: clear ->slave_dir when dropping the main slave_dir reference wifi: ath10k: Fix return value in ath10k_pci_init() drm/msm/a6xx: Fix speed-bin detection vs probe-defer mtd: lpddr2_nvm: Fix possible null-ptr-deref Input: elants_i2c - properly handle the reset GPIO when power is off media: vidtv: Fix use-after-free in vidtv_bridge_dvb_init() media: solo6x10: fix possible memory leak in solo_sysfs_init() media: platform: exynos4-is: Fix error handling in fimc_md_init() media: videobuf-dma-contig: use dma_mmap_coherent inet: add READ_ONCE(sk->sk_bound_dev_if) in inet_csk_bind_conflict() mtd: spi-nor: hide jedec_id sysfs attribute if not present mtd: spi-nor: Fix the number of bytes for the dummy cycles bpf: Move skb->len == 0 checks into __bpf_redirect HID: hid-sensor-custom: set fixed size for custom attributes pinctrl: k210: call of_node_put() ALSA: pcm: fix undefined behavior in bit shift for SNDRV_PCM_RATE_KNOT ALSA: seq: fix undefined behavior in bit shift for SNDRV_SEQ_FILTER_USE_EVENT regulator: core: use kfree_const() to free space conditionally clk: rockchip: Fix memory leak in rockchip_clk_register_pll() drm/amdgpu: fix pci device refcount leak bonding: fix link recovery in mode 2 when updelay is nonzero mtd: maps: pxa2xx-flash: fix memory leak in probe drbd: remove call to memset before free device/resource/connection drbd: destroy workqueue when drbd device was freed ASoC: qcom: Add checks for devm_kcalloc media: vimc: Fix wrong function called when vimc_init() fails media: imon: fix a race condition in send_packet() clk: imx8mn: rename vpu_pll to m7_alt_pll clk: imx: replace osc_hdmi with dummy clk: imx8mn: fix imx8mn_sai2_sels clocks list clk: imx8mn: fix imx8mn_enet_phy_sels clocks list pinctrl: pinconf-generic: add missing of_node_put() media: dvb-core: Fix ignored return value in dvb_register_frontend() media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() media: s5p-mfc: Add variant data for MFC v7 hardware for Exynos 3250 SoC drm/tegra: Add missing clk_disable_unprepare() in tegra_dc_probe() ASoC: dt-bindings: wcd9335: fix reset line polarity in example ASoC: mediatek: mtk-btcvsd: Add checks for write and read of mtk_btcvsd_snd NFSv4.2: Clear FATTR4_WORD2_SECURITY_LABEL when done decoding NFSv4.2: Fix a memory stomp in decode_attr_security_label NFSv4.2: Fix initialisation of struct nfs4_label NFSv4: Fix a credential leak in _nfs4_discover_trunking() NFSv4: Fix a deadlock between nfs4_open_recover_helper() and delegreturn NFS: Fix an Oops in nfs_d_automount() ALSA: asihpi: fix missing pci_disable_device() wifi: iwlwifi: mvm: fix double free on tx path. ASoC: mediatek: mt8173: Fix debugfs registration for components ASoC: mediatek: mt8173: Enable IRQ when pdata is ready drm/amd/pm/smu11: BACO is supported when it's in BACO state drm/radeon: Fix PCI device refcount leak in radeon_atrm_get_bios() drm/amdgpu: Fix PCI device refcount leak in amdgpu_atrm_get_bios() drm/amdkfd: Fix memory leakage ASoC: pcm512x: Fix PM disable depth imbalance in pcm512x_probe netfilter: conntrack: set icmpv6 redirects as RELATED Input: wistron_btns - disable on UML bpf, sockmap: Fix repeated calls to sock_put() when msg has more_data bpf, sockmap: Fix missing BPF_F_INGRESS flag when using apply_bytes bpf, sockmap: Fix data loss caused by using apply_bytes on ingress redirect bonding: uninitialized variable in bond_miimon_inspect() spi: spidev: mask SPI_CS_HIGH in SPI_IOC_RD_MODE wifi: mac80211: fix memory leak in ieee80211_if_add() wifi: cfg80211: Fix not unregister reg_pdev when load_builtin_regdb_keys() fails mt76: stop the radar detector after leaving dfs channel wifi: mt76: mt7921: fix reporting of TX AGGR histogram wifi: mt76: fix coverity overrun-call in mt76_get_txpower() regulator: core: fix module refcount leak in set_supply() clk: qcom: lpass-sc7180: Fix pm_runtime usage clk: qcom: clk-krait: fix wrong div2 functions hsr: Add a rcu-read lock to hsr_forward_skb(). hsr: Avoid double remove of a node. hsr: Disable netpoll. hsr: Synchronize sending frames to have always incremented outgoing seq nr. hsr: Synchronize sequence number updates. configfs: fix possible memory leak in configfs_create_dir() regulator: core: fix resource leak in regulator_register() hwmon: (jc42) Convert register access and caching to regmap/regcache hwmon: (jc42) Restore the min/max/critical temperatures on resume bpf, sockmap: fix race in sock_map_free() ALSA: pcm: Set missing stop_operating flag at undoing trigger start media: saa7164: fix missing pci_disable_device() ALSA: mts64: fix possible null-ptr-defer in snd_mts64_interrupt xprtrdma: Fix regbuf data not freed in rpcrdma_req_create() SUNRPC: Fix missing release socket in rpc_sockname() NFSv4.x: Fail client initialisation if state manager thread can't run riscv, bpf: Emit fixed-length instructions for BPF_PSEUDO_FUNC mmc: alcor: fix return value check of mmc_add_host() mmc: moxart: fix return value check of mmc_add_host() mmc: mxcmmc: fix return value check of mmc_add_host() mmc: pxamci: fix return value check of mmc_add_host() mmc: rtsx_pci: fix return value check of mmc_add_host() mmc: rtsx_usb_sdmmc: fix return value check of mmc_add_host() mmc: toshsd: fix return value check of mmc_add_host() mmc: vub300: fix return value check of mmc_add_host() mmc: wmt-sdmmc: fix return value check of mmc_add_host() mmc: atmel-mci: fix return value check of mmc_add_host() mmc: omap_hsmmc: fix return value check of mmc_add_host() mmc: meson-gx: fix return value check of mmc_add_host() mmc: via-sdmmc: fix return value check of mmc_add_host() mmc: wbsd: fix return value check of mmc_add_host() mmc: mmci: fix return value check of mmc_add_host() mmc: renesas_sdhi: alway populate SCC pointer memstick: ms_block: Add error handling support for add_disk() memstick/ms_block: Add check for alloc_ordered_workqueue mmc: core: Normalize the error handling branch in sd_read_ext_regs() regulator: qcom-labibb: Fix missing of_node_put() in qcom_labibb_regulator_probe() media: c8sectpfe: Add of_node_put() when breaking out of loop media: coda: Add check for dcoda_iram_alloc media: coda: Add check for kmalloc clk: samsung: Fix memory leak in _samsung_clk_register_pll() spi: spi-gpio: Don't set MOSI as an input if not 3WIRE mode wifi: rtl8xxxu: Add __packed to struct rtl8723bu_c2h wifi: rtl8xxxu: Fix the channel width reporting wifi: brcmfmac: Fix error return code in brcmf_sdio_download_firmware() blktrace: Fix output non-blktrace event when blk_classic option enabled bpf: Do not zero-extend kfunc return values clk: socfpga: Fix memory leak in socfpga_gate_init() net: vmw_vsock: vmci: Check memcpy_from_msg() net: defxx: Fix missing err handling in dfx_init() net: stmmac: selftests: fix potential memleak in stmmac_test_arpoffload() net: stmmac: fix possible memory leak in stmmac_dvr_probe() drivers: net: qlcnic: Fix potential memory leak in qlcnic_sriov_init() of: overlay: fix null pointer dereferencing in find_dup_cset_node_entry() and find_dup_cset_prop() ethernet: s2io: don't call dev_kfree_skb() under spin_lock_irqsave() net: farsync: Fix kmemleak when rmmods farsync net/tunnel: wait until all sk_user_data reader finish before releasing the sock net: apple: mace: don't call dev_kfree_skb() under spin_lock_irqsave() net: apple: bmac: don't call dev_kfree_skb() under spin_lock_irqsave() net: emaclite: don't call dev_kfree_skb() under spin_lock_irqsave() net: ethernet: dnet: don't call dev_kfree_skb() under spin_lock_irqsave() hamradio: don't call dev_kfree_skb() under spin_lock_irqsave() net: amd: lance: don't call dev_kfree_skb() under spin_lock_irqsave() af_unix: call proto_unregister() in the error path in af_unix_init() net: amd-xgbe: Fix logic around active and passive cables net: amd-xgbe: Check only the minimum speed for active/passive cables can: tcan4x5x: Remove invalid write in clear_interrupts can: m_can: Call the RAM init directly from m_can_chip_config can: tcan4x5x: Fix use of register error status mask net: lan9303: Fix read error execution path ntb_netdev: Use dev_kfree_skb_any() in interrupt context sctp: sysctl: make extra pointers netns aware Bluetooth: MGMT: Fix error report for ADD_EXT_ADV_PARAMS Bluetooth: btintel: Fix missing free skb in btintel_setup_combined() Bluetooth: btusb: don't call kfree_skb() under spin_lock_irqsave() Bluetooth: hci_qca: don't call kfree_skb() under spin_lock_irqsave() Bluetooth: hci_ll: don't call kfree_skb() under spin_lock_irqsave() Bluetooth: hci_h5: don't call kfree_skb() under spin_lock_irqsave() Bluetooth: hci_bcsp: don't call kfree_skb() under spin_lock_irqsave() Bluetooth: hci_core: don't call kfree_skb() under spin_lock_irqsave() Bluetooth: RFCOMM: don't call kfree_skb() under spin_lock_irqsave() stmmac: fix potential division by 0 i40e: Fix the inability to attach XDP program on downed interface net: dsa: tag_8021q: avoid leaking ctx on dsa_tag_8021q_register() error path apparmor: fix a memleak in multi_transaction_new() apparmor: fix lockdep warning when removing a namespace apparmor: Fix abi check to include v8 abi crypto: hisilicon/qm - fix missing destroy qp_idr crypto: sun8i-ss - use dma_addr instead u32 crypto: nitrox - avoid double free on error path in nitrox_sriov_init() scsi: core: Fix a race between scsi_done() and scsi_timeout() apparmor: Use pointer to struct aa_label for lbs_cred PCI: dwc: Fix n_fts[] array overrun RDMA/core: Fix order of nldev_exit call PCI: pci-epf-test: Register notifier if only core_init_notifier is enabled f2fs: Fix the race condition of resize flag between resizefs crypto: rockchip - do not do custom power management crypto: rockchip - do not store mode globally crypto: rockchip - add fallback for cipher crypto: rockchip - add fallback for ahash crypto: rockchip - better handle cipher key crypto: rockchip - remove non-aligned handling crypto: rockchip - rework by using crypto_engine apparmor: Fix memleak in alloc_ns() f2fs: fix to invalidate dcc->f2fs_issue_discard in error path f2fs: fix normal discard process f2fs: fix to destroy sbi->post_read_wq in error path of f2fs_fill_super() RDMA/irdma: Report the correct link speed scsi: qla2xxx: Fix set-but-not-used variable warnings RDMA/siw: Fix immediate work request flush to completion queue IB/mad: Don't call to function that might sleep while in atomic context PCI: vmd: Disable MSI remapping after suspend RDMA/restrack: Release MR restrack when delete RDMA/core: Make sure "ib_port" is valid when access sysfs node RDMA/nldev: Return "-EAGAIN" if the cm_id isn't from expected port RDMA/siw: Set defined status for work completion with undefined status scsi: scsi_debug: Fix a warning in resp_write_scat() crypto: ccree - Remove debugfs when platform_driver_register failed crypto: cryptd - Use request context instead of stack for sub-request crypto: hisilicon/qm - add missing pci_dev_put() in q_num_set() RDMA/hns: Repacing 'dseg_len' by macros in fill_ext_sge_inl_data() RDMA/hns: Fix ext_sge num error when post send PCI: Check for alloc failure in pci_request_irq() RDMA/hfi: Decrease PCI device reference count in error path crypto: ccree - Make cc_debugfs_global_fini() available for module init function RDMA/hns: fix memory leak in hns_roce_alloc_mr() RDMA/rxe: Fix NULL-ptr-deref in rxe_qp_do_cleanup() when socket create failed dt-bindings: imx6q-pcie: Fix clock names for imx6sx and imx8mq dt-bindings: visconti-pcie: Fix interrupts array max constraints scsi: hpsa: Fix possible memory leak in hpsa_init_one() crypto: tcrypt - Fix multibuffer skcipher speed test mem leak padata: Always leave BHs disabled when running ->parallel() padata: Fix list iterator in padata_do_serial() scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add() scsi: hpsa: Fix error handling in hpsa_add_sas_host() scsi: hpsa: Fix possible memory leak in hpsa_add_sas_device() scsi: efct: Fix possible memleak in efct_device_init() scsi: scsi_debug: Fix a warning in resp_verify() scsi: scsi_debug: Fix a warning in resp_report_zones() scsi: fcoe: Fix possible name leak when device_register() fails scsi: scsi_debug: Fix possible name leak in sdebug_add_host_helper() scsi: ipr: Fix WARNING in ipr_init() scsi: fcoe: Fix transport not deattached when fcoe_if_init() fails scsi: snic: Fix possible UAF in snic_tgt_create() RDMA/nldev: Add checks for nla_nest_start() in fill_stat_counter_qps() f2fs: avoid victim selection from previous victim section RDMA/nldev: Fix failure to send large messages crypto: amlogic - Remove kcalloc without check crypto: omap-sham - Use pm_runtime_resume_and_get() in omap_sham_probe() riscv/mm: add arch hook arch_clear_hugepage_flags RDMA/hfi1: Fix error return code in parse_platform_config() RDMA/srp: Fix error return code in srp_parse_options() PCI: mt7621: Rename mt7621_pci_ to mt7621_pcie_ PCI: mt7621: Add sentinel to quirks table orangefs: Fix sysfs not cleanup when dev init failed RDMA/hns: Fix AH attr queried by query_qp RDMA/hns: Fix PBL page MTR find RDMA/hns: Fix page size cap from firmware RDMA/hns: Fix error code of CMD crypto: img-hash - Fix variable dereferenced before check 'hdev->req' hwrng: amd - Fix PCI device refcount leak hwrng: geode - Fix PCI device refcount leak IB/IPoIB: Fix queue count inconsistency for PKEY child interfaces RISC-V: Align the shadow stack drivers: dio: fix possible memory leak in dio_init() serial: tegra: Read DMA status before terminating serial: 8250_bcm7271: Fix error handling in brcmuart_init() class: fix possible memory leak in __class_register() vfio: platform: Do not pass return buffer to ACPI _RST method uio: uio_dmem_genirq: Fix missing unlock in irq configuration uio: uio_dmem_genirq: Fix deadlock between irq config and handling usb: fotg210-udc: Fix ages old endianness issues staging: vme_user: Fix possible UAF in tsi148_dma_list_add usb: typec: Check for ops->exit instead of ops->enter in altmode_exit usb: typec: tcpci: fix of node refcount leak in tcpci_register_port() usb: typec: tipd: Cleanup resources if devm_tps6598_psy_register fails usb: typec: tipd: Fix spurious fwnode_handle_put in error path extcon: usbc-tusb320: Add support for mode setting and reset extcon: usbc-tusb320: Add support for TUSB320L usb: typec: Factor out non-PD fwnode properties extcon: usbc-tusb320: Factor out extcon into dedicated functions extcon: usbc-tusb320: Add USB TYPE-C support extcon: usbc-tusb320: Update state on probe even if no IRQ pending serial: amba-pl011: avoid SBSA UART accessing DMACR register serial: pl011: Do not clear RX FIFO & RX interrupt in unthrottle. serial: stm32: move dma_request_chan() before clk_prepare_enable() serial: pch: Fix PCI device refcount leak in pch_request_dma() tty: serial: clean up stop-tx part in altera_uart_tx_chars() tty: serial: altera_uart_{r,t}x_chars() need only uart_port serial: altera_uart: fix locking in polling mode serial: sunsab: Fix error handling in sunsab_init() test_firmware: fix memory leak in test_firmware_init() misc: ocxl: fix possible name leak in ocxl_file_register_afu() ocxl: fix pci device refcount leak when calling get_function_0() misc: tifm: fix possible memory leak in tifm_7xx1_switch_media() misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os firmware: raspberrypi: fix possible memory leak in rpi_firmware_probe() cxl: fix possible null-ptr-deref in cxl_guest_init_afu|adapter() cxl: fix possible null-ptr-deref in cxl_pci_init_afu|adapter() iio: temperature: ltc2983: make bulk write buffer DMA-safe iio: adis: handle devices that cannot unmask the drdy pin iio: adis: stylistic changes iio:imu:adis: Move exports into IIO_ADISLIB namespace iio: adis: add '__adis_enable_irq()' implementation counter: stm32-lptimer-cnt: fix the check on arr and cmp registers update coresight: trbe: remove cpuhp instance node before remove cpuhp state usb: roles: fix of node refcount leak in usb_role_switch_is_parent() usb: gadget: f_hid: fix f_hidg lifetime vs cdev usb: gadget: f_hid: fix refcount leak on error path drivers: mcb: fix resource leak in mcb_probe() mcb: mcb-parse: fix error handing in chameleon_parse_gdd() chardev: fix error handling in cdev_device_add() i2c: pxa-pci: fix missing pci_disable_device() on error in ce4100_i2c_probe staging: rtl8192u: Fix use after free in ieee80211_rx() staging: rtl8192e: Fix potential use-after-free in rtllib_rx_Monitor() vme: Fix error not catched in fake_init() gpiolib: Get rid of redundant 'else' gpiolib: cdev: fix NULL-pointer dereferences gpiolib: make struct comments into real kernel docs gpiolib: protect the GPIO device against being dropped while in use by user-space i2c: mux: reg: check return value after calling platform_get_resource() i2c: ismt: Fix an out-of-bounds bug in ismt_access() usb: storage: Add check for kcalloc tracing/hist: Fix issue of losting command info in error_log ksmbd: Fix resource leak in ksmbd_session_rpc_open() samples: vfio-mdev: Fix missing pci_disable_device() in mdpy_fb_probe() thermal/drivers/imx8mm_thermal: Validate temperature range thermal/drivers/qcom/temp-alarm: Fix inaccurate warning for gen2 thermal/drivers/qcom/lmh: Fix irq handler return value fbdev: ssd1307fb: Drop optional dependency fbdev: pm2fb: fix missing pci_disable_device() fbdev: via: Fix error in via_core_init() fbdev: vermilion: decrease reference count in error path fbdev: ep93xx-fb: Add missing clk_disable_unprepare in ep93xxfb_probe() fbdev: geode: don't build on UML fbdev: uvesafb: don't build on UML fbdev: uvesafb: Fixes an error handling path in uvesafb_probe() HSI: omap_ssi_core: fix unbalanced pm_runtime_disable() HSI: omap_ssi_core: fix possible memory leak in ssi_probe() power: supply: fix residue sysfs file in error handle route of __power_supply_register() perf trace: Return error if a system call doesn't exist perf trace: Use macro RAW_SYSCALL_ARGS_NUM to replace number perf trace: Handle failure when trace point folder is missed perf symbol: correction while adjusting symbol power: supply: z2_battery: Fix possible memleak in z2_batt_probe() HSI: omap_ssi_core: Fix error handling in ssi_init() power: supply: ab8500: Fix error handling in ab8500_charger_init() power: supply: fix null pointer dereferencing in power_supply_get_battery_info perf stat: Refactor __run_perf_stat() common code perf stat: Do not delay the workload with --delay RDMA/siw: Fix pointer cast warning fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst() overflow: Implement size_t saturating arithmetic helpers fs/ntfs3: Harden against integer overflows iommu/sun50i: Fix reset release iommu/sun50i: Consider all fault sources for reset iommu/sun50i: Fix R/W permission check iommu/sun50i: Fix flush size iommu/rockchip: fix permission bits in page table entries v2 phy: usb: s2 WoL wakeup_count not incremented for USB->Eth devices include/uapi/linux/swab: Fix potentially missing __always_inline pwm: tegra: Improve required rate calculation fs/ntfs3: Fix slab-out-of-bounds read in ntfs_trim_fs dmaengine: idxd: Fix crc_val field for completion record rtc: rtc-cmos: Do not check ACPI_FADT_LOW_POWER_S0 rtc: cmos: Fix event handler registration ordering issue rtc: cmos: Fix wake alarm breakage rtc: cmos: fix build on non-ACPI platforms rtc: cmos: Call cmos_wake_setup() from cmos_do_probe() rtc: cmos: Call rtc_wake_setup() from cmos_do_probe() rtc: cmos: Eliminate forward declarations of some functions rtc: cmos: Rename ACPI-related functions rtc: cmos: Disable ACPI RTC event on removal rtc: snvs: Allow a time difference on clock register read rtc: pcf85063: Fix reading alarm iommu/amd: Fix pci device refcount leak in ppr_notifier() iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe() macintosh: fix possible memory leak in macio_add_one_device() macintosh/macio-adb: check the return value of ioremap() powerpc/52xx: Fix a resource leak in an error handling path cxl: Fix refcount leak in cxl_calc_capp_routing powerpc/xmon: Fix -Wswitch-unreachable warning in bpt_cmds powerpc/xive: add missing iounmap() in error path in xive_spapr_populate_irq_data() powerpc/perf: callchain validate kernel stack pointer bounds powerpc/83xx/mpc832x_rdb: call platform_device_put() in error case in of_fsl_spi_probe() powerpc/hv-gpci: Fix hv_gpci event list selftests/powerpc: Fix resource leaks iommu/sun50i: Remove IOMMU_DOMAIN_IDENTITY pwm: sifive: Call pwm_sifive_update_clock() while mutex is held pwm: mtk-disp: Fix the parameters calculated by the enabled flag of disp_pwm pwm: mediatek: always use bus clock for PWM on MT7622 remoteproc: sysmon: fix memory leak in qcom_add_sysmon_subdev() remoteproc: qcom: q6v5: Fix potential null-ptr-deref in q6v5_wcss_init_mmio() remoteproc: qcom_q6v5_pas: disable wakeup on probe fail or remove remoteproc: qcom_q6v5_pas: detach power domains on remove remoteproc: qcom_q6v5_pas: Fix missing of_node_put() in adsp_alloc_memory_region() remoteproc: qcom: q6v5: Fix missing clk_disable_unprepare() in q6v5_wcss_qcs404_power_on() powerpc/eeh: Drop redundant spinlock initialization powerpc/pseries/eeh: use correct API for error log size mfd: bd957x: Fix Kconfig dependency on REGMAP_IRQ mfd: qcom_rpm: Fix an error handling path in qcom_rpm_probe() mfd: pm8008: Remove driver data structure pm8008_data mfd: pm8008: Fix return value check in pm8008_probe() netfilter: flowtable: really fix NAT IPv6 offload rtc: st-lpc: Add missing clk_disable_unprepare in st_rtc_probe() rtc: pic32: Move devm_rtc_allocate_device earlier in pic32_rtc_probe() rtc: pcf85063: fix pcf85063_clkout_control nfsd: under NFSv4.1, fix double svc_xprt_put on rpc_create failure net: macsec: fix net device access prior to holding a lock mISDN: hfcsusb: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() mISDN: hfcpci: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() mISDN: hfcmulti: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() block, bfq: fix possible uaf for 'bfqq->bic' selftests/bpf: Add test for unstable CT lookup API net: enetc: avoid buffer leaks on xdp_do_redirect() failure nfc: pn533: Clear nfc_target before being used unix: Fix race in SOCK_SEQPACKET's unix_dgram_sendmsg() r6040: Fix kmemleak in probe and remove igc: Enhance Qbv scheduling by using first flag bit igc: Use strict cycles for Qbv scheduling igc: Add checking for basetime less than zero igc: allow BaseTime 0 enrollment for Qbv igc: recalculate Qbv end_time by considering cycle time igc: Lift TAPRIO schedule restriction igc: Set Qbv start_time and end_time to end_time if not being configured in GCL rtc: mxc_v2: Add missing clk_disable_unprepare() selftests: devlink: fix the fd redirect in dummy_reporter_test openvswitch: Fix flow lookup to use unmasked key soc: mediatek: pm-domains: Fix the power glitch issue arm64: dts: mt8183: Fix Mali GPU clock skbuff: Account for tail adjustment during pull operations mailbox: mpfs: read the system controller's status mailbox: arm_mhuv2: Fix return value check in mhuv2_probe() mailbox: zynq-ipi: fix error handling while device_register() fails net_sched: reject TCF_EM_SIMPLE case for complex ematch module rxrpc: Fix missing unlock in rxrpc_do_sendmsg() myri10ge: Fix an error handling path in myri10ge_probe() net: stream: purge sk_error_queue in sk_stream_kill_queues() HID: amd_sfh: Add missing check for dma_alloc_coherent rcu: Fix __this_cpu_read() lockdep warning in rcu_force_quiescent_state() arm64: make is_ttbrX_addr() noinstr-safe video: hyperv_fb: Avoid taking busy spinlock on panic path x86/hyperv: Remove unregister syscore call from Hyper-V cleanup binfmt_misc: fix shift-out-of-bounds in check_special_flags fs: jfs: fix shift-out-of-bounds in dbAllocAG udf: Avoid double brelse() in udf_rename() jfs: Fix fortify moan in symlink fs: jfs: fix shift-out-of-bounds in dbDiscardAG ACPICA: Fix error code path in acpi_ds_call_control_method() nilfs2: fix shift-out-of-bounds/overflow in nilfs_sb2_bad_offset() nilfs2: fix shift-out-of-bounds due to too large exponent of block size acct: fix potential integer overflow in encode_comp_t() hfs: fix OOB Read in __hfs_brec_find drm/etnaviv: add missing quirks for GC300 media: imx-jpeg: Disable useless interrupt to avoid kernel panic brcmfmac: return error when getting invalid max_flowrings from dongle wifi: ath9k: verify the expected usb_endpoints are present wifi: ar5523: Fix use-after-free on ar5523_cmd() timed out ASoC: codecs: rt298: Add quirk for KBL-R RVP platform ipmi: fix memleak when unload ipmi driver drm/amd/display: prevent memory leak Revert "drm/amd/display: Limit max DSC target bpp for specific monitors" qed (gcc13): use u16 for fid to be big enough bpf: make sure skb->len != 0 when redirecting to a tunneling device net: ethernet: ti: Fix return type of netcp_ndo_start_xmit() hamradio: baycom_epp: Fix return type of baycom_send_packet() wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmf_fw_alloc_request() igb: Do not free q_vector unless new one was allocated drm/amdgpu: Fix type of second parameter in trans_msg() callback drm/amdgpu: Fix type of second parameter in odn_edit_dpm_table() callback s390/ctcm: Fix return type of ctc{mp,}m_tx() s390/netiucv: Fix return type of netiucv_tx() s390/lcs: Fix return type of lcs_start_xmit() drm/msm: Use drm_mode_copy() drm/rockchip: Use drm_mode_copy() drm/sti: Use drm_mode_copy() drm/mediatek: Fix return type of mtk_hdmi_bridge_mode_valid() drivers/md/md-bitmap: check the return value of md_bitmap_get_counter() md/raid1: stop mdx_raid1 thread when raid1 array run failed drm/amd/display: fix array index out of bound error in bios parser net: add atomic_long_t to net_device_stats fields ipv6/sit: use DEV_STATS_INC() to avoid data-races mrp: introduce active flags to prevent UAF when applicant uninit ppp: associate skb with a device at tx bpf: Prevent decl_tag from being referenced in func_proto arg ethtool: avoiding integer overflow in ethtool_phys_id() media: dvb-frontends: fix leak of memory fw media: dvbdev: adopts refcnt to avoid UAF media: dvb-usb: fix memory leak in dvb_usb_adapter_init() blk-mq: fix possible memleak when register 'hctx' failed drm/amd/display: Use the largest vready_offset in pipe group libbpf: Avoid enum forward-declarations in public API in C++ mode regulator: core: fix use_count leakage when handling boot-on wifi: mt76: do not run mt76u_status_worker if the device is not running mmc: f-sdh30: Add quirks for broken timeout clock capability mmc: renesas_sdhi: better reset from HS400 mode media: si470x: Fix use-after-free in si470x_int_in_callback() clk: st: Fix memory leak in st_of_quadfs_setup() crypto: hisilicon/hpre - fix resource leak in remove process scsi: lpfc: Fix hard lockup when reading the rx_monitor from debugfs scsi: ufs: Reduce the START STOP UNIT timeout scsi: elx: libefc: Fix second parameter type in state callbacks hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param() drm/fsl-dcu: Fix return type of fsl_dcu_drm_connector_mode_valid() drm/sti: Fix return type of sti_{dvo,hda,hdmi}_connector_mode_valid() orangefs: Fix kmemleak in orangefs_prepare_debugfs_help_string() orangefs: Fix kmemleak in orangefs_{kernel,client}_debug_init() tools/include: Add _RET_IP_ and math definitions to kernel.h KVM: selftests: Fix build regression by using accessor function hwmon: (jc42) Fix missing unlock on error in jc42_write() ALSA/ASoC: hda: move/rename snd_hdac_ext_stop_streams to hdac_stream.c ALSA: hda: add snd_hdac_stop_streams() helper ASoC: Intel: Skylake: Fix driver hang during shutdown ASoC: mediatek: mt8173-rt5650-rt5514: fix refcount leak in mt8173_rt5650_rt5514_dev_probe() ASoC: audio-graph-card: fix refcount leak of cpu_ep in __graph_for_each_link() ASoC: rockchip: pdm: Add missing clk_disable_unprepare() in rockchip_pdm_runtime_resume() ASoC: mediatek: mt8183: fix refcount leak in mt8183_mt6358_ts3a227_max98357_dev_probe() ASoC: wm8994: Fix potential deadlock ASoC: rockchip: spdif: Add missing clk_disable_unprepare() in rk_spdif_runtime_resume() ASoC: rt5670: Remove unbalanced pm_runtime_put() drm/i915/display: Don't disable DDI/Transcoder when setting phy test pattern LoadPin: Ignore the "contents" argument of the LSM hooks pstore: Switch pmsg_lock to an rt_mutex to avoid priority inversion perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() afs: Fix lost servers_outstanding count pstore: Make sure CONFIG_PSTORE_PMSG selects CONFIG_RT_MUTEXES ima: Simplify ima_lsm_copy_rule ALSA: usb-audio: add the quirk for KT0206 device ALSA: hda/realtek: Add quirk for Lenovo TianYi510Pro-14IOB ALSA: hda/hdmi: Add HP Device 0x8711 to force connect list usb: cdnsp: fix lack of ZLP for ep0 usb: xhci-mtk: fix leakage of shared hcd when fail to set wakeup irq arm64: dts: qcom: sm8250: fix USB-DP PHY registers usb: dwc3: Fix race between dwc3_set_mode and __dwc3_set_mode usb: dwc3: core: defer probe on ulpi_read_id timeout xhci: Prevent infinite loop in transaction errors recovery for streams HID: wacom: Ensure bootloader PID is usable in hidraw mode HID: mcp2221: don't connect hidraw loop: Fix the max_loop commandline argument treatment when it is set to 0 9p: set req refcount to zero to avoid uninitialized usage security: Restrict CONFIG_ZERO_CALL_USED_REGS to gcc or clang > 15.0.6 reiserfs: Add missing calls to reiserfs_security_free() iio: fix memory leak in iio_device_register_eventset() iio: adc: ad_sigma_delta: do not use internal iio_dev lock iio: adc128s052: add proper .data members in adc128_of_match table regulator: core: fix deadlock on regulator enable floppy: Fix memory leak in do_floppy_init() gcov: add support for checksum field fbdev: fbcon: release buffer when fbcon_do_set_font() failed ovl: fix use inode directly in rcu-walk mode btrfs: do not BUG_ON() on ENOMEM when dropping extent items for a range scsi: qla2xxx: Fix crash when I/O abort times out net: stmmac: fix errno when create_singlethread_workqueue() fails media: dvbdev: fix build warning due to comments media: dvbdev: fix refcnt bug extcon: usbc-tusb320: Call the Type-C IRQ handler only if a port is registered mfd: qcom_rpm: Use devm_of_platform_populate() to simplify code pwm: tegra: Fix 32 bit build Linux 5.15.86 Change-Id: I4ec30b690e8dbd554044495e26360a86cc042069 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-01-30 14:44:15 +00:00
Greg Kroah-Hartman	112ff45bb5	Merge 5.15.82 into android13-5.15-lts ... Changes in 5.15.82 arm64: mte: Avoid setting PG_mte_tagged if no tags cleared or restored drm/i915: Create a dummy object for gen6 ppgtt drm/i915/gt: Use i915_vm_put on ppgtt_create error paths erofs: fix order >= MAX_ORDER warning due to crafted negative i_size btrfs: sink iterator parameter to btrfs_ioctl_logical_to_ino btrfs: free btrfs_path before copying inodes to userspace spi: spi-imx: Fix spi_bus_clk if requested clock is higher than input clock btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit() drm/display/dp_mst: Fix drm_dp_mst_add_affected_dsc_crtcs() return code drm/amdgpu: update drm_display_info correctly when the edid is read drm/amdgpu: Partially revert "drm/amdgpu: update drm_display_info correctly when the edid is read" iio: health: afe4403: Fix oob read in afe4403_read_raw iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw iio: light: rpr0521: add missing Kconfig dependencies bpf, perf: Use subprog name when reporting subprog ksymbol scripts/faddr2line: Fix regression in name resolution on ppc64le ARM: at91: rm9200: fix usb device clock id libbpf: Handle size overflow for ringbuf mmap hwmon: (ltc2947) fix temperature scaling hwmon: (ina3221) Fix shunt sum critical calculation hwmon: (i5500_temp) fix missing pci_disable_device() hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails bpf: Do not copy spin lock field from user in bpf_selem_alloc nvmem: rmem: Fix return value check in rmem_read() of: property: decrement node refcount in of_fwnode_get_reference_args() ixgbevf: Fix resource leak in ixgbevf_init_module() i40e: Fix error handling in i40e_init_module() fm10k: Fix error handling in fm10k_init_module() iavf: remove redundant ret variable iavf: Fix error handling in iavf_init_module() e100: Fix possible use after free in e100_xmit_prepare net/mlx5: DR, Rename list field in matcher struct to list_node net/mlx5: DR, Fix uninitialized var warning net/mlx5: Fix uninitialized variable bug in outlen_write() net/mlx5e: Fix use-after-free when reverting termination table can: sja1000_isa: sja1000_isa_probe(): add missing free_sja1000dev() can: cc770: cc770_isa_probe(): add missing free_cc770dev() can: etas_es58x: es58x_init_netdev(): free netdev when register_candev() can: m_can: pci: add missing m_can_class_free_dev() in probe/remove methods can: m_can: Add check for devm_clk_get qlcnic: fix sleep-in-atomic-context bugs caused by msleep aquantia: Do not purge addresses when setting the number of rings wifi: cfg80211: fix buffer overflow in elem comparison wifi: cfg80211: don't allow multi-BSSID in S1G wifi: mac8021: fix possible oob access in ieee80211_get_rate_duration net: phy: fix null-ptr-deref while probe() failed net: ethernet: ti: am65-cpsw: fix error handling in am65_cpsw_nuss_probe() net: net_netdev: Fix error handling in ntb_netdev_init_module() net/9p: Fix a potential socket leak in p9_socket_open net: ethernet: nixge: fix NULL dereference net: wwan: iosm: fix kernel test robot reported error net: wwan: iosm: fix dma_alloc_coherent incompatible pointer type dsa: lan9303: Correct stat name tipc: re-fetch skb cb after tipc_msg_validate net: hsr: Fix potential use-after-free net: mdiobus: fix unbalanced node reference count afs: Fix fileserver probe RTT handling net: tun: Fix use-after-free in tun_detach() packet: do not set TP_STATUS_CSUM_VALID on CHECKSUM_COMPLETE sctp: fix memory leak in sctp_stream_outq_migrate() net: ethernet: renesas: ravb: Fix promiscuous mode after system resumed hwmon: (coretemp) Check for null before removing sysfs attrs hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() riscv: vdso: fix section overlapping under some conditions riscv: mm: Proper page permissions after initmem free ALSA: dice: fix regression for Lexicon I-ONIX FW810S error-injection: Add prompt for function error injection tools/vm/slabinfo-gnuplot: use "grep -E" instead of "egrep" nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry() x86/bugs: Make sure MSR_SPEC_CTRL is updated properly upon resume from S3 pinctrl: intel: Save and restore pins in "direct IRQ" mode v4l2: don't fall back to follow_pfn() if pin_user_pages_fast() fails net: stmmac: Set MAC's flow control register to reflect current settings mmc: mmc_test: Fix removal of debugfs file mmc: core: Fix ambiguous TRIM and DISCARD arg mmc: sdhci-esdhc-imx: correct CQHCI exit halt state check mmc: sdhci-sprd: Fix no reset data and command after voltage switch mmc: sdhci: Fix voltage switch delay drm/amdgpu: temporarily disable broken Clang builds due to blown stack-frame drm/amdgpu: enable Vangogh VCN indirect sram mode drm/i915: Fix negative value passed as remaining time drm/i915: Never return 0 if not all requests retired tracing/osnoise: Fix duration type tracing: Fix race where histograms can be called before the event tracing: Free buffers when a used dynamic event is removed io_uring: update res mask in io_poll_check_events io_uring: fix tw losing poll events io_uring: cmpxchg for poll arm refs release io_uring: make poll refs more robust io_uring/poll: fix poll_refs race with cancelation KVM: x86/mmu: Fix race condition in direct_page_fault ASoC: ops: Fix bounds check for _sx controls pinctrl: single: Fix potential division by zero riscv: Sync efi page table's kernel mappings before switching riscv: fix race when vmap stack overflow riscv: kexec: Fixup irq controller broken in kexec crash path nvme: fix SRCU protection of nvme_ns_head list iommu/vt-d: Fix PCI device refcount leak in has_external_pci() iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init() mm: __isolate_lru_page_prepare() in isolate_migratepages_block() mm: migrate: fix THP's mapcount on isolation parisc: Increase FRAME_WARN to 2048 bytes on parisc Kconfig.debug: provide a little extra FRAME_WARN leeway when KASAN is enabled selftests: net: add delete nexthop route warning test selftests: net: fix nexthop warning cleanup double ip typo ipv4: Handle attempt to delete multipath route when fib_info contains an nh reference ipv4: Fix route deletion when nexthop info is not specified serial: stm32: Factor out GPIO RTS toggling into separate function serial: stm32: Use TC interrupt to deassert GPIO RTS in RS485 mode serial: stm32: Deassert Transmit Enable on ->rs485_config() i2c: npcm7xx: Fix error handling in npcm_i2c_init() i2c: imx: Only DMA messages with I2C_M_DMA_SAFE flag set ACPI: HMAT: remove unnecessary variable initialization ACPI: HMAT: Fix initiator registration for single-initiator systems Revert "clocksource/drivers/riscv: Events are stopped during CPU suspend" char: tpm: Protect tpm_pm_suspend with locks Input: raydium_ts_i2c - fix memory leak in raydium_i2c_send() ipc/sem: Fix dangling sem_array access in semtimedop race proc: avoid integer type confusion in get_proc_long proc: proc_skip_spaces() shouldn't think it is working on C strings Linux 5.15.82 Change-Id: I4ce52cb5917c9036339810c816ab005a4e9489fb Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-01-27 08:22:55 +00:00
Dan Carpenter	bfce073089	ipmi: fix use after free in _ipmi_destroy_user() ... commit a92ce570c81dc0feaeb12a429b4bc65686d17967 upstream. The intf_free() function frees the "intf" pointer so we cannot dereference it again on the next line. Fixes: cbb79863fc ("ipmi: Don't allow device module unload when in use") Signed-off-by: Dan Carpenter <error27@gmail.com> Message-Id: <Y3M8xa1drZv4CToE@kili> Cc: <stable@vger.kernel.org> # 5.5+ Signed-off-by: Corey Minyard <cminyard@mvista.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-01-12 11:58:57 +01:00
Zhang Yuchen	24f4649cd8	ipmi: fix long wait in unload when IPMI disconnect ... commit f6f1234d98cce69578bfac79df147a1f6660596c upstream. When fixing the problem mentioned in PATCH1, we also found the following problem: If the IPMI is disconnected and in the sending process, the uninstallation driver will be stuck for a long time. The main problem is that uninstalling the driver waits for curr_msg to be sent or HOSED. After stopping tasklet, the only place to trigger the timeout mechanism is the circular poll in shutdown_smi. The poll function delays 10us and calls smi_event_handler(smi_info,10). Smi_event_handler deducts 10us from kcs->ibf_timeout. But the poll func is followed by schedule_timeout_uninterruptible(1). The time consumed here is not counted in kcs->ibf_timeout. So when 10us is deducted from kcs->ibf_timeout, at least 1 jiffies has actually passed. The waiting time has increased by more than a hundredfold. Now instead of calling poll(). call smi_event_handler() directly and calculate the elapsed time. For verification, you can directly use ebpf to check the kcs-> ibf_timeout for each call to kcs_event() when IPMI is disconnected. Decrement at normal rate before unloading. The decrement rate becomes very slow after unloading. $ bpftrace -e 'kprobe:kcs_event {printf("kcs->ibftimeout : %d\n", *(arg0+584));}' Signed-off-by: Zhang Yuchen <zhangyuchen.lcr@bytedance.com> Message-Id: <20221007092617.87597-3-zhangyuchen.lcr@bytedance.com> Signed-off-by: Corey Minyard <cminyard@mvista.com> Cc: stable@vger.kernel.org Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-01-12 11:58:57 +01:00
Hanjun Guo	43135fb098	tpm: tpm_tis: Add the missed acpi_put_table() to fix memory leak ... commit db9622f762104459ff87ecdf885cc42c18053fd9 upstream. In check_acpi_tpm2(), we get the TPM2 table just to make sure the table is there, not used after the init, so the acpi_put_table() should be added to release the ACPI memory. Fixes: 4cb586a188 ("tpm_tis: Consolidate the platform and acpi probe flow") Cc: stable@vger.kernel.org Signed-off-by: Hanjun Guo <guohanjun@huawei.com> Signed-off-by: Jarkko Sakkinen <jarkko@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-01-12 11:58:48 +01:00
Hanjun Guo	986cd9a9b9	tpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak ... commit 37e90c374dd11cf4919c51e847c6d6ced0abc555 upstream. In crb_acpi_add(), we get the TPM2 table to retrieve information like start method, and then assign them to the priv data, so the TPM2 table is not used after the init, should be freed, call acpi_put_table() to fix the memory leak. Fixes: 30fc8d138e ("tpm: TPM 2.0 CRB Interface") Cc: stable@vger.kernel.org Signed-off-by: Hanjun Guo <guohanjun@huawei.com> Reviewed-by: Jarkko Sakkinen <jarkko@kernel.org> Signed-off-by: Jarkko Sakkinen <jarkko@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-01-12 11:58:48 +01:00
Hanjun Guo	638cd298df	tpm: acpi: Call acpi_put_table() to fix memory leak ... commit 8740a12ca2e2959531ad253bac99ada338b33d80 upstream. The start and length of the event log area are obtained from TPM2 or TCPA table, so we call acpi_get_table() to get the ACPI information, but the acpi_get_table() should be coupled with acpi_put_table() to release the ACPI memory, add the acpi_put_table() properly to fix the memory leak. While we are at it, remove the redundant empty line at the end of the tpm_read_log_acpi(). Fixes: 0bfb237460 ("tpm: Move eventlog files to a subdirectory") Fixes: 85467f63a0 ("tpm: Add support for event log pointer found in TPM2 ACPI table") Cc: stable@vger.kernel.org Signed-off-by: Hanjun Guo <guohanjun@huawei.com> Reviewed-by: Jarkko Sakkinen <jarkko@kernel.org> Signed-off-by: Jarkko Sakkinen <jarkko@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-01-12 11:58:48 +01:00
Zhang Yuchen	49dd0e8029	ipmi: fix memleak when unload ipmi driver ... [ Upstream commit 36992eb6b9b83f7f9cdc8e74fb5799d7b52e83e9 ] After the IPMI disconnect problem, the memory kept rising and we tried to unload the driver to free the memory. However, only part of the free memory is recovered after the driver is uninstalled. Using ebpf to hook free functions, we find that neither ipmi_user nor ipmi_smi_msg is free, only ipmi_recv_msg is free. We find that the deliver_smi_err_response call in clean_smi_msgs does the destroy processing on each message from the xmit_msg queue without checking the return value and free ipmi_smi_msg. deliver_smi_err_response is called only at this location. Adding the free handling has no effect. To verify, try using ebpf to trace the free function. $ bpftrace -e 'kretprobe:ipmi_alloc_recv_msg {printf("alloc rcv %p\n",retval);} kprobe:free_recv_msg {printf("free recv %p\n", arg0)} kretprobe:ipmi_alloc_smi_msg {printf("alloc smi %p\n", retval);} kprobe:free_smi_msg {printf("free smi %p\n",arg0)}' Signed-off-by: Zhang Yuchen <zhangyuchen.lcr@bytedance.com> Message-Id: <20221007092617.87597-4-zhangyuchen.lcr@bytedance.com> [Fixed the comment above handle_one_recv_msg().] Signed-off-by: Corey Minyard <cminyard@mvista.com> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-12-31 13:14:41 +01:00
Xiongfeng Wang	82bd423ed9	hwrng: geode - Fix PCI device refcount leak ... [ Upstream commit 9f6ec8dc574efb7f4f3d7ee9cd59ae307e78f445 ] for_each_pci_dev() is implemented by pci_get_device(). The comment of pci_get_device() says that it will increase the reference count for the returned pci_dev and also decrease the reference count for the input pci_dev @from if it is not NULL. If we break for_each_pci_dev() loop with pdev not NULL, we need to call pci_dev_put() to decrease the reference count. We add a new struct 'amd_geode_priv' to record pointer of the pci_dev and membase, and then add missing pci_dev_put() for the normal and error path. Fixes: ef5d862734 ("[PATCH] Add Geode HW RNG driver") Signed-off-by: Xiongfeng Wang <wangxiongfeng2@huawei.com> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-12-31 13:14:26 +01:00
Xiongfeng Wang	2b79a5e560	hwrng: amd - Fix PCI device refcount leak ... [ Upstream commit ecadb5b0111ea19fc7c240bb25d424a94471eb7d ] for_each_pci_dev() is implemented by pci_get_device(). The comment of pci_get_device() says that it will increase the reference count for the returned pci_dev and also decrease the reference count for the input pci_dev @from if it is not NULL. If we break for_each_pci_dev() loop with pdev not NULL, we need to call pci_dev_put() to decrease the reference count. Add the missing pci_dev_put() for the normal and error path. Fixes: 96d63c0297 ("[PATCH] Add AMD HW RNG driver") Signed-off-by: Xiongfeng Wang <wangxiongfeng2@huawei.com> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-12-31 13:14:26 +01:00
Andrew Jeffery	f66a877083	ipmi: kcs: Poll OBF briefly to reduce OBE latency ... [ Upstream commit f90bc0f97f2b65af233a37b2e32fc81871a1e3cf ] The ASPEED KCS devices don't provide a BMC-side interrupt for the host reading the output data register (ODR). The act of the host reading ODR clears the output buffer full (OBF) flag in the status register (STR), informing the BMC it can transmit a subsequent byte. On the BMC side the KCS client must enable the OBE event *and* perform a subsequent read of STR anyway to avoid races - the polling provides a window for the host to read ODR if data was freshly written while minimising BMC-side latency. Fixes: 28651e6c42 ("ipmi: kcs_bmc: Allow clients to control KCS IRQ state") Signed-off-by: Andrew Jeffery <andrew@aj.id.au> Reviewed-by: Joel Stanley <joel@jms.id.au> Message-Id: <20220812144741.240315-1-andrew@aj.id.au> Signed-off-by: Corey Minyard <cminyard@mvista.com> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-12-31 13:14:06 +01:00
Michael Kelley	163c5bbe7d	tpm/tpm_crb: Fix error message in __crb_relinquish_locality() ... [ Upstream commit f5264068071964b56dc02c9dab3d11574aaca6ff ] The error message in __crb_relinquish_locality() mentions requestAccess instead of Relinquish. Fix it. Fixes: 888d867df4 ("tpm: cmd_ready command can be issued only after granting locality") Signed-off-by: Michael Kelley <mikelley@microsoft.com> Acked-by: Tomas Winkler <tomas.winkler@intel.com> Reviewed-by: Jarkko Sakkinen <jarkko@kernel.org> Signed-off-by: Jarkko Sakkinen <jarkko@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-12-31 13:14:00 +01:00
Yuan Can	fe880e9df9	tpm/tpm_ftpm_tee: Fix error handling in ftpm_mod_init() ... [ Upstream commit 2b7d07f7acaac2c7750e420dcf4414588ede6d03 ] The ftpm_mod_init() returns the driver_register() directly without checking its return value, if driver_register() failed, the ftpm_tee_plat_driver is not unregistered. Fix by unregister ftpm_tee_plat_driver when driver_register() failed. Fixes: 9f1944c23c ("tpm_ftpm_tee: register driver on TEE bus") Signed-off-by: Yuan Can <yuancan@huawei.com> Reviewed-by: Maxim Uvarov <maxim.uvarov@linaro.org> Acked-by: Jarkko Sakkinen <jarkko@kernel.org> Signed-off-by: Jarkko Sakkinen <jarkko@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-12-31 13:14:00 +01:00
Jan Dabros	571b6bbbf5	char: tpm: Protect tpm_pm_suspend with locks ... commit 23393c6461422df5bf8084a086ada9a7e17dc2ba upstream. Currently tpm transactions are executed unconditionally in tpm_pm_suspend() function, which may lead to races with other tpm accessors in the system. Specifically, the hw_random tpm driver makes use of tpm_get_random(), and this function is called in a loop from a kthread, which means it's not frozen alongside userspace, and so can race with the work done during system suspend: tpm tpm0: tpm_transmit: tpm_recv: error -52 tpm tpm0: invalid TPM_STS.x 0xff, dumping stack for forensics CPU: 0 PID: 1 Comm: init Not tainted 6.1.0-rc5+ #135 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.0-20220807_005459-localhost 04/01/2014 Call Trace: tpm_tis_status.cold+0x19/0x20 tpm_transmit+0x13b/0x390 tpm_transmit_cmd+0x20/0x80 tpm1_pm_suspend+0xa6/0x110 tpm_pm_suspend+0x53/0x80 __pnp_bus_suspend+0x35/0xe0 __device_suspend+0x10f/0x350 Fix this by calling tpm_try_get_ops(), which itself is a wrapper around tpm_chip_start(), but takes the appropriate mutex. Signed-off-by: Jan Dabros <jsd@semihalf.com> Reported-by: Vlastimil Babka <vbabka@suse.cz> Tested-by: Jason A. Donenfeld <Jason@zx2c4.com> Tested-by: Vlastimil Babka <vbabka@suse.cz> Link: https://lore.kernel.org/all/c5ba47ef-393f-1fba-30bd-1230d1b4b592@suse.cz/ Cc: stable@vger.kernel.org Fixes: e891db1a18 ("tpm: turn on TPM on suspend for TPM 1.x") [Jason: reworked commit message, added metadata] Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com> Reviewed-by: Jarkko Sakkinen <jarkko@kernel.org> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-12-08 11:28:45 +01:00
Greg Kroah-Hartman	b049ff121c	Merge 5.15.75 into android13-5.15-lts ... Changes in 5.15.75 Revert "fs: check FMODE_LSEEK to control internal pipe splicing" ALSA: oss: Fix potential deadlock at unregistration ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free() ALSA: usb-audio: Fix potential memory leaks ALSA: usb-audio: Fix NULL dererence at error path ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530 ALSA: hda/realtek: Correct pin configs for ASUS G533Z ALSA: hda/realtek: Add quirk for ASUS GV601R laptop ALSA: hda/realtek: Add Intel Reference SSID to support headset keys mtd: rawnand: atmel: Unmap streaming DMA mappings io_uring/net: don't update msg_name if not provided hv_netvsc: Fix race between VF offering and VF association message from host cifs: destage dirty pages before re-reading them for cache=none cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message iio: dac: ad5593r: Fix i2c read protocol requirements iio: ltc2497: Fix reading conversion results iio: adc: ad7923: fix channel readings for some variants iio: pressure: dps310: Refactor startup procedure iio: pressure: dps310: Reset chip after timeout xhci: dbc: Fix memory leak in xhci_alloc_dbc() usb: add quirks for Lenovo OneLink+ Dock can: kvaser_usb: Fix use of uninitialized completion can: kvaser_usb_leaf: Fix overread with an invalid command can: kvaser_usb_leaf: Fix TX queue out of sync after restart can: kvaser_usb_leaf: Fix CAN state after restart mmc: sdhci-sprd: Fix minimum clock limit i2c: designware: Fix handling of real but unexpected device interrupts fs: dlm: fix race between test_bit() and queue_work() fs: dlm: handle -EBUSY first in lock arg validation HID: multitouch: Add memory barriers quota: Check next/prev free block number after reading from quota file platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure ASoC: wcd9335: fix order of Slimbus unprepare/disable ASoC: wcd934x: fix order of Slimbus unprepare/disable hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API net: thunderbolt: Enable DMA paths only after rings are enabled regulator: qcom_rpm: Fix circular deferral regression arm64: topology: move store_cpu_topology() to shared code riscv: topology: fix default topology reporting RISC-V: Make port I/O string accessors actually work parisc: fbdev/stifb: Align graphics memory size to 4MB riscv: Allow PROT_WRITE-only mmap() riscv: Make VM_WRITE imply VM_READ riscv: always honor the CONFIG_CMDLINE_FORCE when parsing dtb riscv: Pass -mno-relax only on lld < 15.0.0 UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK nvmem: core: Fix memleak in nvmem_register() nvme-multipath: fix possible hang in live ns resize with ANA access nvme-pci: set min_align_mask before calculating max_hw_sectors Revert "drm/amdgpu: use dirty framebuffer helper" dmaengine: mxs: use platform_driver_register drm/virtio: Check whether transferred 2D BO is shmem drm/virtio: Unlock reservations on virtio_gpu_object_shmem_init() error drm/virtio: Use appropriate atomic state in virtio_gpu_plane_cleanup_fb() drm/udl: Restore display mode on resume arm64: errata: Add Cortex-A55 to the repeat tlbi list mm/damon: validate if the pmd entry is present before accessing mm/mmap: undo ->mmap() when arch_validate_flags() fails xen/gntdev: Prevent leaking grants xen/gntdev: Accommodate VMA splitting PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge serial: 8250: Let drivers request full 16550A feature probing serial: 8250: Request full 16550A feature probing for OxSemi PCIe devices NFSD: Protect against send buffer overflow in NFSv3 READDIR NFSD: Protect against send buffer overflow in NFSv2 READ NFSD: Protect against send buffer overflow in NFSv3 READ powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain powerpc/boot: Explicitly disable usage of SPE instructions slimbus: qcom-ngd: use correct error in message of pdr_add_lookup() failure slimbus: qcom-ngd: cleanup in probe error path scsi: qedf: Populate sysfs attributes for vport gpio: rockchip: request GPIO mux to pinctrl when setting direction pinctrl: rockchip: add pinmux_ops.gpio_set_direction callback fbdev: smscufx: Fix use-after-free in ufx_ops_open() ksmbd: fix endless loop when encryption for response fails ksmbd: Fix wrong return value and message length check in smb2_ioctl() ksmbd: Fix user namespace mapping fs: record I_DIRTY_TIME even if inode already has I_DIRTY_INODE btrfs: fix race between quota enable and quota rescan ioctl btrfs: set generation before calling btrfs_clean_tree_block in btrfs_init_new_buffer f2fs: complete checkpoints during remount f2fs: flush pending checkpoints when freezing super f2fs: increase the limit for reserve_root f2fs: fix to do sanity check on destination blkaddr during recovery f2fs: fix to do sanity check on summary info hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero jbd2: wake up journal waiters in FIFO order, not LIFO jbd2: fix potential buffer head reference count leak jbd2: fix potential use-after-free in jbd2_fc_wait_bufs jbd2: add miss release buffer head in fc_do_one_pass() ext4: avoid crash when inline data creation follows DIO write ext4: fix null-ptr-deref in ext4_write_info ext4: make ext4_lazyinit_thread freezable ext4: fix check for block being out of directory size ext4: don't increase iversion counter for ea_inodes ext4: ext4_read_bh_lock() should submit IO if the buffer isn't uptodate ext4: place buffer head allocation before handle start ext4: fix dir corruption when ext4_dx_add_entry() fails ext4: fix miss release buffer head in ext4_fc_write_inode ext4: fix potential memory leak in ext4_fc_record_modified_inode() ext4: fix potential memory leak in ext4_fc_record_regions() ext4: update 'state->fc_regions_size' after successful memory allocation livepatch: fix race between fork and KLP transition ftrace: Properly unset FTRACE_HASH_FL_MOD ring-buffer: Allow splice to read previous partially read pages ring-buffer: Have the shortest_full queue be the shortest not longest ring-buffer: Check pending waiters when doing wake ups as well ring-buffer: Add ring_buffer_wake_waiters() ring-buffer: Fix race between reset page and reading page tracing: Disable interrupt or preemption before acquiring arch_spinlock_t tracing: Wake up ring buffer waiters on closing of the file tracing: Wake up waiters when tracing is disabled tracing: Add ioctl() to force ring buffer waiters to wake up tracing: Move duplicate code of trace_kprobe/eprobe.c into header tracing: Add "(fault)" name injection to kernel probes tracing: Fix reading strings from synthetic events thunderbolt: Explicitly enable lane adapter hotplug events at startup efi: libstub: drop pointless get_memory_map() call media: cedrus: Set the platform driver data earlier media: cedrus: Fix endless loop in cedrus_h265_skip_bits() blk-wbt: call rq_qos_add() after wb_normal is initialized KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility KVM: nVMX: Unconditionally purge queued/injected events on nested "exit" KVM: nVMX: Don't propagate vmcs12's PERF_GLOBAL_CTRL settings to vmcs02 KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS staging: greybus: audio_helper: remove unused and wrong debugfs usage drm/nouveau/kms/nv140-: Disable interlacing drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table() drm/i915: Fix watermark calculations for gen12+ RC CCS modifier drm/i915: Fix watermark calculations for gen12+ MC CCS modifier drm/i915: Fix watermark calculations for gen12+ CCS+CC modifier drm/amd/display: Fix vblank refcount in vrr transition smb3: must initialize two ACL struct fields to zero selinux: use "grep -E" instead of "egrep" ima: fix blocking of security.ima xattrs of unsupported algorithms userfaultfd: open userfaultfds with O_RDONLY ntfs3: rework xattr handlers and switch to POSIX ACL VFS helpers thermal: cpufreq_cooling: Check the policy first in cpufreq_cooling_register() sh: machvec: Use char[] for section boundaries MIPS: SGI-IP27: Free some unused memory MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create() ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd() ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE objtool: Preserve special st_shndx indexes in elf_update_symbol nfsd: Fix a memory leak in an error handling path SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation SUNRPC: Fix svcxdr_init_encode's buflen calculation NFSD: Protect against send buffer overflow in NFSv2 READDIR NFSD: Fix handling of oversized NFSv4 COMPOUND requests wifi: rtlwifi: 8192de: correct checking of IQK reload wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state() leds: lm3601x: Don't use mutex after it was destroyed bpf: Fix reference state management for synchronous callbacks wifi: mac80211: allow bw change during channel switch in mesh bpftool: Fix a wrong type cast in btf_dumper_int spi: mt7621: Fix an error message in mt7621_spi_probe() x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register xsk: Fix backpressure mechanism on Tx bpf: Disable preemption when increasing per-cpu map_locked bpf: Propagate error from htab_lock_bucket() to userspace bpf: Use this_cpu_{inc|dec|inc_return} for bpf_task_storage_busy Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse() wifi: rtw88: add missing destroy_workqueue() on error path in rtw_core_init() selftests/xsk: Avoid use-after-free on ctx spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume() spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime() wifi: rtl8xxxu: Fix skb misuse in TX queue selection spi: meson-spicc: do not rely on busy flag in pow2 clk ops bpf: btf: fix truncated last_member_type_id in btf_struct_resolve wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask wifi: mt76: sdio: fix transmitting packet hangs wifi: mt76: mt7615: add mt7615_mutex_acquire/release in mt7615_sta_set_decap_offload wifi: mt76: mt7915: do not check state before configuring implicit beamform Bluetooth: RFCOMM: Fix possible deadlock on socket shutdown/release net: fs_enet: Fix wrong check in do_pd_setup bpf: Ensure correct locking around vulnerable function find_vpid() Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure netfilter: conntrack: fix the gc rescheduling delay netfilter: conntrack: revisit the gc initial rescheduling bias wifi: ath11k: fix number of VHT beamformee spatial streams x86/microcode/AMD: Track patch allocation size explicitly x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe skmsg: Schedule psock work if the cached skb exists on the psock i2c: mlxbf: support lock mechanism Bluetooth: hci_core: Fix not handling link timeouts propertly xfrm: Reinject transport-mode packets through workqueue netfilter: nft_fib: Fix for rpath check with VRF devices spi: s3c64xx: Fix large transfers with DMA wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM vhost/vsock: Use kvmalloc/kvfree for larger packets. eth: alx: take rtnl_lock on resume mISDN: fix use-after-free bugs in l1oip timer handlers sctp: handle the error returned from sctp_auth_asoc_init_active_key tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited spi: Ensure that sg_table won't be used after being freed hwmon: (pmbus/mp2888) Fix sensors readouts for MPS Multi-phase mp2888 controller net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks() bnx2x: fix potential memory leak in bnx2x_tpa_stop() net: wwan: iosm: Call mutex_init before locking it net/ieee802154: reject zero-sized raw_sendmsg() once: add DO_ONCE_SLOW() for sleepable contexts net: mvpp2: fix mvpp2 debugfs leak drm: bridge: adv7511: fix CEC power down control register offset drm: bridge: adv7511: unregister cec i2c device after cec adapter drm/bridge: Avoid uninitialized variable warning drm/mipi-dsi: Detach devices when removing the host drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling drm/bridge: parade-ps8640: Fix regulator supply order drm/dp_mst: fix drm_dp_dpcd_read return value checks drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node() ASoC: mt6359: fix tests for platform_get_irq() failure platform/chrome: fix double-free in chromeos_laptop_prepare() platform/chrome: fix memory corruption in ioctl ASoC: tas2764: Allow mono streams ASoC: tas2764: Drop conflicting set_bias_level power setting ASoC: tas2764: Fix mute/unmute platform/x86: msi-laptop: Fix old-ec check for backlight registering platform/x86: msi-laptop: Fix resource cleanup platform/chrome: cros_ec_typec: Correct alt mode index drm/amdgpu: add missing pci_disable_device() in amdgpu_pmops_runtime_resume() drm/bridge: megachips: Fix a null pointer dereference bug ASoC: rsnd: Add check for rsnd_mod_power_on ALSA: hda: beep: Simplify keep-power-at-enable behavior drm/bochs: fix blanking drm/omap: dss: Fix refcount leak bugs drm/amdgpu: Fix memory leak in hpd_rx_irq_create_workqueue() mmc: au1xmmc: Fix an error handling path in au1xmmc_probe() ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API drm/msm/dpu: index dpu_kms->hw_vbif using vbif_idx drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa() drm/vmwgfx: Fix memory leak in vmw_mksstat_add_ioctl() ASoC: codecs: tx-macro: fix kcontrol put ASoC: da7219: Fix an error handling path in da7219_register_dai_clks() ALSA: dmaengine: increment buffer pointer atomically mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe() ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe ALSA: hda/hdmi: Don't skip notification handling during PM operation memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe() memory: of: Fix refcount leak bug in of_get_ddr_timings() memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings() locks: fix TOCTOU race when granting write lease soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe() soc: qcom: smem_state: Add refcounting for the 'state->of_node' ARM: dts: imx6qdl-kontron-samx6i: hook up DDC i2c bus ARM: dts: turris-omnia: Fix mpp26 pin name and comment ARM: dts: kirkwood: lsxl: fix serial line ARM: dts: kirkwood: lsxl: remove first ethernet port ia64: export memory_add_physaddr_to_nid to fix cxl build error soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA arm64: dts: ti: k3-j7200: fix main pinmux range ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family ARM: Drop CMDLINE_* dependency on ATAGS ext4: don't run ext4lazyinit for read-only filesystems arm64: ftrace: fix module PLTs with mcount ARM: dts: exynos: fix polarity of VBUS GPIO of Origen iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX iio: adc: at91-sama5d2_adc: check return status for pressure and touch iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume iio: inkern: only release the device node when done with it iio: inkern: fix return value in devm_of_iio_channel_get_by_name() iio: ABI: Fix wrong format of differential capacitance channel ABI. iio: magnetometer: yas530: Change data type of hard_offsets to signed RDMA/mlx5: Don't compare mkey tags in DEVX indirect mkey usb: common: debug: Check non-standard control requests clk: meson: Hold reference returned by of_get_parent() clk: oxnas: Hold reference returned by of_get_parent() clk: qoriq: Hold reference returned by of_get_parent() clk: berlin: Add of_node_put() for of_get_parent() clk: sprd: Hold reference returned by of_get_parent() clk: tegra: Fix refcount leak in tegra210_clock_init clk: tegra: Fix refcount leak in tegra114_clock_init clk: tegra20: Fix refcount leak in tegra20_clock_init HSI: omap_ssi: Fix refcount leak in ssi_probe HSI: omap_ssi_port: Fix dma_map_sg error check media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop tty: xilinx_uartps: Fix the ignore_status media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start() media: uvcvideo: Fix memory leak in uvc_gpio_parse media: uvcvideo: Use entity get_cur in uvc_ctrl_set media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init RDMA/rxe: Fix "kernel NULL pointer dereference" error RDMA/rxe: Fix the error caused by qp->sk misc: ocxl: fix possible refcount leak in afu_ioctl() fpga: prevent integer overflow in dfl_feature_ioctl_set_irq() dmaengine: hisilicon: Disable channels when unregister hisi_dma dmaengine: hisilicon: Fix CQ head update dmaengine: hisilicon: Add multi-thread support for a DMA channel dyndbg: fix static_branch manipulation dyndbg: fix module.dyndbg handling dyndbg: let query-modname override actual module name dyndbg: drop EXPORTed dynamic_debug_exec_queries clk: qcom: sm6115: Select QCOM_GDSC mtd: devices: docg3: check the return value of devm_ioremap() in the probe phy: amlogic: phy-meson-axg-mipi-pcie-analog: Hold reference returned by of_get_parent() phy: phy-mtk-tphy: fix the phy type setting issue mtd: rawnand: intel: Read the chip-select line from the correct OF node mtd: rawnand: intel: Remove undocumented compatible string mtd: rawnand: fsl_elbc: Fix none ECC mode RDMA/irdma: Align AE id codes to correct flush code and event RDMA/srp: Fix srp_abort() RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall. RDMA/siw: Fix QP destroy to wait for all references dropped. ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting() ata: fix ata_id_has_devslp() ata: fix ata_id_has_ncq_autosense() ata: fix ata_id_has_dipm() mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct() md: Replace snprintf with scnprintf md/raid5: Ensure stripe_fill happens on non-read IO with journal md/raid5: Remove unnecessary bio_put() in raid5_read_one_chunk() RDMA/cm: Use SLID in the work completion as the DLID in responder side IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers xhci: Don't show warning for reinit on known broken suspend usb: gadget: function: fix dangling pnp_string in f_printer.c drivers: serial: jsm: fix some leaks in probe serial: 8250: Toggle IER bits on only after irq has been set up tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown phy: qualcomm: call clk_disable_unprepare in the error handling staging: vt6655: fix some erroneous memory clean-up loops slimbus: qcom-ngd-ctrl: allow compile testing without QCOM_RPROC_COMMON firmware: google: Test spinlock on panic path to avoid lockups serial: 8250: Fix restoring termios speed after suspend scsi: libsas: Fix use-after-free bug in smp_execute_task_sg() scsi: iscsi: Rename iscsi_conn_queue_work() scsi: iscsi: Add recv workqueue helpers scsi: iscsi: Run recv path from workqueue scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername() clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical clk: qcom: gcc-sm6115: Override default Alpha PLL regs RDMA/rxe: Fix resize_finish() in rxe_queue.c fsi: core: Check error number after calling ida_simple_get mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe() mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq() mfd: lp8788: Fix an error handling path in lp8788_probe() mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init() mfd: fsl-imx25: Fix check for platform_get_irq() errors mfd: sm501: Add check for platform_driver_register() clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup() usb: mtu3: fix failed runtime suspend in host only mode spmi: pmic-arb: correct duplicate APID to PPID mapping logic clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD clk: baikal-t1: Fix invalid xGMAC PTP clock divider clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent clk: baikal-t1: Add SATA internal ref clock buffer clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration clk: imx: scu: fix memleak on platform_device_add() fails clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe clk: ast2600: BCLK comes from EPLL mailbox: mpfs: fix handling of the reg property mailbox: mpfs: account for mbox offsets while sending mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg powerpc/configs: Properly enable PAPR_SCM in pseries_defconfig powerpc/math_emu/efp: Include module.h powerpc/sysdev/fsl_msi: Add missing of_node_put() powerpc/pci_dn: Add missing of_node_put() powerpc/powernv: add missing of_node_put() in opal_export_attrs() powerpc: Fix fallocate and fadvise64_64 compat parameter combination x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5 powerpc: Fix SPE Power ISA properties for e500v1 platforms powerpc/kprobes: Fix null pointer reference in arch_prepare_kprobe() powerpc/pseries/vas: Pass hw_cpu_id to node associativity HCALL crypto: sahara - don't sleep when in softirq crypto: hisilicon/zip - fix mismatch in get/set sgl_sge_nr hwrng: arm-smccc-trng - fix NO_ENTROPY handling cgroup: Honor caller's cgroup NS when resolving path hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear() crypto: qat - fix default value of WDT timer crypto: hisilicon/qm - fix missing put dfx access cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset iommu/omap: Fix buffer overflow in debugfs crypto: akcipher - default implementation for setting a private key crypto: ccp - Release dma channels before dmaengine unrgister crypto: inside-secure - Change swab to swab32 crypto: qat - fix DMA transfer direction cifs: return correct error in ->calc_signature() iommu/iova: Fix module config properly tracing: kprobe: Fix kprobe event gen test module on exit tracing: kprobe: Make gen test module work in arm and riscv tracing/osnoise: Fix possible recursive locking in stop_per_cpu_kthreads kbuild: remove the target in signal traps when interrupted kbuild: rpm-pkg: fix breakage when V=1 is used crypto: marvell/octeontx - prevent integer overflows crypto: cavium - prevent integer overflow loading firmware thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id ACPI: APEI: do not add task_work to kernel thread to avoid memory leak f2fs: fix race condition on setting FI_NO_EXTENT flag f2fs: fix to account FS_CP_DATA_IO correctly selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle fs: dlm: fix race in lowcomms rcu: Avoid triggering strict-GP irq-work when RCU is idle rcu: Back off upon fill_page_cache_func() allocation failure rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE() ACPI: video: Add Toshiba Satellite/Portege Z830 quirk ACPI: tables: FPDT: Don't call acpi_os_map_memory() on invalid phys address cpufreq: intel_pstate: Add Tigerlake support in no-HWP mode MIPS: BCM47XX: Cast memcmp() of function to (void *) powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash ARM: decompressor: Include .data.rel.ro.local ACPI: x86: Add a quirk for Dell Inspiron 14 2-in-1 for StorageD3Enable x86/entry: Work around Clang __bdos() bug NFSD: Return nfserr_serverfault if splice_ok but buf->pages have data NFSD: fix use-after-free on source server when doing inter-server copy wifi: brcmfmac: fix invalid address access when enabling SCAN log level bpftool: Clear errno after libcap's checks ice: set tx_tstamps when creating new Tx rings via ethtool net: ethernet: ti: davinci_mdio: Add workaround for errata i2329 openvswitch: Fix double reporting of drops in dropwatch openvswitch: Fix overreporting of drops in dropwatch tcp: annotate data-race around tcp_md5sig_pool_populated x86/mce: Retrieve poison range from hardware wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg() thunderbolt: Add back Intel Falcon Ridge end-to-end flow control workaround xfrm: Update ipcomp_scratches with NULL when freed iavf: Fix race between iavf_close and iavf_reset_task wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit() Bluetooth: btintel: Mark Intel controller to support LE_STATES quirk regulator: core: Prevent integer underflow wifi: mt76: mt7921: reset msta->airtime_ac while clearing up hw value Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create() Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times can: bcm: check the result of can_send() in bcm_can_tx() wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620 wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620 wifi: rt2x00: set VGC gain for both chains of MT7620 wifi: rt2x00: set SoC wmac clock register wifi: rt2x00: correctly set BBP register 86 for MT7620 hwmon: (sht4x) do not overflow clamping operation on 32-bit platforms net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory Bluetooth: L2CAP: Fix user-after-free r8152: Rate limit overflow messages drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc() drm: Use size_t type for len variable in drm_copy_field() drm: Prevent drm_copy_field() to attempt copying a NULL pointer drm/komeda: Fix handling of atomic commits in the atomic_commit_tail hook gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init() drm/amd/display: fix overflow on MIN_I64 definition udmabuf: Set ubuf->sg = NULL if the creation of sg table fails drm: bridge: dw_hdmi: only trigger hotplug event on link change ALSA: usb-audio: Register card at the last interface drm/vc4: vec: Fix timings for VEC modes drm: panel-orientation-quirks: Add quirk for Anbernic Win600 platform/chrome: cros_ec: Notify the PM of wake events during resume platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading ASoC: SOF: pci: Change DMI match info to support all Chrome platforms drm/amdgpu: fix initial connector audio value drm/meson: reorder driver deinit sequence to fix use-after-free bug drm/meson: explicitly remove aggregate driver at module unload time mmc: sdhci-msm: add compatible string check for sdm670 drm/dp: Don't rewrite link config when setting phy test pattern drm/amd/display: Remove interface for periodic interrupt 1 ARM: dts: imx7d-sdb: config the max pressure for tsc2046 ARM: dts: imx6q: add missing properties for sram ARM: dts: imx6dl: add missing properties for sram ARM: dts: imx6qp: add missing properties for sram ARM: dts: imx6sl: add missing properties for sram ARM: dts: imx6sll: add missing properties for sram ARM: dts: imx6sx: add missing properties for sram kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply btrfs: dump extra info if one free space cache has more bitmaps than it should btrfs: scrub: try to fix super block errors btrfs: don't print information about space cache or tree every remount ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n clk: zynqmp: Fix stack-out-of-bounds in strncpy` media: cx88: Fix a null-ptr-deref bug in buffer_prepare() media: platform: fix some double free in meson-ge2d and mtk-jpeg and s5p-mfc clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate usb: host: xhci-plat: suspend and resume clocks usb: host: xhci-plat: suspend/resume clks for brcm dmaengine: ti: k3-udma: Reset UDMA_CHAN_RT byte counters to prevent overflow scsi: 3w-9xxx: Avoid disabling device if failing to enable it nbd: Fix hung when signal interrupts nbd_start_device_ioctl() iommu/arm-smmu-v3: Make default domain type of HiSilicon PTT device to identity power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type() staging: vt6655: fix potential memory leak blk-throttle: prevent overflow while calculating wait time ata: libahci_platform: Sanity check the DT child nodes number bcache: fix set_at_max_writeback_rate() for multiple attached devices soundwire: cadence: Don't overwrite msg->buf during write commands soundwire: intel: fix error handling on dai registration issues HID: roccat: Fix use-after-free in roccat_read() eventfd: guard wake_up in eventfd fs calls as well md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info() usb: musb: Fix musb_gadget.c rxstate overflow bug arm64: dts: imx8mp: Add snps,gfladj-refclk-lpm-sel quirk to USB nodes usb: dwc3: core: Enable GUCTL1 bit 10 for fixing termination error after resume bug Revert "usb: storage: Add quirk for Samsung Fit flash" staging: rtl8723bs: fix potential memory leak in rtw_init_drv_sw() staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv() scsi: tracing: Fix compile error in trace_array calls when TRACING is disabled ext2: Use kvmalloc() for group descriptor array nvme: copy firmware_rev on each init nvmet-tcp: add bounds check on Transfer Tag usb: idmouse: fix an uninit-value in idmouse_open clk: bcm2835: Make peripheral PLLC critical clk: bcm2835: Round UART input clock up perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc io_uring/af_unix: defer registered files gc to io_uring release io_uring: correct pinned_vm accounting io_uring/rw: fix short rw error handling io_uring/rw: fix error'ed retry return values io_uring/rw: fix unexpected link breakage mm: hugetlb: fix UAF in hugetlb_handle_userfault net: ieee802154: return -EINVAL for unknown addr type ALSA: usb-audio: Fix last interface check for registration blk-wbt: fix that 'rwb->wc' is always set to 1 in wbt_init() net: ethernet: ti: davinci_mdio: fix build for mdio bitbang uses Revert "net/ieee802154: reject zero-sized raw_sendmsg()" net/ieee802154: don't warn zero-sized raw_sendmsg() drm/amd/display: Fix build breakage with CONFIG_DEBUG_FS=n Kconfig.debug: simplify the dependency of DEBUG_INFO_DWARF4/5 Kconfig.debug: add toolchain checks for DEBUG_INFO_DWARF_TOOLCHAIN_DEFAULT lib/Kconfig.debug: Add check for non-constant .{s,u}leb128 support to DWARF5 ext4: continue to expand file system when the target size doesn't reach thermal: intel_powerclamp: Use first online CPU as control_cpu gcov: support GCC 12.1 and newer compilers io-wq: Fix memory leak in worker creation Linux 5.15.75 Change-Id: I5a3ef9688fb31003940d7e1828f863b9d50f1da9 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2022-11-16 16:28:57 +00:00
Kshitiz Varshney	3bfc220e5c	hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear() ... [ Upstream commit 10a2199caf437e893d9027d97700b3c6010048b7 ] Issue: While servicing interrupt, if the IRQ happens to be because of a SEED_DONE due to a previous boot stage, you end up completing the completion prematurely, hence causing kernel to crash while booting. Fix: Moving IRQ handler registering after imx_rngc_irq_mask_clear() Fixes: 1d5449445b (hwrng: mx-rngc - add a driver for Freescale RNGC) Signed-off-by: Kshitiz Varshney <kshitiz.varshney@nxp.com> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-10-26 12:35:24 +02:00
James Cowgill	8ffe511b7d	hwrng: arm-smccc-trng - fix NO_ENTROPY handling ... [ Upstream commit 042b4b169c6fb9d4df268d66282d7302dd73d37b ] The SMCCC_RET_TRNG_NO_ENTROPY switch arm is never used because the NO_ENTROPY return value is negative and negative values are handled above the switch by immediately returning. Fix by handling errors using a default arm in the switch. Fixes: 0888d04b47 ("hwrng: Add Arm SMCCC TRNG based driver") Signed-off-by: James Cowgill <james.cowgill@blaize.com> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-10-26 12:35:24 +02:00
Greg Kroah-Hartman	7f2e600bf6	Merge 5.15.74 into android13-5.15-lts ... Changes in 5.15.74 nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level() nilfs2: fix use-after-free bug of struct nilfs_root nilfs2: fix leak of nilfs_root in case of writer thread creation failure nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure ceph: don't truncate file in atomic_open random: restore O_NONBLOCK support random: clamp credited irq bits to maximum mixed ALSA: hda: Fix position reporting on Poulsbo efi: Correct Macmini DMI match in uefi cert quirk scsi: stex: Properly zero out the passthrough command structure USB: serial: qcserial: add new usb-id for Dell branded EM7455 Revert "powerpc/rtas: Implement reentrant rtas call" Revert "crypto: qat - reduce size of mapped region" random: avoid reading two cache lines on irq randomness random: use expired timer rather than wq for mixing fast pool wifi: cfg80211: fix u8 overflow in cfg80211_update_notlisted_nontrans() wifi: cfg80211/mac80211: reject bad MBSSID elements wifi: cfg80211: ensure length byte is present before access wifi: cfg80211: fix BSS refcounting bugs wifi: cfg80211: avoid nontransmitted BSS list corruption wifi: mac80211_hwsim: avoid mac80211 warning on bad rate wifi: mac80211: fix crash in beacon protection for P2P-device wifi: cfg80211: update hidden BSSes to avoid WARN_ON Input: xpad - add supported devices as contributed on github Input: xpad - fix wireless 360 controller breaking after suspend misc: pci_endpoint_test: Aggregate params checking for xfer misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic mac80211: mesh: clean up rx_bcn_presp API mac80211: move CRC into struct ieee802_11_elems mac80211: mlme: find auth challenge directly mac80211: always allocate struct ieee802_11_elems mac80211: fix memory leaks with element parsing wifi: mac80211: fix MBSSID parsing use-after-free Linux 5.15.74 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I12f6db25795f342c6a954f7b7b97b01224cc3138	2022-10-15 08:32:57 +02:00
Jason A. Donenfeld	398e30b670	random: use expired timer rather than wq for mixing fast pool ... commit 748bc4dd9e663f23448d8ad7e58c011a67ea1eca upstream. Previously, the fast pool was dumped into the main pool periodically in the fast pool's hard IRQ handler. This worked fine and there weren't problems with it, until RT came around. Since RT converts spinlocks into sleeping locks, problems cropped up. Rather than switching to raw spinlocks, the RT developers preferred we make the transformation from originally doing: do_some_stuff() spin_lock() do_some_other_stuff() spin_unlock() to doing: do_some_stuff() queue_work_on(some_other_stuff_worker) This is an ordinary pattern done all over the kernel. However, Sherry noticed a 10% performance regression in qperf TCP over a 40gbps InfiniBand card. Quoting her message: > MT27500 Family [ConnectX-3] cards: > Infiniband device 'mlx4_0' port 1 status: > default gid: fe80:0000:0000:0000:0010:e000:0178:9eb1 > base lid: 0x6 > sm lid: 0x1 > state: 4: ACTIVE > phys state: 5: LinkUp > rate: 40 Gb/sec (4X QDR) > link_layer: InfiniBand > > Cards are configured with IP addresses on private subnet for IPoIB > performance testing. > Regression identified in this bug is in TCP latency in this stack as reported > by qperf tcp_lat metric: > > We have one system listen as a qperf server: > [root@yourQperfServer ~]# qperf > > Have the other system connect to qperf server as a client (in this > case, it’s X7 server with Mellanox card): > [root@yourQperfClient ~]# numactl -m0 -N0 qperf 20.20.20.101 -v -uu -ub --time 60 --wait_server 20 -oo msg_size:4K:1024K:*2 tcp_lat Rather than incur the scheduling latency from queue_work_on, we can instead switch to running on the next timer tick, on the same core. This also batches things a bit more -- once per jiffy -- which is okay now that mix_interrupt_randomness() can credit multiple bits at once. Reported-by: Sherry Yang <sherry.yang@oracle.com> Tested-by: Paul Webb <paul.x.webb@oracle.com> Cc: Sherry Yang <sherry.yang@oracle.com> Cc: Phillip Goerl <phillip.goerl@oracle.com> Cc: Jack Vogel <jack.vogel@oracle.com> Cc: Nicky Veitch <nicky.veitch@oracle.com> Cc: Colm Harrington <colm.harrington@oracle.com> Cc: Ramanan Govindarajan <ramanan.govindarajan@oracle.com> Cc: Sebastian Andrzej Siewior <bigeasy@linutronix.de> Cc: Dominik Brodowski <linux@dominikbrodowski.net> Cc: Tejun Heo <tj@kernel.org> Cc: Sultan Alsawaf <sultan@kerneltoast.com> Cc: stable@vger.kernel.org Fixes: 58340f8e952b ("random: defer fast pool mixing to worker") Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-10-15 07:59:02 +02:00
Jason A. Donenfeld	984faa6fc7	random: avoid reading two cache lines on irq randomness ... commit 9ee0507e896b45af6d65408c77815800bce30008 upstream. In order to avoid reading and dirtying two cache lines on every IRQ, move the work_struct to the bottom of the fast_pool struct. add_ interrupt_randomness() always touches .pool and .count, which are currently split, because .mix pushes everything down. Instead, move .mix to the bottom, so that .pool and .count are always in the first cache line, since .mix is only accessed when the pool is full. Fixes: 58340f8e952b ("random: defer fast pool mixing to worker") Reviewed-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de> Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-10-15 07:59:02 +02:00
Jason A. Donenfeld	14f143fb42	random: clamp credited irq bits to maximum mixed ... commit e78a802a7b4febf53f2a92842f494b01062d85a8 upstream. Since the most that's mixed into the pool is sizeof(long)*2, don't credit more than that many bytes of entropy. Fixes: e3e33fc2ea7f ("random: do not use input pool from hard IRQs") Cc: stable@vger.kernel.org Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-10-15 07:59:01 +02:00
Jason A. Donenfeld	be53fa6cf6	random: restore O_NONBLOCK support ... commit cd4f24ae9404fd31fc461066e57889be3b68641b upstream. Prior to 5.6, when /dev/random was opened with O_NONBLOCK, it would return -EAGAIN if there was no entropy. When the pools were unified in 5.6, this was lost. The post 5.6 behavior of blocking until the pool is initialized, and ignoring O_NONBLOCK in the process, went unnoticed, with no reports about the regression received for two and a half years. However, eventually this indeed did break somebody's userspace. So we restore the old behavior, by returning -EAGAIN if the pool is not initialized. Unlike the old /dev/random, this can only occur during early boot, after which it never blocks again. In order to make this O_NONBLOCK behavior consistent with other expectations, also respect users reading with preadv2(RWF_NOWAIT) and similar. Fixes: 30c08efec8 ("random: make /dev/random be almost like /dev/urandom") Reported-by: Guozihua <guozihua@huawei.com> Reported-by: Zhongguohua <zhongguohua1@huawei.com> Cc: Al Viro <viro@zeniv.linux.org.uk> Cc: Theodore Ts'o <tytso@mit.edu> Cc: Andrew Lutomirski <luto@kernel.org> Cc: stable@vger.kernel.org Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-10-15 07:59:01 +02:00
Greg Kroah-Hartman	09b3a27222	Merge 5.15.51 into android13-5.15-lts ... Changes in 5.15.51 random: schedule mix_interrupt_randomness() less often random: quiet urandom warning ratelimit suppression message ALSA: hda/via: Fix missing beep setup ALSA: hda/conexant: Fix missing beep setup ALSA: hda/realtek: Add mute LED quirk for HP Omen laptop ALSA: hda/realtek - ALC897 headset MIC no sound ALSA: hda/realtek: Apply fixup for Lenovo Yoga Duet 7 properly ALSA: hda/realtek: Add quirk for Clevo PD70PNT ALSA: hda/realtek: Add quirk for Clevo NS50PU net: openvswitch: fix parsing of nw_proto for IPv6 fragments 9p: Fix refcounting during full path walks for fid lookups 9p: fix fid refcount leak in v9fs_vfs_atomic_open_dotl 9p: fix fid refcount leak in v9fs_vfs_get_link btrfs: fix hang during unmount when block group reclaim task is running btrfs: prevent remounting to v1 space cache for subpage mount btrfs: add error messages to all unrecognized mount options scsi: ibmvfc: Store vhost pointer during subcrq allocation scsi: ibmvfc: Allocate/free queue resource only during probe/remove mmc: sdhci-pci-o2micro: Fix card detect by dealing with debouncing mmc: mediatek: wait dma stop bit reset to 0 xen/gntdev: Avoid blocking in unmap_grant_pages() MAINTAINERS: Add new IOMMU development mailing list mtd: rawnand: gpmi: Fix setting busy timeout setting ata: libata: add qc->flags in ata_qc_complete_template tracepoint dm era: commit metadata in postsuspend after worker stops dm mirror log: clear log bits up to BITS_PER_LONG boundary tracing/kprobes: Check whether get_kretprobe() returns NULL in kretprobe_dispatcher() drm/i915: Implement w/a 22010492432 for adl-s USB: serial: pl2303: add support for more HXN (G) types USB: serial: option: add Telit LE910Cx 0x1250 composition USB: serial: option: add Quectel EM05-G modem USB: serial: option: add Quectel RM500K module support drm/msm: Ensure mmap offset is initialized drm/msm: Fix double pm_runtime_disable() call netfilter: use get_random_u32 instead of prandom scsi: scsi_debug: Fix zone transition to full condition drm/msm: Switch ordering of runpm put vs devfreq_idle scsi: iscsi: Exclude zero from the endpoint ID range xsk: Fix generic transmit when completion queue reservation fails drm/msm: use for_each_sgtable_sg to iterate over scatterlist bpf: Fix request_sock leak in sk lookup helpers drm/sun4i: Fix crash during suspend after component bind failure bpf, x86: Fix tail call count offset calculation on bpf2bpf call scsi: storvsc: Correct reporting of Hyper-V I/O size limits phy: aquantia: Fix AN when higher speeds than 1G are not advertised KVM: arm64: Prevent kmemleak from accessing pKVM memory net: Write lock dev_base_lock without disabling bottom halves. net: fix data-race in dev_isalive() tipc: fix use-after-free Read in tipc_named_reinit igb: fix a use-after-free issue in igb_clean_tx_ring bonding: ARP monitor spams NETDEV_NOTIFY_PEERS notifiers ethtool: Fix get module eeprom fallback net/sched: sch_netem: Fix arithmetic in netem_dump() for 32-bit platforms drm/msm/mdp4: Fix refcount leak in mdp4_modeset_init_intf drm/msm/dp: check core_initialized before disable interrupts at dp_display_unbind() drm/msm/dp: Drop now unused hpd_high member drm/msm/dp: dp_link_parse_sink_count() return immediately if aux read failed drm/msm/dp: do not initialize phy until plugin interrupt received drm/msm/dp: force link training for display resolution change perf arm-spe: Don't set data source if it's not a memory operation erspan: do not assume transport header is always set net/tls: fix tls_sk_proto_close executed repeatedly udmabuf: add back sanity check selftests: netfilter: correct PKTGEN_SCRIPT_PATHS in nft_concat_range.sh xen-blkfront: Handle NULL gendisk x86/xen: Remove undefined behavior in setup_features() MIPS: Remove repetitive increase irq_err_count afs: Fix dynamic root getattr ice: ethtool: advertise 1000M speeds properly regmap-irq: Fix a bug in regmap_irq_enable() for type_in_mask chips regmap-irq: Fix offset/index mismatch in read_sub_irq_data() igb: Make DMA faster when CPU is active on the PCIe link virtio_net: fix xdp_rxq_info bug after suspend/resume Revert "net/tls: fix tls_sk_proto_close executed repeatedly" sock: redo the psock vs ULP protection check nvme-pci: add NO APST quirk for Kioxia device nvme: move the Samsung X5 quirk entry to the core quirks gpio: winbond: Fix error code in winbond_gpio_get() s390/cpumf: Handle events cycles and instructions identical iio: mma8452: fix probe fail when device tree compatible is used. iio: magnetometer: yas530: Fix memchr_inv() misuse iio: adc: vf610: fix conversion mode sysfs node name usb: typec: wcove: Drop wrong dependency to INTEL_SOC_PMIC xhci: turn off port power in shutdown xhci-pci: Allow host runtime PM as default for Intel Raptor Lake xHCI xhci-pci: Allow host runtime PM as default for Intel Meteor Lake xHCI usb: gadget: Fix non-unique driver names in raw-gadget driver USB: gadget: Fix double-free bug in raw_gadget driver usb: chipidea: udc: check request status before setting device address dt-bindings: usb: ohci: Increase the number of PHYs dt-bindings: usb: ehci: Increase the number of PHYs btrfs: don't set lock_owner when locking extent buffer for reading btrfs: fix deadlock with fsync+fiemap+transaction commit f2fs: attach inline_data after setting compression iio:humidity:hts221: rearrange iio trigger get and register iio:chemical:ccs811: rearrange iio trigger get and register iio:accel:kxcjk-1013: rearrange iio trigger get and register iio:accel:bma180: rearrange iio trigger get and register iio:accel:mxc4005: rearrange iio trigger get and register iio: accel: mma8452: ignore the return value of reset operation iio: gyro: mpu3050: Fix the error handling in mpu3050_power_up() iio: trigger: sysfs: fix use-after-free on remove iio: adc: stm32: fix maximum clock rate for stm32mp15x iio: imu: inv_icm42600: Fix broken icm42600 (chip id 0 value) iio: afe: rescale: Fix boolean logic bug iio: adc: stm32: Fix ADCs iteration in irq handler iio: adc: stm32: Fix IRQs on STM32F4 by removing custom spurious IRQs message iio: adc: axp288: Override TS pin bias current for some models iio: adc: rzg2l_adc: add missing fwnode_handle_put() in rzg2l_adc_parse_properties() iio: adc: adi-axi-adc: Fix refcount leak in adi_axi_adc_attach_client iio: adc: ti-ads131e08: add missing fwnode_handle_put() in ads131e08_alloc_channels() xtensa: xtfpga: Fix refcount leak bug in setup xtensa: Fix refcount leak bug in time.c parisc/stifb: Fix fb_is_primary_device() only available with CONFIG_FB_STI parisc: Enable ARCH_HAS_STRICT_MODULE_RWX powerpc/microwatt: wire up rng during setup_arch() powerpc: Enable execve syscall exit tracepoint powerpc/rtas: Allow ibm,platform-dump RTAS call with null buffer address powerpc/powernv: wire up rng during setup_arch drm/msm/dp: Always clear mask bits to disable interrupts at dp_ctrl_reset_irq_ctrl() ARM: dts: imx7: Move hsic_phy power domain to HSIC PHY node ARM: dts: imx6qdl: correct PU regulator ramp delay arm64: dts: ti: k3-am64-main: Remove support for HS400 speed mode ARM: exynos: Fix refcount leak in exynos_map_pmu soc: bcm: brcmstb: pm: pm-arm: Fix refcount leak in brcmstb_pm_probe ARM: Fix refcount leak in axxia_boot_secondary memory: samsung: exynos5422-dmc: Fix refcount leak in of_get_dram_timings ARM: cns3xxx: Fix refcount leak in cns3xxx_init modpost: fix section mismatch check for exported init/exit sections ARM: dts: bcm2711-rpi-400: Fix GPIO line names random: update comment from copy_to_user() -> copy_to_iter() perf build-id: Fix caching files with a wrong build ID dma-direct: use the correct size for dma_set_encrypted() kbuild: link vmlinux only once for CONFIG_TRIM_UNUSED_KSYMS (2nd attempt) powerpc/pseries: wire up rng during setup_arch() Linux 5.15.51 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: Iac87c7937a5517ad126a1b4512680a2bbfb6447d	2022-08-08 16:02:45 +02:00
Greg Kroah-Hartman	b9490d767d	Merge 5.15.49 into android13-5.15-lts ... Changes in 5.15.49 Revert "drm/amd/display: Fix DCN3 B0 DP Alt Mapping" nfsd: Replace use of rwsem with errseq_t arm64: dts: imx8mm-beacon: Enable RTS-CTS on UART3 arm64: dts: imx8mn-beacon: Enable RTS-CTS on UART3 powerpc/kasan: Silence KASAN warnings in __get_wchan() ASoC: nau8822: Add operation for internal PLL off and on drm/amd/display: Read Golden Settings Table from VBIOS drm/amdkfd: Use mmget_not_zero in MMU notifier dma-debug: make things less spammy under memory pressure ASoC: cs42l52: Fix TLV scales for mixer controls ASoC: cs35l36: Update digital volume TLV ASoC: cs53l30: Correct number of volume levels on SX controls ASoC: cs42l52: Correct TLV for Bypass Volume ASoC: cs42l56: Correct typo in minimum level for SX volume controls ASoC: cs42l51: Correct minimum value for SX volume control drm/amdkfd: add pinned BOs to kfd_bo_list ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo() quota: Prevent memory allocation recursion while holding dq_lock ASoC: wm8962: Fix suspend while playing music ASoC: es8328: Fix event generation for deemphasis control ASoC: wm_adsp: Fix event generation for wm_adsp_fw_put() Input: soc_button_array - also add Lenovo Yoga Tablet2 1051F to dmi_use_low_level_irq scsi: vmw_pvscsi: Expand vcpuHint to 16 bits scsi: lpfc: Resolve NULL ptr dereference after an ELS LOGO is aborted scsi: lpfc: Fix port stuck in bypassed state after LIP in PT2PT topology scsi: lpfc: Allow reduced polling rate for nvme_admin_async_event cmd completion scsi: mpt3sas: Fix out-of-bounds compiler warning scsi: ipr: Fix missing/incorrect resource cleanup in error case scsi: pmcraid: Fix missing resource cleanup in error case ALSA: hda/realtek - Add HW8326 support virtio-mmio: fix missing put_device() when vm_cmdline_parent registration failed nfc: nfcmrvl: Fix memory leak in nfcmrvl_play_deferred ipv6: Fix signed integer overflow in l2tp_ip6_sendmsg net: ethernet: mtk_eth_soc: fix misuse of mem alloc interface netdev[napi]_alloc_frag gcc-12: disable '-Wdangling-pointer' warning for now mellanox: mlx5: avoid uninitialized variable warning with gcc-12 MIPS: Loongson-3: fix compile mips cpu_hwmon as module build error. random: credit cpu and bootloader seeds by default gpio: dwapb: Don't print error on -EPROBE_DEFER platform/x86: gigabyte-wmi: Add Z690M AORUS ELITE AX DDR4 support platform/x86: gigabyte-wmi: Add support for B450M DS3H-CF platform/x86/intel: hid: Add Surface Go to VGBS allow list staging: r8188eu: fix rtw_alloc_hwxmits error detection for now staging: r8188eu: Use zeroing allocator in wpa_set_encryption() staging: r8188eu: Fix warning of array overflow in ioctl_linux.c pNFS: Don't keep retrying if the server replied NFS4ERR_LAYOUTUNAVAILABLE pNFS: Avoid a live lock condition in pnfs_update_layout() sunrpc: set cl_max_connect when cloning an rpc_clnt clocksource: hyper-v: unexport __init-annotated hv_init_clocksource() i40e: Fix adding ADQ filter to TC0 i40e: Fix calculating the number of queue pairs i40e: Fix call trace in setup_tx_descriptors Drivers: hv: vmbus: Release cpu lock in error case tty: goldfish: Fix free_irq() on remove misc: atmel-ssc: Fix IRQ check in ssc_probe io_uring: fix races with file table unregister io_uring: fix races with buffer table unregister drm/i915/reset: Fix error_state_read ptr + offset use net: hns3: split function hclge_update_port_base_vlan_cfg() net: hns3: set port base vlan tbl_sta to false before removing old vlan net: hns3: don't push link state to VF if unalive net: hns3: fix tm port shapping of fibre port is incorrect after driver initialization nvme: add device name to warning in uuid_show() mlxsw: spectrum_cnt: Reorder counter pools net: bgmac: Fix an erroneous kfree() in bgmac_remove() net: ax25: Fix deadlock caused by skb_recv_datagram in ax25_recvmsg arm64: ftrace: fix branch range checks arm64: ftrace: consistently handle PLTs. certs/blacklist_hashes.c: fix const confusion in certs blacklist init: Initialize noop_backing_dev_info early block: Fix handling of offline queues in blk_mq_alloc_request_hctx() faddr2line: Fix overlapping text section failures, the sequel i2c: npcm7xx: Add check for platform_driver_register irqchip/gic/realview: Fix refcount leak in realview_gic_of_init irqchip/gic-v3: Fix error handling in gic_populate_ppi_partitions irqchip/gic-v3: Fix refcount leak in gic_populate_ppi_partitions irqchip/realtek-rtl: Fix refcount leak in map_interrupts sched: Fix balance_push() vs __sched_setscheduler() i2c: designware: Use standard optional ref clock implementation mei: hbm: drop capability response on early shutdown mei: me: add raptor lake point S DID comedi: vmk80xx: fix expression for tx buffer size crypto: memneq - move into lib/ USB: serial: option: add support for Cinterion MV31 with new baseline USB: serial: io_ti: add Agilent E5805A support usb: dwc2: Fix memory leak in dwc2_hcd_init usb: cdnsp: Fixed setting last_trb incorrectly usb: gadget: lpc32xx_udc: Fix refcount leak in lpc32xx_udc_probe usb: gadget: f_fs: change ep->status safe in ffs_epfile_io() usb: gadget: f_fs: change ep->ep safe in ffs_epfile_io() tty: n_gsm: Debug output allocation must use GFP_ATOMIC serial: 8250: Store to lsr_save_flags after lsr read bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove() dm mirror log: round up region bitmap size to BITS_PER_LONG drm/amd/display: Cap OLED brightness per max frame-average luminance cfi: Fix __cfi_slowpath_diag RCU usage with cpuidle ext4: fix super block checksum incorrect after mount ext4: fix bug_on ext4_mb_use_inode_pa ext4: make variable "count" signed ext4: add reserved GDT blocks check KVM: arm64: Don't read a HW interrupt pending state in user context ALSA: hda/realtek: fix right sounds and mute/micmute LEDs for HP machine virtio-pci: Remove wrong address verification in vp_del_vqs() powerpc/book3e: get rid of #include <generated/compile.h> clk: imx8mp: fix usb_root_clk parent Linux 5.15.49 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: Ie4c283ebc18a1c5ff94878cdadcf6a1659e710d4	2022-08-08 14:14:38 +02:00
Greg Kroah-Hartman	f3a0b5d245	Merge 5.15.47 into android13-5.15-lts ... Changes in 5.15.47 pcmcia: db1xxx_ss: restrict to MIPS_DB1XXX boards staging: greybus: codecs: fix type confusion of list iterator variable iio: adc: ad7124: Remove shift from scan_type lkdtm/bugs: Check for the NULL pointer after calling kmalloc lkdtm/bugs: Don't expect thread termination without CONFIG_UBSAN_TRAP tty: goldfish: Use tty_port_destroy() to destroy port tty: serial: owl: Fix missing clk_disable_unprepare() in owl_uart_probe tty: n_tty: Restore EOF push handling behavior serial: 8250_aspeed_vuart: Fix potential NULL dereference in aspeed_vuart_probe tty: serial: fsl_lpuart: fix potential bug when using both of_alias_get_id and ida_simple_get remoteproc: imx_rproc: Ignore create mem entry for resource table usb: usbip: fix a refcount leak in stub_probe() usb: usbip: add missing device lock on tweak configuration cmd USB: storage: karma: fix rio_karma_init return usb: musb: Fix missing of_node_put() in omap2430_probe staging: fieldbus: Fix the error handling path in anybuss_host_common_probe() pwm: lp3943: Fix duty calculation in case period was clamped pwm: raspberrypi-poe: Fix endianness in firmware struct rpmsg: qcom_smd: Fix irq_of_parse_and_map() return value usb: dwc3: gadget: Replace list_for_each_entry_safe() if using giveback usb: dwc3: pci: Fix pm_runtime_get_sync() error checking misc: fastrpc: fix an incorrect NULL check on list iterator firmware: stratix10-svc: fix a missing check on list iterator usb: typec: mux: Check dev_set_name() return value rpmsg: virtio: Fix possible double free in rpmsg_probe() rpmsg: virtio: Fix possible double free in rpmsg_virtio_add_ctrl_dev() rpmsg: virtio: Fix the unregistration of the device rpmsg_ctrl iio: adc: stmpe-adc: Fix wait_for_completion_timeout return value check iio: proximity: vl53l0x: Fix return value check of wait_for_completion_timeout iio: adc: sc27xx: fix read big scale voltage not right iio: adc: sc27xx: Fine tune the scale calibration values rpmsg: qcom_smd: Fix returning 0 if irq_of_parse_and_map() fails pvpanic: Fix typos in the comments misc/pvpanic: Convert regular spinlock into trylock on panic path phy: qcom-qmp: fix pipe-clock imbalance on power-on failure power: supply: axp288_fuel_gauge: Drop BIOS version check from "T3 MRD" DMI quirk serial: sifive: Report actual baud base rather than fixed 115200 export: fix string handling of namespace in EXPORT_SYMBOL_NS soundwire: intel: prevent pm_runtime resume prior to system suspend coresight: cpu-debug: Replace mutex with mutex_trylock on panic notifier ksmbd: fix reference count leak in smb_check_perm_dacl() extcon: ptn5150: Add queue work sync before driver release soc: rockchip: Fix refcount leak in rockchip_grf_init clocksource/drivers/riscv: Events are stopped during CPU suspend ARM: dts: aspeed: ast2600-evb: Enable RX delay for MAC0/MAC1 rtc: mt6397: check return value after calling platform_get_resource() rtc: ftrtc010: Use platform_get_irq() to get the interrupt rtc: ftrtc010: Fix error handling in ftrtc010_rtc_probe staging: r8188eu: add check for kzalloc tty: n_gsm: Don't ignore write return value in gsmld_output() tty: n_gsm: Fix packet data hex dump output serial: meson: acquire port->lock in startup() serial: 8250_fintek: Check SER_RS485_RTS_* only with RS485 serial: cpm_uart: Fix build error without CONFIG_SERIAL_CPM_CONSOLE serial: digicolor-usart: Don't allow CS5-6 serial: rda-uart: Don't allow CS5-6 serial: txx9: Don't allow CS5-6 serial: sh-sci: Don't allow CS5-6 serial: sifive: Sanitize CSIZE and c_iflag serial: st-asc: Sanitize CSIZE and correct PARENB for CS7 serial: stm32-usart: Correct CSIZE, bits, and parity firmware: dmi-sysfs: Fix memory leak in dmi_sysfs_register_handle bus: ti-sysc: Fix warnings for unbind for serial driver: base: fix UAF when driver_attach failed driver core: fix deadlock in __device_attach watchdog: rti-wdt: Fix pm_runtime_get_sync() error checking watchdog: ts4800_wdt: Fix refcount leak in ts4800_wdt_probe blk-mq: don't touch ->tagset in blk_mq_get_sq_hctx ASoC: fsl_sai: Fix FSL_SAI_xDR/xFR definition clocksource/drivers/oxnas-rps: Fix irq_of_parse_and_map() return value s390/crypto: fix scatterwalk_unmap() callers in AES-GCM net: sched: fixed barrier to prevent skbuff sticking in qdisc backlog net: ethernet: mtk_eth_soc: out of bounds read in mtk_hwlro_get_fdir_entry() net: ethernet: ti: am65-cpsw-nuss: Fix some refcount leaks net: dsa: mv88e6xxx: Fix refcount leak in mv88e6xxx_mdios_register modpost: fix removing numeric suffixes jffs2: fix memory leak in jffs2_do_fill_super ubi: fastmap: Fix high cpu usage of ubi_bgt by making sure wl_pool not empty ubi: ubi_create_volume: Fix use-after-free when volume creation failed selftests/bpf: fix selftest after random: Urandom_read tracepoint removal selftests/bpf: fix stacktrace_build_id with missing kprobe/urandom_read bpf: Fix probe read error in ___bpf_prog_run() block: take destination bvec offsets into account in bio_copy_data_iter riscv: read-only pages should not be writable net/smc: fixes for converting from "struct smc_cdc_tx_pend **" to "struct smc_wr_tx_pend_priv *" tcp: add accessors to read/set tp->snd_cwnd nfp: only report pause frame configuration for physical device sfc: fix considering that all channels have TX queues sfc: fix wrong tx channel offset with efx_separate_tx_channels block: make bioset_exit() fully resilient against being called twice vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit virtio: pci: Fix an error handling path in vp_modern_probe() net/mlx5: Don't use already freed action pointer net/mlx5e: TC NIC mode, fix tc chains miss table net/mlx5: CT: Fix header-rewrite re-use for tupels net/mlx5: correct ECE offset in query qp output net/mlx5e: Update netdev features after changing XDP state net: sched: add barrier to fix packet stuck problem for lockless qdisc tcp: tcp_rtx_synack() can be called from process context vdpa: ifcvf: set pci driver data in probe octeontx2-af: fix error code in is_valid_offset() s390/mcck: isolate SIE instruction when setting CIF_MCCK_GUEST flag regulator: mt6315-regulator: fix invalid allowed mode gpio: pca953x: use the correct register address to do regcache sync afs: Fix infinite loop found by xfstest generic/676 scsi: sd: Fix potential NULL pointer dereference tipc: check attribute length for bearer name driver core: Fix wait_for_device_probe() & deferred_probe_timeout interaction perf c2c: Fix sorting in percent_rmt_hitm_cmp() dmaengine: idxd: set DMA_INTERRUPT cap bit mips: cpc: Fix refcount leak in mips_cpc_default_phys_base bootconfig: Make the bootconfig.o as a normal object file tracing: Make tp_printk work on syscall tracepoints tracing: Fix sleeping function called from invalid context on RT kernel tracing: Avoid adding tracer option before update_tracer_options iommu/arm-smmu: fix possible null-ptr-deref in arm_smmu_device_probe() iommu/arm-smmu-v3: check return value after calling platform_get_resource() f2fs: remove WARN_ON in f2fs_is_valid_blkaddr i2c: cadence: Increase timeout per message if necessary m68knommu: set ZERO_PAGE() to the allocated zeroed page m68knommu: fix undefined reference to `_init_sp' dmaengine: zynqmp_dma: In struct zynqmp_dma_chan fix desc_size data type NFSv4: Don't hold the layoutget locks across multiple RPC calls video: fbdev: hyperv_fb: Allow resolutions with size > 64 MB for Gen1 video: fbdev: pxa3xx-gcu: release the resources correctly in pxa3xx_gcu_probe/remove() RISC-V: use memcpy for kexec_file mode m68knommu: fix undefined reference to `mach_get_rtc_pll' f2fs: fix to tag gcing flag on page during file defragment xprtrdma: treat all calls not a bcall when bc_serv is NULL drm/bridge: sn65dsi83: Fix an error handling path in sn65dsi83_probe() drm/bridge: ti-sn65dsi83: Handle dsi_lanes == 0 as invalid netfilter: nat: really support inet nat without l3 address netfilter: nf_tables: use kfree_rcu(ptr, rcu) to release hooks in clean_net path netfilter: nf_tables: delete flowtable hooks via transaction list powerpc/kasan: Force thread size increase with KASAN SUNRPC: Trap RDMA segment overflows netfilter: nf_tables: always initialize flowtable hook list in transaction ata: pata_octeon_cf: Fix refcount leak in octeon_cf_probe netfilter: nf_tables: release new hooks on unsupported flowtable flags netfilter: nf_tables: memleak flow rule from commit path netfilter: nf_tables: bail out early if hardware offload is not supported xen: unexport __init-annotated xen_xlate_map_ballooned_pages() stmmac: intel: Fix an error handling path in intel_eth_pci_probe() af_unix: Fix a data-race in unix_dgram_peer_wake_me(). bpf, arm64: Clear prog->jited_len along prog->jited net: dsa: lantiq_gswip: Fix refcount leak in gswip_gphy_fw_list net/mlx4_en: Fix wrong return value on ioctl EEPROM query failure i40e: xsk: Move tmp desc array from driver to pool xsk: Fix handling of invalid descriptors in XSK TX batching API SUNRPC: Fix the calculation of xdr->end in xdr_get_next_encode_buffer() net: mdio: unexport __init-annotated mdio_bus_init() net: xfrm: unexport __init-annotated xfrm4_protocol_init() net: ipv6: unexport __init-annotated seg6_hmac_init() net/mlx5: Lag, filter non compatible devices net/mlx5: Fix mlx5_get_next_dev() peer device matching net/mlx5: Rearm the FW tracer after each tracer event net/mlx5: fs, fail conflicting actions ip_gre: test csum_start instead of transport header net: altera: Fix refcount leak in altera_tse_mdio_create net: dsa: mv88e6xxx: use BMSR_ANEGCOMPLETE bit for filling an_complete tcp: use alloc_large_system_hash() to allocate table_perturb drm: imx: fix compiler warning with gcc-12 nfp: flower: restructure flow-key for gre+vlan combination iov_iter: Fix iter_xarray_get_pages{,_alloc}() iio: dummy: iio_simple_dummy: check the return value of kstrdup() staging: rtl8712: fix a potential memory leak in r871xu_drv_init() iio: st_sensors: Add a local lock for protecting odr lkdtm/usercopy: Expand size of "out of frame" object drivers: staging: rtl8723bs: Fix deadlock in rtw_surveydone_event_callback() drivers: staging: rtl8192bs: Fix deadlock in rtw_joinbss_event_prehandle() tty: synclink_gt: Fix null-pointer-dereference in slgt_clean() tty: Fix a possible resource leak in icom_probe thunderbolt: Use different lane for second DisplayPort tunnel drivers: staging: rtl8192u: Fix deadlock in ieee80211_beacons_stop() drivers: staging: rtl8192e: Fix deadlock in rtllib_beacons_stop() USB: host: isp116x: check return value after calling platform_get_resource() drivers: tty: serial: Fix deadlock in sa1100_set_termios() drivers: usb: host: Fix deadlock in oxu_bus_suspend() USB: hcd-pci: Fully suspend across freeze/thaw cycle char: xillybus: fix a refcount leak in cleanup_dev() sysrq: do not omit current cpu when showing backtrace of all active CPUs usb: dwc2: gadget: don't reset gadget's driver->bus soundwire: qcom: adjust autoenumeration timeout misc: rtsx: set NULL intfdata when probe fails extcon: Fix extcon_get_extcon_dev() error handling extcon: Modify extcon device to be created after driver data is set clocksource/drivers/sp804: Avoid error on multiple instances staging: rtl8712: fix uninit-value in usb_read8() and friends staging: rtl8712: fix uninit-value in r871xu_drv_init() serial: msm_serial: disable interrupts in __msm_console_write() kernfs: Separate kernfs_pr_cont_buf and rename_lock. watchdog: wdat_wdt: Stop watchdog when rebooting the system md: protect md_unregister_thread from reentrancy scsi: myrb: Fix up null pointer access on myrb_cleanup() Revert "net: af_key: add check for pfkey_broadcast in function pfkey_process" ceph: allow ceph.dir.rctime xattr to be updatable ceph: flush the mdlog for filesystem sync drm/amd/display: Check if modulo is 0 before dividing. drm/radeon: fix a possible null pointer dereference drm/amd/pm: Fix missing thermal throttler status um: line: Use separate IRQs per line modpost: fix undefined behavior of is_arm_mapping_symbol() x86/cpu: Elide KCSAN for cpu_has() and friends jump_label,noinstr: Avoid instrumentation for JUMP_LABEL=n builds nbd: call genl_unregister_family() first in nbd_cleanup() nbd: fix race between nbd_alloc_config() and module removal nbd: fix io hung while disconnecting device s390/gmap: voluntarily schedule during key setting cifs: version operations for smb20 unneeded when legacy support disabled drm/amd/pm: use bitmap_{from,to}_arr32 where appropriate nodemask: Fix return values to be unsigned vringh: Fix loop descriptors check in the indirect cases scripts/gdb: change kernel config dumping method ALSA: usb-audio: Skip generic sync EP parse for secondary EP ALSA: usb-audio: Set up (implicit) sync for Saffire 6 ALSA: hda/conexant - Fix loopback issue with CX20632 ALSA: hda/realtek: Fix for quirk to enable speaker output on the Lenovo Yoga DuetITL 2021 ALSA: hda/realtek: Add quirk for HP Dev One cifs: return errors during session setup during reconnects cifs: fix reconnect on smb3 mount types KEYS: trusted: tpm2: Fix migratable logic ata: libata-transport: fix {dma|pio|xfer}_mode sysfs files mmc: block: Fix CQE recovery reset success net: phy: dp83867: retrigger SGMII AN when link change net: openvswitch: fix misuse of the cached connection on tuple changes writeback: Fix inode->i_io_list not be protected by inode->i_lock error nfc: st21nfca: fix incorrect validating logic in EVT_TRANSACTION nfc: st21nfca: fix memory leaks in EVT_TRANSACTION handling nfc: st21nfca: fix incorrect sizing calculations in EVT_TRANSACTION ixgbe: fix bcast packets Rx on VF after promisc removal ixgbe: fix unexpected VLAN Rx in promisc mode on VF Input: bcm5974 - set missing URB_NO_TRANSFER_DMA_MAP urb flag vduse: Fix NULL pointer dereference on sysfs access powerpc: Don't select HAVE_IRQ_EXIT_ON_IRQ_STACK drm/bridge: analogix_dp: Support PSR-exit to disable transition drm/atomic: Force bridge self-refresh-exit on CRTC switch drm/amdgpu: update VCN codec support for Yellow Carp powerpc/32: Fix overread/overwrite of thread_struct via ptrace powerpc/mm: Switch obsolete dssall to .long drm/ast: Create threshold values for AST2600 random: avoid checking crng_ready() twice in random_init() random: mark bootloader randomness code as __init random: account for arch randomness in bits md/raid0: Ignore RAID0 layout if the second zone has only one device net/sched: act_police: more accurate MTU policing PCI: qcom: Fix pipe clock imbalance zonefs: fix handling of explicit_open option on mount iov_iter: fix build issue due to possible type mis-match dmaengine: idxd: add missing callback function to support DMA_INTERRUPT tcp: fix tcp_mtup_probe_success vs wrong snd_cwnd xsk: Fix possible crash when multiple sockets are created Linux 5.15.47 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I4f53567cd8a0a13927a16f41a2be8bc0db21ce5b	2022-08-08 12:12:20 +02:00
Greg Kroah-Hartman	a9422ed2f1	Merge 5.15.46 into android13-5.15-lts ... Changes in 5.15.46 binfmt_flat: do not stop relocating GOT entries prematurely on riscv parisc/stifb: Implement fb_is_primary_device() parisc/stifb: Keep track of hardware path of graphics card RISC-V: Mark IORESOURCE_EXCLUSIVE for reserved mem instead of IORESOURCE_BUSY riscv: Initialize thread pointer before calling C functions riscv: Fix irq_work when SMP is disabled riscv: Wire up memfd_secret in UAPI header riscv: Move alternative length validation into subsection ALSA: hda/realtek - Add new type for ALC245 ALSA: hda/realtek: Enable 4-speaker output for Dell XPS 15 9520 laptop ALSA: hda/realtek - Fix microphone noise on ASUS TUF B550M-PLUS ALSA: usb-audio: Cancel pending work at closing a MIDI substream USB: serial: pl2303: fix type detection for odd device USB: serial: option: add Quectel BG95 modem USB: new quirk for Dell Gen 2 devices usb: isp1760: Fix out-of-bounds array access usb: dwc3: gadget: Move null pinter check to proper place usb: core: hcd: Add support for deferring roothub registration fs/ntfs3: Update valid size if -EIOCBQUEUED fs/ntfs3: Fix fiemap + fix shrink file size (to remove preallocated space) fs/ntfs3: Keep preallocated only if option prealloc enabled fs/ntfs3: Check new size for limits fs/ntfs3: In function ntfs_set_acl_ex do not change inode->i_mode if called from function ntfs_init_acl fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()' fs/ntfs3: Update i_ctime when xattr is added fs/ntfs3: Restore ntfs_xattr_get_acl and ntfs_xattr_set_acl functions cifs: fix potential double free during failed mount cifs: when extending a file with falloc we should make files not-sparse xhci: Allow host runtime PM as default for Intel Alder Lake N xHCI platform/x86: intel-hid: fix _DSM function index handling x86/MCE/AMD: Fix memory leak when threshold_create_bank() fails perf/x86/intel: Fix event constraints for ICL x86/kexec: fix memory leak of elf header buffer x86/sgx: Set active memcg prior to shmem allocation ptrace/um: Replace PT_DTRACE with TIF_SINGLESTEP ptrace/xtensa: Replace PT_SINGLESTEP with TIF_SINGLESTEP ptrace: Reimplement PTRACE_KILL by always sending SIGKILL btrfs: add "0x" prefix for unsupported optional features btrfs: return correct error number for __extent_writepage_io() btrfs: repair super block num_devices automatically btrfs: fix the error handling for submit_extent_page() for btrfs_do_readpage() iommu/vt-d: Add RPLS to quirk list to skip TE disabling drm/vmwgfx: validate the screen formats drm/virtio: fix NULL pointer dereference in virtio_gpu_conn_get_modes selftests/bpf: Fix vfs_link kprobe definition selftests/bpf: Fix parsing of prog types in UAPI hdr for bpftool sync mwifiex: add mutex lock for call in mwifiex_dfs_chan_sw_work_queue b43legacy: Fix assigning negative value to unsigned variable b43: Fix assigning negative value to unsigned variable ipw2x00: Fix potential NULL dereference in libipw_xmit() ipv6: fix locking issues with loops over idev->addr_list fbcon: Consistently protect deferred_takeover with console_lock() x86/platform/uv: Update TSC sync state for UV5 ACPICA: Avoid cache flush inside virtual machines mac80211: minstrel_ht: fix where rate stats are stored (fixes debugfs output) drm/komeda: return early if drm_universal_plane_init() fails. drm/amd/display: Disabling Z10 on DCN31 rcu-tasks: Fix race in schedule and flush work rcu: Make TASKS_RUDE_RCU select IRQ_WORK sfc: ef10: Fix assigning negative value to unsigned variable ALSA: jack: Access input_dev under mutex rtw88: 8821c: fix debugfs rssi value spi: spi-rspi: Remove setting {src,dst}_{addr,addr_width} based on DMA direction tools/power turbostat: fix ICX DRAM power numbers scsi: lpfc: Move cfg_log_verbose check before calling lpfc_dmp_dbg() scsi: lpfc: Fix SCSI I/O completion and abort handler deadlock scsi: lpfc: Fix call trace observed during I/O with CMF enabled cpuidle: PSCI: Improve support for suspend-to-RAM for PSCI OSI mode drm/amd/pm: fix double free in si_parse_power_table() ASoC: rsnd: care default case on rsnd_ssiu_busif_err_status_clear() ASoC: rsnd: care return value from rsnd_node_fixed_index() ath9k: fix QCA9561 PA bias level media: venus: hfi: avoid null dereference in deinit media: pci: cx23885: Fix the error handling in cx23885_initdev() media: cx25821: Fix the warning when removing the module md/bitmap: don't set sb values if can't pass sanity check mmc: jz4740: Apply DMA engine limits to maximum segment size drivers: mmc: sdhci_am654: Add the quirk to set TESTCD bit scsi: megaraid: Fix error check return value of register_chrdev() drm/amdgpu/sdma: Fix incorrect calculations of the wptr of the doorbells scsi: ufs: Use pm_runtime_resume_and_get() instead of pm_runtime_get_sync() scsi: lpfc: Fix resource leak in lpfc_sli4_send_seq_to_ulp() ath11k: disable spectral scan during spectral deinit ASoC: Intel: bytcr_rt5640: Add quirk for the HP Pro Tablet 408 drm/plane: Move range check for format_count earlier drm/amd/pm: fix the compile warning ath10k: skip ath10k_halt during suspend for driver state RESTARTING arm64: compat: Do not treat syscall number as ESR_ELx for a bad syscall drm: msm: fix error check return value of irq_of_parse_and_map() scsi: target: tcmu: Fix possible data corruption ipv6: Don't send rs packets to the interface of ARPHRD_TUNNEL net/mlx5: fs, delete the FTE when there are no rules attached to it ASoC: dapm: Don't fold register value changes into notifications mlxsw: spectrum_dcb: Do not warn about priority changes mlxsw: Treat LLDP packets as control drm/amdgpu/psp: move PSP memory alloc from hw_init to sw_init drm/amdgpu/ucode: Remove firmware load type check in amdgpu_ucode_free_bo regulator: mt6315: Enforce regulator-compatible, not name HID: bigben: fix slab-out-of-bounds Write in bigben_probe of: Support more than one crash kernel regions for kexec -s ASoC: tscs454: Add endianness flag in snd_soc_component_driver scsi: lpfc: Alter FPIN stat accounting logic net: remove two BUG() from skb_checksum_help() s390/preempt: disable __preempt_count_add() optimization for PROFILE_ALL_BRANCHES perf/amd/ibs: Cascade pmu init functions' return value sched/core: Avoid obvious double update_rq_clock warning spi: stm32-qspi: Fix wait_cmd timeout in APM mode dma-debug: change allocation mode from GFP_NOWAIT to GFP_ATIOMIC ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default ipmi:ssif: Check for NULL msg when handling events and messages ipmi: Fix pr_fmt to avoid compilation issues rtlwifi: Use pr_warn instead of WARN_ONCE mt76: mt7921: accept rx frames with non-standard VHT MCS10-11 mt76: fix encap offload ethernet type check media: rga: fix possible memory leak in rga_probe media: coda: limit frame interval enumeration to supported encoder frame sizes media: hantro: HEVC: unconditionnaly set pps_{cb/cr}_qp_offset values media: ccs-core.c: fix failure to call clk_disable_unprepare media: imon: reorganize serialization media: cec-adap.c: fix is_configuring state usbnet: Run unregister_netdev() before unbind() again openrisc: start CPU timer early in boot nvme-pci: fix a NULL pointer dereference in nvme_alloc_admin_tags ASoC: rt5645: Fix errorenous cleanup order nbd: Fix hung on disconnect request if socket is closed before drm/amd/pm: update smartshift powerboost calc for smu12 drm/amd/pm: update smartshift powerboost calc for smu13 net: phy: micrel: Allow probing without .driver_data media: exynos4-is: Fix compile warning media: hantro: Stop using H.264 parameter pic_num ASoC: max98357a: remove dependency on GPIOLIB ASoC: rt1015p: remove dependency on GPIOLIB ACPI: CPPC: Assume no transition latency if no PCCT nvme: set non-mdts limits in nvme_scan_work can: mcp251xfd: silence clang's -Wunaligned-access warning x86/microcode: Add explicit CPU vendor dependency net: ipa: ignore endianness if there is no header m68k: atari: Make Atari ROM port I/O write macros return void rxrpc: Return an error to sendmsg if call failed rxrpc, afs: Fix selection of abort codes afs: Adjust ACK interpretation to try and cope with NAT eth: tg3: silence the GCC 12 array-bounds warning char: tpm: cr50_i2c: Suppress duplicated error message in .remove() selftests/bpf: fix btf_dump/btf_dump due to recent clang change gfs2: use i_lock spin_lock for inode qadata scsi: target: tcmu: Avoid holding XArray lock when calling lock_page IB/rdmavt: add missing locks in rvt_ruc_loopback ARM: dts: ox820: align interrupt controller node name with dtschema ARM: dts: socfpga: align interrupt controller node name with dtschema ARM: dts: s5pv210: align DMA channels with dtschema arm64: dts: qcom: msm8994: Fix the cont_splash_mem address arm64: dts: qcom: msm8994: Fix BLSP[12]_DMA channels count PM / devfreq: rk3399_dmc: Disable edev on remove() crypto: ccree - use fine grained DMA mapping dir soc: ti: ti_sci_pm_domains: Check for null return of devm_kcalloc fs: jfs: fix possible NULL pointer dereference in dbFree() arm64: dts: qcom: sdm845-xiaomi-beryllium: fix typo in panel's vddio-supply property ALSA: usb-audio: Add quirk bits for enabling/disabling generic implicit fb ALSA: usb-audio: Move generic implicit fb quirk entries into quirks.c ARM: OMAP1: clock: Fix UART rate reporting algorithm powerpc/fadump: Fix fadump to work with a different endian capture kernel fat: add ratelimit to fat*_ent_bread() pinctrl: renesas: rzn1: Fix possible null-ptr-deref in sh_pfc_map_resources() ARM: versatile: Add missing of_node_put in dcscb_init ARM: dts: exynos: add atmel,24c128 fallback to Samsung EEPROM ARM: hisi: Add missing of_node_put after of_find_compatible_node cpufreq: Avoid unnecessary frequency updates due to mismatch powerpc/rtas: Keep MSR[RI] set when calling RTAS PCI: Avoid pci_dev_lock() AB/BA deadlock with sriov_numvfs_store() KVM: PPC: Book3S HV Nested: L2 LPCR should inherit L1 LPES setting alpha: fix alloc_zeroed_user_highpage_movable() tracing: incorrect isolate_mote_t cast in mm_vmscan_lru_isolate powerpc/powernv/vas: Assign real address to rx_fifo in vas_rx_win_attr powerpc/xics: fix refcount leak in icp_opal_init() powerpc/powernv: fix missing of_node_put in uv_init() macintosh/via-pmu: Fix build failure when CONFIG_INPUT is disabled powerpc/iommu: Add missing of_node_put in iommu_init_early_dart smb3: check for null tcon RDMA/hfi1: Prevent panic when SDMA is disabled Input: gpio-keys - cancel delayed work only in case of GPIO drm: fix EDID struct for old ARM OABI format drm/bridge_connector: enable HPD by default if supported dt-bindings: display: sitronix, st7735r: Fix backlight in example drm/vmwgfx: Fix an invalid read ath11k: acquire ab->base_lock in unassign when finding the peer by addr drm: bridge: it66121: Fix the register page length ath9k: fix ar9003_get_eepmisc drm/edid: fix invalid EDID extension block filtering drm/bridge: adv7511: clean up CEC adapter when probe fails drm: bridge: icn6211: Fix register layout drm: bridge: icn6211: Fix HFP_HSW_HBP_HI and HFP_MIN handling mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG spi: qcom-qspi: Add minItems to interconnect-names ASoC: mediatek: Fix error handling in mt8173_max98090_dev_probe ASoC: mediatek: Fix missing of_node_put in mt2701_wm8960_machine_probe x86/delay: Fix the wrong asm constraint in delay_loop() drm/vc4: hvs: Fix frame count register readout drm/mediatek: Fix mtk_cec_mask() drm/vc4: hvs: Reset muxes at probe time drm/vc4: txp: Don't set TXP_VSTART_AT_EOF drm/vc4: txp: Force alpha to be 0xff if it's disabled libbpf: Don't error out on CO-RE relos for overriden weak subprogs x86/PCI: Fix ALi M1487 (IBC) PIRQ router link value interpretation mptcp: reset the packet scheduler on PRIO change nl80211: show SSID for P2P_GO interfaces drm/komeda: Fix an undefined behavior bug in komeda_plane_add() drm: mali-dp: potential dereference of null pointer spi: spi-ti-qspi: Fix return value handling of wait_for_completion_timeout scftorture: Fix distribution of short handler delays net: dsa: mt7530: 1G can also support 1000BASE-X link mode ixp4xx_eth: fix error check return value of platform_get_irq() NFC: NULL out the dev->rfkill to prevent UAF efi: Add missing prototype for efi_capsule_setup_info device property: Check fwnode->secondary when finding properties device property: Allow error pointer to be passed to fwnode APIs target: remove an incorrect unmap zeroes data deduction drbd: fix duplicate array initializer EDAC/dmc520: Don't print an error for each unconfigured interrupt line mtd: rawnand: denali: Use managed device resources HID: hid-led: fix maximum brightness for Dream Cheeky HID: elan: Fix potential double free in elan_input_configured drm/bridge: Fix error handling in analogix_dp_probe regulator: da9121: Fix uninit-value in da9121_assign_chip_model() drm/mediatek: dpi: Use mt8183 output formats for mt8192 signal: Deliver SIGTRAP on perf event asynchronously if blocked sched/fair: Fix cfs_rq_clock_pelt() for throttled cfs_rq sched/psi: report zeroes for CPU full at the system level spi: img-spfi: Fix pm_runtime_get_sync() error checking cpufreq: Fix possible race in cpufreq online error path printk: use atomic updates for klogd work printk: add missing memory barrier to wake_up_klogd() printk: wake waiters for safe and NMI contexts ath9k_htc: fix potential out of bounds access with invalid rxstatus->rs_keyix media: i2c: max9286: Use dev_err_probe() helper media: i2c: max9286: Use "maxim,gpio-poc" property media: i2c: max9286: fix kernel oops when removing module media: hantro: Empty encoder capture buffers by default drm/panel: simple: Add missing bus flags for Innolux G070Y2-L01 ALSA: pcm: Check for null pointer of pointer substream before dereferencing it mtdblock: warn if opened on NAND inotify: show inotify mask flags in proc fdinfo fsnotify: fix wrong lockdep annotations spi: rockchip: Stop spi slave dma receiver when cs inactive spi: rockchip: Preset cs-high and clk polarity in setup progress spi: rockchip: fix missing error on unsupported SPI_CS_HIGH of: overlay: do not break notify on NOTIFY_{OK|STOP} selftests/damon: add damon to selftests root Makefile drm/msm/dp: Modify prototype of encoder based API drm/msm/hdmi: switch to drm_bridge_connector drm/msm/dpu: adjust display_v_end for eDP and DP scsi: iscsi: Fix harmless double shift bug scsi: ufs: qcom: Fix ufs_qcom_resume() scsi: ufs: core: Exclude UECxx from SFR dump list drm/v3d: Fix null pointer dereference of pointer perfmon selftests/resctrl: Fix null pointer dereference on open failed libbpf: Fix logic for finding matching program for CO-RE relocation mtd: spi-nor: core: Check written SR value in spi_nor_write_16bit_sr_and_check() x86/pm: Fix false positive kmemleak report in msr_build_context() mtd: rawnand: cadence: fix possible null-ptr-deref in cadence_nand_dt_probe() mtd: rawnand: intel: fix possible null-ptr-deref in ebu_nand_probe() x86/speculation: Add missing prototype for unpriv_ebpf_notify() ASoC: rk3328: fix disabling mclk on pclk probe failure perf tools: Add missing headers needed by util/data.h drm/msm/disp/dpu1: set vbif hw config to NULL to avoid use after memory free during pm runtime resume drm/msm/dp: stop event kernel thread when DP unbind drm/msm/dp: fix error check return value of irq_of_parse_and_map() drm/msm/dp: reset DP controller before transmit phy test pattern drm/msm/dp: do not stop transmitting phy test pattern during DP phy compliance test drm/msm/dsi: fix error checks and return values for DSI xmit functions drm/msm/hdmi: check return value after calling platform_get_resource_byname() drm/msm/hdmi: fix error check return value of irq_of_parse_and_map() drm/msm: add missing include to msm_drv.c drm/panel: panel-simple: Fix proper bpc for AM-1280800N3TZQW-T00H kunit: fix debugfs code to use enum kunit_status, not bool drm/rockchip: vop: fix possible null-ptr-deref in vop_bind() spi: cadence-quadspi: fix Direct Access Mode disable for SoCFPGA perf tools: Use Python devtools for version autodetection rather than runtime virtio_blk: fix the discard_granularity and discard_alignment queue limits nl80211: don't hold RTNL in color change request x86: Fix return value of __setup handlers irqchip/exiu: Fix acknowledgment of edge triggered interrupts irqchip/aspeed-i2c-ic: Fix irq_of_parse_and_map() return value irqchip/aspeed-scu-ic: Fix irq_of_parse_and_map() return value x86/mm: Cleanup the control_va_addr_alignment() __setup handler arm64: fix types in copy_highpage() regulator: core: Fix enable_count imbalance with EXCLUSIVE_GET drm/msm/dsi: fix address for second DSI PHY on SDM660 drm/msm/dp: fix event thread stuck in wait_event after kthread_stop() drm/msm/mdp5: Return error code in mdp5_pipe_release when deadlock is detected drm/msm/mdp5: Return error code in mdp5_mixer_release when deadlock is detected drm/msm: return an error pointer in msm_gem_prime_get_sg_table() media: uvcvideo: Fix missing check to determine if element is found in list arm64: stackleak: fix current_top_of_stack() iomap: iomap_write_failed fix spi: spi-fsl-qspi: check return value after calling platform_get_resource_byname() Revert "cpufreq: Fix possible race in cpufreq online error path" regulator: qcom_smd: Fix up PM8950 regulator configuration samples: bpf: Don't fail for a missing VMLINUX_BTF when VMLINUX_H is provided perf/amd/ibs: Use interrupt regs ip for stack unwinding ath11k: Don't check arvif->is_started before sending management frames wilc1000: fix crash observed in AP mode with cfg80211_register_netdevice() HID: amd_sfh: Modify the bus name HID: amd_sfh: Modify the hid name ASoC: fsl: Use dev_err_probe() helper ASoC: fsl: Fix refcount leak in imx_sgtl5000_probe ASoC: imx-hdmi: Fix refcount leak in imx_hdmi_probe ASoC: mxs-saif: Fix refcount leak in mxs_saif_probe regulator: pfuze100: Fix refcount leak in pfuze_parse_regulators_dt dma-direct: factor out a helper for DMA_ATTR_NO_KERNEL_MAPPING allocations dma-direct: don't fail on highmem CMA pages in dma_direct_alloc_pages ASoC: samsung: Use dev_err_probe() helper ASoC: samsung: Fix refcount leak in aries_audio_probe block: Fix the bio.bi_opf comment kselftest/cgroup: fix test_stress.sh to use OUTPUT dir scripts/faddr2line: Fix overlapping text section failures media: aspeed: Fix an error handling path in aspeed_video_probe() media: exynos4-is: Fix PM disable depth imbalance in fimc_is_probe mt76: mt7921: Fix the error handling path of mt7921_pci_probe() mt76: do not attempt to reorder received 802.3 packets without agg session media: st-delta: Fix PM disable depth imbalance in delta_probe media: atmel: atmel-isc: Fix PM disable depth imbalance in atmel_isc_probe media: i2c: rdacm2x: properly set subdev entity function media: exynos4-is: Change clk_disable to clk_disable_unprepare media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init media: vsp1: Fix offset calculation for plane cropping media: atmel: atmel-sama5d2-isc: fix wrong mask in YUYV format check media: hantro: HEVC: Fix tile info buffer value computation Bluetooth: fix dangling sco_conn and use-after-free in sco_sock_timeout Bluetooth: use hdev lock in activate_scan for hci_is_adv_monitoring Bluetooth: use hdev lock for accept_list and reject_list in conn req nvme: set dma alignment to dword m68k: math-emu: Fix dependencies of math emulation support sctp: read sk->sk_bound_dev_if once in sctp_rcv() net: hinic: add missing destroy_workqueue in hinic_pf_to_mgmt_init ASoC: ti: j721e-evm: Fix refcount leak in j721e_soc_probe_* kselftest/arm64: bti: force static linking media: ov7670: remove ov7670_power_off from ov7670_remove media: i2c: ov5648: fix wrong pointer passed to IS_ERR() and PTR_ERR() media: staging: media: rkvdec: Make use of the helper function devm_platform_ioremap_resource() media: rkvdec: h264: Fix dpb_valid implementation media: rkvdec: h264: Fix bit depth wrap in pps packet regulator: scmi: Fix refcount leak in scmi_regulator_probe ext4: reject the 'commit' option on ext2 filesystems drm/msm/a6xx: Fix refcount leak in a6xx_gpu_init drm: msm: fix possible memory leak in mdp5_crtc_cursor_set() x86/sev: Annotate stack change in the #VC handler drm/msm: don't free the IRQ if it was not requested selftests/bpf: Add missed ima_setup.sh in Makefile drm/msm/dpu: handle pm_runtime_get_sync() errors in bind path drm/i915: Fix CFI violation with show_dynamic_id() thermal/drivers/bcm2711: Don't clamp temperature at zero thermal/drivers/broadcom: Fix potential NULL dereference in sr_thermal_probe thermal/core: Fix memory leak in __thermal_cooling_device_register() thermal/drivers/imx_sc_thermal: Fix refcount leak in imx_sc_thermal_probe bfq: Relax waker detection for shared queues bfq: Allow current waker to defend against a tentative one ASoC: wm2000: fix missing clk_disable_unprepare() on error in wm2000_anc_transition() PM: domains: Fix initialization of genpd's next_wakeup net: macb: Fix PTP one step sync support NFC: hci: fix sleep in atomic context bugs in nfc_hci_hcp_message_tx ASoC: max98090: Move check for invalid values before casting in max98090_put_enab_tlv() net: stmmac: selftests: Use kcalloc() instead of kzalloc() net: stmmac: fix out-of-bounds access in a selftest hv_netvsc: Fix potential dereference of NULL pointer hwmon: (pmbus) Check PEC support before reading other registers rxrpc: Fix listen() setting the bar too high for the prealloc rings rxrpc: Don't try to resend the request if we're receiving the reply rxrpc: Fix overlapping ACK accounting rxrpc: Don't let ack.previousPacket regress rxrpc: Fix decision on when to generate an IDLE ACK net: huawei: hinic: Use devm_kcalloc() instead of devm_kzalloc() hinic: Avoid some over memory allocation net: dsa: restrict SMSC_LAN9303_I2C kconfig net/smc: postpone sk_refcnt increment in connect() dma-direct: factor out dma_set_{de,en}crypted helpers dma-direct: don't call dma_set_decrypted for remapped allocations dma-direct: always leak memory that can't be re-encrypted dma-direct: don't over-decrypt memory arm64: dts: rockchip: Move drive-impedance-ohm to emmc phy on rk3399 arm64: dts: mt8192: Fix nor_flash status disable typo PCI/ACPI: Allow D3 only if Root Port can signal and wake from D3 memory: samsung: exynos5422-dmc: Avoid some over memory allocation ARM: dts: BCM5301X: update CRU block description ARM: dts: BCM5301X: Update pin controller node name ARM: dts: suniv: F1C100: fix watchdog compatible soc: qcom: smp2p: Fix missing of_node_put() in smp2p_parse_ipc soc: qcom: smsm: Fix missing of_node_put() in smsm_parse_ipc PCI: cadence: Fix find_first_zero_bit() limit PCI: rockchip: Fix find_first_zero_bit() limit PCI: mediatek: Fix refcount leak in mtk_pcie_subsys_powerup() PCI: dwc: Fix setting error return on MSI DMA mapping failure ARM: dts: ci4x10: Adapt to changes in imx6qdl.dtsi regarding fec clocks soc: qcom: llcc: Add MODULE_DEVICE_TABLE() KVM: nVMX: Leave most VM-Exit info fields unmodified on failed VM-Entry KVM: nVMX: Clear IDT vectoring on nested VM-Exit for double/triple fault crypto: qat - set CIPHER capability for QAT GEN2 crypto: qat - set COMPRESSION capability for QAT GEN2 crypto: qat - set CIPHER capability for DH895XCC crypto: qat - set COMPRESSION capability for DH895XCC platform/chrome: cros_ec: fix error handling in cros_ec_register() ARM: dts: imx6dl-colibri: Fix I2C pinmuxing platform/chrome: Re-introduce cros_ec_cmd_xfer and use it for ioctls can: xilinx_can: mark bit timing constants as const ARM: dts: stm32: Fix PHY post-reset delay on Avenger96 ARM: dts: bcm2835-rpi-zero-w: Fix GPIO line name for Wifi/BT ARM: dts: bcm2837-rpi-cm3-io3: Fix GPIO line names for SMPS I2C ARM: dts: bcm2837-rpi-3-b-plus: Fix GPIO line name of power LED ARM: dts: bcm2835-rpi-b: Fix GPIO line names misc: ocxl: fix possible double free in ocxl_file_register_afu crypto: marvell/cesa - ECB does not IV gpiolib: of: Introduce hook for missing gpio-ranges pinctrl: bcm2835: implement hook for missing gpio-ranges arm: mediatek: select arch timer for mt7629 pinctrl/rockchip: support deferring other gpio params pinctrl: mediatek: mt8195: enable driver on mtk platforms arm64: dts: qcom: qrb5165-rb5: Fix can-clock node name Drivers: hv: vmbus: Fix handling of messages with transaction ID of zero powerpc/fadump: fix PT_LOAD segment for boot memory area mfd: ipaq-micro: Fix error check return value of platform_get_irq() scsi: fcoe: Fix Wstringop-overflow warnings in fcoe_wwn_from_mac() soc: bcm: Check for NULL return of devm_kzalloc() arm64: dts: ti: k3-am64-mcu: remove incorrect UART base clock rates ASoC: sh: rz-ssi: Check return value of pm_runtime_resume_and_get() ASoC: sh: rz-ssi: Propagate error codes returned from platform_get_irq_byname() ASoC: sh: rz-ssi: Release the DMA channels in rz_ssi_probe() error path firmware: arm_scmi: Fix list protocols enumeration in the base protocol nvdimm: Fix firmware activation deadlock scenarios nvdimm: Allow overwrite in the presence of disabled dimms pinctrl: mvebu: Fix irq_of_parse_and_map() return value drivers/base/node.c: fix compaction sysfs file leak dax: fix cache flush on PMD-mapped pages drivers/base/memory: fix an unlikely reference counting issue in __add_memory_block() firmware: arm_ffa: Fix uuid parameter to ffa_partition_probe firmware: arm_ffa: Remove incorrect assignment of driver_data list: introduce list_is_head() helper and re-use it in list.h list: fix a data-race around ep->rdllist drm/msm/dpu: fix error check return value of irq_of_parse_and_map() powerpc/8xx: export 'cpm_setbrg' for modules pinctrl: renesas: r8a779a0: Fix GPIO function on I2C-capable pins pinctrl: renesas: core: Fix possible null-ptr-deref in sh_pfc_map_resources() powerpc/idle: Fix return value of __setup() handler powerpc/4xx/cpm: Fix return value of __setup() handler RDMA/hns: Add the detection for CMDQ status in the device initialization process arm64: dts: marvell: espressobin-ultra: fix SPI-NOR config arm64: dts: marvell: espressobin-ultra: enable front USB3 port ASoC: atmel-pdmic: Remove endianness flag on pdmic component ASoC: atmel-classd: Remove endianness flag on class d component proc: fix dentry/inode overinstantiating under /proc/${pid}/net ipc/mqueue: use get_tree_nodev() in mqueue_get_tree() PCI: imx6: Fix PERST# start-up sequence tty: fix deadlock caused by calling printk() under tty_port->lock crypto: sun8i-ss - rework handling of IV crypto: sun8i-ss - handle zero sized sg crypto: cryptd - Protect per-CPU resource by disabling BH. ARM: dts: at91: sama7g5: remove interrupt-parent from gic node hugetlbfs: fix hugetlbfs_statfs() locking Input: sparcspkr - fix refcount leak in bbc_beep_probe PCI/AER: Clear MULTI_ERR_COR/UNCOR_RCV bits PCI: microchip: Fix potential race in interrupt handling hwrng: omap3-rom - fix using wrong clk_disable() in omap_rom_rng_runtime_resume() powerpc/64: Only WARN if __pa()/__va() called with bad addresses powerpc/perf: Fix the threshold compare group constraint for power10 powerpc/perf: Fix the threshold compare group constraint for power9 macintosh: via-pmu and via-cuda need RTC_LIB powerpc/xive: Add some error handling code to 'xive_spapr_init()' powerpc/xive: Fix refcount leak in xive_spapr_init powerpc/fsl_rio: Fix refcount leak in fsl_rio_setup mfd: davinci_voicecodec: Fix possible null-ptr-deref davinci_vc_probe() nfsd: destroy percpu stats counters after reply cache shutdown mailbox: forward the hrtimer if not queued and under a lock RDMA/hfi1: Prevent use of lock before it is initialized KVM: LAPIC: Drop pending LAPIC timer injection when canceling the timer Input: stmfts - do not leave device disabled in stmfts_input_open OPP: call of_node_put() on error path in _bandwidth_supported() f2fs: support fault injection for dquot_initialize() f2fs: fix to do sanity check on inline_dots inode f2fs: fix dereference of stale list iterator after loop body iommu/amd: Enable swiotlb in all cases iommu/mediatek: Fix 2 HW sharing pgtable issue iommu/mediatek: Add list_del in mtk_iommu_remove iommu/mediatek: Remove clk_disable in mtk_iommu_remove iommu/mediatek: Add mutex for m4u_group and m4u_dom in data i2c: at91: use dma safe buffers cpufreq: mediatek: Use module_init and add module_exit cpufreq: mediatek: Unregister platform device on exit iommu/arm-smmu-v3-sva: Fix mm use-after-free MIPS: Loongson: Use hwmon_device_register_with_groups() to register hwmon iommu/mediatek: Fix NULL pointer dereference when printing dev_name i2c: at91: Initialize dma_buf in at91_twi_xfer() dmaengine: idxd: Fix the error handling path in idxd_cdev_register() NFS: Do not report EINTR/ERESTARTSYS as mapping errors NFS: fsync() should report filesystem errors over EINTR/ERESTARTSYS NFS: Don't report ENOSPC write errors twice NFS: Do not report flush errors in nfs_write_end() NFS: Don't report errors from nfs_pageio_complete() more than once NFSv4/pNFS: Do not fail I/O when we fail to allocate the pNFS layout NFS: Further fixes to the writeback error handling video: fbdev: clcdfb: Fix refcount leak in clcdfb_of_vram_setup dmaengine: stm32-mdma: remove GISR1 register dmaengine: stm32-mdma: fix chan initialization in stm32_mdma_irq_handler() iommu/amd: Increase timeout waiting for GA log enablement i2c: npcm: Fix timeout calculation i2c: npcm: Correct register access width i2c: npcm: Handle spurious interrupts i2c: rcar: fix PM ref counts in probe error paths perf build: Fix btf__load_from_kernel_by_id() feature check perf c2c: Use stdio interface if slang is not supported perf jevents: Fix event syntax error caused by ExtSel video: fbdev: vesafb: Fix a use-after-free due early fb_info cleanup NFS: Always initialise fattr->label in nfs_fattr_alloc() NFS: Create a new nfs_alloc_fattr_with_label() function NFS: Convert GFP_NOFS to GFP_KERNEL NFSv4.1 mark qualified async operations as MOVEABLE tasks f2fs: fix to avoid f2fs_bug_on() in dec_valid_node_count() f2fs: fix to do sanity check on block address in f2fs_do_zero_range() f2fs: fix to clear dirty inode in f2fs_evict_inode() f2fs: fix deadloop in foreground GC f2fs: don't need inode lock for system hidden quota f2fs: fix to do sanity check on total_data_blocks f2fs: don't use casefolded comparison for "." and ".." f2fs: fix fallocate to use file_modified to update permissions consistently f2fs: fix to do sanity check for inline inode objtool: Fix objtool regression on x32 systems objtool: Fix symbol creation wifi: mac80211: fix use-after-free in chanctx code iwlwifi: mvm: fix assert 1F04 upon reconfig fs-writeback: writeback_sb_inodes：Recalculate 'wrote' according skipped pages efi: Do not import certificates from UEFI Secure Boot for T2 Macs bfq: Avoid false marking of bic as stably merged bfq: Avoid merging queues with different parents bfq: Split shared queues on move between cgroups bfq: Update cgroup information before merging bio bfq: Drop pointless unlock-lock pair bfq: Remove pointless bfq_init_rq() calls bfq: Track whether bfq_group is still online bfq: Get rid of __bio_blkcg() usage bfq: Make sure bfqg for which we are queueing requests is online ext4: mark group as trimmed only if it was fully scanned ext4: fix use-after-free in ext4_rename_dir_prepare ext4: fix race condition between ext4_write and ext4_convert_inline_data ext4: fix warning in ext4_handle_inode_extension ext4: fix bug_on in ext4_writepages ext4: filter out EXT4_FC_REPLAY from on-disk superblock field s_state ext4: fix bug_on in __es_tree_search ext4: verify dir block before splitting it ext4: avoid cycles in directory h-tree ACPI: property: Release subnode properties with data nodes tty: goldfish: Introduce gf_ioread32()/gf_iowrite32() tracing: Fix potential double free in create_var_ref() tracing: Initialize integer variable to prevent garbage return value drm/amdgpu: add beige goby PCI ID PCI/PM: Fix bridge_d3_blacklist[] Elo i2 overwrite of Gigabyte X299 PCI: qcom: Fix runtime PM imbalance on probe errors PCI: qcom: Fix unbalanced PHY init on probe errors staging: r8188eu: prevent ->Ssid overflow in rtw_wx_set_scan() mm, compaction: fast_find_migrateblock() should return pfn in the target zone s390/perf: obtain sie_block from the right address s390/stp: clock_delta should be signed dlm: fix plock invalid read dlm: uninitialized variable on error in dlm_listen_for_all() dlm: fix missing lkb refcount handling ocfs2: dlmfs: fix error handling of user_dlm_destroy_lock scsi: dc395x: Fix a missing check on list iterator scsi: ufs: qcom: Add a readl() to make sure ref_clk gets enabled landlock: Add clang-format exceptions landlock: Format with clang-format selftests/landlock: Add clang-format exceptions selftests/landlock: Normalize array assignment selftests/landlock: Format with clang-format samples/landlock: Add clang-format exceptions samples/landlock: Format with clang-format landlock: Fix landlock_add_rule(2) documentation selftests/landlock: Make tests build with old libc selftests/landlock: Extend tests for minimal valid attribute size selftests/landlock: Add tests for unknown access rights selftests/landlock: Extend access right tests to directories selftests/landlock: Fully test file rename with "remove" access selftests/landlock: Add tests for O_PATH landlock: Change landlock_add_rule(2) argument check ordering landlock: Change landlock_restrict_self(2) check ordering selftests/landlock: Test landlock_create_ruleset(2) argument check ordering landlock: Define access_mask_t to enforce a consistent access mask size landlock: Reduce the maximum number of layers to 16 landlock: Create find_rule() from unmask_layers() landlock: Fix same-layer rule unions drm/amdgpu/cs: make commands with 0 chunks illegal behaviour. drm/nouveau/subdev/bus: Ratelimit logging for fault errors drm/etnaviv: check for reaped mapping in etnaviv_iommu_unmap_gem drm/nouveau/clk: Fix an incorrect NULL check on list iterator drm/nouveau/kms/nv50-: atom: fix an incorrect NULL check on list iterator drm/bridge: analogix_dp: Grab runtime PM reference for DP-AUX drm/i915/dsi: fix VBT send packet port selection for ICL+ md: fix an incorrect NULL check in does_sb_need_changing md: fix an incorrect NULL check in md_reload_sb mtd: cfi_cmdset_0002: Move and rename chip_check/chip_ready/chip_good_for_write mtd: cfi_cmdset_0002: Use chip_ready() for write on S29GL064N media: coda: Fix reported H264 profile media: coda: Add more H264 levels for CODA960 ima: remove the IMA_TEMPLATE Kconfig option Kconfig: Add option for asm goto w/ tied outputs to workaround clang-13 bug RDMA/hfi1: Fix potential integer multiplication overflow errors mmc: core: Allows to override the timeout value for ioctl() path csky: patch_text: Fixup last cpu should be master irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375, A38x, A39x irqchip: irq-xtensa-mx: fix initial IRQ affinity thermal: devfreq_cooling: use local ops instead of global ops cfg80211: declare MODULE_FIRMWARE for regulatory.db mac80211: upgrade passive scan to active scan on DFS channels after beacon rx um: Use asm-generic/dma-mapping.h um: chan_user: Fix winch_tramp() return value um: Fix out-of-bounds read in LDT setup kexec_file: drop weak attribute from arch_kexec_apply_relocations[_add] ftrace: Clean up hash direct_functions on register failures ksmbd: fix outstanding credits related bugs iommu/msm: Fix an incorrect NULL check on list iterator iommu/dma: Fix iova map result check bug Revert "mm/cma.c: remove redundant cma_mutex lock" mm/page_alloc: always attempt to allocate at least one page during bulk allocation nodemask.h: fix compilation error with GCC12 hugetlb: fix huge_pmd_unshare address update mm/memremap: fix missing call to untrack_pfn() in pagemap_range() xtensa/simdisk: fix proc_read_simdisk() rtl818x: Prevent using not initialized queues ASoC: rt5514: Fix event generation for "DSP Voice Wake Up" control carl9170: tx: fix an incorrect use of list iterator stm: ltdc: fix two incorrect NULL checks on list iterator bcache: improve multithreaded bch_btree_check() bcache: improve multithreaded bch_sectors_dirty_init() bcache: remove incremental dirty sector counting for bch_sectors_dirty_init() bcache: avoid journal no-space deadlock by reserving 1 journal bucket serial: pch: don't overwrite xmit->buf[0] by x_char tilcdc: tilcdc_external: fix an incorrect NULL check on list iterator gma500: fix an incorrect NULL check on list iterator arm64: dts: qcom: ipq8074: fix the sleep clock frequency arm64: tegra: Add missing DFLL reset on Tegra210 clk: tegra: Add missing reset deassertion phy: qcom-qmp: fix struct clk leak on probe errors ARM: dts: s5pv210: Remove spi-cs-high on panel in Aries ARM: pxa: maybe fix gpio lookup tables SMB3: EBADF/EIO errors in rename/open caused by race condition in smb2_compound_op docs/conf.py: Cope with removal of language=None in Sphinx 5.0.0 dt-bindings: gpio: altera: correct interrupt-cells vdpasim: allow to enable a vq repeatedly blk-iolatency: Fix inflight count imbalances and IO hangs on offline coresight: core: Fix coresight device probe failure issue phy: qcom-qmp: fix reset-controller leak on probe errors net: ipa: fix page free in ipa_endpoint_trans_release() net: ipa: fix page free in ipa_endpoint_replenish_one() kseltest/cgroup: Make test_stress.sh work if run interactively list: test: Add a test for list_is_head() Revert "random: use static branch for crng_ready()" staging: r8188eu: delete rtw_wx_read/write32() RDMA/hns: Remove the num_cqc_timer variable RDMA/rxe: Generate a completion for unsupported/invalid opcode MIPS: IP27: Remove incorrect `cpu_has_fpu' override MIPS: IP30: Remove incorrect `cpu_has_fpu' override ext4: only allow test_dummy_encryption when supported interconnect: qcom: sc7180: Drop IP0 interconnects interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate fs: add two trivial lookup helpers exportfs: support idmapped mounts fs/ntfs3: Fix invalid free in log_replay md: Don't set mddev private to NULL in raid0 pers->free md: fix double free of io_acct_set bioset md: bcache: check the return value of kzalloc() in detached_dev_do_request() pinctrl/rockchip: support setting input-enable param block: fix bio_clone_blkg_association() to associate with proper blkcg_gq Linux 5.15.46 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: Id50a95d816e662c0cba3d09dbfd561f386d7a52e	2022-08-04 14:37:04 +02:00
Greg Kroah-Hartman	89405fc691	Merge 5.15.45 into android13-5.15-lts ... Changes in 5.15.45 ALSA: usb-audio: Don't get sample rate for MCT Trigger 5 USB-to-HDMI pinctrl: sunxi: fix f1c100s uart2 function KVM: arm64: Don't hypercall before EL2 init percpu_ref_init(): clean ->percpu_count_ref on failure net: af_key: check encryption module availability consistency nfc: pn533: Fix buggy cleanup order net: ftgmac100: Disable hardware checksum on AST2600 i2c: ismt: Provide a DMA buffer for Interrupt Cause Logging drivers: i2c: thunderx: Allow driver to work with ACPI defined TWSI controllers netfilter: nf_tables: disallow non-stateful expression in sets earlier i2c: ismt: prevent memory corruption in ismt_access() assoc_array: Fix BUG_ON during garbage collect pipe: make poll_usage boolean and annotate its access pipe: Fix missing lock in pipe_resize_ring() net: ipa: compute proper aggregation limit drm/i915: Fix -Wstringop-overflow warning in call to intel_read_wm_latency() exfat: check if cluster num is valid lib/crypto: add prompts back to crypto libraries crypto: drbg - prepare for more fine-grained tracking of seeding state crypto: drbg - track whether DRBG was seeded with !rng_is_initialized() crypto: drbg - move dynamic ->reseed_threshold adjustments to __drbg_seed() crypto: drbg - make reseeding from get_random_bytes() synchronous netfilter: nf_tables: sanitize nft_set_desc_concat_parse() netfilter: nf_tables: hold mutex on netns pre_exit path netfilter: nf_tables: double hook unregistration in netns path netfilter: conntrack: re-fetch conntrack after insertion KVM: PPC: Book3S HV: fix incorrect NULL check on list iterator x86/kvm: Alloc dummy async #PF token outside of raw spinlock x86, kvm: use correct GFP flags for preemption disabled KVM: x86: avoid calling x86 emulator without a decoded instruction KVM: x86: Drop WARNs that assert a triple fault never "escapes" from L2 KVM: SVM: Use kzalloc for sev ioctl interfaces to prevent kernel data leak crypto: caam - fix i.MX6SX entropy delay value crypto: ecrdsa - Fix incorrect use of vli_cmp zsmalloc: fix races between asynchronous zspage free and page migration ALSA: usb-audio: Workaround for clock setup on TEAC devices ALSA: usb-audio: Add missing ep_idx in fixed EP quirks ALSA: usb-audio: Configure sync endpoints before data Bluetooth: hci_qca: Use del_timer_sync() before freeing ARM: dts: s5pv210: Correct interrupt name for bluetooth in Aries dm integrity: fix error code in dm_integrity_ctr() dm crypt: make printing of the key constant-time dm stats: add cond_resched when looping over entries dm verity: set DM_TARGET_IMMUTABLE feature flag raid5: introduce MD_BROKEN fs/ntfs3: validate BOOT sectors_per_clusters HID: multitouch: Add support for Google Whiskers Touchpad HID: multitouch: add quirks to enable Lenovo X12 trackpoint x86/sgx: Disconnect backing page references from dirty status x86/sgx: Mark PCMD page as dirty when modifying contents x86/sgx: Obtain backing storage page with enclave mutex held x86/sgx: Fix race between reclaimer and page fault handler x86/sgx: Ensure no data in PCMD page after truncate media: i2c: imx412: Fix reset GPIO polarity media: i2c: imx412: Fix power_off ordering tpm: Fix buffer access in tpm2_get_tpm_pt() tpm: ibmvtpm: Correct the return value in tpm_ibmvtpm_probe() docs: submitting-patches: Fix crossref to 'The canonical patch format' NFS: Memory allocation failures are not server fatal errors NFSD: Fix possible sleep during nfsd4_release_lockowner() bpf: Fix potential array overflow in bpf_trampoline_get_progs() bpf: Enlarge offset check value to INT_MAX in bpf_skb_{load,store}_bytes bpf: Fix excessive memory allocation in stack_map_alloc() bpf: Reject writes for PTR_TO_MAP_KEY in check_helper_mem_access bpf: Check PTR_TO_MEM | MEM_RDONLY in check_helper_mem_access ALSA: usb-audio: Optimize TEAC clock quirk Linux 5.15.45 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I80c8d092a237b8314e834ff13a9ef86c9a86fa23	2022-08-04 11:09:29 +02:00
Will McVicker	89f568d282	ANDROID: random: fix CRC issues with the merge ... The upstream commit 9342656c01 ("random: remove unused tracepoints") removed the random.h tracepoints which lead to CRC differences for the following symbols: add_random_ready_callback() del_random_ready_callback() If I add back #includes <linux/writeback.h> which is what was included by the random.h tracepoint header, then the CRCs match the original CRC values for those two functions above. This is necessary to retain GKI compatibility. Fixes: 9342656c013d ("random: remove unused tracepoints") Change-Id: I52422404ec46273cc686d1930102e066cef05eb0 Signed-off-by: Will McVicker <willmcvicker@google.com> Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2022-07-23 16:37:34 +02:00
Jason A. Donenfeld	46a78d1413	random: update comment from copy_to_user() -> copy_to_iter() ... commit 63b8ea5e4f1a87dea4d3114293fc8e96a8f193d7 upstream. This comment wasn't updated when we moved from read() to read_iter(), so this patch makes the trivial fix. Fixes: 1b388e7765f2 ("random: convert to using fops->read_iter()") Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-06-29 09:03:31 +02:00
Jason A. Donenfeld	eb4c99d089	random: quiet urandom warning ratelimit suppression message ... commit c01d4d0a82b71857be7449380338bc53dde2da92 upstream. random.c ratelimits how much it warns about uninitialized urandom reads using __ratelimit(). When the RNG is finally initialized, it prints the number of missed messages due to ratelimiting. It has been this way since that functionality was introduced back in 2018. Recently, cc1e127bfa95 ("random: remove ratelimiting for in-kernel unseeded randomness") put a bit more stress on the urandom ratelimiting, which teased out a bug in the implementation. Specifically, when under pressure, __ratelimit() will print its own message and reset the count back to 0, making the final message at the end less useful. Secondly, it does so as a pr_warn(), which apparently is undesirable for people's CI. Fortunately, __ratelimit() has the RATELIMIT_MSG_ON_RELEASE flag exactly for this purpose, so we set the flag. Fixes: 4e00b339e2 ("random: rate limit unseeded randomness warnings") Cc: stable@vger.kernel.org Reported-by: Jon Hunter <jonathanh@nvidia.com> Reported-by: Ron Economos <re@w6rz.net> Tested-by: Ron Economos <re@w6rz.net> Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-06-29 09:03:17 +02:00
Jason A. Donenfeld	7a42647f70	random: schedule mix_interrupt_randomness() less often ... commit 534d2eaf1970274150596fdd2bf552721e65d6b2 upstream. It used to be that mix_interrupt_randomness() would credit 1 bit each time it ran, and so add_interrupt_randomness() would schedule mix() to run every 64 interrupts, a fairly arbitrary number, but nonetheless considered to be a decent enough conservative estimate. Since e3e33fc2ea7f ("random: do not use input pool from hard IRQs"), mix() is now able to credit multiple bits, depending on the number of calls to add(). This was done for reasons separate from this commit, but it has the nice side effect of enabling this patch to schedule mix() less often. Currently the rules are: a) Credit 1 bit for every 64 calls to add(). b) Schedule mix() once a second that add() is called. c) Schedule mix() once every 64 calls to add(). Rules (a) and (c) no longer need to be coupled. It's still important to have _some_ value in (c), so that we don't "over-saturate" the fast pool, but the once per second we get from rule (b) is a plenty enough baseline. So, by increasing the 64 in rule (c) to something larger, we avoid calling queue_work_on() as frequently during irq storms. This commit changes that 64 in rule (c) to be 1024, which means we schedule mix() 16 times less often. And it does *not* need to change the 64 in rule (a). Fixes: 58340f8e952b ("random: defer fast pool mixing to worker") Cc: stable@vger.kernel.org Cc: Dominik Brodowski <linux@dominikbrodowski.net> Acked-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de> Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-06-29 09:03:17 +02:00
Greg Kroah-Hartman	b463207970	ANDROID: change function signatures for some random functions. ... In 5.15.44 the functions add_device_randomness() and get_random_bytes() want from: void get_random_bytes(void *buf, int len); -> void get_random_bytes(void *buf, size_t len); void add_device_randomness(const void *buf, unsigned int len); -> void add_device_randomness(const void *buf, size_t len); As these functions are part of the GKI abi to be preserved, move them back. As these are just lengths of the buffer, all is fine with the size, they should never overflow. Bug: 161946584 Fixes: 5dd066ade8 ("random: make more consistent use of integer types") Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I5430259958b9a904e6e8b950e11526332c919c0c	2022-06-25 11:21:48 +02:00
Greg Kroah-Hartman	c17d6f4b4f	ANDROID: random: add back removed callback functions ... Commit 6da877d2d4 ("random: replace custom notifier chain with standard one") in 5.15.44 removed the add_random_ready_callback() and del_random_ready_callback() functions, which are part of the current Android ABI in this branch. To handle this properly, add them back in order for out-of-tree code to continue working. Bug: 161946584 Fixes: 6da877d2d4 ("random: replace custom notifier chain with standard one") Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I422f3af1a28c5cf2e7f7806d6fb37d66901e3a33	2022-06-25 11:21:21 +02:00
Jason A. Donenfeld	eeadd7db8c	random: credit cpu and bootloader seeds by default ... [ Upstream commit 846bb97e131d7938847963cca00657c995b1fce1 ] This commit changes the default Kconfig values of RANDOM_TRUST_CPU and RANDOM_TRUST_BOOTLOADER to be Y by default. It does not change any existing configs or change any kernel behavior. The reason for this is several fold. As background, I recently had an email thread with the kernel maintainers of Fedora/RHEL, Debian, Ubuntu, Gentoo, Arch, NixOS, Alpine, SUSE, and Void as recipients. I noted that some distros trust RDRAND, some trust EFI, and some trust both, and I asked why or why not. There wasn't really much of a "debate" but rather an interesting discussion of what the historical reasons have been for this, and it came up that some distros just missed the introduction of the bootloader Kconfig knob, while another didn't want to enable it until there was a boot time switch to turn it off for more concerned users (which has since been added). The result of the rather uneventful discussion is that every major Linux distro enables these two options by default. While I didn't have really too strong of an opinion going into this thread -- and I mostly wanted to learn what the distros' thinking was one way or another -- ultimately I think their choice was a decent enough one for a default option (which can be disabled at boot time). I'll try to summarize the pros and cons: Pros: - The RNG machinery gets initialized super quickly, and there's no messing around with subsequent blocking behavior. - The bootloader mechanism is used by kexec in order for the prior kernel to initialize the RNG of the next kernel, which increases the entropy available to early boot daemons of the next kernel. - Previous objections related to backdoors centered around Dual_EC_DRBG-like kleptographic systems, in which observing some amount of the output stream enables an adversary holding the right key to determine the entire output stream. This used to be a partially justified concern, because RDRAND output was mixed into the output stream in varying ways, some of which may have lacked pre-image resistance (e.g. XOR or an LFSR). But this is no longer the case. Now, all usage of RDRAND and bootloader seeds go through a cryptographic hash function. This means that the CPU would have to compute a hash pre-image, which is not considered to be feasible (otherwise the hash function would be terribly broken). - More generally, if the CPU is backdoored, the RNG is probably not the realistic vector of choice for an attacker. - These CPU or bootloader seeds are far from being the only source of entropy. Rather, there is generally a pretty huge amount of entropy, not all of which is credited, especially on CPUs that support instructions like RDRAND. In other words, assuming RDRAND outputs all zeros, an attacker would *still* have to accurately model every single other entropy source also in use. - The RNG now reseeds itself quite rapidly during boot, starting at 2 seconds, then 4, then 8, then 16, and so forth, so that other sources of entropy get used without much delay. - Paranoid users can set random.trust_{cpu,bootloader}=no in the kernel command line, and paranoid system builders can set the Kconfig options to N, so there's no reduction or restriction of optionality. - It's a practical default. - All the distros have it set this way. Microsoft and Apple trust it too. Bandwagon. Cons: - RDRAND *could* still be backdoored with something like a fixed key or limited space serial number seed or another indexable scheme like that. (However, it's hard to imagine threat models where the CPU is backdoored like this, yet people are still okay making *any* computations with it or connecting it to networks, etc.) - RDRAND *could* be defective, rather than backdoored, and produce garbage that is in one way or another insufficient for crypto. - Suggesting a *reduction* in paranoia, as this commit effectively does, may cause some to question my personal integrity as a "security person". - Bootloader seeds and RDRAND are generally very difficult if not all together impossible to audit. Keep in mind that this doesn't actually change any behavior. This is just a change in the default Kconfig value. The distros already are shipping kernels that set things this way. Ard made an additional argument in [1]: We're at the mercy of firmware and micro-architecture anyway, given that we are also relying on it to ensure that every instruction in the kernel's executable image has been faithfully copied to memory, and that the CPU implements those instructions as documented. So I don't think firmware or ISA bugs related to RNGs deserve special treatment - if they are broken, we should quirk around them like we usually do. So enabling these by default is a step in the right direction IMHO. In [2], Phil pointed out that having this disabled masked a bug that CI otherwise would have caught: A clean 5.15.45 boots cleanly, whereas a downstream kernel shows the static key warning (but it does go on to boot). The significant difference is that our defconfigs set CONFIG_RANDOM_TRUST_BOOTLOADER=y defining that on top of multi_v7_defconfig demonstrates the issue on a clean 5.15.45. Conversely, not setting that option in a downstream kernel build avoids the warning [1] https://lore.kernel.org/lkml/CAMj1kXGi+ieviFjXv9zQBSaGyyzeGW_VpMpTLJK8PJb2QHEQ-w@mail.gmail.com/ [2] https://lore.kernel.org/lkml/c47c42e3-1d56-5859-a6ad-976a1a3381c6@raspberrypi.com/ Cc: Theodore Ts'o <tytso@mit.edu> Reviewed-by: Ard Biesheuvel <ardb@kernel.org> Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-06-22 14:21:58 +02:00
Greg Kroah-Hartman	fdb58cc9a7	Merge 5.15.44 into android13-5.15-lts ... Changes in 5.15.44 HID: amd_sfh: Add support for sensor discovery KVM: x86/mmu: fix NULL pointer dereference on guest INVPCID ice: fix crash at allocation failure ACPI: sysfs: Fix BERT error region memory mapping MAINTAINERS: co-maintain random.c MAINTAINERS: add git tree for random.c lib/crypto: blake2s: include as built-in lib/crypto: blake2s: move hmac construction into wireguard lib/crypto: sha1: re-roll loops to reduce code size lib/crypto: blake2s: avoid indirect calls to compression function for Clang CFI random: document add_hwgenerator_randomness() with other input functions random: remove unused irq_flags argument from add_interrupt_randomness() random: use BLAKE2s instead of SHA1 in extraction random: do not sign extend bytes for rotation when mixing random: do not re-init if crng_reseed completes before primary init random: mix bootloader randomness into pool random: harmonize "crng init done" messages random: use IS_ENABLED(CONFIG_NUMA) instead of ifdefs random: early initialization of ChaCha constants random: avoid superfluous call to RDRAND in CRNG extraction random: don't reset crng_init_cnt on urandom_read() random: fix typo in comments random: cleanup poolinfo abstraction random: cleanup integer types random: remove incomplete last_data logic random: remove unused extract_entropy() reserved argument random: rather than entropy_store abstraction, use global random: remove unused OUTPUT_POOL constants random: de-duplicate INPUT_POOL constants random: prepend remaining pool constants with POOL_ random: cleanup fractional entropy shift constants random: access input_pool_data directly rather than through pointer random: selectively clang-format where it makes sense random: simplify arithmetic function flow in account() random: continually use hwgenerator randomness random: access primary_pool directly rather than through pointer random: only call crng_finalize_init() for primary_crng random: use computational hash for entropy extraction random: simplify entropy debiting random: use linear min-entropy accumulation crediting random: always wake up entropy writers after extraction random: make credit_entropy_bits() always safe random: remove use_input_pool parameter from crng_reseed() random: remove batched entropy locking random: fix locking in crng_fast_load() random: use RDSEED instead of RDRAND in entropy extraction random: get rid of secondary crngs random: inline leaves of rand_initialize() random: ensure early RDSEED goes through mixer on init random: do not xor RDRAND when writing into /dev/random random: absorb fast pool into input pool after fast load random: use simpler fast key erasure flow on per-cpu keys random: use hash function for crng_slow_load() random: make more consistent use of integer types random: remove outdated INT_MAX >> 6 check in urandom_read() random: zero buffer after reading entropy from userspace random: fix locking for crng_init in crng_reseed() random: tie batched entropy generation to base_crng generation random: remove ifdef'd out interrupt bench random: remove unused tracepoints random: add proper SPDX header random: deobfuscate irq u32/u64 contributions random: introduce drain_entropy() helper to declutter crng_reseed() random: remove useless header comment random: remove whitespace and reorder includes random: group initialization wait functions random: group crng functions random: group entropy extraction functions random: group entropy collection functions random: group userspace read/write functions random: group sysctl functions random: rewrite header introductory comment random: defer fast pool mixing to worker random: do not take pool spinlock at boot random: unify early init crng load accounting random: check for crng_init == 0 in add_device_randomness() random: pull add_hwgenerator_randomness() declaration into random.h random: clear fast pool, crng, and batches in cpuhp bring up random: round-robin registers as ulong, not u32 random: only wake up writers after zap if threshold was passed random: cleanup UUID handling random: unify cycles_t and jiffies usage and types random: do crng pre-init loading in worker rather than irq random: give sysctl_random_min_urandom_seed a more sensible value random: don't let 644 read-only sysctls be written to random: replace custom notifier chain with standard one random: use SipHash as interrupt entropy accumulator random: make consistent usage of crng_ready() random: reseed more often immediately after booting random: check for signal and try earlier when generating entropy random: skip fast_init if hwrng provides large chunk of entropy random: treat bootloader trust toggle the same way as cpu trust toggle random: re-add removed comment about get_random_{u32,u64} reseeding random: mix build-time latent entropy into pool at init random: do not split fast init input in add_hwgenerator_randomness() random: do not allow user to keep crng key around on stack random: check for signal_pending() outside of need_resched() check random: check for signals every PAGE_SIZE chunk of /dev/[u]random random: allow partial reads if later user copies fail random: make random_get_entropy() return an unsigned long random: document crng_fast_key_erasure() destination possibility random: fix sysctl documentation nits init: call time_init() before rand_initialize() ia64: define get_cycles macro for arch-override s390: define get_cycles macro for arch-override parisc: define get_cycles macro for arch-override alpha: define get_cycles macro for arch-override powerpc: define get_cycles macro for arch-override timekeeping: Add raw clock fallback for random_get_entropy() m68k: use fallback for random_get_entropy() instead of zero riscv: use fallback for random_get_entropy() instead of zero mips: use fallback for random_get_entropy() instead of just c0 random arm: use fallback for random_get_entropy() instead of zero nios2: use fallback for random_get_entropy() instead of zero x86/tsc: Use fallback for random_get_entropy() instead of zero um: use fallback for random_get_entropy() instead of zero sparc: use fallback for random_get_entropy() instead of zero xtensa: use fallback for random_get_entropy() instead of zero random: insist on random_get_entropy() existing in order to simplify random: do not use batches when !crng_ready() random: use first 128 bits of input as fast init random: do not pretend to handle premature next security model random: order timer entropy functions below interrupt functions random: do not use input pool from hard IRQs random: help compiler out with fast_mix() by using simpler arguments siphash: use one source of truth for siphash permutations random: use symbolic constants for crng_init states random: avoid initializing twice in credit race random: move initialization out of reseeding hot path random: remove ratelimiting for in-kernel unseeded randomness random: use proper jiffies comparison macro random: handle latent entropy and command line from random_init() random: credit architectural init the exact amount random: use static branch for crng_ready() random: remove extern from functions in header random: use proper return types on get_random_{int,long}_wait() random: make consistent use of buf and len random: move initialization functions out of hot pages random: move randomize_page() into mm where it belongs random: unify batched entropy implementations random: convert to using fops->read_iter() random: convert to using fops->write_iter() random: wire up fops->splice_{read,write}_iter() random: check for signals after page of pool writes ALSA: ctxfi: Add SB046x PCI ID Linux 5.15.44 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I54546066f38abcce892689c492b3210ae380f851	2022-06-21 20:06:19 +02:00
Jason A. Donenfeld	51e5572724	random: account for arch randomness in bits ... commit 77fc95f8c0dc9e1f8e620ec14d2fb65028fb7adc upstream. Rather than accounting in bytes and multiplying (shifting), we can just account in bits and avoid the shift. The main motivation for this is there are other patches in flux that expand this code a bit, and avoiding the duplication of "* 8" everywhere makes things a bit clearer. Cc: stable@vger.kernel.org Fixes: 12e45a2a6308 ("random: credit architectural init the exact amount") Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-06-14 18:36:27 +02:00
Jason A. Donenfeld	e59a120f2d	random: mark bootloader randomness code as __init ... commit 39e0f991a62ed5efabd20711a7b6e7da92603170 upstream. add_bootloader_randomness() and the variables it touches are only used during __init and not after, so mark these as __init. At the same time, unexport this, since it's only called by other __init code that's built-in. Cc: stable@vger.kernel.org Fixes: 428826f535 ("fdt: add support for rng-seed") Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-06-14 18:36:27 +02:00
Jason A. Donenfeld	ce49b94ddb	random: avoid checking crng_ready() twice in random_init() ... commit 9b29b6b20376ab64e1b043df6301d8a92378e631 upstream. The current flow expands to: if (crng_ready()) ... else if (...) if (!crng_ready()) ... The second crng_ready() call is redundant, but can't so easily be optimized out by the compiler. This commit simplifies that to: if (crng_ready() ... else if (...) ... Fixes: 560181c27b58 ("random: move initialization functions out of hot pages") Cc: stable@vger.kernel.org Cc: Dominik Brodowski <linux@dominikbrodowski.net> Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-06-14 18:36:27 +02:00
Hangyu Hua	bc8fceda3b	char: xillybus: fix a refcount leak in cleanup_dev() ... [ Upstream commit b67d19662fdee275c479d21853bc1239600a798f ] usb_get_dev is called in xillyusb_probe. So it is better to call usb_put_dev before xdev is released. Acked-by: Eli Billauer <eli.billauer@gmail.com> Signed-off-by: Hangyu Hua <hbh25y@gmail.com> Link: https://lore.kernel.org/r/20220406075703.23464-1-hbh25y@gmail.com Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-06-14 18:36:21 +02:00
Jason A. Donenfeld	6004fccaf8	Revert "random: use static branch for crng_ready()" ... This reverts upstream commit f5bda35fba615ace70a656d4700423fa6c9bebee from stable. It's not essential and will take some time during 5.19 to work out properly. Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>	2022-06-09 10:23:31 +02:00
Yang Yingliang	2530a7c236	hwrng: omap3-rom - fix using wrong clk_disable() in omap_rom_rng_runtime_resume() ... [ Upstream commit e4e62bbc6aba49a5edb3156ec65f6698ff37d228 ] 'ddata->clk' is enabled by clk_prepare_enable(), it should be disabled by clk_disable_unprepare(). Fixes: 8d9d4bdc49 ("hwrng: omap3-rom - Use runtime PM instead of custom functions") Signed-off-by: Yang Yingliang <yangyingliang@huawei.com> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-06-09 10:23:11 +02:00
Uwe Kleine-König	f8bd7f369b	char: tpm: cr50_i2c: Suppress duplicated error message in .remove() ... [ Upstream commit e0687fe958f763f1790f22ed5483025b7624e744 ] Returning an error value in an i2c remove callback results in an error message being emitted by the i2c core, but otherwise it doesn't make a difference. The device goes away anyhow and the devm cleanups are called. As tpm_cr50_i2c_remove() emits an error message already and the additional error message by the i2c core doesn't add any useful information, change the return value to zero to suppress this error message. Note that if i2c_clientdata is NULL, there is something really fishy. Assuming no memory corruption happened (then all bets are lost anyhow), tpm_cr50_i2c_remove() is only called after tpm_cr50_i2c_probe() returned successfully. So there was a tpm chip registered before and after tpm_cr50_i2c_remove() its privdata is freed but the associated character device isn't removed. If after that happened userspace accesses the character device it's likely that the freed memory is accessed. For that reason the warning message is made a bit more frightening. Signed-off-by: Uwe Kleine-König <u.kleine-koenig@pengutronix.de> Signed-off-by: Jarkko Sakkinen <jarkko@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-06-09 10:22:40 +02:00
Corey Minyard	25929a5a69	ipmi: Fix pr_fmt to avoid compilation issues ... [ Upstream commit 2ebaf18a0b7fb764bba6c806af99fe868cee93de ] The was it was wouldn't work in some situations, simplify it. What was there was unnecessary complexity. Reported-by: kernel test robot <lkp@intel.com> Signed-off-by: Corey Minyard <cminyard@mvista.com> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-06-09 10:22:37 +02:00
Corey Minyard	98a0c0dea5	ipmi:ssif: Check for NULL msg when handling events and messages ... [ Upstream commit 7602b957e2404e5f98d9a40b68f1fd27f0028712 ] Even though it's not possible to get into the SSIF_GETTING_MESSAGES and SSIF_GETTING_EVENTS states without a valid message in the msg field, it's probably best to be defensive here and check and print a log, since that means something else went wrong. Also add a default clause to that switch statement to release the lock and print a log, in case the state variable gets messed up somehow. Reported-by: Haowen Bai <baihaowen@meizu.com> Signed-off-by: Corey Minyard <cminyard@mvista.com> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-06-09 10:22:37 +02:00
Xiu Jianfeng	581b2ed605	tpm: ibmvtpm: Correct the return value in tpm_ibmvtpm_probe() ... commit d0dc1a7100f19121f6e7450f9cdda11926aa3838 upstream. Currently it returns zero when CRQ response timed out, it should return an error code instead. Fixes: d8d74ea3c0 ("tpm: ibmvtpm: Wait for buffer to be set before proceeding") Signed-off-by: Xiu Jianfeng <xiujianfeng@huawei.com> Reviewed-by: Stefan Berger <stefanb@linux.ibm.com> Acked-by: Jarkko Sakkinen <jarkko@kernel.org> Signed-off-by: Jarkko Sakkinen <jarkko@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-06-06 08:43:41 +02:00
Stefan Mahnke-Hartmann	b5745954a9	tpm: Fix buffer access in tpm2_get_tpm_pt() ... commit e57b2523bd37e6434f4e64c7a685e3715ad21e9a upstream. Under certain conditions uninitialized memory will be accessed. As described by TCG Trusted Platform Module Library Specification, rev. 1.59 (Part 3: Commands), if a TPM2_GetCapability is received, requesting a capability, the TPM in field upgrade mode may return a zero length list. Check the property count in tpm2_get_tpm_pt(). Fixes: 2ab3241161 ("tpm: migrate tpm2_get_tpm_pt() to use struct tpm_buf") Cc: stable@vger.kernel.org Signed-off-by: Stefan Mahnke-Hartmann <stefan.mahnke-hartmann@infineon.com> Reviewed-by: Jarkko Sakkinen <jarkko@kernel.org> Signed-off-by: Jarkko Sakkinen <jarkko@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-06-06 08:43:41 +02:00
Nicolai Stange	e61717947a	crypto: drbg - make reseeding from get_random_bytes() synchronous ... commit 074bcd4000e0d812bc253f86fedc40f81ed59ccc upstream. get_random_bytes() usually hasn't full entropy available by the time DRBG instances are first getting seeded from it during boot. Thus, the DRBG implementation registers random_ready_callbacks which would in turn schedule some work for reseeding the DRBGs once get_random_bytes() has sufficient entropy available. For reference, the relevant history around handling DRBG (re)seeding in the context of a not yet fully seeded get_random_bytes() is: commit 16b369a91d ("random: Blocking API for accessing nonblocking_pool") commit 4c7879907e ("crypto: drbg - add async seeding operation") commit 205a525c33 ("random: Add callback API for random pool readiness") commit 57225e6797 ("crypto: drbg - Use callback API for random readiness") commit c2719503f5 ("random: Remove kernel blocking API") However, some time later, the initialization state of get_random_bytes() has been made queryable via rng_is_initialized() introduced with commit 9a47249d44 ("random: Make crng state queryable"). This primitive now allows for streamlining the DRBG reseeding from get_random_bytes() by replacing that aforementioned asynchronous work scheduling from random_ready_callbacks with some simpler, synchronous code in drbg_generate() next to the related logic already present therein. Apart from improving overall code readability, this change will also enable DRBG users to rely on wait_for_random_bytes() for ensuring that the initial seeding has completed, if desired. The previous patches already laid the grounds by making drbg_seed() to record at each DRBG instance whether it was being seeded at a time when rng_is_initialized() still had been false as indicated by ->seeded == DRBG_SEED_STATE_PARTIAL. All that remains to be done now is to make drbg_generate() check for this condition, determine whether rng_is_initialized() has flipped to true in the meanwhile and invoke a reseed from get_random_bytes() if so. Make this move: - rename the former drbg_async_seed() work handler, i.e. the one in charge of reseeding a DRBG instance from get_random_bytes(), to "drbg_seed_from_random()", - change its signature as appropriate, i.e. make it take a struct drbg_state rather than a work_struct and change its return type from "void" to "int" in order to allow for passing error information from e.g. its __drbg_seed() invocation onwards to callers, - make drbg_generate() invoke this drbg_seed_from_random() once it encounters a DRBG instance with ->seeded == DRBG_SEED_STATE_PARTIAL by the time rng_is_initialized() has flipped to true and - prune everything related to the former, random_ready_callback based mechanism. As drbg_seed_from_random() is now getting invoked from drbg_generate() with the ->drbg_mutex being held, it must not attempt to recursively grab it once again. Remove the corresponding mutex operations from what is now drbg_seed_from_random(). Furthermore, as drbg_seed_from_random() can now report errors directly to its caller, there's no need for it to temporarily switch the DRBG's ->seeded state to DRBG_SEED_STATE_UNSEEDED so that a failure of the subsequently invoked __drbg_seed() will get signaled to drbg_generate(). Don't do it then. Signed-off-by: Nicolai Stange <nstange@suse.de> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> [Jason: for stable, undid the modifications for the backport of 5acd3548.] Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-06-06 08:43:38 +02:00