106867 Commits

Author	SHA1	Message	Date
Greg Kroah-Hartman	5155624549	Merge tag 'android13-5.15.94_r00' into android13-5.15 ... This is the merge of the upstream LTS release of 5.15.94 into the android13-5.15 branch. It contains the following commits: * 5448b2fda8 Merge 5.15.94 into android13-5.15-lts |\ | * e2c1a934fd Linux 5.15.94 | * 17170acdc7 Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions | * 5122e0e443 KVM: x86: Mitigate the cross-thread return address predictions bug | * 8f12dcab90 x86/speculation: Identify processors vulnerable to SMT RSB predictions | * e63c434de8 drm/i915: Fix VBT DSI DVO port handling | * fc88c68381 drm/i915: Initialize the obj flags for shmem objects | * 2e557c8ca2 drm/amdgpu/fence: Fix oops due to non-matching drm_sched init/fini | * 3af734f3ea Fix page corruption caused by racy check in __free_pages | * c94ce5ea68 arm64: dts: meson-axg: Make mmc host controller interrupts level-sensitive | * b796c02df3 arm64: dts: meson-g12-common: Make mmc host controller interrupts level-sensitive | * 5d9b771f53 arm64: dts: meson-gx: Make mmc host controller interrupts level-sensitive | * ac39dce119 rtmutex: Ensure that the top waiter is always woken up | * 86f7e42393 powerpc/64s/interrupt: Fix interrupt exit race with security mitigation switch | * 2907cf3f2e riscv: Fixup race condition on PG_dcache_clean in flush_icache_pte | * beb1cefa3c ceph: flush cap releases when the session is flushed | * 86733ab239 clk: ingenic: jz4760: Update M/N/OD calculation algorithm | * 239e927eb2 usb: typec: altmodes/displayport: Fix probe pin assign check | * 48aecce116 usb: core: add quirk for Alcor Link AK9563 smartcard reader | * a8178bb1c7 btrfs: free device in btrfs_close_devices for a single device filesystem | * 8d13f2c3e2 mptcp: be careful on subflow status propagation on errors | * 25141fb411 net: USB: Fix wrong-direction WARNING in plusb.c | * d1fba1e096 cifs: Fix use-after-free in rdata->read_into_pages() | * 1b83e7e174 pinctrl: intel: Restore the pins that used to be in Direct IRQ mode | * f5f025b703 spi: dw: Fix wrong FIFO level setting for long xfers | * 71668706fb pinctrl: single: fix potential NULL dereference | * a2a1065739 pinctrl: aspeed: Fix confusing types in return value | * 99450163bc pinctrl: mediatek: Fix the drive register definition of some Pins | * 9f0d2c2684 ASoC: topology: Return -ENOMEM on memory allocation failure | * 1a52ef89e3 riscv: stacktrace: Fix missing the first frame | * 5fb8154334 ALSA: pci: lx6464es: fix a debug loop | * 105ea562f6 selftests: forwarding: lib: quote the sysctl values | * 528e3f3a4b rds: rds_rm_zerocopy_callback() use list_first_entry() | * 48d6d8f2f6 igc: Add ndo_tx_timeout support | * 62ff7dd961 net/mlx5: Serialize module cleanup with reload and remove | * 95d2394f84 net/mlx5: fw_tracer, Zero consumer index when reloading the tracer | * ab7f3f6a9d net/mlx5: fw_tracer, Clear load bit when freeing string DBs buffers | * 193528646e net/mlx5e: IPoIB, Show unknown speed instead of error | * 7c6e8eb617 net/mlx5: Bridge, fix ageing of peer FDB entries | * 49ece61a07 net/mlx5e: Update rx ring hw mtu upon each rx-fcs flag change | * 31172267ba net/mlx5e: Introduce the mlx5e_flush_rq function | * e4e4e93d31 net/mlx5e: Move repeating clear_bit in mlx5e_rx_reporter_err_rq_cqe_recover | * 3f18b9ed8c net: mscc: ocelot: fix VCAP filters not matching on MAC with "protocol 802.1Q" | * 6acb5d853b net: dsa: mt7530: don't change PVC_EG_TAG when CPU port becomes VLAN-aware | * ca834a0178 ice: Do not use WQ_MEM_RECLAIM flag for workqueue | * 70d48c7992 uapi: add missing ip/ipv6 header dependencies for linux/stddef.h | * 3cec44036f ionic: clean interrupt before enabling queue to avoid credit race | * fad12afe87 net: phy: meson-gxl: use MMD access dummy stubs for GXL, internal PHY | * d23385a200 bonding: fix error checking in bond_debug_reregister() | * 11006d9d08 net: phylink: move phy_device_free() to correctly release phy device | * fb022d7b1c xfrm: fix bug with DSCP copy to v6 from v4 tunnel | * 6fe1ad42af RDMA/usnic: use iommu_map_atomic() under spin_lock() | * 8f5fe1cd8e RDMA/irdma: Fix potential NULL-ptr-dereference | * 1b4ef90cbc IB/IPoIB: Fix legacy IPoIB due to wrong number of queues | * 5dc688fae6 xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr() | * 9bae58d58b IB/hfi1: Restore allocated resources on failed copyout | * 558b1fa01c xfrm: compat: change expression for switch in xfrm_xlate64 | * 238b38e89f can: j1939: do not wait 250 ms if the same addr was already claimed | * d859184b60 of/address: Return an error when no valid dma-ranges are found | * 70f37b3118 tracing: Fix poll() and select() do not work on per_cpu trace_pipe and trace_pipe_raw | * df01749503 ALSA: hda/realtek: Enable mute/micmute LEDs on HP Elitebook, 645 G9 | * ca9d542203 ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book2 Pro 360 | * 706b6d86a6 ALSA: emux: Avoid potential array out-of-bound in snd_emux_xg_control() | * 731fc29de6 ALSA: hda/realtek: Add Positivo N14KP6-TG | * b938059807 btrfs: zlib: zero-initialize zlib workspace | * e65faa7e39 btrfs: limit device extents to the device size | * 2e4dd07fda migrate: hugetlb: check for hugetlb shared PMD in node migration | * 072e7412e8 mm/migration: return errno when isolate_huge_page failed * | f977f92131 Revert "nvmem: core: remove nvmem_config wp_gpio" * | 787413edad Merge 5.15.93 into android13-5.15-lts |\| | * 85d7786c66 Linux 5.15.93 | * 6e2fac197d bpf: Skip invalid kfunc call in backtrack_insn | * 46c9088cab gfs2: Always check inode size of inline inodes | * 8eb2e58a92 gfs2: Cosmetic gfs2_dinode_{in,out} cleanup | * e4991910f1 wifi: brcmfmac: Check the count value of channel spec to prevent out-of-bounds reads | * 97ccfffcc0 f2fs: fix to do sanity check on i_extra_isize in is_alive() | * 64fa364ad3 fbdev: smscufx: fix error handling code in ufx_usb_probe | * a77141a063 ovl: Use "buf" flexible array for memcpy() destination | * 1692fedd0f fs/ntfs3: Validate attribute data and valid sizes | * a5b9cb7276 powerpc/imc-pmu: Revert nest_init_lock to being a mutex | * 3691f43a09 iio:adc:twl6030: Enable measurement of VAC | * 8c84f50390 bpf: Do not reject when the stack read size is different from the tracked scalar size | * 14b6198abb bpf: Fix incorrect state pruning for <8B spill/fill | * 575a9f6fef phy: qcom-qmp-combo: fix runtime suspend | * e58df87394 phy: qcom-qmp-combo: fix broken power on | * 368ea32e0a phy: qcom-qmp-usb: fix memleak on probe deferral | * 2f27d3811a phy: qcom-qmp-combo: fix memleak on probe deferral | * 0cb10ddab7 phy: qcom-qmp-combo: disable runtime PM on unbind | * 0ef5ffe116 serial: 8250_dma: Fix DMA Rx rearm race | * e30328f599 serial: 8250_dma: Fix DMA Rx completion race | * a5a171f61a nvmem: core: fix cell removal on error | * 6d9fa3ff65 nvmem: core: remove nvmem_config wp_gpio | * adf80e072c nvmem: core: initialise nvmem->id early | * e3ebc3e23b drm/i915: Fix potential bit_17 double-free | * 997bed0f3c Squashfs: fix handling and sanity checking of xattr_ids count | * 7a0cfaf9d4 highmem: round down the address passed to kunmap_flush_on_unmap() | * 5dbe1ebd56 mm/swapfile: add cond_resched() in get_swap_pages() | * daf8241804 fpga: stratix10-soc: Fix return value check in s10_ops_write_init() | * afd32b6831 x86/debug: Fix stack recursion caused by wrongly ordered DR7 accesses | * 066ecbf1a5 kernel/irq/irqdomain.c: fix memory leak with using debugfs_lookup() | * 481bf49f58 usb: gadget: f_uac2: Fix incorrect increment of bNumEndpoints | * fdf40e5824 mm: hugetlb: proc: check for hugetlb shared PMD in /proc/PID/smaps | * 6c300351c5 riscv: disable generation of unwind tables | * a5c275add9 parisc: Wire up PTRACE_GETREGS/PTRACE_SETREGS for compat case | * a964decd13 parisc: Fix return code of pdc_iodc_print() | * 488eaf0625 nvmem: qcom-spmi-sdam: fix module autoloading | * 8569beb66f iio: imu: fxos8700: fix MAGN sensor scale and unit | * 8aa5cdcfaf iio: imu: fxos8700: remove definition FXOS8700_CTRL_ODR_MIN | * 4112ba1ad5 iio: imu: fxos8700: fix failed initialization ODR mode assignment | * abf7b2ba51 iio: imu: fxos8700: fix incorrect ODR mode readback | * 412757741c iio: imu: fxos8700: fix swapped ACCEL and MAGN channels readback | * 34909532b1 iio: imu: fxos8700: fix map label of channel type to MAGN sensor | * 8346eb4987 iio: imu: fxos8700: fix IMU data bits returned to user space | * 7567cdf3ce iio: imu: fxos8700: fix incomplete ACCEL and MAGN channels readback | * 6969852220 iio: imu: fxos8700: fix ACCEL measurement range selection | * cdacfb2205 iio:adc:twl6030: Enable measurements of VUSB, VBAT and others | * 9988063dce iio: adc: berlin2-adc: Add missing of_node_put() in error path | * c691a5c0fd iio: hid: fix the retval in gyro_3d_capture_sample | * ef80a34699 iio: hid: fix the retval in accel_3d_capture_sample | * c4eae85c73 efi: Accept version 2 of memory attributes table | * 710db82063 ALSA: hda/realtek: Add Acer Predator PH315-54 | * 3fbddf86d9 watchdog: diag288_wdt: fix __diag288() inline assembly | * 700dd5bc72 watchdog: diag288_wdt: do not use stack buffers for hardware data | * 21bc51e29e net: qrtr: free memory on error path in radix_tree_insert() | * dccbd062d7 fbcon: Check font dimension limits | * 5d7500d991 Input: i8042 - add Clevo PCX0DX to i8042 quirk table | * fc9e27f3ba vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF | * 9ba1188a71 usb: gadget: f_fs: Fix unbalanced spinlock in __ffs_ep0_queue_wait | * fe86480e90 usb: dwc3: qcom: enable vbus override when in OTG dr-mode | * a412fe7baf iio: adc: stm32-dfsdm: fill module aliases | * 9944659398 drm/amd/display: Fix timing not changning when freesync video is enabled | * a3967128bc net/x25: Fix to not accept on connected socket | * 396ea318e7 platform/x86: gigabyte-wmi: add support for B450M DS3H WIFI-CF | * 1577524633 platform/x86: dell-wmi: Add a keymap for KEY_MUTE in type 0x0010 table | * 540cea9f9b i2c: rk3x: fix a bunch of kernel-doc warnings | * 0aaabdb900 scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress | * 17b738590b scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress | * 8cd0499f9c perf/x86/intel: Add Emerald Rapids | * 7093515370 scsi: target: core: Fix warning on RT kernels | * b7960f5436 i2c: mxs: suppress probe-deferral error message | * b9b87fc34b i2c: designware-pci: Add new PCI IDs for AMD NAVI GPU | * d8fc0b5fb3 efi: fix potential NULL deref in efi_mem_reserve_persistent | * f423c2efd5 net: openvswitch: fix flow memory leak in ovs_flow_cmd_new | * 7985028647 virtio-net: Keep stop() to follow mirror sequence of open() | * 5d884f9e80 selftests: net: udpgso_bench_tx: Cater for pending datagrams zerocopy benchmarking | * 63aa63af3a selftests: net: udpgso_bench: Fix racing bug between the rx/tx programs | * d41a3f9cc2 selftests: net: udpgso_bench_rx/tx: Stop when wrong CLI args are provided | * 5af98283e5 selftests: net: udpgso_bench_rx: Fix 'used uninitialized' compiler warning | * 89e0701e03 ata: libata: Fix sata_down_spd_limit() when no link speed is reported | * 9ab896775f can: j1939: fix errant WARN_ON_ONCE in j1939_session_deactivate | * 02d77d98e0 igc: return an error if the mac type is unknown in igc_ptp_systim_to_hwtstamp() | * 04a7355820 riscv: kprobe: Fixup kernel panic when probing an illegal position | * 206c367b6a ip/ip6_gre: Fix non-point-to-point tunnel not generating IPv6 link local address | * 90178bc0f2 ip/ip6_gre: Fix changing addr gen mode not generating IPv6 link local address | * dfe2f0ea38 net: phy: meson-gxl: Add generic dummy stubs for MMD register access | * b7398efe24 squashfs: harden sanity check in squashfs_read_xattr_id_table | * 89a69216f1 netfilter: br_netfilter: disable sabotage_in hook after first suppression | * cdb444e73f drm/i915/adlp: Fix typo for reference clock | * 960f20d858 drm/i915/guc: Fix locking when searching for a hung request | * c27e0eac56 netrom: Fix use-after-free caused by accept on already connected socket | * 511c922c5b block, bfq: fix uaf for bfqq in bic_set_bfqq() | * a62c129dcb block, bfq: replace 0/1 with false/true in bic apis | * 37a744a068 block/bfq-iosched.c: use "false" rather than "BLK_RW_ASYNC" | * 2cd1e9c013 net: phy: dp83822: Fix null pointer access on DP83825/DP83826 devices | * 18c18c2110 sfc: correctly advertise tunneled IPv6 segmentation | * 878b06f60a dpaa2-eth: execute xdp_do_flush() before napi_complete_done() | * 3b5774cd6b dpaa_eth: execute xdp_do_flush() before napi_complete_done() | * 5a7040a649 virtio-net: execute xdp_do_flush() before napi_complete_done() | * 94add5b272 qede: execute xdp_do_flush() before napi_complete_done() | * a273f8e3ab ice: Prevent set_channel from changing queues while RDMA active | * b432e183c2 fix "direction" argument of iov_iter_kvec() | * d8b8306e96 fix iov_iter_bvec() "direction" argument | * 389c7c0ef9 READ is "data destination", not source... | * 7a3649bf5b WRITE is "data source", not destination... | * 83cc6a7bb7 vhost/net: Clear the pending messages when the backend is removed | * 7c7d344bc3 scsi: Revert "scsi: core: map PQ=1, PDT=other values to SCSI_SCAN_TARGET_PRESENT" | * 4b199dc094 drm/vc4: hdmi: make CEC adapter name unique | * dc1f8ab25a arm64: dts: imx8mm: Fix pad control for UART1_DTE_RX | * c681d7a4ed bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener | * 34ad5d8885 bpf: Fix to preserve reg parent/live fields when copying range info | * 7b86f9ab56 bpf: Support <8-byte scalar spill and refill | * 1b9256c962 ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path() | * b7abeb6916 bpf: Fix a possible task gone issue with bpf_send_signal[_thread]() helpers | * cfcc2390db ASoC: Intel: bytcr_wm5102: Drop reference count of ACPI device after use | * b4b204565a ASoC: Intel: bytcr_rt5640: Drop reference count of ACPI device after use | * 1f1e7635c5 ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use | * 41d323c352 ASoC: Intel: bytcht_es8316: Drop reference count of ACPI device after use | * 6a9990e1d9 ASoC: Intel: bytcht_es8316: move comment to the right place | * ffcdf35455 ASoC: Intel: boards: fix spelling in comments | * bd0b17ab1b bus: sunxi-rsb: Fix error handling in sunxi_rsb_init() | * 5f4543c938 firewire: fix memory leak for payload of request subaction to IEC 61883-1 FCP region * | 5020746bff Merge 5.15.92 into android13-5.15-lts |\| | * e515b9902f Linux 5.15.92 | * c7caf669b8 net: mctp: purge receive queues on sk destruction | * 046de74f9a net: fix NULL pointer in skb_segment_list | * 7ab3376703 selftests: Provide local define of __cpuid_count() | * e92e311ced selftests/vm: remove ARRAY_SIZE define from individual tests | * c9e52db900 tools: fix ARRAY_SIZE defines in tools and selftests hdrs | * c1aa0dd52d Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt | * 02e61196c5 ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems | * 79dd676b44 extcon: usbc-tusb320: fix kernel-doc warning | * c2bd60ef20 ext4: fix bad checksum after online resize | * 4cd1e18bc0 cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() | * 43acd767bd dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init | * a54c5ad007 HID: playstation: sanity check DualSense calibration data. | * 6d7686cc11 blk-cgroup: fix missing pd_online_fn() while activating policy | * 2144859229 erofs/zmap.c: Fix incorrect offset calculation | * 0dfef50313 bpf: Skip task with pid=1 in send_signal_common() | * e8bb772f74 firmware: arm_scmi: Clear stale xfer->hdr.status | * 80cb9f1a76 arm64: dts: imx8mq-thor96: fix no-mmc property for SDHCI | * 162fad24d2 arm64: dts: freescale: Fix pca954x i2c-mux node names | * 82ad105e1a ARM: dts: vf610: Fix pca9548 i2c-mux node names | * 5aee5f33e0 ARM: dts: imx: Fix pca9547 i2c-mux node name * | 7e0097918f Revert "scsi: ufs: core: Fix devfreq deadlocks" * | 6ce0fcdcc2 Revert "thermal/core: Rename 'trips' to 'num_trips'" * | 49a5232dfb Revert "thermal: Validate new state in cur_state_store()" * | be0ca2fc43 Revert "thermal/core: fix error code in __thermal_cooling_device_register()" * | 9617a003cc Revert "thermal: core: call put_device() only after device_register() fails" * | ccb2c48531 Revert "cpufreq: governor: Use kobject release() method to free dbs_data" * | 0108f014a5 Revert "gpio: use raw spinlock for gpio chip shadowed data" * | 1d2449f6be Revert "gpio: mxc: Protect GPIO irqchip RMW with bgpio spinlock" * | 5f51aedcba Revert "gpio: mxc: Unlock on error path in mxc_flip_edge()" * | 7622c50ba6 Merge 5.15.91 into android13-5.15-lts |\| | * 9cf4111cdf Linux 5.15.91 | * 14cc13e433 perf/x86/amd: fix potential integer overflow on shift of a int | * 033636b322 netfilter: conntrack: unify established states for SCTP paths | * 0b08201158 x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL | * b577400367 block: fix and cleanup bio_check_ro | * 1d152437e4 kbuild: Allow kernel installation packaging to override pkg-config | * a196468858 cpufreq: governor: Use kobject release() method to free dbs_data | * 7c513ced0d cpufreq: Move to_gov_attr_set() to cpufreq.h | * cf7a08622d Revert "Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode" | * 53c5d61198 tools: gpio: fix -c option of gpio-event-mon | * a7d1a303ff treewide: fix up files incorrectly marked executable | * 046fe53907 net: mdio-mux-meson-g12a: force internal PHY off on mux switch | * 86bdccde78 net/tg3: resolve deadlock in tg3_reset_task() during EEH | * 4364bf79d8 thermal: intel: int340x: Add locking to int340x_thermal_get_trip_type() | * e69c3a0d9d net: mctp: mark socks as dead on unhash, prevent re-add | * 954cc215cd net: ravb: Fix possible hang if RIS2_QFF1 happen | * 0f7218bf0a net: ravb: Fix lack of register setting after system resumed for Gen3 | * 3db4ca2938 ravb: Rename "no_ptp_cfg_active" and "ptp_cfg_active" variables | * 621f296f11 gpio: mxc: Unlock on error path in mxc_flip_edge() | * 071a839286 nvme: fix passthrough csi check | * 614471b7f7 riscv/kprobe: Fix instruction simulation of JALR | * 3391bd4235 sctp: fail if no bound addresses can be used for a given scope | * b0784860e1 net/sched: sch_taprio: do not schedule in taprio_reset() | * d2d3ab1b1d netrom: Fix use-after-free of a listening socket. | * 9df5ab02c6 netfilter: conntrack: fix vtag checks for ABORT/SHUTDOWN_COMPLETE | * ca3cf94776 ipv4: prevent potential spectre v1 gadget in fib_metrics_match() | * d50e7348b4 ipv4: prevent potential spectre v1 gadget in ip_metrics_convert() | * ead06e3449 netlink: annotate data races around sk_state | * c4eb423c6b netlink: annotate data races around dst_portid and dst_group | * fac9b69a93 netlink: annotate data races around nlk->portid | * 8a13595600 netfilter: nft_set_rbtree: skip elements in transaction from garbage collection | * 2bf1435fa1 netfilter: nft_set_rbtree: Switch to node list walk for overlap detection | * e481654426 drm/i915/selftest: fix intel_selftest_modify_policy argument types | * 66689a72ba net: fix UaF in netns ops registration error path | * 41b74e95f2 netlink: prevent potential spectre v1 gadgets | * 2f29d780bd i2c: designware: use casting of u64 in clock multiplication to avoid overflow | * b03f7ed9af scsi: ufs: core: Fix devfreq deadlocks | * 858d7e9218 net: mana: Fix IRQ name - add PCI and queue number | * bff5243bd3 EDAC/qcom: Do not pass llcc_driv_data as edac_device_ctl_info's pvt_info | * 5eedf4568d EDAC/device: Respect any driver-supplied workqueue polling value | * 4b7dfd0a68 ARM: 9280/1: mm: fix warning on phys_addr_t to void pointer assignment | * 7807871f28 ipv6: fix reachability confirmation with proxy_ndp | * f9a22f6fa1 thermal: intel: int340x: Protect trip temperature from concurrent updates | * 036093c08d KVM: arm64: GICv4.1: Fix race with doorbell on VPE activation/deactivation | * c56683c062 KVM: x86/vmx: Do not skip segment attributes if unusable bit is set | * e91308e637 ovl: fail on invalid uid/gid mapping at copy up | * 33a9657d67 ksmbd: limit pdu length size according to connection status | * 8d83a758ee ksmbd: downgrade ndr version error message to debug | * 87a7f38a90 ksmbd: do not sign response to session request for guest login | * 4210c3555d ksmbd: add max connections parameter | * cc6742b160 ksmbd: add smbd max io size parameter | * 3c8a5648a5 i2c: mv64xxx: Add atomic_xfer method to driver | * e619ab4fb3 i2c: mv64xxx: Remove shutdown method from driver | * 4b83bc6f87 cifs: Fix oops due to uncleared server->smbd_conn in reconnect | * 89042d3d85 ftrace/scripts: Update the instructions for ftrace-bisect.sh | * 592ba7116f trace_events_hist: add check for return value of 'create_hist_field' | * b0af180514 tracing: Make sure trace_printk() can output as soon as it can be used | * 91135d7233 module: Don't wait for GOING modules | * 85ee9919ad KVM: SVM: fix tsc scaling cache logic | * f0227eca97 scsi: hpsa: Fix allocation size for scsi_host_alloc() | * e5af9a458a drm/amdgpu: complete gfxoff allow signal during suspend without delay | * 62b9e9f921 Bluetooth: hci_sync: cancel cmd_timer if hci_open failed | * 21998acd31 exit: Use READ_ONCE() for all oops/warn limit reads | * e82b1598eb docs: Fix path paste-o for /sys/kernel/warn_count | * 1c51698ad6 panic: Expose "warn_count" to sysfs | * 0691ddae56 panic: Introduce warn_limit | * 7b98914a6c panic: Consolidate open-coded panic_on_warn checks | * fc636b1362 exit: Allow oops_limit to be disabled | * 339f8a8e52 exit: Expose "oops_count" to sysfs | * f80fb0001f exit: Put an upper limit on how often we can oops | * 2857ce7f47 panic: Separate sysctl logic from CONFIG_SMP | * e156d4dcb0 ia64: make IA64_MCA_RECOVERY bool instead of tristate | * 9024f77224 csky: Fix function name in csky_alignment() and die() | * 2ea497d153 h8300: Fix build errors from do_exit() to make_task_dead() transition | * a452ca0228 hexagon: Fix function name in die() | * 3b39f47474 objtool: Add a missing comma to avoid string concatenation | * 39a26d8721 exit: Add and use make_task_dead. | * b5c1acaa43 kasan: no need to unset panic_on_warn in end_report() | * b5c967dc68 ubsan: no need to unset panic_on_warn in ubsan_epilogue() | * e4cd210032 panic: unset panic_on_warn inside panic() | * 191f1f1f6a kernel/panic: move panic sysctls to its own file | * 654f6e8512 sysctl: add a new register_sysctl_init() interface | * 3aa991cde9 fs: reiserfs: remove useless new_opts in reiserfs_remount | * d830531f8f x86: ACPI: cstate: Optimize C3 entry on AMD CPUs | * 1f54762231 drm/i915: Remove unused variable | * 6e10127093 Revert "selftests/bpf: check null propagation only neither reg is PTR_TO_BTF_ID" | * 619ee31b96 drm/i915: Allow switching away via vga-switcheroo if uninitialized | * ea435ba9eb firmware: coreboot: Check size of table entry and use flex-array | * a4e70bcf2e lockref: stop doing cpu_relax in the cmpxchg loop | * b0ee61f5ee platform/x86: asus-nb-wmi: Add alternate mapping for KEY_SCREENLOCK | * e8d2f7f566 platform/x86: touchscreen_dmi: Add info for the CSL Panther Tab HD | * 2e0a8bacbe r8152: add vendor/device ID pair for Microsoft Devkit | * d4b717e34d scsi: hisi_sas: Set a port invalid only if there are no devices attached when refreshing port id | * e15750aa28 KVM: s390: interrupt: use READ_ONCE() before cmpxchg() | * 9300c65207 spi: spidev: remove debug messages that access spidev->spi without locking | * 48ff5d3812 ASoC: fsl-asoc-card: Fix naming of AC'97 CODEC widgets | * 5001ffb31d ASoC: fsl_ssi: Rename AC'97 streams to avoid collisions with AC'97 CODEC | * b76120e206 cpufreq: armada-37xx: stop using 0 as NULL pointer | * eda26fa856 perf/x86/intel/uncore: Add Emerald Rapids | * 544f9d4e9d perf/x86/msr: Add Emerald Rapids | * b1eb964d78 s390: expicitly align _edata and _end symbols on page boundary | * fb45ec279b s390/debug: add _ASM_S390_ prefix to header guard | * cd488abed9 drm: Add orientation quirk for Lenovo ideapad D330-10IGL | * ff7ab370b8 net: usb: cdc_ether: add support for Thales Cinterion PLS62-W modem | * d6935084e4 ASoC: fsl_micfil: Correct the number of steps on SX controls | * ac07316b2d cpufreq: Add SM6375 to cpufreq-dt-platdev blocklist | * f0e6dcae14 kcsan: test: don't put the expect array on the stack | * c51c0b3754 cpufreq: Add Tegra234 to cpufreq-dt-platdev blocklist | * 28e4e8ca9e scsi: iscsi: Fix multiple iSCSI session unbind events sent to userspace | * 14b1df2004 tcp: fix rate_app_limited to default to 1 | * 120b8e527e net: stmmac: enable all safety features by default | * a7d736cc3c thermal: core: call put_device() only after device_register() fails | * ed08f958e4 thermal/core: fix error code in __thermal_cooling_device_register() | * 108a6f91e2 thermal: Validate new state in cur_state_store() | * bd0ea77edf thermal/core: Rename 'trips' to 'num_trips' | * 521c6ebd4f thermal/core: Remove duplicate information when an error occurs | * 6504afa263 net: dsa: microchip: ksz9477: port map correction in ALU table entry register | * 18346db185 selftests/net: toeplitz: fix race on tpacket_v3 block close | * caa28c7c83 driver core: Fix test_async_probe_init saves device in wrong array | * 89c62cee5d w1: fix WARNING after calling w1_process() | * 3d0eafe413 w1: fix deadloop in __w1_remove_master_device() | * 7701a4bd45 device property: fix of node refcount leak in fwnode_graph_get_next_endpoint() | * ed0d8f731e ptdma: pt_core_execute_cmd() should use spinlock | * 29e9c67bf3 octeontx2-pf: Fix the use of GFP_KERNEL in atomic context on rt | * 03bff5819a tcp: avoid the lookup process failing to get sk in ehash table | * 5bd69d2ea8 nvme-pci: fix timeout request state check | * 39178dfe86 drm/amd/display: fix issues with driver unload | * 9a5a537e14 phy: phy-can-transceiver: Skip warning if no "max-bitrate" | * 4095065b59 dmaengine: xilinx_dma: call of_node_put() when breaking out of for_each_child_of_node() | * 5bd3c1c1bc cifs: fix potential deadlock in cache_refresh_path() | * 1a2a47b85c HID: betop: check shape of output reports | * b2a7309743 l2tp: prevent lockdep issue in l2tp_tunnel_register() | * edf0e509ce virtio-net: correctly enable callback during start_xmit | * d3401c7624 net: macb: fix PTP TX timestamp failure due to packet padding | * 71c6019655 dmaengine: Fix double increment of client_count in dma_chan_get() | * 1e7919f0b1 drm/panfrost: fix GENERIC_ATOMIC64 dependency | * a1b3e50e21 net: mlx5: eliminate anonymous module_init & module_exit | * 09e3fb6f53 net/mlx5: E-switch, Fix setting of reserved fields on MODIFY_SCHEDULING_ELEMENT | * 01a6e10810 net: ipa: disable ipa interrupt during suspend | * 98aec50ff7 Bluetooth: Fix possible deadlock in rfcomm_sk_state_change | * 0e59f60b74 usb: gadget: f_fs: Ensure ep0req is dequeued before free_request | * ae8e136bca usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait | * f25cd2b731 HID: revert CHERRY_MOUSE_000C quirk | * 39483511fd pinctrl: rockchip: fix mux route data for rk3568 | * 1dae88a0b4 net: stmmac: fix invalid call to mdiobus_get_phy() | * 6716838bf8 HID: check empty report_list in bigben_probe() | * 2b49568254 HID: check empty report_list in hid_validate_values() | * ad67de330d net: mdio: validate parameter addr in mdiobus_get_phy() | * 4869129379 net: usb: sr9700: Handle negative len | * 2827c4eb42 octeontx2-pf: Avoid use of GFP_KERNEL in atomic context | * 77e8ed776c l2tp: close all race conditions in l2tp_tunnel_register() | * af22d2c0b4 l2tp: convert l2tp_tunnel_list to idr | * 22c7d45ca3 l2tp: Don't sleep and disable BH under writer-side sk_callback_lock | * 87d9205d9a l2tp: Serialize access to sk_user_data with sk_callback_lock | * c53acbf2fa net/sched: sch_taprio: fix possible use-after-free | * 40516d042b net: stmmac: Fix queue statistics reading | * 620aa67f80 pinctrl: rockchip: fix reading pull type on rk3568 | * ddca674af1 pinctrl/rockchip: add error handling for pull/drive register getters | * 259ab8fb8c pinctrl/rockchip: Use temporary variable for struct device | * 8cbf932c5c wifi: rndis_wlan: Prevent buffer overflow in rndis_query_oid | * f792d26e5c gpio: mxc: Always set GPIOs used as interrupt source to INPUT mode | * 8335f877ef gpio: mxc: Protect GPIO irqchip RMW with bgpio spinlock | * fb4fb3d267 gpio: use raw spinlock for gpio chip shadowed data | * 52e3eebfe6 sch_htb: Avoid grafting on htb_destroy_class_offload when destroying htb | * 8232e5a84d net: enetc: avoid deadlock in enetc_tx_onestep_tstamp() | * 95347e41ca net: wan: Add checks for NULL for utdm in undo_uhdlc_init and unmap_si_regs | * 7f129927fe net: nfc: Fix use-after-free in local_cleanup() | * 397aaac884 phy: rockchip-inno-usb2: Fix missing clk_disable_unprepare() in rockchip_usb2phy_power_on() | * 01bdcc73db bpf: Fix pointer-leak due to insufficient speculative store bypass mitigation | * 261e2f12b6 amd-xgbe: Delay AN timeout during KR training | * a8cf4af544 amd-xgbe: TX Flow Ctrl Registers are h/w ver dependent | * 8e897cb674 ARM: dts: at91: sam9x60: fix the ddr clock for sam9x60 | * 0a27dcd534 NFSD: fix use-after-free in nfsd4_ssc_setup_dul() | * 24af570c99 phy: ti: fix Kconfig warning and operator precedence | * 631fc36685 arm64: dts: qcom: msm8992-libra: Fix the memory map | * dda20ffec8 arm64: dts: qcom: msm8992-libra: Add CPU regulators | * 37ba5e9293 arm64: dts: qcom: msm8992: Don't use sfpb mutex | * bab87524f6 PM: AVS: qcom-cpr: Fix an error handling path in cpr_probe() | * b7a479c764 affs: initialize fsdata in affs_truncate() | * 623d111689 IB/hfi1: Remove user expected buffer invalidate race | * 47d5fc0dcd IB/hfi1: Immediately remove invalid memory from hardware | * 85caef2cfd IB/hfi1: Fix expected receive setup error exit issues | * cb193984d4 IB/hfi1: Reserve user expected TIDs | * 891ddfae39 IB/hfi1: Reject a zero-length user expected buffer | * 362c948972 RDMA/core: Fix ib block iterator counter overflow | * e26c571c3b tomoyo: fix broken dependency on *.conf.default | * 7dfe83ecc3 firmware: arm_scmi: Harden shared memory access in fetch_notification | * a653dbb70c firmware: arm_scmi: Harden shared memory access in fetch_response | * caffa7fed1 EDAC/highbank: Fix memory leak in highbank_mc_probe() | * 95de286200 reset: uniphier-glue: Fix possible null-ptr-deref | * 4773a8cf9a reset: uniphier-glue: Use reset_control_bulk API | * 7b33accc8f soc: imx8m: Fix incorrect check for of_clk_get_by_name() | * f07427f8d9 arm64: dts: imx8mm-venice-gw7901: fix USB2 controller OC polarity | * c4cb73febe HID: intel_ish-hid: Add check for ishtp_dma_tx_map | * 25f97c9883 ARM: imx: add missing of_node_put() | * 3e9d79ded9 arm64: dts: imx8mm-beacon: Fix ecspi2 pinmux | * 5381350761 ARM: dts: imx6qdl-gw560x: Remove incorrect 'uart-has-rtscts' | * 0e4bba1656 ARM: dts: imx7d-pico: Use 'clock-frequency' | * 108cf4c6d5 ARM: dts: imx6ul-pico-dwarf: Use 'clock-frequency' | * 207c9e64ed arm64: dts: imx8mp-phycore-som: Remove invalid PMIC property | * 7ce380fe75 dmaengine: ti: k3-udma: Do conditional decrement of UDMA_CHAN_RT_PEER_BCNT_REG | * edba9b7a70 memory: mvebu-devbus: Fix missing clk_disable_unprepare in mvebu_devbus_probe() | * e66f6949da memory: atmel-sdramc: Fix missing clk_disable_unprepare in atmel_ramc_probe() | * eda11ab556 memory: tegra: Remove clients SID override programming * | cab35cbd71 Revert "xhci: Add update_hub_device override for PCI xHCI hosts" * | 29e8f224d8 Revert "xhci: Detect lpm incapable xHC USB3 roothub ports from ACPI tables" * | 5739b27e8f Revert "xhci: Add a flag to disable USB3 lpm on a xhci root port level." * | 5b60fdf2e0 Merge 5.15.90 into android13-5.15-lts |\| | * aabd5ba7e9 Linux 5.15.90 | * 4b6f8263e9 io_uring/rw: remove leftover debug statement | * b10acfcd61 io_uring/rw: ensure kiocb_end_write() is always called | * 124fb13cc7 io_uring: fix double poll leak on repolling | * e944f1e37b io_uring: Clean up a false-positive warning from GCC 9.3.0 | * 940e8922c1 mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma | * e83cc8a780 soc: qcom: apr: Make qcom,protection-domain optional again | * 982c8b1e95 Revert "wifi: mac80211: fix memory leak in ieee80211_if_add()" | * 40a4797e08 block: mq-deadline: Rename deadline_is_seq_writes() | * 3abf10b4c4 net/mlx5: fix missing mutex_unlock in mlx5_fw_fatal_reporter_err_work() | * 1aab00aa41 net/ulp: use consistent error code when blocking ULP | * 2e4c95a404 io_uring/net: fix fast_iov assignment in io_setup_async_msg() | * 311b298a33 io_uring: io_kiocb_update_pos() should not touch file for non -1 offset | * 487a086595 tracing: Use alignof__(struct {type b;}) instead of offsetof() | * 430443f856 x86/fpu: Use _Alignof to avoid undefined behavior in TYPE_ALIGN | * f114717dfa Revert "drm/amdgpu: make display pinning more flexible (v2)" | * 7a993c1be5 efi: rt-wrapper: Add missing include | * de2af657ca arm64: efi: Execute runtime services from a dedicated stack | * 9cca110cf8 fs/ntfs3: Fix attr_punch_hole() null pointer derenference | * d4d112e5c4 drm/amdgpu: drop experimental flag on aldebaran | * c82fa690da drm/amd/display: Fix COLOR_SPACE_YCBCR2020_TYPE matrix | * 88c3375224 drm/amd/display: Calculate output_color_space after pixel encoding adjustment | * 87e605b161 drm/amd/display: Fix set scaling doesn's work | * 8687b8cdc3 drm/i915/display: Check source height is > 0 | * 5d96179166 drm/i915: re-disable RC6p on Sandy Bridge | * e9a7ec188b mei: me: add meteor lake point M DID | * eb0421d90f gsmi: fix null-deref in gsmi_get_variable | * b8d99cda52 serial: atmel: fix incorrect baudrate setup | * b85498385a serial: amba-pl011: fix high priority character transmission in rs486 mode | * 0f150134dd dmaengine: idxd: Let probe fail when workqueue cannot be enabled | * 1e8c127c2e dmaengine: tegra210-adma: fix global intr clear | * 473e2281f7 dmaengine: lgm: Move DT parsing after initialization | * 73337724cb serial: pch_uart: Pass correct sg to dma_unmap_sg() | * 4307a41cbc dt-bindings: phy: g12a-usb3-pcie-phy: fix compatible string documentation | * c9d55f564a dt-bindings: phy: g12a-usb2-phy: fix compatible string documentation | * 78aa45bb7a usb-storage: apply IGNORE_UAS only for HIKSEMI MD202 on RTL9210 | * a69c8dfb85 usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate() | * 1ab67e87b1 usb: gadget: g_webcam: Send color matching descriptor per frame | * b08167d8f0 usb: typec: altmodes/displayport: Fix pin assignment calculation | * 7fb1322e7a usb: typec: altmodes/displayport: Add pin assignment helper | * 59f9ee3796 usb: typec: tcpm: Fix altmode re-registration causes sysfs create fail | * a1c8a5c2f8 usb: host: ehci-fsl: Fix module alias | * f073d10cd5 usb: cdns3: remove fetched trb from cache before dequeuing | * 73f4bde973 USB: serial: cp210x: add SCALANCE LPE-9000 device id | * a2e075f401 USB: gadgetfs: Fix race between mounting and unmounting | * 2da67bff29 tty: fix possible null-ptr-defer in spk_ttyio_release | * cb53a3366e tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer | * f322dd2e4a staging: mt7621-dts: change some node hex addresses to lower case | * 6508788b2c bpf: restore the ebpf program ID for BPF_AUDIT_UNLOAD and PERF_BPF_EVENT_PROG_UNLOAD | * 7b122c33bd riscv: dts: sifive: fu740: fix size of pcie 32bit memory | * 701f9c3da6 thunderbolt: Use correct function to calculate maximum USB3 link rate | * 5b1b03a3d3 cifs: do not include page data when checking signature | * 64287cd456 btrfs: fix race between quota rescan and disable leading to NULL pointer deref | * f2e0e1615d btrfs: do not abort transaction on failure to write log tree when syncing log | * f653abe619 mmc: sdhci-esdhc-imx: correct the tuning start tap and step setting | * 9881436f01 mmc: sunxi-mmc: Fix clock refcount imbalance during unbind | * 33bd0db750 ACPI: PRM: Check whether EFI runtime is available | * 87e1ee6058 comedi: adv_pci1760: Fix PWM instruction handling | * b5d24a8e4a usb: core: hub: disable autosuspend for TI TUSB8041 | * 61a0890cb9 misc: fastrpc: Fix use-after-free race condition for maps | * 1b7b7bb400 misc: fastrpc: Don't remove map on creater_process and device_release | * e7e41fcf90 USB: misc: iowarrior: fix up header size for USB_DEVICE_ID_CODEMERCS_IOW100 | * f3de34d90d staging: vchiq_arm: fix enum vchiq_status return types | * 16d09c4bc9 USB: serial: option: add Quectel EM05CN modem | * 34d769f0c6 USB: serial: option: add Quectel EM05CN (SG) modem | * 768d56ed24 USB: serial: option: add Quectel EC200U modem | * 829916f069 USB: serial: option: add Quectel EM05-G (RS) modem | * eb8808f769 USB: serial: option: add Quectel EM05-G (CS) modem | * 6e0430db19 USB: serial: option: add Quectel EM05-G (GR) modem | * f01aefe374 prlimit: do_prlimit needs to have a speculation check | * 418e2c756d xhci: Detect lpm incapable xHC USB3 roothub ports from ACPI tables | * 10cb7d53be usb: acpi: add helper to check port lpm capability using acpi _DSM | * 1818e2a97d xhci: Add a flag to disable USB3 lpm on a xhci root port level. | * 8911ff7963 xhci: Add update_hub_device override for PCI xHCI hosts | * c462ac871f xhci: Fix null pointer dereference when host dies | * f39c813af0 usb: xhci: Check endpoint is valid before dereferencing it | * 0f175cebc4 xhci-pci: set the dma max_seg_size | * 89a410dbd0 io_uring/rw: defer fsnotify calls to task context | * 05d69b372b io_uring: do not recalculate ppos unnecessarily | * ff8a070253 io_uring: update kiocb->ki_pos at execution time | * b7958caf41 io_uring: remove duplicated calls to io_kiocb_ppos | * 86e2d6901a io_uring: ensure that cached task references are always put on exit | * 30b9068934 io_uring: fix async accept on O_NONBLOCK sockets | * a79b13f249 io_uring: allow re-poll if we made progress | * 3c1a3d0269 io_uring: support MSG_WAITALL for IORING_OP_SEND(MSG) | * 390b881631 io_uring: add flag for disabling provided buffer recycling | * 9b7b0f2116 io_uring: ensure recv and recvmsg handle MSG_WAITALL correctly | * cdc68e714d io_uring: improve send/recv error handling | * ccf06b5a98 io_uring: pass in EPOLL_URING_WAKE for eventfd signaling and wakeups | * 77baf39227 eventfd: provide a eventfd_signal_mask() helper | * a2d8ff00a7 eventpoll: add EPOLL_URING_WAKE poll wakeup flag | * a9aa4aa7a5 io_uring: don't gate task_work run on TIF_NOTIFY_SIGNAL | * bd9a23a4bb hugetlb: unshare some PMDs when splitting VMAs | * 393d9e3ed1 drm/amd: Delay removal of the firmware framebuffer | * 865e244e06 drm/amdgpu: disable runtime pm on several sienna cichlid cards(v2) | * 560373fb1e ALSA: hda/realtek: fix mute/micmute LEDs don't work for a HP platform | * 26264260a8 ALSA: hda/realtek: fix mute/micmute LEDs for a HP ProBook | * 1026756321 efi: fix userspace infinite retry read efivars after EFI runtime services page fault | * 45627a1a64 nilfs2: fix general protection fault in nilfs_btree_insert() | * 350d66d9e7 zonefs: Detect append writes at invalid locations | * 5054d001ff Add exception protection processing for vd in axi_chan_handle_err function | * a12fd43bd1 wifi: mac80211: sdata can be NULL during AMPDU start | * f96a6c009e wifi: brcmfmac: fix regression for Broadcom PCIe wifi devices | * 908d1742b6 Bluetooth: hci_qca: Fix driver shutdown on closed serdev | * 7530fbc05f fbdev: omapfb: avoid stack overflow warning | * e1df7f0b27 perf/x86/rapl: Treat Tigerlake like Icelake | * 2c129e8689 f2fs: let's avoid panic if extent_tree is not created | * 58bac74402 x86/asm: Fix an assembler warning with current binutils | * fdb4a70bb7 btrfs: always report error in run_one_delayed_ref() | * f641067ea2 RDMA/srp: Move large values to a new enum for gcc13 | * 793f8ac218 r8169: move rtl_wol_enable_rx() and rtl_prepare_power_down() | * dc072762f9 net/ethtool/ioctl: return -EOPNOTSUPP if we have no phy stats | * 308d24d875 vduse: Validate vq_num in vduse_validate_config() | * 8e1eb926a0 virtio_pci: modify ENOENT to EINVAL | * 64a6f3689d tools/virtio: initialize spinlocks in vring_test.c | * 95fc28a8e9 selftests/bpf: check null propagation only neither reg is PTR_TO_BTF_ID | * d4a9d2944f pNFS/filelayout: Fix coalescing test for single DS | * 6a3319af6b btrfs: fix trace event name typo for FLUSH_DELAYED_REFS * | 52cea9ba91 Merge "Merge 5.15.89 into android13-5.15-lts" into android13-5.15-lts |\ \ | * | de550d72f1 Merge 5.15.89 into android13-5.15-lts | |\| | | * 3bcc86eb3e Linux 5.15.89 | | * 37c18ef49e pinctrl: amd: Add dynamic debugging for active GPIOs | | * a5841b81ad Revert "usb: ulpi: defer ulpi_register on ulpi_read_id timeout" | | * 7ec9a45fc4 block: handle bio_split_to_limits() NULL return | | * ba86db02d4 io_uring/io-wq: only free worker if it was allocated for creation | | * bb135bcc94 io_uring/io-wq: free worker if task_work creation is canceled | | * 63c2fa09b8 scsi: mpt3sas: Remove scsi_dma_map() error messages | | * e2ea555642 efi: fix NULL-deref in init error path | | * 94b6cf84db arm64: cmpxchg_double*: hazard against entire exchange variable | | * 3891fa4982 arm64: atomics: remove LL/SC trampolines | | * 61e86339af arm64: atomics: format whitespace consistently | | * ed4629d1e9 io_uring: lock overflowing for IOPOLL | | * fbf5015141 KVM: x86: Do not return host topology information from KVM_GET_SUPPORTED_CPUID | | * ee16841134 Documentation: KVM: add API issues section | | * b8f3b3cffb mm: Always release pages to the buddy allocator in memblock_free_late(). | | * d2dc110dea platform/surface: aggregator: Add missing call to ssam_request_sync_free() | | * cfd5978411 igc: Fix PPS delta between two synchronized end-points | | * 0bf52601ce perf build: Properly guard libbpf includes | | * 205f35eee7 net/mlx5e: Don't support encap rules with gbp option | | * 0526fc9330 net/mlx5: Fix ptp max frequency adjustment range | | * 9e2c38827c net/sched: act_mpls: Fix warning during failed attribute validation | | * e3bb44beaf tools/nolibc: fix the O_* fcntl/open macro definitions for riscv | | * 1e6ec75bb3 tools/nolibc: restore mips branch ordering in the _start block | | * bd0431a66c tools/nolibc: Remove .global _start from the entry point code | | * a77c54f5b5 tools/nolibc/arch: mark the _start symbol as weak | | * da51e086d1 tools/nolibc/arch: split arch-specific code into individual files | | * 8591e788be tools/nolibc/types: split syscall-specific definitions into their own files | | * 4fceecdeaa tools/nolibc/std: move the standard type definitions to std.h | | * 1792136f22 tools/nolibc: use pselect6 on RISCV | | * 487386a49e tools/nolibc: x86-64: Use `mov $60,%eax` instead of `mov $60,%rax` | | * 27af4f2260 tools/nolibc: x86: Remove `r8`, `r9` and `r10` from the clobber list | | * a60b24192b af_unix: selftest: Fix the size of the parameter to connect() | | * 39ae73e581 nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame() | | * f6003784b1 hvc/xen: lock console list traversal | | * 79c58b7424 octeontx2-af: Fix LMAC config in cgx_lmac_rx_tx_enable | | * 303d062881 tipc: fix unexpected link reset due to discovery messages | | * e79d0f97cc ALSA: usb-audio: Relax hw constraints for implicit fb sync | | * c9557906bd ALSA: usb-audio: Make sure to stop endpoints before closing EPs | | * 83e758105b ASoC: wm8904: fix wrong outputs volume after power reactivation | | * 7c26d21872 scsi: ufs: core: WLUN suspend SSU/enter hibern8 fail recovery | | * 513fdf0b8e scsi: ufs: Stop using the clock scaling lock in the error handler | | * 13259b60b7 scsi: mpi3mr: Refer CONFIG_SCSI_MPI3MR in Makefile | | * 470f6a9175 regulator: da9211: Use irq handler when ready | | * 24107ad469 x86/resctrl: Fix task CLOSID/RMID update race | | * cd3da505fb EDAC/device: Fix period calculation in edac_device_reset_delay_period() | | * ab0d02c53a x86/boot: Avoid using Intel mnemonics in AT&T syntax asm | | * a90d339f1f powerpc/imc-pmu: Fix use of mutex in IRQs disabled section | | * 511cf17b24 netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function. | | * b22faa21b6 sched/core: Fix use-after-free bug in dup_user_cpus_ptr() | | * d766ccadbe iommu/mediatek-v1: Fix an error handling path in mtk_iommu_v1_probe() | | * c929a230c8 iommu/iova: Fix alloc iova overflows issue | | * 4b51aa263a usb: ulpi: defer ulpi_register on ulpi_read_id timeout | | * 9a8bf443f6 bus: mhi: host: Fix race between channel preparation and M0 event | | * 456e3794e0 ipv6: raw: Deduct extension header length in rawv6_push_pending_frames | | * 4c93422a54 ixgbe: fix pci device refcount leak | | * e97da5d97a platform/x86: sony-laptop: Don't turn off 0x153 keyboard backlight during probe | | * f3b1e04daf dt-bindings: msm/dsi: Don't require vcca-supply on 14nm PHY | | * 52a5f596c6 dt-bindings: msm/dsi: Don't require vdds-supply on 10nm PHY | | * 984ad875db drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer | | * 92ae83665e platform/x86: ideapad-laptop: Add Legion 5 15ARH05 DMI id to set_fn_lock_led_list[] | | * e38b5f81df dt-bindings: msm: dsi-phy-28nm: Add missing qcom, dsi-phy-regulator-ldo-mode | | * bb32ab40cb dt-bindings: msm: dsi-controller-main: Fix description of core clock | | * 3fb8d10bee dt-bindings: msm: dsi-controller-main: Fix power-domain constraint | | * dc5b651cad drm/msm/adreno: Make adreno quirks not overwrite each other | | * 757d665ee1 dt-bindings: msm: dsi-controller-main: Fix operating-points-v2 constraint | | * c90cf47d30 platform/x86: dell-privacy: Fix SW_CAMERA_LENS_COVER reporting | | * 25b5f693bc platform/surface: aggregator: Ignore command messages not intended for us | | * ee7b8ce2cc platform/x86: dell-privacy: Only register SW_CAMERA_LENS_COVER if present | | * e0072068ad cifs: Fix uninitialized memory read for smb311 posix symlink create | | * f3495b5e9e net/mlx5e: Set action fwd flag when parsing tc action goto | | * 1a8431cc20 drm/i915/gt: Reset twice | | * 011ecdbcd5 drm/virtio: Fix GEM handle creation UAF | | * 798dfeeae3 s390/percpu: add READ_ONCE() to arch_this_cpu_to_op_simple() | | * a400593eb3 s390/cpum_sf: add READ_ONCE() semantics to compare and swap loops | | * d4fa65960a ASoC: qcom: lpass-cpu: Fix fallback SD line index handling | | * 8400b91c11 s390/kexec: fix ipl report address for kdump | | * c07e0babd1 perf auxtrace: Fix address filter duplicate symbol selection | | * e81d82da61 net: stmmac: add aux timestamps fifo clearance wait | | * 44167b74a8 docs: Fix the docs build with Sphinx 6.0 | | * 24176bf2a1 efi: tpm: Avoid READ_ONCE() for accessing the event log | | * 01b966b14c selftests: kvm: Fix a compile error in selftests/kvm/rseq_test.c | | * c773ebe11c KVM: arm64: nvhe: Fix build with profile optimization | | * c1d6a72fc8 KVM: arm64: Fix S1PTW handling on RO memslots | | * e04e6cd883 ALSA: hda/realtek: Enable mute/micmute LEDs on HP Spectre x360 13-aw0xxx | | * b983c9a971 ALSA: hda/realtek - Turn on power early | | * 9ab3696881 ALSA: control-led: use strscpy in set_led_id() | | * a8acfe2c6f netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits * | | 2c4f6d72f1 Merge "Merge 5.15.88 into android13-5.15-lts" into android13-5.15-lts |\| | | * | 773ec50a8a Merge 5.15.88 into android13-5.15-lts | |\| | | * 90bb4f8f39 Linux 5.15.88 | | * cbd3e6d5e5 ALSA: hda - Enable headset mic on another Dell laptop with ALC3254 | | * b98dee4746 ALSA: hda/hdmi: Add a HP device 0x8715 to force connect list | | * 26350c21bc ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF | | * dadd0dcaa6 net/ulp: prevent ULP without clone op from entering the LISTEN status | | * 04941c1d5b net: sched: disallow noqueue for qdisc classes | | * 068b512193 serial: fixup backport of "serial: Deassert Transmit Enable on probe in driver-specific way" | | * 46aa155758 selftests/vm/pkeys: Add a regression test for setting PKRU through ptrace | | * 3c1940c549 x86/fpu: Emulate XRSTOR's behavior if the xfeatures PKRU bit is not set | | * 3f1c81426a x86/fpu: Allow PKRU to be (once again) written by ptrace. | | * b29773d6b0 x86/fpu: Add a pkru argument to copy_uabi_to_xstate() | | * 9813c5fc22 x86/fpu: Add a pkru argument to copy_uabi_from_kernel_to_xstate(). | | * fea26e83a1 x86/fpu: Take task_struct* in copy_sigframe_from_user_to_xstate() | | * d4d152017e parisc: Align parisc MADV_XXX constants with all other architectures | * | 1867565896 Revert "ASoC/SoundWire: dai: expand 'stream' concept beyond SoundWire" | * | 43064ed394 Revert "ASoC: Intel/SOF: use set_stream() instead of set_tdm_slots() for HDAudio" | * | 959d50edd2 Revert "PM/devfreq: governor: Add a private governor_data for governor" * | | c34c76a947 Revert "ASoC/SoundWire: dai: expand 'stream' concept beyond SoundWire" * | | 33ef84070b Revert "ASoC: Intel/SOF: use set_stream() instead of set_tdm_slots() for HDAudio" * | | e60641bdca Revert "PM/devfreq: governor: Add a private governor_data for governor" * | | 793ec0a9cc Merge "Merge 5.15.87 into android13-5.15-lts" into android13-5.15-lts |\| | | * | fc4de343bd Merge 5.15.87 into android13-5.15-lts | |\| | | * d57287729e Linux 5.15.87 | | * 24186c6822 drm/mgag200: Fix PLL setup for G200_SE_A rev >=4 | | * e326ee018a io_uring: Fix unsigned 'res' comparison with zero in io_fixup_rw_res() | | * b2b6eefab4 efi: random: combine bootloader provided RNG seed with RNG protocol output | | * 99c0759495 mbcache: Avoid nesting of cache->c_list_lock under bit locks | | * d50d6c193a net: hns3: fix return value check bug of rx copybreak | | * d4e6a13eb9 btrfs: make thaw time super block check to also verify checksum | | * 70a1dccd0e selftests: set the BUILD variable to absolute path | | * 58fef3ebc8 ext4: don't allow journal inode to have encrypt flag | | * bd5dc96fea mptcp: use proper req destructor for IPv6 | | * 78bd6ab52c mptcp: dedicated request sock for subflow in v6 | | * 6e9c1aef3e Revert "ACPI: PM: Add support for upcoming AMD uPEP HID AMDI007" | | * e32f867b37 ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob | | * 4136f1ac1e ksmbd: fix infinite loop in ksmbd_conn_handler_loop() | | * f10defb0be hfs/hfsplus: avoid WARN_ON() for sanity check, use proper error handling | | * 48d9e2e6de hfs/hfsplus: use WARN_ON for sanity check | | * f5a9bbf962 drm/i915/gvt: fix vgpu debugfs clean in remove | | * ae9a615117 drm/i915/gvt: fix gvt debugfs destroy | | * eb3e943a32 riscv, kprobes: Stricter c.jr/c.jalr decoding | | * 620a229f57 riscv: uaccess: fix type of 0 variable on error in get_user() | | * 8e05a993f8 thermal: int340x: Add missing attribute for data rate base | | * c3222fd282 io_uring: fix CQ waiting timeout handling | | * b7b9bc9305 block: don't allow splitting of a REQ_NOWAIT bio | | * e1358c8787 fbdev: matroxfb: G200eW: Increase max memory from 1 MB to 16 MB | | * 682a7d064f nfsd: fix handling of readdir in v4root vs. mount upcall timeout | | * cb42aa7b5f x86/bugs: Flush IBP in ib_prctl_set() | | * 554a880a1f x86/kexec: Fix double-free of elf header buffer | | * 264241a610 btrfs: check superblock to ensure the fs was not modified at thaw time | | * 69f4bda5f4 nvme: also return I/O command effects from nvme_command_effects | | * a6a4b057cd nvmet: use NVME_CMD_EFFECTS_CSUPP instead of open coding it | | * f9309dcaa9 io_uring: check for valid register opcode earlier | | * 4df413d469 nvme: fix multipath crash caused by flush request when blktrace is enabled | | * 03ce792128 ASoC: Intel: bytcr_rt5640: Add quirk for the Advantech MICA-071 tablet | | * 0dca7375e2 udf: Fix extension of the last extent in the file | | * dc1bc90397 caif: fix memory leak in cfctrl_linkup_request() | | * bce3680b48 drm/i915: unpin on error in intel_vgpu_shadow_mm_pin() | | * da6a3653b8 perf stat: Fix handling of --for-each-cgroup with --bpf-counters to match non BPF mode | | * 11cd4ec635 usb: rndis_host: Secure rndis_query check against int overflow | | * 6ea5273c71 octeontx2-pf: Fix lmtst ID used in aura free | | * 4e5f2c74cb drivers/net/bonding/bond_3ad: return when there's no aggregator | | * 8414983c2e fs/ntfs3: don't hold ni_lock when calling truncate_setsize() | | * a23e8376e6 drm/imx: ipuv3-plane: Fix overlay plane width | | * a8f7fd322f perf tools: Fix resources leak in perf_data__open_dir() | | * a1e1521b46 netfilter: ipset: Rework long task execution when adding/deleting entries | | * 6f19a38483 netfilter: ipset: fix hash:net,port,net hang with /0 subnet | | * 774d259749 net: sparx5: Fix reading of the MAC address | | * 04dc4003e5 net: sched: cbq: dont intepret cls results when asked to drop | | * f02327a487 net: sched: atm: dont intepret cls results when asked to drop | | * 95da1882ce gpio: sifive: Fix refcount leak in sifive_gpio_probe | | * da9c9883ec ceph: switch to vfs_inode_has_locks() to fix file lock bug | | * 54e72ce5f1 filelock: new helper: vfs_inode_has_locks | | * f34b03ce3a drm/meson: Reduce the FIFO lines held when AFBC is not used | | * 05a8410b0f RDMA/mlx5: Fix validation of max_rd_atomic caps for DC | | * 8d89870d63 RDMA/mlx5: Fix mlx5_ib_get_hw_stats when used for device | | * 4d112f0016 net: phy: xgmiitorgmii: Fix refcount leak in xgmiitorgmii_probe | | * e5fbeb3d16 net: ena: Update NUMA TPH hint register upon NUMA node update | | * 7840b93cfd net: ena: Set default value for RX interrupt moderation | | * d09b7a9d2f net: ena: Fix rx_copybreak value update | | * 0e7ad9b006 net: ena: Use bitmask to indicate packet redirection | | * 5d4964984b net: ena: Account for the number of processed bytes in XDP | | * f17d9aec07 net: ena: Don't register memory info on XDP exchange | | * a4aa727ad0 net: ena: Fix toeplitz initial hash value | | * 0bec17f1ce net: amd-xgbe: add missed tasklet_kill | | * cb2f74685f net/mlx5e: Fix hw mtu initializing at XDP SQ allocation | | * 6c72abb78b net/mlx5e: Always clear dest encap in neigh-update-del | | * b36783bc11 net/mlx5e: TC, Refactor mlx5e_tc_add_flow_mod_hdr() to get flow attr | | * f8c10eeba3 net/mlx5e: IPoIB, Don't allow CQE compression to be turned on by default | | * 7227bbb7c1 net/mlx5: Avoid recovery in probe flows | | * 9369b9afa8 net/mlx5: Add forgotten cleanup calls into mlx5_init_once() error path | | * d966f2ee4b net/mlx5: E-Switch, properly handle ingress tagged packets on VST | | * 6a37a01aba vdpa_sim: fix vringh initialization in vdpasim_queue_ready() | | * e3462410c3 vhost: fix range used in translate_desc() | | * 13871f60ec vringh: fix range used in iotlb_translate() | | * e05d4c8c28 vhost/vsock: Fix error handling in vhost_vsock_init() | | * 586e6fd7d5 vdpa_sim: fix possible memory leak in vdpasim_net_init() and vdpasim_blk_init() | | * b63bc2db24 nfc: Fix potential resource leaks | | * 945e58bdaf net: dsa: mv88e6xxx: depend on PTP conditionally | | * 95df720e64 qlcnic: prevent ->dcb use-after-free on qlcnic_dcb_enable() failure | | * 6c55953e23 net: sched: fix memory leak in tcindex_set_parms | | * d14a4b24d5 net: hns3: fix VF promisc mode not update when mac table full | | * 7ed205b947 net: hns3: fix miss L3E checking for rx packet | | * 47868cb77f net: hns3: extract macro to simplify ring stats update code | | * 7457c5a776 net: hns3: refactor hns3_nic_reuse_page() | | * 4a6e9fb534 net: hns3: add interrupts re-initialization while doing VF FLR | | * 5e48ed805c nfsd: shut down the NFSv4 state objects before the filecache | | * 7e2825f5fb veth: Fix race with AF_XDP exposing old or uninitialized descriptors | | * ac95cdafac netfilter: nf_tables: honor set timeout and garbage collection updates | | * 49677ea151 vmxnet3: correctly report csum_level for encapsulated packet | | * 9d30cb4421 netfilter: nf_tables: perform type checking for existing sets | | * c3bfb7784a netfilter: nf_tables: add function to create set stateful expressions | | * 996cd779c2 netfilter: nf_tables: consolidate set description | | * 4f1105ee72 drm/panfrost: Fix GEM handle creation ref-counting | | * df493f676f bpf: pull before calling skb_postpull_rcsum() | | * d7e817e689 btrfs: fix an error handling path in btrfs_defrag_leaves() | | * 4d69cdba2c SUNRPC: ensure the matching upcall is in-flight upon downcall | | * af0265dfef drm/i915/migrate: fix length calculation | | * 8b25a526a5 drm/i915/migrate: fix offset calculation | | * a3d1e6f9b6 drm/i915/migrate: don't check the scratch page | | * 5bc0b2fda4 ext4: fix deadlock due to mbcache entry corruption | | * a6e4094faf mbcache: automatically delete entries from cache on freeing | | * 1872549129 ext4: correct inconsistent error msg in nojournal mode | | * 761f88f82e ext4: goto right label 'failed_mount3a' | | * eb16602140 ravb: Fix "failed to switch device to config mode" message during unbind | | * 4216995dbd perf probe: Fix to get the DW_AT_decl_file and DW_AT_call_file as unsinged data | | * d8bbbf2b52 perf probe: Use dwarf_attr_integrate as generic DWARF attr accessor | | * b131b5f136 media: s5p-mfc: Fix in register read and write for H264 | | * ff27800c0a media: s5p-mfc: Clear workbit to handle error condition | | * 4653ba32ad media: s5p-mfc: Fix to handle reference queue during finishing | | * 1bd7283dc0 x86/MCE/AMD: Clear DFR errors found in THR handler | | * 5ddcd349d9 x86/mce: Get rid of msr_ops | | * b8e7ed42bc btrfs: fix extent map use-after-free when handling missing device in read_one_chunk | | * 9c3beebd21 btrfs: move missing device handling in a dedicate function | | * 7528b21ceb btrfs: replace strncpy() with strscpy() | | * 4cef44525f phy: qcom-qmp-combo: fix out-of-bounds clock access | | * 855edc4ec6 ARM: renumber bits related to _TIF_WORK_MASK | | * 18f28f1330 ext4: fix off-by-one errors in fast-commit block filling | | * b205332b6b ext4: fix unaligned memory access in ext4_fc_reserve_space() | | * 9c197dcbac ext4: add missing validation of fast-commit record lengths | | * 6220ec4055 ext4: don't set up encryption key during jbd2 transaction | | * 6482d42baf ext4: disable fast-commit of encrypted dir operations | | * 6969367c15 ext4: fix potential out of bound read in ext4_fc_replay_scan() | | * 818175ae3b ext4: factor out ext4_fc_get_tl() | | * ffd84d0bc5 ext4: introduce EXT4_FC_TAG_BASE_LEN helper | | * 37914e029b ext4: use ext4_debug() instead of jbd_debug() | | * b0ed9a032e ext4: remove unused enum EXT4_FC_COMMIT_FAILED | | * 394514ddf9 tracing: Fix issue of missing one synthetic field | | * 5234dd5d20 block: mq-deadline: Fix dd_finish_request() for zoned devices | | * 78623b10fc drm/amdgpu: make display pinning more flexible (v2) | | * 6363da2c85 drm/amdgpu: handle polaris10/11 overlap asics (v2) | | * 2771c7a0ee ext4: allocate extended attribute value in vmalloc area | | * e995ff918e ext4: avoid unaccounted block allocation when expanding inode | | * 877247222a ext4: initialize quota before expanding inode in setproject ioctl | | * 322cf639b0 ext4: fix inode leak in ext4_xattr_inode_create() on an error path | | * 6380a93b57 ext4: fix kernel BUG in 'ext4_write_inline_data_end()' | | * dc3bbc9753 ext4: avoid BUG_ON when creating xattrs | | * 844c405552 ext4: fix error code return to user-space in ext4_get_branch() | | * b870b28e29 ext4: fix corruption when online resizing a 1K bigalloc fs | | * d440d6427a ext4: fix delayed allocation bug in ext4_clu_mapped for bigalloc + inline | | * def7a39091 ext4: init quota for 'old.inode' in 'ext4_rename' | | * 3c31d8d3ad ext4: fix uninititialized value in 'ext4_evict_inode' | | * 871800770d ext4: fix leaking uninitialized memory in fast-commit journal | | * d480a49c15 ext4: fix bug_on in __es_tree_search caused by bad boot loader inode | | * 91009e361e ext4: check and assert if marking an no_delete evicting inode dirty | | * 820eacbc4e ext4: fix reserved cluster accounting in __es_remove_extent() | | * 0dcbf4dc3d ext4: fix bug_on in __es_tree_search caused by bad quota inode | | * 06a20a68bb ext4: add helper to check quota inums | | * f7e6b5548f ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inode | | * 205ac16628 ext4: fix undefined behavior in bit shift for ext4_check_flag_values | | * cf0e0817b0 ext4: fix use-after-free in ext4_orphan_cleanup | | * 970bfd7a41 fs: ext4: initialize fsdata in pagecache_write() | | * 744bbde378 ext4: remove trailing newline from ext4_msg() message | | * 7192afa5e4 ext4: add inode table check in __ext4_get_inode_loc to aovid possible infinite loop | | * 0d041b7251 ext4: silence the warning when evicting inode with dioread_nolock | | * af4ceb00eb drm/ingenic: Fix missing platform_driver_unregister() call in ingenic_drm_init() | | * c919e1154b drm/i915/dsi: fix VBT send packet port selection for dual link DSI | | * 6948e570f5 drm/vmwgfx: Validate the box size for the snooped cursor | | * 5594fde1ef drm/connector: send hotplug uevent on connector cleanup | | * 317ebe61a6 device_cgroup: Roll back to original exceptions after copy failure | | * ac838c663b parisc: led: Fix potential null-ptr-deref in start_task() | | * 2c1881f081 remoteproc: core: Do pm_relax when in RPROC_OFFLINE state | | * 9b615f957c iommu/amd: Fix ivrs_acpihid cmdline parsing code | | * 35b792179b phy: qcom-qmp-combo: fix sc8180x reset | | * dfd05a1335 driver core: Fix bus_type.match() error handling in __driver_attach() | | * 44618a3397 crypto: ccp - Add support for TEE for PCI ID 0x14CA | | * c55507a94b crypto: n2 - add missing hash statesize | | * 4830750696 riscv: mm: notify remote harts about mmu cache updates | | * 16b6d9525d riscv: stacktrace: Fixup ftrace_graph_ret_addr retp argument | | * 657b440a27 PCI/sysfs: Fix double free in error path | | * 67fd41bbb0 PCI: Fix pci_device_is_present() for VFs by checking PF | | * bfce073089 ipmi: fix use after free in _ipmi_destroy_user() | | * 3b4984035c ima: Fix a potential NULL pointer access in ima_restore_measurement_list | | * a843699f16 mtd: spi-nor: Check for zero erase size in spi_nor_find_best_erase_type() | | * 24f4649cd8 ipmi: fix long wait in unload when IPMI disconnect | | * fa6bbb4894 ipu3-imgu: Fix NULL pointer dereference in imgu_subdev_set_selection() | | * cdb208b090 ASoC: jz4740-i2s: Handle independent FIFO flush bits | | * 2d0d083d8a wifi: wilc1000: sdio: fix module autoloading | | * 2e4a088804 efi: Add iMac Pro 2017 to uefi skip cert quirk | | * c49fb9b760 md/bitmap: Fix bitmap chunk size overflow issues | | * 94fe975d54 block: mq-deadline: Do not break sequential write streams to zoned HDDs | | * 8e91679f7b rtc: ds1347: fix value written to century register | | * 5eb8296d73 cifs: fix missing display of three mount options | | * cfa9f66f91 cifs: fix confusing debug message | | * 8b45a3b19a media: dvb-core: Fix UAF due to refcount races at releasing | | * acf984a371 media: dvb-core: Fix double free in dvb_register_device() | | * 5fac317bee ARM: 9256/1: NWFPE: avoid compiler-generated __aeabi_uldivmod | | * ce50c61245 staging: media: tegra-video: fix device_node use after free | | * 6b16758215 staging: media: tegra-video: fix chan->mipi value on error | | * 4f5de49d8c tracing: Fix infinite loop in tracing_read_pipe on overflowed print_trace_line | | * 17becbc4dd tracing/probes: Handle system names with hyphens | | * 2442e655a6 tracing/hist: Fix wrong return value in parse_action_params() | | * 2a81ff5ce8 tracing: Fix complicated dependency of CONFIG_TRACER_MAX_TRACE | | * fe8c35c6ff tracing: Fix race where eprobes can be called before the event | | * eb20f6ed37 x86/kprobes: Fix optprobe optimization check with CONFIG_RETHUNK | | * 3e0fbc06db x86/kprobes: Fix kprobes instruction boudary check with CONFIG_RETHUNK | | * 6268a0704b ftrace/x86: Add back ftrace_expected for ftrace bug reports | | * c95cf30dd4 x86/microcode/intel: Do not retry microcode reloading on the APs | | * f8fe2f4178 KVM: nVMX: Properly expose ENABLE_USR_WAIT_PAUSE control to L1 | | * ca3483d71b KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails | | * 2c73b349fd KVM: VMX: Resume guest immediately when injecting #GP on ECREATE | | * 4a19f48bee of/kexec: Fix reading 32-bit "linux,initrd-{start,end}" values | | * 7eddcdb09f perf/core: Call LSM hook after copying perf_event_attr | | * 15697f6533 tracing/hist: Fix out-of-bound write on 'action_data.var_ref_idx' | | * fd52b86a72 dm cache: set needs_check flag after aborting metadata | | * d2a0b298eb dm cache: Fix UAF in destroy() | | * 856edd0e92 dm clone: Fix UAF in clone_dtr() | | * 9215b25f2e dm integrity: Fix UAF in dm_integrity_dtr() | | * 34cd15d83b dm thin: Fix UAF in run_timer_softirq() | | * ac362c40e3 dm thin: resume even if in FAIL mode | | * 4b710e8481 dm thin: Use last transaction's pmd->root when commit failed | | * f8c26c33fe dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata | | * 28d307f380 dm cache: Fix ABBA deadlock between shrink_slab and dm_cache_metadata_abort | | * a9e89a567f mptcp: remove MPTCP 'ifdef' in TCP SYN cookies | | * 13b9fd0dee mptcp: mark ops structures as ro_after_init | | * b2120ed7fd fs: dlm: retry accept() until -EAGAIN or error returns | | * 5b4478615f fs: dlm: fix sock release if listen fails | | * b7ede8a63d ALSA: hda/realtek: Apply dual codec fixup for Dell Latitude laptops | | * dbd1f30191 ALSA: patch_realtek: Fix Dell Inspiron Plus 16 | | * 8fb4c98f20 cpufreq: Init completion before kobject_init_and_add() | | * 876c6ab967 PM/devfreq: governor: Add a private governor_data for governor | | * 0e945ea733 selftests: Use optional USERCFLAGS and USERLDFLAGS | | * 31697c5953 arm64: dts: qcom: sdm850-lenovo-yoga-c630: correct I2C12 pins drive strength | | * 1630498660 ARM: ux500: do not directly dereference __iomem | | * 99590f29b2 btrfs: fix resolving backrefs for inline extent followed by prealloc | | * 1f9cf4daf2 mmc: sdhci-sprd: Disable CLK_AUTO when the clock is less than 400K | | * 58d53ff30a arm64: dts: qcom: sdm845-db845c: correct SPI2 pins drive strength | | * a777b90a05 perf/x86/intel/uncore: Clear attr_update properly | | * ca77ac238c perf/x86/intel/uncore: Disable I/O stacks to PMU mapping on ICX-D | | * df06e7777c jbd2: use the correct print format | | * 8e75b1dd4b ktest.pl minconfig: Unset configs instead of just removing them | | * 55e5e8b445 kest.pl: Fix grub2 menu handling for rebooting | | * 823fed7c40 soc: qcom: Select REMAP_MMIO for LLCC driver | | * 8dabeeb1ff media: stv0288: use explicitly signed char | | * d167ebea90 net/af_packet: make sure to pull mac header | | * 9ff46c36df net/af_packet: add VLAN support for AF_PACKET SOCK_RAW GSO | | * cd0f597c8a rcu-tasks: Simplify trc_read_check_handler() atomic operations | | * 593ca69668 ASoC/SoundWire: dai: expand 'stream' concept beyond SoundWire | | * a7874dac6b ASoC: Intel/SOF: use set_stream() instead of set_tdm_slots() for HDAudio | | * ae4f70b2fe kcsan: Instrument memcpy/memset/memmove with newer Clang | | * d01fa993eb SUNRPC: Don't leak netobj memory when gss_read_proxy_verf() fails | | * 43135fb098 tpm: tpm_tis: Add the missed acpi_put_table() to fix memory leak | | * 986cd9a9b9 tpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak | | * 638cd298df tpm: acpi: Call acpi_put_table() to fix memory leak | | * d58289fc77 mmc: vub300: fix warning - do not call blocking ops when !TASK_RUNNING | | * 7eb57bc92f f2fs: allow to read node block after shutdown | | * acc13987fd f2fs: should put a page when checking the summary info | | * 35d8a89862 mm, compaction: fix fast_isolate_around() to stay within boundaries | | * 91bd504128 md: fix a crash in mempool_free | | * 29328fbce5 mfd: mt6360: Add bounds checking in Regmap read/write call-backs | | * c24cc476ac pnode: terminate at peers of source | | * 0c9118e381 ALSA: line6: fix stack overflow in line6_midi_transmit | | * ac4b4fdf32 ALSA: line6: correct midi status byte when receiving data from podxt | | * 83c44f0ebf ovl: Use ovl mounter's fsuid and fsgid in ovl_link() | | * fcb94283e0 binfmt: Fix error return code in load_elf_fdpic_binary() | | * ed9947277b hfsplus: fix bug causing custom uid and gid being unable to be assigned with mount | | * 76d52b5412 pstore/zone: Use GFP_ATOMIC to allocate zone buffer | | * 74b0a2fcc3 pstore: Properly assign mem_type property | | * d25aac3489 HID: plantronics: Additional PIDs for double volume key presses quirk | | * 9d4294545c HID: multitouch: fix Asus ExpertBook P2 P2451FA trackpoint | | * 7280fdb80b powerpc/rtas: avoid scheduling in rtas_os_term() | | * d8939315b7 powerpc/rtas: avoid device tree lookups in rtas_os_term() | | * 23a249b118 objtool: Fix SEGFAULT | | * ed686e7a26 fs/ntfs3: Fix slab-out-of-bounds in r_page | | * dd34665cb0 fs/ntfs3: Delete duplicate condition in ntfs_read_mft() | | * a9847a11b6 fs/ntfs3: Use __GFP_NOWARN allocation at ntfs_fill_super() | | * abd2ee2cf4 fs/ntfs3: Use __GFP_NOWARN allocation at wnd_init() | | * d7ce7bb688 fs/ntfs3: Validate index root when initialize NTFS security | | * f29676cc3a soundwire: dmi-quirks: add quirk variant for LAPBC710 NUC15 | | * 9c8471a17f fs/ntfs3: Fix slab-out-of-bounds read in run_unpack | | * 3a52f17867 fs/ntfs3: Validate resident attribute name | | * 3cd9e5b41b fs/ntfs3: Validate buffer length while parsing index | | * c878a915bc fs/ntfs3: Validate attribute name offset | | * f62506f5e4 fs/ntfs3: Add null pointer check for inode operations | | * 2dd9ccfb06 fs/ntfs3: Fix memory leak on ntfs_fill_super() error path | | * ea6b359840 fs/ntfs3: Add null pointer check to attr_load_runs_vcn | | * de5e095524 fs/ntfs3: Validate data run offset | | * d4489ba8fb fs/ntfs3: Add overflow check for attribute size | | * af7a195dea fs/ntfs3: Validate BOOT record_size | | * 8e228ac90c nvmet: don't defer passthrough commands with trivial effects to the workqueue | | * f068a7315a nvme: fix the NVME_CMD_EFFECTS_CSE_MASK definition | | * 576502f25f ata: ahci: Fix PCS quirk application for suspend | | * 7949b0df3d block, bfq: fix uaf for bfqq in bfq_exit_icq_bfqq | | * ff3d9ab51c ACPI: resource: do IRQ override on Lenovo 14ALC7 | | * 698a0813ce ACPI: resource: do IRQ override on XMG Core 15 | | * a9ac7633bb ACPI: resource: do IRQ override on LENOVO IdeaPad | | * 5fe31f2950 ACPI: resource: Skip IRQ override on Asus Vivobook K3402ZA/K3502ZA | | * 4c5fee0d88 nvme-pci: fix page size checks | | * 9141144b37 nvme-pci: fix mempool alloc size | | * f17cf8fa2c nvme-pci: fix doorbell buffer value endianness | | * ead99ec669 Revert "selftests/bpf: Add test for unstable CT lookup API" | | * bf0543b937 cifs: fix oops during encryption | | * 56f6de394f usb: dwc3: qcom: Fix memory leak in dwc3_qcom_interconnect_init * | | 2ce8e6e296 ANDROID: add __dev_kfree_skb_irq to virtual_device abi list |/ / * | 24bc28221f Revert "net: add atomic_long_t to net_device_stats fields" * | 34d878c5b3 Revert "ipv6/sit: use DEV_STATS_INC() to avoid data-races" * | 956e2924f3 Revert "arm64: Treat ESR_ELx as a 64-bit register" * | 8a3baaa85e Revert "arm64: mm: kfence: only handle translation faults" * | 8b3730f922 Revert "gpiolib: protect the GPIO device against being dropped while in use by user-space" * | b0e87c106d Revert "soreuseport: Fix socket selection for SO_INCOMING_CPU." * | 8a8a0cb6c6 Revert "bpf, sockmap: Fix missing BPF_F_INGRESS flag when using apply_bytes" * | 2d4c48bff9 Revert "xhci: Prevent infinite loop in transaction errors recovery for streams" * | 20ec745823 Merge 5.15.86 into android13-5.15-lts |\| | * 90ffbb727c Linux 5.15.86 | * 3082f8705e pwm: tegra: Fix 32 bit build | * caa40d1f85 mfd: qcom_rpm: Use devm_of_platform_populate() to simplify code | * 408dbaa065 extcon: usbc-tusb320: Call the Type-C IRQ handler only if a port is registered | * 2471a44769 media: dvbdev: fix refcnt bug | * 579fb0a332 media: dvbdev: fix build warning due to comments | * 1115e77c4f net: stmmac: fix errno when create_singlethread_workqueue() fails | * d3871af13a scsi: qla2xxx: Fix crash when I/O abort times out | * 50f993da94 btrfs: do not BUG_ON() on ENOMEM when dropping extent items for a range | * 1c65d50315 ovl: fix use inode directly in rcu-walk mode | * 88ec6d1105 fbdev: fbcon: release buffer when fbcon_do_set_font() failed | * ca8bcb348a gcov: add support for checksum field | * f36d8c8651 floppy: Fix memory leak in do_floppy_init() | * 4193a6745b regulator: core: fix deadlock on regulator enable | * ce5d0ef1cf iio: adc128s052: add proper .data members in adc128_of_match table | * aec1058f2a iio: adc: ad_sigma_delta: do not use internal iio_dev lock | * dc6afd6070 iio: fix memory leak in iio_device_register_eventset() | * 38c257ee6a reiserfs: Add missing calls to reiserfs_security_free() | * 8a4236456a security: Restrict CONFIG_ZERO_CALL_USED_REGS to gcc or clang > 15.0.6 | * 1cabce5662 9p: set req refcount to zero to avoid uninitialized usage | * dd2157a98f loop: Fix the max_loop commandline argument treatment when it is set to 0 | * fd03bd4c7b HID: mcp2221: don't connect hidraw | * 6c886be1ff HID: wacom: Ensure bootloader PID is usable in hidraw mode | * 4d640eb112 xhci: Prevent infinite loop in transaction errors recovery for streams | * 936c5f96c8 usb: dwc3: core: defer probe on ulpi_read_id timeout | * e6bf6c4022 usb: dwc3: Fix race between dwc3_set_mode and __dwc3_set_mode | * 0e883f3bc8 arm64: dts: qcom: sm8250: fix USB-DP PHY registers | * ffb14aac26 usb: xhci-mtk: fix leakage of shared hcd when fail to set wakeup irq | * fcacd970e0 usb: cdnsp: fix lack of ZLP for ep0 | * bcac79df08 ALSA: hda/hdmi: Add HP Device 0x8711 to force connect list | * 50c23a1107 ALSA: hda/realtek: Add quirk for Lenovo TianYi510Pro-14IOB | * 76574b3465 ALSA: usb-audio: add the quirk for KT0206 device | * 9e787dab98 ima: Simplify ima_lsm_copy_rule | * 2cd365029c pstore: Make sure CONFIG_PSTORE_PMSG selects CONFIG_RT_MUTEXES | * 2068d41a3d afs: Fix lost servers_outstanding count | * 0def8af038 perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() | * 41cccae10e pstore: Switch pmsg_lock to an rt_mutex to avoid priority inversion | * 8877df8135 LoadPin: Ignore the "contents" argument of the LSM hooks | * 584202b0f1 drm/i915/display: Don't disable DDI/Transcoder when setting phy test pattern | * b253e075b1 ASoC: rt5670: Remove unbalanced pm_runtime_put() | * 59f797a913 ASoC: rockchip: spdif: Add missing clk_disable_unprepare() in rk_spdif_runtime_resume() | * 132844d92f ASoC: wm8994: Fix potential deadlock | * 82f7c814ed ASoC: mediatek: mt8183: fix refcount leak in mt8183_mt6358_ts3a227_max98357_dev_probe() | * e5d6bf3e5a ASoC: rockchip: pdm: Add missing clk_disable_unprepare() in rockchip_pdm_runtime_resume() | * 85eb5c952b ASoC: audio-graph-card: fix refcount leak of cpu_ep in __graph_for_each_link() | * 9ff07316ca ASoC: mediatek: mt8173-rt5650-rt5514: fix refcount leak in mt8173_rt5650_rt5514_dev_probe() | * 7643909cf0 ASoC: Intel: Skylake: Fix driver hang during shutdown | * 33ff0f9f9c ALSA: hda: add snd_hdac_stop_streams() helper | * 78649a624d ALSA/ASoC: hda: move/rename snd_hdac_ext_stop_streams to hdac_stream.c | * 98b0f50fec hwmon: (jc42) Fix missing unlock on error in jc42_write() | * 5e69233508 KVM: selftests: Fix build regression by using accessor function | * 6215904fe2 tools/include: Add _RET_IP_ and math definitions to kernel.h | * c885326728 orangefs: Fix kmemleak in orangefs_{kernel,client}_debug_init() | * 39529b79b0 orangefs: Fix kmemleak in orangefs_prepare_debugfs_help_string() | * a075c21ee0 drm/sti: Fix return type of sti_{dvo,hda,hdmi}_connector_mode_valid() | * f3c14b99f3 drm/fsl-dcu: Fix return type of fsl_dcu_drm_connector_mode_valid() | * 9a8862820c hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param() | * 4f6b206998 scsi: elx: libefc: Fix second parameter type in state callbacks | * 23f0e9f863 scsi: ufs: Reduce the START STOP UNIT timeout | * 2cf66428a2 scsi: lpfc: Fix hard lockup when reading the rx_monitor from debugfs | * 2b3e3ecdb4 crypto: hisilicon/hpre - fix resource leak in remove process | * adf6a00859 clk: st: Fix memory leak in st_of_quadfs_setup() | * 6c8aee0c8f media: si470x: Fix use-after-free in si470x_int_in_callback() | * 58b6496a74 mmc: renesas_sdhi: better reset from HS400 mode | * c33c904124 mmc: f-sdh30: Add quirks for broken timeout clock capability | * 69346de0eb wifi: mt76: do not run mt76u_status_worker if the device is not running | * feb847e659 regulator: core: fix use_count leakage when handling boot-on | * 474e70bd90 libbpf: Avoid enum forward-declarations in public API in C++ mode | * 6209542869 drm/amd/display: Use the largest vready_offset in pipe group | * eff45bfbc2 blk-mq: fix possible memleak when register 'hctx' failed | * d0af6220bb media: dvb-usb: fix memory leak in dvb_usb_adapter_init() | * 88a6f8a72d media: dvbdev: adopts refcnt to avoid UAF | * 438cd29fec media: dvb-frontends: fix leak of memory fw | * a96841f5aa ethtool: avoiding integer overflow in ethtool_phys_id() | * b327c68ace bpf: Prevent decl_tag from being referenced in func_proto arg | * 4b8f3b9392 ppp: associate skb with a device at tx | * 5d5a481a7f mrp: introduce active flags to prevent UAF when applicant uninit | * 222cc04356 ipv6/sit: use DEV_STATS_INC() to avoid data-races | * 8a3b023710 net: add atomic_long_t to net_device_stats fields | * 58dd11f624 drm/amd/display: fix array index out of bound error in bios parser | * a3cc41e05e md/raid1: stop mdx_raid1 thread when raid1 array run failed | * b621d17fe8 drivers/md/md-bitmap: check the return value of md_bitmap_get_counter() | * 5afac74f15 drm/mediatek: Fix return type of mtk_hdmi_bridge_mode_valid() | * 072508e99d drm/sti: Use drm_mode_copy() | * 673a3e0199 drm/rockchip: Use drm_mode_copy() | * b9b07900d2 drm/msm: Use drm_mode_copy() | * 5ad774fb82 s390/lcs: Fix return type of lcs_start_xmit() | * dfbf0122ea s390/netiucv: Fix return type of netiucv_tx() | * 8131d1880c s390/ctcm: Fix return type of ctc{mp,}m_tx() | * f9084e9930 drm/amdgpu: Fix type of second parameter in odn_edit_dpm_table() callback | * b74580d618 drm/amdgpu: Fix type of second parameter in trans_msg() callback | * 314f7092b2 igb: Do not free q_vector unless new one was allocated | * 0b12d2aa26 wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmf_fw_alloc_request() | * 19bb9e98e1 hamradio: baycom_epp: Fix return type of baycom_send_packet() | * a413ebb604 net: ethernet: ti: Fix return type of netcp_ndo_start_xmit() | * 5d3f4478d2 bpf: make sure skb->len != 0 when redirecting to a tunneling device | * be2803dd29 qed (gcc13): use u16 for fid to be big enough | * a8bc0ac438 Revert "drm/amd/display: Limit max DSC target bpp for specific monitors" | * cc8deb82cc drm/amd/display: prevent memory leak | * 49dd0e8029 ipmi: fix memleak when unload ipmi driver | * 68871c005f ASoC: codecs: rt298: Add quirk for KBL-R RVP platform | * 3eca9697c2 wifi: ar5523: Fix use-after-free on ar5523_cmd() timed out | * c319196a0e wifi: ath9k: verify the expected usb_endpoints are present | * 10c4b63d09 brcmfmac: return error when getting invalid max_flowrings from dongle | * ad31bc146f media: imx-jpeg: Disable useless interrupt to avoid kernel panic | * 6e1a6880e1 drm/etnaviv: add missing quirks for GC300 | * 367296925c hfs: fix OOB Read in __hfs_brec_find | * ebe16676e1 acct: fix potential integer overflow in encode_comp_t() | * 8b6ef451b5 nilfs2: fix shift-out-of-bounds due to too large exponent of block size | * b47f5c579c nilfs2: fix shift-out-of-bounds/overflow in nilfs_sb2_bad_offset() | * 5777432eba ACPICA: Fix error code path in acpi_ds_call_control_method() | * 10b87da8fa fs: jfs: fix shift-out-of-bounds in dbDiscardAG | * 5059ea84a8 jfs: Fix fortify moan in symlink | * e7a6a53c87 udf: Avoid double brelse() in udf_rename() | * 0536f76a2b fs: jfs: fix shift-out-of-bounds in dbAllocAG | * 88cea1676a binfmt_misc: fix shift-out-of-bounds in check_special_flags | * cadb938a5e x86/hyperv: Remove unregister syscore call from Hyper-V cleanup | * 659747f6f6 video: hyperv_fb: Avoid taking busy spinlock on panic path | * 9d05c20b0a arm64: make is_ttbrX_addr() noinstr-safe | * 98a5b1265a rcu: Fix __this_cpu_read() lockdep warning in rcu_force_quiescent_state() | * d238f94b2b HID: amd_sfh: Add missing check for dma_alloc_coherent | * 9da204cd67 net: stream: purge sk_error_queue in sk_stream_kill_queues() | * f47426250f myri10ge: Fix an error handling path in myri10ge_probe() | * 1ec0a7d5b0 rxrpc: Fix missing unlock in rxrpc_do_sendmsg() | * 5478eb7adc net_sched: reject TCF_EM_SIMPLE case for complex ematch module | * 4f05d8e2fb mailbox: zynq-ipi: fix error handling while device_register() fails | * 550f403e46 mailbox: arm_mhuv2: Fix return value check in mhuv2_probe() | * 28604a960c mailbox: mpfs: read the system controller's status | * 8fb773eed4 skbuff: Account for tail adjustment during pull operations | * dc0f38957a arm64: dts: mt8183: Fix Mali GPU clock | * 790b396f6b soc: mediatek: pm-domains: Fix the power glitch issue | * 0133615a06 openvswitch: Fix flow lookup to use unmasked key | * 04e454bd97 selftests: devlink: fix the fd redirect in dummy_reporter_test | * d52646a46c rtc: mxc_v2: Add missing clk_disable_unprepare() | * ac95c4e35f igc: Set Qbv start_time and end_time to end_time if not being configured in GCL | * af59985138 igc: Lift TAPRIO schedule restriction | * 4d50d640ed igc: recalculate Qbv end_time by considering cycle time | * 1ef9416957 igc: allow BaseTime 0 enrollment for Qbv | * c0df8e7ba6 igc: Add checking for basetime less than zero | * 5b46b53f45 igc: Use strict cycles for Qbv scheduling | * fd7d029436 igc: Enhance Qbv scheduling by using first flag bit | * 9b5b50329e r6040: Fix kmemleak in probe and remove | * 1b428ba31b unix: Fix race in SOCK_SEQPACKET's unix_dgram_sendmsg() | * aae9c24ebd nfc: pn533: Clear nfc_target before being used | * bcf2c1dc53 net: enetc: avoid buffer leaks on xdp_do_redirect() failure | * f463a1295c selftests/bpf: Add test for unstable CT lookup API | * 094f3d9314 block, bfq: fix possible uaf for 'bfqq->bic' | * cf48cb8deb mISDN: hfcmulti: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() | * 5607353751 mISDN: hfcpci: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() | * ada4022f48 mISDN: hfcsusb: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() | * 0578f9929f net: macsec: fix net device access prior to holding a lock | * a472f069ce nfsd: under NFSv4.1, fix double svc_xprt_put on rpc_create failure | * f8f1d037d6 rtc: pcf85063: fix pcf85063_clkout_control | * 35a174552b rtc: pic32: Move devm_rtc_allocate_device earlier in pic32_rtc_probe() | * eea105c4e4 rtc: st-lpc: Add missing clk_disable_unprepare in st_rtc_probe() | * 74248b5560 netfilter: flowtable: really fix NAT IPv6 offload | * 5c940632ca mfd: pm8008: Fix return value check in pm8008_probe() | * ec10848e26 mfd: pm8008: Remove driver data structure pm8008_data | * 38959417d3 mfd: qcom_rpm: Fix an error handling path in qcom_rpm_probe() | * b95ae3543e mfd: bd957x: Fix Kconfig dependency on REGMAP_IRQ | * 615d3c8a46 powerpc/pseries/eeh: use correct API for error log size | * 68de42e008 powerpc/eeh: Drop redundant spinlock initialization | * 2b157b4b13 remoteproc: qcom: q6v5: Fix missing clk_disable_unprepare() in q6v5_wcss_qcs404_power_on() | * 4b191533f5 remoteproc: qcom_q6v5_pas: Fix missing of_node_put() in adsp_alloc_memory_region() | * d7628ebca8 remoteproc: qcom_q6v5_pas: detach power domains on remove | * fdf47f462a remoteproc: qcom_q6v5_pas: disable wakeup on probe fail or remove | * 098ebb9089 remoteproc: qcom: q6v5: Fix potential null-ptr-deref in q6v5_wcss_init_mmio() | * 131c0a3ead remoteproc: sysmon: fix memory leak in qcom_add_sysmon_subdev() | * 4507c6a672 pwm: mediatek: always use bus clock for PWM on MT7622 | * 4fbbb14f0e pwm: mtk-disp: Fix the parameters calculated by the enabled flag of disp_pwm | * eec59807a2 pwm: sifive: Call pwm_sifive_update_clock() while mutex is held | * 37ea9a6c41 iommu/sun50i: Remove IOMMU_DOMAIN_IDENTITY | * 8de2c29db6 selftests/powerpc: Fix resource leaks | * dd49c5031e powerpc/hv-gpci: Fix hv_gpci event list | * 65d3469f3b powerpc/83xx/mpc832x_rdb: call platform_device_put() in error case in of_fsl_spi_probe() | * cf03db2896 powerpc/perf: callchain validate kernel stack pointer bounds | * 5de1902244 powerpc/xive: add missing iounmap() in error path in xive_spapr_populate_irq_data() | * b31e9647f1 powerpc/xmon: Fix -Wswitch-unreachable warning in bpt_cmds | * 6a310e8db5 cxl: Fix refcount leak in cxl_calc_capp_routing | * 0accd460dc powerpc/52xx: Fix a resource leak in an error handling path | * be2b9b1a60 macintosh/macio-adb: check the return value of ioremap() | * 19ded60b40 macintosh: fix possible memory leak in macio_add_one_device() | * e42b543d08 iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe() | * 6e501b3fd7 iommu/amd: Fix pci device refcount leak in ppr_notifier() | * 9383921e8b rtc: pcf85063: Fix reading alarm | * b66aa7b306 rtc: snvs: Allow a time difference on clock register read | * 7a6cc22eab rtc: cmos: Disable ACPI RTC event on removal | * 689f757f0a rtc: cmos: Rename ACPI-related functions | * 1c74bbecda rtc: cmos: Eliminate forward declarations of some functions | * 3a439a2cab rtc: cmos: Call rtc_wake_setup() from cmos_do_probe() | * 9febdff75c rtc: cmos: Call cmos_wake_setup() from cmos_do_probe() | * d9324fb3ee rtc: cmos: fix build on non-ACPI platforms | * fe46b9303e rtc: cmos: Fix wake alarm breakage | * 60c6e563a8 rtc: cmos: Fix event handler registration ordering issue | * d3aa083469 rtc: rtc-cmos: Do not check ACPI_FADT_LOW_POWER_S0 | * 6e98a93c75 dmaengine: idxd: Fix crc_val field for completion record | * ab53749c32 fs/ntfs3: Fix slab-out-of-bounds read in ntfs_trim_fs | * 1ba0968b33 pwm: tegra: Improve required rate calculation | * c160505c9b include/uapi/linux/swab: Fix potentially missing __always_inline | * 59463193b0 phy: usb: s2 WoL wakeup_count not incremented for USB->Eth devices | * ae00848e55 iommu/rockchip: fix permission bits in page table entries v2 | * a7f6ad2c42 iommu/sun50i: Fix flush size | * 38ccb9b469 iommu/sun50i: Fix R/W permission check | * ae4ab47a0b iommu/sun50i: Consider all fault sources for reset | * 84fee3ce82 iommu/sun50i: Fix reset release | * 6f9fe31a48 fs/ntfs3: Harden against integer overflows | * 30f20ceb87 overflow: Implement size_t saturating arithmetic helpers | * 4b51f27d44 fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst() | * 28f345bec7 RDMA/siw: Fix pointer cast warning | * 01d925e2a5 perf stat: Do not delay the workload with --delay | * a273f1dd5d perf stat: Refactor __run_perf_stat() common code | * d21534ab4f power: supply: fix null pointer dereferencing in power_supply_get_battery_info | * d4898d8de6 power: supply: ab8500: Fix error handling in ab8500_charger_init() | * 30b191798f HSI: omap_ssi_core: Fix error handling in ssi_init() | * a72fe8eb55 power: supply: z2_battery: Fix possible memleak in z2_batt_probe() | * 5ba0e8fa15 perf symbol: correction while adjusting symbol | * a34027b63d perf trace: Handle failure when trace point folder is missed | * 60aeacce64 perf trace: Use macro RAW_SYSCALL_ARGS_NUM to replace number | * e4700f62dc perf trace: Return error if a system call doesn't exist | * 870ad0917d power: supply: fix residue sysfs file in error handle route of __power_supply_register() | * 1c2b9c8100 HSI: omap_ssi_core: fix possible memory leak in ssi_probe() | * c5f729d3d6 HSI: omap_ssi_core: fix unbalanced pm_runtime_disable() | * ea37831f83 fbdev: uvesafb: Fixes an error handling path in uvesafb_probe() | * 5bcae36b58 fbdev: uvesafb: don't build on UML | * 07c1a3c2df fbdev: geode: don't build on UML | * ace8312b5d fbdev: ep93xx-fb: Add missing clk_disable_unprepare in ep93xxfb_probe() | * 04946113fb fbdev: vermilion: decrease reference count in error path | * fc0d5034fa fbdev: via: Fix error in via_core_init() | * 9827246333 fbdev: pm2fb: fix missing pci_disable_device() | * 3aa4205134 fbdev: ssd1307fb: Drop optional dependency | * 4958316a6d thermal/drivers/qcom/lmh: Fix irq handler return value | * ad72205ac6 thermal/drivers/qcom/temp-alarm: Fix inaccurate warning for gen2 | * 37fb4e13d2 thermal/drivers/imx8mm_thermal: Validate temperature range | * 95c18f4a3c samples: vfio-mdev: Fix missing pci_disable_device() in mdpy_fb_probe() | * 31c1b5d300 ksmbd: Fix resource leak in ksmbd_session_rpc_open() | * a44102d36a tracing/hist: Fix issue of losting command info in error_log | * 8308ccfcbd usb: storage: Add check for kcalloc | * 96c12fd0ec i2c: ismt: Fix an out-of-bounds bug in ismt_access() | * 8212800943 i2c: mux: reg: check return value after calling platform_get_resource() | * 46d8f63bb8 gpiolib: protect the GPIO device against being dropped while in use by user-space | * 333a271dfd gpiolib: make struct comments into real kernel docs | * 7c755a2d6d gpiolib: cdev: fix NULL-pointer dereferences | * b0a26e1999 gpiolib: Get rid of redundant 'else' | * 4bc217b25e vme: Fix error not catched in fake_init() | * 31bfe024a9 staging: rtl8192e: Fix potential use-after-free in rtllib_rx_Monitor() | * b0aaec894a staging: rtl8192u: Fix use after free in ieee80211_rx() | * ed4580c3f8 i2c: pxa-pci: fix missing pci_disable_device() on error in ce4100_i2c_probe | * 28dc61cc49 chardev: fix error handling in cdev_device_add() | * 43bfc7c240 mcb: mcb-parse: fix error handing in chameleon_parse_gdd() | * f3686e5e8d drivers: mcb: fix resource leak in mcb_probe() | * 9d4a0aca8a usb: gadget: f_hid: fix refcount leak on error path | * d3136b7970 usb: gadget: f_hid: fix f_hidg lifetime vs cdev | * a41c2bba7f usb: roles: fix of node refcount leak in usb_role_switch_is_parent() | * 18b9202188 coresight: trbe: remove cpuhp instance node before remove cpuhp state | * e854a4ab38 counter: stm32-lptimer-cnt: fix the check on arr and cmp registers update | * 39a156715f iio: adis: add '__adis_enable_irq()' implementation | * 3a2dde8e5d iio:imu:adis: Move exports into IIO_ADISLIB namespace | * 3c2e13025b iio: adis: stylistic changes | * de3e358912 iio: adis: handle devices that cannot unmask the drdy pin | * 994243de7a iio: temperature: ltc2983: make bulk write buffer DMA-safe | * 22511eefa6 cxl: fix possible null-ptr-deref in cxl_pci_init_afu|adapter() | * e5021bbf11 cxl: fix possible null-ptr-deref in cxl_guest_init_afu|adapter() | * b308fdedef firmware: raspberrypi: fix possible memory leak in rpi_firmware_probe() | * d5c8f9003a misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os | * 848c45964d misc: tifm: fix possible memory leak in tifm_7xx1_switch_media() | * 37a13b274e ocxl: fix pci device refcount leak when calling get_function_0() | * 3299983a6b misc: ocxl: fix possible name leak in ocxl_file_register_afu() | * 357379d504 test_firmware: fix memory leak in test_firmware_init() | * 07d547d742 serial: sunsab: Fix error handling in sunsab_init() | * 919e745fdd serial: altera_uart: fix locking in polling mode | * e1c4f18214 tty: serial: altera_uart_{r,t}x_chars() need only uart_port | * b133b45ba6 tty: serial: clean up stop-tx part in altera_uart_tx_chars() | * 6f7d82380f serial: pch: Fix PCI device refcount leak in pch_request_dma() | * 0dfc7dfe5b serial: stm32: move dma_request_chan() before clk_prepare_enable() | * 926b0967f7 serial: pl011: Do not clear RX FIFO & RX interrupt in unthrottle. | * d71a611fca serial: amba-pl011: avoid SBSA UART accessing DMACR register | * f46f9d2e16 extcon: usbc-tusb320: Update state on probe even if no IRQ pending | * ac067e75c4 extcon: usbc-tusb320: Add USB TYPE-C support | * 9280761167 extcon: usbc-tusb320: Factor out extcon into dedicated functions | * 05aa8ff22d usb: typec: Factor out non-PD fwnode properties | * 31e9c27510 extcon: usbc-tusb320: Add support for TUSB320L | * b9c8820d91 extcon: usbc-tusb320: Add support for mode setting and reset | * 4524599a6a usb: typec: tipd: Fix spurious fwnode_handle_put in error path | * b0d86eacc8 usb: typec: tipd: Cleanup resources if devm_tps6598_psy_register fails | * ba75be6f0d usb: typec: tcpci: fix of node refcount leak in tcpci_register_port() | * 154d5713a2 usb: typec: Check for ops->exit instead of ops->enter in altmode_exit | * 1f5661388f staging: vme_user: Fix possible UAF in tsi148_dma_list_add | * a3c4bc2616 usb: fotg210-udc: Fix ages old endianness issues | * 5e87d41221 uio: uio_dmem_genirq: Fix deadlock between irq config and handling | * 79a4bdb6b9 uio: uio_dmem_genirq: Fix missing unlock in irq configuration | * 3f22a273ef vfio: platform: Do not pass return buffer to ACPI _RST method | * 417ef049e3 class: fix possible memory leak in __class_register() | * f76824ab2b serial: 8250_bcm7271: Fix error handling in brcmuart_init() | * 6b4424efcf serial: tegra: Read DMA status before terminating | * a0ead7e8da drivers: dio: fix possible memory leak in dio_init() | * e8985caf05 RISC-V: Align the shadow stack | * ca48174a76 IB/IPoIB: Fix queue count inconsistency for PKEY child interfaces | * 82bd423ed9 hwrng: geode - Fix PCI device refcount leak | * 2b79a5e560 hwrng: amd - Fix PCI device refcount leak | * 42cbff35f4 crypto: img-hash - Fix variable dereferenced before check 'hdev->req' | * b9634f99b6 RDMA/hns: Fix error code of CMD | * b06bb747ce RDMA/hns: Fix page size cap from firmware | * 4c05c7cf25 RDMA/hns: Fix PBL page MTR find | * fa267c4192 RDMA/hns: Fix AH attr queried by query_qp | * e27fb26e75 orangefs: Fix sysfs not cleanup when dev init failed | * 3e9c395ef2 PCI: mt7621: Add sentinel to quirks table | * bcc65c2e2a PCI: mt7621: Rename mt7621_pci_ to mt7621_pcie_ | * 0a7eab1cc4 RDMA/srp: Fix error return code in srp_parse_options() | * 6301100179 RDMA/hfi1: Fix error return code in parse_platform_config() | * 339ca035af riscv/mm: add arch hook arch_clear_hugepage_flags | * 20d363dcd6 crypto: omap-sham - Use pm_runtime_resume_and_get() in omap_sham_probe() | * 815b65d714 crypto: amlogic - Remove kcalloc without check | * af71199291 RDMA/nldev: Fix failure to send large messages | * bb895786a4 f2fs: avoid victim selection from previous victim section | * 655e955deb RDMA/nldev: Add checks for nla_nest_start() in fill_stat_counter_qps() | * 1895e908b3 scsi: snic: Fix possible UAF in snic_tgt_create() | * 09a60f908d scsi: fcoe: Fix transport not deattached when fcoe_if_init() fails | * e59da17205 scsi: ipr: Fix WARNING in ipr_init() | * c444f58fda scsi: scsi_debug: Fix possible name leak in sdebug_add_host_helper() | * 4e4968dfb5 scsi: fcoe: Fix possible name leak when device_register() fails | * 0f5006d7d1 scsi: scsi_debug: Fix a warning in resp_report_zones() | * 2432719b1a scsi: scsi_debug: Fix a warning in resp_verify() | * 038359eecc scsi: efct: Fix possible memleak in efct_device_init() | * 23053a7926 scsi: hpsa: Fix possible memory leak in hpsa_add_sas_device() | * 2ab6d5927c scsi: hpsa: Fix error handling in hpsa_add_sas_host() | * 6a92129c8f scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add() | * 26c0f7e1ac padata: Fix list iterator in padata_do_serial() | * 17afa98bcc padata: Always leave BHs disabled when running ->parallel() | * 221afb2a1b crypto: tcrypt - Fix multibuffer skcipher speed test mem leak | * bfe10a1d9f scsi: hpsa: Fix possible memory leak in hpsa_init_one() | * 38ef0c0b09 dt-bindings: visconti-pcie: Fix interrupts array max constraints | * 83aad8111b dt-bindings: imx6q-pcie: Fix clock names for imx6sx and imx8mq | * f64f08b9e6 RDMA/rxe: Fix NULL-ptr-deref in rxe_qp_do_cleanup() when socket create failed | * 35f9cd060e RDMA/hns: fix memory leak in hns_roce_alloc_mr() | * 6d5220a553 crypto: ccree - Make cc_debugfs_global_fini() available for module init function | * 2e9cf3e783 RDMA/hfi: Decrease PCI device reference count in error path | * 7f476d639c PCI: Check for alloc failure in pci_request_irq() | * 49bc2be897 RDMA/hns: Fix ext_sge num error when post send | * 0e6160d79d RDMA/hns: Repacing 'dseg_len' by macros in fill_ext_sge_inl_data() | * e5ea48788e crypto: hisilicon/qm - add missing pci_dev_put() in q_num_set() | * 442caec12f crypto: cryptd - Use request context instead of stack for sub-request | * ab677729fc crypto: ccree - Remove debugfs when platform_driver_register failed | * 0328ca389a scsi: scsi_debug: Fix a warning in resp_write_scat() | * 1ba8ecb664 RDMA/siw: Set defined status for work completion with undefined status | * 6e757005ba RDMA/nldev: Return "-EAGAIN" if the cm_id isn't from expected port | * f981c697b2 RDMA/core: Make sure "ib_port" is valid when access sysfs node | * 13586753ae RDMA/restrack: Release MR restrack when delete | * 6e78ca677f PCI: vmd: Disable MSI remapping after suspend | * 47e31b86ed IB/mad: Don't call to function that might sleep while in atomic context | * f8d8fbd3b6 RDMA/siw: Fix immediate work request flush to completion queue | * 2a26849d79 scsi: qla2xxx: Fix set-but-not-used variable warnings | * 799ed37559 RDMA/irdma: Report the correct link speed | * d40d1b1c61 f2fs: fix to destroy sbi->post_read_wq in error path of f2fs_fill_super() | * 847f725006 f2fs: fix normal discard process | * 865bb7b5a7 f2fs: fix to invalidate dcc->f2fs_issue_discard in error path | * 5f509fa740 apparmor: Fix memleak in alloc_ns() | * 46f3cb83e4 crypto: rockchip - rework by using crypto_engine | * 3ed0548d39 crypto: rockchip - remove non-aligned handling | * 5562009f5f crypto: rockchip - better handle cipher key | * 26f3971356 crypto: rockchip - add fallback for ahash | * 34fe54af3c crypto: rockchip - add fallback for cipher | * 314217591e crypto: rockchip - do not store mode globally | * 853cd97d2b crypto: rockchip - do not do custom power management | * d5100272e4 f2fs: Fix the race condition of resize flag between resizefs | * db72c5dffc PCI: pci-epf-test: Register notifier if only core_init_notifier is enabled | * 26ffeff67b RDMA/core: Fix order of nldev_exit call | * a00a7ac251 PCI: dwc: Fix n_fts[] array overrun | * 10ae636115 apparmor: Use pointer to struct aa_label for lbs_cred | * 8d50ccfbe2 scsi: core: Fix a race between scsi_done() and scsi_timeout() | * 9bdf3a59b3 crypto: nitrox - avoid double free on error path in nitrox_sriov_init() | * 7efc0d39ee crypto: sun8i-ss - use dma_addr instead u32 | * aaef0bdd7a crypto: hisilicon/qm - fix missing destroy qp_idr | * d567776ae2 apparmor: Fix abi check to include v8 abi | * bc9d2cbbdc apparmor: fix lockdep warning when removing a namespace | * 775a37ffa9 apparmor: fix a memleak in multi_transaction_new() | * 09f30f394e net: dsa: tag_8021q: avoid leaking ctx on dsa_tag_8021q_register() error path | * 86664b8652 i40e: Fix the inability to attach XDP program on downed interface | * 0abd337acd stmmac: fix potential division by 0 | * 93a4a04558 Bluetooth: RFCOMM: don't call kfree_skb() under spin_lock_irqsave() | * 8d6bbe5241 Bluetooth: hci_core: don't call kfree_skb() under spin_lock_irqsave() | * 804de4e24a Bluetooth: hci_bcsp: don't call kfree_skb() under spin_lock_irqsave() | * 1030c3aeee Bluetooth: hci_h5: don't call kfree_skb() under spin_lock_irqsave() | * 9fcb5b367e Bluetooth: hci_ll: don't call kfree_skb() under spin_lock_irqsave() | * 14cc94a598 Bluetooth: hci_qca: don't call kfree_skb() under spin_lock_irqsave() | * 06467130d5 Bluetooth: btusb: don't call kfree_skb() under spin_lock_irqsave() | * e52b7d460a Bluetooth: btintel: Fix missing free skb in btintel_setup_combined() | * f7c9de3bcf Bluetooth: MGMT: Fix error report for ADD_EXT_ADV_PARAMS | * 2addf3cb63 sctp: sysctl: make extra pointers netns aware | * 21296a52ca ntb_netdev: Use dev_kfree_skb_any() in interrupt context | * 0fff763f11 net: lan9303: Fix read error execution path | * 882bad40a0 can: tcan4x5x: Fix use of register error status mask | * d50092f662 can: m_can: Call the RAM init directly from m_can_chip_config | * 55064642aa can: tcan4x5x: Remove invalid write in clear_interrupts | * 641eef8766 net: amd-xgbe: Check only the minimum speed for active/passive cables | * 60b35e28dc net: amd-xgbe: Fix logic around active and passive cables | * d436bf39f4 af_unix: call proto_unregister() in the error path in af_unix_init() | * ee9d03bf89 net: amd: lance: don't call dev_kfree_skb() under spin_lock_irqsave() | * 6f1c4c01cc hamradio: don't call dev_kfree_skb() under spin_lock_irqsave() | * eb2c6a6e8f net: ethernet: dnet: don't call dev_kfree_skb() under spin_lock_irqsave() | * ef08e1082c net: emaclite: don't call dev_kfree_skb() under spin_lock_irqsave() | * 2786ef4066 net: apple: bmac: don't call dev_kfree_skb() under spin_lock_irqsave() | * d81314e2dd net: apple: mace: don't call dev_kfree_skb() under spin_lock_irqsave() | * 9a6544343b net/tunnel: wait until all sk_user_data reader finish before releasing the sock | * 998b4e54f5 net: farsync: Fix kmemleak when rmmods farsync | * 71605c6906 ethernet: s2io: don't call dev_kfree_skb() under spin_lock_irqsave() | * ce1b3a41e7 of: overlay: fix null pointer dereferencing in find_dup_cset_node_entry() and find_dup_cset_prop() | * 8399b98935 drivers: net: qlcnic: Fix potential memory leak in qlcnic_sriov_init() | * 96e5089702 net: stmmac: fix possible memory leak in stmmac_dvr_probe() | * ecaf934e44 net: stmmac: selftests: fix potential memleak in stmmac_test_arpoffload() | * e1359bc90a net: defxx: Fix missing err handling in dfx_init() | * c65603abc3 net: vmw_vsock: vmci: Check memcpy_from_msg() | * 9de42116fc clk: socfpga: Fix memory leak in socfpga_gate_init() | * e515881ade bpf: Do not zero-extend kfunc return values | * ce61a877c7 blktrace: Fix output non-blktrace event when blk_classic option enabled | * f2ae56fa0b wifi: brcmfmac: Fix error return code in brcmf_sdio_download_firmware() | * 23060daf37 wifi: rtl8xxxu: Fix the channel width reporting | * 6d0e00334e wifi: rtl8xxxu: Add __packed to struct rtl8723bu_c2h | * e69d380650 spi: spi-gpio: Don't set MOSI as an input if not 3WIRE mode | * 4e501a31af clk: samsung: Fix memory leak in _samsung_clk_register_pll() | * 441c05485c media: coda: Add check for kmalloc | * b99872178e media: coda: Add check for dcoda_iram_alloc | * fbf081ebe2 media: c8sectpfe: Add of_node_put() when breaking out of loop | * 2a7330d820 regulator: qcom-labibb: Fix missing of_node_put() in qcom_labibb_regulator_probe() | * ecf1b317a8 mmc: core: Normalize the error handling branch in sd_read_ext_regs() | * 7fecca429e memstick/ms_block: Add check for alloc_ordered_workqueue | * b77ced3fce memstick: ms_block: Add error handling support for add_disk() | * ae00eb6779 mmc: renesas_sdhi: alway populate SCC pointer | * 88fa6a4e39 mmc: mmci: fix return value check of mmc_add_host() | * 29c3690969 mmc: wbsd: fix return value check of mmc_add_host() | * 0959cc1685 mmc: via-sdmmc: fix return value check of mmc_add_host() | * e0cfe7aa41 mmc: meson-gx: fix return value check of mmc_add_host() | * 62005dfcc3 mmc: omap_hsmmc: fix return value check of mmc_add_host() | * 1925472dec mmc: atmel-mci: fix return value check of mmc_add_host() | * 58c3a8d0f1 mmc: wmt-sdmmc: fix return value check of mmc_add_host() | * afc898019e mmc: vub300: fix return value check of mmc_add_host() | * 6444079767 mmc: toshsd: fix return value check of mmc_add_host() | * df683201c7 mmc: rtsx_usb_sdmmc: fix return value check of mmc_add_host() | * 30dc645461 mmc: rtsx_pci: fix return value check of mmc_add_host() | * bc7e8744f5 mmc: pxamci: fix return value check of mmc_add_host() | * 2d496050de mmc: mxcmmc: fix return value check of mmc_add_host() | * f0502fe86a mmc: moxart: fix return value check of mmc_add_host() | * 29c5b4da41 mmc: alcor: fix return value check of mmc_add_host() | * 52e0d8a8dd riscv, bpf: Emit fixed-length instructions for BPF_PSEUDO_FUNC | * 0de70ed675 NFSv4.x: Fail client initialisation if state manager thread can't run | * 7055c878a0 SUNRPC: Fix missing release socket in rpc_sockname() | * 79d4cd40da xprtrdma: Fix regbuf data not freed in rpcrdma_req_create() | * cba633b24a ALSA: mts64: fix possible null-ptr-defer in snd_mts64_interrupt | * 9018550d96 media: saa7164: fix missing pci_disable_device() | * 2df1e2a6ec ALSA: pcm: Set missing stop_operating flag at undoing trigger start | * a443c55d96 bpf, sockmap: fix race in sock_map_free() | * 5229b90337 hwmon: (jc42) Restore the min/max/critical temperatures on resume | * 785f5c732a hwmon: (jc42) Convert register access and caching to regmap/regcache | * c4c64d8abd regulator: core: fix resource leak in regulator_register() | * 07f82dca11 configfs: fix possible memory leak in configfs_create_dir() | * 21a061772b hsr: Synchronize sequence number updates. | * a82f5b2e08 hsr: Synchronize sending frames to have always incremented outgoing seq nr. | * bb3b40cd6a hsr: Disable netpoll. | * 8e148d981b hsr: Avoid double remove of a node. | * 9387cbf7f7 hsr: Add a rcu-read lock to hsr_forward_skb(). | * a051e10bfc clk: qcom: clk-krait: fix wrong div2 functions | * 8275c7465d clk: qcom: lpass-sc7180: Fix pm_runtime usage | * 91657ec4d0 regulator: core: fix module refcount leak in set_supply() | * 66976a3be9 wifi: mt76: fix coverity overrun-call in mt76_get_txpower() | * a21e3f6f41 wifi: mt76: mt7921: fix reporting of TX AGGR histogram | * c8659018b6 mt76: stop the radar detector after leaving dfs channel | * ae19622e7f wifi: cfg80211: Fix not unregister reg_pdev when load_builtin_regdb_keys() fails | * 2e32f12998 wifi: mac80211: fix memory leak in ieee80211_if_add() | * f58888434d spi: spidev: mask SPI_CS_HIGH in SPI_IOC_RD_MODE | * b6d27d9250 bonding: uninitialized variable in bond_miimon_inspect() | * 7201e4f4f5 bpf, sockmap: Fix data loss caused by using apply_bytes on ingress redirect | * 6105ed3598 bpf, sockmap: Fix missing BPF_F_INGRESS flag when using apply_bytes | * 8786bde11a bpf, sockmap: Fix repeated calls to sock_put() when msg has more_data | * a222f992ce Input: wistron_btns - disable on UML | * d78649c21b netfilter: conntrack: set icmpv6 redirects as RELATED | * 09fe3b1392 ASoC: pcm512x: Fix PM disable depth imbalance in pcm512x_probe | * 8876793e56 drm/amdkfd: Fix memory leakage | * 8f2d2badf8 drm/amdgpu: Fix PCI device refcount leak in amdgpu_atrm_get_bios() | * 88c6e0995c drm/radeon: Fix PCI device refcount leak in radeon_atrm_get_bios() | * 0af0ff9fc0 drm/amd/pm/smu11: BACO is supported when it's in BACO state | * 27e7cf595d ASoC: mediatek: mt8173: Enable IRQ when pdata is ready | * 905e565375 ASoC: mediatek: mt8173: Fix debugfs registration for components | * d8e32f1bf1 wifi: iwlwifi: mvm: fix double free on tx path. | * d0bb44775c ALSA: asihpi: fix missing pci_disable_device() | * f12377abac NFS: Fix an Oops in nfs_d_automount() | * 9a96aff53c NFSv4: Fix a deadlock between nfs4_open_recover_helper() and delegreturn | * c6aca4c7ba NFSv4: Fix a credential leak in _nfs4_discover_trunking() | * 7f6607c884 NFSv4.2: Fix initialisation of struct nfs4_label | * 51899eefd1 NFSv4.2: Fix a memory stomp in decode_attr_security_label | * 34dffc77dd NFSv4.2: Clear FATTR4_WORD2_SECURITY_LABEL when done decoding | * d926611c89 ASoC: mediatek: mtk-btcvsd: Add checks for write and read of mtk_btcvsd_snd | * f243ff92d6 ASoC: dt-bindings: wcd9335: fix reset line polarity in example | * 41d7b8291c drm/tegra: Add missing clk_disable_unprepare() in tegra_dc_probe() | * 2376d7fa08 media: s5p-mfc: Add variant data for MFC v7 hardware for Exynos 3250 SoC | * 210fcf64be media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() | * b223cc15f9 media: dvb-core: Fix ignored return value in dvb_register_frontend() | * 825a8af31d pinctrl: pinconf-generic: add missing of_node_put() | * eedc698d66 clk: imx8mn: fix imx8mn_enet_phy_sels clocks list | * f86a432604 clk: imx8mn: fix imx8mn_sai2_sels clocks list | * 5e98c3a345 clk: imx: replace osc_hdmi with dummy | * 9453e097b8 clk: imx8mn: rename vpu_pll to m7_alt_pll | * bffc80bac8 media: imon: fix a race condition in send_packet() | * 9c9ff35d68 media: vimc: Fix wrong function called when vimc_init() fails | * f849c116d3 ASoC: qcom: Add checks for devm_kcalloc | * 16437645dd drbd: destroy workqueue when drbd device was freed | * cdaf45415c drbd: remove call to memset before free device/resource/connection | * f35981083c mtd: maps: pxa2xx-flash: fix memory leak in probe | * 87c750affd bonding: fix link recovery in mode 2 when updelay is nonzero | * 02105f0b30 drm/amdgpu: fix pci device refcount leak | * 5b0a1f1247 clk: rockchip: Fix memory leak in rockchip_clk_register_pll() | * 27aac5c012 regulator: core: use kfree_const() to free space conditionally | * a69b1faa9b ALSA: seq: fix undefined behavior in bit shift for SNDRV_SEQ_FILTER_USE_EVENT | * 9c0f3617ba ALSA: pcm: fix undefined behavior in bit shift for SNDRV_PCM_RATE_KNOT | * 6159424e2d pinctrl: k210: call of_node_put() | * 18a973fcb1 HID: hid-sensor-custom: set fixed size for custom attributes | * 0fc4280dbe bpf: Move skb->len == 0 checks into __bpf_redirect | * 8dbcb4c284 mtd: spi-nor: Fix the number of bytes for the dummy cycles | * 58e1a0ef52 mtd: spi-nor: hide jedec_id sysfs attribute if not present | * 348d95e39f inet: add READ_ONCE(sk->sk_bound_dev_if) in inet_csk_bind_conflict() | * 4451bef1a3 media: videobuf-dma-contig: use dma_mmap_coherent | * b2781a8626 media: platform: exynos4-is: Fix error handling in fimc_md_init() | * 7cf71bbe5d media: solo6x10: fix possible memory leak in solo_sysfs_init() | * c290aa527f media: vidtv: Fix use-after-free in vidtv_bridge_dvb_init() | * 648f303102 Input: elants_i2c - properly handle the reset GPIO when power is off | * e0d3e46ac6 mtd: lpddr2_nvm: Fix possible null-ptr-deref | * ab4e42f519 drm/msm/a6xx: Fix speed-bin detection vs probe-defer | * fea795f7c7 wifi: ath10k: Fix return value in ath10k_pci_init() | * 77482c4dd4 block: clear ->slave_dir when dropping the main slave_dir reference | * 62251948e2 ima: Fix misuse of dereference of pointer in template_desc_init_fields() | * 29d6c69ba4 integrity: Fix memory leakage in keyring allocation error path | * 8e6df95717 drm/fourcc: Fix vsub/hsub for Q410 and Q401 | * ec1727f89e drm/fourcc: Add packed 10bit YUV 4:2:0 format | * f72608b8dd regulator: qcom-rpmh: Fix PMR735a S3 regulator spec | * 63d011ad05 nvme: return err on nvme_init_non_mdts_limits fail | * f289a38df0 amdgpu/pm: prevent array underflow in vega20_odn_edit_dpm_table() | * cda1895f3b regulator: core: fix unbalanced of node refcount in regulator_dev_lookup() | * 1a5aaa5736 nvmet: only allocate a single slab for bvecs | * cb3033a432 libbpf: Fix uninitialized warning in btf_dump_dump_type_data | * 83baa50939 ASoC: pxa: fix null-pointer dereference in filter() | * a06ba0f7f8 drm/mediatek: Modify dpi power on/off sequence. | * 6d25bc6370 drm/radeon: Add the missed acpi_put_table() to fix memory leak | * 4cf11e9d31 bfq: fix waker_bfqq inconsistency crash | * 55e822212e rxrpc: Fix ack.bufferSize to be 0 when generating an ack | * 5ef8bf0df1 net, proc: Provide PROC_FS=n fallback for proc_create_net_single_write() | * d1c44928bb media: camss: Clean up received buffers on failed start of streaming | * 3b4b4df3f8 wifi: rsi: Fix handling of 802.3 EAPOL frames sent via control port | * 9e1440c858 Input: joystick - fix Kconfig warning for JOYSTICK_ADC | * 71212d7318 mtd: Fix device name leak when register device failed in add_mtd_device() | * 106311677b clk: qcom: gcc-sm8250: Use retention mode for USB GDSCs | * 322c7415e7 bpf: propagate precision across all frames, not just the last one | * 07c286c10a bpf: Check the other end of slot_type for STACK_SPILL | * fdbc363bc1 bpf: propagate precision in ALU/ALU64 operations | * b29e46610c media: platform: exynos4-is: fix return value check in fimc_md_probe() | * ab54081a28 media: vivid: fix compose size exceed boundary | * 3c58c83c6f bpf: Fix slot type check in check_stack_write_var_off | * cffa75198c drm/msm/hdmi: use devres helper for runtime PM management | * 58d002b72e drm/msm/hdmi: drop unused GPIO support | * 2d4bc60693 ima: Handle -ESTALE returned by ima_filter_rule_match() | * 13fc167e16 drm/panel/panel-sitronix-st7701: Remove panel on DSI attach failure | * c20672cfa0 spi: Update reference to struct spi_controller | * 2858d038c5 clk: renesas: r9a06g032: Repair grave increment error | * f6ed73db39 drm/rockchip: lvds: fix PM usage counter unbalance in poweron | * 13fab6322b can: kvaser_usb: Compare requested bittiming parameters with actual parameters in do_set_{,data}_bittiming | * 4e55d61e87 can: kvaser_usb: Add struct kvaser_usb_busparams | * fcfd4df200 can: kvaser_usb_leaf: Fix bogus restart events | * 51f07da38b can: kvaser_usb_leaf: Fix wrong CAN state after stopping | * 647c26887b can: kvaser_usb_leaf: Fix improved state not being reported | * 9676d65a4a can: kvaser_usb: make use of units.h in assignment of frequency | * c761108562 can: kvaser_usb_leaf: Set Warning state even without bus errors | * a60bf9d814 can: kvaser_usb: kvaser_usb_leaf: Handle CMD_ERROR_EVENT | * 8aae6bddc1 can: kvaser_usb: kvaser_usb_leaf: Rename {leaf,usbcan}_cmd_error_event to {leaf,usbcan}_cmd_can_error_event | * 972270be24 can: kvaser_usb: kvaser_usb_leaf: Get capabilities from device | * e9e0d9945f can: kvaser_usb: do not increase tx statistics when sending error message frames | * e39bce64e5 libbpf: Btf dedup identical struct test needs check for nested structs/arrays | * d4419f93e2 media: exynos4-is: don't rely on the v4l2_async_subdev internals | * 8741792d82 soreuseport: Fix socket selection for SO_INCOMING_CPU. | * 094f56192c venus: pm_helpers: Fix error check in vcodec_domains_get() | * 3c793a9ad9 media: i2c: ad5820: Fix error path | * 07611f9e44 media: adv748x: afe: Select input port when initializing AFE | * aa81257dbf media: coda: jpeg: Add check for kmalloc | * 9a402adc9f media: v4l2-ctrls: Fix off-by-one error in integer menu control check | * 1caed03305 drm/amdgpu/powerplay/psm: Fix memory leak in power state init | * f66a877083 ipmi: kcs: Poll OBF briefly to reduce OBE latency | * 983320199e ata: libata: fix NCQ autosense logic | * a9caf71aeb ata: add/use ata_taskfile::{error|status} fields | * 3483c3fb48 ata: libata: move ata_{port,link,dev}_dbg to standard pr_XXX() macros | * 6706135577 libbpf: Fix null-pointer dereference in find_prog_by_sec_insn() | * a733bf1019 libbpf: Fix use-after-free in btf_dump_name_dups | * b5ec2a04fe drm/bridge: adv7533: remove dynamic lane switching from adv7533 bridge | * 6d40a49d05 wifi: rtl8xxxu: Fix reading the vendor of combo chips | * 355f16f756 wifi: ath9k: hif_usb: Fix use-after-free in ath9k_hif_usb_reg_in_cb() | * d856f7574b wifi: ath9k: hif_usb: fix memory leak of urbs in ath9k_hif_usb_dealloc_tx_urbs() | * 12229a2523 platform/mellanox: mlxbf-pmc: Fix event typo | * a0d93aac54 rapidio: devices: fix missing put_device in mport_cdev_open | * 7af9cb8cbb hfs: Fix OOB Write in hfs_asc2mac | * 90962b3b1c relay: fix type mismatch when allocating memory in relay_create_buf() | * 0d60b11f8f eventfd: change int to __u64 in eventfd_signal() ifndef CONFIG_EVENTFD | * 2f5cc7fd73 rapidio: fix possible UAF when kfifo_alloc() fails | * 337b68da68 fs: sysv: Fix sysv_nblocks() returns wrong value | * 95d42a8d3d lockd: set other missing fields when unlocking files | * 318229b4d3 MIPS: OCTEON: warn only once if deprecated link status is being used | * 5e6d37a93a MIPS: BCM63xx: Add check for NULL for clk in clk_enable | * 50af0ba3e1 platform/x86: intel_scu_ipc: fix possible name leak in __intel_scu_ipc_register() | * 3cf8150135 platform/x86: mxm-wmi: fix memleak in mxm_wmi_call_mx[ds|mx]() | * 0ceadb5a3e platform/chrome: cros_ec_typec: zero out stale pointers | * 49c98b5688 platform/chrome: cros_ec_typec: Cleanup switch handle return paths | * b55ef8508a PM: runtime: Do not call __rpm_callback() from rpm_idle() | * 0bf874183b xen/privcmd: Fix a possible warning in privcmd_ioctl_mmap_resource() | * 70966d6b0f x86/xen: Fix memory leak in xen_init_lock_cpu() | * 23aef94eea x86/xen: Fix memory leak in xen_smp_intr_init{_pv}() | * 03ab1c5c2f uprobes/x86: Allow to probe a NOP instruction with 0x66 prefix | * 6fde666278 ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage() | * 9cabd5f4f1 clocksource/drivers/timer-ti-dm: Fix missing clk_disable_unprepare in dmtimer_systimer_init_clock() | * b73c76c3c4 cpu/hotplug: Do not bail-out in DYING/STARTING sections | * 6eb1802184 cpu/hotplug: Make target_store() a nop when target == state | * cd130e2676 futex: Resend potentially swallowed owner death notification | * fd8a10d44c futex: Move to kernel/futex/ | * 156144bd18 mips: ralink: mt7621: do not use kzalloc too early | * 186d59bb6a mips: ralink: mt7621: soc queries and tests as functions | * 8348da01e5 mips: ralink: mt7621: define MT7621_SYSC_BASE with __iomem | * 0f8e6fe09c clocksource/drivers/sh_cmt: Access registers according to spec | * a47de2fd3f rapidio: rio: fix possible name leak in rio_register_mport() | * ec3f04f74f rapidio: fix possible name leaks when rio_add_device() fails | * 4662d8e6ab debugfs: fix error when writing negative value to atomic_t debugfs file | * 7e8e8cc136 lib/notifier-error-inject: fix error when writing -errno to debugfs file | * 39b5e6130b libfs: add DEFINE_SIMPLE_ATTRIBUTE_SIGNED for signed value | * 19c202e6e5 cpufreq: amd_freq_sensitivity: Add missing pci_dev_put() | * 93e3c80338 genirq/irqdesc: Don't try to remove non-existing sysfs files | * 435cc7d18c nfsd: don't call nfsd_file_put from client states seqfile display | * 5030d4d2bf NFSD: Finish converting the NFSv2 GETACL result encoder | * e498675e06 SUNRPC: Return true/false (not 1/0) from bool functions | * 3e255dc210 EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() | * 740efb64ca irqchip/wpcm450: Fix memory leak in wpcm450_aic_of_init() | * 77b99b483f irqchip: gic-pm: Use pm_runtime_resume_and_get() in gic_probe() | * 5139cbc0c6 thermal: core: fix some possible name leaks in error paths | * cab345f9d5 platform/chrome: cros_usbpd_notify: Fix error handling in cros_usbpd_notify_init() | * 0358bc7cc2 perf/x86/intel/uncore: Fix reference count leak in __uncore_imc_init_box() | * 433bd587dc perf/x86/intel/uncore: Fix reference count leak in snr_uncore_mmio_map() | * 3485f19751 perf/x86/intel/uncore: Fix reference count leak in hswep_has_limit_sbox() | * 0021ef7dc6 perf/x86/intel/uncore: Fix reference count leak in sad_cfg_iio_topology() | * c12b314bb2 PNP: fix name memory leak in pnp_alloc_dev() | * f1c7a6af71 selftests/efivarfs: Add checking of the test return value | * 46be3ee1ca MIPS: vpe-cmp: fix possible memory leak while module exiting | * e820a8192f MIPS: vpe-mt: fix possible memory leak while module exiting | * 61d68cf2ba ocfs2: fix memory leak in ocfs2_stack_glue_init() | * e83b47580a lib/fonts: fix undefined behavior in bit shift for get_default_font | * 0df7d9ab6b proc: fixup uptime selftest | * 07b8659b8e timerqueue: Use rb_entry_safe() in timerqueue_getnext() | * 413b18866b platform/x86: huawei-wmi: fix return value calculation | * 4b46932283 lib/debugobjects: fix stat count and optimize debug_objects_mem_init | * f790dfe816 perf: Fix possible memleak in pmu_dev_alloc() | * 418d21c0df selftests/ftrace: event_triggers: wait longer for test_event_enable | * 4ea765b106 cpufreq: qcom-hw: Fix memory leak in qcom_cpufreq_hw_read_lut() | * c52d9c25d9 fs: don't audit the capability check in simple_xattr_list() | * e4d0d13b46 PM: hibernate: Fix mistake in kerneldoc comment | * 1f62b8e50d x86/sgx: Reduce delay and interference of enclave release | * f5b88170f0 alpha: fix syscall entry in !AUDUT_SYSCALL case | * a819ba80b9 alpha: fix TIF_NOTIFY_SIGNAL handling | * eb2a732ef4 cpuidle: dt: Return the correct numbers of parsed idle states | * 3af4f5cb8a sched/uclamp: Make asym_fits_capacity() use util_fits_cpu() | * 23cb580e0c sched/core: Introduce sched_asym_cpucap_active() | * 41c2dba388 sched/fair: Removed useless update of p->recent_used_cpu | * 55ffeab089 sched/uclamp: Make select_idle_capacity() use util_fits_cpu() | * 4639bfbb83 sched/uclamp: Make task_fits_capacity() use util_fits_cpu() | * 309e50cbfe sched/uclamp: Fix relationship between uclamp and migration margin | * 54a766e196 sched/fair: Cleanup task_util and capacity type | * 26bffaf678 ovl: remove privs in ovl_fallocate() | * 5dc34f9aaa ovl: remove privs in ovl_copyfile() | * 9636e70ee2 ovl: use ovl_copy_{real,upper}attr() wrappers | * a54843833c ovl: store lower path in ovl_inode | * 163c5bbe7d tpm/tpm_crb: Fix error message in __crb_relinquish_locality() | * fe880e9df9 tpm/tpm_ftpm_tee: Fix error handling in ftpm_mod_init() | * ebc73c4f26 pstore: Avoid kcore oops by vmap()ing with VM_IOREMAP | * d4dcde11bf ARM: mmp: fix timer_read delay | * 95916147dc pstore/ram: Fix error return code in ramoops_probe() | * a31a647a3d seccomp: Move copy_seccomp() to no failure path. | * b8b76b8da6 arm64: dts: armada-3720-turris-mox: Add missing interrupt for RTC | * 820a5ccca7 ARM: dts: turris-omnia: Add switch port 6 node | * b311f8e9f5 ARM: dts: turris-omnia: Add ethernet aliases | * 48ebdd06c9 ARM: dts: armada-39x: Fix assigned-addresses for every PCIe Root Port | * f27dd04e44 ARM: dts: armada-38x: Fix assigned-addresses for every PCIe Root Port | * 1e53c63da8 ARM: dts: armada-375: Fix assigned-addresses for every PCIe Root Port | * 3af1a73e9e ARM: dts: armada-xp: Fix assigned-addresses for every PCIe Root Port | * e4ed8133c4 ARM: dts: armada-370: Fix assigned-addresses for every PCIe Root Port | * b335b6344e ARM: dts: dove: Fix assigned-addresses for every PCIe Root Port | * 5b3415e683 arm64: dts: mediatek: mt6797: Fix 26M oscillator unit name | * 93f5e66496 arm64: dts: mediatek: pumpkin-common: Fix devicetree warnings | * debd938e21 arm64: dts: mt2712-evb: Fix usb vbus regulators unit names | * b2c6397754 arm64: dts: mt2712-evb: Fix vproc fixed regulators unit names | * 96c972f835 arm64: dts: mt2712e: Fix unit address for pinctrl node | * 2cd1391c28 arm64: dts: mt2712e: Fix unit_address_vs_reg warning for oscillators | * 39877a3636 arm64: dts: mt6779: Fix devicetree build warnings | * af431ce47e ARM: dts: nuvoton: Remove bogus unit addresses from fixed-partition nodes | * 0a616049ec arm64: dts: ti: k3-j721e-main: Drop dma-coherent in crypto node | * 22a740824a arm64: dts: ti: k3-am65-main: Drop dma-coherent in crypto node | * b131304fe7 perf/smmuv3: Fix hotplug callback leak in arm_smmu_pmu_init() | * b99fbe8d94 perf/arm_dmc620: Fix hotplug callback leak in dmc620_pmu_init() | * 9285b623bb perf: arm_dsu: Fix hotplug callback leak in dsu_pmu_init() | * e6318a7e19 arm64: mm: kfence: only handle translation faults | * 46ddfb9d1e arm64: Treat ESR_ELx as a 64-bit register | * 681e340128 soc: ti: smartreflex: Fix PM disable depth imbalance in omap_sr_probe | * 6eca7a2535 soc: ti: knav_qmss_queue: Fix PM disable depth imbalance in knav_queue_probe | * 972f8fc065 soc: ti: knav_qmss_queue: Use pm_runtime_resume_and_get instead of pm_runtime_get_sync | * fe53048f2a arm: dts: spear600: Fix clcd interrupt | * 75baeec464 arm64: dts: qcom: sm6125: fix SDHCI CQE reg names | * 0f9ac04191 soc: qcom: apr: Add check for idr_alloc and of_property_read_string_index | * 6855dd02c5 soc: qcom: apr: make code more reuseable | * c9fb81a835 arm64: dts: qcom: sm8250: drop bogus DP PHY clock | * 53ffa57464 arm64: dts: qcom: sm8350: fix UFS PHY registers | * d5a6bbd7a2 arm64: dts: qcom: sm8250: fix UFS PHY registers | * 3a52ff845f arm64: dts: qcom: sm8150: fix UFS PHY registers | * 800f8165e0 arm64: dts: qcom: Correct QMP PHY child node name | * ee136f275b soc: qcom: llcc: make irq truly optional | * aa7ffd4174 arm64: dts: qcom: sm8250: correct LPASS pin pull down | * f94bacc616 arm64: dts: qcom: pm660: Use unique ADC5_VCOIN address in node name | * d5bf119781 drivers: soc: ti: knav_qmss_queue: Mark knav_acc_firmwares as static | * 4707d5daf8 ARM: dts: stm32: Fix AV96 WLAN regulator gpio property | * 33647d7a46 ARM: dts: stm32: Drop stm32mp15xc.dtsi from Avenger96 | * 9f271a8660 objtool, kcsan: Add volatile read/write instrumentation to whitelist | * 51fe2dcba8 arm64: dts: qcom: msm8916: Drop MSS fallback compatible | * a9fff3524f arm64: dts: qcom: sdm845-cheza: fix AP suspend pin bias | * 6487f48ea3 arm64: dts: qcom: sdm630: fix UART1 pin bias | * 6c0c9c5458 ARM: dts: qcom: apq8064: fix coresight compatible | * 0f9b088d68 arm64: dts: qcom: msm8996: fix GPU OPP table | * 270683fc7b arm64: dts: qcom: msm8996: fix supported-hw in cpufreq OPP tables | * 5c5a628914 arm64: dts: qcom: msm8996: Add MSM8996 Pro support | * 3f14048ee4 arm64: dts: qcom: sm8250-sony-xperia-edo: fix touchscreen bias-disable | * 89f79f8d7f arm64: dts: qcom: ipq6018-cp01-c1: use BLSPI1 pins | * 9db5992e72 usb: musb: remove extra check in musb_gadget_vbus_draw | * adc063a491 drm/amd/display: Manually adjust strobe for DCN303 * | 50e12445ab Merge 5.15.85 into android13-5.15-lts |\| | * 5827ddaf45 Linux 5.15.85 | * e22dbadac8 net: loopback: use NET_NAME_PREDICTABLE for name_assign_type | * 314e7a7836 selftests: net: Use "grep -E" instead of "egrep" | * 19a7814396 Bluetooth: L2CAP: Fix u8 overflow | * f692abf139 HID: uclogic: Add HID_QUIRK_HIDINPUT_FORCE quirk | * 5325a884e2 usb: dwc3: pci: Update PCIe device ID for USB3 controller on CPU sub-system for Raptor Lake | * 367e1e3399 igb: Initialize mailbox message for VF reset | * a301742b35 xhci: Apply XHCI_RESET_TO_DEFAULT quirk to ADL-N | * 5e959f0c4c USB: serial: f81534: fix division by zero on line-speed change | * 68fbe268d2 USB: serial: f81232: fix division by zero on line-speed change | * 3ec7f24b8b USB: serial: cp210x: add Kamstrup RF sniffer PIDs | * 2b092fab23 USB: serial: option: add Quectel EM05-G modem | * 6b41a35b41 usb: gadget: uvc: Prevent buffer overflow in setup handler | * 828112571c udf: Fix extending file within last block | * df1a2596c7 udf: Do not bother looking for prealloc extents if i_lenExtents matches i_size | * 63dbbd8f14 udf: Fix preallocation discarding at indirect extent boundary | * 79a97f08ae udf: Discard preallocation before extending file with a hole * | fb8d543b61 Merge 5.15.84 into android13-5.15-lts |\| | * d68f50bfb0 Linux 5.15.84 | * 972707bae3 net: fec: properly guard irq coalesce setup | * 289721fe09 ASoC: ops: Correct bounds check for second channel on SX controls | * de0866b94a nvme-pci: clear the prp2 field when not used | * 8bffa95ac1 perf: Fix perf_pending_task() UaF | * 825bd2af42 ASoC: cs42l51: Correct PGA Volume minimum value | * 91582b3a1a net: fec: don't reset irq coalesce settings to defaults on "ip link up" | * c772dab247 can: mcba_usb: Fix termination command argument | * aa822de7de can: sja1000: fix size of OCR_MODE_MASK define | * 09e08740d7 pinctrl: meditatek: Startup with the IRQs disabled | * 172a95026f libbpf: Use page size as max_entries when probing ring buffer map | * cf611d7867 ASoC: ops: Check bounds for second channel in snd_soc_put_volsw_sx() | * a74b88e170 ASoC: fsl_micfil: explicitly clear CHnF flags | * afac1e7d78 ASoC: fsl_micfil: explicitly clear software reset bit | * 9d933af8fe nfp: fix use-after-free in area_cache_get() | * e1a4f5880d vfs: fix copy_file_range() averts filesystem freeze protection | * 86e28ed25b x86/vdso: Conditionally export __vdso_sgx_enter_enclave() * | bfbd2237c1 Merge 5.15.83 into android13-5.15-lts |\| | * fd6d66840b Linux 5.15.83 | * f895511de9 io_uring: Fix a null-ptr-deref in io_tctx_exit_cb() | * f435c66d23 io_uring: move to separate directory | * d9e1e5d8a7 block: move CONFIG_BLOCK guard to top Makefile | * e5c0bc4ff5 can: esd_usb: Allow REC and TEC to return to zero | * db6343a5b0 s390/qeth: fix use-after-free in hsci | * a56c1cebe4 s390/qeth: fix various format strings | * a6dba316c9 macsec: add missing attribute validation for offload | * 40500f1f47 net: mvneta: Fix an out of bounds check | * b9274dbe39 net: thunderbolt: fix memory leak in tbnet_open() | * 7390c70bd4 ipv6: avoid use-after-free in ip6_fragment() | * 1beb475892 net: plip: don't call kfree_skb/dev_kfree_skb() under spin_lock_irq() | * b08412a9cf net: phy: mxl-gpy: fix version reporting | * dec5abd91a xen/netback: fix build warning | * 54d830e242 dpaa2-switch: Fix memory leak in dpaa2_switch_acl_entry_add() and dpaa2_switch_acl_entry_remove() | * c7adcbd0fd ethernet: aeroflex: fix potential skb leak in greth_init_rings() | * d962d42d63 tipc: call tipc_lxc_xmit without holding node_read_lock | * f3b5dda26c net: dsa: sja1105: fix memory leak in sja1105_setup_devlink_regions() | * 5dab6fa068 ipv4: Fix incorrect route flushing when table ID 0 is used | * ac566bd577 ipv4: Fix incorrect route flushing when source address is deleted | * af4ccae4b7 tipc: Fix potential OOB in tipc_link_proto_rcv() | * b8ce0e6f9f net: hisilicon: Fix potential use-after-free in hix5hd2_rx() | * 1685417774 net: mdio: fix unbalanced fwnode reference count in mdio_device_release() | * 6f4798ac9c net: hisilicon: Fix potential use-after-free in hisi_femac_rx() | * 114e65a221 net: thunderx: Fix missing destroy_workqueue of nicvf_rx_mode_wq | * 51c0494575 net: microchip: sparx5: Fix missing destroy_workqueue of mact_queue | * 99eec0a766 ip_gre: do not report erspan version on GRE interface | * 2891957853 net: stmmac: fix "snps,axi-config" node property parsing | * 5cb8f1a784 gpio/rockchip: fix refcount leak in rockchip_gpiolib_register() | * b8c2f0392d nvme initialize core quirks before calling nvme_init_subsystem | * 908b2da426 NFC: nci: Bounds check struct nfc_target arrays | * d841cc1563 i40e: Disallow ip4 and ip6 l4_4_bytes | * 625a13850b i40e: Fix for VF MAC address 0 | * 5538794dbd i40e: Fix not setting default xps_cpus after reset | * a6b30598fe net: mvneta: Prevent out of bounds read in mvneta_config_rss() | * e6e897d4fe xen-netfront: Fix NULL sring after live migration | * eefd8953a7 octeontx2-pf: Fix potential memory leak in otx2_init_tc() | * f88acaed07 net: mdiobus: fix double put fwnode in the error path | * cc62d76928 net: mdiobus: fwnode_mdiobus_register_phy() rework error handling | * ea113b570e net: encx24j600: Fix invalid logic in reading of MISTAT register | * 8aae746d06 net: encx24j600: Add parentheses to fix precedence | * a110287ef4 mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add() | * e046421bed selftests: rtnetlink: correct xfrm policy rule in kci_test_ipsec_offload | * 4fa8988a36 net: dsa: sja1105: Check return value | * b35be171df net: dsa: hellcreek: Check return value | * a4c342e645 net: dsa: ksz: Check return value | * edf7284a98 Bluetooth: Fix not cleanup led when bt_init fails | * 3322193949 Bluetooth: 6LoWPAN: add missing hci_dev_put() in get_l2cap_conn() | * 6c88c764e0 vmxnet3: use correct intrConf reference when using extended queues | * 5ad0d85757 vmxnet3: correctly report encapsulated LRO packet | * 5c014eb0ed af_unix: Get user_ns from in_skb in unix_diag_get_exact(). | * 807a01a329 drm: bridge: dw_hdmi: fix preference of RGB modes over YUV420 | * eb96fd3983 net: broadcom: Add PTP_1588_CLOCK_OPTIONAL dependency for BCMGENET under ARCH_BCM2835 | * 16eb678bca igb: Allocate MSI-X vector when testing | * 34c6367c94 e1000e: Fix TX dispatch condition | * 4271515f18 gpio: amd8111: Fix PCI device reference count leak | * d57b60e9b3 drm/bridge: ti-sn65dsi86: Fix output polarity setting bug | * f8b2965601 netfilter: ctnetlink: fix compilation warning after data race fixes in ct mark | * 246bcd05ba ca8210: Fix crash by zero initializing data | * 80dad8df5f ieee802154: cc2520: Fix error return code in cc2520_hw_init() | * dd9dcfb85c drm/vmwgfx: Fix race issue calling pin_user_pages | * 7b09ba9036 netfilter: nft_set_pipapo: Actually validate intervals in fields after the first one | * 6daaa84b62 gpiolib: fix memory leak in gpiochip_setup_dev() | * 1a1075d371 gpiolib: check the 'ngpios' property in core gpiolib code | * 70c5515c1c gpiolib: improve coding style for local variables | * 3b714f25fc clk: Fix pointer casting to prevent oops in devm_clk_release() | * c142cba37d can: af_can: fix NULL pointer dereference in can_rcv_filter | * 104bb1f67e HID: ite: Enable QUIRK_TOUCHPAD_ON_OFF_REPORT on Acer Aspire Switch V 10 | * f755d11c55 HID: core: fix shift-out-of-bounds in hid_report_raw_event | * 2d4b310c32 HID: hid-lg4ff: Add check for empty lbuf | * 5e8021ae08 HID: usbhid: Add ALWAYS_POLL quirk for some mice | * 5e88c6f4aa net: dsa: sja1105: avoid out of bounds access in sja1105_init_l2_policing() | * 1074fefce9 drm/shmem-helper: Avoid vm_open error paths | * 83e3da8bb9 drm/shmem-helper: Remove errant put in error path | * 249011f4c3 drm/amdgpu/sdma_v4_0: turn off SDMA ring buffer in the s2idle suspend | * 1e4fe9a154 drm/vmwgfx: Don't use screen objects when SEV is active | * f6550976fe KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field | * fe50a9bbeb net: mana: Fix race on per-CQ variable napi work_done | * a49894a5ac Bluetooth: Fix crash when replugging CSR fake controllers | * 1dee2b5047 Bluetooth: btusb: Add debug message for CSR controllers | * 3ac29732a2 mm/gup: fix gup_pud_range() for dax | * aad8bbd17a memcg: fix possible use-after-free in memcg_write_event_control() | * 6fb8bc29bf media: v4l2-dv-timings.c: fix too strict blanking sanity checks | * a4c575541e Revert "ARM: dts: imx7: Fix NAND controller size-cells" | * 28abc11459 soundwire: intel: Initialize clock stop timeout | * 22d800b378 media: videobuf2-core: take mmap_lock in vb2_get_unmapped_area() | * 5d0fa6fc88 xen/netback: don't call kfree_skb() with interrupts disabled | * 4422241cef xen/netback: do some code cleanup | * 0fe29bd925 xen/netback: Ensure protocol headers don't fall in the non-linear area | * f01677be31 drm/bridge: anx7625: Fix edid_read break case in sp_tx_edid_read() | * ee2536830b cifs: fix use-after-free caused by invalid pointer `hostname` | * dc62f05f66 rtc: cmos: avoid UIP when reading alarm time | * 48ea4199af rtc: cmos: avoid UIP when writing alarm time | * 3f52afc6ed rtc: mc146818-lib: extract mc146818_avoid_UIP | * 1a3f8c6cd2 mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths | * 79ad784c9d mm/khugepaged: fix GUP-fast interaction by sending IPI | * d15cd6de01 mm/khugepaged: take the right locks for page table retraction | * 26f084e554 net: usb: qmi_wwan: add u-blox 0x1342 composition | * 029a7f1c5d 9p/xen: check logical size for buffer size | * b398832893 usb: dwc3: gadget: Disable GUSB2PHYCFG.SUSPHY for End Transfer | * e70a572440 fbcon: Use kzalloc() in fbcon_prepare_logo() | * fd3768597d regulator: twl6030: fix get status of twl6032 regulators | * 9f74b9aa8d ASoC: soc-pcm: Add NULL check in BE reparenting | * dae93f4168 btrfs: send: avoid unaligned encoded writes when attempting to clone range | * f54e1edf57 selftests/net: Find nettest in current directory | * fccd454129 ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event | * 542a563bb7 regulator: slg51000: Wait after asserting CS pin | * 3d1b5fde36 9p/fd: Use P9_HDRSZ for header size | * fe2d44e86e ASoC: rt711-sdca: fix the latency time of clock stop prepare state machine transitions | * e945f3d809 ARM: dts: rockchip: disable arm_global_timer on rk3066 and rk3188 | * c3b818c91a spi: mediatek: Fix DEVAPC Violation at KO Remove | * d9f0107be1 ASoC: wm8962: Wait for updated value of WM8962_CLOCKING1 register | * 7ae0262748 ARM: 9266/1: mm: fix no-MMU ZERO_PAGE() implementation | * d81c62e312 ARM: 9251/1: perf: Fix stacktraces for tracepoint events in THUMB2 kernels | * 66717ad03b fs: use acquire ordering in __fget_light() | * 1222e2364a ARM: dts: rockchip: rk3188: fix lcdc1-rgb24 node name | * 996fb29b06 arm64: dts: rockchip: fix ir-receiver node names | * 752138ef89 ARM: dts: rockchip: fix ir-receiver node names | * 8045971e40 arm: dts: rockchip: remove clock-frequency from rtc | * 5e9fb8013a arm: dts: rockchip: fix node name for hym8563 rtc | * 2ed7137e91 arm64: dts: rockchip: keep I2S1 disabled for GPIO function on ROCK Pi 4 series | * 5a1122e1a8 mmc: mtk-sd: Fix missing clk_disable_unprepare in msdc_of_clock_parse() | * 282f52c954 clk: Provide new devm_clk helpers for prepared and enabled clocks | * eb94a7a20f clk: generalize devm_clk_get() a bit * | 20de784185 ANDROID: fix up abi change in struct sdhci_host * | ebd1f8013d ANDROID: gki_defconfig: add CONFIG_FUNCTION_ERROR_INJECTION * | 112ff45bb5 Merge 5.15.82 into android13-5.15-lts |\| | * d979030136 Linux 5.15.82 | * 48642f9431 proc: proc_skip_spaces() shouldn't think it is working on C strings | * 3eb9213f66 proc: avoid integer type confusion in get_proc_long | * 4a4073a2e2 ipc/sem: Fix dangling sem_array access in semtimedop race | * 53b9b1201e Input: raydium_ts_i2c - fix memory leak in raydium_i2c_send() | * 571b6bbbf5 char: tpm: Protect tpm_pm_suspend with locks | * f39891cfe7 Revert "clocksource/drivers/riscv: Events are stopped during CPU suspend" | * a759057af7 ACPI: HMAT: Fix initiator registration for single-initiator systems | * da8a794d71 ACPI: HMAT: remove unnecessary variable initialization | * 2d16161a2c i2c: imx: Only DMA messages with I2C_M_DMA_SAFE flag set | * 950a05cb15 i2c: npcm7xx: Fix error handling in npcm_i2c_init() | * db3f8da033 serial: stm32: Deassert Transmit Enable on ->rs485_config() | * 45f628f4fd serial: stm32: Use TC interrupt to deassert GPIO RTS in RS485 mode | * c60eae5b1d serial: stm32: Factor out GPIO RTS toggling into separate function | * 041f8dc882 ipv4: Fix route deletion when nexthop info is not specified | * 25174d91e4 ipv4: Handle attempt to delete multipath route when fib_info contains an nh reference | * a0ad247e55 selftests: net: fix nexthop warning cleanup double ip typo | * 532847b69c selftests: net: add delete nexthop route warning test | * e078355881 Kconfig.debug: provide a little extra FRAME_WARN leeway when KASAN is enabled | * 723fa02e0e parisc: Increase FRAME_WARN to 2048 bytes on parisc | * b951ab4b35 mm: migrate: fix THP's mapcount on isolation | * c5eda6029c mm: __isolate_lru_page_prepare() in isolate_migratepages_block() | * bdb613ef17 iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init() | * b6eea8b2e8 iommu/vt-d: Fix PCI device refcount leak in has_external_pci() | * 787d81d4eb nvme: fix SRCU protection of nvme_ns_head list | * 12f237200c riscv: kexec: Fixup irq controller broken in kexec crash path | * ac00301adb riscv: fix race when vmap stack overflow | * fa7a7d185e riscv: Sync efi page table's kernel mappings before switching | * d86d698925 pinctrl: single: Fix potential division by zero | * 98b15c7066 ASoC: ops: Fix bounds check for _sx controls | * f88a6977f8 KVM: x86/mmu: Fix race condition in direct_page_fault | * df4b177b48 io_uring/poll: fix poll_refs race with cancelation | * 4b702b7d11 io_uring: make poll refs more robust | * 1d58849ac2 io_uring: cmpxchg for poll arm refs release | * cd1981a8c3 io_uring: fix tw losing poll events | * 62321dc7b0 io_uring: update res mask in io_poll_check_events | * 417d5ea6e7 tracing: Free buffers when a used dynamic event is removed | * 52fc245d15 tracing: Fix race where histograms can be called before the event | * cb2b0612cd tracing/osnoise: Fix duration type | * 615a996ff3 drm/i915: Never return 0 if not all requests retired | * 01a2b25ef2 drm/i915: Fix negative value passed as remaining time | * ff1591ba33 drm/amdgpu: enable Vangogh VCN indirect sram mode | * ac2d7fa908 drm/amdgpu: temporarily disable broken Clang builds due to blown stack-frame | * 57ee7bc4c6 mmc: sdhci: Fix voltage switch delay | * bb8f809514 mmc: sdhci-sprd: Fix no reset data and command after voltage switch | * 4c7681c1a5 mmc: sdhci-esdhc-imx: correct CQHCI exit halt state check | * 01dbe4db59 mmc: core: Fix ambiguous TRIM and DISCARD arg | * 738946e355 mmc: mmc_test: Fix removal of debugfs file | * 635d051734 net: stmmac: Set MAC's flow control register to reflect current settings | * 9132dcdf3b v4l2: don't fall back to follow_pfn() if pin_user_pages_fast() fails | * 76ad884be0 pinctrl: intel: Save and restore pins in "direct IRQ" mode | * 41296b85fa x86/bugs: Make sure MSR_SPEC_CTRL is updated properly upon resume from S3 | * 33021419fd nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry() | * 2e44dd9a8d tools/vm/slabinfo-gnuplot: use "grep -E" instead of "egrep" | * b60a8ad771 error-injection: Add prompt for function error injection | * 757eb00c4c ALSA: dice: fix regression for Lexicon I-ONIX FW810S | * a1a96a6f30 riscv: mm: Proper page permissions after initmem free | * 823df3607d riscv: vdso: fix section overlapping under some conditions | * 6e035d5a2a hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() | * 7692700ac8 hwmon: (coretemp) Check for null before removing sysfs attrs | * 9b5836b9c4 net: ethernet: renesas: ravb: Fix promiscuous mode after system resumed | * 0dfb9a5663 sctp: fix memory leak in sctp_stream_outq_migrate() | * fcb3e02161 packet: do not set TP_STATUS_CSUM_VALID on CHECKSUM_COMPLETE | * 04b995e963 net: tun: Fix use-after-free in tun_detach() | * 43ca0adf79 afs: Fix fileserver probe RTT handling | * 543d917f69 net: mdiobus: fix unbalanced node reference count | * dca370e575 net: hsr: Fix potential use-after-free | * 1daec08156 tipc: re-fetch skb cb after tipc_msg_validate | * 16a64dc265 dsa: lan9303: Correct stat name | * 766086ea8c net: wwan: iosm: fix dma_alloc_coherent incompatible pointer type | * c667751a42 net: wwan: iosm: fix kernel test robot reported error | * 9c584d6d9c net: ethernet: nixge: fix NULL dereference | * 8782b32ef8 net/9p: Fix a potential socket leak in p9_socket_open | * 6fc9425bff net: net_netdev: Fix error handling in ntb_netdev_init_module() | * 3bc893ef36 net: ethernet: ti: am65-cpsw: fix error handling in am65_cpsw_nuss_probe() | * 7730904f50 net: phy: fix null-ptr-deref while probe() failed | * 59b54f0563 wifi: mac8021: fix possible oob access in ieee80211_get_rate_duration | * dc0853f8b5 wifi: cfg80211: don't allow multi-BSSID in S1G | * 88a6fe3707 wifi: cfg80211: fix buffer overflow in elem comparison | * 08fff7aaeb aquantia: Do not purge addresses when setting the number of rings | * 2a7aa52573 qlcnic: fix sleep-in-atomic-context bugs caused by msleep | * 7b734d26f0 can: m_can: Add check for devm_clk_get | * ea8dc27bb0 can: m_can: pci: add missing m_can_class_free_dev() in probe/remove methods | * b1d2a8e02a can: etas_es58x: es58x_init_netdev(): free netdev when register_candev() | * e53da04e37 can: cc770: cc770_isa_probe(): add missing free_cc770dev() | * d452a71995 can: sja1000_isa: sja1000_isa_probe(): add missing free_sja1000dev() | * 372eb550fa net/mlx5e: Fix use-after-free when reverting termination table | * 839eeab03c net/mlx5: Fix uninitialized variable bug in outlen_write() | * 34feea3bfb net/mlx5: DR, Fix uninitialized var warning | * 3485ef2aab net/mlx5: DR, Rename list field in matcher struct to list_node | * 9fc27d22cd e100: Fix possible use after free in e100_xmit_prepare | * 0d9f5bd54b iavf: Fix error handling in iavf_init_module() | * b0b2b9050c iavf: remove redundant ret variable | * 69501d8205 fm10k: Fix error handling in fm10k_init_module() | * 5e3657dede i40e: Fix error handling in i40e_init_module() | * 7109e94109 ixgbevf: Fix resource leak in ixgbevf_init_module() | * 196ea810e2 of: property: decrement node refcount in of_fwnode_get_reference_args() | * 36164db278 nvmem: rmem: Fix return value check in rmem_read() | * e376183167 bpf: Do not copy spin lock field from user in bpf_selem_alloc | * 45f6e81863 hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails | * a90251376c hwmon: (i5500_temp) fix missing pci_disable_device() | * eeb31b828d hwmon: (ina3221) Fix shunt sum critical calculation | * 9514b95cac hwmon: (ltc2947) fix temperature scaling | * 0140e079a4 libbpf: Handle size overflow for ringbuf mmap | * 06d5790e7d ARM: at91: rm9200: fix usb device clock id | * d074f173fb scripts/faddr2line: Fix regression in name resolution on ppc64le | * ee3d37d796 bpf, perf: Use subprog name when reporting subprog ksymbol | * ec02fc0a41 iio: light: rpr0521: add missing Kconfig dependencies | * f7419fc42a iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw | * e7e76a77aa iio: health: afe4403: Fix oob read in afe4403_read_raw | * ebdca90efb drm/amdgpu: Partially revert "drm/amdgpu: update drm_display_info correctly when the edid is read" | * c365d3c3e5 drm/amdgpu: update drm_display_info correctly when the edid is read | * df5346466e drm/display/dp_mst: Fix drm_dp_mst_add_affected_dsc_crtcs() return code | * 044da1a371 btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit() | * da86809ab8 btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker | * 5d66eadc1c spi: spi-imx: Fix spi_bus_clk if requested clock is higher than input clock | * 6b4544a131 btrfs: free btrfs_path before copying inodes to userspace | * c7ae3becee btrfs: sink iterator parameter to btrfs_ioctl_logical_to_ino | * acc2f40b98 erofs: fix order >= MAX_ORDER warning due to crafted negative i_size | * ca9f27448a drm/i915/gt: Use i915_vm_put on ppgtt_create error paths | * c2f2972889 drm/i915: Create a dummy object for gen6 ppgtt | * 918002bdbe arm64: mte: Avoid setting PG_mte_tagged if no tags cleared or restored * | d753150bdc Revert "serial: Add rs485_supported to uart_port" * | 8ccd9528be Revert "serial: fsl_lpuart: Fill in rs485_supported" * | a924bb92c6 Merge 5.15.81 into android13-5.15-lts |\| | * e4a7232c91 Linux 5.15.81 | * 5c5c563a08 cifs: fix missed refcounting of ipc tcon | * ee2d04f23b drm/i915: fix TLB invalidation for Gen12 video and compute engines | * bef834845d drm/amdgpu: always register an MMU notifier for userptr | * 7901de7aa8 drm/amdgpu: Enable Aldebaran devices to report CU Occupancy | * e7bf1fe538 drm/amd/display: No display after resume from WB/CB | * 5033cba00c drm/amd/dc/dce120: Fix audio register mapping, stop triggering KASAN | * b8dc245909 btrfs: sysfs: normalize the error handling branch in btrfs_init_sysfs() | * 914baca57a btrfs: use kvcalloc in btrfs_get_dev_zone_info | * c1e6d4bfde btrfs: zoned: fix missing endianness conversion in sb_write_pointer | * d88bf6be02 btrfs: free btrfs_path before copying subvol info to userspace | * f218b404fc btrfs: free btrfs_path before copying fspath to userspace | * fea9397101 btrfs: free btrfs_path before copying root refs to userspace | * 7d0c25b5fe genirq: Take the proposed affinity at face value if force==true | * f17657cce0 irqchip/gic-v3: Always trust the managed affinity provided by the core code | * 52a93f2dcf genirq: Always limit the affinity to online CPUs | * 599cf4b845 genirq/msi: Shutdown managed interrupts with unsatifiable affinities | * 7aed1dd5d2 wifi: wilc1000: validate number of channels | * e9de501cf7 wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute | * 143232cb5a wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute | * cd9c486971 wifi: wilc1000: validate pairwise and authentication suite offsets | * f2fb18d429 fuse: lock inode unconditionally in fuse_fallocate() | * bb1c33bdf4 dm integrity: clear the journal on suspend | * 20ad31b09e dm integrity: flush the journal on suspend | * 5ca2110ba5 gpu: host1x: Avoid trying to use GART on Tegra20 | * 97f47617e8 scsi: iscsi: Fix possible memory leak when device_register() failed | * 56ab7f237e net: usb: qmi_wwan: add Telit 0x103a composition | * e2e33f213d tcp: configurable source port perturb table size | * 269928e5c7 platform/x86: ideapad-laptop: Fix interrupt storm on fn-lock toggle on some Yoga laptops | * 17d995dc69 platform/x86: hp-wmi: Ignore Smart Experience App event | * e85bdc7872 zonefs: fix zone report size in __zonefs_io_error() | * 982fcd83fb drm/amdgpu: disable BACO support on more cards | * ea11f8197d platform/x86: acer-wmi: Enable SW_TABLET_MODE on Switch V 10 (SW5-017) | * 09af15e691 platform/x86: asus-wmi: add missing pci_dev_put() in asus_wmi_set_xusb2pr() | * ba040bea9d xen/platform-pci: add missing free_irq() in error path | * 6815b2087d xen-pciback: Allow setting PCI_MSIX_FLAGS_MASKALL too | * 4c13ddb74f ASoC: stm32: dfsdm: manage cb buffers cleanup | * dd82295a23 Input: i8042 - apply probe defer to more ASUS ZenBook models | * e12e121feb Input: soc_button_array - add Acer Switch V 10 to dmi_use_low_level_irq[] | * 9f5c167074 Input: soc_button_array - add use_low_level_irq module parameter | * aaef86eac9 Input: goodix - try resetting the controller when no config is set | * e2223f5fbb serial: 8250: 8250_omap: Avoid RS485 RTS glitch on ->set_termios() | * 4e208294de tools: iio: iio_generic_buffer: Fix read size | * 0d0e2545fa ASoC: Intel: bytcht_es8316: Add quirk for the Nanote UMPC-01 | * e394cf9d7a Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode | * 96b5d11777 x86/ioremap: Fix page aligned size calculation in __ioremap_caller() | * d048f74815 x86/pm: Add enumeration check before spec MSRs save/restore setup | * 070e3560bf x86/tsx: Add a feature bit for TSX control MSR support | * 1430c98ebb KVM: x86: remove exit_int_info warning in svm_handle_exit | * 27550a5930 KVM: x86: add kvm_leave_nested | * 3e87cb0caa KVM: x86: nSVM: harden svm_free_nested against freeing vmcb02 while still in use | * 6425c590d0 KVM: x86: forcibly leave nested mode on vCPU reset | * f42ebf972a KVM: x86: nSVM: leave nested mode on vCPU free | * 7b3c9405b2 mm: vmscan: fix extreme overreclaim and swap floods | * feb2eda5e1 gcov: clang: fix the buffer overflow issue | * ea6aa25c9a nilfs2: fix nilfs_sufile_mark_dirty() not set segment usage as dirty | * 9d97a9fbfc usb: dwc3: gadget: Clear ep descriptor last | * 02632ea4df usb: dwc3: gadget: Return -ESHUTDOWN on ep disable | * 765ca3e63f usb: dwc3: gadget: conditionally remove requests | * 7945cbf866 bus: ixp4xx: Don't touch bit 7 on IXP42x | * 39c039018a iio: core: Fix entry not deleted when iio_register_sw_trigger_type() fails | * 0791a5ddba iio: light: apds9960: fix wrong register for gesture gain | * f0158b9bfc arm64: dts: rockchip: lower rk3399-puma-haikou SD controller clock frequency | * 277d19ec28 ext4: fix use-after-free in ext4_ext_shift_extents | * c9d133100b usb: cdnsp: fix issue with ZLP - added TD_SIZE = 1 | * c2ad434cd4 usb: cdnsp: Fix issue with Clear Feature Halt Endpoint | * 1d91c64887 usb: dwc3: exynos: Fix remove() function | * 0a216625c3 KVM: arm64: pkvm: Fixup boot mode to reflect that the kernel resumes from EL1 | * f0044a4a31 mmc: sdhci-brcmstb: Fix SDHCI_RESET_ALL for CQHCI | * 8e6940979b mmc: sdhci-brcmstb: Enable Clock Gating to save power | * 24b46bfa96 mmc: sdhci-brcmstb: Re-organize flags | * 227543ccac nios2: add FORCE for vmlinuz.gz | * 6a4ea16a67 init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash | * c4a9046c27 lib/vdso: use "grep -E" instead of "egrep" | * 5fefdceafb s390/crashdump: fix TOD programmable field size | * 592b6fd74a net: thunderx: Fix the ACPI memory leak | * 697eb30a35 octeontx2-af: Fix reference count issue in rvu_sdp_init() | * 6ba1687ea1 octeontx2-pf: Add check for devm_kcalloc | * 26c31e7c73 net: enetc: preserve TX ring priority across reconfiguration | * 0e16bbf616 net: enetc: cache accesses to &priv->si->hw | * 68de40f66a net: enetc: manage ENETC_F_QBV in priv->active_offloads only when enabled | * 5c0858e142 nfc: st-nci: fix incorrect sizing calculations in EVT_TRANSACTION | * e09243fb16 nfc: st-nci: fix memory leaks in EVT_TRANSACTION | * dca20b7a19 nfc: st-nci: fix incorrect validating logic in EVT_TRANSACTION | * 67d638f8ef s390/dasd: fix no record found for raw_track_access | * 88277853cf arcnet: fix potential memory leak in com20020_probe() | * 1d44ec8507 ipv4: Fix error return code in fib_table_insert() | * 918e83c6bf dccp/tcp: Reset saddr on failure after inet6?_hash_connect(). | * 8ce9b1c97f fs: do not update freeing inode i_io_list | * 8db9e60cdf netfilter: flowtable_offload: add missing locking | * c1da3bfca1 netfilter: ipset: restore allowing 64 clashing elements in hash:net,iface | * 606091b2f6 dma-buf: fix racing conflict of dma_heap_add() | * 8af9450bef bnx2x: fix pci device refcount leak in bnx2x_vf_is_pcie_pending() | * 251bcf6cfb regulator: twl6030: re-add TWL6032_SUBCLASS | * 6258a8f913 NFC: nci: fix memory leak in nci_rx_data_packet() | * ffe6021154 net: sched: allow act_ct to be built without NF_NAT | * a05c0f9511 net: sparx5: fix error handling in sparx5_port_open() | * 182ef20f0f sfc: fix potential memleak in __ef100_hard_start_xmit() | * 2da022fac9 net: wwan: iosm: use ACPI_FREE() but not kfree() in ipc_pcie_read_bios_cfg() | * a48b345b87 xfrm: Fix ignored return value in xfrm6_init() | * 19989e1635 xfrm: Fix oops in __xfrm_state_delete() | * 46d450067f tipc: check skb_linearize() return value in tipc_disc_rcv() | * 33fb115a76 tipc: add an extra conn_get in tipc_conn_alloc | * 4ae907c45f tipc: set con sock in tipc_conn_alloc | * ef866d9ea9 net/mlx5: Fix handling of entry refcount when command is not issued to FW | * 3101318939 net/mlx5: Fix FW tracer timestamp calculation | * 1eaabb5bbb net/mlx5: Do not query pci info while pci disabled | * 8180099b2a netfilter: ipset: regression in ip_set_hash_ip.c | * 448b627370 Drivers: hv: vmbus: fix possible memory leak in vmbus_device_register() | * 082c31cb99 Drivers: hv: vmbus: fix double free in the error path of vmbus_add_channel_work() | * 7fdd9daa5b macsec: Fix invalid error code set | * e8fb93a079 nfp: add port from netdev validation for EEPROM access | * e44e424ed9 nfp: fill splittable of devlink_port_attrs correctly | * 527046c138 net: pch_gbe: fix pci device refcount leak while module exiting | * f77c84dd5b octeontx2-af: debugsfs: fix pci device refcount leak | * cd581ffd8d net/qla3xxx: fix potential memleak in ql3xxx_send() | * a8976074e2 net: mvpp2: fix possible invalid pointer dereference | * 3a4cc56cd1 net/mlx4: Check retval of mlx4_bitmap_init | * c368220e17 net: ethernet: mtk_eth_soc: fix error handling in mtk_open() | * d9729437b2 ARM: dts: imx6q-prti6q: Fix ref/tcxo-clock-frequency properties | * 1c0b6a97c4 ARM: mxs: fix memory leak in mxs_machine_init() | * ecff08f3c4 iavf: Fix race condition between iavf_shutdown and iavf_remove | * 31147d4e90 iavf: Do not restart Tx queues after reset task failure | * 232942b26c iavf: Fix a crash during reset task | * 0600615d01 netfilter: nf_tables: do not set up extensions for end interval | * 60387731e6 netfilter: conntrack: Fix data-races around ct mark | * ee3ccd1abb 9p/fd: fix issue of list_del corruption in p9_fd_cancel() | * 131c2eeabc net: pch_gbe: fix potential memleak in pch_gbe_tx_queue() | * f58df483ff nfc/nci: fix race with opening and closing | * da22d7410a net: dsa: sja1105: disallow C45 transactions on the BASE-TX MDIO bus | * 38fe0988bd rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975] | * d92151b465 rxrpc: Use refcount_t rather than atomic_t | * 3c33e41fa5 rxrpc: Allow list of in-use local UDP endpoints to be viewed in /proc | * 46cefa2689 net: liquidio: simplify if expression | * 95500ee0b3 selftests: mptcp: fix mibit vs mbit mix up | * f8c4da198e selftests: mptcp: more stable simult_flows tests | * 1c0efab08c ARM: dts: at91: sam9g20ek: enable udc vbus gpio pinctrl | * ade662f3f2 tee: optee: fix possible memory leak in optee_register_device() | * d1dd119134 bus: sunxi-rsb: Support atomic transfers | * b1ed61e706 bus: sunxi-rsb: Remove the shutdown callback | * 61a41d1abc regulator: core: fix UAF in destroy_regulator() | * a85c0db3f5 spi: dw-dma: decrease reference count in dw_spi_dma_init_mfld() | * d9f9b3255b regulator: core: fix kobject release warning and memory leak in regulator_register() | * bd419c7c68 ASoC: max98373: Add checks for devm_kcalloc | * f9bc4a18e7 scsi: storvsc: Fix handling of srb_status and capacity change events | * c2153fe2d0 x86/hyperv: Restore VP assist page after cpu offlining/onlining | * b2ddd76237 ASoC: soc-pcm: Don't zero TDM masks in __soc_pcm_open() | * dd62cb7e6f ASoC: sgtl5000: Reset the CHIP_CLK_CTRL reg on remove | * d80ffd4823 ASoC: hdac_hda: fix hda pcm buffer overflow issue | * 10bee7eb2a ARM: dts: am335x-pcm-953: Define fixed regulators in root node | * 8fe533c0f9 af_key: Fix send_acquire race with pfkey_register | * 0c69a4658e xfrm: replay: Fix ESN wrap around for GSO | * ecc6ce4fdf xfrm: fix "disable_policy" on ipv4 early demux | * 5a792c1d4d MIPS: pic32: treat port as signed integer | * 144452b421 RISC-V: vdso: Do not add missing symbols to version section in linker script | * 799970b8cc ALSA: usb-audio: add quirk to fix Hamedal C20 disconnect issue | * 38b09dc14f Revert "drm/amdgpu: Revert "drm/amdgpu: getting fan speed pwm for vega10 properly"" | * 44d50fccf8 nvmet: fix memory leak in nvmet_subsys_attr_model_store_locked | * 5adc12d9e2 arm64/syscall: Include asm/ptrace.h in syscall_wrapper header. | * 1340f02773 block, bfq: fix null pointer dereference in bfq_bio_bfqg() | * 86d4dca4a6 drm: panel-orientation-quirks: Add quirk for Acer Switch V 10 (SW5-017) | * b90e6234f5 scsi: scsi_debug: Make the READ CAPACITY response compliant with ZBC | * cdbba6a4de scsi: ibmvfc: Avoid path failures during live migration | * 6e8124a151 platform/x86/intel/hid: Add some ACPI device IDs | * 32735e24f4 platform/x86/intel/pmt: Sapphire Rapids PMT errata fix | * 83a6823016 platform/x86: touchscreen_dmi: Add info for the RCA Cambio W101 v2 2-in-1 | * f707986a14 platform/x86: ideapad-laptop: Disable touchpad_switch | * 5e38740ae5 Revert "net: macsec: report real_dev features when HW offloading is enabled" | * 26b72202ee selftests/bpf: Add verifier test for release_reference() | * 8395e3f98c spi: stm32: fix stm32_spi_prepare_mbr() that halves spi clk for every run | * d04722f280 wifi: ath11k: Fix QCN9074 firmware boot on x86 | * 9cc96a20a9 wifi: mac80211: Fix ack frame idr leak when mesh has no route | * 86f90014e7 wifi: airo: do not assign -1 to unsigned char | * f5558fbda0 audit: fix undefined behavior in bit shift for AUDIT_BIT | * af5de982ff riscv: dts: sifive unleashed: Add PWM controlled LEDs | * ee34a19dbe wifi: mac80211_hwsim: fix debugfs attribute ps with rc table support | * 3513785dc1 wifi: mac80211: fix memory free error when registering wiphy fail | * 855485d31e ceph: fix NULL pointer dereference for req->r_session | * 729c9ad294 ceph: Use kcalloc for allocating multiple elements | * d276fb4a7e binder: validate alloc->mm in ->mmap() handler | * 5277e3d633 x86/sgx: Add overflow check in sgx_validate_offset_length() | * b5a838ba47 x86/sgx: Create utility to validate user provided offset and length | * 2f6e2de3a5 ceph: avoid putting the realm twice when decoding snaps fails | * 8bef55d793 ceph: do not update snapshot context when there is no new snapshot | * cdee3136c9 iio: pressure: ms5611: fixed value compensation bug | * 5d6696e79d iio: ms5611: Simplify IO callback parameters | * f0ee88e83c nvme-pci: add NVME_QUIRK_BOGUS_NID for Netac NV7000 | * a61716cd24 nvme-pci: disable write zeroes on various Kingston SSD | * 19b60f3363 nvme-pci: disable namespace identifiers for the MAXIO MAP1001 | * d537e19306 nvme-pci: add NVME_QUIRK_BOGUS_NID for Micron Nitro | * af03ce894c nvme: add a bogus subsystem NQN quirk for Micron MTFDKBA2T0TFH | * c6803faa6a drm/display: Don't assume dual mode adaptors support i2c sub-addressing | * d2284fe43c ata: libata-core: do not issue non-internal commands once EH is pending | * e09583e83e ata: libata-scsi: simplify __ata_scsi_queuecmd() | * a9059e338f cifs: Fix connections leak when tlink setup failed | * 81d583baa5 cifs: support nested dfs links over reconnect | * dbc0ea91be cifs: split out dfs code from cifs_reconnect() | * b3ce844d23 cifs: introduce new helper for cifs_reconnect() | * 2ea600b598 sctp: clear out_curr if all frag chunks of current msg are pruned | * 1f9f346fbb sctp: remove the unnecessary sinfo_stream check in sctp_prsctp_prune_unsent | * e8915faa9f tty: serial: fsl_lpuart: don't break the on-going transfer when global reset | * bd19013935 serial: fsl_lpuart: Fill in rs485_supported | * 87c81c19cd serial: Add rs485_supported to uart_port | * c08f4ea79f ASoC: fsl_asrc fsl_esai fsl_sai: allow CONFIG_PM=N | * d1e4288d2a ASoC: fsl_sai: use local device pointer * | e66b45d527 Merge branch 'android13-5.15' into android13-5.15-lts * | 72d681a01d Revert "net: use struct_group to copy ip/ipv6 header addresses" * | c46ed1b2d7 Merge 5.15.80 into android13-5.15-lts |\| | * 71e496bd33 Linux 5.15.80 | * b63ddb3ba6 ntfs: check overflow when iterating ATTR_RECORDs | * ab6a1bb17e ntfs: fix out-of-bounds read in ntfs_attr_find() | * 5330c423b8 ntfs: fix use-after-free in ntfs_attr_find() | * 43bbadb7e4 net/9p: use a dedicated spinlock for trans_fd | * 9357fca9da mm: fs: initialize fsdata passed to write_begin/write_end interface | * b334ab4c33 wifi: wext: use flex array destination for memcpy() | * 0e07032b4b 9p/trans_fd: always use O_NONBLOCK read/write | * 7c7b7476b5 gfs2: Switch from strlcpy to strscpy | * 28275a7c84 gfs2: Check sb_bsize_shift after reading superblock | * a4f1a01b2e 9p: trans_fd/p9_conn_cancel: drop client lock earlier | * f7b0e95071 kcm: close race conditions on sk_receive_queue | * 27d706b0d3 kcm: avoid potential race in kcm_tx_work | * b49026d9c8 tcp: cdg: allow tcp_cdg_release() to be called multiple times | * e41cbf98df macvlan: enforce a consistent minimal mtu | * d5f7f6e63f Input: i8042 - fix leaking of platform device on module removal | * c49cc2c059 kprobes: Skip clearing aggrprobe's post_handler in kprobe-on-ftrace case | * 71beab7119 scsi: scsi_debug: Fix possible UAF in sdebug_add_host_helper() | * a636772988 scsi: target: tcm_loop: Fix possible name leak in tcm_loop_setup_hba_bus() | * cb7893c85e net: use struct_group to copy ip/ipv6 header addresses | * 9b8c0c88f4 tracing: Fix warning on variable 'struct trace_array' | * 73cf0ff9a3 ring-buffer: Include dropped pages in counting dirty patches | * 35c60b4e8c perf: Improve missing SIGTRAP checking | * 2ac6276864 serial: 8250_lpss: Use 16B DMA burst with Elkhart Lake | * b1a27b2aad nvme: ensure subsystem reset is single threaded | * bccece3c33 nvme: restrict management ioctls to admin | * 8cddb0d96b perf/x86/intel/pt: Fix sampling using single range output | * 8e2f33c598 misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() | * 9a72a46cb0 docs: update mediator contact information in CoC doc | * a99a547658 mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put() | * 4a1b6f7839 mmc: sdhci-pci-o2micro: fix card detect fail issue caused by CD# debounce timeout | * fd285d4215 mmc: core: properly select voltage range without power cycle | * 8a9bae5f1b firmware: coreboot: Register bus in module init | * 052d0e79ef iommu/vt-d: Set SRE bit only when hardware has SRS cap | * c31a792a82 iommu/vt-d: Preset Access bit for IOVA in FL non-leaf paging entries | * 11edbdee43 scsi: zfcp: Fix double free of FSF request when qdio send fails | * fdf87b5b30 net: phy: marvell: add sleep time after enabling the loopback bit | * 9648d760ed maccess: Fix writing offset in case of fault in strncpy_from_kernel_nofault() | * fdd57c20d4 Input: iforce - invert valid length check when fetching device IDs | * 0cafb719be serial: 8250_lpss: Configure DMA also w/o DMA filter | * 59f6596697 serial: 8250: Flush DMA Rx on RLSI | * 118b52c2ae serial: 8250: Fall back to non-DMA Rx if IIR_RDI occurs | * 6ffce7a92e dm ioctl: fix misbehavior if list_versions races with module loading | * 2b104973f7 iio: pressure: ms5611: changed hardcoded SPI speed to value limited | * 1678d4abb2 iio: adc: mp2629: fix potential array out of bound access | * bd22c232ea iio: adc: mp2629: fix wrong comparison of channel | * 656f670613 iio: trigger: sysfs: fix possible memory leak in iio_sysfs_trig_init() | * 1bf8c0aff8 iio: adc: at91_adc: fix possible memory leak in at91_adc_allocate_trigger() | * afc0aea702 usb: typec: mux: Enter safe mode only when pins need to be reconfigured | * 8236628a54 usb: cdns3: host: fix endless superspeed hub port reset | * ead83b0db8 usb: chipidea: fix deadlock in ci_otg_del_timer | * cc9e6d8c55 usb: add NO_LPM quirk for Realforce 87U Keyboard | * 70eca1d261 USB: serial: option: add Fibocom FM160 0x0111 composition | * 1b6a54885c USB: serial: option: add u-blox LARA-L6 modem | * b0467d0059 USB: serial: option: add u-blox LARA-R6 00B modem | * 95688a8a57 USB: serial: option: remove old LARA-R6 PID | * 53dee78ea3 USB: serial: option: add Sierra Wireless EM9191 | * e7764e88e6 USB: bcma: Make GPIO explicitly optional | * a190a83db2 speakup: fix a segfault caused by switching consoles | * b3c6edbee4 slimbus: stream: correct presence rate frequencies | * 6b35ac8315 slimbus: qcom-ngd: Fix build error when CONFIG_SLIM_QCOM_NGD_CTRL=y && CONFIG_QCOM_RPROC_COMMON=m | * 0f847462fe Revert "usb: dwc3: disable USB core PHY management" | * 23ad214a86 ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book Pro 360 | * a36b505749 ALSA: hda/realtek: fix speakers for Samsung Galaxy Book Pro | * 02b94885b2 ALSA: usb-audio: Drop snd_BUG_ON() from snd_usbmidi_output_open() | * 7176d6f3ad drm/amd/display: Add HUBP surface flip interrupt handler | * e57daa7503 tracing: kprobe: Fix potential null-ptr-deref on trace_array in kprobe_event_gen_test_exit() | * 3a41c0f2a5 tracing: kprobe: Fix potential null-ptr-deref on trace_event_file in kprobe_event_gen_test_exit() | * 7291dec4f2 tracing: Fix race where eprobes can be called before the event | * 6517b97134 tracing: Fix wild-memory-access in register_synth_event() | * 07ba4f0603 tracing: Fix memory leak in test_gen_synth_cmd() and test_empty_synth_event() | * 8b318f3032 tracing/ring-buffer: Have polling block on watermark | * 2c21ee020c tracing: Fix memory leak in tracing_read_pipe() | * 00f74b1a98 ring_buffer: Do not deactivate non-existant pages | * 1bea037a1a ftrace: Fix null pointer dereference in ftrace_add_mod() | * fadfcf39fb ftrace: Optimize the allocation for mcount entries | * 5c5f264289 ftrace: Fix the possible incorrect kernel message | * 2ab2494162 cifs: add check for returning value of SMB2_set_info_init | * 5783abda58 net: thunderbolt: Fix error handling in tbnet_init() | * 80e590aeb1 net: microchip: sparx5: Fix potential null-ptr-deref in sparx_stats_init() and sparx5_start() | * 4a55aec142 cifs: Fix wrong return value checking when GETFLAGS | * c8baf1fc24 net/x25: Fix skb leak in x25_lapb_receive_frame() | * af4b57fa6b net: ag71xx: call phylink_disconnect_phy if ag71xx_hw_enable() fail in ag71xx_open() | * 61404a182e cifs: add check for returning value of SMB2_close_init | * d3233f4bf3 platform/surface: aggregator: Do not check for repeated unsequenced packets | * 6969171403 platform/x86/intel: pmc: Don't unconditionally attach Intel PMC when virtualized | * 7d93417d59 drbd: use after free in drbd_create_device() | * fc16a2c81a bridge: switchdev: Fix memory leaks when changing VLAN protocol | * 3d90a668c4 net: hns3: fix setting incorrect phy link ksettings for firmware in resetting process | * 3f7b2ef8fe net: ena: Fix error handling in ena_init() | * 2540eea1bd net: ionic: Fix error handling in ionic_init_module() | * c08c13cb13 xen/pcpu: fix possible memory leak in register_pcpu() | * 97009f07f2 net: dsa: make dsa_master_ioctl() see through port_hwtstamp_get() shims | * 88da008e5e net: mhi: Fix memory leak in mhi_net_dellink() | * 8f839715d0 bnxt_en: Remove debugfs when pci_register_driver failed | * b88713d92b net: caif: fix double disconnect client in chnl_net_open() | * 6d24034160 net: macvlan: Use built-in RCU list checking | * 596230471d mISDN: fix misuse of put_device() in mISDN_register_device() | * 07a6a8cf17 net: liquidio: release resources when liquidio driver open failed | * 19feb6cf41 soc: imx8m: Enable OCOTP clock before reading the register | * 8c54d706d8 net: stmmac: ensure tx function is not running in stmmac_xdp_release() | * 6219f46c2b net: hinic: Fix error handling in hinic_module_init() | * 7a05e39296 mISDN: fix possible memory leak in mISDN_dsp_element_register() | * 0ee6455c9c net: bgmac: Drop free_netdev() from bgmac_enet_remove() | * 7ff4fa179e bpf: Initialize same number of free nodes for each pcpu_freelist | * 12f178cf05 MIPS: Loongson64: Add WARN_ON on kexec related kmalloc failed | * a4d6e024be MIPS: fix duplicate definitions for exported symbols | * 44142b652a nfp: change eeprom length to max length enumerators | * f23058dc23 ata: libata-transport: fix error handling in ata_tdev_add() | * 67b2193146 ata: libata-transport: fix error handling in ata_tlink_add() | * e7bb1b7a7b ata: libata-transport: fix error handling in ata_tport_add() | * 377ff82c33 ata: libata-transport: fix double ata_host_put() in ata_tport_add() | * 494df0b0ef arm64: dts: imx8mn: Fix NAND controller size-cells | * 7178d568f7 arm64: dts: imx8mm: Fix NAND controller size-cells | * 8ccf18c82a ARM: dts: imx7: Fix NAND controller size-cells | * e884a6c2d4 drm: Fix potential null-ptr-deref in drm_vblank_destroy_worker() | * 07e56de876 drm/drv: Fix potential memory leak in drm_dev_init() | * 45c300613b drm/panel: simple: set bpc field for logic technologies displays | * 779f3f9e0c drm/vc4: kms: Fix IS_ERR() vs NULL check for vc4_kms | * 97e5b508e9 pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map | * 9a77b8557f parport_pc: Avoid FIFO port location truncation | * 5d03c2911c siox: fix possible memory leak in siox_device_add() | * 530e987a02 arm64: Fix bit-shifting UB in the MIDR_CPU_MODEL() macro | * d494449782 bpf: Fix memory leaks in __check_func_call | * 25521fd2e2 block: sed-opal: kmalloc the cmd/resp buffers | * 2f21d653c6 scsi: scsi_transport_sas: Fix error handling in sas_phy_add() | * 7cd28bc410 pinctrl: rockchip: list all pins in a possible mux route for PX30 | * ab79b8dbe2 ASoC: soc-utils: Remove __exit for snd_soc_util_exit() | * eaa8edd865 bpf, test_run: Fix alignment problem in bpf_prog_test_run_skb() | * 33cabe04d2 tty: n_gsm: fix sleep-in-atomic-context bug in gsm_control_send | * ae22294e21 serial: imx: Add missing .thaw_noirq hook | * 26db1cd519 serial: 8250: omap: Flush PM QOS work on remove | * e0db709a58 serial: 8250: omap: Fix unpaired pm_runtime_put_sync() in omap8250_remove() | * 83b6d4d6da serial: 8250_omap: remove wait loop from Errata i202 workaround | * 76db05ab70 serial: 8250: omap: Fix missing PM runtime calls for omap8250_set_mctrl() | * 2aee616a6b ARM: at91: pm: avoid soft resetting AC DLL | * 188546c780 ASoC: tas2764: Fix set_tdm_slot in case of single slot | * 5782896daf ASoC: tas2770: Fix set_tdm_slot in case of single slot | * 34eee4189b ASoC: core: Fix use-after-free in snd_soc_exit() | * aa6f8aecbb ARM: dts: at91: sama7g5: fix signal name of pin PB2 | * 487fff700f spi: stm32: Print summary 'callbacks suppressed' message | * 2cec2f65c1 arm64: dts: qcom: sm8350-hdk: Specify which LDO modes are allowed | * 44dbe66bb3 arm64: dts: qcom: sm8250-xperia-edo: Specify which LDO modes are allowed | * 8b2eae7def arm64: dts: qcom: sm8150-xperia-kumano: Specify which LDO modes are allowed | * c8e76eeea7 arm64: dts: qcom: sa8155p-adp: Specify which LDO modes are allowed | * 30571f28bb hugetlbfs: don't delete error page from pagecache | * 14ddbb83c3 KVM: x86/pmu: Do not speculatively query Intel GP PMCs that don't exist yet | * a9b964ed7c spi: intel: Use correct mask for flash and protected regions | * f4eb68642e mtd: spi-nor: intel-spi: Disable write protection only if asked | * 156d0c823c ASoC: codecs: jz4725b: Fix spelling mistake "Sourc" -> "Source", "Routee" -> "Route" | * 5907ff9f2c x86/cpu: Add several Intel server CPU model numbers | * 41e37d04e3 Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm | * b02a025dd1 btrfs: remove pointless and double ulist frees in error paths of qgroup tests | * 1c366c206f drm/imx: imx-tve: Fix return type of imx_tve_connector_mode_valid | * 1c8ded1b38 i2c: i801: add lis3lv02d's I2C address for Vostro 5568 | * b432581f19 i2c: tegra: Allocate DMA memory for DMA engine | * 7b0ae4c7b9 firmware: arm_scmi: Cleanup the core driver removal callback | * 1a8a2fef27 ACPI: x86: Add another system to quirk list for forcing StorageD3Enable | * 8a03a4a5cf NFSv4: Retry LOCK on OLD_STATEID during delegation return | * 49ca2227c4 btrfs: raid56: properly handle the error when unable to find the missing stripe | * 0f7bd3a2df RDMA/efa: Add EFA 0xefa2 PCI ID | * a42d4363e7 ACPI: scan: Add LATT2021 to acpi_ignore_dep_ids[] | * 004decd41b drm/amd/display: Remove wrong pipe control lock | * 7779efbb99 ASoC: rt1308-sdw: add the default value of some registers | * ef1e4ed858 selftests/intel_pstate: fix build for ARCH=x86_64 | * dfd3cc1ef3 selftests/futex: fix build for clang | * 648467236c ASoC: Intel: sof_sdw: add quirk variant for LAPBC710 NUC15 | * 64ee750c29 ASoC: codecs: jz4725b: fix capture selector naming | * 150b74cd06 ASoC: codecs: jz4725b: use right control for Capture Volume | * 5352d8b315 ASoC: codecs: jz4725b: fix reported volume for Master ctl | * 85134577a7 ASoC: codecs: jz4725b: add missed Line In power control bit | * 5e61dffb16 spi: intel: Fix the offset to get the 64K erase opcode | * c697cb2e66 ASoC: wm8962: Add an event handler for TEMP_HP and TEMP_SPK | * 569085124d ASoC: rt1019: Fix the TDM settings | * 4160a515c7 ASoC: mt6660: Keep the pm_runtime enables before component stuff in mt6660_i2c_probe | * 2963ec4535 ASoC: wm8997: Revert "ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe" | * 30a2f9479c ASoC: wm5110: Revert "ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe" | * 3bf6da38a2 ASoC: wm5102: Revert "ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe" | * 94fa250ea5 mm: shmem: don't truncate page if memory failure happens | * 003fa19591 mm: hwpoison: handle non-anonymous THP correctly | * a62b1bc603 mm: hwpoison: refactor refcount check handling * | 49ca4a5978 Revert "bpf, sockmap: Fix sk->sk_forward_alloc warn_on in sk_stream_kill_queues" * | 6fa2a43acd Revert "ALSA: usb-audio: Yet more regression for for the delayed card registration" * | ac2a7a141f Merge 5.15.79 into android13-5.15-lts |/ * 3df0eeae4d Linux 5.15.79 * 599b24eedf x86/cpu: Restore AMD's DE_CFG MSR after resume * 9132fa043f net: tun: call napi_schedule_prep() to ensure we own a napi * 1dea25e25a drm/amdkfd: Migrate in CPU page fault use current mm * a1c303fbd4 marvell: octeontx2: build error: unknown type name 'u64' * d948b22834 dmaengine: at_hdmac: Check return code of dma_async_device_register * c556ecf32a dmaengine: at_hdmac: Fix impossible condition * 8a941ff34e dmaengine: at_hdmac: Don't allow CPU to reorder channel enable * 53831f7a13 dmaengine: at_hdmac: Fix completion of unissued descriptor in case of errors * 14f5462e4a dmaengine: at_hdmac: Fix descriptor handling when issuing it to hardware * 5482403228 dmaengine: at_hdmac: Fix concurrency over the active list * 82ca19414f dmaengine: at_hdmac: Free the memset buf without holding the chan lock * 8fd36e069d dmaengine: at_hdmac: Fix concurrency over descriptor * 1ee012d452 dmaengine: at_hdmac: Fix concurrency problems by removing atc_complete_all() * 90c1b07406 dmaengine: at_hdmac: Protect atchan->status with the channel lock * b5ee1fe06a dmaengine: at_hdmac: Do not call the complete callback on device_terminate_all * 9bbf5df0fc dmaengine: at_hdmac: Fix premature completion of desc in issue_pending * f7d1aaa903 dmaengine: at_hdmac: Start transfer for cyclic channels in issue_pending * e9777b4efc dmaengine: at_hdmac: Don't start transactions at tx_submit level * 4e28674a0e dmaengine: at_hdmac: Fix at_lli struct definition * 49eba53137 cert host tools: Stop complaining about deprecated OpenSSL functions * 69e86c6268 can: j1939: j1939_send_one(): fix missing CAN header initialization * 81fc8f90b8 mm/shmem: use page_mapping() to detect page cache for uffd continue * e91451af11 mm/memremap.c: map FS_DAX device memory as decrypted * 48998c1773 mm/damon/dbgfs: check if rm_contexts input is for a real context * c736ed8541 udf: Fix a slab-out-of-bounds write bug in udf_find_entry() * 2e87eddf57 mms: sdhci-esdhc-imx: Fix SDHCI_RESET_ALL for CQHCI * 91c38504e5 btrfs: zoned: initialize device's zone info for seeding * 432c30ba3f btrfs: selftests: fix wrong error check in btrfs_free_dummy_root() * c9fe4719c6 btrfs: fix match incorrectly in dev_args_match_device * f96fd36936 wifi: ath11k: avoid deadlock during regulatory update in ath11k_regd_update() * 8e2b576caf platform/x86: hp_wmi: Fix rfkill causing soft blocked wifi * cb3ab0e1e0 drm/amdgpu: disable BACO on special BEIGE_GOBY card * dc066a7850 drm/i915/dmabuf: fix sg_table handling in map_dma_buf * afbd118838 nilfs2: fix use-after-free bug of ns_writer on remount * abc082aac0 nilfs2: fix deadlock in nilfs_count_free_blocks() * 589da22881 ata: libata-scsi: fix SYNCHRONIZE CACHE (16) command failure * 51ae4579a5 vmlinux.lds.h: Fix placement of '.data..decrypted' section * 1f8e08ab32 ALSA: usb-audio: Add DSD support for Accuphase DAC-60 * c2451f62b2 ALSA: usb-audio: Add quirk entry for M-Audio Micro * 031d1480a0 ALSA: usb-audio: Yet more regression for for the delayed card registration * 574f51e4aa ALSA: hda/realtek: Add Positivo C6300 model quirk * 7140d7aaf9 ALSA: hda: fix potential memleak in 'add_widget_node' * f6d7a487aa ALSA: hda/ca0132: add quirk for EVGA Z390 DARK * 1ccd55b390 ALSA: hda/hdmi - enable runtime pm for more AMD display audio * 29100c6742 mmc: sdhci-esdhc-imx: use the correct host caps for MMC_CAP_8_BIT_DATA * 3dce99e2eb mmc: sdhci-tegra: Fix SDHCI_RESET_ALL for CQHCI * 9d6bd33e6a mmc: sdhci_am654: Fix SDHCI_RESET_ALL for CQHCI * ad01f16ca9 mmc: sdhci-of-arasan: Fix SDHCI_RESET_ALL for CQHCI * 1aa78c1d01 mmc: cqhci: Provide helper for resetting both SDHCI and CQHCI * c198524a99 MIPS: jump_label: Fix compat branch range check * 9713ceffa4 arm64: efi: Fix handling of misaligned runtime regions and drop warning * 518e49f059 riscv: fix reserved memory setup * d07c3d7491 riscv: vdso: fix build with llvm * cc36c7fa5d riscv: process: fix kernel info leakage * a8d67367ab net: macvlan: fix memory leaks of macvlan_common_newlink * 7b194dd32b ethernet: tundra: free irq when alloc ring failed in tsi108_open() * 7de10342fe net: mv643xx_eth: disable napi when init rxq or txq failed in mv643xx_eth_open() * 88e1dd2d92 ethernet: s2io: disable napi when start nic failed in s2io_card_up() * 3652f1f8d3 net: atlantic: macsec: clear encryption keys from the stack * fca3b0a1fd net: phy: mscc: macsec: clear encryption keys when freeing a flow * 60a0af8813 stmmac: dwmac-loongson: fix missing of_node_put() while module exiting * ee4a9bd2c7 stmmac: dwmac-loongson: fix missing pci_disable_device() in loongson_dwmac_probe() * 4a8770eebc stmmac: dwmac-loongson: fix missing pci_disable_msi() while module exiting * 83196d8dc5 cxgb4vf: shut down the adapter when t4vf_update_port_info() failed in cxgb4vf_open() * 49d8a6e24a mctp: Fix an error handling path in mctp_init() * 29961d2332 stmmac: intel: Update PCH PTP clock rate from 200MHz to 204.8MHz * 8604bebc5c stmmac: intel: Enable 2.5Gbps for Intel AlderLake-S * 7dec6dae2b net: cxgb3_main: disable napi when bind qsets failed in cxgb_up() * 960f9d30de net: cpsw: disable napi in cpsw_ndo_open() * 1360778fdb net/mlx5e: E-Switch, Fix comparing termination table instance * f13e9ebd29 net/mlx5: Allow async trigger completion execution on single CPU systems * 48b73b46a5 net/mlx5: Bridge, verify LAG state when adding bond to bridge * 13b1ea861e net: wwan: iosm: fix memory leak in ipc_pcie_read_bios_cfg * 7e4dcacb4d net: nixge: disable napi when enable interrupts failed in nixge_open() * 409731df63 net: marvell: prestera: fix memory leak in prestera_rxtx_switch_init() * 77ff31cba9 netfilter: Cleanup nft_net->module_list from nf_tables_exit_net() * e62cb1c093 netfilter: nfnetlink: fix potential dead lock in nfnetlink_rcv_msg() * 0bd20318da perf tools: Add the include/perf/ directory to .gitignore * a733671e38 perf stat: Fix printing os->prefix in CSV metrics output * c36e9e2c4a drivers: net: xgene: disable napi when register irq failed in xgene_enet_open() * 4689bd3a1b net: lapbether: fix issue of invalid opcode in lapbeth_open() * 1dd27541aa dmaengine: ti: k3-udma-glue: fix memory leak when register device fail * 992e966caf dmaengine: mv_xor_v2: Fix a resource leak in mv_xor_v2_remove() * 9766af75ba dmaengine: pxa_dma: use platform_get_irq_optional * 301caa0609 tipc: fix the msg->req tlv len check in tipc_nl_compat_name_table_dump_header * 6a264203db net: broadcom: Fix BCMGENET Kconfig * e7871b9a21 net: stmmac: dwmac-meson8b: fix meson8b_devm_clk_prepare_enable() * 261178a1c2 can: af_can: fix NULL pointer dereference in can_rx_register() * 2acb2779b1 ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network * 13ecaa6832 tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent * bc79cb9fb0 drm/vc4: Fix missing platform_unregister_drivers() call in vc4_drm_register() * 2845bc9070 net: wwan: mhi: fix memory leak in mhi_mbim_dellink * 2ce2348c28 net: wwan: iosm: fix memory leak in ipc_wwan_dellink * 7b6bc50f65 hamradio: fix issue of dev reference count leakage in bpq_device_event() * f59adebb8c net: lapbether: fix issue of dev reference count leakage in lapbeth_device_event() * 119407dc32 KVM: s390: pv: don't allow userspace to set the clock under PV * 500bcd3a99 phy: ralink: mt7621-pci: add sentinel to quirks table * 151dc8087b capabilities: fix undefined behavior in bit shift for CAP_TO_MASK * 435c7ddfd5 net: fman: Unregister ethernet device on removal * 3a504d6d96 bnxt_en: fix potentially incorrect return value for ndo_rx_flow_steer * ac257c43fa bnxt_en: Fix possible crash in bnxt_hwrm_set_coal() * d7569302a7 net: tun: Fix memory leaks of napi_get_frags * 430d1f4964 octeontx2-pf: NIX TX overwrites SQ_CTX_HW_S[SQ_INT] * ec0db81883 octeontx2-pf: Use hardware register for CQE count * b89a0d8859 macsec: clear encryption keys from the stack after setting up offload * eeba7f07a0 macsec: fix detection of RXSCs when toggling offloading * 3070a880eb macsec: fix secy->n_rx_sc accounting * e957555a36 macsec: delete new rxsc when offload fails * ad25a115f5 net: gso: fix panic on frag_list with mixed head alloc types * 466ce46f25 bpf: Fix wrong reg type conversion in release_reference() * 35d8130f2a bpf: Add helper macro bpf_for_each_reg_in_vstate * 61274498fb bpf, sock_map: Move cancel_work_sync() out of sock lock * 32b5dd03be bpf: Fix sockmap calling sleepable function in teardown path * e991558189 bpf, sockmap: Fix sk->sk_forward_alloc warn_on in sk_stream_kill_queues * 5ad95d7134 HID: hyperv: fix possible memory leak in mousevsc_probe() * 6dcdd1b68b bpftool: Fix NULL pointer dereference when pin {PROG, MAP, LINK} without FILE * 2fc902245c wifi: mac80211: Set TWT Information Frame Disabled bit as 1 * 95adbd2ac8 bpf, sockmap: Fix the sk->sk_forward_alloc warning of sk_stream_kill_queues * 06615967d4 bpf, verifier: Fix memory leak in array reallocation for stack state * 4335a82c4f soundwire: qcom: check for outanding writes before doing a read * ae4dad2e53 soundwire: qcom: reinit broadcast completion * 38c9fa2cc6 wifi: cfg80211: fix memory leak in query_regdb_file() * 2c6ba0a787 wifi: cfg80211: silence a sparse RCU warning * 921738c280 phy: stm32: fix an error code in probe * fa722006f7 hwspinlock: qcom: correct MMIO max register for newer SoCs * 3c1bb6187e drm/amdkfd: Fix NULL pointer dereference in svm_migrate_to_ram() * b1f8522771 drm/amdkfd: handle CPU fault on COW mapping * 36770c045a drm/amdkfd: avoid recursive lock in migrations back to RAM * 93a5de7e88 fuse: fix readdir cache race * 1920cf9454 thunderbolt: Add DP OUT resource when DP tunnel is discovered * 47dbf24969 thunderbolt: Tear down existing tunnels when resuming from hibernate And update the .xml file with the new symbol that we are tracking and the abi preservation fix: 1 function symbol(s) added 'void __dev_kfree_skb_irq(struct sk_buff *, enum skb_free_reason)' type 'struct sdhci_host' changed member 'union { struct { u8 reinit_uhs; u8 reserve01; u8 drv_type; u16 reserve02; u32 reserve03; }; struct { u64 android_kabi_reserved1; }; union { }; }' was added member 'u64 android_kabi_reserved1' was removed Change-Id: If4a059230a137dee54298fff61ec87306bf96b0f Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-03-24 08:44:06 +00:00
Aloka Dixit	6bab8a4002	BACKPORT: wifi: cfg80211: include puncturing bitmap in channel switch events ... Add puncturing bitmap in channel switch notifications and corresponding trace functions. Signed-off-by: Aloka Dixit <quic_alokad@quicinc.com> Link: https://lore.kernel.org/r/20230131001227.25014-4-quic_alokad@quicinc.com [fix qtnfmac] Signed-off-by: Johannes Berg <johannes.berg@intel.com> Bug: 272227555 Change-Id: I6e5c3ba2be2f1667533918d467fb3713f1d29362 (cherry picked from commit b345f0637c0042f9e6b78378a32256d90f485774) [vjakkam: resolve conflicts in mac80211 files] Signed-off-by: Shivani Baranwal <quic_shivbara@quicinc.com> Signed-off-by: Veerendranath Jakkam <quic_vjakkam@quicinc.com>	2023-03-23 09:17:28 +00:00
Vinayak Yadawad	83e77c3183	BACKPORT: cfg80211: Update Transition Disable policy during port authorization ... In case of 4way handshake offload, transition disable policy updated by the AP during EAPOL 3/4 is not updated to the upper layer. This results in mismatch between transition disable policy between the upper layer and the driver. This patch addresses this issue by updating transition disable policy as part of port authorization indication. Signed-off-by: Vinayak Yadawad <vinayak.yadawad@broadcom.com> Signed-off-by: Johannes Berg <johannes.berg@intel.com> Bug: 272227555 Change-Id: Iac5d22a2c3999c7bdddc3a1f683fef82ed8ff918 (cherry picked from commit 0ff57171d6d225558c81a69439d5323e35b40549) [shivbara: replace reserved UAPI attribute with corresponding upstream attribute] Signed-off-by: Shivani Baranwal <quic_shivbara@quicinc.com>	2023-03-14 06:27:21 +00:00
Veerendranath Jakkam	fab4d02938	UPSTREAM: wifi: cfg80211: Extend cfg80211_update_owe_info_event() for MLD AP ... Add support to offload OWE processing to user space for MLD AP when driver's SME in use. Add new parameters in struct cfg80211_update_owe_info to provide below information in cfg80211_update_owe_info_event() call: - MLO link ID of the AP, with which station requested (re)association. This is applicable for both MLO and non-MLO station connections when the AP affiliated with an MLD. - Station's MLD address if the connection is MLO capable. Signed-off-by: Veerendranath Jakkam <quic_vjakkam@quicinc.com> Link: https://lore.kernel.org/r/20230126143256.960563-3-quic_vjakkam@quicinc.com [reformat the trace event macro] Signed-off-by: Johannes Berg <johannes.berg@intel.com> Bug: 270356419 Change-Id: I7588847534d424b953ec160a5932886edb2607f1 (cherry picked from commit 8bb588d975019748ebdab9448e9a274b7463c13b) Signed-off-by: Veerendranath Jakkam <quic_vjakkam@quicinc.com>	2023-02-28 14:35:03 +00:00
Greg Kroah-Hartman	5448b2fda8	Merge 5.15.94 into android13-5.15-lts ... Changes in 5.15.94 mm/migration: return errno when isolate_huge_page failed migrate: hugetlb: check for hugetlb shared PMD in node migration btrfs: limit device extents to the device size btrfs: zlib: zero-initialize zlib workspace ALSA: hda/realtek: Add Positivo N14KP6-TG ALSA: emux: Avoid potential array out-of-bound in snd_emux_xg_control() ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book2 Pro 360 ALSA: hda/realtek: Enable mute/micmute LEDs on HP Elitebook, 645 G9 tracing: Fix poll() and select() do not work on per_cpu trace_pipe and trace_pipe_raw of/address: Return an error when no valid dma-ranges are found can: j1939: do not wait 250 ms if the same addr was already claimed xfrm: compat: change expression for switch in xfrm_xlate64 IB/hfi1: Restore allocated resources on failed copyout xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr() IB/IPoIB: Fix legacy IPoIB due to wrong number of queues RDMA/irdma: Fix potential NULL-ptr-dereference RDMA/usnic: use iommu_map_atomic() under spin_lock() xfrm: fix bug with DSCP copy to v6 from v4 tunnel net: phylink: move phy_device_free() to correctly release phy device bonding: fix error checking in bond_debug_reregister() net: phy: meson-gxl: use MMD access dummy stubs for GXL, internal PHY ionic: clean interrupt before enabling queue to avoid credit race uapi: add missing ip/ipv6 header dependencies for linux/stddef.h ice: Do not use WQ_MEM_RECLAIM flag for workqueue net: dsa: mt7530: don't change PVC_EG_TAG when CPU port becomes VLAN-aware net: mscc: ocelot: fix VCAP filters not matching on MAC with "protocol 802.1Q" net/mlx5e: Move repeating clear_bit in mlx5e_rx_reporter_err_rq_cqe_recover net/mlx5e: Introduce the mlx5e_flush_rq function net/mlx5e: Update rx ring hw mtu upon each rx-fcs flag change net/mlx5: Bridge, fix ageing of peer FDB entries net/mlx5e: IPoIB, Show unknown speed instead of error net/mlx5: fw_tracer, Clear load bit when freeing string DBs buffers net/mlx5: fw_tracer, Zero consumer index when reloading the tracer net/mlx5: Serialize module cleanup with reload and remove igc: Add ndo_tx_timeout support rds: rds_rm_zerocopy_callback() use list_first_entry() selftests: forwarding: lib: quote the sysctl values ALSA: pci: lx6464es: fix a debug loop riscv: stacktrace: Fix missing the first frame ASoC: topology: Return -ENOMEM on memory allocation failure pinctrl: mediatek: Fix the drive register definition of some Pins pinctrl: aspeed: Fix confusing types in return value pinctrl: single: fix potential NULL dereference spi: dw: Fix wrong FIFO level setting for long xfers pinctrl: intel: Restore the pins that used to be in Direct IRQ mode cifs: Fix use-after-free in rdata->read_into_pages() net: USB: Fix wrong-direction WARNING in plusb.c mptcp: be careful on subflow status propagation on errors btrfs: free device in btrfs_close_devices for a single device filesystem usb: core: add quirk for Alcor Link AK9563 smartcard reader usb: typec: altmodes/displayport: Fix probe pin assign check clk: ingenic: jz4760: Update M/N/OD calculation algorithm ceph: flush cap releases when the session is flushed riscv: Fixup race condition on PG_dcache_clean in flush_icache_pte powerpc/64s/interrupt: Fix interrupt exit race with security mitigation switch rtmutex: Ensure that the top waiter is always woken up arm64: dts: meson-gx: Make mmc host controller interrupts level-sensitive arm64: dts: meson-g12-common: Make mmc host controller interrupts level-sensitive arm64: dts: meson-axg: Make mmc host controller interrupts level-sensitive Fix page corruption caused by racy check in __free_pages drm/amdgpu/fence: Fix oops due to non-matching drm_sched init/fini drm/i915: Initialize the obj flags for shmem objects drm/i915: Fix VBT DSI DVO port handling x86/speculation: Identify processors vulnerable to SMT RSB predictions KVM: x86: Mitigate the cross-thread return address predictions bug Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions Linux 5.15.94 Change-Id: I0bf18eba4ef77a0be831b3b48610b06311fd5a3e Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-02-16 13:18:49 +00:00
Greg Kroah-Hartman	787413edad	Merge 5.15.93 into android13-5.15-lts ... Changes in 5.15.93 firewire: fix memory leak for payload of request subaction to IEC 61883-1 FCP region bus: sunxi-rsb: Fix error handling in sunxi_rsb_init() ASoC: Intel: boards: fix spelling in comments ASoC: Intel: bytcht_es8316: move comment to the right place ASoC: Intel: bytcht_es8316: Drop reference count of ACPI device after use ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use ASoC: Intel: bytcr_rt5640: Drop reference count of ACPI device after use ASoC: Intel: bytcr_wm5102: Drop reference count of ACPI device after use bpf: Fix a possible task gone issue with bpf_send_signal[_thread]() helpers ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path() bpf: Support <8-byte scalar spill and refill bpf: Fix to preserve reg parent/live fields when copying range info bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener arm64: dts: imx8mm: Fix pad control for UART1_DTE_RX drm/vc4: hdmi: make CEC adapter name unique scsi: Revert "scsi: core: map PQ=1, PDT=other values to SCSI_SCAN_TARGET_PRESENT" vhost/net: Clear the pending messages when the backend is removed WRITE is "data source", not destination... READ is "data destination", not source... fix iov_iter_bvec() "direction" argument fix "direction" argument of iov_iter_kvec() ice: Prevent set_channel from changing queues while RDMA active qede: execute xdp_do_flush() before napi_complete_done() virtio-net: execute xdp_do_flush() before napi_complete_done() dpaa_eth: execute xdp_do_flush() before napi_complete_done() dpaa2-eth: execute xdp_do_flush() before napi_complete_done() sfc: correctly advertise tunneled IPv6 segmentation net: phy: dp83822: Fix null pointer access on DP83825/DP83826 devices block/bfq-iosched.c: use "false" rather than "BLK_RW_ASYNC" block, bfq: replace 0/1 with false/true in bic apis block, bfq: fix uaf for bfqq in bic_set_bfqq() netrom: Fix use-after-free caused by accept on already connected socket drm/i915/guc: Fix locking when searching for a hung request drm/i915/adlp: Fix typo for reference clock netfilter: br_netfilter: disable sabotage_in hook after first suppression squashfs: harden sanity check in squashfs_read_xattr_id_table net: phy: meson-gxl: Add generic dummy stubs for MMD register access ip/ip6_gre: Fix changing addr gen mode not generating IPv6 link local address ip/ip6_gre: Fix non-point-to-point tunnel not generating IPv6 link local address riscv: kprobe: Fixup kernel panic when probing an illegal position igc: return an error if the mac type is unknown in igc_ptp_systim_to_hwtstamp() can: j1939: fix errant WARN_ON_ONCE in j1939_session_deactivate ata: libata: Fix sata_down_spd_limit() when no link speed is reported selftests: net: udpgso_bench_rx: Fix 'used uninitialized' compiler warning selftests: net: udpgso_bench_rx/tx: Stop when wrong CLI args are provided selftests: net: udpgso_bench: Fix racing bug between the rx/tx programs selftests: net: udpgso_bench_tx: Cater for pending datagrams zerocopy benchmarking virtio-net: Keep stop() to follow mirror sequence of open() net: openvswitch: fix flow memory leak in ovs_flow_cmd_new efi: fix potential NULL deref in efi_mem_reserve_persistent i2c: designware-pci: Add new PCI IDs for AMD NAVI GPU i2c: mxs: suppress probe-deferral error message scsi: target: core: Fix warning on RT kernels perf/x86/intel: Add Emerald Rapids scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress i2c: rk3x: fix a bunch of kernel-doc warnings platform/x86: dell-wmi: Add a keymap for KEY_MUTE in type 0x0010 table platform/x86: gigabyte-wmi: add support for B450M DS3H WIFI-CF net/x25: Fix to not accept on connected socket drm/amd/display: Fix timing not changning when freesync video is enabled iio: adc: stm32-dfsdm: fill module aliases usb: dwc3: qcom: enable vbus override when in OTG dr-mode usb: gadget: f_fs: Fix unbalanced spinlock in __ffs_ep0_queue_wait vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF Input: i8042 - add Clevo PCX0DX to i8042 quirk table fbcon: Check font dimension limits net: qrtr: free memory on error path in radix_tree_insert() watchdog: diag288_wdt: do not use stack buffers for hardware data watchdog: diag288_wdt: fix __diag288() inline assembly ALSA: hda/realtek: Add Acer Predator PH315-54 efi: Accept version 2 of memory attributes table iio: hid: fix the retval in accel_3d_capture_sample iio: hid: fix the retval in gyro_3d_capture_sample iio: adc: berlin2-adc: Add missing of_node_put() in error path iio:adc:twl6030: Enable measurements of VUSB, VBAT and others iio: imu: fxos8700: fix ACCEL measurement range selection iio: imu: fxos8700: fix incomplete ACCEL and MAGN channels readback iio: imu: fxos8700: fix IMU data bits returned to user space iio: imu: fxos8700: fix map label of channel type to MAGN sensor iio: imu: fxos8700: fix swapped ACCEL and MAGN channels readback iio: imu: fxos8700: fix incorrect ODR mode readback iio: imu: fxos8700: fix failed initialization ODR mode assignment iio: imu: fxos8700: remove definition FXOS8700_CTRL_ODR_MIN iio: imu: fxos8700: fix MAGN sensor scale and unit nvmem: qcom-spmi-sdam: fix module autoloading parisc: Fix return code of pdc_iodc_print() parisc: Wire up PTRACE_GETREGS/PTRACE_SETREGS for compat case riscv: disable generation of unwind tables mm: hugetlb: proc: check for hugetlb shared PMD in /proc/PID/smaps usb: gadget: f_uac2: Fix incorrect increment of bNumEndpoints kernel/irq/irqdomain.c: fix memory leak with using debugfs_lookup() x86/debug: Fix stack recursion caused by wrongly ordered DR7 accesses fpga: stratix10-soc: Fix return value check in s10_ops_write_init() mm/swapfile: add cond_resched() in get_swap_pages() highmem: round down the address passed to kunmap_flush_on_unmap() Squashfs: fix handling and sanity checking of xattr_ids count drm/i915: Fix potential bit_17 double-free nvmem: core: initialise nvmem->id early nvmem: core: remove nvmem_config wp_gpio nvmem: core: fix cell removal on error serial: 8250_dma: Fix DMA Rx completion race serial: 8250_dma: Fix DMA Rx rearm race phy: qcom-qmp-combo: disable runtime PM on unbind phy: qcom-qmp-combo: fix memleak on probe deferral phy: qcom-qmp-usb: fix memleak on probe deferral phy: qcom-qmp-combo: fix broken power on phy: qcom-qmp-combo: fix runtime suspend bpf: Fix incorrect state pruning for <8B spill/fill bpf: Do not reject when the stack read size is different from the tracked scalar size iio:adc:twl6030: Enable measurement of VAC powerpc/imc-pmu: Revert nest_init_lock to being a mutex fs/ntfs3: Validate attribute data and valid sizes ovl: Use "buf" flexible array for memcpy() destination fbdev: smscufx: fix error handling code in ufx_usb_probe f2fs: fix to do sanity check on i_extra_isize in is_alive() wifi: brcmfmac: Check the count value of channel spec to prevent out-of-bounds reads gfs2: Cosmetic gfs2_dinode_{in,out} cleanup gfs2: Always check inode size of inline inodes bpf: Skip invalid kfunc call in backtrack_insn Linux 5.15.93 Change-Id: I36ae60a781fc72667896bc649af5788cda1ef6c2 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-02-15 15:05:04 +00:00
Alan Stern	25141fb411	net: USB: Fix wrong-direction WARNING in plusb.c ... commit 811d581194f7412eda97acc03d17fc77824b561f upstream. The syzbot fuzzer detected a bug in the plusb network driver: A zero-length control-OUT transfer was treated as a read instead of a write. In modern kernels this error provokes a WARNING: usb 1-1: BOGUS control dir, pipe 80000280 doesn't match bRequestType c0 WARNING: CPU: 0 PID: 4645 at drivers/usb/core/urb.c:411 usb_submit_urb+0x14a7/0x1880 drivers/usb/core/urb.c:411 Modules linked in: CPU: 1 PID: 4645 Comm: dhcpcd Not tainted 6.2.0-rc6-syzkaller-00050-g9f266ccaa2f5 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 RIP: 0010:usb_submit_urb+0x14a7/0x1880 drivers/usb/core/urb.c:411 ... Call Trace: <TASK> usb_start_wait_urb+0x101/0x4b0 drivers/usb/core/message.c:58 usb_internal_control_msg drivers/usb/core/message.c:102 [inline] usb_control_msg+0x320/0x4a0 drivers/usb/core/message.c:153 __usbnet_read_cmd+0xb9/0x390 drivers/net/usb/usbnet.c:2010 usbnet_read_cmd+0x96/0xf0 drivers/net/usb/usbnet.c:2068 pl_vendor_req drivers/net/usb/plusb.c:60 [inline] pl_set_QuickLink_features drivers/net/usb/plusb.c:75 [inline] pl_reset+0x2f/0xf0 drivers/net/usb/plusb.c:85 usbnet_open+0xcc/0x5d0 drivers/net/usb/usbnet.c:889 __dev_open+0x297/0x4d0 net/core/dev.c:1417 __dev_change_flags+0x587/0x750 net/core/dev.c:8530 dev_change_flags+0x97/0x170 net/core/dev.c:8602 devinet_ioctl+0x15a2/0x1d70 net/ipv4/devinet.c:1147 inet_ioctl+0x33f/0x380 net/ipv4/af_inet.c:979 sock_do_ioctl+0xcc/0x230 net/socket.c:1169 sock_ioctl+0x1f8/0x680 net/socket.c:1286 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:870 [inline] __se_sys_ioctl fs/ioctl.c:856 [inline] __x64_sys_ioctl+0x197/0x210 fs/ioctl.c:856 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd The fix is to call usbnet_write_cmd() instead of usbnet_read_cmd() and remove the USB_DIR_IN flag. Reported-and-tested-by: syzbot+2a0e7abd24f1eb90ce25@syzkaller.appspotmail.com Signed-off-by: Alan Stern <stern@rowland.harvard.edu> Fixes: 090ffa9d0e ("[PATCH] USB: usbnet (9/9) module for pl2301/2302 cables") CC: stable@vger.kernel.org Link: https://lore.kernel.org/r/00000000000052099f05f3b3e298@google.com/ Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-02-14 19:18:02 +01:00
Sasha Neftin	48d6d8f2f6	igc: Add ndo_tx_timeout support ... [ Upstream commit 9b275176270efd18f2f4e328b32be1bad34c4c0d ] On some platforms, 100/1000/2500 speeds seem to have sometimes problems reporting false positive tx unit hang during stressful UDP traffic. Likely other Intel drivers introduce responses to a tx hang. Update the 'tx hang' comparator with the comparison of the head and tail of ring pointers and restore the tx_timeout_factor to the previous value (one). This can be test by using netperf or iperf3 applications. Example: iperf3 -s -p 5001 iperf3 -c 192.168.0.2 --udp -p 5001 --time 600 -b 0 netserver -p 16604 netperf -H 192.168.0.2 -l 600 -p 16604 -t UDP_STREAM -- -m 64000 Fixes: b27b8dc77b ("igc: Increase timeout value for Speed 100/1000/2500") Signed-off-by: Sasha Neftin <sasha.neftin@intel.com> Tested-by: Naama Meir <naamax.meir@linux.intel.com> Signed-off-by: Tony Nguyen <anthony.l.nguyen@intel.com> Link: https://lore.kernel.org/r/20230206235818.662384-1-anthony.l.nguyen@intel.com Signed-off-by: Jakub Kicinski <kuba@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-02-14 19:18:01 +01:00
Shay Drory	62ff7dd961	net/mlx5: Serialize module cleanup with reload and remove ... [ Upstream commit 8f0d1451ecf7b3bd5a06ffc866c753d0f3ab4683 ] Currently, remove and reload flows can run in parallel to module cleanup. This design is error prone. For example: aux_drivers callbacks are called from both cleanup and remove flows with different lockings, which can cause a deadlock[1]. Hence, serialize module cleanup with reload and remove. [1] cleanup remove ------- ------ auxiliary_driver_unregister(); devl_lock() auxiliary_device_delete(mlx5e_aux) device_lock(mlx5e_aux) devl_lock() device_lock(mlx5e_aux) Fixes: 912cebf420 ("net/mlx5e: Connect ethernet part to auxiliary bus") Signed-off-by: Shay Drory <shayd@nvidia.com> Reviewed-by: Moshe Shemesh <moshe@nvidia.com> Signed-off-by: Saeed Mahameed <saeedm@nvidia.com> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-02-14 19:18:01 +01:00
Shay Drory	95d2394f84	net/mlx5: fw_tracer, Zero consumer index when reloading the tracer ... [ Upstream commit 184e1e4474dbcfebc4dbd1fa823a329978f25506 ] When tracer is reloaded, the device will log the traces at the beginning of the log buffer. Also, driver is reading the log buffer in chunks in accordance to the consumer index. Hence, zero consumer index when reloading the tracer. Fixes: 4383cfcc65 ("net/mlx5: Add devlink reload") Signed-off-by: Shay Drory <shayd@nvidia.com> Signed-off-by: Saeed Mahameed <saeedm@nvidia.com> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-02-14 19:18:00 +01:00
Shay Drory	ab7f3f6a9d	net/mlx5: fw_tracer, Clear load bit when freeing string DBs buffers ... [ Upstream commit db561fed6b8fa3878e74d5df6512a4a38152b63e ] Whenever the driver is reading the string DBs into buffers, the driver is setting the load bit, but the driver never clears this bit. As a result, in case load bit is on and the driver query the device for new string DBs, the driver won't read again the string DBs. Fix it by clearing the load bit when query the device for new string DBs. Fixes: 2d69356752 ("net/mlx5: Add support for fw live patch event") Signed-off-by: Shay Drory <shayd@nvidia.com> Reviewed-by: Moshe Shemesh <moshe@nvidia.com> Signed-off-by: Saeed Mahameed <saeedm@nvidia.com> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-02-14 19:18:00 +01:00
Dragos Tatulea	193528646e	net/mlx5e: IPoIB, Show unknown speed instead of error ... [ Upstream commit 8aa5f171d51c1cb69e5e3106df4dd1a446102823 ] ethtool is returning an error for unknown speeds for the IPoIB interface: $ ethtool ib0 netlink error: failed to retrieve link settings netlink error: Invalid argument netlink error: failed to retrieve link settings netlink error: Invalid argument Settings for ib0: Link detected: no After this change, ethtool will return success and show "unknown speed": $ ethtool ib0 Settings for ib0: Supported ports: [ ] Supported link modes: Not reported Supported pause frame use: No Supports auto-negotiation: No Supported FEC modes: Not reported Advertised link modes: Not reported Advertised pause frame use: No Advertised auto-negotiation: No Advertised FEC modes: Not reported Speed: Unknown! Duplex: Full Auto-negotiation: off Port: Other PHYAD: 0 Transceiver: internal Link detected: no Fixes: eb234ee9d5 ("net/mlx5e: IPoIB, Add support for get_link_ksettings in ethtool") Signed-off-by: Dragos Tatulea <dtatulea@nvidia.com> Reviewed-by: Gal Pressman <gal@nvidia.com> Reviewed-by: Tariq Toukan <tariqt@nvidia.com> Signed-off-by: Saeed Mahameed <saeedm@nvidia.com> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-02-14 19:18:00 +01:00
Vlad Buslov	7c6e8eb617	net/mlx5: Bridge, fix ageing of peer FDB entries ... [ Upstream commit da0c52426cd23f8728eff72c2b2d2a3eb6b451f5 ] SWITCHDEV_FDB_ADD_TO_BRIDGE event handler that updates FDB entry 'lastuse' field is only executed for eswitch that owns the entry. However, if peer entry processed packets at least once it will have hardware counter 'used' value greater than entry 'lastuse' from that point on, which will cause FDB entry not being aged out. Process the event on all eswitch instances. Fixes: ff9b752146 ("net/mlx5: Bridge, support LAG") Signed-off-by: Vlad Buslov <vladbu@nvidia.com> Reviewed-by: Maor Dickman <maord@nvidia.com> Signed-off-by: Saeed Mahameed <saeedm@nvidia.com> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-02-14 19:18:00 +01:00
Adham Faris	49ece61a07	net/mlx5e: Update rx ring hw mtu upon each rx-fcs flag change ... [ Upstream commit 1e66220948df815d7b37e0ff8b4627ce10433738 ] rq->hw_mtu is used in function en_rx.c/mlx5e_skb_from_cqe_mpwrq_linear() to catch oversized packets. If FCS is concatenated to the end of the packet then the check should be updated accordingly. Rx rings initialization (mlx5e_init_rxq_rq()) invoked for every new set of channels, as part of mlx5e_safe_switch_params(), unknowingly if it runs with default configuration or not. Current rq->hw_mtu initialization assumes default configuration and ignores params->scatter_fcs_en flag state. Fix this, by accounting for params->scatter_fcs_en flag state during rq->hw_mtu initialization. In addition, updating rq->hw_mtu value during ingress traffic might lead to packets drop and oversize_pkts_sw_drop counter increase with no good reason. Hence we remove this optimization and switch the set of channels with a new one, to make sure we don't get false positives on the oversize_pkts_sw_drop counter. Fixes: 102722fc68 ("net/mlx5e: Add support for RXFCS feature flag") Signed-off-by: Adham Faris <afaris@nvidia.com> Reviewed-by: Tariq Toukan <tariqt@nvidia.com> Signed-off-by: Saeed Mahameed <saeedm@nvidia.com> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-02-14 19:18:00 +01:00
Maxim Mikityanskiy	31172267ba	net/mlx5e: Introduce the mlx5e_flush_rq function ... [ Upstream commit d9ba64deb2f1ad58eb3067c7485518f3e96559ee ] Add a function to flush an RQ: clean up descriptors, release pages and reset the RQ. This procedure is used by the recovery flow, and it will also be used in a following commit to free some memory when switching a channel to the XSK mode. Signed-off-by: Maxim Mikityanskiy <maximmi@nvidia.com> Reviewed-by: Tariq Toukan <tariqt@nvidia.com> Signed-off-by: Saeed Mahameed <saeedm@nvidia.com> Signed-off-by: Jakub Kicinski <kuba@kernel.org> Stable-dep-of: 1e66220948df ("net/mlx5e: Update rx ring hw mtu upon each rx-fcs flag change") Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-02-14 19:18:00 +01:00
Maxim Mikityanskiy	e4e4e93d31	net/mlx5e: Move repeating clear_bit in mlx5e_rx_reporter_err_rq_cqe_recover ... [ Upstream commit e64d71d055ca01fa5054d25b99fb29b98e543a31 ] The same clear_bit is called in both error and success flows. Move the call to do it only once and remove the out label. Signed-off-by: Maxim Mikityanskiy <maximmi@nvidia.com> Reviewed-by: Saeed Mahameed <saeedm@nvidia.com> Reviewed-by: Tariq Toukan <tariqt@nvidia.com> Signed-off-by: Saeed Mahameed <saeedm@nvidia.com> Signed-off-by: Jakub Kicinski <kuba@kernel.org> Stable-dep-of: 1e66220948df ("net/mlx5e: Update rx ring hw mtu upon each rx-fcs flag change") Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-02-14 19:18:00 +01:00
Vladimir Oltean	3f18b9ed8c	net: mscc: ocelot: fix VCAP filters not matching on MAC with "protocol 802.1Q" ... [ Upstream commit f964f8399df29d3e3ced77177cf35131cd2491bf ] Alternative short title: don't instruct the hardware to match on EtherType with "protocol 802.1Q" flower filters. It doesn't work for the reasons detailed below. With a command such as the following: tc filter add dev $swp1 ingress chain $(IS1 2) pref 3 \ protocol 802.1Q flower skip_sw vlan_id 200 src_mac $h1_mac \ action vlan modify id 300 \ action goto chain $(IS2 0 0) the created filter is set by ocelot_flower_parse_key() to be of type OCELOT_VCAP_KEY_ETYPE, and etype is set to {value=0x8100, mask=0xffff}. This gets propagated all the way to is1_entry_set() which commits it to hardware (the VCAP_IS1_HK_ETYPE field of the key). Compare this to the case where src_mac isn't specified - the key type is OCELOT_VCAP_KEY_ANY, and is1_entry_set() doesn't populate VCAP_IS1_HK_ETYPE. The problem is that for VLAN-tagged frames, the hardware interprets the ETYPE field as holding the encapsulated VLAN protocol. So the above filter will only match those packets which have an encapsulated protocol of 0x8100, rather than all packets with VLAN ID 200 and the given src_mac. The reason why this is allowed to occur is because, although we have a block of code in ocelot_flower_parse_key() which sets "match_protocol" to false when VLAN keys are present, that code executes too late. There is another block of code, which executes for Ethernet addresses, and has a "goto finished_key_parsing" and skips the VLAN header parsing. By skipping it, "match_protocol" remains with the value it was initialized with, i.e. "true", and "proto" is set to f->common.protocol, or 0x8100. The concept of ignoring some keys rather than erroring out when they are present but can't be offloaded is dubious in itself, but is present since the initial commit fe3490e610 ("net: mscc: ocelot: Hardware ofload for tc flower filter"), and it's outside of the scope of this patch to change that. The problem was introduced when the driver started to interpret the flower filter's protocol, and populate the VCAP filter's ETYPE field based on it. To fix this, it is sufficient to move the code that parses the VLAN keys earlier than the "goto finished_key_parsing" instruction. This will ensure that if we have a flower filter with both VLAN and Ethernet address keys, it won't match on ETYPE 0x8100, because the VLAN key parsing sets "match_protocol = false". Fixes: 86b956de11 ("net: mscc: ocelot: support matching on EtherType") Signed-off-by: Vladimir Oltean <vladimir.oltean@nxp.com> Reviewed-by: Simon Horman <simon.horman@corigine.com> Link: https://lore.kernel.org/r/20230205192409.1796428-1-vladimir.oltean@nxp.com Signed-off-by: Paolo Abeni <pabeni@redhat.com> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-02-14 19:17:59 +01:00
Vladimir Oltean	6acb5d853b	net: dsa: mt7530: don't change PVC_EG_TAG when CPU port becomes VLAN-aware ... [ Upstream commit 0b6d6425103a676e2b6a81f3fd35d7ea4f9b90ec ] Frank reports that in a mt7530 setup where some ports are standalone and some are in a VLAN-aware bridge, 8021q uppers of the standalone ports lose their VLAN tag on xmit, as seen by the link partner. This seems to occur because once the other ports join the VLAN-aware bridge, mt7530_port_vlan_filtering() also calls mt7530_port_set_vlan_aware(ds, cpu_dp->index), and this affects the way that the switch processes the traffic of the standalone port. Relevant is the PVC_EG_TAG bit. The MT7530 documentation says about it: EG_TAG: Incoming Port Egress Tag VLAN Attribution 0: disabled (system default) 1: consistent (keep the original ingress tag attribute) My interpretation is that this setting applies on the ingress port, and "disabled" is basically the normal behavior, where the egress tag format of the packet (tagged or untagged) is decided by the VLAN table (MT7530_VLAN_EGRESS_UNTAG or MT7530_VLAN_EGRESS_TAG). But there is also an option of overriding the system default behavior, and for the egress tagging format of packets to be decided not by the VLAN table, but simply by copying the ingress tag format (if ingress was tagged, egress is tagged; if ingress was untagged, egress is untagged; aka "consistent). This is useful in 2 scenarios: - VLAN-unaware bridge ports will always encounter a miss in the VLAN table. They should forward a packet as-is, though. So we use "consistent" there. See commit e045124e93 ("net: dsa: mt7530: fix tagged frames pass-through in VLAN-unaware mode"). - Traffic injected from the CPU port. The operating system is in god mode; if it wants a packet to exit as VLAN-tagged, it sends it as VLAN-tagged. Otherwise it sends it as VLAN-untagged*. *This is true only if we don't consider the bridge TX forwarding offload feature, which mt7530 doesn't support. So for now, make the CPU port always stay in "consistent" mode to allow software VLANs to be forwarded to their egress ports with the VLAN tag intact, and not stripped. Link: https://lore.kernel.org/netdev/trinity-e6294d28-636c-4c40-bb8b-b523521b00be-1674233135062@3c-app-gmx-bs36/ Fixes: e045124e93 ("net: dsa: mt7530: fix tagged frames pass-through in VLAN-unaware mode") Reported-by: Frank Wunderlich <frank-w@public-files.de> Tested-by: Frank Wunderlich <frank-w@public-files.de> Signed-off-by: Vladimir Oltean <vladimir.oltean@nxp.com> Tested-by: Arınç ÜNAL <arinc.unal@arinc9.com> Reviewed-by: Florian Fainelli <f.fainelli@gmail.com> Link: https://lore.kernel.org/r/20230205140713.1609281-1-vladimir.oltean@nxp.com Signed-off-by: Paolo Abeni <pabeni@redhat.com> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-02-14 19:17:59 +01:00
Anirudh Venkataramanan	ca834a0178	ice: Do not use WQ_MEM_RECLAIM flag for workqueue ... [ Upstream commit 4d159f7884f78b1aacb99b4fc37d1e3cb1194e39 ] When both ice and the irdma driver are loaded, a warning in check_flush_dependency is being triggered. This is due to ice driver workqueue being allocated with the WQ_MEM_RECLAIM flag and the irdma one is not. According to kernel documentation, this flag should be set if the workqueue will be involved in the kernel's memory reclamation flow. Since it is not, there is no need for the ice driver's WQ to have this flag set so remove it. Example trace: [ +0.000004] workqueue: WQ_MEM_RECLAIM ice:ice_service_task [ice] is flushing !WQ_MEM_RECLAIM infiniband:0x0 [ +0.000139] WARNING: CPU: 0 PID: 728 at kernel/workqueue.c:2632 check_flush_dependency+0x178/0x1a0 [ +0.000011] Modules linked in: bonding tls xt_CHECKSUM xt_MASQUERADE xt_conntrack ipt_REJECT nf_reject_ipv4 nft_compat nft_cha in_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 nf_tables nfnetlink bridge stp llc rfkill vfat fat intel_rapl_msr intel _rapl_common isst_if_common skx_edac nfit libnvdimm x86_pkg_temp_thermal intel_powerclamp coretemp kvm_intel kvm irqbypass crct1 0dif_pclmul crc32_pclmul ghash_clmulni_intel rapl intel_cstate rpcrdma sunrpc rdma_ucm ib_srpt ib_isert iscsi_target_mod target_ core_mod ib_iser libiscsi scsi_transport_iscsi rdma_cm ib_cm iw_cm iTCO_wdt iTCO_vendor_support ipmi_ssif irdma mei_me ib_uverbs ib_core intel_uncore joydev pcspkr i2c_i801 acpi_ipmi mei lpc_ich i2c_smbus intel_pch_thermal ioatdma ipmi_si acpi_power_meter acpi_pad xfs libcrc32c sd_mod t10_pi crc64_rocksoft crc64 sg ahci ixgbe libahci ice i40e igb crc32c_intel mdio i2c_algo_bit liba ta dca wmi dm_mirror dm_region_hash dm_log dm_mod ipmi_devintf ipmi_msghandler fuse [ +0.000161] [last unloaded: bonding] [ +0.000006] CPU: 0 PID: 728 Comm: kworker/0:2 Tainted: G S 6.2.0-rc2_next-queue-13jan-00458-gc20aabd57164 #1 [ +0.000006] Hardware name: Intel Corporation S2600WFT/S2600WFT, BIOS SE5C620.86B.02.01.0010.010620200716 01/06/2020 [ +0.000003] Workqueue: ice ice_service_task [ice] [ +0.000127] RIP: 0010:check_flush_dependency+0x178/0x1a0 [ +0.000005] Code: 89 8e 02 01 e8 49 3d 40 00 49 8b 55 18 48 8d 8d d0 00 00 00 48 8d b3 d0 00 00 00 4d 89 e0 48 c7 c7 e0 3b 08 9f e8 bb d3 07 01 <0f> 0b e9 be fe ff ff 80 3d 24 89 8e 02 00 0f 85 6b ff ff ff e9 06 [ +0.000004] RSP: 0018:ffff88810a39f990 EFLAGS: 00010282 [ +0.000005] RAX: 0000000000000000 RBX: ffff888141bc2400 RCX: 0000000000000000 [ +0.000004] RDX: 0000000000000001 RSI: dffffc0000000000 RDI: ffffffffa1213a80 [ +0.000003] RBP: ffff888194bf3400 R08: ffffed117b306112 R09: ffffed117b306112 [ +0.000003] R10: ffff888bd983088b R11: ffffed117b306111 R12: 0000000000000000 [ +0.000003] R13: ffff888111f84d00 R14: ffff88810a3943ac R15: ffff888194bf3400 [ +0.000004] FS: 0000000000000000(0000) GS:ffff888bd9800000(0000) knlGS:0000000000000000 [ +0.000003] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ +0.000003] CR2: 000056035b208b60 CR3: 000000017795e005 CR4: 00000000007706f0 [ +0.000003] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ +0.000003] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ +0.000002] PKRU: 55555554 [ +0.000003] Call Trace: [ +0.000002] <TASK> [ +0.000003] __flush_workqueue+0x203/0x840 [ +0.000006] ? mutex_unlock+0x84/0xd0 [ +0.000008] ? __pfx_mutex_unlock+0x10/0x10 [ +0.000004] ? __pfx___flush_workqueue+0x10/0x10 [ +0.000006] ? mutex_lock+0xa3/0xf0 [ +0.000005] ib_cache_cleanup_one+0x39/0x190 [ib_core] [ +0.000174] __ib_unregister_device+0x84/0xf0 [ib_core] [ +0.000094] ib_unregister_device+0x25/0x30 [ib_core] [ +0.000093] irdma_ib_unregister_device+0x97/0xc0 [irdma] [ +0.000064] ? __pfx_irdma_ib_unregister_device+0x10/0x10 [irdma] [ +0.000059] ? up_write+0x5c/0x90 [ +0.000005] irdma_remove+0x36/0x90 [irdma] [ +0.000062] auxiliary_bus_remove+0x32/0x50 [ +0.000007] device_release_driver_internal+0xfa/0x1c0 [ +0.000005] bus_remove_device+0x18a/0x260 [ +0.000007] device_del+0x2e5/0x650 [ +0.000005] ? __pfx_device_del+0x10/0x10 [ +0.000003] ? mutex_unlock+0x84/0xd0 [ +0.000004] ? __pfx_mutex_unlock+0x10/0x10 [ +0.000004] ? _raw_spin_unlock+0x18/0x40 [ +0.000005] ice_unplug_aux_dev+0x52/0x70 [ice] [ +0.000160] ice_service_task+0x1309/0x14f0 [ice] [ +0.000134] ? __pfx___schedule+0x10/0x10 [ +0.000006] process_one_work+0x3b1/0x6c0 [ +0.000008] worker_thread+0x69/0x670 [ +0.000005] ? __kthread_parkme+0xec/0x110 [ +0.000007] ? __pfx_worker_thread+0x10/0x10 [ +0.000005] kthread+0x17f/0x1b0 [ +0.000005] ? __pfx_kthread+0x10/0x10 [ +0.000004] ret_from_fork+0x29/0x50 [ +0.000009] </TASK> Fixes: 940b61af02 ("ice: Initialize PF and setup miscellaneous interrupt") Signed-off-by: Anirudh Venkataramanan <anirudh.venkataramanan@intel.com> Signed-off-by: Marcin Szycik <marcin.szycik@linux.intel.com> Tested-by: Jakub Andrysiak <jakub.andrysiak@intel.com> Signed-off-by: Tony Nguyen <anthony.l.nguyen@intel.com> Reviewed-by: Leon Romanovsky <leonro@nvidia.com> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-02-14 19:17:59 +01:00
Neel Patel	3cec44036f	ionic: clean interrupt before enabling queue to avoid credit race ... [ Upstream commit e8797a058466b60fc5a3291b92430c93ba90eaff ] Clear the interrupt credits before enabling the queue rather than after to be sure that the enabled queue starts at 0 and that we don't wipe away possible credits after enabling the queue. Fixes: 0f3154e6bc ("ionic: Add Tx and Rx handling") Signed-off-by: Neel Patel <neel.patel@amd.com> Signed-off-by: Shannon Nelson <shannon.nelson@amd.com> Reviewed-by: Leon Romanovsky <leonro@nvidia.com> Signed-off-by: Jakub Kicinski <kuba@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-02-14 19:17:59 +01:00
Heiner Kallweit	fad12afe87	net: phy: meson-gxl: use MMD access dummy stubs for GXL, internal PHY ... [ Upstream commit 69ff53e4a4c9498eeed7d1441f68a1481dc69251 ] Jerome provided the information that also the GXL internal PHY doesn't support MMD register access and EEE. MMD reads return 0xffff, what results in e.g. completely wrong ethtool --show-eee output. Therefore use the MMD dummy stubs. Fixes: d853d145ea ("net: phy: add an option to disable EEE advertisement") Suggested-by: Jerome Brunet <jbrunet@baylibre.com> Signed-off-by: Heiner Kallweit <hkallweit1@gmail.com> Link: https://lore.kernel.org/r/84432fe4-0be4-bc82-4e5c-557206b40f56@gmail.com Signed-off-by: Jakub Kicinski <kuba@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-02-14 19:17:59 +01:00
Qi Zheng	d23385a200	bonding: fix error checking in bond_debug_reregister() ... [ Upstream commit cbe83191d40d8925b7a99969d037d2a0caf69294 ] Since commit ff9fb72bc0 ("debugfs: return error values, not NULL") changed return value of debugfs_rename() in error cases from %NULL to %ERR_PTR(-ERROR), we should also check error values instead of NULL. Fixes: ff9fb72bc0 ("debugfs: return error values, not NULL") Signed-off-by: Qi Zheng <zhengqi.arch@bytedance.com> Acked-by: Jay Vosburgh <jay.vosburgh@canonical.com> Link: https://lore.kernel.org/r/20230202093256.32458-1-zhengqi.arch@bytedance.com Signed-off-by: Jakub Kicinski <kuba@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-02-14 19:17:58 +01:00
Clément Léger	11006d9d08	net: phylink: move phy_device_free() to correctly release phy device ... [ Upstream commit ce93fdb5f2ca5c9e2a9668411cc39091507f8dc9 ] After calling fwnode_phy_find_device(), the phy device refcount is incremented. Then, when the phy device is attached to a netdev with phy_attach_direct(), the refcount is also incremented but only decremented in the caller if phy_attach_direct() fails. Move phy_device_free() before the "if" to always release it correctly. Indeed, either phy_attach_direct() failed and we don't want to keep a reference to the phydev or it succeeded and a reference has been taken internally. Fixes: 25396f680d ("net: phylink: introduce phylink_fwnode_phy_connect()") Signed-off-by: Clément Léger <clement.leger@bootlin.com> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-02-14 19:17:58 +01:00
Minsuk Kang	e4991910f1	wifi: brcmfmac: Check the count value of channel spec to prevent out-of-bounds reads ... commit 4920ab131b2dbae7464b72bdcac465d070254209 upstream. This patch fixes slab-out-of-bounds reads in brcmfmac that occur in brcmf_construct_chaninfo() and brcmf_enable_bw40_2g() when the count value of channel specifications provided by the device is greater than the length of 'list->element[]', decided by the size of the 'list' allocated with kzalloc(). The patch adds checks that make the functions free the buffer and return -EINVAL if that is the case. Note that the negative return is handled by the caller, brcmf_setup_wiphybands() or brcmf_cfg80211_attach(). Found by a modified version of syzkaller. Crash Report from brcmf_construct_chaninfo(): ================================================================== BUG: KASAN: slab-out-of-bounds in brcmf_setup_wiphybands+0x1238/0x1430 Read of size 4 at addr ffff888115f24600 by task kworker/0:2/1896 CPU: 0 PID: 1896 Comm: kworker/0:2 Tainted: G W O 5.14.0+ #132 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.12.1-0-ga5cab58e9a3f-prebuilt.qemu.org 04/01/2014 Workqueue: usb_hub_wq hub_event Call Trace: dump_stack_lvl+0x57/0x7d print_address_description.constprop.0.cold+0x93/0x334 kasan_report.cold+0x83/0xdf brcmf_setup_wiphybands+0x1238/0x1430 brcmf_cfg80211_attach+0x2118/0x3fd0 brcmf_attach+0x389/0xd40 brcmf_usb_probe+0x12de/0x1690 usb_probe_interface+0x25f/0x710 really_probe+0x1be/0xa90 __driver_probe_device+0x2ab/0x460 driver_probe_device+0x49/0x120 __device_attach_driver+0x18a/0x250 bus_for_each_drv+0x123/0x1a0 __device_attach+0x207/0x330 bus_probe_device+0x1a2/0x260 device_add+0xa61/0x1ce0 usb_set_configuration+0x984/0x1770 usb_generic_driver_probe+0x69/0x90 usb_probe_device+0x9c/0x220 really_probe+0x1be/0xa90 __driver_probe_device+0x2ab/0x460 driver_probe_device+0x49/0x120 __device_attach_driver+0x18a/0x250 bus_for_each_drv+0x123/0x1a0 __device_attach+0x207/0x330 bus_probe_device+0x1a2/0x260 device_add+0xa61/0x1ce0 usb_new_device.cold+0x463/0xf66 hub_event+0x10d5/0x3330 process_one_work+0x873/0x13e0 worker_thread+0x8b/0xd10 kthread+0x379/0x450 ret_from_fork+0x1f/0x30 Allocated by task 1896: kasan_save_stack+0x1b/0x40 __kasan_kmalloc+0x7c/0x90 kmem_cache_alloc_trace+0x19e/0x330 brcmf_setup_wiphybands+0x290/0x1430 brcmf_cfg80211_attach+0x2118/0x3fd0 brcmf_attach+0x389/0xd40 brcmf_usb_probe+0x12de/0x1690 usb_probe_interface+0x25f/0x710 really_probe+0x1be/0xa90 __driver_probe_device+0x2ab/0x460 driver_probe_device+0x49/0x120 __device_attach_driver+0x18a/0x250 bus_for_each_drv+0x123/0x1a0 __device_attach+0x207/0x330 bus_probe_device+0x1a2/0x260 device_add+0xa61/0x1ce0 usb_set_configuration+0x984/0x1770 usb_generic_driver_probe+0x69/0x90 usb_probe_device+0x9c/0x220 really_probe+0x1be/0xa90 __driver_probe_device+0x2ab/0x460 driver_probe_device+0x49/0x120 __device_attach_driver+0x18a/0x250 bus_for_each_drv+0x123/0x1a0 __device_attach+0x207/0x330 bus_probe_device+0x1a2/0x260 device_add+0xa61/0x1ce0 usb_new_device.cold+0x463/0xf66 hub_event+0x10d5/0x3330 process_one_work+0x873/0x13e0 worker_thread+0x8b/0xd10 kthread+0x379/0x450 ret_from_fork+0x1f/0x30 The buggy address belongs to the object at ffff888115f24000 which belongs to the cache kmalloc-2k of size 2048 The buggy address is located 1536 bytes inside of 2048-byte region [ffff888115f24000, ffff888115f24800) Memory state around the buggy address: ffff888115f24500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ffff888115f24580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 >ffff888115f24600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ^ ffff888115f24680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ffff888115f24700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ================================================================== Crash Report from brcmf_enable_bw40_2g(): ================================================================== BUG: KASAN: slab-out-of-bounds in brcmf_cfg80211_attach+0x3d11/0x3fd0 Read of size 4 at addr ffff888103787600 by task kworker/0:2/1896 CPU: 0 PID: 1896 Comm: kworker/0:2 Tainted: G W O 5.14.0+ #132 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.12.1-0-ga5cab58e9a3f-prebuilt.qemu.org 04/01/2014 Workqueue: usb_hub_wq hub_event Call Trace: dump_stack_lvl+0x57/0x7d print_address_description.constprop.0.cold+0x93/0x334 kasan_report.cold+0x83/0xdf brcmf_cfg80211_attach+0x3d11/0x3fd0 brcmf_attach+0x389/0xd40 brcmf_usb_probe+0x12de/0x1690 usb_probe_interface+0x25f/0x710 really_probe+0x1be/0xa90 __driver_probe_device+0x2ab/0x460 driver_probe_device+0x49/0x120 __device_attach_driver+0x18a/0x250 bus_for_each_drv+0x123/0x1a0 __device_attach+0x207/0x330 bus_probe_device+0x1a2/0x260 device_add+0xa61/0x1ce0 usb_set_configuration+0x984/0x1770 usb_generic_driver_probe+0x69/0x90 usb_probe_device+0x9c/0x220 really_probe+0x1be/0xa90 __driver_probe_device+0x2ab/0x460 driver_probe_device+0x49/0x120 __device_attach_driver+0x18a/0x250 bus_for_each_drv+0x123/0x1a0 __device_attach+0x207/0x330 bus_probe_device+0x1a2/0x260 device_add+0xa61/0x1ce0 usb_new_device.cold+0x463/0xf66 hub_event+0x10d5/0x3330 process_one_work+0x873/0x13e0 worker_thread+0x8b/0xd10 kthread+0x379/0x450 ret_from_fork+0x1f/0x30 Allocated by task 1896: kasan_save_stack+0x1b/0x40 __kasan_kmalloc+0x7c/0x90 kmem_cache_alloc_trace+0x19e/0x330 brcmf_cfg80211_attach+0x3302/0x3fd0 brcmf_attach+0x389/0xd40 brcmf_usb_probe+0x12de/0x1690 usb_probe_interface+0x25f/0x710 really_probe+0x1be/0xa90 __driver_probe_device+0x2ab/0x460 driver_probe_device+0x49/0x120 __device_attach_driver+0x18a/0x250 bus_for_each_drv+0x123/0x1a0 __device_attach+0x207/0x330 bus_probe_device+0x1a2/0x260 device_add+0xa61/0x1ce0 usb_set_configuration+0x984/0x1770 usb_generic_driver_probe+0x69/0x90 usb_probe_device+0x9c/0x220 really_probe+0x1be/0xa90 __driver_probe_device+0x2ab/0x460 driver_probe_device+0x49/0x120 __device_attach_driver+0x18a/0x250 bus_for_each_drv+0x123/0x1a0 __device_attach+0x207/0x330 bus_probe_device+0x1a2/0x260 device_add+0xa61/0x1ce0 usb_new_device.cold+0x463/0xf66 hub_event+0x10d5/0x3330 process_one_work+0x873/0x13e0 worker_thread+0x8b/0xd10 kthread+0x379/0x450 ret_from_fork+0x1f/0x30 The buggy address belongs to the object at ffff888103787000 which belongs to the cache kmalloc-2k of size 2048 The buggy address is located 1536 bytes inside of 2048-byte region [ffff888103787000, ffff888103787800) Memory state around the buggy address: ffff888103787500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ffff888103787580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 >ffff888103787600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ^ ffff888103787680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ffff888103787700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ================================================================== Reported-by: Dokyung Song <dokyungs@yonsei.ac.kr> Reported-by: Jisoo Jang <jisoo.jang@yonsei.ac.kr> Reported-by: Minsuk Kang <linuxlovemin@yonsei.ac.kr> Reviewed-by: Arend van Spriel <arend.vanspriel@broadcom.com> Signed-off-by: Minsuk Kang <linuxlovemin@yonsei.ac.kr> Signed-off-by: Kalle Valo <kvalo@kernel.org> Link: https://lore.kernel.org/r/20221116142952.518241-1-linuxlovemin@yonsei.ac.kr Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-02-09 11:26:48 +01:00
Parav Pandit	7985028647	virtio-net: Keep stop() to follow mirror sequence of open() ... [ Upstream commit 63b114042d8a9c02d9939889177c36dbdb17a588 ] Cited commit in fixes tag frees rxq xdp info while RQ NAPI is still enabled and packet processing may be ongoing. Follow the mirror sequence of open() in the stop() callback. This ensures that when rxq info is unregistered, no rx packet processing is ongoing. Fixes: 754b8a21a9 ("virtio_net: setup xdp_rxq_info") Acked-by: Michael S. Tsirkin <mst@redhat.com> Reviewed-by: Jiri Pirko <jiri@nvidia.com> Signed-off-by: Parav Pandit <parav@nvidia.com> Link: https://lore.kernel.org/r/20230202163516.12559-1-parav@nvidia.com Signed-off-by: Jakub Kicinski <kuba@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-02-09 11:26:38 +01:00
Tom Rix	02d77d98e0	igc: return an error if the mac type is unknown in igc_ptp_systim_to_hwtstamp() ... [ Upstream commit a2df8463e15c10a8a882090f3d7a760fdb7b189d ] clang static analysis reports drivers/net/ethernet/intel/igc/igc_ptp.c:673:3: warning: The left operand of '+' is a garbage value [core.UndefinedBinaryOperatorResult] ktime_add_ns(shhwtstamps.hwtstamp, adjust); ^ ~~~~~~~~~~~~~~~~~~~~ igc_ptp_systim_to_hwtstamp() silently returns without setting the hwtstamp if the mac type is unknown. This should be treated as an error. Fixes: 81b055205e ("igc: Add support for RX timestamping") Signed-off-by: Tom Rix <trix@redhat.com> Reviewed-by: Simon Horman <simon.horman@corigine.com> Acked-by: Sasha Neftin <sasha.neftin@intel.com> Tested-by: Naama Meir <naamax.meir@linux.intel.com> Signed-off-by: Tony Nguyen <anthony.l.nguyen@intel.com> Link: https://lore.kernel.org/r/20230131215437.1528994-1-anthony.l.nguyen@intel.com Signed-off-by: Jakub Kicinski <kuba@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-02-09 11:26:37 +01:00
Chris Healy	dfe2f0ea38	net: phy: meson-gxl: Add generic dummy stubs for MMD register access ... [ Upstream commit afc2336f89dc0fc0ef25b92366814524b0fd90fb ] The Meson G12A Internal PHY does not support standard IEEE MMD extended register access, therefore add generic dummy stubs to fail the read and write MMD calls. This is necessary to prevent the core PHY code from erroneously believing that EEE is supported by this PHY even though this PHY does not support EEE, as MMD register access returns all FFFFs. Fixes: 5c3407abb3 ("net: phy: meson-gxl: add g12a support") Reviewed-by: Heiner Kallweit <hkallweit1@gmail.com> Signed-off-by: Chris Healy <healych@amazon.com> Reviewed-by: Jerome Brunet <jbrunet@baylibre.com> Link: https://lore.kernel.org/r/20230130231402.471493-1-cphealy@gmail.com Signed-off-by: Jakub Kicinski <kuba@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-02-09 11:26:37 +01:00
Andre Kalb	2cd1e9c013	net: phy: dp83822: Fix null pointer access on DP83825/DP83826 devices ... [ Upstream commit 422ae7d9c7221e8d4c8526d0f54106307d69d2dc ] The probe() function is only used for the DP83822 PHY, leaving the private data pointer uninitialized for the smaller DP83825/26 models. While all uses of the private data structure are hidden in 82822 specific callbacks, configuring the interrupt is shared across all models. This causes a NULL pointer dereference on the smaller PHYs as it accesses the private data unchecked. Verifying the pointer avoids that. Fixes: 5dc39fd5ef ("net: phy: DP83822: Add ability to advertise Fiber connection") Signed-off-by: Andre Kalb <andre.kalb@sma.de> Reviewed-by: Simon Horman <simon.horman@corigine.com> Link: https://lore.kernel.org/r/Y9FzniUhUtbaGKU7@pc6682 Signed-off-by: Jakub Kicinski <kuba@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-02-09 11:26:35 +01:00
Íñigo Huguet	18c18c2110	sfc: correctly advertise tunneled IPv6 segmentation ... [ Upstream commit ffffd2454a7a1bc9f7242b12c4cc0b05c12692b4 ] Recent sfc NICs are TSO capable for some tunnel protocols. However, it was not working properly because the feature was not advertised in hw_enc_features, but in hw_features only. Setting up a GENEVE tunnel and using iperf3 to send IPv4 and IPv6 traffic to the tunnel show, with tcpdump, that the IPv4 packets still had ~64k size but the IPv6 ones had only ~1500 bytes (they had been segmented by software, not offloaded). With this patch segmentation is offloaded as expected and the traffic is correctly received at the other end. Fixes: 24b2c3751a ("sfc: advertise encapsulated offloads on EF10") Reported-by: Tianhao Zhao <tizhao@redhat.com> Signed-off-by: Íñigo Huguet <ihuguet@redhat.com> Acked-by: Martin Habets <habetsm.xilinx@gmail.com> Link: https://lore.kernel.org/r/20230125143513.25841-1-ihuguet@redhat.com Signed-off-by: Jakub Kicinski <kuba@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-02-09 11:26:35 +01:00
Magnus Karlsson	878b06f60a	dpaa2-eth: execute xdp_do_flush() before napi_complete_done() ... [ Upstream commit a3191c4d86c5d3bd35b00dfde6910b88391436a0 ] Make sure that xdp_do_flush() is always executed before napi_complete_done(). This is important for two reasons. First, a redirect to an XSKMAP assumes that a call to xdp_do_redirect() from napi context X on CPU Y will be followed by a xdp_do_flush() from the same napi context and CPU. This is not guaranteed if the napi_complete_done() is executed before xdp_do_flush(), as it tells the napi logic that it is fine to schedule napi context X on another CPU. Details from a production system triggering this bug using the veth driver can be found following the first link below. The second reason is that the XDP_REDIRECT logic in itself relies on being inside a single NAPI instance through to the xdp_do_flush() call for RCU protection of all in-kernel data structures. Details can be found in the second link below. Fixes: d678be1dc1 ("dpaa2-eth: add XDP_REDIRECT support") Signed-off-by: Magnus Karlsson <magnus.karlsson@intel.com> Acked-by: Toke Høiland-Jørgensen <toke@redhat.com> Link: https://lore.kernel.org/r/20221220185903.1105011-1-sbohrer@cloudflare.com Link: https://lore.kernel.org/all/20210624160609.292325-1-toke@redhat.com/ Signed-off-by: Jakub Kicinski <kuba@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-02-09 11:26:35 +01:00
Magnus Karlsson	3b5774cd6b	dpaa_eth: execute xdp_do_flush() before napi_complete_done() ... [ Upstream commit b534013798b77f81a36f36dafd59bab9de837619 ] Make sure that xdp_do_flush() is always executed before napi_complete_done(). This is important for two reasons. First, a redirect to an XSKMAP assumes that a call to xdp_do_redirect() from napi context X on CPU Y will be followed by a xdp_do_flush() from the same napi context and CPU. This is not guaranteed if the napi_complete_done() is executed before xdp_do_flush(), as it tells the napi logic that it is fine to schedule napi context X on another CPU. Details from a production system triggering this bug using the veth driver can be found following the first link below. The second reason is that the XDP_REDIRECT logic in itself relies on being inside a single NAPI instance through to the xdp_do_flush() call for RCU protection of all in-kernel data structures. Details can be found in the second link below. Fixes: a1e031ffb4 ("dpaa_eth: add XDP_REDIRECT support") Signed-off-by: Magnus Karlsson <magnus.karlsson@intel.com> Acked-by: Toke Høiland-Jørgensen <toke@redhat.com> Link: https://lore.kernel.org/r/20221220185903.1105011-1-sbohrer@cloudflare.com Link: https://lore.kernel.org/all/20210624160609.292325-1-toke@redhat.com/ Acked-by: Camelia Groza <camelia.groza@nxp.com> Signed-off-by: Jakub Kicinski <kuba@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-02-09 11:26:35 +01:00
Magnus Karlsson	5a7040a649	virtio-net: execute xdp_do_flush() before napi_complete_done() ... [ Upstream commit ad7e615f646c9b5b2cf655cdfb9d91a28db4f25a ] Make sure that xdp_do_flush() is always executed before napi_complete_done(). This is important for two reasons. First, a redirect to an XSKMAP assumes that a call to xdp_do_redirect() from napi context X on CPU Y will be followed by a xdp_do_flush() from the same napi context and CPU. This is not guaranteed if the napi_complete_done() is executed before xdp_do_flush(), as it tells the napi logic that it is fine to schedule napi context X on another CPU. Details from a production system triggering this bug using the veth driver can be found following the first link below. The second reason is that the XDP_REDIRECT logic in itself relies on being inside a single NAPI instance through to the xdp_do_flush() call for RCU protection of all in-kernel data structures. Details can be found in the second link below. Fixes: 186b3c998c ("virtio-net: support XDP_REDIRECT") Signed-off-by: Magnus Karlsson <magnus.karlsson@intel.com> Acked-by: Toke Høiland-Jørgensen <toke@redhat.com> Link: https://lore.kernel.org/r/20221220185903.1105011-1-sbohrer@cloudflare.com Link: https://lore.kernel.org/all/20210624160609.292325-1-toke@redhat.com/ Acked-by: Michael S. Tsirkin <mst@redhat.com> Signed-off-by: Jakub Kicinski <kuba@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-02-09 11:26:35 +01:00
Magnus Karlsson	94add5b272	qede: execute xdp_do_flush() before napi_complete_done() ... [ Upstream commit 2ccce20d51faa0178086163ccb6c84a099a87ab4 ] Make sure that xdp_do_flush() is always executed before napi_complete_done(). This is important for two reasons. First, a redirect to an XSKMAP assumes that a call to xdp_do_redirect() from napi context X on CPU Y will be followed by a xdp_do_flush() from the same napi context and CPU. This is not guaranteed if the napi_complete_done() is executed before xdp_do_flush(), as it tells the napi logic that it is fine to schedule napi context X on another CPU. Details from a production system triggering this bug using the veth driver can be found following the first link below. The second reason is that the XDP_REDIRECT logic in itself relies on being inside a single NAPI instance through to the xdp_do_flush() call for RCU protection of all in-kernel data structures. Details can be found in the second link below. Fixes: d1b25b79e1 ("qede: add .ndo_xdp_xmit() and XDP_REDIRECT support") Signed-off-by: Magnus Karlsson <magnus.karlsson@intel.com> Acked-by: Toke Høiland-Jørgensen <toke@redhat.com> Link: https://lore.kernel.org/r/20221220185903.1105011-1-sbohrer@cloudflare.com Link: https://lore.kernel.org/all/20210624160609.292325-1-toke@redhat.com/ Signed-off-by: Jakub Kicinski <kuba@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-02-09 11:26:35 +01:00
Dave Ertman	a273f8e3ab	ice: Prevent set_channel from changing queues while RDMA active ... [ Upstream commit a6a0974aae4209d039ba81226ded5246eea14961 ] The PF controls the set of queues that the RDMA auxiliary_driver requests resources from. The set_channel command will alter that pool and trigger a reconfiguration of the VSI, which breaks RDMA functionality. Prevent set_channel from executing when RDMA driver bound to auxiliary device. Adding a locked variable to pass down the call chain to avoid double locking the device_lock. Fixes: 348048e724 ("ice: Implement iidc operations") Signed-off-by: Dave Ertman <david.m.ertman@intel.com> Tested-by: Gurucharan G <gurucharanx.g@intel.com> (A Contingent worker at Intel) Signed-off-by: Tony Nguyen <anthony.l.nguyen@intel.com> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-02-09 11:26:35 +01:00
Greg Kroah-Hartman	7622c50ba6	Merge 5.15.91 into android13-5.15-lts ... Changes in 5.15.91 memory: tegra: Remove clients SID override programming memory: atmel-sdramc: Fix missing clk_disable_unprepare in atmel_ramc_probe() memory: mvebu-devbus: Fix missing clk_disable_unprepare in mvebu_devbus_probe() dmaengine: ti: k3-udma: Do conditional decrement of UDMA_CHAN_RT_PEER_BCNT_REG arm64: dts: imx8mp-phycore-som: Remove invalid PMIC property ARM: dts: imx6ul-pico-dwarf: Use 'clock-frequency' ARM: dts: imx7d-pico: Use 'clock-frequency' ARM: dts: imx6qdl-gw560x: Remove incorrect 'uart-has-rtscts' arm64: dts: imx8mm-beacon: Fix ecspi2 pinmux ARM: imx: add missing of_node_put() HID: intel_ish-hid: Add check for ishtp_dma_tx_map arm64: dts: imx8mm-venice-gw7901: fix USB2 controller OC polarity soc: imx8m: Fix incorrect check for of_clk_get_by_name() reset: uniphier-glue: Use reset_control_bulk API reset: uniphier-glue: Fix possible null-ptr-deref EDAC/highbank: Fix memory leak in highbank_mc_probe() firmware: arm_scmi: Harden shared memory access in fetch_response firmware: arm_scmi: Harden shared memory access in fetch_notification tomoyo: fix broken dependency on *.conf.default RDMA/core: Fix ib block iterator counter overflow IB/hfi1: Reject a zero-length user expected buffer IB/hfi1: Reserve user expected TIDs IB/hfi1: Fix expected receive setup error exit issues IB/hfi1: Immediately remove invalid memory from hardware IB/hfi1: Remove user expected buffer invalidate race affs: initialize fsdata in affs_truncate() PM: AVS: qcom-cpr: Fix an error handling path in cpr_probe() arm64: dts: qcom: msm8992: Don't use sfpb mutex arm64: dts: qcom: msm8992-libra: Add CPU regulators arm64: dts: qcom: msm8992-libra: Fix the memory map phy: ti: fix Kconfig warning and operator precedence NFSD: fix use-after-free in nfsd4_ssc_setup_dul() ARM: dts: at91: sam9x60: fix the ddr clock for sam9x60 amd-xgbe: TX Flow Ctrl Registers are h/w ver dependent amd-xgbe: Delay AN timeout during KR training bpf: Fix pointer-leak due to insufficient speculative store bypass mitigation phy: rockchip-inno-usb2: Fix missing clk_disable_unprepare() in rockchip_usb2phy_power_on() net: nfc: Fix use-after-free in local_cleanup() net: wan: Add checks for NULL for utdm in undo_uhdlc_init and unmap_si_regs net: enetc: avoid deadlock in enetc_tx_onestep_tstamp() sch_htb: Avoid grafting on htb_destroy_class_offload when destroying htb gpio: use raw spinlock for gpio chip shadowed data gpio: mxc: Protect GPIO irqchip RMW with bgpio spinlock gpio: mxc: Always set GPIOs used as interrupt source to INPUT mode wifi: rndis_wlan: Prevent buffer overflow in rndis_query_oid pinctrl/rockchip: Use temporary variable for struct device pinctrl/rockchip: add error handling for pull/drive register getters pinctrl: rockchip: fix reading pull type on rk3568 net: stmmac: Fix queue statistics reading net/sched: sch_taprio: fix possible use-after-free l2tp: Serialize access to sk_user_data with sk_callback_lock l2tp: Don't sleep and disable BH under writer-side sk_callback_lock l2tp: convert l2tp_tunnel_list to idr l2tp: close all race conditions in l2tp_tunnel_register() octeontx2-pf: Avoid use of GFP_KERNEL in atomic context net: usb: sr9700: Handle negative len net: mdio: validate parameter addr in mdiobus_get_phy() HID: check empty report_list in hid_validate_values() HID: check empty report_list in bigben_probe() net: stmmac: fix invalid call to mdiobus_get_phy() pinctrl: rockchip: fix mux route data for rk3568 HID: revert CHERRY_MOUSE_000C quirk usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait usb: gadget: f_fs: Ensure ep0req is dequeued before free_request Bluetooth: Fix possible deadlock in rfcomm_sk_state_change net: ipa: disable ipa interrupt during suspend net/mlx5: E-switch, Fix setting of reserved fields on MODIFY_SCHEDULING_ELEMENT net: mlx5: eliminate anonymous module_init & module_exit drm/panfrost: fix GENERIC_ATOMIC64 dependency dmaengine: Fix double increment of client_count in dma_chan_get() net: macb: fix PTP TX timestamp failure due to packet padding virtio-net: correctly enable callback during start_xmit l2tp: prevent lockdep issue in l2tp_tunnel_register() HID: betop: check shape of output reports cifs: fix potential deadlock in cache_refresh_path() dmaengine: xilinx_dma: call of_node_put() when breaking out of for_each_child_of_node() phy: phy-can-transceiver: Skip warning if no "max-bitrate" drm/amd/display: fix issues with driver unload nvme-pci: fix timeout request state check tcp: avoid the lookup process failing to get sk in ehash table octeontx2-pf: Fix the use of GFP_KERNEL in atomic context on rt ptdma: pt_core_execute_cmd() should use spinlock device property: fix of node refcount leak in fwnode_graph_get_next_endpoint() w1: fix deadloop in __w1_remove_master_device() w1: fix WARNING after calling w1_process() driver core: Fix test_async_probe_init saves device in wrong array selftests/net: toeplitz: fix race on tpacket_v3 block close net: dsa: microchip: ksz9477: port map correction in ALU table entry register thermal/core: Remove duplicate information when an error occurs thermal/core: Rename 'trips' to 'num_trips' thermal: Validate new state in cur_state_store() thermal/core: fix error code in __thermal_cooling_device_register() thermal: core: call put_device() only after device_register() fails net: stmmac: enable all safety features by default tcp: fix rate_app_limited to default to 1 scsi: iscsi: Fix multiple iSCSI session unbind events sent to userspace cpufreq: Add Tegra234 to cpufreq-dt-platdev blocklist kcsan: test: don't put the expect array on the stack cpufreq: Add SM6375 to cpufreq-dt-platdev blocklist ASoC: fsl_micfil: Correct the number of steps on SX controls net: usb: cdc_ether: add support for Thales Cinterion PLS62-W modem drm: Add orientation quirk for Lenovo ideapad D330-10IGL s390/debug: add _ASM_S390_ prefix to header guard s390: expicitly align _edata and _end symbols on page boundary perf/x86/msr: Add Emerald Rapids perf/x86/intel/uncore: Add Emerald Rapids cpufreq: armada-37xx: stop using 0 as NULL pointer ASoC: fsl_ssi: Rename AC'97 streams to avoid collisions with AC'97 CODEC ASoC: fsl-asoc-card: Fix naming of AC'97 CODEC widgets spi: spidev: remove debug messages that access spidev->spi without locking KVM: s390: interrupt: use READ_ONCE() before cmpxchg() scsi: hisi_sas: Set a port invalid only if there are no devices attached when refreshing port id r8152: add vendor/device ID pair for Microsoft Devkit platform/x86: touchscreen_dmi: Add info for the CSL Panther Tab HD platform/x86: asus-nb-wmi: Add alternate mapping for KEY_SCREENLOCK lockref: stop doing cpu_relax in the cmpxchg loop firmware: coreboot: Check size of table entry and use flex-array drm/i915: Allow switching away via vga-switcheroo if uninitialized Revert "selftests/bpf: check null propagation only neither reg is PTR_TO_BTF_ID" drm/i915: Remove unused variable x86: ACPI: cstate: Optimize C3 entry on AMD CPUs fs: reiserfs: remove useless new_opts in reiserfs_remount sysctl: add a new register_sysctl_init() interface kernel/panic: move panic sysctls to its own file panic: unset panic_on_warn inside panic() ubsan: no need to unset panic_on_warn in ubsan_epilogue() kasan: no need to unset panic_on_warn in end_report() exit: Add and use make_task_dead. objtool: Add a missing comma to avoid string concatenation hexagon: Fix function name in die() h8300: Fix build errors from do_exit() to make_task_dead() transition csky: Fix function name in csky_alignment() and die() ia64: make IA64_MCA_RECOVERY bool instead of tristate panic: Separate sysctl logic from CONFIG_SMP exit: Put an upper limit on how often we can oops exit: Expose "oops_count" to sysfs exit: Allow oops_limit to be disabled panic: Consolidate open-coded panic_on_warn checks panic: Introduce warn_limit panic: Expose "warn_count" to sysfs docs: Fix path paste-o for /sys/kernel/warn_count exit: Use READ_ONCE() for all oops/warn limit reads Bluetooth: hci_sync: cancel cmd_timer if hci_open failed drm/amdgpu: complete gfxoff allow signal during suspend without delay scsi: hpsa: Fix allocation size for scsi_host_alloc() KVM: SVM: fix tsc scaling cache logic module: Don't wait for GOING modules tracing: Make sure trace_printk() can output as soon as it can be used trace_events_hist: add check for return value of 'create_hist_field' ftrace/scripts: Update the instructions for ftrace-bisect.sh cifs: Fix oops due to uncleared server->smbd_conn in reconnect i2c: mv64xxx: Remove shutdown method from driver i2c: mv64xxx: Add atomic_xfer method to driver ksmbd: add smbd max io size parameter ksmbd: add max connections parameter ksmbd: do not sign response to session request for guest login ksmbd: downgrade ndr version error message to debug ksmbd: limit pdu length size according to connection status ovl: fail on invalid uid/gid mapping at copy up KVM: x86/vmx: Do not skip segment attributes if unusable bit is set KVM: arm64: GICv4.1: Fix race with doorbell on VPE activation/deactivation thermal: intel: int340x: Protect trip temperature from concurrent updates ipv6: fix reachability confirmation with proxy_ndp ARM: 9280/1: mm: fix warning on phys_addr_t to void pointer assignment EDAC/device: Respect any driver-supplied workqueue polling value EDAC/qcom: Do not pass llcc_driv_data as edac_device_ctl_info's pvt_info net: mana: Fix IRQ name - add PCI and queue number scsi: ufs: core: Fix devfreq deadlocks i2c: designware: use casting of u64 in clock multiplication to avoid overflow netlink: prevent potential spectre v1 gadgets net: fix UaF in netns ops registration error path drm/i915/selftest: fix intel_selftest_modify_policy argument types netfilter: nft_set_rbtree: Switch to node list walk for overlap detection netfilter: nft_set_rbtree: skip elements in transaction from garbage collection netlink: annotate data races around nlk->portid netlink: annotate data races around dst_portid and dst_group netlink: annotate data races around sk_state ipv4: prevent potential spectre v1 gadget in ip_metrics_convert() ipv4: prevent potential spectre v1 gadget in fib_metrics_match() netfilter: conntrack: fix vtag checks for ABORT/SHUTDOWN_COMPLETE netrom: Fix use-after-free of a listening socket. net/sched: sch_taprio: do not schedule in taprio_reset() sctp: fail if no bound addresses can be used for a given scope riscv/kprobe: Fix instruction simulation of JALR nvme: fix passthrough csi check gpio: mxc: Unlock on error path in mxc_flip_edge() ravb: Rename "no_ptp_cfg_active" and "ptp_cfg_active" variables net: ravb: Fix lack of register setting after system resumed for Gen3 net: ravb: Fix possible hang if RIS2_QFF1 happen net: mctp: mark socks as dead on unhash, prevent re-add thermal: intel: int340x: Add locking to int340x_thermal_get_trip_type() net/tg3: resolve deadlock in tg3_reset_task() during EEH net: mdio-mux-meson-g12a: force internal PHY off on mux switch treewide: fix up files incorrectly marked executable tools: gpio: fix -c option of gpio-event-mon Revert "Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode" cpufreq: Move to_gov_attr_set() to cpufreq.h cpufreq: governor: Use kobject release() method to free dbs_data kbuild: Allow kernel installation packaging to override pkg-config block: fix and cleanup bio_check_ro x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL netfilter: conntrack: unify established states for SCTP paths perf/x86/amd: fix potential integer overflow on shift of a int Linux 5.15.91 Change-Id: I1a0a227ff3f034e4a07501ebbd97458fb1fec818 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-02-01 16:05:31 +00:00
Greg Kroah-Hartman	5b60fdf2e0	Merge 5.15.90 into android13-5.15-lts ... Changes in 5.15.90 btrfs: fix trace event name typo for FLUSH_DELAYED_REFS pNFS/filelayout: Fix coalescing test for single DS selftests/bpf: check null propagation only neither reg is PTR_TO_BTF_ID tools/virtio: initialize spinlocks in vring_test.c virtio_pci: modify ENOENT to EINVAL vduse: Validate vq_num in vduse_validate_config() net/ethtool/ioctl: return -EOPNOTSUPP if we have no phy stats r8169: move rtl_wol_enable_rx() and rtl_prepare_power_down() RDMA/srp: Move large values to a new enum for gcc13 btrfs: always report error in run_one_delayed_ref() x86/asm: Fix an assembler warning with current binutils f2fs: let's avoid panic if extent_tree is not created perf/x86/rapl: Treat Tigerlake like Icelake fbdev: omapfb: avoid stack overflow warning Bluetooth: hci_qca: Fix driver shutdown on closed serdev wifi: brcmfmac: fix regression for Broadcom PCIe wifi devices wifi: mac80211: sdata can be NULL during AMPDU start Add exception protection processing for vd in axi_chan_handle_err function zonefs: Detect append writes at invalid locations nilfs2: fix general protection fault in nilfs_btree_insert() efi: fix userspace infinite retry read efivars after EFI runtime services page fault ALSA: hda/realtek: fix mute/micmute LEDs for a HP ProBook ALSA: hda/realtek: fix mute/micmute LEDs don't work for a HP platform drm/amdgpu: disable runtime pm on several sienna cichlid cards(v2) drm/amd: Delay removal of the firmware framebuffer hugetlb: unshare some PMDs when splitting VMAs io_uring: don't gate task_work run on TIF_NOTIFY_SIGNAL eventpoll: add EPOLL_URING_WAKE poll wakeup flag eventfd: provide a eventfd_signal_mask() helper io_uring: pass in EPOLL_URING_WAKE for eventfd signaling and wakeups io_uring: improve send/recv error handling io_uring: ensure recv and recvmsg handle MSG_WAITALL correctly io_uring: add flag for disabling provided buffer recycling io_uring: support MSG_WAITALL for IORING_OP_SEND(MSG) io_uring: allow re-poll if we made progress io_uring: fix async accept on O_NONBLOCK sockets io_uring: ensure that cached task references are always put on exit io_uring: remove duplicated calls to io_kiocb_ppos io_uring: update kiocb->ki_pos at execution time io_uring: do not recalculate ppos unnecessarily io_uring/rw: defer fsnotify calls to task context xhci-pci: set the dma max_seg_size usb: xhci: Check endpoint is valid before dereferencing it xhci: Fix null pointer dereference when host dies xhci: Add update_hub_device override for PCI xHCI hosts xhci: Add a flag to disable USB3 lpm on a xhci root port level. usb: acpi: add helper to check port lpm capability using acpi _DSM xhci: Detect lpm incapable xHC USB3 roothub ports from ACPI tables prlimit: do_prlimit needs to have a speculation check USB: serial: option: add Quectel EM05-G (GR) modem USB: serial: option: add Quectel EM05-G (CS) modem USB: serial: option: add Quectel EM05-G (RS) modem USB: serial: option: add Quectel EC200U modem USB: serial: option: add Quectel EM05CN (SG) modem USB: serial: option: add Quectel EM05CN modem staging: vchiq_arm: fix enum vchiq_status return types USB: misc: iowarrior: fix up header size for USB_DEVICE_ID_CODEMERCS_IOW100 misc: fastrpc: Don't remove map on creater_process and device_release misc: fastrpc: Fix use-after-free race condition for maps usb: core: hub: disable autosuspend for TI TUSB8041 comedi: adv_pci1760: Fix PWM instruction handling ACPI: PRM: Check whether EFI runtime is available mmc: sunxi-mmc: Fix clock refcount imbalance during unbind mmc: sdhci-esdhc-imx: correct the tuning start tap and step setting btrfs: do not abort transaction on failure to write log tree when syncing log btrfs: fix race between quota rescan and disable leading to NULL pointer deref cifs: do not include page data when checking signature thunderbolt: Use correct function to calculate maximum USB3 link rate riscv: dts: sifive: fu740: fix size of pcie 32bit memory bpf: restore the ebpf program ID for BPF_AUDIT_UNLOAD and PERF_BPF_EVENT_PROG_UNLOAD staging: mt7621-dts: change some node hex addresses to lower case tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer tty: fix possible null-ptr-defer in spk_ttyio_release USB: gadgetfs: Fix race between mounting and unmounting USB: serial: cp210x: add SCALANCE LPE-9000 device id usb: cdns3: remove fetched trb from cache before dequeuing usb: host: ehci-fsl: Fix module alias usb: typec: tcpm: Fix altmode re-registration causes sysfs create fail usb: typec: altmodes/displayport: Add pin assignment helper usb: typec: altmodes/displayport: Fix pin assignment calculation usb: gadget: g_webcam: Send color matching descriptor per frame usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate() usb-storage: apply IGNORE_UAS only for HIKSEMI MD202 on RTL9210 dt-bindings: phy: g12a-usb2-phy: fix compatible string documentation dt-bindings: phy: g12a-usb3-pcie-phy: fix compatible string documentation serial: pch_uart: Pass correct sg to dma_unmap_sg() dmaengine: lgm: Move DT parsing after initialization dmaengine: tegra210-adma: fix global intr clear dmaengine: idxd: Let probe fail when workqueue cannot be enabled serial: amba-pl011: fix high priority character transmission in rs486 mode serial: atmel: fix incorrect baudrate setup gsmi: fix null-deref in gsmi_get_variable mei: me: add meteor lake point M DID drm/i915: re-disable RC6p on Sandy Bridge drm/i915/display: Check source height is > 0 drm/amd/display: Fix set scaling doesn's work drm/amd/display: Calculate output_color_space after pixel encoding adjustment drm/amd/display: Fix COLOR_SPACE_YCBCR2020_TYPE matrix drm/amdgpu: drop experimental flag on aldebaran fs/ntfs3: Fix attr_punch_hole() null pointer derenference arm64: efi: Execute runtime services from a dedicated stack efi: rt-wrapper: Add missing include Revert "drm/amdgpu: make display pinning more flexible (v2)" x86/fpu: Use _Alignof to avoid undefined behavior in TYPE_ALIGN tracing: Use alignof__(struct {type b;}) instead of offsetof() io_uring: io_kiocb_update_pos() should not touch file for non -1 offset io_uring/net: fix fast_iov assignment in io_setup_async_msg() net/ulp: use consistent error code when blocking ULP net/mlx5: fix missing mutex_unlock in mlx5_fw_fatal_reporter_err_work() block: mq-deadline: Rename deadline_is_seq_writes() Revert "wifi: mac80211: fix memory leak in ieee80211_if_add()" soc: qcom: apr: Make qcom,protection-domain optional again mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma io_uring: Clean up a false-positive warning from GCC 9.3.0 io_uring: fix double poll leak on repolling io_uring/rw: ensure kiocb_end_write() is always called io_uring/rw: remove leftover debug statement Linux 5.15.90 Change-Id: I8721d40cff2e6202b1aa7ed984e154a67d7c5276 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-02-01 16:01:39 +00:00
Jerome Brunet	046fe53907	net: mdio-mux-meson-g12a: force internal PHY off on mux switch ... [ Upstream commit 7083df59abbc2b7500db312cac706493be0273ff ] Force the internal PHY off then on when switching to the internal path. This fixes problems where the PHY ID is not properly set. Fixes: 7090425104 ("net: phy: add amlogic g12a mdio mux support") Suggested-by: Qi Duan <qi.duan@amlogic.com> Co-developed-by: Heiner Kallweit <hkallweit1@gmail.com> Signed-off-by: Heiner Kallweit <hkallweit1@gmail.com> Signed-off-by: Jerome Brunet <jbrunet@baylibre.com> Link: https://lore.kernel.org/r/20230124101157.232234-1-jbrunet@baylibre.com Signed-off-by: Jakub Kicinski <kuba@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-02-01 08:27:29 +01:00
David Christensen	86bdccde78	net/tg3: resolve deadlock in tg3_reset_task() during EEH ... [ Upstream commit 6c4ca03bd890566d873e3593b32d034bf2f5a087 ] During EEH error injection testing, a deadlock was encountered in the tg3 driver when tg3_io_error_detected() was attempting to cancel outstanding reset tasks: crash> foreach UN bt ... PID: 159 TASK: c0000000067c6000 CPU: 8 COMMAND: "eehd" ... #5 [c00000000681f990] __cancel_work_timer at c00000000019fd18 #6 [c00000000681fa30] tg3_io_error_detected at c00800000295f098 [tg3] #7 [c00000000681faf0] eeh_report_error at c00000000004e25c ... PID: 290 TASK: c000000036e5f800 CPU: 6 COMMAND: "kworker/6:1" ... #4 [c00000003721fbc0] rtnl_lock at c000000000c940d8 #5 [c00000003721fbe0] tg3_reset_task at c008000002969358 [tg3] #6 [c00000003721fc60] process_one_work at c00000000019e5c4 ... PID: 296 TASK: c000000037a65800 CPU: 21 COMMAND: "kworker/21:1" ... #4 [c000000037247bc0] rtnl_lock at c000000000c940d8 #5 [c000000037247be0] tg3_reset_task at c008000002969358 [tg3] #6 [c000000037247c60] process_one_work at c00000000019e5c4 ... PID: 655 TASK: c000000036f49000 CPU: 16 COMMAND: "kworker/16:2" ...:1 #4 [c0000000373ebbc0] rtnl_lock at c000000000c940d8 #5 [c0000000373ebbe0] tg3_reset_task at c008000002969358 [tg3] #6 [c0000000373ebc60] process_one_work at c00000000019e5c4 ... Code inspection shows that both tg3_io_error_detected() and tg3_reset_task() attempt to acquire the RTNL lock at the beginning of their code blocks. If tg3_reset_task() should happen to execute between the times when tg3_io_error_deteced() acquires the RTNL lock and tg3_reset_task_cancel() is called, a deadlock will occur. Moving tg3_reset_task_cancel() call earlier within the code block, prior to acquiring RTNL, prevents this from happening, but also exposes another deadlock issue where tg3_reset_task() may execute AFTER tg3_io_error_detected() has executed: crash> foreach UN bt PID: 159 TASK: c0000000067d2000 CPU: 9 COMMAND: "eehd" ... #4 [c000000006867a60] rtnl_lock at c000000000c940d8 #5 [c000000006867a80] tg3_io_slot_reset at c0080000026c2ea8 [tg3] #6 [c000000006867b00] eeh_report_reset at c00000000004de88 ... PID: 363 TASK: c000000037564000 CPU: 6 COMMAND: "kworker/6:1" ... #3 [c000000036c1bb70] msleep at c000000000259e6c #4 [c000000036c1bba0] napi_disable at c000000000c6b848 #5 [c000000036c1bbe0] tg3_reset_task at c0080000026d942c [tg3] #6 [c000000036c1bc60] process_one_work at c00000000019e5c4 ... This issue can be avoided by aborting tg3_reset_task() if EEH error recovery is already in progress. Fixes: db84bf43ef ("tg3: tg3_reset_task() needs to use rtnl_lock to synchronize") Signed-off-by: David Christensen <drc@linux.vnet.ibm.com> Reviewed-by: Pavan Chebbi <pavan.chebbi@broadcom.com> Link: https://lore.kernel.org/r/20230124185339.225806-1-drc@linux.vnet.ibm.com Signed-off-by: Jakub Kicinski <kuba@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-02-01 08:27:29 +01:00
Yoshihiro Shimoda	954cc215cd	net: ravb: Fix possible hang if RIS2_QFF1 happen ... [ Upstream commit f3c07758c9007a6bfff5290d9e19d3c41930c897 ] Since this driver enables the interrupt by RIC2_QFE1, this driver should clear the interrupt flag if it happens. Otherwise, the interrupt causes to hang the system. Note that this also fix a minor coding style (a comment indentation) around the fixed code. Fixes: c156633f13 ("Renesas Ethernet AVB driver proper") Signed-off-by: Yoshihiro Shimoda <yoshihiro.shimoda.uh@renesas.com> Reviewed-by: Sergey Shtylyov <s.shtylyov@omp.ru> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-02-01 08:27:28 +01:00
Yoshihiro Shimoda	0f7218bf0a	net: ravb: Fix lack of register setting after system resumed for Gen3 ... [ Upstream commit c2b6cdee1d13ffbb24baca3c9b8a572d6b541e4e ] After system entered Suspend to RAM, registers setting of this hardware is reset because the SoC will be turned off. On R-Car Gen3 (info->ccc_gac), ravb_ptp_init() is called in ravb_probe() only. So, after system resumed, it lacks of the initial settings for ptp. So, add ravb_ptp_{init,stop}() into ravb_{resume,suspend}(). Fixes: f5d7837f96 ("ravb: ptp: Add CONFIG mode support") Signed-off-by: Yoshihiro Shimoda <yoshihiro.shimoda.uh@renesas.com> Reviewed-by: Sergey Shtylyov <s.shtylyov@omp.ru> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-02-01 08:27:28 +01:00
Biju Das	3db4ca2938	ravb: Rename "no_ptp_cfg_active" and "ptp_cfg_active" variables ... [ Upstream commit 2b061b545cd0d393585da2909044b15db1ac426f ] Rename the variable "no_ptp_cfg_active" with "gptp" and "ptp_cfg_active" with "ccc_gac" to match the HW features. There is no functional change. Signed-off-by: Biju Das <biju.das.jz@bp.renesas.com> Suggested-by: Sergey Shtylyov <s.shtylyov@omp.ru> Reviewed-by: Lad Prabhakar <prabhakar.mahadev-lad.rj@bp.renesas.com> Signed-off-by: David S. Miller <davem@davemloft.net> Stable-dep-of: c2b6cdee1d13 ("net: ravb: Fix lack of register setting after system resumed for Gen3") Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-02-01 08:27:28 +01:00
Haiyang Zhang	858d7e9218	net: mana: Fix IRQ name - add PCI and queue number ... [ Upstream commit 20e3028c39a5bf882e91e717da96d14f1acec40e ] The PCI and queue number info is missing in IRQ names. Add PCI and queue number to IRQ names, to allow CPU affinity tuning scripts to work. Cc: stable@vger.kernel.org Fixes: ca9c54d2d6 ("net: mana: Add a driver for Microsoft Azure Network Adapter (MANA)") Signed-off-by: Haiyang Zhang <haiyangz@microsoft.com> Reviewed-by: Jesse Brandeburg <jesse.brandeburg@intel.com> Link: https://lore.kernel.org/r/1674161950-19708-1-git-send-email-haiyangz@microsoft.com Signed-off-by: Jakub Kicinski <kuba@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-02-01 08:27:25 +01:00
Andre Przywara	2e0a8bacbe	r8152: add vendor/device ID pair for Microsoft Devkit ... [ Upstream commit be53771c87f4e322a9835d3faa9cd73a4ecdec5b ] The Microsoft Devkit 2023 is a an ARM64 based machine featuring a Realtek 8153 USB3.0-to-GBit Ethernet adapter. As in their other machines, Microsoft uses a custom USB device ID. Add the respective ID values to the driver. This makes Ethernet work on the MS Devkit device. The chip has been visually confirmed to be a RTL8153. Signed-off-by: Andre Przywara <andre.przywara@arm.com> Link: https://lore.kernel.org/r/20230111133228.190801-1-andre.przywara@arm.com Signed-off-by: Paolo Abeni <pabeni@redhat.com> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-02-01 08:27:18 +01:00
Hui Wang	ff7ab370b8	net: usb: cdc_ether: add support for Thales Cinterion PLS62-W modem ... [ Upstream commit eea8ce81fbb544e3caad1a1c876ba1af467b3d3c ] This modem has 7 interfaces, 5 of them are serial interfaces and are driven by cdc_acm, while 2 of them are wwan interfaces and are driven by cdc_ether: If 0: Abstract (modem) If 1: Abstract (modem) If 2: Abstract (modem) If 3: Abstract (modem) If 4: Abstract (modem) If 5: Ethernet Networking If 6: Ethernet Networking Without this change, the 2 network interfaces will be named to usb0 and usb1, our QA think the names are confusing and filed a bug on it. After applying this change, the name will be wwan0 and wwan1, and they could work well with modem manager. Signed-off-by: Hui Wang <hui.wang@canonical.com> Reviewed-by: Jiri Pirko <jiri@nvidia.com> Link: https://lore.kernel.org/r/20230105034249.10433-1-hui.wang@canonical.com Signed-off-by: Jakub Kicinski <kuba@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-02-01 08:27:16 +01:00
Andrew Halaney	120b8e527e	net: stmmac: enable all safety features by default ... [ Upstream commit fdfc76a116b5e9d3e98e6c96fe83b42d011d21d4 ] In the original implementation of dwmac5 commit 8bf993a587 ("net: stmmac: Add support for DWMAC5 and implement Safety Features") all safety features were enabled by default. Later it seems some implementations didn't have support for all the features, so in commit 5ac712dcdf ("net: stmmac: enable platform specific safety features") the safety_feat_cfg structure was added to the callback and defined for some platforms to selectively enable these safety features. The problem is that only certain platforms were given that software support. If the automotive safety package bit is set in the hardware features register the safety feature callback is called for the platform, and for platforms that didn't get a safety_feat_cfg defined this results in the following NULL pointer dereference: [ 7.933303] Call trace: [ 7.935812] dwmac5_safety_feat_config+0x20/0x170 [stmmac] [ 7.941455] __stmmac_open+0x16c/0x474 [stmmac] [ 7.946117] stmmac_open+0x38/0x70 [stmmac] [ 7.950414] __dev_open+0x100/0x1dc [ 7.954006] __dev_change_flags+0x18c/0x204 [ 7.958297] dev_change_flags+0x24/0x6c [ 7.962237] do_setlink+0x2b8/0xfa4 [ 7.965827] __rtnl_newlink+0x4ec/0x840 [ 7.969766] rtnl_newlink+0x50/0x80 [ 7.973353] rtnetlink_rcv_msg+0x12c/0x374 [ 7.977557] netlink_rcv_skb+0x5c/0x130 [ 7.981500] rtnetlink_rcv+0x18/0x2c [ 7.985172] netlink_unicast+0x2e8/0x340 [ 7.989197] netlink_sendmsg+0x1a8/0x420 [ 7.993222] ____sys_sendmsg+0x218/0x280 [ 7.997249] ___sys_sendmsg+0xac/0x100 [ 8.001103] __sys_sendmsg+0x84/0xe0 [ 8.004776] __arm64_sys_sendmsg+0x24/0x30 [ 8.008983] invoke_syscall+0x48/0x114 [ 8.012840] el0_svc_common.constprop.0+0xcc/0xec [ 8.017665] do_el0_svc+0x38/0xb0 [ 8.021071] el0_svc+0x2c/0x84 [ 8.024212] el0t_64_sync_handler+0xf4/0x120 [ 8.028598] el0t_64_sync+0x190/0x194 Go back to the original behavior, if the automotive safety package is found to be supported in hardware enable all the features unless safety_feat_cfg is passed in saying this particular platform only supports a subset of the features. Fixes: 5ac712dcdf ("net: stmmac: enable platform specific safety features") Reported-by: Ning Cai <ncai@quicinc.com> Signed-off-by: Andrew Halaney <ahalaney@redhat.com> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-02-01 08:27:15 +01:00
Rakesh Sankaranarayanan	6504afa263	net: dsa: microchip: ksz9477: port map correction in ALU table entry register ... [ Upstream commit 6c977c5c2e4c5d8ad1b604724cc344e38f96fe9b ] ALU table entry 2 register in KSZ9477 have bit positions reserved for forwarding port map. This field is referred in ksz9477_fdb_del() for clearing forward port map and alu table. But current fdb_del refer ALU table entry 3 register for accessing forward port map. Update ksz9477_fdb_del() to get forward port map from correct alu table entry register. With this bug, issue can be observed while deleting static MAC entries. Delete any specific MAC entry using "bridge fdb del" command. This should clear all the specified MAC entries. But it is observed that entries with self static alone are retained. Tested on LAN9370 EVB since ksz9477_fdb_del() is used common across LAN937x and KSZ series. Fixes: b987e98e50 ("dsa: add DSA switch driver for Microchip KSZ9477") Signed-off-by: Rakesh Sankaranarayanan <rakesh.sankaranarayanan@microchip.com> Reviewed-by: Vladimir Oltean <olteanv@gmail.com> Link: https://lore.kernel.org/r/20230118174735.702377-1-rakesh.sankaranarayanan@microchip.com Signed-off-by: Jakub Kicinski <kuba@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-02-01 08:27:14 +01:00
Kevin Hao	29e9c67bf3	octeontx2-pf: Fix the use of GFP_KERNEL in atomic context on rt ... [ Upstream commit 55ba18dc62deff5910c0fa64486dea1ff20832ff ] The commit 4af1b64f80fb ("octeontx2-pf: Fix lmtst ID used in aura free") uses the get/put_cpu() to protect the usage of percpu pointer in ->aura_freeptr() callback, but it also unnecessarily disable the preemption for the blockable memory allocation. The commit 87b93b678e95 ("octeontx2-pf: Avoid use of GFP_KERNEL in atomic context") tried to fix these sleep inside atomic warnings. But it only fix the one for the non-rt kernel. For the rt kernel, we still get the similar warnings like below. BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:46 in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 1, name: swapper/0 preempt_count: 1, expected: 0 RCU nest depth: 0, expected: 0 3 locks held by swapper/0/1: #0: ffff800009fc5fe8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x24/0x30 #1: ffff000100c276c0 (&mbox->lock){+.+.}-{3:3}, at: otx2_init_hw_resources+0x8c/0x3a4 #2: ffffffbfef6537e0 (&cpu_rcache->lock){+.+.}-{2:2}, at: alloc_iova_fast+0x1ac/0x2ac Preemption disabled at: [<ffff800008b1908c>] otx2_rq_aura_pool_init+0x14c/0x284 CPU: 20 PID: 1 Comm: swapper/0 Tainted: G W 6.2.0-rc3-rt1-yocto-preempt-rt #1 Hardware name: Marvell OcteonTX CN96XX board (DT) Call trace: dump_backtrace.part.0+0xe8/0xf4 show_stack+0x20/0x30 dump_stack_lvl+0x9c/0xd8 dump_stack+0x18/0x34 __might_resched+0x188/0x224 rt_spin_lock+0x64/0x110 alloc_iova_fast+0x1ac/0x2ac iommu_dma_alloc_iova+0xd4/0x110 __iommu_dma_map+0x80/0x144 iommu_dma_map_page+0xe8/0x260 dma_map_page_attrs+0xb4/0xc0 __otx2_alloc_rbuf+0x90/0x150 otx2_rq_aura_pool_init+0x1c8/0x284 otx2_init_hw_resources+0xe4/0x3a4 otx2_open+0xf0/0x610 __dev_open+0x104/0x224 __dev_change_flags+0x1e4/0x274 dev_change_flags+0x2c/0x7c ic_open_devs+0x124/0x2f8 ip_auto_config+0x180/0x42c do_one_initcall+0x90/0x4dc do_basic_setup+0x10c/0x14c kernel_init_freeable+0x10c/0x13c kernel_init+0x2c/0x140 ret_from_fork+0x10/0x20 Of course, we can shuffle the get/put_cpu() to only wrap the invocation of ->aura_freeptr() as what commit 87b93b678e95 does. But there are only two ->aura_freeptr() callbacks, otx2_aura_freeptr() and cn10k_aura_freeptr(). There is no usage of perpcu variable in the otx2_aura_freeptr() at all, so the get/put_cpu() seems redundant to it. We can move the get/put_cpu() into the corresponding callback which really has the percpu variable usage and avoid the sprinkling of get/put_cpu() in several places. Fixes: 4af1b64f80fb ("octeontx2-pf: Fix lmtst ID used in aura free") Signed-off-by: Kevin Hao <haokexin@gmail.com> Link: https://lore.kernel.org/r/20230118071300.3271125-1-haokexin@gmail.com Signed-off-by: Paolo Abeni <pabeni@redhat.com> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-02-01 08:27:14 +01:00
Jason Wang	edf0e509ce	virtio-net: correctly enable callback during start_xmit ... [ Upstream commit d71ebe8114b4bf622804b810f5e274069060a174 ] Commit a7766ef18b33("virtio_net: disable cb aggressively") enables virtqueue callback via the following statement: do { if (use_napi) virtqueue_disable_cb(sq->vq); free_old_xmit_skbs(sq, false); } while (use_napi && kick && unlikely(!virtqueue_enable_cb_delayed(sq->vq))); When NAPI is used and kick is false, the callback won't be enabled here. And when the virtqueue is about to be full, the tx will be disabled, but we still don't enable tx interrupt which will cause a TX hang. This could be observed when using pktgen with burst enabled. TO be consistent with the logic that tries to disable cb only for NAPI, fixing this by trying to enable delayed callback only when NAPI is enabled when the queue is about to be full. Fixes: a7766ef18b ("virtio_net: disable cb aggressively") Signed-off-by: Jason Wang <jasowang@redhat.com> Tested-by: Laurent Vivier <lvivier@redhat.com> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-02-01 08:27:12 +01:00
Robert Hancock	d3401c7624	net: macb: fix PTP TX timestamp failure due to packet padding ... [ Upstream commit 7b90f5a665acd46efbbfa677a3a3a18d01ad6487 ] PTP TX timestamp handling was observed to be broken with this driver when using the raw Layer 2 PTP encapsulation. ptp4l was not receiving the expected TX timestamp after transmitting a packet, causing it to enter a failure state. The problem appears to be due to the way that the driver pads packets which are smaller than the Ethernet minimum of 60 bytes. If headroom space was available in the SKB, this caused the driver to move the data back to utilize it. However, this appears to cause other data references in the SKB to become inconsistent. In particular, this caused the ptp_one_step_sync function to later (in the TX completion path) falsely detect the packet as a one-step SYNC packet, even when it was not, which caused the TX timestamp to not be processed when it should be. Using the headroom for this purpose seems like an unnecessary complexity as this is not a hot path in the driver, and in most cases it appears that there is sufficient tailroom to not require using the headroom anyway. Remove this usage of headroom to prevent this inconsistency from occurring and causing other problems. Fixes: 653e92a917 ("net: macb: add support for padding and fcs computation") Signed-off-by: Robert Hancock <robert.hancock@calian.com> Reviewed-by: Jacob Keller <jacob.e.keller@intel.com> Tested-by: Claudiu Beznea <claudiu.beznea@microchip.com> # on SAMA7G5 Reviewed-by: Claudiu Beznea <claudiu.beznea@microchip.com> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-02-01 08:27:12 +01:00
Randy Dunlap	a1b3e50e21	net: mlx5: eliminate anonymous module_init & module_exit ... [ Upstream commit 2c1e1b949024989e20907b84e11a731a50778416 ] Eliminate anonymous module_init() and module_exit(), which can lead to confusion or ambiguity when reading System.map, crashes/oops/bugs, or an initcall_debug log. Give each of these init and exit functions unique driver-specific names to eliminate the anonymous names. Example 1: (System.map) ffffffff832fc78c t init ffffffff832fc79e t init ffffffff832fc8f8 t init Example 2: (initcall_debug log) calling init+0x0/0x12 @ 1 initcall init+0x0/0x12 returned 0 after 15 usecs calling init+0x0/0x60 @ 1 initcall init+0x0/0x60 returned 0 after 2 usecs calling init+0x0/0x9a @ 1 initcall init+0x0/0x9a returned 0 after 74 usecs Fixes: e126ba97db ("mlx5: Add driver for Mellanox Connect-IB adapters") Signed-off-by: Randy Dunlap <rdunlap@infradead.org> Cc: Eli Cohen <eli@mellanox.com> Cc: Saeed Mahameed <saeedm@nvidia.com> Cc: Leon Romanovsky <leon@kernel.org> Cc: linux-rdma@vger.kernel.org Reviewed-by: Ira Weiny <ira.weiny@intel.com> Reviewed-by: Leon Romanovsky <leonro@nvidia.com> Signed-off-by: Saeed Mahameed <saeedm@nvidia.com> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-02-01 08:27:12 +01:00