178 Commits

Author	SHA1	Message	Date
Greg Kroah-Hartman	5155624549	Merge tag 'android13-5.15.94_r00' into android13-5.15 ... This is the merge of the upstream LTS release of 5.15.94 into the android13-5.15 branch. It contains the following commits: * 5448b2fda8 Merge 5.15.94 into android13-5.15-lts |\ | * e2c1a934fd Linux 5.15.94 | * 17170acdc7 Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions | * 5122e0e443 KVM: x86: Mitigate the cross-thread return address predictions bug | * 8f12dcab90 x86/speculation: Identify processors vulnerable to SMT RSB predictions | * e63c434de8 drm/i915: Fix VBT DSI DVO port handling | * fc88c68381 drm/i915: Initialize the obj flags for shmem objects | * 2e557c8ca2 drm/amdgpu/fence: Fix oops due to non-matching drm_sched init/fini | * 3af734f3ea Fix page corruption caused by racy check in __free_pages | * c94ce5ea68 arm64: dts: meson-axg: Make mmc host controller interrupts level-sensitive | * b796c02df3 arm64: dts: meson-g12-common: Make mmc host controller interrupts level-sensitive | * 5d9b771f53 arm64: dts: meson-gx: Make mmc host controller interrupts level-sensitive | * ac39dce119 rtmutex: Ensure that the top waiter is always woken up | * 86f7e42393 powerpc/64s/interrupt: Fix interrupt exit race with security mitigation switch | * 2907cf3f2e riscv: Fixup race condition on PG_dcache_clean in flush_icache_pte | * beb1cefa3c ceph: flush cap releases when the session is flushed | * 86733ab239 clk: ingenic: jz4760: Update M/N/OD calculation algorithm | * 239e927eb2 usb: typec: altmodes/displayport: Fix probe pin assign check | * 48aecce116 usb: core: add quirk for Alcor Link AK9563 smartcard reader | * a8178bb1c7 btrfs: free device in btrfs_close_devices for a single device filesystem | * 8d13f2c3e2 mptcp: be careful on subflow status propagation on errors | * 25141fb411 net: USB: Fix wrong-direction WARNING in plusb.c | * d1fba1e096 cifs: Fix use-after-free in rdata->read_into_pages() | * 1b83e7e174 pinctrl: intel: Restore the pins that used to be in Direct IRQ mode | * f5f025b703 spi: dw: Fix wrong FIFO level setting for long xfers | * 71668706fb pinctrl: single: fix potential NULL dereference | * a2a1065739 pinctrl: aspeed: Fix confusing types in return value | * 99450163bc pinctrl: mediatek: Fix the drive register definition of some Pins | * 9f0d2c2684 ASoC: topology: Return -ENOMEM on memory allocation failure | * 1a52ef89e3 riscv: stacktrace: Fix missing the first frame | * 5fb8154334 ALSA: pci: lx6464es: fix a debug loop | * 105ea562f6 selftests: forwarding: lib: quote the sysctl values | * 528e3f3a4b rds: rds_rm_zerocopy_callback() use list_first_entry() | * 48d6d8f2f6 igc: Add ndo_tx_timeout support | * 62ff7dd961 net/mlx5: Serialize module cleanup with reload and remove | * 95d2394f84 net/mlx5: fw_tracer, Zero consumer index when reloading the tracer | * ab7f3f6a9d net/mlx5: fw_tracer, Clear load bit when freeing string DBs buffers | * 193528646e net/mlx5e: IPoIB, Show unknown speed instead of error | * 7c6e8eb617 net/mlx5: Bridge, fix ageing of peer FDB entries | * 49ece61a07 net/mlx5e: Update rx ring hw mtu upon each rx-fcs flag change | * 31172267ba net/mlx5e: Introduce the mlx5e_flush_rq function | * e4e4e93d31 net/mlx5e: Move repeating clear_bit in mlx5e_rx_reporter_err_rq_cqe_recover | * 3f18b9ed8c net: mscc: ocelot: fix VCAP filters not matching on MAC with "protocol 802.1Q" | * 6acb5d853b net: dsa: mt7530: don't change PVC_EG_TAG when CPU port becomes VLAN-aware | * ca834a0178 ice: Do not use WQ_MEM_RECLAIM flag for workqueue | * 70d48c7992 uapi: add missing ip/ipv6 header dependencies for linux/stddef.h | * 3cec44036f ionic: clean interrupt before enabling queue to avoid credit race | * fad12afe87 net: phy: meson-gxl: use MMD access dummy stubs for GXL, internal PHY | * d23385a200 bonding: fix error checking in bond_debug_reregister() | * 11006d9d08 net: phylink: move phy_device_free() to correctly release phy device | * fb022d7b1c xfrm: fix bug with DSCP copy to v6 from v4 tunnel | * 6fe1ad42af RDMA/usnic: use iommu_map_atomic() under spin_lock() | * 8f5fe1cd8e RDMA/irdma: Fix potential NULL-ptr-dereference | * 1b4ef90cbc IB/IPoIB: Fix legacy IPoIB due to wrong number of queues | * 5dc688fae6 xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr() | * 9bae58d58b IB/hfi1: Restore allocated resources on failed copyout | * 558b1fa01c xfrm: compat: change expression for switch in xfrm_xlate64 | * 238b38e89f can: j1939: do not wait 250 ms if the same addr was already claimed | * d859184b60 of/address: Return an error when no valid dma-ranges are found | * 70f37b3118 tracing: Fix poll() and select() do not work on per_cpu trace_pipe and trace_pipe_raw | * df01749503 ALSA: hda/realtek: Enable mute/micmute LEDs on HP Elitebook, 645 G9 | * ca9d542203 ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book2 Pro 360 | * 706b6d86a6 ALSA: emux: Avoid potential array out-of-bound in snd_emux_xg_control() | * 731fc29de6 ALSA: hda/realtek: Add Positivo N14KP6-TG | * b938059807 btrfs: zlib: zero-initialize zlib workspace | * e65faa7e39 btrfs: limit device extents to the device size | * 2e4dd07fda migrate: hugetlb: check for hugetlb shared PMD in node migration | * 072e7412e8 mm/migration: return errno when isolate_huge_page failed * | f977f92131 Revert "nvmem: core: remove nvmem_config wp_gpio" * | 787413edad Merge 5.15.93 into android13-5.15-lts |\| | * 85d7786c66 Linux 5.15.93 | * 6e2fac197d bpf: Skip invalid kfunc call in backtrack_insn | * 46c9088cab gfs2: Always check inode size of inline inodes | * 8eb2e58a92 gfs2: Cosmetic gfs2_dinode_{in,out} cleanup | * e4991910f1 wifi: brcmfmac: Check the count value of channel spec to prevent out-of-bounds reads | * 97ccfffcc0 f2fs: fix to do sanity check on i_extra_isize in is_alive() | * 64fa364ad3 fbdev: smscufx: fix error handling code in ufx_usb_probe | * a77141a063 ovl: Use "buf" flexible array for memcpy() destination | * 1692fedd0f fs/ntfs3: Validate attribute data and valid sizes | * a5b9cb7276 powerpc/imc-pmu: Revert nest_init_lock to being a mutex | * 3691f43a09 iio:adc:twl6030: Enable measurement of VAC | * 8c84f50390 bpf: Do not reject when the stack read size is different from the tracked scalar size | * 14b6198abb bpf: Fix incorrect state pruning for <8B spill/fill | * 575a9f6fef phy: qcom-qmp-combo: fix runtime suspend | * e58df87394 phy: qcom-qmp-combo: fix broken power on | * 368ea32e0a phy: qcom-qmp-usb: fix memleak on probe deferral | * 2f27d3811a phy: qcom-qmp-combo: fix memleak on probe deferral | * 0cb10ddab7 phy: qcom-qmp-combo: disable runtime PM on unbind | * 0ef5ffe116 serial: 8250_dma: Fix DMA Rx rearm race | * e30328f599 serial: 8250_dma: Fix DMA Rx completion race | * a5a171f61a nvmem: core: fix cell removal on error | * 6d9fa3ff65 nvmem: core: remove nvmem_config wp_gpio | * adf80e072c nvmem: core: initialise nvmem->id early | * e3ebc3e23b drm/i915: Fix potential bit_17 double-free | * 997bed0f3c Squashfs: fix handling and sanity checking of xattr_ids count | * 7a0cfaf9d4 highmem: round down the address passed to kunmap_flush_on_unmap() | * 5dbe1ebd56 mm/swapfile: add cond_resched() in get_swap_pages() | * daf8241804 fpga: stratix10-soc: Fix return value check in s10_ops_write_init() | * afd32b6831 x86/debug: Fix stack recursion caused by wrongly ordered DR7 accesses | * 066ecbf1a5 kernel/irq/irqdomain.c: fix memory leak with using debugfs_lookup() | * 481bf49f58 usb: gadget: f_uac2: Fix incorrect increment of bNumEndpoints | * fdf40e5824 mm: hugetlb: proc: check for hugetlb shared PMD in /proc/PID/smaps | * 6c300351c5 riscv: disable generation of unwind tables | * a5c275add9 parisc: Wire up PTRACE_GETREGS/PTRACE_SETREGS for compat case | * a964decd13 parisc: Fix return code of pdc_iodc_print() | * 488eaf0625 nvmem: qcom-spmi-sdam: fix module autoloading | * 8569beb66f iio: imu: fxos8700: fix MAGN sensor scale and unit | * 8aa5cdcfaf iio: imu: fxos8700: remove definition FXOS8700_CTRL_ODR_MIN | * 4112ba1ad5 iio: imu: fxos8700: fix failed initialization ODR mode assignment | * abf7b2ba51 iio: imu: fxos8700: fix incorrect ODR mode readback | * 412757741c iio: imu: fxos8700: fix swapped ACCEL and MAGN channels readback | * 34909532b1 iio: imu: fxos8700: fix map label of channel type to MAGN sensor | * 8346eb4987 iio: imu: fxos8700: fix IMU data bits returned to user space | * 7567cdf3ce iio: imu: fxos8700: fix incomplete ACCEL and MAGN channels readback | * 6969852220 iio: imu: fxos8700: fix ACCEL measurement range selection | * cdacfb2205 iio:adc:twl6030: Enable measurements of VUSB, VBAT and others | * 9988063dce iio: adc: berlin2-adc: Add missing of_node_put() in error path | * c691a5c0fd iio: hid: fix the retval in gyro_3d_capture_sample | * ef80a34699 iio: hid: fix the retval in accel_3d_capture_sample | * c4eae85c73 efi: Accept version 2 of memory attributes table | * 710db82063 ALSA: hda/realtek: Add Acer Predator PH315-54 | * 3fbddf86d9 watchdog: diag288_wdt: fix __diag288() inline assembly | * 700dd5bc72 watchdog: diag288_wdt: do not use stack buffers for hardware data | * 21bc51e29e net: qrtr: free memory on error path in radix_tree_insert() | * dccbd062d7 fbcon: Check font dimension limits | * 5d7500d991 Input: i8042 - add Clevo PCX0DX to i8042 quirk table | * fc9e27f3ba vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF | * 9ba1188a71 usb: gadget: f_fs: Fix unbalanced spinlock in __ffs_ep0_queue_wait | * fe86480e90 usb: dwc3: qcom: enable vbus override when in OTG dr-mode | * a412fe7baf iio: adc: stm32-dfsdm: fill module aliases | * 9944659398 drm/amd/display: Fix timing not changning when freesync video is enabled | * a3967128bc net/x25: Fix to not accept on connected socket | * 396ea318e7 platform/x86: gigabyte-wmi: add support for B450M DS3H WIFI-CF | * 1577524633 platform/x86: dell-wmi: Add a keymap for KEY_MUTE in type 0x0010 table | * 540cea9f9b i2c: rk3x: fix a bunch of kernel-doc warnings | * 0aaabdb900 scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress | * 17b738590b scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress | * 8cd0499f9c perf/x86/intel: Add Emerald Rapids | * 7093515370 scsi: target: core: Fix warning on RT kernels | * b7960f5436 i2c: mxs: suppress probe-deferral error message | * b9b87fc34b i2c: designware-pci: Add new PCI IDs for AMD NAVI GPU | * d8fc0b5fb3 efi: fix potential NULL deref in efi_mem_reserve_persistent | * f423c2efd5 net: openvswitch: fix flow memory leak in ovs_flow_cmd_new | * 7985028647 virtio-net: Keep stop() to follow mirror sequence of open() | * 5d884f9e80 selftests: net: udpgso_bench_tx: Cater for pending datagrams zerocopy benchmarking | * 63aa63af3a selftests: net: udpgso_bench: Fix racing bug between the rx/tx programs | * d41a3f9cc2 selftests: net: udpgso_bench_rx/tx: Stop when wrong CLI args are provided | * 5af98283e5 selftests: net: udpgso_bench_rx: Fix 'used uninitialized' compiler warning | * 89e0701e03 ata: libata: Fix sata_down_spd_limit() when no link speed is reported | * 9ab896775f can: j1939: fix errant WARN_ON_ONCE in j1939_session_deactivate | * 02d77d98e0 igc: return an error if the mac type is unknown in igc_ptp_systim_to_hwtstamp() | * 04a7355820 riscv: kprobe: Fixup kernel panic when probing an illegal position | * 206c367b6a ip/ip6_gre: Fix non-point-to-point tunnel not generating IPv6 link local address | * 90178bc0f2 ip/ip6_gre: Fix changing addr gen mode not generating IPv6 link local address | * dfe2f0ea38 net: phy: meson-gxl: Add generic dummy stubs for MMD register access | * b7398efe24 squashfs: harden sanity check in squashfs_read_xattr_id_table | * 89a69216f1 netfilter: br_netfilter: disable sabotage_in hook after first suppression | * cdb444e73f drm/i915/adlp: Fix typo for reference clock | * 960f20d858 drm/i915/guc: Fix locking when searching for a hung request | * c27e0eac56 netrom: Fix use-after-free caused by accept on already connected socket | * 511c922c5b block, bfq: fix uaf for bfqq in bic_set_bfqq() | * a62c129dcb block, bfq: replace 0/1 with false/true in bic apis | * 37a744a068 block/bfq-iosched.c: use "false" rather than "BLK_RW_ASYNC" | * 2cd1e9c013 net: phy: dp83822: Fix null pointer access on DP83825/DP83826 devices | * 18c18c2110 sfc: correctly advertise tunneled IPv6 segmentation | * 878b06f60a dpaa2-eth: execute xdp_do_flush() before napi_complete_done() | * 3b5774cd6b dpaa_eth: execute xdp_do_flush() before napi_complete_done() | * 5a7040a649 virtio-net: execute xdp_do_flush() before napi_complete_done() | * 94add5b272 qede: execute xdp_do_flush() before napi_complete_done() | * a273f8e3ab ice: Prevent set_channel from changing queues while RDMA active | * b432e183c2 fix "direction" argument of iov_iter_kvec() | * d8b8306e96 fix iov_iter_bvec() "direction" argument | * 389c7c0ef9 READ is "data destination", not source... | * 7a3649bf5b WRITE is "data source", not destination... | * 83cc6a7bb7 vhost/net: Clear the pending messages when the backend is removed | * 7c7d344bc3 scsi: Revert "scsi: core: map PQ=1, PDT=other values to SCSI_SCAN_TARGET_PRESENT" | * 4b199dc094 drm/vc4: hdmi: make CEC adapter name unique | * dc1f8ab25a arm64: dts: imx8mm: Fix pad control for UART1_DTE_RX | * c681d7a4ed bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener | * 34ad5d8885 bpf: Fix to preserve reg parent/live fields when copying range info | * 7b86f9ab56 bpf: Support <8-byte scalar spill and refill | * 1b9256c962 ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path() | * b7abeb6916 bpf: Fix a possible task gone issue with bpf_send_signal[_thread]() helpers | * cfcc2390db ASoC: Intel: bytcr_wm5102: Drop reference count of ACPI device after use | * b4b204565a ASoC: Intel: bytcr_rt5640: Drop reference count of ACPI device after use | * 1f1e7635c5 ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use | * 41d323c352 ASoC: Intel: bytcht_es8316: Drop reference count of ACPI device after use | * 6a9990e1d9 ASoC: Intel: bytcht_es8316: move comment to the right place | * ffcdf35455 ASoC: Intel: boards: fix spelling in comments | * bd0b17ab1b bus: sunxi-rsb: Fix error handling in sunxi_rsb_init() | * 5f4543c938 firewire: fix memory leak for payload of request subaction to IEC 61883-1 FCP region * | 5020746bff Merge 5.15.92 into android13-5.15-lts |\| | * e515b9902f Linux 5.15.92 | * c7caf669b8 net: mctp: purge receive queues on sk destruction | * 046de74f9a net: fix NULL pointer in skb_segment_list | * 7ab3376703 selftests: Provide local define of __cpuid_count() | * e92e311ced selftests/vm: remove ARRAY_SIZE define from individual tests | * c9e52db900 tools: fix ARRAY_SIZE defines in tools and selftests hdrs | * c1aa0dd52d Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt | * 02e61196c5 ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems | * 79dd676b44 extcon: usbc-tusb320: fix kernel-doc warning | * c2bd60ef20 ext4: fix bad checksum after online resize | * 4cd1e18bc0 cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() | * 43acd767bd dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init | * a54c5ad007 HID: playstation: sanity check DualSense calibration data. | * 6d7686cc11 blk-cgroup: fix missing pd_online_fn() while activating policy | * 2144859229 erofs/zmap.c: Fix incorrect offset calculation | * 0dfef50313 bpf: Skip task with pid=1 in send_signal_common() | * e8bb772f74 firmware: arm_scmi: Clear stale xfer->hdr.status | * 80cb9f1a76 arm64: dts: imx8mq-thor96: fix no-mmc property for SDHCI | * 162fad24d2 arm64: dts: freescale: Fix pca954x i2c-mux node names | * 82ad105e1a ARM: dts: vf610: Fix pca9548 i2c-mux node names | * 5aee5f33e0 ARM: dts: imx: Fix pca9547 i2c-mux node name * | 7e0097918f Revert "scsi: ufs: core: Fix devfreq deadlocks" * | 6ce0fcdcc2 Revert "thermal/core: Rename 'trips' to 'num_trips'" * | 49a5232dfb Revert "thermal: Validate new state in cur_state_store()" * | be0ca2fc43 Revert "thermal/core: fix error code in __thermal_cooling_device_register()" * | 9617a003cc Revert "thermal: core: call put_device() only after device_register() fails" * | ccb2c48531 Revert "cpufreq: governor: Use kobject release() method to free dbs_data" * | 0108f014a5 Revert "gpio: use raw spinlock for gpio chip shadowed data" * | 1d2449f6be Revert "gpio: mxc: Protect GPIO irqchip RMW with bgpio spinlock" * | 5f51aedcba Revert "gpio: mxc: Unlock on error path in mxc_flip_edge()" * | 7622c50ba6 Merge 5.15.91 into android13-5.15-lts |\| | * 9cf4111cdf Linux 5.15.91 | * 14cc13e433 perf/x86/amd: fix potential integer overflow on shift of a int | * 033636b322 netfilter: conntrack: unify established states for SCTP paths | * 0b08201158 x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL | * b577400367 block: fix and cleanup bio_check_ro | * 1d152437e4 kbuild: Allow kernel installation packaging to override pkg-config | * a196468858 cpufreq: governor: Use kobject release() method to free dbs_data | * 7c513ced0d cpufreq: Move to_gov_attr_set() to cpufreq.h | * cf7a08622d Revert "Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode" | * 53c5d61198 tools: gpio: fix -c option of gpio-event-mon | * a7d1a303ff treewide: fix up files incorrectly marked executable | * 046fe53907 net: mdio-mux-meson-g12a: force internal PHY off on mux switch | * 86bdccde78 net/tg3: resolve deadlock in tg3_reset_task() during EEH | * 4364bf79d8 thermal: intel: int340x: Add locking to int340x_thermal_get_trip_type() | * e69c3a0d9d net: mctp: mark socks as dead on unhash, prevent re-add | * 954cc215cd net: ravb: Fix possible hang if RIS2_QFF1 happen | * 0f7218bf0a net: ravb: Fix lack of register setting after system resumed for Gen3 | * 3db4ca2938 ravb: Rename "no_ptp_cfg_active" and "ptp_cfg_active" variables | * 621f296f11 gpio: mxc: Unlock on error path in mxc_flip_edge() | * 071a839286 nvme: fix passthrough csi check | * 614471b7f7 riscv/kprobe: Fix instruction simulation of JALR | * 3391bd4235 sctp: fail if no bound addresses can be used for a given scope | * b0784860e1 net/sched: sch_taprio: do not schedule in taprio_reset() | * d2d3ab1b1d netrom: Fix use-after-free of a listening socket. | * 9df5ab02c6 netfilter: conntrack: fix vtag checks for ABORT/SHUTDOWN_COMPLETE | * ca3cf94776 ipv4: prevent potential spectre v1 gadget in fib_metrics_match() | * d50e7348b4 ipv4: prevent potential spectre v1 gadget in ip_metrics_convert() | * ead06e3449 netlink: annotate data races around sk_state | * c4eb423c6b netlink: annotate data races around dst_portid and dst_group | * fac9b69a93 netlink: annotate data races around nlk->portid | * 8a13595600 netfilter: nft_set_rbtree: skip elements in transaction from garbage collection | * 2bf1435fa1 netfilter: nft_set_rbtree: Switch to node list walk for overlap detection | * e481654426 drm/i915/selftest: fix intel_selftest_modify_policy argument types | * 66689a72ba net: fix UaF in netns ops registration error path | * 41b74e95f2 netlink: prevent potential spectre v1 gadgets | * 2f29d780bd i2c: designware: use casting of u64 in clock multiplication to avoid overflow | * b03f7ed9af scsi: ufs: core: Fix devfreq deadlocks | * 858d7e9218 net: mana: Fix IRQ name - add PCI and queue number | * bff5243bd3 EDAC/qcom: Do not pass llcc_driv_data as edac_device_ctl_info's pvt_info | * 5eedf4568d EDAC/device: Respect any driver-supplied workqueue polling value | * 4b7dfd0a68 ARM: 9280/1: mm: fix warning on phys_addr_t to void pointer assignment | * 7807871f28 ipv6: fix reachability confirmation with proxy_ndp | * f9a22f6fa1 thermal: intel: int340x: Protect trip temperature from concurrent updates | * 036093c08d KVM: arm64: GICv4.1: Fix race with doorbell on VPE activation/deactivation | * c56683c062 KVM: x86/vmx: Do not skip segment attributes if unusable bit is set | * e91308e637 ovl: fail on invalid uid/gid mapping at copy up | * 33a9657d67 ksmbd: limit pdu length size according to connection status | * 8d83a758ee ksmbd: downgrade ndr version error message to debug | * 87a7f38a90 ksmbd: do not sign response to session request for guest login | * 4210c3555d ksmbd: add max connections parameter | * cc6742b160 ksmbd: add smbd max io size parameter | * 3c8a5648a5 i2c: mv64xxx: Add atomic_xfer method to driver | * e619ab4fb3 i2c: mv64xxx: Remove shutdown method from driver | * 4b83bc6f87 cifs: Fix oops due to uncleared server->smbd_conn in reconnect | * 89042d3d85 ftrace/scripts: Update the instructions for ftrace-bisect.sh | * 592ba7116f trace_events_hist: add check for return value of 'create_hist_field' | * b0af180514 tracing: Make sure trace_printk() can output as soon as it can be used | * 91135d7233 module: Don't wait for GOING modules | * 85ee9919ad KVM: SVM: fix tsc scaling cache logic | * f0227eca97 scsi: hpsa: Fix allocation size for scsi_host_alloc() | * e5af9a458a drm/amdgpu: complete gfxoff allow signal during suspend without delay | * 62b9e9f921 Bluetooth: hci_sync: cancel cmd_timer if hci_open failed | * 21998acd31 exit: Use READ_ONCE() for all oops/warn limit reads | * e82b1598eb docs: Fix path paste-o for /sys/kernel/warn_count | * 1c51698ad6 panic: Expose "warn_count" to sysfs | * 0691ddae56 panic: Introduce warn_limit | * 7b98914a6c panic: Consolidate open-coded panic_on_warn checks | * fc636b1362 exit: Allow oops_limit to be disabled | * 339f8a8e52 exit: Expose "oops_count" to sysfs | * f80fb0001f exit: Put an upper limit on how often we can oops | * 2857ce7f47 panic: Separate sysctl logic from CONFIG_SMP | * e156d4dcb0 ia64: make IA64_MCA_RECOVERY bool instead of tristate | * 9024f77224 csky: Fix function name in csky_alignment() and die() | * 2ea497d153 h8300: Fix build errors from do_exit() to make_task_dead() transition | * a452ca0228 hexagon: Fix function name in die() | * 3b39f47474 objtool: Add a missing comma to avoid string concatenation | * 39a26d8721 exit: Add and use make_task_dead. | * b5c1acaa43 kasan: no need to unset panic_on_warn in end_report() | * b5c967dc68 ubsan: no need to unset panic_on_warn in ubsan_epilogue() | * e4cd210032 panic: unset panic_on_warn inside panic() | * 191f1f1f6a kernel/panic: move panic sysctls to its own file | * 654f6e8512 sysctl: add a new register_sysctl_init() interface | * 3aa991cde9 fs: reiserfs: remove useless new_opts in reiserfs_remount | * d830531f8f x86: ACPI: cstate: Optimize C3 entry on AMD CPUs | * 1f54762231 drm/i915: Remove unused variable | * 6e10127093 Revert "selftests/bpf: check null propagation only neither reg is PTR_TO_BTF_ID" | * 619ee31b96 drm/i915: Allow switching away via vga-switcheroo if uninitialized | * ea435ba9eb firmware: coreboot: Check size of table entry and use flex-array | * a4e70bcf2e lockref: stop doing cpu_relax in the cmpxchg loop | * b0ee61f5ee platform/x86: asus-nb-wmi: Add alternate mapping for KEY_SCREENLOCK | * e8d2f7f566 platform/x86: touchscreen_dmi: Add info for the CSL Panther Tab HD | * 2e0a8bacbe r8152: add vendor/device ID pair for Microsoft Devkit | * d4b717e34d scsi: hisi_sas: Set a port invalid only if there are no devices attached when refreshing port id | * e15750aa28 KVM: s390: interrupt: use READ_ONCE() before cmpxchg() | * 9300c65207 spi: spidev: remove debug messages that access spidev->spi without locking | * 48ff5d3812 ASoC: fsl-asoc-card: Fix naming of AC'97 CODEC widgets | * 5001ffb31d ASoC: fsl_ssi: Rename AC'97 streams to avoid collisions with AC'97 CODEC | * b76120e206 cpufreq: armada-37xx: stop using 0 as NULL pointer | * eda26fa856 perf/x86/intel/uncore: Add Emerald Rapids | * 544f9d4e9d perf/x86/msr: Add Emerald Rapids | * b1eb964d78 s390: expicitly align _edata and _end symbols on page boundary | * fb45ec279b s390/debug: add _ASM_S390_ prefix to header guard | * cd488abed9 drm: Add orientation quirk for Lenovo ideapad D330-10IGL | * ff7ab370b8 net: usb: cdc_ether: add support for Thales Cinterion PLS62-W modem | * d6935084e4 ASoC: fsl_micfil: Correct the number of steps on SX controls | * ac07316b2d cpufreq: Add SM6375 to cpufreq-dt-platdev blocklist | * f0e6dcae14 kcsan: test: don't put the expect array on the stack | * c51c0b3754 cpufreq: Add Tegra234 to cpufreq-dt-platdev blocklist | * 28e4e8ca9e scsi: iscsi: Fix multiple iSCSI session unbind events sent to userspace | * 14b1df2004 tcp: fix rate_app_limited to default to 1 | * 120b8e527e net: stmmac: enable all safety features by default | * a7d736cc3c thermal: core: call put_device() only after device_register() fails | * ed08f958e4 thermal/core: fix error code in __thermal_cooling_device_register() | * 108a6f91e2 thermal: Validate new state in cur_state_store() | * bd0ea77edf thermal/core: Rename 'trips' to 'num_trips' | * 521c6ebd4f thermal/core: Remove duplicate information when an error occurs | * 6504afa263 net: dsa: microchip: ksz9477: port map correction in ALU table entry register | * 18346db185 selftests/net: toeplitz: fix race on tpacket_v3 block close | * caa28c7c83 driver core: Fix test_async_probe_init saves device in wrong array | * 89c62cee5d w1: fix WARNING after calling w1_process() | * 3d0eafe413 w1: fix deadloop in __w1_remove_master_device() | * 7701a4bd45 device property: fix of node refcount leak in fwnode_graph_get_next_endpoint() | * ed0d8f731e ptdma: pt_core_execute_cmd() should use spinlock | * 29e9c67bf3 octeontx2-pf: Fix the use of GFP_KERNEL in atomic context on rt | * 03bff5819a tcp: avoid the lookup process failing to get sk in ehash table | * 5bd69d2ea8 nvme-pci: fix timeout request state check | * 39178dfe86 drm/amd/display: fix issues with driver unload | * 9a5a537e14 phy: phy-can-transceiver: Skip warning if no "max-bitrate" | * 4095065b59 dmaengine: xilinx_dma: call of_node_put() when breaking out of for_each_child_of_node() | * 5bd3c1c1bc cifs: fix potential deadlock in cache_refresh_path() | * 1a2a47b85c HID: betop: check shape of output reports | * b2a7309743 l2tp: prevent lockdep issue in l2tp_tunnel_register() | * edf0e509ce virtio-net: correctly enable callback during start_xmit | * d3401c7624 net: macb: fix PTP TX timestamp failure due to packet padding | * 71c6019655 dmaengine: Fix double increment of client_count in dma_chan_get() | * 1e7919f0b1 drm/panfrost: fix GENERIC_ATOMIC64 dependency | * a1b3e50e21 net: mlx5: eliminate anonymous module_init & module_exit | * 09e3fb6f53 net/mlx5: E-switch, Fix setting of reserved fields on MODIFY_SCHEDULING_ELEMENT | * 01a6e10810 net: ipa: disable ipa interrupt during suspend | * 98aec50ff7 Bluetooth: Fix possible deadlock in rfcomm_sk_state_change | * 0e59f60b74 usb: gadget: f_fs: Ensure ep0req is dequeued before free_request | * ae8e136bca usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait | * f25cd2b731 HID: revert CHERRY_MOUSE_000C quirk | * 39483511fd pinctrl: rockchip: fix mux route data for rk3568 | * 1dae88a0b4 net: stmmac: fix invalid call to mdiobus_get_phy() | * 6716838bf8 HID: check empty report_list in bigben_probe() | * 2b49568254 HID: check empty report_list in hid_validate_values() | * ad67de330d net: mdio: validate parameter addr in mdiobus_get_phy() | * 4869129379 net: usb: sr9700: Handle negative len | * 2827c4eb42 octeontx2-pf: Avoid use of GFP_KERNEL in atomic context | * 77e8ed776c l2tp: close all race conditions in l2tp_tunnel_register() | * af22d2c0b4 l2tp: convert l2tp_tunnel_list to idr | * 22c7d45ca3 l2tp: Don't sleep and disable BH under writer-side sk_callback_lock | * 87d9205d9a l2tp: Serialize access to sk_user_data with sk_callback_lock | * c53acbf2fa net/sched: sch_taprio: fix possible use-after-free | * 40516d042b net: stmmac: Fix queue statistics reading | * 620aa67f80 pinctrl: rockchip: fix reading pull type on rk3568 | * ddca674af1 pinctrl/rockchip: add error handling for pull/drive register getters | * 259ab8fb8c pinctrl/rockchip: Use temporary variable for struct device | * 8cbf932c5c wifi: rndis_wlan: Prevent buffer overflow in rndis_query_oid | * f792d26e5c gpio: mxc: Always set GPIOs used as interrupt source to INPUT mode | * 8335f877ef gpio: mxc: Protect GPIO irqchip RMW with bgpio spinlock | * fb4fb3d267 gpio: use raw spinlock for gpio chip shadowed data | * 52e3eebfe6 sch_htb: Avoid grafting on htb_destroy_class_offload when destroying htb | * 8232e5a84d net: enetc: avoid deadlock in enetc_tx_onestep_tstamp() | * 95347e41ca net: wan: Add checks for NULL for utdm in undo_uhdlc_init and unmap_si_regs | * 7f129927fe net: nfc: Fix use-after-free in local_cleanup() | * 397aaac884 phy: rockchip-inno-usb2: Fix missing clk_disable_unprepare() in rockchip_usb2phy_power_on() | * 01bdcc73db bpf: Fix pointer-leak due to insufficient speculative store bypass mitigation | * 261e2f12b6 amd-xgbe: Delay AN timeout during KR training | * a8cf4af544 amd-xgbe: TX Flow Ctrl Registers are h/w ver dependent | * 8e897cb674 ARM: dts: at91: sam9x60: fix the ddr clock for sam9x60 | * 0a27dcd534 NFSD: fix use-after-free in nfsd4_ssc_setup_dul() | * 24af570c99 phy: ti: fix Kconfig warning and operator precedence | * 631fc36685 arm64: dts: qcom: msm8992-libra: Fix the memory map | * dda20ffec8 arm64: dts: qcom: msm8992-libra: Add CPU regulators | * 37ba5e9293 arm64: dts: qcom: msm8992: Don't use sfpb mutex | * bab87524f6 PM: AVS: qcom-cpr: Fix an error handling path in cpr_probe() | * b7a479c764 affs: initialize fsdata in affs_truncate() | * 623d111689 IB/hfi1: Remove user expected buffer invalidate race | * 47d5fc0dcd IB/hfi1: Immediately remove invalid memory from hardware | * 85caef2cfd IB/hfi1: Fix expected receive setup error exit issues | * cb193984d4 IB/hfi1: Reserve user expected TIDs | * 891ddfae39 IB/hfi1: Reject a zero-length user expected buffer | * 362c948972 RDMA/core: Fix ib block iterator counter overflow | * e26c571c3b tomoyo: fix broken dependency on *.conf.default | * 7dfe83ecc3 firmware: arm_scmi: Harden shared memory access in fetch_notification | * a653dbb70c firmware: arm_scmi: Harden shared memory access in fetch_response | * caffa7fed1 EDAC/highbank: Fix memory leak in highbank_mc_probe() | * 95de286200 reset: uniphier-glue: Fix possible null-ptr-deref | * 4773a8cf9a reset: uniphier-glue: Use reset_control_bulk API | * 7b33accc8f soc: imx8m: Fix incorrect check for of_clk_get_by_name() | * f07427f8d9 arm64: dts: imx8mm-venice-gw7901: fix USB2 controller OC polarity | * c4cb73febe HID: intel_ish-hid: Add check for ishtp_dma_tx_map | * 25f97c9883 ARM: imx: add missing of_node_put() | * 3e9d79ded9 arm64: dts: imx8mm-beacon: Fix ecspi2 pinmux | * 5381350761 ARM: dts: imx6qdl-gw560x: Remove incorrect 'uart-has-rtscts' | * 0e4bba1656 ARM: dts: imx7d-pico: Use 'clock-frequency' | * 108cf4c6d5 ARM: dts: imx6ul-pico-dwarf: Use 'clock-frequency' | * 207c9e64ed arm64: dts: imx8mp-phycore-som: Remove invalid PMIC property | * 7ce380fe75 dmaengine: ti: k3-udma: Do conditional decrement of UDMA_CHAN_RT_PEER_BCNT_REG | * edba9b7a70 memory: mvebu-devbus: Fix missing clk_disable_unprepare in mvebu_devbus_probe() | * e66f6949da memory: atmel-sdramc: Fix missing clk_disable_unprepare in atmel_ramc_probe() | * eda11ab556 memory: tegra: Remove clients SID override programming * | cab35cbd71 Revert "xhci: Add update_hub_device override for PCI xHCI hosts" * | 29e8f224d8 Revert "xhci: Detect lpm incapable xHC USB3 roothub ports from ACPI tables" * | 5739b27e8f Revert "xhci: Add a flag to disable USB3 lpm on a xhci root port level." * | 5b60fdf2e0 Merge 5.15.90 into android13-5.15-lts |\| | * aabd5ba7e9 Linux 5.15.90 | * 4b6f8263e9 io_uring/rw: remove leftover debug statement | * b10acfcd61 io_uring/rw: ensure kiocb_end_write() is always called | * 124fb13cc7 io_uring: fix double poll leak on repolling | * e944f1e37b io_uring: Clean up a false-positive warning from GCC 9.3.0 | * 940e8922c1 mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma | * e83cc8a780 soc: qcom: apr: Make qcom,protection-domain optional again | * 982c8b1e95 Revert "wifi: mac80211: fix memory leak in ieee80211_if_add()" | * 40a4797e08 block: mq-deadline: Rename deadline_is_seq_writes() | * 3abf10b4c4 net/mlx5: fix missing mutex_unlock in mlx5_fw_fatal_reporter_err_work() | * 1aab00aa41 net/ulp: use consistent error code when blocking ULP | * 2e4c95a404 io_uring/net: fix fast_iov assignment in io_setup_async_msg() | * 311b298a33 io_uring: io_kiocb_update_pos() should not touch file for non -1 offset | * 487a086595 tracing: Use alignof__(struct {type b;}) instead of offsetof() | * 430443f856 x86/fpu: Use _Alignof to avoid undefined behavior in TYPE_ALIGN | * f114717dfa Revert "drm/amdgpu: make display pinning more flexible (v2)" | * 7a993c1be5 efi: rt-wrapper: Add missing include | * de2af657ca arm64: efi: Execute runtime services from a dedicated stack | * 9cca110cf8 fs/ntfs3: Fix attr_punch_hole() null pointer derenference | * d4d112e5c4 drm/amdgpu: drop experimental flag on aldebaran | * c82fa690da drm/amd/display: Fix COLOR_SPACE_YCBCR2020_TYPE matrix | * 88c3375224 drm/amd/display: Calculate output_color_space after pixel encoding adjustment | * 87e605b161 drm/amd/display: Fix set scaling doesn's work | * 8687b8cdc3 drm/i915/display: Check source height is > 0 | * 5d96179166 drm/i915: re-disable RC6p on Sandy Bridge | * e9a7ec188b mei: me: add meteor lake point M DID | * eb0421d90f gsmi: fix null-deref in gsmi_get_variable | * b8d99cda52 serial: atmel: fix incorrect baudrate setup | * b85498385a serial: amba-pl011: fix high priority character transmission in rs486 mode | * 0f150134dd dmaengine: idxd: Let probe fail when workqueue cannot be enabled | * 1e8c127c2e dmaengine: tegra210-adma: fix global intr clear | * 473e2281f7 dmaengine: lgm: Move DT parsing after initialization | * 73337724cb serial: pch_uart: Pass correct sg to dma_unmap_sg() | * 4307a41cbc dt-bindings: phy: g12a-usb3-pcie-phy: fix compatible string documentation | * c9d55f564a dt-bindings: phy: g12a-usb2-phy: fix compatible string documentation | * 78aa45bb7a usb-storage: apply IGNORE_UAS only for HIKSEMI MD202 on RTL9210 | * a69c8dfb85 usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate() | * 1ab67e87b1 usb: gadget: g_webcam: Send color matching descriptor per frame | * b08167d8f0 usb: typec: altmodes/displayport: Fix pin assignment calculation | * 7fb1322e7a usb: typec: altmodes/displayport: Add pin assignment helper | * 59f9ee3796 usb: typec: tcpm: Fix altmode re-registration causes sysfs create fail | * a1c8a5c2f8 usb: host: ehci-fsl: Fix module alias | * f073d10cd5 usb: cdns3: remove fetched trb from cache before dequeuing | * 73f4bde973 USB: serial: cp210x: add SCALANCE LPE-9000 device id | * a2e075f401 USB: gadgetfs: Fix race between mounting and unmounting | * 2da67bff29 tty: fix possible null-ptr-defer in spk_ttyio_release | * cb53a3366e tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer | * f322dd2e4a staging: mt7621-dts: change some node hex addresses to lower case | * 6508788b2c bpf: restore the ebpf program ID for BPF_AUDIT_UNLOAD and PERF_BPF_EVENT_PROG_UNLOAD | * 7b122c33bd riscv: dts: sifive: fu740: fix size of pcie 32bit memory | * 701f9c3da6 thunderbolt: Use correct function to calculate maximum USB3 link rate | * 5b1b03a3d3 cifs: do not include page data when checking signature | * 64287cd456 btrfs: fix race between quota rescan and disable leading to NULL pointer deref | * f2e0e1615d btrfs: do not abort transaction on failure to write log tree when syncing log | * f653abe619 mmc: sdhci-esdhc-imx: correct the tuning start tap and step setting | * 9881436f01 mmc: sunxi-mmc: Fix clock refcount imbalance during unbind | * 33bd0db750 ACPI: PRM: Check whether EFI runtime is available | * 87e1ee6058 comedi: adv_pci1760: Fix PWM instruction handling | * b5d24a8e4a usb: core: hub: disable autosuspend for TI TUSB8041 | * 61a0890cb9 misc: fastrpc: Fix use-after-free race condition for maps | * 1b7b7bb400 misc: fastrpc: Don't remove map on creater_process and device_release | * e7e41fcf90 USB: misc: iowarrior: fix up header size for USB_DEVICE_ID_CODEMERCS_IOW100 | * f3de34d90d staging: vchiq_arm: fix enum vchiq_status return types | * 16d09c4bc9 USB: serial: option: add Quectel EM05CN modem | * 34d769f0c6 USB: serial: option: add Quectel EM05CN (SG) modem | * 768d56ed24 USB: serial: option: add Quectel EC200U modem | * 829916f069 USB: serial: option: add Quectel EM05-G (RS) modem | * eb8808f769 USB: serial: option: add Quectel EM05-G (CS) modem | * 6e0430db19 USB: serial: option: add Quectel EM05-G (GR) modem | * f01aefe374 prlimit: do_prlimit needs to have a speculation check | * 418e2c756d xhci: Detect lpm incapable xHC USB3 roothub ports from ACPI tables | * 10cb7d53be usb: acpi: add helper to check port lpm capability using acpi _DSM | * 1818e2a97d xhci: Add a flag to disable USB3 lpm on a xhci root port level. | * 8911ff7963 xhci: Add update_hub_device override for PCI xHCI hosts | * c462ac871f xhci: Fix null pointer dereference when host dies | * f39c813af0 usb: xhci: Check endpoint is valid before dereferencing it | * 0f175cebc4 xhci-pci: set the dma max_seg_size | * 89a410dbd0 io_uring/rw: defer fsnotify calls to task context | * 05d69b372b io_uring: do not recalculate ppos unnecessarily | * ff8a070253 io_uring: update kiocb->ki_pos at execution time | * b7958caf41 io_uring: remove duplicated calls to io_kiocb_ppos | * 86e2d6901a io_uring: ensure that cached task references are always put on exit | * 30b9068934 io_uring: fix async accept on O_NONBLOCK sockets | * a79b13f249 io_uring: allow re-poll if we made progress | * 3c1a3d0269 io_uring: support MSG_WAITALL for IORING_OP_SEND(MSG) | * 390b881631 io_uring: add flag for disabling provided buffer recycling | * 9b7b0f2116 io_uring: ensure recv and recvmsg handle MSG_WAITALL correctly | * cdc68e714d io_uring: improve send/recv error handling | * ccf06b5a98 io_uring: pass in EPOLL_URING_WAKE for eventfd signaling and wakeups | * 77baf39227 eventfd: provide a eventfd_signal_mask() helper | * a2d8ff00a7 eventpoll: add EPOLL_URING_WAKE poll wakeup flag | * a9aa4aa7a5 io_uring: don't gate task_work run on TIF_NOTIFY_SIGNAL | * bd9a23a4bb hugetlb: unshare some PMDs when splitting VMAs | * 393d9e3ed1 drm/amd: Delay removal of the firmware framebuffer | * 865e244e06 drm/amdgpu: disable runtime pm on several sienna cichlid cards(v2) | * 560373fb1e ALSA: hda/realtek: fix mute/micmute LEDs don't work for a HP platform | * 26264260a8 ALSA: hda/realtek: fix mute/micmute LEDs for a HP ProBook | * 1026756321 efi: fix userspace infinite retry read efivars after EFI runtime services page fault | * 45627a1a64 nilfs2: fix general protection fault in nilfs_btree_insert() | * 350d66d9e7 zonefs: Detect append writes at invalid locations | * 5054d001ff Add exception protection processing for vd in axi_chan_handle_err function | * a12fd43bd1 wifi: mac80211: sdata can be NULL during AMPDU start | * f96a6c009e wifi: brcmfmac: fix regression for Broadcom PCIe wifi devices | * 908d1742b6 Bluetooth: hci_qca: Fix driver shutdown on closed serdev | * 7530fbc05f fbdev: omapfb: avoid stack overflow warning | * e1df7f0b27 perf/x86/rapl: Treat Tigerlake like Icelake | * 2c129e8689 f2fs: let's avoid panic if extent_tree is not created | * 58bac74402 x86/asm: Fix an assembler warning with current binutils | * fdb4a70bb7 btrfs: always report error in run_one_delayed_ref() | * f641067ea2 RDMA/srp: Move large values to a new enum for gcc13 | * 793f8ac218 r8169: move rtl_wol_enable_rx() and rtl_prepare_power_down() | * dc072762f9 net/ethtool/ioctl: return -EOPNOTSUPP if we have no phy stats | * 308d24d875 vduse: Validate vq_num in vduse_validate_config() | * 8e1eb926a0 virtio_pci: modify ENOENT to EINVAL | * 64a6f3689d tools/virtio: initialize spinlocks in vring_test.c | * 95fc28a8e9 selftests/bpf: check null propagation only neither reg is PTR_TO_BTF_ID | * d4a9d2944f pNFS/filelayout: Fix coalescing test for single DS | * 6a3319af6b btrfs: fix trace event name typo for FLUSH_DELAYED_REFS * | 52cea9ba91 Merge "Merge 5.15.89 into android13-5.15-lts" into android13-5.15-lts |\ \ | * | de550d72f1 Merge 5.15.89 into android13-5.15-lts | |\| | | * 3bcc86eb3e Linux 5.15.89 | | * 37c18ef49e pinctrl: amd: Add dynamic debugging for active GPIOs | | * a5841b81ad Revert "usb: ulpi: defer ulpi_register on ulpi_read_id timeout" | | * 7ec9a45fc4 block: handle bio_split_to_limits() NULL return | | * ba86db02d4 io_uring/io-wq: only free worker if it was allocated for creation | | * bb135bcc94 io_uring/io-wq: free worker if task_work creation is canceled | | * 63c2fa09b8 scsi: mpt3sas: Remove scsi_dma_map() error messages | | * e2ea555642 efi: fix NULL-deref in init error path | | * 94b6cf84db arm64: cmpxchg_double*: hazard against entire exchange variable | | * 3891fa4982 arm64: atomics: remove LL/SC trampolines | | * 61e86339af arm64: atomics: format whitespace consistently | | * ed4629d1e9 io_uring: lock overflowing for IOPOLL | | * fbf5015141 KVM: x86: Do not return host topology information from KVM_GET_SUPPORTED_CPUID | | * ee16841134 Documentation: KVM: add API issues section | | * b8f3b3cffb mm: Always release pages to the buddy allocator in memblock_free_late(). | | * d2dc110dea platform/surface: aggregator: Add missing call to ssam_request_sync_free() | | * cfd5978411 igc: Fix PPS delta between two synchronized end-points | | * 0bf52601ce perf build: Properly guard libbpf includes | | * 205f35eee7 net/mlx5e: Don't support encap rules with gbp option | | * 0526fc9330 net/mlx5: Fix ptp max frequency adjustment range | | * 9e2c38827c net/sched: act_mpls: Fix warning during failed attribute validation | | * e3bb44beaf tools/nolibc: fix the O_* fcntl/open macro definitions for riscv | | * 1e6ec75bb3 tools/nolibc: restore mips branch ordering in the _start block | | * bd0431a66c tools/nolibc: Remove .global _start from the entry point code | | * a77c54f5b5 tools/nolibc/arch: mark the _start symbol as weak | | * da51e086d1 tools/nolibc/arch: split arch-specific code into individual files | | * 8591e788be tools/nolibc/types: split syscall-specific definitions into their own files | | * 4fceecdeaa tools/nolibc/std: move the standard type definitions to std.h | | * 1792136f22 tools/nolibc: use pselect6 on RISCV | | * 487386a49e tools/nolibc: x86-64: Use `mov $60,%eax` instead of `mov $60,%rax` | | * 27af4f2260 tools/nolibc: x86: Remove `r8`, `r9` and `r10` from the clobber list | | * a60b24192b af_unix: selftest: Fix the size of the parameter to connect() | | * 39ae73e581 nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame() | | * f6003784b1 hvc/xen: lock console list traversal | | * 79c58b7424 octeontx2-af: Fix LMAC config in cgx_lmac_rx_tx_enable | | * 303d062881 tipc: fix unexpected link reset due to discovery messages | | * e79d0f97cc ALSA: usb-audio: Relax hw constraints for implicit fb sync | | * c9557906bd ALSA: usb-audio: Make sure to stop endpoints before closing EPs | | * 83e758105b ASoC: wm8904: fix wrong outputs volume after power reactivation | | * 7c26d21872 scsi: ufs: core: WLUN suspend SSU/enter hibern8 fail recovery | | * 513fdf0b8e scsi: ufs: Stop using the clock scaling lock in the error handler | | * 13259b60b7 scsi: mpi3mr: Refer CONFIG_SCSI_MPI3MR in Makefile | | * 470f6a9175 regulator: da9211: Use irq handler when ready | | * 24107ad469 x86/resctrl: Fix task CLOSID/RMID update race | | * cd3da505fb EDAC/device: Fix period calculation in edac_device_reset_delay_period() | | * ab0d02c53a x86/boot: Avoid using Intel mnemonics in AT&T syntax asm | | * a90d339f1f powerpc/imc-pmu: Fix use of mutex in IRQs disabled section | | * 511cf17b24 netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function. | | * b22faa21b6 sched/core: Fix use-after-free bug in dup_user_cpus_ptr() | | * d766ccadbe iommu/mediatek-v1: Fix an error handling path in mtk_iommu_v1_probe() | | * c929a230c8 iommu/iova: Fix alloc iova overflows issue | | * 4b51aa263a usb: ulpi: defer ulpi_register on ulpi_read_id timeout | | * 9a8bf443f6 bus: mhi: host: Fix race between channel preparation and M0 event | | * 456e3794e0 ipv6: raw: Deduct extension header length in rawv6_push_pending_frames | | * 4c93422a54 ixgbe: fix pci device refcount leak | | * e97da5d97a platform/x86: sony-laptop: Don't turn off 0x153 keyboard backlight during probe | | * f3b1e04daf dt-bindings: msm/dsi: Don't require vcca-supply on 14nm PHY | | * 52a5f596c6 dt-bindings: msm/dsi: Don't require vdds-supply on 10nm PHY | | * 984ad875db drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer | | * 92ae83665e platform/x86: ideapad-laptop: Add Legion 5 15ARH05 DMI id to set_fn_lock_led_list[] | | * e38b5f81df dt-bindings: msm: dsi-phy-28nm: Add missing qcom, dsi-phy-regulator-ldo-mode | | * bb32ab40cb dt-bindings: msm: dsi-controller-main: Fix description of core clock | | * 3fb8d10bee dt-bindings: msm: dsi-controller-main: Fix power-domain constraint | | * dc5b651cad drm/msm/adreno: Make adreno quirks not overwrite each other | | * 757d665ee1 dt-bindings: msm: dsi-controller-main: Fix operating-points-v2 constraint | | * c90cf47d30 platform/x86: dell-privacy: Fix SW_CAMERA_LENS_COVER reporting | | * 25b5f693bc platform/surface: aggregator: Ignore command messages not intended for us | | * ee7b8ce2cc platform/x86: dell-privacy: Only register SW_CAMERA_LENS_COVER if present | | * e0072068ad cifs: Fix uninitialized memory read for smb311 posix symlink create | | * f3495b5e9e net/mlx5e: Set action fwd flag when parsing tc action goto | | * 1a8431cc20 drm/i915/gt: Reset twice | | * 011ecdbcd5 drm/virtio: Fix GEM handle creation UAF | | * 798dfeeae3 s390/percpu: add READ_ONCE() to arch_this_cpu_to_op_simple() | | * a400593eb3 s390/cpum_sf: add READ_ONCE() semantics to compare and swap loops | | * d4fa65960a ASoC: qcom: lpass-cpu: Fix fallback SD line index handling | | * 8400b91c11 s390/kexec: fix ipl report address for kdump | | * c07e0babd1 perf auxtrace: Fix address filter duplicate symbol selection | | * e81d82da61 net: stmmac: add aux timestamps fifo clearance wait | | * 44167b74a8 docs: Fix the docs build with Sphinx 6.0 | | * 24176bf2a1 efi: tpm: Avoid READ_ONCE() for accessing the event log | | * 01b966b14c selftests: kvm: Fix a compile error in selftests/kvm/rseq_test.c | | * c773ebe11c KVM: arm64: nvhe: Fix build with profile optimization | | * c1d6a72fc8 KVM: arm64: Fix S1PTW handling on RO memslots | | * e04e6cd883 ALSA: hda/realtek: Enable mute/micmute LEDs on HP Spectre x360 13-aw0xxx | | * b983c9a971 ALSA: hda/realtek - Turn on power early | | * 9ab3696881 ALSA: control-led: use strscpy in set_led_id() | | * a8acfe2c6f netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits * | | 2c4f6d72f1 Merge "Merge 5.15.88 into android13-5.15-lts" into android13-5.15-lts |\| | | * | 773ec50a8a Merge 5.15.88 into android13-5.15-lts | |\| | | * 90bb4f8f39 Linux 5.15.88 | | * cbd3e6d5e5 ALSA: hda - Enable headset mic on another Dell laptop with ALC3254 | | * b98dee4746 ALSA: hda/hdmi: Add a HP device 0x8715 to force connect list | | * 26350c21bc ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF | | * dadd0dcaa6 net/ulp: prevent ULP without clone op from entering the LISTEN status | | * 04941c1d5b net: sched: disallow noqueue for qdisc classes | | * 068b512193 serial: fixup backport of "serial: Deassert Transmit Enable on probe in driver-specific way" | | * 46aa155758 selftests/vm/pkeys: Add a regression test for setting PKRU through ptrace | | * 3c1940c549 x86/fpu: Emulate XRSTOR's behavior if the xfeatures PKRU bit is not set | | * 3f1c81426a x86/fpu: Allow PKRU to be (once again) written by ptrace. | | * b29773d6b0 x86/fpu: Add a pkru argument to copy_uabi_to_xstate() | | * 9813c5fc22 x86/fpu: Add a pkru argument to copy_uabi_from_kernel_to_xstate(). | | * fea26e83a1 x86/fpu: Take task_struct* in copy_sigframe_from_user_to_xstate() | | * d4d152017e parisc: Align parisc MADV_XXX constants with all other architectures | * | 1867565896 Revert "ASoC/SoundWire: dai: expand 'stream' concept beyond SoundWire" | * | 43064ed394 Revert "ASoC: Intel/SOF: use set_stream() instead of set_tdm_slots() for HDAudio" | * | 959d50edd2 Revert "PM/devfreq: governor: Add a private governor_data for governor" * | | c34c76a947 Revert "ASoC/SoundWire: dai: expand 'stream' concept beyond SoundWire" * | | 33ef84070b Revert "ASoC: Intel/SOF: use set_stream() instead of set_tdm_slots() for HDAudio" * | | e60641bdca Revert "PM/devfreq: governor: Add a private governor_data for governor" * | | 793ec0a9cc Merge "Merge 5.15.87 into android13-5.15-lts" into android13-5.15-lts |\| | | * | fc4de343bd Merge 5.15.87 into android13-5.15-lts | |\| | | * d57287729e Linux 5.15.87 | | * 24186c6822 drm/mgag200: Fix PLL setup for G200_SE_A rev >=4 | | * e326ee018a io_uring: Fix unsigned 'res' comparison with zero in io_fixup_rw_res() | | * b2b6eefab4 efi: random: combine bootloader provided RNG seed with RNG protocol output | | * 99c0759495 mbcache: Avoid nesting of cache->c_list_lock under bit locks | | * d50d6c193a net: hns3: fix return value check bug of rx copybreak | | * d4e6a13eb9 btrfs: make thaw time super block check to also verify checksum | | * 70a1dccd0e selftests: set the BUILD variable to absolute path | | * 58fef3ebc8 ext4: don't allow journal inode to have encrypt flag | | * bd5dc96fea mptcp: use proper req destructor for IPv6 | | * 78bd6ab52c mptcp: dedicated request sock for subflow in v6 | | * 6e9c1aef3e Revert "ACPI: PM: Add support for upcoming AMD uPEP HID AMDI007" | | * e32f867b37 ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob | | * 4136f1ac1e ksmbd: fix infinite loop in ksmbd_conn_handler_loop() | | * f10defb0be hfs/hfsplus: avoid WARN_ON() for sanity check, use proper error handling | | * 48d9e2e6de hfs/hfsplus: use WARN_ON for sanity check | | * f5a9bbf962 drm/i915/gvt: fix vgpu debugfs clean in remove | | * ae9a615117 drm/i915/gvt: fix gvt debugfs destroy | | * eb3e943a32 riscv, kprobes: Stricter c.jr/c.jalr decoding | | * 620a229f57 riscv: uaccess: fix type of 0 variable on error in get_user() | | * 8e05a993f8 thermal: int340x: Add missing attribute for data rate base | | * c3222fd282 io_uring: fix CQ waiting timeout handling | | * b7b9bc9305 block: don't allow splitting of a REQ_NOWAIT bio | | * e1358c8787 fbdev: matroxfb: G200eW: Increase max memory from 1 MB to 16 MB | | * 682a7d064f nfsd: fix handling of readdir in v4root vs. mount upcall timeout | | * cb42aa7b5f x86/bugs: Flush IBP in ib_prctl_set() | | * 554a880a1f x86/kexec: Fix double-free of elf header buffer | | * 264241a610 btrfs: check superblock to ensure the fs was not modified at thaw time | | * 69f4bda5f4 nvme: also return I/O command effects from nvme_command_effects | | * a6a4b057cd nvmet: use NVME_CMD_EFFECTS_CSUPP instead of open coding it | | * f9309dcaa9 io_uring: check for valid register opcode earlier | | * 4df413d469 nvme: fix multipath crash caused by flush request when blktrace is enabled | | * 03ce792128 ASoC: Intel: bytcr_rt5640: Add quirk for the Advantech MICA-071 tablet | | * 0dca7375e2 udf: Fix extension of the last extent in the file | | * dc1bc90397 caif: fix memory leak in cfctrl_linkup_request() | | * bce3680b48 drm/i915: unpin on error in intel_vgpu_shadow_mm_pin() | | * da6a3653b8 perf stat: Fix handling of --for-each-cgroup with --bpf-counters to match non BPF mode | | * 11cd4ec635 usb: rndis_host: Secure rndis_query check against int overflow | | * 6ea5273c71 octeontx2-pf: Fix lmtst ID used in aura free | | * 4e5f2c74cb drivers/net/bonding/bond_3ad: return when there's no aggregator | | * 8414983c2e fs/ntfs3: don't hold ni_lock when calling truncate_setsize() | | * a23e8376e6 drm/imx: ipuv3-plane: Fix overlay plane width | | * a8f7fd322f perf tools: Fix resources leak in perf_data__open_dir() | | * a1e1521b46 netfilter: ipset: Rework long task execution when adding/deleting entries | | * 6f19a38483 netfilter: ipset: fix hash:net,port,net hang with /0 subnet | | * 774d259749 net: sparx5: Fix reading of the MAC address | | * 04dc4003e5 net: sched: cbq: dont intepret cls results when asked to drop | | * f02327a487 net: sched: atm: dont intepret cls results when asked to drop | | * 95da1882ce gpio: sifive: Fix refcount leak in sifive_gpio_probe | | * da9c9883ec ceph: switch to vfs_inode_has_locks() to fix file lock bug | | * 54e72ce5f1 filelock: new helper: vfs_inode_has_locks | | * f34b03ce3a drm/meson: Reduce the FIFO lines held when AFBC is not used | | * 05a8410b0f RDMA/mlx5: Fix validation of max_rd_atomic caps for DC | | * 8d89870d63 RDMA/mlx5: Fix mlx5_ib_get_hw_stats when used for device | | * 4d112f0016 net: phy: xgmiitorgmii: Fix refcount leak in xgmiitorgmii_probe | | * e5fbeb3d16 net: ena: Update NUMA TPH hint register upon NUMA node update | | * 7840b93cfd net: ena: Set default value for RX interrupt moderation | | * d09b7a9d2f net: ena: Fix rx_copybreak value update | | * 0e7ad9b006 net: ena: Use bitmask to indicate packet redirection | | * 5d4964984b net: ena: Account for the number of processed bytes in XDP | | * f17d9aec07 net: ena: Don't register memory info on XDP exchange | | * a4aa727ad0 net: ena: Fix toeplitz initial hash value | | * 0bec17f1ce net: amd-xgbe: add missed tasklet_kill | | * cb2f74685f net/mlx5e: Fix hw mtu initializing at XDP SQ allocation | | * 6c72abb78b net/mlx5e: Always clear dest encap in neigh-update-del | | * b36783bc11 net/mlx5e: TC, Refactor mlx5e_tc_add_flow_mod_hdr() to get flow attr | | * f8c10eeba3 net/mlx5e: IPoIB, Don't allow CQE compression to be turned on by default | | * 7227bbb7c1 net/mlx5: Avoid recovery in probe flows | | * 9369b9afa8 net/mlx5: Add forgotten cleanup calls into mlx5_init_once() error path | | * d966f2ee4b net/mlx5: E-Switch, properly handle ingress tagged packets on VST | | * 6a37a01aba vdpa_sim: fix vringh initialization in vdpasim_queue_ready() | | * e3462410c3 vhost: fix range used in translate_desc() | | * 13871f60ec vringh: fix range used in iotlb_translate() | | * e05d4c8c28 vhost/vsock: Fix error handling in vhost_vsock_init() | | * 586e6fd7d5 vdpa_sim: fix possible memory leak in vdpasim_net_init() and vdpasim_blk_init() | | * b63bc2db24 nfc: Fix potential resource leaks | | * 945e58bdaf net: dsa: mv88e6xxx: depend on PTP conditionally | | * 95df720e64 qlcnic: prevent ->dcb use-after-free on qlcnic_dcb_enable() failure | | * 6c55953e23 net: sched: fix memory leak in tcindex_set_parms | | * d14a4b24d5 net: hns3: fix VF promisc mode not update when mac table full | | * 7ed205b947 net: hns3: fix miss L3E checking for rx packet | | * 47868cb77f net: hns3: extract macro to simplify ring stats update code | | * 7457c5a776 net: hns3: refactor hns3_nic_reuse_page() | | * 4a6e9fb534 net: hns3: add interrupts re-initialization while doing VF FLR | | * 5e48ed805c nfsd: shut down the NFSv4 state objects before the filecache | | * 7e2825f5fb veth: Fix race with AF_XDP exposing old or uninitialized descriptors | | * ac95cdafac netfilter: nf_tables: honor set timeout and garbage collection updates | | * 49677ea151 vmxnet3: correctly report csum_level for encapsulated packet | | * 9d30cb4421 netfilter: nf_tables: perform type checking for existing sets | | * c3bfb7784a netfilter: nf_tables: add function to create set stateful expressions | | * 996cd779c2 netfilter: nf_tables: consolidate set description | | * 4f1105ee72 drm/panfrost: Fix GEM handle creation ref-counting | | * df493f676f bpf: pull before calling skb_postpull_rcsum() | | * d7e817e689 btrfs: fix an error handling path in btrfs_defrag_leaves() | | * 4d69cdba2c SUNRPC: ensure the matching upcall is in-flight upon downcall | | * af0265dfef drm/i915/migrate: fix length calculation | | * 8b25a526a5 drm/i915/migrate: fix offset calculation | | * a3d1e6f9b6 drm/i915/migrate: don't check the scratch page | | * 5bc0b2fda4 ext4: fix deadlock due to mbcache entry corruption | | * a6e4094faf mbcache: automatically delete entries from cache on freeing | | * 1872549129 ext4: correct inconsistent error msg in nojournal mode | | * 761f88f82e ext4: goto right label 'failed_mount3a' | | * eb16602140 ravb: Fix "failed to switch device to config mode" message during unbind | | * 4216995dbd perf probe: Fix to get the DW_AT_decl_file and DW_AT_call_file as unsinged data | | * d8bbbf2b52 perf probe: Use dwarf_attr_integrate as generic DWARF attr accessor | | * b131b5f136 media: s5p-mfc: Fix in register read and write for H264 | | * ff27800c0a media: s5p-mfc: Clear workbit to handle error condition | | * 4653ba32ad media: s5p-mfc: Fix to handle reference queue during finishing | | * 1bd7283dc0 x86/MCE/AMD: Clear DFR errors found in THR handler | | * 5ddcd349d9 x86/mce: Get rid of msr_ops | | * b8e7ed42bc btrfs: fix extent map use-after-free when handling missing device in read_one_chunk | | * 9c3beebd21 btrfs: move missing device handling in a dedicate function | | * 7528b21ceb btrfs: replace strncpy() with strscpy() | | * 4cef44525f phy: qcom-qmp-combo: fix out-of-bounds clock access | | * 855edc4ec6 ARM: renumber bits related to _TIF_WORK_MASK | | * 18f28f1330 ext4: fix off-by-one errors in fast-commit block filling | | * b205332b6b ext4: fix unaligned memory access in ext4_fc_reserve_space() | | * 9c197dcbac ext4: add missing validation of fast-commit record lengths | | * 6220ec4055 ext4: don't set up encryption key during jbd2 transaction | | * 6482d42baf ext4: disable fast-commit of encrypted dir operations | | * 6969367c15 ext4: fix potential out of bound read in ext4_fc_replay_scan() | | * 818175ae3b ext4: factor out ext4_fc_get_tl() | | * ffd84d0bc5 ext4: introduce EXT4_FC_TAG_BASE_LEN helper | | * 37914e029b ext4: use ext4_debug() instead of jbd_debug() | | * b0ed9a032e ext4: remove unused enum EXT4_FC_COMMIT_FAILED | | * 394514ddf9 tracing: Fix issue of missing one synthetic field | | * 5234dd5d20 block: mq-deadline: Fix dd_finish_request() for zoned devices | | * 78623b10fc drm/amdgpu: make display pinning more flexible (v2) | | * 6363da2c85 drm/amdgpu: handle polaris10/11 overlap asics (v2) | | * 2771c7a0ee ext4: allocate extended attribute value in vmalloc area | | * e995ff918e ext4: avoid unaccounted block allocation when expanding inode | | * 877247222a ext4: initialize quota before expanding inode in setproject ioctl | | * 322cf639b0 ext4: fix inode leak in ext4_xattr_inode_create() on an error path | | * 6380a93b57 ext4: fix kernel BUG in 'ext4_write_inline_data_end()' | | * dc3bbc9753 ext4: avoid BUG_ON when creating xattrs | | * 844c405552 ext4: fix error code return to user-space in ext4_get_branch() | | * b870b28e29 ext4: fix corruption when online resizing a 1K bigalloc fs | | * d440d6427a ext4: fix delayed allocation bug in ext4_clu_mapped for bigalloc + inline | | * def7a39091 ext4: init quota for 'old.inode' in 'ext4_rename' | | * 3c31d8d3ad ext4: fix uninititialized value in 'ext4_evict_inode' | | * 871800770d ext4: fix leaking uninitialized memory in fast-commit journal | | * d480a49c15 ext4: fix bug_on in __es_tree_search caused by bad boot loader inode | | * 91009e361e ext4: check and assert if marking an no_delete evicting inode dirty | | * 820eacbc4e ext4: fix reserved cluster accounting in __es_remove_extent() | | * 0dcbf4dc3d ext4: fix bug_on in __es_tree_search caused by bad quota inode | | * 06a20a68bb ext4: add helper to check quota inums | | * f7e6b5548f ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inode | | * 205ac16628 ext4: fix undefined behavior in bit shift for ext4_check_flag_values | | * cf0e0817b0 ext4: fix use-after-free in ext4_orphan_cleanup | | * 970bfd7a41 fs: ext4: initialize fsdata in pagecache_write() | | * 744bbde378 ext4: remove trailing newline from ext4_msg() message | | * 7192afa5e4 ext4: add inode table check in __ext4_get_inode_loc to aovid possible infinite loop | | * 0d041b7251 ext4: silence the warning when evicting inode with dioread_nolock | | * af4ceb00eb drm/ingenic: Fix missing platform_driver_unregister() call in ingenic_drm_init() | | * c919e1154b drm/i915/dsi: fix VBT send packet port selection for dual link DSI | | * 6948e570f5 drm/vmwgfx: Validate the box size for the snooped cursor | | * 5594fde1ef drm/connector: send hotplug uevent on connector cleanup | | * 317ebe61a6 device_cgroup: Roll back to original exceptions after copy failure | | * ac838c663b parisc: led: Fix potential null-ptr-deref in start_task() | | * 2c1881f081 remoteproc: core: Do pm_relax when in RPROC_OFFLINE state | | * 9b615f957c iommu/amd: Fix ivrs_acpihid cmdline parsing code | | * 35b792179b phy: qcom-qmp-combo: fix sc8180x reset | | * dfd05a1335 driver core: Fix bus_type.match() error handling in __driver_attach() | | * 44618a3397 crypto: ccp - Add support for TEE for PCI ID 0x14CA | | * c55507a94b crypto: n2 - add missing hash statesize | | * 4830750696 riscv: mm: notify remote harts about mmu cache updates | | * 16b6d9525d riscv: stacktrace: Fixup ftrace_graph_ret_addr retp argument | | * 657b440a27 PCI/sysfs: Fix double free in error path | | * 67fd41bbb0 PCI: Fix pci_device_is_present() for VFs by checking PF | | * bfce073089 ipmi: fix use after free in _ipmi_destroy_user() | | * 3b4984035c ima: Fix a potential NULL pointer access in ima_restore_measurement_list | | * a843699f16 mtd: spi-nor: Check for zero erase size in spi_nor_find_best_erase_type() | | * 24f4649cd8 ipmi: fix long wait in unload when IPMI disconnect | | * fa6bbb4894 ipu3-imgu: Fix NULL pointer dereference in imgu_subdev_set_selection() | | * cdb208b090 ASoC: jz4740-i2s: Handle independent FIFO flush bits | | * 2d0d083d8a wifi: wilc1000: sdio: fix module autoloading | | * 2e4a088804 efi: Add iMac Pro 2017 to uefi skip cert quirk | | * c49fb9b760 md/bitmap: Fix bitmap chunk size overflow issues | | * 94fe975d54 block: mq-deadline: Do not break sequential write streams to zoned HDDs | | * 8e91679f7b rtc: ds1347: fix value written to century register | | * 5eb8296d73 cifs: fix missing display of three mount options | | * cfa9f66f91 cifs: fix confusing debug message | | * 8b45a3b19a media: dvb-core: Fix UAF due to refcount races at releasing | | * acf984a371 media: dvb-core: Fix double free in dvb_register_device() | | * 5fac317bee ARM: 9256/1: NWFPE: avoid compiler-generated __aeabi_uldivmod | | * ce50c61245 staging: media: tegra-video: fix device_node use after free | | * 6b16758215 staging: media: tegra-video: fix chan->mipi value on error | | * 4f5de49d8c tracing: Fix infinite loop in tracing_read_pipe on overflowed print_trace_line | | * 17becbc4dd tracing/probes: Handle system names with hyphens | | * 2442e655a6 tracing/hist: Fix wrong return value in parse_action_params() | | * 2a81ff5ce8 tracing: Fix complicated dependency of CONFIG_TRACER_MAX_TRACE | | * fe8c35c6ff tracing: Fix race where eprobes can be called before the event | | * eb20f6ed37 x86/kprobes: Fix optprobe optimization check with CONFIG_RETHUNK | | * 3e0fbc06db x86/kprobes: Fix kprobes instruction boudary check with CONFIG_RETHUNK | | * 6268a0704b ftrace/x86: Add back ftrace_expected for ftrace bug reports | | * c95cf30dd4 x86/microcode/intel: Do not retry microcode reloading on the APs | | * f8fe2f4178 KVM: nVMX: Properly expose ENABLE_USR_WAIT_PAUSE control to L1 | | * ca3483d71b KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails | | * 2c73b349fd KVM: VMX: Resume guest immediately when injecting #GP on ECREATE | | * 4a19f48bee of/kexec: Fix reading 32-bit "linux,initrd-{start,end}" values | | * 7eddcdb09f perf/core: Call LSM hook after copying perf_event_attr | | * 15697f6533 tracing/hist: Fix out-of-bound write on 'action_data.var_ref_idx' | | * fd52b86a72 dm cache: set needs_check flag after aborting metadata | | * d2a0b298eb dm cache: Fix UAF in destroy() | | * 856edd0e92 dm clone: Fix UAF in clone_dtr() | | * 9215b25f2e dm integrity: Fix UAF in dm_integrity_dtr() | | * 34cd15d83b dm thin: Fix UAF in run_timer_softirq() | | * ac362c40e3 dm thin: resume even if in FAIL mode | | * 4b710e8481 dm thin: Use last transaction's pmd->root when commit failed | | * f8c26c33fe dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata | | * 28d307f380 dm cache: Fix ABBA deadlock between shrink_slab and dm_cache_metadata_abort | | * a9e89a567f mptcp: remove MPTCP 'ifdef' in TCP SYN cookies | | * 13b9fd0dee mptcp: mark ops structures as ro_after_init | | * b2120ed7fd fs: dlm: retry accept() until -EAGAIN or error returns | | * 5b4478615f fs: dlm: fix sock release if listen fails | | * b7ede8a63d ALSA: hda/realtek: Apply dual codec fixup for Dell Latitude laptops | | * dbd1f30191 ALSA: patch_realtek: Fix Dell Inspiron Plus 16 | | * 8fb4c98f20 cpufreq: Init completion before kobject_init_and_add() | | * 876c6ab967 PM/devfreq: governor: Add a private governor_data for governor | | * 0e945ea733 selftests: Use optional USERCFLAGS and USERLDFLAGS | | * 31697c5953 arm64: dts: qcom: sdm850-lenovo-yoga-c630: correct I2C12 pins drive strength | | * 1630498660 ARM: ux500: do not directly dereference __iomem | | * 99590f29b2 btrfs: fix resolving backrefs for inline extent followed by prealloc | | * 1f9cf4daf2 mmc: sdhci-sprd: Disable CLK_AUTO when the clock is less than 400K | | * 58d53ff30a arm64: dts: qcom: sdm845-db845c: correct SPI2 pins drive strength | | * a777b90a05 perf/x86/intel/uncore: Clear attr_update properly | | * ca77ac238c perf/x86/intel/uncore: Disable I/O stacks to PMU mapping on ICX-D | | * df06e7777c jbd2: use the correct print format | | * 8e75b1dd4b ktest.pl minconfig: Unset configs instead of just removing them | | * 55e5e8b445 kest.pl: Fix grub2 menu handling for rebooting | | * 823fed7c40 soc: qcom: Select REMAP_MMIO for LLCC driver | | * 8dabeeb1ff media: stv0288: use explicitly signed char | | * d167ebea90 net/af_packet: make sure to pull mac header | | * 9ff46c36df net/af_packet: add VLAN support for AF_PACKET SOCK_RAW GSO | | * cd0f597c8a rcu-tasks: Simplify trc_read_check_handler() atomic operations | | * 593ca69668 ASoC/SoundWire: dai: expand 'stream' concept beyond SoundWire | | * a7874dac6b ASoC: Intel/SOF: use set_stream() instead of set_tdm_slots() for HDAudio | | * ae4f70b2fe kcsan: Instrument memcpy/memset/memmove with newer Clang | | * d01fa993eb SUNRPC: Don't leak netobj memory when gss_read_proxy_verf() fails | | * 43135fb098 tpm: tpm_tis: Add the missed acpi_put_table() to fix memory leak | | * 986cd9a9b9 tpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak | | * 638cd298df tpm: acpi: Call acpi_put_table() to fix memory leak | | * d58289fc77 mmc: vub300: fix warning - do not call blocking ops when !TASK_RUNNING | | * 7eb57bc92f f2fs: allow to read node block after shutdown | | * acc13987fd f2fs: should put a page when checking the summary info | | * 35d8a89862 mm, compaction: fix fast_isolate_around() to stay within boundaries | | * 91bd504128 md: fix a crash in mempool_free | | * 29328fbce5 mfd: mt6360: Add bounds checking in Regmap read/write call-backs | | * c24cc476ac pnode: terminate at peers of source | | * 0c9118e381 ALSA: line6: fix stack overflow in line6_midi_transmit | | * ac4b4fdf32 ALSA: line6: correct midi status byte when receiving data from podxt | | * 83c44f0ebf ovl: Use ovl mounter's fsuid and fsgid in ovl_link() | | * fcb94283e0 binfmt: Fix error return code in load_elf_fdpic_binary() | | * ed9947277b hfsplus: fix bug causing custom uid and gid being unable to be assigned with mount | | * 76d52b5412 pstore/zone: Use GFP_ATOMIC to allocate zone buffer | | * 74b0a2fcc3 pstore: Properly assign mem_type property | | * d25aac3489 HID: plantronics: Additional PIDs for double volume key presses quirk | | * 9d4294545c HID: multitouch: fix Asus ExpertBook P2 P2451FA trackpoint | | * 7280fdb80b powerpc/rtas: avoid scheduling in rtas_os_term() | | * d8939315b7 powerpc/rtas: avoid device tree lookups in rtas_os_term() | | * 23a249b118 objtool: Fix SEGFAULT | | * ed686e7a26 fs/ntfs3: Fix slab-out-of-bounds in r_page | | * dd34665cb0 fs/ntfs3: Delete duplicate condition in ntfs_read_mft() | | * a9847a11b6 fs/ntfs3: Use __GFP_NOWARN allocation at ntfs_fill_super() | | * abd2ee2cf4 fs/ntfs3: Use __GFP_NOWARN allocation at wnd_init() | | * d7ce7bb688 fs/ntfs3: Validate index root when initialize NTFS security | | * f29676cc3a soundwire: dmi-quirks: add quirk variant for LAPBC710 NUC15 | | * 9c8471a17f fs/ntfs3: Fix slab-out-of-bounds read in run_unpack | | * 3a52f17867 fs/ntfs3: Validate resident attribute name | | * 3cd9e5b41b fs/ntfs3: Validate buffer length while parsing index | | * c878a915bc fs/ntfs3: Validate attribute name offset | | * f62506f5e4 fs/ntfs3: Add null pointer check for inode operations | | * 2dd9ccfb06 fs/ntfs3: Fix memory leak on ntfs_fill_super() error path | | * ea6b359840 fs/ntfs3: Add null pointer check to attr_load_runs_vcn | | * de5e095524 fs/ntfs3: Validate data run offset | | * d4489ba8fb fs/ntfs3: Add overflow check for attribute size | | * af7a195dea fs/ntfs3: Validate BOOT record_size | | * 8e228ac90c nvmet: don't defer passthrough commands with trivial effects to the workqueue | | * f068a7315a nvme: fix the NVME_CMD_EFFECTS_CSE_MASK definition | | * 576502f25f ata: ahci: Fix PCS quirk application for suspend | | * 7949b0df3d block, bfq: fix uaf for bfqq in bfq_exit_icq_bfqq | | * ff3d9ab51c ACPI: resource: do IRQ override on Lenovo 14ALC7 | | * 698a0813ce ACPI: resource: do IRQ override on XMG Core 15 | | * a9ac7633bb ACPI: resource: do IRQ override on LENOVO IdeaPad | | * 5fe31f2950 ACPI: resource: Skip IRQ override on Asus Vivobook K3402ZA/K3502ZA | | * 4c5fee0d88 nvme-pci: fix page size checks | | * 9141144b37 nvme-pci: fix mempool alloc size | | * f17cf8fa2c nvme-pci: fix doorbell buffer value endianness | | * ead99ec669 Revert "selftests/bpf: Add test for unstable CT lookup API" | | * bf0543b937 cifs: fix oops during encryption | | * 56f6de394f usb: dwc3: qcom: Fix memory leak in dwc3_qcom_interconnect_init * | | 2ce8e6e296 ANDROID: add __dev_kfree_skb_irq to virtual_device abi list |/ / * | 24bc28221f Revert "net: add atomic_long_t to net_device_stats fields" * | 34d878c5b3 Revert "ipv6/sit: use DEV_STATS_INC() to avoid data-races" * | 956e2924f3 Revert "arm64: Treat ESR_ELx as a 64-bit register" * | 8a3baaa85e Revert "arm64: mm: kfence: only handle translation faults" * | 8b3730f922 Revert "gpiolib: protect the GPIO device against being dropped while in use by user-space" * | b0e87c106d Revert "soreuseport: Fix socket selection for SO_INCOMING_CPU." * | 8a8a0cb6c6 Revert "bpf, sockmap: Fix missing BPF_F_INGRESS flag when using apply_bytes" * | 2d4c48bff9 Revert "xhci: Prevent infinite loop in transaction errors recovery for streams" * | 20ec745823 Merge 5.15.86 into android13-5.15-lts |\| | * 90ffbb727c Linux 5.15.86 | * 3082f8705e pwm: tegra: Fix 32 bit build | * caa40d1f85 mfd: qcom_rpm: Use devm_of_platform_populate() to simplify code | * 408dbaa065 extcon: usbc-tusb320: Call the Type-C IRQ handler only if a port is registered | * 2471a44769 media: dvbdev: fix refcnt bug | * 579fb0a332 media: dvbdev: fix build warning due to comments | * 1115e77c4f net: stmmac: fix errno when create_singlethread_workqueue() fails | * d3871af13a scsi: qla2xxx: Fix crash when I/O abort times out | * 50f993da94 btrfs: do not BUG_ON() on ENOMEM when dropping extent items for a range | * 1c65d50315 ovl: fix use inode directly in rcu-walk mode | * 88ec6d1105 fbdev: fbcon: release buffer when fbcon_do_set_font() failed | * ca8bcb348a gcov: add support for checksum field | * f36d8c8651 floppy: Fix memory leak in do_floppy_init() | * 4193a6745b regulator: core: fix deadlock on regulator enable | * ce5d0ef1cf iio: adc128s052: add proper .data members in adc128_of_match table | * aec1058f2a iio: adc: ad_sigma_delta: do not use internal iio_dev lock | * dc6afd6070 iio: fix memory leak in iio_device_register_eventset() | * 38c257ee6a reiserfs: Add missing calls to reiserfs_security_free() | * 8a4236456a security: Restrict CONFIG_ZERO_CALL_USED_REGS to gcc or clang > 15.0.6 | * 1cabce5662 9p: set req refcount to zero to avoid uninitialized usage | * dd2157a98f loop: Fix the max_loop commandline argument treatment when it is set to 0 | * fd03bd4c7b HID: mcp2221: don't connect hidraw | * 6c886be1ff HID: wacom: Ensure bootloader PID is usable in hidraw mode | * 4d640eb112 xhci: Prevent infinite loop in transaction errors recovery for streams | * 936c5f96c8 usb: dwc3: core: defer probe on ulpi_read_id timeout | * e6bf6c4022 usb: dwc3: Fix race between dwc3_set_mode and __dwc3_set_mode | * 0e883f3bc8 arm64: dts: qcom: sm8250: fix USB-DP PHY registers | * ffb14aac26 usb: xhci-mtk: fix leakage of shared hcd when fail to set wakeup irq | * fcacd970e0 usb: cdnsp: fix lack of ZLP for ep0 | * bcac79df08 ALSA: hda/hdmi: Add HP Device 0x8711 to force connect list | * 50c23a1107 ALSA: hda/realtek: Add quirk for Lenovo TianYi510Pro-14IOB | * 76574b3465 ALSA: usb-audio: add the quirk for KT0206 device | * 9e787dab98 ima: Simplify ima_lsm_copy_rule | * 2cd365029c pstore: Make sure CONFIG_PSTORE_PMSG selects CONFIG_RT_MUTEXES | * 2068d41a3d afs: Fix lost servers_outstanding count | * 0def8af038 perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() | * 41cccae10e pstore: Switch pmsg_lock to an rt_mutex to avoid priority inversion | * 8877df8135 LoadPin: Ignore the "contents" argument of the LSM hooks | * 584202b0f1 drm/i915/display: Don't disable DDI/Transcoder when setting phy test pattern | * b253e075b1 ASoC: rt5670: Remove unbalanced pm_runtime_put() | * 59f797a913 ASoC: rockchip: spdif: Add missing clk_disable_unprepare() in rk_spdif_runtime_resume() | * 132844d92f ASoC: wm8994: Fix potential deadlock | * 82f7c814ed ASoC: mediatek: mt8183: fix refcount leak in mt8183_mt6358_ts3a227_max98357_dev_probe() | * e5d6bf3e5a ASoC: rockchip: pdm: Add missing clk_disable_unprepare() in rockchip_pdm_runtime_resume() | * 85eb5c952b ASoC: audio-graph-card: fix refcount leak of cpu_ep in __graph_for_each_link() | * 9ff07316ca ASoC: mediatek: mt8173-rt5650-rt5514: fix refcount leak in mt8173_rt5650_rt5514_dev_probe() | * 7643909cf0 ASoC: Intel: Skylake: Fix driver hang during shutdown | * 33ff0f9f9c ALSA: hda: add snd_hdac_stop_streams() helper | * 78649a624d ALSA/ASoC: hda: move/rename snd_hdac_ext_stop_streams to hdac_stream.c | * 98b0f50fec hwmon: (jc42) Fix missing unlock on error in jc42_write() | * 5e69233508 KVM: selftests: Fix build regression by using accessor function | * 6215904fe2 tools/include: Add _RET_IP_ and math definitions to kernel.h | * c885326728 orangefs: Fix kmemleak in orangefs_{kernel,client}_debug_init() | * 39529b79b0 orangefs: Fix kmemleak in orangefs_prepare_debugfs_help_string() | * a075c21ee0 drm/sti: Fix return type of sti_{dvo,hda,hdmi}_connector_mode_valid() | * f3c14b99f3 drm/fsl-dcu: Fix return type of fsl_dcu_drm_connector_mode_valid() | * 9a8862820c hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param() | * 4f6b206998 scsi: elx: libefc: Fix second parameter type in state callbacks | * 23f0e9f863 scsi: ufs: Reduce the START STOP UNIT timeout | * 2cf66428a2 scsi: lpfc: Fix hard lockup when reading the rx_monitor from debugfs | * 2b3e3ecdb4 crypto: hisilicon/hpre - fix resource leak in remove process | * adf6a00859 clk: st: Fix memory leak in st_of_quadfs_setup() | * 6c8aee0c8f media: si470x: Fix use-after-free in si470x_int_in_callback() | * 58b6496a74 mmc: renesas_sdhi: better reset from HS400 mode | * c33c904124 mmc: f-sdh30: Add quirks for broken timeout clock capability | * 69346de0eb wifi: mt76: do not run mt76u_status_worker if the device is not running | * feb847e659 regulator: core: fix use_count leakage when handling boot-on | * 474e70bd90 libbpf: Avoid enum forward-declarations in public API in C++ mode | * 6209542869 drm/amd/display: Use the largest vready_offset in pipe group | * eff45bfbc2 blk-mq: fix possible memleak when register 'hctx' failed | * d0af6220bb media: dvb-usb: fix memory leak in dvb_usb_adapter_init() | * 88a6f8a72d media: dvbdev: adopts refcnt to avoid UAF | * 438cd29fec media: dvb-frontends: fix leak of memory fw | * a96841f5aa ethtool: avoiding integer overflow in ethtool_phys_id() | * b327c68ace bpf: Prevent decl_tag from being referenced in func_proto arg | * 4b8f3b9392 ppp: associate skb with a device at tx | * 5d5a481a7f mrp: introduce active flags to prevent UAF when applicant uninit | * 222cc04356 ipv6/sit: use DEV_STATS_INC() to avoid data-races | * 8a3b023710 net: add atomic_long_t to net_device_stats fields | * 58dd11f624 drm/amd/display: fix array index out of bound error in bios parser | * a3cc41e05e md/raid1: stop mdx_raid1 thread when raid1 array run failed | * b621d17fe8 drivers/md/md-bitmap: check the return value of md_bitmap_get_counter() | * 5afac74f15 drm/mediatek: Fix return type of mtk_hdmi_bridge_mode_valid() | * 072508e99d drm/sti: Use drm_mode_copy() | * 673a3e0199 drm/rockchip: Use drm_mode_copy() | * b9b07900d2 drm/msm: Use drm_mode_copy() | * 5ad774fb82 s390/lcs: Fix return type of lcs_start_xmit() | * dfbf0122ea s390/netiucv: Fix return type of netiucv_tx() | * 8131d1880c s390/ctcm: Fix return type of ctc{mp,}m_tx() | * f9084e9930 drm/amdgpu: Fix type of second parameter in odn_edit_dpm_table() callback | * b74580d618 drm/amdgpu: Fix type of second parameter in trans_msg() callback | * 314f7092b2 igb: Do not free q_vector unless new one was allocated | * 0b12d2aa26 wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmf_fw_alloc_request() | * 19bb9e98e1 hamradio: baycom_epp: Fix return type of baycom_send_packet() | * a413ebb604 net: ethernet: ti: Fix return type of netcp_ndo_start_xmit() | * 5d3f4478d2 bpf: make sure skb->len != 0 when redirecting to a tunneling device | * be2803dd29 qed (gcc13): use u16 for fid to be big enough | * a8bc0ac438 Revert "drm/amd/display: Limit max DSC target bpp for specific monitors" | * cc8deb82cc drm/amd/display: prevent memory leak | * 49dd0e8029 ipmi: fix memleak when unload ipmi driver | * 68871c005f ASoC: codecs: rt298: Add quirk for KBL-R RVP platform | * 3eca9697c2 wifi: ar5523: Fix use-after-free on ar5523_cmd() timed out | * c319196a0e wifi: ath9k: verify the expected usb_endpoints are present | * 10c4b63d09 brcmfmac: return error when getting invalid max_flowrings from dongle | * ad31bc146f media: imx-jpeg: Disable useless interrupt to avoid kernel panic | * 6e1a6880e1 drm/etnaviv: add missing quirks for GC300 | * 367296925c hfs: fix OOB Read in __hfs_brec_find | * ebe16676e1 acct: fix potential integer overflow in encode_comp_t() | * 8b6ef451b5 nilfs2: fix shift-out-of-bounds due to too large exponent of block size | * b47f5c579c nilfs2: fix shift-out-of-bounds/overflow in nilfs_sb2_bad_offset() | * 5777432eba ACPICA: Fix error code path in acpi_ds_call_control_method() | * 10b87da8fa fs: jfs: fix shift-out-of-bounds in dbDiscardAG | * 5059ea84a8 jfs: Fix fortify moan in symlink | * e7a6a53c87 udf: Avoid double brelse() in udf_rename() | * 0536f76a2b fs: jfs: fix shift-out-of-bounds in dbAllocAG | * 88cea1676a binfmt_misc: fix shift-out-of-bounds in check_special_flags | * cadb938a5e x86/hyperv: Remove unregister syscore call from Hyper-V cleanup | * 659747f6f6 video: hyperv_fb: Avoid taking busy spinlock on panic path | * 9d05c20b0a arm64: make is_ttbrX_addr() noinstr-safe | * 98a5b1265a rcu: Fix __this_cpu_read() lockdep warning in rcu_force_quiescent_state() | * d238f94b2b HID: amd_sfh: Add missing check for dma_alloc_coherent | * 9da204cd67 net: stream: purge sk_error_queue in sk_stream_kill_queues() | * f47426250f myri10ge: Fix an error handling path in myri10ge_probe() | * 1ec0a7d5b0 rxrpc: Fix missing unlock in rxrpc_do_sendmsg() | * 5478eb7adc net_sched: reject TCF_EM_SIMPLE case for complex ematch module | * 4f05d8e2fb mailbox: zynq-ipi: fix error handling while device_register() fails | * 550f403e46 mailbox: arm_mhuv2: Fix return value check in mhuv2_probe() | * 28604a960c mailbox: mpfs: read the system controller's status | * 8fb773eed4 skbuff: Account for tail adjustment during pull operations | * dc0f38957a arm64: dts: mt8183: Fix Mali GPU clock | * 790b396f6b soc: mediatek: pm-domains: Fix the power glitch issue | * 0133615a06 openvswitch: Fix flow lookup to use unmasked key | * 04e454bd97 selftests: devlink: fix the fd redirect in dummy_reporter_test | * d52646a46c rtc: mxc_v2: Add missing clk_disable_unprepare() | * ac95c4e35f igc: Set Qbv start_time and end_time to end_time if not being configured in GCL | * af59985138 igc: Lift TAPRIO schedule restriction | * 4d50d640ed igc: recalculate Qbv end_time by considering cycle time | * 1ef9416957 igc: allow BaseTime 0 enrollment for Qbv | * c0df8e7ba6 igc: Add checking for basetime less than zero | * 5b46b53f45 igc: Use strict cycles for Qbv scheduling | * fd7d029436 igc: Enhance Qbv scheduling by using first flag bit | * 9b5b50329e r6040: Fix kmemleak in probe and remove | * 1b428ba31b unix: Fix race in SOCK_SEQPACKET's unix_dgram_sendmsg() | * aae9c24ebd nfc: pn533: Clear nfc_target before being used | * bcf2c1dc53 net: enetc: avoid buffer leaks on xdp_do_redirect() failure | * f463a1295c selftests/bpf: Add test for unstable CT lookup API | * 094f3d9314 block, bfq: fix possible uaf for 'bfqq->bic' | * cf48cb8deb mISDN: hfcmulti: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() | * 5607353751 mISDN: hfcpci: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() | * ada4022f48 mISDN: hfcsusb: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() | * 0578f9929f net: macsec: fix net device access prior to holding a lock | * a472f069ce nfsd: under NFSv4.1, fix double svc_xprt_put on rpc_create failure | * f8f1d037d6 rtc: pcf85063: fix pcf85063_clkout_control | * 35a174552b rtc: pic32: Move devm_rtc_allocate_device earlier in pic32_rtc_probe() | * eea105c4e4 rtc: st-lpc: Add missing clk_disable_unprepare in st_rtc_probe() | * 74248b5560 netfilter: flowtable: really fix NAT IPv6 offload | * 5c940632ca mfd: pm8008: Fix return value check in pm8008_probe() | * ec10848e26 mfd: pm8008: Remove driver data structure pm8008_data | * 38959417d3 mfd: qcom_rpm: Fix an error handling path in qcom_rpm_probe() | * b95ae3543e mfd: bd957x: Fix Kconfig dependency on REGMAP_IRQ | * 615d3c8a46 powerpc/pseries/eeh: use correct API for error log size | * 68de42e008 powerpc/eeh: Drop redundant spinlock initialization | * 2b157b4b13 remoteproc: qcom: q6v5: Fix missing clk_disable_unprepare() in q6v5_wcss_qcs404_power_on() | * 4b191533f5 remoteproc: qcom_q6v5_pas: Fix missing of_node_put() in adsp_alloc_memory_region() | * d7628ebca8 remoteproc: qcom_q6v5_pas: detach power domains on remove | * fdf47f462a remoteproc: qcom_q6v5_pas: disable wakeup on probe fail or remove | * 098ebb9089 remoteproc: qcom: q6v5: Fix potential null-ptr-deref in q6v5_wcss_init_mmio() | * 131c0a3ead remoteproc: sysmon: fix memory leak in qcom_add_sysmon_subdev() | * 4507c6a672 pwm: mediatek: always use bus clock for PWM on MT7622 | * 4fbbb14f0e pwm: mtk-disp: Fix the parameters calculated by the enabled flag of disp_pwm | * eec59807a2 pwm: sifive: Call pwm_sifive_update_clock() while mutex is held | * 37ea9a6c41 iommu/sun50i: Remove IOMMU_DOMAIN_IDENTITY | * 8de2c29db6 selftests/powerpc: Fix resource leaks | * dd49c5031e powerpc/hv-gpci: Fix hv_gpci event list | * 65d3469f3b powerpc/83xx/mpc832x_rdb: call platform_device_put() in error case in of_fsl_spi_probe() | * cf03db2896 powerpc/perf: callchain validate kernel stack pointer bounds | * 5de1902244 powerpc/xive: add missing iounmap() in error path in xive_spapr_populate_irq_data() | * b31e9647f1 powerpc/xmon: Fix -Wswitch-unreachable warning in bpt_cmds | * 6a310e8db5 cxl: Fix refcount leak in cxl_calc_capp_routing | * 0accd460dc powerpc/52xx: Fix a resource leak in an error handling path | * be2b9b1a60 macintosh/macio-adb: check the return value of ioremap() | * 19ded60b40 macintosh: fix possible memory leak in macio_add_one_device() | * e42b543d08 iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe() | * 6e501b3fd7 iommu/amd: Fix pci device refcount leak in ppr_notifier() | * 9383921e8b rtc: pcf85063: Fix reading alarm | * b66aa7b306 rtc: snvs: Allow a time difference on clock register read | * 7a6cc22eab rtc: cmos: Disable ACPI RTC event on removal | * 689f757f0a rtc: cmos: Rename ACPI-related functions | * 1c74bbecda rtc: cmos: Eliminate forward declarations of some functions | * 3a439a2cab rtc: cmos: Call rtc_wake_setup() from cmos_do_probe() | * 9febdff75c rtc: cmos: Call cmos_wake_setup() from cmos_do_probe() | * d9324fb3ee rtc: cmos: fix build on non-ACPI platforms | * fe46b9303e rtc: cmos: Fix wake alarm breakage | * 60c6e563a8 rtc: cmos: Fix event handler registration ordering issue | * d3aa083469 rtc: rtc-cmos: Do not check ACPI_FADT_LOW_POWER_S0 | * 6e98a93c75 dmaengine: idxd: Fix crc_val field for completion record | * ab53749c32 fs/ntfs3: Fix slab-out-of-bounds read in ntfs_trim_fs | * 1ba0968b33 pwm: tegra: Improve required rate calculation | * c160505c9b include/uapi/linux/swab: Fix potentially missing __always_inline | * 59463193b0 phy: usb: s2 WoL wakeup_count not incremented for USB->Eth devices | * ae00848e55 iommu/rockchip: fix permission bits in page table entries v2 | * a7f6ad2c42 iommu/sun50i: Fix flush size | * 38ccb9b469 iommu/sun50i: Fix R/W permission check | * ae4ab47a0b iommu/sun50i: Consider all fault sources for reset | * 84fee3ce82 iommu/sun50i: Fix reset release | * 6f9fe31a48 fs/ntfs3: Harden against integer overflows | * 30f20ceb87 overflow: Implement size_t saturating arithmetic helpers | * 4b51f27d44 fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst() | * 28f345bec7 RDMA/siw: Fix pointer cast warning | * 01d925e2a5 perf stat: Do not delay the workload with --delay | * a273f1dd5d perf stat: Refactor __run_perf_stat() common code | * d21534ab4f power: supply: fix null pointer dereferencing in power_supply_get_battery_info | * d4898d8de6 power: supply: ab8500: Fix error handling in ab8500_charger_init() | * 30b191798f HSI: omap_ssi_core: Fix error handling in ssi_init() | * a72fe8eb55 power: supply: z2_battery: Fix possible memleak in z2_batt_probe() | * 5ba0e8fa15 perf symbol: correction while adjusting symbol | * a34027b63d perf trace: Handle failure when trace point folder is missed | * 60aeacce64 perf trace: Use macro RAW_SYSCALL_ARGS_NUM to replace number | * e4700f62dc perf trace: Return error if a system call doesn't exist | * 870ad0917d power: supply: fix residue sysfs file in error handle route of __power_supply_register() | * 1c2b9c8100 HSI: omap_ssi_core: fix possible memory leak in ssi_probe() | * c5f729d3d6 HSI: omap_ssi_core: fix unbalanced pm_runtime_disable() | * ea37831f83 fbdev: uvesafb: Fixes an error handling path in uvesafb_probe() | * 5bcae36b58 fbdev: uvesafb: don't build on UML | * 07c1a3c2df fbdev: geode: don't build on UML | * ace8312b5d fbdev: ep93xx-fb: Add missing clk_disable_unprepare in ep93xxfb_probe() | * 04946113fb fbdev: vermilion: decrease reference count in error path | * fc0d5034fa fbdev: via: Fix error in via_core_init() | * 9827246333 fbdev: pm2fb: fix missing pci_disable_device() | * 3aa4205134 fbdev: ssd1307fb: Drop optional dependency | * 4958316a6d thermal/drivers/qcom/lmh: Fix irq handler return value | * ad72205ac6 thermal/drivers/qcom/temp-alarm: Fix inaccurate warning for gen2 | * 37fb4e13d2 thermal/drivers/imx8mm_thermal: Validate temperature range | * 95c18f4a3c samples: vfio-mdev: Fix missing pci_disable_device() in mdpy_fb_probe() | * 31c1b5d300 ksmbd: Fix resource leak in ksmbd_session_rpc_open() | * a44102d36a tracing/hist: Fix issue of losting command info in error_log | * 8308ccfcbd usb: storage: Add check for kcalloc | * 96c12fd0ec i2c: ismt: Fix an out-of-bounds bug in ismt_access() | * 8212800943 i2c: mux: reg: check return value after calling platform_get_resource() | * 46d8f63bb8 gpiolib: protect the GPIO device against being dropped while in use by user-space | * 333a271dfd gpiolib: make struct comments into real kernel docs | * 7c755a2d6d gpiolib: cdev: fix NULL-pointer dereferences | * b0a26e1999 gpiolib: Get rid of redundant 'else' | * 4bc217b25e vme: Fix error not catched in fake_init() | * 31bfe024a9 staging: rtl8192e: Fix potential use-after-free in rtllib_rx_Monitor() | * b0aaec894a staging: rtl8192u: Fix use after free in ieee80211_rx() | * ed4580c3f8 i2c: pxa-pci: fix missing pci_disable_device() on error in ce4100_i2c_probe | * 28dc61cc49 chardev: fix error handling in cdev_device_add() | * 43bfc7c240 mcb: mcb-parse: fix error handing in chameleon_parse_gdd() | * f3686e5e8d drivers: mcb: fix resource leak in mcb_probe() | * 9d4a0aca8a usb: gadget: f_hid: fix refcount leak on error path | * d3136b7970 usb: gadget: f_hid: fix f_hidg lifetime vs cdev | * a41c2bba7f usb: roles: fix of node refcount leak in usb_role_switch_is_parent() | * 18b9202188 coresight: trbe: remove cpuhp instance node before remove cpuhp state | * e854a4ab38 counter: stm32-lptimer-cnt: fix the check on arr and cmp registers update | * 39a156715f iio: adis: add '__adis_enable_irq()' implementation | * 3a2dde8e5d iio:imu:adis: Move exports into IIO_ADISLIB namespace | * 3c2e13025b iio: adis: stylistic changes | * de3e358912 iio: adis: handle devices that cannot unmask the drdy pin | * 994243de7a iio: temperature: ltc2983: make bulk write buffer DMA-safe | * 22511eefa6 cxl: fix possible null-ptr-deref in cxl_pci_init_afu|adapter() | * e5021bbf11 cxl: fix possible null-ptr-deref in cxl_guest_init_afu|adapter() | * b308fdedef firmware: raspberrypi: fix possible memory leak in rpi_firmware_probe() | * d5c8f9003a misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os | * 848c45964d misc: tifm: fix possible memory leak in tifm_7xx1_switch_media() | * 37a13b274e ocxl: fix pci device refcount leak when calling get_function_0() | * 3299983a6b misc: ocxl: fix possible name leak in ocxl_file_register_afu() | * 357379d504 test_firmware: fix memory leak in test_firmware_init() | * 07d547d742 serial: sunsab: Fix error handling in sunsab_init() | * 919e745fdd serial: altera_uart: fix locking in polling mode | * e1c4f18214 tty: serial: altera_uart_{r,t}x_chars() need only uart_port | * b133b45ba6 tty: serial: clean up stop-tx part in altera_uart_tx_chars() | * 6f7d82380f serial: pch: Fix PCI device refcount leak in pch_request_dma() | * 0dfc7dfe5b serial: stm32: move dma_request_chan() before clk_prepare_enable() | * 926b0967f7 serial: pl011: Do not clear RX FIFO & RX interrupt in unthrottle. | * d71a611fca serial: amba-pl011: avoid SBSA UART accessing DMACR register | * f46f9d2e16 extcon: usbc-tusb320: Update state on probe even if no IRQ pending | * ac067e75c4 extcon: usbc-tusb320: Add USB TYPE-C support | * 9280761167 extcon: usbc-tusb320: Factor out extcon into dedicated functions | * 05aa8ff22d usb: typec: Factor out non-PD fwnode properties | * 31e9c27510 extcon: usbc-tusb320: Add support for TUSB320L | * b9c8820d91 extcon: usbc-tusb320: Add support for mode setting and reset | * 4524599a6a usb: typec: tipd: Fix spurious fwnode_handle_put in error path | * b0d86eacc8 usb: typec: tipd: Cleanup resources if devm_tps6598_psy_register fails | * ba75be6f0d usb: typec: tcpci: fix of node refcount leak in tcpci_register_port() | * 154d5713a2 usb: typec: Check for ops->exit instead of ops->enter in altmode_exit | * 1f5661388f staging: vme_user: Fix possible UAF in tsi148_dma_list_add | * a3c4bc2616 usb: fotg210-udc: Fix ages old endianness issues | * 5e87d41221 uio: uio_dmem_genirq: Fix deadlock between irq config and handling | * 79a4bdb6b9 uio: uio_dmem_genirq: Fix missing unlock in irq configuration | * 3f22a273ef vfio: platform: Do not pass return buffer to ACPI _RST method | * 417ef049e3 class: fix possible memory leak in __class_register() | * f76824ab2b serial: 8250_bcm7271: Fix error handling in brcmuart_init() | * 6b4424efcf serial: tegra: Read DMA status before terminating | * a0ead7e8da drivers: dio: fix possible memory leak in dio_init() | * e8985caf05 RISC-V: Align the shadow stack | * ca48174a76 IB/IPoIB: Fix queue count inconsistency for PKEY child interfaces | * 82bd423ed9 hwrng: geode - Fix PCI device refcount leak | * 2b79a5e560 hwrng: amd - Fix PCI device refcount leak | * 42cbff35f4 crypto: img-hash - Fix variable dereferenced before check 'hdev->req' | * b9634f99b6 RDMA/hns: Fix error code of CMD | * b06bb747ce RDMA/hns: Fix page size cap from firmware | * 4c05c7cf25 RDMA/hns: Fix PBL page MTR find | * fa267c4192 RDMA/hns: Fix AH attr queried by query_qp | * e27fb26e75 orangefs: Fix sysfs not cleanup when dev init failed | * 3e9c395ef2 PCI: mt7621: Add sentinel to quirks table | * bcc65c2e2a PCI: mt7621: Rename mt7621_pci_ to mt7621_pcie_ | * 0a7eab1cc4 RDMA/srp: Fix error return code in srp_parse_options() | * 6301100179 RDMA/hfi1: Fix error return code in parse_platform_config() | * 339ca035af riscv/mm: add arch hook arch_clear_hugepage_flags | * 20d363dcd6 crypto: omap-sham - Use pm_runtime_resume_and_get() in omap_sham_probe() | * 815b65d714 crypto: amlogic - Remove kcalloc without check | * af71199291 RDMA/nldev: Fix failure to send large messages | * bb895786a4 f2fs: avoid victim selection from previous victim section | * 655e955deb RDMA/nldev: Add checks for nla_nest_start() in fill_stat_counter_qps() | * 1895e908b3 scsi: snic: Fix possible UAF in snic_tgt_create() | * 09a60f908d scsi: fcoe: Fix transport not deattached when fcoe_if_init() fails | * e59da17205 scsi: ipr: Fix WARNING in ipr_init() | * c444f58fda scsi: scsi_debug: Fix possible name leak in sdebug_add_host_helper() | * 4e4968dfb5 scsi: fcoe: Fix possible name leak when device_register() fails | * 0f5006d7d1 scsi: scsi_debug: Fix a warning in resp_report_zones() | * 2432719b1a scsi: scsi_debug: Fix a warning in resp_verify() | * 038359eecc scsi: efct: Fix possible memleak in efct_device_init() | * 23053a7926 scsi: hpsa: Fix possible memory leak in hpsa_add_sas_device() | * 2ab6d5927c scsi: hpsa: Fix error handling in hpsa_add_sas_host() | * 6a92129c8f scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add() | * 26c0f7e1ac padata: Fix list iterator in padata_do_serial() | * 17afa98bcc padata: Always leave BHs disabled when running ->parallel() | * 221afb2a1b crypto: tcrypt - Fix multibuffer skcipher speed test mem leak | * bfe10a1d9f scsi: hpsa: Fix possible memory leak in hpsa_init_one() | * 38ef0c0b09 dt-bindings: visconti-pcie: Fix interrupts array max constraints | * 83aad8111b dt-bindings: imx6q-pcie: Fix clock names for imx6sx and imx8mq | * f64f08b9e6 RDMA/rxe: Fix NULL-ptr-deref in rxe_qp_do_cleanup() when socket create failed | * 35f9cd060e RDMA/hns: fix memory leak in hns_roce_alloc_mr() | * 6d5220a553 crypto: ccree - Make cc_debugfs_global_fini() available for module init function | * 2e9cf3e783 RDMA/hfi: Decrease PCI device reference count in error path | * 7f476d639c PCI: Check for alloc failure in pci_request_irq() | * 49bc2be897 RDMA/hns: Fix ext_sge num error when post send | * 0e6160d79d RDMA/hns: Repacing 'dseg_len' by macros in fill_ext_sge_inl_data() | * e5ea48788e crypto: hisilicon/qm - add missing pci_dev_put() in q_num_set() | * 442caec12f crypto: cryptd - Use request context instead of stack for sub-request | * ab677729fc crypto: ccree - Remove debugfs when platform_driver_register failed | * 0328ca389a scsi: scsi_debug: Fix a warning in resp_write_scat() | * 1ba8ecb664 RDMA/siw: Set defined status for work completion with undefined status | * 6e757005ba RDMA/nldev: Return "-EAGAIN" if the cm_id isn't from expected port | * f981c697b2 RDMA/core: Make sure "ib_port" is valid when access sysfs node | * 13586753ae RDMA/restrack: Release MR restrack when delete | * 6e78ca677f PCI: vmd: Disable MSI remapping after suspend | * 47e31b86ed IB/mad: Don't call to function that might sleep while in atomic context | * f8d8fbd3b6 RDMA/siw: Fix immediate work request flush to completion queue | * 2a26849d79 scsi: qla2xxx: Fix set-but-not-used variable warnings | * 799ed37559 RDMA/irdma: Report the correct link speed | * d40d1b1c61 f2fs: fix to destroy sbi->post_read_wq in error path of f2fs_fill_super() | * 847f725006 f2fs: fix normal discard process | * 865bb7b5a7 f2fs: fix to invalidate dcc->f2fs_issue_discard in error path | * 5f509fa740 apparmor: Fix memleak in alloc_ns() | * 46f3cb83e4 crypto: rockchip - rework by using crypto_engine | * 3ed0548d39 crypto: rockchip - remove non-aligned handling | * 5562009f5f crypto: rockchip - better handle cipher key | * 26f3971356 crypto: rockchip - add fallback for ahash | * 34fe54af3c crypto: rockchip - add fallback for cipher | * 314217591e crypto: rockchip - do not store mode globally | * 853cd97d2b crypto: rockchip - do not do custom power management | * d5100272e4 f2fs: Fix the race condition of resize flag between resizefs | * db72c5dffc PCI: pci-epf-test: Register notifier if only core_init_notifier is enabled | * 26ffeff67b RDMA/core: Fix order of nldev_exit call | * a00a7ac251 PCI: dwc: Fix n_fts[] array overrun | * 10ae636115 apparmor: Use pointer to struct aa_label for lbs_cred | * 8d50ccfbe2 scsi: core: Fix a race between scsi_done() and scsi_timeout() | * 9bdf3a59b3 crypto: nitrox - avoid double free on error path in nitrox_sriov_init() | * 7efc0d39ee crypto: sun8i-ss - use dma_addr instead u32 | * aaef0bdd7a crypto: hisilicon/qm - fix missing destroy qp_idr | * d567776ae2 apparmor: Fix abi check to include v8 abi | * bc9d2cbbdc apparmor: fix lockdep warning when removing a namespace | * 775a37ffa9 apparmor: fix a memleak in multi_transaction_new() | * 09f30f394e net: dsa: tag_8021q: avoid leaking ctx on dsa_tag_8021q_register() error path | * 86664b8652 i40e: Fix the inability to attach XDP program on downed interface | * 0abd337acd stmmac: fix potential division by 0 | * 93a4a04558 Bluetooth: RFCOMM: don't call kfree_skb() under spin_lock_irqsave() | * 8d6bbe5241 Bluetooth: hci_core: don't call kfree_skb() under spin_lock_irqsave() | * 804de4e24a Bluetooth: hci_bcsp: don't call kfree_skb() under spin_lock_irqsave() | * 1030c3aeee Bluetooth: hci_h5: don't call kfree_skb() under spin_lock_irqsave() | * 9fcb5b367e Bluetooth: hci_ll: don't call kfree_skb() under spin_lock_irqsave() | * 14cc94a598 Bluetooth: hci_qca: don't call kfree_skb() under spin_lock_irqsave() | * 06467130d5 Bluetooth: btusb: don't call kfree_skb() under spin_lock_irqsave() | * e52b7d460a Bluetooth: btintel: Fix missing free skb in btintel_setup_combined() | * f7c9de3bcf Bluetooth: MGMT: Fix error report for ADD_EXT_ADV_PARAMS | * 2addf3cb63 sctp: sysctl: make extra pointers netns aware | * 21296a52ca ntb_netdev: Use dev_kfree_skb_any() in interrupt context | * 0fff763f11 net: lan9303: Fix read error execution path | * 882bad40a0 can: tcan4x5x: Fix use of register error status mask | * d50092f662 can: m_can: Call the RAM init directly from m_can_chip_config | * 55064642aa can: tcan4x5x: Remove invalid write in clear_interrupts | * 641eef8766 net: amd-xgbe: Check only the minimum speed for active/passive cables | * 60b35e28dc net: amd-xgbe: Fix logic around active and passive cables | * d436bf39f4 af_unix: call proto_unregister() in the error path in af_unix_init() | * ee9d03bf89 net: amd: lance: don't call dev_kfree_skb() under spin_lock_irqsave() | * 6f1c4c01cc hamradio: don't call dev_kfree_skb() under spin_lock_irqsave() | * eb2c6a6e8f net: ethernet: dnet: don't call dev_kfree_skb() under spin_lock_irqsave() | * ef08e1082c net: emaclite: don't call dev_kfree_skb() under spin_lock_irqsave() | * 2786ef4066 net: apple: bmac: don't call dev_kfree_skb() under spin_lock_irqsave() | * d81314e2dd net: apple: mace: don't call dev_kfree_skb() under spin_lock_irqsave() | * 9a6544343b net/tunnel: wait until all sk_user_data reader finish before releasing the sock | * 998b4e54f5 net: farsync: Fix kmemleak when rmmods farsync | * 71605c6906 ethernet: s2io: don't call dev_kfree_skb() under spin_lock_irqsave() | * ce1b3a41e7 of: overlay: fix null pointer dereferencing in find_dup_cset_node_entry() and find_dup_cset_prop() | * 8399b98935 drivers: net: qlcnic: Fix potential memory leak in qlcnic_sriov_init() | * 96e5089702 net: stmmac: fix possible memory leak in stmmac_dvr_probe() | * ecaf934e44 net: stmmac: selftests: fix potential memleak in stmmac_test_arpoffload() | * e1359bc90a net: defxx: Fix missing err handling in dfx_init() | * c65603abc3 net: vmw_vsock: vmci: Check memcpy_from_msg() | * 9de42116fc clk: socfpga: Fix memory leak in socfpga_gate_init() | * e515881ade bpf: Do not zero-extend kfunc return values | * ce61a877c7 blktrace: Fix output non-blktrace event when blk_classic option enabled | * f2ae56fa0b wifi: brcmfmac: Fix error return code in brcmf_sdio_download_firmware() | * 23060daf37 wifi: rtl8xxxu: Fix the channel width reporting | * 6d0e00334e wifi: rtl8xxxu: Add __packed to struct rtl8723bu_c2h | * e69d380650 spi: spi-gpio: Don't set MOSI as an input if not 3WIRE mode | * 4e501a31af clk: samsung: Fix memory leak in _samsung_clk_register_pll() | * 441c05485c media: coda: Add check for kmalloc | * b99872178e media: coda: Add check for dcoda_iram_alloc | * fbf081ebe2 media: c8sectpfe: Add of_node_put() when breaking out of loop | * 2a7330d820 regulator: qcom-labibb: Fix missing of_node_put() in qcom_labibb_regulator_probe() | * ecf1b317a8 mmc: core: Normalize the error handling branch in sd_read_ext_regs() | * 7fecca429e memstick/ms_block: Add check for alloc_ordered_workqueue | * b77ced3fce memstick: ms_block: Add error handling support for add_disk() | * ae00eb6779 mmc: renesas_sdhi: alway populate SCC pointer | * 88fa6a4e39 mmc: mmci: fix return value check of mmc_add_host() | * 29c3690969 mmc: wbsd: fix return value check of mmc_add_host() | * 0959cc1685 mmc: via-sdmmc: fix return value check of mmc_add_host() | * e0cfe7aa41 mmc: meson-gx: fix return value check of mmc_add_host() | * 62005dfcc3 mmc: omap_hsmmc: fix return value check of mmc_add_host() | * 1925472dec mmc: atmel-mci: fix return value check of mmc_add_host() | * 58c3a8d0f1 mmc: wmt-sdmmc: fix return value check of mmc_add_host() | * afc898019e mmc: vub300: fix return value check of mmc_add_host() | * 6444079767 mmc: toshsd: fix return value check of mmc_add_host() | * df683201c7 mmc: rtsx_usb_sdmmc: fix return value check of mmc_add_host() | * 30dc645461 mmc: rtsx_pci: fix return value check of mmc_add_host() | * bc7e8744f5 mmc: pxamci: fix return value check of mmc_add_host() | * 2d496050de mmc: mxcmmc: fix return value check of mmc_add_host() | * f0502fe86a mmc: moxart: fix return value check of mmc_add_host() | * 29c5b4da41 mmc: alcor: fix return value check of mmc_add_host() | * 52e0d8a8dd riscv, bpf: Emit fixed-length instructions for BPF_PSEUDO_FUNC | * 0de70ed675 NFSv4.x: Fail client initialisation if state manager thread can't run | * 7055c878a0 SUNRPC: Fix missing release socket in rpc_sockname() | * 79d4cd40da xprtrdma: Fix regbuf data not freed in rpcrdma_req_create() | * cba633b24a ALSA: mts64: fix possible null-ptr-defer in snd_mts64_interrupt | * 9018550d96 media: saa7164: fix missing pci_disable_device() | * 2df1e2a6ec ALSA: pcm: Set missing stop_operating flag at undoing trigger start | * a443c55d96 bpf, sockmap: fix race in sock_map_free() | * 5229b90337 hwmon: (jc42) Restore the min/max/critical temperatures on resume | * 785f5c732a hwmon: (jc42) Convert register access and caching to regmap/regcache | * c4c64d8abd regulator: core: fix resource leak in regulator_register() | * 07f82dca11 configfs: fix possible memory leak in configfs_create_dir() | * 21a061772b hsr: Synchronize sequence number updates. | * a82f5b2e08 hsr: Synchronize sending frames to have always incremented outgoing seq nr. | * bb3b40cd6a hsr: Disable netpoll. | * 8e148d981b hsr: Avoid double remove of a node. | * 9387cbf7f7 hsr: Add a rcu-read lock to hsr_forward_skb(). | * a051e10bfc clk: qcom: clk-krait: fix wrong div2 functions | * 8275c7465d clk: qcom: lpass-sc7180: Fix pm_runtime usage | * 91657ec4d0 regulator: core: fix module refcount leak in set_supply() | * 66976a3be9 wifi: mt76: fix coverity overrun-call in mt76_get_txpower() | * a21e3f6f41 wifi: mt76: mt7921: fix reporting of TX AGGR histogram | * c8659018b6 mt76: stop the radar detector after leaving dfs channel | * ae19622e7f wifi: cfg80211: Fix not unregister reg_pdev when load_builtin_regdb_keys() fails | * 2e32f12998 wifi: mac80211: fix memory leak in ieee80211_if_add() | * f58888434d spi: spidev: mask SPI_CS_HIGH in SPI_IOC_RD_MODE | * b6d27d9250 bonding: uninitialized variable in bond_miimon_inspect() | * 7201e4f4f5 bpf, sockmap: Fix data loss caused by using apply_bytes on ingress redirect | * 6105ed3598 bpf, sockmap: Fix missing BPF_F_INGRESS flag when using apply_bytes | * 8786bde11a bpf, sockmap: Fix repeated calls to sock_put() when msg has more_data | * a222f992ce Input: wistron_btns - disable on UML | * d78649c21b netfilter: conntrack: set icmpv6 redirects as RELATED | * 09fe3b1392 ASoC: pcm512x: Fix PM disable depth imbalance in pcm512x_probe | * 8876793e56 drm/amdkfd: Fix memory leakage | * 8f2d2badf8 drm/amdgpu: Fix PCI device refcount leak in amdgpu_atrm_get_bios() | * 88c6e0995c drm/radeon: Fix PCI device refcount leak in radeon_atrm_get_bios() | * 0af0ff9fc0 drm/amd/pm/smu11: BACO is supported when it's in BACO state | * 27e7cf595d ASoC: mediatek: mt8173: Enable IRQ when pdata is ready | * 905e565375 ASoC: mediatek: mt8173: Fix debugfs registration for components | * d8e32f1bf1 wifi: iwlwifi: mvm: fix double free on tx path. | * d0bb44775c ALSA: asihpi: fix missing pci_disable_device() | * f12377abac NFS: Fix an Oops in nfs_d_automount() | * 9a96aff53c NFSv4: Fix a deadlock between nfs4_open_recover_helper() and delegreturn | * c6aca4c7ba NFSv4: Fix a credential leak in _nfs4_discover_trunking() | * 7f6607c884 NFSv4.2: Fix initialisation of struct nfs4_label | * 51899eefd1 NFSv4.2: Fix a memory stomp in decode_attr_security_label | * 34dffc77dd NFSv4.2: Clear FATTR4_WORD2_SECURITY_LABEL when done decoding | * d926611c89 ASoC: mediatek: mtk-btcvsd: Add checks for write and read of mtk_btcvsd_snd | * f243ff92d6 ASoC: dt-bindings: wcd9335: fix reset line polarity in example | * 41d7b8291c drm/tegra: Add missing clk_disable_unprepare() in tegra_dc_probe() | * 2376d7fa08 media: s5p-mfc: Add variant data for MFC v7 hardware for Exynos 3250 SoC | * 210fcf64be media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() | * b223cc15f9 media: dvb-core: Fix ignored return value in dvb_register_frontend() | * 825a8af31d pinctrl: pinconf-generic: add missing of_node_put() | * eedc698d66 clk: imx8mn: fix imx8mn_enet_phy_sels clocks list | * f86a432604 clk: imx8mn: fix imx8mn_sai2_sels clocks list | * 5e98c3a345 clk: imx: replace osc_hdmi with dummy | * 9453e097b8 clk: imx8mn: rename vpu_pll to m7_alt_pll | * bffc80bac8 media: imon: fix a race condition in send_packet() | * 9c9ff35d68 media: vimc: Fix wrong function called when vimc_init() fails | * f849c116d3 ASoC: qcom: Add checks for devm_kcalloc | * 16437645dd drbd: destroy workqueue when drbd device was freed | * cdaf45415c drbd: remove call to memset before free device/resource/connection | * f35981083c mtd: maps: pxa2xx-flash: fix memory leak in probe | * 87c750affd bonding: fix link recovery in mode 2 when updelay is nonzero | * 02105f0b30 drm/amdgpu: fix pci device refcount leak | * 5b0a1f1247 clk: rockchip: Fix memory leak in rockchip_clk_register_pll() | * 27aac5c012 regulator: core: use kfree_const() to free space conditionally | * a69b1faa9b ALSA: seq: fix undefined behavior in bit shift for SNDRV_SEQ_FILTER_USE_EVENT | * 9c0f3617ba ALSA: pcm: fix undefined behavior in bit shift for SNDRV_PCM_RATE_KNOT | * 6159424e2d pinctrl: k210: call of_node_put() | * 18a973fcb1 HID: hid-sensor-custom: set fixed size for custom attributes | * 0fc4280dbe bpf: Move skb->len == 0 checks into __bpf_redirect | * 8dbcb4c284 mtd: spi-nor: Fix the number of bytes for the dummy cycles | * 58e1a0ef52 mtd: spi-nor: hide jedec_id sysfs attribute if not present | * 348d95e39f inet: add READ_ONCE(sk->sk_bound_dev_if) in inet_csk_bind_conflict() | * 4451bef1a3 media: videobuf-dma-contig: use dma_mmap_coherent | * b2781a8626 media: platform: exynos4-is: Fix error handling in fimc_md_init() | * 7cf71bbe5d media: solo6x10: fix possible memory leak in solo_sysfs_init() | * c290aa527f media: vidtv: Fix use-after-free in vidtv_bridge_dvb_init() | * 648f303102 Input: elants_i2c - properly handle the reset GPIO when power is off | * e0d3e46ac6 mtd: lpddr2_nvm: Fix possible null-ptr-deref | * ab4e42f519 drm/msm/a6xx: Fix speed-bin detection vs probe-defer | * fea795f7c7 wifi: ath10k: Fix return value in ath10k_pci_init() | * 77482c4dd4 block: clear ->slave_dir when dropping the main slave_dir reference | * 62251948e2 ima: Fix misuse of dereference of pointer in template_desc_init_fields() | * 29d6c69ba4 integrity: Fix memory leakage in keyring allocation error path | * 8e6df95717 drm/fourcc: Fix vsub/hsub for Q410 and Q401 | * ec1727f89e drm/fourcc: Add packed 10bit YUV 4:2:0 format | * f72608b8dd regulator: qcom-rpmh: Fix PMR735a S3 regulator spec | * 63d011ad05 nvme: return err on nvme_init_non_mdts_limits fail | * f289a38df0 amdgpu/pm: prevent array underflow in vega20_odn_edit_dpm_table() | * cda1895f3b regulator: core: fix unbalanced of node refcount in regulator_dev_lookup() | * 1a5aaa5736 nvmet: only allocate a single slab for bvecs | * cb3033a432 libbpf: Fix uninitialized warning in btf_dump_dump_type_data | * 83baa50939 ASoC: pxa: fix null-pointer dereference in filter() | * a06ba0f7f8 drm/mediatek: Modify dpi power on/off sequence. | * 6d25bc6370 drm/radeon: Add the missed acpi_put_table() to fix memory leak | * 4cf11e9d31 bfq: fix waker_bfqq inconsistency crash | * 55e822212e rxrpc: Fix ack.bufferSize to be 0 when generating an ack | * 5ef8bf0df1 net, proc: Provide PROC_FS=n fallback for proc_create_net_single_write() | * d1c44928bb media: camss: Clean up received buffers on failed start of streaming | * 3b4b4df3f8 wifi: rsi: Fix handling of 802.3 EAPOL frames sent via control port | * 9e1440c858 Input: joystick - fix Kconfig warning for JOYSTICK_ADC | * 71212d7318 mtd: Fix device name leak when register device failed in add_mtd_device() | * 106311677b clk: qcom: gcc-sm8250: Use retention mode for USB GDSCs | * 322c7415e7 bpf: propagate precision across all frames, not just the last one | * 07c286c10a bpf: Check the other end of slot_type for STACK_SPILL | * fdbc363bc1 bpf: propagate precision in ALU/ALU64 operations | * b29e46610c media: platform: exynos4-is: fix return value check in fimc_md_probe() | * ab54081a28 media: vivid: fix compose size exceed boundary | * 3c58c83c6f bpf: Fix slot type check in check_stack_write_var_off | * cffa75198c drm/msm/hdmi: use devres helper for runtime PM management | * 58d002b72e drm/msm/hdmi: drop unused GPIO support | * 2d4bc60693 ima: Handle -ESTALE returned by ima_filter_rule_match() | * 13fc167e16 drm/panel/panel-sitronix-st7701: Remove panel on DSI attach failure | * c20672cfa0 spi: Update reference to struct spi_controller | * 2858d038c5 clk: renesas: r9a06g032: Repair grave increment error | * f6ed73db39 drm/rockchip: lvds: fix PM usage counter unbalance in poweron | * 13fab6322b can: kvaser_usb: Compare requested bittiming parameters with actual parameters in do_set_{,data}_bittiming | * 4e55d61e87 can: kvaser_usb: Add struct kvaser_usb_busparams | * fcfd4df200 can: kvaser_usb_leaf: Fix bogus restart events | * 51f07da38b can: kvaser_usb_leaf: Fix wrong CAN state after stopping | * 647c26887b can: kvaser_usb_leaf: Fix improved state not being reported | * 9676d65a4a can: kvaser_usb: make use of units.h in assignment of frequency | * c761108562 can: kvaser_usb_leaf: Set Warning state even without bus errors | * a60bf9d814 can: kvaser_usb: kvaser_usb_leaf: Handle CMD_ERROR_EVENT | * 8aae6bddc1 can: kvaser_usb: kvaser_usb_leaf: Rename {leaf,usbcan}_cmd_error_event to {leaf,usbcan}_cmd_can_error_event | * 972270be24 can: kvaser_usb: kvaser_usb_leaf: Get capabilities from device | * e9e0d9945f can: kvaser_usb: do not increase tx statistics when sending error message frames | * e39bce64e5 libbpf: Btf dedup identical struct test needs check for nested structs/arrays | * d4419f93e2 media: exynos4-is: don't rely on the v4l2_async_subdev internals | * 8741792d82 soreuseport: Fix socket selection for SO_INCOMING_CPU. | * 094f56192c venus: pm_helpers: Fix error check in vcodec_domains_get() | * 3c793a9ad9 media: i2c: ad5820: Fix error path | * 07611f9e44 media: adv748x: afe: Select input port when initializing AFE | * aa81257dbf media: coda: jpeg: Add check for kmalloc | * 9a402adc9f media: v4l2-ctrls: Fix off-by-one error in integer menu control check | * 1caed03305 drm/amdgpu/powerplay/psm: Fix memory leak in power state init | * f66a877083 ipmi: kcs: Poll OBF briefly to reduce OBE latency | * 983320199e ata: libata: fix NCQ autosense logic | * a9caf71aeb ata: add/use ata_taskfile::{error|status} fields | * 3483c3fb48 ata: libata: move ata_{port,link,dev}_dbg to standard pr_XXX() macros | * 6706135577 libbpf: Fix null-pointer dereference in find_prog_by_sec_insn() | * a733bf1019 libbpf: Fix use-after-free in btf_dump_name_dups | * b5ec2a04fe drm/bridge: adv7533: remove dynamic lane switching from adv7533 bridge | * 6d40a49d05 wifi: rtl8xxxu: Fix reading the vendor of combo chips | * 355f16f756 wifi: ath9k: hif_usb: Fix use-after-free in ath9k_hif_usb_reg_in_cb() | * d856f7574b wifi: ath9k: hif_usb: fix memory leak of urbs in ath9k_hif_usb_dealloc_tx_urbs() | * 12229a2523 platform/mellanox: mlxbf-pmc: Fix event typo | * a0d93aac54 rapidio: devices: fix missing put_device in mport_cdev_open | * 7af9cb8cbb hfs: Fix OOB Write in hfs_asc2mac | * 90962b3b1c relay: fix type mismatch when allocating memory in relay_create_buf() | * 0d60b11f8f eventfd: change int to __u64 in eventfd_signal() ifndef CONFIG_EVENTFD | * 2f5cc7fd73 rapidio: fix possible UAF when kfifo_alloc() fails | * 337b68da68 fs: sysv: Fix sysv_nblocks() returns wrong value | * 95d42a8d3d lockd: set other missing fields when unlocking files | * 318229b4d3 MIPS: OCTEON: warn only once if deprecated link status is being used | * 5e6d37a93a MIPS: BCM63xx: Add check for NULL for clk in clk_enable | * 50af0ba3e1 platform/x86: intel_scu_ipc: fix possible name leak in __intel_scu_ipc_register() | * 3cf8150135 platform/x86: mxm-wmi: fix memleak in mxm_wmi_call_mx[ds|mx]() | * 0ceadb5a3e platform/chrome: cros_ec_typec: zero out stale pointers | * 49c98b5688 platform/chrome: cros_ec_typec: Cleanup switch handle return paths | * b55ef8508a PM: runtime: Do not call __rpm_callback() from rpm_idle() | * 0bf874183b xen/privcmd: Fix a possible warning in privcmd_ioctl_mmap_resource() | * 70966d6b0f x86/xen: Fix memory leak in xen_init_lock_cpu() | * 23aef94eea x86/xen: Fix memory leak in xen_smp_intr_init{_pv}() | * 03ab1c5c2f uprobes/x86: Allow to probe a NOP instruction with 0x66 prefix | * 6fde666278 ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage() | * 9cabd5f4f1 clocksource/drivers/timer-ti-dm: Fix missing clk_disable_unprepare in dmtimer_systimer_init_clock() | * b73c76c3c4 cpu/hotplug: Do not bail-out in DYING/STARTING sections | * 6eb1802184 cpu/hotplug: Make target_store() a nop when target == state | * cd130e2676 futex: Resend potentially swallowed owner death notification | * fd8a10d44c futex: Move to kernel/futex/ | * 156144bd18 mips: ralink: mt7621: do not use kzalloc too early | * 186d59bb6a mips: ralink: mt7621: soc queries and tests as functions | * 8348da01e5 mips: ralink: mt7621: define MT7621_SYSC_BASE with __iomem | * 0f8e6fe09c clocksource/drivers/sh_cmt: Access registers according to spec | * a47de2fd3f rapidio: rio: fix possible name leak in rio_register_mport() | * ec3f04f74f rapidio: fix possible name leaks when rio_add_device() fails | * 4662d8e6ab debugfs: fix error when writing negative value to atomic_t debugfs file | * 7e8e8cc136 lib/notifier-error-inject: fix error when writing -errno to debugfs file | * 39b5e6130b libfs: add DEFINE_SIMPLE_ATTRIBUTE_SIGNED for signed value | * 19c202e6e5 cpufreq: amd_freq_sensitivity: Add missing pci_dev_put() | * 93e3c80338 genirq/irqdesc: Don't try to remove non-existing sysfs files | * 435cc7d18c nfsd: don't call nfsd_file_put from client states seqfile display | * 5030d4d2bf NFSD: Finish converting the NFSv2 GETACL result encoder | * e498675e06 SUNRPC: Return true/false (not 1/0) from bool functions | * 3e255dc210 EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() | * 740efb64ca irqchip/wpcm450: Fix memory leak in wpcm450_aic_of_init() | * 77b99b483f irqchip: gic-pm: Use pm_runtime_resume_and_get() in gic_probe() | * 5139cbc0c6 thermal: core: fix some possible name leaks in error paths | * cab345f9d5 platform/chrome: cros_usbpd_notify: Fix error handling in cros_usbpd_notify_init() | * 0358bc7cc2 perf/x86/intel/uncore: Fix reference count leak in __uncore_imc_init_box() | * 433bd587dc perf/x86/intel/uncore: Fix reference count leak in snr_uncore_mmio_map() | * 3485f19751 perf/x86/intel/uncore: Fix reference count leak in hswep_has_limit_sbox() | * 0021ef7dc6 perf/x86/intel/uncore: Fix reference count leak in sad_cfg_iio_topology() | * c12b314bb2 PNP: fix name memory leak in pnp_alloc_dev() | * f1c7a6af71 selftests/efivarfs: Add checking of the test return value | * 46be3ee1ca MIPS: vpe-cmp: fix possible memory leak while module exiting | * e820a8192f MIPS: vpe-mt: fix possible memory leak while module exiting | * 61d68cf2ba ocfs2: fix memory leak in ocfs2_stack_glue_init() | * e83b47580a lib/fonts: fix undefined behavior in bit shift for get_default_font | * 0df7d9ab6b proc: fixup uptime selftest | * 07b8659b8e timerqueue: Use rb_entry_safe() in timerqueue_getnext() | * 413b18866b platform/x86: huawei-wmi: fix return value calculation | * 4b46932283 lib/debugobjects: fix stat count and optimize debug_objects_mem_init | * f790dfe816 perf: Fix possible memleak in pmu_dev_alloc() | * 418d21c0df selftests/ftrace: event_triggers: wait longer for test_event_enable | * 4ea765b106 cpufreq: qcom-hw: Fix memory leak in qcom_cpufreq_hw_read_lut() | * c52d9c25d9 fs: don't audit the capability check in simple_xattr_list() | * e4d0d13b46 PM: hibernate: Fix mistake in kerneldoc comment | * 1f62b8e50d x86/sgx: Reduce delay and interference of enclave release | * f5b88170f0 alpha: fix syscall entry in !AUDUT_SYSCALL case | * a819ba80b9 alpha: fix TIF_NOTIFY_SIGNAL handling | * eb2a732ef4 cpuidle: dt: Return the correct numbers of parsed idle states | * 3af4f5cb8a sched/uclamp: Make asym_fits_capacity() use util_fits_cpu() | * 23cb580e0c sched/core: Introduce sched_asym_cpucap_active() | * 41c2dba388 sched/fair: Removed useless update of p->recent_used_cpu | * 55ffeab089 sched/uclamp: Make select_idle_capacity() use util_fits_cpu() | * 4639bfbb83 sched/uclamp: Make task_fits_capacity() use util_fits_cpu() | * 309e50cbfe sched/uclamp: Fix relationship between uclamp and migration margin | * 54a766e196 sched/fair: Cleanup task_util and capacity type | * 26bffaf678 ovl: remove privs in ovl_fallocate() | * 5dc34f9aaa ovl: remove privs in ovl_copyfile() | * 9636e70ee2 ovl: use ovl_copy_{real,upper}attr() wrappers | * a54843833c ovl: store lower path in ovl_inode | * 163c5bbe7d tpm/tpm_crb: Fix error message in __crb_relinquish_locality() | * fe880e9df9 tpm/tpm_ftpm_tee: Fix error handling in ftpm_mod_init() | * ebc73c4f26 pstore: Avoid kcore oops by vmap()ing with VM_IOREMAP | * d4dcde11bf ARM: mmp: fix timer_read delay | * 95916147dc pstore/ram: Fix error return code in ramoops_probe() | * a31a647a3d seccomp: Move copy_seccomp() to no failure path. | * b8b76b8da6 arm64: dts: armada-3720-turris-mox: Add missing interrupt for RTC | * 820a5ccca7 ARM: dts: turris-omnia: Add switch port 6 node | * b311f8e9f5 ARM: dts: turris-omnia: Add ethernet aliases | * 48ebdd06c9 ARM: dts: armada-39x: Fix assigned-addresses for every PCIe Root Port | * f27dd04e44 ARM: dts: armada-38x: Fix assigned-addresses for every PCIe Root Port | * 1e53c63da8 ARM: dts: armada-375: Fix assigned-addresses for every PCIe Root Port | * 3af1a73e9e ARM: dts: armada-xp: Fix assigned-addresses for every PCIe Root Port | * e4ed8133c4 ARM: dts: armada-370: Fix assigned-addresses for every PCIe Root Port | * b335b6344e ARM: dts: dove: Fix assigned-addresses for every PCIe Root Port | * 5b3415e683 arm64: dts: mediatek: mt6797: Fix 26M oscillator unit name | * 93f5e66496 arm64: dts: mediatek: pumpkin-common: Fix devicetree warnings | * debd938e21 arm64: dts: mt2712-evb: Fix usb vbus regulators unit names | * b2c6397754 arm64: dts: mt2712-evb: Fix vproc fixed regulators unit names | * 96c972f835 arm64: dts: mt2712e: Fix unit address for pinctrl node | * 2cd1391c28 arm64: dts: mt2712e: Fix unit_address_vs_reg warning for oscillators | * 39877a3636 arm64: dts: mt6779: Fix devicetree build warnings | * af431ce47e ARM: dts: nuvoton: Remove bogus unit addresses from fixed-partition nodes | * 0a616049ec arm64: dts: ti: k3-j721e-main: Drop dma-coherent in crypto node | * 22a740824a arm64: dts: ti: k3-am65-main: Drop dma-coherent in crypto node | * b131304fe7 perf/smmuv3: Fix hotplug callback leak in arm_smmu_pmu_init() | * b99fbe8d94 perf/arm_dmc620: Fix hotplug callback leak in dmc620_pmu_init() | * 9285b623bb perf: arm_dsu: Fix hotplug callback leak in dsu_pmu_init() | * e6318a7e19 arm64: mm: kfence: only handle translation faults | * 46ddfb9d1e arm64: Treat ESR_ELx as a 64-bit register | * 681e340128 soc: ti: smartreflex: Fix PM disable depth imbalance in omap_sr_probe | * 6eca7a2535 soc: ti: knav_qmss_queue: Fix PM disable depth imbalance in knav_queue_probe | * 972f8fc065 soc: ti: knav_qmss_queue: Use pm_runtime_resume_and_get instead of pm_runtime_get_sync | * fe53048f2a arm: dts: spear600: Fix clcd interrupt | * 75baeec464 arm64: dts: qcom: sm6125: fix SDHCI CQE reg names | * 0f9ac04191 soc: qcom: apr: Add check for idr_alloc and of_property_read_string_index | * 6855dd02c5 soc: qcom: apr: make code more reuseable | * c9fb81a835 arm64: dts: qcom: sm8250: drop bogus DP PHY clock | * 53ffa57464 arm64: dts: qcom: sm8350: fix UFS PHY registers | * d5a6bbd7a2 arm64: dts: qcom: sm8250: fix UFS PHY registers | * 3a52ff845f arm64: dts: qcom: sm8150: fix UFS PHY registers | * 800f8165e0 arm64: dts: qcom: Correct QMP PHY child node name | * ee136f275b soc: qcom: llcc: make irq truly optional | * aa7ffd4174 arm64: dts: qcom: sm8250: correct LPASS pin pull down | * f94bacc616 arm64: dts: qcom: pm660: Use unique ADC5_VCOIN address in node name | * d5bf119781 drivers: soc: ti: knav_qmss_queue: Mark knav_acc_firmwares as static | * 4707d5daf8 ARM: dts: stm32: Fix AV96 WLAN regulator gpio property | * 33647d7a46 ARM: dts: stm32: Drop stm32mp15xc.dtsi from Avenger96 | * 9f271a8660 objtool, kcsan: Add volatile read/write instrumentation to whitelist | * 51fe2dcba8 arm64: dts: qcom: msm8916: Drop MSS fallback compatible | * a9fff3524f arm64: dts: qcom: sdm845-cheza: fix AP suspend pin bias | * 6487f48ea3 arm64: dts: qcom: sdm630: fix UART1 pin bias | * 6c0c9c5458 ARM: dts: qcom: apq8064: fix coresight compatible | * 0f9b088d68 arm64: dts: qcom: msm8996: fix GPU OPP table | * 270683fc7b arm64: dts: qcom: msm8996: fix supported-hw in cpufreq OPP tables | * 5c5a628914 arm64: dts: qcom: msm8996: Add MSM8996 Pro support | * 3f14048ee4 arm64: dts: qcom: sm8250-sony-xperia-edo: fix touchscreen bias-disable | * 89f79f8d7f arm64: dts: qcom: ipq6018-cp01-c1: use BLSPI1 pins | * 9db5992e72 usb: musb: remove extra check in musb_gadget_vbus_draw | * adc063a491 drm/amd/display: Manually adjust strobe for DCN303 * | 50e12445ab Merge 5.15.85 into android13-5.15-lts |\| | * 5827ddaf45 Linux 5.15.85 | * e22dbadac8 net: loopback: use NET_NAME_PREDICTABLE for name_assign_type | * 314e7a7836 selftests: net: Use "grep -E" instead of "egrep" | * 19a7814396 Bluetooth: L2CAP: Fix u8 overflow | * f692abf139 HID: uclogic: Add HID_QUIRK_HIDINPUT_FORCE quirk | * 5325a884e2 usb: dwc3: pci: Update PCIe device ID for USB3 controller on CPU sub-system for Raptor Lake | * 367e1e3399 igb: Initialize mailbox message for VF reset | * a301742b35 xhci: Apply XHCI_RESET_TO_DEFAULT quirk to ADL-N | * 5e959f0c4c USB: serial: f81534: fix division by zero on line-speed change | * 68fbe268d2 USB: serial: f81232: fix division by zero on line-speed change | * 3ec7f24b8b USB: serial: cp210x: add Kamstrup RF sniffer PIDs | * 2b092fab23 USB: serial: option: add Quectel EM05-G modem | * 6b41a35b41 usb: gadget: uvc: Prevent buffer overflow in setup handler | * 828112571c udf: Fix extending file within last block | * df1a2596c7 udf: Do not bother looking for prealloc extents if i_lenExtents matches i_size | * 63dbbd8f14 udf: Fix preallocation discarding at indirect extent boundary | * 79a97f08ae udf: Discard preallocation before extending file with a hole * | fb8d543b61 Merge 5.15.84 into android13-5.15-lts |\| | * d68f50bfb0 Linux 5.15.84 | * 972707bae3 net: fec: properly guard irq coalesce setup | * 289721fe09 ASoC: ops: Correct bounds check for second channel on SX controls | * de0866b94a nvme-pci: clear the prp2 field when not used | * 8bffa95ac1 perf: Fix perf_pending_task() UaF | * 825bd2af42 ASoC: cs42l51: Correct PGA Volume minimum value | * 91582b3a1a net: fec: don't reset irq coalesce settings to defaults on "ip link up" | * c772dab247 can: mcba_usb: Fix termination command argument | * aa822de7de can: sja1000: fix size of OCR_MODE_MASK define | * 09e08740d7 pinctrl: meditatek: Startup with the IRQs disabled | * 172a95026f libbpf: Use page size as max_entries when probing ring buffer map | * cf611d7867 ASoC: ops: Check bounds for second channel in snd_soc_put_volsw_sx() | * a74b88e170 ASoC: fsl_micfil: explicitly clear CHnF flags | * afac1e7d78 ASoC: fsl_micfil: explicitly clear software reset bit | * 9d933af8fe nfp: fix use-after-free in area_cache_get() | * e1a4f5880d vfs: fix copy_file_range() averts filesystem freeze protection | * 86e28ed25b x86/vdso: Conditionally export __vdso_sgx_enter_enclave() * | bfbd2237c1 Merge 5.15.83 into android13-5.15-lts |\| | * fd6d66840b Linux 5.15.83 | * f895511de9 io_uring: Fix a null-ptr-deref in io_tctx_exit_cb() | * f435c66d23 io_uring: move to separate directory | * d9e1e5d8a7 block: move CONFIG_BLOCK guard to top Makefile | * e5c0bc4ff5 can: esd_usb: Allow REC and TEC to return to zero | * db6343a5b0 s390/qeth: fix use-after-free in hsci | * a56c1cebe4 s390/qeth: fix various format strings | * a6dba316c9 macsec: add missing attribute validation for offload | * 40500f1f47 net: mvneta: Fix an out of bounds check | * b9274dbe39 net: thunderbolt: fix memory leak in tbnet_open() | * 7390c70bd4 ipv6: avoid use-after-free in ip6_fragment() | * 1beb475892 net: plip: don't call kfree_skb/dev_kfree_skb() under spin_lock_irq() | * b08412a9cf net: phy: mxl-gpy: fix version reporting | * dec5abd91a xen/netback: fix build warning | * 54d830e242 dpaa2-switch: Fix memory leak in dpaa2_switch_acl_entry_add() and dpaa2_switch_acl_entry_remove() | * c7adcbd0fd ethernet: aeroflex: fix potential skb leak in greth_init_rings() | * d962d42d63 tipc: call tipc_lxc_xmit without holding node_read_lock | * f3b5dda26c net: dsa: sja1105: fix memory leak in sja1105_setup_devlink_regions() | * 5dab6fa068 ipv4: Fix incorrect route flushing when table ID 0 is used | * ac566bd577 ipv4: Fix incorrect route flushing when source address is deleted | * af4ccae4b7 tipc: Fix potential OOB in tipc_link_proto_rcv() | * b8ce0e6f9f net: hisilicon: Fix potential use-after-free in hix5hd2_rx() | * 1685417774 net: mdio: fix unbalanced fwnode reference count in mdio_device_release() | * 6f4798ac9c net: hisilicon: Fix potential use-after-free in hisi_femac_rx() | * 114e65a221 net: thunderx: Fix missing destroy_workqueue of nicvf_rx_mode_wq | * 51c0494575 net: microchip: sparx5: Fix missing destroy_workqueue of mact_queue | * 99eec0a766 ip_gre: do not report erspan version on GRE interface | * 2891957853 net: stmmac: fix "snps,axi-config" node property parsing | * 5cb8f1a784 gpio/rockchip: fix refcount leak in rockchip_gpiolib_register() | * b8c2f0392d nvme initialize core quirks before calling nvme_init_subsystem | * 908b2da426 NFC: nci: Bounds check struct nfc_target arrays | * d841cc1563 i40e: Disallow ip4 and ip6 l4_4_bytes | * 625a13850b i40e: Fix for VF MAC address 0 | * 5538794dbd i40e: Fix not setting default xps_cpus after reset | * a6b30598fe net: mvneta: Prevent out of bounds read in mvneta_config_rss() | * e6e897d4fe xen-netfront: Fix NULL sring after live migration | * eefd8953a7 octeontx2-pf: Fix potential memory leak in otx2_init_tc() | * f88acaed07 net: mdiobus: fix double put fwnode in the error path | * cc62d76928 net: mdiobus: fwnode_mdiobus_register_phy() rework error handling | * ea113b570e net: encx24j600: Fix invalid logic in reading of MISTAT register | * 8aae746d06 net: encx24j600: Add parentheses to fix precedence | * a110287ef4 mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add() | * e046421bed selftests: rtnetlink: correct xfrm policy rule in kci_test_ipsec_offload | * 4fa8988a36 net: dsa: sja1105: Check return value | * b35be171df net: dsa: hellcreek: Check return value | * a4c342e645 net: dsa: ksz: Check return value | * edf7284a98 Bluetooth: Fix not cleanup led when bt_init fails | * 3322193949 Bluetooth: 6LoWPAN: add missing hci_dev_put() in get_l2cap_conn() | * 6c88c764e0 vmxnet3: use correct intrConf reference when using extended queues | * 5ad0d85757 vmxnet3: correctly report encapsulated LRO packet | * 5c014eb0ed af_unix: Get user_ns from in_skb in unix_diag_get_exact(). | * 807a01a329 drm: bridge: dw_hdmi: fix preference of RGB modes over YUV420 | * eb96fd3983 net: broadcom: Add PTP_1588_CLOCK_OPTIONAL dependency for BCMGENET under ARCH_BCM2835 | * 16eb678bca igb: Allocate MSI-X vector when testing | * 34c6367c94 e1000e: Fix TX dispatch condition | * 4271515f18 gpio: amd8111: Fix PCI device reference count leak | * d57b60e9b3 drm/bridge: ti-sn65dsi86: Fix output polarity setting bug | * f8b2965601 netfilter: ctnetlink: fix compilation warning after data race fixes in ct mark | * 246bcd05ba ca8210: Fix crash by zero initializing data | * 80dad8df5f ieee802154: cc2520: Fix error return code in cc2520_hw_init() | * dd9dcfb85c drm/vmwgfx: Fix race issue calling pin_user_pages | * 7b09ba9036 netfilter: nft_set_pipapo: Actually validate intervals in fields after the first one | * 6daaa84b62 gpiolib: fix memory leak in gpiochip_setup_dev() | * 1a1075d371 gpiolib: check the 'ngpios' property in core gpiolib code | * 70c5515c1c gpiolib: improve coding style for local variables | * 3b714f25fc clk: Fix pointer casting to prevent oops in devm_clk_release() | * c142cba37d can: af_can: fix NULL pointer dereference in can_rcv_filter | * 104bb1f67e HID: ite: Enable QUIRK_TOUCHPAD_ON_OFF_REPORT on Acer Aspire Switch V 10 | * f755d11c55 HID: core: fix shift-out-of-bounds in hid_report_raw_event | * 2d4b310c32 HID: hid-lg4ff: Add check for empty lbuf | * 5e8021ae08 HID: usbhid: Add ALWAYS_POLL quirk for some mice | * 5e88c6f4aa net: dsa: sja1105: avoid out of bounds access in sja1105_init_l2_policing() | * 1074fefce9 drm/shmem-helper: Avoid vm_open error paths | * 83e3da8bb9 drm/shmem-helper: Remove errant put in error path | * 249011f4c3 drm/amdgpu/sdma_v4_0: turn off SDMA ring buffer in the s2idle suspend | * 1e4fe9a154 drm/vmwgfx: Don't use screen objects when SEV is active | * f6550976fe KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field | * fe50a9bbeb net: mana: Fix race on per-CQ variable napi work_done | * a49894a5ac Bluetooth: Fix crash when replugging CSR fake controllers | * 1dee2b5047 Bluetooth: btusb: Add debug message for CSR controllers | * 3ac29732a2 mm/gup: fix gup_pud_range() for dax | * aad8bbd17a memcg: fix possible use-after-free in memcg_write_event_control() | * 6fb8bc29bf media: v4l2-dv-timings.c: fix too strict blanking sanity checks | * a4c575541e Revert "ARM: dts: imx7: Fix NAND controller size-cells" | * 28abc11459 soundwire: intel: Initialize clock stop timeout | * 22d800b378 media: videobuf2-core: take mmap_lock in vb2_get_unmapped_area() | * 5d0fa6fc88 xen/netback: don't call kfree_skb() with interrupts disabled | * 4422241cef xen/netback: do some code cleanup | * 0fe29bd925 xen/netback: Ensure protocol headers don't fall in the non-linear area | * f01677be31 drm/bridge: anx7625: Fix edid_read break case in sp_tx_edid_read() | * ee2536830b cifs: fix use-after-free caused by invalid pointer `hostname` | * dc62f05f66 rtc: cmos: avoid UIP when reading alarm time | * 48ea4199af rtc: cmos: avoid UIP when writing alarm time | * 3f52afc6ed rtc: mc146818-lib: extract mc146818_avoid_UIP | * 1a3f8c6cd2 mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths | * 79ad784c9d mm/khugepaged: fix GUP-fast interaction by sending IPI | * d15cd6de01 mm/khugepaged: take the right locks for page table retraction | * 26f084e554 net: usb: qmi_wwan: add u-blox 0x1342 composition | * 029a7f1c5d 9p/xen: check logical size for buffer size | * b398832893 usb: dwc3: gadget: Disable GUSB2PHYCFG.SUSPHY for End Transfer | * e70a572440 fbcon: Use kzalloc() in fbcon_prepare_logo() | * fd3768597d regulator: twl6030: fix get status of twl6032 regulators | * 9f74b9aa8d ASoC: soc-pcm: Add NULL check in BE reparenting | * dae93f4168 btrfs: send: avoid unaligned encoded writes when attempting to clone range | * f54e1edf57 selftests/net: Find nettest in current directory | * fccd454129 ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event | * 542a563bb7 regulator: slg51000: Wait after asserting CS pin | * 3d1b5fde36 9p/fd: Use P9_HDRSZ for header size | * fe2d44e86e ASoC: rt711-sdca: fix the latency time of clock stop prepare state machine transitions | * e945f3d809 ARM: dts: rockchip: disable arm_global_timer on rk3066 and rk3188 | * c3b818c91a spi: mediatek: Fix DEVAPC Violation at KO Remove | * d9f0107be1 ASoC: wm8962: Wait for updated value of WM8962_CLOCKING1 register | * 7ae0262748 ARM: 9266/1: mm: fix no-MMU ZERO_PAGE() implementation | * d81c62e312 ARM: 9251/1: perf: Fix stacktraces for tracepoint events in THUMB2 kernels | * 66717ad03b fs: use acquire ordering in __fget_light() | * 1222e2364a ARM: dts: rockchip: rk3188: fix lcdc1-rgb24 node name | * 996fb29b06 arm64: dts: rockchip: fix ir-receiver node names | * 752138ef89 ARM: dts: rockchip: fix ir-receiver node names | * 8045971e40 arm: dts: rockchip: remove clock-frequency from rtc | * 5e9fb8013a arm: dts: rockchip: fix node name for hym8563 rtc | * 2ed7137e91 arm64: dts: rockchip: keep I2S1 disabled for GPIO function on ROCK Pi 4 series | * 5a1122e1a8 mmc: mtk-sd: Fix missing clk_disable_unprepare in msdc_of_clock_parse() | * 282f52c954 clk: Provide new devm_clk helpers for prepared and enabled clocks | * eb94a7a20f clk: generalize devm_clk_get() a bit * | 20de784185 ANDROID: fix up abi change in struct sdhci_host * | ebd1f8013d ANDROID: gki_defconfig: add CONFIG_FUNCTION_ERROR_INJECTION * | 112ff45bb5 Merge 5.15.82 into android13-5.15-lts |\| | * d979030136 Linux 5.15.82 | * 48642f9431 proc: proc_skip_spaces() shouldn't think it is working on C strings | * 3eb9213f66 proc: avoid integer type confusion in get_proc_long | * 4a4073a2e2 ipc/sem: Fix dangling sem_array access in semtimedop race | * 53b9b1201e Input: raydium_ts_i2c - fix memory leak in raydium_i2c_send() | * 571b6bbbf5 char: tpm: Protect tpm_pm_suspend with locks | * f39891cfe7 Revert "clocksource/drivers/riscv: Events are stopped during CPU suspend" | * a759057af7 ACPI: HMAT: Fix initiator registration for single-initiator systems | * da8a794d71 ACPI: HMAT: remove unnecessary variable initialization | * 2d16161a2c i2c: imx: Only DMA messages with I2C_M_DMA_SAFE flag set | * 950a05cb15 i2c: npcm7xx: Fix error handling in npcm_i2c_init() | * db3f8da033 serial: stm32: Deassert Transmit Enable on ->rs485_config() | * 45f628f4fd serial: stm32: Use TC interrupt to deassert GPIO RTS in RS485 mode | * c60eae5b1d serial: stm32: Factor out GPIO RTS toggling into separate function | * 041f8dc882 ipv4: Fix route deletion when nexthop info is not specified | * 25174d91e4 ipv4: Handle attempt to delete multipath route when fib_info contains an nh reference | * a0ad247e55 selftests: net: fix nexthop warning cleanup double ip typo | * 532847b69c selftests: net: add delete nexthop route warning test | * e078355881 Kconfig.debug: provide a little extra FRAME_WARN leeway when KASAN is enabled | * 723fa02e0e parisc: Increase FRAME_WARN to 2048 bytes on parisc | * b951ab4b35 mm: migrate: fix THP's mapcount on isolation | * c5eda6029c mm: __isolate_lru_page_prepare() in isolate_migratepages_block() | * bdb613ef17 iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init() | * b6eea8b2e8 iommu/vt-d: Fix PCI device refcount leak in has_external_pci() | * 787d81d4eb nvme: fix SRCU protection of nvme_ns_head list | * 12f237200c riscv: kexec: Fixup irq controller broken in kexec crash path | * ac00301adb riscv: fix race when vmap stack overflow | * fa7a7d185e riscv: Sync efi page table's kernel mappings before switching | * d86d698925 pinctrl: single: Fix potential division by zero | * 98b15c7066 ASoC: ops: Fix bounds check for _sx controls | * f88a6977f8 KVM: x86/mmu: Fix race condition in direct_page_fault | * df4b177b48 io_uring/poll: fix poll_refs race with cancelation | * 4b702b7d11 io_uring: make poll refs more robust | * 1d58849ac2 io_uring: cmpxchg for poll arm refs release | * cd1981a8c3 io_uring: fix tw losing poll events | * 62321dc7b0 io_uring: update res mask in io_poll_check_events | * 417d5ea6e7 tracing: Free buffers when a used dynamic event is removed | * 52fc245d15 tracing: Fix race where histograms can be called before the event | * cb2b0612cd tracing/osnoise: Fix duration type | * 615a996ff3 drm/i915: Never return 0 if not all requests retired | * 01a2b25ef2 drm/i915: Fix negative value passed as remaining time | * ff1591ba33 drm/amdgpu: enable Vangogh VCN indirect sram mode | * ac2d7fa908 drm/amdgpu: temporarily disable broken Clang builds due to blown stack-frame | * 57ee7bc4c6 mmc: sdhci: Fix voltage switch delay | * bb8f809514 mmc: sdhci-sprd: Fix no reset data and command after voltage switch | * 4c7681c1a5 mmc: sdhci-esdhc-imx: correct CQHCI exit halt state check | * 01dbe4db59 mmc: core: Fix ambiguous TRIM and DISCARD arg | * 738946e355 mmc: mmc_test: Fix removal of debugfs file | * 635d051734 net: stmmac: Set MAC's flow control register to reflect current settings | * 9132dcdf3b v4l2: don't fall back to follow_pfn() if pin_user_pages_fast() fails | * 76ad884be0 pinctrl: intel: Save and restore pins in "direct IRQ" mode | * 41296b85fa x86/bugs: Make sure MSR_SPEC_CTRL is updated properly upon resume from S3 | * 33021419fd nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry() | * 2e44dd9a8d tools/vm/slabinfo-gnuplot: use "grep -E" instead of "egrep" | * b60a8ad771 error-injection: Add prompt for function error injection | * 757eb00c4c ALSA: dice: fix regression for Lexicon I-ONIX FW810S | * a1a96a6f30 riscv: mm: Proper page permissions after initmem free | * 823df3607d riscv: vdso: fix section overlapping under some conditions | * 6e035d5a2a hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() | * 7692700ac8 hwmon: (coretemp) Check for null before removing sysfs attrs | * 9b5836b9c4 net: ethernet: renesas: ravb: Fix promiscuous mode after system resumed | * 0dfb9a5663 sctp: fix memory leak in sctp_stream_outq_migrate() | * fcb3e02161 packet: do not set TP_STATUS_CSUM_VALID on CHECKSUM_COMPLETE | * 04b995e963 net: tun: Fix use-after-free in tun_detach() | * 43ca0adf79 afs: Fix fileserver probe RTT handling | * 543d917f69 net: mdiobus: fix unbalanced node reference count | * dca370e575 net: hsr: Fix potential use-after-free | * 1daec08156 tipc: re-fetch skb cb after tipc_msg_validate | * 16a64dc265 dsa: lan9303: Correct stat name | * 766086ea8c net: wwan: iosm: fix dma_alloc_coherent incompatible pointer type | * c667751a42 net: wwan: iosm: fix kernel test robot reported error | * 9c584d6d9c net: ethernet: nixge: fix NULL dereference | * 8782b32ef8 net/9p: Fix a potential socket leak in p9_socket_open | * 6fc9425bff net: net_netdev: Fix error handling in ntb_netdev_init_module() | * 3bc893ef36 net: ethernet: ti: am65-cpsw: fix error handling in am65_cpsw_nuss_probe() | * 7730904f50 net: phy: fix null-ptr-deref while probe() failed | * 59b54f0563 wifi: mac8021: fix possible oob access in ieee80211_get_rate_duration | * dc0853f8b5 wifi: cfg80211: don't allow multi-BSSID in S1G | * 88a6fe3707 wifi: cfg80211: fix buffer overflow in elem comparison | * 08fff7aaeb aquantia: Do not purge addresses when setting the number of rings | * 2a7aa52573 qlcnic: fix sleep-in-atomic-context bugs caused by msleep | * 7b734d26f0 can: m_can: Add check for devm_clk_get | * ea8dc27bb0 can: m_can: pci: add missing m_can_class_free_dev() in probe/remove methods | * b1d2a8e02a can: etas_es58x: es58x_init_netdev(): free netdev when register_candev() | * e53da04e37 can: cc770: cc770_isa_probe(): add missing free_cc770dev() | * d452a71995 can: sja1000_isa: sja1000_isa_probe(): add missing free_sja1000dev() | * 372eb550fa net/mlx5e: Fix use-after-free when reverting termination table | * 839eeab03c net/mlx5: Fix uninitialized variable bug in outlen_write() | * 34feea3bfb net/mlx5: DR, Fix uninitialized var warning | * 3485ef2aab net/mlx5: DR, Rename list field in matcher struct to list_node | * 9fc27d22cd e100: Fix possible use after free in e100_xmit_prepare | * 0d9f5bd54b iavf: Fix error handling in iavf_init_module() | * b0b2b9050c iavf: remove redundant ret variable | * 69501d8205 fm10k: Fix error handling in fm10k_init_module() | * 5e3657dede i40e: Fix error handling in i40e_init_module() | * 7109e94109 ixgbevf: Fix resource leak in ixgbevf_init_module() | * 196ea810e2 of: property: decrement node refcount in of_fwnode_get_reference_args() | * 36164db278 nvmem: rmem: Fix return value check in rmem_read() | * e376183167 bpf: Do not copy spin lock field from user in bpf_selem_alloc | * 45f6e81863 hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails | * a90251376c hwmon: (i5500_temp) fix missing pci_disable_device() | * eeb31b828d hwmon: (ina3221) Fix shunt sum critical calculation | * 9514b95cac hwmon: (ltc2947) fix temperature scaling | * 0140e079a4 libbpf: Handle size overflow for ringbuf mmap | * 06d5790e7d ARM: at91: rm9200: fix usb device clock id | * d074f173fb scripts/faddr2line: Fix regression in name resolution on ppc64le | * ee3d37d796 bpf, perf: Use subprog name when reporting subprog ksymbol | * ec02fc0a41 iio: light: rpr0521: add missing Kconfig dependencies | * f7419fc42a iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw | * e7e76a77aa iio: health: afe4403: Fix oob read in afe4403_read_raw | * ebdca90efb drm/amdgpu: Partially revert "drm/amdgpu: update drm_display_info correctly when the edid is read" | * c365d3c3e5 drm/amdgpu: update drm_display_info correctly when the edid is read | * df5346466e drm/display/dp_mst: Fix drm_dp_mst_add_affected_dsc_crtcs() return code | * 044da1a371 btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit() | * da86809ab8 btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker | * 5d66eadc1c spi: spi-imx: Fix spi_bus_clk if requested clock is higher than input clock | * 6b4544a131 btrfs: free btrfs_path before copying inodes to userspace | * c7ae3becee btrfs: sink iterator parameter to btrfs_ioctl_logical_to_ino | * acc2f40b98 erofs: fix order >= MAX_ORDER warning due to crafted negative i_size | * ca9f27448a drm/i915/gt: Use i915_vm_put on ppgtt_create error paths | * c2f2972889 drm/i915: Create a dummy object for gen6 ppgtt | * 918002bdbe arm64: mte: Avoid setting PG_mte_tagged if no tags cleared or restored * | d753150bdc Revert "serial: Add rs485_supported to uart_port" * | 8ccd9528be Revert "serial: fsl_lpuart: Fill in rs485_supported" * | a924bb92c6 Merge 5.15.81 into android13-5.15-lts |\| | * e4a7232c91 Linux 5.15.81 | * 5c5c563a08 cifs: fix missed refcounting of ipc tcon | * ee2d04f23b drm/i915: fix TLB invalidation for Gen12 video and compute engines | * bef834845d drm/amdgpu: always register an MMU notifier for userptr | * 7901de7aa8 drm/amdgpu: Enable Aldebaran devices to report CU Occupancy | * e7bf1fe538 drm/amd/display: No display after resume from WB/CB | * 5033cba00c drm/amd/dc/dce120: Fix audio register mapping, stop triggering KASAN | * b8dc245909 btrfs: sysfs: normalize the error handling branch in btrfs_init_sysfs() | * 914baca57a btrfs: use kvcalloc in btrfs_get_dev_zone_info | * c1e6d4bfde btrfs: zoned: fix missing endianness conversion in sb_write_pointer | * d88bf6be02 btrfs: free btrfs_path before copying subvol info to userspace | * f218b404fc btrfs: free btrfs_path before copying fspath to userspace | * fea9397101 btrfs: free btrfs_path before copying root refs to userspace | * 7d0c25b5fe genirq: Take the proposed affinity at face value if force==true | * f17657cce0 irqchip/gic-v3: Always trust the managed affinity provided by the core code | * 52a93f2dcf genirq: Always limit the affinity to online CPUs | * 599cf4b845 genirq/msi: Shutdown managed interrupts with unsatifiable affinities | * 7aed1dd5d2 wifi: wilc1000: validate number of channels | * e9de501cf7 wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute | * 143232cb5a wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute | * cd9c486971 wifi: wilc1000: validate pairwise and authentication suite offsets | * f2fb18d429 fuse: lock inode unconditionally in fuse_fallocate() | * bb1c33bdf4 dm integrity: clear the journal on suspend | * 20ad31b09e dm integrity: flush the journal on suspend | * 5ca2110ba5 gpu: host1x: Avoid trying to use GART on Tegra20 | * 97f47617e8 scsi: iscsi: Fix possible memory leak when device_register() failed | * 56ab7f237e net: usb: qmi_wwan: add Telit 0x103a composition | * e2e33f213d tcp: configurable source port perturb table size | * 269928e5c7 platform/x86: ideapad-laptop: Fix interrupt storm on fn-lock toggle on some Yoga laptops | * 17d995dc69 platform/x86: hp-wmi: Ignore Smart Experience App event | * e85bdc7872 zonefs: fix zone report size in __zonefs_io_error() | * 982fcd83fb drm/amdgpu: disable BACO support on more cards | * ea11f8197d platform/x86: acer-wmi: Enable SW_TABLET_MODE on Switch V 10 (SW5-017) | * 09af15e691 platform/x86: asus-wmi: add missing pci_dev_put() in asus_wmi_set_xusb2pr() | * ba040bea9d xen/platform-pci: add missing free_irq() in error path | * 6815b2087d xen-pciback: Allow setting PCI_MSIX_FLAGS_MASKALL too | * 4c13ddb74f ASoC: stm32: dfsdm: manage cb buffers cleanup | * dd82295a23 Input: i8042 - apply probe defer to more ASUS ZenBook models | * e12e121feb Input: soc_button_array - add Acer Switch V 10 to dmi_use_low_level_irq[] | * 9f5c167074 Input: soc_button_array - add use_low_level_irq module parameter | * aaef86eac9 Input: goodix - try resetting the controller when no config is set | * e2223f5fbb serial: 8250: 8250_omap: Avoid RS485 RTS glitch on ->set_termios() | * 4e208294de tools: iio: iio_generic_buffer: Fix read size | * 0d0e2545fa ASoC: Intel: bytcht_es8316: Add quirk for the Nanote UMPC-01 | * e394cf9d7a Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode | * 96b5d11777 x86/ioremap: Fix page aligned size calculation in __ioremap_caller() | * d048f74815 x86/pm: Add enumeration check before spec MSRs save/restore setup | * 070e3560bf x86/tsx: Add a feature bit for TSX control MSR support | * 1430c98ebb KVM: x86: remove exit_int_info warning in svm_handle_exit | * 27550a5930 KVM: x86: add kvm_leave_nested | * 3e87cb0caa KVM: x86: nSVM: harden svm_free_nested against freeing vmcb02 while still in use | * 6425c590d0 KVM: x86: forcibly leave nested mode on vCPU reset | * f42ebf972a KVM: x86: nSVM: leave nested mode on vCPU free | * 7b3c9405b2 mm: vmscan: fix extreme overreclaim and swap floods | * feb2eda5e1 gcov: clang: fix the buffer overflow issue | * ea6aa25c9a nilfs2: fix nilfs_sufile_mark_dirty() not set segment usage as dirty | * 9d97a9fbfc usb: dwc3: gadget: Clear ep descriptor last | * 02632ea4df usb: dwc3: gadget: Return -ESHUTDOWN on ep disable | * 765ca3e63f usb: dwc3: gadget: conditionally remove requests | * 7945cbf866 bus: ixp4xx: Don't touch bit 7 on IXP42x | * 39c039018a iio: core: Fix entry not deleted when iio_register_sw_trigger_type() fails | * 0791a5ddba iio: light: apds9960: fix wrong register for gesture gain | * f0158b9bfc arm64: dts: rockchip: lower rk3399-puma-haikou SD controller clock frequency | * 277d19ec28 ext4: fix use-after-free in ext4_ext_shift_extents | * c9d133100b usb: cdnsp: fix issue with ZLP - added TD_SIZE = 1 | * c2ad434cd4 usb: cdnsp: Fix issue with Clear Feature Halt Endpoint | * 1d91c64887 usb: dwc3: exynos: Fix remove() function | * 0a216625c3 KVM: arm64: pkvm: Fixup boot mode to reflect that the kernel resumes from EL1 | * f0044a4a31 mmc: sdhci-brcmstb: Fix SDHCI_RESET_ALL for CQHCI | * 8e6940979b mmc: sdhci-brcmstb: Enable Clock Gating to save power | * 24b46bfa96 mmc: sdhci-brcmstb: Re-organize flags | * 227543ccac nios2: add FORCE for vmlinuz.gz | * 6a4ea16a67 init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash | * c4a9046c27 lib/vdso: use "grep -E" instead of "egrep" | * 5fefdceafb s390/crashdump: fix TOD programmable field size | * 592b6fd74a net: thunderx: Fix the ACPI memory leak | * 697eb30a35 octeontx2-af: Fix reference count issue in rvu_sdp_init() | * 6ba1687ea1 octeontx2-pf: Add check for devm_kcalloc | * 26c31e7c73 net: enetc: preserve TX ring priority across reconfiguration | * 0e16bbf616 net: enetc: cache accesses to &priv->si->hw | * 68de40f66a net: enetc: manage ENETC_F_QBV in priv->active_offloads only when enabled | * 5c0858e142 nfc: st-nci: fix incorrect sizing calculations in EVT_TRANSACTION | * e09243fb16 nfc: st-nci: fix memory leaks in EVT_TRANSACTION | * dca20b7a19 nfc: st-nci: fix incorrect validating logic in EVT_TRANSACTION | * 67d638f8ef s390/dasd: fix no record found for raw_track_access | * 88277853cf arcnet: fix potential memory leak in com20020_probe() | * 1d44ec8507 ipv4: Fix error return code in fib_table_insert() | * 918e83c6bf dccp/tcp: Reset saddr on failure after inet6?_hash_connect(). | * 8ce9b1c97f fs: do not update freeing inode i_io_list | * 8db9e60cdf netfilter: flowtable_offload: add missing locking | * c1da3bfca1 netfilter: ipset: restore allowing 64 clashing elements in hash:net,iface | * 606091b2f6 dma-buf: fix racing conflict of dma_heap_add() | * 8af9450bef bnx2x: fix pci device refcount leak in bnx2x_vf_is_pcie_pending() | * 251bcf6cfb regulator: twl6030: re-add TWL6032_SUBCLASS | * 6258a8f913 NFC: nci: fix memory leak in nci_rx_data_packet() | * ffe6021154 net: sched: allow act_ct to be built without NF_NAT | * a05c0f9511 net: sparx5: fix error handling in sparx5_port_open() | * 182ef20f0f sfc: fix potential memleak in __ef100_hard_start_xmit() | * 2da022fac9 net: wwan: iosm: use ACPI_FREE() but not kfree() in ipc_pcie_read_bios_cfg() | * a48b345b87 xfrm: Fix ignored return value in xfrm6_init() | * 19989e1635 xfrm: Fix oops in __xfrm_state_delete() | * 46d450067f tipc: check skb_linearize() return value in tipc_disc_rcv() | * 33fb115a76 tipc: add an extra conn_get in tipc_conn_alloc | * 4ae907c45f tipc: set con sock in tipc_conn_alloc | * ef866d9ea9 net/mlx5: Fix handling of entry refcount when command is not issued to FW | * 3101318939 net/mlx5: Fix FW tracer timestamp calculation | * 1eaabb5bbb net/mlx5: Do not query pci info while pci disabled | * 8180099b2a netfilter: ipset: regression in ip_set_hash_ip.c | * 448b627370 Drivers: hv: vmbus: fix possible memory leak in vmbus_device_register() | * 082c31cb99 Drivers: hv: vmbus: fix double free in the error path of vmbus_add_channel_work() | * 7fdd9daa5b macsec: Fix invalid error code set | * e8fb93a079 nfp: add port from netdev validation for EEPROM access | * e44e424ed9 nfp: fill splittable of devlink_port_attrs correctly | * 527046c138 net: pch_gbe: fix pci device refcount leak while module exiting | * f77c84dd5b octeontx2-af: debugsfs: fix pci device refcount leak | * cd581ffd8d net/qla3xxx: fix potential memleak in ql3xxx_send() | * a8976074e2 net: mvpp2: fix possible invalid pointer dereference | * 3a4cc56cd1 net/mlx4: Check retval of mlx4_bitmap_init | * c368220e17 net: ethernet: mtk_eth_soc: fix error handling in mtk_open() | * d9729437b2 ARM: dts: imx6q-prti6q: Fix ref/tcxo-clock-frequency properties | * 1c0b6a97c4 ARM: mxs: fix memory leak in mxs_machine_init() | * ecff08f3c4 iavf: Fix race condition between iavf_shutdown and iavf_remove | * 31147d4e90 iavf: Do not restart Tx queues after reset task failure | * 232942b26c iavf: Fix a crash during reset task | * 0600615d01 netfilter: nf_tables: do not set up extensions for end interval | * 60387731e6 netfilter: conntrack: Fix data-races around ct mark | * ee3ccd1abb 9p/fd: fix issue of list_del corruption in p9_fd_cancel() | * 131c2eeabc net: pch_gbe: fix potential memleak in pch_gbe_tx_queue() | * f58df483ff nfc/nci: fix race with opening and closing | * da22d7410a net: dsa: sja1105: disallow C45 transactions on the BASE-TX MDIO bus | * 38fe0988bd rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975] | * d92151b465 rxrpc: Use refcount_t rather than atomic_t | * 3c33e41fa5 rxrpc: Allow list of in-use local UDP endpoints to be viewed in /proc | * 46cefa2689 net: liquidio: simplify if expression | * 95500ee0b3 selftests: mptcp: fix mibit vs mbit mix up | * f8c4da198e selftests: mptcp: more stable simult_flows tests | * 1c0efab08c ARM: dts: at91: sam9g20ek: enable udc vbus gpio pinctrl | * ade662f3f2 tee: optee: fix possible memory leak in optee_register_device() | * d1dd119134 bus: sunxi-rsb: Support atomic transfers | * b1ed61e706 bus: sunxi-rsb: Remove the shutdown callback | * 61a41d1abc regulator: core: fix UAF in destroy_regulator() | * a85c0db3f5 spi: dw-dma: decrease reference count in dw_spi_dma_init_mfld() | * d9f9b3255b regulator: core: fix kobject release warning and memory leak in regulator_register() | * bd419c7c68 ASoC: max98373: Add checks for devm_kcalloc | * f9bc4a18e7 scsi: storvsc: Fix handling of srb_status and capacity change events | * c2153fe2d0 x86/hyperv: Restore VP assist page after cpu offlining/onlining | * b2ddd76237 ASoC: soc-pcm: Don't zero TDM masks in __soc_pcm_open() | * dd62cb7e6f ASoC: sgtl5000: Reset the CHIP_CLK_CTRL reg on remove | * d80ffd4823 ASoC: hdac_hda: fix hda pcm buffer overflow issue | * 10bee7eb2a ARM: dts: am335x-pcm-953: Define fixed regulators in root node | * 8fe533c0f9 af_key: Fix send_acquire race with pfkey_register | * 0c69a4658e xfrm: replay: Fix ESN wrap around for GSO | * ecc6ce4fdf xfrm: fix "disable_policy" on ipv4 early demux | * 5a792c1d4d MIPS: pic32: treat port as signed integer | * 144452b421 RISC-V: vdso: Do not add missing symbols to version section in linker script | * 799970b8cc ALSA: usb-audio: add quirk to fix Hamedal C20 disconnect issue | * 38b09dc14f Revert "drm/amdgpu: Revert "drm/amdgpu: getting fan speed pwm for vega10 properly"" | * 44d50fccf8 nvmet: fix memory leak in nvmet_subsys_attr_model_store_locked | * 5adc12d9e2 arm64/syscall: Include asm/ptrace.h in syscall_wrapper header. | * 1340f02773 block, bfq: fix null pointer dereference in bfq_bio_bfqg() | * 86d4dca4a6 drm: panel-orientation-quirks: Add quirk for Acer Switch V 10 (SW5-017) | * b90e6234f5 scsi: scsi_debug: Make the READ CAPACITY response compliant with ZBC | * cdbba6a4de scsi: ibmvfc: Avoid path failures during live migration | * 6e8124a151 platform/x86/intel/hid: Add some ACPI device IDs | * 32735e24f4 platform/x86/intel/pmt: Sapphire Rapids PMT errata fix | * 83a6823016 platform/x86: touchscreen_dmi: Add info for the RCA Cambio W101 v2 2-in-1 | * f707986a14 platform/x86: ideapad-laptop: Disable touchpad_switch | * 5e38740ae5 Revert "net: macsec: report real_dev features when HW offloading is enabled" | * 26b72202ee selftests/bpf: Add verifier test for release_reference() | * 8395e3f98c spi: stm32: fix stm32_spi_prepare_mbr() that halves spi clk for every run | * d04722f280 wifi: ath11k: Fix QCN9074 firmware boot on x86 | * 9cc96a20a9 wifi: mac80211: Fix ack frame idr leak when mesh has no route | * 86f90014e7 wifi: airo: do not assign -1 to unsigned char | * f5558fbda0 audit: fix undefined behavior in bit shift for AUDIT_BIT | * af5de982ff riscv: dts: sifive unleashed: Add PWM controlled LEDs | * ee34a19dbe wifi: mac80211_hwsim: fix debugfs attribute ps with rc table support | * 3513785dc1 wifi: mac80211: fix memory free error when registering wiphy fail | * 855485d31e ceph: fix NULL pointer dereference for req->r_session | * 729c9ad294 ceph: Use kcalloc for allocating multiple elements | * d276fb4a7e binder: validate alloc->mm in ->mmap() handler | * 5277e3d633 x86/sgx: Add overflow check in sgx_validate_offset_length() | * b5a838ba47 x86/sgx: Create utility to validate user provided offset and length | * 2f6e2de3a5 ceph: avoid putting the realm twice when decoding snaps fails | * 8bef55d793 ceph: do not update snapshot context when there is no new snapshot | * cdee3136c9 iio: pressure: ms5611: fixed value compensation bug | * 5d6696e79d iio: ms5611: Simplify IO callback parameters | * f0ee88e83c nvme-pci: add NVME_QUIRK_BOGUS_NID for Netac NV7000 | * a61716cd24 nvme-pci: disable write zeroes on various Kingston SSD | * 19b60f3363 nvme-pci: disable namespace identifiers for the MAXIO MAP1001 | * d537e19306 nvme-pci: add NVME_QUIRK_BOGUS_NID for Micron Nitro | * af03ce894c nvme: add a bogus subsystem NQN quirk for Micron MTFDKBA2T0TFH | * c6803faa6a drm/display: Don't assume dual mode adaptors support i2c sub-addressing | * d2284fe43c ata: libata-core: do not issue non-internal commands once EH is pending | * e09583e83e ata: libata-scsi: simplify __ata_scsi_queuecmd() | * a9059e338f cifs: Fix connections leak when tlink setup failed | * 81d583baa5 cifs: support nested dfs links over reconnect | * dbc0ea91be cifs: split out dfs code from cifs_reconnect() | * b3ce844d23 cifs: introduce new helper for cifs_reconnect() | * 2ea600b598 sctp: clear out_curr if all frag chunks of current msg are pruned | * 1f9f346fbb sctp: remove the unnecessary sinfo_stream check in sctp_prsctp_prune_unsent | * e8915faa9f tty: serial: fsl_lpuart: don't break the on-going transfer when global reset | * bd19013935 serial: fsl_lpuart: Fill in rs485_supported | * 87c81c19cd serial: Add rs485_supported to uart_port | * c08f4ea79f ASoC: fsl_asrc fsl_esai fsl_sai: allow CONFIG_PM=N | * d1e4288d2a ASoC: fsl_sai: use local device pointer * | e66b45d527 Merge branch 'android13-5.15' into android13-5.15-lts * | 72d681a01d Revert "net: use struct_group to copy ip/ipv6 header addresses" * | c46ed1b2d7 Merge 5.15.80 into android13-5.15-lts |\| | * 71e496bd33 Linux 5.15.80 | * b63ddb3ba6 ntfs: check overflow when iterating ATTR_RECORDs | * ab6a1bb17e ntfs: fix out-of-bounds read in ntfs_attr_find() | * 5330c423b8 ntfs: fix use-after-free in ntfs_attr_find() | * 43bbadb7e4 net/9p: use a dedicated spinlock for trans_fd | * 9357fca9da mm: fs: initialize fsdata passed to write_begin/write_end interface | * b334ab4c33 wifi: wext: use flex array destination for memcpy() | * 0e07032b4b 9p/trans_fd: always use O_NONBLOCK read/write | * 7c7b7476b5 gfs2: Switch from strlcpy to strscpy | * 28275a7c84 gfs2: Check sb_bsize_shift after reading superblock | * a4f1a01b2e 9p: trans_fd/p9_conn_cancel: drop client lock earlier | * f7b0e95071 kcm: close race conditions on sk_receive_queue | * 27d706b0d3 kcm: avoid potential race in kcm_tx_work | * b49026d9c8 tcp: cdg: allow tcp_cdg_release() to be called multiple times | * e41cbf98df macvlan: enforce a consistent minimal mtu | * d5f7f6e63f Input: i8042 - fix leaking of platform device on module removal | * c49cc2c059 kprobes: Skip clearing aggrprobe's post_handler in kprobe-on-ftrace case | * 71beab7119 scsi: scsi_debug: Fix possible UAF in sdebug_add_host_helper() | * a636772988 scsi: target: tcm_loop: Fix possible name leak in tcm_loop_setup_hba_bus() | * cb7893c85e net: use struct_group to copy ip/ipv6 header addresses | * 9b8c0c88f4 tracing: Fix warning on variable 'struct trace_array' | * 73cf0ff9a3 ring-buffer: Include dropped pages in counting dirty patches | * 35c60b4e8c perf: Improve missing SIGTRAP checking | * 2ac6276864 serial: 8250_lpss: Use 16B DMA burst with Elkhart Lake | * b1a27b2aad nvme: ensure subsystem reset is single threaded | * bccece3c33 nvme: restrict management ioctls to admin | * 8cddb0d96b perf/x86/intel/pt: Fix sampling using single range output | * 8e2f33c598 misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() | * 9a72a46cb0 docs: update mediator contact information in CoC doc | * a99a547658 mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put() | * 4a1b6f7839 mmc: sdhci-pci-o2micro: fix card detect fail issue caused by CD# debounce timeout | * fd285d4215 mmc: core: properly select voltage range without power cycle | * 8a9bae5f1b firmware: coreboot: Register bus in module init | * 052d0e79ef iommu/vt-d: Set SRE bit only when hardware has SRS cap | * c31a792a82 iommu/vt-d: Preset Access bit for IOVA in FL non-leaf paging entries | * 11edbdee43 scsi: zfcp: Fix double free of FSF request when qdio send fails | * fdf87b5b30 net: phy: marvell: add sleep time after enabling the loopback bit | * 9648d760ed maccess: Fix writing offset in case of fault in strncpy_from_kernel_nofault() | * fdd57c20d4 Input: iforce - invert valid length check when fetching device IDs | * 0cafb719be serial: 8250_lpss: Configure DMA also w/o DMA filter | * 59f6596697 serial: 8250: Flush DMA Rx on RLSI | * 118b52c2ae serial: 8250: Fall back to non-DMA Rx if IIR_RDI occurs | * 6ffce7a92e dm ioctl: fix misbehavior if list_versions races with module loading | * 2b104973f7 iio: pressure: ms5611: changed hardcoded SPI speed to value limited | * 1678d4abb2 iio: adc: mp2629: fix potential array out of bound access | * bd22c232ea iio: adc: mp2629: fix wrong comparison of channel | * 656f670613 iio: trigger: sysfs: fix possible memory leak in iio_sysfs_trig_init() | * 1bf8c0aff8 iio: adc: at91_adc: fix possible memory leak in at91_adc_allocate_trigger() | * afc0aea702 usb: typec: mux: Enter safe mode only when pins need to be reconfigured | * 8236628a54 usb: cdns3: host: fix endless superspeed hub port reset | * ead83b0db8 usb: chipidea: fix deadlock in ci_otg_del_timer | * cc9e6d8c55 usb: add NO_LPM quirk for Realforce 87U Keyboard | * 70eca1d261 USB: serial: option: add Fibocom FM160 0x0111 composition | * 1b6a54885c USB: serial: option: add u-blox LARA-L6 modem | * b0467d0059 USB: serial: option: add u-blox LARA-R6 00B modem | * 95688a8a57 USB: serial: option: remove old LARA-R6 PID | * 53dee78ea3 USB: serial: option: add Sierra Wireless EM9191 | * e7764e88e6 USB: bcma: Make GPIO explicitly optional | * a190a83db2 speakup: fix a segfault caused by switching consoles | * b3c6edbee4 slimbus: stream: correct presence rate frequencies | * 6b35ac8315 slimbus: qcom-ngd: Fix build error when CONFIG_SLIM_QCOM_NGD_CTRL=y && CONFIG_QCOM_RPROC_COMMON=m | * 0f847462fe Revert "usb: dwc3: disable USB core PHY management" | * 23ad214a86 ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book Pro 360 | * a36b505749 ALSA: hda/realtek: fix speakers for Samsung Galaxy Book Pro | * 02b94885b2 ALSA: usb-audio: Drop snd_BUG_ON() from snd_usbmidi_output_open() | * 7176d6f3ad drm/amd/display: Add HUBP surface flip interrupt handler | * e57daa7503 tracing: kprobe: Fix potential null-ptr-deref on trace_array in kprobe_event_gen_test_exit() | * 3a41c0f2a5 tracing: kprobe: Fix potential null-ptr-deref on trace_event_file in kprobe_event_gen_test_exit() | * 7291dec4f2 tracing: Fix race where eprobes can be called before the event | * 6517b97134 tracing: Fix wild-memory-access in register_synth_event() | * 07ba4f0603 tracing: Fix memory leak in test_gen_synth_cmd() and test_empty_synth_event() | * 8b318f3032 tracing/ring-buffer: Have polling block on watermark | * 2c21ee020c tracing: Fix memory leak in tracing_read_pipe() | * 00f74b1a98 ring_buffer: Do not deactivate non-existant pages | * 1bea037a1a ftrace: Fix null pointer dereference in ftrace_add_mod() | * fadfcf39fb ftrace: Optimize the allocation for mcount entries | * 5c5f264289 ftrace: Fix the possible incorrect kernel message | * 2ab2494162 cifs: add check for returning value of SMB2_set_info_init | * 5783abda58 net: thunderbolt: Fix error handling in tbnet_init() | * 80e590aeb1 net: microchip: sparx5: Fix potential null-ptr-deref in sparx_stats_init() and sparx5_start() | * 4a55aec142 cifs: Fix wrong return value checking when GETFLAGS | * c8baf1fc24 net/x25: Fix skb leak in x25_lapb_receive_frame() | * af4b57fa6b net: ag71xx: call phylink_disconnect_phy if ag71xx_hw_enable() fail in ag71xx_open() | * 61404a182e cifs: add check for returning value of SMB2_close_init | * d3233f4bf3 platform/surface: aggregator: Do not check for repeated unsequenced packets | * 6969171403 platform/x86/intel: pmc: Don't unconditionally attach Intel PMC when virtualized | * 7d93417d59 drbd: use after free in drbd_create_device() | * fc16a2c81a bridge: switchdev: Fix memory leaks when changing VLAN protocol | * 3d90a668c4 net: hns3: fix setting incorrect phy link ksettings for firmware in resetting process | * 3f7b2ef8fe net: ena: Fix error handling in ena_init() | * 2540eea1bd net: ionic: Fix error handling in ionic_init_module() | * c08c13cb13 xen/pcpu: fix possible memory leak in register_pcpu() | * 97009f07f2 net: dsa: make dsa_master_ioctl() see through port_hwtstamp_get() shims | * 88da008e5e net: mhi: Fix memory leak in mhi_net_dellink() | * 8f839715d0 bnxt_en: Remove debugfs when pci_register_driver failed | * b88713d92b net: caif: fix double disconnect client in chnl_net_open() | * 6d24034160 net: macvlan: Use built-in RCU list checking | * 596230471d mISDN: fix misuse of put_device() in mISDN_register_device() | * 07a6a8cf17 net: liquidio: release resources when liquidio driver open failed | * 19feb6cf41 soc: imx8m: Enable OCOTP clock before reading the register | * 8c54d706d8 net: stmmac: ensure tx function is not running in stmmac_xdp_release() | * 6219f46c2b net: hinic: Fix error handling in hinic_module_init() | * 7a05e39296 mISDN: fix possible memory leak in mISDN_dsp_element_register() | * 0ee6455c9c net: bgmac: Drop free_netdev() from bgmac_enet_remove() | * 7ff4fa179e bpf: Initialize same number of free nodes for each pcpu_freelist | * 12f178cf05 MIPS: Loongson64: Add WARN_ON on kexec related kmalloc failed | * a4d6e024be MIPS: fix duplicate definitions for exported symbols | * 44142b652a nfp: change eeprom length to max length enumerators | * f23058dc23 ata: libata-transport: fix error handling in ata_tdev_add() | * 67b2193146 ata: libata-transport: fix error handling in ata_tlink_add() | * e7bb1b7a7b ata: libata-transport: fix error handling in ata_tport_add() | * 377ff82c33 ata: libata-transport: fix double ata_host_put() in ata_tport_add() | * 494df0b0ef arm64: dts: imx8mn: Fix NAND controller size-cells | * 7178d568f7 arm64: dts: imx8mm: Fix NAND controller size-cells | * 8ccf18c82a ARM: dts: imx7: Fix NAND controller size-cells | * e884a6c2d4 drm: Fix potential null-ptr-deref in drm_vblank_destroy_worker() | * 07e56de876 drm/drv: Fix potential memory leak in drm_dev_init() | * 45c300613b drm/panel: simple: set bpc field for logic technologies displays | * 779f3f9e0c drm/vc4: kms: Fix IS_ERR() vs NULL check for vc4_kms | * 97e5b508e9 pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map | * 9a77b8557f parport_pc: Avoid FIFO port location truncation | * 5d03c2911c siox: fix possible memory leak in siox_device_add() | * 530e987a02 arm64: Fix bit-shifting UB in the MIDR_CPU_MODEL() macro | * d494449782 bpf: Fix memory leaks in __check_func_call | * 25521fd2e2 block: sed-opal: kmalloc the cmd/resp buffers | * 2f21d653c6 scsi: scsi_transport_sas: Fix error handling in sas_phy_add() | * 7cd28bc410 pinctrl: rockchip: list all pins in a possible mux route for PX30 | * ab79b8dbe2 ASoC: soc-utils: Remove __exit for snd_soc_util_exit() | * eaa8edd865 bpf, test_run: Fix alignment problem in bpf_prog_test_run_skb() | * 33cabe04d2 tty: n_gsm: fix sleep-in-atomic-context bug in gsm_control_send | * ae22294e21 serial: imx: Add missing .thaw_noirq hook | * 26db1cd519 serial: 8250: omap: Flush PM QOS work on remove | * e0db709a58 serial: 8250: omap: Fix unpaired pm_runtime_put_sync() in omap8250_remove() | * 83b6d4d6da serial: 8250_omap: remove wait loop from Errata i202 workaround | * 76db05ab70 serial: 8250: omap: Fix missing PM runtime calls for omap8250_set_mctrl() | * 2aee616a6b ARM: at91: pm: avoid soft resetting AC DLL | * 188546c780 ASoC: tas2764: Fix set_tdm_slot in case of single slot | * 5782896daf ASoC: tas2770: Fix set_tdm_slot in case of single slot | * 34eee4189b ASoC: core: Fix use-after-free in snd_soc_exit() | * aa6f8aecbb ARM: dts: at91: sama7g5: fix signal name of pin PB2 | * 487fff700f spi: stm32: Print summary 'callbacks suppressed' message | * 2cec2f65c1 arm64: dts: qcom: sm8350-hdk: Specify which LDO modes are allowed | * 44dbe66bb3 arm64: dts: qcom: sm8250-xperia-edo: Specify which LDO modes are allowed | * 8b2eae7def arm64: dts: qcom: sm8150-xperia-kumano: Specify which LDO modes are allowed | * c8e76eeea7 arm64: dts: qcom: sa8155p-adp: Specify which LDO modes are allowed | * 30571f28bb hugetlbfs: don't delete error page from pagecache | * 14ddbb83c3 KVM: x86/pmu: Do not speculatively query Intel GP PMCs that don't exist yet | * a9b964ed7c spi: intel: Use correct mask for flash and protected regions | * f4eb68642e mtd: spi-nor: intel-spi: Disable write protection only if asked | * 156d0c823c ASoC: codecs: jz4725b: Fix spelling mistake "Sourc" -> "Source", "Routee" -> "Route" | * 5907ff9f2c x86/cpu: Add several Intel server CPU model numbers | * 41e37d04e3 Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm | * b02a025dd1 btrfs: remove pointless and double ulist frees in error paths of qgroup tests | * 1c366c206f drm/imx: imx-tve: Fix return type of imx_tve_connector_mode_valid | * 1c8ded1b38 i2c: i801: add lis3lv02d's I2C address for Vostro 5568 | * b432581f19 i2c: tegra: Allocate DMA memory for DMA engine | * 7b0ae4c7b9 firmware: arm_scmi: Cleanup the core driver removal callback | * 1a8a2fef27 ACPI: x86: Add another system to quirk list for forcing StorageD3Enable | * 8a03a4a5cf NFSv4: Retry LOCK on OLD_STATEID during delegation return | * 49ca2227c4 btrfs: raid56: properly handle the error when unable to find the missing stripe | * 0f7bd3a2df RDMA/efa: Add EFA 0xefa2 PCI ID | * a42d4363e7 ACPI: scan: Add LATT2021 to acpi_ignore_dep_ids[] | * 004decd41b drm/amd/display: Remove wrong pipe control lock | * 7779efbb99 ASoC: rt1308-sdw: add the default value of some registers | * ef1e4ed858 selftests/intel_pstate: fix build for ARCH=x86_64 | * dfd3cc1ef3 selftests/futex: fix build for clang | * 648467236c ASoC: Intel: sof_sdw: add quirk variant for LAPBC710 NUC15 | * 64ee750c29 ASoC: codecs: jz4725b: fix capture selector naming | * 150b74cd06 ASoC: codecs: jz4725b: use right control for Capture Volume | * 5352d8b315 ASoC: codecs: jz4725b: fix reported volume for Master ctl | * 85134577a7 ASoC: codecs: jz4725b: add missed Line In power control bit | * 5e61dffb16 spi: intel: Fix the offset to get the 64K erase opcode | * c697cb2e66 ASoC: wm8962: Add an event handler for TEMP_HP and TEMP_SPK | * 569085124d ASoC: rt1019: Fix the TDM settings | * 4160a515c7 ASoC: mt6660: Keep the pm_runtime enables before component stuff in mt6660_i2c_probe | * 2963ec4535 ASoC: wm8997: Revert "ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe" | * 30a2f9479c ASoC: wm5110: Revert "ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe" | * 3bf6da38a2 ASoC: wm5102: Revert "ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe" | * 94fa250ea5 mm: shmem: don't truncate page if memory failure happens | * 003fa19591 mm: hwpoison: handle non-anonymous THP correctly | * a62b1bc603 mm: hwpoison: refactor refcount check handling * | 49ca4a5978 Revert "bpf, sockmap: Fix sk->sk_forward_alloc warn_on in sk_stream_kill_queues" * | 6fa2a43acd Revert "ALSA: usb-audio: Yet more regression for for the delayed card registration" * | ac2a7a141f Merge 5.15.79 into android13-5.15-lts |/ * 3df0eeae4d Linux 5.15.79 * 599b24eedf x86/cpu: Restore AMD's DE_CFG MSR after resume * 9132fa043f net: tun: call napi_schedule_prep() to ensure we own a napi * 1dea25e25a drm/amdkfd: Migrate in CPU page fault use current mm * a1c303fbd4 marvell: octeontx2: build error: unknown type name 'u64' * d948b22834 dmaengine: at_hdmac: Check return code of dma_async_device_register * c556ecf32a dmaengine: at_hdmac: Fix impossible condition * 8a941ff34e dmaengine: at_hdmac: Don't allow CPU to reorder channel enable * 53831f7a13 dmaengine: at_hdmac: Fix completion of unissued descriptor in case of errors * 14f5462e4a dmaengine: at_hdmac: Fix descriptor handling when issuing it to hardware * 5482403228 dmaengine: at_hdmac: Fix concurrency over the active list * 82ca19414f dmaengine: at_hdmac: Free the memset buf without holding the chan lock * 8fd36e069d dmaengine: at_hdmac: Fix concurrency over descriptor * 1ee012d452 dmaengine: at_hdmac: Fix concurrency problems by removing atc_complete_all() * 90c1b07406 dmaengine: at_hdmac: Protect atchan->status with the channel lock * b5ee1fe06a dmaengine: at_hdmac: Do not call the complete callback on device_terminate_all * 9bbf5df0fc dmaengine: at_hdmac: Fix premature completion of desc in issue_pending * f7d1aaa903 dmaengine: at_hdmac: Start transfer for cyclic channels in issue_pending * e9777b4efc dmaengine: at_hdmac: Don't start transactions at tx_submit level * 4e28674a0e dmaengine: at_hdmac: Fix at_lli struct definition * 49eba53137 cert host tools: Stop complaining about deprecated OpenSSL functions * 69e86c6268 can: j1939: j1939_send_one(): fix missing CAN header initialization * 81fc8f90b8 mm/shmem: use page_mapping() to detect page cache for uffd continue * e91451af11 mm/memremap.c: map FS_DAX device memory as decrypted * 48998c1773 mm/damon/dbgfs: check if rm_contexts input is for a real context * c736ed8541 udf: Fix a slab-out-of-bounds write bug in udf_find_entry() * 2e87eddf57 mms: sdhci-esdhc-imx: Fix SDHCI_RESET_ALL for CQHCI * 91c38504e5 btrfs: zoned: initialize device's zone info for seeding * 432c30ba3f btrfs: selftests: fix wrong error check in btrfs_free_dummy_root() * c9fe4719c6 btrfs: fix match incorrectly in dev_args_match_device * f96fd36936 wifi: ath11k: avoid deadlock during regulatory update in ath11k_regd_update() * 8e2b576caf platform/x86: hp_wmi: Fix rfkill causing soft blocked wifi * cb3ab0e1e0 drm/amdgpu: disable BACO on special BEIGE_GOBY card * dc066a7850 drm/i915/dmabuf: fix sg_table handling in map_dma_buf * afbd118838 nilfs2: fix use-after-free bug of ns_writer on remount * abc082aac0 nilfs2: fix deadlock in nilfs_count_free_blocks() * 589da22881 ata: libata-scsi: fix SYNCHRONIZE CACHE (16) command failure * 51ae4579a5 vmlinux.lds.h: Fix placement of '.data..decrypted' section * 1f8e08ab32 ALSA: usb-audio: Add DSD support for Accuphase DAC-60 * c2451f62b2 ALSA: usb-audio: Add quirk entry for M-Audio Micro * 031d1480a0 ALSA: usb-audio: Yet more regression for for the delayed card registration * 574f51e4aa ALSA: hda/realtek: Add Positivo C6300 model quirk * 7140d7aaf9 ALSA: hda: fix potential memleak in 'add_widget_node' * f6d7a487aa ALSA: hda/ca0132: add quirk for EVGA Z390 DARK * 1ccd55b390 ALSA: hda/hdmi - enable runtime pm for more AMD display audio * 29100c6742 mmc: sdhci-esdhc-imx: use the correct host caps for MMC_CAP_8_BIT_DATA * 3dce99e2eb mmc: sdhci-tegra: Fix SDHCI_RESET_ALL for CQHCI * 9d6bd33e6a mmc: sdhci_am654: Fix SDHCI_RESET_ALL for CQHCI * ad01f16ca9 mmc: sdhci-of-arasan: Fix SDHCI_RESET_ALL for CQHCI * 1aa78c1d01 mmc: cqhci: Provide helper for resetting both SDHCI and CQHCI * c198524a99 MIPS: jump_label: Fix compat branch range check * 9713ceffa4 arm64: efi: Fix handling of misaligned runtime regions and drop warning * 518e49f059 riscv: fix reserved memory setup * d07c3d7491 riscv: vdso: fix build with llvm * cc36c7fa5d riscv: process: fix kernel info leakage * a8d67367ab net: macvlan: fix memory leaks of macvlan_common_newlink * 7b194dd32b ethernet: tundra: free irq when alloc ring failed in tsi108_open() * 7de10342fe net: mv643xx_eth: disable napi when init rxq or txq failed in mv643xx_eth_open() * 88e1dd2d92 ethernet: s2io: disable napi when start nic failed in s2io_card_up() * 3652f1f8d3 net: atlantic: macsec: clear encryption keys from the stack * fca3b0a1fd net: phy: mscc: macsec: clear encryption keys when freeing a flow * 60a0af8813 stmmac: dwmac-loongson: fix missing of_node_put() while module exiting * ee4a9bd2c7 stmmac: dwmac-loongson: fix missing pci_disable_device() in loongson_dwmac_probe() * 4a8770eebc stmmac: dwmac-loongson: fix missing pci_disable_msi() while module exiting * 83196d8dc5 cxgb4vf: shut down the adapter when t4vf_update_port_info() failed in cxgb4vf_open() * 49d8a6e24a mctp: Fix an error handling path in mctp_init() * 29961d2332 stmmac: intel: Update PCH PTP clock rate from 200MHz to 204.8MHz * 8604bebc5c stmmac: intel: Enable 2.5Gbps for Intel AlderLake-S * 7dec6dae2b net: cxgb3_main: disable napi when bind qsets failed in cxgb_up() * 960f9d30de net: cpsw: disable napi in cpsw_ndo_open() * 1360778fdb net/mlx5e: E-Switch, Fix comparing termination table instance * f13e9ebd29 net/mlx5: Allow async trigger completion execution on single CPU systems * 48b73b46a5 net/mlx5: Bridge, verify LAG state when adding bond to bridge * 13b1ea861e net: wwan: iosm: fix memory leak in ipc_pcie_read_bios_cfg * 7e4dcacb4d net: nixge: disable napi when enable interrupts failed in nixge_open() * 409731df63 net: marvell: prestera: fix memory leak in prestera_rxtx_switch_init() * 77ff31cba9 netfilter: Cleanup nft_net->module_list from nf_tables_exit_net() * e62cb1c093 netfilter: nfnetlink: fix potential dead lock in nfnetlink_rcv_msg() * 0bd20318da perf tools: Add the include/perf/ directory to .gitignore * a733671e38 perf stat: Fix printing os->prefix in CSV metrics output * c36e9e2c4a drivers: net: xgene: disable napi when register irq failed in xgene_enet_open() * 4689bd3a1b net: lapbether: fix issue of invalid opcode in lapbeth_open() * 1dd27541aa dmaengine: ti: k3-udma-glue: fix memory leak when register device fail * 992e966caf dmaengine: mv_xor_v2: Fix a resource leak in mv_xor_v2_remove() * 9766af75ba dmaengine: pxa_dma: use platform_get_irq_optional * 301caa0609 tipc: fix the msg->req tlv len check in tipc_nl_compat_name_table_dump_header * 6a264203db net: broadcom: Fix BCMGENET Kconfig * e7871b9a21 net: stmmac: dwmac-meson8b: fix meson8b_devm_clk_prepare_enable() * 261178a1c2 can: af_can: fix NULL pointer dereference in can_rx_register() * 2acb2779b1 ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network * 13ecaa6832 tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent * bc79cb9fb0 drm/vc4: Fix missing platform_unregister_drivers() call in vc4_drm_register() * 2845bc9070 net: wwan: mhi: fix memory leak in mhi_mbim_dellink * 2ce2348c28 net: wwan: iosm: fix memory leak in ipc_wwan_dellink * 7b6bc50f65 hamradio: fix issue of dev reference count leakage in bpq_device_event() * f59adebb8c net: lapbether: fix issue of dev reference count leakage in lapbeth_device_event() * 119407dc32 KVM: s390: pv: don't allow userspace to set the clock under PV * 500bcd3a99 phy: ralink: mt7621-pci: add sentinel to quirks table * 151dc8087b capabilities: fix undefined behavior in bit shift for CAP_TO_MASK * 435c7ddfd5 net: fman: Unregister ethernet device on removal * 3a504d6d96 bnxt_en: fix potentially incorrect return value for ndo_rx_flow_steer * ac257c43fa bnxt_en: Fix possible crash in bnxt_hwrm_set_coal() * d7569302a7 net: tun: Fix memory leaks of napi_get_frags * 430d1f4964 octeontx2-pf: NIX TX overwrites SQ_CTX_HW_S[SQ_INT] * ec0db81883 octeontx2-pf: Use hardware register for CQE count * b89a0d8859 macsec: clear encryption keys from the stack after setting up offload * eeba7f07a0 macsec: fix detection of RXSCs when toggling offloading * 3070a880eb macsec: fix secy->n_rx_sc accounting * e957555a36 macsec: delete new rxsc when offload fails * ad25a115f5 net: gso: fix panic on frag_list with mixed head alloc types * 466ce46f25 bpf: Fix wrong reg type conversion in release_reference() * 35d8130f2a bpf: Add helper macro bpf_for_each_reg_in_vstate * 61274498fb bpf, sock_map: Move cancel_work_sync() out of sock lock * 32b5dd03be bpf: Fix sockmap calling sleepable function in teardown path * e991558189 bpf, sockmap: Fix sk->sk_forward_alloc warn_on in sk_stream_kill_queues * 5ad95d7134 HID: hyperv: fix possible memory leak in mousevsc_probe() * 6dcdd1b68b bpftool: Fix NULL pointer dereference when pin {PROG, MAP, LINK} without FILE * 2fc902245c wifi: mac80211: Set TWT Information Frame Disabled bit as 1 * 95adbd2ac8 bpf, sockmap: Fix the sk->sk_forward_alloc warning of sk_stream_kill_queues * 06615967d4 bpf, verifier: Fix memory leak in array reallocation for stack state * 4335a82c4f soundwire: qcom: check for outanding writes before doing a read * ae4dad2e53 soundwire: qcom: reinit broadcast completion * 38c9fa2cc6 wifi: cfg80211: fix memory leak in query_regdb_file() * 2c6ba0a787 wifi: cfg80211: silence a sparse RCU warning * 921738c280 phy: stm32: fix an error code in probe * fa722006f7 hwspinlock: qcom: correct MMIO max register for newer SoCs * 3c1bb6187e drm/amdkfd: Fix NULL pointer dereference in svm_migrate_to_ram() * b1f8522771 drm/amdkfd: handle CPU fault on COW mapping * 36770c045a drm/amdkfd: avoid recursive lock in migrations back to RAM * 93a5de7e88 fuse: fix readdir cache race * 1920cf9454 thunderbolt: Add DP OUT resource when DP tunnel is discovered * 47dbf24969 thunderbolt: Tear down existing tunnels when resuming from hibernate And update the .xml file with the new symbol that we are tracking and the abi preservation fix: 1 function symbol(s) added 'void __dev_kfree_skb_irq(struct sk_buff *, enum skb_free_reason)' type 'struct sdhci_host' changed member 'union { struct { u8 reinit_uhs; u8 reserve01; u8 drv_type; u16 reserve02; u32 reserve03; }; struct { u64 android_kabi_reserved1; }; union { }; }' was added member 'u64 android_kabi_reserved1' was removed Change-Id: If4a059230a137dee54298fff61ec87306bf96b0f Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-03-24 08:44:06 +00:00
Daniel Rosenberg	f5f4199c10	ANDROID: fuse-bpf v1.1 ... These patches extend FUSE to be able to act as a stacked filesystem. This allows pure passthrough, where the fuse file system simply reflects the lower filesystem, and also allows optional pre and post filtering in BPF and/or the userspace daemon as needed. This can dramatically reduce or even eliminate transitions to and from userspace. See https://lwn.net/Articles/915717/ Note that this patch set has been extensively tested in common-android13-5.10 This is a squash of these changes cherry-picked from common-android13-5.10 ANDROID: fuse-bpf: Make compile and pass test ANDROID: fuse-bpf: set error_in to ENOENT in negative lookup ANDROID: fuse-bpf: Add ability to run ranges of tests to fuse_test ANDROID: fuse-bpf: Add test for lookup postfilter ANDROID: fuse-bpf: readddir postfilter fixes ANDROID: fix kernelci error in fs/fuse/dir.c ANDROID: fuse-bpf: Fix RCU/reference issue ANDROID: fuse-bpf: Always call revalidate for backing ANDROID: fuse-bpf: Adjust backing handle funcs ANDROID: fuse-bpf: Fix revalidate error path and backing handling ANDROID: fuse-bpf: Fix use of get_fuse_inode ANDROID: fuse: Don't use readdirplus w/ nodeid 0 ANDROID: fuse-bpf: Introduce readdirplus test case for fuse bpf ANDROID: fuse-bpf: Make sure force_again flag is false by default ANDROID: fuse-bpf: Make inodes with backing_fd reachable for regular FUSE fuse_iget Revert "ANDROID: fuse-bpf: use target instead of parent inode to execute backing revalidate" ANDROID: fuse-bpf: use target instead of parent inode to execute backing revalidate ANDROID: fuse-bpf: Fix misuse of args.out_args ANDROID: fuse-bpf: Fix non-fusebpf build ANDROID: fuse-bpf: Use fuse_bpf_args in uapi ANDROID: fuse-bpf: Fix read_iter ANDROID: fuse-bpf: Use cache and refcount ANDROID: fuse-bpf: Rename iocb_fuse to iocb_orig ANDROID: fuse-bpf: Fix fixattr in rename ANDROID: fuse-bpf: Fix readdir ANDROID: fuse-bpf: Fix lseek return value for offset 0 ANDROID: fuse-bpf: fix read_iter and write_iter ANDROID: fuse-bpf: fix special devices ANDROID: fuse-bpf: support FUSE_LSEEK ANDROID: fuse-bpf: Add support for FUSE_COPY_FILE_RANGE ANDROID: fuse-bpf: Report errors to finalize ANDROID: fuse-bpf: Avoid reusing uint64_t for file ANDROID: fuse-bpf: Fix CONFIG_FUSE_BPF typo in FUSE_FSYNCDIR ANDROID: fuse-bpf: Move fd operations to be synchronous ANDROID: fuse-bpf: Invalidate if lower is unhashed ANDROID: fuse-bpf: Move bpf earlier in fuse_permission ANDROID: fuse-bpf: Update attributes on file write ANDROID: fuse: allow mounting with no userspace daemon ANDROID: fuse-bpf: Support FUSE_STATFS ANDROID: fuse-bpf: Fix filldir ANDROID: fuse-bpf: fix fuse_create_open_finalize ANDROID: fuse: add bpf support for removexattr ANDROID: fuse-bpf: Fix truncate ANDROID: fuse-bpf: Support inotify ANDROID: fuse-bpf: Make compile with CONFIG_FUSE but no CONFIG_FUSE_BPF ANDROID: fuse-bpf: Fix perms on readdir ANDROID: fuse: Fix umasking in backing ANDROID: fs/fuse: Backing move returns EXDEV if TO not backed ANDROID: bpf-fuse: Fix Setattr ANDROID: fuse-bpf: Check if mkdir dentry setup ANDROID: fuse-bpf: Close backing fds in fuse_dentry_revalidate ANDROID: fuse-bpf: Close backing-fd on both paths ANDROID: fuse-bpf: Partial fix for mmap'd files ANDROID: fuse-bpf: Restore a missing const ANDROID: Add fuse-bpf self tests ANDROID: Add FUSE_BPF to gki_defconfig ANDROID: fuse-bpf v1 ANDROID: fuse: Move functions in preparation for fuse-bpf Bug: 202785178 Test: test_fuse passes on linux. On cuttlefish, atest android.scopedstorage.cts.host.ScopedStorageHostTest passes with fuse-bpf enabled and disabled Change-Id: Idb099c281f9b39ff2c46fa3ebc63e508758416ee Signed-off-by: Paul Lawrence <paullawrence@google.com> Signed-off-by: Daniel Rosenberg <drosen@google.com>	2023-02-17 22:10:50 +00:00
Greg Kroah-Hartman	20ec745823	Merge 5.15.86 into android13-5.15-lts ... Changes in 5.15.86 drm/amd/display: Manually adjust strobe for DCN303 usb: musb: remove extra check in musb_gadget_vbus_draw arm64: dts: qcom: ipq6018-cp01-c1: use BLSPI1 pins arm64: dts: qcom: sm8250-sony-xperia-edo: fix touchscreen bias-disable arm64: dts: qcom: msm8996: Add MSM8996 Pro support arm64: dts: qcom: msm8996: fix supported-hw in cpufreq OPP tables arm64: dts: qcom: msm8996: fix GPU OPP table ARM: dts: qcom: apq8064: fix coresight compatible arm64: dts: qcom: sdm630: fix UART1 pin bias arm64: dts: qcom: sdm845-cheza: fix AP suspend pin bias arm64: dts: qcom: msm8916: Drop MSS fallback compatible objtool, kcsan: Add volatile read/write instrumentation to whitelist ARM: dts: stm32: Drop stm32mp15xc.dtsi from Avenger96 ARM: dts: stm32: Fix AV96 WLAN regulator gpio property drivers: soc: ti: knav_qmss_queue: Mark knav_acc_firmwares as static arm64: dts: qcom: pm660: Use unique ADC5_VCOIN address in node name arm64: dts: qcom: sm8250: correct LPASS pin pull down soc: qcom: llcc: make irq truly optional arm64: dts: qcom: Correct QMP PHY child node name arm64: dts: qcom: sm8150: fix UFS PHY registers arm64: dts: qcom: sm8250: fix UFS PHY registers arm64: dts: qcom: sm8350: fix UFS PHY registers arm64: dts: qcom: sm8250: drop bogus DP PHY clock soc: qcom: apr: make code more reuseable soc: qcom: apr: Add check for idr_alloc and of_property_read_string_index arm64: dts: qcom: sm6125: fix SDHCI CQE reg names arm: dts: spear600: Fix clcd interrupt soc: ti: knav_qmss_queue: Use pm_runtime_resume_and_get instead of pm_runtime_get_sync soc: ti: knav_qmss_queue: Fix PM disable depth imbalance in knav_queue_probe soc: ti: smartreflex: Fix PM disable depth imbalance in omap_sr_probe arm64: Treat ESR_ELx as a 64-bit register arm64: mm: kfence: only handle translation faults perf: arm_dsu: Fix hotplug callback leak in dsu_pmu_init() perf/arm_dmc620: Fix hotplug callback leak in dmc620_pmu_init() perf/smmuv3: Fix hotplug callback leak in arm_smmu_pmu_init() arm64: dts: ti: k3-am65-main: Drop dma-coherent in crypto node arm64: dts: ti: k3-j721e-main: Drop dma-coherent in crypto node ARM: dts: nuvoton: Remove bogus unit addresses from fixed-partition nodes arm64: dts: mt6779: Fix devicetree build warnings arm64: dts: mt2712e: Fix unit_address_vs_reg warning for oscillators arm64: dts: mt2712e: Fix unit address for pinctrl node arm64: dts: mt2712-evb: Fix vproc fixed regulators unit names arm64: dts: mt2712-evb: Fix usb vbus regulators unit names arm64: dts: mediatek: pumpkin-common: Fix devicetree warnings arm64: dts: mediatek: mt6797: Fix 26M oscillator unit name ARM: dts: dove: Fix assigned-addresses for every PCIe Root Port ARM: dts: armada-370: Fix assigned-addresses for every PCIe Root Port ARM: dts: armada-xp: Fix assigned-addresses for every PCIe Root Port ARM: dts: armada-375: Fix assigned-addresses for every PCIe Root Port ARM: dts: armada-38x: Fix assigned-addresses for every PCIe Root Port ARM: dts: armada-39x: Fix assigned-addresses for every PCIe Root Port ARM: dts: turris-omnia: Add ethernet aliases ARM: dts: turris-omnia: Add switch port 6 node arm64: dts: armada-3720-turris-mox: Add missing interrupt for RTC seccomp: Move copy_seccomp() to no failure path. pstore/ram: Fix error return code in ramoops_probe() ARM: mmp: fix timer_read delay pstore: Avoid kcore oops by vmap()ing with VM_IOREMAP tpm/tpm_ftpm_tee: Fix error handling in ftpm_mod_init() tpm/tpm_crb: Fix error message in __crb_relinquish_locality() ovl: store lower path in ovl_inode ovl: use ovl_copy_{real,upper}attr() wrappers ovl: remove privs in ovl_copyfile() ovl: remove privs in ovl_fallocate() sched/fair: Cleanup task_util and capacity type sched/uclamp: Fix relationship between uclamp and migration margin sched/uclamp: Make task_fits_capacity() use util_fits_cpu() sched/uclamp: Make select_idle_capacity() use util_fits_cpu() sched/fair: Removed useless update of p->recent_used_cpu sched/core: Introduce sched_asym_cpucap_active() sched/uclamp: Make asym_fits_capacity() use util_fits_cpu() cpuidle: dt: Return the correct numbers of parsed idle states alpha: fix TIF_NOTIFY_SIGNAL handling alpha: fix syscall entry in !AUDUT_SYSCALL case x86/sgx: Reduce delay and interference of enclave release PM: hibernate: Fix mistake in kerneldoc comment fs: don't audit the capability check in simple_xattr_list() cpufreq: qcom-hw: Fix memory leak in qcom_cpufreq_hw_read_lut() selftests/ftrace: event_triggers: wait longer for test_event_enable perf: Fix possible memleak in pmu_dev_alloc() lib/debugobjects: fix stat count and optimize debug_objects_mem_init platform/x86: huawei-wmi: fix return value calculation timerqueue: Use rb_entry_safe() in timerqueue_getnext() proc: fixup uptime selftest lib/fonts: fix undefined behavior in bit shift for get_default_font ocfs2: fix memory leak in ocfs2_stack_glue_init() MIPS: vpe-mt: fix possible memory leak while module exiting MIPS: vpe-cmp: fix possible memory leak while module exiting selftests/efivarfs: Add checking of the test return value PNP: fix name memory leak in pnp_alloc_dev() perf/x86/intel/uncore: Fix reference count leak in sad_cfg_iio_topology() perf/x86/intel/uncore: Fix reference count leak in hswep_has_limit_sbox() perf/x86/intel/uncore: Fix reference count leak in snr_uncore_mmio_map() perf/x86/intel/uncore: Fix reference count leak in __uncore_imc_init_box() platform/chrome: cros_usbpd_notify: Fix error handling in cros_usbpd_notify_init() thermal: core: fix some possible name leaks in error paths irqchip: gic-pm: Use pm_runtime_resume_and_get() in gic_probe() irqchip/wpcm450: Fix memory leak in wpcm450_aic_of_init() EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() SUNRPC: Return true/false (not 1/0) from bool functions NFSD: Finish converting the NFSv2 GETACL result encoder nfsd: don't call nfsd_file_put from client states seqfile display genirq/irqdesc: Don't try to remove non-existing sysfs files cpufreq: amd_freq_sensitivity: Add missing pci_dev_put() libfs: add DEFINE_SIMPLE_ATTRIBUTE_SIGNED for signed value lib/notifier-error-inject: fix error when writing -errno to debugfs file debugfs: fix error when writing negative value to atomic_t debugfs file rapidio: fix possible name leaks when rio_add_device() fails rapidio: rio: fix possible name leak in rio_register_mport() clocksource/drivers/sh_cmt: Access registers according to spec mips: ralink: mt7621: define MT7621_SYSC_BASE with __iomem mips: ralink: mt7621: soc queries and tests as functions mips: ralink: mt7621: do not use kzalloc too early futex: Move to kernel/futex/ futex: Resend potentially swallowed owner death notification cpu/hotplug: Make target_store() a nop when target == state cpu/hotplug: Do not bail-out in DYING/STARTING sections clocksource/drivers/timer-ti-dm: Fix missing clk_disable_unprepare in dmtimer_systimer_init_clock() ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage() uprobes/x86: Allow to probe a NOP instruction with 0x66 prefix x86/xen: Fix memory leak in xen_smp_intr_init{_pv}() x86/xen: Fix memory leak in xen_init_lock_cpu() xen/privcmd: Fix a possible warning in privcmd_ioctl_mmap_resource() PM: runtime: Do not call __rpm_callback() from rpm_idle() platform/chrome: cros_ec_typec: Cleanup switch handle return paths platform/chrome: cros_ec_typec: zero out stale pointers platform/x86: mxm-wmi: fix memleak in mxm_wmi_call_mx[ds|mx]() platform/x86: intel_scu_ipc: fix possible name leak in __intel_scu_ipc_register() MIPS: BCM63xx: Add check for NULL for clk in clk_enable MIPS: OCTEON: warn only once if deprecated link status is being used lockd: set other missing fields when unlocking files fs: sysv: Fix sysv_nblocks() returns wrong value rapidio: fix possible UAF when kfifo_alloc() fails eventfd: change int to __u64 in eventfd_signal() ifndef CONFIG_EVENTFD relay: fix type mismatch when allocating memory in relay_create_buf() hfs: Fix OOB Write in hfs_asc2mac rapidio: devices: fix missing put_device in mport_cdev_open platform/mellanox: mlxbf-pmc: Fix event typo wifi: ath9k: hif_usb: fix memory leak of urbs in ath9k_hif_usb_dealloc_tx_urbs() wifi: ath9k: hif_usb: Fix use-after-free in ath9k_hif_usb_reg_in_cb() wifi: rtl8xxxu: Fix reading the vendor of combo chips drm/bridge: adv7533: remove dynamic lane switching from adv7533 bridge libbpf: Fix use-after-free in btf_dump_name_dups libbpf: Fix null-pointer dereference in find_prog_by_sec_insn() ata: libata: move ata_{port,link,dev}_dbg to standard pr_XXX() macros ata: add/use ata_taskfile::{error|status} fields ata: libata: fix NCQ autosense logic ipmi: kcs: Poll OBF briefly to reduce OBE latency drm/amdgpu/powerplay/psm: Fix memory leak in power state init media: v4l2-ctrls: Fix off-by-one error in integer menu control check media: coda: jpeg: Add check for kmalloc media: adv748x: afe: Select input port when initializing AFE media: i2c: ad5820: Fix error path venus: pm_helpers: Fix error check in vcodec_domains_get() soreuseport: Fix socket selection for SO_INCOMING_CPU. media: exynos4-is: don't rely on the v4l2_async_subdev internals libbpf: Btf dedup identical struct test needs check for nested structs/arrays can: kvaser_usb: do not increase tx statistics when sending error message frames can: kvaser_usb: kvaser_usb_leaf: Get capabilities from device can: kvaser_usb: kvaser_usb_leaf: Rename {leaf,usbcan}_cmd_error_event to {leaf,usbcan}_cmd_can_error_event can: kvaser_usb: kvaser_usb_leaf: Handle CMD_ERROR_EVENT can: kvaser_usb_leaf: Set Warning state even without bus errors can: kvaser_usb: make use of units.h in assignment of frequency can: kvaser_usb_leaf: Fix improved state not being reported can: kvaser_usb_leaf: Fix wrong CAN state after stopping can: kvaser_usb_leaf: Fix bogus restart events can: kvaser_usb: Add struct kvaser_usb_busparams can: kvaser_usb: Compare requested bittiming parameters with actual parameters in do_set_{,data}_bittiming drm/rockchip: lvds: fix PM usage counter unbalance in poweron clk: renesas: r9a06g032: Repair grave increment error spi: Update reference to struct spi_controller drm/panel/panel-sitronix-st7701: Remove panel on DSI attach failure ima: Handle -ESTALE returned by ima_filter_rule_match() drm/msm/hdmi: drop unused GPIO support drm/msm/hdmi: use devres helper for runtime PM management bpf: Fix slot type check in check_stack_write_var_off media: vivid: fix compose size exceed boundary media: platform: exynos4-is: fix return value check in fimc_md_probe() bpf: propagate precision in ALU/ALU64 operations bpf: Check the other end of slot_type for STACK_SPILL bpf: propagate precision across all frames, not just the last one clk: qcom: gcc-sm8250: Use retention mode for USB GDSCs mtd: Fix device name leak when register device failed in add_mtd_device() Input: joystick - fix Kconfig warning for JOYSTICK_ADC wifi: rsi: Fix handling of 802.3 EAPOL frames sent via control port media: camss: Clean up received buffers on failed start of streaming net, proc: Provide PROC_FS=n fallback for proc_create_net_single_write() rxrpc: Fix ack.bufferSize to be 0 when generating an ack bfq: fix waker_bfqq inconsistency crash drm/radeon: Add the missed acpi_put_table() to fix memory leak drm/mediatek: Modify dpi power on/off sequence. ASoC: pxa: fix null-pointer dereference in filter() libbpf: Fix uninitialized warning in btf_dump_dump_type_data nvmet: only allocate a single slab for bvecs regulator: core: fix unbalanced of node refcount in regulator_dev_lookup() amdgpu/pm: prevent array underflow in vega20_odn_edit_dpm_table() nvme: return err on nvme_init_non_mdts_limits fail regulator: qcom-rpmh: Fix PMR735a S3 regulator spec drm/fourcc: Add packed 10bit YUV 4:2:0 format drm/fourcc: Fix vsub/hsub for Q410 and Q401 integrity: Fix memory leakage in keyring allocation error path ima: Fix misuse of dereference of pointer in template_desc_init_fields() block: clear ->slave_dir when dropping the main slave_dir reference wifi: ath10k: Fix return value in ath10k_pci_init() drm/msm/a6xx: Fix speed-bin detection vs probe-defer mtd: lpddr2_nvm: Fix possible null-ptr-deref Input: elants_i2c - properly handle the reset GPIO when power is off media: vidtv: Fix use-after-free in vidtv_bridge_dvb_init() media: solo6x10: fix possible memory leak in solo_sysfs_init() media: platform: exynos4-is: Fix error handling in fimc_md_init() media: videobuf-dma-contig: use dma_mmap_coherent inet: add READ_ONCE(sk->sk_bound_dev_if) in inet_csk_bind_conflict() mtd: spi-nor: hide jedec_id sysfs attribute if not present mtd: spi-nor: Fix the number of bytes for the dummy cycles bpf: Move skb->len == 0 checks into __bpf_redirect HID: hid-sensor-custom: set fixed size for custom attributes pinctrl: k210: call of_node_put() ALSA: pcm: fix undefined behavior in bit shift for SNDRV_PCM_RATE_KNOT ALSA: seq: fix undefined behavior in bit shift for SNDRV_SEQ_FILTER_USE_EVENT regulator: core: use kfree_const() to free space conditionally clk: rockchip: Fix memory leak in rockchip_clk_register_pll() drm/amdgpu: fix pci device refcount leak bonding: fix link recovery in mode 2 when updelay is nonzero mtd: maps: pxa2xx-flash: fix memory leak in probe drbd: remove call to memset before free device/resource/connection drbd: destroy workqueue when drbd device was freed ASoC: qcom: Add checks for devm_kcalloc media: vimc: Fix wrong function called when vimc_init() fails media: imon: fix a race condition in send_packet() clk: imx8mn: rename vpu_pll to m7_alt_pll clk: imx: replace osc_hdmi with dummy clk: imx8mn: fix imx8mn_sai2_sels clocks list clk: imx8mn: fix imx8mn_enet_phy_sels clocks list pinctrl: pinconf-generic: add missing of_node_put() media: dvb-core: Fix ignored return value in dvb_register_frontend() media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() media: s5p-mfc: Add variant data for MFC v7 hardware for Exynos 3250 SoC drm/tegra: Add missing clk_disable_unprepare() in tegra_dc_probe() ASoC: dt-bindings: wcd9335: fix reset line polarity in example ASoC: mediatek: mtk-btcvsd: Add checks for write and read of mtk_btcvsd_snd NFSv4.2: Clear FATTR4_WORD2_SECURITY_LABEL when done decoding NFSv4.2: Fix a memory stomp in decode_attr_security_label NFSv4.2: Fix initialisation of struct nfs4_label NFSv4: Fix a credential leak in _nfs4_discover_trunking() NFSv4: Fix a deadlock between nfs4_open_recover_helper() and delegreturn NFS: Fix an Oops in nfs_d_automount() ALSA: asihpi: fix missing pci_disable_device() wifi: iwlwifi: mvm: fix double free on tx path. ASoC: mediatek: mt8173: Fix debugfs registration for components ASoC: mediatek: mt8173: Enable IRQ when pdata is ready drm/amd/pm/smu11: BACO is supported when it's in BACO state drm/radeon: Fix PCI device refcount leak in radeon_atrm_get_bios() drm/amdgpu: Fix PCI device refcount leak in amdgpu_atrm_get_bios() drm/amdkfd: Fix memory leakage ASoC: pcm512x: Fix PM disable depth imbalance in pcm512x_probe netfilter: conntrack: set icmpv6 redirects as RELATED Input: wistron_btns - disable on UML bpf, sockmap: Fix repeated calls to sock_put() when msg has more_data bpf, sockmap: Fix missing BPF_F_INGRESS flag when using apply_bytes bpf, sockmap: Fix data loss caused by using apply_bytes on ingress redirect bonding: uninitialized variable in bond_miimon_inspect() spi: spidev: mask SPI_CS_HIGH in SPI_IOC_RD_MODE wifi: mac80211: fix memory leak in ieee80211_if_add() wifi: cfg80211: Fix not unregister reg_pdev when load_builtin_regdb_keys() fails mt76: stop the radar detector after leaving dfs channel wifi: mt76: mt7921: fix reporting of TX AGGR histogram wifi: mt76: fix coverity overrun-call in mt76_get_txpower() regulator: core: fix module refcount leak in set_supply() clk: qcom: lpass-sc7180: Fix pm_runtime usage clk: qcom: clk-krait: fix wrong div2 functions hsr: Add a rcu-read lock to hsr_forward_skb(). hsr: Avoid double remove of a node. hsr: Disable netpoll. hsr: Synchronize sending frames to have always incremented outgoing seq nr. hsr: Synchronize sequence number updates. configfs: fix possible memory leak in configfs_create_dir() regulator: core: fix resource leak in regulator_register() hwmon: (jc42) Convert register access and caching to regmap/regcache hwmon: (jc42) Restore the min/max/critical temperatures on resume bpf, sockmap: fix race in sock_map_free() ALSA: pcm: Set missing stop_operating flag at undoing trigger start media: saa7164: fix missing pci_disable_device() ALSA: mts64: fix possible null-ptr-defer in snd_mts64_interrupt xprtrdma: Fix regbuf data not freed in rpcrdma_req_create() SUNRPC: Fix missing release socket in rpc_sockname() NFSv4.x: Fail client initialisation if state manager thread can't run riscv, bpf: Emit fixed-length instructions for BPF_PSEUDO_FUNC mmc: alcor: fix return value check of mmc_add_host() mmc: moxart: fix return value check of mmc_add_host() mmc: mxcmmc: fix return value check of mmc_add_host() mmc: pxamci: fix return value check of mmc_add_host() mmc: rtsx_pci: fix return value check of mmc_add_host() mmc: rtsx_usb_sdmmc: fix return value check of mmc_add_host() mmc: toshsd: fix return value check of mmc_add_host() mmc: vub300: fix return value check of mmc_add_host() mmc: wmt-sdmmc: fix return value check of mmc_add_host() mmc: atmel-mci: fix return value check of mmc_add_host() mmc: omap_hsmmc: fix return value check of mmc_add_host() mmc: meson-gx: fix return value check of mmc_add_host() mmc: via-sdmmc: fix return value check of mmc_add_host() mmc: wbsd: fix return value check of mmc_add_host() mmc: mmci: fix return value check of mmc_add_host() mmc: renesas_sdhi: alway populate SCC pointer memstick: ms_block: Add error handling support for add_disk() memstick/ms_block: Add check for alloc_ordered_workqueue mmc: core: Normalize the error handling branch in sd_read_ext_regs() regulator: qcom-labibb: Fix missing of_node_put() in qcom_labibb_regulator_probe() media: c8sectpfe: Add of_node_put() when breaking out of loop media: coda: Add check for dcoda_iram_alloc media: coda: Add check for kmalloc clk: samsung: Fix memory leak in _samsung_clk_register_pll() spi: spi-gpio: Don't set MOSI as an input if not 3WIRE mode wifi: rtl8xxxu: Add __packed to struct rtl8723bu_c2h wifi: rtl8xxxu: Fix the channel width reporting wifi: brcmfmac: Fix error return code in brcmf_sdio_download_firmware() blktrace: Fix output non-blktrace event when blk_classic option enabled bpf: Do not zero-extend kfunc return values clk: socfpga: Fix memory leak in socfpga_gate_init() net: vmw_vsock: vmci: Check memcpy_from_msg() net: defxx: Fix missing err handling in dfx_init() net: stmmac: selftests: fix potential memleak in stmmac_test_arpoffload() net: stmmac: fix possible memory leak in stmmac_dvr_probe() drivers: net: qlcnic: Fix potential memory leak in qlcnic_sriov_init() of: overlay: fix null pointer dereferencing in find_dup_cset_node_entry() and find_dup_cset_prop() ethernet: s2io: don't call dev_kfree_skb() under spin_lock_irqsave() net: farsync: Fix kmemleak when rmmods farsync net/tunnel: wait until all sk_user_data reader finish before releasing the sock net: apple: mace: don't call dev_kfree_skb() under spin_lock_irqsave() net: apple: bmac: don't call dev_kfree_skb() under spin_lock_irqsave() net: emaclite: don't call dev_kfree_skb() under spin_lock_irqsave() net: ethernet: dnet: don't call dev_kfree_skb() under spin_lock_irqsave() hamradio: don't call dev_kfree_skb() under spin_lock_irqsave() net: amd: lance: don't call dev_kfree_skb() under spin_lock_irqsave() af_unix: call proto_unregister() in the error path in af_unix_init() net: amd-xgbe: Fix logic around active and passive cables net: amd-xgbe: Check only the minimum speed for active/passive cables can: tcan4x5x: Remove invalid write in clear_interrupts can: m_can: Call the RAM init directly from m_can_chip_config can: tcan4x5x: Fix use of register error status mask net: lan9303: Fix read error execution path ntb_netdev: Use dev_kfree_skb_any() in interrupt context sctp: sysctl: make extra pointers netns aware Bluetooth: MGMT: Fix error report for ADD_EXT_ADV_PARAMS Bluetooth: btintel: Fix missing free skb in btintel_setup_combined() Bluetooth: btusb: don't call kfree_skb() under spin_lock_irqsave() Bluetooth: hci_qca: don't call kfree_skb() under spin_lock_irqsave() Bluetooth: hci_ll: don't call kfree_skb() under spin_lock_irqsave() Bluetooth: hci_h5: don't call kfree_skb() under spin_lock_irqsave() Bluetooth: hci_bcsp: don't call kfree_skb() under spin_lock_irqsave() Bluetooth: hci_core: don't call kfree_skb() under spin_lock_irqsave() Bluetooth: RFCOMM: don't call kfree_skb() under spin_lock_irqsave() stmmac: fix potential division by 0 i40e: Fix the inability to attach XDP program on downed interface net: dsa: tag_8021q: avoid leaking ctx on dsa_tag_8021q_register() error path apparmor: fix a memleak in multi_transaction_new() apparmor: fix lockdep warning when removing a namespace apparmor: Fix abi check to include v8 abi crypto: hisilicon/qm - fix missing destroy qp_idr crypto: sun8i-ss - use dma_addr instead u32 crypto: nitrox - avoid double free on error path in nitrox_sriov_init() scsi: core: Fix a race between scsi_done() and scsi_timeout() apparmor: Use pointer to struct aa_label for lbs_cred PCI: dwc: Fix n_fts[] array overrun RDMA/core: Fix order of nldev_exit call PCI: pci-epf-test: Register notifier if only core_init_notifier is enabled f2fs: Fix the race condition of resize flag between resizefs crypto: rockchip - do not do custom power management crypto: rockchip - do not store mode globally crypto: rockchip - add fallback for cipher crypto: rockchip - add fallback for ahash crypto: rockchip - better handle cipher key crypto: rockchip - remove non-aligned handling crypto: rockchip - rework by using crypto_engine apparmor: Fix memleak in alloc_ns() f2fs: fix to invalidate dcc->f2fs_issue_discard in error path f2fs: fix normal discard process f2fs: fix to destroy sbi->post_read_wq in error path of f2fs_fill_super() RDMA/irdma: Report the correct link speed scsi: qla2xxx: Fix set-but-not-used variable warnings RDMA/siw: Fix immediate work request flush to completion queue IB/mad: Don't call to function that might sleep while in atomic context PCI: vmd: Disable MSI remapping after suspend RDMA/restrack: Release MR restrack when delete RDMA/core: Make sure "ib_port" is valid when access sysfs node RDMA/nldev: Return "-EAGAIN" if the cm_id isn't from expected port RDMA/siw: Set defined status for work completion with undefined status scsi: scsi_debug: Fix a warning in resp_write_scat() crypto: ccree - Remove debugfs when platform_driver_register failed crypto: cryptd - Use request context instead of stack for sub-request crypto: hisilicon/qm - add missing pci_dev_put() in q_num_set() RDMA/hns: Repacing 'dseg_len' by macros in fill_ext_sge_inl_data() RDMA/hns: Fix ext_sge num error when post send PCI: Check for alloc failure in pci_request_irq() RDMA/hfi: Decrease PCI device reference count in error path crypto: ccree - Make cc_debugfs_global_fini() available for module init function RDMA/hns: fix memory leak in hns_roce_alloc_mr() RDMA/rxe: Fix NULL-ptr-deref in rxe_qp_do_cleanup() when socket create failed dt-bindings: imx6q-pcie: Fix clock names for imx6sx and imx8mq dt-bindings: visconti-pcie: Fix interrupts array max constraints scsi: hpsa: Fix possible memory leak in hpsa_init_one() crypto: tcrypt - Fix multibuffer skcipher speed test mem leak padata: Always leave BHs disabled when running ->parallel() padata: Fix list iterator in padata_do_serial() scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add() scsi: hpsa: Fix error handling in hpsa_add_sas_host() scsi: hpsa: Fix possible memory leak in hpsa_add_sas_device() scsi: efct: Fix possible memleak in efct_device_init() scsi: scsi_debug: Fix a warning in resp_verify() scsi: scsi_debug: Fix a warning in resp_report_zones() scsi: fcoe: Fix possible name leak when device_register() fails scsi: scsi_debug: Fix possible name leak in sdebug_add_host_helper() scsi: ipr: Fix WARNING in ipr_init() scsi: fcoe: Fix transport not deattached when fcoe_if_init() fails scsi: snic: Fix possible UAF in snic_tgt_create() RDMA/nldev: Add checks for nla_nest_start() in fill_stat_counter_qps() f2fs: avoid victim selection from previous victim section RDMA/nldev: Fix failure to send large messages crypto: amlogic - Remove kcalloc without check crypto: omap-sham - Use pm_runtime_resume_and_get() in omap_sham_probe() riscv/mm: add arch hook arch_clear_hugepage_flags RDMA/hfi1: Fix error return code in parse_platform_config() RDMA/srp: Fix error return code in srp_parse_options() PCI: mt7621: Rename mt7621_pci_ to mt7621_pcie_ PCI: mt7621: Add sentinel to quirks table orangefs: Fix sysfs not cleanup when dev init failed RDMA/hns: Fix AH attr queried by query_qp RDMA/hns: Fix PBL page MTR find RDMA/hns: Fix page size cap from firmware RDMA/hns: Fix error code of CMD crypto: img-hash - Fix variable dereferenced before check 'hdev->req' hwrng: amd - Fix PCI device refcount leak hwrng: geode - Fix PCI device refcount leak IB/IPoIB: Fix queue count inconsistency for PKEY child interfaces RISC-V: Align the shadow stack drivers: dio: fix possible memory leak in dio_init() serial: tegra: Read DMA status before terminating serial: 8250_bcm7271: Fix error handling in brcmuart_init() class: fix possible memory leak in __class_register() vfio: platform: Do not pass return buffer to ACPI _RST method uio: uio_dmem_genirq: Fix missing unlock in irq configuration uio: uio_dmem_genirq: Fix deadlock between irq config and handling usb: fotg210-udc: Fix ages old endianness issues staging: vme_user: Fix possible UAF in tsi148_dma_list_add usb: typec: Check for ops->exit instead of ops->enter in altmode_exit usb: typec: tcpci: fix of node refcount leak in tcpci_register_port() usb: typec: tipd: Cleanup resources if devm_tps6598_psy_register fails usb: typec: tipd: Fix spurious fwnode_handle_put in error path extcon: usbc-tusb320: Add support for mode setting and reset extcon: usbc-tusb320: Add support for TUSB320L usb: typec: Factor out non-PD fwnode properties extcon: usbc-tusb320: Factor out extcon into dedicated functions extcon: usbc-tusb320: Add USB TYPE-C support extcon: usbc-tusb320: Update state on probe even if no IRQ pending serial: amba-pl011: avoid SBSA UART accessing DMACR register serial: pl011: Do not clear RX FIFO & RX interrupt in unthrottle. serial: stm32: move dma_request_chan() before clk_prepare_enable() serial: pch: Fix PCI device refcount leak in pch_request_dma() tty: serial: clean up stop-tx part in altera_uart_tx_chars() tty: serial: altera_uart_{r,t}x_chars() need only uart_port serial: altera_uart: fix locking in polling mode serial: sunsab: Fix error handling in sunsab_init() test_firmware: fix memory leak in test_firmware_init() misc: ocxl: fix possible name leak in ocxl_file_register_afu() ocxl: fix pci device refcount leak when calling get_function_0() misc: tifm: fix possible memory leak in tifm_7xx1_switch_media() misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os firmware: raspberrypi: fix possible memory leak in rpi_firmware_probe() cxl: fix possible null-ptr-deref in cxl_guest_init_afu|adapter() cxl: fix possible null-ptr-deref in cxl_pci_init_afu|adapter() iio: temperature: ltc2983: make bulk write buffer DMA-safe iio: adis: handle devices that cannot unmask the drdy pin iio: adis: stylistic changes iio:imu:adis: Move exports into IIO_ADISLIB namespace iio: adis: add '__adis_enable_irq()' implementation counter: stm32-lptimer-cnt: fix the check on arr and cmp registers update coresight: trbe: remove cpuhp instance node before remove cpuhp state usb: roles: fix of node refcount leak in usb_role_switch_is_parent() usb: gadget: f_hid: fix f_hidg lifetime vs cdev usb: gadget: f_hid: fix refcount leak on error path drivers: mcb: fix resource leak in mcb_probe() mcb: mcb-parse: fix error handing in chameleon_parse_gdd() chardev: fix error handling in cdev_device_add() i2c: pxa-pci: fix missing pci_disable_device() on error in ce4100_i2c_probe staging: rtl8192u: Fix use after free in ieee80211_rx() staging: rtl8192e: Fix potential use-after-free in rtllib_rx_Monitor() vme: Fix error not catched in fake_init() gpiolib: Get rid of redundant 'else' gpiolib: cdev: fix NULL-pointer dereferences gpiolib: make struct comments into real kernel docs gpiolib: protect the GPIO device against being dropped while in use by user-space i2c: mux: reg: check return value after calling platform_get_resource() i2c: ismt: Fix an out-of-bounds bug in ismt_access() usb: storage: Add check for kcalloc tracing/hist: Fix issue of losting command info in error_log ksmbd: Fix resource leak in ksmbd_session_rpc_open() samples: vfio-mdev: Fix missing pci_disable_device() in mdpy_fb_probe() thermal/drivers/imx8mm_thermal: Validate temperature range thermal/drivers/qcom/temp-alarm: Fix inaccurate warning for gen2 thermal/drivers/qcom/lmh: Fix irq handler return value fbdev: ssd1307fb: Drop optional dependency fbdev: pm2fb: fix missing pci_disable_device() fbdev: via: Fix error in via_core_init() fbdev: vermilion: decrease reference count in error path fbdev: ep93xx-fb: Add missing clk_disable_unprepare in ep93xxfb_probe() fbdev: geode: don't build on UML fbdev: uvesafb: don't build on UML fbdev: uvesafb: Fixes an error handling path in uvesafb_probe() HSI: omap_ssi_core: fix unbalanced pm_runtime_disable() HSI: omap_ssi_core: fix possible memory leak in ssi_probe() power: supply: fix residue sysfs file in error handle route of __power_supply_register() perf trace: Return error if a system call doesn't exist perf trace: Use macro RAW_SYSCALL_ARGS_NUM to replace number perf trace: Handle failure when trace point folder is missed perf symbol: correction while adjusting symbol power: supply: z2_battery: Fix possible memleak in z2_batt_probe() HSI: omap_ssi_core: Fix error handling in ssi_init() power: supply: ab8500: Fix error handling in ab8500_charger_init() power: supply: fix null pointer dereferencing in power_supply_get_battery_info perf stat: Refactor __run_perf_stat() common code perf stat: Do not delay the workload with --delay RDMA/siw: Fix pointer cast warning fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst() overflow: Implement size_t saturating arithmetic helpers fs/ntfs3: Harden against integer overflows iommu/sun50i: Fix reset release iommu/sun50i: Consider all fault sources for reset iommu/sun50i: Fix R/W permission check iommu/sun50i: Fix flush size iommu/rockchip: fix permission bits in page table entries v2 phy: usb: s2 WoL wakeup_count not incremented for USB->Eth devices include/uapi/linux/swab: Fix potentially missing __always_inline pwm: tegra: Improve required rate calculation fs/ntfs3: Fix slab-out-of-bounds read in ntfs_trim_fs dmaengine: idxd: Fix crc_val field for completion record rtc: rtc-cmos: Do not check ACPI_FADT_LOW_POWER_S0 rtc: cmos: Fix event handler registration ordering issue rtc: cmos: Fix wake alarm breakage rtc: cmos: fix build on non-ACPI platforms rtc: cmos: Call cmos_wake_setup() from cmos_do_probe() rtc: cmos: Call rtc_wake_setup() from cmos_do_probe() rtc: cmos: Eliminate forward declarations of some functions rtc: cmos: Rename ACPI-related functions rtc: cmos: Disable ACPI RTC event on removal rtc: snvs: Allow a time difference on clock register read rtc: pcf85063: Fix reading alarm iommu/amd: Fix pci device refcount leak in ppr_notifier() iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe() macintosh: fix possible memory leak in macio_add_one_device() macintosh/macio-adb: check the return value of ioremap() powerpc/52xx: Fix a resource leak in an error handling path cxl: Fix refcount leak in cxl_calc_capp_routing powerpc/xmon: Fix -Wswitch-unreachable warning in bpt_cmds powerpc/xive: add missing iounmap() in error path in xive_spapr_populate_irq_data() powerpc/perf: callchain validate kernel stack pointer bounds powerpc/83xx/mpc832x_rdb: call platform_device_put() in error case in of_fsl_spi_probe() powerpc/hv-gpci: Fix hv_gpci event list selftests/powerpc: Fix resource leaks iommu/sun50i: Remove IOMMU_DOMAIN_IDENTITY pwm: sifive: Call pwm_sifive_update_clock() while mutex is held pwm: mtk-disp: Fix the parameters calculated by the enabled flag of disp_pwm pwm: mediatek: always use bus clock for PWM on MT7622 remoteproc: sysmon: fix memory leak in qcom_add_sysmon_subdev() remoteproc: qcom: q6v5: Fix potential null-ptr-deref in q6v5_wcss_init_mmio() remoteproc: qcom_q6v5_pas: disable wakeup on probe fail or remove remoteproc: qcom_q6v5_pas: detach power domains on remove remoteproc: qcom_q6v5_pas: Fix missing of_node_put() in adsp_alloc_memory_region() remoteproc: qcom: q6v5: Fix missing clk_disable_unprepare() in q6v5_wcss_qcs404_power_on() powerpc/eeh: Drop redundant spinlock initialization powerpc/pseries/eeh: use correct API for error log size mfd: bd957x: Fix Kconfig dependency on REGMAP_IRQ mfd: qcom_rpm: Fix an error handling path in qcom_rpm_probe() mfd: pm8008: Remove driver data structure pm8008_data mfd: pm8008: Fix return value check in pm8008_probe() netfilter: flowtable: really fix NAT IPv6 offload rtc: st-lpc: Add missing clk_disable_unprepare in st_rtc_probe() rtc: pic32: Move devm_rtc_allocate_device earlier in pic32_rtc_probe() rtc: pcf85063: fix pcf85063_clkout_control nfsd: under NFSv4.1, fix double svc_xprt_put on rpc_create failure net: macsec: fix net device access prior to holding a lock mISDN: hfcsusb: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() mISDN: hfcpci: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() mISDN: hfcmulti: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() block, bfq: fix possible uaf for 'bfqq->bic' selftests/bpf: Add test for unstable CT lookup API net: enetc: avoid buffer leaks on xdp_do_redirect() failure nfc: pn533: Clear nfc_target before being used unix: Fix race in SOCK_SEQPACKET's unix_dgram_sendmsg() r6040: Fix kmemleak in probe and remove igc: Enhance Qbv scheduling by using first flag bit igc: Use strict cycles for Qbv scheduling igc: Add checking for basetime less than zero igc: allow BaseTime 0 enrollment for Qbv igc: recalculate Qbv end_time by considering cycle time igc: Lift TAPRIO schedule restriction igc: Set Qbv start_time and end_time to end_time if not being configured in GCL rtc: mxc_v2: Add missing clk_disable_unprepare() selftests: devlink: fix the fd redirect in dummy_reporter_test openvswitch: Fix flow lookup to use unmasked key soc: mediatek: pm-domains: Fix the power glitch issue arm64: dts: mt8183: Fix Mali GPU clock skbuff: Account for tail adjustment during pull operations mailbox: mpfs: read the system controller's status mailbox: arm_mhuv2: Fix return value check in mhuv2_probe() mailbox: zynq-ipi: fix error handling while device_register() fails net_sched: reject TCF_EM_SIMPLE case for complex ematch module rxrpc: Fix missing unlock in rxrpc_do_sendmsg() myri10ge: Fix an error handling path in myri10ge_probe() net: stream: purge sk_error_queue in sk_stream_kill_queues() HID: amd_sfh: Add missing check for dma_alloc_coherent rcu: Fix __this_cpu_read() lockdep warning in rcu_force_quiescent_state() arm64: make is_ttbrX_addr() noinstr-safe video: hyperv_fb: Avoid taking busy spinlock on panic path x86/hyperv: Remove unregister syscore call from Hyper-V cleanup binfmt_misc: fix shift-out-of-bounds in check_special_flags fs: jfs: fix shift-out-of-bounds in dbAllocAG udf: Avoid double brelse() in udf_rename() jfs: Fix fortify moan in symlink fs: jfs: fix shift-out-of-bounds in dbDiscardAG ACPICA: Fix error code path in acpi_ds_call_control_method() nilfs2: fix shift-out-of-bounds/overflow in nilfs_sb2_bad_offset() nilfs2: fix shift-out-of-bounds due to too large exponent of block size acct: fix potential integer overflow in encode_comp_t() hfs: fix OOB Read in __hfs_brec_find drm/etnaviv: add missing quirks for GC300 media: imx-jpeg: Disable useless interrupt to avoid kernel panic brcmfmac: return error when getting invalid max_flowrings from dongle wifi: ath9k: verify the expected usb_endpoints are present wifi: ar5523: Fix use-after-free on ar5523_cmd() timed out ASoC: codecs: rt298: Add quirk for KBL-R RVP platform ipmi: fix memleak when unload ipmi driver drm/amd/display: prevent memory leak Revert "drm/amd/display: Limit max DSC target bpp for specific monitors" qed (gcc13): use u16 for fid to be big enough bpf: make sure skb->len != 0 when redirecting to a tunneling device net: ethernet: ti: Fix return type of netcp_ndo_start_xmit() hamradio: baycom_epp: Fix return type of baycom_send_packet() wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmf_fw_alloc_request() igb: Do not free q_vector unless new one was allocated drm/amdgpu: Fix type of second parameter in trans_msg() callback drm/amdgpu: Fix type of second parameter in odn_edit_dpm_table() callback s390/ctcm: Fix return type of ctc{mp,}m_tx() s390/netiucv: Fix return type of netiucv_tx() s390/lcs: Fix return type of lcs_start_xmit() drm/msm: Use drm_mode_copy() drm/rockchip: Use drm_mode_copy() drm/sti: Use drm_mode_copy() drm/mediatek: Fix return type of mtk_hdmi_bridge_mode_valid() drivers/md/md-bitmap: check the return value of md_bitmap_get_counter() md/raid1: stop mdx_raid1 thread when raid1 array run failed drm/amd/display: fix array index out of bound error in bios parser net: add atomic_long_t to net_device_stats fields ipv6/sit: use DEV_STATS_INC() to avoid data-races mrp: introduce active flags to prevent UAF when applicant uninit ppp: associate skb with a device at tx bpf: Prevent decl_tag from being referenced in func_proto arg ethtool: avoiding integer overflow in ethtool_phys_id() media: dvb-frontends: fix leak of memory fw media: dvbdev: adopts refcnt to avoid UAF media: dvb-usb: fix memory leak in dvb_usb_adapter_init() blk-mq: fix possible memleak when register 'hctx' failed drm/amd/display: Use the largest vready_offset in pipe group libbpf: Avoid enum forward-declarations in public API in C++ mode regulator: core: fix use_count leakage when handling boot-on wifi: mt76: do not run mt76u_status_worker if the device is not running mmc: f-sdh30: Add quirks for broken timeout clock capability mmc: renesas_sdhi: better reset from HS400 mode media: si470x: Fix use-after-free in si470x_int_in_callback() clk: st: Fix memory leak in st_of_quadfs_setup() crypto: hisilicon/hpre - fix resource leak in remove process scsi: lpfc: Fix hard lockup when reading the rx_monitor from debugfs scsi: ufs: Reduce the START STOP UNIT timeout scsi: elx: libefc: Fix second parameter type in state callbacks hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param() drm/fsl-dcu: Fix return type of fsl_dcu_drm_connector_mode_valid() drm/sti: Fix return type of sti_{dvo,hda,hdmi}_connector_mode_valid() orangefs: Fix kmemleak in orangefs_prepare_debugfs_help_string() orangefs: Fix kmemleak in orangefs_{kernel,client}_debug_init() tools/include: Add _RET_IP_ and math definitions to kernel.h KVM: selftests: Fix build regression by using accessor function hwmon: (jc42) Fix missing unlock on error in jc42_write() ALSA/ASoC: hda: move/rename snd_hdac_ext_stop_streams to hdac_stream.c ALSA: hda: add snd_hdac_stop_streams() helper ASoC: Intel: Skylake: Fix driver hang during shutdown ASoC: mediatek: mt8173-rt5650-rt5514: fix refcount leak in mt8173_rt5650_rt5514_dev_probe() ASoC: audio-graph-card: fix refcount leak of cpu_ep in __graph_for_each_link() ASoC: rockchip: pdm: Add missing clk_disable_unprepare() in rockchip_pdm_runtime_resume() ASoC: mediatek: mt8183: fix refcount leak in mt8183_mt6358_ts3a227_max98357_dev_probe() ASoC: wm8994: Fix potential deadlock ASoC: rockchip: spdif: Add missing clk_disable_unprepare() in rk_spdif_runtime_resume() ASoC: rt5670: Remove unbalanced pm_runtime_put() drm/i915/display: Don't disable DDI/Transcoder when setting phy test pattern LoadPin: Ignore the "contents" argument of the LSM hooks pstore: Switch pmsg_lock to an rt_mutex to avoid priority inversion perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() afs: Fix lost servers_outstanding count pstore: Make sure CONFIG_PSTORE_PMSG selects CONFIG_RT_MUTEXES ima: Simplify ima_lsm_copy_rule ALSA: usb-audio: add the quirk for KT0206 device ALSA: hda/realtek: Add quirk for Lenovo TianYi510Pro-14IOB ALSA: hda/hdmi: Add HP Device 0x8711 to force connect list usb: cdnsp: fix lack of ZLP for ep0 usb: xhci-mtk: fix leakage of shared hcd when fail to set wakeup irq arm64: dts: qcom: sm8250: fix USB-DP PHY registers usb: dwc3: Fix race between dwc3_set_mode and __dwc3_set_mode usb: dwc3: core: defer probe on ulpi_read_id timeout xhci: Prevent infinite loop in transaction errors recovery for streams HID: wacom: Ensure bootloader PID is usable in hidraw mode HID: mcp2221: don't connect hidraw loop: Fix the max_loop commandline argument treatment when it is set to 0 9p: set req refcount to zero to avoid uninitialized usage security: Restrict CONFIG_ZERO_CALL_USED_REGS to gcc or clang > 15.0.6 reiserfs: Add missing calls to reiserfs_security_free() iio: fix memory leak in iio_device_register_eventset() iio: adc: ad_sigma_delta: do not use internal iio_dev lock iio: adc128s052: add proper .data members in adc128_of_match table regulator: core: fix deadlock on regulator enable floppy: Fix memory leak in do_floppy_init() gcov: add support for checksum field fbdev: fbcon: release buffer when fbcon_do_set_font() failed ovl: fix use inode directly in rcu-walk mode btrfs: do not BUG_ON() on ENOMEM when dropping extent items for a range scsi: qla2xxx: Fix crash when I/O abort times out net: stmmac: fix errno when create_singlethread_workqueue() fails media: dvbdev: fix build warning due to comments media: dvbdev: fix refcnt bug extcon: usbc-tusb320: Call the Type-C IRQ handler only if a port is registered mfd: qcom_rpm: Use devm_of_platform_populate() to simplify code pwm: tegra: Fix 32 bit build Linux 5.15.86 Change-Id: I4ec30b690e8dbd554044495e26360a86cc042069 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-01-30 14:44:15 +00:00
Greg Kroah-Hartman	a60104c6cc	Merge tag 'android13-5.15.78_r00' into android13-5.15 ... This is the merge of the upstream LTS release of 5.15.78 into the android13-5.15 branch. It contains the following commits: c73b4619ad ANDROID: abi preservation for fscrypt change in 5.15.78 1960b1e610 Merge 5.15.78 into android13-5.15-lts 7048384c98 Revert "net: macb: Specify PHY PM management done by MAC" 845a2cc2e8 Revert "perf: Fix missing SIGTRAPs" 6f88ababa4 Merge 5.15.77 into android13-5.15-lts 92f701cae0 Revert "net: phylink: add mac_managed_pm in phylink_config structure" 8d9f3b2315 Revert "arm64: errata: Remove AES hwcap for COMPAT tasks" eaa46dd972 Merge 5.15.76 into android13-5.15-lts d9d889009b ANDROID: properly copy the scm_io_uring field in struct sk_buff 16d4484281 ANDROID: fix up struct sk_buf ABI breakage 2d19e77e73 Revert "bpf: Fix reference state management for synchronous callbacks" c18696c060 Revert "tracing: Wake up ring buffer waiters on closing of the file" d122aaf804 Revert "tracing: Add ioctl() to force ring buffer waiters to wake up" dfd3aa1729 ANDROID: rename struct tcm_sock.cwnd_usage_seq to fix ABI c51f6b79ce ANDROID: rename struct task_struct.in_eventfd to fix ABI 85725fbe42 Revert "ALSA: usb-audio: Register card at the last interface" 8f38fb79b5 Revert "ALSA: usb-audio: Fix last interface check for registration" 3ebc180a96 Revert "serial: 8250: Let drivers request full 16550A feature probing" f6d7d7caaa Revert "serial: 8250: Request full 16550A feature probing for OxSemi PCIe devices" d1096112e5 Revert "usb: dwc3: core: Enable GUCTL1 bit 10 for fixing termination error after resume bug" 3447743ef1 Revert "serial: 8250: Toggle IER bits on only after irq has been set up" b049ff121c Merge 5.15.75 into android13-5.15-lts 4ec71a9ec7 ANDROID: cpu/hotplug: call perf event through function pointer 509a32764e Linux 5.15.78 7038af4ce9 wifi: brcmfmac: Fix potential buffer overflow in brcmf_fweh_event_worker() b66617cc3c drm/i915/sdvo: Setup DDC fully before output init 73d52322c4 drm/i915/sdvo: Filter out invalid outputs more sensibly 2219b6aad3 drm/rockchip: dsi: Force synchronous probe dd955eb4e6 drm/rockchip: dsi: Clean up 'usage_mode' when failing to attach cfa8a89af9 cifs: fix regression in very old smb1 mounts 3189de0ac3 ext4,f2fs: fix readahead of verity data a663e6ab17 tee: Fix tee_shm_register() for kernel TEE drivers d46db722a0 KVM: x86: emulator: update the emulation mode after CR0 write 942aec252b KVM: x86: emulator: update the emulation mode after rsm 9df4bb7b38 KVM: x86: emulator: introduce emulator_recalc_and_set_mode 311f1e51a2 KVM: x86: emulator: em_sysexit should update ctxt->mode 37a03de2d0 KVM: arm64: Fix bad dereference on MTE-enabled systems 167dca5e21 KVM: VMX: fully disable SGX if SECONDARY_EXEC_ENCLS_EXITING unavailable 19c2b2ffbe KVM: x86: Mask off reserved bits in CPUID.8000001FH 553fd40d3b KVM: x86: Mask off reserved bits in CPUID.80000001H 006366b96c KVM: x86: Mask off reserved bits in CPUID.80000008H fc796fd861 KVM: x86: Mask off reserved bits in CPUID.8000001AH ef7716398a KVM: x86: Mask off reserved bits in CPUID.80000006H a88998446b x86/syscall: Include asm/ptrace.h in syscall_wrapper header 999cff2b6c ext4: fix BUG_ON() when directory entry has invalid rec_len 0a43c015e9 ext4: fix warning in 'ext4_da_release_space' ada82803a7 parisc: Avoid printing the hardware path twice 081ff43a77 parisc: Export iosapic_serial_irq() symbol for serial port driver 5daf985dd0 parisc: Make 8250_gsc driver dependend on CONFIG_PARISC 425fe99771 perf/x86/intel: Fix pebs event constraints for SPR 4613a45017 perf/x86/intel: Add Cooper Lake stepping to isolation_ucodes[] 7de3fe6a13 perf/x86/intel: Fix pebs event constraints for ICL 71d6c33fe2 arm64: entry: avoid kprobe recursion 52be536155 efi: random: Use 'ACPI reclaim' memory for random seed 83b5ec7ee8 efi: random: reduce seed size to 32 bytes 0417f70b85 fuse: add file_modified() to fallocate 2de8eec8af capabilities: fix potential memleak on error path from vfs_getxattr_alloc() bd07f8067b tracing/histogram: Update document for KEYS_MAX size 27b4406f9c tools/nolibc/string: Fix memcmp() implementation b5074df412 ring-buffer: Check for NULL cpu_buffer in ring_buffer_wake_waiters() 85f3caa955 kprobe: reverse kp->flags when arm_kprobe failed d1b6a8e341 tracing: kprobe: Fix memory leak in test_gen_kprobe/kretprobe_cmd() 828577e0ba tcp/udp: Make early_demux back namespacified. 88561a6677 ftrace: Fix use-after-free for dynamic ftrace_ops 450d748070 btrfs: fix type of parameter generation in btrfs_get_dentry 007058eb82 btrfs: fix tree mod log mishandling of reallocated nodes 336fdd295c btrfs: fix lost file sync on direct IO write with nowait and dsync iocb cff805b151 fscrypt: fix keyring memory leak on mount failure e6f4fd85ef fscrypt: stop using keyrings subsystem for fscrypt_master_key 3975affcf5 af_unix: Fix memory leaks of the whole sk due to OOB skb. 4302806dbf block, bfq: protect 'bfqd->queued' by 'bfqd->lock' 3e4697ffdf Bluetooth: L2CAP: Fix attempting to access uninitialized memory 81035e1201 Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM d78ccdce66 i2c: piix4: Fix adapter not be removed in piix4_remove() c76ff8ae11 arm64: dts: juno: Add thermal critical trip points 7398435e61 firmware: arm_scmi: Fix devres allocation device in virtio transport 3653cdc21b firmware: arm_scmi: Make Rx chan_setup fail on memory errors e514d67b23 firmware: arm_scmi: Suppress the driver's bind attributes 4e68c5da60 block: Fix possible memory leak for rq_wb on add_disk failure bf822b6980 arm64: dts: ls208xa: specify clock frequencies for the MDIO controllers f2329886e5 arm64: dts: ls1088a: specify clock frequencies for the MDIO controllers 33fcc55dbc arm64: dts: lx2160a: specify clock frequencies for the MDIO controllers f3429a1e49 arm64: dts: imx8: correct clock order de2a83186a ARM: dts: imx6qdl-gw59{10,13}: fix user pushbutton GPIO offset cb9ce8910a clk: qcom: Update the force mem core bit for GPU clocks bdc1182496 efi/tpm: Pass correct address to memblock_reserve 3a4d6f165e i2c: xiic: Add platform module alias 62eea4014a drm/amdgpu: set vm_update_mode=0 as default for Sienna Cichlid in SRIOV case 7a2547cac2 HID: saitek: add madcatz variant of MMO7 mouse device ID 931c97a54c scsi: core: Restrict legal sdev_state transitions via sysfs c50ec15725 ACPI: APEI: Fix integer overflow in ghes_estatus_pool_init() 8ecd1db58b media: v4l: subdev: Fail graciously when getting try data for NULL state f96ad391d0 media: meson: vdec: fix possible refcount leak in vdec_probe() 8b785cdcd3 media: dvb-frontends/drxk: initialize err to 0 73dfb64213 media: cros-ec-cec: limit msg.len to CEC_MAX_MSG_SIZE cbfa26936f media: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE 647c12c47e media: rkisp1: Zero v4l2_subdev_format fields in when validating links abbeb8f727 media: rkisp1: Use correct macro for gradient registers 03b30e5a36 media: rkisp1: Initialize color space on resizer sink and source pads d58b6b665c media: rkisp1: Don't pass the quantization to rkisp1_csm_config() 0e501fd0f3 s390/cio: fix out-of-bounds access on cio_ignore free c65cc56937 s390/cio: derive cdev information only for IO-subchannels c64be93f1e s390/boot: add secure boot trailer 1cdaca8f00 s390/uaccess: add missing EX_TABLE entries to __clear_user() 509cbbdec9 mtd: parsers: bcm47xxpart: Fix halfblock reads 5b8797e9db mtd: parsers: bcm47xxpart: print correct offset on read error 2f07635876 fbdev: stifb: Fall back to cfb_fillrect() on 32-bit HCRX cards 154934c74f video/fbdev/stifb: Implement the stifb_fillrect() function b524b41806 drm/msm/hdmi: fix IRQ lifetime c55dd62001 drm/msm/hdmi: Remove spurious IRQF_ONESHOT flag d153d468c4 vsock: fix possible infinite sleep in vsock_connectible_wait_data() 0ed71af4d0 ipv6: fix WARNING in ip6_route_net_exit_late() 2b45d6d0c4 net, neigh: Fix null-ptr-deref in neigh_table_clear() 61defd6450 net/smc: Fix possible leaked pernet namespace in smc_init() de88977427 stmmac: dwmac-loongson: fix invalid mdio_node 535b78739a ibmvnic: Free rwi on reset success 985a88bf0b net: mdio: fix undefined behavior in bit shift for __mdiobus_register aa16cac06b Bluetooth: L2CAP: Fix memory leak in vhci_write a3a7b2ac64 Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del() cf2719a21f Bluetooth: virtio_bt: Use skb_put to set length 8278a87bb1 Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu 42d20d5e24 netfilter: ipset: enforce documented limit to prevent allocating huge memory f46ea5fa33 btrfs: fix ulist leaks in error paths of qgroup self tests 222a3d5330 btrfs: fix inode list leak during backref walking at find_parent_nodes() 6ba3479f9e btrfs: fix inode list leak during backref walking at resolve_indirect_refs() a80634f392 isdn: mISDN: netjet: fix wrong check of device registration 029d5b7688 mISDN: fix possible memory leak in mISDN_register_device() 3e2129c67d rose: Fix NULL pointer dereference in rose_send_frame() 06d7596d18 ipvs: fix WARNING in ip_vs_app_net_cleanup() 5ee2d6b726 ipvs: fix WARNING in __ip_vs_cleanup_batch() 33e7783bc0 ipvs: use explicitly signed chars 6044791b7b netfilter: nf_tables: release flow rule object from commit path 1ffe710041 netfilter: nf_tables: netlink notifier might race to release objects dcc79cf735 net: tun: fix bugs for oversize packet when napi frags enabled fc4b50adb4 net: sched: Fix use after free in red_enqueue() ab80025ea7 ata: pata_legacy: fix pdc20230_set_piomode() dede9ba027 net: fec: fix improper use of NETDEV_TX_BUSY 5dfdac5e3f nfc: nfcmrvl: Fix potential memory leak in nfcmrvl_i2c_nci_send() 7486f5c900 nfc: s3fwrn5: Fix potential memory leak in s3fwrn5_nci_send() 3cba1f061b nfc: nxp-nci: Fix potential memory leak in nxp_nci_send() 44bc1868a4 nfc: fdp: Fix potential memory leak in fdp_nci_send() 4bef9a89f2 net: dsa: fall back to default tagger if we can't load the one from DT 06f9e0b37f RDMA/qedr: clean up work queue on failure in qedr_alloc_resources() 6b3d5dcb12 RDMA/core: Fix null-ptr-deref in ib_core_cleanup() 9f555b1584 net: dsa: Fix possible memory leaks in dsa_loop_init() 24641993a7 nfs4: Fix kmemleak when allocate slot failed 0797c85433 NFSv4.2: Fixup CLONE dest file size for zero-length count d59722d088 SUNRPC: Fix null-ptr-deref when xps sysfs alloc failed dea7ef05de NFSv4.1: We must always send RECLAIM_COMPLETE after a reboot 7b1c2458de NFSv4.1: Handle RECLAIM_COMPLETE trunking errors 4ec017e300 NFSv4: Fix a potential state reclaim deadlock e3e53c5af5 RDMA/hns: Disable local invalidate operation 85ab79ac94 RDMA/hns: Use hr_reg_xxx() instead of remaining roce_set_xxx() be16cc7abd RDMA/hns: Remove magic number ba95409d6b IB/hfi1: Correctly move list in sc_disable() 484d969037 RDMA/cma: Use output interface for net_dev check f7d9de8a0d KVM: x86: Add compat handler for KVM_X86_SET_MSR_FILTER b7b66f13ac KVM: x86: Copy filter arg outside kvm_vm_ioctl_set_msr_filter() 0c60fa7f55 KVM: x86: Protect the unused bits in MSR exiting flags ad8e4868dd HID: playstation: add initial DualSense Edge controller support 3a44ae4afa mm/hugetlb: fix races when looking up a CONT-PTE/PMD size hugetlb page 8576d7edea drm/amd/display: explicitly disable psr_feature_enable appropriately 058b3a11f7 KVM: x86: Treat #DBs from the emulator as fault-like (code and DR7.GD=1) 9ee32892c7 KVM: x86: Trace re-injected exceptions 0c9c1306d6 serial: ar933x: Deassert Transmit Enable on ->rs485_config() 21d65b3516 scsi: lpfc: Rework MIB Rx Monitor debug info logic d70705e131 scsi: lpfc: Adjust CMF total bytes and rxmonitor 9ebc6e8ad1 scsi: lpfc: Adjust bytes received vales during cmf timer interval 793d8378b7 Linux 5.15.77 1401e9336b tcp/udp: Fix memory leak in ipv6_renew_options(). b079d37752 serial: Deassert Transmit Enable on probe in driver-specific way 63f75fea3a serial: core: move RS485 configuration tasks from drivers into core 0753069d44 can: rcar_canfd: rcar_canfd_handle_global_receive(): fix IRQ storm on global FIFO receive 17ff99e224 can: rcar_canfd: fix channel specific IRQ handling for RZ/G2L aad798a0b3 scsi: sd: Revert "scsi: sd: Remove a local variable" 52c2329147 arm64: Add AMPERE1 to the Spectre-BHB affected list 5397ea6a08 net: enetc: survive memory pressure without crashing 885a454e97 kcm: do not sense pfmemalloc status in kcm_sendpage() 92b4c5c3fa net: do not sense pfmemalloc status in skb_append_pagefrags() ae1b08592e net/mlx5: Fix crash during sync firmware reset 37ada47d01 net/mlx5: Update fw fatal reporter state on PCI handlers successful recover 9e6523d06a net/mlx5: Print more info on pci error handlers ab3de780c1 net/mlx5: Fix possible use-after-free in async command interface 8bbff203e3 net/mlx5e: Extend SKB room check to include PTP-SQ ee1c0ca1af net/mlx5e: Do not increment ESN when updating IPsec ESN state eefa97a7a0 netdevsim: remove dir in nsim_dev_debugfs_init() when creating ports dir failed c9589e18a6 net: broadcom: bcm4908_enet: update TX stats after actual transmission 9711616a49 net: broadcom: bcm4908enet: remove redundant variable bytes b317d53680 nh: fix scope used to find saddr when adding non gw nh 2ad284ac88 net: bcmsysport: Indicate MAC is in charge of PHY PM d1cfa71d5b net: ehea: fix possible memory leak in ehea_register_port() 588bdd7ee4 openvswitch: switch from WARN to pr_warn 9a1c1df925 ALSA: aoa: Fix I2S device accounting e81d7826b8 ALSA: aoa: i2sbus: fix possible memory leak in i2sbus_add_dev() 77a754fcfe net: ethernet: ave: Fix MAC to be in charge of PHY PM bc2518ec71 net: fec: limit register access on i.MX6UL f710deeea7 perf vendor events arm64: Fix incorrect Hisi hip08 L3 metrics eb59cb2fab PM: domains: Fix handling of unavailable/disabled idle states bde7c2acef net: ksz884x: fix missing pci_disable_device() on error in pcidev_init() 8927d90d56 i40e: Fix flow-type by setting GL_HASH_INSET registers c39de3ae50 i40e: Fix VF hang when reset is triggered on another VF 250bf8ab78 i40e: Fix ethtool rx-flow-hash setting for X722 ad3f1d9bf1 ipv6: ensure sane device mtu in tunnels e2ec5bb78c perf vendor events power10: Fix hv-24x7 metric events f9df388ed6 media: vivid: set num_in/outputs to 0 if not supported 4cc7d8d420 media: videodev2.h: V4L2_DV_BT_BLANKING_HEIGHT should check 'interlaced' 491c0959f0 media: v4l2-dv-timings: add sanity checks for blanking values 0f83edbe4f media: vivid: dev->bitmap_cap wasn't freed in all cases 5b1fb2a28d media: vivid: s_fbuf: add more sanity checks 3436e56337 PM: hibernate: Allow hybrid sleep to work with s2idle 3cc8c4088f can: mcp251x: mcp251x_can_probe(): add missing unregister_candev() in error path a3e09eff32 can: mscan: mpc5xxx: mpc5xxx_can_probe(): add missing put_clock() in error path 304a101616 drm/amdkfd: Fix memory leak in kfd_mem_dmamap_userptr() 2fe6b24ce2 net-memcg: avoid stalls when under memory pressure 9b171fdcbf tcp: fix indefinite deferral of RTO with SACK reneging a85d39f14a tcp: fix a signed-integer-overflow bug in tcp_add_backlog() 2437f3c5c6 tcp: minor optimization in tcp_add_backlog() ef27df7591 net: lantiq_etop: don't free skb when returning NETDEV_TX_BUSY a1e18acb02 net: fix UAF issue in nfqnl_nf_hook_drop() when ops_init() failed 62086d1c46 kcm: annotate data-races around kcm->rx_wait 342d918cf9 kcm: annotate data-races around kcm->rx_psock 6bb23225bb atlantic: fix deadlock at aq_nic_stop 4e2cbc1f0e drm/i915/dp: Reset frl trained flag before restarting FRL training 3d92ab0865 amd-xgbe: add the bit rate quirk for Molex cables 75a6d1ebf8 amd-xgbe: fix the SFP compliance codes check for DAC cables 98bada8fa0 x86/unwind/orc: Fix unreliable stack dump with gcov 88e879c9f5 nfc: virtual_ncidev: Fix memory leak in virtual_nci_send() 18c60b383d net: macb: Specify PHY PM management done by MAC 95c22fc1e8 net: hinic: fix the issue of double release MBOX callback of VF 6016d96a6a net: hinic: fix the issue of CMDQ memory leaks e6765fe8de net: hinic: fix memory leak when reading function table 62aa78a0c3 net: hinic: fix incorrect assignment issue in hinic_set_interrupt_cfg() 1e0bee973e net: netsec: fix error handling in netsec_register_mdio() 7a939503fc tipc: fix a null-ptr-deref in tipc_topsrv_accept c638b520ba perf/x86/intel/lbr: Use setup_clear_cpu_cap() instead of clear_cpu_cap() 4fdf6f978c ALSA: ac97: fix possible memory leak in snd_ac97_dev_register() b688736903 ASoC: qcom: lpass-cpu: Mark HDMI TX parity register as volatile eca851572d mtd: rawnand: intel: Add missing of_node_put() in ebu_nand_probe() 08c246c7df arc: iounmap() arg is volatile 739eac37ff sched/core: Fix comparison in sched_group_cookie_match() ca7b0a1028 perf: Fix missing SIGTRAPs eb77474a2a ASoC: qcom: lpass-cpu: mark HDMI TX registers as volatile 9b6841ab70 KVM: selftests: Fix number of pages for memory slot in memslot_modification_stress_test 59de8738ed drm/msm: Fix return type of mdp4_lvds_connector_mode_valid a560aeac2f media: atomisp: prevent integer overflow in sh_css_set_black_frame() 32f93e4608 media: v4l2: Fix v4l2_i2c_subdev_set_name function documentation 5a93a8288c net: ieee802154: fix error return code in dgram_bind() 138a13d8f5 ethtool: eeprom: fix null-deref on genl_info in dump 1c2b1d3bba mmc: block: Remove error check of hw_reset on reset 0b0d169723 Revert "scsi: lpfc: SLI path split: Refactor lpfc_iocbq" 7a0fce24de Revert "scsi: lpfc: SLI path split: Refactor fast and slow paths to native SLI4" 7a36c9de43 Revert "scsi: lpfc: SLI path split: Refactor SCSI paths" eb8be2dbfb Revert "scsi: lpfc: Fix locking for lpfc_sli_iocbq_lookup()" 065bf71a8a Revert "scsi: lpfc: Fix element offset in __lpfc_sli_release_iocbq_s4()" 97dc9076ea Revert "scsi: lpfc: Resolve some cleanup issues following SLI path refactoring" b32b766be4 s390/pci: add missing EX_TABLE entries to __pcistg_mio_inuser()/__pcilg_mio_inuser() 1ad7213fcf s390/futex: add missing EX_TABLE entry to __futex_atomic_op() ae9398e837 perf auxtrace: Fix address filter symbol name match for modules 14009ada57 ARC: mm: fix leakage of memory allocated for PTE eb9ed3343c pinctrl: Ingenic: JZ4755 bug fixes 94d2643df1 kernfs: fix use-after-free in __kernfs_remove f1204dfc4c counter: microchip-tcb-capture: Handle Signal1 read and Synapse 6fb0106c64 mmc: sdhci-esdhc-imx: Propagate ESDHC_FLAG_HS400* only on 8bit bus 73e3901e70 mmc: sdhci-pci-core: Disable ES for ASUS BIOS on Jasper Lake 1e8cd93ae5 mmc: core: Fix kernel panic when remove non-standard SDIO card 02e51e7cd1 mmc: sdhci_am654: 'select', not 'depends' REGMAP_MMIO 4c365a0c21 coresight: cti: Fix hang in cti_disable_hw() b32775e039 drm/msm/dp: fix IRQ lifetime b48949ab45 drm/msm/hdmi: fix memory corruption with too many bridges 9f035d1fb3 drm/msm/dsi: fix memory corruption with too many bridges 986a89b371 drm/amdgpu: disallow gfxoff until GC IP blocks complete s2idle resume a2f0934e6b scsi: qla2xxx: Use transport-defined speed mask for supported_speeds 2b1a3172ee mac802154: Fix LQI recording 46b4b1e11e exec: Copy oldsighand->action under spin-lock 265b6fb780 fs/binfmt_elf: Fix memory leak in load_elf_binary() 24030742a7 cpufreq: intel_pstate: hybrid: Use known scaling factor for P-cores 3423a3417f cpufreq: intel_pstate: Read all MSRs on the target CPU cc6a724984 fbdev: smscufx: Fix several use-after-free bugs 1a8b22e3f3 iio: adxl372: Fix unsafe buffer attributes 2f08cad213 iio: temperature: ltc2983: allocate iio channels once 1bfe97f497 iio: light: tsl2583: Fix module unloading 569709540e tools: iio: iio_utils: fix digit calculation c892a81c74 xhci: Remove device endpoints from bandwidth list when freeing the device dfacb5c7f0 xhci-pci: Set runtime PM as default policy on all xHC 1.2 or later devices 64058af657 xhci: Add quirk to reset host back to default state at shutdown 022f21e850 mtd: rawnand: marvell: Use correct logic for nand-keep-config f90897c0f6 usb: xhci: add XHCI_SPURIOUS_SUCCESS to ASM1042 despite being a V0.96 controller a0c54d5152 usb: bdc: change state when port disconnected e0fd70ab48 usb: dwc3: gadget: Don't set IMI for no_interrupt ad538aea64 usb: dwc3: gadget: Stop processing more requests on IMI f2f53be617 usb: gadget: uvc: fix sg handling during video encode 80ff4ef777 usb: gadget: uvc: fix sg handling in error case 555011f6b2 USB: add RESET_RESUME quirk for NVIDIA Jetson devices in RCM 311428871b ALSA: rme9652: use explicitly signed char fa8b39c7ed ALSA: au88x0: use explicitly signed char 8af82d330d ALSA: usb-audio: Add quirks for M-Audio Fast Track C400/600 259cb4dee1 ALSA: Use del_timer_sync() before freeing timer 33ddee2b95 can: kvaser_usb: Fix possible completions during init_completion 86da269c75 can: j1939: transport: j1939_session_skb_drop_old(): spin_unlock_irqrestore() before kfree_skb() ead0495627 NFSv4: Add an fattr allocation to _nfs4_discover_trunking() eb1fe9600b NFSv4: Fix free of uninitialized nfs4_label on referral lookup. 4f5365f770 Linux 5.15.76 33fc9e26b7 mm: /proc/pid/smaps_rollup: fix no vma's null-deref b9d8cbe90a mmc: core: Add SD card quirk for broken discard 0ee2f0567a Makefile.debug: re-enable debug info for .S files 117825e9bb x86/Kconfig: Drop check for -mabi=ms for CONFIG_EFI_STUB 0983205085 ACPI: video: Force backlight native for more TongFang devices 289b56715b perf: Skip and warn on unknown format 'configN' attrs 9d912a3853 mmc: sdhci-tegra: Use actual clock rate for SW tuning correction 7aeda81191 tracing: Do not free snapshot if tracer is on cmdline 57252e7bd4 tracing: Simplify conditional compilation code in tracing_set_tracer() 20bc6d23f7 ksmbd: fix incorrect handling of iterate_dir 3c8cfcaa2d ksmbd: handle smb2 query dir request for OutputBufferLength that is too small 8754fa5dbc arm64: mte: move register initialization to C ea7be82fd7 fs: dlm: fix invalid derefence of sb_lvbptr 0365d6af75 iommu/vt-d: Clean up si_domain in the init_dmars() error path 5c95d0c9d0 iommu/vt-d: Allow NVS regions in arch_rmrr_sanity_check() 209740fd13 net: phy: dp83822: disable MDI crossover status change interrupt ce1234573d net: sched: fix race condition in qdisc_graft() 91f8f5342b net: hns: fix possible memory leak in hnae_ae_register() 50c31fa952 wwan_hwsim: fix possible memory leak in wwan_hwsim_dev_new() d2fc83a6b5 sfc: include vport_id in filter spec hash and equal() c2e1e59d59 net: sched: sfb: fix null pointer access issue when sfb_init() fails 34f2a4eedc net: sched: delete duplicate cleanup of backlog and qlen 154f4c06d9 net: sched: cake: fix null pointer access issue when cake_init() fails 5efed7578d nvmet: fix workqueue MEM_RECLAIM flushing dependency 2f2b84b020 nvme-hwmon: kmalloc the NVME SMART log buffer 66c56b2328 nvme-hwmon: consistently ignore errors from nvme_hwmon_init d77f6908f9 netfilter: nf_tables: relax NFTA_SET_ELEM_KEY_END set flags requirements efa9dd7e67 ionic: catch NULL pointer issue on reconfig 35ece85866 net: hsr: avoid possible NULL deref in skb_clone() e326df21da dm: remove unnecessary assignment statement in alloc_dev() 847301f0ee cifs: Fix xid leak in cifs_ses_add_channel() 8905d13b9e cifs: Fix xid leak in cifs_flock() 27cfd3afaa cifs: Fix xid leak in cifs_copy_file_range() 593d877c39 cifs: Fix xid leak in cifs_create() a8df9d0428 udp: Update reuse->has_conns under reuseport_lock. 9749595feb scsi: lpfc: Fix memory leak in lpfc_create_port() b9122e0e0e net: phylink: add mac_managed_pm in phylink_config structure 412db9b06d net: phy: dp83867: Extend RX strap quirk for SGMII mode 5ce6130519 net/atm: fix proc_mpc_write incorrect return value 0eb17faedc sfc: Change VF mac via PF as first preference if available. 0f58940ca3 HID: magicmouse: Do not set BTN_MOUSE on double report 94a171c982 i40e: Fix DMA mappings leak dbc01c0a4e tipc: fix an information leak in tipc_topsrv_kern_subscr b294cad6f0 tipc: Fix recognition of trial period 6161c364e3 ACPI: extlog: Handle multiple records 40e5fceddf drm/vc4: Add module dependency on hdmi-codec 6c5041a103 btrfs: fix processing of delayed tree block refs during backref walking af67578d56 btrfs: fix processing of delayed data refs during backref walking c439cafce8 x86/topology: Fix duplicated core ID within a package d31f4bc225 x86/topology: Fix multiple packages shown on a single-package system fcc96e89b3 media: venus: dec: Handle the case where find_format fails b22b4823a0 media: mceusb: set timeout to at least timeout provided 5265cc1202 media: ipu3-imgu: Fix NULL pointer dereference in active selection access 1e4e71f9e1 KVM: arm64: vgic: Fix exit condition in scan_its_table() 5bf2fda26a kvm: Add support for arch compat vm ioctls 112a005d1d mm,hugetlb: take hugetlb_lock before decrementing h->resv_huge_pages 2d508b4e65 drm/amdgpu: fix sdma doorbell init ordering on APUs b5606e3ab1 cpufreq: qcom: fix memory leak in error path d866f5982c x86/resctrl: Fix min_cbm_bits for AMD 8fbe13de1c ata: ahci: Match EM_MAX_SLOTS with SATA_PMP_MAX_PORTS 5d6a037b3a ata: ahci-imx: Fix MODULE_ALIAS 30cf0dee37 hwmon/coretemp: Handle large core ID value 2f7171465f x86/microcode/AMD: Apply the patch early on every logical thread 93d7e2b47a i2c: qcom-cci: Fix ordering of pm_runtime_xx and i2c_add_adapter 14d260f94f cpufreq: qcom: fix writes in read-only memory region 3006766d24 selinux: enable use of both GFP_KERNEL and GFP_ATOMIC in convert_context() 1b31cb0065 ocfs2: fix BUG when iput after ocfs2_mknod fails e469db818e ocfs2: clear dinode links count in case of error ded9d535be btrfs: enhance unsupported compat RO flags handling 537412c547 perf/x86/intel/pt: Relax address filter validation 8ddc58e0e3 arm64: errata: Remove AES hwcap for COMPAT tasks 738515cf8b usb: gadget: uvc: improve sg exit condition db11d8c72a usb: gadget: uvc: giveback vb2 buffer on req complete aee340dccf usb: gadget: uvc: rework uvcg_queue_next_buffer to uvcg_complete_buffer 2f54ce7392 usb: gadget: uvc: use on returned header len in video_encode_isoc_sg d80db2f145 usb: gadget: uvc: consistently use define for headerlen f9681a6750 arm64/mm: Consolidate TCR_EL1 fields 5b20aacff7 r8152: add PID for the Lenovo OneLink+ Dock bd8a595958 Linux 5.15.75 b6e2c54be3 io-wq: Fix memory leak in worker creation 7c359e2849 gcov: support GCC 12.1 and newer compilers 8418c1672c thermal: intel_powerclamp: Use first online CPU as control_cpu 55c824b620 ext4: continue to expand file system when the target size doesn't reach 0e63de6d7e lib/Kconfig.debug: Add check for non-constant .{s,u}leb128 support to DWARF5 84cd0b20fa Kconfig.debug: add toolchain checks for DEBUG_INFO_DWARF_TOOLCHAIN_DEFAULT 371aaf6b48 Kconfig.debug: simplify the dependency of DEBUG_INFO_DWARF4/5 e1591557e3 drm/amd/display: Fix build breakage with CONFIG_DEBUG_FS=n 34f31a2b66 net/ieee802154: don't warn zero-sized raw_sendmsg() de904d0fe1 Revert "net/ieee802154: reject zero-sized raw_sendmsg()" 9c65eef9d6 net: ethernet: ti: davinci_mdio: fix build for mdio bitbang uses d7eadffce0 blk-wbt: fix that 'rwb->wc' is always set to 1 in wbt_init() 28787ff9fb ALSA: usb-audio: Fix last interface check for registration b8989e95d7 net: ieee802154: return -EINVAL for unknown addr type 0db2efb3bf mm: hugetlb: fix UAF in hugetlb_handle_userfault 98aada6e22 io_uring/rw: fix unexpected link breakage d6b7efc722 io_uring/rw: fix error'ed retry return values e857457c6f io_uring/rw: fix short rw error handling cd148d4e31 io_uring: correct pinned_vm accounting 813d8fe5d3 io_uring/af_unix: defer registered files gc to io_uring release c69a2324fc perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc e81bf40b28 clk: bcm2835: Round UART input clock up da17cbb229 clk: bcm2835: Make peripheral PLLC critical 20b8c456df usb: idmouse: fix an uninit-value in idmouse_open ec8adf767e nvmet-tcp: add bounds check on Transfer Tag 1c64328840 nvme: copy firmware_rev on each init b9b5560b34 ext2: Use kvmalloc() for group descriptor array 8c067a3051 scsi: tracing: Fix compile error in trace_array calls when TRACING is disabled 39bef9c6a9 staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv() b4573a2bad staging: rtl8723bs: fix potential memory leak in rtw_init_drv_sw() eb24d93e3e Revert "usb: storage: Add quirk for Samsung Fit flash" 3a38985d8b usb: dwc3: core: Enable GUCTL1 bit 10 for fixing termination error after resume bug 9d4f84a15f arm64: dts: imx8mp: Add snps,gfladj-refclk-lpm-sel quirk to USB nodes 3c84c7f592 usb: musb: Fix musb_gadget.c rxstate overflow bug fcd594da0b usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info() 9e86dffd0b md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d f8e80792c1 eventfd: guard wake_up in eventfd fs calls as well c61786dc72 HID: roccat: Fix use-after-free in roccat_read() f7f425d61d soundwire: intel: fix error handling on dai registration issues 093a5463ae soundwire: cadence: Don't overwrite msg->buf during write commands 1b4ed920b2 bcache: fix set_at_max_writeback_rate() for multiple attached devices eecb5ccc84 ata: libahci_platform: Sanity check the DT child nodes number 70b2adb1d6 blk-throttle: prevent overflow while calculating wait time ff8551d411 staging: vt6655: fix potential memory leak 7c8bc37465 power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type() 3d69461807 iommu/arm-smmu-v3: Make default domain type of HiSilicon PTT device to identity c0d73be0af nbd: Fix hung when signal interrupts nbd_start_device_ioctl() 9d54de8660 scsi: 3w-9xxx: Avoid disabling device if failing to enable it d68da10b0c dmaengine: ti: k3-udma: Reset UDMA_CHAN_RT byte counters to prevent overflow 518a2a1cc3 usb: host: xhci-plat: suspend/resume clks for brcm f002aa7c0a usb: host: xhci-plat: suspend and resume clocks 6bcd745c87 clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate 5c32cbf6cc media: platform: fix some double free in meson-ge2d and mtk-jpeg and s5p-mfc 6f21976095 media: cx88: Fix a null-ptr-deref bug in buffer_prepare() 0a07b13af0 clk: zynqmp: Fix stack-out-of-bounds in strncpy` 3680442cba ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n 4a89c0befc btrfs: don't print information about space cache or tree every remount 39a07058c7 btrfs: scrub: try to fix super block errors f3857dd7c0 btrfs: dump extra info if one free space cache has more bitmaps than it should d3c6d5be46 arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply 82046b6a84 kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT 3536541733 ARM: dts: imx6sx: add missing properties for sram 602813650c ARM: dts: imx6sll: add missing properties for sram 6a12e1e23c ARM: dts: imx6sl: add missing properties for sram 8c24dc621b ARM: dts: imx6qp: add missing properties for sram 47666b9a11 ARM: dts: imx6dl: add missing properties for sram 19fe40c518 ARM: dts: imx6q: add missing properties for sram 9361ba7791 ARM: dts: imx7d-sdb: config the max pressure for tsc2046 0f90671ff9 drm/amd/display: Remove interface for periodic interrupt 1 88fd067406 drm/dp: Don't rewrite link config when setting phy test pattern 668806a826 mmc: sdhci-msm: add compatible string check for sdm670 587c7da877 drm/meson: explicitly remove aggregate driver at module unload time d76ff04a72 drm/meson: reorder driver deinit sequence to fix use-after-free bug d894db3561 drm/amdgpu: fix initial connector audio value e3675f688d ASoC: SOF: pci: Change DMI match info to support all Chrome platforms f16e1b7b39 platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading 39da49ffa2 platform/chrome: cros_ec: Notify the PM of wake events during resume 7463604784 drm: panel-orientation-quirks: Add quirk for Anbernic Win600 2810061452 drm/vc4: vec: Fix timings for VEC modes 0506c4eae9 ALSA: usb-audio: Register card at the last interface 39d7a81bbb drm: bridge: dw_hdmi: only trigger hotplug event on link change dfbed8c92e udmabuf: Set ubuf->sg = NULL if the creation of sg table fails a47d92c74b drm/amd/display: fix overflow on MIN_I64 definition a29f742704 gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init() 5ff7bec678 drm/komeda: Fix handling of atomic commits in the atomic_commit_tail hook ca163e389f drm: Prevent drm_copy_field() to attempt copying a NULL pointer df5ac93926 drm: Use size_t type for len variable in drm_copy_field() 5ab84b1596 drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc() b3179865cf r8152: Rate limit overflow messages d1e894f950 Bluetooth: L2CAP: Fix user-after-free 124b7c7732 net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory 5b94d48898 hwmon: (sht4x) do not overflow clamping operation on 32-bit platforms a269c3e390 wifi: rt2x00: correctly set BBP register 86 for MT7620 b5e6ada5a5 wifi: rt2x00: set SoC wmac clock register 357c89074a wifi: rt2x00: set VGC gain for both chains of MT7620 92e2e04da5 wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620 4304b8e075 wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620 4a5eab200e can: bcm: check the result of can_send() in bcm_can_tx() 3423a50fa0 Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times 3ac837cef1 Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create() af46b2b9b0 wifi: mt76: mt7921: reset msta->airtime_ac while clearing up hw value e33da263e9 regulator: core: Prevent integer underflow d58c8781c0 Bluetooth: btintel: Mark Intel controller to support LE_STATES quirk 232d59eca0 wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit() 37f15edba2 iavf: Fix race between iavf_close and iavf_reset_task 0315568019 xfrm: Update ipcomp_scratches with NULL when freed 716c526d66 thunderbolt: Add back Intel Falcon Ridge end-to-end flow control workaround b1b4144508 wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg() 839f563c5d x86/mce: Retrieve poison range from hardware 1663629bc3 tcp: annotate data-race around tcp_md5sig_pool_populated 7b03296b4f openvswitch: Fix overreporting of drops in dropwatch ffd7a1dcae openvswitch: Fix double reporting of drops in dropwatch d449d00a8d net: ethernet: ti: davinci_mdio: Add workaround for errata i2329 624f03a027 ice: set tx_tstamps when creating new Tx rings via ethtool 2e52d858de bpftool: Clear errno after libcap's checks 75995ce1c9 wifi: brcmfmac: fix invalid address access when enabling SCAN log level 83b9496975 NFSD: fix use-after-free on source server when doing inter-server copy 118dc74b2b NFSD: Return nfserr_serverfault if splice_ok but buf->pages have data 066b1302f2 x86/entry: Work around Clang __bdos() bug 06c56c9d5d ACPI: x86: Add a quirk for Dell Inspiron 14 2-in-1 for StorageD3Enable 6733222f2c ARM: decompressor: Include .data.rel.ro.local 5614908434 thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash 139bbbd011 powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue a1387ae83e MIPS: BCM47XX: Cast memcmp() of function to (void *) c2790fede9 cpufreq: intel_pstate: Add Tigerlake support in no-HWP mode 30eca146c8 ACPI: tables: FPDT: Don't call acpi_os_map_memory() on invalid phys address 5374638222 ACPI: video: Add Toshiba Satellite/Portege Z830 quirk 7ed95b0803 rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE() cf38a05eb1 rcu: Back off upon fill_page_cache_func() allocation failure 3e2d8b89f0 rcu: Avoid triggering strict-GP irq-work when RCU is idle 27d3e646dd fs: dlm: fix race in lowcomms b6b87460f4 selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle 497d736784 f2fs: fix to account FS_CP_DATA_IO correctly fb1dcc2a9e f2fs: fix race condition on setting FI_NO_EXTENT flag 6ddbd411a0 ACPI: APEI: do not add task_work to kernel thread to avoid memory leak 21f1ba52b8 thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id 172c8a24fc crypto: cavium - prevent integer overflow loading firmware 12acfa1059 crypto: marvell/octeontx - prevent integer overflows c963ce2fa0 kbuild: rpm-pkg: fix breakage when V=1 is used 059ce6b68b kbuild: remove the target in signal traps when interrupted 1e9c23db31 tracing/osnoise: Fix possible recursive locking in stop_per_cpu_kthreads 84795de93e tracing: kprobe: Make gen test module work in arm and riscv 867fce09aa tracing: kprobe: Fix kprobe event gen test module on exit a9990f24ad iommu/iova: Fix module config properly f0cac6cc02 cifs: return correct error in ->calc_signature() 1f1ab76e25 crypto: qat - fix DMA transfer direction 393307b99a crypto: inside-secure - Change swab to swab32 93538944ab crypto: ccp - Release dma channels before dmaengine unrgister 779a9930f3 crypto: akcipher - default implementation for setting a private key 0c7043a5b5 iommu/omap: Fix buffer overflow in debugfs 046803b74d cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset 771d8aa02d crypto: hisilicon/qm - fix missing put dfx access 9bf3ec61a2 crypto: qat - fix default value of WDT timer 3bfc220e5c hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear() 507128a0e3 cgroup: Honor caller's cgroup NS when resolving path 8ffe511b7d hwrng: arm-smccc-trng - fix NO_ENTROPY handling 2720934713 crypto: hisilicon/zip - fix mismatch in get/set sgl_sge_nr e0b4ebf598 crypto: sahara - don't sleep when in softirq 8484023b57 powerpc/pseries/vas: Pass hw_cpu_id to node associativity HCALL 7f536a8cb6 powerpc/kprobes: Fix null pointer reference in arch_prepare_kprobe() 1f98f8f435 powerpc: Fix SPE Power ISA properties for e500v1 platforms 72c5b7110f powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5 399afe92f6 x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition 592b302d8b powerpc: Fix fallocate and fadvise64_64 compat parameter combination 61af84b3db powerpc/powernv: add missing of_node_put() in opal_export_attrs() 5be9cb6c06 powerpc/pci_dn: Add missing of_node_put() 5a13d3f1af powerpc/sysdev/fsl_msi: Add missing of_node_put() b0c0490b3c powerpc/math_emu/efp: Include module.h 93379dc92d powerpc/configs: Properly enable PAPR_SCM in pseries_defconfig 25a4fb0e1a mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg b8fcd9ab0f mailbox: mpfs: account for mbox offsets while sending ba22643595 mailbox: mpfs: fix handling of the reg property fad007a315 clk: ast2600: BCLK comes from EPLL 3441076f83 clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe 9209e6bab7 clk: imx: scu: fix memleak on platform_device_add() fails bdf72f2d64 clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration e338131e98 clk: baikal-t1: Add SATA internal ref clock buffer 35b7660275 clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent b2db8b2c53 clk: baikal-t1: Fix invalid xGMAC PTP clock divider 435a8a39c6 clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD b0bc75fe67 spmi: pmic-arb: correct duplicate APID to PPID mapping logic faabbb103d usb: mtu3: fix failed runtime suspend in host only mode 57f66534a4 dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup() 8aa96c5bc3 clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent 2dafc5afd9 mfd: sm501: Add check for platform_driver_register() d43d93dbd8 mfd: fsl-imx25: Fix check for platform_get_irq() errors b940bb3c81 mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init() 0715005c48 mfd: lp8788: Fix an error handling path in lp8788_probe() aec1f073f9 mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq() 53bfc1c3c7 mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe() 2f921d62c2 fsi: core: Check error number after calling ida_simple_get 041c79f6ae RDMA/rxe: Fix resize_finish() in rxe_queue.c 959d4ee095 clk: qcom: gcc-sm6115: Override default Alpha PLL regs 8e556f5573 clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical a26b065875 scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername() e87fb1fcf8 scsi: iscsi: Run recv path from workqueue c2af03a7c1 scsi: iscsi: Add recv workqueue helpers d6aafc21be scsi: iscsi: Rename iscsi_conn_queue_work() e45a1516d2 scsi: libsas: Fix use-after-free bug in smp_execute_task_sg() 6a54f76974 serial: 8250: Fix restoring termios speed after suspend a5dba09338 firmware: google: Test spinlock on panic path to avoid lockups 60d14575d0 slimbus: qcom-ngd-ctrl: allow compile testing without QCOM_RPROC_COMMON f19e5b7df5 staging: vt6655: fix some erroneous memory clean-up loops 433c33c554 phy: qualcomm: call clk_disable_unprepare in the error handling c4293def88 tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown a91a3c2d8d serial: 8250: Toggle IER bits on only after irq has been set up 6be8e565a4 drivers: serial: jsm: fix some leaks in probe 1d05df7757 usb: gadget: function: fix dangling pnp_string in f_printer.c ed2c66b752 xhci: Don't show warning for reinit on known broken suspend 4d7d8f5cb2 IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers e221b4f16e RDMA/cm: Use SLID in the work completion as the DLID in responder side 7a37c58ee7 md/raid5: Remove unnecessary bio_put() in raid5_read_one_chunk() b467d9460e md/raid5: Ensure stripe_fill happens on non-read IO with journal 5d8259c9d1 md: Replace snprintf with scnprintf 9e92d5ca54 mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct() 058833dbeb ata: fix ata_id_has_dipm() dad910a6d4 ata: fix ata_id_has_ncq_autosense() 21faddeff7 ata: fix ata_id_has_devslp() 204cc767dc ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting() 5c75d608fa RDMA/siw: Fix QP destroy to wait for all references dropped. 308cd50f17 RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall. e58a0b9100 RDMA/srp: Fix srp_abort() dc9e4ef6b0 RDMA/irdma: Align AE id codes to correct flush code and event 84ce1a8e36 mtd: rawnand: fsl_elbc: Fix none ECC mode be424a7d53 mtd: rawnand: intel: Remove undocumented compatible string 445395900b mtd: rawnand: intel: Read the chip-select line from the correct OF node cbbf9cca47 phy: phy-mtk-tphy: fix the phy type setting issue e4be7c9495 phy: amlogic: phy-meson-axg-mipi-pcie-analog: Hold reference returned by of_get_parent() 88263152ff mtd: devices: docg3: check the return value of devm_ioremap() in the probe a0e4ac6988 clk: qcom: sm6115: Select QCOM_GDSC aecb632674 dyndbg: drop EXPORTed dynamic_debug_exec_queries 0d4421f2cb dyndbg: let query-modname override actual module name 0c0d9f38b0 dyndbg: fix module.dyndbg handling 49d85932f7 dyndbg: fix static_branch manipulation 7cb9b20941 dmaengine: hisilicon: Add multi-thread support for a DMA channel b88630d9aa dmaengine: hisilicon: Fix CQ head update e84aeeafe8 dmaengine: hisilicon: Disable channels when unregister hisi_dma b94605f5cb fpga: prevent integer overflow in dfl_feature_ioctl_set_irq() 11bd8bbdf8 misc: ocxl: fix possible refcount leak in afu_ioctl() c23c5e1845 RDMA/rxe: Fix the error caused by qp->sk f2f405af70 RDMA/rxe: Fix "kernel NULL pointer dereference" error 2ea7caa968 media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init 23624abbc9 media: uvcvideo: Use entity get_cur in uvc_ctrl_set 6c5da92103 media: uvcvideo: Fix memory leak in uvc_gpio_parse 4e2042f1ad media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start() aeffca4344 tty: xilinx_uartps: Fix the ignore_status a8d772c7b8 media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop 6225501072 HSI: omap_ssi_port: Fix dma_map_sg error check 691f23a847 HSI: omap_ssi: Fix refcount leak in ssi_probe d6e750535b clk: tegra20: Fix refcount leak in tegra20_clock_init e7a57fb92a clk: tegra: Fix refcount leak in tegra114_clock_init 417ed4432b clk: tegra: Fix refcount leak in tegra210_clock_init ca5f338ef1 clk: sprd: Hold reference returned by of_get_parent() 49343bdf95 clk: berlin: Add of_node_put() for of_get_parent() 857b719bed clk: qoriq: Hold reference returned by of_get_parent() a8cbce0305 clk: oxnas: Hold reference returned by of_get_parent() e0001a565c clk: meson: Hold reference returned by of_get_parent() e900ec4c4f usb: common: debug: Check non-standard control requests c11f48764c RDMA/mlx5: Don't compare mkey tags in DEVX indirect mkey cd35ad9a7d iio: magnetometer: yas530: Change data type of hard_offsets to signed 23fafc2e2c iio: ABI: Fix wrong format of differential capacitance channel ABI. 8169da520e iio: inkern: fix return value in devm_of_iio_channel_get_by_name() 504e8807fe iio: inkern: only release the device node when done with it b0d4fcc3ec iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume 5db9b840ac iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq c5c63736d2 iio: adc: at91-sama5d2_adc: check return status for pressure and touch 5f1654a0e5 iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX 017cf3b0a6 ARM: dts: exynos: fix polarity of VBUS GPIO of Origen 6c93b683ce arm64: ftrace: fix module PLTs with mcount bbf64eb102 ext4: don't run ext4lazyinit for read-only filesystems 7a00a23207 ARM: Drop CMDLINE_* dependency on ATAGS 2af04fe87e ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family 2134214bc4 arm64: dts: ti: k3-j7200: fix main pinmux range 7247a1d7a4 soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA 4f7892f242 ia64: export memory_add_physaddr_to_nid to fix cxl build error 2ef01657b2 ARM: dts: kirkwood: lsxl: remove first ethernet port bf7caa3c5c ARM: dts: kirkwood: lsxl: fix serial line 42ce4c73a4 ARM: dts: turris-omnia: Fix mpp26 pin name and comment 96d8f2b43e ARM: dts: imx6qdl-kontron-samx6i: hook up DDC i2c bus 08ada28d1d soc: qcom: smem_state: Add refcounting for the 'state->of_node' 96e0028deb soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe() a29b6eb959 locks: fix TOCTOU race when granting write lease 7e053784c4 memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings() 2680690f9c memory: of: Fix refcount leak bug in of_get_ddr_timings() 566b143aa5 memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe() 10df962300 ALSA: hda/hdmi: Don't skip notification handling during PM operation cc756b79a5 ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe f9cb3bd557 ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe b7dda65fa8 ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe b2bc9fc56a ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe 3c3ef19a88 mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe() b14dc26227 ALSA: dmaengine: increment buffer pointer atomically f5f1f5ee50 ASoC: da7219: Fix an error handling path in da7219_register_dai_clks() f910aca076 ASoC: codecs: tx-macro: fix kcontrol put b47a37ad4a drm/vmwgfx: Fix memory leak in vmw_mksstat_add_ioctl() bdf54d4b00 drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa() 635e7700c5 drm/msm/dpu: index dpu_kms->hw_vbif using vbif_idx 4f85988467 ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API 64545b8a96 mmc: au1xmmc: Fix an error handling path in au1xmmc_probe() 3ba3814c00 drm/amdgpu: Fix memory leak in hpd_rx_irq_create_workqueue() a5ce83e85d drm/omap: dss: Fix refcount leak bugs f5f599daa0 drm/bochs: fix blanking 928ac9fc1a ALSA: hda: beep: Simplify keep-power-at-enable behavior fbb88a7c84 ASoC: rsnd: Add check for rsnd_mod_power_on 4610e7a411 drm/bridge: megachips: Fix a null pointer dereference bug 079c550c57 drm/amdgpu: add missing pci_disable_device() in amdgpu_pmops_runtime_resume() c12daccc90 platform/chrome: cros_ec_typec: Correct alt mode index c317d2b8a4 platform/x86: msi-laptop: Fix resource cleanup 0e21d41bc7 platform/x86: msi-laptop: Fix old-ec check for backlight registering 6bc81c1b63 ASoC: tas2764: Fix mute/unmute e644497c53 ASoC: tas2764: Drop conflicting set_bias_level power setting 35bd912ed6 ASoC: tas2764: Allow mono streams fd1d3b2657 platform/chrome: fix memory corruption in ioctl 27bb672c04 platform/chrome: fix double-free in chromeos_laptop_prepare() 57dfb855bc ASoC: mt6359: fix tests for platform_get_irq() failure 8a475a7732 drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node() 56d2233cf5 drm/dp_mst: fix drm_dp_dpcd_read return value checks fe6eb3d0c8 drm/bridge: parade-ps8640: Fix regulator supply order 60630834fa drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling 26c1b4cfe5 drm/mipi-dsi: Detach devices when removing the host 652042135e drm/bridge: Avoid uninitialized variable warning f369fb4dee drm: bridge: adv7511: unregister cec i2c device after cec adapter 20609125b8 drm: bridge: adv7511: fix CEC power down control register offset a624161ebe net: mvpp2: fix mvpp2 debugfs leak 7aef5082c5 once: add DO_ONCE_SLOW() for sleepable contexts 77bfd26cbb net/ieee802154: reject zero-sized raw_sendmsg() dc4e9cd6d6 net: wwan: iosm: Call mutex_init before locking it 0b6516a4e3 bnx2x: fix potential memory leak in bnx2x_tpa_stop() 30bfa5aa72 net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks() f828333ca9 hwmon: (pmbus/mp2888) Fix sensors readouts for MPS Multi-phase mp2888 controller c91b922b41 spi: Ensure that sg_table won't be used after being freed 49d429760d tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited 19d636b663 sctp: handle the error returned from sctp_auth_asoc_init_active_key 7bfa18b05f mISDN: fix use-after-free bugs in l1oip timer handlers 6f1991a940 eth: alx: take rtnl_lock on resume e28a4e7f02 vhost/vsock: Use kvmalloc/kvfree for larger packets. 5dbdd690ed wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM 432eecffcf spi: s3c64xx: Fix large transfers with DMA 1454a26cb1 netfilter: nft_fib: Fix for rpath check with VRF devices 7d98b26684 xfrm: Reinject transport-mode packets through workqueue 397e880acf Bluetooth: hci_core: Fix not handling link timeouts propertly 1331d3e1f9 i2c: mlxbf: support lock mechanism 9233ab8198 skmsg: Schedule psock work if the cached skb exists on the psock 44f1dc2e82 spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe daa5239ea4 spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe 6b94115186 x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype 3c27a13807 x86/microcode/AMD: Track patch allocation size explicitly 3e2b805a68 wifi: ath11k: fix number of VHT beamformee spatial streams 5a6827cdc2 netfilter: conntrack: revisit the gc initial rescheduling bias 9c39ca418b netfilter: conntrack: fix the gc rescheduling delay b8917dce21 Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure c087c35292 bpf: Ensure correct locking around vulnerable function find_vpid() a0f15af17b net: fs_enet: Fix wrong check in do_pd_setup ee7c5e814f Bluetooth: RFCOMM: Fix possible deadlock on socket shutdown/release 57d4f2f8a6 wifi: mt76: mt7915: do not check state before configuring implicit beamform dea9093f24 wifi: mt76: mt7615: add mt7615_mutex_acquire/release in mt7615_sta_set_decap_offload 817e8b75ae wifi: mt76: sdio: fix transmitting packet hangs 5dc095a37f wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask 9973f78c19 wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration 5d9222c680 bpf: btf: fix truncated last_member_type_id in btf_struct_resolve 4ce47c5545 spi: meson-spicc: do not rely on busy flag in pow2 clk ops 36c484bac9 wifi: rtl8xxxu: Fix skb misuse in TX queue selection fefd2269e6 spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime() e22f649918 spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume() 37005a9486 selftests/xsk: Avoid use-after-free on ctx 69995c64e5 wifi: rtw88: add missing destroy_workqueue() on error path in rtw_core_init() 6f9484e969 wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse() d091771f51 Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend f91e25cfa5 bpf: Use this_cpu_{inc|dec|inc_return} for bpf_task_storage_busy 0e13425104 bpf: Propagate error from htab_lock_bucket() to userspace 0b00c6130c bpf: Disable preemption when increasing per-cpu map_locked 68ab769033 xsk: Fix backpressure mechanism on Tx 0559a6d96a x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register e962e458bf spi: mt7621: Fix an error message in mt7621_spi_probe() 0a16bbc8b0 bpftool: Fix a wrong type cast in btf_dumper_int 6e8eadfa9b wifi: mac80211: allow bw change during channel switch in mesh 4ed5155043 bpf: Fix reference state management for synchronous callbacks 3d0a101e71 leds: lm3601x: Don't use mutex after it was destroyed 54a3201f3c wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state() 714536ff6f wifi: rtlwifi: 8192de: correct checking of IQK reload 80a474502e NFSD: Fix handling of oversized NFSv4 COMPOUND requests dc7f225090 NFSD: Protect against send buffer overflow in NFSv2 READDIR cedaf73c8b SUNRPC: Fix svcxdr_init_encode's buflen calculation 6b55707ff8 SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation aed8816305 nfsd: Fix a memory leak in an error handling path 5c4b234c44 objtool: Preserve special st_shndx indexes in elf_update_symbol 425a2a9469 ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE 2647b20e04 ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd() 93296e7ab7 MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create() 993b13abde MIPS: SGI-IP27: Free some unused memory 959855093f sh: machvec: Use char[] for section boundaries 91fafd22f8 thermal: cpufreq_cooling: Check the policy first in cpufreq_cooling_register() 81fb3ee298 ntfs3: rework xattr handlers and switch to POSIX ACL VFS helpers 33d478eee2 userfaultfd: open userfaultfds with O_RDONLY 10918ebecd ima: fix blocking of security.ima xattrs of unsupported algorithms b7af9b8be8 selinux: use "grep -E" instead of "egrep" 73b8218ef4 smb3: must initialize two ACL struct fields to zero adf428ae46 drm/amd/display: Fix vblank refcount in vrr transition 60a5174525 drm/i915: Fix watermark calculations for gen12+ CCS+CC modifier 01bd3eaa53 drm/i915: Fix watermark calculations for gen12+ MC CCS modifier 20018a252f drm/i915: Fix watermark calculations for gen12+ RC CCS modifier 861f085f81 drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table() 446d40e2a8 drm/nouveau/kms/nv140-: Disable interlacing 4dab0d27a4 staging: greybus: audio_helper: remove unused and wrong debugfs usage 28eb4bdb23 KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS 4f7b1e7d0f KVM: nVMX: Don't propagate vmcs12's PERF_GLOBAL_CTRL settings to vmcs02 be1a6a61f1 KVM: nVMX: Unconditionally purge queued/injected events on nested "exit" 379de01906 KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility e3e5baa368 blk-wbt: call rq_qos_add() after wb_normal is initialized e8e0a6f4b8 media: cedrus: Fix endless loop in cedrus_h265_skip_bits() b76fac61c3 media: cedrus: Set the platform driver data earlier b19254eada efi: libstub: drop pointless get_memory_map() call 5cda4a11b4 thunderbolt: Explicitly enable lane adapter hotplug events at startup d9c79fbcbd tracing: Fix reading strings from synthetic events b9ab154d22 tracing: Add "(fault)" name injection to kernel probes 8ae88c4842 tracing: Move duplicate code of trace_kprobe/eprobe.c into header 84f4be2093 tracing: Add ioctl() to force ring buffer waiters to wake up 32eb54a986 tracing: Wake up waiters when tracing is disabled 2475de2bc0 tracing: Wake up ring buffer waiters on closing of the file 48272aa48d tracing: Disable interrupt or preemption before acquiring arch_spinlock_t d4ab9bc5f5 ring-buffer: Fix race between reset page and reading page be60f698c2 ring-buffer: Add ring_buffer_wake_waiters() 5201dd81ae ring-buffer: Check pending waiters when doing wake ups as well bc6d4e9d64 ring-buffer: Have the shortest_full queue be the shortest not longest e8d1167385 ring-buffer: Allow splice to read previous partially read pages fb96b7489f ftrace: Properly unset FTRACE_HASH_FL_MOD 31dc1727c1 livepatch: fix race between fork and KLP transition 36997b75bb ext4: update 'state->fc_regions_size' after successful memory allocation 417b0455a0 ext4: fix potential memory leak in ext4_fc_record_regions() 9b5eb368a8 ext4: fix potential memory leak in ext4_fc_record_modified_inode() ef1607c991 ext4: fix miss release buffer head in ext4_fc_write_inode d29fa1ab4e ext4: fix dir corruption when ext4_dx_add_entry() fails d12471b416 ext4: place buffer head allocation before handle start 46e5f470a1 ext4: ext4_read_bh_lock() should submit IO if the buffer isn't uptodate 1f5e643b38 ext4: don't increase iversion counter for ea_inodes dd366295d1 ext4: fix check for block being out of directory size 4a967fe8b0 ext4: make ext4_lazyinit_thread freezable 533c60a0b9 ext4: fix null-ptr-deref in ext4_write_info d8e4af8314 ext4: avoid crash when inline data creation follows DIO write 56fcd0788f jbd2: add miss release buffer head in fc_do_one_pass() d11d2ded29 jbd2: fix potential use-after-free in jbd2_fc_wait_bufs e7385c868e jbd2: fix potential buffer head reference count leak d87fe290a5 jbd2: wake up journal waiters in FIFO order, not LIFO 7434626c5e hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero 095493833b hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO 73687c5391 f2fs: fix to do sanity check on summary info ed854f10e6 f2fs: fix to do sanity check on destination blkaddr during recovery 7f10357c90 f2fs: increase the limit for reserve_root 0035b84223 f2fs: flush pending checkpoints when freezing super ab49589754 f2fs: complete checkpoints during remount 0a408c6212 btrfs: set generation before calling btrfs_clean_tree_block in btrfs_init_new_buffer 4b996a3014 btrfs: fix race between quota enable and quota rescan ioctl 0d94230343 fs: record I_DIRTY_TIME even if inode already has I_DIRTY_INODE 95a520b591 ksmbd: Fix user namespace mapping a19f316406 ksmbd: Fix wrong return value and message length check in smb2_ioctl() 39b6855628 ksmbd: fix endless loop when encryption for response fails 2b0897e336 fbdev: smscufx: Fix use-after-free in ufx_ops_open() aa7b2c927e pinctrl: rockchip: add pinmux_ops.gpio_set_direction callback 5d97378b36 gpio: rockchip: request GPIO mux to pinctrl when setting direction e0b1c16fda scsi: qedf: Populate sysfs attributes for vport 1d567179f2 slimbus: qcom-ngd: cleanup in probe error path fa0aab2e45 slimbus: qcom-ngd: use correct error in message of pdr_add_lookup() failure ba2159df18 powerpc/boot: Explicitly disable usage of SPE instructions 9df2a9cdad powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain 75d9de25a6 NFSD: Protect against send buffer overflow in NFSv3 READ 2be9331ca6 NFSD: Protect against send buffer overflow in NFSv2 READ 071a076fd1 NFSD: Protect against send buffer overflow in NFSv3 READDIR 209a94c519 serial: 8250: Request full 16550A feature probing for OxSemi PCIe devices 63a3d75cf1 serial: 8250: Let drivers request full 16550A feature probing 26e5c79e67 PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge 7c16d0a4e6 xen/gntdev: Accommodate VMA splitting 1cb73704cb xen/gntdev: Prevent leaking grants 43bed0a13a mm/mmap: undo ->mmap() when arch_validate_flags() fails 2b0072d33e mm/damon: validate if the pmd entry is present before accessing 91c4eb16e8 arm64: errata: Add Cortex-A55 to the repeat tlbi list fc0f921b7e drm/udl: Restore display mode on resume 0640934725 drm/virtio: Use appropriate atomic state in virtio_gpu_plane_cleanup_fb() fb3910436b drm/virtio: Unlock reservations on virtio_gpu_object_shmem_init() error f122bcb34f drm/virtio: Check whether transferred 2D BO is shmem a95fb5d55a dmaengine: mxs: use platform_driver_register e7a3334e83 Revert "drm/amdgpu: use dirty framebuffer helper" 4bdedc3b53 nvme-pci: set min_align_mask before calculating max_hw_sectors 32aa0b3f0c nvme-multipath: fix possible hang in live ns resize with ANA access 9391cc3a78 nvmem: core: Fix memleak in nvmem_register() 7efe61dc6a UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK 81ab826a28 riscv: Pass -mno-relax only on lld < 15.0.0 7780bb02a0 riscv: always honor the CONFIG_CMDLINE_FORCE when parsing dtb c657b70e80 riscv: Make VM_WRITE imply VM_READ 3c3c4fa118 riscv: Allow PROT_WRITE-only mmap() af3aaee08d parisc: fbdev/stifb: Align graphics memory size to 4MB dc235db7b7 RISC-V: Make port I/O string accessors actually work 8c487db000 riscv: topology: fix default topology reporting d46c24f307 arm64: topology: move store_cpu_topology() to shared code fcf0f6cbb6 regulator: qcom_rpm: Fix circular deferral regression 78d81a8a8c net: thunderbolt: Enable DMA paths only after rings are enabled 3281e81ce9 hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API e1ab98ec2b ASoC: wcd934x: fix order of Slimbus unprepare/disable a2140a9922 ASoC: wcd9335: fix order of Slimbus unprepare/disable d0507b36da platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure fcfeecca15 quota: Check next/prev free block number after reading from quota file 17214cfab7 HID: multitouch: Add memory barriers 219e4a0f9d fs: dlm: handle -EBUSY first in lock arg validation 34ed22dd28 fs: dlm: fix race between test_bit() and queue_work() 7fa5304c4b i2c: designware: Fix handling of real but unexpected device interrupts f9effcefa8 mmc: sdhci-sprd: Fix minimum clock limit a4df91a88c can: kvaser_usb_leaf: Fix CAN state after restart 0c28c2c0cf can: kvaser_usb_leaf: Fix TX queue out of sync after restart b8c4f6345e can: kvaser_usb_leaf: Fix overread with an invalid command de4434d682 can: kvaser_usb: Fix use of uninitialized completion 354d768e31 usb: add quirks for Lenovo OneLink+ Dock 103b459590 xhci: dbc: Fix memory leak in xhci_alloc_dbc() 39f4c90b99 iio: pressure: dps310: Reset chip after timeout bc493cd754 iio: pressure: dps310: Refactor startup procedure 5f6bfc1926 iio: adc: ad7923: fix channel readings for some variants 1be580ed84 iio: ltc2497: Fix reading conversion results ef4018707d iio: dac: ad5593r: Fix i2c read protocol requirements 60480291c1 cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message 0d814a2199 cifs: destage dirty pages before re-reading them for cache=none 15993e9a9b hv_netvsc: Fix race between VF offering and VF association message from host f9dc33f231 io_uring/net: don't update msg_name if not provided a1bd289c10 mtd: rawnand: atmel: Unmap streaming DMA mappings 3e4d2375d1 ALSA: hda/realtek: Add Intel Reference SSID to support headset keys 41e83faf03 ALSA: hda/realtek: Add quirk for ASUS GV601R laptop c01f385c70 ALSA: hda/realtek: Correct pin configs for ASUS G533Z 0d50e05ecc ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530 ec439b97d9 ALSA: usb-audio: Fix NULL dererence at error path 0672215994 ALSA: usb-audio: Fix potential memory leaks 550ca3082e ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free() 45899fae65 ALSA: oss: Fix potential deadlock at unregistration 5ca155aa79 Revert "fs: check FMODE_LSEEK to control internal pipe splicing" And update the .xml file to handle some private pointer changes and an abi preservation change: type 'struct sk_buff' changed member 'union { struct { __u8 scm_io_uring; __u8 android_kabi_reserved1_padding1; __u16 android_kabi_reserved1_padding2; __u32 android_kabi_reserved1_padding3; }; struct { u64 android_kabi_reserved1; }; union { }; }' was added member 'u64 android_kabi_reserved1' was removed type 'struct super_block' changed member changed from 'struct key * s_master_keys' to 'struct fscrypt_keyring * s_master_keys' type changed from 'struct key *' to 'struct fscrypt_keyring *' pointed-to type changed from 'struct key' to 'struct fscrypt_keyring' type 'struct fscrypt_info' changed member changed from 'struct key * ci_master_key' to 'struct fscrypt_master_key * ci_master_key' type changed from 'struct key *' to 'struct fscrypt_master_key *' pointed-to type changed from 'struct key' to 'struct fscrypt_master_key' Change-Id: Id0a60a4e0d8a036fffd52dad04135cf57d98f09f Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-01-21 15:48:02 +00:00
Connor O'Brien	75aa4c087e	FROMGIT: bpf: btf: limit logging of ignored BTF mismatches ... Enabling CONFIG_MODULE_ALLOW_BTF_MISMATCH is an indication that BTF mismatches are expected and module loading should proceed anyway. Logging with pr_warn() on every one of these "benign" mismatches creates unnecessary noise when many such modules are loaded. Instead, handle this case with a single log warning that BTF info may be unavailable. Mismatches also result in calls to __btf_verifier_log() via __btf_verifier_log_type() or btf_verifier_log_member(), adding several additional lines of logging per mismatched module. Add checks to these paths to skip logging for module BTF mismatches in the "allow mismatch" case. All existing logging behavior is preserved in the default CONFIG_MODULE_ALLOW_BTF_MISMATCH=n case. Signed-off-by: Connor O'Brien <connoro@google.com> Acked-by: Yonghong Song <yhs@fb.com> Link: https://lore.kernel.org/r/20230107025331.3240536-1-connoro@google.com Signed-off-by: Martin KaFai Lau <martin.lau@kernel.org> Bug: 260025057 Bug: 256578296 Bug: 258989318 (cherry picked from commit 9cb61e50bf6bf54db712bba6cf20badca4383f96 https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-next.git master) Signed-off-by: Connor O'Brien <connoro@google.com> Change-Id: I2f9d19a2027610af2e825fc38fd08f56f4cd7091	2023-01-11 19:15:14 +00:00
Stanislav Fomichev	b327c68ace	bpf: Prevent decl_tag from being referenced in func_proto arg ... [ Upstream commit f17472d4599697d701aa239b4c475a506bccfd19 ] Syzkaller managed to hit another decl_tag issue: btf_func_proto_check kernel/bpf/btf.c:4506 [inline] btf_check_all_types kernel/bpf/btf.c:4734 [inline] btf_parse_type_sec+0x1175/0x1980 kernel/bpf/btf.c:4763 btf_parse kernel/bpf/btf.c:5042 [inline] btf_new_fd+0x65a/0xb00 kernel/bpf/btf.c:6709 bpf_btf_load+0x6f/0x90 kernel/bpf/syscall.c:4342 __sys_bpf+0x50a/0x6c0 kernel/bpf/syscall.c:5034 __do_sys_bpf kernel/bpf/syscall.c:5093 [inline] __se_sys_bpf kernel/bpf/syscall.c:5091 [inline] __x64_sys_bpf+0x7c/0x90 kernel/bpf/syscall.c:5091 do_syscall_64+0x54/0x70 arch/x86/entry/common.c:48 This seems similar to commit ea68376c8bed ("bpf: prevent decl_tag from being referenced in func_proto") but for the argument. Reported-by: syzbot+8dd0551dda6020944c5d@syzkaller.appspotmail.com Signed-off-by: Stanislav Fomichev <sdf@google.com> Signed-off-by: Daniel Borkmann <daniel@iogearbox.net> Acked-by: Yonghong Song <yhs@fb.com> Link: https://lore.kernel.org/bpf/20221123035422.872531-2-sdf@google.com Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-12-31 13:14:42 +01:00
Greg Kroah-Hartman	b049ff121c	Merge 5.15.75 into android13-5.15-lts ... Changes in 5.15.75 Revert "fs: check FMODE_LSEEK to control internal pipe splicing" ALSA: oss: Fix potential deadlock at unregistration ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free() ALSA: usb-audio: Fix potential memory leaks ALSA: usb-audio: Fix NULL dererence at error path ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530 ALSA: hda/realtek: Correct pin configs for ASUS G533Z ALSA: hda/realtek: Add quirk for ASUS GV601R laptop ALSA: hda/realtek: Add Intel Reference SSID to support headset keys mtd: rawnand: atmel: Unmap streaming DMA mappings io_uring/net: don't update msg_name if not provided hv_netvsc: Fix race between VF offering and VF association message from host cifs: destage dirty pages before re-reading them for cache=none cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message iio: dac: ad5593r: Fix i2c read protocol requirements iio: ltc2497: Fix reading conversion results iio: adc: ad7923: fix channel readings for some variants iio: pressure: dps310: Refactor startup procedure iio: pressure: dps310: Reset chip after timeout xhci: dbc: Fix memory leak in xhci_alloc_dbc() usb: add quirks for Lenovo OneLink+ Dock can: kvaser_usb: Fix use of uninitialized completion can: kvaser_usb_leaf: Fix overread with an invalid command can: kvaser_usb_leaf: Fix TX queue out of sync after restart can: kvaser_usb_leaf: Fix CAN state after restart mmc: sdhci-sprd: Fix minimum clock limit i2c: designware: Fix handling of real but unexpected device interrupts fs: dlm: fix race between test_bit() and queue_work() fs: dlm: handle -EBUSY first in lock arg validation HID: multitouch: Add memory barriers quota: Check next/prev free block number after reading from quota file platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure ASoC: wcd9335: fix order of Slimbus unprepare/disable ASoC: wcd934x: fix order of Slimbus unprepare/disable hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API net: thunderbolt: Enable DMA paths only after rings are enabled regulator: qcom_rpm: Fix circular deferral regression arm64: topology: move store_cpu_topology() to shared code riscv: topology: fix default topology reporting RISC-V: Make port I/O string accessors actually work parisc: fbdev/stifb: Align graphics memory size to 4MB riscv: Allow PROT_WRITE-only mmap() riscv: Make VM_WRITE imply VM_READ riscv: always honor the CONFIG_CMDLINE_FORCE when parsing dtb riscv: Pass -mno-relax only on lld < 15.0.0 UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK nvmem: core: Fix memleak in nvmem_register() nvme-multipath: fix possible hang in live ns resize with ANA access nvme-pci: set min_align_mask before calculating max_hw_sectors Revert "drm/amdgpu: use dirty framebuffer helper" dmaengine: mxs: use platform_driver_register drm/virtio: Check whether transferred 2D BO is shmem drm/virtio: Unlock reservations on virtio_gpu_object_shmem_init() error drm/virtio: Use appropriate atomic state in virtio_gpu_plane_cleanup_fb() drm/udl: Restore display mode on resume arm64: errata: Add Cortex-A55 to the repeat tlbi list mm/damon: validate if the pmd entry is present before accessing mm/mmap: undo ->mmap() when arch_validate_flags() fails xen/gntdev: Prevent leaking grants xen/gntdev: Accommodate VMA splitting PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge serial: 8250: Let drivers request full 16550A feature probing serial: 8250: Request full 16550A feature probing for OxSemi PCIe devices NFSD: Protect against send buffer overflow in NFSv3 READDIR NFSD: Protect against send buffer overflow in NFSv2 READ NFSD: Protect against send buffer overflow in NFSv3 READ powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain powerpc/boot: Explicitly disable usage of SPE instructions slimbus: qcom-ngd: use correct error in message of pdr_add_lookup() failure slimbus: qcom-ngd: cleanup in probe error path scsi: qedf: Populate sysfs attributes for vport gpio: rockchip: request GPIO mux to pinctrl when setting direction pinctrl: rockchip: add pinmux_ops.gpio_set_direction callback fbdev: smscufx: Fix use-after-free in ufx_ops_open() ksmbd: fix endless loop when encryption for response fails ksmbd: Fix wrong return value and message length check in smb2_ioctl() ksmbd: Fix user namespace mapping fs: record I_DIRTY_TIME even if inode already has I_DIRTY_INODE btrfs: fix race between quota enable and quota rescan ioctl btrfs: set generation before calling btrfs_clean_tree_block in btrfs_init_new_buffer f2fs: complete checkpoints during remount f2fs: flush pending checkpoints when freezing super f2fs: increase the limit for reserve_root f2fs: fix to do sanity check on destination blkaddr during recovery f2fs: fix to do sanity check on summary info hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero jbd2: wake up journal waiters in FIFO order, not LIFO jbd2: fix potential buffer head reference count leak jbd2: fix potential use-after-free in jbd2_fc_wait_bufs jbd2: add miss release buffer head in fc_do_one_pass() ext4: avoid crash when inline data creation follows DIO write ext4: fix null-ptr-deref in ext4_write_info ext4: make ext4_lazyinit_thread freezable ext4: fix check for block being out of directory size ext4: don't increase iversion counter for ea_inodes ext4: ext4_read_bh_lock() should submit IO if the buffer isn't uptodate ext4: place buffer head allocation before handle start ext4: fix dir corruption when ext4_dx_add_entry() fails ext4: fix miss release buffer head in ext4_fc_write_inode ext4: fix potential memory leak in ext4_fc_record_modified_inode() ext4: fix potential memory leak in ext4_fc_record_regions() ext4: update 'state->fc_regions_size' after successful memory allocation livepatch: fix race between fork and KLP transition ftrace: Properly unset FTRACE_HASH_FL_MOD ring-buffer: Allow splice to read previous partially read pages ring-buffer: Have the shortest_full queue be the shortest not longest ring-buffer: Check pending waiters when doing wake ups as well ring-buffer: Add ring_buffer_wake_waiters() ring-buffer: Fix race between reset page and reading page tracing: Disable interrupt or preemption before acquiring arch_spinlock_t tracing: Wake up ring buffer waiters on closing of the file tracing: Wake up waiters when tracing is disabled tracing: Add ioctl() to force ring buffer waiters to wake up tracing: Move duplicate code of trace_kprobe/eprobe.c into header tracing: Add "(fault)" name injection to kernel probes tracing: Fix reading strings from synthetic events thunderbolt: Explicitly enable lane adapter hotplug events at startup efi: libstub: drop pointless get_memory_map() call media: cedrus: Set the platform driver data earlier media: cedrus: Fix endless loop in cedrus_h265_skip_bits() blk-wbt: call rq_qos_add() after wb_normal is initialized KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility KVM: nVMX: Unconditionally purge queued/injected events on nested "exit" KVM: nVMX: Don't propagate vmcs12's PERF_GLOBAL_CTRL settings to vmcs02 KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS staging: greybus: audio_helper: remove unused and wrong debugfs usage drm/nouveau/kms/nv140-: Disable interlacing drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table() drm/i915: Fix watermark calculations for gen12+ RC CCS modifier drm/i915: Fix watermark calculations for gen12+ MC CCS modifier drm/i915: Fix watermark calculations for gen12+ CCS+CC modifier drm/amd/display: Fix vblank refcount in vrr transition smb3: must initialize two ACL struct fields to zero selinux: use "grep -E" instead of "egrep" ima: fix blocking of security.ima xattrs of unsupported algorithms userfaultfd: open userfaultfds with O_RDONLY ntfs3: rework xattr handlers and switch to POSIX ACL VFS helpers thermal: cpufreq_cooling: Check the policy first in cpufreq_cooling_register() sh: machvec: Use char[] for section boundaries MIPS: SGI-IP27: Free some unused memory MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create() ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd() ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE objtool: Preserve special st_shndx indexes in elf_update_symbol nfsd: Fix a memory leak in an error handling path SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation SUNRPC: Fix svcxdr_init_encode's buflen calculation NFSD: Protect against send buffer overflow in NFSv2 READDIR NFSD: Fix handling of oversized NFSv4 COMPOUND requests wifi: rtlwifi: 8192de: correct checking of IQK reload wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state() leds: lm3601x: Don't use mutex after it was destroyed bpf: Fix reference state management for synchronous callbacks wifi: mac80211: allow bw change during channel switch in mesh bpftool: Fix a wrong type cast in btf_dumper_int spi: mt7621: Fix an error message in mt7621_spi_probe() x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register xsk: Fix backpressure mechanism on Tx bpf: Disable preemption when increasing per-cpu map_locked bpf: Propagate error from htab_lock_bucket() to userspace bpf: Use this_cpu_{inc|dec|inc_return} for bpf_task_storage_busy Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse() wifi: rtw88: add missing destroy_workqueue() on error path in rtw_core_init() selftests/xsk: Avoid use-after-free on ctx spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume() spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime() wifi: rtl8xxxu: Fix skb misuse in TX queue selection spi: meson-spicc: do not rely on busy flag in pow2 clk ops bpf: btf: fix truncated last_member_type_id in btf_struct_resolve wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask wifi: mt76: sdio: fix transmitting packet hangs wifi: mt76: mt7615: add mt7615_mutex_acquire/release in mt7615_sta_set_decap_offload wifi: mt76: mt7915: do not check state before configuring implicit beamform Bluetooth: RFCOMM: Fix possible deadlock on socket shutdown/release net: fs_enet: Fix wrong check in do_pd_setup bpf: Ensure correct locking around vulnerable function find_vpid() Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure netfilter: conntrack: fix the gc rescheduling delay netfilter: conntrack: revisit the gc initial rescheduling bias wifi: ath11k: fix number of VHT beamformee spatial streams x86/microcode/AMD: Track patch allocation size explicitly x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe skmsg: Schedule psock work if the cached skb exists on the psock i2c: mlxbf: support lock mechanism Bluetooth: hci_core: Fix not handling link timeouts propertly xfrm: Reinject transport-mode packets through workqueue netfilter: nft_fib: Fix for rpath check with VRF devices spi: s3c64xx: Fix large transfers with DMA wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM vhost/vsock: Use kvmalloc/kvfree for larger packets. eth: alx: take rtnl_lock on resume mISDN: fix use-after-free bugs in l1oip timer handlers sctp: handle the error returned from sctp_auth_asoc_init_active_key tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited spi: Ensure that sg_table won't be used after being freed hwmon: (pmbus/mp2888) Fix sensors readouts for MPS Multi-phase mp2888 controller net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks() bnx2x: fix potential memory leak in bnx2x_tpa_stop() net: wwan: iosm: Call mutex_init before locking it net/ieee802154: reject zero-sized raw_sendmsg() once: add DO_ONCE_SLOW() for sleepable contexts net: mvpp2: fix mvpp2 debugfs leak drm: bridge: adv7511: fix CEC power down control register offset drm: bridge: adv7511: unregister cec i2c device after cec adapter drm/bridge: Avoid uninitialized variable warning drm/mipi-dsi: Detach devices when removing the host drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling drm/bridge: parade-ps8640: Fix regulator supply order drm/dp_mst: fix drm_dp_dpcd_read return value checks drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node() ASoC: mt6359: fix tests for platform_get_irq() failure platform/chrome: fix double-free in chromeos_laptop_prepare() platform/chrome: fix memory corruption in ioctl ASoC: tas2764: Allow mono streams ASoC: tas2764: Drop conflicting set_bias_level power setting ASoC: tas2764: Fix mute/unmute platform/x86: msi-laptop: Fix old-ec check for backlight registering platform/x86: msi-laptop: Fix resource cleanup platform/chrome: cros_ec_typec: Correct alt mode index drm/amdgpu: add missing pci_disable_device() in amdgpu_pmops_runtime_resume() drm/bridge: megachips: Fix a null pointer dereference bug ASoC: rsnd: Add check for rsnd_mod_power_on ALSA: hda: beep: Simplify keep-power-at-enable behavior drm/bochs: fix blanking drm/omap: dss: Fix refcount leak bugs drm/amdgpu: Fix memory leak in hpd_rx_irq_create_workqueue() mmc: au1xmmc: Fix an error handling path in au1xmmc_probe() ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API drm/msm/dpu: index dpu_kms->hw_vbif using vbif_idx drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa() drm/vmwgfx: Fix memory leak in vmw_mksstat_add_ioctl() ASoC: codecs: tx-macro: fix kcontrol put ASoC: da7219: Fix an error handling path in da7219_register_dai_clks() ALSA: dmaengine: increment buffer pointer atomically mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe() ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe ALSA: hda/hdmi: Don't skip notification handling during PM operation memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe() memory: of: Fix refcount leak bug in of_get_ddr_timings() memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings() locks: fix TOCTOU race when granting write lease soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe() soc: qcom: smem_state: Add refcounting for the 'state->of_node' ARM: dts: imx6qdl-kontron-samx6i: hook up DDC i2c bus ARM: dts: turris-omnia: Fix mpp26 pin name and comment ARM: dts: kirkwood: lsxl: fix serial line ARM: dts: kirkwood: lsxl: remove first ethernet port ia64: export memory_add_physaddr_to_nid to fix cxl build error soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA arm64: dts: ti: k3-j7200: fix main pinmux range ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family ARM: Drop CMDLINE_* dependency on ATAGS ext4: don't run ext4lazyinit for read-only filesystems arm64: ftrace: fix module PLTs with mcount ARM: dts: exynos: fix polarity of VBUS GPIO of Origen iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX iio: adc: at91-sama5d2_adc: check return status for pressure and touch iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume iio: inkern: only release the device node when done with it iio: inkern: fix return value in devm_of_iio_channel_get_by_name() iio: ABI: Fix wrong format of differential capacitance channel ABI. iio: magnetometer: yas530: Change data type of hard_offsets to signed RDMA/mlx5: Don't compare mkey tags in DEVX indirect mkey usb: common: debug: Check non-standard control requests clk: meson: Hold reference returned by of_get_parent() clk: oxnas: Hold reference returned by of_get_parent() clk: qoriq: Hold reference returned by of_get_parent() clk: berlin: Add of_node_put() for of_get_parent() clk: sprd: Hold reference returned by of_get_parent() clk: tegra: Fix refcount leak in tegra210_clock_init clk: tegra: Fix refcount leak in tegra114_clock_init clk: tegra20: Fix refcount leak in tegra20_clock_init HSI: omap_ssi: Fix refcount leak in ssi_probe HSI: omap_ssi_port: Fix dma_map_sg error check media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop tty: xilinx_uartps: Fix the ignore_status media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start() media: uvcvideo: Fix memory leak in uvc_gpio_parse media: uvcvideo: Use entity get_cur in uvc_ctrl_set media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init RDMA/rxe: Fix "kernel NULL pointer dereference" error RDMA/rxe: Fix the error caused by qp->sk misc: ocxl: fix possible refcount leak in afu_ioctl() fpga: prevent integer overflow in dfl_feature_ioctl_set_irq() dmaengine: hisilicon: Disable channels when unregister hisi_dma dmaengine: hisilicon: Fix CQ head update dmaengine: hisilicon: Add multi-thread support for a DMA channel dyndbg: fix static_branch manipulation dyndbg: fix module.dyndbg handling dyndbg: let query-modname override actual module name dyndbg: drop EXPORTed dynamic_debug_exec_queries clk: qcom: sm6115: Select QCOM_GDSC mtd: devices: docg3: check the return value of devm_ioremap() in the probe phy: amlogic: phy-meson-axg-mipi-pcie-analog: Hold reference returned by of_get_parent() phy: phy-mtk-tphy: fix the phy type setting issue mtd: rawnand: intel: Read the chip-select line from the correct OF node mtd: rawnand: intel: Remove undocumented compatible string mtd: rawnand: fsl_elbc: Fix none ECC mode RDMA/irdma: Align AE id codes to correct flush code and event RDMA/srp: Fix srp_abort() RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall. RDMA/siw: Fix QP destroy to wait for all references dropped. ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting() ata: fix ata_id_has_devslp() ata: fix ata_id_has_ncq_autosense() ata: fix ata_id_has_dipm() mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct() md: Replace snprintf with scnprintf md/raid5: Ensure stripe_fill happens on non-read IO with journal md/raid5: Remove unnecessary bio_put() in raid5_read_one_chunk() RDMA/cm: Use SLID in the work completion as the DLID in responder side IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers xhci: Don't show warning for reinit on known broken suspend usb: gadget: function: fix dangling pnp_string in f_printer.c drivers: serial: jsm: fix some leaks in probe serial: 8250: Toggle IER bits on only after irq has been set up tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown phy: qualcomm: call clk_disable_unprepare in the error handling staging: vt6655: fix some erroneous memory clean-up loops slimbus: qcom-ngd-ctrl: allow compile testing without QCOM_RPROC_COMMON firmware: google: Test spinlock on panic path to avoid lockups serial: 8250: Fix restoring termios speed after suspend scsi: libsas: Fix use-after-free bug in smp_execute_task_sg() scsi: iscsi: Rename iscsi_conn_queue_work() scsi: iscsi: Add recv workqueue helpers scsi: iscsi: Run recv path from workqueue scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername() clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical clk: qcom: gcc-sm6115: Override default Alpha PLL regs RDMA/rxe: Fix resize_finish() in rxe_queue.c fsi: core: Check error number after calling ida_simple_get mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe() mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq() mfd: lp8788: Fix an error handling path in lp8788_probe() mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init() mfd: fsl-imx25: Fix check for platform_get_irq() errors mfd: sm501: Add check for platform_driver_register() clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup() usb: mtu3: fix failed runtime suspend in host only mode spmi: pmic-arb: correct duplicate APID to PPID mapping logic clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD clk: baikal-t1: Fix invalid xGMAC PTP clock divider clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent clk: baikal-t1: Add SATA internal ref clock buffer clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration clk: imx: scu: fix memleak on platform_device_add() fails clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe clk: ast2600: BCLK comes from EPLL mailbox: mpfs: fix handling of the reg property mailbox: mpfs: account for mbox offsets while sending mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg powerpc/configs: Properly enable PAPR_SCM in pseries_defconfig powerpc/math_emu/efp: Include module.h powerpc/sysdev/fsl_msi: Add missing of_node_put() powerpc/pci_dn: Add missing of_node_put() powerpc/powernv: add missing of_node_put() in opal_export_attrs() powerpc: Fix fallocate and fadvise64_64 compat parameter combination x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5 powerpc: Fix SPE Power ISA properties for e500v1 platforms powerpc/kprobes: Fix null pointer reference in arch_prepare_kprobe() powerpc/pseries/vas: Pass hw_cpu_id to node associativity HCALL crypto: sahara - don't sleep when in softirq crypto: hisilicon/zip - fix mismatch in get/set sgl_sge_nr hwrng: arm-smccc-trng - fix NO_ENTROPY handling cgroup: Honor caller's cgroup NS when resolving path hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear() crypto: qat - fix default value of WDT timer crypto: hisilicon/qm - fix missing put dfx access cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset iommu/omap: Fix buffer overflow in debugfs crypto: akcipher - default implementation for setting a private key crypto: ccp - Release dma channels before dmaengine unrgister crypto: inside-secure - Change swab to swab32 crypto: qat - fix DMA transfer direction cifs: return correct error in ->calc_signature() iommu/iova: Fix module config properly tracing: kprobe: Fix kprobe event gen test module on exit tracing: kprobe: Make gen test module work in arm and riscv tracing/osnoise: Fix possible recursive locking in stop_per_cpu_kthreads kbuild: remove the target in signal traps when interrupted kbuild: rpm-pkg: fix breakage when V=1 is used crypto: marvell/octeontx - prevent integer overflows crypto: cavium - prevent integer overflow loading firmware thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id ACPI: APEI: do not add task_work to kernel thread to avoid memory leak f2fs: fix race condition on setting FI_NO_EXTENT flag f2fs: fix to account FS_CP_DATA_IO correctly selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle fs: dlm: fix race in lowcomms rcu: Avoid triggering strict-GP irq-work when RCU is idle rcu: Back off upon fill_page_cache_func() allocation failure rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE() ACPI: video: Add Toshiba Satellite/Portege Z830 quirk ACPI: tables: FPDT: Don't call acpi_os_map_memory() on invalid phys address cpufreq: intel_pstate: Add Tigerlake support in no-HWP mode MIPS: BCM47XX: Cast memcmp() of function to (void *) powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash ARM: decompressor: Include .data.rel.ro.local ACPI: x86: Add a quirk for Dell Inspiron 14 2-in-1 for StorageD3Enable x86/entry: Work around Clang __bdos() bug NFSD: Return nfserr_serverfault if splice_ok but buf->pages have data NFSD: fix use-after-free on source server when doing inter-server copy wifi: brcmfmac: fix invalid address access when enabling SCAN log level bpftool: Clear errno after libcap's checks ice: set tx_tstamps when creating new Tx rings via ethtool net: ethernet: ti: davinci_mdio: Add workaround for errata i2329 openvswitch: Fix double reporting of drops in dropwatch openvswitch: Fix overreporting of drops in dropwatch tcp: annotate data-race around tcp_md5sig_pool_populated x86/mce: Retrieve poison range from hardware wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg() thunderbolt: Add back Intel Falcon Ridge end-to-end flow control workaround xfrm: Update ipcomp_scratches with NULL when freed iavf: Fix race between iavf_close and iavf_reset_task wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit() Bluetooth: btintel: Mark Intel controller to support LE_STATES quirk regulator: core: Prevent integer underflow wifi: mt76: mt7921: reset msta->airtime_ac while clearing up hw value Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create() Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times can: bcm: check the result of can_send() in bcm_can_tx() wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620 wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620 wifi: rt2x00: set VGC gain for both chains of MT7620 wifi: rt2x00: set SoC wmac clock register wifi: rt2x00: correctly set BBP register 86 for MT7620 hwmon: (sht4x) do not overflow clamping operation on 32-bit platforms net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory Bluetooth: L2CAP: Fix user-after-free r8152: Rate limit overflow messages drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc() drm: Use size_t type for len variable in drm_copy_field() drm: Prevent drm_copy_field() to attempt copying a NULL pointer drm/komeda: Fix handling of atomic commits in the atomic_commit_tail hook gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init() drm/amd/display: fix overflow on MIN_I64 definition udmabuf: Set ubuf->sg = NULL if the creation of sg table fails drm: bridge: dw_hdmi: only trigger hotplug event on link change ALSA: usb-audio: Register card at the last interface drm/vc4: vec: Fix timings for VEC modes drm: panel-orientation-quirks: Add quirk for Anbernic Win600 platform/chrome: cros_ec: Notify the PM of wake events during resume platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading ASoC: SOF: pci: Change DMI match info to support all Chrome platforms drm/amdgpu: fix initial connector audio value drm/meson: reorder driver deinit sequence to fix use-after-free bug drm/meson: explicitly remove aggregate driver at module unload time mmc: sdhci-msm: add compatible string check for sdm670 drm/dp: Don't rewrite link config when setting phy test pattern drm/amd/display: Remove interface for periodic interrupt 1 ARM: dts: imx7d-sdb: config the max pressure for tsc2046 ARM: dts: imx6q: add missing properties for sram ARM: dts: imx6dl: add missing properties for sram ARM: dts: imx6qp: add missing properties for sram ARM: dts: imx6sl: add missing properties for sram ARM: dts: imx6sll: add missing properties for sram ARM: dts: imx6sx: add missing properties for sram kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply btrfs: dump extra info if one free space cache has more bitmaps than it should btrfs: scrub: try to fix super block errors btrfs: don't print information about space cache or tree every remount ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n clk: zynqmp: Fix stack-out-of-bounds in strncpy` media: cx88: Fix a null-ptr-deref bug in buffer_prepare() media: platform: fix some double free in meson-ge2d and mtk-jpeg and s5p-mfc clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate usb: host: xhci-plat: suspend and resume clocks usb: host: xhci-plat: suspend/resume clks for brcm dmaengine: ti: k3-udma: Reset UDMA_CHAN_RT byte counters to prevent overflow scsi: 3w-9xxx: Avoid disabling device if failing to enable it nbd: Fix hung when signal interrupts nbd_start_device_ioctl() iommu/arm-smmu-v3: Make default domain type of HiSilicon PTT device to identity power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type() staging: vt6655: fix potential memory leak blk-throttle: prevent overflow while calculating wait time ata: libahci_platform: Sanity check the DT child nodes number bcache: fix set_at_max_writeback_rate() for multiple attached devices soundwire: cadence: Don't overwrite msg->buf during write commands soundwire: intel: fix error handling on dai registration issues HID: roccat: Fix use-after-free in roccat_read() eventfd: guard wake_up in eventfd fs calls as well md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info() usb: musb: Fix musb_gadget.c rxstate overflow bug arm64: dts: imx8mp: Add snps,gfladj-refclk-lpm-sel quirk to USB nodes usb: dwc3: core: Enable GUCTL1 bit 10 for fixing termination error after resume bug Revert "usb: storage: Add quirk for Samsung Fit flash" staging: rtl8723bs: fix potential memory leak in rtw_init_drv_sw() staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv() scsi: tracing: Fix compile error in trace_array calls when TRACING is disabled ext2: Use kvmalloc() for group descriptor array nvme: copy firmware_rev on each init nvmet-tcp: add bounds check on Transfer Tag usb: idmouse: fix an uninit-value in idmouse_open clk: bcm2835: Make peripheral PLLC critical clk: bcm2835: Round UART input clock up perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc io_uring/af_unix: defer registered files gc to io_uring release io_uring: correct pinned_vm accounting io_uring/rw: fix short rw error handling io_uring/rw: fix error'ed retry return values io_uring/rw: fix unexpected link breakage mm: hugetlb: fix UAF in hugetlb_handle_userfault net: ieee802154: return -EINVAL for unknown addr type ALSA: usb-audio: Fix last interface check for registration blk-wbt: fix that 'rwb->wc' is always set to 1 in wbt_init() net: ethernet: ti: davinci_mdio: fix build for mdio bitbang uses Revert "net/ieee802154: reject zero-sized raw_sendmsg()" net/ieee802154: don't warn zero-sized raw_sendmsg() drm/amd/display: Fix build breakage with CONFIG_DEBUG_FS=n Kconfig.debug: simplify the dependency of DEBUG_INFO_DWARF4/5 Kconfig.debug: add toolchain checks for DEBUG_INFO_DWARF_TOOLCHAIN_DEFAULT lib/Kconfig.debug: Add check for non-constant .{s,u}leb128 support to DWARF5 ext4: continue to expand file system when the target size doesn't reach thermal: intel_powerclamp: Use first online CPU as control_cpu gcov: support GCC 12.1 and newer compilers io-wq: Fix memory leak in worker creation Linux 5.15.75 Change-Id: I5a3ef9688fb31003940d7e1828f863b9d50f1da9 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2022-11-16 16:28:57 +00:00
Lorenz Bauer	5d9222c680	bpf: btf: fix truncated last_member_type_id in btf_struct_resolve ... [ Upstream commit a37a32583e282d8d815e22add29bc1e91e19951a ] When trying to finish resolving a struct member, btf_struct_resolve saves the member type id in a u16 temporary variable. This truncates the 32 bit type id value if it exceeds UINT16_MAX. As a result, structs that have members with type ids > UINT16_MAX and which need resolution will fail with a message like this: [67414] STRUCT ff_device size=120 vlen=12 effect_owners type_id=67434 bits_offset=960 Member exceeds struct_size Fix this by changing the type of last_member_type_id to u32. Fixes: a0791f0df7 ("bpf: fix BTF limits") Reviewed-by: Stanislav Fomichev <sdf@google.com> Signed-off-by: Lorenz Bauer <oss@lmb.io> Link: https://lore.kernel.org/r/20220910110120.339242-1-oss@lmb.io Signed-off-by: Alexei Starovoitov <ast@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-10-26 12:34:42 +02:00
Greg Kroah-Hartman	a4ccdcb542	Merge 5.15.50 into android13-5.15-lts ... Changes in 5.15.50 s390/mm: use non-quiescing sske for KVM switch to keyed guest drm/amd/display: Don't reinitialize DMCUB on s0ix resume net: mana: Add handling of CQE_RX_TRUNCATED zonefs: fix zonefs_iomap_begin() for reads usb: gadget: u_ether: fix regression in setting fixed MAC address bpf: Fix calling global functions from BPF_PROG_TYPE_EXT programs selftests/bpf: Add selftest for calling global functions from freplace serial: core: Initialize rs485 RTS polarity already on probe arm64: mm: Don't invalidate FROM_DEVICE buffers at start of DMA transfer Linux 5.15.50 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I0cca5a60b921fc6871bd6fc4896690546752c85b	2022-08-08 15:08:51 +02:00
Toke Høiland-Jørgensen	5c0ab17c53	bpf: Fix calling global functions from BPF_PROG_TYPE_EXT programs ... commit f858c2b2ca04fc7ead291821a793638ae120c11d upstream. The verifier allows programs to call global functions as long as their argument types match, using BTF to check the function arguments. One of the allowed argument types to such global functions is PTR_TO_CTX; however the check for this fails on BPF_PROG_TYPE_EXT functions because the verifier uses the wrong type to fetch the vmlinux BTF ID for the program context type. This failure is seen when an XDP program is loaded using libxdp (which loads it as BPF_PROG_TYPE_EXT and attaches it to a global XDP type program). Fix the issue by passing in the target program type instead of the BPF_PROG_TYPE_EXT type to bpf_prog_get_ctx() when checking function argument compatibility. The first Fixes tag refers to the latest commit that touched the code in question, while the second one points to the code that first introduced the global function call verification. v2: - Use resolve_prog_type() Fixes: 3363bd0cfbb8 ("bpf: Extend kfunc with PTR_TO_CTX, PTR_TO_MEM argument support") Fixes: 51c39bb1d5 ("bpf: Introduce function-by-function verification") Reported-by: Simon Sundberg <simon.sundberg@kau.se> Signed-off-by: Toke Høiland-Jørgensen <toke@redhat.com> Link: https://lore.kernel.org/r/20220606075253.28422-1-toke@redhat.com Signed-off-by: Alexei Starovoitov <ast@kernel.org> [ backport: open-code missing resolve_prog_type() helper, resolve context diff ] Signed-off-by: Toke Høiland-Jørgensen <toke@redhat.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-06-25 15:18:40 +02:00
Kumar Kartikeya Dwivedi	83e7514f57	UPSTREAM: bpf: Fix crash due to out of bounds access into reg2btf_ids. ... commit 45ce4b4f9009102cd9f581196d480a59208690c1 upstream When commit e6ac2450d6 ("bpf: Support bpf program calling kernel function") added kfunc support, it defined reg2btf_ids as a cheap way to translate the verifier reg type to the appropriate btf_vmlinux BTF ID, however commit c25b2ae13603 ("bpf: Replace PTR_TO_XXX_OR_NULL with PTR_TO_XXX | PTR_MAYBE_NULL") moved the __BPF_REG_TYPE_MAX from the last member of bpf_reg_type enum to after the base register types, and defined other variants using type flag composition. However, now, the direct usage of reg->type to index into reg2btf_ids may no longer fall into __BPF_REG_TYPE_MAX range, and hence lead to out of bounds access and kernel crash on dereference of bad pointer. [backport note: commit 3363bd0cfbb80 ("bpf: Extend kfunc with PTR_TO_CTX, PTR_TO_MEM argument support") was introduced after 5.15 and contains an out of bound reg2btf_ids access. Since that commit hasn't been backported, this patch doesn't include fix to that access. If we backport that commit in future, we need to fix its faulting access as well.] Fixes: c25b2ae13603 ("bpf: Replace PTR_TO_XXX_OR_NULL with PTR_TO_XXX | PTR_MAYBE_NULL") Signed-off-by: Kumar Kartikeya Dwivedi <memxor@gmail.com> Signed-off-by: Hao Luo <haoluo@google.com> Signed-off-by: Alexei Starovoitov <ast@kernel.org> Link: https://lore.kernel.org/bpf/20220216201943.624869-1-memxor@gmail.com Cc: stable@vger.kernel.org # v5.15+ Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> (cherry picked from commit 8c39925e98) Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I7e341206119c7cb3552e58bb3e1c453e97e78a77	2022-06-18 18:28:45 +00:00
Hao Luo	8f07caaddc	UPSTREAM: bpf: Add MEM_RDONLY for helper args that are pointers to rdonly mem. ... commit 216e3cd2f28dbbf1fe86848e0e29e6693b9f0a20 upstream. Some helper functions may modify its arguments, for example, bpf_d_path, bpf_get_stack etc. Previously, their argument types were marked as ARG_PTR_TO_MEM, which is compatible with read-only mem types, such as PTR_TO_RDONLY_BUF. Therefore it's legitimate, but technically incorrect, to modify a read-only memory by passing it into one of such helper functions. This patch tags the bpf_args compatible with immutable memory with MEM_RDONLY flag. The arguments that don't have this flag will be only compatible with mutable memory types, preventing the helper from modifying a read-only memory. The bpf_args that have MEM_RDONLY are compatible with both mutable memory and immutable memory. Signed-off-by: Hao Luo <haoluo@google.com> Signed-off-by: Alexei Starovoitov <ast@kernel.org> Link: https://lore.kernel.org/bpf/20211217003152.48334-9-haoluo@google.com Cc: stable@vger.kernel.org # 5.15.x Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> (cherry picked from commit 2a77c58726) Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: Id62021f1dde9eefc3148c877f5c1a68519a4b77f	2022-06-18 18:28:45 +00:00
Hao Luo	d7ebee8df3	UPSTREAM: bpf: Convert PTR_TO_MEM_OR_NULL to composable types. ... commit cf9f2f8d62eca810afbd1ee6cc0800202b000e57 upstream. Remove PTR_TO_MEM_OR_NULL and replace it with PTR_TO_MEM combined with flag PTR_MAYBE_NULL. Signed-off-by: Hao Luo <haoluo@google.com> Signed-off-by: Alexei Starovoitov <ast@kernel.org> Link: https://lore.kernel.org/bpf/20211217003152.48334-7-haoluo@google.com Cc: stable@vger.kernel.org # 5.15.x Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> (cherry picked from commit b710f73704) Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: Ie2c093c3deb2015c47a7ef0abc9498394d4cdacc	2022-06-18 18:28:44 +00:00
Hao Luo	1cd4928129	UPSTREAM: bpf: Introduce MEM_RDONLY flag ... commit 20b2aff4bc15bda809f994761d5719827d66c0b4 upstream. This patch introduce a flag MEM_RDONLY to tag a reg value pointing to read-only memory. It makes the following changes: 1. PTR_TO_RDWR_BUF -> PTR_TO_BUF 2. PTR_TO_RDONLY_BUF -> PTR_TO_BUF | MEM_RDONLY Signed-off-by: Hao Luo <haoluo@google.com> Signed-off-by: Alexei Starovoitov <ast@kernel.org> Link: https://lore.kernel.org/bpf/20211217003152.48334-6-haoluo@google.com Cc: stable@vger.kernel.org # 5.15.x Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> (cherry picked from commit b453361384) Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: Ic4fa4f9f5832c9d2b65ea0272367fbbb8007f24c	2022-06-18 18:28:44 +00:00
Hao Luo	13fc6550b0	UPSTREAM: bpf: Replace PTR_TO_XXX_OR_NULL with PTR_TO_XXX | PTR_MAYBE_NULL ... commit c25b2ae136039ffa820c26138ed4a5e5f3ab3841 upstream. We have introduced a new type to make bpf_reg composable, by allocating bits in the type to represent flags. One of the flags is PTR_MAYBE_NULL which indicates a pointer may be NULL. This patch switches the qualified reg_types to use this flag. The reg_types changed in this patch include: 1. PTR_TO_MAP_VALUE_OR_NULL 2. PTR_TO_SOCKET_OR_NULL 3. PTR_TO_SOCK_COMMON_OR_NULL 4. PTR_TO_TCP_SOCK_OR_NULL 5. PTR_TO_BTF_ID_OR_NULL 6. PTR_TO_MEM_OR_NULL 7. PTR_TO_RDONLY_BUF_OR_NULL 8. PTR_TO_RDWR_BUF_OR_NULL [haoluo: backport notes There was a reg_type_may_be_null() in adjust_ptr_min_max_vals() in 5.15.x, but didn't exist in the upstream commit. This backport converted that reg_type_may_be_null() to type_may_be_null() as well.] Signed-off-by: Hao Luo <haoluo@google.com> Signed-off-by: Alexei Starovoitov <ast@kernel.org> Link: https://lore.kernel.org/r/20211217003152.48334-5-haoluo@google.com Cc: stable@vger.kernel.org # 5.15.x Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> (cherry picked from commit 8d38cde47a) Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: Iad81be90619024512c0fd7f23e7115aec60244a4	2022-06-18 18:28:44 +00:00
Greg Kroah-Hartman	ecda2085fd	Revert 5.15.37 merge into android13-5.15 ... This reverts the merge of 5.15.37 into the android13-5.15 There are lots of ABI issues, and many of the commits are not needed in the Android tree at this time. Revert the merge (except for the Makefile change), so that future merges will continue to work, and the needed individual changes from this release will be manually added to the tree at a later point in time. Fixes: f7dace75d276 ("Merge 5.15.37 into android13-5.15") Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I0632858e5c0fb94fc14c0f4216997330eca260a7	2022-05-18 08:59:14 +02:00
Greg Kroah-Hartman	ef5fed3c1e	Merge 5.15.37 into android13-5.15 ... Changes in 5.15.37 floppy: disable FDRAWCMD by default bpf: Introduce composable reg, ret and arg types. bpf: Replace ARG_XXX_OR_NULL with ARG_XXX | PTR_MAYBE_NULL bpf: Replace RET_XXX_OR_NULL with RET_XXX | PTR_MAYBE_NULL bpf: Replace PTR_TO_XXX_OR_NULL with PTR_TO_XXX | PTR_MAYBE_NULL bpf: Introduce MEM_RDONLY flag bpf: Convert PTR_TO_MEM_OR_NULL to composable types. bpf: Make per_cpu_ptr return rdonly PTR_TO_MEM. bpf: Add MEM_RDONLY for helper args that are pointers to rdonly mem. bpf/selftests: Test PTR_TO_RDONLY_MEM bpf: Fix crash due to out of bounds access into reg2btf_ids. spi: cadence-quadspi: fix write completion support ARM: dts: socfpga: change qspi to "intel,socfpga-qspi" mm: kfence: fix objcgs vector allocation gup: Turn fault_in_pages_{readable,writeable} into fault_in_{readable,writeable} iov_iter: Turn iov_iter_fault_in_readable into fault_in_iov_iter_readable iov_iter: Introduce fault_in_iov_iter_writeable gfs2: Add wrapper for iomap_file_buffered_write gfs2: Clean up function may_grant gfs2: Introduce flag for glock holder auto-demotion gfs2: Move the inode glock locking to gfs2_file_buffered_write gfs2: Eliminate ip->i_gh gfs2: Fix mmap + page fault deadlocks for buffered I/O iomap: Fix iomap_dio_rw return value for user copies iomap: Support partial direct I/O on user copy failures iomap: Add done_before argument to iomap_dio_rw gup: Introduce FOLL_NOFAULT flag to disable page faults iov_iter: Introduce nofault flag to disable page faults gfs2: Fix mmap + page fault deadlocks for direct I/O btrfs: fix deadlock due to page faults during direct IO reads and writes btrfs: fallback to blocking mode when doing async dio over multiple extents mm: gup: make fault_in_safe_writeable() use fixup_user_fault() selftests/bpf: Add test for reg2btf_ids out of bounds access Linux 5.15.37 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: Ica39b8856d6e3928a82f4e34f8b401f1a5cba5ee	2022-05-18 08:59:02 +02:00
Kumar Kartikeya Dwivedi	8c39925e98	bpf: Fix crash due to out of bounds access into reg2btf_ids. ... commit 45ce4b4f9009102cd9f581196d480a59208690c1 upstream When commit e6ac2450d6 ("bpf: Support bpf program calling kernel function") added kfunc support, it defined reg2btf_ids as a cheap way to translate the verifier reg type to the appropriate btf_vmlinux BTF ID, however commit c25b2ae13603 ("bpf: Replace PTR_TO_XXX_OR_NULL with PTR_TO_XXX | PTR_MAYBE_NULL") moved the __BPF_REG_TYPE_MAX from the last member of bpf_reg_type enum to after the base register types, and defined other variants using type flag composition. However, now, the direct usage of reg->type to index into reg2btf_ids may no longer fall into __BPF_REG_TYPE_MAX range, and hence lead to out of bounds access and kernel crash on dereference of bad pointer. [backport note: commit 3363bd0cfbb80 ("bpf: Extend kfunc with PTR_TO_CTX, PTR_TO_MEM argument support") was introduced after 5.15 and contains an out of bound reg2btf_ids access. Since that commit hasn't been backported, this patch doesn't include fix to that access. If we backport that commit in future, we need to fix its faulting access as well.] Fixes: c25b2ae13603 ("bpf: Replace PTR_TO_XXX_OR_NULL with PTR_TO_XXX | PTR_MAYBE_NULL") Signed-off-by: Kumar Kartikeya Dwivedi <memxor@gmail.com> Signed-off-by: Hao Luo <haoluo@google.com> Signed-off-by: Alexei Starovoitov <ast@kernel.org> Link: https://lore.kernel.org/bpf/20220216201943.624869-1-memxor@gmail.com Cc: stable@vger.kernel.org # v5.15+ Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-05-01 17:22:26 +02:00
Hao Luo	2a77c58726	bpf: Add MEM_RDONLY for helper args that are pointers to rdonly mem. ... commit 216e3cd2f28dbbf1fe86848e0e29e6693b9f0a20 upstream. Some helper functions may modify its arguments, for example, bpf_d_path, bpf_get_stack etc. Previously, their argument types were marked as ARG_PTR_TO_MEM, which is compatible with read-only mem types, such as PTR_TO_RDONLY_BUF. Therefore it's legitimate, but technically incorrect, to modify a read-only memory by passing it into one of such helper functions. This patch tags the bpf_args compatible with immutable memory with MEM_RDONLY flag. The arguments that don't have this flag will be only compatible with mutable memory types, preventing the helper from modifying a read-only memory. The bpf_args that have MEM_RDONLY are compatible with both mutable memory and immutable memory. Signed-off-by: Hao Luo <haoluo@google.com> Signed-off-by: Alexei Starovoitov <ast@kernel.org> Link: https://lore.kernel.org/bpf/20211217003152.48334-9-haoluo@google.com Cc: stable@vger.kernel.org # 5.15.x Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-05-01 17:22:26 +02:00
Hao Luo	b710f73704	bpf: Convert PTR_TO_MEM_OR_NULL to composable types. ... commit cf9f2f8d62eca810afbd1ee6cc0800202b000e57 upstream. Remove PTR_TO_MEM_OR_NULL and replace it with PTR_TO_MEM combined with flag PTR_MAYBE_NULL. Signed-off-by: Hao Luo <haoluo@google.com> Signed-off-by: Alexei Starovoitov <ast@kernel.org> Link: https://lore.kernel.org/bpf/20211217003152.48334-7-haoluo@google.com Cc: stable@vger.kernel.org # 5.15.x Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-05-01 17:22:25 +02:00
Hao Luo	b453361384	bpf: Introduce MEM_RDONLY flag ... commit 20b2aff4bc15bda809f994761d5719827d66c0b4 upstream. This patch introduce a flag MEM_RDONLY to tag a reg value pointing to read-only memory. It makes the following changes: 1. PTR_TO_RDWR_BUF -> PTR_TO_BUF 2. PTR_TO_RDONLY_BUF -> PTR_TO_BUF | MEM_RDONLY Signed-off-by: Hao Luo <haoluo@google.com> Signed-off-by: Alexei Starovoitov <ast@kernel.org> Link: https://lore.kernel.org/bpf/20211217003152.48334-6-haoluo@google.com Cc: stable@vger.kernel.org # 5.15.x Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-05-01 17:22:24 +02:00
Hao Luo	8d38cde47a	bpf: Replace PTR_TO_XXX_OR_NULL with PTR_TO_XXX | PTR_MAYBE_NULL ... commit c25b2ae136039ffa820c26138ed4a5e5f3ab3841 upstream. We have introduced a new type to make bpf_reg composable, by allocating bits in the type to represent flags. One of the flags is PTR_MAYBE_NULL which indicates a pointer may be NULL. This patch switches the qualified reg_types to use this flag. The reg_types changed in this patch include: 1. PTR_TO_MAP_VALUE_OR_NULL 2. PTR_TO_SOCKET_OR_NULL 3. PTR_TO_SOCK_COMMON_OR_NULL 4. PTR_TO_TCP_SOCK_OR_NULL 5. PTR_TO_BTF_ID_OR_NULL 6. PTR_TO_MEM_OR_NULL 7. PTR_TO_RDONLY_BUF_OR_NULL 8. PTR_TO_RDWR_BUF_OR_NULL [haoluo: backport notes There was a reg_type_may_be_null() in adjust_ptr_min_max_vals() in 5.15.x, but didn't exist in the upstream commit. This backport converted that reg_type_may_be_null() to type_may_be_null() as well.] Signed-off-by: Hao Luo <haoluo@google.com> Signed-off-by: Alexei Starovoitov <ast@kernel.org> Link: https://lore.kernel.org/r/20211217003152.48334-5-haoluo@google.com Cc: stable@vger.kernel.org # 5.15.x Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-05-01 17:22:24 +02:00
Greg Kroah-Hartman	b41a37c036	Merge 5.15.33 into android13-5.15 ... Changes in 5.15.33 Revert "swiotlb: rework "fix info leak with DMA_FROM_DEVICE"" USB: serial: pl2303: add IBM device IDs dt-bindings: usb: hcd: correct usb-device path USB: serial: pl2303: fix GS type detection USB: serial: simple: add Nokia phone driver mm: kfence: fix missing objcg housekeeping for SLAB hv: utils: add PTP_1588_CLOCK to Kconfig to fix build HID: logitech-dj: add new lightspeed receiver id HID: Add support for open wheel and no attachment to T300 xfrm: fix tunnel model fragmentation behavior ARM: mstar: Select HAVE_ARM_ARCH_TIMER virtio_console: break out of buf poll on remove vdpa/mlx5: should verify CTRL_VQ feature exists for MQ tools/virtio: fix virtio_test execution ethernet: sun: Free the coherent when failing in probing gpio: Revert regression in sysfs-gpio (gpiolib.c) spi: Fix invalid sgs value net:mcf8390: Use platform_get_irq() to get the interrupt Revert "gpio: Revert regression in sysfs-gpio (gpiolib.c)" spi: Fix erroneous sgs value with min_t() Input: zinitix - do not report shadow fingers af_key: add __GFP_ZERO flag for compose_sadb_supported in function pfkey_register net: dsa: microchip: add spi_device_id tables selftests: vm: fix clang build error multiple output files locking/lockdep: Avoid potential access of invalid memory in lock_class drm/amdgpu: move PX checking into amdgpu_device_ip_early_init drm/amdgpu: only check for _PR3 on dGPUs iommu/iova: Improve 32-bit free space estimate virtio-blk: Use blk_validate_block_size() to validate block size tpm: fix reference counting for struct tpm_chip usb: typec: tipd: Forward plug orientation to typec subsystem USB: usb-storage: Fix use of bitfields for hardware data in ene_ub6250.c xhci: fix garbage USBSTS being logged in some cases xhci: fix runtime PM imbalance in USB2 resume xhci: make xhci_handshake timeout for xhci_reset() adjustable xhci: fix uninitialized string returned by xhci_decode_ctrl_ctx() mei: me: disable driver on the ign firmware mei: me: add Alder Lake N device id. mei: avoid iterator usage outside of list_for_each_entry bus: mhi: pci_generic: Add mru_default for Quectel EM1xx series bus: mhi: Fix MHI DMA structure endianness docs: sphinx/requirements: Limit jinja2<3.1 coresight: Fix TRCCONFIGR.QE sysfs interface coresight: syscfg: Fix memleak on registration failure in cscfg_create_device iio: afe: rescale: use s64 for temporary scale calculations iio: inkern: apply consumer scale on IIO_VAL_INT cases iio: inkern: apply consumer scale when no channel scale is available iio: inkern: make a best effort on offset calculation greybus: svc: fix an error handling bug in gb_svc_hello() clk: rockchip: re-add rational best approximation algorithm to the fractional divider clk: uniphier: Fix fixed-rate initialization ptrace: Check PTRACE_O_SUSPEND_SECCOMP permission on PTRACE_SEIZE cifs: fix handlecache and multiuser cifs: we do not need a spinlock around the tree access during umount KEYS: fix length validation in keyctl_pkey_params_get_2() KEYS: asymmetric: enforce that sig algo matches key algo KEYS: asymmetric: properly validate hash_algo and encoding Documentation: add link to stable release candidate tree Documentation: update stable tree link firmware: stratix10-svc: add missing callback parameter on RSU firmware: sysfb: fix platform-device leak in error path HID: intel-ish-hid: Use dma_alloc_coherent for firmware update SUNRPC: avoid race between mod_timer() and del_timer_sync() NFS: NFSv2/v3 clients should never be setting NFS_CAP_XATTR NFSD: prevent underflow in nfssvc_decode_writeargs() NFSD: prevent integer overflow on 32 bit systems f2fs: fix to unlock page correctly in error path of is_alive() f2fs: quota: fix loop condition at f2fs_quota_sync() f2fs: fix to do sanity check on .cp_pack_total_block_count remoteproc: Fix count check in rproc_coredump_write() mm/mlock: fix two bugs in user_shm_lock() pinctrl: ingenic: Fix regmap on X series SoCs pinctrl: samsung: drop pin banks references on error paths net: bnxt_ptp: fix compilation error spi: mxic: Fix the transmit path mtd: rawnand: protect access to rawnand devices while in suspend can: ems_usb: ems_usb_start_xmit(): fix double dev_kfree_skb() in error path can: m_can: m_can_tx_handler(): fix use after free of skb can: usb_8dev: usb_8dev_start_xmit(): fix double dev_kfree_skb() in error path jffs2: fix use-after-free in jffs2_clear_xattr_subsystem jffs2: fix memory leak in jffs2_do_mount_fs jffs2: fix memory leak in jffs2_scan_medium mm: fs: fix lru_cache_disabled race in bh_lru mm/pages_alloc.c: don't create ZONE_MOVABLE beyond the end of a node mm: invalidate hwpoison page cache page in fault path mempolicy: mbind_range() set_policy() after vma_merge() scsi: core: sd: Add silence_suspend flag to suppress some PM messages scsi: ufs: Fix runtime PM messages never-ending cycle scsi: scsi_transport_fc: Fix FPIN Link Integrity statistics counters scsi: libsas: Fix sas_ata_qc_issue() handling of NCQ NON DATA commands qed: display VF trust config qed: validate and restrict untrusted VFs vlan promisc mode riscv: dts: canaan: Fix SPI3 bus width riscv: Fix fill_callchain return value riscv: Increase stack size under KASAN Revert "Input: clear BTN_RIGHT/MIDDLE on buttonpads" cifs: prevent bad output lengths in smb2_ioctl_query_info() cifs: fix NULL ptr dereference in smb2_ioctl_query_info() ALSA: cs4236: fix an incorrect NULL check on list iterator ALSA: hda: Avoid unsol event during RPM suspending ALSA: pcm: Fix potential AB/BA lock with buffer_mutex and mmap_lock ALSA: hda/realtek: Fix audio regression on Mi Notebook Pro 2020 rtc: mc146818-lib: fix locking in mc146818_set_time rtc: pl031: fix rtc features null pointer dereference ocfs2: fix crash when mount with quota enabled drm/simpledrm: Add "panel orientation" property on non-upright mounted LCD panels mm: madvise: skip unmapped vma holes passed to process_madvise mm: madvise: return correct bytes advised with process_madvise Revert "mm: madvise: skip unmapped vma holes passed to process_madvise" mm,hwpoison: unmap poisoned page before invalidation mm/kmemleak: reset tag when compare object pointer dm stats: fix too short end duration_ns when using precise_timestamps dm: fix use-after-free in dm_cleanup_zoned_dev() dm: interlock pending dm_io and dm_wait_for_bios_completion dm: fix double accounting of flush with data dm integrity: set journal entry unused when shrinking device tracing: Have trace event string test handle zero length strings drbd: fix potential silent data corruption powerpc/kvm: Fix kvm_use_magic_page PCI: fu740: Force 2.5GT/s for initial device probe arm64: signal: nofpsimd: Do not allocate fp/simd context when not available arm64: Do not defer reserve_crashkernel() for platforms with no DMA memory zones arm64: dts: qcom: sm8250: Fix MSI IRQ for PCIe1 and PCIe2 arm64: dts: ti: k3-am65: Fix gic-v3 compatible regs arm64: dts: ti: k3-j721e: Fix gic-v3 compatible regs arm64: dts: ti: k3-j7200: Fix gic-v3 compatible regs arm64: dts: ti: k3-am64: Fix gic-v3 compatible regs ASoC: SOF: Intel: Fix NULL ptr dereference when ENOMEM Revert "ACPI: Pass the same capabilities to the _OSC regardless of the query flag" ACPI: properties: Consistently return -ENOENT if there are no more references coredump: Also dump first pages of non-executable ELF libraries ext4: fix ext4_fc_stats trace point ext4: fix fs corruption when tring to remove a non-empty directory with IO error ext4: make mb_optimize_scan performance mount option work with extents drivers: hamradio: 6pack: fix UAF bug caused by mod_timer() samples/landlock: Fix path_list memory leak landlock: Use square brackets around "landlock-ruleset" mailbox: tegra-hsp: Flush whole channel block: limit request dispatch loop duration block: don't merge across cgroup boundaries if blkcg is enabled drm/edid: check basic audio support on CEA extension block fbdev: Hot-unplug firmware fb devices on forced removal video: fbdev: sm712fb: Fix crash in smtcfb_read() video: fbdev: atari: Atari 2 bpp (STe) palette bugfix rfkill: make new event layout opt-in ARM: dts: at91: sama7g5: Remove unused properties in i2c nodes ARM: dts: at91: sama5d2: Fix PMERRLOC resource size ARM: dts: exynos: fix UART3 pins configuration in Exynos5250 ARM: dts: exynos: add missing HDMI supplies on SMDK5250 ARM: dts: exynos: add missing HDMI supplies on SMDK5420 mgag200 fix memmapsl configuration in GCTL6 register carl9170: fix missing bit-wise or operator for tx_params pstore: Don't use semaphores in always-atomic-context code thermal: int340x: Increase bitmap size lib/raid6/test: fix multiple definition linking error exec: Force single empty string when argv is empty crypto: rsa-pkcs1pad - only allow with rsa crypto: rsa-pkcs1pad - correctly get hash from source scatterlist crypto: rsa-pkcs1pad - restore signature length check crypto: rsa-pkcs1pad - fix buffer overread in pkcs1pad_verify_complete() bcache: fixup multiple threads crash PM: domains: Fix sleep-in-atomic bug caused by genpd_debug_remove() DEC: Limit PMAX memory probing to R3k systems media: gpio-ir-tx: fix transmit with long spaces on Orange Pi PC media: venus: hfi_cmds: List HDR10 property as unsupported for v1 and v3 media: venus: venc: Fix h264 8x8 transform control media: davinci: vpif: fix unbalanced runtime PM get media: davinci: vpif: fix unbalanced runtime PM enable btrfs: zoned: mark relocation as writing btrfs: extend locking to all space_info members accesses btrfs: verify the tranisd of the to-be-written dirty extent buffer xtensa: define update_mmu_tlb function xtensa: fix stop_machine_cpuslocked call in patch_text xtensa: fix xtensa_wsr always writing 0 drm/syncobj: flatten dma_fence_chains on transfer drm/nouveau/backlight: Fix LVDS backlight detection on some laptops drm/nouveau/backlight: Just set all backlight types as RAW drm/fb-helper: Mark screen buffers in system memory with FBINFO_VIRTFB brcmfmac: firmware: Allocate space for default boardrev in nvram brcmfmac: pcie: Release firmwares in the brcmf_pcie_setup error path brcmfmac: pcie: Declare missing firmware files in pcie.c brcmfmac: pcie: Replace brcmf_pcie_copy_mem_todev with memcpy_toio brcmfmac: pcie: Fix crashes due to early IRQs drm/i915/opregion: check port number bounds for SWSCI display power state drm/i915/gem: add missing boundary check in vm_access PCI: imx6: Allow to probe when dw_pcie_wait_for_link() fails PCI: pciehp: Clear cmd_busy bit in polling mode PCI: xgene: Revert "PCI: xgene: Fix IB window setup" regulator: qcom_smd: fix for_each_child.cocci warnings selinux: access superblock_security_struct in LSM blob way selinux: check return value of sel_make_avc_files crypto: ccp - Ensure psp_ret is always init'd in __sev_platform_init_locked() hwrng: cavium - Check health status while reading random data hwrng: cavium - HW_RANDOM_CAVIUM should depend on ARCH_THUNDER crypto: sun8i-ss - really disable hash on A80 crypto: authenc - Fix sleep in atomic context in decrypt_tail crypto: mxs-dcp - Fix scatterlist processing selinux: Fix selinux_sb_mnt_opts_compat() thermal: int340x: Check for NULL after calling kmemdup() crypto: octeontx2 - remove CONFIG_DM_CRYPT check spi: tegra114: Add missing IRQ check in tegra_spi_probe spi: tegra210-quad: Fix missin IRQ check in tegra_qspi_probe stack: Constrain and fix stack offset randomization with Clang builds arm64/mm: avoid fixmap race condition when create pud mapping blk-cgroup: set blkg iostat after percpu stat aggregation selftests/x86: Add validity check and allow field splitting selftests/sgx: Treat CC as one argument crypto: rockchip - ECB does not need IV audit: log AUDIT_TIME_* records only from rules EVM: fix the evm= __setup handler return value crypto: ccree - don't attempt 0 len DMA mappings crypto: hisilicon/sec - fix the aead software fallback for engine spi: pxa2xx-pci: Balance reference count for PCI DMA device hwmon: (pmbus) Add mutex to regulator ops hwmon: (sch56xx-common) Replace WDOG_ACTIVE with WDOG_HW_RUNNING nvme: cleanup __nvme_check_ids nvme: fix the check for duplicate unique identifiers block: don't delete queue kobject before its children PM: hibernate: fix __setup handler error handling PM: suspend: fix return value of __setup handler spi: spi-zynqmp-gqspi: Handle error for dma_set_mask hwrng: atmel - disable trng on failure path crypto: sun8i-ss - call finalize with bh disabled crypto: sun8i-ce - call finalize with bh disabled crypto: amlogic - call finalize with bh disabled crypto: gemini - call finalize with bh disabled crypto: vmx - add missing dependencies clocksource/drivers/timer-ti-dm: Fix regression from errata i940 fix clocksource/drivers/exynos_mct: Refactor resources allocation clocksource/drivers/exynos_mct: Handle DTS with higher number of interrupts clocksource/drivers/timer-microchip-pit64b: Use notrace clocksource/drivers/timer-of: Check return value of of_iomap in timer_of_base_init() arm64: prevent instrumentation of bp hardening callbacks KEYS: trusted: Fix trusted key backends when building as module KEYS: trusted: Avoid calling null function trusted_key_exit ACPI: APEI: fix return value of __setup handlers crypto: ccp - ccp_dmaengine_unregister release dma channels crypto: ccree - Fix use after free in cc_cipher_exit() hwrng: nomadik - Change clk_disable to clk_disable_unprepare hwmon: (pmbus) Add Vin unit off handling clocksource: acpi_pm: fix return value of __setup handler io_uring: don't check unrelated req->open.how in accept request io_uring: terminate manual loop iterator loop correctly for non-vecs watch_queue: Fix NULL dereference in error cleanup watch_queue: Actually free the watch f2fs: fix to enable ATGC correctly via gc_idle sysfs interface sched/debug: Remove mpol_get/put and task_lock/unlock from sched_show_numa sched/core: Export pelt_thermal_tp sched/uclamp: Fix iowait boost escaping uclamp restriction rseq: Remove broken uapi field layout on 32-bit little endian perf/core: Fix address filter parser for multiple filters perf/x86/intel/pt: Fix address filter config for 32-bit kernel sched/fair: Improve consistency of allowed NUMA balance calculations f2fs: fix missing free nid in f2fs_handle_failed_inode nfsd: more robust allocation failure handling in nfsd_file_cache_init sched/cpuacct: Fix charge percpu cpuusage sched/rt: Plug rt_mutex_setprio() vs push_rt_task() race f2fs: fix to avoid potential deadlock btrfs: fix unexpected error path when reflinking an inline extent f2fs: fix compressed file start atomic write may cause data corruption selftests, x86: fix how check_cc.sh is being invoked drivers/base/memory: add memory block to memory group after registration succeeded kunit: make kunit_test_timeout compatible with comment pinctrl: samsung: Remove EINT handler for Exynos850 ALIVE and CMGP gpios media: staging: media: zoran: fix usage of vb2_dma_contig_set_max_seg_size media: camss: csid-170: fix non-10bit formats media: camss: csid-170: don't enable unused irqs media: camss: csid-170: set the right HALT_CMD when disabled media: camss: vfe-170: fix "VFE halt timeout" error media: staging: media: imx: imx7-mipi-csis: Make subdev name unique media: v4l2-mem2mem: Apply DST_QUEUE_OFF_BASE on MMAP buffers across ioctls media: mtk-vcodec: potential dereference of null pointer media: imx: imx8mq-mipi-csi2: remove wrong irq config write operation media: imx: imx8mq-mipi_csi2: fix system resume media: bttv: fix WARNING regression on tunerless devices media: atmel: atmel-sama7g5-isc: fix ispck leftover ASoC: sh: rz-ssi: Drop calling rz_ssi_pio_recv() recursively ASoC: codecs: Check for error pointer after calling devm_regmap_init_mmio ASoC: xilinx: xlnx_formatter_pcm: Handle sysclk setting ASoC: simple-card-utils: Set sysclk on all components media: coda: Fix missing put_device() call in coda_get_vdoa_data media: meson: vdec: potential dereference of null pointer media: hantro: Fix overfill bottom register field name media: ov6650: Fix set format try processing path media: v4l: Avoid unaligned access warnings when printing 4cc modifiers media: ov5648: Don't pack controls struct media: aspeed: Correct value for h-total-pixels video: fbdev: matroxfb: set maxvram of vbG200eW to the same as vbG200 to avoid black screen video: fbdev: controlfb: Fix COMPILE_TEST build video: fbdev: smscufx: Fix null-ptr-deref in ufx_usb_probe() video: fbdev: atmel_lcdfb: fix an error code in atmel_lcdfb_probe() video: fbdev: fbcvt.c: fix printing in fb_cvt_print_name() ARM: dts: Fix OpenBMC flash layout label addresses firmware: qcom: scm: Remove reassignment to desc following initializer ARM: dts: qcom: ipq4019: fix sleep clock soc: qcom: rpmpd: Check for null return of devm_kcalloc soc: qcom: ocmem: Fix missing put_device() call in of_get_ocmem soc: qcom: aoss: remove spurious IRQF_ONESHOT flags arm64: dts: qcom: sdm845: fix microphone bias properties and values arm64: dts: qcom: sm8250: fix PCIe bindings to follow schema arm64: dts: broadcom: bcm4908: use proper TWD binding arm64: dts: qcom: sm8150: Correct TCS configuration for apps rsc arm64: dts: qcom: sm8350: Correct TCS configuration for apps rsc firmware: ti_sci: Fix compilation failure when CONFIG_TI_SCI_PROTOCOL is not defined soc: ti: wkup_m3_ipc: Fix IRQ check in wkup_m3_ipc_probe ARM: dts: sun8i: v3s: Move the csi1 block to follow address order vsprintf: Fix potential unaligned access ARM: dts: imx: Add missing LVDS decoder on M53Menlo media: mexon-ge2d: fixup frames size in registers media: video/hdmi: handle short reads of hdmi info frame. media: ti-vpe: cal: Fix a NULL pointer dereference in cal_ctx_v4l2_init_formats() media: em28xx: initialize refcount before kref_get media: usb: go7007: s2250-board: fix leak in probe() media: cedrus: H265: Fix neighbour info buffer size media: cedrus: h264: Fix neighbour info buffer size ASoC: codecs: rx-macro: fix accessing compander for aux ASoC: codecs: rx-macro: fix accessing array out of bounds for enum type ASoC: codecs: va-macro: fix accessing array out of bounds for enum type ASoC: codecs: wc938x: fix accessing array out of bounds for enum type ASoC: codecs: wcd938x: fix kcontrol max values ASoC: codecs: wcd934x: fix kcontrol max values ASoC: codecs: wcd934x: fix return value of wcd934x_rx_hph_mode_put media: v4l2-core: Initialize h264 scaling matrix media: ov5640: Fix set format, v4l2_mbus_pixelcode not updated selftests/lkdtm: Add UBSAN config lib: uninline simple_strntoull() as well vsprintf: Fix %pK with kptr_restrict == 0 uaccess: fix nios2 and microblaze get_user_8() ASoC: rt5663: check the return value of devm_kzalloc() in rt5663_parse_dp() soc: mediatek: pm-domains: Add wakeup capacity support in power domain mmc: sdhci_am654: Fix the driver data of AM64 SoC ASoC: ti: davinci-i2s: Add check for clk_enable() ALSA: spi: Add check for clk_enable() arm64: dts: ns2: Fix spi-cpol and spi-cpha property arm64: dts: broadcom: Fix sata nodename printk: fix return value of printk.devkmsg __setup handler ASoC: mxs-saif: Handle errors for clk_enable ASoC: atmel_ssc_dai: Handle errors for clk_enable ASoC: dwc-i2s: Handle errors for clk_enable ASoC: soc-compress: prevent the potentially use of null pointer memory: emif: Add check for setup_interrupts memory: emif: check the pointer temp in get_device_details() ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction arm64: dts: rockchip: Fix SDIO regulator supply properties on rk3399-firefly m68k: coldfire/device.c: only build for MCF_EDMA when h/w macros are defined media: stk1160: If start stream fails, return buffers with VB2_BUF_STATE_QUEUED media: vidtv: Check for null return of vzalloc ASoC: atmel: Add missing of_node_put() in at91sam9g20ek_audio_probe ASoC: wm8350: Handle error for wm8350_register_irq ASoC: fsi: Add check for clk_enable video: fbdev: omapfb: Add missing of_node_put() in dvic_probe_of media: saa7134: fix incorrect use to determine if list is empty ivtv: fix incorrect device_caps for ivtvfb ASoC: atmel: Fix error handling in snd_proto_probe ASoC: rockchip: i2s: Fix missing clk_disable_unprepare() in rockchip_i2s_probe ASoC: SOF: Add missing of_node_put() in imx8m_probe ASoC: mediatek: use of_device_get_match_data() ASoC: mediatek: mt8192-mt6359: Fix error handling in mt8192_mt6359_dev_probe ASoC: rk817: Fix missing clk_disable_unprepare() in rk817_platform_probe ASoC: dmaengine: do not use a NULL prepare_slave_config() callback ASoC: mxs: Fix error handling in mxs_sgtl5000_probe ASoC: fsl_spdif: Disable TX clock when stop ASoC: imx-es8328: Fix error return code in imx_es8328_probe() ASoC: SOF: Intel: enable DMI L1 for playback streams ASoC: msm8916-wcd-digital: Fix missing clk_disable_unprepare() in msm8916_wcd_digital_probe mmc: davinci_mmc: Handle error for clk_enable ASoC: atmel: Fix error handling in sam9x5_wm8731_driver_probe ASoC: msm8916-wcd-analog: Fix error handling in pm8916_wcd_analog_spmi_probe ASoC: codecs: wcd934x: Add missing of_node_put() in wcd934x_codec_parse_data ASoC: amd: Fix reference to PCM buffer address ARM: configs: multi_v5_defconfig: re-enable CONFIG_V4L_PLATFORM_DRIVERS ARM: configs: multi_v5_defconfig: re-enable DRM_PANEL and FB_xxx drm/meson: osd_afbcd: Add an exit callback to struct meson_afbcd_ops drm/meson: Make use of the helper function devm_platform_ioremap_resourcexxx() drm/meson: split out encoder from meson_dw_hdmi drm/meson: Fix error handling when afbcd.ops->init fails drm/bridge: Fix free wrong object in sii8620_init_rcp_input_dev drm/bridge: Add missing pm_runtime_disable() in __dw_mipi_dsi_probe drm/bridge: nwl-dsi: Fix PM disable depth imbalance in nwl_dsi_probe drm: bridge: adv7511: Fix ADV7535 HPD enablement ath10k: fix memory overwrite of the WoWLAN wakeup packet pattern drm/v3d/v3d_drv: Check for error num after setting mask drm/panfrost: Check for error num after setting mask libbpf: Fix possible NULL pointer dereference when destroying skeleton bpftool: Only set obj->skeleton on complete success udmabuf: validate ubuf->pagecount bpf: Fix UAF due to race between btf_try_get_module and load_module drm/selftests/test-drm_dp_mst_helper: Fix memory leak in sideband_msg_req_encode_decode selftests: bpf: Fix bind on used port Bluetooth: btintel: Fix WBS setting for Intel legacy ROM products Bluetooth: hci_serdev: call init_rwsem() before p->open() mtd: onenand: Check for error irq mtd: rawnand: gpmi: fix controller timings setting drm/edid: Don't clear formats if using deep color drm/edid: Split deep color modes between RGB and YUV444 ionic: fix type complaint in ionic_dev_cmd_clean() ionic: start watchdog after all is setup ionic: Don't send reset commands if FW isn't running drm/nouveau/acr: Fix undefined behavior in nvkm_acr_hsfw_load_bl() drm/amd/display: Fix a NULL pointer dereference in amdgpu_dm_connector_add_common_modes() drm/amd/pm: return -ENOTSUPP if there is no get_dpm_ultimate_freq function net: phy: at803x: move page selection fix to config_init selftests/bpf: Normalize XDP section names in selftests selftests/bpf/test_xdp_redirect_multi: use temp netns for testing ath9k_htc: fix uninit value bugs RDMA/core: Set MR type in ib_reg_user_mr KVM: PPC: Fix vmx/vsx mixup in mmio emulation selftests/net: timestamping: Fix bind_phc check i40e: don't reserve excessive XDP_PACKET_HEADROOM on XSK Rx to skb i40e: respect metadata on XSK Rx to skb igc: don't reserve excessive XDP_PACKET_HEADROOM on XSK Rx to skb ixgbe: pass bi->xdp to ixgbe_construct_skb_zc() directly ixgbe: don't reserve excessive XDP_PACKET_HEADROOM on XSK Rx to skb ixgbe: respect metadata on XSK Rx to skb power: reset: gemini-poweroff: Fix IRQ check in gemini_poweroff_probe ray_cs: Check ioremap return value powerpc: dts: t1040rdb: fix ports names for Seville Ethernet switch KVM: PPC: Book3S HV: Check return value of kvmppc_radix_init powerpc/perf: Don't use perf_hw_context for trace IMC PMU mt76: connac: fix sta_rec_wtbl tag len mt76: mt7915: use proper aid value in mt7915_mcu_wtbl_generic_tlv in sta mode mt76: mt7915: use proper aid value in mt7915_mcu_sta_basic_tlv mt76: mt7921: fix a leftover race in runtime-pm mt76: mt7615: fix a leftover race in runtime-pm mt76: mt7603: check sta_rates pointer in mt7603_sta_rate_tbl_update mt76: mt7615: check sta_rates pointer in mt7615_sta_rate_tbl_update ptp: unregister virtual clocks when unregistering physical clock. net: dsa: mv88e6xxx: Enable port policy support on 6097 mac80211: Remove a couple of obsolete TODO mac80211: limit bandwidth in HE capabilities scripts/dtc: Call pkg-config POSIXly correct livepatch: Fix build failure on 32 bits processors net: asix: add proper error handling of usb read errors i2c: bcm2835: Use platform_get_irq() to get the interrupt i2c: bcm2835: Fix the error handling in 'bcm2835_i2c_probe()' mtd: mchp23k256: Add SPI ID table mtd: mchp48l640: Add SPI ID table igc: avoid kernel warning when changing RX ring parameters igb: refactor XDP registration PCI: aardvark: Fix reading MSI interrupt number PCI: aardvark: Fix reading PCI_EXP_RTSTA_PME bit on emulated bridge RDMA/rxe: Check the last packet by RXE_END_MASK libbpf: Fix signedness bug in btf_dump_array_data() cxl/core: Fix cxl_probe_component_regs() error message cxl/regs: Fix size of CXL Capability Header Register net:enetc: allocate CBD ring data memory using DMA coherent methods libbpf: Fix compilation warning due to mismatched printf format drm/bridge: dw-hdmi: use safe format when first in bridge chain libbpf: Use dynamically allocated buffer when receiving netlink messages power: supply: ab8500: Fix memory leak in ab8500_fg_sysfs_init HID: i2c-hid: fix GET/SET_REPORT for unnumbered reports iommu/ipmmu-vmsa: Check for error num after setting mask drm/bridge: anx7625: Fix overflow issue on reading EDID bpftool: Fix the error when lookup in no-btf maps drm/amd/pm: enable pm sysfs write for one VF mode drm/amd/display: Add affected crtcs to atomic state for dsc mst unplug libbpf: Fix memleak in libbpf_netlink_recv() IB/cma: Allow XRC INI QPs to set their local ACK timeout dax: make sure inodes are flushed before destroy cache selftests: mptcp: add csum mib check for mptcp_connect iwlwifi: mvm: Don't call iwl_mvm_sta_from_mac80211() with NULL sta iwlwifi: mvm: don't iterate unadded vifs when handling FW SMPS req iwlwifi: mvm: align locking in D3 test debugfs iwlwifi: yoyo: remove DBGI_SRAM address reset writing iwlwifi: Fix -EIO error code that is never returned iwlwifi: mvm: Fix an error code in iwl_mvm_up() mtd: rawnand: pl353: Set the nand chip node as the flash node drm/msm/dp: populate connector of struct dp_panel drm/msm/dp: stop link training after link training 2 failed drm/msm/dp: always add fail-safe mode into connector mode list drm/msm/dsi: Use "ref" fw clock instead of global name for VCO parent drm/msm/dsi/phy: fix 7nm v4.0 settings for C-PHY mode drm/msm/dpu: add DSPP blocks teardown drm/msm/dpu: fix dp audio condition dm crypt: fix get_key_size compiler warning if !CONFIG_KEYS vfio/pci: fix memory leak during D3hot to D0 transition vfio/pci: wake-up devices around reset functions scsi: fnic: Fix a tracing statement scsi: pm8001: Fix command initialization in pm80XX_send_read_log() scsi: pm8001: Fix command initialization in pm8001_chip_ssp_tm_req() scsi: pm8001: Fix payload initialization in pm80xx_set_thermal_config() scsi: pm8001: Fix le32 values handling in pm80xx_set_sas_protocol_timer_config() scsi: pm8001: Fix payload initialization in pm80xx_encrypt_update() scsi: pm8001: Fix le32 values handling in pm80xx_chip_ssp_io_req() scsi: pm8001: Fix le32 values handling in pm80xx_chip_sata_req() scsi: pm8001: Fix NCQ NON DATA command task initialization scsi: pm8001: Fix NCQ NON DATA command completion handling scsi: pm8001: Fix abort all task initialization RDMA/mlx5: Fix the flow of a miss in the allocation of a cache ODP MR drm/amd/display: Remove vupdate_int_entry definition TOMOYO: fix __setup handlers return values power: supply: sbs-charger: Don't cancel work that is not initialized ext2: correct max file size computing drm/tegra: Fix reference leak in tegra_dsi_ganged_probe power: supply: bq24190_charger: Fix bq24190_vbus_is_enabled() wrong false return scsi: hisi_sas: Change permission of parameter prot_mask drm/bridge: cdns-dsi: Make sure to to create proper aliases for dt bpf, arm64: Call build_prologue() first in first JIT pass bpf, arm64: Feed byte-offset into bpf line info xsk: Fix race at socket teardown RDMA/irdma: Fix netdev notifications for vlan's RDMA/irdma: Fix Passthrough mode in VM RDMA/irdma: Remove incorrect masking of PD gpu: host1x: Fix a memory leak in 'host1x_remove()' libbpf: Skip forward declaration when counting duplicated type names powerpc/mm/numa: skip NUMA_NO_NODE onlining in parse_numa_properties() powerpc/Makefile: Don't pass -mcpu=powerpc64 when building 32-bit KVM: x86: Fix emulation in writing cr8 KVM: x86/emulator: Defer not-present segment check in __load_segment_descriptor() hv_balloon: rate-limit "Unhandled message" warning i2c: xiic: Make bus names unique power: supply: wm8350-power: Handle error for wm8350_register_irq power: supply: wm8350-power: Add missing free in free_charger_irq IB/hfi1: Allow larger MTU without AIP RDMA/core: Fix ib_qp_usecnt_dec() called when error PCI: Reduce warnings on possible RW1C corruption net: axienet: fix RX ring refill allocation failure handling drm/msm/a6xx: Fix missing ARRAY_SIZE() check mips: DEC: honor CONFIG_MIPS_FP_SUPPORT=n MIPS: Sanitise Cavium switch cases in TLB handler synthesizers powerpc/sysdev: fix incorrect use to determine if list is empty powerpc/64s: Don't use DSISR for SLB faults mfd: mc13xxx: Add check for mc13xxx_irq_request libbpf: Unmap rings when umem deleted selftests/bpf: Make test_lwt_ip_encap more stable and faster platform/x86: huawei-wmi: check the return value of device_create_file() scsi: mpt3sas: Fix incorrect 4GB boundary check powerpc: 8xx: fix a return value error in mpc8xx_pic_init vxcan: enable local echo for sent CAN frames ath10k: Fix error handling in ath10k_setup_msa_resources mips: cdmm: Fix refcount leak in mips_cdmm_phys_base MIPS: RB532: fix return value of __setup handler MIPS: pgalloc: fix memory leak caused by pgd_free() mtd: rawnand: atmel: fix refcount issue in atmel_nand_controller_init power: ab8500_chargalg: Use CLOCK_MONOTONIC RDMA/irdma: Prevent some integer underflows Revert "RDMA/core: Fix ib_qp_usecnt_dec() called when error" RDMA/mlx5: Fix memory leak in error flow for subscribe event routine bpf, sockmap: Fix memleak in sk_psock_queue_msg bpf, sockmap: Fix memleak in tcp_bpf_sendmsg while sk msg is full bpf, sockmap: Fix more uncharged while msg has more_data bpf, sockmap: Fix double uncharge the mem of sk_msg samples/bpf, xdpsock: Fix race when running for fix duration of time USB: storage: ums-realtek: fix error code in rts51x_read_mem() drm/i915/display: Fix HPD short pulse handling for eDP netfilter: flowtable: Fix QinQ and pppoe support for inet table mt76: mt7921: fix mt7921_queues_acq implementation can: isotp: sanitize CAN ID checks in isotp_bind() can: isotp: return -EADDRNOTAVAIL when reading from unbound socket can: isotp: support MSG_TRUNC flag when reading from socket bareudp: use ipv6_mod_enabled to check if IPv6 enabled ibmvnic: fix race between xmit and reset af_unix: Fix some data-races around unix_sk(sk)->oob_skb. selftests/bpf: Fix error reporting from sock_fields programs Bluetooth: hci_uart: add missing NULL check in h5_enqueue Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed Bluetooth: btmtksdio: Fix kernel oops in btmtksdio_interrupt ipv4: Fix route lookups when handling ICMP redirects and PMTU updates af_netlink: Fix shift out of bounds in group mask calculation i2c: meson: Fix wrong speed use from probe netfilter: conntrack: Add and use nf_ct_set_auto_assign_helper_warned() i2c: mux: demux-pinctrl: do not deactivate a master that is not active powerpc/pseries: Fix use after free in remove_phb_dynamic() selftests/bpf/test_lirc_mode2.sh: Exit with proper code PCI: Avoid broken MSI on SB600 USB devices net: bcmgenet: Use stronger register read/writes to assure ordering tcp: ensure PMTU updates are processed during fastopen openvswitch: always update flow key after nat net: dsa: fix panic on shutdown if multi-chip tree failed to probe tipc: fix the timer expires after interval 100ms mfd: asic3: Add missing iounmap() on error asic3_mfd_probe ice: fix 'scheduling while atomic' on aux critical err interrupt ice: don't allow to run ice_send_event_to_aux() in atomic ctx drivers: ethernet: cpsw: fix panic when interrupt coaleceing is set via ethtool kernel/resource: fix kfree() of bootmem memory again staging: r8188eu: convert DBG_88E_LEVEL call in hal/rtl8188e_hal_init.c staging: r8188eu: release_firmware is not called if allocation fails mxser: fix xmit_buf leak in activate when LSR == 0xff fsi: scom: Fix error handling fsi: scom: Remove retries in indirect scoms pwm: lpc18xx-sct: Initialize driver data and hardware before pwmchip_add() pps: clients: gpio: Propagate return value from pps_gpio_probe fsi: Aspeed: Fix a potential double free misc: alcor_pci: Fix an error handling path cpufreq: qcom-cpufreq-nvmem: fix reading of PVS Valid fuse soundwire: intel: fix wrong register name in intel_shim_wake clk: qcom: ipq8074: fix PCI-E clock oops dmaengine: idxd: check GENCAP config support for gencfg register dmaengine: idxd: change bandwidth token to read buffers dmaengine: idxd: restore traffic class defaults after wq reset iio: mma8452: Fix probe failing when an i2c_device_id is used serial: 8250_aspeed_vuart: add PORT_ASPEED_VUART port type staging:iio:adc:ad7280a: Fix handing of device address bit reversing. pinctrl: renesas: r8a77470: Reduce size for narrow VIN1 channel pinctrl: renesas: checker: Fix miscalculation of number of states clk: qcom: ipq8074: Use floor ops for SDCC1 clock phy: dphy: Correct lpx parameter and its derivatives(ta_{get,go,sure}) phy: phy-brcm-usb: fixup BCM4908 support serial: 8250_mid: Balance reference count for PCI DMA device serial: 8250_lpss: Balance reference count for PCI DMA device NFS: Use of mapping_set_error() results in spurious errors serial: 8250: Fix race condition in RTS-after-send handling iio: adc: Add check for devm_request_threaded_irq habanalabs: Add check for pci_enable_device NFS: Return valid errors from nfs2/3_decode_dirent() staging: r8188eu: fix endless loop in recv_func dma-debug: fix return value of __setup handlers clk: imx7d: Remove audio_mclk_root_clk clk: imx: off by one in imx_lpcg_parse_clks_from_dt() clk: at91: sama7g5: fix parents of PDMCs' GCLK clk: qcom: clk-rcg2: Update logic to calculate D value for RCG clk: qcom: clk-rcg2: Update the frac table for pixel clock dmaengine: hisi_dma: fix MSI allocate fail when reload hisi_dma remoteproc: qcom: Fix missing of_node_put in adsp_alloc_memory_region remoteproc: qcom_wcnss: Add missing of_node_put() in wcnss_alloc_memory_region remoteproc: qcom_q6v5_mss: Fix some leaks in q6v5_alloc_memory_region nvdimm/region: Fix default alignment for small regions clk: actions: Terminate clk_div_table with sentinel element clk: loongson1: Terminate clk_div_table with sentinel element clk: hisilicon: Terminate clk_div_table with sentinel element clk: clps711x: Terminate clk_div_table with sentinel element clk: Fix clk_hw_get_clk() when dev is NULL clk: tegra: tegra124-emc: Fix missing put_device() call in emc_ensure_emc_driver mailbox: imx: fix crash in resume on i.mx8ulp NFS: remove unneeded check in decode_devicenotify_args() staging: mt7621-dts: fix LEDs and pinctrl on GB-PC1 devicetree staging: mt7621-dts: fix formatting staging: mt7621-dts: fix pinctrl properties for ethernet staging: mt7621-dts: fix GB-PC2 devicetree pinctrl: mediatek: Fix missing of_node_put() in mtk_pctrl_init pinctrl: mediatek: paris: Fix PIN_CONFIG_BIAS_* readback pinctrl: mediatek: paris: Fix "argument" argument type for mtk_pinconf_get() pinctrl: mediatek: paris: Fix pingroup pin config state readback pinctrl: mediatek: paris: Skip custom extra pin config dump for virtual GPIOs pinctrl: microchip sgpio: use reset driver pinctrl: microchip-sgpio: lock RMW access pinctrl: nomadik: Add missing of_node_put() in nmk_pinctrl_probe pinctrl/rockchip: Add missing of_node_put() in rockchip_pinctrl_probe tty: hvc: fix return value of __setup handler kgdboc: fix return value of __setup handler serial: 8250: fix XOFF/XON sending when DMA is used virt: acrn: obtain pa from VMA with PFNMAP flag virt: acrn: fix a memory leak in acrn_dev_ioctl() kgdbts: fix return value of __setup handler firmware: google: Properly state IOMEM dependency driver core: dd: fix return value of __setup handler jfs: fix divide error in dbNextAG netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options SUNRPC don't resend a task on an offlined transport NFSv4.1: don't retry BIND_CONN_TO_SESSION on session error kdb: Fix the putarea helper function perf stat: Fix forked applications enablement of counters clk: qcom: gcc-msm8994: Fix gpll4 width vsock/virtio: initialize vdev->priv before using VQs vsock/virtio: read the negotiated features before using VQs vsock/virtio: enable VQs early on probe clk: Initialize orphan req_rate xen: fix is_xen_pmu() net: enetc: report software timestamping via SO_TIMESTAMPING net: hns3: fix bug when PF set the duplicate MAC address for VFs net: hns3: fix port base vlan add fail when concurrent with reset net: hns3: add vlan list lock to protect vlan list net: hns3: format the output of the MAC address net: hns3: refine the process when PF set VF VLAN net: phy: broadcom: Fix brcm_fet_config_init() selftests: test_vxlan_under_vrf: Fix broken test case NFS: Don't loop forever in nfs_do_recoalesce() net: hns3: clean residual vf config after disable sriov net: sparx5: depends on PTP_1588_CLOCK_OPTIONAL qlcnic: dcb: default to returning -EOPNOTSUPP net/x25: Fix null-ptr-deref caused by x25_disconnect net: sparx5: switchdev: fix possible NULL pointer dereference octeontx2-af: initialize action variable net: prefer nf_ct_put instead of nf_conntrack_put net/sched: act_ct: fix ref leak when switching zones NFSv4/pNFS: Fix another issue with a list iterator pointing to the head net: dsa: bcm_sf2_cfp: fix an incorrect NULL check on list iterator fs: fd tables have to be multiples of BITS_PER_LONG lib/test: use after free in register_test_dev_kmod() fs: fix fd table size alignment properly LSM: general protection fault in legacy_parse_param regulator: rpi-panel: Handle I2C errors/timing to the Atmel crypto: hisilicon/qm - cleanup warning in qm_vf_read_qos gcc-plugins/stackleak: Exactly match strings instead of prefixes pinctrl: npcm: Fix broken references to chip->parent_device rcu: Mark writes to the rcu_segcblist structure's ->flags field block/bfq_wf2q: correct weight to ioprio crypto: xts - Add softdep on ecb crypto: hisilicon/sec - not need to enable sm4 extra mode at HW V3 block, bfq: don't move oom_bfqq selinux: use correct type for context length arm64: module: remove (NOLOAD) from linker script selinux: allow FIOCLEX and FIONCLEX with policy capability loop: use sysfs_emit() in the sysfs xxx show() Fix incorrect type in assignment of ipv6 port for audit irqchip/qcom-pdc: Fix broken locking irqchip/nvic: Release nvic_base upon failure fs/binfmt_elf: Fix AT_PHDR for unusual ELF files bfq: fix use-after-free in bfq_dispatch_request ACPICA: Avoid walking the ACPI Namespace if it is not there lib/raid6/test/Makefile: Use $(pound) instead of \# for Make 4.3 Revert "Revert "block, bfq: honor already-setup queue merges"" ACPI/APEI: Limit printable size of BERT table data PM: core: keep irq flags in device_pm_check_callbacks() parisc: Fix handling off probe non-access faults nvme-tcp: lockdep: annotate in-kernel sockets spi: tegra20: Use of_device_get_match_data() atomics: Fix atomic64_{read_acquire,set_release} fallbacks locking/lockdep: Iterate lock_classes directly when reading lockdep files ext4: correct cluster len and clusters changed accounting in ext4_mb_mark_bb ext4: fix ext4_mb_mark_bb() with flex_bg with fast_commit sched/tracing: Report TASK_RTLOCK_WAIT tasks as TASK_UNINTERRUPTIBLE ext4: don't BUG if someone dirty pages without asking ext4 first f2fs: fix to do sanity check on curseg->alloc_type NFSD: Fix nfsd_breaker_owns_lease() return values f2fs: don't get FREEZE lock in f2fs_evict_inode in frozen fs btrfs: harden identification of a stale device btrfs: make search_csum_tree return 0 if we get -EFBIG f2fs: use spin_lock to avoid hang f2fs: compress: fix to print raw data size in error path of lz4 decompression Adjust cifssb maximum read size ntfs: add sanity check on allocation size media: staging: media: zoran: move videodev alloc media: staging: media: zoran: calculate the right buffer number for zoran_reap_stat_com media: staging: media: zoran: fix various V4L2 compliance errors media: atmel: atmel-isc-base: report frame sizes as full supported range media: ir_toy: free before error exiting ASoC: sh: rz-ssi: Make the data structures available before registering the handlers ASoC: SOF: Intel: match sdw version on link_slaves_found media: imx-jpeg: Prevent decoding NV12M jpegs into single-planar buffers media: iommu/mediatek-v1: Free the existed fwspec if the master dev already has media: iommu/mediatek: Return ENODEV if the device is NULL media: iommu/mediatek: Add device_link between the consumer and the larb devices video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow video: fbdev: w100fb: Reset global state video: fbdev: cirrusfb: check pixclock to avoid divide by zero video: fbdev: omapfb: acx565akm: replace snprintf with sysfs_emit ARM: dts: qcom: fix gic_irq_domain_translate warnings for msm8960 ARM: dts: bcm2837: Add the missing L1/L2 cache information ASoC: madera: Add dependencies on MFD media: atomisp_gmin_platform: Add DMI quirk to not turn AXP ELDO2 regulator off on some boards media: atomisp: fix dummy_ptr check to avoid duplicate active_bo ARM: ftrace: avoid redundant loads or clobbering IP ARM: dts: imx7: Use audio_mclk_post_div instead audio_mclk_root_clk arm64: defconfig: build imx-sdma as a module video: fbdev: omapfb: panel-dsi-cm: Use sysfs_emit() instead of snprintf() video: fbdev: omapfb: panel-tpo-td043mtea1: Use sysfs_emit() instead of snprintf() video: fbdev: udlfb: replace snprintf in show functions with sysfs_emit ARM: dts: bcm2711: Add the missing L1/L2 cache information ASoC: soc-core: skip zero num_dai component in searching dai name media: imx-jpeg: fix a bug of accessing array out of bounds media: cx88-mpeg: clear interrupt status register before streaming video uaccess: fix type mismatch warnings from access_ok() lib/test_lockup: fix kernel pointer check for separate address spaces ARM: tegra: tamonten: Fix I2C3 pad setting ARM: mmp: Fix failure to remove sram device ASoC: amd: vg: fix for pm resume callback sequence video: fbdev: sm712fb: Fix crash in smtcfb_write() media: i2c: ov5648: Fix lockdep error media: Revert "media: em28xx: add missing em28xx_close_extension" media: hdpvr: initialize dev->worker at hdpvr_register_videodev ASoC: Intel: sof_sdw: fix quirks for 2022 HP Spectre x360 13" tracing: Have TRACE_DEFINE_ENUM affect trace event types as well mmc: host: Return an error when ->enable_sdio_irq() ops is missing media: atomisp: fix bad usage at error handling logic ALSA: hda/realtek: Add alc256-samsung-headphone fixup KVM: x86: Reinitialize context if host userspace toggles EFER.LME KVM: x86/mmu: Move "invalid" check out of kvm_tdp_mmu_get_root() KVM: x86/mmu: Zap _all_ roots when unmapping gfn range in TDP MMU KVM: x86/mmu: Check for present SPTE when clearing dirty bit in TDP MMU KVM: x86: hyper-v: Drop redundant 'ex' parameter from kvm_hv_send_ipi() KVM: x86: hyper-v: Drop redundant 'ex' parameter from kvm_hv_flush_tlb() KVM: x86: hyper-v: Fix the maximum number of sparse banks for XMM fast TLB flush hypercalls KVM: x86: hyper-v: HVCALL_SEND_IPI_EX is an XMM fast hypercall powerpc/kasan: Fix early region not updated correctly powerpc/lib/sstep: Fix 'sthcx' instruction powerpc/lib/sstep: Fix build errors with newer binutils powerpc: Add set_memory_{p/np}() and remove set_memory_attr() powerpc: Fix build errors with newer binutils drm/dp: Fix off-by-one in register cache size drm/i915: Treat SAGV block time 0 as SAGV disabled drm/i915: Fix PSF GV point mask when SAGV is not possible drm/i915: Reject unsupported TMDS rates on ICL+ scsi: qla2xxx: Refactor asynchronous command initialization scsi: qla2xxx: Implement ref count for SRB scsi: qla2xxx: Fix stuck session in gpdb scsi: qla2xxx: Fix warning message due to adisc being flushed scsi: qla2xxx: Fix scheduling while atomic scsi: qla2xxx: Fix premature hw access after PCI error scsi: qla2xxx: Fix wrong FDMI data for 64G adapter scsi: qla2xxx: Fix warning for missing error code scsi: qla2xxx: Fix device reconnect in loop topology scsi: qla2xxx: edif: Fix clang warning scsi: qla2xxx: Fix T10 PI tag escape and IP guard options for 28XX adapters scsi: qla2xxx: Add devids and conditionals for 28xx scsi: qla2xxx: Check for firmware dump already collected scsi: qla2xxx: Suppress a kernel complaint in qla_create_qpair() scsi: qla2xxx: Fix disk failure to rediscover scsi: qla2xxx: Fix incorrect reporting of task management failure scsi: qla2xxx: Fix hang due to session stuck scsi: qla2xxx: Fix missed DMA unmap for NVMe ls requests scsi: qla2xxx: Fix N2N inconsistent PLOGI scsi: qla2xxx: Fix stuck session of PRLI reject scsi: qla2xxx: Reduce false trigger to login scsi: qla2xxx: Use correct feature type field during RFF_ID processing platform: chrome: Split trace include file KVM: x86: Check lapic_in_kernel() before attempting to set a SynIC irq KVM: x86: Avoid theoretical NULL pointer dereference in kvm_irq_delivery_to_apic_fast() KVM: x86: Forbid VMM to set SYNIC/STIMER MSRs when SynIC wasn't activated KVM: Prevent module exit until all VMs are freed KVM: x86: fix sending PV IPI KVM: SVM: fix panic on out-of-bounds guest IRQ ubifs: rename_whiteout: Fix double free for whiteout_ui->data ubifs: Fix deadlock in concurrent rename whiteout and inode writeback ubifs: Add missing iput if do_tmpfile() failed in rename whiteout ubifs: Rename whiteout atomically ubifs: Fix 'ui->dirty' race between do_tmpfile() and writeback work ubifs: Rectify space amount budget for mkdir/tmpfile operations ubifs: setflags: Make dirtied_ino_d 8 bytes aligned ubifs: Fix read out-of-bounds in ubifs_wbuf_write_nolock() ubifs: Fix to add refcount once page is set private ubifs: rename_whiteout: correct old_dir size computing nvme: allow duplicate NSIDs for private namespaces nvme: fix the read-only state for zoned namespaces with unsupposed features wireguard: queueing: use CFI-safe ptr_ring cleanup function wireguard: socket: free skb in send6 when ipv6 is disabled wireguard: socket: ignore v6 endpoints when ipv6 is disabled XArray: Fix xas_create_range() when multi-order entry present can: mcba_usb: mcba_usb_start_xmit(): fix double dev_kfree_skb in error path can: mcba_usb: properly check endpoint type can: mcp251xfd: mcp251xfd_register_get_dev_id(): fix return of error value XArray: Update the LRU list in xas_split() modpost: restore the warning message for missing symbol versions rtc: check if __rtc_read_time was successful gfs2: gfs2_setattr_size error path fix gfs2: Make sure FITRIM minlen is rounded up to fs block size net: hns3: fix the concurrency between functions reading debugfs net: hns3: fix software vlan talbe of vlan 0 inconsistent with hardware rxrpc: fix some null-ptr-deref bugs in server_key.c rxrpc: Fix call timer start racing with call destruction mailbox: imx: fix wakeup failure from freeze mode crypto: arm/aes-neonbs-cbc - Select generic cbc and aes watch_queue: Free the page array when watch_queue is dismantled pinctrl: pinconf-generic: Print arguments for bias-pull-* watchdog: rti-wdt: Add missing pm_runtime_disable() in probe function net: sparx5: uses, depends on BRIDGE or !BRIDGE pinctrl: nuvoton: npcm7xx: Rename DS() macro to DSTR() pinctrl: nuvoton: npcm7xx: Use %zu printk format for ARRAY_SIZE() ASoC: mediatek: mt6358: add missing EXPORT_SYMBOLs ubi: Fix race condition between ctrl_cdev_ioctl and ubi_cdev_ioctl ARM: iop32x: offset IRQ numbers by 1 block: Fix the maximum minor value is blk_alloc_ext_minor() io_uring: fix memory leak of uid in files registration riscv module: remove (NOLOAD) ACPI: CPPC: Avoid out of bounds access when parsing _CPC data vhost: handle error while adding split ranges to iotlb spi: Fix Tegra QSPI example platform/chrome: cros_ec_typec: Check for EC device can: isotp: restore accidentally removed MSG_PEEK feature proc: bootconfig: Add null pointer check drm/connector: Fix typo in documentation scsi: qla2xxx: Add qla2x00_async_done() for async routines staging: mt7621-dts: fix pinctrl-0 items to be size-1 items on ethernet arm64: mm: Drop 'const' from conditional arm64_dma_phys_limit definition ASoC: soc-compress: Change the check for codec_dai Reinstate some of "swiotlb: rework "fix info leak with DMA_FROM_DEVICE"" tracing: Have type enum modifications copy the strings net: add skb_set_end_offset() helper net: preserve skb_end_offset() in skb_unclone_keeptruesize() mm/mmap: return 1 from stack_guard_gap __setup() handler ARM: 9187/1: JIVE: fix return value of __setup handler mm/memcontrol: return 1 from cgroup.memory __setup() handler mm/usercopy: return 1 from hardened_usercopy __setup() handler af_unix: Support POLLPRI for OOB. bpf: Adjust BPF stack helper functions to accommodate skip > 0 bpf: Fix comment for helper bpf_current_task_under_cgroup() mmc: rtsx: Use pm_runtime_{get,put}() to handle runtime PM dt-bindings: mtd: nand-controller: Fix the reg property description dt-bindings: mtd: nand-controller: Fix a comment in the examples dt-bindings: spi: mxic: The interrupt property is not mandatory dt-bindings: memory: mtk-smi: No need mediatek,larb-id for mt8167 dt-bindings: pinctrl: pinctrl-microchip-sgpio: Fix example ubi: fastmap: Return error code if memory allocation fails in add_aeb() ASoC: SOF: Intel: Fix build error without SND_SOC_SOF_PCI_DEV ASoC: topology: Allow TLV control to be either read or write perf vendor events: Update metrics for SkyLake Server media: ov6650: Add try support to selection API operations media: ov6650: Fix crop rectangle affected by set format spi: mediatek: support tick_delay without enhance_timing ARM: dts: spear1340: Update serial node properties ARM: dts: spear13xx: Update SPI dma properties arm64: dts: ls1043a: Update i2c dma properties arm64: dts: ls1046a: Update i2c node dma properties um: Fix uml_mconsole stop/go docs: sysctl/kernel: add missing bit to panic_print openvswitch: Fixed nd target mask field in the flow dump. torture: Make torture.sh help message match reality n64cart: convert bi_disk to bi_bdev->bd_disk fix build mmc: rtsx: Let MMC core handle runtime PM mmc: rtsx: Fix build errors/warnings for unused variable KVM: x86/mmu: do compare-and-exchange of gPTE via the user address iommu/dma: Skip extra sync during unmap w/swiotlb iommu/dma: Fold _swiotlb helpers into callers iommu/dma: Check CONFIG_SWIOTLB more broadly swiotlb: Support aligned swiotlb buffers iommu/dma: Account for min_align_mask w/swiotlb coredump: Snapshot the vmas in do_coredump coredump: Remove the WARN_ON in dump_vma_snapshot coredump/elf: Pass coredump_params into fill_note_info coredump: Use the vma snapshot in fill_files_note PCI: xgene: Revert "PCI: xgene: Use inbound resources for setup" Linux 5.15.33 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: Id62bd8a22d0bfa7c2096539d253ffce804bed017	2022-04-20 08:18:54 +02:00
Kumar Kartikeya Dwivedi	51b82141ff	bpf: Fix UAF due to race between btf_try_get_module and load_module ... [ Upstream commit 18688de203b47e5d8d9d0953385bf30b5949324f ] While working on code to populate kfunc BTF ID sets for module BTF from its initcall, I noticed that by the time the initcall is invoked, the module BTF can already be seen by userspace (and the BPF verifier). The existing btf_try_get_module calls try_module_get which only fails if mod->state == MODULE_STATE_GOING, i.e. it can increment module reference when module initcall is happening in parallel. Currently, BTF parsing happens from MODULE_STATE_COMING notifier callback. At this point, the module initcalls have not been invoked. The notifier callback parses and prepares the module BTF, allocates an ID, which publishes it to userspace, and then adds it to the btf_modules list allowing the kernel to invoke btf_try_get_module for the BTF. However, at this point, the module has not been fully initialized (i.e. its initcalls have not finished). The code in module.c can still fail and free the module, without caring for other users. However, nothing stops btf_try_get_module from succeeding between the state transition from MODULE_STATE_COMING to MODULE_STATE_LIVE. This leads to a use-after-free issue when BPF program loads successfully in the state transition, load_module's do_init_module call fails and frees the module, and BPF program fd on close calls module_put for the freed module. Future patch has test case to verify we don't regress in this area in future. There are multiple points after prepare_coming_module (in load_module) where failure can occur and module loading can return error. We illustrate and test for the race using the last point where it can practically occur (in module __init function). An illustration of the race: CPU 0 CPU 1 load_module notifier_call(MODULE_STATE_COMING) btf_parse_module btf_alloc_id // Published to userspace list_add(&btf_mod->list, btf_modules) mod->init(...) ... ^ bpf_check | check_pseudo_btf_id | btf_try_get_module | returns true | ... ... | module __init in progress return prog_fd | ... ... V if (ret < 0) free_module(mod) ... close(prog_fd) ... bpf_prog_free_deferred module_put(used_btf.mod) // use-after-free We fix this issue by setting a flag BTF_MODULE_F_LIVE, from the notifier callback when MODULE_STATE_LIVE state is reached for the module, so that we return NULL from btf_try_get_module for modules that are not fully formed. Since try_module_get already checks that module is not in MODULE_STATE_GOING state, and that is the only transition a live module can make before being removed from btf_modules list, this is enough to close the race and prevent the bug. A later selftest patch crafts the race condition artifically to verify that it has been fixed, and that verifier fails to load program (with ENXIO). Lastly, a couple of comments: 1. Even if this race didn't exist, it seems more appropriate to only access resources (ksyms and kfuncs) of a fully formed module which has been initialized completely. 2. This patch was born out of need for synchronization against module initcall for the next patch, so it is needed for correctness even without the aforementioned race condition. The BTF resources initialized by module initcall are set up once and then only looked up, so just waiting until the initcall has finished ensures correct behavior. Fixes: 541c3bad8d ("bpf: Support BPF ksym variables in kernel modules") Signed-off-by: Kumar Kartikeya Dwivedi <memxor@gmail.com> Link: https://lore.kernel.org/r/20220114163953.1455836-2-memxor@gmail.com Signed-off-by: Alexei Starovoitov <ast@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-04-08 14:23:24 +02:00
Connor O'Brien	b25a6a78d4	FROMGIT: bpf: Add config to allow loading modules with BTF mismatches ... BTF mismatch can occur for a separately-built module even when the ABI is otherwise compatible and nothing else would prevent successfully loading. Add a new Kconfig to control how mismatches are handled. By default, preserve the current behavior of refusing to load the module. If MODULE_ALLOW_BTF_MISMATCH is enabled, load the module but ignore its BTF information. Suggested-by: Yonghong Song <yhs@fb.com> Suggested-by: Michal Suchánek <msuchanek@suse.de> Signed-off-by: Connor O'Brien <connoro@google.com> Signed-off-by: Daniel Borkmann <daniel@iogearbox.net> Acked-by: Shung-Hsi Yu <shung-hsi.yu@suse.com> Acked-by: Song Liu <songliubraving@fb.com> Link: https://lore.kernel.org/bpf/CAADnVQJ+OVPnBz8z3vNu8gKXX42jCUqfuvhWAyCQDu8N_yqqwQ@mail.gmail.com Link: https: //lore.kernel.org/bpf/20220223012814.1898677-1-connoro@google.com (cherry picked from commit 5e214f2e43e453d862ebbbd2a4f7ee3fe650f209 git://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-next.git master) Bug: 218515241 Signed-off-by: Connor O'Brien <connoro@google.com> Change-Id: Idabf7f5e38cb58da55faeaafae56dee7262a6886	2022-03-01 21:39:55 +00:00
Hou Tao	832d478ccd	bpf: Disallow BPF_LOG_KERNEL log level for bpf(BPF_BTF_LOAD) ... [ Upstream commit 866de407444398bc8140ea70de1dba5f91cc34ac ] BPF_LOG_KERNEL is only used internally, so disallow bpf_btf_load() to set log level as BPF_LOG_KERNEL. The same checking has already been done in bpf_check(), so factor out a helper to check the validity of log attributes and use it in both places. Fixes: 8580ac9404 ("bpf: Process in-kernel BTF") Signed-off-by: Hou Tao <houtao1@huawei.com> Signed-off-by: Alexei Starovoitov <ast@kernel.org> Acked-by: Yonghong Song <yhs@fb.com> Acked-by: Martin KaFai Lau <kafai@fb.com> Link: https://lore.kernel.org/bpf/20211203053001.740945-1-houtao1@huawei.com Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-01-27 11:03:27 +01:00
Alexei Starovoitov	2571173d3e	bpf: Adjust BTF log size limit. ... [ Upstream commit c5a2d43e998a821701029f23e25b62f9188e93ff ] Make BTF log size limit to be the same as the verifier log size limit. Otherwise tools that progressively increase log size and use the same log for BTF loading and program loading will be hitting hard to debug EINVAL. Signed-off-by: Alexei Starovoitov <ast@kernel.org> Signed-off-by: Andrii Nakryiko <andrii@kernel.org> Link: https://lore.kernel.org/bpf/20211201181040.23337-7-alexei.starovoitov@gmail.com Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-01-27 11:03:27 +01:00
Daniel Xu	eb529c5b10	bpf: Fix bpf-next builds without CONFIG_BPF_EVENTS ... This commit fixes linker errors along the lines of: s390-linux-ld: task_iter.c:(.init.text+0xa4): undefined reference to `btf_task_struct_ids'` Fix by defining btf_task_struct_ids unconditionally in kernel/bpf/btf.c since there exists code that unconditionally uses btf_task_struct_ids. Reported-by: kernel test robot <lkp@intel.com> Signed-off-by: Daniel Xu <dxu@dxuuu.xyz> Signed-off-by: Alexei Starovoitov <ast@kernel.org> Link: https://lore.kernel.org/bpf/05d94748d9f4b3eecedc4fddd6875418a396e23c.1629942444.git.dxu@dxuuu.xyz	2021-08-25 19:41:39 -07:00
Yonghong Song	d36216429f	bpf: Emit better log message if bpf_iter ctx arg btf_id == 0 ... To avoid kernel build failure due to some missing .BTF-ids referenced functions/types, the patch ([1]) tries to fill btf_id 0 for these types. In bpf verifier, for percpu variable and helper returning btf_id cases, verifier already emitted proper warning with something like verbose(env, "Helper has invalid btf_id in R%d\n", regno); verbose(env, "invalid return type %d of func %s#%d\n", fn->ret_type, func_id_name(func_id), func_id); But this is not the case for bpf_iter context arguments. I hacked resolve_btfids to encode btf_id 0 for struct task_struct. With `./test_progs -n 7/5`, I got, 0: (79) r2 = *(u64 *)(r1 +0) func 'bpf_iter_task' arg0 has btf_id 29739 type STRUCT 'bpf_iter_meta' ; struct seq_file *seq = ctx->meta->seq; 1: (79) r6 = *(u64 *)(r2 +0) ; struct task_struct *task = ctx->task; 2: (79) r7 = *(u64 *)(r1 +8) ; if (task == (void *)0) { 3: (55) if r7 != 0x0 goto pc+11 ... ; BPF_SEQ_PRINTF(seq, "%8d %8d\n", task->tgid, task->pid); 26: (61) r1 = *(u32 *)(r7 +1372) Type '(anon)' is not a struct Basically, verifier will return btf_id 0 for task_struct. Later on, when the code tries to access task->tgid, the verifier correctly complains the type is '(anon)' and it is not a struct. Users still need to backtrace to find out what is going on. Let us catch the invalid btf_id 0 earlier and provide better message indicating btf_id is wrong. The new error message looks like below: R1 type=ctx expected=fp ; struct seq_file *seq = ctx->meta->seq; 0: (79) r2 = *(u64 *)(r1 +0) func 'bpf_iter_task' arg0 has btf_id 29739 type STRUCT 'bpf_iter_meta' ; struct seq_file *seq = ctx->meta->seq; 1: (79) r6 = *(u64 *)(r2 +0) ; struct task_struct *task = ctx->task; 2: (79) r7 = *(u64 *)(r1 +8) invalid btf_id for context argument offset 8 invalid bpf_context access off=8 size=8 [1] https://lore.kernel.org/bpf/20210727132532.2473636-1-hengqi.chen@gmail.com/ Signed-off-by: Yonghong Song <yhs@fb.com> Signed-off-by: Andrii Nakryiko <andrii@kernel.org> Link: https://lore.kernel.org/bpf/20210728183025.1461750-1-yhs@fb.com	2021-07-29 15:10:11 -07:00
Alexei Starovoitov	68134668c1	bpf: Add map side support for bpf timers. ... Restrict bpf timers to array, hash (both preallocated and kmalloced), and lru map types. The per-cpu maps with timers don't make sense, since 'struct bpf_timer' is a part of map value. bpf timers in per-cpu maps would mean that the number of timers depends on number of possible cpus and timers would not be accessible from all cpus. lpm map support can be added in the future. The timers in inner maps are supported. The bpf_map_update/delete_elem() helpers and sys_bpf commands cancel and free bpf_timer in a given map element. Similar to 'struct bpf_spin_lock' BTF is required and it is used to validate that map element indeed contains 'struct bpf_timer'. Make check_and_init_map_value() init both bpf_spin_lock and bpf_timer when map element data is reused in preallocated htab and lru maps. Teach copy_map_value() to support both bpf_spin_lock and bpf_timer in a single map element. There could be one of each, but not more than one. Due to 'one bpf_timer in one element' restriction do not support timers in global data, since global data is a map of single element, but from bpf program side it's seen as many global variables and restriction of single global timer would be odd. The sys_bpf map_freeze and sys_mmap syscalls are not allowed on maps with timers, since user space could have corrupted mmap element and crashed the kernel. The maps with timers cannot be readonly. Due to these restrictions search for bpf_timer in datasec BTF in case it was placed in the global data to report clear error. The previous patch allowed 'struct bpf_timer' as a first field in a map element only. Relax this restriction. Refactor lru map to s/bpf_lru_push_free/htab_lru_push_free/ to cancel and free the timer when lru map deletes an element as a part of it eviction algorithm. Make sure that bpf program cannot access 'struct bpf_timer' via direct load/store. The timer operation are done through helpers only. This is similar to 'struct bpf_spin_lock'. Signed-off-by: Alexei Starovoitov <ast@kernel.org> Signed-off-by: Daniel Borkmann <daniel@iogearbox.net> Acked-by: Yonghong Song <yhs@fb.com> Acked-by: Martin KaFai Lau <kafai@fb.com> Acked-by: Andrii Nakryiko <andrii@kernel.org> Acked-by: Toke Høiland-Jørgensen <toke@redhat.com> Link: https://lore.kernel.org/bpf/20210715005417.78572-5-alexei.starovoitov@gmail.com	2021-07-15 22:31:10 +02:00
David S. Miller	a52171ae7b	Merge git://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-next ... Daniel Borkmann says: ==================== pull-request: bpf-next 2021-06-17 The following pull-request contains BPF updates for your *net-next* tree. We've added 50 non-merge commits during the last 25 day(s) which contain a total of 148 files changed, 4779 insertions(+), 1248 deletions(-). The main changes are: 1) BPF infrastructure to migrate TCP child sockets from a listener to another in the same reuseport group/map, from Kuniyuki Iwashima. 2) Add a provably sound, faster and more precise algorithm for tnum_mul() as noted in https://arxiv.org/abs/2105.05398, from Harishankar Vishwanathan. 3) Streamline error reporting changes in libbpf as planned out in the 'libbpf: the road to v1.0' effort, from Andrii Nakryiko. 4) Add broadcast support to xdp_redirect_map(), from Hangbin Liu. 5) Extends bpf_map_lookup_and_delete_elem() functionality to 4 more map types, that is, {LRU_,PERCPU_,LRU_PERCPU_,}HASH, from Denis Salopek. 6) Support new LLVM relocations in libbpf to make them more linker friendly, also add a doc to describe the BPF backend relocations, from Yonghong Song. 7) Silence long standing KUBSAN complaints on register-based shifts in interpreter, from Daniel Borkmann and Eric Biggers. 8) Add dummy PT_REGS macros in libbpf to fail BPF program compilation when target arch cannot be determined, from Lorenz Bauer. 9) Extend AF_XDP to support large umems with 1M+ pages, from Magnus Karlsson. 10) Fix two minor libbpf tc BPF API issues, from Kumar Kartikeya Dwivedi. 11) Move libbpf BPF_SEQ_PRINTF/BPF_SNPRINTF macros that can be used by BPF programs to bpf_helpers.h header, from Florent Revest. ==================== Signed-off-by: David S. Miller <davem@davemloft.net>	2021-06-17 11:54:56 -07:00
Jakub Kicinski	5ada57a9a6	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net ... cdc-wdm: s/kill_urbs/poison_urbs/ to fix build Signed-off-by: Jakub Kicinski <kuba@kernel.org>	2021-05-27 09:55:10 -07:00
Zhen Lei	8fb33b6055	bpf: Fix spelling mistakes ... Fix some spelling mistakes in comments: aother ==> another Netiher ==> Neither desribe ==> describe intializing ==> initializing funciton ==> function wont ==> won't and move the word 'the' at the end to the next line accross ==> across pathes ==> paths triggerred ==> triggered excute ==> execute ether ==> either conervative ==> conservative convetion ==> convention markes ==> marks interpeter ==> interpreter Signed-off-by: Zhen Lei <thunder.leizhen@huawei.com> Signed-off-by: Andrii Nakryiko <andrii@kernel.org> Link: https://lore.kernel.org/bpf/20210525025659.8898-2-thunder.leizhen@huawei.com	2021-05-24 21:13:05 -07:00
Alexei Starovoitov	3d78417b60	bpf: Add bpf_btf_find_by_name_kind() helper. ... Add new helper: long bpf_btf_find_by_name_kind(char *name, int name_sz, u32 kind, int flags) Description Find BTF type with given name and kind in vmlinux BTF or in module's BTFs. Return Returns btf_id and btf_obj_fd in lower and upper 32 bits. It will be used by loader program to find btf_id to attach the program to and to find btf_ids of ksyms. Signed-off-by: Alexei Starovoitov <ast@kernel.org> Signed-off-by: Daniel Borkmann <daniel@iogearbox.net> Acked-by: Andrii Nakryiko <andrii@kernel.org> Link: https://lore.kernel.org/bpf/20210514003623.28033-10-alexei.starovoitov@gmail.com	2021-05-19 00:33:40 +02:00
Alexei Starovoitov	c571bd752e	bpf: Make btf_load command to be bpfptr_t compatible. ... Similar to prog_load make btf_load command to be availble to bpf_prog_type_syscall program. Signed-off-by: Alexei Starovoitov <ast@kernel.org> Signed-off-by: Daniel Borkmann <daniel@iogearbox.net> Acked-by: Andrii Nakryiko <andrii@kernel.org> Link: https://lore.kernel.org/bpf/20210514003623.28033-7-alexei.starovoitov@gmail.com	2021-05-19 00:33:40 +02:00
Jiri Olsa	31379397dc	bpf: Forbid trampoline attach for functions with variable arguments ... We can't currently allow to attach functions with variable arguments. The problem is that we should save all the registers for arguments, which is probably doable, but if caller uses more than 6 arguments, we need stack data, which will be wrong, because of the extra stack frame we do in bpf trampoline, so we could crash. Also currently there's malformed trampoline code generated for such functions at the moment as described in: https://lore.kernel.org/bpf/20210429212834.82621-1-jolsa@kernel.org/ Signed-off-by: Jiri Olsa <jolsa@kernel.org> Signed-off-by: Daniel Borkmann <daniel@iogearbox.net> Acked-by: Andrii Nakryiko <andrii@kernel.org> Link: https://lore.kernel.org/bpf/20210505132529.401047-1-jolsa@kernel.org	2021-05-07 01:28:28 +02:00
Colin Ian King	235fc0e36d	bpf: Remove redundant assignment of variable id ... The variable id is being assigned a value that is never read, the assignment is redundant and can be removed. Addresses-Coverity: ("Unused value") Signed-off-by: Colin Ian King <colin.king@canonical.com> Signed-off-by: Daniel Borkmann <daniel@iogearbox.net> Acked-by: Song Liu <songliubraving@fb.com> Link: https://lore.kernel.org/bpf/20210326194348.623782-1-colin.king@canonical.com	2021-03-30 22:58:53 +02:00
Martin KaFai Lau	e6ac2450d6	bpf: Support bpf program calling kernel function ... This patch adds support to BPF verifier to allow bpf program calling kernel function directly. The use case included in this set is to allow bpf-tcp-cc to directly call some tcp-cc helper functions (e.g. "tcp_cong_avoid_ai()"). Those functions have already been used by some kernel tcp-cc implementations. This set will also allow the bpf-tcp-cc program to directly call the kernel tcp-cc implementation, For example, a bpf_dctcp may only want to implement its own dctcp_cwnd_event() and reuse other dctcp_*() directly from the kernel tcp_dctcp.c instead of reimplementing (or copy-and-pasting) them. The tcp-cc kernel functions mentioned above will be white listed for the struct_ops bpf-tcp-cc programs to use in a later patch. The white listed functions are not bounded to a fixed ABI contract. Those functions have already been used by the existing kernel tcp-cc. If any of them has changed, both in-tree and out-of-tree kernel tcp-cc implementations have to be changed. The same goes for the struct_ops bpf-tcp-cc programs which have to be adjusted accordingly. This patch is to make the required changes in the bpf verifier. First change is in btf.c, it adds a case in "btf_check_func_arg_match()". When the passed in "btf->kernel_btf == true", it means matching the verifier regs' states with a kernel function. This will handle the PTR_TO_BTF_ID reg. It also maps PTR_TO_SOCK_COMMON, PTR_TO_SOCKET, and PTR_TO_TCP_SOCK to its kernel's btf_id. In the later libbpf patch, the insn calling a kernel function will look like: insn->code == (BPF_JMP | BPF_CALL) insn->src_reg == BPF_PSEUDO_KFUNC_CALL /* <- new in this patch */ insn->imm == func_btf_id /* btf_id of the running kernel */ [ For the future calling function-in-kernel-module support, an array of module btf_fds can be passed at the load time and insn->off can be used to index into this array. ] At the early stage of verifier, the verifier will collect all kernel function calls into "struct bpf_kfunc_desc". Those descriptors are stored in "prog->aux->kfunc_tab" and will be available to the JIT. Since this "add" operation is similar to the current "add_subprog()" and looking for the same insn->code, they are done together in the new "add_subprog_and_kfunc()". In the "do_check()" stage, the new "check_kfunc_call()" is added to verify the kernel function call instruction: 1. Ensure the kernel function can be used by a particular BPF_PROG_TYPE. A new bpf_verifier_ops "check_kfunc_call" is added to do that. The bpf-tcp-cc struct_ops program will implement this function in a later patch. 2. Call "btf_check_kfunc_args_match()" to ensure the regs can be used as the args of a kernel function. 3. Mark the regs' type, subreg_def, and zext_dst. At the later do_misc_fixups() stage, the new fixup_kfunc_call() will replace the insn->imm with the function address (relative to __bpf_call_base). If needed, the jit can find the btf_func_model by calling the new bpf_jit_find_kfunc_model(prog, insn). With the imm set to the function address, "bpftool prog dump xlated" will be able to display the kernel function calls the same way as it displays other bpf helper calls. gpl_compatible program is required to call kernel function. This feature currently requires JIT. The verifier selftests are adjusted because of the changes in the verbose log in add_subprog_and_kfunc(). Signed-off-by: Martin KaFai Lau <kafai@fb.com> Signed-off-by: Alexei Starovoitov <ast@kernel.org> Link: https://lore.kernel.org/bpf/20210325015142.1544736-1-kafai@fb.com	2021-03-26 20:41:51 -07:00
Martin KaFai Lau	34747c4120	bpf: Refactor btf_check_func_arg_match ... This patch moved the subprog specific logic from btf_check_func_arg_match() to the new btf_check_subprog_arg_match(). The core logic is left in btf_check_func_arg_match() which will be reused later to check the kernel function call. The "if (!btf_type_is_ptr(t))" is checked first to improve the indentation which will be useful for a later patch. Some of the "btf_kind_str[]" usages is replaced with the shortcut "btf_type_str(t)". Signed-off-by: Martin KaFai Lau <kafai@fb.com> Signed-off-by: Alexei Starovoitov <ast@kernel.org> Link: https://lore.kernel.org/bpf/20210325015136.1544504-1-kafai@fb.com	2021-03-26 20:41:50 -07:00
David S. Miller	c1acda9807	Merge git://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-next ... Alexei Starovoitov says: ==================== pull-request: bpf-next 2021-03-09 The following pull-request contains BPF updates for your *net-next* tree. We've added 90 non-merge commits during the last 17 day(s) which contain a total of 114 files changed, 5158 insertions(+), 1288 deletions(-). The main changes are: 1) Faster bpf_redirect_map(), from Björn. 2) skmsg cleanup, from Cong. 3) Support for floating point types in BTF, from Ilya. 4) Documentation for sys_bpf commands, from Joe. 5) Support for sk_lookup in bpf_prog_test_run, form Lorenz. 6) Enable task local storage for tracing programs, from Song. 7) bpf_for_each_map_elem() helper, from Yonghong. ==================== Signed-off-by: David S. Miller <davem@davemloft.net>	2021-03-09 18:07:05 -08:00
Ilya Leoshkevich	b1828f0b04	bpf: Add BTF_KIND_FLOAT support ... On the kernel side, introduce a new btf_kind_operations. It is similar to that of BTF_KIND_INT, however, it does not need to handle encodings and bit offsets. Do not implement printing, since the kernel does not know how to format floating-point values. Signed-off-by: Ilya Leoshkevich <iii@linux.ibm.com> Signed-off-by: Alexei Starovoitov <ast@kernel.org> Acked-by: Yonghong Song <yhs@fb.com> Link: https://lore.kernel.org/bpf/20210226202256.116518-7-iii@linux.ibm.com	2021-03-04 17:58:16 -08:00
Dmitrii Banshchikov	523a4cf491	bpf: Use MAX_BPF_FUNC_REG_ARGS macro ... Instead of using integer literal here and there use macro name for better context. Signed-off-by: Dmitrii Banshchikov <me@ubique.spb.ru> Signed-off-by: Alexei Starovoitov <ast@kernel.org> Acked-by: Martin KaFai Lau <kafai@fb.com> Link: https://lore.kernel.org/bpf/20210225202629.585485-1-me@ubique.spb.ru	2021-02-26 11:59:53 -08:00
Dmitrii Banshchikov	f4eda8b6e4	bpf: Drop imprecise log message ... Now it is possible for global function to have a pointer argument that points to something different than struct. Drop the irrelevant log message and keep the logic same. Fixes: e5069b9c23 ("bpf: Support pointers in global func args") Signed-off-by: Dmitrii Banshchikov <me@ubique.spb.ru> Signed-off-by: Daniel Borkmann <daniel@iogearbox.net> Acked-by: Martin KaFai Lau <kafai@fb.com> Link: https://lore.kernel.org/bpf/20210223090416.333943-1-me@ubique.spb.ru	2021-02-24 16:43:39 +01:00
Dmitrii Banshchikov	e5069b9c23	bpf: Support pointers in global func args ... Add an ability to pass a pointer to a type with known size in arguments of a global function. Such pointers may be used to overcome the limit on the maximum number of arguments, avoid expensive and tricky workarounds and to have multiple output arguments. A referenced type may contain pointers but indirect access through them isn't supported. The implementation consists of two parts. If a global function has an argument that is a pointer to a type with known size then: 1) In btf_check_func_arg_match(): check that the corresponding register points to NULL or to a valid memory region that is large enough to contain the expected argument's type. 2) In btf_prepare_func_args(): set the corresponding register type to PTR_TO_MEM_OR_NULL and its size to the size of the expected type. Only global functions are supported because allowance of pointers for static functions might break validation. Consider the following scenario. A static function has a pointer argument. A caller passes pointer to its stack memory. Because the callee can change referenced memory verifier cannot longer assume any particular slot type of the caller's stack memory hence the slot type is changed to SLOT_MISC. If there is an operation that relies on slot type other than SLOT_MISC then verifier won't be able to infer safety of the operation. When verifier sees a static function that has a pointer argument different from PTR_TO_CTX then it skips arguments check and continues with "inline" validation with more information available. The operation that relies on the particular slot type now succeeds. Because global functions were not allowed to have pointer arguments different from PTR_TO_CTX it's not possible to break existing and valid code. Signed-off-by: Dmitrii Banshchikov <me@ubique.spb.ru> Signed-off-by: Alexei Starovoitov <ast@kernel.org> Acked-by: Andrii Nakryiko <andrii@kernel.org> Link: https://lore.kernel.org/bpf/20210212205642.620788-4-me@ubique.spb.ru	2021-02-12 17:37:23 -08:00
Dmitrii Banshchikov	feb4adfad5	bpf: Rename bpf_reg_state variables ... Using "reg" for an array of bpf_reg_state and "reg[i + 1]" for an individual bpf_reg_state is error-prone and verbose. Use "regs" for the former and "reg" for the latter as other code nearby does. Signed-off-by: Dmitrii Banshchikov <me@ubique.spb.ru> Signed-off-by: Alexei Starovoitov <ast@kernel.org> Acked-by: Andrii Nakryiko <andrii@kernel.org> Link: https://lore.kernel.org/bpf/20210212205642.620788-2-me@ubique.spb.ru	2021-02-12 17:37:23 -08:00
Yonghong Song	13ca51d5eb	bpf: Permit size-0 datasec ... llvm patch https://reviews.llvm.org/D84002 permitted to emit empty rodata datasec if the elf .rodata section contains read-only data from local variables. These local variables will be not emitted as BTF_KIND_VARs since llvm converted these local variables as static variables with private linkage without debuginfo types. Such an empty rodata datasec will make skeleton code generation easy since for skeleton a rodata struct will be generated if there is a .rodata elf section. The existence of a rodata btf datasec is also consistent with the existence of a rodata map created by libbpf. The btf with such an empty rodata datasec will fail in the kernel though as kernel will reject a datasec with zero vlen and zero size. For example, for the below code, int sys_enter(void *ctx) { int fmt[6] = {1, 2, 3, 4, 5, 6}; int dst[6]; bpf_probe_read(dst, sizeof(dst), fmt); return 0; } We got the below btf (bpftool btf dump ./test.o): [1] PTR '(anon)' type_id=0 [2] FUNC_PROTO '(anon)' ret_type_id=3 vlen=1 'ctx' type_id=1 [3] INT 'int' size=4 bits_offset=0 nr_bits=32 encoding=SIGNED [4] FUNC 'sys_enter' type_id=2 linkage=global [5] INT 'char' size=1 bits_offset=0 nr_bits=8 encoding=SIGNED [6] ARRAY '(anon)' type_id=5 index_type_id=7 nr_elems=4 [7] INT '__ARRAY_SIZE_TYPE__' size=4 bits_offset=0 nr_bits=32 encoding=(none) [8] VAR '_license' type_id=6, linkage=global-alloc [9] DATASEC '.rodata' size=0 vlen=0 [10] DATASEC 'license' size=0 vlen=1 type_id=8 offset=0 size=4 When loading the ./test.o to the kernel with bpftool, we see the following error: libbpf: Error loading BTF: Invalid argument(22) libbpf: magic: 0xeb9f ... [6] ARRAY (anon) type_id=5 index_type_id=7 nr_elems=4 [7] INT __ARRAY_SIZE_TYPE__ size=4 bits_offset=0 nr_bits=32 encoding=(none) [8] VAR _license type_id=6 linkage=1 [9] DATASEC .rodata size=24 vlen=0 vlen == 0 libbpf: Error loading .BTF into kernel: -22. BTF is optional, ignoring. Basically, libbpf changed .rodata datasec size to 24 since elf .rodata section size is 24. The kernel then rejected the BTF since vlen = 0. Note that the above kernel verifier failure can be worked around with changing local variable "fmt" to a static or global, optionally const, variable. This patch permits a datasec with vlen = 0 in kernel. Signed-off-by: Yonghong Song <yhs@fb.com> Signed-off-by: Alexei Starovoitov <ast@kernel.org> Link: https://lore.kernel.org/bpf/20210119153519.3901963-1-yhs@fb.com	2021-01-20 14:14:09 -08:00
Jakub Kicinski	0fe2f273ab	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net ... Conflicts: drivers/net/can/dev.c commit 03f16c5075 ("can: dev: can_restart: fix use after free bug") commit 3e77f70e73 ("can: dev: move driver related infrastructure into separate subdir") Code move. drivers/net/dsa/b53/b53_common.c commit 8e4052c32d ("net: dsa: b53: fix an off by one in checking "vlan->vid"") commit b7a9e0da2d ("net: switchdev: remove vid_begin -> vid_end range from VLAN objects") Field rename. Signed-off-by: Jakub Kicinski <kuba@kernel.org>	2021-01-20 12:16:11 -08:00
Andrii Nakryiko	541c3bad8d	bpf: Support BPF ksym variables in kernel modules ... Add support for directly accessing kernel module variables from BPF programs using special ldimm64 instructions. This functionality builds upon vmlinux ksym support, but extends ldimm64 with src_reg=BPF_PSEUDO_BTF_ID to allow specifying kernel module BTF's FD in insn[1].imm field. During BPF program load time, verifier will resolve FD to BTF object and will take reference on BTF object itself and, for module BTFs, corresponding module as well, to make sure it won't be unloaded from under running BPF program. The mechanism used is similar to how bpf_prog keeps track of used bpf_maps. One interesting change is also in how per-CPU variable is determined. The logic is to find .data..percpu data section in provided BTF, but both vmlinux and module each have their own .data..percpu entries in BTF. So for module's case, the search for DATASEC record needs to look at only module's added BTF types. This is implemented with custom search function. Signed-off-by: Andrii Nakryiko <andrii@kernel.org> Signed-off-by: Alexei Starovoitov <ast@kernel.org> Acked-by: Yonghong Song <yhs@fb.com> Acked-by: Hao Luo <haoluo@google.com> Link: https://lore.kernel.org/bpf/20210112075520.4103414-6-andrii@kernel.org	2021-01-12 17:24:30 -08:00
Andrii Nakryiko	bcc5e6162d	bpf: Allow empty module BTFs ... Some modules don't declare any new types and end up with an empty BTF, containing only valid BTF header and no types or strings sections. This currently causes BTF validation error. There is nothing wrong with such BTF, so fix the issue by allowing module BTFs with no types or strings. Fixes: 36e68442d1 ("bpf: Load and verify kernel module BTFs") Reported-by: Christopher William Snowhill <chris@kode54.net> Signed-off-by: Andrii Nakryiko <andrii@kernel.org> Signed-off-by: Daniel Borkmann <daniel@iogearbox.net> Acked-by: Yonghong Song <yhs@fb.com> Link: https://lore.kernel.org/bpf/20210110070341.1380086-1-andrii@kernel.org	2021-01-12 21:11:30 +01:00
Andrii Nakryiko	290248a5b7	bpf: Allow to specify kernel module BTFs when attaching BPF programs ... Add ability for user-space programs to specify non-vmlinux BTF when attaching BTF-powered BPF programs: raw_tp, fentry/fexit/fmod_ret, LSM, etc. For this, attach_prog_fd (now with the alias name attach_btf_obj_fd) should specify FD of a module or vmlinux BTF object. For backwards compatibility reasons, 0 denotes vmlinux BTF. Only kernel BTF (vmlinux or module) can be specified. Signed-off-by: Andrii Nakryiko <andrii@kernel.org> Signed-off-by: Alexei Starovoitov <ast@kernel.org> Link: https://lore.kernel.org/bpf/20201203204634.1325171-11-andrii@kernel.org	2020-12-03 17:38:21 -08:00