linux

mirror of https://github.com/torvalds/linux.git synced 2026-06-10 23:53:52 +02:00

Author	SHA1	Message	Date
Tao Huang	24cbee6672	Merge tag 'ASB-2022-04-05_12-5.10' of https://android.googlesource.com/kernel/common https://source.android.com/security/bulletin/2022-04-01 CVE-2021-0707 CVE-2021-39800 CVE-2021-39801 (4.9 only) CVE-2021-39802 * tag 'ASB-2022-04-05_12-5.10': (3832 commits) ANDROID: GKI: Update symbols to abi_gki_aarch64_oplus ANDROID: vendor_hooks: Reduce pointless modversions CRC churn UPSTREAM: locking/lockdep: Avoid potential access of invalid memory in lock_class ANDROID: mm: Fix implicit declaration of function 'isolate_lru_page' ANDROID: GKI: Update symbols to symbol list ANDROID: GKI: Update symbols to symbol list ANDROID: GKI: Add hook symbol to symbol list Revert "ANDROID: dm-bow: Protect Ranges fetched and erased from the RB tree" ANDROID: vendor_hooks: Add hooks to for free_unref_page_commit ANDROID: vendor_hooks: Add hooks to for alloc_contig_range ANDROID: GKI: Update symbols to symbol list ANDROID: vendor_hooks: Add hook in shrink_node_memcgs ANDROID: GKI: Add symbols to symbol list FROMGIT: iommu/iova: Improve 32-bit free space estimate ANDROID: export walk_page_range and swp_swap_info ANDROID: vendor_hooks: export shrink_slab ANDROID: usb: gadget: f_accessory: add compat_ioctl support UPSTREAM: sr9700: sanity check for packet length UPSTREAM: io_uring: return back safer resurrect UPSTREAM: Revert "xfrm: state and policy should fail if XFRMA_IF_ID 0" ... Change-Id: Ic61ead530b99b10ffd535a358a48fe9bb8c33fd4 Conflicts: drivers/android/Kconfig drivers/gpu/drm/rockchip/dw-mipi-dsi-rockchip.c drivers/gpu/drm/rockchip/rockchip_vop_reg.c drivers/i2c/busses/i2c-rk3x.c drivers/media/i2c/imx258.c drivers/net/ethernet/stmicro/stmmac/dwmac-rk.c drivers/usb/dwc2/gadget.c drivers/usb/gadget/function/uvc.h lib/Kconfig.debug	2022-07-15 17:40:39 +08:00
Greg Kroah-Hartman	1419b69403	Merge tag 'android12-5.10.101_r00' into android12-5.10 This is the merge of the upstream LTS release of 5.10.101 into the android12-5.10 branch. This merge contains the following new commits: `c194212a03` Merge 5.10.101 into android12-5.10-lts `3969aba589` Linux 5.10.101 `cb86e511e7` iommu: Fix potential use-after-free during probe `f6b5d51976` perf: Fix list corruption in perf_cgroup_switch() `ce3ca12c63` arm64: dts: imx8mq: fix lcdif port node `759aeacdfe` scsi: lpfc: Reduce log messages seen after firmware download `57c5d7d420` scsi: lpfc: Remove NVMe support if kernel has NVME_FC disabled `199dab00f0` can: isotp: fix error path in isotp_sendmsg() to unlock wait queue `3b10ebeb95` Makefile.extrawarn: Move -Wunaligned-access to W=1 `ad53060bdf` hwmon: (dell-smm) Speed up setting of fan speed `3c75d1017c` phy: ti: Fix missing sentinel for clk_div_table `6eabe53492` speakup-dectlk: Restore pitch setting `3836a5ff4b` USB: serial: cp210x: add CPI Bulk Coin Recycler id `51b03a9bcd` USB: serial: cp210x: add NCR Retail IO box id `a21e6b2e08` USB: serial: ch341: add support for GW Instek USB2.0-Serial devices `7113440a36` USB: serial: option: add ZTE MF286D modem `b7ed2f9619` USB: serial: ftdi_sio: add support for Brainboxes US-159/235/320 `e07dde31ac` usb: raw-gadget: fix handling of dual-direction-capable endpoints `e9f9b877eb` usb: gadget: f_uac2: Define specific wTerminalType `fb4ff0f96d` usb: gadget: rndis: check size of RNDIS_MSG_SET command `22ec100472` USB: gadget: validate interface OS descriptor requests `351159167c` usb: gadget: udc: renesas_usb3: Fix host to USB_ROLE_NONE transition `3bfca38914` usb: dwc3: gadget: Prevent core from processing stale TRBs `2a17bd9f52` usb: ulpi: Call of_node_put correctly `8b89a69166` usb: ulpi: Move of_node_put to ulpi_dev_release `758290defe` net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup `a66a2b17b8` Revert "usb: dwc2: drd: fix soft connect when gadget is unconfigured" `73961057e9` usb: dwc2: drd: fix soft connect when gadget is unconfigured `a37960df7e` eeprom: ee1004: limit i2c reads to I2C_SMBUS_BLOCK_MAX `1b99fe34e2` n_tty: wake up poll(POLLRDNORM) on receiving data `f1b2573715` vt_ioctl: add array_index_nospec to VT_ACTIVATE `778302ca09` vt_ioctl: fix array_index_nospec in vt_setactivate `22249886dc` net: dsa: mv88e6xxx: fix use-after-free in mv88e6xxx_mdios_unregister `3a3c65c487` net: mscc: ocelot: fix mutex lock error during ethtool stats read `809f030745` ice: fix IPIP and SIT TSO offload `cf11949b91` ice: fix an error code in ice_cfg_phy_fec() `f8edc6feab` dpaa2-eth: unregister the netdev before disconnecting from the PHY `ff6c9e0fce` net: amd-xgbe: disable interrupts during pci removal `657aea7828` tipc: rate limit warning for received illegal binding update `ef5cdae8bc` net: mdio: aspeed: Add missing MODULE_DEVICE_TABLE `bf99c14436` veth: fix races around rq->rx_notify_masked `00e6d6c3bc` net: fix a memleak when uncloning an skb dst and its metadata `2e9fd2d0f6` net: do not keep the dst cache when uncloning an skb dst and its metadata `0bae953d7a` nfp: flower: fix ida_idx not being released `09ac0fcb0a` ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path `e177d2e85e` net: dsa: lantiq_gswip: don't use devres for mdiobus `95e5402f94` net: dsa: felix: don't use devres for mdiobus `2770b79529` net: dsa: bcm_sf2: don't use devres for mdiobus `475ce5dcf2` net: dsa: ar9331: register the mdiobus under devres `8ccebe77df` net: dsa: mv88e6xxx: don't use devres for mdiobus `4a384c1e40` bonding: pair enable_port with slave_arr_updates `1ba45dd326` gpio: sifive: use the correct register to read output values `48e413087d` ACPI: PM: s2idle: Cancel wakeup before dispatching EC GPE `3b72d3f020` drm/panel: simple: Assign data from panel_dpi_probe() correctly `bf35639192` ixgbevf: Require large buffers for build_skb on 82599VF `e5a64f548a` arm64: dts: meson-g12b-odroid-n2: fix typo 'dio2133' `04fe6569a7` netfilter: ctnetlink: disable helper autoassign `a5ce7ee5fc` misc: fastrpc: avoid double fput() on failed usercopy `21c890ca8e` drm/vc4: hdmi: Allow DBLCLK modes even if horz timing is odd. `70ea005626` gpio: aggregator: Fix calling into sleeping GPIO controllers `0042178a69` usb: f_fs: Fix use-after-free for epfile `5a37fd9fdc` ARM: dts: imx7ulp: Fix 'assigned-clocks-parents' typo `39bf132a6e` phy: xilinx: zynqmp: Fix bus width setting for SGMII `108868dae2` ARM: dts: imx6qdl-udoo: Properly describe the SD card detect `0a7b5e8d8c` staging: fbtft: Fix error path in fbtft_driver_module_init() `74cd5cb219` ARM: dts: meson8b: Fix the UART device-tree schema validation `566b558e94` ARM: dts: meson8: Fix the UART device-tree schema validation `210d70f081` ARM: dts: meson: Fix the UART compatible strings `88f0e61354` ARM: dts: Fix timer regression for beagleboard revision c `c943a297ec` drm/rockchip: vop: Correct RK3399 VOP register fields `a941384fba` PM: s2idle: ACPI: Fix wakeup interrupts handling `fcbac51a64` ACPI/IORT: Check node revision for PMCG resources `57ede0ce65` nvme-tcp: fix bogus request completion when failing to send AER `3a669d77e5` ARM: socfpga: fix missing RESET_CONTROLLER `435e62d566` ARM: dts: Fix boot regression on Skomer `b217b89e60` ARM: dts: imx23-evk: Remove MX23_PAD_SSP1_DETECT from hog group `3f9843f2f6` riscv: fix build with binutils 2.38 `3aa5c86572` KVM: VMX: Set vmcs.PENDING_DBG.BS on #DB in STI/MOVSS blocking shadow `bd39fe29bb` KVM: SVM: Don't kill SEV guest if SMAP erratum triggers in usermode `9efad4cb03` KVM: nVMX: Also filter MSR_IA32_VMX_TRUE_PINBASED_CTLS when eVMCS `db58a3d978` KVM: nVMX: eVMCS: Filter out VM_EXIT_SAVE_VMX_PREEMPTION_TIMER `dc129275a7` KVM: eventfd: Fix false positive RCU usage warning `87bbd78a2c` net: stmmac: dwmac-sun8i: use return val of readl_poll_timeout() `c9b8cc1046` nvme-pci: add the IGNORE_DEV_SUBNQN quirk for Intel P4500/P4600 SSDs `d0774cf730` perf: Always wake the parent event `a117e986e9` usb: dwc2: gadget: don't try to disable ep0 in dwc2_hsotg_suspend `4607218fde` PM: hibernate: Remove register_nosave_region_late() `0e42c4a3d7` scsi: myrs: Fix crash in error case `3bc5b128b9` scsi: ufs: Treat link loss as fatal error `12cf120803` scsi: pm8001: Fix bogus FW crash for maxcpus=1 `87f187e526` scsi: qedf: Fix refcount issue when LOGO is received during TMF `aa7352aa15` scsi: qedf: Add stag_work to all the vports `150d448c66` scsi: ufs: ufshcd-pltfrm: Check the return value of devm_kstrdup() `7dbda616fc` scsi: target: iscsi: Make sure the np under each tpg is unique `67baac10dd` powerpc/fixmap: Fix VM debug warning on unmap `3d0eafd459` net: sched: Clarify error message when qdisc kind is unknown `9b569faabd` drm: panel-orientation-quirks: Add quirk for the 1Netbook OneXPlayer `0d6b9d15ec` x86/perf: Avoid warning for Arch LBR without XSAVE `b37dd03f2f` NFSv4 handle port presence in fs_location server string `6f2974b52b` NFSv4 expose nfs_parse_server_name function `5a9c613a29` NFSv4 remove zero number of fs_locations entries error check `1c79aad118` NFSv4.1: Fix uninitialised variable in devicenotify `c5619c510f` nfs: nfs4clinet: check the return value of kstrdup() `db053bdece` NFSv4 only print the label when its queried `e2b4435fd3` NFS: change nfs_access_get_cached to only report the mask `b4e0c9bcf1` tracing: Propagate is_signed to expression `5234de6c79` drm/amdgpu: Set a suitable dev_info.gart_page_size `6215fb4558` NFSD: Fix offset type in I/O trace points `3a6a2d43e3` NFSD: Clamp WRITE offsets `c72f7c2ec3` NFS: Fix initialisation of nfs_client cl_flags field `f47ee3a35f` net: phy: marvell: Fix MDI-x polarity setting in 88e1118-compatible PHYs `6a33aa7113` net: phy: marvell: Fix RGMII Tx/Rx delays setting in 88e1121-compatible PHYs `7b53d2204c` can: isotp: fix potential CAN frame reception race in isotp_rcv() `c9cc027c55` mmc: sdhci-of-esdhc: Check for error num after setting mask `8027ba480c` ima: Do not print policy rule with inactive LSM labels `8171c8a99f` ima: Allow template selection with ima_template[_fmt]= after ima_hash= `0795b7100d` ima: Remove ima_policy file before directory `7fea2e5200` integrity: check the return value of audit_log_start() `86e6176a42` Merge 5.10.100 into android12-5.10-lts `d4f7d322a4` Linux 5.10.100 `3c7e594355` tipc: improve size validations for received domain records `2951d21689` crypto: api - Move cryptomgr soft dependency into algapi `b62267b8b0` KVM: s390: Return error on SIDA memop on normal guest `be93028d30` moxart: fix potential use-after-free on remove path `ca562bf79c` Merge branch 'android12-5.10' into `android12-5.10-lts` `c3b53fcd90` Merge 5.10.99 into android12-5.10-lts `fb063a6465` Linux 5.10.99 `4889d6ee9e` selftests: nft_concat_range: add test for reload with no element add/del `5577273135` cgroup/cpuset: Fix "suspicious RCU usage" lockdep warning `f1f7d1a22f` net: dsa: mt7530: make NET_DSA_MT7530 select MEDIATEK_GE_PHY `84b76a509c` ext4: fix incorrect type issue during replay_del_range `62e46e0ffc` ext4: fix error handling in ext4_fc_record_modified_inode() `764793b4a5` ext4: fix error handling in ext4_restore_inline_data() `6c5bd55e36` ext4: modify the logic of ext4_mb_new_blocks_simple `8d71fc23fc` ext4: prevent used blocks from being allocated during fast commit replay `ef2053afd7` EDAC/xgene: Fix deferred probing `2a12faf55b` EDAC/altera: Fix deferred probing `dd274cf852` x86/perf: Default set FREEZE_ON_SMI for all `456f041e03` perf/x86/intel/pt: Fix crash with stop filters in single-range mode `8c0e6a8a63` perf stat: Fix display of grouped aliased events `57e8859acc` fbcon: Add option to enable legacy hardware acceleration `460f6b1a23` Revert "fbcon: Disable accelerated scrolling" `460aa9d873` rtc: cmos: Evaluate century appropriate `2324f5fcdf` tools/resolve_btfids: Do not print any commands when building silently `1536fafa23` selftests: futex: Use variable MAKE instead of make `8f0fff8b59` selftests/exec: Remove pipe from TEST_GEN_FILES `6304a613a9` bpf: Use VM_MAP instead of VM_ALLOC for ringbuf `f744a06404` gve: fix the wrong AdminQ buffer queue index check `51e88e8922` nfsd: nfsd4_setclientid_confirm mistakenly expires confirmed client. `ec4334152d` scsi: bnx2fc: Make bnx2fc_recv_frame() mp safe `fd482f2d63` pinctrl: bcm2835: Fix a few error paths `752d9eafc6` pinctrl: intel: fix unexpected interrupt `14bc9978b4` pinctrl: intel: Fix a glitch when updating IRQ flags on a preconfigured line `5a45448ac9` ASoC: max9759: fix underflow in speaker_gain_control_put() `02f4597198` ASoC: cpcap: Check for NULL pointer after calling of_get_child_by_name `cb5f1fbd1f` ASoC: xilinx: xlnx_formatter_pcm: Make buffer bytes multiple of period bytes `56e0747d59` ASoC: fsl: Add missing error handling in pcm030_fabric_probe `3e69837551` drm/i915/overlay: Prevent divide by zero bugs in scaling `9ea0185361` net: stmmac: ensure PTP time register reads are consistent `41df2da2c1` net: stmmac: dump gmac4 DMA registers correctly `114bf93504` net: macsec: Verify that send_sci is on when setting Tx sci explicitly `2e7f5b6ee1` net: macsec: Fix offload support for NETDEV_UNREGISTER event `87b1c9fab6` net: ieee802154: Return meaningful error codes from the netlink helpers `78b3f20c17` net: ieee802154: ca8210: Stop leaking skb's `0bfe50dc5d` net: ieee802154: mcr20a: Fix lifs/sifs periods `75bbda3189` net: ieee802154: hwsim: Ensure proper channel selection at probe time `e895e067d7` spi: uniphier: fix reference count leak in uniphier_spi_probe() `ec942d08e0` spi: meson-spicc: add IRQ check in meson_spicc_probe `c2cf65e100` spi: mediatek: Avoid NULL pointer crash in interrupt `30e05c98b9` spi: bcm-qspi: check for valid cs before applying chip select `6d226e8afe` iommu/amd: Fix loop timeout issue in iommu_ga_log_enable() `9d9995b037` iommu/vt-d: Fix potential memory leak in intel_setup_irq_remapping() `b3958d3151` RDMA/mlx4: Don't continue event handler after memory allocation failure `d3f8b927df` RDMA/siw: Fix broken RDMA Read Fence/Resume logic. `c7db20f5be` IB/rdmavt: Validate remote_addr during loopback atomic tests `75c610212b` RDMA/ucma: Protect mc during concurrent multicast leaves `371979069a` RDMA/cma: Use correct address when leaving multicast group `aa4ecd995f` memcg: charge fs_context and legacy_fs_context `080f371d98` Revert "ASoC: mediatek: Check for error clk pointer" `4a9bd1e678` IB/hfi1: Fix AIP early init panic `5d40f1bdad` dma-buf: heaps: Fix potential spectre v1 gadget `30de3bc099` block: bio-integrity: Advance seed correctly for larger interval sizes `352715593e` mm/kmemleak: avoid scanning potential huge holes `7053188ddb` mm/pgtable: define pte_index so that preprocessor could recognize it `bce7f5d74d` mm/debug_vm_pgtable: remove pte entry from the page table `2d83a7463d` nvme-fabrics: fix state check in nvmf_ctlr_matches_baseopts() `a0c73dbdd1` drm/amd/display: Force link_rate as LINK_RATE_RBR2 for 2018 15" Apple Retina panels `f071d9fa85` drm/nouveau: fix off by one in BIOS boundary checking `32747e0143` btrfs: fix deadlock between quota disable and qgroup rescan worker `aa5d406153` ALSA: hda/realtek: Fix silent output on Gigabyte X570 Aorus Xtreme after reboot from Windows `d4aa3a9859` ALSA: hda/realtek: Fix silent output on Gigabyte X570S Aorus Master (newer chipset) `3a8a8072e3` ALSA: hda/realtek: Add missing fixup-model entry for Gigabyte X570 ALC1220 quirks `532cde962f` ALSA: hda/realtek: Add quirk for ASUS GU603 `410f231fd7` ALSA: hda: realtek: Fix race at concurrent COEF updates `a7de100213` ALSA: hda: Fix UAF of leds class devs at unbinding `470bbb9cbd` ALSA: usb-audio: Correct quirk for VF0770 `6877f87579` ASoC: ops: Reject out of bounds values in snd_soc_put_xr_sx() `038f8b7caa` ASoC: ops: Reject out of bounds values in snd_soc_put_volsw_sx() `a9394f21fb` ASoC: ops: Reject out of bounds values in snd_soc_put_volsw() `0ff6b80506` audit: improve audit queue handling when "audit=1" on cmdline `f446089a26` selinux: fix double free of cond_list on error paths `08942dae64` Merge 5.10.98 into android-5.10 `26d02dc8ef` Merge 5.10.97 into android12-5.10-lts `e33a5b611c` Revert "perf: Fix perf_event_read_local() time" `0b4470b56e` Merge 5.10.96 into android12-5.10-lts `12a0a56cba` Linux 5.10.98 `97a47e2555` Revert "drm/vc4: hdmi: Make sure the device is powered with CEC" again `e27042060f` Revert "drm/vc4: hdmi: Make sure the device is powered with CEC" `c8ed22bd97` Linux 5.10.97 `176356550c` tcp: add missing tcp_skb_can_collapse() test in tcp_shift_skb_data() `32e1799710` af_packet: fix data-race in packet_setsockopt / packet_setsockopt `aa9e96db31` cpuset: Fix the bug that subpart_cpus updated wrongly in update_cpumask() `3bbe2019dd` rtnetlink: make sure to refresh master_dev/m_ops in __rtnl_newlink() `e7be569263` net: sched: fix use-after-free in tc_new_tfilter() `7b4741644c` fanotify: Fix stale file descriptor in copy_event_to_user() `4d3fcfe846` net: amd-xgbe: Fix skb data length underflow `cadfa7dce5` net: amd-xgbe: ensure to reset the tx_timer_active flag `77534b114f` ipheth: fix EOVERFLOW in ipheth_rcvbulk_callback `b4ced7a46d` net/mlx5: E-Switch, Fix uninitialized variable modact `502c37b033` net/mlx5: Use del_timer_sync in fw reset flow of halting poll `a01ee1b816` net/mlx5e: Fix handling of wrong devices during bond netevent `1fc3444cda` cgroup-v1: Require capabilities to set release_agent `ac4ba79bb0` drm/vc4: hdmi: Make sure the device is powered with CEC `46f919c6bd` x86/cpu: Add Xeon Icelake-D to list of CPUs that support PPIN `fbdbf6743f` x86/mce: Add Xeon Sapphire Rapids to list of CPUs that support PPIN `d4e4e61d4a` psi: Fix uaf issue when psi trigger is destroyed while being polled `080dbe7e9b` KVM: x86: Forcibly leave nested virt when SMM state is toggled `063029a882` Revert "drivers: bus: simple-pm-bus: Add support for probing simple bus only devices" `42fdbf8b7d` net: ipa: prevent concurrent replenish `ad81380d3a` net: ipa: use a bitmap for endpoint replenish_enabled `2ed912e3e0` net: ipa: fix atomic update in ipa_endpoint_replenish() `3b4c966fb1` PCI: pciehp: Fix infinite loop in IRQ handler upon power fault `a9839858b5` Merge 5.10.95 into android12-5.10-lts `f255ac9e87` Linux 5.10.96 `b43e9d2f6f` mtd: rawnand: mpc5121: Remove unused variable in ads5121_select_chip() `b63e120189` block: Fix wrong offset in bio_truncate() `0b4e82403c` fsnotify: invalidate dcache before IN_DELETE event `8bae6db29c` usr/include/Makefile: add linux/nfc.h to the compile-test coverage `f36554de78` dt-bindings: can: tcan4x5x: fix mram-cfg RX FIFO config `446ff1fc37` net: bridge: vlan: fix memory leak in __allowed_ingress `bc58a5bb9e` ipv4: remove sparse error in ip_neigh_gw4() `ebc5b8e471` ipv4: tcp: send zero IPID in SYNACK messages `58f72918f9` ipv4: raw: lock the socket in raw_bind() `9ffc94a81b` net: bridge: vlan: fix single net device option dumping `869f1704f1` Revert "ipv6: Honor all IPv6 PIO Valid Lifetime values" `699eef4ed9` net: hns3: handle empty unknown interrupt for VF `c9c81b393c` net: cpsw: Properly initialise struct page_pool_params `729e54636b` yam: fix a memory leak in yam_siocdevprivate() `93a6e920d8` drm/msm/dpu: invalid parameter check in dpu_setup_dspp_pcc `0b7d8db87d` drm/msm/hdmi: Fix missing put_device() call in msm_hdmi_get_phy `d1d4616d3e` video: hyperv_fb: Fix validation of screen resolution `0a60d04abc` ibmvnic: don't spin in tasklet `55258b5059` ibmvnic: init ->running_cap_crqs early `b469cf91fb` ipv4: fix ip option filtering for locally generated fragments `9b44441972` net: ipv4: Fix the warning for dereference `2f56c4845d` net: ipv4: Move ip_options_fragment() out of loop `55402a4618` powerpc/perf: Fix power_pmu_disable to call clear_pmi_irq_pending only if PMI is pending `0bdbf93ee2` hwmon: (lm90) Mark alert as broken for MAX6654 `c534287a57` efi/libstub: arm64: Fix image check alignment at entry `3572205b19` rxrpc: Adjust retransmission backoff `5067f5699d` octeontx2-pf: Forward error codes to VF `bd024e36f6` phylib: fix potential use-after-free `a839a79f4d` net: phy: broadcom: hook up soft_reset for BCM54616S `57b2f3632b` sched/pelt: Relax the sync of util_sum with util_avg `91b04e83c7` perf: Fix perf_event_read_local() time `cffed7e631` kernel: delete repeated words in comments `1af995c98b` netfilter: conntrack: don't increment invalid counter on NF_REPEAT `129c71829d` powerpc64/bpf: Limit 'ldbrx' to processors compliant with ISA v2.06 `7a32824f7a` NFS: Ensure the server has an up to date ctime before renaming `666f6ab882` NFS: Ensure the server has an up to date ctime before hardlinking `4cd0ef6215` ipv6: annotate accesses to fn->fn_sernum `79c0b5287d` drm/msm/dsi: invalid parameter check in msm_dsi_phy_enable `3ab44a408b` drm/msm/dsi: Fix missing put_device() call in dsi_get_phy `82c310d04b` drm/msm: Fix wrong size calculation `f57a99c9a5` net-procfs: show net devices bound packet types `87880e3803` NFSv4: nfs_atomic_open() can race when looking up a non-regular file `ce8c552b88` NFSv4: Handle case where the lookup of a directory fails `b48a05cee2` hwmon: (lm90) Reduce maximum conversion rate for G781 `b26fed25e6` ipv4: avoid using shared IP generator for connected sockets `283aa5a5af` ping: fix the sk_bound_dev_if match in ping_lookup `7bcb0c19ab` hwmon: (lm90) Mark alert as broken for MAX6680 `925cbd596a` hwmon: (lm90) Mark alert as broken for MAX6646/6647/6649 `db044d9746` net: fix information leakage in /proc/net/ptype `feb770cc00` ipv6_tunnel: Rate limit warning messages `00849de10f` scsi: bnx2fc: Flush destroy_work queue before calling bnx2fc_interface_put() `fcaf94c49a` rpmsg: char: Fix race between the release of rpmsg_eptdev and cdev `1dbb206730` rpmsg: char: Fix race between the release of rpmsg_ctrldev and cdev `20f6675821` usb: roles: fix include/linux/usb/role.h compile issue `6aeff8a7c7` i40e: fix unsigned stat widths `d2ed5997a9` i40e: Fix for failed to init adminq while VF reset `768eb705e6` i40e: Fix queues reservation for XDP `39896710f7` i40e: Fix issue when maximum queues is exceeded `9068bcb219` i40e: Increase delay to 1 s after global EMP reset `b4c9b6afa3` powerpc/32: Fix boot failure with GCC latent entropy plugin `50f5d0a8bd` powerpc/32s: Fix kasan_init_region() for KASAN `5d3af1dfdf` powerpc/32s: Allocate one 256k IBAT instead of two consecutives 128k IBATs `08f090bb9b` x86/MCE/AMD: Allow thresholding interface updates after init `791e5d5daa` sched/membarrier: Fix membarrier-rseq fence command missing from query bitmask `afbde455eb` ocfs2: fix a deadlock when commit trans `97f75e7d4c` jbd2: export jbd2_journal_[grab\|put]_journal_head `3921d081c9` ucsi_ccg: Check DEV_INT bit only when starting CCG4 `598a884c77` usb: typec: tcpm: Do not disconnect while receiving VBUS off `e3b131e30e` USB: core: Fix hang in usb_kill_urb by adding memory barriers `3ca928c824` usb: gadget: f_sourcesink: Fix isoc transfer for USB_SPEED_SUPER_PLUS `053274bc6b` usb: common: ulpi: Fix crash in ulpi_match() `20c51a4c52` usb: xhci-plat: fix crash when suspend if remote wake enable `38d1bf67a3` usb-storage: Add unusual-devs entry for VL817 USB-SATA bridge `e0fcae7bd7` tty: Add support for Brainboxes UC cards. `7079283d32` tty: n_gsm: fix SW flow control encoding/handling `2683b0d5d7` serial: stm32: fix software flow control transfer `4628b26df5` serial: 8250: of: Fix mapped region size when using reg-offset property `94b23988c3` netfilter: nft_payload: do not update layer 4 checksum when mangling fragments `bf0d4ae5c6` arm64: errata: Fix exec handling in erratum `1418040` workaround `e92cac1dd8` KVM: x86: Update vCPU's runtime CPUID on write to MSR_IA32_XSS `6b55af102b` drm/etnaviv: relax submit size limits `7a32d17fb7` perf/x86/intel/uncore: Fix CAS_COUNT_WRITE issue for ICX `a2c8e1d9e4` Revert "KVM: SVM: avoid infinite loop on NPF from bad address" `abae88fb37` fsnotify: fix fsnotify hooks in pseudo filesystems `6ceac38e9b` ceph: set pool_ns in new inode layout for async creates `e7be12ca7d` ceph: properly put ceph_string reference after async create attempt `39986696fe` tracing: Don't inc err_log entry count if entry allocation fails `d71b06aa99` tracing/histogram: Fix a potential memory leak for kstrdup() `561a22d44a` PM: wakeup: simplify the output logic of pm_show_wakelocks() `b0f1cc093b` efi: runtime: avoid EFIv2 runtime services on Apple x86 machines `de7cc8bcca` udf: Fix NULL ptr deref when converting from inline format `0a3cfd2589` udf: Restore i_lenAlloc when inode expansion fails `f08801252d` scsi: zfcp: Fix failed recovery on gone remote port with non-NPIV FCP devices `ff6bdc205f` bpf: Guard against accessing NULL pt_regs in bpf_get_task_stack() `6520fedfce` s390/hypfs: include z/VM guests with access control group set `c10e0627c7` s390/module: fix loading modules with a lot of relocations `ba7c71a777` net: stmmac: skip only stmmac_ptp_register when resume from suspend `11191406f2` net: sfp: ignore disabled SFP node `e651772adc` media: venus: core: Drop second v4l2 device unregister `83d5196b65` Bluetooth: refactor malicious adv data check `34fd8cb7e7` ANDROID: Fix CRC issue up with xfrm headers in 5.10.94 `a50b069165` Revert "xfrm: rate limit SA mapping change message to user space" `67ea95e0e8` Revert "clocksource: Reduce clocksource-skew threshold" `fae0741a78` Revert "clocksource: Avoid accidental unstable marking of clocksources" `77656fde3c` Linux 5.10.95 `ae2b20f277` drm/vmwgfx: Fix stale file descriptors on failed usercopy `11ba2c6dfb` select: Fix indefinitely sleeping task in poll_schedule_timeout() `a447d7f786` KVM: x86/mmu: Fix write-protection of PTs mapped by the TDP MMU `12d3389b7a` rcu: Tighten rcu_advance_cbs_nowake() checks `4d63363c88` bnx2x: Invalidate fastpath HSI version for VFs `fdcfabd095` bnx2x: Utilize firmware 7.13.21.0 `6a6acf9278` drm/i915: Flush TLBs before releasing backing store `4ec3c2eea5` Merge 5.10.94 into android12-5.10-lts `c525532e4f` Linux 5.10.94 `c76c132444` scripts: sphinx-pre-install: Fix ctex support on Debian `133cef0b61` scripts: sphinx-pre-install: add required ctex dependency `15ce9329a5` ath10k: Fix the MTU size on QCA9377 SDIO `25b1a6d330` mtd: nand: bbt: Fix corner case in bad block table handling `8104e589fa` lib/test_meminit: destroy cache in kmem_cache_alloc_bulk() test `6292503700` mm/hmm.c: allow VM_MIXEDMAP to work with hmm_range_fault `33bb7f027b` lib82596: Fix IRQ check in sni_82596_probe `078b5a4498` scripts/dtc: dtx_diff: remove broken example from help text `21513c4615` dt-bindings: watchdog: Require samsung,syscon-phandle for Exynos7 `23bcf3615b` dt-bindings: display: meson-vpu: Add missing amlogic,canvas property `66467cc87a` dt-bindings: display: meson-dw-hdmi: add missing sound-name-prefix property `4496e4a427` net: mscc: ocelot: fix using match before it is set `ee64479c9c` net: sfp: fix high power modules without diagnostic monitoring `819e76bc57` net: ethernet: mtk_eth_soc: fix error checking in mtk_mac_config() `4691c9f047` bcmgenet: add WOL IRQ check `6973b38b9d` net_sched: restore "mpu xxx" handling `20949c3816` net: bonding: fix bond_xmit_broadcast return value error bug `799730d182` arm64: dts: qcom: msm8996: drop not documented adreno properties `f6d4c0e017` devlink: Remove misleading internal_flags from health reporter dump `2e51a761b7` perf probe: Fix ppc64 'perf probe add events failed' case `59b44f7760` dmaengine: at_xdmac: Fix at_xdmac_lld struct definition `0078f05371` dmaengine: at_xdmac: Fix lld view setting `7ab120636d` dmaengine: at_xdmac: Fix concurrency over xfers_list `b5b27c5e33` dmaengine: at_xdmac: Print debug message after realeasing the lock `c536b351a7` dmaengine: at_xdmac: Start transfer for cyclic channels in issue_pending `cd22e22e8e` dmaengine: at_xdmac: Don't start transactions at tx_submit level `68a83051c8` perf script: Fix hex dump character output `7b9d40e9f6` libcxgb: Don't accidentally set RTO_ONLINK in cxgb_find_route() `cd5c24d223` gre: Don't accidentally set RTO_ONLINK in gre_fill_metadata_dst() `7f2ca96bd2` xfrm: Don't accidentally set RTO_ONLINK in decode_session4() `2b1415c60b` netns: add schedule point in ops_exit_list() `edc09548ff` inet: frags: annotate races around fqdir->dead and fqdir->high_thresh `69e7e979ed` taskstats: Cleanup the use of task->exit_code `56daa21414` virtio_ring: mark ring unused on error `0c4ebcb00d` vdpa/mlx5: Fix wrong configuration of virtio_version_1_0 `c736ec01a2` rtc: pxa: fix null pointer dereference `8b8ff4c793` HID: vivaldi: fix handling devices not using numbered reports `d7544cf693` net: axienet: increase default TX ring size to 128 `557829d42d` net: axienet: fix for TX busy handling `41831d4967` net: axienet: fix number of TX ring slots for available check `6301f3566a` net: axienet: Fix TX ring slot available check `7a3d3d7f6d` net: axienet: limit minimum TX ring size `2f548489d6` net: axienet: add missing memory barriers `bcc5d57e60` net: axienet: reset core on initialization prior to MDIO access `46c0ccaff2` net: axienet: Wait for PhyRstCmplt after core reset `34942a228a` net: axienet: increase reset timeout `a66b9bccf7` net/smc: Fix hung_task when removing SMC-R devices `51b52cf354` clk: si5341: Fix clock HW provider cleanup `fe40f7aef3` clk: Emit a stern warning with writable debugfs enabled `38221afa03` af_unix: annote lockless accesses to unix_tot_inflight & gc_in_progress `a49e402f23` f2fs: fix to reserve space for IO align feature `39ad058117` f2fs: compress: fix potential deadlock of compress file `e1840365ed` parisc: pdc_stable: Fix memory leak in pdcs_register_pathentries `d806eb5f4e` net/fsl: xgmac_mdio: Fix incorrect iounmap when removing module `38c798384b` net/fsl: xgmac_mdio: Add workaround for erratum A-009885 `734f4b0f83` ipv4: avoid quadratic behavior in netns dismantle `86f0587f74` ipv4: update fib_info_cnt under spinlock protection `10e99ae9b5` perf evsel: Override attr->sample_period for non-libpfm4 events `58fa3e9002` xdp: check prog type before updating BPF link `38ee417f59` bpftool: Remove inclusion of utilities.mak from Makefiles `2bcab471a2` block: Fix fsync always failed if once failed `5e59f88535` powerpc/fsl/dts: Enable WA for erratum A-009885 on fman3l MDIO buses `19aaef6519` powerpc/cell: Fix clang -Wimplicit-fallthrough warning `4cb7aba1e0` Revert "net/mlx5: Add retry mechanism to the command entry index allocation" `78cf5f63a3` dmaengine: stm32-mdma: fix STM32_MDMA_CTBR_TSEL_MASK `16ad0aa917` RDMA/rxe: Fix a typo in opcode name `885860717c` RDMA/hns: Modify the mapping attribute of doorbell to device `57cd8597c3` dmaengine: uniphier-xdmac: Fix type of address variables `4fe77b7cd2` scsi: core: Show SCMD_LAST in text form `b30240911d` Bluetooth: hci_sync: Fix not setting adv set duration `55698d11c8` Documentation: fix firewire.rst ABI file path error `5d38cbf66d` Documentation: refer to config RANDOMIZE_BASE for kernel address-space randomization `abecf9d748` Documentation: ACPI: Fix data node reference documentation `d1e85fcd73` Documentation: dmaengine: Correctly describe dmatest with channel unset `f6736bd81d` media: correct MEDIA_TEST_SUPPORT help text `55b10b88ac` drm/vc4: hdmi: Make sure the device is powered with CEC `81ac08a800` media: rcar-csi2: Optimize the selection PHTW register `0baa3729d2` can: mcp251xfd: mcp251xfd_tef_obj_read(): fix typo in error message `f62bf6ee4f` firmware: Update Kconfig help text for Google firmware `12224c0d19` of: base: Improve argument length mismatch error `7bb99c7e13` drm/radeon: fix error handling in radeon_driver_open_kms `0ca7ec6db2` ext4: don't use the orphan list when migrating an inode `679fb06532` ext4: fix null-ptr-deref in '__ext4_journal_ensure_credits' `d60e9daba2` ext4: destroy ext4_fc_dentry_cachep kmemcache on module removal `f26b24b4c1` ext4: fast commit may miss tracking unwritten range during ftruncate `04b5627306` ext4: use ext4_ext_remove_space() for fast commit replay delete range `53998b3f6d` ext4: Fix BUG_ON in ext4_bread when write quota data `da364ab358` ext4: set csum seed in tmp inode while migrating to extents `e4221629d5` ext4: fix fast commit may miss tracking range for FALLOC_FL_ZERO_RANGE `720508dd11` ext4: initialize err_blk before calling __ext4_get_inode_loc `f9ed0ea0a9` ext4: fix a possible ABBA deadlock due to busy PA `115b762b48` ext4: make sure quota gets properly shutdown on error `762e4c33e9` ext4: make sure to reset inode lockdep class when quota enabling fails `f8c3ec2e21` btrfs: respect the max size in the header when activating swap file `e7764bccae` btrfs: check the root node for uptodate before returning it `09e0ef287e` btrfs: fix deadlock between quota enable and other quota operations `56f974d583` xfrm: fix policy lookup for ipv6 gre packets `84166c1177` PCI: pci-bridge-emul: Set PCI_STATUS_CAP_LIST for PCIe device `7aeeb9fe9c` PCI: pci-bridge-emul: Correctly set PCIe capabilities `af1d0acdac` PCI: pci-bridge-emul: Fix definitions of reserved bits `0f2ae6691e` PCI: pci-bridge-emul: Properly mark reserved PCIe bits in PCI config space `2a0d437d8a` PCI: pci-bridge-emul: Make expansion ROM Base Address register read-only `def2825b09` PCI: pciehp: Use down_read/write_nested(reset_lock) to fix lockdep errors `6cbe8f8deb` PCI: xgene: Fix IB window setup `e09f47e77b` powerpc/64s/radix: Fix huge vmap false positive `eb44b1386a` parisc: Fix lpa and lpa_user defines `9b78ee2341` drm/bridge: analogix_dp: Make PSR-exit block less `8cbbf4a6f1` drm/nouveau/kms/nv04: use vzalloc for nv04_display `605583fccc` drm/etnaviv: limit submit sizes `6c1e3d8b1b` device property: Fix fwnode_graph_devcon_match() fwnode leak `ecb71f7bd5` s390/mm: fix 2KB pgtable release race `798754ba48` iwlwifi: mvm: Increase the scan timeout guard to 30 seconds `c524f4cfb3` tracing/kprobes: 'nmissed' not showed correctly for kretprobe `b72075e395` cputime, cpuacct: Include guest time in user time in cpuacct.stat `13518f058f` serial: Fix incorrect rs485 polarity on uart open `9668cf9e4a` fuse: Pass correct lend value to filemap_write_and_wait_range() `9fbaddd783` xen/gntdev: fix unmap notification order `67b078d996` spi: uniphier: Fix a bug that doesn't point to private data correctly `05026c4e94` tpm: fix NPE on probe for missing device `76006d33f1` ubifs: Error path in ubifs_remount_rw() seems to wrongly free write buffers `4f0762ac32` crypto: caam - replace this_cpu_ptr with raw_cpu_ptr `9e6ff2d572` crypto: stm32/crc32 - Fix kernel BUG triggered in probe() `2031e0246e` crypto: omap-aes - Fix broken pm_runtime_and_get() usage `43e94431c3` rpmsg: core: Clean up resources on announce_create failure. `082ff9e12b` phy: mediatek: Fix missing check in mtk_mipi_tx_probe `ff08cf1e34` ASoC: mediatek: mt8183: fix device_node leak `f28672eef4` ASoC: mediatek: mt8173: fix device_node leak `0df5104008` scsi: sr: Don't use GFP_DMA `de9a936b04` MIPS: Octeon: Fix build errors using clang `da7df943e2` i2c: designware-pci: Fix to change data types of hcnt and lcnt parameters `f09f7ccb28` irqchip/gic-v4: Disable redistributors' view of the VPE table at boot time `bc2d961d82` MIPS: OCTEON: add put_device() after of_find_device_by_node() `ce34b03a71` udf: Fix error handling in udf_new_inode() `15be042e7f` powerpc/fadump: Fix inaccurate CPU state info in vmcore generated with panic `f2e658d9bd` powerpc: handle kdump appropriately with crash_kexec_post_notifiers option `044164b419` selftests/powerpc/spectre_v2: Return skip code when miss_percent is high `21125e0116` powerpc/40x: Map 32Mbytes of memory at startup `c330442f46` MIPS: Loongson64: Use three arguments for slti `af8d077350` ALSA: seq: Set upper limit of processed events `297210783a` scsi: lpfc: Trigger SLI4 firmware dump before doing driver cleanup `dfde7afed7` dm: fix alloc_dax error handling in alloc_dev `2e2086f49e` nvmem: core: set size for sysfs bin file `4a273a94bd` w1: Misuse of get_user()/put_user() reported by sparse `87e91d6c6a` KVM: PPC: Book3S: Suppress failed alloc warning in H_COPY_TOFROM_GUEST `23bb3f01ce` KVM: PPC: Book3S: Suppress warnings when allocating too big memory slots `03c1595a18` powerpc/powermac: Add missing lockdep_register_key() `df29c01b9f` clk: meson: gxbb: Fix the SDM_EN bit for MPLL0 on GXBB `30d35a1abd` i2c: mpc: Correct I2C reset procedure `4b25aad655` powerpc/smp: Move setup_profiling_timer() under CONFIG_PROFILING `25714ad6bf` i2c: i801: Don't silently correct invalid transfer size `75e2cfa5fa` powerpc/watchdog: Fix missed watchdog reset due to memory ordering race `a83639521a` powerpc/btext: add missing of_node_put `fc10d8f00a` powerpc/cell: add missing of_node_put `297ff7d5f1` powerpc/powernv: add missing of_node_put `c83ba875d7` powerpc/6xx: add missing of_node_put `d240b08d8a` x86/kbuild: Enable CONFIG_KALLSYMS_ALL=y in the defconfigs `3681e9f3f0` parisc: Avoid calling faulthandler_disabled() twice `f2a27dd7a2` random: do not throw away excess input to crng_fast_load `f8fdebfb4b` serial: core: Keep mctrl register state and cached copy in sync `a03fd1b198` serial: pl010: Drop CR register reset on set_termios `40ac338926` regulator: qcom_smd: Align probe function with rpmh-regulator `3dc751213f` net: gemini: allow any RGMII interface mode `1063de8975` net: phy: marvell: configure RGMII delays for 88E1118 `00580670b9` mlxsw: pci: Avoid flow control for EMAD packets `eaf8cffcf5` dm space map common: add bounds check to sm_ll_lookup_bitmap() `5850bef8e9` dm btree: add a defensive bounds check to insert_at() `754b663ea9` mac80211: allow non-standard VHT MCS-10/11 `e8da60b3a6` net: mdio: Demote probed message to debug print `6b22c9824d` btrfs: remove BUG_ON(!eie) in find_parent_nodes `623c65bc73` btrfs: remove BUG_ON() in find_parent_nodes() `44cbd2a16a` ACPI: battery: Add the ThinkPad "Not Charging" quirk `7b6dc07c6e` amdgpu/pm: Make sysfs pm attributes as read-only for VFs `516e332d6f` drm/amdgpu: fixup bad vram size on gmc v8 `ee88ff140d` ACPICA: Hardware: Do not flush CPU cache when entering S4 and S5 `8544074762` ACPICA: Fix wrong interpretation of PCC address `e70be17696` ACPICA: Executer: Fix the REFCLASS_REFOF case in acpi_ex_opcode_1A_0T_1R() `8ea9216d20` ACPICA: Utilities: Avoid deleting the same object twice in a row `fcfd8282c5` ACPICA: actypes.h: Expand the ACPI_ACCESS_ definitions `e3a51d6c90` jffs2: GC deadlock reading a page that is used in jffs2_write_begin() `e35cb5b122` drm/etnaviv: consider completed fence seqno in hang check `a0b13335a3` xfrm: rate limit SA mapping change message to user space `0b7beb2fea` Bluetooth: vhci: Set HCI_QUIRK_VALID_LE_STATES `6ac117edac` ath11k: Fix napi related hang `756a7188b2` um: registers: Rename function names to avoid conflicts and build problems `d817d10f7a` iwlwifi: pcie: make sure prph_info is set when treating wakeup IRQ `f266e1c5bf` iwlwifi: mvm: Fix calculation of frame length `6e44b60054` iwlwifi: remove module loading failure message `febab6b60d` iwlwifi: fix leaks/bad data after failed firmware load `81d2e96aba` PM: AVS: qcom-cpr: Use div64_ul instead of do_div `c0a1d844e3` rtw88: 8822c: update rx settings to prevent potential hw deadlock `3ef25f3122` ath9k: Fix out-of-bound memcpy in ath9k_hif_usb_rx_stream `e10de31055` usb: hub: Add delay for SuperSpeed hub resume to let links transit to U0 `282286c632` cpufreq: Fix initialization of min and max frequency QoS requests `37b25de3af` PM: runtime: Add safety net to supplier device release `5dfc6fa0b8` arm64: tegra: Adjust length of CCPLEX cluster MMIO region `b68c56a149` arm64: dts: ls1028a-qds: move rtc node to the correct i2c bus `b6f7f0ad5a` audit: ensure userspace is penalized the same as the kernel when under pressure `5d54ed1550` mmc: core: Fixup storing of OCR for MMC_QUIRK_NONSTD_SDIO `51a5156bb7` media: saa7146: hexium_gemini: Fix a NULL pointer dereference in hexium_attach() `f6bc6b178c` media: igorplugusb: receiver overflow should be reported `d698e024be` HID: quirks: Allow inverting the absolute X/Y values `59f0363346` bpf: Do not WARN in bpf_warn_invalid_xdp_action() `0e8805f73b` net: bonding: debug: avoid printing debug logs when bond is not notifying peers `8c72de32ff` x86/mce: Mark mce_read_aux() noinstr `1ad3e60f1f` x86/mce: Mark mce_end() noinstr `f21ca973b4` x86/mce: Mark mce_panic() noinstr `de360d9443` x86/mce: Allow instrumentation during task work queueing `af371e0abb` ath11k: Avoid false DEADLOCK warning reported by lockdep `aec69e2f33` selftests/ftrace: make kprobe profile testcase description unique `07ecabf15a` gpio: aspeed: Convert aspeed_gpio.lock to raw_spinlock `7e09f9d15e` net: phy: prefer 1000baseT over 1000baseKX `443133330a` net-sysfs: update the queue counts in the unregistration path `58b4c1ce83` ath10k: Fix tx hanging `fcba0bce33` ath11k: avoid deadlock by change ieee80211_queue_work for regd_update_work `93a108d466` iwlwifi: mvm: avoid clearing a just saved session protection id `ec01e0fe21` iwlwifi: mvm: synchronize with FW after multicast commands `c1976a4248` thunderbolt: Runtime PM activate both ends of the device link `830e5d1b43` media: m920x: don't use stack on USB reads `c33f0f22bf` media: saa7146: hexium_orion: Fix a NULL pointer dereference in hexium_attach() `526b6c9b45` media: rcar-vin: Update format alignment constraints `74e60c1dce` media: uvcvideo: Increase UVC_CTRL_CONTROL_TIMEOUT to 5 seconds. `d0e3ab637d` drm: rcar-du: Fix CRTC timings when CMM is used `e61aa46d0f` x86/mm: Flush global TLB when switching to trampoline page-table `0946fdd929` floppy: Add max size check for user space request `409d45bcd3` usb: uhci: add aspeed ast2600 uhci support `d0aec428c0` arm64: dts: ti: j7200-main: Fix 'dtbs_check' serdes_ln_ctrl node `fcb45ac39f` ACPI / x86: Add not-present quirk for the PCI0.SDHB.BRC1 device on the GPD win `b8b2e74a87` ACPI / x86: Allow specifying acpi_device_override_status() quirks by path `cda755506d` ACPI: Change acpi_device_always_present() into acpi_device_override_status() `b029625063` ACPI / x86: Drop PWM2 device on Lenovo Yoga Book from always present table `cf3b1a160d` media: venus: avoid calling core_clk_setrate() concurrently during concurrent video sessions `adbe148672` ath11k: Avoid NULL ptr access during mgmt tx cleanup `ab523ea096` rsi: Fix out-of-bounds read in rsi_read_pkt() `7525876750` rsi: Fix use-after-free in rsi_rx_done_handler() `6036500fdf` mwifiex: Fix skb_over_panic in mwifiex_usb_recv() `8a6371d84c` crypto: jitter - consider 32 LSB for APT `240cf5d3cb` HSI: core: Fix return freed object in hsi_new_client `f4295b7dca` gpiolib: acpi: Do not set the IRQ type if the IRQ is already in use `f0653cd4da` tty: serial: imx: disable UCR4_OREN in .stop_rx() instead of .shutdown() `b8d10f601f` drm/bridge: megachips: Ensure both bridges are probed before registration `43fc9e267e` mlxsw: pci: Add shutdown method in PCI driver `b2e921fa92` soc: ti: pruss: fix referenced node in error message `07fbbc4dc7` drm/amdgpu/display: set vblank_disable_immediate for DC `019fe9723a` drm/amd/display: check top_pipe_to_program pointer `3c3c0b6c4a` ARM: imx: rename DEBUG_IMX21_IMX27_UART to DEBUG_IMX27_UART `f54d8cd831` EDAC/synopsys: Use the quirk for version instead of ddr version `0b85d73fdb` media: b2c2: Add missing check in flexcop_pci_isr: `c978d39a8b` HID: apple: Do not reset quirks when the Fn key is not found `2df002e327` drm: panel-orientation-quirks: Add quirk for the Lenovo Yoga Book X91F/L `5aa57672c6` usb: gadget: f_fs: Use stream_open() for endpoint files `129e8faaee` ath11k: Fix crash caused by uninitialized TX ring `e8b271f2aa` media: atomisp: handle errors at sh_css_create_isp_params() `ebe9c978d9` batman-adv: allow netlink usage in unprivileged containers `ff452db961` ARM: shmobile: rcar-gen2: Add missing of_node_put() `ff2138d6c2` media: atomisp-ov2680: Fix ov2680_set_fmt() clobbering the exposure `51ef6582a2` media: atomisp: set per-device's default mode `ac08140677` media: atomisp: fix try_fmt logic `518e059789` drm/nouveau/pmu/gm200-: avoid touching PMU outside of DEVINIT/PREOS/ACR `e3ba02b043` drm/bridge: dw-hdmi: handle ELD when DRM_BRIDGE_ATTACH_NO_CONNECTOR `2f13f10fdd` ar5523: Fix null-ptr-deref with unexpected WDCMSG_TARGET_START reply `a9d2ccfc7d` selftests/bpf: Fix bpf_object leak in skb_ctx selftest `b207356933` drm/lima: fix warning when CONFIG_DEBUG_SG=y & CONFIG_DMA_API_DEBUG=y `db1e878373` fs: dlm: filter user dlm messages for kernel locks `f9c9a46efd` Bluetooth: Fix debugfs entry leak in hci_register_dev() `852d7d436f` ARM: dts: omap3-n900: Fix lp5523 for multi color `b5793aff11` of: base: Fix phandle argument length mismatch error message `e16e836d51` clk: bm1880: remove kfrees on static allocations `36d46e21c9` ASoC: fsl_asrc: refine the check of available clock divider `5a6864e2e6` RDMA/cxgb4: Set queue pair state when being queried `80524c8cdf` ASoC: fsl_mqs: fix MODULE_ALIAS `74988d017d` powerpc/xive: Add missing null check after calling kmalloc `588e0b81ce` mips: bcm63xx: add support for clk_set_parent() `e3de89d010` mips: lantiq: add support for clk_set_parent() `8f8468a089` arm64: tegra: Remove non existent Tegra194 reset `702902fc7f` arm64: tegra: Fix Tegra194 HDA {clock,reset}-names ordering `24b047d72c` counter: stm32-lptimer-cnt: remove iio counter abi `a394606104` misc: lattice-ecp3-config: Fix task hung when firmware load failed `696a50abbc` ASoC: samsung: idma: Check of ioremap return value `d491a2c2cf` ASoC: mediatek: Check for error clk pointer `c73ccdd62d` phy: uniphier-usb3ss: fix unintended writing zeros to PHY register `d781f4cd8c` scsi: block: pm: Always set request queue runtime active in blk_post_runtime_resume() `6e2a169544` iommu/iova: Fix race between FQ timeout and teardown `57bc898575` ASoC: Intel: catpt: Test dmaengine_submit() result before moving on `676049a3d2` iommu/amd: Restore GA log/tail pointer on host resume `c2bd7c31de` iommu/amd: Remove iommu_init_ga() `62ea255f2b` dmaengine: pxa/mmp: stop referencing config->slave_id `0be9ae1e53` mips: fix Kconfig reference to PHYS_ADDR_T_64BIT `88d78b25db` mips: add SYS_HAS_CPU_MIPS64_R5 config for MIPS Release 5 support `51b8e814bc` clk: stm32: Fix ltdc's clock turn off by clk_disable_unused() after system enter shell `dff359e042` of: unittest: 64 bit dma address test requires arch support `918105df78` of: unittest: fix warning on PowerPC frame size warning `0e04518b1d` ASoC: rt5663: Handle device_property_read_u32_array error codes `7c0d9c815c` RDMA/cma: Let cma_resolve_ib_dev() continue search even after empty entry `2432d325f9` RDMA/core: Let ib_find_gid() continue search even after empty entry `d77916df16` powerpc/powermac: Add additional missing lockdep_register_key() `8b3783e517` PCI/MSI: Fix pci_irq_vector()/pci_irq_get_affinity() `7be2a0bcaf` RDMA/qedr: Fix reporting max_{send/recv}_wr attrs `e19469468b` scsi: ufs: Fix race conditions related to driver data `ed43b2e048` iommu/io-pgtable-arm: Fix table descriptor paddr formatting `e9e4d1fb45` openrisc: Add clone3 ABI wrapper `551a785c26` binder: fix handling of error during copy `88ddf033a5` char/mwave: Adjust io port register size `8937aee4c0` ALSA: usb-audio: Drop superfluous '0' in Presonus Studio 1810c's ID `bcd533417f` ALSA: oss: fix compile error when OSS_DEBUG is enabled `fd99aeb978` clocksource: Avoid accidental unstable marking of clocksources `cacc6c30e3` clocksource: Reduce clocksource-skew threshold `86ad478c99` powerpc/32s: Fix shift-out-of-bounds in KASAN init `ef798cd035` powerpc/perf: Fix PMU callbacks to clear pending PMI before resetting an overflown PMC `58014442a9` powerpc/irq: Add helper to set regs->softe `c9ffa84a3b` powerpc/perf: move perf irq/nmi handling details into traps.c `a0758b3be4` powerpc/perf: MMCR0 control for PMU registers under PMCC=00 `f4df6db5b0` powerpc/64s: Convert some cpu_setup() and cpu_restore() functions to C `a9c9d2ff64` dt-bindings: thermal: Fix definition of cooling-maps contribution property `2bd8d93795` ASoC: uniphier: drop selecting non-existing SND_SOC_UNIPHIER_AIO_DMA `5a821af769` powerpc/prom_init: Fix improper check of prom_getprop() `9ca761ef94` clk: imx8mn: Fix imx8mn_clko1_sels `999528d8a7` scsi: pm80xx: Update WARN_ON check in pm8001_mpi_build_cmd() `c5f414d69a` RDMA/hns: Validate the pkey index `04a032ea24` RDMA/bnxt_re: Scan the whole bitmap when checking if "disabling RCFW with pending cmd-bit" `84cd5c029d` ALSA: hda: Add missing rwsem around snd_ctl_remove() calls `180e9d7384` ALSA: PCM: Add missing rwsem around snd_ctl_remove() calls `49d76154ba` ALSA: jack: Add missing rwsem around snd_ctl_remove() calls `f871cd8ee0` ext4: avoid trim error on fs with small groups `99590e820f` net: mcs7830: handle usb read errors properly `2b948524ae` iwlwifi: mvm: Use div_s64 instead of do_div in iwl_mvm_ftm_rtt_smoothing() `04ce9e2aed` pcmcia: fix setting of kthread task states `5064bfe046` can: xilinx_can: xcan_probe(): check for error irq `b6dd1577bc` can: softing: softing_startstop(): fix set but not used variable warning `b9ac866c23` tpm_tis: Fix an error handling path in 'tpm_tis_core_init()' `fb46223c9f` tpm: add request_locality before write TPM_INT_ENABLE `20edf903a3` can: mcp251xfd: add missing newline to printed strings `d71fca5d01` regmap: Call regmap_debugfs_exit() prior to _init() `838acddcdf` netrom: fix api breakage in nr_setsockopt() `0d04479857` ax25: uninitialized variable in ax25_setsockopt() `27e9910c45` spi: spi-meson-spifc: Add missing pm_runtime_disable() in meson_spifc_probe `9d6350cf8e` Bluetooth: L2CAP: uninitialized variables in l2cap_sock_setsockopt() `9defd7d4c0` lib/mpi: Add the return value check of kcalloc() `e801f81cee` net/mlx5: Set command entry semaphore up once got index free `d2b9ce705d` Revert "net/mlx5e: Block offload of outer header csum for UDP tunnels" `67e1a449a1` net/mlx5e: Don't block routes with nexthop objects in SW `cc40fa05c0` net/mlx5e: Fix page DMA map/unmap attributes `b3dda01d1d` debugfs: lockdown: Allow reading debugfs files that are not world readable `b9b5da3e18` HID: hid-uclogic-params: Invalid parameter check in uclogic_params_frame_init_v1_buttonpad `541c3a044b` HID: hid-uclogic-params: Invalid parameter check in uclogic_params_huion_init `c47f842e0c` HID: hid-uclogic-params: Invalid parameter check in uclogic_params_get_str_desc `cf5ad827ee` HID: hid-uclogic-params: Invalid parameter check in uclogic_params_init `94177fcecc` usb: dwc3: qcom: Fix NULL vs IS_ERR checking in dwc3_qcom_probe `4579954bf4` Bluetooth: hci_qca: Fix NULL vs IS_ERR_OR_NULL check in qca_serdev_probe `f6bf3d6639` Bluetooth: hci_bcm: Check for error irq `f5e4f68d57` fsl/fman: Check for null pointer after calling devm_ioremap `60aca6fdc1` staging: greybus: audio: Check null pointer `a1068bfee4` rocker: fix a sleeping in atomic bug `2db344725e` ppp: ensure minimum packet size in ppp_write() `45643b1b6c` netfilter: nft_set_pipapo: allocate pcpu scratch maps on clone `8772700a9f` bpf: Fix SO_RCVBUF/SO_SNDBUF handling in _bpf_setsockopt(). `342332fb0b` bpf: Don't promote bogus looking registers after null check. `0036c78c49` netfilter: ipt_CLUSTERIP: fix refcount leak in clusterip_tg_check() `2e718389b9` power: reset: mt6397: Check for null res pointer `4210c35fe8` pcmcia: rsrc_nonstatic: Fix a NULL pointer dereference in nonstatic_find_mem_region() `2dee347f35` pcmcia: rsrc_nonstatic: Fix a NULL pointer dereference in __nonstatic_find_io_region() `0f03132191` ACPI: scan: Create platform device for BCM4752 and LNV4752 ACPI nodes `595e1ec55b` x86/mce/inject: Avoid out-of-bounds write when setting flags `df12681819` hwmon: (mr75203) fix wrong power-up delay value `aea5302d9d` x86/boot/compressed: Move CLANG_FLAGS to beginning of KBUILD_CFLAGS `70eec71f32` Bluetooth: hci_qca: Stop IBS timer during BT OFF `1d4e722b62` software node: fix wrong node passed to find nargs_prop `f8f3c1720d` backlight: qcom-wled: Respect enabled-strings in set_brightness `de79bcbfaf` backlight: qcom-wled: Use cpu_to_le16 macro to perform conversion `c79f9b8d8e` backlight: qcom-wled: Override default length with qcom,enabled-strings `bf4daf6153` backlight: qcom-wled: Fix off-by-one maximum with default num_strings `09aed85e8c` backlight: qcom-wled: Pass number of elements to read to read_u32_array `f4ed4fc504` backlight: qcom-wled: Validate enabled string indices in DT `e668ac6506` bpftool: Enable line buffering for stdout `009bb7ee15` Bluetooth: L2CAP: Fix using wrong mode `1a2241ad40` um: virtio_uml: Fix time-travel external time propagation `8411722e56` um: fix ndelay/udelay defines `b2b1b490bd` selinux: fix potential memleak in selinux_add_opt() `3253cf0914` mmc: meson-mx-sdio: add IRQ check `decb209954` mmc: meson-mx-sdhc: add IRQ check `bdc6c9fc5f` iwlwifi: mvm: test roc running status bits before removing the sta `a750fcd604` iwlwifi: mvm: fix 32-bit build in FTM `86b0122d26` ARM: dts: armada-38x: Add generic compatible to UART nodes `1f5428e438` arm64: dts: marvell: cn9130: enable CP0 GPIO controllers `874b97e862` arm64: dts: marvell: cn9130: add GPIO and SPI aliases `407ef1db40` usb: ftdi-elan: fix memory leak on device disconnect `2a65da5a1e` ARM: 9159/1: decompressor: Avoid UNPREDICTABLE NOP encoding `47dd693c94` xfrm: state and policy should fail if XFRMA_IF_ID 0 `db369047e3` xfrm: interface with if_id 0 should return error `37441ddadc` media: hantro: Fix probe func error path `3849ec830b` drm/tegra: vic: Fix DMA API misuse `b230114bc5` drm/bridge: ti-sn65dsi86: Set max register for regmap `db97fc2c44` drm/msm/dpu: fix safe status debugfs file `3580055d1f` arm64: dts: qcom: ipq6018: Fix gpio-ranges property `6f20a5a98a` arm64: dts: qcom: c630: Fix soundcard setup `394ee480aa` ath11k: Fix a NULL pointer dereference in ath11k_mac_op_hw_scan() `f6e4a6cbdb` media: coda/imx-vdoa: Handle dma_set_coherent_mask error codes `1a8869de32` media: msi001: fix possible null-ptr-deref in msi001_probe() `a79327bb01` media: dw2102: Fix use after free `958a8819d4` ARM: dts: gemini: NAS4220-B: fis-index-block with 128 KiB sectors `3e51460638` ath11k: Fix deleting uninitialized kernel timer during fragment cache flush `b35263f000` crypto: stm32 - Revert broken pm_runtime_resume_and_get changes `1f5b81874f` crypto: stm32/cryp - fix bugs and crash in tests `1f6151b077` crypto: stm32/cryp - fix lrw chaining mode `2bd40e3a3a` crypto: stm32/cryp - fix double pm exit `533af1621d` crypto: stm32/cryp - check early input data `5deb24e503` crypto: stm32/cryp - fix xts and race condition in crypto_engine requests `e9e0dd5da8` crypto: stm32/cryp - fix CTR counter carry `c40b1bc851` crypto: stm32 - Fix last sparse warning in stm32_cryp_check_ctr_counter `93033bbbdc` selftests: harness: avoid false negatives if test has no ASSERTs `f568fd97d7` selftests: clone3: clone3: add case CLONE3_ARGS_NO_TEST `d21b47c607` x86/uaccess: Move variable into switch case statement `3e801ea43c` xfrm: fix a small bug in xfrm_sa_len() `b87034d7a2` mwifiex: Fix possible ABBA deadlock `0836f94040` rcu/exp: Mark current CPU as exp-QS in IPI loop second pass `027165c491` drm/msm/dp: displayPort driver need algorithm rational `268f352456` sched/rt: Try to restart rt period timer when rt runtime exceeded `bb0579ab50` wireless: iwlwifi: Fix a double free in iwl_txq_dyn_alloc_dma `b4b911b164` media: si2157: Fix "warm" tuner state detection `7009a5fbc5` media: saa7146: mxb: Fix a NULL pointer dereference in mxb_attach() `df79d2bf95` media: dib8000: Fix a memleak in dib8000_init() `f0cb43a2c6` arm64: clear_page() shouldn't use DC ZVA when DCZID_EL0.DZP == 1 `88ed31aab4` arm64: lib: Annotate {clear, copy}_page() as position-independent `69e402a985` bpf: Remove config check to enable bpf support for branch records `924886fa22` bpf: Disallow BPF_LOG_KERNEL log level for bpf(BPF_BTF_LOAD) `218d952160` bpf: Adjust BTF log size limit. `b77ef5b4ea` sched/fair: Fix per-CPU kthread and wakee stacking for asym CPU capacity `d7d5b3bc52` sched/fair: Fix detection of per-CPU kthreads waking a task `ec121517ac` Bluetooth: btmtksdio: fix resume failure `2a7edcb3ef` staging: rtl8192e: rtllib_module: fix error handle case in alloc_rtllib() `49f5cd2b7c` staging: rtl8192e: return error code from rtllib_softmac_init() `04fdd426ce` floppy: Fix hang in watchdog when disk is ejected `45bbe00801` serial: amba-pl011: do not request memory region twice `8409d2394c` tty: serial: uartlite: allow 64 bit address `a001a15ab3` arm64: dts: ti: k3-j7200: Correct the d-cache-sets info `75919207c1` arm64: dts: ti: k3-j721e: Fix the L2 cache sets `2dcfa3c765` arm64: dts: ti: k3-j7200: Fix the L2 cache sets `f277978d6c` drm/radeon/radeon_kms: Fix a NULL pointer dereference in radeon_driver_open_kms() `3ca1b3b82f` drm/amdgpu: Fix a NULL pointer dereference in amdgpu_connector_lcd_native_mode() `96e05d2d93` thermal/drivers/imx8mm: Enable ADC when enabling monitor `ef72449e2d` ACPI: EC: Rework flushing of EC work while suspended to idle `c0acd5a097` cgroup: Trace event cgroup id fields should be u64 `e7e178e264` arm64: dts: qcom: msm8916: fix MMC controller aliases `894d91c633` netfilter: bridge: add support for pppoe filtering `13f64bbe42` thermal/drivers/imx: Implement runtime PM support `c3a59f34e8` media: venus: core: Fix a resource leak in the error handling path of 'venus_probe()' `50c4244906` media: venus: core: Fix a potential NULL pointer dereference in an error handling path `eeefa2eae8` media: venus: core, venc, vdec: Fix probe dependency error `53f65afc26` media: venus: pm_helpers: Control core power domain manually `89f518b153` media: coda: fix CODA960 JPEG encoder buffer overflow `1da628d351` media: mtk-vcodec: call v4l2_m2m_ctx_release first when file is released `2028fb832d` media: si470x-i2c: fix possible memory leak in si470x_i2c_probe() `e8d78f924f` media: imx-pxp: Initialize the spinlock prior to using it `621e8ce75d` media: rcar-csi2: Correct the selection of hsfreqrange `ad52b9890b` mfd: atmel-flexcom: Use .resume_noirq `46d6a23114` mfd: atmel-flexcom: Remove #ifdef CONFIG_PM_SLEEP `f93c9aa1d3` tty: serial: atmel: Call dma_async_issue_pending() `755a6c873b` tty: serial: atmel: Check return code of dmaengine_submit() `bd85b2e77a` arm64: dts: ti: k3-j721e: correct cache-sets info `32e9947e66` ath11k: Use host CE parameters for CE interrupts configuration `6a49acfaca` crypto: qat - fix undetected PFVF timeout in ACK loop `475ac5c565` crypto: qat - make pfvf send message direction agnostic `ee1c74c3c9` crypto: qat - remove unnecessary collision prevention step in PFVF `472f768352` crypto: qat - fix spelling mistake: "messge" -> "message" `ae766527e6` ARM: dts: stm32: fix dtbs_check warning on ili9341 dts binding on stm32f429 disco `eab4204588` mtd: hyperbus: rpc-if: fix bug in rpcif_hb_remove `867d4ace48` crypto: qce - fix uaf on qce_skcipher_register_one `e19b3c1b57` crypto: qce - fix uaf on qce_ahash_register_one `5de640f59f` media: dmxdev: fix UAF when dvb_register_device() fails `1d64e2bd22` arm64: dts: renesas: cat875: Add rx/tx delays `a33eef23a6` drm/vboxvideo: fix a NULL vs IS_ERR() check `43220a61e7` fs: dlm: fix build with CONFIG_IPV6 disabled `0d7c5d10e7` tee: fix put order in teedev_close_context() `097e601eb8` ath11k: reset RSN/WPA present state for open BSS `fa51addd39` ath11k: clear the keys properly via DISABLE_KEY `df94b37e90` ath11k: Fix ETSI regd with weather radar overlap `ffc9019bd9` Bluetooth: stop proccessing malicious adv data `3273541fed` memory: renesas-rpc-if: Return error in case devm_ioremap_resource() fails `55917db359` fs: dlm: don't call kernel_getpeername() in error_report() `98923ebb03` fs: dlm: use sk->sk_socket instead of con->sock `6edd1bd8e3` arm64: dts: meson-gxbb-wetek: fix missing GPIO binding `eb1f75fa24` arm64: dts: meson-gxbb-wetek: fix HDMI in early boot `6f012f2c44` arm64: dts: amlogic: Fix SPI NOR flash node name for ODROID N2/N2+ `96d710b1c6` arm64: dts: amlogic: meson-g12: Fix GPU operating point table node name `0b57480ed5` media: aspeed: Update signal status immediately to ensure sane hw state `0ff0ae69d2` media: em28xx: fix memory leak in em28xx_init_dev `b441d94287` media: aspeed: fix mode-detect always time out at 2nd run `8d132d9dd8` media: atomisp: fix uninitialized bug in gmin_get_pmic_id_and_addr() `fc2b95e7ae` media: atomisp: fix enum formats logic `6e5353238c` media: atomisp: add NULL check for asd obtained from atomisp_video_pipe `6cbabad304` media: staging: media: atomisp: pci: Balance braces around conditional statements in file atomisp_cmd.c `22b0b68f7d` media: atomisp: fix ifdefs in sh_css.c `0bf5e8af6e` media: atomisp: fix inverted error check for ia_css_mipi_is_source_port_valid() `3cb3e66f58` media: atomisp: do not use err var when checking port validity for ISP2400 `08e43223fb` media: atomisp: fix inverted logic in buffers_needed() `fb370f6dc7` media: atomisp: fix punit_ddr_dvfs_enable() argument for mrfld_power up case `1daacf9bb6` media: atomisp: add missing media_device_cleanup() in atomisp_unregister_entities() `e1da9301cf` media: videobuf2: Fix the size printk format `90807ab437` mtd: hyperbus: rpc-if: Check return value of rpcif_sw_init() `9bfed11dcf` ath11k: Send PPDU_STATS_CFG with proper pdev mask to firmware `2fe056d979` wcn36xx: fix RX BD rate mapping for 5GHz legacy rates `22406ed4e3` wcn36xx: populate band before determining rate on RX `92fea7bd5a` wcn36xx: Put DXE block into reset before freeing memory `0d53c47f6a` wcn36xx: Release DMA channel descriptor allocations `1850195a85` wcn36xx: Fix DMA channel enable/disable cycle `38a7842889` wcn36xx: Indicate beacon not connection loss on MISSED_BEACON_IND `fcb267bb95` wcn36xx: ensure pairing of init_scan/finish_scan and start_scan/end_scan `e53ff4dd70` drm/vc4: hdmi: Set a default HSM rate `b9c2343373` clk: bcm-2835: Remove rounding up the dividers `836dd37fe2` clk: bcm-2835: Pick the closest clock rate `88f1b613c3` Bluetooth: cmtp: fix possible panic when cmtp_init_sockets() fails `9ddfa1c191` drm/rockchip: dsi: Reconfigure hardware on resume() `58904ed186` drm/rockchip: dsi: Disable PLL clock on bind error `6215cde020` drm/rockchip: dsi: Hold pm-runtime across bind/unbind `8ccaafa1ca` drm/rockchip: dsi: Fix unbalanced clock on probe error `9bc19022aa` drm/panel: innolux-p079zca: Delete panel on attach() failure `b01b7b8684` drm/panel: kingdisplay-kd097d04: Delete panel on attach() failure `0499c863a8` drm: fix null-ptr-deref in drm_dev_init_release() `7798757013` drm/bridge: display-connector: fix an uninitialized pointer in probe() `cb5813b0e5` Bluetooth: L2CAP: Fix not initializing sk_peer_pid `ed0b1fd3ec` drm/ttm: Put BO in its memory manager's lru list `7b9fa915a5` shmem: fix a race between shmem_unused_huge_shrink and shmem_evict_inode `6c6f86bb61` mm/page_alloc.c: do not warn allocation failure on zone DMA if no managed pages `e04b1dfe15` dma/pool: create dma atomic pool only if dma zone has managed pages `d2e5724117` mm_zone: add function to check if managed dma zone exists `2142a7e9bd` PCI: Add function 1 DMA alias quirk for Marvell 88SE9125 SATA controller `45c74f4f54` dma_fence_array: Fix PENDING_ERROR leak in dma_fence_array_signaled() `191a24ceae` gpu: host1x: Add back arm_iommu_detach_device() `0680674536` iommu/io-pgtable-arm-v7s: Add error handle for page table allocation failure `3dae11f8e3` lkdtm: Fix content of section containing lkdtm_rodata_do_nothing() `e4a2c924a1` iio: adc: ti-adc081c: Partial revert of removal of ACPI IDs `256302cb2f` can: softing_cs: softingcs_probe(): fix memleak on registration failure `aa57725e2d` media: cec-pin: fix interrupt en/disable handling `2e566cacc3` media: stk1160: fix control-message timeouts `1a0ca711df` media: pvrusb2: fix control-message timeouts `2dbf430ead` media: redrat3: fix control-message timeouts `6e9c120bf9` media: dib0700: fix undefined behavior in tuner shutdown `5e98ac260d` media: s2255: fix control-message timeouts `09b0b918a6` media: cpia2: fix control-message timeouts `d90833106c` media: em28xx: fix control-message timeouts `2182575c83` media: mceusb: fix control-message timeouts `460525acc9` media: flexcop-usb: fix control-message timeouts `7cac8a5624` media: v4l2-ioctl.c: readbuffers depends on V4L2_CAP_READWRITE `1da0b1cd42` rtc: cmos: take rtc_lock while reading from CMOS `14f6cfe0d7` tools/nolibc: fix incorrect truncation of exit code `5e258640ba` tools/nolibc: i386: fix initial stack alignment `06f7528d64` tools/nolibc: x86-64: Fix startup code bug `98259dd54e` x86/gpu: Reserve stolen memory for first integrated Intel GPU `e2a17dcad5` mtd: rawnand: davinci: Rewrite function description `8933138a66` mtd: rawnand: davinci: Avoid duplicated page read `677764634b` mtd: rawnand: davinci: Don't calculate ECC when reading page `a8a607b004` mtd: Fixed breaking list in __mtd_del_partition. `ff10cd7bb2` mtd: rawnand: gpmi: Remove explicit default gpmi clock setting for i.MX6 `538a5e208e` mtd: rawnand: gpmi: Add ERR007117 protection for nfc_apply_timings `777a700ccf` nfc: llcp: fix NULL error pointer dereference on sendmsg() after failed bind() `08283b076f` f2fs: fix to do sanity check in is_alive() `57cfc965e3` HID: wacom: Avoid using stale array indicies to read contact count `7fd22c99bb` HID: wacom: Ignore the confidence flag when a touch is removed `9a4800e0f6` HID: wacom: Reset expected and received contact counts at the same time `c2e39d5df0` HID: uhid: Fix worker destroying device without any protection `aa1346113c` KVM: VMX: switch blocked_vcpu_on_cpu_lock to raw spinlock `0347b16583` Merge 5.10.93 into android12-5.10-lts `fd187a4925` Linux 5.10.93 `bed97c9036` mtd: fixup CFI on ixp4xx `f50803b519` powerpc/pseries: Get entry and uaccess flush required bits from H_GET_CPU_CHARACTERISTICS `68c1aa82be` ALSA: hda/realtek: Re-order quirk entries for Lenovo `4d15a17d06` ALSA: hda/realtek: Add quirk for Legion Y9000X 2020 `d7b41464f1` ALSA: hda: ALC287: Add Lenovo IdeaPad Slim 9i 14ITL5 speaker quirk `87246ae94b` ALSA: hda/realtek - Fix silent output on Gigabyte X570 Aorus Master after reboot from Windows `9c27e513fb` ALSA: hda/realtek: Add speaker fixup for some Yoga 15ITL5 devices `4c7fb4d519` KVM: x86: remove PMU FIXED_CTR3 from msrs_to_save_all `6b8c3a1853` firmware: qemu_fw_cfg: fix kobject leak in probe error path `889c73305b` firmware: qemu_fw_cfg: fix NULL-pointer deref on duplicate entries `ff9588cf15` firmware: qemu_fw_cfg: fix sysfs information leak `358a4b054a` rtlwifi: rtl8192cu: Fix WARNING when calling local_irq_restore() with interrupts enabled `93c4506f9f` media: uvcvideo: fix division by zero at stream start `4c3f70be6f` video: vga16fb: Only probe for EGA and VGA 16 color graphic cards `161e43ab8c` 9p: only copy valid iattrs in 9P2000.L setattr implementation `0e6c0f3f40` KVM: s390: Clarify SIGP orders versus STOP/RESTART `413b427f5f` KVM: x86: Register Processor Trace interrupt hook iff PT enabled in guest `723acd75a0` perf: Protect perf_guest_cbs with RCU `eadde287a6` vfs: fs_context: fix up param length parsing in legacy_parse_param `c5f3827716` remoteproc: qcom: pil_info: Don't memcpy_toio more than is provided `5d88e24b23` orangefs: Fix the size of a memory allocation in orangefs_bufmap_alloc() `0084fefe29` devtmpfs regression fix: reconfigure on each mount `ee40594c95` kbuild: Add $(KBUILD_HOSTLDFLAGS) to 'has_libelf' test `f45f895af5` Merge branch 'android12-5.10' into `android12-5.10-lts` `7dd0d263fe` Merge 5.10.92 into android12-5.10-lts `c982c1a839` Linux 5.10.92 `c0091233f3` staging: greybus: fix stack size warning with UBSAN `66d21c005d` drm/i915: Avoid bitwise vs logical OR warning in snb_wm_latency_quirk() `2d4fda471d` staging: wlan-ng: Avoid bitwise vs logical OR warning in hfa384x_usb_throttlefn() `3609fed7ac` media: Revert "media: uvcvideo: Set unique vdev name based in type" `9b3c761e78` random: fix crash on multiple early calls to add_bootloader_randomness() `61cca7d191` random: fix data race on crng init time `3de9478230` random: fix data race on crng_node_pool `43c494294f` can: gs_usb: gs_can_start_xmit(): zero-initialize hf->{flags,reserved} `45221a57b6` can: isotp: convert struct tpcon::{idx,len} to unsigned int `bd61ae808b` can: gs_usb: fix use of uninitialized variable, detach device on reception of invalid USB data `f68e600017` mfd: intel-lpss: Fix too early PM enablement in the ACPI ->probe() `5f76445a31` veth: Do not record rx queue hint in veth_xmit `ddfa53825f` mmc: sdhci-pci: Add PCI ID for Intel ADL `2e691f9894` ath11k: Fix buffer overflow when scanning with extraie `a87cecf943` USB: Fix "slab-out-of-bounds Write" bug in usb_hcd_poll_rh_status `15982330b6` USB: core: Fix bug in resuming hub's handling of wakeup requests `413108ce3b` ARM: dts: exynos: Fix BCM4330 Bluetooth reset polarity in I9100 `b6dd070236` Bluetooth: bfusb: fix division by zero in send path `869e1677a0` Bluetooth: btusb: Add support for Foxconn QCA 0xe0d0 `c20021ce94` Bluetooth: btusb: Add support for Foxconn MT7922A `8349391838` Bluetooth: btusb: Add two more Bluetooth parts for WCN6855 `294c0dd80d` Bluetooth: btusb: fix memory leak in btusb_mtk_submit_wmt_recv_urb() `35ab8c9085` bpf: Fix out of bounds access from invalid _or_null type verification `c84fbba8a9` workqueue: Fix unbind_workers() VS wq_worker_running() race `c39d68ab38` md: revert io stats accounting `d605f2f30d` Merge 5.10.91 into android12-5.10-lts `df395c763b` Linux 5.10.91 `674071c9eb` Input: zinitix - make sure the IRQ is allocated before it gets enabled `ef81f7d406` ARM: dts: gpio-ranges property is now required `f63fa1a0d4` ipv6: raw: check passed optlen before reading `cf07884e6b` drm/amd/display: Added power down for DCN10 `10b9ccd067` mISDN: change function names to avoid conflicts `dd8a09cfbb` atlantic: Fix buff_ring OOB in aq_ring_rx_clean `c2f4bb251e` net: udp: fix alignment problem in udp4_seq_show() `f82b48d1d8` ip6_vti: initialize __ip6_tnl_parm struct in vti6_siocdevprivate `8c87a83ef8` scsi: libiscsi: Fix UAF in iscsi_conn_get_param()/iscsi_conn_teardown() `b798b677f9` usb: mtu3: fix interval value for intr and isoc `498d77fc5e` ipv6: Do cleanup if attribute validation fails in multipath route `72b0d14a0a` ipv6: Continue processing multipath route even if gateway attribute is invalid `5a7d650bb1` power: bq25890: Enable continuous conversion for ADC at charging `4f260ea553` phonet: refcount leak in pep_sock_accep `6195293460` rndis_host: support Hytera digital radios `62cbde77d9` power: reset: ltc2952: Fix use of floating point literals `998d157e3b` power: supply: core: Break capacity loop `16d8568378` xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate `aa606b82cd` net: ena: Fix error handling when calculating max IO queues number `e7f5480978` net: ena: Fix undefined state when tx request id is out of bounds `2de3d961f8` sch_qfq: prevent shift-out-of-bounds in qfq_init_qdisc `4c34d5fd8c` batman-adv: mcast: don't send link-local multicast to mcast routers `f403b5f96e` lwtunnel: Validate RTA_ENCAP_TYPE attribute length `48d5adb08d` ipv6: Check attribute length for RTA_GATEWAY when deleting multipath route `173bfa2782` ipv6: Check attribute length for RTA_GATEWAY in multipath route `914420a2a6` ipv4: Check attribute length for RTA_FLOW in multipath route `a8fe915be6` ipv4: Check attribute length for RTA_GATEWAY in multipath route `786a335fef` ftrace/samples: Add missing prototypes direct functions `c859c4de0b` i40e: Fix incorrect netdev's real number of RX/TX queues `d0ad64438f` i40e: Fix for displaying message regarding NVM version `32845aa602` i40e: fix use-after-free in i40e_sync_filters_subtask() `f7edb6b943` sfc: The RX page_ring is optional `2b3f34da0d` mac80211: initialize variable have_higher_than_11mbit `16e5cad6ec` RDMA/uverbs: Check for null return of kmalloc_array `a7c2cae997` netrom: fix copying in user data in nr_setsockopt `beeb0fdeda` RDMA/core: Don't infoleak GRH fields `3ca132e6b0` iavf: Fix limit of total number of queues to active queues of VF `396e301690` i40e: Fix to not show opcode msg on unsuccessful VF MAC change `7f13d14e56` ieee802154: atusb: fix uninit value in atusb_set_extended_addr `7db1e245cb` tracing: Tag trace_percpu_buffer as a percpu pointer `760c6a6255` tracing: Fix check for trace_percpu_buffer validity in get_trace_buf() `c1e2da4b3f` selftests: x86: fix [-Wstringop-overread] warn in test_process_vm_readv() `384111e123` f2fs: quota: fix potential deadlock `a1bb21475e` Merge 5.10.90 into android12-5.10-lts `d3e491a20d` Linux 5.10.90 `8c15bfb36a` bpf: Add kconfig knob for disabling unpriv bpf by default `d8a5b1377b` perf script: Fix CPU filtering of a script's switch events `2386e81a1d` net: fix use-after-free in tw_timer_handler `34087cf960` Input: spaceball - fix parsing of movement data packets `9f329d0d6c` Input: appletouch - initialize work before device registration `2a4f551dec` scsi: vmw_pvscsi: Set residual data length conditionally `1cb8444f31` binder: fix async_free_space accounting for empty parcels `a6e26251dd` usb: mtu3: set interval of FS intr and isoc endpoint `3b6efe0b7b` usb: mtu3: fix list_head check warning `f10b01c48f` usb: mtu3: add memory barrier before set GPD's HWO `1c4ace3e6b` usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear. `1933fe8ce7` xhci: Fresco FL1100 controller should not have BROKEN_MSI quirk set. `b8553330a0` drm/amdgpu: add support for IP discovery gc_info table v2 `28863ffe21` drm/amdgpu: When the VCN(1.0) block is suspended, powergating is explicitly enabled `a0f3ac399e` uapi: fix linux/nfc.h userspace compilation errors `818c9e0a04` nfc: uapi: use kernel size_t to fix user-space builds `8d31cbab4c` i2c: validate user data in compat ioctl `51c94d8fbd` fsl/fman: Fix missing put_device() call in fman_port_probe `920932b20e` net/ncsi: check for error return from call to nla_put_u32 `610af55f9f` selftests/net: udpgso_bench_tx: fix dst ip argument `78503589b1` net/mlx5e: Fix wrong features assignment in case of error `6114600808` ionic: Initialize the 'lif->dbid_inuse' bitmap `b7c9a1427b` igc: Fix TX timestamp support for non-MSI-X platforms `e8a5988a85` net/smc: fix kernel panic caused by race of smc_sock `97c87c1db9` net/smc: don't send CDC/LLC message if link not ready `99f19566b1` net/smc: improved fix wait on already cleared link `e553265ea5` NFC: st21nfca: Fix memory leak in device probe and remove `8d70dc0eec` net: lantiq_xrx200: fix statistics of received bytes `7ef89bd1e8` net: ag71xx: Fix a potential double free in error handling paths `40d3618691` net: usb: pegasus: Do not drop long Ethernet frames `a67becdaa8` net/smc: fix using of uninitialized completions `769d14abd3` sctp: use call_rcu to free endpoint `13c1bf43b6` selftests: Calculate udpgso segment count without header adjustment `abe74fb433` udp: using datalen to cap ipv6 udp max gso segments `5e6ad649e9` net/mlx5e: Fix ICOSQ recovery flow for XSK `73665165b6` net/mlx5e: Wrap the tx reporter dump callback to extract the sq `4cd1da02f0` net/mlx5: DR, Fix NULL vs IS_ERR checking in dr_domain_init_resources `fcb32eb3d0` scsi: lpfc: Terminate string in lpfc_debugfs_nvmeio_trc_write() `4833ad4908` selinux: initialize proto variable in selinux_ip_postroute_compat() `ec941a2277` recordmcount.pl: fix typo in s390 mcount regex `a0e82d5ef9` memblock: fix memblock_phys_alloc() section mismatch error `7da855e939` platform/x86: apple-gmux: use resource_size() with res `d01e9ce1af` parisc: Clear stale IIR value on instruction access rights trap `0643d9175d` tomoyo: use hwight16() in tomoyo_domain_quota_is_ok() `e2048a1f91` tomoyo: Check exceeded quota early in tomoyo_domain_quota_is_ok(). `210c7c6908` Input: i8042 - enable deferred probe quirk for ASUS UM325UA `bb672eff74` Input: i8042 - add deferred probe support `9b28b48fb3` Merge 5.10.89 into android12-5.10-lts `eb967e323f` Linux 5.10.89 `52ad5da8e3` phonet/pep: refuse to enable an unbound pipe `7dd52af1eb` hamradio: improve the incomplete fix to avoid NPD `450121075a` hamradio: defer ax25 kfree after unregister_netdev `8e34d07dd4` ax25: NPD bug when detaching AX25 device `50f78486f9` hwmon: (lm90) Do not report 'busy' status bit as alarm `ec1d222d37` hwmom: (lm90) Fix citical alarm status for MAX6680/MAX6681 `441d387366` pinctrl: mediatek: fix global-out-of-bounds issue `9c75a9657b` ASoC: rt5682: fix the wrong jack type detected `94caab5af1` ASoC: tas2770: Fix setting of high sample rates `c7282790c7` Input: goodix - add id->model mapping for the "9111" model `3bb3bf50d6` Input: elants_i2c - do not check Remark ID on eKTH3900/eKTH5312 `ee6f34215c` mm: mempolicy: fix THP allocations escaping mempolicy restrictions `8008fc1d0b` KVM: VMX: Fix stale docs for kvm-intel.emulate_invalid_guest_state `d91ed251fd` usb: gadget: u_ether: fix race in setting MAC address in setup phase `6697f29bf5` ceph: fix up non-directory creation in SGID directories `fffb6581a2` f2fs: fix to do sanity check on last xattr entry in __f2fs_setxattr() `ad338d825e` tee: optee: Fix incorrect page free bug `1f20707674` mm/hwpoison: clear MF_COUNT_INCREASED before retrying get_any_page() `ac61b9c6c0` mac80211: fix locking in ieee80211_start_ap error path `89876d1083` ARM: 9169/1: entry: fix Thumb2 bug in iWMMXt exception handling `c3253d3a38` mmc: mmci: stm32: clear DLYB_CR after sending tuning command `0d66b39521` mmc: core: Disable card detect during shutdown `c8e366a01c` mmc: meson-mx-sdhc: Set MANUAL_STOP for multi-block SDIO commands `4af7915361` mmc: sdhci-tegra: Fix switch to HS400ES mode `9a7ec79797` gpio: dln2: Fix interrupts when replugging the device `f5b02912e2` pinctrl: stm32: consider the GPIO offset to expose all the GPIO lines `28626e76ba` KVM: VMX: Wake vCPU when delivering posted IRQ even if vCPU == this vCPU `7a37f2e370` platform/x86: intel_pmc_core: fix memleak on registration failure `b57afd1240` x86/pkey: Fix undefined behaviour with PKRU_WD_BIT `c05d8f66ec` tee: handle lookup of shm with reference count 0 `0ffb9f83e4` parisc: Fix mask used to select futex spinlock `5deeb9ad59` parisc: Correct completer in lws start `8b745616ba` ipmi: fix initialization when workqueue allocation fails `1f6ab84746` ipmi: ssif: initialize ssif_info->client early `a5192f3116` ipmi: bail out if init_srcu_struct fails `bc674f1b21` Input: atmel_mxt_ts - fix double free in mxt_read_info_block `30140e252f` ASoC: meson: aiu: Move AIU_I2S_MISC hold setting to aiu-fifo-i2s `2b4c020b70` ALSA: hda/realtek: Fix quirk for Clevo NJ51CU `7470780f3b` ALSA: hda/realtek: Add new alc285-hp-amp-init model `4cb7dc2e30` ALSA: hda/realtek: Amp init fixup for HP ZBook 15 G6 `69e492161c` ALSA: drivers: opl3: Fix incorrect use of vp->state `a96c08e0b4` ALSA: jack: Check the return value of kstrdup() `51c7b2a7b8` hwmon: (lm90) Drop critical attribute support for MAX6654 `2464738d0e` hwmon: (lm90) Introduce flag indicating extended temperature support `196df56c3d` hwmon: (lm90) Add basic support for TI TMP461 `fa2e149260` hwmon: (lm90) Fix usage of CONFIG2 register in detect function `ba696b4708` pinctrl: bcm2835: Change init order for gpio hogs `676c572439` Input: elantech - fix stack out of bound access in elantech_change_report_id() `2792fde84c` sfc: falcon: Check null pointer of rx_queue->page_ring `d70b4001ef` sfc: Check null pointer of rx_queue->page_ring `75c962f02a` net: ks8851: Check for error irq `9db0f8d395` drivers: net: smc911x: Check for error irq `ca2a15053b` fjes: Check for error irq `c6d2754006` bonding: fix ad_actor_system option setting to default `6809da5185` ipmi: Fix UAF when uninstall ipmi_si and ipmi_msghandler module `61e6b82e7b` igb: fix deadlock caused by taking RTNL in RPM resume path `e00eace232` net: skip virtio_net_hdr_set_proto if protocol already set `ed05e4dcfb` net: accept UFOv6 packages in virtio_net_hdr_to_skb `56b0bbba78` qlcnic: potential dereference null pointer of rx_queue->page_ring `78e49d77e5` net: marvell: prestera: fix incorrect return of port_find `861b4413e4` ARM: dts: imx6qdl-wandboard: Fix Ethernet support `d79f5e0d45` netfilter: fix regression in looped (broad\|multi)cast's MAC handling `579cefef7c` RDMA/hns: Replace kfree() with kvfree() `7cf6466e00` IB/qib: Fix memory leak in qib_user_sdma_queue_pkts() `cd9c90682b` ASoC: meson: aiu: fifo: Add missing dma_coerce_mask_and_coherent() `580ecf86e7` spi: change clk_disable_unprepare to clk_unprepare `93a957bbf4` arm64: dts: allwinner: orangepi-zero-plus: fix PHY mode `ef2dce4325` HID: potential dereference of null pointer `3110bc5862` HID: holtek: fix mouse probing `0875873b2a` ext4: check for inconsistent extents between index and leaf block `76366c024f` ext4: check for out-of-order index extents in ext4_valid_extent_entries() `1d4b1c4e8b` ext4: prevent partial update of the extent blocks `f69a47fcbb` net: usb: lan78xx: add Allied Telesis AT29M2-AF `8c0059a25c` arm64: vdso32: require CROSS_COMPILE_COMPAT for gcc+bfd `b16b124a42` arm64: vdso32: drop -no-integrated-as flag `ba13eb1927` Merge 5.10.88 into android12-5.10-lts `856f88f27b` Linux 5.10.88 `88f20cccbe` xen/netback: don't queue unlimited number of packages `525875c410` xen/netback: fix rx queue stall detection `8fa3a370cc` xen/console: harden hvc_xen against event channel storms `d31b337917` xen/netfront: harden netfront against event channel storms `8ac3b6ee7c` xen/blkfront: harden blkfront against event channel storms `76ec7fe2d8` Revert "xsk: Do not sleep in poll() when need_wakeup set" `e24fc89830` bus: ti-sysc: Fix variable set but not used warning for reinit_modules `70692b0620` rcu: Mark accesses to rcu_state.n_force_qs `a9078e7914` scsi: scsi_debug: Sanity check block descriptor length in resp_mode_select() `bdb854f134` scsi: scsi_debug: Fix type in min_t to avoid stack OOB `aa1f912712` scsi: scsi_debug: Don't call kcalloc() if size arg is zero `6859985a2f` ovl: fix warning in ovl_create_real() `5fd7d62daa` fuse: annotate lock in fuse_reverse_inval_entry() `b99bdf127a` media: mxl111sf: change mutex_init() location `0413f7a1a5` xsk: Do not sleep in poll() when need_wakeup set `6b8d8ecdd9` ARM: dts: imx6ull-pinfunc: Fix CSI_DATA07__ESAI_TX0 pad name `8affa1b68d` Input: touchscreen - avoid bitwise vs logical OR warning `aec5897b27` drm/amdgpu: correct register access for RLC_JUMP_TABLE_RESTORE `c1d519263d` libata: if T_LENGTH is zero, dma direction should be DMA_NONE `a9f2c6af5a` timekeeping: Really make sure wall_to_monotonic isn't positive `6471ebcd6f` serial: 8250_fintek: Fix garbled text for console `a7c8067453` iocost: Fix divide-by-zero on donation from low hweight cgroup `bcebb8eb19` zonefs: add MODULE_ALIAS_FS `1c414ff63b` btrfs: fix double free of anon_dev after failure to create subvolume `005d9292b5` btrfs: fix memory leak in __add_inode_ref() `cd98cb5216` USB: serial: option: add Telit FN990 compositions `5c93584d9a` USB: serial: cp210x: fix CP2105 GPIO registration `8f207f1263` usb: xhci: Extend support for runtime power management for AMD's Yellow carp. `e5949933f3` PCI/MSI: Mask MSI-X vectors only on success `f8aa09186c` PCI/MSI: Clear PCI_MSIX_FLAGS_MASKALL on error `d17c5a3897` usb: dwc2: fix STM ID/VBUS detection startup delay in dwc2_driver_probe `2b2edc8fc5` USB: NO_LPM quirk Lenovo USB-C to Ethernet Adapher(RTL8153-04) `fd623e16b2` tty: n_hdlc: make n_hdlc_tty_wakeup() asynchronous `9439fabfc3` KVM: x86: Drop guest CPUID check for host initiated writes to MSR_IA32_PERF_CAPABILITIES `5fe305c6d4` Revert "usb: early: convert to readl_poll_timeout_atomic()" `2b54f485f2` USB: gadget: bRequestType is a bitfield, not a enum `151ffac3ac` powerpc/85xx: Fix oops when CONFIG_FSL_PMC=n `fcf9194d36` bpf, selftests: Fix racing issue in btf_skc_cls_ingress test `6f46c59e60` sit: do not call ipip6_dev_free() from sit_init_net() `6e1011cd18` net: systemport: Add global locking for descriptor lifecycle `d1765f984c` net/smc: Prevent smc_release() from long blocking `337bb7bf7c` net: Fix double 0x prefix print in SKB dump `734a3f3106` sfc_ef100: potential dereference of null pointer `7da349f07e` net/packet: rx_owner_map depends on pg_vec `1a34fb9e2b` netdevsim: Zero-initialize memory for new map's value in function nsim_bpf_map_alloc `d3e1f54508` ixgbe: set X550 MDIO speed before talking to PHY `48e01e3881` ixgbe: Document how to enable NBASE-T support `776ed8b366` igc: Fix typo in i225 LTR functions `74a16e062b` igbvf: fix double free in `igbvf_probe` `ddac50d04f` igb: Fix removal of unicast MAC filters of VFs `12c1938870` soc/tegra: fuse: Fix bitwise vs. logical OR warning `451f1eded7` mptcp: clear 'kern' flag from fallback sockets `222cebd995` drm/amd/pm: fix a potential gpu_metrics_table memory leak `74dc97dfb2` rds: memory leak in __rds_conn_create() `67f4362ae2` flow_offload: return EOPNOTSUPP for the unsupported mpls action type `03fd6ca056` mac80211: fix lookup when adding AddBA extension element `bef59d6a83` mac80211: agg-tx: don't schedule_and_wake_txq() under sta->lock `96bc86cac0` drm/ast: potential dereference of null pointer `cac0fd4b9b` selftest/net/forwarding: declare NETIFS p9 p10 `81fbdd4565` net/sched: sch_ets: don't remove idle classes from the round-robin list `be32c8a788` dmaengine: st_fdma: fix MODULE_ALIAS `dfff1d5e85` selftests: Fix IPv6 address bind tests `08896ecfff` selftests: Fix raw socket bind tests with VRF `5ba4dfb8b8` selftests: Add duplicate config only for MD5 VRF tests `12512bc8f2` net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg `3a4f6dba1e` inet_diag: fix kernel-infoleak for UDP sockets `20ad1ef02f` sch_cake: do not call cake_destroy() from cake_init() `1208b445a4` s390/kexec_file: fix error handling when applying relocations `c058c544e7` selftests: net: Correct ping6 expected rc from 2 to 1 `9983425c20` virtio/vsock: fix the transport to work with VMADDR_CID_ANY `94a01e6fb2` soc: imx: Register SoC device only on i.MX boards `cc426a91d3` clk: Don't parent clks until the parent is fully registered `429bb01e4d` ARM: socfpga: dts: fix qspi node compatible `7b4cc168d9` ceph: initialize pathlen variable in reconnect_caps_cb `e0f06c32af` ceph: fix duplicate increment of opened_inodes metric `640e28d618` tee: amdtee: fix an IS_ERR() vs NULL bug `eed897a222` mac80211: track only QoS data frames for admission control `24983f7508` arm64: dts: rockchip: fix audio-supply for Rock Pi 4 `49bd597719` arm64: dts: rockchip: fix rk3399-leez-p710 vcc3v3-lan supply `9fcdbbf396` arm64: dts: rockchip: fix rk3308-roc-cc vcc-sd supply `ba866840b2` arm64: dts: rockchip: remove mmc-hs400-enhanced-strobe from rk3399-khadas-edge `3516bc1492` arm64: dts: imx8mp-evk: Improve the Ethernet PHY description `06294e7e34` arm64: dts: imx8m: correct assigned clocks for FEC `4cc6badff9` audit: improve robustness of the audit queue handling `0e21e6cd5e` dm btree remove: fix use after free in rebalance_children() `f5187a9d52` recordmcount.pl: look for jgnop instruction as well as bcrl on s390 `51f6302f81` vdpa: check that offsets are within bounds `e3a1ab5aea` virtio_ring: Fix querying of maximum DMA mapping size for virtio device `0612679e48` bpf, selftests: Add test case trying to taint map value pointer `279e0bf80d` bpf: Make 32->64 bounds propagation slightly more robust `e2aad0b5f2` bpf: Fix signed bounds propagation after mov32 `f0f484714f` firmware: arm_scpi: Fix string overflow in SCPI genpd driver `7fd214fc7f` mac80211: validate extended element ID is present `0bb50470f1` mac80211: send ADDBA requests using the tid/queue of the aggregation session `29bb131dbb` mac80211: mark TX-during-stop for TX in in_reconfig `15640e40e3` mac80211: fix regression in SSN handling of addba tx `49b7e49692` KVM: downgrade two BUG_ONs to WARN_ON_ONCE `8d0f56c2ed` KVM: selftests: Make sure kvm_create_max_vcpus test won't hit RLIMIT_NOFILE `c4d08791d9` Merge 5.10.87 into android12-5.10-lts `272aedd4a3` Linux 5.10.87 `8dd559d53b` arm: ioremap: don't abuse pfn_valid() to check if pfn is in RAM `65c578935b` arm: extend pfn_valid to take into account freed memory map alignment `6e634c0e71` memblock: ensure there is no overflow in memblock_overlaps_region() `74551f13c6` memblock: align freed memory map on pageblock boundaries with SPARSEMEM `b4b54c7ba1` memblock: free_unused_memmap: use pageblock units instead of MAX_ORDER `b6a1cbd187` perf intel-pt: Fix error timestamp setting on the decoder error path `0612aa02c2` perf intel-pt: Fix missing 'instruction' events with 'q' option `71c795028b` perf intel-pt: Fix next 'err' value, walking trace `02681dd178` perf intel-pt: Fix state setting when receiving overflow (OVF) packet `cbed09b44c` perf intel-pt: Fix intel_pt_fup_event() assumptions about setting state type `3bb7fd4be8` perf intel-pt: Fix sync state when a PSB (synchronization) packet is found `731ff78841` perf intel-pt: Fix some PGE (packet generation enable/control flow packets) usage `b23f9252a4` perf inject: Fix itrace space allowed for new attributes `7c26da3be1` ethtool: do not perform operations on net devices being unregistered `6992d8c215` hwmon: (dell-smm) Fix warning on /proc/i8k creation error `c31470a30c` fuse: make sure reclaim doesn't write the inode `613725436e` bpf: Fix integer overflow in argument calculation for bpf_map_area_alloc `9099f35126` staging: most: dim2: use device release method `ac76adc87a` KVM: x86: Ignore sparse banks size for an "all CPUs", non-sparse IPI req `6f0d9d3e74` tracing: Fix a kmemleak false positive in tracing_map `f35f7f04aa` drm/amd/display: add connector type check for CRC source set `dd3cea3425` drm/amd/display: Fix for the no Audio bug with Tiled Displays `dadce61247` net: netlink: af_netlink: Prevent empty skb by adding a check on len. `bca6af4325` i2c: rk3x: Handle a spurious start completion interrupt flag `d6edec8a7b` parisc/agp: Annotate parisc agp init functions with __init `cf520ccffd` ALSA: hda/hdmi: fix HDA codec entry table order for ADL-P `701a07fd02` ALSA: hda: Add Intel DG2 PCI ID and HDMI codec vid `6d22a96d12` net/mlx4_en: Update reported link modes for 1/10G `999069d8b0` Revert "tty: serial: fsl_lpuart: drop earlycon entry for i.MX8QXP" `27f4ce02b3` s390/test_unwind: use raw opcode instead of invalid instruction `9eab949e2b` KVM: arm64: Save PSTATE early on exit `990fd815ec` drm/msm/dsi: set default num_data_lanes `c602863ad2` nfc: fix segfault in nfc_genl_dump_devices_done `4f0b8b90b8` Merge 5.10.86 into android12-5.10-lts `37050f17f2` Linux 5.10.86 `3241449183` netfilter: selftest: conntrack_vrf.sh: fix file permission `afc997898e` Merge 5.10.85 into android12-5.10-lts `e4f2aee661` Linux 5.10.85 `47301c06f6` Documentation/Kbuild: Remove references to gcc-plugin.sh `af5ba49cf7` MAINTAINERS: adjust GCC PLUGINS after gcc-plugin.sh removal `ad13421fd2` doc: gcc-plugins: update gcc-plugins.rst `9fc17c3af5` kbuild: simplify GCC_PLUGINS enablement in dummy-tools/gcc `d428e54774` bpf: Add selftests to cover packet access corner cases `0ec0eda3f3` misc: fastrpc: fix improper packet size calculation `261d45a4c2` irqchip: nvic: Fix offset for Interrupt Priority Offsets `cd946f0ebe` irqchip/irq-gic-v3-its.c: Force synchronisation when issuing INVALL `e1c6611f82` irqchip/armada-370-xp: Fix support for Multi-MSI interrupts `8f3ed9deaa` irqchip/armada-370-xp: Fix return value of armada_370_xp_msi_alloc() `d530e9943d` irqchip/aspeed-scu: Replace update_bits with write_bits. `014c2fa5dc` csky: fix typo of fpu config macro `ee86d0bad8` iio: accel: kxcjk-1013: Fix possible memory leak in probe and remove `c10c53419d` iio: ad7768-1: Call iio_trigger_notify_done() on error `0f86c9e818` iio: adc: axp20x_adc: fix charging current reporting on AXP22x `af7fbb8c0b` iio: adc: stm32: fix a current leak by resetting pcsel before disabling vdda `fff92f3712` iio: at91-sama5d2: Fix incorrect sign extension `a2545b147d` iio: dln2: Check return value of devm_iio_trigger_register() `69ae78c1ab` iio: dln2-adc: Fix lockdep complaint `416383999c` iio: itg3200: Call iio_trigger_notify_done() on error `bc4d8367ed` iio: kxsd9: Don't return error code in trigger handler `28ea539a31` iio: ltr501: Don't return error code in trigger handler `db12d95085` iio: mma8452: Fix trigger reference couting `4e78529110` iio: stk3310: Don't return error code in interrupt handler `5c4a0f307f` iio: trigger: stm32-timer: fix MODULE_ALIAS `5de9c5b130` iio: trigger: Fix reference counting `cbc04c0c9a` iio: gyro: adxrs290: fix data signedness `fee8be5bde` xhci: avoid race between disable slot command and host runtime suspend `1b43c9b65f` usb: core: config: using bit mask instead of individual bits `74b6a6a239` xhci: Remove CONFIG_USB_DEFAULT_PERSIST to prevent xHCI from runtime suspending `ef284f086d` usb: core: config: fix validation of wMaxPacketValue entries `e4de8ca013` USB: gadget: zero allocate endpoint 0 buffers `7193ad3e50` USB: gadget: detect too-big endpoint 0 requests `63fc70bffa` selftests/fib_tests: Rework fib_rp_filter_test() `126d1897cb` net/qla3xxx: fix an error code in ql_adapter_up() `5e663bcd9a` net, neigh: clear whole pneigh_entry at alloc time `ae67383208` net: fec: only clear interrupt of handling queue in fec_enet_rx_queue() `83b16b9c44` net: altera: set a couple error code in probe() `385ffd31eb` net: cdc_ncm: Allow for dwNtbOutMaxSize to be unset or zero `47322fddb4` tools build: Remove needless libpython-version feature check that breaks test-all fast path `42bea3a1b7` dt-bindings: net: Reintroduce PHY no lane swap binding `3f57215f74` Documentation/locking/locktypes: Update migrate_disable() bits. `77d255d28b` perf tools: Fix SMT detection fast read path `391ca20ea1` Revert "PCI: aardvark: Fix support for PCI_ROM_ADDRESS1 on emulated bridge" `e5b7fb2198` i40e: Fix NULL pointer dereference in i40e_dbg_dump_desc `347cc9b4d9` mtd: rawnand: fsmc: Fix timing computation `0b2e1fccdf` mtd: rawnand: fsmc: Take instruction delay into account `57f290572f` i40e: Fix pre-set max number of queues for VF `eb87117c27` i40e: Fix failed opcode appearing if handling messages from VF `82ed3829c9` clk: imx: use module_platform_driver `4d12546cf9` RDMA/hns: Do not destroy QP resources in the hw resetting phase `33f320c35d` RDMA/hns: Do not halt commands during reset until later `4458938b29` ASoC: codecs: wcd934x: return correct value from mixer put `1089dac26c` ASoC: codecs: wcd934x: handle channel mappping list correctly `83dae68fc0` ASoC: codecs: wsa881x: fix return values from kcontrol put `62e4dc5e13` ASoC: qdsp6: q6routing: Fix return value from msm_routing_put_audio_mixer `2f4764fe36` ASoC: rt5682: Fix crash due to out of scope stack vars `bdd8129c66` PM: runtime: Fix pm_runtime_active() kerneldoc comment `661c4412c5` qede: validate non LSO skb length `c4d2d7c935` scsi: scsi_debug: Fix buffer size of REPORT ZONES command `1e434d2687` scsi: pm80xx: Do not call scsi_remove_host() in pm8001_alloc() `5dfe611474` block: fix ioprio_get(IOPRIO_WHO_PGRP) vs setuid(2) `5f1f94c26b` tracefs: Set all files to the same group ownership as the mount option `2ba0738f71` net: mvpp2: fix XDP rx queues registering `47ffefd88a` aio: fix use-after-free due to missing POLLFREE handling `e4d19740bc` aio: keep poll requests on waitqueue until completed `fc2f636ffc` signalfd: use wake_up_pollfree() `9f3acee7ea` binder: use wake_up_pollfree() `8e04c8397b` wait: add wake_up_pollfree() `2f8eb4c4c8` libata: add horkage for ASMedia 1092 `f76580d82c` can: m_can: Disable and ignore ELO interrupt `703dde1120` can: pch_can: pch_can_rx_normal: fix use after free `2737d0bc21` drm/syncobj: Deal with signalled fences in drm_syncobj_find_fence. `17edb38e76` clk: qcom: regmap-mux: fix parent clock lookup `172a982244` mmc: renesas_sdhi: initialize variable properly when tuning `33204825cc` tracefs: Have new files inherit the ownership of their parent `c520943a00` nfsd: Fix nsfd startup race (again) `eeb0711801` nfsd: fix use-after-free due to delegation race `8b4264c27b` md: fix update super 1.0 on rdev size change `caf9b352dc` btrfs: replace the BUG_ON in btrfs_del_root_ref with proper error handling `41b3cc57d6` btrfs: clear extent buffer uptodate when we fail to write it `75490bcbd0` scsi: qla2xxx: Format log strings only if needed `07977a3f3d` ALSA: pcm: oss: Handle missing errors in snd_pcm_oss_change_params() `ad45babf78` ALSA: pcm: oss: Limit the period size to 16MB `02b2b691b7` ALSA: pcm: oss: Fix negative period/buffer sizes `6760e6ddeb` ALSA: hda/realtek: Fix quirk for TongFang PHxTxX1 `7fe903d354` ALSA: hda/realtek - Add headset Mic support for Lenovo ALC897 platform `3063ee5164` ALSA: ctl: Fix copy of updated id with element read/write `c581090228` mm: bdi: initialize bdi_min_ratio when bdi is unregistered `06368922f3` KVM: x86: Wait for IPIs to be delivered when handling Hyper-V TLB flush hypercall `2a51edaf5c` net/sched: fq_pie: prevent dismantle issue `4b7e90672a` devlink: fix netns refcount leak in devlink_nl_cmd_reload() `9d683d14f6` IB/hfi1: Correct guard on eager buffer deallocation `2e2edebb5d` iavf: Fix reporting when setting descriptor count `aada0b3f33` iavf: restore MSI state on reset `32a329b731` netfilter: conntrack: annotate data-races around ct->timeout `5e39de85b7` udp: using datalen to cap max gso segments `666521b385` seg6: fix the iif in the IPv6 socket control block `484069b5de` nfp: Fix memory leak in nfp_cpp_area_cache_add() `b1830ede16` bonding: make tx_rebalance_counter an atomic `a59df4ea71` ice: ignore dropped packets during init `349e83c0cf` bpf: Fix the off-by-two error in range markings `f26951db84` bpf, x86: Fix "no previous prototype" warning `74685aaece` vrf: don't run conntrack on vrf with !dflt qdisc `d5cf399a6d` selftests: netfilter: add a vrf+conntrack testcase `83ea620a1b` nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done `f3d9114ac9` drm/amdkfd: fix boot failure when iommu is disabled in Picasso. `7508a9aa65` drm/amdgpu: init iommu after amdkfd device init `ac9db04ee3` drm/amdgpu: move iommu_resume before ip init/resume `fe9dca7dda` drm/amdgpu: add amdgpu_amdkfd_resume_iommu `5d191b0976` drm/amdkfd: separate kfd_iommu_resume from kfd_resume `46dcf66d6e` drm/amd/amdkfd: adjust dummy functions' placement `dded8d76a7` x86/sme: Explicitly map new EFI memmap table as encrypted `923f4dc5df` can: sja1000: fix use after free in ems_pcmcia_add_card() `819251da71` can: kvaser_pciefd: kvaser_pciefd_rx_error_frame(): increase correct stats->{rx,tx}_errors counter `854a2bede1` can: kvaser_usb: get CAN clock frequency from device `2c08271f4e` IB/hfi1: Fix leak of rcvhdrtail_dummy_kvaddr `d87c10607b` IB/hfi1: Fix early init panic `d60dd3685d` IB/hfi1: Insure use of smp_processor_id() is preempt disabled `05eb0e4a12` nft_set_pipapo: Fix bucket load in AVX2 lookup routine for six 8-bit groups `89f3edc98f` HID: check for valid USB device for many HID drivers `889c39113f` HID: wacom: fix problems when device is not a valid USB device `6272b17001` HID: bigbenff: prevent null pointer dereference `d877651afd` HID: add USB_HID dependancy on some USB HID drivers `a7e9c5ddf5` HID: add USB_HID dependancy to hid-chicony `28989ed4d7` HID: add USB_HID dependancy to hid-prodikeys `6114432960` HID: add hid_is_usb() function to make it simpler for USB detection `2298d5edd8` HID: google: add eel USB id `12362cd3a4` HID: quirks: Add quirk for the Microsoft Surface 3 type-cover `cc97d73215` gcc-plugins: fix gcc 11 indigestion with plugins... `1eee36a552` gcc-plugins: simplify GCC plugin-dev capability test `518c3f98e5` usb: gadget: uvc: fix multiple opens `e2aed161fc` ANDROID: GKI: fix up abi breakage in fib_rules.h `1b71a028a2` Merge 5.10.84 into android12-5.10-lts `a0582e24d3` Linux 5.10.84 `e6edaf2677` ipmi: msghandler: Make symbol 'remove_work_wq' static `a8d18fb4d1` net/tls: Fix authentication failure in CCM mode `dbe73dace9` parisc: Mark cr16 CPU clocksource unstable on all SMP machines `01300d2150` iwlwifi: mvm: retry init flow if failed `a5d0a72b80` serial: 8250: Fix RTS modem control while in rs485 mode `f9802d7049` serial: 8250_pci: rewrite pericom_do_set_divisor() `50b06889c8` serial: 8250_pci: Fix ACCES entries in pci_serial_quirks array `e1722acf4f` serial: core: fix transmit-buffer reset and memleak `bda142bbeb` serial: tegra: Change lower tolerance baud rate limit for tegra20 and tegra30 `901f7e0aa4` serial: pl011: Add ACPI SBSA UART match id `946ded2287` tty: serial: msm_serial: Deactivate RX DMA for polling support `67d08450a0` x86/64/mm: Map all kernel memory into trampoline_pgd `b3a519b5a5` x86/tsc: Disable clocksource watchdog for TSC on qualified platorms `1ed4a8fd36` x86/tsc: Add a timer to make sure TSC_adjust is always checked `a92f044a9f` usb: typec: tcpm: Wait in SNK_DEBOUNCED until disconnect `6d8c191bf4` USB: NO_LPM quirk Lenovo Powered USB-C Travel Hub `90c915051c` xhci: Fix commad ring abort, write all 64 bits to CRCR register. `1235485c63` vgacon: Propagate console boot parameters before calling `vc_resize' `92b9113c6d` parisc: Fix "make install" on newer debian releases `c27a548d3f` parisc: Fix KBUILD_IMAGE for self-extracting kernel `92f309c838` x86/entry: Add a fence for kernel entry SWAPGS in paranoid_entry() `4bbbc9c4f3` x86/pv: Switch SWAPGS to ALTERNATIVE `4d42b7bcf0` sched/uclamp: Fix rq->uclamp_max not set on first enqueue `2015ffa3a4` x86/xen: Add xenpv_restore_regs_and_return_to_usermode() `8b9279cad2` x86/entry: Use the correct fence macro after swapgs in kernel CR3 `c8e3411918` x86/sev: Fix SEV-ES INS/OUTS instructions for word, dword, and qword `64ca109bf8` KVM: VMX: Set failure code in prepare_vmcs02() `60ce9a7540` KVM: x86/pmu: Fix reserved bits for AMD PerfEvtSeln register `cfebd5a277` atlantic: Remove warn trace message. `95f6fae9a0` atlantic: Fix statistics logic for production hardware `695d9c6bc6` Remove Half duplex mode speed capabilities. `0c67e7b98f` atlantic: Add missing DIDs and fix 115c. `ca350298bc` atlantic: Fix to display FW bundle version instead of FW mac version. `93a4f3f4fd` atlatnic: enable Nbase-t speeds with base-t `44812111a3` atlantic: Increase delay for fw transactions `13f290d5aa` drm/msm: Do hw_init() before capturing GPU state `d646856a60` drm/msm/a6xx: Allocate enough space for GMU registers `a792b3d564` net/smc: Keep smc_close_final rc during active close `e226180acc` net/rds: correct socket tunable error in rds_tcp_tune() `77731fede2` net/smc: fix wrong list_del in smc_lgr_cleanup_early `9a40a1e0eb` ipv4: convert fib_num_tclassid_users to atomic_t `fa973bf5fd` net: annotate data-races on txq->xmit_lock_owner `e26dab79e1` dpaa2-eth: destroy workqueue at the end of remove function `dde240695d` net: marvell: mvpp2: Fix the computation of shared CPUs `3260b8d120` net: usb: lan78xx: lan78xx_phy_init(): use PHY_POLL instead of "0" if no IRQ is available `acef1c2b15` ALSA: intel-dsp-config: add quirk for CML devices based on ES8336 codec `60f0b9c42c` rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer() `35b40f724c` rxrpc: Fix rxrpc_peer leak in rxrpc_look_up_bundle() `4afb32090a` ASoC: tegra: Fix kcontrol put callback in AHUB `fe4eb5297a` ASoC: tegra: Fix kcontrol put callback in DSPK `256aa15aac` ASoC: tegra: Fix kcontrol put callback in DMIC `1cf1f9a1f3` ASoC: tegra: Fix kcontrol put callback in I2S `0ee53a1d88` ASoC: tegra: Fix kcontrol put callback in ADMAIF `e6fb4c3fd3` ASoC: tegra: Fix wrong value type in DSPK `0265ef0dff` ASoC: tegra: Fix wrong value type in DMIC `e66e75fb22` ASoC: tegra: Fix wrong value type in I2S `6b54c0d845` ASoC: tegra: Fix wrong value type in ADMAIF `932b338f4e` mt76: mt7915: fix NULL pointer dereference in mt7915_get_phy_mode `a0335cda6d` selftests: net: Correct case name `f1d43efa59` net/mlx4_en: Fix an use-after-free bug in mlx4_en_try_alloc_resources() `59d2dc7710` arm64: ftrace: add missing BTIs `ef55f0f8af` siphash: use _unaligned version by default `fd52e1f8c0` net: mpls: Fix notifications when deleting a device `15fa12c119` net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic_83xx_add_rings() `c6f340a331` tcp: fix page frag corruption on page fault `aa6c393a3c` natsemi: xtensa: fix section mismatch warnings `289ee320b5` i2c: cbus-gpio: set atomic transfer callback `58d5c53f25` i2c: stm32f7: stop dma transfer in case of NACK `c221244917` i2c: stm32f7: recover the bus on access timeout `8de6ea757c` i2c: stm32f7: flush TX FIFO upon transfer errors `1c75779dd9` wireguard: ratelimiter: use kvcalloc() instead of kvzalloc() `cb2d7c1992` wireguard: receive: drop handshakes if queue lock is contended `8a29a50dbd` wireguard: receive: use ring buffer for incoming handshakes `e3be118327` wireguard: device: reset peer src endpoint when netns exits `f7b6672fab` wireguard: selftests: rename DEBUG_PI_LIST to DEBUG_PLIST `0584bf51c3` wireguard: selftests: actually test for routing loops `3d1dc3c677` wireguard: allowedips: add missing __rcu annotation to satisfy sparse `4caf965f6c` wireguard: selftests: increase default dmesg log size `3d73021f8d` tracing/histograms: String compares should not care about signed values `d4af6d9749` KVM: X86: Use vcpu->arch.walk_mmu for kvm_mmu_invlpg() `c71b5f37b5` KVM: arm64: Avoid setting the upper 32 bits of TCR_EL2 and CPTR_EL2 to 1 `5f33887a36` KVM: x86: Use a stable condition around all VT-d PI paths `7722e88505` KVM: nVMX: Flush current VPID (L1 vs. L2) for KVM_REQ_TLB_FLUSH_GUEST `6a44f200f1` KVM: Disallow user memslot with size that exceeds "unsigned long" `775191dd4c` drm/amd/display: Allow DSC on supported MST branch devices `209d35ee34` ipv6: fix memory leak in fib6_rule_suppress `16c242b091` sata_fsl: fix warning in remove_proc_entry when rmmod sata_fsl `4a46b2f5dc` sata_fsl: fix UAF in sata_fsl_port_stop when rmmod sata_fsl `4baba6ba56` fget: check that the fd still exists after getting a ref to it `80bfed369b` s390/pci: move pseudo-MMIO to prevent MIO overlap `92283c2728` cpufreq: Fix get_cpu_device() failure in add_cpu_dev_symlink() `f717f29e84` ipmi: Move remove_work to dedicated workqueue `de4f5eb02c` rt2x00: do not mark device gone on EPROTO errors during start `c200721f8e` kprobes: Limit max data_size of the kretprobe instances `2a74c13dfe` vrf: Reset IPCB/IP6CB when processing outbound pkts in vrf dev xmit `136cabf157` ACPI: Add stubs for wakeup handler functions `cc443ac5bb` net/smc: Avoid warning of possible recursive locking `ff061b5bda` perf report: Fix memory leaks around perf_tip() `a4c17ebdd6` perf hist: Fix memory leak of a perf_hpp_fmt `d9b72274f3` perf inject: Fix ARM SPE handling `2c15d2a6ba` net: ethernet: dec: tulip: de4x5: fix possible array overflows in type3_infoblock() `f059fa40f0` net: tulip: de4x5: fix the problem that the array 'lp->phy[8]' may be out of bound `4d5968ea06` ipv6: check return value of ipv6_skip_exthdr `22519eff7d` ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port() `9a32d3c08d` ata: ahci: Add Green Sardine vendor ID as board_ahci_mobile `c746945fb6` drm/amd/amdgpu: fix potential memleak `74aafe99ef` drm/amd/amdkfd: Fix kernel panic when reset failed and been triggered again `f0c9f49b0c` scsi: iscsi: Unblock session then wake up error handler `bc8c423a28` thermal: core: Reset previous low and high trip during thermal zone init `8e4d2ac434` btrfs: check-integrity: fix a warning on write caching disabled disk `0395722905` s390/setup: avoid using memblock_enforce_memory_limit `fd1e70ef65` platform/x86: thinkpad_acpi: Fix WWAN device disabled issue after S3 deep `226b21ad01` platform/x86: thinkpad_acpi: Add support for dual fan control `3fc88660ed` net: return correct error code `2c514d2500` atlantic: Fix OOB read and write in hw_atl_utils_fw_rpc_wait `ff6eeb6278` net/smc: Transfer remaining wait queue entries during fallback `e1a165599a` mac80211: do not access the IV when it was stripped `c386d7aa59` drm/sun4i: fix unmet dependency on RESET_CONTROLLER for PHY_SUN6I_MIPI_DPHY `57e36973fa` powerpc/pseries/ddw: Revert "Extend upper limit for huge DMA window for persistent memory" `7b2b7e03e8` gfs2: Fix length of holes reported at end-of-file `664cceab6f` gfs2: release iopen glock early in evict `bcce010f92` ovl: fix deadlock in splice write `dca4f9a581` ovl: simplify file splice `7774dd934a` can: j1939: j1939_tp_cmd_recv(): check the dst address of TP.CM_BAM `60ae63ef19` NFSv42: Fix pagecache invalidation after COPY/CLONE `6e6898e23c` ANDROID: GKI: update abi_gki_aarch64.xml due to bpf changes in 5.10.83 `cd1062d64e` Revert "net: ipv6: add fib6_nh_release_dsts stub" `0bf59ac0b2` Revert "net: nexthop: release IPv6 per-cpu dsts when replacing a nexthop group" `65836a68d9` Revert "mmc: sdhci: Fix ADMA for PAGE_SIZE >= 64KiB" `249dae115a` Merge 5.10.83 into android-5.10 `bc8ae0e2af` Merge branch 'android12-5.10' into `android12-5.10-lts` `a324ad7945` Linux 5.10.83 `45b42cd053` drm/amdgpu/gfx9: switch to golden tsc registers for renoir+ `98b02755d5` net: stmmac: platform: fix build warning when with !CONFIG_PM_SLEEP `a15261d2a1` shm: extend forced shm destroy to support objects from several IPC nses `aa20e966d8` s390/mm: validate VMA in PGSTE manipulation functions `a94e4a7b77` tty: hvc: replace BUG_ON() with negative return value `1c5f722a8f` xen/netfront: don't trust the backend response data blindly `334b0f2787` xen/netfront: disentangle tx_skb_freelist `e17ee047ee` xen/netfront: don't read data from request on the ring page `f5e4937098` xen/netfront: read response from backend only once `1ffb20f052` xen/blkfront: don't trust the backend response data blindly `8e147855fc` xen/blkfront: don't take local copy of a request from the ring page `273f04d5d1` xen/blkfront: read response from backend only once `b98284aa3f` xen: sync include/xen/interface/io/ring.h with Xen's newest version `406f2d5fe3` tracing: Check pid filtering when creating events `4fd0ad08ee` vhost/vsock: fix incorrect used length reported to the guest `fbc0514e1a` iommu/amd: Clarify AMD IOMMUv2 initialization messages `5655b8bccb` smb3: do not error on fsync when readonly `c380062d08` ceph: properly handle statfs on multifs setups `22423c966e` f2fs: set SBI_NEED_FSCK flag when inconsistent node block found `e6ee7abd6b` sched/scs: Reset task stack state in bringup_cpu() `71e38a0c7c` tcp: correctly handle increased zerocopy args struct size `72f2117e45` net: mscc: ocelot: correctly report the timestamping RX filters in ethtool `73115a2b38` net: mscc: ocelot: don't downgrade timestamping RX filters in SIOCSHWTSTAMP `62343dadbb` net: hns3: fix VF RSS failed problem after PF enable multi-TCs `215167df45` net/smc: Don't call clcsock shutdown twice when smc shutdown `6e800ee432` net: vlan: fix underflow for the real_dev refcnt `ae2659d2c6` net/sched: sch_ets: don't peek at classes beyond 'nbands' `e3509feb46` tls: fix replacing proto_ops `22156242b1` tls: splice_read: fix record type check `3b6c71c097` MIPS: use 3-level pgtable for 64KB page size on MIPS_VA_BITS_48 `a6a5d853f1` MIPS: loongson64: fix FTLB configuration `5e823dbee2` igb: fix netpoll exit with traffic `f2a58ff3e3` nvmet: use IOCB_NOWAIT only if the filesystem supports it `12ceb52f2c` net/smc: Fix loop in smc_listen `c94cbd262b` net/smc: Fix NULL pointer dereferencing in smc_vlan_by_tcpsk() `3d4937c6a3` net: phylink: Force retrigger in case of latched link-fail indicator `50162ff3c8` net: phylink: Force link down and retrigger resolve on interface change `95ba8f0d57` lan743x: fix deadlock in lan743x_phy_link_status_change() `c5e4316d9c` tcp_cubic: fix spurious Hystart ACK train detections for not-cwnd-limited flows `3187623096` drm/amd/display: Set plane update flags for all planes in reset `f634c755a0` PM: hibernate: use correct mode for swsusp_close() `440bd9faad` net/ncsi : Add payload to be 32-bit aligned to fix dropped packets `ac88cb3c44` nvmet-tcp: fix incomplete data digest send `8889ff80fd` net: marvell: mvpp2: increase MTU limit when XDP enabled `90d0736876` mlxsw: spectrum: Protect driver from buggy firmware `33d89128a9` mlxsw: Verify the accessed index doesn't exceed the array length `29e1b57347` net/smc: Ensure the active closing peer first closes clcsock `77d9c2efa8` erofs: fix deadlock when shrink erofs slab `9f540c7ffb` scsi: scsi_debug: Zero clear zones at reset write pointer `725ba12895` scsi: core: sysfs: Fix setting device state to SDEV_RUNNING `e65a8707b4` ice: avoid bpf_prog refcount underflow `1eb5395add` ice: fix vsi->txq_map sizing `26ed13d064` net: nexthop: release IPv6 per-cpu dsts when replacing a nexthop group `3c40584595` net: ipv6: add fib6_nh_release_dsts stub `dc2f7e9d8d` net: stmmac: retain PTP clock time during SIOCSHWTSTAMP ioctls `79068e6b1c` net: stmmac: fix system hang caused by eee_ctrl_timer during suspend/resume `cc301ad312` nfp: checking parameter process for rx-usecs/tx-usecs is invalid `9b44cb67d3` ipv6: fix typos in __ip6_finish_output() `6d9e8dabd4` firmware: smccc: Fix check for ARCH_SOC_ID not implemented `bbd1683e79` mptcp: fix delack timer `061542815a` ALSA: intel-dsp-config: add quirk for JSL devices based on ES8336 codec `f5af2def7e` iavf: Prevent changing static ITR values if adaptive moderation is on `5dca8eff46` net: marvell: prestera: fix double free issue on err path `b33c5c8281` drm/vc4: fix error code in vc4_create_object() `2bf9c5a503` scsi: mpt3sas: Fix kernel panic during drive powercycle test `29ecb4c0f0` drm/nouveau/acr: fix a couple NULL vs IS_ERR() checks `0effb7f51b` ARM: socfpga: Fix crash with CONFIG_FORTIRY_SOURCE `86c5adc780` NFSv42: Don't fail clone() unless the OP_CLONE operation failed `c9ba7864d3` firmware: arm_scmi: pm: Propagate return value to caller `8730a679c3` net: ieee802154: handle iftypes as u32 `2925aadd1f` ASoC: codecs: wcd934x: return error code correctly from hw_params `3a25def06d` ASoC: topology: Add missing rwsem around snd_ctl_remove() calls `4a4f900e04` ASoC: qdsp6: q6asm: fix q6asm_dai_prepare error handling `9196a68581` ASoC: qdsp6: q6routing: Conditionally reset FrontEnd Mixer `2be17eca48` ARM: dts: bcm2711: Fix PCIe interrupts `9db1d4a3c2` ARM: dts: BCM5301X: Add interrupt properties to GPIO node `b2cd6fdcbe` ARM: dts: BCM5301X: Fix I2C controller interrupt `b7ef25e8c2` netfilter: flowtable: fix IPv6 tunnel addr match `d689176e0e` netfilter: ipvs: Fix reuse connection if RS weight is 0 `994065f6ef` netfilter: ctnetlink: do not erase error code with EINVAL `a3d829e5f3` netfilter: ctnetlink: fix filtering with CTA_TUPLE_REPLY `a8a917058f` proc/vmcore: fix clearing user buffer by properly using clear_user() `1f520a0d78` PCI: aardvark: Fix link training `aec0751f61` PCI: aardvark: Simplify initialization of rootcap on virtual bridge `df57480988` PCI: aardvark: Implement re-issuing config requests on CRS response `e7f2e2c758` PCI: aardvark: Update comment about disabling link training `2b7bc1c4b2` PCI: aardvark: Deduplicate code in advk_pcie_rd_conf() `dfe906da9a` powerpc/32: Fix hardlockup on vmap stack overflow `bf00edd9e6` mdio: aspeed: Fix "Link is Down" issue `14c3ce30dd` mmc: sdhci: Fix ADMA for PAGE_SIZE >= 64KiB `63195705b3` mmc: sdhci-esdhc-imx: disable CMDQ support `092a58f0d9` tracing: Fix pid filtering when triggers are attached `68fa6bf7f1` tracing/uprobe: Fix uprobe_perf_open probes iteration `b777c866aa` KVM: PPC: Book3S HV: Prevent POWER7/8 TLB flush flushing SLB `bfed9c2f2f` xen: detect uninitialized xenbus in xenbus_init `e1d492c275` xen: don't continue xenstore initialization in case of errors `8f4d0719f3` fuse: release pipe buf after last use `8d0163cec7` staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect() `0bfed81b2c` staging: greybus: Add missing rwsem around snd_ctl_remove() calls `146283f16b` staging/fbtft: Fix backlight `8fc5e3c7ca` HID: wacom: Use "Confidence" flag to prevent reporting invalid contacts `6ca32e2e77` Revert "parisc: Fix backtrace to always include init funtion names" `3a4aeb37a7` media: cec: copy sequence field for the reply `3798218a1a` ALSA: hda/realtek: Fix LED on HP ProBook 435 G7 `60274e248e` ALSA: hda/realtek: Add quirk for ASRock NUC Box 1100 `172167bc8d` ALSA: ctxfi: Fix out-of-range access `4402cf0402` binder: fix test regression due to sender_euid change `aea184ae64` usb: hub: Fix locking issues with address0_mutex `5bf3a0c778` usb: hub: Fix usb enumeration issue due to address0 race `00f1038c72` usb: typec: fusb302: Fix masking of comparator and bc_lvl interrupts `56fbab4937` usb: chipidea: ci_hdrc_imx: fix potential error pointer dereference in probe `b70ff391de` net: nexthop: fix null pointer dereference when IPv6 is not enabled `0755f3f322` usb: dwc3: gadget: Fix null pointer exception `140e2df472` usb: dwc3: gadget: Check for L1/L2/U3 for Start Transfer `3abf746e80` usb: dwc3: gadget: Ignore NoStream after End Transfer `2b7ab82f51` usb: dwc2: hcd_queue: Fix use of floating point literal `4b18ccad96` usb: dwc2: gadget: Fix ISOC flow for elapsed frames `16f1cac8f7` USB: serial: option: add Fibocom FM101-GL variants `ff72128636` USB: serial: option: add Telit LE910S1 0x9200 composition `854c14b2a1` ACPI: Get acpi_device's parent from the parent field `33fe044f6a` bpf: Fix toctou on read-only map's constant scalar tracking `8d21bcc704` Merge 5.10.82 into android12-5.10-lts `d5259a9ba6` Linux 5.10.82 `d35250ec5a` Revert "perf: Rework perf_event_exit_event()" `6718f79c40` ALSA: hda: hdac_stream: fix potential locking issue in snd_hdac_stream_assign() `f751fb54f2` ALSA: hda: hdac_ext_stream: fix potential locking issues `b3ef5051a7` x86/Kconfig: Fix an unused variable error in dell-smm-hwmon `2ec78af152` btrfs: update device path inode time instead of bd_inode `9febc9d8d2` fs: export an inode_update_time helper `cade5d7a28` ice: Delete always true check of PF pointer `fe65cecd27` usb: max-3421: Use driver data instead of maintaining a list of bound devices `6186c7b9bd` ASoC: DAPM: Cover regression by kctl change notification fix `b17dd53cac` selinux: fix NULL-pointer dereference when hashtab allocation fails `1ae0d59c4f` RDMA/netlink: Add __maybe_unused to static inline in C file `40bc831ab5` hugetlbfs: flush TLBs correctly after huge_pmd_unshare `86ab0f8ff0` scsi: ufs: core: Fix task management completion timeout race `ddd4e46cff` scsi: ufs: core: Fix task management completion `04c586a601` drm/amdgpu: fix set scaling mode Full/Full aspect/Center not works on vga and dvi connectors `47901b77bf` drm/i915/dp: Ensure sink rate values are always valid `82de15ca6b` drm/nouveau: clean up all clients on device removal `c81c90fbf5` drm/nouveau: use drm_dev_unplug() during device removal `9221aff33e` drm/nouveau: Add a dedicated mutex for the clients list `65517975cb` drm/udl: fix control-message timeout `3d68d6ee83` drm/amd/display: Update swizzle mode enums `7b97b5776d` cfg80211: call cfg80211_stop_ap when switch from P2P_GO type `1ab297809d` parisc/sticon: fix reverse colors `6adbc07ebc` btrfs: fix memory ordering between normal and ordered work functions `6289b494b3` net: stmmac: socfpga: add runtime suspend/resume callback for stratix10 platform `5875f87e2f` udf: Fix crash after seekdir `6b43cf113a` KVM: nVMX: don't use vcpu->arch.efer when checking host state on nested state load `cc73242889` block: Check ADMIN before NICE for IOPRIO_CLASS_RT `63e2f34abc` s390/kexec: fix memory leak of ipl report buffer `b1cf0d2fc4` scsi: qla2xxx: Fix mailbox direction flags in qla2xxx_get_adapter_id() `08fd6df8ea` powerpc/8xx: Fix pinned TLBs with CONFIG_STRICT_KERNEL_RWX `9c177eee11` x86/hyperv: Fix NULL deref in set_hv_tscchange_cb() if Hyper-V setup fails `b2e2fb6407` mm: kmemleak: slob: respect SLAB_NOLEAKTRACE flag `99032adf7d` ipc: WARN if trying to remove ipc object which is absent `a7d9162586` tipc: check for null after calling kmemdup `f5995fcb75` hexagon: clean up timer-regs.h `0854c9ff21` hexagon: export raw I/O routines for modules `528971af64` tun: fix bonding active backup with arp monitoring `af1d3c437e` arm64: vdso32: suppress error message for 'make mrproper' `97653ba562` net: stmmac: dwmac-rk: Fix ethernet on rk3399 based devices `4cebe23c03` s390/kexec: fix return code handling `d4fb80ae98` perf/x86/intel/uncore: Fix IIO event constraints for Skylake Server `175135a5ea` perf/x86/intel/uncore: Fix filter_tid mask for CHA events on Skylake Server `84f64c7c52` pinctrl: qcom: sdm845: Enable dual edge errata `a8230fb74b` KVM: PPC: Book3S HV: Use GLOBAL_TOC for kvmppc_h_set_dabr/xdabr() `4e6cce20fb` e100: fix device suspend/resume `34e54703fb` NFC: add NCI_UNREG flag to eliminate the race `b2a60b4a01` net: nfc: nci: Change the NCI close sequence `73a0d12114` NFC: reorder the logic in nfc_{un,}register_device `cb14b196d9` NFC: reorganize the functions in nci_request `41dc8dcb49` i40e: Fix display error code in dmesg `028ea7b090` i40e: Fix creation of first queue by omitting it if is not power of two `69868d7a88` i40e: Fix warning message and call stack during rmmod i40e driver `20645482d1` i40e: Fix ping is lost after configuring ADq on VF `6d64743045` i40e: Fix changing previously set num_queue_pairs for PFs `f866513ead` i40e: Fix NULL ptr dereference on VSI filter sync `0719488565` i40e: Fix correct max_pkt_size on VF RX queue `8e6bae950d` net: virtio_net_hdr_to_skb: count transport header in UFO `1c4099dc0d` net: dpaa2-eth: fix use-after-free in dpaa2_eth_remove `381a30f7e3` net: sched: act_mirred: drop dst for the direction from egress to ingress `a792e0128d` scsi: core: sysfs: Fix hang when device state is set via sysfs `4b4302a02b` net/mlx5: E-Switch, return error if encap isn't supported `68748ea4d1` net/mlx5: E-Switch, Change mode lock from mutex to rw semaphore `6190e1a2d4` net/mlx5: Lag, update tracker when state change event received `471c492890` net/mlx5e: nullify cq->dbg pointer in mlx5_debug_cq_remove() `d1f8f1e04a` platform/x86: hp_accel: Fix an error handling path in 'lis3lv02d_probe()' `da16f907cb` mips: lantiq: add support for clk_get_parent() `17dfbe1b2f` mips: bcm63xx: add support for clk_get_parent() `34284b3a2f` MIPS: generic/yamon-dt: fix uninitialized variable error `a61f90b216` iavf: Fix for setting queues to 0 `a8a1e601c2` iavf: Fix for the false positive ASQ/ARQ errors while issuing VF reset `77f5ae5441` iavf: validate pointers `ddcc185baa` iavf: prevent accidental free of filter structure `a420b26128` iavf: Fix failure to exit out from last all-multicast mode `78638b4713` iavf: free q_vectors before queues in iavf_disable_vf `84a13bfe27` iavf: check for null in iavf_fix_features `1555d83ddb` iavf: Fix return of set the new channel count `09decd0a10` net/smc: Make sure the link_id is unique `437e21e2c9` sock: fix /proc/net/sockstat underflow in sk_clone_lock() `4da14ddad1` net: reduce indentation level in sk_clone_lock() `9c3c2ef6ca` tipc: only accept encrypted MSG_CRYPTO msgs `3d59416647` bnxt_en: reject indirect blk offload when hw-tc-offload is off `4fc060abaa` net: bnx2x: fix variable dereferenced before check `3ae75cc38a` net: ipa: disable HOLB drop when updating timer `3984876f91` tracing: Add length protection to histogram string copies `900ea2f628` tcp: Fix uninitialized access in skb frags array for Rx 0cp. `d1a6150ca6` net-zerocopy: Refactor skb frag fast-forward op. `5f7aadf03f` net-zerocopy: Copy straggler unaligned data for TCP Rx. zerocopy. `8da80ec6d4` drm/nouveau: hdmigv100.c: fix corrupted HDMI Vendor InfoFrame `aa31e3fda6` perf tests: Remove bash construct from record+zstd_comp_decomp.sh `2ada5c0877` perf bench futex: Fix memory leak of perf_cpu_map__new() `11589d3144` perf bpf: Avoid memory leak from perf_env__insert_btf() `5b2f2cbbc9` tracing/histogram: Do not copy the fixed-size char array field over the field size `1d61255327` blkcg: Remove extra blkcg_bio_issue_init `dadcc935f4` perf/x86/vlbr: Add c->flags to vlbr event constraints `68fcb52b61` sched/core: Mitigate race cpus_share_cache()/update_top_cache_domain() `91191d47af` mips: BCM63XX: ensure that CPU_SUPPORTS_32BIT_KERNEL is set `fbe27d0e1d` clk: qcom: gcc-msm8996: Drop (again) gcc_aggre1_pnoc_ahb_clk `9b3d3b72be` clk/ast2600: Fix soc revision for AHB `03bc8ea0ae` clk: ingenic: Fix bugs with divided dividers `7a5439474e` f2fs: fix incorrect return value in f2fs_sanity_check_ckpt() `0a17fff6f0` f2fs: compress: disallow disabling compress on non-empty compressed file `4ce685cc9a` sh: define __BIG_ENDIAN for math-emu `73383f670d` sh: math-emu: drop unused functions `f44defd569` sh: fix kconfig unmet dependency warning for FRAME_POINTER `3d7c5d08a4` f2fs: fix to use WHINT_MODE `e8bd5e3305` f2fs: fix up f2fs_lookup tracepoints `5d5bf899e5` maple: fix wrong return value of maple_bus_init(). `8748f08a2f` sh: check return code of request_irq `29b742690a` powerpc/8xx: Fix Oops with STRICT_KERNEL_RWX without DEBUG_RODATA_TEST `bc4bc07fb4` powerpc/dcr: Use cmplwi instead of 3-argument cmpli `1ac6cd87d8` ALSA: gus: fix null pointer dereference on pointer block `850416bead` ARM: dts: qcom: fix memory and mdio nodes naming for RB3011 `8c4d9764e7` powerpc/5200: dts: fix memory node unit name `833ad27927` iio: imu: st_lsm6dsx: Avoid potential array overflow in st_lsm6dsx_set_odr() `e0fef1c8cd` scsi: target: Fix alua_tg_pt_gps_count tracking `8176441373` scsi: target: Fix ordered tag handling `8440377e1a` scsi: scsi_debug: Fix out-of-bound read in resp_report_tgtpgs() `3e20cb0726` scsi: scsi_debug: Fix out-of-bound read in resp_readcap16() `9635581aa9` MIPS: sni: Fix the build `77e9fed330` tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc `da82a207c4` ALSA: ISA: not for M68K `c788ac4750` ARM: dts: ls1021a-tsn: use generic "jedec,spi-nor" compatible for flash `cbba09f869` ARM: dts: ls1021a: move thermal-zones node out of soc/ `2474eb7fc3` usb: host: ohci-tmio: check return value after calling platform_get_resource() `02d9ebe0cc` ARM: dts: omap: fix gpmc,mux-add-data type `c6c9bbe7fa` firmware_loader: fix pre-allocated buf built-in firmware use `02a22911ed` ALSA: intel-dsp-config: add quirk for APL/GLK/TGL devices based on ES8336 codec `055eced3ed` scsi: advansys: Fix kernel pointer leak `97f3cbb57b` ASoC: nau8824: Add DMI quirk mechanism for active-high jack-detect `ae2207a078` clk: imx: imx6ul: Move csi_sel mux to correct base register `0c6daf4799` ASoC: SOF: Intel: hda-dai: fix potential locking issue `19d193c576` arm64: dts: freescale: fix arm,sp805 compatible string `36446a094a` arm64: dts: qcom: ipq6018: Fix qcom,controlled-remotely property `e52fecdd0c` arm64: dts: qcom: msm8998: Fix CPU/L2 idle state latency and residency `568d94c5c9` ARM: BCM53016: Specify switch ports for Meraki MR32 `3a53d9ad9b` staging: rtl8723bs: remove possible deadlock when disconnect (v2) `3544c33879` ARM: dts: ux500: Skomer regulator fixes `eff8b76284` usb: typec: tipd: Remove WARN_ON in tps6598x_block_read `679eee466d` usb: musb: tusb6010: check return value after calling platform_get_resource() `2492de6f5e` bus: ti-sysc: Use context lost quirk for otg `5eca1c8412` bus: ti-sysc: Add quirk handling for reinit on context lost `dcd6eefcee` RDMA/bnxt_re: Check if the vlan is valid before reporting `4e5bc9fb23` arm64: dts: hisilicon: fix arm,sp805 compatible string `109a63bb07` arm64: dts: rockchip: Disable CDN DP on Pinebook Pro `c097bd5a59` scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq() `db90c50783` ARM: dts: NSP: Fix mpcore, mmc node names `5010df76ab` staging: wfx: ensure IRQ is ready before enabling it `2651d06e46` arm64: dts: allwinner: a100: Fix thermal zone node name `fa98ac472e` arm64: dts: allwinner: h5: Fix GPU thermal zone node name `aed195558f` ARM: dts: sunxi: Fix OPPs node name `e2e1056312` arm64: zynqmp: Fix serial compatible string `48f154e8b9` arm64: zynqmp: Do not duplicate flash partition label property Some minor ABI signatures have changed due to internal structures changing. All of these have been pre-approved already: Leaf changes summary: 3 artifacts changed Changed leaf types summary: 3 leaf types changed Removed/Changed/Added functions summary: 0 Removed, 0 Changed, 0 Added function Removed/Changed/Added variables summary: 0 Removed, 0 Changed, 0 Added variable 'struct bpf_map at bpf.h:146:1' changed: type size hasn't changed there are data member changes: type 'typedef u64' of 'bpf_map::writecnt' changed: typedef name changed from u64 to atomic64_t at types.h:175:1 underlying type 'typedef __u64' at int-ll64.h:31:1 changed: entity changed from 'typedef __u64' to 'struct {s64 counter;}' at types.h:173:1 type size hasn't changed 4790 impacted interfaces 'struct bpf_offloaded_map at bpf.h:229:1' changed (indirectly): type size hasn't changed there are data member changes: type 'struct bpf_map' of 'bpf_offloaded_map::map' changed, as reported earlier 4790 impacted interfaces 'struct fib_rules_ops at fib_rules.h:60:1' changed: type size hasn't changed there are data member changes: type 'typedef bool (fib_rule, fib_lookup_arg)' of 'fib_rules_ops::suppress' changed: pointer type changed from: 'typedef bool (fib_rule, fib_lookup_arg)' to: 'typedef bool (fib_rule, int, fib_lookup_arg)*' 4790 impacted interfaces Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: Id7f25c9e0edb30698178b138cc1b15a82ca5ef48	2022-03-21 14:29:02 +01:00
Randy Dunlap	56186c7e4a	UPSTREAM: ARM: Spectre-BHB: provide empty stub for non-config commit `6845376713` upstream. When CONFIG_GENERIC_CPU_VULNERABILITIES is not set, references to spectre_v2_update_state() cause a build error, so provide an empty stub for that function when the Kconfig option is not set. Fixes this build error: arm-linux-gnueabi-ld: arch/arm/mm/proc-v7-bugs.o: in function `cpu_v7_bugs_init': proc-v7-bugs.c:(.text+0x52): undefined reference to `spectre_v2_update_state' arm-linux-gnueabi-ld: proc-v7-bugs.c:(.text+0x82): undefined reference to `spectre_v2_update_state' Bug: 215557547 Fixes: `b9baf5c8c5` ("ARM: Spectre-BHB workaround") Signed-off-by: Randy Dunlap <rdunlap@infradead.org> Reported-by: kernel test robot <lkp@intel.com> Cc: Russell King <rmk+kernel@armlinux.org.uk> Cc: Catalin Marinas <catalin.marinas@arm.com> Cc: linux-arm-kernel@lists.infradead.org Cc: patches@armlinux.org.uk Acked-by: Russell King (Oracle) <rmk+kernel@armlinux.org.uk> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I68a933128ef95a7ce0efc7fcda6fa34ac9b829b7	2022-03-14 14:49:14 +01:00
Nathan Chancellor	fdf3cb8a00	UPSTREAM: ARM: Do not use NOCROSSREFS directive with ld.lld commit `36168e387f` upstream. ld.lld does not support the NOCROSSREFS directive at the moment, which breaks the build after commit `b9baf5c8c5` ("ARM: Spectre-BHB workaround"): ld.lld: error: ./arch/arm/kernel/vmlinux.lds:34: AT expected, but got NOCROSSREFS Support for this directive will eventually be implemented, at which point a version check can be added. To avoid breaking the build in the meantime, just define NOCROSSREFS to nothing when using ld.lld, with a link to the issue for tracking. Bug: 215557547 Cc: stable@vger.kernel.org Fixes: `b9baf5c8c5` ("ARM: Spectre-BHB workaround") Link: https://github.com/ClangBuiltLinux/linux/issues/1609 Signed-off-by: Nathan Chancellor <nathan@kernel.org> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I6c1ddb098c415e848b5422e768c483a04005079a	2022-03-14 14:46:49 +01:00
Russell King (Oracle)	57bc1e13f0	UPSTREAM: ARM: fix co-processor register typo commit `33970b031d` upstream. In the recent Spectre BHB patches, there was a typo that is only exposed in certain configurations: mcr p15,0,XX,c7,r5,4 should have been mcr p15,0,XX,c7,c5,4 Bug: 215557547 Reported-by: kernel test robot <lkp@intel.com> Fixes: `b9baf5c8c5` ("ARM: Spectre-BHB workaround") Signed-off-by: Russell King (Oracle) <rmk+kernel@armlinux.org.uk> Acked-by: Catalin Marinas <catalin.marinas@arm.com> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: Ic7ef143df05901125d0d936d5b70000320b9debe	2022-03-14 14:46:40 +01:00
Russell King (Oracle)	afbbe4048f	UPSTREAM: ARM: Spectre-BHB workaround commit `b9baf5c8c5` upstream. Workaround the Spectre BHB issues for Cortex-A15, Cortex-A57, Cortex-A72, Cortex-A73 and Cortex-A75. We also include Brahma B15 as well to be safe, which is affected by Spectre V2 in the same ways as Cortex-A15. Bug: 215557547 Reviewed-by: Catalin Marinas <catalin.marinas@arm.com> Signed-off-by: Russell King (Oracle) <rmk+kernel@armlinux.org.uk> [changes due to lack of SYSTEM_FREEING_INITMEM - gregkh] Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: Ic8fcc01c10a8d8ad1293e6d5d8a5f2da592234c7	2022-03-14 14:46:06 +01:00
Russell King (Oracle)	5a41f364e7	UPSTREAM: ARM: use LOADADDR() to get load address of sections commit `8d9d651ff2` upstream. Use the linker's LOADADDR() macro to get the load address of the sections, and provide a macro to set the start and end symbols. Bug: 215557547 Acked-by: Catalin Marinas <catalin.marinas@arm.com> Signed-off-by: Russell King (Oracle) <rmk+kernel@armlinux.org.uk> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I464f69bdc337ce004d521f20eed7261faaa2f951	2022-03-14 14:45:55 +01:00
Russell King (Oracle)	5a64a66802	UPSTREAM: ARM: report Spectre v2 status through sysfs commit `9dd78194a3` upstream. As per other architectures, add support for reporting the Spectre vulnerability status via sysfs CPU. Bug: 215557547 Acked-by: Catalin Marinas <catalin.marinas@arm.com> Signed-off-by: Russell King (Oracle) <rmk+kernel@armlinux.org.uk> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I426186db1fa21e590de65b70ed531fbf086b176d	2022-03-14 14:45:16 +01:00
Greg Kroah-Hartman	4ec3c2eea5	This is the 5.10.94 stable release -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmHya+IACgkQONu9yGCS aT7k/RAAqdd8bNhAiO6iDpvZbQtxq9jepx4KCkcd+gsYvSvePEnBQHaTaavfCK/7 +taWsc2i6Hwc1Z4oVfUiU02cCsqMJJXqb0nfJaavE5cZspbTc7QeS0zv9BkzSKUZ +DxXWyjzeJquI7EbdU0n7inb0iwvBxmTGNIg2j1pPi81Q7XnpjmDsSvuoftRQ0AN DGYefowWL1VcfsZRfhEudnpxWC/DjOdB8zD34SgXxKat6/O8YG4T5pM2BOUlKtOW QcXFhpG6gU0XqmI3QQDvAESujOQxzC1u3AwIOHYJ/tlFYsUJXjiZIEVnMqPYGpNl fXS8xcNSeo6fipXWkzsc489Tteq9H+bfm8sBG0jhExRnyGckkihJDhRFZ9yBrzo/ 1PtUdUIJ4d5fUmdZp7gxucncFyIYFsyJm/5nsYmObP794oStPGKsH8llhp/PcEFF ua1+Gy2WW2f6BOaDVFmt+jWZRMa/3oZnFhe8/FPRsAjGOj+q/+V6bsksGDYupsrM x8/QQI6OVlnOZsrdpX7zkW46qLov0J0bO9cANTm7kcRaesrkikFKqiIF2uIW2OU6 W0tZZf0Jy/gSLEljkZ3SuMHCmldWKm/KxMYSjnQ3Y34QvOLYPNAZGF78rbV3s8/0 otGR3ra5TKCz1kxuDaE1FqZXxpPQidXbF4QUoaRIaPwA1k5NvLY= =ktJL -----END PGP SIGNATURE----- Merge 5.10.94 into android12-5.10-lts Changes in 5.10.94 KVM: VMX: switch blocked_vcpu_on_cpu_lock to raw spinlock HID: uhid: Fix worker destroying device without any protection HID: wacom: Reset expected and received contact counts at the same time HID: wacom: Ignore the confidence flag when a touch is removed HID: wacom: Avoid using stale array indicies to read contact count f2fs: fix to do sanity check in is_alive() nfc: llcp: fix NULL error pointer dereference on sendmsg() after failed bind() mtd: rawnand: gpmi: Add ERR007117 protection for nfc_apply_timings mtd: rawnand: gpmi: Remove explicit default gpmi clock setting for i.MX6 mtd: Fixed breaking list in __mtd_del_partition. mtd: rawnand: davinci: Don't calculate ECC when reading page mtd: rawnand: davinci: Avoid duplicated page read mtd: rawnand: davinci: Rewrite function description x86/gpu: Reserve stolen memory for first integrated Intel GPU tools/nolibc: x86-64: Fix startup code bug tools/nolibc: i386: fix initial stack alignment tools/nolibc: fix incorrect truncation of exit code rtc: cmos: take rtc_lock while reading from CMOS media: v4l2-ioctl.c: readbuffers depends on V4L2_CAP_READWRITE media: flexcop-usb: fix control-message timeouts media: mceusb: fix control-message timeouts media: em28xx: fix control-message timeouts media: cpia2: fix control-message timeouts media: s2255: fix control-message timeouts media: dib0700: fix undefined behavior in tuner shutdown media: redrat3: fix control-message timeouts media: pvrusb2: fix control-message timeouts media: stk1160: fix control-message timeouts media: cec-pin: fix interrupt en/disable handling can: softing_cs: softingcs_probe(): fix memleak on registration failure iio: adc: ti-adc081c: Partial revert of removal of ACPI IDs lkdtm: Fix content of section containing lkdtm_rodata_do_nothing() iommu/io-pgtable-arm-v7s: Add error handle for page table allocation failure gpu: host1x: Add back arm_iommu_detach_device() dma_fence_array: Fix PENDING_ERROR leak in dma_fence_array_signaled() PCI: Add function 1 DMA alias quirk for Marvell 88SE9125 SATA controller mm_zone: add function to check if managed dma zone exists dma/pool: create dma atomic pool only if dma zone has managed pages mm/page_alloc.c: do not warn allocation failure on zone DMA if no managed pages shmem: fix a race between shmem_unused_huge_shrink and shmem_evict_inode drm/ttm: Put BO in its memory manager's lru list Bluetooth: L2CAP: Fix not initializing sk_peer_pid drm/bridge: display-connector: fix an uninitialized pointer in probe() drm: fix null-ptr-deref in drm_dev_init_release() drm/panel: kingdisplay-kd097d04: Delete panel on attach() failure drm/panel: innolux-p079zca: Delete panel on attach() failure drm/rockchip: dsi: Fix unbalanced clock on probe error drm/rockchip: dsi: Hold pm-runtime across bind/unbind drm/rockchip: dsi: Disable PLL clock on bind error drm/rockchip: dsi: Reconfigure hardware on resume() Bluetooth: cmtp: fix possible panic when cmtp_init_sockets() fails clk: bcm-2835: Pick the closest clock rate clk: bcm-2835: Remove rounding up the dividers drm/vc4: hdmi: Set a default HSM rate wcn36xx: ensure pairing of init_scan/finish_scan and start_scan/end_scan wcn36xx: Indicate beacon not connection loss on MISSED_BEACON_IND wcn36xx: Fix DMA channel enable/disable cycle wcn36xx: Release DMA channel descriptor allocations wcn36xx: Put DXE block into reset before freeing memory wcn36xx: populate band before determining rate on RX wcn36xx: fix RX BD rate mapping for 5GHz legacy rates ath11k: Send PPDU_STATS_CFG with proper pdev mask to firmware mtd: hyperbus: rpc-if: Check return value of rpcif_sw_init() media: videobuf2: Fix the size printk format media: atomisp: add missing media_device_cleanup() in atomisp_unregister_entities() media: atomisp: fix punit_ddr_dvfs_enable() argument for mrfld_power up case media: atomisp: fix inverted logic in buffers_needed() media: atomisp: do not use err var when checking port validity for ISP2400 media: atomisp: fix inverted error check for ia_css_mipi_is_source_port_valid() media: atomisp: fix ifdefs in sh_css.c media: staging: media: atomisp: pci: Balance braces around conditional statements in file atomisp_cmd.c media: atomisp: add NULL check for asd obtained from atomisp_video_pipe media: atomisp: fix enum formats logic media: atomisp: fix uninitialized bug in gmin_get_pmic_id_and_addr() media: aspeed: fix mode-detect always time out at 2nd run media: em28xx: fix memory leak in em28xx_init_dev media: aspeed: Update signal status immediately to ensure sane hw state arm64: dts: amlogic: meson-g12: Fix GPU operating point table node name arm64: dts: amlogic: Fix SPI NOR flash node name for ODROID N2/N2+ arm64: dts: meson-gxbb-wetek: fix HDMI in early boot arm64: dts: meson-gxbb-wetek: fix missing GPIO binding fs: dlm: use sk->sk_socket instead of con->sock fs: dlm: don't call kernel_getpeername() in error_report() memory: renesas-rpc-if: Return error in case devm_ioremap_resource() fails Bluetooth: stop proccessing malicious adv data ath11k: Fix ETSI regd with weather radar overlap ath11k: clear the keys properly via DISABLE_KEY ath11k: reset RSN/WPA present state for open BSS tee: fix put order in teedev_close_context() fs: dlm: fix build with CONFIG_IPV6 disabled drm/vboxvideo: fix a NULL vs IS_ERR() check arm64: dts: renesas: cat875: Add rx/tx delays media: dmxdev: fix UAF when dvb_register_device() fails crypto: qce - fix uaf on qce_ahash_register_one crypto: qce - fix uaf on qce_skcipher_register_one mtd: hyperbus: rpc-if: fix bug in rpcif_hb_remove ARM: dts: stm32: fix dtbs_check warning on ili9341 dts binding on stm32f429 disco crypto: qat - fix spelling mistake: "messge" -> "message" crypto: qat - remove unnecessary collision prevention step in PFVF crypto: qat - make pfvf send message direction agnostic crypto: qat - fix undetected PFVF timeout in ACK loop ath11k: Use host CE parameters for CE interrupts configuration arm64: dts: ti: k3-j721e: correct cache-sets info tty: serial: atmel: Check return code of dmaengine_submit() tty: serial: atmel: Call dma_async_issue_pending() mfd: atmel-flexcom: Remove #ifdef CONFIG_PM_SLEEP mfd: atmel-flexcom: Use .resume_noirq media: rcar-csi2: Correct the selection of hsfreqrange media: imx-pxp: Initialize the spinlock prior to using it media: si470x-i2c: fix possible memory leak in si470x_i2c_probe() media: mtk-vcodec: call v4l2_m2m_ctx_release first when file is released media: coda: fix CODA960 JPEG encoder buffer overflow media: venus: pm_helpers: Control core power domain manually media: venus: core, venc, vdec: Fix probe dependency error media: venus: core: Fix a potential NULL pointer dereference in an error handling path media: venus: core: Fix a resource leak in the error handling path of 'venus_probe()' thermal/drivers/imx: Implement runtime PM support netfilter: bridge: add support for pppoe filtering arm64: dts: qcom: msm8916: fix MMC controller aliases cgroup: Trace event cgroup id fields should be u64 ACPI: EC: Rework flushing of EC work while suspended to idle thermal/drivers/imx8mm: Enable ADC when enabling monitor drm/amdgpu: Fix a NULL pointer dereference in amdgpu_connector_lcd_native_mode() drm/radeon/radeon_kms: Fix a NULL pointer dereference in radeon_driver_open_kms() arm64: dts: ti: k3-j7200: Fix the L2 cache sets arm64: dts: ti: k3-j721e: Fix the L2 cache sets arm64: dts: ti: k3-j7200: Correct the d-cache-sets info tty: serial: uartlite: allow 64 bit address serial: amba-pl011: do not request memory region twice floppy: Fix hang in watchdog when disk is ejected staging: rtl8192e: return error code from rtllib_softmac_init() staging: rtl8192e: rtllib_module: fix error handle case in alloc_rtllib() Bluetooth: btmtksdio: fix resume failure sched/fair: Fix detection of per-CPU kthreads waking a task sched/fair: Fix per-CPU kthread and wakee stacking for asym CPU capacity bpf: Adjust BTF log size limit. bpf: Disallow BPF_LOG_KERNEL log level for bpf(BPF_BTF_LOAD) bpf: Remove config check to enable bpf support for branch records arm64: lib: Annotate {clear, copy}_page() as position-independent arm64: clear_page() shouldn't use DC ZVA when DCZID_EL0.DZP == 1 media: dib8000: Fix a memleak in dib8000_init() media: saa7146: mxb: Fix a NULL pointer dereference in mxb_attach() media: si2157: Fix "warm" tuner state detection wireless: iwlwifi: Fix a double free in iwl_txq_dyn_alloc_dma sched/rt: Try to restart rt period timer when rt runtime exceeded drm/msm/dp: displayPort driver need algorithm rational rcu/exp: Mark current CPU as exp-QS in IPI loop second pass mwifiex: Fix possible ABBA deadlock xfrm: fix a small bug in xfrm_sa_len() x86/uaccess: Move variable into switch case statement selftests: clone3: clone3: add case CLONE3_ARGS_NO_TEST selftests: harness: avoid false negatives if test has no ASSERTs crypto: stm32 - Fix last sparse warning in stm32_cryp_check_ctr_counter crypto: stm32/cryp - fix CTR counter carry crypto: stm32/cryp - fix xts and race condition in crypto_engine requests crypto: stm32/cryp - check early input data crypto: stm32/cryp - fix double pm exit crypto: stm32/cryp - fix lrw chaining mode crypto: stm32/cryp - fix bugs and crash in tests crypto: stm32 - Revert broken pm_runtime_resume_and_get changes ath11k: Fix deleting uninitialized kernel timer during fragment cache flush ARM: dts: gemini: NAS4220-B: fis-index-block with 128 KiB sectors media: dw2102: Fix use after free media: msi001: fix possible null-ptr-deref in msi001_probe() media: coda/imx-vdoa: Handle dma_set_coherent_mask error codes ath11k: Fix a NULL pointer dereference in ath11k_mac_op_hw_scan() arm64: dts: qcom: c630: Fix soundcard setup arm64: dts: qcom: ipq6018: Fix gpio-ranges property drm/msm/dpu: fix safe status debugfs file drm/bridge: ti-sn65dsi86: Set max register for regmap drm/tegra: vic: Fix DMA API misuse media: hantro: Fix probe func error path xfrm: interface with if_id 0 should return error xfrm: state and policy should fail if XFRMA_IF_ID 0 ARM: 9159/1: decompressor: Avoid UNPREDICTABLE NOP encoding usb: ftdi-elan: fix memory leak on device disconnect arm64: dts: marvell: cn9130: add GPIO and SPI aliases arm64: dts: marvell: cn9130: enable CP0 GPIO controllers ARM: dts: armada-38x: Add generic compatible to UART nodes iwlwifi: mvm: fix 32-bit build in FTM iwlwifi: mvm: test roc running status bits before removing the sta mmc: meson-mx-sdhc: add IRQ check mmc: meson-mx-sdio: add IRQ check selinux: fix potential memleak in selinux_add_opt() um: fix ndelay/udelay defines um: virtio_uml: Fix time-travel external time propagation Bluetooth: L2CAP: Fix using wrong mode bpftool: Enable line buffering for stdout backlight: qcom-wled: Validate enabled string indices in DT backlight: qcom-wled: Pass number of elements to read to read_u32_array backlight: qcom-wled: Fix off-by-one maximum with default num_strings backlight: qcom-wled: Override default length with qcom,enabled-strings backlight: qcom-wled: Use cpu_to_le16 macro to perform conversion backlight: qcom-wled: Respect enabled-strings in set_brightness software node: fix wrong node passed to find nargs_prop Bluetooth: hci_qca: Stop IBS timer during BT OFF x86/boot/compressed: Move CLANG_FLAGS to beginning of KBUILD_CFLAGS hwmon: (mr75203) fix wrong power-up delay value x86/mce/inject: Avoid out-of-bounds write when setting flags ACPI: scan: Create platform device for BCM4752 and LNV4752 ACPI nodes pcmcia: rsrc_nonstatic: Fix a NULL pointer dereference in __nonstatic_find_io_region() pcmcia: rsrc_nonstatic: Fix a NULL pointer dereference in nonstatic_find_mem_region() power: reset: mt6397: Check for null res pointer netfilter: ipt_CLUSTERIP: fix refcount leak in clusterip_tg_check() bpf: Don't promote bogus looking registers after null check. bpf: Fix SO_RCVBUF/SO_SNDBUF handling in _bpf_setsockopt(). netfilter: nft_set_pipapo: allocate pcpu scratch maps on clone ppp: ensure minimum packet size in ppp_write() rocker: fix a sleeping in atomic bug staging: greybus: audio: Check null pointer fsl/fman: Check for null pointer after calling devm_ioremap Bluetooth: hci_bcm: Check for error irq Bluetooth: hci_qca: Fix NULL vs IS_ERR_OR_NULL check in qca_serdev_probe usb: dwc3: qcom: Fix NULL vs IS_ERR checking in dwc3_qcom_probe HID: hid-uclogic-params: Invalid parameter check in uclogic_params_init HID: hid-uclogic-params: Invalid parameter check in uclogic_params_get_str_desc HID: hid-uclogic-params: Invalid parameter check in uclogic_params_huion_init HID: hid-uclogic-params: Invalid parameter check in uclogic_params_frame_init_v1_buttonpad debugfs: lockdown: Allow reading debugfs files that are not world readable net/mlx5e: Fix page DMA map/unmap attributes net/mlx5e: Don't block routes with nexthop objects in SW Revert "net/mlx5e: Block offload of outer header csum for UDP tunnels" net/mlx5: Set command entry semaphore up once got index free lib/mpi: Add the return value check of kcalloc() Bluetooth: L2CAP: uninitialized variables in l2cap_sock_setsockopt() spi: spi-meson-spifc: Add missing pm_runtime_disable() in meson_spifc_probe ax25: uninitialized variable in ax25_setsockopt() netrom: fix api breakage in nr_setsockopt() regmap: Call regmap_debugfs_exit() prior to _init() can: mcp251xfd: add missing newline to printed strings tpm: add request_locality before write TPM_INT_ENABLE tpm_tis: Fix an error handling path in 'tpm_tis_core_init()' can: softing: softing_startstop(): fix set but not used variable warning can: xilinx_can: xcan_probe(): check for error irq pcmcia: fix setting of kthread task states iwlwifi: mvm: Use div_s64 instead of do_div in iwl_mvm_ftm_rtt_smoothing() net: mcs7830: handle usb read errors properly ext4: avoid trim error on fs with small groups ALSA: jack: Add missing rwsem around snd_ctl_remove() calls ALSA: PCM: Add missing rwsem around snd_ctl_remove() calls ALSA: hda: Add missing rwsem around snd_ctl_remove() calls RDMA/bnxt_re: Scan the whole bitmap when checking if "disabling RCFW with pending cmd-bit" RDMA/hns: Validate the pkey index scsi: pm80xx: Update WARN_ON check in pm8001_mpi_build_cmd() clk: imx8mn: Fix imx8mn_clko1_sels powerpc/prom_init: Fix improper check of prom_getprop() ASoC: uniphier: drop selecting non-existing SND_SOC_UNIPHIER_AIO_DMA dt-bindings: thermal: Fix definition of cooling-maps contribution property powerpc/64s: Convert some cpu_setup() and cpu_restore() functions to C powerpc/perf: MMCR0 control for PMU registers under PMCC=00 powerpc/perf: move perf irq/nmi handling details into traps.c powerpc/irq: Add helper to set regs->softe powerpc/perf: Fix PMU callbacks to clear pending PMI before resetting an overflown PMC powerpc/32s: Fix shift-out-of-bounds in KASAN init clocksource: Reduce clocksource-skew threshold clocksource: Avoid accidental unstable marking of clocksources ALSA: oss: fix compile error when OSS_DEBUG is enabled ALSA: usb-audio: Drop superfluous '0' in Presonus Studio 1810c's ID char/mwave: Adjust io port register size binder: fix handling of error during copy openrisc: Add clone3 ABI wrapper iommu/io-pgtable-arm: Fix table descriptor paddr formatting scsi: ufs: Fix race conditions related to driver data RDMA/qedr: Fix reporting max_{send/recv}_wr attrs PCI/MSI: Fix pci_irq_vector()/pci_irq_get_affinity() powerpc/powermac: Add additional missing lockdep_register_key() RDMA/core: Let ib_find_gid() continue search even after empty entry RDMA/cma: Let cma_resolve_ib_dev() continue search even after empty entry ASoC: rt5663: Handle device_property_read_u32_array error codes of: unittest: fix warning on PowerPC frame size warning of: unittest: 64 bit dma address test requires arch support clk: stm32: Fix ltdc's clock turn off by clk_disable_unused() after system enter shell mips: add SYS_HAS_CPU_MIPS64_R5 config for MIPS Release 5 support mips: fix Kconfig reference to PHYS_ADDR_T_64BIT dmaengine: pxa/mmp: stop referencing config->slave_id iommu/amd: Remove iommu_init_ga() iommu/amd: Restore GA log/tail pointer on host resume ASoC: Intel: catpt: Test dmaengine_submit() result before moving on iommu/iova: Fix race between FQ timeout and teardown scsi: block: pm: Always set request queue runtime active in blk_post_runtime_resume() phy: uniphier-usb3ss: fix unintended writing zeros to PHY register ASoC: mediatek: Check for error clk pointer ASoC: samsung: idma: Check of ioremap return value misc: lattice-ecp3-config: Fix task hung when firmware load failed counter: stm32-lptimer-cnt: remove iio counter abi arm64: tegra: Fix Tegra194 HDA {clock,reset}-names ordering arm64: tegra: Remove non existent Tegra194 reset mips: lantiq: add support for clk_set_parent() mips: bcm63xx: add support for clk_set_parent() powerpc/xive: Add missing null check after calling kmalloc ASoC: fsl_mqs: fix MODULE_ALIAS RDMA/cxgb4: Set queue pair state when being queried ASoC: fsl_asrc: refine the check of available clock divider clk: bm1880: remove kfrees on static allocations of: base: Fix phandle argument length mismatch error message ARM: dts: omap3-n900: Fix lp5523 for multi color Bluetooth: Fix debugfs entry leak in hci_register_dev() fs: dlm: filter user dlm messages for kernel locks drm/lima: fix warning when CONFIG_DEBUG_SG=y & CONFIG_DMA_API_DEBUG=y selftests/bpf: Fix bpf_object leak in skb_ctx selftest ar5523: Fix null-ptr-deref with unexpected WDCMSG_TARGET_START reply drm/bridge: dw-hdmi: handle ELD when DRM_BRIDGE_ATTACH_NO_CONNECTOR drm/nouveau/pmu/gm200-: avoid touching PMU outside of DEVINIT/PREOS/ACR media: atomisp: fix try_fmt logic media: atomisp: set per-device's default mode media: atomisp-ov2680: Fix ov2680_set_fmt() clobbering the exposure ARM: shmobile: rcar-gen2: Add missing of_node_put() batman-adv: allow netlink usage in unprivileged containers media: atomisp: handle errors at sh_css_create_isp_params() ath11k: Fix crash caused by uninitialized TX ring usb: gadget: f_fs: Use stream_open() for endpoint files drm: panel-orientation-quirks: Add quirk for the Lenovo Yoga Book X91F/L HID: apple: Do not reset quirks when the Fn key is not found media: b2c2: Add missing check in flexcop_pci_isr: EDAC/synopsys: Use the quirk for version instead of ddr version ARM: imx: rename DEBUG_IMX21_IMX27_UART to DEBUG_IMX27_UART drm/amd/display: check top_pipe_to_program pointer drm/amdgpu/display: set vblank_disable_immediate for DC soc: ti: pruss: fix referenced node in error message mlxsw: pci: Add shutdown method in PCI driver drm/bridge: megachips: Ensure both bridges are probed before registration tty: serial: imx: disable UCR4_OREN in .stop_rx() instead of .shutdown() gpiolib: acpi: Do not set the IRQ type if the IRQ is already in use HSI: core: Fix return freed object in hsi_new_client crypto: jitter - consider 32 LSB for APT mwifiex: Fix skb_over_panic in mwifiex_usb_recv() rsi: Fix use-after-free in rsi_rx_done_handler() rsi: Fix out-of-bounds read in rsi_read_pkt() ath11k: Avoid NULL ptr access during mgmt tx cleanup media: venus: avoid calling core_clk_setrate() concurrently during concurrent video sessions ACPI / x86: Drop PWM2 device on Lenovo Yoga Book from always present table ACPI: Change acpi_device_always_present() into acpi_device_override_status() ACPI / x86: Allow specifying acpi_device_override_status() quirks by path ACPI / x86: Add not-present quirk for the PCI0.SDHB.BRC1 device on the GPD win arm64: dts: ti: j7200-main: Fix 'dtbs_check' serdes_ln_ctrl node usb: uhci: add aspeed ast2600 uhci support floppy: Add max size check for user space request x86/mm: Flush global TLB when switching to trampoline page-table drm: rcar-du: Fix CRTC timings when CMM is used media: uvcvideo: Increase UVC_CTRL_CONTROL_TIMEOUT to 5 seconds. media: rcar-vin: Update format alignment constraints media: saa7146: hexium_orion: Fix a NULL pointer dereference in hexium_attach() media: m920x: don't use stack on USB reads thunderbolt: Runtime PM activate both ends of the device link iwlwifi: mvm: synchronize with FW after multicast commands iwlwifi: mvm: avoid clearing a just saved session protection id ath11k: avoid deadlock by change ieee80211_queue_work for regd_update_work ath10k: Fix tx hanging net-sysfs: update the queue counts in the unregistration path net: phy: prefer 1000baseT over 1000baseKX gpio: aspeed: Convert aspeed_gpio.lock to raw_spinlock selftests/ftrace: make kprobe profile testcase description unique ath11k: Avoid false DEADLOCK warning reported by lockdep x86/mce: Allow instrumentation during task work queueing x86/mce: Mark mce_panic() noinstr x86/mce: Mark mce_end() noinstr x86/mce: Mark mce_read_aux() noinstr net: bonding: debug: avoid printing debug logs when bond is not notifying peers bpf: Do not WARN in bpf_warn_invalid_xdp_action() HID: quirks: Allow inverting the absolute X/Y values media: igorplugusb: receiver overflow should be reported media: saa7146: hexium_gemini: Fix a NULL pointer dereference in hexium_attach() mmc: core: Fixup storing of OCR for MMC_QUIRK_NONSTD_SDIO audit: ensure userspace is penalized the same as the kernel when under pressure arm64: dts: ls1028a-qds: move rtc node to the correct i2c bus arm64: tegra: Adjust length of CCPLEX cluster MMIO region PM: runtime: Add safety net to supplier device release cpufreq: Fix initialization of min and max frequency QoS requests usb: hub: Add delay for SuperSpeed hub resume to let links transit to U0 ath9k: Fix out-of-bound memcpy in ath9k_hif_usb_rx_stream rtw88: 8822c: update rx settings to prevent potential hw deadlock PM: AVS: qcom-cpr: Use div64_ul instead of do_div iwlwifi: fix leaks/bad data after failed firmware load iwlwifi: remove module loading failure message iwlwifi: mvm: Fix calculation of frame length iwlwifi: pcie: make sure prph_info is set when treating wakeup IRQ um: registers: Rename function names to avoid conflicts and build problems ath11k: Fix napi related hang Bluetooth: vhci: Set HCI_QUIRK_VALID_LE_STATES xfrm: rate limit SA mapping change message to user space drm/etnaviv: consider completed fence seqno in hang check jffs2: GC deadlock reading a page that is used in jffs2_write_begin() ACPICA: actypes.h: Expand the ACPI_ACCESS_ definitions ACPICA: Utilities: Avoid deleting the same object twice in a row ACPICA: Executer: Fix the REFCLASS_REFOF case in acpi_ex_opcode_1A_0T_1R() ACPICA: Fix wrong interpretation of PCC address ACPICA: Hardware: Do not flush CPU cache when entering S4 and S5 drm/amdgpu: fixup bad vram size on gmc v8 amdgpu/pm: Make sysfs pm attributes as read-only for VFs ACPI: battery: Add the ThinkPad "Not Charging" quirk btrfs: remove BUG_ON() in find_parent_nodes() btrfs: remove BUG_ON(!eie) in find_parent_nodes net: mdio: Demote probed message to debug print mac80211: allow non-standard VHT MCS-10/11 dm btree: add a defensive bounds check to insert_at() dm space map common: add bounds check to sm_ll_lookup_bitmap() mlxsw: pci: Avoid flow control for EMAD packets net: phy: marvell: configure RGMII delays for 88E1118 net: gemini: allow any RGMII interface mode regulator: qcom_smd: Align probe function with rpmh-regulator serial: pl010: Drop CR register reset on set_termios serial: core: Keep mctrl register state and cached copy in sync random: do not throw away excess input to crng_fast_load parisc: Avoid calling faulthandler_disabled() twice x86/kbuild: Enable CONFIG_KALLSYMS_ALL=y in the defconfigs powerpc/6xx: add missing of_node_put powerpc/powernv: add missing of_node_put powerpc/cell: add missing of_node_put powerpc/btext: add missing of_node_put powerpc/watchdog: Fix missed watchdog reset due to memory ordering race i2c: i801: Don't silently correct invalid transfer size powerpc/smp: Move setup_profiling_timer() under CONFIG_PROFILING i2c: mpc: Correct I2C reset procedure clk: meson: gxbb: Fix the SDM_EN bit for MPLL0 on GXBB powerpc/powermac: Add missing lockdep_register_key() KVM: PPC: Book3S: Suppress warnings when allocating too big memory slots KVM: PPC: Book3S: Suppress failed alloc warning in H_COPY_TOFROM_GUEST w1: Misuse of get_user()/put_user() reported by sparse nvmem: core: set size for sysfs bin file dm: fix alloc_dax error handling in alloc_dev scsi: lpfc: Trigger SLI4 firmware dump before doing driver cleanup ALSA: seq: Set upper limit of processed events MIPS: Loongson64: Use three arguments for slti powerpc/40x: Map 32Mbytes of memory at startup selftests/powerpc/spectre_v2: Return skip code when miss_percent is high powerpc: handle kdump appropriately with crash_kexec_post_notifiers option powerpc/fadump: Fix inaccurate CPU state info in vmcore generated with panic udf: Fix error handling in udf_new_inode() MIPS: OCTEON: add put_device() after of_find_device_by_node() irqchip/gic-v4: Disable redistributors' view of the VPE table at boot time i2c: designware-pci: Fix to change data types of hcnt and lcnt parameters MIPS: Octeon: Fix build errors using clang scsi: sr: Don't use GFP_DMA ASoC: mediatek: mt8173: fix device_node leak ASoC: mediatek: mt8183: fix device_node leak phy: mediatek: Fix missing check in mtk_mipi_tx_probe rpmsg: core: Clean up resources on announce_create failure. crypto: omap-aes - Fix broken pm_runtime_and_get() usage crypto: stm32/crc32 - Fix kernel BUG triggered in probe() crypto: caam - replace this_cpu_ptr with raw_cpu_ptr ubifs: Error path in ubifs_remount_rw() seems to wrongly free write buffers tpm: fix NPE on probe for missing device spi: uniphier: Fix a bug that doesn't point to private data correctly xen/gntdev: fix unmap notification order fuse: Pass correct lend value to filemap_write_and_wait_range() serial: Fix incorrect rs485 polarity on uart open cputime, cpuacct: Include guest time in user time in cpuacct.stat tracing/kprobes: 'nmissed' not showed correctly for kretprobe iwlwifi: mvm: Increase the scan timeout guard to 30 seconds s390/mm: fix 2KB pgtable release race device property: Fix fwnode_graph_devcon_match() fwnode leak drm/etnaviv: limit submit sizes drm/nouveau/kms/nv04: use vzalloc for nv04_display drm/bridge: analogix_dp: Make PSR-exit block less parisc: Fix lpa and lpa_user defines powerpc/64s/radix: Fix huge vmap false positive PCI: xgene: Fix IB window setup PCI: pciehp: Use down_read/write_nested(reset_lock) to fix lockdep errors PCI: pci-bridge-emul: Make expansion ROM Base Address register read-only PCI: pci-bridge-emul: Properly mark reserved PCIe bits in PCI config space PCI: pci-bridge-emul: Fix definitions of reserved bits PCI: pci-bridge-emul: Correctly set PCIe capabilities PCI: pci-bridge-emul: Set PCI_STATUS_CAP_LIST for PCIe device xfrm: fix policy lookup for ipv6 gre packets btrfs: fix deadlock between quota enable and other quota operations btrfs: check the root node for uptodate before returning it btrfs: respect the max size in the header when activating swap file ext4: make sure to reset inode lockdep class when quota enabling fails ext4: make sure quota gets properly shutdown on error ext4: fix a possible ABBA deadlock due to busy PA ext4: initialize err_blk before calling __ext4_get_inode_loc ext4: fix fast commit may miss tracking range for FALLOC_FL_ZERO_RANGE ext4: set csum seed in tmp inode while migrating to extents ext4: Fix BUG_ON in ext4_bread when write quota data ext4: use ext4_ext_remove_space() for fast commit replay delete range ext4: fast commit may miss tracking unwritten range during ftruncate ext4: destroy ext4_fc_dentry_cachep kmemcache on module removal ext4: fix null-ptr-deref in '__ext4_journal_ensure_credits' ext4: don't use the orphan list when migrating an inode drm/radeon: fix error handling in radeon_driver_open_kms of: base: Improve argument length mismatch error firmware: Update Kconfig help text for Google firmware can: mcp251xfd: mcp251xfd_tef_obj_read(): fix typo in error message media: rcar-csi2: Optimize the selection PHTW register drm/vc4: hdmi: Make sure the device is powered with CEC media: correct MEDIA_TEST_SUPPORT help text Documentation: dmaengine: Correctly describe dmatest with channel unset Documentation: ACPI: Fix data node reference documentation Documentation: refer to config RANDOMIZE_BASE for kernel address-space randomization Documentation: fix firewire.rst ABI file path error Bluetooth: hci_sync: Fix not setting adv set duration scsi: core: Show SCMD_LAST in text form dmaengine: uniphier-xdmac: Fix type of address variables RDMA/hns: Modify the mapping attribute of doorbell to device RDMA/rxe: Fix a typo in opcode name dmaengine: stm32-mdma: fix STM32_MDMA_CTBR_TSEL_MASK Revert "net/mlx5: Add retry mechanism to the command entry index allocation" powerpc/cell: Fix clang -Wimplicit-fallthrough warning powerpc/fsl/dts: Enable WA for erratum A-009885 on fman3l MDIO buses block: Fix fsync always failed if once failed bpftool: Remove inclusion of utilities.mak from Makefiles xdp: check prog type before updating BPF link perf evsel: Override attr->sample_period for non-libpfm4 events ipv4: update fib_info_cnt under spinlock protection ipv4: avoid quadratic behavior in netns dismantle net/fsl: xgmac_mdio: Add workaround for erratum A-009885 net/fsl: xgmac_mdio: Fix incorrect iounmap when removing module parisc: pdc_stable: Fix memory leak in pdcs_register_pathentries f2fs: compress: fix potential deadlock of compress file f2fs: fix to reserve space for IO align feature af_unix: annote lockless accesses to unix_tot_inflight & gc_in_progress clk: Emit a stern warning with writable debugfs enabled clk: si5341: Fix clock HW provider cleanup net/smc: Fix hung_task when removing SMC-R devices net: axienet: increase reset timeout net: axienet: Wait for PhyRstCmplt after core reset net: axienet: reset core on initialization prior to MDIO access net: axienet: add missing memory barriers net: axienet: limit minimum TX ring size net: axienet: Fix TX ring slot available check net: axienet: fix number of TX ring slots for available check net: axienet: fix for TX busy handling net: axienet: increase default TX ring size to 128 HID: vivaldi: fix handling devices not using numbered reports rtc: pxa: fix null pointer dereference vdpa/mlx5: Fix wrong configuration of virtio_version_1_0 virtio_ring: mark ring unused on error taskstats: Cleanup the use of task->exit_code inet: frags: annotate races around fqdir->dead and fqdir->high_thresh netns: add schedule point in ops_exit_list() xfrm: Don't accidentally set RTO_ONLINK in decode_session4() gre: Don't accidentally set RTO_ONLINK in gre_fill_metadata_dst() libcxgb: Don't accidentally set RTO_ONLINK in cxgb_find_route() perf script: Fix hex dump character output dmaengine: at_xdmac: Don't start transactions at tx_submit level dmaengine: at_xdmac: Start transfer for cyclic channels in issue_pending dmaengine: at_xdmac: Print debug message after realeasing the lock dmaengine: at_xdmac: Fix concurrency over xfers_list dmaengine: at_xdmac: Fix lld view setting dmaengine: at_xdmac: Fix at_xdmac_lld struct definition perf probe: Fix ppc64 'perf probe add events failed' case devlink: Remove misleading internal_flags from health reporter dump arm64: dts: qcom: msm8996: drop not documented adreno properties net: bonding: fix bond_xmit_broadcast return value error bug net_sched: restore "mpu xxx" handling bcmgenet: add WOL IRQ check net: ethernet: mtk_eth_soc: fix error checking in mtk_mac_config() net: sfp: fix high power modules without diagnostic monitoring net: mscc: ocelot: fix using match before it is set dt-bindings: display: meson-dw-hdmi: add missing sound-name-prefix property dt-bindings: display: meson-vpu: Add missing amlogic,canvas property dt-bindings: watchdog: Require samsung,syscon-phandle for Exynos7 scripts/dtc: dtx_diff: remove broken example from help text lib82596: Fix IRQ check in sni_82596_probe mm/hmm.c: allow VM_MIXEDMAP to work with hmm_range_fault lib/test_meminit: destroy cache in kmem_cache_alloc_bulk() test mtd: nand: bbt: Fix corner case in bad block table handling ath10k: Fix the MTU size on QCA9377 SDIO scripts: sphinx-pre-install: add required ctex dependency scripts: sphinx-pre-install: Fix ctex support on Debian Linux 5.10.94 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I857f2417c899508815a1ba13d1285fd400a1f133	2022-01-27 11:49:22 +01:00
Lukas Bulwahn	3c3c0b6c4a	ARM: imx: rename DEBUG_IMX21_IMX27_UART to DEBUG_IMX27_UART [ Upstream commit `b0100bce4f` ] Since commit `4b563a0666` ("ARM: imx: Remove imx21 support"), the config DEBUG_IMX21_IMX27_UART is really only debug support for IMX27. So, rename this option to DEBUG_IMX27_UART and adjust dependencies in Kconfig and rename the definitions to IMX27 as further clean-up. This issue was discovered with ./scripts/checkkconfigsymbols.py, which reported that DEBUG_IMX21_IMX27_UART depends on the non-existing config SOC_IMX21. Signed-off-by: Lukas Bulwahn <lukas.bulwahn@gmail.com> Reviewed-by: Arnd Bergmann <arnd@arndb.de> Signed-off-by: Shawn Guo <shawnguo@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-01-27 10:54:11 +01:00
Tao Huang	f6909c028f	Merge tag 'ASB-2021-12-05_12-5.10' of https://android.googlesource.com/kernel/common https://source.android.com/security/bulletin/2021-12-01 CVE-2021-33909 CVE-2021-38204 CVE-2021-0961 * tag 'ASB-2021-12-05_12-5.10': (3010 commits) ANDROID: workqueue: export symbol of the function wq_worker_comm() ANDROID: GKI: Update symbols to symbol list ANDROID: vendor_hooks: Add hooks for binder proc transaction ANDROID: GKI: Add symbols abi for USB IP kernel modules. ANDROID: GKI: Fix file mode on mtk abi file UPSTREAM: erofs: fix deadlock when shrink erofs slab ANDROID: init_task: Init android vendor and oem data UPSTREAM: sched/core: Mitigate race cpus_share_cache()/update_top_cache_domain() ANDROID: Update symbol list for mtk UPSTREAM: erofs: fix unsafe pagevec reuse of hooked pclusters UPSTREAM: erofs: remove the occupied parameter from z_erofs_pagevec_enqueue() UPSTREAM: usb: dwc3: gadget: Fix null pointer exception ANDROID: fips140: support "evaluation testing" builds via build.sh FROMGIT: sched/scs: Reset task stack state in bringup_cpu() ANDROID: dma-buf: heaps: fix dma-buf heap pool pages stat ANDROID: ABI: Add several spi_mem related symbols UPSTREAM: spi: spi-mem: add spi_mem_dtr_supports_op() ANDROID: gki_defconfig: enable CONFIG_SPI_MEM ANDROID: ABI: Add several iio related symbols ANDROID: ABI: Update symbol list for IMX ... Change-Id: I09cddc92fa34553b944e62cc5cbbba94a84e5437 Conflicts: arch/arm/boot/dts/rk322x.dtsi arch/arm64/boot/dts/rockchip/rk3399.dtsi drivers/dma-buf/heaps/system_heap.c drivers/gpu/drm/rockchip/dw-mipi-dsi-rockchip.c drivers/gpu/drm/rockchip/rockchip_drm_vop.c drivers/gpu/drm/rockchip/rockchip_lvds.c drivers/gpu/drm/rockchip/rockchip_vop_reg.c drivers/mtd/nand/spi/core.c drivers/pci/controller/pcie-rockchip-host.c drivers/soc/rockchip/Kconfig drivers/usb/dwc3/core.c drivers/usb/dwc3/core.h	2021-12-14 17:09:02 +08:00
Greg Kroah-Hartman	a739489620	This is the 5.10.77 stable release -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmGBh/8ACgkQONu9yGCS aT4Eqw/+KclqUpaZ3Jb6e7CBIWYg5+XmVdTmnnvOZC82XbHDoRK9ZWfGqhFB6ODv 1KAp5kEBXh0hEmXi94ZQtzhiqr29R0H+rTBRpcpEVg/7PtLyrOQ+MAp8pszaJChO 3zhtN4NkEYV8hfl1T8fo0etcplZvnlK4HDEewFgQ0/WgZciN2J7Cqc47snx9tFia wnUiSOqM8yalsnLjoFnqQYZF2YouH8pqb5UblWSTUGcjdNBRpRqzdW0Ybokzzj5L SsZPV3EqNMZg28yBsFB/XMVriJ/jYpHES8m0wJPxE4SJlrI5wcwm/QhufMZbRorJ hQeTkvQTggk0d2O/RNA2vLFIYhBkHd6w4+PkFpsC+kbwQmArW8x5cNM83KsBL6N0 sc3pF9vVxTroObczgVa6nh9Ux2AhfdtmYGSqXZCX4wHb35QYTyNv4if89WnOLZDm hri3MfnVs7meLSFXUNH6RTdxz/nqp+TRd3hzLtNmp7EJ3U0CMeqB9G1nzbMi6vhD 1VYSJIuhGiuh3md9U5+xvimqVlckzbRztZBcnKhpV2ZS3Zq++Emf7cNKmRTpnXwC SDX6ngYdYGvVuyW6UubPINEcGPzGnN/PSVNAEzTw0YsIpZGnjYVsKIlDj3LXDKdo cSX60b6aEKoCT+LJHHDEMB6MaOVdH+FtDmyNz3fn7BFg9N/711s= =bsKj -----END PGP SIGNATURE----- Merge 5.10.77 into android12-5.10-lts Changes in 5.10.77 ARM: 9132/1: Fix __get_user_check failure with ARM KASAN images ARM: 9133/1: mm: proc-macros: ensure *_tlb_fns are 4B aligned ARM: 9134/1: remove duplicate memcpy() definition ARM: 9138/1: fix link warning with XIP + frame-pointer ARM: 9139/1: kprobes: fix arch_init_kprobes() prototype ARM: 9141/1: only warn about XIP address when not compile testing io_uring: don't take uring_lock during iowq cancel powerpc/bpf: Fix BPF_MOD when imm == 1 arm64: Avoid premature usercopy failure ext4: fix possible UAF when remounting r/o a mmp-protected file system usbnet: sanity check for maxpacket usbnet: fix error return code in usbnet_probe() Revert "pinctrl: bcm: ns: support updated DT binding as syscon subnode" pinctrl: amd: disable and mask interrupts on probe ata: sata_mv: Fix the error handling of mv_chip_id() tipc: fix size validations for the MSG_CRYPTO type nfc: port100: fix using -ERRNO as command type mask Revert "net: mdiobus: Fix memory leak in __mdiobus_register" net/tls: Fix flipped sign in tls_err_abort() calls mmc: vub300: fix control-message timeouts mmc: cqhci: clear HALT state after CQE enable mmc: mediatek: Move cqhci init behind ungate clock mmc: dw_mmc: exynos: fix the finding clock sample value mmc: sdhci: Map more voltage level to SDHCI_POWER_330 mmc: sdhci-esdhc-imx: clear the buffer_read_ready to reset standard tuning circuit ocfs2: fix race between searching chunks and release journal_head from buffer_head nvme-tcp: fix H2CData PDU send accounting (again) cfg80211: scan: fix RCU in cfg80211_add_nontrans_list() cfg80211: fix management registrations locking net: lan78xx: fix division by zero in send path mm, thp: bail out early in collapse_file for writeback page drm/ttm: fix memleak in ttm_transfered_destroy drm/amdgpu: fix out of bounds write cgroup: Fix memory leak caused by missing cgroup_bpf_offline riscv, bpf: Fix potential NULL dereference tcp_bpf: Fix one concurrency problem in the tcp_bpf_send_verdict function bpf: Fix potential race in tail call compatibility check bpf: Fix error usage of map_fd and fdget() in generic_map_update_batch() IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields IB/hfi1: Fix abba locking issue with sc_disable() nvmet-tcp: fix data digest pointer calculation nvme-tcp: fix data digest pointer calculation nvme-tcp: fix possible req->offset corruption octeontx2-af: Display all enabled PF VF rsrc_alloc entries. RDMA/mlx5: Set user priority for DCT arm64: dts: allwinner: h5: NanoPI Neo 2: Fix ethernet node reset: brcmstb-rescal: fix incorrect polarity of status bit regmap: Fix possible double-free in regcache_rbtree_exit() net: batman-adv: fix error handling net-sysfs: initialize uid and gid before calling net_ns_get_ownership cfg80211: correct bridge/4addr mode check net: Prevent infinite while loop in skb_tx_hash() RDMA/sa_query: Use strscpy_pad instead of memcpy to copy a string gpio: xgs-iproc: fix parsing of ngpios property nios2: Make NIOS2_DTB_SOURCE_BOOL depend on !COMPILE_TEST mlxsw: pci: Recycle received packet upon allocation failure net: ethernet: microchip: lan743x: Fix driver crash when lan743x_pm_resume fails net: ethernet: microchip: lan743x: Fix dma allocation failure by using dma_set_mask_and_coherent net: nxp: lpc_eth.c: avoid hang when bringing interface down net/tls: Fix flipped sign in async_wait.err assignment phy: phy_ethtool_ksettings_get: Lock the phy for consistency phy: phy_ethtool_ksettings_set: Move after phy_start_aneg phy: phy_start_aneg: Add an unlocked version phy: phy_ethtool_ksettings_set: Lock the PHY while changing settings sctp: use init_tag from inithdr for ABORT chunk sctp: fix the processing for INIT_ACK chunk sctp: fix the processing for COOKIE_ECHO chunk sctp: add vtag check in sctp_sf_violation sctp: add vtag check in sctp_sf_do_8_5_1_E_sa sctp: add vtag check in sctp_sf_ootb lan743x: fix endianness when accessing descriptors KVM: s390: clear kicked_mask before sleeping again KVM: s390: preserve deliverable_mask in __airqs_kick_single_vcpu scsi: ufs: ufs-exynos: Correct timeout value setting registers riscv: fix misalgned trap vector base address riscv: Fix asan-stack clang build perf script: Check session->header.env.arch before using it Linux 5.10.77 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I4cd89af4d20b7a8a1a6d9906233d1aaf026659a8	2021-11-02 20:03:12 +01:00
Lexi Shao	3ceaa85c33	ARM: 9132/1: Fix __get_user_check failure with ARM KASAN images commit `df909df077` upstream. ARM: kasan: Fix __get_user_check failure with kasan In macro __get_user_check defined in arch/arm/include/asm/uaccess.h, error code is store in register int __e(r0). When kasan is enabled, assigning value to kernel address might trigger kasan check, which unexpectedly overwrites r0 and causes undefined behavior on arm kasan images. One example is failure in do_futex and results in process soft lockup. Log: watchdog: BUG: soft lockup - CPU#0 stuck for 62946ms! [rs:main Q:Reg:1151] ... (__asan_store4) from (futex_wait_setup+0xf8/0x2b4) (futex_wait_setup) from (futex_wait+0x138/0x394) (futex_wait) from (do_futex+0x164/0xe40) (do_futex) from (sys_futex_time32+0x178/0x230) (sys_futex_time32) from (ret_fast_syscall+0x0/0x50) The soft lockup happens in function futex_wait_setup. The reason is function get_futex_value_locked always return EINVAL, thus pc jump back to retry label and causes looping. This line in function get_futex_value_locked ret = __get_user(dest, from); is expanded to dest = (typeof((p))) __r2; , in macro __get_user_check. Writing to pointer dest triggers kasan check and overwrites the return value of __get_user_x function. The assembly code of get_futex_value_locked in kernel/futex.c: ... c01f6dc8: eb0b020e bl c04b7608 <__get_user_4> // "x = (typeof((p))) __r2;" triggers kasan check and r0 is overwritten c01f6dCc: e1a00007 mov r0, r7 c01f6dd0: e1a05002 mov r5, r2 c01f6dd4: eb04f1e6 bl c0333574 <__asan_store4> c01f6dd8: e5875000 str r5, [r7] // save ret value of __get_user(*dest, from), which is dest address now c01f6ddc: e1a05000 mov r5, r0 ... // checking return value of __get_user failed c01f6e00: e3550000 cmp r5, #0 ... c01f6e0c: 01a00005 moveq r0, r5 // assign return value to EINVAL c01f6e10: 13e0000d mvnne r0, #13 Return value is the destination address of get_user thus certainly non-zero, so get_futex_value_locked always return EINVAL. Fix it by using a tmp vairable to store the error code before the assignment. This fix has no effects to non-kasan images thanks to compiler optimization. It only affects cases that overwrite r0 due to kasan check. This should fix bug discussed in Link: [1] https://lore.kernel.org/linux-arm-kernel/0ef7c2a5-5d8b-c5e0-63fa-31693fd4495c@gmail.com/ Fixes: `421015713b` ("ARM: 9017/2: Enable KASan for ARM") Signed-off-by: Lexi Shao <shaolexi@huawei.com> Signed-off-by: Russell King (Oracle) <rmk+kernel@armlinux.org.uk> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2021-11-02 19:48:17 +01:00
Greg Kroah-Hartman	33740c9227	This is the 5.10.69 stable release -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmFQYu4ACgkQONu9yGCS aT6vFQ//VgOxH4RGBJ8cVUgCR7t2XiShhs2xqPJRaYe2nnl318aNvuTJFOXKa5gg gD6jhdnInBpO1iD4An/WJLZ+EO8+CDEYezsMBV7SaORR2NlOxprxig/VZKmlBHSq b2h2itA4yfa0BtPbFF2SzA6V7PtKygquCFloUQtJbgwiinNlVx4oS+8jDPgd9R9S z0AffSTnxBLXh6rc+Hn7CsFap6Ob9CiX/ZMJPxK7c5cn+/aGweL1DYVxWiBmYpC9 ynzw6blR2wjvhLkKEc3y/pZqxG1XmF9yG0kYkIK2Oajw7hfjVLIT2O6edugmmufU LbsOfL7BOJrmdd1M8B1pZcGt8qaCfD0RS5LiSxf/aNLOklpS5CpeiMdRqiPEqvqN PZV4MUjG1ra59DMBHTr3OmugRwZBBc156dahccDEecVE0yYqYeHmYfsYoo06EqTA kpOGGRAjA46xmQLqPbyxBtdaIryiHHM2E72zhKgK9JA9EtOSrOCYXc6ltsBzPB69 9LIvrfevvrbsQGXKZ4Zw5DcYaA0VGVutO3ixEiPH4TJGco9rFW4NeHQK8wk1NE0D ilFUcf0MRaI1XkjjlgEua3oC8o6rKDd8GhooukWx/ItWMytw+5JUMpYHBa9aA2yU ev31m/YEscrveY4Nml2sDhzH3R+vRrLdTOYh7RwIb3UvqkYLb4Y= =d1XJ -----END PGP SIGNATURE----- Merge 5.10.69 into android12-5.10-lts Changes in 5.10.69 PCI: pci-bridge-emul: Add PCIe Root Capabilities Register PCI: aardvark: Fix reporting CRS value console: consume APC, DM, DCS s390/pci_mmio: fully validate the VMA before calling follow_pte() ARM: Qualify enabling of swiotlb_init() ARM: 9077/1: PLT: Move struct plt_entries definition to header ARM: 9078/1: Add warn suppress parameter to arm_gen_branch_link() ARM: 9079/1: ftrace: Add MODULE_PLTS support ARM: 9098/1: ftrace: MODULE_PLT: Fix build problem without DYNAMIC_FTRACE Revert "net/mlx5: Register to devlink ingress VLAN filter trap" sctp: validate chunk size in __rcv_asconf_lookup sctp: add param size validation for SCTP_PARAM_SET_PRIMARY staging: rtl8192u: Fix bitwise vs logical operator in TranslateRxSignalStuff819xUsb() coredump: fix memleak in dump_vma_snapshot() um: virtio_uml: fix memory leak on init failures dmaengine: acpi: Avoid comparison GSI with Linux vIRQ perf test: Fix bpf test sample mismatch reporting tools lib: Adopt memchr_inv() from kernel perf tools: Allow build-id with trailing zeros thermal/drivers/exynos: Fix an error code in exynos_tmu_probe() 9p/trans_virtio: Remove sysfs file on probe failure prctl: allow to setup brk for et_dyn executables nilfs2: use refcount_dec_and_lock() to fix potential UAF profiling: fix shift-out-of-bounds bugs PM: sleep: core: Avoid setting power.must_resume to false pwm: lpc32xx: Don't modify HW state in .probe() after the PWM chip was registered pwm: mxs: Don't modify HW state in .probe() after the PWM chip was registered dmaengine: idxd: fix wq slot allocation index check platform/chrome: sensorhub: Add trace events for sample platform/chrome: cros_ec_trace: Fix format warnings ceph: allow ceph_put_mds_session to take NULL or ERR_PTR ceph: cancel delayed work instead of flushing on mdsc teardown Kconfig.debug: drop selecting non-existing HARDLOCKUP_DETECTOR_ARCH tools/bootconfig: Fix tracing_on option checking in ftrace2bconf.sh thermal/core: Fix thermal_cooling_device_register() prototype drm/amdgpu: Disable PCIE_DPM on Intel RKL Platform drivers: base: cacheinfo: Get rid of DEFINE_SMP_CALL_CACHE_FUNCTION() dma-buf: DMABUF_MOVE_NOTIFY should depend on DMA_SHARED_BUFFER parisc: Move pci_dev_is_behind_card_dino to where it is used iommu/amd: Relocate GAMSup check to early_enable_iommus dmaengine: idxd: depends on !UML dmaengine: sprd: Add missing MODULE_DEVICE_TABLE dmaengine: ioat: depends on !UML dmaengine: xilinx_dma: Set DMA mask for coherent APIs ceph: request Fw caps before updating the mtime in ceph_write_iter ceph: remove the capsnaps when removing caps ceph: lockdep annotations for try_nonblocking_invalidate btrfs: update the bdev time directly when closing btrfs: fix lockdep warning while mounting sprout fs nilfs2: fix memory leak in nilfs_sysfs_create_device_group nilfs2: fix NULL pointer in nilfs_##name##_attr_release nilfs2: fix memory leak in nilfs_sysfs_create_##name##_group nilfs2: fix memory leak in nilfs_sysfs_delete_##name##_group nilfs2: fix memory leak in nilfs_sysfs_create_snapshot_group nilfs2: fix memory leak in nilfs_sysfs_delete_snapshot_group habanalabs: add validity check for event ID received from F/W pwm: img: Don't modify HW state in .remove() callback pwm: rockchip: Don't modify HW state in .remove() callback pwm: stm32-lp: Don't modify HW state in .remove() callback blk-throttle: fix UAF by deleteing timer in blk_throtl_exit() blk-mq: allow 4x BLK_MAX_REQUEST_COUNT at blk_plug for multiple_queues rtc: rx8010: select REGMAP_I2C sched/idle: Make the idle timer expire in hard interrupt context drm/nouveau/nvkm: Replace -ENOSYS with -ENODEV Linux 5.10.69 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I982349e3a65b83e92e9b808154bf8c84d094f1d6	2021-09-30 18:36:17 +02:00
Alex Sverdlin	f91d25a7c8	ARM: 9079/1: ftrace: Add MODULE_PLTS support commit `79f32b221b` upstream Teach ftrace_make_call() and ftrace_make_nop() about PLTs. Teach PLT code about FTRACE and all its callbacks. Otherwise the following might happen: ------------[ cut here ]------------ WARNING: CPU: 14 PID: 2265 at .../arch/arm/kernel/insn.c:14 __arm_gen_branch+0x83/0x8c() ... Hardware name: LSI Axxia AXM55XX [<c0314a49>] (unwind_backtrace) from [<c03115e9>] (show_stack+0x11/0x14) [<c03115e9>] (show_stack) from [<c0519f51>] (dump_stack+0x81/0xa8) [<c0519f51>] (dump_stack) from [<c032185d>] (warn_slowpath_common+0x69/0x90) [<c032185d>] (warn_slowpath_common) from [<c03218f3>] (warn_slowpath_null+0x17/0x1c) [<c03218f3>] (warn_slowpath_null) from [<c03143cf>] (__arm_gen_branch+0x83/0x8c) [<c03143cf>] (__arm_gen_branch) from [<c0314337>] (ftrace_make_nop+0xf/0x24) [<c0314337>] (ftrace_make_nop) from [<c038ebcb>] (ftrace_process_locs+0x27b/0x3e8) [<c038ebcb>] (ftrace_process_locs) from [<c0378d79>] (load_module+0x11e9/0x1a44) [<c0378d79>] (load_module) from [<c037974d>] (SyS_finit_module+0x59/0x84) [<c037974d>] (SyS_finit_module) from [<c030e981>] (ret_fast_syscall+0x1/0x18) ---[ end trace e1b64ced7a89adcc ]--- ------------[ cut here ]------------ WARNING: CPU: 14 PID: 2265 at .../kernel/trace/ftrace.c:1979 ftrace_bug+0x1b1/0x234() ... Hardware name: LSI Axxia AXM55XX [<c0314a49>] (unwind_backtrace) from [<c03115e9>] (show_stack+0x11/0x14) [<c03115e9>] (show_stack) from [<c0519f51>] (dump_stack+0x81/0xa8) [<c0519f51>] (dump_stack) from [<c032185d>] (warn_slowpath_common+0x69/0x90) [<c032185d>] (warn_slowpath_common) from [<c03218f3>] (warn_slowpath_null+0x17/0x1c) [<c03218f3>] (warn_slowpath_null) from [<c038e87d>] (ftrace_bug+0x1b1/0x234) [<c038e87d>] (ftrace_bug) from [<c038ebd5>] (ftrace_process_locs+0x285/0x3e8) [<c038ebd5>] (ftrace_process_locs) from [<c0378d79>] (load_module+0x11e9/0x1a44) [<c0378d79>] (load_module) from [<c037974d>] (SyS_finit_module+0x59/0x84) [<c037974d>] (SyS_finit_module) from [<c030e981>] (ret_fast_syscall+0x1/0x18) ---[ end trace e1b64ced7a89adcd ]--- ftrace failed to modify [<e9ef7006>] 0xe9ef7006 actual: 02:f0:3b:fa ftrace record flags: 0 (0) expected tramp: c0314265 Signed-off-by: Alexander Sverdlin <alexander.sverdlin@nokia.com> Signed-off-by: Russell King <rmk+kernel@armlinux.org.uk> Signed-off-by: Florian Fainelli <f.fainelli@gmail.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2021-09-26 14:08:56 +02:00
Alex Sverdlin	ad00533858	ARM: 9078/1: Add warn suppress parameter to arm_gen_branch_link() commit `890cb057a4` upstream Will be used in the following patch. No functional change. Signed-off-by: Alexander Sverdlin <alexander.sverdlin@nokia.com> Signed-off-by: Russell King <rmk+kernel@armlinux.org.uk> Signed-off-by: Florian Fainelli <f.fainelli@gmail.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2021-09-26 14:08:56 +02:00
Alex Sverdlin	ce90c6706d	ARM: 9077/1: PLT: Move struct plt_entries definition to header commit `4e271701c1` upstream upstream No functional change, later it will be re-used in several files. Signed-off-by: Alexander Sverdlin <alexander.sverdlin@nokia.com> Signed-off-by: Russell King <rmk+kernel@armlinux.org.uk> Signed-off-by: Florian Fainelli <f.fainelli@gmail.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2021-09-26 14:08:56 +02:00
Tao Huang	582f79266f	Merge remote branch 'android12-5.10' of https://android.googlesource.com/kernel/common * android12-5.10: (2274 commits) FROMGIT: mm: slub: move sysfs slab alloc/free interfaces to debugfs ANDROID: gki - CONFIG_NET_SCH_FQ=y ANDROID: GKI: Kconfig.gki: Add GKI_HIDDEN_ETHERNET_CONFIGS FROMLIST: media: Kconfig: Fix DVB_CORE can't be selected as module ANDROID: Update ABI and symbol list Revert "net: usb: cdc_ncm: don't spew notifications" ANDROID: Fips 140: move fips symbols entirely in own list ANDROID: core of xt_IDLETIMER send_nl_msg support ANDROID: start to re-add xt_IDLETIMER send_nl_msg support ANDROID: add fips140.ko symbols to module ABI ANDROID: inject correct HMAC digest into fips140.ko at build time ANDROID: crypto: fips140 - perform load time integrity check FROMLIST: crypto: shash - stop comparing function pointers to avoid breaking CFI ANDROID: arm64: module: preserve RELA sections for FIPS140 integrity selfcheck ANDROID: arm64: simd: omit capability check in may_use_simd() ANDROID: kbuild: lto: permit the use of .a archives in LTO modules ANDROID: arm64: only permit certain alternatives in the FIPS140 module ANDROID: crypto: lib/aes - add vendor hooks for AES library routines ANDROID: crypto: lib/sha256 - add vendor hook for sha256() routine UPSTREAM: KVM: arm64: Mark the host stage-2 memory pools static ... Conflicts: drivers/mmc/core/mmc_ops.c drivers/usb/gadget/function/f_uac1.c drivers/usb/gadget/function/f_uac2.c drivers/usb/gadget/function/f_uvc.c	2021-06-25 11:32:04 +08:00
Greg Kroah-Hartman	82658bfd88	This is the 5.10.44 stable release -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmDJzHwACgkQONu9yGCS aT6opRAAuTY0BewZFxfx+tMNplEo6Z/AnerfZN5UxjmIWhvE4NBoIhxgj7ZKHzKE 5xBP53Dunqa6MVrLv3VCyYstUMHO3qlDmYU6tGz/omstaQxqxB0y6b/8+Q3hkzkK SjpLeeMIzbpleZXt+zvi5LIwMb7WM2bVLmH4kPVEAW0+GmPWZRentaF7LtHNOOfU LBgAcRH2emxGZ3ucHJDI0xsrkdoWfe+sPZqkAiRI06wlK5EZEcc55uCy3OWzO47Z 579j4s0GX1RP6iuC8tVfoPFPPATRGAHJABX46w2xqs34Ni4PCA9FZ+cTbXgJyZoV ZzMnjSvmtM6SjdJDz5JucUS70zU2ailHuTnjZk41XUUYoY5reG1DWSVxPP5LVh3e 1eC9P5RTHjCKt/oHA+xvfJJzKL3VyBFLpkssJkh/LOjj1yCCMj2XK7u1q+swCd7O mJgkZS30c5bIVgV8tHjL2HPG8HnPRqR2+3vZ1yMCOSEDjQs3Qxhjlhohq33Jlfa3 wHOuuDvJyxgx+c/G4fgofWjU1eYpCltUthDiATl4w9+sACKm0FRm+ZVUlX/xr6WI aCBEuk9hFbXQF6Jfbmg3RrhiyF1BTZJ/MKzxaOmEk8HLLEtW249qz5Up651+caqy cfppiiV9M/QWB/soemK9uLnoBNjxEdvP00KI362ED99cNwF3eZc= =LmrZ -----END PGP SIGNATURE----- Merge 5.10.44 into android12-5.10-lts Changes in 5.10.44 proc: Track /proc/$pid/attr/ opener mm_struct ASoC: max98088: fix ni clock divider calculation ASoC: amd: fix for pcm_read() error spi: Fix spi device unregister flow spi: spi-zynq-qspi: Fix stack violation bug bpf: Forbid trampoline attach for functions with variable arguments net/nfc/rawsock.c: fix a permission check bug usb: cdns3: Fix runtime PM imbalance on error ASoC: Intel: bytcr_rt5640: Add quirk for the Glavey TM800A550L tablet ASoC: Intel: bytcr_rt5640: Add quirk for the Lenovo Miix 3-830 tablet vfio-ccw: Reset FSM state to IDLE inside FSM vfio-ccw: Serialize FSM IDLE state with I/O completion ASoC: sti-sas: add missing MODULE_DEVICE_TABLE spi: sprd: Add missing MODULE_DEVICE_TABLE usb: chipidea: udc: assign interrupt number to USB gadget structure isdn: mISDN: netjet: Fix crash in nj_probe: bonding: init notify_work earlier to avoid uninitialized use netlink: disable IRQs for netlink_lock_table() net: mdiobus: get rid of a BUG_ON() cgroup: disable controllers at parse time wq: handle VM suspension in stall detection net/qla3xxx: fix schedule while atomic in ql_sem_spinlock RDS tcp loopback connection can hang net:sfc: fix non-freed irq in legacy irq mode scsi: bnx2fc: Return failure if io_req is already in ABTS processing scsi: vmw_pvscsi: Set correct residual data length scsi: hisi_sas: Drop free_irq() of devm_request_irq() allocated irq scsi: target: qla2xxx: Wait for stop_phase1 at WWN removal net: macb: ensure the device is available before accessing GEMGXL control registers net: appletalk: cops: Fix data race in cops_probe1 net: dsa: microchip: enable phy errata workaround on 9567 nvme-fabrics: decode host pathing error for connect MIPS: Fix kernel hang under FUNCTION_GRAPH_TRACER and PREEMPT_TRACER dm verity: fix require_signatures module_param permissions bnx2x: Fix missing error code in bnx2x_iov_init_one() nvme-tcp: remove incorrect Kconfig dep in BLK_DEV_NVME nvmet: fix false keep-alive timeout when a controller is torn down powerpc/fsl: set fsl,i2c-erratum-a004447 flag for P2041 i2c controllers powerpc/fsl: set fsl,i2c-erratum-a004447 flag for P1010 i2c controllers spi: Don't have controller clean up spi device before driver unbind spi: Cleanup on failure of initial setup i2c: mpc: Make use of i2c_recover_bus() i2c: mpc: implement erratum A-004447 workaround ALSA: seq: Fix race of snd_seq_timer_open() ALSA: firewire-lib: fix the context to call snd_pcm_stop_xrun() ALSA: hda/realtek: headphone and mic don't work on an Acer laptop ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP Elite Dragonfly G2 ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP EliteBook x360 1040 G8 ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840 Aero G8 ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8 spi: bcm2835: Fix out-of-bounds access with more than 4 slaves Revert "ACPI: sleep: Put the FACS table after using it" drm: Fix use-after-free read in drm_getunique() drm: Lock pointer access in drm_master_release() perf/x86/intel/uncore: Fix M2M event umask for Ice Lake server KVM: X86: MMU: Use the correct inherited permissions to get shadow page kvm: avoid speculation-based attacks from out-of-range memslot accesses staging: rtl8723bs: Fix uninitialized variables async_xor: check src_offs is not NULL before updating it btrfs: return value from btrfs_mark_extent_written() in case of error btrfs: promote debugging asserts to full-fledged checks in validate_super cgroup1: don't allow '\n' in renaming ftrace: Do not blindly read the ip address in ftrace_bug() mmc: renesas_sdhi: abort tuning when timeout detected mmc: renesas_sdhi: Fix HS400 on R-Car M3-W+ USB: f_ncm: ncm_bitrate (speed) is unsigned usb: f_ncm: only first packet of aggregate needs to start timer usb: pd: Set PD_T_SINK_WAIT_CAP to 310ms usb: dwc3-meson-g12a: fix usb2 PHY glue init when phy0 is disabled usb: dwc3: meson-g12a: Disable the regulator in the error handling path of the probe usb: dwc3: gadget: Bail from dwc3_gadget_exit() if dwc->gadget is NULL usb: dwc3: ep0: fix NULL pointer exception usb: musb: fix MUSB_QUIRK_B_DISCONNECT_99 handling usb: typec: wcove: Use LE to CPU conversion when accessing msg->header usb: typec: ucsi: Clear PPM capability data in ucsi_init() error path usb: typec: intel_pmc_mux: Put fwnode in error case during ->probe() usb: typec: intel_pmc_mux: Add missed error check for devm_ioremap_resource() usb: gadget: f_fs: Ensure io_completion_wq is idle during unbind USB: serial: ftdi_sio: add NovaTech OrionMX product ID USB: serial: omninet: add device id for Zyxel Omni 56K Plus USB: serial: quatech2: fix control-request directions USB: serial: cp210x: fix alternate function for CP2102N QFN20 usb: gadget: eem: fix wrong eem header operation usb: fix various gadgets null ptr deref on 10gbps cabling. usb: fix various gadget panics on 10gbps cabling usb: typec: tcpm: cancel vdm and state machine hrtimer when unregister tcpm port usb: typec: tcpm: cancel frs hrtimer when unregister tcpm port regulator: core: resolve supply for boot-on/always-on regulators regulator: max77620: Use device_set_of_node_from_dev() regulator: bd718x7: Fix the BUCK7 voltage setting on BD71837 regulator: fan53880: Fix missing n_voltages setting regulator: bd71828: Fix .n_voltages settings regulator: rtmv20: Fix .set_current_limit/.get_current_limit callbacks phy: usb: Fix misuse of IS_ENABLED usb: dwc3: gadget: Disable gadget IRQ during pullup disable usb: typec: mux: Fix copy-paste mistake in typec_mux_match drm/mcde: Fix off by 10^3 in calculation drm/msm/a6xx: fix incorrectly set uavflagprd_inv field for A650 drm/msm/a6xx: update/fix CP_PROTECT initialization drm/msm/a6xx: avoid shadow NULL reference in failure path RDMA/ipoib: Fix warning caused by destroying non-initial netns RDMA/mlx4: Do not map the core_clock page to user space unless enabled ARM: cpuidle: Avoid orphan section warning vmlinux.lds.h: Avoid orphan section with !SMP tools/bootconfig: Fix error return code in apply_xbc() phy: cadence: Sierra: Fix error return code in cdns_sierra_phy_probe() ASoC: core: Fix Null-point-dereference in fmt_single_name() ASoC: meson: gx-card: fix sound-dai dt schema phy: ti: Fix an error code in wiz_probe() gpio: wcd934x: Fix shift-out-of-bounds error perf: Fix data race between pin_count increment/decrement sched/fair: Keep load_avg and load_sum synced sched/fair: Make sure to update tg contrib for blocked load sched/fair: Fix util_est UTIL_AVG_UNCHANGED handling x86/nmi_watchdog: Fix old-style NMI watchdog regression on old Intel CPUs KVM: x86: Ensure liveliness of nested VM-Enter fail tracepoint message IB/mlx5: Fix initializing CQ fragments buffer NFS: Fix a potential NULL dereference in nfs_get_client() NFSv4: Fix deadlock between nfs4_evict_inode() and nfs4_opendata_get_inode() perf session: Correct buffer copying when peeking events kvm: fix previous commit for 32-bit builds NFS: Fix use-after-free in nfs4_init_client() NFSv4: Fix second deadlock in nfs4_evict_inode() NFSv4: nfs4_proc_set_acl needs to restore NFS_CAP_UIDGID_NOMAP on error. scsi: core: Fix error handling of scsi_host_alloc() scsi: core: Fix failure handling of scsi_add_host_with_dma() scsi: core: Put .shost_dev in failure path if host state changes to RUNNING scsi: core: Only put parent device if host state differs from SHOST_CREATED tracing: Correct the length check which causes memory corruption proc: only require mm_struct for writing Linux 5.10.44 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: Ic64172b4e72ccb54d96000b3065dd8b33aa9fef5	2021-06-16 13:14:03 +02:00
Arnd Bergmann	c25ec6386a	ARM: cpuidle: Avoid orphan section warning commit `d94b93a910` upstream. Since commit `83109d5d5f` ("x86/build: Warn on orphan section placement"), we get a warning for objects in orphan sections. The cpuidle implementation for OMAP causes this when CONFIG_CPU_IDLE is disabled: arm-linux-gnueabi-ld: warning: orphan section `__cpuidle_method_of_table' from `arch/arm/mach-omap2/pm33xx-core.o' being placed in section `__cpuidle_method_of_table' arm-linux-gnueabi-ld: warning: orphan section `__cpuidle_method_of_table' from `arch/arm/mach-omap2/pm33xx-core.o' being placed in section `__cpuidle_method_of_table' arm-linux-gnueabi-ld: warning: orphan section `__cpuidle_method_of_table' from `arch/arm/mach-omap2/pm33xx-core.o' being placed in section `__cpuidle_method_of_table' Change the definition of CPUIDLE_METHOD_OF_DECLARE() to silently drop the table and all code referenced from it when CONFIG_CPU_IDLE is disabled. Fixes: `06ee7a950b` ("ARM: OMAP2+: pm33xx-core: Add cpuidle_ops for am335x/am437x") Signed-off-by: Arnd Bergmann <arnd@arndb.de> Reviewed-by: Miguel Ojeda <ojeda@kernel.org> Reviewed-by: Nick Desaulniers <ndesaulniers@google.com> Signed-off-by: Kees Cook <keescook@chromium.org> Link: https://lore.kernel.org/r/20201230155506.1085689-1-arnd@kernel.org Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2021-06-16 12:01:44 +02:00
Greg Kroah-Hartman	76002c201f	Merge 5.10.38 into android12-5.10 Changes in 5.10.38 KEYS: trusted: Fix memory leak on object td tpm: fix error return code in tpm2_get_cc_attrs_tbl() tpm, tpm_tis: Extend locality handling to TPM2 in tpm_tis_gen_interrupt() tpm, tpm_tis: Reserve locality in tpm_tis_resume() KVM: x86/mmu: Remove the defunct update_pte() paging hook KVM/VMX: Invoke NMI non-IST entry instead of IST entry ACPI: PM: Add ACPI ID of Alder Lake Fan PM: runtime: Fix unpaired parent child_count for force_resume cpufreq: intel_pstate: Use HWP if enabled by platform firmware kvm: Cap halt polling at kvm->max_halt_poll_ns ath11k: fix thermal temperature read fs: dlm: fix debugfs dump fs: dlm: add errno handling to check callback fs: dlm: check on minimum msglen size fs: dlm: flush swork on shutdown tipc: convert dest node's address to network order ASoC: Intel: bytcr_rt5640: Enable jack-detect support on Asus T100TAF net/mlx5e: Use net_prefetchw instead of prefetchw in MPWQE TX datapath net: stmmac: Set FIFO sizes for ipq806x ASoC: rsnd: core: Check convert rate in rsnd_hw_params Bluetooth: Fix incorrect status handling in LE PHY UPDATE event i2c: bail out early when RDWR parameters are wrong ALSA: hdsp: don't disable if not enabled ALSA: hdspm: don't disable if not enabled ALSA: rme9652: don't disable if not enabled ALSA: bebob: enable to deliver MIDI messages for multiple ports Bluetooth: Set CONF_NOT_COMPLETE as l2cap_chan default Bluetooth: initialize skb_queue_head at l2cap_chan_create() net/sched: cls_flower: use ntohs for struct flow_dissector_key_ports net: bridge: when suppression is enabled exclude RARP packets Bluetooth: check for zapped sk before connecting selftests/powerpc: Fix L1D flushing tests for Power10 powerpc/32: Statically initialise first emergency context net: hns3: remediate a potential overflow risk of bd_num_list net: hns3: add handling for xmit skb with recursive fraglist ip6_vti: proper dev_{hold\|put} in ndo_[un]init methods ASoC: Intel: bytcr_rt5640: Add quirk for the Chuwi Hi8 tablet ice: handle increasing Tx or Rx ring sizes Bluetooth: btusb: Enable quirk boolean flag for Mediatek Chip. ASoC: rt5670: Add a quirk for the Dell Venue 10 Pro 5055 i2c: Add I2C_AQ_NO_REP_START adapter quirk MIPS: Loongson64: Use _CACHE_UNCACHED instead of _CACHE_UNCACHED_ACCELERATED coresight: Do not scan for graph if none is present IB/hfi1: Correct oversized ring allocation mac80211: clear the beacon's CRC after channel switch pinctrl: samsung: use 'int' for register masks in Exynos rtw88: 8822c: add LC calibration for RTL8822C mt76: mt7615: support loading EEPROM for MT7613BE mt76: mt76x0: disable GTK offloading mt76: mt7915: fix txpower init for TSSI off chips fuse: invalidate attrs when page writeback completes virtiofs: fix userns cuse: prevent clone iwlwifi: pcie: make cfg vs. trans_cfg more robust powerpc/mm: Add cond_resched() while removing hpte mappings ASoC: rsnd: call rsnd_ssi_master_clk_start() from rsnd_ssi_init() Revert "iommu/amd: Fix performance counter initialization" iommu/amd: Remove performance counter pre-initialization test drm/amd/display: Force vsync flip when reconfiguring MPCC selftests: Set CC to clang in lib.mk if LLVM is set kconfig: nconf: stop endless search loops ALSA: hda/realtek: Add quirk for Lenovo Ideapad S740 ASoC: Intel: sof_sdw: add quirk for new ADL-P Rvp ALSA: hda/hdmi: fix race in handling acomp ELD notification at resume sctp: Fix out-of-bounds warning in sctp_process_asconf_param() flow_dissector: Fix out-of-bounds warning in __skb_flow_bpf_to_target() powerpc/smp: Set numa node before updating mask ASoC: rt286: Generalize support for ALC3263 codec ethtool: ioctl: Fix out-of-bounds warning in store_link_ksettings_for_user() net: sched: tapr: prevent cycle_time == 0 in parse_taprio_schedule samples/bpf: Fix broken tracex1 due to kprobe argument change powerpc/pseries: Stop calling printk in rtas_stop_self() drm/amd/display: fixed divide by zero kernel crash during dsc enablement drm/amd/display: add handling for hdcp2 rx id list validation drm/amdgpu: Add mem sync flag for IB allocated by SA mt76: mt7615: fix entering driver-own state on mt7663 crypto: ccp: Free SEV device if SEV init fails wl3501_cs: Fix out-of-bounds warnings in wl3501_send_pkt wl3501_cs: Fix out-of-bounds warnings in wl3501_mgmt_join qtnfmac: Fix possible buffer overflow in qtnf_event_handle_external_auth powerpc/iommu: Annotate nested lock for lockdep iavf: remove duplicate free resources calls net: ethernet: mtk_eth_soc: fix RX VLAN offload selftests: mlxsw: Increase the tolerance of backlog buildup selftests: mlxsw: Fix mausezahn invocation in ERSPAN scale test kbuild: generate Module.symvers only when vmlinux exists bnxt_en: Add PCI IDs for Hyper-V VF devices. ia64: module: fix symbolizer crash on fdescr watchdog: rename __touch_watchdog() to a better descriptive name watchdog: explicitly update timestamp when reporting softlockup watchdog/softlockup: remove logic that tried to prevent repeated reports watchdog: fix barriers when printing backtraces from all CPUs ASoC: rt286: Make RT286_SET_GPIO_* readable and writable thermal: thermal_of: Fix error return code of thermal_of_populate_bind_params() f2fs: move ioctl interface definitions to separated file f2fs: fix compat F2FS_IOC_{MOVE,GARBAGE_COLLECT}_RANGE f2fs: fix to allow migrating fully valid segment f2fs: fix panic during f2fs_resize_fs() f2fs: fix a redundant call to f2fs_balance_fs if an error occurs remoteproc: qcom_q6v5_mss: Replace ioremap with memremap remoteproc: qcom_q6v5_mss: Validate p_filesz in ELF loader PCI: iproc: Fix return value of iproc_msi_irq_domain_alloc() PCI: Release OF node in pci_scan_device()'s error path ARM: 9064/1: hw_breakpoint: Do not directly check the event's overflow_handler hook f2fs: fix to align to section for fallocate() on pinned file f2fs: fix to update last i_size if fallocate partially succeeds PCI: endpoint: Make _get_first_free_bar() take into account 64 bit BAR PCI: endpoint: Add helper API to get the 'next' unreserved BAR PCI: endpoint: Make _free_bar() to return error codes on failure PCI: endpoint: Fix NULL pointer dereference for ->get_features() f2fs: fix to avoid touching checkpointed data in get_victim() f2fs: fix to cover __allocate_new_section() with curseg_lock f2fs: Fix a hungtask problem in atomic write f2fs: fix to avoid accessing invalid fio in f2fs_allocate_data_block() rpmsg: qcom_glink_native: fix error return code of qcom_glink_rx_data() NFS: nfs4_bitmask_adjust() must not change the server global bitmasks NFS: Fix attribute bitmask in _nfs42_proc_fallocate() NFSv4.2: Always flush out writes in nfs42_proc_fallocate() NFS: Deal correctly with attribute generation counter overflow PCI: endpoint: Fix missing destroy_workqueue() pNFS/flexfiles: fix incorrect size check in decode_nfs_fh() NFSv4.2 fix handling of sr_eof in SEEK's reply SUNRPC: Move fault injection call sites SUNRPC: Remove trace_xprt_transmit_queued SUNRPC: Handle major timeout in xprt_adjust_timeout() thermal/drivers/tsens: Fix missing put_device error NFSv4.x: Don't return NFS4ERR_NOMATCHING_LAYOUT if we're unmounting nfsd: ensure new clients break delegations rtc: fsl-ftm-alarm: add MODULE_TABLE() dmaengine: idxd: Fix potential null dereference on pointer status dmaengine: idxd: fix dma device lifetime dmaengine: idxd: fix cdev setup and free device lifetime issues SUNRPC: fix ternary sign expansion bug in tracing pwm: atmel: Fix duty cycle calculation in .get_state() xprtrdma: Avoid Receive Queue wrapping xprtrdma: Fix cwnd update ordering xprtrdma: rpcrdma_mr_pop() already does list_del_init() swiotlb: Fix the type of index ceph: fix inode leak on getattr error in __fh_to_dentry scsi: qla2xxx: Prevent PRLI in target mode scsi: ufs: core: Do not put UFS power into LPM if link is broken scsi: ufs: core: Cancel rpm_dev_flush_recheck_work during system suspend scsi: ufs: core: Narrow down fast path in system suspend path rtc: ds1307: Fix wday settings for rx8130 net: hns3: fix incorrect configuration for igu_egu_hw_err net: hns3: initialize the message content in hclge_get_link_mode() net: hns3: add check for HNS3_NIC_STATE_INITED in hns3_reset_notify_up_enet() net: hns3: fix for vxlan gpe tx checksum bug net: hns3: use netif_tx_disable to stop the transmit queue net: hns3: disable phy loopback setting in hclge_mac_start_phy sctp: do asoc update earlier in sctp_sf_do_dupcook_a RISC-V: Fix error code returned by riscv_hartid_to_cpuid() sunrpc: Fix misplaced barrier in call_decode libbpf: Fix signed overflow in ringbuf_process_ring block/rnbd-clt: Change queue_depth type in rnbd_clt_session to size_t block/rnbd-clt: Check the return value of the function rtrs_clt_query ethernet:enic: Fix a use after free bug in enic_hard_start_xmit sctp: fix a SCTP_MIB_CURRESTAB leak in sctp_sf_do_dupcook_b netfilter: xt_SECMARK: add new revision to fix structure layout xsk: Fix for xp_aligned_validate_desc() when len == chunk_size net: stmmac: Clear receive all(RA) bit when promiscuous mode is off drm/radeon: Fix off-by-one power_state index heap overwrite drm/radeon: Avoid power table parsing memory leaks arm64: entry: factor irq triage logic into macros arm64: entry: always set GIC_PRIO_PSR_I_SET during entry khugepaged: fix wrong result value for trace_mm_collapse_huge_page_isolate() mm/hugeltb: handle the error case in hugetlb_fix_reserve_counts() mm/migrate.c: fix potential indeterminate pte entry in migrate_vma_insert_page() ksm: fix potential missing rmap_item for stable_node mm/gup: check every subpage of a compound page during isolation mm/gup: return an error on migration failure mm/gup: check for isolation errors ethtool: fix missing NLM_F_MULTI flag when dumping net: fix nla_strcmp to handle more then one trailing null character smc: disallow TCP_ULP in smc_setsockopt() netfilter: nfnetlink_osf: Fix a missing skb_header_pointer() NULL check netfilter: nftables: Fix a memleak from userdata error path in new objects can: mcp251xfd: mcp251xfd_probe(): add missing can_rx_offload_del() in error path can: mcp251x: fix resume from sleep before interface was brought up can: m_can: m_can_tx_work_queue(): fix tx_skb race condition sched: Fix out-of-bound access in uclamp sched/fair: Fix unfairness caused by missing load decay fs/proc/generic.c: fix incorrect pde_is_permanent check kernel: kexec_file: fix error return code of kexec_calculate_store_digests() kernel/resource: make walk_system_ram_res() find all busy IORESOURCE_SYSTEM_RAM resources kernel/resource: make walk_mem_res() find all busy IORESOURCE_MEM resources netfilter: nftables: avoid overflows in nft_hash_buckets() i40e: fix broken XDP support i40e: Fix use-after-free in i40e_client_subtask() i40e: fix the restart auto-negotiation after FEC modified i40e: Fix PHY type identifiers for 2.5G and 5G adapters mptcp: fix splat when closing unaccepted socket f2fs: avoid unneeded data copy in f2fs_ioc_move_range() ARC: entry: fix off-by-one error in syscall number validation ARC: mm: PAE: use 40-bit physical page mask ARC: mm: Use max_high_pfn as a HIGHMEM zone border powerpc/64s: Fix crashes when toggling stf barrier powerpc/64s: Fix crashes when toggling entry flush barrier hfsplus: prevent corruption in shrinking truncate squashfs: fix divide error in calculate_skip() userfaultfd: release page in error path to avoid BUG_ON kasan: fix unit tests with CONFIG_UBSAN_LOCAL_BOUNDS enabled mm/hugetlb: fix F_SEAL_FUTURE_WRITE blk-iocost: fix weight updates of inner active iocgs arm64: mte: initialize RGSR_EL1.SEED in __cpu_setup arm64: Fix race condition on PG_dcache_clean in __sync_icache_dcache() btrfs: fix race leading to unpersisted data and metadata on fsync drm/radeon/dpm: Disable sclk switching on Oland when two 4K 60Hz monitors are connected drm/amd/display: Initialize attribute for hdcp_srm sysfs file drm/i915: Avoid div-by-zero on gen2 kvm: exit halt polling on need_resched() as well KVM: LAPIC: Accurately guarantee busy wait for timer to expire when using hv_timer drm/msm/dp: initialize audio_comp when audio starts KVM: x86: Cancel pvclock_gtod_work on module removal KVM: x86: Prevent deadlock against tk_core.seq dax: Add an enum for specifying dax wakup mode dax: Add a wakeup mode parameter to put_unlocked_entry() dax: Wake up all waiters after invalidating dax entry xen/unpopulated-alloc: consolidate pgmap manipulation xen/unpopulated-alloc: fix error return code in fill_list() perf tools: Fix dynamic libbpf link usb: dwc3: gadget: Free gadget structure only after freeing endpoints iio: light: gp2ap002: Fix rumtime PM imbalance on error iio: proximity: pulsedlight: Fix rumtime PM imbalance on error iio: hid-sensors: select IIO_TRIGGERED_BUFFER under HID_SENSOR_IIO_TRIGGER usb: fotg210-hcd: Fix an error message hwmon: (occ) Fix poll rate limiting usb: musb: Fix an error message ACPI: scan: Fix a memory leak in an error handling path kyber: fix out of bounds access when preempted nvmet: add lba to sect conversion helpers nvmet: fix inline bio check for bdev-ns nvmet-rdma: Fix NULL deref when SEND is completed with error f2fs: compress: fix to free compress page correctly f2fs: compress: fix race condition of overwrite vs truncate f2fs: compress: fix to assign cc.cluster_idx correctly nbd: Fix NULL pointer in flush_workqueue blk-mq: plug request for shared sbitmap blk-mq: Swap two calls in blk_mq_exit_queue() usb: dwc3: omap: improve extcon initialization usb: dwc3: pci: Enable usb2-gadget-lpm-disable for Intel Merrifield usb: xhci: Increase timeout for HC halt usb: dwc2: Fix gadget DMA unmap direction usb: core: hub: fix race condition about TRSMRCY of resume usb: dwc3: gadget: Enable suspend events usb: dwc3: gadget: Return success always for kick transfer in ep queue usb: typec: ucsi: Retrieve all the PDOs instead of just the first 4 usb: typec: ucsi: Put fwnode in any case during ->probe() xhci-pci: Allow host runtime PM as default for Intel Alder Lake xHCI xhci: Do not use GFP_KERNEL in (potentially) atomic context xhci: Add reset resume quirk for AMD xhci controller. iio: gyro: mpu3050: Fix reported temperature value iio: tsl2583: Fix division by a zero lux_val cdc-wdm: untangle a circular dependency between callback and softint xen/gntdev: fix gntdev_mmap() error exit path KVM: x86: Emulate RDPID only if RDTSCP is supported KVM: x86: Move RDPID emulation intercept to its own enum KVM: nVMX: Always make an attempt to map eVMCS after migration KVM: VMX: Do not advertise RDPID if ENABLE_RDTSCP control is unsupported KVM: VMX: Disable preemption when probing user return MSRs Revert "iommu/vt-d: Remove WO permissions on second-level paging entries" Revert "iommu/vt-d: Preset Access/Dirty bits for IOVA over FL" iommu/vt-d: Preset Access/Dirty bits for IOVA over FL iommu/vt-d: Remove WO permissions on second-level paging entries mm: fix struct page layout on 32-bit systems MIPS: Reinstate platform `__div64_32' handler MIPS: Avoid DIVU in `__div64_32' is result would be zero MIPS: Avoid handcoded DIVU in `__div64_32' altogether clocksource/drivers/timer-ti-dm: Prepare to handle dra7 timer wrap issue clocksource/drivers/timer-ti-dm: Handle dra7 timer wrap errata i940 ARM: 9011/1: centralize phys-to-virt conversion of DT/ATAGS address ARM: 9012/1: move device tree mapping out of linear region ARM: 9020/1: mm: use correct section size macro to describe the FDT virtual address ARM: 9027/1: head.S: explicitly map DT even if it lives in the first physical section usb: typec: tcpm: Fix error while calculating PPS out values kobject_uevent: remove warning in init_uevent_argv() drm/i915/gt: Fix a double free in gen8_preallocate_top_level_pdp drm/i915: Read C0DRB3/C1DRB3 as 16 bits again drm/i915/overlay: Fix active retire callback alignment drm/i915: Fix crash in auto_retire clk: exynos7: Mark aclk_fsys1_200 as critical media: rkvdec: Remove of_match_ptr() i2c: mediatek: Fix send master code at more than 1MHz dt-bindings: media: renesas,vin: Make resets optional on R-Car Gen1 dt-bindings: serial: 8250: Remove duplicated compatible strings debugfs: Make debugfs_allow RO after init ext4: fix debug format string warning nvme: do not try to reconfigure APST when the controller is not live ASoC: rsnd: check all BUSIF status when error Linux 5.10.38 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: Ia32e01283b488a38be48015c58a0e481f09aaf65	2021-05-20 15:35:25 +02:00
Ard Biesheuvel	ac421c7f90	ARM: 9020/1: mm: use correct section size macro to describe the FDT virtual address commit `fc2933c133` upstream Commit 149a3ffe62b9dbc3 ("9012/1: move device tree mapping out of linear region") created a permanent, read-only section mapping of the device tree blob provided by the firmware, and added a set of macros to get the base and size of the virtually mapped FDT based on the physical address. However, while the mapping code uses the SECTION_SIZE macro correctly, the macros use PMD_SIZE instead, which means something entirely different on ARM when using short descriptors, and is therefore not the right quantity to use here. So replace PMD_SIZE with SECTION_SIZE. While at it, change the names of the macro and its parameter to clarify that it returns the virtual address of the start of the FDT, based on the physical address in memory. Tested-by: Joel Stanley <joel@jms.id.au> Tested-by: Marek Szyprowski <m.szyprowski@samsung.com> Signed-off-by: Ard Biesheuvel <ardb@kernel.org> Signed-off-by: Russell King <rmk+kernel@armlinux.org.uk> Signed-off-by: Florian Fainelli <f.fainelli@gmail.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2021-05-19 10:13:18 +02:00
Ard Biesheuvel	1eb7756902	ARM: 9012/1: move device tree mapping out of linear region commit `7a1be318f5` upstream On ARM, setting up the linear region is tricky, given the constraints around placement and alignment of the memblocks, and how the kernel itself as well as the DT are placed in physical memory. Let's simplify matters a bit, by moving the device tree mapping to the top of the address space, right between the end of the vmalloc region and the start of the the fixmap region, and create a read-only mapping for it that is independent of the size of the linear region, and how it is organized. Since this region was formerly used as a guard region, which will now be populated fully on LPAE builds by this read-only mapping (which will still be able to function as a guard region for stray writes), bump the start of the [underutilized] fixmap region by 512 KB as well, to ensure that there is always a proper guard region here. Doing so still leaves ample room for the fixmap space, even with NR_CPUS set to its maximum value of 32. Tested-by: Linus Walleij <linus.walleij@linaro.org> Reviewed-by: Linus Walleij <linus.walleij@linaro.org> Reviewed-by: Nicolas Pitre <nico@fluxnic.net> Signed-off-by: Ard Biesheuvel <ardb@kernel.org> Signed-off-by: Russell King <rmk+kernel@armlinux.org.uk> Signed-off-by: Florian Fainelli <f.fainelli@gmail.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2021-05-19 10:13:18 +02:00
Ard Biesheuvel	6cdbafc2ad	ARM: 9011/1: centralize phys-to-virt conversion of DT/ATAGS address commit `e9a2f8b599` upstream Before moving the DT mapping out of the linear region, let's prepare for this change by removing all the phys-to-virt translations of the __atags_pointer variable, and perform this translation only once at setup time. Tested-by: Linus Walleij <linus.walleij@linaro.org> Reviewed-by: Linus Walleij <linus.walleij@linaro.org> Acked-by: Nicolas Pitre <nico@fluxnic.net> Signed-off-by: Ard Biesheuvel <ardb@kernel.org> Signed-off-by: Russell King <rmk+kernel@armlinux.org.uk> Signed-off-by: Florian Fainelli <f.fainelli@gmail.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2021-05-19 10:13:18 +02:00
Ard Biesheuvel	c5de0d2e10	UPSTREAM: ARM: 9039/1: assembler: generalize byte swapping macro into rev_l Take the 4 instruction byte swapping sequence from the decompressor's head.S, and turn it into a rev_l GAS macro for general use. While at it, make it use the 'rev' instruction when compiling for v6 or later. Reviewed-by: Geert Uytterhoeven <geert+renesas@glider.be> Tested-by: Geert Uytterhoeven <geert+renesas@glider.be> Reviewed-by: Nicolas Pitre <nico@fluxnic.net> Signed-off-by: Ard Biesheuvel <ardb@kernel.org> Signed-off-by: Russell King <rmk+kernel@armlinux.org.uk> (cherry picked from commit `6468e898c6`) Bug: 178411248 Change-Id: I8433e97d2880f75cace215f1a8daadec7f29929c Signed-off-by: Eric Biggers <ebiggers@google.com>	2021-04-29 07:12:18 +00:00
Tao Huang	d648938407	Merge remote branch 'android12-5.10' of https://android.googlesource.com/kernel/common * android12-5.10: (1647 commits) FROMGIT: mm/page_owner: record the timestamp of all pages during free UPSTREAM: mm/page_io: use pr_alert_ratelimited for swap read/write errors ANDROID: roll back xt_IDLETIMER to 5.10.21 upstream/vanilla version ANDROID: qcom: Add ip, rtnl and free related symbols FROMGIT: power: supply: Fix build error when CONFIG_POWER_SUPPLY is not enabled. FROMGIT: usb: dwc3: gadget: modify the scale in vbus_draw callback BACKPORT: FROMLIST: usb: dwc3: gadget: Clear DEP flags after stop transfers in ep disable FROMLIST: Makefile: fix GDB warning with CONFIG_RELR ANDROID: refresh ABI XML before enabling KMI enforcement Revert "Revert "ANDROID: GKI: Enable bounds sanitizer"" Revert "ANDROID: Revert "f2fs: fix to tag FIEMAP_EXTENT_MERGED in f2fs_fiemap()"" ANDROID: Enforce KMI stability ANDROID: enable options prior to enforcing KMI Revert "ANDROID: GKI: temporarily disable LTO/CFI" ANDROID: gki_defconfig: Enable NET_CLS_{BASIC,TCINDEX,MATCHALL} & NET_ACT_{GACT,MIRRED} FROMLIST: selftests: Add a MREMAP_DONTUNMAP selftest for shmem FROMLIST: mm: Extend MREMAP_DONTUNMAP to non-anonymous mappings ANDROID: GKI: enable CONFIG_CMA_SYSFS ANDROID: make cma_sysfs experimental FROMLIST: mm: cma: support sysfs ... Change-Id: I6145eddeb253bea33164fc909e7790d30f17ef1f	2021-04-25 18:33:22 +08:00
Ard Biesheuvel	ec5a9c2e8a	UPSTREAM: ARM: assembler: introduce adr_l, ldr_l and str_l macros commit `0b1674638a` upstream. Like arm64, ARM supports position independent code sequences that produce symbol references with a greater reach than the ordinary adr/ldr instructions. Since on ARM, the adrl pseudo-instruction is only supported in ARM mode (and not at all when using Clang), having a adr_l macro like we do on arm64 is useful, and increases symmetry as well. Currently, we use open coded instruction sequences involving literals and arithmetic operations. Instead, we can use movw/movt pairs on v7 CPUs, circumventing the D-cache entirely. E.g., on v7+ CPUs, we can emit a PC-relative reference as follows: movw <reg>, #:lower16:<sym> - (1f + 8) movt <reg>, #:upper16:<sym> - (1f + 8) 1: add <reg>, <reg>, pc For older CPUs, we can emit the literal into a subsection, allowing it to be emitted out of line while retaining the ability to perform arithmetic on label offsets. E.g., on pre-v7 CPUs, we can emit a PC-relative reference as follows: ldr <reg>, 2f 1: add <reg>, <reg>, pc .subsection 1 2: .long <sym> - (1b + 8) .previous This is allowed by the assembler because, unlike ordinary sections, subsections are combined into a single section in the object file, and so the label references are not true cross-section references that are visible as relocations. (Subsections have been available in binutils since 2004 at least, so they should not cause any issues with older toolchains.) So use the above to implement the macros mov_l, adr_l, ldr_l and str_l, all of which will use movw/movt pairs on v7 and later CPUs, and use PC-relative literals otherwise. Reviewed-by: Nicolas Pitre <nico@fluxnic.net> Reviewed-by: Linus Walleij <linus.walleij@linaro.org> Signed-off-by: Ard Biesheuvel <ardb@kernel.org> Bug: 141693040 Signed-off-by: Nick Desaulniers <ndesaulniers@google.com> Change-Id: I030ddac6e4c0681897e7e379d3207ab386eb89b0	2021-03-24 09:21:58 -07:00
Ard Biesheuvel	fd863653ad	ARM: assembler: introduce adr_l, ldr_l and str_l macros commit `0b1674638a` upstream. Like arm64, ARM supports position independent code sequences that produce symbol references with a greater reach than the ordinary adr/ldr instructions. Since on ARM, the adrl pseudo-instruction is only supported in ARM mode (and not at all when using Clang), having a adr_l macro like we do on arm64 is useful, and increases symmetry as well. Currently, we use open coded instruction sequences involving literals and arithmetic operations. Instead, we can use movw/movt pairs on v7 CPUs, circumventing the D-cache entirely. E.g., on v7+ CPUs, we can emit a PC-relative reference as follows: movw <reg>, #:lower16:<sym> - (1f + 8) movt <reg>, #:upper16:<sym> - (1f + 8) 1: add <reg>, <reg>, pc For older CPUs, we can emit the literal into a subsection, allowing it to be emitted out of line while retaining the ability to perform arithmetic on label offsets. E.g., on pre-v7 CPUs, we can emit a PC-relative reference as follows: ldr <reg>, 2f 1: add <reg>, <reg>, pc .subsection 1 2: .long <sym> - (1b + 8) .previous This is allowed by the assembler because, unlike ordinary sections, subsections are combined into a single section in the object file, and so the label references are not true cross-section references that are visible as relocations. (Subsections have been available in binutils since 2004 at least, so they should not cause any issues with older toolchains.) So use the above to implement the macros mov_l, adr_l, ldr_l and str_l, all of which will use movw/movt pairs on v7 and later CPUs, and use PC-relative literals otherwise. Reviewed-by: Nicolas Pitre <nico@fluxnic.net> Reviewed-by: Linus Walleij <linus.walleij@linaro.org> Signed-off-by: Ard Biesheuvel <ardb@kernel.org> Signed-off-by: Nick Desaulniers <ndesaulniers@google.com> Signed-off-by: Sasha Levin <sashal@kernel.org>	2021-03-17 17:06:26 +01:00
Tao Huang	bc69b758ef	Merge remote branch 'android12-5.10' of https://android.googlesource.com/kernel/common * android12-5.10: (176331 commits) ANDROID: GKI: Enable bounds sanitizer ANDROID: Allow HAS_LTO_CLANG with KASAN_HW_TAGS ANDROID: abi_gki_aarch64_qcom: Add cpufreq related symbols ANDROID: cpufreq: Add a restricted vendor hook for freq transition ANDROID: scsi: ufs: add hooks to track ufs commands ANDROID: Fix compilation error when CPU_FREQ is disabled BACKPORT: kasan, arm64: allow using KUnit tests with HW_TAGS mode Revert "FROMGIT: kasan, arm64: allow using KUnit tests with HW_TAGS mode" Revert "BACKPORT: kasan: remove redundant config option" UPSTREAM: arm/kasan: fix the array size of kasan_early_shadow_pte[] FROMGIT: KVM: arm64: Workaround firmware wrongly advertising GICv2-on-v3 compatibility FROMGIT: KVM: arm64: Rename __vgic_v3_get_ich_vtr_el2() to __vgic_v3_get_gic_config() FROMGIT: KVM: arm64: Don't access PMSELR_EL0/PMUSERENR_EL0 when no PMU is available FROMGIT: KVM: arm64: Turn kvm_arm_support_pmu_v3() into a static key FROMGIT: KVM: arm64: Fix nVHE hyp panic host context restore FROMGIT: KVM: arm64: Avoid corrupting vCPU context register in guest exit FROMLIST: arm64: cpufeatures: Fix handling of CONFIG_CMDLINE for idreg overrides ANDROID: sched: Add vendor hook for uclamp_eff_value ANDROID: abi_gki_aarch64_qcom: Add CFS scheduler symbols ANDROID: GKI: Add mempool APIs to the symbol list ... Change-Id: I4ed13984b97bc531d1dae61920457f31b84190e9 Conflicts: Documentation/devicetree/bindings/nvmem/rockchip-otp.txt arch/arm64/boot/dts/rockchip/px30.dtsi arch/arm64/boot/dts/rockchip/rk3308.dtsi arch/arm64/boot/dts/rockchip/rk3399-rockpro64.dts drivers/clk/rockchip/Kconfig drivers/clk/rockchip/clk-rk3308.c drivers/gpu/drm/rockchip/rk3066_hdmi.c drivers/gpu/drm/rockchip/rockchip_rgb.c drivers/media/i2c/imx219.c drivers/nvmem/rockchip-otp.c drivers/power/supply/cw2015_battery.c sound/soc/codecs/cx2072x.c sound/soc/codecs/cx2072x.h sound/soc/codecs/rk3328_codec.c	2021-03-17 18:07:51 +08:00
Tao Huang	251c226c35	rk: revert to v4.19 Signed-off-by: Tao Huang <huangtao@rock-chips.com> Change-Id: I502dce68b639df4ebf5a1688e0dc2e5c5763ebc2	2021-03-17 18:05:39 +08:00
Greg Kroah-Hartman	b129c98dc6	Merge 5.10.17 into android12-5.10 Changes in 5.10.17 objtool: Fix seg fault with Clang non-section symbols Revert "dts: phy: add GPIO number and active state used for phy reset" gpio: mxs: GPIO_MXS should not default to y unconditionally gpio: ep93xx: fix BUG_ON port F usage gpio: ep93xx: Fix single irqchip with multi gpiochips tracing: Do not count ftrace events in top level enable output tracing: Check length before giving out the filter buffer drm/i915: Fix overlay frontbuffer tracking arm/xen: Don't probe xenbus as part of an early initcall cgroup: fix psi monitor for root cgroup Revert "drm/amd/display: Update NV1x SR latency values" drm/i915/tgl+: Make sure TypeC FIA is powered up when initializing it drm/dp_mst: Don't report ports connected if nothing is attached to them dmaengine: move channel device_node deletion to driver tmpfs: disallow CONFIG_TMPFS_INODE64 on s390 tmpfs: disallow CONFIG_TMPFS_INODE64 on alpha soc: ti: omap-prm: Fix boot time errors for rst_map_012 bits 0 and 1 arm64: dts: rockchip: Fix PCIe DT properties on rk3399 arm64: dts: qcom: sdm845: Reserve LPASS clocks in gcc ARM: OMAP2+: Fix suspcious RCU usage splats for omap_enter_idle_coupled arm64: dts: rockchip: remove interrupt-names property from rk3399 vdec node platform/x86: hp-wmi: Disable tablet-mode reporting by default arm64: dts: rockchip: Disable display for NanoPi R2S ovl: perform vfs_getxattr() with mounter creds cap: fix conversions on getxattr ovl: skip getxattr of security labels scsi: lpfc: Fix EEH encountering oops with NVMe traffic x86/split_lock: Enable the split lock feature on another Alder Lake CPU nvme-pci: ignore the subsysem NQN on Phison E16 drm/amd/display: Fix DPCD translation for LTTPR AUX_RD_INTERVAL drm/amd/display: Add more Clock Sources to DCN2.1 drm/amd/display: Release DSC before acquiring drm/amd/display: Fix dc_sink kref count in emulated_link_detect drm/amd/display: Free atomic state after drm_atomic_commit drm/amd/display: Decrement refcount of dc_sink before reassignment riscv: virt_addr_valid must check the address belongs to linear mapping bfq-iosched: Revert "bfq: Fix computation of shallow depth" ARM: dts: lpc32xx: Revert set default clock rate of HCLK PLL kallsyms: fix nonconverging kallsyms table with lld ARM: ensure the signal page contains defined contents ARM: kexec: fix oops after TLB are invalidated ubsan: implement __ubsan_handle_alignment_assumption Revert "lib: Restrict cpumask_local_spread to houskeeping CPUs" x86/efi: Remove EFI PGD build time checks lkdtm: don't move ctors to .rodata KVM: x86: cleanup CR3 reserved bits checks cgroup-v1: add disabled controller check in cgroup1_parse_param() dmaengine: idxd: fix misc interrupt completion ath9k: fix build error with LEDS_CLASS=m mt76: dma: fix a possible memory leak in mt76_add_fragment() drm/vc4: hvs: Fix buffer overflow with the dlist handling dmaengine: idxd: check device state before issue command bpf: Unbreak BPF_PROG_TYPE_KPROBE when kprobe is called via do_int3 bpf: Check for integer overflow when using roundup_pow_of_two() netfilter: xt_recent: Fix attempt to update deleted entry selftests: netfilter: fix current year netfilter: nftables: fix possible UAF over chains from packet path in netns netfilter: flowtable: fix tcp and udp header checksum update xen/netback: avoid race in xenvif_rx_ring_slots_available() net: hdlc_x25: Return meaningful error code in x25_open net: ipa: set error code in gsi_channel_setup() hv_netvsc: Reset the RSC count if NVSP_STAT_FAIL in netvsc_receive() net: enetc: initialize the RFS and RSS memories selftests: txtimestamp: fix compilation issue net: stmmac: set TxQ mode back to DCB after disabling CBS ibmvnic: Clear failover_pending if unable to schedule netfilter: conntrack: skip identical origin tuple in same zone only scsi: scsi_debug: Fix a memory leak x86/build: Disable CET instrumentation in the kernel for 32-bit too net: dsa: felix: implement port flushing on .phylink_mac_link_down net: hns3: add a check for queue_id in hclge_reset_vf_queue() net: hns3: add a check for tqp_index in hclge_get_ring_chain_from_mbx() net: hns3: add a check for index in hclge_get_rss_key() firmware_loader: align .builtin_fw to 8 drm/sun4i: tcon: set sync polarity for tcon1 channel drm/sun4i: dw-hdmi: always set clock rate drm/sun4i: Fix H6 HDMI PHY configuration drm/sun4i: dw-hdmi: Fix max. frequency for H6 clk: sunxi-ng: mp: fix parent rate change flag check i2c: stm32f7: fix configuration of the digital filter h8300: fix PREEMPTION build, TI_PRE_COUNT undefined scripts: set proper OpenSSL include dir also for sign-file x86/pci: Create PCI/MSI irqdomain after x86_init.pci.arch_init() arm64: mte: Allow PTRACE_PEEKMTETAGS access to the zero page rxrpc: Fix clearance of Tx/Rx ring when releasing a call udp: fix skb_copy_and_csum_datagram with odd segment sizes net: dsa: call teardown method on probe failure cpufreq: ACPI: Extend frequency tables to cover boost frequencies cpufreq: ACPI: Update arch scale-invariance max perf ratio if CPPC is not there net: gro: do not keep too many GRO packets in napi->rx_list net: fix iteration for sctp transport seq_files net/vmw_vsock: fix NULL pointer dereference net/vmw_vsock: improve locking in vsock_connect_timeout() net: watchdog: hold device global xmit lock during tx disable bridge: mrp: Fix the usage of br_mrp_port_switchdev_set_state switchdev: mrp: Remove SWITCHDEV_ATTR_ID_MRP_PORT_STAT vsock/virtio: update credit only if socket is not closed vsock: fix locking in vsock_shutdown() net/rds: restrict iovecs length for RDS_CMSG_RDMA_ARGS net/qrtr: restrict user-controlled length in qrtr_tun_write_iter() ovl: expand warning in ovl_d_real() kcov, usb: only collect coverage from __usb_hcd_giveback_urb in softirq Linux 5.10.17 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: Id0300681f52b51d3f466f1e66ec3a6c25f65f4d3	2021-02-18 11:21:01 +01:00
Russell King	249735b011	ARM: kexec: fix oops after TLB are invalidated [ Upstream commit `4d62e81b60` ] Giancarlo Ferrari reports the following oops while trying to use kexec: Unable to handle kernel paging request at virtual address 80112f38 pgd = fd7ef03e [80112f38] *pgd=0001141e(bad) Internal error: Oops: 80d [#1] PREEMPT SMP ARM ... This is caused by machine_kexec() trying to set the kernel text to be read/write, so it can poke values into the relocation code before copying it - and an interrupt occuring which changes the page tables. The subsequent writes then hit read-only sections that trigger a data abort resulting in the above oops. Fix this by copying the relocation code, and then writing the variables into the destination, thereby avoiding the need to make the kernel text read/write. Reported-by: Giancarlo Ferrari <giancarlo.ferrari89@gmail.com> Tested-by: Giancarlo Ferrari <giancarlo.ferrari89@gmail.com> Signed-off-by: Russell King <rmk+kernel@armlinux.org.uk> Signed-off-by: Sasha Levin <sashal@kernel.org>	2021-02-17 11:02:24 +01:00
Greg Kroah-Hartman	1092f698e5	This is the 5.10.15 stable release -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmAjmYgACgkQONu9yGCS aT6bohAAiRtT6WoMrzEFXvs44tWxB4JPXJR290RmmO+fZGj+HoujKbhnWCwNMD5q s2PGELPybWaii7schjuXqUl0vhatUnVLs04A59hGKKHHlvpWTznQYT7Urt8C6c8I sm2zAB6oeGwkwG8vQnujq2srxdgZVzffx09Tm1l+PtFGudROVixuthw21Q0QhRt0 2z2O5lcJC7utlUIudI/pe7WECgMIZHS2lRZyz8EKJ6ynMuNpQl2WuchPWuLgVhYB hiHV0yRLIHRzi3wNDMy8GJzjjfS1dkMuwnDK+3rZNZH+IVV3wvs/8mdr8p5d/VYU kfPDP1EMjnik0sBLvavl9d4ixnUcCn05HjGnFrqSbfpi8j88npqKriV3jkDrhQpO cLlMcVTN3ufpcrr6BIDgL6uCVCul+txeaPkUuafP6y3yNtQXDWbLxlgfm7u+TwAB nIr12H8cgMR6zK2iQFSZk4rGt1eXUIZkZYLcoINW88Zey9jsTImg9ZgAA+BJJMzs 4A3UKAOthCCyGJYju3hoTUVyS0QPJVuplAODIMSklUjnxQT4JfPJ9Jk2BRw5cY4K Xecpb/+6vxKj7Zl6HFvcZCkU8+pul5wboDnCIgpIGOLUhq8OTyu5716Q7c9T6MbO R6ftZosij+bmuapo4HZhnYzybzHb7LHLsa+B/5DzK0CwTTmV1JM= =YVjW -----END PGP SIGNATURE----- Merge 5.10.15 into android12-5.10 Changes in 5.10.15 USB: serial: cp210x: add pid/vid for WSDA-200-USB USB: serial: cp210x: add new VID/PID for supporting Teraoka AD2000 USB: serial: option: Adding support for Cinterion MV31 usb: host: xhci: mvebu: make USB 3.0 PHY optional for Armada 3720 USB: gadget: legacy: fix an error code in eth_bind() usb: gadget: aspeed: add missing of_node_put USB: usblp: don't call usb_set_interface if there's a single alt usb: renesas_usbhs: Clear pipe running flag in usbhs_pkt_pop() usb: dwc2: Fix endpoint direction check in ep_from_windex usb: dwc3: fix clock issue during resume in OTG mode usb: xhci-mtk: fix unreleased bandwidth data usb: xhci-mtk: skip dropping bandwidth of unchecked endpoints usb: xhci-mtk: break loop when find the endpoint to drop ARM: OMAP1: OSK: fix ohci-omap breakage arm64: dts: qcom: c630: keep both touchpad devices enabled Input: i8042 - unbreak Pegatron C15B arm64: dts: amlogic: meson-g12: Set FL-adj property value arm64: dts: rockchip: fix vopl iommu irq on px30 arm64: dts: rockchip: Use only supported PCIe link speed on Pinebook Pro ARM: dts: stm32: Fix polarity of the DH DRC02 uSD card detect ARM: dts: stm32: Connect card-detect signal on DHCOM ARM: dts: stm32: Disable WP on DHCOM uSD slot ARM: dts: stm32: Disable optional TSC2004 on DRC02 board ARM: dts: stm32: Fix GPIO hog flags on DHCOM DRC02 vdpa/mlx5: Fix memory key MTT population bpf, cgroup: Fix optlen WARN_ON_ONCE toctou bpf, cgroup: Fix problematic bounds check bpf, inode_storage: Put file handler if no storage was found um: virtio: free vu_dev only with the contained struct device bpf, preload: Fix build when $(O) points to a relative path arm64: dts: meson: switch TFLASH_VDD_EN pin to open drain on Odroid-C4 r8169: work around RTL8125 UDP hw bug rxrpc: Fix deadlock around release of dst cached on udp tunnel arm64: dts: ls1046a: fix dcfg address range SUNRPC: Fix NFS READs that start at non-page-aligned offsets igc: set the default return value to -IGC_ERR_NVM in igc_write_nvm_srwr igc: check return value of ret_val in igc_config_fc_after_link_up i40e: Revert "i40e: don't report link up for a VF who hasn't enabled queues" ibmvnic: device remove has higher precedence over reset net/mlx5: Fix function calculation for page trees net/mlx5: Fix leak upon failure of rule creation net/mlx5e: Update max_opened_tc also when channels are closed net/mlx5e: Release skb in case of failure in tc update skb net: lapb: Copy the skb before sending a packet net: mvpp2: TCAM entry enable should be written after SRAM data r8169: fix WoL on shutdown if CONFIG_DEBUG_SHIRQ is set net: ipa: pass correct dma_handle to dma_free_coherent() ARM: dts: sun7i: a20: bananapro: Fix ethernet phy-mode nvmet-tcp: fix out-of-bounds access when receiving multiple h2cdata PDUs vdpa/mlx5: Restore the hardware used index after change map memblock: do not start bottom-up allocations with kernel_end kbuild: fix duplicated flags in DEBUG_CFLAGS thunderbolt: Fix possible NULL pointer dereference in tb_acpi_add_link() ovl: fix dentry leak in ovl_get_redirect ovl: avoid deadlock on directory ioctl ovl: implement volatile-specific fsync error behaviour mac80211: fix station rate table updates on assoc gpiolib: free device name on error path to fix kmemleak fgraph: Initialize tracing_graph_pause at task creation tracing/kprobe: Fix to support kretprobe events on unloaded modules kretprobe: Avoid re-registration of the same kretprobe earlier tracing: Use pause-on-trace with the latency tracers tracepoint: Fix race between tracing and removing tracepoint libnvdimm/namespace: Fix visibility of namespace resource attribute libnvdimm/dimm: Avoid race between probe and available_slots_show() genirq: Prevent [devm_]irq_alloc_desc from returning irq 0 genirq/msi: Activate Multi-MSI early when MSI_FLAG_ACTIVATE_EARLY is set scripts: use pkg-config to locate libcrypto xhci: fix bounce buffer usage for non-sg list case RISC-V: Define MAXPHYSMEM_1GB only for RV32 cifs: report error instead of invalid when revalidating a dentry fails iommu: Check dev->iommu in dev_iommu_priv_get() before dereferencing it smb3: Fix out-of-bounds bug in SMB2_negotiate() smb3: fix crediting for compounding when only one request in flight mmc: sdhci-pltfm: Fix linking err for sdhci-brcmstb mmc: core: Limit retries when analyse of SDIO tuples fails Fix unsynchronized access to sev members through svm_register_enc_region drm/dp/mst: Export drm_dp_get_vc_payload_bw() drm/i915: Fix the MST PBN divider calculation drm/i915/gem: Drop lru bumping on display unpinning drm/i915/gt: Close race between enable_breadcrumbs and cancel_breadcrumbs drm/i915/display: Prevent double YUV range correction on HDR planes drm/i915: Extract intel_ddi_power_up_lanes() drm/i915: Power up combo PHY lanes for for HDMI as well drm/amd/display: Revert "Fix EDID parsing after resume from suspend" io_uring: don't modify identity's files uncess identity is cowed nvme-pci: avoid the deepest sleep state on Kingston A2000 SSDs KVM: SVM: Treat SVM as unsupported when running as an SEV guest KVM: x86/mmu: Fix TDP MMU zap collapsible SPTEs KVM: x86: Allow guests to see MSR_IA32_TSX_CTRL even if tsx=off KVM: x86: fix CPUID entries returned by KVM_GET_CPUID2 ioctl KVM: x86: Update emulator context mode if SYSENTER xfers to 64-bit mode KVM: x86: Set so called 'reserved CR3 bits in LM mask' at vCPU reset DTS: ARM: gta04: remove legacy spi-cs-high to make display work again ARM: dts; gta04: SPI panel chip select is active low ARM: footbridge: fix dc21285 PCI configuration accessors ARM: 9043/1: tegra: Fix misplaced tegra_uart_config in decompressor mm: hugetlbfs: fix cannot migrate the fallocated HugeTLB page mm: hugetlb: fix a race between freeing and dissolving the page mm: hugetlb: fix a race between isolating and freeing page mm: hugetlb: remove VM_BUG_ON_PAGE from page_huge_active mm, compaction: move high_pfn to the for loop scope mm/vmalloc: separate put pages and flush VM flags mm: thp: fix MADV_REMOVE deadlock on shmem THP mm/filemap: add missing mem_cgroup_uncharge() to __add_to_page_cache_locked() x86/build: Disable CET instrumentation in the kernel x86/debug: Fix DR6 handling x86/debug: Prevent data breakpoints on __per_cpu_offset x86/debug: Prevent data breakpoints on cpu_dr7 x86/apic: Add extra serialization for non-serializing MSRs Input: goodix - add support for Goodix GT9286 chip Input: xpad - sync supported devices with fork on GitHub Input: ili210x - implement pressure reporting for ILI251x md: Set prev_flush_start and flush_bio in an atomic way igc: Report speed and duplex as unknown when device is runtime suspended neighbour: Prevent a dead entry from updating gc_list net: ip_tunnel: fix mtu calculation udp: ipv4: manipulate network header of NATed UDP GRO fraglist net: dsa: mv88e6xxx: override existent unicast portvec in port_fdb_add net: sched: replaced invalid qdisc tree flush helper in qdisc_replace Linux 5.10.15 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I15750357b4c30739515fdc0bbbd0e04b7c986171	2021-02-10 09:53:50 +01:00
Dmitry Osipenko	2de0745463	ARM: 9043/1: tegra: Fix misplaced tegra_uart_config in decompressor commit `538eea5362` upstream. The tegra_uart_config of the DEBUG_LL code is now placed right at the start of the .text section after commit which enabled debug output in the decompressor. Tegra devices are not booting anymore if DEBUG_LL is enabled since tegra_uart_config data is executes as a code. Fix the misplaced tegra_uart_config storage by embedding it into the code. Cc: stable@vger.kernel.org Fixes: `2596a72d33` ("ARM: 9009/1: uncompress: Enable debug in head.S") Reviewed-by: Linus Walleij <linus.walleij@linaro.org> Signed-off-by: Dmitry Osipenko <digetx@gmail.com> Signed-off-by: Russell King <rmk+kernel@armlinux.org.uk> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2021-02-10 09:29:20 +01:00
Peter Collingbourne	62daaaec31	UPSTREAM: signal: clear non-uapi flag bits when passing/returning sa_flags Previously we were not clearing non-uapi flag bits in sigaction.sa_flags when storing the userspace-provided sa_flags or when returning them via oldact. Start doing so. This allows userspace to detect missing support for flag bits and allows the kernel to use non-uapi bits internally, as we are already doing in arch/x86 for two flag bits. Now that this change is in place, we no longer need the code in arch/x86 that was hiding these bits from userspace, so remove it. This is technically a userspace-visible behavior change for sigaction, as the unknown bits returned via oldact.sa_flags are no longer set. However, we are free to define the behavior for unknown bits exactly because their behavior is currently undefined, so for now we can define the meaning of each of them to be "clear the bit in oldact.sa_flags unless the bit becomes known in the future". Furthermore, this behavior is consistent with OpenBSD [1], illumos [2] and XNU [3] (FreeBSD [4] and NetBSD [5] fail the syscall if unknown bits are set). So there is some precedent for this behavior in other kernels, and in particular in XNU, which is probably the most popular kernel among those that I looked at, which means that this change is less likely to be a compatibility issue. Link: [1] `f634a6a4b5/sys/kern/kern_sig.c (L278)` Link: [2] `76f19f5fdc/usr/src/uts/common/syscall/sigaction.c (L86)` Link: [3] `a449c6a3b8/bsd/kern/kern_sig.c (L480)` Link: [4] `eded70c370/sys/kern/kern_sig.c (L699)` Link: [5] `3365779bec/sys/kern/sys_sig.c (L473)` Signed-off-by: Peter Collingbourne <pcc@google.com> Reviewed-by: Dave Martin <Dave.Martin@arm.com> Acked-by: "Eric W. Biederman" <ebiederm@xmission.com> Link: https://linux-review.googlesource.com/id/I35aab6f5be932505d90f3b3450c083b4db1eca86 Link: https://lkml.kernel.org/r/878dbcb5f47bc9b11881c81f745c0bef5c23f97f.1605235762.git.pcc@google.com Signed-off-by: Eric W. Biederman <ebiederm@xmission.com> (cherry picked from commit `23acdc76f1`) Bug: 135772972 Change-Id: I35aab6f5be932505d90f3b3450c083b4db1eca86	2021-01-22 10:05:52 -08:00
Peter Collingbourne	90caa1ef9b	UPSTREAM: arch: move SA_* definitions to generic headers Most architectures with the exception of alpha, mips, parisc and sparc use the same values for these flags. Move their definitions into asm-generic/signal-defs.h and allow the architectures with non-standard values to override them. Also, document the non-standard flag values in order to make it easier to add new generic flags in the future. A consequence of this change is that on powerpc and x86, the constants' values aside from SA_RESETHAND change signedness from unsigned to signed. This is not expected to impact realistic use of these constants. In particular the typical use of the constants where they are or'ed together and assigned to sa_flags (or another int variable) would not be affected. Signed-off-by: Peter Collingbourne <pcc@google.com> Acked-by: Geert Uytterhoeven <geert@linux-m68k.org> Acked-by: "Eric W. Biederman" <ebiederm@xmission.com> Reviewed-by: Dave Martin <Dave.Martin@arm.com> Link: https://linux-review.googlesource.com/id/Ia3849f18b8009bf41faca374e701cdca36974528 Link: https://lkml.kernel.org/r/b6d0d1ec34f9ee93e1105f14f288fba5f89d1f24.1605235762.git.pcc@google.com Signed-off-by: Eric W. Biederman <ebiederm@xmission.com> (cherry picked from commit `1d82b7898f`) Bug: 135772972 Change-Id: Ia3849f18b8009bf41faca374e701cdca36974528	2021-01-22 10:05:52 -08:00
Greg Kroah-Hartman	7eadb0006a	Merge 5.10.7 into android12-5.10 Changes in 5.10.7 i40e: Fix Error I40E_AQ_RC_EINVAL when removing VFs iavf: fix double-release of rtnl_lock net/sched: sch_taprio: ensure to reset/destroy all child qdiscs net: mvpp2: Add TCAM entry to drop flow control pause frames net: mvpp2: prs: fix PPPoE with ipv6 packet parse net: systemport: set dev->max_mtu to UMAC_MAX_MTU_SIZE ethernet: ucc_geth: fix use-after-free in ucc_geth_remove() ethernet: ucc_geth: set dev->max_mtu to 1518 ionic: account for vlan tag len in rx buffer len atm: idt77252: call pci_disable_device() on error path net: mvpp2: Fix GoP port 3 Networking Complex Control configurations net: stmmac: dwmac-meson8b: ignore the second clock input ibmvnic: fix login buffer memory leak ibmvnic: continue fatal error reset after passive init net: ethernet: mvneta: Fix error handling in mvneta_probe qede: fix offload for IPIP tunnel packets virtio_net: Fix recursive call to cpus_read_lock() net/ncsi: Use real net-device for response handler net: ethernet: Fix memleak in ethoc_probe net-sysfs: take the rtnl lock when storing xps_cpus net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc net-sysfs: take the rtnl lock when storing xps_rxqs net-sysfs: take the rtnl lock when accessing xps_rxqs_map and num_tc net: ethernet: ti: cpts: fix ethtool output when no ptp_clock registered tun: fix return value when the number of iovs exceeds MAX_SKB_FRAGS e1000e: Only run S0ix flows if shutdown succeeded e1000e: bump up timeout to wait when ME un-configures ULP mode Revert "e1000e: disable s0ix entry and exit flows for ME systems" e1000e: Export S0ix flags to ethtool bnxt_en: Check TQM rings for maximum supported value. net: mvpp2: fix pkt coalescing int-threshold configuration bnxt_en: Fix AER recovery. ipv4: Ignore ECN bits for fib lookups in fib_compute_spec_dst() net: sched: prevent invalid Scell_log shift count net: hns: fix return value check in __lb_other_process() erspan: fix version 1 check in gre_parse_header() net: hdlc_ppp: Fix issues when mod_timer is called while timer is running bareudp: set NETIF_F_LLTX flag bareudp: Fix use of incorrect min_headroom size vhost_net: fix ubuf refcount incorrectly when sendmsg fails r8169: work around power-saving bug on some chip versions net: dsa: lantiq_gswip: Enable GSWIP_MII_CFG_EN also for internal PHYs net: dsa: lantiq_gswip: Fix GSWIP_MII_CFG(p) register access CDC-NCM: remove "connected" log message ibmvnic: fix: NULL pointer dereference. net: usb: qmi_wwan: add Quectel EM160R-GL selftests: mlxsw: Set headroom size of correct port stmmac: intel: Add PCI IDs for TGL-H platform selftests/vm: fix building protection keys test block: add debugfs stanza for QUEUE_FLAG_NOWAIT workqueue: Kick a worker based on the actual activation of delayed works scsi: ufs: Fix wrong print message in dev_err() scsi: ufs-pci: Fix restore from S4 for Intel controllers scsi: ufs-pci: Ensure UFS device is in PowerDown mode for suspend-to-disk ->poweroff() scsi: ufs-pci: Fix recovery from hibernate exit errors for Intel controllers scsi: ufs-pci: Enable UFSHCD_CAP_RPM_AUTOSUSPEND for Intel controllers scsi: block: Introduce BLK_MQ_REQ_PM scsi: ide: Do not set the RQF_PREEMPT flag for sense requests scsi: ide: Mark power management requests with RQF_PM instead of RQF_PREEMPT scsi: scsi_transport_spi: Set RQF_PM for domain validation commands scsi: core: Only process PM requests if rpm_status != RPM_ACTIVE local64.h: make <asm/local64.h> mandatory lib/genalloc: fix the overflow when size is too big depmod: handle the case of /sbin/depmod without /sbin in PATH scsi: ufs: Clear UAC for FFU and RPMB LUNs kbuild: don't hardcode depmod path Bluetooth: revert: hci_h5: close serdev device and free hu in h5_close scsi: block: Remove RQF_PREEMPT and BLK_MQ_REQ_PREEMPT scsi: block: Do not accept any requests while suspended crypto: ecdh - avoid buffer overflow in ecdh_set_secret() crypto: asym_tpm: correct zero out potential secrets powerpc: Handle .text.{hot,unlikely}.* in linker script Staging: comedi: Return -EFAULT if copy_to_user() fails staging: mt7621-dma: Fix a resource leak in an error handling path usb: gadget: enable super speed plus USB: cdc-acm: blacklist another IR Droid device USB: cdc-wdm: Fix use after free in service_outstanding_interrupt(). usb: typec: intel_pmc_mux: Configure HPD first for HPD+IRQ request usb: dwc3: meson-g12a: disable clk on error handling path in probe usb: dwc3: gadget: Restart DWC3 gadget when enabling pullup usb: dwc3: gadget: Clear wait flag on dequeue usb: dwc3: ulpi: Use VStsDone to detect PHY regs access completion usb: dwc3: ulpi: Replace CPU-based busyloop with Protocol-based one usb: dwc3: ulpi: Fix USB2.0 HS/FS/LS PHY suspend regression usb: chipidea: ci_hdrc_imx: add missing put_device() call in usbmisc_get_init_data() USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST quirk set usb: usbip: vhci_hcd: protect shift size usb: uas: Add PNY USB Portable SSD to unusual_uas USB: serial: iuu_phoenix: fix DMA from stack USB: serial: option: add LongSung M5710 module support USB: serial: option: add Quectel EM160R-GL USB: yurex: fix control-URB timeout handling USB: usblp: fix DMA to stack ALSA: usb-audio: Fix UBSAN warnings for MIDI jacks usb: gadget: select CONFIG_CRC32 USB: Gadget: dummy-hcd: Fix shift-out-of-bounds bug usb: gadget: f_uac2: reset wMaxPacketSize usb: gadget: function: printer: Fix a memory leak for interface descriptor usb: gadget: u_ether: Fix MTU size mismatch with RX packet size USB: gadget: legacy: fix return error code in acm_ms_bind() usb: gadget: Fix spinlock lockup on usb_function_deactivate usb: gadget: configfs: Preserve function ordering after bind failure usb: gadget: configfs: Fix use-after-free issue with udc_name USB: serial: keyspan_pda: remove unused variable hwmon: (amd_energy) fix allocation of hwmon_channel_info config mm: make wait_on_page_writeback() wait for multiple pending writebacks x86/mm: Fix leak of pmd ptlock KVM: x86/mmu: Use -1 to flag an undefined spte in get_mmio_spte() KVM: x86/mmu: Get root level from walkers when retrieving MMIO SPTE kvm: check tlbs_dirty directly KVM: x86/mmu: Ensure TDP MMU roots are freed after yield x86/resctrl: Use an IPI instead of task_work_add() to update PQR_ASSOC MSR x86/resctrl: Don't move a task to the same resource group blk-iocost: fix NULL iocg deref from racing against initialization ALSA: hda/via: Fix runtime PM for Clevo W35xSS ALSA: hda/conexant: add a new hda codec CX11970 ALSA: hda/realtek - Fix speaker volume control on Lenovo C940 ALSA: hda/realtek: Add mute LED quirk for more HP laptops ALSA: hda/realtek: Enable mute and micmute LED on HP EliteBook 850 G7 ALSA: hda/realtek: Add two "Intel Reference board" SSID in the ALC256. iommu/vt-d: Move intel_iommu info from struct intel_svm to struct intel_svm_dev btrfs: qgroup: don't try to wait flushing if we're already holding a transaction btrfs: send: fix wrong file path when there is an inode with a pending rmdir Revert "device property: Keep secondary firmware node secondary by type" dmabuf: fix use-after-free of dmabuf's file->f_inode arm64: link with -z norelro for LLD or aarch64-elf drm/i915: clear the shadow batch drm/i915: clear the gpu reloc batch bcache: fix typo from SUUP to SUPP in features.h bcache: check unsupported feature sets for bcache register bcache: introduce BCH_FEATURE_INCOMPAT_LOG_LARGE_BUCKET_SIZE for large bucket net/mlx5e: Fix SWP offsets when vlan inserted by driver ARM: dts: OMAP3: disable AES on N950/N9 netfilter: x_tables: Update remaining dereference to RCU netfilter: ipset: fix shift-out-of-bounds in htable_bits() netfilter: xt_RATEEST: reject non-null terminated string from userspace netfilter: nft_dynset: report EOPNOTSUPP on missing set feature dmaengine: idxd: off by one in cleanup code x86/mtrr: Correct the range check before performing MTRR type lookups KVM: x86: fix shift out of bounds reported by UBSAN xsk: Fix memory leak for failed bind rtlwifi: rise completion at the last step of firmware callback scsi: target: Fix XCOPY NAA identifier lookup Linux 5.10.7 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I1a7c195af35831fe362b027fe013c0c7e4dc20ea	2021-01-13 10:29:42 +01:00
Randy Dunlap	2179bae04b	local64.h: make <asm/local64.h> mandatory [ Upstream commit `87dbc209ea` ] Make <asm-generic/local64.h> mandatory in include/asm-generic/Kbuild and remove all arch/*/include/asm/local64.h arch-specific files since they only #include <asm-generic/local64.h>. This fixes build errors on arch/c6x/ and arch/nios2/ for block/blk-iocost.c. Build-tested on 21 of 25 arch-es. (tools problems on the others) Yes, we could even rename <asm-generic/local64.h> to <linux/local64.h> and change all #includes to use <linux/local64.h> instead. Link: https://lkml.kernel.org/r/20201227024446.17018-1-rdunlap@infradead.org Signed-off-by: Randy Dunlap <rdunlap@infradead.org> Suggested-by: Christoph Hellwig <hch@infradead.org> Reviewed-by: Masahiro Yamada <masahiroy@kernel.org> Cc: Jens Axboe <axboe@kernel.dk> Cc: Ley Foon Tan <ley.foon.tan@intel.com> Cc: Mark Salter <msalter@redhat.com> Cc: Aurelien Jacquiot <jacquiot.aurelien@gmail.com> Cc: Peter Zijlstra <peterz@infradead.org> Cc: Arnd Bergmann <arnd@arndb.de> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2021-01-12 20:18:16 +01:00
Tao Huang	5647c1d492	Merge tag 'ASB-2020-12-05_4.19-stable' of https://android.googlesource.com/kernel/common https://source.android.com/security/bulletin/2020-12-01 CVE-2020-0444 CVE-2020-0465 CVE-2020-0466 * tag 'ASB-2020-12-05_4.19-stable': (636 commits) ANDROID: kbuild: use grep -F instead of fgrep ANDROID: GKI: usb: gadget: support claiming indexed endpoints by name UPSTREAM: arm64: sysreg: Clean up instructions for modifying PSTATE fields Revert "Revert "ANDROID: clang: update to 11.0.5"" ANDROID: kbuild: speed up ksym_dep_filter Revert "drm/atomic_helper: Stop modesets on unregistered connectors harder" Linux 4.19.161 USB: core: Fix regression in Hercules audio card x86/resctrl: Add necessary kernfs_put() calls to prevent refcount leak x86/resctrl: Remove superfluous kernfs_get() calls to prevent refcount leak x86/speculation: Fix prctl() when spectre_v2_user={seccomp,prctl},ibpb usb: gadget: Fix memleak in gadgetfs_fill_super USB: quirks: Add USB_QUIRK_DISCONNECT_SUSPEND quirk for Lenovo A630Z TIO built-in usb-audio card usb: gadget: f_midi: Fix memleak in f_midi_alloc USB: core: Change %pK for __user pointers to %px perf probe: Fix to die_entrypc() returns error correctly can: m_can: fix nominal bitiming tseg2 min for version >= 3.1 platform/x86: toshiba_acpi: Fix the wrong variable assignment platform/x86: thinkpad_acpi: Send tablet mode switch at wakeup time can: gs_usb: fix endianess problem with candleLight firmware ... Change-Id: I82ccfc3d6561d3ef3b1b06ac98d48fac997c8fb6 Conflicts: drivers/pinctrl/pinctrl-rockchip.c drivers/usb/dwc3/gadget.c drivers/usb/host/xhci.c drivers/usb/host/xhci.h	2020-12-29 16:10:48 +08:00
Kees Cook	365da50b16	UPSTREAM: arm: Enable seccomp architecture tracking To enable seccomp constant action bitmaps, we need to have a static mapping to the audit architecture and system call table size. Add these for arm. Signed-off-by: Kees Cook <keescook@chromium.org> (cherry picked from commit `424c9102fa`) Signed-off-by: Jeff Vander Stoep <jeffv@google.com> Change-Id: I90eaafdc43f618ce7dcf76e1cbb8ae1ff542ead9 Bug: 176068146	2020-12-21 18:47:31 +00:00
Greg Kroah-Hartman	b19651bfcc	Merge `c84e1efae0` ("Merge tag 'asm-generic-fixes-5.10-2' of git://git.kernel.org/pub/scm/linux/kernel/git/arnd/asm-generic") into android-mainline Steps on the way to 5.10-rc5 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I644783003a83186a34cdbb753aa492f4350f49ee	2020-11-28 08:23:09 +01:00
Linus Torvalds	c84e1efae0	asm-generic: add correct MAX_POSSIBLE_PHYSMEM_BITS setting This is a single bugfix for a bug that Stefan Agner found on 32-bit Arm, but that exists on several other architectures. Signed-off-by: Arnd Bergmann <arnd@arndb.de> -----BEGIN PGP SIGNATURE----- iQIzBAABCgAdFiEEo6/YBQwIrVS28WGKmmx57+YAGNkFAl/BZx4ACgkQmmx57+YA GNnSPA/9HK0dwaGuXHRxKpt2ShHt5kOmixlmRJszYmuSIJde945EJNTP/+2l2Qs2 TDXmOU8pdZSAZX2EHLLEksNsnhUoTBWzsn4WxHRTNVc2cYuHHA6PKMdAPV136ag/ U0gnC7eCYKCDM3A1A/G4437PDI3vfm0Wzo6Biikxwhi861bshxjVs3DapDQw5+Zn bOS8CCNpmwpDC26ZAfIY8es32Hg063GhdJXQ01uqkaZLJdRn7ui6bkv18vi+b3gM QLeaubDT4+oH+HpJJpFZ01iugBFah5iJtg/JtWyap/LJSkelyjU9Gr7qrrpI7M3t hfDzk7fRjHO1XPn2bDc4InWJEoekE9vde5M0QKn3ID8dFO1M5tNqov2uH40m4fQD UM7irWe0BmP9Nms5LV7dMWChPn8FUEr34ZYAwF9B+YPL1Ec6GGn8mA/E0Iz8pre0 MUgv5LZ8LYdeYvSSpXrgBkgv2pwni5rTc7/K9KtvGdkLQ3rOuihPBbPyR0YTYa8f UkboIky80lcx/uyhhu+OxWxe0q+Ug8WF87UkPIDDhsaF9W2DoErIwiCQhqS+AKs4 9DiCBzLgF6mZ11ijK73DtLNBmQnKdssV9Bs5lnOO0XqYdoqiQ5gRJWrixvI0OWSa WGt66UV481rV/Oxlt1A/1lynYkZU0b121fFFB/EPbuFuUwZu9So= =xgYa -----END PGP SIGNATURE----- Merge tag 'asm-generic-fixes-5.10-2' of git://git.kernel.org/pub/scm/linux/kernel/git/arnd/asm-generic Pull asm-generic fix from Arnd Bergmann: "Add correct MAX_POSSIBLE_PHYSMEM_BITS setting to asm-generic. This is a single bugfix for a bug that Stefan Agner found on 32-bit Arm, but that exists on several other architectures" * tag 'asm-generic-fixes-5.10-2' of git://git.kernel.org/pub/scm/linux/kernel/git/arnd/asm-generic: arch: pgtable: define MAX_POSSIBLE_PHYSMEM_BITS where needed	2020-11-27 15:00:35 -08:00
Greg Kroah-Hartman	67730020fa	Merge 4.19.158 into android-4.19-stable Changes in 4.19.158 regulator: defer probe when trying to get voltage from unresolved supply time: Prevent undefined behaviour in timespec64_to_ns() nbd: don't update block size after device is started usb: dwc3: gadget: Continue to process pending requests usb: dwc3: gadget: Reclaim extra TRBs after request completion btrfs: sysfs: init devices outside of the chunk_mutex btrfs: reschedule when cloning lots of extents genirq: Let GENERIC_IRQ_IPI select IRQ_DOMAIN_HIERARCHY hv_balloon: disable warning when floor reached net: xfrm: fix a race condition during allocing spi xfs: set xefi_discard when creating a deferred agfl free log intent item netfilter: ipset: Update byte and packet counters regardless of whether they match perf tools: Add missing swap for ino_generation ALSA: hda: prevent undefined shift in snd_hdac_ext_bus_get_link() can: rx-offload: don't call kfree_skb() from IRQ context can: dev: can_get_echo_skb(): prevent call to kfree_skb() in hard IRQ context can: dev: __can_get_echo_skb(): fix real payload length return value for RTR frames can: can_create_echo_skb(): fix echo skb generation: always use skb_clone() can: peak_usb: add range checking in decode operations can: peak_usb: peak_usb_get_ts_time(): fix timestamp wrapping can: peak_canfd: pucan_handle_can_rx(): fix echo management when loopback is on can: flexcan: remove FLEXCAN_QUIRK_DISABLE_MECR quirk for LS1021A xfs: flush new eof page on truncate to avoid post-eof corruption xfs: fix scrub flagging rtinherit even if there is no rt device tpm: efi: Don't create binary_bios_measurements file for an empty log Btrfs: fix missing error return if writeback for extent buffer never started ath9k_htc: Use appropriate rs_datalen type netfilter: use actual socket sk rather than skb sk when routing harder crypto: arm64/aes-modes - get rid of literal load of addend vector usb: gadget: goku_udc: fix potential crashes in probe gfs2: Free rd_bits later in gfs2_clear_rgrpd to fix use-after-free gfs2: Add missing truncate_inode_pages_final for sd_aspace gfs2: check for live vs. read-only file system in gfs2_fitrim scsi: hpsa: Fix memory leak in hpsa_init_one() drm/amdgpu: perform srbm soft reset always on SDMA resume drm/amd/pm: perform SMC reset on suspend/hibernation drm/amd/pm: do not use ixFEATURE_STATUS for checking smc running mac80211: fix use of skb payload instead of header cfg80211: regulatory: Fix inconsistent format argument scsi: scsi_dh_alua: Avoid crash during alua_bus_detach() iommu/amd: Increase interrupt remapping table limit to 512 entries s390/smp: move rcu_cpu_starting() earlier vfio: platform: fix reference leak in vfio_platform_open selftests: proc: fix warning: _GNU_SOURCE redefined tpm_tis: Disable interrupts on ThinkPad T490s tick/common: Touch watchdog in tick_unfreeze() on all CPUs mfd: sprd: Add wakeup capability for PMIC IRQ pinctrl: intel: Set default bias in case no particular value given ARM: 9019/1: kprobes: Avoid fortify_panic() when copying optprobe template pinctrl: aspeed: Fix GPI only function problem. nbd: fix a block_device refcount leak in nbd_release xfs: fix flags argument to rmap lookup when converting shared file rmaps xfs: set the unwritten bit in rmap lookup flags in xchk_bmap_get_rmapextents xfs: fix rmap key and record comparison functions xfs: fix brainos in the refcount scrubber's rmap fragment processor lan743x: fix "BUG: invalid wait context" when setting rx mode xfs: fix a missing unlock on error in xfs_fs_map_blocks of/address: Fix of_node memory leak in of_dma_is_coherent cosa: Add missing kfree in error path of cosa_write perf: Fix get_recursion_context() ext4: correctly report "not supported" for {usr,grp}jquota when !CONFIG_QUOTA ext4: unlock xattr_sem properly in ext4_inline_data_truncate() btrfs: ref-verify: fix memory leak in btrfs_ref_tree_mod btrfs: dev-replace: fail mount if we don't have replace item with target device thunderbolt: Fix memory leak if ida_simple_get() fails in enumerate_services() thunderbolt: Add the missed ida_simple_remove() in ring_request_msix() uio: Fix use-after-free in uio_unregister_device() usb: cdc-acm: Add DISABLE_ECHO for Renesas USB Download mode xhci: hisilicon: fix refercence leak in xhci_histb_probe mei: protect mei_cl_mtu from null dereference futex: Don't enable IRQs unconditionally in put_pi_state() ocfs2: initialize ip_next_orphan btrfs: fix potential overflow in cluster_pages_for_defrag on 32bit arch selinux: Fix error return code in sel_ib_pkey_sid_slow() gpio: pcie-idio-24: Fix irq mask when masking gpio: pcie-idio-24: Fix IRQ Enable Register value gpio: pcie-idio-24: Enable PEX8311 interrupts mmc: renesas_sdhi_core: Add missing tmio_mmc_host_free() at remove don't dump the threads that had been already exiting when zapped. drm/gma500: Fix out-of-bounds access to struct drm_device.vblank[] pinctrl: amd: use higher precision for 512 RtcClk pinctrl: amd: fix incorrect way to disable debounce filter erofs: derive atime instead of leaving it empty swiotlb: fix "x86: Don't panic if can not alloc buffer for swiotlb" IPv6: Set SIT tunnel hard_header_len to zero net/af_iucv: fix null pointer dereference on shutdown net: Update window_clamp if SOCK_RCVBUF is set net/x25: Fix null-ptr-deref in x25_connect tipc: fix memory leak in tipc_topsrv_start() vrf: Fix fast path output packet handling with async Netfilter rules r8169: fix potential skb double free in an error path random32: make prandom_u32() output unpredictable x86/speculation: Allow IBPB to be conditionally enabled on CPUs with always-on STIBP perf scripting python: Avoid declaring function pointers with a visibility attribute perf/core: Fix race in the perf_mmap_close() function Revert "kernel/reboot.c: convert simple_strtoul to kstrtoint" reboot: fix overflow parsing reboot cpu number net: sch_generic: fix the missing new qdisc assignment bug Convert trailing spaces and periods in path components Linux 4.19.158 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: Ic626f4e05969543a701587d14bce4476cb146303	2020-11-19 12:25:33 +01:00
Andrew Jeffery	0ef358bc87	ARM: 9019/1: kprobes: Avoid fortify_panic() when copying optprobe template [ Upstream commit `9fa2e7af3d` ] Setting both CONFIG_KPROBES=y and CONFIG_FORTIFY_SOURCE=y on ARM leads to a panic in memcpy() when injecting a kprobe despite the fixes found in commit `e46daee53b` ("ARM: 8806/1: kprobes: Fix false positive with FORTIFY_SOURCE") and commit `0ac569bf6a` ("ARM: 8834/1: Fix: kprobes: optimized kprobes illegal instruction"). arch/arm/include/asm/kprobes.h effectively declares the target type of the optprobe_template_entry assembly label as a u32 which leads memcpy()'s __builtin_object_size() call to determine that the pointed-to object is of size four. However, the symbol is used as a handle for the optimised probe assembly template that is at least 96 bytes in size. The symbol's use despite its type blows up the memcpy() in ARM's arch_prepare_optimized_kprobe() with a false-positive fortify_panic() when it should instead copy the optimised probe template into place: ``` $ sudo perf probe -a aspeed_g6_pinctrl_probe [ 158.457252] detected buffer overflow in memcpy [ 158.458069] ------------[ cut here ]------------ [ 158.458283] kernel BUG at lib/string.c:1153! [ 158.458436] Internal error: Oops - BUG: 0 [#1] SMP ARM [ 158.458768] Modules linked in: [ 158.459043] CPU: 1 PID: 99 Comm: perf Not tainted 5.9.0-rc7-00038-gc53ebf8167e9 #158 [ 158.459296] Hardware name: Generic DT based system [ 158.459529] PC is at fortify_panic+0x18/0x20 [ 158.459658] LR is at __irq_work_queue_local+0x3c/0x74 [ 158.459831] pc : [<8047451c>] lr : [<8020ecd4>] psr: 60000013 [ 158.460032] sp : be2d1d50 ip : be2d1c58 fp : be2d1d5c [ 158.460174] r10: 00000006 r9 : 00000000 r8 : 00000060 [ 158.460348] r7 : 8011e434 r6 : b9e0b800 r5 : 7f000000 r4 : b9fe4f0c [ 158.460557] r3 : 80c04cc8 r2 : 00000000 r1 : be7c03cc r0 : 00000022 [ 158.460801] Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none [ 158.461037] Control: 10c5387d Table: b9cd806a DAC: 00000051 [ 158.461251] Process perf (pid: 99, stack limit = 0x81c71a69) [ 158.461472] Stack: (0xbe2d1d50 to 0xbe2d2000) [ 158.461757] 1d40: be2d1d84 be2d1d60 8011e724 80474510 [ 158.462104] 1d60: b9e0b800 b9fe4f0c 00000000 b9fe4f14 80c8ec80 be235000 be2d1d9c be2d1d88 [ 158.462436] 1d80: 801cee44 8011e57c b9fe4f0c 00000000 be2d1dc4 be2d1da0 801d0ad0 801cedec [ 158.462742] 1da0: 00000000 00000000 b9fe4f00 ffffffea 00000000 be235000 be2d1de4 be2d1dc8 [ 158.463087] 1dc0: 80204604 801d0738 00000000 00000000 b9fe4004 ffffffea be2d1e94 be2d1de8 [ 158.463428] 1de0: 80205434 80204570 00385c00 00000000 00000000 00000000 be2d1e14 be2d1e08 [ 158.463880] 1e00: 802ba014 b9fe4f00 b9e718c0 b9fe4f84 b9e71ec8 be2d1e24 00000000 00385c00 [ 158.464365] 1e20: 00000000 626f7270 00000065 802b905c be2d1e94 0000002e 00000000 802b9914 [ 158.464829] 1e40: be2d1e84 be2d1e50 802b9914 8028ff78 804629d0 b9e71ec0 0000002e b9e71ec0 [ 158.465141] 1e60: be2d1ea8 80c04cc8 00000cc0 b9e713c4 00000002 80205834 80205834 0000002e [ 158.465488] 1e80: be235000 be235000 be2d1ea4 be2d1e98 80205854 80204e94 be2d1ecc be2d1ea8 [ 158.465806] 1ea0: 801ee4a0 80205840 00000002 80c04cc8 00000000 0000002e 0000002e 00000000 [ 158.466110] 1ec0: be2d1f0c be2d1ed0 801ee5c8 801ee428 00000000 be2d0000 006b1fd0 00000051 [ 158.466398] 1ee0: 00000000 b9eedf00 0000002e 80204410 006b1fd0 be2d1f60 00000000 00000004 [ 158.466763] 1f00: be2d1f24 be2d1f10 8020442c 801ee4c4 80205834 802c613c be2d1f5c be2d1f28 [ 158.467102] 1f20: 802c60ac 8020441c be2d1fac be2d1f38 8010c764 802e9888 be2d1f5c b9eedf00 [ 158.467447] 1f40: b9eedf00 006b1fd0 0000002e 00000000 be2d1f94 be2d1f60 802c634c 802c5fec [ 158.467812] 1f60: 00000000 00000000 00000000 80c04cc8 006b1fd0 00000003 76f7a610 00000004 [ 158.468155] 1f80: 80100284 be2d0000 be2d1fa4 be2d1f98 802c63ec 802c62e8 00000000 be2d1fa8 [ 158.468508] 1fa0: 80100080 802c63e0 006b1fd0 00000003 00000003 006b1fd0 0000002e 00000000 [ 158.468858] 1fc0: 006b1fd0 00000003 76f7a610 00000004 006b1fb0 0026d348 00000017 7ef2738c [ 158.469202] 1fe0: 76f3431c 7ef272d8 0014ec50 76f34338 60000010 00000003 00000000 00000000 [ 158.469461] Backtrace: [ 158.469683] [<80474504>] (fortify_panic) from [<8011e724>] (arch_prepare_optimized_kprobe+0x1b4/0x1f8) [ 158.470021] [<8011e570>] (arch_prepare_optimized_kprobe) from [<801cee44>] (alloc_aggr_kprobe+0x64/0x70) [ 158.470287] r9:be235000 r8:80c8ec80 r7:b9fe4f14 r6:00000000 r5:b9fe4f0c r4:b9e0b800 [ 158.470478] [<801cede0>] (alloc_aggr_kprobe) from [<801d0ad0>] (register_kprobe+0x3a4/0x5a0) [ 158.470685] r5:00000000 r4:b9fe4f0c [ 158.470790] [<801d072c>] (register_kprobe) from [<80204604>] (__register_trace_kprobe+0xa0/0xa4) [ 158.471001] r9:be235000 r8:00000000 r7:ffffffea r6:b9fe4f00 r5:00000000 r4:00000000 [ 158.471188] [<80204564>] (__register_trace_kprobe) from [<80205434>] (trace_kprobe_create+0x5ac/0x9ac) [ 158.471408] r7:ffffffea r6:b9fe4004 r5:00000000 r4:00000000 [ 158.471553] [<80204e88>] (trace_kprobe_create) from [<80205854>] (create_or_delete_trace_kprobe+0x20/0x3c) [ 158.471766] r10:be235000 r9:be235000 r8:0000002e r7:80205834 r6:80205834 r5:00000002 [ 158.471949] r4:b9e713c4 [ 158.472027] [<80205834>] (create_or_delete_trace_kprobe) from [<801ee4a0>] (trace_run_command+0x84/0x9c) [ 158.472255] [<801ee41c>] (trace_run_command) from [<801ee5c8>] (trace_parse_run_command+0x110/0x1f8) [ 158.472471] r6:00000000 r5:0000002e r4:0000002e [ 158.472594] [<801ee4b8>] (trace_parse_run_command) from [<8020442c>] (probes_write+0x1c/0x28) [ 158.472800] r10:00000004 r9:00000000 r8:be2d1f60 r7:006b1fd0 r6:80204410 r5:0000002e [ 158.472968] r4:b9eedf00 [ 158.473046] [<80204410>] (probes_write) from [<802c60ac>] (vfs_write+0xcc/0x1e8) [ 158.473226] [<802c5fe0>] (vfs_write) from [<802c634c>] (ksys_write+0x70/0xf8) [ 158.473400] r8:00000000 r7:0000002e r6:006b1fd0 r5:b9eedf00 r4:b9eedf00 [ 158.473567] [<802c62dc>] (ksys_write) from [<802c63ec>] (sys_write+0x18/0x1c) [ 158.473745] r9:be2d0000 r8:80100284 r7:00000004 r6:76f7a610 r5:00000003 r4:006b1fd0 [ 158.473932] [<802c63d4>] (sys_write) from [<80100080>] (ret_fast_syscall+0x0/0x54) [ 158.474126] Exception stack(0xbe2d1fa8 to 0xbe2d1ff0) [ 158.474305] 1fa0: 006b1fd0 00000003 00000003 006b1fd0 0000002e 00000000 [ 158.474573] 1fc0: 006b1fd0 00000003 76f7a610 00000004 006b1fb0 0026d348 00000017 7ef2738c [ 158.474811] 1fe0: 76f3431c 7ef272d8 0014ec50 76f34338 [ 158.475171] Code: e24cb004 e1a01000 e59f0004 ebf40dd3 (e7f001f2) [ 158.475847] ---[ end trace 55a5b31c08a29f00 ]--- [ 158.476088] Kernel panic - not syncing: Fatal exception [ 158.476375] CPU0: stopping [ 158.476709] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G D 5.9.0-rc7-00038-gc53ebf8167e9 #158 [ 158.477176] Hardware name: Generic DT based system [ 158.477411] Backtrace: [ 158.477604] [<8010dd28>] (dump_backtrace) from [<8010dfd4>] (show_stack+0x20/0x24) [ 158.477990] r7:00000000 r6:60000193 r5:00000000 r4:80c2f634 [ 158.478323] [<8010dfb4>] (show_stack) from [<8046390c>] (dump_stack+0xcc/0xe8) [ 158.478686] [<80463840>] (dump_stack) from [<80110750>] (handle_IPI+0x334/0x3a0) [ 158.479063] r7:00000000 r6:00000004 r5:80b65cc8 r4:80c78278 [ 158.479352] [<8011041c>] (handle_IPI) from [<801013f8>] (gic_handle_irq+0x88/0x94) [ 158.479757] r10:10c5387d r9:80c01ed8 r8:00000000 r7:c0802000 r6:80c0537c r5:000003ff [ 158.480146] r4:c080200c r3:fffffff4 [ 158.480364] [<80101370>] (gic_handle_irq) from [<80100b6c>] (__irq_svc+0x6c/0x90) [ 158.480748] Exception stack(0x80c01ed8 to 0x80c01f20) [ 158.481031] 1ec0: 000128bc 00000000 [ 158.481499] 1ee0: be7b8174 8011d3a0 80c00000 00000000 80c04cec 80c04d28 80c5d7c2 80a026d4 [ 158.482091] 1f00: 10c5387d 80c01f34 80c01f38 80c01f28 80109554 80109558 60000013 ffffffff [ 158.482621] r9:80c00000 r8:80c5d7c2 r7:80c01f0c r6:ffffffff r5:60000013 r4:80109558 [ 158.482983] [<80109518>] (arch_cpu_idle) from [<80818780>] (default_idle_call+0x38/0x120) [ 158.483360] [<80818748>] (default_idle_call) from [<801585a8>] (do_idle+0xd4/0x158) [ 158.483945] r5:00000000 r4:80c00000 [ 158.484237] [<801584d4>] (do_idle) from [<801588f4>] (cpu_startup_entry+0x28/0x2c) [ 158.484784] r9:80c78000 r8:00000000 r7:80c78000 r6:80c78040 r5:80c04cc0 r4:000000d6 [ 158.485328] [<801588cc>] (cpu_startup_entry) from [<80810a78>] (rest_init+0x9c/0xbc) [ 158.485930] [<808109dc>] (rest_init) from [<80b00ae4>] (arch_call_rest_init+0x18/0x1c) [ 158.486503] r5:80c04cc0 r4:00000001 [ 158.486857] [<80b00acc>] (arch_call_rest_init) from [<80b00fcc>] (start_kernel+0x46c/0x548) [ 158.487589] [<80b00b60>] (start_kernel) from [<00000000>] (0x0) ``` Fixes: `e46daee53b` ("ARM: 8806/1: kprobes: Fix false positive with FORTIFY_SOURCE") Fixes: `0ac569bf6a` ("ARM: 8834/1: Fix: kprobes: optimized kprobes illegal instruction") Suggested-by: Kees Cook <keescook@chromium.org> Signed-off-by: Andrew Jeffery <andrew@aj.id.au> Tested-by: Luka Oreskovic <luka.oreskovic@sartura.hr> Tested-by: Joel Stanley <joel@jms.id.au> Reviewed-by: Joel Stanley <joel@jms.id.au> Acked-by: Masami Hiramatsu <mhiramat@kernel.org> Cc: Luka Oreskovic <luka.oreskovic@sartura.hr> Cc: Juraj Vijtiuk <juraj.vijtiuk@sartura.hr> Signed-off-by: Russell King <rmk+kernel@armlinux.org.uk> Signed-off-by: Sasha Levin <sashal@kernel.org>	2020-11-18 19:18:46 +01:00
Arnd Bergmann	cef3970381	arch: pgtable: define MAX_POSSIBLE_PHYSMEM_BITS where needed Stefan Agner reported a bug when using zsram on 32-bit Arm machines with RAM above the 4GB address boundary: Unable to handle kernel NULL pointer dereference at virtual address 00000000 pgd = a27bd01c [00000000] pgd=236a0003, pmd=1ffa64003 Internal error: Oops: 207 [#1] SMP ARM Modules linked in: mdio_bcm_unimac(+) brcmfmac cfg80211 brcmutil raspberrypi_hwmon hci_uart crc32_arm_ce bcm2711_thermal phy_generic genet CPU: 0 PID: 123 Comm: mkfs.ext4 Not tainted 5.9.6 #1 Hardware name: BCM2711 PC is at zs_map_object+0x94/0x338 LR is at zram_bvec_rw.constprop.0+0x330/0xa64 pc : [<c0602b38>] lr : [<c0bda6a0>] psr: 60000013 sp : e376bbe0 ip : 00000000 fp : c1e2921c r10: 00000002 r9 : c1dda730 r8 : 00000000 r7 : e8ff7a00 r6 : 00000000 r5 : 02f9ffa0 r4 : e3710000 r3 : 000fdffe r2 : c1e0ce80 r1 : ebf979a0 r0 : 00000000 Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user Control: 30c5383d Table: 235c2a80 DAC: fffffffd Process mkfs.ext4 (pid: 123, stack limit = 0x495a22e6) Stack: (0xe376bbe0 to 0xe376c000) As it turns out, zsram needs to know the maximum memory size, which is defined in MAX_PHYSMEM_BITS when CONFIG_SPARSEMEM is set, or in MAX_POSSIBLE_PHYSMEM_BITS on the x86 architecture. The same problem will be hit on all 32-bit architectures that have a physical address space larger than 4GB and happen to not enable sparsemem and include asm/sparsemem.h from asm/pgtable.h. After the initial discussion, I suggested just always defining MAX_POSSIBLE_PHYSMEM_BITS whenever CONFIG_PHYS_ADDR_T_64BIT is set, or provoking a build error otherwise. This addresses all configurations that can currently have this runtime bug, but leaves all other configurations unchanged. I looked up the possible number of bits in source code and datasheets, here is what I found: - on ARC, CONFIG_ARC_HAS_PAE40 controls whether 32 or 40 bits are used - on ARM, CONFIG_LPAE enables 40 bit addressing, without it we never support more than 32 bits, even though supersections in theory allow up to 40 bits as well. - on MIPS, some MIPS32r1 or later chips support 36 bits, and MIPS32r5 XPA supports up to 60 bits in theory, but 40 bits are more than anyone will ever ship - On PowerPC, there are three different implementations of 36 bit addressing, but 32-bit is used without CONFIG_PTE_64BIT - On RISC-V, the normal page table format can support 34 bit addressing. There is no highmem support on RISC-V, so anything above 2GB is unused, but it might be useful to eventually support CONFIG_ZRAM for high pages. Fixes: `61989a80fb` ("staging: zsmalloc: zsmalloc memory allocation library") Fixes: `02390b87a9` ("mm/zsmalloc: Prepare to variable MAX_PHYSMEM_BITS") Acked-by: Thomas Bogendoerfer <tsbogend@alpha.franken.de> Reviewed-by: Stefan Agner <stefan@agner.ch> Tested-by: Stefan Agner <stefan@agner.ch> Acked-by: Mike Rapoport <rppt@linux.ibm.com> Link: https://lore.kernel.org/linux-mm/bdfa44bf1c570b05d6c70898e2bbb0acf234ecdf.1604762181.git.stefan@agner.ch/ Signed-off-by: Arnd Bergmann <arnd@arndb.de>	2020-11-16 16:57:18 +01:00
Greg Kroah-Hartman	73936cf2dd	Merge `f01c30de86` ("Merge tag 'vfs-5.10-fixes-2' of git://git.kernel.org/pub/scm/fs/xfs/xfs-linux") into android-mainline Steps on the way to 5.10-rc4 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: Iba36d2244c4229d44e3d391ed23dc25c6022f917	2020-11-14 10:29:08 +01:00
Alistair Delva	6de4b77e2c	ANDROID: ARM: Bump command line size 1KB command line is insufficient to boot cuttlefish for ARM. Increase it to 2KB to match ARM64. Bug: 165410044 Change-Id: Icc230926c1c01e4fe82944e1fe0f8c6f068110ea Signed-off-by: Alistair Delva <adelva@google.com>	2020-11-13 15:56:56 +00:00
Greg Kroah-Hartman	67d3ed5765	Linux 5.10-rc1 -----BEGIN PGP SIGNATURE----- iQFSBAABCAA8FiEEq68RxlopcLEwq+PEeb4+QwBBGIYFAl+V+LMeHHRvcnZhbGRz QGxpbnV4LWZvdW5kYXRpb24ub3JnAAoJEHm+PkMAQRiGGQoH/1FIf6373lekuQf0 pSq+2PPeILjL6+BppjNGJdwTKTEFEaz7xBpDwZURW2dt0M5jib2sn/0VJ/lh0Ln3 880hXPjVyziU7/p1vTiPFYwKxav/ZE5cHrEW+nKimucyYPgkDxikFRuvrPQ1M0Sc vLZMmwjQlBD1kTsh9WR5lQ9Z8KqUtOazW47AbWE5QTTCQPmIXIdqByqLXlqS46Ok gW8tqaCI+FpBLP3fJn0EX5UTYH1Tsj9TmIFE8jqm5lGa/+VDM5KNyczEosKv86Xk 0hBEUbAAZWdwieySJwBH7Njqu9g1o7bRUIJJsbXm0Fcnu+Ft619r3mJkkkXaaWKN mk7M/Uk= =1dE8 -----END PGP SIGNATURE----- Merge 'v5.10-rc1' into android-mainline Linux 5.10-rc1 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: Iace3fc84a00d3023c75caa086a266de17dc1847c	2020-10-29 06:32:38 +01:00
Andrew Jeffery	9fa2e7af3d	ARM: 9019/1: kprobes: Avoid fortify_panic() when copying optprobe template Setting both CONFIG_KPROBES=y and CONFIG_FORTIFY_SOURCE=y on ARM leads to a panic in memcpy() when injecting a kprobe despite the fixes found in commit `e46daee53b` ("ARM: 8806/1: kprobes: Fix false positive with FORTIFY_SOURCE") and commit `0ac569bf6a` ("ARM: 8834/1: Fix: kprobes: optimized kprobes illegal instruction"). arch/arm/include/asm/kprobes.h effectively declares the target type of the optprobe_template_entry assembly label as a u32 which leads memcpy()'s __builtin_object_size() call to determine that the pointed-to object is of size four. However, the symbol is used as a handle for the optimised probe assembly template that is at least 96 bytes in size. The symbol's use despite its type blows up the memcpy() in ARM's arch_prepare_optimized_kprobe() with a false-positive fortify_panic() when it should instead copy the optimised probe template into place: ``` $ sudo perf probe -a aspeed_g6_pinctrl_probe [ 158.457252] detected buffer overflow in memcpy [ 158.458069] ------------[ cut here ]------------ [ 158.458283] kernel BUG at lib/string.c:1153! [ 158.458436] Internal error: Oops - BUG: 0 [#1] SMP ARM [ 158.458768] Modules linked in: [ 158.459043] CPU: 1 PID: 99 Comm: perf Not tainted 5.9.0-rc7-00038-gc53ebf8167e9 #158 [ 158.459296] Hardware name: Generic DT based system [ 158.459529] PC is at fortify_panic+0x18/0x20 [ 158.459658] LR is at __irq_work_queue_local+0x3c/0x74 [ 158.459831] pc : [<8047451c>] lr : [<8020ecd4>] psr: 60000013 [ 158.460032] sp : be2d1d50 ip : be2d1c58 fp : be2d1d5c [ 158.460174] r10: 00000006 r9 : 00000000 r8 : 00000060 [ 158.460348] r7 : 8011e434 r6 : b9e0b800 r5 : 7f000000 r4 : b9fe4f0c [ 158.460557] r3 : 80c04cc8 r2 : 00000000 r1 : be7c03cc r0 : 00000022 [ 158.460801] Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none [ 158.461037] Control: 10c5387d Table: b9cd806a DAC: 00000051 [ 158.461251] Process perf (pid: 99, stack limit = 0x81c71a69) [ 158.461472] Stack: (0xbe2d1d50 to 0xbe2d2000) [ 158.461757] 1d40: be2d1d84 be2d1d60 8011e724 80474510 [ 158.462104] 1d60: b9e0b800 b9fe4f0c 00000000 b9fe4f14 80c8ec80 be235000 be2d1d9c be2d1d88 [ 158.462436] 1d80: 801cee44 8011e57c b9fe4f0c 00000000 be2d1dc4 be2d1da0 801d0ad0 801cedec [ 158.462742] 1da0: 00000000 00000000 b9fe4f00 ffffffea 00000000 be235000 be2d1de4 be2d1dc8 [ 158.463087] 1dc0: 80204604 801d0738 00000000 00000000 b9fe4004 ffffffea be2d1e94 be2d1de8 [ 158.463428] 1de0: 80205434 80204570 00385c00 00000000 00000000 00000000 be2d1e14 be2d1e08 [ 158.463880] 1e00: 802ba014 b9fe4f00 b9e718c0 b9fe4f84 b9e71ec8 be2d1e24 00000000 00385c00 [ 158.464365] 1e20: 00000000 626f7270 00000065 802b905c be2d1e94 0000002e 00000000 802b9914 [ 158.464829] 1e40: be2d1e84 be2d1e50 802b9914 8028ff78 804629d0 b9e71ec0 0000002e b9e71ec0 [ 158.465141] 1e60: be2d1ea8 80c04cc8 00000cc0 b9e713c4 00000002 80205834 80205834 0000002e [ 158.465488] 1e80: be235000 be235000 be2d1ea4 be2d1e98 80205854 80204e94 be2d1ecc be2d1ea8 [ 158.465806] 1ea0: 801ee4a0 80205840 00000002 80c04cc8 00000000 0000002e 0000002e 00000000 [ 158.466110] 1ec0: be2d1f0c be2d1ed0 801ee5c8 801ee428 00000000 be2d0000 006b1fd0 00000051 [ 158.466398] 1ee0: 00000000 b9eedf00 0000002e 80204410 006b1fd0 be2d1f60 00000000 00000004 [ 158.466763] 1f00: be2d1f24 be2d1f10 8020442c 801ee4c4 80205834 802c613c be2d1f5c be2d1f28 [ 158.467102] 1f20: 802c60ac 8020441c be2d1fac be2d1f38 8010c764 802e9888 be2d1f5c b9eedf00 [ 158.467447] 1f40: b9eedf00 006b1fd0 0000002e 00000000 be2d1f94 be2d1f60 802c634c 802c5fec [ 158.467812] 1f60: 00000000 00000000 00000000 80c04cc8 006b1fd0 00000003 76f7a610 00000004 [ 158.468155] 1f80: 80100284 be2d0000 be2d1fa4 be2d1f98 802c63ec 802c62e8 00000000 be2d1fa8 [ 158.468508] 1fa0: 80100080 802c63e0 006b1fd0 00000003 00000003 006b1fd0 0000002e 00000000 [ 158.468858] 1fc0: 006b1fd0 00000003 76f7a610 00000004 006b1fb0 0026d348 00000017 7ef2738c [ 158.469202] 1fe0: 76f3431c 7ef272d8 0014ec50 76f34338 60000010 00000003 00000000 00000000 [ 158.469461] Backtrace: [ 158.469683] [<80474504>] (fortify_panic) from [<8011e724>] (arch_prepare_optimized_kprobe+0x1b4/0x1f8) [ 158.470021] [<8011e570>] (arch_prepare_optimized_kprobe) from [<801cee44>] (alloc_aggr_kprobe+0x64/0x70) [ 158.470287] r9:be235000 r8:80c8ec80 r7:b9fe4f14 r6:00000000 r5:b9fe4f0c r4:b9e0b800 [ 158.470478] [<801cede0>] (alloc_aggr_kprobe) from [<801d0ad0>] (register_kprobe+0x3a4/0x5a0) [ 158.470685] r5:00000000 r4:b9fe4f0c [ 158.470790] [<801d072c>] (register_kprobe) from [<80204604>] (__register_trace_kprobe+0xa0/0xa4) [ 158.471001] r9:be235000 r8:00000000 r7:ffffffea r6:b9fe4f00 r5:00000000 r4:00000000 [ 158.471188] [<80204564>] (__register_trace_kprobe) from [<80205434>] (trace_kprobe_create+0x5ac/0x9ac) [ 158.471408] r7:ffffffea r6:b9fe4004 r5:00000000 r4:00000000 [ 158.471553] [<80204e88>] (trace_kprobe_create) from [<80205854>] (create_or_delete_trace_kprobe+0x20/0x3c) [ 158.471766] r10:be235000 r9:be235000 r8:0000002e r7:80205834 r6:80205834 r5:00000002 [ 158.471949] r4:b9e713c4 [ 158.472027] [<80205834>] (create_or_delete_trace_kprobe) from [<801ee4a0>] (trace_run_command+0x84/0x9c) [ 158.472255] [<801ee41c>] (trace_run_command) from [<801ee5c8>] (trace_parse_run_command+0x110/0x1f8) [ 158.472471] r6:00000000 r5:0000002e r4:0000002e [ 158.472594] [<801ee4b8>] (trace_parse_run_command) from [<8020442c>] (probes_write+0x1c/0x28) [ 158.472800] r10:00000004 r9:00000000 r8:be2d1f60 r7:006b1fd0 r6:80204410 r5:0000002e [ 158.472968] r4:b9eedf00 [ 158.473046] [<80204410>] (probes_write) from [<802c60ac>] (vfs_write+0xcc/0x1e8) [ 158.473226] [<802c5fe0>] (vfs_write) from [<802c634c>] (ksys_write+0x70/0xf8) [ 158.473400] r8:00000000 r7:0000002e r6:006b1fd0 r5:b9eedf00 r4:b9eedf00 [ 158.473567] [<802c62dc>] (ksys_write) from [<802c63ec>] (sys_write+0x18/0x1c) [ 158.473745] r9:be2d0000 r8:80100284 r7:00000004 r6:76f7a610 r5:00000003 r4:006b1fd0 [ 158.473932] [<802c63d4>] (sys_write) from [<80100080>] (ret_fast_syscall+0x0/0x54) [ 158.474126] Exception stack(0xbe2d1fa8 to 0xbe2d1ff0) [ 158.474305] 1fa0: 006b1fd0 00000003 00000003 006b1fd0 0000002e 00000000 [ 158.474573] 1fc0: 006b1fd0 00000003 76f7a610 00000004 006b1fb0 0026d348 00000017 7ef2738c [ 158.474811] 1fe0: 76f3431c 7ef272d8 0014ec50 76f34338 [ 158.475171] Code: e24cb004 e1a01000 e59f0004 ebf40dd3 (e7f001f2) [ 158.475847] ---[ end trace 55a5b31c08a29f00 ]--- [ 158.476088] Kernel panic - not syncing: Fatal exception [ 158.476375] CPU0: stopping [ 158.476709] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G D 5.9.0-rc7-00038-gc53ebf8167e9 #158 [ 158.477176] Hardware name: Generic DT based system [ 158.477411] Backtrace: [ 158.477604] [<8010dd28>] (dump_backtrace) from [<8010dfd4>] (show_stack+0x20/0x24) [ 158.477990] r7:00000000 r6:60000193 r5:00000000 r4:80c2f634 [ 158.478323] [<8010dfb4>] (show_stack) from [<8046390c>] (dump_stack+0xcc/0xe8) [ 158.478686] [<80463840>] (dump_stack) from [<80110750>] (handle_IPI+0x334/0x3a0) [ 158.479063] r7:00000000 r6:00000004 r5:80b65cc8 r4:80c78278 [ 158.479352] [<8011041c>] (handle_IPI) from [<801013f8>] (gic_handle_irq+0x88/0x94) [ 158.479757] r10:10c5387d r9:80c01ed8 r8:00000000 r7:c0802000 r6:80c0537c r5:000003ff [ 158.480146] r4:c080200c r3:fffffff4 [ 158.480364] [<80101370>] (gic_handle_irq) from [<80100b6c>] (__irq_svc+0x6c/0x90) [ 158.480748] Exception stack(0x80c01ed8 to 0x80c01f20) [ 158.481031] 1ec0: 000128bc 00000000 [ 158.481499] 1ee0: be7b8174 8011d3a0 80c00000 00000000 80c04cec 80c04d28 80c5d7c2 80a026d4 [ 158.482091] 1f00: 10c5387d 80c01f34 80c01f38 80c01f28 80109554 80109558 60000013 ffffffff [ 158.482621] r9:80c00000 r8:80c5d7c2 r7:80c01f0c r6:ffffffff r5:60000013 r4:80109558 [ 158.482983] [<80109518>] (arch_cpu_idle) from [<80818780>] (default_idle_call+0x38/0x120) [ 158.483360] [<80818748>] (default_idle_call) from [<801585a8>] (do_idle+0xd4/0x158) [ 158.483945] r5:00000000 r4:80c00000 [ 158.484237] [<801584d4>] (do_idle) from [<801588f4>] (cpu_startup_entry+0x28/0x2c) [ 158.484784] r9:80c78000 r8:00000000 r7:80c78000 r6:80c78040 r5:80c04cc0 r4:000000d6 [ 158.485328] [<801588cc>] (cpu_startup_entry) from [<80810a78>] (rest_init+0x9c/0xbc) [ 158.485930] [<808109dc>] (rest_init) from [<80b00ae4>] (arch_call_rest_init+0x18/0x1c) [ 158.486503] r5:80c04cc0 r4:00000001 [ 158.486857] [<80b00acc>] (arch_call_rest_init) from [<80b00fcc>] (start_kernel+0x46c/0x548) [ 158.487589] [<80b00b60>] (start_kernel) from [<00000000>] (0x0) ``` Fixes: `e46daee53b` ("ARM: 8806/1: kprobes: Fix false positive with FORTIFY_SOURCE") Fixes: `0ac569bf6a` ("ARM: 8834/1: Fix: kprobes: optimized kprobes illegal instruction") Suggested-by: Kees Cook <keescook@chromium.org> Signed-off-by: Andrew Jeffery <andrew@aj.id.au> Tested-by: Luka Oreskovic <luka.oreskovic@sartura.hr> Tested-by: Joel Stanley <joel@jms.id.au> Reviewed-by: Joel Stanley <joel@jms.id.au> Acked-by: Masami Hiramatsu <mhiramat@kernel.org> Cc: Luka Oreskovic <luka.oreskovic@sartura.hr> Cc: Juraj Vijtiuk <juraj.vijtiuk@sartura.hr> Signed-off-by: Russell King <rmk+kernel@armlinux.org.uk>	2020-10-27 12:11:51 +00:00
Greg Kroah-Hartman	460adfb499	Merge `e731f3146f` ("Merge tag 'armsoc-soc' of git://git.kernel.org/pub/scm/linux/kernel/git/soc/soc") into android-mainline Steps on the way to 5.10-rc1 Resolves conflicts with: drivers/tty/serial/Kconfig Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I346cc0d7065f68a65fa5ba07911999aca0b01a15	2020-10-27 11:50:07 +01:00

1 2 3 4 5 ...

3870 Commits