Commit Graph

6938 Commits

Author SHA1 Message Date
Tao Huang
c7a43f0886 Merge tag 'ASB-2022-06-05_12-5.10' of https://android.googlesource.com/kernel/common
https://source.android.com/security/bulletin/2022-01-01
CVE-2022-24958
CVE-2022-20136
CVE-2022-23960
CVE-2022-20141
CVE-2021-4154
CVE-2022-20132

* tag 'ASB-2022-06-05_12-5.10': (1188 commits)
  BACKPORT: net/sched: cls_u32: fix netns refcount changes in u32_change()
  UPSTREAM: io_uring: always use original task when preparing req identity
  FROMLIST: remoteproc: Fix dma_mem leak after rproc_shutdown
  FROMLIST: dma-mapping: Add dma_release_coherent_memory to DMA API
  ANDROID: Update QCOM symbol list for __reset_control_get
  ANDROID: vendor_hooks: Add hooks for mutex
  BACKPORT: can: ems_usb: ems_usb_start_xmit(): fix double dev_kfree_skb() in error path
  BACKPORT: can: usb_8dev: usb_8dev_start_xmit(): fix double dev_kfree_skb() in error path
  ANDROID: GKI: Update symbols to symbol list
  ANDROID: oplus: Update the ABI xml and symbol list
  UPSTREAM: remoteproc: Fix count check in rproc_coredump_write()
  BACKPORT: esp: Fix possible buffer overflow in ESP transformation
  ANDROID: Fix the drain_all_pages default condition broken by a hook
  UPSTREAM: Revert "xfrm: xfrm_state_mtu should return at least 1280 for ipv6"
  UPSTREAM: xfrm: fix MTU regression
  ANDROID: signal: Add vendor hook for memory reaping
  FROMGIT: usb: gadget: uvc: allow for application to cleanly shutdown
  FROMGIT: usb: dwc3: gadget: increase tx fifo size for ss isoc endpoints
  UPSTREAM: usb: gadget: configfs: clear deactivation flag in configfs_composite_unbind()
  FROMGIT: usb: gadget: uvc: remove pause flag use
  ...

Change-Id: Idf3eea3b21dc69c8189161c0e24744336431913a

Conflicts:
	drivers/gpu/drm/rockchip/dw_hdmi-rockchip.c
	drivers/spi/spi-rockchip.c
	drivers/usb/gadget/function/f_uvc.c
	drivers/usb/gadget/function/uvc.h
	drivers/usb/gadget/function/uvc_configfs.c
	drivers/usb/gadget/function/uvc_queue.c
	drivers/usb/gadget/function/uvc_video.c
	sound/soc/rockchip/rockchip_i2s.c
2022-07-15 17:58:38 +08:00
Tao Huang
24cbee6672 Merge tag 'ASB-2022-04-05_12-5.10' of https://android.googlesource.com/kernel/common
https://source.android.com/security/bulletin/2022-04-01
CVE-2021-0707
CVE-2021-39800
CVE-2021-39801 (4.9 only)
CVE-2021-39802

* tag 'ASB-2022-04-05_12-5.10': (3832 commits)
  ANDROID: GKI: Update symbols to abi_gki_aarch64_oplus
  ANDROID: vendor_hooks: Reduce pointless modversions CRC churn
  UPSTREAM: locking/lockdep: Avoid potential access of invalid memory in lock_class
  ANDROID: mm: Fix implicit declaration of function 'isolate_lru_page'
  ANDROID: GKI: Update symbols to symbol list
  ANDROID: GKI: Update symbols to symbol list
  ANDROID: GKI: Add hook symbol to symbol list
  Revert "ANDROID: dm-bow: Protect Ranges fetched and erased from the RB tree"
  ANDROID: vendor_hooks: Add hooks to for free_unref_page_commit
  ANDROID: vendor_hooks: Add hooks to for alloc_contig_range
  ANDROID: GKI: Update symbols to symbol list
  ANDROID: vendor_hooks: Add hook in shrink_node_memcgs
  ANDROID: GKI: Add symbols to symbol list
  FROMGIT: iommu/iova: Improve 32-bit free space estimate
  ANDROID: export walk_page_range and swp_swap_info
  ANDROID: vendor_hooks: export shrink_slab
  ANDROID: usb: gadget: f_accessory: add compat_ioctl support
  UPSTREAM: sr9700: sanity check for packet length
  UPSTREAM: io_uring: return back safer resurrect
  UPSTREAM: Revert "xfrm: state and policy should fail if XFRMA_IF_ID 0"
  ...

Change-Id: Ic61ead530b99b10ffd535a358a48fe9bb8c33fd4

Conflicts:
	drivers/android/Kconfig
	drivers/gpu/drm/rockchip/dw-mipi-dsi-rockchip.c
	drivers/gpu/drm/rockchip/rockchip_vop_reg.c
	drivers/i2c/busses/i2c-rk3x.c
	drivers/media/i2c/imx258.c
	drivers/net/ethernet/stmicro/stmmac/dwmac-rk.c
	drivers/usb/dwc2/gadget.c
	drivers/usb/gadget/function/uvc.h
	lib/Kconfig.debug
2022-07-15 17:40:39 +08:00
Tony Xie
85adeb4f55 serial: 8250_dw: don't set clk when clk is null for rockchip
Fixes: b205560ab1 ("serial: 8250_dw: set uart clk according to baudrate")
Change-Id: I89593824840b2d1c3f5671f46cd92ddea5929d46
Signed-off-by: Tony Xie <tony.xie@rock-chips.com>
Signed-off-by: Huibin Hong <huibin.hong@rock-chips.com>
2022-07-12 16:09:24 +08:00
Huibin Hong
75684834ed serial: 8250_dw: fix bug for uart irq wake up
Skipping suspend and resume for uart keeping work

Fixes: 62d96185bd (serial: 8250_dw: uart wake up)
Signed-off-by: Huibin Hong <huibin.hong@rock-chips.com>
Change-Id: I3d650774dba7a785b2db167c2afd037db8efcaaa
2022-05-26 11:31:05 +08:00
Greg Kroah-Hartman
95f4203fc9 This is the 5.10.110 stable release
-----BEGIN PGP SIGNATURE-----
 
 iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmJQLWwACgkQONu9yGCS
 aT4R2BAAr/cGnf2/BQ6+zNPW+LlfGn75803yd+oWNL8WzjNiQGrTsQavE1jL0LXP
 45iPxvY6eOlP9oEoJGYyNYhzQfUM92Unysa/KemB/xUBsb2If0ZdWk1WB9Lnw0xq
 m65kACXovbcg4LsZGpgCv7ln1ykogo+bNMES9P6CLxwKR/DMKUeJxbRNKE/AkD5l
 DxF7IJEP+YRbKAtoLM2Xj4KdjVSfRIfs+Pf0A1t43GqAw6tt3beqmzeCwDzuzz5a
 DHpXS6PeJjTZOjz4LkuBSbyK5cKGFv1C6o7JVjWSZhDyI5E4OLdNDpNKqcjsXAN+
 wMqS1eh4gYUBXmPE44BGwkkugPyaR0/KHUebfkFZG2/H/8DfvrGqlbvsGSFNXxsV
 jH2/AV/rOxAFeM/U0c1I4Ve42MU18kdf1MRBo0Dq5xSoN9HFQhNp+HE5jpppgsvi
 FYpMqZoQzH31GIjOq7g0zLdj4NTBrkO9dh7kbpH0Xay1yBmigvD2PA4qpsL1+VMI
 v73Iq/RJVGUJFAeiYFjn9IGs9EsiKNG08v9uoKS+1m1VLrpVdgwtzo+RjJ/E51Mt
 Nk4WK94MyoivkRFKulDasv9yBWdcZCfljc91271UCKCERlyO/bmsTqhffeATGGRh
 N/7oxa71BHvxp0VYqvKD6xFUs+jFt9DQmIX7Pl1/yLpaz+sN0no=
 =31mv
 -----END PGP SIGNATURE-----

Merge 5.10.110 into android12-5.10-lts

Changes in 5.10.110
	swiotlb: fix info leak with DMA_FROM_DEVICE
	USB: serial: pl2303: add IBM device IDs
	USB: serial: simple: add Nokia phone driver
	hv: utils: add PTP_1588_CLOCK to Kconfig to fix build
	netdevice: add the case if dev is NULL
	HID: logitech-dj: add new lightspeed receiver id
	xfrm: fix tunnel model fragmentation behavior
	ARM: mstar: Select HAVE_ARM_ARCH_TIMER
	virtio_console: break out of buf poll on remove
	vdpa/mlx5: should verify CTRL_VQ feature exists for MQ
	tools/virtio: fix virtio_test execution
	ethernet: sun: Free the coherent when failing in probing
	gpio: Revert regression in sysfs-gpio (gpiolib.c)
	spi: Fix invalid sgs value
	net:mcf8390: Use platform_get_irq() to get the interrupt
	Revert "gpio: Revert regression in sysfs-gpio (gpiolib.c)"
	spi: Fix erroneous sgs value with min_t()
	Input: zinitix - do not report shadow fingers
	af_key: add __GFP_ZERO flag for compose_sadb_supported in function pfkey_register
	net: dsa: microchip: add spi_device_id tables
	locking/lockdep: Avoid potential access of invalid memory in lock_class
	iommu/iova: Improve 32-bit free space estimate
	tpm: fix reference counting for struct tpm_chip
	virtio-blk: Use blk_validate_block_size() to validate block size
	USB: usb-storage: Fix use of bitfields for hardware data in ene_ub6250.c
	xhci: fix garbage USBSTS being logged in some cases
	xhci: fix runtime PM imbalance in USB2 resume
	xhci: make xhci_handshake timeout for xhci_reset() adjustable
	xhci: fix uninitialized string returned by xhci_decode_ctrl_ctx()
	mei: me: add Alder Lake N device id.
	mei: avoid iterator usage outside of list_for_each_entry
	coresight: Fix TRCCONFIGR.QE sysfs interface
	iio: afe: rescale: use s64 for temporary scale calculations
	iio: inkern: apply consumer scale on IIO_VAL_INT cases
	iio: inkern: apply consumer scale when no channel scale is available
	iio: inkern: make a best effort on offset calculation
	greybus: svc: fix an error handling bug in gb_svc_hello()
	clk: uniphier: Fix fixed-rate initialization
	ptrace: Check PTRACE_O_SUSPEND_SECCOMP permission on PTRACE_SEIZE
	KEYS: fix length validation in keyctl_pkey_params_get_2()
	Documentation: add link to stable release candidate tree
	Documentation: update stable tree link
	firmware: stratix10-svc: add missing callback parameter on RSU
	HID: intel-ish-hid: Use dma_alloc_coherent for firmware update
	SUNRPC: avoid race between mod_timer() and del_timer_sync()
	NFSD: prevent underflow in nfssvc_decode_writeargs()
	NFSD: prevent integer overflow on 32 bit systems
	f2fs: fix to unlock page correctly in error path of is_alive()
	f2fs: quota: fix loop condition at f2fs_quota_sync()
	f2fs: fix to do sanity check on .cp_pack_total_block_count
	remoteproc: Fix count check in rproc_coredump_write()
	pinctrl: samsung: drop pin banks references on error paths
	spi: mxic: Fix the transmit path
	mtd: rawnand: protect access to rawnand devices while in suspend
	can: ems_usb: ems_usb_start_xmit(): fix double dev_kfree_skb() in error path
	jffs2: fix use-after-free in jffs2_clear_xattr_subsystem
	jffs2: fix memory leak in jffs2_do_mount_fs
	jffs2: fix memory leak in jffs2_scan_medium
	mm/pages_alloc.c: don't create ZONE_MOVABLE beyond the end of a node
	mm: invalidate hwpoison page cache page in fault path
	mempolicy: mbind_range() set_policy() after vma_merge()
	scsi: libsas: Fix sas_ata_qc_issue() handling of NCQ NON DATA commands
	qed: display VF trust config
	qed: validate and restrict untrusted VFs vlan promisc mode
	riscv: Fix fill_callchain return value
	riscv: Increase stack size under KASAN
	Revert "Input: clear BTN_RIGHT/MIDDLE on buttonpads"
	cifs: prevent bad output lengths in smb2_ioctl_query_info()
	cifs: fix NULL ptr dereference in smb2_ioctl_query_info()
	ALSA: cs4236: fix an incorrect NULL check on list iterator
	ALSA: hda: Avoid unsol event during RPM suspending
	ALSA: pcm: Fix potential AB/BA lock with buffer_mutex and mmap_lock
	ALSA: hda/realtek: Fix audio regression on Mi Notebook Pro 2020
	mm: madvise: skip unmapped vma holes passed to process_madvise
	mm: madvise: return correct bytes advised with process_madvise
	Revert "mm: madvise: skip unmapped vma holes passed to process_madvise"
	mm,hwpoison: unmap poisoned page before invalidation
	mm/kmemleak: reset tag when compare object pointer
	dm integrity: set journal entry unused when shrinking device
	drbd: fix potential silent data corruption
	can: isotp: sanitize CAN ID checks in isotp_bind()
	powerpc/kvm: Fix kvm_use_magic_page
	udp: call udp_encap_enable for v6 sockets when enabling encap
	arm64: signal: nofpsimd: Do not allocate fp/simd context when not available
	arm64: dts: ti: k3-am65: Fix gic-v3 compatible regs
	arm64: dts: ti: k3-j721e: Fix gic-v3 compatible regs
	arm64: dts: ti: k3-j7200: Fix gic-v3 compatible regs
	ACPI: properties: Consistently return -ENOENT if there are no more references
	coredump: Also dump first pages of non-executable ELF libraries
	ext4: fix ext4_fc_stats trace point
	ext4: fix fs corruption when tring to remove a non-empty directory with IO error
	drivers: hamradio: 6pack: fix UAF bug caused by mod_timer()
	mailbox: tegra-hsp: Flush whole channel
	block: limit request dispatch loop duration
	block: don't merge across cgroup boundaries if blkcg is enabled
	drm/edid: check basic audio support on CEA extension block
	video: fbdev: sm712fb: Fix crash in smtcfb_read()
	video: fbdev: atari: Atari 2 bpp (STe) palette bugfix
	ARM: dts: at91: sama5d2: Fix PMERRLOC resource size
	ARM: dts: exynos: fix UART3 pins configuration in Exynos5250
	ARM: dts: exynos: add missing HDMI supplies on SMDK5250
	ARM: dts: exynos: add missing HDMI supplies on SMDK5420
	mgag200 fix memmapsl configuration in GCTL6 register
	carl9170: fix missing bit-wise or operator for tx_params
	pstore: Don't use semaphores in always-atomic-context code
	thermal: int340x: Increase bitmap size
	lib/raid6/test: fix multiple definition linking error
	exec: Force single empty string when argv is empty
	crypto: rsa-pkcs1pad - only allow with rsa
	crypto: rsa-pkcs1pad - correctly get hash from source scatterlist
	crypto: rsa-pkcs1pad - restore signature length check
	crypto: rsa-pkcs1pad - fix buffer overread in pkcs1pad_verify_complete()
	bcache: fixup multiple threads crash
	DEC: Limit PMAX memory probing to R3k systems
	media: gpio-ir-tx: fix transmit with long spaces on Orange Pi PC
	media: davinci: vpif: fix unbalanced runtime PM get
	media: davinci: vpif: fix unbalanced runtime PM enable
	xtensa: fix stop_machine_cpuslocked call in patch_text
	xtensa: fix xtensa_wsr always writing 0
	brcmfmac: firmware: Allocate space for default boardrev in nvram
	brcmfmac: pcie: Release firmwares in the brcmf_pcie_setup error path
	brcmfmac: pcie: Replace brcmf_pcie_copy_mem_todev with memcpy_toio
	brcmfmac: pcie: Fix crashes due to early IRQs
	drm/i915/opregion: check port number bounds for SWSCI display power state
	drm/i915/gem: add missing boundary check in vm_access
	PCI: pciehp: Clear cmd_busy bit in polling mode
	PCI: xgene: Revert "PCI: xgene: Fix IB window setup"
	regulator: qcom_smd: fix for_each_child.cocci warnings
	selinux: check return value of sel_make_avc_files
	hwrng: cavium - Check health status while reading random data
	hwrng: cavium - HW_RANDOM_CAVIUM should depend on ARCH_THUNDER
	crypto: sun8i-ss - really disable hash on A80
	crypto: authenc - Fix sleep in atomic context in decrypt_tail
	crypto: mxs-dcp - Fix scatterlist processing
	thermal: int340x: Check for NULL after calling kmemdup()
	spi: tegra114: Add missing IRQ check in tegra_spi_probe
	arm64/mm: avoid fixmap race condition when create pud mapping
	selftests/x86: Add validity check and allow field splitting
	crypto: rockchip - ECB does not need IV
	audit: log AUDIT_TIME_* records only from rules
	EVM: fix the evm= __setup handler return value
	crypto: ccree - don't attempt 0 len DMA mappings
	spi: pxa2xx-pci: Balance reference count for PCI DMA device
	hwmon: (pmbus) Add mutex to regulator ops
	hwmon: (sch56xx-common) Replace WDOG_ACTIVE with WDOG_HW_RUNNING
	nvme: cleanup __nvme_check_ids
	block: don't delete queue kobject before its children
	PM: hibernate: fix __setup handler error handling
	PM: suspend: fix return value of __setup handler
	spi: spi-zynqmp-gqspi: Handle error for dma_set_mask
	hwrng: atmel - disable trng on failure path
	crypto: sun8i-ss - call finalize with bh disabled
	crypto: sun8i-ce - call finalize with bh disabled
	crypto: amlogic - call finalize with bh disabled
	crypto: vmx - add missing dependencies
	clocksource/drivers/timer-ti-dm: Fix regression from errata i940 fix
	clocksource/drivers/exynos_mct: Refactor resources allocation
	clocksource/drivers/exynos_mct: Handle DTS with higher number of interrupts
	clocksource/drivers/timer-microchip-pit64b: Use notrace
	clocksource/drivers/timer-of: Check return value of of_iomap in timer_of_base_init()
	ACPI: APEI: fix return value of __setup handlers
	crypto: ccp - ccp_dmaengine_unregister release dma channels
	crypto: ccree - Fix use after free in cc_cipher_exit()
	vfio: platform: simplify device removal
	amba: Make the remove callback return void
	hwrng: nomadik - Change clk_disable to clk_disable_unprepare
	hwmon: (pmbus) Add Vin unit off handling
	clocksource: acpi_pm: fix return value of __setup handler
	io_uring: terminate manual loop iterator loop correctly for non-vecs
	watch_queue: Fix NULL dereference in error cleanup
	watch_queue: Actually free the watch
	f2fs: fix to enable ATGC correctly via gc_idle sysfs interface
	sched/debug: Remove mpol_get/put and task_lock/unlock from sched_show_numa
	sched/core: Export pelt_thermal_tp
	rseq: Optimise rseq_get_rseq_cs() and clear_rseq_cs()
	rseq: Remove broken uapi field layout on 32-bit little endian
	perf/core: Fix address filter parser for multiple filters
	perf/x86/intel/pt: Fix address filter config for 32-bit kernel
	f2fs: fix missing free nid in f2fs_handle_failed_inode
	nfsd: more robust allocation failure handling in nfsd_file_cache_init
	f2fs: fix to avoid potential deadlock
	btrfs: fix unexpected error path when reflinking an inline extent
	f2fs: compress: remove unneeded read when rewrite whole cluster
	f2fs: fix compressed file start atomic write may cause data corruption
	selftests, x86: fix how check_cc.sh is being invoked
	kunit: make kunit_test_timeout compatible with comment
	media: staging: media: zoran: fix usage of vb2_dma_contig_set_max_seg_size
	media: v4l2-mem2mem: Apply DST_QUEUE_OFF_BASE on MMAP buffers across ioctls
	media: mtk-vcodec: potential dereference of null pointer
	media: bttv: fix WARNING regression on tunerless devices
	ASoC: xilinx: xlnx_formatter_pcm: Handle sysclk setting
	ASoC: generic: simple-card-utils: remove useless assignment
	media: coda: Fix missing put_device() call in coda_get_vdoa_data
	media: meson: vdec: potential dereference of null pointer
	media: hantro: Fix overfill bottom register field name
	media: aspeed: Correct value for h-total-pixels
	video: fbdev: matroxfb: set maxvram of vbG200eW to the same as vbG200 to avoid black screen
	video: fbdev: controlfb: Fix set but not used warnings
	video: fbdev: controlfb: Fix COMPILE_TEST build
	video: fbdev: smscufx: Fix null-ptr-deref in ufx_usb_probe()
	video: fbdev: atmel_lcdfb: fix an error code in atmel_lcdfb_probe()
	video: fbdev: fbcvt.c: fix printing in fb_cvt_print_name()
	firmware: qcom: scm: Remove reassignment to desc following initializer
	ARM: dts: qcom: ipq4019: fix sleep clock
	soc: qcom: rpmpd: Check for null return of devm_kcalloc
	soc: qcom: ocmem: Fix missing put_device() call in of_get_ocmem
	soc: qcom: aoss: remove spurious IRQF_ONESHOT flags
	arm64: dts: qcom: sdm845: fix microphone bias properties and values
	arm64: dts: qcom: sm8150: Correct TCS configuration for apps rsc
	firmware: ti_sci: Fix compilation failure when CONFIG_TI_SCI_PROTOCOL is not defined
	soc: ti: wkup_m3_ipc: Fix IRQ check in wkup_m3_ipc_probe
	ARM: dts: sun8i: v3s: Move the csi1 block to follow address order
	ARM: dts: imx: Add missing LVDS decoder on M53Menlo
	media: video/hdmi: handle short reads of hdmi info frame.
	media: em28xx: initialize refcount before kref_get
	media: usb: go7007: s2250-board: fix leak in probe()
	media: cedrus: H265: Fix neighbour info buffer size
	media: cedrus: h264: Fix neighbour info buffer size
	ASoC: codecs: wcd934x: fix return value of wcd934x_rx_hph_mode_put
	uaccess: fix nios2 and microblaze get_user_8()
	ASoC: rt5663: check the return value of devm_kzalloc() in rt5663_parse_dp()
	ASoC: ti: davinci-i2s: Add check for clk_enable()
	ALSA: spi: Add check for clk_enable()
	arm64: dts: ns2: Fix spi-cpol and spi-cpha property
	arm64: dts: broadcom: Fix sata nodename
	printk: fix return value of printk.devkmsg __setup handler
	ASoC: mxs-saif: Handle errors for clk_enable
	ASoC: atmel_ssc_dai: Handle errors for clk_enable
	ASoC: dwc-i2s: Handle errors for clk_enable
	ASoC: soc-compress: prevent the potentially use of null pointer
	memory: emif: Add check for setup_interrupts
	memory: emif: check the pointer temp in get_device_details()
	ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction
	arm64: dts: rockchip: Fix SDIO regulator supply properties on rk3399-firefly
	m68k: coldfire/device.c: only build for MCF_EDMA when h/w macros are defined
	media: stk1160: If start stream fails, return buffers with VB2_BUF_STATE_QUEUED
	media: vidtv: Check for null return of vzalloc
	ASoC: atmel: Add missing of_node_put() in at91sam9g20ek_audio_probe
	ASoC: wm8350: Handle error for wm8350_register_irq
	ASoC: fsi: Add check for clk_enable
	video: fbdev: omapfb: Add missing of_node_put() in dvic_probe_of
	media: saa7134: convert list_for_each to entry variant
	media: saa7134: fix incorrect use to determine if list is empty
	ivtv: fix incorrect device_caps for ivtvfb
	ASoC: rockchip: i2s: Use devm_platform_get_and_ioremap_resource()
	ASoC: rockchip: i2s: Fix missing clk_disable_unprepare() in rockchip_i2s_probe
	ASoC: SOF: Add missing of_node_put() in imx8m_probe
	ASoC: dmaengine: do not use a NULL prepare_slave_config() callback
	ASoC: mxs: Fix error handling in mxs_sgtl5000_probe
	ASoC: fsl_spdif: Disable TX clock when stop
	ASoC: imx-es8328: Fix error return code in imx_es8328_probe()
	ASoC: msm8916-wcd-digital: Fix missing clk_disable_unprepare() in msm8916_wcd_digital_probe
	mmc: davinci_mmc: Handle error for clk_enable
	ASoC: atmel: sam9x5_wm8731: use devm_snd_soc_register_card()
	ASoC: atmel: Fix error handling in sam9x5_wm8731_driver_probe
	ASoC: msm8916-wcd-analog: Fix error handling in pm8916_wcd_analog_spmi_probe
	ASoC: codecs: wcd934x: Add missing of_node_put() in wcd934x_codec_parse_data
	ARM: configs: multi_v5_defconfig: re-enable CONFIG_V4L_PLATFORM_DRIVERS
	drm/meson: osd_afbcd: Add an exit callback to struct meson_afbcd_ops
	drm/bridge: Fix free wrong object in sii8620_init_rcp_input_dev
	drm/bridge: Add missing pm_runtime_disable() in __dw_mipi_dsi_probe
	drm/bridge: nwl-dsi: Fix PM disable depth imbalance in nwl_dsi_probe
	drm: bridge: adv7511: Fix ADV7535 HPD enablement
	ath10k: fix memory overwrite of the WoWLAN wakeup packet pattern
	drm/panfrost: Check for error num after setting mask
	libbpf: Fix possible NULL pointer dereference when destroying skeleton
	udmabuf: validate ubuf->pagecount
	Bluetooth: hci_serdev: call init_rwsem() before p->open()
	mtd: onenand: Check for error irq
	mtd: rawnand: gpmi: fix controller timings setting
	drm/edid: Don't clear formats if using deep color
	ionic: fix type complaint in ionic_dev_cmd_clean()
	drm/nouveau/acr: Fix undefined behavior in nvkm_acr_hsfw_load_bl()
	drm/amd/display: Fix a NULL pointer dereference in amdgpu_dm_connector_add_common_modes()
	drm/amd/pm: return -ENOTSUPP if there is no get_dpm_ultimate_freq function
	ath9k_htc: fix uninit value bugs
	RDMA/core: Set MR type in ib_reg_user_mr
	KVM: PPC: Fix vmx/vsx mixup in mmio emulation
	i40e: don't reserve excessive XDP_PACKET_HEADROOM on XSK Rx to skb
	i40e: respect metadata on XSK Rx to skb
	power: reset: gemini-poweroff: Fix IRQ check in gemini_poweroff_probe
	ray_cs: Check ioremap return value
	powerpc: dts: t1040rdb: fix ports names for Seville Ethernet switch
	KVM: PPC: Book3S HV: Check return value of kvmppc_radix_init
	powerpc/perf: Don't use perf_hw_context for trace IMC PMU
	mt76: mt7915: use proper aid value in mt7915_mcu_wtbl_generic_tlv in sta mode
	mt76: mt7915: use proper aid value in mt7915_mcu_sta_basic_tlv
	mt76: mt7603: check sta_rates pointer in mt7603_sta_rate_tbl_update
	mt76: mt7615: check sta_rates pointer in mt7615_sta_rate_tbl_update
	net: dsa: mv88e6xxx: Enable port policy support on 6097
	scripts/dtc: Call pkg-config POSIXly correct
	livepatch: Fix build failure on 32 bits processors
	PCI: aardvark: Fix reading PCI_EXP_RTSTA_PME bit on emulated bridge
	drm/bridge: dw-hdmi: use safe format when first in bridge chain
	power: supply: ab8500: Fix memory leak in ab8500_fg_sysfs_init
	HID: i2c-hid: fix GET/SET_REPORT for unnumbered reports
	iommu/ipmmu-vmsa: Check for error num after setting mask
	drm/amd/pm: enable pm sysfs write for one VF mode
	drm/amd/display: Add affected crtcs to atomic state for dsc mst unplug
	IB/cma: Allow XRC INI QPs to set their local ACK timeout
	dax: make sure inodes are flushed before destroy cache
	iwlwifi: Fix -EIO error code that is never returned
	iwlwifi: mvm: Fix an error code in iwl_mvm_up()
	drm/msm/dp: populate connector of struct dp_panel
	drm/msm/dpu: add DSPP blocks teardown
	drm/msm/dpu: fix dp audio condition
	dm crypt: fix get_key_size compiler warning if !CONFIG_KEYS
	scsi: pm8001: Fix command initialization in pm80XX_send_read_log()
	scsi: pm8001: Fix command initialization in pm8001_chip_ssp_tm_req()
	scsi: pm8001: Fix payload initialization in pm80xx_set_thermal_config()
	scsi: pm8001: Fix le32 values handling in pm80xx_set_sas_protocol_timer_config()
	scsi: pm8001: Fix payload initialization in pm80xx_encrypt_update()
	scsi: pm8001: Fix le32 values handling in pm80xx_chip_ssp_io_req()
	scsi: pm8001: Fix le32 values handling in pm80xx_chip_sata_req()
	scsi: pm8001: Fix NCQ NON DATA command task initialization
	scsi: pm8001: Fix NCQ NON DATA command completion handling
	scsi: pm8001: Fix abort all task initialization
	RDMA/mlx5: Fix the flow of a miss in the allocation of a cache ODP MR
	drm/amd/display: Remove vupdate_int_entry definition
	TOMOYO: fix __setup handlers return values
	ext2: correct max file size computing
	drm/tegra: Fix reference leak in tegra_dsi_ganged_probe
	power: supply: bq24190_charger: Fix bq24190_vbus_is_enabled() wrong false return
	scsi: hisi_sas: Change permission of parameter prot_mask
	drm/bridge: cdns-dsi: Make sure to to create proper aliases for dt
	bpf, arm64: Call build_prologue() first in first JIT pass
	bpf, arm64: Feed byte-offset into bpf line info
	gpu: host1x: Fix a memory leak in 'host1x_remove()'
	libbpf: Skip forward declaration when counting duplicated type names
	powerpc/mm/numa: skip NUMA_NO_NODE onlining in parse_numa_properties()
	powerpc/Makefile: Don't pass -mcpu=powerpc64 when building 32-bit
	KVM: x86: Fix emulation in writing cr8
	KVM: x86/emulator: Defer not-present segment check in __load_segment_descriptor()
	hv_balloon: rate-limit "Unhandled message" warning
	i2c: xiic: Make bus names unique
	power: supply: wm8350-power: Handle error for wm8350_register_irq
	power: supply: wm8350-power: Add missing free in free_charger_irq
	IB/hfi1: Allow larger MTU without AIP
	PCI: Reduce warnings on possible RW1C corruption
	net: axienet: fix RX ring refill allocation failure handling
	mips: DEC: honor CONFIG_MIPS_FP_SUPPORT=n
	powerpc/sysdev: fix incorrect use to determine if list is empty
	mfd: mc13xxx: Add check for mc13xxx_irq_request
	libbpf: Unmap rings when umem deleted
	selftests/bpf: Make test_lwt_ip_encap more stable and faster
	platform/x86: huawei-wmi: check the return value of device_create_file()
	powerpc: 8xx: fix a return value error in mpc8xx_pic_init
	vxcan: enable local echo for sent CAN frames
	ath10k: Fix error handling in ath10k_setup_msa_resources
	mips: cdmm: Fix refcount leak in mips_cdmm_phys_base
	MIPS: RB532: fix return value of __setup handler
	MIPS: pgalloc: fix memory leak caused by pgd_free()
	mtd: rawnand: atmel: fix refcount issue in atmel_nand_controller_init
	RDMA/mlx5: Fix memory leak in error flow for subscribe event routine
	bpf, sockmap: Fix memleak in tcp_bpf_sendmsg while sk msg is full
	bpf, sockmap: Fix more uncharged while msg has more_data
	bpf, sockmap: Fix double uncharge the mem of sk_msg
	samples/bpf, xdpsock: Fix race when running for fix duration of time
	USB: storage: ums-realtek: fix error code in rts51x_read_mem()
	can: isotp: return -EADDRNOTAVAIL when reading from unbound socket
	can: isotp: support MSG_TRUNC flag when reading from socket
	bareudp: use ipv6_mod_enabled to check if IPv6 enabled
	selftests/bpf: Fix error reporting from sock_fields programs
	Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed
	Bluetooth: btmtksdio: Fix kernel oops in btmtksdio_interrupt
	ipv4: Fix route lookups when handling ICMP redirects and PMTU updates
	af_netlink: Fix shift out of bounds in group mask calculation
	i2c: meson: Fix wrong speed use from probe
	i2c: mux: demux-pinctrl: do not deactivate a master that is not active
	selftests/bpf/test_lirc_mode2.sh: Exit with proper code
	PCI: Avoid broken MSI on SB600 USB devices
	net: bcmgenet: Use stronger register read/writes to assure ordering
	tcp: ensure PMTU updates are processed during fastopen
	openvswitch: always update flow key after nat
	tipc: fix the timer expires after interval 100ms
	mfd: asic3: Add missing iounmap() on error asic3_mfd_probe
	mxser: fix xmit_buf leak in activate when LSR == 0xff
	pwm: lpc18xx-sct: Initialize driver data and hardware before pwmchip_add()
	fsi: aspeed: convert to devm_platform_ioremap_resource
	fsi: Aspeed: Fix a potential double free
	misc: alcor_pci: Fix an error handling path
	cpufreq: qcom-cpufreq-nvmem: fix reading of PVS Valid fuse
	soundwire: intel: fix wrong register name in intel_shim_wake
	clk: qcom: ipq8074: fix PCI-E clock oops
	iio: mma8452: Fix probe failing when an i2c_device_id is used
	staging:iio:adc:ad7280a: Fix handing of device address bit reversing.
	pinctrl: renesas: r8a77470: Reduce size for narrow VIN1 channel
	pinctrl: renesas: checker: Fix miscalculation of number of states
	clk: qcom: ipq8074: Use floor ops for SDCC1 clock
	phy: dphy: Correct lpx parameter and its derivatives(ta_{get,go,sure})
	serial: 8250_mid: Balance reference count for PCI DMA device
	serial: 8250_lpss: Balance reference count for PCI DMA device
	NFS: Use of mapping_set_error() results in spurious errors
	serial: 8250: Fix race condition in RTS-after-send handling
	iio: adc: Add check for devm_request_threaded_irq
	habanalabs: Add check for pci_enable_device
	NFS: Return valid errors from nfs2/3_decode_dirent()
	dma-debug: fix return value of __setup handlers
	clk: imx7d: Remove audio_mclk_root_clk
	clk: at91: sama7g5: fix parents of PDMCs' GCLK
	clk: qcom: clk-rcg2: Update logic to calculate D value for RCG
	clk: qcom: clk-rcg2: Update the frac table for pixel clock
	dmaengine: hisi_dma: fix MSI allocate fail when reload hisi_dma
	remoteproc: qcom: Fix missing of_node_put in adsp_alloc_memory_region
	remoteproc: qcom_wcnss: Add missing of_node_put() in wcnss_alloc_memory_region
	remoteproc: qcom_q6v5_mss: Fix some leaks in q6v5_alloc_memory_region
	nvdimm/region: Fix default alignment for small regions
	clk: actions: Terminate clk_div_table with sentinel element
	clk: loongson1: Terminate clk_div_table with sentinel element
	clk: clps711x: Terminate clk_div_table with sentinel element
	clk: tegra: tegra124-emc: Fix missing put_device() call in emc_ensure_emc_driver
	NFS: remove unneeded check in decode_devicenotify_args()
	staging: mt7621-dts: fix LEDs and pinctrl on GB-PC1 devicetree
	staging: mt7621-dts: fix formatting
	staging: mt7621-dts: fix pinctrl properties for ethernet
	staging: mt7621-dts: fix GB-PC2 devicetree
	pinctrl: mediatek: Fix missing of_node_put() in mtk_pctrl_init
	pinctrl: mediatek: paris: Fix PIN_CONFIG_BIAS_* readback
	pinctrl: mediatek: paris: Fix "argument" argument type for mtk_pinconf_get()
	pinctrl: mediatek: paris: Fix pingroup pin config state readback
	pinctrl: mediatek: paris: Skip custom extra pin config dump for virtual GPIOs
	pinctrl: nomadik: Add missing of_node_put() in nmk_pinctrl_probe
	pinctrl/rockchip: Add missing of_node_put() in rockchip_pinctrl_probe
	tty: hvc: fix return value of __setup handler
	kgdboc: fix return value of __setup handler
	serial: 8250: fix XOFF/XON sending when DMA is used
	kgdbts: fix return value of __setup handler
	firmware: google: Properly state IOMEM dependency
	driver core: dd: fix return value of __setup handler
	jfs: fix divide error in dbNextAG
	netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options
	NFSv4.1: don't retry BIND_CONN_TO_SESSION on session error
	kdb: Fix the putarea helper function
	clk: qcom: gcc-msm8994: Fix gpll4 width
	clk: Initialize orphan req_rate
	xen: fix is_xen_pmu()
	net: enetc: report software timestamping via SO_TIMESTAMPING
	net: hns3: fix bug when PF set the duplicate MAC address for VFs
	net: phy: broadcom: Fix brcm_fet_config_init()
	selftests: test_vxlan_under_vrf: Fix broken test case
	qlcnic: dcb: default to returning -EOPNOTSUPP
	net/x25: Fix null-ptr-deref caused by x25_disconnect
	NFSv4/pNFS: Fix another issue with a list iterator pointing to the head
	net: dsa: bcm_sf2_cfp: fix an incorrect NULL check on list iterator
	fs: fd tables have to be multiples of BITS_PER_LONG
	lib/test: use after free in register_test_dev_kmod()
	fs: fix fd table size alignment properly
	LSM: general protection fault in legacy_parse_param
	regulator: rpi-panel: Handle I2C errors/timing to the Atmel
	gcc-plugins/stackleak: Exactly match strings instead of prefixes
	pinctrl: npcm: Fix broken references to chip->parent_device
	block, bfq: don't move oom_bfqq
	selinux: use correct type for context length
	selinux: allow FIOCLEX and FIONCLEX with policy capability
	loop: use sysfs_emit() in the sysfs xxx show()
	Fix incorrect type in assignment of ipv6 port for audit
	irqchip/qcom-pdc: Fix broken locking
	irqchip/nvic: Release nvic_base upon failure
	fs/binfmt_elf: Fix AT_PHDR for unusual ELF files
	bfq: fix use-after-free in bfq_dispatch_request
	ACPICA: Avoid walking the ACPI Namespace if it is not there
	lib/raid6/test/Makefile: Use $(pound) instead of \# for Make 4.3
	Revert "Revert "block, bfq: honor already-setup queue merges""
	ACPI/APEI: Limit printable size of BERT table data
	PM: core: keep irq flags in device_pm_check_callbacks()
	parisc: Fix handling off probe non-access faults
	nvme-tcp: lockdep: annotate in-kernel sockets
	spi: tegra20: Use of_device_get_match_data()
	locking/lockdep: Iterate lock_classes directly when reading lockdep files
	ext4: correct cluster len and clusters changed accounting in ext4_mb_mark_bb
	ext4: fix ext4_mb_mark_bb() with flex_bg with fast_commit
	ext4: don't BUG if someone dirty pages without asking ext4 first
	f2fs: fix to do sanity check on curseg->alloc_type
	NFSD: Fix nfsd_breaker_owns_lease() return values
	f2fs: compress: fix to print raw data size in error path of lz4 decompression
	ntfs: add sanity check on allocation size
	media: staging: media: zoran: move videodev alloc
	media: staging: media: zoran: calculate the right buffer number for zoran_reap_stat_com
	media: staging: media: zoran: fix various V4L2 compliance errors
	media: ir_toy: free before error exiting
	video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow
	video: fbdev: w100fb: Reset global state
	video: fbdev: cirrusfb: check pixclock to avoid divide by zero
	video: fbdev: omapfb: acx565akm: replace snprintf with sysfs_emit
	ARM: dts: qcom: fix gic_irq_domain_translate warnings for msm8960
	ARM: dts: bcm2837: Add the missing L1/L2 cache information
	ASoC: madera: Add dependencies on MFD
	media: atomisp_gmin_platform: Add DMI quirk to not turn AXP ELDO2 regulator off on some boards
	media: atomisp: fix dummy_ptr check to avoid duplicate active_bo
	ARM: ftrace: avoid redundant loads or clobbering IP
	ARM: dts: imx7: Use audio_mclk_post_div instead audio_mclk_root_clk
	arm64: defconfig: build imx-sdma as a module
	video: fbdev: omapfb: panel-dsi-cm: Use sysfs_emit() instead of snprintf()
	video: fbdev: omapfb: panel-tpo-td043mtea1: Use sysfs_emit() instead of snprintf()
	video: fbdev: udlfb: replace snprintf in show functions with sysfs_emit
	ARM: dts: bcm2711: Add the missing L1/L2 cache information
	ASoC: soc-core: skip zero num_dai component in searching dai name
	media: cx88-mpeg: clear interrupt status register before streaming video
	uaccess: fix type mismatch warnings from access_ok()
	lib/test_lockup: fix kernel pointer check for separate address spaces
	ARM: tegra: tamonten: Fix I2C3 pad setting
	ARM: mmp: Fix failure to remove sram device
	video: fbdev: sm712fb: Fix crash in smtcfb_write()
	media: Revert "media: em28xx: add missing em28xx_close_extension"
	media: hdpvr: initialize dev->worker at hdpvr_register_videodev
	mmc: host: Return an error when ->enable_sdio_irq() ops is missing
	media: atomisp: fix bad usage at error handling logic
	ALSA: hda/realtek: Add alc256-samsung-headphone fixup
	KVM: x86/mmu: Check for present SPTE when clearing dirty bit in TDP MMU
	powerpc/kasan: Fix early region not updated correctly
	powerpc/lib/sstep: Fix 'sthcx' instruction
	powerpc/lib/sstep: Fix build errors with newer binutils
	powerpc: Fix build errors with newer binutils
	scsi: qla2xxx: Fix stuck session in gpdb
	scsi: qla2xxx: Fix scheduling while atomic
	scsi: qla2xxx: Fix wrong FDMI data for 64G adapter
	scsi: qla2xxx: Fix warning for missing error code
	scsi: qla2xxx: Fix device reconnect in loop topology
	scsi: qla2xxx: Add devids and conditionals for 28xx
	scsi: qla2xxx: Check for firmware dump already collected
	scsi: qla2xxx: Suppress a kernel complaint in qla_create_qpair()
	scsi: qla2xxx: Fix disk failure to rediscover
	scsi: qla2xxx: Fix incorrect reporting of task management failure
	scsi: qla2xxx: Fix hang due to session stuck
	scsi: qla2xxx: Fix missed DMA unmap for NVMe ls requests
	scsi: qla2xxx: Fix N2N inconsistent PLOGI
	scsi: qla2xxx: Reduce false trigger to login
	scsi: qla2xxx: Use correct feature type field during RFF_ID processing
	platform: chrome: Split trace include file
	KVM: x86: Forbid VMM to set SYNIC/STIMER MSRs when SynIC wasn't activated
	KVM: Prevent module exit until all VMs are freed
	KVM: x86: fix sending PV IPI
	KVM: SVM: fix panic on out-of-bounds guest IRQ
	ASoC: SOF: Intel: Fix NULL ptr dereference when ENOMEM
	ubifs: rename_whiteout: Fix double free for whiteout_ui->data
	ubifs: Fix deadlock in concurrent rename whiteout and inode writeback
	ubifs: Add missing iput if do_tmpfile() failed in rename whiteout
	ubifs: setflags: Make dirtied_ino_d 8 bytes aligned
	ubifs: Fix read out-of-bounds in ubifs_wbuf_write_nolock()
	ubifs: Fix to add refcount once page is set private
	ubifs: rename_whiteout: correct old_dir size computing
	wireguard: queueing: use CFI-safe ptr_ring cleanup function
	wireguard: socket: free skb in send6 when ipv6 is disabled
	wireguard: socket: ignore v6 endpoints when ipv6 is disabled
	XArray: Fix xas_create_range() when multi-order entry present
	can: mcba_usb: mcba_usb_start_xmit(): fix double dev_kfree_skb in error path
	can: mcba_usb: properly check endpoint type
	can: mcp251xfd: mcp251xfd_register_get_dev_id(): fix return of error value
	XArray: Update the LRU list in xas_split()
	rtc: check if __rtc_read_time was successful
	gfs2: Make sure FITRIM minlen is rounded up to fs block size
	net: hns3: fix software vlan talbe of vlan 0 inconsistent with hardware
	rxrpc: Fix call timer start racing with call destruction
	mailbox: imx: fix wakeup failure from freeze mode
	crypto: arm/aes-neonbs-cbc - Select generic cbc and aes
	watch_queue: Free the page array when watch_queue is dismantled
	pinctrl: pinconf-generic: Print arguments for bias-pull-*
	watchdog: rti-wdt: Add missing pm_runtime_disable() in probe function
	pinctrl: nuvoton: npcm7xx: Rename DS() macro to DSTR()
	pinctrl: nuvoton: npcm7xx: Use %zu printk format for ARRAY_SIZE()
	ASoC: mediatek: mt6358: add missing EXPORT_SYMBOLs
	ubi: Fix race condition between ctrl_cdev_ioctl and ubi_cdev_ioctl
	ARM: iop32x: offset IRQ numbers by 1
	io_uring: fix memory leak of uid in files registration
	riscv module: remove (NOLOAD)
	ACPI: CPPC: Avoid out of bounds access when parsing _CPC data
	platform/chrome: cros_ec_typec: Check for EC device
	can: isotp: restore accidentally removed MSG_PEEK feature
	proc: bootconfig: Add null pointer check
	staging: mt7621-dts: fix pinctrl-0 items to be size-1 items on ethernet
	ASoC: soc-compress: Change the check for codec_dai
	batman-adv: Check ptr for NULL before reducing its refcnt
	mm/mmap: return 1 from stack_guard_gap __setup() handler
	ARM: 9187/1: JIVE: fix return value of __setup handler
	mm/memcontrol: return 1 from cgroup.memory __setup() handler
	mm/usercopy: return 1 from hardened_usercopy __setup() handler
	bpf: Adjust BPF stack helper functions to accommodate skip > 0
	bpf: Fix comment for helper bpf_current_task_under_cgroup()
	dt-bindings: mtd: nand-controller: Fix the reg property description
	dt-bindings: mtd: nand-controller: Fix a comment in the examples
	dt-bindings: spi: mxic: The interrupt property is not mandatory
	ubi: fastmap: Return error code if memory allocation fails in add_aeb()
	ASoC: topology: Allow TLV control to be either read or write
	ARM: dts: spear1340: Update serial node properties
	ARM: dts: spear13xx: Update SPI dma properties
	um: Fix uml_mconsole stop/go
	docs: sysctl/kernel: add missing bit to panic_print
	openvswitch: Fixed nd target mask field in the flow dump.
	KVM: x86/mmu: do compare-and-exchange of gPTE via the user address
	can: m_can: m_can_tx_handler(): fix use after free of skb
	can: usb_8dev: usb_8dev_start_xmit(): fix double dev_kfree_skb() in error path
	coredump: Snapshot the vmas in do_coredump
	coredump: Remove the WARN_ON in dump_vma_snapshot
	coredump/elf: Pass coredump_params into fill_note_info
	coredump: Use the vma snapshot in fill_files_note
	arm64: Do not defer reserve_crashkernel() for platforms with no DMA memory zones
	PCI: xgene: Revert "PCI: xgene: Use inbound resources for setup"
	Linux 5.10.110

Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
Change-Id: I12fbe227793dd40c0582588e1700cf88cafd0ac6
2022-04-18 17:41:18 +02:00
Ilpo Järvinen
f65ba8b988 serial: 8250: fix XOFF/XON sending when DMA is used
[ Upstream commit f58c252e30 ]

When 8250 UART is using DMA, x_char (XON/XOFF) is never sent
to the wire. After this change, x_char is injected correctly.

Create uart_xchar_out() helper for sending the x_char out and
accounting related to it. It seems that almost every driver
does these same steps with x_char. Except for 8250, however,
almost all currently lack .serial_out so they cannot immediately
take advantage of this new helper.

The downside of this patch is that it might reintroduce
the problems some devices faced with mixed DMA/non-DMA transfer
which caused revert f967fc8f16 (Revert "serial: 8250_dma:
don't bother DMA with small transfers"). However, the impact
should be limited to cases with XON/XOFF (that didn't work
with DMA capable devices to begin with so this problem is not
very likely to cause a major issue, if any at all).

Fixes: 9ee4b83e51 ("serial: 8250: Add support for dmaengine")
Reported-by: Gilles Buloz <gilles.buloz@kontron.com>
Tested-by: Gilles Buloz <gilles.buloz@kontron.com>
Reviewed-by: Andy Shevchenko <andriy.shevchenko@linux.intel.com>
Signed-off-by: Ilpo Järvinen <ilpo.jarvinen@linux.intel.com>
Link: https://lore.kernel.org/r/20220314091432.4288-2-ilpo.jarvinen@linux.intel.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2022-04-08 14:40:28 +02:00
Randy Dunlap
45e95a7bf8 kgdboc: fix return value of __setup handler
[ Upstream commit ab818c7aa7 ]

__setup() handlers should return 1 to obsolete_checksetup() in
init/main.c to indicate that the boot option has been handled.
A return of 0 causes the boot option/value to be listed as an Unknown
kernel parameter and added to init's (limited) environment strings.
So return 1 from kgdboc_option_setup().

Unknown kernel command line parameters "BOOT_IMAGE=/boot/bzImage-517rc7
  kgdboc=kbd kgdbts=", will be passed to user space.

 Run /sbin/init as init process
   with arguments:
     /sbin/init
   with environment:
     HOME=/
     TERM=linux
     BOOT_IMAGE=/boot/bzImage-517rc7
     kgdboc=kbd
     kgdbts=

Link: lore.kernel.org/r/64644a2f-4a20-bab3-1e15-3b2cdd0defe3@omprussia.ru
Fixes: 1bd54d851f ("kgdboc: Passing ekgdboc to command line causes panic")
Fixes: f2d937f3bf ("consoles: polling support, kgdboc")
Cc: He Zhe <zhe.he@windriver.com>
Cc: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Cc: Jiri Slaby <jirislaby@kernel.org>
Cc: kgdb-bugreport@lists.sourceforge.net
Cc: Jason Wessel <jason.wessel@windriver.com>
Cc: Daniel Thompson <daniel.thompson@linaro.org>
Cc: Douglas Anderson <dianders@chromium.org>
Cc: linux-serial@vger.kernel.org
Reported-by: Igor Zhbanov <i.zhbanov@omprussia.ru>
Reviewed-by: Douglas Anderson <dianders@chromium.org>
Signed-off-by: Randy Dunlap <rdunlap@infradead.org>
Link: https://lore.kernel.org/r/20220309033018.17936-1-rdunlap@infradead.org
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2022-04-08 14:40:28 +02:00
Randy Dunlap
96038b1cf4 tty: hvc: fix return value of __setup handler
[ Upstream commit 53819a0d97 ]

__setup() handlers should return 1 to indicate that the boot option
has been handled or 0 to indicate that it was not handled.
Add a pr_warn() message if the option value is invalid and then
always return 1.

Link: lore.kernel.org/r/64644a2f-4a20-bab3-1e15-3b2cdd0defe3@omprussia.ru
Fixes: 86b40567b9 ("tty: replace strict_strtoul() with kstrtoul()")
Cc: Jingoo Han <jg1.han@samsung.com>
Cc: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Cc: Jiri Slaby <jirislaby@kernel.org>
Cc: Michael Ellerman <mpe@ellerman.id.au>
Cc: Julian Wiedmann <jwi@linux.ibm.com>
Cc: Vasily Gorbik <gor@linux.ibm.com>
Cc: linuxppc-dev@lists.ozlabs.org
Reported-by: Igor Zhbanov <i.zhbanov@omprussia.ru>
Signed-off-by: Randy Dunlap <rdunlap@infradead.org>
Link: https://lore.kernel.org/r/20220308024228.20477-1-rdunlap@infradead.org
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2022-04-08 14:40:28 +02:00
Uwe Kleine-König
df2dc4cf71 serial: 8250: Fix race condition in RTS-after-send handling
[ Upstream commit dedab69fd6 ]

Set em485->active_timer = NULL isn't always enough to take out the stop
timer. While there is a check that it acts in the right state (i.e.
waiting for RTS-after-send to pass after sending some chars) but the
following might happen:

 - CPU1: some chars send, shifter becomes empty, stop tx timer armed
 - CPU0: more chars send before RTS-after-send expired
 - CPU0: shifter empty irq, port lock taken
 - CPU1: tx timer triggers, waits for port lock
 - CPU0: em485->active_timer = &em485->stop_tx_timer, hrtimer_start(),
   releases lock()
 - CPU1: get lock, see em485->active_timer == &em485->stop_tx_timer,
   tear down RTS too early

This fix bases on research done by Steffen Trumtrar.

Fixes: b86f86e8e7 ("serial: 8250: fix potential deadlock in rs485-mode")
Signed-off-by: Uwe Kleine-König <u.kleine-koenig@pengutronix.de>
Link: https://lore.kernel.org/r/20220215160236.344236-1-u.kleine-koenig@pengutronix.de
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2022-04-08 14:40:25 +02:00
Andy Shevchenko
659fe4d653 serial: 8250_lpss: Balance reference count for PCI DMA device
[ Upstream commit 5318f70da7 ]

The pci_get_slot() increases its reference count, the caller
must decrement the reference count by calling pci_dev_put().

Fixes: 9a1870ce81 ("serial: 8250: don't use slave_id of dma_slave_config")
Depends-on: a13e19cf3d ("serial: 8250_lpss: split LPSS driver to separate module")
Reported-by: Qing Wang <wangqing@vivo.com>
Signed-off-by: Andy Shevchenko <andriy.shevchenko@linux.intel.com>
Link: https://lore.kernel.org/r/20220223151240.70248-1-andriy.shevchenko@linux.intel.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2022-04-08 14:40:25 +02:00
Andy Shevchenko
0aebb3944a serial: 8250_mid: Balance reference count for PCI DMA device
[ Upstream commit 67ec6dd0b2 ]

The pci_get_slot() increases its reference count, the caller
must decrement the reference count by calling pci_dev_put().

Fixes: 90b9aacf91 ("serial: 8250_pci: add Intel Tangier support")
Fixes: f549e94eff ("serial: 8250_pci: add Intel Penwell ports")
Reported-by: Qing Wang <wangqing@vivo.com>
Signed-off-by: Andy Shevchenko <andriy.shevchenko@linux.intel.com>
Depends-on: d9eda9bab2 ("serial: 8250_pci: Intel MID UART support to its own driver")
Link: https://lore.kernel.org/r/20220215100920.41984-1-andriy.shevchenko@linux.intel.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2022-04-08 14:40:24 +02:00
Jiri Slaby
2cd05c38a2 mxser: fix xmit_buf leak in activate when LSR == 0xff
[ Upstream commit cd3a4907ee ]

When LSR is 0xff in ->activate() (rather unlike), we return an error.
Provided ->shutdown() is not called when ->activate() fails, nothing
actually frees the buffer in this case.

Fix this by properly freeing the buffer in a designated label. We jump
there also from the "!info->type" if now too.

Fixes: 6769140d30 ("tty: mxser: use the tty_port_open method")
Signed-off-by: Jiri Slaby <jslaby@suse.cz>
Link: https://lore.kernel.org/r/20220124071430.14907-6-jslaby@suse.cz
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2022-04-08 14:40:23 +02:00
Uwe Kleine-König
e4c777fd8c amba: Make the remove callback return void
[ Upstream commit 3fd269e74f ]

All amba drivers return 0 in their remove callback. Together with the
driver core ignoring the return value anyhow, it doesn't make sense to
return a value here.

Change the remove prototype to return void, which makes it explicit that
returning an error value doesn't work as expected. This simplifies changing
the core remove callback to return void, too.

Reviewed-by: Ulf Hansson <ulf.hansson@linaro.org>
Reviewed-by: Arnd Bergmann <arnd@arndb.de>
Acked-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Acked-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>
Acked-by: Krzysztof Kozlowski <krzk@kernel.org> # for drivers/memory
Acked-by: Mark Brown <broonie@kernel.org>
Acked-by: Linus Walleij <linus.walleij@linaro.org>
Acked-by: Suzuki K Poulose <suzuki.poulose@arm.com> # for hwtracing/coresight
Acked-By: Vinod Koul <vkoul@kernel.org> # for dmaengine
Acked-by: Guenter Roeck <linux@roeck-us.net> # for watchdog
Acked-by: Wolfram Sang <wsa@kernel.org> # for I2C
Acked-by: Takashi Iwai <tiwai@suse.de> # for sound
Acked-by: Vladimir Zapolskiy <vz@mleia.com> # for memory/pl172
Acked-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Link: https://lore.kernel.org/r/20210126165835.687514-5-u.kleine-koenig@pengutronix.de
Signed-off-by: Uwe Kleine-König <u.kleine-koenig@pengutronix.de>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2022-04-08 14:40:02 +02:00
Huibin Hong
b7d5398aee serial: 8250: do not compile codes that are not used by dw 8250
To save memory space for ROCKCHIP_MINI_KERNEL

Changes to vmlinux size:
Before:
   text	   data	    bss	    dec	    hex	filename
4249223	1766500	 134616	6150339	 5dd8c3	vmlinux

After:
   text	   data	    bss	    dec	    hex	filename
4248379	1763012	 134616	6146007	 5dc7d7	vmlinux

delta: 4332 (dec)

Signed-off-by: Huibin Hong <huibin.hong@rock-chips.com>
Change-Id: Ib1cefe62cf968489cffe37043b29c341d4c60788
2022-04-07 14:39:09 +08:00
Greg Kroah-Hartman
0773736e48 This is the 5.10.104 stable release
-----BEGIN PGP SIGNATURE-----
 
 iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmInm+kACgkQONu9yGCS
 aT4/lw/6AoFz3oHbzlft4tCUn4UXQIut8gIiJfrXBnIqw6pa5YQPA1E7hgQBxTnG
 v9llnwDRFR7qouXq1qhoXU01vETiRqZ2ClkT/MnvLfRMQcHgtS9B61VgwnpNuNBg
 qStZORcqFi6rQHXySUgs2ObF6NZQ3BRyHY2LYqZPj0YkuHIdQo48WtQ9cy0XWZLV
 WT49LIVxkTZ6D0fs/k10qRv+M4lmeOzCqEZf4591F0sjoVuTFj3F1xMsSbu8W3xZ
 xXxE0hPbN0If3JFhnb3DqdQ20kRNSmrrV1CzYaN09jyP7KHpdIDVT8R1hSau3TFP
 3zd2fBWmOP0FPzOVkNnqetMuKspKH8p3kKW2rkTyHYcGtUFzh54Hm0QRpA3CVB3L
 JZje9HCkxWiBSl1mwypmBGp88kWOe+n3NRUOhX3yqPoT3R2n45coBV+sfSOakkxv
 K8mUw1FFbJTPjgJtMCs57zzxybInnMrAF5/7XA2MgHCr3SVvYQA7+joSPn3CO+0K
 zKO4kTdEmD9jTT+3vMDL4Z3VSmOJMVcxCHBTUrac/OBIiBz+7y9WQSc7a6aRbfdu
 k3wy7HJ98pmjYB6g73MJcXOtTwXuoTqur4QWU5MCgTw6+qglgRQHr5ILSs35ZeAV
 LO1zvAsklOWFMc/3fD8heLmKGBZ0GHcn+0Y7ZqfFKLmqOTnx7tA=
 =W+lo
 -----END PGP SIGNATURE-----

Merge 5.10.104 into android12-5.10-lts

Changes in 5.10.104
	mac80211_hwsim: report NOACK frames in tx_status
	mac80211_hwsim: initialize ieee80211_tx_info at hw_scan_work
	i2c: bcm2835: Avoid clock stretching timeouts
	ASoC: rt5668: do not block workqueue if card is unbound
	ASoC: rt5682: do not block workqueue if card is unbound
	regulator: core: fix false positive in regulator_late_cleanup()
	Input: clear BTN_RIGHT/MIDDLE on buttonpads
	KVM: arm64: vgic: Read HW interrupt pending state from the HW
	tipc: fix a bit overflow in tipc_crypto_key_rcv()
	cifs: fix double free race when mount fails in cifs_get_root()
	selftests/seccomp: Fix seccomp failure by adding missing headers
	dmaengine: shdma: Fix runtime PM imbalance on error
	i2c: cadence: allow COMPILE_TEST
	i2c: qup: allow COMPILE_TEST
	net: usb: cdc_mbim: avoid altsetting toggling for Telit FN990
	usb: gadget: don't release an existing dev->buf
	usb: gadget: clear related members when goto fail
	exfat: reuse exfat_inode_info variable instead of calling EXFAT_I()
	exfat: fix i_blocks for files truncated over 4 GiB
	tracing: Add test for user space strings when filtering on string pointers
	serial: stm32: prevent TDR register overwrite when sending x_char
	ata: pata_hpt37x: fix PCI clock detection
	drm/amdgpu: check vm ready by amdgpu_vm->evicting flag
	tracing: Add ustring operation to filtering string pointers
	ALSA: intel_hdmi: Fix reference to PCM buffer address
	riscv/efi_stub: Fix get_boot_hartid_from_fdt() return value
	riscv: Fix config KASAN && SPARSEMEM && !SPARSE_VMEMMAP
	riscv: Fix config KASAN && DEBUG_VIRTUAL
	ASoC: ops: Shift tested values in snd_soc_put_volsw() by +min
	iommu/amd: Recover from event log overflow
	drm/i915: s/JSP2/ICP2/ PCH
	xen/netfront: destroy queues before real_num_tx_queues is zeroed
	thermal: core: Fix TZ_GET_TRIP NULL pointer dereference
	ntb: intel: fix port config status offset for SPR
	mm: Consider __GFP_NOWARN flag for oversized kvmalloc() calls
	xfrm: fix MTU regression
	netfilter: fix use-after-free in __nf_register_net_hook()
	bpf, sockmap: Do not ignore orig_len parameter
	xfrm: fix the if_id check in changelink
	xfrm: enforce validity of offload input flags
	e1000e: Correct NVM checksum verification flow
	net: fix up skbs delta_truesize in UDP GRO frag_list
	netfilter: nf_queue: don't assume sk is full socket
	netfilter: nf_queue: fix possible use-after-free
	netfilter: nf_queue: handle socket prefetch
	batman-adv: Request iflink once in batadv-on-batadv check
	batman-adv: Request iflink once in batadv_get_real_netdevice
	batman-adv: Don't expect inter-netns unique iflink indices
	net: ipv6: ensure we call ipv6_mc_down() at most once
	net: dcb: flush lingering app table entries for unregistered devices
	net/smc: fix connection leak
	net/smc: fix unexpected SMC_CLC_DECL_ERR_REGRMB error generated by client
	net/smc: fix unexpected SMC_CLC_DECL_ERR_REGRMB error cause by server
	rcu/nocb: Fix missed nocb_timer requeue
	ice: Fix race conditions between virtchnl handling and VF ndo ops
	ice: fix concurrent reset and removal of VFs
	sched/topology: Make sched_init_numa() use a set for the deduplicating sort
	sched/topology: Fix sched_domain_topology_level alloc in sched_init_numa()
	ia64: ensure proper NUMA distance and possible map initialization
	mac80211: fix forwarded mesh frames AC & queue selection
	net: stmmac: fix return value of __setup handler
	mac80211: treat some SAE auth steps as final
	iavf: Fix missing check for running netdev
	net: sxgbe: fix return value of __setup handler
	ibmvnic: register netdev after init of adapter
	net: arcnet: com20020: Fix null-ptr-deref in com20020pci_probe()
	ixgbe: xsk: change !netif_carrier_ok() handling in ixgbe_xmit_zc()
	efivars: Respect "block" flag in efivar_entry_set_safe()
	firmware: arm_scmi: Remove space in MODULE_ALIAS name
	ASoC: cs4265: Fix the duplicated control name
	can: gs_usb: change active_channels's type from atomic_t to u8
	arm64: dts: rockchip: Switch RK3399-Gru DP to SPDIF output
	igc: igc_read_phy_reg_gpy: drop premature return
	ARM: Fix kgdb breakpoint for Thumb2
	ARM: 9182/1: mmu: fix returns from early_param() and __setup() functions
	selftests: mlxsw: tc_police_scale: Make test more robust
	pinctrl: sunxi: Use unique lockdep classes for IRQs
	igc: igc_write_phy_reg_gpy: drop premature return
	ibmvnic: free reset-work-item when flushing
	memfd: fix F_SEAL_WRITE after shmem huge page allocated
	s390/extable: fix exception table sorting
	ARM: dts: switch timer config to common devkit8000 devicetree
	ARM: dts: Use 32KiHz oscillator on devkit8000
	soc: fsl: guts: Revert commit 3c0d64e867
	soc: fsl: guts: Add a missing memory allocation failure check
	soc: fsl: qe: Check of ioremap return value
	ARM: tegra: Move panels to AUX bus
	ibmvnic: complete init_done on transport events
	net: chelsio: cxgb3: check the return value of pci_find_capability()
	iavf: Refactor iavf state machine tracking
	nl80211: Handle nla_memdup failures in handle_nan_filter
	drm/amdgpu: fix suspend/resume hang regression
	net: dcb: disable softirqs in dcbnl_flush_dev()
	Input: elan_i2c - move regulator_[en|dis]able() out of elan_[en|dis]able_power()
	Input: elan_i2c - fix regulator enable count imbalance after suspend/resume
	Input: samsung-keypad - properly state IOMEM dependency
	HID: add mapping for KEY_DICTATE
	HID: add mapping for KEY_ALL_APPLICATIONS
	tracing/histogram: Fix sorting on old "cpu" value
	tracing: Fix return value of __setup handlers
	btrfs: fix lost prealloc extents beyond eof after full fsync
	btrfs: qgroup: fix deadlock between rescan worker and remove qgroup
	btrfs: add missing run of delayed items after unlink during log replay
	Revert "xfrm: xfrm_state_mtu should return at least 1280 for ipv6"
	hamradio: fix macro redefine warning
	Linux 5.10.104

Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
Change-Id: I24dabeba483a0b0123a4e8c10d1a568b11dfb9c8
2022-03-12 13:57:09 +01:00
Valentin Caron
335f11ff74 serial: stm32: prevent TDR register overwrite when sending x_char
[ Upstream commit d3d079bde0 ]

When sending x_char in stm32_usart_transmit_chars(), driver can overwrite
the value of TDR register by the value of x_char. If this happens, the
previous value that was present in TDR register will not be sent through
uart.

This code checks if the previous value in TDR register is sent before
writing the x_char value into register.

Fixes: 48a6092fb4 ("serial: stm32-usart: Add STM32 USART Driver")
Cc: stable <stable@vger.kernel.org>
Signed-off-by: Valentin Caron <valentin.caron@foss.st.com>
Link: https://lore.kernel.org/r/20220111164441.6178-2-valentin.caron@foss.st.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2022-03-08 19:09:30 +01:00
Greg Kroah-Hartman
d172937367 This is the 5.10.103 stable release
-----BEGIN PGP SIGNATURE-----
 
 iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmIfSjYACgkQONu9yGCS
 aT5uuQ/9GcUx5ur2RT/8hqUmkDZU3PV2KvPbLY9BYfn5i/An/WS7KNlcXMatEd7n
 E8G+Sh3hLlb8h+3B9EGYvumssERJSxAaecxhha6NU8dSsUdpKzLvjwfy/5L+giJP
 rR6q4yhQaWqt0k7lSdohosIbTuDrr78Q9ifGPRpa2SIDEUDO4R+O/l9XqsCXXDMA
 qa5MIC3vZwU6jbwcfkS1cc/kdB5aLT1DRCXW7Ca7YYMFTba3eV8FWr5pC82cjgsS
 uIZ34yhMLQm70IDNqZRsMtj7JvpwHGAWsOTDd4HoI+4MdyyrgadSPDRRPzcytStZ
 TEllgey/6U+i6Et1wPIpTb/FOOQ3S7uvVBeSdPnDpuv7/BOD75fFg7lOoE9OGcLo
 14bmQGUc0FqOUxmtqYu/LmTOc4o/l0S1DCMhn4JquGjqCQa8R7aWVzYjHlG9wF6v
 ZI04pB+5hec8vElICFUAdaJe6cR5ttkFq4UEkmkXLeSs1RKtAlE5VZkEU9dTykNn
 IY9KYbXNwe492xVCaIZUO2pHpu07tuJ2YLqZypktQt7ndPIjRTeHt3QnFQIVMcug
 MyAtDtZaqHQ459xF9caMHnThxsei7t6YWoPGK8/04ngpZS61ORuNIxigKmK/B62H
 hmoJolC007zXYeisDgSkhFk4TaDbVpxne9cruVd50mLOZlvDUZY=
 =8KvB
 -----END PGP SIGNATURE-----

Merge 5.10.103 into android12-5.10-lts

Changes in 5.10.103
	cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug
	btrfs: tree-checker: check item_size for inode_item
	btrfs: tree-checker: check item_size for dev_item
	clk: jz4725b: fix mmc0 clock gating
	vhost/vsock: don't check owner in vhost_vsock_stop() while releasing
	parisc/unaligned: Fix fldd and fstd unaligned handlers on 32-bit kernel
	parisc/unaligned: Fix ldw() and stw() unalignment handlers
	KVM: x86/mmu: make apf token non-zero to fix bug
	drm/amdgpu: disable MMHUB PG for Picasso
	drm/i915: Correctly populate use_sagv_wm for all pipes
	sr9700: sanity check for packet length
	USB: zaurus: support another broken Zaurus
	CDC-NCM: avoid overflow in sanity checking
	netfilter: nf_tables_offload: incorrect flow offload action array size
	x86/fpu: Correct pkru/xstate inconsistency
	tee: export teedev_open() and teedev_close_context()
	optee: use driver internal tee_context for some rpc
	ping: remove pr_err from ping_lookup
	perf data: Fix double free in perf_session__delete()
	bnx2x: fix driver load from initrd
	bnxt_en: Fix active FEC reporting to ethtool
	hwmon: Handle failure to register sensor with thermal zone correctly
	bpf: Do not try bpf_msg_push_data with len 0
	selftests: bpf: Check bpf_msg_push_data return value
	bpf: Add schedule points in batch ops
	io_uring: add a schedule point in io_add_buffers()
	net: __pskb_pull_tail() & pskb_carve_frag_list() drop_monitor friends
	tipc: Fix end of loop tests for list_for_each_entry()
	gso: do not skip outer ip header in case of ipip and net_failover
	openvswitch: Fix setting ipv6 fields causing hw csum failure
	drm/edid: Always set RGB444
	net/mlx5e: Fix wrong return value on ioctl EEPROM query failure
	net/sched: act_ct: Fix flow table lookup after ct clear or switching zones
	net: ll_temac: check the return value of devm_kmalloc()
	net: Force inlining of checksum functions in net/checksum.h
	nfp: flower: Fix a potential leak in nfp_tunnel_add_shared_mac()
	netfilter: nf_tables: fix memory leak during stateful obj update
	net/smc: Use a mutex for locking "struct smc_pnettable"
	surface: surface3_power: Fix battery readings on batteries without a serial number
	udp_tunnel: Fix end of loop test in udp_tunnel_nic_unregister()
	net/mlx5: Fix possible deadlock on rule deletion
	net/mlx5: Fix wrong limitation of metadata match on ecpf
	net/mlx5e: kTLS, Use CHECKSUM_UNNECESSARY for device-offloaded packets
	spi: spi-zynq-qspi: Fix a NULL pointer dereference in zynq_qspi_exec_mem_op()
	regmap-irq: Update interrupt clear register for proper reset
	RDMA/rtrs-clt: Fix possible double free in error case
	RDMA/rtrs-clt: Kill wait_for_inflight_permits
	RDMA/rtrs-clt: Move free_permit from free_clt to rtrs_clt_close
	configfs: fix a race in configfs_{,un}register_subsystem()
	RDMA/ib_srp: Fix a deadlock
	tracing: Have traceon and traceoff trigger honor the instance
	iio: adc: men_z188_adc: Fix a resource leak in an error handling path
	iio: adc: ad7124: fix mask used for setting AIN_BUFP & AIN_BUFM bits
	iio: imu: st_lsm6dsx: wait for settling time in st_lsm6dsx_read_oneshot
	iio: Fix error handling for PM
	sc16is7xx: Fix for incorrect data being transmitted
	ata: pata_hpt37x: disable primary channel on HPT371
	Revert "USB: serial: ch341: add new Product ID for CH341A"
	usb: gadget: rndis: add spinlock for rndis response list
	USB: gadget: validate endpoint index for xilinx udc
	tracefs: Set the group ownership in apply_options() not parse_options()
	USB: serial: option: add support for DW5829e
	USB: serial: option: add Telit LE910R1 compositions
	usb: dwc2: drd: fix soft connect when gadget is unconfigured
	usb: dwc3: pci: Fix Bay Trail phy GPIO mappings
	usb: dwc3: gadget: Let the interrupt handler disable bottom halves.
	xhci: re-initialize the HC during resume if HCE was set
	xhci: Prevent futile URB re-submissions due to incorrect return value.
	driver core: Free DMA range map when device is released
	RDMA/cma: Do not change route.addr.src_addr outside state checks
	thermal: int340x: fix memory leak in int3400_notify()
	riscv: fix oops caused by irqsoff latency tracer
	tty: n_gsm: fix encoding of control signal octet bit DV
	tty: n_gsm: fix proper link termination after failed open
	tty: n_gsm: fix NULL pointer access due to DLCI release
	tty: n_gsm: fix wrong tty control line for flow control
	tty: n_gsm: fix deadlock in gsmtty_open()
	gpio: tegra186: Fix chip_data type confusion
	memblock: use kfree() to release kmalloced memblock regions
	Linux 5.10.103

Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
Change-Id: I6b1b827ba2740b36680033a44f04d62b4e5565ab
2022-03-02 15:41:32 +01:00
daniel.starke@siemens.com
bb2e0a7723 tty: n_gsm: fix deadlock in gsmtty_open()
commit a2ab75b8e7 upstream.

In the current implementation the user may open a virtual tty which then
could fail to establish the underlying DLCI. The function gsmtty_open()
gets stuck in tty_port_block_til_ready() while waiting for a carrier rise.
This happens if the remote side fails to acknowledge the link establishment
request in time or completely. At some point gsm_dlci_close() is called
to abort the link establishment attempt. The function tries to inform the
associated virtual tty by performing a hangup. But the blocking loop within
tty_port_block_til_ready() is not informed about this event.
The patch proposed here fixes this by resetting the initialization state of
the virtual tty to ensure the loop exits and triggering it to make
tty_port_block_til_ready() return.

Fixes: e1eaea46bb ("tty: n_gsm line discipline")
Cc: stable@vger.kernel.org
Signed-off-by: Daniel Starke <daniel.starke@siemens.com>
Link: https://lore.kernel.org/r/20220218073123.2121-7-daniel.starke@siemens.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2022-03-02 11:42:57 +01:00
daniel.starke@siemens.com
e4c8cb95d0 tty: n_gsm: fix wrong tty control line for flow control
commit c19d93542a upstream.

tty flow control is handled via gsmtty_throttle() and gsmtty_unthrottle().
Both functions propagate the outgoing hardware flow control state to the
remote side via MSC (modem status command) frames. The local state is taken
from the RTS (ready to send) flag of the tty. However, RTS gets mapped to
DTR (data terminal ready), which is wrong.
This patch corrects this by mapping RTS to RTS.

Fixes: e1eaea46bb ("tty: n_gsm line discipline")
Cc: stable@vger.kernel.org
Signed-off-by: Daniel Starke <daniel.starke@siemens.com>
Link: https://lore.kernel.org/r/20220218073123.2121-5-daniel.starke@siemens.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2022-03-02 11:42:57 +01:00
daniel.starke@siemens.com
1f0641dd0b tty: n_gsm: fix NULL pointer access due to DLCI release
commit 96b169f05c upstream.

The here fixed commit made the tty hangup asynchronous to avoid a circular
locking warning. I could not reproduce this warning. Furthermore, due to
the asynchronous hangup the function call now gets queued up while the
underlying tty is being freed. Depending on the timing this results in a
NULL pointer access in the global work queue scheduler. To be precise in
process_one_work(). Therefore, the previous commit made the issue worse
which it tried to fix.

This patch fixes this by falling back to the old behavior which uses a
blocking tty hangup call before freeing up the associated tty.

Fixes: 7030082a74 ("tty: n_gsm: avoid recursive locking with async port hangup")
Cc: stable@vger.kernel.org
Signed-off-by: Daniel Starke <daniel.starke@siemens.com>
Link: https://lore.kernel.org/r/20220218073123.2121-4-daniel.starke@siemens.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2022-03-02 11:42:57 +01:00
daniel.starke@siemens.com
1e35cb9e12 tty: n_gsm: fix proper link termination after failed open
commit e3b7468f08 upstream.

Trying to open a DLCI by sending a SABM frame may fail with a timeout.
The link is closed on the initiator side without informing the responder
about this event. The responder assumes the link is open after sending a
UA frame to answer the SABM frame. The link gets stuck in a half open
state.

This patch fixes this by initiating the proper link termination procedure
after link setup timeout instead of silently closing it down.

Fixes: e1eaea46bb ("tty: n_gsm line discipline")
Cc: stable@vger.kernel.org
Signed-off-by: Daniel Starke <daniel.starke@siemens.com>
Link: https://lore.kernel.org/r/20220218073123.2121-3-daniel.starke@siemens.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2022-03-02 11:42:56 +01:00
daniel.starke@siemens.com
90b47e617f tty: n_gsm: fix encoding of control signal octet bit DV
commit 737b0ef3be upstream.

n_gsm is based on the 3GPP 07.010 and its newer version is the 3GPP 27.010.
See https://portal.3gpp.org/desktopmodules/Specifications/SpecificationDetails.aspx?specificationId=1516
The changes from 07.010 to 27.010 are non-functional. Therefore, I refer to
the newer 27.010 here. Chapter 5.4.6.3.7 describes the encoding of the
control signal octet used by the MSC (modem status command). The same
encoding is also used in convergence layer type 2 as described in chapter
5.5.2. Table 7 and 24 both require the DV (data valid) bit to be set 1 for
outgoing control signal octets sent by the DTE (data terminal equipment),
i.e. for the initiator side.
Currently, the DV bit is only set if CD (carrier detect) is on, regardless
of the side.

This patch fixes this behavior by setting the DV bit on the initiator side
unconditionally.

Fixes: e1eaea46bb ("tty: n_gsm line discipline")
Cc: stable@vger.kernel.org
Signed-off-by: Daniel Starke <daniel.starke@siemens.com>
Link: https://lore.kernel.org/r/20220218073123.2121-1-daniel.starke@siemens.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2022-03-02 11:42:56 +01:00
Phil Elwell
18701d8afa sc16is7xx: Fix for incorrect data being transmitted
commit eebb0f4e89 upstream.

UART drivers are meant to use the port spinlock within certain
methods, to protect against reentrancy. The sc16is7xx driver does
very little locking, presumably because when added it triggers
"scheduling while atomic" errors. This is due to the use of mutexes
within the regmap abstraction layer, and the mutex implementation's
habit of sleeping the current thread while waiting for access.
Unfortunately this lack of interlocking can lead to corruption of
outbound data, which occurs when the buffer used for I2C transmission
is used simultaneously by two threads - a work queue thread running
sc16is7xx_tx_proc, and an IRQ thread in sc16is7xx_port_irq, both
of which can call sc16is7xx_handle_tx.

An earlier patch added efr_lock, a mutex that controls access to the
EFR register. This mutex is already claimed in the IRQ handler, and
all that is required is to claim the same mutex in sc16is7xx_tx_proc.

See: https://github.com/raspberrypi/linux/issues/4885

Fixes: 6393ff1c44 ("sc16is7xx: Use threaded IRQ")
Cc: stable <stable@vger.kernel.org>
Signed-off-by: Phil Elwell <phil@raspberrypi.com>
Link: https://lore.kernel.org/r/20220216160802.1026013-1-phil@raspberrypi.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2022-03-02 11:42:53 +01:00
Greg Kroah-Hartman
79553fad5c This is the 5.10.102 stable release
-----BEGIN PGP SIGNATURE-----
 
 iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmIWE/gACgkQONu9yGCS
 aT74Cw//awQY9EgXHMRNNU5+qun0ESkj918YvfAIKGDRutaOXK00YUdkqjuxEP6V
 gOso0rbXe1LiravgrbPSaYbgSvhGVPOPXHLhb7QQkiodxMZ0oaEEzST2VzM4a19k
 xfhne2BeqCCl4oUUA84NZPcCpohaLhRjZesMWR23zWNbVMEIt7uV8eeqRcC0S4YA
 r7cA4PURBMUiTlWWssBwlrEVy5JZrlcTYCvljxcpd8ws1Xs0KnmxX4gIDpQzNoFj
 Dfwg3lSFcl+ar/Xrg14qL3q3iO8zpaJ2msguZ4vq+OLiYWoTfoFcBF625eQJn6/B
 eWrzpNUqzFv5Eu31vMnv4Wm/iN8/1Yd+lacSqKwxejdmZzwX79VRqv9kD2naT/eP
 C/tkI1b93Ig7+teIjm+aqMAFDoAeR75oVK0KwKEkDIT19mbX1CSex9VnJtaSHZTM
 ON7N8NBUyIPLmhc3jencrsFNIY11W7xUedcN/+JmrZoi4Xy4Yr0mh3H4fZVs/vAH
 I6uYZgylTZiX0esCqJeiHrasETL0IStDw57+wbrjLlBrATgkMbhZQ+VTBxio/mxV
 yok4TiIB+EHaNMOgIAuT6uaZrXwDwHekR1EX1s4p2cPTz1kstp1ZIC2Gdv910xKB
 gprzPa/ocwqk71QODgwhogwntR/a4edbbYvCVHKLXQH9Pd81jkM=
 =TZTu
 -----END PGP SIGNATURE-----

Merge 5.10.102 into android12-5.10-lts

Changes in 5.10.102
	drm/nouveau/pmu/gm200-: use alternate falcon reset sequence
	mm: memcg: synchronize objcg lists with a dedicated spinlock
	rcu: Do not report strict GPs for outgoing CPUs
	fget: clarify and improve __fget_files() implementation
	fs/proc: task_mmu.c: don't read mapcount for migration entry
	can: isotp: prevent race between isotp_bind() and isotp_setsockopt()
	can: isotp: add SF_BROADCAST support for functional addressing
	scsi: lpfc: Fix mailbox command failure during driver initialization
	HID:Add support for UGTABLET WP5540
	Revert "svm: Add warning message for AVIC IPI invalid target"
	serial: parisc: GSC: fix build when IOSAPIC is not set
	parisc: Drop __init from map_pages declaration
	parisc: Fix data TLB miss in sba_unmap_sg
	parisc: Fix sglist access in ccio-dma.c
	mmc: block: fix read single on recovery logic
	mm: don't try to NUMA-migrate COW pages that have other uses
	PCI: hv: Fix NUMA node assignment when kernel boots with custom NUMA topology
	parisc: Add ioread64_lo_hi() and iowrite64_lo_hi()
	btrfs: send: in case of IO error log it
	platform/x86: touchscreen_dmi: Add info for the RWC NANOTE P8 AY07J 2-in-1
	platform/x86: ISST: Fix possible circular locking dependency detected
	selftests: rtc: Increase test timeout so that all tests run
	kselftest: signal all child processes
	net: ieee802154: at86rf230: Stop leaking skb's
	selftests/zram: Skip max_comp_streams interface on newer kernel
	selftests/zram01.sh: Fix compression ratio calculation
	selftests/zram: Adapt the situation that /dev/zram0 is being used
	selftests: openat2: Print also errno in failure messages
	selftests: openat2: Add missing dependency in Makefile
	selftests: openat2: Skip testcases that fail with EOPNOTSUPP
	selftests: skip mincore.check_file_mmap when fs lacks needed support
	ax25: improve the incomplete fix to avoid UAF and NPD bugs
	vfs: make freeze_super abort when sync_filesystem returns error
	quota: make dquot_quota_sync return errors from ->sync_fs
	scsi: pm8001: Fix use-after-free for aborted TMF sas_task
	scsi: pm8001: Fix use-after-free for aborted SSP/STP sas_task
	nvme: fix a possible use-after-free in controller reset during load
	nvme-tcp: fix possible use-after-free in transport error_recovery work
	nvme-rdma: fix possible use-after-free in transport error_recovery work
	drm/amdgpu: fix logic inversion in check
	x86/Xen: streamline (and fix) PV CPU enumeration
	Revert "module, async: async_synchronize_full() on module init iff async is used"
	gcc-plugins/stackleak: Use noinstr in favor of notrace
	random: wake up /dev/random writers after zap
	kbuild: lto: merge module sections
	kbuild: lto: Merge module sections if and only if CONFIG_LTO_CLANG is enabled
	iwlwifi: fix use-after-free
	drm/radeon: Fix backlight control on iMac 12,1
	drm/i915/opregion: check port number bounds for SWSCI display power state
	vsock: remove vsock from connected table when connect is interrupted by a signal
	drm/i915/gvt: Make DRM_I915_GVT depend on X86
	iwlwifi: pcie: fix locking when "HW not ready"
	iwlwifi: pcie: gen2: fix locking when "HW not ready"
	selftests: netfilter: fix exit value for nft_concat_range
	netfilter: nft_synproxy: unregister hooks on init error path
	ipv6: per-netns exclusive flowlabel checks
	net: dsa: lan9303: fix reset on probe
	net: dsa: lantiq_gswip: fix use after free in gswip_remove()
	net: ieee802154: ca8210: Fix lifs/sifs periods
	ping: fix the dif and sdif check in ping_lookup
	bonding: force carrier update when releasing slave
	drop_monitor: fix data-race in dropmon_net_event / trace_napi_poll_hit
	net_sched: add __rcu annotation to netdev->qdisc
	bonding: fix data-races around agg_select_timer
	libsubcmd: Fix use-after-free for realloc(..., 0)
	dpaa2-eth: Initialize mutex used in one step timestamping path
	perf bpf: Defer freeing string after possible strlen() on it
	selftests/exec: Add non-regular to TEST_GEN_PROGS
	ALSA: hda/realtek: Add quirk for Legion Y9000X 2019
	ALSA: hda/realtek: Fix deadlock by COEF mutex
	ALSA: hda: Fix regression on forced probe mask option
	ALSA: hda: Fix missing codec probe on Shenker Dock 15
	ASoC: ops: Fix stereo change notifications in snd_soc_put_volsw()
	ASoC: ops: Fix stereo change notifications in snd_soc_put_volsw_range()
	powerpc/lib/sstep: fix 'ptesync' build error
	mtd: rawnand: gpmi: don't leak PM reference in error path
	KVM: SVM: Never reject emulation due to SMAP errata for !SEV guests
	ASoC: tas2770: Insert post reset delay
	block/wbt: fix negative inflight counter when remove scsi device
	NFS: LOOKUP_DIRECTORY is also ok with symlinks
	NFS: Do not report writeback errors in nfs_getattr()
	tty: n_tty: do not look ahead for EOL character past the end of the buffer
	mtd: rawnand: qcom: Fix clock sequencing in qcom_nandc_probe()
	mtd: rawnand: brcmnand: Fixed incorrect sub-page ECC status
	Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj
	KVM: x86/pmu: Refactoring find_arch_event() to pmc_perf_hw_id()
	KVM: x86/pmu: Don't truncate the PerfEvtSeln MSR when creating a perf event
	KVM: x86/pmu: Use AMD64_RAW_EVENT_MASK for PERF_TYPE_RAW
	NFS: Don't set NFS_INO_INVALID_XATTR if there is no xattr cache
	ARM: OMAP2+: hwmod: Add of_node_put() before break
	ARM: OMAP2+: adjust the location of put_device() call in omapdss_init_of
	phy: usb: Leave some clocks running during suspend
	irqchip/sifive-plic: Add missing thead,c900-plic match string
	netfilter: conntrack: don't refresh sctp entries in closed state
	arm64: dts: meson-gx: add ATF BL32 reserved-memory region
	arm64: dts: meson-g12: add ATF BL32 reserved-memory region
	arm64: dts: meson-g12: drop BL32 region from SEI510/SEI610
	pidfd: fix test failure due to stack overflow on some arches
	selftests: fixup build warnings in pidfd / clone3 tests
	kconfig: let 'shell' return enough output for deep path names
	lib/iov_iter: initialize "flags" in new pipe_buffer
	ata: libata-core: Disable TRIM on M88V29
	soc: aspeed: lpc-ctrl: Block error printing on probe defer cases
	xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create
	drm/rockchip: dw_hdmi: Do not leave clock enabled in error case
	tracing: Fix tp_printk option related with tp_printk_stop_on_boot
	net: usb: qmi_wwan: Add support for Dell DW5829e
	net: macb: Align the dma and coherent dma masks
	kconfig: fix failing to generate auto.conf
	scsi: lpfc: Fix pt2pt NVMe PRLI reject LOGO loop
	EDAC: Fix calculation of returned address and next offset in edac_align_ptr()
	net: sched: limit TC_ACT_REPEAT loops
	dmaengine: sh: rcar-dmac: Check for error num after setting mask
	dmaengine: stm32-dmamux: Fix PM disable depth imbalance in stm32_dmamux_probe
	dmaengine: sh: rcar-dmac: Check for error num after dma_set_max_seg_size
	i2c: qcom-cci: don't delete an unregistered adapter
	i2c: qcom-cci: don't put a device tree node before i2c_add_adapter()
	copy_process(): Move fd_install() out of sighand->siglock critical section
	i2c: brcmstb: fix support for DSL and CM variants
	lockdep: Correct lock_classes index mapping
	Linux 5.10.102

Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
Change-Id: Ief12c0d77b23f9796b81a8fc3b79ac6589e81dc9
2022-02-23 12:56:37 +01:00
Linus Torvalds
8c848744c1 tty: n_tty: do not look ahead for EOL character past the end of the buffer
commit 3593030761 upstream.

Daniel Gibson reports that the n_tty code gets line termination wrong in
very specific cases:

 "If you feed a line with exactly 64 chars + terminating newline, and
  directly afterwards (without reading) another line into a pseudo
  terminal, the the first read() on the other side will return the 64
  char line *without* terminating newline, and the next read() will
  return the missing terminating newline AND the complete next line (if
  it fits in the buffer)"

and bisected the behavior to commit 3b830a9c34 ("tty: convert
tty_ldisc_ops 'read()' function to take a kernel pointer").

Now, digging deeper, it turns out that the behavior isn't exactly new:
what changed in commit 3b830a9c34 was that the tty line discipline
.read() function is now passed an intermediate kernel buffer rather than
the final user space buffer.

And that intermediate kernel buffer is 64 bytes in size - thus that
special case with exactly 64 bytes plus terminating newline.

The same problem did exist before, but historically the boundary was not
the 64-byte chunk, but the user-supplied buffer size, which is obviously
generally bigger (and potentially bigger than N_TTY_BUF_SIZE, which
would hide the issue entirely).

The reason is that the n_tty canon_copy_from_read_buf() code would look
ahead for the EOL character one byte further than it would actually
copy.  It would then decide that it had found the terminator, and unmark
it as an EOL character - which in turn explains why the next read
wouldn't then be terminated by it.

Now, the reason it did all this in the first place is related to some
historical and pretty obscure EOF behavior, see commit ac8f3bf883
("n_tty: Fix poll() after buffer-limited eof push read") and commit
40d5e0905a ("n_tty: Fix EOF push handling").

And the reason for the EOL confusion is that we treat EOF as a special
EOL condition, with the EOL character being NUL (aka "__DISABLED_CHAR"
in the kernel sources).

So that EOF look-ahead also affects the normal EOL handling.

This patch just removes the look-ahead that causes problems, because EOL
is much more critical than the historical "EOF in the middle of a line
that coincides with the end of the buffer" handling ever was.

Now, it is possible that we should indeed re-introduce the "look at next
character to see if it's a EOF" behavior, but if so, that should be done
not at the kernel buffer chunk boundary in canon_copy_from_read_buf(),
but at a higher level, when we run out of the user buffer.

In particular, the place to do that would be at the top of
'n_tty_read()', where we check if it's a continuation of a previously
started read, and there is no more buffer space left, we could decide to
just eat the __DISABLED_CHAR at that point.

But that would be a separate patch, because I suspect nobody actually
cares, and I'd like to get a report about it before bothering.

Fixes: 3b830a9c34 ("tty: convert tty_ldisc_ops 'read()' function to take a kernel pointer")
Fixes: ac8f3bf883 ("n_tty: Fix  poll() after buffer-limited eof push read")
Fixes: 40d5e0905a ("n_tty: Fix EOF push handling")
Link: https://bugzilla.kernel.org/show_bug.cgi?id=215611
Reported-and-tested-by: Daniel Gibson <metalcaedes@gmail.com>
Cc: Peter Hurley <peter@hurleysoftware.com>
Cc: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Cc: Jiri Slaby <jirislaby@kernel.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2022-02-23 12:01:04 +01:00
Randy Dunlap
8e3f9a098e serial: parisc: GSC: fix build when IOSAPIC is not set
commit 6e8793674b upstream.

There is a build error when using a kernel .config file from
'kernel test robot' for a different build problem:

hppa64-linux-ld: drivers/tty/serial/8250/8250_gsc.o: in function `.LC3':
(.data.rel.ro+0x18): undefined reference to `iosapic_serial_irq'

when:
  CONFIG_GSC=y
  CONFIG_SERIO_GSCPS2=y
  CONFIG_SERIAL_8250_GSC=y
  CONFIG_PCI is not set
    and hence PCI_LBA is not set.
  IOSAPIC depends on PCI_LBA, so IOSAPIC is not set/enabled.

Make the use of iosapic_serial_irq() conditional to fix the build error.

Signed-off-by: Randy Dunlap <rdunlap@infradead.org>
Reported-by: kernel test robot <lkp@intel.com>
Cc: "James E.J. Bottomley" <James.Bottomley@HansenPartnership.com>
Cc: Helge Deller <deller@gmx.de>
Cc: linux-parisc@vger.kernel.org
Cc: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Cc: linux-serial@vger.kernel.org
Cc: Jiri Slaby <jirislaby@kernel.org>
Cc: Johan Hovold <johan@kernel.org>
Suggested-by: Helge Deller <deller@gmx.de>
Signed-off-by: Helge Deller <deller@gmx.de>
Cc: stable@vger.kernel.org
Signed-off-by: Helge Deller <deller@gmx.de>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2022-02-23 12:00:57 +01:00
Greg Kroah-Hartman
c194212a03 This is the 5.10.101 stable release
-----BEGIN PGP SIGNATURE-----
 
 iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmIM5gYACgkQONu9yGCS
 aT7LRw//VcpMVitixVf+dgNjlBe7mNb/h2FEWVJzWvOYNQAxPSEYpRLlU3IWSdli
 vqqwaps+7kWVIgYQt0ccR5rRp+eg98+QpfYgZO5xfKL0YEspf0+fYDcF99K5Sjrp
 aFXX9nONAgCUyW0qb4CUdnL9G61UunR70iyF7Gb77vakI0qB8emYVjvlvbH3MI5M
 9AqWt+lBNmRiNw2/1Nz3gvmtHhe2fYtKmJBMcX8gVAN9Ysl2jvnhtOovJzIjldZx
 y39PIWDwWq9O7BsaQm8RpYl/LguSS/xwseMMEbcJn0woBqnNg3qOJceaG782/OdD
 FTvuTDvyD89tSX9T0jeVlVO+VwhoKTHlMJ1n5dpcJEFgbz0m+VtI3B9PuggWBwz5
 0AgBzJKVXahgVrQnMpjw4k73scgyC7VcaAxYH69E+2IThRqxtBbHqETYEiVURUpH
 fS+WjDvIOp47z9ARhQD+H8zzSFbx1DnOpbYd9zfdvnzIu2wq4Uerj8m/jk/hwh4/
 zo18zVS/50vFL2/YqeKu9YdcuPPa7qlaz/zhnFM6QY65t10a01Q281Z7gFKBPevz
 4IaTv9Yky//0XLQTo+/JN/O1W0FUitsei0Jl2g2dmfZoCW48MPFzezVErs37NX5s
 1EsEN1jZ+yHIxu2dQwGBKpqvABNAp2rv64yCfsAcevJ52MHlef8=
 =qatY
 -----END PGP SIGNATURE-----

Merge 5.10.101 into android12-5.10-lts

Changes in 5.10.101
	integrity: check the return value of audit_log_start()
	ima: Remove ima_policy file before directory
	ima: Allow template selection with ima_template[_fmt]= after ima_hash=
	ima: Do not print policy rule with inactive LSM labels
	mmc: sdhci-of-esdhc: Check for error num after setting mask
	can: isotp: fix potential CAN frame reception race in isotp_rcv()
	net: phy: marvell: Fix RGMII Tx/Rx delays setting in 88e1121-compatible PHYs
	net: phy: marvell: Fix MDI-x polarity setting in 88e1118-compatible PHYs
	NFS: Fix initialisation of nfs_client cl_flags field
	NFSD: Clamp WRITE offsets
	NFSD: Fix offset type in I/O trace points
	drm/amdgpu: Set a suitable dev_info.gart_page_size
	tracing: Propagate is_signed to expression
	NFS: change nfs_access_get_cached to only report the mask
	NFSv4 only print the label when its queried
	nfs: nfs4clinet: check the return value of kstrdup()
	NFSv4.1: Fix uninitialised variable in devicenotify
	NFSv4 remove zero number of fs_locations entries error check
	NFSv4 expose nfs_parse_server_name function
	NFSv4 handle port presence in fs_location server string
	x86/perf: Avoid warning for Arch LBR without XSAVE
	drm: panel-orientation-quirks: Add quirk for the 1Netbook OneXPlayer
	net: sched: Clarify error message when qdisc kind is unknown
	powerpc/fixmap: Fix VM debug warning on unmap
	scsi: target: iscsi: Make sure the np under each tpg is unique
	scsi: ufs: ufshcd-pltfrm: Check the return value of devm_kstrdup()
	scsi: qedf: Add stag_work to all the vports
	scsi: qedf: Fix refcount issue when LOGO is received during TMF
	scsi: pm8001: Fix bogus FW crash for maxcpus=1
	scsi: ufs: Treat link loss as fatal error
	scsi: myrs: Fix crash in error case
	PM: hibernate: Remove register_nosave_region_late()
	usb: dwc2: gadget: don't try to disable ep0 in dwc2_hsotg_suspend
	perf: Always wake the parent event
	nvme-pci: add the IGNORE_DEV_SUBNQN quirk for Intel P4500/P4600 SSDs
	net: stmmac: dwmac-sun8i: use return val of readl_poll_timeout()
	KVM: eventfd: Fix false positive RCU usage warning
	KVM: nVMX: eVMCS: Filter out VM_EXIT_SAVE_VMX_PREEMPTION_TIMER
	KVM: nVMX: Also filter MSR_IA32_VMX_TRUE_PINBASED_CTLS when eVMCS
	KVM: SVM: Don't kill SEV guest if SMAP erratum triggers in usermode
	KVM: VMX: Set vmcs.PENDING_DBG.BS on #DB in STI/MOVSS blocking shadow
	riscv: fix build with binutils 2.38
	ARM: dts: imx23-evk: Remove MX23_PAD_SSP1_DETECT from hog group
	ARM: dts: Fix boot regression on Skomer
	ARM: socfpga: fix missing RESET_CONTROLLER
	nvme-tcp: fix bogus request completion when failing to send AER
	ACPI/IORT: Check node revision for PMCG resources
	PM: s2idle: ACPI: Fix wakeup interrupts handling
	drm/rockchip: vop: Correct RK3399 VOP register fields
	ARM: dts: Fix timer regression for beagleboard revision c
	ARM: dts: meson: Fix the UART compatible strings
	ARM: dts: meson8: Fix the UART device-tree schema validation
	ARM: dts: meson8b: Fix the UART device-tree schema validation
	staging: fbtft: Fix error path in fbtft_driver_module_init()
	ARM: dts: imx6qdl-udoo: Properly describe the SD card detect
	phy: xilinx: zynqmp: Fix bus width setting for SGMII
	ARM: dts: imx7ulp: Fix 'assigned-clocks-parents' typo
	usb: f_fs: Fix use-after-free for epfile
	gpio: aggregator: Fix calling into sleeping GPIO controllers
	drm/vc4: hdmi: Allow DBLCLK modes even if horz timing is odd.
	misc: fastrpc: avoid double fput() on failed usercopy
	netfilter: ctnetlink: disable helper autoassign
	arm64: dts: meson-g12b-odroid-n2: fix typo 'dio2133'
	ixgbevf: Require large buffers for build_skb on 82599VF
	drm/panel: simple: Assign data from panel_dpi_probe() correctly
	ACPI: PM: s2idle: Cancel wakeup before dispatching EC GPE
	gpio: sifive: use the correct register to read output values
	bonding: pair enable_port with slave_arr_updates
	net: dsa: mv88e6xxx: don't use devres for mdiobus
	net: dsa: ar9331: register the mdiobus under devres
	net: dsa: bcm_sf2: don't use devres for mdiobus
	net: dsa: felix: don't use devres for mdiobus
	net: dsa: lantiq_gswip: don't use devres for mdiobus
	ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path
	nfp: flower: fix ida_idx not being released
	net: do not keep the dst cache when uncloning an skb dst and its metadata
	net: fix a memleak when uncloning an skb dst and its metadata
	veth: fix races around rq->rx_notify_masked
	net: mdio: aspeed: Add missing MODULE_DEVICE_TABLE
	tipc: rate limit warning for received illegal binding update
	net: amd-xgbe: disable interrupts during pci removal
	dpaa2-eth: unregister the netdev before disconnecting from the PHY
	ice: fix an error code in ice_cfg_phy_fec()
	ice: fix IPIP and SIT TSO offload
	net: mscc: ocelot: fix mutex lock error during ethtool stats read
	net: dsa: mv88e6xxx: fix use-after-free in mv88e6xxx_mdios_unregister
	vt_ioctl: fix array_index_nospec in vt_setactivate
	vt_ioctl: add array_index_nospec to VT_ACTIVATE
	n_tty: wake up poll(POLLRDNORM) on receiving data
	eeprom: ee1004: limit i2c reads to I2C_SMBUS_BLOCK_MAX
	usb: dwc2: drd: fix soft connect when gadget is unconfigured
	Revert "usb: dwc2: drd: fix soft connect when gadget is unconfigured"
	net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup
	usb: ulpi: Move of_node_put to ulpi_dev_release
	usb: ulpi: Call of_node_put correctly
	usb: dwc3: gadget: Prevent core from processing stale TRBs
	usb: gadget: udc: renesas_usb3: Fix host to USB_ROLE_NONE transition
	USB: gadget: validate interface OS descriptor requests
	usb: gadget: rndis: check size of RNDIS_MSG_SET command
	usb: gadget: f_uac2: Define specific wTerminalType
	usb: raw-gadget: fix handling of dual-direction-capable endpoints
	USB: serial: ftdi_sio: add support for Brainboxes US-159/235/320
	USB: serial: option: add ZTE MF286D modem
	USB: serial: ch341: add support for GW Instek USB2.0-Serial devices
	USB: serial: cp210x: add NCR Retail IO box id
	USB: serial: cp210x: add CPI Bulk Coin Recycler id
	speakup-dectlk: Restore pitch setting
	phy: ti: Fix missing sentinel for clk_div_table
	hwmon: (dell-smm) Speed up setting of fan speed
	Makefile.extrawarn: Move -Wunaligned-access to W=1
	can: isotp: fix error path in isotp_sendmsg() to unlock wait queue
	scsi: lpfc: Remove NVMe support if kernel has NVME_FC disabled
	scsi: lpfc: Reduce log messages seen after firmware download
	arm64: dts: imx8mq: fix lcdif port node
	perf: Fix list corruption in perf_cgroup_switch()
	iommu: Fix potential use-after-free during probe
	Linux 5.10.101

Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
Change-Id: Ic9c80389b155cf05bc1c6a64d0ca92837c83fbb1
2022-02-16 15:16:06 +01:00
TATSUKAWA KOSUKE (立川 江介)
1b99fe34e2 n_tty: wake up poll(POLLRDNORM) on receiving data
commit c816b2e65b upstream.

The poll man page says POLLRDNORM is equivalent to POLLIN when used as
an event.
$ man poll
<snip>
              POLLRDNORM
                     Equivalent to POLLIN.

However, in n_tty driver, POLLRDNORM does not return until timeout even
if there is terminal input, whereas POLLIN returns.

The following test program works until kernel-3.17, but the test stops
in poll() after commit 57087d5154 ("tty: Fix spurious poll() wakeups").

[Steps to run test program]
  $ cc -o test-pollrdnorm test-pollrdnorm.c
  $ ./test-pollrdnorm
  foo          <-- Type in something from the terminal followed by [RET].
                   The string should be echoed back.

  ------------------------< test-pollrdnorm.c >------------------------
  #include <stdio.h>
  #include <errno.h>
  #include <poll.h>
  #include <unistd.h>

  void main(void)
  {
	int		n;
	unsigned char	buf[8];
	struct pollfd	fds[1] = {{ 0, POLLRDNORM, 0 }};

	n = poll(fds, 1, -1);
	if (n < 0)
		perror("poll");
	n = read(0, buf, 8);
	if (n < 0)
		perror("read");
	if (n > 0)
		write(1, buf, n);
  }
  ------------------------------------------------------------------------

The attached patch fixes this problem.  Many calls to
wake_up_interruptible_poll() in the kernel source code already specify
"POLLIN | POLLRDNORM".

Fixes: 57087d5154 ("tty: Fix spurious poll() wakeups")
Cc: stable@vger.kernel.org
Signed-off-by: Kosuke Tatsukawa <tatsu-ab1@nec.com>
Link: https://lore.kernel.org/r/TYCPR01MB81901C0F932203D30E452B3EA5209@TYCPR01MB8190.jpnprd01.prod.outlook.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2022-02-16 12:54:27 +01:00
Jakob Koschel
f1b2573715 vt_ioctl: add array_index_nospec to VT_ACTIVATE
commit 28cb138f55 upstream.

in vt_setactivate an almost identical code path has been patched
with array_index_nospec. In the VT_ACTIVATE path the user input
is from a system call argument instead of a usercopy.
For consistency both code paths should have the same mitigations
applied.

Kasper Acknowledgements: Jakob Koschel, Brian Johannesmeyer, Kaveh
Razavi, Herbert Bos, Cristiano Giuffrida from the VUSec group at VU
Amsterdam.

Co-developed-by: Brian Johannesmeyer <bjohannesmeyer@gmail.com>
Signed-off-by: Brian Johannesmeyer <bjohannesmeyer@gmail.com>
Signed-off-by: Jakob Koschel <jakobkoschel@gmail.com>
Link: https://lore.kernel.org/r/20220127144406.3589293-2-jakobkoschel@gmail.com
Cc: stable <stable@vger.kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2022-02-16 12:54:27 +01:00
Jakob Koschel
778302ca09 vt_ioctl: fix array_index_nospec in vt_setactivate
commit 61cc70d9e8 upstream.

array_index_nospec ensures that an out-of-bounds value is set to zero
on the transient path. Decreasing the value by one afterwards causes
a transient integer underflow. vsa.console should be decreased first
and then sanitized with array_index_nospec.

Kasper Acknowledgements: Jakob Koschel, Brian Johannesmeyer, Kaveh
Razavi, Herbert Bos, Cristiano Giuffrida from the VUSec group at VU
Amsterdam.

Co-developed-by: Brian Johannesmeyer <bjohannesmeyer@gmail.com>
Signed-off-by: Brian Johannesmeyer <bjohannesmeyer@gmail.com>
Signed-off-by: Jakob Koschel <jakobkoschel@gmail.com>
Link: https://lore.kernel.org/r/20220127144406.3589293-1-jakobkoschel@gmail.com
Cc: stable <stable@vger.kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2022-02-16 12:54:27 +01:00
Greg Kroah-Hartman
ca562bf79c Merge branch 'android12-5.10' into android12-5.10-lts
Sync up with android12-5.10 for the following commits:

2a2327c4e8 FROMLIST: power_supply: Use of-thermal cdev registration API
b90fe5ef8f FROMLIST: power_supply: Register cooling device outside of probe
fc64efcd06 Revert "UPSTREAM: tracefs: Have tracefs directories not set OTH permission bits by default"
1eb3049da0 FROMGIT: usb: dwc3: gadget: Prevent core from processing stale TRBs
ee1e2de73c UPSTREAM: cgroup-v1: Require capabilities to set release_agent
7e6f112beb FROMGIT: f2fs: move f2fs to use reader-unfair rwsems
23686f5ee8 UPSTREAM: f2fs: do not bother checkpoint by f2fs_get_node_info
fa055ddfd5 BACKPORT: f2fs: avoid down_write on nat_tree_lock during checkpoint
c8701aa0a7 ANDROID: GKI: enable RCU_BOOST
c34fa06f4b FROMLIST: rcu: Don't deboost before reporting expedited quiescent state
3a49d3b677 FROMGIT: usb: f_fs: Fix use-after-free for epfile
250abe08bb UPSTREAM: usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear.
d449d91bc9 ANDROID: update new gki symbol
b2fcb7b63b ANDROID: abi: qcom: Add dma_{alloc,free}_noncoherent
5d79e49205 UPSTREAM: binder: fix async_free_space accounting for empty parcels
6aa9e78d6e FROMGIT: rcu: Allow expedited RCU grace periods on incoming CPUs
2f61ec09b0 ANDROID: abi_gki_aarch64_qcom: Add iommu_setup_dma_ops restricted vh
6a9ff8fa26 ANDROID: iommu: Add restricted vendor hook
2aba795b31 FROMLIST: arm64: cpufeature: List early Cortex-A510 parts as having broken dbm
2861bbc5b5 FROMLIST: arm64: Add Cortex-A510 CPU part definition
b0d13db791 FROMGIT: printk: ringbuffer: Improve prb_next_seq() performance
4b1862e4fc ANDROID: incremental-fs: fix GPF in pending_reads_dispatch_ioctl
445019bbca UPSTREAM: bpf: Fix integer overflow in argument calculation for bpf_map_area_alloc
032a676295 UPSTREAM: tee: handle lookup of shm with reference count 0
d461f54be3 ANDROID: Incremental-fs: Doc: correct a sysfs path in incfs.rst
1bfc9c16ae ANDROID: selftests: fix incfs_test
fd4c6594f5 ANDROID: incremental-fs: fix mount_fs issue
a512242e66 BACKPORT: arm64: errata: Add workaround for TSB flush failures
e48051244a UPSTREAM: arm64: Add Neoverse-N2, Cortex-A710 CPU part definition
dd3256d439 UPSTREAM: coresight: trbe: Defer the probe on offline CPUs
71aebf8793 UPSTREAM: coresight: etm4x: Use Trace Filtering controls dynamically
2bb8b3c907 BACKPORT: coresight: etm4x: Save restore TRFCR_EL1
79b64fa780 UPSTREAM: coresight: tmc-etr: Speed up for bounce buffer in flat mode
aee6af7046 UPSTREAM: coresight: tmc-etr: Add barrier after updating AUX ring buffer
a0009ade38 Revert half of "ANDROID: cpu/hotplug: create vendor hook for cpu_up/cpu_down"
a863cef344 Revert half of "ANDROID: arm64: add vendor hooks for bti and pauth fault"
9f58bcd614 Revert half of "ANDROID: vendor_hooks: Add param for android_vh_cpu_up/down"
4b3396046c Revert "ANDROID: vendor_hooks: Add a hook for task tagging"
d8fe0b1fc2 Revert "ANDROID: GKI: net: add vendor hooks for 'struct nf_conn' lifecycle"
92ab2aeca5 Revert "ANDROID: GKI: net: add vendor hooks for 'struct sock' lifecycle"
b3e6d6eec6 Revert "ANDROID: vendor_hooks: add hook and OEM data for slab shrink"
e09000ee19 Revert half of "ANDROID: vendor_hooks: Add hooks for memory when debug"
3f305a9101 Revert half of "ANDROID: gic-v3: Add vendor hook to GIC v3"
3b4ca92614 Merge tag 'android12-5.10.81_r00' into android12-5.10
bdc732d112 UPSTREAM: tracefs: Set all files to the same group ownership as the mount option
8455746a45 UPSTREAM: tracefs: Have new files inherit the ownership of their parent
9c63be2ada UPSTREAM: tracefs: Have tracefs directories not set OTH permission bits by default
64095600fd Revert "ANDROID: vendor_hooks: Add hooks to recognize special worker thread."
7887091009 Revert "ANDROID: sysrq: add vendor hook for sysrq crash information"
63e7148b27 Revert "ANDROID: user: Add vendor hook to user for GKI purpose"
18975040b9 Revert portions of "ANDROID: sched: Add vendor hooks for sched."
96c08d9210 Revert portions of "ANDROID: vendor_hooks: Add hooks for scheduler"
a32e89883a UPSTREAM: vfs: fs_context: fix up param length parsing in legacy_parse_param

New functions/variables are now being tracked as well, that came from
the android12-5.10 branch:

Leaf changes summary: 5 artifacts changed
Changed leaf types summary: 0 leaf type changed
Removed/Changed/Added functions summary: 0 Removed, 0 Changed, 4 Added functions
Removed/Changed/Added variables summary: 0 Removed, 0 Changed, 1 Added variable

4 Added functions:

  [A] 'function int __traceiter_android_rvh_iommu_setup_dma_ops(void*, device*, u64, u64)'
  [A] 'function void* dma_alloc_noncoherent(device*, size_t, dma_addr_t*, dma_data_direction, gfp_t)'
  [A] 'function void dma_free_noncoherent(device*, size_t, void*, dma_addr_t, dma_data_direction)'
  [A] 'function void static_key_enable_cpuslocked(static_key*)'

1 Added variable:

  [A] 'tracepoint __tracepoint_android_rvh_iommu_setup_dma_ops'

Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
Change-Id: I7a5a82681cc94f6b3dcd17e159da8976be0bcb78
2022-02-09 18:16:30 +01:00
Greg Kroah-Hartman
0b4470b56e This is the 5.10.96 stable release
-----BEGIN PGP SIGNATURE-----
 
 iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmH5XyEACgkQONu9yGCS
 aT7z0xAAmnpQ4KYDjmIJW/QjwHMk26wAZGs+w5UbtaFokqqpMuloeNj1HJdpt9gq
 JG6A7Yz2tqXvd+4BzS+XKimqo8CXXbVx5zLhk5lkJE7NTAJN0hP4uvzuBjNFyE+V
 p35aCsBNnMJpjimp+B2c0WuUJX++/n0olBpVzAr1/kwwkz/KODyK8D++S8E+y3Fv
 gkDt3CYJ8E2XPCEQfPHd5blWav0cmyR/O3qViWPuakg1zQ2xxKVjuIAVBuwlBJfB
 zRnnsM9qy3b+h/x43aX++5vucZgDF4BZXJ63kIkkAfe2quqGC683NyjTjOfGLHSW
 bDaVO7IK69tDNznE3jjoLoQ66+soUgvAS5kVYL6sQ7DW8ObghYnD6xfw7J1npva3
 //SZgkC8ifgucLn/ERK5R5mQNmiKYeoukUYSLLB0eG2aYvtQkaChL98t7O9Js1fH
 sZOf4a9SpAnyHQKv6PMV6rsIxE0rkuAqeBVuerOjknjFLbkdPDTijk5GeER3+C+j
 0Ihud+n+HrTRrw7wZOOosPrMVoXNy2LPxphFpsrpFt5QFYu3q24QefwL/EWI1Y4W
 gC3VBqIQS/otZ2aCYlIiPZls38UoQxdWS2pgG5aUOKX7iHduzMkTOYZzq4aYOBws
 Oo+2rl7tzWirrYeIkSLvmwW3BsluQGOvul1IwGk9m1nZ1PDdUIw=
 =39jp
 -----END PGP SIGNATURE-----

Merge 5.10.96 into android12-5.10-lts

Changes in 5.10.96
	Bluetooth: refactor malicious adv data check
	media: venus: core: Drop second v4l2 device unregister
	net: sfp: ignore disabled SFP node
	net: stmmac: skip only stmmac_ptp_register when resume from suspend
	s390/module: fix loading modules with a lot of relocations
	s390/hypfs: include z/VM guests with access control group set
	bpf: Guard against accessing NULL pt_regs in bpf_get_task_stack()
	scsi: zfcp: Fix failed recovery on gone remote port with non-NPIV FCP devices
	udf: Restore i_lenAlloc when inode expansion fails
	udf: Fix NULL ptr deref when converting from inline format
	efi: runtime: avoid EFIv2 runtime services on Apple x86 machines
	PM: wakeup: simplify the output logic of pm_show_wakelocks()
	tracing/histogram: Fix a potential memory leak for kstrdup()
	tracing: Don't inc err_log entry count if entry allocation fails
	ceph: properly put ceph_string reference after async create attempt
	ceph: set pool_ns in new inode layout for async creates
	fsnotify: fix fsnotify hooks in pseudo filesystems
	Revert "KVM: SVM: avoid infinite loop on NPF from bad address"
	perf/x86/intel/uncore: Fix CAS_COUNT_WRITE issue for ICX
	drm/etnaviv: relax submit size limits
	KVM: x86: Update vCPU's runtime CPUID on write to MSR_IA32_XSS
	arm64: errata: Fix exec handling in erratum 1418040 workaround
	netfilter: nft_payload: do not update layer 4 checksum when mangling fragments
	serial: 8250: of: Fix mapped region size when using reg-offset property
	serial: stm32: fix software flow control transfer
	tty: n_gsm: fix SW flow control encoding/handling
	tty: Add support for Brainboxes UC cards.
	usb-storage: Add unusual-devs entry for VL817 USB-SATA bridge
	usb: xhci-plat: fix crash when suspend if remote wake enable
	usb: common: ulpi: Fix crash in ulpi_match()
	usb: gadget: f_sourcesink: Fix isoc transfer for USB_SPEED_SUPER_PLUS
	USB: core: Fix hang in usb_kill_urb by adding memory barriers
	usb: typec: tcpm: Do not disconnect while receiving VBUS off
	ucsi_ccg: Check DEV_INT bit only when starting CCG4
	jbd2: export jbd2_journal_[grab|put]_journal_head
	ocfs2: fix a deadlock when commit trans
	sched/membarrier: Fix membarrier-rseq fence command missing from query bitmask
	x86/MCE/AMD: Allow thresholding interface updates after init
	powerpc/32s: Allocate one 256k IBAT instead of two consecutives 128k IBATs
	powerpc/32s: Fix kasan_init_region() for KASAN
	powerpc/32: Fix boot failure with GCC latent entropy plugin
	i40e: Increase delay to 1 s after global EMP reset
	i40e: Fix issue when maximum queues is exceeded
	i40e: Fix queues reservation for XDP
	i40e: Fix for failed to init adminq while VF reset
	i40e: fix unsigned stat widths
	usb: roles: fix include/linux/usb/role.h compile issue
	rpmsg: char: Fix race between the release of rpmsg_ctrldev and cdev
	rpmsg: char: Fix race between the release of rpmsg_eptdev and cdev
	scsi: bnx2fc: Flush destroy_work queue before calling bnx2fc_interface_put()
	ipv6_tunnel: Rate limit warning messages
	net: fix information leakage in /proc/net/ptype
	hwmon: (lm90) Mark alert as broken for MAX6646/6647/6649
	hwmon: (lm90) Mark alert as broken for MAX6680
	ping: fix the sk_bound_dev_if match in ping_lookup
	ipv4: avoid using shared IP generator for connected sockets
	hwmon: (lm90) Reduce maximum conversion rate for G781
	NFSv4: Handle case where the lookup of a directory fails
	NFSv4: nfs_atomic_open() can race when looking up a non-regular file
	net-procfs: show net devices bound packet types
	drm/msm: Fix wrong size calculation
	drm/msm/dsi: Fix missing put_device() call in dsi_get_phy
	drm/msm/dsi: invalid parameter check in msm_dsi_phy_enable
	ipv6: annotate accesses to fn->fn_sernum
	NFS: Ensure the server has an up to date ctime before hardlinking
	NFS: Ensure the server has an up to date ctime before renaming
	powerpc64/bpf: Limit 'ldbrx' to processors compliant with ISA v2.06
	netfilter: conntrack: don't increment invalid counter on NF_REPEAT
	kernel: delete repeated words in comments
	perf: Fix perf_event_read_local() time
	sched/pelt: Relax the sync of util_sum with util_avg
	net: phy: broadcom: hook up soft_reset for BCM54616S
	phylib: fix potential use-after-free
	octeontx2-pf: Forward error codes to VF
	rxrpc: Adjust retransmission backoff
	efi/libstub: arm64: Fix image check alignment at entry
	hwmon: (lm90) Mark alert as broken for MAX6654
	powerpc/perf: Fix power_pmu_disable to call clear_pmi_irq_pending only if PMI is pending
	net: ipv4: Move ip_options_fragment() out of loop
	net: ipv4: Fix the warning for dereference
	ipv4: fix ip option filtering for locally generated fragments
	ibmvnic: init ->running_cap_crqs early
	ibmvnic: don't spin in tasklet
	video: hyperv_fb: Fix validation of screen resolution
	drm/msm/hdmi: Fix missing put_device() call in msm_hdmi_get_phy
	drm/msm/dpu: invalid parameter check in dpu_setup_dspp_pcc
	yam: fix a memory leak in yam_siocdevprivate()
	net: cpsw: Properly initialise struct page_pool_params
	net: hns3: handle empty unknown interrupt for VF
	Revert "ipv6: Honor all IPv6 PIO Valid Lifetime values"
	net: bridge: vlan: fix single net device option dumping
	ipv4: raw: lock the socket in raw_bind()
	ipv4: tcp: send zero IPID in SYNACK messages
	ipv4: remove sparse error in ip_neigh_gw4()
	net: bridge: vlan: fix memory leak in __allowed_ingress
	dt-bindings: can: tcan4x5x: fix mram-cfg RX FIFO config
	usr/include/Makefile: add linux/nfc.h to the compile-test coverage
	fsnotify: invalidate dcache before IN_DELETE event
	block: Fix wrong offset in bio_truncate()
	mtd: rawnand: mpc5121: Remove unused variable in ads5121_select_chip()
	Linux 5.10.96

Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
Change-Id: Ie34be06fa082557e93eda246f1a9ebf9f155a138
2022-02-07 11:17:58 +01:00
Cameron Williams
e0fcae7bd7 tty: Add support for Brainboxes UC cards.
commit 152d1afa83 upstream.

This commit adds support for the some of the Brainboxes PCI range of
cards, including the UC-101, UC-235/246, UC-257, UC-268, UC-275/279,
UC-302, UC-310, UC-313, UC-320/324, UC-346, UC-357, UC-368
and UC-420/431.

Signed-off-by: Cameron Williams <cang1@live.co.uk>
Cc: stable <stable@vger.kernel.org>
Link: https://lore.kernel.org/r/AM5PR0202MB2564688493F7DD9B9C610827C45E9@AM5PR0202MB2564.eurprd02.prod.outlook.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2022-02-01 17:25:40 +01:00
daniel.starke@siemens.com
7079283d32 tty: n_gsm: fix SW flow control encoding/handling
commit 8838b2af23 upstream.

n_gsm is based on the 3GPP 07.010 and its newer version is the 3GPP 27.010.
See https://portal.3gpp.org/desktopmodules/Specifications/SpecificationDetails.aspx?specificationId=1516
The changes from 07.010 to 27.010 are non-functional. Therefore, I refer to
the newer 27.010 here. Chapter 5.2.7.3 states that DC1 (XON) and DC3 (XOFF)
are the control characters defined in ISO/IEC 646. These shall be quoted if
seen in the data stream to avoid interpretation as flow control characters.

ISO/IEC 646 refers to the set of ISO standards described as the ISO
7-bit coded character set for information interchange. Its final version
is also known as ITU T.50.
See https://www.itu.int/rec/T-REC-T.50-199209-I/en

To abide the standard it is needed to quote DC1 and DC3 correctly if these
are seen as data bytes and not as control characters. The current
implementation already tries to enforce this but fails to catch all
defined cases. 3GPP 27.010 chapter 5.2.7.3 clearly states that the most
significant bit shall be ignored for DC1 and DC3 handling. The current
implementation handles only the case with the most significant bit set 0.
Cases in which DC1 and DC3 have the most significant bit set 1 are left
unhandled.

This patch fixes this by masking the data bytes with ISO_IEC_646_MASK (only
the 7 least significant bits set 1) before comparing them with XON
(a.k.a. DC1) and XOFF (a.k.a. DC3) when testing which byte values need
quotation via byte stuffing.

Fixes: e1eaea46bb ("tty: n_gsm line discipline")
Cc: stable@vger.kernel.org
Signed-off-by: Daniel Starke <daniel.starke@siemens.com>
Link: https://lore.kernel.org/r/20220120101857.2509-1-daniel.starke@siemens.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2022-02-01 17:25:40 +01:00
Valentin Caron
2683b0d5d7 serial: stm32: fix software flow control transfer
commit 037b91ec77 upstream.

x_char is ignored by stm32_usart_start_tx() when xmit buffer is empty.

Fix start_tx condition to allow x_char to be sent.

Fixes: 48a6092fb4 ("serial: stm32-usart: Add STM32 USART Driver")
Cc: stable <stable@vger.kernel.org>
Signed-off-by: Erwan Le Ray <erwan.leray@foss.st.com>
Signed-off-by: Valentin Caron <valentin.caron@foss.st.com>
Link: https://lore.kernel.org/r/20220111164441.6178-3-valentin.caron@foss.st.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2022-02-01 17:25:40 +01:00
Robert Hancock
4628b26df5 serial: 8250: of: Fix mapped region size when using reg-offset property
commit d06b1cf282 upstream.

8250_of supports a reg-offset property which is intended to handle
cases where the device registers start at an offset inside the region
of memory allocated to the device. The Xilinx 16550 UART, for which this
support was initially added, requires this. However, the code did not
adjust the overall size of the mapped region accordingly, causing the
driver to request an area of memory past the end of the device's
allocation. For example, if the UART was allocated an address of
0xb0130000, size of 0x10000 and reg-offset of 0x1000 in the device
tree, the region of memory reserved was b0131000-b0140fff, which caused
the driver for the region starting at b0140000 to fail to probe.

Fix this by subtracting reg-offset from the mapped region size.

Fixes: b912b5e2cf ([POWERPC] Xilinx: of_serial support for Xilinx uart 16550.)
Cc: stable <stable@vger.kernel.org>
Signed-off-by: Robert Hancock <robert.hancock@calian.com>
Link: https://lore.kernel.org/r/20220112194214.881844-1-robert.hancock@calian.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2022-02-01 17:25:40 +01:00
Greg Kroah-Hartman
4ec3c2eea5 This is the 5.10.94 stable release
-----BEGIN PGP SIGNATURE-----
 
 iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmHya+IACgkQONu9yGCS
 aT7k/RAAqdd8bNhAiO6iDpvZbQtxq9jepx4KCkcd+gsYvSvePEnBQHaTaavfCK/7
 +taWsc2i6Hwc1Z4oVfUiU02cCsqMJJXqb0nfJaavE5cZspbTc7QeS0zv9BkzSKUZ
 +DxXWyjzeJquI7EbdU0n7inb0iwvBxmTGNIg2j1pPi81Q7XnpjmDsSvuoftRQ0AN
 DGYefowWL1VcfsZRfhEudnpxWC/DjOdB8zD34SgXxKat6/O8YG4T5pM2BOUlKtOW
 QcXFhpG6gU0XqmI3QQDvAESujOQxzC1u3AwIOHYJ/tlFYsUJXjiZIEVnMqPYGpNl
 fXS8xcNSeo6fipXWkzsc489Tteq9H+bfm8sBG0jhExRnyGckkihJDhRFZ9yBrzo/
 1PtUdUIJ4d5fUmdZp7gxucncFyIYFsyJm/5nsYmObP794oStPGKsH8llhp/PcEFF
 ua1+Gy2WW2f6BOaDVFmt+jWZRMa/3oZnFhe8/FPRsAjGOj+q/+V6bsksGDYupsrM
 x8/QQI6OVlnOZsrdpX7zkW46qLov0J0bO9cANTm7kcRaesrkikFKqiIF2uIW2OU6
 W0tZZf0Jy/gSLEljkZ3SuMHCmldWKm/KxMYSjnQ3Y34QvOLYPNAZGF78rbV3s8/0
 otGR3ra5TKCz1kxuDaE1FqZXxpPQidXbF4QUoaRIaPwA1k5NvLY=
 =ktJL
 -----END PGP SIGNATURE-----

Merge 5.10.94 into android12-5.10-lts

Changes in 5.10.94
	KVM: VMX: switch blocked_vcpu_on_cpu_lock to raw spinlock
	HID: uhid: Fix worker destroying device without any protection
	HID: wacom: Reset expected and received contact counts at the same time
	HID: wacom: Ignore the confidence flag when a touch is removed
	HID: wacom: Avoid using stale array indicies to read contact count
	f2fs: fix to do sanity check in is_alive()
	nfc: llcp: fix NULL error pointer dereference on sendmsg() after failed bind()
	mtd: rawnand: gpmi: Add ERR007117 protection for nfc_apply_timings
	mtd: rawnand: gpmi: Remove explicit default gpmi clock setting for i.MX6
	mtd: Fixed breaking list in __mtd_del_partition.
	mtd: rawnand: davinci: Don't calculate ECC when reading page
	mtd: rawnand: davinci: Avoid duplicated page read
	mtd: rawnand: davinci: Rewrite function description
	x86/gpu: Reserve stolen memory for first integrated Intel GPU
	tools/nolibc: x86-64: Fix startup code bug
	tools/nolibc: i386: fix initial stack alignment
	tools/nolibc: fix incorrect truncation of exit code
	rtc: cmos: take rtc_lock while reading from CMOS
	media: v4l2-ioctl.c: readbuffers depends on V4L2_CAP_READWRITE
	media: flexcop-usb: fix control-message timeouts
	media: mceusb: fix control-message timeouts
	media: em28xx: fix control-message timeouts
	media: cpia2: fix control-message timeouts
	media: s2255: fix control-message timeouts
	media: dib0700: fix undefined behavior in tuner shutdown
	media: redrat3: fix control-message timeouts
	media: pvrusb2: fix control-message timeouts
	media: stk1160: fix control-message timeouts
	media: cec-pin: fix interrupt en/disable handling
	can: softing_cs: softingcs_probe(): fix memleak on registration failure
	iio: adc: ti-adc081c: Partial revert of removal of ACPI IDs
	lkdtm: Fix content of section containing lkdtm_rodata_do_nothing()
	iommu/io-pgtable-arm-v7s: Add error handle for page table allocation failure
	gpu: host1x: Add back arm_iommu_detach_device()
	dma_fence_array: Fix PENDING_ERROR leak in dma_fence_array_signaled()
	PCI: Add function 1 DMA alias quirk for Marvell 88SE9125 SATA controller
	mm_zone: add function to check if managed dma zone exists
	dma/pool: create dma atomic pool only if dma zone has managed pages
	mm/page_alloc.c: do not warn allocation failure on zone DMA if no managed pages
	shmem: fix a race between shmem_unused_huge_shrink and shmem_evict_inode
	drm/ttm: Put BO in its memory manager's lru list
	Bluetooth: L2CAP: Fix not initializing sk_peer_pid
	drm/bridge: display-connector: fix an uninitialized pointer in probe()
	drm: fix null-ptr-deref in drm_dev_init_release()
	drm/panel: kingdisplay-kd097d04: Delete panel on attach() failure
	drm/panel: innolux-p079zca: Delete panel on attach() failure
	drm/rockchip: dsi: Fix unbalanced clock on probe error
	drm/rockchip: dsi: Hold pm-runtime across bind/unbind
	drm/rockchip: dsi: Disable PLL clock on bind error
	drm/rockchip: dsi: Reconfigure hardware on resume()
	Bluetooth: cmtp: fix possible panic when cmtp_init_sockets() fails
	clk: bcm-2835: Pick the closest clock rate
	clk: bcm-2835: Remove rounding up the dividers
	drm/vc4: hdmi: Set a default HSM rate
	wcn36xx: ensure pairing of init_scan/finish_scan and start_scan/end_scan
	wcn36xx: Indicate beacon not connection loss on MISSED_BEACON_IND
	wcn36xx: Fix DMA channel enable/disable cycle
	wcn36xx: Release DMA channel descriptor allocations
	wcn36xx: Put DXE block into reset before freeing memory
	wcn36xx: populate band before determining rate on RX
	wcn36xx: fix RX BD rate mapping for 5GHz legacy rates
	ath11k: Send PPDU_STATS_CFG with proper pdev mask to firmware
	mtd: hyperbus: rpc-if: Check return value of rpcif_sw_init()
	media: videobuf2: Fix the size printk format
	media: atomisp: add missing media_device_cleanup() in atomisp_unregister_entities()
	media: atomisp: fix punit_ddr_dvfs_enable() argument for mrfld_power up case
	media: atomisp: fix inverted logic in buffers_needed()
	media: atomisp: do not use err var when checking port validity for ISP2400
	media: atomisp: fix inverted error check for ia_css_mipi_is_source_port_valid()
	media: atomisp: fix ifdefs in sh_css.c
	media: staging: media: atomisp: pci: Balance braces around conditional statements in file atomisp_cmd.c
	media: atomisp: add NULL check for asd obtained from atomisp_video_pipe
	media: atomisp: fix enum formats logic
	media: atomisp: fix uninitialized bug in gmin_get_pmic_id_and_addr()
	media: aspeed: fix mode-detect always time out at 2nd run
	media: em28xx: fix memory leak in em28xx_init_dev
	media: aspeed: Update signal status immediately to ensure sane hw state
	arm64: dts: amlogic: meson-g12: Fix GPU operating point table node name
	arm64: dts: amlogic: Fix SPI NOR flash node name for ODROID N2/N2+
	arm64: dts: meson-gxbb-wetek: fix HDMI in early boot
	arm64: dts: meson-gxbb-wetek: fix missing GPIO binding
	fs: dlm: use sk->sk_socket instead of con->sock
	fs: dlm: don't call kernel_getpeername() in error_report()
	memory: renesas-rpc-if: Return error in case devm_ioremap_resource() fails
	Bluetooth: stop proccessing malicious adv data
	ath11k: Fix ETSI regd with weather radar overlap
	ath11k: clear the keys properly via DISABLE_KEY
	ath11k: reset RSN/WPA present state for open BSS
	tee: fix put order in teedev_close_context()
	fs: dlm: fix build with CONFIG_IPV6 disabled
	drm/vboxvideo: fix a NULL vs IS_ERR() check
	arm64: dts: renesas: cat875: Add rx/tx delays
	media: dmxdev: fix UAF when dvb_register_device() fails
	crypto: qce - fix uaf on qce_ahash_register_one
	crypto: qce - fix uaf on qce_skcipher_register_one
	mtd: hyperbus: rpc-if: fix bug in rpcif_hb_remove
	ARM: dts: stm32: fix dtbs_check warning on ili9341 dts binding on stm32f429 disco
	crypto: qat - fix spelling mistake: "messge" -> "message"
	crypto: qat - remove unnecessary collision prevention step in PFVF
	crypto: qat - make pfvf send message direction agnostic
	crypto: qat - fix undetected PFVF timeout in ACK loop
	ath11k: Use host CE parameters for CE interrupts configuration
	arm64: dts: ti: k3-j721e: correct cache-sets info
	tty: serial: atmel: Check return code of dmaengine_submit()
	tty: serial: atmel: Call dma_async_issue_pending()
	mfd: atmel-flexcom: Remove #ifdef CONFIG_PM_SLEEP
	mfd: atmel-flexcom: Use .resume_noirq
	media: rcar-csi2: Correct the selection of hsfreqrange
	media: imx-pxp: Initialize the spinlock prior to using it
	media: si470x-i2c: fix possible memory leak in si470x_i2c_probe()
	media: mtk-vcodec: call v4l2_m2m_ctx_release first when file is released
	media: coda: fix CODA960 JPEG encoder buffer overflow
	media: venus: pm_helpers: Control core power domain manually
	media: venus: core, venc, vdec: Fix probe dependency error
	media: venus: core: Fix a potential NULL pointer dereference in an error handling path
	media: venus: core: Fix a resource leak in the error handling path of 'venus_probe()'
	thermal/drivers/imx: Implement runtime PM support
	netfilter: bridge: add support for pppoe filtering
	arm64: dts: qcom: msm8916: fix MMC controller aliases
	cgroup: Trace event cgroup id fields should be u64
	ACPI: EC: Rework flushing of EC work while suspended to idle
	thermal/drivers/imx8mm: Enable ADC when enabling monitor
	drm/amdgpu: Fix a NULL pointer dereference in amdgpu_connector_lcd_native_mode()
	drm/radeon/radeon_kms: Fix a NULL pointer dereference in radeon_driver_open_kms()
	arm64: dts: ti: k3-j7200: Fix the L2 cache sets
	arm64: dts: ti: k3-j721e: Fix the L2 cache sets
	arm64: dts: ti: k3-j7200: Correct the d-cache-sets info
	tty: serial: uartlite: allow 64 bit address
	serial: amba-pl011: do not request memory region twice
	floppy: Fix hang in watchdog when disk is ejected
	staging: rtl8192e: return error code from rtllib_softmac_init()
	staging: rtl8192e: rtllib_module: fix error handle case in alloc_rtllib()
	Bluetooth: btmtksdio: fix resume failure
	sched/fair: Fix detection of per-CPU kthreads waking a task
	sched/fair: Fix per-CPU kthread and wakee stacking for asym CPU capacity
	bpf: Adjust BTF log size limit.
	bpf: Disallow BPF_LOG_KERNEL log level for bpf(BPF_BTF_LOAD)
	bpf: Remove config check to enable bpf support for branch records
	arm64: lib: Annotate {clear, copy}_page() as position-independent
	arm64: clear_page() shouldn't use DC ZVA when DCZID_EL0.DZP == 1
	media: dib8000: Fix a memleak in dib8000_init()
	media: saa7146: mxb: Fix a NULL pointer dereference in mxb_attach()
	media: si2157: Fix "warm" tuner state detection
	wireless: iwlwifi: Fix a double free in iwl_txq_dyn_alloc_dma
	sched/rt: Try to restart rt period timer when rt runtime exceeded
	drm/msm/dp: displayPort driver need algorithm rational
	rcu/exp: Mark current CPU as exp-QS in IPI loop second pass
	mwifiex: Fix possible ABBA deadlock
	xfrm: fix a small bug in xfrm_sa_len()
	x86/uaccess: Move variable into switch case statement
	selftests: clone3: clone3: add case CLONE3_ARGS_NO_TEST
	selftests: harness: avoid false negatives if test has no ASSERTs
	crypto: stm32 - Fix last sparse warning in stm32_cryp_check_ctr_counter
	crypto: stm32/cryp - fix CTR counter carry
	crypto: stm32/cryp - fix xts and race condition in crypto_engine requests
	crypto: stm32/cryp - check early input data
	crypto: stm32/cryp - fix double pm exit
	crypto: stm32/cryp - fix lrw chaining mode
	crypto: stm32/cryp - fix bugs and crash in tests
	crypto: stm32 - Revert broken pm_runtime_resume_and_get changes
	ath11k: Fix deleting uninitialized kernel timer during fragment cache flush
	ARM: dts: gemini: NAS4220-B: fis-index-block with 128 KiB sectors
	media: dw2102: Fix use after free
	media: msi001: fix possible null-ptr-deref in msi001_probe()
	media: coda/imx-vdoa: Handle dma_set_coherent_mask error codes
	ath11k: Fix a NULL pointer dereference in ath11k_mac_op_hw_scan()
	arm64: dts: qcom: c630: Fix soundcard setup
	arm64: dts: qcom: ipq6018: Fix gpio-ranges property
	drm/msm/dpu: fix safe status debugfs file
	drm/bridge: ti-sn65dsi86: Set max register for regmap
	drm/tegra: vic: Fix DMA API misuse
	media: hantro: Fix probe func error path
	xfrm: interface with if_id 0 should return error
	xfrm: state and policy should fail if XFRMA_IF_ID 0
	ARM: 9159/1: decompressor: Avoid UNPREDICTABLE NOP encoding
	usb: ftdi-elan: fix memory leak on device disconnect
	arm64: dts: marvell: cn9130: add GPIO and SPI aliases
	arm64: dts: marvell: cn9130: enable CP0 GPIO controllers
	ARM: dts: armada-38x: Add generic compatible to UART nodes
	iwlwifi: mvm: fix 32-bit build in FTM
	iwlwifi: mvm: test roc running status bits before removing the sta
	mmc: meson-mx-sdhc: add IRQ check
	mmc: meson-mx-sdio: add IRQ check
	selinux: fix potential memleak in selinux_add_opt()
	um: fix ndelay/udelay defines
	um: virtio_uml: Fix time-travel external time propagation
	Bluetooth: L2CAP: Fix using wrong mode
	bpftool: Enable line buffering for stdout
	backlight: qcom-wled: Validate enabled string indices in DT
	backlight: qcom-wled: Pass number of elements to read to read_u32_array
	backlight: qcom-wled: Fix off-by-one maximum with default num_strings
	backlight: qcom-wled: Override default length with qcom,enabled-strings
	backlight: qcom-wled: Use cpu_to_le16 macro to perform conversion
	backlight: qcom-wled: Respect enabled-strings in set_brightness
	software node: fix wrong node passed to find nargs_prop
	Bluetooth: hci_qca: Stop IBS timer during BT OFF
	x86/boot/compressed: Move CLANG_FLAGS to beginning of KBUILD_CFLAGS
	hwmon: (mr75203) fix wrong power-up delay value
	x86/mce/inject: Avoid out-of-bounds write when setting flags
	ACPI: scan: Create platform device for BCM4752 and LNV4752 ACPI nodes
	pcmcia: rsrc_nonstatic: Fix a NULL pointer dereference in __nonstatic_find_io_region()
	pcmcia: rsrc_nonstatic: Fix a NULL pointer dereference in nonstatic_find_mem_region()
	power: reset: mt6397: Check for null res pointer
	netfilter: ipt_CLUSTERIP: fix refcount leak in clusterip_tg_check()
	bpf: Don't promote bogus looking registers after null check.
	bpf: Fix SO_RCVBUF/SO_SNDBUF handling in _bpf_setsockopt().
	netfilter: nft_set_pipapo: allocate pcpu scratch maps on clone
	ppp: ensure minimum packet size in ppp_write()
	rocker: fix a sleeping in atomic bug
	staging: greybus: audio: Check null pointer
	fsl/fman: Check for null pointer after calling devm_ioremap
	Bluetooth: hci_bcm: Check for error irq
	Bluetooth: hci_qca: Fix NULL vs IS_ERR_OR_NULL check in qca_serdev_probe
	usb: dwc3: qcom: Fix NULL vs IS_ERR checking in dwc3_qcom_probe
	HID: hid-uclogic-params: Invalid parameter check in uclogic_params_init
	HID: hid-uclogic-params: Invalid parameter check in uclogic_params_get_str_desc
	HID: hid-uclogic-params: Invalid parameter check in uclogic_params_huion_init
	HID: hid-uclogic-params: Invalid parameter check in uclogic_params_frame_init_v1_buttonpad
	debugfs: lockdown: Allow reading debugfs files that are not world readable
	net/mlx5e: Fix page DMA map/unmap attributes
	net/mlx5e: Don't block routes with nexthop objects in SW
	Revert "net/mlx5e: Block offload of outer header csum for UDP tunnels"
	net/mlx5: Set command entry semaphore up once got index free
	lib/mpi: Add the return value check of kcalloc()
	Bluetooth: L2CAP: uninitialized variables in l2cap_sock_setsockopt()
	spi: spi-meson-spifc: Add missing pm_runtime_disable() in meson_spifc_probe
	ax25: uninitialized variable in ax25_setsockopt()
	netrom: fix api breakage in nr_setsockopt()
	regmap: Call regmap_debugfs_exit() prior to _init()
	can: mcp251xfd: add missing newline to printed strings
	tpm: add request_locality before write TPM_INT_ENABLE
	tpm_tis: Fix an error handling path in 'tpm_tis_core_init()'
	can: softing: softing_startstop(): fix set but not used variable warning
	can: xilinx_can: xcan_probe(): check for error irq
	pcmcia: fix setting of kthread task states
	iwlwifi: mvm: Use div_s64 instead of do_div in iwl_mvm_ftm_rtt_smoothing()
	net: mcs7830: handle usb read errors properly
	ext4: avoid trim error on fs with small groups
	ALSA: jack: Add missing rwsem around snd_ctl_remove() calls
	ALSA: PCM: Add missing rwsem around snd_ctl_remove() calls
	ALSA: hda: Add missing rwsem around snd_ctl_remove() calls
	RDMA/bnxt_re: Scan the whole bitmap when checking if "disabling RCFW with pending cmd-bit"
	RDMA/hns: Validate the pkey index
	scsi: pm80xx: Update WARN_ON check in pm8001_mpi_build_cmd()
	clk: imx8mn: Fix imx8mn_clko1_sels
	powerpc/prom_init: Fix improper check of prom_getprop()
	ASoC: uniphier: drop selecting non-existing SND_SOC_UNIPHIER_AIO_DMA
	dt-bindings: thermal: Fix definition of cooling-maps contribution property
	powerpc/64s: Convert some cpu_setup() and cpu_restore() functions to C
	powerpc/perf: MMCR0 control for PMU registers under PMCC=00
	powerpc/perf: move perf irq/nmi handling details into traps.c
	powerpc/irq: Add helper to set regs->softe
	powerpc/perf: Fix PMU callbacks to clear pending PMI before resetting an overflown PMC
	powerpc/32s: Fix shift-out-of-bounds in KASAN init
	clocksource: Reduce clocksource-skew threshold
	clocksource: Avoid accidental unstable marking of clocksources
	ALSA: oss: fix compile error when OSS_DEBUG is enabled
	ALSA: usb-audio: Drop superfluous '0' in Presonus Studio 1810c's ID
	char/mwave: Adjust io port register size
	binder: fix handling of error during copy
	openrisc: Add clone3 ABI wrapper
	iommu/io-pgtable-arm: Fix table descriptor paddr formatting
	scsi: ufs: Fix race conditions related to driver data
	RDMA/qedr: Fix reporting max_{send/recv}_wr attrs
	PCI/MSI: Fix pci_irq_vector()/pci_irq_get_affinity()
	powerpc/powermac: Add additional missing lockdep_register_key()
	RDMA/core: Let ib_find_gid() continue search even after empty entry
	RDMA/cma: Let cma_resolve_ib_dev() continue search even after empty entry
	ASoC: rt5663: Handle device_property_read_u32_array error codes
	of: unittest: fix warning on PowerPC frame size warning
	of: unittest: 64 bit dma address test requires arch support
	clk: stm32: Fix ltdc's clock turn off by clk_disable_unused() after system enter shell
	mips: add SYS_HAS_CPU_MIPS64_R5 config for MIPS Release 5 support
	mips: fix Kconfig reference to PHYS_ADDR_T_64BIT
	dmaengine: pxa/mmp: stop referencing config->slave_id
	iommu/amd: Remove iommu_init_ga()
	iommu/amd: Restore GA log/tail pointer on host resume
	ASoC: Intel: catpt: Test dmaengine_submit() result before moving on
	iommu/iova: Fix race between FQ timeout and teardown
	scsi: block: pm: Always set request queue runtime active in blk_post_runtime_resume()
	phy: uniphier-usb3ss: fix unintended writing zeros to PHY register
	ASoC: mediatek: Check for error clk pointer
	ASoC: samsung: idma: Check of ioremap return value
	misc: lattice-ecp3-config: Fix task hung when firmware load failed
	counter: stm32-lptimer-cnt: remove iio counter abi
	arm64: tegra: Fix Tegra194 HDA {clock,reset}-names ordering
	arm64: tegra: Remove non existent Tegra194 reset
	mips: lantiq: add support for clk_set_parent()
	mips: bcm63xx: add support for clk_set_parent()
	powerpc/xive: Add missing null check after calling kmalloc
	ASoC: fsl_mqs: fix MODULE_ALIAS
	RDMA/cxgb4: Set queue pair state when being queried
	ASoC: fsl_asrc: refine the check of available clock divider
	clk: bm1880: remove kfrees on static allocations
	of: base: Fix phandle argument length mismatch error message
	ARM: dts: omap3-n900: Fix lp5523 for multi color
	Bluetooth: Fix debugfs entry leak in hci_register_dev()
	fs: dlm: filter user dlm messages for kernel locks
	drm/lima: fix warning when CONFIG_DEBUG_SG=y & CONFIG_DMA_API_DEBUG=y
	selftests/bpf: Fix bpf_object leak in skb_ctx selftest
	ar5523: Fix null-ptr-deref with unexpected WDCMSG_TARGET_START reply
	drm/bridge: dw-hdmi: handle ELD when DRM_BRIDGE_ATTACH_NO_CONNECTOR
	drm/nouveau/pmu/gm200-: avoid touching PMU outside of DEVINIT/PREOS/ACR
	media: atomisp: fix try_fmt logic
	media: atomisp: set per-device's default mode
	media: atomisp-ov2680: Fix ov2680_set_fmt() clobbering the exposure
	ARM: shmobile: rcar-gen2: Add missing of_node_put()
	batman-adv: allow netlink usage in unprivileged containers
	media: atomisp: handle errors at sh_css_create_isp_params()
	ath11k: Fix crash caused by uninitialized TX ring
	usb: gadget: f_fs: Use stream_open() for endpoint files
	drm: panel-orientation-quirks: Add quirk for the Lenovo Yoga Book X91F/L
	HID: apple: Do not reset quirks when the Fn key is not found
	media: b2c2: Add missing check in flexcop_pci_isr:
	EDAC/synopsys: Use the quirk for version instead of ddr version
	ARM: imx: rename DEBUG_IMX21_IMX27_UART to DEBUG_IMX27_UART
	drm/amd/display: check top_pipe_to_program pointer
	drm/amdgpu/display: set vblank_disable_immediate for DC
	soc: ti: pruss: fix referenced node in error message
	mlxsw: pci: Add shutdown method in PCI driver
	drm/bridge: megachips: Ensure both bridges are probed before registration
	tty: serial: imx: disable UCR4_OREN in .stop_rx() instead of .shutdown()
	gpiolib: acpi: Do not set the IRQ type if the IRQ is already in use
	HSI: core: Fix return freed object in hsi_new_client
	crypto: jitter - consider 32 LSB for APT
	mwifiex: Fix skb_over_panic in mwifiex_usb_recv()
	rsi: Fix use-after-free in rsi_rx_done_handler()
	rsi: Fix out-of-bounds read in rsi_read_pkt()
	ath11k: Avoid NULL ptr access during mgmt tx cleanup
	media: venus: avoid calling core_clk_setrate() concurrently during concurrent video sessions
	ACPI / x86: Drop PWM2 device on Lenovo Yoga Book from always present table
	ACPI: Change acpi_device_always_present() into acpi_device_override_status()
	ACPI / x86: Allow specifying acpi_device_override_status() quirks by path
	ACPI / x86: Add not-present quirk for the PCI0.SDHB.BRC1 device on the GPD win
	arm64: dts: ti: j7200-main: Fix 'dtbs_check' serdes_ln_ctrl node
	usb: uhci: add aspeed ast2600 uhci support
	floppy: Add max size check for user space request
	x86/mm: Flush global TLB when switching to trampoline page-table
	drm: rcar-du: Fix CRTC timings when CMM is used
	media: uvcvideo: Increase UVC_CTRL_CONTROL_TIMEOUT to 5 seconds.
	media: rcar-vin: Update format alignment constraints
	media: saa7146: hexium_orion: Fix a NULL pointer dereference in hexium_attach()
	media: m920x: don't use stack on USB reads
	thunderbolt: Runtime PM activate both ends of the device link
	iwlwifi: mvm: synchronize with FW after multicast commands
	iwlwifi: mvm: avoid clearing a just saved session protection id
	ath11k: avoid deadlock by change ieee80211_queue_work for regd_update_work
	ath10k: Fix tx hanging
	net-sysfs: update the queue counts in the unregistration path
	net: phy: prefer 1000baseT over 1000baseKX
	gpio: aspeed: Convert aspeed_gpio.lock to raw_spinlock
	selftests/ftrace: make kprobe profile testcase description unique
	ath11k: Avoid false DEADLOCK warning reported by lockdep
	x86/mce: Allow instrumentation during task work queueing
	x86/mce: Mark mce_panic() noinstr
	x86/mce: Mark mce_end() noinstr
	x86/mce: Mark mce_read_aux() noinstr
	net: bonding: debug: avoid printing debug logs when bond is not notifying peers
	bpf: Do not WARN in bpf_warn_invalid_xdp_action()
	HID: quirks: Allow inverting the absolute X/Y values
	media: igorplugusb: receiver overflow should be reported
	media: saa7146: hexium_gemini: Fix a NULL pointer dereference in hexium_attach()
	mmc: core: Fixup storing of OCR for MMC_QUIRK_NONSTD_SDIO
	audit: ensure userspace is penalized the same as the kernel when under pressure
	arm64: dts: ls1028a-qds: move rtc node to the correct i2c bus
	arm64: tegra: Adjust length of CCPLEX cluster MMIO region
	PM: runtime: Add safety net to supplier device release
	cpufreq: Fix initialization of min and max frequency QoS requests
	usb: hub: Add delay for SuperSpeed hub resume to let links transit to U0
	ath9k: Fix out-of-bound memcpy in ath9k_hif_usb_rx_stream
	rtw88: 8822c: update rx settings to prevent potential hw deadlock
	PM: AVS: qcom-cpr: Use div64_ul instead of do_div
	iwlwifi: fix leaks/bad data after failed firmware load
	iwlwifi: remove module loading failure message
	iwlwifi: mvm: Fix calculation of frame length
	iwlwifi: pcie: make sure prph_info is set when treating wakeup IRQ
	um: registers: Rename function names to avoid conflicts and build problems
	ath11k: Fix napi related hang
	Bluetooth: vhci: Set HCI_QUIRK_VALID_LE_STATES
	xfrm: rate limit SA mapping change message to user space
	drm/etnaviv: consider completed fence seqno in hang check
	jffs2: GC deadlock reading a page that is used in jffs2_write_begin()
	ACPICA: actypes.h: Expand the ACPI_ACCESS_ definitions
	ACPICA: Utilities: Avoid deleting the same object twice in a row
	ACPICA: Executer: Fix the REFCLASS_REFOF case in acpi_ex_opcode_1A_0T_1R()
	ACPICA: Fix wrong interpretation of PCC address
	ACPICA: Hardware: Do not flush CPU cache when entering S4 and S5
	drm/amdgpu: fixup bad vram size on gmc v8
	amdgpu/pm: Make sysfs pm attributes as read-only for VFs
	ACPI: battery: Add the ThinkPad "Not Charging" quirk
	btrfs: remove BUG_ON() in find_parent_nodes()
	btrfs: remove BUG_ON(!eie) in find_parent_nodes
	net: mdio: Demote probed message to debug print
	mac80211: allow non-standard VHT MCS-10/11
	dm btree: add a defensive bounds check to insert_at()
	dm space map common: add bounds check to sm_ll_lookup_bitmap()
	mlxsw: pci: Avoid flow control for EMAD packets
	net: phy: marvell: configure RGMII delays for 88E1118
	net: gemini: allow any RGMII interface mode
	regulator: qcom_smd: Align probe function with rpmh-regulator
	serial: pl010: Drop CR register reset on set_termios
	serial: core: Keep mctrl register state and cached copy in sync
	random: do not throw away excess input to crng_fast_load
	parisc: Avoid calling faulthandler_disabled() twice
	x86/kbuild: Enable CONFIG_KALLSYMS_ALL=y in the defconfigs
	powerpc/6xx: add missing of_node_put
	powerpc/powernv: add missing of_node_put
	powerpc/cell: add missing of_node_put
	powerpc/btext: add missing of_node_put
	powerpc/watchdog: Fix missed watchdog reset due to memory ordering race
	i2c: i801: Don't silently correct invalid transfer size
	powerpc/smp: Move setup_profiling_timer() under CONFIG_PROFILING
	i2c: mpc: Correct I2C reset procedure
	clk: meson: gxbb: Fix the SDM_EN bit for MPLL0 on GXBB
	powerpc/powermac: Add missing lockdep_register_key()
	KVM: PPC: Book3S: Suppress warnings when allocating too big memory slots
	KVM: PPC: Book3S: Suppress failed alloc warning in H_COPY_TOFROM_GUEST
	w1: Misuse of get_user()/put_user() reported by sparse
	nvmem: core: set size for sysfs bin file
	dm: fix alloc_dax error handling in alloc_dev
	scsi: lpfc: Trigger SLI4 firmware dump before doing driver cleanup
	ALSA: seq: Set upper limit of processed events
	MIPS: Loongson64: Use three arguments for slti
	powerpc/40x: Map 32Mbytes of memory at startup
	selftests/powerpc/spectre_v2: Return skip code when miss_percent is high
	powerpc: handle kdump appropriately with crash_kexec_post_notifiers option
	powerpc/fadump: Fix inaccurate CPU state info in vmcore generated with panic
	udf: Fix error handling in udf_new_inode()
	MIPS: OCTEON: add put_device() after of_find_device_by_node()
	irqchip/gic-v4: Disable redistributors' view of the VPE table at boot time
	i2c: designware-pci: Fix to change data types of hcnt and lcnt parameters
	MIPS: Octeon: Fix build errors using clang
	scsi: sr: Don't use GFP_DMA
	ASoC: mediatek: mt8173: fix device_node leak
	ASoC: mediatek: mt8183: fix device_node leak
	phy: mediatek: Fix missing check in mtk_mipi_tx_probe
	rpmsg: core: Clean up resources on announce_create failure.
	crypto: omap-aes - Fix broken pm_runtime_and_get() usage
	crypto: stm32/crc32 - Fix kernel BUG triggered in probe()
	crypto: caam - replace this_cpu_ptr with raw_cpu_ptr
	ubifs: Error path in ubifs_remount_rw() seems to wrongly free write buffers
	tpm: fix NPE on probe for missing device
	spi: uniphier: Fix a bug that doesn't point to private data correctly
	xen/gntdev: fix unmap notification order
	fuse: Pass correct lend value to filemap_write_and_wait_range()
	serial: Fix incorrect rs485 polarity on uart open
	cputime, cpuacct: Include guest time in user time in cpuacct.stat
	tracing/kprobes: 'nmissed' not showed correctly for kretprobe
	iwlwifi: mvm: Increase the scan timeout guard to 30 seconds
	s390/mm: fix 2KB pgtable release race
	device property: Fix fwnode_graph_devcon_match() fwnode leak
	drm/etnaviv: limit submit sizes
	drm/nouveau/kms/nv04: use vzalloc for nv04_display
	drm/bridge: analogix_dp: Make PSR-exit block less
	parisc: Fix lpa and lpa_user defines
	powerpc/64s/radix: Fix huge vmap false positive
	PCI: xgene: Fix IB window setup
	PCI: pciehp: Use down_read/write_nested(reset_lock) to fix lockdep errors
	PCI: pci-bridge-emul: Make expansion ROM Base Address register read-only
	PCI: pci-bridge-emul: Properly mark reserved PCIe bits in PCI config space
	PCI: pci-bridge-emul: Fix definitions of reserved bits
	PCI: pci-bridge-emul: Correctly set PCIe capabilities
	PCI: pci-bridge-emul: Set PCI_STATUS_CAP_LIST for PCIe device
	xfrm: fix policy lookup for ipv6 gre packets
	btrfs: fix deadlock between quota enable and other quota operations
	btrfs: check the root node for uptodate before returning it
	btrfs: respect the max size in the header when activating swap file
	ext4: make sure to reset inode lockdep class when quota enabling fails
	ext4: make sure quota gets properly shutdown on error
	ext4: fix a possible ABBA deadlock due to busy PA
	ext4: initialize err_blk before calling __ext4_get_inode_loc
	ext4: fix fast commit may miss tracking range for FALLOC_FL_ZERO_RANGE
	ext4: set csum seed in tmp inode while migrating to extents
	ext4: Fix BUG_ON in ext4_bread when write quota data
	ext4: use ext4_ext_remove_space() for fast commit replay delete range
	ext4: fast commit may miss tracking unwritten range during ftruncate
	ext4: destroy ext4_fc_dentry_cachep kmemcache on module removal
	ext4: fix null-ptr-deref in '__ext4_journal_ensure_credits'
	ext4: don't use the orphan list when migrating an inode
	drm/radeon: fix error handling in radeon_driver_open_kms
	of: base: Improve argument length mismatch error
	firmware: Update Kconfig help text for Google firmware
	can: mcp251xfd: mcp251xfd_tef_obj_read(): fix typo in error message
	media: rcar-csi2: Optimize the selection PHTW register
	drm/vc4: hdmi: Make sure the device is powered with CEC
	media: correct MEDIA_TEST_SUPPORT help text
	Documentation: dmaengine: Correctly describe dmatest with channel unset
	Documentation: ACPI: Fix data node reference documentation
	Documentation: refer to config RANDOMIZE_BASE for kernel address-space randomization
	Documentation: fix firewire.rst ABI file path error
	Bluetooth: hci_sync: Fix not setting adv set duration
	scsi: core: Show SCMD_LAST in text form
	dmaengine: uniphier-xdmac: Fix type of address variables
	RDMA/hns: Modify the mapping attribute of doorbell to device
	RDMA/rxe: Fix a typo in opcode name
	dmaengine: stm32-mdma: fix STM32_MDMA_CTBR_TSEL_MASK
	Revert "net/mlx5: Add retry mechanism to the command entry index allocation"
	powerpc/cell: Fix clang -Wimplicit-fallthrough warning
	powerpc/fsl/dts: Enable WA for erratum A-009885 on fman3l MDIO buses
	block: Fix fsync always failed if once failed
	bpftool: Remove inclusion of utilities.mak from Makefiles
	xdp: check prog type before updating BPF link
	perf evsel: Override attr->sample_period for non-libpfm4 events
	ipv4: update fib_info_cnt under spinlock protection
	ipv4: avoid quadratic behavior in netns dismantle
	net/fsl: xgmac_mdio: Add workaround for erratum A-009885
	net/fsl: xgmac_mdio: Fix incorrect iounmap when removing module
	parisc: pdc_stable: Fix memory leak in pdcs_register_pathentries
	f2fs: compress: fix potential deadlock of compress file
	f2fs: fix to reserve space for IO align feature
	af_unix: annote lockless accesses to unix_tot_inflight & gc_in_progress
	clk: Emit a stern warning with writable debugfs enabled
	clk: si5341: Fix clock HW provider cleanup
	net/smc: Fix hung_task when removing SMC-R devices
	net: axienet: increase reset timeout
	net: axienet: Wait for PhyRstCmplt after core reset
	net: axienet: reset core on initialization prior to MDIO access
	net: axienet: add missing memory barriers
	net: axienet: limit minimum TX ring size
	net: axienet: Fix TX ring slot available check
	net: axienet: fix number of TX ring slots for available check
	net: axienet: fix for TX busy handling
	net: axienet: increase default TX ring size to 128
	HID: vivaldi: fix handling devices not using numbered reports
	rtc: pxa: fix null pointer dereference
	vdpa/mlx5: Fix wrong configuration of virtio_version_1_0
	virtio_ring: mark ring unused on error
	taskstats: Cleanup the use of task->exit_code
	inet: frags: annotate races around fqdir->dead and fqdir->high_thresh
	netns: add schedule point in ops_exit_list()
	xfrm: Don't accidentally set RTO_ONLINK in decode_session4()
	gre: Don't accidentally set RTO_ONLINK in gre_fill_metadata_dst()
	libcxgb: Don't accidentally set RTO_ONLINK in cxgb_find_route()
	perf script: Fix hex dump character output
	dmaengine: at_xdmac: Don't start transactions at tx_submit level
	dmaengine: at_xdmac: Start transfer for cyclic channels in issue_pending
	dmaengine: at_xdmac: Print debug message after realeasing the lock
	dmaengine: at_xdmac: Fix concurrency over xfers_list
	dmaengine: at_xdmac: Fix lld view setting
	dmaengine: at_xdmac: Fix at_xdmac_lld struct definition
	perf probe: Fix ppc64 'perf probe add events failed' case
	devlink: Remove misleading internal_flags from health reporter dump
	arm64: dts: qcom: msm8996: drop not documented adreno properties
	net: bonding: fix bond_xmit_broadcast return value error bug
	net_sched: restore "mpu xxx" handling
	bcmgenet: add WOL IRQ check
	net: ethernet: mtk_eth_soc: fix error checking in mtk_mac_config()
	net: sfp: fix high power modules without diagnostic monitoring
	net: mscc: ocelot: fix using match before it is set
	dt-bindings: display: meson-dw-hdmi: add missing sound-name-prefix property
	dt-bindings: display: meson-vpu: Add missing amlogic,canvas property
	dt-bindings: watchdog: Require samsung,syscon-phandle for Exynos7
	scripts/dtc: dtx_diff: remove broken example from help text
	lib82596: Fix IRQ check in sni_82596_probe
	mm/hmm.c: allow VM_MIXEDMAP to work with hmm_range_fault
	lib/test_meminit: destroy cache in kmem_cache_alloc_bulk() test
	mtd: nand: bbt: Fix corner case in bad block table handling
	ath10k: Fix the MTU size on QCA9377 SDIO
	scripts: sphinx-pre-install: add required ctex dependency
	scripts: sphinx-pre-install: Fix ctex support on Debian
	Linux 5.10.94

Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
Change-Id: I857f2417c899508815a1ba13d1285fd400a1f133
2022-01-27 11:49:22 +01:00
Lukas Wunner
13518f058f serial: Fix incorrect rs485 polarity on uart open
commit d3b3404df3 upstream.

Commit a6845e1e1b ("serial: core: Consider rs485 settings to drive
RTS") sought to deassert RTS when opening an rs485-enabled uart port.
That way, the transceiver does not occupy the bus until it transmits
data.

Unfortunately, the commit mixed up the logic and *asserted* RTS instead
of *deasserting* it:

The commit amended uart_port_dtr_rts(), which raises DTR and RTS when
opening an rs232 port.  "Raising" actually means lowering the signal
that's coming out of the uart, because an rs232 transceiver not only
changes a signal's voltage level, it also *inverts* the signal.  See
the simplified schematic in the MAX232 datasheet for an example:
https://www.ti.com/lit/ds/symlink/max232.pdf

So, to raise RTS on an rs232 port, TIOCM_RTS is *set* in port->mctrl
and that results in the signal being driven low.

In contrast to rs232, the signal level for rs485 Transmit Enable is the
identity, not the inversion:  If the transceiver expects a "high" RTS
signal for Transmit Enable, the signal coming out of the uart must also
be high, so TIOCM_RTS must be *cleared* in port->mctrl.

The commit did the exact opposite, but it's easy to see why given the
confusing semantics of rs232 and rs485.  Fix it.

Fixes: a6845e1e1b ("serial: core: Consider rs485 settings to drive RTS")
Cc: stable@vger.kernel.org # v4.14+
Cc: Rafael Gago Castano <rgc@hms.se>
Cc: Jan Kiszka <jan.kiszka@siemens.com>
Cc: Su Bao Cheng <baocheng.su@siemens.com>
Signed-off-by: Lukas Wunner <lukas@wunner.de>
Link: https://lore.kernel.org/r/9395767847833f2f3193c49cde38501eeb3b5669.1639821059.git.lukas@wunner.de
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2022-01-27 10:54:25 +01:00
Lukas Wunner
f8fdebfb4b serial: core: Keep mctrl register state and cached copy in sync
[ Upstream commit 93a770b7e1 ]

struct uart_port contains a cached copy of the Modem Control signals.
It is used to skip register writes in uart_update_mctrl() if the new
signal state equals the old signal state.  It also avoids a register
read to obtain the current state of output signals.

When a uart_port is registered, uart_configure_port() changes signal
state but neglects to keep the cached copy in sync.  That may cause
a subsequent register write to be incorrectly skipped.  Fix it before
it trips somebody up.

This behavior has been present ever since the serial core was introduced
in 2002:
https://git.kernel.org/history/history/c/33c0d1b0c3eb

So far it was never an issue because the cached copy is initialized to 0
by kzalloc() and when uart_configure_port() is executed, at most DTR has
been set by uart_set_options() or sunsu_console_setup().  Therefore,
a stable designation seems unnecessary.

Signed-off-by: Lukas Wunner <lukas@wunner.de>
Link: https://lore.kernel.org/r/bceeaba030b028ed810272d55d5fc6f3656ddddb.1641129752.git.lukas@wunner.de
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2022-01-27 10:54:20 +01:00
Lukas Wunner
a03fd1b198 serial: pl010: Drop CR register reset on set_termios
[ Upstream commit 08a0c6dff9 ]

pl010_set_termios() briefly resets the CR register to zero.

Where does this register write come from?

The PL010 driver's IRQ handler ambauart_int() originally modified the CR
register without holding the port spinlock.  ambauart_set_termios() also
modified that register.  To prevent concurrent read-modify-writes by the
IRQ handler and to prevent transmission while changing baudrate,
ambauart_set_termios() had to disable interrupts.  That is achieved by
writing zero to the CR register.

However in 2004 the PL010 driver was amended to acquire the port
spinlock in the IRQ handler, obviating the need to disable interrupts in
->set_termios():
https://git.kernel.org/history/history/c/157c0342e591

That rendered the CR register write obsolete.  Drop it.

Cc: Russell King <rmk+kernel@armlinux.org.uk>
Signed-off-by: Lukas Wunner <lukas@wunner.de>
Link: https://lore.kernel.org/r/fcaff16e5b1abb4cc3da5a2879ac13f278b99ed0.1641128728.git.lukas@wunner.de
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2022-01-27 10:54:20 +01:00
Fugang Duan
f0653cd4da tty: serial: imx: disable UCR4_OREN in .stop_rx() instead of .shutdown()
[ Upstream commit 028e083832 ]

The UCR4_OREN should be disabled before disabling the uart receiver in
.stop_rx() instead of in the .shutdown().

Otherwise, if we have the overrun error during the receiver disable
process, the overrun interrupt will keep trigging until we disable the
OREN interrupt in the .shutdown(), because the ORE status can only be
cleared when read the rx FIFO or reset the controller.  Although the
called time between the receiver disable and OREN disable in .shutdown()
is very short, there is still the risk of endless interrupt during this
short period of time. So here change to disable OREN before the receiver
been disabled in .stop_rx().

Signed-off-by: Fugang Duan <fugang.duan@nxp.com>
Signed-off-by: Sherry Sun <sherry.sun@nxp.com>
Link: https://lore.kernel.org/r/20211125020349.4980-1-sherry.sun@nxp.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2022-01-27 10:54:12 +01:00
Lino Sanfilippo
45bbe00801 serial: amba-pl011: do not request memory region twice
[ Upstream commit d1180405c7 ]

With commit 3873e2d7f6 ("drivers: PL011: refactor pl011_probe()") the
function devm_ioremap() called from pl011_setup_port() was replaced with
devm_ioremap_resource(). Since this function not only remaps but also
requests the ports io memory region it now collides with the .config_port()
callback which requests the same region at uart port registration.

Since devm_ioremap_resource() already claims the memory successfully, the
request in .config_port() fails.

Later at uart port deregistration the attempt to release the unclaimed
memory also fails. The failure results in a “Trying to free nonexistent
resource" warning.

Fix these issues by removing the callbacks that implement the redundant
memory allocation/release. Also make sure that changing the drivers io
memory base address via TIOCSSERIAL is not allowed any more.

Fixes: 3873e2d7f6 ("drivers: PL011: refactor pl011_probe()")
Signed-off-by: Lino Sanfilippo <LinoSanfilippo@gmx.de>
Link: https://lore.kernel.org/r/20211129174238.8333-1-LinoSanfilippo@gmx.de
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2022-01-27 10:53:53 +01:00
Lizhi Hou
8409d2394c tty: serial: uartlite: allow 64 bit address
[ Upstream commit 3672fb6515 ]

The base address of uartlite registers could be 64 bit address which is from
device resource. When ulite_probe() calls ulite_assign(), this 64 bit
address is casted to 32-bit. The fix is to replace "u32" type with
"phys_addr_t" type for the base address in ulite_assign() argument list.

Fixes: 8fa7b61006 ("[POWERPC] Uartlite: Separate the bus binding from the driver proper")
Signed-off-by: Lizhi Hou <lizhi.hou@xilinx.com>
Link: https://lore.kernel.org/r/20211129202302.1319033-1-lizhi.hou@xilinx.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2022-01-27 10:53:53 +01:00
Tudor Ambarus
f93c9aa1d3 tty: serial: atmel: Call dma_async_issue_pending()
[ Upstream commit 4f4b9b5895 ]

The driver wrongly assummed that tx_submit() will start the transfer,
which is not the case, now that the at_xdmac driver is fixed. tx_submit
is supposed to push the current transaction descriptor to a pending queue,
waiting for issue_pending to be called. issue_pending must start the
transfer, not tx_submit.

Fixes: 34df42f59a ("serial: at91: add rx dma support")
Fixes: 08f738be88 ("serial: at91: add tx dma support")
Signed-off-by: Tudor Ambarus <tudor.ambarus@microchip.com>
Link: https://lore.kernel.org/r/20211125090028.786832-4-tudor.ambarus@microchip.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2022-01-27 10:53:50 +01:00
Tudor Ambarus
755a6c873b tty: serial: atmel: Check return code of dmaengine_submit()
[ Upstream commit 1e67bd2b8c ]

The tx_submit() method of struct dma_async_tx_descriptor is entitled
to do sanity checks and return errors if encountered. It's not the
case for the DMA controller drivers that this client is using
(at_h/xdmac), because they currently don't do sanity checks and always
return a positive cookie at tx_submit() method. In case the controller
drivers will implement sanity checks and return errors, print a message
so that the client will be informed that something went wrong at
tx_submit() level.

Fixes: 08f738be88 ("serial: at91: add tx dma support")
Signed-off-by: Tudor Ambarus <tudor.ambarus@microchip.com>
Acked-by: Richard Genoud <richard.genoud@gmail.com>
Link: https://lore.kernel.org/r/20211125090028.786832-3-tudor.ambarus@microchip.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2022-01-27 10:53:50 +01:00
Greg Kroah-Hartman
3b4ca92614 Merge tag 'android12-5.10.81_r00' into android12-5.10
This is the merge of the upstream LTS release of 5.10.81 into the
android12-5.10 branch.

New symbols were added to be tracked, which are the only ABI changes:

Leaf changes summary: 209 artifacts changed
Changed leaf types summary: 0 leaf type changed
Removed/Changed/Added functions summary: 0 Removed, 0 Changed, 192 Added functions
Removed/Changed/Added variables summary: 0 Removed, 0 Changed, 17 Added variables

192 Added functions:

  [A] 'function void __bforget(buffer_head*)'
  [A] 'function ssize_t __blockdev_direct_IO(kiocb*, inode*, block_device*, iov_iter*, get_block_t*, dio_iodone_t*, dio_submit_t*, int)'
  [A] 'function buffer_head* __bread_gfp(block_device*, sector_t, unsigned int, gfp_t)'
  [A] 'function void __breadahead(block_device*, sector_t, unsigned int)'
  [A] 'function void __brelse(buffer_head*)'
  [A] 'function void __cancel_dirty_page(page*)'
  [A] 'function void __cleancache_invalidate_inode(address_space*)'
  [A] 'function void __filemap_set_wb_err(address_space*, int)'
  [A] 'function void __insert_inode_hash(inode*, unsigned long int)'
  [A] 'function void __mark_inode_dirty(inode*, int)'
  [A] 'function void __pagevec_release(pagevec*)'
  [A] 'function void __remove_inode_hash(inode*)'
  [A] 'function int __set_page_dirty_buffers(page*)'
  [A] 'function int __set_page_dirty_nobuffers(page*)'
  [A] 'function int __test_set_page_writeback(page*, bool)'
  [A] 'function int __traceiter_android_rvh_binder_transaction(void*, binder_proc*, binder_proc*, binder_thread*, binder_transaction_data*)'
  [A] 'function int __traceiter_android_rvh_do_sched_yield(void*, rq*)'
  [A] 'function int __traceiter_android_vh_binder_del_ref(void*, task_struct*, uint32_t)'
  [A] 'function int __traceiter_android_vh_binder_free_proc(void*, binder_proc*)'
  [A] 'function int __traceiter_android_vh_binder_has_work_ilocked(void*, binder_thread*, bool, int*)'
  [A] 'function int __traceiter_android_vh_binder_looper_state_registered(void*, binder_thread*, binder_proc*)'
  [A] 'function int __traceiter_android_vh_binder_new_ref(void*, task_struct*, uint32_t, int)'
  [A] 'function int __traceiter_android_vh_binder_proc_transaction(void*, task_struct*, task_struct*, task_struct*, int, unsigned int, bool)'
  [A] 'function int __traceiter_android_vh_binder_proc_transaction_end(void*, task_struct*, task_struct*, task_struct*, unsigned int, bool, bool)'
  [A] 'function int __traceiter_android_vh_binder_read_done(void*, binder_proc*, binder_thread*)'
  [A] 'function int __traceiter_android_vh_binder_thread_read(void*, list_head**, binder_proc*, binder_thread*)'
  [A] 'function int __traceiter_android_vh_binder_thread_release(void*, binder_proc*, binder_thread*)'
  [A] 'function int __traceiter_android_vh_futex_sleep_start(void*, task_struct*)'
  [A] 'function int __traceiter_block_bio_remap(void*, request_queue*, bio*, dev_t, sector_t)'
  [A] 'function int add_to_page_cache_locked(page*, address_space*, unsigned long int, gfp_t)'
  [A] 'function bio* bio_split(bio*, int, gfp_t, bio_set*)'
  [A] 'function wait_queue_head* bit_waitqueue(void*, int)'
  [A] 'function blk_plug_cb* blk_check_plugged(blk_plug_cb_fn, void*, int)'
  [A] 'function void blk_queue_max_write_same_sectors(request_queue*, unsigned int)'
  [A] 'function int blkdev_issue_discard(block_device*, sector_t, sector_t, gfp_t, unsigned long int)'
  [A] 'function void block_invalidatepage(page*, unsigned int, unsigned int)'
  [A] 'function int block_is_partially_uptodate(page*, unsigned long int, unsigned long int)'
  [A] 'function int buffer_migrate_page(address_space*, page*, page*, migrate_mode)'
  [A] 'function bool capable_wrt_inode_uidgid(const inode*, int)'
  [A] 'function void clean_bdev_aliases(block_device*, sector_t, sector_t)'
  [A] 'function void clear_inode(inode*)'
  [A] 'function int clear_page_dirty_for_io(page*)'
  [A] 'function int clk_set_duty_cycle(clk*, unsigned int, unsigned int)'
  [A] 'function int clocksource_mmio_init(void*, const char*, unsigned long int, int, unsigned int, typedef u64 (clocksource*)*)'
  [A] 'function u64 clocksource_mmio_readl_up(clocksource*)'
  [A] 'function void create_empty_buffers(page*, unsigned long int, unsigned long int)'
  [A] 'function int current_umask()'
  [A] 'function dentry* d_add_ci(dentry*, inode*, qstr*)'
  [A] 'function void d_instantiate(dentry*, inode*)'
  [A] 'function dentry* d_obtain_alias(inode*)'
  [A] 'function dentry* d_splice_alias(inode*, dentry*)'
  [A] 'function void delete_from_page_cache(page*)'
  [A] 'function i3c_device* dev_to_i3cdev(device*)'
  [A] 'function spi_mem_dirmap_desc* devm_spi_mem_dirmap_create(device*, spi_mem*, const spi_mem_dirmap_info*)'
  [A] 'function void disk_stack_limits(gendisk*, block_device*, sector_t)'
  [A] 'function void drop_nlink(inode*)'
  [A] 'function void end_buffer_write_sync(buffer_head*, int)'
  [A] 'function void end_page_writeback(page*)'
  [A] 'function errseq_t errseq_set(errseq_t*, int)'
  [A] 'function int fb_get_options(const char*, char**)'
  [A] 'function int fiemap_fill_next_extent(fiemap_extent_info*, u64, u64, u64, u32)'
  [A] 'function int fiemap_prep(inode*, fiemap_extent_info*, u64, u64*, u32)'
  [A] 'function int file_remove_privs(file*)'
  [A] 'function int file_update_time(file*)'
  [A] 'function int file_write_and_wait_range(file*, loff_t, loff_t)'
  [A] 'function vm_fault_t filemap_fault(vm_fault*)'
  [A] 'function int filemap_fdatawait_range(address_space*, loff_t, loff_t)'
  [A] 'function int filemap_fdatawrite(address_space*)'
  [A] 'function int filemap_flush(address_space*)'
  [A] 'function int filemap_write_and_wait_range(address_space*, loff_t, loff_t)'
  [A] 'function file* filp_open(const char*, int, umode_t)'
  [A] 'function void flush_delayed_fput()'
  [A] 'function int freq_qos_remove_notifier(freq_constraints*, freq_qos_req_type, notifier_block*)'
  [A] 'function int generic_error_remove_page(address_space*, page*)'
  [A] 'function ssize_t generic_file_direct_write(kiocb*, iov_iter*)'
  [A] 'function int generic_file_mmap(file*, vm_area_struct*)'
  [A] 'function int generic_file_open(inode*, file*)'
  [A] 'function ssize_t generic_file_splice_read(file*, loff_t*, pipe_inode_info*, size_t, unsigned int)'
  [A] 'function void generic_fillattr(inode*, kstat*)'
  [A] 'function ssize_t generic_read_dir(file*, char*, size_t, loff_t*)'
  [A] 'function int genphy_restart_aneg(phy_device*)'
  [A] 'function page* grab_cache_page_write_begin(address_space*, unsigned long int, unsigned int)'
  [A] 'function const i3c_device_id* i3c_device_match_id(i3c_device*, const i3c_device_id*)'
  [A] 'function inode* iget5_locked(super_block*, unsigned long int, int (inode*, void*)*, int (inode*, void*)*, void*)'
  [A] 'function inode* igrab(inode*)'
  [A] 'function void ihold(inode*)'
  [A] 'function int iio_device_claim_direct_mode(iio_dev*)'
  [A] 'function void iio_device_release_direct_mode(iio_dev*)'
  [A] 'function int iio_push_event(iio_dev*, u64, s64)'
  [A] 'function int iio_read_mount_matrix(device*, const char*, iio_mount_matrix*)'
  [A] 'function ssize_t iio_show_mount_matrix(iio_dev*, uintptr_t, const iio_chan_spec*, char*)'
  [A] 'function int iio_write_channel_raw(iio_channel*, int)'
  [A] 'function inode* ilookup5(super_block*, unsigned long int, int (inode*, void*)*, void*)'
  [A] 'function int in_group_p(kgid_t)'
  [A] 'function void inc_nlink(inode*)'
  [A] 'function void init_special_inode(inode*, umode_t, dev_t)'
  [A] 'function void inode_dio_wait(inode*)'
  [A] 'function void inode_init_once(inode*)'
  [A] 'function void inode_init_owner(inode*, const inode*, umode_t)'
  [A] 'function int inode_newsize_ok(const inode*, loff_t)'
  [A] 'function void inode_set_flags(inode*, unsigned int, unsigned int)'
  [A] 'function void io_schedule()'
  [A] 'function void iov_iter_advance(iov_iter*, size_t)'
  [A] 'function unsigned long int iov_iter_alignment(const iov_iter*)'
  [A] 'function size_t iov_iter_copy_from_user_atomic(page*, iov_iter*, unsigned long int, size_t)'
  [A] 'function int iov_iter_fault_in_readable(iov_iter*, size_t)'
  [A] 'function ssize_t iov_iter_get_pages(iov_iter*, page**, size_t, unsigned int, size_t*)'
  [A] 'function size_t iov_iter_single_seg_count(const iov_iter*)'
  [A] 'function bool is_bad_inode(inode*)'
  [A] 'function ssize_t iter_file_splice_write(pipe_inode_info*, file*, loff_t*, size_t, unsigned int)'
  [A] 'function ino_t iunique(super_block*, ino_t)'
  [A] 'function int kernel_sock_shutdown(socket*, sock_shutdown_cmd)'
  [A] 'function void kill_block_super(super_block*)'
  [A] 'function int kill_pid(pid*, int, int)'
  [A] 'function bool kthread_freezable_should_stop(bool*)'
  [A] 'function void ll_rw_block(int, int, int, buffer_head**)'
  [A] 'function nls_table* load_nls(char*)'
  [A] 'function nls_table* load_nls_default()'
  [A] 'function void lru_cache_add(page*)'
  [A] 'function void make_bad_inode(inode*)'
  [A] 'function void mark_buffer_async_write(buffer_head*)'
  [A] 'function void mark_buffer_dirty(buffer_head*)'
  [A] 'function void mark_buffer_write_io_error(buffer_head*)'
  [A] 'function void mark_page_accessed(page*)'
  [A] 'function void mnt_drop_write_file(file*)'
  [A] 'function int mnt_want_write_file(file*)'
  [A] 'function dentry* mount_bdev(file_system_type*, int, const char*, void*, int (super_block*, void*, int)*)'
  [A] 'function void mpage_readahead(readahead_control*, get_block_t*)'
  [A] 'function int mpage_readpage(page*, get_block_t*)'
  [A] 'function int notify_change(dentry*, iattr*, inode**)'
  [A] 'function unsigned long int page_cache_next_miss(address_space*, unsigned long int, unsigned long int)'
  [A] 'function unsigned long int page_cache_prev_miss(address_space*, unsigned long int, unsigned long int)'
  [A] 'function bool page_mapped(page*)'
  [A] 'function int page_mkclean(page*)'
  [A] 'function void page_zero_new_buffers(page*, unsigned int, unsigned int)'
  [A] 'function page* pagecache_get_page(address_space*, unsigned long int, int, gfp_t)'
  [A] 'function unsigned int pagevec_lookup_range(pagevec*, address_space*, unsigned long int*, unsigned long int)'
  [A] 'function unsigned int pagevec_lookup_range_tag(pagevec*, address_space*, unsigned long int*, unsigned long int, xa_mark_t)'
  [A] 'function int phy_modify_mmd(phy_device*, int, u32, u16, u16)'
  [A] 'function void put_pages_list(list_head*)'
  [A] 'function gfp_t readahead_gfp_mask(address_space*)'
  [A] 'function int redirty_page_for_writepage(writeback_control*, page*)'
  [A] 'function int rproc_set_firmware(rproc*, const char*)'
  [A] 'function int sb_min_blocksize(super_block*, int)'
  [A] 'function int sb_set_blocksize(super_block*, int)'
  [A] 'function void sched_clock_register(typedef u64 ()*, int, unsigned long int)'
  [A] 'function int security_inode_init_security(inode*, inode*, const qstr*, const initxattrs, void*)'
  [A] 'function void set_nlink(inode*, unsigned int)'
  [A] 'function int setattr_prepare(dentry*, iattr*)'
  [A] 'function int snd_interval_ranges(snd_interval*, unsigned int, const snd_interval*, unsigned int)'
  [A] 'function int snd_pcm_hw_constraint_ratnums(snd_pcm_runtime*, unsigned int, snd_pcm_hw_param_t, const snd_pcm_hw_constraint_ratnums*)'
  [A] 'function int snd_soc_limit_volume(snd_soc_card*, const char*, int)'
  [A] 'function int sock_recvmsg(socket*, msghdr*, int)'
  [A] 'function socket* sockfd_lookup(int, int*)'
  [A] 'function const spi_device_id* spi_get_device_id(const spi_device*)'
  [A] 'function int spi_mem_adjust_op_size(spi_mem*, spi_mem_op*)'
  [A] 'function bool spi_mem_default_supports_op(spi_mem*, const spi_mem_op*)'
  [A] 'function ssize_t spi_mem_dirmap_read(spi_mem_dirmap_desc*, u64, size_t, void*)'
  [A] 'function ssize_t spi_mem_dirmap_write(spi_mem_dirmap_desc*, u64, size_t, void*)'
  [A] 'function int spi_mem_driver_register_with_owner(spi_mem_driver*, module*)'
  [A] 'function void spi_mem_driver_unregister(spi_mem_driver*)'
  [A] 'function bool spi_mem_dtr_supports_op(spi_mem*, const spi_mem_op*)'
  [A] 'function int spi_mem_exec_op(spi_mem*, const spi_mem_op*)'
  [A] 'function const char* spi_mem_get_name(spi_mem*)'
  [A] 'function bool spi_mem_supports_op(spi_mem*, const spi_mem_op*)'
  [A] 'function blk_qc_t submit_bio_noacct(bio*)'
  [A] 'function int sync_dirty_buffer(buffer_head*)'
  [A] 'function int sync_filesystem(super_block*)'
  [A] 'function int sync_inode_metadata(inode*, int)'
  [A] 'function void tag_pages_for_writeback(address_space*, unsigned long int, unsigned long int)'
  [A] 'function timespec64 timestamp_truncate(timespec64, inode*)'
  [A] 'function void touch_atime(const path*)'
  [A] 'function void touchscreen_parse_properties(input_dev*, bool, touchscreen_properties*)'
  [A] 'function void touchscreen_report_pos(input_dev*, const touchscreen_properties*, unsigned int, unsigned int, bool)'
  [A] 'function int trace_set_clr_event(const char*, const char*, int)'
  [A] 'function void truncate_inode_pages(address_space*, loff_t)'
  [A] 'function void truncate_inode_pages_final(address_space*)'
  [A] 'function void truncate_pagecache(inode*, loff_t)'
  [A] 'function void truncate_setsize(inode*, loff_t)'
  [A] 'function int try_to_release_page(page*, gfp_t)'
  [A] 'function void try_to_writeback_inodes_sb(super_block*, wb_reason)'
  [A] 'function void unload_nls(nls_table*)'
  [A] 'function void unlock_buffer(buffer_head*)'
  [A] 'function void unlock_new_inode(inode*)'
  [A] 'function void usbnet_cdc_unbind(usbnet*, usb_interface*)'
  [A] 'function int usbnet_generic_cdc_bind(usbnet*, usb_interface*)'
  [A] 'function int vsscanf(const char*, const char*, va_list)'
  [A] 'function void wait_on_page_bit(page*, int)'
  [A] 'function int wake_bit_function(wait_queue_entry*, unsigned int, int, void*)'
  [A] 'function void wq_worker_comm(char*, size_t, task_struct*)'
  [A] 'function int write_inode_now(inode*, int)'
  [A] 'function int write_one_page(page*)'

17 Added variables:

  [A] 'tracepoint __tracepoint_android_rvh_binder_transaction'
  [A] 'tracepoint __tracepoint_android_rvh_do_ptrauth_fault'
  [A] 'tracepoint __tracepoint_android_rvh_do_sched_yield'
  [A] 'tracepoint __tracepoint_android_vh_binder_del_ref'
  [A] 'tracepoint __tracepoint_android_vh_binder_free_proc'
  [A] 'tracepoint __tracepoint_android_vh_binder_has_work_ilocked'
  [A] 'tracepoint __tracepoint_android_vh_binder_looper_state_registered'
  [A] 'tracepoint __tracepoint_android_vh_binder_new_ref'
  [A] 'tracepoint __tracepoint_android_vh_binder_proc_transaction'
  [A] 'tracepoint __tracepoint_android_vh_binder_proc_transaction_end'
  [A] 'tracepoint __tracepoint_android_vh_binder_read_done'
  [A] 'tracepoint __tracepoint_android_vh_binder_thread_read'
  [A] 'tracepoint __tracepoint_android_vh_binder_thread_release'
  [A] 'tracepoint __tracepoint_android_vh_futex_sleep_start'
  [A] 'tracepoint __tracepoint_android_vh_subpage_dma_contig_alloc'
  [A] 'tracepoint __tracepoint_block_bio_remap'
  [A] 'device platform_bus'

This merge contains the following new commits:

4b64435629 ANDROID: GKI: disable CONFIG_FORTIFY_SOURCE
94097f9434 Merge 5.10.81 into android12-5.10-lts
99957dcea4 Linux 5.10.81
0685efd984 selftests/x86/iopl: Adjust to the faked iopl CLI/STI usage
6a315471cb thermal: Fix NULL pointer dereferences in of_thermal_ functions
bd40513d0b perf/core: Avoid put_page() when GUP fails
df58fb431a scripts/lld-version.sh: Rewrite based on upstream ld-version.sh
be3f603583 erofs: fix unsafe pagevec reuse of hooked pclusters
6c1ad56b2d erofs: remove the occupied parameter from z_erofs_pagevec_enqueue()
5bf5f46483 PCI: Add MSI masking quirk for Nvidia ION AHCI
f28c620e1a PCI/MSI: Deal with devices lying about their MSI mask capability
9b61500ee5 PCI/MSI: Destroy sysfs before freeing entries
c49bfdfe53 parisc/entry: fix trace test in syscall exit path
b31bac0619 x86/iopl: Fake iopl(3) CLI/STI usage
a0958a5354 net: stmmac: dwmac-rk: fix unbalanced pm_runtime_enable warnings
80407c6ad9 net: stmmac: fix issue where clk is being unprepared twice
ac4bb9951c net: stmmac: fix system hang if change mac address after interface ifdown
bcf3752243 net: stmmac: fix missing unlock on error in stmmac_suspend()
483ed89522 net: stmmac: platform: fix build error with !CONFIG_PM_SLEEP
3afe11be64 net: stmmac: add clocks management for gmac driver
f27060e28e bootconfig: init: Fix memblock leak in xbc_make_cmdline()
04e46514fe loop: Use blk_validate_block_size() to validate block size
79ff56c613 block: Add a helper to validate the block size
eaafc59005 fortify: Explicitly disable Clang support
971945b722 Revert "tcp: switch orphan_count to bare per-cpu counters"
e101be336e Revert "net: sched: update default qdisc visibility after Tx queue cnt changes"
2d94ebb760 Revert "serial: core: Fix initializing and restoring termios speed"
c553d9a246 Merge 5.10.80 into android12-5.10-lts
706ebf15a1 Merge branch 'android12-5.10' into `android12-5.10-lts`
f884bb85b8 Linux 5.10.80
1e49a79bc3 soc/tegra: pmc: Fix imbalanced clock disabling in error code path
45490bfa1e x86/sev: Make the #VC exception stacks part of the default stacks storage
fc25889a66 x86/sev: Add an x86 version of cc_platform_has()
74ba917cfd arch/cc: Introduce a function to check for confidential computing features
5be42b203f selftests/bpf: Fix also no-alu32 strobemeta selftest
1e7340950d mmc: moxart: Fix null pointer dereference on pointer host
188bf40391 ath10k: fix invalid dma_addr_t token assignment
d41f4d4dd7 SUNRPC: Partial revert of commit 6f9f17287e
c7a440cd30 PCI: aardvark: Fix PCIe Max Payload Size setting
f967d120a5 PCI: Add PCI_EXP_DEVCTL_PAYLOAD_* macros
f3396f6d83 drm/sun4i: Fix macros in sun8i_csc.h
1023355234 powerpc/85xx: fix timebase sync issue when CONFIG_HOTPLUG_CPU=n
77d543e687 powerpc/powernv/prd: Unregister OPAL_MSG_PRD2 notifier during module unload
9dcdadd6cc mtd: rawnand: au1550nd: Keep the driver compatible with on-die ECC engines
51e34fcf72 mtd: rawnand: plat_nand: Keep the driver compatible with on-die ECC engines
e1de04df8e mtd: rawnand: orion: Keep the driver compatible with on-die ECC engines
b4e2e9fbd1 mtd: rawnand: pasemi: Keep the driver compatible with on-die ECC engines
963db3ccc1 mtd: rawnand: gpio: Keep the driver compatible with on-die ECC engines
13566bc111 mtd: rawnand: mpc5121: Keep the driver compatible with on-die ECC engines
9b366f5221 mtd: rawnand: xway: Keep the driver compatible with on-die ECC engines
cbc55cf4a3 mtd: rawnand: ams-delta: Keep the driver compatible with on-die ECC engines
1f420818df s390/cio: make ccw_device_dma_* more robust
c9ca9669de s390/ap: Fix hanging ioctl caused by orphaned replies
57de1fbecf s390/tape: fix timer initialization in tape_std_assign()
1174298a5b s390/cio: check the subchannel validity for dev_busid
7d0341b37d video: backlight: Drop maximum brightness override for brightness zero
332306b1e7 mfd: dln2: Add cell for initializing DLN2 ADC
1d45798736 mm, oom: do not trigger out_of_memory from the #PF
ac7f6befc3 mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks
1ada86999d powerpc/bpf: Emit stf barrier instruction sequences for BPF_NOSPEC
7fcf86565b powerpc/security: Add a helper to query stf_barrier type
951fb7bf38 powerpc/bpf: Validate branch ranges
51cf71d5cb powerpc/lib: Add helper to check if offset is within conditional branch range
74293225f5 memcg: prohibit unconditional exceeding the limit of dying tasks
32246cefb9 9p/net: fix missing error check in p9_check_errors
a8cdf34ff8 net, neigh: Enable state migration between NUD_PERMANENT and NTF_USE
0bf5c6a1e4 f2fs: should use GFP_NOFS for directory inodes
7930892cbd irqchip/sifive-plic: Fixup EOI failed when masked
f67f6eb717 posix-cpu-timers: Clear task::posix_cputimers_work in copy_process()
1372eb1871 x86/mce: Add errata workaround for Skylake SKX37
1ee5bc2ba8 MIPS: Fix assembly error from MIPSr2 code used within MIPS_ISA_ARCH_LEVEL
fc42bbb782 parisc: Fix backtrace to always include init funtion names
241c74cc65 ARM: 9156/1: drop cc-option fallbacks for architecture selection
03f2578153 ARM: 9155/1: fix early early_iounmap()
ee79560cb7 selftests/net: udpgso_bench_rx: fix port argument
8b215edb7a cxgb4: fix eeprom len when diagnostics not implemented
93bc3ef607 net/smc: fix sk_refcnt underflow on linkdown and fallback
7e03b797be vsock: prevent unnecessary refcnt inc for nonblocking connect
ad3d219e84 net: stmmac: allow a tc-taprio base-time of zero
b30459c0ca net: hns3: allow configure ETS bandwidth of all TCs
ee11f16fee net: hns3: fix kernel crash when unload VF while it is being reset
79aa8706b4 net/sched: sch_taprio: fix undefined behavior in ktime_mono_to_any
b5703462a4 seq_file: fix passing wrong private data
4af0cd17e7 gve: Fix off by one in gve_tx_timeout()
c842a4c4ae bpf: sockmap, strparser, and tls are reusing qdisc_skb_cb and colliding
8b5c98a67c bpf, sockmap: Remove unhash handler for BPF sockmap usage
0fe81d7a20 arm64: pgtable: make __pte_to_phys/__phys_to_pte_val inline functions
727c812433 nfc: pn533: Fix double free when pn533_fill_fragment_skbs() fails
9f0e683e1b llc: fix out-of-bound array index in llc_sk_dev_hash()
b833274ae6 perf bpf: Add missing free to bpf_event__print_bpf_prog_info()
7091fcc75f zram: off by one in read_block_state()
64bde0c2db mm/zsmalloc.c: close race window between zs_pool_dec_isolated() and zs_unregister_migration()
a3c205c017 can: mcp251xfd: mcp251xfd_chip_start(): fix error handling for mcp251xfd_chip_rx_int_enable()
300d874748 mfd: core: Add missing of_node_put for loop iteration
6439b91fef bonding: Fix a use-after-free problem when bond_sysfs_slave_add() failed
acb01e962a net: phy: fix duplex out of sync problem while changing settings
090e17075f drm/nouveau/svm: Fix refcount leak bug and missing check against null bug
ee8a3ae48a ACPI: PMIC: Fix intel_pmic_regs_handler() read accesses
d83832d4a8 ice: Fix not stopping Tx queues for VFs
354ae5ca6c ice: Fix replacing VF hardware MAC to existing MAC filter
e04a7a84bb net: vlan: fix a UAF in vlan_dev_real_dev()
3fe164e719 openrisc: fix SMP tlb flush NULL pointer dereference
628773a759 ethtool: fix ethtool msg len calculation for pause stats
e78c267eb7 net: davinci_emac: Fix interrupt pacing disable
111f77594d xen-pciback: Fix return in pm_ctrl_init()
de9721ee8a i2c: xlr: Fix a resource leak in the error handling path of 'xlr_i2c_probe()'
8c3e204fb6 NFSv4: Fix a regression in nfs_set_open_stateid_locked()
0afb3bc534 scsi: qla2xxx: Turn off target reset during issue_lip
09595fd2ce scsi: qla2xxx: Fix gnl list corruption
cbe31149e5 scsi: qla2xxx: Relogin during fabric disturbance
bc3f207ed9 scsi: qla2xxx: Changes to support FCP2 Target
ba5eb0e443 ar7: fix kernel builds for compiler test
ef9f7ab9ba watchdog: f71808e_wdt: fix inaccurate report in WDIOC_GETTIMEOUT
aaa64ee14a m68k: set a default value for MEMORY_RESERVE
a4cbf00e5a signal/sh: Use force_sig(SIGKILL) instead of do_group_exit(SIGKILL)
b04c17acf4 dmaengine: dmaengine_desc_callback_valid(): Check for `callback_result`
bba31f3b1f netfilter: nfnetlink_queue: fix OOB when mac header was cleared
41968262bb soc: fsl: dpaa2-console: free buffer before returning from dpaa2_console_read
6caab6c96b auxdisplay: ht16k33: Fix frame buffer device blanking
178522aa75 auxdisplay: ht16k33: Connect backlight to fbdev
a1d6a60ee0 auxdisplay: img-ascii-lcd: Fix lock-up when displaying empty string
0e1709b2a0 Fix user namespace leak
90e7415221 NFS: Fix an Oops in pnfs_mark_request_commit()
10f2108717 NFS: Fix up commit deadlocks
91e43a8500 dmaengine: at_xdmac: fix AT_XDMAC_CC_PERID() macro
038dfd67d3 rtc: rv3032: fix error handling in rv3032_clkout_set_rate()
5061e10234 remoteproc: Fix a memory leak in an error handling path in 'rproc_handle_vdev()'
36104e1f71 mtd: core: don't remove debugfs directory if device is in use
0b73c025bf PCI: uniphier: Serialize INTx masking/unmasking and fix the bit operation
d2ff7a8b07 mtd: spi-nor: hisi-sfc: Remove excessive clk_disable_unprepare()
c4eb684990 fs: orangefs: fix error return code of orangefs_revalidate_lookup()
3e7b08ebf4 NFS: Fix deadlocks in nfs_scan_commit_list()
1494389185 opp: Fix return in _opp_add_static_v2()
bea3213f19 PCI: aardvark: Fix preserving PCI_EXP_RTCTL_CRSSVE flag on emulated bridge
ec6dba3ffe PCI: aardvark: Don't spam about PIO Response Status
2e548581fe drm/plane-helper: fix uninitialized variable reference
e94c59b64e pnfs/flexfiles: Fix misplaced barrier in nfs4_ff_layout_prepare_ds
8ac076ce71 NFS: Fix dentry verifier races
9d438dbf73 i2c: mediatek: fixing the incorrect register offset
f3492c4a92 nfsd: don't alloc under spinlock in rpc_parse_scope_id
602ab1fd40 rpmsg: Fix rpmsg_create_ept return when RPMSG config is not defined
851b622e7b apparmor: fix error check
9c9c33ea4c power: supply: bq27xxx: Fix kernel crash on IRQ handler register error
dbdf0f2207 mips: cm: Convert to bitfield API to fix out-of-bounds access
c8447cb14a virtio_ring: check desc == NULL when using indirect with packed
80e6643393 ASoC: cs42l42: Correct configuring of switch inversion from ts-inv
cb0fdd9aae ASoC: cs42l42: Use device_property API instead of of_property
ef9d007a91 ASoC: cs42l42: Disable regulators if probe fails
c0faad6e9d powerpc/44x/fsp2: add missing of_node_put
4310970d0b HID: u2fzero: properly handle timeouts in usb_submit_urb
e2f0bff411 HID: u2fzero: clarify error check and length calculations
26be378079 clk: at91: sam9x60-pll: use DIV_ROUND_CLOSEST_ULL
f2886010a8 serial: xilinx_uartps: Fix race condition causing stuck TX
515778f9d8 phy: qcom-snps: Correct the FSEL_MASK
fd056574a7 phy: ti: gmii-sel: check of_get_address() for failure
0a46740a0a phy: qcom-qusb2: Fix a memory leak on probe
ec40a28495 pinctrl: equilibrium: Fix function addition in multiple groups
a0467ca4d2 soc: qcom: apr: Add of_node_put() before return
b41c528b14 firmware: qcom_scm: Fix error retval in __qcom_scm_is_call_available()
31e7a836e2 usb: dwc2: drd: reset current session before setting the new one
fc86da757d usb: dwc2: drd: fix dwc2_drd_role_sw_set when clock could be disabled
6774a42932 usb: dwc2: drd: fix dwc2_force_mode call in dwc2_ovr_init
068dfa570d serial: imx: fix detach/attach of serial console
d293bd40fb scsi: ufs: ufshcd-pltfrm: Fix memory leak due to probe defer
75df593941 scsi: ufs: Refactor ufshcd_setup_clocks() to remove skip_ref_clk
948d8f2f2f iio: adis: do not disabe IRQs in 'adis_init()'
c8e5edca68 usb: typec: STUSB160X should select REGMAP_I2C
503d6e5fb8 soc: qcom: rpmhpd: Make power_on actually enable the domain
81e37cf40d soc: qcom: rpmhpd: Provide some missing struct member descriptions
b288b841c1 ASoC: cs42l42: Defer probe if request_threaded_irq() returns EPROBE_DEFER
1812deb08f ASoC: cs42l42: Correct some register default values
d34982c087 ARM: dts: stm32: fix AV96 board SAI2 pin muxing on stm32mp15
602fefd456 ARM: dts: stm32: fix SAI sub nodes register range
3fb75227bd ARM: dts: stm32: Reduce DHCOR SPI NOR frequency to 50 MHz
78238479b9 pinctrl: renesas: checker: Fix off-by-one bug in drive register check
51bcffb395 staging: ks7010: select CRYPTO_HASH/CRYPTO_MICHAEL_MIC
0bb8359f9c staging: most: dim2: do not double-register the same device
8e1feecc04 usb: musb: select GENERIC_PHY instead of depending on it
0058f7fbea RDMA/mlx4: Return missed an error if device doesn't support steering
bce61de564 scsi: csiostor: Uninitialized data in csio_ln_vnp_read_cbfn()
12c4673204 power: supply: max17040: fix null-ptr-deref in max17040_probe()
c553d67301 power: supply: rt5033_battery: Change voltage values to µV
d8da6328ec usb: gadget: hid: fix error code in do_config()
92a80e1ca2 serial: 8250_dw: Drop wrong use of ACPI_PTR()
cfbf58ac8e powerpc: fix unbalanced node refcount in check_kvm_guest()
54965d92a4 powerpc: Fix is_kvm_guest() / kvm_para_available()
e01a4d7560 powerpc: Reintroduce is_kvm_guest() as a fast-path check
113207234a powerpc: Rename is_kvm_guest() to check_kvm_guest()
61c5d9fa56 powerpc: Refactor is_kvm_guest() declaration to new header
67074c63cd video: fbdev: chipsfb: use memset_io() instead of memset()
fb24243e6d clk: at91: check pmc node status before registering syscore ops
20cc0fa1d0 memory: fsl_ifc: fix leak of irq and nand_irq in fsl_ifc_ctrl_probe
d3833d3c56 soc/tegra: Fix an error handling path in tegra_powergate_power_up()
9a22442009 ASoC: SOF: topology: do not power down primary core during topology removal
8b6124d924 arm: dts: omap3-gta04a4: accelerometer irq fix
e1959450b7 driver core: Fix possible memory leak in device_link_add()
ddb13ddacc scsi: pm80xx: Fix misleading log statement in pm8001_mpi_get_nvmd_resp()
4438a74570 soundwire: debugfs: use controller id and link_id for debugfs
3fe8d239e3 ALSA: hda: Use position buffer for SKL+ again
c550c7c9ae ALSA: hda: Fix hang during shutdown due to link reset
23e8f775d9 ALSA: hda: Release controller display power during shutdown/reboot
5972e974eb ALSA: hda: Reduce udelay() at SKL+ position reporting
1db71de28b arm64: dts: qcom: pm8916: Remove wrong reg-names for rtc@6000
d833ddddec arm64: dts: renesas: beacon: Fix Ethernet PHY mode
d70247b752 arm64: dts: qcom: msm8916: Fix Secondary MI2S bit clock
980c7bdd20 JFS: fix memleak in jfs_mount
c4edd206d5 MIPS: loongson64: make CPU_LOONGSON64 depends on MIPS_FP_SUPPORT
24149c954f scsi: dc395: Fix error case unwinding
6348983be7 ARM: dts: at91: tse850: the emac<->phy interface is rmii
b6493c2b7d bus: ti-sysc: Fix timekeeping_suspended warning on resume
85085c3437 arm64: dts: meson-g12b: Fix the pwm regulator supply properties
4ccb7e4a97 arm64: dts: meson-g12a: Fix the pwm regulator supply properties
20baf01638 arm64: dts: ti: k3-j721e-main: Fix "bus-range" upto 256 bus number for PCIe
7a1617a991 arm64: dts: ti: k3-j721e-main: Fix "max-virtual-functions" in PCIe EP nodes
64a43b7712 RDMA/bnxt_re: Fix query SRQ failure
fe3c11fc62 ARM: dts: qcom: msm8974: Add xo_board reference clock to DSI0 PHY
2887df89e7 arm64: dts: rockchip: Fix GPU register width for RK3328
3f33f09d9f ARM: s3c: irq-s3c24xx: Fix return value check for s3c24xx_init_intc()
cdd3dd905c clk: mvebu: ap-cpu-clk: Fix a memory leak in error handling paths
2fde76df18 ARM: dts: BCM5301X: Fix memory nodes names
5282385ee6 RDMA/rxe: Fix wrong port_cap_flags
a2c17c93b7 iio: st_sensors: disable regulators after device unregistration
bfedc81776 iio: st_sensors: Call st_sensors_power_enable() from bus drivers
f84c7a03d1 of: unittest: fix EXPECT text for gpio hog errors
4a50bc0084 bpf: Fix propagation of signed bounds from 64-bit min/max into 32-bit.
84dde8c8c9 bpf: Fix propagation of bounds from 64-bit min/max into 32-bit and var_off.
9308f9c9c7 cgroup: Fix rootcg cpu.stat guest double counting
a3fdcd16b1 ibmvnic: Process crqs after enabling interrupts
5b3f720419 ibmvnic: don't stop queue in xmit
366235d4be udp6: allow SO_MARK ctrl msg to affect routing
8f3d88139d selftests/bpf: Fix fclose/pclose mismatch in test_progs
71ec65c700 crypto: pcrypt - Delay write to padata->info
fb41b8f5e8 net: phylink: avoid mvneta warning when setting pause parameters
08449a5c0e net: amd-xgbe: Toggle PLL settings during rate change
b17f424f88 selftests/bpf: Fix fd cleanup in sk_lookup test
2989a396b8 selftests: bpf: Convert sk_lookup ctx access tests to PROG_TEST_RUN
ae1f588ca1 drm/amdgpu/gmc6: fix DMA mask from 44 to 40 bits
a586453da9 wcn36xx: Fix discarded frames due to wrong sequence number
3965cc2e9f wcn36xx: add proper DMA memory barriers in rx path
62d12650b8 libertas: Fix possible memory leak in probe and disconnect
975c15a19b libertas_tf: Fix possible memory leak in probe and disconnect
3aa98ef8f7 KVM: s390: Fix handle_sske page fault handling
5109802499 samples/kretprobes: Fix return value if register_kretprobe() failed
c3ac751944 spi: spi-rpc-if: Check return value of rpcif_sw_init()
5b7b4afead tcp: don't free a FIN sk_buff in tcp_remove_empty_skb()
3925134eff libbpf: Fix endianness detection in BPF_CORE_READ_BITFIELD_PROBED()
227efdda51 tpm_tis_spi: Add missing SPI ID
ff1a0f71cc tpm: fix Atmel TPM crash caused by too frequent queries
43b4860b58 irq: mips: avoid nested irq_enter()
29a1cc3b50 KVM: s390: pv: avoid stalls for kvm_s390_pv_init_vm
759f27cfa3 KVM: s390: pv: avoid double free of sida page
a729eb55b3 s390/gmap: don't unconditionally call pte_unmap_unlock() in __gmap_zap()
50fcaa7155 libbpf: Fix BTF header parsing checks
12872fd7e4 libbpf: Fix overflow in BTF sanity checks
255eb8f8af libbpf: Allow loading empty BTFs
4d4d6aa2ef libbpf: Fix BTF data layout checks and allow empty BTF
0b95aaa493 bpftool: Avoid leaking the JSON writer prepared for program metadata
7cd4af996c KVM: selftests: Fix nested SVM tests when built with clang
293fa72d62 KVM: selftests: Add operand to vmsave/vmload/vmrun in svm.c
d337537181 smackfs: use netlbl_cfg_cipsov4_del() for deleting cipso_v4_doi
807f01f60c drm/msm: Fix potential NULL dereference in DPU SSPP
6d1f3157aa x86/sev: Fix stack type check in vc_switch_off_ist()
8e2f97df6a clocksource/drivers/timer-ti-dm: Select TIMER_OF
b9f142d748 PM: hibernate: fix sparse warnings
e8c0b74845 nvme-rdma: fix error code in nvme_rdma_setup_ctrl
7668cbe0cb phy: micrel: ksz8041nl: do not use power down mode
d405eb1150 net: enetc: unmap DMA in enetc_send_cmd()
14e12b7a76 mwifiex: Send DELBA requests according to spec
4ed5bb3df6 rsi: stop thread firstly in rsi_91x_init() error handling
e270226475 mt76: mt7915: fix muar_idx in mt7915_mcu_alloc_sta_req()
1a270dada0 mt76: mt7915: fix sta_rec_wtbl tag len
116652a3d5 mt76: mt7915: fix possible infinite loop release semaphore
7a8e4effbb mt76: mt76x02: fix endianness warnings in mt76x02_mac.c
4d5c7f07c7 mt76: mt7615: fix endianness warning in mt7615_mac_write_txwi
4187bf3310 platform/x86: thinkpad_acpi: Fix bitwise vs. logical warning
25c032c585 mmc: mxs-mmc: disable regulator on error and in the remove function
7c1c7ac9d1 media: ir_toy: assignment to be16 should be of correct type
daf15fa1fd net: stream: don't purge sk_error_queue in sk_stream_kill_queues()
14d2415772 drm/msm: uninitialized variable in msm_gem_import()
3424931fa3 drm/msm: potential error pointer dereference in init()
a342cb4772 tcp: switch orphan_count to bare per-cpu counters
c85c6fadbe kernel/sched: Fix sched_fork() access an invalid sched_task_group
e1ee11473a ath10k: fix max antenna gain unit
786976b25a hwmon: (pmbus/lm25066) Let compiler determine outer dimension of lm25066_coeff
fbc80c83f1 hwmon: Fix possible memleak in __hwmon_device_register()
e29352f162 net, neigh: Fix NTF_EXT_LEARNED in combination with NTF_USE
41fe79cf11 memstick: jmb38x_ms: use appropriate free function in jmb38x_ms_alloc_host()
4756d7fbaf memstick: avoid out-of-range warning
72de92d33f mmc: sdhci-omap: Fix context restore
2fd26ec36e mmc: sdhci-omap: Fix NULL pointer exception if regulator is not configured
a9fbeb5bbc gve: Recover from queue stall due to missed IRQ
9e4f708df6 b43: fix a lower bounds test
508faf8721 b43legacy: fix a lower bounds test
6a16100141 hwrng: mtk - Force runtime pm ops for sleep ops
8d98683fa6 crypto: qat - disregard spurious PFVF interrupts
d99fdd13a7 crypto: qat - detect PFVF collision after ACK
1fe4b24419 media: dvb-frontends: mn88443x: Handle errors of clk_prepare_enable()
740a794e01 netfilter: nft_dynset: relax superfluous check on set updates
af756be29c rcu: Always inline rcu_dynticks_task*_{enter,exit}()
6880325382 EDAC/amd64: Handle three rank interleaving mode
1b2d422a26 PM: EM: Fix inefficient states detection
d01e847d84 ath9k: Fix potential interrupt storm on queue reset
52e3545eef media: em28xx: Don't use ops->suspend if it is NULL
f03e0624e9 cpuidle: Fix kobject memory leaks in error paths
66f7de13d1 crypto: ecc - fix CRYPTO_DEFAULT_RNG dependency
848f1f00c6 kprobes: Do not use local variable when creating debugfs file
c34bfe4204 media: cx23885: Fix snd_card_free call on null card pointer
388cebfa73 media: tm6000: Avoid card name truncation
86626be4b6 media: si470x: Avoid card name truncation
88315edafe media: radio-wl1273: Avoid card name truncation
4280b30ea9 media: mtk-vpu: Fix a resource leak in the error handling path of 'mtk_vpu_probe()'
e43b301cb1 media: TDA1997x: handle short reads of hdmi info frame.
c85e591b77 media: v4l2-ioctl: S_CTRL output the right value
e2f3608a0b media: dvb-usb: fix ununit-value in az6027_rc_query
0a85325fc5 media: cxd2880-spi: Fix a null pointer dereference on error handling path
4303b39b50 media: em28xx: add missing em28xx_close_extension
375150b3aa drm/amdgpu: fix warning for overflow check
8980f9d144 arm64: mm: update max_pfn after memory hotplug
cbbf816cb7 drm/ttm: stop calling tt_swapin in vm_access
c39154d3d6 ath10k: sdio: Add missing BH locking around napi_schdule()
ffed645538 ath10k: Fix missing frame timestamp for beacon/probe-resp
08fb0008d9 ath11k: Fix memory leak in ath11k_qmi_driver_event_work
4519fb9105 ath11k: fix packet drops due to incorrect 6 GHz freq value in rx status
b6a46ec871 ath11k: Avoid race during regd updates
ac49af173c ath11k: fix some sleeping in atomic bugs
9833cb3206 net: dsa: rtl8366rb: Fix off-by-one bug
78fb8c9992 rxrpc: Fix _usecs_to_jiffies() by using usecs_to_jiffies()
03725f7125 crypto: caam - disable pkc for non-E SoCs
f0b40bf3e4 Bluetooth: btmtkuart: fix a memleak in mtk_hci_wmt_sync
310f581f54 wilc1000: fix possible memory leak in cfg_scan_result()
3a95dbc8b7 wcn36xx: Fix Antenna Diversity Switching
ba8ba76885 cgroup: Make rebind_subsystems() disable v2 controllers all at once
a585e04e34 net: net_namespace: Fix undefined member in key_remove_domain()
fb4a58f519 lockdep: Let lock_is_held_type() detect recursive read as read
38098444b7 virtio-gpu: fix possible memory allocation failure
582de9e385 drm/v3d: fix wait for TMU write combiner flush
f0bc12b848 objtool: Fix static_call list generation
b36ab509e1 x86/xen: Mark cpu_bringup_and_idle() as dead_end_function
abf37e855e objtool: Add xen_start_kernel() to noreturn list
6b72caabc4 MIPS: lantiq: dma: fix burst length for DEU
226d68fb6c rcu: Fix existing exp request check in sync_sched_exp_online_cleanup()
c20d8c1974 Bluetooth: fix init and cleanup of sco_conn.timeout_work
19337ed10e selftests/bpf: Fix strobemeta selftest regression
bc9199271c netfilter: conntrack: set on IPS_ASSURED if flows enters internal stream state
0c5e946794 parisc/kgdb: add kgdb_roundup() to make kgdb work with idle polling
a1ec31a0be parisc/unwind: fix unwinder when CONFIG_64BIT is enabled
ee75174f6a erofs: don't trigger WARN() when decompression fails
50a2d1229b task_stack: Fix end_of_stack() for architectures with upwards-growing stack
44d4c43bab parisc: fix warning in flush_tlb_all
d8166a27c6 selftests/core: fix conflicting types compile error for close_range()
6f038b1a94 drm/amd/display: dcn20_resource_construct reduce scope of FPU enabled
ddfcae9052 x86/hyperv: Protect set_hv_tscchange_cb() against getting preempted
c4cfdf5fa8 wcn36xx: Correct band/freq reporting on RX
a27095cda1 spi: bcm-qspi: Fix missing clk_disable_unprepare() on error in bcm_qspi_probe()
b917f9b946 btrfs: do not take the uuid_mutex in btrfs_rm_device
428bb3d71e btrfs: reflink: initialize return value to 0 in btrfs_extent_same()
eeb96ebdc6 ACPI: AC: Quirk GK45 to skip reading _PSR
42d8c280dd net: annotate data-race in neigh_output()
c2e5f43db0 vrf: run conntrack only in context of lower/physdev for locally generated packets
b3ae170b8e ARM: 9136/1: ARMv7-M uses BE-8, not BE-32
b870d8a76c gfs2: Fix glock_hash_walk bugs
16a7981188 gfs2: Cancel remote delete work asynchronously
9ceac307b5 gre/sit: Don't generate link-local addr if addr_gen_mode is IN6_ADDR_GEN_MODE_NONE
25a45d3999 ARM: clang: Do not rely on lr register for stacktrace
c11aecbe05 smackfs: use __GFP_NOFAIL for smk_cipso_doi()
32a9a8fdba iwlwifi: mvm: disable RX-diversity in powersave
e658d59f0e selftests/bpf: Fix perf_buffer test on system with offline cpus
d6dca066fc selftests: kvm: fix mismatched fclose() after popen()
9f4bd00a6e PM: hibernate: Get block device exclusively in swsusp_check()
7a0b68eecb nvme: drop scan_lock and always kick requeue list when removing namespaces
82327823f3 nvmet-tcp: fix use-after-free when a port is removed
2659d8213d nvmet-rdma: fix use-after-free when a port is removed
e73574f7bc nvmet: fix use-after-free when a port is removed
1a10bf4c9d media: allegro: ignore interrupt if mailbox is not initialized
49cc377654 block: remove inaccurate requeue check
451cef276f mwl8k: Fix use-after-free in mwl8k_fw_state_machine()
16c2dd0ab5 mt76: mt7915: fix an off-by-one bound check
ea7f8803a3 tracing/cfi: Fix cmp_entries_* functions signature mismatch
5736f1dead workqueue: make sysfs of unbound kworker cpumask more clever
ab5c46f258 lib/xz: Validate the value before assigning it to an enum variable
aa5d35e350 lib/xz: Avoid overlapping memcpy() with invalid input with in-place decompression
cad55afe37 memstick: r592: Fix a UAF bug when removing the driver
2338c35017 md: update superblock after changing rdev flags in state_store
b34ea3c91e block: bump max plugged deferred size from 16 to 32
517feec952 drm/msm: prevent NULL dereference in msm_gpu_crashstate_capture()
e1d7f0202a leaking_addresses: Always print a trailing newline
9101e2574b net: phy: micrel: make *-skew-ps check more lenient
832fad367c drm/amdkfd: fix resume error when iommu disabled in Picasso
65c84e09e8 ACPI: battery: Accept charges over the design capacity as full
b600866018 iov_iter: Fix iov_iter_get_pages{,_alloc} page fault return value
219df0f6ba mmc: moxart: Fix reference count leaks in moxart_probe
38608d32ad ath: dfs_pattern_detector: Fix possible null-pointer dereference in channel_detector_create()
3c2434d9a6 tracefs: Have tracefs directories not set OTH permission bits by default
8524501a0e net-sysfs: try not to restart the syscall if it will fail eventually
b94e5bd540 media: usb: dvd-usb: fix uninit-value bug in dibusb_read_eeprom_byte()
e3bc3e1141 media: ipu3-imgu: VIDIOC_QUERYCAP: Fix bus_info
b499d40571 media: ipu3-imgu: imgu_fmt: Handle properly try
272e54604c ACPICA: Avoid evaluating methods too early during system resume
f09e1a2d2c fs/proc/uptime.c: Fix idle time reporting in /proc/uptime
6e242c557a ipmi: Disable some operations during a panic
1f38e5e803 media: rcar-csi2: Add checking to rcsi2_start_receiver()
3d5575b3f5 brcmfmac: Add DMI nvram filename quirk for Cyberbook T116 tablet
7d54f52d8f rtw88: fix RX clock gate setting while fifo dump
d506a3d60d ia64: don't do IA64_CMPXCHG_DEBUG without CONFIG_PRINTK
2709971f9f media: mceusb: return without resubmitting URB in case of -EPROTO error.
40b8e7dee5 media: imx: set a media_device bus_info string
a62edd8390 media: s5p-mfc: Add checking to s5p_mfc_probe().
b570e36a77 media: s5p-mfc: fix possible null-pointer dereference in s5p_mfc_probe()
f4037b9b10 media: uvcvideo: Set unique vdev name based in type
d934941640 media: uvcvideo: Return -EIO for control errors
2052c4cebc media: uvcvideo: Set capability in s_param
0c91bb4fbd media: stm32: Potential NULL pointer dereference in dcmi_irq_thread()
309ea2248d media: atomisp: Fix error handling in probe
f4c652bd35 media: netup_unidvb: handle interrupt properly according to the firmware
09ee09359a media: mt9p031: Fix corrupted frame after restarting stream
aded39ff1f ath10k: high latency fixes for beacon buffer
461a71a1a6 ath11k: Change DMA_FROM_DEVICE to DMA_TO_DEVICE when map reinjected packets
43ab645788 ath11k: add handler for scan event WMI_SCAN_EVENT_DEQUEUED
97890f3633 ath11k: Avoid reg rules update during firmware recovery
2114f80889 drm/amdgpu: Fix MMIO access page fault
68ac723fb1 fscrypt: allow 256-bit master keys with AES-256-XTS
f526d948c3 mwifiex: Properly initialize private structure on interface type changes
bab15174ec mwifiex: Run SET_BSS_MODE when changing from P2P to STATION vif-type
7ca1711d59 x86: Increase exception stack sizes
1c04dabbd1 ath11k: Align bss_chan_info structure with firmware
3fac6feca9 smackfs: Fix use-after-free in netlbl_catmap_walk()
02ddf26d84 rcu-tasks: Move RTGS_WAIT_CBS to beginning of rcu_tasks_kthread() loop
8d433ab5c8 net: sched: update default qdisc visibility after Tx queue cnt changes
28118dcc87 locking/lockdep: Avoid RCU-induced noinstr fail
b92a5df2c7 MIPS: lantiq: dma: reset correct number of channel
5af57ce8a6 MIPS: lantiq: dma: add small delay after reset
396e302cc8 platform/x86: wmi: do not fail if disabling fails
7f43cda650 rcutorture: Avoid problematic critical section nesting on PREEMPT_RT
7987f31e54 drm/panel-orientation-quirks: add Valve Steam Deck
c10465f6d6 Bluetooth: fix use-after-free error in lock_sock_nested()
4dfba42604 Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg()
509ae4a4f0 drm: panel-orientation-quirks: Add quirk for the Samsung Galaxy Book 10.6
62b90d7eeb drm: panel-orientation-quirks: Add quirk for KD Kurio Smart C15200 2-in-1
780fff2c75 drm: panel-orientation-quirks: Update the Lenovo Ideapad D330 quirk (v2)
6758d66516 dma-buf: WARN on dmabuf release with pending attachments
890e4edcec power: supply: max17042_battery: Clear status bits in interrupt handler
898622adb7 USB: chipidea: fix interrupt deadlock
6edf4cffe1 USB: iowarrior: fix control-message timeouts
0e71591e91 most: fix control-message timeouts
edc5466254 serial: 8250: fix racy uartclk update
5f31af4e78 USB: serial: keyspan: fix memleak on probe errors
ab4755ea91 iio: ad5770r: make devicetree property reading consistent
6384620608 iio: dac: ad5446: Fix ad5622_write() return value
a4e7a8c432 coresight: cti: Correct the parameter for pm_runtime_put
46709163a5 pinctrl: core: fix possible memory leak in pinctrl_enable()
6bc8317b8c quota: correct error number in free_dqentry()
ceeb0a8a87 quota: check block number when reading the block in quota file
bc1274df3f PCI: aardvark: Fix support for PCI_ROM_ADDRESS1 on emulated bridge
e2e8961fbc PCI: aardvark: Set PCI Bridge Class Code to PCI Bridge
bd5d982822 PCI: aardvark: Fix support for PCI_BRIDGE_CTL_BUS_RESET on emulated bridge
2b99c6fb65 PCI: aardvark: Fix support for bus mastering and PCI_COMMAND on emulated bridge
4bb5399c1c PCI: aardvark: Read all 16-bits from PCIE_MSI_PAYLOAD_REG
2ad10bbf84 PCI: aardvark: Fix return value of MSI domain .alloc() method
6a0da19be5 PCI: aardvark: Fix configuring Reference clock
5fb031fcd4 PCI: aardvark: Fix reporting Data Link Layer Link Active
2b861523d7 PCI: aardvark: Do not unmask unused interrupts
1085ee5236 PCI: aardvark: Fix checking for link up via LTSSM state
3bcbace714 PCI: aardvark: Do not clear status bits of masked interrupts
c1a8fb2374 PCI: cadence: Add cdns_plat_pcie_probe() missing return
adcfc317d3 PCI: pci-bridge-emul: Fix emulation of W1C bits
4fd9f0509a ovl: fix use after free in struct ovl_aio_req
af7d25d785 xen/balloon: add late_initcall_sync() for initial ballooning done
96e7880a43 ALSA: mixer: fix deadlock in snd_mixer_oss_set_volume
694c0c84a6 ALSA: mixer: oss: Fix racy access to slots
cd0b29a89b ifb: fix building without CONFIG_NET_CLS_ACT
47462c5e60 serial: core: Fix initializing and restoring termios speed
c1e6e42740 ring-buffer: Protect ring_buffer_reset() from reentrancy
93fccb1f89 powerpc/85xx: Fix oops when mpc85xx_smp_guts_ids node cannot be found
875609ad80 can: j1939: j1939_can_recv(): ignore messages with invalid source address
c3cb7b5c9d can: j1939: j1939_tp_cmd_recv(): ignore abort message in the BAM transport
9f9d6d391f KVM: nVMX: Query current VMCS when determining if MSR bitmaps are in use
bd37419f4f KVM: arm64: Extract ESR_ELx.EC only
924955df37 power: supply: max17042_battery: use VFSOC for capacity when no rsns
f2feac81ed power: supply: max17042_battery: Prevent int underflow in set_soc_threshold
5720436bc7 mtd: rawnand: socrates: Keep the driver compatible with on-die ECC engines
7e867f8bb3 soc: fsl: dpio: use the combined functions to protect critical zone
55c97165ad soc: fsl: dpio: replace smp_processor_id with raw_smp_processor_id
62bd9eac5f signal/mips: Update (_save|_restore)_fp_context to fail with -EFAULT
5e63b85a48 memory: renesas-rpc-if: Correct QSPI data transfer in Manual mode
4fbecebb31 signal: Remove the bogus sigkill_pending in ptrace_stop
5c6fedce4a RDMA/qedr: Fix NULL deref for query_qp on the GSI QP
30cdf50357 perf/x86/intel/uncore: Fix Intel ICX IIO event constraints
aef1a67fbf perf/x86/intel/uncore: Support extra IMC channel on Ice Lake server
da8b3b95c5 rsi: Fix module dev_oper_mode parameter description
d69ffec3aa rsi: fix rate mask set leading to P2P failure
41d97e0360 rsi: fix key enabled check causing unwanted encryption for vap_id > 0
46752a7aed rsi: fix occasional initialisation failure with BT coex
a194e9c721 wcn36xx: handle connection loss indication
701cf28e01 libata: fix checking of DMA state
890e416c02 mwifiex: Try waking the firmware until we get an interrupt
d59d2f7af7 mwifiex: Read a PCI register after writing the TX ring write pointer
daccf40320 PM: sleep: Do not let "syscore" devices runtime-suspend during system transitions
1c422d6301 wcn36xx: Fix (QoS) null data frame bitrate/modulation
c1b8ad661f wcn36xx: Fix tx_status mechanism
3d62e1c9bc wcn36xx: Fix HT40 capability for 2Ghz band
c044f34ca2 ifb: Depend on netfilter alternatively to tc
c7400e2ec8 evm: mark evm_fixmode as __ro_after_init
eab090dfcb rtl8187: fix control-message timeouts
73b79ada4c PCI: Mark Atheros QCA6174 to avoid bus reset
30182b8c13 ath10k: fix division by zero in send path
ce56007609 ath10k: fix control-message timeout
1336b2af8a ath6kl: fix control-message timeout
f34487c7f2 ath6kl: fix division by zero in send path
fd1e4d8c61 mwifiex: fix division by zero in fw download path
a5d8d76710 EDAC/sb_edac: Fix top-of-high-memory value for Broadwell/Haswell
31f5c92546 regulator: dt-bindings: samsung,s5m8767: correct s5m8767,pmic-buck-default-dvs-idx property
02ecf56faa regulator: s5m8767: do not use reset value as DVS voltage if GPIO DVS is disabled
5b7e3bb163 hwmon: (pmbus/lm25066) Add offset coefficients
db04fb4111 selinux: fix race condition when computing ocontext SIDs
a09a5f4c07 ia64: kprobes: Fix to pass correct trampoline address to the handler
2f65b76c44 KVM: VMX: Unregister posted interrupt wakeup handler on hardware unsetup
b4a4c9dc44 btrfs: call btrfs_check_rw_degradable only if there is a missing device
b406439afe btrfs: fix lost error handling when replaying directory deletes
8992aab294 btrfs: clear MISSING device status bit in btrfs_close_one_device
a99da5b680 rds: stop using dmapool
0bfb1c1a16 net/smc: Correct spelling mistake to TCPF_SYN_RECV
9b86eb2f34 net/smc: Fix smc_link->llc_testlink_time overflow
2167a9a12c nfp: bpf: relax prog rejection for mtu check through max_pkt_offset
c9a7d5fe15 vmxnet3: do not stop tx queues after netif_device_detach()
9813218e96 r8169: Add device 10ec:8162 to driver r8169
ad6a2a1e56 nvmet-tcp: fix header digest verification
c8270435cf block: schedule queue restart after BLK_STS_ZONE_RESOURCE
7d1fb5c12c drm: panel-orientation-quirks: Add quirk for GPD Win3
4d41059b9e watchdog: Fix OMAP watchdog early handling
b8cb3f4ffa net: multicast: calculate csum of looped-back and forwarded packets
07f7a18649 spi: spl022: fix Microwire full duplex mode
db1d9d102e nvmet-tcp: fix a memory leak when releasing a queue
0e86b727a9 xen/netfront: stop tx queues during live migration
69b14e23df gpio: mlxbf2.c: Add check for bgpio_init failure
b92ac0a9ca bpf: Prevent increasing bpf_jit_limit above max
a3564fb7b0 bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT
0ad7f317b9 fcnal-test: kill hanging ping/nettest binaries on cleanup
bc3e73ebb7 drm: panel-orientation-quirks: Add quirk for Aya Neo 2021
4002f3944d mmc: winbond: don't build on M68K
a1ea41f91d reset: socfpga: add empty driver allowing consumers to probe
a903984385 ARM: dts: sun7i: A20-olinuxino-lime2: Fix ethernet phy-mode
f03e04bb9d hyperv/vmbus: include linux/bitops.h
6491ccdde2 sfc: Don't use netif_info before net_device setup
e519acba2f sfc: Export fibre-specific supported link modes
7986fdbbe0 cavium: Fix return values of the probe function
ad01685177 mISDN: Fix return values of the probe function
a6cb5e09e1 scsi: qla2xxx: Fix unmap of already freed sgl
77fee241e6 scsi: qla2xxx: Return -ENOMEM if kzalloc() fails
940783d08d cavium: Return negative value when pci_alloc_irq_vectors() fails
75710d583c ALSA: hda/realtek: Fixes HP Spectre x360 15-eb1xxx speakers
92556e3c2b ASoC: soc-core: fix null-ptr-deref in snd_soc_del_component_unlocked()
73199aadcd x86/irq: Ensure PI wakeup handler is unregistered before module unload
df8a74fc15 x86/cpu: Fix migration safety with X86_BUG_NULL_SEL
115810a265 x86/sme: Use #define USE_EARLY_PGTABLE_L5 in mem_encrypt_identity.c
b05eea1bcb fuse: fix page stealing
d81e341fb1 ext4: refresh the ext4_ext_path struct after dropping i_data_sem.
4089432dc0 ext4: ensure enough credits in ext4_ext_shift_path_extents
aa21b7e3d3 ext4: fix lazy initialization next schedule time computation in more granular unit
782025948b ALSA: timer: Unconditionally unlink slave instances, too
b980ce4ebb ALSA: timer: Fix use-after-free problem
7c6fd52504 ALSA: synth: missing check for possible NULL after the call to kstrdup
ecd536c57a ALSA: hda: Free card instance properly at probe errors
f503a25a3d ALSA: usb-audio: Add registration quirk for JBL Quantum 400
9259518fab ALSA: usb-audio: Line6 HX-Stomp XL USB_ID for 48k-fixed quirk
3c7a3f2d79 ALSA: line6: fix control and interrupt message timeouts
21f9c02a4d ALSA: 6fire: fix control and bulk message timeouts
0e4c288a74 ALSA: ua101: fix division by zero at probe
4f9e9c389e ALSA: hda/realtek: Add quirk for HP EliteBook 840 G7 mute LED
62b189f9f3 ALSA: hda/realtek: Add quirk for ASUS UX550VE
a770cb746b ALSA: hda/realtek: Add a quirk for Acer Spin SP513-54N
88bcfcc50d ALSA: hda/realtek: Headset fixup for Clevo NH77HJQ
0288f838a2 ALSA: hda/realtek: Add quirk for Clevo PC70HS
3d0e5d2eaf ALSA: hda/realtek: Add a quirk for HP OMEN 15 mute LED
f0750e9801 ALSA: hda/realtek: Fix mic mute LED for the HP Spectre x360 14
a2b3dbc9fd media: v4l2-ioctl: Fix check_ext_ctrls
151eff5880 media: ir-kbd-i2c: improve responsiveness of hauppauge zilog receivers
71a137376b media: rkvdec: Support dynamic resolution changes
b2b5126a77 media: ite-cir: IR receiver stop working after receive overflow
39275d2ec6 media: rkvdec: Do not override sizeimage for output format
949c5b6daa crypto: s5p-sss - Add error handling in s5p_aes_probe()
9ac25cd2f4 firmware/psci: fix application of sizeof to pointer
dd189feeba tpm: Check for integer overflow in tpm2_map_response_body()
32498b8889 parisc: Fix ptrace check on syscall return
15b4142aea parisc: Fix set_fixmap() on PA1.x CPUs
284ad31054 exfat: fix incorrect loading of i_blocks for large files
823b487cfb mmc: dw_mmc: Dont wait for DRTO on Write RSP error
7b24b669d3 mmc: mtk-sd: Add wait dma stop done flow
c1d31266de scsi: qla2xxx: Fix use after free in eh_abort path
37b15db1d8 scsi: qla2xxx: Fix kernel crash when accessing port_speed sysfs file
06cc8187db scsi: core: Remove command size deduction from scsi_setup_scsi_cmnd()
9d623bf173 ocfs2: fix data corruption on truncate
39264eaa6d libata: fix read log timeout value
ab0a06769e Input: i8042 - Add quirk for Fujitsu Lifebook T725
8c341d11c8 Input: elantench - fix misreporting trackpoint coordinates
d1eb42de7c Input: iforce - fix control-message timeout
afbec52fbc binder: use cred instead of task for getsecid
0d9f4ae7cd binder: use cred instead of task for selinux checks
bd9cea41ac binder: use euid from cred instead of using task
7f1d5a1a7d usb: xhci: Enable runtime-pm by default on AMD Yellow Carp platform
ff32302687 xhci: Fix USB 3.1 enumeration issues by increasing roothub power-on-good delay
87acf4924e ANDROID: GKI: fix up abi break in ehci code
525e61a871 Merge 5.10.79 into android12-5.10-lts
bd816c2783 Linux 5.10.79
62424fe4c2 rsi: fix control-message timeout
8971158af1 media: staging/intel-ipu3: css: Fix wrong size comparison imgu_css_fw_init
1cf43e9289 staging: rtl8192u: fix control-message timeouts
9963ba5b9d staging: r8712u: fix control-message timeout
844b02496e comedi: vmk80xx: fix bulk and interrupt message timeouts
b7fd7f3387 comedi: vmk80xx: fix bulk-buffer overflow
33d7a47073 comedi: vmk80xx: fix transfer-buffer overflows
ef143dc0c3 comedi: ni_usb6501: fix NULL-deref in command paths
786f5b0345 comedi: dt9812: fix DMA buffers on stack
86d4aedcbc isofs: Fix out of bound access for corrupted isofs image
c430094541 staging: rtl8712: fix use-after-free in rtl8712_dl_fw
ab4af56ae2 printk/console: Allow to disable console output by using console="" or console=null
07d1db141e binder: don't detect sender/target during buffer cleanup
42681b90c4 usb-storage: Add compatibility quirk flags for iODD 2531/2541
1309753b78 usb: musb: Balance list entry in musb_gadget_queue
2740914312 usb: gadget: Mark USB_FSL_QE broken on 64-bit
94e5305a38 usb: ehci: handshake CMD_RUN instead of STS_HALT
a8db6fd04d Revert "x86/kvm: fix vcpu-id indexed array sizes"
ecf58653f1 KVM: x86: avoid warning with -Wbitwise-instead-of-logical
be686d451e Merge branch 'android12-5.10' into `android12-5.10-lts`
bb235e8cc2 Merge 5.10.78 into android12-5.10-lts
5040520482 Linux 5.10.78
4c7c024327 ALSA: usb-audio: Add Audient iD14 to mixer map quirk table
f3eb44f496 ALSA: usb-audio: Add Schiit Hel device to mixer map quirk table
68765fc977 Revert "wcn36xx: Disable bmps when encryption is disabled"
f84b791d4c ARM: 9120/1: Revert "amba: make use of -1 IRQs warn"
bbc920fb32 Revert "drm/ttm: fix memleak in ttm_transfered_destroy"
6d67b2a73b mm: khugepaged: skip huge page collapse for special files
5a7957491e Revert "usb: core: hcd: Add support for deferring roothub registration"
50f46bd309 Revert "xhci: Set HCD flag to defer primary roothub registration"
d7fc85f610 media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt()
b93a70bf2b net: ethernet: microchip: lan743x: Fix skb allocation failure
b9c85a71e1 vrf: Revert "Reset skb conntrack connection..."
0382fdf9ae sfc: Fix reading non-legacy supported link modes
748786564a Revert "io_uring: reinforce cancel on flush during exit"
7b57c38d12 scsi: core: Put LLD module refcnt after SCSI device is released
a7c8ce8460 Merge branch 'android12-5.10' into `android12-5.10-lts`
76698ea35f ANDROID: GKI: fix up abi breakage from "cfg80211: fix management registrations locking"
a739489620 Merge 5.10.77 into android12-5.10-lts
09df347cfd Linux 5.10.77
fbb91dadb5 perf script: Check session->header.env.arch before using it
6f416815c5 riscv: Fix asan-stack clang build
7a4cf25d83 riscv: fix misalgned trap vector base address
acb8832f6a scsi: ufs: ufs-exynos: Correct timeout value setting registers
8ecddaca79 KVM: s390: preserve deliverable_mask in __airqs_kick_single_vcpu
e11a7355fb KVM: s390: clear kicked_mask before sleeping again
727e5deca8 lan743x: fix endianness when accessing descriptors
a7112b8eeb sctp: add vtag check in sctp_sf_ootb
c2442f7219 sctp: add vtag check in sctp_sf_do_8_5_1_E_sa
14c1e02b11 sctp: add vtag check in sctp_sf_violation
dad2486414 sctp: fix the processing for COOKIE_ECHO chunk
8c50693d25 sctp: fix the processing for INIT_ACK chunk
ad111d4435 sctp: use init_tag from inithdr for ABORT chunk
4509000a25 phy: phy_ethtool_ksettings_set: Lock the PHY while changing settings
5b88bb9377 phy: phy_start_aneg: Add an unlocked version
81780b624d phy: phy_ethtool_ksettings_set: Move after phy_start_aneg
258c5fea44 phy: phy_ethtool_ksettings_get: Lock the phy for consistency
58722323d4 net/tls: Fix flipped sign in async_wait.err assignment
44e8c93e1e net: nxp: lpc_eth.c: avoid hang when bringing interface down
c2af2092c9 net: ethernet: microchip: lan743x: Fix dma allocation failure by using dma_set_mask_and_coherent
bfa6fbdb4e net: ethernet: microchip: lan743x: Fix driver crash when lan743x_pm_resume fails
e81bed557f mlxsw: pci: Recycle received packet upon allocation failure
be98be1a17 nios2: Make NIOS2_DTB_SOURCE_BOOL depend on !COMPILE_TEST
aead02927a gpio: xgs-iproc: fix parsing of ngpios property
863a423ee0 RDMA/sa_query: Use strscpy_pad instead of memcpy to copy a string
2b7c5eed19 net: Prevent infinite while loop in skb_tx_hash()
04121b10cd cfg80211: correct bridge/4addr mode check
aed897e96b net-sysfs: initialize uid and gid before calling net_ns_get_ownership
b0a2cd3855 net: batman-adv: fix error handling
36e911a16b regmap: Fix possible double-free in regcache_rbtree_exit()
e51371bd68 reset: brcmstb-rescal: fix incorrect polarity of status bit
2cf7d935d6 arm64: dts: allwinner: h5: NanoPI Neo 2: Fix ethernet node
10e40fb2f5 RDMA/mlx5: Set user priority for DCT
24fd8e2f02 octeontx2-af: Display all enabled PF VF rsrc_alloc entries.
c63d7f2ca9 nvme-tcp: fix possible req->offset corruption
32f3db20f1 nvme-tcp: fix data digest pointer calculation
4286c72c53 nvmet-tcp: fix data digest pointer calculation
d98883f6c3 IB/hfi1: Fix abba locking issue with sc_disable()
c3e17e58f5 IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields
ee4908f909 bpf: Fix error usage of map_fd and fdget() in generic_map_update_batch()
dd2260ec64 bpf: Fix potential race in tail call compatibility check
15dec6d8f8 tcp_bpf: Fix one concurrency problem in the tcp_bpf_send_verdict function
cac6b043ce riscv, bpf: Fix potential NULL dereference
01599bf7cc cgroup: Fix memory leak caused by missing cgroup_bpf_offline
eb3b6805e3 drm/amdgpu: fix out of bounds write
c21b400221 drm/ttm: fix memleak in ttm_transfered_destroy
69a7fa5cb0 mm, thp: bail out early in collapse_file for writeback page
8fb858b74a net: lan78xx: fix division by zero in send path
4c22227e39 cfg80211: fix management registrations locking
fa29cec42c cfg80211: scan: fix RCU in cfg80211_add_nontrans_list()
db1191a529 nvme-tcp: fix H2CData PDU send accounting (again)
5043fbd294 ocfs2: fix race between searching chunks and release journal_head from buffer_head
01169a4335 mmc: sdhci-esdhc-imx: clear the buffer_read_ready to reset standard tuning circuit
ee3213b117 mmc: sdhci: Map more voltage level to SDHCI_POWER_330
a95a76fc01 mmc: dw_mmc: exynos: fix the finding clock sample value
12a46f72f4 mmc: mediatek: Move cqhci init behind ungate clock
44c2bc2a6b mmc: cqhci: clear HALT state after CQE enable
efe934629f mmc: vub300: fix control-message timeouts
f3dec7e7ac net/tls: Fix flipped sign in tls_err_abort() calls
c828115a14 Revert "net: mdiobus: Fix memory leak in __mdiobus_register"
11c0406b4c nfc: port100: fix using -ERRNO as command type mask
0b1b3e086b tipc: fix size validations for the MSG_CRYPTO type
5aa5bab579 ata: sata_mv: Fix the error handling of mv_chip_id()
9a52798dce pinctrl: amd: disable and mask interrupts on probe
01c2881bb0 Revert "pinctrl: bcm: ns: support updated DT binding as syscon subnode"
017718dfbb usbnet: fix error return code in usbnet_probe()
693ecbe8f7 usbnet: sanity check for maxpacket
b663890d85 ext4: fix possible UAF when remounting r/o a mmp-protected file system
d4d9c06598 arm64: Avoid premature usercopy failure
e184a21b5c powerpc/bpf: Fix BPF_MOD when imm == 1
3f2c12ec8a io_uring: don't take uring_lock during iowq cancel
5a768b4d3e ARM: 9141/1: only warn about XIP address when not compile testing
15b278f94b ARM: 9139/1: kprobes: fix arch_init_kprobes() prototype
c06d7d9bfc ARM: 9138/1: fix link warning with XIP + frame-pointer
8a6af97c31 ARM: 9134/1: remove duplicate memcpy() definition
6ad8bbc9d3 ARM: 9133/1: mm: proc-macros: ensure *_tlb_fns are 4B aligned
3ceaa85c33 ARM: 9132/1: Fix __get_user_check failure with ARM KASAN images
4944ec82eb Merge 5.10.76 into android12-5.10-lts
378e85d1ae Linux 5.10.76
cfa79faf7e pinctrl: stm32: use valid pin identifier in stm32_pinctrl_resume()
c56c801391 ARM: 9122/1: select HAVE_FUTEX_CMPXCHG
d088db8637 selftests: bpf: fix backported ASSERT_FALSE
3a845fa00f e1000e: Separate TGP board type from SPT
021b6d11e5 tracing: Have all levels of checks prevent recursion
3a0dc2e35a net: mdiobus: Fix memory leak in __mdiobus_register
cfe9266213 bpf, test, cgroup: Use sk_{alloc,free} for test cases
188907c252 s390/pci: fix zpci_zdev_put() on reserve
f18b90e936 can: isotp: isotp_sendmsg(): fix TX buffer concurrent access in isotp_sendmsg()
2304dfb548 scsi: core: Fix shost->cmd_per_lun calculation in scsi_add_host_with_dma()
c58654f344 net: hns3: fix for miscalculation of rx unused desc
96fe506129 sched/scs: Reset the shadow stack when idle_task_exit
96f0aebf29 scsi: qla2xxx: Fix a memory leak in an error path of qla2x00_process_els()
90c8e8c082 scsi: iscsi: Fix set_param() handling
0eb2544796 Input: snvs_pwrkey - add clk handling
ea9c1f5d8a perf/x86/msr: Add Sapphire Rapids CPU support
7a5a1f09c8 libperf tests: Fix test_stat_cpu
e56a3e7ae3 ALSA: hda: avoid write to STATESTS if controller is in reset
85c8d8c160 platform/x86: intel_scu_ipc: Update timeout value in comment
9f591cbdbe isdn: mISDN: Fix sleeping function called from invalid context
ab4f542b51 ARM: dts: spear3xx: Fix gmac node
15d3ad7988 net: stmmac: add support for dwmac 3.40a
f9d16a4284 btrfs: deal with errors when checking if a dir entry exists during log replay
369db2a91d ALSA: hda: intel: Allow repeatedly probing on codec configuration errors
81d8e70cdc gcc-plugins/structleak: add makefile var for disabling structleak
69078a9436 net: hns3: fix the max tx size according to user manual
f40c2281d2 drm: mxsfb: Fix NULL pointer dereference crash on unload
96835b68d7 net: bridge: mcast: use multicast_membership_interval for IGMPv3
0e033cb407 selftests: netfilter: remove stray bash debug line
f8a6541345 netfilter: Kconfig: use 'default y' instead of 'm' for bool config option
7f221ccbee isdn: cpai: check ctr->cnr to avoid array index out of bound
77c0ef979e nfc: nci: fix the UAF of rf_conn_info object
8f042315fc KVM: nVMX: promptly process interrupts delivered while in guest mode
b41fd8f5d2 mm, slub: fix incorrect memcg slab count for bulk free
568f906340 mm, slub: fix potential memoryleak in kmem_cache_open()
48843dd23c mm, slub: fix mismatch between reconstructed freelist depth and cnt
c5c2a80368 powerpc/idle: Don't corrupt back chain when going idle
197ec50b2d KVM: PPC: Book3S HV: Make idle_kvm_start_guest() return 0 if it went to guest
fbd724c49b KVM: PPC: Book3S HV: Fix stack handling in idle_kvm_start_guest()
9258f58432 powerpc64/idle: Fix SP offsets when saving GPRs
3e16d9d525 net: dsa: mt7530: correct ds->num_ports
16802fa4c3 audit: fix possible null-pointer dereference in audit_filter_rules
0d867a3599 ASoC: DAPM: Fix missing kctl change notifications
a2606acf41 ALSA: hda/realtek: Add quirk for Clevo PC50HS
6411397b6d ALSA: usb-audio: Provide quirk for Sennheiser GSP670 Headset
b721500c97 vfs: check fd has read access in kernel_read_file_from_fd()
895ceeff31 elfcore: correct reference to CONFIG_UML
3cda4bfffd userfaultfd: fix a race between writeprotect and exit_mmap()
93be0eeea1 ocfs2: mount fails with buffer overflow in strlen
f1b98569e8 ocfs2: fix data corruption after conversion from inline format
1727e8688d ceph: fix handling of "meta" errors
603d4bcc0f ceph: skip existing superblocks that are blocklisted or shut down when mounting
d48db508f9 can: j1939: j1939_xtp_rx_rts_session_new(): abort TP less than 9 bytes
5abc9b9d3c can: j1939: j1939_xtp_rx_dat_one(): cancel session if receive TP.DT with error length
864e77771a can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv
ecfccb1c58 can: j1939: j1939_tp_rxtimer(): fix errant alert in j1939_tp_rxtimer
053bc12df0 can: isotp: isotp_sendmsg(): add result check for wait_event_interruptible()
0917fb0406 can: isotp: isotp_sendmsg(): fix return error on FC timeout on TX path
28f28e4bc3 can: peak_pci: peak_pci_remove(): fix UAF
9697ad6395 can: peak_usb: pcan_usb_fd_decode_status(): fix back to ERROR_ACTIVE state notification
4758e92e75 can: rcar_can: fix suspend/resume
4a0928c3eb net: enetc: fix ethtool counter name for PM0_TERR
00ad7a0154 drm/panel: ilitek-ili9881c: Fix sync for Feixin K101-IM2BYL02 panel
eccd00728b ice: Add missing E810 device ids
6418508a3a e1000e: Fix packet loss on Tiger Lake and later
29f1bdcaa3 net: stmmac: Fix E2E delay mechanism
d36b15e3e7 net: hns3: disable sriov before unload hclge layer
6a72e1d78a net: hns3: fix vf reset workqueue cannot exit
32b860d364 net: hns3: schedule the polling again when allocation fails
96c013f40c net: hns3: add limit ets dwrr bandwidth cannot be 0
21f61d1043 net: hns3: reset DWRR of unused tc to zero
53770a4115 powerpc/smp: do not decrement idle task preempt count in CPU offline
81dbd898fb NIOS2: irqflags: rename a redefined register name
6edf99b000 net: dsa: lantiq_gswip: fix register definition
ef97219d5f ipv6: When forwarding count rx stats on the orig netdev
38d984e5e8 tcp: md5: Fix overlap between vrf and non-vrf keys
c28bea6b87 lan78xx: select CRC32
9c8943812d netfilter: ipvs: make global sysctl readonly in non-init netns
911e01990c netfilter: ip6t_rt: fix rt0_hdr parsing in rt_mt6
69ea08c1b5 ice: fix getting UDP tunnel entry
842fce4319 ASoC: wm8960: Fix clock configuration on slave mode
39afed394c dma-debug: fix sg checks in debug_dma_map_sg()
2a670c3230 netfilter: xt_IDLETIMER: fix panic that occurs when timer_type has garbage value
0f4308a164 NFSD: Keep existing listeners on portlist error
546c04c857 xtensa: xtfpga: Try software restart before simulating CPU reset
bfef5d8262 xtensa: xtfpga: use CONFIG_USE_OF instead of CONFIG_OF
d8284c981c drm/amdgpu/display: fix dependencies for DRM_AMD_DC_SI
101e1bcb11 xen/x86: prevent PVH type from getting clobbered
a6285b1b22 block: decode QUEUE_FLAG_HCTX_ACTIVE in debugfs output
85c1827eee ARM: dts: at91: sama5d2_som1_ek: disable ISC node by default
5489c1bed5 arm: dts: vexpress-v2p-ca9: Fix the SMB unit-address
f59da9f7ef io_uring: fix splice_fd_in checks backport typo
b6f32897af xhci: add quirk for host controllers that don't update endpoint DCS
b3b7f831a4 parisc: math-emu: Fix fall-through warnings
234d53d2bb Merge branch 'android12-5.10' into `android12-5.10-lts`
221975092a Merge 5.10.75 into android12-5.10-lts
3a9842b42e Linux 5.10.75
3e28736521 net: dsa: mv88e6xxx: don't use PHY_DETECT on internal PHY's
3593fa147c ionic: don't remove netdev->dev_addr when syncing uc list
f33890d9bb net: mscc: ocelot: warn when a PTP IRQ is raised for an unknown skb
9c546af181 nfp: flow_offload: move flow_indr_dev_register from app init to app start
6da9af2d25 r8152: select CRC32 and CRYPTO/CRYPTO_HASH/CRYPTO_SHA256
ecfd4fa15b qed: Fix missing error code in qed_slowpath_start()
51f6e72ca6 mqprio: Correct stats in mqprio_dump_class_stats().
fdaff7f9e8 platform/x86: intel_scu_ipc: Fix busy loop expiry time
057ee6843b acpi/arm64: fix next_platform_timer() section mismatch error
c6b2400095 drm/msm/dsi: fix off by one in dsi_bus_clk_enable error handling
2c56587174 drm/msm/dsi: Fix an error code in msm_dsi_modeset_init()
b28586fb04 drm/msm/a6xx: Track current ctx by seqno
abd1186415 drm/msm/mdp5: fix cursor-related warnings
91a340768b drm/msm: Fix null pointer dereference on pointer edp
a7b45024f6 drm/edid: In connector_bad_edid() cap num_of_ext by num_blocks read
d0f0e17103 drm/panel: olimex-lcd-olinuxino: select CRC32
a4a37e6516 spi: bcm-qspi: clear MSPI spifie interrupt during probe
d9428f08e1 platform/mellanox: mlxreg-io: Fix read access of n-bytes size attributes
c216cebdd2 platform/mellanox: mlxreg-io: Fix argument base in kstrtou32() call
e59d839743 mlxsw: thermal: Fix out-of-bounds memory accesses
7eef482db7 ata: ahci_platform: fix null-ptr-deref in ahci_platform_enable_regulators()
116932c0e4 pata_legacy: fix a couple uninitialized variable bugs
50cb95487c NFC: digital: fix possible memory leak in digital_in_send_sdd_req()
3f2960b39f NFC: digital: fix possible memory leak in digital_tg_listen_mdaa()
2f21f06a5e nfc: fix error handling of nfc_proto_register()
ba39f55952 vhost-vdpa: Fix the wrong input in config_cb
84e0f2fc66 ethernet: s2io: fix setting mac address during resume
e19c10d6e0 net: encx24j600: check error in devm_regmap_init_encx24j600
f2e1de0750 net: dsa: microchip: Added the condition for scheduling ksz_mib_read_work
9053c5b459 net: stmmac: fix get_hw_feature() on old hardware
12da46cb6a net/mlx5e: Mutually exclude RX-FCS and RX-port-timestamp
4f7bddf8c5 net/mlx5e: Fix memory leak in mlx5_core_destroy_cq() error path
afb0c67dfd net: korina: select CRC32
33ca850105 net: arc: select CRC32
17a027aafd gpio: pca953x: Improve bias setting
d84a69ac41 sctp: account stream padding length for reconf chunk
6fecdb5b54 nvme-pci: Fix abort command id
2d937cc12c ARM: dts: bcm2711-rpi-4-b: Fix pcie0's unit address formatting
6e6082250b ARM: dts: bcm2711-rpi-4-b: fix sd_io_1v8_reg regulator states
48613e687e ARM: dts: bcm2711: fix MDIO #address- and #size-cells
6e6e3018d3 ARM: dts: bcm2711-rpi-4-b: Fix usb's unit address
76644f9459 tee: optee: Fix missing devices unregister during optee_remove
07f8856824 iio: dac: ti-dac5571: fix an error code in probe()
6c0024bcaa iio: ssp_sensors: fix error code in ssp_print_mcu_debug()
0fbc3cf7dd iio: ssp_sensors: add more range checking in ssp_parse_dataframe()
abe5b13dd9 iio: adc: max1027: Fix the number of max1X31 channels
41e84a4f25 iio: light: opt3001: Fixed timeout error when 0 lux
e811506f60 iio: mtk-auxadc: fix case IIO_CHAN_INFO_PROCESSED
1671cfd31b iio: adc: max1027: Fix wrong shift with 12-bit devices
f931076d32 iio: adc128s052: Fix the error handling path of 'adc128_probe()'
4425d059aa iio: adc: ad7793: Fix IRQ flag
d078043a17 iio: adc: ad7780: Fix IRQ flag
a8177f0576 iio: adc: ad7192: Add IRQ flag
be8ef91d61 driver core: Reject pointless SYNC_STATE_ONLY device links
d5f13bbb51 drivers: bus: simple-pm-bus: Add support for probing simple bus only devices
b45923f66e iio: adc: aspeed: set driver data when adc probe.
ea947267eb powerpc/xive: Discard disabled interrupts in get_irqchip_state()
9e46bdfb55 x86/Kconfig: Do not enable AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT automatically
57e4888640 nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells
a7bd0dd3f2 EDAC/armada-xp: Fix output of uncorrectable error counter
92e6e08ca2 virtio: write back F_VERSION_1 before validate
86e3ad8b75 misc: fastrpc: Add missing lock before accessing find_vma()
3f0ca245a8 USB: serial: option: add prod. id for Quectel EG91
ecad614b0c USB: serial: option: add Telit LE910Cx composition 0x1204
bf26bc72dc USB: serial: option: add Quectel EC200S-CN module support
d4b77900cf USB: serial: qcserial: add EM9191 QDL support
3147f57215 Input: xpad - add support for another USB ID of Nacon GC-100
9d89e28711 usb: musb: dsps: Fix the probe error path
3b42751401 efi: Change down_interruptible() in virt_efi_reset_system() to down_trylock()
5100dc4489 efi/cper: use stack buffer for error record decoding
2c5dd2a8af cb710: avoid NULL pointer subtraction
d40e193abd xhci: Enable trust tx length quirk for Fresco FL11 USB controller
dec944bb70 xhci: Fix command ring pointer corruption while aborting a command
dc3e0a20db xhci: guard accesses to ep_state in xhci_endpoint_reset()
0ee66290f0 USB: xhci: dbc: fix tty registration race
9f0d6c781c mei: me: add Ice Lake-N device id.
e4f7171c23 x86/resctrl: Free the ctrlval arrays when domain_setup_mon_state() fails
0e32a2b85c btrfs: fix abort logic in btrfs_replace_file_extents
52924879ed btrfs: update refs for any root except tree log roots
352349aa49 btrfs: check for error when looking up inode during dir entry replay
4ed68471bc btrfs: deal with errors when adding inode reference during log replay
95d3aba5fe btrfs: deal with errors when replaying dir entry during log replay
206868a5b6 btrfs: unlock newly allocated extent buffer after error
e7e3ed5c92 drm/msm: Avoid potential overflow in timeout_to_jiffies()
a31c33aa80 arm64/hugetlb: fix CMA gigantic page order for non-4K PAGE_SIZE
0c97008859 csky: Fixup regs.sr broken in ptrace
5dab6e8f14 csky: don't let sigreturn play with priveleged bits of status register
e3c37135c9 clk: socfpga: agilex: fix duplicate s2f_user0_clk
faba7916cd s390: fix strrchr() implementation
7ef43c0f68 nds32/ftrace: Fix Error: invalid operands (*UND* and *UND* sections) for `^'
c3bf276fd7 ALSA: hda/realtek: Fix the mic type detection issue for ASUS G551JW
1099953b32 ALSA: hda/realtek: Fix for quirk to enable speaker output on the Lenovo 13s Gen2
554a5027f5 ALSA: hda/realtek: Add quirk for TongFang PHxTxX1
0fa256509b ALSA: hda/realtek - ALC236 headset MIC recording issue
1e10c6bf15 ALSA: hda/realtek: Add quirk for Clevo X170KM-G
8a5f01f4b0 ALSA: hda/realtek: Complete partial device name to avoid ambiguity
c6e5290e6c ALSA: hda - Enable headphone mic on Dell Latitude laptops with ALC3254
9bb1659ac5 ALSA: hda/realtek: Enable 4-speaker output for Dell Precision 5560 laptop
7680631ac7 ALSA: seq: Fix a potential UAF by wrong private_free call order
4aab156d30 ALSA: pcm: Workaround for a wrong offset in SYNC_PTR compat ioctl
f077d699c1 ALSA: usb-audio: Add quirk for VF0770
a336e746e3 Merge 5.10.74 into android12-5.10-lts
77434fe5a0 Linux 5.10.74
42b49f012b hwmon: (pmbus/ibm-cffps) max_power_out swap changes
bb893f0754 sched: Always inline is_percpu_thread()
bdae2a0834 perf/core: fix userpage->time_enabled of inactive events
57c7ca3d55 scsi: virtio_scsi: Fix spelling mistake "Unsupport" -> "Unsupported"
d993d1e1c4 scsi: ses: Fix unsigned comparison with less than zero
621ddffb70 drm/amdgpu: fix gart.bo pin_count leak
a5ba615fbe net: sun: SUNVNET_COMMON should depend on INET
db868b4532 vboxfs: fix broken legacy mount signature checking
42c871d38e mac80211: check return value of rhashtable_init
bda06aff03 net: prevent user from passing illegal stab size
3d68c7b0ab hwmon: (ltc2947) Properly handle errors when looking for the external clock
194e8a4f0a m68k: Handle arrivals of multiple signals correctly
977aee5814 mac80211: Drop frames from invalid MAC address in ad-hoc mode
9ec9a975ea netfilter: nf_nat_masquerade: defer conntrack walk to work queue
5182d6db80 netfilter: nf_nat_masquerade: make async masq_inet6_event handling generic
bcb647c1e1 ASoC: SOF: loader: release_firmware() on load failure to avoid batching
f6952b1e22 HID: wacom: Add new Intuos BT (CTL-4100WL/CTL-6100WL) device IDs
ddc4ba737b netfilter: ip6_tables: zero-initialize fragment offset
ddf026d6ae HID: apple: Fix logical maximum and usage maximum of Magic Keyboard JIS
0bcfa99e8f ASoC: Intel: sof_sdw: tag SoundWire BEs as non-atomic
14cbfeeee4 ext4: correct the error path of ext4_write_inline_data_end()
d7a15e1e4f ext4: check and update i_disksize properly
87b4a70303 Merge branch 'android12-5.10' into `android12-5.10-lts`
4b3fd2a81e Merge 5.10.73 into android12-5.10-lts
0268aa579b Linux 5.10.73
825c00c2ee x86/hpet: Use another crystalball to evaluate HPET usability
f2447f6587 x86/entry: Clear X86_FEATURE_SMAP when CONFIG_X86_SMAP=n
6bfe1f6fc8 x86/entry: Correct reference to intended CONFIG_64_BIT
5d637bc6f9 x86/sev: Return an error on a returned non-zero SW_EXITINFO1[31:0]
df121cf550 x86/Kconfig: Correct reference to MWINCHIP3D
d7c36115fb x86/platform/olpc: Correct ifdef symbol to intended CONFIG_OLPC_XO15_SCI
f73ca4961d pseries/eeh: Fix the kdump kernel crash during eeh_pseries_init
411b38fe68 powerpc/64s: fix program check interrupt emergency stack path
18a2a2cafc powerpc/bpf: Fix BPF_SUB when imm == 0x80000000
a4037dded5 RISC-V: Include clone3() on rv32
29fdb11ca8 bpf, s390: Fix potential memory leak about jit_data
2c152d9da8 riscv/vdso: make arch_setup_additional_pages wait for mmap_sem for write killable
de834e12b9 i2c: mediatek: Add OFFSET_EXT_CONF setting back
f86de018fd i2c: acpi: fix resource leak in reconfiguration device addition
87990a60b4 powerpc/iommu: Report the correct most efficient DMA mask for PCI devices
985cca1ad1 net: prefer socket bound to interface when not in VRF
97aeed72af i40e: Fix freeing of uninitialized misc IRQ vector
2dc768a98c i40e: fix endless loop under rtnl
d3a07ca78a gve: report 64bit tx_bytes counter from gve_handle_report_stats()
35f6ddd934 gve: fix gve_get_stats()
9a04302252 rtnetlink: fix if_nlmsg_stats_size() under estimation
72c2a68f1d gve: Avoid freeing NULL pointer
5d903a694b gve: Correct available tx qpl check
f69556a420 drm/nouveau/debugfs: fix file release memory leak
65fff0a8ef drm/nouveau/kms/nv50-: fix file release memory leak
f86e19d918 drm/nouveau: avoid a use-after-free when BO init fails
008224cdc1 video: fbdev: gbefb: Only instantiate device when built for IP32
d2ccbaaa66 drm/sun4i: dw-hdmi: Fix HDMI PHY clock setup
18d2568cc7 bus: ti-sysc: Use CLKDM_NOAUTO for dra7 dcan1 for errata i893
40a84fcae2 perf jevents: Tidy error handling
628b31d967 netlink: annotate data races around nlk->bound
144715fbab net: sfp: Fix typo in state machine debug string
3ec73ffeef net/sched: sch_taprio: properly cancel timer from taprio_destroy()
60955b65bd net: bridge: fix under estimation in br_get_linkxstats_size()
c480d15190 net: bridge: use nla_total_size_64bit() in br_get_linkxstats_size()
cb8880680b ARM: imx6: disable the GIC CPU interface before calling stby-poweroff sequence
2b0035d105 dt-bindings: drm/bridge: ti-sn65dsi86: Fix reg value
10afd15972 arm64: dts: ls1028a: add missing CAN nodes
95ba03fb4c ptp_pch: Load module automatically if ID matches
442ea65d0c powerpc/fsl/dts: Fix phy-connection-type for fm1mac3
acff2d182c net_sched: fix NULL deref in fifo_set_limit()
0d2dd40a7b phy: mdio: fix memory leak
6e6f79e398 net/mlx5: E-Switch, Fix double allocation of acl flow counter
d70cb6c77a net/mlx5e: IPSEC RX, enable checksum complete
064faa8e8a bpf: Fix integer overflow in prealloc_elems_and_freelist()
d5f4b27c3c soc: ti: omap-prm: Fix external abort for am335x pruss
1d8f4447e8 bpf, arm: Fix register clobbering in div/mod implementation
29a19eaeb2 iwlwifi: pcie: add configuration of a Wi-Fi adapter on Dell XPS 15
6b0132f730 xtensa: call irqchip_init only when CONFIG_USE_OF is selected
3d288ed983 xtensa: use CONFIG_USE_OF instead of CONFIG_OF
997bec509a arm64: dts: qcom: pm8150: use qcom,pm8998-pon binding
fbca14abc1 ath5k: fix building with LEDS=m
8aef3824e9 PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus
d9b838ae39 ARM: dts: imx6qdl-pico: Fix Ethernet support
9e99ad4194 ARM: dts: imx: Fix USB host power regulator polarity on M53Menlo
2ba34cf0c1 ARM: dts: imx: Add missing pinctrl-names for panel on M53Menlo
8f977e97b2 soc: qcom: mdt_loader: Drop PT_LOAD check on hash segment
14f52004bd ARM: at91: pm: do not panic if ram controllers are not enabled
d89a313a57 ARM: dts: qcom: apq8064: Use 27MHz PXO clock as DSI PLL reference
25ac88e601 soc: qcom: socinfo: Fixed argument passed to platform_set_data()
ab8073794b bus: ti-sysc: Add break in switch statement in sysc_init_soc()
427faa29e0 riscv: Flush current cpu icache before other cpus
05287407de ARM: dts: qcom: apq8064: use compatible which contains chipid
ac06fe40e8 ARM: dts: imx6dl-yapp4: Fix lp5562 LED driver probe
71d3ce62ac ARM: dts: omap3430-sdp: Fix NAND device node
f9a855d1bc xen/balloon: fix cancelled balloon action
9aac782ab0 SUNRPC: fix sign error causing rpcsec_gss drops
8f174a208c nfsd4: Handle the NFSv4 READDIR 'dircount' hint being zero
12d4b17902 nfsd: fix error handling of register_pernet_subsys() in init_nfsd()
1bc2f315a2 ovl: fix IOCB_DIRECT if underlying fs doesn't support direct IO
9763ffd4da ovl: fix missing negative dentry check in ovl_rename()
1500f0c836 mmc: sdhci-of-at91: replace while loop with read_poll_timeout
3a0feae5f6 mmc: sdhci-of-at91: wait for calibration done before proceed
e5cb3680b9 mmc: meson-gx: do not use memcpy_to/fromio for dram-access-quirk
13d17cc717 xen/privcmd: fix error handling in mmap-resource processing
de1e8bd36a drm/nouveau/kms/tu102-: delay enabling cursor until after assign_windows
1d4e9f27d2 usb: typec: tcpm: handle SRC_STARTUP state if cc changes
feb3fe702a USB: cdc-acm: fix break reporting
fc8b3e838b USB: cdc-acm: fix racy tty buffer accesses
b3265b88e8 usb: chipidea: ci_hdrc_imx: Also search for 'phys' phandle
16d728110b Partially revert "usb: Kconfig: using select for USB_COMMON dependency"
56596148ae ANDROID: Different fix for KABI breakage in 5.10.71 in struct sock
79f3d20a45 ANDROID: ABI: update .xml file with new symbols to track
3cce4e4a1b Merge branch 'android12-5.10' into `android12-5.10-lts`
d306ef529c Merge 5.10.72 into android12-5.10-lts
5aa003b381 Linux 5.10.72
387aecdab7 libata: Add ATA_HORKAGE_NO_NCQ_ON_ATI for Samsung 860 and 870 SSD.
02bf504bc3 perf/x86: Reset destroy callback on event init failure
b56475c29b KVM: x86: nSVM: restore int_vector in svm_clear_vintr
ae34f26d4a kvm: x86: Add AMD PMU MSRs to msrs_to_save_all[]
6d0ff92059 KVM: do not shrink halt_poll_ns below grow_start
b8add3f47a selftests: KVM: Align SMCCC call with the spec in steal_time
352b02562a tools/vm/page-types: remove dependency on opt_file for idle page tracking
84778fd66d smb3: correct smb3 ACL security descriptor
a7be240d17 irqchip/gic: Work around broken Renesas integration
8724a2a0e6 scsi: ses: Retry failed Send/Receive Diagnostic commands
2e28f7dd37 thermal/drivers/tsens: Fix wrong check for tzd in irq handlers
7a670cfb0f nvme-fc: avoid race between time out and tear down
c251d023ed nvme-fc: update hardware queues before using them
c4506403e1 selftests:kvm: fix get_warnings_count() ignoring fscanf() return warn
bcc4b4de63 selftests: be sure to make khdr before other targets
6a4aaf1d84 habanalabs/gaudi: fix LBW RR configuration
2754fa3b73 usb: dwc2: check return value after calling platform_get_resource()
ed6574d484 usb: testusb: Fix for showing the connection speed
60df9f5556 scsi: sd: Free scsi_disk device via put_device()
76c7063c74 ext2: fix sleeping in atomic bugs on error
b114f2d18e sparc64: fix pci_iounmap() when CONFIG_PCI is not set
fdfb3bc873 xen-netback: correct success/error reporting for the SKB-with-fraglist case
a41938d072 net: mdio: introduce a shutdown method to mdio device drivers
63c89930d4 btrfs: fix mount failure due to past and transient device flush error
50628b06e6 btrfs: replace BUG_ON() in btrfs_csum_one_bio() with proper error handling
83050cc239 nfsd: back channel stuck in SEQ4_STATUS_CB_PATH_DOWN
f986cf2702 platform/x86: touchscreen_dmi: Update info for the Chuwi Hi10 Plus (CWI527) tablet
e561150324 platform/x86: touchscreen_dmi: Add info for the Chuwi HiBook (CWI514) tablet
2ababcd8c2 spi: rockchip: handle zero length transfers without timing out
627dc3c79c ANDROID: Fix up KABI breakage in 5.10.71 in struct sock
c23269dad5 Merge 5.10.71 into android12-5.10-lts
5cd40b137c Linux 5.10.71
96f439a7ed netfilter: nf_tables: Fix oversized kvmalloc() calls
e2d192301a netfilter: conntrack: serialize hash resizes and cleanups
deb2949417 KVM: x86: Handle SRCU initialization failure during page track init
f7ac4d24e1 HID: usbhid: free raw_report buffers in usbhid_stop
57a269a1b1 mm: don't allow oversized kvmalloc() calls
da5b8b9319 netfilter: ipset: Fix oversized kvmalloc() calls
dedfc35a2d HID: betop: fix slab-out-of-bounds Write in betop_probe
17ccc64e4f crypto: ccp - fix resource leaks in ccp_run_aes_gcm_cmd()
28f0fdbac0 usb: hso: remove the bailout parameter
4ad4852b9a ASoC: dapm: use component prefix when checking widget names
5c3a90b6ff net: udp: annotate data race around udp_sk(sk)->corkflag
a7f4c633ae HID: u2fzero: ignore incomplete packets without data
3770e21f60 ext4: fix potential infinite loop in ext4_dx_readdir()
a63474dbf6 ext4: add error checking to ext4_ext_replay_set_iblocks()
9ccf35492b ext4: fix reserved space counter leakage
dc0942168a ext4: limit the number of blocks in one ADD_RANGE TLV
d11502fa26 ext4: fix loff_t overflow in ext4_max_bitmap_size()
7cea848678 ipack: ipoctal: fix module reference leak
843efca98e ipack: ipoctal: fix missing allocation-failure check
67d1df6610 ipack: ipoctal: fix tty-registration error handling
f46e5db92f ipack: ipoctal: fix tty registration race
5f6a309a69 ipack: ipoctal: fix stack information leak
3bef1b7242 debugfs: debugfs_create_file_size(): use IS_ERR to check for error
15fd3954bc elf: don't use MAP_FIXED_NOREPLACE for elf interpreter mappings
011b4de950 nvme: add command id quirk for apple controllers
44c600a57d hwmon: (pmbus/mp2975) Add missed POUT attribute for page 1 mp2975 controller
7fc5f60a01 perf/x86/intel: Update event constraints for ICX
3db53827a0 af_unix: fix races in sk_peer_pid and sk_peer_cred accesses
d0d520c19e net: sched: flower: protect fl_walk() with rcu
e63f6d8fe7 net: phy: bcm7xxx: Fixed indirect MMD operations
071febc37e net: hns3: fix always enable rx vlan filter problem after selftest
85e4f5d28d net: hns3: reconstruct function hns3_self_test
8e89876c84 net: hns3: fix prototype warning
d4a14faf79 net: hns3: fix show wrong state when add existing uc mac address
64dae9551f net: hns3: fix mixed flag HCLGE_FLAG_MQPRIO_ENABLE and HCLGE_FLAG_DCB_ENABLE
8d3d27664e net: hns3: keep MAC pause mode when multiple TCs are enabled
f8ba689cb6 net: hns3: do not allow call hns3_nic_net_open repeatedly
20f6c4a31a ixgbe: Fix NULL pointer dereference in ixgbe_xdp_setup
16138cf938 scsi: csiostor: Add module softdep on cxgb4
0306a2c7df Revert "block, bfq: honor already-setup queue merges"
1f2ca30fbd net: ks8851: fix link error
f1dd6e10f0 selftests, bpf: test_lwt_ip_encap: Really disable rp_filter
4967ae9ab4 selftests, bpf: Fix makefile dependencies on libbpf
59efda5073 bpf: Exempt CAP_BPF from checks against bpf_jit_limit
f908072391 RDMA/hns: Fix inaccurate prints
7e3eda32b8 e100: fix buffer overrun in e100_get_regs
f2edf80cdd e100: fix length calculation in e100_get_regs_len
c20a0ad7b6 dsa: mv88e6xxx: Include tagger overhead when setting MTU for DSA and CPU ports
7b771b1222 dsa: mv88e6xxx: Fix MTU definition
ee4d0495a6 dsa: mv88e6xxx: 6161: Use chip wide MAX MTU
d35d95e8b9 drm/i915/request: fix early tracepoints
8321738c6e smsc95xx: fix stalled rx after link change
8de12ad916 net: ipv4: Fix rtnexthop len when RTA_FLOW is present
b22c5e2c8e net: enetc: fix the incorrect clearing of IF_MODE bits
5ee40530b0 hwmon: (tmp421) fix rounding for negative values
89d96f147d hwmon: (tmp421) report /PVLD condition as fault
560271d09f mptcp: don't return sockets in foreign netns
9c6591ae8e sctp: break out if skb_header_pointer returns NULL in sctp_rcv_ootb
2c204cf594 mac80211-hwsim: fix late beacon hrtimer handling
8576e72ac5 mac80211: mesh: fix potentially unaligned access
1282bb0083 mac80211: limit injected vht mcs/nss in ieee80211_parse_tx_radiotap
3748871e12 mac80211: Fix ieee80211_amsdu_aggregate frag_tail bug
76bbb482d3 hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs
c61736a994 bpf, mips: Validate conditional branch offsets
3f4e68902d RDMA/cma: Fix listener leak in rdma_cma_listen_on_all() failure
62ba3c5010 IB/cma: Do not send IGMP leaves for sendonly Multicast groups
d93f65586c bpf: Handle return value of BPF_PROG_TYPE_STRUCT_OPS prog
12cbdaeeb5 ipvs: check that ip_vs_conn_tab_bits is between 8 and 20
9f382e1edf drm/amdgpu: correct initial cp_hqd_quantum for gfx9
c331fad63b drm/amd/display: Pass PCI deviceid into DC
0a16c9751e RDMA/cma: Do not change route.addr.src_addr.ss_family
31a13f039e media: ir_toy: prevent device from hanging during transmit
249e5e5a50 KVM: rseq: Update rseq when processing NOTIFY_RESUME on xfer to KVM guest
3778511dfc KVM: nVMX: Filter out all unsupported controls when eVMCS was activated
4ed671e6bc KVM: x86: nSVM: don't copy virt_ext from vmcb12
bebabb76ad KVM: x86: Fix stack-out-of-bounds memory access from ioapic_write_indirect()
782122ae7d x86/kvmclock: Move this_cpu_pvti into kvmclock.h
57de2dcb18 mac80211: fix use-after-free in CCMP/GCMP RX
201ba843fe scsi: ufs: Fix illegal offset in UPIU event trace
bd4e446a69 gpio: pca953x: do not ignore i2c errors
516d905503 hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field
1499bb2c3a hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field
7c4fd5de39 hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field
196dabd96b hwmon: (tmp421) handle I2C errors
23a6dfa10f fs-verity: fix signed integer overflow with i_size near S64_MAX
d1d0016e4a ACPI: NFIT: Use fallback node id when numa info in NFIT table is incorrect
e9edc7bc61 ALSA: hda/realtek: Quirks to enable speaker output for Lenovo Legion 7i 15IMHG05, Yoga 7i 14ITL5/15ITL5, and 13s Gen2 laptops.
23115ca7d2 usb: cdns3: fix race condition before setting doorbell
3945c48136 cpufreq: schedutil: Destroy mutex before kobject_put() frees the memory
2193cf76f4 scsi: qla2xxx: Changes to support kdump kernel for NVMe BFS
a7d4fc8440 cpufreq: schedutil: Use kobject release() method to free sugov_tunables
d570c48dd3 tty: Fix out-of-bound vmalloc access in imageblit
87b6b38b53 ANDROID: GKI: update .xml file with new symbols to track
7d8687d4ef Merge branch 'android12-5.10' into `android12-5.10-lts`
dcf0824c26 Revert "treewide: Change list_sort to use const pointers"
d69751309b Merge 5.10.70 into android12-5.10-lts
33740c9227 Merge 5.10.69 into android12-5.10-lts
beafee90ec Merge 5.10.68 into android12-5.10-lts
91607afb55 Revert "crypto: public_key: fix overflow during implicit conversion"
0dae5f42c0 Revert "drm/vmwgfx: fix potential UAF in vmwgfx_surface.c"
5b4909f961 Revert "drm: serialize drm_file.master with a new spinlock"
49faae8510 Revert "drm: protect drm_master pointers in drm_lease.c"
08ed4cb090 Merge 5.10.67 into android12-5.10-lts
f93026b28e Linux 5.10.70
5909429605 qnx4: work around gcc false positive warning bug
35c0dfbbd3 xen/balloon: fix balloon kthread freezing
8373d58c89 USB: serial: cp210x: fix dropped characters with CP2102
67cdb51ab5 thermal/drivers/int340x: Do not set a wrong tcc offset on resume
cc71740ee4 EDAC/dmc520: Assign the proper type to dimm->edac_mode
9afad85a43 EDAC/synopsys: Fix wrong value type assignment for edac_mode
db76cb05c0 spi: Fix tegra20 build with CONFIG_PM=n
890e25c424 net: 6pack: Fix tx timeout and slot time
044513c1fa alpha: Declare virt_to_phys and virt_to_bus parameter as pointer to volatile
0a511ba6d2 arm64: Mark __stack_chk_guard as __ro_after_init
fec3bd622d parisc: Use absolute_pointer() to define PAGE0
61454e7fd6 qnx4: avoid stringop-overread errors
5520d27f02 sparc: avoid stringop-overread errors
8d768beaf0 net: i825xx: Use absolute_pointer for memcpy from fixed memory location
e99f903271 compiler.h: Introduce absolute_pointer macro
f58d305887 blk-cgroup: fix UAF by grabbing blkcg lock before destroying blkg pd
1ef68b84bc block: flush the integrity workqueue in blk_integrity_unregister
1963bdb748 block: check if a profile is actually registered in blk_integrity_unregister
526261c1b7 amd/display: downgrade validation failure log level
54a4860c62 sparc32: page align size in arch_dma_alloc
ecf0dc5a90 nvme-rdma: destroy cm id before destroy qp to avoid use after free
2a08960577 nvme-multipath: fix ANA state updates when a namespace is not present
372d3e6ea1 xen/balloon: use a kernel thread instead a workqueue
6345a0bee8 bpf: Add oversize check before call kvcalloc()
e567d33508 cpufreq: intel_pstate: Override parameters if HWP forced by BIOS
9561bb9887 ipv6: delay fib6_sernum increase in fib6_add
31df1d037c m68k: Double cast io functions to unsigned long
cc3dd119d3 blk-mq: avoid to iterate over stale request
de7e030033 net: stmmac: allow CSR clock of 300MHz
7721221e87 net: macb: fix use after free on rmmod
a632288053 net: phylink: Update SFP selected interface on advertising changes
3815fe7371 blktrace: Fix uaf in blk_trace access after removing by sysfs
ce092350b4 io_uring: put provided buffer meta data under memcg accounting
7040b37a96 x86/asm: Fix SETZ size enqcmds() build failure
54e85b6c28 x86/asm: Add a missing __iomem annotation in enqcmds()
b18ba3f477 md: fix a lock order reversal in md_alloc
568662e37f irqchip/gic-v3-its: Fix potential VPE leak on error
af7c9ffe2b irqchip/goldfish-pic: Select GENERIC_IRQ_CHIP to fix build
0595fc4794 scsi: lpfc: Use correct scnprintf() limit
cb948b158a scsi: qla2xxx: Restore initiator in dual mode
3d42ed6b79 cifs: fix a sign extension bug
8cba4c2698 thermal/core: Potential buffer overflow in thermal_build_list_of_policies()
215df43499 nvme: keep ctrl->namespaces ordered
55e6f8b3c0 treewide: Change list_sort to use const pointers
419fab1cb0 nvme-tcp: fix incorrect h2cdata pdu offset accounting
c6ecdcba9d fpga: machxo2-spi: Fix missing error code in machxo2_write_complete()
5c6bfde245 fpga: machxo2-spi: Return an error on failure
4ea4925c70 tty: synclink_gt: rename a conflicting function name
56a8f0b18f tty: synclink_gt, drop unneeded forward declarations
c64e6c307a scsi: target: Fix the pgr/alua_support_store functions
2d03054251 scsi: iscsi: Adjust iface sysfs attr detection
0032f8b3cf atlantic: Fix issue in the pm resume flow.
c2598bce41 net/mlx4_en: Don't allow aRFS for encapsulated packets
b4e54f5f42 qed: rdma - don't wait for resources under hw error recovery flow
1bba406c07 gpio: uniphier: Fix void functions to remove return value
db94f89e1d s390/qeth: fix NULL deref in qeth_clear_working_pool_list()
3aa50241e1 kselftest/arm64: signal: Skip tests if required features are missing
91d4da33c3 kselftest/arm64: signal: Add SVE to the set of features we can check for
2eaa39d83e net: dsa: realtek: register the MDIO bus under devres
43c880b860 net: dsa: don't allocate the slave_mii_bus using devres
b4561bd29e net/smc: fix 'workqueue leaked lock' in smc_conn_abort_work
8a00c832ef net/smc: add missing error check in smc_clc_prfx_set()
4e0fd1d795 net: hns3: check queue id range before using
ca435999bc net: hns3: fix change RSS 'hfunc' ineffective issue
1365a0dc55 bnxt_en: Fix TX timeout when TX ring size is set to the smallest
d5afe3cf52 enetc: Fix uninitialized struct dim_sample field usage
6c3f1b741c enetc: Fix illegal access when reading affinity_hint
117661cb9d platform/x86/intel: punit_ipc: Drop wrong use of ACPI_PTR()
22538c1bde afs: Fix updating of i_blocks on file/dir extension
55352944b4 afs: Fix incorrect triggering of sillyrename on 3rd-party invalidation
8d6a21e4cd comedi: Fix memory leak in compat_insnlist()
43241a6c6e net: hso: fix muxed tty registration
68d4fbe622 drm/amd/pm: Update intermediate power state for SI
7dc9225fcd scsi: sd_zbc: Ensure buffer size is aligned to SECTOR_SIZE
3dfffcd260 serial: mvebu-uart: fix driver's tx_empty callback
640946fc56 serial: 8250: 8250_omap: Fix RX_LVL register offset
0ea9ac731a xhci: Set HCD flag to defer primary roothub registration
80af86c122 btrfs: prevent __btrfs_dump_space_info() to underflow its free space
8326be9e51 erofs: fix up erofs_lookup tracepoint
91e4ad05bf mcb: fix error handling in mcb_alloc_bus()
2c28bb016b USB: serial: option: add device id for Foxconn T99W265
600b19610a USB: serial: option: remove duplicate USB device ID
0daf57973f USB: serial: option: add Telit LN920 compositions
dc131d3f13 USB: serial: mos7840: remove duplicated 0xac24 device ID
d58fc9e9c1 usb: core: hcd: Add support for deferring roothub registration
996f7c4a1f usb: dwc3: core: balance phy init and exit
a05ff80001 Re-enable UAS for LaCie Rugged USB3-FW with fk quirk
b9e697e60c staging: greybus: uart: fix tty use after free
d5b0473707 binder: make sure fd closes complete
302e60e26a Revert "USB: bcma: Add a check for devm_gpiod_get"
b33b3db476 USB: cdc-acm: fix minor-number release
0809b8576f USB: serial: cp210x: add ID for GW Instek GDM-834x Digital Multimeter
a34d6ef0c7 usb-storage: Add quirk for ScanLogic SL11R-IDE older than 2.6c
f792828491 xen/x86: fix PV trap handling on secondary processors
93028da5e9 cifs: fix incorrect check for null pointer in header_assemble
5940e22528 usb: musb: tusb6010: uninitialized data in tusb_fifo_write_unaligned()
d071c7fd45 usb: dwc2: gadget: Fix ISOC transfer complete handling for DDMA
5f4bfac261 usb: dwc2: gadget: Fix ISOC flow for BDMA and Slave
1fbd7eb385 usb: gadget: r8a66597: fix a loop in set_feature()
838297222b mm: fix uninitialized use in overcommit_policy_handler
437be4d6fa ocfs2: drop acl cache for directories too
31bd6cd06a PCI: aardvark: Increase polling delay to 1.5s while waiting for PIO response
0f8a659a24 ANDROID: GKI: update the .xml file after modifying the ANDROID_KABI_USE() macro
119f513123 ANDROID: GKI: rework the ANDROID_KABI_USE() macro to not use __UNIQUE()
f04036b092 ANDROID: GKI: update .xml file to handle previous issues
5f4196eaa9 Linux 5.10.69
7c09505e9e drm/nouveau/nvkm: Replace -ENOSYS with -ENODEV
83a3cb200e sched/idle: Make the idle timer expire in hard interrupt context
647c19bc61 rtc: rx8010: select REGMAP_I2C
9a14014df7 blk-mq: allow 4x BLK_MAX_REQUEST_COUNT at blk_plug for multiple_queues
23dfb959c6 blk-throttle: fix UAF by deleteing timer in blk_throtl_exit()
a2551d0a29 pwm: stm32-lp: Don't modify HW state in .remove() callback
a6a2b36a8c pwm: rockchip: Don't modify HW state in .remove() callback
0a2ea5c0e5 pwm: img: Don't modify HW state in .remove() callback
db8838e48a habanalabs: add validity check for event ID received from F/W
d7736e2faa nilfs2: fix memory leak in nilfs_sysfs_delete_snapshot_group
0f36028d01 nilfs2: fix memory leak in nilfs_sysfs_create_snapshot_group
5770b54b11 nilfs2: fix memory leak in nilfs_sysfs_delete_##name##_group
5acb21e30d nilfs2: fix memory leak in nilfs_sysfs_create_##name##_group
0480f7a480 nilfs2: fix NULL pointer in nilfs_##name##_attr_release
d95b50ff07 nilfs2: fix memory leak in nilfs_sysfs_create_device_group
aa1af89a66 btrfs: fix lockdep warning while mounting sprout fs
c43803c1aa btrfs: update the bdev time directly when closing
921ef7cfef ceph: lockdep annotations for try_nonblocking_invalidate
487ead34a2 ceph: remove the capsnaps when removing caps
386fd6fd01 ceph: request Fw caps before updating the mtime in ceph_write_iter
b26ced2625 dmaengine: xilinx_dma: Set DMA mask for coherent APIs
9c1ea85377 dmaengine: ioat: depends on !UML
35492619e0 dmaengine: sprd: Add missing MODULE_DEVICE_TABLE
c12cf7f9af dmaengine: idxd: depends on !UML
b4bb0b171b iommu/amd: Relocate GAMSup check to early_enable_iommus
2a07348e98 parisc: Move pci_dev_is_behind_card_dino to where it is used
ca907291e1 dma-buf: DMABUF_MOVE_NOTIFY should depend on DMA_SHARED_BUFFER
b9a1526d51 drivers: base: cacheinfo: Get rid of DEFINE_SMP_CALL_CACHE_FUNCTION()
45bd9dd1be drm/amdgpu: Disable PCIE_DPM on Intel RKL Platform
c9538018cb thermal/core: Fix thermal_cooling_device_register() prototype
d1f9ecc00d tools/bootconfig: Fix tracing_on option checking in ftrace2bconf.sh
912afe602e Kconfig.debug: drop selecting non-existing HARDLOCKUP_DETECTOR_ARCH
e418ce8b8d ceph: cancel delayed work instead of flushing on mdsc teardown
8193ad306e ceph: allow ceph_put_mds_session to take NULL or ERR_PTR
41aa215734 platform/chrome: cros_ec_trace: Fix format warnings
113a69460d platform/chrome: sensorhub: Add trace events for sample
48271d10bf dmaengine: idxd: fix wq slot allocation index check
777344da34 pwm: mxs: Don't modify HW state in .probe() after the PWM chip was registered
322b70b522 pwm: lpc32xx: Don't modify HW state in .probe() after the PWM chip was registered
c63df77c40 PM: sleep: core: Avoid setting power.must_resume to false
74190973ab profiling: fix shift-out-of-bounds bugs
0796d99c1b nilfs2: use refcount_dec_and_lock() to fix potential UAF
30417cbecc prctl: allow to setup brk for et_dyn executables
e464b3876b 9p/trans_virtio: Remove sysfs file on probe failure
375e779ec3 thermal/drivers/exynos: Fix an error code in exynos_tmu_probe()
38ab04186f perf tools: Allow build-id with trailing zeros
87c4144450 tools lib: Adopt memchr_inv() from kernel
ebcd3fd920 perf test: Fix bpf test sample mismatch reporting
fa64b08931 dmaengine: acpi: Avoid comparison GSI with Linux vIRQ
9d49973b08 um: virtio_uml: fix memory leak on init failures
5d0e6a5e44 coredump: fix memleak in dump_vma_snapshot()
6b24588708 staging: rtl8192u: Fix bitwise vs logical operator in TranslateRxSignalStuff819xUsb()
ccb79116c3 sctp: add param size validation for SCTP_PARAM_SET_PRIMARY
ffca467668 sctp: validate chunk size in __rcv_asconf_lookup
473cea4983 Revert "net/mlx5: Register to devlink ingress VLAN filter trap"
5ce134e65f ARM: 9098/1: ftrace: MODULE_PLT: Fix build problem without DYNAMIC_FTRACE
f91d25a7c8 ARM: 9079/1: ftrace: Add MODULE_PLTS support
ad00533858 ARM: 9078/1: Add warn suppress parameter to arm_gen_branch_link()
ce90c6706d ARM: 9077/1: PLT: Move struct plt_entries definition to header
eb46d7c8ae ARM: Qualify enabling of swiotlb_init()
79286ea830 s390/pci_mmio: fully validate the VMA before calling follow_pte()
74d54e5ceb console: consume APC, DM, DCS
9493e92a39 PCI: aardvark: Fix reporting CRS value
9e766b86a9 PCI: pci-bridge-emul: Add PCIe Root Capabilities Register
1b6d7b3a21 ANDROID: GKI: Update symbol list for new modules
4d8524048a Linux 5.10.68
a23d357621 net: dsa: bcm_sf2: Fix array overrun in bcm_sf2_num_active_ports()
9f2972e151 bnxt_en: Fix error recovery regression
619d747c18 x86/mce: Avoid infinite loop for copy from user recovery
47bc9c3929 net: renesas: sh_eth: Fix freeing wrong tx descriptor
b2f9b7455b mfd: lpc_sch: Rename GPIOBASE to prevent build error
027c44b8c8 mfd: lpc_sch: Partially revert "Add support for Intel Quark X1000"
52a7e66671 bnxt_en: Fix possible unintended driver initiated error recovery
9a3f52f73c bnxt_en: Improve logging of error recovery settings information.
639a2eddb7 bnxt_en: Convert to use netif_level() helpers.
01cad477a9 bnxt_en: Consolidate firmware reset event logging.
fad75e0463 bnxt_en: log firmware debug notifications
f90a34faba bnxt_en: Fix asic.rev in devlink dev info command
7245023184 bnxt_en: fix stored FW_PSID version masks
eb635e008c net: dsa: b53: Fix IMP port setup on BCM5301x
87b34cd648 ip_gre: validate csum_start only on pull
9c98d2bd14 qlcnic: Remove redundant unlock in qlcnic_pinit_from_rom
8c01c620ae fq_codel: reject silly quantum parameters
6e2d36f2b1 netfilter: socket: icmp6: fix use-after-scope
c361c95560 net: dsa: b53: Set correct number of ports in the DSA struct
0db7e0d9f6 net: dsa: b53: Fix calculating number of switch ports
f89b0d032f net: hso: add failure handler for add_net_device
f450958f7f selftests: mptcp: clean tmp files in simult_flows
5711ced58e net: dsa: tag_rtl4_a: Fix egress tags
b167a0cec1 gpio: mpc8xxx: Use 'devm_gpiochip_add_data()' to simplify the code and avoid a leak
f86956143d gpio: mpc8xxx: Fix a resources leak in the error handling path of 'mpc8xxx_probe()'
c2b52963fd perf bench inject-buildid: Handle writen() errors
5a20adc388 perf unwind: Do not overwrite FEATURE_CHECK_LDFLAGS-libunwind-{x86,aarch64}
f5176a0798 ARC: export clear_user_page() for modules
9da1fb128c mtd: rawnand: cafe: Fix a resource leak in the error handling path of 'cafe_nand_probe()'
5402b31c0c PCI: Sync __pci_register_driver() stub for CONFIG_PCI=n
a957d82b23 KVM: arm64: Handle PSCI resets before userspace touches vCPU state
53921242cf KVM: arm64: Fix read-side race on updates to vcpu reset state
b9b89da56a mtd: mtdconcat: Check _read, _write callbacks existence before assignment
812cbb143c mtd: mtdconcat: Judge callback existence based on the master
e8dfc446a1 tracing/boot: Fix a hist trigger dependency for boot time tracing
87479b10eb mfd: tqmx86: Clear GPIO IRQ resource when no IRQ is set
f10f727cf9 PCI: Fix pci_dev_str_match_path() alloc while atomic bug
ed44be1cbe KVM: arm64: Restrict IPA size to maximum 48 bits on 4K and 16K page size
62f813769f netfilter: nft_ct: protect nft_ct_pcpu_template_refcnt with mutex
1cf43a1e57 netfilter: Fix fall-through warnings for Clang
9e89c22d1c PCI: iproc: Fix BCMA probe resource handling
b1f3be0c30 PCI: of: Don't fail devm_pci_alloc_host_bridge() on missing 'ranges'
063c3d980d backlight: ktd253: Stabilize backlight
00303e4592 mfd: axp20x: Update AXP288 volatile ranges
ab7cf22501 s390/bpf: Fix branch shortening during codegen pass
4320c222c2 s390/bpf: Fix 64-bit subtraction of the -0x80000000 constant
d92d3a9c2b s390/bpf: Fix optimizing out zero-extensions
4a93393203 NTB: perf: Fix an error code in perf_setup_inbuf()
ce660d6dfc NTB: Fix an error code in ntb_msit_probe()
e76ccbdedb ethtool: Fix an error code in cxgb2.c
70ac967a7b PCI: ibmphp: Fix double unmap of io_mem
9ae759a36b block, bfq: honor already-setup queue merges
7f2b3242f0 net: usb: cdc_mbim: avoid altsetting toggling for Telit LN920
ca8ecd7444 Set fc_nlinfo in nh_create_ipv4, nh_create_ipv6
c422c55505 octeontx2-af: Add additional register check to rvu_poll_reg()
1cac475eeb watchdog: Start watchdog in watchdog_set_last_hw_keepalive only if appropriate
e5609d3fd5 PCI: Add ACS quirks for Cavium multi-function devices
365cdfcc6e PCI: j721e: Add PCIe support for AM64
81381b72f4 PCI: j721e: Add PCIe support for J7200
4892b1515b PCI: cadence: Add quirk flag to set minimum delay in LTSSM Detect.Quiet state
a83e032cc4 PCI: cadence: Use bitfield for *quirk_retrain_flag* instead of bool
3aedfe4b08 tracing/probes: Reject events which have the same name of existing one
75420f9400 PCI: rcar: Fix runtime PM imbalance in rcar_pcie_ep_probe()
b6352e2e27 mfd: Don't use irq_create_mapping() to resolve a mapping
aa638669c8 PCI: tegra: Fix OF node reference leak
d5c5d1b141 PCI: tegra194: Fix MSI-X programming
13f366bab0 PCI: tegra194: Fix handling BME_CHGED event
b7d4f310bb fuse: fix use after free in fuse_read_interrupt()
03cc3a2923 PCI: Add ACS quirks for NXP LX2xx0 and LX2xx2 platforms
7a44361a1f mfd: db8500-prcmu: Adjust map to reality
619f137ffd dt-bindings: mtd: gpmc: Fix the ECC bytes vs. OOB bytes equation
49cf30ebb3 mm/memory_hotplug: use "unsigned long" for PFN in zone_for_pfn_range()
aa39eb744a net: hns3: fix the timing issue of VF clearing interrupt sources
ad47e09221 net: hns3: disable mac in flr process
b76522c7c3 net: hns3: change affinity_mask to numa node range
34fc06d047 net: hns3: pad the short tunnel frame before sending to hardware
0511d099db bnxt_en: make bnxt_free_skbs() safe to call after bnxt_free_mem()
49eff4ab7d KVM: PPC: Book3S HV: Tolerate treclaim. in fake-suspend mode changing registers
e68795c110 ibmvnic: check failover_pending in login response
aeb67214ce dt-bindings: arm: Fix Toradex compatible typo
0ab9981fa0 udp_tunnel: Fix udp_tunnel_nic work-queue type
5221e66329 qed: Handle management FW error
e00eae1d6b selftest: net: fix typo in altname test
53947b68c5 tcp: fix tp->undo_retrans accounting in tcp_sacktag_one()
35d3ab2ea2 x86/uaccess: Fix 32-bit __get_user_asm_u64() when CC_HAS_ASM_GOTO_OUTPUT=y
cf6f29bb2c net: dsa: destroy the phylink instance on any error in dsa_slave_phy_setup
df38f941a7 net/af_unix: fix a data-race in unix_dgram_poll
cad96d0e50 vhost_net: fix OoB on sendmsg() failure.
7843861e21 gen_compile_commands: fix missing 'sys' package
983ef86629 net: ipa: initialize all filter table slots
c5102ced8a events: Reuse value read using READ_ONCE instead of re-reading it
8f8ad122ff nvme-tcp: fix io_work priority inversion
c586bc31d5 net/mlx5: Fix potential sleeping in atomic context
29a5af9112 net/mlx5: FWTrace, cancel work on alloc pd error flow
229e9293b2 perf machine: Initialize srcline string member in add_location struct
33c983f7a1 drm/rockchip: cdn-dp-core: Make cdn_dp_core_resume __maybe_unused
fd9ed47fe6 tipc: increase timeout in tipc_sk_enqueue()
abe460eb6f r6040: Restore MDIO clock frequency after MAC reset
edfab735d5 net/l2tp: Fix reference count leak in l2tp_udp_recv_core
6c3cb65d56 dccp: don't duplicate ccid when cloning dccp sock
f6f8076655 ptp: dp83640: don't define PAGE0
bd6d9a0dd4 net-caif: avoid user-triggerable WARN_ON(1)
855c17ffa6 net/{mlx5|nfp|bnxt}: Remove unnecessary RTNL lock assert
c5c9ee2d36 ethtool: Fix rxnfc copy to user buffer overflow
ee3ffd56b4 tipc: fix an use-after-free issue in tipc_recvmsg
12551b75b0 x86/mm: Fix kern_addr_valid() to cope with existing but not present entries
6672dc68e2 x86/pat: Pass valid address to sanitize_phys()
0346f8a2c5 s390/sclp: fix Secure-IPL facility detection
cc9d96c9f9 drm/etnaviv: add missing MMU context put when reaping MMU mapping
ea995e8a62 drm/etnaviv: reference MMU context when setting up hardware state
660dfbf208 drm/etnaviv: fix MMU context leak on GPU reset
22163efedc drm/etnaviv: exec and MMU state is lost when resetting the GPU
6b1c223d8a drm/etnaviv: keep MMU context across runtime suspend/resume
c63e6e0951 drm/etnaviv: stop abusing mmu_context as FE running marker
cf24bd826e drm/etnaviv: put submit prev MMU context when it exists
0759f64847 drm/etnaviv: return context from etnaviv_iommu_context_get
8f95553f00 drm/amd/amdgpu: Increase HWIP_MAX_INSTANCE to 10
87f7032dc2 PCI: Add AMD GPU multi-function power dependencies
cd64b416ae PM: base: power: don't try to use non-existing RTC for storing data
a67e7cdbc6 arm64/sve: Use correct size when reinitialising SVE state
84da60070c bnx2x: Fix enabling network interfaces without VFs
1a5a3ba21a xen: reset legacy rtc flag for PV domU
ce8f81b76d io_uring: ensure symmetry in handling iter types in loop_rw_iter()
88f3d951e2 btrfs: fix upper limit for max_inline for page size 64K
575279059e drm/bridge: lt9611: Fix handling of 4k panels
faf816b0f8 Linux 5.10.67
ad3ea16746 fanotify: limit number of event merge attempts
412974e75f drm/panfrost: Clamp lock region to Bifrost minimum
8976e09443 drm/panfrost: Use u64 for size in lock_region
95251e6833 drm/panfrost: Simplify lock_region calculation
b80a99e048 drm/amd/display: Update bounding box states (v2)
583c4f3d09 drm/amd/display: Update number of DCN3 clock states
7b1abace16 drm/amdgpu: Fix BUG_ON assert
c29485e34e drm/panfrost: Make sure MMU context lifetime is not bound to panfrost_priv
bb693c114e drm/dp_mst: Fix return code on sideband message failure
84cac4f806 drm/msi/mdp4: populate priv->kms in mdp4_kms_init
be1fcecfc1 drm/mgag200: Select clock in PLL update functions
d0aaea1f11 net: dsa: lantiq_gswip: fix maximum frame length
5944d0e2b0 lib/test_stackinit: Fix static initializer test
00cdb2fb4d platform/chrome: cros_ec_proto: Send command again when timeout occurs
b2e72e53cd libnvdimm/pmem: Fix crash triggered when I/O in-flight during unbind
6d86634d7b memcg: enable accounting for pids in nested pid namespaces
388f12dabb mm,vmscan: fix divide by zero in get_scan_count
2d2d8b0eca mm/hugetlb: initialize hugetlb_usage in mm_init
ce75a6b399 mm/hmm: bypass devmap pte when all pfn requested flags are fulfilled
e1fa3b2b60 hugetlb: fix hugetlb cgroup refcounting during vma split
27dd91221b s390/pv: fix the forcing of the swiotlb
086faa4a2e cpufreq: powernv: Fix init_chip_info initialization in numa=off
55be9eb193 scsi: qla2xxx: Sync queue idx with queue_pair_map idx
9c8414325e scsi: qla2xxx: Changes to support kdump kernel
137dafa722 scsi: BusLogic: Fix missing pr_cont() use
69775e4e17 ovl: fix BUG_ON() in may_delete() when called from ovl_cleanup()
7a5756e905 parisc: fix crash with signals and alloca
9a4e7f9038 io_uring: remove duplicated io_size from rw
6930a2a5be fs/io_uring Don't use the return value from import_iovec().
2c304c65de net: hns3: clean up a type mismatch warning
fb1ee02787 net: w5100: check return value after calling platform_get_resource()
c49a52046d fix array-index-out-of-bounds in taprio_change
a4301d06a0 net: fix NULL pointer reference in cipso_v4_doi_free
5ed5d594d9 ath9k: fix sleeping in atomic context
aa3708236e ath9k: fix OOB read ar9300_eeprom_restore_internal
be457b27dd wcn36xx: Fix missing frame timestamp for beacon/probe-resp
b1d547f2f5 selftests/bpf: Fix potential unreleased lock
3ad66d6782 parport: remove non-zero check on count
1e93025378 net/mlx5: DR, Enable QP retransmission
9c5c65ecbd net/mlx5: DR, fix a potential use-after-free bug
4bbf0a9d90 iwlwifi: mvm: Fix scan channel flags settings
a693aff5e8 iwlwifi: fw: correctly limit to monitor dump
4ed6510e05 iwlwifi: mvm: fix access to BSS elements
9e80a3d88f iwlwifi: mvm: avoid static queue number aliasing
3ed8982df5 iwlwifi: mvm: fix a memory leak in iwl_mvm_mac_ctxt_beacon_changed
608c8359c5 iwlwifi: pcie: free RBs during configure
eb04c51a43 nfsd: fix crash on LOCKT on reexported NFSv3
0e9f449221 drm/amdkfd: Account for SH/SE count when setting up cu masks.
27d4a96add ASoC: rockchip: i2s: Fixup config for DAIFMT_DSP_A/B
969eddc3b4 ASoC: rockchip: i2s: Fix regmap_ops hang
7344a8a801 usbip:vhci_hcd USB port can get stuck in the disabled state
29c8f13a34 usbip: give back URBs for unsent unlink requests during cleanup
8de01a896c usb: musb: musb_dsps: request_irq() after initializing musb
c0751eeb93 Revert "USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST quirk set"
ba2faddf1f cifs: fix wrong release in sess_alloc_buffer() failed path
7c7d6c9cd8 mmc: core: Return correct emmc response in case of ioctl error
d1e382a04a selftests/bpf: Enlarge select() timeout for test_maps
3aab5bffdd mmc: rtsx_pci: Fix long reads when clock is prescaled
7f43da79eb mmc: sdhci-of-arasan: Check return value of non-void funtions
834ecf61ce mmc: sdhci-of-arasan: Modified SD default speed to 19MHz for ZynqMP
1a40e60e2a of: Don't allow __of_attached_node_sysfs() without CONFIG_SYSFS
be69ed7bb9 ASoC: Intel: Skylake: Fix passing loadable flag for module
4a48ed4794 ASoC: Intel: Skylake: Fix module configuration for KPB and MIXER
d72afec087 soundwire: intel: fix potential race condition during power down
b225eeaf3a btrfs: tree-log: check btrfs_lookup_data_extent return value
87ae522e46 m68knommu: only set CONFIG_ISA_DMA_API for ColdFire sub-arch
c10b1afc2f octeontx2-pf: Fix NIX1_RX interface backpressure
6d657f1fa1 rtw88: wow: fix size access error of probe request
aa82a11176 rtw88: wow: build wow function only if CONFIG_PM is on
2fd1964f75 rtw88: use read_poll_timeout instead of fixed sleep
9baf6f8ca2 rtl8xxxu: Fix the handling of TX A-MPDU aggregation
756924bc18 drm/exynos: Always initialize mapping in exynos_drm_register_dma()
9ce6e29375 lockd: lockd server-side shouldn't set fl_ops
2d3fab9cea usb: chipidea: host: fix port index underflow and UBSAN complains
2225a5cd2f gfs2: Don't call dlm after protocol is unmounted
0df5eba67b kselftest/arm64: pac: Fix skipping of tests on systems without PAC
9486d7ac9f kselftest/arm64: mte: Fix misleading output when skipping tests
1f5db5b8a3 net: Fix offloading indirect devices dependency on qdisc order creation
2a69325ee5 staging: rts5208: Fix get_ms_information() heap buffer size
868831492d hwmon: (pmbus/ibm-cffps) Fix write bits for LED control
39738ebfad selftests/bpf: Fix flaky send_signal test
c53c68c9bf rpc: fix gss_svc_init cleanup on failure
4b1b4d3f45 tcp: enable data-less, empty-cookie SYN with TFO_SERVER_COOKIE_NOT_REQD
fca514f25c iomap: pass writeback errors to the mapping
49e2bcb7cf serial: sh-sci: fix break handling for sysrq
a99eec36ed opp: Don't print an error if required-opps is missing
6698029de3 Bluetooth: Fix handling of LE Enhanced Connection Complete
240a7025a6 nvme: code command_id with a genctr for use-after-free validation
24618e92d5 nvme-tcp: don't check blk_mq_tag_to_rq when receiving pdu data
27e8bc1f5b arm64: dts: ls1046a: fix eeprom entries
aa06cfc529 arm64: tegra: Fix compatible string for Tegra132 CPUs
9c2b89f64f ARM: tegra: tamonten: Fix UART pad setting
035e8d5a6d ARM: tegra: acer-a500: Remove bogus USB VBUS regulators
9713dfa518 mac80211: Fix monitor MTU limit so that A-MSDUs get through
83449db3aa drm/display: fix possible null-pointer dereference in dcn10_set_clock()
2254383788 gpu: drm: amd: amdgpu: amdgpu_i2c: fix possible uninitialized-variable access in amdgpu_i2c_router_select_ddc_port()
155e704790 net/mlx5: Fix variable type to match 64bit
f86bc4a1a4 drm/msm/dp: return correct edid checksum after corrupted edid checksum read
98d44b7be6 Bluetooth: avoid circular locks in sco_sock_connect
a1073aad49 Bluetooth: schedule SCO timeouts with delayed_work
d6c9142399 drm/vmwgfx: fix potential UAF in vmwgfx_surface.c
3841dfa7eb selftests/bpf: Fix xdp_tx.c prog section name
63ebc1f1df drm/amd/display: fix incorrect CM/TF programming sequence in dwb
d763afc4ea drm/amd/display: fix missing writeback disablement if plane is removed
491c8be219 thunderbolt: Fix port linking by checking all adapters
0f0f1de02b drm: xlnx: zynqmp: release reset to DP controller before accessing DP registers
f76f78f9f4 drm: xlnx: zynqmp_dpsub: Call pm_runtime_get_sync before setting pixel clock
127f3610a0 drm/msm/dsi: Fix DSI and DSI PHY regulator config from SDM660
0bbbe3ec67 drm/msm: mdp4: drop vblank get/put from prepare/complete_commit
ac21cd44c9 net: ethernet: stmmac: Do not use unreachable() in ipq806x_gmac_probe()
2b0fa8d530 nvmem: qfprom: Fix up qfprom_disable_fuse_blowing() ordering
35e5c99b15 arm64: dts: qcom: sm8250: Fix epss_l3 unit address
43ccafc91f arm64: dts: qcom: msm8996: don't use underscore in node name
f868c2d62a arm64: dts: qcom: msm8994: don't use underscore in node name
bda9c84edb arm64: dts: qcom: sdm630: don't use underscore in node name
aa16e76c80 arm64: dts: qcom: ipq6018: drop '0x' from unit address
da714a1983 arm64: dts: qcom: sdm660: use reg value for memory node
34e9c56675 arm64: dts: qcom: ipq8074: fix pci node reg property
74287874c9 ARM: dts: imx53-ppd: Fix ACHC entry
6a00decce3 serial: 8250_omap: Handle optional overrun-throttle-ms property
699c914758 arm64: dts: qcom: sdm630: Fix TLMM node and pinctrl configuration
310a127178 arm64: dts: qcom: sdm630: Rewrite memory map
783be2a942 gfs2: Fix glock recursion in freeze_go_xmote_bh
4e014ff22e media: tegra-cec: Handle errors of clk_prepare_enable()
c159db240c media: TDA1997x: fix tda1997x_query_dv_timings() return value
e3a2e20ed5 media: v4l2-dv-timings.c: fix wrong condition in two for-loops
ac1bcf53e3 media: imx258: Limit the max analogue gain to 480
4cb4967472 media: imx258: Rectify mismatch of VTS value
a64e3f1d8a ASoC: Intel: update sof_pcm512x quirks
9cf8272420 ASoC: Intel: bytcr_rt5640: Move "Platform Clock" routes to the maps for the matching in-/output
f1fb1f6fa1 arm64: tegra: Fix Tegra194 PCIe EP compatible string
8fb3d8c151 ARM: dts: at91: use the right property for shutdown controller
f710323dcd bonding: 3ad: fix the concurrency between __bond_release_one() and bond_3ad_state_machine_handler()
5d008cb763 ARM: dts: stm32: Update AV96 adv7513 node per dtbs_check
3142476fa0 ARM: dts: stm32: Set {bitclock,frame}-master phandles on ST DKx
37437a60a9 ARM: dts: stm32: Set {bitclock,frame}-master phandles on DHCOM SoM
f4c7c95e3e workqueue: Fix possible memory leaks in wq_numa_init()
6528cc687c Bluetooth: skip invalid hci_sync_conn_complete_evt
3b82e4799f ata: sata_dwc_460ex: No need to call phy_exit() befre phy_init()
4af60a543b libbpf: Fix race when pinning maps in parallel
874d5aa06c samples: bpf: Fix tracex7 error raised on the missing argument
035f83b5ab staging: ks7010: Fix the initialization of the 'sleep_status' structure
d0a8ef04c2 serial: 8250_pci: make setup_port() parameters explicitly unsigned
2603740df8 hvsi: don't panic on tty_register_driver failure
dd3307a8b3 xtensa: ISS: don't panic in rs_init
b763d2e7d4 serial: 8250: Define RX trigger levels for OxSemi 950 devices
973c57c5e6 s390: make PCI mio support a machine flag
77d62f2bcc s390/jump_label: print real address in a case of a jump label bug
863d2eb2f7 flow_dissector: Fix out-of-bounds warnings
64583448c2 ipv4: ip_output.c: Fix out-of-bounds warning in ip_copy_addrs()
bcc61adefd video: fbdev: riva: Error out if 'pixclock' equals zero
63abc0eb8a video: fbdev: kyro: Error out if 'pixclock' equals zero
6a8dcd2ffb video: fbdev: asiliantfb: Error out if 'pixclock' equals zero
3740418ccd arm64: dts: allwinner: h6: tanix-tx6: Fix regulator node names
be2e11b9f8 drm/bridge: nwl-dsi: Avoid potential multiplication overflow on 32-bit
6a3564739b bpf/tests: Do not PASS tests without actually testing the result
99121dec14 bpf/tests: Fix copy-and-paste error in double word test
6f51f42412 drm/amd/amdgpu: Update debugfs link_settings output link_rate field in hex
a5999d18a8 drm/amdgpu: Fix a printing message
5b3a45eedd ethtool: improve compat ioctl handling
52bb703f71 nfp: fix return statement in nfp_net_parse_meta()
23e5fb6475 media: atomisp: pci: fix error return code in atomisp_pci_probe()
e5cecb9105 media: atomisp: Fix runtime PM imbalance in atomisp_pci_probe
9a85b9e376 media: platform: stm32: unprepare clocks at handling errors in probe
c6e5eebd95 media: hantro: vp8: Move noisy WARN_ON to vpu_debug
f462a39eb8 drm/amd/display: Fix timer_per_pixel unit error
b4f5c9454d selftests: firmware: Fix ignored return val of asprintf() warn
e944a22126 bus: fsl-mc: fix mmio base address for child DPRCs
165c55af5f tty: serial: jsm: hold port lock when reporting modem line changes
642639bb8d staging: board: Fix uninitialized spinlock when attaching genpd
03f4492dbf usb: gadget: composite: Allow bMaxPower=0 if self-powered
5534de13b6 USB: EHCI: ehci-mv: improve error handling in mv_ehci_enable()
b2b8137ec9 usb: gadget: u_ether: fix a potential null pointer dereference
566ddd2d94 usb: host: fotg210: fix the actual_length of an iso packet
224cf5e8c8 usb: host: fotg210: fix the endpoint's transactional opportunities calculation
463b3edfba igc: Check if num of q_vectors is smaller than max before array access
d3ca78775d rcu: Fix macro name CONFIG_TASKS_RCU_TRACE
34609faad0 drm: protect drm_master pointers in drm_lease.c
06a553a99b drm: serialize drm_file.master with a new spinlock
54e51d288b drm: avoid blocking in drm_clients_info's rcu section
df19d95141 Smack: Fix wrong semantics in smk_access_entry()
3533aa65e6 netlink: Deal with ESRCH error in nlmsg_notify()
9de06dcd47 video: fbdev: kyro: fix a DoS bug by restricting user input
29ab7f6d50 ARM: dts: qcom: apq8064: correct clock names
e0c17c11b1 iavf: fix locking of critical sections
67c9262e3f iavf: do not override the adapter state in the watchdog task
9f11de5601 iio: dac: ad5624r: Fix incorrect handling of an optional regulator.
e78a0b4a33 net: phy: Fix data type in DP83822 dp8382x_disable_wol()
cca6127587 tipc: keep the skb in rcv queue until the whole data is read
cc12ab5951 PCI: Use pci_update_current_state() in pci_enable_device_flags()
aad29a00a5 crypto: mxs-dcp - Use sg_mapping_iter to copy data
871abd1e61 x86/hyperv: fix for unwanted manipulation of sched_clock when TSC marked unstable
c327b69e96 libbpf: Fix reuse of pinned map on older kernel
6a985c5794 media: dib8000: rewrite the init prbs logic
2048907d8c ASoC: atmel: ATMEL drivers don't need HAS_DMA
10a135969f drm/amdgpu: Fix amdgpu_ras_eeprom_init()
b32d3ded9d drm/vc4: hdmi: Set HD_CTL_WHOLSMP and HD_CTL_CHALIGN_SET
6afd1e053d userfaultfd: prevent concurrent API initialization
1e4cfe954b kbuild: Fix 'no symbols' warning when CONFIG_TRIM_UNUSD_KSYMS=y
981bf9b0aa MIPS: Malta: fix alignment of the devicetree buffer
bb8108546d f2fs: should put a page beyond EOF when preparing a write
d04925fb8d f2fs: deallocate compressed pages when error happens
4b71928e5c f2fs: fix to unmap pages from userspace process in punch_hole()
1c934aba9f f2fs: fix unexpected ENOENT comes from f2fs_map_blocks()
45cb5f86c1 f2fs: fix to account missing .skipped_gc_rwsem
fd69f613af soc: mediatek: cmdq: add address shift in jump
d320c1b2e7 KVM: PPC: Fix clearing never mapped TCEs in realmode
6bf98b94ff clk: at91: clk-generated: Limit the requested rate to our range
9bab2bc4c2 fscache: Fix cookie key hashing
b4849e2ac7 RDMA/hns: Fix QP's resp incomplete assignment
e91077cf17 powerpc/smp: Update cpu_core_map on all PowerPc systems
903ca538f5 platform/x86: dell-smbios-wmi: Add missing kfree in error-exit from run_smbios_call
add8e8c340 KVM: PPC: Book3S HV Nested: Reflect guest PMU in-use to L0 when guest SPRs are live
4c0c4f7021 scsi: ufs: ufs-exynos: Fix static checker warning
bda5602c1c KVM: PPC: Book3S HV: Fix copy_tofrom_guest routines
926bf91248 clk: imx8m: fix clock tree update of TF-A managed clocks
e84a72f696 HID: i2c-hid: Fix Elan touchpad regression
253bac6c60 iommu/vt-d: Update the virtual command related registers
947579a696 powerpc/config: Renable MTD_PHYSMAP_OF
1bc19e4062 scsi: qedf: Fix error codes in qedf_alloc_global_queues()
dc45777499 scsi: qedi: Fix error codes in qedi_alloc_global_queues()
782c401784 scsi: smartpqi: Fix an error code in pqi_get_raid_map()
41066433be powerpc/numa: Consider the max NUMA node for migratable LPAR
d3612083ec pinctrl: single: Fix error return code in pcs_parse_bits_in_pinctrl_entry()
6291fd0eea scsi: fdomain: Fix error return code in fdomain_probe()
f02ab9d1d3 sunrpc: Fix return value of get_srcport()
21a2be1a51 SUNRPC query transport's source port
f19abe0463 SUNRPC/xprtrdma: Fix reconnection locking
f3d3016127 SUNRPC: Fix potential memory corruption
9aa7a3ffb1 NFSv4/pnfs: The layout barrier indicate a minimal value for the seqid
2a542421eb NFSv4/pNFS: Always allow update of a zero valued layout barrier
4b96edea5c NFSv4/pNFS: Fix a layoutget livelock loop
fa55e76641 dma-debug: fix debugfs initialization order
ca7f7e37ba openrisc: don't printk() unconditionally
31fd3211ef f2fs: reduce the scope of setting fsck tag when de->name_len is zero
49e4c83db8 cpuidle: pseries: Mark pseries_idle_proble() as __init
876e45c95e RDMA/mlx5: Delete not-available udata check
a77da9de0d RDMA/efa: Remove double QP type assignment
1988836e30 powerpc/stacktrace: Include linux/delay.h
c5a5528da7 cpuidle: pseries: Fixup CEDE0 latency only for POWER10 onwards
3b2bbcccd6 scsi: ufs: Fix memory corruption by ufshcd_read_desc_param()
d353e093c0 vfio: Use config not menuconfig for VFIO_NOIOMMU
0f711378f0 pinctrl: samsung: Fix pinctrl bank pin count
59137b7dff scsi: BusLogic: Use %X for u32 sized integer rather than %lX
8ea3e622af docs: Fix infiniband uverbs minor number
fe2a1cd622 RDMA/iwcm: Release resources if iw_cm module initialization fails
b824bae96f IB/hfi1: Adjust pkey entry in index 0
273ed4f47e clk: rockchip: drop GRF dependency for rk3328/rk3036 pll types
f1eccc4081 scsi: bsg: Remove support for SCSI_IOCTL_SEND_COMMAND
ef5395fbad pinctrl: armada-37xx: Correct PWM pins definitions
782ceaba97 pinctrl: remove empty lines in pinctrl subsystem
2d586a3f5b f2fs: quota: fix potential deadlock
70fd936367 HID: input: do not report stylus battery state as "full"
4e89aea738 PCI: aardvark: Fix masking and unmasking legacy INTx interrupts
b50db4c02f PCI: aardvark: Fix checking for PIO status
9d60905754 PCI: Export pci_pio_to_address() for module use
fa3c15ccf2 PCI: aardvark: Configure PCIe resources from 'ranges' DT property
df23bd40ed PCI: xilinx-nwl: Enable the clock through CCF
72f2be3432 PCI: Return ~0 data on pciconfig_read() CAP_SYS_ADMIN failure
088a1052f7 PCI: Restrict ASMedia ASM1062 SATA Max Payload Size Supported
9302a3c00c PCI/portdrv: Enable Bandwidth Notification only if port supports it
74d6dfcb0f f2fs: fix to do sanity check for sb/cp fields correctly
ce7e64e63a ARM: 9105/1: atags_to_fdt: don't warn about stack size
ba73bc1666 libata: add ATA_HORKAGE_NO_NCQ_TRIM for Samsung 860 and 870 SSDs
bcbc44e42d dmaengine: imx-sdma: remove duplicated sdma_load_context
300ccb1292 Revert "dmaengine: imx-sdma: refine to load context only once"
76668bdee0 s390/qdio: cancel the ESTABLISH ccw after timeout
bcc0c767f9 s390/qdio: fix roll-back after timeout on ESTABLISH ccw
2d2aaa200c media: rc-loopback: return number of emitters rather than error
c0eaaa6868 media: uvc: don't do DMA on stack
516dbe27f4 VMCI: fix NULL pointer dereference when unmapping queue pair
6cae39f457 crypto: ccp - shutdown SEV firmware on kexec
7509c4cb7c dm crypt: Avoid percpu_counter spinlock contention in crypt_page_alloc()
4f920fefd8 power: supply: max17042: handle fails of reading status register
0d54bbad80 block: bfq: fix bfq_set_next_ioprio_data()
5df14bba00 crypto: public_key: fix overflow during implicit conversion
646870ad8e wcn36xx: Ensure finish scan is not requested before start scan
4753723f8b iio: ltc2983: fix device probe
de32e15180 arm64: head: avoid over-mapping in map_memory
2d3a9dff76 arm64: mm: Fix TLBI vs ASID rollover
01e6c64bbc soc: aspeed: p2a-ctrl: Fix boundary check for mmap
3fdf2feb6c soc: aspeed: lpc-ctrl: Fix boundary check for mmap
e80c45dbe2 soc: qcom: aoss: Fix the out of bound usage of cooling_devs
610e8b2621 pinctrl: ingenic: Fix incorrect pull up/down info
1e1136fbe8 pinctrl: stmfx: Fix hazardous u8[] to unsigned long cast
7524fcd09c clk: socfpga: agilex: add the bypass register for s2f_usr0 clock
96bf326fb9 clk: socfpga: agilex: fix up s2f_user0_clk representation
7eb16be25f clk: socfpga: agilex: fix the parents of the psi_ref_clk
ac99b3aa83 tools/thermal/tmon: Add cross compiling support
2daa118a3f selftests/ftrace: Fix requirement check of README file
8248b61b86 ceph: fix dereference of null pointer cf
c37085d606 9p/xen: Fix end of loop tests for list_for_each_entry
907944851a xen: fix setting of max_pfn in shared_info
37566a343f powerpc/perf/hv-gpci: Fix counter value parsing
5f13c8bae8 PCI/MSI: Skip masking MSI-X on Xen PV
d15554f985 blk-zoned: allow BLKREPORTZONE without CAP_SYS_ADMIN
a58f082554 blk-zoned: allow zone management send operations without CAP_SYS_ADMIN
c1b249e02a btrfs: reset replace target device to allocation state on close
0901af53da btrfs: wake up async_delalloc_pages waiters after submit
9ac218642d io-wq: fix wakeup race when adding new work
548ee201fb io_uring: fail links of cancelled timeouts
54eb6211b9 io_uring: add ->splice_fd_in checks
a3ed34bcad io_uring: place fixed tables under memcg limits
5103b73334 io_uring: limit fixed table size by RLIMIT_NOFILE
ebedb252a4 rtc: tps65910: Correct driver module alias

Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
Change-Id: Icc858b61fec7d76c8b144958c0d5c1859508ecb2
2022-01-21 09:35:04 +01:00
Greg Kroah-Hartman
7887091009 Revert "ANDROID: sysrq: add vendor hook for sysrq crash information"
This reverts commit 0d8928ed6e.

The hook android_vh_sysrq_crash is not used by any vendor, so remove
it to help with merge issues with future LTS releases.

If this is needed by any real user, it can easily be reverted to add it
back and then the symbol should be added to the abi list at the same
time to prevent it from being removed again later.

Bug: 203756332
Bug: 170234110
Cc: Sangmoon Kim <sangmoon.kim@samsung.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
Change-Id: I1b4b9280081e0fb569bb74c7f0d3efcb18728b48
2022-01-20 10:04:49 +01:00
Steven Liu
79b9c780ba serial: 8250: fix programmable transmit interrupt mode
fix __do_stop_tx IER clear UART_IER_PTIME bit.

Fixes: e480347688 ("serial: 8250: enable Programmable THRE Interrupt for tx")
Signed-off-by: Steven Liu <steven.liu@rock-chips.com>
Change-Id: Ie82bdb4dc7cb35ada9cd422e575412eb63d5bf45
2022-01-04 19:19:37 +08:00
Greg Kroah-Hartman
ba13eb1927 This is the 5.10.88 stable release
-----BEGIN PGP SIGNATURE-----
 
 iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmHC4kgACgkQONu9yGCS
 aT4l7w/8Da5EworPQ45NW5oEnNDU+tVjVft6yLyEjNhqe7/dXgden9MIhXl/rd38
 vIWHWxdR3g+h2aEBuQSFhkCYLgaiO822DWqx8XkK9F1EJWbypycb6IP/XVy7QqbX
 TyUakCg1hN0TcZ9qhkugRMqAmzt5X4K+R6LtvlfQT2GAlEchSzyAl0tvS594Oxi7
 tMo6SQfAdD+IWwg72t80odMANcoX7GIcv2Kn4UA+c8eDEdiD5MZQTbz6Xi28hKiE
 zN+GQ4wFgt0/+sWiKEGPW7hcs2hnIU/dEwmgim+mgQyMSx+d1EFNNPsOaXyuLAaE
 MLhhgyOn6ZYfAI6+2A3xDw6hnvHWT1xCDxfgfDhz24sHSQY5K96pFAB3DXsKm0nC
 LtpHZopqJ9T0t1JkPpHCqoXXmEZmvHUlYVWwvQAwDBbqEkJ/i/w9QTlSDDP1+K6r
 CLhGWo9titrpcpRLnbcrweXgjuiI13Rz5mlgKCafE/jEtR5jzZ2neBvTepzuGVrY
 OW6jVmOXmVQEl9O73uWUvTizyUq+nl78R1lr9Xva0SpX/OXKKfO3q2w36tTQNyf+
 /g7+sgTJcLax1eZh0n17xiKzQYzwn5FMYPhzUF6fc0Rrz1CUCt1nCjq28hMqG32v
 dOFYqU/CrfFMKfR0YiKI7tpSba8QNP8f0Ig+KzDE2dKA+Lty1kw=
 =fpH+
 -----END PGP SIGNATURE-----

Merge 5.10.88 into android12-5.10-lts

Changes in 5.10.88
	KVM: selftests: Make sure kvm_create_max_vcpus test won't hit RLIMIT_NOFILE
	KVM: downgrade two BUG_ONs to WARN_ON_ONCE
	mac80211: fix regression in SSN handling of addba tx
	mac80211: mark TX-during-stop for TX in in_reconfig
	mac80211: send ADDBA requests using the tid/queue of the aggregation session
	mac80211: validate extended element ID is present
	firmware: arm_scpi: Fix string overflow in SCPI genpd driver
	bpf: Fix signed bounds propagation after mov32
	bpf: Make 32->64 bounds propagation slightly more robust
	bpf, selftests: Add test case trying to taint map value pointer
	virtio_ring: Fix querying of maximum DMA mapping size for virtio device
	vdpa: check that offsets are within bounds
	recordmcount.pl: look for jgnop instruction as well as bcrl on s390
	dm btree remove: fix use after free in rebalance_children()
	audit: improve robustness of the audit queue handling
	arm64: dts: imx8m: correct assigned clocks for FEC
	arm64: dts: imx8mp-evk: Improve the Ethernet PHY description
	arm64: dts: rockchip: remove mmc-hs400-enhanced-strobe from rk3399-khadas-edge
	arm64: dts: rockchip: fix rk3308-roc-cc vcc-sd supply
	arm64: dts: rockchip: fix rk3399-leez-p710 vcc3v3-lan supply
	arm64: dts: rockchip: fix audio-supply for Rock Pi 4
	mac80211: track only QoS data frames for admission control
	tee: amdtee: fix an IS_ERR() vs NULL bug
	ceph: fix duplicate increment of opened_inodes metric
	ceph: initialize pathlen variable in reconnect_caps_cb
	ARM: socfpga: dts: fix qspi node compatible
	clk: Don't parent clks until the parent is fully registered
	soc: imx: Register SoC device only on i.MX boards
	virtio/vsock: fix the transport to work with VMADDR_CID_ANY
	selftests: net: Correct ping6 expected rc from 2 to 1
	s390/kexec_file: fix error handling when applying relocations
	sch_cake: do not call cake_destroy() from cake_init()
	inet_diag: fix kernel-infoleak for UDP sockets
	net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg
	selftests: Add duplicate config only for MD5 VRF tests
	selftests: Fix raw socket bind tests with VRF
	selftests: Fix IPv6 address bind tests
	dmaengine: st_fdma: fix MODULE_ALIAS
	net/sched: sch_ets: don't remove idle classes from the round-robin list
	selftest/net/forwarding: declare NETIFS p9 p10
	drm/ast: potential dereference of null pointer
	mac80211: agg-tx: don't schedule_and_wake_txq() under sta->lock
	mac80211: fix lookup when adding AddBA extension element
	flow_offload: return EOPNOTSUPP for the unsupported mpls action type
	rds: memory leak in __rds_conn_create()
	drm/amd/pm: fix a potential gpu_metrics_table memory leak
	mptcp: clear 'kern' flag from fallback sockets
	soc/tegra: fuse: Fix bitwise vs. logical OR warning
	igb: Fix removal of unicast MAC filters of VFs
	igbvf: fix double free in `igbvf_probe`
	igc: Fix typo in i225 LTR functions
	ixgbe: Document how to enable NBASE-T support
	ixgbe: set X550 MDIO speed before talking to PHY
	netdevsim: Zero-initialize memory for new map's value in function nsim_bpf_map_alloc
	net/packet: rx_owner_map depends on pg_vec
	sfc_ef100: potential dereference of null pointer
	net: Fix double 0x prefix print in SKB dump
	net/smc: Prevent smc_release() from long blocking
	net: systemport: Add global locking for descriptor lifecycle
	sit: do not call ipip6_dev_free() from sit_init_net()
	bpf, selftests: Fix racing issue in btf_skc_cls_ingress test
	powerpc/85xx: Fix oops when CONFIG_FSL_PMC=n
	USB: gadget: bRequestType is a bitfield, not a enum
	Revert "usb: early: convert to readl_poll_timeout_atomic()"
	KVM: x86: Drop guest CPUID check for host initiated writes to MSR_IA32_PERF_CAPABILITIES
	tty: n_hdlc: make n_hdlc_tty_wakeup() asynchronous
	USB: NO_LPM quirk Lenovo USB-C to Ethernet Adapher(RTL8153-04)
	usb: dwc2: fix STM ID/VBUS detection startup delay in dwc2_driver_probe
	PCI/MSI: Clear PCI_MSIX_FLAGS_MASKALL on error
	PCI/MSI: Mask MSI-X vectors only on success
	usb: xhci: Extend support for runtime power management for AMD's Yellow carp.
	USB: serial: cp210x: fix CP2105 GPIO registration
	USB: serial: option: add Telit FN990 compositions
	btrfs: fix memory leak in __add_inode_ref()
	btrfs: fix double free of anon_dev after failure to create subvolume
	zonefs: add MODULE_ALIAS_FS
	iocost: Fix divide-by-zero on donation from low hweight cgroup
	serial: 8250_fintek: Fix garbled text for console
	timekeeping: Really make sure wall_to_monotonic isn't positive
	libata: if T_LENGTH is zero, dma direction should be DMA_NONE
	drm/amdgpu: correct register access for RLC_JUMP_TABLE_RESTORE
	Input: touchscreen - avoid bitwise vs logical OR warning
	ARM: dts: imx6ull-pinfunc: Fix CSI_DATA07__ESAI_TX0 pad name
	xsk: Do not sleep in poll() when need_wakeup set
	media: mxl111sf: change mutex_init() location
	fuse: annotate lock in fuse_reverse_inval_entry()
	ovl: fix warning in ovl_create_real()
	scsi: scsi_debug: Don't call kcalloc() if size arg is zero
	scsi: scsi_debug: Fix type in min_t to avoid stack OOB
	scsi: scsi_debug: Sanity check block descriptor length in resp_mode_select()
	rcu: Mark accesses to rcu_state.n_force_qs
	bus: ti-sysc: Fix variable set but not used warning for reinit_modules
	Revert "xsk: Do not sleep in poll() when need_wakeup set"
	xen/blkfront: harden blkfront against event channel storms
	xen/netfront: harden netfront against event channel storms
	xen/console: harden hvc_xen against event channel storms
	xen/netback: fix rx queue stall detection
	xen/netback: don't queue unlimited number of packages
	Linux 5.10.88

Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
Change-Id: Ie9143ca88b59cd27f4b2101e83e25017a5565c6a
2021-12-22 10:12:32 +01:00
Juergen Gross
8fa3a370cc xen/console: harden hvc_xen against event channel storms
commit fe415186b4 upstream.

The Xen console driver is still vulnerable for an attack via excessive
number of events sent by the backend. Fix that by using a lateeoi event
channel.

For the normal domU initial console this requires the introduction of
bind_evtchn_to_irq_lateeoi() as there is no xenbus device available
at the time the event channel is bound to the irq.

As the decision whether an interrupt was spurious or not requires to
test for bytes having been read from the backend, move sending the
event into the if statement, as sending an event without having found
any bytes to be read is making no sense at all.

This is part of XSA-391

Signed-off-by: Juergen Gross <jgross@suse.com>
Reviewed-by: Jan Beulich <jbeulich@suse.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2021-12-22 09:30:59 +01:00