Author	SHA1	Message	Date
Blagovest Kolenichev	2e72d8932e	Merge android-5.4.24 (ce5de62) into msm-5.4 ... * refs/heads/tmp-ce5de62: Revert "BACKPORT: tracing: Remove unnecessary DEBUG_FS dependency" Linux 5.4.24 blktrace: Protect q->blk_trace with RCU kvm: nVMX: VMWRITE checks unsupported field before read-only field kvm: nVMX: VMWRITE checks VMCS-link pointer before VMCS field mm, thp: fix defrag setting if newline is not used mm/huge_memory.c: use head to check huge zero page mm/gup: allow FOLL_FORCE for get_user_pages_fast() mm/debug.c: always print flags in dump_page() locking/lockdep: Fix lockdep_stats indentation problem xfs: clear kernel only flags in XFS_IOC_ATTRMULTI_BY_HANDLE bus: tegra-aconnect: Remove PM_CLK dependency netfilter: nf_flowtable: fix documentation netfilter: nft_tunnel: no need to call htons() when dumping ports thermal: brcmstb_thermal: Do not use DT coefficients thermal: db8500: Depromote debug print ubifs: Fix ino_t format warnings in orphan_delete() rcu: Allow only one expedited GP to run concurrently with wakeups KVM: x86: Remove spurious clearing of async #PF MSR KVM: x86: Remove spurious kvm_mmu_unload() from vcpu destruction path x86/resctrl: Check monitoring static key in the MBM overflow handler perf ui gtk: Add missing zalloc object perf hists browser: Restore ESC as "Zoom out" of DSO/thread/etc pwm: omap-dmtimer: put_device() after of_find_device_by_node() lib/vdso: Update coarse timekeeper unconditionally lib/vdso: Make __arch_update_vdso_data() logic understandable kprobes: Set unoptimized flag after unoptimizing code ima: ima/lsm policy rule loading logic bug fixes drivers: net: xgene: Fix the order of the arguments of 'alloc_etherdev_mqs()' RDMA/hns: Bugfix for posting a wqe with sge RDMA/hns: Simplify the calculation and usage of wqe idx for post verbs f2fs: fix to add swap extent correctly sched/fair: Optimize select_idle_cpu KVM: Check for a bad hva before dropping into the ghc slow path KVM: SVM: Override default MMIO mask if memory encryption is enabled mwifiex: delete unused mwifiex_get_intf_num() mwifiex: drop most magic numbers from mwifiex_process_tdls_action_frame() namei: only return -ECHILD from follow_dotdot_rcu() kbuild: make single target builds even faster kbuild: remove unneeded variable, single-all kbuild: move headers_check rule to usr/include/Makefile kbuild: remove header compile test selftests: Install settings files to fix TIMEOUT failures net: ena: make ena rxfh support ETH_RSS_HASH_NO_CHANGE net/smc: no peer ID in CLC decline for SMCD net: atlantic: fix out of range usage of active_vlans array net: atlantic: fix potential error handling net: atlantic: fix use after free kasan warn net: netlink: cap max groups which will be considered in netlink_bind() s390/qeth: vnicc Fix EOPNOTSUPP precedence nvme-pci: Hold cq_poll_lock while completing CQEs usb: charger: assign specific number for enum value hv_netvsc: Fix unwanted wakeup in netvsc_attach() kbuild: fix DT binding schema rule to detect command line changes mac80211: Remove a redundant mutex unlock nl80211: fix potential leak in AP start drm/i915/gvt: Separate display reset from ALL_ENGINES reset drm/i915/gvt: Fix orphan vgpu dmabuf_objs' lifetime i2c: jz4780: silence log flood on txabrt i2c: altera: Fix potential integer overflow MIPS: VPE: Fix a double free and a memory leak in 'release_vpe()' HID: hiddev: Fix race in in hiddev_disconnect() HID: alps: Fix an error handling path in 'alps_input_configured()' netfilter: xt_hashlimit: reduce hashlimit_mutex scope for htable_put() netfilter: ipset: Fix forceadd evaluation path vhost: Check docket sk_family instead of call getname net/smc: transfer fasync_list in case of fallback netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reports io_uring: fix 32-bit compatability with sendmsg/recvmsg cpufreq: Fix policy initialization for internal governor drivers amdgpu/gmc_v9: save/restore sdpif regs during S3 Revert "PM / devfreq: Modify the device name as devfreq(X) for sysfs" tracing: Disable trace_printk() on post poned tests macintosh: therm_windtunnel: fix regression when instantiating devices drm/radeon: Inline drm_get_pci_dev drm/amdgpu: Drop DRIVER_USE_AGP HID: core: increase HID report buffer size to 8KiB HID: core: fix off-by-one memset in hid_report_raw_event() HID: ite: Only bind to keyboard USB interface on Acer SW5-012 keyboard dock KVM: VMX: check descriptor table exits on instruction emulation ACPI: watchdog: Fix gas->access_width usage ACPICA: Introduce ACPI_ACCESS_BYTE_WIDTH() macro audit: always check the netlink payload length in audit_receive_msg() audit: fix error handling in audit_data_to_entry() ext4: potential crash on allocation error in ext4_alloc_flex_bg_array() nvme/pci: move cqe check after device shutdown nvme: prevent warning triggered by nvme_stop_keep_alive nvme/tcp: fix bug on double requeue when send fails net: hns3: fix a copying IPv6 address error in hclge_fd_get_flow_tuples() net: hns3: add management table after IMP reset mac80211: fix wrong 160/80+80 MHz setting cfg80211: add missing policy for NL80211_ATTR_STATUS_CODE cifs: Fix mode output in debugging statements ice: update Unit Load Status bitmask to check after reset net: ena: ena-com.c: prevent NULL pointer dereference net: ena: ethtool: use correct value for crc32 hash net: ena: fix corruption of dev_idx_to_host_tbl net: ena: fix incorrectly saving queue numbers when setting RSS indirection table net: ena: rss: store hash function as values and not bits net: ena: rss: fix failure to get indirection table net: ena: rss: do not allocate key when not supported net: ena: fix incorrect default RSS key net: ena: add missing ethtool TX timestamping indication net: ena: fix uses of round_jiffies() net: ena: fix potential crash when rxfh key is NULL i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps soc/tegra: fuse: Fix build with Tegra194 configuration amdgpu: Prevent build errors regarding soft/hard-float FP ABI tags drm/amd/display: Add initialitions for PLL2 clock source drm/amd/display: Limit minimum DPPCLK to 100MHz. drm/amd/display: Check engine is not NULL before acquiring RDMA/siw: Remove unwanted WARN_ON in siw_cm_llp_data_ready() drm/amd/display: Do not set optimized_require to false after plane disable ARM: dts: sti: fixup sound frame-inversion for stihxxx-b2120.dtsi ceph: do not execute direct write in parallel if O_APPEND is specified perf/x86/msr: Add Tremont support perf/x86/cstate: Add Tremont support perf/x86/intel: Add Elkhart Lake support perf/smmuv3: Use platform_get_irq_optional() for wired interrupt NFSv4: Fix races between open and dentry revalidation qmi_wwan: unconditionally reject 2 ep interfaces qmi_wwan: re-add DW5821e pre-production variant s390/zcrypt: fix card and queue total counter wrap cfg80211: check wiphy driver existence for drvinfo report mac80211: consider more elements in parsing CRC dax: pass NOWAIT flag to iomap_apply sched/fair: Prevent unlimited runtime on throttled group timers/nohz: Update NOHZ load in remote tick sched/core: Don't skip remote tick for idle CPUs drm/msm: Set dma maximum segment size for mdss ipmi:ssif: Handle a possible NULL pointer reference ipv6: Fix nlmsg_flags when splitting a multipath route ipv6: Fix route replacement with dev-only route bonding: fix lockdep warning in bond_get_stats() net: export netdev_next_lower_dev_rcu() bonding: add missing netdev_update_lockdep_key() bnxt_en: Issue PCIe FLR in kdump kernel to cleanup pending DMAs. bnxt_en: Improve device shutdown method. sctp: move the format error check out of __sctp_sf_do_9_1_abort udp: rehash on disconnect Revert "net: dev: introduce support for sch BYPASS for lockless qdisc" qede: Fix race between rdma destroy workqueue and link change event nfc: pn544: Fix occasional HW initialization failure net/tls: Fix to avoid gettig invalid tls record net: sched: correct flower port blocking net: phy: restore mdio regs in the iproc mdio driver net: mscc: fix in frame extraction net: macb: ensure interface is not suspended on at91rm9200 net: fib_rules: Correctly set table field when table number exceeds 8 bits net: dsa: b53: Ensure the default VID is untagged EDAC: skx_common: downgrade message importance on missing PCI device io_uring: grab ->fs as part of async offload ANDROID: abi_gki_aarch64_whitelist: add module_layout and task_struct ANDROID: gki_defconfig: disable KPROBES, update ABI FROMGIT: scsi: ufs: Select INITIAL ADAPT type for HS Gear4 FROMLIST: scsi: ufs: Use ufshcd_config_pwr_mode() when scale gear FROMGIT: scsi: ufs-qcom: Apply QUIRK_HOST_TACTIVATE for WDC UFS devices FROMGIT: scsi: ufs: Allow vendor device quirks to be applied early BACKPORT: scsi: ufs: Delete struct ufs_dev_desc ANDROID: gki_defconfig: enable IOMMU_LIMIT_IOVA_ALIGNMENT FROMLIST: iommu/iova: Support limiting IOVA alignment FROMLIST: iommu/iova: Add a best-fit algorithm FROMLIST: iommu/dma: Allow drivers to reserve an iova range ANDROID: Unconditionally create bridge tracepoints ANDROID: gki_defconfig: Enable MFD_SYSCON on x86 ANDROID: update ABI for CONFIG_IIO_* changes ANDROID: gki_defconfig: add CONFIG_IIO_BUFFER and CONFIG_IIO_TRIGGER ANDROID: gki: set CONFIG_SERIAL_SPRD_CONSOLE for earlycon ANDROID: Re-add default y for VIRTIO_PCI_LEGACY ANDROID: GKI: build in HVC_DRIVER ANDROID: Removed default m for virtual sw crypto device ANDROID: Remove default y on BRIDGE_IGMP_SNOOPING ANDROID: GKI: Added missing SND configs ANDROID: scsi: ufs: allow ufs variants to override sg entry size ANDROID: GKI: Remove CONFIG_BRIDGE from arm64 config ANDROID: Enable HID_NINTENDO as y FROMLIST: HID: nintendo: add nintendo switch controller driver UPSTREAM: iommu/arm-smmu: Restore naming of driver parameter prefix ANDROID: gki_defconfig: Remove 'BRIDGE_NETFILTER is not set' UPSTREAM: net: disable BRIDGE_NETFILTER by default Linux 5.4.23 ASoC: SOF: Intel: hda: Add iDisp4 DAI bpf: Selftests build error in sockmap_basic.c s390/mm: Explicitly compare PAGE_DEFAULT_KEY against zero in storage_key_init_range s390/kaslr: Fix casts in get_random net/mlx5e: Fix crash in recovery flow without devlink reporter net/mlx5: Fix sleep while atomic in mlx5_eswitch_get_vepa net/mlx5e: Reset RQ doorbell counter before moving RQ state from RST to RDY xen: Enable interrupts when calling _cond_resched() ata: ahci: Add shutdown to freeze hardware resources of ahci io_uring: prevent sq_thread from spinning when it should stop rxrpc: Fix call RCU cleanup using non-bh-safe locks netfilter: xt_hashlimit: limit the max size of hashtable ALSA: seq: Fix concurrent access to queue current tick/time ALSA: seq: Avoid concurrent access to queue flags ALSA: rawmidi: Avoid bit fields for state flags io_uring: fix __io_iopoll_check deadlock in io_sq_thread arm64: lse: Fix LSE atomics with LLVM bpf, offload: Replace bitwise AND by logical AND in bpf_prog_offload_info_fill genirq/proc: Reject invalid affinity masks (again) crypto: rename sm3-256 to sm3 in hash_algo_name iommu/vt-d: Fix compile warning from intel-svm.h ecryptfs: replace BUG_ON with error handling code ASoC: fsl_sai: Fix exiting path on probing failure ASoC: atmel: fix atmel_ssc_set_audio link failure staging: greybus: use after free in gb_audio_manager_remove_all() staging: rtl8723bs: fix copy of overlapping memory usb: dwc2: Fix in ISOC request length checking usb: gadget: composite: Fix bMaxPower for SuperSpeedPlus scsi: Revert "target: iscsi: Wait for all commands to finish before freeing a session" scsi: Revert "RDMA/isert: Fix a recently introduced regression related to logout" drm/msm/dpu: fix BGR565 vs RGB565 confusion drm/i915/gt: Protect defer_request() from new waiters drm/bridge: tc358767: fix poll timeouts drm/i915/gvt: more locking for ppgtt mm LRU list drm/i915/execlists: Always force a context reload when rewinding RING_TAIL drm/i915/gt: Detect if we miss WaIdleLiteRestore Revert "dmaengine: imx-sdma: Fix memory leak" Btrfs: fix deadlock during fast fsync when logging prealloc extents beyond eof btrfs: don't set path->leave_spinning for truncate Btrfs: fix race between shrinking truncate and fiemap Btrfs: fix btrfs_wait_ordered_range() so that it waits for all ordered extents btrfs: do not check delayed items are empty for single transaction cleanup btrfs: reset fs_root to NULL on error in open_ctree btrfs: fix bytes_may_use underflow in prealloc error condtition btrfs: destroy qgroup extent records on transaction abort KVM: apic: avoid calculating pending eoi from an uninitialized val KVM: nVMX: handle nested posted interrupts when apicv is disabled for L1 KVM: nVMX: clear PIN_BASED_POSTED_INTR from nested pinbased_ctls only when apicv is globally disabled KVM: nVMX: Check IO instruction VM-exit conditions KVM: nVMX: Refactor IO bitmap checks into helper function ext4: fix race between writepages and enabling EXT4_EXTENTS_FL ext4: rename s_journal_flag_rwsem to s_writepages_rwsem ext4: fix mount failure with quota configured as module ext4: fix potential race between s_flex_groups online resizing and access ext4: fix potential race between s_group_info online resizing and access ext4: fix potential race between online resizing and write operations ext4: add cond_resched() to __ext4_find_entry() ext4: fix a data race in EXT4_I(inode)->i_disksize KVM: x86: don't notify userspace IOAPIC on edge-triggered interrupt EOI KVM: nVMX: Don't emulate instructions in guest mode sched/psi: Fix OOB write when writing 0 bytes to PSI files drm/i915: Update drm/i915 bug filing URL drm/i915: Wean off drm_pci_alloc/drm_pci_free drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets drm/amdgpu/gfx10: disable gfxoff when reading rlc clock drm/amdgpu/gfx9: disable gfxoff when reading rlc clock drm/amdgpu/soc15: fix xclk for raven mm: Avoid creating virtual address aliases in brk()/mmap()/mremap() lib/stackdepot.c: fix global out-of-bounds in stack_slabs mm/sparsemem: pfn_to_page is not valid yet on SPARSEMEM mm/vmscan.c: don't round up scan size for online memory cgroup genirq/irqdomain: Make sure all irq domain flags are distinct nvme-multipath: Fix memory leak with ana_log_buf mm/memcontrol.c: lost css_put in memcg_expand_shrinker_maps() Revert "ipc,sem: remove uneeded sem_undo_list lock usage in exit_sem()" ACPI: PM: s2idle: Check fixed wakeup events in acpi_s2idle_wake() MAINTAINERS: Update drm/i915 bug filing URL serdev: ttyport: restore client ops on deregistration tty: serial: qcom_geni_serial: Fix RX cancel command failure tty: serial: imx: setup the correct sg entry for tx dma tty/serial: atmel: manage shutdown in case of RS485 or ISO7816 mode serial: 8250: Check UPF_IRQ_SHARED in advance x86/cpu/amd: Enable the fixed Instructions Retired counter IRPERF x86/mce/amd: Fix kobject lifetime x86/mce/amd: Publish the bank pointer only after setup has succeeded x86/ima: use correct identifier for SetupMode variable jbd2: fix ocfs2 corrupt when clearing block group bits arm64: memory: Add missing brackets to untagged_addr() macro powerpc/hugetlb: Fix 8M hugepages on 8xx powerpc/hugetlb: Fix 512k hugepages on 8xx with 16k page size powerpc/entry: Fix an #if which should be an #ifdef in entry_32.S powerpc/tm: Fix clearing MSR[TS] in current when reclaiming on signal delivery powerpc/eeh: Fix deadlock handling dead PHB powerpc/8xx: Fix clearing of bits 20-23 in ITLB miss drm/panfrost: perfcnt: Reserve/use the AS attached to the perfcnt MMU context staging: rtl8723bs: Fix potential overuse of kernel memory staging: rtl8723bs: Fix potential security hole staging: rtl8188eu: Fix potential overuse of kernel memory staging: rtl8188eu: Fix potential security hole scsi: Revert "target/core: Inline transport_lun_remove_cmd()" usb: dwc3: debug: fix string position formatting mixup with ret and len usb: dwc3: gadget: Check for IOC/LST bit in TRB->ctrl fields usb: dwc2: Fix SET/CLEAR_FEATURE and GET_STATUS flows USB: hub: Fix the broken detection of USB3 device in SMSC hub USB: hub: Don't record a connect-change event during reset-resume USB: Fix novation SourceControl XL after suspend usb: uas: fix a plug & unplug racing USB: quirks: blacklist duplicate ep on Sound Devices USBPre2 USB: core: add endpoint-blacklist quirk usb: host: xhci: update event ring dequeue pointer on purpose xhci: Fix memory leak when caching protocol extended capability PSI tables - take 2 xhci: apply XHCI_PME_STUCK_QUIRK to Intel Comet Lake platforms xhci: fix runtime pm enabling for quirky Intel hosts xhci: Force Maximum Packet size for Full-speed bulk devices to valid range. staging: vt6656: fix sign of rx_dbm to bb_pre_ed_rssi. staging: android: ashmem: Disallow ashmem memory from being remapped vt: vt_ioctl: fix race in VT_RESIZEX vt: selection, handle pending signals in paste_selection vt: fix scrollback flushing on background consoles floppy: check FDC index for errors before assigning it e1000e: Use rtnl_lock to prevent race conditions between net and pci/pm USB: misc: iowarrior: add support for the 100 device USB: misc: iowarrior: add support for the 28 and 28L devices USB: misc: iowarrior: add support for 2 OEMed devices thunderbolt: Prevent crash if non-active NVMem file is read btrfs: handle logged extent failure properly ecryptfs: fix a memory leak bug in ecryptfs_init_messaging() ecryptfs: fix a memory leak bug in parse_tag_1_packet() tpm: Initialize crypto_id of allocated_banks to HASH_ALGO__LAST ASoC: sun8i-codec: Fix setting DAI data format ASoC: codec2codec: avoid invalid/double-free of pcm runtime ALSA: hda/realtek - Apply quirk for yet another MSI laptop ALSA: hda/realtek - Apply quirk for MSI GP63, too ALSA: hda: Use scnprintf() for printing texts for sysfs/procfs iommu/qcom: Fix bogus detach logic UPSTREAM: sched/psi: Fix OOB write when writing 0 bytes to PSI files ANDROID: build.config.gki.aarch64: enable symbol trimming ANDROID: kbuild: avoid excessively long argument lists ANDROID: gki_defconfig: Enable CONFIG_RD_LZ4 ANDROID: net: wireless: Add module_param(mac_prefix) to mac80211_hwsim ANDROID: gki: Enable BINFMT_MISC as part of GKI ANDROID: gki_defconfig: disable CONFIG_CRYPTO_MD4 FROMLIST: kbuild: generate autoksyms.h early FROMLIST: kbuild: split adjust_autoksyms.sh in two parts FROMLIST: kbuild: allow symbol whitelisting with TRIM_UNUSED_KSYMS ANDROID: ABI/Whitelist: update for unisoc ANDROID: Disable wq fp check in CFI builds ANDROID: gki_defconfig: Disable CONFIG_RT_GROUP_SCHED FROMGIT: of: property: Add device link support for power-domains and hwlocks ANDROID: drm/msm/a6xx: Make a6xx_gmu_bo.iova a dma_addr_t FROMLIST: of: of_reserved_mem: Increase limit on number of reserved regions ANDROID: dm: Add wrapped key support in dm-default-key ANDROID: dm: add support for passing through derive_raw_secret ANDROID: block: Prevent crypto fallback for wrapped keys FROMLIST: drm/msm/a6xx: Use the DMA API for GMU memory objects FROMLIST: arm64: dts: sdm845: Set the virtual address range for GMU allocations UPSTREAM: of: Make of_dma_get_range() work on bus nodes UPSTREAM: of/address: Fix of_pci_range_parser_one translation of DMA addresses UPSTREAM: of/address: Translate 'dma-ranges' for parent nodes missing 'dma-ranges' UPSTREAM: of: Factor out #{addr,size}-cells parsing UPSTREAM: of: address: Follow DMA parent for "dma-coherent" UPSTREAM: of/address: Introduce of_get_next_dma_parent() helper UPSTREAM: of: Make of_dma_get_range() private ANDROID: fix merge issue in 5.4.22 ANDROID: update ABI for 5.4.22 Linux 5.4.22 rtc: Kconfig: select REGMAP_I2C when necessary bcache: properly initialize 'path' and 'err' in register_bcache() drm/amdgpu/display: handle multiple numbers of fclks in dcn_calcs.c (v2) s390/pci: Recover handle in clp_set_pci_fn() mlxsw: spectrum_dpipe: Add missing error path fuse: don't overflow LLONG_MAX with end offset virtio_balloon: prevent pfn array overflow cifs: log warning message (once) if out of disk space i40e: Relax i40e_xsk_wakeup's return value when PF is busy help_next should increase position index NFS: Fix memory leaks drm/amdgpu/smu10: fix smu10_get_clock_by_type_with_voltage drm/amdgpu/smu10: fix smu10_get_clock_by_type_with_latency brd: check and limit max_part par microblaze: Prevent the overflow of the start asm-generic/tlb: add missing CONFIG symbol iwlwifi: mvm: Check the sta is not NULL in iwl_mvm_cfg_he_sta() iwlwifi: mvm: Fix thermal zone registration nvme-pci: remove nvmeq->tags nvmet: Pass lockdep expression to RCU lists irqchip/gic-v3-its: Reference to its_invall_cmd descriptor when building INVALL bcache: fix incorrect data type usage in btree_flush_write() bcache: explicity type cast in bset_bkey_last() bcache: fix memory corruption in bch_cache_accounting_clear() reiserfs: prevent NULL pointer dereference in reiserfs_insert_item() lib/scatterlist.c: adjust indentation in __sg_alloc_table ocfs2: fix a NULL pointer dereference when call ocfs2_update_inode_fsync_trans() ocfs2: make local header paths relative to C files btrfs: do not do delalloc reservation under page lock powerpc: Do not consider weak unresolved symbol relocations as bad radeon: insert 10ms sleep in dce5_crtc_load_lut trigger_next should increase position index ftrace: fpid_next() should increase position index char: hpet: Fix out-of-bounds read bug drm/nouveau/disp/nv50-: prevent oops when no channel method map provided irqchip/gic-v3: Only provision redistributors that are enabled in ACPI drm/amd/display: do not allocate display_mode_lib unnecessarily rbd: work around -Wuninitialized warning ceph: check availability of mds cluster on mount after wait timeout powerpc/mm: Don't log user reads to 0xffffffff bpf: map_seq_next should always increase position index cifs: fix NULL dereference in match_prepath cifs: Fix mount options set in automount cifs: fix unitialized variable poential problem with network I/O cache lock patch iwlegacy: ensure loop counter addr does not wrap and cause an infinite loop rtw88: fix potential NULL skb access in TX ISR hostap: Adjust indentation in prism2_hostapd_add_sta ALSA: usb-audio: add quirks for Line6 Helix devices fw>=2.82 ARM: 8951/1: Fix Kexec compilation issue. selftests/eeh: Bump EEH wait time to 60s powerpc/pseries/lparcfg: Fix display of Maximum Memory jbd2: make sure ESHUTDOWN to be recorded in the journal superblock jbd2: switch to use jbd2_journal_abort() when failed to submit the commit record selftests: bpf: Reset global state between reuseport test runs alarmtimer: Make alarmtimer platform device child of RTC device iommu/vt-d: Remove unnecessary WARN_ON_ONCE() bcache: fix use-after-free in register_bcache() bcache: rework error unwinding in register_bcache bcache: cached_dev_free needs to put the sb page btrfs: Fix split-brain handling when changing FSID to metadata uuid btrfs: separate definition of assertion failure handlers media: uvcvideo: Add a quirk to force GEO GC6500 Camera bits-per-pixel value powerpc/sriov: Remove VF eeh_dev state when disabling SR-IOV drm/nouveau/mmu: fix comptag memory leak sunrpc: Fix potential leaks in sunrpc_cache_unhash() ALSA: hda - Add docking station support for Lenovo Thinkpad T420s bpf, btf: Always output invariant hit in pahole DWARF to BTF transform driver core: platform: fix u32 greater or equal to zero comparison s390/ftrace: generate traced function stack frame s390: adjust -mpacked-stack support check for clang 10 x86/decoder: Add TEST opcode to Group3-2 objtool: Fix ARCH=x86_64 build error kbuild: use -S instead of -E for precise cc-option test in Kconfig spi: spi-fsl-qspi: Ensure width is respected in spi-mem operations ALSA: hda/hdmi - add retry logic to parse_intel_hdmi() irqchip/mbigen: Set driver .suppress_bind_attrs to avoid remove problems regulator: core: Fix exported symbols to the exported GPL version remoteproc: Initialize rproc_class before use module: avoid setting info->name early in case we can fall back to info->mod->name btrfs: device stats, log when stats are zeroed btrfs: safely advance counter when looking up bio csums btrfs: fix possible NULL-pointer dereference in integrity checks pwm: Remove set but not set variable 'pwm' ide: serverworks: potential overflow in svwks_set_pio_mode() cmd64x: potential buffer overflow in cmd64x_program_timings() pwm: omap-dmtimer: Remove PWM chip in .remove before making it unfunctional x86/mm: Fix NX bit clearing issue in kernel_map_pages_in_pgd f2fs: fix memleak of kobject regulator: vctrl-regulator: Avoid deadlock getting and setting the voltage ASoC: SOF: Intel: hda: Fix SKL dai count debugobjects: Fix various data races watchdog/softlockup: Enforce that timestamp is valid on boot perf/x86/amd: Constrain Large Increment per Cycle events sched/topology: Assert non-NUMA topology masks don't (partially) overlap sched/core: Fix size of rq::uclamp initialization arm64: dts: ti: k3-j721e-main: Add missing power-domains for smmu KVM: PPC: Remove set but not used variable 'ra', 'rs', 'rt' EDAC/sifive: Fix return value check in ecc_register() drm/amd/display: fixup DML dependencies arm64: fix alternatives with LLVM's integrated assembler arm64: lse: fix LSE atomics with LLVM's integrated assembler RDMA/mlx5: Don't fake udata for kernel path ALSA: usb-audio: add implicit fb quirk for MOTU M Series crypto: essiv - fix AEAD capitalization and preposition use in help text scsi: iscsi: Don't destroy session if there are outstanding connections scsi: ufs-mediatek: add apply_dev_quirks variant operation scsi: ufs: pass device information to apply_dev_quirks f2fs: free sysfs kobject f2fs: set I_LINKABLE early to avoid wrong access by vfs ALSA: usb-audio: unlock on error in probe iommu/arm-smmu-v3: Use WRITE_ONCE() when changing validity of an STE kbuild: remove *.tmp file when filechk fails usb: musb: omap2430: Get rid of musb .set_vbus for omap2430 glue perf/imx_ddr: Fix cpu hotplug state cleanup drm/vmwgfx: prevent memory leak in vmw_cmdbuf_res_add gpiolib: Set lockdep class for hierarchical irq domains dm thin: don't allow changing data device during thin-pool reload drm/nouveau/fault/gv100-: fix memory leak on module unload drm/nouveau/drm/ttm: Remove set but not used variable 'mem' drm/nouveau: Fix copy-paste error in nouveau_fence_wait_uevent_handler drm/nouveau/gr/gk20a,gm200-: add terminators to method lists read from fw drm/nouveau/secboot/gm20b: initialize pointer in gm20b_secboot_new() vme: bridges: reduce stack usage bpf: Return -EBADRQC for invalid map type in __bpf_tx_xdp_map ASoC: SOF: Intel: hda-dai: fix compilation warning in pcm_prepare driver core: Print device when resources present in really_probe() driver core: platform: Prevent resouce overflow from causing infinite loops visorbus: fix uninitialized variable access misc: xilinx_sdfec: fix xsdfec_poll()'s return type tty: synclink_gt: Adjust indentation in several functions tty: synclinkmp: Adjust indentation in several functions raid6/test: fix a compilation warning ASoC: atmel: fix build error with CONFIG_SND_ATMEL_SOC_DMA=m ALSA: usb-audio: Add boot quirk for MOTU M Series ARM: dts: rockchip: add reg property to brcmf sub node for rk3188-bqedison2qc arm64: dts: rockchip: add reg property to brcmf sub-nodes arm64: dts: rockchip: fix dwmmc clock name for px30 clocksource: davinci: only enable clockevents once tim34 is initialized wan: ixp4xx_hss: fix compile-testing on 64-bit x86/nmi: Remove irq_work from the long duration NMI handler bnxt: Detach page from page pool before sending up the stack Input: edt-ft5x06 - work around first register access error rcu: Use WRITE_ONCE() for assignments to ->pprev for hlist_nulls efi/x86: Don't panic or BUG() on non-critical error conditions soc/tegra: fuse: Correct straps' address for older Tegra124 device trees IB/hfi1: Add RcvShortLengthErrCnt to hfi1stats IB/hfi1: Add software counter for ctxt0 seq drop staging: rtl8188: avoid excessive stack usage drm/mediatek: Add gamma property according to hardware capability udf: Fix free space reporting for metadata and virtual partitions usbip: Fix unsafe unaligned pointer usage ARM: dts: stm32: Add power-supply for DSI panel on stm32f469-disco usb: dwc3: use proper initializers for property entries drm: remove the newline for CRC source name. RDMA/hns: Avoid printing address of mtt page mlx5: work around high stack usage with gcc drm/amdkfd: Fix permissions of hang_hws iommu/vt-d: Avoid sending invalid page response iommu/vt-d: Match CPU and IOMMU paging mode ACPI: button: Add DMI quirk for Razer Blade Stealth 13 late 2019 lid switch ASoC: Intel: sof_rt5682: Ignore the speaker amp when there isn't one. vfio/spapr/nvlink2: Skip unpinning pages on error exit tools lib api fs: Fix gcc9 stringop-truncation compilation error net: phy: fixed_phy: fix use-after-free when checking link GPIO ALSA: sh: Fix compile warning wrt const ALSA: hda/realtek - Apply mic mute LED quirk for Dell E7xx laptops, too clk: uniphier: Add SCSSI clock gate for each channel clk: Use parent node pointer during registration if necessary ALSA: sh: Fix unused variable warnings clk: sunxi-ng: add mux and pll notifiers for A64 CPU clock RDMA/rxe: Fix error type of mmap_offset fbdev: fix numbering of fbcon options ASoC: soc-topology: fix endianness issues reset: uniphier: Add SCSSI reset control for each channel pinctrl: sh-pfc: sh7269: Fix CAN function GPIOs drm/fbdev: Fallback to non tiled mode if all tiles not present PM / devfreq: rk3399_dmc: Add COMPILE_TEST and HAVE_ARM_SMCCC dependency PM / devfreq: exynos-ppmu: Fix excessive stack usage x86/vdso: Provide missing include file crypto: chtls - Fixed memory leak net: phy: realtek: add logging for the RGMII TX delay configuration bpf: Print error message for bpftool cgroup show dmaengine: imx-sdma: Fix memory leak dmaengine: Store module owner in dma_device struct clk: actually call the clock init before any other callback of the clock iommu/iova: Silence warnings under memory pressure iommu/amd: Only support x2APIC with IVHD type 11h/40h iommu/amd: Check feature support bit before accessing MSI capability registers arm64: dts: qcom: db845c: Enable ath10k 8bit host-cap quirk scsi: lpfc: Fix: Rework setting of fdmi symbolic node name registration selinux: ensure we cleanup the internal AVC counters on error in avc_update() ARM: dts: r8a7779: Add device node for ARM global timer clk: renesas: rcar-gen3: Allow changing the RPC[D2] clocks drm/mediatek: handle events when enabling/disabling crtc crypto: inside-secure - add unspecified HAS_IOMEM dependency scsi: aic7xxx: Adjust indentation in ahc_find_syncrate scsi: ufs: Complete pending requests in host reset and restore path nfsd: Clone should commit src file metadata too ACPICA: Disassembler: create buffer fields in ACPI_PARSE_LOAD_PASS1 clk: qcom: smd: Add missing bimc clock drm/amdgpu: fix KIQ ring test fail in TDR of SRIOV orinoco: avoid assertion in case of NULL pointer rtlwifi: rtl_pci: Fix -Wcast-function-type iwlegacy: Fix -Wcast-function-type ipw2x00: Fix -Wcast-function-type b43legacy: Fix -Wcast-function-type PCI: Add DMA alias quirk for PLX PEX NTB PCI: Add nr_devfns parameter to pci_add_dma_alias() ALSA: usx2y: Adjust indentation in snd_usX2Y_hwdep_dsp_status netfilter: nft_tunnel: add the missing ERSPAN_VERSION nla_policy fore200e: Fix incorrect checks of NULL pointer dereference r8169: check that Realtek PHY driver module is loaded samples/bpf: Set -fno-stack-protector when building BPF programs reiserfs: Fix spurious unlock in reiserfs_fill_super() error handling media: v4l2-device.h: Explicitly compare grp{id,mask} to zero in v4l2_device macros selftests/net: make so_txtime more robust to timer variance gpu/drm: ingenic: Avoid null pointer deference in plane atomic update Revert "nfp: abm: fix memory leak in nfp_abm_u32_knode_replace" PCI: Increase D3 delay for AMD Ryzen5/7 XHCI controllers PCI: Add generic quirk for increasing D3hot delay media: cx23885: Add support for AVerMedia CE310B PCI: iproc: Apply quirk_paxc_bridge() for module as well as built-in bus: ti-sysc: Implement quirk handling for CLKDM_NOAUTO ARM: dts: imx6: rdu2: Limit USBH1 to Full Speed ARM: dts: imx6: rdu2: Disable WP for USDHC2 and USDHC3 ARM: exynos_defconfig: Bring back explicitly wanted options clk: imx: Add correct failure handling for clk based helpers padata: validate cpumask without removed CPU during offline arm64: dts: qcom: msm8996: Disable USB2 PHY suspend by core selinux: ensure we cleanup the internal AVC counters on error in avc_insert() opp: Free static OPPs on errors while adding them arm: dts: allwinner: H3: Add PMU node arm64: dts: allwinner: H5: Add PMU node arm64: dts: allwinner: H6: Add PMU mode NFC: port100: Convert cpu_to_le16(le16_to_cpu(E1) + E2) to use le16_add_cpu(). net/wan/fsl_ucc_hdlc: reject muram offsets above 64K regulator: rk808: Lower log level on optional GPIOs being not available ASoC: intel: sof_rt5682: Add support for tgl-max98357a-rt5682 ASoC: intel: sof_rt5682: Add quirk for number of HDMI DAI's modules: lockdep: Suppress suspicious RCU usage warning arm64: dts: rockchip: Fix NanoPC-T4 cooling maps drm/panel: simple: Add Logic PD Type 28 display support drm/amdgpu: Ensure ret is always initialized when using SOC15_WAIT_ON_RREG ath10k: correct the tlv len of ath10k_wmi_tlv_op_gen_config_pno_start drm/amdgpu: remove 4 set but not used variable in amdgpu_atombios_get_connector_info_from_object_table bpf, sockhash: Synchronize_rcu before free'ing map drm/amdkfd: Fix a bug in SDMA RLC queue counting under HWS mode clk: qcom: rcg2: Don't crash if our parent can't be found; return an error clk: qcom: Don't overwrite 'cfg' in clk_rcg2_dfs_populate_freq() kconfig: fix broken dependency in randconfig-generated .config block, bfq: do not plug I/O for bfq_queues with no proc refs drivers/block/zram/zram_drv.c: fix error return codes not being returned in writeback_store Btrfs: keep pages dirty when using btrfs_writepage_fixup_worker KVM: s390: ENOTSUPP -> EOPNOTSUPP fixups nbd: add a flush_workqueue in nbd_start_device tracing: Simplify assignment parsing for hist triggers drm/amd/display: Retrain dongles when SINK_COUNT becomes non-zero rtc: i2c/spi: Avoid inclusion of REGMAP support when not needed selftests: settings: tests can be in subsubdirs brcmfmac: sdio: Fix OOB interrupt initialization on brcm43362 rtw88: fix rate mask for 1SS chip ath10k: Correct the DMA direction for management tx buffers ext4, jbd2: ensure panic when aborting with zero errno ARM: 8952/1: Disable kmemleak on XIP kernels tracing: Fix very unlikely race of registering two stat tracers tracing: Fix tracing_stat return values in error handling paths powerpc/iov: Move VF pdev fixup into pcibios_fixup_iov() s390/pci: Fix possible deadlock in recover_store() wan/hdlc_x25: fix skb handling dmaengine: fsl-qdma: fix duplicated argument to && udf: Allow writing to 'Rewritable' partitions pwm: omap-dmtimer: Simplify error handling x86/sysfb: Fix check for bad VRAM size clk: ti: dra7: fix parent for gmac_clkctrl ext4: fix deadlock allocating bio_post_read_ctx from mempool jbd2: clear JBD2_ABORT flag before journal_reset to update log tail info when load journal kselftest: Minimise dependency of get_size on C library interfaces drm/amd/display: Clear state after exiting fixed active VRR state clocksource/drivers/bcm2835_timer: Fix memory leak of timer usb: dwc2: Fix IN FIFO allocation usb: gadget: udc: fix possible sleep-in-atomic-context bugs in gr_probe() drm/nouveau/nouveau: fix incorrect sizeof on args.src an args.dst spi: fsl-lpspi: fix only one cs-gpio working drm/amdgpu/sriov: workaround on rev_id for Navi12 under sriov uio: fix a sleep-in-atomic-context bug in uio_dmem_genirq_irqcontrol() raid6/test: fix a compilation error net: ethernet: ixp4xx: Standard module init sparc: Add .exit.data section. MIPS: Loongson: Fix potential NULL dereference in loongson3_platform_init() efi/x86: Map the entire EFI vendor string before copying it pinctrl: baytrail: Do not clear IRQ flags on direct-irq enabled pins IB/core: Let IB core distribute cache update events kernel/module: Fix memleak in module_add_modinfo_attrs() media: sti: bdisp: fix a possible sleep-in-atomic-context bug in bdisp_device_run() char/random: silence a lockdep splat with printk() x86/fpu: Deactivate FPU state after failure during state load iommu/vt-d: Fix off-by-one in PASID allocation gpio: gpio-grgpio: fix possible sleep-in-atomic-context bugs in grgpio_irq_map/unmap() clk: meson: meson8b: make the CCF use the glitch-free mali mux powerpc/powernv/iov: Ensure the pdn for VFs always contains a valid PE number clk: at91: sam9x60: fix programmable clock prescaler media: sun4i-csi: Fix [HV]sync polarity handling media: sun4i-csi: Fix data sampling polarity handling media: sun4i-csi: Deal with DRAM offset media: i2c: mt9v032: fix enum mbus codes and frame sizes media: ov5640: Fix check for PLL1 exceeding max allowed rate pxa168fb: Fix the function used to release some memory in an error handling path drm/msm/adreno: fix zap vs no-zap handling drm/mipi_dbi: Fix off-by-one bugs in mipi_dbi_blank() printk: fix exclusive_console replaying pinctrl: sh-pfc: sh7264: Fix CAN function GPIOs gianfar: Fix TX timestamping with a stacked DSA driver ALSA: ctl: allow TLV read operation for callback type of element in locked case ext4: fix ext4_dax_read/write inode locking sequence for IOCB_NOWAIT leds: pca963x: Fix open-drain initialization drm/amd/display: Map ODM memory correctly when doing ODM combine PCI: Fix pci_add_dma_alias() bitmask size brcmfmac: Fix use after free in brcmf_sdio_readframes() brcmfmac: Fix memory leak in brcmf_p2p_create_p2pdev() cpu/hotplug, stop_machine: Fix stop_machine vs hotplug order clk: meson: pll: Fix by 0 division in __pll_params_to_rate() media: meson: add missing allocation failure check on new_buf f2fs: call f2fs_balance_fs outside of locked page f2fs: preallocate DIO blocks when forcing buffered_io rcu: Fix data-race due to atomic_t copy-by-value rcu: Fix missed wakeup of exp_wq waiters rcu/nocb: Fix dump_tree hierarchy print always active drm/qxl: Complete exception handling in qxl_device_init() wil6210: fix break that is never reached because of zero'ing of a retry counter ath10k: Fix qmi init error handling drm/gma500: Fixup fbdev stolen size usage evaluation net/sched: flower: add missing validation of TCA_FLOWER_FLAGS net/sched: matchall: add missing validation of TCA_MATCHALL_FLAGS net: dsa: tag_qca: Make sure there is headroom for tag net/smc: fix leak of kernel memory to user space enic: prevent waking up stopped tx queues over watchdog reset core: Don't skip generic XDP program execution for cloned SKBs ANDROID: ufs, block: fix crypto power management and move into block layer ANDROID: rtc: class: support hctosys from modular RTC drivers ANDROID: update the abi after clk changes ANDROID: update abi for f2fs/fscrypt merge ANDROID: Kconfig.gki: Remove most of the built in qcom clks FROMLIST: f2fs: Handle casefolding with Encryption FROMLIST: fscrypt: Have filesystems handle their d_ops FROMLIST: ext4: Use generic casefolding support FROMLIST: f2fs: Use generic casefolding support FROMLIST: Add standard casefolding support FROMLIST: unicode: Add utf8_casefold_hash ANDROID: gki: Set CONFIG_SERIAL_SAMSUNG for early con. UPSTREAM: tty: serial: samsung_tty: remove SERIAL_SAMSUNG_DEBUG UPSTREAM: tty: serial: samsung_tty: build it for any platform UPSTREAM: tty: serial: samsung_tty: do not abuse the struct uart_port unused fields UPSTREAM: tty: serial: samsung_tty: fix blank line checkpatch warning UPSTREAM: tty: serial: samsung_tty: fix up minor comment formatting UPSTREAM: tty: serial: samsung_tty: use 'unsigned int' not 'unsigned' UPSTREAM: tty: serial: samsung_tty: use standard debugging macros UPSTREAM: tty: serial: samsung_tty: drop unneded dbg() calls UPSTREAM: tty: serial: samsung_tty: delete samsung.h UPSTREAM: tty: serial: samsung.h: remove reset_port callback from struct s3c24xx_uart_info UPSTREAM: tty: serial: samsung.h: fix up minor comment issues UPSTREAM: tty: serial: samsung_tty: fix build warning UPSTREAM: tty: serial: samsung: allow driver to be built by anyone UPSTREAM: tty: serial: samsung: remove variable 'ufstat' set but not used UPSTREAM: {tty: serial, nand: onenand}: samsung: rename to fix build warning UPSTREAM: random: ignore GRND_RANDOM in getentropy(2) UPSTREAM: random: add GRND_INSECURE to return best-effort non-cryptographic bytes UPSTREAM: linux/random.h: Mark CONFIG_ARCH_RANDOM functions __must_check UPSTREAM: linux/random.h: Use false with bool UPSTREAM: linux/random.h: Remove arch_has_random, arch_has_random_seed UPSTREAM: random: remove some dead code of poolinfo UPSTREAM: random: fix typo in add_timer_randomness() UPSTREAM: random: Add and use pr_fmt() UPSTREAM: random: convert to ENTROPY_BITS for better code readability UPSTREAM: random: remove unnecessary unlikely() UPSTREAM: random: remove kernel.random.read_wakeup_threshold UPSTREAM: random: delete code to pull data into pools UPSTREAM: random: remove the blocking pool UPSTREAM: random: make /dev/random be almost like /dev/urandom UPSTREAM: random: Add a urandom_read_nowait() for random APIs that don't warn UPSTREAM: random: Don't wake crng_init_wait when crng_init == 1 UPSTREAM: char/random: silence a lockdep splat with printk() ANDROID: Incremental fs: Support xattrs BACKPORT: sched/fair: Remove wake_cap() UPSTREAM: sched/core: Remove for_each_lower_domain() UPSTREAM: sched/topology: Remove SD_BALANCE_WAKE on asymmetric capacity systems UPSTREAM: sched/fair: Add asymmetric CPU capacity wakeup scan ANDROID: ufs: add quirk to fix abnormal ocs fatal error FROMLIST: ufs: fix a bug on printing PRDT ANDROID: update abi for 5.4.21 ANDROID: clang: update to 10.0.4 Linux 5.4.21 mmc: core: Rework wp-gpio handling gpio: add gpiod_toggle_active_low() KVM: x86/mmu: Fix struct guest_walker arrays for 5-level paging ext4: choose hardlimit when softlimit is larger than hardlimit in ext4_statfs_project() jbd2: do not clear the BH_Mapped flag when forgetting a metadata buffer jbd2: move the clearing of b_modified flag to the journal_unmap_buffer() Revert "drm/sun4i: drv: Allow framebuffer modifiers in mode config" NFSv4.1 make cachethis=no for writes perf stat: Don't report a null stalled cycles per insn metric KVM: x86: Mask off reserved bit from #DB exception payload arm64: dts: fast models: Fix FVP PCI interrupt-map property cifs: fix mount option display for sec=krb5i mac80211: fix quiet mode activation in action frames hwmon: (pmbus/ltc2978) Fix PMBus polling of MFR_COMMON definitions. perf/x86/intel: Fix inaccurate period in context switch for auto-reload spmi: pmic-arb: Set lockdep class for hierarchical irq domains sched/uclamp: Reject negative values in cpu_uclamp_write() s390/time: Fix clk type in get_tod_clock RDMA/core: Fix protection fault in get_pkey_idx_qp_list RDMA/rxe: Fix soft lockup problem due to using tasklets in softirq RDMA/hfi1: Fix memory leak in _dev_comp_vect_mappings_create RDMA/iw_cxgb4: initiate CLOSE when entering TERM RDMA/core: Fix invalid memory access in spec_filter_size IB/umad: Fix kernel crash while unloading ib_umad IB/rdmavt: Reset all QPs when the device is shut down IB/hfi1: Close window for pq and request coliding IB/hfi1: Acquire lock to release TID entries when user file is closed IB/mlx5: Return failure when rts2rts_qp_counters_set_id is not supported drivers: ipmi: fix off-by-one bounds check that leads to a out-of-bounds write nvme: fix the parameter order for nvme_get_log in nvme_get_fw_slot_info bus: moxtet: fix potential stack buffer overflow drm/panfrost: Make sure the shrinker does not reclaim referenced BOs drm/vgem: Close use-after-free race in vgem_gem_create s390/uv: Fix handling of length extensions s390/pkey: fix missing length of protected key on return perf/x86/amd: Add missing L2 misses event spec to AMD Family 17h's event map KVM: nVMX: Use correct root level for nested EPT shadow page tables EDAC/mc: Fix use-after-free and memleaks during device removal EDAC/sysfs: Remove csrow objects on errors cifs: make sure we do not overflow the max EA buffer size xprtrdma: Fix DMA scatter-gather list mapping imbalance arm64: ssbs: Fix context-switch when SSBS is present on all CPUs gpio: xilinx: Fix bug where the wrong GPIO register is written to ARM: npcm: Bring back GPIOLIB support btrfs: log message when rw remount is attempted with unclean tree-log btrfs: print message when tree-log replay starts btrfs: ref-verify: fix memory leaks Btrfs: fix race between using extent maps and merging them ext4: improve explanation of a mount failure caused by a misconfigured kernel ext4: add cond_resched() to ext4_protect_reserved_inode ext4: fix checksum errors with indexed dirs ext4: fix support for inode sizes > 1024 bytes ext4: don't assume that mmp_nodename/bdevname have NUL ALSA: usb-audio: Add clock validity quirk for Denon MC7000/MCX8000 ALSA: usb-audio: sound: usb: usb true/false for bool return type ACPI: PM: s2idle: Prevent spurious SCIs from waking up the system ACPICA: Introduce acpi_any_gpe_status_set() ACPI: PM: s2idle: Avoid possible race related to the EC GPE ACPI: EC: Fix flushing of pending work ALSA: usb-audio: Apply sample rate quirk for Audioengine D1 ALSA: hda/realtek - Fix silent output on MSI-GL73 ALSA: hda/realtek - Add more codec supported Headset Button ALSA: usb-audio: Fix UAC2/3 effect unit parsing Input: synaptics - remove the LEN0049 dmi id from topbuttonpad list Input: synaptics - enable SMBus on ThinkPad L470 Input: synaptics - switch T470s to RMI4 by default ANDROID: ABI/Whitelist: initial unisoc whitelist ANDROID: Fix ABI representation after enabling CONFIG_NET_NS ANDROID: gki_defconfig: Enable CONFIG_NET_NS ANDROID: gki_defconfig: Enable XDP_SOCKETS ANDROID: gki_defconfig: Enable MAC80211_RC_MINSTREL ANDROID: virtio: virtio_input: pass _DIRECT only if the device advertises _DIRECT ANDROID: staging: ion: delete unused heap types and IDs ANDROID: gki_defconfig: disable system_contig ion heap. ANDROID: cf build: Use merge_configs ANDROID: net: bpf: Allow TC programs to call BPF_FUNC_skb_change_head ANDROID: gki_defconfig: Disable SDCARD_FS Linux 5.4.20 selinux: fall back to ref-walk if audit is required libertas: make lbs_ibss_join_existing() return error code on rates overflow libertas: don't exit from lbs_ibss_join_existing() with RCU read lock held mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() dmaengine: axi-dmac: add a check for devm_regmap_init_mmio clk: meson: g12a: fix missing uart2 in regmap table mfd: max77650: Select REGMAP_IRQ in Kconfig regmap: fix writes to non incrementing registers pinctrl: sh-pfc: r8a7778: Fix duplicate SDSELF_B and SD1_CLK_B pinctrl: sh-pfc: r8a77965: Fix DU_DOTCLKIN3 drive/bias control selinux: fix regression introduced by move_mount(2) syscall selinux: revert "stop passing MAY_NOT_BLOCK to the AVC upon follow_link" bcache: avoid unnecessary btree nodes flushing in btree_flush_write() dt-bindings: iio: adc: ad7606: Fix wrong maxItems value media: i2c: adv748x: Fix unsafe macros drivers: watchdog: stm32_iwdg: set WDOG_HW_RUNNING at probe crypto: caam/qi2 - fix typo in algorithm's driver name crypto: atmel-sha - fix error handling when setting hmac key crypto: artpec6 - return correct error code for failed setkey() crypto: testmgr - don't try to decrypt uninitialized buffers mtd: sharpslpart: Fix unsigned comparison to zero mtd: onenand_base: Adjust indentation in onenand_read_ops_nolock arm64: nofpsmid: Handle TIF_FOREIGN_FPSTATE flag cleanly KVM: arm64: Treat emulated TVAL TimerValue as a signed 32-bit integer KVM: arm64: pmu: Fix chained SW_INCR counters KVM: arm64: pmu: Don't increment SW_INCR if PMCR.E is unset KVM: arm: Make inject_abt32() inject an external abort instead KVM: arm: Fix DFSR setting for non-LPAE aarch32 guests KVM: arm/arm64: Fix young bit from mmu notifier arm64: ptrace: nofpsimd: Fail FP/SIMD regset operations arm64: cpufeature: Set the FP/SIMD compat HWCAP bits properly arm64: cpufeature: Fix the type of no FP/SIMD capability sched/uclamp: Fix a bug in propagating uclamp value in new cgroups ARM: 8949/1: mm: mark free_memmap as __init KVM: arm/arm64: vgic-its: Fix restoration of unmapped collections ARM: at91: pm: use of_device_id array to find the proper shdwc node ARM: at91: pm: use SAM9X60 PMC's compatible iommu/arm-smmu-v3: Populate VMID field for CMDQ_OP_TLBI_NH_VA powerpc/pseries: Allow not having ibm, hypertas-functions::hcall-multi-tce for DDW powerpc/pseries/vio: Fix iommu_table use-after-free refcount warning powerpc/papr_scm: Fix leaking 'bus_desc.provider_name' in some paths powerpc/ptdump: Only enable PPC_CHECK_WX with STRICT_KERNEL_RWX powerpc/ptdump: Fix W+X verification call in mark_rodata_ro() Revert "powerpc/pseries/iommu: Don't use dma_iommu_ops on secure guests" soc: qcom: rpmhpd: Set 'active_only' for active only power domains tools/power/acpi: fix compilation error ARM: dts: at91: sama5d3: define clock rate range for tcb1 ARM: dts: at91: sama5d3: fix maximum peripheral clock rates ARM: dts: meson8b: use the actual frequency for the GPU's 364MHz OPP ARM: dts: meson8: use the actual frequency for the GPU's 182.1MHz OPP arm64: dts: marvell: clearfog-gt-8k: fix switch cpu port node arm64: dts: renesas: r8a77990: ebisu: Remove clkout-lr-synchronous from sound ARM: dts: am43xx: add support for clkout1 clock ARM: dts: at91: Reenable UART TX pull-ups arm64: dts: uDPU: fix broken ethernet arm64: dts: qcom: msm8998: Fix tcsr syscon size platform/x86: intel_mid_powerbtn: Take a copy of ddata ARC: [plat-axs10x]: Add missing multicast filter number to GMAC node watchdog: qcom: Use platform_get_irq_optional() for bark irq rtc: cmos: Stop using shared IRQ rtc: hym8563: Return -EINVAL if the time is known to be invalid x86/boot: Handle malformed SRAT tables during early ACPI parsing NFSv4.0: nfs4_do_fsinfo() should not do implicit lease renewals NFSv4: try lease recovery on NFS4ERR_EXPIRED NFSv4: pnfs_roc() must use cred_fscmp() to compare creds NFS: Fix fix of show_nfs_errors NFS/pnfs: Fix pnfs_generic_prepare_to_resend_writes() NFS: Revalidate the file size on a fatal write error nfs: NFS_SWAP should depend on SWAP bpf, sockmap: Check update requirements after locking bpf: Improve bucket_log calculation logic selftests/bpf: Test freeing sockmap/sockhash with a socket in it bpf, sockhash: Synchronize_rcu before free'ing map bpf, sockmap: Don't sleep while holding RCU lock on tear-down bpftool: Don't crash on missing xlated program instructions iwlwifi: mvm: avoid use after free for pmsr request PCI/AER: Initialize aer_fifo PCI: Don't disable bridge BARs when assigning bus resources PCI: tegra: Fix afi_pex2_ctrl reg offset for Tegra30 PCI/switchtec: Fix vep_vector_number ioread width PCI/switchtec: Use dma_set_mask_and_coherent() ath10k: pci: Only dump ATH10K_MEM_REGION_TYPE_IOREG when safe PCI/IOV: Fix memory leak in pci_iov_add_virtfn() scsi: ufs: Fix ufshcd_probe_hba() reture value in case ufshcd_scsi_add_wlus() fails RDMA/umem: Fix ib_umem_find_best_pgsz() RDMA/cma: Fix unbalanced cm_id reference count during address resolve RDMA/uverbs: Verify MR access flags RDMA/core: Fix locking in ib_uverbs_event_read RDMA/i40iw: fix a potential NULL pointer dereference RDMA/netlink: Do not always generate an ACK for some netlink operations IB/mlx4: Fix leak in id_map_find_del IB/srp: Never use immediate data if it is disabled by a user IB/mlx4: Fix memory leak in add_gid error flow hv_sock: Remove the accept port restriction ASoC: pcm: update FE/BE trigger order based on the command ANDROID: gki_defconfig: Add CONFIG_UNICODE ANDROID: added memory initialization tests to cuttlefish config ANDROID: gki_defconfig: enable CONFIG_RUNTIME_TESTING_MENU fs-verity: use u64_to_user_ptr() fs-verity: use mempool for hash requests fs-verity: implement readahead of Merkle tree pages fs-verity: implement readahead for FS_IOC_ENABLE_VERITY fscrypt: improve format of no-key names ubifs: allow both hash and disk name to be provided in no-key names ubifs: don't trigger assertion on invalid no-key filename fscrypt: clarify what is meant by a per-file key fscrypt: derive dirhash key for casefolded directories fscrypt: don't allow v1 policies with casefolding fscrypt: add "fscrypt_" prefix to fname_encrypt() fscrypt: don't print name of busy file when removing key ubifs: use IS_ENCRYPTED() instead of ubifs_crypt_is_encrypted() fscrypt: document gfp_flags for bounce page allocation fscrypt: optimize fscrypt_zeroout_range() fscrypt: remove redundant bi_status check fscrypt: Allow modular crypto algorithms FROMLIST: rename missed uaccess .fixup section ANDROID: gki_defconfig: enable heap and stack initialization. ANDROID: ABI/Whitelist: update for db845c ANDROID: ABI/Whitelist: update for Cuttlefish ANDROID: update ABI representation and GKI whitelist ANDROID: f2fs: fix missing blk-crypto changes fscrypt: include <linux/ioctl.h> in UAPI header fscrypt: don't check for ENOKEY from fscrypt_get_encryption_info() fscrypt: remove fscrypt_is_direct_key_policy() fscrypt: move fscrypt_valid_enc_modes() to policy.c fscrypt: check for appropriate use of DIRECT_KEY flag earlier fscrypt: split up fscrypt_supported_policy() by policy version fscrypt: introduce fscrypt_needs_contents_encryption() fscrypt: move fscrypt_d_revalidate() to fname.c fscrypt: constify inode parameter to filename encryption functions fscrypt: constify struct fscrypt_hkdf parameter to fscrypt_hkdf_expand() fscrypt: verify that the crypto_skcipher has the correct ivsize fscrypt: use crypto_skcipher_driver_name() fscrypt: support passing a keyring key to FS_IOC_ADD_ENCRYPTION_KEY UPSTREAM: dynamic_debug: allow to work if debugfs is disabled UPSTREAM: serial: sprd: Add polling IO support UPSTREAM: dmaengine: sprd: Add wrap address support for link-list mode UPSTREAM: pinctrl: sprd: Add CM4 sleep mode support UPSTREAM: pinctrl: sprd: Add PIN_CONFIG_BIAS_DISABLE configuration support UPSTREAM: spi: sprd: adi: Set BIT_WDG_NEW bit when rebooting UPSTREAM: nvmem: sprd: Add Spreadtrum SoCs eFuse support UPSTREAM: dt-bindings: nvmem: Add Spreadtrum eFuse controller documentation UPSTREAM: scsi: ufs-mediatek: enable low-power mode for hibern8 state BACKPORT: scsi: ufs: export some functions for vendor usage UPSTREAM: scsi: ufs-mediatek: add dbg_register_dump implementation UPSTREAM: scsi: ufs-mediatek: add apply_dev_quirks variant operation UPSTREAM: scsi: ufs: pass device information to apply_dev_quirks UPSTREAM: scsi: ufs: add device reset history for vendor implementations UPSTREAM: scsi: ufs: fix empty check of error history UPSTREAM: scsi: ufs-mediatek: configure and enable clk-gating UPSTREAM: scsi: ufs-mediatek: configure customized auto-hibern8 timer BACKPORT: scsi: ufs: export ufshcd_auto_hibern8_update for vendor usage UPSTREAM: scsi: ufs-mediatek: introduce reference clock control UPSTREAM: scsi: ufs-mediatek: add device reset implementation UPSTREAM: scsi: soc: mediatek: add header for SiP service interface BACKPORT: scsi: ufs: use ufshcd_vops_dbg_register_dump for vendor specific dumps BACKPORT: scsi: ufs: unify scsi_block_requests usage UPSTREAM: scsi: ufs: disable interrupt during clock-gating UPSTREAM: scsi: ufs: disable irq before disabling clocks UPSTREAM: scsi: ufs-mediatek: enable auto suspend capability ANDROID: update ABI for 5.4.19 ANDROID: fix up dummy-cpufreq.c due to api changes Linux 5.4.19 powerpc/kuap: Fix set direction in allow/prevent_user_access() regulator fix for "regulator: core: Add regulator_is_equal() helper" rxrpc: Fix service call disconnection perf/core: Fix mlock accounting in perf_mmap() clocksource: Prevent double add_timer_on() for watchdog_timer x86/apic/msi: Plug non-maskable MSI affinity race cifs: fail i/o on soft mounts if sessionsetup errors out KVM: Play nice with read-only memslots when querying host page size KVM: Use vcpu-specific gva->hva translation when querying host page size KVM: nVMX: vmread should not set rflags to specify success in case of #PF KVM: x86: fix overlap between SPTE_MMIO_MASK and generation KVM: x86: Use gpa_t for cr2/gpa to fix TDP support on 32-bit KVM KVM: x86: use CPUID to locate host page table reserved bits KVM: x86/mmu: Apply max PA check for MMIO sptes to 32-bit KVM drm/dp_mst: Remove VCPI while disabling topology mgr btrfs: free block groups after free'ing fs trees btrfs: use bool argument in free_root_pointers() x86/timer: Don't skip PIT setup when APIC is disabled or in legacy mode mfd: bd70528: Fix hour register mask mfd: rn5t618: Mark ADC control register volatile mfd: da9062: Fix watchdog compatible string ASoC: Intel: skl_hda_dsp_common: Fix global-out-of-bounds bug net/mlx5: Deprecate usage of generic TLS HW capability bit net/mlx5: Fix deadlock in fs_core drop_monitor: Do not cancel uninitialized work item qed: Fix timestamping issue for L2 unicast ptp packets. ipv6/addrconf: fix potential NULL deref in inet6_set_link_af() taprio: Fix dropping packets when using taprio + ETF offloading taprio: Use taprio_reset_tc() to reset Traffic Classes configuration taprio: Add missing policy validation for flags taprio: Fix still allowing changing the flags during runtime taprio: Fix enabling offload with wrong number of traffic classes net: macb: Limit maximum GEM TX length in TSO net: macb: Remove unnecessary alignment check for TSO net/mlx5: IPsec, fix memory leak at mlx5_fpga_ipsec_delete_sa_ctx net/mlx5: IPsec, Fix esp modify function attribute net: systemport: Avoid RBUF stuck in Wake-on-LAN mode net: stmmac: fix a possible endless loop net_sched: fix a resource leak in tcindex_set_parms() net: mvneta: move rx_dropped and rx_errors in per-cpu stats net: dsa: microchip: enable module autoprobe net: dsa: bcm_sf2: Only 7278 supports 2Gb/sec IMP port net: dsa: b53: Always use dev->vlan_enabled in b53_configure_vlan() dpaa_eth: support all modes with rate adapting PHYs devlink: report 0 after hitting end in region read bonding/alb: properly access headers in bond_alb_xmit() ASoC: sgtl5000: Fix VDDA and VDDIO comparison regulator: core: Add regulator_is_equal() helper ubifs: Fix memory leak from c->sup_node ubi: Fix an error pointer dereference in error handling code ubi: fastmap: Fix inverted logic in seen selfcheck virtio_balloon: Fix memory leaks on errors in virtballoon_probe() virtio-balloon: Fix memory leak when unloading while hinting is in progress nfsd: Return the correct number of bytes written to the file nfsd: fix jiffies/time_t mixup in LRU list nfsd: fix delay timer on 32-bit architectures IB/core: Fix ODP get user pages flow IB/mlx5: Fix outstanding_pi index for GSI qps net: tulip: Adjust indentation in {dmfe, uli526x}_init_module net: smc911x: Adjust indentation in smc911x_phy_configure ppp: Adjust indentation into ppp_async_input NFC: pn544: Adjust indentation in pn544_hci_check_presence drm: msm: mdp4: Adjust indentation in mdp4_dsi_encoder_enable powerpc/44x: Adjust indentation in ibm4xx_denali_fixup_memsize ext2: Adjust indentation in ext2_fill_super phy: qualcomm: Adjust indentation in read_poll_timeout mtd: spi-nor: Split mt25qu512a (n25q512a) entry into two scsi: ufs: Recheck bkops level if bkops is disabled scsi: qla4xxx: Adjust indentation in qla4xxx_mem_free scsi: csiostor: Adjust indentation in csio_device_reset scsi: qla2xxx: Fix the endianness of the qla82xx_get_fw_size() return type ASoC: meson: axg-fifo: fix fifo threshold setup percpu: Separate decrypted varaibles anytime encryption can be enabled broken ping to ipv6 linklocal addresses on debian buster fix up iter on short count in fuse_direct_io() virtio-pci: check name when counting MSI-X vectors virtio-balloon: initialize all vq callbacks drm/amd/dm/mst: Ignore payload update failures clk: tegra: Mark fuse clock as critical mm/mmu_gather: invalidate TLB correctly on batch allocation failure and flush arm64: dts: qcom: qcs404-evb: Set vdd_apc regulator in high power mode mm/page_alloc.c: fix uninitialized memmaps on a partially populated last section ocfs2: fix oops when writing cloned file KVM: s390: do not clobber registers during guest reset/store status KVM: x86: Revert "KVM: X86: Fix fpu state crash in kvm guest" KVM: x86: Ensure guest's FPU state is loaded when accessing for emulation KVM: x86: Handle TIF_NEED_FPU_LOAD in kvm_{load,put}_guest_fpu() KVM: x86: Free wbinvd_dirty_mask if vCPU creation fails KVM: x86: Don't let userspace set host-reserved cr4 bits KVM: VMX: Add non-canonical check on writes to RTIT address MSRs x86/KVM: Clean up host's steal time structure x86/kvm: Cache gfn to pfn translation x86/KVM: Make sure KVM_VCPU_FLUSH_TLB flag is not missed x86/kvm: Introduce kvm_(un)map_gfn() x86/kvm: Be careful not to clear KVM_VCPU_FLUSH_TLB bit kvm/svm: PKU not currently supported KVM: PPC: Book3S PR: Free shared page if mmu initialization fails KVM: PPC: Book3S HV: Uninit vCPU if vcore creation fails KVM: x86: Fix potential put_fpu() w/o load_fpu() on MPX platform KVM: x86: Protect MSR-based index computations in fixed_msr_to_seg_unit() from Spectre-v1/L1TF attacks KVM: x86: Protect x86_decode_insn from Spectre-v1/L1TF attacks KVM: x86: Protect MSR-based index computations from Spectre-v1/L1TF attacks in x86.c KVM: x86: Protect ioapic_read_indirect() from Spectre-v1/L1TF attacks KVM: x86: Protect MSR-based index computations in pmu.h from Spectre-v1/L1TF attacks KVM: x86: Protect ioapic_write_indirect() from Spectre-v1/L1TF attacks KVM: x86: Protect kvm_hv_msr_[get|set]_crash_data() from Spectre-v1/L1TF attacks KVM: x86: Protect kvm_lapic_reg_write() from Spectre-v1/L1TF attacks KVM: x86: Protect DR-based index computations from Spectre-v1/L1TF attacks KVM: x86: Protect pmu_intel.c from Spectre-v1/L1TF attacks KVM: x86: Refactor prefix decoding to prevent Spectre-v1/L1TF attacks KVM: x86: Refactor picdev_write() to prevent Spectre-v1/L1TF attacks aio: prevent potential eventfd recursion on poll eventfd: track eventfd_signal() recursion depth bcache: add readahead cache policy options via sysfs interface watchdog: fix UAF in reboot notifier handling in watchdog core code xen/balloon: Support xend-based toolstack take two tools/kvm_stat: Fix kvm_exit filter name media: rc: ensure lirc is initialized before registering input device media: iguanair: fix endpoint sanity check drm/rect: Avoid division by zero drm: atmel-hlcdc: prefer a lower pixel-clock than requested drm: atmel-hlcdc: enable clock before configuring timing engine drm: atmel-hlcdc: use double rate for pixel clock only if supported gfs2: fix O_SYNC write handling gfs2: move setting current->backing_dev_info gfs2: fix gfs2_find_jhead that returns uninitialized jhead with seq 0 sunrpc: expiry_time should be seconds not timeval mwifiex: fix unbalanced locking in mwifiex_process_country_ie() iwlwifi: don't throw error when trying to remove IGTK ARM: tegra: Enable PLLP bypass during Tegra124 LP1 btrfs: Correctly handle empty trees in find_first_clear_extent_bit btrfs: flush write bio if we loop in extent_write_cache_pages Btrfs: fix race between adding and putting tree mod seq elements and nodes btrfs: drop log root for dropped roots btrfs: set trans->drity in btrfs_commit_transaction Btrfs: fix infinite loop during fsync after rename operations Btrfs: make deduplication with range including the last block work Btrfs: fix missing hole after hole punching and fsync when using NO_HOLES ext4: fix race conditions in ->d_compare() and ->d_hash() ext4: fix deadlock allocating crypto bounce page from mempool jbd2_seq_info_next should increase position index nfsd: fix filecache lookup NFS: Directory page cache pages need to be locked when read NFS: Fix memory leaks and corruption in readdir scsi: qla2xxx: Fix unbound NVME response length powerpc/futex: Fix incorrect user access blocking crypto: picoxcell - adjust the position of tasklet_init and fix missed tasklet_kill crypto: api - Fix race condition in crypto_spawn_alg crypto: atmel-aes - Fix counter overflow in CTR mode crypto: pcrypt - Do not clear MAY_SLEEP flag in original request crypto: arm64/ghash-neon - bump priority to 150 crypto: ccp - set max RSA modulus size for v3 platform devices as well crypto: hisilicon - Use the offset fields in sqe to avoid need to split scatterlists crypto: api - fix unexpectedly getting generic implementation selftests: bpf: Ignore FIN packets for reuseport tests selftests: bpf: Use a temporary file in test_sockmap selftests/bpf: Skip perf hw events test if the setup disabled it selftests/bpf: Fix test_attach_probe samples/bpf: Xdp_redirect_cpu fix missing tracepoint attach samples/bpf: Don't try to remove user's homedir on clean tc-testing: fix eBPF tests failure on linux fresh clones libbpf: Fix realloc usage in bpf_core_find_cands bpf, devmap: Pass lockdep expression to RCU lists selftests/bpf: Fix perf_buffer test on systems w/ offline CPUs riscv, bpf: Fix broken BPF tail calls btrfs: Handle another split brain scenario with metadata uuid feature btrfs: fix improper setting of scanned for range cyclic write cache pages crypto: pcrypt - Avoid deadlock by using per-instance padata queues ftrace: Protect ftrace_graph_hash with ftrace_sync ftrace: Add comment to why rcu_dereference_sched() is open coded tracing: Annotate ftrace_graph_notrace_hash pointer with __rcu tracing: Annotate ftrace_graph_hash pointer with __rcu ASoC: SOF: core: release resources on errors in probe_continue ASoC: SOF: Introduce state machine for FW boot scsi: qla2xxx: Fix stuck login session using prli_pend_timer dm: fix potential for q->make_request_fn NULL pointer dm thin metadata: use pool locking at end of dm_pool_metadata_close dm crypt: fix benbi IV constructor crash if used in authenticated mode dm crypt: fix GFP flags passed to skcipher_request_alloc() dm writecache: fix incorrect flush sequence when doing SSD mode commit dm space map common: fix to ensure new block isn't already in use dm zoned: support zone sizes smaller than 128MiB ARM: dma-api: fix max_pfn off-by-one error in __dma_supported() of: Add OF_DMA_DEFAULT_COHERENT & select it on powerpc cpufreq: Avoid creating excessively large stack frames PM: core: Fix handling of devices deleted during system-wide resume f2fs: fix race conditions in ->d_compare() and ->d_hash() f2fs: fix dcache lookup of !casefolded directories f2fs: code cleanup for f2fs_statfs_project() f2fs: fix miscounted block limit in f2fs_statfs_project() f2fs: choose hardlimit when softlimit is larger than hardlimit in f2fs_statfs_project() ovl: fix lseek overflow on 32bit ovl: fix wrong WARN_ON() in ovl_cache_update_ino() power: supply: ltc2941-battery-gauge: fix use-after-free power: supply: axp20x_ac_power: Fix reporting online status cpupower: Revert library ABI changes from commit ae2917093f scsi: qla2xxx: Fix mtcp dump collection failure scsi: megaraid_sas: Do not initiate OCR if controller is not in ready state erofs: fix out-of-bound read for shifted uncompressed block scripts/find-unused-docs: Fix massive false positives fs: allow deduplication of eof block into the end of the destination file padata: Remove broken queue flushing crypto: ccree - fix PM race condition crypto: ccree - fix FDE descriptor sequence crypto: ccree - fix pm wrongful error reporting crypto: ccree - fix AEAD decrypt auth fail crypto: ccree - fix backlog memory leak crypto: api - Check spawn->alg under lock in crypto_drop_spawn nvmem: core: fix memory abort in cleanup path mfd: axp20x: Mark AXP20X_VBUS_IPSOUT_MGMT as volatile hv_balloon: Balloon up according to request page number ASoC: SOF: core: free trace on errors mmc: sdhci-of-at91: fix memleak on clk_get failure ubifs: Fix deadlock in concurrent bulk-read and writepage ubifs: Fix FS_IOC_SETFLAGS unexpectedly clearing encrypt flag ubifs: Fix wrong memory allocation ubifs: don't trigger assertion on invalid no-key filename fscrypt: don't print name of busy file when removing key alarmtimer: Unregister wakeup source when module get fails ACPI / battery: Deal better with neither design nor full capacity not being reported ACPI / battery: Use design-cap for capacity calculations if full-cap is not available ACPI / battery: Deal with design or full capacity being reported as -1 ACPI: video: Do not export a non working backlight interface on MSI MS-7721 boards mmc: spi: Toggle SPI polarity, do not hardcode it PCI: keystone: Fix error handling when "num-viewport" DT property is not populated PCI: keystone: Fix link training retries initiation PCI: keystone: Fix outbound region mapping PCI: tegra: Fix return value check of pm_runtime_get_sync() tracing: Fix now invalid var_ref_vals assumption in trace action powerpc/32s: Fix CPU wake-up from sleep mode powerpc/32s: Fix bad_kuap_fault() powerpc/pseries: Advance pfn if section is not present in lmb_is_removable() powerpc/xmon: don't access ASDR in VMs powerpc/ptdump: Fix W+X verification powerpc/mmu_gather: enable RCU_TABLE_FREE even for !SMP case s390/mm: fix dynamic pagetable upgrade for hugetlbfs MIPS: boot: fix typo in 'vmlinux.lzma.its' target MIPS: fix indentation of the 'RELOCS' message MIPS: syscalls: fix indentation of the 'SYSNR' message KVM: arm64: Only sign-extend MMIO up to register width KVM: arm/arm64: Correct AArch32 SPSR on exception entry KVM: arm/arm64: Correct CPSR on exception entry KVM: arm64: Correct PSTATE on exception entry arm64: acpi: fix DAIF manipulation with pNMI ALSA: hda: Add JasperLake PCI ID and codec vid ALSA: hda: Add Clevo W65_67SB the power_save blacklist ALSA: hda: Apply aligned MMIO access only conditionally platform/x86: intel_scu_ipc: Fix interrupt support x86/cpu: Update cached HLE state on write to TSX_CTRL_CPUID_CLEAR irqdomain: Fix a memory leak in irq_domain_push_irq() lib/test_kasan.c: fix memory leak in kmalloc_oob_krealloc_more() media: v4l2-rect.h: fix v4l2_rect_map_inside() top/left adjustments media: v4l2-core: compat: ignore native command codes media/v4l2-core: set pages dirty upon releasing DMA buffers mm: move_pages: report the number of non-attempted pages mm: thp: don't need care deferred split queue in memcg charge move path mm/memory_hotplug: fix remove_memory() lockdep splat utimes: Clamp the timestamps in notify_change() mmc: sdhci-pci: Make function amd_sdhci_reset static mm/sparse.c: reset section's mem_map when fully deactivated memcg: fix a crash in wb_workfn when a device disappears ALSA: dummy: Fix PCM format loop in proc output ALSA: usb-audio: Annotate endianess in Scarlett gen2 quirk ALSA: usb-audio: Fix endianess in descriptor validation usb: gadget: f_ecm: Use atomic_t to track in-flight request usb: gadget: f_ncm: Use atomic_t to track in-flight request usb: gadget: legacy: set max_speed to super-speed usb: gadget: f_fs: set req->num_sgs as 0 for non-sg transfer objtool: Silence build output usb: typec: tcpci: mask event interrupts when remove driver usb: dwc3: gadget: Delay starting transfer usb: dwc3: gadget: Check END_TRANSFER completion brcmfmac: Fix memory leak in brcmf_usbdev_qinit Bluetooth: btusb: Disable runtime suspend on Realtek devices Bluetooth: btusb: fix memory leak on fw nvmet: Fix controller use after free nvmet: Fix error print message at nvmet_install_queue function rcu: Use READ_ONCE() for ->expmask in rcu_read_unlock_special() srcu: Apply *_ONCE() to ->srcu_last_gp_end rcu: Avoid data-race in rcu_gp_fqs_check_wake() rcu: Use *_ONCE() to protect lockless ->expmask accesses tracing: Fix sched switch start/stop refcount racy updates tracing/kprobes: Have uname use __get_str() in print_fmt ipc/msg.c: consolidate all xxxctl_down() functions netfilter: ipset: fix suspicious RCU usage in find_set_and_id mfd: dln2: More sanity checking for endpoints media: uvcvideo: Avoid cyclic entity chains due to malformed USB descriptors bnxt_en: Fix logic that disables Bus Master during firmware reset. netdevsim: fix stack-out-of-bounds in nsim_dev_debugfs_init() MAINTAINERS: correct entries for ISDN/mISDN section ionic: fix rxq comp packet type mask tcp: clear tp->segs_{in|out} in tcp_disconnect() tcp: clear tp->data_segs{in|out} in tcp_disconnect() tcp: clear tp->delivered in tcp_disconnect() tcp: clear tp->total_retrans in tcp_disconnect() rxrpc: Fix NULL pointer deref due to call->conn being cleared on disconnect rxrpc: Fix missing active use pinning of rxrpc_local object rxrpc: Fix insufficient receive notification generation rxrpc: Fix use-after-free in rxrpc_put_local() bnxt_en: Fix TC queue mapping. net: stmmac: Delete txtimer in suspend() net_sched: fix an OOB access in cls_tcindex net: hsr: fix possible NULL deref in hsr_handle_frame() l2tp: Allow duplicate session creation with UDP gtp: use __GFP_NOWARN to avoid memalloc warning cls_rsvp: fix rsvp_policy bnxt_en: Move devlink_register before registering netdev sparc32: fix struct ipc64_perm type definition ANDROID: Revert "ANDROID: gki_defconfig: removed CONFIG_PM_WAKELOCKS" ANDROID: dm: prevent default-key from being enabled without needed hooks UPSTREAM: crypto: x86 - Regularize glue function prototypes ANDROID: gki: x86: Enable PCI_MSI, WATCHDOG, HPET ANDROID: drm: Add support for DP 1.4 Compliance edid corruption test ANDROID: drm: Parse Colorimetry data block from EDID ANDROID: drm: fix HDR static metadata type field numbering ANDROID: Incremental fs: Make files writeable UPSTREAM: mfd: syscon: Add arguments support for syscon reference ANDROID: Incremental fs: Fix crash on failed lookup UPSTREAM: usb: gadget: f_fs: set req->num_sgs as 0 for non-sg transfer ANDROID: support GKI image that contains an uncompressed Kernel Image. ANDROID: update ABI for 5.4.18 Linux 5.4.18 tracing/uprobe: Fix to make trace_uprobe_filter alignment safe Revert "rsi: fix potential null dereference in rsi_probe()" ASoC: topology: fix soc_tplg_fe_link_create() - link->dobj initialization order mm/migrate.c: also overwrite error when it is bigger than zero perf report: Fix no libunwind compiled warning break s390 issue dm thin: fix use-after-free in metadata_pre_commit_callback flow_dissector: Fix to use new variables for port ranges in bpf hook cpuidle: teo: Avoid using "early hits" incorrectly btrfs: do not zero f_bavail if we have available space net: Fix skb->csum update in inet_proto_csum_replace16(). netfilter: nf_tables_offload: fix check the chain offload flag netfilter: conntrack: sctp: use distinct states for new SCTP connections l2t_seq_next should increase position index seq_tab_next() should increase position index net: fsl/fman: rename IF_MODE_XGMII to IF_MODE_10G net/fsl: treat fsl,erratum-a011043 powerpc/fsl/dts: add fsl,erratum-a011043 qlcnic: Fix CPU soft lockup while collecting firmware dump ARM: dts: am43x-epos-evm: set data pin directions for spi0 and spi1 r8152: disable DelayPhyPwrChg r8152: avoid the MCU to clear the lanwake r8152: disable test IO for RTL8153B r8152: Disable PLA MCU clock speed down r8152: disable U2P3 for RTL8153B r8152: get default setting of WOL before initializing tee: optee: Fix compilation issue with nommu led: max77650: add of_match table ARM: 8955/1: virt: Relax arch timer version check during early boot scsi: fnic: do not queue commands during fwreset Input: max77650-onkey - add of_match table xfrm: interface: do not confirm neighbor when do pmtu update xfrm interface: fix packet tx through bpf_redirect() vti[6]: fix packet tx through bpf_redirect() ARM: dts: am335x-boneblack-common: fix memory size Input: evdev - convert kzalloc()/vzalloc() to kvzalloc() iwlwifi: dbg: force stop the debug monitor HW iwlwifi: Don't ignore the cap field upon mcc update iwlwifi: pcie: allocate smaller dev_cmd for TX headers XArray: Fix xas_pause at ULONG_MAX riscv: delete temporary files perf/x86/intel/uncore: Remove PCIe3 unit for SNR perf/x86/intel/uncore: Add PCI ID of IMC for Xeon E3 V5 Family wireless: wext: avoid gcc -O3 warning mac80211: Fix TKIP replay protection immediately after key setup cfg80211: Fix radar event during another phy CAC wireless: fix enabling channel 12 for custom regulatory domain lkdtm/bugs: fix build error in lkdtm_UNSET_SMEP parisc: Use proper printk format for resource_size_t qmi_wwan: Add support for Quectel RM500Q ASoC: sti: fix possible sleep-in-atomic ASoC: hdac_hda: Fix error in driver removal after failed probe ASoC: SOF: Intel: fix HDA codec driver probe with multiple controllers platform/x86: intel_pmc_core: update Comet Lake platform driver platform/x86: GPD pocket fan: Allow somewhat lower/higher temperature limits iavf: remove current MAC address filter on VF reset igb: Fix SGMII SFP module discovery for 100FX/LX. ixgbe: Fix calculation of queue with VFs and flow director on interface flap ixgbevf: Remove limit of 10 entries for unicast filter list i40e: Fix virtchnl_queue_select bitmap validation s390/zcrypt: move ap device reset from bus to driver code ASoC: rt5640: Fix NULL dereference on module unload clk: mmp2: Fix the order of timer mux parents mac80211: mesh: restrict airtime metric to peered established plinks clk: sunxi-ng: h6-r: Fix AR100/R_APB2 parent order clk: sunxi-ng: sun8i-r: Fix divider on APB0 clock rseq: Unregister rseq for clone CLONE_VM tools lib traceevent: Fix memory leakage in filter_event soc: ti: wkup_m3_ipc: Fix race condition with rproc_boot ARM: dts: beagle-x15-common: Model 5V0 regulator ARM: dts: am57xx-beagle-x15/am57xx-idk: Remove "gpios" for endpoint dt nodes ARM: dts: sun8i: a83t: Correct USB3503 GPIOs polarity arm64: dts: meson-sm1-sei610: add gpio bluetooth interrupt clk: sunxi-ng: v3s: Fix incorrect number of hw_clks. cgroup: Prevent double killing of css when enabling threaded cgroup Bluetooth: Fix race condition in hci_release_sock() ttyprintk: fix a potential deadlock in interrupt context issue tomoyo: Use atomic_t for statistics counter media: dvb-usb/dvb-usb-urb.c: initialize actlen to 0 media: gspca: zero usb_buf media: vp7045: do not read uninitialized values if usb transfer fails media: af9005: uninitialized variable printked media: digitv: don't continue if remote control state can't be read reiserfs: Fix memory leak of journal device string mm/mempolicy.c: fix out of bounds write in mpol_parse_str() arm64: kbuild: remove compressed images on 'make ARCH=arm64 (dist)clean' tools lib: Fix builds when glibc contains strlcpy() PM / devfreq: Add new name attribute for sysfs perf c2c: Fix return type for histogram sorting comparision functions gfs2: Another gfs2_find_jhead fix e1000e: Revert "e1000e: Make watchdog use delayed work" e1000e: Drop unnecessary __E1000_DOWN bit twiddling x86/resctrl: Fix use-after-free due to inaccurate refcount of rdtgroup x86/resctrl: Fix use-after-free when deleting resource groups x86/resctrl: Fix a deadlock due to inaccurate reference cifs: fix soft mounts hanging in the reconnect code vfs: fix do_last() regression ANDROID: Incremental fs: Remove C++-style comments ANDROID: gki_defconfig: Set CONFIG_ANDROID_BINDERFS=y FROMLIST: selinux: Fix typo in filesystem name UPSTREAM: drm: Add DisplayPort colorspace property creation function UPSTREAM: drm: Rename HDMI colorspace property creation function ANDROID: db845c: Update db845c_gki.fragment to add support for bluetooth modules UPSTREAM: sched/rt: Make RT capacity-aware UPSTREAM: sched/fair: Make EAS wakeup placement consider uclamp restrictions UPSTREAM: sched/fair: Make task_fits_capacity() consider uclamp restrictions UPSTREAM: sched/uclamp: Rename uclamp_util_with() into uclamp_rq_util_with() UPSTREAM: sched/uclamp: Make uclamp util helpers use and return UL values BACKPORT: sched/uclamp: Remove uclamp_util() Revert "ANDROID: sched/fair: EAS: Add uclamp support to find_energy_efficient_cpu()" Linux 5.4.17 power/supply: ingenic-battery: Don't change scale if there's only one Revert "um: Enable CONFIG_CONSTRUCTORS" KVM: arm64: Write arch.mdcr_el2 changes since last vcpu_load on VHE crypto: pcrypt - Fix user-after-free on module unload crypto: caam - do not reset pointer size from MCFGR register crypto: vmx - reject xts inputs that are too short crypto: af_alg - Use bh_lock_sock in sk_destruct rsi: fix non-atomic allocation in completion handler rsi: fix memory leak on failed URB submission rsi: fix use-after-free on probe errors rsi: fix use-after-free on failed probe and unbind bus: ti-sysc: Fix missing force mstandby quirk handling Bluetooth: btbcm: Use the BDADDR_PROPERTY quirk Bluetooth: Allow combination of BDADDR_PROPERTY and INVALID_BDADDR quirks ALSA: hda/realtek - Move some alc236 pintbls to fallback table usb-storage: Disable UAS on JMicron SATA enclosure bus: ti-sysc: Add module enable quirk for audio AESS mmc: sdhci-pci: Add support for Intel JSL mmc: sdhci-pci: Quirk for AMD SDHC Device 0x7906 ARM: OMAP2+: SmartReflex: add omap_sr_pdata definition ARM: config: aspeed-g5: Enable 8250_DW quirks mfd: intel-lpss: Add Intel Comet Lake PCH-H PCI IDs perf/imx_ddr: Add enhanced AXI ID filter support iommu/amd: Support multiple PCI DMA aliases in IRQ Remapping iommu/amd: Support multiple PCI DMA aliases in device table spi: pxa2xx: Add support for Intel Comet Lake-H bus: ti-sysc: Use swsup quirks also for am335x musb bus: ti-sysc: Handle mstandby quirk and use it for musb media: dvbsky: add support for eyeTV Geniatech T2 lite PCI: Add DMA alias quirk for Intel VCA NTB platform/x86: dell-laptop: disable kbd backlight on Inspiron 10xx staging: mt7621-pci: add quirks for 'E2' revision using 'soc_device_attribute' libbpf: Fix BTF-defined map's __type macro handling of arrays drm/amdgpu/SRIOV: add navi12 pci id for SRIOV (v2) ASoC: Intel: cht_bsw_rt5645: Add quirk for boards using pmc_plt_clk_0 extcon-intel-cht-wc: Don't reset USB data connection at probe HID: steam: Fix input device disappearing atm: eni: fix uninitialized variable warning stmmac: debugfs entry name is not be changed when udev rename device name. drm/amd/display: Reduce HDMI pixel encoding if max clock is exceeded iommu/dma: fix variable 'cookie' set but not used gpio: max77620: Add missing dependency on GPIOLIB_IRQCHIP net: wan: sdla: Fix cast from pointer to integer of different size drivers/net/b44: Change to non-atomic bit operations on pwol_mask net: Google gve: Remove dma_wmb() before ringing doorbell spi: spi-dw: Add lock protect dw_spi rx/tx to prevent concurrent calls can: tcan4x5x: tcan4x5x_parse_config(): reset device before register access usb: musb: jz4740: Silence error if code is -EPROBE_DEFER watchdog: orion: fix platform_get_irq() complaints watchdog: rn5t618_wdt: fix module aliases watchdog: max77620_wdt: fix potential build errors HID: intel-ish-hid: ipc: Add Tiger Lake PCI device ID phy: cpcap-usb: Prevent USB line glitches from waking up modem ASoC: topology: Prevent use-after-free in snd_soc_get_pcm_runtime() ASoC: fsl_audmix: add missed pm_runtime_disable phy: qcom-qmp: Increase PHY ready timeout drivers/hid/hid-multitouch.c: fix a possible null pointer access. ASoC: SOF: Intel: hda: hda-dai: fix oops on hda_link .hw_free ASoC: SOF: fix fault at driver unload after failed probe HID: wacom: Recognize new MobileStudio Pro PID HID: intel-ish-hid: ipc: add CMP device id HID: Add quirk for incorrect input length on Lenovo Y720 HID: asus: Ignore Asus vendor-page usage-code 0xff events HID: ite: Add USB id match for Acer SW5-012 keyboard dock HID: Add quirk for Xin-Mo Dual Controller arc: eznps: fix allmodconfig kconfig warning HID: multitouch: Add LG MELF0410 I2C touchscreen support rxrpc: Fix use-after-free in rxrpc_receive_data() net: include struct nhmsg size in nh nlmsg size mlxsw: minimal: Fix an error handling path in 'mlxsw_m_port_create()' udp: segment looped gso packets correctly net: socionext: fix xdp_result initialization in netsec_process_rx net: socionext: fix possible user-after-free in netsec_process_rx net_sched: walk through all child classes in tc_bind_tclass() net_sched: fix ops->bind_class() implementations net_sched: ematch: reject invalid TCF_EM_SIMPLE zd1211rw: fix storage endpoint lookup rtl8xxxu: fix interface sanity check brcmfmac: fix interface sanity check ath9k: fix storage endpoint lookup cifs: Fix memory allocation in __smb2_handle_cancelled_cmd() cifs: set correct max-buffer-size for smb2_ioctl_init() CIFS: Fix task struct use-after-free on reconnect crypto: chelsio - fix writing tfm flags to wrong place driver core: Fix test_async_driver_probe if NUMA is disabled iio: st_gyro: Correct data for LSM9DS0 gyro iio: adc: stm32-dfsdm: fix single conversion mei: me: add comet point (lake) H device ids mei: hdcp: bind only with i915 on the same PCH binder: fix log spam for existing debugfs file creation. component: do not dereference opaque pointer in debugfs debugfs: Return -EPERM when locked down serial: imx: fix a race condition in receive path serial: 8250_bcm2835aux: Fix line mismatch on driver unbind staging: vt6656: Fix false Tx excessive retries reporting. staging: vt6656: use NULLFUCTION stack on mac80211 staging: vt6656: correct packet types for CTS protect, mode. staging: wlan-ng: ensure error return is actually returned staging: most: net: fix buffer overflow usb: typec: fusb302: fix "op-sink-microwatt" default that was in mW usb: typec: wcove: fix "op-sink-microwatt" default that was in mW usb: dwc3: turn off VBUS when leaving host mode USB: serial: ir-usb: fix IrLAP framing USB: serial: ir-usb: fix link-speed handling USB: serial: ir-usb: add missing endpoint sanity check usb: host: xhci-tegra: set MODULE_FIRMWARE for tegra186 usb: dwc3: pci: add ID for the Intel Comet Lake -V variant rsi_91x_usb: fix interface sanity check orinoco_usb: fix interface sanity check Bluetooth: btusb: fix non-atomic allocation in completion handler ANDROID: scsi: ufs: fix collision between CRYPTO and RPM_AUTOSUSPEND bits ANDROID: gki: Removed cf modules from gki_defconfig ANDROID: Remove default y for VIRTIO_PCI_LEGACY ANDROID: gki_defconfig: enabled INTERCONNECT ANDROID: gki_defconfig: Remove SND_8X0 ANDROID: gki: Fixed some typos in Kconfig.gki ANDROID: gki_defconfig: Enable req modules in GKI ANDROID: modularize BLK_MQ_VIRTIO ANDROID: kallsyms: strip hashes from static functions with ThinLTO and CFI ANDROID: Incremental fs: Remove unneeded compatibility typedef ANDROID: Incremental fs: Enable incrementalfs in GKI ANDROID: Incremental fs: Fix sparse errors ANDROID: Fixing incremental fs style issues ANDROID: Make incfs selftests pass ANDROID: Initial commit of Incremental FS Linux 5.4.16 net/x25: fix nonblocking connect netfilter: nf_tables: autoload modules from the abort path netfilter: nf_tables: add __nft_chain_type_get() netfilter: ipset: use bitmap infrastructure completely media: v4l2-ioctl.c: zero reserved fields for S/TRY_FMT libertas: Fix two buffer overflows at parsing bss descriptor net/sonic: Prevent tx watchdog timeout net/sonic: Fix CAM initialization net/sonic: Fix command register usage net/sonic: Quiesce SONIC before re-initializing descriptor memory net/sonic: Fix receive buffer replenishment net/sonic: Improve receive descriptor status flag check net/sonic: Avoid needless receive descriptor EOL flag updates net/sonic: Fix receive buffer handling net/sonic: Fix interface error stats collection net/sonic: Use MMIO accessors net/sonic: Clear interrupt flags immediately net/sonic: Add mutual exclusion for accessing shared state readdir: be more conservative with directory entry names do_last(): fetch directory ->i_mode and ->i_uid before it's too late net, sk_msg: Don't check if sock is locked when tearing down psock xfrm: support output_mark for offload ESP packets drm/i915/userptr: fix size calculation iwlwifi: mvm: fix potential SKB leak on TXQ TX iwlwifi: mvm: fix SKB leak on invalid queue tracing: xen: Ordered comparison of function pointers scsi: RDMA/isert: Fix a recently introduced regression related to logout hwmon: (nct7802) Fix non-working alarm on voltages hwmon: (nct7802) Fix voltage limits to wrong registers hsr: Fix a compilation error leds: gpio: Fix uninitialized gpio label for fwnode based probe readdir: make user_access_begin() use the real access range iommu/amd: Fix IOMMU perf counter clobbering during init lib: Reduce user_access_begin() boundaries in strncpy_from_user() and strnlen_user() netfilter: nft_osf: add missing check for DREG attribute Input: sun4i-ts - add a check for devm_thermal_zone_of_sensor_register Input: pegasus_notetaker - fix endpoint sanity check Input: aiptek - fix endpoint sanity check Input: gtco - fix endpoint sanity check Input: sur40 - fix interface sanity checks Input: pm8xxx-vib - fix handling of separate enable register net/tls: fix async operation mlxsw: switchx2: Do not modify cloned SKBs during xmit mmc: sdhci_am654: Reset Command and Data line after tuning mmc: sdhci_am654: Remove Inverted Write Protect flag mmc: sdhci: fix minimum clock rate for v3 controller mmc: tegra: fix SDR50 tuning override ARM: 8950/1: ftrace/recordmcount: filter relocation types Revert "Input: synaptics-rmi4 - don't increment rmiaddr for SMBus transfers" Input: keyspan-remote - fix control-message timeouts iommu/vt-d: Call __dmar_remove_one_dev_info with valid pointer pinctrl: sunrisepoint: Add missing Interrupt Status register offset XArray: Fix xas_find returning too many entries XArray: Fix xa_find_after with multi-index entries XArray: Fix infinite loop with entry at ULONG_MAX iwlwifi: mvm: don't send the IWL_MVM_RXQ_NSSN_SYNC notif to Rx queues Revert "iwlwifi: mvm: fix scan config command size" powerpc/xive: Discard ESB load value when interrupt is invalid powerpc/mm/hash: Fix sharing context ids between kernel & userspace tracing: Fix histogram code when expression has same var as value tracing: Do not set trace clock if tracefs lockdown is in effect tracing/uprobe: Fix double perf_event linking on multiprobe uprobe tracing: trigger: Replace unneeded RCU-list traversals PM: hibernate: fix crashes with init_on_free=1 drm/i915: Align engine->uabi_class/instance with i915_drm.h drm/panfrost: Add the panfrost_gem_mapping concept PCI: Mark AMD Navi14 GPU rev 0xc5 ATS as broken ceph: hold extra reference to r_parent over life of request hwmon: (core) Do not use device managed functions for memory allocations hwmon: (adt7475) Make volt2reg return same reg as reg2volt input afs: Fix characters allowed into cell names Revert "io_uring: only allow submit from owning task" ipv4: Detect rollover in specific fib table dump net/mlx5e: kTLS, Do not send decrypted-marked SKBs via non-accel path net/mlx5e: kTLS, Remove redundant posts in TX resync flow net/mlx5e: kTLS, Fix corner-case checks in TX resync flow net/mlx5: DR, use non preemptible call to get the current cpu number net/mlx5: E-Switch, Prevent ingress rate configuration of uplink rep net/mlx5: DR, Enable counter on non-fwd-dest objects net/mlx5: Update the list of the PCI supported devices net/mlx5: Fix lowest FDB pool size net: Fix packet reordering caused by GRO and listified RX cooperation fou: Fix IPv6 netlink policy mlxsw: spectrum_acl: Fix use-after-free during reload airo: Add missing CAP_NET_ADMIN check in AIROOLDIOCTL/SIOCDEVPRIVATE airo: Fix possible info leak in AIROOLDIOCTL/SIOCDEVPRIVATE tun: add mutex_unlock() call and napi.skb clearing in tun_get_user() tcp: do not leave dangling pointers in tp->highest_sack tcp_bbr: improve arithmetic division in bbr_update_bw() Revert "udp: do rmem bulk free even if the rx sk queue is empty" net: usb: lan78xx: Add .ndo_features_check net-sysfs: Fix reference count leak net_sched: use validated TCA_KIND attribute in tc_new_tfilter() net_sched: fix datalen for ematch net: rtnetlink: validate IFLA_MTU attribute in rtnl_create_link() net, ip_tunnel: fix namespaces move net, ip6_tunnel: fix namespaces move net: ip6_gre: fix moving ip6gre between namespaces net: cxgb3_main: Add CAP_NET_ADMIN check to CHELSIO_GET_MEM net: bcmgenet: Use netif_tx_napi_add() for TX NAPI ipv6: sr: remove SKB_GSO_IPXIP6 on End.D* actions gtp: make sure only SOCK_DGRAM UDP sockets are accepted firestream: fix memory leaks can, slip: Protect tty->disc_data in write_wakeup and close with RCU ANDROID: gki_defconfig: Set IKHEADERS back to =y ANDROID: gki_defconfig: Enable CONFIG_BTT f2fs: fix race conditions in ->d_compare() and ->d_hash() f2fs: fix dcache lookup of !casefolded directories f2fs: Add f2fs stats to sysfs f2fs: delete duplicate information on sysfs nodes f2fs: change to use rwsem for gc_mutex f2fs: update f2fs document regarding to fsync_mode f2fs: add a way to turn off ipu bio cache f2fs: code cleanup for f2fs_statfs_project() f2fs: fix miscounted block limit in f2fs_statfs_project() f2fs: show the CP_PAUSE reason in checkpoint traces f2fs: fix deadlock allocating bio_post_read_ctx from mempool f2fs: remove unneeded check for error allocating bio_post_read_ctx f2fs: convert inline_dir early before starting rename f2fs: fix memleak of kobject f2fs: fix to add swap extent correctly f2fs: run fsck when getting bad inode during GC f2fs: support data compression f2fs: free sysfs kobject f2fs: declare nested quota_sem and remove unnecessary sems f2fs: don't put new_page twice in f2fs_rename f2fs: set I_LINKABLE early to avoid wrong access by vfs f2fs: don't keep META_MAPPING pages used for moving verity file blocks f2fs: introduce private bioset f2fs: cleanup duplicate stats for atomic files f2fs: Check write pointer consistency of non-open zones f2fs: Check write pointer consistency of open zones f2fs: set GFP_NOFS when moving inline dentries f2fs: should avoid recursive filesystem ops f2fs: keep quota data on write_begin failure f2fs: call f2fs_balance_fs outside of locked page f2fs: preallocate DIO blocks when forcing buffered_io FROMGIT: ext4: Add EXT4_IOC_FSGETXATTR/EXT4_IOC_FSSETXATTR to compat_ioctl. ANDROID: gki_defconfig: Set IKHEADERS back to =m ANDROID: gki_defconfig: enable NVDIMM/PMEM options Linux 5.4.15 optee: Fix multi page dynamic shm pool alloc phy/rockchip: inno-hdmi: round clock rate down to closest 1000 Hz gpio: aspeed: avoid return type warning net-sysfs: Call dev_hold always in netdev_queue_add_kobject s390/qeth: fix dangling IO buffers after halt/clear block: fix memleak of bio integrity data platform/chrome: wilco_ec: fix use after free issue xdp: Fix cleanup on map free for devmap_hash map type drm/radeon: fix bad DMA from INTERRUPT_CNTL2 dmaengine: ti: edma: fix missed failure handling afs: Remove set but not used variables 'before', 'after' dma-direct: don't check swiotlb=force in dma_direct_map_resource mt76: mt76u: rely on usb_interface instead of usb_dev sched/cpufreq: Move the cfs_rq_util_change() call to cpufreq_update_util() SUNRPC: Fix another issue with MIC buffer space workqueue: Add RCU annotation for pwq list walk tee: optee: fix device enumeration error handling tee: optee: Fix dynamic shm pool allocations mmc: core: fix wl1251 sdio quirks mmc: sdio: fix wl1251 vendor id firmware: arm_scmi: Fix doorbell ring logic for !CONFIG_64BIT kselftests: cgroup: Avoid the reuse of fd after it is deallocated i2c: stm32f7: report dma error during probe packet: fix data-race in fanout_flow_is_huge() rtc: bd70528: fix module alias to autoload module selftests: gen_kselftest_tar.sh: Do not clobber kselftest/ net: axienet: Fix error return code in axienet_probe() net: neigh: use long type to store jiffies delta rt2800: remove errornous duplicate condition hv_netvsc: flag software created hash value net: openvswitch: don't unlock mutex when changing the user_features fails scsi: ufs: delete redundant function ufshcd_def_desc_sizes() dpaa_eth: avoid timestamp read on error paths dpaa_eth: perform DMA unmapping before read rcu: Fix uninitialized variable in nocb_gp_wait() libbpf: Don't use kernel-side u32 type in xsk.c firmware: imx: Remove call to devm_of_platform_populate power: supply: bd70528: Add MODULE_ALIAS to allow module auto loading drm/amdgpu/vi: silence an uninitialized variable warning regulator: bd70528: Add MODULE_ALIAS to allow module auto loading pwm: sun4i: Fix incorrect calculation of duty_cycle/period ACPI: platform: Unregister stale platform devices net: netsec: Correct dma sync for XDP_TX frames drm: rcar_lvds: Fix color mismatches on R-Car H2 ES2.0 and later PCI: mobiveil: Fix csr_read()/write() build issue software node: Get reference to parent swnode in get_parent op drm/rockchip: Round up _before_ giving to the clock framework dpaa2-eth: Fix minor bug in ethtool stats reporting hwrng: omap3-rom - Fix missing clock by probing with device tree drm/amdgpu: remove excess function parameter description drm: panel-lvds: Potential Oops in probe error handling drm/panfrost: Add missing check for pfdev->regulator rtw88: fix error handling when setup efuse info rtw88: fix beaconing mode rsvd_page memory violation issue gpiolib: No need to call gpiochip_remove_pin_ranges() twice sched/core: Further clarify sched_class::set_next_task() ipmi: Fix memory leak in __ipmi_bmc_register watchdog: sprd: Fix the incorrect pointer getting from driver data soc: aspeed: Fix snoop_file_poll()'s return type soc: renesas: Add missing check for non-zero product register address soc: qcom: llcc: Name regmaps to avoid collisions soc/tegra: pmc: Fix crashes for hierarchical interrupts leds: tlc591xx: update the maximum brightness perf map: No need to adjust the long name of modules crypto: sun4i-ss - fix big endian issues crypto: amcc - restore CRYPTO_AES dependency nfsd: depend on CRYPTO_MD5 for legacy client tracking s390/pkey: fix memory leak within _copy_apqns_from_user() ice: fix stack leakage mt7601u: fix bbp version check in mt7601u_wait_bbp_ready mt76: mt76u: fix endpoint definition order phy: ti: gmii-sel: fix mac tx internal delay for rgmii-rxid net: phy: broadcom: Fix RGMII delays configuration for BCM54210E phy: lantiq: vrx200-pcie: fix error return code in ltq_vrx200_pcie_phy_power_on() net/mlx5e: Fix free peer_flow when refcount is 0 tipc: fix wrong timeout input for tipc_wait_for_cond() tipc: fix wrong socket reference counter after tipc_sk_timeout() returns tipc: fix potential memory leak in __tipc_sendmsg() tipc: update mon's self addr when node addr generated tipc: reduce sensitive to retransmit failures powerpc/archrandom: fix arch_get_random_seed_int() powerpc/kasan: Fix boot failure with RELOCATABLE && FSL_BOOKE powerpc/pseries: Enable support for ibm,drc-info property powerpc/security: Fix debugfs data leak on 32-bit SUNRPC: Fix backchannel latency metrics SUNRPC: Fix svcauth_gss_proxy_init() mfd: intel-lpss: Add default I2C device properties for Gemini Lake i2c: i2c-stm32f7: fix 10-bits check in slave free id search loop i2c: stm32f7: rework slave_id allocation xfs: Sanity check flags of Q_XQUOTARM call ARM: OMAP2+: Add missing put_device() call in omapdss_init_of() ARM: dts: logicpd-torpedo-37xx-devkit-28: Reference new DRM panel samples/bpf: Fix broken xdp_rxq_info due to map order assumptions samples: bpf: update map definition to new syntax BTF-defined map bpf: Force .BTF section start to zero when dumping from vmlinux libbpf: Make btf__resolve_size logic always check size error condition libbpf: Fix another potential overflow issue in bpf_prog_linfo libbpf: Fix potential overflow issue libbpf: Fix memory leak/double free issue libbpf: Fix compatibility for kernels without need_wakeup drm/i915: Fix pid leak with banned clients ANDROID: update ABI following inline crypto changes ANDROID: gki_defconfig: enable dm-default-key ANDROID: dm: add dm-default-key target for metadata encryption ANDROID: dm: enable may_passthrough_inline_crypto on some targets ANDROID: dm: add support for passing through inline crypto support ANDROID: block: Introduce passthrough keyslot manager ANDROID: ext4, f2fs: enable direct I/O with inline encryption FROMLIST: scsi: ufs: add program_key() variant op ANDROID: block: export symbols needed for modules to use inline crypto ANDROID: block: fix some inline crypto bugs UPSTREAM: mm/page_io.c: annotate refault stalls from swap_readpage FROMLIST: security: selinux: allow per-file labelling for binderfs Revert "ANDROID: security,perf: Allow further restriction of perf_event_open" ANDROID: selinux: modify RTM_GETLINK permission BACKPORT: tracing: Remove unnecessary DEBUG_FS dependency BACKPORT: debugfs: Fix !DEBUG_FS debugfs_create_automount Linux 5.4.14 scsi: lpfc: use hdwq assigned cpu for allocation perf script: Fix --reltime with --time hwmon: (pmbus/ibm-cffps) Fix LED blink behavior hwmon: (pmbus/ibm-cffps) Switch LEDs to blocking brightness call regulator: ab8500: Remove SYSCLKREQ from enum ab8505_regulator_id clk: imx7ulp: Correct DDR clock mux options clk: imx7ulp: Correct system clock source option #7 clk: sprd: Use IS_ERR() to validate the return value of syscon_regmap_lookup_by_phandle() perf script: Allow --time with --reltime perf probe: Fix wrong address verification rtw88: fix potential read outside array boundary scsi: lpfc: Fix a kernel warning triggered by lpfc_get_sgl_per_hdwq() scsi: lpfc: Fix hdwq sgl locks and irq handling scsi: lpfc: Fix list corruption detected in lpfc_put_sgl_per_hdwq scsi: core: scsi_trace: Use get_unaligned_be*() scsi: qla2xxx: fix rports not being mark as lost in sync fabric scan scsi: qla2xxx: Fix qla2x00_request_irqs() for MSI scsi: scsi_transport_sas: Fix memory leak when removing devices scsi: hisi_sas: Return directly if init hardware failed scsi: lpfc: fix: Coverity: lpfc_get_scsi_buf_s3(): Null pointer dereferences scsi: target: core: Fix a pr_debug() argument scsi: bnx2i: fix potential use after free scsi: qla4xxx: fix double free bug scsi: hisi_sas: Set the BIST init value before enabling BIST scsi: hisi_sas: Don't create debugfs dump folder twice scsi: esas2r: unlock on error in esas2r_nvram_read_direct() reiserfs: fix handling of -EOPNOTSUPP in reiserfs_for_each_xattr um: virtio_uml: Disallow modular build um: Don't trace irqflags during shutdown mtd: cfi_cmdset_0002: fix delayed error detection on HyperFlash mtd: cfi_cmdset_0002: only check errors when ready in cfi_check_err_status() mtd: devices: fix mchp23k256 read and write Revert "arm64: dts: juno: add dma-ranges property" ARM: dts: Fix sgx sysconfig register for omap4 arm64: dts: juno: Fix UART frequency ARM: dts: dra7: fix cpsw mdio fck clock arm64: dts: allwinner: a64: Re-add PMU node ARM: dts: imx6ul-kontron-n6310-s: Disable the snvs-poweroff driver arm64: dts: qcom: sdm845-cheza: delete zap-shader arm64: dts: imx8mm-evk: Assigned clocks for audio plls arm64: dts: renesas: r8a774a1: Remove audio port node arm64: dts: marvell: Fix CP110 NAND controller node multi-line comment alignment tick/sched: Annotate lockless access to last_jiffies_update cfg80211: check for set_wiphy_params arm64: dts: marvell: Add AP806-dual missing CPU clocks arm64: dts: renesas: r8a77970: Fix PWM3 arm64: dts: meson-gxl-s905x-khadas-vim: fix gpio-keys-polled node arm64: dts: meson: g12: fix audio fifo reg size arm64: dts: meson: axg: fix audio fifo reg size cw1200: Fix a signedness bug in cw1200_load_firmware() arm64: dts: qcom: msm8998: Disable coresight by default irqchip: Place CONFIG_SIFIVE_PLIC into the menu tcp: refine rule to allow EPOLLOUT generation under mem pressure dt-bindings: Add missing 'properties' keyword enclosing 'snps,tso' xen/blkfront: Adjust indentation in xlvbd_alloc_gendisk devlink: Wait longer before warning about unset port type net: stmmac: tc: Do not setup flower filtering if RSS is enabled net: stmmac: selftests: Update status when disabling RSS selftests: mlxsw: qos_mc_aware: Fix mausezahn invocation net: stmmac: selftests: Mark as fail when received VLAN ID != expected net: stmmac: selftests: Make it work in Synopsys AXS101 boards mlxsw: spectrum_qdisc: Include MC TCs in Qdisc counters mlxsw: spectrum: Wipe xstats.backlog of down ports mlxsw: spectrum: Do not modify cloned SKBs during xmit sh_eth: check sh_eth_cpu_data::dual_port when dumping registers drm/amdgpu: allow direct upload save restore list for raven2 i40e: prevent memory leak in i40e_setup_macvlans net: dsa: bcm_sf2: Configure IMP port for 2Gb/sec net: sched: act_ctinfo: fix memory leak net: dsa: tag_gswip: fix typo in tagger name net: dsa: sja1105: Don't error out on disabled ports with no phy-mode net: systemport: Fixed queue mapping in internal ring map net: ethernet: ave: Avoid lockdep warning bnxt_en: Do not treat DSN (Digital Serial Number) read failure as fatal. bnxt_en: Fix ipv6 RFS filter matching logic. bnxt_en: Fix NTUPLE firmware command failures. tcp: fix marked lost packets not being retransmitted r8152: add missing endpoint sanity check ptp: free ptp device pin descriptors properly net/wan/fsl_ucc_hdlc: fix out of bounds write on array utdm_info net: usb: lan78xx: limit size of local TSO packets net/sched: act_ife: initalize ife->metalist earlier net: phy: dp83867: Set FORCE_LINK_GOOD to default after reset net: hns: fix soft lockup when there is not enough memory net: hns3: pad the short frame before sending to the hardware net: dsa: tag_qca: fix doubled Tx statistics net: avoid updating qdisc_xmit_lock_key in netdev_update_lockdep_key() hv_netvsc: Fix memory leak when removing rndis device macvlan: use skb_reset_mac_header() in macvlan_queue_xmit() batman-adv: Fix DAT candidate selection on little endian systems bpftool: Fix printing incorrect pointer in btf_dump_ptr net: bpf: Don't leak time wait and request sockets NFC: pn533: fix bulk-message timeout netfilter: nf_tables: fix flowtable list del corruption netfilter: nf_tables: store transaction list locally while requesting module netfilter: nf_tables: remove WARN and add NLA_STRING upper limits netfilter: nft_tunnel: ERSPAN_VERSION must not be null netfilter: nft_tunnel: fix null-attribute check netfilter: nat: fix ICMP header corruption on ICMP errors netfilter: arp_tables: init netns pointer in xt_tgdtor_param struct netfilter: fix a use-after-free in mtype_destroy() i2c: iop3xx: Fix memory leak in probe error path bpf/sockmap: Read psock ingress_msg before sk_receive_queue cfg80211: fix page refcount issue in A-MSDU decap cfg80211: fix memory leak in cfg80211_cqm_rssi_update cfg80211: fix memory leak in nl80211_probe_mesh_link cfg80211: fix deadlocks in autodisconnect work i2c: tegra: Properly disable runtime PM on driver's probe error i2c: tegra: Fix suspending in active runtime PM state bpf: Sockmap/tls, fix pop data with SK_DROP return code bpf: Sockmap/tls, skmsg can have wrapped skmsg that needs extra chaining bpf: Sockmap/tls, tls_sw can create a plaintext buf > encrypt buf bpf: Sockmap/tls, msg_push_data may leave end mark in place bpf: Sockmap, skmsg helper overestimates push, pull, and pop bounds bpf: Sockmap/tls, push write_space updates through ulp updates bpf: Sockmap, ensure sock lock held during tear down bpf: Sockmap/tls, during free we may call tcp_bpf_unhash() in loop bpf: Fix incorrect verifier simulation of ARSH under ALU32 drm/amd/display: Reorder detect_edp_sink_caps before link settings read. block: Fix the type of 'sts' in bsg_queue_rq() net: fix kernel-doc warning in <linux/netdevice.h> tipc: fix retrans failure due to wrong destination tipc: fix potential hanging after b/rcast changing reset: Fix {of,devm}_reset_control_array_get kerneldoc return types net: stmmac: Enable 16KB buffer size net: stmmac: 16KB buffer must be 16 byte aligned ARM: dts: imx7: Fix Toradex Colibri iMX7S 256MB NAND flash support ARM: dts: imx6q-icore-mipi: Use 1.5 version of i.Core MX6DL ARM: dts: imx6sll-evk: Remove incorrect power supply assignment ARM: dts: imx6sl-evk: Remove incorrect power supply assignment ARM: dts: imx6sx-sdb: Remove incorrect power supply assignment ARM: dts: imx6qdl-sabresd: Remove incorrect power supply assignment mm: khugepaged: add trace status description for SCAN_PAGE_HAS_PRIVATE mm/page-writeback.c: avoid potential division by zero in wb_min_max_ratio() mm/memory_hotplug: don't free usage map when removing a re-added early section Btrfs: always copy scrub arguments back to user space btrfs: check rw_devices, not num_devices for balance btrfs: fix memory leak in qgroup accounting btrfs: relocation: fix reloc_root lifespan and access btrfs: do not delete mismatched root refs btrfs: fix invalid removal of root ref btrfs: rework arguments of btrfs_unlink_subvol mm, debug_pagealloc: don't rely on static keys too early mm: memcg/slab: call flush_memcg_workqueue() only if memcg workqueue is valid mm: memcg/slab: fix percpu slab vmstats flushing mm/huge_memory.c: thp: fix conflict of above-47bit hint address and PMD alignment mm/shmem.c: thp, shmem: fix conflict of above-47bit hint address and PMD alignment perf report: Fix incorrectly added dimensions as switch perf data file locking/lockdep: Fix buffer overrun problem in stack_trace[] perf hists: Fix variable name's inconsistency in hists__for_each() macro clk: samsung: exynos5420: Keep top G3D clocks enabled s390/setup: Fix secure ipl message efi/earlycon: Fix write-combine mapping on x86 x86/resctrl: Fix potential memory leak drm/i915: Add missing include file <linux/math64.h> mtd: spi-nor: Fix selection of 4-byte addressing opcodes on Spansion scsi: storvsc: Correctly set number of hardware queues for IDE disk s390/zcrypt: Fix CCA cipher key gen with clear key value function x86/efistub: Disable paging at mixed mode entry perf/x86/intel/uncore: Fix missing marker for snr_uncore_imc_freerunning_events locking/rwsem: Fix kernel crash when spinning on RWSEM_OWNER_UNKNOWN x86/CPU/AMD: Ensure clearing of SME/SEV features is maintained x86/resctrl: Fix an imbalance in domain_remove_cpu() cpu/SMT: Fix x86 link error without CONFIG_SYSFS usb: core: hub: Improved device recognition on remote wakeup mtd: rawnand: gpmi: Restore nfc timing setup after suspend/resume mtd: rawnand: gpmi: Fix suspend/resume problem ptrace: reintroduce usage of subjective credentials in ptrace_has_cap() scsi: mptfusion: Fix double fetch bug in ioctl scsi: fnic: fix invalid stack access staging: comedi: ni_routes: allow partial routing information staging: comedi: ni_routes: fix null dereference in ni_find_route_source() USB: serial: quatech2: handle unbound ports USB: serial: keyspan: handle unbound ports USB: serial: io_edgeport: add missing active-port sanity check USB: serial: io_edgeport: handle unbound ports on URB completion USB: serial: ch341: handle unbound port at reset_resume USB: serial: suppress driver bind attributes USB: serial: option: add support for Quectel RM500Q in QDL mode USB: serial: opticon: fix control-message timeouts USB: serial: option: Add support for Quectel RM500Q USB: serial: simple: Add Motorola Solutions TETRA MTP3xxx and MTP85xx iio: buffer: align the size of scan bytes to size of the largest element iio: chemical: pms7003: fix unmet triggered buffer dependency iio: light: vcnl4000: Fix scale for vcnl4040 iio: imu: st_lsm6dsx: Fix selection of ST_LSM6DS3_ID iio: adc: ad7124: Fix DT channel configuration perf: Correctly handle failed perf_get_aux_event() ARM: davinci: select CONFIG_RESET_CONTROLLER ARM: dts: am571x-idk: Fix gpios property to have the correct gpio number cpuidle: teo: Fix intervals[] array indexing bug io_uring: only allow submit from owning task fuse: fix fuse_send_readpages() in the syncronous read case block: fix an integer overflow in logical block size clk: sunxi-ng: r40: Allow setting parent rate for external clock outputs Fix built-in early-load Intel microcode alignment arm64: dts: agilex/stratix10: fix pmu interrupt numbers arm64: dts: allwinner: a64: olinuxino: Fix eMMC supply regulator arm64: dts: allwinner: a64: olinuxino: Fix SDIO supply regulator ALSA: usb-audio: fix sync-ep altsetting sanity check ALSA: firewire-tascam: fix corruption due to spin lock without restoration in SoftIRQ context ALSA: seq: Fix racy access for queue timer in proc read ALSA: dice: fix fallback from protocol extension into limited functionality ASoC: Intel: bytcht_es8316: Fix Irbis NB41 netbook quirk ARM: dts: imx6q-dhcom: Fix SGTL5000 VDDIO regulator connection ARM: dts: imx7ulp: fix reg of cpu node ARM: OMAP2+: Fix ti_sysc_find_one_clockdomain to check for to_clk_hw_omap ASoC: msm8916-wcd-analog: Fix MIC BIAS Internal1 ASoC: msm8916-wcd-analog: Fix selected events for MIC BIAS External1 ASoC: stm32: dfsdm: fix 16 bits record ASoC: stm32: sai: fix possible circular locking ASoC: msm8916-wcd-digital: Reset RX interpolation path after use arm64: dts: imx8mq-librem5-devkit: use correct interrupt for the magnetometer Revert "gpio: thunderx: Switch to GPIOLIB_IRQCHIP" clk: Don't try to enable critical clocks if prepare failed bus: ti-sysc: Fix iterating over clocks arm64: dts: imx8mm: Change SDMA1 ahb clock for imx8mm arm64: dts: ls1028a: fix endian setting for dcfg ARM: dts: imx6q-dhcom: fix rtc compatible dt-bindings: reset: meson8b: fix duplicate reset IDs soc: amlogic: meson-ee-pwrc: propagate errors from pm_genpd_init() soc: amlogic: meson-ee-pwrc: propagate PD provider registration errors clk: qcom: gcc-sdm845: Add missing flag to votable GDSCs ARM: dts: meson8: fix the size of the PMU registers ANDROID: gki: Make GKI specific modules builtins ANDROID: virtio-net: Skip set_features on non-cvq devices ANDROID: fscrypt: add support for hardware-wrapped keys ANDROID: block: add KSM op to derive software secret from wrapped key ANDROID: block: provide key size as input to inline crypto APIs ANDROID: ufshcd-crypto: export cap find API ANDROID: build config for cuttlefish ramdisk ANDROID: x86: gki_defconfig: enable LTO and CFI ANDROID: x86: map CFI jump tables in pti_clone_entry_text ANDROID: x86, module: Ignore __typeid__ relocations ANDROID: x86, relocs: Ignore __typeid__ relocations ANDROID: x86/alternatives: Use C int3 selftest but disable KASAN ANDROID: x86/extable: Do not mark exception callback as CFI ANDROID: x86, build: allow LTO_CLANG and THINLTO to be selected ANDROID: x86: disable UNWINDER_ORC with LTO_CLANG ANDROID: x86: disable STACK_VALIDATION with LTO_CLANG ANDROID: x86: disable HAVE_ARCH_PREL32_RELOCATIONS with LTO_CLANG ANDROID: x86/vdso: disable LTO only for VDSO FROMLIST: crypto, x86/sha: Eliminate casts on asm implementations UPSTREAM: x86/vmlinux: Actually use _etext for the end of the text segment Linux 5.4.13 ocfs2: call journal flush to mark journal as empty after journal recovery when mount hexagon: work around compiler crash hexagon: parenthesize registers in asm predicates kbuild/deb-pkg: annotate libelf-dev dependency as :native media: intel-ipu3: Align struct ipu3_uapi_awb_fr_config_s to 32 bytes drm/amdgpu: enable gfxoff for raven1 refresh ioat: ioat_alloc_ring() failure handling. s390/qeth: lock the card while changing its hsuid dmaengine: k3dma: Avoid null pointer traversal rxrpc: Fix missing security check on incoming calls rxrpc: Don't take call->user_mutex in rxrpc_new_incoming_call() rxrpc: Unlock new call in rxrpc_new_incoming_call() rather than the caller drm/arm/mali: make malidp_mw_connector_helper_funcs static MIPS: Prevent link failure with kcov instrumentation tomoyo: Suppress RCU warning at list_for_each_entry_rcu(). mips: Fix gettimeofday() in the vdso library mips: cacheinfo: report shared CPU map riscv: export flush_icache_all to modules rseq/selftests: Turn off timeout setting selftests: firmware: Fix it to do root uid check and skip scsi: target/iblock: Fix protection error with blocks greater than 512B scsi: libcxgbi: fix NULL pointer dereference in cxgbi_device_destroy() gpio: mpc8xxx: Add platform device to gpiochip->parent rtc: bd70528: Add MODULE ALIAS to autoload module rtc: brcmstb-waketimer: add missed clk_disable_unprepare rtc: msm6242: Fix reading of 10-hour digit NFSD fixing possible null pointer derefering in copy offload f2fs: fix potential overflow sch_cake: Add missing NLA policy entry TCA_CAKE_SPLIT_GSO iwlwifi: mvm: fix support for single antenna diversity rtlwifi: Remove unnecessary NULL check in rtl_regd_init iwlwifi: mvm: consider ieee80211 station max amsdu value spi: lpspi: fix memory leak in fsl_lpspi_probe spi: rspi: Use platform_get_irq_byname_optional() for optional irqs spi: atmel: fix handling of cs_change set on non-last xfer spi: pxa2xx: Set controller->max_transfer_size in dma mode mtd: spi-nor: fix silent truncation in spi_nor_read_raw() mtd: spi-nor: fix silent truncation in spi_nor_read() spi: sprd: Fix the incorrect SPI register ubifs: do_kill_orphans: Fix a memory leak bug ubifs: Fixed missed le64_to_cpu() in journal Revert "ubifs: Fix memory leak bug in alloc_ubifs_info() error path" memory: mtk-smi: Add PM suspend and resume ops iommu/mediatek: Add a new tlb_lock for tlb_flush iommu/mediatek: Correct the flush_iotlb_all callback media: hantro: Set H264 FIELDPIC_FLAG_E flag correctly media: aspeed-video: Fix memory leaks in aspeed_video_probe media: hantro: Do not reorder H264 scaling list media: cedrus: Use correct H264 8x8 scaling list media: coda: fix deadlock between decoder picture run and start command media: exynos4-is: Fix recursive locking in isp_video_release() media: v4l: cadence: Fix how unsued lanes are handled in 'csi2rx_start()' media: hantro: h264: Fix the frame_num wraparound case media: rcar-vin: Fix incorrect return statement in rvin_try_format() media: ov6650: Fix default format not applied on device probe media: ov6650: Fix .get_fmt() V4L2_SUBDEV_FORMAT_TRY support media: ov6650: Fix some format attributes not under control media: ov6650: Fix incorrect use of JPEG colorspace ARM: 8943/1: Fix topology setup in case of CPU hotplug for CONFIG_SCHED_MC tty: serial: pch_uart: correct usage of dma_unmap_sg tty: serial: imx: use the sg count from dma_map_sg MIPS: SGI-IP27: Fix crash, when CPUs are disabled via nr_cpus parameter MIPS: Loongson: Fix return value of loongson_hwmon_init MIPS: PCI: remember nasid changed by set interrupt affinity powerpc/powernv: Disable native PCIe port management PCI/PTM: Remove spurious "d" from granularity message tools: PCI: Fix fd leakage PCI/PM: Clear PCIe PME Status even for legacy power management PCI: Fix missing bridge dma_ranges resource list cleanup PCI: dwc: Fix find_next_bit() usage PCI: aardvark: Fix PCI_EXP_RTCTL register configuration PCI: aardvark: Use LTSSM state to build link training flag compat_ioctl: handle SIOCOUTQNSD af_unix: add compat_ioctl support gfs2: add compat_ioctl support arm64: dts: apq8096-db820c: Increase load on l21 for SDCARD scsi: sd: enable compat ioctls for sed-opal drm/amdgpu/discovery: reserve discovery data at the top of VRAM drm/amdgpu: cleanup creating BOs at fixed location (v2) Revert "drm/virtio: switch virtio_gpu_wait_ioctl() to gem helper." PCI: pciehp: Do not disable interrupt twice on suspend pinctrl: lewisburg: Update pin list according to v1.1v6 pinctrl: sh-pfc: Do not use platform_get_irq() to count interrupts pinctrl: sh-pfc: Fix PINMUX_IPSR_PHYS() to set GPSR pinctl: ti: iodelay: fix error checking on pinctrl_count_index_with_args call affs: fix a memory leak in affs_remount rsi: fix potential null dereference in rsi_probe() clk: imx: pll14xx: Fix quick switch of S/K parameter dmaengine: dw: platform: Mark 'hclk' clock optional clk: Fix memory leak in clk_unregister() clk: samsung: exynos5420: Preserve CPU clocks configuration during suspend/resume clk: meson: axg-audio: fix regmap last register mei: fix modalias documentation iio: imu: adis16480: assign bias value only if operation succeeded iio: imu: st_lsm6dsx: fix gyro gain definitions for LSM9DS1 NFSv4.x: Drop the slot if nfs4_delegreturn_prepare waits for layoutreturn NFSv4.x: Handle bad/dead sessions correctly in nfs41_sequence_process() nfsd: v4 support requires CRYPTO_SHA256 nfsd: Fix cld_net->cn_tfm initialization NFSv2: Fix a typo in encode_sattr() crypto: geode-aes - convert to skcipher API and make thread-safe crypto: algif_skcipher - Use chunksize instead of blocksize crypto: virtio - implement missing support for output IVs crypto: arm64/aes-neonbs - add return value of skcipher_walk_done() in __xts_crypt() crypto: hisilicon - select NEED_SG_DMA_LENGTH in qm Kconfig crypto: cavium/nitrox - fix firmware assignment to AE cores scsi: ufs: Give an unique ID to each ufs-bsg dm: add dm-clone to the documentation index xprtrdma: Fix oops in Receive handler after device removal xprtrdma: Fix completion wait during device removal xprtrdma: Fix create_qp crash on device unload Documentation/ABI: Add missed attribute for mlxreg-io sysfs interfaces Documentation/ABI: Fix documentation inconsistency for mlxreg-io sysfs interfaces asm-generic/nds32: don't redefine cacheflush primitives platform/x86: GPD pocket fan: Use default values when wrong modparams are given platform/x86: asus-wmi: Fix keyboard brightness cannot be set to 0 platform/mellanox: fix potential deadlock in the tmfifo driver scsi: sd: Clear sdkp->protection_type if disk is reformatted without PI scsi: enclosure: Fix stale device oops with hot replug keys: Fix request_key() cache afs: Fix afs_lookup() to not clobber the version on a new dentry afs: Fix use-after-loss-of-ref libbpf: Fix Makefile' libbpf symbol mismatch diagnostic bpf: Support pre-2.25-binutils objcopy for vmlinux BTF bpf: skmsg, fix potential psock NULL pointer dereference bpf: Make use of probe_user_write in probe write helper uaccess: Add non-pagefault user-space write function RDMA/srpt: Report the SCSI residual to the initiator RDMA/mlx5: Return proper error value rdma: Remove nes ABI header RDMA/hns: Bugfix for qpc/cqc timer configuration RDMA/hns: Fix to support 64K page for srq xprtrdma: Close window between waking RPC senders and posting Receives xprtrdma: Fix MR list handling xprtrdma: Connection becomes unstable after a reconnect xprtrdma: Add unique trace points for posting Local Invalidate WRs RDMA/hns: Release qp resources when failed to destroy qp RDMA/hns: Fix build error again RDMA/siw: Fix port number endianness in a debug message RDMA/counter: Prevent QP counter manual binding in auto mode RDMA/hns: Modify return value of restrack functions RDMA/hns: remove a redundant le16_to_cpu RDMA/hns: Prevent undefined behavior in hns_roce_set_user_sq_size() ASoC: rsnd: fix DALIGN register for SSIU ASoC: core: Fix compile warning with CONFIG_DEBUG_FS=n ASoC: SOF: Intel: Broadwell: clarify mutual exclusion with legacy driver ASoC: fsl_esai: Add spin lock to protect reset, stop and start ASoC: simple_card_utils.h: Add missing include ASoC: dt-bindings: mt8183: add missing update netfilter: nft_meta: use 64-bit time arithmetic netfilter: nf_tables_offload: release flow_rule on error from commit path btrfs: simplify inode locking for RWF_NOWAIT hsr: fix slab-out-of-bounds Read in hsr_debugfs_rename() syscalls/x86: Fix function types in COND_SYSCALL syscalls/x86: Use the correct function type for sys_ni_syscall syscalls/x86: Use COMPAT_SYSCALL_DEFINE0 for IA32 (rt_)sigreturn syscalls/x86: Wire up COMPAT_SYSCALL_DEFINE0 perf vendor events s390: Remove name from L1D_RO_EXCL_WRITES description afs: Fix missing cell comparison in afs_test_super() reset: brcmstb: Remove resource checks dt-bindings: reset: Fix brcmstb-reset example can: j1939: fix address claim code example ath9k: use iowrite32 over __raw_writel MAINTAINERS: Append missed file to the database scsi: smartpqi: Update attribute name to `driver_version` cifs: Adjust indentation in smb2_open_file s390/qeth: fix initialization on old HW s390/qeth: vnicc Fix init to default s390/qeth: Fix vnicc_is_in_use if rx_bcast not set s390/qeth: fix false reporting of VNIC CHAR config failure s390/qeth: fix qdio teardown after early init error hsr: reset network header when supervision frame is created hsr: rename debugfs file when interface name is changed hsr: add hsr root debugfs directory drm/tegra: Fix ordering of cleanup code PCI: amlogic: Fix probed clock names PM / devfreq: tegra: Add COMMON_CLK dependency gpio: Fix error message on out-of-range GPIO in lookup table scsi: mpt3sas: Fix double free in attach error handling fs: move guard_bio_eod() after bio_set_op_attrs bpf: cgroup: prevent out-of-order release of cgroup bpf iommu: Remove device link to group on failure iommu/vt-d: Unlink device if failed to add to group selftests: loopback.sh: skip this test if the driver does not support pinctrl: meson: Fix wrong shift value when get drive-strength gpio: zynq: Fix for bug in zynq_gpio_restore_context API mtd: onenand: omap2: Pass correct flags for prep_dma_memcpy ASoC: SOF: imx8: Fix dsp_box offset netfilter: nft_flow_offload: fix underflow in flowtable reference counter pinctrl: lochnagar: select GPIOLIB ASoC: stm32: spdifrx: fix input pin state management ASoC: stm32: spdifrx: fix race condition in irq handler ASoC: stm32: spdifrx: fix inconsistent lock state ASoC: soc-core: Set dpcm_playback / dpcm_capture ASoC: SOF: imx8: fix memory allocation failure check on priv->pd_dev i2c: bcm2835: Store pointer to bus clock mtd: rawnand: stm32_fmc2: avoid to lock the CPU bus IB/hfi1: Don't cancel unused work item RDMA/bnxt_re: Fix Send Work Entry state check while polling completions RDMA/bnxt_re: Avoid freeing MR resources if dereg fails phy: mapphone-mdm6600: Fix uninitialized status value regression rtc: mt6397: fix alarm register overwrite HID: hidraw, uhid: Always report EPOLLOUT FROMGIT: drivers/iommu: Initialise module 'owner' field in iommu_device_set_ops() Revert "drm/virtio: switch virtio_gpu_wait_ioctl() to gem helper." ANDROID: update kernel ABI for CONFIG_DUMMY ANDROID: update ABI whitelist UPSTREAM: dmaengine: k3dma: Avoid null pointer traversal GKI: enable CONFIG_DUMMY=y ANDROID: update kernel ABI for f2fs/fscrypt/other changes ANDROID: db845c: Add build config ANDROID: db845c: add db845c_gki.fragment FROMLIST: usb: dwc3: gadget: Correct the logic for finding last SG entry FROMLIST: usb: xhci: provide a debugfs hook for erasing rom FROMLIST: usb: renesas-xhci: allow multiple firmware versions FROMLIST: usb: renesas-xhci: Add ROM loader for uPD720201 FROMLIST: usb: renesas-xhci: Add the renesas xhci driver FROMLIST: usb: xhci: export few functions ANDROID: arm64: dts: db845c: Add clocks entry to display to track real clock inputs ANDROID: arm64: dts: db845c: add Low speed expansion i2c and spi nodes ANDROID: arm64: dts: qcom: sdm845-db845c: Bring in LT9611 ANDROID: arm64: dts: qcom: db845c: Enable PCIe controllers ANDROID: arm64: dts: qcom: sdm845: Add second PCIe PHY and controller ANDROID: arm64: dts: qcom: sdm845: Add first PCIe controller and PHY ANDROID: arm64: dts/sdm845: Enable FW implemented safe sequence handler on MTP ANDROID: drm/bridge: Introduce LT9611 DSI to HDMI bridge FROMLIST: drm: msm: Quiet down plane errors in atomic_check FROMLIST: reset: qcom-aoss: Allow CONFIG_RESET_QCOM_AOSS to be a tristate FROMLIST: tty: serial: Kconfig: Allow SERIAL_QCOM_GENI_CONSOLE to be enabled if SERIAL_QCOM_GENI is a module FROMLIST: lib/list_sort: fix function type mismatches UPSTREAM: kcov: fix struct layout for kcov_remote_arg docs: fs-verity: mention statx() support f2fs: support STATX_ATTR_VERITY ext4: support STATX_ATTR_VERITY statx: define STATX_ATTR_VERITY docs: fs-verity: document first supported kernel version f2fs: add support for IV_INO_LBLK_64 encryption policies ext4: add support for IV_INO_LBLK_64 encryption policies fscrypt: add support for IV_INO_LBLK_64 policies fscrypt: avoid data race on fscrypt_mode::logged_impl_name fscrypt: zeroize fscrypt_info before freeing fscrypt: remove struct fscrypt_ctx fscrypt: invoke crypto API for ESSIV handling null_blk: remove unused variable warning on !CONFIG_BLK_DEV_ZONED block: set the zone size in blk_revalidate_disk_zones atomically block: don't handle bio based drivers in blk_revalidate_disk_zones null_blk: cleanup null_gendisk_register null_blk: fix zone size paramter check block: allocate the zone bitmaps lazily block: replace seq_zones_bitmap with conv_zones_bitmap block: simplify blkdev_nr_zones block: remove the empty line at the end of blk-zoned.c scsi: sd_zbc: Improve report zones error printout scsi: sd_zbc: Remove set but not used variable 'buflen' block: rework zone reporting scsi: sd_zbc: Cleanup sd_zbc_alloc_report_buffer() null_blk: clean up report zones null_blk: clean up the block device operations null_blk: return fixed zoned reads > write pointer scsi: sd_zbc: add zone open, close, and finish support block: Remove partition support for zoned block devices block: Simplify report zones execution block: cleanup the !zoned case in blk_revalidate_disk_zones block: Enhance blk_revalidate_disk_zones() block: add zone open, close and finish ioctl support block: add zone open, close and finish operations block: Simplify REQ_OP_ZONE_RESET_ALL handling block: Remove REQ_OP_ZONE_RESET plugging f2fs: stop GC when the victim becomes fully valid f2fs: expose main_blkaddr in sysfs f2fs: choose hardlimit when softlimit is larger than hardlimit in f2fs_statfs_project() f2fs: Fix deadlock in f2fs_gc() context during atomic files handling f2fs: show f2fs instance in printk_ratelimited f2fs: fix potential overflow f2fs: fix to update dir's i_pino during cross_rename f2fs: support aligned pinned file f2fs: avoid kernel panic on corruption test f2fs: fix wrong description in document f2fs: cache global IPU bio f2fs: fix to avoid memory leakage in f2fs_listxattr f2fs: check total_segments from devices in raw_super f2fs: update multi-dev metadata in resize_fs f2fs: mark recovery flag correctly in read_raw_super_block() f2fs: fix to update time in lazytime mode Conflicts: Documentation/devicetree/bindings Documentation/devicetree/bindings/iio/adc/adi,ad7606.yaml Documentation/devicetree/bindings/net/snps,dwmac.yaml Documentation/devicetree/bindings/reset/brcm,brcmstb-reset.txt Documentation/devicetree/bindings/sound/mt8183-mt6358-ts3a227-max98357.txt Makefile block/keyslot-manager.c drivers/clk/qcom/clk-rcg2.c drivers/cpufreq/cpufreq.c drivers/gpu/drm/drm_connector.c drivers/hid/hid-quirks.c drivers/iommu/Makefile drivers/iommu/arm-smmu.c drivers/iommu/iova.c drivers/md/Kconfig drivers/md/dm.c drivers/scsi/ufs/ufs.h drivers/scsi/ufs/ufs_quirks.h drivers/scsi/ufs/ufshcd-crypto.c drivers/scsi/ufs/unipro.h drivers/staging/android/ion/heaps/Kconfig drivers/staging/android/ion/heaps/Makefile drivers/tty/serial/Kconfig drivers/usb/dwc3/gadget.c fs/crypto/keyring.c fs/crypto/keysetup.c include/linux/keyslot-manager.h include/linux/perf_event.h kernel/sched/fair.c kernel/sched/rt.c Added change 552546366a ("hugetlbfs: hugetlb_fault_mutex_hash() cleanup") to fix build errors against mm/hugetlb.c Extra updated files to fit properly imported content into downstream: arch/arm64/configs/vendor/genericarmv8-64_defconfig arch/arm64/configs/vendor/lahaina_QGKI.config arch/arm64/configs/vendor/lahaina_debug.config drivers/android/binderfs.c drivers/regulator/core.c drivers/scsi/ufs/ufshcd-qti.c drivers/staging/android/ion/heaps/ion_carveout_heap.c drivers/staging/android/ion/heaps/msm_ion.c drivers/usb/dwc3/host.c drivers/scsi/ufs/ufshcd-crypto-qti.c fs/hugetlbfs/inode.c gen_headers_arm.bp gen_headers_arm64.bp include/linux/cpufreq.h include/linux/hugetlb.h include/uapi/linux/msm_ion.h include/uapi/linux/msm_ion_ids.h kernel/sched/cpufreq_schedutil.c kernel/sched/fair.c mm/hugetlb.c mm/userfaultfd.c Change-Id: I22295df9d7bca3fc7be9587e893cdd59128cc528 Signed-off-by: Blagovest Kolenichev <bkolenichev@codeaurora.org>	2020-04-14 08:25:29 -07:00
Greg Kroah-Hartman	83003512ab	This is the 5.4.17 stable release ... -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAl41RloACgkQONu9yGCS aT4LIQ//eBnfGLQqvZsaxI7N72c1rke1NqiIgbeljoJxpebjn5EES32POGa+WnEY QTkYx4VrKopuxGc2YvzW+uzYct1oLswJGGiR+iuRdfcU7EhB0yJDJVA9ib7NYUdz H9lQQU6cQBjNC8vj00IiehySgrCesLqmgy6gwYUxktSKQSWSHCoiKNJVqw8FlOdR ae5Go4DdYOje7KiTLivZ5xEEc+dqFmBdZzyiQ8AV/9tHatNVyCfyc3+a03ZwuYVx UOXhsrij5DqJU7hFSFIKUWNLzA/i+toScZjG31iAkGlWekhnjaDTcLdkhMlRTwQt u1PevrLD2uG8xREXNQ6avaPBsUPi9aUgjHBFgsZxnCgRXt9LKKoCZuBi86vQMeWu Lmi/0sOfBuYR5NmhE1LqAQtPsjGdPJLV2/87ua81mjGmRWBBG+SacNvcrwzuMI7u 9yFUFzOJfNcAPS4q3lifJLjN27JW+/ttgkSjt/Cie69KA3cZ7K1H21bXHREef+3H YvExYgxyb+yjWGKQemBoDpPB70ER/MRU5kJ8Dd3nN9r4S2rw8JsmotS2a2jTKpd5 4Smmg6q/e1+jRBbFIx1LKRb2eIRkU7EmlJ1umMonenML7hSA7FFGN/qNYlbNWYpg PcOrENcsaQxoqiVNsQTx9Cu6Vq5PDSmXs600ccoH1KntIsfjD0c= =ywm4 -----END PGP SIGNATURE----- Merge 5.4.17 into android-5.4 Changes in 5.4.17 Bluetooth: btusb: fix non-atomic allocation in completion handler orinoco_usb: fix interface sanity check rsi_91x_usb: fix interface sanity check usb: dwc3: pci: add ID for the Intel Comet Lake -V variant usb: host: xhci-tegra: set MODULE_FIRMWARE for tegra186 USB: serial: ir-usb: add missing endpoint sanity check USB: serial: ir-usb: fix link-speed handling USB: serial: ir-usb: fix IrLAP framing usb: dwc3: turn off VBUS when leaving host mode usb: typec: wcove: fix "op-sink-microwatt" default that was in mW usb: typec: fusb302: fix "op-sink-microwatt" default that was in mW staging: most: net: fix buffer overflow staging: wlan-ng: ensure error return is actually returned staging: vt6656: correct packet types for CTS protect, mode. staging: vt6656: use NULLFUCTION stack on mac80211 staging: vt6656: Fix false Tx excessive retries reporting. serial: 8250_bcm2835aux: Fix line mismatch on driver unbind serial: imx: fix a race condition in receive path debugfs: Return -EPERM when locked down component: do not dereference opaque pointer in debugfs binder: fix log spam for existing debugfs file creation. mei: hdcp: bind only with i915 on the same PCH mei: me: add comet point (lake) H device ids iio: adc: stm32-dfsdm: fix single conversion iio: st_gyro: Correct data for LSM9DS0 gyro driver core: Fix test_async_driver_probe if NUMA is disabled crypto: chelsio - fix writing tfm flags to wrong place CIFS: Fix task struct use-after-free on reconnect cifs: set correct max-buffer-size for smb2_ioctl_init() cifs: Fix memory allocation in __smb2_handle_cancelled_cmd() ath9k: fix storage endpoint lookup brcmfmac: fix interface sanity check rtl8xxxu: fix interface sanity check zd1211rw: fix storage endpoint lookup net_sched: ematch: reject invalid TCF_EM_SIMPLE net_sched: fix ops->bind_class() implementations net_sched: walk through all child classes in tc_bind_tclass() net: socionext: fix possible user-after-free in netsec_process_rx net: socionext: fix xdp_result initialization in netsec_process_rx udp: segment looped gso packets correctly mlxsw: minimal: Fix an error handling path in 'mlxsw_m_port_create()' net: include struct nhmsg size in nh nlmsg size rxrpc: Fix use-after-free in rxrpc_receive_data() HID: multitouch: Add LG MELF0410 I2C touchscreen support arc: eznps: fix allmodconfig kconfig warning HID: Add quirk for Xin-Mo Dual Controller HID: ite: Add USB id match for Acer SW5-012 keyboard dock HID: asus: Ignore Asus vendor-page usage-code 0xff events HID: Add quirk for incorrect input length on Lenovo Y720 HID: intel-ish-hid: ipc: add CMP device id HID: wacom: Recognize new MobileStudio Pro PID ASoC: SOF: fix fault at driver unload after failed probe ASoC: SOF: Intel: hda: hda-dai: fix oops on hda_link .hw_free drivers/hid/hid-multitouch.c: fix a possible null pointer access. phy: qcom-qmp: Increase PHY ready timeout ASoC: fsl_audmix: add missed pm_runtime_disable ASoC: topology: Prevent use-after-free in snd_soc_get_pcm_runtime() phy: cpcap-usb: Prevent USB line glitches from waking up modem HID: intel-ish-hid: ipc: Add Tiger Lake PCI device ID watchdog: max77620_wdt: fix potential build errors watchdog: rn5t618_wdt: fix module aliases watchdog: orion: fix platform_get_irq() complaints usb: musb: jz4740: Silence error if code is -EPROBE_DEFER can: tcan4x5x: tcan4x5x_parse_config(): reset device before register access spi: spi-dw: Add lock protect dw_spi rx/tx to prevent concurrent calls net: Google gve: Remove dma_wmb() before ringing doorbell drivers/net/b44: Change to non-atomic bit operations on pwol_mask net: wan: sdla: Fix cast from pointer to integer of different size gpio: max77620: Add missing dependency on GPIOLIB_IRQCHIP iommu/dma: fix variable 'cookie' set but not used drm/amd/display: Reduce HDMI pixel encoding if max clock is exceeded stmmac: debugfs entry name is not be changed when udev rename device name. atm: eni: fix uninitialized variable warning HID: steam: Fix input device disappearing extcon-intel-cht-wc: Don't reset USB data connection at probe ASoC: Intel: cht_bsw_rt5645: Add quirk for boards using pmc_plt_clk_0 drm/amdgpu/SRIOV: add navi12 pci id for SRIOV (v2) libbpf: Fix BTF-defined map's __type macro handling of arrays staging: mt7621-pci: add quirks for 'E2' revision using 'soc_device_attribute' platform/x86: dell-laptop: disable kbd backlight on Inspiron 10xx PCI: Add DMA alias quirk for Intel VCA NTB media: dvbsky: add support for eyeTV Geniatech T2 lite bus: ti-sysc: Handle mstandby quirk and use it for musb bus: ti-sysc: Use swsup quirks also for am335x musb spi: pxa2xx: Add support for Intel Comet Lake-H iommu/amd: Support multiple PCI DMA aliases in device table iommu/amd: Support multiple PCI DMA aliases in IRQ Remapping perf/imx_ddr: Add enhanced AXI ID filter support mfd: intel-lpss: Add Intel Comet Lake PCH-H PCI IDs ARM: config: aspeed-g5: Enable 8250_DW quirks ARM: OMAP2+: SmartReflex: add omap_sr_pdata definition mmc: sdhci-pci: Quirk for AMD SDHC Device 0x7906 mmc: sdhci-pci: Add support for Intel JSL bus: ti-sysc: Add module enable quirk for audio AESS usb-storage: Disable UAS on JMicron SATA enclosure ALSA: hda/realtek - Move some alc236 pintbls to fallback table Bluetooth: Allow combination of BDADDR_PROPERTY and INVALID_BDADDR quirks Bluetooth: btbcm: Use the BDADDR_PROPERTY quirk bus: ti-sysc: Fix missing force mstandby quirk handling rsi: fix use-after-free on failed probe and unbind rsi: fix use-after-free on probe errors rsi: fix memory leak on failed URB submission rsi: fix non-atomic allocation in completion handler crypto: af_alg - Use bh_lock_sock in sk_destruct crypto: vmx - reject xts inputs that are too short crypto: caam - do not reset pointer size from MCFGR register crypto: pcrypt - Fix user-after-free on module unload KVM: arm64: Write arch.mdcr_el2 changes since last vcpu_load on VHE Revert "um: Enable CONFIG_CONSTRUCTORS" power/supply: ingenic-battery: Don't change scale if there's only one Linux 5.4.17 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I03dc4a2a426ff7700c26560c294bcbfc66f26e38	2020-02-02 20:24:42 +00:00
Martin Fuzzey	7d46883724	binder: fix log spam for existing debugfs file creation. ... commit eb143f8756e77c8fcfc4d574922ae9efd3a43ca9 upstream. Since commit 43e23b6c0b ("debugfs: log errors when something goes wrong") debugfs logs attempts to create existing files. However binder attempts to create multiple debugfs files with the same name when a single PID has multiple contexts, this leads to log spamming during an Android boot (17 such messages during boot on my system). Fix this by checking if we already know the PID and only create the debugfs entry for the first context per PID. Do the same thing for binderfs for symmetry. Signed-off-by: Martin Fuzzey <martin.fuzzey@flowbird.group> Acked-by: Todd Kjos <tkjos@google.com> Fixes: 43e23b6c0b ("debugfs: log errors when something goes wrong") Cc: stable <stable@vger.kernel.org> Link: https://lore.kernel.org/r/1578671054-5982-1-git-send-email-martin.fuzzey@flowbird.group Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2020-02-01 09:34:35 +00:00
Greg Kroah-Hartman	7dc1159904	This is the 5.4.4 stable release ... -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAl35Ju4ACgkQONu9yGCS aT7IMQ//Vs+kE7VCDeHfzNu4ivh3+X0bleYWo/OPxNQRFx7IL4Lb2jVjWrMnAGld u8H31nVaL28bhJAcQJg+O/OD3AXWQ8nzRKixfVfwd669Zv1ggaLM8MW9xuTBwmQs ciFrQ4GirfjvUP0VdkpsSLp+bbi61nkqGB4WHgX3gL+8LWxtpE8nFlh+8P+3TT9Z h4BuYQHhGF8JyhOFKhfWbWAFUoHLsR7Aa7TPOeQPXGfzWBaSfISA/UVo6N7QGpVw 4DP5rc4Wb+tzNAJHkkgzbSDzuM6L6BHrO3SQCisd0Viw9XYO9M0U9NVbExtu9x9l M/sqE61cX1AxUmjstdgca37vyHCntJ+wMT7WRnOBVJfodZDjB/6wzPz8rWIZrSX+ +uXSJF8Xpp5FuvB0td0CQoyUsnrMDnwWbjnMnlVXY6mPcgD5fgB9dTDJN3FEQ8t6 MixN3JBy1KseY9ihe9cINaR0CBKqyogOwbGrqqw3XJNWzpJ5xgxhLuSc2PyuDLwZ bDaj7K9Ukx4n0QzXWvW5pZTQi+yNVc7DUVOKFDXTf2xR2/KvEVNW25gL7oBxrTTu q5gw4bBkO0KsbgofTMWUyUfO3aYhDqc7H4yfRRbc/Q08hiJHORFC2jhLXG9oubNN QrZ4AxJvzRSYl5vwrVpHW9vnlPe5SuJvRbkMN8164togc9BMNbc= =qUmE -----END PGP SIGNATURE----- Merge 5.4.4 into android-5.4 Changes in 5.4.4 usb: gadget: configfs: Fix missing spin_lock_init() usb: gadget: pch_udc: fix use after free nvme: Namepace identification descriptor list is optional Revert "nvme: Add quirk for Kingston NVME SSD running FW E8FK11.T" scsi: lpfc: Fix bad ndlp ptr in xri aborted handling scsi: zfcp: trace channel log even for FCP command responses scsi: qla2xxx: Do command completion on abort timeout scsi: qla2xxx: Fix driver unload hang scsi: qla2xxx: Fix double scsi_done for abort path scsi: qla2xxx: Fix memory leak when sending I/O fails compat_ioctl: add compat_ptr_ioctl() ceph: fix compat_ioctl for ceph_dir_operations media: venus: remove invalid compat_ioctl32 handler USB: uas: honor flag to avoid CAPACITY16 USB: uas: heed CAPACITY_HEURISTICS USB: documentation: flags on usb-storage versus UAS usb: Allow USB device to be warm reset in suspended state usb: host: xhci-tegra: Correct phy enable sequence binder: fix incorrect calculation for num_valid staging: exfat: fix multiple definition error of `rename_file' staging: rtl8188eu: fix interface sanity check staging: rtl8712: fix interface sanity check staging: vchiq: call unregister_chrdev_region() when driver registration fails staging: gigaset: fix general protection fault on probe staging: gigaset: fix illegal free on probe errors staging: gigaset: add endpoint-type sanity check usb: xhci: only set D3hot for pci device xhci: Fix memory leak in xhci_add_in_port() xhci: fix USB3 device initiated resume race with roothub autosuspend xhci: Increase STS_HALT timeout in xhci_suspend() xhci: handle some XHCI_TRUST_TX_LENGTH quirks cases as default behaviour. xhci: make sure interrupts are restored to correct state interconnect: qcom: sdm845: Walk the list safely on node removal interconnect: qcom: qcs404: Walk the list safely on node removal usb: common: usb-conn-gpio: Don't log an error on probe deferral ARM: dts: pandora-common: define wl1251 as child node of mmc3 iio: adis16480: Add debugfs_reg_access entry iio: imu: st_lsm6dsx: fix ODR check in st_lsm6dsx_write_raw iio: adis16480: Fix scales factors iio: humidity: hdc100x: fix IIO_HUMIDITYRELATIVE channel reporting iio: imu: inv_mpu6050: fix temperature reporting using bad unit iio: adc: ad7606: fix reading unnecessary data from device iio: adc: ad7124: Enable internal reference USB: atm: ueagle-atm: add missing endpoint check USB: idmouse: fix interface sanity checks USB: serial: io_edgeport: fix epic endpoint lookup usb: roles: fix a potential use after free USB: adutux: fix interface sanity check usb: core: urb: fix URB structure initialization function usb: mon: Fix a deadlock in usbmon between mmap and read tpm: add check after commands attribs tab allocation tpm: Switch to platform_get_irq_optional() EDAC/altera: Use fast register IO for S10 IRQs brcmfmac: disable PCIe interrupts before bus reset mtd: spear_smi: Fix Write Burst mode mtd: rawnand: Change calculating of position page containing BBM virt_wifi: fix use-after-free in virt_wifi_newlink() virtio-balloon: fix managed page counts when migrating pages between zones usb: dwc3: pci: add ID for the Intel Comet Lake -H variant usb: dwc3: gadget: Fix logical condition usb: dwc3: gadget: Clear started flag for non-IOC usb: dwc3: ep0: Clear started flag on completion phy: renesas: rcar-gen3-usb2: Fix sysfs interface of "role" usb: typec: fix use after free in typec_register_port() iwlwifi: pcie: fix support for transmitting SKBs with fraglist btrfs: check page->mapping when loading free space cache btrfs: use btrfs_block_group_cache_done in update_block_group btrfs: use refcount_inc_not_zero in kill_all_nodes Btrfs: fix metadata space leak on fixup worker failure to set range as delalloc Btrfs: fix negative subv_writers counter and data space leak after buffered write btrfs: Avoid getting stuck during cyclic writebacks btrfs: Remove btrfs_bio::flags member Btrfs: send, skip backreference walking for extents with many references btrfs: record all roots for rename exchange on a subvol rtlwifi: rtl8192de: Fix missing code to retrieve RX buffer address rtlwifi: rtl8192de: Fix missing callback that tests for hw release of buffer rtlwifi: rtl8192de: Fix missing enable interrupt flag lib: raid6: fix awk build warnings ovl: fix lookup failure on multi lower squashfs ovl: fix corner case of non-unique st_dev;st_ino ovl: relax WARN_ON() on rename to self hwrng: omap - Fix RNG wait loop timeout dm writecache: handle REQ_FUA dm zoned: reduce overhead of backing device checks workqueue: Fix spurious sanity check failures in destroy_workqueue() workqueue: Fix pwq ref leak in rescuer_thread() ASoC: rt5645: Fixed buddy jack support. ASoC: rt5645: Fixed typo for buddy jack support. ASoC: Jack: Fix NULL pointer dereference in snd_soc_jack_report ASoC: fsl_audmix: Add spin lock to protect tdms md: improve handling of bio with REQ_PREFLUSH in md_flush_request() blk-mq: avoid sysfs buffer overflow with too many CPU cores cgroup: pids: use atomic64_t for pids->limit wil6210: check len before memcpy() calls ar5523: check NULL before memcpy() in ar5523_cmd() s390/mm: properly clear _PAGE_NOEXEC bit when it is not supported media: hantro: Fix s_fmt for dynamic resolution changes media: hantro: Fix motion vectors usage condition media: hantro: Fix picture order count table enable media: vimc: sen: remove unused kthread_sen field media: bdisp: fix memleak on release media: radio: wl1273: fix interrupt masking on release media: cec.h: CEC_OP_REC_FLAG_ values were swapped cpuidle: Do not unset the driver if it is there already cpuidle: teo: Ignore disabled idle states that are too deep cpuidle: teo: Rename local variable in teo_select() cpuidle: teo: Consider hits and misses metrics of disabled states cpuidle: teo: Fix "early hits" handling for disabled idle states cpuidle: use first valid target residency as poll time erofs: zero out when listxattr is called with no xattr perf tests: Fix out of bounds memory access drm/panfrost: Open/close the perfcnt BO powerpc/perf: Disable trace_imc pmu intel_th: Fix a double put_device() in error path intel_th: pci: Add Ice Lake CPU support intel_th: pci: Add Tiger Lake CPU support PM / devfreq: Lock devfreq in trans_stat_show cpufreq: powernv: fix stack bloat and hard limit on number of CPUs ALSA: fireface: fix return value in error path of isochronous resources reservation ALSA: oxfw: fix return value in error path of isochronous resources reservation ALSA: hda/realtek - Line-out jack doesn't work on a Dell AIO ACPI / utils: Move acpi_dev_get_first_match_dev() under CONFIG_ACPI ACPI: LPSS: Add LNXVIDEO -> BYT I2C7 to lpss_device_links ACPI: LPSS: Add LNXVIDEO -> BYT I2C1 to lpss_device_links ACPI: LPSS: Add dmi quirk for skipping _DEP check for some device-links ACPI / hotplug / PCI: Allocate resources directly under the non-hotplug bridge ACPI: OSL: only free map once in osl.c ACPI: bus: Fix NULL pointer check in acpi_bus_get_private_data() ACPI: EC: Rework flushing of pending work ACPI: PM: Avoid attaching ACPI PM domain to certain devices pinctrl: rza2: Fix gpio name typos pinctrl: armada-37xx: Fix irq mask access in armada_37xx_irq_set_type() pinctrl: samsung: Add of_node_put() before return in error path pinctrl: samsung: Fix device node refcount leaks in Exynos wakeup controller init pinctrl: samsung: Fix device node refcount leaks in S3C24xx wakeup controller init pinctrl: samsung: Fix device node refcount leaks in init code pinctrl: samsung: Fix device node refcount leaks in S3C64xx wakeup controller init mmc: host: omap_hsmmc: add code for special init of wl1251 to get rid of pandora_wl1251_init_card ARM: dts: omap3-tao3530: Fix incorrect MMC card detection GPIO polarity RDMA/core: Fix ib_dma_max_seg_size() ppdev: fix PPGETTIME/PPSETTIME ioctls stm class: Lose the protocol driver when dropping its reference coresight: Serialize enabling/disabling a link device. powerpc: Allow 64bit VDSO __kernel_sync_dicache to work across ranges >4GB powerpc/xive: Prevent page fault issues in the machine crash handler powerpc: Allow flush_icache_range to work across ranges >4GB powerpc/xive: Skip ioremap() of ESB pages for LSI interrupts video/hdmi: Fix AVI bar unpack quota: Check that quota is not dirty before release ext2: check err when partial != NULL seccomp: avoid overflow in implicit constant conversion quota: fix livelock in dquot_writeback_dquots ext4: Fix credit estimate for final inode freeing reiserfs: fix extended attributes on the root directory scsi: qla2xxx: Fix SRB leak on switch command timeout scsi: qla2xxx: Fix a dma_pool_free() call Revert "scsi: qla2xxx: Fix memory leak when sending I/O fails" iio: ad7949: kill pointless "readback"-handling code iio: ad7949: fix channels mixups omap: pdata-quirks: revert pandora specific gpiod additions omap: pdata-quirks: remove openpandora quirks for mmc3 and wl1251 powerpc: Avoid clang warnings around setjmp and longjmp powerpc: Fix vDSO clock_getres() mm, memfd: fix COW issue on MAP_PRIVATE and F_SEAL_FUTURE_WRITE mappings mfd: rk808: Fix RK818 ID template mm: memcg/slab: wait for !root kmem_cache refcnt killing on root kmem_cache destruction ext4: work around deleting a file with i_nlink == 0 safely firmware: qcom: scm: Ensure 'a0' status code is treated as signed s390/smp,vdso: fix ASCE handling s390/kaslr: store KASLR offset for early dumps mm/shmem.c: cast the type of unmap_start to u64 powerpc: Define arch_is_kernel_initmem_freed() for lockdep USB: dummy-hcd: increase max number of devices to 32 rtc: disable uie before setting time and enable after splice: only read in as much information as there is pipe buffer space ext4: fix a bug in ext4_wait_for_tail_page_commit ext4: fix leak of quota reservations blk-mq: make sure that line break can be printed workqueue: Fix missing kfree(rescuer) in destroy_workqueue() r8169: fix rtl_hw_jumbo_disable for RTL8168evl EDAC/ghes: Do not warn when incrementing refcount on 0 Linux 5.4.4 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I8949a5fb2fbd836ce34907e70906e3aeb8a58b7c	2019-12-17 20:10:28 +01:00
Todd Kjos	34d8a89fe1	binder: fix incorrect calculation for num_valid ... commit 16981742717b04644a41052570fb502682a315d2 upstream. For BINDER_TYPE_PTR and BINDER_TYPE_FDA transactions, the num_valid local was calculated incorrectly causing the range check in binder_validate_ptr() to miss out-of-bounds offsets. Fixes: bde4a19fc0 ("binder: use userspace pointer as base of buffer space") Signed-off-by: Todd Kjos <tkjos@google.com> Cc: stable <stable@vger.kernel.org> Link: https://lore.kernel.org/r/20191213202531.55010-1-tkjos@google.com Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2019-12-17 19:55:33 +01:00
Greg Kroah-Hartman	7e59225e4e	This is the 5.4.3 stable release ... -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAl3zQekACgkQONu9yGCS aT4v0xAAi39hk/9NMVQkOVJEAw7KtrqaidZ21c8DIZKwEEdmh5cgVTKjuF+PggXR VrSPSMuvCK9Xp4p4ZUPNr6WFYATxfUINZFvRc5gh1c9XtHrxjlWX9oi4XQ4a3zWC 56Ak17gCt42eWcArHUslPQLFnq3XBDARs7qK8gv+6Vxt8w/3EaPkm4MKB8nGkdnK ItfkxGWnkKyUnwsE/01p1iR+LrbxnALXS+OM1izWBBA6ex2Zl6QDmmwZXXgKHOVt RAdO04t8k9jKrydo43DF/icUrYZuLbpIHaKIV6T0YH1Hco5qTZAz5+REmZelcEDH /vBNVxTVma5vAdYQsztEITv+qKNEkM2i+xoSoGierE8EPbRqo/ed3tDNdNxTmMcq zku+yztWm5VGicSbsGKRElwXt8+eyduIyEHyGKt5AON7n0NRDBmGl+HCnEU7Agoy XKJ+aDHjWK4AAYZL9osZ0MQ3QF55Dpaylijjnihc9VlMTVOTDY49MD8XSfoj0VFq pOdH7NWNDvh5eJfd+DQQHMtlMxN2dMppRlclh/ecXZ+2r6oKB/E11D9lzCguFZtQ HR1vDHl6HpnP08MXn++AZj0/hCx+zS/GzXJccGqjP5GWH10BAA+Kfig+ooo/t9We SJc8WcySU+0lmJN8yegcEintDyv/HkPQzJApRw3P0iL0t8oN8Ac= =8yzT -----END PGP SIGNATURE----- Merge 5.4.3 into android-5.4 Changes in 5.4.3 rsi: release skb if rsi_prepare_beacon fails arm64: tegra: Fix 'active-low' warning for Jetson TX1 regulator arm64: tegra: Fix 'active-low' warning for Jetson Xavier regulator perf scripts python: exported-sql-viewer.py: Fix use of TRUE with SQLite sparc64: implement ioremap_uc lp: fix sparc64 LPSETTIMEOUT ioctl time: Zero the upper 32-bits in __kernel_timespec on 32-bit mailbox: tegra: Fix superfluous IRQ error message staging/octeon: Use stubs for MIPS && !CAVIUM_OCTEON_SOC usb: gadget: u_serial: add missing port entry locking serial: 8250-mtk: Use platform_get_irq_optional() for optional irq tty: serial: fsl_lpuart: use the sg count from dma_map_sg tty: serial: msm_serial: Fix flow control serial: pl011: Fix DMA ->flush_buffer() serial: serial_core: Perform NULL checks for break_ctl ops serial: stm32: fix clearing interrupt error flags serial: 8250_dw: Avoid double error messaging when IRQ absent serial: ifx6x60: add missed pm_runtime_disable mwifiex: Re-work support for SDIO HW reset io_uring: fix dead-hung for non-iter fixed rw io_uring: transform send/recvmsg() -ERESTARTSYS to -EINTR fuse: fix leak of fuse_io_priv fuse: verify nlink fuse: verify write return fuse: verify attributes io_uring: fix missing kmap() declaration on powerpc io_uring: ensure req->submit is copied when req is deferred SUNRPC: Avoid RPC delays when exiting suspend ALSA: hda/realtek - Enable internal speaker of ASUS UX431FLC ALSA: hda/realtek - Enable the headset-mic on a Xiaomi's laptop ALSA: hda/realtek - Dell headphone has noise on unmute for ALC236 ALSA: hda/realtek - Fix inverted bass GPIO pin on Acer 8951G ALSA: pcm: oss: Avoid potential buffer overflows ALSA: hda - Add mute led support for HP ProBook 645 G4 ALSA: hda: Modify stream stripe mask only when needed soc: mediatek: cmdq: fixup wrong input order of write api Input: synaptics - switch another X1 Carbon 6 to RMI/SMbus Input: synaptics-rmi4 - re-enable IRQs in f34v7_do_reflash Input: synaptics-rmi4 - don't increment rmiaddr for SMBus transfers Input: goodix - add upside-down quirk for Teclast X89 tablet coresight: etm4x: Fix input validation for sysfs. Input: Fix memory leak in psxpad_spi_probe media: rc: mark input device as pointing stick x86/mm/32: Sync only to VMALLOC_END in vmalloc_sync_all() x86/PCI: Avoid AMD FCH XHCI USB PME# from D0 defect CIFS: Fix NULL-pointer dereference in smb2_push_mandatory_locks CIFS: Fix SMB2 oplock break processing tty: vt: keyboard: reject invalid keycodes can: slcan: Fix use-after-free Read in slcan_open nfsd: Ensure CLONE persists data and metadata changes to the target file nfsd: restore NFSv3 ACL support kernfs: fix ino wrap-around detection jbd2: Fix possible overflow in jbd2_log_space_left() drm/msm: fix memleak on release drm: damage_helper: Fix race checking plane->state->fb drm/i810: Prevent underflow in ioctl arm64: Validate tagged addresses in access_ok() called from kernel threads arm64: dts: exynos: Revert "Remove unneeded address space mapping for soc node" KVM: PPC: Book3S HV: XIVE: Free previous EQ page when setting up a new one KVM: PPC: Book3S HV: XIVE: Fix potential page leak on error path KVM: PPC: Book3S HV: XIVE: Set kvm->arch.xive when VPs are allocated KVM: nVMX: Always write vmcs02.GUEST_CR3 during nested VM-Enter KVM: arm/arm64: vgic: Don't rely on the wrong pending table KVM: x86: do not modify masked bits of shared MSRs KVM: x86: fix presentation of TSX feature in ARCH_CAPABILITIES KVM: x86: Remove a spurious export of a static function KVM: x86: Grab KVM's srcu lock when setting nested state crypto: crypto4xx - fix double-free in crypto4xx_destroy_sdr crypto: atmel-aes - Fix IV handling when req->nbytes < ivsize crypto: af_alg - cast ki_complete ternary op to int crypto: geode-aes - switch to skcipher for cbc(aes) fallback crypto: ccp - fix uninitialized list head crypto: ecdh - fix big endian bug in ECC library crypto: user - fix memory leak in crypto_report crypto: user - fix memory leak in crypto_reportstat spi: spi-fsl-qspi: Clear TDH bits in FLSHCR register spi: stm32-qspi: Fix kernel oops when unbinding driver spi: atmel: Fix CS high support spi: Fix SPI_CS_HIGH setting when using native and GPIO CS spi: Fix NULL pointer when setting SPI_CS_HIGH for GPIO CS can: ucan: fix non-atomic allocation in completion handler RDMA/qib: Validate ->show()/store() callbacks before calling them rfkill: allocate static minor bdev: Factor out bdev revalidation into a common helper bdev: Refresh bdev size for disks without partitioning iomap: Fix pipe page leakage during splicing thermal: Fix deadlock in thermal thermal_zone_device_check vcs: prevent write access to vcsu devices Revert "serial/8250: Add support for NI-Serial PXI/PXIe+485 devices" binder: Fix race between mmap() and binder_alloc_print_pages() binder: Prevent repeated use of ->mmap() via NULL mapping binder: Handle start==NULL in binder_update_page_range() KVM: x86: fix out-of-bounds write in KVM_GET_EMULATED_CPUID (CVE-2019-19332) ALSA: hda - Fix pending unsol events at shutdown cpufreq: imx-cpufreq-dt: Correct i.MX8MN's default speed grade value md/raid0: Fix an error message in raid0_make_request() drm/mcde: Fix an error handling path in 'mcde_probe()' watchdog: aspeed: Fix clock behaviour for ast2600 EDAC/ghes: Fix locking and memory barrier issues perf script: Fix invalid LBR/binary mismatch error kselftest: Fix NULL INSTALL_PATH for TARGETS runlist Linux 5.4.3 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I4dabe2d29ae191e3c99ade22b1c385f68b5a77d4	2019-12-13 17:03:53 +01:00
Jann Horn	e8f669921e	binder: Handle start==NULL in binder_update_page_range() ... commit 2a9edd056ed4fbf9d2e797c3fc06335af35bccc4 upstream. The old loop wouldn't stop when reaching `start` if `start==NULL`, instead continuing backwards to index -1 and crashing. Luckily you need to be highly privileged to map things at NULL, so it's not a big problem. Fix it by adjusting the loop so that the loop variable is always in bounds. This patch is deliberately minimal to simplify backporting, but IMO this function could use a refactor. The jump labels in the second loop body are horrible (the error gotos should be jumping to free_range instead), and both loops would look nicer if they just iterated upwards through indices. And the up_read()+mmput() shouldn't be duplicated like that. Cc: stable@vger.kernel.org Fixes: 457b9a6f09 ("Staging: android: add binder driver") Signed-off-by: Jann Horn <jannh@google.com> Acked-by: Christian Brauner <christian.brauner@ubuntu.com> Link: https://lore.kernel.org/r/20191018205631.248274-3-jannh@google.com Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2019-12-13 08:43:25 +01:00
Jann Horn	015c08bc70	binder: Prevent repeated use of ->mmap() via NULL mapping ... commit a7a74d7ff55a0c657bc46238b050460b9eacea95 upstream. binder_alloc_mmap_handler() attempts to detect the use of ->mmap() on a binder_proc whose binder_alloc has already been initialized by checking whether alloc->buffer is non-zero. Before commit 880211667b ("binder: remove kernel vm_area for buffer space"), alloc->buffer was a kernel mapping address, which is always non-zero, but since that commit, it is a userspace mapping address. A sufficiently privileged user can map /dev/binder at NULL, tricking binder_alloc_mmap_handler() into assuming that the binder_proc has not been mapped yet. This leads to memory unsafety. Luckily, no context on Android has such privileges, and on a typical Linux desktop system, you need to be root to do that. Fix it by using the mapping size instead of the mapping address to distinguish the mapped case. A valid VMA can't have size zero. Fixes: 880211667b ("binder: remove kernel vm_area for buffer space") Cc: stable@vger.kernel.org Signed-off-by: Jann Horn <jannh@google.com> Acked-by: Christian Brauner <christian.brauner@ubuntu.com> Link: https://lore.kernel.org/r/20191018205631.248274-2-jannh@google.com Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2019-12-13 08:43:25 +01:00
Jann Horn	6e0efd9e9e	binder: Fix race between mmap() and binder_alloc_print_pages() ... commit 8eb52a1ee37aafd9b796713aa0b3ab9cbc455be3 upstream. binder_alloc_print_pages() iterates over alloc->pages[0..alloc->buffer_size-1] under alloc->mutex. binder_alloc_mmap_handler() writes alloc->pages and alloc->buffer_size without holding that lock, and even writes them before the last bailout point. Unfortunately we can't take the alloc->mutex in the ->mmap() handler because mmap_sem can be taken while alloc->mutex is held. So instead, we have to locklessly check whether the binder_alloc has been fully initialized with binder_alloc_get_vma(), like in binder_alloc_new_buf_locked(). Fixes: 8ef4665aa1 ("android: binder: Add page usage in binder stats") Cc: stable@vger.kernel.org Signed-off-by: Jann Horn <jannh@google.com> Acked-by: Christian Brauner <christian.brauner@ubuntu.com> Link: https://lore.kernel.org/r/20191018205631.248274-1-jannh@google.com Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2019-12-13 08:43:23 +01:00
Todd Kjos	aefd2d632e	ANDROID: binder: fix sleeping from invalid function caused by RT inheritance ... When changing a thread's scheduling priority, binder calls sched_setscheduler_nocheck() while holding the node lock and proc inner lock. This was safe until v5.3 when a change was introduced where cpuset_read_lock() is called in this path which can sleep: commit 710da3c8ea ("sched/core: Prevent race condition between cpuset and __sched_setscheduler()"). Refactored binder_proc_transaction() to avoid holding a lock when calling binder_transaction_priority(). Bug: 143627611 Change-Id: I405c76b4813777905090ccc33e4f048b37700068 Fixes: e00eb41c0c ("ANDROID: binder: add support for RT prio inheritance.") Signed-off-by: Todd Kjos <tkjos@google.com>	2019-11-04 16:53:27 +00:00
Greg Kroah-Hartman	444da424c1	Linux 5.4-rc5 ... -----BEGIN PGP SIGNATURE----- iQFSBAABCAA8FiEEq68RxlopcLEwq+PEeb4+QwBBGIYFAl210Z8eHHRvcnZhbGRz QGxpbnV4LWZvdW5kYXRpb24ub3JnAAoJEHm+PkMAQRiGv+kIAKRpO7EuDokQL4qp hxEEaCMJA1T055EMlNU6FVAq/ZbmapzreUyNYiRMpPWKGTWNMkhIcZQfysYeGZz5 y/KRxAiVxlcB+3v3yRmoZd/XoQmhgvJmqD4zhaGI2Utonow4f/SGSEFFZqqs9WND 4HJROjZHgQ4JBxg9Z+QMo0FxbV/DCZpEOUq51N9WJywyyDRb18zotE83stpU+pE2 fjqT7mk0NLrnYXuDRAbFC1Aau9ed4H6LlwLmxaqxq/Pt5Rz7wIKwKL9HIT4Dm/0a qpani6phhHWL7MwUpa2wkEonFCD03rJFl3DUVJo64Ijh4up5D/jyXQ+GKV2P4WKJ 275Rb5Q= =WiZZ -----END PGP SIGNATURE----- Merge 5.4-rc5 into android-common Linux 5.4-rc5 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: Ib61881c64a2725c6229c26d2ce63f107b7215c47	2019-10-28 13:11:46 +01:00
Jann Horn	45d02f79b5	binder: Don't modify VMA bounds in ->mmap handler ... binder_mmap() tries to prevent the creation of overly big binder mappings by silently truncating the size of the VMA to 4MiB. However, this violates the API contract of mmap(). If userspace attempts to create a large binder VMA, and later attempts to unmap that VMA, it will call munmap() on a range beyond the end of the VMA, which may have been allocated to another VMA in the meantime. This can lead to userspace memory corruption. The following sequence of calls leads to a segfault without this commit: int main(void) { int binder_fd = open("/dev/binder", O_RDWR); if (binder_fd == -1) err(1, "open binder"); void *binder_mapping = mmap(NULL, 0x800000UL, PROT_READ, MAP_SHARED, binder_fd, 0); if (binder_mapping == MAP_FAILED) err(1, "mmap binder"); void *data_mapping = mmap(NULL, 0x400000UL, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0); if (data_mapping == MAP_FAILED) err(1, "mmap data"); munmap(binder_mapping, 0x800000UL); *(char*)data_mapping = 1; return 0; } Cc: stable@vger.kernel.org Signed-off-by: Jann Horn <jannh@google.com> Acked-by: Todd Kjos <tkjos@google.com> Acked-by: Christian Brauner <christian.brauner@ubuntu.com> Link: https://lore.kernel.org/r/20191016150119.154756-1-jannh@google.com Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2019-10-17 05:58:44 -07:00
Greg Kroah-Hartman	630839ac24	Linux 5.4-rc3 ... -----BEGIN PGP SIGNATURE----- iQFSBAABCAA8FiEEq68RxlopcLEwq+PEeb4+QwBBGIYFAl2jtUYeHHRvcnZhbGRz QGxpbnV4LWZvdW5kYXRpb24ub3JnAAoJEHm+PkMAQRiGL28H/Akb3JEXNKHCv3MI 89dzKlLgf/W/e0qJirb9/YdcUL462NUFoC0Bg0qLgLFYdhT94Zp5J68C4oZPJfxA /LrTDsHWrbUtTvhxJqMueVT3JTpkF36ZTvTGwLTHzTqexM/o3kuDWjWTTxZlMGbX Uais/ywmmCVCmaX8IJ3GJFGCJse+T1W73VOSo7bm6C+Ruy6Euwasa9kc40uHiPpD 6Xew9j9AJ0xIV96sLzDFOYAXYFQBZnAbFLA+Ho53TiuG78J6MP4Pm9+1VhMyF1uH mgeA5GAfKpqq/QXf32iMU7s7HTdoF5r1UaQJtu+p6BFTGhd7LrDrh4gA/9Wyv7+t 9stS20U= =ima3 -----END PGP SIGNATURE----- Merge 5.4-rc3 into android-mainline Linux 5.4-rc3 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: Ia87ba662738dd58ddb917e32c1fbd812861e7a46	2019-10-17 05:28:13 -07:00
Joel Fernandes (Google)	5dc54a06f6	binder: Fix comment headers on binder_alloc_prepare_to_free() ... binder_alloc_buffer_lookup() doesn't exist and is named "binder_alloc_prepare_to_free()". Correct the code comments to reflect this. Signed-off-by: Joel Fernandes (Google) <joel@joelfernandes.org> Reviewed-by: Christian Brauner <christian.brauner@ubuntu.com> Link: https://lore.kernel.org/r/20190930201250.139554-1-joel@joelfernandes.org Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2019-10-10 14:39:23 +02:00
Christian Brauner	51d8a7eca6	binder: prevent UAF read in print_binder_transaction_log_entry() ... When a binder transaction is initiated on a binder device coming from a binderfs instance, a pointer to the name of the binder device is stashed in the binder_transaction_log_entry's context_name member. Later on it is used to print the name in print_binder_transaction_log_entry(). By the time print_binder_transaction_log_entry() accesses context_name binderfs_evict_inode() might have already freed the associated memory thereby causing a UAF. Do the simple thing and prevent this by copying the name of the binder device instead of stashing a pointer to it. Reported-by: Jann Horn <jannh@google.com> Fixes: 03e2e07e38 ("binder: Make transaction_log available in binderfs") Link: https://lore.kernel.org/r/CAG48ez14Q0-F8LqsvcNbyR2o6gPW8SHXsm4u5jmD9MpsteM2Tw@mail.gmail.com Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com> Reviewed-by: Joel Fernandes (Google) <joel@joelfernandes.org> Acked-by: Todd Kjos <tkjos@google.com> Reviewed-by: Hridya Valsaraju <hridya@google.com> Link: https://lore.kernel.org/r/20191008130159.10161-1-christian.brauner@ubuntu.com Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2019-10-10 14:39:22 +02:00
Greg Kroah-Hartman	bfa0399bc8	Merge Linus's 5.4-rc1-prerelease branch into android-mainline ... This merges Linus's tree as of commit b41dae061b ("Merge tag 'xfs-5.4-merge-7' of git://git.kernel.org/pub/scm/fs/xfs/xfs-linux") into android-mainline. This "early" merge makes it easier to test and handle merge conflicts instead of having to wait until the "end" of the merge window and handle all 10000+ commits at once. Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I6bebf55e5e2353f814e3c87f5033607b1ae5d812	2019-09-20 16:07:54 -07:00
Hridya Valsaraju	4feb80faf4	binder: Add binder_proc logging to binderfs ... Currently /sys/kernel/debug/binder/proc contains the debug data for every binder_proc instance. This patch makes this information also available in a binderfs instance mounted with a mount option "stats=global" in addition to debugfs. The patch does not affect the presence of the file in debugfs. If a binderfs instance is mounted at path /dev/binderfs, this file would be present at /dev/binderfs/binder_logs/proc. This change provides an alternate way to access this file when debugfs is not mounted. Acked-by: Christian Brauner <christian.brauner@ubuntu.com> Signed-off-by: Hridya Valsaraju <hridya@google.com> Link: https://lore.kernel.org/r/20190903161655.107408-5-hridya@google.com Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2019-09-04 13:31:26 +02:00
Hridya Valsaraju	03e2e07e38	binder: Make transaction_log available in binderfs ... Currently, the binder transaction log files 'transaction_log' and 'failed_transaction_log' live in debugfs at the following locations: /sys/kernel/debug/binder/failed_transaction_log /sys/kernel/debug/binder/transaction_log This patch makes these files also available in a binderfs instance mounted with the mount option "stats=global". It does not affect the presence of these files in debugfs. If a binderfs instance is mounted at path /dev/binderfs, the location of these files will be as follows: /dev/binderfs/binder_logs/failed_transaction_log /dev/binderfs/binder_logs/transaction_log This change provides an alternate option to access these files when debugfs is not mounted. Acked-by: Christian Brauner <christian.brauner@ubuntu.com> Signed-off-by: Hridya Valsaraju <hridya@google.com> Link: https://lore.kernel.org/r/20190903161655.107408-4-hridya@google.com Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2019-09-04 13:31:22 +02:00
Hridya Valsaraju	0e13e452da	binder: Add stats, state and transactions files ... The following binder stat files currently live in debugfs. /sys/kernel/debug/binder/state /sys/kernel/debug/binder/stats /sys/kernel/debug/binder/transactions This patch makes these files available in a binderfs instance mounted with the mount option 'stats=global'. For example, if a binderfs instance is mounted at path /dev/binderfs, the above files will be available at the following locations: /dev/binderfs/binder_logs/state /dev/binderfs/binder_logs/stats /dev/binderfs/binder_logs/transactions This provides a way to access them even when debugfs is not mounted. Acked-by: Christian Brauner <christian.brauner@ubuntu.com> Signed-off-by: Hridya Valsaraju <hridya@google.com> Acked-by: Christian Brauner <christian.brauner@ubuntu.com> Link: https://lore.kernel.org/r/20190903161655.107408-3-hridya@google.com Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2019-09-04 13:31:18 +02:00
Hridya Valsaraju	f00834518e	binder: add a mount option to show global stats ... Currently, all binder state and statistics live in debugfs. We need this information even when debugfs is not mounted. This patch adds the mount option 'stats' to enable a binderfs instance to have binder debug information present in the same. 'stats=global' will enable the global binder statistics. In the future, 'stats=local' will enable binder statistics local to the binderfs instance. The two modes 'global' and 'local' will be mutually exclusive. 'stats=global' option is only available for a binderfs instance mounted in the initial user namespace. An attempt to use the option to mount a binderfs instance in another user namespace will return an EPERM error. Signed-off-by: Hridya Valsaraju <hridya@google.com> Acked-by: Christian Brauner <christian.brauner@ubuntu.com> Link: https://lore.kernel.org/r/20190903161655.107408-2-hridya@google.com Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2019-09-04 13:31:13 +02:00
Hridya Valsaraju	ca2864c6e8	binder: Add default binder devices through binderfs when configured ... Currently, since each binderfs instance needs its own private binder devices, every time a binderfs instance is mounted, all the default binder devices need to be created via the BINDER_CTL_ADD IOCTL. This patch aims to add a solution to automatically create the default binder devices for each binderfs instance that gets mounted. To achieve this goal, when CONFIG_ANDROID_BINDERFS is set, the default binder devices specified by CONFIG_ANDROID_BINDER_DEVICES are created in each binderfs instance instead of global devices being created by the binder driver. Co-developed-by: Christian Brauner <christian.brauner@ubuntu.com> Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com> Signed-off-by: Hridya Valsaraju <hridya@google.com> Reviewed-by: Joel Fernandes (Google) <joel@joelfernandes.org> Link: https://lore.kernel.org/r/20190808222727.132744-2-hridya@google.com Link: https://lore.kernel.org/r/20190904110704.8606-2-christian.brauner@ubuntu.com Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2019-09-04 13:17:35 +02:00
Hridya Valsaraju	028fb5822b	binder: Validate the default binderfs device names. ... Length of a binderfs device name cannot exceed BINDERFS_MAX_NAME. This patch adds a check in binderfs_init() to ensure the same for the default binder devices that will be created in every binderfs instance. Co-developed-by: Christian Brauner <christian.brauner@ubuntu.com> Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com> Signed-off-by: Hridya Valsaraju <hridya@google.com> Reviewed-by: Joel Fernandes (Google) <joel@joelfernandes.org> Link: https://lore.kernel.org/r/20190808222727.132744-3-hridya@google.com Link: https://lore.kernel.org/r/20190904110704.8606-3-christian.brauner@ubuntu.com Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2019-09-04 13:17:35 +02:00
Greg Kroah-Hartman	bea0791583	Linux 5.3-rc2 ... -----BEGIN PGP SIGNATURE----- iQFSBAABCAA8FiEEq68RxlopcLEwq+PEeb4+QwBBGIYFAl09+8IeHHRvcnZhbGRz QGxpbnV4LWZvdW5kYXRpb24ub3JnAAoJEHm+PkMAQRiGMtgH/3yxnVbzgPatWSd9 w5ahpB+nQ2sludZQXcqmychDsNoGlhxmSxxufxUJ6OL7/lOnfjb4Bc3icNltVlCk s32YyOH7Z/f+zGBE2IkCUK0ttr5bDdENmwJUOjoB39KsPXNK1y46x83QLeorKvBA kOyPtjhgy0nL2UaiM0HKuzMoypslKqwaw4ptXzHQBUkib+WdxVGYLQrTjflkpUMl 71EYwNnVgKwYRuvnMATB5bSgQCASInuF5eHJv9N7XbnBjJ9yVZNARvWW1sX4gNVe vCET+mCRWsMD80Sdnt9RJ8Nt2AEf0dgk2fAVwKqX58vuMIXlD27dayIYkVmJojE0 YuAvnAU= =X832 -----END PGP SIGNATURE----- Merge 5.3-rc2 into android-mainline Linux 5.3-rc2 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I4d36fd27ccc8cd773ba1b97dc3bd382e99a4dd7a	2019-07-29 08:40:17 +02:00
Hridya Valsaraju	49ed96943a	binder: prevent transactions to context manager from its own process. ... Currently, a transaction to context manager from its own process is prevented by checking if its binder_proc struct is the same as that of the sender. However, this would not catch cases where the process opens the binder device again and uses the new fd to send a transaction to the context manager. Reported-by: syzbot+8b3c354d33c4ac78bfad@syzkaller.appspotmail.com Signed-off-by: Hridya Valsaraju <hridya@google.com> Acked-by: Todd Kjos <tkjos@google.com> Cc: stable <stable@vger.kernel.org> Link: https://lore.kernel.org/r/20190715191804.112933-1-hridya@google.com Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2019-07-24 11:02:28 +02:00
Martijn Coenen	a565870650	binder: Set end of SG buffer area properly. ... In case the target node requests a security context, the extra_buffers_size is increased with the size of the security context. But, that size is not available for use by regular scatter-gather buffers; make sure the ending of that buffer is marked correctly. Acked-by: Todd Kjos <tkjos@google.com> Fixes: ec74136ded ("binder: create node flag to request sender's security context") Signed-off-by: Martijn Coenen <maco@android.com> Cc: stable@vger.kernel.org # 5.1+ Link: https://lore.kernel.org/r/20190709110923.220736-1-maco@android.com Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2019-07-24 11:02:10 +02:00
Greg Kroah-Hartman	37766c2946	Linus 5.3-rc1 ... -----BEGIN PGP SIGNATURE----- iQFSBAABCAA8FiEEq68RxlopcLEwq+PEeb4+QwBBGIYFAl0006weHHRvcnZhbGRz QGxpbnV4LWZvdW5kYXRpb24ub3JnAAoJEHm+PkMAQRiGaDUIAJ4oTyVWpMRZkfG6 vVY8qVMU3zlzEqRiyLYjkXoe/mGpuU/UVTyyStllxZ+Gg9da0mGwlugScKriPJof 4KRUDDTGX5DrfEOo+0brKvM+PYh9uGViPgKXzyv7i6BrnX2z3JdBR4bKNuEYlAJ9 N93Qg7v05SBHIq2Gfp3klrdWbsTTW2EaDTLbcgifXLnfKyFr47kwsmXAHPlTFP0p dYsZHHmf14Y9n1+ToZeVINgjQFr6mFn6ygY/PqTnd6vCgEEfP9eENJ4BZCtN1ZL/ V0BO9MyJ5iZV0AfwSEKydk+kDEvO16TG/nyDrECVuur7AXsBx18ZplVc787f6GK+ dyCQJ3U= =XLAF -----END PGP SIGNATURE----- Merge 5.3.0-rc1 into android-mainline Linus 5.3-rc1 release Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: Ic171e37d4c21ffa495240c5538852bbb5a9dcce8	2019-07-23 16:21:59 -07:00
Todd Kjos	bb4a2e48d5	binder: return errors from buffer copy functions ... The buffer copy functions assumed the caller would ensure correct alignment and that the memory to be copied was completely within the binder buffer. There have been a few cases discovered by syzkallar where a malformed transaction created by a user could violated the assumptions and resulted in a BUG_ON. The fix is to remove the BUG_ON and always return the error to be handled appropriately by the caller. Acked-by: Martijn Coenen <maco@android.com> Reported-by: syzbot+3ae18325f96190606754@syzkaller.appspotmail.com Fixes: bde4a19fc0 ("binder: use userspace pointer as base of buffer space") Suggested-by: Dan Carpenter <dan.carpenter@oracle.com> Signed-off-by: Todd Kjos <tkjos@google.com> Cc: stable <stable@vger.kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2019-07-01 08:42:47 +02:00
Greg Kroah-Hartman	8083f3d788	Merge 5.2-rc6 into char-misc-next ... We need the char-misc fixes in here as well. Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2019-06-23 09:23:33 +02:00
Greg Kroah-Hartman	9a7ed8b83e	Linux 5.2-rc6 ... -----BEGIN PGP SIGNATURE----- iQFSBAABCAA8FiEEq68RxlopcLEwq+PEeb4+QwBBGIYFAl0Os1seHHRvcnZhbGRz QGxpbnV4LWZvdW5kYXRpb24ub3JnAAoJEHm+PkMAQRiGtx4H/j6i482XzcGFKTBm A7mBoQpy+kLtoUov4EtBAR62OuwI8rsahW9di37QKndPoQrczWaKBmr3De6LCdPe v3pl3O6wBbvH5ru+qBPFX9PdNbDvimEChh7LHxmMxNQq3M+AjZAZVJyfpoiFnx35 Fbge+LZaH/k8HMwZmkMr5t9Mpkip715qKg2o9Bua6dkH0AqlcpLlC8d9a+HIVw/z aAsyGSU8jRwhoAOJsE9bJf0acQ/pZSqmFp0rDKqeFTSDMsbDRKLGq/dgv4nW0RiW s7xqsjb/rdcvirRj3rv9+lcTVkOtEqwk0PVdL9WOf7g4iYrb3SOIZh8ZyViaDSeH VTS5zps= =huBY -----END PGP SIGNATURE----- Merge 5.2-rc6 into android-mainline Linux 5.2-rc6 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2019-06-23 07:22:28 +02:00
Todd Kjos	1909a671db	binder: fix memory leak in error path ... syzkallar found a 32-byte memory leak in a rarely executed error case. The transaction complete work item was not freed if put_user() failed when writing the BR_TRANSACTION_COMPLETE to the user command buffer. Fixed by freeing it before put_user() is called. Reported-by: syzbot+182ce46596c3f2e1eb24@syzkaller.appspotmail.com Signed-off-by: Todd Kjos <tkjos@google.com> Cc: stable <stable@vger.kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2019-06-22 11:49:16 +02:00
Todd Kjos	a370003cc3	binder: fix possible UAF when freeing buffer ... There is a race between the binder driver cleaning up a completed transaction via binder_free_transaction() and a user calling binder_ioctl(BC_FREE_BUFFER) to release a buffer. It doesn't matter which is first but they need to be protected against running concurrently which can result in a UAF. Signed-off-by: Todd Kjos <tkjos@google.com> Cc: stable <stable@vger.kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2019-06-13 10:35:55 +02:00
Greg Kroah-Hartman	62f5ae536f	Linux 5.2-rc4 ... -----BEGIN PGP SIGNATURE----- iQFSBAABCAA8FiEEq68RxlopcLEwq+PEeb4+QwBBGIYFAlz8fAYeHHRvcnZhbGRz QGxpbnV4LWZvdW5kYXRpb24ub3JnAAoJEHm+PkMAQRiG1asH/3ySguxqtqL1MCBa 4/SZ37PHeWKMerfX6ZyJdgEqK3B+PWlmuLiOMNK5h2bPLzeQQQAmHU/mfKmpXqgB dHwUbG9yNnyUtTfsfRqAnCA6vpuw9Yb1oIzTCVQrgJLSWD0j7scBBvmzYqguOkto ThwigLUq3AILr8EfR4rh+GM+5Dn9OTEFAxwil9fPHQo7QoczwZxpURhScT6Co9TB DqLA3fvXbBvLs/CZy/S5vKM9hKzC+p39ApFTURvFPrelUVnythAM0dPDJg3pIn5u g+/+gDxDFa+7ANxvxO2ng1sJPDqJMeY/xmjJYlYyLpA33B7zLNk2vDHhAP06VTtr XCMhQ9s= =cb80 -----END PGP SIGNATURE----- Merge 5.2-rc4 into android-mainline Linux 5.2-rc4 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2019-06-09 09:18:13 +02:00
Thomas Gleixner	9c92ab6191	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 282 ... Based on 1 normalized pattern(s): this software is licensed under the terms of the gnu general public license version 2 as published by the free software foundation and may be copied distributed and modified under those terms this program is distributed in the hope that it will be useful but without any warranty without even the implied warranty of merchantability or fitness for a particular purpose see the gnu general public license for more details extracted by the scancode license scanner the SPDX license identifier GPL-2.0-only has been chosen to replace the boilerplate/reference in 285 file(s). Signed-off-by: Thomas Gleixner <tglx@linutronix.de> Reviewed-by: Alexios Zavras <alexios.zavras@intel.com> Reviewed-by: Allison Randal <allison@lohutok.net> Cc: linux-spdx@vger.kernel.org Link: https://lkml.kernel.org/r/20190529141900.642774971@linutronix.de Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2019-06-05 17:36:37 +02:00
Greg Kroah-Hartman	b9c482880a	Linux 5.2-rc2 ... -----BEGIN PGP SIGNATURE----- iQFSBAABCAA8FiEEq68RxlopcLEwq+PEeb4+QwBBGIYFAlzrJgUeHHRvcnZhbGRz QGxpbnV4LWZvdW5kYXRpb24ub3JnAAoJEHm+PkMAQRiG1XAIAJajJpeKc9MVQipi zWiI+WgHDg8gG/HnLKzP2Zp4MUjTCz30t0rnBbdo6AyK6LnPBL53yxg9q64XN7vI p/h2ys+/DvqhIYSPWX6C++HYQT4Cb5ghxJABEIsztd3G4nfB9L2vgq9zKSNFusTD UtfUxufciZPX515TuE4IqWMwS4Ut5daH7V3jjZunhPiayTFv64e1KbpKLLzHR0NR DfFbrPcdp7VyCT/A5AKrqfqeB6O9dm/Fe4CsdsaKuzASCXJ6GUc/A7iZDndv/KA4 f5Xh7SGlQ2TfT1ud/aMfdw3AcMjqB8zgMJenovJ7UuHDfULBWNeAmMh/cTDwY9eY Xgyvfm0= =S8p9 -----END PGP SIGNATURE----- Merge 5.2-rc2 into android-mainline Linux 5.2-rc2 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2019-05-27 09:45:14 +02:00
Thomas Gleixner	ec8f24b7fa	treewide: Add SPDX license identifier - Makefile/Kconfig ... Add SPDX license identifiers to all Make/Kconfig files which: - Have no license information of any form These files fall under the project license, GPL v2 only. The resulting SPDX license identifier is: GPL-2.0-only Signed-off-by: Thomas Gleixner <tglx@linutronix.de> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2019-05-21 10:50:46 +02:00
Greg Kroah-Hartman	1226c72a32	Linux 5.2-rc1 ... -----BEGIN PGP SIGNATURE----- iQFSBAABCAA8FiEEq68RxlopcLEwq+PEeb4+QwBBGIYFAlzh3PgeHHRvcnZhbGRz QGxpbnV4LWZvdW5kYXRpb24ub3JnAAoJEHm+PkMAQRiGnhoH/jkl4X66KuOXvGXa 9pgFzyEa3Mhqs0j+AaJYmRyoRty1CbAfMLEWgr0JbZy56zm0PhtXOxcu56/tfdtw f5j8OJLDvld10imHXxUrom9zc546Ff90VTOvWmsYznszTz0rV5HLmKgVIIc7ZN8W 6hshDOy/rviUcPAVrLKdZffzgQZlASNS7To7IBE9okT4QHEtER7dgzM/Z0VAg9R1 guCPaN8tje4vq2Lv7+J5T9LOF1RObCbKXNADwXY1rMRK5ao3xS93eDnJ8Vn08utI UECIVfnYsA6pGl6v1ErCl9izx9MoTU3Crle7BRzVbrw7furvB2lJ1R4RGwqRbvcB HovhmHI= =TMir -----END PGP SIGNATURE----- Merge 5.2-rc1 into android-mainline Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2019-05-20 20:17:24 +02:00
Linus Torvalds	f678d6da74	Char/Misc patches for 5.2-rc1 - part 2 ... Here is the "real" big set of char/misc driver patches for 5.2-rc1 Loads of different driver subsystem stuff in here, all over the places: - thunderbolt driver updates - habanalabs driver updates - nvmem driver updates - extcon driver updates - intel_th driver updates - mei driver updates - coresight driver updates - soundwire driver cleanups and updates - fastrpc driver updates - other minor driver updates - chardev minor fixups Feels like this tree is getting to be a dumping ground of "small driver subsystems" these days. Which is fine with me, if it makes things easier for those subsystem maintainers. All of these have been in linux-next for a while with no reported issues. Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> -----BEGIN PGP SIGNATURE----- iGwEABECAC0WIQT0tgzFv3jCIUoxPcsxR9QN2y37KQUCXNHE2w8cZ3JlZ0Brcm9h aC5jb20ACgkQMUfUDdst+ykvyQCYj5vSHQ88yEU+bzwGzQQLOBWYIwCgm5Iku0Y3 f6V3MvRffg4qUp3cGbU= =R37j -----END PGP SIGNATURE----- Merge tag 'char-misc-5.2-rc1-part2' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc Pull char/misc update part 2 from Greg KH: "Here is the "real" big set of char/misc driver patches for 5.2-rc1 Loads of different driver subsystem stuff in here, all over the places: - thunderbolt driver updates - habanalabs driver updates - nvmem driver updates - extcon driver updates - intel_th driver updates - mei driver updates - coresight driver updates - soundwire driver cleanups and updates - fastrpc driver updates - other minor driver updates - chardev minor fixups Feels like this tree is getting to be a dumping ground of "small driver subsystems" these days. Which is fine with me, if it makes things easier for those subsystem maintainers. All of these have been in linux-next for a while with no reported issues" * tag 'char-misc-5.2-rc1-part2' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc: (255 commits) intel_th: msu: Add current window tracking intel_th: msu: Add a sysfs attribute to trigger window switch intel_th: msu: Correct the block wrap detection intel_th: Add switch triggering support intel_th: gth: Factor out trace start/stop intel_th: msu: Factor out pipeline draining intel_th: msu: Switch over to scatterlist intel_th: msu: Replace open-coded list_{first,last,next}_entry variants intel_th: Only report useful IRQs to subdevices intel_th: msu: Start handling IRQs intel_th: pci: Use MSI interrupt signalling intel_th: Communicate IRQ via resource intel_th: Add "rtit" source device intel_th: Skip subdevices if their MMIO is missing intel_th: Rework resource passing between glue layers and core intel_th: SPDX-ify the documentation intel_th: msu: Fix single mode with IOMMU coresight: funnel: Support static funnel dt-bindings: arm: coresight: Unify funnel DT binding coresight: replicator: Add new device id for static replicator ...	2019-05-07 13:39:22 -07:00
Todd Kjos	0f2cb7cf80	Merge branch 'linux-mainline' into android-mainline-tmp ... Change-Id: I4380c68c3474026a42ffa9f95c525f9a563ba7a3	2019-05-03 12:22:22 -07:00
Martijn Coenen	e00eb41c0c	ANDROID: binder: add support for RT prio inheritance. ... Adds support for SCHED_BATCH/SCHED_FIFO/SCHED_RR priority inheritance. Bug: 34461621 Bug: 37293077 Bug: 120446518 Change-Id: I71f356e476be2933713a0ecfa2cc31aa141e2dc6 Signed-off-by: Martijn Coenen <maco@google.com> [AmitP: Include <uapi/linux/sched/types.h> for struct sched_param] Signed-off-by: Amit Pundir <amit.pundir@linaro.org> [astrachan: Folded the following changes into this patch: 69308b3b07dd ("ANDROID: binder: add min sched_policy to node.") 7a6edeb62d86 ("ANDROID: binder: improve priority inheritance.") 22b061b17679 ("ANDROID: binder: don't check prio permissions on restore.") 67cf97141d81 ("ANDROID: binder: Add tracing for binder priority inheritance.") fb92c34f7ba3 ("ANDROID: binder: add RT inheritance flag to node.") c847b48f8cda ("ANDROID: binder: init desired_prio.sched_policy before use it")] Signed-off-by: Alistair Strachan <astrachan@google.com>	2019-05-03 10:42:47 -07:00
Todd Kjos	0b0509508b	binder: check for overflow when alloc for security context ... When allocating space in the target buffer for the security context, make sure the extra_buffers_size doesn't overflow. This can only happen if the given size is invalid, but an overflow can turn it into a valid size. Fail the transaction if an overflow is detected. Signed-off-by: Todd Kjos <tkjos@google.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2019-04-25 21:26:49 +02:00
Tyler Hicks	60d4885710	binder: take read mode of mmap_sem in binder_alloc_free_page() ... Restore the behavior of locking mmap_sem for reading in binder_alloc_free_page(), as was first done in commit 3013bf62b6 ("binder: reduce mmap_sem write-side lock"). That change was inadvertently reverted by commit 5cec2d2e58 ("binder: fix race between munmap() and direct reclaim"). In addition, change the name of the label for the error path to accurately reflect that we're taking the lock for reading. Backporting note: This fix is only needed when *both* of the commits mentioned above are applied. That's an unlikely situation since they both landed during the development of v5.1 but only one of them is targeted for stable. Fixes: 5cec2d2e58 ("binder: fix race between munmap() and direct reclaim") Signed-off-by: Tyler Hicks <tyhicks@canonical.com> Acked-by: Todd Kjos <tkjos@android.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2019-04-25 11:53:43 +02:00
Todd Kjos	5cec2d2e58	binder: fix race between munmap() and direct reclaim ... An munmap() on a binder device causes binder_vma_close() to be called which clears the alloc->vma pointer. If direct reclaim causes binder_alloc_free_page() to be called, there is a race where alloc->vma is read into a local vma pointer and then used later after the mm->mmap_sem is acquired. This can result in calling zap_page_range() with an invalid vma which manifests as a use-after-free in zap_page_range(). The fix is to check alloc->vma after acquiring the mmap_sem (which we were acquiring anyway) and skip zap_page_range() if it has changed to NULL. Signed-off-by: Todd Kjos <tkjos@google.com> Reviewed-by: Joel Fernandes (Google) <joel@joelfernandes.org> Cc: stable <stable@vger.kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2019-03-21 06:51:32 +01:00
Todd Kjos	5997da8214	binder: fix BUG_ON found by selinux-testsuite ... The selinux-testsuite found an issue resulting in a BUG_ON() where a conditional relied on a size_t going negative when checking the validity of a buffer offset. Fixes: 7a67a39320 ("binder: add function to copy binder object from buffer") Reported-by: Paul Moore <paul@paul-moore.com> Tested-by: Paul Moore <paul@paul-moore.com> Signed-off-by: Todd Kjos <tkjos@google.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2019-03-21 06:50:47 +01:00
Minchan Kim	3013bf62b6	binder: reduce mmap_sem write-side lock ... binder has used write-side mmap_sem semaphore to release memory mapped at address space of the process. However, right lock to release pages is down_read, not down_write because page table lock already protects the race for parallel freeing. Please do not use mmap_sem write-side lock which is well known contented lock. Cc: Todd Kjos <tkjos@google.com> Cc: Martijn Coenen <maco@android.com> Cc: Arve Hjønnevåg <arve@android.com> Signed-off-by: Minchan Kim <minchan@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2019-02-19 14:50:11 +01:00
Todd Kjos	26528be672	binder: fix handling of misaligned binder object ... Fixes crash found by syzbot: kernel BUG at drivers/android/binder_alloc.c:LINE! (2) Reported-and-tested-by: syzbot+55de1eb4975dec156d8f@syzkaller.appspotmail.com Signed-off-by: Todd Kjos <tkjos@google.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2019-02-15 08:49:20 +01:00
Todd Kjos	36f3093792	binder: fix sparse issue in binder_alloc_selftest.c ... Fixes sparse issues reported by the kbuild test robot running on https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc.git char-misc-testing: bde4a19fc0 ("binder: use userspace pointer as base of buffer space") Error output (drivers/android/binder_alloc_selftest.c): sparse: warning: incorrect type in assignment (different address spaces) sparse: expected void *page_addr sparse: got void [noderef] <asn:1> *user_data sparse: error: subtraction of different types can't work Fixed by adding necessary "__user" tags. Reported-by: kbuild test robot <lkp@intel.com> Signed-off-by: Todd Kjos <tkjos@google.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2019-02-14 08:13:56 +01:00
Todd Kjos	bde4a19fc0	binder: use userspace pointer as base of buffer space ... Now that alloc->buffer points to the userspace vm_area rename buffer->data to buffer->user_data and rename local pointers that hold user addresses. Also use the "__user" tag to annotate all user pointers so sparse can flag cases where user pointer vaues are copied to kernel pointers. Refactor code to use offsets instead of user pointers. Signed-off-by: Todd Kjos <tkjos@google.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2019-02-12 10:43:57 +01:00
Todd Kjos	c41358a5f5	binder: remove user_buffer_offset ... Remove user_buffer_offset since there is no kernel buffer pointer anymore. Signed-off-by: Todd Kjos <tkjos@google.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2019-02-12 10:43:57 +01:00
Todd Kjos	880211667b	binder: remove kernel vm_area for buffer space ... Remove the kernel's vm_area and the code that maps buffer pages into it. Signed-off-by: Todd Kjos <tkjos@google.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2019-02-12 10:43:57 +01:00
Todd Kjos	db6b0b810b	binder: avoid kernel vm_area for buffer fixups ... Refactor the functions to validate and fixup struct binder_buffer pointer objects to avoid using vm_area pointers. Instead copy to/from kernel space using binder_alloc_copy_to_buffer() and binder_alloc_copy_from_buffer(). The following functions were refactored: refactor binder_validate_ptr() binder_validate_fixup() binder_fixup_parent() Signed-off-by: Todd Kjos <tkjos@google.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2019-02-12 10:43:57 +01:00