Author	SHA1	Message	Date
Srinivasarao Pathipati	f21049ba31	Merge android11-5.4.210+ (7e6cbbe) into msm-5.4 ... * refs/heads/tmp-7e6cbbe: Revert "arm64: mm: Don't invalidate FROM_DEVICE buffers at start of DMA transfer" ANDROID: ABI: Update allowed list for QCOM ANDROID: incfs: Add check for ATTR_KILL_SUID and ATTR_MODE in incfs_setattr Linux 5.4.210 x86/speculation: Add LFENCE to RSB fill sequence x86/speculation: Add RSB VM Exit protections macintosh/adb: fix oob read in do_adb_query() function media: v4l2-mem2mem: Apply DST_QUEUE_OFF_BASE on MMAP buffers across ioctls selftests: KVM: Handle compiler optimizations in ucall KVM: Don't null dereference ops->destroy selftests/bpf: Fix "dubious pointer arithmetic" test selftests/bpf: Fix test_align verifier log patterns bpf: Test_verifier, #70 error message updates for 32-bit right shift selftests/bpf: Extend verifier and bpf_sock tests for dst_port loads bpf: Verifer, adjust_scalar_min_max_vals to always call update_reg_bounds() ACPI: APEI: Better fix to avoid spamming the console with old error logs ACPI: video: Shortening quirk list by identifying Clevo by board_name only ACPI: video: Force backlight native for some TongFang devices thermal: Fix NULL pointer dereferences in of_thermal_ functions ANDROID: GKI: db845c: Update symbols list and ABI Linux 5.4.209 scsi: core: Fix race between handling STS_RESOURCE and completion mt7601u: add USB device ID for some versions of XiaoDu WiFi Dongle. ARM: crypto: comment out gcc warning that breaks clang builds sctp: leave the err path free in sctp_stream_init to sctp_stream_free sfc: disable softirqs for ptp TX perf symbol: Correct address for bss symbols virtio-net: fix the race between refill work and close netfilter: nf_queue: do not allow packet truncation below transport header offset sctp: fix sleep in atomic context bug in timer handlers i40e: Fix interface init with MSI interrupts (no MSI-X) tcp: Fix a data-race around sysctl_tcp_comp_sack_nr. tcp: Fix a data-race around sysctl_tcp_comp_sack_delay_ns. Documentation: fix sctp_wmem in ip-sysctl.rst tcp: Fix a data-race around sysctl_tcp_invalid_ratelimit. tcp: Fix a data-race around sysctl_tcp_autocorking. tcp: Fix a data-race around sysctl_tcp_min_rtt_wlen. tcp: Fix a data-race around sysctl_tcp_min_tso_segs. net: sungem_phy: Add of_node_put() for reference returned by of_get_parent() igmp: Fix data-races around sysctl_igmp_qrv. ipv6/addrconf: fix a null-ptr-deref bug for ip6_ptr net: ping6: Fix memleak in ipv6_renew_options(). tcp: Fix a data-race around sysctl_tcp_challenge_ack_limit. tcp: Fix a data-race around sysctl_tcp_limit_output_bytes. scsi: ufs: host: Hold reference returned by of_parse_phandle() ice: do not setup vlan for loopback VSI ice: check (DD | EOF) bits on Rx descriptor rather than (EOP | RS) tcp: Fix a data-race around sysctl_tcp_nometrics_save. tcp: Fix a data-race around sysctl_tcp_frto. tcp: Fix a data-race around sysctl_tcp_adv_win_scale. tcp: Fix a data-race around sysctl_tcp_app_win. tcp: Fix data-races around sysctl_tcp_dsack. s390/archrandom: prevent CPACF trng invocations in interrupt context ntfs: fix use-after-free in ntfs_ucsncmp() Bluetooth: L2CAP: Fix use-after-free caused by l2cap_chan_put ANDROID: restore some removed refcount functions ANDROID: add tty_schedule_flip() back to the kernel Linux 5.4.208 x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm() net: usb: ax88179_178a needs FLAG_SEND_ZLP tty: use new tty_insert_flip_string_and_push_buffer() in pty_write() tty: extract tty_flip_buffer_commit() from tty_flip_buffer_push() tty: drop tty_schedule_flip() tty: the rest, stop using tty_schedule_flip() tty: drivers/tty/, stop using tty_schedule_flip() Bluetooth: Fix bt_skb_sendmmsg not allocating partial chunks Bluetooth: SCO: Fix sco_send_frame returning skb->len Bluetooth: Fix passing NULL to PTR_ERR Bluetooth: RFCOMM: Replace use of memcpy_from_msg with bt_skb_sendmmsg Bluetooth: SCO: Replace use of memcpy_from_msg with bt_skb_sendmsg Bluetooth: Add bt_skb_sendmmsg helper Bluetooth: Add bt_skb_sendmsg helper ALSA: memalloc: Align buffer allocations in page size bitfield.h: Fix "type of reg too small for mask" test x86/mce: Deduplicate exception handling mmap locking API: initial implementation as rwsem wrappers x86/uaccess: Implement macros for CMPXCHG on user addresses x86: get rid of small constant size cases in raw_copy_{to,from}_user() locking/refcount: Consolidate implementations of refcount_t locking/refcount: Consolidate REFCOUNT_{MAX,SATURATED} definitions locking/refcount: Move saturation warnings out of line locking/refcount: Improve performance of generic REFCOUNT_FULL code locking/refcount: Move the bulk of the REFCOUNT_FULL implementation into the <linux/refcount.h> header locking/refcount: Remove unused refcount_*_checked() variants locking/refcount: Ensure integer operands are treated as signed locking/refcount: Define constants for saturation and max refcount values ima: remove the IMA_TEMPLATE Kconfig option dlm: fix pending remove if msg allocation fails bpf: Make sure mac_header was set before using it mm/mempolicy: fix uninit-value in mpol_rebind_policy() spi: bcm2835: bcm2835_spi_handle_err(): fix NULL pointer deref for non DMA transfers tcp: Fix data-races around sysctl_tcp_max_reordering. tcp: Fix a data-race around sysctl_tcp_rfc1337. tcp: Fix a data-race around sysctl_tcp_stdurg. tcp: Fix a data-race around sysctl_tcp_retrans_collapse. tcp: Fix data-races around sysctl_tcp_slow_start_after_idle. tcp: Fix a data-race around sysctl_tcp_thin_linear_timeouts. tcp: Fix data-races around sysctl_tcp_recovery. tcp: Fix a data-race around sysctl_tcp_early_retrans. tcp: Fix data-races around sysctl knobs related to SYN option. udp: Fix a data-race around sysctl_udp_l3mdev_accept. ipv4: Fix a data-race around sysctl_fib_multipath_use_neigh. be2net: Fix buffer overflow in be_get_module_eeprom gpio: pca953x: only use single read/write for No AI mode ixgbe: Add locking to prevent panic when setting sriov_numvfs to zero i40e: Fix erroneous adapter reinitialization during recovery process iavf: Fix handling of dummy receive descriptors tcp: Fix data-races around sysctl_tcp_fastopen. tcp: Fix data-races around sysctl_max_syn_backlog. tcp: Fix a data-race around sysctl_tcp_tw_reuse. tcp: Fix a data-race around sysctl_tcp_notsent_lowat. tcp: Fix data-races around some timeout sysctl knobs. tcp: Fix data-races around sysctl_tcp_reordering. tcp: Fix data-races around sysctl_tcp_syncookies. igmp: Fix a data-race around sysctl_igmp_max_memberships. igmp: Fix data-races around sysctl_igmp_llm_reports. net/tls: Fix race in TLS device down flow net: stmmac: fix dma queue left shift overflow issue i2c: cadence: Change large transfer count reset logic to be unconditional tcp: Fix a data-race around sysctl_tcp_probe_interval. tcp: Fix a data-race around sysctl_tcp_probe_threshold. tcp: Fix a data-race around sysctl_tcp_mtu_probe_floor. tcp: Fix data-races around sysctl_tcp_min_snd_mss. tcp: Fix data-races around sysctl_tcp_base_mss. tcp: Fix data-races around sysctl_tcp_mtu_probing. tcp/dccp: Fix a data-race around sysctl_tcp_fwmark_accept. ip: Fix a data-race around sysctl_fwmark_reflect. ip: Fix data-races around sysctl_ip_nonlocal_bind. ip: Fix data-races around sysctl_ip_fwd_use_pmtu. ip: Fix data-races around sysctl_ip_no_pmtu_disc. igc: Reinstate IGC_REMOVED logic and implement it properly perf/core: Fix data race between perf_event_set_output() and perf_mmap_close() pinctrl: ralink: Check for null return of devm_kcalloc power/reset: arm-versatile: Fix refcount leak in versatile_reboot_probe xfrm: xfrm_policy: fix a possible double xfrm_pols_put() in xfrm_bundle_lookup() serial: mvebu-uart: correctly report configured baudrate value PCI: hv: Fix interrupt mapping for multi-MSI PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI PCI: hv: Fix multi-MSI to allow more than one MSI vector xen/gntdev: Ignore failure to unmap INVALID_GRANT_HANDLE lockdown: Fix kexec lockdown bypass with ima policy mlxsw: spectrum_router: Fix IPv4 nexthop gateway indication riscv: add as-options for modules with assembly compontents pinctrl: stm32: fix optional IRQ support to gpios Revert "cgroup: Use separate src/dst nodes when preloading css_sets for migration" Linux 5.4.207 can: m_can: m_can_tx_handler(): fix use after free of skb serial: pl011: UPSTAT_AUTORTS requires .throttle/unthrottle serial: stm32: Clear prev values before setting RTS delays serial: 8250: fix return error code in serial8250_request_std_resource() tty: serial: samsung_tty: set dma burst_size to 1 usb: dwc3: gadget: Fix event pending check usb: typec: add missing uevent when partner support PD USB: serial: ftdi_sio: add Belimo device ids signal handling: don't use BUG_ON() for debugging ARM: dts: stm32: use the correct clock source for CEC on stm32mp151 soc: ixp4xx/npe: Fix unused match warning x86: Clear .brk area at early boot irqchip: or1k-pic: Undefine mask_ack for level triggered hardware ASoC: madera: Fix event generation for rate controls ASoC: madera: Fix event generation for OUT1 demux ASoC: cs47l15: Fix event generation for low power mux control ASoC: wm5110: Fix DRE control ASoC: ops: Fix off by one in range control validation net: sfp: fix memory leak in sfp_probe() nvme: fix regression when disconnect a recovering ctrl NFC: nxp-nci: don't print header length mismatch on i2c error net: tipc: fix possible refcount leak in tipc_sk_create() platform/x86: hp-wmi: Ignore Sanitization Mode event cpufreq: pmac32-cpufreq: Fix refcount leak bug netfilter: br_netfilter: do not skip all hooks with 0 priority virtio_mmio: Restore guest page size on resume virtio_mmio: Add missing PM calls to freeze/restore mm: sysctl: fix missing numa_stat when !CONFIG_HUGETLB_PAGE sfc: fix kernel panic when creating VF seg6: bpf: fix skb checksum in bpf_push_seg6_encap() seg6: fix skb checksum in SRv6 End.B6 and End.B6.Encaps behaviors seg6: fix skb checksum evaluation in SRH encapsulation/insertion sfc: fix use after free when disabling sriov net: ftgmac100: Hold reference returned by of_get_child_by_name() ipv4: Fix data-races around sysctl_ip_dynaddr. raw: Fix a data-race around sysctl_raw_l3mdev_accept. icmp: Fix a data-race around sysctl_icmp_ratemask. icmp: Fix a data-race around sysctl_icmp_ratelimit. drm/i915/gt: Serialize TLB invalidates with GT resets ARM: dts: sunxi: Fix SPI NOR campatible on Orange Pi Zero ARM: dts: at91: sama5d2: Fix typo in i2s1 node ipv4: Fix a data-race around sysctl_fib_sync_mem. icmp: Fix data-races around sysctl. cipso: Fix data-races around sysctl. net: Fix data-races around sysctl_mem. inetpeer: Fix data-races around sysctl. net: stmmac: dwc-qos: Disable split header for Tegra194 ASoC: sgtl5000: Fix noise on shutdown/remove ima: Fix a potential integer overflow in ima_appraise_measurement drm/i915: fix a possible refcount leak in intel_dp_add_mst_connector() ARM: 9210/1: Mark the FDT_FIXED sections as shareable ARM: 9209/1: Spectre-BHB: avoid pr_info() every time a CPU comes out of idle ARM: dts: imx6qdl-ts7970: Fix ngpio typo and count ext4: fix race condition between ext4_write and ext4_convert_inline_data sched/rt: Disable RT_RUNTIME_SHARE by default Revert "evm: Fix memleak in init_desc" nilfs2: fix incorrect masking of permission flags for symlinks drm/panfrost: Fix shrinker list corruption by madvise IOCTL cgroup: Use separate src/dst nodes when preloading css_sets for migration wifi: mac80211: fix queue selection for mesh/OCB interfaces ARM: 9214/1: alignment: advance IT state after emulating Thumb instruction ARM: 9213/1: Print message about disabled Spectre workarounds only once ip: fix dflt addr selection for connected nexthop net: sock: tracing: Fix sock_exceed_buf_limit not to dereference stale pointer tracing/histograms: Fix memory leak problem xen/netback: avoid entering xenvif_rx_next_skb() with an empty rx queue ALSA: hda/realtek - Enable the headset-mic on a Xiaomi's laptop ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc221 ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc671 ALSA: hda/conexant: Apply quirk for another HP ProDesk 600 G3 model ALSA: hda - Add fixup for Dell Latitidue E5430 Linux 5.4.206 Revert "mtd: rawnand: gpmi: Fix setting busy timeout setting" Linux 5.4.205 dmaengine: ti: Add missing put_device in ti_dra7_xbar_route_allocate dmaengine: ti: Fix refcount leak in ti_dra7_xbar_route_allocate dmaengine: at_xdma: handle errors of at_xdmac_alloc_desc() correctly dmaengine: pl330: Fix lockdep warning about non-static key ida: don't use BUG_ON() for debugging dt-bindings: dma: allwinner,sun50i-a64-dma: Fix min/max typo misc: rtsx_usb: set return value in rsp_buf alloc err path misc: rtsx_usb: use separate command and response buffers misc: rtsx_usb: fix use of dma mapped buffer for usb bulk transfer dmaengine: imx-sdma: Allow imx8m for imx7 FW revs i2c: cadence: Unregister the clk notifier in error path selftests: forwarding: fix error message in learning_test selftests: forwarding: fix learning_test when h1 supports IFF_UNICAST_FLT selftests: forwarding: fix flood_unicast_test when h2 supports IFF_UNICAST_FLT ibmvnic: Properly dispose of all skbs during a failover. ARM: at91: pm: use proper compatibles for sam9x60's rtc and rtt ARM: at91: pm: use proper compatible for sama5d2's rtc pinctrl: sunxi: sunxi_pconf_set: use correct offset pinctrl: sunxi: a83t: Fix NAND function name for some pins ARM: meson: Fix refcount leak in meson_smp_prepare_cpus xfs: remove incorrect ASSERT in xfs_rename can: kvaser_usb: kvaser_usb_leaf: fix bittiming limits can: kvaser_usb: kvaser_usb_leaf: fix CAN clock frequency regression can: kvaser_usb: replace run-time checks with struct kvaser_usb_driver_info powerpc/powernv: delay rng platform device creation until later in boot video: of_display_timing.h: include errno.h fbcon: Prevent that screen size is smaller than font size fbcon: Disallow setting font bigger than screen size fbmem: Check virtual screen sizes in fb_set_var() fbdev: fbmem: Fix logo center image dx issue iommu/vt-d: Fix PCI bus rescan device hot add net: rose: fix UAF bug caused by rose_t0timer_expiry usbnet: fix memory leak in error case can: gs_usb: gs_usb_open/close(): fix memory leak can: grcan: grcan_probe(): remove extra of_node_get() can: bcm: use call_rcu() instead of costly synchronize_rcu() mm/slub: add missing TID updates on slab deactivation esp: limit skb_page_frag_refill use to a single page Linux 5.4.204 clocksource/drivers/ixp4xx: remove EXPORT_SYMBOL_GPL from ixp4xx_timer_setup() net: usb: qmi_wwan: add Telit 0x1070 composition net: usb: qmi_wwan: add Telit 0x1060 composition xen/arm: Fix race in RB-tree based P2M accounting xen/blkfront: force data bouncing when backend is untrusted xen/netfront: force data bouncing when backend is untrusted xen/netfront: fix leaking data in shared pages xen/blkfront: fix leaking data in shared pages selftests/rseq: Change type of rseq_offset to ptrdiff_t selftests/rseq: x86-32: use %gs segment selector for accessing rseq thread area selftests/rseq: x86-64: use %fs segment selector for accessing rseq thread area selftests/rseq: Fix: work-around asm goto compiler bugs selftests/rseq: Remove arm/mips asm goto compiler work-around selftests/rseq: Fix warnings about #if checks of undefined tokens selftests/rseq: Fix ppc32 offsets by using long rather than off_t selftests/rseq: Fix ppc32 missing instruction selection "u" and "x" for load/store selftests/rseq: Fix ppc32: wrong rseq_cs 32-bit field pointer on big endian selftests/rseq: Uplift rseq selftests for compatibility with glibc-2.35 selftests/rseq: Introduce thread pointer getters selftests/rseq: Introduce rseq_get_abi() helper selftests/rseq: Remove volatile from __rseq_abi selftests/rseq: Remove useless assignment to cpu variable selftests/rseq: introduce own copy of rseq uapi header selftests/rseq: remove ARRAY_SIZE define from individual tests rseq/selftests,x86_64: Add rseq_offset_deref_addv() ipv6/sit: fix ipip6_tunnel_get_prl return value sit: use min net: dsa: bcm_sf2: force pause link settings hwmon: (ibmaem) don't call platform_device_del() if platform_device_add() fails xen/gntdev: Avoid blocking in unmap_grant_pages() net: tun: avoid disabling NAPI twice NFC: nxp-nci: Don't issue a zero length i2c_master_read() nfc: nfcmrvl: Fix irq_of_parse_and_map() return value net: bonding: fix use-after-free after 802.3ad slave unbind net: bonding: fix possible NULL deref in rlb code net/sched: act_api: Notify user space if any actions were flushed before error netfilter: nft_dynset: restore set element counter when failing to update s390: remove unneeded 'select BUILD_BIN2C' PM / devfreq: exynos-ppmu: Fix refcount leak in of_get_devfreq_events caif_virtio: fix race between virtio_device_ready() and ndo_open() net: ipv6: unexport __init-annotated seg6_hmac_net_init() usbnet: fix memory allocation in helpers linux/dim: Fix divide by 0 in RDMA DIM RDMA/qedr: Fix reporting QP timeout attribute net: tun: stop NAPI when detaching queues net: tun: unlink NAPI from device on destruction selftests/net: pass ipv6_args to udpgso_bench's IPv6 TCP test virtio-net: fix race between ndo_open() and virtio_device_ready() net: usb: ax88179_178a: Fix packet receiving net: rose: fix UAF bugs caused by timer handler SUNRPC: Fix READ_PLUS crasher s390/archrandom: simplify back to earlier design and initialize earlier dm raid: fix KASAN warning in raid5_add_disks dm raid: fix accesses beyond end of raid member array powerpc/bpf: Fix use of user_pt_regs in uapi powerpc/prom_init: Fix kernel config grep nvdimm: Fix badblocks clear off-by-one error ipv6: take care of disable_policy when restoring routes Linux 5.4.203 crypto: arm/ghash-ce - define fpu before fpu registers are referenced crypto: arm - use Kconfig based compiler checks for crypto opcodes ARM: 9029/1: Make iwmmxt.S support Clang's integrated assembler ARM: OMAP2+: drop unnecessary adrl ARM: 8929/1: use APSR_nzcv instead of r15 as mrc operand ARM: 8933/1: replace Sun/Solaris style flag on section directive crypto: arm/sha512-neon - avoid ADRL pseudo instruction crypto: arm/sha256-neon - avoid ADRL pseudo instruction ARM: 8971/1: replace the sole use of a symbol with its definition ARM: 8990/1: use VFP assembler mnemonics in register load/store macros ARM: 8989/1: use .fpu assembler directives instead of assembler arguments net: mscc: ocelot: allow unregistered IP multicast flooding kexec_file: drop weak attribute from arch_kexec_apply_relocations[_add] powerpc/ftrace: Remove ftrace init tramp once kernel init is complete drm: remove drm_fb_helper_modinit Linux 5.4.202 powerpc/pseries: wire up rng during setup_arch() kbuild: link vmlinux only once for CONFIG_TRIM_UNUSED_KSYMS (2nd attempt) random: update comment from copy_to_user() -> copy_to_iter() modpost: fix section mismatch check for exported init/exit sections ARM: cns3xxx: Fix refcount leak in cns3xxx_init ARM: Fix refcount leak in axxia_boot_secondary soc: bcm: brcmstb: pm: pm-arm: Fix refcount leak in brcmstb_pm_probe ARM: exynos: Fix refcount leak in exynos_map_pmu ARM: dts: imx6qdl: correct PU regulator ramp delay powerpc/powernv: wire up rng during setup_arch powerpc/rtas: Allow ibm,platform-dump RTAS call with null buffer address powerpc: Enable execve syscall exit tracepoint parisc: Enable ARCH_HAS_STRICT_MODULE_RWX xtensa: Fix refcount leak bug in time.c xtensa: xtfpga: Fix refcount leak bug in setup iio: adc: axp288: Override TS pin bias current for some models iio: adc: stm32: fix maximum clock rate for stm32mp15x iio: trigger: sysfs: fix use-after-free on remove iio: gyro: mpu3050: Fix the error handling in mpu3050_power_up() iio: accel: mma8452: ignore the return value of reset operation iio:accel:mxc4005: rearrange iio trigger get and register iio:accel:bma180: rearrange iio trigger get and register iio:chemical:ccs811: rearrange iio trigger get and register usb: chipidea: udc: check request status before setting device address xhci: turn off port power in shutdown iio: adc: vf610: fix conversion mode sysfs node name s390/cpumf: Handle events cycles and instructions identical gpio: winbond: Fix error code in winbond_gpio_get() Revert "net/tls: fix tls_sk_proto_close executed repeatedly" virtio_net: fix xdp_rxq_info bug after suspend/resume igb: Make DMA faster when CPU is active on the PCIe link regmap-irq: Fix a bug in regmap_irq_enable() for type_in_mask chips ice: ethtool: advertise 1000M speeds properly afs: Fix dynamic root getattr MIPS: Remove repetitive increase irq_err_count x86/xen: Remove undefined behavior in setup_features() udmabuf: add back sanity check net/tls: fix tls_sk_proto_close executed repeatedly erspan: do not assume transport header is always set drm/msm/mdp4: Fix refcount leak in mdp4_modeset_init_intf net/sched: sch_netem: Fix arithmetic in netem_dump() for 32-bit platforms bonding: ARP monitor spams NETDEV_NOTIFY_PEERS notifiers phy: aquantia: Fix AN when higher speeds than 1G are not advertised bpf: Fix request_sock leak in sk lookup helpers USB: serial: option: add Quectel RM500K module support USB: serial: option: add Quectel EM05-G modem USB: serial: option: add Telit LE910Cx 0x1250 composition random: quiet urandom warning ratelimit suppression message dm mirror log: clear log bits up to BITS_PER_LONG boundary dm era: commit metadata in postsuspend after worker stops ata: libata: add qc->flags in ata_qc_complete_template tracepoint mtd: rawnand: gpmi: Fix setting busy timeout setting mmc: sdhci-pci-o2micro: Fix card detect by dealing with debouncing net: openvswitch: fix parsing of nw_proto for IPv6 fragments ALSA: hda/realtek: Add quirk for Clevo PD70PNT ALSA: hda/realtek - ALC897 headset MIC no sound ALSA: hda/conexant: Fix missing beep setup ALSA: hda/via: Fix missing beep setup random: schedule mix_interrupt_randomness() less often vt: drop old FONT ioctls Linux 5.4.201 Revert "hwmon: Make chip parameter for with_info API mandatory" arm64: mm: Don't invalidate FROM_DEVICE buffers at start of DMA transfer tcp: drop the hash_32() part from the index calculation tcp: increase source port perturb table to 2^16 tcp: dynamically allocate the perturb table used by source ports tcp: add small random increments to the source port tcp: use different parts of the port_offset for index and offset tcp: add some entropy in __inet_hash_connect() usb: gadget: u_ether: fix regression in setting fixed MAC address dm: remove special-casing of bio-based immutable singleton target on NVMe s390/mm: use non-quiescing sske for KVM switch to keyed guest UPSTREAM: ext4: verify dir block before splitting it UPSTREAM: ext4: fix use-after-free in ext4_rename_dir_prepare BACKPORT: ext4: Only advertise encrypted_casefold when encryption and unicode are enabled BACKPORT: ext4: fix no-key deletion for encrypt+casefold BACKPORT: ext4: optimize match for casefolded encrypted dirs BACKPORT: ext4: handle casefolding with encryption Revert "ANDROID: ext4: Handle casefolding with encryption" Revert "ANDROID: ext4: Optimize match for casefolded encrypted dirs" ANDROID: cpu/hotplug: avoid breaking Android ABI by fusing cpuhp steps ANDROID: change function signatures for some random functions. Revert "mailbox: forward the hrtimer if not queued and under a lock" Revert "drm: fix EDID struct for old ARM OABI format" Revert "ALSA: jack: Access input_dev under mutex" Linux 5.4.200 powerpc/mm: Switch obsolete dssall to .long riscv: Less inefficient gcc tishift helpers (and export their symbols) RISC-V: fix barrier() use in <vdso/processor.h> arm64: kprobes: Use BRK instead of single-step when executing instructions out-of-line net: openvswitch: fix leak of nested actions net: openvswitch: fix misuse of the cached connection on tuple changes net/sched: act_police: more accurate MTU policing virtio-pci: Remove wrong address verification in vp_del_vqs() ALSA: hda/realtek: fix right sounds and mute/micmute LEDs for HP machine ALSA: hda/realtek: fix mute/micmute LEDs for HP 440 G8 ext4: add reserved GDT blocks check ext4: make variable "count" signed ext4: fix bug_on ext4_mb_use_inode_pa dm mirror log: round up region bitmap size to BITS_PER_LONG serial: 8250: Store to lsr_save_flags after lsr read usb: gadget: lpc32xx_udc: Fix refcount leak in lpc32xx_udc_probe usb: dwc2: Fix memory leak in dwc2_hcd_init USB: serial: io_ti: add Agilent E5805A support USB: serial: option: add support for Cinterion MV31 with new baseline comedi: vmk80xx: fix expression for tx buffer size i2c: designware: Use standard optional ref clock implementation irqchip/gic-v3: Fix refcount leak in gic_populate_ppi_partitions irqchip/gic-v3: Fix error handling in gic_populate_ppi_partitions irqchip/gic/realview: Fix refcount leak in realview_gic_of_init faddr2line: Fix overlapping text section failures, the sequel certs/blacklist_hashes.c: fix const confusion in certs blacklist arm64: ftrace: fix branch range checks net: bgmac: Fix an erroneous kfree() in bgmac_remove() mlxsw: spectrum_cnt: Reorder counter pools misc: atmel-ssc: Fix IRQ check in ssc_probe tty: goldfish: Fix free_irq() on remove i40e: Fix call trace in setup_tx_descriptors i40e: Fix calculating the number of queue pairs i40e: Fix adding ADQ filter to TC0 clocksource: hyper-v: unexport __init-annotated hv_init_clocksource() pNFS: Don't keep retrying if the server replied NFS4ERR_LAYOUTUNAVAILABLE random: credit cpu and bootloader seeds by default net: ethernet: mtk_eth_soc: fix misuse of mem alloc interface netdev[napi]_alloc_frag ipv6: Fix signed integer overflow in l2tp_ip6_sendmsg nfc: nfcmrvl: Fix memory leak in nfcmrvl_play_deferred virtio-mmio: fix missing put_device() when vm_cmdline_parent registration failed ALSA: hda/realtek - Add HW8326 support scsi: pmcraid: Fix missing resource cleanup in error case scsi: ipr: Fix missing/incorrect resource cleanup in error case scsi: lpfc: Allow reduced polling rate for nvme_admin_async_event cmd completion scsi: lpfc: Fix port stuck in bypassed state after LIP in PT2PT topology scsi: vmw_pvscsi: Expand vcpuHint to 16 bits ASoC: wm_adsp: Fix event generation for wm_adsp_fw_put() ASoC: es8328: Fix event generation for deemphasis control ASoC: wm8962: Fix suspend while playing music ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo() ASoC: cs42l56: Correct typo in minimum level for SX volume controls ASoC: cs42l52: Correct TLV for Bypass Volume ASoC: cs53l30: Correct number of volume levels on SX controls ASoC: cs35l36: Update digital volume TLV ASoC: cs42l52: Fix TLV scales for mixer controls dma-debug: make things less spammy under memory pressure ASoC: nau8822: Add operation for internal PLL off and on powerpc/kasan: Silence KASAN warnings in __get_wchan() random: account for arch randomness in bits random: mark bootloader randomness code as __init random: avoid checking crng_ready() twice in random_init() crypto: drbg - make reseeding from get_random_bytes() synchronous crypto: drbg - always try to free Jitter RNG instance crypto: drbg - move dynamic ->reseed_threshold adjustments to __drbg_seed() crypto: drbg - track whether DRBG was seeded with !rng_is_initialized() crypto: drbg - prepare for more fine-grained tracking of seeding state crypto: drbg - always seeded with SP800-90B compliant noise source Revert "random: use static branch for crng_ready()" random: check for signals after page of pool writes random: wire up fops->splice_{read,write}_iter() random: convert to using fops->write_iter() random: convert to using fops->read_iter() random: unify batched entropy implementations random: move randomize_page() into mm where it belongs random: move initialization functions out of hot pages random: make consistent use of buf and len random: use proper return types on get_random_{int,long}_wait() random: remove extern from functions in header random: use static branch for crng_ready() random: credit architectural init the exact amount random: handle latent entropy and command line from random_init() random: use proper jiffies comparison macro random: remove ratelimiting for in-kernel unseeded randomness random: move initialization out of reseeding hot path random: avoid initializing twice in credit race random: use symbolic constants for crng_init states siphash: use one source of truth for siphash permutations random: help compiler out with fast_mix() by using simpler arguments random: do not use input pool from hard IRQs random: order timer entropy functions below interrupt functions random: do not pretend to handle premature next security model random: use first 128 bits of input as fast init random: do not use batches when !crng_ready() random: insist on random_get_entropy() existing in order to simplify xtensa: use fallback for random_get_entropy() instead of zero sparc: use fallback for random_get_entropy() instead of zero um: use fallback for random_get_entropy() instead of zero x86/tsc: Use fallback for random_get_entropy() instead of zero nios2: use fallback for random_get_entropy() instead of zero arm: use fallback for random_get_entropy() instead of zero mips: use fallback for random_get_entropy() instead of just c0 random m68k: use fallback for random_get_entropy() instead of zero timekeeping: Add raw clock fallback for random_get_entropy() powerpc: define get_cycles macro for arch-override alpha: define get_cycles macro for arch-override parisc: define get_cycles macro for arch-override s390: define get_cycles macro for arch-override ia64: define get_cycles macro for arch-override init: call time_init() before rand_initialize() random: fix sysctl documentation nits random: document crng_fast_key_erasure() destination possibility random: make random_get_entropy() return an unsigned long random: allow partial reads if later user copies fail random: check for signals every PAGE_SIZE chunk of /dev/[u]random random: check for signal_pending() outside of need_resched() check random: do not allow user to keep crng key around on stack random: do not split fast init input in add_hwgenerator_randomness() random: mix build-time latent entropy into pool at init random: re-add removed comment about get_random_{u32,u64} reseeding random: treat bootloader trust toggle the same way as cpu trust toggle random: skip fast_init if hwrng provides large chunk of entropy random: check for signal and try earlier when generating entropy random: reseed more often immediately after booting random: make consistent usage of crng_ready() random: use SipHash as interrupt entropy accumulator random: replace custom notifier chain with standard one random: don't let 644 read-only sysctls be written to random: give sysctl_random_min_urandom_seed a more sensible value random: do crng pre-init loading in worker rather than irq random: unify cycles_t and jiffies usage and types random: cleanup UUID handling random: only wake up writers after zap if threshold was passed random: round-robin registers as ulong, not u32 random: clear fast pool, crng, and batches in cpuhp bring up random: pull add_hwgenerator_randomness() declaration into random.h random: check for crng_init == 0 in add_device_randomness() random: unify early init crng load accounting random: do not take pool spinlock at boot random: defer fast pool mixing to worker random: rewrite header introductory comment random: group sysctl functions random: group userspace read/write functions random: group entropy collection functions random: group entropy extraction functions random: group crng functions random: group initialization wait functions random: remove whitespace and reorder includes random: remove useless header comment random: introduce drain_entropy() helper to declutter crng_reseed() random: deobfuscate irq u32/u64 contributions random: add proper SPDX header random: remove unused tracepoints random: remove ifdef'd out interrupt bench random: tie batched entropy generation to base_crng generation random: fix locking for crng_init in crng_reseed() random: zero buffer after reading entropy from userspace random: remove outdated INT_MAX >> 6 check in urandom_read() random: make more consistent use of integer types random: use hash function for crng_slow_load() random: use simpler fast key erasure flow on per-cpu keys random: absorb fast pool into input pool after fast load random: do not xor RDRAND when writing into /dev/random random: ensure early RDSEED goes through mixer on init random: inline leaves of rand_initialize() random: get rid of secondary crngs random: use RDSEED instead of RDRAND in entropy extraction random: fix locking in crng_fast_load() random: remove batched entropy locking random: remove use_input_pool parameter from crng_reseed() random: make credit_entropy_bits() always safe random: always wake up entropy writers after extraction random: use linear min-entropy accumulation crediting random: simplify entropy debiting random: use computational hash for entropy extraction random: only call crng_finalize_init() for primary_crng random: access primary_pool directly rather than through pointer random: continually use hwgenerator randomness random: simplify arithmetic function flow in account() random: selectively clang-format where it makes sense random: access input_pool_data directly rather than through pointer random: cleanup fractional entropy shift constants random: prepend remaining pool constants with POOL_ random: de-duplicate INPUT_POOL constants random: remove unused OUTPUT_POOL constants random: rather than entropy_store abstraction, use global random: remove unused extract_entropy() reserved argument random: remove incomplete last_data logic random: cleanup integer types random: cleanup poolinfo abstraction random: fix typo in comments random: don't reset crng_init_cnt on urandom_read() random: avoid superfluous call to RDRAND in CRNG extraction random: early initialization of ChaCha constants random: initialize ChaCha20 constants with correct endianness random: use IS_ENABLED(CONFIG_NUMA) instead of ifdefs random: harmonize "crng init done" messages random: mix bootloader randomness into pool random: do not re-init if crng_reseed completes before primary init random: do not sign extend bytes for rotation when mixing random: use BLAKE2s instead of SHA1 in extraction random: remove unused irq_flags argument from add_interrupt_randomness() random: document add_hwgenerator_randomness() with other input functions crypto: blake2s - adjust include guard naming crypto: blake2s - include <linux/bug.h> instead of <asm/bug.h> MAINTAINERS: co-maintain random.c random: remove dead code left over from blocking pool random: avoid arch_get_random_seed_long() when collecting IRQ randomness random: add arch_get_random_*long_early() powerpc: Use bool in archrandom.h linux/random.h: Mark CONFIG_ARCH_RANDOM functions __must_check linux/random.h: Use false with bool linux/random.h: Remove arch_has_random, arch_has_random_seed s390: Remove arch_has_random, arch_has_random_seed powerpc: Remove arch_has_random, arch_has_random_seed x86: Remove arch_has_random, arch_has_random_seed random: avoid warnings for !CONFIG_NUMA builds random: split primary/secondary crng init paths random: remove some dead code of poolinfo random: fix typo in add_timer_randomness() random: Add and use pr_fmt() random: convert to ENTROPY_BITS for better code readability random: remove unnecessary unlikely() random: remove kernel.random.read_wakeup_threshold random: delete code to pull data into pools random: remove the blocking pool random: make /dev/random be almost like /dev/urandom random: ignore GRND_RANDOM in getentropy(2) random: add GRND_INSECURE to return best-effort non-cryptographic bytes random: Add a urandom_read_nowait() for random APIs that don't warn random: Don't wake crng_init_wait when crng_init == 1 random: don't forget compat_ioctl on urandom compat_ioctl: remove /dev/random commands lib/crypto: sha1: re-roll loops to reduce code size lib/crypto: blake2s: move hmac construction into wireguard crypto: blake2s - generic C library implementation and selftest nfc: st21nfca: fix incorrect sizing calculations in EVT_TRANSACTION bpf: Fix incorrect memory charge cost calculation in stack_map_alloc() 9p: missing chunk of "fs/9p: Don't update file type when updating file attributes" Revert "ext4: fix use-after-free in ext4_rename_dir_prepare" Revert "ext4: verify dir block before splitting it" Linux 5.4.199 x86/speculation/mmio: Print SMT warning KVM: x86/speculation: Disable Fill buffer clear within guests x86/speculation/mmio: Reuse SRBDS mitigation for SBDS x86/speculation/srbds: Update SRBDS mitigation selection x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data x86/speculation/mmio: Enable CPU Fill buffer clearing on idle x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data x86/speculation: Add a common function for MD_CLEAR mitigation update x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug Documentation: Add documentation for Processor MMIO Stale Data x86/cpu: Add another Alder Lake CPU to the Intel family x86/cpu: Add Lakefield, Alder Lake and Rocket Lake models to the to Intel CPU family x86/cpu: Add Jasper Lake to Intel family cpu/speculation: Add prototype for cpu_show_srbds() Linux 5.4.198 tcp: fix tcp_mtup_probe_success vs wrong snd_cwnd mtd: cfi_cmdset_0002: Use chip_ready() for write on S29GL064N md/raid0: Ignore RAID0 layout if the second zone has only one device powerpc/32: Fix overread/overwrite of thread_struct via ptrace Input: bcm5974 - set missing URB_NO_TRANSFER_DMA_MAP urb flag ixgbe: fix unexpected VLAN Rx in promisc mode on VF ixgbe: fix bcast packets Rx on VF after promisc removal nfc: st21nfca: fix memory leaks in EVT_TRANSACTION handling nfc: st21nfca: fix incorrect validating logic in EVT_TRANSACTION mmc: block: Fix CQE recovery reset success ata: libata-transport: fix {dma|pio|xfer}_mode sysfs files cifs: return errors during session setup during reconnects ALSA: hda/conexant - Fix loopback issue with CX20632 scripts/gdb: change kernel config dumping method vringh: Fix loop descriptors check in the indirect cases nodemask: Fix return values to be unsigned cifs: version operations for smb20 unneeded when legacy support disabled s390/gmap: voluntarily schedule during key setting nbd: fix io hung while disconnecting device nbd: fix race between nbd_alloc_config() and module removal nbd: call genl_unregister_family() first in nbd_cleanup() x86/cpu: Elide KCSAN for cpu_has() and friends modpost: fix undefined behavior of is_arm_mapping_symbol() drm/radeon: fix a possible null pointer dereference ceph: allow ceph.dir.rctime xattr to be updatable Revert "net: af_key: add check for pfkey_broadcast in function pfkey_process" scsi: myrb: Fix up null pointer access on myrb_cleanup() md: protect md_unregister_thread from reentrancy watchdog: wdat_wdt: Stop watchdog when rebooting the system kernfs: Separate kernfs_pr_cont_buf and rename_lock. serial: msm_serial: disable interrupts in __msm_console_write() staging: rtl8712: fix uninit-value in r871xu_drv_init() staging: rtl8712: fix uninit-value in usb_read8() and friends clocksource/drivers/sp804: Avoid error on multiple instances extcon: Modify extcon device to be created after driver data is set misc: rtsx: set NULL intfdata when probe fails usb: dwc2: gadget: don't reset gadget's driver->bus USB: hcd-pci: Fully suspend across freeze/thaw cycle drivers: usb: host: Fix deadlock in oxu_bus_suspend() drivers: tty: serial: Fix deadlock in sa1100_set_termios() USB: host: isp116x: check return value after calling platform_get_resource() drivers: staging: rtl8192e: Fix deadlock in rtllib_beacons_stop() drivers: staging: rtl8192u: Fix deadlock in ieee80211_beacons_stop() tty: Fix a possible resource leak in icom_probe tty: synclink_gt: Fix null-pointer-dereference in slgt_clean() lkdtm/usercopy: Expand size of "out of frame" object iio: st_sensors: Add a local lock for protecting odr iio: dummy: iio_simple_dummy: check the return value of kstrdup() drm: imx: fix compiler warning with gcc-12 net: altera: Fix refcount leak in altera_tse_mdio_create ip_gre: test csum_start instead of transport header net/mlx5: fs, fail conflicting actions net/mlx5: Rearm the FW tracer after each tracer event net: ipv6: unexport __init-annotated seg6_hmac_init() net: xfrm: unexport __init-annotated xfrm4_protocol_init() net: mdio: unexport __init-annotated mdio_bus_init() SUNRPC: Fix the calculation of xdr->end in xdr_get_next_encode_buffer() net/mlx4_en: Fix wrong return value on ioctl EEPROM query failure net: dsa: lantiq_gswip: Fix refcount leak in gswip_gphy_fw_list bpf, arm64: Clear prog->jited_len along prog->jited af_unix: Fix a data-race in unix_dgram_peer_wake_me(). xen: unexport __init-annotated xen_xlate_map_ballooned_pages() netfilter: nf_tables: memleak flow rule from commit path ata: pata_octeon_cf: Fix refcount leak in octeon_cf_probe netfilter: nat: really support inet nat without l3 address xprtrdma: treat all calls not a bcall when bc_serv is NULL video: fbdev: pxa3xx-gcu: release the resources correctly in pxa3xx_gcu_probe/remove() NFSv4: Don't hold the layoutget locks across multiple RPC calls dmaengine: zynqmp_dma: In struct zynqmp_dma_chan fix desc_size data type m68knommu: fix undefined reference to `_init_sp' m68knommu: set ZERO_PAGE() to the allocated zeroed page i2c: cadence: Increase timeout per message if necessary f2fs: remove WARN_ON in f2fs_is_valid_blkaddr tracing: Avoid adding tracer option before update_tracer_options tracing: Fix sleeping function called from invalid context on RT kernel mips: cpc: Fix refcount leak in mips_cpc_default_phys_base perf c2c: Fix sorting in percent_rmt_hitm_cmp() tipc: check attribute length for bearer name afs: Fix infinite loop found by xfstest generic/676 tcp: tcp_rtx_synack() can be called from process context net: sched: add barrier to fix packet stuck problem for lockless qdisc net/mlx5e: Update netdev features after changing XDP state net/mlx5: Don't use already freed action pointer nfp: only report pause frame configuration for physical device ubi: ubi_create_volume: Fix use-after-free when volume creation failed jffs2: fix memory leak in jffs2_do_fill_super modpost: fix removing numeric suffixes net: dsa: mv88e6xxx: Fix refcount leak in mv88e6xxx_mdios_register net: ethernet: mtk_eth_soc: out of bounds read in mtk_hwlro_get_fdir_entry() net: sched: fixed barrier to prevent skbuff sticking in qdisc backlog s390/crypto: fix scatterwalk_unmap() callers in AES-GCM clocksource/drivers/oxnas-rps: Fix irq_of_parse_and_map() return value ASoC: fsl_sai: Fix FSL_SAI_xDR/xFR definition watchdog: ts4800_wdt: Fix refcount leak in ts4800_wdt_probe driver core: fix deadlock in __device_attach driver: base: fix UAF when driver_attach failed bus: ti-sysc: Fix warnings for unbind for serial firmware: dmi-sysfs: Fix memory leak in dmi_sysfs_register_handle serial: stm32-usart: Correct CSIZE, bits, and parity serial: st-asc: Sanitize CSIZE and correct PARENB for CS7 serial: sifive: Sanitize CSIZE and c_iflag serial: sh-sci: Don't allow CS5-6 serial: txx9: Don't allow CS5-6 serial: rda-uart: Don't allow CS5-6 serial: digicolor-usart: Don't allow CS5-6 serial: 8250_fintek: Check SER_RS485_RTS_* only with RS485 serial: meson: acquire port->lock in startup() rtc: mt6397: check return value after calling platform_get_resource() clocksource/drivers/riscv: Events are stopped during CPU suspend soc: rockchip: Fix refcount leak in rockchip_grf_init coresight: cpu-debug: Replace mutex with mutex_trylock on panic notifier serial: sifive: Report actual baud base rather than fixed 115200 phy: qcom-qmp: fix pipe-clock imbalance on power-on failure rpmsg: qcom_smd: Fix returning 0 if irq_of_parse_and_map() fails iio: adc: sc27xx: Fine tune the scale calibration values iio: adc: sc27xx: fix read big scale voltage not right iio: adc: stmpe-adc: Fix wait_for_completion_timeout return value check firmware: stratix10-svc: fix a missing check on list iterator usb: dwc3: pci: Fix pm_runtime_get_sync() error checking rpmsg: qcom_smd: Fix irq_of_parse_and_map() return value pwm: lp3943: Fix duty calculation in case period was clamped staging: fieldbus: Fix the error handling path in anybuss_host_common_probe() usb: musb: Fix missing of_node_put() in omap2430_probe USB: storage: karma: fix rio_karma_init return usb: usbip: add missing device lock on tweak configuration cmd usb: usbip: fix a refcount leak in stub_probe() tty: serial: fsl_lpuart: fix potential bug when using both of_alias_get_id and ida_simple_get tty: serial: owl: Fix missing clk_disable_unprepare() in owl_uart_probe tty: goldfish: Use tty_port_destroy() to destroy port iio: adc: ad7124: Remove shift from scan_type staging: greybus: codecs: fix type confusion of list iterator variable pcmcia: db1xxx_ss: restrict to MIPS_DB1XXX boards md: bcache: check the return value of kzalloc() in detached_dev_do_request() block: fix bio_clone_blkg_association() to associate with proper blkcg_gq bfq: Make sure bfqg for which we are queueing requests is online bfq: Get rid of __bio_blkcg() usage bfq: Remove pointless bfq_init_rq() calls bfq: Drop pointless unlock-lock pair bfq: Avoid merging queues with different parents MIPS: IP27: Remove incorrect `cpu_has_fpu' override RDMA/rxe: Generate a completion for unsupported/invalid opcode Kconfig: add config option for asm goto w/ outputs phy: qcom-qmp: fix reset-controller leak on probe errors blk-iolatency: Fix inflight count imbalances and IO hangs on offline dt-bindings: gpio: altera: correct interrupt-cells docs/conf.py: Cope with removal of language=None in Sphinx 5.0.0 ARM: pxa: maybe fix gpio lookup tables phy: qcom-qmp: fix struct clk leak on probe errors arm64: dts: qcom: ipq8074: fix the sleep clock frequency gma500: fix an incorrect NULL check on list iterator tilcdc: tilcdc_external: fix an incorrect NULL check on list iterator serial: pch: don't overwrite xmit->buf[0] by x_char carl9170: tx: fix an incorrect use of list iterator ASoC: rt5514: Fix event generation for "DSP Voice Wake Up" control rtl818x: Prevent using not initialized queues hugetlb: fix huge_pmd_unshare address update nodemask.h: fix compilation error with GCC12 iommu/msm: Fix an incorrect NULL check on list iterator um: Fix out-of-bounds read in LDT setup um: chan_user: Fix winch_tramp() return value mac80211: upgrade passive scan to active scan on DFS channels after beacon rx irqchip: irq-xtensa-mx: fix initial IRQ affinity irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375, A38x, A39x RDMA/hfi1: Fix potential integer multiplication overflow errors Kconfig: Add option for asm goto w/ tied outputs to workaround clang-13 bug media: coda: Add more H264 levels for CODA960 media: coda: Fix reported H264 profile mtd: cfi_cmdset_0002: Move and rename chip_check/chip_ready/chip_good_for_write md: fix an incorrect NULL check in md_reload_sb md: fix an incorrect NULL check in does_sb_need_changing drm/bridge: analogix_dp: Grab runtime PM reference for DP-AUX drm/nouveau/clk: Fix an incorrect NULL check on list iterator drm/etnaviv: check for reaped mapping in etnaviv_iommu_unmap_gem drm/amdgpu/cs: make commands with 0 chunks illegal behaviour. scsi: ufs: qcom: Add a readl() to make sure ref_clk gets enabled scsi: dc395x: Fix a missing check on list iterator ocfs2: dlmfs: fix error handling of user_dlm_destroy_lock dlm: fix missing lkb refcount handling dlm: fix plock invalid read mm, compaction: fast_find_migrateblock() should return pfn in the target zone PCI: qcom: Fix unbalanced PHY init on probe errors PCI: qcom: Fix runtime PM imbalance on probe errors PCI/PM: Fix bridge_d3_blacklist[] Elo i2 overwrite of Gigabyte X299 tracing: Fix potential double free in create_var_ref() ACPI: property: Release subnode properties with data nodes ext4: avoid cycles in directory h-tree ext4: verify dir block before splitting it ext4: fix bug_on in ext4_writepages ext4: fix warning in ext4_handle_inode_extension ext4: fix use-after-free in ext4_rename_dir_prepare netfilter: nf_tables: disallow non-stateful expression in sets earlier bfq: Track whether bfq_group is still online bfq: Update cgroup information before merging bio bfq: Split shared queues on move between cgroups efi: Do not import certificates from UEFI Secure Boot for T2 Macs fs-writeback: writeback_sb_inodes：Recalculate 'wrote' according skipped pages iwlwifi: mvm: fix assert 1F04 upon reconfig wifi: mac80211: fix use-after-free in chanctx code f2fs: fix fallocate to use file_modified to update permissions consistently f2fs: don't need inode lock for system hidden quota f2fs: fix deadloop in foreground GC f2fs: fix to clear dirty inode in f2fs_evict_inode() f2fs: fix to do sanity check on block address in f2fs_do_zero_range() f2fs: fix to avoid f2fs_bug_on() in dec_valid_node_count() perf jevents: Fix event syntax error caused by ExtSel perf c2c: Use stdio interface if slang is not supported iommu/amd: Increase timeout waiting for GA log enablement dmaengine: stm32-mdma: remove GISR1 register video: fbdev: clcdfb: Fix refcount leak in clcdfb_of_vram_setup NFSv4/pNFS: Do not fail I/O when we fail to allocate the pNFS layout NFS: Don't report errors from nfs_pageio_complete() more than once NFS: Do not report flush errors in nfs_write_end() NFS: Do not report EINTR/ERESTARTSYS as mapping errors i2c: at91: Initialize dma_buf in at91_twi_xfer() i2c: at91: use dma safe buffers iommu/mediatek: Add list_del in mtk_iommu_remove f2fs: fix dereference of stale list iterator after loop body Input: stmfts - do not leave device disabled in stmfts_input_open RDMA/hfi1: Prevent use of lock before it is initialized mailbox: forward the hrtimer if not queued and under a lock mfd: davinci_voicecodec: Fix possible null-ptr-deref davinci_vc_probe() powerpc/fsl_rio: Fix refcount leak in fsl_rio_setup macintosh: via-pmu and via-cuda need RTC_LIB powerpc/perf: Fix the threshold compare group constraint for power9 powerpc/64: Only WARN if __pa()/__va() called with bad addresses Input: sparcspkr - fix refcount leak in bbc_beep_probe crypto: cryptd - Protect per-CPU resource by disabling BH. tty: fix deadlock caused by calling printk() under tty_port->lock PCI: imx6: Fix PERST# start-up sequence ipc/mqueue: use get_tree_nodev() in mqueue_get_tree() proc: fix dentry/inode overinstantiating under /proc/${pid}/net powerpc/4xx/cpm: Fix return value of __setup() handler powerpc/idle: Fix return value of __setup() handler powerpc/8xx: export 'cpm_setbrg' for modules dax: fix cache flush on PMD-mapped pages drivers/base/node.c: fix compaction sysfs file leak pinctrl: mvebu: Fix irq_of_parse_and_map() return value nvdimm: Allow overwrite in the presence of disabled dimms firmware: arm_scmi: Fix list protocols enumeration in the base protocol scsi: fcoe: Fix Wstringop-overflow warnings in fcoe_wwn_from_mac() mfd: ipaq-micro: Fix error check return value of platform_get_irq() powerpc/fadump: fix PT_LOAD segment for boot memory area arm: mediatek: select arch timer for mt7629 crypto: marvell/cesa - ECB does not IV misc: ocxl: fix possible double free in ocxl_file_register_afu ARM: dts: bcm2835-rpi-b: Fix GPIO line names ARM: dts: bcm2837-rpi-3-b-plus: Fix GPIO line name of power LED ARM: dts: bcm2837-rpi-cm3-io3: Fix GPIO line names for SMPS I2C ARM: dts: bcm2835-rpi-zero-w: Fix GPIO line name for Wifi/BT can: xilinx_can: mark bit timing constants as const KVM: nVMX: Leave most VM-Exit info fields unmodified on failed VM-Entry PCI: rockchip: Fix find_first_zero_bit() limit PCI: cadence: Fix find_first_zero_bit() limit soc: qcom: smsm: Fix missing of_node_put() in smsm_parse_ipc soc: qcom: smp2p: Fix missing of_node_put() in smp2p_parse_ipc ARM: dts: suniv: F1C100: fix watchdog compatible arm64: dts: rockchip: Move drive-impedance-ohm to emmc phy on rk3399 net/smc: postpone sk_refcnt increment in connect() rxrpc: Fix decision on when to generate an IDLE ACK rxrpc: Don't let ack.previousPacket regress rxrpc: Fix overlapping ACK accounting rxrpc: Don't try to resend the request if we're receiving the reply rxrpc: Fix listen() setting the bar too high for the prealloc rings NFC: hci: fix sleep in atomic context bugs in nfc_hci_hcp_message_tx ASoC: wm2000: fix missing clk_disable_unprepare() on error in wm2000_anc_transition() thermal/drivers/broadcom: Fix potential NULL dereference in sr_thermal_probe drm: msm: fix possible memory leak in mdp5_crtc_cursor_set() drm/msm/a6xx: Fix refcount leak in a6xx_gpu_init ext4: reject the 'commit' option on ext2 filesystems media: ov7670: remove ov7670_power_off from ov7670_remove sctp: read sk->sk_bound_dev_if once in sctp_rcv() m68k: math-emu: Fix dependencies of math emulation support Bluetooth: fix dangling sco_conn and use-after-free in sco_sock_timeout media: vsp1: Fix offset calculation for plane cropping media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init media: exynos4-is: Change clk_disable to clk_disable_unprepare media: st-delta: Fix PM disable depth imbalance in delta_probe media: aspeed: Fix an error handling path in aspeed_video_probe() scripts/faddr2line: Fix overlapping text section failures regulator: pfuze100: Fix refcount leak in pfuze_parse_regulators_dt ASoC: mxs-saif: Fix refcount leak in mxs_saif_probe ASoC: fsl: Fix refcount leak in imx_sgtl5000_probe perf/amd/ibs: Use interrupt regs ip for stack unwinding Revert "cpufreq: Fix possible race in cpufreq online error path" iomap: iomap_write_failed fix media: uvcvideo: Fix missing check to determine if element is found in list drm/msm: return an error pointer in msm_gem_prime_get_sg_table() drm/msm/mdp5: Return error code in mdp5_mixer_release when deadlock is detected drm/msm/mdp5: Return error code in mdp5_pipe_release when deadlock is detected regulator: core: Fix enable_count imbalance with EXCLUSIVE_GET x86/mm: Cleanup the control_va_addr_alignment() __setup handler irqchip/aspeed-i2c-ic: Fix irq_of_parse_and_map() return value irqchip/exiu: Fix acknowledgment of edge triggered interrupts x86: Fix return value of __setup handlers virtio_blk: fix the discard_granularity and discard_alignment queue limits drm/rockchip: vop: fix possible null-ptr-deref in vop_bind() drm/msm/hdmi: fix error check return value of irq_of_parse_and_map() drm/msm/hdmi: check return value after calling platform_get_resource_byname() drm/msm/dsi: fix error checks and return values for DSI xmit functions drm/msm/disp/dpu1: set vbif hw config to NULL to avoid use after memory free during pm runtime resume perf tools: Add missing headers needed by util/data.h ASoC: rk3328: fix disabling mclk on pclk probe failure x86/speculation: Add missing prototype for unpriv_ebpf_notify() x86/pm: Fix false positive kmemleak report in msr_build_context() scsi: ufs: core: Exclude UECxx from SFR dump list of: overlay: do not break notify on NOTIFY_{OK|STOP} fsnotify: fix wrong lockdep annotations inotify: show inotify mask flags in proc fdinfo ath9k_htc: fix potential out of bounds access with invalid rxstatus->rs_keyix cpufreq: Fix possible race in cpufreq online error path spi: img-spfi: Fix pm_runtime_get_sync() error checking sched/fair: Fix cfs_rq_clock_pelt() for throttled cfs_rq drm/bridge: Fix error handling in analogix_dp_probe HID: elan: Fix potential double free in elan_input_configured HID: hid-led: fix maximum brightness for Dream Cheeky drbd: fix duplicate array initializer efi: Add missing prototype for efi_capsule_setup_info NFC: NULL out the dev->rfkill to prevent UAF spi: spi-ti-qspi: Fix return value handling of wait_for_completion_timeout drm: mali-dp: potential dereference of null pointer drm/komeda: Fix an undefined behavior bug in komeda_plane_add() nl80211: show SSID for P2P_GO interfaces bpf: Fix excessive memory allocation in stack_map_alloc() drm/vc4: txp: Force alpha to be 0xff if it's disabled drm/vc4: txp: Don't set TXP_VSTART_AT_EOF drm/mediatek: Fix mtk_cec_mask() x86/delay: Fix the wrong asm constraint in delay_loop() ASoC: mediatek: Fix missing of_node_put in mt2701_wm8960_machine_probe ASoC: mediatek: Fix error handling in mt8173_max98090_dev_probe drm/bridge: adv7511: clean up CEC adapter when probe fails drm/edid: fix invalid EDID extension block filtering ath9k: fix ar9003_get_eepmisc drm: fix EDID struct for old ARM OABI format RDMA/hfi1: Prevent panic when SDMA is disabled powerpc/iommu: Add missing of_node_put in iommu_init_early_dart macintosh/via-pmu: Fix build failure when CONFIG_INPUT is disabled powerpc/powernv: fix missing of_node_put in uv_init() powerpc/xics: fix refcount leak in icp_opal_init() tracing: incorrect isolate_mote_t cast in mm_vmscan_lru_isolate PCI: Avoid pci_dev_lock() AB/BA deadlock with sriov_numvfs_store() ARM: hisi: Add missing of_node_put after of_find_compatible_node ARM: dts: exynos: add atmel,24c128 fallback to Samsung EEPROM ARM: versatile: Add missing of_node_put in dcscb_init fat: add ratelimit to fat*_ent_bread() powerpc/fadump: Fix fadump to work with a different endian capture kernel ARM: OMAP1: clock: Fix UART rate reporting algorithm fs: jfs: fix possible NULL pointer dereference in dbFree() PM / devfreq: rk3399_dmc: Disable edev on remove() ARM: dts: ox820: align interrupt controller node name with dtschema IB/rdmavt: add missing locks in rvt_ruc_loopback selftests/bpf: fix btf_dump/btf_dump due to recent clang change eth: tg3: silence the GCC 12 array-bounds warning rxrpc: Return an error to sendmsg if call failed hwmon: Make chip parameter for with_info API mandatory ASoC: max98357a: remove dependency on GPIOLIB media: exynos4-is: Fix compile warning net: phy: micrel: Allow probing without .driver_data nbd: Fix hung on disconnect request if socket is closed before ASoC: rt5645: Fix errorenous cleanup order nvme-pci: fix a NULL pointer dereference in nvme_alloc_admin_tags openrisc: start CPU timer early in boot media: cec-adap.c: fix is_configuring state media: coda: limit frame interval enumeration to supported encoder frame sizes rtlwifi: Use pr_warn instead of WARN_ONCE ipmi: Fix pr_fmt to avoid compilation issues ipmi:ssif: Check for NULL msg when handling events and messages ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default dma-debug: change allocation mode from GFP_NOWAIT to GFP_ATIOMIC spi: stm32-qspi: Fix wait_cmd timeout in APM mode s390/preempt: disable __preempt_count_add() optimization for PROFILE_ALL_BRANCHES ASoC: tscs454: Add endianness flag in snd_soc_component_driver HID: bigben: fix slab-out-of-bounds Write in bigben_probe drm/amdgpu/ucode: Remove firmware load type check in amdgpu_ucode_free_bo mlxsw: spectrum_dcb: Do not warn about priority changes ASoC: dapm: Don't fold register value changes into notifications net/mlx5: fs, delete the FTE when there are no rules attached to it ipv6: Don't send rs packets to the interface of ARPHRD_TUNNEL drm: msm: fix error check return value of irq_of_parse_and_map() arm64: compat: Do not treat syscall number as ESR_ELx for a bad syscall drm/amd/pm: fix the compile warning drm/plane: Move range check for format_count earlier scsi: megaraid: Fix error check return value of register_chrdev() mmc: jz4740: Apply DMA engine limits to maximum segment size md/bitmap: don't set sb values if can't pass sanity check media: cx25821: Fix the warning when removing the module media: pci: cx23885: Fix the error handling in cx23885_initdev() media: venus: hfi: avoid null dereference in deinit ath9k: fix QCA9561 PA bias level drm/amd/pm: fix double free in si_parse_power_table() tools/power turbostat: fix ICX DRAM power numbers spi: spi-rspi: Remove setting {src,dst}_{addr,addr_width} based on DMA direction ALSA: jack: Access input_dev under mutex drm/komeda: return early if drm_universal_plane_init() fails. ACPICA: Avoid cache flush inside virtual machines fbcon: Consistently protect deferred_takeover with console_lock() ipv6: fix locking issues with loops over idev->addr_list ipw2x00: Fix potential NULL dereference in libipw_xmit() b43: Fix assigning negative value to unsigned variable b43legacy: Fix assigning negative value to unsigned variable mwifiex: add mutex lock for call in mwifiex_dfs_chan_sw_work_queue drm/virtio: fix NULL pointer dereference in virtio_gpu_conn_get_modes btrfs: repair super block num_devices automatically btrfs: add "0x" prefix for unsupported optional features ptrace: Reimplement PTRACE_KILL by always sending SIGKILL ptrace/xtensa: Replace PT_SINGLESTEP with TIF_SINGLESTEP ptrace/um: Replace PT_DTRACE with TIF_SINGLESTEP perf/x86/intel: Fix event constraints for ICL usb: core: hcd: Add support for deferring roothub registration USB: new quirk for Dell Gen 2 devices USB: serial: option: add Quectel BG95 modem ALSA: hda/realtek - Fix microphone noise on ASUS TUF B550M-PLUS binfmt_flat: do not stop relocating GOT entries prematurely on riscv Conflicts: Documentation/devicetree/bindings Documentation/devicetree/bindings/dma/allwinner,sun50i-a64-dma.yaml Documentation/devicetree/bindings/gpio/gpio-altera.txt drivers/char/Kconfig drivers/mmc/core/block.c kernel/sysctl.c Change-Id: I87246d84461db23650f0689a3f65dcd2ccba6809 Signed-off-by: Srinivasarao Pathipati <quic_c_spathi@quicinc.com>	2022-10-14 12:09:01 +05:30
Srinivasarao Pathipati	630e7df8c5	Merge android11-5.4.197+ (3970bc6) into msm-5.4 ... * refs/heads/tmp-3970bc6: UPSTREAM: Revert "net: af_key: add check for pfkey_broadcast in function pfkey_process" FROMGIT: arm64: fix oops in concurrently setting insn_emulation sysctls ANDROID: abi_gki_aarch64_qcom: Add vmemdup_user to qcom symbol list ANDROID: GKI: update Sony KMI symbol list UPSTREAM: mm: fix misplaced unlock_page in do_wp_page() BACKPORT: mm: do_wp_page() simplification UPSTREAM: mm/ksm: Remove reuse_ksm_page() BACKPORT: ALSA: pcm: Fix races among concurrent prealloc proc writes BACKPORT: ALSA: pcm: Fix races among concurrent prepare and hw_params/hw_free calls BACKPORT: ALSA: pcm: Fix races among concurrent read/write and buffer changes ANDROID: Fix up abi issue with struct snd_pcm_runtime BACKPORT: ALSA: pcm: Fix races among concurrent hw_params and hw_free calls BACKPORT: nfc: nfcmrvl: main: reorder destructive operations in nfcmrvl_nci_unregister_dev to avoid bugs Linux 5.4.197 bpf: Enlarge offset check value to INT_MAX in bpf_skb_{load,store}_bytes NFSD: Fix possible sleep during nfsd4_release_lockowner() NFS: Memory allocation failures are not server fatal errors docs: submitting-patches: Fix crossref to 'The canonical patch format' tpm: ibmvtpm: Correct the return value in tpm_ibmvtpm_probe() tpm: Fix buffer access in tpm2_get_tpm_pt() HID: multitouch: Add support for Google Whiskers Touchpad raid5: introduce MD_BROKEN dm verity: set DM_TARGET_IMMUTABLE feature flag dm stats: add cond_resched when looping over entries dm crypt: make printing of the key constant-time dm integrity: fix error code in dm_integrity_ctr() zsmalloc: fix races between asynchronous zspage free and page migration crypto: ecrdsa - Fix incorrect use of vli_cmp netfilter: conntrack: re-fetch conntrack after insertion exec: Force single empty string when argv is empty drm/i915: Fix -Wstringop-overflow warning in call to intel_read_wm_latency() cfg80211: set custom regdomain after wiphy registration assoc_array: Fix BUG_ON during garbage collect drivers: i2c: thunderx: Allow driver to work with ACPI defined TWSI controllers i2c: ismt: Provide a DMA buffer for Interrupt Cause Logging net: ftgmac100: Disable hardware checksum on AST2600 net: af_key: check encryption module availability consistency pinctrl: sunxi: fix f1c100s uart2 function ACPI: sysfs: Fix BERT error region memory mapping ACPI: sysfs: Make sparse happy about address space in use media: vim2m: initialize the media device earlier media: vim2m: Register video device after setting up internals secure_seq: use the 64 bits of the siphash for port offset calculation tcp: change source port randomizarion at connect() time Input: goodix - fix spurious key release events staging: rtl8723bs: prevent ->Ssid overflow in rtw_wx_set_scan() x86/pci/xen: Disable PCI/MSI[-X] masking for XEN_HVM guests lockdown: also lock down previous kgdb use Linux 5.4.196 afs: Fix afs_getattr() to refetch file status if callback break occurred i2c: mt7621: fix missing clk_disable_unprepare() on error in mtk_i2c_probe() x86/xen: Mark cpu_bringup_and_idle() as dead_end_function x86/xen: fix booting 32-bit pv guest Reinstate some of "swiotlb: rework "fix info leak with DMA_FROM_DEVICE"" ARM: dts: imx7: Use audio_mclk_post_div instead audio_mclk_root_clk firmware_loader: use kernel credentials when reading firmware net: stmmac: disable Split Header (SPH) for Intel platforms block: return ELEVATOR_DISCARD_MERGE if possible Input: ili210x - fix reset timing net: atlantic: verify hw_head_ lies within TX buffer ring net: stmmac: fix missing pci_disable_device() on error in stmmac_pci_probe() ethernet: tulip: fix missing pci_disable_device() on error in tulip_init_one() selftests: add ping test with ping_group_range tuned mac80211: fix rx reordering with non explicit / psmp ack policy scsi: qla2xxx: Fix missed DMA unmap for aborted commands perf bench numa: Address compiler error on s390 gpio: mvebu/pwm: Refuse requests with inverted polarity gpio: gpio-vf610: do not touch other bits when set the target bit net: bridge: Clear offload_fwd_mark when passing frame up bridge interface. igb: skip phy status check where unavailable ARM: 9197/1: spectre-bhb: fix loop8 sequence for Thumb2 ARM: 9196/1: spectre-bhb: enable for Cortex-A15 net: af_key: add check for pfkey_broadcast in function pfkey_process net/mlx5e: Properly block LRO when XDP is enabled NFC: nci: fix sleep in atomic context bugs caused by nci_skb_alloc net/qla3xxx: Fix a test in ql_reset_work() clk: at91: generated: consider range when calculating best rate ice: fix possible under reporting of ethtool Tx and Rx statistics net: vmxnet3: fix possible NULL pointer dereference in vmxnet3_rq_cleanup() net: vmxnet3: fix possible use-after-free bugs in vmxnet3_rq_alloc_rx_buf() net/sched: act_pedit: sanitize shift argument before usage net: macb: Increment rx bd head after allocating skb and buffer ARM: dts: aspeed-g6: fix SPI1/SPI2 quad pin group ARM: dts: aspeed-g6: remove FWQSPID group in pinctrl dtsi dma-buf: fix use of DMA_BUF_SET_NAME_{A,B} in userspace drm/dp/mst: fix a possible memory leak in fetch_monitor_name() crypto: qcom-rng - fix infinite loop on requests not multiple of WORD_SZ KVM: x86/mmu: Update number of zapped pages even if page list is stable PCI/PM: Avoid putting Elo i2 PCIe Ports in D3cold Fix double fget() in vhost_net_set_backend() perf: Fix sys_perf_event_open() race against self ALSA: wavefront: Proper check of get_user() error SUNRPC: Ensure we flush any closed sockets before xs_xprt_free() SUNRPC: Don't call connect() more than once on a TCP socket SUNRPC: Prevent immediate close+reconnect SUNRPC: Clean up scheduling of autoclose mmc: core: Default to generic_cmd6_time as timeout in __mmc_switch() mmc: block: Use generic_cmd6_time when modifying INAND_CMD38_ARG_EXT_CSD mmc: core: Specify timeouts for BKOPS and CACHE_FLUSH for eMMC nilfs2: fix lockdep warnings during disk space reclamation nilfs2: fix lockdep warnings in page operations for btree nodes ARM: 9191/1: arm/stacktrace, kasan: Silence KASAN warnings in unwind_frame() platform/chrome: cros_ec_debugfs: detach log reader wq from devm drbd: remove usage of list iterator variable after loop MIPS: lantiq: check the return value of kzalloc() rtc: mc146818-lib: Fix the AltCentury for AMD platforms nvme-multipath: fix hang when disk goes live over reconnect ALSA: hda/realtek: Enable headset mic on Lenovo P360 crypto: x86/chacha20 - Avoid spurious jumps to other functions crypto: stm32 - fix reference leak in stm32_crc_remove Input: stmfts - fix reference leak in stmfts_input_open Input: add bounds checking to input_set_capability() um: Cleanup syscall_handler_t definition/cast, fix warning rtc: fix use-after-free on device removal x86/xen: Make the secondary CPU idle tasks reliable x86/xen: Make the boot CPU idle task reliable floppy: use a statically allocated error counter ANDROID: fix up abi issue with struct snd_pcm_runtime Linux 5.4.195 tty/serial: digicolor: fix possible null-ptr-deref in digicolor_uart_probe() ping: fix address binding wrt vrf arm[64]/memremap: don't abuse pfn_valid() to ensure presence of linear map net: phy: Fix race condition on link status change MIPS: fix build with gcc-12 drm/vmwgfx: Initialize drm_mode_fb_cmd2 cgroup/cpuset: Remove cpus_allowed/mems_allowed setup in cpuset_init_smp() i40e: i40e_main: fix a missing check on list iterator drm/nouveau/tegra: Stop using iommu_present() serial: 8250_mtk: Fix register address for XON/XOFF character serial: 8250_mtk: Fix UART_EFR register address slimbus: qcom: Fix IRQ check in qcom_slim_probe USB: serial: option: add Fibocom MA510 modem USB: serial: option: add Fibocom L610 modem USB: serial: qcserial: add support for Sierra Wireless EM7590 USB: serial: pl2303: add device id for HP LM930 Display usb: typec: tcpci: Don't skip cleanup in .remove() on error usb: cdc-wdm: fix reading stuck on device close tty: n_gsm: fix mux activation issues in gsm_config() tcp: resalt the secret every 10 seconds net: emaclite: Don't advertise 1000BASE-T and do auto negotiation s390: disable -Warray-bounds ASoC: ops: Validate input values in snd_soc_put_volsw_range() ASoC: max98090: Generate notifications on changes for custom control ASoC: max98090: Reject invalid values in custom control put() hwmon: (f71882fg) Fix negative temperature gfs2: Fix filesystem block deallocation for short writes net: sfc: ef10: fix memory leak in efx_ef10_mtd_probe() net/smc: non blocking recvmsg() return -EAGAIN when no data and signal_pending net/sched: act_pedit: really ensure the skb is writable s390/lcs: fix variable dereferenced before check s390/ctcm: fix potential memory leak s390/ctcm: fix variable dereferenced before check hwmon: (ltq-cputemp) restrict it to SOC_XWAY dim: initialize all struct fields mac80211_hwsim: call ieee80211_tx_prepare_skb under RCU protection netlink: do not reset transport header in netlink_recvmsg() drm/nouveau: Fix a potential theorical leak in nouveau_get_backlight_name() ipv4: drop dst in multicast routing path net: Fix features skip in for_each_netdev_feature() mac80211: Reset MBSSID parameters upon connection hwmon: (tmp401) Add OF device ID table batman-adv: Don't skb_split skbuffs with frag_list Linux 5.4.194 mm: userfaultfd: fix missing cache flush in mcopy_atomic_pte() and __mcopy_atomic() mm: hugetlb: fix missing cache flush in copy_huge_page_from_user() mm: fix missing cache flush for all tail pages of compound page Bluetooth: Fix the creation of hdev->name KVM: x86/svm: Account for family 17h event renumberings in amd_pmc_perf_hw_id x86: kprobes: Prohibit probing on instruction which has emulate prefix x86: xen: insn: Decode Xen and KVM emulate-prefix signature x86: xen: kvm: Gather the definition of emulate prefixes x86/asm: Allow to pass macros to __ASM_FORM() KVM: x86/pmu: Refactoring find_arch_event() to pmc_perf_hw_id() arm: remove CONFIG_ARCH_HAS_HOLES_MEMORYMODEL can: grcan: only use the NAPI poll budget for RX can: grcan: grcan_probe(): fix broken system id check for errata workaround needs nfp: bpf: silence bitwise vs. logical OR warning drm/i915: Cast remain to unsigned long in eb_relocate_vma drm/amd/display/dc/gpio/gpio_service: Pass around correct dce_{version, environment} types block: drbd: drbd_nl: Make conversion to 'enum drbd_ret_code' explicit MIPS: Use address-of operator on section symbols ANDROID: GKI: update the abi .xml file Revert "tcp: ensure to use the most recently sent skb when filling the rate sample" Linux 5.4.193 mmc: rtsx: add 74 Clocks in power on flow PCI: aardvark: Fix reading MSI interrupt number PCI: aardvark: Clear all MSIs at setup dm: interlock pending dm_io and dm_wait_for_bios_completion dm: fix mempool NULL pointer race when completing IO tcp: make sure treq->af_specific is initialized ALSA: pcm: Fix potential AB/BA lock with buffer_mutex and mmap_lock ALSA: pcm: Fix races among concurrent prealloc proc writes ALSA: pcm: Fix races among concurrent prepare and hw_params/hw_free calls ALSA: pcm: Fix races among concurrent read/write and buffer changes ALSA: pcm: Fix races among concurrent hw_params and hw_free calls mm: fix unexpected zeroed page mapping with zram swap block-map: add __GFP_ZERO flag for alloc_page in function bio_copy_kern net: ipv6: ensure we call ipv6_mc_down() at most once KVM: LAPIC: Enable timer posted-interrupt only when mwait/hlt is advertised x86/kvm: Preserve BSP MSR_KVM_POLL_CONTROL across suspend/resume kvm: x86/cpuid: Only provide CPUID leaf 0xA if host has architectural PMU NFSv4: Don't invalidate inode attributes on delegation return drm/amdkfd: Use drm_priv to pass VM from KFD to amdgpu net: igmp: respect RCU rules in ip_mc_source() and ip_mc_msfilter() btrfs: always log symlinks in full mode smsc911x: allow using IRQ0 bnxt_en: Fix possible bnxt_open() failure caused by wrong RFS flag selftests: mirror_gre_bridge_1q: Avoid changing PVID while interface is operational net: emaclite: Add error handling for of_address_to_resource() net: stmmac: dwmac-sun8i: add missing of_node_put() in sun8i_dwmac_register_mdio_mux() net: ethernet: mediatek: add missing of_node_put() in mtk_sgmii_init() RDMA/siw: Fix a condition race issue in MPA request processing ASoC: dmaengine: Restore NULL prepare_slave_config() callback hwmon: (adt7470) Fix warning on module removal NFC: netlink: fix sleep in atomic bug when firmware download timeout nfc: nfcmrvl: main: reorder destructive operations in nfcmrvl_nci_unregister_dev to avoid bugs nfc: replace improper check device_is_registered() in netlink related functions can: grcan: use ofdev->dev when allocating DMA memory can: grcan: grcan_close(): fix deadlock s390/dasd: Fix read inconsistency for ESE DASD devices s390/dasd: Fix read for ESE with blksize < 4k s390/dasd: prevent double format of tracks for ESE devices s390/dasd: fix data corruption for ESE devices ASoC: meson: Fix event generation for G12A tohdmi mux ASoC: wm8958: Fix change notifications for DSP controls ASoC: da7219: Fix change notifications for tone generator frequency genirq: Synchronize interrupt thread startup ACPICA: Always create namespace nodes using acpi_ns_create_node() firewire: core: extend card->lock in fw_core_handle_bus_reset firewire: remove check of list iterator against head past the loop body firewire: fix potential uaf in outbound_phy_packet_callback() Revert "SUNRPC: attempt AF_LOCAL connect on setup" gpiolib: of: fix bounds check for 'gpio-reserved-ranges' ALSA: fireworks: fix wrong return count shorter than expected by 4 bytes parisc: Merge model and model name into one line in /proc/cpuinfo MIPS: Fix CP0 counter erratum detection for R4k CPUs Linux 5.4.192 mm, hugetlb: allow for "high" userspace addresses hugetlbfs: get unmapped area below TASK_UNMAPPED_BASE for hugetlbfs tty: n_gsm: fix incorrect UA handling tty: n_gsm: fix wrong command frame length field encoding tty: n_gsm: fix wrong command retry handling tty: n_gsm: fix missing explicit ldisc flush tty: n_gsm: fix insufficient txframe size netfilter: nft_socket: only do sk lookups when indev is available tty: n_gsm: fix malformed counter for out of frame data tty: n_gsm: fix wrong signal octet encoding in convergence layer type 2 x86/cpu: Load microcode during restore_processor_state() net: ethernet: stmmac: fix write to sgmii_adapter_base drivers: net: hippi: Fix deadlock in rr_close() cifs: destage any unwritten data to the server before calling copychunk_write x86: __memcpy_flushcache: fix wrong alignment if size > 2^32 ip6_gre: Avoid updating tunnel->tun_hlen in __gre6_xmit() ASoC: wm8731: Disable the regulator when probing fails tcp: fix F-RTO may not work correctly when receiving DSACK ixgbe: ensure IPsec VF<->PF compatibility bnx2x: fix napi API usage sequence tls: Skip tls_append_frag on zero copy size drm/amd/display: Fix memory leak in dcn21_clock_source_create net: dsa: lantiq_gswip: Don't set GSWIP_MII_CFG_RMII_CLK net: bcmgenet: hide status block before TX timestamping clk: sunxi: sun9i-mmc: check return value after calling platform_get_resource() bus: sunxi-rsb: Fix the return value of sunxi_rsb_device_create() tcp: fix potential xmit stalls caused by TCP_NOTSENT_LOWAT ip_gre: Make o_seqno start from 0 in native mode net/smc: sync err code when tcp connection was refused net: hns3: add validity check for message data length cpufreq: fix memory leak in sun50i_cpufreq_nvmem_probe pinctrl: pistachio: fix use of irq_of_parse_and_map() arm64: dts: imx8mn-ddr4-evk: Describe the 32.768 kHz PMIC clock ARM: dts: imx6ull-colibri: fix vqmmc regulator sctp: check asoc strreset_chunk in sctp_generate_reconf_event tcp: ensure to use the most recently sent skb when filling the rate sample tcp: md5: incorrect tcp_header_len for incoming connections bpf, lwt: Fix crash when using bpf_skb_set_tunnel_key() from bpf_xmit lwt hook mtd: rawnand: Fix return value check of wait_for_completion_timeout ipvs: correctly print the memory size of ip_vs_conn_tab ARM: dts: logicpd-som-lv: Fix wrong pinmuxing on OMAP35 ARM: dts: am3517-evm: Fix misc pinmuxing ARM: dts: Fix mmc order for omap3-gta04 phy: ti: Add missing pm_runtime_disable() in serdes_am654_probe phy: mapphone-mdm6600: Fix PM error handling in phy_mdm6600_probe ARM: dts: at91: Map MCLK for wm8731 on at91sam9g20ek phy: ti: omap-usb2: Fix error handling in omap_usb2_enable_clocks ARM: OMAP2+: Fix refcount leak in omap_gic_of_init phy: samsung: exynos5250-sata: fix missing device put in probe error paths phy: samsung: Fix missing of_node_put() in exynos_sata_phy_probe ARM: dts: imx6qdl-apalis: Fix sgtl5000 detection issue USB: Fix xhci event ring dequeue pointer ERDP update issue mtd: rawnand: fix ecc parameters for mt7622 arm64: dts: meson: remove CPU opps below 1GHz for SM1 boards arm64: dts: meson: remove CPU opps below 1GHz for G12B boards video: fbdev: udlfb: properly check endpoint type hex2bin: fix access beyond string end hex2bin: make the function hex_to_bin constant-time arch_topology: Do not set llc_sibling if llc_id is invalid serial: 8250: Correct the clock for EndRun PTP/1588 PCIe device serial: 8250: Also set sticky MCR bits in console restoration serial: imx: fix overrun interrupts in DMA mode usb: dwc3: gadget: Return proper request status usb: dwc3: core: Fix tx/rx threshold settings usb: gadget: configfs: clear deactivation flag in configfs_composite_unbind() usb: gadget: uvc: Fix crash when encoding data for usb request usb: typec: ucsi: Fix role swapping usb: misc: fix improper handling of refcount in uss720_probe() iio: magnetometer: ak8975: Fix the error handling in ak8975_power_on() iio: dac: ad5446: Fix read_raw not returning set value iio: dac: ad5592r: Fix the missing return value. xhci: increase usb U3 -> U0 link resume timeout from 100ms to 500ms xhci: stop polling roothubs after shutdown USB: serial: option: add Telit 0x1057, 0x1058, 0x1075 compositions USB: serial: option: add support for Cinterion MV32-WA/MV32-WB USB: serial: cp210x: add PIDs for Kamstrup USB Meter Reader USB: serial: whiteheat: fix heap overflow in WHITEHEAT_GET_DTR_RTS USB: quirks: add STRING quirk for VCOM device USB: quirks: add a Realtek card reader usb: mtu3: fix USB 3.0 dual-role-switch from device to host lightnvm: disable the subsystem hamradio: remove needs_free_netdev to avoid UAF hamradio: defer 6pack kfree after unregister_netdev floppy: disable FDRAWCMD by default Conflicts: drivers/usb/dwc3/gadget.c include/linux/dma-mapping.h include/linux/stmmac.h mm/memory.c Change-Id: I3bf49e11ae4aeaf1db353efbdfee950cd12de8cf Signed-off-by: Srinivasarao Pathipati <quic_c_spathi@quicinc.com>	2022-08-16 16:52:01 +05:30
Greg Kroah-Hartman	6b9c39b935	Merge tag 'android11-5.4.197_r00' into 'android11-5.4' ... This is the merge of the upstream LTS release of 5.4.197 into the android11-5.4 branch. It contains the following commits: 9eae8fc396 Merge 5.4.197 into android11-5.4-lts 35c6471fd2 Linux 5.4.197 e00c2f22fb bpf: Enlarge offset check value to INT_MAX in bpf_skb_{load,store}_bytes a2235bc65a NFSD: Fix possible sleep during nfsd4_release_lockowner() f5b6bc69a7 NFS: Memory allocation failures are not server fatal errors 0490cd2aee docs: submitting-patches: Fix crossref to 'The canonical patch format' 72ef5d01fe tpm: ibmvtpm: Correct the return value in tpm_ibmvtpm_probe() 7ecd237e50 tpm: Fix buffer access in tpm2_get_tpm_pt() 396d1f5176 HID: multitouch: Add support for Google Whiskers Touchpad 25f0e9459f raid5: introduce MD_BROKEN fd2f7e9984 dm verity: set DM_TARGET_IMMUTABLE feature flag f005973502 dm stats: add cond_resched when looping over entries 65e6282f0d dm crypt: make printing of the key constant-time a4415f39e3 dm integrity: fix error code in dm_integrity_ctr() fc658c0839 zsmalloc: fix races between asynchronous zspage free and page migration 7632451ad9 crypto: ecrdsa - Fix incorrect use of vli_cmp b16bb37398 netfilter: conntrack: re-fetch conntrack after insertion 1fe82bfd9e exec: Force single empty string when argv is empty 241b566e04 drm/i915: Fix -Wstringop-overflow warning in call to intel_read_wm_latency() 3dbab9e37c cfg80211: set custom regdomain after wiphy registration 039fa25d95 assoc_array: Fix BUG_ON during garbage collect 8c668da61b drivers: i2c: thunderx: Allow driver to work with ACPI defined TWSI controllers fdcbdb3d08 i2c: ismt: Provide a DMA buffer for Interrupt Cause Logging 827980029d net: ftgmac100: Disable hardware checksum on AST2600 e619506ed0 net: af_key: check encryption module availability consistency fa77d2a3a7 pinctrl: sunxi: fix f1c100s uart2 function 2208c31d86 ACPI: sysfs: Fix BERT error region memory mapping 92d4b5e148 ACPI: sysfs: Make sparse happy about address space in use 5a73bd4f47 media: vim2m: initialize the media device earlier b7248281af media: vim2m: Register video device after setting up internals ab5b00cfe0 secure_seq: use the 64 bits of the siphash for port offset calculation 80cca53a48 tcp: change source port randomizarion at connect() time 9ce35dad5a Input: goodix - fix spurious key release events bdbc7ef3eb staging: rtl8723bs: prevent ->Ssid overflow in rtw_wx_set_scan() 4f07508394 x86/pci/xen: Disable PCI/MSI[-X] masking for XEN_HVM guests 8bb828229d lockdown: also lock down previous kgdb use 0cf7a2be06 Merge 5.4.196 into android11-5.4-lts 04b092e4a0 Linux 5.4.196 dba1941f5b afs: Fix afs_getattr() to refetch file status if callback break occurred ef5374d532 i2c: mt7621: fix missing clk_disable_unprepare() on error in mtk_i2c_probe() 10a221e2d3 x86/xen: Mark cpu_bringup_and_idle() as dead_end_function a12884ff43 x86/xen: fix booting 32-bit pv guest b2f140a9f9 Reinstate some of "swiotlb: rework "fix info leak with DMA_FROM_DEVICE"" 060f38b1df ARM: dts: imx7: Use audio_mclk_post_div instead audio_mclk_root_clk b38cf3cb17 firmware_loader: use kernel credentials when reading firmware e14e3856e9 net: stmmac: disable Split Header (SPH) for Intel platforms 9ea8e6a832 block: return ELEVATOR_DISCARD_MERGE if possible 36ac6caf74 Input: ili210x - fix reset timing 1c450bdf2e net: atlantic: verify hw_head_ lies within TX buffer ring e5307704c4 net: stmmac: fix missing pci_disable_device() on error in stmmac_pci_probe() 91d8d7edf1 ethernet: tulip: fix missing pci_disable_device() on error in tulip_init_one() dd5de66f5c selftests: add ping test with ping_group_range tuned 9919585e5f mac80211: fix rx reordering with non explicit / psmp ack policy 19e2cd737c scsi: qla2xxx: Fix missed DMA unmap for aborted commands 74168c2207 perf bench numa: Address compiler error on s390 d1915d9c9f gpio: mvebu/pwm: Refuse requests with inverted polarity 3fdd67e83c gpio: gpio-vf610: do not touch other bits when set the target bit 1fe6dc5f5d net: bridge: Clear offload_fwd_mark when passing frame up bridge interface. 622be11fa3 igb: skip phy status check where unavailable eb92a8ecce ARM: 9197/1: spectre-bhb: fix loop8 sequence for Thumb2 463a7b957d ARM: 9196/1: spectre-bhb: enable for Cortex-A15 1b93631c77 net: af_key: add check for pfkey_broadcast in function pfkey_process c0be5fec78 net/mlx5e: Properly block LRO when XDP is enabled 3277789f33 NFC: nci: fix sleep in atomic context bugs caused by nci_skb_alloc b368e07fb4 net/qla3xxx: Fix a test in ql_reset_work() d672eee9e4 clk: at91: generated: consider range when calculating best rate 8cb1a05fe3 ice: fix possible under reporting of ethtool Tx and Rx statistics dc64e8874e net: vmxnet3: fix possible NULL pointer dereference in vmxnet3_rq_cleanup() 32f779e6fb net: vmxnet3: fix possible use-after-free bugs in vmxnet3_rq_alloc_rx_buf() 1eb2d78581 net/sched: act_pedit: sanitize shift argument before usage 50f70ee302 net: macb: Increment rx bd head after allocating skb and buffer a42ffe8833 ARM: dts: aspeed-g6: fix SPI1/SPI2 quad pin group 6493ff94c0 ARM: dts: aspeed-g6: remove FWQSPID group in pinctrl dtsi fe2a9469ec dma-buf: fix use of DMA_BUF_SET_NAME_{A,B} in userspace 8cf6c24ed4 drm/dp/mst: fix a possible memory leak in fetch_monitor_name() 8be06f62b4 crypto: qcom-rng - fix infinite loop on requests not multiple of WORD_SZ f4a093215b KVM: x86/mmu: Update number of zapped pages even if page list is stable de87451827 PCI/PM: Avoid putting Elo i2 PCIe Ports in D3cold 3a12b2c413 Fix double fget() in vhost_net_set_backend() dd0ea88b0a perf: Fix sys_perf_event_open() race against self c8a5e14cb4 ALSA: wavefront: Proper check of get_user() error 2f8f6c393b SUNRPC: Ensure we flush any closed sockets before xs_xprt_free() 975a0f14d5 SUNRPC: Don't call connect() more than once on a TCP socket aa4d71edd6 SUNRPC: Prevent immediate close+reconnect 2d6f096476 SUNRPC: Clean up scheduling of autoclose f3fe8d13ac mmc: core: Default to generic_cmd6_time as timeout in __mmc_switch() def047ae12 mmc: block: Use generic_cmd6_time when modifying INAND_CMD38_ARG_EXT_CSD f10260f359 mmc: core: Specify timeouts for BKOPS and CACHE_FLUSH for eMMC 1e93f93992 nilfs2: fix lockdep warnings during disk space reclamation 307d021b1a nilfs2: fix lockdep warnings in page operations for btree nodes 77b71a4c87 ARM: 9191/1: arm/stacktrace, kasan: Silence KASAN warnings in unwind_frame() 54f7358be1 platform/chrome: cros_ec_debugfs: detach log reader wq from devm 232128f6e6 drbd: remove usage of list iterator variable after loop 83abb076f4 MIPS: lantiq: check the return value of kzalloc() e7947c031f rtc: mc146818-lib: Fix the AltCentury for AMD platforms 7be785032c nvme-multipath: fix hang when disk goes live over reconnect ee0323cc8b ALSA: hda/realtek: Enable headset mic on Lenovo P360 c0d86f2a3c crypto: x86/chacha20 - Avoid spurious jumps to other functions f021389433 crypto: stm32 - fix reference leak in stm32_crc_remove 8c015cd524 Input: stmfts - fix reference leak in stmfts_input_open bb83a744bc Input: add bounds checking to input_set_capability() 4fd3966956 um: Cleanup syscall_handler_t definition/cast, fix warning 0c319b9988 rtc: fix use-after-free on device removal 05df3bdbc2 x86/xen: Make the secondary CPU idle tasks reliable 0d3817cb4e x86/xen: Make the boot CPU idle task reliable 67e2b62461 floppy: use a statically allocated error counter abcfb6abb7 Merge 5.4.195 into android11-5.4-lts e44bd11b47 Merge 5.4.194 into android11-5.4-lts c336f131c4 ANDROID: fix up abi issue with struct snd_pcm_runtime 0187300e6a Linux 5.4.195 8fcefb43ec tty/serial: digicolor: fix possible null-ptr-deref in digicolor_uart_probe() 6d80857c4f ping: fix address binding wrt vrf 7845532adb arm[64]/memremap: don't abuse pfn_valid() to ensure presence of linear map c0b735fef2 net: phy: Fix race condition on link status change a60def7568 MIPS: fix build with gcc-12 a3112d5da1 drm/vmwgfx: Initialize drm_mode_fb_cmd2 463c743149 cgroup/cpuset: Remove cpus_allowed/mems_allowed setup in cpuset_init_smp() f25145c37c i40e: i40e_main: fix a missing check on list iterator 17c744716a drm/nouveau/tegra: Stop using iommu_present() c8f567c465 serial: 8250_mtk: Fix register address for XON/XOFF character aa3ea7451b serial: 8250_mtk: Fix UART_EFR register address 031fda28d0 slimbus: qcom: Fix IRQ check in qcom_slim_probe 7de6f30596 USB: serial: option: add Fibocom MA510 modem 65732f62f7 USB: serial: option: add Fibocom L610 modem 6c78537f3e USB: serial: qcserial: add support for Sierra Wireless EM7590 e40d004947 USB: serial: pl2303: add device id for HP LM930 Display 056a56f8fb usb: typec: tcpci: Don't skip cleanup in .remove() on error 457d9401b8 usb: cdc-wdm: fix reading stuck on device close 4d93303fd8 tty: n_gsm: fix mux activation issues in gsm_config() 6e34ee5b5b tcp: resalt the secret every 10 seconds 39c26fe93c net: emaclite: Don't advertise 1000BASE-T and do auto negotiation 638bfbc84c s390: disable -Warray-bounds f66d3fa508 ASoC: ops: Validate input values in snd_soc_put_volsw_range() 13b850a6cc ASoC: max98090: Generate notifications on changes for custom control 5c766c000a ASoC: max98090: Reject invalid values in custom control put() 22f6c68b49 hwmon: (f71882fg) Fix negative temperature 208200e573 gfs2: Fix filesystem block deallocation for short writes 42daae7d84 net: sfc: ef10: fix memory leak in efx_ef10_mtd_probe() e038c457bd net/smc: non blocking recvmsg() return -EAGAIN when no data and signal_pending 2ec2dd7d51 net/sched: act_pedit: really ensure the skb is writable 48c6a40e2f s390/lcs: fix variable dereferenced before check 467ddbbe7e s390/ctcm: fix potential memory leak 2cbce01100 s390/ctcm: fix variable dereferenced before check 1c40e85d0a hwmon: (ltq-cputemp) restrict it to SOC_XWAY 0a778db931 dim: initialize all struct fields 522986cc39 mac80211_hwsim: call ieee80211_tx_prepare_skb under RCU protection 0729594cb7 netlink: do not reset transport header in netlink_recvmsg() 33ce32587c drm/nouveau: Fix a potential theorical leak in nouveau_get_backlight_name() 5809a1c530 ipv4: drop dst in multicast routing path c9d75e87f4 net: Fix features skip in for_each_netdev_feature() 5c90576705 mac80211: Reset MBSSID parameters upon connection cfe74fd41f hwmon: (tmp401) Add OF device ID table 3915341a93 batman-adv: Don't skb_split skbuffs with frag_list 00c4652b41 Merge 5.4.193 into android11-5.4-lts 9065948757 Linux 5.4.194 2f4e0bf651 mm: userfaultfd: fix missing cache flush in mcopy_atomic_pte() and __mcopy_atomic() e4db0c3ce0 mm: hugetlb: fix missing cache flush in copy_huge_page_from_user() ea9cad1c5d mm: fix missing cache flush for all tail pages of compound page 45c05171d6 Bluetooth: Fix the creation of hdev->name f52c4c067a KVM: x86/svm: Account for family 17h event renumberings in amd_pmc_perf_hw_id c1bdf1e6e7 x86: kprobes: Prohibit probing on instruction which has emulate prefix 6af6427a96 x86: xen: insn: Decode Xen and KVM emulate-prefix signature c67a4a91f5 x86: xen: kvm: Gather the definition of emulate prefixes 4c39e1ace3 x86/asm: Allow to pass macros to __ASM_FORM() 29afcd5af0 KVM: x86/pmu: Refactoring find_arch_event() to pmc_perf_hw_id() ea65a7d76c arm: remove CONFIG_ARCH_HAS_HOLES_MEMORYMODEL 5755f946a8 can: grcan: only use the NAPI poll budget for RX caba5c13a8 can: grcan: grcan_probe(): fix broken system id check for errata workaround needs 76b64c690f nfp: bpf: silence bitwise vs. logical OR warning 86ccefb83e drm/i915: Cast remain to unsigned long in eb_relocate_vma de542bd765 drm/amd/display/dc/gpio/gpio_service: Pass around correct dce_{version, environment} types e6ff94d31c block: drbd: drbd_nl: Make conversion to 'enum drbd_ret_code' explicit f668da98ad MIPS: Use address-of operator on section symbols 44a1f2e6dc ANDROID: GKI: update the abi .xml file 52509afded Revert "tcp: ensure to use the most recently sent skb when filling the rate sample" 01565c91b7 Linux 5.4.193 8a7f92053d mmc: rtsx: add 74 Clocks in power on flow d789b98917 PCI: aardvark: Fix reading MSI interrupt number 253bc43ca5 PCI: aardvark: Clear all MSIs at setup 786dc86c84 dm: interlock pending dm_io and dm_wait_for_bios_completion ad1393b92e dm: fix mempool NULL pointer race when completing IO 40bcd39a00 tcp: make sure treq->af_specific is initialized 9661bf674d ALSA: pcm: Fix potential AB/BA lock with buffer_mutex and mmap_lock 37b12c16be ALSA: pcm: Fix races among concurrent prealloc proc writes 2a559eec81 ALSA: pcm: Fix races among concurrent prepare and hw_params/hw_free calls 08d1807f09 ALSA: pcm: Fix races among concurrent read/write and buffer changes fbeb492694 ALSA: pcm: Fix races among concurrent hw_params and hw_free calls f098f8b982 mm: fix unexpected zeroed page mapping with zram swap c7337efd1d block-map: add __GFP_ZERO flag for alloc_page in function bio_copy_kern 9588ac2edd net: ipv6: ensure we call ipv6_mc_down() at most once 367b49086b KVM: LAPIC: Enable timer posted-interrupt only when mwait/hlt is advertised c2fadf2d0a x86/kvm: Preserve BSP MSR_KVM_POLL_CONTROL across suspend/resume 8b78939f4b kvm: x86/cpuid: Only provide CPUID leaf 0xA if host has architectural PMU f455c8e657 NFSv4: Don't invalidate inode attributes on delegation return 89e7a625ec drm/amdkfd: Use drm_priv to pass VM from KFD to amdgpu 1d14c1c7a3 net: igmp: respect RCU rules in ip_mc_source() and ip_mc_msfilter() 2b99ff4c3e btrfs: always log symlinks in full mode dc47844894 smsc911x: allow using IRQ0 cff6cb162f bnxt_en: Fix possible bnxt_open() failure caused by wrong RFS flag 64ece01adb selftests: mirror_gre_bridge_1q: Avoid changing PVID while interface is operational 52401926c8 net: emaclite: Add error handling for of_address_to_resource() 354cac1e39 net: stmmac: dwmac-sun8i: add missing of_node_put() in sun8i_dwmac_register_mdio_mux() 0510b6ccfb net: ethernet: mediatek: add missing of_node_put() in mtk_sgmii_init() 102986592f RDMA/siw: Fix a condition race issue in MPA request processing e6ae21eb94 ASoC: dmaengine: Restore NULL prepare_slave_config() callback df3ea6cc1a hwmon: (adt7470) Fix warning on module removal 01d4363dd7 NFC: netlink: fix sleep in atomic bug when firmware download timeout 33d3e76fc7 nfc: nfcmrvl: main: reorder destructive operations in nfcmrvl_nci_unregister_dev to avoid bugs 85aecdef77 nfc: replace improper check device_is_registered() in netlink related functions da9eb43b9a can: grcan: use ofdev->dev when allocating DMA memory 8b451b7d7e can: grcan: grcan_close(): fix deadlock 8f4246450a s390/dasd: Fix read inconsistency for ESE DASD devices 91193a2c2f s390/dasd: Fix read for ESE with blksize < 4k 1aa75808ed s390/dasd: prevent double format of tracks for ESE devices 061a424dd1 s390/dasd: fix data corruption for ESE devices 860db6cdc5 ASoC: meson: Fix event generation for G12A tohdmi mux d4864e8c4b ASoC: wm8958: Fix change notifications for DSP controls 6723ab2ed8 ASoC: da7219: Fix change notifications for tone generator frequency ac5894fb86 genirq: Synchronize interrupt thread startup 8624e2c5af ACPICA: Always create namespace nodes using acpi_ns_create_node() 27183539cf firewire: core: extend card->lock in fw_core_handle_bus_reset 2fefc62598 firewire: remove check of list iterator against head past the loop body 34b9b91829 firewire: fix potential uaf in outbound_phy_packet_callback() f6b6e93369 Revert "SUNRPC: attempt AF_LOCAL connect on setup" d403ff32e5 gpiolib: of: fix bounds check for 'gpio-reserved-ranges' 94842485b4 ALSA: fireworks: fix wrong return count shorter than expected by 4 bytes 73ce49fa59 parisc: Merge model and model name into one line in /proc/cpuinfo 0d5bb59858 MIPS: Fix CP0 counter erratum detection for R4k CPUs aa172204d5 Merge 5.4.192 into android11-5.4-lts 1d72b776f6 Linux 5.4.192 aa2a047b58 mm, hugetlb: allow for "high" userspace addresses 6a79b2433e hugetlbfs: get unmapped area below TASK_UNMAPPED_BASE for hugetlbfs b69e60f6fc tty: n_gsm: fix incorrect UA handling 0f4be29feb tty: n_gsm: fix wrong command frame length field encoding 21cc640385 tty: n_gsm: fix wrong command retry handling 49c40febd4 tty: n_gsm: fix missing explicit ldisc flush 85522dcf00 tty: n_gsm: fix insufficient txframe size 563bb0f794 netfilter: nft_socket: only do sk lookups when indev is available fae2095210 tty: n_gsm: fix malformed counter for out of frame data cec2d0782a tty: n_gsm: fix wrong signal octet encoding in convergence layer type 2 a6d9847a4f x86/cpu: Load microcode during restore_processor_state() 9e9d12b81d net: ethernet: stmmac: fix write to sgmii_adapter_base 10ba1ac9a2 drivers: net: hippi: Fix deadlock in rr_close() a827521975 cifs: destage any unwritten data to the server before calling copychunk_write 5335370366 x86: __memcpy_flushcache: fix wrong alignment if size > 2^32 0ecc5304e8 ip6_gre: Avoid updating tunnel->tun_hlen in __gre6_xmit() 7815710349 ASoC: wm8731: Disable the regulator when probing fails a71df406a6 tcp: fix F-RTO may not work correctly when receiving DSACK a4ed61e30e ixgbe: ensure IPsec VF<->PF compatibility 406aaef0fe bnx2x: fix napi API usage sequence c3e7ea5860 tls: Skip tls_append_frag on zero copy size cd5cec3a0c drm/amd/display: Fix memory leak in dcn21_clock_source_create ffce11a391 net: dsa: lantiq_gswip: Don't set GSWIP_MII_CFG_RMII_CLK 3a179538bf net: bcmgenet: hide status block before TX timestamping 8ef6d60aa2 clk: sunxi: sun9i-mmc: check return value after calling platform_get_resource() 194f474ad9 bus: sunxi-rsb: Fix the return value of sunxi_rsb_device_create() e80054ea0c tcp: fix potential xmit stalls caused by TCP_NOTSENT_LOWAT 685ff7d244 ip_gre: Make o_seqno start from 0 in native mode 69555bb27b net/smc: sync err code when tcp connection was refused daca23846e net: hns3: add validity check for message data length 7763a79566 cpufreq: fix memory leak in sun50i_cpufreq_nvmem_probe f5bb5940d7 pinctrl: pistachio: fix use of irq_of_parse_and_map() d22fc60369 arm64: dts: imx8mn-ddr4-evk: Describe the 32.768 kHz PMIC clock 68f5200a1f ARM: dts: imx6ull-colibri: fix vqmmc regulator c45180375a sctp: check asoc strreset_chunk in sctp_generate_reconf_event 2cba635570 tcp: ensure to use the most recently sent skb when filling the rate sample 3ea6190be9 tcp: md5: incorrect tcp_header_len for incoming connections 2b9a13d98d bpf, lwt: Fix crash when using bpf_skb_set_tunnel_key() from bpf_xmit lwt hook 2e7f70d324 mtd: rawnand: Fix return value check of wait_for_completion_timeout 2a36ba067b ipvs: correctly print the memory size of ip_vs_conn_tab abe86a10dc ARM: dts: logicpd-som-lv: Fix wrong pinmuxing on OMAP35 54212850e3 ARM: dts: am3517-evm: Fix misc pinmuxing bba67fe6b0 ARM: dts: Fix mmc order for omap3-gta04 416e0f8907 phy: ti: Add missing pm_runtime_disable() in serdes_am654_probe 6ff7c1b827 phy: mapphone-mdm6600: Fix PM error handling in phy_mdm6600_probe 59bdaed5dd ARM: dts: at91: Map MCLK for wm8731 on at91sam9g20ek dbce8fc16a phy: ti: omap-usb2: Fix error handling in omap_usb2_enable_clocks b7fc45354b ARM: OMAP2+: Fix refcount leak in omap_gic_of_init dd99939b70 phy: samsung: exynos5250-sata: fix missing device put in probe error paths 6331b77fdc phy: samsung: Fix missing of_node_put() in exynos_sata_phy_probe fccbc3168e ARM: dts: imx6qdl-apalis: Fix sgtl5000 detection issue b8f0c19d48 USB: Fix xhci event ring dequeue pointer ERDP update issue 1f47c26257 mtd: rawnand: fix ecc parameters for mt7622 0405bd7f18 arm64: dts: meson: remove CPU opps below 1GHz for SM1 boards 5f80b5c5f4 arm64: dts: meson: remove CPU opps below 1GHz for G12B boards f6db63819d video: fbdev: udlfb: properly check endpoint type c00f3892f4 hex2bin: fix access beyond string end 15b78a8e38 hex2bin: make the function hex_to_bin constant-time 73f4668ee8 arch_topology: Do not set llc_sibling if llc_id is invalid a3cdd33ca1 serial: 8250: Correct the clock for EndRun PTP/1588 PCIe device 89a5728b05 serial: 8250: Also set sticky MCR bits in console restoration 42f749f223 serial: imx: fix overrun interrupts in DMA mode d29c197df7 usb: dwc3: gadget: Return proper request status 0f3d081315 usb: dwc3: core: Fix tx/rx threshold settings e2ec7b1f6a usb: gadget: configfs: clear deactivation flag in configfs_composite_unbind() debb276670 usb: gadget: uvc: Fix crash when encoding data for usb request 324e67c3b2 usb: typec: ucsi: Fix role swapping 0366beb402 usb: misc: fix improper handling of refcount in uss720_probe() 2c97a2b5ef iio: magnetometer: ak8975: Fix the error handling in ak8975_power_on() e82c726c94 iio: dac: ad5446: Fix read_raw not returning set value 1aea30f87c iio: dac: ad5592r: Fix the missing return value. 1e8716a5c0 xhci: increase usb U3 -> U0 link resume timeout from 100ms to 500ms b8d3a4681f xhci: stop polling roothubs after shutdown c8fbc2f875 USB: serial: option: add Telit 0x1057, 0x1058, 0x1075 compositions 68088dec9b USB: serial: option: add support for Cinterion MV32-WA/MV32-WB 56cbdb9d95 USB: serial: cp210x: add PIDs for Kamstrup USB Meter Reader 6b10dd966c USB: serial: whiteheat: fix heap overflow in WHITEHEAT_GET_DTR_RTS 890fc65448 USB: quirks: add STRING quirk for VCOM device c4b31d41f5 USB: quirks: add a Realtek card reader 5666334ce3 usb: mtu3: fix USB 3.0 dual-role-switch from device to host b258964700 lightnvm: disable the subsystem c9af90f0c6 hamradio: remove needs_free_netdev to avoid UAF 7361a35bf3 hamradio: defer 6pack kfree after unregister_netdev 7dea591300 floppy: disable FDRAWCMD by default Update the .xml file with the following needed changes that came in from the -lts branch to handle ABI issues with LTS security fixes: Leaf changes summary: 2 artifacts changed Changed leaf types summary: 1 leaf type changed Removed/Changed/Added functions summary: 0 Removed, 1 Changed, 0 Added function Removed/Changed/Added variables summary: 0 Removed, 0 Changed, 0 Added variable 1 function with some sub-type change: [C] 'function int hex_to_bin(char)' at hexdump.c:52:1 has some sub-type changes: parameter 1 of type 'char' changed: type name changed from 'char' to 'unsigned char' type size hasn't changed 'struct snd_pcm_runtime at pcm.h:342:1' changed: type size changed from 6336 to 6400 (in bits) 1 data member insertion: 'atomic_t buffer_accessing', at offset 6336 (in bits) at pcm.h:429:1 107 impacted interfaces Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I2cc9bdcc4c587e34362082b93990bf9837241a37	2022-07-27 11:19:48 +02:00
Greg Kroah-Hartman	63b83aede5	This is the 5.4.204 stable release ... -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmLG/ZkACgkQONu9yGCS aT7C7RAArxcDJ7LqrBQZfr9qc5bXDUqcj65SG4NfFHOFLeyK+XhbHnCqpTnyDreI 8mkzZ380MAdAZ3JCn7WIMLGnr31Brlyf3fjrQEkXwIeedyhvhXl6xBe/xDPfo9ny bhWNlyU0OFMLQ7k2xnF73ND1qam8K2pjqSmYIo5N9Ygv9nmjEWf7iDFABXMoDFUz K+qd+y/DW++wh44tHdf5p8KfgDJMf8sF8tOGG5uid6W8q7l4moPyAFmSct8L6QjT I4hRgf29IIxer8NbLRJtI0qYg0lX3IxsZbHjAqBT7WPdTaPfuxb25QjSEjX0UCuN PEQyqqYGiHo7ZTMrQrhx6CHY9l7ANH77MeyluWfcYqLrWowzQ6e03ezLnTIPlpn4 3Z+R/ITeWcg0xAR80Pt4dgRep/cLa2iMUoKr2x7gt0YbLTfp/A/x93SopAsDe6B3 LL5s5GqAa2fGknuvGx38dLYfCazlYPEB9ptSJbeQqIzjgUoOWrjahDBZsGf8R1/7 Tia5+Pm0bvUkFp1jOvF5KFJ6Nm0ljHez4D+ble8s6+H93ETdDf7l85xsny6c5nYk Zfwef09KXBJcDflHxHXNIygBTc94rUqcXUg0NF6sNBu6nfmdDNyQlceHrjbnSUaV XHqw265seqyr7sXLUtGJAEl0ReiL1p2uC+WUJmeJDuJL/UDQsV0= =hoqY -----END PGP SIGNATURE----- Merge 5.4.204 into android11-5.4-lts Changes in 5.4.204 ipv6: take care of disable_policy when restoring routes nvdimm: Fix badblocks clear off-by-one error powerpc/prom_init: Fix kernel config grep powerpc/bpf: Fix use of user_pt_regs in uapi dm raid: fix accesses beyond end of raid member array dm raid: fix KASAN warning in raid5_add_disks s390/archrandom: simplify back to earlier design and initialize earlier SUNRPC: Fix READ_PLUS crasher net: rose: fix UAF bugs caused by timer handler net: usb: ax88179_178a: Fix packet receiving virtio-net: fix race between ndo_open() and virtio_device_ready() selftests/net: pass ipv6_args to udpgso_bench's IPv6 TCP test net: tun: unlink NAPI from device on destruction net: tun: stop NAPI when detaching queues RDMA/qedr: Fix reporting QP timeout attribute linux/dim: Fix divide by 0 in RDMA DIM usbnet: fix memory allocation in helpers net: ipv6: unexport __init-annotated seg6_hmac_net_init() caif_virtio: fix race between virtio_device_ready() and ndo_open() PM / devfreq: exynos-ppmu: Fix refcount leak in of_get_devfreq_events s390: remove unneeded 'select BUILD_BIN2C' netfilter: nft_dynset: restore set element counter when failing to update net/sched: act_api: Notify user space if any actions were flushed before error net: bonding: fix possible NULL deref in rlb code net: bonding: fix use-after-free after 802.3ad slave unbind nfc: nfcmrvl: Fix irq_of_parse_and_map() return value NFC: nxp-nci: Don't issue a zero length i2c_master_read() net: tun: avoid disabling NAPI twice xen/gntdev: Avoid blocking in unmap_grant_pages() hwmon: (ibmaem) don't call platform_device_del() if platform_device_add() fails net: dsa: bcm_sf2: force pause link settings sit: use min ipv6/sit: fix ipip6_tunnel_get_prl return value rseq/selftests,x86_64: Add rseq_offset_deref_addv() selftests/rseq: remove ARRAY_SIZE define from individual tests selftests/rseq: introduce own copy of rseq uapi header selftests/rseq: Remove useless assignment to cpu variable selftests/rseq: Remove volatile from __rseq_abi selftests/rseq: Introduce rseq_get_abi() helper selftests/rseq: Introduce thread pointer getters selftests/rseq: Uplift rseq selftests for compatibility with glibc-2.35 selftests/rseq: Fix ppc32: wrong rseq_cs 32-bit field pointer on big endian selftests/rseq: Fix ppc32 missing instruction selection "u" and "x" for load/store selftests/rseq: Fix ppc32 offsets by using long rather than off_t selftests/rseq: Fix warnings about #if checks of undefined tokens selftests/rseq: Remove arm/mips asm goto compiler work-around selftests/rseq: Fix: work-around asm goto compiler bugs selftests/rseq: x86-64: use %fs segment selector for accessing rseq thread area selftests/rseq: x86-32: use %gs segment selector for accessing rseq thread area selftests/rseq: Change type of rseq_offset to ptrdiff_t xen/blkfront: fix leaking data in shared pages xen/netfront: fix leaking data in shared pages xen/netfront: force data bouncing when backend is untrusted xen/blkfront: force data bouncing when backend is untrusted xen/arm: Fix race in RB-tree based P2M accounting net: usb: qmi_wwan: add Telit 0x1060 composition net: usb: qmi_wwan: add Telit 0x1070 composition clocksource/drivers/ixp4xx: remove EXPORT_SYMBOL_GPL from ixp4xx_timer_setup() Linux 5.4.204 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I3685b70677f176278354e4a86611fd56010d8788	2022-07-07 18:18:30 +02:00
Roger Pau Monne	60ac50daad	xen/blkfront: force data bouncing when backend is untrusted ... commit 2400617da7eebf9167d71a46122828bc479d64c9 upstream. Split the current bounce buffering logic used with persistent grants into it's own option, and allow enabling it independently of persistent grants. This allows to reuse the same code paths to perform the bounce buffering required to avoid leaking contiguous data in shared pages not part of the request fragments. Reporting whether the backend is to be trusted can be done using a module parameter, or from the xenstore frontend path as set by the toolstack when adding the device. This is CVE-2022-33742, part of XSA-403. Signed-off-by: Roger Pau Monné <roger.pau@citrix.com> Reviewed-by: Juergen Gross <jgross@suse.com> Signed-off-by: Juergen Gross <jgross@suse.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-07-07 17:36:53 +02:00
Roger Pau Monne	42112e8f94	xen/blkfront: fix leaking data in shared pages ... commit 2f446ffe9d737e9a844b97887919c4fda18246e7 upstream. When allocating pages to be used for shared communication with the backend always zero them, this avoids leaking unintended data present on the pages. This is CVE-2022-26365, part of XSA-403. Signed-off-by: Roger Pau Monné <roger.pau@citrix.com> Reviewed-by: Jan Beulich <jbeulich@suse.com> Reviewed-by: Juergen Gross <jgross@suse.com> Signed-off-by: Juergen Gross <jgross@suse.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-07-07 17:36:52 +02:00
Greg Kroah-Hartman	476819f502	Merge branch 'android11-5.4' into branch 'android11-5.4-lts' ... Sync up with android11-5.4 for the following commits: 2ddac3780b BACKPORT: ALSA: pcm: Fix races among concurrent prealloc proc writes 6ef42e5789 BACKPORT: ALSA: pcm: Fix races among concurrent prepare and hw_params/hw_free calls 32745ed213 BACKPORT: ALSA: pcm: Fix races among concurrent read/write and buffer changes bf4e161bf9 ANDROID: Fix up abi issue with struct snd_pcm_runtime 3026e8262a BACKPORT: ALSA: pcm: Fix races among concurrent hw_params and hw_free calls 46eb6b6125 BACKPORT: nfc: nfcmrvl: main: reorder destructive operations in nfcmrvl_nci_unregister_dev to avoid bugs 375c2e2cdb Merge tag 'android11-5.4.191_r01' into android11-5.4 e7792e2790 BACKPORT: scsi: ufs: Resume ufs host before accessing ufs device 12bf063cb9 BACKPORT: can: ems_usb: ems_usb_start_xmit(): fix double dev_kfree_skb() in error path 1ae6fd7e6f ANDROID: ABI: Added symbols for allwinner 7d33bb909e BACKPORT: can: usb_8dev: usb_8dev_start_xmit(): fix double dev_kfree_skb() in error path 09c810c77d BACKPORT: esp: Fix possible buffer overflow in ESP transformation f896faff41 ANDROID: ABI: Update allowed list for QCOM 0840b18507 ANDROID: dm-bow: Protect Ranges fetched and erased from the RB tree 7f04e0c309 BACKPORT: staging: ion: Prevent incorrect reference counting behavour 9adbfa635e FROMGIT: net: fix wrong network header length 2586f0405b ANDROID: fix KCFLAGS override by __ANDROID_COMMON_KERNEL__ d2ed4cfcd5 ANDROID: Add flag to indicate compiling against ACK 850a2f987c BACKPORT: net/packet: fix slab-out-of-bounds access in packet_recvmsg() 45e2b6a26f BACKPORT: block: Add a helper to validate the block size 353ca06c86 BACKPORT: virtio-blk: Use blk_validate_block_size() to validate block size 4177a169eb BACKPORT: fuse: fix pipe buffer lifetime for direct_io 39435ab3a6 ANDROID: ABI: Update allowed list for galaxy And track more new symbols that are coming from the 'android11-5.4' branch: Leaf changes summary: 12 artifacts changed Changed leaf types summary: 0 leaf type changed Removed/Changed/Added functions summary: 0 Removed, 0 Changed, 9 Added functions Removed/Changed/Added variables summary: 0 Removed, 0 Changed, 3 Added variables 9 Added functions: [A] 'function void* __devm_alloc_percpu(device*, size_t, size_t)' [A] 'function int blkdev_fsync(file*, loff_t, loff_t, int)' [A] 'function void devm_extcon_dev_free(device*, extcon_dev*)' [A] 'function gen_pool* devm_gen_pool_create(device*, int, int, const char*)' [A] 'function loff_t fixed_size_llseek(file*, loff_t, int, loff_t)' [A] 'function u64 get_random_u64()' [A] 'function void kmsg_dump_rewind(kmsg_dumper*)' [A] 'function u64 nsec_to_clock_t(u64)' [A] 'function int unregister_die_notifier(notifier_block*)' 3 Added variables: [A] 'tracepoint __tracepoint_android_vh_printk_store' [A] 'tracepoint __tracepoint_android_vh_show_regs' [A] 'kernel_cpustat kernel_cpustat' Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I81e7c0853a4dd0be2c64403b767725c612b0340c	2022-07-01 13:35:33 +02:00
Greg Kroah-Hartman	a778a36923	This is the 5.4.198 stable release ... -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmKos2QACgkQONu9yGCS aT4QYQ//WQD/rHjO021lbo/z4eZbWUxjDiQNisJQY4MTCnIJgPYROJ6YLBLL2+of VwDdZ0yQNpf3hBA3qgTZ8RgaBinVf+WNAk37Ap/3VFXTExxgyGCx7p/PG+Jx9Jk4 qd9YPHZCu8g9rQjJoex95fd8Fedu47tzBSd88MoAKiLz90JsNbYUZb+gqdRrLAYc 6krd7zm7T8Grk31xUWOl/tlUSxveuUuz6QQr5mwPmSyspz4gQXsBlrKSrNSWmk0o qtqgqUCypvpKTF7RYiEoS3F8wy4XvWpGsET+W79SJ84inVx3EMsZKXB9GsWVZZgI fm3eFjn10NcgA+lvc7TJpwKg0f5g8uHW/06FcfYwgBhbI+otCFDLQkkHtViN0wY2 gks3PLPsYJdAZTlwIvjNY0XY7wRqjS7Ta1pf+d1po1EndEFAyH76KJaIGCzdVKb4 OeSEy4Xw8HxmuCO+mrUtRVRqV3Y7x88GuJC359iDKYdDpc+Z21FcvaVcgrR5cy2V A7ICKIfNyArgNmWnXQ6UBXqS1rDcoyfJe+0CYyRRdgDO/ON48Mx8FIW9YJrSrMeS XEx6cw6VKZ7hE1G71us/ITOOeUlHO93V7Ju+oOcx9Fgew8TZ0mdNMliOFUFaNWPb iAG+zZD0jwP5iyx0KFfOJyyuoovEtjBh9ZgVIF5BP3Ry1xRHuHY= =oE7B -----END PGP SIGNATURE----- Merge 5.4.198 into android11-5.4-lts Changes in 5.4.198 binfmt_flat: do not stop relocating GOT entries prematurely on riscv ALSA: hda/realtek - Fix microphone noise on ASUS TUF B550M-PLUS USB: serial: option: add Quectel BG95 modem USB: new quirk for Dell Gen 2 devices usb: core: hcd: Add support for deferring roothub registration perf/x86/intel: Fix event constraints for ICL ptrace/um: Replace PT_DTRACE with TIF_SINGLESTEP ptrace/xtensa: Replace PT_SINGLESTEP with TIF_SINGLESTEP ptrace: Reimplement PTRACE_KILL by always sending SIGKILL btrfs: add "0x" prefix for unsupported optional features btrfs: repair super block num_devices automatically drm/virtio: fix NULL pointer dereference in virtio_gpu_conn_get_modes mwifiex: add mutex lock for call in mwifiex_dfs_chan_sw_work_queue b43legacy: Fix assigning negative value to unsigned variable b43: Fix assigning negative value to unsigned variable ipw2x00: Fix potential NULL dereference in libipw_xmit() ipv6: fix locking issues with loops over idev->addr_list fbcon: Consistently protect deferred_takeover with console_lock() ACPICA: Avoid cache flush inside virtual machines drm/komeda: return early if drm_universal_plane_init() fails. ALSA: jack: Access input_dev under mutex spi: spi-rspi: Remove setting {src,dst}_{addr,addr_width} based on DMA direction tools/power turbostat: fix ICX DRAM power numbers drm/amd/pm: fix double free in si_parse_power_table() ath9k: fix QCA9561 PA bias level media: venus: hfi: avoid null dereference in deinit media: pci: cx23885: Fix the error handling in cx23885_initdev() media: cx25821: Fix the warning when removing the module md/bitmap: don't set sb values if can't pass sanity check mmc: jz4740: Apply DMA engine limits to maximum segment size scsi: megaraid: Fix error check return value of register_chrdev() drm/plane: Move range check for format_count earlier drm/amd/pm: fix the compile warning arm64: compat: Do not treat syscall number as ESR_ELx for a bad syscall drm: msm: fix error check return value of irq_of_parse_and_map() ipv6: Don't send rs packets to the interface of ARPHRD_TUNNEL net/mlx5: fs, delete the FTE when there are no rules attached to it ASoC: dapm: Don't fold register value changes into notifications mlxsw: spectrum_dcb: Do not warn about priority changes drm/amdgpu/ucode: Remove firmware load type check in amdgpu_ucode_free_bo HID: bigben: fix slab-out-of-bounds Write in bigben_probe ASoC: tscs454: Add endianness flag in snd_soc_component_driver s390/preempt: disable __preempt_count_add() optimization for PROFILE_ALL_BRANCHES spi: stm32-qspi: Fix wait_cmd timeout in APM mode dma-debug: change allocation mode from GFP_NOWAIT to GFP_ATIOMIC ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default ipmi:ssif: Check for NULL msg when handling events and messages ipmi: Fix pr_fmt to avoid compilation issues rtlwifi: Use pr_warn instead of WARN_ONCE media: coda: limit frame interval enumeration to supported encoder frame sizes media: cec-adap.c: fix is_configuring state openrisc: start CPU timer early in boot nvme-pci: fix a NULL pointer dereference in nvme_alloc_admin_tags ASoC: rt5645: Fix errorenous cleanup order nbd: Fix hung on disconnect request if socket is closed before net: phy: micrel: Allow probing without .driver_data media: exynos4-is: Fix compile warning ASoC: max98357a: remove dependency on GPIOLIB hwmon: Make chip parameter for with_info API mandatory rxrpc: Return an error to sendmsg if call failed eth: tg3: silence the GCC 12 array-bounds warning selftests/bpf: fix btf_dump/btf_dump due to recent clang change IB/rdmavt: add missing locks in rvt_ruc_loopback ARM: dts: ox820: align interrupt controller node name with dtschema PM / devfreq: rk3399_dmc: Disable edev on remove() fs: jfs: fix possible NULL pointer dereference in dbFree() ARM: OMAP1: clock: Fix UART rate reporting algorithm powerpc/fadump: Fix fadump to work with a different endian capture kernel fat: add ratelimit to fat*_ent_bread() ARM: versatile: Add missing of_node_put in dcscb_init ARM: dts: exynos: add atmel,24c128 fallback to Samsung EEPROM ARM: hisi: Add missing of_node_put after of_find_compatible_node PCI: Avoid pci_dev_lock() AB/BA deadlock with sriov_numvfs_store() tracing: incorrect isolate_mote_t cast in mm_vmscan_lru_isolate powerpc/xics: fix refcount leak in icp_opal_init() powerpc/powernv: fix missing of_node_put in uv_init() macintosh/via-pmu: Fix build failure when CONFIG_INPUT is disabled powerpc/iommu: Add missing of_node_put in iommu_init_early_dart RDMA/hfi1: Prevent panic when SDMA is disabled drm: fix EDID struct for old ARM OABI format ath9k: fix ar9003_get_eepmisc drm/edid: fix invalid EDID extension block filtering drm/bridge: adv7511: clean up CEC adapter when probe fails ASoC: mediatek: Fix error handling in mt8173_max98090_dev_probe ASoC: mediatek: Fix missing of_node_put in mt2701_wm8960_machine_probe x86/delay: Fix the wrong asm constraint in delay_loop() drm/mediatek: Fix mtk_cec_mask() drm/vc4: txp: Don't set TXP_VSTART_AT_EOF drm/vc4: txp: Force alpha to be 0xff if it's disabled bpf: Fix excessive memory allocation in stack_map_alloc() nl80211: show SSID for P2P_GO interfaces drm/komeda: Fix an undefined behavior bug in komeda_plane_add() drm: mali-dp: potential dereference of null pointer spi: spi-ti-qspi: Fix return value handling of wait_for_completion_timeout NFC: NULL out the dev->rfkill to prevent UAF efi: Add missing prototype for efi_capsule_setup_info drbd: fix duplicate array initializer HID: hid-led: fix maximum brightness for Dream Cheeky HID: elan: Fix potential double free in elan_input_configured drm/bridge: Fix error handling in analogix_dp_probe sched/fair: Fix cfs_rq_clock_pelt() for throttled cfs_rq spi: img-spfi: Fix pm_runtime_get_sync() error checking cpufreq: Fix possible race in cpufreq online error path ath9k_htc: fix potential out of bounds access with invalid rxstatus->rs_keyix inotify: show inotify mask flags in proc fdinfo fsnotify: fix wrong lockdep annotations of: overlay: do not break notify on NOTIFY_{OK|STOP} scsi: ufs: core: Exclude UECxx from SFR dump list x86/pm: Fix false positive kmemleak report in msr_build_context() x86/speculation: Add missing prototype for unpriv_ebpf_notify() ASoC: rk3328: fix disabling mclk on pclk probe failure perf tools: Add missing headers needed by util/data.h drm/msm/disp/dpu1: set vbif hw config to NULL to avoid use after memory free during pm runtime resume drm/msm/dsi: fix error checks and return values for DSI xmit functions drm/msm/hdmi: check return value after calling platform_get_resource_byname() drm/msm/hdmi: fix error check return value of irq_of_parse_and_map() drm/rockchip: vop: fix possible null-ptr-deref in vop_bind() virtio_blk: fix the discard_granularity and discard_alignment queue limits x86: Fix return value of __setup handlers irqchip/exiu: Fix acknowledgment of edge triggered interrupts irqchip/aspeed-i2c-ic: Fix irq_of_parse_and_map() return value x86/mm: Cleanup the control_va_addr_alignment() __setup handler regulator: core: Fix enable_count imbalance with EXCLUSIVE_GET drm/msm/mdp5: Return error code in mdp5_pipe_release when deadlock is detected drm/msm/mdp5: Return error code in mdp5_mixer_release when deadlock is detected drm/msm: return an error pointer in msm_gem_prime_get_sg_table() media: uvcvideo: Fix missing check to determine if element is found in list iomap: iomap_write_failed fix Revert "cpufreq: Fix possible race in cpufreq online error path" perf/amd/ibs: Use interrupt regs ip for stack unwinding ASoC: fsl: Fix refcount leak in imx_sgtl5000_probe ASoC: mxs-saif: Fix refcount leak in mxs_saif_probe regulator: pfuze100: Fix refcount leak in pfuze_parse_regulators_dt scripts/faddr2line: Fix overlapping text section failures media: aspeed: Fix an error handling path in aspeed_video_probe() media: st-delta: Fix PM disable depth imbalance in delta_probe media: exynos4-is: Change clk_disable to clk_disable_unprepare media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init media: vsp1: Fix offset calculation for plane cropping Bluetooth: fix dangling sco_conn and use-after-free in sco_sock_timeout m68k: math-emu: Fix dependencies of math emulation support sctp: read sk->sk_bound_dev_if once in sctp_rcv() media: ov7670: remove ov7670_power_off from ov7670_remove ext4: reject the 'commit' option on ext2 filesystems drm/msm/a6xx: Fix refcount leak in a6xx_gpu_init drm: msm: fix possible memory leak in mdp5_crtc_cursor_set() thermal/drivers/broadcom: Fix potential NULL dereference in sr_thermal_probe ASoC: wm2000: fix missing clk_disable_unprepare() on error in wm2000_anc_transition() NFC: hci: fix sleep in atomic context bugs in nfc_hci_hcp_message_tx rxrpc: Fix listen() setting the bar too high for the prealloc rings rxrpc: Don't try to resend the request if we're receiving the reply rxrpc: Fix overlapping ACK accounting rxrpc: Don't let ack.previousPacket regress rxrpc: Fix decision on when to generate an IDLE ACK net/smc: postpone sk_refcnt increment in connect() arm64: dts: rockchip: Move drive-impedance-ohm to emmc phy on rk3399 ARM: dts: suniv: F1C100: fix watchdog compatible soc: qcom: smp2p: Fix missing of_node_put() in smp2p_parse_ipc soc: qcom: smsm: Fix missing of_node_put() in smsm_parse_ipc PCI: cadence: Fix find_first_zero_bit() limit PCI: rockchip: Fix find_first_zero_bit() limit KVM: nVMX: Leave most VM-Exit info fields unmodified on failed VM-Entry can: xilinx_can: mark bit timing constants as const ARM: dts: bcm2835-rpi-zero-w: Fix GPIO line name for Wifi/BT ARM: dts: bcm2837-rpi-cm3-io3: Fix GPIO line names for SMPS I2C ARM: dts: bcm2837-rpi-3-b-plus: Fix GPIO line name of power LED ARM: dts: bcm2835-rpi-b: Fix GPIO line names misc: ocxl: fix possible double free in ocxl_file_register_afu crypto: marvell/cesa - ECB does not IV arm: mediatek: select arch timer for mt7629 powerpc/fadump: fix PT_LOAD segment for boot memory area mfd: ipaq-micro: Fix error check return value of platform_get_irq() scsi: fcoe: Fix Wstringop-overflow warnings in fcoe_wwn_from_mac() firmware: arm_scmi: Fix list protocols enumeration in the base protocol nvdimm: Allow overwrite in the presence of disabled dimms pinctrl: mvebu: Fix irq_of_parse_and_map() return value drivers/base/node.c: fix compaction sysfs file leak dax: fix cache flush on PMD-mapped pages powerpc/8xx: export 'cpm_setbrg' for modules powerpc/idle: Fix return value of __setup() handler powerpc/4xx/cpm: Fix return value of __setup() handler proc: fix dentry/inode overinstantiating under /proc/${pid}/net ipc/mqueue: use get_tree_nodev() in mqueue_get_tree() PCI: imx6: Fix PERST# start-up sequence tty: fix deadlock caused by calling printk() under tty_port->lock crypto: cryptd - Protect per-CPU resource by disabling BH. Input: sparcspkr - fix refcount leak in bbc_beep_probe powerpc/64: Only WARN if __pa()/__va() called with bad addresses powerpc/perf: Fix the threshold compare group constraint for power9 macintosh: via-pmu and via-cuda need RTC_LIB powerpc/fsl_rio: Fix refcount leak in fsl_rio_setup mfd: davinci_voicecodec: Fix possible null-ptr-deref davinci_vc_probe() mailbox: forward the hrtimer if not queued and under a lock RDMA/hfi1: Prevent use of lock before it is initialized Input: stmfts - do not leave device disabled in stmfts_input_open f2fs: fix dereference of stale list iterator after loop body iommu/mediatek: Add list_del in mtk_iommu_remove i2c: at91: use dma safe buffers i2c: at91: Initialize dma_buf in at91_twi_xfer() NFS: Do not report EINTR/ERESTARTSYS as mapping errors NFS: Do not report flush errors in nfs_write_end() NFS: Don't report errors from nfs_pageio_complete() more than once NFSv4/pNFS: Do not fail I/O when we fail to allocate the pNFS layout video: fbdev: clcdfb: Fix refcount leak in clcdfb_of_vram_setup dmaengine: stm32-mdma: remove GISR1 register iommu/amd: Increase timeout waiting for GA log enablement perf c2c: Use stdio interface if slang is not supported perf jevents: Fix event syntax error caused by ExtSel f2fs: fix to avoid f2fs_bug_on() in dec_valid_node_count() f2fs: fix to do sanity check on block address in f2fs_do_zero_range() f2fs: fix to clear dirty inode in f2fs_evict_inode() f2fs: fix deadloop in foreground GC f2fs: don't need inode lock for system hidden quota f2fs: fix fallocate to use file_modified to update permissions consistently wifi: mac80211: fix use-after-free in chanctx code iwlwifi: mvm: fix assert 1F04 upon reconfig fs-writeback: writeback_sb_inodes：Recalculate 'wrote' according skipped pages efi: Do not import certificates from UEFI Secure Boot for T2 Macs bfq: Split shared queues on move between cgroups bfq: Update cgroup information before merging bio bfq: Track whether bfq_group is still online netfilter: nf_tables: disallow non-stateful expression in sets earlier ext4: fix use-after-free in ext4_rename_dir_prepare ext4: fix warning in ext4_handle_inode_extension ext4: fix bug_on in ext4_writepages ext4: verify dir block before splitting it ext4: avoid cycles in directory h-tree ACPI: property: Release subnode properties with data nodes tracing: Fix potential double free in create_var_ref() PCI/PM: Fix bridge_d3_blacklist[] Elo i2 overwrite of Gigabyte X299 PCI: qcom: Fix runtime PM imbalance on probe errors PCI: qcom: Fix unbalanced PHY init on probe errors mm, compaction: fast_find_migrateblock() should return pfn in the target zone dlm: fix plock invalid read dlm: fix missing lkb refcount handling ocfs2: dlmfs: fix error handling of user_dlm_destroy_lock scsi: dc395x: Fix a missing check on list iterator scsi: ufs: qcom: Add a readl() to make sure ref_clk gets enabled drm/amdgpu/cs: make commands with 0 chunks illegal behaviour. drm/etnaviv: check for reaped mapping in etnaviv_iommu_unmap_gem drm/nouveau/clk: Fix an incorrect NULL check on list iterator drm/bridge: analogix_dp: Grab runtime PM reference for DP-AUX md: fix an incorrect NULL check in does_sb_need_changing md: fix an incorrect NULL check in md_reload_sb mtd: cfi_cmdset_0002: Move and rename chip_check/chip_ready/chip_good_for_write media: coda: Fix reported H264 profile media: coda: Add more H264 levels for CODA960 Kconfig: Add option for asm goto w/ tied outputs to workaround clang-13 bug RDMA/hfi1: Fix potential integer multiplication overflow errors irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375, A38x, A39x irqchip: irq-xtensa-mx: fix initial IRQ affinity mac80211: upgrade passive scan to active scan on DFS channels after beacon rx um: chan_user: Fix winch_tramp() return value um: Fix out-of-bounds read in LDT setup iommu/msm: Fix an incorrect NULL check on list iterator nodemask.h: fix compilation error with GCC12 hugetlb: fix huge_pmd_unshare address update rtl818x: Prevent using not initialized queues ASoC: rt5514: Fix event generation for "DSP Voice Wake Up" control carl9170: tx: fix an incorrect use of list iterator serial: pch: don't overwrite xmit->buf[0] by x_char tilcdc: tilcdc_external: fix an incorrect NULL check on list iterator gma500: fix an incorrect NULL check on list iterator arm64: dts: qcom: ipq8074: fix the sleep clock frequency phy: qcom-qmp: fix struct clk leak on probe errors ARM: pxa: maybe fix gpio lookup tables docs/conf.py: Cope with removal of language=None in Sphinx 5.0.0 dt-bindings: gpio: altera: correct interrupt-cells blk-iolatency: Fix inflight count imbalances and IO hangs on offline phy: qcom-qmp: fix reset-controller leak on probe errors Kconfig: add config option for asm goto w/ outputs RDMA/rxe: Generate a completion for unsupported/invalid opcode MIPS: IP27: Remove incorrect `cpu_has_fpu' override bfq: Avoid merging queues with different parents bfq: Drop pointless unlock-lock pair bfq: Remove pointless bfq_init_rq() calls bfq: Get rid of __bio_blkcg() usage bfq: Make sure bfqg for which we are queueing requests is online block: fix bio_clone_blkg_association() to associate with proper blkcg_gq md: bcache: check the return value of kzalloc() in detached_dev_do_request() pcmcia: db1xxx_ss: restrict to MIPS_DB1XXX boards staging: greybus: codecs: fix type confusion of list iterator variable iio: adc: ad7124: Remove shift from scan_type tty: goldfish: Use tty_port_destroy() to destroy port tty: serial: owl: Fix missing clk_disable_unprepare() in owl_uart_probe tty: serial: fsl_lpuart: fix potential bug when using both of_alias_get_id and ida_simple_get usb: usbip: fix a refcount leak in stub_probe() usb: usbip: add missing device lock on tweak configuration cmd USB: storage: karma: fix rio_karma_init return usb: musb: Fix missing of_node_put() in omap2430_probe staging: fieldbus: Fix the error handling path in anybuss_host_common_probe() pwm: lp3943: Fix duty calculation in case period was clamped rpmsg: qcom_smd: Fix irq_of_parse_and_map() return value usb: dwc3: pci: Fix pm_runtime_get_sync() error checking firmware: stratix10-svc: fix a missing check on list iterator iio: adc: stmpe-adc: Fix wait_for_completion_timeout return value check iio: adc: sc27xx: fix read big scale voltage not right iio: adc: sc27xx: Fine tune the scale calibration values rpmsg: qcom_smd: Fix returning 0 if irq_of_parse_and_map() fails phy: qcom-qmp: fix pipe-clock imbalance on power-on failure serial: sifive: Report actual baud base rather than fixed 115200 coresight: cpu-debug: Replace mutex with mutex_trylock on panic notifier soc: rockchip: Fix refcount leak in rockchip_grf_init clocksource/drivers/riscv: Events are stopped during CPU suspend rtc: mt6397: check return value after calling platform_get_resource() serial: meson: acquire port->lock in startup() serial: 8250_fintek: Check SER_RS485_RTS_* only with RS485 serial: digicolor-usart: Don't allow CS5-6 serial: rda-uart: Don't allow CS5-6 serial: txx9: Don't allow CS5-6 serial: sh-sci: Don't allow CS5-6 serial: sifive: Sanitize CSIZE and c_iflag serial: st-asc: Sanitize CSIZE and correct PARENB for CS7 serial: stm32-usart: Correct CSIZE, bits, and parity firmware: dmi-sysfs: Fix memory leak in dmi_sysfs_register_handle bus: ti-sysc: Fix warnings for unbind for serial driver: base: fix UAF when driver_attach failed driver core: fix deadlock in __device_attach watchdog: ts4800_wdt: Fix refcount leak in ts4800_wdt_probe ASoC: fsl_sai: Fix FSL_SAI_xDR/xFR definition clocksource/drivers/oxnas-rps: Fix irq_of_parse_and_map() return value s390/crypto: fix scatterwalk_unmap() callers in AES-GCM net: sched: fixed barrier to prevent skbuff sticking in qdisc backlog net: ethernet: mtk_eth_soc: out of bounds read in mtk_hwlro_get_fdir_entry() net: dsa: mv88e6xxx: Fix refcount leak in mv88e6xxx_mdios_register modpost: fix removing numeric suffixes jffs2: fix memory leak in jffs2_do_fill_super ubi: ubi_create_volume: Fix use-after-free when volume creation failed nfp: only report pause frame configuration for physical device net/mlx5: Don't use already freed action pointer net/mlx5e: Update netdev features after changing XDP state net: sched: add barrier to fix packet stuck problem for lockless qdisc tcp: tcp_rtx_synack() can be called from process context afs: Fix infinite loop found by xfstest generic/676 tipc: check attribute length for bearer name perf c2c: Fix sorting in percent_rmt_hitm_cmp() mips: cpc: Fix refcount leak in mips_cpc_default_phys_base tracing: Fix sleeping function called from invalid context on RT kernel tracing: Avoid adding tracer option before update_tracer_options f2fs: remove WARN_ON in f2fs_is_valid_blkaddr i2c: cadence: Increase timeout per message if necessary m68knommu: set ZERO_PAGE() to the allocated zeroed page m68knommu: fix undefined reference to `_init_sp' dmaengine: zynqmp_dma: In struct zynqmp_dma_chan fix desc_size data type NFSv4: Don't hold the layoutget locks across multiple RPC calls video: fbdev: pxa3xx-gcu: release the resources correctly in pxa3xx_gcu_probe/remove() xprtrdma: treat all calls not a bcall when bc_serv is NULL netfilter: nat: really support inet nat without l3 address ata: pata_octeon_cf: Fix refcount leak in octeon_cf_probe netfilter: nf_tables: memleak flow rule from commit path xen: unexport __init-annotated xen_xlate_map_ballooned_pages() af_unix: Fix a data-race in unix_dgram_peer_wake_me(). bpf, arm64: Clear prog->jited_len along prog->jited net: dsa: lantiq_gswip: Fix refcount leak in gswip_gphy_fw_list net/mlx4_en: Fix wrong return value on ioctl EEPROM query failure SUNRPC: Fix the calculation of xdr->end in xdr_get_next_encode_buffer() net: mdio: unexport __init-annotated mdio_bus_init() net: xfrm: unexport __init-annotated xfrm4_protocol_init() net: ipv6: unexport __init-annotated seg6_hmac_init() net/mlx5: Rearm the FW tracer after each tracer event net/mlx5: fs, fail conflicting actions ip_gre: test csum_start instead of transport header net: altera: Fix refcount leak in altera_tse_mdio_create drm: imx: fix compiler warning with gcc-12 iio: dummy: iio_simple_dummy: check the return value of kstrdup() iio: st_sensors: Add a local lock for protecting odr lkdtm/usercopy: Expand size of "out of frame" object tty: synclink_gt: Fix null-pointer-dereference in slgt_clean() tty: Fix a possible resource leak in icom_probe drivers: staging: rtl8192u: Fix deadlock in ieee80211_beacons_stop() drivers: staging: rtl8192e: Fix deadlock in rtllib_beacons_stop() USB: host: isp116x: check return value after calling platform_get_resource() drivers: tty: serial: Fix deadlock in sa1100_set_termios() drivers: usb: host: Fix deadlock in oxu_bus_suspend() USB: hcd-pci: Fully suspend across freeze/thaw cycle usb: dwc2: gadget: don't reset gadget's driver->bus misc: rtsx: set NULL intfdata when probe fails extcon: Modify extcon device to be created after driver data is set clocksource/drivers/sp804: Avoid error on multiple instances staging: rtl8712: fix uninit-value in usb_read8() and friends staging: rtl8712: fix uninit-value in r871xu_drv_init() serial: msm_serial: disable interrupts in __msm_console_write() kernfs: Separate kernfs_pr_cont_buf and rename_lock. watchdog: wdat_wdt: Stop watchdog when rebooting the system md: protect md_unregister_thread from reentrancy scsi: myrb: Fix up null pointer access on myrb_cleanup() Revert "net: af_key: add check for pfkey_broadcast in function pfkey_process" ceph: allow ceph.dir.rctime xattr to be updatable drm/radeon: fix a possible null pointer dereference modpost: fix undefined behavior of is_arm_mapping_symbol() x86/cpu: Elide KCSAN for cpu_has() and friends nbd: call genl_unregister_family() first in nbd_cleanup() nbd: fix race between nbd_alloc_config() and module removal nbd: fix io hung while disconnecting device s390/gmap: voluntarily schedule during key setting cifs: version operations for smb20 unneeded when legacy support disabled nodemask: Fix return values to be unsigned vringh: Fix loop descriptors check in the indirect cases scripts/gdb: change kernel config dumping method ALSA: hda/conexant - Fix loopback issue with CX20632 cifs: return errors during session setup during reconnects ata: libata-transport: fix {dma|pio|xfer}_mode sysfs files mmc: block: Fix CQE recovery reset success nfc: st21nfca: fix incorrect validating logic in EVT_TRANSACTION nfc: st21nfca: fix memory leaks in EVT_TRANSACTION handling ixgbe: fix bcast packets Rx on VF after promisc removal ixgbe: fix unexpected VLAN Rx in promisc mode on VF Input: bcm5974 - set missing URB_NO_TRANSFER_DMA_MAP urb flag powerpc/32: Fix overread/overwrite of thread_struct via ptrace md/raid0: Ignore RAID0 layout if the second zone has only one device mtd: cfi_cmdset_0002: Use chip_ready() for write on S29GL064N tcp: fix tcp_mtup_probe_success vs wrong snd_cwnd Linux 5.4.198 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I05615e33dbd0029f93c9724c9abc9cb9035122d2	2022-06-21 14:58:56 +02:00
Yu Kuai	69893d6d7f	nbd: fix io hung while disconnecting device ... [ Upstream commit 09dadb5985023e27d4740ebd17e6fea4640110e5 ] In our tests, "qemu-nbd" triggers a io hung: INFO: task qemu-nbd:11445 blocked for more than 368 seconds. Not tainted 5.18.0-rc3-next-20220422-00003-g2176915513ca #884 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:qemu-nbd state:D stack: 0 pid:11445 ppid: 1 flags:0x00000000 Call Trace: <TASK> __schedule+0x480/0x1050 ? _raw_spin_lock_irqsave+0x3e/0xb0 schedule+0x9c/0x1b0 blk_mq_freeze_queue_wait+0x9d/0xf0 ? ipi_rseq+0x70/0x70 blk_mq_freeze_queue+0x2b/0x40 nbd_add_socket+0x6b/0x270 [nbd] nbd_ioctl+0x383/0x510 [nbd] blkdev_ioctl+0x18e/0x3e0 __x64_sys_ioctl+0xac/0x120 do_syscall_64+0x35/0x80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7fd8ff706577 RSP: 002b:00007fd8fcdfebf8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 00007fd8ff706577 RDX: 000000000000000d RSI: 000000000000ab00 RDI: 000000000000000f RBP: 000000000000000f R08: 000000000000fbe8 R09: 000055fe497c62b0 R10: 00000002aff20000 R11: 0000000000000246 R12: 000000000000006d R13: 0000000000000000 R14: 00007ffe82dc5e70 R15: 00007fd8fcdff9c0 "qemu-ndb -d" will call ioctl 'NBD_DISCONNECT' first, however, following message was found: block nbd0: Send disconnect failed -32 Which indicate that something is wrong with the server. Then, "qemu-nbd -d" will call ioctl 'NBD_CLEAR_SOCK', however ioctl can't clear requests after commit 2516ab1543fd("nbd: only clear the queue on device teardown"). And in the meantime, request can't complete through timeout because nbd_xmit_timeout() will always return 'BLK_EH_RESET_TIMER', which means such request will never be completed in this situation. Now that the flag 'NBD_CMD_INFLIGHT' can make sure requests won't complete multiple times, switch back to call nbd_clear_sock() in nbd_clear_sock_ioctl(), so that inflight requests can be cleared. Signed-off-by: Yu Kuai <yukuai3@huawei.com> Reviewed-by: Josef Bacik <josef@toxicpanda.com> Link: https://lore.kernel.org/r/20220521073749.3146892-5-yukuai3@huawei.com Signed-off-by: Jens Axboe <axboe@kernel.dk> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-06-14 18:12:01 +02:00
Yu Kuai	8a7da4ced2	nbd: fix race between nbd_alloc_config() and module removal ... [ Upstream commit c55b2b983b0fa012942c3eb16384b2b722caa810 ] When nbd module is being removing, nbd_alloc_config() may be called concurrently by nbd_genl_connect(), although try_module_get() will return false, but nbd_alloc_config() doesn't handle it. The race may lead to the leak of nbd_config and its related resources (e.g, recv_workq) and oops in nbd_read_stat() due to the unload of nbd module as shown below: BUG: kernel NULL pointer dereference, address: 0000000000000040 Oops: 0000 [#1] SMP PTI CPU: 5 PID: 13840 Comm: kworker/u17:33 Not tainted 5.14.0+ #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996) Workqueue: knbd16-recv recv_work [nbd] RIP: 0010:nbd_read_stat.cold+0x130/0x1a4 [nbd] Call Trace: recv_work+0x3b/0xb0 [nbd] process_one_work+0x1ed/0x390 worker_thread+0x4a/0x3d0 kthread+0x12a/0x150 ret_from_fork+0x22/0x30 Fixing it by checking the return value of try_module_get() in nbd_alloc_config(). As nbd_alloc_config() may return ERR_PTR(-ENODEV), assign nbd->config only when nbd_alloc_config() succeeds to ensure the value of nbd->config is binary (valid or NULL). Also adding a debug message to check the reference counter of nbd_config during module removal. Signed-off-by: Hou Tao <houtao1@huawei.com> Signed-off-by: Yu Kuai <yukuai3@huawei.com> Reviewed-by: Josef Bacik <josef@toxicpanda.com> Link: https://lore.kernel.org/r/20220521073749.3146892-3-yukuai3@huawei.com Signed-off-by: Jens Axboe <axboe@kernel.dk> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-06-14 18:12:01 +02:00
Yu Kuai	1be608e1ee	nbd: call genl_unregister_family() first in nbd_cleanup() ... [ Upstream commit 06c4da89c24e7023ea448cadf8e9daf06a0aae6e ] Otherwise there may be race between module removal and the handling of netlink command, which can lead to the oops as shown below: BUG: kernel NULL pointer dereference, address: 0000000000000098 Oops: 0002 [#1] SMP PTI CPU: 1 PID: 31299 Comm: nbd-client Tainted: G E 5.14.0-rc4 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996) RIP: 0010:down_write+0x1a/0x50 Call Trace: start_creating+0x89/0x130 debugfs_create_dir+0x1b/0x130 nbd_start_device+0x13d/0x390 [nbd] nbd_genl_connect+0x42f/0x748 [nbd] genl_family_rcv_msg_doit.isra.0+0xec/0x150 genl_rcv_msg+0xe5/0x1e0 netlink_rcv_skb+0x55/0x100 genl_rcv+0x29/0x40 netlink_unicast+0x1a8/0x250 netlink_sendmsg+0x21b/0x430 ____sys_sendmsg+0x2a4/0x2d0 ___sys_sendmsg+0x81/0xc0 __sys_sendmsg+0x62/0xb0 __x64_sys_sendmsg+0x1f/0x30 do_syscall_64+0x3b/0xc0 entry_SYSCALL_64_after_hwframe+0x44/0xae Modules linked in: nbd(E-) Signed-off-by: Hou Tao <houtao1@huawei.com> Signed-off-by: Yu Kuai <yukuai3@huawei.com> Reviewed-by: Josef Bacik <josef@toxicpanda.com> Link: https://lore.kernel.org/r/20220521073749.3146892-2-yukuai3@huawei.com Signed-off-by: Jens Axboe <axboe@kernel.dk> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-06-14 18:12:01 +02:00
Christoph Hellwig	ee3901d7c7	virtio_blk: fix the discard_granularity and discard_alignment queue limits ... [ Upstream commit 62952cc5bccd89b76d710de1d0b43244af0f2903 ] The discard_alignment queue limit is named a bit misleading means the offset into the block device at which the discard granularity starts. On the other hand the discard_sector_alignment from the virtio 1.1 looks similar to what Linux uses as discard granularity (even if not very well described): "discard_sector_alignment can be used by OS when splitting a request based on alignment. " And at least qemu does set it to the discard granularity. So stop setting the discard_alignment and use the virtio discard_sector_alignment to set the discard granularity. Fixes: 1f23816b8e ("virtio_blk: add discard and write zeroes support") Signed-off-by: Christoph Hellwig <hch@lst.de> Reviewed-by: Martin K. Petersen <martin.petersen@oracle.com> Link: https://lore.kernel.org/r/20220418045314.360785-5-hch@lst.de Signed-off-by: Jens Axboe <axboe@kernel.dk> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-06-14 18:11:35 +02:00
Arnd Bergmann	3caa2d7943	drbd: fix duplicate array initializer ... [ Upstream commit 33cb0917bbe241dd17a2b87ead63514c1b7e5615 ] There are two initializers for P_RETRY_WRITE: drivers/block/drbd/drbd_main.c:3676:22: warning: initialized field overwritten [-Woverride-init] Remove the first one since it was already ignored by the compiler and reorder the list to match the enum definition. As P_ZEROES had no entry, add that one instead. Fixes: 036b17eaab ("drbd: Receiving part for the PROTOCOL_UPDATE packet") Fixes: f31e583aa2 ("drbd: introduce P_ZEROES (REQ_OP_WRITE_ZEROES on the "wire")") Signed-off-by: Arnd Bergmann <arnd@arndb.de> Reviewed-by: Christoph Böhmwalder <christoph.boehmwalder@linbit.com> Link: https://lore.kernel.org/r/20220406190715.1938174-2-christoph.boehmwalder@linbit.com Signed-off-by: Jens Axboe <axboe@kernel.dk> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-06-14 18:11:33 +02:00
Xie Yongji	9d1764b926	nbd: Fix hung on disconnect request if socket is closed before ... [ Upstream commit 491bf8f236fdeec698fa6744993f1ecf3fafd1a5 ] When userspace closes the socket before sending a disconnect request, the following I/O requests will be blocked in wait_for_reconnect() until dead timeout. This will cause the following disconnect request also hung on blk_mq_quiesce_queue(). That means we have no way to disconnect a nbd device if there are some I/O requests waiting for reconnecting until dead timeout. It's not expected. So let's wake up the thread waiting for reconnecting directly when a disconnect request is sent. Reported-by: Xu Jianhai <zero.xu@bytedance.com> Signed-off-by: Xie Yongji <xieyongji@bytedance.com> Reviewed-by: Josef Bacik <josef@toxicpanda.com> Link: https://lore.kernel.org/r/20220322080639.142-1-xieyongji@bytedance.com Signed-off-by: Jens Axboe <axboe@kernel.dk> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-06-14 18:11:28 +02:00
Srinivasarao Pathipati	a965799388	Merge android11-5.4.191+ (375c2e2) into msm-5.4 ... * refs/heads/tmp-375c2e2: Revert "oom_kill.c: futex: delay the OOM reaper to allow time for proper futex cleanup" Linux 5.4.191 Revert "net: micrel: fix KS8851_MLL Kconfig" block/compat_ioctl: fix range check in BLKGETSIZE staging: ion: Prevent incorrect reference counting behavour spi: atmel-quadspi: Fix the buswidth adjustment between spi-mem and controller jbd2: fix a potential race while discarding reserved buffers after an abort ext4: force overhead calculation if the s_overhead_cluster makes no sense ext4: fix overhead calculation to account for the reserved gdt blocks ext4, doc: fix incorrect h_reserved size ext4: limit length to bitmap_maxbytes - blocksize in punch_hole ext4: fix use-after-free in ext4_search_dir ext4: fix symlink file size not match to file content arm_pmu: Validate single/group leader events ARC: entry: fix syscall_trace_exit argument e1000e: Fix possible overflow in LTR decoding ASoC: soc-dapm: fix two incorrect uses of list iterator openvswitch: fix OOB access in reserve_sfa_size() xtensa: fix a7 clobbering in coprocessor context load/store xtensa: patch_text: Fixup last cpu should be master powerpc/perf: Fix power9 event alternatives drm/vc4: Use pm_runtime_resume_and_get to fix pm_runtime_get_sync() usage KVM: PPC: Fix TCE handling for VFIO drm/panel/raspberrypi-touchscreen: Initialise the bridge in prepare drm/panel/raspberrypi-touchscreen: Avoid NULL deref if not initialised dma: at_xdmac: fix a missing check on list iterator ata: pata_marvell: Check the 'bmdma_addr' beforing reading oom_kill.c: futex: delay the OOM reaper to allow time for proper futex cleanup EDAC/synopsys: Read the error count from the correct register stat: fix inconsistency between struct stat and struct compat_stat scsi: qedi: Fix failed disconnect handling net: macb: Restart tx only if queue pointer is lagging drm/msm/mdp5: check the return of kzalloc() dpaa_eth: Fix missing of_node_put in dpaa_get_ts_info() brcmfmac: sdio: Fix undefined behavior due to shift overflowing the constant mt76: Fix undefined behavior due to shift overflowing the constant cifs: Check the IOCB_DIRECT flag, not O_DIRECT vxlan: fix error return code in vxlan_fdb_append ALSA: usb-audio: Fix undefined behavior due to shift overflowing the constant platform/x86: samsung-laptop: Fix an unsigned comparison which can never be negative reset: tegra-bpmp: Restore Handle errors in BPMP response ARM: vexpress/spc: Avoid negative array index when !SMP selftests: mlxsw: vxlan_flooding: Prevent flooding of unwanted packets netlink: reset network and mac headers in netlink_dump() l3mdev: l3mdev_master_upper_ifindex_by_index_rcu should be using netdev_master_upper_dev_get_rcu net/sched: cls_u32: fix possible leak in u32_init_knode() net/packet: fix packet_sock xmit return value checking net/smc: Fix sock leak when release after smc_shutdown() rxrpc: Restore removed timer deletion igc: Fix BUG: scheduling while atomic igc: Fix infinite loop in release_swfw_sync dmaengine: mediatek:Fix PM usage reference leak of mtk_uart_apdma_alloc_chan_resources dmaengine: imx-sdma: Fix error checking in sdma_event_remap ASoC: msm8916-wcd-digital: Check failure for devm_snd_soc_register_component ASoC: atmel: Remove system clock tree configuration for at91sam9g20ek ALSA: usb-audio: Clear MIDI port active flag after draining tcp: Fix potential use-after-free due to double kfree() net/sched: cls_u32: fix netns refcount changes in u32_change() tcp: fix race condition when creating child sockets from syncookies gfs2: assign rgrp glock before compute_bitstructs can: usb_8dev: usb_8dev_start_xmit(): fix double dev_kfree_skb() in error path tracing: Dump stacktrace trigger to the corresponding instance mm: page_alloc: fix building error on -Werror=array-compare etherdevice: Adjust ether_addr* prototypes to silence -Wstringop-overead Linux 5.4.190 ax25: Fix UAF bugs in ax25 timers ax25: Fix NULL pointer dereferences in ax25 timers ax25: fix NPD bug in ax25_disconnect ax25: fix UAF bug in ax25_send_control() ax25: Fix refcount leaks caused by ax25_cb_del() ax25: fix UAF bugs of net_device caused by rebinding operation ax25: fix reference count leaks of ax25_dev ax25: add refcount in ax25_dev to avoid UAF bugs dma-direct: avoid redundant memory sync for swiotlb i2c: pasemi: Wait for write xfers to finish smp: Fix offline cpu check in flush_smp_call_function_queue() dm integrity: fix memory corruption when tag_size is less than digest size ARM: davinci: da850-evm: Avoid NULL pointer dereference tick/nohz: Use WARN_ON_ONCE() to prevent console saturation genirq/affinity: Consider that CPUs on nodes can be unbalanced drm/amd/display: don't ignore alpha property on pre-multiplied mode ipv6: fix panic when forwarding a pkt with no in6 dev ALSA: pcm: Test for "silence" field in struct "pcm_format_data" ALSA: hda/realtek: Add quirk for Clevo PD50PNT btrfs: mark resumed async balance as writing btrfs: remove unused variable in btrfs_{start,write}_dirty_block_groups() ath9k: Fix usage of driver-private space in tx_info ath9k: Properly clear TX status area before reporting to mac80211 gcc-plugins: latent_entropy: use /dev/urandom mm: kmemleak: take a full lowmem check in kmemleak_*_phys() mm, page_alloc: fix build_zonerefs_node() perf/imx_ddr: Fix undefined behavior due to shift overflowing the constant drivers: net: slip: fix NPD bug in sl_tx_timeout() scsi: megaraid_sas: Target with invalid LUN ID is deleted during scan scsi: mvsas: Add PCI ID of RocketRaid 2640 powerpc: Fix virt_addr_valid() for 64-bit Book3E & 32-bit drm/amd/display: Fix allocate_mst_payload assert on resume net: usb: aqc111: Fix out-of-bounds accesses in RX fixup tlb: hugetlb: Add more sizes to tlb_remove_huge_tlb_entry arm64: alternatives: mark patch_alternative() as `noinstr` regulator: wm8994: Add an off-on delay for WM8994 variant gpu: ipu-v3: Fix dev_dbg frequency output ata: libata-core: Disable READ LOG DMA EXT for Samsung 840 EVOs net: micrel: fix KS8851_MLL Kconfig scsi: ibmvscsis: Increase INITIAL_SRP_LIMIT to 1024 scsi: target: tcmu: Fix possible page UAF Drivers: hv: vmbus: Prevent load re-ordering when reading ring buffer drm/amdkfd: Check for potential null return of kmalloc_array() drm/amdkfd: Fix Incorrect VMIDs passed to HWS drm/amd/display: Update VTEM Infopacket definition drm/amd/display: fix audio format not updated after edid updated drm/amd: Add USBC connector ID cifs: potential buffer overflow in handling symlinks nfc: nci: add flush_workqueue to prevent uaf testing/selftests/mqueue: Fix mq_perf_tests to free the allocated cpu set sctp: Initialize daddr on peeled off socket net/smc: Fix NULL pointer dereference in smc_pnet_find_ib() drm/msm/dsi: Use connector directly in msm_dsi_manager_connector_init() cfg80211: hold bss_lock while updating nontrans_list net/sched: taprio: Check if socket flags are valid net: ethernet: stmmac: fix altr_tse_pcs function when using a fixed-link net/sched: fix initialization order when updating chain 0 head mlxsw: i2c: Fix initialization error flow gpiolib: acpi: use correct format characters veth: Ensure eth header is in skb's linear part net/sched: flower: fix parsing of ethertype following VLAN header memory: atmel-ebi: Fix missing of_node_put in atmel_ebi_probe ANDROID: GKI: fix crc issue with commit 3f91687e6e ("block: don't merge across cgroup boundaries if blkcg is enabled") Revert "PCI: Reduce warnings on possible RW1C corruption" Linux 5.4.189 ACPI: processor idle: Check for architectural support for LPI cpuidle: PSCI: Move the `has_lpi` check to the beginning of the function selftests: cgroup: Test open-time cgroup namespace usage for migration checks selftests: cgroup: Test open-time credential usage for migration checks selftests: cgroup: Make cg_create() use 0755 for permission instead of 0644 cgroup: Use open-time cgroup namespace for process migration perm checks cgroup: Allocate cgroup_file_ctx for kernfs_open_file->priv cgroup: Use open-time credentials for process migraton perm checks io_uring: fix fs->users overflow drm/amdkfd: Fix -Wstrict-prototypes from amdgpu_amdkfd_gfx_10_0_get_functions() drm/amdkfd: add missing void argument to function kgd2kfd_init mm/sparsemem: fix 'mem_section' will never be NULL gcc 12 warning arm64: module: remove (NOLOAD) from linker script mm: don't skip swap entry even if zap_details specified mmc: mmci: stm32: correctly check all elements of sg list mmc: mmci_sdmmc: Replace sg_dma_xxx macros dmaengine: Revert "dmaengine: shdma: Fix runtime PM imbalance on error" tools build: Use $(shell ) instead of `` to get embedded libperl's ccopts tools build: Filter out options and warnings not supported by clang irqchip/gic-v3: Fix GICR_CTLR.RWP polling perf: qcom_l2_pmu: fix an incorrect NULL check on list iterator ata: sata_dwc_460ex: Fix crash due to OOB write arm64: patch_text: Fixup last cpu should be master btrfs: fix qgroup reserve overflow the qgroup limit x86/speculation: Restore speculation related MSRs during S3 resume x86/pm: Save the MSR validity status at context setup mm/mempolicy: fix mpol_new leak in shared_policy_replace mmmremap.c: avoid pointless invalidate_range_start/end on mremap(old_size=0) lz4: fix LZ4_decompress_safe_partial read out of bound mmc: renesas_sdhi: don't overwrite TAP settings when HS400 tuning is complete Revert "mmc: sdhci-xenon: fix annoying 1.8V regulator warning" perf session: Remap buf if there is no space for event perf tools: Fix perf's libperf_print callback SUNRPC: Handle low memory situations in call_status() SUNRPC: Handle ENOMEM in call_transmit_status() drbd: Fix five use after free bugs in get_initial_state bpf: Support dual-stack sockets in bpf_tcp_check_syncookie spi: bcm-qspi: fix MSPI only access with bcm_qspi_exec_mem_op() qede: confirm skb is allocated before using rxrpc: fix a race in rxrpc_exit_net() net: openvswitch: don't send internal clone attribute to the userspace. ipv6: Fix stats accounting in ip6_pkt_drop dpaa2-ptp: Fix refcount leak in dpaa2_ptp_probe IB/rdmavt: add lock to call to rvt_error_qp to prevent a race condition bnxt_en: reserve space inside receive page for skb_shared_info drm/imx: Fix memory leak in imx_pd_connector_get_modes net: stmmac: Fix unset max_speed difference between DT and non-DT platforms net: ipv4: fix route with nexthop object delete warning net/tls: fix slab-out-of-bounds bug in decrypt_internal scsi: zorro7xx: Fix a resource leak in zorro7xx_remove_one() Drivers: hv: vmbus: Fix potential crash on module unload drm/amdgpu: fix off by one in amdgpu_gfx_kiq_acquire() KVM: arm64: Check arm64_get_bp_hardening_data() didn't return NULL mm: fix race between MADV_FREE reclaim and blkdev direct IO read parisc: Fix patch code locking and flushing parisc: Fix CPU affinity for Lasi, WAX and Dino chips SUNRPC: Fix socket waits for write buffer space jfs: prevent NULL deref in diFree virtio_console: eliminate anonymous module_init & module_exit serial: samsung_tty: do not unlock port->lock for uart_write_wakeup() NFS: swap-out must always use STABLE writes. NFS: swap IO handling is slightly different for O_DIRECT IO SUNRPC/call_alloc: async tasks mustn't block waiting for memory clk: Enforce that disjoints limits are invalid xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32 NFSv4: Protect the state recovery thread against direct reclaim w1: w1_therm: fixes w1_seq for ds28ea00 sensors clk: si5341: fix reported clk_rate when output divider is 2 minix: fix bug when opening a file with O_DIRECT init/main.c: return 1 from handled __setup() functions netlabel: fix out-of-bounds memory accesses Bluetooth: Fix use after free in hci_send_acl xtensa: fix DTC warning unit_address_format usb: dwc3: omap: fix "unbalanced disables for smps10_out1" on omap5evm scsi: libfc: Fix use after free in fc_exch_abts_resp() MIPS: fix fortify panic when copying asm exception handlers bnxt_en: Eliminate unintended link toggle during FW reset tuntap: add sanity checks about msg_controllen in sendmsg macvtap: advertise link netns via netlink mips: ralink: fix a refcount leak in ill_acc_of_setup() net/smc: correct settings of RMB window update limit scsi: aha152x: Fix aha152x_setup() __setup handler return value scsi: pm8001: Fix pm8001_mpi_task_abort_resp() drm/amdkfd: make CRAT table missing message informational only dm ioctl: prevent potential spectre v1 gadget ipv4: Invalidate neighbour for broadcast address upon address addition power: supply: axp288-charger: Set Vhold to 4.4V PCI: pciehp: Add Qualcomm quirk for Command Completed erratum usb: ehci: add pci device support for Aspeed platforms iommu/arm-smmu-v3: fix event handling soft lockup PCI: aardvark: Fix support for MSI interrupts drm/amdgpu: Fix recursive locking warning powerpc: Set crashkernel offset to mid of RMA region ipv6: make mc_forwarding atomic power: supply: axp20x_battery: properly report current when discharging scsi: bfa: Replace snprintf() with sysfs_emit() scsi: mvsas: Replace snprintf() with sysfs_emit() bpf: Make dst_port field in struct bpf_sock 16-bit wide powerpc: dts: t104xrdb: fix phy type for FMAN 4/5 ptp: replace snprintf with sysfs_emit drm/amd/amdgpu/amdgpu_cs: fix refcount leak of a dma_fence obj ath5k: fix OOB in ath5k_eeprom_read_pcal_info_5111 drm: Add orientation quirk for GPD Win Max KVM: x86/svm: Clear reserved bits written to PerfEvtSeln MSRs ARM: 9187/1: JIVE: fix return value of __setup handler riscv module: remove (NOLOAD) rtc: wm8350: Handle error for wm8350_register_irq ubifs: Rectify space amount budget for mkdir/tmpfile operations KVM: x86: Forbid VMM to set SYNIC/STIMER MSRs when SynIC wasn't activated KVM: x86/mmu: do compare-and-exchange of gPTE via the user address openvswitch: Fixed nd target mask field in the flow dump. um: Fix uml_mconsole stop/go ARM: dts: spear13xx: Update SPI dma properties ARM: dts: spear1340: Update serial node properties ASoC: topology: Allow TLV control to be either read or write ubi: fastmap: Return error code if memory allocation fails in add_aeb() dt-bindings: spi: mxic: The interrupt property is not mandatory dt-bindings: mtd: nand-controller: Fix a comment in the examples dt-bindings: mtd: nand-controller: Fix the reg property description bpf: Fix comment for helper bpf_current_task_under_cgroup() mm/usercopy: return 1 from hardened_usercopy __setup() handler mm/memcontrol: return 1 from cgroup.memory __setup() handler mm/mmap: return 1 from stack_guard_gap __setup() handler ASoC: soc-compress: Change the check for codec_dai powerpc/kasan: Fix early region not updated correctly ACPI: CPPC: Avoid out of bounds access when parsing _CPC data ARM: iop32x: offset IRQ numbers by 1 ubi: Fix race condition between ctrl_cdev_ioctl and ubi_cdev_ioctl ASoC: mediatek: mt6358: add missing EXPORT_SYMBOLs pinctrl: nuvoton: npcm7xx: Use %zu printk format for ARRAY_SIZE() pinctrl: nuvoton: npcm7xx: Rename DS() macro to DSTR() pinctrl: pinconf-generic: Print arguments for bias-pull-* net: hns3: fix software vlan talbe of vlan 0 inconsistent with hardware gfs2: Make sure FITRIM minlen is rounded up to fs block size rtc: check if __rtc_read_time was successful XArray: Update the LRU list in xas_split() can: mcba_usb: properly check endpoint type can: mcba_usb: mcba_usb_start_xmit(): fix double dev_kfree_skb in error path XArray: Fix xas_create_range() when multi-order entry present ubifs: rename_whiteout: correct old_dir size computing ubifs: Fix read out-of-bounds in ubifs_wbuf_write_nolock() ubifs: setflags: Make dirtied_ino_d 8 bytes aligned ubifs: Add missing iput if do_tmpfile() failed in rename whiteout ubifs: Fix deadlock in concurrent rename whiteout and inode writeback ubifs: rename_whiteout: Fix double free for whiteout_ui->data ASoC: SOF: Intel: Fix NULL ptr dereference when ENOMEM KVM: x86: fix sending PV IPI KVM: Prevent module exit until all VMs are freed scsi: qla2xxx: Use correct feature type field during RFF_ID processing scsi: qla2xxx: Reduce false trigger to login scsi: qla2xxx: Fix N2N inconsistent PLOGI scsi: qla2xxx: Fix missed DMA unmap for NVMe ls requests scsi: qla2xxx: Fix hang due to session stuck scsi: qla2xxx: Fix incorrect reporting of task management failure scsi: qla2xxx: Fix disk failure to rediscover scsi: qla2xxx: Suppress a kernel complaint in qla_create_qpair() scsi: qla2xxx: Check for firmware dump already collected scsi: qla2xxx: Add devids and conditionals for 28xx scsi: qla2xxx: Fix device reconnect in loop topology scsi: qla2xxx: Fix warning for missing error code scsi: qla2xxx: Fix wrong FDMI data for 64G adapter scsi: qla2xxx: Fix stuck session in gpdb powerpc: Fix build errors with newer binutils powerpc/lib/sstep: Fix build errors with newer binutils powerpc/lib/sstep: Fix 'sthcx' instruction ALSA: hda/realtek: Add alc256-samsung-headphone fixup mmc: host: Return an error when ->enable_sdio_irq() ops is missing media: hdpvr: initialize dev->worker at hdpvr_register_videodev media: Revert "media: em28xx: add missing em28xx_close_extension" video: fbdev: sm712fb: Fix crash in smtcfb_write() ARM: mmp: Fix failure to remove sram device ARM: tegra: tamonten: Fix I2C3 pad setting media: cx88-mpeg: clear interrupt status register before streaming video ASoC: soc-core: skip zero num_dai component in searching dai name video: fbdev: udlfb: replace snprintf in show functions with sysfs_emit video: fbdev: omapfb: panel-tpo-td043mtea1: Use sysfs_emit() instead of snprintf() video: fbdev: omapfb: panel-dsi-cm: Use sysfs_emit() instead of snprintf() ASoC: madera: Add dependencies on MFD ARM: dts: bcm2837: Add the missing L1/L2 cache information ARM: dts: qcom: fix gic_irq_domain_translate warnings for msm8960 video: fbdev: omapfb: acx565akm: replace snprintf with sysfs_emit video: fbdev: cirrusfb: check pixclock to avoid divide by zero video: fbdev: w100fb: Reset global state video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow ntfs: add sanity check on allocation size ext4: don't BUG if someone dirty pages without asking ext4 first spi: tegra20: Use of_device_get_match_data() PM: core: keep irq flags in device_pm_check_callbacks() ACPI/APEI: Limit printable size of BERT table data Revert "Revert "block, bfq: honor already-setup queue merges"" lib/raid6/test/Makefile: Use $(pound) instead of \# for Make 4.3 ACPICA: Avoid walking the ACPI Namespace if it is not there bfq: fix use-after-free in bfq_dispatch_request irqchip/nvic: Release nvic_base upon failure irqchip/qcom-pdc: Fix broken locking Fix incorrect type in assignment of ipv6 port for audit loop: use sysfs_emit() in the sysfs xxx show() selinux: use correct type for context length block, bfq: don't move oom_bfqq pinctrl: npcm: Fix broken references to chip->parent_device gcc-plugins/stackleak: Exactly match strings instead of prefixes LSM: general protection fault in legacy_parse_param lib/test: use after free in register_test_dev_kmod() net: dsa: bcm_sf2_cfp: fix an incorrect NULL check on list iterator NFSv4/pNFS: Fix another issue with a list iterator pointing to the head net/x25: Fix null-ptr-deref caused by x25_disconnect qlcnic: dcb: default to returning -EOPNOTSUPP selftests: test_vxlan_under_vrf: Fix broken test case net: phy: broadcom: Fix brcm_fet_config_init() xen: fix is_xen_pmu() clk: Initialize orphan req_rate clk: qcom: gcc-msm8994: Fix gpll4 width NFSv4.1: don't retry BIND_CONN_TO_SESSION on session error netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options jfs: fix divide error in dbNextAG driver core: dd: fix return value of __setup handler firmware: google: Properly state IOMEM dependency kgdbts: fix return value of __setup handler kgdboc: fix return value of __setup handler tty: hvc: fix return value of __setup handler pinctrl/rockchip: Add missing of_node_put() in rockchip_pinctrl_probe pinctrl: nomadik: Add missing of_node_put() in nmk_pinctrl_probe pinctrl: mediatek: paris: Fix pingroup pin config state readback pinctrl: mediatek: paris: Fix "argument" argument type for mtk_pinconf_get() pinctrl: mediatek: Fix missing of_node_put() in mtk_pctrl_init staging: mt7621-dts: fix LEDs and pinctrl on GB-PC1 devicetree NFS: remove unneeded check in decode_devicenotify_args() clk: tegra: tegra124-emc: Fix missing put_device() call in emc_ensure_emc_driver clk: clps711x: Terminate clk_div_table with sentinel element clk: loongson1: Terminate clk_div_table with sentinel element clk: actions: Terminate clk_div_table with sentinel element remoteproc: qcom_wcnss: Add missing of_node_put() in wcnss_alloc_memory_region remoteproc: qcom: Fix missing of_node_put in adsp_alloc_memory_region clk: qcom: clk-rcg2: Update the frac table for pixel clock clk: qcom: clk-rcg2: Update logic to calculate D value for RCG clk: imx7d: Remove audio_mclk_root_clk dma-debug: fix return value of __setup handlers NFS: Return valid errors from nfs2/3_decode_dirent() iio: adc: Add check for devm_request_threaded_irq serial: 8250: Fix race condition in RTS-after-send handling serial: 8250_mid: Balance reference count for PCI DMA device phy: dphy: Correct lpx parameter and its derivatives(ta_{get,go,sure}) clk: qcom: ipq8074: Use floor ops for SDCC1 clock pinctrl: renesas: r8a77470: Reduce size for narrow VIN1 channel staging:iio:adc:ad7280a: Fix handing of device address bit reversing. misc: alcor_pci: Fix an error handling path pwm: lpc18xx-sct: Initialize driver data and hardware before pwmchip_add() mxser: fix xmit_buf leak in activate when LSR == 0xff mfd: asic3: Add missing iounmap() on error asic3_mfd_probe tipc: fix the timer expires after interval 100ms openvswitch: always update flow key after nat tcp: ensure PMTU updates are processed during fastopen selftests/bpf/test_lirc_mode2.sh: Exit with proper code i2c: mux: demux-pinctrl: do not deactivate a master that is not active af_netlink: Fix shift out of bounds in group mask calculation Bluetooth: btmtksdio: Fix kernel oops in btmtksdio_interrupt USB: storage: ums-realtek: fix error code in rts51x_read_mem() bpf, sockmap: Fix double uncharge the mem of sk_msg bpf, sockmap: Fix more uncharged while msg has more_data bpf, sockmap: Fix memleak in tcp_bpf_sendmsg while sk msg is full RDMA/mlx5: Fix memory leak in error flow for subscribe event routine mtd: rawnand: atmel: fix refcount issue in atmel_nand_controller_init MIPS: RB532: fix return value of __setup handler vxcan: enable local echo for sent CAN frames powerpc: 8xx: fix a return value error in mpc8xx_pic_init selftests/bpf: Make test_lwt_ip_encap more stable and faster mfd: mc13xxx: Add check for mc13xxx_irq_request powerpc/sysdev: fix incorrect use to determine if list is empty mips: DEC: honor CONFIG_MIPS_FP_SUPPORT=n PCI: Reduce warnings on possible RW1C corruption power: supply: wm8350-power: Add missing free in free_charger_irq power: supply: wm8350-power: Handle error for wm8350_register_irq i2c: xiic: Make bus names unique hv_balloon: rate-limit "Unhandled message" warning KVM: x86/emulator: Defer not-present segment check in __load_segment_descriptor() KVM: x86: Fix emulation in writing cr8 powerpc/Makefile: Don't pass -mcpu=powerpc64 when building 32-bit libbpf: Skip forward declaration when counting duplicated type names bpf, arm64: Feed byte-offset into bpf line info bpf, arm64: Call build_prologue() first in first JIT pass drm/bridge: cdns-dsi: Make sure to to create proper aliases for dt scsi: hisi_sas: Change permission of parameter prot_mask power: supply: bq24190_charger: Fix bq24190_vbus_is_enabled() wrong false return drm/tegra: Fix reference leak in tegra_dsi_ganged_probe ext2: correct max file size computing TOMOYO: fix __setup handlers return values drm/amd/display: Remove vupdate_int_entry definition scsi: pm8001: Fix abort all task initialization scsi: pm8001: Fix payload initialization in pm80xx_set_thermal_config() scsi: pm8001: Fix command initialization in pm8001_chip_ssp_tm_req() scsi: pm8001: Fix command initialization in pm80XX_send_read_log() dm crypt: fix get_key_size compiler warning if !CONFIG_KEYS iwlwifi: mvm: Fix an error code in iwl_mvm_up() iwlwifi: Fix -EIO error code that is never returned dax: make sure inodes are flushed before destroy cache IB/cma: Allow XRC INI QPs to set their local ACK timeout drm/amd/display: Add affected crtcs to atomic state for dsc mst unplug iommu/ipmmu-vmsa: Check for error num after setting mask HID: i2c-hid: fix GET/SET_REPORT for unnumbered reports power: supply: ab8500: Fix memory leak in ab8500_fg_sysfs_init PCI: aardvark: Fix reading PCI_EXP_RTSTA_PME bit on emulated bridge net: dsa: mv88e6xxx: Enable port policy support on 6097 mt76: mt7615: check sta_rates pointer in mt7615_sta_rate_tbl_update mt76: mt7603: check sta_rates pointer in mt7603_sta_rate_tbl_update powerpc/perf: Don't use perf_hw_context for trace IMC PMU ray_cs: Check ioremap return value power: reset: gemini-poweroff: Fix IRQ check in gemini_poweroff_probe i40e: don't reserve excessive XDP_PACKET_HEADROOM on XSK Rx to skb KVM: PPC: Fix vmx/vsx mixup in mmio emulation ath9k_htc: fix uninit value bugs drm/amd/display: Fix a NULL pointer dereference in amdgpu_dm_connector_add_common_modes() drm/edid: Don't clear formats if using deep color mtd: rawnand: gpmi: fix controller timings setting mtd: onenand: Check for error irq Bluetooth: hci_serdev: call init_rwsem() before p->open() udmabuf: validate ubuf->pagecount ath10k: fix memory overwrite of the WoWLAN wakeup packet pattern drm/bridge: Add missing pm_runtime_disable() in __dw_mipi_dsi_probe drm/bridge: Fix free wrong object in sii8620_init_rcp_input_dev ASoC: msm8916-wcd-analog: Fix error handling in pm8916_wcd_analog_spmi_probe mmc: davinci_mmc: Handle error for clk_enable ASoC: msm8916-wcd-digital: Fix missing clk_disable_unprepare() in msm8916_wcd_digital_probe ASoC: imx-es8328: Fix error return code in imx_es8328_probe() ASoC: mxs: Fix error handling in mxs_sgtl5000_probe ASoC: dmaengine: do not use a NULL prepare_slave_config() callback ivtv: fix incorrect device_caps for ivtvfb video: fbdev: omapfb: Add missing of_node_put() in dvic_probe_of ASoC: fsi: Add check for clk_enable ASoC: wm8350: Handle error for wm8350_register_irq ASoC: atmel: Add missing of_node_put() in at91sam9g20ek_audio_probe media: stk1160: If start stream fails, return buffers with VB2_BUF_STATE_QUEUED arm64: dts: rockchip: Fix SDIO regulator supply properties on rk3399-firefly ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction memory: emif: check the pointer temp in get_device_details() memory: emif: Add check for setup_interrupts ASoC: soc-compress: prevent the potentially use of null pointer ASoC: atmel_ssc_dai: Handle errors for clk_enable ASoC: mxs-saif: Handle errors for clk_enable printk: fix return value of printk.devkmsg __setup handler arm64: dts: broadcom: Fix sata nodename arm64: dts: ns2: Fix spi-cpol and spi-cpha property ALSA: spi: Add check for clk_enable() ASoC: ti: davinci-i2s: Add check for clk_enable() ASoC: rt5663: check the return value of devm_kzalloc() in rt5663_parse_dp() uaccess: fix nios2 and microblaze get_user_8() media: usb: go7007: s2250-board: fix leak in probe() media: em28xx: initialize refcount before kref_get media: video/hdmi: handle short reads of hdmi info frame. ARM: dts: imx: Add missing LVDS decoder on M53Menlo soc: ti: wkup_m3_ipc: Fix IRQ check in wkup_m3_ipc_probe arm64: dts: qcom: sm8150: Correct TCS configuration for apps rsc soc: qcom: aoss: remove spurious IRQF_ONESHOT flags soc: qcom: rpmpd: Check for null return of devm_kcalloc ARM: dts: qcom: ipq4019: fix sleep clock video: fbdev: fbcvt.c: fix printing in fb_cvt_print_name() video: fbdev: atmel_lcdfb: fix an error code in atmel_lcdfb_probe() video: fbdev: smscufx: Fix null-ptr-deref in ufx_usb_probe() media: aspeed: Correct value for h-total-pixels media: hantro: Fix overfill bottom register field name media: coda: Fix missing put_device() call in coda_get_vdoa_data media: bttv: fix WARNING regression on tunerless devices f2fs: fix to avoid potential deadlock f2fs: fix missing free nid in f2fs_handle_failed_inode perf/x86/intel/pt: Fix address filter config for 32-bit kernel perf/core: Fix address filter parser for multiple filters sched/debug: Remove mpol_get/put and task_lock/unlock from sched_show_numa clocksource: acpi_pm: fix return value of __setup handler hwmon: (pmbus) Add Vin unit off handling crypto: ccp - ccp_dmaengine_unregister release dma channels ACPI: APEI: fix return value of __setup handlers clocksource/drivers/timer-of: Check return value of of_iomap in timer_of_base_init() crypto: vmx - add missing dependencies hwrng: atmel - disable trng on failure path PM: suspend: fix return value of __setup handler PM: hibernate: fix __setup handler error handling block: don't delete queue kobject before its children hwmon: (sch56xx-common) Replace WDOG_ACTIVE with WDOG_HW_RUNNING hwmon: (pmbus) Add mutex to regulator ops spi: pxa2xx-pci: Balance reference count for PCI DMA device crypto: ccree - don't attempt 0 len DMA mappings audit: log AUDIT_TIME_* records only from rules selftests/x86: Add validity check and allow field splitting spi: tegra114: Add missing IRQ check in tegra_spi_probe crypto: mxs-dcp - Fix scatterlist processing crypto: authenc - Fix sleep in atomic context in decrypt_tail regulator: qcom_smd: fix for_each_child.cocci warnings PCI: pciehp: Clear cmd_busy bit in polling mode brcmfmac: pcie: Fix crashes due to early IRQs brcmfmac: pcie: Replace brcmf_pcie_copy_mem_todev with memcpy_toio brcmfmac: pcie: Release firmwares in the brcmf_pcie_setup error path brcmfmac: firmware: Allocate space for default boardrev in nvram xtensa: fix xtensa_wsr always writing 0 xtensa: fix stop_machine_cpuslocked call in patch_text media: davinci: vpif: fix unbalanced runtime PM get DEC: Limit PMAX memory probing to R3k systems crypto: rsa-pkcs1pad - fix buffer overread in pkcs1pad_verify_complete() crypto: rsa-pkcs1pad - restore signature length check crypto: rsa-pkcs1pad - correctly get hash from source scatterlist lib/raid6/test: fix multiple definition linking error thermal: int340x: Increase bitmap size carl9170: fix missing bit-wise or operator for tx_params ARM: dts: exynos: add missing HDMI supplies on SMDK5420 ARM: dts: exynos: add missing HDMI supplies on SMDK5250 ARM: dts: exynos: fix UART3 pins configuration in Exynos5250 ARM: dts: at91: sama5d2: Fix PMERRLOC resource size video: fbdev: atari: Atari 2 bpp (STe) palette bugfix video: fbdev: sm712fb: Fix crash in smtcfb_read() drm/edid: check basic audio support on CEA extension block block: don't merge across cgroup boundaries if blkcg is enabled mailbox: tegra-hsp: Flush whole channel drivers: hamradio: 6pack: fix UAF bug caused by mod_timer() ACPI: properties: Consistently return -ENOENT if there are no more references udp: call udp_encap_enable for v6 sockets when enabling encap powerpc/kvm: Fix kvm_use_magic_page drbd: fix potential silent data corruption mm/kmemleak: reset tag when compare object pointer mm,hwpoison: unmap poisoned page before invalidation ALSA: hda/realtek: Fix audio regression on Mi Notebook Pro 2020 ALSA: cs4236: fix an incorrect NULL check on list iterator Revert "Input: clear BTN_RIGHT/MIDDLE on buttonpads" riscv: Fix fill_callchain return value qed: validate and restrict untrusted VFs vlan promisc mode qed: display VF trust config scsi: libsas: Fix sas_ata_qc_issue() handling of NCQ NON DATA commands mempolicy: mbind_range() set_policy() after vma_merge() mm: invalidate hwpoison page cache page in fault path mm/pages_alloc.c: don't create ZONE_MOVABLE beyond the end of a node jffs2: fix memory leak in jffs2_scan_medium jffs2: fix memory leak in jffs2_do_mount_fs jffs2: fix use-after-free in jffs2_clear_xattr_subsystem can: ems_usb: ems_usb_start_xmit(): fix double dev_kfree_skb() in error path spi: mxic: Fix the transmit path pinctrl: samsung: drop pin banks references on error paths f2fs: fix to do sanity check on .cp_pack_total_block_count f2fs: quota: fix loop condition at f2fs_quota_sync() f2fs: fix to unlock page correctly in error path of is_alive() NFSD: prevent integer overflow on 32 bit systems NFSD: prevent underflow in nfssvc_decode_writeargs() SUNRPC: avoid race between mod_timer() and del_timer_sync() HID: intel-ish-hid: Use dma_alloc_coherent for firmware update Documentation: update stable tree link Documentation: add link to stable release candidate tree KEYS: fix length validation in keyctl_pkey_params_get_2() ptrace: Check PTRACE_O_SUSPEND_SECCOMP permission on PTRACE_SEIZE clk: uniphier: Fix fixed-rate initialization greybus: svc: fix an error handling bug in gb_svc_hello() iio: inkern: make a best effort on offset calculation iio: inkern: apply consumer scale when no channel scale is available iio: inkern: apply consumer scale on IIO_VAL_INT cases iio: afe: rescale: use s64 for temporary scale calculations coresight: Fix TRCCONFIGR.QE sysfs interface xhci: fix uninitialized string returned by xhci_decode_ctrl_ctx() xhci: make xhci_handshake timeout for xhci_reset() adjustable xhci: fix runtime PM imbalance in USB2 resume USB: usb-storage: Fix use of bitfields for hardware data in ene_ub6250.c virtio-blk: Use blk_validate_block_size() to validate block size block: Add a helper to validate the block size tpm: fix reference counting for struct tpm_chip iommu/iova: Improve 32-bit free space estimate net: dsa: microchip: add spi_device_id tables af_key: add __GFP_ZERO flag for compose_sadb_supported in function pfkey_register spi: Fix erroneous sgs value with min_t() net:mcf8390: Use platform_get_irq() to get the interrupt spi: Fix invalid sgs value ethernet: sun: Free the coherent when failing in probing virtio_console: break out of buf poll on remove xfrm: fix tunnel model fragmentation behavior HID: logitech-dj: add new lightspeed receiver id netdevice: add the case if dev is NULL USB: serial: simple: add Nokia phone driver USB: serial: pl2303: add IBM device IDs swiotlb: fix info leak with DMA_FROM_DEVICE Linux 5.4.188 llc: only change llc->dev when bind() succeeds nds32: fix access_ok() checks in get/put_user tpm: use try_get_ops() in tpm-space.c mac80211: fix potential double free on mesh join rcu: Don't deboost before reporting expedited quiescent state crypto: qat - disable registration of algorithms ACPI: video: Force backlight native for Clevo NL5xRU and NL5xNU ACPI: battery: Add device HID and quirk for Microsoft Surface Go 3 ACPI / x86: Work around broken XSDT on Advantech DAC-BJ01 board netfilter: nf_tables: initialize registers in nft_do_chain() ALSA: hda/realtek: Add quirk for ASUS GA402 ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc671 ALSA: oss: Fix PCM OSS buffer allocation overflow ASoC: sti: Fix deadlock via snd_pcm_stop_xrun() call drivers: net: xgene: Fix regression in CRC stripping ALSA: pci: fix reading of swapped values from pcmreg in AC97 codec ALSA: cmipci: Restore aux vol on suspend/resume ALSA: usb-audio: Add mute TLV for playback volumes on RODE NT-USB ALSA: pcm: Add stream lock during PCM reset ioctl operations llc: fix netdevice reference leaks in llc_ui_bind() thermal: int340x: fix memory leak in int3400_notify() staging: fbtft: fb_st7789v: reset display before initialization tpm: Fix error handling in async work esp: Fix possible buffer overflow in ESP transformation net: ipv6: fix skb_over_panic in __ip6_append_data nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION nfsd: Containerise filecache laundrette nfsd: cleanup nfsd_file_lru_dispose() Linux 5.4.187 Revert "selftests/bpf: Add test for bpf_timer overwriting crash" perf symbols: Fix symbol size calculation condition Input: aiptek - properly check endpoint type usb: usbtmc: Fix bug in pipe direction for control transfers usb: gadget: Fix use-after-free bug by not setting udc->dev.driver usb: gadget: rndis: prevent integer overflow in rndis_set_response() arm64: fix clang warning about TRAMP_VALIAS net: dsa: Add missing of_node_put() in dsa_port_parse_of net: handle ARPHRD_PIMREG in dev_is_mac_header_xmit() drm/panel: simple: Fix Innolux G070Y2-L01 BPP settings hv_netvsc: Add check for kvmalloc_array atm: eni: Add check for dma_map_single net/packet: fix slab-out-of-bounds access in packet_recvmsg() net: phy: marvell: Fix invalid comparison in the resume and suspend functions efi: fix return value of __setup handlers ocfs2: fix crash when initialize filecheck kobj fails crypto: qcom-rng - ensure buffer for generate is completely filled Linux 5.4.186 fixup for "arm64 entry: Add macro for reading symbol address from the trampoline" kselftest/vm: fix tests build with old libc sfc: extend the locking on mcdi->seqno tcp: make tcp_read_sock() more robust nl80211: Update bss channel on channel switch for P2P_CLIENT drm/vrr: Set VRR capable prop only if it is attached to connector iwlwifi: don't advertise TWT support atm: firestream: check the return value of ioremap() in fs_init() can: rcar_canfd: rcar_canfd_channel_probe(): register the CAN device when fully ready ARM: 9178/1: fix unmet dependency on BITREVERSE for HAVE_ARCH_BITREVERSE MIPS: smp: fill in sibling and core maps earlier mac80211: refuse aggregations sessions before authorized ARM: dts: rockchip: fix a typo on rk3288 crypto-controller ARM: dts: rockchip: reorder rk322x hmdi clocks arm64: dts: agilex: use the compatible "intel,socfpga-agilex-hsotg" arm64: dts: rockchip: reorder rk3399 hdmi clocks arm64: dts: rockchip: fix rk3399-puma eMMC HS400 signal integrity xfrm: Fix xfrm migrate issues when address family changes xfrm: Check if_id in xfrm_migrate arm64: Use the clearbhb instruction in mitigations KVM: arm64: Allow SMCCC_ARCH_WORKAROUND_3 to be discovered and migrated arm64: Mitigate spectre style branch history side channels KVM: arm64: Add templates for BHB mitigation sequences arm64: proton-pack: Report Spectre-BHB vulnerabilities as part of Spectre-v2 arm64: Add percpu vectors for EL1 arm64: entry: Add macro for reading symbol addresses from the trampoline arm64: entry: Add vectors that have the bhb mitigation sequences arm64: entry: Add non-kpti __bp_harden_el1_vectors for mitigations arm64: entry: Allow the trampoline text to occupy multiple pages arm64: entry: Make the kpti trampoline's kpti sequence optional arm64: entry: Move trampoline macros out of ifdef'd section arm64: entry: Don't assume tramp_vectors is the start of the vectors arm64: entry: Allow tramp_alias to access symbols after the 4K boundary arm64: entry: Move the trampoline data page before the text page arm64: entry: Free up another register on kpti's tramp_exit path arm64: entry: Make the trampoline cleanup optional arm64: entry.S: Add ventry overflow sanity checks arm64: Add Cortex-X2 CPU part definition arm64: add ID_AA64ISAR2_EL1 sys register arm64: Add Neoverse-N2, Cortex-A710 CPU part definition arm64: Add part number for Arm Cortex-A77 sctp: fix the processing for INIT chunk Revert "xfrm: state and policy should fail if XFRMA_IF_ID 0" Linux 5.4.185 KVM: SVM: Don't flush cache if hardware enforces cache coherency across encryption domains x86/mm/pat: Don't flush cache if hardware enforces cache coherency across encryption domnains x86/cpu: Add hardware-enforced cache coherency as a CPUID feature x86/cpufeatures: Mark two free bits in word 3 ext4: add check to prevent attempting to resize an fs with sparse_super2 ARM: fix Thumb2 regression with Spectre BHB virtio: acknowledge all features before access virtio: unexport virtio_finalize_features arm64: dts: marvell: armada-37xx: Remap IO space to bus address 0x0 riscv: Fix auipc+jalr relocation range checks mmc: meson: Fix usage of meson_mmc_post_req() net: macb: Fix lost RX packet wakeup race in NAPI receive staging: gdm724x: fix use after free in gdm_lte_rx() fuse: fix pipe buffer lifetime for direct_io ARM: Spectre-BHB: provide empty stub for non-config selftests/memfd: clean up mapping in mfd_fail_write selftest/vm: fix map_fixed_noreplace test failure tracing: Ensure trace buffer is at least 4096 bytes large ipv6: prevent a possible race condition with lifetimes Revert "xen-netback: Check for hotplug-status existence before watching" Revert "xen-netback: remove 'hotplug-status' once it has served its purpose" net-sysfs: add check for netdevice being present to speed_show selftests/bpf: Add test for bpf_timer overwriting crash net: bcmgenet: Don't claim WOL when its not available sctp: fix kernel-infoleak for SCTP sockets net: phy: DP83822: clear MISR2 register to disable interrupts gianfar: ethtool: Fix refcount leak in gfar_get_ts_info gpio: ts4900: Do not set DAT and OE together selftests: pmtu.sh: Kill tcpdump processes launched by subshell. NFC: port100: fix use-after-free in port100_send_complete net/mlx5: Fix a race on command flush flow net/mlx5: Fix size field in bufferx_reg struct ax25: Fix NULL pointer dereference in ax25_kill_by_device net: ethernet: lpc_eth: Handle error for clk_enable net: ethernet: ti: cpts: Handle error for clk_enable ethernet: Fix error handling in xemaclite_of_probe ARM: dts: aspeed: Fix AST2600 quad spi group drm/sun4i: mixer: Fix P010 and P210 format numbers qed: return status of qed_iov_get_link net: qlogic: check the return value of dma_alloc_coherent() in qed_vf_hw_prepare() virtio-blk: Don't use MAX_DISCARD_SEGMENTS if max_discard_seg is zero arm64: dts: armada-3720-turris-mox: Add missing ethernet0 alias clk: qcom: gdsc: Add support to update GDSC transition delay ANDROID: fix up rndis ABI breakage Linux 5.4.184 Revert "ACPI: PM: s2idle: Cancel wakeup before dispatching EC GPE" xen/netfront: react properly to failing gnttab_end_foreign_access_ref() xen/gnttab: fix gnttab_end_foreign_access() without page specified xen/pvcalls: use alloc/free_pages_exact() xen/9p: use alloc/free_pages_exact() xen: remove gnttab_query_foreign_access() xen/gntalloc: don't use gnttab_query_foreign_access() xen/scsifront: don't use gnttab_query_foreign_access() for mapped status xen/netfront: don't use gnttab_query_foreign_access() for mapped status xen/blkfront: don't use gnttab_query_foreign_access() for mapped status xen/grant-table: add gnttab_try_end_foreign_access() xen/xenbus: don't let xenbus_grant_ring() remove grants in error case ARM: fix build warning in proc-v7-bugs.c ARM: Do not use NOCROSSREFS directive with ld.lld ARM: fix co-processor register typo ARM: fix build error when BPF_SYSCALL is disabled ARM: include unprivileged BPF status in Spectre V2 reporting ARM: Spectre-BHB workaround ARM: use LOADADDR() to get load address of sections ARM: early traps initialisation ARM: report Spectre v2 status through sysfs arm/arm64: smccc/psci: add arm_smccc_1_1_get_conduit() arm/arm64: Provide a wrapper for SMCCC 1.1 calls x86/speculation: Warn about eIBRS + LFENCE + Unprivileged eBPF + SMT x86/speculation: Warn about Spectre v2 LFENCE mitigation x86/speculation: Update link to AMD speculation whitepaper x86/speculation: Use generic retpoline by default on AMD x86/speculation: Include unprivileged eBPF status in Spectre v2 mitigation reporting Documentation/hw-vuln: Update spectre doc x86/speculation: Add eIBRS + Retpoline options x86/speculation: Rename RETPOLINE_AMD to RETPOLINE_LFENCE x86,bugs: Unconditionally allow spectre_v2=retpoline,amd x86/speculation: Merge one test in spectre_v2_user_select_mitigation() Linux 5.4.183 hamradio: fix macro redefine warning net: dcb: disable softirqs in dcbnl_flush_dev() Revert "xfrm: xfrm_state_mtu should return at least 1280 for ipv6" btrfs: add missing run of delayed items after unlink during log replay btrfs: qgroup: fix deadlock between rescan worker and remove qgroup btrfs: fix lost prealloc extents beyond eof after full fsync tracing: Fix return value of __setup handlers tracing/histogram: Fix sorting on old "cpu" value HID: add mapping for KEY_ALL_APPLICATIONS HID: add mapping for KEY_DICTATE Input: elan_i2c - fix regulator enable count imbalance after suspend/resume Input: elan_i2c - move regulator_[en|dis]able() out of elan_[en|dis]able_power() nl80211: Handle nla_memdup failures in handle_nan_filter net: chelsio: cxgb3: check the return value of pci_find_capability() soc: fsl: qe: Check of ioremap return value memfd: fix F_SEAL_WRITE after shmem huge page allocated ibmvnic: free reset-work-item when flushing igc: igc_write_phy_reg_gpy: drop premature return ARM: 9182/1: mmu: fix returns from early_param() and __setup() functions ARM: Fix kgdb breakpoint for Thumb2 igc: igc_read_phy_reg_gpy: drop premature return arm64: dts: rockchip: Switch RK3399-Gru DP to SPDIF output can: gs_usb: change active_channels's type from atomic_t to u8 ASoC: cs4265: Fix the duplicated control name firmware: arm_scmi: Remove space in MODULE_ALIAS name efivars: Respect "block" flag in efivar_entry_set_safe() ixgbe: xsk: change !netif_carrier_ok() handling in ixgbe_xmit_zc() net: arcnet: com20020: Fix null-ptr-deref in com20020pci_probe() net: sxgbe: fix return value of __setup handler iavf: Fix missing check for running netdev net: stmmac: fix return value of __setup handler mac80211: fix forwarded mesh frames AC & queue selection ia64: ensure proper NUMA distance and possible map initialization sched/topology: Fix sched_domain_topology_level alloc in sched_init_numa() sched/topology: Make sched_init_numa() use a set for the deduplicating sort xen/netfront: destroy queues before real_num_tx_queues is zeroed block: Fix fsync always failed if once failed net/smc: fix unexpected SMC_CLC_DECL_ERR_REGRMB error cause by server net/smc: fix unexpected SMC_CLC_DECL_ERR_REGRMB error generated by client net: dcb: flush lingering app table entries for unregistered devices batman-adv: Don't expect inter-netns unique iflink indices batman-adv: Request iflink once in batadv_get_real_netdevice batman-adv: Request iflink once in batadv-on-batadv check netfilter: nf_queue: fix possible use-after-free netfilter: nf_queue: don't assume sk is full socket xfrm: enforce validity of offload input flags xfrm: fix the if_id check in changelink netfilter: fix use-after-free in __nf_register_net_hook() xfrm: fix MTU regression ASoC: ops: Shift tested values in snd_soc_put_volsw() by +min ALSA: intel_hdmi: Fix reference to PCM buffer address ata: pata_hpt37x: fix PCI clock detection usb: gadget: clear related members when goto fail usb: gadget: don't release an existing dev->buf net: usb: cdc_mbim: avoid altsetting toggling for Telit FN990 i2c: qup: allow COMPILE_TEST i2c: cadence: allow COMPILE_TEST dmaengine: shdma: Fix runtime PM imbalance on error cifs: fix double free race when mount fails in cifs_get_root() Input: clear BTN_RIGHT/MIDDLE on buttonpads ASoC: rt5682: do not block workqueue if card is unbound ASoC: rt5668: do not block workqueue if card is unbound i2c: bcm2835: Avoid clock stretching timeouts mac80211_hwsim: initialize ieee80211_tx_info at hw_scan_work mac80211_hwsim: report NOACK frames in tx_status Linux 5.4.182 fget: clarify and improve __fget_files() implementation memblock: use kfree() to release kmalloced memblock regions Revert "drm/nouveau/pmu/gm200-: avoid touching PMU outside of DEVINIT/PREOS/ACR" gpio: tegra186: Fix chip_data type confusion tty: n_gsm: fix NULL pointer access due to DLCI release tty: n_gsm: fix proper link termination after failed open tty: n_gsm: fix encoding of control signal octet bit DV xhci: Prevent futile URB re-submissions due to incorrect return value. xhci: re-initialize the HC during resume if HCE was set usb: dwc3: gadget: Let the interrupt handler disable bottom halves. usb: dwc3: pci: Fix Bay Trail phy GPIO mappings USB: serial: option: add Telit LE910R1 compositions USB: serial: option: add support for DW5829e tracefs: Set the group ownership in apply_options() not parse_options() USB: gadget: validate endpoint index for xilinx udc usb: gadget: rndis: add spinlock for rndis response list Revert "USB: serial: ch341: add new Product ID for CH341A" ata: pata_hpt37x: disable primary channel on HPT371 iio: Fix error handling for PM iio: adc: ad7124: fix mask used for setting AIN_BUFP & AIN_BUFM bits iio: adc: men_z188_adc: Fix a resource leak in an error handling path tracing: Have traceon and traceoff trigger honor the instance RDMA/ib_srp: Fix a deadlock configfs: fix a race in configfs_{,un}register_subsystem() spi: spi-zynq-qspi: Fix a NULL pointer dereference in zynq_qspi_exec_mem_op() net/mlx5: Fix wrong limitation of metadata match on ecpf net/mlx5: Fix possible deadlock on rule deletion netfilter: nf_tables: fix memory leak during stateful obj update nfp: flower: Fix a potential leak in nfp_tunnel_add_shared_mac() net: Force inlining of checksum functions in net/checksum.h net: ll_temac: check the return value of devm_kmalloc() net/mlx5e: Fix wrong return value on ioctl EEPROM query failure drm/edid: Always set RGB444 openvswitch: Fix setting ipv6 fields causing hw csum failure gso: do not skip outer ip header in case of ipip and net_failover tipc: Fix end of loop tests for list_for_each_entry() net: __pskb_pull_tail() & pskb_carve_frag_list() drop_monitor friends bpf: Do not try bpf_msg_push_data with len 0 perf data: Fix double free in perf_session__delete() ping: remove pr_err from ping_lookup lan743x: fix deadlock in lan743x_phy_link_status_change() optee: use driver internal tee_context for some rpc tee: export teedev_open() and teedev_close_context() x86/fpu: Correct pkru/xstate inconsistency netfilter: nf_tables_offload: incorrect flow offload action array size USB: zaurus: support another broken Zaurus sr9700: sanity check for packet length drm/amdgpu: disable MMHUB PG for Picasso parisc/unaligned: Fix ldw() and stw() unalignment handlers parisc/unaligned: Fix fldd and fstd unaligned handlers on 32-bit kernel vhost/vsock: don't check owner in vhost_vsock_stop() while releasing clk: jz4725b: fix mmc0 clock gating cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug Revert "netfilter: conntrack: don't refresh sctp entries in closed state" Linux 5.4.181 kconfig: fix failing to generate auto.conf net: macb: Align the dma and coherent dma masks net: usb: qmi_wwan: Add support for Dell DW5829e tracing: Fix tp_printk option related with tp_printk_stop_on_boot drm/rockchip: dw_hdmi: Do not leave clock enabled in error case ata: libata-core: Disable TRIM on M88V29 kconfig: let 'shell' return enough output for deep path names arm64: dts: meson-g12: drop BL32 region from SEI510/SEI610 arm64: dts: meson-g12: add ATF BL32 reserved-memory region arm64: dts: meson-gx: add ATF BL32 reserved-memory region netfilter: conntrack: don't refresh sctp entries in closed state irqchip/sifive-plic: Add missing thead,c900-plic match string ARM: OMAP2+: adjust the location of put_device() call in omapdss_init_of ARM: OMAP2+: hwmod: Add of_node_put() before break KVM: x86/pmu: Use AMD64_RAW_EVENT_MASK for PERF_TYPE_RAW Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj i2c: brcmstb: fix support for DSL and CM variants copy_process(): Move fd_install() out of sighand->siglock critical section dmaengine: sh: rcar-dmac: Check for error num after setting mask net: sched: limit TC_ACT_REPEAT loops lib/iov_iter: initialize "flags" in new pipe_buffer EDAC: Fix calculation of returned address and next offset in edac_align_ptr() scsi: lpfc: Fix pt2pt NVMe PRLI reject LOGO loop mtd: rawnand: brcmnand: Fixed incorrect sub-page ECC status mtd: rawnand: qcom: Fix clock sequencing in qcom_nandc_probe() NFS: Do not report writeback errors in nfs_getattr() NFS: LOOKUP_DIRECTORY is also ok with symlinks block/wbt: fix negative inflight counter when remove scsi device mtd: rawnand: gpmi: don't leak PM reference in error path powerpc/lib/sstep: fix 'ptesync' build error ASoC: ops: Fix stereo change notifications in snd_soc_put_volsw_range() ASoC: ops: Fix stereo change notifications in snd_soc_put_volsw() ALSA: hda: Fix missing codec probe on Shenker Dock 15 ALSA: hda: Fix regression on forced probe mask option libsubcmd: Fix use-after-free for realloc(..., 0) bonding: fix data-races around agg_select_timer drop_monitor: fix data-race in dropmon_net_event / trace_napi_poll_hit bonding: force carrier update when releasing slave ping: fix the dif and sdif check in ping_lookup net: ieee802154: ca8210: Fix lifs/sifs periods net: dsa: lan9303: fix reset on probe netfilter: nft_synproxy: unregister hooks on init error path iwlwifi: pcie: gen2: fix locking when "HW not ready" iwlwifi: pcie: fix locking when "HW not ready" mmc: block: fix read single on recovery logic vsock: remove vsock from connected table when connect is interrupted by a signal dmaengine: at_xdmac: Start transfer for cyclic channels in issue_pending taskstats: Cleanup the use of task->exit_code ext4: prevent partial update of the extent blocks ext4: check for inconsistent extents between index and leaf block ext4: check for out-of-order index extents in ext4_valid_extent_entries() drm/radeon: Fix backlight control on iMac 12,1 iwlwifi: fix use-after-free arm64: module/ftrace: intialize PLT at load time arm64: module: rework special section handling module/ftrace: handle patchable-function-entry ftrace: add ftrace_init_nop() Revert "module, async: async_synchronize_full() on module init iff async is used" drm/amdgpu: fix logic inversion in check nvme-rdma: fix possible use-after-free in transport error_recovery work nvme-tcp: fix possible use-after-free in transport error_recovery work nvme: fix a possible use-after-free in controller reset during load quota: make dquot_quota_sync return errors from ->sync_fs vfs: make freeze_super abort when sync_filesystem returns error ax25: improve the incomplete fix to avoid UAF and NPD bugs selftests/zram: Adapt the situation that /dev/zram0 is being used selftests/zram01.sh: Fix compression ratio calculation selftests/zram: Skip max_comp_streams interface on newer kernel net: ieee802154: at86rf230: Stop leaking skb's selftests: rtc: Increase test timeout so that all tests run platform/x86: ISST: Fix possible circular locking dependency detected btrfs: send: in case of IO error log it parisc: Fix sglist access in ccio-dma.c parisc: Fix data TLB miss in sba_unmap_sg parisc: Drop __init from map_pages declaration serial: parisc: GSC: fix build when IOSAPIC is not set Revert "svm: Add warning message for AVIC IPI invalid target" HID:Add support for UGTABLET WP5540 Makefile.extrawarn: Move -Wunaligned-access to W=1 Conflicts: Documentation/devicetree/bindings Documentation/devicetree/bindings/mtd/nand-controller.yaml Documentation/devicetree/bindings/spi/spi-mxic.txt drivers/clk/qcom/clk-rcg2.c drivers/irqchip/qcom-pdc.c drivers/mmc/core/host.c drivers/usb/host/xhci.c drivers/usb/host/xhci.h include/linux/dma-mapping.h Change-Id: I9c58b8d579ed2c613ff4903ecca688a35ed5dbbe Signed-off-by: Srinivasarao Pathipati <quic_c_spathi@quicinc.com>	2022-06-09 11:43:23 +05:30
Srinivasarao Pathipati	eb03a71570	Merge android11-5.4.180+ (e7792e2) into msm-5.4 ... * refs/heads/tmp-e7792e2: BACKPORT: scsi: ufs: Resume ufs host before accessing ufs device BACKPORT: can: ems_usb: ems_usb_start_xmit(): fix double dev_kfree_skb() in error path ANDROID: ABI: Added symbols for allwinner BACKPORT: can: usb_8dev: usb_8dev_start_xmit(): fix double dev_kfree_skb() in error path BACKPORT: esp: Fix possible buffer overflow in ESP transformation ANDROID: ABI: Update allowed list for QCOM ANDROID: dm-bow: Protect Ranges fetched and erased from the RB tree BACKPORT: staging: ion: Prevent incorrect reference counting behavour FROMGIT: net: fix wrong network header length ANDROID: fix KCFLAGS override by __ANDROID_COMMON_KERNEL__ ANDROID: Add flag to indicate compiling against ACK BACKPORT: net/packet: fix slab-out-of-bounds access in packet_recvmsg() BACKPORT: block: Add a helper to validate the block size BACKPORT: virtio-blk: Use blk_validate_block_size() to validate block size BACKPORT: fuse: fix pipe buffer lifetime for direct_io ANDROID: ABI: Update allowed list for galaxy Conflicts: build.config.common drivers/scsi/ufs/ufs-sysfs.c Change-Id: I7dc73e85ca1412a1d00422fd4a62724f65581aec Signed-off-by: Srinivasarao Pathipati <quic_c_spathi@quicinc.com>	2022-05-30 12:43:51 +05:30
Greg Kroah-Hartman	0cf7a2be06	This is the 5.4.196 stable release ... -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmKN12MACgkQONu9yGCS aT4Uvg/8DPgL4dM+jKZ4R16cbJU1rpvY0pJEcYsepqLFXdHDSLBA04eakCXO8k+x Ksy0kXvZuVGRRl25OuTGoTPvsmdx/D0R+XNSEvh9KPWVHdcB5FoDM4TskBz8vENR NDfNyWImmnE2xRCxi7GjTXI7RAyaiEDGbHtpoO+E7EN3EWv1JyhkhBhL0mBpQLGk gfzjdn7W2s5RbvH4XQFxdF5AgvnQZdMp5L92DC14/77Uo7fZXcU1VUGvASacpYu8 A2z3jZBRI+YDMeLSGXdha5LDT2KoAUu5WE9Ms3OjEOn4jfoOmPDxEwsbpupFlk/i PRclY1oitWkOgLTTg+ZO/h72tj+kPaczVryVcdM4NKvC+10xyXHk2snW0JUxO1cI Kls9d3f0ADBeb5bUrHc6zBk0sj4Bx8sGWigZCUEU1QCirTj/83F3g+RwM0dSuS6g HFw5DTZ8WvPfn9SH2RQi6D4lOZydifxOOcD72iZiyt4rOpsNkO1BY74L8oNHPcuv ukYQinLttpCiuHJFU4SYjsqH5FRkpqaun0ovD9SF8icEIJM0igI0ZJ+AMZf9ZnQJ Ws7aijqwzoFw1GcKxNYFwDxRa5Q85pVwXkl6YS46lZGP70hqrVBgxBG/pBDBY+M7 lPtszi1Pp/9LpUIZdJLjEDIULWM3qVPLEY6EEtC70syue+XKevU= =ZjkQ -----END PGP SIGNATURE----- Merge 5.4.196 into android11-5.4-lts Changes in 5.4.196 floppy: use a statically allocated error counter x86/xen: Make the boot CPU idle task reliable x86/xen: Make the secondary CPU idle tasks reliable rtc: fix use-after-free on device removal um: Cleanup syscall_handler_t definition/cast, fix warning Input: add bounds checking to input_set_capability() Input: stmfts - fix reference leak in stmfts_input_open crypto: stm32 - fix reference leak in stm32_crc_remove crypto: x86/chacha20 - Avoid spurious jumps to other functions ALSA: hda/realtek: Enable headset mic on Lenovo P360 nvme-multipath: fix hang when disk goes live over reconnect rtc: mc146818-lib: Fix the AltCentury for AMD platforms MIPS: lantiq: check the return value of kzalloc() drbd: remove usage of list iterator variable after loop platform/chrome: cros_ec_debugfs: detach log reader wq from devm ARM: 9191/1: arm/stacktrace, kasan: Silence KASAN warnings in unwind_frame() nilfs2: fix lockdep warnings in page operations for btree nodes nilfs2: fix lockdep warnings during disk space reclamation mmc: core: Specify timeouts for BKOPS and CACHE_FLUSH for eMMC mmc: block: Use generic_cmd6_time when modifying INAND_CMD38_ARG_EXT_CSD mmc: core: Default to generic_cmd6_time as timeout in __mmc_switch() SUNRPC: Clean up scheduling of autoclose SUNRPC: Prevent immediate close+reconnect SUNRPC: Don't call connect() more than once on a TCP socket SUNRPC: Ensure we flush any closed sockets before xs_xprt_free() ALSA: wavefront: Proper check of get_user() error perf: Fix sys_perf_event_open() race against self Fix double fget() in vhost_net_set_backend() PCI/PM: Avoid putting Elo i2 PCIe Ports in D3cold KVM: x86/mmu: Update number of zapped pages even if page list is stable crypto: qcom-rng - fix infinite loop on requests not multiple of WORD_SZ drm/dp/mst: fix a possible memory leak in fetch_monitor_name() dma-buf: fix use of DMA_BUF_SET_NAME_{A,B} in userspace ARM: dts: aspeed-g6: remove FWQSPID group in pinctrl dtsi ARM: dts: aspeed-g6: fix SPI1/SPI2 quad pin group net: macb: Increment rx bd head after allocating skb and buffer net/sched: act_pedit: sanitize shift argument before usage net: vmxnet3: fix possible use-after-free bugs in vmxnet3_rq_alloc_rx_buf() net: vmxnet3: fix possible NULL pointer dereference in vmxnet3_rq_cleanup() ice: fix possible under reporting of ethtool Tx and Rx statistics clk: at91: generated: consider range when calculating best rate net/qla3xxx: Fix a test in ql_reset_work() NFC: nci: fix sleep in atomic context bugs caused by nci_skb_alloc net/mlx5e: Properly block LRO when XDP is enabled net: af_key: add check for pfkey_broadcast in function pfkey_process ARM: 9196/1: spectre-bhb: enable for Cortex-A15 ARM: 9197/1: spectre-bhb: fix loop8 sequence for Thumb2 igb: skip phy status check where unavailable net: bridge: Clear offload_fwd_mark when passing frame up bridge interface. gpio: gpio-vf610: do not touch other bits when set the target bit gpio: mvebu/pwm: Refuse requests with inverted polarity perf bench numa: Address compiler error on s390 scsi: qla2xxx: Fix missed DMA unmap for aborted commands mac80211: fix rx reordering with non explicit / psmp ack policy selftests: add ping test with ping_group_range tuned ethernet: tulip: fix missing pci_disable_device() on error in tulip_init_one() net: stmmac: fix missing pci_disable_device() on error in stmmac_pci_probe() net: atlantic: verify hw_head_ lies within TX buffer ring Input: ili210x - fix reset timing block: return ELEVATOR_DISCARD_MERGE if possible net: stmmac: disable Split Header (SPH) for Intel platforms firmware_loader: use kernel credentials when reading firmware ARM: dts: imx7: Use audio_mclk_post_div instead audio_mclk_root_clk Reinstate some of "swiotlb: rework "fix info leak with DMA_FROM_DEVICE"" x86/xen: fix booting 32-bit pv guest x86/xen: Mark cpu_bringup_and_idle() as dead_end_function i2c: mt7621: fix missing clk_disable_unprepare() on error in mtk_i2c_probe() afs: Fix afs_getattr() to refetch file status if callback break occurred Linux 5.4.196 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I8464b114a6d5d655386f3c794bbb8bbc3a94e0ec	2022-05-25 10:40:14 +02:00
Jakob Koschel	232128f6e6	drbd: remove usage of list iterator variable after loop ... [ Upstream commit 901aeda62efa21f2eae937bccb71b49ae531be06 ] In preparation to limit the scope of a list iterator to the list traversal loop, use a dedicated pointer to iterate through the list [1]. Since that variable should not be used past the loop iteration, a separate variable is used to 'remember the current location within the loop'. To either continue iterating from that position or skip the iteration (if the previous iteration was complete) list_prepare_entry() is used. Link: https://lore.kernel.org/all/CAHk-=wgRr_D8CB-D9Kg-c=EHreAsk5SqXPwr9Y7k9sA6cWXJ6w@mail.gmail.com/ [1] Signed-off-by: Jakob Koschel <jakobkoschel@gmail.com> Link: https://lore.kernel.org/r/20220331220349.885126-1-jakobkoschel@gmail.com Signed-off-by: Jens Axboe <axboe@kernel.dk> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-05-25 09:14:32 +02:00
Willy Tarreau	67e2b62461	floppy: use a statically allocated error counter ... commit f71f01394f742fc4558b3f9f4c7ef4c4cf3b07c8 upstream. Interrupt handler bad_flp_intr() may cause a UAF on the recently freed request just to increment the error count. There's no point keeping that one in the request anyway, and since the interrupt handler uses a static pointer to the error which cannot be kept in sync with the pending request, better make it use a static error counter that's reset for each new request. This reset now happens when entering redo_fd_request() for a new request via set_next_request(). One initial concern about a single error counter was that errors on one floppy drive could be reported on another one, but this problem is not real given that the driver uses a single drive at a time, as that PC-compatible controllers also have this limitation by using shared signals. As such the error count is always for the "current" drive. Reported-by: Minh Yuan <yuanmingbuaa@gmail.com> Suggested-by: Linus Torvalds <torvalds@linuxfoundation.org> Tested-by: Denis Efremov <efremov@linux.com> Signed-off-by: Willy Tarreau <w@1wt.eu> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org> Signed-off-by: Denis Efremov <efremov@linux.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-05-25 09:14:31 +02:00
Greg Kroah-Hartman	375c2e2cdb	Merge tag 'android11-5.4.191_r01' into android11-5.4 ... This is the merge of the upstream LTS release of 5.4.191 into the android11-5.4 branch. It contains the following commits: d81463675427 Merge tag 'android11-5.4.191_r01' into android11-5.4 84c84ac7a3 Revert "oom_kill.c: futex: delay the OOM reaper to allow time for proper futex cleanup" 36dda9143f Merge 5.4.191 into android11-5.4-lts 4426e6017f Linux 5.4.191 3c946909a3 Revert "net: micrel: fix KS8851_MLL Kconfig" c028b81d06 block/compat_ioctl: fix range check in BLKGETSIZE 27da8d16e4 staging: ion: Prevent incorrect reference counting behavour cb158b152e spi: atmel-quadspi: Fix the buswidth adjustment between spi-mem and controller 1b6ad24210 jbd2: fix a potential race while discarding reserved buffers after an abort 0b1ba14ab2 ext4: force overhead calculation if the s_overhead_cluster makes no sense 425301ef60 ext4: fix overhead calculation to account for the reserved gdt blocks ea9c206111 ext4, doc: fix incorrect h_reserved size 259dc49dea ext4: limit length to bitmap_maxbytes - blocksize in punch_hole faadbf7ac4 ext4: fix use-after-free in ext4_search_dir 0309665eb2 ext4: fix symlink file size not match to file content ddfe3babc5 arm_pmu: Validate single/group leader events 852b02d1f8 ARC: entry: fix syscall_trace_exit argument 016ba7cbed e1000e: Fix possible overflow in LTR decoding 1217cf141b ASoC: soc-dapm: fix two incorrect uses of list iterator aa70705560 openvswitch: fix OOB access in reserve_sfa_size() d24e0d9d69 xtensa: fix a7 clobbering in coprocessor context load/store 4c26a96d0c xtensa: patch_text: Fixup last cpu should be master 8d6937c1e0 powerpc/perf: Fix power9 event alternatives 0dafb826ed drm/vc4: Use pm_runtime_resume_and_get to fix pm_runtime_get_sync() usage 013231f75f KVM: PPC: Fix TCE handling for VFIO 9cf05812cb drm/panel/raspberrypi-touchscreen: Initialise the bridge in prepare 4f08e85ca0 drm/panel/raspberrypi-touchscreen: Avoid NULL deref if not initialised 23f0ba5585 dma: at_xdmac: fix a missing check on list iterator a22f3c9926 ata: pata_marvell: Check the 'bmdma_addr' beforing reading 0441d3e95b oom_kill.c: futex: delay the OOM reaper to allow time for proper futex cleanup 530d32ac52 EDAC/synopsys: Read the error count from the correct register 91367af460 stat: fix inconsistency between struct stat and struct compat_stat 837e319ebe scsi: qedi: Fix failed disconnect handling 4b813ce289 net: macb: Restart tx only if queue pointer is lagging a1419bee4d drm/msm/mdp5: check the return of kzalloc() 80b188da30 dpaa_eth: Fix missing of_node_put in dpaa_get_ts_info() 46f9fa0a66 brcmfmac: sdio: Fix undefined behavior due to shift overflowing the constant 12a753edd9 mt76: Fix undefined behavior due to shift overflowing the constant 7c48a6e62d cifs: Check the IOCB_DIRECT flag, not O_DIRECT 435142fbdc vxlan: fix error return code in vxlan_fdb_append 99c2d9a52f ALSA: usb-audio: Fix undefined behavior due to shift overflowing the constant 3e28d157e5 platform/x86: samsung-laptop: Fix an unsigned comparison which can never be negative 54be94d336 reset: tegra-bpmp: Restore Handle errors in BPMP response 0cb2c00dd1 ARM: vexpress/spc: Avoid negative array index when !SMP 3a5ad1b8db selftests: mlxsw: vxlan_flooding: Prevent flooding of unwanted packets d37295129e netlink: reset network and mac headers in netlink_dump() 4c4f2a019f l3mdev: l3mdev_master_upper_ifindex_by_index_rcu should be using netdev_master_upper_dev_get_rcu 8c5ca6492a net/sched: cls_u32: fix possible leak in u32_init_knode() f883def546 net/packet: fix packet_sock xmit return value checking e1bc684c81 net/smc: Fix sock leak when release after smc_shutdown() f10e5c9f22 rxrpc: Restore removed timer deletion 9a9c481593 igc: Fix BUG: scheduling while atomic f9d5d17d23 igc: Fix infinite loop in release_swfw_sync 6d6271dbbb dmaengine: mediatek:Fix PM usage reference leak of mtk_uart_apdma_alloc_chan_resources 65c36555bd dmaengine: imx-sdma: Fix error checking in sdma_event_remap ccf554d148 ASoC: msm8916-wcd-digital: Check failure for devm_snd_soc_register_component 6a20bf46c6 ASoC: atmel: Remove system clock tree configuration for at91sam9g20ek 6a54979c78 ALSA: usb-audio: Clear MIDI port active flag after draining 9c99aacfb4 tcp: Fix potential use-after-free due to double kfree() 5a4f3eba21 net/sched: cls_u32: fix netns refcount changes in u32_change() b01b700e0c tcp: fix race condition when creating child sockets from syncookies ebb3b84596 gfs2: assign rgrp glock before compute_bitstructs 660784e719 can: usb_8dev: usb_8dev_start_xmit(): fix double dev_kfree_skb() in error path 2da11442a1 tracing: Dump stacktrace trigger to the corresponding instance bad7ed5575 mm: page_alloc: fix building error on -Werror=array-compare ac94e87675 etherdevice: Adjust ether_addr* prototypes to silence -Wstringop-overead af912bfbcd Merge branch 'android11-5.4' into 'android11-5.4-lts' 4bd8a3c04c Merge 5.4.190 into android11-5.4-lts dc213ac856 Linux 5.4.190 a83a18c4c9 ax25: Fix UAF bugs in ax25 timers 40cb8b3b19 ax25: Fix NULL pointer dereferences in ax25 timers d2be5b563e ax25: fix NPD bug in ax25_disconnect eaa7eb23fa ax25: fix UAF bug in ax25_send_control() 9e1e088a57 ax25: Fix refcount leaks caused by ax25_cb_del() 7528d0f221 ax25: fix UAF bugs of net_device caused by rebinding operation 1db0b2c55c ax25: fix reference count leaks of ax25_dev 418993bbaa ax25: add refcount in ax25_dev to avoid UAF bugs 4459946e86 dma-direct: avoid redundant memory sync for swiotlb 7efb8e49f6 i2c: pasemi: Wait for write xfers to finish 659855c62c smp: Fix offline cpu check in flush_smp_call_function_queue() 7f84c93722 dm integrity: fix memory corruption when tag_size is less than digest size 89931d4762 ARM: davinci: da850-evm: Avoid NULL pointer dereference 28956e530b tick/nohz: Use WARN_ON_ONCE() to prevent console saturation f4fb50ee25 genirq/affinity: Consider that CPUs on nodes can be unbalanced f616ecec0f drm/amd/display: don't ignore alpha property on pre-multiplied mode ab2f5afb7a ipv6: fix panic when forwarding a pkt with no in6 dev 377a80ca65 ALSA: pcm: Test for "silence" field in struct "pcm_format_data" 5f77b1c0e6 ALSA: hda/realtek: Add quirk for Clevo PD50PNT 358e7b451a btrfs: mark resumed async balance as writing d5b0b11c06 btrfs: remove unused variable in btrfs_{start,write}_dirty_block_groups() 0aad67337f ath9k: Fix usage of driver-private space in tx_info 7fb98e4f5b ath9k: Properly clear TX status area before reporting to mac80211 7a9e1327cc gcc-plugins: latent_entropy: use /dev/urandom 534d0aebe1 mm: kmemleak: take a full lowmem check in kmemleak_*_phys() b56d305274 mm, page_alloc: fix build_zonerefs_node() e07a70ca83 perf/imx_ddr: Fix undefined behavior due to shift overflowing the constant d05cd68ed8 drivers: net: slip: fix NPD bug in sl_tx_timeout() 6d41134f30 scsi: megaraid_sas: Target with invalid LUN ID is deleted during scan 3ecd43dcda scsi: mvsas: Add PCI ID of RocketRaid 2640 deab81144d powerpc: Fix virt_addr_valid() for 64-bit Book3E & 32-bit dd9b4b435a drm/amd/display: Fix allocate_mst_payload assert on resume 404998a137 net: usb: aqc111: Fix out-of-bounds accesses in RX fixup 4a24416796 tlb: hugetlb: Add more sizes to tlb_remove_huge_tlb_entry 29c2910c50 arm64: alternatives: mark patch_alternative() as `noinstr` 8c4db601ac regulator: wm8994: Add an off-on delay for WM8994 variant 066180758f gpu: ipu-v3: Fix dev_dbg frequency output b4ef44c7c2 ata: libata-core: Disable READ LOG DMA EXT for Samsung 840 EVOs 4cd3c9e070 net: micrel: fix KS8851_MLL Kconfig 6117facb44 scsi: ibmvscsis: Increase INITIAL_SRP_LIMIT to 1024 fb7a511542 scsi: target: tcmu: Fix possible page UAF 70b97c1546 Drivers: hv: vmbus: Prevent load re-ordering when reading ring buffer c7a268b338 drm/amdkfd: Check for potential null return of kmalloc_array() 2f3e1f3863 drm/amdkfd: Fix Incorrect VMIDs passed to HWS 46ca8233f1 drm/amd/display: Update VTEM Infopacket definition 74090c44c1 drm/amd/display: fix audio format not updated after edid updated 0b3c2222d7 drm/amd: Add USBC connector ID 22d658c6c5 cifs: potential buffer overflow in handling symlinks 5c63ad2b0a nfc: nci: add flush_workqueue to prevent uaf 1407cc68aa testing/selftests/mqueue: Fix mq_perf_tests to free the allocated cpu set 37e54d151e sctp: Initialize daddr on peeled off socket a05f5e26cb net/smc: Fix NULL pointer dereference in smc_pnet_find_ib() 1ac7c6d75e drm/msm/dsi: Use connector directly in msm_dsi_manager_connector_init() 02ee10d2a4 cfg80211: hold bss_lock while updating nontrans_list 99a435c378 net/sched: taprio: Check if socket flags are valid 7e59fdf954 net: ethernet: stmmac: fix altr_tse_pcs function when using a fixed-link 94541468c1 net/sched: fix initialization order when updating chain 0 head 4f83ba16a1 mlxsw: i2c: Fix initialization error flow 8cefae8c40 gpiolib: acpi: use correct format characters 2fd90b86df veth: Ensure eth header is in skb's linear part 5f2e543918 net/sched: flower: fix parsing of ethertype following VLAN header 9250186785 memory: atmel-ebi: Fix missing of_node_put in atmel_ebi_probe 347d6f40b8 ANDROID: GKI: fix crc issue with commit 3f91687e6e ("block: don't merge across cgroup boundaries if blkcg is enabled") ebb848e772 Revert "PCI: Reduce warnings on possible RW1C corruption" 023cd1cf3f Merge 5.4.189 into android11-5.4-lts e7f5213d75 Linux 5.4.189 b15feb09a3 ACPI: processor idle: Check for architectural support for LPI 60b6aae072 cpuidle: PSCI: Move the `has_lpi` check to the beginning of the function 598a22a077 selftests: cgroup: Test open-time cgroup namespace usage for migration checks a3f6c5949f selftests: cgroup: Test open-time credential usage for migration checks 48848242d3 selftests: cgroup: Make cg_create() use 0755 for permission instead of 0644 8a887060af cgroup: Use open-time cgroup namespace for process migration perm checks 9bd1ced646 cgroup: Allocate cgroup_file_ctx for kernfs_open_file->priv 691a0fd625 cgroup: Use open-time credentials for process migraton perm checks 1a623d361f io_uring: fix fs->users overflow 33fcb359a6 drm/amdkfd: Fix -Wstrict-prototypes from amdgpu_amdkfd_gfx_10_0_get_functions() 1549bc8cc1 drm/amdkfd: add missing void argument to function kgd2kfd_init fdfb9ae261 mm/sparsemem: fix 'mem_section' will never be NULL gcc 12 warning a0c0867f06 arm64: module: remove (NOLOAD) from linker script 2bd5b0d56d mm: don't skip swap entry even if zap_details specified dfa87d9a5d mmc: mmci: stm32: correctly check all elements of sg list c645de49e9 mmc: mmci_sdmmc: Replace sg_dma_xxx macros 0d99cce85e dmaengine: Revert "dmaengine: shdma: Fix runtime PM imbalance on error" 9e6980c68c tools build: Use $(shell ) instead of `` to get embedded libperl's ccopts f0752ee5ef tools build: Filter out options and warnings not supported by clang 3c07cc242b irqchip/gic-v3: Fix GICR_CTLR.RWP polling e44d6af17b perf: qcom_l2_pmu: fix an incorrect NULL check on list iterator 55e1465ba7 ata: sata_dwc_460ex: Fix crash due to OOB write b0c4b3fc01 arm64: patch_text: Fixup last cpu should be master 44277c50fd btrfs: fix qgroup reserve overflow the qgroup limit 17f3e31c86 x86/speculation: Restore speculation related MSRs during S3 resume 0b8043e0fc x86/pm: Save the MSR validity status at context setup 25f506273b mm/mempolicy: fix mpol_new leak in shared_policy_replace c19d8de4e6 mmmremap.c: avoid pointless invalidate_range_start/end on mremap(old_size=0) 73953dfa9d lz4: fix LZ4_decompress_safe_partial read out of bound 3b35143888 mmc: renesas_sdhi: don't overwrite TAP settings when HS400 tuning is complete 0869cb9f62 Revert "mmc: sdhci-xenon: fix annoying 1.8V regulator warning" c79c1846bd perf session: Remap buf if there is no space for event 9b6894db7c perf tools: Fix perf's libperf_print callback 4ecef6f28a SUNRPC: Handle low memory situations in call_status() 9a0da98a36 SUNRPC: Handle ENOMEM in call_transmit_status() b6a4055036 drbd: Fix five use after free bugs in get_initial_state a581b08921 bpf: Support dual-stack sockets in bpf_tcp_check_syncookie eb175e0606 spi: bcm-qspi: fix MSPI only access with bcm_qspi_exec_mem_op() 034a92c6a8 qede: confirm skb is allocated before using 7ee84d29f2 rxrpc: fix a race in rxrpc_exit_net() fee500c335 net: openvswitch: don't send internal clone attribute to the userspace. c154cf184b ipv6: Fix stats accounting in ip6_pkt_drop fbe5f4c0dd dpaa2-ptp: Fix refcount leak in dpaa2_ptp_probe 8a50937227 IB/rdmavt: add lock to call to rvt_error_qp to prevent a race condition 1ef586a864 bnxt_en: reserve space inside receive page for skb_shared_info c539a6a589 drm/imx: Fix memory leak in imx_pd_connector_get_modes cc9c2f51cd net: stmmac: Fix unset max_speed difference between DT and non-DT platforms f5064531c2 net: ipv4: fix route with nexthop object delete warning 2b7d14c105 net/tls: fix slab-out-of-bounds bug in decrypt_internal 34a47f7ddb scsi: zorro7xx: Fix a resource leak in zorro7xx_remove_one() 2133c422a1 Drivers: hv: vmbus: Fix potential crash on module unload c5e12c3a47 drm/amdgpu: fix off by one in amdgpu_gfx_kiq_acquire() 0091429095 KVM: arm64: Check arm64_get_bp_hardening_data() didn't return NULL 18e0097daf mm: fix race between MADV_FREE reclaim and blkdev direct IO read abb1f310e7 parisc: Fix patch code locking and flushing bab8e3b4f6 parisc: Fix CPU affinity for Lasi, WAX and Dino chips 1b8a6d1bda SUNRPC: Fix socket waits for write buffer space e19c3149a8 jfs: prevent NULL deref in diFree 3504b0a177 virtio_console: eliminate anonymous module_init & module_exit 60ade478c9 serial: samsung_tty: do not unlock port->lock for uart_write_wakeup() 14e6bab373 NFS: swap-out must always use STABLE writes. 66cf5de084 NFS: swap IO handling is slightly different for O_DIRECT IO fa47286c01 SUNRPC/call_alloc: async tasks mustn't block waiting for memory e427cd0ad5 clk: Enforce that disjoints limits are invalid 8a7462b521 xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32 3f8f3a1c10 NFSv4: Protect the state recovery thread against direct reclaim 96cdf2fdbe w1: w1_therm: fixes w1_seq for ds28ea00 sensors 823f0364d4 clk: si5341: fix reported clk_rate when output divider is 2 f4e16d12bc minix: fix bug when opening a file with O_DIRECT a95bbfea8f init/main.c: return 1 from handled __setup() functions b4be80aa4b netlabel: fix out-of-bounds memory accesses 3803d896dd Bluetooth: Fix use after free in hci_send_acl 8beb760f63 xtensa: fix DTC warning unit_address_format d41bdccb3c usb: dwc3: omap: fix "unbalanced disables for smps10_out1" on omap5evm 5cf2ce8967 scsi: libfc: Fix use after free in fc_exch_abts_resp() 0aeaadc52b MIPS: fix fortify panic when copying asm exception handlers c871b83748 bnxt_en: Eliminate unintended link toggle during FW reset 1166f5c139 tuntap: add sanity checks about msg_controllen in sendmsg c68dd44fb8 macvtap: advertise link netns via netlink 060a485df4 mips: ralink: fix a refcount leak in ill_acc_of_setup() 1dd7569b8c net/smc: correct settings of RMB window update limit 2fda284a3a scsi: aha152x: Fix aha152x_setup() __setup handler return value a0ef536256 scsi: pm8001: Fix pm8001_mpi_task_abort_resp() a45af7e340 drm/amdkfd: make CRAT table missing message informational only 0320bac580 dm ioctl: prevent potential spectre v1 gadget 73dd98ac19 ipv4: Invalidate neighbour for broadcast address upon address addition f5e4f728d5 power: supply: axp288-charger: Set Vhold to 4.4V 6e2dff272c PCI: pciehp: Add Qualcomm quirk for Command Completed erratum 4225947957 usb: ehci: add pci device support for Aspeed platforms ea057ac8c9 iommu/arm-smmu-v3: fix event handling soft lockup 4e85f5ab58 PCI: aardvark: Fix support for MSI interrupts c0e9d868a1 drm/amdgpu: Fix recursive locking warning cee00fd800 powerpc: Set crashkernel offset to mid of RMA region fbb7b03320 ipv6: make mc_forwarding atomic 9f24efe239 power: supply: axp20x_battery: properly report current when discharging 3575fa75da scsi: bfa: Replace snprintf() with sysfs_emit() 9cd46ee374 scsi: mvsas: Replace snprintf() with sysfs_emit() ca5da71a58 bpf: Make dst_port field in struct bpf_sock 16-bit wide 90dbc4c664 powerpc: dts: t104xrdb: fix phy type for FMAN 4/5 9388d87609 ptp: replace snprintf with sysfs_emit 4009f104b0 drm/amd/amdgpu/amdgpu_cs: fix refcount leak of a dma_fence obj c4e2f57727 ath5k: fix OOB in ath5k_eeprom_read_pcal_info_5111 61ffe21833 drm: Add orientation quirk for GPD Win Max 01f700bae4 KVM: x86/svm: Clear reserved bits written to PerfEvtSeln MSRs a5476f8d35 ARM: 9187/1: JIVE: fix return value of __setup handler 63efb90030 riscv module: remove (NOLOAD) 68a7bb6948 rtc: wm8350: Handle error for wm8350_register_irq d95e0367fd ubifs: Rectify space amount budget for mkdir/tmpfile operations 9e24d03dd4 KVM: x86: Forbid VMM to set SYNIC/STIMER MSRs when SynIC wasn't activated 1553126ecc KVM: x86/mmu: do compare-and-exchange of gPTE via the user address eb05ef70b6 openvswitch: Fixed nd target mask field in the flow dump. ce8043771f um: Fix uml_mconsole stop/go 337eb95570 ARM: dts: spear13xx: Update SPI dma properties 4e48a66623 ARM: dts: spear1340: Update serial node properties 7f19400e59 ASoC: topology: Allow TLV control to be either read or write 32a76a5574 ubi: fastmap: Return error code if memory allocation fails in add_aeb() 0c1a26c3d3 dt-bindings: spi: mxic: The interrupt property is not mandatory 97ba943e99 dt-bindings: mtd: nand-controller: Fix a comment in the examples a42ab650d3 dt-bindings: mtd: nand-controller: Fix the reg property description 7d418a0a56 bpf: Fix comment for helper bpf_current_task_under_cgroup() a075e95614 mm/usercopy: return 1 from hardened_usercopy __setup() handler abc0b4ea02 mm/memcontrol: return 1 from cgroup.memory __setup() handler 2e16f48838 mm/mmap: return 1 from stack_guard_gap __setup() handler d650ed0617 ASoC: soc-compress: Change the check for codec_dai 7f19245c36 powerpc/kasan: Fix early region not updated correctly cb249f8c00 ACPI: CPPC: Avoid out of bounds access when parsing _CPC data 7d4a3c930d ARM: iop32x: offset IRQ numbers by 1 d727fd32cb ubi: Fix race condition between ctrl_cdev_ioctl and ubi_cdev_ioctl 4f9a59cf84 ASoC: mediatek: mt6358: add missing EXPORT_SYMBOLs 230987c2bb pinctrl: nuvoton: npcm7xx: Use %zu printk format for ARRAY_SIZE() 18455cc74e pinctrl: nuvoton: npcm7xx: Rename DS() macro to DSTR() 9611d8ef68 pinctrl: pinconf-generic: Print arguments for bias-pull-* b0c0f40570 net: hns3: fix software vlan talbe of vlan 0 inconsistent with hardware 2a548fbf09 gfs2: Make sure FITRIM minlen is rounded up to fs block size 8d67f67361 rtc: check if __rtc_read_time was successful 9a8835902e XArray: Update the LRU list in xas_split() cbd110b8dd can: mcba_usb: properly check endpoint type 2dfe9422d5 can: mcba_usb: mcba_usb_start_xmit(): fix double dev_kfree_skb in error path 3e2852eda1 XArray: Fix xas_create_range() when multi-order entry present a840286f13 ubifs: rename_whiteout: correct old_dir size computing b80ccbec0e ubifs: Fix read out-of-bounds in ubifs_wbuf_write_nolock() 1afe219e4a ubifs: setflags: Make dirtied_ino_d 8 bytes aligned 786013ecba ubifs: Add missing iput if do_tmpfile() failed in rename whiteout 37bdf1ad59 ubifs: Fix deadlock in concurrent rename whiteout and inode writeback 14276d38c8 ubifs: rename_whiteout: Fix double free for whiteout_ui->data 01df5f7627 ASoC: SOF: Intel: Fix NULL ptr dereference when ENOMEM 4c277c846a KVM: x86: fix sending PV IPI a1c03f11cc KVM: Prevent module exit until all VMs are freed 8f608ee87e scsi: qla2xxx: Use correct feature type field during RFF_ID processing af744ef8f1 scsi: qla2xxx: Reduce false trigger to login 7f9ce17a1d scsi: qla2xxx: Fix N2N inconsistent PLOGI 2d087c7e55 scsi: qla2xxx: Fix missed DMA unmap for NVMe ls requests 4a0a3c66a5 scsi: qla2xxx: Fix hang due to session stuck 9d1651c8a4 scsi: qla2xxx: Fix incorrect reporting of task management failure 2eb1274176 scsi: qla2xxx: Fix disk failure to rediscover 8077a7162b scsi: qla2xxx: Suppress a kernel complaint in qla_create_qpair() c478b2cde9 scsi: qla2xxx: Check for firmware dump already collected 96391480ab scsi: qla2xxx: Add devids and conditionals for 28xx 08d04784cc scsi: qla2xxx: Fix device reconnect in loop topology 167debaeaa scsi: qla2xxx: Fix warning for missing error code e67e9620a0 scsi: qla2xxx: Fix wrong FDMI data for 64G adapter 8e561cbb78 scsi: qla2xxx: Fix stuck session in gpdb f196d94cc7 powerpc: Fix build errors with newer binutils 71ca99a509 powerpc/lib/sstep: Fix build errors with newer binutils d42b045e92 powerpc/lib/sstep: Fix 'sthcx' instruction 0af21531f5 ALSA: hda/realtek: Add alc256-samsung-headphone fixup 95d65bca6e mmc: host: Return an error when ->enable_sdio_irq() ops is missing 813553e4a9 media: hdpvr: initialize dev->worker at hdpvr_register_videodev 236311be09 media: Revert "media: em28xx: add missing em28xx_close_extension" 3b36c05f68 video: fbdev: sm712fb: Fix crash in smtcfb_write() 11186875ba ARM: mmp: Fix failure to remove sram device dc958cd4c8 ARM: tegra: tamonten: Fix I2C3 pad setting 691b0c0cb6 media: cx88-mpeg: clear interrupt status register before streaming video b239e9d52d ASoC: soc-core: skip zero num_dai component in searching dai name 7d0afbc41b video: fbdev: udlfb: replace snprintf in show functions with sysfs_emit efe9631a76 video: fbdev: omapfb: panel-tpo-td043mtea1: Use sysfs_emit() instead of snprintf() ee7ce43367 video: fbdev: omapfb: panel-dsi-cm: Use sysfs_emit() instead of snprintf() 046d9fd86b ASoC: madera: Add dependencies on MFD 46ac0e768d ARM: dts: bcm2837: Add the missing L1/L2 cache information bf27f5dfcf ARM: dts: qcom: fix gic_irq_domain_translate warnings for msm8960 3856562e94 video: fbdev: omapfb: acx565akm: replace snprintf with sysfs_emit 53a2088a39 video: fbdev: cirrusfb: check pixclock to avoid divide by zero b19c7df304 video: fbdev: w100fb: Reset global state 055cdd2e7b video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow fe41ad8be0 ntfs: add sanity check on allocation size 5a016c053f ext4: don't BUG if someone dirty pages without asking ext4 first 07150842fa spi: tegra20: Use of_device_get_match_data() 0cccf9d4fb PM: core: keep irq flags in device_pm_check_callbacks() f24e2362d6 ACPI/APEI: Limit printable size of BERT table data 931aff6274 Revert "Revert "block, bfq: honor already-setup queue merges"" 7a7b11d694 lib/raid6/test/Makefile: Use $(pound) instead of \# for Make 4.3 c7f6ae51b1 ACPICA: Avoid walking the ACPI Namespace if it is not there 5117c9ff4c bfq: fix use-after-free in bfq_dispatch_request e464aafd35 irqchip/nvic: Release nvic_base upon failure c159eb634e irqchip/qcom-pdc: Fix broken locking c345724f2b Fix incorrect type in assignment of ipv6 port for audit 927649f3f3 loop: use sysfs_emit() in the sysfs xxx show() 799f22279e selinux: use correct type for context length c4f5a678ad block, bfq: don't move oom_bfqq f409e9d178 pinctrl: npcm: Fix broken references to chip->parent_device f36dd10d1b gcc-plugins/stackleak: Exactly match strings instead of prefixes ddcdda888e LSM: general protection fault in legacy_parse_param 1f316b42a8 lib/test: use after free in register_test_dev_kmod() 7a2ba24cee net: dsa: bcm_sf2_cfp: fix an incorrect NULL check on list iterator 910a98e5c1 NFSv4/pNFS: Fix another issue with a list iterator pointing to the head 9acf05b4e7 net/x25: Fix null-ptr-deref caused by x25_disconnect d15a70fcda qlcnic: dcb: default to returning -EOPNOTSUPP 8ba93ab509 selftests: test_vxlan_under_vrf: Fix broken test case ae713d7d99 net: phy: broadcom: Fix brcm_fet_config_init() ab2c789d1c xen: fix is_xen_pmu() d85841e4b2 clk: Initialize orphan req_rate 025c75ba38 clk: qcom: gcc-msm8994: Fix gpll4 width f6f1c9a51e NFSv4.1: don't retry BIND_CONN_TO_SESSION on session error 806ef544cf netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options cec71a718c jfs: fix divide error in dbNextAG b3ac1e0196 driver core: dd: fix return value of __setup handler 1bb231de81 firmware: google: Properly state IOMEM dependency e9f2a8c642 kgdbts: fix return value of __setup handler 16fe77f86a kgdboc: fix return value of __setup handler 7c617cb38c tty: hvc: fix return value of __setup handler 0615a444c5 pinctrl/rockchip: Add missing of_node_put() in rockchip_pinctrl_probe bc1e29a351 pinctrl: nomadik: Add missing of_node_put() in nmk_pinctrl_probe 27681f9e02 pinctrl: mediatek: paris: Fix pingroup pin config state readback e9eacc8952 pinctrl: mediatek: paris: Fix "argument" argument type for mtk_pinconf_get() b348618c17 pinctrl: mediatek: Fix missing of_node_put() in mtk_pctrl_init 6e0d696188 staging: mt7621-dts: fix LEDs and pinctrl on GB-PC1 devicetree efc605469e NFS: remove unneeded check in decode_devicenotify_args() 110c038779 clk: tegra: tegra124-emc: Fix missing put_device() call in emc_ensure_emc_driver 2b5e68095c clk: clps711x: Terminate clk_div_table with sentinel element 166c0185f3 clk: loongson1: Terminate clk_div_table with sentinel element 1d04467bbb clk: actions: Terminate clk_div_table with sentinel element 50b48ba439 remoteproc: qcom_wcnss: Add missing of_node_put() in wcnss_alloc_memory_region b5625e7a16 remoteproc: qcom: Fix missing of_node_put in adsp_alloc_memory_region 16ad029942 clk: qcom: clk-rcg2: Update the frac table for pixel clock 52592f9afb clk: qcom: clk-rcg2: Update logic to calculate D value for RCG b576488fa3 clk: imx7d: Remove audio_mclk_root_clk 79467b9563 dma-debug: fix return value of __setup handlers fe334765e4 NFS: Return valid errors from nfs2/3_decode_dirent() 546604de8a iio: adc: Add check for devm_request_threaded_irq 1da082f728 serial: 8250: Fix race condition in RTS-after-send handling 617d9c0b98 serial: 8250_mid: Balance reference count for PCI DMA device 61d3fdef61 phy: dphy: Correct lpx parameter and its derivatives(ta_{get,go,sure}) 84ee0c81dd clk: qcom: ipq8074: Use floor ops for SDCC1 clock dd719fca42 pinctrl: renesas: r8a77470: Reduce size for narrow VIN1 channel b82465c1ff staging:iio:adc:ad7280a: Fix handing of device address bit reversing. 3ba0143128 misc: alcor_pci: Fix an error handling path af1fdbbb7b pwm: lpc18xx-sct: Initialize driver data and hardware before pwmchip_add() 996291d068 mxser: fix xmit_buf leak in activate when LSR == 0xff 58200dedbd mfd: asic3: Add missing iounmap() on error asic3_mfd_probe 043b197013 tipc: fix the timer expires after interval 100ms 6e2e80b2e9 openvswitch: always update flow key after nat 7a970dbb7d tcp: ensure PMTU updates are processed during fastopen b4725ad1e4 selftests/bpf/test_lirc_mode2.sh: Exit with proper code 1c7b252a60 i2c: mux: demux-pinctrl: do not deactivate a master that is not active 41249fff50 af_netlink: Fix shift out of bounds in group mask calculation 874eca9396 Bluetooth: btmtksdio: Fix kernel oops in btmtksdio_interrupt 2fe415601b USB: storage: ums-realtek: fix error code in rts51x_read_mem() 94c6ac22ab bpf, sockmap: Fix double uncharge the mem of sk_msg 244ce90c8d bpf, sockmap: Fix more uncharged while msg has more_data 6d03722c34 bpf, sockmap: Fix memleak in tcp_bpf_sendmsg while sk msg is full 0174a89663 RDMA/mlx5: Fix memory leak in error flow for subscribe event routine 9b08d211db mtd: rawnand: atmel: fix refcount issue in atmel_nand_controller_init 443121c994 MIPS: RB532: fix return value of __setup handler 9a9a62846c vxcan: enable local echo for sent CAN frames 6f259b1a4a powerpc: 8xx: fix a return value error in mpc8xx_pic_init d87803ba6b selftests/bpf: Make test_lwt_ip_encap more stable and faster ac6edd6fcb mfd: mc13xxx: Add check for mc13xxx_irq_request d2577dc2b3 powerpc/sysdev: fix incorrect use to determine if list is empty 7192df97a0 mips: DEC: honor CONFIG_MIPS_FP_SUPPORT=n 10705a4305 PCI: Reduce warnings on possible RW1C corruption 90bec38f6a power: supply: wm8350-power: Add missing free in free_charger_irq a16d8f4191 power: supply: wm8350-power: Handle error for wm8350_register_irq c703292315 i2c: xiic: Make bus names unique 6f41e4a69b hv_balloon: rate-limit "Unhandled message" warning c00a91aca2 KVM: x86/emulator: Defer not-present segment check in __load_segment_descriptor() 5f43ec383e KVM: x86: Fix emulation in writing cr8 e91ba23f55 powerpc/Makefile: Don't pass -mcpu=powerpc64 when building 32-bit 3c660fa0f9 libbpf: Skip forward declaration when counting duplicated type names b62e615a61 bpf, arm64: Feed byte-offset into bpf line info 8f3192a241 bpf, arm64: Call build_prologue() first in first JIT pass 54bc98a0ab drm/bridge: cdns-dsi: Make sure to to create proper aliases for dt 30c5cf4bf2 scsi: hisi_sas: Change permission of parameter prot_mask e2cd206815 power: supply: bq24190_charger: Fix bq24190_vbus_is_enabled() wrong false return a725070701 drm/tegra: Fix reference leak in tegra_dsi_ganged_probe cc16d0bc1c ext2: correct max file size computing b689622cc4 TOMOYO: fix __setup handlers return values aa7981012a drm/amd/display: Remove vupdate_int_entry definition 765674e3b3 scsi: pm8001: Fix abort all task initialization 442685f952 scsi: pm8001: Fix payload initialization in pm80xx_set_thermal_config() e7336d4775 scsi: pm8001: Fix command initialization in pm8001_chip_ssp_tm_req() 898c73387e scsi: pm8001: Fix command initialization in pm80XX_send_read_log() 5e3359ed09 dm crypt: fix get_key_size compiler warning if !CONFIG_KEYS 37e847b674 iwlwifi: mvm: Fix an error code in iwl_mvm_up() 4ad7d29ee4 iwlwifi: Fix -EIO error code that is never returned 770d42fff1 dax: make sure inodes are flushed before destroy cache c10980c522 IB/cma: Allow XRC INI QPs to set their local ACK timeout 2eaa9d86e0 drm/amd/display: Add affected crtcs to atomic state for dsc mst unplug 8ae97a595b iommu/ipmmu-vmsa: Check for error num after setting mask a29ce9592c HID: i2c-hid: fix GET/SET_REPORT for unnumbered reports 41ed613642 power: supply: ab8500: Fix memory leak in ab8500_fg_sysfs_init af5ad6e837 PCI: aardvark: Fix reading PCI_EXP_RTSTA_PME bit on emulated bridge 93b47d22d6 net: dsa: mv88e6xxx: Enable port policy support on 6097 b03c06171b mt76: mt7615: check sta_rates pointer in mt7615_sta_rate_tbl_update eb5932160e mt76: mt7603: check sta_rates pointer in mt7603_sta_rate_tbl_update d2ee8da9f7 powerpc/perf: Don't use perf_hw_context for trace IMC PMU 135eb4e2be ray_cs: Check ioremap return value 3be1bb175f power: reset: gemini-poweroff: Fix IRQ check in gemini_poweroff_probe 9a0e270c40 i40e: don't reserve excessive XDP_PACKET_HEADROOM on XSK Rx to skb 5607badbb1 KVM: PPC: Fix vmx/vsx mixup in mmio emulation 4d244b7311 ath9k_htc: fix uninit value bugs 57f4ad5e28 drm/amd/display: Fix a NULL pointer dereference in amdgpu_dm_connector_add_common_modes() 1feb6ff89d drm/edid: Don't clear formats if using deep color 0d0ee651e7 mtd: rawnand: gpmi: fix controller timings setting 750d2dc19f mtd: onenand: Check for error irq d58d281d6a Bluetooth: hci_serdev: call init_rwsem() before p->open() 5d50f851dd udmabuf: validate ubuf->pagecount 2cf7d537d3 ath10k: fix memory overwrite of the WoWLAN wakeup packet pattern 820e469a2f drm/bridge: Add missing pm_runtime_disable() in __dw_mipi_dsi_probe e7a0c8546f drm/bridge: Fix free wrong object in sii8620_init_rcp_input_dev f419751373 ASoC: msm8916-wcd-analog: Fix error handling in pm8916_wcd_analog_spmi_probe 1f31073b77 mmc: davinci_mmc: Handle error for clk_enable 93476f9f82 ASoC: msm8916-wcd-digital: Fix missing clk_disable_unprepare() in msm8916_wcd_digital_probe 9e1fdf18fe ASoC: imx-es8328: Fix error return code in imx_es8328_probe() 67e12f1cb2 ASoC: mxs: Fix error handling in mxs_sgtl5000_probe ed41d104be ASoC: dmaengine: do not use a NULL prepare_slave_config() callback 29e91a49b6 ivtv: fix incorrect device_caps for ivtvfb 0342da6350 video: fbdev: omapfb: Add missing of_node_put() in dvic_probe_of 58e42ee4a0 ASoC: fsi: Add check for clk_enable ea9adaa598 ASoC: wm8350: Handle error for wm8350_register_irq 0325193cf4 ASoC: atmel: Add missing of_node_put() in at91sam9g20ek_audio_probe 3cc050df73 media: stk1160: If start stream fails, return buffers with VB2_BUF_STATE_QUEUED 97398470c9 arm64: dts: rockchip: Fix SDIO regulator supply properties on rk3399-firefly 7025f40690 ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction fd5dda439e memory: emif: check the pointer temp in get_device_details() 0ead05f721 memory: emif: Add check for setup_interrupts 68a69ad8df ASoC: soc-compress: prevent the potentially use of null pointer af6e1d11f7 ASoC: atmel_ssc_dai: Handle errors for clk_enable fd0c4082fd ASoC: mxs-saif: Handle errors for clk_enable 5847873140 printk: fix return value of printk.devkmsg __setup handler 38bc92ae39 arm64: dts: broadcom: Fix sata nodename 9873232fde arm64: dts: ns2: Fix spi-cpol and spi-cpha property c6475df1e7 ALSA: spi: Add check for clk_enable() e0cfb41d46 ASoC: ti: davinci-i2s: Add check for clk_enable() 3905742f93 ASoC: rt5663: check the return value of devm_kzalloc() in rt5663_parse_dp() a975000e7a uaccess: fix nios2 and microblaze get_user_8() 14cd5a8e61 media: usb: go7007: s2250-board: fix leak in probe() 92f84aa82d media: em28xx: initialize refcount before kref_get c6f0999461 media: video/hdmi: handle short reads of hdmi info frame. a9d0bb2988 ARM: dts: imx: Add missing LVDS decoder on M53Menlo cac1473d83 soc: ti: wkup_m3_ipc: Fix IRQ check in wkup_m3_ipc_probe fb7f2eabfe arm64: dts: qcom: sm8150: Correct TCS configuration for apps rsc 583fcb66ab soc: qcom: aoss: remove spurious IRQF_ONESHOT flags 755dbc3d73 soc: qcom: rpmpd: Check for null return of devm_kcalloc 12081a1520 ARM: dts: qcom: ipq4019: fix sleep clock 547d36fa41 video: fbdev: fbcvt.c: fix printing in fb_cvt_print_name() 125d10f0be video: fbdev: atmel_lcdfb: fix an error code in atmel_lcdfb_probe() da8b269cc0 video: fbdev: smscufx: Fix null-ptr-deref in ufx_usb_probe() 4d847e455d media: aspeed: Correct value for h-total-pixels bd342c7bef media: hantro: Fix overfill bottom register field name db1b3b99d6 media: coda: Fix missing put_device() call in coda_get_vdoa_data b0f6b41490 media: bttv: fix WARNING regression on tunerless devices 0478ccdc8e f2fs: fix to avoid potential deadlock 005f9cdab7 f2fs: fix missing free nid in f2fs_handle_failed_inode a2e534c6a0 perf/x86/intel/pt: Fix address filter config for 32-bit kernel 015d31165d perf/core: Fix address filter parser for multiple filters 841f5b235d sched/debug: Remove mpol_get/put and task_lock/unlock from sched_show_numa 715a343172 clocksource: acpi_pm: fix return value of __setup handler 4c0173521d hwmon: (pmbus) Add Vin unit off handling acba286182 crypto: ccp - ccp_dmaengine_unregister release dma channels 39a521faf4 ACPI: APEI: fix return value of __setup handlers 8dc887ae33 clocksource/drivers/timer-of: Check return value of of_iomap in timer_of_base_init() b305975a66 crypto: vmx - add missing dependencies b7f3e230ca hwrng: atmel - disable trng on failure path 63266a1488 PM: suspend: fix return value of __setup handler 6c4c026c3d PM: hibernate: fix __setup handler error handling 84fe3ca6e7 block: don't delete queue kobject before its children b68d1742f4 hwmon: (sch56xx-common) Replace WDOG_ACTIVE with WDOG_HW_RUNNING bf78aca8e4 hwmon: (pmbus) Add mutex to regulator ops 00d67f54b8 spi: pxa2xx-pci: Balance reference count for PCI DMA device 40e6d5d1de crypto: ccree - don't attempt 0 len DMA mappings c3a5acf91c audit: log AUDIT_TIME_* records only from rules 152ebc0ee9 selftests/x86: Add validity check and allow field splitting f8a3de8d7c spi: tegra114: Add missing IRQ check in tegra_spi_probe e5e748a6ff crypto: mxs-dcp - Fix scatterlist processing 30d3f45bcf crypto: authenc - Fix sleep in atomic context in decrypt_tail 9b19022137 regulator: qcom_smd: fix for_each_child.cocci warnings accf175d0c PCI: pciehp: Clear cmd_busy bit in polling mode a92f720554 brcmfmac: pcie: Fix crashes due to early IRQs 51fffd722e brcmfmac: pcie: Replace brcmf_pcie_copy_mem_todev with memcpy_toio d0ab87f8dc brcmfmac: pcie: Release firmwares in the brcmf_pcie_setup error path 2c894b12b2 brcmfmac: firmware: Allocate space for default boardrev in nvram 34a57be0f9 xtensa: fix xtensa_wsr always writing 0 54c9fb17be xtensa: fix stop_machine_cpuslocked call in patch_text 4df9d88a9c media: davinci: vpif: fix unbalanced runtime PM get 28859c3a77 DEC: Limit PMAX memory probing to R3k systems baa4aa800d crypto: rsa-pkcs1pad - fix buffer overread in pkcs1pad_verify_complete() 058b2e59db crypto: rsa-pkcs1pad - restore signature length check 7973dc9118 crypto: rsa-pkcs1pad - correctly get hash from source scatterlist 002288800e lib/raid6/test: fix multiple definition linking error e73efa5ad5 thermal: int340x: Increase bitmap size 5d553ed5c5 carl9170: fix missing bit-wise or operator for tx_params 55f078dc66 ARM: dts: exynos: add missing HDMI supplies on SMDK5420 0e0d9bd6be ARM: dts: exynos: add missing HDMI supplies on SMDK5250 a77dd759bd ARM: dts: exynos: fix UART3 pins configuration in Exynos5250 2fafe8b57c ARM: dts: at91: sama5d2: Fix PMERRLOC resource size 51186190c4 video: fbdev: atari: Atari 2 bpp (STe) palette bugfix 478154be3a video: fbdev: sm712fb: Fix crash in smtcfb_read() 67643b89fb drm/edid: check basic audio support on CEA extension block 3f91687e6e block: don't merge across cgroup boundaries if blkcg is enabled 8d3a7b2064 mailbox: tegra-hsp: Flush whole channel 28c8fd84be drivers: hamradio: 6pack: fix UAF bug caused by mod_timer() 5217ae080e ACPI: properties: Consistently return -ENOENT if there are no more references f3ec0c9db5 udp: call udp_encap_enable for v6 sockets when enabling encap 11dc8286f9 powerpc/kvm: Fix kvm_use_magic_page ded6277630 drbd: fix potential silent data corruption 35b72d8e2c mm/kmemleak: reset tag when compare object pointer d102fcacfc mm,hwpoison: unmap poisoned page before invalidation 099553a1a8 ALSA: hda/realtek: Fix audio regression on Mi Notebook Pro 2020 a86bde8930 ALSA: cs4236: fix an incorrect NULL check on list iterator 8489774120 Revert "Input: clear BTN_RIGHT/MIDDLE on buttonpads" 097479aeb2 riscv: Fix fill_callchain return value c82cbbefc6 qed: validate and restrict untrusted VFs vlan promisc mode 5081cbfb62 qed: display VF trust config 930a3ed5d8 scsi: libsas: Fix sas_ata_qc_issue() handling of NCQ NON DATA commands ae2a271ed5 mempolicy: mbind_range() set_policy() after vma_merge() d1313f5e8f mm: invalidate hwpoison page cache page in fault path 2efe956a74 mm/pages_alloc.c: don't create ZONE_MOVABLE beyond the end of a node 455f4a2349 jffs2: fix memory leak in jffs2_scan_medium 0978e9af45 jffs2: fix memory leak in jffs2_do_mount_fs 30bf7244ac jffs2: fix use-after-free in jffs2_clear_xattr_subsystem e27caad38b can: ems_usb: ems_usb_start_xmit(): fix double dev_kfree_skb() in error path 00a856fa69 spi: mxic: Fix the transmit path e05221d201 pinctrl: samsung: drop pin banks references on error paths 0996eaaddf f2fs: fix to do sanity check on .cp_pack_total_block_count f1d5946d47 f2fs: quota: fix loop condition at f2fs_quota_sync() 947ca26390 f2fs: fix to unlock page correctly in error path of is_alive() ce1aa09cc1 NFSD: prevent integer overflow on 32 bit systems 85259340fc NFSD: prevent underflow in nfssvc_decode_writeargs() 1cfeeeee8c SUNRPC: avoid race between mod_timer() and del_timer_sync() 1a1e73e9ad HID: intel-ish-hid: Use dma_alloc_coherent for firmware update beb7d96906 Documentation: update stable tree link 20de1038e2 Documentation: add link to stable release candidate tree d312c0035e KEYS: fix length validation in keyctl_pkey_params_get_2() 2458ecd21f ptrace: Check PTRACE_O_SUSPEND_SECCOMP permission on PTRACE_SEIZE 8a609c88fe clk: uniphier: Fix fixed-rate initialization 9d97610e74 greybus: svc: fix an error handling bug in gb_svc_hello() 468757502e iio: inkern: make a best effort on offset calculation be2b89a909 iio: inkern: apply consumer scale when no channel scale is available 5be8a07b95 iio: inkern: apply consumer scale on IIO_VAL_INT cases c459b27945 iio: afe: rescale: use s64 for temporary scale calculations 576a1ce64c coresight: Fix TRCCONFIGR.QE sysfs interface d8f98a23b4 xhci: fix uninitialized string returned by xhci_decode_ctrl_ctx() b310e82e77 xhci: make xhci_handshake timeout for xhci_reset() adjustable a771cc784a xhci: fix runtime PM imbalance in USB2 resume b5a7ab0e1a USB: usb-storage: Fix use of bitfields for hardware data in ene_ub6250.c 212765c94f virtio-blk: Use blk_validate_block_size() to validate block size 40f282870d block: Add a helper to validate the block size a27ed2f369 tpm: fix reference counting for struct tpm_chip 631bb18e83 iommu/iova: Improve 32-bit free space estimate 2e2dee5e22 net: dsa: microchip: add spi_device_id tables ef388db2fe af_key: add __GFP_ZERO flag for compose_sadb_supported in function pfkey_register 0cdb512da0 spi: Fix erroneous sgs value with min_t() ab951c9c23 net:mcf8390: Use platform_get_irq() to get the interrupt e62e6c2d7a spi: Fix invalid sgs value 96f9c386fe ethernet: sun: Free the coherent when failing in probing aa3c3746e7 virtio_console: break out of buf poll on remove 291efbad3d xfrm: fix tunnel model fragmentation behavior a83df90a3b HID: logitech-dj: add new lightspeed receiver id 5c727ba42c netdevice: add the case if dev is NULL 7e9c9e3f62 USB: serial: simple: add Nokia phone driver 80e5bf89a8 USB: serial: pl2303: add IBM device IDs 6bfc5377a2 swiotlb: fix info leak with DMA_FROM_DEVICE 5789342ce9 Merge 5.4.188 into android11-5.4-lts 2845ff3fd3 Linux 5.4.188 993c23880b llc: only change llc->dev when bind() succeeds bb4878b39d nds32: fix access_ok() checks in get/put_user 5b1d2561a0 tpm: use try_get_ops() in tpm-space.c 3bbd0000d0 mac80211: fix potential double free on mesh join cda27a2c6d rcu: Don't deboost before reporting expedited quiescent state edcc12ae32 crypto: qat - disable registration of algorithms b0222e222d ACPI: video: Force backlight native for Clevo NL5xRU and NL5xNU d7f29f397b ACPI: battery: Add device HID and quirk for Microsoft Surface Go 3 2374007850 ACPI / x86: Work around broken XSDT on Advantech DAC-BJ01 board 06f0ff82c7 netfilter: nf_tables: initialize registers in nft_do_chain() 5061bf0f79 ALSA: hda/realtek: Add quirk for ASUS GA402 f7a7cd530a ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc671 0c4190b41a ALSA: oss: Fix PCM OSS buffer allocation overflow ab49515f7d ASoC: sti: Fix deadlock via snd_pcm_stop_xrun() call d5c7e1987c drivers: net: xgene: Fix regression in CRC stripping 7870321eaf ALSA: pci: fix reading of swapped values from pcmreg in AC97 codec 1f4eefc585 ALSA: cmipci: Restore aux vol on suspend/resume d86bf7e073 ALSA: usb-audio: Add mute TLV for playback volumes on RODE NT-USB 0f27a350f8 ALSA: pcm: Add stream lock during PCM reset ioctl operations 572f9a0d3f llc: fix netdevice reference leaks in llc_ui_bind() 2e798814e0 thermal: int340x: fix memory leak in int3400_notify() 5ff048f4ab staging: fbtft: fb_st7789v: reset display before initialization 637d12f9dc tpm: Fix error handling in async work fee4dfbda6 esp: Fix possible buffer overflow in ESP transformation 2774edd43a net: ipv6: fix skb_over_panic in __ip6_append_data 0aef718463 nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION 628adfa218 nfsd: Containerise filecache laundrette c32f104138 nfsd: cleanup nfsd_file_lru_dispose() 400a374bce Merge 5.4.187 into android11-5.4-lts 055c4cf7e6 Linux 5.4.187 1771bc0d04 Revert "selftests/bpf: Add test for bpf_timer overwriting crash" 0dd366cfdf perf symbols: Fix symbol size calculation condition e732b0412f Input: aiptek - properly check endpoint type 700a071585 usb: usbtmc: Fix bug in pipe direction for control transfers 2282a6eb6d usb: gadget: Fix use-after-free bug by not setting udc->dev.driver 2182937626 usb: gadget: rndis: prevent integer overflow in rndis_set_response() 58ee8e2cb3 arm64: fix clang warning about TRAMP_VALIAS d7b9296375 net: dsa: Add missing of_node_put() in dsa_port_parse_of f96aa063ff net: handle ARPHRD_PIMREG in dev_is_mac_header_xmit() 3fd96bc64c drm/panel: simple: Fix Innolux G070Y2-L01 BPP settings b01e2df5fb hv_netvsc: Add check for kvmalloc_array 97ccef56e5 atm: eni: Add check for dma_map_single 268dcf1f7b net/packet: fix slab-out-of-bounds access in packet_recvmsg() 9369748366 net: phy: marvell: Fix invalid comparison in the resume and suspend functions d0f3c2d1d8 efi: fix return value of __setup handlers e61655430d ocfs2: fix crash when initialize filecheck kobj fails 184f7bd08c crypto: qcom-rng - ensure buffer for generate is completely filled 8aca45f6ed Merge branch 'android11-5.4' into 'android11-5.4-lts' f54aeabbaa Merge 5.4.186 into android11-5.4-lts 8e24ff11b5 Linux 5.4.186 fcbdaa6a3c fixup for "arm64 entry: Add macro for reading symbol address from the trampoline" b8bc0718ba kselftest/vm: fix tests build with old libc 2643ca24f5 sfc: extend the locking on mcdi->seqno 46fd0a0740 tcp: make tcp_read_sock() more robust 16a2e50fe9 nl80211: Update bss channel on channel switch for P2P_CLIENT 941e8bcd2b drm/vrr: Set VRR capable prop only if it is attached to connector 6becb05724 iwlwifi: don't advertise TWT support 51969ebe7f atm: firestream: check the return value of ioremap() in fs_init() 23352749f0 can: rcar_canfd: rcar_canfd_channel_probe(): register the CAN device when fully ready 4006447f55 ARM: 9178/1: fix unmet dependency on BITREVERSE for HAVE_ARCH_BITREVERSE c2420bc333 MIPS: smp: fill in sibling and core maps earlier d1df59e312 mac80211: refuse aggregations sessions before authorized fb35b0cfba ARM: dts: rockchip: fix a typo on rk3288 crypto-controller 4857a9b291 ARM: dts: rockchip: reorder rk322x hmdi clocks ba14ba2d4c arm64: dts: agilex: use the compatible "intel,socfpga-agilex-hsotg" aca8fdddee arm64: dts: rockchip: reorder rk3399 hdmi clocks e49ebea3f5 arm64: dts: rockchip: fix rk3399-puma eMMC HS400 signal integrity bd33f9b864 xfrm: Fix xfrm migrate issues when address family changes 3c21ece775 xfrm: Check if_id in xfrm_migrate 970a21404e arm64: Use the clearbhb instruction in mitigations fb65675f66 KVM: arm64: Allow SMCCC_ARCH_WORKAROUND_3 to be discovered and migrated 9013fd4bc9 arm64: Mitigate spectre style branch history side channels 26129ea295 KVM: arm64: Add templates for BHB mitigation sequences 1b735c8dc1 arm64: proton-pack: Report Spectre-BHB vulnerabilities as part of Spectre-v2 c45d885c5a arm64: Add percpu vectors for EL1 1bb1944970 arm64: entry: Add macro for reading symbol addresses from the trampoline 3abf6e8a7a arm64: entry: Add vectors that have the bhb mitigation sequences 2933ca8c81 arm64: entry: Add non-kpti __bp_harden_el1_vectors for mitigations 9232867e4f arm64: entry: Allow the trampoline text to occupy multiple pages ad8800443b arm64: entry: Make the kpti trampoline's kpti sequence optional 4b91f35c87 arm64: entry: Move trampoline macros out of ifdef'd section 0bfdd73348 arm64: entry: Don't assume tramp_vectors is the start of the vectors fb117a27c6 arm64: entry: Allow tramp_alias to access symbols after the 4K boundary 788fbb5fe2 arm64: entry: Move the trampoline data page before the text page 33397322d4 arm64: entry: Free up another register on kpti's tramp_exit path 3f95cc642c arm64: entry: Make the trampoline cleanup optional 8aa1257128 arm64: entry.S: Add ventry overflow sanity checks 503fdc244a arm64: Add Cortex-X2 CPU part definition 7103651c98 arm64: add ID_AA64ISAR2_EL1 sys register f5f94aa500 arm64: Add Neoverse-N2, Cortex-A710 CPU part definition ed5bf8a507 arm64: Add part number for Arm Cortex-A77 0b84cfaefe sctp: fix the processing for INIT chunk 57e401a53c Revert "xfrm: state and policy should fail if XFRMA_IF_ID 0" 80b62a22cd Merge 5.4.185 into android11-5.4-lts 70f77a2cb5 Linux 5.4.185 afb684cb97 KVM: SVM: Don't flush cache if hardware enforces cache coherency across encryption domains 690909c6d9 x86/mm/pat: Don't flush cache if hardware enforces cache coherency across encryption domnains 6b13a18860 x86/cpu: Add hardware-enforced cache coherency as a CPUID feature 9dd71ec106 x86/cpufeatures: Mark two free bits in word 3 a4eef9e769 ext4: add check to prevent attempting to resize an fs with sparse_super2 269db254c3 ARM: fix Thumb2 regression with Spectre BHB 635959a821 virtio: acknowledge all features before access ffeb42e05d virtio: unexport virtio_finalize_features 19d57cfbf8 arm64: dts: marvell: armada-37xx: Remap IO space to bus address 0x0 978e4f2648 riscv: Fix auipc+jalr relocation range checks d6948de3b6 mmc: meson: Fix usage of meson_mmc_post_req() ba0d7beec2 net: macb: Fix lost RX packet wakeup race in NAPI receive 403e3afe24 staging: gdm724x: fix use after free in gdm_lte_rx() a9174077fe fuse: fix pipe buffer lifetime for direct_io d72c79b60d ARM: Spectre-BHB: provide empty stub for non-config ad66df9064 selftests/memfd: clean up mapping in mfd_fail_write 849c78024e selftest/vm: fix map_fixed_noreplace test failure 500158df87 tracing: Ensure trace buffer is at least 4096 bytes large 090e73fb9c ipv6: prevent a possible race condition with lifetimes 1d4bdaaa8d Revert "xen-netback: Check for hotplug-status existence before watching" 60e4e3198c Revert "xen-netback: remove 'hotplug-status' once it has served its purpose" 8879b5313e net-sysfs: add check for netdevice being present to speed_show dcf55b071d selftests/bpf: Add test for bpf_timer overwriting crash e0eca9285c net: bcmgenet: Don't claim WOL when its not available bbf59d7ae5 sctp: fix kernel-infoleak for SCTP sockets e934371971 net: phy: DP83822: clear MISR2 register to disable interrupts f7b3b52034 gianfar: ethtool: Fix refcount leak in gfar_get_ts_info 54fd6b2eb1 gpio: ts4900: Do not set DAT and OE together 82b298e014 selftests: pmtu.sh: Kill tcpdump processes launched by subshell. cd2a5c0da0 NFC: port100: fix use-after-free in port100_send_complete 1a4017926e net/mlx5: Fix a race on command flush flow 6102e2e5c6 net/mlx5: Fix size field in bufferx_reg struct 0a64aea5fe ax25: Fix NULL pointer dereference in ax25_kill_by_device 45bfd0a937 net: ethernet: lpc_eth: Handle error for clk_enable e84d37af40 net: ethernet: ti: cpts: Handle error for clk_enable 8ee065a7a9 ethernet: Fix error handling in xemaclite_of_probe 4c0b769d95 ARM: dts: aspeed: Fix AST2600 quad spi group 7db2bc0861 drm/sun4i: mixer: Fix P010 and P210 format numbers 7f8f564141 qed: return status of qed_iov_get_link f59e786090 net: qlogic: check the return value of dma_alloc_coherent() in qed_vf_hw_prepare() 45d470e4f8 virtio-blk: Don't use MAX_DISCARD_SEGMENTS if max_discard_seg is zero 278b2c7d9f arm64: dts: armada-3720-turris-mox: Add missing ethernet0 alias f62922b601 clk: qcom: gdsc: Add support to update GDSC transition delay 9ed911a069 Merge 5.4.184 into android11-5.4-lts 8f2333be80 Merge 5.4.183 into android11-5.4-lts 55d2e3e494 ANDROID: fix up rndis ABI breakage 1346e17653 Linux 5.4.184 f7fc9c3487 Revert "ACPI: PM: s2idle: Cancel wakeup before dispatching EC GPE" 0e35f3ab69 xen/netfront: react properly to failing gnttab_end_foreign_access_ref() 782e5ebcc8 xen/gnttab: fix gnttab_end_foreign_access() without page specified 051c4cc7bd xen/pvcalls: use alloc/free_pages_exact() be63ea883e xen/9p: use alloc/free_pages_exact() 8efaf0c862 xen: remove gnttab_query_foreign_access() d193785a4b xen/gntalloc: don't use gnttab_query_foreign_access() 089a8e491d xen/scsifront: don't use gnttab_query_foreign_access() for mapped status b507879c1e xen/netfront: don't use gnttab_query_foreign_access() for mapped status a83400456f xen/blkfront: don't use gnttab_query_foreign_access() for mapped status 44d86dccd2 xen/grant-table: add gnttab_try_end_foreign_access() 95ff823832 xen/xenbus: don't let xenbus_grant_ring() remove grants in error case 56f1b3c5c8 ARM: fix build warning in proc-v7-bugs.c 40da947ba0 ARM: Do not use NOCROSSREFS directive with ld.lld 583662bfd8 ARM: fix co-processor register typo 21a466c32f ARM: fix build error when BPF_SYSCALL is disabled d1cfdd5077 ARM: include unprivileged BPF status in Spectre V2 reporting 920f7970cf ARM: Spectre-BHB workaround dcf33beb49 ARM: use LOADADDR() to get load address of sections 31814db6e4 ARM: early traps initialisation fdfc0baf82 ARM: report Spectre v2 status through sysfs 26171b016b arm/arm64: smccc/psci: add arm_smccc_1_1_get_conduit() baaaba74e0 arm/arm64: Provide a wrapper for SMCCC 1.1 calls 6c1599fd1b x86/speculation: Warn about eIBRS + LFENCE + Unprivileged eBPF + SMT 7c77025694 x86/speculation: Warn about Spectre v2 LFENCE mitigation 865da3868b x86/speculation: Update link to AMD speculation whitepaper b1bacf22a8 x86/speculation: Use generic retpoline by default on AMD 1e47ab3df9 x86/speculation: Include unprivileged eBPF status in Spectre v2 mitigation reporting 327a4da9b0 Documentation/hw-vuln: Update spectre doc 96b3d45aea x86/speculation: Add eIBRS + Retpoline options 41b50510e5 x86/speculation: Rename RETPOLINE_AMD to RETPOLINE_LFENCE b70bc2e355 x86,bugs: Unconditionally allow spectre_v2=retpoline,amd 22aed24089 x86/speculation: Merge one test in spectre_v2_user_select_mitigation() e7d1268f56 Linux 5.4.183 5817c13cd6 hamradio: fix macro redefine warning 3c7d63cfa1 net: dcb: disable softirqs in dcbnl_flush_dev() 5f53a6a8ae Revert "xfrm: xfrm_state_mtu should return at least 1280 for ipv6" f73eb7342b btrfs: add missing run of delayed items after unlink during log replay f8d4a8eebb btrfs: qgroup: fix deadlock between rescan worker and remove qgroup 39403d72b4 btrfs: fix lost prealloc extents beyond eof after full fsync 4dd5d3310c tracing: Fix return value of __setup handlers c0f7253376 tracing/histogram: Fix sorting on old "cpu" value 35fa6f2a31 HID: add mapping for KEY_ALL_APPLICATIONS ecefb8cc0f HID: add mapping for KEY_DICTATE 52b984b17d Input: elan_i2c - fix regulator enable count imbalance after suspend/resume 16eb602ead Input: elan_i2c - move regulator_[en|dis]able() out of elan_[en|dis]able_power() 3f123c305e nl80211: Handle nla_memdup failures in handle_nan_filter ec89b27646 net: chelsio: cxgb3: check the return value of pci_find_capability() 6650fa5f3b soc: fsl: qe: Check of ioremap return value e89c53fcd2 memfd: fix F_SEAL_WRITE after shmem huge page allocated 58b07100c2 ibmvnic: free reset-work-item when flushing 2e7abe2efc igc: igc_write_phy_reg_gpy: drop premature return 5c215ea574 ARM: 9182/1: mmu: fix returns from early_param() and __setup() functions 89b881f339 ARM: Fix kgdb breakpoint for Thumb2 87765309bf igc: igc_read_phy_reg_gpy: drop premature return 44ff6c29b2 arm64: dts: rockchip: Switch RK3399-Gru DP to SPDIF output d59120a489 can: gs_usb: change active_channels's type from atomic_t to u8 bc65372492 ASoC: cs4265: Fix the duplicated control name cff3987e09 firmware: arm_scmi: Remove space in MODULE_ALIAS name 461a26ebf0 efivars: Respect "block" flag in efivar_entry_set_safe() b4f4659843 ixgbe: xsk: change !netif_carrier_ok() handling in ixgbe_xmit_zc() e50c589678 net: arcnet: com20020: Fix null-ptr-deref in com20020pci_probe() 044e209c72 net: sxgbe: fix return value of __setup handler a54dedf620 iavf: Fix missing check for running netdev 150b8a05d0 net: stmmac: fix return value of __setup handler e9fa400903 mac80211: fix forwarded mesh frames AC & queue selection f17b27f3d4 ia64: ensure proper NUMA distance and possible map initialization 80998dbde1 sched/topology: Fix sched_domain_topology_level alloc in sched_init_numa() 407ec382ba sched/topology: Make sched_init_numa() use a set for the deduplicating sort b40c912624 xen/netfront: destroy queues before real_num_tx_queues is zeroed fa84d44df4 block: Fix fsync always failed if once failed 849339fd72 net/smc: fix unexpected SMC_CLC_DECL_ERR_REGRMB error cause by server 8e306a76b9 net/smc: fix unexpected SMC_CLC_DECL_ERR_REGRMB error generated by client 1f5abd671d net: dcb: flush lingering app table entries for unregistered devices ed05368024 batman-adv: Don't expect inter-netns unique iflink indices 8639532271 batman-adv: Request iflink once in batadv_get_real_netdevice a1ccea6183 batman-adv: Request iflink once in batadv-on-batadv check 43c25da41e netfilter: nf_queue: fix possible use-after-free 3c934f1087 netfilter: nf_queue: don't assume sk is full socket d2c96b1930 xfrm: enforce validity of offload input flags 019b4b9d59 xfrm: fix the if_id check in changelink 49c24579ce netfilter: fix use-after-free in __nf_register_net_hook() ac858e4462 xfrm: fix MTU regression f3537f1b2b ASoC: ops: Shift tested values in snd_soc_put_volsw() by +min 75a471401b ALSA: intel_hdmi: Fix reference to PCM buffer address e28372b295 ata: pata_hpt37x: fix PCI clock detection 58b419d16e usb: gadget: clear related members when goto fail ba6fdd55b1 usb: gadget: don't release an existing dev->buf 0babb778ff net: usb: cdc_mbim: avoid altsetting toggling for Telit FN990 a7ef01d25a i2c: qup: allow COMPILE_TEST da9bf89344 i2c: cadence: allow COMPILE_TEST bb07c8bb77 dmaengine: shdma: Fix runtime PM imbalance on error e208668ef7 cifs: fix double free race when mount fails in cifs_get_root() 2ed93e3e3f Input: clear BTN_RIGHT/MIDDLE on buttonpads 7b6d98f869 ASoC: rt5682: do not block workqueue if card is unbound e2106e429f ASoC: rt5668: do not block workqueue if card is unbound 7b7c65abeb i2c: bcm2835: Avoid clock stretching timeouts 964f155c38 mac80211_hwsim: initialize ieee80211_tx_info at hw_scan_work 1a7d2fccd8 mac80211_hwsim: report NOACK frames in tx_status 31855d74fd Merge 5.4.182 into android11-5.4-lts 866ae42cf4 Linux 5.4.182 fb2bbb7d30 fget: clarify and improve __fget_files() implementation d6a29ce52a memblock: use kfree() to release kmalloced memblock regions 5d9453bf41 Revert "drm/nouveau/pmu/gm200-: avoid touching PMU outside of DEVINIT/PREOS/ACR" 1fb051bbbc gpio: tegra186: Fix chip_data type confusion 2782b05d02 tty: n_gsm: fix NULL pointer access due to DLCI release c03a495814 tty: n_gsm: fix proper link termination after failed open 912144e8a3 tty: n_gsm: fix encoding of control signal octet bit DV 1879db4f25 xhci: Prevent futile URB re-submissions due to incorrect return value. 80922d7b52 xhci: re-initialize the HC during resume if HCE was set 0139a10090 usb: dwc3: gadget: Let the interrupt handler disable bottom halves. 6e74aebbf7 usb: dwc3: pci: Fix Bay Trail phy GPIO mappings ba3e83e5a0 USB: serial: option: add Telit LE910R1 compositions 92ac25b79d USB: serial: option: add support for DW5829e 40256addf5 tracefs: Set the group ownership in apply_options() not parse_options() 6b23eda989 USB: gadget: validate endpoint index for xilinx udc 9ab652d41d usb: gadget: rndis: add spinlock for rndis response list 39848d7e4e Revert "USB: serial: ch341: add new Product ID for CH341A" 7c453de366 ata: pata_hpt37x: disable primary channel on HPT371 a28f8dbd47 iio: Fix error handling for PM 8fff0310e6 iio: adc: ad7124: fix mask used for setting AIN_BUFP & AIN_BUFM bits ce1076b33e iio: adc: men_z188_adc: Fix a resource leak in an error handling path cb90ab3f09 tracing: Have traceon and traceoff trigger honor the instance 901206f71e RDMA/ib_srp: Fix a deadlock b7e2b91fcb configfs: fix a race in configfs_{,un}register_subsystem() df14d2bed8 spi: spi-zynq-qspi: Fix a NULL pointer dereference in zynq_qspi_exec_mem_op() a62f4266d5 net/mlx5: Fix wrong limitation of metadata match on ecpf 45618e9157 net/mlx5: Fix possible deadlock on rule deletion 53026346a9 netfilter: nf_tables: fix memory leak during stateful obj update 5ad5886f85 nfp: flower: Fix a potential leak in nfp_tunnel_add_shared_mac() dfe537b0c9 net: Force inlining of checksum functions in net/checksum.h eee01c88c9 net: ll_temac: check the return value of devm_kmalloc() fc92a14fa0 net/mlx5e: Fix wrong return value on ioctl EEPROM query failure 3cbf1f98d8 drm/edid: Always set RGB444 d0251c38df openvswitch: Fix setting ipv6 fields causing hw csum failure 2b3cdd70ea gso: do not skip outer ip header in case of ipip and net_failover 0240bb276f tipc: Fix end of loop tests for list_for_each_entry() 2ed1326376 net: __pskb_pull_tail() & pskb_carve_frag_list() drop_monitor friends 97a6c07d6f bpf: Do not try bpf_msg_push_data with len 0 dffce58f6f perf data: Fix double free in perf_session__delete() 3174b09fe1 ping: remove pr_err from ping_lookup 767099f0ec lan743x: fix deadlock in lan743x_phy_link_status_change() 5d76e0b69d optee: use driver internal tee_context for some rpc 0e526f533f tee: export teedev_open() and teedev_close_context() 64e0b5894c x86/fpu: Correct pkru/xstate inconsistency 49c011a44e netfilter: nf_tables_offload: incorrect flow offload action array size 49a4536a46 USB: zaurus: support another broken Zaurus b95d71abeb sr9700: sanity check for packet length d0dac454b9 drm/amdgpu: disable MMHUB PG for Picasso eb88a38831 parisc/unaligned: Fix ldw() and stw() unalignment handlers b783ef3eb6 parisc/unaligned: Fix fldd and fstd unaligned handlers on 32-bit kernel 0b608b3392 vhost/vsock: don't check owner in vhost_vsock_stop() while releasing dd0de35102 clk: jz4725b: fix mmc0 clock gating d1f1de5dff cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug 2867afd647 Revert "netfilter: conntrack: don't refresh sctp entries in closed state" 56f5213db8 Merge 5.4.181 into android11-5.4-lts b6e8856b8a Linux 5.4.181 3e73b02af6 kconfig: fix failing to generate auto.conf 90c0d3cc67 net: macb: Align the dma and coherent dma masks f1c3f41245 net: usb: qmi_wwan: Add support for Dell DW5829e 6b364ca481 tracing: Fix tp_printk option related with tp_printk_stop_on_boot 8bf73d5ea9 drm/rockchip: dw_hdmi: Do not leave clock enabled in error case 5a21d50723 ata: libata-core: Disable TRIM on M88V29 41da91158e kconfig: let 'shell' return enough output for deep path names 913932a306 arm64: dts: meson-g12: drop BL32 region from SEI510/SEI610 d2fd1c7804 arm64: dts: meson-g12: add ATF BL32 reserved-memory region daa8680809 arm64: dts: meson-gx: add ATF BL32 reserved-memory region ba4b40356a netfilter: conntrack: don't refresh sctp entries in closed state d4de2bbcbc irqchip/sifive-plic: Add missing thead,c900-plic match string 2d7a327a12 ARM: OMAP2+: adjust the location of put_device() call in omapdss_init_of fff21185f5 ARM: OMAP2+: hwmod: Add of_node_put() before break 3deabc3f60 KVM: x86/pmu: Use AMD64_RAW_EVENT_MASK for PERF_TYPE_RAW fe595759c2 Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj ba71b1b30d i2c: brcmstb: fix support for DSL and CM variants 6f08452c56 copy_process(): Move fd_install() out of sighand->siglock critical section e52dfd2a49 dmaengine: sh: rcar-dmac: Check for error num after setting mask c83049cb88 net: sched: limit TC_ACT_REPEAT loops 87c575d2a2 lib/iov_iter: initialize "flags" in new pipe_buffer 091dac5c63 EDAC: Fix calculation of returned address and next offset in edac_align_ptr() f0c2c023c2 scsi: lpfc: Fix pt2pt NVMe PRLI reject LOGO loop 56f9abba98 mtd: rawnand: brcmnand: Fixed incorrect sub-page ECC status bdc70b603d mtd: rawnand: qcom: Fix clock sequencing in qcom_nandc_probe() 3758a57076 NFS: Do not report writeback errors in nfs_getattr() 357d42d593 NFS: LOOKUP_DIRECTORY is also ok with symlinks 20f4ee3c33 block/wbt: fix negative inflight counter when remove scsi device 4cd3281a91 mtd: rawnand: gpmi: don't leak PM reference in error path c6fee7c854 powerpc/lib/sstep: fix 'ptesync' build error edfac6b77b ASoC: ops: Fix stereo change notifications in snd_soc_put_volsw_range() d6d8d1db80 ASoC: ops: Fix stereo change notifications in snd_soc_put_volsw() 99c2b13ce9 ALSA: hda: Fix missing codec probe on Shenker Dock 15 2b2b531ceb ALSA: hda: Fix regression on forced probe mask option aca7e5b6a5 libsubcmd: Fix use-after-free for realloc(..., 0) 7af6164cee bonding: fix data-races around agg_select_timer aeb993412e drop_monitor: fix data-race in dropmon_net_event / trace_napi_poll_hit db3ffc5d33 bonding: force carrier update when releasing slave fb8c98f92a ping: fix the dif and sdif check in ping_lookup 8198c4d4c2 net: ieee802154: ca8210: Fix lifs/sifs periods a06440508a net: dsa: lan9303: fix reset on probe 73f8575216 netfilter: nft_synproxy: unregister hooks on init error path 5e8c5b217c iwlwifi: pcie: gen2: fix locking when "HW not ready" e1d0e738b0 iwlwifi: pcie: fix locking when "HW not ready" 902528183f mmc: block: fix read single on recovery logic 5f326fe2ae vsock: remove vsock from connected table when connect is interrupted by a signal f48a38703c dmaengine: at_xdmac: Start transfer for cyclic channels in issue_pending 41ce06a3ec taskstats: Cleanup the use of task->exit_code 8583d2ea90 ext4: prevent partial update of the extent blocks d57fcf0d91 ext4: check for inconsistent extents between index and leaf block 6a332d095c ext4: check for out-of-order index extents in ext4_valid_extent_entries() 13f6ebef03 drm/radeon: Fix backlight control on iMac 12,1 494de920d9 iwlwifi: fix use-after-free 6194b46897 arm64: module/ftrace: intialize PLT at load time adcc4b795f arm64: module: rework special section handling dfe928f16c module/ftrace: handle patchable-function-entry 30af4dcfa8 ftrace: add ftrace_init_nop() 42c8cccf83 Revert "module, async: async_synchronize_full() on module init iff async is used" 5c7726bd57 drm/amdgpu: fix logic inversion in check d411b2a5da nvme-rdma: fix possible use-after-free in transport error_recovery work 61a26ffd5a nvme-tcp: fix possible use-after-free in transport error_recovery work 70356b756a nvme: fix a possible use-after-free in controller reset during load 89d2bd1325 quota: make dquot_quota_sync return errors from ->sync_fs f124d9eff9 vfs: make freeze_super abort when sync_filesystem returns error cfc8b37ef0 ax25: improve the incomplete fix to avoid UAF and NPD bugs dd2fcac324 selftests/zram: Adapt the situation that /dev/zram0 is being used c3a9afa824 selftests/zram01.sh: Fix compression ratio calculation 8d1c50c868 selftests/zram: Skip max_comp_streams interface on newer kernel 455ef08d6e net: ieee802154: at86rf230: Stop leaking skb's 3bd8bebb16 selftests: rtc: Increase test timeout so that all tests run bc6ac6c0f6 platform/x86: ISST: Fix possible circular locking dependency detected bd6492930a btrfs: send: in case of IO error log it 3ff48a67ed parisc: Fix sglist access in ccio-dma.c efccc9b0c7 parisc: Fix data TLB miss in sba_unmap_sg 3434d8837f parisc: Drop __init from map_pages declaration bd282ee53e serial: parisc: GSC: fix build when IOSAPIC is not set 9d2aad133b Revert "svm: Add warning message for AVIC IPI invalid target" 1902725520 HID:Add support for UGTABLET WP5540 866a85813b Makefile.extrawarn: Move -Wunaligned-access to W=1 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: Ic789d7f387b2848b0c0a9a72d4867720841a5e2b	2022-05-24 14:46:57 +02:00
Greg Kroah-Hartman	e44bd11b47	Merge 5.4.194 into android11-5.4-lts ... Changes in 5.4.194 MIPS: Use address-of operator on section symbols block: drbd: drbd_nl: Make conversion to 'enum drbd_ret_code' explicit drm/amd/display/dc/gpio/gpio_service: Pass around correct dce_{version, environment} types drm/i915: Cast remain to unsigned long in eb_relocate_vma nfp: bpf: silence bitwise vs. logical OR warning can: grcan: grcan_probe(): fix broken system id check for errata workaround needs can: grcan: only use the NAPI poll budget for RX arm: remove CONFIG_ARCH_HAS_HOLES_MEMORYMODEL KVM: x86/pmu: Refactoring find_arch_event() to pmc_perf_hw_id() x86/asm: Allow to pass macros to __ASM_FORM() x86: xen: kvm: Gather the definition of emulate prefixes x86: xen: insn: Decode Xen and KVM emulate-prefix signature x86: kprobes: Prohibit probing on instruction which has emulate prefix KVM: x86/svm: Account for family 17h event renumberings in amd_pmc_perf_hw_id Bluetooth: Fix the creation of hdev->name mm: fix missing cache flush for all tail pages of compound page mm: hugetlb: fix missing cache flush in copy_huge_page_from_user() mm: userfaultfd: fix missing cache flush in mcopy_atomic_pte() and __mcopy_atomic() Linux 5.4.194 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: Ib6799ab085043b5cc60cf8e39a22f48dc4520378	2022-05-18 16:49:42 +02:00
Lee Jones	e6ff94d31c	block: drbd: drbd_nl: Make conversion to 'enum drbd_ret_code' explicit ... commit 1f1e87b4dc4598eac57a69868534b92d65e47e82 upstream. Fixes the following W=1 kernel build warning(s): from drivers/block/drbd/drbd_nl.c:24: drivers/block/drbd/drbd_nl.c: In function ‘drbd_adm_set_role’: drivers/block/drbd/drbd_nl.c:793:11: warning: implicit conversion from ‘enum drbd_state_rv’ to ‘enum drbd_ret_code’ [-Wenum-conversion] drivers/block/drbd/drbd_nl.c:795:11: warning: implicit conversion from ‘enum drbd_state_rv’ to ‘enum drbd_ret_code’ [-Wenum-conversion] drivers/block/drbd/drbd_nl.c: In function ‘drbd_adm_attach’: drivers/block/drbd/drbd_nl.c:1965:10: warning: implicit conversion from ‘enum drbd_state_rv’ to ‘enum drbd_ret_code’ [-Wenum-conversion] drivers/block/drbd/drbd_nl.c: In function ‘drbd_adm_connect’: drivers/block/drbd/drbd_nl.c:2690:10: warning: implicit conversion from ‘enum drbd_state_rv’ to ‘enum drbd_ret_code’ [-Wenum-conversion] drivers/block/drbd/drbd_nl.c: In function ‘drbd_adm_disconnect’: drivers/block/drbd/drbd_nl.c:2803:11: warning: implicit conversion from ‘enum drbd_state_rv’ to ‘enum drbd_ret_code’ [-Wenum-conversion] Cc: Philipp Reisner <philipp.reisner@linbit.com> Cc: Lars Ellenberg <lars.ellenberg@linbit.com> Cc: Jens Axboe <axboe@kernel.dk> Cc: drbd-dev@lists.linbit.com Cc: linux-block@vger.kernel.org Signed-off-by: Lee Jones <lee.jones@linaro.org> Link: https://lore.kernel.org/r/20210312105530.2219008-8-lee.jones@linaro.org Signed-off-by: Jens Axboe <axboe@kernel.dk> Cc: Nathan Chancellor <nathan@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-05-15 19:54:46 +02:00
Greg Kroah-Hartman	aa172204d5	This is the 5.4.192 stable release ... -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmJ4vNYACgkQONu9yGCS aT7xvw//e6m5llwO0aXOVFLca2TvAdN1L3shREY57P2TgNejrmrdFzYXu+6AE+ia MhdcQL5LphFB1lIfSM/MKYFgmOVYkYpjz4AM+rqPPAv99sj0lAWslppJQAPU4a/O V2qyKzj9f78ojr9TacgooCqwuHaJtrhXKBrjG18UTmHgcFV5hDTNtIwVWxG8NF5R /ma/nY62kwzTvu2e4Ic+7LgKqhFkndQ/N9uB9owJ5IzJOE68Rzj1AWklbb1AMI4+ wv0J2WO+fZRiA0q9WT88G/ZJKpXLdEO7VwiarXFeBfIHTi0RsOp7SSpKkgk0QxtV K4SBUl44ma3v5vlKprN18mNZxoJ3fu88UZSSPDfnms/gGzKIlLedsb02Er4qC6wb EAiSuOzjEOwqh5BCRiaUgrWGyN4DQ+qrtDVRwrJ4NV6EAQ3ASehm5jevxotRuZ+M g1nqnIJVtx0jpXjPhUTxTNC1pswQo6ZpTqKB0TNtoBvp24x2y3HmMNJDS+1noCAg r4KSrO+DQ7gxrjqJiewpFUSbeXDyRkUyqbyYLqmXkRYdzGN0YuSchzY0xRoqW0hS tCW8yYpki2a1IwOiEoEfLMaudKVEeiYbDisD58wTVjNG7k5A3UCyZ3btigg9FbOq w76VJH6tZPePcYpmoI0XH0vzgmESd6gK4c/8EB9yH2gyfSwRIiM= =eySc -----END PGP SIGNATURE----- Merge 5.4.192 into android11-5.4-lts Changes in 5.4.192 floppy: disable FDRAWCMD by default hamradio: defer 6pack kfree after unregister_netdev hamradio: remove needs_free_netdev to avoid UAF lightnvm: disable the subsystem usb: mtu3: fix USB 3.0 dual-role-switch from device to host USB: quirks: add a Realtek card reader USB: quirks: add STRING quirk for VCOM device USB: serial: whiteheat: fix heap overflow in WHITEHEAT_GET_DTR_RTS USB: serial: cp210x: add PIDs for Kamstrup USB Meter Reader USB: serial: option: add support for Cinterion MV32-WA/MV32-WB USB: serial: option: add Telit 0x1057, 0x1058, 0x1075 compositions xhci: stop polling roothubs after shutdown xhci: increase usb U3 -> U0 link resume timeout from 100ms to 500ms iio: dac: ad5592r: Fix the missing return value. iio: dac: ad5446: Fix read_raw not returning set value iio: magnetometer: ak8975: Fix the error handling in ak8975_power_on() usb: misc: fix improper handling of refcount in uss720_probe() usb: typec: ucsi: Fix role swapping usb: gadget: uvc: Fix crash when encoding data for usb request usb: gadget: configfs: clear deactivation flag in configfs_composite_unbind() usb: dwc3: core: Fix tx/rx threshold settings usb: dwc3: gadget: Return proper request status serial: imx: fix overrun interrupts in DMA mode serial: 8250: Also set sticky MCR bits in console restoration serial: 8250: Correct the clock for EndRun PTP/1588 PCIe device arch_topology: Do not set llc_sibling if llc_id is invalid hex2bin: make the function hex_to_bin constant-time hex2bin: fix access beyond string end video: fbdev: udlfb: properly check endpoint type arm64: dts: meson: remove CPU opps below 1GHz for G12B boards arm64: dts: meson: remove CPU opps below 1GHz for SM1 boards mtd: rawnand: fix ecc parameters for mt7622 USB: Fix xhci event ring dequeue pointer ERDP update issue ARM: dts: imx6qdl-apalis: Fix sgtl5000 detection issue phy: samsung: Fix missing of_node_put() in exynos_sata_phy_probe phy: samsung: exynos5250-sata: fix missing device put in probe error paths ARM: OMAP2+: Fix refcount leak in omap_gic_of_init phy: ti: omap-usb2: Fix error handling in omap_usb2_enable_clocks ARM: dts: at91: Map MCLK for wm8731 on at91sam9g20ek phy: mapphone-mdm6600: Fix PM error handling in phy_mdm6600_probe phy: ti: Add missing pm_runtime_disable() in serdes_am654_probe ARM: dts: Fix mmc order for omap3-gta04 ARM: dts: am3517-evm: Fix misc pinmuxing ARM: dts: logicpd-som-lv: Fix wrong pinmuxing on OMAP35 ipvs: correctly print the memory size of ip_vs_conn_tab mtd: rawnand: Fix return value check of wait_for_completion_timeout bpf, lwt: Fix crash when using bpf_skb_set_tunnel_key() from bpf_xmit lwt hook tcp: md5: incorrect tcp_header_len for incoming connections tcp: ensure to use the most recently sent skb when filling the rate sample sctp: check asoc strreset_chunk in sctp_generate_reconf_event ARM: dts: imx6ull-colibri: fix vqmmc regulator arm64: dts: imx8mn-ddr4-evk: Describe the 32.768 kHz PMIC clock pinctrl: pistachio: fix use of irq_of_parse_and_map() cpufreq: fix memory leak in sun50i_cpufreq_nvmem_probe net: hns3: add validity check for message data length net/smc: sync err code when tcp connection was refused ip_gre: Make o_seqno start from 0 in native mode tcp: fix potential xmit stalls caused by TCP_NOTSENT_LOWAT bus: sunxi-rsb: Fix the return value of sunxi_rsb_device_create() clk: sunxi: sun9i-mmc: check return value after calling platform_get_resource() net: bcmgenet: hide status block before TX timestamping net: dsa: lantiq_gswip: Don't set GSWIP_MII_CFG_RMII_CLK drm/amd/display: Fix memory leak in dcn21_clock_source_create tls: Skip tls_append_frag on zero copy size bnx2x: fix napi API usage sequence ixgbe: ensure IPsec VF<->PF compatibility tcp: fix F-RTO may not work correctly when receiving DSACK ASoC: wm8731: Disable the regulator when probing fails ip6_gre: Avoid updating tunnel->tun_hlen in __gre6_xmit() x86: __memcpy_flushcache: fix wrong alignment if size > 2^32 cifs: destage any unwritten data to the server before calling copychunk_write drivers: net: hippi: Fix deadlock in rr_close() net: ethernet: stmmac: fix write to sgmii_adapter_base x86/cpu: Load microcode during restore_processor_state() tty: n_gsm: fix wrong signal octet encoding in convergence layer type 2 tty: n_gsm: fix malformed counter for out of frame data netfilter: nft_socket: only do sk lookups when indev is available tty: n_gsm: fix insufficient txframe size tty: n_gsm: fix missing explicit ldisc flush tty: n_gsm: fix wrong command retry handling tty: n_gsm: fix wrong command frame length field encoding tty: n_gsm: fix incorrect UA handling hugetlbfs: get unmapped area below TASK_UNMAPPED_BASE for hugetlbfs mm, hugetlb: allow for "high" userspace addresses Linux 5.4.192 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I151e1623022f3629b0cec0685db3ea08c62ab95d	2022-05-09 09:42:49 +02:00
Willy Tarreau	7dea591300	floppy: disable FDRAWCMD by default ... commit 233087ca063686964a53c829d547c7571e3f67bf upstream. Minh Yuan reported a concurrency use-after-free issue in the floppy code between raw_cmd_ioctl and seek_interrupt. [ It turns out this has been around, and that others have reported the KASAN splats over the years, but Minh Yuan had a reproducer for it and so gets primary credit for reporting it for this fix - Linus ] The problem is, this driver tends to break very easily and nowadays, nobody is expected to use FDRAWCMD anyway since it was used to manipulate non-standard formats. The risk of breaking the driver is higher than the risk presented by this race, and accessing the device requires privileges anyway. Let's just add a config option to completely disable this ioctl and leave it disabled by default. Distros shouldn't use it, and only those running on antique hardware might need to enable it. Link: https://lore.kernel.org/all/000000000000b71cdd05d703f6bf@google.com/ Link: https://lore.kernel.org/lkml/CAKcFiNC=MfYVW-Jt9A3=FPJpTwCD2PL_ULNCpsCVE5s8ZeBQgQ@mail.gmail.com Link: https://lore.kernel.org/all/CAEAjamu1FRhz6StCe_55XY5s389ZP_xmCF69k987En+1z53=eg@mail.gmail.com Reported-by: Minh Yuan <yuanmingbuaa@gmail.com> Reported-by: syzbot+8e8958586909d62b6840@syzkaller.appspotmail.com Reported-by: cruise k <cruise4k@gmail.com> Reported-by: Kyungtae Kim <kt0755@gmail.com> Suggested-by: Linus Torvalds <torvalds@linuxfoundation.org> Tested-by: Denis Efremov <efremov@linux.com> Signed-off-by: Willy Tarreau <w@1wt.eu> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-05-09 09:03:20 +02:00
Xie Yongji	353ca06c86	BACKPORT: virtio-blk: Use blk_validate_block_size() to validate block size ... The block layer can't support a block size larger than page size yet. And a block size that's too small or not a power of two won't work either. If a misconfigured device presents an invalid block size in configuration space, it will result in the kernel crash something like below: [ 506.154324] BUG: kernel NULL pointer dereference, address: 0000000000000008 [ 506.160416] RIP: 0010:create_empty_buffers+0x24/0x100 [ 506.174302] Call Trace: [ 506.174651] create_page_buffers+0x4d/0x60 [ 506.175207] block_read_full_page+0x50/0x380 [ 506.175798] ? __mod_lruvec_page_state+0x60/0xa0 [ 506.176412] ? __add_to_page_cache_locked+0x1b2/0x390 [ 506.177085] ? blkdev_direct_IO+0x4a0/0x4a0 [ 506.177644] ? scan_shadow_nodes+0x30/0x30 [ 506.178206] ? lru_cache_add+0x42/0x60 [ 506.178716] do_read_cache_page+0x695/0x740 [ 506.179278] ? read_part_sector+0xe0/0xe0 [ 506.179821] read_part_sector+0x36/0xe0 [ 506.180337] adfspart_check_ICS+0x32/0x320 [ 506.180890] ? snprintf+0x45/0x70 [ 506.181350] ? read_part_sector+0xe0/0xe0 [ 506.181906] bdev_disk_changed+0x229/0x5c0 [ 506.182483] blkdev_get_whole+0x6d/0x90 [ 506.183013] blkdev_get_by_dev+0x122/0x2d0 [ 506.183562] device_add_disk+0x39e/0x3c0 [ 506.184472] virtblk_probe+0x3f8/0x79b [virtio_blk] [ 506.185461] virtio_dev_probe+0x15e/0x1d0 [virtio] So let's use a block layer helper to validate the block size. Signed-off-by: Xie Yongji <xieyongji@bytedance.com> Acked-by: Michael S. Tsirkin <mst@redhat.com> Link: https://lore.kernel.org/r/20211026144015.188-5-xieyongji@bytedance.com Signed-off-by: Jens Axboe <axboe@kernel.dk> (cherry picked from commit 57a13a5b8157d9a8606490aaa1b805bafe6c37e1) [keirf@: Implement missing error path] Bug: 226679849 Signed-off-by: Keir Fraser <keirf@google.com> Change-Id: I78cde1101baf8da2f68d0b9f942a0f1ec89fb30e (cherry picked from commit 588affc843da96cda1747b4caa8fcd9bd8796d3c)	2022-04-28 11:35:38 +00:00
Srinivasarao Pathipati	f01f08906a	Merge android11-5.4.180+ (598165f) into msm-5.4 ... * refs/heads/tmp-598165f: Revert "arm: extend pfn_valid to take into account freed memory map alignment" UPSTREAM: usb: gadget: clear related members when goto fail UPSTREAM: usb: gadget: don't release an existing dev->buf UPSTREAM: usb: gadget: Fix use-after-free bug by not setting udc->dev.driver UPSTREAM: usb: gadget: rndis: prevent integer overflow in rndis_set_response() UPSTREAM: fixup for "arm64 entry: Add macro for reading symbol address from the trampoline" UPSTREAM: arm64: Use the clearbhb instruction in mitigations UPSTREAM: KVM: arm64: Allow SMCCC_ARCH_WORKAROUND_3 to be discovered and migrated UPSTREAM: arm64: Mitigate spectre style branch history side channels UPSTREAM: KVM: arm64: Add templates for BHB mitigation sequences UPSTREAM: arm64: proton-pack: Report Spectre-BHB vulnerabilities as part of Spectre-v2 UPSTREAM: arm64: Add percpu vectors for EL1 UPSTREAM: arm64: entry: Add macro for reading symbol addresses from the trampoline UPSTREAM: arm64: entry: Add vectors that have the bhb mitigation sequences UPSTREAM: arm64: entry: Add non-kpti __bp_harden_el1_vectors for mitigations UPSTREAM: arm64: entry: Allow the trampoline text to occupy multiple pages UPSTREAM: arm64: entry: Make the kpti trampoline's kpti sequence optional UPSTREAM: arm64: entry: Move trampoline macros out of ifdef'd section UPSTREAM: arm64: entry: Don't assume tramp_vectors is the start of the vectors UPSTREAM: arm64: entry: Allow tramp_alias to access symbols after the 4K boundary UPSTREAM: arm64: entry: Move the trampoline data page before the text page UPSTREAM: arm64: entry: Free up another register on kpti's tramp_exit path UPSTREAM: arm64: entry: Make the trampoline cleanup optional UPSTREAM: arm64: entry.S: Add ventry overflow sanity checks UPSTREAM: arm64: Add Cortex-X2 CPU part definition UPSTREAM: arm64: add ID_AA64ISAR2_EL1 sys register UPSTREAM: arm64: Add Neoverse-N2, Cortex-A710 CPU part definition UPSTREAM: arm64: Add part number for Arm Cortex-A77 UPSTREAM: sctp: fix the processing for INIT chunk ANDROID: dm-bow: Protect Ranges fetched and erased from the RB tree UPSTREAM: ARM: fix Thumb2 regression with Spectre BHB UPSTREAM: ARM: Spectre-BHB: provide empty stub for non-config UPSTREAM: ARM: fix build warning in proc-v7-bugs.c UPSTREAM: ARM: Do not use NOCROSSREFS directive with ld.lld UPSTREAM: ARM: fix co-processor register typo UPSTREAM: ARM: fix build error when BPF_SYSCALL is disabled UPSTREAM: ARM: include unprivileged BPF status in Spectre V2 reporting UPSTREAM: ARM: Spectre-BHB workaround UPSTREAM: ARM: use LOADADDR() to get load address of sections UPSTREAM: ARM: early traps initialisation UPSTREAM: ARM: report Spectre v2 status through sysfs UPSTREAM: arm/arm64: smccc/psci: add arm_smccc_1_1_get_conduit() UPSTREAM: arm/arm64: Provide a wrapper for SMCCC 1.1 calls UPSTREAM: x86/speculation: Warn about eIBRS + LFENCE + Unprivileged eBPF + SMT UPSTREAM: x86/speculation: Warn about Spectre v2 LFENCE mitigation UPSTREAM: x86/speculation: Update link to AMD speculation whitepaper UPSTREAM: x86/speculation: Use generic retpoline by default on AMD UPSTREAM: x86/speculation: Include unprivileged eBPF status in Spectre v2 mitigation reporting UPSTREAM: Documentation/hw-vuln: Update spectre doc UPSTREAM: x86/speculation: Add eIBRS + Retpoline options UPSTREAM: x86/speculation: Rename RETPOLINE_AMD to RETPOLINE_LFENCE UPSTREAM: x86,bugs: Unconditionally allow spectre_v2=retpoline,amd UPSTREAM: x86/speculation: Merge one test in spectre_v2_user_select_mitigation() UPSTREAM: bpf: Add kconfig knob for disabling unpriv bpf by default UPSTREAM: mmc: block: fix read single on recovery logic Linux 5.4.180 ACPI: PM: s2idle: Cancel wakeup before dispatching EC GPE perf: Fix list corruption in perf_cgroup_switch() scsi: lpfc: Remove NVMe support if kernel has NVME_FC disabled hwmon: (dell-smm) Speed up setting of fan speed seccomp: Invalidate seccomp mode to catch death failures USB: serial: cp210x: add CPI Bulk Coin Recycler id USB: serial: cp210x: add NCR Retail IO box id USB: serial: ch341: add support for GW Instek USB2.0-Serial devices USB: serial: option: add ZTE MF286D modem USB: serial: ftdi_sio: add support for Brainboxes US-159/235/320 usb: gadget: f_uac2: Define specific wTerminalType usb: gadget: rndis: check size of RNDIS_MSG_SET command USB: gadget: validate interface OS descriptor requests usb: gadget: udc: renesas_usb3: Fix host to USB_ROLE_NONE transition usb: dwc3: gadget: Prevent core from processing stale TRBs usb: ulpi: Call of_node_put correctly usb: ulpi: Move of_node_put to ulpi_dev_release net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup eeprom: ee1004: limit i2c reads to I2C_SMBUS_BLOCK_MAX n_tty: wake up poll(POLLRDNORM) on receiving data vt_ioctl: add array_index_nospec to VT_ACTIVATE vt_ioctl: fix array_index_nospec in vt_setactivate net: amd-xgbe: disable interrupts during pci removal tipc: rate limit warning for received illegal binding update net: mdio: aspeed: Add missing MODULE_DEVICE_TABLE veth: fix races around rq->rx_notify_masked net: fix a memleak when uncloning an skb dst and its metadata net: do not keep the dst cache when uncloning an skb dst and its metadata nfp: flower: fix ida_idx not being released ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path bonding: pair enable_port with slave_arr_updates ixgbevf: Require large buffers for build_skb on 82599VF misc: fastrpc: avoid double fput() on failed usercopy usb: f_fs: Fix use-after-free for epfile ARM: dts: imx6qdl-udoo: Properly describe the SD card detect staging: fbtft: Fix error path in fbtft_driver_module_init() ARM: dts: meson: Fix the UART compatible strings perf probe: Fix ppc64 'perf probe add events failed' case net: bridge: fix stale eth hdr pointer in br_dev_xmit PM: s2idle: ACPI: Fix wakeup interrupts handling ACPI/IORT: Check node revision for PMCG resources nvme-tcp: fix bogus request completion when failing to send AER ARM: socfpga: fix missing RESET_CONTROLLER ARM: dts: imx23-evk: Remove MX23_PAD_SSP1_DETECT from hog group riscv: fix build with binutils 2.38 bpf: Add kconfig knob for disabling unpriv bpf by default KVM: nVMX: eVMCS: Filter out VM_EXIT_SAVE_VMX_PREEMPTION_TIMER net: stmmac: dwmac-sun8i: use return val of readl_poll_timeout() usb: dwc2: gadget: don't try to disable ep0 in dwc2_hsotg_suspend PM: hibernate: Remove register_nosave_region_late() scsi: myrs: Fix crash in error case scsi: qedf: Fix refcount issue when LOGO is received during TMF scsi: target: iscsi: Make sure the np under each tpg is unique net: sched: Clarify error message when qdisc kind is unknown drm: panel-orientation-quirks: Add quirk for the 1Netbook OneXPlayer NFSv4 expose nfs_parse_server_name function NFSv4 remove zero number of fs_locations entries error check NFSv4.1: Fix uninitialised variable in devicenotify nfs: nfs4clinet: check the return value of kstrdup() NFSv4 only print the label when its queried nvme: Fix parsing of ANA log page NFSD: Fix offset type in I/O trace points NFSD: Clamp WRITE offsets NFS: Fix initialisation of nfs_client cl_flags field net: phy: marvell: Fix MDI-x polarity setting in 88e1118-compatible PHYs net: phy: marvell: Fix RGMII Tx/Rx delays setting in 88e1121-compatible PHYs mmc: sdhci-of-esdhc: Check for error num after setting mask ima: Do not print policy rule with inactive LSM labels ima: Allow template selection with ima_template[_fmt]= after ima_hash= ima: Remove ima_policy file before directory integrity: check the return value of audit_log_start() Linux 5.4.179 tipc: improve size validations for received domain records moxart: fix potential use-after-free on remove path Linux 5.4.178 cgroup/cpuset: Fix "suspicious RCU usage" lockdep warning ext4: fix error handling in ext4_restore_inline_data() EDAC/xgene: Fix deferred probing EDAC/altera: Fix deferred probing rtc: cmos: Evaluate century appropriate selftests: futex: Use variable MAKE instead of make nfsd: nfsd4_setclientid_confirm mistakenly expires confirmed client. scsi: bnx2fc: Make bnx2fc_recv_frame() mp safe pinctrl: bcm2835: Fix a few error paths ASoC: max9759: fix underflow in speaker_gain_control_put() ASoC: cpcap: Check for NULL pointer after calling of_get_child_by_name ASoC: xilinx: xlnx_formatter_pcm: Make buffer bytes multiple of period bytes ASoC: fsl: Add missing error handling in pcm030_fabric_probe drm/i915/overlay: Prevent divide by zero bugs in scaling net: stmmac: ensure PTP time register reads are consistent net: stmmac: dump gmac4 DMA registers correctly net: macsec: Verify that send_sci is on when setting Tx sci explicitly net: ieee802154: Return meaningful error codes from the netlink helpers net: ieee802154: ca8210: Stop leaking skb's net: ieee802154: mcr20a: Fix lifs/sifs periods net: ieee802154: hwsim: Ensure proper channel selection at probe time spi: meson-spicc: add IRQ check in meson_spicc_probe spi: mediatek: Avoid NULL pointer crash in interrupt spi: bcm-qspi: check for valid cs before applying chip select iommu/amd: Fix loop timeout issue in iommu_ga_log_enable() iommu/vt-d: Fix potential memory leak in intel_setup_irq_remapping() RDMA/mlx4: Don't continue event handler after memory allocation failure RDMA/siw: Fix broken RDMA Read Fence/Resume logic. IB/rdmavt: Validate remote_addr during loopback atomic tests memcg: charge fs_context and legacy_fs_context Revert "ASoC: mediatek: Check for error clk pointer" block: bio-integrity: Advance seed correctly for larger interval sizes mm/kmemleak: avoid scanning potential huge holes drm/nouveau: fix off by one in BIOS boundary checking btrfs: fix deadlock between quota disable and qgroup rescan worker ALSA: hda/realtek: Fix silent output on Gigabyte X570 Aorus Xtreme after reboot from Windows ALSA: hda/realtek: Fix silent output on Gigabyte X570S Aorus Master (newer chipset) ALSA: hda/realtek: Add missing fixup-model entry for Gigabyte X570 ALC1220 quirks ALSA: hda/realtek: Add quirk for ASUS GU603 ALSA: usb-audio: Simplify quirk entries with a macro ASoC: ops: Reject out of bounds values in snd_soc_put_xr_sx() ASoC: ops: Reject out of bounds values in snd_soc_put_volsw_sx() ASoC: ops: Reject out of bounds values in snd_soc_put_volsw() audit: improve audit queue handling when "audit=1" on cmdline Revert "net: fix information leakage in /proc/net/ptype" Linux 5.4.177 af_packet: fix data-race in packet_setsockopt / packet_setsockopt cpuset: Fix the bug that subpart_cpus updated wrongly in update_cpumask() rtnetlink: make sure to refresh master_dev/m_ops in __rtnl_newlink() net: sched: fix use-after-free in tc_new_tfilter() net: amd-xgbe: Fix skb data length underflow net: amd-xgbe: ensure to reset the tx_timer_active flag ipheth: fix EOVERFLOW in ipheth_rcvbulk_callback cgroup-v1: Require capabilities to set release_agent psi: Fix uaf issue when psi trigger is destroyed while being polled PCI: pciehp: Fix infinite loop in IRQ handler upon power fault Linux 5.4.176 mtd: rawnand: mpc5121: Remove unused variable in ads5121_select_chip() block: Fix wrong offset in bio_truncate() fsnotify: invalidate dcache before IN_DELETE event dt-bindings: can: tcan4x5x: fix mram-cfg RX FIFO config ipv4: remove sparse error in ip_neigh_gw4() ipv4: tcp: send zero IPID in SYNACK messages ipv4: raw: lock the socket in raw_bind() net: hns3: handle empty unknown interrupt for VF yam: fix a memory leak in yam_siocdevprivate() drm/msm/hdmi: Fix missing put_device() call in msm_hdmi_get_phy ibmvnic: don't spin in tasklet ibmvnic: init ->running_cap_crqs early hwmon: (lm90) Mark alert as broken for MAX6654 rxrpc: Adjust retransmission backoff phylib: fix potential use-after-free net: phy: broadcom: hook up soft_reset for BCM54616S netfilter: conntrack: don't increment invalid counter on NF_REPEAT NFS: Ensure the server has an up to date ctime before renaming NFS: Ensure the server has an up to date ctime before hardlinking ipv6: annotate accesses to fn->fn_sernum drm/msm/dsi: invalid parameter check in msm_dsi_phy_enable drm/msm/dsi: Fix missing put_device() call in dsi_get_phy drm/msm: Fix wrong size calculation net-procfs: show net devices bound packet types NFSv4: nfs_atomic_open() can race when looking up a non-regular file NFSv4: Handle case where the lookup of a directory fails hwmon: (lm90) Reduce maximum conversion rate for G781 ipv4: avoid using shared IP generator for connected sockets ping: fix the sk_bound_dev_if match in ping_lookup hwmon: (lm90) Mark alert as broken for MAX6680 hwmon: (lm90) Mark alert as broken for MAX6646/6647/6649 net: fix information leakage in /proc/net/ptype ipv6_tunnel: Rate limit warning messages scsi: bnx2fc: Flush destroy_work queue before calling bnx2fc_interface_put() rpmsg: char: Fix race between the release of rpmsg_eptdev and cdev rpmsg: char: Fix race between the release of rpmsg_ctrldev and cdev i40e: fix unsigned stat widths i40e: Fix queues reservation for XDP i40e: Fix issue when maximum queues is exceeded i40e: Increase delay to 1 s after global EMP reset powerpc/32: Fix boot failure with GCC latent entropy plugin net: sfp: ignore disabled SFP node ucsi_ccg: Check DEV_INT bit only when starting CCG4 usb: typec: tcpm: Do not disconnect while receiving VBUS off USB: core: Fix hang in usb_kill_urb by adding memory barriers usb: gadget: f_sourcesink: Fix isoc transfer for USB_SPEED_SUPER_PLUS usb: common: ulpi: Fix crash in ulpi_match() usb-storage: Add unusual-devs entry for VL817 USB-SATA bridge tty: Add support for Brainboxes UC cards. tty: n_gsm: fix SW flow control encoding/handling serial: stm32: fix software flow control transfer serial: 8250: of: Fix mapped region size when using reg-offset property netfilter: nft_payload: do not update layer 4 checksum when mangling fragments arm64: errata: Fix exec handling in erratum 1418040 workaround drm/etnaviv: relax submit size limits fsnotify: fix fsnotify hooks in pseudo filesystems tracing: Don't inc err_log entry count if entry allocation fails tracing/histogram: Fix a potential memory leak for kstrdup() PM: wakeup: simplify the output logic of pm_show_wakelocks() udf: Fix NULL ptr deref when converting from inline format udf: Restore i_lenAlloc when inode expansion fails scsi: zfcp: Fix failed recovery on gone remote port with non-NPIV FCP devices s390/hypfs: include z/VM guests with access control group set Bluetooth: refactor malicious adv data check ANDROID: Fix CRC issue up with xfrm headers in 5.4.174 Linux 5.4.175 drm/vmwgfx: Fix stale file descriptors on failed usercopy select: Fix indefinitely sleeping task in poll_schedule_timeout() mmc: sdhci-esdhc-imx: disable CMDQ support ARM: dts: gpio-ranges property is now required pinctrl: bcm2835: Change init order for gpio hogs pinctrl: bcm2835: Add support for wake-up interrupts pinctrl: bcm2835: Match BCM7211 compatible string pinctrl: bcm2835: Add support for all GPIOs on BCM2711 pinctrl: bcm2835: Refactor platform data pinctrl: bcm2835: Drop unused define rcu: Tighten rcu_advance_cbs_nowake() checks drm/i915: Flush TLBs before releasing backing store Linux 5.4.174 Revert "ia64: kprobes: Use generic kretprobe trampoline handler" mtd: nand: bbt: Fix corner case in bad block table handling lib/test_meminit: destroy cache in kmem_cache_alloc_bulk() test lib82596: Fix IRQ check in sni_82596_probe scripts/dtc: dtx_diff: remove broken example from help text dt-bindings: display: meson-vpu: Add missing amlogic,canvas property dt-bindings: display: meson-dw-hdmi: add missing sound-name-prefix property net: ethernet: mtk_eth_soc: fix error checking in mtk_mac_config() bcmgenet: add WOL IRQ check net_sched: restore "mpu xxx" handling arm64: dts: qcom: msm8996: drop not documented adreno properties dmaengine: at_xdmac: Fix at_xdmac_lld struct definition dmaengine: at_xdmac: Fix lld view setting dmaengine: at_xdmac: Fix concurrency over xfers_list dmaengine: at_xdmac: Print debug message after realeasing the lock dmaengine: at_xdmac: Don't start transactions at tx_submit level perf script: Fix hex dump character output libcxgb: Don't accidentally set RTO_ONLINK in cxgb_find_route() gre: Don't accidentally set RTO_ONLINK in gre_fill_metadata_dst() xfrm: Don't accidentally set RTO_ONLINK in decode_session4() netns: add schedule point in ops_exit_list() inet: frags: annotate races around fqdir->dead and fqdir->high_thresh rtc: pxa: fix null pointer dereference net: axienet: increase default TX ring size to 128 net: axienet: fix number of TX ring slots for available check net: axienet: limit minimum TX ring size clk: si5341: Fix clock HW provider cleanup af_unix: annote lockless accesses to unix_tot_inflight & gc_in_progress f2fs: fix to reserve space for IO align feature parisc: pdc_stable: Fix memory leak in pdcs_register_pathentries net/fsl: xgmac_mdio: Fix incorrect iounmap when removing module ipv4: avoid quadratic behavior in netns dismantle bpftool: Remove inclusion of utilities.mak from Makefiles powerpc/fsl/dts: Enable WA for erratum A-009885 on fman3l MDIO buses powerpc/cell: Fix clang -Wimplicit-fallthrough warning Revert "net/mlx5: Add retry mechanism to the command entry index allocation" dmaengine: stm32-mdma: fix STM32_MDMA_CTBR_TSEL_MASK RDMA/rxe: Fix a typo in opcode name RDMA/hns: Modify the mapping attribute of doorbell to device scsi: core: Show SCMD_LAST in text form Documentation: fix firewire.rst ABI file path error Documentation: refer to config RANDOMIZE_BASE for kernel address-space randomization Documentation: ACPI: Fix data node reference documentation Documentation: dmaengine: Correctly describe dmatest with channel unset media: rcar-csi2: Optimize the selection PHTW register firmware: Update Kconfig help text for Google firmware of: base: Improve argument length mismatch error drm/radeon: fix error handling in radeon_driver_open_kms ext4: don't use the orphan list when migrating an inode ext4: Fix BUG_ON in ext4_bread when write quota data ext4: set csum seed in tmp inode while migrating to extents ext4: make sure quota gets properly shutdown on error ext4: make sure to reset inode lockdep class when quota enabling fails btrfs: respect the max size in the header when activating swap file btrfs: check the root node for uptodate before returning it btrfs: fix deadlock between quota enable and other quota operations xfrm: fix policy lookup for ipv6 gre packets PCI: pci-bridge-emul: Set PCI_STATUS_CAP_LIST for PCIe device PCI: pci-bridge-emul: Correctly set PCIe capabilities PCI: pci-bridge-emul: Properly mark reserved PCIe bits in PCI config space drm/bridge: analogix_dp: Make PSR-exit block less drm/nouveau/kms/nv04: use vzalloc for nv04_display drm/etnaviv: limit submit sizes s390/mm: fix 2KB pgtable release race iwlwifi: mvm: Increase the scan timeout guard to 30 seconds tracing/kprobes: 'nmissed' not showed correctly for kretprobe cputime, cpuacct: Include guest time in user time in cpuacct.stat serial: Fix incorrect rs485 polarity on uart open fuse: Pass correct lend value to filemap_write_and_wait_range() ubifs: Error path in ubifs_remount_rw() seems to wrongly free write buffers crypto: caam - replace this_cpu_ptr with raw_cpu_ptr crypto: stm32/crc32 - Fix kernel BUG triggered in probe() crypto: omap-aes - Fix broken pm_runtime_and_get() usage rpmsg: core: Clean up resources on announce_create failure. power: bq25890: Enable continuous conversion for ADC at charging ASoC: mediatek: mt8173: fix device_node leak scsi: sr: Don't use GFP_DMA MIPS: Octeon: Fix build errors using clang i2c: designware-pci: Fix to change data types of hcnt and lcnt parameters MIPS: OCTEON: add put_device() after of_find_device_by_node() powerpc: handle kdump appropriately with crash_kexec_post_notifiers option ALSA: seq: Set upper limit of processed events scsi: lpfc: Trigger SLI4 firmware dump before doing driver cleanup w1: Misuse of get_user()/put_user() reported by sparse KVM: PPC: Book3S: Suppress failed alloc warning in H_COPY_TOFROM_GUEST powerpc/powermac: Add missing lockdep_register_key() clk: meson: gxbb: Fix the SDM_EN bit for MPLL0 on GXBB i2c: mpc: Correct I2C reset procedure powerpc/smp: Move setup_profiling_timer() under CONFIG_PROFILING i2c: i801: Don't silently correct invalid transfer size powerpc/watchdog: Fix missed watchdog reset due to memory ordering race powerpc/btext: add missing of_node_put powerpc/cell: add missing of_node_put powerpc/powernv: add missing of_node_put powerpc/6xx: add missing of_node_put parisc: Avoid calling faulthandler_disabled() twice random: do not throw away excess input to crng_fast_load serial: core: Keep mctrl register state and cached copy in sync serial: pl010: Drop CR register reset on set_termios regulator: qcom_smd: Align probe function with rpmh-regulator net: gemini: allow any RGMII interface mode net: phy: marvell: configure RGMII delays for 88E1118 dm space map common: add bounds check to sm_ll_lookup_bitmap() dm btree: add a defensive bounds check to insert_at() mac80211: allow non-standard VHT MCS-10/11 net: mdio: Demote probed message to debug print btrfs: remove BUG_ON(!eie) in find_parent_nodes btrfs: remove BUG_ON() in find_parent_nodes() ACPI: battery: Add the ThinkPad "Not Charging" quirk drm/amdgpu: fixup bad vram size on gmc v8 ACPICA: Hardware: Do not flush CPU cache when entering S4 and S5 ACPICA: Fix wrong interpretation of PCC address ACPICA: Executer: Fix the REFCLASS_REFOF case in acpi_ex_opcode_1A_0T_1R() ACPICA: Utilities: Avoid deleting the same object twice in a row ACPICA: actypes.h: Expand the ACPI_ACCESS_ definitions jffs2: GC deadlock reading a page that is used in jffs2_write_begin() um: registers: Rename function names to avoid conflicts and build problems iwlwifi: mvm: Fix calculation of frame length iwlwifi: remove module loading failure message iwlwifi: fix leaks/bad data after failed firmware load ath9k: Fix out-of-bound memcpy in ath9k_hif_usb_rx_stream usb: hub: Add delay for SuperSpeed hub resume to let links transit to U0 cpufreq: Fix initialization of min and max frequency QoS requests arm64: tegra: Adjust length of CCPLEX cluster MMIO region arm64: dts: ls1028a-qds: move rtc node to the correct i2c bus audit: ensure userspace is penalized the same as the kernel when under pressure mmc: core: Fixup storing of OCR for MMC_QUIRK_NONSTD_SDIO media: saa7146: hexium_gemini: Fix a NULL pointer dereference in hexium_attach() media: igorplugusb: receiver overflow should be reported HID: quirks: Allow inverting the absolute X/Y values bpf: Do not WARN in bpf_warn_invalid_xdp_action() net: bonding: debug: avoid printing debug logs when bond is not notifying peers x86/mce: Mark mce_read_aux() noinstr x86/mce: Mark mce_end() noinstr x86/mce: Mark mce_panic() noinstr gpio: aspeed: Convert aspeed_gpio.lock to raw_spinlock net: phy: prefer 1000baseT over 1000baseKX net-sysfs: update the queue counts in the unregistration path ath10k: Fix tx hanging iwlwifi: mvm: synchronize with FW after multicast commands media: m920x: don't use stack on USB reads media: saa7146: hexium_orion: Fix a NULL pointer dereference in hexium_attach() media: uvcvideo: Increase UVC_CTRL_CONTROL_TIMEOUT to 5 seconds. x86/mm: Flush global TLB when switching to trampoline page-table floppy: Add max size check for user space request usb: uhci: add aspeed ast2600 uhci support rsi: Fix out-of-bounds read in rsi_read_pkt() rsi: Fix use-after-free in rsi_rx_done_handler() mwifiex: Fix skb_over_panic in mwifiex_usb_recv() HSI: core: Fix return freed object in hsi_new_client gpiolib: acpi: Do not set the IRQ type if the IRQ is already in use drm/bridge: megachips: Ensure both bridges are probed before registration mlxsw: pci: Add shutdown method in PCI driver EDAC/synopsys: Use the quirk for version instead of ddr version media: b2c2: Add missing check in flexcop_pci_isr: HID: apple: Do not reset quirks when the Fn key is not found drm: panel-orientation-quirks: Add quirk for the Lenovo Yoga Book X91F/L usb: gadget: f_fs: Use stream_open() for endpoint files batman-adv: allow netlink usage in unprivileged containers ARM: shmobile: rcar-gen2: Add missing of_node_put() drm/nouveau/pmu/gm200-: avoid touching PMU outside of DEVINIT/PREOS/ACR ar5523: Fix null-ptr-deref with unexpected WDCMSG_TARGET_START reply drm/lima: fix warning when CONFIG_DEBUG_SG=y & CONFIG_DMA_API_DEBUG=y fs: dlm: filter user dlm messages for kernel locks Bluetooth: Fix debugfs entry leak in hci_register_dev() of: base: Fix phandle argument length mismatch error message RDMA/cxgb4: Set queue pair state when being queried mips: bcm63xx: add support for clk_set_parent() mips: lantiq: add support for clk_set_parent() misc: lattice-ecp3-config: Fix task hung when firmware load failed ASoC: samsung: idma: Check of ioremap return value ASoC: mediatek: Check for error clk pointer phy: uniphier-usb3ss: fix unintended writing zeros to PHY register iommu/iova: Fix race between FQ timeout and teardown dmaengine: pxa/mmp: stop referencing config->slave_id clk: stm32: Fix ltdc's clock turn off by clk_disable_unused() after system enter shell ASoC: rt5663: Handle device_property_read_u32_array error codes RDMA/cma: Let cma_resolve_ib_dev() continue search even after empty entry RDMA/core: Let ib_find_gid() continue search even after empty entry powerpc/powermac: Add additional missing lockdep_register_key() PCI/MSI: Fix pci_irq_vector()/pci_irq_get_affinity() scsi: ufs: Fix race conditions related to driver data iommu/io-pgtable-arm: Fix table descriptor paddr formatting binder: fix handling of error during copy char/mwave: Adjust io port register size ALSA: oss: fix compile error when OSS_DEBUG is enabled ASoC: uniphier: drop selecting non-existing SND_SOC_UNIPHIER_AIO_DMA powerpc/prom_init: Fix improper check of prom_getprop() clk: imx8mn: Fix imx8mn_clko1_sels RDMA/hns: Validate the pkey index ALSA: hda: Add missing rwsem around snd_ctl_remove() calls ALSA: PCM: Add missing rwsem around snd_ctl_remove() calls ALSA: jack: Add missing rwsem around snd_ctl_remove() calls ext4: avoid trim error on fs with small groups net: mcs7830: handle usb read errors properly pcmcia: fix setting of kthread task states can: xilinx_can: xcan_probe(): check for error irq can: softing: softing_startstop(): fix set but not used variable warning tpm: add request_locality before write TPM_INT_ENABLE spi: spi-meson-spifc: Add missing pm_runtime_disable() in meson_spifc_probe net/mlx5: Set command entry semaphore up once got index free Revert "net/mlx5e: Block offload of outer header csum for UDP tunnels" net/mlx5e: Don't block routes with nexthop objects in SW debugfs: lockdown: Allow reading debugfs files that are not world readable HID: hid-uclogic-params: Invalid parameter check in uclogic_params_frame_init_v1_buttonpad HID: hid-uclogic-params: Invalid parameter check in uclogic_params_huion_init HID: hid-uclogic-params: Invalid parameter check in uclogic_params_get_str_desc HID: hid-uclogic-params: Invalid parameter check in uclogic_params_init Bluetooth: hci_bcm: Check for error irq fsl/fman: Check for null pointer after calling devm_ioremap staging: greybus: audio: Check null pointer rocker: fix a sleeping in atomic bug ppp: ensure minimum packet size in ppp_write() bpf: Fix SO_RCVBUF/SO_SNDBUF handling in _bpf_setsockopt(). netfilter: ipt_CLUSTERIP: fix refcount leak in clusterip_tg_check() pcmcia: rsrc_nonstatic: Fix a NULL pointer dereference in nonstatic_find_mem_region() pcmcia: rsrc_nonstatic: Fix a NULL pointer dereference in __nonstatic_find_io_region() ACPI: scan: Create platform device for BCM4752 and LNV4752 ACPI nodes x86/mce/inject: Avoid out-of-bounds write when setting flags bpftool: Enable line buffering for stdout selinux: fix potential memleak in selinux_add_opt() mmc: meson-mx-sdio: add IRQ check ARM: dts: armada-38x: Add generic compatible to UART nodes usb: ftdi-elan: fix memory leak on device disconnect ARM: 9159/1: decompressor: Avoid UNPREDICTABLE NOP encoding xfrm: state and policy should fail if XFRMA_IF_ID 0 xfrm: interface with if_id 0 should return error media: hantro: Fix probe func error path drm/bridge: ti-sn65dsi86: Set max register for regmap drm/msm/dpu: fix safe status debugfs file media: coda/imx-vdoa: Handle dma_set_coherent_mask error codes media: msi001: fix possible null-ptr-deref in msi001_probe() media: dw2102: Fix use after free ARM: dts: gemini: NAS4220-B: fis-index-block with 128 KiB sectors crypto: stm32/cryp - fix lrw chaining mode crypto: stm32/cryp - fix double pm exit crypto: stm32/cryp - fix xts and race condition in crypto_engine requests xfrm: fix a small bug in xfrm_sa_len() mwifiex: Fix possible ABBA deadlock rcu/exp: Mark current CPU as exp-QS in IPI loop second pass sched/rt: Try to restart rt period timer when rt runtime exceeded media: si2157: Fix "warm" tuner state detection media: saa7146: mxb: Fix a NULL pointer dereference in mxb_attach() media: dib8000: Fix a memleak in dib8000_init() Bluetooth: btmtksdio: fix resume failure staging: rtl8192e: rtllib_module: fix error handle case in alloc_rtllib() staging: rtl8192e: return error code from rtllib_softmac_init() floppy: Fix hang in watchdog when disk is ejected serial: amba-pl011: do not request memory region twice tty: serial: uartlite: allow 64 bit address arm64: dts: ti: k3-j721e: Fix the L2 cache sets drm/radeon/radeon_kms: Fix a NULL pointer dereference in radeon_driver_open_kms() drm/amdgpu: Fix a NULL pointer dereference in amdgpu_connector_lcd_native_mode() ACPI: EC: Rework flushing of EC work while suspended to idle arm64: dts: qcom: msm8916: fix MMC controller aliases netfilter: bridge: add support for pppoe filtering media: venus: core: Fix a resource leak in the error handling path of 'venus_probe()' media: mtk-vcodec: call v4l2_m2m_ctx_release first when file is released media: si470x-i2c: fix possible memory leak in si470x_i2c_probe() media: imx-pxp: Initialize the spinlock prior to using it media: rcar-csi2: Correct the selection of hsfreqrange tty: serial: atmel: Call dma_async_issue_pending() tty: serial: atmel: Check return code of dmaengine_submit() arm64: dts: ti: k3-j721e: correct cache-sets info crypto: qce - fix uaf on qce_ahash_register_one media: dmxdev: fix UAF when dvb_register_device() fails tee: fix put order in teedev_close_context() Bluetooth: stop proccessing malicious adv data arm64: dts: meson-gxbb-wetek: fix missing GPIO binding arm64: dts: meson-gxbb-wetek: fix HDMI in early boot media: aspeed: Update signal status immediately to ensure sane hw state media: em28xx: fix memory leak in em28xx_init_dev media: aspeed: fix mode-detect always time out at 2nd run media: videobuf2: Fix the size printk format wcn36xx: Release DMA channel descriptor allocations wcn36xx: Indicate beacon not connection loss on MISSED_BEACON_IND clk: bcm-2835: Remove rounding up the dividers clk: bcm-2835: Pick the closest clock rate Bluetooth: cmtp: fix possible panic when cmtp_init_sockets() fails drm/rockchip: dsi: Fix unbalanced clock on probe error drm/panel: innolux-p079zca: Delete panel on attach() failure drm/panel: kingdisplay-kd097d04: Delete panel on attach() failure drm/rockchip: dsi: Reconfigure hardware on resume() drm/rockchip: dsi: Hold pm-runtime across bind/unbind shmem: fix a race between shmem_unused_huge_shrink and shmem_evict_inode mm/page_alloc.c: do not warn allocation failure on zone DMA if no managed pages mm_zone: add function to check if managed dma zone exists PCI: Add function 1 DMA alias quirk for Marvell 88SE9125 SATA controller dma_fence_array: Fix PENDING_ERROR leak in dma_fence_array_signaled() iommu/io-pgtable-arm-v7s: Add error handle for page table allocation failure lkdtm: Fix content of section containing lkdtm_rodata_do_nothing() can: softing_cs: softingcs_probe(): fix memleak on registration failure media: stk1160: fix control-message timeouts media: pvrusb2: fix control-message timeouts media: redrat3: fix control-message timeouts media: dib0700: fix undefined behavior in tuner shutdown media: s2255: fix control-message timeouts media: cpia2: fix control-message timeouts media: em28xx: fix control-message timeouts media: mceusb: fix control-message timeouts media: flexcop-usb: fix control-message timeouts media: v4l2-ioctl.c: readbuffers depends on V4L2_CAP_READWRITE rtc: cmos: take rtc_lock while reading from CMOS tools/nolibc: fix incorrect truncation of exit code tools/nolibc: i386: fix initial stack alignment tools/nolibc: x86-64: Fix startup code bug x86/gpu: Reserve stolen memory for first integrated Intel GPU mtd: rawnand: gpmi: Remove explicit default gpmi clock setting for i.MX6 mtd: rawnand: gpmi: Add ERR007117 protection for nfc_apply_timings nfc: llcp: fix NULL error pointer dereference on sendmsg() after failed bind() f2fs: fix to do sanity check in is_alive() HID: wacom: Avoid using stale array indicies to read contact count HID: wacom: Ignore the confidence flag when a touch is removed HID: wacom: Reset expected and received contact counts at the same time HID: uhid: Fix worker destroying device without any protection Linux 5.4.173 ARM: 9025/1: Kconfig: CPU_BIG_ENDIAN depends on !LD_IS_LLD mtd: fixup CFI on ixp4xx ALSA: hda/realtek - Fix silent output on Gigabyte X570 Aorus Master after reboot from Windows KVM: x86: remove PMU FIXED_CTR3 from msrs_to_save_all firmware: qemu_fw_cfg: fix kobject leak in probe error path firmware: qemu_fw_cfg: fix NULL-pointer deref on duplicate entries firmware: qemu_fw_cfg: fix sysfs information leak rtlwifi: rtl8192cu: Fix WARNING when calling local_irq_restore() with interrupts enabled media: uvcvideo: fix division by zero at stream start KVM: s390: Clarify SIGP orders versus STOP/RESTART perf: Protect perf_guest_cbs with RCU vfs: fs_context: fix up param length parsing in legacy_parse_param orangefs: Fix the size of a memory allocation in orangefs_bufmap_alloc() devtmpfs regression fix: reconfigure on each mount kbuild: Add $(KBUILD_HOSTLDFLAGS) to 'has_libelf' test Linux 5.4.172 staging: greybus: fix stack size warning with UBSAN drm/i915: Avoid bitwise vs logical OR warning in snb_wm_latency_quirk() staging: wlan-ng: Avoid bitwise vs logical OR warning in hfa384x_usb_throttlefn() media: Revert "media: uvcvideo: Set unique vdev name based in type" random: fix crash on multiple early calls to add_bootloader_randomness() random: fix data race on crng init time random: fix data race on crng_node_pool can: gs_usb: gs_can_start_xmit(): zero-initialize hf->{flags,reserved} can: gs_usb: fix use of uninitialized variable, detach device on reception of invalid USB data drivers core: Use sysfs_emit and sysfs_emit_at for show(device *...) functions mfd: intel-lpss: Fix too early PM enablement in the ACPI ->probe() veth: Do not record rx queue hint in veth_xmit mmc: sdhci-pci: Add PCI ID for Intel ADL USB: Fix "slab-out-of-bounds Write" bug in usb_hcd_poll_rh_status USB: core: Fix bug in resuming hub's handling of wakeup requests Bluetooth: bfusb: fix division by zero in send path Bluetooth: btusb: fix memory leak in btusb_mtk_submit_wmt_recv_urb() workqueue: Fix unbind_workers() VS wq_worker_running() race UPSTREAM: x86/pci: Fix the function type for check_reserved_t Linux 5.4.171 mISDN: change function names to avoid conflicts atlantic: Fix buff_ring OOB in aq_ring_rx_clean net: udp: fix alignment problem in udp4_seq_show() ip6_vti: initialize __ip6_tnl_parm struct in vti6_siocdevprivate scsi: libiscsi: Fix UAF in iscsi_conn_get_param()/iscsi_conn_teardown() usb: mtu3: fix interval value for intr and isoc ipv6: Do cleanup if attribute validation fails in multipath route ipv6: Continue processing multipath route even if gateway attribute is invalid phonet: refcount leak in pep_sock_accep rndis_host: support Hytera digital radios power: reset: ltc2952: Fix use of floating point literals power: supply: core: Break capacity loop xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate net: phy: micrel: set soft_reset callback to genphy_soft_reset for KSZ8081 sch_qfq: prevent shift-out-of-bounds in qfq_init_qdisc batman-adv: mcast: don't send link-local multicast to mcast routers lwtunnel: Validate RTA_ENCAP_TYPE attribute length ipv6: Check attribute length for RTA_GATEWAY when deleting multipath route ipv6: Check attribute length for RTA_GATEWAY in multipath route ipv4: Check attribute length for RTA_FLOW in multipath route ipv4: Check attribute length for RTA_GATEWAY in multipath route i40e: Fix incorrect netdev's real number of RX/TX queues i40e: Fix for displaying message regarding NVM version i40e: fix use-after-free in i40e_sync_filters_subtask() mac80211: initialize variable have_higher_than_11mbit RDMA/uverbs: Check for null return of kmalloc_array RDMA/core: Don't infoleak GRH fields iavf: Fix limit of total number of queues to active queues of VF ieee802154: atusb: fix uninit value in atusb_set_extended_addr tracing: Tag trace_percpu_buffer as a percpu pointer tracing: Fix check for trace_percpu_buffer validity in get_trace_buf() selftests: x86: fix [-Wstringop-overread] warn in test_process_vm_readv() Input: touchscreen - Fix backport of a02dcde595f7cbd240ccd64de96034ad91cffc40 f2fs: quota: fix potential deadlock Linux 5.4.170 perf script: Fix CPU filtering of a script's switch events net: fix use-after-free in tw_timer_handler Input: spaceball - fix parsing of movement data packets Input: appletouch - initialize work before device registration scsi: vmw_pvscsi: Set residual data length conditionally binder: fix async_free_space accounting for empty parcels usb: mtu3: set interval of FS intr and isoc endpoint usb: mtu3: fix list_head check warning usb: mtu3: add memory barrier before set GPD's HWO usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear. xhci: Fresco FL1100 controller should not have BROKEN_MSI quirk set. uapi: fix linux/nfc.h userspace compilation errors nfc: uapi: use kernel size_t to fix user-space builds i2c: validate user data in compat ioctl fsl/fman: Fix missing put_device() call in fman_port_probe net/ncsi: check for error return from call to nla_put_u32 selftests/net: udpgso_bench_tx: fix dst ip argument net/mlx5e: Fix wrong features assignment in case of error ionic: Initialize the 'lif->dbid_inuse' bitmap NFC: st21nfca: Fix memory leak in device probe and remove net: lantiq_xrx200: fix statistics of received bytes net: usb: pegasus: Do not drop long Ethernet frames sctp: use call_rcu to free endpoint selftests: Calculate udpgso segment count without header adjustment udp: using datalen to cap ipv6 udp max gso segments net/mlx5: DR, Fix NULL vs IS_ERR checking in dr_domain_init_resources scsi: lpfc: Terminate string in lpfc_debugfs_nvmeio_trc_write() selinux: initialize proto variable in selinux_ip_postroute_compat() recordmcount.pl: fix typo in s390 mcount regex memblock: fix memblock_phys_alloc() section mismatch error platform/x86: apple-gmux: use resource_size() with res tomoyo: Check exceeded quota early in tomoyo_domain_quota_is_ok(). Input: i8042 - enable deferred probe quirk for ASUS UM325UA Input: i8042 - add deferred probe support tee: handle lookup of shm with reference count 0 HID: asus: Add depends on USB_HID to HID_ASUS Kconfig option Linux 5.4.169 phonet/pep: refuse to enable an unbound pipe hamradio: improve the incomplete fix to avoid NPD hamradio: defer ax25 kfree after unregister_netdev ax25: NPD bug when detaching AX25 device hwmon: (lm90) Do not report 'busy' status bit as alarm hwmom: (lm90) Fix citical alarm status for MAX6680/MAX6681 pinctrl: mediatek: fix global-out-of-bounds issue mm: mempolicy: fix THP allocations escaping mempolicy restrictions KVM: VMX: Fix stale docs for kvm-intel.emulate_invalid_guest_state usb: gadget: u_ether: fix race in setting MAC address in setup phase f2fs: fix to do sanity check on last xattr entry in __f2fs_setxattr() tee: optee: Fix incorrect page free bug ARM: 9169/1: entry: fix Thumb2 bug in iWMMXt exception handling mmc: core: Disable card detect during shutdown mmc: sdhci-tegra: Fix switch to HS400ES mode pinctrl: stm32: consider the GPIO offset to expose all the GPIO lines x86/pkey: Fix undefined behaviour with PKRU_WD_BIT parisc: Correct completer in lws start ipmi: fix initialization when workqueue allocation fails ipmi: ssif: initialize ssif_info->client early ipmi: bail out if init_srcu_struct fails Input: atmel_mxt_ts - fix double free in mxt_read_info_block ALSA: hda/realtek: Amp init fixup for HP ZBook 15 G6 ALSA: drivers: opl3: Fix incorrect use of vp->state ALSA: jack: Check the return value of kstrdup() hwmon: (lm90) Drop critical attribute support for MAX6654 hwmon: (lm90) Introduce flag indicating extended temperature support hwmon: (lm90) Add basic support for TI TMP461 hwmon: (lm90) Add max6654 support to lm90 driver hwmon: (lm90) Fix usage of CONFIG2 register in detect function Input: elantech - fix stack out of bound access in elantech_change_report_id() sfc: falcon: Check null pointer of rx_queue->page_ring drivers: net: smc911x: Check for error irq fjes: Check for error irq bonding: fix ad_actor_system option setting to default ipmi: Fix UAF when uninstall ipmi_si and ipmi_msghandler module net: skip virtio_net_hdr_set_proto if protocol already set net: accept UFOv6 packages in virtio_net_hdr_to_skb qlcnic: potential dereference null pointer of rx_queue->page_ring netfilter: fix regression in looped (broad|multi)cast's MAC handling IB/qib: Fix memory leak in qib_user_sdma_queue_pkts() spi: change clk_disable_unprepare to clk_unprepare arm64: dts: allwinner: orangepi-zero-plus: fix PHY mode HID: holtek: fix mouse probing serial: 8250_fintek: Fix garbled text for console net: usb: lan78xx: add Allied Telesis AT29M2-AF Linux 5.4.168 xen/netback: don't queue unlimited number of packages xen/netback: fix rx queue stall detection xen/console: harden hvc_xen against event channel storms xen/netfront: harden netfront against event channel storms xen/blkfront: harden blkfront against event channel storms Revert "xsk: Do not sleep in poll() when need_wakeup set" net: sched: Fix suspicious RCU usage while accessing tcf_tunnel_info mac80211: fix regression in SSN handling of addba tx rcu: Mark accesses to rcu_state.n_force_qs scsi: scsi_debug: Sanity check block descriptor length in resp_mode_select() ovl: fix warning in ovl_create_real() fuse: annotate lock in fuse_reverse_inval_entry() media: mxl111sf: change mutex_init() location xsk: Do not sleep in poll() when need_wakeup set ARM: dts: imx6ull-pinfunc: Fix CSI_DATA07__ESAI_TX0 pad name Input: touchscreen - avoid bitwise vs logical OR warning mwifiex: Remove unnecessary braces from HostCmd_SET_SEQ_NO_BSS_INFO mac80211: validate extended element ID is present drm/amdgpu: correct register access for RLC_JUMP_TABLE_RESTORE libata: if T_LENGTH is zero, dma direction should be DMA_NONE timekeeping: Really make sure wall_to_monotonic isn't positive USB: serial: option: add Telit FN990 compositions USB: serial: cp210x: fix CP2105 GPIO registration usb: xhci: Extend support for runtime power management for AMD's Yellow carp. PCI/MSI: Mask MSI-X vectors only on success PCI/MSI: Clear PCI_MSIX_FLAGS_MASKALL on error USB: NO_LPM quirk Lenovo USB-C to Ethernet Adapher(RTL8153-04) USB: gadget: bRequestType is a bitfield, not a enum sit: do not call ipip6_dev_free() from sit_init_net() net: systemport: Add global locking for descriptor lifecycle net/smc: Prevent smc_release() from long blocking net: Fix double 0x prefix print in SKB dump net/packet: rx_owner_map depends on pg_vec netdevsim: Zero-initialize memory for new map's value in function nsim_bpf_map_alloc ixgbe: set X550 MDIO speed before talking to PHY igbvf: fix double free in `igbvf_probe` igb: Fix removal of unicast MAC filters of VFs soc/tegra: fuse: Fix bitwise vs. logical OR warning rds: memory leak in __rds_conn_create() flow_offload: return EOPNOTSUPP for the unsupported mpls action type net: sched: lock action when translating it to flow_action infra mac80211: fix lookup when adding AddBA extension element mac80211: accept aggregation sessions on 6 GHz mac80211: agg-tx: don't schedule_and_wake_txq() under sta->lock mac80211: agg-tx: refactor sending addba selftest/net/forwarding: declare NETIFS p9 p10 dmaengine: st_fdma: fix MODULE_ALIAS selftests: Fix IPv6 address bind tests selftests: Fix raw socket bind tests with VRF inet_diag: fix kernel-infoleak for UDP sockets inet_diag: use jiffies_delta_to_msecs() sch_cake: do not call cake_destroy() from cake_init() s390/kexec_file: fix error handling when applying relocations selftests: net: Correct ping6 expected rc from 2 to 1 clk: Don't parent clks until the parent is fully registered ARM: socfpga: dts: fix qspi node compatible mac80211: track only QoS data frames for admission control arm64: dts: rockchip: fix audio-supply for Rock Pi 4 arm64: dts: rockchip: fix rk3399-leez-p710 vcc3v3-lan supply arm64: dts: rockchip: remove mmc-hs400-enhanced-strobe from rk3399-khadas-edge nfsd: fix use-after-free due to delegation race iio: adc: stm32: fix a current leak by resetting pcsel before disabling vdda audit: improve robustness of the audit queue handling dm btree remove: fix use after free in rebalance_children() recordmcount.pl: look for jgnop instruction as well as bcrl on s390 virtio_ring: Fix querying of maximum DMA mapping size for virtio device firmware: arm_scpi: Fix string overflow in SCPI genpd driver mac80211: send ADDBA requests using the tid/queue of the aggregation session mac80211: mark TX-during-stop for TX in in_reconfig KVM: selftests: Make sure kvm_create_max_vcpus test won't hit RLIMIT_NOFILE Linux 5.4.167 arm: ioremap: don't abuse pfn_valid() to check if pfn is in RAM arm: extend pfn_valid to take into account freed memory map alignment memblock: ensure there is no overflow in memblock_overlaps_region() memblock: align freed memory map on pageblock boundaries with SPARSEMEM memblock: free_unused_memmap: use pageblock units instead of MAX_ORDER hwmon: (dell-smm) Fix warning on /proc/i8k creation error bpf: Fix integer overflow in argument calculation for bpf_map_area_alloc selinux: fix race condition when computing ocontext SIDs KVM: x86: Ignore sparse banks size for an "all CPUs", non-sparse IPI req tracing: Fix a kmemleak false positive in tracing_map drm/amd/display: add connector type check for CRC source set drm/amd/display: Fix for the no Audio bug with Tiled Displays net: netlink: af_netlink: Prevent empty skb by adding a check on len. i2c: rk3x: Handle a spurious start completion interrupt flag parisc/agp: Annotate parisc agp init functions with __init net/mlx4_en: Update reported link modes for 1/10G drm/msm/dsi: set default num_data_lanes nfc: fix segfault in nfc_genl_dump_devices_done Linux 5.4.166 netfilter: selftest: conntrack_vrf.sh: fix file permission Linux 5.4.165 bpf: Add selftests to cover packet access corner cases misc: fastrpc: fix improper packet size calculation irqchip: nvic: Fix offset for Interrupt Priority Offsets irqchip/irq-gic-v3-its.c: Force synchronisation when issuing INVALL irqchip/armada-370-xp: Fix support for Multi-MSI interrupts irqchip/armada-370-xp: Fix return value of armada_370_xp_msi_alloc() iio: accel: kxcjk-1013: Fix possible memory leak in probe and remove iio: ad7768-1: Call iio_trigger_notify_done() on error iio: adc: axp20x_adc: fix charging current reporting on AXP22x iio: at91-sama5d2: Fix incorrect sign extension iio: dln2: Check return value of devm_iio_trigger_register() iio: dln2-adc: Fix lockdep complaint iio: itg3200: Call iio_trigger_notify_done() on error iio: kxsd9: Don't return error code in trigger handler iio: ltr501: Don't return error code in trigger handler iio: mma8452: Fix trigger reference couting iio: stk3310: Don't return error code in interrupt handler iio: trigger: stm32-timer: fix MODULE_ALIAS iio: trigger: Fix reference counting xhci: avoid race between disable slot command and host runtime suspend usb: core: config: using bit mask instead of individual bits xhci: Remove CONFIG_USB_DEFAULT_PERSIST to prevent xHCI from runtime suspending usb: core: config: fix validation of wMaxPacketValue entries USB: gadget: zero allocate endpoint 0 buffers USB: gadget: detect too-big endpoint 0 requests selftests/fib_tests: Rework fib_rp_filter_test() net/qla3xxx: fix an error code in ql_adapter_up() net, neigh: clear whole pneigh_entry at alloc time net: fec: only clear interrupt of handling queue in fec_enet_rx_queue() net: altera: set a couple error code in probe() net: cdc_ncm: Allow for dwNtbOutMaxSize to be unset or zero tools build: Remove needless libpython-version feature check that breaks test-all fast path dt-bindings: net: Reintroduce PHY no lane swap binding mtd: rawnand: fsmc: Fix timing computation mtd: rawnand: fsmc: Take instruction delay into account i40e: Fix pre-set max number of queues for VF i40e: Fix failed opcode appearing if handling messages from VF ASoC: qdsp6: q6routing: Fix return value from msm_routing_put_audio_mixer qede: validate non LSO skb length block: fix ioprio_get(IOPRIO_WHO_PGRP) vs setuid(2) tracefs: Set all files to the same group ownership as the mount option aio: fix use-after-free due to missing POLLFREE handling aio: keep poll requests on waitqueue until completed signalfd: use wake_up_pollfree() binder: use wake_up_pollfree() wait: add wake_up_pollfree() libata: add horkage for ASMedia 1092 x86/sme: Explicitly map new EFI memmap table as encrypted can: m_can: Disable and ignore ELO interrupt can: pch_can: pch_can_rx_normal: fix use after free drm/syncobj: Deal with signalled fences in drm_syncobj_find_fence. clk: qcom: regmap-mux: fix parent clock lookup tracefs: Have new files inherit the ownership of their parent nfsd: Fix nsfd startup race (again) btrfs: replace the BUG_ON in btrfs_del_root_ref with proper error handling btrfs: clear extent buffer uptodate when we fail to write it ALSA: pcm: oss: Handle missing errors in snd_pcm_oss_change_params*() ALSA: pcm: oss: Limit the period size to 16MB ALSA: pcm: oss: Fix negative period/buffer sizes ALSA: hda/realtek - Add headset Mic support for Lenovo ALC897 platform ALSA: ctl: Fix copy of updated id with element read/write mm: bdi: initialize bdi_min_ratio when bdi is unregistered IB/hfi1: Correct guard on eager buffer deallocation iavf: Fix reporting when setting descriptor count iavf: restore MSI state on reset udp: using datalen to cap max gso segments seg6: fix the iif in the IPv6 socket control block nfp: Fix memory leak in nfp_cpp_area_cache_add() bonding: make tx_rebalance_counter an atomic ice: ignore dropped packets during init bpf: Fix the off-by-two error in range markings vrf: don't run conntrack on vrf with !dflt qdisc selftests: netfilter: add a vrf+conntrack testcase nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done can: sja1000: fix use after free in ems_pcmcia_add_card() can: kvaser_pciefd: kvaser_pciefd_rx_error_frame(): increase correct stats->{rx,tx}_errors counter can: kvaser_usb: get CAN clock frequency from device HID: check for valid USB device for many HID drivers HID: wacom: fix problems when device is not a valid USB device HID: bigbenff: prevent null pointer dereference HID: add USB_HID dependancy on some USB HID drivers HID: add USB_HID dependancy to hid-chicony HID: add USB_HID dependancy to hid-prodikeys HID: add hid_is_usb() function to make it simpler for USB detection HID: google: add eel USB id HID: quirks: Add quirk for the Microsoft Surface 3 type-cover ntfs: fix ntfs_test_inode and ntfs_init_locked_inode function type serial: tegra: Change lower tolerance baud rate limit for tegra20 and tegra30 ANDROID: GKI: fix up abi breakage in fib_rules.h Linux 5.4.164 ipmi: msghandler: Make symbol 'remove_work_wq' static net/tls: Fix authentication failure in CCM mode parisc: Mark cr16 CPU clocksource unstable on all SMP machines iwlwifi: mvm: retry init flow if failed serial: 8250_pci: rewrite pericom_do_set_divisor() serial: 8250_pci: Fix ACCES entries in pci_serial_quirks array serial: core: fix transmit-buffer reset and memleak serial: pl011: Add ACPI SBSA UART match id tty: serial: msm_serial: Deactivate RX DMA for polling support x86/64/mm: Map all kernel memory into trampoline_pgd x86/tsc: Disable clocksource watchdog for TSC on qualified platorms x86/tsc: Add a timer to make sure TSC_adjust is always checked usb: typec: tcpm: Wait in SNK_DEBOUNCED until disconnect USB: NO_LPM quirk Lenovo Powered USB-C Travel Hub xhci: Fix commad ring abort, write all 64 bits to CRCR register. vgacon: Propagate console boot parameters before calling `vc_resize' parisc: Fix "make install" on newer debian releases parisc: Fix KBUILD_IMAGE for self-extracting kernel sched/uclamp: Fix rq->uclamp_max not set on first enqueue KVM: x86/pmu: Fix reserved bits for AMD PerfEvtSeln register ipv6: fix memory leak in fib6_rule_suppress drm/msm: Do hw_init() before capturing GPU state net/smc: Keep smc_close_final rc during active close net/rds: correct socket tunable error in rds_tcp_tune() ipv4: convert fib_num_tclassid_users to atomic_t net: annotate data-races on txq->xmit_lock_owner net: marvell: mvpp2: Fix the computation of shared CPUs net: usb: lan78xx: lan78xx_phy_init(): use PHY_POLL instead of "0" if no IRQ is available rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer() selftests: net: Correct case name net/mlx4_en: Fix an use-after-free bug in mlx4_en_try_alloc_resources() siphash: use _unaligned version by default net: mpls: Fix notifications when deleting a device net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic_83xx_add_rings() natsemi: xtensa: fix section mismatch warnings i2c: cbus-gpio: set atomic transfer callback i2c: stm32f7: stop dma transfer in case of NACK i2c: stm32f7: recover the bus on access timeout i2c: stm32f7: flush TX FIFO upon transfer errors sata_fsl: fix warning in remove_proc_entry when rmmod sata_fsl sata_fsl: fix UAF in sata_fsl_port_stop when rmmod sata_fsl fget: check that the fd still exists after getting a ref to it s390/pci: move pseudo-MMIO to prevent MIO overlap cpufreq: Fix get_cpu_device() failure in add_cpu_dev_symlink() ipmi: Move remove_work to dedicated workqueue rt2x00: do not mark device gone on EPROTO errors during start kprobes: Limit max data_size of the kretprobe instances vrf: Reset IPCB/IP6CB when processing outbound pkts in vrf dev xmit net/smc: Avoid warning of possible recursive locking perf report: Fix memory leaks around perf_tip() perf hist: Fix memory leak of a perf_hpp_fmt net: ethernet: dec: tulip: de4x5: fix possible array overflows in type3_infoblock() net: tulip: de4x5: fix the problem that the array 'lp->phy[8]' may be out of bound ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port() ata: ahci: Add Green Sardine vendor ID as board_ahci_mobile scsi: iscsi: Unblock session then wake up error handler thermal: core: Reset previous low and high trip during thermal zone init btrfs: check-integrity: fix a warning on write caching disabled disk s390/setup: avoid using memblock_enforce_memory_limit platform/x86: thinkpad_acpi: Fix WWAN device disabled issue after S3 deep net: return correct error code atlantic: Fix OOB read and write in hw_atl_utils_fw_rpc_wait net/smc: Transfer remaining wait queue entries during fallback mac80211: do not access the IV when it was stripped drm/sun4i: fix unmet dependency on RESET_CONTROLLER for PHY_SUN6I_MIPI_DPHY gfs2: Fix length of holes reported at end-of-file can: j1939: j1939_tp_cmd_recv(): check the dst address of TP.CM_BAM arm64: dts: mcbin: support 2W SFP modules of: clk: Make <linux/of_clk.h> self-contained NFSv42: Fix pagecache invalidation after COPY/CLONE Revert "net: ipv6: add fib6_nh_release_dsts stub" Revert "net: nexthop: release IPv6 per-cpu dsts when replacing a nexthop group" Revert "mmc: sdhci: Fix ADMA for PAGE_SIZE >= 64KiB" Linux 5.4.163 tty: hvc: replace BUG_ON() with negative return value xen/netfront: don't trust the backend response data blindly xen/netfront: disentangle tx_skb_freelist xen/netfront: don't read data from request on the ring page xen/netfront: read response from backend only once xen/blkfront: don't trust the backend response data blindly xen/blkfront: don't take local copy of a request from the ring page xen/blkfront: read response from backend only once xen: sync include/xen/interface/io/ring.h with Xen's newest version fuse: release pipe buf after last use NFC: add NCI_UNREG flag to eliminate the race shm: extend forced shm destroy to support objects from several IPC nses s390/mm: validate VMA in PGSTE manipulation functions tracing: Check pid filtering when creating events vhost/vsock: fix incorrect used length reported to the guest smb3: do not error on fsync when readonly f2fs: set SBI_NEED_FSCK flag when inconsistent node block found net: mscc: ocelot: correctly report the timestamping RX filters in ethtool net: mscc: ocelot: don't downgrade timestamping RX filters in SIOCSHWTSTAMP net: hns3: fix VF RSS failed problem after PF enable multi-TCs net/smc: Don't call clcsock shutdown twice when smc shutdown net: vlan: fix underflow for the real_dev refcnt MIPS: use 3-level pgtable for 64KB page size on MIPS_VA_BITS_48 igb: fix netpoll exit with traffic nvmet: use IOCB_NOWAIT only if the filesystem supports it tcp_cubic: fix spurious Hystart ACK train detections for not-cwnd-limited flows PM: hibernate: use correct mode for swsusp_close() net/ncsi : Add payload to be 32-bit aligned to fix dropped packets nvmet-tcp: fix incomplete data digest send net/smc: Ensure the active closing peer first closes clcsock scsi: core: sysfs: Fix setting device state to SDEV_RUNNING net: nexthop: release IPv6 per-cpu dsts when replacing a nexthop group net: ipv6: add fib6_nh_release_dsts stub nfp: checking parameter process for rx-usecs/tx-usecs is invalid ipv6: fix typos in __ip6_finish_output() iavf: Prevent changing static ITR values if adaptive moderation is on drm/vc4: fix error code in vc4_create_object() scsi: mpt3sas: Fix kernel panic during drive powercycle test ARM: socfpga: Fix crash with CONFIG_FORTIRY_SOURCE NFSv42: Don't fail clone() unless the OP_CLONE operation failed firmware: arm_scmi: pm: Propagate return value to caller net: ieee802154: handle iftypes as u32 ASoC: topology: Add missing rwsem around snd_ctl_remove() calls ASoC: qdsp6: q6routing: Conditionally reset FrontEnd Mixer ARM: dts: BCM5301X: Add interrupt properties to GPIO node ARM: dts: BCM5301X: Fix I2C controller interrupt netfilter: ipvs: Fix reuse connection if RS weight is 0 proc/vmcore: fix clearing user buffer by properly using clear_user() arm64: dts: marvell: armada-37xx: Set pcie_reset_pin to gpio function pinctrl: armada-37xx: Correct PWM pins definitions PCI: aardvark: Fix support for PCI_BRIDGE_CTL_BUS_RESET on emulated bridge PCI: aardvark: Set PCI Bridge Class Code to PCI Bridge PCI: aardvark: Fix support for bus mastering and PCI_COMMAND on emulated bridge PCI: aardvark: Fix link training PCI: aardvark: Simplify initialization of rootcap on virtual bridge PCI: aardvark: Implement re-issuing config requests on CRS response PCI: aardvark: Fix PCIe Max Payload Size setting PCI: aardvark: Configure PCIe resources from 'ranges' DT property PCI: pci-bridge-emul: Fix array overruns, improve safety PCI: aardvark: Update comment about disabling link training PCI: aardvark: Move PCIe reset card code to advk_pcie_train_link() PCI: aardvark: Fix compilation on s390 PCI: aardvark: Don't touch PCIe registers if no card connected PCI: aardvark: Replace custom macros by standard linux/pci_regs.h macros PCI: aardvark: Issue PERST via GPIO PCI: aardvark: Improve link training PCI: aardvark: Train link immediately after enabling training PCI: aardvark: Fix big endian support PCI: aardvark: Wait for endpoint to be ready before training link PCI: aardvark: Deduplicate code in advk_pcie_rd_conf() mdio: aspeed: Fix "Link is Down" issue mmc: sdhci: Fix ADMA for PAGE_SIZE >= 64KiB tracing: Fix pid filtering when triggers are attached tracing/uprobe: Fix uprobe_perf_open probes iteration KVM: PPC: Book3S HV: Prevent POWER7/8 TLB flush flushing SLB xen: detect uninitialized xenbus in xenbus_init xen: don't continue xenstore initialization in case of errors staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect() staging/fbtft: Fix backlight HID: wacom: Use "Confidence" flag to prevent reporting invalid contacts Revert "parisc: Fix backtrace to always include init funtion names" media: cec: copy sequence field for the reply ALSA: ctxfi: Fix out-of-range access binder: fix test regression due to sender_euid change usb: hub: Fix locking issues with address0_mutex usb: hub: Fix usb enumeration issue due to address0 race usb: typec: fusb302: Fix masking of comparator and bc_lvl interrupts net: nexthop: fix null pointer dereference when IPv6 is not enabled usb: dwc2: hcd_queue: Fix use of floating point literal usb: dwc2: gadget: Fix ISOC flow for elapsed frames USB: serial: option: add Fibocom FM101-GL variants USB: serial: option: add Telit LE910S1 0x9200 composition Linux 5.4.162 ALSA: hda: hdac_stream: fix potential locking issue in snd_hdac_stream_assign() ALSA: hda: hdac_ext_stream: fix potential locking issues hugetlbfs: flush TLBs correctly after huge_pmd_unshare tlb: mmu_gather: add tlb_flush_*_range APIs ice: Delete always true check of PF pointer usb: max-3421: Use driver data instead of maintaining a list of bound devices ASoC: DAPM: Cover regression by kctl change notification fix batman-adv: Don't always reallocate the fragmentation skb head batman-adv: Reserve needed_*room for fragments batman-adv: Consider fragmentation for needed_headroom perf/core: Avoid put_page() when GUP fails Revert "net: mvpp2: disable force link UP during port init procedure" drm/amdgpu: fix set scaling mode Full/Full aspect/Center not works on vga and dvi connectors drm/i915/dp: Ensure sink rate values are always valid drm/nouveau: use drm_dev_unplug() during device removal drm/udl: fix control-message timeout cfg80211: call cfg80211_stop_ap when switch from P2P_GO type parisc/sticon: fix reverse colors btrfs: fix memory ordering between normal and ordered work functions udf: Fix crash after seekdir s390/kexec: fix memory leak of ipl report buffer x86/hyperv: Fix NULL deref in set_hv_tscchange_cb() if Hyper-V setup fails mm: kmemleak: slob: respect SLAB_NOLEAKTRACE flag ipc: WARN if trying to remove ipc object which is absent hexagon: export raw I/O routines for modules tun: fix bonding active backup with arp monitoring arm64: vdso32: suppress error message for 'make mrproper' s390/kexec: fix return code handling perf/x86/intel/uncore: Fix IIO event constraints for Skylake Server perf/x86/intel/uncore: Fix filter_tid mask for CHA events on Skylake Server KVM: PPC: Book3S HV: Use GLOBAL_TOC for kvmppc_h_set_dabr/xdabr() NFC: reorder the logic in nfc_{un,}register_device drm/nouveau: hdmigv100.c: fix corrupted HDMI Vendor InfoFrame NFC: reorganize the functions in nci_request i40e: Fix display error code in dmesg i40e: Fix creation of first queue by omitting it if is not power of two i40e: Fix ping is lost after configuring ADq on VF i40e: Fix changing previously set num_queue_pairs for PFs i40e: Fix NULL ptr dereference on VSI filter sync i40e: Fix correct max_pkt_size on VF RX queue net: virtio_net_hdr_to_skb: count transport header in UFO net: dpaa2-eth: fix use-after-free in dpaa2_eth_remove net: sched: act_mirred: drop dst for the direction from egress to ingress scsi: core: sysfs: Fix hang when device state is set via sysfs platform/x86: hp_accel: Fix an error handling path in 'lis3lv02d_probe()' mips: lantiq: add support for clk_get_parent() mips: bcm63xx: add support for clk_get_parent() MIPS: generic/yamon-dt: fix uninitialized variable error iavf: Fix for the false positive ASQ/ARQ errors while issuing VF reset iavf: validate pointers iavf: prevent accidental free of filter structure iavf: Fix failure to exit out from last all-multicast mode iavf: free q_vectors before queues in iavf_disable_vf iavf: check for null in iavf_fix_features net: bnx2x: fix variable dereferenced before check perf tests: Remove bash construct from record+zstd_comp_decomp.sh perf bench futex: Fix memory leak of perf_cpu_map__new() perf bpf: Avoid memory leak from perf_env__insert_btf() RDMA/netlink: Add __maybe_unused to static inline in C file tracing/histogram: Do not copy the fixed-size char array field over the field size tracing: Save normal string variables sched/core: Mitigate race cpus_share_cache()/update_top_cache_domain() mips: BCM63XX: ensure that CPU_SUPPORTS_32BIT_KERNEL is set clk: qcom: gcc-msm8996: Drop (again) gcc_aggre1_pnoc_ahb_clk clk/ast2600: Fix soc revision for AHB clk: ingenic: Fix bugs with divided dividers sh: define __BIG_ENDIAN for math-emu sh: math-emu: drop unused functions sh: fix kconfig unmet dependency warning for FRAME_POINTER f2fs: fix up f2fs_lookup tracepoints maple: fix wrong return value of maple_bus_init(). sh: check return code of request_irq powerpc/dcr: Use cmplwi instead of 3-argument cmpli ALSA: gus: fix null pointer dereference on pointer block powerpc/5200: dts: fix memory node unit name iio: imu: st_lsm6dsx: Avoid potential array overflow in st_lsm6dsx_set_odr() scsi: target: Fix alua_tg_pt_gps_count tracking scsi: target: Fix ordered tag handling MIPS: sni: Fix the build tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc ALSA: ISA: not for M68K ARM: dts: ls1021a-tsn: use generic "jedec,spi-nor" compatible for flash ARM: dts: ls1021a: move thermal-zones node out of soc/ usb: host: ohci-tmio: check return value after calling platform_get_resource() ARM: dts: omap: fix gpmc,mux-add-data type firmware_loader: fix pre-allocated buf built-in firmware use scsi: advansys: Fix kernel pointer leak ASoC: nau8824: Add DMI quirk mechanism for active-high jack-detect clk: imx: imx6ul: Move csi_sel mux to correct base register ASoC: SOF: Intel: hda-dai: fix potential locking issue arm64: dts: freescale: fix arm,sp805 compatible string arm64: dts: qcom: msm8998: Fix CPU/L2 idle state latency and residency usb: typec: tipd: Remove WARN_ON in tps6598x_block_read usb: musb: tusb6010: check return value after calling platform_get_resource() RDMA/bnxt_re: Check if the vlan is valid before reporting arm64: dts: hisilicon: fix arm,sp805 compatible string scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq() ARM: dts: NSP: Fix mpcore, mmc node names arm64: zynqmp: Fix serial compatible string arm64: zynqmp: Do not duplicate flash partition label property Conflicts: Documentation/devicetree/bindings Documentation/devicetree/bindings/display/amlogic,meson-dw-hdmi.yaml Documentation/devicetree/bindings/display/amlogic,meson-vpu.yaml Documentation/devicetree/bindings/net/can/tcan4x5x.txt Documentation/devicetree/bindings/net/ethernet-phy.yaml Documentation/devicetree/bindings/pinctrl/marvell,armada-37xx-pinctrl.txt arch/arm64/include/asm/cputype.h drivers/base/power/wakeup.c drivers/clk/qcom/common.c drivers/iommu/io-pgtable-arm.c drivers/net/macsec.c drivers/usb/dwc3/gadget.c drivers/usb/gadget/function/f_fs.c include/trace/events/f2fs.h Change-Id: I06d6af403c13b93b319a8bc01db206c619ee96d3 Signed-off-by: Srinivasarao Pathipati <quic_spathi@quicinc.com>	2022-04-21 10:51:21 +05:30
Greg Kroah-Hartman	023cd1cf3f	This is the 5.4.189 stable release ... -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmJZYqcACgkQONu9yGCS aT51cA/+PXr+24MJMwa0PyLuQO9YScRAu/4E8PtEkumpj5dA9FuWJCcuNwO9cmNp YM6IdGGbHfW+JRsX3wLAothut1ID9hfl+Y2tpBFJacS7E5ezgzoiAF1ke8RsBxd/ s+sRwZqRfSVoVmwYGj9/SwXLzJJTdPwY/FwXUdsyxxkn8u99YmAURlNUZdv0+KWs vmAvS6mj4M4GfazS9FfBhnUVMcxbDgY0/rNlek2rMQi1ValvrYeNBATjKMI/NrkR /bRTplCezuDFDw82IqQfiqGQ71mMbpYFXxkbdXsJj3nhIJ1AimWRQhLRg/TqJOi4 0Hhx3cEk/5hs/22VBN9sIYIAbJr+z7Kr9gnhltAETPOrv0s9w9fnJARve5GlwSHV yKBm3Pfq0+abAQ2urnsmiHFvMMzFaiNuWe98TOF0BHkJbwMSFQpgFtp0yWx2bgMf Svx/rEXzd2Cx0h5X4dHAMykPqsJAek0qIb4MgOPAEpuZWLZ09xfXOeVc8lTbHG22 y/HfKE+4FMTw8tsAe/7E7xP+yjosPrAq8De2ymMo9NGDFxT8I9ro+gkqwMWwC+yi trYDVFEX3NNIEG9D6Oh+eP2nY97U898wCI1GFU18J9zOPQsw4peHSS8xPW7vLbqy zrzOxMKW+2khSwj/wFlSXRaj3pogP5/y4jaAXpMSse0Zb3Neu2U= =p4tc -----END PGP SIGNATURE----- Merge 5.4.189 into android11-5.4-lts Changes in 5.4.189 swiotlb: fix info leak with DMA_FROM_DEVICE USB: serial: pl2303: add IBM device IDs USB: serial: simple: add Nokia phone driver netdevice: add the case if dev is NULL HID: logitech-dj: add new lightspeed receiver id xfrm: fix tunnel model fragmentation behavior virtio_console: break out of buf poll on remove ethernet: sun: Free the coherent when failing in probing spi: Fix invalid sgs value net:mcf8390: Use platform_get_irq() to get the interrupt spi: Fix erroneous sgs value with min_t() af_key: add __GFP_ZERO flag for compose_sadb_supported in function pfkey_register net: dsa: microchip: add spi_device_id tables iommu/iova: Improve 32-bit free space estimate tpm: fix reference counting for struct tpm_chip block: Add a helper to validate the block size virtio-blk: Use blk_validate_block_size() to validate block size USB: usb-storage: Fix use of bitfields for hardware data in ene_ub6250.c xhci: fix runtime PM imbalance in USB2 resume xhci: make xhci_handshake timeout for xhci_reset() adjustable xhci: fix uninitialized string returned by xhci_decode_ctrl_ctx() coresight: Fix TRCCONFIGR.QE sysfs interface iio: afe: rescale: use s64 for temporary scale calculations iio: inkern: apply consumer scale on IIO_VAL_INT cases iio: inkern: apply consumer scale when no channel scale is available iio: inkern: make a best effort on offset calculation greybus: svc: fix an error handling bug in gb_svc_hello() clk: uniphier: Fix fixed-rate initialization ptrace: Check PTRACE_O_SUSPEND_SECCOMP permission on PTRACE_SEIZE KEYS: fix length validation in keyctl_pkey_params_get_2() Documentation: add link to stable release candidate tree Documentation: update stable tree link HID: intel-ish-hid: Use dma_alloc_coherent for firmware update SUNRPC: avoid race between mod_timer() and del_timer_sync() NFSD: prevent underflow in nfssvc_decode_writeargs() NFSD: prevent integer overflow on 32 bit systems f2fs: fix to unlock page correctly in error path of is_alive() f2fs: quota: fix loop condition at f2fs_quota_sync() f2fs: fix to do sanity check on .cp_pack_total_block_count pinctrl: samsung: drop pin banks references on error paths spi: mxic: Fix the transmit path can: ems_usb: ems_usb_start_xmit(): fix double dev_kfree_skb() in error path jffs2: fix use-after-free in jffs2_clear_xattr_subsystem jffs2: fix memory leak in jffs2_do_mount_fs jffs2: fix memory leak in jffs2_scan_medium mm/pages_alloc.c: don't create ZONE_MOVABLE beyond the end of a node mm: invalidate hwpoison page cache page in fault path mempolicy: mbind_range() set_policy() after vma_merge() scsi: libsas: Fix sas_ata_qc_issue() handling of NCQ NON DATA commands qed: display VF trust config qed: validate and restrict untrusted VFs vlan promisc mode riscv: Fix fill_callchain return value Revert "Input: clear BTN_RIGHT/MIDDLE on buttonpads" ALSA: cs4236: fix an incorrect NULL check on list iterator ALSA: hda/realtek: Fix audio regression on Mi Notebook Pro 2020 mm,hwpoison: unmap poisoned page before invalidation mm/kmemleak: reset tag when compare object pointer drbd: fix potential silent data corruption powerpc/kvm: Fix kvm_use_magic_page udp: call udp_encap_enable for v6 sockets when enabling encap ACPI: properties: Consistently return -ENOENT if there are no more references drivers: hamradio: 6pack: fix UAF bug caused by mod_timer() mailbox: tegra-hsp: Flush whole channel block: don't merge across cgroup boundaries if blkcg is enabled drm/edid: check basic audio support on CEA extension block video: fbdev: sm712fb: Fix crash in smtcfb_read() video: fbdev: atari: Atari 2 bpp (STe) palette bugfix ARM: dts: at91: sama5d2: Fix PMERRLOC resource size ARM: dts: exynos: fix UART3 pins configuration in Exynos5250 ARM: dts: exynos: add missing HDMI supplies on SMDK5250 ARM: dts: exynos: add missing HDMI supplies on SMDK5420 carl9170: fix missing bit-wise or operator for tx_params thermal: int340x: Increase bitmap size lib/raid6/test: fix multiple definition linking error crypto: rsa-pkcs1pad - correctly get hash from source scatterlist crypto: rsa-pkcs1pad - restore signature length check crypto: rsa-pkcs1pad - fix buffer overread in pkcs1pad_verify_complete() DEC: Limit PMAX memory probing to R3k systems media: davinci: vpif: fix unbalanced runtime PM get xtensa: fix stop_machine_cpuslocked call in patch_text xtensa: fix xtensa_wsr always writing 0 brcmfmac: firmware: Allocate space for default boardrev in nvram brcmfmac: pcie: Release firmwares in the brcmf_pcie_setup error path brcmfmac: pcie: Replace brcmf_pcie_copy_mem_todev with memcpy_toio brcmfmac: pcie: Fix crashes due to early IRQs PCI: pciehp: Clear cmd_busy bit in polling mode regulator: qcom_smd: fix for_each_child.cocci warnings crypto: authenc - Fix sleep in atomic context in decrypt_tail crypto: mxs-dcp - Fix scatterlist processing spi: tegra114: Add missing IRQ check in tegra_spi_probe selftests/x86: Add validity check and allow field splitting audit: log AUDIT_TIME_* records only from rules crypto: ccree - don't attempt 0 len DMA mappings spi: pxa2xx-pci: Balance reference count for PCI DMA device hwmon: (pmbus) Add mutex to regulator ops hwmon: (sch56xx-common) Replace WDOG_ACTIVE with WDOG_HW_RUNNING block: don't delete queue kobject before its children PM: hibernate: fix __setup handler error handling PM: suspend: fix return value of __setup handler hwrng: atmel - disable trng on failure path crypto: vmx - add missing dependencies clocksource/drivers/timer-of: Check return value of of_iomap in timer_of_base_init() ACPI: APEI: fix return value of __setup handlers crypto: ccp - ccp_dmaengine_unregister release dma channels hwmon: (pmbus) Add Vin unit off handling clocksource: acpi_pm: fix return value of __setup handler sched/debug: Remove mpol_get/put and task_lock/unlock from sched_show_numa perf/core: Fix address filter parser for multiple filters perf/x86/intel/pt: Fix address filter config for 32-bit kernel f2fs: fix missing free nid in f2fs_handle_failed_inode f2fs: fix to avoid potential deadlock media: bttv: fix WARNING regression on tunerless devices media: coda: Fix missing put_device() call in coda_get_vdoa_data media: hantro: Fix overfill bottom register field name media: aspeed: Correct value for h-total-pixels video: fbdev: smscufx: Fix null-ptr-deref in ufx_usb_probe() video: fbdev: atmel_lcdfb: fix an error code in atmel_lcdfb_probe() video: fbdev: fbcvt.c: fix printing in fb_cvt_print_name() ARM: dts: qcom: ipq4019: fix sleep clock soc: qcom: rpmpd: Check for null return of devm_kcalloc soc: qcom: aoss: remove spurious IRQF_ONESHOT flags arm64: dts: qcom: sm8150: Correct TCS configuration for apps rsc soc: ti: wkup_m3_ipc: Fix IRQ check in wkup_m3_ipc_probe ARM: dts: imx: Add missing LVDS decoder on M53Menlo media: video/hdmi: handle short reads of hdmi info frame. media: em28xx: initialize refcount before kref_get media: usb: go7007: s2250-board: fix leak in probe() uaccess: fix nios2 and microblaze get_user_8() ASoC: rt5663: check the return value of devm_kzalloc() in rt5663_parse_dp() ASoC: ti: davinci-i2s: Add check for clk_enable() ALSA: spi: Add check for clk_enable() arm64: dts: ns2: Fix spi-cpol and spi-cpha property arm64: dts: broadcom: Fix sata nodename printk: fix return value of printk.devkmsg __setup handler ASoC: mxs-saif: Handle errors for clk_enable ASoC: atmel_ssc_dai: Handle errors for clk_enable ASoC: soc-compress: prevent the potentially use of null pointer memory: emif: Add check for setup_interrupts memory: emif: check the pointer temp in get_device_details() ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction arm64: dts: rockchip: Fix SDIO regulator supply properties on rk3399-firefly media: stk1160: If start stream fails, return buffers with VB2_BUF_STATE_QUEUED ASoC: atmel: Add missing of_node_put() in at91sam9g20ek_audio_probe ASoC: wm8350: Handle error for wm8350_register_irq ASoC: fsi: Add check for clk_enable video: fbdev: omapfb: Add missing of_node_put() in dvic_probe_of ivtv: fix incorrect device_caps for ivtvfb ASoC: dmaengine: do not use a NULL prepare_slave_config() callback ASoC: mxs: Fix error handling in mxs_sgtl5000_probe ASoC: imx-es8328: Fix error return code in imx_es8328_probe() ASoC: msm8916-wcd-digital: Fix missing clk_disable_unprepare() in msm8916_wcd_digital_probe mmc: davinci_mmc: Handle error for clk_enable ASoC: msm8916-wcd-analog: Fix error handling in pm8916_wcd_analog_spmi_probe drm/bridge: Fix free wrong object in sii8620_init_rcp_input_dev drm/bridge: Add missing pm_runtime_disable() in __dw_mipi_dsi_probe ath10k: fix memory overwrite of the WoWLAN wakeup packet pattern udmabuf: validate ubuf->pagecount Bluetooth: hci_serdev: call init_rwsem() before p->open() mtd: onenand: Check for error irq mtd: rawnand: gpmi: fix controller timings setting drm/edid: Don't clear formats if using deep color drm/amd/display: Fix a NULL pointer dereference in amdgpu_dm_connector_add_common_modes() ath9k_htc: fix uninit value bugs KVM: PPC: Fix vmx/vsx mixup in mmio emulation i40e: don't reserve excessive XDP_PACKET_HEADROOM on XSK Rx to skb power: reset: gemini-poweroff: Fix IRQ check in gemini_poweroff_probe ray_cs: Check ioremap return value powerpc/perf: Don't use perf_hw_context for trace IMC PMU mt76: mt7603: check sta_rates pointer in mt7603_sta_rate_tbl_update mt76: mt7615: check sta_rates pointer in mt7615_sta_rate_tbl_update net: dsa: mv88e6xxx: Enable port policy support on 6097 PCI: aardvark: Fix reading PCI_EXP_RTSTA_PME bit on emulated bridge power: supply: ab8500: Fix memory leak in ab8500_fg_sysfs_init HID: i2c-hid: fix GET/SET_REPORT for unnumbered reports iommu/ipmmu-vmsa: Check for error num after setting mask drm/amd/display: Add affected crtcs to atomic state for dsc mst unplug IB/cma: Allow XRC INI QPs to set their local ACK timeout dax: make sure inodes are flushed before destroy cache iwlwifi: Fix -EIO error code that is never returned iwlwifi: mvm: Fix an error code in iwl_mvm_up() dm crypt: fix get_key_size compiler warning if !CONFIG_KEYS scsi: pm8001: Fix command initialization in pm80XX_send_read_log() scsi: pm8001: Fix command initialization in pm8001_chip_ssp_tm_req() scsi: pm8001: Fix payload initialization in pm80xx_set_thermal_config() scsi: pm8001: Fix abort all task initialization drm/amd/display: Remove vupdate_int_entry definition TOMOYO: fix __setup handlers return values ext2: correct max file size computing drm/tegra: Fix reference leak in tegra_dsi_ganged_probe power: supply: bq24190_charger: Fix bq24190_vbus_is_enabled() wrong false return scsi: hisi_sas: Change permission of parameter prot_mask drm/bridge: cdns-dsi: Make sure to to create proper aliases for dt bpf, arm64: Call build_prologue() first in first JIT pass bpf, arm64: Feed byte-offset into bpf line info libbpf: Skip forward declaration when counting duplicated type names powerpc/Makefile: Don't pass -mcpu=powerpc64 when building 32-bit KVM: x86: Fix emulation in writing cr8 KVM: x86/emulator: Defer not-present segment check in __load_segment_descriptor() hv_balloon: rate-limit "Unhandled message" warning i2c: xiic: Make bus names unique power: supply: wm8350-power: Handle error for wm8350_register_irq power: supply: wm8350-power: Add missing free in free_charger_irq PCI: Reduce warnings on possible RW1C corruption mips: DEC: honor CONFIG_MIPS_FP_SUPPORT=n powerpc/sysdev: fix incorrect use to determine if list is empty mfd: mc13xxx: Add check for mc13xxx_irq_request selftests/bpf: Make test_lwt_ip_encap more stable and faster powerpc: 8xx: fix a return value error in mpc8xx_pic_init vxcan: enable local echo for sent CAN frames MIPS: RB532: fix return value of __setup handler mtd: rawnand: atmel: fix refcount issue in atmel_nand_controller_init RDMA/mlx5: Fix memory leak in error flow for subscribe event routine bpf, sockmap: Fix memleak in tcp_bpf_sendmsg while sk msg is full bpf, sockmap: Fix more uncharged while msg has more_data bpf, sockmap: Fix double uncharge the mem of sk_msg USB: storage: ums-realtek: fix error code in rts51x_read_mem() Bluetooth: btmtksdio: Fix kernel oops in btmtksdio_interrupt af_netlink: Fix shift out of bounds in group mask calculation i2c: mux: demux-pinctrl: do not deactivate a master that is not active selftests/bpf/test_lirc_mode2.sh: Exit with proper code tcp: ensure PMTU updates are processed during fastopen openvswitch: always update flow key after nat tipc: fix the timer expires after interval 100ms mfd: asic3: Add missing iounmap() on error asic3_mfd_probe mxser: fix xmit_buf leak in activate when LSR == 0xff pwm: lpc18xx-sct: Initialize driver data and hardware before pwmchip_add() misc: alcor_pci: Fix an error handling path staging:iio:adc:ad7280a: Fix handing of device address bit reversing. pinctrl: renesas: r8a77470: Reduce size for narrow VIN1 channel clk: qcom: ipq8074: Use floor ops for SDCC1 clock phy: dphy: Correct lpx parameter and its derivatives(ta_{get,go,sure}) serial: 8250_mid: Balance reference count for PCI DMA device serial: 8250: Fix race condition in RTS-after-send handling iio: adc: Add check for devm_request_threaded_irq NFS: Return valid errors from nfs2/3_decode_dirent() dma-debug: fix return value of __setup handlers clk: imx7d: Remove audio_mclk_root_clk clk: qcom: clk-rcg2: Update logic to calculate D value for RCG clk: qcom: clk-rcg2: Update the frac table for pixel clock remoteproc: qcom: Fix missing of_node_put in adsp_alloc_memory_region remoteproc: qcom_wcnss: Add missing of_node_put() in wcnss_alloc_memory_region clk: actions: Terminate clk_div_table with sentinel element clk: loongson1: Terminate clk_div_table with sentinel element clk: clps711x: Terminate clk_div_table with sentinel element clk: tegra: tegra124-emc: Fix missing put_device() call in emc_ensure_emc_driver NFS: remove unneeded check in decode_devicenotify_args() staging: mt7621-dts: fix LEDs and pinctrl on GB-PC1 devicetree pinctrl: mediatek: Fix missing of_node_put() in mtk_pctrl_init pinctrl: mediatek: paris: Fix "argument" argument type for mtk_pinconf_get() pinctrl: mediatek: paris: Fix pingroup pin config state readback pinctrl: nomadik: Add missing of_node_put() in nmk_pinctrl_probe pinctrl/rockchip: Add missing of_node_put() in rockchip_pinctrl_probe tty: hvc: fix return value of __setup handler kgdboc: fix return value of __setup handler kgdbts: fix return value of __setup handler firmware: google: Properly state IOMEM dependency driver core: dd: fix return value of __setup handler jfs: fix divide error in dbNextAG netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options NFSv4.1: don't retry BIND_CONN_TO_SESSION on session error clk: qcom: gcc-msm8994: Fix gpll4 width clk: Initialize orphan req_rate xen: fix is_xen_pmu() net: phy: broadcom: Fix brcm_fet_config_init() selftests: test_vxlan_under_vrf: Fix broken test case qlcnic: dcb: default to returning -EOPNOTSUPP net/x25: Fix null-ptr-deref caused by x25_disconnect NFSv4/pNFS: Fix another issue with a list iterator pointing to the head net: dsa: bcm_sf2_cfp: fix an incorrect NULL check on list iterator lib/test: use after free in register_test_dev_kmod() LSM: general protection fault in legacy_parse_param gcc-plugins/stackleak: Exactly match strings instead of prefixes pinctrl: npcm: Fix broken references to chip->parent_device block, bfq: don't move oom_bfqq selinux: use correct type for context length loop: use sysfs_emit() in the sysfs xxx show() Fix incorrect type in assignment of ipv6 port for audit irqchip/qcom-pdc: Fix broken locking irqchip/nvic: Release nvic_base upon failure bfq: fix use-after-free in bfq_dispatch_request ACPICA: Avoid walking the ACPI Namespace if it is not there lib/raid6/test/Makefile: Use $(pound) instead of \# for Make 4.3 Revert "Revert "block, bfq: honor already-setup queue merges"" ACPI/APEI: Limit printable size of BERT table data PM: core: keep irq flags in device_pm_check_callbacks() spi: tegra20: Use of_device_get_match_data() ext4: don't BUG if someone dirty pages without asking ext4 first ntfs: add sanity check on allocation size video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow video: fbdev: w100fb: Reset global state video: fbdev: cirrusfb: check pixclock to avoid divide by zero video: fbdev: omapfb: acx565akm: replace snprintf with sysfs_emit ARM: dts: qcom: fix gic_irq_domain_translate warnings for msm8960 ARM: dts: bcm2837: Add the missing L1/L2 cache information ASoC: madera: Add dependencies on MFD video: fbdev: omapfb: panel-dsi-cm: Use sysfs_emit() instead of snprintf() video: fbdev: omapfb: panel-tpo-td043mtea1: Use sysfs_emit() instead of snprintf() video: fbdev: udlfb: replace snprintf in show functions with sysfs_emit ASoC: soc-core: skip zero num_dai component in searching dai name media: cx88-mpeg: clear interrupt status register before streaming video ARM: tegra: tamonten: Fix I2C3 pad setting ARM: mmp: Fix failure to remove sram device video: fbdev: sm712fb: Fix crash in smtcfb_write() media: Revert "media: em28xx: add missing em28xx_close_extension" media: hdpvr: initialize dev->worker at hdpvr_register_videodev mmc: host: Return an error when ->enable_sdio_irq() ops is missing ALSA: hda/realtek: Add alc256-samsung-headphone fixup powerpc/lib/sstep: Fix 'sthcx' instruction powerpc/lib/sstep: Fix build errors with newer binutils powerpc: Fix build errors with newer binutils scsi: qla2xxx: Fix stuck session in gpdb scsi: qla2xxx: Fix wrong FDMI data for 64G adapter scsi: qla2xxx: Fix warning for missing error code scsi: qla2xxx: Fix device reconnect in loop topology scsi: qla2xxx: Add devids and conditionals for 28xx scsi: qla2xxx: Check for firmware dump already collected scsi: qla2xxx: Suppress a kernel complaint in qla_create_qpair() scsi: qla2xxx: Fix disk failure to rediscover scsi: qla2xxx: Fix incorrect reporting of task management failure scsi: qla2xxx: Fix hang due to session stuck scsi: qla2xxx: Fix missed DMA unmap for NVMe ls requests scsi: qla2xxx: Fix N2N inconsistent PLOGI scsi: qla2xxx: Reduce false trigger to login scsi: qla2xxx: Use correct feature type field during RFF_ID processing KVM: Prevent module exit until all VMs are freed KVM: x86: fix sending PV IPI ASoC: SOF: Intel: Fix NULL ptr dereference when ENOMEM ubifs: rename_whiteout: Fix double free for whiteout_ui->data ubifs: Fix deadlock in concurrent rename whiteout and inode writeback ubifs: Add missing iput if do_tmpfile() failed in rename whiteout ubifs: setflags: Make dirtied_ino_d 8 bytes aligned ubifs: Fix read out-of-bounds in ubifs_wbuf_write_nolock() ubifs: rename_whiteout: correct old_dir size computing XArray: Fix xas_create_range() when multi-order entry present can: mcba_usb: mcba_usb_start_xmit(): fix double dev_kfree_skb in error path can: mcba_usb: properly check endpoint type XArray: Update the LRU list in xas_split() rtc: check if __rtc_read_time was successful gfs2: Make sure FITRIM minlen is rounded up to fs block size net: hns3: fix software vlan talbe of vlan 0 inconsistent with hardware pinctrl: pinconf-generic: Print arguments for bias-pull-* pinctrl: nuvoton: npcm7xx: Rename DS() macro to DSTR() pinctrl: nuvoton: npcm7xx: Use %zu printk format for ARRAY_SIZE() ASoC: mediatek: mt6358: add missing EXPORT_SYMBOLs ubi: Fix race condition between ctrl_cdev_ioctl and ubi_cdev_ioctl ARM: iop32x: offset IRQ numbers by 1 ACPI: CPPC: Avoid out of bounds access when parsing _CPC data powerpc/kasan: Fix early region not updated correctly ASoC: soc-compress: Change the check for codec_dai mm/mmap: return 1 from stack_guard_gap __setup() handler mm/memcontrol: return 1 from cgroup.memory __setup() handler mm/usercopy: return 1 from hardened_usercopy __setup() handler bpf: Fix comment for helper bpf_current_task_under_cgroup() dt-bindings: mtd: nand-controller: Fix the reg property description dt-bindings: mtd: nand-controller: Fix a comment in the examples dt-bindings: spi: mxic: The interrupt property is not mandatory ubi: fastmap: Return error code if memory allocation fails in add_aeb() ASoC: topology: Allow TLV control to be either read or write ARM: dts: spear1340: Update serial node properties ARM: dts: spear13xx: Update SPI dma properties um: Fix uml_mconsole stop/go openvswitch: Fixed nd target mask field in the flow dump. KVM: x86/mmu: do compare-and-exchange of gPTE via the user address KVM: x86: Forbid VMM to set SYNIC/STIMER MSRs when SynIC wasn't activated ubifs: Rectify space amount budget for mkdir/tmpfile operations rtc: wm8350: Handle error for wm8350_register_irq riscv module: remove (NOLOAD) ARM: 9187/1: JIVE: fix return value of __setup handler KVM: x86/svm: Clear reserved bits written to PerfEvtSeln MSRs drm: Add orientation quirk for GPD Win Max ath5k: fix OOB in ath5k_eeprom_read_pcal_info_5111 drm/amd/amdgpu/amdgpu_cs: fix refcount leak of a dma_fence obj ptp: replace snprintf with sysfs_emit powerpc: dts: t104xrdb: fix phy type for FMAN 4/5 bpf: Make dst_port field in struct bpf_sock 16-bit wide scsi: mvsas: Replace snprintf() with sysfs_emit() scsi: bfa: Replace snprintf() with sysfs_emit() power: supply: axp20x_battery: properly report current when discharging ipv6: make mc_forwarding atomic powerpc: Set crashkernel offset to mid of RMA region drm/amdgpu: Fix recursive locking warning PCI: aardvark: Fix support for MSI interrupts iommu/arm-smmu-v3: fix event handling soft lockup usb: ehci: add pci device support for Aspeed platforms PCI: pciehp: Add Qualcomm quirk for Command Completed erratum power: supply: axp288-charger: Set Vhold to 4.4V ipv4: Invalidate neighbour for broadcast address upon address addition dm ioctl: prevent potential spectre v1 gadget drm/amdkfd: make CRAT table missing message informational only scsi: pm8001: Fix pm8001_mpi_task_abort_resp() scsi: aha152x: Fix aha152x_setup() __setup handler return value net/smc: correct settings of RMB window update limit mips: ralink: fix a refcount leak in ill_acc_of_setup() macvtap: advertise link netns via netlink tuntap: add sanity checks about msg_controllen in sendmsg bnxt_en: Eliminate unintended link toggle during FW reset MIPS: fix fortify panic when copying asm exception handlers scsi: libfc: Fix use after free in fc_exch_abts_resp() usb: dwc3: omap: fix "unbalanced disables for smps10_out1" on omap5evm xtensa: fix DTC warning unit_address_format Bluetooth: Fix use after free in hci_send_acl netlabel: fix out-of-bounds memory accesses init/main.c: return 1 from handled __setup() functions minix: fix bug when opening a file with O_DIRECT clk: si5341: fix reported clk_rate when output divider is 2 w1: w1_therm: fixes w1_seq for ds28ea00 sensors NFSv4: Protect the state recovery thread against direct reclaim xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32 clk: Enforce that disjoints limits are invalid SUNRPC/call_alloc: async tasks mustn't block waiting for memory NFS: swap IO handling is slightly different for O_DIRECT IO NFS: swap-out must always use STABLE writes. serial: samsung_tty: do not unlock port->lock for uart_write_wakeup() virtio_console: eliminate anonymous module_init & module_exit jfs: prevent NULL deref in diFree SUNRPC: Fix socket waits for write buffer space parisc: Fix CPU affinity for Lasi, WAX and Dino chips parisc: Fix patch code locking and flushing mm: fix race between MADV_FREE reclaim and blkdev direct IO read KVM: arm64: Check arm64_get_bp_hardening_data() didn't return NULL drm/amdgpu: fix off by one in amdgpu_gfx_kiq_acquire() Drivers: hv: vmbus: Fix potential crash on module unload scsi: zorro7xx: Fix a resource leak in zorro7xx_remove_one() net/tls: fix slab-out-of-bounds bug in decrypt_internal net: ipv4: fix route with nexthop object delete warning net: stmmac: Fix unset max_speed difference between DT and non-DT platforms drm/imx: Fix memory leak in imx_pd_connector_get_modes bnxt_en: reserve space inside receive page for skb_shared_info IB/rdmavt: add lock to call to rvt_error_qp to prevent a race condition dpaa2-ptp: Fix refcount leak in dpaa2_ptp_probe ipv6: Fix stats accounting in ip6_pkt_drop net: openvswitch: don't send internal clone attribute to the userspace. rxrpc: fix a race in rxrpc_exit_net() qede: confirm skb is allocated before using spi: bcm-qspi: fix MSPI only access with bcm_qspi_exec_mem_op() bpf: Support dual-stack sockets in bpf_tcp_check_syncookie drbd: Fix five use after free bugs in get_initial_state SUNRPC: Handle ENOMEM in call_transmit_status() SUNRPC: Handle low memory situations in call_status() perf tools: Fix perf's libperf_print callback perf session: Remap buf if there is no space for event Revert "mmc: sdhci-xenon: fix annoying 1.8V regulator warning" mmc: renesas_sdhi: don't overwrite TAP settings when HS400 tuning is complete lz4: fix LZ4_decompress_safe_partial read out of bound mmmremap.c: avoid pointless invalidate_range_start/end on mremap(old_size=0) mm/mempolicy: fix mpol_new leak in shared_policy_replace x86/pm: Save the MSR validity status at context setup x86/speculation: Restore speculation related MSRs during S3 resume btrfs: fix qgroup reserve overflow the qgroup limit arm64: patch_text: Fixup last cpu should be master ata: sata_dwc_460ex: Fix crash due to OOB write perf: qcom_l2_pmu: fix an incorrect NULL check on list iterator irqchip/gic-v3: Fix GICR_CTLR.RWP polling tools build: Filter out options and warnings not supported by clang tools build: Use $(shell ) instead of `` to get embedded libperl's ccopts dmaengine: Revert "dmaengine: shdma: Fix runtime PM imbalance on error" mmc: mmci_sdmmc: Replace sg_dma_xxx macros mmc: mmci: stm32: correctly check all elements of sg list mm: don't skip swap entry even if zap_details specified arm64: module: remove (NOLOAD) from linker script mm/sparsemem: fix 'mem_section' will never be NULL gcc 12 warning drm/amdkfd: add missing void argument to function kgd2kfd_init drm/amdkfd: Fix -Wstrict-prototypes from amdgpu_amdkfd_gfx_10_0_get_functions() io_uring: fix fs->users overflow cgroup: Use open-time credentials for process migraton perm checks cgroup: Allocate cgroup_file_ctx for kernfs_open_file->priv cgroup: Use open-time cgroup namespace for process migration perm checks selftests: cgroup: Make cg_create() use 0755 for permission instead of 0644 selftests: cgroup: Test open-time credential usage for migration checks selftests: cgroup: Test open-time cgroup namespace usage for migration checks cpuidle: PSCI: Move the `has_lpi` check to the beginning of the function ACPI: processor idle: Check for architectural support for LPI Linux 5.4.189 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: If3564fc9b0854c215e077cf29dabd4d88de266eb	2022-04-19 16:29:31 +02:00
Lv Yunlong	b6a4055036	drbd: Fix five use after free bugs in get_initial_state ... [ Upstream commit aadb22ba2f656581b2f733deb3a467c48cc618f6 ] In get_initial_state, it calls notify_initial_state_done(skb,..) if cb->args[5]==1. If genlmsg_put() failed in notify_initial_state_done(), the skb will be freed by nlmsg_free(skb). Then get_initial_state will goto out and the freed skb will be used by return value skb->len, which is a uaf bug. What's worse, the same problem goes even further: skb can also be freed in the notify_*_state_change -> notify_*_state calls below. Thus 4 additional uaf bugs happened. My patch lets the problem callee functions: notify_initial_state_done and notify_*_state_change return an error code if errors happen. So that the error codes could be propagated and the uaf bugs can be avoid. v2 reports a compilation warning. This v3 fixed this warning and built successfully in my local environment with no additional warnings. v2: https://lore.kernel.org/patchwork/patch/1435218/ Fixes: a29728463b ("drbd: Backport the "events2" command") Signed-off-by: Lv Yunlong <lyl2019@mail.ustc.edu.cn> Reviewed-by: Christoph Böhmwalder <christoph.boehmwalder@linbit.com> Signed-off-by: Jens Axboe <axboe@kernel.dk> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-04-15 14:18:38 +02:00
Chaitanya Kulkarni	927649f3f3	loop: use sysfs_emit() in the sysfs xxx show() ... [ Upstream commit b27824d31f09ea7b4a6ba2c1b18bd328df3e8bed ] sprintf does not know the PAGE_SIZE maximum of the temporary buffer used for outputting sysfs content and it's possible to overrun the PAGE_SIZE buffer length. Use a generic sysfs_emit function that knows the size of the temporary buffer and ensures that no overrun is done for offset attribute in loop_attr_[offset|sizelimit|autoclear|partscan|dio]_show() callbacks. Signed-off-by: Chaitanya Kulkarni <kch@nvidia.com> Reviewed-by: Himanshu Madhani <himanshu.madhani@oracle.com> Link: https://lore.kernel.org/r/20220215213310.7264-2-kch@nvidia.com Signed-off-by: Jens Axboe <axboe@kernel.dk> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-04-15 14:18:22 +02:00
Lars Ellenberg	ded6277630	drbd: fix potential silent data corruption ... commit f4329d1f848ac35757d9cc5487669d19dfc5979c upstream. Scenario: --------- bio chain generated by blk_queue_split(). Some split bio fails and propagates its error status to the "parent" bio. But then the (last part of the) parent bio itself completes without error. We would clobber the already recorded error status with BLK_STS_OK, causing silent data corruption. Reproducer: ----------- How to trigger this in the real world within seconds: DRBD on top of degraded parity raid, small stripe_cache_size, large read_ahead setting. Drop page cache (sysctl vm.drop_caches=1, fadvise "DONTNEED", umount and mount again, "reboot"). Cause significant read ahead. Large read ahead request is split by blk_queue_split(). Parts of the read ahead that are already in the stripe cache, or find an available stripe cache to use, can be serviced. Parts of the read ahead that would need "too much work", would need to wait for a "stripe_head" to become available, are rejected immediately. For larger read ahead requests that are split in many pieces, it is very likely that some "splits" will be serviced, but then the stripe cache is exhausted/busy, and the remaining ones will be rejected. Signed-off-by: Lars Ellenberg <lars.ellenberg@linbit.com> Signed-off-by: Christoph Böhmwalder <christoph.boehmwalder@linbit.com> Cc: <stable@vger.kernel.org> # 4.13.x Link: https://lore.kernel.org/r/20220330185551.3553196-1-christoph.boehmwalder@linbit.com Signed-off-by: Jens Axboe <axboe@kernel.dk> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-04-15 14:18:01 +02:00
Xie Yongji	212765c94f	virtio-blk: Use blk_validate_block_size() to validate block size ... commit 57a13a5b8157d9a8606490aaa1b805bafe6c37e1 upstream. The block layer can't support a block size larger than page size yet. And a block size that's too small or not a power of two won't work either. If a misconfigured device presents an invalid block size in configuration space, it will result in the kernel crash something like below: [ 506.154324] BUG: kernel NULL pointer dereference, address: 0000000000000008 [ 506.160416] RIP: 0010:create_empty_buffers+0x24/0x100 [ 506.174302] Call Trace: [ 506.174651] create_page_buffers+0x4d/0x60 [ 506.175207] block_read_full_page+0x50/0x380 [ 506.175798] ? __mod_lruvec_page_state+0x60/0xa0 [ 506.176412] ? __add_to_page_cache_locked+0x1b2/0x390 [ 506.177085] ? blkdev_direct_IO+0x4a0/0x4a0 [ 506.177644] ? scan_shadow_nodes+0x30/0x30 [ 506.178206] ? lru_cache_add+0x42/0x60 [ 506.178716] do_read_cache_page+0x695/0x740 [ 506.179278] ? read_part_sector+0xe0/0xe0 [ 506.179821] read_part_sector+0x36/0xe0 [ 506.180337] adfspart_check_ICS+0x32/0x320 [ 506.180890] ? snprintf+0x45/0x70 [ 506.181350] ? read_part_sector+0xe0/0xe0 [ 506.181906] bdev_disk_changed+0x229/0x5c0 [ 506.182483] blkdev_get_whole+0x6d/0x90 [ 506.183013] blkdev_get_by_dev+0x122/0x2d0 [ 506.183562] device_add_disk+0x39e/0x3c0 [ 506.184472] virtblk_probe+0x3f8/0x79b [virtio_blk] [ 506.185461] virtio_dev_probe+0x15e/0x1d0 [virtio] So let's use a block layer helper to validate the block size. Signed-off-by: Xie Yongji <xieyongji@bytedance.com> Acked-by: Michael S. Tsirkin <mst@redhat.com> Link: https://lore.kernel.org/r/20211026144015.188-5-xieyongji@bytedance.com Signed-off-by: Jens Axboe <axboe@kernel.dk> Signed-off-by: Lee Jones <lee.jones@linaro.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-04-15 14:17:57 +02:00
Greg Kroah-Hartman	80b62a22cd	This is the 5.4.185 stable release ... -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmIx2SQACgkQONu9yGCS aT5DCRAAy0griTHuolGm0TX853F/4Xe2EHxif+f3iByyZpIecv/pCeZM9WO0Kusf P53xFOlU1hv6xvrA/jyqzATo3LWCj+GvbEZxdJuMRE2nKcmhREICSbe7+FL9ZlNf nFjQcmJNAouXqQ14U2Vhtrapt35PlC+cX6FhKiAbTVJSpCNWIxrCvOiKKS1PWqfd RlG9cOSvf+Z8deJNdBQjwLGp4h5SnubslmKSYWVGM+TA97dkEpE7H4PnfmcUgPr6 Sy/DqBrNPnaT+AvlKcaSkkPBNrwYaMVB4M7ttkreq38yA/2oqIpQCWahexCnh4Il LlWU/yUYqL5+Zw8EfjC6BzEqJxkGFQFokO0wg5+ZmB16FUdEJjYnVe+eOuI/owTC ModNEJRSX0tjfS5zfqmGBeZT/K9ZlLholZlON8IUWS0HA/R2jjAJJbJvKntDimsS V9XfsB3dkW6eIqVvNHaTri65z7j6x6kKz91C+6bHjtrbhImNHbcvCx2WEVsUGeT8 0I6iq1OK5QMHwpXU+oSUCR3rZwlpldiWdVvI4w7G3XE91xz6B8Ghi5bwsKMDMjbH Tnh+oHwfNfoM6BwCbU0rRHGXOWBI+kfZUKLuwLZz27talIohze9JqWNcfKlX/b50 qIJNJLf1+HRYphNgjb4UPUa9FTA+zvtboAK9Auw/RU1n9xBEjGI= =j2mc -----END PGP SIGNATURE----- Merge 5.4.185 into android11-5.4-lts Changes in 5.4.185 clk: qcom: gdsc: Add support to update GDSC transition delay arm64: dts: armada-3720-turris-mox: Add missing ethernet0 alias virtio-blk: Don't use MAX_DISCARD_SEGMENTS if max_discard_seg is zero net: qlogic: check the return value of dma_alloc_coherent() in qed_vf_hw_prepare() qed: return status of qed_iov_get_link drm/sun4i: mixer: Fix P010 and P210 format numbers ARM: dts: aspeed: Fix AST2600 quad spi group ethernet: Fix error handling in xemaclite_of_probe net: ethernet: ti: cpts: Handle error for clk_enable net: ethernet: lpc_eth: Handle error for clk_enable ax25: Fix NULL pointer dereference in ax25_kill_by_device net/mlx5: Fix size field in bufferx_reg struct net/mlx5: Fix a race on command flush flow NFC: port100: fix use-after-free in port100_send_complete selftests: pmtu.sh: Kill tcpdump processes launched by subshell. gpio: ts4900: Do not set DAT and OE together gianfar: ethtool: Fix refcount leak in gfar_get_ts_info net: phy: DP83822: clear MISR2 register to disable interrupts sctp: fix kernel-infoleak for SCTP sockets net: bcmgenet: Don't claim WOL when its not available selftests/bpf: Add test for bpf_timer overwriting crash net-sysfs: add check for netdevice being present to speed_show Revert "xen-netback: remove 'hotplug-status' once it has served its purpose" Revert "xen-netback: Check for hotplug-status existence before watching" ipv6: prevent a possible race condition with lifetimes tracing: Ensure trace buffer is at least 4096 bytes large selftest/vm: fix map_fixed_noreplace test failure selftests/memfd: clean up mapping in mfd_fail_write ARM: Spectre-BHB: provide empty stub for non-config fuse: fix pipe buffer lifetime for direct_io staging: gdm724x: fix use after free in gdm_lte_rx() net: macb: Fix lost RX packet wakeup race in NAPI receive mmc: meson: Fix usage of meson_mmc_post_req() riscv: Fix auipc+jalr relocation range checks arm64: dts: marvell: armada-37xx: Remap IO space to bus address 0x0 virtio: unexport virtio_finalize_features virtio: acknowledge all features before access ARM: fix Thumb2 regression with Spectre BHB ext4: add check to prevent attempting to resize an fs with sparse_super2 x86/cpufeatures: Mark two free bits in word 3 x86/cpu: Add hardware-enforced cache coherency as a CPUID feature x86/mm/pat: Don't flush cache if hardware enforces cache coherency across encryption domnains KVM: SVM: Don't flush cache if hardware enforces cache coherency across encryption domains Linux 5.4.185 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I35a63fb952ac7b80888f54bbef02dbf6d11f2e93	2022-03-16 14:40:31 +01:00
Xie Yongji	45d470e4f8	virtio-blk: Don't use MAX_DISCARD_SEGMENTS if max_discard_seg is zero ... [ Upstream commit dacc73ed0b88f1a787ec20385f42ca9dd9eddcd0 ] Currently the value of max_discard_segment will be set to MAX_DISCARD_SEGMENTS (256) with no basis in hardware if device set 0 to max_discard_seg in configuration space. It's incorrect since the device might not be able to handle such large descriptors. To fix it, let's follow max_segments restrictions in this case. Fixes: 1f23816b8e ("virtio_blk: add discard and write zeroes support") Signed-off-by: Xie Yongji <xieyongji@bytedance.com> Link: https://lore.kernel.org/r/20220304100058.116-1-xieyongji@bytedance.com Signed-off-by: Michael S. Tsirkin <mst@redhat.com> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-03-16 13:21:45 +01:00
Greg Kroah-Hartman	9ed911a069	This is the 5.4.184 stable release ... -----BEGIN PGP SIGNATURE----- iQIyBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmIrIvMACgkQONu9yGCS aT5qMw/1Fs4QrT8/iJMlTGBK3gH683wAA9/+5MD/fMJRLnr4t0fTNaHBjUR+njTu 3CW5UWkTpFvcJMPBdWuZLA1F6WScEUPQ09nnKzoErWCu2kYdR0QuNgwqdhOsxrmV zEIsvjWBxKt0uWVH7OEUEWvEtoFVP35MJkpNfDVOoBUgKRIVmUdjxUTq3NewNbfW dI4o+waIkYFAUYUGpIqknY5x8jzhP14FGaihMiVNt6bSsQfUXwQdCluHwtwjW01+ 37fmoK1cEnFkcmebnQ9xBDoibMrgO/q/PePPitrYyLxvOk7v675C750YpLaAZrMI kRPYqUzb5ZXQPnc7VsSjSKdW+0SMrB8Lu7/l+J36unnv9h7ujoY41PV2z+Ad8RzW Uy9lIKQxBAbdXpML/zs16tM8dL/aiZ65+no3XtUwytFvFkUX7Jpuvj1tpBdF/HYo QWifAGm8u7zbfQQe427cN1iA0qoeehWWzUDV6a8MnotVB5FrteHKCAd3AQwXvTKc y1i8mpn8DCmshgmbOK8Xf5jHS7eZH93/3Mze6ZHRVfa/GH3uDjhEufy3pU+pjjR2 K+u6998jld6yqtH05cJoUh90n920GDrxM5CfP6qiBIpxELdATI28jOYVio/5ip9R RXslzLq4okvIAf3kpg621XIv0w4CQSxrlu1iMKPmiA1Iur4z6g== =567U -----END PGP SIGNATURE----- Merge 5.4.184 into android11-5.4-lts Changes in 5.4.184 x86/speculation: Merge one test in spectre_v2_user_select_mitigation() x86,bugs: Unconditionally allow spectre_v2=retpoline,amd x86/speculation: Rename RETPOLINE_AMD to RETPOLINE_LFENCE x86/speculation: Add eIBRS + Retpoline options Documentation/hw-vuln: Update spectre doc x86/speculation: Include unprivileged eBPF status in Spectre v2 mitigation reporting x86/speculation: Use generic retpoline by default on AMD x86/speculation: Update link to AMD speculation whitepaper x86/speculation: Warn about Spectre v2 LFENCE mitigation x86/speculation: Warn about eIBRS + LFENCE + Unprivileged eBPF + SMT arm/arm64: Provide a wrapper for SMCCC 1.1 calls arm/arm64: smccc/psci: add arm_smccc_1_1_get_conduit() ARM: report Spectre v2 status through sysfs ARM: early traps initialisation ARM: use LOADADDR() to get load address of sections ARM: Spectre-BHB workaround ARM: include unprivileged BPF status in Spectre V2 reporting ARM: fix build error when BPF_SYSCALL is disabled ARM: fix co-processor register typo ARM: Do not use NOCROSSREFS directive with ld.lld ARM: fix build warning in proc-v7-bugs.c xen/xenbus: don't let xenbus_grant_ring() remove grants in error case xen/grant-table: add gnttab_try_end_foreign_access() xen/blkfront: don't use gnttab_query_foreign_access() for mapped status xen/netfront: don't use gnttab_query_foreign_access() for mapped status xen/scsifront: don't use gnttab_query_foreign_access() for mapped status xen/gntalloc: don't use gnttab_query_foreign_access() xen: remove gnttab_query_foreign_access() xen/9p: use alloc/free_pages_exact() xen/pvcalls: use alloc/free_pages_exact() xen/gnttab: fix gnttab_end_foreign_access() without page specified xen/netfront: react properly to failing gnttab_end_foreign_access_ref() Revert "ACPI: PM: s2idle: Cancel wakeup before dispatching EC GPE" Linux 5.4.184 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I1451c7f2c1d777ad1d1823189ba8dbc3110db0b1	2022-03-12 13:49:41 +01:00
Juergen Gross	a83400456f	xen/blkfront: don't use gnttab_query_foreign_access() for mapped status ... Commit abf1fd5919d6238ee3bc5eb4a9b6c3947caa6638 upstream. It isn't enough to check whether a grant is still being in use by calling gnttab_query_foreign_access(), as a mapping could be realized by the other side just after having called that function. In case the call was done in preparation of revoking a grant it is better to do so via gnttab_end_foreign_access_ref() and check the success of that operation instead. For the ring allocation use alloc_pages_exact() in order to avoid high order pages in case of a multi-page ring. If a grant wasn't unmapped by the backend without persistent grants being used, set the device state to "error". This is CVE-2022-23036 / part of XSA-396. Reported-by: Demi Marie Obenour <demi@invisiblethingslab.com> Signed-off-by: Juergen Gross <jgross@suse.com> Reviewed-by: Roger Pau Monné <roger.pau@citrix.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-03-11 11:22:39 +01:00
Srinivasarao Pathipati	16e939c6e4	Merge android11-5.4.161+ (b9d179c) into msm-5.4 ... * refs/heads/tmp-b9d179c: UPSTREAM: driver core: Fix possible memory leak in device_link_add() UPSTREAM: blk-mq: fix kernel panic during iterating over flush request UPSTREAM: net: xfrm: fix memory leak in xfrm_user_rcv_msg UPSTREAM: binder: fix the missing BR_FROZEN_REPLY in binder_return_strings ANDROID: incremental-fs: fix mount_fs issue UPSTREAM: vfs: fs_context: fix up param length parsing in legacy_parse_param ANDROID: GKI: disable CONFIG_FORTIFY_SOURCE Linux 5.4.161 erofs: fix unsafe pagevec reuse of hooked pclusters erofs: remove the occupied parameter from z_erofs_pagevec_enqueue() PCI: Add MSI masking quirk for Nvidia ION AHCI PCI/MSI: Deal with devices lying about their MSI mask capability PCI/MSI: Destroy sysfs before freeing entries parisc/entry: fix trace test in syscall exit path fortify: Explicitly disable Clang support scsi: ufs: Fix tm request when non-fatal error happens ext4: fix lazy initialization next schedule time computation in more granular unit MIPS: Fix assembly error from MIPSr2 code used within MIPS_ISA_ARCH_LEVEL scsi: ufs: Fix interrupt error message for shared interrupts soc/tegra: pmc: Fix imbalanced clock disabling in error code path Revert "net: sched: update default qdisc visibility after Tx queue cnt changes" Revert "serial: core: Fix initializing and restoring termios speed" Linux 5.4.160 selftests/bpf: Fix also no-alu32 strobemeta selftest ath10k: fix invalid dma_addr_t token assignment SUNRPC: Partial revert of commit 6f9f17287e78 PCI: Add PCI_EXP_DEVCTL_PAYLOAD_* macros powerpc/powernv/prd: Unregister OPAL_MSG_PRD2 notifier during module unload s390/cio: make ccw_device_dma_* more robust s390/tape: fix timer initialization in tape_std_assign() s390/cio: check the subchannel validity for dev_busid video: backlight: Drop maximum brightness override for brightness zero mm, oom: do not trigger out_of_memory from the #PF mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks powerpc/bpf: Emit stf barrier instruction sequences for BPF_NOSPEC powerpc/security: Add a helper to query stf_barrier type powerpc/bpf: Fix BPF_SUB when imm == 0x80000000 powerpc/bpf: Validate branch ranges powerpc/lib: Add helper to check if offset is within conditional branch range ovl: fix deadlock in splice write 9p/net: fix missing error check in p9_check_errors net, neigh: Enable state migration between NUD_PERMANENT and NTF_USE f2fs: should use GFP_NOFS for directory inodes irqchip/sifive-plic: Fixup EOI failed when masked parisc: Fix set_fixmap() on PA1.x CPUs parisc: Fix backtrace to always include init funtion names ARM: 9156/1: drop cc-option fallbacks for architecture selection ARM: 9155/1: fix early early_iounmap() selftests/net: udpgso_bench_rx: fix port argument cxgb4: fix eeprom len when diagnostics not implemented net/smc: fix sk_refcnt underflow on linkdown and fallback vsock: prevent unnecessary refcnt inc for nonblocking connect net: hns3: allow configure ETS bandwidth of all TCs net/sched: sch_taprio: fix undefined behavior in ktime_mono_to_any bpf: sockmap, strparser, and tls are reusing qdisc_skb_cb and colliding arm64: pgtable: make __pte_to_phys/__phys_to_pte_val inline functions nfc: pn533: Fix double free when pn533_fill_fragment_skbs() fails llc: fix out-of-bound array index in llc_sk_dev_hash() perf bpf: Add missing free to bpf_event__print_bpf_prog_info() zram: off by one in read_block_state() mm/zsmalloc.c: close race window between zs_pool_dec_isolated() and zs_unregister_migration() bonding: Fix a use-after-free problem when bond_sysfs_slave_add() failed ACPI: PMIC: Fix intel_pmic_regs_handler() read accesses net: vlan: fix a UAF in vlan_dev_real_dev() net: davinci_emac: Fix interrupt pacing disable xen-pciback: Fix return in pm_ctrl_init() i2c: xlr: Fix a resource leak in the error handling path of 'xlr_i2c_probe()' NFSv4: Fix a regression in nfs_set_open_stateid_locked() scsi: qla2xxx: Turn off target reset during issue_lip scsi: qla2xxx: Fix gnl list corruption ar7: fix kernel builds for compiler test watchdog: f71808e_wdt: fix inaccurate report in WDIOC_GETTIMEOUT m68k: set a default value for MEMORY_RESERVE signal/sh: Use force_sig(SIGKILL) instead of do_group_exit(SIGKILL) dmaengine: dmaengine_desc_callback_valid(): Check for `callback_result` netfilter: nfnetlink_queue: fix OOB when mac header was cleared soc: fsl: dpaa2-console: free buffer before returning from dpaa2_console_read auxdisplay: ht16k33: Fix frame buffer device blanking auxdisplay: ht16k33: Connect backlight to fbdev auxdisplay: img-ascii-lcd: Fix lock-up when displaying empty string dmaengine: at_xdmac: fix AT_XDMAC_CC_PERID() macro mtd: core: don't remove debugfs directory if device is in use mtd: spi-nor: hisi-sfc: Remove excessive clk_disable_unprepare() fs: orangefs: fix error return code of orangefs_revalidate_lookup() NFS: Fix deadlocks in nfs_scan_commit_list() opp: Fix return in _opp_add_static_v2() PCI: aardvark: Fix preserving PCI_EXP_RTCTL_CRSSVE flag on emulated bridge PCI: aardvark: Don't spam about PIO Response Status drm/plane-helper: fix uninitialized variable reference pnfs/flexfiles: Fix misplaced barrier in nfs4_ff_layout_prepare_ds rpmsg: Fix rpmsg_create_ept return when RPMSG config is not defined apparmor: fix error check power: supply: bq27xxx: Fix kernel crash on IRQ handler register error mips: cm: Convert to bitfield API to fix out-of-bounds access powerpc/44x/fsp2: add missing of_node_put HID: u2fzero: properly handle timeouts in usb_submit_urb HID: u2fzero: clarify error check and length calculations serial: xilinx_uartps: Fix race condition causing stuck TX phy: qcom-qusb2: Fix a memory leak on probe ASoC: cs42l42: Defer probe if request_threaded_irq() returns EPROBE_DEFER ASoC: cs42l42: Correct some register default values ARM: dts: stm32: fix SAI sub nodes register range staging: ks7010: select CRYPTO_HASH/CRYPTO_MICHAEL_MIC RDMA/mlx4: Return missed an error if device doesn't support steering scsi: csiostor: Uninitialized data in csio_ln_vnp_read_cbfn() power: supply: rt5033_battery: Change voltage values to µV usb: gadget: hid: fix error code in do_config() serial: 8250_dw: Drop wrong use of ACPI_PTR() video: fbdev: chipsfb: use memset_io() instead of memset() clk: at91: check pmc node status before registering syscore ops memory: fsl_ifc: fix leak of irq and nand_irq in fsl_ifc_ctrl_probe soc/tegra: Fix an error handling path in tegra_powergate_power_up() arm: dts: omap3-gta04a4: accelerometer irq fix ALSA: hda: Reduce udelay() at SKL+ position reporting JFS: fix memleak in jfs_mount MIPS: loongson64: make CPU_LOONGSON64 depends on MIPS_FP_SUPPORT scsi: dc395: Fix error case unwinding ARM: dts: at91: tse850: the emac<->phy interface is rmii arm64: dts: meson-g12a: Fix the pwm regulator supply properties RDMA/bnxt_re: Fix query SRQ failure ARM: dts: qcom: msm8974: Add xo_board reference clock to DSI0 PHY arm64: dts: rockchip: Fix GPU register width for RK3328 ARM: s3c: irq-s3c24xx: Fix return value check for s3c24xx_init_intc() clk: mvebu: ap-cpu-clk: Fix a memory leak in error handling paths RDMA/rxe: Fix wrong port_cap_flags ibmvnic: Process crqs after enabling interrupts ibmvnic: don't stop queue in xmit udp6: allow SO_MARK ctrl msg to affect routing selftests/bpf: Fix fclose/pclose mismatch in test_progs crypto: pcrypt - Delay write to padata->info net: phylink: avoid mvneta warning when setting pause parameters net: amd-xgbe: Toggle PLL settings during rate change drm/amdgpu/gmc6: fix DMA mask from 44 to 40 bits wcn36xx: add proper DMA memory barriers in rx path libertas: Fix possible memory leak in probe and disconnect libertas_tf: Fix possible memory leak in probe and disconnect KVM: s390: Fix handle_sske page fault handling samples/kretprobes: Fix return value if register_kretprobe() failed tcp: don't free a FIN sk_buff in tcp_remove_empty_skb() irq: mips: avoid nested irq_enter() s390/gmap: don't unconditionally call pte_unmap_unlock() in __gmap_zap() libbpf: Fix BTF data layout checks and allow empty BTF smackfs: use netlbl_cfg_cipsov4_del() for deleting cipso_v4_doi drm/msm: Fix potential NULL dereference in DPU SSPP clocksource/drivers/timer-ti-dm: Select TIMER_OF PM: hibernate: fix sparse warnings nvme-rdma: fix error code in nvme_rdma_setup_ctrl phy: micrel: ksz8041nl: do not use power down mode mwifiex: Send DELBA requests according to spec rsi: stop thread firstly in rsi_91x_init() error handling mt76: mt76x02: fix endianness warnings in mt76x02_mac.c platform/x86: thinkpad_acpi: Fix bitwise vs. logical warning block: ataflop: fix breakage introduced at blk-mq refactoring mmc: mxs-mmc: disable regulator on error and in the remove function net: stream: don't purge sk_error_queue in sk_stream_kill_queues() drm/msm: uninitialized variable in msm_gem_import() ath10k: fix max antenna gain unit hwmon: (pmbus/lm25066) Let compiler determine outer dimension of lm25066_coeff hwmon: Fix possible memleak in __hwmon_device_register() net, neigh: Fix NTF_EXT_LEARNED in combination with NTF_USE memstick: jmb38x_ms: use appropriate free function in jmb38x_ms_alloc_host() memstick: avoid out-of-range warning mmc: sdhci-omap: Fix NULL pointer exception if regulator is not configured b43: fix a lower bounds test b43legacy: fix a lower bounds test hwrng: mtk - Force runtime pm ops for sleep ops crypto: qat - disregard spurious PFVF interrupts crypto: qat - detect PFVF collision after ACK media: dvb-frontends: mn88443x: Handle errors of clk_prepare_enable() netfilter: nft_dynset: relax superfluous check on set updates EDAC/amd64: Handle three rank interleaving mode ath9k: Fix potential interrupt storm on queue reset media: em28xx: Don't use ops->suspend if it is NULL cpuidle: Fix kobject memory leaks in error paths crypto: ecc - fix CRYPTO_DEFAULT_RNG dependency kprobes: Do not use local variable when creating debugfs file media: cx23885: Fix snd_card_free call on null card pointer media: tm6000: Avoid card name truncation media: si470x: Avoid card name truncation media: radio-wl1273: Avoid card name truncation media: mtk-vpu: Fix a resource leak in the error handling path of 'mtk_vpu_probe()' media: TDA1997x: handle short reads of hdmi info frame. media: dvb-usb: fix ununit-value in az6027_rc_query media: cxd2880-spi: Fix a null pointer dereference on error handling path media: em28xx: add missing em28xx_close_extension drm/amdgpu: fix warning for overflow check ath10k: Fix missing frame timestamp for beacon/probe-resp net: dsa: rtl8366rb: Fix off-by-one bug rxrpc: Fix _usecs_to_jiffies() by using usecs_to_jiffies() crypto: caam - disable pkc for non-E SoCs Bluetooth: btmtkuart: fix a memleak in mtk_hci_wmt_sync wilc1000: fix possible memory leak in cfg_scan_result() cgroup: Make rebind_subsystems() disable v2 controllers all at once net: net_namespace: Fix undefined member in key_remove_domain() virtio-gpu: fix possible memory allocation failure drm/v3d: fix wait for TMU write combiner flush rcu: Fix existing exp request check in sync_sched_exp_online_cleanup() Bluetooth: fix init and cleanup of sco_conn.timeout_work selftests/bpf: Fix strobemeta selftest regression netfilter: conntrack: set on IPS_ASSURED if flows enters internal stream state parisc/kgdb: add kgdb_roundup() to make kgdb work with idle polling parisc/unwind: fix unwinder when CONFIG_64BIT is enabled task_stack: Fix end_of_stack() for architectures with upwards-growing stack parisc: fix warning in flush_tlb_all x86/hyperv: Protect set_hv_tscchange_cb() against getting preempted spi: bcm-qspi: Fix missing clk_disable_unprepare() on error in bcm_qspi_probe() btrfs: do not take the uuid_mutex in btrfs_rm_device net: annotate data-race in neigh_output() vrf: run conntrack only in context of lower/physdev for locally generated packets ARM: 9136/1: ARMv7-M uses BE-8, not BE-32 gre/sit: Don't generate link-local addr if addr_gen_mode is IN6_ADDR_GEN_MODE_NONE ARM: clang: Do not rely on lr register for stacktrace smackfs: use __GFP_NOFAIL for smk_cipso_doi() iwlwifi: mvm: disable RX-diversity in powersave selftests: kvm: fix mismatched fclose() after popen() PM: hibernate: Get block device exclusively in swsusp_check() nvme: drop scan_lock and always kick requeue list when removing namespaces nvmet-tcp: fix use-after-free when a port is removed nvmet: fix use-after-free when a port is removed block: remove inaccurate requeue check mwl8k: Fix use-after-free in mwl8k_fw_state_machine() tracing/cfi: Fix cmp_entries_* functions signature mismatch workqueue: make sysfs of unbound kworker cpumask more clever lib/xz: Validate the value before assigning it to an enum variable lib/xz: Avoid overlapping memcpy() with invalid input with in-place decompression memstick: r592: Fix a UAF bug when removing the driver leaking_addresses: Always print a trailing newline ACPI: battery: Accept charges over the design capacity as full iov_iter: Fix iov_iter_get_pages{,_alloc} page fault return value ath: dfs_pattern_detector: Fix possible null-pointer dereference in channel_detector_create() tracefs: Have tracefs directories not set OTH permission bits by default net-sysfs: try not to restart the syscall if it will fail eventually media: usb: dvd-usb: fix uninit-value bug in dibusb_read_eeprom_byte() media: ipu3-imgu: VIDIOC_QUERYCAP: Fix bus_info media: ipu3-imgu: imgu_fmt: Handle properly try ACPICA: Avoid evaluating methods too early during system resume ipmi: Disable some operations during a panic media: rcar-csi2: Add checking to rcsi2_start_receiver() brcmfmac: Add DMI nvram filename quirk for Cyberbook T116 tablet ia64: don't do IA64_CMPXCHG_DEBUG without CONFIG_PRINTK media: mceusb: return without resubmitting URB in case of -EPROTO error. media: imx: set a media_device bus_info string media: s5p-mfc: Add checking to s5p_mfc_probe(). media: s5p-mfc: fix possible null-pointer dereference in s5p_mfc_probe() media: uvcvideo: Set unique vdev name based in type media: uvcvideo: Return -EIO for control errors media: uvcvideo: Set capability in s_param media: stm32: Potential NULL pointer dereference in dcmi_irq_thread() media: netup_unidvb: handle interrupt properly according to the firmware media: mt9p031: Fix corrupted frame after restarting stream ath10k: high latency fixes for beacon buffer mwifiex: Properly initialize private structure on interface type changes mwifiex: Run SET_BSS_MODE when changing from P2P to STATION vif-type x86: Increase exception stack sizes smackfs: Fix use-after-free in netlbl_catmap_walk() net: sched: update default qdisc visibility after Tx queue cnt changes locking/lockdep: Avoid RCU-induced noinstr fail MIPS: lantiq: dma: reset correct number of channel MIPS: lantiq: dma: add small delay after reset platform/x86: wmi: do not fail if disabling fails drm/panel-orientation-quirks: add Valve Steam Deck Bluetooth: fix use-after-free error in lock_sock_nested() Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg() drm: panel-orientation-quirks: Add quirk for the Samsung Galaxy Book 10.6 drm: panel-orientation-quirks: Add quirk for KD Kurio Smart C15200 2-in-1 drm: panel-orientation-quirks: Update the Lenovo Ideapad D330 quirk (v2) dma-buf: WARN on dmabuf release with pending attachments USB: chipidea: fix interrupt deadlock USB: iowarrior: fix control-message timeouts USB: serial: keyspan: fix memleak on probe errors iio: dac: ad5446: Fix ad5622_write() return value pinctrl: core: fix possible memory leak in pinctrl_enable() quota: correct error number in free_dqentry() quota: check block number when reading the block in quota file PCI: aardvark: Read all 16-bits from PCIE_MSI_PAYLOAD_REG PCI: aardvark: Fix return value of MSI domain .alloc() method PCI: aardvark: Fix reporting Data Link Layer Link Active PCI: aardvark: Do not unmask unused interrupts PCI: aardvark: Fix checking for link up via LTSSM state PCI: aardvark: Do not clear status bits of masked interrupts PCI: pci-bridge-emul: Fix emulation of W1C bits xen/balloon: add late_initcall_sync() for initial ballooning done ALSA: mixer: fix deadlock in snd_mixer_oss_set_volume ALSA: mixer: oss: Fix racy access to slots serial: core: Fix initializing and restoring termios speed powerpc/85xx: Fix oops when mpc85xx_smp_guts_ids node cannot be found can: j1939: j1939_can_recv(): ignore messages with invalid source address can: j1939: j1939_tp_cmd_recv(): ignore abort message in the BAM transport KVM: nVMX: Query current VMCS when determining if MSR bitmaps are in use power: supply: max17042_battery: use VFSOC for capacity when no rsns power: supply: max17042_battery: Prevent int underflow in set_soc_threshold signal/mips: Update (_save|_restore)_fp_context to fail with -EFAULT signal: Remove the bogus sigkill_pending in ptrace_stop RDMA/qedr: Fix NULL deref for query_qp on the GSI QP rsi: Fix module dev_oper_mode parameter description rsi: fix rate mask set leading to P2P failure rsi: fix key enabled check causing unwanted encryption for vap_id > 0 rsi: fix occasional initialisation failure with BT coex wcn36xx: handle connection loss indication libata: fix checking of DMA state mwifiex: Read a PCI register after writing the TX ring write pointer wcn36xx: Fix HT40 capability for 2Ghz band evm: mark evm_fixmode as __ro_after_init rtl8187: fix control-message timeouts PCI: Mark Atheros QCA6174 to avoid bus reset ath10k: fix division by zero in send path ath10k: fix control-message timeout ath6kl: fix control-message timeout ath6kl: fix division by zero in send path mwifiex: fix division by zero in fw download path EDAC/sb_edac: Fix top-of-high-memory value for Broadwell/Haswell regulator: dt-bindings: samsung,s5m8767: correct s5m8767,pmic-buck-default-dvs-idx property regulator: s5m8767: do not use reset value as DVS voltage if GPIO DVS is disabled hwmon: (pmbus/lm25066) Add offset coefficients ia64: kprobes: Fix to pass correct trampoline address to the handler btrfs: call btrfs_check_rw_degradable only if there is a missing device btrfs: fix lost error handling when replaying directory deletes btrfs: clear MISSING device status bit in btrfs_close_one_device net/smc: Correct spelling mistake to TCPF_SYN_RECV nfp: bpf: relax prog rejection for mtu check through max_pkt_offset vmxnet3: do not stop tx queues after netif_device_detach() r8169: Add device 10ec:8162 to driver r8169 nvmet-tcp: fix header digest verification drm: panel-orientation-quirks: Add quirk for GPD Win3 watchdog: Fix OMAP watchdog early handling net: multicast: calculate csum of looped-back and forwarded packets spi: spl022: fix Microwire full duplex mode nvmet-tcp: fix a memory leak when releasing a queue xen/netfront: stop tx queues during live migration bpf: Prevent increasing bpf_jit_limit above max bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT drm: panel-orientation-quirks: Add quirk for Aya Neo 2021 mmc: winbond: don't build on M68K reset: socfpga: add empty driver allowing consumers to probe ARM: dts: sun7i: A20-olinuxino-lime2: Fix ethernet phy-mode hyperv/vmbus: include linux/bitops.h sfc: Don't use netif_info before net_device setup cavium: Fix return values of the probe function scsi: qla2xxx: Fix unmap of already freed sgl scsi: qla2xxx: Return -ENOMEM if kzalloc() fails cavium: Return negative value when pci_alloc_irq_vectors() fails x86/irq: Ensure PI wakeup handler is unregistered before module unload x86/cpu: Fix migration safety with X86_BUG_NULL_SEL x86/sme: Use #define USE_EARLY_PGTABLE_L5 in mem_encrypt_identity.c fuse: fix page stealing ALSA: timer: Unconditionally unlink slave instances, too ALSA: timer: Fix use-after-free problem ALSA: synth: missing check for possible NULL after the call to kstrdup ALSA: usb-audio: Add registration quirk for JBL Quantum 400 ALSA: line6: fix control and interrupt message timeouts ALSA: 6fire: fix control and bulk message timeouts ALSA: ua101: fix division by zero at probe ALSA: hda/realtek: Add quirk for HP EliteBook 840 G7 mute LED ALSA: hda/realtek: Add quirk for ASUS UX550VE ALSA: hda/realtek: Add a quirk for Acer Spin SP513-54N ALSA: hda/realtek: Add quirk for Clevo PC70HS media: v4l2-ioctl: Fix check_ext_ctrls media: ir-kbd-i2c: improve responsiveness of hauppauge zilog receivers media: ite-cir: IR receiver stop working after receive overflow crypto: s5p-sss - Add error handling in s5p_aes_probe() firmware/psci: fix application of sizeof to pointer tpm: Check for integer overflow in tpm2_map_response_body() parisc: Fix ptrace check on syscall return mmc: dw_mmc: Dont wait for DRTO on Write RSP error scsi: qla2xxx: Fix use after free in eh_abort path scsi: qla2xxx: Fix kernel crash when accessing port_speed sysfs file ocfs2: fix data corruption on truncate libata: fix read log timeout value Input: i8042 - Add quirk for Fujitsu Lifebook T725 Input: elantench - fix misreporting trackpoint coordinates Input: iforce - fix control-message timeout binder: use cred instead of task for getsecid binder: use cred instead of task for selinux checks binder: use euid from cred instead of using task usb: xhci: Enable runtime-pm by default on AMD Yellow Carp platform xhci: Fix USB 3.1 enumeration issues by increasing roothub power-on-good delay Linux 5.4.159 rsi: fix control-message timeout media: staging/intel-ipu3: css: Fix wrong size comparison imgu_css_fw_init staging: rtl8192u: fix control-message timeouts staging: r8712u: fix control-message timeout comedi: vmk80xx: fix bulk and interrupt message timeouts comedi: vmk80xx: fix bulk-buffer overflow comedi: vmk80xx: fix transfer-buffer overflows comedi: ni_usb6501: fix NULL-deref in command paths comedi: dt9812: fix DMA buffers on stack isofs: Fix out of bound access for corrupted isofs image printk/console: Allow to disable console output by using console="" or console=null binder: don't detect sender/target during buffer cleanup usb-storage: Add compatibility quirk flags for iODD 2531/2541 usb: musb: Balance list entry in musb_gadget_queue usb: gadget: Mark USB_FSL_QE broken on 64-bit usb: ehci: handshake CMD_RUN instead of STS_HALT Revert "x86/kvm: fix vcpu-id indexed array sizes" Linux 5.4.158 ARM: 9120/1: Revert "amba: make use of -1 IRQs warn" Revert "drm/ttm: fix memleak in ttm_transfered_destroy" sfc: Fix reading non-legacy supported link modes Revert "usb: core: hcd: Add support for deferring roothub registration" Revert "xhci: Set HCD flag to defer primary roothub registration" media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() net: ethernet: microchip: lan743x: Fix skb allocation failure vrf: Revert "Reset skb conntrack connection..." scsi: core: Put LLD module refcnt after SCSI device is released Linux 5.4.157 perf script: Check session->header.env.arch before using it KVM: s390: preserve deliverable_mask in __airqs_kick_single_vcpu KVM: s390: clear kicked_mask before sleeping again cfg80211: correct bridge/4addr mode check net: use netif_is_bridge_port() to check for IFF_BRIDGE_PORT sctp: add vtag check in sctp_sf_ootb sctp: add vtag check in sctp_sf_do_8_5_1_E_sa sctp: add vtag check in sctp_sf_violation sctp: fix the processing for COOKIE_ECHO chunk sctp: fix the processing for INIT_ACK chunk sctp: use init_tag from inithdr for ABORT chunk phy: phy_start_aneg: Add an unlocked version phy: phy_ethtool_ksettings_get: Lock the phy for consistency net/tls: Fix flipped sign in async_wait.err assignment net: nxp: lpc_eth.c: avoid hang when bringing interface down net: ethernet: microchip: lan743x: Fix dma allocation failure by using dma_set_mask_and_coherent net: ethernet: microchip: lan743x: Fix driver crash when lan743x_pm_resume fails nios2: Make NIOS2_DTB_SOURCE_BOOL depend on !COMPILE_TEST RDMA/sa_query: Use strscpy_pad instead of memcpy to copy a string net: Prevent infinite while loop in skb_tx_hash() net: batman-adv: fix error handling regmap: Fix possible double-free in regcache_rbtree_exit() arm64: dts: allwinner: h5: NanoPI Neo 2: Fix ethernet node RDMA/mlx5: Set user priority for DCT nvme-tcp: fix data digest pointer calculation nvmet-tcp: fix data digest pointer calculation IB/hfi1: Fix abba locking issue with sc_disable() IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields tcp_bpf: Fix one concurrency problem in the tcp_bpf_send_verdict function drm/ttm: fix memleak in ttm_transfered_destroy net: lan78xx: fix division by zero in send path cfg80211: scan: fix RCU in cfg80211_add_nontrans_list() mmc: sdhci-esdhc-imx: clear the buffer_read_ready to reset standard tuning circuit mmc: sdhci: Map more voltage level to SDHCI_POWER_330 mmc: dw_mmc: exynos: fix the finding clock sample value mmc: cqhci: clear HALT state after CQE enable mmc: vub300: fix control-message timeouts net/tls: Fix flipped sign in tls_err_abort() calls Revert "net: mdiobus: Fix memory leak in __mdiobus_register" nfc: port100: fix using -ERRNO as command type mask ata: sata_mv: Fix the error handling of mv_chip_id() Revert "pinctrl: bcm: ns: support updated DT binding as syscon subnode" usbnet: fix error return code in usbnet_probe() usbnet: sanity check for maxpacket ipv4: use siphash instead of Jenkins in fnhe_hashfun() ipv6: use siphash in rt6_exception_hash() powerpc/bpf: Fix BPF_MOD when imm == 1 ARM: 9141/1: only warn about XIP address when not compile testing ARM: 9139/1: kprobes: fix arch_init_kprobes() prototype ARM: 9134/1: remove duplicate memcpy() definition ARM: 9133/1: mm: proc-macros: ensure *_tlb_fns are 4B aligned Linux 5.4.156 pinctrl: stm32: use valid pin identifier in stm32_pinctrl_resume() ARM: 9122/1: select HAVE_FUTEX_CMPXCHG tracing: Have all levels of checks prevent recursion net: mdiobus: Fix memory leak in __mdiobus_register scsi: core: Fix shost->cmd_per_lun calculation in scsi_add_host_with_dma() Input: snvs_pwrkey - add clk handling ALSA: hda: avoid write to STATESTS if controller is in reset platform/x86: intel_scu_ipc: Update timeout value in comment isdn: mISDN: Fix sleeping function called from invalid context ARM: dts: spear3xx: Fix gmac node net: stmmac: add support for dwmac 3.40a btrfs: deal with errors when checking if a dir entry exists during log replay gcc-plugins/structleak: add makefile var for disabling structleak selftests: netfilter: remove stray bash debug line netfilter: Kconfig: use 'default y' instead of 'm' for bool config option isdn: cpai: check ctr->cnr to avoid array index out of bound nfc: nci: fix the UAF of rf_conn_info object mm, slub: fix potential memoryleak in kmem_cache_open() mm, slub: fix mismatch between reconstructed freelist depth and cnt powerpc/idle: Don't corrupt back chain when going idle KVM: PPC: Book3S HV: Make idle_kvm_start_guest() return 0 if it went to guest KVM: PPC: Book3S HV: Fix stack handling in idle_kvm_start_guest() powerpc64/idle: Fix SP offsets when saving GPRs audit: fix possible null-pointer dereference in audit_filter_rules ASoC: DAPM: Fix missing kctl change notifications ALSA: hda/realtek: Add quirk for Clevo PC50HS ALSA: usb-audio: Provide quirk for Sennheiser GSP670 Headset vfs: check fd has read access in kernel_read_file_from_fd() elfcore: correct reference to CONFIG_UML ocfs2: mount fails with buffer overflow in strlen ocfs2: fix data corruption after conversion from inline format ceph: fix handling of "meta" errors can: j1939: j1939_xtp_rx_rts_session_new(): abort TP less than 9 bytes can: j1939: j1939_xtp_rx_dat_one(): cancel session if receive TP.DT with error length can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv can: j1939: j1939_tp_rxtimer(): fix errant alert in j1939_tp_rxtimer can: peak_pci: peak_pci_remove(): fix UAF can: peak_usb: pcan_usb_fd_decode_status(): fix back to ERROR_ACTIVE state notification can: rcar_can: fix suspend/resume net: enetc: fix ethtool counter name for PM0_TERR net: stmmac: Fix E2E delay mechanism net: hns3: disable sriov before unload hclge layer net: hns3: add limit ets dwrr bandwidth cannot be 0 net: hns3: reset DWRR of unused tc to zero NIOS2: irqflags: rename a redefined register name net: dsa: lantiq_gswip: fix register definition lan78xx: select CRC32 netfilter: ipvs: make global sysctl readonly in non-init netns ASoC: wm8960: Fix clock configuration on slave mode dma-debug: fix sg checks in debug_dma_map_sg() NFSD: Keep existing listeners on portlist error xtensa: xtfpga: Try software restart before simulating CPU reset xtensa: xtfpga: use CONFIG_USE_OF instead of CONFIG_OF ARM: dts: at91: sama5d2_som1_ek: disable ISC node by default tee: optee: Fix missing devices unregister during optee_remove net: switchdev: do not propagate bridge updates across bridges parisc: math-emu: Fix fall-through warnings Linux 5.4.155 ionic: don't remove netdev->dev_addr when syncing uc list r8152: select CRC32 and CRYPTO/CRYPTO_HASH/CRYPTO_SHA256 qed: Fix missing error code in qed_slowpath_start() mqprio: Correct stats in mqprio_dump_class_stats(). acpi/arm64: fix next_platform_timer() section mismatch error drm/msm/dsi: fix off by one in dsi_bus_clk_enable error handling drm/msm/dsi: Fix an error code in msm_dsi_modeset_init() drm/msm: Fix null pointer dereference on pointer edp drm/panel: olimex-lcd-olinuxino: select CRC32 platform/mellanox: mlxreg-io: Fix argument base in kstrtou32() call mlxsw: thermal: Fix out-of-bounds memory accesses ata: ahci_platform: fix null-ptr-deref in ahci_platform_enable_regulators() pata_legacy: fix a couple uninitialized variable bugs NFC: digital: fix possible memory leak in digital_in_send_sdd_req() NFC: digital: fix possible memory leak in digital_tg_listen_mdaa() nfc: fix error handling of nfc_proto_register() ethernet: s2io: fix setting mac address during resume net: encx24j600: check error in devm_regmap_init_encx24j600 net: stmmac: fix get_hw_feature() on old hardware net/mlx5e: Mutually exclude RX-FCS and RX-port-timestamp net: korina: select CRC32 net: arc: select CRC32 gpio: pca953x: Improve bias setting sctp: account stream padding length for reconf chunk iio: dac: ti-dac5571: fix an error code in probe() iio: ssp_sensors: fix error code in ssp_print_mcu_debug() iio: ssp_sensors: add more range checking in ssp_parse_dataframe() iio: light: opt3001: Fixed timeout error when 0 lux iio: mtk-auxadc: fix case IIO_CHAN_INFO_PROCESSED iio: adc128s052: Fix the error handling path of 'adc128_probe()' iio: adc: aspeed: set driver data when adc probe. powerpc/xive: Discard disabled interrupts in get_irqchip_state() x86/Kconfig: Do not enable AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT automatically nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells EDAC/armada-xp: Fix output of uncorrectable error counter virtio: write back F_VERSION_1 before validate USB: serial: option: add prod. id for Quectel EG91 USB: serial: option: add Telit LE910Cx composition 0x1204 USB: serial: option: add Quectel EC200S-CN module support USB: serial: qcserial: add EM9191 QDL support Input: xpad - add support for another USB ID of Nacon GC-100 usb: musb: dsps: Fix the probe error path efi: Change down_interruptible() in virt_efi_reset_system() to down_trylock() efi/cper: use stack buffer for error record decoding cb710: avoid NULL pointer subtraction xhci: Enable trust tx length quirk for Fresco FL11 USB controller xhci: Fix command ring pointer corruption while aborting a command xhci: guard accesses to ep_state in xhci_endpoint_reset() mei: me: add Ice Lake-N device id. x86/resctrl: Free the ctrlval arrays when domain_setup_mon_state() fails watchdog: orion: use 0 for unset heartbeat btrfs: check for error when looking up inode during dir entry replay btrfs: deal with errors when adding inode reference during log replay btrfs: deal with errors when replaying dir entry during log replay btrfs: unlock newly allocated extent buffer after error csky: Fixup regs.sr broken in ptrace csky: don't let sigreturn play with priveleged bits of status register s390: fix strrchr() implementation nds32/ftrace: Fix Error: invalid operands (*UND* and *UND* sections) for `^' ALSA: hda/realtek: Fix the mic type detection issue for ASUS G551JW ALSA: hda/realtek - ALC236 headset MIC recording issue ALSA: hda/realtek: Add quirk for Clevo X170KM-G ALSA: hda/realtek: Complete partial device name to avoid ambiguity ALSA: seq: Fix a potential UAF by wrong private_free call order ALSA: usb-audio: Add quirk for VF0770 ovl: simplify file splice Linux 5.4.154 sched: Always inline is_percpu_thread() scsi: virtio_scsi: Fix spelling mistake "Unsupport" -> "Unsupported" scsi: ses: Fix unsigned comparison with less than zero drm/amdgpu: fix gart.bo pin_count leak net: sun: SUNVNET_COMMON should depend on INET mac80211: check return value of rhashtable_init net: prevent user from passing illegal stab size m68k: Handle arrivals of multiple signals correctly mac80211: Drop frames from invalid MAC address in ad-hoc mode netfilter: nf_nat_masquerade: defer conntrack walk to work queue netfilter: nf_nat_masquerade: make async masq_inet6_event handling generic HID: wacom: Add new Intuos BT (CTL-4100WL/CTL-6100WL) device IDs netfilter: ip6_tables: zero-initialize fragment offset HID: apple: Fix logical maximum and usage maximum of Magic Keyboard JIS ext4: correct the error path of ext4_write_inline_data_end() net: phy: bcm7xxx: Fixed indirect MMD operations UPSTREAM: ovl: simplify file splice Linux 5.4.153 x86/Kconfig: Correct reference to MWINCHIP3D x86/hpet: Use another crystalball to evaluate HPET usability x86/platform/olpc: Correct ifdef symbol to intended CONFIG_OLPC_XO15_SCI RISC-V: Include clone3() on rv32 bpf, s390: Fix potential memory leak about jit_data i2c: acpi: fix resource leak in reconfiguration device addition net: prefer socket bound to interface when not in VRF i40e: Fix freeing of uninitialized misc IRQ vector i40e: fix endless loop under rtnl gve: fix gve_get_stats() rtnetlink: fix if_nlmsg_stats_size() under estimation gve: Correct available tx qpl check drm/nouveau/debugfs: fix file release memory leak video: fbdev: gbefb: Only instantiate device when built for IP32 bus: ti-sysc: Use CLKDM_NOAUTO for dra7 dcan1 for errata i893 netlink: annotate data races around nlk->bound net: sfp: Fix typo in state machine debug string net/sched: sch_taprio: properly cancel timer from taprio_destroy() net: bridge: use nla_total_size_64bit() in br_get_linkxstats_size() ARM: imx6: disable the GIC CPU interface before calling stby-poweroff sequence arm64: dts: ls1028a: add missing CAN nodes arm64: dts: freescale: Fix SP805 clock-names ptp_pch: Load module automatically if ID matches powerpc/fsl/dts: Fix phy-connection-type for fm1mac3 net_sched: fix NULL deref in fifo_set_limit() phy: mdio: fix memory leak bpf: Fix integer overflow in prealloc_elems_and_freelist() bpf, arm: Fix register clobbering in div/mod implementation xtensa: call irqchip_init only when CONFIG_USE_OF is selected xtensa: use CONFIG_USE_OF instead of CONFIG_OF xtensa: move XCHAL_KIO_* definitions to kmem_layout.h arm64: dts: qcom: pm8150: use qcom,pm8998-pon binding ARM: dts: imx: Fix USB host power regulator polarity on M53Menlo ARM: dts: imx: Add missing pinctrl-names for panel on M53Menlo soc: qcom: mdt_loader: Drop PT_LOAD check on hash segment ARM: dts: qcom: apq8064: Use 27MHz PXO clock as DSI PLL reference soc: qcom: socinfo: Fixed argument passed to platform_set_data() bpf, mips: Validate conditional branch offsets MIPS: BPF: Restore MIPS32 cBPF JIT ARM: dts: qcom: apq8064: use compatible which contains chipid ARM: dts: omap3430-sdp: Fix NAND device node xen/balloon: fix cancelled balloon action nfsd4: Handle the NFSv4 READDIR 'dircount' hint being zero nfsd: fix error handling of register_pernet_subsys() in init_nfsd() ovl: fix missing negative dentry check in ovl_rename() mmc: meson-gx: do not use memcpy_to/fromio for dram-access-quirk xen/privcmd: fix error handling in mmap-resource processing usb: typec: tcpm: handle SRC_STARTUP state if cc changes USB: cdc-acm: fix break reporting USB: cdc-acm: fix racy tty buffer accesses Partially revert "usb: Kconfig: using select for USB_COMMON dependency" ANDROID: Different fix for KABI breakage in 5.4.151 in struct sock Linux 5.4.152 libata: Add ATA_HORKAGE_NO_NCQ_ON_ATI for Samsung 860 and 870 SSD. silence nfscache allocation warnings with kvzalloc perf/x86: Reset destroy callback on event init failure kvm: x86: Add AMD PMU MSRs to msrs_to_save_all[] KVM: do not shrink halt_poll_ns below grow_start tools/vm/page-types: remove dependency on opt_file for idle page tracking scsi: ses: Retry failed Send/Receive Diagnostic commands selftests:kvm: fix get_warnings_count() ignoring fscanf() return warn selftests: be sure to make khdr before other targets usb: dwc2: check return value after calling platform_get_resource() usb: testusb: Fix for showing the connection speed scsi: sd: Free scsi_disk device via put_device() ext2: fix sleeping in atomic bugs on error sparc64: fix pci_iounmap() when CONFIG_PCI is not set xen-netback: correct success/error reporting for the SKB-with-fraglist case net: mdio: introduce a shutdown method to mdio device drivers ANDROID: Fix up KABI breakage in 5.4.151 in struct sock Linux 5.4.151 HID: usbhid: free raw_report buffers in usbhid_stop netfilter: ipset: Fix oversized kvmalloc() calls HID: betop: fix slab-out-of-bounds Write in betop_probe crypto: ccp - fix resource leaks in ccp_run_aes_gcm_cmd() usb: hso: remove the bailout parameter usb: hso: fix error handling code of hso_create_net_device hso: fix bailout in error case of probe libnvdimm/pmem: Fix crash triggered when I/O in-flight during unbind PCI: Fix pci_host_bridge struct device release/free handling net: stmmac: don't attach interface until resume finishes net: udp: annotate data race around udp_sk(sk)->corkflag HID: u2fzero: ignore incomplete packets without data ext4: fix potential infinite loop in ext4_dx_readdir() ext4: fix reserved space counter leakage ext4: fix loff_t overflow in ext4_max_bitmap_size() ipack: ipoctal: fix module reference leak ipack: ipoctal: fix missing allocation-failure check ipack: ipoctal: fix tty-registration error handling ipack: ipoctal: fix tty registration race ipack: ipoctal: fix stack information leak debugfs: debugfs_create_file_size(): use IS_ERR to check for error elf: don't use MAP_FIXED_NOREPLACE for elf interpreter mappings perf/x86/intel: Update event constraints for ICX af_unix: fix races in sk_peer_pid and sk_peer_cred accesses net: sched: flower: protect fl_walk() with rcu net: hns3: do not allow call hns3_nic_net_open repeatedly scsi: csiostor: Add module softdep on cxgb4 Revert "block, bfq: honor already-setup queue merges" selftests, bpf: test_lwt_ip_encap: Really disable rp_filter e100: fix buffer overrun in e100_get_regs e100: fix length calculation in e100_get_regs_len net: ipv4: Fix rtnexthop len when RTA_FLOW is present hwmon: (tmp421) fix rounding for negative values hwmon: (tmp421) report /PVLD condition as fault sctp: break out if skb_header_pointer returns NULL in sctp_rcv_ootb mac80211-hwsim: fix late beacon hrtimer handling mac80211: mesh: fix potentially unaligned access mac80211: limit injected vht mcs/nss in ieee80211_parse_tx_radiotap mac80211: Fix ieee80211_amsdu_aggregate frag_tail bug hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs ipvs: check that ip_vs_conn_tab_bits is between 8 and 20 drm/amd/display: Pass PCI deviceid into DC x86/kvmclock: Move this_cpu_pvti into kvmclock.h mac80211: fix use-after-free in CCMP/GCMP RX scsi: ufs: Fix illegal offset in UPIU event trace hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field fs-verity: fix signed integer overflow with i_size near S64_MAX usb: cdns3: fix race condition before setting doorbell cpufreq: schedutil: Destroy mutex before kobject_put() frees the memory cpufreq: schedutil: Use kobject release() method to free sugov_tunables tty: Fix out-of-bound vmalloc access in imageblit Revert "crypto: public_key: fix overflow during implicit conversion" Linux 5.4.150 qnx4: work around gcc false positive warning bug xen/balloon: fix balloon kthread freezing arm64: dts: marvell: armada-37xx: Extend PCIe MEM space thermal/drivers/int340x: Do not set a wrong tcc offset on resume EDAC/synopsys: Fix wrong value type assignment for edac_mode spi: Fix tegra20 build with CONFIG_PM=n net: 6pack: Fix tx timeout and slot time alpha: Declare virt_to_phys and virt_to_bus parameter as pointer to volatile arm64: Mark __stack_chk_guard as __ro_after_init parisc: Use absolute_pointer() to define PAGE0 qnx4: avoid stringop-overread errors sparc: avoid stringop-overread errors net: i825xx: Use absolute_pointer for memcpy from fixed memory location compiler.h: Introduce absolute_pointer macro blk-cgroup: fix UAF by grabbing blkcg lock before destroying blkg pd sparc32: page align size in arch_dma_alloc nvme-multipath: fix ANA state updates when a namespace is not present xen/balloon: use a kernel thread instead a workqueue bpf: Add oversize check before call kvcalloc() ipv6: delay fib6_sernum increase in fib6_add m68k: Double cast io functions to unsigned long net: stmmac: allow CSR clock of 300MHz net: macb: fix use after free on rmmod blktrace: Fix uaf in blk_trace access after removing by sysfs md: fix a lock order reversal in md_alloc irqchip/gic-v3-its: Fix potential VPE leak on error irqchip/goldfish-pic: Select GENERIC_IRQ_CHIP to fix build scsi: lpfc: Use correct scnprintf() limit scsi: qla2xxx: Restore initiator in dual mode cifs: fix a sign extension bug thermal/core: Potential buffer overflow in thermal_build_list_of_policies() fpga: machxo2-spi: Fix missing error code in machxo2_write_complete() fpga: machxo2-spi: Return an error on failure tty: synclink_gt: rename a conflicting function name tty: synclink_gt, drop unneeded forward declarations scsi: iscsi: Adjust iface sysfs attr detection net/mlx4_en: Don't allow aRFS for encapsulated packets qed: rdma - don't wait for resources under hw error recovery flow gpio: uniphier: Fix void functions to remove return value net/smc: add missing error check in smc_clc_prfx_set() bnxt_en: Fix TX timeout when TX ring size is set to the smallest enetc: Fix illegal access when reading affinity_hint platform/x86/intel: punit_ipc: Drop wrong use of ACPI_PTR() afs: Fix incorrect triggering of sillyrename on 3rd-party invalidation net: hso: fix muxed tty registration serial: mvebu-uart: fix driver's tx_empty callback xhci: Set HCD flag to defer primary roothub registration btrfs: prevent __btrfs_dump_space_info() to underflow its free space erofs: fix up erofs_lookup tracepoint mcb: fix error handling in mcb_alloc_bus() USB: serial: option: add device id for Foxconn T99W265 USB: serial: option: remove duplicate USB device ID USB: serial: option: add Telit LN920 compositions USB: serial: mos7840: remove duplicated 0xac24 device ID usb: core: hcd: Add support for deferring roothub registration Re-enable UAS for LaCie Rugged USB3-FW with fk quirk staging: greybus: uart: fix tty use after free binder: make sure fd closes complete USB: cdc-acm: fix minor-number release USB: serial: cp210x: add ID for GW Instek GDM-834x Digital Multimeter usb-storage: Add quirk for ScanLogic SL11R-IDE older than 2.6c xen/x86: fix PV trap handling on secondary processors cifs: fix incorrect check for null pointer in header_assemble usb: musb: tusb6010: uninitialized data in tusb_fifo_write_unaligned() usb: dwc2: gadget: Fix ISOC transfer complete handling for DDMA usb: dwc2: gadget: Fix ISOC flow for BDMA and Slave usb: gadget: r8a66597: fix a loop in set_feature() ocfs2: drop acl cache for directories too Linux 5.4.149 drm/nouveau/nvkm: Replace -ENOSYS with -ENODEV rtc: rx8010: select REGMAP_I2C blk-throttle: fix UAF by deleteing timer in blk_throtl_exit() pwm: stm32-lp: Don't modify HW state in .remove() callback pwm: rockchip: Don't modify HW state in .remove() callback pwm: img: Don't modify HW state in .remove() callback nilfs2: fix memory leak in nilfs_sysfs_delete_snapshot_group nilfs2: fix memory leak in nilfs_sysfs_create_snapshot_group nilfs2: fix memory leak in nilfs_sysfs_delete_##name##_group nilfs2: fix memory leak in nilfs_sysfs_create_##name##_group nilfs2: fix NULL pointer in nilfs_##name##_attr_release nilfs2: fix memory leak in nilfs_sysfs_create_device_group btrfs: fix lockdep warning while mounting sprout fs ceph: lockdep annotations for try_nonblocking_invalidate ceph: request Fw caps before updating the mtime in ceph_write_iter dmaengine: xilinx_dma: Set DMA mask for coherent APIs dmaengine: ioat: depends on !UML dmaengine: sprd: Add missing MODULE_DEVICE_TABLE parisc: Move pci_dev_is_behind_card_dino to where it is used drivers: base: cacheinfo: Get rid of DEFINE_SMP_CALL_CACHE_FUNCTION() thermal/core: Fix thermal_cooling_device_register() prototype Kconfig.debug: drop selecting non-existing HARDLOCKUP_DETECTOR_ARCH net: stmmac: reset Tx desc base address before restarting Tx phy: avoid unnecessary link-up delay in polling mode pwm: lpc32xx: Don't modify HW state in .probe() after the PWM chip was registered profiling: fix shift-out-of-bounds bugs nilfs2: use refcount_dec_and_lock() to fix potential UAF prctl: allow to setup brk for et_dyn executables 9p/trans_virtio: Remove sysfs file on probe failure thermal/drivers/exynos: Fix an error code in exynos_tmu_probe() dmaengine: acpi: Avoid comparison GSI with Linux vIRQ um: virtio_uml: fix memory leak on init failures staging: rtl8192u: Fix bitwise vs logical operator in TranslateRxSignalStuff819xUsb() sctp: add param size validation for SCTP_PARAM_SET_PRIMARY sctp: validate chunk size in __rcv_asconf_lookup ARM: 9098/1: ftrace: MODULE_PLT: Fix build problem without DYNAMIC_FTRACE ARM: 9079/1: ftrace: Add MODULE_PLTS support ARM: 9078/1: Add warn suppress parameter to arm_gen_branch_link() ARM: 9077/1: PLT: Move struct plt_entries definition to header apparmor: remove duplicate macro list_entry_is_head() ARM: Qualify enabling of swiotlb_init() s390/pci_mmio: fully validate the VMA before calling follow_pte() console: consume APC, DM, DCS KVM: remember position in kvm->vcpus array PCI/ACPI: Add Ampere Altra SOC MCFG quirk PCI: aardvark: Fix reporting CRS value PCI: pci-bridge-emul: Add PCIe Root Capabilities Register PCI: aardvark: Indicate error in 'val' when config read fails PCI: pci-bridge-emul: Fix big-endian support Linux 5.4.148 s390/bpf: Fix 64-bit subtraction of the -0x80000000 constant s390/bpf: Fix optimizing out zero-extensions net: renesas: sh_eth: Fix freeing wrong tx descriptor ip_gre: validate csum_start only on pull qlcnic: Remove redundant unlock in qlcnic_pinit_from_rom fq_codel: reject silly quantum parameters netfilter: socket: icmp6: fix use-after-scope net: dsa: b53: Fix calculating number of switch ports perf unwind: Do not overwrite FEATURE_CHECK_LDFLAGS-libunwind-{x86,aarch64} ARC: export clear_user_page() for modules mtd: rawnand: cafe: Fix a resource leak in the error handling path of 'cafe_nand_probe()' PCI: Sync __pci_register_driver() stub for CONFIG_PCI=n KVM: arm64: Handle PSCI resets before userspace touches vCPU state mfd: tqmx86: Clear GPIO IRQ resource when no IRQ is set PCI: Fix pci_dev_str_match_path() alloc while atomic bug mfd: axp20x: Update AXP288 volatile ranges NTB: perf: Fix an error code in perf_setup_inbuf() NTB: Fix an error code in ntb_msit_probe() ethtool: Fix an error code in cxgb2.c PCI: ibmphp: Fix double unmap of io_mem block, bfq: honor already-setup queue merges net: usb: cdc_mbim: avoid altsetting toggling for Telit LN920 Set fc_nlinfo in nh_create_ipv4, nh_create_ipv6 PCI: Add ACS quirks for Cavium multi-function devices tracing/probes: Reject events which have the same name of existing one mfd: Don't use irq_create_mapping() to resolve a mapping fuse: fix use after free in fuse_read_interrupt() PCI: Add ACS quirks for NXP LX2xx0 and LX2xx2 platforms mfd: db8500-prcmu: Adjust map to reality dt-bindings: mtd: gpmc: Fix the ECC bytes vs. OOB bytes equation mm/memory_hotplug: use "unsigned long" for PFN in zone_for_pfn_range() net: hns3: fix the timing issue of VF clearing interrupt sources net: hns3: disable mac in flr process net: hns3: change affinity_mask to numa node range net: hns3: pad the short tunnel frame before sending to hardware KVM: PPC: Book3S HV: Tolerate treclaim. in fake-suspend mode changing registers ibmvnic: check failover_pending in login response dt-bindings: arm: Fix Toradex compatible typo qed: Handle management FW error tcp: fix tp->undo_retrans accounting in tcp_sacktag_one() net: dsa: destroy the phylink instance on any error in dsa_slave_phy_setup net/af_unix: fix a data-race in unix_dgram_poll vhost_net: fix OoB on sendmsg() failure. events: Reuse value read using READ_ONCE instead of re-reading it net/mlx5: Fix potential sleeping in atomic context net/mlx5: FWTrace, cancel work on alloc pd error flow perf machine: Initialize srcline string member in add_location struct tipc: increase timeout in tipc_sk_enqueue() r6040: Restore MDIO clock frequency after MAC reset net/l2tp: Fix reference count leak in l2tp_udp_recv_core dccp: don't duplicate ccid when cloning dccp sock ptp: dp83640: don't define PAGE0 net-caif: avoid user-triggerable WARN_ON(1) tipc: fix an use-after-free issue in tipc_recvmsg x86/mm: Fix kern_addr_valid() to cope with existing but not present entries s390/sclp: fix Secure-IPL facility detection drm/etnaviv: add missing MMU context put when reaping MMU mapping drm/etnaviv: reference MMU context when setting up hardware state drm/etnaviv: fix MMU context leak on GPU reset drm/etnaviv: exec and MMU state is lost when resetting the GPU drm/etnaviv: keep MMU context across runtime suspend/resume drm/etnaviv: stop abusing mmu_context as FE running marker drm/etnaviv: put submit prev MMU context when it exists drm/etnaviv: return context from etnaviv_iommu_context_get drm/amd/amdgpu: Increase HWIP_MAX_INSTANCE to 10 PCI: Add AMD GPU multi-function power dependencies PM: base: power: don't try to use non-existing RTC for storing data arm64/sve: Use correct size when reinitialising SVE state bnx2x: Fix enabling network interfaces without VFs xen: reset legacy rtc flag for PV domU btrfs: fix upper limit for max_inline for page size 64K drm/panfrost: Clamp lock region to Bifrost minimum drm/panfrost: Use u64 for size in lock_region drm/panfrost: Simplify lock_region calculation drm/amdgpu: Fix BUG_ON assert drm/msi/mdp4: populate priv->kms in mdp4_kms_init net: dsa: lantiq_gswip: fix maximum frame length lib/test_stackinit: Fix static initializer test platform/chrome: cros_ec_proto: Send command again when timeout occurs memcg: enable accounting for pids in nested pid namespaces mm,vmscan: fix divide by zero in get_scan_count mm/hugetlb: initialize hugetlb_usage in mm_init s390/pv: fix the forcing of the swiotlb cpufreq: powernv: Fix init_chip_info initialization in numa=off scsi: qla2xxx: Sync queue idx with queue_pair_map idx scsi: qla2xxx: Changes to support kdump kernel scsi: BusLogic: Fix missing pr_cont() use ovl: fix BUG_ON() in may_delete() when called from ovl_cleanup() parisc: fix crash with signals and alloca net: w5100: check return value after calling platform_get_resource() fix array-index-out-of-bounds in taprio_change net: fix NULL pointer reference in cipso_v4_doi_free ath9k: fix sleeping in atomic context ath9k: fix OOB read ar9300_eeprom_restore_internal parport: remove non-zero check on count net/mlx5: DR, Enable QP retransmission iwlwifi: mvm: fix access to BSS elements iwlwifi: mvm: avoid static queue number aliasing iwlwifi: mvm: fix a memory leak in iwl_mvm_mac_ctxt_beacon_changed drm/amdkfd: Account for SH/SE count when setting up cu masks. ASoC: rockchip: i2s: Fixup config for DAIFMT_DSP_A/B ASoC: rockchip: i2s: Fix regmap_ops hang usbip:vhci_hcd USB port can get stuck in the disabled state usbip: give back URBs for unsent unlink requests during cleanup usb: musb: musb_dsps: request_irq() after initializing musb Revert "USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST quirk set" cifs: fix wrong release in sess_alloc_buffer() failed path mmc: core: Return correct emmc response in case of ioctl error selftests/bpf: Enlarge select() timeout for test_maps mmc: rtsx_pci: Fix long reads when clock is prescaled mmc: sdhci-of-arasan: Check return value of non-void funtions of: Don't allow __of_attached_node_sysfs() without CONFIG_SYSFS ASoC: Intel: Skylake: Fix passing loadable flag for module ASoC: Intel: Skylake: Fix module configuration for KPB and MIXER btrfs: tree-log: check btrfs_lookup_data_extent return value m68knommu: only set CONFIG_ISA_DMA_API for ColdFire sub-arch drm/exynos: Always initialize mapping in exynos_drm_register_dma() lockd: lockd server-side shouldn't set fl_ops usb: chipidea: host: fix port index underflow and UBSAN complains gfs2: Don't call dlm after protocol is unmounted staging: rts5208: Fix get_ms_information() heap buffer size rpc: fix gss_svc_init cleanup on failure tcp: enable data-less, empty-cookie SYN with TFO_SERVER_COOKIE_NOT_REQD serial: sh-sci: fix break handling for sysrq opp: Don't print an error if required-opps is missing Bluetooth: Fix handling of LE Enhanced Connection Complete nvme-tcp: don't check blk_mq_tag_to_rq when receiving pdu data arm64: dts: ls1046a: fix eeprom entries arm64: tegra: Fix compatible string for Tegra132 CPUs ARM: tegra: tamonten: Fix UART pad setting mac80211: Fix monitor MTU limit so that A-MSDUs get through drm/display: fix possible null-pointer dereference in dcn10_set_clock() gpu: drm: amd: amdgpu: amdgpu_i2c: fix possible uninitialized-variable access in amdgpu_i2c_router_select_ddc_port() net/mlx5: Fix variable type to match 64bit Bluetooth: avoid circular locks in sco_sock_connect Bluetooth: schedule SCO timeouts with delayed_work selftests/bpf: Fix xdp_tx.c prog section name drm/msm: mdp4: drop vblank get/put from prepare/complete_commit net: ethernet: stmmac: Do not use unreachable() in ipq806x_gmac_probe() arm64: dts: qcom: sdm660: use reg value for memory node ARM: dts: imx53-ppd: Fix ACHC entry media: tegra-cec: Handle errors of clk_prepare_enable() media: TDA1997x: fix tda1997x_query_dv_timings() return value media: v4l2-dv-timings.c: fix wrong condition in two for-loops media: imx258: Limit the max analogue gain to 480 media: imx258: Rectify mismatch of VTS value ASoC: Intel: bytcr_rt5640: Move "Platform Clock" routes to the maps for the matching in-/output arm64: tegra: Fix Tegra194 PCIe EP compatible string bonding: 3ad: fix the concurrency between __bond_release_one() and bond_3ad_state_machine_handler() workqueue: Fix possible memory leaks in wq_numa_init() Bluetooth: skip invalid hci_sync_conn_complete_evt ata: sata_dwc_460ex: No need to call phy_exit() befre phy_init() samples: bpf: Fix tracex7 error raised on the missing argument staging: ks7010: Fix the initialization of the 'sleep_status' structure serial: 8250_pci: make setup_port() parameters explicitly unsigned hvsi: don't panic on tty_register_driver failure xtensa: ISS: don't panic in rs_init serial: 8250: Define RX trigger levels for OxSemi 950 devices s390: make PCI mio support a machine flag s390/jump_label: print real address in a case of a jump label bug flow_dissector: Fix out-of-bounds warnings ipv4: ip_output.c: Fix out-of-bounds warning in ip_copy_addrs() video: fbdev: riva: Error out if 'pixclock' equals zero video: fbdev: kyro: Error out if 'pixclock' equals zero video: fbdev: asiliantfb: Error out if 'pixclock' equals zero bpf/tests: Do not PASS tests without actually testing the result bpf/tests: Fix copy-and-paste error in double word test drm/amd/amdgpu: Update debugfs link_settings output link_rate field in hex drm/amd/display: Fix timer_per_pixel unit error tty: serial: jsm: hold port lock when reporting modem line changes staging: board: Fix uninitialized spinlock when attaching genpd usb: gadget: composite: Allow bMaxPower=0 if self-powered USB: EHCI: ehci-mv: improve error handling in mv_ehci_enable() usb: gadget: u_ether: fix a potential null pointer dereference usb: host: fotg210: fix the actual_length of an iso packet usb: host: fotg210: fix the endpoint's transactional opportunities calculation igc: Check if num of q_vectors is smaller than max before array access drm: avoid blocking in drm_clients_info's rcu section Smack: Fix wrong semantics in smk_access_entry() netlink: Deal with ESRCH error in nlmsg_notify() video: fbdev: kyro: fix a DoS bug by restricting user input ARM: dts: qcom: apq8064: correct clock names iavf: fix locking of critical sections iavf: do not override the adapter state in the watchdog task iio: dac: ad5624r: Fix incorrect handling of an optional regulator. tipc: keep the skb in rcv queue until the whole data is read PCI: Use pci_update_current_state() in pci_enable_device_flags() crypto: mxs-dcp - Use sg_mapping_iter to copy data media: dib8000: rewrite the init prbs logic ASoC: atmel: ATMEL drivers don't need HAS_DMA drm/amdgpu: Fix amdgpu_ras_eeprom_init() userfaultfd: prevent concurrent API initialization kbuild: Fix 'no symbols' warning when CONFIG_TRIM_UNUSD_KSYMS=y MIPS: Malta: fix alignment of the devicetree buffer f2fs: fix to unmap pages from userspace process in punch_hole() f2fs: fix unexpected ENOENT comes from f2fs_map_blocks() f2fs: fix to account missing .skipped_gc_rwsem KVM: PPC: Fix clearing never mapped TCEs in realmode clk: at91: clk-generated: Limit the requested rate to our range clk: at91: clk-generated: pass the id of changeable parent at registration clk: at91: sam9x60: Don't use audio PLL fscache: Fix cookie key hashing platform/x86: dell-smbios-wmi: Add missing kfree in error-exit from run_smbios_call KVM: PPC: Book3S HV Nested: Reflect guest PMU in-use to L0 when guest SPRs are live HID: i2c-hid: Fix Elan touchpad regression scsi: target: avoid per-loop XCOPY buffer allocations powerpc/config: Renable MTD_PHYSMAP_OF scsi: qedf: Fix error codes in qedf_alloc_global_queues() scsi: qedi: Fix error codes in qedi_alloc_global_queues() scsi: smartpqi: Fix an error code in pqi_get_raid_map() pinctrl: single: Fix error return code in pcs_parse_bits_in_pinctrl_entry() scsi: fdomain: Fix error return code in fdomain_probe() SUNRPC: Fix potential memory corruption dma-debug: fix debugfs initialization order openrisc: don't printk() unconditionally f2fs: reduce the scope of setting fsck tag when de->name_len is zero f2fs: show f2fs instance in printk_ratelimited RDMA/efa: Remove double QP type assignment powerpc/stacktrace: Include linux/delay.h vfio: Use config not menuconfig for VFIO_NOIOMMU pinctrl: samsung: Fix pinctrl bank pin count docs: Fix infiniband uverbs minor number RDMA/iwcm: Release resources if iw_cm module initialization fails IB/hfi1: Adjust pkey entry in index 0 scsi: bsg: Remove support for SCSI_IOCTL_SEND_COMMAND f2fs: quota: fix potential deadlock HID: input: do not report stylus battery state as "full" PCI: aardvark: Fix masking and unmasking legacy INTx interrupts PCI: aardvark: Increase polling delay to 1.5s while waiting for PIO response PCI: aardvark: Fix checking for PIO status PCI: xilinx-nwl: Enable the clock through CCF PCI: Return ~0 data on pciconfig_read() CAP_SYS_ADMIN failure PCI: Restrict ASMedia ASM1062 SATA Max Payload Size Supported PCI/portdrv: Enable Bandwidth Notification only if port supports it ARM: 9105/1: atags_to_fdt: don't warn about stack size libata: add ATA_HORKAGE_NO_NCQ_TRIM for Samsung 860 and 870 SSDs dmaengine: imx-sdma: remove duplicated sdma_load_context Revert "dmaengine: imx-sdma: refine to load context only once" media: rc-loopback: return number of emitters rather than error media: uvc: don't do DMA on stack VMCI: fix NULL pointer dereference when unmapping queue pair dm crypt: Avoid percpu_counter spinlock contention in crypt_page_alloc() power: supply: max17042: handle fails of reading status register block: bfq: fix bfq_set_next_ioprio_data() crypto: public_key: fix overflow during implicit conversion arm64: head: avoid over-mapping in map_memory soc: aspeed: p2a-ctrl: Fix boundary check for mmap soc: aspeed: lpc-ctrl: Fix boundary check for mmap soc: qcom: aoss: Fix the out of bound usage of cooling_devs pinctrl: ingenic: Fix incorrect pull up/down info pinctrl: stmfx: Fix hazardous u8[] to unsigned long cast tools/thermal/tmon: Add cross compiling support 9p/xen: Fix end of loop tests for list_for_each_entry include/linux/list.h: add a macro to test if entry is pointing to the head xen: fix setting of max_pfn in shared_info powerpc/perf/hv-gpci: Fix counter value parsing PCI/MSI: Skip masking MSI-X on Xen PV blk-zoned: allow BLKREPORTZONE without CAP_SYS_ADMIN blk-zoned: allow zone management send operations without CAP_SYS_ADMIN btrfs: reset replace target device to allocation state on close btrfs: wake up async_delalloc_pages waiters after submit rtc: tps65910: Correct driver module alias Conflicts: Documentation/devicetree/bindings Documentation/devicetree/bindings/arm/tegra.yaml Documentation/devicetree/bindings/mtd/gpmc-nand.txt Documentation/devicetree/bindings/regulator/samsung,s5m8767.txt kernel/sched/cpufreq_schedutil.c Change-Id: Id17c4366cdc6854cd23fba0f41d335b09fc6100e Signed-off-by: Srinivasarao Pathipati <quic_spathi@quicinc.com>	2022-02-07 22:29:21 +05:30
Greg Kroah-Hartman	b3174205cf	This is the 5.4.174 stable release ... -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmHyVbEACgkQONu9yGCS aT6r6BAA13mGwb3g/n6W1539J2McTd3Wq7HhkvGnOQmJAHJKLzp51QYAXgLbRLCM gUOCPXh6o2gt3+lFrhFy0TE9F1VQY7Igyb2RziF9mdAcvEqcBXL11n6kZHGxx0TO rOpv/SoWMd/QrKC7Ytf5zgH+81dGYWr1L1Ge9g7KWmCev15zAvJQ4mQv6a8CQhCD pUZRBvFx8AGS6q/s9ZPZfvVBcHJDNF89/mkkWNzFgIOcXJh/01JdqNK635stUXu4 +hQYUpG2gj9X2i+e0bc2i95pql7M5OAdX3TBlMeiEjKkyXJuyWTCXSO332QLTeaP xF8Z6JQ0n4W4GI9AgQCWwOaDahtlh6rmpVj+iekeYOMMB6Y5zAoFOIu1DTBEwDK6 F+s5KGfV8t5zkWY6iFOUwHTsjeNc4qqX8B6Br3Yjo7HHBxiggNDD5k4IYe0wAvJL NzOTjdvVbG+qRmhGMQMOpLhDJaHVEJCaXCmv1G97AceaL/RcenUZkn3pQZbn5O7u iMFV620WB0tYyfsiWaQrC7HgVZRyoUYBcxuxdm/g8NqYAPM61HOBKQbyaG9jClyf dq+lnvipJzUmeTsrzkd0NON24HS53hYBZPQjxp7xuoFooBUQjd5iYJvPzeLUm2+g /PlDC4B48pZa3zm8z2amyxf7leaxZUqc2d/J8wSGM/lvaJ3BV7M= =eMMF -----END PGP SIGNATURE----- Merge 5.4.174 into android11-5.4-lts Changes in 5.4.174 HID: uhid: Fix worker destroying device without any protection HID: wacom: Reset expected and received contact counts at the same time HID: wacom: Ignore the confidence flag when a touch is removed HID: wacom: Avoid using stale array indicies to read contact count f2fs: fix to do sanity check in is_alive() nfc: llcp: fix NULL error pointer dereference on sendmsg() after failed bind() mtd: rawnand: gpmi: Add ERR007117 protection for nfc_apply_timings mtd: rawnand: gpmi: Remove explicit default gpmi clock setting for i.MX6 x86/gpu: Reserve stolen memory for first integrated Intel GPU tools/nolibc: x86-64: Fix startup code bug tools/nolibc: i386: fix initial stack alignment tools/nolibc: fix incorrect truncation of exit code rtc: cmos: take rtc_lock while reading from CMOS media: v4l2-ioctl.c: readbuffers depends on V4L2_CAP_READWRITE media: flexcop-usb: fix control-message timeouts media: mceusb: fix control-message timeouts media: em28xx: fix control-message timeouts media: cpia2: fix control-message timeouts media: s2255: fix control-message timeouts media: dib0700: fix undefined behavior in tuner shutdown media: redrat3: fix control-message timeouts media: pvrusb2: fix control-message timeouts media: stk1160: fix control-message timeouts can: softing_cs: softingcs_probe(): fix memleak on registration failure lkdtm: Fix content of section containing lkdtm_rodata_do_nothing() iommu/io-pgtable-arm-v7s: Add error handle for page table allocation failure dma_fence_array: Fix PENDING_ERROR leak in dma_fence_array_signaled() PCI: Add function 1 DMA alias quirk for Marvell 88SE9125 SATA controller mm_zone: add function to check if managed dma zone exists mm/page_alloc.c: do not warn allocation failure on zone DMA if no managed pages shmem: fix a race between shmem_unused_huge_shrink and shmem_evict_inode drm/rockchip: dsi: Hold pm-runtime across bind/unbind drm/rockchip: dsi: Reconfigure hardware on resume() drm/panel: kingdisplay-kd097d04: Delete panel on attach() failure drm/panel: innolux-p079zca: Delete panel on attach() failure drm/rockchip: dsi: Fix unbalanced clock on probe error Bluetooth: cmtp: fix possible panic when cmtp_init_sockets() fails clk: bcm-2835: Pick the closest clock rate clk: bcm-2835: Remove rounding up the dividers wcn36xx: Indicate beacon not connection loss on MISSED_BEACON_IND wcn36xx: Release DMA channel descriptor allocations media: videobuf2: Fix the size printk format media: aspeed: fix mode-detect always time out at 2nd run media: em28xx: fix memory leak in em28xx_init_dev media: aspeed: Update signal status immediately to ensure sane hw state arm64: dts: meson-gxbb-wetek: fix HDMI in early boot arm64: dts: meson-gxbb-wetek: fix missing GPIO binding Bluetooth: stop proccessing malicious adv data tee: fix put order in teedev_close_context() media: dmxdev: fix UAF when dvb_register_device() fails crypto: qce - fix uaf on qce_ahash_register_one arm64: dts: ti: k3-j721e: correct cache-sets info tty: serial: atmel: Check return code of dmaengine_submit() tty: serial: atmel: Call dma_async_issue_pending() media: rcar-csi2: Correct the selection of hsfreqrange media: imx-pxp: Initialize the spinlock prior to using it media: si470x-i2c: fix possible memory leak in si470x_i2c_probe() media: mtk-vcodec: call v4l2_m2m_ctx_release first when file is released media: venus: core: Fix a resource leak in the error handling path of 'venus_probe()' netfilter: bridge: add support for pppoe filtering arm64: dts: qcom: msm8916: fix MMC controller aliases ACPI: EC: Rework flushing of EC work while suspended to idle drm/amdgpu: Fix a NULL pointer dereference in amdgpu_connector_lcd_native_mode() drm/radeon/radeon_kms: Fix a NULL pointer dereference in radeon_driver_open_kms() arm64: dts: ti: k3-j721e: Fix the L2 cache sets tty: serial: uartlite: allow 64 bit address serial: amba-pl011: do not request memory region twice floppy: Fix hang in watchdog when disk is ejected staging: rtl8192e: return error code from rtllib_softmac_init() staging: rtl8192e: rtllib_module: fix error handle case in alloc_rtllib() Bluetooth: btmtksdio: fix resume failure media: dib8000: Fix a memleak in dib8000_init() media: saa7146: mxb: Fix a NULL pointer dereference in mxb_attach() media: si2157: Fix "warm" tuner state detection sched/rt: Try to restart rt period timer when rt runtime exceeded rcu/exp: Mark current CPU as exp-QS in IPI loop second pass mwifiex: Fix possible ABBA deadlock xfrm: fix a small bug in xfrm_sa_len() crypto: stm32/cryp - fix xts and race condition in crypto_engine requests crypto: stm32/cryp - fix double pm exit crypto: stm32/cryp - fix lrw chaining mode ARM: dts: gemini: NAS4220-B: fis-index-block with 128 KiB sectors media: dw2102: Fix use after free media: msi001: fix possible null-ptr-deref in msi001_probe() media: coda/imx-vdoa: Handle dma_set_coherent_mask error codes drm/msm/dpu: fix safe status debugfs file drm/bridge: ti-sn65dsi86: Set max register for regmap media: hantro: Fix probe func error path xfrm: interface with if_id 0 should return error xfrm: state and policy should fail if XFRMA_IF_ID 0 ARM: 9159/1: decompressor: Avoid UNPREDICTABLE NOP encoding usb: ftdi-elan: fix memory leak on device disconnect ARM: dts: armada-38x: Add generic compatible to UART nodes mmc: meson-mx-sdio: add IRQ check selinux: fix potential memleak in selinux_add_opt() bpftool: Enable line buffering for stdout x86/mce/inject: Avoid out-of-bounds write when setting flags ACPI: scan: Create platform device for BCM4752 and LNV4752 ACPI nodes pcmcia: rsrc_nonstatic: Fix a NULL pointer dereference in __nonstatic_find_io_region() pcmcia: rsrc_nonstatic: Fix a NULL pointer dereference in nonstatic_find_mem_region() netfilter: ipt_CLUSTERIP: fix refcount leak in clusterip_tg_check() bpf: Fix SO_RCVBUF/SO_SNDBUF handling in _bpf_setsockopt(). ppp: ensure minimum packet size in ppp_write() rocker: fix a sleeping in atomic bug staging: greybus: audio: Check null pointer fsl/fman: Check for null pointer after calling devm_ioremap Bluetooth: hci_bcm: Check for error irq HID: hid-uclogic-params: Invalid parameter check in uclogic_params_init HID: hid-uclogic-params: Invalid parameter check in uclogic_params_get_str_desc HID: hid-uclogic-params: Invalid parameter check in uclogic_params_huion_init HID: hid-uclogic-params: Invalid parameter check in uclogic_params_frame_init_v1_buttonpad debugfs: lockdown: Allow reading debugfs files that are not world readable net/mlx5e: Don't block routes with nexthop objects in SW Revert "net/mlx5e: Block offload of outer header csum for UDP tunnels" net/mlx5: Set command entry semaphore up once got index free spi: spi-meson-spifc: Add missing pm_runtime_disable() in meson_spifc_probe tpm: add request_locality before write TPM_INT_ENABLE can: softing: softing_startstop(): fix set but not used variable warning can: xilinx_can: xcan_probe(): check for error irq pcmcia: fix setting of kthread task states net: mcs7830: handle usb read errors properly ext4: avoid trim error on fs with small groups ALSA: jack: Add missing rwsem around snd_ctl_remove() calls ALSA: PCM: Add missing rwsem around snd_ctl_remove() calls ALSA: hda: Add missing rwsem around snd_ctl_remove() calls RDMA/hns: Validate the pkey index clk: imx8mn: Fix imx8mn_clko1_sels powerpc/prom_init: Fix improper check of prom_getprop() ASoC: uniphier: drop selecting non-existing SND_SOC_UNIPHIER_AIO_DMA ALSA: oss: fix compile error when OSS_DEBUG is enabled char/mwave: Adjust io port register size binder: fix handling of error during copy iommu/io-pgtable-arm: Fix table descriptor paddr formatting scsi: ufs: Fix race conditions related to driver data PCI/MSI: Fix pci_irq_vector()/pci_irq_get_affinity() powerpc/powermac: Add additional missing lockdep_register_key() RDMA/core: Let ib_find_gid() continue search even after empty entry RDMA/cma: Let cma_resolve_ib_dev() continue search even after empty entry ASoC: rt5663: Handle device_property_read_u32_array error codes clk: stm32: Fix ltdc's clock turn off by clk_disable_unused() after system enter shell dmaengine: pxa/mmp: stop referencing config->slave_id iommu/iova: Fix race between FQ timeout and teardown phy: uniphier-usb3ss: fix unintended writing zeros to PHY register ASoC: mediatek: Check for error clk pointer ASoC: samsung: idma: Check of ioremap return value misc: lattice-ecp3-config: Fix task hung when firmware load failed mips: lantiq: add support for clk_set_parent() mips: bcm63xx: add support for clk_set_parent() RDMA/cxgb4: Set queue pair state when being queried of: base: Fix phandle argument length mismatch error message Bluetooth: Fix debugfs entry leak in hci_register_dev() fs: dlm: filter user dlm messages for kernel locks drm/lima: fix warning when CONFIG_DEBUG_SG=y & CONFIG_DMA_API_DEBUG=y ar5523: Fix null-ptr-deref with unexpected WDCMSG_TARGET_START reply drm/nouveau/pmu/gm200-: avoid touching PMU outside of DEVINIT/PREOS/ACR ARM: shmobile: rcar-gen2: Add missing of_node_put() batman-adv: allow netlink usage in unprivileged containers usb: gadget: f_fs: Use stream_open() for endpoint files drm: panel-orientation-quirks: Add quirk for the Lenovo Yoga Book X91F/L HID: apple: Do not reset quirks when the Fn key is not found media: b2c2: Add missing check in flexcop_pci_isr: EDAC/synopsys: Use the quirk for version instead of ddr version mlxsw: pci: Add shutdown method in PCI driver drm/bridge: megachips: Ensure both bridges are probed before registration gpiolib: acpi: Do not set the IRQ type if the IRQ is already in use HSI: core: Fix return freed object in hsi_new_client mwifiex: Fix skb_over_panic in mwifiex_usb_recv() rsi: Fix use-after-free in rsi_rx_done_handler() rsi: Fix out-of-bounds read in rsi_read_pkt() usb: uhci: add aspeed ast2600 uhci support floppy: Add max size check for user space request x86/mm: Flush global TLB when switching to trampoline page-table media: uvcvideo: Increase UVC_CTRL_CONTROL_TIMEOUT to 5 seconds. media: saa7146: hexium_orion: Fix a NULL pointer dereference in hexium_attach() media: m920x: don't use stack on USB reads iwlwifi: mvm: synchronize with FW after multicast commands ath10k: Fix tx hanging net-sysfs: update the queue counts in the unregistration path net: phy: prefer 1000baseT over 1000baseKX gpio: aspeed: Convert aspeed_gpio.lock to raw_spinlock x86/mce: Mark mce_panic() noinstr x86/mce: Mark mce_end() noinstr x86/mce: Mark mce_read_aux() noinstr net: bonding: debug: avoid printing debug logs when bond is not notifying peers bpf: Do not WARN in bpf_warn_invalid_xdp_action() HID: quirks: Allow inverting the absolute X/Y values media: igorplugusb: receiver overflow should be reported media: saa7146: hexium_gemini: Fix a NULL pointer dereference in hexium_attach() mmc: core: Fixup storing of OCR for MMC_QUIRK_NONSTD_SDIO audit: ensure userspace is penalized the same as the kernel when under pressure arm64: dts: ls1028a-qds: move rtc node to the correct i2c bus arm64: tegra: Adjust length of CCPLEX cluster MMIO region cpufreq: Fix initialization of min and max frequency QoS requests usb: hub: Add delay for SuperSpeed hub resume to let links transit to U0 ath9k: Fix out-of-bound memcpy in ath9k_hif_usb_rx_stream iwlwifi: fix leaks/bad data after failed firmware load iwlwifi: remove module loading failure message iwlwifi: mvm: Fix calculation of frame length um: registers: Rename function names to avoid conflicts and build problems jffs2: GC deadlock reading a page that is used in jffs2_write_begin() ACPICA: actypes.h: Expand the ACPI_ACCESS_ definitions ACPICA: Utilities: Avoid deleting the same object twice in a row ACPICA: Executer: Fix the REFCLASS_REFOF case in acpi_ex_opcode_1A_0T_1R() ACPICA: Fix wrong interpretation of PCC address ACPICA: Hardware: Do not flush CPU cache when entering S4 and S5 drm/amdgpu: fixup bad vram size on gmc v8 ACPI: battery: Add the ThinkPad "Not Charging" quirk btrfs: remove BUG_ON() in find_parent_nodes() btrfs: remove BUG_ON(!eie) in find_parent_nodes net: mdio: Demote probed message to debug print mac80211: allow non-standard VHT MCS-10/11 dm btree: add a defensive bounds check to insert_at() dm space map common: add bounds check to sm_ll_lookup_bitmap() net: phy: marvell: configure RGMII delays for 88E1118 net: gemini: allow any RGMII interface mode regulator: qcom_smd: Align probe function with rpmh-regulator serial: pl010: Drop CR register reset on set_termios serial: core: Keep mctrl register state and cached copy in sync random: do not throw away excess input to crng_fast_load parisc: Avoid calling faulthandler_disabled() twice powerpc/6xx: add missing of_node_put powerpc/powernv: add missing of_node_put powerpc/cell: add missing of_node_put powerpc/btext: add missing of_node_put powerpc/watchdog: Fix missed watchdog reset due to memory ordering race i2c: i801: Don't silently correct invalid transfer size powerpc/smp: Move setup_profiling_timer() under CONFIG_PROFILING i2c: mpc: Correct I2C reset procedure clk: meson: gxbb: Fix the SDM_EN bit for MPLL0 on GXBB powerpc/powermac: Add missing lockdep_register_key() KVM: PPC: Book3S: Suppress failed alloc warning in H_COPY_TOFROM_GUEST w1: Misuse of get_user()/put_user() reported by sparse scsi: lpfc: Trigger SLI4 firmware dump before doing driver cleanup ALSA: seq: Set upper limit of processed events powerpc: handle kdump appropriately with crash_kexec_post_notifiers option MIPS: OCTEON: add put_device() after of_find_device_by_node() i2c: designware-pci: Fix to change data types of hcnt and lcnt parameters MIPS: Octeon: Fix build errors using clang scsi: sr: Don't use GFP_DMA ASoC: mediatek: mt8173: fix device_node leak power: bq25890: Enable continuous conversion for ADC at charging rpmsg: core: Clean up resources on announce_create failure. crypto: omap-aes - Fix broken pm_runtime_and_get() usage crypto: stm32/crc32 - Fix kernel BUG triggered in probe() crypto: caam - replace this_cpu_ptr with raw_cpu_ptr ubifs: Error path in ubifs_remount_rw() seems to wrongly free write buffers fuse: Pass correct lend value to filemap_write_and_wait_range() serial: Fix incorrect rs485 polarity on uart open cputime, cpuacct: Include guest time in user time in cpuacct.stat tracing/kprobes: 'nmissed' not showed correctly for kretprobe iwlwifi: mvm: Increase the scan timeout guard to 30 seconds s390/mm: fix 2KB pgtable release race drm/etnaviv: limit submit sizes drm/nouveau/kms/nv04: use vzalloc for nv04_display drm/bridge: analogix_dp: Make PSR-exit block less PCI: pci-bridge-emul: Properly mark reserved PCIe bits in PCI config space PCI: pci-bridge-emul: Correctly set PCIe capabilities PCI: pci-bridge-emul: Set PCI_STATUS_CAP_LIST for PCIe device xfrm: fix policy lookup for ipv6 gre packets btrfs: fix deadlock between quota enable and other quota operations btrfs: check the root node for uptodate before returning it btrfs: respect the max size in the header when activating swap file ext4: make sure to reset inode lockdep class when quota enabling fails ext4: make sure quota gets properly shutdown on error ext4: set csum seed in tmp inode while migrating to extents ext4: Fix BUG_ON in ext4_bread when write quota data ext4: don't use the orphan list when migrating an inode drm/radeon: fix error handling in radeon_driver_open_kms of: base: Improve argument length mismatch error firmware: Update Kconfig help text for Google firmware media: rcar-csi2: Optimize the selection PHTW register Documentation: dmaengine: Correctly describe dmatest with channel unset Documentation: ACPI: Fix data node reference documentation Documentation: refer to config RANDOMIZE_BASE for kernel address-space randomization Documentation: fix firewire.rst ABI file path error scsi: core: Show SCMD_LAST in text form RDMA/hns: Modify the mapping attribute of doorbell to device RDMA/rxe: Fix a typo in opcode name dmaengine: stm32-mdma: fix STM32_MDMA_CTBR_TSEL_MASK Revert "net/mlx5: Add retry mechanism to the command entry index allocation" powerpc/cell: Fix clang -Wimplicit-fallthrough warning powerpc/fsl/dts: Enable WA for erratum A-009885 on fman3l MDIO buses bpftool: Remove inclusion of utilities.mak from Makefiles ipv4: avoid quadratic behavior in netns dismantle net/fsl: xgmac_mdio: Fix incorrect iounmap when removing module parisc: pdc_stable: Fix memory leak in pdcs_register_pathentries f2fs: fix to reserve space for IO align feature af_unix: annote lockless accesses to unix_tot_inflight & gc_in_progress clk: si5341: Fix clock HW provider cleanup net: axienet: limit minimum TX ring size net: axienet: fix number of TX ring slots for available check net: axienet: increase default TX ring size to 128 rtc: pxa: fix null pointer dereference inet: frags: annotate races around fqdir->dead and fqdir->high_thresh netns: add schedule point in ops_exit_list() xfrm: Don't accidentally set RTO_ONLINK in decode_session4() gre: Don't accidentally set RTO_ONLINK in gre_fill_metadata_dst() libcxgb: Don't accidentally set RTO_ONLINK in cxgb_find_route() perf script: Fix hex dump character output dmaengine: at_xdmac: Don't start transactions at tx_submit level dmaengine: at_xdmac: Print debug message after realeasing the lock dmaengine: at_xdmac: Fix concurrency over xfers_list dmaengine: at_xdmac: Fix lld view setting dmaengine: at_xdmac: Fix at_xdmac_lld struct definition arm64: dts: qcom: msm8996: drop not documented adreno properties net_sched: restore "mpu xxx" handling bcmgenet: add WOL IRQ check net: ethernet: mtk_eth_soc: fix error checking in mtk_mac_config() dt-bindings: display: meson-dw-hdmi: add missing sound-name-prefix property dt-bindings: display: meson-vpu: Add missing amlogic,canvas property scripts/dtc: dtx_diff: remove broken example from help text lib82596: Fix IRQ check in sni_82596_probe lib/test_meminit: destroy cache in kmem_cache_alloc_bulk() test mtd: nand: bbt: Fix corner case in bad block table handling Revert "ia64: kprobes: Use generic kretprobe trampoline handler" Linux 5.4.174 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: Ia656821e4377afa7ca279a6ed92195989be831b3	2022-01-31 15:14:13 +01:00
Xiongwei Song	16f2ef98cc	floppy: Add max size check for user space request ... [ Upstream commit 545a32498c536ee152331cd2e7d2416aa0f20e01 ] We need to check the max request size that is from user space before allocating pages. If the request size exceeds the limit, return -EINVAL. This check can avoid the warning below from page allocator. WARNING: CPU: 3 PID: 16525 at mm/page_alloc.c:5344 current_gfp_context include/linux/sched/mm.h:195 [inline] WARNING: CPU: 3 PID: 16525 at mm/page_alloc.c:5344 __alloc_pages+0x45d/0x500 mm/page_alloc.c:5356 Modules linked in: CPU: 3 PID: 16525 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 RIP: 0010:__alloc_pages+0x45d/0x500 mm/page_alloc.c:5344 Code: be c9 00 00 00 48 c7 c7 20 4a 97 89 c6 05 62 32 a7 0b 01 e8 74 9a 42 07 e9 6a ff ff ff 0f 0b e9 a0 fd ff ff 40 80 e5 3f eb 88 <0f> 0b e9 18 ff ff ff 4c 89 ef 44 89 e6 45 31 ed e8 1e 76 ff ff e9 RSP: 0018:ffffc90023b87850 EFLAGS: 00010246 RAX: 0000000000000000 RBX: 1ffff92004770f0b RCX: dffffc0000000000 RDX: 0000000000000000 RSI: 0000000000000033 RDI: 0000000000010cc1 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 R10: ffffffff81bb4686 R11: 0000000000000001 R12: ffffffff902c1960 R13: 0000000000000033 R14: 0000000000000000 R15: ffff88804cf64a30 FS: 0000000000000000(0000) GS:ffff88802cd00000(0063) knlGS:00000000f44b4b40 CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 CR2: 000000002c921000 CR3: 000000004f507000 CR4: 0000000000150ee0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: <TASK> alloc_pages+0x1a7/0x300 mm/mempolicy.c:2191 __get_free_pages+0x8/0x40 mm/page_alloc.c:5418 raw_cmd_copyin drivers/block/floppy.c:3113 [inline] raw_cmd_ioctl drivers/block/floppy.c:3160 [inline] fd_locked_ioctl+0x12e5/0x2820 drivers/block/floppy.c:3528 fd_ioctl drivers/block/floppy.c:3555 [inline] fd_compat_ioctl+0x891/0x1b60 drivers/block/floppy.c:3869 compat_blkdev_ioctl+0x3b8/0x810 block/ioctl.c:662 __do_compat_sys_ioctl+0x1c7/0x290 fs/ioctl.c:972 do_syscall_32_irqs_on arch/x86/entry/common.c:112 [inline] __do_fast_syscall_32+0x65/0xf0 arch/x86/entry/common.c:178 do_fast_syscall_32+0x2f/0x70 arch/x86/entry/common.c:203 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c Reported-by: syzbot+23a02c7df2cf2bc93fa2@syzkaller.appspotmail.com Link: https://lore.kernel.org/r/20211116131033.27685-1-sxwjean@me.com Signed-off-by: Xiongwei Song <sxwjean@gmail.com> Signed-off-by: Denis Efremov <efremov@linux.com> Signed-off-by: Jens Axboe <axboe@kernel.dk> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-01-27 09:19:42 +01:00
Tasos Sahanidis	84e568531b	floppy: Fix hang in watchdog when disk is ejected ... [ Upstream commit fb48febce7e30baed94dd791e19521abd2c3fd83 ] When the watchdog detects a disk change, it calls cancel_activity(), which in turn tries to cancel the fd_timer delayed work. In the above scenario, fd_timer_fn is set to fd_watchdog(), meaning it is trying to cancel its own work. This results in a hang as cancel_delayed_work_sync() is waiting for the watchdog (itself) to return, which never happens. This can be reproduced relatively consistently by attempting to read a broken floppy, and ejecting it while IO is being attempted and retried. To resolve this, this patch calls cancel_delayed_work() instead, which cancels the work without waiting for the watchdog to return and finish. Before this regression was introduced, the code in this section used del_timer(), and not del_timer_sync() to delete the watchdog timer. Link: https://lore.kernel.org/r/399e486c-6540-db27-76aa-7a271b061f76@tasossah.com Fixes: 070ad7e793 ("floppy: convert to delayed work and single-thread wq") Signed-off-by: Tasos Sahanidis <tasos@tasossah.com> Signed-off-by: Denis Efremov <efremov@linux.com> Signed-off-by: Jens Axboe <axboe@kernel.dk> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-01-27 09:19:32 +01:00
Greg Kroah-Hartman	3cd0728e7b	This is the 5.4.168 stable release ... -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmHC4gUACgkQONu9yGCS aT7AXg//aQzVGDFrHPH/3gsN/YR4LlOCc+gQHYQdTUIhEePuwMaHff2hraG5O7pz WUTiRWjiqjII+UpBJi+Zcp5BsRfG5Z7bt3mWq9IrGt0Ttp+e7fIfuVyq0IWXmzcD n3arfW3eUgG8aRez6tTyjBErltUu/gQQIVmPlz1eL7nbUu2tHRjqL0hnXeWryeRx ilgxwynsCTHZ8HtSuc3mHtEeeVdV0ufzSWpxLre1ZCyoZwUsYJtDA+6Bmx3cv82r cF1wymH3hYcBibFEY3UNXhoimCiz4/TeC44P4UVwFNt0+SU4lVcT9QeqyMVG+fyn E7YEPHhkYO9U39cRo0BnTAfUMpwIkJ6Ro8AMDPKFK/FGWG60xkdhGWO6JStngt21 HId4wCI6rNkiOZpPKiTN0LpKhv2qn1vOlJ+yNVDn+KQeLHo2oZXFPwSYBHDCly77 nAcmRh4OwFBpn4VWiB9qPjcRpM2nSAzM1CIlw7LFBA5zoKYbiI6cn1nhSknb1zXo r78tgqT2crOiapqA4lyeguqk1YwhFtC2yX3OE2B3v5+QNC/HtijctO5o+d72FAYH MiSiTY3TUzqee9kqtxgheG87k7ksY8Q6qKetpshQtKzOyhq7BigLeUJGkul4XNyC RiVBy042i4QrwuMbuylRNmXRtBn1DkZAA98943Bey2zfz777Z9g= =IebC -----END PGP SIGNATURE----- Merge 5.4.168 into android11-5.4-lts Changes in 5.4.168 KVM: selftests: Make sure kvm_create_max_vcpus test won't hit RLIMIT_NOFILE mac80211: mark TX-during-stop for TX in in_reconfig mac80211: send ADDBA requests using the tid/queue of the aggregation session firmware: arm_scpi: Fix string overflow in SCPI genpd driver virtio_ring: Fix querying of maximum DMA mapping size for virtio device recordmcount.pl: look for jgnop instruction as well as bcrl on s390 dm btree remove: fix use after free in rebalance_children() audit: improve robustness of the audit queue handling iio: adc: stm32: fix a current leak by resetting pcsel before disabling vdda nfsd: fix use-after-free due to delegation race arm64: dts: rockchip: remove mmc-hs400-enhanced-strobe from rk3399-khadas-edge arm64: dts: rockchip: fix rk3399-leez-p710 vcc3v3-lan supply arm64: dts: rockchip: fix audio-supply for Rock Pi 4 mac80211: track only QoS data frames for admission control ARM: socfpga: dts: fix qspi node compatible clk: Don't parent clks until the parent is fully registered selftests: net: Correct ping6 expected rc from 2 to 1 s390/kexec_file: fix error handling when applying relocations sch_cake: do not call cake_destroy() from cake_init() inet_diag: use jiffies_delta_to_msecs() inet_diag: fix kernel-infoleak for UDP sockets selftests: Fix raw socket bind tests with VRF selftests: Fix IPv6 address bind tests dmaengine: st_fdma: fix MODULE_ALIAS selftest/net/forwarding: declare NETIFS p9 p10 mac80211: agg-tx: refactor sending addba mac80211: agg-tx: don't schedule_and_wake_txq() under sta->lock mac80211: accept aggregation sessions on 6 GHz mac80211: fix lookup when adding AddBA extension element net: sched: lock action when translating it to flow_action infra flow_offload: return EOPNOTSUPP for the unsupported mpls action type rds: memory leak in __rds_conn_create() soc/tegra: fuse: Fix bitwise vs. logical OR warning igb: Fix removal of unicast MAC filters of VFs igbvf: fix double free in `igbvf_probe` ixgbe: set X550 MDIO speed before talking to PHY netdevsim: Zero-initialize memory for new map's value in function nsim_bpf_map_alloc net/packet: rx_owner_map depends on pg_vec net: Fix double 0x prefix print in SKB dump net/smc: Prevent smc_release() from long blocking net: systemport: Add global locking for descriptor lifecycle sit: do not call ipip6_dev_free() from sit_init_net() USB: gadget: bRequestType is a bitfield, not a enum USB: NO_LPM quirk Lenovo USB-C to Ethernet Adapher(RTL8153-04) PCI/MSI: Clear PCI_MSIX_FLAGS_MASKALL on error PCI/MSI: Mask MSI-X vectors only on success usb: xhci: Extend support for runtime power management for AMD's Yellow carp. USB: serial: cp210x: fix CP2105 GPIO registration USB: serial: option: add Telit FN990 compositions timekeeping: Really make sure wall_to_monotonic isn't positive libata: if T_LENGTH is zero, dma direction should be DMA_NONE drm/amdgpu: correct register access for RLC_JUMP_TABLE_RESTORE mac80211: validate extended element ID is present mwifiex: Remove unnecessary braces from HostCmd_SET_SEQ_NO_BSS_INFO Input: touchscreen - avoid bitwise vs logical OR warning ARM: dts: imx6ull-pinfunc: Fix CSI_DATA07__ESAI_TX0 pad name xsk: Do not sleep in poll() when need_wakeup set media: mxl111sf: change mutex_init() location fuse: annotate lock in fuse_reverse_inval_entry() ovl: fix warning in ovl_create_real() scsi: scsi_debug: Sanity check block descriptor length in resp_mode_select() rcu: Mark accesses to rcu_state.n_force_qs mac80211: fix regression in SSN handling of addba tx net: sched: Fix suspicious RCU usage while accessing tcf_tunnel_info Revert "xsk: Do not sleep in poll() when need_wakeup set" xen/blkfront: harden blkfront against event channel storms xen/netfront: harden netfront against event channel storms xen/console: harden hvc_xen against event channel storms xen/netback: fix rx queue stall detection xen/netback: don't queue unlimited number of packages Linux 5.4.168 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I0c9e50b773834cb761a3b371132274d8120a8e5b	2021-12-22 10:08:44 +01:00
Juergen Gross	4ed9f5c511	xen/blkfront: harden blkfront against event channel storms ... commit 0fd08a34e8e3b67ec9bd8287ac0facf8374b844a upstream. The Xen blkfront driver is still vulnerable for an attack via excessive number of events sent by the backend. Fix that by using lateeoi event channels. This is part of XSA-391 Signed-off-by: Juergen Gross <jgross@suse.com> Reviewed-by: Jan Beulich <jbeulich@suse.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2021-12-22 09:29:40 +01:00
Greg Kroah-Hartman	c2531fc2c9	This is the 5.4.163 stable release ... -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmGnMQwACgkQONu9yGCS aT4bCA/+Lu9sU1kFVOwYb3zpaUpCAp9np5aqFL8Lyhq1I9YWy+Nw9olTXKyASilX XQbX6LzUJSjwWrVzf7NKIBBzKlo0tUGNfVXfSWTgpy++k7sD+Vbd4Zr4fLZHfESS +ea54xjaH60vljbS2v8TcesVkdbuybWAMd7mlLCcEWuRAmmZWZGcl7OPj7BD7y5S GlTzI3MCjlmQJtHWRsBtrv4wCgxb4rXkhLPo4oYwe3B3L3Qbft1yfF+zu4LP4cO1 2Ey4GW0GzeCffl0736uhlHGdT9ENJWzjjgKbbUBdYGFQj42I9i+1q1M0K8XpRuF1 ubBUTu/scZGJxjKjZ5NAVGD3Lw1M799Vxcmc3uFtCZWz6H6DOGmkcndMxDzenKIF tTAGwiMCHVBG6v/Tj94BLLhKZZf8x3dmVJBw4nV/ziM8BOuEvV4n+FOQ4YYVhOoo runcMMAihQZC2anRdVYuCumLqwkwK41/jbYcQcx+U32zOGImmGj4tGgpKfj9B+6o vp+XYtbYA8kyGl4a4Yk9twZAQViXTQEUoEPtn5l+C0qSye18r0A/hZJNmEicWXWM w6MzrVfwIaYqKzN/C+Qi5qtEIou05zB3quQ2FtXCb2lyT9+OmG4Lb5efRaTk0yxi vbNUBfajlj6QpfDW+02vFgGrMqqwW3VTDd4oE9Oy4H86iI7Iz44= =9jIx -----END PGP SIGNATURE----- Merge 5.4.163 into android11-5.4-lts Changes in 5.4.163 USB: serial: option: add Telit LE910S1 0x9200 composition USB: serial: option: add Fibocom FM101-GL variants usb: dwc2: gadget: Fix ISOC flow for elapsed frames usb: dwc2: hcd_queue: Fix use of floating point literal net: nexthop: fix null pointer dereference when IPv6 is not enabled usb: typec: fusb302: Fix masking of comparator and bc_lvl interrupts usb: hub: Fix usb enumeration issue due to address0 race usb: hub: Fix locking issues with address0_mutex binder: fix test regression due to sender_euid change ALSA: ctxfi: Fix out-of-range access media: cec: copy sequence field for the reply Revert "parisc: Fix backtrace to always include init funtion names" HID: wacom: Use "Confidence" flag to prevent reporting invalid contacts staging/fbtft: Fix backlight staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect() xen: don't continue xenstore initialization in case of errors xen: detect uninitialized xenbus in xenbus_init KVM: PPC: Book3S HV: Prevent POWER7/8 TLB flush flushing SLB tracing/uprobe: Fix uprobe_perf_open probes iteration tracing: Fix pid filtering when triggers are attached mmc: sdhci: Fix ADMA for PAGE_SIZE >= 64KiB mdio: aspeed: Fix "Link is Down" issue PCI: aardvark: Deduplicate code in advk_pcie_rd_conf() PCI: aardvark: Wait for endpoint to be ready before training link PCI: aardvark: Fix big endian support PCI: aardvark: Train link immediately after enabling training PCI: aardvark: Improve link training PCI: aardvark: Issue PERST via GPIO PCI: aardvark: Replace custom macros by standard linux/pci_regs.h macros PCI: aardvark: Don't touch PCIe registers if no card connected PCI: aardvark: Fix compilation on s390 PCI: aardvark: Move PCIe reset card code to advk_pcie_train_link() PCI: aardvark: Update comment about disabling link training PCI: pci-bridge-emul: Fix array overruns, improve safety PCI: aardvark: Configure PCIe resources from 'ranges' DT property PCI: aardvark: Fix PCIe Max Payload Size setting PCI: aardvark: Implement re-issuing config requests on CRS response PCI: aardvark: Simplify initialization of rootcap on virtual bridge PCI: aardvark: Fix link training PCI: aardvark: Fix support for bus mastering and PCI_COMMAND on emulated bridge PCI: aardvark: Set PCI Bridge Class Code to PCI Bridge PCI: aardvark: Fix support for PCI_BRIDGE_CTL_BUS_RESET on emulated bridge pinctrl: armada-37xx: Correct PWM pins definitions arm64: dts: marvell: armada-37xx: Set pcie_reset_pin to gpio function proc/vmcore: fix clearing user buffer by properly using clear_user() netfilter: ipvs: Fix reuse connection if RS weight is 0 ARM: dts: BCM5301X: Fix I2C controller interrupt ARM: dts: BCM5301X: Add interrupt properties to GPIO node ASoC: qdsp6: q6routing: Conditionally reset FrontEnd Mixer ASoC: topology: Add missing rwsem around snd_ctl_remove() calls net: ieee802154: handle iftypes as u32 firmware: arm_scmi: pm: Propagate return value to caller NFSv42: Don't fail clone() unless the OP_CLONE operation failed ARM: socfpga: Fix crash with CONFIG_FORTIRY_SOURCE scsi: mpt3sas: Fix kernel panic during drive powercycle test drm/vc4: fix error code in vc4_create_object() iavf: Prevent changing static ITR values if adaptive moderation is on ipv6: fix typos in __ip6_finish_output() nfp: checking parameter process for rx-usecs/tx-usecs is invalid net: ipv6: add fib6_nh_release_dsts stub net: nexthop: release IPv6 per-cpu dsts when replacing a nexthop group scsi: core: sysfs: Fix setting device state to SDEV_RUNNING net/smc: Ensure the active closing peer first closes clcsock nvmet-tcp: fix incomplete data digest send net/ncsi : Add payload to be 32-bit aligned to fix dropped packets PM: hibernate: use correct mode for swsusp_close() tcp_cubic: fix spurious Hystart ACK train detections for not-cwnd-limited flows nvmet: use IOCB_NOWAIT only if the filesystem supports it igb: fix netpoll exit with traffic MIPS: use 3-level pgtable for 64KB page size on MIPS_VA_BITS_48 net: vlan: fix underflow for the real_dev refcnt net/smc: Don't call clcsock shutdown twice when smc shutdown net: hns3: fix VF RSS failed problem after PF enable multi-TCs net: mscc: ocelot: don't downgrade timestamping RX filters in SIOCSHWTSTAMP net: mscc: ocelot: correctly report the timestamping RX filters in ethtool f2fs: set SBI_NEED_FSCK flag when inconsistent node block found smb3: do not error on fsync when readonly vhost/vsock: fix incorrect used length reported to the guest tracing: Check pid filtering when creating events s390/mm: validate VMA in PGSTE manipulation functions shm: extend forced shm destroy to support objects from several IPC nses NFC: add NCI_UNREG flag to eliminate the race fuse: release pipe buf after last use xen: sync include/xen/interface/io/ring.h with Xen's newest version xen/blkfront: read response from backend only once xen/blkfront: don't take local copy of a request from the ring page xen/blkfront: don't trust the backend response data blindly xen/netfront: read response from backend only once xen/netfront: don't read data from request on the ring page xen/netfront: disentangle tx_skb_freelist xen/netfront: don't trust the backend response data blindly tty: hvc: replace BUG_ON() with negative return value Linux 5.4.163 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I792fae41111b4dc8f0b16d525c05d506de9b7f62	2021-12-01 09:41:48 +01:00
Juergen Gross	3456a07614	xen/blkfront: don't trust the backend response data blindly ... commit b94e4b147fd1992ad450e1fea1fdaa3738753373 upstream. Today blkfront will trust the backend to send only sane response data. In order to avoid privilege escalations or crashes in case of malicious backends verify the data to be within expected limits. Especially make sure that the response always references an outstanding request. Introduce a new state of the ring BLKIF_STATE_ERROR which will be switched to in case an inconsistency is being detected. Recovering from this state is possible only via removing and adding the virtual device again (e.g. via a suspend/resume cycle). Make all warning messages issued due to valid error responses rate limited in order to avoid message floods being triggered by a malicious backend. Signed-off-by: Juergen Gross <jgross@suse.com> Reviewed-by: Jan Beulich <jbeulich@suse.com> Acked-by: Roger Pau Monné <roger.pau@citrix.com> Link: https://lore.kernel.org/r/20210730103854.12681-4-jgross@suse.com Signed-off-by: Juergen Gross <jgross@suse.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2021-12-01 09:23:35 +01:00
Juergen Gross	6392f51a9d	xen/blkfront: don't take local copy of a request from the ring page ... commit 8f5a695d99000fc3aa73934d7ced33cfc64dcdab upstream. In order to avoid a malicious backend being able to influence the local copy of a request build the request locally first and then copy it to the ring page instead of doing it the other way round as today. Signed-off-by: Juergen Gross <jgross@suse.com> Reviewed-by: Jan Beulich <jbeulich@suse.com> Acked-by: Roger Pau Monné <roger.pau@citrix.com> Link: https://lore.kernel.org/r/20210730103854.12681-3-jgross@suse.com Signed-off-by: Juergen Gross <jgross@suse.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2021-12-01 09:23:35 +01:00
Juergen Gross	ce011335cb	xen/blkfront: read response from backend only once ... commit 71b66243f9898d0e54296b4e7035fb33cdcb0707 upstream. In order to avoid problems in case the backend is modifying a response on the ring page while the frontend has already seen it, just read the response into a local buffer in one go and then operate on that buffer only. Signed-off-by: Juergen Gross <jgross@suse.com> Reviewed-by: Jan Beulich <jbeulich@suse.com> Acked-by: Roger Pau Monné <roger.pau@citrix.com> Link: https://lore.kernel.org/r/20210730103854.12681-2-jgross@suse.com Signed-off-by: Juergen Gross <jgross@suse.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2021-12-01 09:23:35 +01:00
Greg Kroah-Hartman	91a7552bea	This is the 5.4.160 stable release ... -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmGUwhUACgkQONu9yGCS aT4hlBAAjcjBBtJ7IuVRAbJhRSIW3H0viMdPTBvydSNwSF6mk9BL56CQ+OyAGLaB Fnb5DNxhIO9DAbwuvBW4wEJibSA1Q4191bRjZEKrf70LRdmA51vz0dBu2KRNV+IV HWtJYyXIyqqU/EXPsVmdmNFxr6YUCUmkyEaE18/rsg/cZmMg/Zot434cnSuzVzrW 9yLQVQAs7CAKD7kICZ/S7P7V1IKQyuLj5meX2BBE24YwukvlA9N5ISXGQuW91683 iqv0cfjwYtfrNMOE7K2AKrDgZ0AxuLrIiyppqHjHPB+zIvgm2ErQU+Hp76hVtWpW yP0cq6ReP3ktc9Hmxr49xU1l3D/6jo+OyqQh5eomP2veGpRh3dq+oe1VoN7Iw9Xg YBvjOuononlBoChsddlbxwQTZIXff9MvOK2zADmHM0740xTlqSIgw6ITdg/lyKG8 7QbM6pSepXKVXDhHtbEQQGIJP/SvLyjGKX5pJjTKQ0cemkGJ/Sp/HNHMlf/CRLen LsS2kHCuBTWKQP0NJaAIp0J3lNfcCnB8Cv2BhmkHkVPx0jEvlZKDVJqdH7tbpIdy hdR9vwq9neBIjAiTFMEAuV1/+zGR4zNqiocUXhkIC9BAzrBKinyct78kV2trVOc2 J4lFhpOv1I9/HwaqP6kYnJW+nNoMzN3sD0uT8fk8dlYo5GBvbVk= =YkOP -----END PGP SIGNATURE----- Merge 5.4.160 into android11-5.4-lts Changes in 5.4.160 xhci: Fix USB 3.1 enumeration issues by increasing roothub power-on-good delay usb: xhci: Enable runtime-pm by default on AMD Yellow Carp platform binder: use euid from cred instead of using task binder: use cred instead of task for selinux checks binder: use cred instead of task for getsecid Input: iforce - fix control-message timeout Input: elantench - fix misreporting trackpoint coordinates Input: i8042 - Add quirk for Fujitsu Lifebook T725 libata: fix read log timeout value ocfs2: fix data corruption on truncate scsi: qla2xxx: Fix kernel crash when accessing port_speed sysfs file scsi: qla2xxx: Fix use after free in eh_abort path mmc: dw_mmc: Dont wait for DRTO on Write RSP error parisc: Fix ptrace check on syscall return tpm: Check for integer overflow in tpm2_map_response_body() firmware/psci: fix application of sizeof to pointer crypto: s5p-sss - Add error handling in s5p_aes_probe() media: ite-cir: IR receiver stop working after receive overflow media: ir-kbd-i2c: improve responsiveness of hauppauge zilog receivers media: v4l2-ioctl: Fix check_ext_ctrls ALSA: hda/realtek: Add quirk for Clevo PC70HS ALSA: hda/realtek: Add a quirk for Acer Spin SP513-54N ALSA: hda/realtek: Add quirk for ASUS UX550VE ALSA: hda/realtek: Add quirk for HP EliteBook 840 G7 mute LED ALSA: ua101: fix division by zero at probe ALSA: 6fire: fix control and bulk message timeouts ALSA: line6: fix control and interrupt message timeouts ALSA: usb-audio: Add registration quirk for JBL Quantum 400 ALSA: synth: missing check for possible NULL after the call to kstrdup ALSA: timer: Fix use-after-free problem ALSA: timer: Unconditionally unlink slave instances, too fuse: fix page stealing x86/sme: Use #define USE_EARLY_PGTABLE_L5 in mem_encrypt_identity.c x86/cpu: Fix migration safety with X86_BUG_NULL_SEL x86/irq: Ensure PI wakeup handler is unregistered before module unload cavium: Return negative value when pci_alloc_irq_vectors() fails scsi: qla2xxx: Return -ENOMEM if kzalloc() fails scsi: qla2xxx: Fix unmap of already freed sgl cavium: Fix return values of the probe function sfc: Don't use netif_info before net_device setup hyperv/vmbus: include linux/bitops.h ARM: dts: sun7i: A20-olinuxino-lime2: Fix ethernet phy-mode reset: socfpga: add empty driver allowing consumers to probe mmc: winbond: don't build on M68K drm: panel-orientation-quirks: Add quirk for Aya Neo 2021 bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT bpf: Prevent increasing bpf_jit_limit above max xen/netfront: stop tx queues during live migration nvmet-tcp: fix a memory leak when releasing a queue spi: spl022: fix Microwire full duplex mode net: multicast: calculate csum of looped-back and forwarded packets watchdog: Fix OMAP watchdog early handling drm: panel-orientation-quirks: Add quirk for GPD Win3 nvmet-tcp: fix header digest verification r8169: Add device 10ec:8162 to driver r8169 vmxnet3: do not stop tx queues after netif_device_detach() nfp: bpf: relax prog rejection for mtu check through max_pkt_offset net/smc: Correct spelling mistake to TCPF_SYN_RECV btrfs: clear MISSING device status bit in btrfs_close_one_device btrfs: fix lost error handling when replaying directory deletes btrfs: call btrfs_check_rw_degradable only if there is a missing device ia64: kprobes: Fix to pass correct trampoline address to the handler hwmon: (pmbus/lm25066) Add offset coefficients regulator: s5m8767: do not use reset value as DVS voltage if GPIO DVS is disabled regulator: dt-bindings: samsung,s5m8767: correct s5m8767,pmic-buck-default-dvs-idx property EDAC/sb_edac: Fix top-of-high-memory value for Broadwell/Haswell mwifiex: fix division by zero in fw download path ath6kl: fix division by zero in send path ath6kl: fix control-message timeout ath10k: fix control-message timeout ath10k: fix division by zero in send path PCI: Mark Atheros QCA6174 to avoid bus reset rtl8187: fix control-message timeouts evm: mark evm_fixmode as __ro_after_init wcn36xx: Fix HT40 capability for 2Ghz band mwifiex: Read a PCI register after writing the TX ring write pointer libata: fix checking of DMA state wcn36xx: handle connection loss indication rsi: fix occasional initialisation failure with BT coex rsi: fix key enabled check causing unwanted encryption for vap_id > 0 rsi: fix rate mask set leading to P2P failure rsi: Fix module dev_oper_mode parameter description RDMA/qedr: Fix NULL deref for query_qp on the GSI QP signal: Remove the bogus sigkill_pending in ptrace_stop signal/mips: Update (_save|_restore)_fp_context to fail with -EFAULT power: supply: max17042_battery: Prevent int underflow in set_soc_threshold power: supply: max17042_battery: use VFSOC for capacity when no rsns KVM: nVMX: Query current VMCS when determining if MSR bitmaps are in use can: j1939: j1939_tp_cmd_recv(): ignore abort message in the BAM transport can: j1939: j1939_can_recv(): ignore messages with invalid source address powerpc/85xx: Fix oops when mpc85xx_smp_guts_ids node cannot be found serial: core: Fix initializing and restoring termios speed ALSA: mixer: oss: Fix racy access to slots ALSA: mixer: fix deadlock in snd_mixer_oss_set_volume xen/balloon: add late_initcall_sync() for initial ballooning done PCI: pci-bridge-emul: Fix emulation of W1C bits PCI: aardvark: Do not clear status bits of masked interrupts PCI: aardvark: Fix checking for link up via LTSSM state PCI: aardvark: Do not unmask unused interrupts PCI: aardvark: Fix reporting Data Link Layer Link Active PCI: aardvark: Fix return value of MSI domain .alloc() method PCI: aardvark: Read all 16-bits from PCIE_MSI_PAYLOAD_REG quota: check block number when reading the block in quota file quota: correct error number in free_dqentry() pinctrl: core: fix possible memory leak in pinctrl_enable() iio: dac: ad5446: Fix ad5622_write() return value USB: serial: keyspan: fix memleak on probe errors USB: iowarrior: fix control-message timeouts USB: chipidea: fix interrupt deadlock dma-buf: WARN on dmabuf release with pending attachments drm: panel-orientation-quirks: Update the Lenovo Ideapad D330 quirk (v2) drm: panel-orientation-quirks: Add quirk for KD Kurio Smart C15200 2-in-1 drm: panel-orientation-quirks: Add quirk for the Samsung Galaxy Book 10.6 Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg() Bluetooth: fix use-after-free error in lock_sock_nested() drm/panel-orientation-quirks: add Valve Steam Deck platform/x86: wmi: do not fail if disabling fails MIPS: lantiq: dma: add small delay after reset MIPS: lantiq: dma: reset correct number of channel locking/lockdep: Avoid RCU-induced noinstr fail net: sched: update default qdisc visibility after Tx queue cnt changes smackfs: Fix use-after-free in netlbl_catmap_walk() x86: Increase exception stack sizes mwifiex: Run SET_BSS_MODE when changing from P2P to STATION vif-type mwifiex: Properly initialize private structure on interface type changes ath10k: high latency fixes for beacon buffer media: mt9p031: Fix corrupted frame after restarting stream media: netup_unidvb: handle interrupt properly according to the firmware media: stm32: Potential NULL pointer dereference in dcmi_irq_thread() media: uvcvideo: Set capability in s_param media: uvcvideo: Return -EIO for control errors media: uvcvideo: Set unique vdev name based in type media: s5p-mfc: fix possible null-pointer dereference in s5p_mfc_probe() media: s5p-mfc: Add checking to s5p_mfc_probe(). media: imx: set a media_device bus_info string media: mceusb: return without resubmitting URB in case of -EPROTO error. ia64: don't do IA64_CMPXCHG_DEBUG without CONFIG_PRINTK brcmfmac: Add DMI nvram filename quirk for Cyberbook T116 tablet media: rcar-csi2: Add checking to rcsi2_start_receiver() ipmi: Disable some operations during a panic ACPICA: Avoid evaluating methods too early during system resume media: ipu3-imgu: imgu_fmt: Handle properly try media: ipu3-imgu: VIDIOC_QUERYCAP: Fix bus_info media: usb: dvd-usb: fix uninit-value bug in dibusb_read_eeprom_byte() net-sysfs: try not to restart the syscall if it will fail eventually tracefs: Have tracefs directories not set OTH permission bits by default ath: dfs_pattern_detector: Fix possible null-pointer dereference in channel_detector_create() iov_iter: Fix iov_iter_get_pages{,_alloc} page fault return value ACPI: battery: Accept charges over the design capacity as full leaking_addresses: Always print a trailing newline memstick: r592: Fix a UAF bug when removing the driver lib/xz: Avoid overlapping memcpy() with invalid input with in-place decompression lib/xz: Validate the value before assigning it to an enum variable workqueue: make sysfs of unbound kworker cpumask more clever tracing/cfi: Fix cmp_entries_* functions signature mismatch mwl8k: Fix use-after-free in mwl8k_fw_state_machine() block: remove inaccurate requeue check nvmet: fix use-after-free when a port is removed nvmet-tcp: fix use-after-free when a port is removed nvme: drop scan_lock and always kick requeue list when removing namespaces PM: hibernate: Get block device exclusively in swsusp_check() selftests: kvm: fix mismatched fclose() after popen() iwlwifi: mvm: disable RX-diversity in powersave smackfs: use __GFP_NOFAIL for smk_cipso_doi() ARM: clang: Do not rely on lr register for stacktrace gre/sit: Don't generate link-local addr if addr_gen_mode is IN6_ADDR_GEN_MODE_NONE ARM: 9136/1: ARMv7-M uses BE-8, not BE-32 vrf: run conntrack only in context of lower/physdev for locally generated packets net: annotate data-race in neigh_output() btrfs: do not take the uuid_mutex in btrfs_rm_device spi: bcm-qspi: Fix missing clk_disable_unprepare() on error in bcm_qspi_probe() x86/hyperv: Protect set_hv_tscchange_cb() against getting preempted parisc: fix warning in flush_tlb_all task_stack: Fix end_of_stack() for architectures with upwards-growing stack parisc/unwind: fix unwinder when CONFIG_64BIT is enabled parisc/kgdb: add kgdb_roundup() to make kgdb work with idle polling netfilter: conntrack: set on IPS_ASSURED if flows enters internal stream state selftests/bpf: Fix strobemeta selftest regression Bluetooth: fix init and cleanup of sco_conn.timeout_work rcu: Fix existing exp request check in sync_sched_exp_online_cleanup() drm/v3d: fix wait for TMU write combiner flush virtio-gpu: fix possible memory allocation failure net: net_namespace: Fix undefined member in key_remove_domain() cgroup: Make rebind_subsystems() disable v2 controllers all at once wilc1000: fix possible memory leak in cfg_scan_result() Bluetooth: btmtkuart: fix a memleak in mtk_hci_wmt_sync crypto: caam - disable pkc for non-E SoCs rxrpc: Fix _usecs_to_jiffies() by using usecs_to_jiffies() net: dsa: rtl8366rb: Fix off-by-one bug ath10k: Fix missing frame timestamp for beacon/probe-resp drm/amdgpu: fix warning for overflow check media: em28xx: add missing em28xx_close_extension media: cxd2880-spi: Fix a null pointer dereference on error handling path media: dvb-usb: fix ununit-value in az6027_rc_query media: TDA1997x: handle short reads of hdmi info frame. media: mtk-vpu: Fix a resource leak in the error handling path of 'mtk_vpu_probe()' media: radio-wl1273: Avoid card name truncation media: si470x: Avoid card name truncation media: tm6000: Avoid card name truncation media: cx23885: Fix snd_card_free call on null card pointer kprobes: Do not use local variable when creating debugfs file crypto: ecc - fix CRYPTO_DEFAULT_RNG dependency cpuidle: Fix kobject memory leaks in error paths media: em28xx: Don't use ops->suspend if it is NULL ath9k: Fix potential interrupt storm on queue reset EDAC/amd64: Handle three rank interleaving mode netfilter: nft_dynset: relax superfluous check on set updates media: dvb-frontends: mn88443x: Handle errors of clk_prepare_enable() crypto: qat - detect PFVF collision after ACK crypto: qat - disregard spurious PFVF interrupts hwrng: mtk - Force runtime pm ops for sleep ops b43legacy: fix a lower bounds test b43: fix a lower bounds test mmc: sdhci-omap: Fix NULL pointer exception if regulator is not configured memstick: avoid out-of-range warning memstick: jmb38x_ms: use appropriate free function in jmb38x_ms_alloc_host() net, neigh: Fix NTF_EXT_LEARNED in combination with NTF_USE hwmon: Fix possible memleak in __hwmon_device_register() hwmon: (pmbus/lm25066) Let compiler determine outer dimension of lm25066_coeff ath10k: fix max antenna gain unit drm/msm: uninitialized variable in msm_gem_import() net: stream: don't purge sk_error_queue in sk_stream_kill_queues() mmc: mxs-mmc: disable regulator on error and in the remove function block: ataflop: fix breakage introduced at blk-mq refactoring platform/x86: thinkpad_acpi: Fix bitwise vs. logical warning mt76: mt76x02: fix endianness warnings in mt76x02_mac.c rsi: stop thread firstly in rsi_91x_init() error handling mwifiex: Send DELBA requests according to spec phy: micrel: ksz8041nl: do not use power down mode nvme-rdma: fix error code in nvme_rdma_setup_ctrl PM: hibernate: fix sparse warnings clocksource/drivers/timer-ti-dm: Select TIMER_OF drm/msm: Fix potential NULL dereference in DPU SSPP smackfs: use netlbl_cfg_cipsov4_del() for deleting cipso_v4_doi libbpf: Fix BTF data layout checks and allow empty BTF s390/gmap: don't unconditionally call pte_unmap_unlock() in __gmap_zap() irq: mips: avoid nested irq_enter() tcp: don't free a FIN sk_buff in tcp_remove_empty_skb() samples/kretprobes: Fix return value if register_kretprobe() failed KVM: s390: Fix handle_sske page fault handling libertas_tf: Fix possible memory leak in probe and disconnect libertas: Fix possible memory leak in probe and disconnect wcn36xx: add proper DMA memory barriers in rx path drm/amdgpu/gmc6: fix DMA mask from 44 to 40 bits net: amd-xgbe: Toggle PLL settings during rate change net: phylink: avoid mvneta warning when setting pause parameters crypto: pcrypt - Delay write to padata->info selftests/bpf: Fix fclose/pclose mismatch in test_progs udp6: allow SO_MARK ctrl msg to affect routing ibmvnic: don't stop queue in xmit ibmvnic: Process crqs after enabling interrupts RDMA/rxe: Fix wrong port_cap_flags clk: mvebu: ap-cpu-clk: Fix a memory leak in error handling paths ARM: s3c: irq-s3c24xx: Fix return value check for s3c24xx_init_intc() arm64: dts: rockchip: Fix GPU register width for RK3328 ARM: dts: qcom: msm8974: Add xo_board reference clock to DSI0 PHY RDMA/bnxt_re: Fix query SRQ failure arm64: dts: meson-g12a: Fix the pwm regulator supply properties ARM: dts: at91: tse850: the emac<->phy interface is rmii scsi: dc395: Fix error case unwinding MIPS: loongson64: make CPU_LOONGSON64 depends on MIPS_FP_SUPPORT JFS: fix memleak in jfs_mount ALSA: hda: Reduce udelay() at SKL+ position reporting arm: dts: omap3-gta04a4: accelerometer irq fix soc/tegra: Fix an error handling path in tegra_powergate_power_up() memory: fsl_ifc: fix leak of irq and nand_irq in fsl_ifc_ctrl_probe clk: at91: check pmc node status before registering syscore ops video: fbdev: chipsfb: use memset_io() instead of memset() serial: 8250_dw: Drop wrong use of ACPI_PTR() usb: gadget: hid: fix error code in do_config() power: supply: rt5033_battery: Change voltage values to µV scsi: csiostor: Uninitialized data in csio_ln_vnp_read_cbfn() RDMA/mlx4: Return missed an error if device doesn't support steering staging: ks7010: select CRYPTO_HASH/CRYPTO_MICHAEL_MIC ARM: dts: stm32: fix SAI sub nodes register range ASoC: cs42l42: Correct some register default values ASoC: cs42l42: Defer probe if request_threaded_irq() returns EPROBE_DEFER phy: qcom-qusb2: Fix a memory leak on probe serial: xilinx_uartps: Fix race condition causing stuck TX HID: u2fzero: clarify error check and length calculations HID: u2fzero: properly handle timeouts in usb_submit_urb powerpc/44x/fsp2: add missing of_node_put mips: cm: Convert to bitfield API to fix out-of-bounds access power: supply: bq27xxx: Fix kernel crash on IRQ handler register error apparmor: fix error check rpmsg: Fix rpmsg_create_ept return when RPMSG config is not defined pnfs/flexfiles: Fix misplaced barrier in nfs4_ff_layout_prepare_ds drm/plane-helper: fix uninitialized variable reference PCI: aardvark: Don't spam about PIO Response Status PCI: aardvark: Fix preserving PCI_EXP_RTCTL_CRSSVE flag on emulated bridge opp: Fix return in _opp_add_static_v2() NFS: Fix deadlocks in nfs_scan_commit_list() fs: orangefs: fix error return code of orangefs_revalidate_lookup() mtd: spi-nor: hisi-sfc: Remove excessive clk_disable_unprepare() mtd: core: don't remove debugfs directory if device is in use dmaengine: at_xdmac: fix AT_XDMAC_CC_PERID() macro auxdisplay: img-ascii-lcd: Fix lock-up when displaying empty string auxdisplay: ht16k33: Connect backlight to fbdev auxdisplay: ht16k33: Fix frame buffer device blanking soc: fsl: dpaa2-console: free buffer before returning from dpaa2_console_read netfilter: nfnetlink_queue: fix OOB when mac header was cleared dmaengine: dmaengine_desc_callback_valid(): Check for `callback_result` signal/sh: Use force_sig(SIGKILL) instead of do_group_exit(SIGKILL) m68k: set a default value for MEMORY_RESERVE watchdog: f71808e_wdt: fix inaccurate report in WDIOC_GETTIMEOUT ar7: fix kernel builds for compiler test scsi: qla2xxx: Fix gnl list corruption scsi: qla2xxx: Turn off target reset during issue_lip NFSv4: Fix a regression in nfs_set_open_stateid_locked() i2c: xlr: Fix a resource leak in the error handling path of 'xlr_i2c_probe()' xen-pciback: Fix return in pm_ctrl_init() net: davinci_emac: Fix interrupt pacing disable net: vlan: fix a UAF in vlan_dev_real_dev() ACPI: PMIC: Fix intel_pmic_regs_handler() read accesses bonding: Fix a use-after-free problem when bond_sysfs_slave_add() failed mm/zsmalloc.c: close race window between zs_pool_dec_isolated() and zs_unregister_migration() zram: off by one in read_block_state() perf bpf: Add missing free to bpf_event__print_bpf_prog_info() llc: fix out-of-bound array index in llc_sk_dev_hash() nfc: pn533: Fix double free when pn533_fill_fragment_skbs() fails arm64: pgtable: make __pte_to_phys/__phys_to_pte_val inline functions bpf: sockmap, strparser, and tls are reusing qdisc_skb_cb and colliding net/sched: sch_taprio: fix undefined behavior in ktime_mono_to_any net: hns3: allow configure ETS bandwidth of all TCs vsock: prevent unnecessary refcnt inc for nonblocking connect net/smc: fix sk_refcnt underflow on linkdown and fallback cxgb4: fix eeprom len when diagnostics not implemented selftests/net: udpgso_bench_rx: fix port argument ARM: 9155/1: fix early early_iounmap() ARM: 9156/1: drop cc-option fallbacks for architecture selection parisc: Fix backtrace to always include init funtion names parisc: Fix set_fixmap() on PA1.x CPUs irqchip/sifive-plic: Fixup EOI failed when masked f2fs: should use GFP_NOFS for directory inodes net, neigh: Enable state migration between NUD_PERMANENT and NTF_USE 9p/net: fix missing error check in p9_check_errors ovl: fix deadlock in splice write powerpc/lib: Add helper to check if offset is within conditional branch range powerpc/bpf: Validate branch ranges powerpc/bpf: Fix BPF_SUB when imm == 0x80000000 powerpc/security: Add a helper to query stf_barrier type powerpc/bpf: Emit stf barrier instruction sequences for BPF_NOSPEC mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks mm, oom: do not trigger out_of_memory from the #PF video: backlight: Drop maximum brightness override for brightness zero s390/cio: check the subchannel validity for dev_busid s390/tape: fix timer initialization in tape_std_assign() s390/cio: make ccw_device_dma_* more robust powerpc/powernv/prd: Unregister OPAL_MSG_PRD2 notifier during module unload PCI: Add PCI_EXP_DEVCTL_PAYLOAD_* macros SUNRPC: Partial revert of commit 6f9f17287e78 ath10k: fix invalid dma_addr_t token assignment selftests/bpf: Fix also no-alu32 strobemeta selftest Linux 5.4.160 Note, binder* patches were manually reverted as part of this merge, they are not present in this merge point at all. Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I1fb759dd89408adbe9b9ac1527af51bfdc4059de	2021-11-17 10:19:21 +01:00
Dan Carpenter	23def86bbf	zram: off by one in read_block_state() ... [ Upstream commit a88e03cf3d190cf46bc4063a9b7efe87590de5f4 ] snprintf() returns the number of bytes it would have printed if there were space. But it does not count the NUL terminator. So that means that if "count == copied" then this has already overflowed by one character. This bug likely isn't super harmful in real life. Link: https://lkml.kernel.org/r/20210916130404.GA25094@kili Fixes: c0265342bf ("zram: introduce zram memory tracking") Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com> Cc: Minchan Kim <minchan@kernel.org> Cc: Sergey Senozhatsky <senozhatsky@chromium.org> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org> Signed-off-by: Sasha Levin <sashal@kernel.org>	2021-11-17 09:48:47 +01:00
Michael Schmitz	3446e5ecdf	block: ataflop: fix breakage introduced at blk-mq refactoring ... [ Upstream commit 86d46fdaa12ae5befc16b8d73fc85a3ca0399ea6 ] Refactoring of the Atari floppy driver when converting to blk-mq has broken the state machine in not-so-subtle ways: finish_fdc() must be called when operations on the floppy device have completed. This is crucial in order to relase the ST-DMA lock, which protects against concurrent access to the ST-DMA controller by other drivers (some DMA related, most just related to device register access - broken beyond compare, I know). When rewriting the driver's old do_request() function, the fact that finish_fdc() was called only when all queued requests had completed appears to have been overlooked. Instead, the new request function calls finish_fdc() immediately after the last request has been queued. finish_fdc() executes a dummy seek after most requests, and this overwrites the state machine's interrupt hander that was set up to wait for completion of the read/write request just prior. To make matters worse, finish_fdc() is called before device interrupts are re-enabled, making certain that the read/write interupt is missed. Shifting the finish_fdc() call into the read/write request completion handler ensures the driver waits for the request to actually complete. With a queue depth of 2, we won't see long request sequences, so calling finish_fdc() unconditionally just adds a little overhead for the dummy seeks, and keeps the code simple. While we're at it, kill ataflop_commit_rqs() which does nothing but run finish_fdc() unconditionally, again likely wiping out an in-flight request. Signed-off-by: Michael Schmitz <schmitzmic@gmail.com> Fixes: 6ec3938cff ("ataflop: convert to blk-mq") CC: linux-block@vger.kernel.org CC: Tetsuo Handa <penguin-kernel@i-love.sakura.ne.jp> Link: https://lore.kernel.org/r/20211019061321.26425-1-schmitzmic@gmail.com Signed-off-by: Jens Axboe <axboe@kernel.dk> Signed-off-by: Sasha Levin <sashal@kernel.org>	2021-11-17 09:48:38 +01:00
Srinivasarao Pathipati	828abb51dd	Merge android11-5.4.147+ (dc8c919) into msm-5.4 ... * refs/heads/tmp-dc8c919: Revert dwc3 changes ANDROID: GKI: Update FCNT KMI symbol list No new symbols added that are not already in the .xml file. ANDROID: GKI : Update symbols to symbol list BACKPORT: crypto: arch - conditionalize crypto api in arch glue for lib code BACKPORT: crypto: arch/lib - limit simd usage to 4k chunks UPSTREAM: crypto: arm/blake2s - fix for big endian ANDROID: gki_defconfig: enable BLAKE2b support BACKPORT: crypto: arm/blake2b - add NEON-accelerated BLAKE2b BACKPORT: crypto: blake2b - update file comment BACKPORT: crypto: blake2b - sync with blake2s implementation UPSTREAM: crypto: arm/blake2s - add ARM scalar optimized BLAKE2s UPSTREAM: crypto: blake2s - include <linux/bug.h> instead of <asm/bug.h> UPSTREAM: crypto: blake2s - adjust include guard naming UPSTREAM: crypto: blake2s - add comment for blake2s_state fields UPSTREAM: crypto: blake2s - optimize blake2s initialization BACKPORT: crypto: blake2s - share the "shash" API boilerplate code UPSTREAM: crypto: blake2s - move update and final logic to internal/blake2s.h UPSTREAM: crypto: blake2s - remove unneeded includes UPSTREAM: crypto: x86/blake2s - define shash_alg structs using macros UPSTREAM: crypto: blake2s - define shash_alg structs using macros UPSTREAM: crypto: lib/blake2s - Move selftest prototype into header file UPSTREAM: crypto: blake2b - Fix clang optimization for ARMv7-M UPSTREAM: crypto: blake2b - rename tfm context and _setkey callback UPSTREAM: crypto: blake2b - merge _update to api callback UPSTREAM: crypto: blake2b - open code set last block helper UPSTREAM: crypto: blake2b - delete unused structs or members UPSTREAM: crypto: blake2b - simplify key init UPSTREAM: crypto: blake2b - merge blake2 init to api callback UPSTREAM: crypto: blake2b - merge _final implementation to callback BACKPORT: crypto: testmgr - add test vectors for blake2b BACKPORT: crypto: blake2b - add blake2b generic implementation UPSTREAM: crypto: blake2s - x86_64 SIMD implementation UPSTREAM: crypto: blake2s - implement generic shash driver UPSTREAM: crypto: testmgr - add test cases for Blake2s UPSTREAM: crypto: blake2s - generic C library implementation and selftest UPSTREAM: crypto: lib - tidy up lib/crypto Kconfig and Makefile ANDROID: ion heap: init ion heaps in subsys_initcall UPSTREAM: ovl: simplify file splice ANDROID: ABI: update allowed list for galaxy ANDROID: ABI: Update allowed list for QCOM ANDROID: distribute Module.symvers UPSTREAM: usb: max-3421: Prevent corruption of freed memory ANDROID: ABI: Update allowed list for QCOM UPSTREAM: driver core: Prevent warning when removing a device link from unregistered consumer UPSTREAM: udp: properly flush normal packet at GRO time UPSTREAM: net/xfrm/compat: Copy xfrm_spdattr_type_t atributes UPSTREAM: f2fs: Advertise encrypted casefolding in sysfs UPSTREAM: loop: Fix missing discard support when using LOOP_CONFIGURE UPSTREAM: thermal/drivers/sprd: Add missing MODULE_DEVICE_TABLE UPSTREAM: nvmem: sprd: Fix an error message UPSTREAM: usb: musb: Fix an error message UPSTREAM: scsi: ufs: core: Cancel rpm_dev_flush_recheck_work during system suspend UPSTREAM: scsi: ufs: core: Do not put UFS power into LPM if link is broken UPSTREAM: selinux: add proper NULL termination to the secclass_map permissions UPSTREAM: of: property: fw_devlink: do not link ".*,nr-gpios" UPSTREAM: udp: never accept GSO_FRAGLIST packets UPSTREAM: udp: skip L4 aggregation for UDP tunnel packets UPSTREAM: xfrm/compat: Cleanup WARN()s that can be user-triggered UPSTREAM: pinctrl: sunxi: fix irq bank map for the Allwinner A100 pin controller UPSTREAM: loop: Set correct device size when using LOOP_CONFIGURE UPSTREAM: loop: unset GENHD_FL_NO_PART_SCAN on LOOP_CONFIGURE ANDROID: ion_system_heap: Add __GFP_NOWARN to mid-order allocations ANDROID: drivers: gpu: drm: increase the MAX_DRM_OPEN_COUNT UPSTREAM: af_unix: fix garbage collect vs MSG_PEEK Linux 5.4.147 Revert "time: Handle negative seconds correctly in timespec64_to_ns()" Revert "posix-cpu-timers: Force next expiration recalc after itimer reset" Revert "block: nbd: add sanity check for first_minor" Revert "Bluetooth: Move shutdown callback before flushing tx and rx queue" Linux 5.4.146 clk: kirkwood: Fix a clocking boot regression backlight: pwm_bl: Improve bootloader/kernel device handover fbmem: don't allow too huge resolutions IMA: remove the dependency on CRYPTO_MD5 IMA: remove -Wmissing-prototypes warning fuse: flush extending writes fuse: truncate pagecache on atomic_o_trunc KVM: nVMX: Unconditionally clear nested.pi_pending on nested VM-Enter KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted KVM: s390: index kvm->arch.idle_mask by vcpu_idx x86/resctrl: Fix a maybe-uninitialized build warning treated as error perf/x86/amd/ibs: Extend PERF_PMU_CAP_NO_EXCLUDE to IBS Op tty: Fix data race between tiocsti() and flush_to_ldisc() time: Handle negative seconds correctly in timespec64_to_ns() bpf: Fix pointer arithmetic mask tightening under state pruning bpf: verifier: Allocate idmap scratch in verifier env bpf: Fix leakage due to insufficient speculative store bypass mitigation bpf: Introduce BPF nospec instruction for mitigating Spectre v4 ipv4: fix endianness issue in inet_rtm_getroute_build_skb() octeontx2-af: Fix loop in free and unmap counter net: qualcomm: fix QCA7000 checksum handling net: sched: Fix qdisc_rate_table refcount leak when get tcf_block failed ipv4: make exception cache less predictible ipv6: make exception cache less predictible brcmfmac: pcie: fix oops on failure to resume and reprobe bcma: Fix memory leak for internally-handled cores ath6kl: wmi: fix an error code in ath6kl_wmi_sync_point() ASoC: wcd9335: Disable irq on slave ports in the remove function ASoC: wcd9335: Fix a memory leak in the error handling path of the probe function ASoC: wcd9335: Fix a double irq free in the remove function tty: serial: fsl_lpuart: fix the wrong mapbase value usb: bdc: Fix an error handling path in 'bdc_probe()' when no suitable DMA config is available usb: ehci-orion: Handle errors of clk_prepare_enable() in probe i2c: mt65xx: fix IRQ check CIFS: Fix a potencially linear read overflow bpf: Fix possible out of bound write in narrow load handling mmc: moxart: Fix issue with uninitialized dma_slave_config mmc: dw_mmc: Fix issue with uninitialized dma_slave_config ASoC: Intel: Skylake: Fix module resource and format selection ASoC: Intel: Skylake: Leave data as is when invoking TLV IPCs rsi: fix an error code in rsi_probe() rsi: fix error code in rsi_load_9116_firmware() i2c: s3c2410: fix IRQ check i2c: iop3xx: fix deferred probing Bluetooth: add timeout sanity check to hci_inquiry mm/swap: consider max pages in iomap_swapfile_add_extent usb: gadget: mv_u3d: request_irq() after initializing UDC nfsd4: Fix forced-expiry locking lockd: Fix invalid lockowner cast after vfs_test_lock mac80211: Fix insufficient headroom issue for AMSDU usb: phy: tahvo: add IRQ check usb: host: ohci-tmio: add IRQ check Bluetooth: Move shutdown callback before flushing tx and rx queue usb: gadget: udc: renesas_usb3: Fix soc_device_match() abuse usb: phy: twl6030: add IRQ checks usb: phy: fsl-usb: add IRQ check usb: gadget: udc: at91: add IRQ check drm/msm/dsi: Fix some reference counted resource leaks Bluetooth: fix repeated calls to sco_sock_kill counter: 104-quad-8: Return error when invalid mode during ceiling_write arm64: dts: exynos: correct GIC CPU interfaces address range on Exynos7 drm/msm/dpu: make dpu_hw_ctl_clear_all_blendstages clear necessary LMs PM: EM: Increase energy calculation precision Bluetooth: increase BTNAMSIZ to 21 chars to fix potential buffer overflow debugfs: Return error during {full/open}_proxy_open() on rmmod soc: qcom: smsm: Fix missed interrupts if state changes while masked PCI: PM: Enable PME if it can be signaled from D3cold PCI: PM: Avoid forcing PCI_D0 for wakeup reasons inconsistently media: venus: venc: Fix potential null pointer dereference on pointer fmt media: em28xx-input: fix refcount bug in em28xx_usb_disconnect leds: trigger: audio: Add an activate callback to ensure the initial brightness is set leds: lt3593: Put fwnode in any case during ->probe() i2c: highlander: add IRQ check net: cipso: fix warnings in netlbl_cipsov4_add_std cgroup/cpuset: Fix a partition bug with hotplug net/mlx5e: Prohibit inner indir TIRs in IPoIB ARM: dts: meson8b: ec100: Fix the pwm regulator supply properties ARM: dts: meson8b: mxq: Fix the pwm regulator supply properties ARM: dts: meson8b: odroidc1: Fix the pwm regulator supply properties ARM: dts: meson8: Use a higher default GPU clock frequency tcp: seq_file: Avoid skipping sk during tcp_seek_last_pos drm/amdgpu/acp: Make PM domain really work netns: protect netns ID lookups with RCU 6lowpan: iphc: Fix an off-by-one check of array index Bluetooth: sco: prevent information leak in sco_conn_defer_accept() media: coda: fix frame_mem_ctrl for YUV420 and YVU420 formats media: go7007: remove redundant initialization media: dvb-usb: Fix error handling in dvb_usb_i2c_init media: dvb-usb: fix uninit-value in vp702x_read_mac_addr media: dvb-usb: fix uninit-value in dvb_usb_adapter_dvb_init soc: qcom: rpmhpd: Use corner in power_off arm64: dts: renesas: r8a77995: draak: Remove bogus adv7511w properties ARM: dts: aspeed-g6: Fix HVI3C function-group in pinctrl dtsi bpf: Fix potential memleak and UAF in the verifier. bpf: Fix a typo of reuseport map in bpf.h. media: cxd2880-spi: Fix an error handling path soc: rockchip: ROCKCHIP_GRF should not default to y, unconditionally media: TDA1997x: enable EDID support drm/panfrost: Fix missing clk_disable_unprepare() on error in panfrost_clk_init() EDAC/i10nm: Fix NVDIMM detection spi: spi-zynq-qspi: use wait_for_completion_timeout to make zynq_qspi_exec_mem_op not interruptible spi: sprd: Fix the wrong WDG_LOAD_VAL regulator: vctrl: Avoid lockdep warning in enable/disable ops regulator: vctrl: Use locked regulator_get_voltage in probe path certs: Trigger creation of RSA module signing key if it's not an RSA key crypto: qat - use proper type for vf_mask block: nbd: add sanity check for first_minor clocksource/drivers/sh_cmt: Fix wrong setting if don't request IRQ for clock source channel lib/mpi: use kcalloc in mpi_resize genirq/timings: Fix error return code in irq_timings_test_irqs() spi: spi-pic32: Fix issue with uninitialized dma_slave_config spi: spi-fsl-dspi: Fix issue with uninitialized dma_slave_config sched: Fix UCLAMP_FLAG_IDLE setting m68k: emu: Fix invalid free in nfeth_cleanup() s390/debug: fix debug area life cycle s390/kasan: fix large PMD pages address alignment check udf_get_extendedattr() had no boundary checks. fcntl: fix potential deadlock for &fasync_struct.fa_lock crypto: qat - do not export adf_iov_putmsg() crypto: qat - fix naming for init/shutdown VF to PF notifications crypto: qat - fix reuse of completion variable crypto: qat - handle both source of interrupt in VF ISR crypto: qat - do not ignore errors from enable_vf2pf_comms() libata: fix ata_host_start() s390/cio: add dev_busid sysfs entry for each subchannel power: supply: max17042_battery: fix typo in MAx17042_TOFF nvmet: pass back cntlid on successful completion nvme-rdma: don't update queue count when failing to set io queues nvme-tcp: don't update queue count when failing to set io queues bcache: add proper error unwinding in bcache_device_init isofs: joliet: Fix iocharset=utf8 mount option udf: Fix iocharset=utf8 mount option udf: Check LVID earlier hrtimer: Ensure timerfd notification for HIGHRES=n hrtimer: Avoid double reprogramming in __hrtimer_start_range_ns() posix-cpu-timers: Force next expiration recalc after itimer reset rcu/tree: Handle VM stoppage in stall detection sched/deadline: Fix missing clock update in migrate_task_rq_dl() crypto: omap-sham - clear dma flags only after omap_sham_update_dma_stop() power: supply: axp288_fuel_gauge: Report register-address on readb / writeb errors sched/deadline: Fix reset_on_fork reporting of DL tasks crypto: mxs-dcp - Check for DMA mapping errors regmap: fix the offset of register error log locking/mutex: Fix HANDOFF condition ANDROID: GKI: db845c: Update symbols list and ABI for lts v5.4.144 Linux 5.4.145 PCI: Call Max Payload Size-related fixup quirks early x86/reboot: Limit Dell Optiplex 990 quirk to early BIOS versions xhci: fix unsafe memory usage in xhci tracing usb: mtu3: fix the wrong HS mult value usb: mtu3: use @mult for HS isoc or intr usb: host: xhci-rcar: Don't reload firmware after the completion ALSA: usb-audio: Add registration quirk for JBL Quantum 800 Revert "btrfs: compression: don't try to compress if we don't have enough pages" x86/events/amd/iommu: Fix invalid Perf result due to IOMMU PMC power-gating Revert "r8169: avoid link-up interrupt issue on RTL8106e if user enables ASPM" mm/page_alloc: speed up the iteration of max_order net: ll_temac: Remove left-over debug message powerpc/boot: Delete unneeded .globl _zimage_start ipv4/icmp: l3mdev: Perform icmp error route lookup on source device routing table (v2) USB: serial: mos7720: improve OOM-handling in read_mos_reg() igmp: Add ip_mc_list lock in ip_check_mc_rcu media: stkwebcam: fix memory leak in stk_camera_probe ARC: wireup clone3 syscall ALSA: pcm: fix divide error in snd_pcm_lib_ioctl ALSA: hda/realtek: Workaround for conflicting SSID on ASUS ROG Strix G17 ARM: 8918/2: only build return_address() if needed cryptoloop: add a deprecation warning perf/x86/amd/power: Assign pmu.module perf/x86/amd/ibs: Work around erratum #1197 perf/x86/intel/pt: Fix mask of num_address_ranges qede: Fix memset corruption net: macb: Add a NULL check on desc_ptp qed: Fix the VF msix vectors flow reset: reset-zynqmp: Fixed the argument data type gpu: ipu-v3: Fix i.MX IPU-v3 offset calculations for (semi)planar U/V formats xtensa: fix kconfig unmet dependency warning for HAVE_FUTEX_CMPXCHG kthread: Fix PF_KTHREAD vs to_kthread() race ubifs: report correct st_size for encrypted symlinks f2fs: report correct st_size for encrypted symlinks ext4: report correct st_size for encrypted symlinks fscrypt: add fscrypt_symlink_getattr() for computing st_size ext4: fix race writing to an inline_data file while its xattrs are changing Revert "once: Fix panic when module unload" Linux 5.4.144 audit: move put_tree() to avoid trim_trees refcount underflow and UAF net: don't unconditionally copy_from_user a struct ifreq for socket ioctls Revert "parisc: Add assembly implementations for memset, strlen, strcpy, strncpy and strcat" Revert "floppy: reintroduce O_NDELAY fix" btrfs: fix NULL pointer dereference when deleting device by invalid id arm64: dts: qcom: msm8994-angler: Fix gpio-reserved-ranges 85-88 KVM: x86/mmu: Treat NX as used (not reserved) for all !TDP shadow MMUs net: dsa: mt7530: fix VLAN traffic leaks again bpf: Fix cast to pointer from integer of different size warning bpf: Track contents of read-only maps as scalars vt_kdsetmode: extend console locking btrfs: fix race between marking inode needs to be logged and log syncing net/rds: dma_map_sg is entitled to merge entries drm/nouveau/disp: power down unused DP links during init drm: Copy drm_wait_vblank to user before returning qed: Fix null-pointer dereference in qed_rdma_create_qp() qed: qed ll2 race condition fixes vringh: Use wiov->used to check for read/write desc order virtio_pci: Support surprise removal of virtio pci device virtio: Improve vq->broken access to avoid any compiler optimization opp: remove WARN when no valid OPPs remain perf/x86/intel/uncore: Fix integer overflow on 23 bit left shift of a u32 usb: gadget: u_audio: fix race condition on endpoint stop drm/i915: Fix syncmap memory leak net: hns3: fix get wrong pfc_en when query PFC configuration net: hns3: fix duplicate node in VLAN list net: hns3: clear hardware resource when loading driver rtnetlink: Return correct error on changing device netns net: marvell: fix MVNETA_TX_IN_PRGRS bit number xgene-v2: Fix a resource leak in the error handling path of 'xge_probe()' ip_gre: add validation for csum_start RDMA/efa: Free IRQ vectors on error flow e1000e: Fix the max snoop/no-snoop latency for 10M IB/hfi1: Fix possible null-pointer dereference in _extend_sdma_tx_descs() RDMA/bnxt_re: Add missing spin lock initialization scsi: core: Fix hang of freezing queue between blocking and running device usb: dwc3: gadget: Stop EP0 transfers during pullup disable usb: dwc3: gadget: Fix dwc3_calc_trbs_left() USB: serial: option: add new VID/PID to support Fibocom FG150 Revert "USB: serial: ch341: fix character loss at high transfer rates" can: usb: esd_usb2: esd_usb2_rx_event(): fix the interchange of the CAN RX and TX error counters mm, oom: make the calculation of oom badness more accurate mmc: sdhci-msm: Update the software timeout value for sdhc ovl: fix uninitialized pointer read in ovl_lookup_real_one() once: Fix panic when module unload netfilter: conntrack: collect all entries in one cycle ARC: Fix CONFIG_STACKDEPOT net: qrtr: fix another OOB Read in qrtr_endpoint_post Revert "virtio: Protect vqs list access" Revert "net: igmp: fix data-race in igmp_ifc_timer_expire()" Revert "net: igmp: increase size of mr_ifc_count" Revert "PCI/MSI: Protect msi_desc::masked for multi-MSI" Linux 5.4.143 netfilter: nft_exthdr: fix endianness of tcp option cast fs: warn about impending deprecation of mandatory locks mm: memcontrol: fix occasional OOMs due to proportional memory.low reclaim mm, memcg: avoid stale protection values when cgroup is above protection ASoC: intel: atom: Fix breakage for PCM buffer address setup PCI: Increase D3 delay for AMD Renoir/Cezanne XHCI btrfs: prevent rename2 from exchanging a subvol with a directory from different parents ipack: tpci200: fix memory leak in the tpci200_register ipack: tpci200: fix many double free issues in tpci200_pci_probe slimbus: ngd: reset dma setup during runtime pm slimbus: messaging: check for valid transaction id slimbus: messaging: start transaction ids from 1 instead of zero tracing / histogram: Fix NULL pointer dereference on strcmp() on NULL event name ALSA: hda - fix the 'Capture Switch' value change notifications mmc: dw_mmc: Fix hang on data CRC error ovl: add splice file read write helper iavf: Fix ping is lost after untrusted VF had tried to change MAC i40e: Fix ATR queue selection ovs: clear skb->tstamp in forwarding path net: mdio-mux: Handle -EPROBE_DEFER correctly net: mdio-mux: Don't ignore memory allocation errors net: qlcnic: add missed unlock in qlcnic_83xx_flash_read32 virtio-net: use NETIF_F_GRO_HW instead of NETIF_F_LRO virtio-net: support XDP when not more queues vrf: Reset skb conntrack connection on VRF rcv bnxt_en: Add missing DMA memory barriers ptp_pch: Restore dependency on PCI net: 6pack: fix slab-out-of-bounds in decode_data bnxt: disable napi before canceling DIM bnxt: don't lock the tx queue from napi poll bpf: Clear zext_dst of dead insns vhost: Fix the calculation in vhost_overflow() virtio: Protect vqs list access dccp: add do-while-0 stubs for dccp_pr_debug macros cpufreq: armada-37xx: forbid cpufreq for 1.2 GHz variant iommu: Check if group is NULL before remove device Bluetooth: hidp: use correct wait queue when removing ctrl_wait drm/amd/display: Fix Dynamic bpp issue with 8K30 with Navi 1X net: usb: lan78xx: don't modify phy_device state concurrently ARM: dts: nomadik: Fix up interrupt controller node names scsi: core: Fix capacity set to zero after offlinining device scsi: core: Avoid printing an error if target_alloc() returns -ENXIO scsi: scsi_dh_rdac: Avoid crash during rdac_bus_attach() scsi: megaraid_mm: Fix end of loop tests for list_for_each_entry() dmaengine: of-dma: router_xlate to return -EPROBE_DEFER if controller is not yet available ARM: dts: am43x-epos-evm: Reduce i2c0 bus speed for tps65218 dmaengine: usb-dmac: Fix PM reference leak in usb_dmac_probe() dmaengine: xilinx_dma: Fix read-after-free bug when terminating transfers USB: core: Avoid WARNings for 0-length descriptor requests media: drivers/media/usb: fix memory leak in zr364xx_probe media: zr364xx: fix memory leaks in probe() media: zr364xx: propagate errors from zr364xx_start_readpipe() mtd: cfi_cmdset_0002: fix crash when erasing/writing AMD cards ath9k: Postpone key cache entry deletion for TXQ frames reference it ath: Modify ath_key_delete() to not need full key entry ath: Export ath_hw_keysetmac() ath9k: Clear key cache explicitly on disabling hardware ath: Use safer key clearing with key cache entries x86/fpu: Make init_fpstate correct with optimized XSAVE ext4: fix EXT4_MAX_LOGICAL_BLOCK macro Linux 5.4.142 KVM: nSVM: always intercept VMLOAD/VMSAVE when nested (CVE-2021-3656) KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) iommu/vt-d: Fix agaw for a supported 48 bit guest address width vmlinux.lds.h: Handle clang's module.{c,d}tor sections ceph: take snap_empty_lock atomically with snaprealm refcount change ceph: clean up locking annotation for ceph_get_snap_realm and __lookup_snap_realm ceph: add some lockdep assertions around snaprealm handling KVM: VMX: Use current VMCS to query WAITPKG support for MSR emulation PCI/MSI: Protect msi_desc::masked for multi-MSI PCI/MSI: Use msi_mask_irq() in pci_msi_shutdown() PCI/MSI: Correct misleading comments PCI/MSI: Do not set invalid bits in MSI mask PCI/MSI: Enforce MSI[X] entry updates to be visible PCI/MSI: Enforce that MSI-X table entry is masked for update PCI/MSI: Mask all unused MSI-X entries PCI/MSI: Enable and mask MSI-X early genirq/timings: Prevent potential array overflow in __irq_timings_store() genirq/msi: Ensure deactivation on teardown x86/resctrl: Fix default monitoring groups reporting x86/ioapic: Force affinity setup before startup x86/msi: Force affinity setup before startup genirq: Provide IRQCHIP_AFFINITY_PRE_STARTUP x86/tools: Fix objdump version check again powerpc/kprobes: Fix kprobe Oops happens in booke nbd: Aovid double completion of a request vsock/virtio: avoid potential deadlock when vsock device remove xen/events: Fix race in set_evtchn_to_irq net: igmp: increase size of mr_ifc_count tcp_bbr: fix u32 wrap bug in round logic if bbr_init() called after 2B packets net: linkwatch: fix failure to restore device state across suspend/resume net: bridge: fix memleak in br_add_if() net: dsa: sja1105: fix broken backpressure in .port_fdb_dump net: dsa: lantiq: fix broken backpressure in .port_fdb_dump net: dsa: lan9303: fix broken backpressure in .port_fdb_dump net: igmp: fix data-race in igmp_ifc_timer_expire() net: Fix memory leak in ieee802154_raw_deliver net: dsa: microchip: Fix ksz_read64() drm/meson: fix colour distortion from HDR set during vendor u-boot net/mlx5: Fix return value from tracer initialization psample: Add a fwd declaration for skbuff iavf: Set RSS LUT and key in reset handle path net: sched: act_mirred: Reset ct info when mirror/redirect skb ppp: Fix generating ifname when empty IFLA_IFNAME is specified net: phy: micrel: Fix link detection on ksz87xx switch" platform/x86: pcengines-apuv2: Add missing terminating entries to gpio-lookup tables platform/x86: pcengines-apuv2: revert wiring up simswitch GPIO as LED net: dsa: mt7530: add the missing RxUnicast MIB counter ASoC: cs42l42: Fix LRCLK frame start edge netfilter: nf_conntrack_bridge: Fix memory leak when error ASoC: cs42l42: Remove duplicate control for WNF filter frequency ASoC: cs42l42: Fix inversion of ADC Notch Switch control ASoC: cs42l42: Don't allow SND_SOC_DAIFMT_LEFT_J ASoC: cs42l42: Correct definition of ADC Volume control ieee802154: hwsim: fix GPF in hwsim_new_edge_nl ieee802154: hwsim: fix GPF in hwsim_set_edge_lqi libnvdimm/region: Fix label activation vs errors ACPI: NFIT: Fix support for virtual SPA ranges ceph: reduce contention in ceph_check_delayed_caps() i2c: dev: zero out array used for i2c reads from userspace ASoC: intel: atom: Fix reference to PCM buffer address ASoC: xilinx: Fix reference to PCM buffer address iio: adc: Fix incorrect exit of for-loop iio: humidity: hdc100x: Add margin to the conversion time iio: adc: ti-ads7950: Ensure CS is deasserted after reading channels Linux 5.4.141 btrfs: don't flush from btrfs_delayed_inode_reserve_metadata btrfs: export and rename qgroup_reserve_meta btrfs: qgroup: don't commit transaction when we already hold the handle net: xilinx_emaclite: Do not print real IOMEM pointer btrfs: fix lockdep splat when enabling and disabling qgroups btrfs: qgroup: remove ASYNC_COMMIT mechanism in favor of reserve retry-after-EDQUOT btrfs: transaction: Cleanup unused TRANS_STATE_BLOCKED btrfs: qgroup: try to flush qgroup space when we get -EDQUOT btrfs: qgroup: allow to unreserve range without releasing other ranges btrfs: make btrfs_qgroup_reserve_data take btrfs_inode btrfs: make qgroup_free_reserved_data take btrfs_inode ovl: prevent private clone if bind mount is not allowed ppp: Fix generating ppp unit id when ifname is not specified ALSA: hda: Add quirk for ASUS Flow x13 USB:ehci:fix Kunpeng920 ehci hardware problem KVM: X86: MMU: Use the correct inherited permissions to get shadow page usb: dwc3: gadget: Avoid runtime resume if disabling pullup usb: dwc3: gadget: Disable gadget IRQ during pullup disable usb: dwc3: gadget: Clear DEP flags after stop transfers in ep disable usb: dwc3: gadget: Prevent EP queuing while stopping transfers usb: dwc3: gadget: Restart DWC3 gadget when enabling pullup usb: dwc3: gadget: Allow runtime suspend if UDC unbinded usb: dwc3: Stop active transfers before halting the controller tracing: Reject string operand in the histogram expression media: v4l2-mem2mem: always consider OUTPUT queue during poll tee: Correct inappropriate usage of TEE_SHM_DMA_BUF flag KVM: SVM: Fix off-by-one indexing when nullifying last used SEV VMCB Linux 5.4.140 arm64: fix compat syscall return truncation net/qla3xxx: fix schedule while atomic in ql_wait_for_drvr_lock and ql_adapter_reset alpha: Send stop IPI to send to online CPUs virt_wifi: fix error on connect reiserfs: check directory items on read from disk reiserfs: add check for root_inode in reiserfs_fill_super libata: fix ata_pio_sector for CONFIG_HIGHMEM bpf, selftests: Adjust few selftest result_unpriv outcomes perf/x86/amd: Don't touch the AMD64_EVENTSEL_HOSTONLY bit inside the guest soc: ixp4xx/qmgr: fix invalid __iomem access spi: meson-spicc: fix memory leak in meson_spicc_remove soc: ixp4xx: fix printing resources arm64: vdso: Avoid ISB after reading from cntvct_el0 KVM: x86/mmu: Fix per-cpu counter corruption on 32-bit builds KVM: Do not leak memory for duplicate debugfs directories KVM: x86: accept userspace interrupt only if no event is injected md/raid10: properly indicate failure when ending a failed write request pcmcia: i82092: fix a null pointer dereference bug timers: Move clearing of base::timer_running under base:: Lock serial: 8250_pci: Avoid irq sharing for MSI(-X) interrupts. serial: 8250_pci: Enumerate Elkhart Lake UARTs via dedicated driver MIPS: Malta: Do not byte-swap accesses to the CBUS UART serial: 8250: Mask out floating 16/32-bit bus bits serial: 8250_mtk: fix uart corruption issue when rx power off serial: tegra: Only print FIFO error message when an error occurs ext4: fix potential htree corruption when growing large_dir directories pipe: increase minimum default pipe size to 2 pages media: rtl28xxu: fix zero-length control request staging: rtl8712: get rid of flush_scheduled_work staging: rtl8723bs: Fix a resource leak in sd_int_dpc tpm_ftpm_tee: Free and unregister TEE shared memory during kexec optee: Fix memory leak when failing to register shm pages tee: add tee_shm_alloc_kernel_buf() optee: Clear stale cache entries during initialization tracing / histogram: Give calculation hist_fields a size scripts/tracing: fix the bug that can't parse raw_trace_func clk: fix leak on devm_clk_bulk_get_all() unwind usb: otg-fsm: Fix hrtimer list corruption usb: gadget: f_hid: idle uses the highest byte for duration usb: gadget: f_hid: fixed NULL pointer dereference usb: gadget: f_hid: added GET_IDLE and SET_IDLE handlers usb: cdns3: Fixed incorrect gadget state ALSA: usb-audio: Add registration quirk for JBL Quantum 600 ALSA: hda/realtek: add mic quirk for Acer SF314-42 firmware_loader: fix use-after-free in firmware_fallback_sysfs firmware_loader: use -ETIMEDOUT instead of -EAGAIN in fw_load_sysfs_fallback USB: serial: ftdi_sio: add device ID for Auto-M3 OP-COM v2 USB: serial: ch341: fix character loss at high transfer rates USB: serial: option: add Telit FD980 composition 0x1056 USB: usbtmc: Fix RCU stall warning Bluetooth: defer cleanup of resources in hci_unregister_dev() blk-iolatency: error out if blk_get_queue() failed in iolatency_set_limit() net: vxge: fix use-after-free in vxge_device_unregister net: fec: fix use-after-free in fec_drv_remove net: pegasus: fix uninit-value in get_interrupt_interval bnx2x: fix an error code in bnx2x_nic_load() mips: Fix non-POSIX regexp net: ipv6: fix returned variable type in ip6_skb_dst_mtu nfp: update ethtool reporting of pauseframe control sctp: move the active_key update after sh_keys is added gpio: tqmx86: really make IRQ optional net: natsemi: Fix missing pci_disable_device() in probe and remove net: phy: micrel: Fix detection of ksz87xx switch net: dsa: sja1105: invalidate dynamic FDB entries learned concurrently with statically added ones net: dsa: sja1105: overwrite dynamic FDB entries with static ones in .port_fdb_add net, gro: Set inner transport header offset in tcp/udp GRO hook dmaengine: imx-dma: configure the generic DMA type to make it work media: videobuf2-core: dequeue if start_streaming fails scsi: sr: Return correct event when media event code is 3 spi: imx: mx51-ecspi: Fix low-speed CONFIGREG delay calculation spi: imx: mx51-ecspi: Reinstate low-speed CONFIGREG delay omap5-board-common: remove not physically existing vdds_1v8_main fixed-regulator ARM: dts: am437x-l4: fix typo in can@0 node clk: stm32f4: fix post divisor setup for I2S/SAI PLLs ALSA: usb-audio: fix incorrect clock source setting arm64: dts: armada-3720-turris-mox: remove mrvl,i2c-fast-mode ARM: dts: imx: Swap M53Menlo pinctrl_power_button/pinctrl_power_out pins ARM: imx: fix missing 3rd argument in macro imx_mmdc_perf_init ARM: dts: colibri-imx6ull: limit SDIO clock to 25MHz ARM: dts: imx6qdl-sr-som: Increase the PHY reset duration to 10ms ARM: imx: add missing clk_disable_unprepare() ARM: imx: add missing iounmap() arm64: dts: ls1028a: fix node name for the sysclk ALSA: seq: Fix racy deletion of subscriber Revert "ACPICA: Fix memory leak caused by _CID repair function" ANDROID: GKI: fix up android/abi_gki_aarch64.xml merge Linux 5.4.139 spi: mediatek: Fix fifo transfer bpf, selftests: Adjust few selftest outcomes wrt unreachable code bpf, selftests: Add a verifier test for assigning 32bit reg states to 64bit ones bpf: Test_verifier, add alu32 bounds tracking tests bpf: Fix leakage under speculation on mispredicted branches bpf: Do not mark insn as seen under speculative path verification bpf: Inherit expanded/patched seen count from old aux data Revert "watchdog: iTCO_wdt: Account for rebooting on second timeout" firmware: arm_scmi: Add delayed response status check firmware: arm_scmi: Ensure drivers provide a probe function Revert "Bluetooth: Shutdown controller after workqueues are flushed or cancelled" ACPI: fix NULL pointer dereference nvme: fix nvme_setup_command metadata trace event net: Fix zero-copy head len calculation. qed: fix possible unpaired spin_{un}lock_bh in _qed_mcp_cmd_and_union() r8152: Fix potential PM refcount imbalance ASoC: tlv320aic31xx: fix reversed bclk/wclk master bits spi: stm32h7: fix full duplex irq handler handling regulator: rt5033: Fix n_voltages settings for BUCK and LDO btrfs: fix lost inode on log replay after mix of fsync, rename and inode eviction btrfs: fix race causing unnecessary inode logging during link and rename btrfs: do not commit logs and transactions during link and rename operations btrfs: delete duplicated words + other fixes in comments Linux 5.4.138 can: j1939: j1939_session_deactivate(): clarify lifetime of session object i40e: Add additional info to PHY type error Revert "perf map: Fix dso->nsinfo refcounting" powerpc/pseries: Fix regression while building external modules PCI: mvebu: Setup BAR0 in order to fix MSI can: hi311x: fix a signedness bug in hi3110_cmd() sis900: Fix missing pci_disable_device() in probe and remove tulip: windbond-840: Fix missing pci_disable_device() in probe and remove sctp: fix return value check in __sctp_rcv_asconf_lookup net/mlx5e: Fix nullptr in mlx5e_hairpin_get_mdev() net/mlx5: Fix flow table chaining net: llc: fix skb_over_panic mlx4: Fix missing error code in mlx4_load_one() net: Set true network header for ECN decapsulation tipc: fix sleeping in tipc accept routine i40e: Fix log TC creation failure when max num of queues is exceeded i40e: Fix queue-to-TC mapping on Tx i40e: Fix firmware LLDP agent related warning i40e: Fix logic of disabling queues netfilter: nft_nat: allow to specify layer 4 protocol NAT only netfilter: conntrack: adjust stop timestamp to real expiry value cfg80211: Fix possible memory leak in function cfg80211_bss_update nfc: nfcsim: fix use after free during module unload NIU: fix incorrect error return, missed in previous revert HID: wacom: Re-enable touch by default for Cintiq 24HDT / 27QHDT can: esd_usb2: fix memory leak can: ems_usb: fix memory leak can: usb_8dev: fix memory leak can: mcba_usb_start(): add missing urb->transfer_dma initialization can: raw: raw_setsockopt(): fix raw_rcv panic for sock UAF can: j1939: j1939_xtp_rx_dat_one(): fix rxtimer value between consecutive TP.DT to 750ms ocfs2: issue zeroout to EOF blocks ocfs2: fix zero out valid data KVM: add missing compat KVM_CLEAR_DIRTY_LOG x86/kvm: fix vcpu-id indexed array sizes Revert "ACPI: resources: Add checks for ACPI IRQ override" btrfs: mark compressed range uptodate only if all bio succeed btrfs: fix rw device counting in __btrfs_free_extra_devids x86/asm: Ensure asm/proto.h can be included stand-alone net_sched: check error pointer in tcf_dump_walker() Linux 5.4.137 ipv6: ip6_finish_output2: set sk into newly allocated nskb ARM: dts: versatile: Fix up interrupt controller node names iomap: remove the length variable in iomap_seek_hole iomap: remove the length variable in iomap_seek_data cifs: fix the out of range assignment to bit fields in parse_server_interfaces firmware: arm_scmi: Fix range check for the maximum number of pending messages firmware: arm_scmi: Fix possible scmi_linux_errmap buffer overflow hfs: add lock nesting notation to hfs_find_init hfs: fix high memory mapping in hfs_bnode_read hfs: add missing clean-up in hfs_fill_super ipv6: allocate enough headroom in ip6_finish_output2() sctp: move 198 addresses from unusable to private scope net: annotate data race around sk_ll_usec net/802/garp: fix memleak in garp_request_join() net/802/mrp: fix memleak in mrp_request_join() cgroup1: fix leaked context root causing sporadic NULL deref in LTP workqueue: fix UAF in pwq_unbound_release_workfn() af_unix: fix garbage collect vs MSG_PEEK KVM: x86: determine if an exception has an error code only when injecting it. tools: Allow proper CC/CXX/... override with LLVM=1 in Makefile.include selftest: fix build error in tools/testing/selftests/vm/userfaultfd.c ANDROID: Update android/abi_gki_aarch64.xml ANDROID: Update android/abi_gki_aarch64_goldfish Linux 5.4.136 xhci: add xhci_get_virt_ep() helper perf inject: Close inject.output on exit PCI: Mark AMD Navi14 GPU ATS as broken btrfs: compression: don't try to compress if we don't have enough pages iio: accel: bma180: Fix BMA25x bandwidth register values iio: accel: bma180: Use explicit member assignment net: bcmgenet: ensure EXT_ENERGY_DET_MASK is clear net: dsa: mv88e6xxx: use correct .stats_set_histogram() on Topaz drm: Return -ENOTTY for non-drm ioctls nds32: fix up stack guard gap rbd: always kick acquire on "acquired" and "released" notifications rbd: don't hold lock_rwsem while running_list is being drained hugetlbfs: fix mount mode command line processing userfaultfd: do not untag user pointers selftest: use mmap instead of posix_memalign to allocate memory ixgbe: Fix packet corruption due to missing DMA sync media: ngene: Fix out-of-bounds bug in ngene_command_config_free_buf() btrfs: check for missing device in btrfs_trim_fs tracing: Fix bug in rb_per_cpu_empty() that might cause deadloop. tracing/histogram: Rename "cpu" to "common_cpu" firmware/efi: Tell memblock about EFI iomem reservations usb: dwc2: gadget: Fix sending zero length packet in DDMA mode. USB: serial: cp210x: add ID for CEL EM3588 USB ZigBee stick USB: serial: cp210x: fix comments for GE CS1000 USB: serial: option: add support for u-blox LARA-R6 family usb: renesas_usbhs: Fix superfluous irqs happen after usb_pkt_pop() usb: max-3421: Prevent corruption of freed memory USB: usb-storage: Add LaCie Rugged USB3-FW to IGNORE_UAS usb: hub: Fix link power management max exit latency (MEL) calculations usb: hub: Disable USB 3 device initiated lpm if exit latency is too high KVM: PPC: Book3S HV Nested: Sanitise H_ENTER_NESTED TM state KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow xhci: Fix lost USB 2 remote wake ALSA: hdmi: Expose all pins on MSI MS-7C94 board ALSA: sb: Fix potential ABBA deadlock in CSP driver ALSA: usb-audio: Add registration quirk for JBL Quantum headsets ALSA: usb-audio: Add missing proc text entry for BESPOKEN type s390/boot: fix use of expolines in the DMA code s390/ftrace: fix ftrace_update_ftrace_func implementation Revert "MIPS: add PMD table accounting into MIPS'pmd_alloc_one" proc: Avoid mixing integer types in mem_rw() drm/panel: raspberrypi-touchscreen: Prevent double-free net: sched: cls_api: Fix the the wrong parameter sctp: update active_key for asoc when old key is being replaced nvme: set the PRACT bit when using Write Zeroes with T10 PI r8169: Avoid duplicate sysfs entry creation error afs: Fix tracepoint string placement with built-in AFS Revert "USB: quirks: ignore remote wake-up on Fibocom L850-GL LTE modem" nvme-pci: don't WARN_ON in nvme_reset_work if ctrl.state is not RESETTING ipv6: fix another slab-out-of-bounds in fib6_nh_flush_exceptions net/sched: act_skbmod: Skip non-Ethernet packets net: hns3: fix rx VLAN offload state inconsistent issue net/tcp_fastopen: fix data races around tfo_active_disable_stamp net: hisilicon: rename CACHE_LINE_MASK to avoid redefinition bnxt_en: Check abort error state in bnxt_half_open_nic() bnxt_en: Add missing check for BNXT_STATE_ABORT_ERR in bnxt_fw_rset_task() bnxt_en: Refresh RoCE capabilities in bnxt_ulp_probe() bnxt_en: Improve bnxt_ulp_stop()/bnxt_ulp_start() call sequence. spi: cadence: Correct initialisation of runtime PM again scsi: target: Fix protect handling in WRITE SAME(32) scsi: iscsi: Fix iface sysfs attr detection netrom: Decrease sock refcount when sock timers expire net: sched: fix memory leak in tcindex_partial_destroy_work KVM: PPC: Fix kvm_arch_vcpu_ioctl vcpu_load leak KVM: PPC: Book3S: Fix CONFIG_TRANSACTIONAL_MEM=n crash net: decnet: Fix sleeping inside in af_decnet efi/tpm: Differentiate missing and invalid final event log table. net: fix uninit-value in caif_seqpkt_sendmsg bpftool: Check malloc return value in mount_bpffs_for_pin bpf, sockmap, tcp: sk_prot needs inuse_idx set for proc stats s390/bpf: Perform r1 range checking before accessing jit->seen_reg[r1] liquidio: Fix unintentional sign extension issue on left shift of u16 ASoC: rt5631: Fix regcache sync errors on resume spi: mediatek: fix fifo rx mode regulator: hi6421: Fix getting wrong drvdata regulator: hi6421: Use correct variable type for regmap api val argument spi: stm32: fixes pm_runtime calls in probe/remove spi: stm32: Use dma_request_chan() instead dma_request_slave_channel() spi: imx: add a check for speed_hz before calculating the clock perf data: Close all files in close_dir() perf probe-file: Delete namelist in del_events() on the error path perf lzma: Close lzma stream on exit perf script: Fix memory 'threads' and 'cpus' leaks on exit perf dso: Fix memory leak in dso__new_map() perf test event_update: Fix memory leak of evlist perf test session_topology: Delete session->evlist perf env: Fix sibling_dies memory leak perf probe: Fix dso->nsinfo refcounting perf map: Fix dso->nsinfo refcounting nvme-pci: do not call nvme_dev_remove_admin from nvme_remove cxgb4: fix IRQ free race during driver unload pwm: sprd: Ensure configuring period and duty_cycle isn't wrongly skipped selftests: icmp_redirect: IPv6 PMTU info should be cleared after redirect selftests: icmp_redirect: remove from checking for IPv6 route get ipv6: fix 'disable_policy' for fwd packets gve: Fix an error handling path in 'gve_probe()' igb: Fix position of assignment to *ring igb: Check if num of q_vectors is smaller than max before array access iavf: Fix an error handling path in 'iavf_probe()' e1000e: Fix an error handling path in 'e1000_probe()' fm10k: Fix an error handling path in 'fm10k_probe()' igb: Fix an error handling path in 'igb_probe()' igc: Fix an error handling path in 'igc_probe()' igc: Prefer to use the pci_release_mem_regions method ixgbe: Fix an error handling path in 'ixgbe_probe()' igc: change default return of igc_read_phy_reg() igb: Fix use-after-free error during reset igc: Fix use-after-free error during reset Linux 5.4.135 udp: annotate data races around unix_sk(sk)->gso_size perf test bpf: Free obj_buf bpftool: Properly close va_list 'ap' by va_end() on error ipv6: tcp: drop silly ICMPv6 packet too big messages tcp: annotate data races around tp->mtu_info dma-buf/sync_file: Don't leak fences on merge failure net: fddi: fix UAF in fza_probe net: validate lwtstate->data before returning from skb_tunnel_info() net: send SYNACK packet with accepted fwmark net: ti: fix UAF in tlan_remove_one net: qcom/emac: fix UAF in emac_remove net: moxa: fix UAF in moxart_mac_probe net: ip_tunnel: fix mtu calculation for ETHER tunnel devices net: bcmgenet: Ensure all TX/RX queues DMAs are disabled net: bridge: sync fdb to new unicast-filtering ports net/sched: act_ct: fix err check for nf_conntrack_confirm netfilter: ctnetlink: suspicious RCU usage in ctnetlink_dump_helpinfo net: ipv6: fix return value of ip6_skb_dst_mtu net: dsa: mv88e6xxx: enable .rmu_disable() on Topaz net: dsa: mv88e6xxx: enable .port_set_policy() on Topaz dm writecache: return the exact table values that were set mm: slab: fix kmem_cache_create failed when sysfs node not destroyed usb: cdns3: Enable TDL_CHK only for OUT ep f2fs: Show casefolding support only when supported arm64: dts: marvell: armada-37xx: move firmware node to generic dtsi file firmware: turris-mox-rwtm: add marvell,armada-3700-rwtm-firmware compatible string arm64: dts: armada-3720-turris-mox: add firmware node cifs: prevent NULL deref in cifs_compose_mount_options() s390: introduce proper type handling call_on_stack() macro sched/fair: Fix CFS bandwidth hrtimer expiry type scsi: qedf: Add check to synchronize abort and flush scsi: libfc: Fix array index out of bound exception scsi: libsas: Add LUN number check in .slave_alloc callback scsi: aic7xxx: Fix unintentional sign extension issue on left shift of u8 rtc: max77686: Do not enforce (incorrect) interrupt trigger type kbuild: mkcompile_h: consider timestamp if KBUILD_BUILD_TIMESTAMP is set thermal/core: Correct function name thermal_zone_device_unregister() arm64: dts: imx8mq: assign PCIe clocks arm64: dts: ls208xa: remove bus-num from dspi node firmware: tegra: bpmp: Fix Tegra234-only builds soc/tegra: fuse: Fix Tegra234-only builds ARM: dts: stm32: move stmmac axi config in ethernet node on stm32mp15 ARM: dts: stm32: fix i2c node name on stm32f746 to prevent warnings ARM: dts: rockchip: fix supply properties in io-domains nodes arm64: dts: juno: Update SCPI nodes as per the YAML schema ARM: dts: stm32: fix timer nodes on STM32 MCU to prevent warnings ARM: dts: stm32: fix RCC node name on stm32f429 MCU ARM: dts: stm32: fix gpio-keys node on STM32 MCU boards ARM: dts: am437x-gp-evm: fix ti,no-reset-on-init flag for gpios ARM: dts: am57xx-cl-som-am57x: fix ti,no-reset-on-init flag for gpios kbuild: sink stdout from cmd for silent build rtc: mxc_v2: add missing MODULE_DEVICE_TABLE ARM: imx: pm-imx5: Fix references to imx5_cpu_suspend_info ARM: dts: imx6: phyFLEX: Fix UART hardware flow control ARM: dts: Hurricane 2: Fix NAND nodes names ARM: dts: BCM63xx: Fix NAND nodes names ARM: NSP: dts: fix NAND nodes names ARM: Cygnus: dts: fix NAND nodes names ARM: brcmstb: dts: fix NAND nodes names reset: ti-syscon: fix to_ti_syscon_reset_data macro arm64: dts: rockchip: Fix power-controller node names for rk3328 arm64: dts: rockchip: Fix power-controller node names for px30 ARM: dts: rockchip: Fix power-controller node names for rk3288 ARM: dts: rockchip: Fix power-controller node names for rk3188 ARM: dts: rockchip: Fix power-controller node names for rk3066a ARM: dts: rockchip: Fix IOMMU nodes properties on rk322x ARM: dts: rockchip: Fix the timer clocks order arm64: dts: rockchip: fix pinctrl sleep nodename for rk3399.dtsi ARM: dts: rockchip: fix pinctrl sleep nodename for rk3036-kylin and rk3288 ARM: dts: gemini: add device_type on pci ARM: dts: gemini: rename mdio to the right name Conflicts: drivers/mmc/host/sdhci-msm.c drivers/scsi/ufs/ufshcd.c drivers/staging/android/ion/heaps/ion_cma_heap.c drivers/usb/dwc3/gadget.c include/linux/oom.h kernel/time/hrtimer.c mm/oom_kill.c net/qrtr/qrtr.c Change-Id: I1c29c9ef4233acd05550475b29b8f7d30b6c452d Signed-off-by: Srinivasarao Pathipati <quic_spathi@quicinc.com>	2021-11-05 17:27:33 +05:30
Greg Kroah-Hartman	5b84549191	Merge tag 'android11-5.4.147_r00' android11-5.4 ... This is the merge of the upstream LTS release of 5.4.147 into the android11-5.4 branch. It contains the following commits: 5e10f36746 Merge 5.4.147 into android11-5.4-lts 48a24510c3 Linux 5.4.147 1f8ee02449 Revert "time: Handle negative seconds correctly in timespec64_to_ns()" dc15f641c6 Revert "posix-cpu-timers: Force next expiration recalc after itimer reset" 541e757944 Revert "block: nbd: add sanity check for first_minor" 5f3ecbf4d5 Revert "Bluetooth: Move shutdown callback before flushing tx and rx queue" d756462d85 Merge 5.4.146 into android11-5.4-lts 245f15a48c Linux 5.4.146 b40facee46 clk: kirkwood: Fix a clocking boot regression 8810c51077 backlight: pwm_bl: Improve bootloader/kernel device handover 5de2ee621b fbmem: don't allow too huge resolutions 4a95b04afa IMA: remove the dependency on CRYPTO_MD5 c69935f0b0 IMA: remove -Wmissing-prototypes warning 85b0726d5b fuse: flush extending writes 8a98ced6e1 fuse: truncate pagecache on atomic_o_trunc 06dad664d4 KVM: nVMX: Unconditionally clear nested.pi_pending on nested VM-Enter 1735cec1e8 KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted 20fff3ef33 KVM: s390: index kvm->arch.idle_mask by vcpu_idx 0323ab5b25 x86/resctrl: Fix a maybe-uninitialized build warning treated as error 51f4575ca1 perf/x86/amd/ibs: Extend PERF_PMU_CAP_NO_EXCLUDE to IBS Op 03c3e977ee tty: Fix data race between tiocsti() and flush_to_ldisc() 7a25a0a94c time: Handle negative seconds correctly in timespec64_to_ns() ae968e270f bpf: Fix pointer arithmetic mask tightening under state pruning a0a4778fea bpf: verifier: Allocate idmap scratch in verifier env f5893af270 bpf: Fix leakage due to insufficient speculative store bypass mitigation e80c3533c3 bpf: Introduce BPF nospec instruction for mitigating Spectre v4 1c9424a765 ipv4: fix endianness issue in inet_rtm_getroute_build_skb() b3fe6d1921 octeontx2-af: Fix loop in free and unmap counter 8216d7157b net: qualcomm: fix QCA7000 checksum handling 4648917e49 net: sched: Fix qdisc_rate_table refcount leak when get tcf_block failed e46e23c289 ipv4: make exception cache less predictible f73cbdd1b8 ipv6: make exception cache less predictible aa167dcde4 brcmfmac: pcie: fix oops on failure to resume and reprobe 5debec63a2 bcma: Fix memory leak for internally-handled cores 574e563649 ath6kl: wmi: fix an error code in ath6kl_wmi_sync_point() d946e685d6 ASoC: wcd9335: Disable irq on slave ports in the remove function f3ec07f832 ASoC: wcd9335: Fix a memory leak in the error handling path of the probe function a6088f4ed3 ASoC: wcd9335: Fix a double irq free in the remove function 7bfa680f3b tty: serial: fsl_lpuart: fix the wrong mapbase value 0f1375fa69 usb: bdc: Fix an error handling path in 'bdc_probe()' when no suitable DMA config is available 06203abb72 usb: ehci-orion: Handle errors of clk_prepare_enable() in probe a0a9ecca2d i2c: mt65xx: fix IRQ check b444064a0e CIFS: Fix a potencially linear read overflow e37eeaf950 bpf: Fix possible out of bound write in narrow load handling fb8e695e9c mmc: moxart: Fix issue with uninitialized dma_slave_config 48b1f117e8 mmc: dw_mmc: Fix issue with uninitialized dma_slave_config 57314d8414 ASoC: Intel: Skylake: Fix module resource and format selection 92397571c2 ASoC: Intel: Skylake: Leave data as is when invoking TLV IPCs b58cf18e38 rsi: fix an error code in rsi_probe() d82fe3dd0b rsi: fix error code in rsi_load_9116_firmware() 4be8deab6f i2c: s3c2410: fix IRQ check da3e5f3204 i2c: iop3xx: fix deferred probing 2da3272ae0 Bluetooth: add timeout sanity check to hci_inquiry 70d71611eb mm/swap: consider max pages in iomap_swapfile_add_extent 8f5e26053c usb: gadget: mv_u3d: request_irq() after initializing UDC eb3c6a2501 nfsd4: Fix forced-expiry locking 81e69d3fdd lockd: Fix invalid lockowner cast after vfs_test_lock e1c02e2e6a mac80211: Fix insufficient headroom issue for AMSDU 606668e24a usb: phy: tahvo: add IRQ check ecf18ac8ff usb: host: ohci-tmio: add IRQ check abbcd61d09 Bluetooth: Move shutdown callback before flushing tx and rx queue 93ec1fd04f usb: gadget: udc: renesas_usb3: Fix soc_device_match() abuse 30d9607bcd usb: phy: twl6030: add IRQ checks e1473ac285 usb: phy: fsl-usb: add IRQ check 9535f55d0c usb: gadget: udc: at91: add IRQ check 05e5b16b79 drm/msm/dsi: Fix some reference counted resource leaks 5ccb04c6e1 Bluetooth: fix repeated calls to sco_sock_kill c2451d5439 counter: 104-quad-8: Return error when invalid mode during ceiling_write a1194b805c arm64: dts: exynos: correct GIC CPU interfaces address range on Exynos7 1b6fcd1037 drm/msm/dpu: make dpu_hw_ctl_clear_all_blendstages clear necessary LMs 156eaacba3 PM: EM: Increase energy calculation precision 5537dc810b Bluetooth: increase BTNAMSIZ to 21 chars to fix potential buffer overflow c0faa638f0 debugfs: Return error during {full/open}_proxy_open() on rmmod f44714b4eb soc: qcom: smsm: Fix missed interrupts if state changes while masked e7997fe3e9 PCI: PM: Enable PME if it can be signaled from D3cold 9e570f3d47 PCI: PM: Avoid forcing PCI_D0 for wakeup reasons inconsistently f865b316cc media: venus: venc: Fix potential null pointer dereference on pointer fmt d2ea2f0725 media: em28xx-input: fix refcount bug in em28xx_usb_disconnect ebf570042b leds: trigger: audio: Add an activate callback to ensure the initial brightness is set 0a01dc7766 leds: lt3593: Put fwnode in any case during ->probe() e39c73563a i2c: highlander: add IRQ check fba783ddd9 net: cipso: fix warnings in netlbl_cipsov4_add_std 9fdac650c4 cgroup/cpuset: Fix a partition bug with hotplug ffde058199 net/mlx5e: Prohibit inner indir TIRs in IPoIB 87f817c560 ARM: dts: meson8b: ec100: Fix the pwm regulator supply properties e55d7cbe1f ARM: dts: meson8b: mxq: Fix the pwm regulator supply properties 4b0bbc412b ARM: dts: meson8b: odroidc1: Fix the pwm regulator supply properties f7058060c0 ARM: dts: meson8: Use a higher default GPU clock frequency 37ed461b52 tcp: seq_file: Avoid skipping sk during tcp_seek_last_pos 9521362753 drm/amdgpu/acp: Make PM domain really work 252fad3d02 netns: protect netns ID lookups with RCU bd1cd32caa 6lowpan: iphc: Fix an off-by-one check of array index c4895cf45f Bluetooth: sco: prevent information leak in sco_conn_defer_accept() a96eb96ce4 media: coda: fix frame_mem_ctrl for YUV420 and YVU420 formats 7163014d7d media: go7007: remove redundant initialization 8101492879 media: dvb-usb: Fix error handling in dvb_usb_i2c_init fa8aaa7690 media: dvb-usb: fix uninit-value in vp702x_read_mac_addr 88933f9c93 media: dvb-usb: fix uninit-value in dvb_usb_adapter_dvb_init f81c89614e soc: qcom: rpmhpd: Use corner in power_off 5b3987f583 arm64: dts: renesas: r8a77995: draak: Remove bogus adv7511w properties 6c106c7320 ARM: dts: aspeed-g6: Fix HVI3C function-group in pinctrl dtsi 004778bf39 bpf: Fix potential memleak and UAF in the verifier. fa4802c54e bpf: Fix a typo of reuseport map in bpf.h. 9a193caf9d media: cxd2880-spi: Fix an error handling path 34106f5260 soc: rockchip: ROCKCHIP_GRF should not default to y, unconditionally b928930530 media: TDA1997x: enable EDID support 43282ca83a drm/panfrost: Fix missing clk_disable_unprepare() on error in panfrost_clk_init() fc9cf22290 EDAC/i10nm: Fix NVDIMM detection 32d8a3684b spi: spi-zynq-qspi: use wait_for_completion_timeout to make zynq_qspi_exec_mem_op not interruptible 4206dbc985 spi: sprd: Fix the wrong WDG_LOAD_VAL 1f70517eac regulator: vctrl: Avoid lockdep warning in enable/disable ops d255d6a645 regulator: vctrl: Use locked regulator_get_voltage in probe path 013177ccc4 certs: Trigger creation of RSA module signing key if it's not an RSA key cc74533a47 crypto: qat - use proper type for vf_mask b3fa499d72 block: nbd: add sanity check for first_minor c60a31db39 clocksource/drivers/sh_cmt: Fix wrong setting if don't request IRQ for clock source channel 6b10d3d3a9 lib/mpi: use kcalloc in mpi_resize 57c8e2ea47 genirq/timings: Fix error return code in irq_timings_test_irqs() 2d00b22c8b spi: spi-pic32: Fix issue with uninitialized dma_slave_config b29593d069 spi: spi-fsl-dspi: Fix issue with uninitialized dma_slave_config 449884aeb3 sched: Fix UCLAMP_FLAG_IDLE setting 67da2d9c9e m68k: emu: Fix invalid free in nfeth_cleanup() c68ba4a708 s390/debug: fix debug area life cycle 7a67a00ea8 s390/kasan: fix large PMD pages address alignment check 98296eb3de udf_get_extendedattr() had no boundary checks. ae4240d1f4 fcntl: fix potential deadlock for &fasync_struct.fa_lock a6273c8c2a crypto: qat - do not export adf_iov_putmsg() 7dfa7bb69e crypto: qat - fix naming for init/shutdown VF to PF notifications 843b4e713a crypto: qat - fix reuse of completion variable 4a98826455 crypto: qat - handle both source of interrupt in VF ISR c2b3f81125 crypto: qat - do not ignore errors from enable_vf2pf_comms() 1c189ccef0 libata: fix ata_host_start() e55b627d6e s390/cio: add dev_busid sysfs entry for each subchannel 0423517520 power: supply: max17042_battery: fix typo in MAx17042_TOFF eb45ae88bf nvmet: pass back cntlid on successful completion 6cb5d6ae68 nvme-rdma: don't update queue count when failing to set io queues 3073ec7f06 nvme-tcp: don't update queue count when failing to set io queues 93cf19b4d9 bcache: add proper error unwinding in bcache_device_init e55f20798f isofs: joliet: Fix iocharset=utf8 mount option 0f5cd92e5e udf: Fix iocharset=utf8 mount option 86987cf0fb udf: Check LVID earlier cc608af36e hrtimer: Ensure timerfd notification for HIGHRES=n a845787830 hrtimer: Avoid double reprogramming in __hrtimer_start_range_ns() c322a963d5 posix-cpu-timers: Force next expiration recalc after itimer reset 28996dbb8a rcu/tree: Handle VM stoppage in stall detection b7c560ae51 sched/deadline: Fix missing clock update in migrate_task_rq_dl() 40db13e3ef crypto: omap-sham - clear dma flags only after omap_sham_update_dma_stop() ebf0f71ae3 power: supply: axp288_fuel_gauge: Report register-address on readb / writeb errors bba2b82d1b sched/deadline: Fix reset_on_fork reporting of DL tasks 53a6ef40c6 crypto: mxs-dcp - Check for DMA mapping errors 344a38789a regmap: fix the offset of register error log a5e42516a6 locking/mutex: Fix HANDOFF condition f019fa5605 Merge branch 'android11-5.4' into 'android11-5.4-lts' 80833b7bc2 ANDROID: GKI: db845c: Update symbols list and ABI for lts v5.4.144 9ccfa71ab0 Merge 5.4.145 into android11-5.4-lts a0f68fb55e Linux 5.4.145 d83f0b39e7 PCI: Call Max Payload Size-related fixup quirks early 0c8277e334 x86/reboot: Limit Dell Optiplex 990 quirk to early BIOS versions d31a4c35b9 xhci: fix unsafe memory usage in xhci tracing e00d39ca92 usb: mtu3: fix the wrong HS mult value c3ffd35014 usb: mtu3: use @mult for HS isoc or intr 00b6325590 usb: host: xhci-rcar: Don't reload firmware after the completion 7a74ae301c ALSA: usb-audio: Add registration quirk for JBL Quantum 800 c1ea74f642 Revert "btrfs: compression: don't try to compress if we don't have enough pages" f05c74e104 x86/events/amd/iommu: Fix invalid Perf result due to IOMMU PMC power-gating b1ca1665e6 Revert "r8169: avoid link-up interrupt issue on RTL8106e if user enables ASPM" cf1222b877 mm/page_alloc: speed up the iteration of max_order 17d409c83e net: ll_temac: Remove left-over debug message ccadb91437 powerpc/boot: Delete unneeded .globl _zimage_start 295501c77c ipv4/icmp: l3mdev: Perform icmp error route lookup on source device routing table (v2) 6dec8e17b8 USB: serial: mos7720: improve OOM-handling in read_mos_reg() d84708451d igmp: Add ip_mc_list lock in ip_check_mc_rcu cd8ad6ed9a media: stkwebcam: fix memory leak in stk_camera_probe 9febc9153f ARC: wireup clone3 syscall 417b11d325 ALSA: pcm: fix divide error in snd_pcm_lib_ioctl cf28619cd9 ALSA: hda/realtek: Workaround for conflicting SSID on ASUS ROG Strix G17 a8146f1490 ARM: 8918/2: only build return_address() if needed ebad44b643 cryptoloop: add a deprecation warning d12526ddf5 perf/x86/amd/power: Assign pmu.module be1f76fcee perf/x86/amd/ibs: Work around erratum #1197 861118d64e perf/x86/intel/pt: Fix mask of num_address_ranges 40d23de514 qede: Fix memset corruption 468623f696 net: macb: Add a NULL check on desc_ptp 50f73f31ae qed: Fix the VF msix vectors flow 92abb09f7a reset: reset-zynqmp: Fixed the argument data type b820c4c651 gpu: ipu-v3: Fix i.MX IPU-v3 offset calculations for (semi)planar U/V formats 48051387fa xtensa: fix kconfig unmet dependency warning for HAVE_FUTEX_CMPXCHG 56c77c1b52 kthread: Fix PF_KTHREAD vs to_kthread() race af3cf928b9 ubifs: report correct st_size for encrypted symlinks aa4e216156 f2fs: report correct st_size for encrypted symlinks 52d8e5b0ab ext4: report correct st_size for encrypted symlinks 228a4203d8 fscrypt: add fscrypt_symlink_getattr() for computing st_size 9b3849ba66 ext4: fix race writing to an inline_data file while its xattrs are changing 8ac6727e49 Revert "once: Fix panic when module unload" 2e0ca55ea4 Merge 5.4.144 into android11-5.4-lts c6bf0ed9d1 Linux 5.4.144 0634c0f919 audit: move put_tree() to avoid trim_trees refcount underflow and UAF cab0003311 net: don't unconditionally copy_from_user a struct ifreq for socket ioctls 6752b3b062 Revert "parisc: Add assembly implementations for memset, strlen, strcpy, strncpy and strcat" 67871ada3a Revert "floppy: reintroduce O_NDELAY fix" d7f7eca72e btrfs: fix NULL pointer dereference when deleting device by invalid id e644da7ace arm64: dts: qcom: msm8994-angler: Fix gpio-reserved-ranges 85-88 4f76285f6d KVM: x86/mmu: Treat NX as used (not reserved) for all !TDP shadow MMUs 620681d720 net: dsa: mt7530: fix VLAN traffic leaks again 38adbf21f3 bpf: Fix cast to pointer from integer of different size warning 812ee47ad7 bpf: Track contents of read-only maps as scalars f441801520 vt_kdsetmode: extend console locking 8a19e00450 btrfs: fix race between marking inode needs to be logged and log syncing f3a1ac258e net/rds: dma_map_sg is entitled to merge entries ad6a2bc758 drm/nouveau/disp: power down unused DP links during init 689179c462 drm: Copy drm_wait_vblank to user before returning 18ceb99f84 qed: Fix null-pointer dereference in qed_rdma_create_qp() f1a0db49ab qed: qed ll2 race condition fixes 73ba9e4ece vringh: Use wiov->used to check for read/write desc order ee52acae6f virtio_pci: Support surprise removal of virtio pci device be9b79e841 virtio: Improve vq->broken access to avoid any compiler optimization 0d4ba693db opp: remove WARN when no valid OPPs remain baf56a1d81 perf/x86/intel/uncore: Fix integer overflow on 23 bit left shift of a u32 0ad96094ab usb: gadget: u_audio: fix race condition on endpoint stop c5c2b4ca50 drm/i915: Fix syncmap memory leak 2f3cefa6ab net: hns3: fix get wrong pfc_en when query PFC configuration 6f0c0b35e2 net: hns3: fix duplicate node in VLAN list 951805c23d net: hns3: clear hardware resource when loading driver 08162f6564 rtnetlink: Return correct error on changing device netns f58e42d192 net: marvell: fix MVNETA_TX_IN_PRGRS bit number 45454400a6 xgene-v2: Fix a resource leak in the error handling path of 'xge_probe()' 53b480e68c ip_gre: add validation for csum_start bb8ca7e2e6 RDMA/efa: Free IRQ vectors on error flow e29565b451 e1000e: Fix the max snoop/no-snoop latency for 10M 8a21e84334 IB/hfi1: Fix possible null-pointer dereference in _extend_sdma_tx_descs() 944a50f56f RDMA/bnxt_re: Add missing spin lock initialization 28b1895410 scsi: core: Fix hang of freezing queue between blocking and running device 628c582854 usb: dwc3: gadget: Stop EP0 transfers during pullup disable d9da281c8f usb: dwc3: gadget: Fix dwc3_calc_trbs_left() 21880abf19 USB: serial: option: add new VID/PID to support Fibocom FG150 2e098e91ee Revert "USB: serial: ch341: fix character loss at high transfer rates" 16b281a70a can: usb: esd_usb2: esd_usb2_rx_event(): fix the interchange of the CAN RX and TX error counters 765437d1f0 mm, oom: make the calculation of oom badness more accurate 1cccf5c030 mmc: sdhci-msm: Update the software timeout value for sdhc aec1e470d9 ovl: fix uninitialized pointer read in ovl_lookup_real_one() 57bd5b59f1 once: Fix panic when module unload 5892f910f4 netfilter: conntrack: collect all entries in one cycle 7c95c89b69 ARC: Fix CONFIG_STACKDEPOT a6b049aeef net: qrtr: fix another OOB Read in qrtr_endpoint_post feaf47115a Merge branch 'android11-5.4' into 'android11-5.4-lts' 4a23ba6f12 Merge branch 'android11-5.4' into 'android11-5.4-lts' 406300927b Revert "virtio: Protect vqs list access" 874997f95f Merge 5.4.143 into android11-5.4-lts 2d724dbd16 Revert "net: igmp: fix data-race in igmp_ifc_timer_expire()" 50637be299 Revert "net: igmp: increase size of mr_ifc_count" f5f155f4d6 Revert "PCI/MSI: Protect msi_desc::masked for multi-MSI" 5395faca89 Merge 5.4.142 into android11-5.4-lts 48266f7c1b Merge branch 'android11-5.4' into 'android11-5.4-lts' fd80923202 Linux 5.4.143 4bf1941581 netfilter: nft_exthdr: fix endianness of tcp option cast e4fd994f02 fs: warn about impending deprecation of mandatory locks 41c7f46c89 mm: memcontrol: fix occasional OOMs due to proportional memory.low reclaim 1a3aa81444 mm, memcg: avoid stale protection values when cgroup is above protection 9c1c449dcc ASoC: intel: atom: Fix breakage for PCM buffer address setup 846ba58a7c PCI: Increase D3 delay for AMD Renoir/Cezanne XHCI 548b75f490 btrfs: prevent rename2 from exchanging a subvol with a directory from different parents 0fc6a9c202 ipack: tpci200: fix memory leak in the tpci200_register 280d66b317 ipack: tpci200: fix many double free issues in tpci200_pci_probe cb7aa51031 slimbus: ngd: reset dma setup during runtime pm abce32d0f7 slimbus: messaging: check for valid transaction id 0786d315f5 slimbus: messaging: start transaction ids from 1 instead of zero 20c2f141b1 tracing / histogram: Fix NULL pointer dereference on strcmp() on NULL event name 8fbfebe188 ALSA: hda - fix the 'Capture Switch' value change notifications 85e60614d1 mmc: dw_mmc: Fix hang on data CRC error 4f6c9caf7b ovl: add splice file read write helper 85813f1f9e iavf: Fix ping is lost after untrusted VF had tried to change MAC a498115dcd i40e: Fix ATR queue selection 1b8a8fba78 ovs: clear skb->tstamp in forwarding path 84dbbf5482 net: mdio-mux: Handle -EPROBE_DEFER correctly 453486e79e net: mdio-mux: Don't ignore memory allocation errors 6b70c67849 net: qlcnic: add missed unlock in qlcnic_83xx_flash_read32 da92ce3645 virtio-net: use NETIF_F_GRO_HW instead of NETIF_F_LRO 9aeadce8e3 virtio-net: support XDP when not more queues 3ed7cf8386 vrf: Reset skb conntrack connection on VRF rcv 447b160289 bnxt_en: Add missing DMA memory barriers c9566df334 ptp_pch: Restore dependency on PCI a73b9aa142 net: 6pack: fix slab-out-of-bounds in decode_data 2bc7571343 bnxt: disable napi before canceling DIM a9fb0f1559 bnxt: don't lock the tx queue from napi poll 1fe038030c bpf: Clear zext_dst of dead insns 73a45f75a0 vhost: Fix the calculation in vhost_overflow() b9a59636c4 virtio: Protect vqs list access b264e37b35 dccp: add do-while-0 stubs for dccp_pr_debug macros 9112ebc299 cpufreq: armada-37xx: forbid cpufreq for 1.2 GHz variant cb9a9d5fe6 iommu: Check if group is NULL before remove device 911a8141ef Bluetooth: hidp: use correct wait queue when removing ctrl_wait 5b14c1f16e drm/amd/display: Fix Dynamic bpp issue with 8K30 with Navi 1X f92dc3a89d net: usb: lan78xx: don't modify phy_device state concurrently be70436799 ARM: dts: nomadik: Fix up interrupt controller node names 69aa1a1a56 scsi: core: Fix capacity set to zero after offlinining device 935de7ec7a scsi: core: Avoid printing an error if target_alloc() returns -ENXIO 7a721a1e18 scsi: scsi_dh_rdac: Avoid crash during rdac_bus_attach() 9900e06ae6 scsi: megaraid_mm: Fix end of loop tests for list_for_each_entry() e37cf26bd5 dmaengine: of-dma: router_xlate to return -EPROBE_DEFER if controller is not yet available 12d1322d93 ARM: dts: am43x-epos-evm: Reduce i2c0 bus speed for tps65218 11145efd29 dmaengine: usb-dmac: Fix PM reference leak in usb_dmac_probe() 9c97a05392 dmaengine: xilinx_dma: Fix read-after-free bug when terminating transfers fc566b5a21 USB: core: Avoid WARNings for 0-length descriptor requests 1bd505c814 media: drivers/media/usb: fix memory leak in zr364xx_probe 705660a6d9 media: zr364xx: fix memory leaks in probe() 79dff2a3f4 media: zr364xx: propagate errors from zr364xx_start_readpipe() 7305d6d407 mtd: cfi_cmdset_0002: fix crash when erasing/writing AMD cards 23f77ad13f ath9k: Postpone key cache entry deletion for TXQ frames reference it c6feaf806d ath: Modify ath_key_delete() to not need full key entry b7d593705e ath: Export ath_hw_keysetmac() add283e251 ath9k: Clear key cache explicitly on disabling hardware 0c049ce432 ath: Use safer key clearing with key cache entries 172b91bbbb x86/fpu: Make init_fpstate correct with optimized XSAVE 81d152c8da ext4: fix EXT4_MAX_LOGICAL_BLOCK macro 62d24bac60 Merge branch 'android11-5.4' into 'android11-5.4-lts' c15b830f7c Linux 5.4.142 a17f2f2c89 KVM: nSVM: always intercept VMLOAD/VMSAVE when nested (CVE-2021-3656) 7c1c96ffb6 KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) 456fd88922 iommu/vt-d: Fix agaw for a supported 48 bit guest address width 5b5f855a79 vmlinux.lds.h: Handle clang's module.{c,d}tor sections e9b2b2b29c ceph: take snap_empty_lock atomically with snaprealm refcount change 95ff775df6 ceph: clean up locking annotation for ceph_get_snap_realm and __lookup_snap_realm 1d8c232afb ceph: add some lockdep assertions around snaprealm handling a6ff0f3f9f KVM: VMX: Use current VMCS to query WAITPKG support for MSR emulation ec25d05e18 PCI/MSI: Protect msi_desc::masked for multi-MSI 48d2439c6f PCI/MSI: Use msi_mask_irq() in pci_msi_shutdown() 386ead1d35 PCI/MSI: Correct misleading comments 76d81dec16 PCI/MSI: Do not set invalid bits in MSI mask 6b4bcbf133 PCI/MSI: Enforce MSI[X] entry updates to be visible 4495a41fbc PCI/MSI: Enforce that MSI-X table entry is masked for update 1866c8f6d4 PCI/MSI: Mask all unused MSI-X entries 3b4220c2bf PCI/MSI: Enable and mask MSI-X early 0c8dea3fd5 genirq/timings: Prevent potential array overflow in __irq_timings_store() 4dfe809271 genirq/msi: Ensure deactivation on teardown e3e54a9300 x86/resctrl: Fix default monitoring groups reporting a6b594ad74 x86/ioapic: Force affinity setup before startup db5e266694 x86/msi: Force affinity setup before startup eda32c2188 genirq: Provide IRQCHIP_AFFINITY_PRE_STARTUP 06b3477436 x86/tools: Fix objdump version check again 74451dd8bf powerpc/kprobes: Fix kprobe Oops happens in booke b74145d858 nbd: Aovid double completion of a request ad9550114d vsock/virtio: avoid potential deadlock when vsock device remove b9cd73cce5 xen/events: Fix race in set_evtchn_to_irq 4d3c5c319b net: igmp: increase size of mr_ifc_count 721ff564cc tcp_bbr: fix u32 wrap bug in round logic if bbr_init() called after 2B packets 2ce8a68a31 net: linkwatch: fix failure to restore device state across suspend/resume 33597972a2 net: bridge: fix memleak in br_add_if() f6eee53beb net: dsa: sja1105: fix broken backpressure in .port_fdb_dump 1e6a570d37 net: dsa: lantiq: fix broken backpressure in .port_fdb_dump 564f6bbd0e net: dsa: lan9303: fix broken backpressure in .port_fdb_dump a9243455e8 net: igmp: fix data-race in igmp_ifc_timer_expire() ed957c77b3 net: Fix memory leak in ieee802154_raw_deliver 13a381b8bc net: dsa: microchip: Fix ksz_read64() 991117eeee drm/meson: fix colour distortion from HDR set during vendor u-boot e114f15de8 net/mlx5: Fix return value from tracer initialization f99aa76bb8 psample: Add a fwd declaration for skbuff 9dc8e396c1 iavf: Set RSS LUT and key in reset handle path 23436edae3 net: sched: act_mirred: Reset ct info when mirror/redirect skb 9636fbfe7b ppp: Fix generating ifname when empty IFLA_IFNAME is specified 1c31ee907f net: phy: micrel: Fix link detection on ksz87xx switch" dfeb64f6e2 platform/x86: pcengines-apuv2: Add missing terminating entries to gpio-lookup tables 699db2bb96 platform/x86: pcengines-apuv2: revert wiring up simswitch GPIO as LED af7f1539cf net: dsa: mt7530: add the missing RxUnicast MIB counter d353a61860 ASoC: cs42l42: Fix LRCLK frame start edge b036452082 netfilter: nf_conntrack_bridge: Fix memory leak when error cd36a36ea4 ASoC: cs42l42: Remove duplicate control for WNF filter frequency eb789cc917 ASoC: cs42l42: Fix inversion of ADC Notch Switch control 6a33813363 ASoC: cs42l42: Don't allow SND_SOC_DAIFMT_LEFT_J 55e86f07b8 ASoC: cs42l42: Correct definition of ADC Volume control 22d2e3c6a1 ieee802154: hwsim: fix GPF in hwsim_new_edge_nl 5bac8c2a30 ieee802154: hwsim: fix GPF in hwsim_set_edge_lqi ddcf807fbb libnvdimm/region: Fix label activation vs errors bc97fde4c6 ACPI: NFIT: Fix support for virtual SPA ranges a753e3f334 ceph: reduce contention in ceph_check_delayed_caps() aa04486c41 i2c: dev: zero out array used for i2c reads from userspace c18b28e5ad ASoC: intel: atom: Fix reference to PCM buffer address aab3fa5446 ASoC: xilinx: Fix reference to PCM buffer address 60e2854acf iio: adc: Fix incorrect exit of for-loop bcac522592 iio: humidity: hdc100x: Add margin to the conversion time da7cb80905 iio: adc: ti-ads7950: Ensure CS is deasserted after reading channels 7116e6b9d8 Merge 5.4.141 into android11-5.4-lts b704883aa8 Linux 5.4.141 983d6a6b7e btrfs: don't flush from btrfs_delayed_inode_reserve_metadata ea13f678a3 btrfs: export and rename qgroup_reserve_meta 41a9b8f36d btrfs: qgroup: don't commit transaction when we already hold the handle 38b8485b72 net: xilinx_emaclite: Do not print real IOMEM pointer 654c19a7e8 btrfs: fix lockdep splat when enabling and disabling qgroups c55442cdfd btrfs: qgroup: remove ASYNC_COMMIT mechanism in favor of reserve retry-after-EDQUOT fdaf6a322f btrfs: transaction: Cleanup unused TRANS_STATE_BLOCKED 36af2de520 btrfs: qgroup: try to flush qgroup space when we get -EDQUOT 5c79287c2b btrfs: qgroup: allow to unreserve range without releasing other ranges b7a722fd75 btrfs: make btrfs_qgroup_reserve_data take btrfs_inode dfadea4061 btrfs: make qgroup_free_reserved_data take btrfs_inode 812f39ed5b ovl: prevent private clone if bind mount is not allowed eeb4742501 ppp: Fix generating ppp unit id when ifname is not specified 3460f3959d ALSA: hda: Add quirk for ASUS Flow x13 81d1a3f976 USB:ehci:fix Kunpeng920 ehci hardware problem d28adaabbb KVM: X86: MMU: Use the correct inherited permissions to get shadow page 5f4ab7e25f usb: dwc3: gadget: Avoid runtime resume if disabling pullup 1782c4af6b usb: dwc3: gadget: Disable gadget IRQ during pullup disable 54b7022f28 usb: dwc3: gadget: Clear DEP flags after stop transfers in ep disable e36245a68e usb: dwc3: gadget: Prevent EP queuing while stopping transfers 823f692508 usb: dwc3: gadget: Restart DWC3 gadget when enabling pullup 25a0625fa9 usb: dwc3: gadget: Allow runtime suspend if UDC unbinded 5f081a928d usb: dwc3: Stop active transfers before halting the controller 396f29ea0c tracing: Reject string operand in the histogram expression 28276c280f media: v4l2-mem2mem: always consider OUTPUT queue during poll 236aca7092 tee: Correct inappropriate usage of TEE_SHM_DMA_BUF flag 5b774238e8 KVM: SVM: Fix off-by-one indexing when nullifying last used SEV VMCB c33130b10f Merge 5.4.140 into android11-5.4-lts ac1d54ea63 Merge branch 'android11-5.4' into 'android11-5.4-lts' a998faa9c4 Linux 5.4.140 3c197fdd07 arm64: fix compat syscall return truncation 72fcaf6952 net/qla3xxx: fix schedule while atomic in ql_wait_for_drvr_lock and ql_adapter_reset 742e85fa9e alpha: Send stop IPI to send to online CPUs 26946d2139 virt_wifi: fix error on connect 17d7c9c940 reiserfs: check directory items on read from disk bcad6ece2a reiserfs: add check for root_inode in reiserfs_fill_super e30a88f1f5 libata: fix ata_pio_sector for CONFIG_HIGHMEM a2671d96a3 bpf, selftests: Adjust few selftest result_unpriv outcomes 4892b4f324 perf/x86/amd: Don't touch the AMD64_EVENTSEL_HOSTONLY bit inside the guest d6cf5342fa soc: ixp4xx/qmgr: fix invalid __iomem access a5bf7ef13e spi: meson-spicc: fix memory leak in meson_spicc_remove 27991c78d6 soc: ixp4xx: fix printing resources 07fd256d53 arm64: vdso: Avoid ISB after reading from cntvct_el0 90e498ef3f KVM: x86/mmu: Fix per-cpu counter corruption on 32-bit builds 2e1a80b934 KVM: Do not leak memory for duplicate debugfs directories 43486cd739 KVM: x86: accept userspace interrupt only if no event is injected 1b7b9713a5 md/raid10: properly indicate failure when ending a failed write request 790cb68d35 pcmcia: i82092: fix a null pointer dereference bug 42ac2c6348 timers: Move clearing of base::timer_running under base:: Lock 8211bb20da serial: 8250_pci: Avoid irq sharing for MSI(-X) interrupts. f73dcb5d63 serial: 8250_pci: Enumerate Elkhart Lake UARTs via dedicated driver 607460d386 MIPS: Malta: Do not byte-swap accesses to the CBUS UART 3eb686d01c serial: 8250: Mask out floating 16/32-bit bus bits 3b73a69962 serial: 8250_mtk: fix uart corruption issue when rx power off afdef443a8 serial: tegra: Only print FIFO error message when an error occurs 097a183f9c ext4: fix potential htree corruption when growing large_dir directories ac23a17381 pipe: increase minimum default pipe size to 2 pages f3cae04bd4 media: rtl28xxu: fix zero-length control request e2f6d5b038 staging: rtl8712: get rid of flush_scheduled_work 8f241df0e6 staging: rtl8723bs: Fix a resource leak in sd_int_dpc bbdd4a5162 tpm_ftpm_tee: Free and unregister TEE shared memory during kexec 3c712f14d8 optee: Fix memory leak when failing to register shm pages 0572199b78 tee: add tee_shm_alloc_kernel_buf() b247bf412c optee: Clear stale cache entries during initialization 7da261e6bb tracing / histogram: Give calculation hist_fields a size ba22053f5d scripts/tracing: fix the bug that can't parse raw_trace_func 8d1191f924 clk: fix leak on devm_clk_bulk_get_all() unwind ed5c9a49e6 usb: otg-fsm: Fix hrtimer list corruption 449a705fba usb: gadget: f_hid: idle uses the highest byte for duration 02f336cee5 usb: gadget: f_hid: fixed NULL pointer dereference f780a9580c usb: gadget: f_hid: added GET_IDLE and SET_IDLE handlers 134e27da54 usb: cdns3: Fixed incorrect gadget state df1c6eec4e ALSA: usb-audio: Add registration quirk for JBL Quantum 600 639b45456e ALSA: hda/realtek: add mic quirk for Acer SF314-42 d09639528b firmware_loader: fix use-after-free in firmware_fallback_sysfs 1deb6b9030 firmware_loader: use -ETIMEDOUT instead of -EAGAIN in fw_load_sysfs_fallback 0ee687e672 USB: serial: ftdi_sio: add device ID for Auto-M3 OP-COM v2 01b2c35b05 USB: serial: ch341: fix character loss at high transfer rates 9ed43cfaa7 USB: serial: option: add Telit FD980 composition 0x1056 518e81874c USB: usbtmc: Fix RCU stall warning ff29fe26ab Bluetooth: defer cleanup of resources in hci_unregister_dev() 580c10a40c blk-iolatency: error out if blk_get_queue() failed in iolatency_set_limit() ed169b054b net: vxge: fix use-after-free in vxge_device_unregister c5549876a9 net: fec: fix use-after-free in fec_drv_remove 3fed6dee16 net: pegasus: fix uninit-value in get_interrupt_interval 75cef4fc07 bnx2x: fix an error code in bnx2x_nic_load() 437ee90d7b mips: Fix non-POSIX regexp b1fa6747b9 net: ipv6: fix returned variable type in ip6_skb_dst_mtu 3e63b566d9 nfp: update ethtool reporting of pauseframe control d333503de1 sctp: move the active_key update after sh_keys is added de30346dd3 gpio: tqmx86: really make IRQ optional 9d440b5c1d net: natsemi: Fix missing pci_disable_device() in probe and remove 6934040698 net: phy: micrel: Fix detection of ksz87xx switch 2b8ab7aec0 net: dsa: sja1105: invalidate dynamic FDB entries learned concurrently with statically added ones 71b0a935db net: dsa: sja1105: overwrite dynamic FDB entries with static ones in .port_fdb_add 88b7781609 net, gro: Set inner transport header offset in tcp/udp GRO hook ba3abe3f82 dmaengine: imx-dma: configure the generic DMA type to make it work ee2f81330a media: videobuf2-core: dequeue if start_streaming fails 3377f2f8c6 scsi: sr: Return correct event when media event code is 3 f588d4b7be spi: imx: mx51-ecspi: Fix low-speed CONFIGREG delay calculation b58e3d59a5 spi: imx: mx51-ecspi: Reinstate low-speed CONFIGREG delay 2c1065d40a omap5-board-common: remove not physically existing vdds_1v8_main fixed-regulator 299e3968c0 ARM: dts: am437x-l4: fix typo in can@0 node 9cbe7e21dd clk: stm32f4: fix post divisor setup for I2S/SAI PLLs 3f9eed4462 ALSA: usb-audio: fix incorrect clock source setting 16db40fc4a arm64: dts: armada-3720-turris-mox: remove mrvl,i2c-fast-mode 7c08460773 ARM: dts: imx: Swap M53Menlo pinctrl_power_button/pinctrl_power_out pins 1b1f1aa225 ARM: imx: fix missing 3rd argument in macro imx_mmdc_perf_init aecff98c3e ARM: dts: colibri-imx6ull: limit SDIO clock to 25MHz c39907335b ARM: dts: imx6qdl-sr-som: Increase the PHY reset duration to 10ms 61b71c5f51 ARM: imx: add missing clk_disable_unprepare() d88d6bba3b ARM: imx: add missing iounmap() 6c629cd023 arm64: dts: ls1028a: fix node name for the sysclk 4a830a37d3 ALSA: seq: Fix racy deletion of subscriber 0658a45335 Revert "ACPICA: Fix memory leak caused by _CID repair function" ea224455dd Merge 5.4.139 into android11-5.4-lts 8ab681fd3f ANDROID: GKI: fix up android/abi_gki_aarch64.xml merge 1d03502d2e Merge branch 'android11-5.4' into 'android11-5.4-lts' e350cd02e2 Linux 5.4.139 03ff8a4f9d spi: mediatek: Fix fifo transfer a0f66ddf05 bpf, selftests: Adjust few selftest outcomes wrt unreachable code d3796e8f6b bpf, selftests: Add a verifier test for assigning 32bit reg states to 64bit ones 8dec99abcd bpf: Test_verifier, add alu32 bounds tracking tests fd568de580 bpf: Fix leakage under speculation on mispredicted branches d2f790327f bpf: Do not mark insn as seen under speculative path verification 283d742988 bpf: Inherit expanded/patched seen count from old aux data a0a9546aae Revert "watchdog: iTCO_wdt: Account for rebooting on second timeout" 76f5314d78 firmware: arm_scmi: Add delayed response status check 1b38f70bbc firmware: arm_scmi: Ensure drivers provide a probe function 44f522298c Revert "Bluetooth: Shutdown controller after workqueues are flushed or cancelled" 38f54217b4 ACPI: fix NULL pointer dereference 0ea2f55bab nvme: fix nvme_setup_command metadata trace event b508b652d4 net: Fix zero-copy head len calculation. bf692e7ef6 qed: fix possible unpaired spin_{un}lock_bh in _qed_mcp_cmd_and_union() 6bc48348ec r8152: Fix potential PM refcount imbalance a57c75ff07 ASoC: tlv320aic31xx: fix reversed bclk/wclk master bits e2cccb839a spi: stm32h7: fix full duplex irq handler handling b72f2d9e91 regulator: rt5033: Fix n_voltages settings for BUCK and LDO 86f2a3e9aa btrfs: fix lost inode on log replay after mix of fsync, rename and inode eviction b7f0fa2192 btrfs: fix race causing unnecessary inode logging during link and rename cb006da62a btrfs: do not commit logs and transactions during link and rename operations 174c27d0f9 btrfs: delete duplicated words + other fixes in comments ae7ff75631 Merge 5.4.138 into android11-5.4-lts 7b90d57b09 Linux 5.4.138 7eef18c047 can: j1939: j1939_session_deactivate(): clarify lifetime of session object 18b536de3b i40e: Add additional info to PHY type error d21eb93110 Revert "perf map: Fix dso->nsinfo refcounting" 16447b2f5c powerpc/pseries: Fix regression while building external modules 265883d1d8 PCI: mvebu: Setup BAR0 in order to fix MSI 21734a31c9 can: hi311x: fix a signedness bug in hi3110_cmd() f4fa45b0f9 sis900: Fix missing pci_disable_device() in probe and remove dff00ce448 tulip: windbond-840: Fix missing pci_disable_device() in probe and remove e0310bbeaa sctp: fix return value check in __sctp_rcv_asconf_lookup 408614108a net/mlx5e: Fix nullptr in mlx5e_hairpin_get_mdev() ac49832306 net/mlx5: Fix flow table chaining 527feae56f net: llc: fix skb_over_panic ede4c93860 mlx4: Fix missing error code in mlx4_load_one() acb97d4b2d net: Set true network header for ECN decapsulation 851946a681 tipc: fix sleeping in tipc accept routine 194b71d28b i40e: Fix log TC creation failure when max num of queues is exceeded 834af62212 i40e: Fix queue-to-TC mapping on Tx 74aea4b715 i40e: Fix firmware LLDP agent related warning b2ab34e862 i40e: Fix logic of disabling queues 519582e44e netfilter: nft_nat: allow to specify layer 4 protocol NAT only 3a7a4cee7b netfilter: conntrack: adjust stop timestamp to real expiry value 1c04378340 cfg80211: Fix possible memory leak in function cfg80211_bss_update 6cf2abea10 nfc: nfcsim: fix use after free during module unload 6b313d0ffa NIU: fix incorrect error return, missed in previous revert c4663c1627 HID: wacom: Re-enable touch by default for Cintiq 24HDT / 27QHDT e9e2ce00ae can: esd_usb2: fix memory leak 43726620b2 can: ems_usb: fix memory leak 8198673892 can: usb_8dev: fix memory leak a051dbd17b can: mcba_usb_start(): add missing urb->transfer_dma initialization 793581441b can: raw: raw_setsockopt(): fix raw_rcv panic for sock UAF c621638d0e can: j1939: j1939_xtp_rx_dat_one(): fix rxtimer value between consecutive TP.DT to 750ms a24d87b429 ocfs2: issue zeroout to EOF blocks eaaa4284e2 ocfs2: fix zero out valid data 9bd1092148 KVM: add missing compat KVM_CLEAR_DIRTY_LOG 7a94dfe5e2 x86/kvm: fix vcpu-id indexed array sizes 2dc291582c Revert "ACPI: resources: Add checks for ACPI IRQ override" a8eec69797 btrfs: mark compressed range uptodate only if all bio succeed 57429c1ec7 btrfs: fix rw device counting in __btrfs_free_extra_devids 61f2cbc792 x86/asm: Ensure asm/proto.h can be included stand-alone 99372c38a9 net_sched: check error pointer in tcf_dump_walker() 758a7acf8b Merge 5.4.137 into android11-5.4-lts 911bc13b3a Merge branch 'android11-5.4' into 'android11-5.4-lts' 5b1de8e15f Linux 5.4.137 ebb1b38be0 ipv6: ip6_finish_output2: set sk into newly allocated nskb 6c04123962 ARM: dts: versatile: Fix up interrupt controller node names befa900533 iomap: remove the length variable in iomap_seek_hole 83fb41b2f6 iomap: remove the length variable in iomap_seek_data 302e1acd4c cifs: fix the out of range assignment to bit fields in parse_server_interfaces 02a470e3c6 firmware: arm_scmi: Fix range check for the maximum number of pending messages 289dd58431 firmware: arm_scmi: Fix possible scmi_linux_errmap buffer overflow e3acb292f0 hfs: add lock nesting notation to hfs_find_init af1178296d hfs: fix high memory mapping in hfs_bnode_read 89136a47e2 hfs: add missing clean-up in hfs_fill_super ded37d0344 ipv6: allocate enough headroom in ip6_finish_output2() f65b7f377c sctp: move 198 addresses from unusable to private scope c8d32973ee net: annotate data race around sk_ll_usec c23b9a5610 net/802/garp: fix memleak in garp_request_join() 88c4cae3ed net/802/mrp: fix memleak in mrp_request_join() eef99860c6 cgroup1: fix leaked context root causing sporadic NULL deref in LTP 7f0365b4da workqueue: fix UAF in pwq_unbound_release_workfn() 85abe0d47f af_unix: fix garbage collect vs MSG_PEEK af45f3527a KVM: x86: determine if an exception has an error code only when injecting it. 828cab3c8c tools: Allow proper CC/CXX/... override with LLVM=1 in Makefile.include 525c5513b6 selftest: fix build error in tools/testing/selftests/vm/userfaultfd.c fab7e04ebb ANDROID: Update android/abi_gki_aarch64.xml c1b1b25ee2 ANDROID: Update android/abi_gki_aarch64_goldfish ccc19b14a1 Merge 5.4.136 into android11-5.4-lts 253dccefb5 Linux 5.4.136 587f86b7a2 xhci: add xhci_get_virt_ep() helper f9d0c35556 perf inject: Close inject.output on exit a9c103fa91 PCI: Mark AMD Navi14 GPU ATS as broken 11561d2f7b btrfs: compression: don't try to compress if we don't have enough pages 4980301e1c iio: accel: bma180: Fix BMA25x bandwidth register values d04f2582c4 iio: accel: bma180: Use explicit member assignment 4e0afa8895 net: bcmgenet: ensure EXT_ENERGY_DET_MASK is clear 2a4865d154 net: dsa: mv88e6xxx: use correct .stats_set_histogram() on Topaz 7d8c06b8d2 drm: Return -ENOTTY for non-drm ioctls b5d7bebd96 nds32: fix up stack guard gap ba378b7960 rbd: always kick acquire on "acquired" and "released" notifications 13066d6628 rbd: don't hold lock_rwsem while running_list is being drained b12ead825f hugetlbfs: fix mount mode command line processing 60dbbd76f1 userfaultfd: do not untag user pointers 540eee8cbb selftest: use mmap instead of posix_memalign to allocate memory e706ac3fc8 ixgbe: Fix packet corruption due to missing DMA sync e617fa62f6 media: ngene: Fix out-of-bounds bug in ngene_command_config_free_buf() 77713fb336 btrfs: check for missing device in btrfs_trim_fs f899f24d34 tracing: Fix bug in rb_per_cpu_empty() that might cause deadloop. 59a9f75fb2 tracing/histogram: Rename "cpu" to "common_cpu" 379d8da335 firmware/efi: Tell memblock about EFI iomem reservations 281a94362b usb: dwc2: gadget: Fix sending zero length packet in DDMA mode. 167079fbfa USB: serial: cp210x: add ID for CEL EM3588 USB ZigBee stick 811c4cdf29 USB: serial: cp210x: fix comments for GE CS1000 f54ee7e16d USB: serial: option: add support for u-blox LARA-R6 family e28d28eb9b usb: renesas_usbhs: Fix superfluous irqs happen after usb_pkt_pop() 863d071dbc usb: max-3421: Prevent corruption of freed memory e4077a90e6 USB: usb-storage: Add LaCie Rugged USB3-FW to IGNORE_UAS da6f6769ee usb: hub: Fix link power management max exit latency (MEL) calculations fea6b53e63 usb: hub: Disable USB 3 device initiated lpm if exit latency is too high 962ce043ef KVM: PPC: Book3S HV Nested: Sanitise H_ENTER_NESTED TM state 2b9ffddd70 KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow c968f563cc xhci: Fix lost USB 2 remote wake a660ecde5c ALSA: hdmi: Expose all pins on MSI MS-7C94 board f73696354d ALSA: sb: Fix potential ABBA deadlock in CSP driver 7aa2dfbc6b ALSA: usb-audio: Add registration quirk for JBL Quantum headsets 46d62c3fe2 ALSA: usb-audio: Add missing proc text entry for BESPOKEN type f1754f96ab s390/boot: fix use of expolines in the DMA code 8eb521d192 s390/ftrace: fix ftrace_update_ftrace_func implementation 268132b070 Revert "MIPS: add PMD table accounting into MIPS'pmd_alloc_one" f323809e31 proc: Avoid mixing integer types in mem_rw() b71a75209f drm/panel: raspberrypi-touchscreen: Prevent double-free 2e6ab87f8e net: sched: cls_api: Fix the the wrong parameter b60461696a sctp: update active_key for asoc when old key is being replaced 9fa89c2cae nvme: set the PRACT bit when using Write Zeroes with T10 PI c50141b3d7 r8169: Avoid duplicate sysfs entry creation error f726817d6b afs: Fix tracepoint string placement with built-in AFS b22c9e433b Revert "USB: quirks: ignore remote wake-up on Fibocom L850-GL LTE modem" 69a49e7b5b nvme-pci: don't WARN_ON in nvme_reset_work if ctrl.state is not RESETTING 8302513614 ipv6: fix another slab-out-of-bounds in fib6_nh_flush_exceptions a88414fb11 net/sched: act_skbmod: Skip non-Ethernet packets c278b954cc net: hns3: fix rx VLAN offload state inconsistent issue 006ed6f4d0 net/tcp_fastopen: fix data races around tfo_active_disable_stamp 3942ba2356 net: hisilicon: rename CACHE_LINE_MASK to avoid redefinition f11f12decd bnxt_en: Check abort error state in bnxt_half_open_nic() 16ce6cb786 bnxt_en: Add missing check for BNXT_STATE_ABORT_ERR in bnxt_fw_rset_task() c993e7aadc bnxt_en: Refresh RoCE capabilities in bnxt_ulp_probe() 6ee8e6be30 bnxt_en: Improve bnxt_ulp_stop()/bnxt_ulp_start() call sequence. 35637acc98 spi: cadence: Correct initialisation of runtime PM again 2f2150bf41 scsi: target: Fix protect handling in WRITE SAME(32) a6cb717f85 scsi: iscsi: Fix iface sysfs attr detection 25df44e90f netrom: Decrease sock refcount when sock timers expire 8d7924ce85 net: sched: fix memory leak in tcindex_partial_destroy_work f38527f189 KVM: PPC: Fix kvm_arch_vcpu_ioctl vcpu_load leak b85dadd434 KVM: PPC: Book3S: Fix CONFIG_TRANSACTIONAL_MEM=n crash b3224bd318 net: decnet: Fix sleeping inside in af_decnet bd2b3b13aa efi/tpm: Differentiate missing and invalid final event log table. 9413c0abb5 net: fix uninit-value in caif_seqpkt_sendmsg 6d56299ff9 bpftool: Check malloc return value in mount_bpffs_for_pin edec100986 bpf, sockmap, tcp: sk_prot needs inuse_idx set for proc stats 58259e8b6e s390/bpf: Perform r1 range checking before accessing jit->seen_reg[r1] cc876a5618 liquidio: Fix unintentional sign extension issue on left shift of u16 42fe8f433b ASoC: rt5631: Fix regcache sync errors on resume d99aaf0736 spi: mediatek: fix fifo rx mode 08cdda8d89 regulator: hi6421: Fix getting wrong drvdata b25be6bf64 regulator: hi6421: Use correct variable type for regmap api val argument a1ade24ccc spi: stm32: fixes pm_runtime calls in probe/remove 40e203ce74 spi: stm32: Use dma_request_chan() instead dma_request_slave_channel() 24b78097a8 spi: imx: add a check for speed_hz before calculating the clock 52cff6123a perf data: Close all files in close_dir() 0f63857d10 perf probe-file: Delete namelist in del_events() on the error path 8b92ea243b perf lzma: Close lzma stream on exit 51351c6d5a perf script: Fix memory 'threads' and 'cpus' leaks on exit d2bfc3eda9 perf dso: Fix memory leak in dso__new_map() 05804a7d22 perf test event_update: Fix memory leak of evlist d257f3abdc perf test session_topology: Delete session->evlist 89d1762a4a perf env: Fix sibling_dies memory leak fd335143be perf probe: Fix dso->nsinfo refcounting 6513dee46f perf map: Fix dso->nsinfo refcounting ff9fc81fa8 nvme-pci: do not call nvme_dev_remove_admin from nvme_remove d029df83c6 cxgb4: fix IRQ free race during driver unload ae9b644344 pwm: sprd: Ensure configuring period and duty_cycle isn't wrongly skipped a37ca2a076 selftests: icmp_redirect: IPv6 PMTU info should be cleared after redirect 05364a2794 selftests: icmp_redirect: remove from checking for IPv6 route get 7f4848229e ipv6: fix 'disable_policy' for fwd packets c67fb96f54 gve: Fix an error handling path in 'gve_probe()' e33da4eeaa igb: Fix position of assignment to *ring 7dd8977736 igb: Check if num of q_vectors is smaller than max before array access d3d7cceee8 iavf: Fix an error handling path in 'iavf_probe()' 7a13a8a8a5 e1000e: Fix an error handling path in 'e1000_probe()' 9fc381db75 fm10k: Fix an error handling path in 'fm10k_probe()' 5d6a04927b igb: Fix an error handling path in 'igb_probe()' cddd53237d igc: Fix an error handling path in 'igc_probe()' 47f69d8828 igc: Prefer to use the pci_release_mem_regions method 83b2d55a51 ixgbe: Fix an error handling path in 'ixgbe_probe()' ba4fbb68fc igc: change default return of igc_read_phy_reg() 88e0720133 igb: Fix use-after-free error during reset a9508e0edf igc: Fix use-after-free error during reset f40a4f7a60 Merge 5.4.135 into android11-5.4-lts 0a0beb1f91 Linux 5.4.135 d2f7b384a7 udp: annotate data races around unix_sk(sk)->gso_size c72374978b perf test bpf: Free obj_buf 17bc942c0b bpftool: Properly close va_list 'ap' by va_end() on error 84ed834094 ipv6: tcp: drop silly ICMPv6 packet too big messages 315033cab3 tcp: annotate data races around tp->mtu_info 41f45e91c9 dma-buf/sync_file: Don't leak fences on merge failure 04b0671683 net: fddi: fix UAF in fza_probe 8aa13a8696 net: validate lwtstate->data before returning from skb_tunnel_info() 8cff7b28ab net: send SYNACK packet with accepted fwmark b7e5563f2a net: ti: fix UAF in tlan_remove_one 2b70ca9284 net: qcom/emac: fix UAF in emac_remove 463c0addb4 net: moxa: fix UAF in moxart_mac_probe 7ac4a6a74e net: ip_tunnel: fix mtu calculation for ETHER tunnel devices d5dc50ca1f net: bcmgenet: Ensure all TX/RX queues DMAs are disabled 7ecd40801e net: bridge: sync fdb to new unicast-filtering ports 813d45499f net/sched: act_ct: fix err check for nf_conntrack_confirm 2497307356 netfilter: ctnetlink: suspicious RCU usage in ctnetlink_dump_helpinfo c6f4a71153 net: ipv6: fix return value of ip6_skb_dst_mtu 9872273b67 net: dsa: mv88e6xxx: enable .rmu_disable() on Topaz 6148ddff2d net: dsa: mv88e6xxx: enable .port_set_policy() on Topaz d73c180e6a dm writecache: return the exact table values that were set 8a85afc662 mm: slab: fix kmem_cache_create failed when sysfs node not destroyed f53729b828 usb: cdns3: Enable TDL_CHK only for OUT ep 52b01a8086 f2fs: Show casefolding support only when supported 91d8460167 arm64: dts: marvell: armada-37xx: move firmware node to generic dtsi file f696cc7f1b firmware: turris-mox-rwtm: add marvell,armada-3700-rwtm-firmware compatible string e2b28026b8 arm64: dts: armada-3720-turris-mox: add firmware node f7d1fa65e7 cifs: prevent NULL deref in cifs_compose_mount_options() 06d8a7eb58 s390: introduce proper type handling call_on_stack() macro 2a47e0719a sched/fair: Fix CFS bandwidth hrtimer expiry type 5b7d065868 scsi: qedf: Add check to synchronize abort and flush 0fe70c15f9 scsi: libfc: Fix array index out of bound exception d7b647d055 scsi: libsas: Add LUN number check in .slave_alloc callback 863c4bc883 scsi: aic7xxx: Fix unintentional sign extension issue on left shift of u8 712e9ed613 rtc: max77686: Do not enforce (incorrect) interrupt trigger type 199d8ea4c7 kbuild: mkcompile_h: consider timestamp if KBUILD_BUILD_TIMESTAMP is set 484193b635 thermal/core: Correct function name thermal_zone_device_unregister() 556cf02830 arm64: dts: imx8mq: assign PCIe clocks 9d3eb68a53 arm64: dts: ls208xa: remove bus-num from dspi node e054b361ca firmware: tegra: bpmp: Fix Tegra234-only builds 94d0095770 soc/tegra: fuse: Fix Tegra234-only builds 270a2e9faf ARM: dts: stm32: move stmmac axi config in ethernet node on stm32mp15 4bc66215bc ARM: dts: stm32: fix i2c node name on stm32f746 to prevent warnings 856c753237 ARM: dts: rockchip: fix supply properties in io-domains nodes c5bb9cc2ce arm64: dts: juno: Update SCPI nodes as per the YAML schema f572a91393 ARM: dts: stm32: fix timer nodes on STM32 MCU to prevent warnings 95e795474c ARM: dts: stm32: fix RCC node name on stm32f429 MCU a898aa9f88 ARM: dts: stm32: fix gpio-keys node on STM32 MCU boards 5c17edaaea ARM: dts: am437x-gp-evm: fix ti,no-reset-on-init flag for gpios 3446233096 ARM: dts: am57xx-cl-som-am57x: fix ti,no-reset-on-init flag for gpios e79e29a4e1 kbuild: sink stdout from cmd for silent build f817d46775 rtc: mxc_v2: add missing MODULE_DEVICE_TABLE 0a22b51782 ARM: imx: pm-imx5: Fix references to imx5_cpu_suspend_info e20e85639e ARM: dts: imx6: phyFLEX: Fix UART hardware flow control a5b19d33ae ARM: dts: Hurricane 2: Fix NAND nodes names f83535a47f ARM: dts: BCM63xx: Fix NAND nodes names cb05b84ad7 ARM: NSP: dts: fix NAND nodes names 14e3bad3b5 ARM: Cygnus: dts: fix NAND nodes names 587a757afe ARM: brcmstb: dts: fix NAND nodes names a9c32c7aee reset: ti-syscon: fix to_ti_syscon_reset_data macro b400afa427 arm64: dts: rockchip: Fix power-controller node names for rk3328 dfb4e8ed07 arm64: dts: rockchip: Fix power-controller node names for px30 789070f178 ARM: dts: rockchip: Fix power-controller node names for rk3288 6aaffe6ce8 ARM: dts: rockchip: Fix power-controller node names for rk3188 439115ee56 ARM: dts: rockchip: Fix power-controller node names for rk3066a 3b4c347283 ARM: dts: rockchip: Fix IOMMU nodes properties on rk322x c9d29d62da ARM: dts: rockchip: Fix the timer clocks order d105e15de6 arm64: dts: rockchip: fix pinctrl sleep nodename for rk3399.dtsi cfe3d29e5c ARM: dts: rockchip: fix pinctrl sleep nodename for rk3036-kylin and rk3288 79573c6441 ARM: dts: gemini: add device_type on pci 7037876393 ARM: dts: gemini: rename mdio to the right name 2a9f50cc6e Merge branch 'android11-5.4' into 'android11-5.4-lts' Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I1dfe5c5858c0c1f38ccb32e253ff7ff7f509eced	2021-10-20 10:32:16 +02:00