Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Merge tag 'ASB-2022-08-05_12-5.10' of https://android.googlesource.co…
…m/kernel/common into lineage-21 https://source.android.com/security/bulletin/2022-08-01 CVE-2022-1786 * tag 'ASB-2022-08-05_12-5.10' of https://android.googlesource.com/kernel/common: ANDROID: fix kernelci issue for allnoconfig builds ANDROID: sched: Introducing PELT multiplier FROMGIT: binder: fix redefinition of seq_file attributes ANDROID: GKI: pcie: Fix the broken dw_pcie structure UPSTREAM: PCI: dwc: Support multiple ATU memory regions ANDROID: oplus: Update the ABI xml and symbol list ANDROID: vendor_hooks: add hooks in __alloc_pages_slowpath ANDROID: GKI: Update symbols to symbol list FROMGIT: arm64: fix oops in concurrently setting insn_emulation sysctls FROMGIT: usb: dwc3: core: Do not perform GCTL_CORE_SOFTRESET during bootup ANDROID: vendor_hooks:vendor hook for mmput ANDROID: vendor_hooks:vendor hook for pidfd_open ANDROID: vendor_hook: Add hook in shmem_writepage() BACKPORT: iommu/dma: Fix race condition during iova_domain initialization FROMGIT: usb: dwc3: core: Deprecate GCTL.CORESOFTRESET FROMGIT: usb: dwc3: gadget: Prevent repeat pullup() FROMGIT: Binder: add TF_UPDATE_TXN to replace outdated txn BACKPORT: FROMGIT: cgroup: Use separate src/dst nodes when preloading css_sets for migration UPSTREAM: usb: gadget: f_uac2: allow changing interface name via configfs UPSTREAM: usb: gadget: f_uac1: allow changing interface name via configfs UPSTREAM: usb: gadget: f_uac1: Add suspend callback UPSTREAM: usb: gadget: f_uac2: Add suspend callback UPSTREAM: usb: gadget: u_audio: Add suspend call UPSTREAM: usb: gadget: u_audio: Rate ctl notifies about current srate (0=stopped) UPSTREAM: usb: gadget: f_uac1: Support multiple sampling rates UPSTREAM: usb: gadget: f_uac2: Support multiple sampling rates UPSTREAM: usb: gadget:audio: Replace deprecated macro S_IRUGO UPSTREAM: usb: gadget: u_audio: Add capture/playback srate getter UPSTREAM: usb: gadget: u_audio: Move dynamic srate from params to rtd UPSTREAM: usb: gadget: u_audio: Support multiple sampling rates UPSTREAM: docs: ABI: fixed formatting in configfs-usb-gadget-uac2 UPSTREAM: usb: gadget: u_audio: Subdevice 0 for capture ctls UPSTREAM: usb: gadget: u_audio: fix calculations for small bInterval UPSTREAM: docs: ABI: fixed req_number desc in UAC1 UPSTREAM: docs: ABI: added missing num_requests param to UAC2 UPSTREAM: usb:gadget: f_uac1: fixed sync playback UPSTREAM: usb: gadget: u_audio.c: Adding Playback Pitch ctl for sync playback UPSTREAM: ABI: configfs-usb-gadget-uac2: fix a broken table UPSTREAM: ABI: configfs-usb-gadget-uac1: fix a broken table UPSTREAM: usb: gadget: f_uac1: fixing inconsistent indenting UPSTREAM: docs: usb: fix malformed table UPSTREAM: usb: gadget: f_uac1: add volume and mute support BACKPORT: usb: gadget: f_uac2: add volume and mute support UPSTREAM: usb: gadget: u_audio: add bi-directional volume and mute support UPSTREAM: usb: audio-v2: add ability to define feature unit descriptor ANDROID: mm: shmem: use reclaim_pages() to recalim pages from a list UPSTREAM: usb: gadget: f_uac1: disable IN/OUT ep if unused ANDROID: GKI: db845c: Update symbols list and ABI Linux 5.10.117 SUNRPC: Fix fall-through warnings for Clang io_uring: always use original task when preparing req identity usb: gadget: uvc: allow for application to cleanly shutdown usb: gadget: uvc: rename function to be more consistent ping: fix address binding wrt vrf arm[64]/memremap: don't abuse pfn_valid() to ensure presence of linear map net: phy: Fix race condition on link status change SUNRPC: Ensure we flush any closed sockets before xs_xprt_free() SUNRPC: Don't call connect() more than once on a TCP socket SUNRPC: Prevent immediate close+reconnect SUNRPC: Clean up scheduling of autoclose drm/vmwgfx: Initialize drm_mode_fb_cmd2 cgroup/cpuset: Remove cpus_allowed/mems_allowed setup in cpuset_init_smp() net: atlantic: always deep reset on pm op, fixing up my null deref regression i40e: i40e_main: fix a missing check on list iterator drm/nouveau/tegra: Stop using iommu_present() ceph: fix setting of xattrs on async created inodes serial: 8250_mtk: Fix register address for XON/XOFF character serial: 8250_mtk: Fix UART_EFR register address slimbus: qcom: Fix IRQ check in qcom_slim_probe USB: serial: option: add Fibocom MA510 modem USB: serial: option: add Fibocom L610 modem USB: serial: qcserial: add support for Sierra Wireless EM7590 USB: serial: pl2303: add device id for HP LM930 Display usb: typec: tcpci_mt6360: Update for BMC PHY setting usb: typec: tcpci: Don't skip cleanup in .remove() on error usb: cdc-wdm: fix reading stuck on device close tty: n_gsm: fix mux activation issues in gsm_config() tty/serial: digicolor: fix possible null-ptr-deref in digicolor_uart_probe() firmware_loader: use kernel credentials when reading firmware tcp: resalt the secret every 10 seconds net: sfp: Add tx-fault workaround for Huawei MA5671A SFP ONT net: emaclite: Don't advertise 1000BASE-T and do auto negotiation s390: disable -Warray-bounds ASoC: ops: Validate input values in snd_soc_put_volsw_range() ASoC: max98090: Generate notifications on changes for custom control ASoC: max98090: Reject invalid values in custom control put() hwmon: (f71882fg) Fix negative temperature gfs2: Fix filesystem block deallocation for short writes tls: Fix context leak on tls_device_down net: sfc: ef10: fix memory leak in efx_ef10_mtd_probe() net/smc: non blocking recvmsg() return -EAGAIN when no data and signal_pending net: dsa: bcm_sf2: Fix Wake-on-LAN with mac_link_down() net: bcmgenet: Check for Wake-on-LAN interrupt probe deferral net/sched: act_pedit: really ensure the skb is writable s390/lcs: fix variable dereferenced before check s390/ctcm: fix potential memory leak s390/ctcm: fix variable dereferenced before check selftests: vm: Makefile: rename TARGETS to VMTARGETS hwmon: (ltq-cputemp) restrict it to SOC_XWAY dim: initialize all struct fields ionic: fix missing pci_release_regions() on error in ionic_probe() nfs: fix broken handling of the softreval mount option mac80211_hwsim: call ieee80211_tx_prepare_skb under RCU protection net: sfc: fix memory leak due to ptp channel sfc: Use swap() instead of open coding it netlink: do not reset transport header in netlink_recvmsg() drm/nouveau: Fix a potential theorical leak in nouveau_get_backlight_name() ipv4: drop dst in multicast routing path net: mscc: ocelot: avoid corrupting hardware counters when moving VCAP filters net: mscc: ocelot: restrict tc-trap actions to VCAP IS2 lookup 0 net: mscc: ocelot: fix VCAP IS2 filters matching on both lookups net: mscc: ocelot: fix last VCAP IS1/IS2 filter persisting in hardware when deleted net: Fix features skip in for_each_netdev_feature() mac80211: Reset MBSSID parameters upon connection hwmon: (tmp401) Add OF device ID table iwlwifi: iwl-dbg: Use del_timer_sync() before freeing batman-adv: Don't skb_split skbuffs with frag_list Linux 5.10.116 mm: userfaultfd: fix missing cache flush in mcopy_atomic_pte() and __mcopy_atomic() mm: hugetlb: fix missing cache flush in copy_huge_page_from_user() mm: fix missing cache flush for all tail pages of compound page Bluetooth: Fix the creation of hdev->name arm: remove CONFIG_ARCH_HAS_HOLES_MEMORYMODEL nfp: bpf: silence bitwise vs. logical OR warning drm/amd/display/dc/gpio/gpio_service: Pass around correct dce_{version, environment} types block: drbd: drbd_nl: Make conversion to 'enum drbd_ret_code' explicit regulator: consumer: Add missing stubs to regulator/consumer.h MIPS: Use address-of operator on section symbols ANDROID: GKI: update the abi .xml file due to hex_to_bin() changes Revert "tcp: ensure to use the most recently sent skb when filling the rate sample" Linux 5.10.115 mmc: rtsx: add 74 Clocks in power on flow PCI: aardvark: Fix reading MSI interrupt number PCI: aardvark: Clear all MSIs at setup dm: interlock pending dm_io and dm_wait_for_bios_completion block-map: add __GFP_ZERO flag for alloc_page in function bio_copy_kern rcu: Apply callbacks processing time limit only on softirq rcu: Fix callbacks processing time limit retaining cond_resched() KVM: LAPIC: Enable timer posted-interrupt only when mwait/hlt is advertised KVM: x86/mmu: avoid NULL-pointer dereference on page freeing bugs KVM: x86: Do not change ICR on write to APIC_SELF_IPI x86/kvm: Preserve BSP MSR_KVM_POLL_CONTROL across suspend/resume net/mlx5: Fix slab-out-of-bounds while reading resource dump menu kvm: x86/cpuid: Only provide CPUID leaf 0xA if host has architectural PMU net: igmp: respect RCU rules in ip_mc_source() and ip_mc_msfilter() btrfs: always log symlinks in full mode smsc911x: allow using IRQ0 selftests: ocelot: tc_flower_chains: specify conform-exceed action for policer bnxt_en: Fix unnecessary dropping of RX packets bnxt_en: Fix possible bnxt_open() failure caused by wrong RFS flag selftests: mirror_gre_bridge_1q: Avoid changing PVID while interface is operational hinic: fix bug of wq out of bound access net: emaclite: Add error handling for of_address_to_resource() net: cpsw: add missing of_node_put() in cpsw_probe_dt() net: stmmac: dwmac-sun8i: add missing of_node_put() in sun8i_dwmac_register_mdio_mux() net: dsa: mt7530: add missing of_node_put() in mt7530_setup() net: ethernet: mediatek: add missing of_node_put() in mtk_sgmii_init() NFSv4: Don't invalidate inode attributes on delegation return RDMA/siw: Fix a condition race issue in MPA request processing selftests/seccomp: Don't call read() on TTY from background pgrp net/mlx5: Avoid double clear or set of sync reset requested net/mlx5e: Fix the calling of update_buffer_lossy() API net/mlx5e: CT: Fix queued up restore put() executing after relevant ft release net/mlx5e: Don't match double-vlan packets if cvlan is not set net/mlx5e: Fix trust state reset in reload ASoC: dmaengine: Restore NULL prepare_slave_config() callback hwmon: (adt7470) Fix warning on module removal gpio: pca953x: fix irq_stat not updated when irq is disabled (irq_mask not set) NFC: netlink: fix sleep in atomic bug when firmware download timeout nfc: nfcmrvl: main: reorder destructive operations in nfcmrvl_nci_unregister_dev to avoid bugs nfc: replace improper check device_is_registered() in netlink related functions can: grcan: only use the NAPI poll budget for RX can: grcan: grcan_probe(): fix broken system id check for errata workaround needs can: grcan: use ofdev->dev when allocating DMA memory can: isotp: remove re-binding of bound socket can: grcan: grcan_close(): fix deadlock s390/dasd: Fix read inconsistency for ESE DASD devices s390/dasd: Fix read for ESE with blksize < 4k s390/dasd: prevent double format of tracks for ESE devices s390/dasd: fix data corruption for ESE devices ASoC: meson: Fix event generation for AUI CODEC mux ASoC: meson: Fix event generation for G12A tohdmi mux ASoC: meson: Fix event generation for AUI ACODEC mux ASoC: wm8958: Fix change notifications for DSP controls ASoC: da7219: Fix change notifications for tone generator frequency genirq: Synchronize interrupt thread startup net: stmmac: disable Split Header (SPH) for Intel platforms firewire: core: extend card->lock in fw_core_handle_bus_reset firewire: remove check of list iterator against head past the loop body firewire: fix potential uaf in outbound_phy_packet_callback() Revert "SUNRPC: attempt AF_LOCAL connect on setup" drm/amd/display: Avoid reading audio pattern past AUDIO_CHANNELS_COUNT iommu/vt-d: Calculate mask for non-aligned flushes KVM: x86/svm: Account for family 17h event renumberings in amd_pmc_perf_hw_id gpiolib: of: fix bounds check for 'gpio-reserved-ranges' mmc: core: Set HS clock speed before sending HS CMD13 mmc: sdhci-msm: Reset GCC_SDCC_BCR register for SDHC ALSA: fireworks: fix wrong return count shorter than expected by 4 bytes ALSA: hda/realtek: Add quirk for Yoga Duet 7 13ITL6 speakers parisc: Merge model and model name into one line in /proc/cpuinfo MIPS: Fix CP0 counter erratum detection for R4k CPUs Revert "ipv6: make ip6_rt_gc_expire an atomic_t" Revert "oom_kill.c: futex: delay the OOM reaper to allow time for proper futex cleanup" Linux 5.10.114 perf symbol: Remove arch__symbols__fixup_end() tty: n_gsm: fix software flow control handling tty: n_gsm: fix incorrect UA handling tty: n_gsm: fix reset fifo race condition tty: n_gsm: fix wrong command frame length field encoding tty: n_gsm: fix wrong command retry handling tty: n_gsm: fix missing explicit ldisc flush tty: n_gsm: fix wrong DLCI release order tty: n_gsm: fix insufficient txframe size netfilter: nft_socket: only do sk lookups when indev is available tty: n_gsm: fix malformed counter for out of frame data tty: n_gsm: fix wrong signal octet encoding in convergence layer type 2 tty: n_gsm: fix mux cleanup after unregister tty device tty: n_gsm: fix decoupled mux resource tty: n_gsm: fix restart handling via CLD command perf symbol: Update symbols__fixup_end() perf symbol: Pass is_kallsyms to symbols__fixup_end() x86/cpu: Load microcode during restore_processor_state() thermal: int340x: Fix attr.show callback prototype net: ethernet: stmmac: fix write to sgmii_adapter_base drm/i915: Fix SEL_FETCH_PLANE_*(PIPE_B+) register addresses kasan: prevent cpu_quarantine corruption when CPU offline and cache shrink occur at same time zonefs: Clear inode information flags on inode creation zonefs: Fix management of open zones powerpc/perf: Fix 32bit compile drivers: net: hippi: Fix deadlock in rr_close() cifs: destage any unwritten data to the server before calling copychunk_write x86: __memcpy_flushcache: fix wrong alignment if size > 2^32 ext4: fix bug_on in start_this_handle during umount filesystem ASoC: wm8731: Disable the regulator when probing fails ASoC: Intel: soc-acpi: correct device endpoints for max98373 tcp: fix F-RTO may not work correctly when receiving DSACK Revert "ibmvnic: Add ethtool private flag for driver-defined queue limits" ibmvnic: fix miscellaneous checks ixgbe: ensure IPsec VF<->PF compatibility net: fec: add missing of_node_put() in fec_enet_init_stop_mode() bnx2x: fix napi API usage sequence tls: Skip tls_append_frag on zero copy size drm/amd/display: Fix memory leak in dcn21_clock_source_create drm/amdkfd: Fix GWS queue count net: dsa: lantiq_gswip: Don't set GSWIP_MII_CFG_RMII_CLK net: phy: marvell10g: fix return value on error net: bcmgenet: hide status block before TX timestamping clk: sunxi: sun9i-mmc: check return value after calling platform_get_resource() bus: sunxi-rsb: Fix the return value of sunxi_rsb_device_create() tcp: make sure treq->af_specific is initialized tcp: fix potential xmit stalls caused by TCP_NOTSENT_LOWAT ip_gre, ip6_gre: Fix race condition on o_seqno in collect_md mode ip6_gre: Make o_seqno start from 0 in native mode ip_gre: Make o_seqno start from 0 in native mode net/smc: sync err code when tcp connection was refused net: hns3: add return value for mailbox handling in PF net: hns3: add validity check for message data length net: hns3: modify the return code of hclge_get_ring_chain_from_mbx cpufreq: fix memory leak in sun50i_cpufreq_nvmem_probe pinctrl: pistachio: fix use of irq_of_parse_and_map() arm64: dts: imx8mn-ddr4-evk: Describe the 32.768 kHz PMIC clock ARM: dts: imx6ull-colibri: fix vqmmc regulator sctp: check asoc strreset_chunk in sctp_generate_reconf_event wireguard: device: check for metadata_dst with skb_valid_dst() tcp: ensure to use the most recently sent skb when filling the rate sample pinctrl: stm32: Keep pinctrl block clock enabled when LEVEL IRQ requested tcp: md5: incorrect tcp_header_len for incoming connections pinctrl: rockchip: fix RK3308 pinmux bits bpf, lwt: Fix crash when using bpf_skb_set_tunnel_key() from bpf_xmit lwt hook netfilter: nft_set_rbtree: overlap detection with element re-addition after deletion net: dsa: Add missing of_node_put() in dsa_port_link_register_of memory: renesas-rpc-if: Fix HF/OSPI data transfer in Manual Mode pinctrl: stm32: Do not call stm32_gpio_get() for edge triggered IRQs in EOI mtd: fix 'part' field data corruption in mtd_info mtd: rawnand: Fix return value check of wait_for_completion_timeout pinctrl: mediatek: moore: Fix build error ipvs: correctly print the memory size of ip_vs_conn_tab ARM: dts: logicpd-som-lv: Fix wrong pinmuxing on OMAP35 ARM: dts: am3517-evm: Fix misc pinmuxing ARM: dts: Fix mmc order for omap3-gta04 phy: ti: Add missing pm_runtime_disable() in serdes_am654_probe phy: mapphone-mdm6600: Fix PM error handling in phy_mdm6600_probe ARM: dts: at91: sama5d4_xplained: fix pinctrl phandle name ARM: dts: at91: Map MCLK for wm8731 on at91sam9g20ek phy: ti: omap-usb2: Fix error handling in omap_usb2_enable_clocks bus: ti-sysc: Make omap3 gpt12 quirk handling SoC specific ARM: OMAP2+: Fix refcount leak in omap_gic_of_init phy: samsung: exynos5250-sata: fix missing device put in probe error paths phy: samsung: Fix missing of_node_put() in exynos_sata_phy_probe ARM: dts: imx6qdl-apalis: Fix sgtl5000 detection issue USB: Fix xhci event ring dequeue pointer ERDP update issue mtd: rawnand: fix ecc parameters for mt7622 iio:imu:bmi160: disable regulator in error path arm64: dts: meson: remove CPU opps below 1GHz for SM1 boards arm64: dts: meson: remove CPU opps below 1GHz for G12B boards video: fbdev: udlfb: properly check endpoint type iocost: don't reset the inuse weight of under-weighted debtors x86/pci/xen: Disable PCI/MSI[-X] masking for XEN_HVM guests riscv: patch_text: Fixup last cpu should be master hex2bin: fix access beyond string end hex2bin: make the function hex_to_bin constant-time pinctrl: samsung: fix missing GPIOLIB on ARM64 Exynos config arch_topology: Do not set llc_sibling if llc_id is invalid serial: 8250: Correct the clock for EndRun PTP/1588 PCIe device serial: 8250: Also set sticky MCR bits in console restoration serial: imx: fix overrun interrupts in DMA mode usb: phy: generic: Get the vbus supply usb: cdns3: Fix issue for clear halt endpoint usb: dwc3: gadget: Return proper request status usb: dwc3: core: Only handle soft-reset in DCTL usb: dwc3: core: Fix tx/rx threshold settings usb: dwc3: Try usb-role-switch first in dwc3_drd_init usb: gadget: configfs: clear deactivation flag in configfs_composite_unbind() usb: gadget: uvc: Fix crash when encoding data for usb request usb: typec: ucsi: Fix role swapping usb: typec: ucsi: Fix reuse of completion structure usb: misc: fix improper handling of refcount in uss720_probe() iio: imu: inv_icm42600: Fix I2C init possible nack iio: magnetometer: ak8975: Fix the error handling in ak8975_power_on() iio: dac: ad5446: Fix read_raw not returning set value iio: dac: ad5592r: Fix the missing return value. xhci: increase usb U3 -> U0 link resume timeout from 100ms to 500ms xhci: stop polling roothubs after shutdown xhci: Enable runtime PM on second Alderlake controller USB: serial: option: add Telit 0x1057, 0x1058, 0x1075 compositions USB: serial: option: add support for Cinterion MV32-WA/MV32-WB USB: serial: cp210x: add PIDs for Kamstrup USB Meter Reader USB: serial: whiteheat: fix heap overflow in WHITEHEAT_GET_DTR_RTS USB: quirks: add STRING quirk for VCOM device USB: quirks: add a Realtek card reader usb: mtu3: fix USB 3.0 dual-role-switch from device to host lightnvm: disable the subsystem floppy: disable FDRAWCMD by default Linux 5.10.113 Revert "net: micrel: fix KS8851_MLL Kconfig" block/compat_ioctl: fix range check in BLKGETSIZE staging: ion: Prevent incorrect reference counting behavour spi: atmel-quadspi: Fix the buswidth adjustment between spi-mem and controller jbd2: fix a potential race while discarding reserved buffers after an abort can: isotp: stop timeout monitoring when no first frame was sent ext4: force overhead calculation if the s_overhead_cluster makes no sense ext4: fix overhead calculation to account for the reserved gdt blocks ext4, doc: fix incorrect h_reserved size ext4: limit length to bitmap_maxbytes - blocksize in punch_hole ext4: fix use-after-free in ext4_search_dir ext4: fix symlink file size not match to file content ext4: fix fallocate to use file_modified to update permissions consistently perf report: Set PERF_SAMPLE_DATA_SRC bit for Arm SPE event powerpc/perf: Fix power9 event alternatives drm/vc4: Use pm_runtime_resume_and_get to fix pm_runtime_get_sync() usage KVM: PPC: Fix TCE handling for VFIO drm/panel/raspberrypi-touchscreen: Initialise the bridge in prepare drm/panel/raspberrypi-touchscreen: Avoid NULL deref if not initialised perf/core: Fix perf_mmap fail when CONFIG_PERF_USE_VMALLOC enabled sched/pelt: Fix attach_entity_load_avg() corner case arm_pmu: Validate single/group leader events ARC: entry: fix syscall_trace_exit argument e1000e: Fix possible overflow in LTR decoding ASoC: soc-dapm: fix two incorrect uses of list iterator gpio: Request interrupts after IRQ is initialized openvswitch: fix OOB access in reserve_sfa_size() xtensa: fix a7 clobbering in coprocessor context load/store xtensa: patch_text: Fixup last cpu should be master net: atlantic: invert deep par in pm functions, preventing null derefs dma: at_xdmac: fix a missing check on list iterator ata: pata_marvell: Check the 'bmdma_addr' beforing reading mm/mmu_notifier.c: fix race in mmu_interval_notifier_remove() oom_kill.c: futex: delay the OOM reaper to allow time for proper futex cleanup mm, hugetlb: allow for "high" userspace addresses EDAC/synopsys: Read the error count from the correct register nvme-pci: disable namespace identifiers for Qemu controllers nvme: add a quirk to disable namespace identifiers stat: fix inconsistency between struct stat and struct compat_stat scsi: qedi: Fix failed disconnect handling net: macb: Restart tx only if queue pointer is lagging drm/msm/mdp5: check the return of kzalloc() dpaa_eth: Fix missing of_node_put in dpaa_get_ts_info() brcmfmac: sdio: Fix undefined behavior due to shift overflowing the constant mt76: Fix undefined behavior due to shift overflowing the constant net: atlantic: Avoid out-of-bounds indexing cifs: Check the IOCB_DIRECT flag, not O_DIRECT vxlan: fix error return code in vxlan_fdb_append arm64: dts: imx: Fix imx8*-var-som touchscreen property sizes ALSA: usb-audio: Fix undefined behavior due to shift overflowing the constant platform/x86: samsung-laptop: Fix an unsigned comparison which can never be negative reset: tegra-bpmp: Restore Handle errors in BPMP response ARM: vexpress/spc: Avoid negative array index when !SMP arm64: mm: fix p?d_leaf() arm64/mm: Remove [PUD|PMD]_TABLE_BIT from [pud|pmd]_bad() selftests: mlxsw: vxlan_flooding: Prevent flooding of unwanted packets dmaengine: idxd: add RO check for wq max_transfer_size write dmaengine: idxd: add RO check for wq max_batch_size write net: stmmac: Use readl_poll_timeout_atomic() in atomic state netlink: reset network and mac headers in netlink_dump() ipv6: make ip6_rt_gc_expire an atomic_t l3mdev: l3mdev_master_upper_ifindex_by_index_rcu should be using netdev_master_upper_dev_get_rcu net/sched: cls_u32: fix possible leak in u32_init_knode() ip6_gre: Fix skb_under_panic in __gre6_xmit() ip6_gre: Avoid updating tunnel->tun_hlen in __gre6_xmit() net/packet: fix packet_sock xmit return value checking net/smc: Fix sock leak when release after smc_shutdown() rxrpc: Restore removed timer deletion igc: Fix BUG: scheduling while atomic igc: Fix infinite loop in release_swfw_sync esp: limit skb_page_frag_refill use to a single page spi: spi-mtk-nor: initialize spi controller after resume dmaengine: mediatek:Fix PM usage reference leak of mtk_uart_apdma_alloc_chan_resources dmaengine: imx-sdma: Fix error checking in sdma_event_remap ASoC: codecs: wcd934x: do not switch off SIDO Buck when codec is in use ASoC: msm8916-wcd-digital: Check failure for devm_snd_soc_register_component ASoC: atmel: Remove system clock tree configuration for at91sam9g20ek dm: fix mempool NULL pointer race when completing IO ALSA: hda/realtek: Add quirk for Clevo NP70PNP ALSA: usb-audio: Clear MIDI port active flag after draining net/sched: cls_u32: fix netns refcount changes in u32_change() gfs2: assign rgrp glock before compute_bitstructs perf tools: Fix segfault accessing sample_id xyarray tracing: Dump stacktrace trigger to the corresponding instance mm: page_alloc: fix building error on -Werror=array-compare etherdevice: Adjust ether_addr* prototypes to silence -Wstringop-overead ANDROID: fix up gpio change in 5.10.111 Linux 5.10.112 ax25: Fix UAF bugs in ax25 timers ax25: Fix NULL pointer dereferences in ax25 timers ax25: fix NPD bug in ax25_disconnect ax25: fix UAF bug in ax25_send_control() ax25: Fix refcount leaks caused by ax25_cb_del() ax25: fix UAF bugs of net_device caused by rebinding operation ax25: fix reference count leaks of ax25_dev ax25: add refcount in ax25_dev to avoid UAF bugs scsi: iscsi: Fix unbound endpoint error handling scsi: iscsi: Fix endpoint reuse regression dma-direct: avoid redundant memory sync for swiotlb timers: Fix warning condition in __run_timers() i2c: pasemi: Wait for write xfers to finish smp: Fix offline cpu check in flush_smp_call_function_queue() dm integrity: fix memory corruption when tag_size is less than digest size ARM: davinci: da850-evm: Avoid NULL pointer dereference tick/nohz: Use WARN_ON_ONCE() to prevent console saturation genirq/affinity: Consider that CPUs on nodes can be unbalanced drm/amdgpu: Enable gfxoff quirk on MacBook Pro drm/amd/display: don't ignore alpha property on pre-multiplied mode ipv6: fix panic when forwarding a pkt with no in6 dev nl80211: correctly check NL80211_ATTR_REG_ALPHA2 size ALSA: pcm: Test for "silence" field in struct "pcm_format_data" ALSA: hda/realtek: add quirk for Lenovo Thinkpad X12 speakers ALSA: hda/realtek: Add quirk for Clevo PD50PNT btrfs: mark resumed async balance as writing btrfs: fix root ref counts in error handling in btrfs_get_root_ref ath9k: Fix usage of driver-private space in tx_info ath9k: Properly clear TX status area before reporting to mac80211 gcc-plugins: latent_entropy: use /dev/urandom memory: renesas-rpc-if: fix platform-device leak in error path KVM: x86/mmu: Resolve nx_huge_pages when kvm.ko is loaded mm: kmemleak: take a full lowmem check in kmemleak_*_phys() mm: fix unexpected zeroed page mapping with zram swap mm, page_alloc: fix build_zonerefs_node() perf/imx_ddr: Fix undefined behavior due to shift overflowing the constant drivers: net: slip: fix NPD bug in sl_tx_timeout() scsi: megaraid_sas: Target with invalid LUN ID is deleted during scan scsi: mvsas: Add PCI ID of RocketRaid 2640 drm/amd/display: Fix allocate_mst_payload assert on resume drm/amd/display: Revert FEC check in validation myri10ge: fix an incorrect free for skb in myri10ge_sw_tso net: usb: aqc111: Fix out-of-bounds accesses in RX fixup net: axienet: setup mdio unconditionally tlb: hugetlb: Add more sizes to tlb_remove_huge_tlb_entry arm64: alternatives: mark patch_alternative() as `noinstr` regulator: wm8994: Add an off-on delay for WM8994 variant gpu: ipu-v3: Fix dev_dbg frequency output ata: libata-core: Disable READ LOG DMA EXT for Samsung 840 EVOs net: micrel: fix KS8851_MLL Kconfig scsi: ibmvscsis: Increase INITIAL_SRP_LIMIT to 1024 scsi: lpfc: Fix queue failures when recovering from PCI parity error scsi: target: tcmu: Fix possible page UAF Drivers: hv: vmbus: Prevent load re-ordering when reading ring buffer drm/amdkfd: Check for potential null return of kmalloc_array() drm/amdgpu/vcn: improve vcn dpg stop procedure drm/amdkfd: Fix Incorrect VMIDs passed to HWS drm/amd/display: Update VTEM Infopacket definition drm/amd/display: FEC check in timing validation drm/amd/display: fix audio format not updated after edid updated btrfs: do not warn for free space inode in cow_file_range btrfs: fix fallocate to use file_modified to update permissions consistently drm/amd: Add USBC connector ID net: bcmgenet: Revert "Use stronger register read/writes to assure ordering" dm mpath: only use ktime_get_ns() in historical selector cifs: potential buffer overflow in handling symlinks nfc: nci: add flush_workqueue to prevent uaf perf tools: Fix misleading add event PMU debug message testing/selftests/mqueue: Fix mq_perf_tests to free the allocated cpu set sctp: Initialize daddr on peeled off socket scsi: iscsi: Fix conn cleanup and stop race during iscsid restart scsi: iscsi: Fix offload conn cleanup when iscsid restarts scsi: iscsi: Move iscsi_ep_disconnect() scsi: iscsi: Fix in-kernel conn failure handling scsi: iscsi: Rel ref after iscsi_lookup_endpoint() scsi: iscsi: Use system_unbound_wq for destroy_work scsi: iscsi: Force immediate failure during shutdown scsi: iscsi: Stop queueing during ep_disconnect scsi: pm80xx: Enable upper inbound, outbound queues scsi: pm80xx: Mask and unmask upper interrupt vectors 32-63 net/smc: Fix NULL pointer dereference in smc_pnet_find_ib() drm/msm/dsi: Use connector directly in msm_dsi_manager_connector_init() drm/msm: Fix range size vs end confusion cfg80211: hold bss_lock while updating nontrans_list net/sched: taprio: Check if socket flags are valid net: ethernet: stmmac: fix altr_tse_pcs function when using a fixed-link net: dsa: felix: suppress -EPROBE_DEFER errors net/sched: fix initialization order when updating chain 0 head mlxsw: i2c: Fix initialization error flow net: mdio: Alphabetically sort header inclusion gpiolib: acpi: use correct format characters veth: Ensure eth header is in skb's linear part net/sched: flower: fix parsing of ethertype following VLAN header SUNRPC: Fix the svc_deferred_event trace class media: rockchip/rga: do proper error checking in probe firmware: arm_scmi: Fix sorting of retrieved clock rates memory: atmel-ebi: Fix missing of_node_put in atmel_ebi_probe drm/msm: Add missing put_task_struct() in debugfs path btrfs: remove unused variable in btrfs_{start,write}_dirty_block_groups() ACPI: processor idle: Check for architectural support for LPI cpuidle: PSCI: Move the `has_lpi` check to the beginning of the function hamradio: remove needs_free_netdev to avoid UAF hamradio: defer 6pack kfree after unregister_netdev drm/amdkfd: Use drm_priv to pass VM from KFD to amdgpu Linux 5.10.111 powerpc: Fix virt_addr_valid() for 64-bit Book3E & 32-bit mm/sparsemem: fix 'mem_section' will never be NULL gcc 12 warning irqchip/gic, gic-v3: Prevent GSI to SGI translations Drivers: hv: vmbus: Replace smp_store_mb() with virt_store_mb() arm64: module: remove (NOLOAD) from linker script selftests: cgroup: Test open-time cgroup namespace usage for migration checks selftests: cgroup: Test open-time credential usage for migration checks selftests: cgroup: Make cg_create() use 0755 for permission instead of 0644 selftests/cgroup: Fix build on older distros cgroup: Use open-time credentials for process migraton perm checks mm: don't skip swap entry even if zap_details specified ubsan: remove CONFIG_UBSAN_OBJECT_SIZE dmaengine: Revert "dmaengine: shdma: Fix runtime PM imbalance on error" tools build: Use $(shell ) instead of `` to get embedded libperl's ccopts tools build: Filter out options and warnings not supported by clang perf python: Fix probing for some clang command line options perf build: Don't use -ffat-lto-objects in the python feature test when building with clang-13 drm/amdkfd: Create file descriptor after client is added to smi_clients list drm/nouveau/pmu: Add missing callbacks for Tegra devices drm/amdgpu/smu10: fix SoC/fclk units in auto mode irqchip/gic-v3: Fix GICR_CTLR.RWP polling perf: qcom_l2_pmu: fix an incorrect NULL check on list iterator ata: sata_dwc_460ex: Fix crash due to OOB write gpio: Restrict usage of GPIO chip irq members before initialization RDMA/hfi1: Fix use-after-free bug for mm struct arm64: patch_text: Fixup last cpu should be master btrfs: prevent subvol with swapfile from being deleted btrfs: fix qgroup reserve overflow the qgroup limit x86/speculation: Restore speculation related MSRs during S3 resume x86/pm: Save the MSR validity status at context setup io_uring: fix race between timeout flush and removal mm/mempolicy: fix mpol_new leak in shared_policy_replace mmmremap.c: avoid pointless invalidate_range_start/end on mremap(old_size=0) lz4: fix LZ4_decompress_safe_partial read out of bound mmc: renesas_sdhi: don't overwrite TAP settings when HS400 tuning is complete mmc: mmci: stm32: correctly check all elements of sg list Revert "mmc: sdhci-xenon: fix annoying 1.8V regulator warning" arm64: Add part number for Arm Cortex-A78AE perf session: Remap buf if there is no space for event perf tools: Fix perf's libperf_print callback perf: arm-spe: Fix perf report --mem-mode iommu/omap: Fix regression in probe for NULL pointer dereference SUNRPC: svc_tcp_sendmsg() should handle errors from xdr_alloc_bvec() SUNRPC: Handle low memory situations in call_status() SUNRPC: Handle ENOMEM in call_transmit_status() io_uring: don't touch scm_fp_list after queueing skb drbd: Fix five use after free bugs in get_initial_state bpf: Support dual-stack sockets in bpf_tcp_check_syncookie spi: bcm-qspi: fix MSPI only access with bcm_qspi_exec_mem_op() qede: confirm skb is allocated before using net: phy: mscc-miim: reject clause 45 register accesses rxrpc: fix a race in rxrpc_exit_net() net: openvswitch: fix leak of nested actions net: openvswitch: don't send internal clone attribute to the userspace. ice: synchronize_rcu() when terminating rings ipv6: Fix stats accounting in ip6_pkt_drop ice: Do not skip not enabled queues in ice_vc_dis_qs_msg ice: Set txq_teid to ICE_INVAL_TEID on ring creation dpaa2-ptp: Fix refcount leak in dpaa2_ptp_probe IB/rdmavt: add lock to call to rvt_error_qp to prevent a race condition RDMA/mlx5: Don't remove cache MRs when a delay is needed sfc: Do not free an empty page_ring bnxt_en: reserve space inside receive page for skb_shared_info drm/imx: Fix memory leak in imx_pd_connector_get_modes drm/imx: imx-ldb: Check for null pointer after calling kmemdup net: stmmac: Fix unset max_speed difference between DT and non-DT platforms net: ipv4: fix route with nexthop object delete warning ice: Clear default forwarding VSI during VSI release net/tls: fix slab-out-of-bounds bug in decrypt_internal scsi: zorro7xx: Fix a resource leak in zorro7xx_remove_one() NFSv4: fix open failure with O_ACCMODE flag Revert "NFSv4: Handle the special Linux file open access mode" Drivers: hv: vmbus: Fix potential crash on module unload drm/amdgpu: fix off by one in amdgpu_gfx_kiq_acquire() Revert "hv: utils: add PTP_1588_CLOCK to Kconfig to fix build" mm: fix race between MADV_FREE reclaim and blkdev direct IO read parisc: Fix patch code locking and flushing parisc: Fix CPU affinity for Lasi, WAX and Dino chips NFS: Avoid writeback threads getting stuck in mempool_alloc() NFS: nfsiod should not block forever in mempool_alloc() SUNRPC: Fix socket waits for write buffer space jfs: prevent NULL deref in diFree virtio_console: eliminate anonymous module_init & module_exit serial: samsung_tty: do not unlock port->lock for uart_write_wakeup() x86/Kconfig: Do not allow CONFIG_X86_X32_ABI=y with llvm-objcopy NFS: swap-out must always use STABLE writes. NFS: swap IO handling is slightly different for O_DIRECT IO SUNRPC: remove scheduling boost for "SWAPPER" tasks. SUNRPC/xprt: async tasks mustn't block waiting for memory SUNRPC/call_alloc: async tasks mustn't block waiting for memory clk: Enforce that disjoints limits are invalid clk: ti: Preserve node in ti_dt_clocks_register() xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32 NFSv4: Protect the state recovery thread against direct reclaim NFSv4.2: fix reference count leaks in _nfs42_proc_copy_notify() w1: w1_therm: fixes w1_seq for ds28ea00 sensors staging: wfx: fix an error handling in wfx_init_common() phy: amlogic: meson8b-usb2: Use dev_err_probe() staging: vchiq_core: handle NULL result of find_service_by_handle clk: si5341: fix reported clk_rate when output divider is 2 minix: fix bug when opening a file with O_DIRECT init/main.c: return 1 from handled __setup() functions ceph: fix memory leak in ceph_readdir when note_last_dentry returns error netlabel: fix out-of-bounds memory accesses Bluetooth: Fix use after free in hci_send_acl MIPS: ingenic: correct unit node address xtensa: fix DTC warning unit_address_format usb: dwc3: omap: fix "unbalanced disables for smps10_out1" on omap5evm net: sfp: add 2500base-X quirk for Lantech SFP module net: limit altnames to 64k total net: account alternate interface name memory can: isotp: set default value for N_As to 50 micro seconds scsi: libfc: Fix use after free in fc_exch_abts_resp() powerpc/secvar: fix refcount leak in format_show() MIPS: fix fortify panic when copying asm exception handlers PCI: endpoint: Fix misused goto label bnxt_en: Eliminate unintended link toggle during FW reset Bluetooth: use memset avoid memory leaks Bluetooth: Fix not checking for valid hdev on bt_dev_{info,warn,err,dbg} tuntap: add sanity checks about msg_controllen in sendmsg macvtap: advertise link netns via netlink mips: ralink: fix a refcount leak in ill_acc_of_setup() net/smc: correct settings of RMB window update limit scsi: hisi_sas: Free irq vectors in order for v3 HW scsi: aha152x: Fix aha152x_setup() __setup handler return value mt76: mt7615: Fix assigning negative values to unsigned variable scsi: pm8001: Fix memory leak in pm8001_chip_fw_flash_update_req() scsi: pm8001: Fix tag leaks on error scsi: pm8001: Fix task leak in pm8001_send_abort_all() scsi: pm8001: Fix pm8001_mpi_task_abort_resp() scsi: pm8001: Fix pm80xx_pci_mem_copy() interface drm/amdkfd: make CRAT table missing message informational only dm: requeue IO if mapping table not yet available dm ioctl: prevent potential spectre v1 gadget ipv4: Invalidate neighbour for broadcast address upon address addition iwlwifi: mvm: Correctly set fragmented EBS power: supply: axp288-charger: Set Vhold to 4.4V PCI: pciehp: Add Qualcomm quirk for Command Completed erratum tcp: Don't acquire inet_listen_hashbucket::lock with disabled BH. PCI: endpoint: Fix alignment fault error in copy tests usb: ehci: add pci device support for Aspeed platforms iommu/arm-smmu-v3: fix event handling soft lockup PCI: aardvark: Fix support for MSI interrupts drm/amdgpu: Fix recursive locking warning powerpc: Set crashkernel offset to mid of RMA region ipv6: make mc_forwarding atomic libbpf: Fix build issue with llvm-readelf cfg80211: don't add non transmitted BSS to 6GHz scanned channels mt76: dma: initialize skip_unmap in mt76_dma_rx_fill power: supply: axp20x_battery: properly report current when discharging scsi: bfa: Replace snprintf() with sysfs_emit() scsi: mvsas: Replace snprintf() with sysfs_emit() bpf: Make dst_port field in struct bpf_sock 16-bit wide ath11k: mhi: use mhi_sync_power_up() ath11k: fix kernel panic during unload/load ath11k modules powerpc: dts: t104xrdb: fix phy type for FMAN 4/5 ptp: replace snprintf with sysfs_emit usb: gadget: tegra-xudc: Fix control endpoint's definitions usb: gadget: tegra-xudc: Do not program SPARAM drm/amd/amdgpu/amdgpu_cs: fix refcount leak of a dma_fence obj drm/amd/display: Add signal type check when verify stream backends same ath5k: fix OOB in ath5k_eeprom_read_pcal_info_5111 drm: Add orientation quirk for GPD Win Max KVM: x86/emulator: Emulate RDPID only if it is enabled in guest KVM: x86/svm: Clear reserved bits written to PerfEvtSeln MSRs rtc: wm8350: Handle error for wm8350_register_irq gfs2: gfs2_setattr_size error path fix gfs2: Fix gfs2_release for non-writers regression gfs2: Check for active reservation in gfs2_release ubifs: Rectify space amount budget for mkdir/tmpfile operations Conflicts: drivers/tty/serial/8250/8250_mtk.c (used ours) Change-Id: Ib1dde0f643615c29b8e626700b801761ea76e822 Signed-off-by: bengris32 <[email protected]>
- Loading branch information
