)]}' { "log": [ { "commit": "c5979638481f466dfb8c7af62bec43acc0d0007d", "tree": "129d03d8e2525bc0f40b482f5790ab486804b2fa", "parents": [ "bfcd7a219939e3b4143121fa04ccbb6f284c104d" ], "author": { "name": "Lecopzer Chen", "email": "lecopzer.chen@mediatek.com", "time": "Wed Jan 19 15:10:32 2022 +0800" }, "committer": { "name": "Pranav Vashi", "email": "neobuddy89@gmail.com", "time": "Mon Oct 21 21:54:53 2024 +0530" }, "message": "ANDROID: kbuild: fix ld_flags missing for LTO\n\ncommit dc5723b02e523b (\"kbuild: add support for Clang LTO\")\nfrom upstream had included scripts/Makefile.lib, but in\nandroid12-5.4 it seems missing and makes ld_flags always empty.\n\nBug: 215292602\nFixes: 2e39b40dd2180 (\"ANDROID: kbuild: add support for Clang LTO\")\nSigned-off-by: Lecopzer Chen \u003clecopzer.chen@mediatek.com\u003e\nChange-Id: I4fcbf84e75df0dcd44b175d722fdf6869101e191\nSigned-off-by: Pranav Vashi \u003cneobuddy89@gmail.com\u003e\n" }, { "commit": "e90397fa27a5a2832950ca3c8fbfc87a3aacb2f6", "tree": "1c8e17dba9995e5cb56cf78016e77fc9bf3abe1a", "parents": [ "56b41031ea3be9e5cee8deffe5e6d5828cefe054" ], "author": { "name": "Sultan Alsawaf", "email": "sultan@kerneltoast.com", "time": "Sat Apr 10 14:45:00 2021 +0200" }, "committer": { "name": "Pranav Vashi", "email": "neobuddy89@gmail.com", "time": "Mon Oct 21 21:54:47 2024 +0530" }, "message": "scripts: Don\u0027t append \"+\" to localversion\n\nSigned-off-by: Sultan Alsawaf \u003csultan@kerneltoast.com\u003e\nSigned-off-by: Pranav Vashi \u003cneobuddy89@gmail.com\u003e\n" }, { "commit": "467961d8e1246b3cf69e27903e8c4902c3eba5db", "tree": "92c2bf8037bfda148cc8a77cf9abd8089fc6ddf5", "parents": [ "5dedf93a28e269f89aead6b2f6bbee71c65a8c4c" ], "author": { "name": "Alexander Koskovich", "email": "akoskovich@pm.me", "time": "Wed Feb 09 21:59:06 2022 -0700" }, "committer": { "name": "Pranav Vashi", "email": "neobuddy89@gmail.com", "time": "Mon Oct 21 21:54:45 2024 +0530" }, "message": "scripts: gki: Add additional oplus_Q/GKI.config fragments\n\n * This makes it easier to stay inline with how CAF\n has shifted to handling defconfigs, without modifying\n lahaina_QGKI.config.\n\nChange-Id: Ic874a88916e2610e4c0021f9b48aed1a099cfefd\n" }, { "commit": "a421f676d631274e0c29b685ab578aeb6955ea60", "tree": "2739e02b8e362f78759310c6f60575735af690fa", "parents": [ "16437e947f00c9a7dd2c9290547d022f9cc60ac7", "b8b210d80a09fc8b9db0ab47888f8b84dcf3f730" ], "author": { "name": "Michael Bestas", "email": "mkbestas@lineageos.org", "time": "Tue Oct 08 21:50:00 2024 +0300" }, "committer": { "name": "Alexander Winkowski", "email": "dereference23@outlook.com", "time": "Wed Oct 09 18:08:17 2024 +0000" }, "message": "Merge tag \u0027ASB-2024-10-05_11-5.4\u0027 of https://android.googlesource.com/kernel/common into android13-5.4-lahaina\n\nhttps://source.android.com/docs/security/bulletin/2024-10-01\n\n* tag \u0027ASB-2024-10-05_11-5.4\u0027 of https://android.googlesource.com/kernel/common: (397 commits)\n Linux 5.4.283\n scsi: aacraid: Fix double-free on probe failure\n net: dsa: mv8e6xxx: Fix stub function parameters\n usb: core: sysfs: Unmerge @usb3_hardware_lpm_attr_group in remove_power_attributes()\n usb: dwc3: st: add missing depopulate in probe error path\n usb: dwc3: st: fix probed platform device ref count on probe error path\n usb: dwc3: core: Prevent USB core invalid event buffer address access\n usb: dwc3: omap: add missing depopulate in probe error path\n USB: serial: option: add MeiG Smart SRM825L\n cdc-acm: Add DISABLE_ECHO quirk for GE HealthCare UI Controller\n soc: qcom: cmd-db: Map shared memory as WC, not WB\n nfc: pn533: Add poll mod list filling check\n nfc: pn533: Add autopoll capability\n nfc: pn533: Add dev_up/dev_down hooks to phy_ops\n net: busy-poll: use ktime_get_ns() instead of local_clock()\n gtp: fix a potential NULL pointer dereference\n ethtool: check device is present when getting link settings\n r8152: Factor out OOB link list waits\n soundwire: stream: fix programming slave ports for non-continous port maps\n net:rds: Fix possible deadlock in rds_message_put\n ...\n\nChange-Id: Ia6559a770f5db990f2bf6e5a034c63e3d7df4510\n" }, { "commit": "defbd8dccd7ff8a99da1827f6d1391d615abb607", "tree": "53c6349da4ec22d30c7ac0a211e2f33800ab6f7c", "parents": [ "123d88374f67f7389c85180ca6030aad5b6bd969", "d2648db3ba1d0a1b125d27f219b1331d6fd0f28b" ], "author": { "name": "Michael Bestas", "email": "mkbestas@lineageos.org", "time": "Tue Oct 01 11:13:13 2024 +0300" }, "committer": { "name": "Alexander Winkowski", "email": "dereference23@outlook.com", "time": "Wed Oct 09 18:08:09 2024 +0000" }, "message": "Merge tag \u0027LA.UM.9.14.r1-25000.02-LAHAINA.QSSI14.0\u0027 of https://git.codelinaro.org/clo/la/kernel/msm-5.4 into android13-5.4-lahaina\n\n\"LA.UM.9.14.r1-25000.02-LAHAINA.QSSI14.0\"\n\n* tag \u0027LA.UM.9.14.r1-25000.02-LAHAINA.QSSI14.0\u0027 of https://git.codelinaro.org/clo/la/kernel/msm-5.4:\n msm-5.4.c3: qseecom: Fix possible race condition\n msm: adsprpc: Avoid taking reference for group_info\n adsprpc: Handle UAF scenario in put_args\n msm-5.4.c3: qseecom: Fix possible race condition\n USB: storage: Replace the sprintf with scnprintf\n adsprpc: Handle UAF scenario in put_args\n msm: adsprpc: Avoid taking reference for group_info\n usb: gadget: f_gsi: bail out if opts is null\n msm: ep_pcie: Avoid setting host wake pending flag for D0\n msm: ep_pcie: Prevent repetitive wake operation if wake is in process\n msm_ipa: Install exception rule for PPPoE-MPLS\n securemsm-kernel: Decrement the server object ref count in mutex context\n qcedev: fix UAF in qcedev_smmu\n thermal: qcom: Add support to update tsens trip based on nvmem data\n msm: eva: Fix UAF issue when remove module\n msm: cvp: OOB write fix due to integer underflow\n msm: ep_pcie: Avoid writing req_L1_exit during dstate change\n msm: eva: Adding kref count for cvp_get_inst_from_id\n\nChange-Id: I3dad70dec062688b50554d7676a4b85bcb42fad9\n" }, { "commit": "123d88374f67f7389c85180ca6030aad5b6bd969", "tree": "de14d6bf8821301b9faca47952695aedf38c35cf", "parents": [ "a6f230d5d52f9c0bcc634bf554811d5fa4ad28a3", "d62984adb112e9b02a3e754e0b5b3295d7501600" ], "author": { "name": "Michael Bestas", "email": "mkbestas@lineageos.org", "time": "Tue Oct 01 11:09:58 2024 +0300" }, "committer": { "name": "Alexander Winkowski", "email": "dereference23@outlook.com", "time": "Wed Oct 09 18:08:04 2024 +0000" }, "message": "Merge tag \u0027ASB-2024-09-05_11-5.4\u0027 of https://android.googlesource.com/kernel/common into android13-5.4-lahaina\n\nhttps://source.android.com/docs/security/bulletin/2024-09-01\nCVE-2024-36972\n\n* tag \u0027ASB-2024-09-05_11-5.4\u0027 of https://android.googlesource.com/kernel/common: (59 commits)\n ANDROID: delete tool added by mistake\n ANDROID: fix ENOMEM check of binder_proc_ext\n ANDROID: binder: fix KMI issues due to frozen notification\n BACKPORT: FROMGIT: binder: frozen notification binder_features flag\n BACKPORT: FROMGIT: binder: frozen notification\n BACKPORT: selftests/binderfs: add test for feature files\n UPSTREAM: docs: binderfs: add section about feature files\n BACKPORT: binderfs: add support for feature files\n FROMLIST: binder: fix memory leaks of spam and pending work\n FROMGIT: Binder: add TF_UPDATE_TXN to replace outdated txn\n BACKPORT: binder: tell userspace to dump current backtrace when detected oneway spamming\n UPSTREAM: net: sched: sch_multiq: fix possible OOB write in multiq_tune()\n FROMLIST: binder: fix UAF caused by offsets overwrite\n Revert \"net: mac802154: Fix racy device stats updates by DEV_STATS_INC() and DEV_STATS_ADD()\"\n Linux 5.4.281\n tap: add missing verification for short frame\n tun: add missing verification for short frame\n filelock: Fix fcntl/close race recovery compat path\n ALSA: hda/realtek: Enable headset mic on Positivo SU C1400\n jfs: don\u0027t walk off the end of ealist\n ...\n\n Conflicts:\n\tdrivers/android/binder.c\n\tinclude/uapi/linux/android/binder.h\n\nChange-Id: I0cdb84a8241c0abaf6e5fad140ed19480655d53c\n" }, { "commit": "147724ba5f99d4d75bfe6573efcb6c568be0761a", "tree": "3a3b9c756e674df82f3537209fe17bf36de34e7a", "parents": [ "d82959916bee415b2a4242e679908be04c5377bb", "5bb3c84a1185766460e392fe31ff8882f989c66b" ], "author": { "name": "Greg Kroah-Hartman", "email": "gregkh@google.com", "time": "Wed Aug 28 08:50:45 2024 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@google.com", "time": "Wed Aug 28 08:50:45 2024 +0000" }, "message": "Merge 5.4.282 into android11-5.4-lts\n\nChanges in 5.4.282\n\tEDAC, skx_common: Refactor so that we initialize \"dev\" in result of adxl decode.\n\tEDAC, skx: Retrieve and print retry_rd_err_log registers\n\tEDAC/skx_common: Add new ADXL components for 2-level memory\n\tEDAC, i10nm: make skx_common.o a separate module\n\tplatform/chrome: cros_ec_debugfs: fix wrong EC message version\n\thfsplus: fix to avoid false alarm of circular locking\n\tx86/of: Return consistent error type from x86_of_pci_irq_enable()\n\tx86/pci/intel_mid_pci: Fix PCIBIOS_* return code handling\n\tx86/pci/xen: Fix PCIBIOS_* return code handling\n\tx86/platform/iosf_mbi: Convert PCIBIOS_* return codes to errnos\n\thwmon: (adt7475) Fix default duty on fan is disabled\n\tpwm: stm32: Always do lazy disabling\n\thwmon: (max6697) Fix underflow when writing limit attributes\n\thwmon: (max6697) Fix swapped temp{1,8} critical alarms\n\tarm64: dts: qcom: sdm845: add power-domain to UFS PHY\n\tarm64: dts: qcom: msm8996: specify UFS core_clk frequencies\n\tarm64: dts: rockchip: Increase VOP clk rate on RK3328\n\tARM: dts: imx6qdl-kontron-samx6i: move phy reset into phy-node\n\tARM: dts: imx6qdl-kontron-samx6i: fix PHY reset\n\tARM: dts: imx6qdl-kontron-samx6i: fix board reset\n\tARM: dts: imx6qdl-kontron-samx6i: fix PCIe reset polarity\n\tarm64: dts: mediatek: mt7622: fix \"emmc\" pinctrl mux\n\tarm64: dts: amlogic: gx: correct hdmi clocks\n\tm68k: atari: Fix TT bootup freeze / unexpected (SCU) interrupt messages\n\tx86/xen: Convert comma to semicolon\n\tm68k: cmpxchg: Fix return value for default case in __arch_xchg()\n\tfirmware: turris-mox-rwtm: Fix checking return value of wait_for_completion_timeout()\n\tfirmware: turris-mox-rwtm: Initialize completion before mailbox\n\twifi: brcmsmac: LCN PHY code is used for BCM4313 2G-only device\n\tnet/smc: Allow SMC-D 1MB DMB allocations\n\tnet/smc: set rmb\u0027s SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined\n\tselftests/bpf: Check length of recv in test_sockmap\n\tlib: objagg: Fix general protection fault\n\tmlxsw: spectrum_acl_erp: Fix object nesting warning\n\twifi: cfg80211: fix typo in cfg80211_calculate_bitrate_he()\n\twifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()\n\tnet: fec: Refactor: #define magic constants\n\tnet: fec: Fix FEC_ECR_EN1588 being cleared on link-down\n\tipvs: Avoid unnecessary calls to skb_is_gso_sctp\n\tnetfilter: nf_tables: rise cap on SELinux secmark context\n\tperf/x86/intel/pt: Fix pt_topa_entry_for_page() address calculation\n\tperf: Fix perf_aux_size() for greater-than 32-bit size\n\tperf: Prevent passing zero nr_pages to rb_alloc_aux()\n\tqed: Improve the stack space of filter_config()\n\twifi: virt_wifi: avoid reporting connection success with wrong SSID\n\tgss_krb5: Fix the error handling path for crypto_sync_skcipher_setkey\n\twifi: virt_wifi: don\u0027t use strlen() in const context\n\tbna: adjust \u0027name\u0027 buf size of bna_tcb and bna_ccb structures\n\tselftests: forwarding: devlink_lib: Wait for udev events after reloading\n\tUSB: move snd_usb_pipe_sanity_check into the USB core\n\tmedia: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()\n\tmedia: imon: Fix race getting ictx-\u003elock\n\tsaa7134: Unchecked i2c_transfer function result fixed\n\tmedia: uvcvideo: Allow entity-defined get_info and get_cur\n\tmedia: uvcvideo: Override default flags\n\tmedia: renesas: vsp1: Fix _irqsave and _irq mix\n\tmedia: renesas: vsp1: Store RPF partition configuration per RPF instance\n\tleds: trigger: Unregister sysfs attributes before calling deactivate()\n\tperf report: Fix condition in sort__sym_cmp()\n\tdrm/etnaviv: fix DMA direction handling for cached RW buffers\n\tdrm/qxl: Add check for drm_cvt_mode\n\tmfd: omap-usb-tll: Use struct_size to allocate tll\n\tSUNRPC: avoid soft lockup when transmitting UDP to reachable server.\n\text4: avoid writing unitialized memory to disk in EA inodes\n\tsparc64: Fix incorrect function signature and add prototype for prom_cif_init\n\tSUNRPC: Fixup gss_status tracepoint error output\n\tPCI: Fix resource double counting on remove \u0026 rescan\n\tInput: qt1050 - handle CHIP_ID reading error\n\tRDMA/mlx4: Fix truncated output warning in mad.c\n\tRDMA/mlx4: Fix truncated output warning in alias_GUID.c\n\tRDMA/rxe: Don\u0027t set BTH_ACK_MASK for UC or UD QPs\n\tASoC: max98088: Check for clk_prepare_enable() error\n\tmtd: make mtd_test.c a separate module\n\tRDMA/device: Return error earlier if port in not valid\n\tInput: elan_i2c - do not leave interrupt disabled on suspend failure\n\tMIPS: Octeron: remove source file executable bit\n\tpowerpc/xmon: Fix disassembly CPU feature checks\n\tmacintosh/therm_windtunnel: fix module unload.\n\tbnxt_re: Fix imm_data endianness\n\tnetfilter: ctnetlink: use helper function to calculate expect ID\n\tpinctrl: core: fix possible memory leak when pinctrl_enable() fails\n\tpinctrl: single: fix possible memory leak when pinctrl_enable() fails\n\tpinctrl: ti: ti-iodelay: Drop if block with always false condition\n\tpinctrl: ti: ti-iodelay: fix possible memory leak when pinctrl_enable() fails\n\tpinctrl: freescale: mxs: Fix refcount of child\n\tfs/nilfs2: remove some unused macros to tame gcc\n\tnilfs2: avoid undefined behavior in nilfs_cnt32_ge macro\n\trtc: interface: Add RTC offset to alarm after fix-up\n\ttick/broadcast: Make takeover of broadcast hrtimer reliable\n\tnet: netconsole: Disable target before netpoll cleanup\n\taf_packet: Handle outgoing VLAN packets without hardware offloading\n\tipv6: take care of scope when choosing the src addr\n\tchar: tpm: Fix possible memory leak in tpm_bios_measurements_open()\n\tmedia: venus: fix use after free in vdec_close\n\thfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()\n\tdrm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes\n\tdrm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes\n\tdrm/amd/display: Check for NULL pointer\n\tudf: Avoid using corrupted block bitmap buffer\n\tm68k: amiga: Turn off Warp1260 interrupts during boot\n\text4: check dot and dotdot of dx_root before making dir indexed\n\text4: make sure the first directory block is not a hole\n\twifi: mwifiex: Fix interface type change\n\tleds: ss4200: Convert PCIBIOS_* return codes to errnos\n\ttools/memory-model: Fix bug in lock.cat\n\thwrng: amd - Convert PCIBIOS_* return codes to errnos\n\tPCI: hv: Return zero, not garbage, when reading PCI_INTERRUPT_PIN\n\tbinder: fix hang of unregistered readers\n\tscsi: qla2xxx: Return ENOBUFS if sg_cnt is more than one for ELS cmds\n\tf2fs: fix to don\u0027t dirty inode for readonly filesystem\n\tclk: davinci: da8xx-cfgchip: Initialize clk_init_data before use\n\tubi: eba: properly rollback inside self_check_eba\n\tdecompress_bunzip2: fix rare decompression failure\n\tkobject_uevent: Fix OOB access within zap_modalias_env()\n\trtc: cmos: Fix return value of nvmem callbacks\n\tscsi: qla2xxx: During vport delete send async logout explicitly\n\tscsi: qla2xxx: Fix for possible memory corruption\n\tscsi: qla2xxx: Complete command early within lock\n\tscsi: qla2xxx: validate nvme_local_port correctly\n\tperf/x86/intel/pt: Fix topa_entry base length\n\tperf/x86/intel/pt: Fix a topa_entry base address calculation\n\trtc: isl1208: Fix return value of nvmem callbacks\n\twatchdog/perf: properly initialize the turbo mode timestamp and rearm counter\n\tplatform: mips: cpu_hwmon: Disable driver on unsupported hardware\n\tRDMA/iwcm: Fix a use-after-free related to destroying CM IDs\n\tselftests/sigaltstack: Fix ppc64 GCC build\n\trbd: don\u0027t assume rbd_is_lock_owner() for exclusive mappings\n\tdrm/panfrost: Mark simple_ondemand governor as softdep\n\trbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait\n\trbd: don\u0027t assume RBD_LOCK_STATE_LOCKED for exclusive mappings\n\tBluetooth: btusb: Add RTL8852BE device 0489:e125 to device tables\n\tBluetooth: btusb: Add Realtek RTL8852BE support ID 0x13d3:0x3591\n\tnilfs2: handle inconsistent state in nilfs_btnode_create_block()\n\tkdb: address -Wformat-security warnings\n\tkdb: Use the passed prompt in kdb_position_cursor()\n\tjfs: Fix array-index-out-of-bounds in diFree\n\tum: time-travel: fix time-travel-start option\n\tlibbpf: Fix no-args func prototype BTF dumping syntax\n\tdma: fix call order in dmam_free_coherent\n\tMIPS: SMP-CPS: Fix address for GCR_ACCESS register for CM3 and later\n\tipv4: Fix incorrect source address in Record Route option\n\tnet: bonding: correctly annotate RCU in bond_should_notify_peers()\n\ttipc: Return non-zero value from tipc_udp_addr2str() on error\n\tnet: nexthop: Initialize all fields in dumped nexthops\n\tbpf: Fix a segment issue when downgrading gso_size\n\tmISDN: Fix a use after free in hfcmulti_tx()\n\tapparmor: Fix null pointer deref when receiving skb during sock creation\n\tpowerpc: fix a file leak in kvm_vcpu_ioctl_enable_cap()\n\tASoC: Intel: Convert to new X86 CPU match macros\n\tASoC: Intel: Move soc_intel_is_foo() helpers to a generic header\n\tASoC: Intel: use soc_intel_is_byt_cr() only when IOSF_MBI is reachable\n\tnvme-pci: add missing condition check for existence of mapped data\n\tmm: avoid overflows in dirty throttling logic\n\tPCI: rockchip: Make \u0027ep-gpios\u0027 DT property optional\n\tPCI: rockchip: Use GPIOD_OUT_LOW flag while requesting ep_gpio\n\tparport: Convert printk(KERN_\u003cLEVEL\u003e to pr_\u003clevel\u003e(\n\tparport: Standardize use of printmode\n\tdev/parport: fix the array out-of-bounds risk\n\tdriver core: Cast to (void *) with __force for __percpu pointer\n\tdevres: Fix memory leakage caused by driver API devm_free_percpu()\n\tgenirq: Allow the PM device to originate from irq domain\n\tirqchip/imx-irqsteer: Constify irq_chip struct\n\tirqchip/imx-irqsteer: Add runtime PM support\n\tirqchip/imx-irqsteer: Handle runtime power management correctly\n\tremoteproc: imx_rproc: ignore mapping vdev regions\n\tremoteproc: imx_rproc: Fix ignoring mapping vdev regions\n\tremoteproc: imx_rproc: Skip over memory region when node value is NULL\n\tdrm/nouveau: prime: fix refcount underflow\n\tdrm/vmwgfx: Fix overlay when using Screen Targets\n\tnet/iucv: fix use after free in iucv_sock_close()\n\tnet/mlx5e: Add a check for the return value from mlx5_port_set_eth_ptys\n\tipv6: fix ndisc_is_useropt() handling for PIO\n\tHID: wacom: Modify pen IDs\n\tprotect the fetch of -\u003efd[fd] in do_dup2() from mispredictions\n\tALSA: usb-audio: Correct surround channels in UAC1 channel map\n\tnet: usb: sr9700: fix uninitialized variable use in sr_mdio_read\n\tnetfilter: ipset: Add list flush to cancel_gc\n\tgenirq: Allow irq_chip registration functions to take a const irq_chip\n\tirqchip/mbigen: Fix mbigen node address layout\n\tx86/mm: Fix pti_clone_pgtable() alignment assumption\n\tsctp: move hlist_node and hashent out of sctp_ep_common\n\tsctp: Fix null-ptr-deref in reuseport_add_sock().\n\tnet: usb: qmi_wwan: fix memory leak for not ip packets\n\tnet: linkwatch: use system_unbound_wq\n\tBluetooth: l2cap: always unlock channel in l2cap_conless_channel()\n\tnet: fec: Stop PPS on driver remove\n\tmd/raid5: avoid BUG_ON() while continue reshape after reassembling\n\tclocksource/drivers/sh_cmt: Address race condition for clock events\n\tACPI: battery: create alarm sysfs attribute atomically\n\tACPI: SBS: manage alarm sysfs attribute through psy core\n\tselftests/bpf: Fix send_signal test with nested CONFIG_PARAVIRT\n\tPCI: Add Edimax Vendor ID to pci_ids.h\n\tudf: prevent integer overflow in udf_bitmap_free_blocks()\n\twifi: nl80211: don\u0027t give key data to userspace\n\tbtrfs: fix bitmap leak when loading free space cache on duplicate entry\n\tdrm/amdgpu: Fix the null pointer dereference to ras_manager\n\tmedia: uvcvideo: Ignore empty TS packets\n\tmedia: uvcvideo: Fix the bandwdith quirk on USB 3.x\n\tjbd2: avoid memleak in jbd2_journal_write_metadata_buffer\n\ts390/sclp: Prevent release of buffer in I/O\n\tSUNRPC: Fix a race to wake a sync task\n\text4: fix wrong unit use in ext4_mb_find_by_goal\n\tarm64: cpufeature: Force HWCAP to be based on the sysreg visible to user-space\n\tarm64: Add Neoverse-V2 part\n\tarm64: cputype: Add Cortex-X4 definitions\n\tarm64: cputype: Add Neoverse-V3 definitions\n\tarm64: errata: Add workaround for Arm errata 3194386 and 3312417\n\tarm64: cputype: Add Cortex-X3 definitions\n\tarm64: cputype: Add Cortex-A720 definitions\n\tarm64: cputype: Add Cortex-X925 definitions\n\tarm64: errata: Unify speculative SSBS errata logic\n\tarm64: errata: Expand speculative SSBS workaround\n\tarm64: cputype: Add Cortex-X1C definitions\n\tarm64: cputype: Add Cortex-A725 definitions\n\tarm64: errata: Expand speculative SSBS workaround (again)\n\ti2c: smbus: Don\u0027t filter out duplicate alerts\n\ti2c: smbus: Improve handling of stuck alerts\n\ti2c: smbus: Send alert notifications to all devices if source not found\n\tbpf: kprobe: remove unused declaring of bpf_kprobe_override\n\tspi: fsl-lpspi: remove unneeded array\n\tspi: spi-fsl-lpspi: Fix scldiv calculation\n\tdrm/client: fix null pointer dereference in drm_client_modeset_probe\n\tALSA: line6: Fix racy access to midibuf\n\tALSA: hda: Add HP MP9 G4 Retail System AMS to force connect list\n\tALSA: hda/hdmi: Yet more pin fix for HP EliteDesk 800 G4\n\tusb: vhci-hcd: Do not drop references before new references are gained\n\tUSB: serial: debug: do not echo input by default\n\tusb: gadget: core: Check for unset descriptor\n\tscsi: ufs: core: Fix hba-\u003elast_dme_cmd_tstamp timestamp updating logic\n\ttick/broadcast: Move per CPU pointer access into the atomic section\n\tntp: Clamp maxerror and esterror to operating range\n\tdriver core: Fix uevent_show() vs driver detach race\n\tntp: Safeguard against time_constant overflow\n\tscsi: mpt3sas: Remove scsi_dma_map() error messages\n\tscsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES\n\tserial: core: check uartclk for zero to avoid divide by zero\n\tgenirq/irqdesc: Honor caller provided affinity in alloc_desc()\n\tpower: supply: axp288_charger: Fix constant_charge_voltage writes\n\tpower: supply: axp288_charger: Round constant_charge_voltage writes down\n\ttracing: Fix overflow in get_free_elt()\n\tx86/mtrr: Check if fixed MTRRs exist before saving them\n\tdrm/bridge: analogix_dp: properly handle zero sized AUX transactions\n\tdrm/mgag200: Set DDC timeout in milliseconds\n\tFix gcc 4.9 build issue in 5.4.y\n\tkbuild: Fix \u0027-S -c\u0027 in x86 stack protector scripts\n\tnetfilter: nf_tables: set element extended ACK reporting support\n\tnetfilter: nf_tables: use timestamp to check for set element timeout\n\tnetfilter: nf_tables: prefer nft_chain_validate\n\tdrm/i915/gem: Fix Virtual Memory mapping boundaries calculation\n\tarm64: cpufeature: Fix the visibility of compat hwcaps\n\tmedia: uvcvideo: Use entity get_cur in uvc_ctrl_set\n\texec: Fix ToCToU between perm check and set-uid/gid usage\n\tnvme/pci: Add APST quirk for Lenovo N60z laptop\n\tARM: dts: imx6qdl-kontron-samx6i: fix phy-mode\n\tmedia: Revert \"media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()\"\n\tLinux 5.4.282\n\nChange-Id: I6d0e4d26021c20136cefafa63b138db47b4069b8\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@google.com\u003e\n" }, { "commit": "53174ce02d2fa9a7f5002055e765ddd021db4bb9", "tree": "21fef5d77fb010eeb2cf21b856b9c2b5ed2d9b85", "parents": [ "af3948929b10ec39f185192c25fc81d8c61714bf" ], "author": { "name": "Nathan Chancellor", "email": "nathan@kernel.org", "time": "Fri Jul 26 11:05:00 2024 -0700" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Mon Aug 19 05:33:53 2024 +0200" }, "message": "kbuild: Fix \u0027-S -c\u0027 in x86 stack protector scripts\n\ncommit 3415b10a03945b0da4a635e146750dfe5ce0f448 upstream.\n\nAfter a recent change in clang to stop consuming all instances of \u0027-S\u0027\nand \u0027-c\u0027 [1], the stack protector scripts break due to the kernel\u0027s use\nof -Werror\u003dunused-command-line-argument to catch cases where flags are\nnot being properly consumed by the compiler driver:\n\n $ echo | clang -o - -x c - -S -c -Werror\u003dunused-command-line-argument\n clang: error: argument unused during compilation: \u0027-c\u0027 [-Werror,-Wunused-command-line-argument]\n\nThis results in CONFIG_STACKPROTECTOR getting disabled because\nCONFIG_CC_HAS_SANE_STACKPROTECTOR is no longer set.\n\n\u0027-c\u0027 and \u0027-S\u0027 both instruct the compiler to stop at different stages of\nthe pipeline (\u0027-S\u0027 after compiling, \u0027-c\u0027 after assembling), so having\nthem present together in the same command makes little sense. In this\ncase, the test wants to stop before assembling because it is looking at\nthe textual assembly output of the compiler for either \u0027%fs\u0027 or \u0027%gs\u0027,\nso remove \u0027-c\u0027 from the list of arguments to resolve the error.\n\nAll versions of GCC continue to work after this change, along with\nversions of clang that do or do not contain the change mentioned above.\n\nCc: stable@vger.kernel.org\nFixes: 4f7fd4d7a791 (\"[PATCH] Add the -fstack-protector option to the CFLAGS\")\nFixes: 60a5317ff0f4 (\"x86: implement x86_32 stack protector\")\nLink: https://github.com/llvm/llvm-project/commit/6461e537815f7fa68cef06842505353cf5600e9c [1]\nSigned-off-by: Nathan Chancellor \u003cnathan@kernel.org\u003e\nSigned-off-by: Masahiro Yamada \u003cmasahiroy@kernel.org\u003e\n[nathan: Fixed conflict in 32-bit version due to lack of 3fb0fdb3bbe7]\nSigned-off-by: Nathan Chancellor \u003cnathan@kernel.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "df44b16b4fe6352bb1bf4146d88f9113ac521021", "tree": "0e420dcef6f1c0b7298ce4100264874de0b231c9", "parents": [ "58d1d8f5ba463f9777aafd82640a8bdf21f5b9ec", "b61187c8915897901278c36a00b411908a37119c" ], "author": { "name": "Michael Bestas", "email": "mkbestas@lineageos.org", "time": "Mon Aug 05 21:50:23 2024 +0300" }, "committer": { "name": "Michael Bestas", "email": "mkbestas@lineageos.org", "time": "Mon Aug 05 21:50:23 2024 +0300" }, "message": "Merge branch \u0027android11-5.4-lts\u0027 of https://android.googlesource.com/kernel/common into android13-5.4-lahaina\n\n* \u0027android11-5.4-lts\u0027 of https://android.googlesource.com/kernel/common: (482 commits)\n ANDROID: GKI: refresh ABI to include kimage_vaddr\n ANDROID: preserve CRC for struct tcp_sock\n ANDROID: 16K: Don\u0027t set padding vm_flags on 32-bit archs\n Linux 5.4.280\n i2c: rcar: bring hardware to known state when probing\n nilfs2: fix kernel bug on rename operation of broken directory\n tcp: avoid too many retransmit packets\n tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()\n net: tcp: fix unexcepted socket die when snd_wnd is 0\n tcp: refactor tcp_retransmit_timer()\n SUNRPC: Fix RPC client cleaned up the freed pipefs dentries\n libceph: fix race between delayed_work() and ceph_monc_stop()\n ALSA: hda/realtek: Limit mic boost on VAIO PRO PX\n nvmem: meson-efuse: Fix return value of nvmem callbacks\n hpet: Support 32-bit userspace\n USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor\n usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()\n USB: Add USB_QUIRK_NO_SET_INTF quirk for START BP-850k\n USB: serial: option: add Rolling RW350-GL variants\n USB: serial: option: add Netprisma LCUK54 series modules\n ...\n\n Conflicts:\n\tkernel/gen_kheaders.sh\n\nChange-Id: Ib57235b05d1bd369b3852565eabea8e658b59aed\n" }, { "commit": "c043beb2bd5198da577c58321a8f38b52ac40248", "tree": "599239d8835e229c4d05b3e6693bf2090378717c", "parents": [ "b61187c8915897901278c36a00b411908a37119c", "84d75fd864979b0228cfe7170a359c0a60f04a98" ], "author": { "name": "Greg Kroah-Hartman", "email": "gregkh@google.com", "time": "Wed Jul 31 16:27:42 2024 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@google.com", "time": "Wed Jul 31 16:27:42 2024 +0000" }, "message": "Merge 5.4.281 into android11-5.4-lts\n\nChanges in 5.4.281\n\tgcc-plugins: Rename last_stmt() for GCC 14+\n\tfilelock: Remove locks reliably when fcntl/close race is detected\n\tscsi: qedf: Set qed_slowpath_params to zero before use\n\tACPI: EC: Abort address space access upon error\n\tACPI: EC: Avoid returning AE_OK on errors in address space handler\n\twifi: mac80211: mesh: init nonpeer_pm to active by default in mesh sdata\n\twifi: mac80211: fix UBSAN noise in ieee80211_prep_hw_scan()\n\tInput: silead - Always support 10 fingers\n\tila: block BH in ila_output()\n\tkconfig: gconf: give a proper initial state to the Save button\n\tkconfig: remove wrong expr_trans_bool()\n\tfs/file: fix the check in find_next_fd()\n\tmei: demote client disconnect warning on suspend to debug\n\twifi: cfg80211: wext: add extra SIOCSIWSCAN data check\n\tKVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()\n\tALSA: hda/realtek: Add more codec ID to no shutup pins list\n\tmips: fix compat_sys_lseek syscall\n\tInput: elantech - fix touchpad state on resume for Lenovo N24\n\tbytcr_rt5640 : inverse jack detect for Archos 101 cesium\n\tASoC: ti: davinci-mcasp: Set min period size using FIFO config\n\tASoC: ti: omap-hdmi: Fix too long driver name\n\tcan: kvaser_usb: fix return value for hif_usb_send_regout\n\ts390/sclp: Fix sclp_init() cleanup on failure\n\tALSA: dmaengine_pcm: terminate dmaengine before synchronize\n\tnet: usb: qmi_wwan: add Telit FN912 compositions\n\tnet: mac802154: Fix racy device stats updates by DEV_STATS_INC() and DEV_STATS_ADD()\n\tpowerpc/pseries: Whitelist dtl slub object for copying to userspace\n\tpowerpc/eeh: avoid possible crash when edev-\u003epdev changes\n\tscsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed\n\tBluetooth: hci_core: cancel all works upon hci_unregister_dev()\n\tfs: better handle deep ancestor chains in is_subdir()\n\tspi: imx: Don\u0027t expect DMA for i.MX{25,35,50,51,53} cspi devices\n\tselftests/vDSO: fix clang build errors and warnings\n\thfsplus: fix uninit-value in copy_name\n\tARM: 9324/1: fix get_user() broken with veneer\n\tACPI: processor_idle: Fix invalid comparison with insertion sort for latency\n\tdrm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()\n\tnet: relax socket state check at accept time.\n\tocfs2: add bounds checking to ocfs2_check_dir_entry()\n\tjfs: don\u0027t walk off the end of ealist\n\tALSA: hda/realtek: Enable headset mic on Positivo SU C1400\n\tfilelock: Fix fcntl/close race recovery compat path\n\ttun: add missing verification for short frame\n\ttap: add missing verification for short frame\n\tLinux 5.4.281\n\nChange-Id: If3e8a4591ecbbace6792fd595d60744b4364668c\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@google.com\u003e\n" }, { "commit": "59fc8ffb54899e757705b221e2a5f805beed8a50", "tree": "a520a6de80aa7194ecbf0377f1f0206736c9278d", "parents": [ "a236ded9a349d0368c2560b8363e3aef5d9febe8" ], "author": { "name": "Masahiro Yamada", "email": "masahiroy@kernel.org", "time": "Tue Jun 04 01:19:04 2024 +0900" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Sat Jul 27 10:38:29 2024 +0200" }, "message": "kconfig: remove wrong expr_trans_bool()\n\n[ Upstream commit 77a92660d8fe8d29503fae768d9f5eb529c88b36 ]\n\nexpr_trans_bool() performs an incorrect transformation.\n\n[Test Code]\n\n config MODULES\n def_bool y\n modules\n\n config A\n def_bool y\n select C if B !\u003d n\n\n config B\n def_tristate m\n\n config C\n tristate\n\n[Result]\n\n CONFIG_MODULES\u003dy\n CONFIG_A\u003dy\n CONFIG_B\u003dm\n CONFIG_C\u003dm\n\nThis output is incorrect because CONFIG_C\u003dy is expected.\n\nDocumentation/kbuild/kconfig-language.rst clearly explains the function\nof the \u0027!\u003d\u0027 operator:\n\n If the values of both symbols are equal, it returns \u0027n\u0027,\n otherwise \u0027y\u0027.\n\nTherefore, the statement:\n\n select C if B !\u003d n\n\nshould be equivalent to:\n\n select C if y\n\nOr, more simply:\n\n select C\n\nHence, the symbol C should be selected by the value of A, which is \u0027y\u0027.\n\nHowever, expr_trans_bool() wrongly transforms it to:\n\n select C if B\n\nTherefore, the symbol C is selected by (A \u0026\u0026 B), which is \u0027m\u0027.\n\nThe comment block of expr_trans_bool() correctly explains its intention:\n\n * bool FOO!\u003dn \u003d\u003e FOO\n ^^^^\n\nIf FOO is bool, FOO!\u003dn can be simplified into FOO. This is correct.\n\nHowever, the actual code performs this transformation when FOO is\ntristate:\n\n if (e-\u003eleft.sym-\u003etype \u003d\u003d S_TRISTATE) {\n ^^^^^^^^^^\n\nWhile it can be fixed to S_BOOLEAN, there is no point in doing so\nbecause expr_tranform() already transforms FOO!\u003dn to FOO when FOO is\nbool. (see the \"case E_UNEQUAL\" part)\n\nexpr_trans_bool() is wrong and unnecessary.\n\nSigned-off-by: Masahiro Yamada \u003cmasahiroy@kernel.org\u003e\nAcked-by: Randy Dunlap \u003crdunlap@infradead.org\u003e\nSigned-off-by: Sasha Levin \u003csashal@kernel.org\u003e\n" }, { "commit": "a236ded9a349d0368c2560b8363e3aef5d9febe8", "tree": "818e779624dee6678d1685825e28326f67a6c075", "parents": [ "96103371091c6476eb07f4c66624bdd1b42f758a" ], "author": { "name": "Masahiro Yamada", "email": "masahiroy@kernel.org", "time": "Sun Jun 02 03:20:40 2024 +0900" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Sat Jul 27 10:38:29 2024 +0200" }, "message": "kconfig: gconf: give a proper initial state to the Save button\n\n[ Upstream commit 46edf4372e336ef3a61c3126e49518099d2e2e6d ]\n\nCurrently, the initial state of the \"Save\" button is always active.\n\nIf none of the CONFIG options are changed while loading the .config\nfile, the \"Save\" button should be greyed out.\n\nThis can be fixed by calling conf_read() after widget initialization.\n\nSigned-off-by: Masahiro Yamada \u003cmasahiroy@kernel.org\u003e\nSigned-off-by: Sasha Levin \u003csashal@kernel.org\u003e\n" }, { "commit": "69df3bdb274f9b8c1abf9c714440522bfb4a178b", "tree": "1516ee6126908a9d3264ed2a58a891ed8d76905a", "parents": [ "88d2aa8774917940baa0d7ea878abda493c6e785" ], "author": { "name": "Kees Cook", "email": "keescook@chromium.org", "time": "Mon Aug 07 09:41:19 2023 -0700" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Sat Jul 27 10:38:28 2024 +0200" }, "message": "gcc-plugins: Rename last_stmt() for GCC 14+\n\ncommit 2e3f65ccfe6b0778b261ad69c9603ae85f210334 upstream.\n\nIn GCC 14, last_stmt() was renamed to last_nondebug_stmt(). Add a helper\nmacro to handle the renaming.\n\nCc: linux-hardening@vger.kernel.org\nSigned-off-by: Kees Cook \u003ckeescook@chromium.org\u003e\nCc: Thomas Meyer \u003cthomas@m3y3r.de\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "f60d08db833bc56f054420abe0c16e8ca60fb1a0", "tree": "a49416d48c5bf81536897a43d52506f012e2314d", "parents": [ "3733cab2bff078a0c5bb8ccc432a457105725380", "564901bd7f5ddd5e4464d6d5fe5d4d9158375840" ], "author": { "name": "kamasali Satyanarayan", "email": "quic_kamasali@quicinc.com", "time": "Wed Jun 19 16:37:20 2024 +0530" }, "committer": { "name": "Kamasali Satyanarayan", "email": "quic_kamasali@quicinc.com", "time": "Wed Jul 24 20:38:43 2024 -0700" }, "message": "Merge android11-5.4.274 (564901b) into msm-5.4\n\n* remotes/origin/tmp-564901b:\n ANDROID: 16K: Only check basename of linker context\n UPSTREAM: af_unix: Do not use atomic ops for unix_sk(sk)-\u003einflight.\n ANDROID: ABI fixup for abi break in struct dst_ops\n BACKPORT: net: fix __dst_negative_advice() race\n UPSTREAM: selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior\n ANDROID: 16K: Fix show maps CFI failure\n ANDROID: 16K: Handle pad VMA splits and merges\n ANDROID: 16K: madvise_vma_pad_pages: Remove filemap_fault check\n ANDROID: 16K: Only madvise padding from dynamic linker context\n ANDROID: 16K: Separate padding from ELF LOAD segment mappings\n ANDROID: 16K: Exclude ELF padding for fault around range\n ANDROID: 16K: Use MADV_DONTNEED to save VMA padding pages.\n ANDROID: 16K: Introduce ELF padding representation for VMAs\n ANDROID: 16K: Introduce /sys/kernel/mm/pgsize_miration/enabled\n Revert \"timers: Rename del_timer_sync() to timer_delete_sync()\"\n Reapply \"media: ttpci: fix two memleaks in budget_av_attach\"\n Revert \"media: rename VFL_TYPE_GRABBER to _VIDEO\"\n Revert \"media: media/pci: rename VFL_TYPE_GRABBER to _VIDEO\"\n Revert \"media: ttpci: fix two memleaks in budget_av_attach\"\n Revert \"net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()\"\n Revert \"regmap: allow to define reg_update_bits for no bus configuration\"\n Revert \"regmap: Add bulk read/write callbacks into regmap_config\"\n Revert \"serial: max310x: fix IO data corruption in batched operations\"\n Revert \"geneve: make sure to pull inner header in geneve_rx()\"\n ANDROID: GKI: add snd_compr_stop_error to Xiaomi_abi\n UPSTREAM: netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path\n UPSTREAM: netfilter: nf_tables: release batch on table validation from abort path\n UPSTREAM: netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout\n Linux 5.4.274\n firmware: meson_sm: fix to avoid potential NULL pointer dereference\n ip_gre: do not report erspan version on GRE interface\n erspan: Check IFLA_GRE_ERSPAN_VER is set.\n VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()\n Bluetooth: btintel: Fixe build regression\n x86/alternative: Don\u0027t call text_poke() in lazy TLB mode\n drm/i915/gt: Reset queue_priority_hint on parking\n x86/mm/pat: fix VM_PAT handling in COW mappings\n virtio: reenable config if freezing device failed\n drm/vkms: call drm_atomic_helper_shutdown before drm_dev_put()\n tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc\n netfilter: nf_tables: discard table flag update with pending basechain deletion\n netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path\n netfilter: nf_tables: release batch on table validation from abort path\n netfilter: nf_tables: reject new basechain after table flag update\n fbmon: prevent division by zero in fb_videomode_from_videomode()\n fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2\n usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined\n usb: typec: tcpci: add generic tcpci fallback compatible\n tools: iio: replace seekdir() in iio_generic_buffer\n ktest: force $buildonly \u003d 1 for \u0027make_warnings_file\u0027 test type\n Input: allocate keycode for Display refresh rate toggle\n block: prevent division by zero in blk_rq_stat_sum()\n Revert \"ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default\"\n SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int\n drm/amd/display: Fix nanosec stat overflow\n media: sta2x11: fix irq handler cast\n isofs: handle CDs with bad root inode but good Joliet root directory\n scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()\n sysv: don\u0027t call sb_bread() with pointers_lock held\n Input: synaptics-rmi4 - fail probing if memory allocation for \"phys\" fails\n Bluetooth: btintel: Fix null ptr deref in btintel_read_version\n btrfs: send: handle path ref underflow in header iterate_inode_ref()\n btrfs: export: handle invalid inode or root reference in btrfs_get_parent()\n btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()\n tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()\n ionic: set adminq irq affinity\n arm64: dts: rockchip: fix rk3399 hdmi ports node\n arm64: dts: rockchip: fix rk3328 hdmi ports node\n panic: Flush kernel log buffer at the end\n VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()\n wifi: ath9k: fix LNA selection in ath_ant_try_scan()\n s390/entry: align system call table on 8 bytes\n x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()\n ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone\n ata: sata_mv: Fix PCI device ID table declaration compilation warning\n scsi: mylex: Fix sysfs buffer lengths\n ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit\n ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw\n net: ravb: Always process TX descriptor ring\n erspan: make sure erspan_base_hdr is present in skb-\u003ehead\n erspan: Add type I version 0 support.\n init: open /initrd.image with O_LARGEFILE\n initramfs: switch initramfs unpacking to struct file based APIs\n fs: add a vfs_fchmod helper\n fs: add a vfs_fchown helper\n staging: vc04_services: fix information leak in create_component()\n staging: vc04_services: changen strncpy() to strscpy_pad()\n staging: mmal-vchiq: Fix client_component for 64 bit kernel\n staging: mmal-vchiq: Allocate and free components as required\n i40e: fix vf may be used uninitialized in this function warning\n ipv6: Fix infinite recursion in fib6_dump_done().\n selftests: reuseaddr_conflict: add missing new line at the end of the output\n net: stmmac: fix rx queue priority assignment\n net/sched: act_skbmod: prevent kernel-infoleak\n bpf, sockmap: Prevent lock inversion deadlock in map delete elem\n netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()\n netfilter: nf_tables: flush pending destroy work before exit_net release\n mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations\n Revert \"x86/mm/ident_map: Use gbpages only where full GB page should be mapped.\"\n vfio/platform: Create persistent IRQ handlers\n vfio/pci: Create persistent INTx handler\n vfio: Introduce interface to flush virqfd inject workqueue\n vfio/pci: Lock external INTx masking ops\n vfio/pci: Disable auto-enable of exclusive INTx IRQ\n net/rds: fix possible cp null dereference\n netfilter: nf_tables: disallow timeout for anonymous sets\n Bluetooth: Fix TOCTOU in HCI debugfs implementation\n Bluetooth: hci_event: set the conn encrypted before conn establishes\n x86/cpufeatures: Add new word for scattered features\n r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d\n dm integrity: fix out-of-range warning\n tcp: properly terminate timers for kernel sockets\n ixgbe: avoid sleeping allocation in ixgbe_ipsec_vf_add_sa()\n nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet\n USB: core: Fix deadlock in usb_deauthorize_interface()\n scsi: lpfc: Correct size for wqe for memset()\n x86/cpu: Enable STIBP on AMD if Automatic IBRS is enabled\n scsi: qla2xxx: Fix command flush on cable pull\n usb: udc: remove warning when queue disabled ep\n usb: dwc2: gadget: LPM flow fix\n usb: dwc2: host: Fix ISOC flow in DDMA mode\n usb: dwc2: host: Fix hibernation flow\n usb: dwc2: host: Fix remote wakeup from hibernation\n scsi: core: Fix unremoved procfs host directory regression\n ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs\n usb: cdc-wdm: close race between read and workqueue\n mmc: core: Avoid negative index with array access\n mmc: core: Initialize mmc_blk_ioc_data\n exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()\n wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes\n mm/migrate: set swap entry values of THP tail pages properly.\n mm/memory-failure: fix an incorrect use of tail pages\n vt: fix memory overlapping when deleting chars in the buffer\n bounds: support non-power-of-two CONFIG_NR_CPUS\n powerpc: xor_vmx: Add \u0027-mhard-float\u0027 to CFLAGS\n efivarfs: Request at most 512 bytes for variable names\n perf/core: Fix reentry problem in perf_output_read_group()\n loop: loop_set_status_from_info() check before assignment\n loop: Check for overflow while configuring loop\n loop: Factor out configuring loop from status\n loop: Refactor loop_set_status() size calculation\n loop: Factor out setting loop device size\n loop: Remove sector_t truncation checks\n loop: Call loop_config_discard() only after new config is applied\n Revert \"loop: Check for overflow while configuring loop\"\n btrfs: allocate btrfs_ioctl_defrag_range_args on stack\n printk: Update @console_may_schedule in console_trylock_spinning()\n xen/events: close evtchn after mapping cleanup\n x86/speculation: Support intra-function call validation\n objtool: Add support for intra-function calls\n objtool: is_fentry_call() crashes if call has no destination\n fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion\n vt: fix unicode buffer corruption when deleting characters\n tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled\n usb: port: Don\u0027t try to peer unused USB ports based on location\n usb: gadget: ncm: Fix handling of zero block length packets\n USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command\n ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform\n xfrm: Avoid clang fortify warning in copy_to_user_tmpl()\n netfilter: nf_tables: reject constant set with timeout\n netfilter: nf_tables: disallow anonymous set with timeout flag\n netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout\n comedi: comedi_test: Prevent timers rescheduling during deletion\n dm snapshot: fix lockup in dm_exception_table_exit\n ahci: asm1064: asm1166: don\u0027t limit reported ports\n ahci: asm1064: correct count of reported ports\n x86/CPU/AMD: Update the Zenbleed microcode revisions\n nilfs2: prevent kernel bug at submit_bh_wbc()\n nilfs2: use a more common logging style\n nilfs2: fix failure to detect DAT corruption in btree and direct mappings\n memtest: use {READ,WRITE}_ONCE in memory scanning\n drm/vc4: hdmi: do not return negative values from .get_modes()\n drm/imx/ipuv3: do not return negative values from .get_modes()\n drm/exynos: do not return negative values from .get_modes()\n s390/zcrypt: fix reference counting on zcrypt card objects\n soc: fsl: qbman: Use raw spinlock for cgr_lock\n soc: fsl: qbman: Add CGR update function\n soc: fsl: qbman: Add helper for sanity checking cgr ops\n soc: fsl: qbman: Always disable interrupts when taking cgr_lock\n ring-buffer: Fix full_waiters_pending in poll\n ring-buffer: Fix resetting of shortest_full\n vfio/platform: Disable virqfds on cleanup\n kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W\u003d1\n speakup: Fix 8bit characters from direct synth\n slimbus: core: Remove usage of the deprecated ida_simple_xx() API\n nvmem: meson-efuse: fix function pointer type mismatch\n firmware: meson_sm: Rework driver as a proper platform driver\n ext4: fix corruption during on-line resize\n hwmon: (amc6821) add of_match table\n mmc: core: Fix switch on gp3 partition\n dm-raid: fix lockdep waring in \"pers-\u003ehot_add_disk\"\n Revert \"Revert \"md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d\"\"\n PCI/PM: Drain runtime-idle callbacks before driver removal\n PCI: Drop pci_device_remove() test of pci_dev-\u003edriver\n btrfs: fix off-by-one chunk length calculation at contains_pending_extent()\n fuse: don\u0027t unhash root\n mmc: tmio: avoid concurrent runs of mmc_request_done()\n PM: sleep: wakeirq: fix wake irq warning in system suspend\n USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M\n USB: serial: option: add MeiG Smart SLM320 product\n USB: serial: cp210x: add ID for MGP Instruments PDS100\n USB: serial: add device ID for VeriFone adapter\n USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB\n powerpc/fsl: Fix mfpmr build errors with newer binutils\n clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays\n clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays\n clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays\n PM: suspend: Set mem_sleep_current during kernel command line setup\n parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds\n parisc: Fix csum_ipv6_magic on 64-bit systems\n parisc: Fix csum_ipv6_magic on 32-bit systems\n parisc: Fix ip_fast_csum\n parisc: Do not hardcode registers in checksum functions\n mtd: rawnand: meson: fix scrambling mode value in command macro\n ubi: correct the calculation of fastmap size\n ubi: Check for too small LEB size in VTBL code\n ubifs: Set page uptodate in the correct place\n fat: fix uninitialized field in nostale filehandles\n ext4: correct best extent lstart adjustment logic\n selftests/mqueue: Set timeout to 180 seconds\n crypto: qat - resolve race condition during AER recovery\n crypto: qat - fix double free during reset\n sparc: vDSO: fix return value of __setup handler\n sparc64: NMI watchdog: fix return value of __setup handler\n KVM: Always flush async #PF workqueue when vCPU is being destroyed\n media: xc4000: Fix atomicity violation in xc4000_get_frequency\n serial: max310x: fix NULL pointer dereference in I2C instantiation\n arm: dts: marvell: Fix maxium-\u003emaxim typo in brownstone dts\n ARM: dts: mmp2-brownstone: Don\u0027t redeclare phandle references\n smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()\n smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()\n clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd\n media: staging: ipu3-imgu: Set fields before media_entity_pads_init()\n wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach\n timers: Rename del_timer_sync() to timer_delete_sync()\n timers: Use del_timer_sync() even on UP\n timers: Update kernel-doc for various functions\n x86/bugs: Use sysfs_emit()\n x86/cpu: Support AMD Automatic IBRS\n Documentation/hw-vuln: Update spectre doc\n amdkfd: use calloc instead of kzalloc to avoid integer overflow\n Linux 5.4.273\n regmap: Add missing map-\u003ebus check\n spi: spi-mt65xx: Fix NULL pointer access in interrupt handler\n bpf: report RCU QS in cpumap kthread\n rcu: add a helper to report consolidated flavor QS\n netfilter: nf_tables: do not compare internal table flags on updates\n ARM: dts: sun8i-h2-plus-bananapi-m2-zero: add regulator nodes vcc-dram and vcc1v2\n octeontx2-af: Use separate handlers for interrupts\n net/bnx2x: Prevent access to a freed page in page_pool\n hsr: Handle failures in module init\n rds: introduce acquire/release ordering in acquire/release_in_xmit()\n packet: annotate data-races around ignore_outgoing\n hsr: Fix uninit-value access in hsr_get_node()\n s390/vtime: fix average steal time calculation\n octeontx2-af: Use matching wake_up API variant in CGX command interface\n usb: gadget: net2272: Use irqflags in the call to net2272_probe_fin\n staging: greybus: fix get_channel_from_mode() failure path\n serial: 8250_exar: Don\u0027t remove GPIO device on suspend\n rtc: mt6397: select IRQ_DOMAIN instead of depending on it\n kconfig: fix infinite loop when expanding a macro at the end of file\n tty: serial: samsung: fix tx_empty() to return TIOCSER_TEMT\n serial: max310x: fix syntax error in IRQ error message\n tty: vt: fix 20 vs 0x20 typo in EScsiignore\n afs: Revert \"afs: Hide silly-rename files from userspace\"\n NFS: Fix an off by one in root_nfs_cat()\n watchdog: stm32_iwdg: initialize default timeout\n net: sunrpc: Fix an off by one in rpc_sockaddr2uaddr()\n scsi: bfa: Fix function pointer type mismatch for hcb_qe-\u003ecbfn\n RDMA/device: Fix a race between mad_client and cm_client init\n scsi: csiostor: Avoid function pointer casts\n ALSA: usb-audio: Stop parsing channels bits when all channels are found.\n clk: Fix clk_core_get NULL dereference\n sparc32: Fix section mismatch in leon_pci_grpci\n backlight: lp8788: Fully initialize backlight_properties during probe\n backlight: lm3639: Fully initialize backlight_properties during probe\n backlight: da9052: Fully initialize backlight_properties during probe\n backlight: lm3630a: Don\u0027t set bl-\u003eprops.brightness in get_brightness\n backlight: lm3630a: Initialize backlight_properties on init\n powerpc/embedded6xx: Fix no previous prototype for avr_uart_send() etc.\n drm/msm/dpu: add division of drm_display_mode\u0027s hskew parameter\n powerpc/hv-gpci: Fix the H_GET_PERF_COUNTER_INFO hcall return value checks\n drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip\n media: ttpci: fix two memleaks in budget_av_attach\n media: media/pci: rename VFL_TYPE_GRABBER to _VIDEO\n media: rename VFL_TYPE_GRABBER to _VIDEO\n media: v4l2-core: correctly validate video and metadata ioctls\n media: go7007: fix a memleak in go7007_load_encoder\n media: dvb-frontends: avoid stack overflow warnings with clang\n media: pvrusb2: fix uaf in pvr2_context_set_notify\n drm/amdgpu: Fix missing break in ATOM_ARG_IMM Case of atom_get_src_int()\n ASoC: meson: axg-tdm-interface: fix mclk setup without mclk-fs\n mtd: rawnand: lpc32xx_mlc: fix irq handler prototype\n mtd: maps: physmap-core: fix flash size larger than 32-bit\n crypto: arm/sha - fix function cast warnings\n mfd: altera-sysmgr: Call of_node_put() only when of_parse_phandle() takes a ref\n mfd: syscon: Call of_node_put() only when of_parse_phandle() takes a ref\n drm/tegra: put drm_gem_object ref on error in tegra_fb_create\n clk: hisilicon: hi3519: Release the correct number of gates in hi3519_clk_unregister()\n PCI: Mark 3ware-9650SE Root Port Extended Tags as broken\n drm/mediatek: dsi: Fix DSI RGB666 formats and definitions\n clk: qcom: dispcc-sdm845: Adjust internal GDSC wait times\n media: pvrusb2: fix pvr2_stream_callback casts\n media: pvrusb2: remove redundant NULL check\n media: go7007: add check of return value of go7007_read_addr()\n media: imx: csc/scaler: fix v4l2_ctrl_handler memory leak\n perf stat: Avoid metric-only segv\n ALSA: seq: fix function cast warnings\n drm/radeon/ni: Fix wrong firmware size logging in ni_init_microcode()\n perf thread_map: Free strlist on normal path in thread_map__new_by_tid_str()\n PCI: switchtec: Fix an error handling path in switchtec_pci_probe()\n quota: Fix rcu annotations of inode dquot pointers\n quota: Fix potential NULL pointer dereference\n quota: simplify drop_dquot_ref()\n clk: qcom: reset: Ensure write completion on reset de/assertion\n clk: qcom: reset: Commonize the de/assert functions\n clk: qcom: reset: support resetting multiple bits\n clk: qcom: reset: Allow specifying custom reset delay\n media: edia: dvbdev: fix a use-after-free\n media: v4l2-mem2mem: fix a memleak in v4l2_m2m_register_entity\n media: v4l2-tpg: fix some memleaks in tpg_alloc\n media: em28xx: annotate unchecked call to media_device_register()\n perf evsel: Fix duplicate initialization of data-\u003eid in evsel__parse_sample()\n drm/amd/display: Fix potential NULL pointer dereferences in \u0027dcn10_set_output_transfer_func()\u0027\n perf record: Fix possible incorrect free in record__switch_output()\n PCI/DPC: Print all TLP Prefixes, not just the first\n media: tc358743: register v4l2 async device only after successful setup\n dmaengine: tegra210-adma: Update dependency to ARCH_TEGRA\n drm/rockchip: lvds: do not overwrite error code\n drm: Don\u0027t treat 0 as -1 in drm_fixp2int_ceil\n drm/rockchip: inno_hdmi: Fix video timing\n drm/tegra: output: Fix missing i2c_put_adapter() in the error handling paths of tegra_output_probe()\n drm/tegra: dsi: Fix missing pm_runtime_disable() in the error handling path of tegra_dsi_probe()\n drm/tegra: dsi: Fix some error handling paths in tegra_dsi_probe()\n drm/tegra: dsi: Make use of the helper function dev_err_probe()\n gpu: host1x: mipi: Update tegra_mipi_request() to be node based\n drm/tegra: dsi: Add missing check for of_find_device_by_node\n dm: call the resume method on internal suspend\n dm raid: fix false positive for requeue needed during reshape\n nfp: flower: handle acti_netdevs allocation failure\n net/x25: fix incorrect parameter validation in the x25_getsockopt() function\n net: kcm: fix incorrect parameter validation in the kcm_getsockopt) function\n udp: fix incorrect parameter validation in the udp_lib_getsockopt() function\n l2tp: fix incorrect parameter validation in the pppol2tp_getsockopt() function\n tcp: fix incorrect parameter validation in the do_tcp_getsockopt() function\n net: hns3: fix port duplex configure error in IMP reset\n net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()\n ipv6: fib6_rules: flush route cache when rule is changed\n bpf: Fix stackmap overflow check on 32-bit arches\n bpf: Fix hashtab overflow check on 32-bit arches\n sr9800: Add check for usbnet_get_endpoints\n Bluetooth: hci_core: Fix possible buffer overflow\n Bluetooth: Remove superfluous call to hci_conn_check_pending()\n igb: Fix missing time sync events\n igb: move PEROUT and EXTTS isr logic to separate functions\n mmc: wmt-sdmmc: remove an incorrect release_mem_region() call in the .remove function\n SUNRPC: fix some memleaks in gssx_dec_option_array\n x86, relocs: Ignore relocations in .notes section\n ACPI: scan: Fix device check notification handling\n ARM: dts: imx6dl-yapp4: Move the internal switch PHYs under the switch node\n ARM: dts: imx6dl-yapp4: Fix typo in the QCA switch register address\n ARM: dts: imx6dl-yapp4: Move phy reset into switch node\n ARM: dts: arm: realview: Fix development chip ROM compatible value\n net: ena: Remove ena_select_queue\n net: ena: cosmetic: fix line break issues\n wifi: brcmsmac: avoid function pointer casts\n iommu/amd: Mark interrupt as managed\n bus: tegra-aconnect: Update dependency to ARCH_TEGRA\n ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()\n arm64: dts: qcom: msm8996: Pad addresses\n arm64: dts: qcom: msm8996: Move regulator consumers to db820c\n arm64: dts: qcom: msm8996: Use node references in db820c\n arm64: dts: qcom: db820c: Move non-soc entries out of /soc\n bpf: Mark bpf_spin_{lock,unlock}() helpers with notrace correctly\n bpf: Factor out bpf_spin_lock into helpers.\n bpf: Add typecast to bpf helpers to help BTF generation\n arm64: dts: mediatek: mt7622: add missing \"device_type\" to memory nodes\n wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()\n net: blackhole_dev: fix build warning for ethh set but not used\n af_unix: Annotate data-race of gc_in_progress in wait_for_unix_gc().\n sock_diag: annotate data-races around sock_diag_handlers[family]\n wifi: mwifiex: debugfs: Drop unnecessary error check for debugfs_create_dir()\n wifi: wilc1000: fix RCU usage in connect path\n wifi: wilc1000: fix declarations ordering\n wifi: b43: Disable QoS for bcm4331\n wifi: b43: Stop correct queue in DMA worker when QoS is disabled\n b43: main: Fix use true/false for bool type\n wifi: b43: Stop/wake correct queue in PIO Tx path when QoS is disabled\n wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled\n b43: dma: Fix use true/false for bool type variable\n wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()\n timekeeping: Fix cross-timestamp interpolation for non-x86\n timekeeping: Fix cross-timestamp interpolation corner case decision\n timekeeping: Fix cross-timestamp interpolation on counter wrap\n aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts\n fs/select: rework stack allocation hack for clang\n nbd: null check for nla_nest_start\n do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak\n ASoC: wm8962: Fix up incorrect error message in wm8962_set_fll\n ASoC: wm8962: Enable both SPKOUTR_ENA and SPKOUTL_ENA in mono mode\n ASoC: wm8962: Enable oscillator if selecting WM8962_FLL_OSC\n Input: gpio_keys_polled - suppress deferred probe error for gpio\n ASoC: Intel: bytcr_rt5640: Add an extra entry for the Chuwi Vi8 tablet\n firewire: core: use long bus reset on gap count error\n Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security\n scsi: mpt3sas: Prevent sending diag_reset when the controller is ready\n btrfs: fix data race at btrfs_use_block_rsv() when accessing block reserve\n dm-verity, dm-crypt: align \"struct bvec_iter\" correctly\n block: sed-opal: handle empty atoms when parsing response\n parisc/ftrace: add missing CONFIG_DYNAMIC_FTRACE check\n net/iucv: fix the allocation size of iucv_path_table array\n RDMA/mlx5: Relax DEVX access upon modify commands\n HID: multitouch: Add required quirk for Synaptics 0xcddc device\n MIPS: Clear Cause.BD in instruction_pointer_set\n x86/xen: Add some null pointer checking to smp.c\n ASoC: rt5645: Make LattePanda board DMI match more precise\n selftests: tls: use exact comparison in recv_partial\n io_uring: drop any code related to SCM_RIGHTS\n io_uring/unix: drop usage of io_uring socket\n UPSTREAM: arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts\n UPSTREAM: arm64: dts: qcom: add PDC interrupt controller for SDM845\n Linux 5.4.272\n arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts\n arm64: dts: qcom: add PDC interrupt controller for SDM845\n serial: max310x: fix IO data corruption in batched operations\n serial: max310x: implement I2C support\n serial: max310x: make accessing revision id interface-agnostic\n regmap: Add bulk read/write callbacks into regmap_config\n regmap: allow to define reg_update_bits for no bus configuration\n serial: max310x: Unprepare and disable clock in error path\n getrusage: use sig-\u003estats_lock rather than lock_task_sighand()\n getrusage: use __for_each_thread()\n getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()\n getrusage: add the \"signal_struct *sig\" local variable\n y2038: rusage: use __kernel_old_timeval\n hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed\n hv_netvsc: use netif_is_bond_master() instead of open code\n hv_netvsc: Make netvsc/VF binding check both MAC and serial number\n Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU\n serial: max310x: prevent infinite while() loop in port startup\n serial: max310x: use a separate regmap for each port\n serial: max310x: use regmap methods for SPI batch operations\n serial: max310x: Make use of device properties\n serial: max310x: fail probe if clock crystal is unstable\n serial: max310x: Try to get crystal clock rate from property\n serial: max310x: Use devm_clk_get_optional() to get the input clock\n um: allow not setting extra rpaths in the linux binary\n selftests: mm: fix map_hugetlb failure on 64K page size systems\n netrom: Fix data-races around sysctl_net_busy_read\n netrom: Fix a data-race around sysctl_netrom_link_fails_count\n netrom: Fix a data-race around sysctl_netrom_routing_control\n netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout\n netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size\n netrom: Fix a data-race around sysctl_netrom_transport_busy_delay\n netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay\n netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries\n netrom: Fix a data-race around sysctl_netrom_transport_timeout\n netrom: Fix data-races around sysctl_netrom_network_ttl_initialiser\n netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser\n netrom: Fix a data-race around sysctl_netrom_default_path_quality\n netfilter: nf_conntrack_h323: Add protection for bmp length out of range\n netfilter: nft_ct: fix l3num expectations with inet pseudo family\n net/rds: fix WARNING in rds_conn_connect_if_down\n net/ipv6: avoid possible UAF in ip6_route_mpath_notify()\n net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()\n geneve: make sure to pull inner header in geneve_rx()\n ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able\n net: lan78xx: fix runtime PM count underflow on link stop\n lan78xx: Fix race conditions in suspend/resume handling\n lan78xx: Fix partial packet errors on suspend/resume\n lan78xx: Add missing return code checks\n lan78xx: Fix white space and style issues\n Linux 5.4.271\n gpio: 74x164: Enable output pins after registers are reset\n fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super\n cachefiles: fix memory leak in cachefiles_add_cache()\n x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers\n mmc: core: Fix eMMC initialization with 1-bit bus connection\n dmaengine: fsl-qdma: init irq after reg initialization\n dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read\n btrfs: dev-replace: properly validate device names\n wifi: nl80211: reject iftype change with mesh ID change\n gtp: fix use-after-free and null-ptr-deref in gtp_newlink()\n afs: Fix endless loop in directory parsing\n ALSA: Drop leftover snd-rtctimer stuff from Makefile\n power: supply: bq27xxx-i2c: Do not free non existing IRQ\n efi/capsule-loader: fix incorrect allocation size\n rtnetlink: fix error logic of IFLA_BRIDGE_FLAGS writing back\n netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()\n Bluetooth: Enforce validation on max value of connection interval\n Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST\n Bluetooth: Avoid potential use-after-free in hci_error_reset\n net: usb: dm9601: fix wrong return value in dm9601_mdio_read\n lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected\n ipv6: fix potential \"struct net\" leak in inet6_rtm_getaddr()\n tun: Fix xdp_rxq_info\u0027s queue_index when detaching\n net: ip_tunnel: prevent perpetual headroom growth\n netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter\n ANDROID: GKI: update .xml file due to USB changes in 5.4.270\n Revert \"bpf: Add map and need_defer parameters to .map_fd_put_ptr()\"\n Revert \"hrtimer: Report offline hrtimer enqueue\"\n Revert \"drm/mipi-dsi: Fix detach call without attach\"\n Linux 5.4.270\n scripts/bpf: Fix xdp_md forward declaration typo\n fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio\n drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set\n drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3\n netfilter: nf_tables: set dormant flag on hook register failure\n tls: stop recv() if initial process_rx_list gave us non-DATA\n tls: rx: drop pointless else after goto\n tls: rx: jump to a more appropriate label\n s390: use the correct count for __iowrite64_copy()\n packet: move from strlcpy with unused retval to strscpy\n ipv6: sr: fix possible use-after-free and null-ptr-deref\n afs: Increase buffer size in afs_update_volume_status()\n ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid\n ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid\n nouveau: fix function cast warnings\n scsi: jazz_esp: Only build if SCSI core is builtin\n bpf, scripts: Correct GPL license name\n scripts/bpf: teach bpf_helpers_doc.py to dump BPF helper definitions\n RDMA/srpt: fix function pointer cast warnings\n RDMA/srpt: Make debug output more detailed\n RDMA/bnxt_re: Return error for SRQ resize\n IB/hfi1: Fix a memleak in init_credit_return\n usb: roles: don\u0027t get/set_role() when usb_role_switch is unregistered\n usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs\n usb: cdns3: fix memory double free when handle zero packet\n usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()\n ARM: ep93xx: Add terminator to gpiod_lookup_table\n l2tp: pass correct message length to ip6_append_data\n PCI/MSI: Prevent MSI hardware interrupt number truncation\n gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()\n dm-crypt: don\u0027t modify the data when using authenticated encryption\n IB/hfi1: Fix sdma.h tx-\u003enum_descs off-by-one error\n PCI: tegra: Fix OF node reference leak\n PCI: tegra: Fix reporting GPIO error value\n arm64: dts: qcom: msm8916: Fix typo in pronto remoteproc node\n drm/amdgpu: Fix type of second parameter in trans_msg() callback\n iomap: Set all uptodate bits for an Uptodate page\n dm-integrity: don\u0027t modify bio\u0027s immutable bio_vec in integrity_metadata()\n x86/alternatives: Disable KASAN in apply_alternatives()\n drm/amdgpu: Check for valid number of registers to read\n Revert \"drm/sun4i: dsi: Change the start delay calculation\"\n ALSA: hda/realtek - Enable micmute LED on and HP system\n selftests/bpf: Avoid running unprivileged tests with alignment requirements\n net: bridge: clear bridge\u0027s private skb space on xmit\n spi: mt7621: Fix an error message in mt7621_spi_probe()\n pinctrl: rockchip: Fix refcount leak in rockchip_pinctrl_parse_groups\n pinctrl: pinctrl-rockchip: Fix a bunch of kerneldoc misdemeanours\n tcp: add annotations around sk-\u003esk_shutdown accesses\n tcp: return EPOLLOUT from tcp_poll only when notsent_bytes is half the limit\n tcp: factor out __tcp_close() helper\n pmdomain: renesas: r8a77980-sysc: CR7 must be always on\n s390/qeth: Fix potential loss of L3-IP@ in case of network issues\n virtio-blk: Ensure no requests in virtqueues before deleting vqs.\n firewire: core: send bus reset promptly on gap count error\n scsi: lpfc: Use unsigned type for num_sge\n hwmon: (coretemp) Enlarge per package core count limit\n nvmet-fc: abort command when there is no binding\n netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new\n ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616\n nvmet-tcp: fix nvme tcp ida memory leak\n regulator: pwm-regulator: Add validity checks in continuous .get_voltage\n ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()\n ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()\n ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers\n ahci: asm1166: correct count of reported ports\n fbdev: sis: Error out if pixclock equals zero\n fbdev: savage: Error out if pixclock equals zero\n wifi: mac80211: fix race condition on enabling fast-xmit\n wifi: cfg80211: fix missing interfaces when dumping\n dmaengine: fsl-qdma: increase size of \u0027irq_name\u0027\n dmaengine: shdma: increase size of \u0027dev_id\u0027\n scsi: target: core: Add TMF to tmr_list handling\n sched/rt: Disallow writing invalid values to sched_rt_period_us\n sched/rt: Fix sysctl_sched_rr_timeslice intial value\n userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb\n nilfs2: replace WARN_ONs for invalid DAT metadata block requests\n memcg: add refcnt for pcpu stock to avoid UAF problem in drain_all_stock()\n sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset\n net/sched: Retire dsmark qdisc\n net/sched: Retire ATM qdisc\n net/sched: Retire CBQ qdisc\n KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler\n KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()\n Linux 5.4.269\n of: gpio unittest kfree() wrong object\n of: unittest: fix EXPECT text for gpio hog errors\n net: bcmgenet: Fix EEE implementation\n Revert \"Revert \"mtd: rawnand: gpmi: Fix setting busy timeout setting\"\"\n netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()\n lsm: new security_file_ioctl_compat() hook\n drm/msm/dsi: Enable runtime PM\n PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()\n PM: runtime: add devm_pm_runtime_enable helper\n nilfs2: fix potential bug in end_buffer_async_write\n sched/membarrier: reduce the ability to hammer on sys_membarrier\n net: prevent mss overflow in skb_segment()\n netfilter: ipset: Missing gc cancellations fixed\n netfilter: ipset: fix performance regression in swap operation\n KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache\n mips: Fix max_mapnr being uninitialized on early stages\n arch, mm: remove stale mentions of DISCONIGMEM\n bus: moxtet: Add spi device table\n Revert \"md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d\"\n tracing: Inform kmemleak of saved_cmdlines allocation\n pmdomain: core: Move the unused cleanup to a _sync initcall\n can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)\n irqchip/irq-brcmstb-l2: Add write memory barrier before exit\n nfp: flower: prevent re-adding mac index for bonded port\n nfp: use correct macro for LengthSelect in BAR config\n nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()\n nilfs2: fix data corruption in dsync block recovery for small block sizes\n ALSA: hda/conexant: Add quirk for SWS JS201D\n mmc: slot-gpio: Allow non-sleeping GPIO ro\n x86/mm/ident_map: Use gbpages only where full GB page should be mapped.\n x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6\n serial: max310x: improve crystal stable clock detection\n serial: max310x: set default value when reading clock ready bit\n ring-buffer: Clean ring_buffer_poll_wait() error return\n iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC\n staging: iio: ad5933: fix type mismatch regression\n tracing: Fix wasted memory in saved_cmdlines logic\n ext4: fix double-free of blocks due to wrong extents moved_len\n misc: fastrpc: Mark all sessions as invalid in cb_remove\n binder: signal epoll threads of self-work\n ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL\n xen-netback: properly sync TX responses\n nfc: nci: free rx_data_reassembly skb on NCI device cleanup\n kbuild: Fix changing ELF file type for output of gen_btf for big endian\n firewire: core: correct documentation of fw_csr_string() kernel API\n scsi: Revert \"scsi: fcoe: Fix potential deadlock on \u0026fip-\u003ectlr_lock\"\n i2c: i801: Fix block process call transactions\n i2c: i801: Remove i801_set_block_buffer_mode\n usb: f_mass_storage: forbid async queue when shutdown happen\n USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT\n HID: wacom: Do not register input devices until after hid_hw_start\n HID: wacom: generic: Avoid reporting a serial of \u00270\u0027 to userspace\n mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again\n tracing/trigger: Fix to return error if failed to alloc snapshot\n i40e: Fix waiting for queues of all VSIs to be disabled\n MIPS: Add \u0027memory\u0027 clobber to csum_ipv6_magic() inline assembler\n ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()\n spi: ppc4xx: Drop write-only variable\n of: unittest: Fix compile in the non-dynamic case\n of: unittest: add overlay gpio test to catch gpio hog problem\n btrfs: send: return EOPNOTSUPP on unknown flags\n btrfs: forbid deleting live subvol qgroup\n btrfs: forbid creating subvol qgroups\n netfilter: nft_set_rbtree: skip end interval element from gc\n net: stmmac: xgmac: fix a typo of register name in DPP safety handling\n net: stmmac: xgmac: use #define for string constants\n vhost: use kzalloc() instead of kmalloc() followed by memset()\n Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID\n hrtimer: Report offline hrtimer enqueue\n USB: serial: cp210x: add ID for IMST iM871A-USB\n USB: serial: option: add Fibocom FM101-GL variant\n USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e\n net/af_iucv: clean up a try_then_request_module()\n netfilter: nft_ct: reject direction for ct id\n netfilter: nft_compat: restrict match/target protocol to u16\n netfilter: nft_compat: reject unused compat flag\n ppp_async: limit MRU to 64K\n tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()\n rxrpc: Fix response to PING RESPONSE ACKs to a dead call\n inet: read sk-\u003esk_family once in inet_recv_error()\n hwmon: (coretemp) Fix bogus core_id to attr name mapping\n hwmon: (coretemp) Fix out-of-bounds memory access\n hwmon: (aspeed-pwm-tacho) mutex for tach reading\n atm: idt77252: fix a memleak in open_card_ubr0\n selftests: net: avoid just another constant wait\n net: stmmac: xgmac: fix handling of DPP safety error for DMA channels\n phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP\n dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV\n phy: renesas: rcar-gen3-usb2: Fix returning wrong error code\n dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA\n dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA\n bonding: remove print in bond_verify_device_path\n HID: apple: Add 2021 magic keyboard FN key mapping\n HID: apple: Swap the Fn and Left Control keys on Apple keyboards\n HID: apple: Add support for the 2021 Magic Keyboard\n net: sysfs: Fix /sys/class/net/\u003ciface\u003e path\n af_unix: fix lockdep positive in sk_diag_dump_icons()\n net: ipv4: fix a memleak in ip_setup_cork\n netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations\n netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger\n llc: call sock_orphan() at release time\n ipv6: Ensure natural alignment of const ipv6 loopback and router addresses\n ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()\n ixgbe: Refactor overtemp event handling\n ixgbe: Refactor returning internal error codes\n ixgbe: Remove non-inclusive language\n net: remove unneeded break\n scsi: isci: Fix an error code problem in isci_io_request_build()\n wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update\n perf: Fix the nr_addr_filters fix\n drm/amdgpu: Release \u0027adev-\u003epm.fw\u0027 before return in \u0027amdgpu_device_need_post()\u0027\n ceph: fix deadlock or deadcode of misusing dget()\n blk-mq: fix IO hang from sbitmap wakeup race\n virtio_net: Fix \"‘%d’ directive writing between 1 and 11 bytes into a region of size 10\" warnings\n libsubcmd: Fix memory leak in uniq()\n PCI/AER: Decode Requester ID when no error info found\n fs/kernfs/dir: obey S_ISGID\n usb: hub: Replace hardcoded quirk value with BIT() macro\n PCI: switchtec: Fix stdev_release() crash after surprise hot remove\n PCI: Only override AMD USB controller if required\n mfd: ti_am335x_tscadc: Fix TI SoC dependencies\n i3c: master: cdns: Update maximum prescaler value for i2c clock\n um: net: Fix return type of uml_net_start_xmit()\n um: Don\u0027t use vfprintf() for os_info()\n um: Fix naming clash between UML and scheduler\n leds: trigger: panic: Don\u0027t register panic notifier if creating the trigger failed\n drm/amdgpu: Drop \u0027fence\u0027 check in \u0027to_amdgpu_amdkfd_fence()\u0027\n drm/amdgpu: Let KFD sync with VM fences\n clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()\n clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()\n drm/msm/dpu: Ratelimit framedone timeout msgs\n media: ddbridge: fix an error code problem in ddb_probe\n IB/ipoib: Fix mcast list locking\n drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time\n ALSA: hda: Intel: add HDA_ARL PCI ID support\n PCI: add INTEL_HDA_ARL to pci_ids.h\n media: rockchip: rga: fix swizzling for RGB formats\n media: stk1160: Fixed high volume of stk1160_dbg messages\n drm/mipi-dsi: Fix detach call without attach\n drm/framebuffer: Fix use of uninitialized variable\n drm/drm_file: fix use of uninitialized variable\n RDMA/IPoIB: Fix error code return in ipoib_mcast_join\n fast_dput(): handle underflows gracefully\n ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument\n f2fs: fix to check return value of f2fs_reserve_new_block()\n wifi: cfg80211: free beacon_ies when overridden from hidden BSS\n wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()\n wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices\n arm64: dts: qcom: msm8998: Fix \u0027out-ports\u0027 is a required property\n arm64: dts: qcom: msm8996: Fix \u0027in-ports\u0027 is a required property\n md: Whenassemble the array, consult the superblock of the freshest device\n block: prevent an integer overflow in bvec_try_merge_hw_page\n ARM: dts: imx23/28: Fix the DMA controller node name\n ARM: dts: imx23-sansa: Use preferred i2c-gpios properties\n ARM: dts: imx27-apf27dev: Fix LED name\n ARM: dts: imx25/27: Pass timing0\n ARM: dts: imx1: Fix sram node\n ARM: dts: imx27: Fix sram node\n ARM: dts: imx: Use flash@0,0 pattern\n ARM: dts: imx25/27-eukrea: Fix RTC node name\n ARM: dts: rockchip: fix rk3036 hdmi ports node\n scsi: libfc: Fix up timeout error in fc_fcp_rec_error()\n scsi: libfc: Don\u0027t schedule abort twice\n bpf: Add map and need_defer parameters to .map_fd_put_ptr()\n wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()\n ARM: dts: imx7s: Fix nand-controller #size-cells\n ARM: dts: imx7s: Fix lcdif compatible\n ARM: dts: imx7d: Fix coresight funnel ports\n bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk\n PCI: Add no PM reset quirk for NVIDIA Spectrum devices\n scsi: lpfc: Fix possible file string name overflow when updating firmware\n selftests/bpf: Fix pyperf180 compilation failure with clang18\n selftests/bpf: satisfy compiler by having explicit return in btf test\n wifi: rt2x00: restart beacon queue when hardware reset\n ext4: avoid online resizing failures due to oversized flex bg\n ext4: remove unnecessary check from alloc_flex_gd()\n ext4: unify the type of flexbg_size to unsigned int\n ext4: fix inconsistent between segment fstrim and full fstrim\n ecryptfs: Reject casefold directory inodes\n SUNRPC: Fix a suspicious RCU usage warning\n KVM: s390: fix setting of fpc register\n s390/ptrace: handle setting of fpc register correctly\n jfs: fix array-index-out-of-bounds in diNewExt\n rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()\n afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()\n crypto: stm32/crc32 - fix parsing list of devices\n pstore/ram: Fix crash when setting number of cpus to an odd number\n jfs: fix uaf in jfs_evict_inode\n jfs: fix array-index-out-of-bounds in dbAdjTree\n jfs: fix slab-out-of-bounds Read in dtSearch\n UBSAN: array-index-out-of-bounds in dtSplitRoot\n FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree\n ACPI: extlog: fix NULL pointer dereference check\n PNP: ACPI: fix fortify warning\n ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop\n audit: Send netlink ACK before setting connection in auditd_set\n regulator: core: Only increment use_count when enable_count changes\n perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file\n x86/mce: Mark fatal MCE\u0027s page as poison to avoid panic in the kdump kernel\n powerpc/lib: Validate size for vector operations\n powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE\n powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()\n powerpc: Fix build error due to is_valid_bugaddr()\n powerpc/mm: Fix null-pointer dereference in pgtable_cache_add\n x86/entry/ia32: Ensure s32 is sign extended to s64\n tick/sched: Preserve number of idle sleeps across CPU hotplug events\n mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan\n spi: bcm-qspi: fix SFDP BFPT read by usig mspi read\n gpio: eic-sprd: Clear interrupt after set the interrupt type\n drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume\n drm/exynos: fix accidental on-stack copy of exynos_drm_plane\n drm/bridge: nxp-ptn3460: simplify some error checking\n drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking\n drm: Don\u0027t unref the same fb many times by mistake due to deadlock handling\n gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04\n netfilter: nf_tables: reject QUEUE/DROP verdict parameters\n rbd: don\u0027t move requests to the running list on errors\n btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args\n btrfs: don\u0027t warn if discard range is not aligned to sector\n btrfs: tree-checker: fix inline ref size in error messages\n btrfs: ref-verify: free ref cache before clearing mount opt\n net: fec: fix the unhandled context fault from smmu\n fjes: fix memleaks in fjes_hw_setup\n netfilter: nf_tables: validate NFPROTO_* family\n netfilter: nf_tables: restrict anonymous set and map names to 16 bytes\n net/mlx5e: fix a double-free in arfs_create_groups\n net/mlx5: Use kfree(ft-\u003eg) in arfs_create_groups()\n net/mlx5: DR, Use the right GVMI number for drop action\n netlink: fix potential sleeping issue in mqueue_flush_file\n tcp: Add memory barrier to tcp_push()\n afs: Hide silly-rename files from userspace\n tracing: Ensure visibility when inserting an element into tracing_map\n net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv\n llc: Drop support for ETH_P_TR_802_2.\n llc: make llc_ui_sendmsg() more robust against bonding changes\n vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING\n net/smc: fix illegal rmb_desc access in SMC-D connection dump\n x86/CPU/AMD: Fix disabling XSAVES on AMD family 0x17 due to erratum\n powerpc: Use always instead of always-y in for crtsavres.o\n fs: move S_ISGID stripping into the vfs_*() helpers\n fs: add mode_strip_sgid() helper\n mtd: spinand: macronix: Fix MX35LFxGE4AD page size\n block: Remove special-casing of compound pages\n rename(): fix the locking of subdirectories\n ubifs: ubifs_symlink: Fix memleak of inode-\u003ei_link in error path\n nouveau/vmm: don\u0027t set addr on the fail path to avoid warning\n mmc: core: Use mrq.sbc in close-ended ffu\n arm64: dts: qcom: sdm845: fix USB wakeup interrupt types\n parisc/firmware: Fix F-extend for PDC addresses\n rpmsg: virtio: Free driver_override when rpmsg_remove()\n hwrng: core - Fix page fault dead lock on mmap-ed hwrng\n PM: hibernate: Enforce ordering during image compression/decompression\n crypto: api - Disallow identical driver names\n ext4: allow for the last group to be marked as trimmed\n serial: sc16is7xx: add check for unsupported SPI modes during probe\n spi: introduce SPI_MODE_X_MASK macro\n serial: sc16is7xx: set safe default SPI clock frequency\n units: add the HZ macros\n units: change from \u0027L\u0027 to \u0027UL\u0027\n units: Add Watt units\n include/linux/units.h: add helpers for kelvin to/from Celsius conversion\n PCI: mediatek: Clear interrupt status before dispatching handler\n\nConflicts:\n both modified: include/linux/timer.h\n both modified: mm/memory-failure.c\n both modified: mm/mlock.c\n both modified: mm/mprotect.c\n both modified: scripts/Makefile.extrawarn\n\nChange-Id: Ia59be9dbba9400fa82dcd3c3a7d50ee6012701fb\nSigned-off-by: kamasali Satyanarayan \u003ckamasali@qti.qualcomm.com\u003e\n" }, { "commit": "73abf253d5caf9cc3b8e20450e222c919ecbbfa6", "tree": "d6b4bef4f834d5d19ab59eb061fa65b2ac05f0a6", "parents": [ "794bdf30ec59c9ef066f54eb9a9433a9b58870d8", "ff29a6cf6e84f4ccbab2d0853cf20e6c2821ef38" ], "author": { "name": "Michael Bestas", "email": "mkbestas@lineageos.org", "time": "Sat Jun 22 17:58:09 2024 +0300" }, "committer": { "name": "Michael Bestas", "email": "mkbestas@lineageos.org", "time": "Sat Jun 22 17:58:09 2024 +0300" }, "message": "Merge tag \u0027ASB-2024-06-05_11-5.4\u0027 of https://android.googlesource.com/kernel/common into android13-5.4-lahaina\n\nhttps://source.android.com/docs/security/bulletin/2024-06-01\nCVE-2024-26926\n\n* tag \u0027ASB-2024-06-05_11-5.4\u0027 of https://android.googlesource.com/kernel/common:\n ANDROID: ABI fixup for abi break in struct dst_ops\n BACKPORT: net: fix __dst_negative_advice() race\n UPSTREAM: selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior\n Revert \"timers: Rename del_timer_sync() to timer_delete_sync()\"\n Reapply \"media: ttpci: fix two memleaks in budget_av_attach\"\n Revert \"media: rename VFL_TYPE_GRABBER to _VIDEO\"\n Revert \"media: media/pci: rename VFL_TYPE_GRABBER to _VIDEO\"\n Revert \"media: ttpci: fix two memleaks in budget_av_attach\"\n Revert \"net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()\"\n Revert \"regmap: allow to define reg_update_bits for no bus configuration\"\n Revert \"regmap: Add bulk read/write callbacks into regmap_config\"\n Revert \"serial: max310x: fix IO data corruption in batched operations\"\n Revert \"geneve: make sure to pull inner header in geneve_rx()\"\n Linux 5.4.274\n firmware: meson_sm: fix to avoid potential NULL pointer dereference\n ip_gre: do not report erspan version on GRE interface\n erspan: Check IFLA_GRE_ERSPAN_VER is set.\n VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()\n Bluetooth: btintel: Fixe build regression\n x86/alternative: Don\u0027t call text_poke() in lazy TLB mode\n drm/i915/gt: Reset queue_priority_hint on parking\n x86/mm/pat: fix VM_PAT handling in COW mappings\n virtio: reenable config if freezing device failed\n drm/vkms: call drm_atomic_helper_shutdown before drm_dev_put()\n tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc\n netfilter: nf_tables: discard table flag update with pending basechain deletion\n netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path\n netfilter: nf_tables: release batch on table validation from abort path\n netfilter: nf_tables: reject new basechain after table flag update\n fbmon: prevent division by zero in fb_videomode_from_videomode()\n fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2\n usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined\n usb: typec: tcpci: add generic tcpci fallback compatible\n tools: iio: replace seekdir() in iio_generic_buffer\n ktest: force $buildonly \u003d 1 for \u0027make_warnings_file\u0027 test type\n Input: allocate keycode for Display refresh rate toggle\n block: prevent division by zero in blk_rq_stat_sum()\n Revert \"ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default\"\n SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int\n drm/amd/display: Fix nanosec stat overflow\n media: sta2x11: fix irq handler cast\n isofs: handle CDs with bad root inode but good Joliet root directory\n scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()\n sysv: don\u0027t call sb_bread() with pointers_lock held\n Input: synaptics-rmi4 - fail probing if memory allocation for \"phys\" fails\n Bluetooth: btintel: Fix null ptr deref in btintel_read_version\n btrfs: send: handle path ref underflow in header iterate_inode_ref()\n btrfs: export: handle invalid inode or root reference in btrfs_get_parent()\n btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()\n tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()\n ionic: set adminq irq affinity\n arm64: dts: rockchip: fix rk3399 hdmi ports node\n arm64: dts: rockchip: fix rk3328 hdmi ports node\n panic: Flush kernel log buffer at the end\n VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()\n wifi: ath9k: fix LNA selection in ath_ant_try_scan()\n s390/entry: align system call table on 8 bytes\n x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()\n ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone\n ata: sata_mv: Fix PCI device ID table declaration compilation warning\n scsi: mylex: Fix sysfs buffer lengths\n ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit\n ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw\n net: ravb: Always process TX descriptor ring\n erspan: make sure erspan_base_hdr is present in skb-\u003ehead\n erspan: Add type I version 0 support.\n init: open /initrd.image with O_LARGEFILE\n initramfs: switch initramfs unpacking to struct file based APIs\n fs: add a vfs_fchmod helper\n fs: add a vfs_fchown helper\n staging: vc04_services: fix information leak in create_component()\n staging: vc04_services: changen strncpy() to strscpy_pad()\n staging: mmal-vchiq: Fix client_component for 64 bit kernel\n staging: mmal-vchiq: Allocate and free components as required\n i40e: fix vf may be used uninitialized in this function warning\n ipv6: Fix infinite recursion in fib6_dump_done().\n selftests: reuseaddr_conflict: add missing new line at the end of the output\n net: stmmac: fix rx queue priority assignment\n net/sched: act_skbmod: prevent kernel-infoleak\n bpf, sockmap: Prevent lock inversion deadlock in map delete elem\n netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()\n netfilter: nf_tables: flush pending destroy work before exit_net release\n mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations\n Revert \"x86/mm/ident_map: Use gbpages only where full GB page should be mapped.\"\n vfio/platform: Create persistent IRQ handlers\n vfio/pci: Create persistent INTx handler\n vfio: Introduce interface to flush virqfd inject workqueue\n vfio/pci: Lock external INTx masking ops\n vfio/pci: Disable auto-enable of exclusive INTx IRQ\n net/rds: fix possible cp null dereference\n netfilter: nf_tables: disallow timeout for anonymous sets\n Bluetooth: Fix TOCTOU in HCI debugfs implementation\n Bluetooth: hci_event: set the conn encrypted before conn establishes\n x86/cpufeatures: Add new word for scattered features\n r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d\n dm integrity: fix out-of-range warning\n tcp: properly terminate timers for kernel sockets\n ixgbe: avoid sleeping allocation in ixgbe_ipsec_vf_add_sa()\n nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet\n USB: core: Fix deadlock in usb_deauthorize_interface()\n scsi: lpfc: Correct size for wqe for memset()\n x86/cpu: Enable STIBP on AMD if Automatic IBRS is enabled\n scsi: qla2xxx: Fix command flush on cable pull\n usb: udc: remove warning when queue disabled ep\n usb: dwc2: gadget: LPM flow fix\n usb: dwc2: host: Fix ISOC flow in DDMA mode\n usb: dwc2: host: Fix hibernation flow\n usb: dwc2: host: Fix remote wakeup from hibernation\n scsi: core: Fix unremoved procfs host directory regression\n ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs\n usb: cdc-wdm: close race between read and workqueue\n mmc: core: Avoid negative index with array access\n mmc: core: Initialize mmc_blk_ioc_data\n exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()\n wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes\n mm/migrate: set swap entry values of THP tail pages properly.\n mm/memory-failure: fix an incorrect use of tail pages\n vt: fix memory overlapping when deleting chars in the buffer\n bounds: support non-power-of-two CONFIG_NR_CPUS\n powerpc: xor_vmx: Add \u0027-mhard-float\u0027 to CFLAGS\n efivarfs: Request at most 512 bytes for variable names\n perf/core: Fix reentry problem in perf_output_read_group()\n loop: loop_set_status_from_info() check before assignment\n loop: Check for overflow while configuring loop\n loop: Factor out configuring loop from status\n loop: Refactor loop_set_status() size calculation\n loop: Factor out setting loop device size\n loop: Remove sector_t truncation checks\n loop: Call loop_config_discard() only after new config is applied\n Revert \"loop: Check for overflow while configuring loop\"\n btrfs: allocate btrfs_ioctl_defrag_range_args on stack\n printk: Update @console_may_schedule in console_trylock_spinning()\n xen/events: close evtchn after mapping cleanup\n x86/speculation: Support intra-function call validation\n objtool: Add support for intra-function calls\n objtool: is_fentry_call() crashes if call has no destination\n fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion\n vt: fix unicode buffer corruption when deleting characters\n tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled\n usb: port: Don\u0027t try to peer unused USB ports based on location\n usb: gadget: ncm: Fix handling of zero block length packets\n USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command\n ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform\n xfrm: Avoid clang fortify warning in copy_to_user_tmpl()\n netfilter: nf_tables: reject constant set with timeout\n netfilter: nf_tables: disallow anonymous set with timeout flag\n netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout\n comedi: comedi_test: Prevent timers rescheduling during deletion\n dm snapshot: fix lockup in dm_exception_table_exit\n ahci: asm1064: asm1166: don\u0027t limit reported ports\n ahci: asm1064: correct count of reported ports\n x86/CPU/AMD: Update the Zenbleed microcode revisions\n nilfs2: prevent kernel bug at submit_bh_wbc()\n nilfs2: use a more common logging style\n nilfs2: fix failure to detect DAT corruption in btree and direct mappings\n memtest: use {READ,WRITE}_ONCE in memory scanning\n drm/vc4: hdmi: do not return negative values from .get_modes()\n drm/imx/ipuv3: do not return negative values from .get_modes()\n drm/exynos: do not return negative values from .get_modes()\n s390/zcrypt: fix reference counting on zcrypt card objects\n soc: fsl: qbman: Use raw spinlock for cgr_lock\n soc: fsl: qbman: Add CGR update function\n soc: fsl: qbman: Add helper for sanity checking cgr ops\n soc: fsl: qbman: Always disable interrupts when taking cgr_lock\n ring-buffer: Fix full_waiters_pending in poll\n ring-buffer: Fix resetting of shortest_full\n vfio/platform: Disable virqfds on cleanup\n kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W\u003d1\n speakup: Fix 8bit characters from direct synth\n slimbus: core: Remove usage of the deprecated ida_simple_xx() API\n nvmem: meson-efuse: fix function pointer type mismatch\n firmware: meson_sm: Rework driver as a proper platform driver\n ext4: fix corruption during on-line resize\n hwmon: (amc6821) add of_match table\n mmc: core: Fix switch on gp3 partition\n dm-raid: fix lockdep waring in \"pers-\u003ehot_add_disk\"\n Revert \"Revert \"md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d\"\"\n PCI/PM: Drain runtime-idle callbacks before driver removal\n PCI: Drop pci_device_remove() test of pci_dev-\u003edriver\n btrfs: fix off-by-one chunk length calculation at contains_pending_extent()\n fuse: don\u0027t unhash root\n mmc: tmio: avoid concurrent runs of mmc_request_done()\n PM: sleep: wakeirq: fix wake irq warning in system suspend\n USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M\n USB: serial: option: add MeiG Smart SLM320 product\n USB: serial: cp210x: add ID for MGP Instruments PDS100\n USB: serial: add device ID for VeriFone adapter\n USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB\n powerpc/fsl: Fix mfpmr build errors with newer binutils\n clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays\n clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays\n clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays\n PM: suspend: Set mem_sleep_current during kernel command line setup\n parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds\n parisc: Fix csum_ipv6_magic on 64-bit systems\n parisc: Fix csum_ipv6_magic on 32-bit systems\n parisc: Fix ip_fast_csum\n parisc: Do not hardcode registers in checksum functions\n mtd: rawnand: meson: fix scrambling mode value in command macro\n ubi: correct the calculation of fastmap size\n ubi: Check for too small LEB size in VTBL code\n ubifs: Set page uptodate in the correct place\n fat: fix uninitialized field in nostale filehandles\n ext4: correct best extent lstart adjustment logic\n selftests/mqueue: Set timeout to 180 seconds\n crypto: qat - resolve race condition during AER recovery\n crypto: qat - fix double free during reset\n sparc: vDSO: fix return value of __setup handler\n sparc64: NMI watchdog: fix return value of __setup handler\n KVM: Always flush async #PF workqueue when vCPU is being destroyed\n media: xc4000: Fix atomicity violation in xc4000_get_frequency\n serial: max310x: fix NULL pointer dereference in I2C instantiation\n arm: dts: marvell: Fix maxium-\u003emaxim typo in brownstone dts\n ARM: dts: mmp2-brownstone: Don\u0027t redeclare phandle references\n smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()\n smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()\n clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd\n media: staging: ipu3-imgu: Set fields before media_entity_pads_init()\n wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach\n timers: Rename del_timer_sync() to timer_delete_sync()\n timers: Use del_timer_sync() even on UP\n timers: Update kernel-doc for various functions\n x86/bugs: Use sysfs_emit()\n x86/cpu: Support AMD Automatic IBRS\n Documentation/hw-vuln: Update spectre doc\n amdkfd: use calloc instead of kzalloc to avoid integer overflow\n Linux 5.4.273\n regmap: Add missing map-\u003ebus check\n spi: spi-mt65xx: Fix NULL pointer access in interrupt handler\n bpf: report RCU QS in cpumap kthread\n rcu: add a helper to report consolidated flavor QS\n netfilter: nf_tables: do not compare internal table flags on updates\n ARM: dts: sun8i-h2-plus-bananapi-m2-zero: add regulator nodes vcc-dram and vcc1v2\n octeontx2-af: Use separate handlers for interrupts\n net/bnx2x: Prevent access to a freed page in page_pool\n hsr: Handle failures in module init\n rds: introduce acquire/release ordering in acquire/release_in_xmit()\n packet: annotate data-races around ignore_outgoing\n hsr: Fix uninit-value access in hsr_get_node()\n s390/vtime: fix average steal time calculation\n octeontx2-af: Use matching wake_up API variant in CGX command interface\n usb: gadget: net2272: Use irqflags in the call to net2272_probe_fin\n staging: greybus: fix get_channel_from_mode() failure path\n serial: 8250_exar: Don\u0027t remove GPIO device on suspend\n rtc: mt6397: select IRQ_DOMAIN instead of depending on it\n kconfig: fix infinite loop when expanding a macro at the end of file\n tty: serial: samsung: fix tx_empty() to return TIOCSER_TEMT\n serial: max310x: fix syntax error in IRQ error message\n tty: vt: fix 20 vs 0x20 typo in EScsiignore\n afs: Revert \"afs: Hide silly-rename files from userspace\"\n NFS: Fix an off by one in root_nfs_cat()\n watchdog: stm32_iwdg: initialize default timeout\n net: sunrpc: Fix an off by one in rpc_sockaddr2uaddr()\n scsi: bfa: Fix function pointer type mismatch for hcb_qe-\u003ecbfn\n RDMA/device: Fix a race between mad_client and cm_client init\n scsi: csiostor: Avoid function pointer casts\n ALSA: usb-audio: Stop parsing channels bits when all channels are found.\n clk: Fix clk_core_get NULL dereference\n sparc32: Fix section mismatch in leon_pci_grpci\n backlight: lp8788: Fully initialize backlight_properties during probe\n backlight: lm3639: Fully initialize backlight_properties during probe\n backlight: da9052: Fully initialize backlight_properties during probe\n backlight: lm3630a: Don\u0027t set bl-\u003eprops.brightness in get_brightness\n backlight: lm3630a: Initialize backlight_properties on init\n powerpc/embedded6xx: Fix no previous prototype for avr_uart_send() etc.\n drm/msm/dpu: add division of drm_display_mode\u0027s hskew parameter\n powerpc/hv-gpci: Fix the H_GET_PERF_COUNTER_INFO hcall return value checks\n drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip\n media: ttpci: fix two memleaks in budget_av_attach\n media: media/pci: rename VFL_TYPE_GRABBER to _VIDEO\n media: rename VFL_TYPE_GRABBER to _VIDEO\n media: v4l2-core: correctly validate video and metadata ioctls\n media: go7007: fix a memleak in go7007_load_encoder\n media: dvb-frontends: avoid stack overflow warnings with clang\n media: pvrusb2: fix uaf in pvr2_context_set_notify\n drm/amdgpu: Fix missing break in ATOM_ARG_IMM Case of atom_get_src_int()\n ASoC: meson: axg-tdm-interface: fix mclk setup without mclk-fs\n mtd: rawnand: lpc32xx_mlc: fix irq handler prototype\n mtd: maps: physmap-core: fix flash size larger than 32-bit\n crypto: arm/sha - fix function cast warnings\n mfd: altera-sysmgr: Call of_node_put() only when of_parse_phandle() takes a ref\n mfd: syscon: Call of_node_put() only when of_parse_phandle() takes a ref\n drm/tegra: put drm_gem_object ref on error in tegra_fb_create\n clk: hisilicon: hi3519: Release the correct number of gates in hi3519_clk_unregister()\n PCI: Mark 3ware-9650SE Root Port Extended Tags as broken\n drm/mediatek: dsi: Fix DSI RGB666 formats and definitions\n clk: qcom: dispcc-sdm845: Adjust internal GDSC wait times\n media: pvrusb2: fix pvr2_stream_callback casts\n media: pvrusb2: remove redundant NULL check\n media: go7007: add check of return value of go7007_read_addr()\n media: imx: csc/scaler: fix v4l2_ctrl_handler memory leak\n perf stat: Avoid metric-only segv\n ALSA: seq: fix function cast warnings\n drm/radeon/ni: Fix wrong firmware size logging in ni_init_microcode()\n perf thread_map: Free strlist on normal path in thread_map__new_by_tid_str()\n PCI: switchtec: Fix an error handling path in switchtec_pci_probe()\n quota: Fix rcu annotations of inode dquot pointers\n quota: Fix potential NULL pointer dereference\n quota: simplify drop_dquot_ref()\n clk: qcom: reset: Ensure write completion on reset de/assertion\n clk: qcom: reset: Commonize the de/assert functions\n clk: qcom: reset: support resetting multiple bits\n clk: qcom: reset: Allow specifying custom reset delay\n media: edia: dvbdev: fix a use-after-free\n media: v4l2-mem2mem: fix a memleak in v4l2_m2m_register_entity\n media: v4l2-tpg: fix some memleaks in tpg_alloc\n media: em28xx: annotate unchecked call to media_device_register()\n perf evsel: Fix duplicate initialization of data-\u003eid in evsel__parse_sample()\n drm/amd/display: Fix potential NULL pointer dereferences in \u0027dcn10_set_output_transfer_func()\u0027\n perf record: Fix possible incorrect free in record__switch_output()\n PCI/DPC: Print all TLP Prefixes, not just the first\n media: tc358743: register v4l2 async device only after successful setup\n dmaengine: tegra210-adma: Update dependency to ARCH_TEGRA\n drm/rockchip: lvds: do not overwrite error code\n drm: Don\u0027t treat 0 as -1 in drm_fixp2int_ceil\n drm/rockchip: inno_hdmi: Fix video timing\n drm/tegra: output: Fix missing i2c_put_adapter() in the error handling paths of tegra_output_probe()\n drm/tegra: dsi: Fix missing pm_runtime_disable() in the error handling path of tegra_dsi_probe()\n drm/tegra: dsi: Fix some error handling paths in tegra_dsi_probe()\n drm/tegra: dsi: Make use of the helper function dev_err_probe()\n gpu: host1x: mipi: Update tegra_mipi_request() to be node based\n drm/tegra: dsi: Add missing check for of_find_device_by_node\n dm: call the resume method on internal suspend\n dm raid: fix false positive for requeue needed during reshape\n nfp: flower: handle acti_netdevs allocation failure\n net/x25: fix incorrect parameter validation in the x25_getsockopt() function\n net: kcm: fix incorrect parameter validation in the kcm_getsockopt) function\n udp: fix incorrect parameter validation in the udp_lib_getsockopt() function\n l2tp: fix incorrect parameter validation in the pppol2tp_getsockopt() function\n tcp: fix incorrect parameter validation in the do_tcp_getsockopt() function\n net: hns3: fix port duplex configure error in IMP reset\n net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()\n ipv6: fib6_rules: flush route cache when rule is changed\n bpf: Fix stackmap overflow check on 32-bit arches\n bpf: Fix hashtab overflow check on 32-bit arches\n sr9800: Add check for usbnet_get_endpoints\n Bluetooth: hci_core: Fix possible buffer overflow\n Bluetooth: Remove superfluous call to hci_conn_check_pending()\n igb: Fix missing time sync events\n igb: move PEROUT and EXTTS isr logic to separate functions\n mmc: wmt-sdmmc: remove an incorrect release_mem_region() call in the .remove function\n SUNRPC: fix some memleaks in gssx_dec_option_array\n x86, relocs: Ignore relocations in .notes section\n ACPI: scan: Fix device check notification handling\n ARM: dts: imx6dl-yapp4: Move the internal switch PHYs under the switch node\n ARM: dts: imx6dl-yapp4: Fix typo in the QCA switch register address\n ARM: dts: imx6dl-yapp4: Move phy reset into switch node\n ARM: dts: arm: realview: Fix development chip ROM compatible value\n net: ena: Remove ena_select_queue\n net: ena: cosmetic: fix line break issues\n wifi: brcmsmac: avoid function pointer casts\n iommu/amd: Mark interrupt as managed\n bus: tegra-aconnect: Update dependency to ARCH_TEGRA\n ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()\n arm64: dts: qcom: msm8996: Pad addresses\n arm64: dts: qcom: msm8996: Move regulator consumers to db820c\n arm64: dts: qcom: msm8996: Use node references in db820c\n arm64: dts: qcom: db820c: Move non-soc entries out of /soc\n bpf: Mark bpf_spin_{lock,unlock}() helpers with notrace correctly\n bpf: Factor out bpf_spin_lock into helpers.\n bpf: Add typecast to bpf helpers to help BTF generation\n arm64: dts: mediatek: mt7622: add missing \"device_type\" to memory nodes\n wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()\n net: blackhole_dev: fix build warning for ethh set but not used\n af_unix: Annotate data-race of gc_in_progress in wait_for_unix_gc().\n sock_diag: annotate data-races around sock_diag_handlers[family]\n wifi: mwifiex: debugfs: Drop unnecessary error check for debugfs_create_dir()\n wifi: wilc1000: fix RCU usage in connect path\n wifi: wilc1000: fix declarations ordering\n wifi: b43: Disable QoS for bcm4331\n wifi: b43: Stop correct queue in DMA worker when QoS is disabled\n b43: main: Fix use true/false for bool type\n wifi: b43: Stop/wake correct queue in PIO Tx path when QoS is disabled\n wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled\n b43: dma: Fix use true/false for bool type variable\n wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()\n timekeeping: Fix cross-timestamp interpolation for non-x86\n timekeeping: Fix cross-timestamp interpolation corner case decision\n timekeeping: Fix cross-timestamp interpolation on counter wrap\n aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts\n fs/select: rework stack allocation hack for clang\n nbd: null check for nla_nest_start\n do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak\n ASoC: wm8962: Fix up incorrect error message in wm8962_set_fll\n ASoC: wm8962: Enable both SPKOUTR_ENA and SPKOUTL_ENA in mono mode\n ASoC: wm8962: Enable oscillator if selecting WM8962_FLL_OSC\n Input: gpio_keys_polled - suppress deferred probe error for gpio\n ASoC: Intel: bytcr_rt5640: Add an extra entry for the Chuwi Vi8 tablet\n firewire: core: use long bus reset on gap count error\n Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security\n scsi: mpt3sas: Prevent sending diag_reset when the controller is ready\n btrfs: fix data race at btrfs_use_block_rsv() when accessing block reserve\n dm-verity, dm-crypt: align \"struct bvec_iter\" correctly\n block: sed-opal: handle empty atoms when parsing response\n parisc/ftrace: add missing CONFIG_DYNAMIC_FTRACE check\n net/iucv: fix the allocation size of iucv_path_table array\n RDMA/mlx5: Relax DEVX access upon modify commands\n HID: multitouch: Add required quirk for Synaptics 0xcddc device\n MIPS: Clear Cause.BD in instruction_pointer_set\n x86/xen: Add some null pointer checking to smp.c\n ASoC: rt5645: Make LattePanda board DMI match more precise\n selftests: tls: use exact comparison in recv_partial\n io_uring: drop any code related to SCM_RIGHTS\n io_uring/unix: drop usage of io_uring socket\n UPSTREAM: arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts\n UPSTREAM: arm64: dts: qcom: add PDC interrupt controller for SDM845\n Linux 5.4.272\n arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts\n arm64: dts: qcom: add PDC interrupt controller for SDM845\n serial: max310x: fix IO data corruption in batched operations\n serial: max310x: implement I2C support\n serial: max310x: make accessing revision id interface-agnostic\n regmap: Add bulk read/write callbacks into regmap_config\n regmap: allow to define reg_update_bits for no bus configuration\n serial: max310x: Unprepare and disable clock in error path\n getrusage: use sig-\u003estats_lock rather than lock_task_sighand()\n getrusage: use __for_each_thread()\n getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()\n getrusage: add the \"signal_struct *sig\" local variable\n y2038: rusage: use __kernel_old_timeval\n hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed\n hv_netvsc: use netif_is_bond_master() instead of open code\n hv_netvsc: Make netvsc/VF binding check both MAC and serial number\n Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU\n serial: max310x: prevent infinite while() loop in port startup\n serial: max310x: use a separate regmap for each port\n serial: max310x: use regmap methods for SPI batch operations\n serial: max310x: Make use of device properties\n serial: max310x: fail probe if clock crystal is unstable\n serial: max310x: Try to get crystal clock rate from property\n serial: max310x: Use devm_clk_get_optional() to get the input clock\n um: allow not setting extra rpaths in the linux binary\n selftests: mm: fix map_hugetlb failure on 64K page size systems\n netrom: Fix data-races around sysctl_net_busy_read\n netrom: Fix a data-race around sysctl_netrom_link_fails_count\n netrom: Fix a data-race around sysctl_netrom_routing_control\n netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout\n netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size\n netrom: Fix a data-race around sysctl_netrom_transport_busy_delay\n netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay\n netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries\n netrom: Fix a data-race around sysctl_netrom_transport_timeout\n netrom: Fix data-races around sysctl_netrom_network_ttl_initialiser\n netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser\n netrom: Fix a data-race around sysctl_netrom_default_path_quality\n netfilter: nf_conntrack_h323: Add protection for bmp length out of range\n netfilter: nft_ct: fix l3num expectations with inet pseudo family\n net/rds: fix WARNING in rds_conn_connect_if_down\n net/ipv6: avoid possible UAF in ip6_route_mpath_notify()\n net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()\n geneve: make sure to pull inner header in geneve_rx()\n ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able\n net: lan78xx: fix runtime PM count underflow on link stop\n lan78xx: Fix race conditions in suspend/resume handling\n lan78xx: Fix partial packet errors on suspend/resume\n lan78xx: Add missing return code checks\n lan78xx: Fix white space and style issues\n Linux 5.4.271\n gpio: 74x164: Enable output pins after registers are reset\n fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super\n cachefiles: fix memory leak in cachefiles_add_cache()\n x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers\n mmc: core: Fix eMMC initialization with 1-bit bus connection\n dmaengine: fsl-qdma: init irq after reg initialization\n dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read\n btrfs: dev-replace: properly validate device names\n wifi: nl80211: reject iftype change with mesh ID change\n gtp: fix use-after-free and null-ptr-deref in gtp_newlink()\n afs: Fix endless loop in directory parsing\n ALSA: Drop leftover snd-rtctimer stuff from Makefile\n power: supply: bq27xxx-i2c: Do not free non existing IRQ\n efi/capsule-loader: fix incorrect allocation size\n rtnetlink: fix error logic of IFLA_BRIDGE_FLAGS writing back\n netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()\n Bluetooth: Enforce validation on max value of connection interval\n Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST\n Bluetooth: Avoid potential use-after-free in hci_error_reset\n net: usb: dm9601: fix wrong return value in dm9601_mdio_read\n lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected\n ipv6: fix potential \"struct net\" leak in inet6_rtm_getaddr()\n tun: Fix xdp_rxq_info\u0027s queue_index when detaching\n net: ip_tunnel: prevent perpetual headroom growth\n netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter\n ANDROID: GKI: update .xml file due to USB changes in 5.4.270\n Revert \"bpf: Add map and need_defer parameters to .map_fd_put_ptr()\"\n Revert \"hrtimer: Report offline hrtimer enqueue\"\n Revert \"drm/mipi-dsi: Fix detach call without attach\"\n Linux 5.4.270\n scripts/bpf: Fix xdp_md forward declaration typo\n fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio\n drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set\n drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3\n netfilter: nf_tables: set dormant flag on hook register failure\n tls: stop recv() if initial process_rx_list gave us non-DATA\n tls: rx: drop pointless else after goto\n tls: rx: jump to a more appropriate label\n s390: use the correct count for __iowrite64_copy()\n packet: move from strlcpy with unused retval to strscpy\n ipv6: sr: fix possible use-after-free and null-ptr-deref\n afs: Increase buffer size in afs_update_volume_status()\n ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid\n ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid\n nouveau: fix function cast warnings\n scsi: jazz_esp: Only build if SCSI core is builtin\n bpf, scripts: Correct GPL license name\n scripts/bpf: teach bpf_helpers_doc.py to dump BPF helper definitions\n RDMA/srpt: fix function pointer cast warnings\n RDMA/srpt: Make debug output more detailed\n RDMA/bnxt_re: Return error for SRQ resize\n IB/hfi1: Fix a memleak in init_credit_return\n usb: roles: don\u0027t get/set_role() when usb_role_switch is unregistered\n usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs\n usb: cdns3: fix memory double free when handle zero packet\n usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()\n ARM: ep93xx: Add terminator to gpiod_lookup_table\n l2tp: pass correct message length to ip6_append_data\n PCI/MSI: Prevent MSI hardware interrupt number truncation\n gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()\n dm-crypt: don\u0027t modify the data when using authenticated encryption\n IB/hfi1: Fix sdma.h tx-\u003enum_descs off-by-one error\n PCI: tegra: Fix OF node reference leak\n PCI: tegra: Fix reporting GPIO error value\n arm64: dts: qcom: msm8916: Fix typo in pronto remoteproc node\n drm/amdgpu: Fix type of second parameter in trans_msg() callback\n iomap: Set all uptodate bits for an Uptodate page\n dm-integrity: don\u0027t modify bio\u0027s immutable bio_vec in integrity_metadata()\n x86/alternatives: Disable KASAN in apply_alternatives()\n drm/amdgpu: Check for valid number of registers to read\n Revert \"drm/sun4i: dsi: Change the start delay calculation\"\n ALSA: hda/realtek - Enable micmute LED on and HP system\n selftests/bpf: Avoid running unprivileged tests with alignment requirements\n net: bridge: clear bridge\u0027s private skb space on xmit\n spi: mt7621: Fix an error message in mt7621_spi_probe()\n pinctrl: rockchip: Fix refcount leak in rockchip_pinctrl_parse_groups\n pinctrl: pinctrl-rockchip: Fix a bunch of kerneldoc misdemeanours\n tcp: add annotations around sk-\u003esk_shutdown accesses\n tcp: return EPOLLOUT from tcp_poll only when notsent_bytes is half the limit\n tcp: factor out __tcp_close() helper\n pmdomain: renesas: r8a77980-sysc: CR7 must be always on\n s390/qeth: Fix potential loss of L3-IP@ in case of network issues\n virtio-blk: Ensure no requests in virtqueues before deleting vqs.\n firewire: core: send bus reset promptly on gap count error\n scsi: lpfc: Use unsigned type for num_sge\n hwmon: (coretemp) Enlarge per package core count limit\n nvmet-fc: abort command when there is no binding\n netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new\n ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616\n nvmet-tcp: fix nvme tcp ida memory leak\n regulator: pwm-regulator: Add validity checks in continuous .get_voltage\n ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()\n ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()\n ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers\n ahci: asm1166: correct count of reported ports\n fbdev: sis: Error out if pixclock equals zero\n fbdev: savage: Error out if pixclock equals zero\n wifi: mac80211: fix race condition on enabling fast-xmit\n wifi: cfg80211: fix missing interfaces when dumping\n dmaengine: fsl-qdma: increase size of \u0027irq_name\u0027\n dmaengine: shdma: increase size of \u0027dev_id\u0027\n scsi: target: core: Add TMF to tmr_list handling\n sched/rt: Disallow writing invalid values to sched_rt_period_us\n sched/rt: Fix sysctl_sched_rr_timeslice intial value\n userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb\n nilfs2: replace WARN_ONs for invalid DAT metadata block requests\n memcg: add refcnt for pcpu stock to avoid UAF problem in drain_all_stock()\n sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset\n net/sched: Retire dsmark qdisc\n net/sched: Retire ATM qdisc\n net/sched: Retire CBQ qdisc\n KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler\n KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()\n Linux 5.4.269\n of: gpio unittest kfree() wrong object\n of: unittest: fix EXPECT text for gpio hog errors\n net: bcmgenet: Fix EEE implementation\n Revert \"Revert \"mtd: rawnand: gpmi: Fix setting busy timeout setting\"\"\n netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()\n lsm: new security_file_ioctl_compat() hook\n drm/msm/dsi: Enable runtime PM\n PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()\n PM: runtime: add devm_pm_runtime_enable helper\n nilfs2: fix potential bug in end_buffer_async_write\n sched/membarrier: reduce the ability to hammer on sys_membarrier\n net: prevent mss overflow in skb_segment()\n netfilter: ipset: Missing gc cancellations fixed\n netfilter: ipset: fix performance regression in swap operation\n KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache\n mips: Fix max_mapnr being uninitialized on early stages\n arch, mm: remove stale mentions of DISCONIGMEM\n bus: moxtet: Add spi device table\n Revert \"md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d\"\n tracing: Inform kmemleak of saved_cmdlines allocation\n pmdomain: core: Move the unused cleanup to a _sync initcall\n can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)\n irqchip/irq-brcmstb-l2: Add write memory barrier before exit\n nfp: flower: prevent re-adding mac index for bonded port\n nfp: use correct macro for LengthSelect in BAR config\n nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()\n nilfs2: fix data corruption in dsync block recovery for small block sizes\n ALSA: hda/conexant: Add quirk for SWS JS201D\n mmc: slot-gpio: Allow non-sleeping GPIO ro\n x86/mm/ident_map: Use gbpages only where full GB page should be mapped.\n x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6\n serial: max310x: improve crystal stable clock detection\n serial: max310x: set default value when reading clock ready bit\n ring-buffer: Clean ring_buffer_poll_wait() error return\n iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC\n staging: iio: ad5933: fix type mismatch regression\n tracing: Fix wasted memory in saved_cmdlines logic\n ext4: fix double-free of blocks due to wrong extents moved_len\n misc: fastrpc: Mark all sessions as invalid in cb_remove\n binder: signal epoll threads of self-work\n ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL\n xen-netback: properly sync TX responses\n nfc: nci: free rx_data_reassembly skb on NCI device cleanup\n kbuild: Fix changing ELF file type for output of gen_btf for big endian\n firewire: core: correct documentation of fw_csr_string() kernel API\n scsi: Revert \"scsi: fcoe: Fix potential deadlock on \u0026fip-\u003ectlr_lock\"\n i2c: i801: Fix block process call transactions\n i2c: i801: Remove i801_set_block_buffer_mode\n usb: f_mass_storage: forbid async queue when shutdown happen\n USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT\n HID: wacom: Do not register input devices until after hid_hw_start\n HID: wacom: generic: Avoid reporting a serial of \u00270\u0027 to userspace\n mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again\n tracing/trigger: Fix to return error if failed to alloc snapshot\n i40e: Fix waiting for queues of all VSIs to be disabled\n MIPS: Add \u0027memory\u0027 clobber to csum_ipv6_magic() inline assembler\n ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()\n spi: ppc4xx: Drop write-only variable\n of: unittest: Fix compile in the non-dynamic case\n of: unittest: add overlay gpio test to catch gpio hog problem\n btrfs: send: return EOPNOTSUPP on unknown flags\n btrfs: forbid deleting live subvol qgroup\n btrfs: forbid creating subvol qgroups\n netfilter: nft_set_rbtree: skip end interval element from gc\n net: stmmac: xgmac: fix a typo of register name in DPP safety handling\n net: stmmac: xgmac: use #define for string constants\n vhost: use kzalloc() instead of kmalloc() followed by memset()\n Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID\n hrtimer: Report offline hrtimer enqueue\n USB: serial: cp210x: add ID for IMST iM871A-USB\n USB: serial: option: add Fibocom FM101-GL variant\n USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e\n net/af_iucv: clean up a try_then_request_module()\n netfilter: nft_ct: reject direction for ct id\n netfilter: nft_compat: restrict match/target protocol to u16\n netfilter: nft_compat: reject unused compat flag\n ppp_async: limit MRU to 64K\n tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()\n rxrpc: Fix response to PING RESPONSE ACKs to a dead call\n inet: read sk-\u003esk_family once in inet_recv_error()\n hwmon: (coretemp) Fix bogus core_id to attr name mapping\n hwmon: (coretemp) Fix out-of-bounds memory access\n hwmon: (aspeed-pwm-tacho) mutex for tach reading\n atm: idt77252: fix a memleak in open_card_ubr0\n selftests: net: avoid just another constant wait\n net: stmmac: xgmac: fix handling of DPP safety error for DMA channels\n phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP\n dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV\n phy: renesas: rcar-gen3-usb2: Fix returning wrong error code\n dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA\n dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA\n bonding: remove print in bond_verify_device_path\n HID: apple: Add 2021 magic keyboard FN key mapping\n HID: apple: Swap the Fn and Left Control keys on Apple keyboards\n HID: apple: Add support for the 2021 Magic Keyboard\n net: sysfs: Fix /sys/class/net/\u003ciface\u003e path\n af_unix: fix lockdep positive in sk_diag_dump_icons()\n net: ipv4: fix a memleak in ip_setup_cork\n netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations\n netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger\n llc: call sock_orphan() at release time\n ipv6: Ensure natural alignment of const ipv6 loopback and router addresses\n ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()\n ixgbe: Refactor overtemp event handling\n ixgbe: Refactor returning internal error codes\n ixgbe: Remove non-inclusive language\n net: remove unneeded break\n scsi: isci: Fix an error code problem in isci_io_request_build()\n wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update\n perf: Fix the nr_addr_filters fix\n drm/amdgpu: Release \u0027adev-\u003epm.fw\u0027 before return in \u0027amdgpu_device_need_post()\u0027\n ceph: fix deadlock or deadcode of misusing dget()\n blk-mq: fix IO hang from sbitmap wakeup race\n virtio_net: Fix \"‘%d’ directive writing between 1 and 11 bytes into a region of size 10\" warnings\n libsubcmd: Fix memory leak in uniq()\n PCI/AER: Decode Requester ID when no error info found\n fs/kernfs/dir: obey S_ISGID\n usb: hub: Replace hardcoded quirk value with BIT() macro\n PCI: switchtec: Fix stdev_release() crash after surprise hot remove\n PCI: Only override AMD USB controller if required\n mfd: ti_am335x_tscadc: Fix TI SoC dependencies\n i3c: master: cdns: Update maximum prescaler value for i2c clock\n um: net: Fix return type of uml_net_start_xmit()\n um: Don\u0027t use vfprintf() for os_info()\n um: Fix naming clash between UML and scheduler\n leds: trigger: panic: Don\u0027t register panic notifier if creating the trigger failed\n drm/amdgpu: Drop \u0027fence\u0027 check in \u0027to_amdgpu_amdkfd_fence()\u0027\n drm/amdgpu: Let KFD sync with VM fences\n clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()\n clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()\n drm/msm/dpu: Ratelimit framedone timeout msgs\n media: ddbridge: fix an error code problem in ddb_probe\n IB/ipoib: Fix mcast list locking\n drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time\n ALSA: hda: Intel: add HDA_ARL PCI ID support\n PCI: add INTEL_HDA_ARL to pci_ids.h\n media: rockchip: rga: fix swizzling for RGB formats\n media: stk1160: Fixed high volume of stk1160_dbg messages\n drm/mipi-dsi: Fix detach call without attach\n drm/framebuffer: Fix use of uninitialized variable\n drm/drm_file: fix use of uninitialized variable\n RDMA/IPoIB: Fix error code return in ipoib_mcast_join\n fast_dput(): handle underflows gracefully\n ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument\n f2fs: fix to check return value of f2fs_reserve_new_block()\n wifi: cfg80211: free beacon_ies when overridden from hidden BSS\n wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()\n wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices\n arm64: dts: qcom: msm8998: Fix \u0027out-ports\u0027 is a required property\n arm64: dts: qcom: msm8996: Fix \u0027in-ports\u0027 is a required property\n md: Whenassemble the array, consult the superblock of the freshest device\n block: prevent an integer overflow in bvec_try_merge_hw_page\n ARM: dts: imx23/28: Fix the DMA controller node name\n ARM: dts: imx23-sansa: Use preferred i2c-gpios properties\n ARM: dts: imx27-apf27dev: Fix LED name\n ARM: dts: imx25/27: Pass timing0\n ARM: dts: imx1: Fix sram node\n ARM: dts: imx27: Fix sram node\n ARM: dts: imx: Use flash@0,0 pattern\n ARM: dts: imx25/27-eukrea: Fix RTC node name\n ARM: dts: rockchip: fix rk3036 hdmi ports node\n scsi: libfc: Fix up timeout error in fc_fcp_rec_error()\n scsi: libfc: Don\u0027t schedule abort twice\n bpf: Add map and need_defer parameters to .map_fd_put_ptr()\n wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()\n ARM: dts: imx7s: Fix nand-controller #size-cells\n ARM: dts: imx7s: Fix lcdif compatible\n ARM: dts: imx7d: Fix coresight funnel ports\n bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk\n PCI: Add no PM reset quirk for NVIDIA Spectrum devices\n scsi: lpfc: Fix possible file string name overflow when updating firmware\n selftests/bpf: Fix pyperf180 compilation failure with clang18\n selftests/bpf: satisfy compiler by having explicit return in btf test\n wifi: rt2x00: restart beacon queue when hardware reset\n ext4: avoid online resizing failures due to oversized flex bg\n ext4: remove unnecessary check from alloc_flex_gd()\n ext4: unify the type of flexbg_size to unsigned int\n ext4: fix inconsistent between segment fstrim and full fstrim\n ecryptfs: Reject casefold directory inodes\n SUNRPC: Fix a suspicious RCU usage warning\n KVM: s390: fix setting of fpc register\n s390/ptrace: handle setting of fpc register correctly\n jfs: fix array-index-out-of-bounds in diNewExt\n rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()\n afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()\n crypto: stm32/crc32 - fix parsing list of devices\n pstore/ram: Fix crash when setting number of cpus to an odd number\n jfs: fix uaf in jfs_evict_inode\n jfs: fix array-index-out-of-bounds in dbAdjTree\n jfs: fix slab-out-of-bounds Read in dtSearch\n UBSAN: array-index-out-of-bounds in dtSplitRoot\n FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree\n ACPI: extlog: fix NULL pointer dereference check\n PNP: ACPI: fix fortify warning\n ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop\n audit: Send netlink ACK before setting connection in auditd_set\n regulator: core: Only increment use_count when enable_count changes\n perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file\n x86/mce: Mark fatal MCE\u0027s page as poison to avoid panic in the kdump kernel\n powerpc/lib: Validate size for vector operations\n powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE\n powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()\n powerpc: Fix build error due to is_valid_bugaddr()\n powerpc/mm: Fix null-pointer dereference in pgtable_cache_add\n x86/entry/ia32: Ensure s32 is sign extended to s64\n tick/sched: Preserve number of idle sleeps across CPU hotplug events\n mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan\n spi: bcm-qspi: fix SFDP BFPT read by usig mspi read\n gpio: eic-sprd: Clear interrupt after set the interrupt type\n drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume\n drm/exynos: fix accidental on-stack copy of exynos_drm_plane\n drm/bridge: nxp-ptn3460: simplify some error checking\n drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking\n drm: Don\u0027t unref the same fb many times by mistake due to deadlock handling\n gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04\n netfilter: nf_tables: reject QUEUE/DROP verdict parameters\n rbd: don\u0027t move requests to the running list on errors\n btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args\n btrfs: don\u0027t warn if discard range is not aligned to sector\n btrfs: tree-checker: fix inline ref size in error messages\n btrfs: ref-verify: free ref cache before clearing mount opt\n net: fec: fix the unhandled context fault from smmu\n fjes: fix memleaks in fjes_hw_setup\n netfilter: nf_tables: validate NFPROTO_* family\n netfilter: nf_tables: restrict anonymous set and map names to 16 bytes\n net/mlx5e: fix a double-free in arfs_create_groups\n net/mlx5: Use kfree(ft-\u003eg) in arfs_create_groups()\n net/mlx5: DR, Use the right GVMI number for drop action\n netlink: fix potential sleeping issue in mqueue_flush_file\n tcp: Add memory barrier to tcp_push()\n afs: Hide silly-rename files from userspace\n tracing: Ensure visibility when inserting an element into tracing_map\n net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv\n llc: Drop support for ETH_P_TR_802_2.\n llc: make llc_ui_sendmsg() more robust against bonding changes\n vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING\n net/smc: fix illegal rmb_desc access in SMC-D connection dump\n x86/CPU/AMD: Fix disabling XSAVES on AMD family 0x17 due to erratum\n powerpc: Use always instead of always-y in for crtsavres.o\n fs: move S_ISGID stripping into the vfs_*() helpers\n fs: add mode_strip_sgid() helper\n mtd: spinand: macronix: Fix MX35LFxGE4AD page size\n block: Remove special-casing of compound pages\n rename(): fix the locking of subdirectories\n ubifs: ubifs_symlink: Fix memleak of inode-\u003ei_link in error path\n nouveau/vmm: don\u0027t set addr on the fail path to avoid warning\n mmc: core: Use mrq.sbc in close-ended ffu\n arm64: dts: qcom: sdm845: fix USB wakeup interrupt types\n parisc/firmware: Fix F-extend for PDC addresses\n rpmsg: virtio: Free driver_override when rpmsg_remove()\n hwrng: core - Fix page fault dead lock on mmap-ed hwrng\n PM: hibernate: Enforce ordering during image compression/decompression\n crypto: api - Disallow identical driver names\n ext4: allow for the last group to be marked as trimmed\n serial: sc16is7xx: add check for unsupported SPI modes during probe\n spi: introduce SPI_MODE_X_MASK macro\n serial: sc16is7xx: set safe default SPI clock frequency\n units: add the HZ macros\n units: change from \u0027L\u0027 to \u0027UL\u0027\n units: Add Watt units\n include/linux/units.h: add helpers for kelvin to/from Celsius conversion\n PCI: mediatek: Clear interrupt status before dispatching handler\n\n Conflicts:\n\tinclude/linux/timer.h\n\tmm/memory-failure.c\n\nChange-Id: I4974903c79ecddc3d9225b0b723a30b6c83ef572\n" }, { "commit": "eb1a0358d182abcac424ebb3381e2f77ddf024f0", "tree": "b58b069481b550fd7134a86094dd2bc3f1c9b07f", "parents": [ "5c67c52b0d73d628fb4ba8b65dfb6d1bdcd1d8ea", "189ee9735a4b2e8095b1a6c088ebc8e133872471" ], "author": { "name": "Greg Kroah-Hartman", "email": "gregkh@google.com", "time": "Tue Jun 18 08:03:39 2024 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@google.com", "time": "Tue Jun 18 14:18:49 2024 +0000" }, "message": "Merge 5.4.278 into android11-5.4-lts\n\nChanges in 5.4.278\n\tx86/tsc: Trust initial offset in architectural TSC-adjust MSRs\n\ttty: n_gsm: fix possible out-of-bounds in gsm0_receive()\n\tspeakup: Fix sizeof() vs ARRAY_SIZE() bug\n\tring-buffer: Fix a race between readers and resize checks\n\tnet: smc91x: Fix m68k kernel compilation for ColdFire CPU\n\tnilfs2: fix unexpected freezing of nilfs_segctor_sync()\n\tnilfs2: fix potential hang in nilfs_detach_log_writer()\n\twifi: cfg80211: fix the order of arguments for trace events of the tx_rx_evt class\n\tnet: usb: qmi_wwan: add Telit FN920C04 compositions\n\tdrm/amd/display: Set color_mgmt_changed to true on unsuspend\n\tASoC: rt5645: Fix the electric noise due to the CBJ contacts floating\n\tASoC: dt-bindings: rt5645: add cbj sleeve gpio property\n\tASoC: da7219-aad: fix usage of device_get_named_child_node()\n\tdrm/amdkfd: Flush the process wq before creating a kfd_process\n\tnvme: find numa distance only if controller has valid numa id\n\topenpromfs: finish conversion to the new mount API\n\tcrypto: bcm - Fix pointer arithmetic\n\tfirmware: raspberrypi: Use correct device for DMA mappings\n\tecryptfs: Fix buffer size for tag 66 packet\n\tnilfs2: fix out-of-range warning\n\tparisc: add missing export of __cmpxchg_u8()\n\tcrypto: ccp - drop platform ifdef checks\n\ts390/cio: fix tracepoint subchannel type field\n\tjffs2: prevent xattr node from overflowing the eraseblock\n\tnull_blk: Fix missing mutex_destroy() at module removal\n\tmd: fix resync softlockup when bitmap size is less than array size\n\twifi: ath10k: poll service ready message before failing\n\tx86/boot: Ignore relocations in .notes sections in walk_relocs() too\n\tqed: avoid truncating work queue length\n\tscsi: ufs: qcom: Perform read back after writing reset bit\n\tscsi: ufs: cdns-pltfrm: Perform read back after writing HCLKDIV\n\tscsi: ufs: core: Perform read back after disabling interrupts\n\tscsi: ufs: core: Perform read back after disabling UIC_COMMAND_COMPL\n\tirqchip/alpine-msi: Fix off-by-one in allocation error path\n\tACPI: disable -Wstringop-truncation\n\tcpufreq: Reorganize checks in cpufreq_offline()\n\tcpufreq: Split cpufreq_offline()\n\tcpufreq: Rearrange locking in cpufreq_remove_dev()\n\tcpufreq: exit() callback is optional\n\tscsi: libsas: Fix the failure of adding phy with zero-address to port\n\tscsi: hpsa: Fix allocation size for Scsi_Host private data\n\tx86/purgatory: Switch to the position-independent small code model\n\twifi: ath10k: Fix an error code problem in ath10k_dbg_sta_write_peer_debug_trigger()\n\twifi: ath10k: populate board data for WCN3990\n\ttcp: minor optimization in tcp_add_backlog()\n\ttcp: fix a signed-integer-overflow bug in tcp_add_backlog()\n\ttcp: avoid premature drops in tcp_add_backlog()\n\tmacintosh/via-macii: Fix \"BUG: sleeping function called from invalid context\"\n\twifi: carl9170: add a proper sanity check for endpoints\n\twifi: ar5523: enable proper endpoint verification\n\tsh: kprobes: Merge arch_copy_kprobe() into arch_prepare_kprobe()\n\tRevert \"sh: Handle calling csum_partial with misaligned data\"\n\tHID: intel-ish-hid: ipc: Add check for pci_alloc_irq_vectors\n\tscsi: bfa: Ensure the copied buf is NUL terminated\n\tscsi: qedf: Ensure the copied buf is NUL terminated\n\twifi: mwl8k: initialize cmd-\u003eaddr[] properly\n\tusb: aqc111: stop lying about skb-\u003etruesize\n\tnet: usb: sr9700: stop lying about skb-\u003etruesize\n\tm68k: Fix spinlock race in kernel thread creation\n\tm68k: mac: Fix reboot hang on Mac IIci\n\tnet: ethernet: cortina: Locking fixes\n\taf_unix: Fix data races in unix_release_sock/unix_stream_sendmsg\n\tnet: usb: smsc95xx: stop lying about skb-\u003etruesize\n\tnet: openvswitch: fix overwriting ct original tuple for ICMPv6\n\tipv6: sr: add missing seg6_local_exit\n\tipv6: sr: fix incorrect unregister order\n\tipv6: sr: fix invalid unregister error path\n\tdrm/amd/display: Fix potential index out of bounds in color transformation function\n\tmtd: rawnand: hynix: fixed typo\n\tfbdev: shmobile: fix snprintf truncation\n\tdrm/mediatek: Add 0 size check to mtk_drm_gem_obj\n\tpowerpc/fsl-soc: hide unused const variable\n\tfbdev: sisfb: hide unused variables\n\tmedia: ngene: Add dvb_ca_en50221_init return value check\n\tmedia: radio-shark2: Avoid led_names truncations\n\tplatform/x86: wmi: Make two functions static\n\tfbdev: sh7760fb: allow modular build\n\tdrm/arm/malidp: fix a possible null pointer dereference\n\tASoC: tracing: Export SND_SOC_DAPM_DIR_OUT to its value\n\tdrm/panel: simple: Add missing Innolux G121X1-L03 format, flags, connector\n\tRDMA/hns: Use complete parentheses in macros\n\tx86/insn: Fix PUSH instruction in x86 instruction decoder opcode map\n\text4: avoid excessive credit estimate in ext4_tmpfile()\n\tsunrpc: removed redundant procp check\n\tSUNRPC: Fix gss_free_in_token_pages()\n\tselftests/kcmp: Make the test output consistent and clear\n\tselftests/kcmp: remove unused open mode\n\tRDMA/IPoIB: Fix format truncation compilation errors\n\tnetrom: fix possible dead-lock in nr_rt_ioctl()\n\taf_packet: do not call packet_read_pending() from tpacket_destruct_skb()\n\tsched/topology: Don\u0027t set SD_BALANCE_WAKE on cpuset domain relax\n\tsched/fair: Allow disabling sched_balance_newidle with sched_relax_domain_level\n\tgreybus: lights: check return of get_channel_from_mode\n\tsoundwire: cadence/intel: simplify PDI/port mapping\n\tsoundwire: intel: don\u0027t filter out PDI0/1\n\tsoundwire: cadence_master: improve PDI allocation\n\tsoundwire: cadence: fix invalid PDI offset\n\tdmaengine: idma64: Add check for dma_set_max_seg_size\n\tfirmware: dmi-id: add a release callback function\n\tserial: max3100: Lock port-\u003elock when calling uart_handle_cts_change()\n\tserial: max3100: Update uart_driver_registered on driver removal\n\tserial: max3100: Fix bitwise types\n\tgreybus: arche-ctrl: move device table to its right location\n\tiio: pressure: dps310: support negative temperature values\n\tmicroblaze: Remove gcc flag for non existing early_printk.c file\n\tmicroblaze: Remove early printk call from cpuinfo-static.c\n\tusb: gadget: u_audio: Clear uac pointer when freed.\n\tstm class: Fix a double free in stm_register_device()\n\tppdev: Remove usage of the deprecated ida_simple_xx() API\n\tppdev: Add an error check in register_device\n\textcon: max8997: select IRQ_DOMAIN instead of depending on it\n\tf2fs: fix to release node block count in error path of f2fs_new_node_page()\n\tserial: sh-sci: protect invalidating RXDMA on shutdown\n\tlibsubcmd: Fix parse-options memory leak\n\tInput: ims-pcu - fix printf string overflow\n\tInput: pm8xxx-vibrator - correct VIB_MAX_LEVELS calculation\n\tdrm/msm/dpu: Always flush the slave INTF on the CTL\n\tum: Fix return value in ubd_init()\n\tum: Add winch to winch_handlers before registering winch IRQ\n\tmedia: stk1160: fix bounds checking in stk1160_copy_video()\n\tscsi: qla2xxx: Replace all non-returning strlcpy() with strscpy()\n\tpowerpc/pseries: Add failure related checks for h_get_mpp and h_get_ppp\n\tum: Fix the -Wmissing-prototypes warning for __switch_mm\n\tmedia: cec: cec-adap: always cancel work in cec_transmit_msg_fh\n\tmedia: cec: cec-api: add locking in cec_release()\n\tnull_blk: Fix the WARNING: modpost: missing MODULE_DESCRIPTION()\n\tx86/kconfig: Select ARCH_WANT_FRAME_POINTERS again when UNWINDER_FRAME_POINTER\u003dy\n\tnfc: nci: Fix uninit-value in nci_rx_work\n\tsunrpc: fix NFSACL RPC retry on soft mount\n\tipv6: sr: fix memleak in seg6_hmac_init_algo\n\tparams: lift param_set_uint_minmax to common code\n\ttcp: Fix shift-out-of-bounds in dctcp_update_alpha().\n\topenvswitch: Set the skbuff pkt_type for proper pmtud support.\n\tarm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY\n\tvirtio: delete vq in vp_find_vqs_msix() when request_irq() fails\n\tnet: fec: avoid lock evasion when reading pps_enable\n\tnfc: nci: Fix kcov check in nci_rx_work()\n\tnfc: nci: Fix handling of zero-length payload packets in nci_rx_work()\n\tnetfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()\n\tspi: Don\u0027t mark message DMA mapped when no transfer in it is\n\tnvmet: fix ns enable/disable possible hang\n\tnet/mlx5e: Use rx_missed_errors instead of rx_dropped for reporting buffer exhaustion\n\tdma-buf/sw-sync: don\u0027t enable IRQ from sync_print_obj()\n\tenic: Validate length of nl attributes in enic_set_vf_port\n\tsmsc95xx: remove redundant function arguments\n\tsmsc95xx: use usbnet-\u003edriver_priv\n\tnet: usb: smsc95xx: fix changing LED_SEL bit value updated from EEPROM\n\tnet:fec: Add fec_enet_deinit()\n\tnetfilter: tproxy: bail out if IP has been disabled on the device\n\tkconfig: fix comparison to constant symbols, \u0027m\u0027, \u0027n\u0027\n\tspi: stm32: Don\u0027t warn about spurious interrupts\n\tipvlan: Dont Use skb-\u003esk in ipvlan_process_v{4,6}_outbound\n\tALSA: timer: Set lower bound of start tick time\n\tgenirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline\n\tSUNRPC: Fix loop termination condition in gss_free_in_token_pages()\n\tbinder: fix max_thread type inconsistency\n\tmmc: core: Do not force a retune before RPMB switch\n\tio_uring: fail NOP if non-zero op flags is passed in\n\tafs: Don\u0027t cross .backup mountpoint from backup volume\n\tnilfs2: fix use-after-free of timer for log writer thread\n\tvxlan: Fix regression when dropping packets due to invalid src addresses\n\tx86/mm: Remove broken vsyscall emulation code from the page fault code\n\tf2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()\n\tmedia: lgdt3306a: Add a check against null-pointer-def\n\tdrm/amdgpu: add error handle to avoid out-of-bounds\n\tata: pata_legacy: make legacy_exit() work again\n\tACPI: resource: Do IRQ override on TongFang GXxHRXx and GMxHGxx\n\tarm64: tegra: Correct Tegra132 I2C alias\n\tmd/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING\n\twifi: rtl8xxxu: Fix the TX power of RTL8192CU, RTL8723AU\n\tarm64: dts: hi3798cv200: fix the size of GICR\n\tmedia: mc: mark the media devnode as registered from the, start\n\tmedia: mxl5xx: Move xpt structures off stack\n\tmedia: v4l2-core: hold videodev_lock until dev reg, finishes\n\tfbdev: savage: Handle err return when savagefb_check_var failed\n\tKVM: arm64: Allow AArch32 PSTATE.M to be restored as System mode\n\tcrypto: ecrdsa - Fix module auto-load on add_key\n\tcrypto: qat - Fix ADF_DEV_RESET_SYNC memory leak\n\tnet/ipv6: Fix route deleting failure when metric equals 0\n\tnet/9p: fix uninit-value in p9_client_rpc()\n\tintel_th: pci: Add Meteor Lake-S CPU support\n\tsparc64: Fix number of online CPUs\n\tkdb: Fix buffer overflow during tab-complete\n\tkdb: Use format-strings rather than \u0027\\0\u0027 injection in kdb_read()\n\tkdb: Fix console handling when editing and tab-completing commands\n\tkdb: Merge identical case statements in kdb_read()\n\tkdb: Use format-specifiers rather than memset() for padding in kdb_read()\n\tnet: fix __dst_negative_advice() race\n\txsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING\n\tsparc: move struct termio to asm/termios.h\n\text4: fix mb_cache_entry\u0027s e_refcnt leak in ext4_xattr_block_cache_find()\n\ts390/ap: Fix crash in AP internal function modify_bitmap()\n\tnfs: fix undefined behavior in nfs_block_bits()\n\tLinux 5.4.278\n\nChange-Id: I0cdcfac77f01b25b5790752b68d92f1eafaa9ddd\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@google.com\u003e\n" }, { "commit": "f13fc5113d7608731a1806e8cd6d418a108dd3bb", "tree": "78468b1d4b0c979707519dce67faf5bd9c8c7a99", "parents": [ "10f0af5234dafd03d2b75233428ec3f11cf7e43d" ], "author": { "name": "Masahiro Yamada", "email": "masahiroy@kernel.org", "time": "Sun May 19 18:22:27 2024 +0900" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Sun Jun 16 13:28:47 2024 +0200" }, "message": "kconfig: fix comparison to constant symbols, \u0027m\u0027, \u0027n\u0027\n\n[ Upstream commit aabdc960a283ba78086b0bf66ee74326f49e218e ]\n\nCurrently, comparisons to \u0027m\u0027 or \u0027n\u0027 result in incorrect output.\n\n[Test Code]\n\n config MODULES\n def_bool y\n modules\n\n config A\n def_tristate m\n\n config B\n def_bool A \u003e n\n\nCONFIG_B is unset, while CONFIG_B\u003dy is expected.\n\nThe reason for the issue is because Kconfig compares the tristate values\nas strings.\n\nCurrently, the .type fields in the constant symbol definitions,\nsymbol_{yes,mod,no} are unspecified, i.e., S_UNKNOWN.\n\nWhen expr_calc_value() evaluates \u0027A \u003e n\u0027, it checks the types of \u0027A\u0027 and\n\u0027n\u0027 to determine how to compare them.\n\nThe left-hand side, \u0027A\u0027, is a tristate symbol with a value of \u0027m\u0027, which\ncorresponds to a numeric value of 1. (Internally, \u0027y\u0027, \u0027m\u0027, and \u0027n\u0027 are\nrepresented as 2, 1, and 0, respectively.)\n\nThe right-hand side, \u0027n\u0027, has an unknown type, so it is treated as the\nstring \"n\" during the comparison.\n\nexpr_calc_value() compares two values numerically only when both can\nhave numeric values. Otherwise, they are compared as strings.\n\n symbol numeric value ASCII code\n -------------------------------------\n y 2 0x79\n m 1 0x6d\n n 0 0x6e\n\n\u0027m\u0027 is greater than \u0027n\u0027 if compared numerically (since 1 is greater\nthan 0), but smaller than \u0027n\u0027 if compared as strings (since the ASCII\ncode 0x6d is smaller than 0x6e).\n\nSpecifying .type\u003dS_TRISTATE for symbol_{yes,mod,no} fixes the above\ntest code.\n\nDoing so, however, would cause a regression to the following test code.\n\n[Test Code 2]\n\n config MODULES\n def_bool n\n modules\n\n config A\n def_tristate n\n\n config B\n def_bool A \u003d m\n\nYou would get CONFIG_B\u003dy, while CONFIG_B should not be set.\n\nThe reason is because sym_get_string_value() turns \u0027m\u0027 into \u0027n\u0027 when the\nmodule feature is disabled. Consequently, expr_calc_value() evaluates\n\u0027A \u003d n\u0027 instead of \u0027A \u003d m\u0027. This oddity has been hidden because the type\nof \u0027m\u0027 was previously S_UNKNOWN instead of S_TRISTATE.\n\nsym_get_string_value() should not tweak the string because the tristate\nvalue has already been correctly calculated. There is no reason to\nreturn the string \"n\" where its tristate value is mod.\n\nFixes: 31847b67bec0 (\"kconfig: allow use of relations other than (in)equality\")\nSigned-off-by: Masahiro Yamada \u003cmasahiroy@kernel.org\u003e\nSigned-off-by: Sasha Levin \u003csashal@kernel.org\u003e\n" }, { "commit": "46cf330263570410a334813baa47a56ea4fa4871", "tree": "266e872d1444bafbf69d3e8ebfce45179f12e479", "parents": [ "ff7463a1e9e209a72d885b0615f742acefdcc715", "0dbd436fb9908fbb442cb4c6e28044a891360229" ], "author": { "name": "Greg Kroah-Hartman", "email": "gregkh@google.com", "time": "Tue Apr 16 08:13:27 2024 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@google.com", "time": "Thu Apr 18 07:23:10 2024 +0000" }, "message": "Merge 5.4.274 into android11-5.4-lts\n\nChanges in 5.4.274\n\tamdkfd: use calloc instead of kzalloc to avoid integer overflow\n\tDocumentation/hw-vuln: Update spectre doc\n\tx86/cpu: Support AMD Automatic IBRS\n\tx86/bugs: Use sysfs_emit()\n\ttimers: Update kernel-doc for various functions\n\ttimers: Use del_timer_sync() even on UP\n\ttimers: Rename del_timer_sync() to timer_delete_sync()\n\twifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach\n\tmedia: staging: ipu3-imgu: Set fields before media_entity_pads_init()\n\tclk: qcom: gcc-sdm845: Add soft dependency on rpmhpd\n\tsmack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()\n\tsmack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()\n\tARM: dts: mmp2-brownstone: Don\u0027t redeclare phandle references\n\tarm: dts: marvell: Fix maxium-\u003emaxim typo in brownstone dts\n\tserial: max310x: fix NULL pointer dereference in I2C instantiation\n\tmedia: xc4000: Fix atomicity violation in xc4000_get_frequency\n\tKVM: Always flush async #PF workqueue when vCPU is being destroyed\n\tsparc64: NMI watchdog: fix return value of __setup handler\n\tsparc: vDSO: fix return value of __setup handler\n\tcrypto: qat - fix double free during reset\n\tcrypto: qat - resolve race condition during AER recovery\n\tselftests/mqueue: Set timeout to 180 seconds\n\text4: correct best extent lstart adjustment logic\n\tfat: fix uninitialized field in nostale filehandles\n\tubifs: Set page uptodate in the correct place\n\tubi: Check for too small LEB size in VTBL code\n\tubi: correct the calculation of fastmap size\n\tmtd: rawnand: meson: fix scrambling mode value in command macro\n\tparisc: Do not hardcode registers in checksum functions\n\tparisc: Fix ip_fast_csum\n\tparisc: Fix csum_ipv6_magic on 32-bit systems\n\tparisc: Fix csum_ipv6_magic on 64-bit systems\n\tparisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds\n\tPM: suspend: Set mem_sleep_current during kernel command line setup\n\tclk: qcom: gcc-ipq8074: fix terminating of frequency table arrays\n\tclk: qcom: mmcc-apq8084: fix terminating of frequency table arrays\n\tclk: qcom: mmcc-msm8974: fix terminating of frequency table arrays\n\tpowerpc/fsl: Fix mfpmr build errors with newer binutils\n\tUSB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB\n\tUSB: serial: add device ID for VeriFone adapter\n\tUSB: serial: cp210x: add ID for MGP Instruments PDS100\n\tUSB: serial: option: add MeiG Smart SLM320 product\n\tUSB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M\n\tPM: sleep: wakeirq: fix wake irq warning in system suspend\n\tmmc: tmio: avoid concurrent runs of mmc_request_done()\n\tfuse: don\u0027t unhash root\n\tbtrfs: fix off-by-one chunk length calculation at contains_pending_extent()\n\tPCI: Drop pci_device_remove() test of pci_dev-\u003edriver\n\tPCI/PM: Drain runtime-idle callbacks before driver removal\n\tRevert \"Revert \"md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d\"\"\n\tdm-raid: fix lockdep waring in \"pers-\u003ehot_add_disk\"\n\tmmc: core: Fix switch on gp3 partition\n\thwmon: (amc6821) add of_match table\n\text4: fix corruption during on-line resize\n\tfirmware: meson_sm: Rework driver as a proper platform driver\n\tnvmem: meson-efuse: fix function pointer type mismatch\n\tslimbus: core: Remove usage of the deprecated ida_simple_xx() API\n\tspeakup: Fix 8bit characters from direct synth\n\tkbuild: Move -Wenum-{compare-conditional,enum-conversion} into W\u003d1\n\tvfio/platform: Disable virqfds on cleanup\n\tring-buffer: Fix resetting of shortest_full\n\tring-buffer: Fix full_waiters_pending in poll\n\tsoc: fsl: qbman: Always disable interrupts when taking cgr_lock\n\tsoc: fsl: qbman: Add helper for sanity checking cgr ops\n\tsoc: fsl: qbman: Add CGR update function\n\tsoc: fsl: qbman: Use raw spinlock for cgr_lock\n\ts390/zcrypt: fix reference counting on zcrypt card objects\n\tdrm/exynos: do not return negative values from .get_modes()\n\tdrm/imx/ipuv3: do not return negative values from .get_modes()\n\tdrm/vc4: hdmi: do not return negative values from .get_modes()\n\tmemtest: use {READ,WRITE}_ONCE in memory scanning\n\tnilfs2: fix failure to detect DAT corruption in btree and direct mappings\n\tnilfs2: use a more common logging style\n\tnilfs2: prevent kernel bug at submit_bh_wbc()\n\tx86/CPU/AMD: Update the Zenbleed microcode revisions\n\tahci: asm1064: correct count of reported ports\n\tahci: asm1064: asm1166: don\u0027t limit reported ports\n\tdm snapshot: fix lockup in dm_exception_table_exit\n\tcomedi: comedi_test: Prevent timers rescheduling during deletion\n\tnetfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout\n\tnetfilter: nf_tables: disallow anonymous set with timeout flag\n\tnetfilter: nf_tables: reject constant set with timeout\n\txfrm: Avoid clang fortify warning in copy_to_user_tmpl()\n\tALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform\n\tUSB: usb-storage: Prevent divide-by-0 error in isd200_ata_command\n\tusb: gadget: ncm: Fix handling of zero block length packets\n\tusb: port: Don\u0027t try to peer unused USB ports based on location\n\ttty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled\n\tvt: fix unicode buffer corruption when deleting characters\n\tfs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion\n\tobjtool: is_fentry_call() crashes if call has no destination\n\tobjtool: Add support for intra-function calls\n\tx86/speculation: Support intra-function call validation\n\txen/events: close evtchn after mapping cleanup\n\tprintk: Update @console_may_schedule in console_trylock_spinning()\n\tbtrfs: allocate btrfs_ioctl_defrag_range_args on stack\n\tRevert \"loop: Check for overflow while configuring loop\"\n\tloop: Call loop_config_discard() only after new config is applied\n\tloop: Remove sector_t truncation checks\n\tloop: Factor out setting loop device size\n\tloop: Refactor loop_set_status() size calculation\n\tloop: Factor out configuring loop from status\n\tloop: Check for overflow while configuring loop\n\tloop: loop_set_status_from_info() check before assignment\n\tperf/core: Fix reentry problem in perf_output_read_group()\n\tefivarfs: Request at most 512 bytes for variable names\n\tpowerpc: xor_vmx: Add \u0027-mhard-float\u0027 to CFLAGS\n\tbounds: support non-power-of-two CONFIG_NR_CPUS\n\tvt: fix memory overlapping when deleting chars in the buffer\n\tmm/memory-failure: fix an incorrect use of tail pages\n\tmm/migrate: set swap entry values of THP tail pages properly.\n\twifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes\n\texec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()\n\tmmc: core: Initialize mmc_blk_ioc_data\n\tmmc: core: Avoid negative index with array access\n\tusb: cdc-wdm: close race between read and workqueue\n\tALSA: sh: aica: reorder cleanup operations to avoid UAF bugs\n\tscsi: core: Fix unremoved procfs host directory regression\n\tusb: dwc2: host: Fix remote wakeup from hibernation\n\tusb: dwc2: host: Fix hibernation flow\n\tusb: dwc2: host: Fix ISOC flow in DDMA mode\n\tusb: dwc2: gadget: LPM flow fix\n\tusb: udc: remove warning when queue disabled ep\n\tscsi: qla2xxx: Fix command flush on cable pull\n\tx86/cpu: Enable STIBP on AMD if Automatic IBRS is enabled\n\tscsi: lpfc: Correct size for wqe for memset()\n\tUSB: core: Fix deadlock in usb_deauthorize_interface()\n\tnfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet\n\tixgbe: avoid sleeping allocation in ixgbe_ipsec_vf_add_sa()\n\ttcp: properly terminate timers for kernel sockets\n\tdm integrity: fix out-of-range warning\n\tr8169: fix issue caused by buggy BIOS on certain boards with RTL8168d\n\tx86/cpufeatures: Add new word for scattered features\n\tBluetooth: hci_event: set the conn encrypted before conn establishes\n\tBluetooth: Fix TOCTOU in HCI debugfs implementation\n\tnetfilter: nf_tables: disallow timeout for anonymous sets\n\tnet/rds: fix possible cp null dereference\n\tvfio/pci: Disable auto-enable of exclusive INTx IRQ\n\tvfio/pci: Lock external INTx masking ops\n\tvfio: Introduce interface to flush virqfd inject workqueue\n\tvfio/pci: Create persistent INTx handler\n\tvfio/platform: Create persistent IRQ handlers\n\tRevert \"x86/mm/ident_map: Use gbpages only where full GB page should be mapped.\"\n\tmm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations\n\tnetfilter: nf_tables: flush pending destroy work before exit_net release\n\tnetfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()\n\tbpf, sockmap: Prevent lock inversion deadlock in map delete elem\n\tnet/sched: act_skbmod: prevent kernel-infoleak\n\tnet: stmmac: fix rx queue priority assignment\n\tselftests: reuseaddr_conflict: add missing new line at the end of the output\n\tipv6: Fix infinite recursion in fib6_dump_done().\n\ti40e: fix vf may be used uninitialized in this function warning\n\tstaging: mmal-vchiq: Allocate and free components as required\n\tstaging: mmal-vchiq: Fix client_component for 64 bit kernel\n\tstaging: vc04_services: changen strncpy() to strscpy_pad()\n\tstaging: vc04_services: fix information leak in create_component()\n\tfs: add a vfs_fchown helper\n\tfs: add a vfs_fchmod helper\n\tinitramfs: switch initramfs unpacking to struct file based APIs\n\tinit: open /initrd.image with O_LARGEFILE\n\terspan: Add type I version 0 support.\n\terspan: make sure erspan_base_hdr is present in skb-\u003ehead\n\tnet: ravb: Always process TX descriptor ring\n\tASoC: ops: Fix wraparound for mask in snd_soc_get_volsw\n\tata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit\n\tscsi: mylex: Fix sysfs buffer lengths\n\tata: sata_mv: Fix PCI device ID table declaration compilation warning\n\tALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone\n\tx86/mce: Make sure to grab mce_sysfs_mutex in set_bank()\n\ts390/entry: align system call table on 8 bytes\n\twifi: ath9k: fix LNA selection in ath_ant_try_scan()\n\tVMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()\n\tpanic: Flush kernel log buffer at the end\n\tarm64: dts: rockchip: fix rk3328 hdmi ports node\n\tarm64: dts: rockchip: fix rk3399 hdmi ports node\n\tionic: set adminq irq affinity\n\ttools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()\n\tbtrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()\n\tbtrfs: export: handle invalid inode or root reference in btrfs_get_parent()\n\tbtrfs: send: handle path ref underflow in header iterate_inode_ref()\n\tBluetooth: btintel: Fix null ptr deref in btintel_read_version\n\tInput: synaptics-rmi4 - fail probing if memory allocation for \"phys\" fails\n\tsysv: don\u0027t call sb_bread() with pointers_lock held\n\tscsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()\n\tisofs: handle CDs with bad root inode but good Joliet root directory\n\tmedia: sta2x11: fix irq handler cast\n\tdrm/amd/display: Fix nanosec stat overflow\n\tSUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int\n\tRevert \"ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default\"\n\tblock: prevent division by zero in blk_rq_stat_sum()\n\tInput: allocate keycode for Display refresh rate toggle\n\tktest: force $buildonly \u003d 1 for \u0027make_warnings_file\u0027 test type\n\ttools: iio: replace seekdir() in iio_generic_buffer\n\tusb: typec: tcpci: add generic tcpci fallback compatible\n\tusb: sl811-hcd: only defined function checkdone if QUIRK2 is defined\n\tfbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2\n\tfbmon: prevent division by zero in fb_videomode_from_videomode()\n\tnetfilter: nf_tables: reject new basechain after table flag update\n\tnetfilter: nf_tables: release batch on table validation from abort path\n\tnetfilter: nf_tables: release mutex after nft_gc_seq_end from abort path\n\tnetfilter: nf_tables: discard table flag update with pending basechain deletion\n\ttty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc\n\tdrm/vkms: call drm_atomic_helper_shutdown before drm_dev_put()\n\tvirtio: reenable config if freezing device failed\n\tx86/mm/pat: fix VM_PAT handling in COW mappings\n\tdrm/i915/gt: Reset queue_priority_hint on parking\n\tx86/alternative: Don\u0027t call text_poke() in lazy TLB mode\n\tBluetooth: btintel: Fixe build regression\n\tVMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()\n\terspan: Check IFLA_GRE_ERSPAN_VER is set.\n\tip_gre: do not report erspan version on GRE interface\n\tfirmware: meson_sm: fix to avoid potential NULL pointer dereference\n\tLinux 5.4.274\n\nChange-Id: I759c99412f0d27d194308663aa08ab3682a1c43c\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@google.com\u003e\n" }, { "commit": "960240ce53d6a9049f0bd7fdd0e4bab4fe127d9e", "tree": "71a68ca2f08cfa0e442440ddb7b2475fcdd1eb6f", "parents": [ "f509fa9b096f1223fb106e3bd63d236b7a8b6259", "24489321d0cd5339f9c2da01eb8bf2bccbac7956" ], "author": { "name": "Greg Kroah-Hartman", "email": "gregkh@google.com", "time": "Fri Apr 05 12:38:34 2024 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@google.com", "time": "Tue Apr 16 15:17:08 2024 +0000" }, "message": "Merge 5.4.273 into android11-5.4-lts\n\nChanges in 5.4.273\n\tio_uring/unix: drop usage of io_uring socket\n\tio_uring: drop any code related to SCM_RIGHTS\n\tselftests: tls: use exact comparison in recv_partial\n\tASoC: rt5645: Make LattePanda board DMI match more precise\n\tx86/xen: Add some null pointer checking to smp.c\n\tMIPS: Clear Cause.BD in instruction_pointer_set\n\tHID: multitouch: Add required quirk for Synaptics 0xcddc device\n\tRDMA/mlx5: Relax DEVX access upon modify commands\n\tnet/iucv: fix the allocation size of iucv_path_table array\n\tparisc/ftrace: add missing CONFIG_DYNAMIC_FTRACE check\n\tblock: sed-opal: handle empty atoms when parsing response\n\tdm-verity, dm-crypt: align \"struct bvec_iter\" correctly\n\tbtrfs: fix data race at btrfs_use_block_rsv() when accessing block reserve\n\tscsi: mpt3sas: Prevent sending diag_reset when the controller is ready\n\tBluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security\n\tfirewire: core: use long bus reset on gap count error\n\tASoC: Intel: bytcr_rt5640: Add an extra entry for the Chuwi Vi8 tablet\n\tInput: gpio_keys_polled - suppress deferred probe error for gpio\n\tASoC: wm8962: Enable oscillator if selecting WM8962_FLL_OSC\n\tASoC: wm8962: Enable both SPKOUTR_ENA and SPKOUTL_ENA in mono mode\n\tASoC: wm8962: Fix up incorrect error message in wm8962_set_fll\n\tdo_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak\n\tnbd: null check for nla_nest_start\n\tfs/select: rework stack allocation hack for clang\n\taoe: fix the potential use-after-free problem in aoecmd_cfg_pkts\n\ttimekeeping: Fix cross-timestamp interpolation on counter wrap\n\ttimekeeping: Fix cross-timestamp interpolation corner case decision\n\ttimekeeping: Fix cross-timestamp interpolation for non-x86\n\twifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()\n\tb43: dma: Fix use true/false for bool type variable\n\twifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled\n\twifi: b43: Stop/wake correct queue in PIO Tx path when QoS is disabled\n\tb43: main: Fix use true/false for bool type\n\twifi: b43: Stop correct queue in DMA worker when QoS is disabled\n\twifi: b43: Disable QoS for bcm4331\n\twifi: wilc1000: fix declarations ordering\n\twifi: wilc1000: fix RCU usage in connect path\n\twifi: mwifiex: debugfs: Drop unnecessary error check for debugfs_create_dir()\n\tsock_diag: annotate data-races around sock_diag_handlers[family]\n\taf_unix: Annotate data-race of gc_in_progress in wait_for_unix_gc().\n\tnet: blackhole_dev: fix build warning for ethh set but not used\n\twifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()\n\tarm64: dts: mediatek: mt7622: add missing \"device_type\" to memory nodes\n\tbpf: Add typecast to bpf helpers to help BTF generation\n\tbpf: Factor out bpf_spin_lock into helpers.\n\tbpf: Mark bpf_spin_{lock,unlock}() helpers with notrace correctly\n\tarm64: dts: qcom: db820c: Move non-soc entries out of /soc\n\tarm64: dts: qcom: msm8996: Use node references in db820c\n\tarm64: dts: qcom: msm8996: Move regulator consumers to db820c\n\tarm64: dts: qcom: msm8996: Pad addresses\n\tACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()\n\tbus: tegra-aconnect: Update dependency to ARCH_TEGRA\n\tiommu/amd: Mark interrupt as managed\n\twifi: brcmsmac: avoid function pointer casts\n\tnet: ena: cosmetic: fix line break issues\n\tnet: ena: Remove ena_select_queue\n\tARM: dts: arm: realview: Fix development chip ROM compatible value\n\tARM: dts: imx6dl-yapp4: Move phy reset into switch node\n\tARM: dts: imx6dl-yapp4: Fix typo in the QCA switch register address\n\tARM: dts: imx6dl-yapp4: Move the internal switch PHYs under the switch node\n\tACPI: scan: Fix device check notification handling\n\tx86, relocs: Ignore relocations in .notes section\n\tSUNRPC: fix some memleaks in gssx_dec_option_array\n\tmmc: wmt-sdmmc: remove an incorrect release_mem_region() call in the .remove function\n\tigb: move PEROUT and EXTTS isr logic to separate functions\n\tigb: Fix missing time sync events\n\tBluetooth: Remove superfluous call to hci_conn_check_pending()\n\tBluetooth: hci_core: Fix possible buffer overflow\n\tsr9800: Add check for usbnet_get_endpoints\n\tbpf: Fix hashtab overflow check on 32-bit arches\n\tbpf: Fix stackmap overflow check on 32-bit arches\n\tipv6: fib6_rules: flush route cache when rule is changed\n\tnet: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()\n\tnet: hns3: fix port duplex configure error in IMP reset\n\ttcp: fix incorrect parameter validation in the do_tcp_getsockopt() function\n\tl2tp: fix incorrect parameter validation in the pppol2tp_getsockopt() function\n\tudp: fix incorrect parameter validation in the udp_lib_getsockopt() function\n\tnet: kcm: fix incorrect parameter validation in the kcm_getsockopt) function\n\tnet/x25: fix incorrect parameter validation in the x25_getsockopt() function\n\tnfp: flower: handle acti_netdevs allocation failure\n\tdm raid: fix false positive for requeue needed during reshape\n\tdm: call the resume method on internal suspend\n\tdrm/tegra: dsi: Add missing check for of_find_device_by_node\n\tgpu: host1x: mipi: Update tegra_mipi_request() to be node based\n\tdrm/tegra: dsi: Make use of the helper function dev_err_probe()\n\tdrm/tegra: dsi: Fix some error handling paths in tegra_dsi_probe()\n\tdrm/tegra: dsi: Fix missing pm_runtime_disable() in the error handling path of tegra_dsi_probe()\n\tdrm/tegra: output: Fix missing i2c_put_adapter() in the error handling paths of tegra_output_probe()\n\tdrm/rockchip: inno_hdmi: Fix video timing\n\tdrm: Don\u0027t treat 0 as -1 in drm_fixp2int_ceil\n\tdrm/rockchip: lvds: do not overwrite error code\n\tdmaengine: tegra210-adma: Update dependency to ARCH_TEGRA\n\tmedia: tc358743: register v4l2 async device only after successful setup\n\tPCI/DPC: Print all TLP Prefixes, not just the first\n\tperf record: Fix possible incorrect free in record__switch_output()\n\tdrm/amd/display: Fix potential NULL pointer dereferences in \u0027dcn10_set_output_transfer_func()\u0027\n\tperf evsel: Fix duplicate initialization of data-\u003eid in evsel__parse_sample()\n\tmedia: em28xx: annotate unchecked call to media_device_register()\n\tmedia: v4l2-tpg: fix some memleaks in tpg_alloc\n\tmedia: v4l2-mem2mem: fix a memleak in v4l2_m2m_register_entity\n\tmedia: edia: dvbdev: fix a use-after-free\n\tclk: qcom: reset: Allow specifying custom reset delay\n\tclk: qcom: reset: support resetting multiple bits\n\tclk: qcom: reset: Commonize the de/assert functions\n\tclk: qcom: reset: Ensure write completion on reset de/assertion\n\tquota: simplify drop_dquot_ref()\n\tquota: Fix potential NULL pointer dereference\n\tquota: Fix rcu annotations of inode dquot pointers\n\tPCI: switchtec: Fix an error handling path in switchtec_pci_probe()\n\tperf thread_map: Free strlist on normal path in thread_map__new_by_tid_str()\n\tdrm/radeon/ni: Fix wrong firmware size logging in ni_init_microcode()\n\tALSA: seq: fix function cast warnings\n\tperf stat: Avoid metric-only segv\n\tmedia: imx: csc/scaler: fix v4l2_ctrl_handler memory leak\n\tmedia: go7007: add check of return value of go7007_read_addr()\n\tmedia: pvrusb2: remove redundant NULL check\n\tmedia: pvrusb2: fix pvr2_stream_callback casts\n\tclk: qcom: dispcc-sdm845: Adjust internal GDSC wait times\n\tdrm/mediatek: dsi: Fix DSI RGB666 formats and definitions\n\tPCI: Mark 3ware-9650SE Root Port Extended Tags as broken\n\tclk: hisilicon: hi3519: Release the correct number of gates in hi3519_clk_unregister()\n\tdrm/tegra: put drm_gem_object ref on error in tegra_fb_create\n\tmfd: syscon: Call of_node_put() only when of_parse_phandle() takes a ref\n\tmfd: altera-sysmgr: Call of_node_put() only when of_parse_phandle() takes a ref\n\tcrypto: arm/sha - fix function cast warnings\n\tmtd: maps: physmap-core: fix flash size larger than 32-bit\n\tmtd: rawnand: lpc32xx_mlc: fix irq handler prototype\n\tASoC: meson: axg-tdm-interface: fix mclk setup without mclk-fs\n\tdrm/amdgpu: Fix missing break in ATOM_ARG_IMM Case of atom_get_src_int()\n\tmedia: pvrusb2: fix uaf in pvr2_context_set_notify\n\tmedia: dvb-frontends: avoid stack overflow warnings with clang\n\tmedia: go7007: fix a memleak in go7007_load_encoder\n\tmedia: v4l2-core: correctly validate video and metadata ioctls\n\tmedia: rename VFL_TYPE_GRABBER to _VIDEO\n\tmedia: media/pci: rename VFL_TYPE_GRABBER to _VIDEO\n\tmedia: ttpci: fix two memleaks in budget_av_attach\n\tdrm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip\n\tpowerpc/hv-gpci: Fix the H_GET_PERF_COUNTER_INFO hcall return value checks\n\tdrm/msm/dpu: add division of drm_display_mode\u0027s hskew parameter\n\tpowerpc/embedded6xx: Fix no previous prototype for avr_uart_send() etc.\n\tbacklight: lm3630a: Initialize backlight_properties on init\n\tbacklight: lm3630a: Don\u0027t set bl-\u003eprops.brightness in get_brightness\n\tbacklight: da9052: Fully initialize backlight_properties during probe\n\tbacklight: lm3639: Fully initialize backlight_properties during probe\n\tbacklight: lp8788: Fully initialize backlight_properties during probe\n\tsparc32: Fix section mismatch in leon_pci_grpci\n\tclk: Fix clk_core_get NULL dereference\n\tALSA: usb-audio: Stop parsing channels bits when all channels are found.\n\tscsi: csiostor: Avoid function pointer casts\n\tRDMA/device: Fix a race between mad_client and cm_client init\n\tscsi: bfa: Fix function pointer type mismatch for hcb_qe-\u003ecbfn\n\tnet: sunrpc: Fix an off by one in rpc_sockaddr2uaddr()\n\twatchdog: stm32_iwdg: initialize default timeout\n\tNFS: Fix an off by one in root_nfs_cat()\n\tafs: Revert \"afs: Hide silly-rename files from userspace\"\n\ttty: vt: fix 20 vs 0x20 typo in EScsiignore\n\tserial: max310x: fix syntax error in IRQ error message\n\ttty: serial: samsung: fix tx_empty() to return TIOCSER_TEMT\n\tkconfig: fix infinite loop when expanding a macro at the end of file\n\trtc: mt6397: select IRQ_DOMAIN instead of depending on it\n\tserial: 8250_exar: Don\u0027t remove GPIO device on suspend\n\tstaging: greybus: fix get_channel_from_mode() failure path\n\tusb: gadget: net2272: Use irqflags in the call to net2272_probe_fin\n\tocteontx2-af: Use matching wake_up API variant in CGX command interface\n\ts390/vtime: fix average steal time calculation\n\thsr: Fix uninit-value access in hsr_get_node()\n\tpacket: annotate data-races around ignore_outgoing\n\trds: introduce acquire/release ordering in acquire/release_in_xmit()\n\thsr: Handle failures in module init\n\tnet/bnx2x: Prevent access to a freed page in page_pool\n\tocteontx2-af: Use separate handlers for interrupts\n\tARM: dts: sun8i-h2-plus-bananapi-m2-zero: add regulator nodes vcc-dram and vcc1v2\n\tnetfilter: nf_tables: do not compare internal table flags on updates\n\trcu: add a helper to report consolidated flavor QS\n\tbpf: report RCU QS in cpumap kthread\n\tspi: spi-mt65xx: Fix NULL pointer access in interrupt handler\n\tregmap: Add missing map-\u003ebus check\n\tLinux 5.4.273\n\nChange-Id: I7b54c53c62f7ae93eddbd8d677f0d5de9547073e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@google.com\u003e\n" }, { "commit": "b046ab16424e961a33230d598b93a1172f0ed661", "tree": "b345dfaf6009abc18332c99ff32fd53e5afbd6c0", "parents": [ "31722ed2c3ca7a9b913111d01295d993baff8790" ], "author": { "name": "Nathan Chancellor", "email": "nathan@kernel.org", "time": "Tue Mar 05 15:12:47 2024 -0700" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Sat Apr 13 12:51:26 2024 +0200" }, "message": "kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W\u003d1\n\n[ Upstream commit 75b5ab134bb5f657ef7979a59106dce0657e8d87 ]\n\nClang enables -Wenum-enum-conversion and -Wenum-compare-conditional\nunder -Wenum-conversion. A recent change in Clang strengthened these\nwarnings and they appear frequently in common builds, primarily due to\nseveral instances in common headers but there are quite a few drivers\nthat have individual instances as well.\n\n include/linux/vmstat.h:508:43: warning: arithmetic between different enumeration types (\u0027enum zone_stat_item\u0027 and \u0027enum numa_stat_item\u0027) [-Wenum-enum-conversion]\n 508 | return vmstat_text[NR_VM_ZONE_STAT_ITEMS +\n | ~~~~~~~~~~~~~~~~~~~~~ ^\n 509 | item];\n | ~~~~\n\n drivers/net/wireless/intel/iwlwifi/mvm/mac-ctxt.c:955:24: warning: conditional expression between different enumeration types (\u0027enum iwl_mac_beacon_flags\u0027 and \u0027enum iwl_mac_beacon_flags_v1\u0027) [-Wenum-compare-conditional]\n 955 | flags |\u003d is_new_rate ? IWL_MAC_BEACON_CCK\n | ^ ~~~~~~~~~~~~~~~~~~\n 956 | : IWL_MAC_BEACON_CCK_V1;\n | ~~~~~~~~~~~~~~~~~~~~~\n drivers/net/wireless/intel/iwlwifi/mvm/mac-ctxt.c:1120:21: warning: conditional expression between different enumeration types (\u0027enum iwl_mac_beacon_flags\u0027 and \u0027enum iwl_mac_beacon_flags_v1\u0027) [-Wenum-compare-conditional]\n 1120 | 0) \u003e 10 ?\n | ^\n 1121 | IWL_MAC_BEACON_FILS :\n | ~~~~~~~~~~~~~~~~~~~\n 1122 | IWL_MAC_BEACON_FILS_V1;\n | ~~~~~~~~~~~~~~~~~~~~~~\n\nDoing arithmetic between or returning two different types of enums could\nbe a bug, so each of the instance of the warning needs to be evaluated.\nUnfortunately, as mentioned above, there are many instances of this\nwarning in many different configurations, which can break the build when\nCONFIG_WERROR is enabled.\n\nTo avoid introducing new instances of the warnings while cleaning up the\ndisruption for the majority of users, disable these warnings for the\ndefault build while leaving them on for W\u003d1 builds.\n\nCc: stable@vger.kernel.org\nCloses: https://github.com/ClangBuiltLinux/linux/issues/2002\nLink: https://github.com/llvm/llvm-project/commit/8c2ae42b3e1c6aa7c18f873edcebff7c0b45a37e\nAcked-by: Yonghong Song \u003cyonghong.song@linux.dev\u003e\nSigned-off-by: Nathan Chancellor \u003cnathan@kernel.org\u003e\nAcked-by: Arnd Bergmann \u003carnd@arndb.de\u003e\nSigned-off-by: Masahiro Yamada \u003cmasahiroy@kernel.org\u003e\nSigned-off-by: Sasha Levin \u003csashal@kernel.org\u003e\n" }, { "commit": "ca6279d1a1ee524a521337e96a841c7630b7090b", "tree": "37f3b5b3e401fe2b9c59aab180c36f79f14cb497", "parents": [ "a8cc354a8155f6205d27ccedccba4e51d06e572f" ], "author": { "name": "Masahiro Yamada", "email": "masahiroy@kernel.org", "time": "Sat Feb 03 00:57:59 2024 +0900" }, "committer": { "name": "Sasha Levin", "email": "sashal@kernel.org", "time": "Tue Mar 26 18:22:24 2024 -0400" }, "message": "kconfig: fix infinite loop when expanding a macro at the end of file\n\n[ Upstream commit af8bbce92044dc58e4cc039ab94ee5d470a621f5 ]\n\nA macro placed at the end of a file with no newline causes an infinite\nloop.\n\n[Test Kconfig]\n $(info,hello)\n \\ No newline at end of file\n\nI realized that flex-provided input() returns 0 instead of EOF when it\nreaches the end of a file.\n\nFixes: 104daea149c4 (\"kconfig: reference environment variables directly and remove \u0027option env\u003d\u0027\")\nSigned-off-by: Masahiro Yamada \u003cmasahiroy@kernel.org\u003e\nSigned-off-by: Sasha Levin \u003csashal@kernel.org\u003e\n" }, { "commit": "1ac7c39f24a38752eef16a4d9ba4fe48a89e58f8", "tree": "30565588c627d4806061253b87c18b2f48144aeb", "parents": [ "3298a76a41b3a5e33ec46bf1e400882c8bf8a7e3", "e133c1ee6d7271007fdba3dbe78818afd88943f9" ], "author": { "name": "Greg Kroah-Hartman", "email": "gregkh@google.com", "time": "Tue Mar 05 14:53:04 2024 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@google.com", "time": "Tue Mar 05 14:53:04 2024 +0000" }, "message": "Merge 5.4.270 into android11-5.4-lts\n\nChanges in 5.4.270\n\tKVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()\n\tKVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler\n\tnet/sched: Retire CBQ qdisc\n\tnet/sched: Retire ATM qdisc\n\tnet/sched: Retire dsmark qdisc\n\tsched/rt: sysctl_sched_rr_timeslice show default timeslice after reset\n\tmemcg: add refcnt for pcpu stock to avoid UAF problem in drain_all_stock()\n\tnilfs2: replace WARN_ONs for invalid DAT metadata block requests\n\tuserfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb\n\tsched/rt: Fix sysctl_sched_rr_timeslice intial value\n\tsched/rt: Disallow writing invalid values to sched_rt_period_us\n\tscsi: target: core: Add TMF to tmr_list handling\n\tdmaengine: shdma: increase size of \u0027dev_id\u0027\n\tdmaengine: fsl-qdma: increase size of \u0027irq_name\u0027\n\twifi: cfg80211: fix missing interfaces when dumping\n\twifi: mac80211: fix race condition on enabling fast-xmit\n\tfbdev: savage: Error out if pixclock equals zero\n\tfbdev: sis: Error out if pixclock equals zero\n\tahci: asm1166: correct count of reported ports\n\tahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers\n\text4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()\n\text4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()\n\tregulator: pwm-regulator: Add validity checks in continuous .get_voltage\n\tnvmet-tcp: fix nvme tcp ida memory leak\n\tASoC: sunxi: sun4i-spdif: Add support for Allwinner H616\n\tnetfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new\n\tnvmet-fc: abort command when there is no binding\n\thwmon: (coretemp) Enlarge per package core count limit\n\tscsi: lpfc: Use unsigned type for num_sge\n\tfirewire: core: send bus reset promptly on gap count error\n\tvirtio-blk: Ensure no requests in virtqueues before deleting vqs.\n\ts390/qeth: Fix potential loss of L3-IP@ in case of network issues\n\tpmdomain: renesas: r8a77980-sysc: CR7 must be always on\n\ttcp: factor out __tcp_close() helper\n\ttcp: return EPOLLOUT from tcp_poll only when notsent_bytes is half the limit\n\ttcp: add annotations around sk-\u003esk_shutdown accesses\n\tpinctrl: pinctrl-rockchip: Fix a bunch of kerneldoc misdemeanours\n\tpinctrl: rockchip: Fix refcount leak in rockchip_pinctrl_parse_groups\n\tspi: mt7621: Fix an error message in mt7621_spi_probe()\n\tnet: bridge: clear bridge\u0027s private skb space on xmit\n\tselftests/bpf: Avoid running unprivileged tests with alignment requirements\n\tALSA: hda/realtek - Enable micmute LED on and HP system\n\tRevert \"drm/sun4i: dsi: Change the start delay calculation\"\n\tdrm/amdgpu: Check for valid number of registers to read\n\tx86/alternatives: Disable KASAN in apply_alternatives()\n\tdm-integrity: don\u0027t modify bio\u0027s immutable bio_vec in integrity_metadata()\n\tiomap: Set all uptodate bits for an Uptodate page\n\tdrm/amdgpu: Fix type of second parameter in trans_msg() callback\n\tarm64: dts: qcom: msm8916: Fix typo in pronto remoteproc node\n\tPCI: tegra: Fix reporting GPIO error value\n\tPCI: tegra: Fix OF node reference leak\n\tIB/hfi1: Fix sdma.h tx-\u003enum_descs off-by-one error\n\tdm-crypt: don\u0027t modify the data when using authenticated encryption\n\tgtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()\n\tPCI/MSI: Prevent MSI hardware interrupt number truncation\n\tl2tp: pass correct message length to ip6_append_data\n\tARM: ep93xx: Add terminator to gpiod_lookup_table\n\tusb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()\n\tusb: cdns3: fix memory double free when handle zero packet\n\tusb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs\n\tusb: roles: don\u0027t get/set_role() when usb_role_switch is unregistered\n\tIB/hfi1: Fix a memleak in init_credit_return\n\tRDMA/bnxt_re: Return error for SRQ resize\n\tRDMA/srpt: Make debug output more detailed\n\tRDMA/srpt: fix function pointer cast warnings\n\tscripts/bpf: teach bpf_helpers_doc.py to dump BPF helper definitions\n\tbpf, scripts: Correct GPL license name\n\tscsi: jazz_esp: Only build if SCSI core is builtin\n\tnouveau: fix function cast warnings\n\tipv4: properly combine dev_base_seq and ipv4.dev_addr_genid\n\tipv6: properly combine dev_base_seq and ipv6.dev_addr_genid\n\tafs: Increase buffer size in afs_update_volume_status()\n\tipv6: sr: fix possible use-after-free and null-ptr-deref\n\tpacket: move from strlcpy with unused retval to strscpy\n\ts390: use the correct count for __iowrite64_copy()\n\ttls: rx: jump to a more appropriate label\n\ttls: rx: drop pointless else after goto\n\ttls: stop recv() if initial process_rx_list gave us non-DATA\n\tnetfilter: nf_tables: set dormant flag on hook register failure\n\tdrm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3\n\tdrm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set\n\tfs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio\n\tscripts/bpf: Fix xdp_md forward declaration typo\n\tLinux 5.4.270\n\nChange-Id: I49731348e81a5c436a5603a60204bfa98450d217\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@google.com\u003e\n" }, { "commit": "7a54338219f003fa1187800b14754d536c7db694", "tree": "fb0e4879ac05688414afd57922736161f359037d", "parents": [ "b4eea7a05ee0ab5ab0514421e6ba8c5d249cf942" ], "author": { "name": "Andrii Nakryiko", "email": "andriin@fb.com", "time": "Wed Oct 09 21:25:34 2019 -0700" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Fri Mar 01 13:13:38 2024 +0100" }, "message": "scripts/bpf: Fix xdp_md forward declaration typo\n\ncommit e0b68fb186b251374adbd870f99b1ecea236e770 upstream.\n\nFix typo in struct xpd_md, generated from bpf_helpers_doc.py, which is\ncausing compilation warnings for programs using bpf_helpers.h\n\nFixes: 7a387bed47f7 (\"scripts/bpf: teach bpf_helpers_doc.py to dump BPF helper definitions\")\nSigned-off-by: Andrii Nakryiko \u003candriin@fb.com\u003e\nSigned-off-by: Alexei Starovoitov \u003cast@kernel.org\u003e\nLink: https://lore.kernel.org/bpf/20191010042534.290562-1-andriin@fb.com\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "dd90af71fa7af22ef53e1cddd765648f7b7e8f6b", "tree": "34ae10bcf9f8c3a1cec0eae3807ff94035c6f02c", "parents": [ "1f18b5bb4511669f4c63794b22476abe9224fe42" ], "author": { "name": "Gianmarco Lusvardi", "email": "glusvardi@posteo.net", "time": "Tue Feb 13 23:05:46 2024 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Fri Mar 01 13:13:37 2024 +0100" }, "message": "bpf, scripts: Correct GPL license name\n\n[ Upstream commit e37243b65d528a8a9f8b9a57a43885f8e8dfc15c ]\n\nThe bpf_doc script refers to the GPL as the \"GNU Privacy License\".\nI strongly suspect that the author wanted to refer to the GNU General\nPublic License, under which the Linux kernel is released, as, to the\nbest of my knowledge, there is no license named \"GNU Privacy License\".\nThis patch corrects the license name in the script accordingly.\n\nFixes: 56a092c89505 (\"bpf: add script and prepare bpf.h for new helpers documentation\")\nSigned-off-by: Gianmarco Lusvardi \u003cglusvardi@posteo.net\u003e\nSigned-off-by: Daniel Borkmann \u003cdaniel@iogearbox.net\u003e\nReviewed-by: Quentin Monnet \u003cquentin@isovalent.com\u003e\nLink: https://lore.kernel.org/bpf/20240213230544.930018-3-glusvardi@posteo.net\nSigned-off-by: Sasha Levin \u003csashal@kernel.org\u003e\n" }, { "commit": "1f18b5bb4511669f4c63794b22476abe9224fe42", "tree": "3ab8fc961cf7463fb8bb1742ace1485f8a24ce9d", "parents": [ "48ebca0a117b251bbcd696b040c663162360335f" ], "author": { "name": "Andrii Nakryiko", "email": "andriin@fb.com", "time": "Sun Oct 06 20:07:37 2019 -0700" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Fri Mar 01 13:13:37 2024 +0100" }, "message": "scripts/bpf: teach bpf_helpers_doc.py to dump BPF helper definitions\n\n[ Upstream commit 7a387bed47f7e80e257d966cd64a3e92a63e26a1 ]\n\nEnhance scripts/bpf_helpers_doc.py to emit C header with BPF helper\ndefinitions (to be included from libbpf\u0027s bpf_helpers.h).\n\nSigned-off-by: Andrii Nakryiko \u003candriin@fb.com\u003e\nSigned-off-by: Alexei Starovoitov \u003cast@kernel.org\u003e\nStable-dep-of: e37243b65d52 (\"bpf, scripts: Correct GPL license name\")\nSigned-off-by: Sasha Levin \u003csashal@kernel.org\u003e\n" }, { "commit": "478988c2b45633ad04356cb23f2295802412ad54", "tree": "05ad1af4c435983d9d51513a6c9544870c0cb53b", "parents": [ "58e401790ae9f1bbaab96eda7d2e21fb4b020247", "1ffd957fcf66db0bef7d2aee180bcde5d14d02ee" ], "author": { "name": "kamasali Satyanarayan", "email": "quic_kamasali@quicinc.com", "time": "Wed Feb 28 13:19:39 2024 +0530" }, "committer": { "name": "kamasali Satyanarayan", "email": "quic_kamasali@quicinc.com", "time": "Thu Feb 29 15:10:56 2024 +0530" }, "message": "Merge android11-5.4.265+ (a34cc1d) into msm-5.4\n\n* remotes/origin/tmp-a34cc1d:\n Revert LLCC changes\n Reapply \"perf: Disallow mis-matched inherited group reads\"\n UPSTREAM: ath10k: Get rid of \"per_ce_irq\" hw param\n UPSTREAM: ath10k: Keep track of which interrupts fired, don\u0027t poll them\n UPSTREAM: ath10k: Add interrupt summary based CE processing\n UPSTREAM: ath10k: Wait until copy complete is actually done before completing\n FROMGIT: clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd\n ANDROID: GKI: fix crc issue in include/net/addrconf.h\n Revert \"cred: switch to using atomic_long_t\"\n Linux 5.4.265\n powerpc/ftrace: Fix stack teardown in ftrace_no_trace\n powerpc/ftrace: Create a dummy stackframe to fix stack unwind\n mmc: block: Be sure to wait while busy in CQE error recovery\n ring-buffer: Fix memory leak of free page\n team: Fix use-after-free when an option instance allocation fails\n arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify\n ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS\n soundwire: stream: fix NULL pointer dereference for multi_link\n perf: Fix perf_event_validate_size() lockdep splat\n HID: hid-asus: add const to read-only outgoing usb buffer\n net: usb: qmi_wwan: claim interface 4 for ZTE MF290\n asm-generic: qspinlock: fix queued_spin_value_unlocked() implementation\n HID: multitouch: Add quirk for HONOR GLO-GXXX touchpad\n HID: hid-asus: reset the backlight brightness level on resume\n HID: add ALWAYS_POLL quirk for Apple kb\n platform/x86: intel_telemetry: Fix kernel doc descriptions\n bcache: avoid NULL checking to c-\u003eroot in run_cache_set()\n bcache: add code comments for bch_btree_node_get() and __bch_btree_node_alloc()\n bcache: avoid oversize memory allocation by small stripe_size\n blk-throttle: fix lockdep warning of \"cgroup_mutex or RCU read lock required!\"\n usb: aqc111: check packet for fixup for true limit\n Revert \"PCI: acpiphp: Reassign resources on bridge if necessary\"\n ALSA: hda/hdmi: add force-connect quirks for ASUSTeK Z170 variants\n cred: switch to using atomic_long_t\n appletalk: Fix Use-After-Free in atalk_ioctl\n net: stmmac: Handle disabled MDIO busses from devicetree\n net: stmmac: use dev_err_probe() for reporting mdio bus registration failure\n vsock/virtio: Fix unsigned integer wrap around in virtio_transport_has_space()\n sign-file: Fix incorrect return values check\n net: Remove acked SYN flag from packet in the transmit queue correctly\n qed: Fix a potential use-after-free in qed_cxt_tables_alloc\n net/rose: Fix Use-After-Free in rose_ioctl\n atm: Fix Use-After-Free in do_vcc_ioctl\n atm: solos-pci: Fix potential deadlock on \u0026tx_queue_lock\n atm: solos-pci: Fix potential deadlock on \u0026cli_queue_lock\n qca_spi: Fix reset behavior\n qca_debug: Fix ethtool -G iface tx behavior\n qca_debug: Prevent crash on TX ring changes\n net: ipv6: support reporting otherwise unknown prefix flags in RTM_NEWPREFIX\n afs: Fix refcount underflow from error handling race\n Revert \"psample: Require \u0027CAP_NET_ADMIN\u0027 when joining \"packets\" group\"\n Revert \"mmc: core: add helpers mmc_regulator_enable/disable_vqmmc\"\n Revert \"mmc: sdhci-sprd: Fix vqmmc not shutting down after the card was pulled\"\n Revert \"genetlink: add CAP_NET_ADMIN test for multicast bind\"\n Revert \"drop_monitor: Require \u0027CAP_SYS_ADMIN\u0027 when joining \"events\" group\"\n Revert \"perf/core: Add a new read format to get a number of lost samples\"\n Revert \"perf: Fix perf_event_validate_size()\"\n Revert \"hrtimers: Push pending hrtimers away from outgoing CPU earlier\"\n Linux 5.4.264\n devcoredump: Send uevent once devcd is ready\n devcoredump : Serialize devcd_del work\n smb: client: fix potential NULL deref in parse_dfs_referrals()\n cifs: Fix non-availability of dedup breaking generic/304\n Revert \"btrfs: add dmesg output for first mount and last unmount of a filesystem\"\n tools headers UAPI: Sync linux/perf_event.h with the kernel sources\n drop_monitor: Require \u0027CAP_SYS_ADMIN\u0027 when joining \"events\" group\n psample: Require \u0027CAP_NET_ADMIN\u0027 when joining \"packets\" group\n genetlink: add CAP_NET_ADMIN test for multicast bind\n netlink: don\u0027t call -\u003enetlink_bind with table lock held\n io_uring/af_unix: disable sending io_uring over sockets\n nilfs2: fix missing error check for sb_set_blocksize call\n KVM: s390/mm: Properly reset no-dat\n x86/CPU/AMD: Check vendor in the AMD microcode callback\n serial: 8250_omap: Add earlycon support for the AM654 UART controller\n serial: sc16is7xx: address RX timeout interrupt errata\n ARM: PL011: Fix DMA support\n usb: typec: class: fix typec_altmode_put_partner to put plugs\n parport: Add support for Brainboxes IX/UC/PX parallel cards\n usb: gadget: f_hid: fix report descriptor allocation\n mmc: sdhci-sprd: Fix vqmmc not shutting down after the card was pulled\n mmc: core: add helpers mmc_regulator_enable/disable_vqmmc\n gpiolib: sysfs: Fix error handling on failed export\n perf: Fix perf_event_validate_size()\n perf/core: Add a new read format to get a number of lost samples\n arm64: dts: mediatek: mt8173-evb: Fix regulator-fixed node names\n arm64: dts: mediatek: mt7622: fix memory node warning check\n packet: Move reference count in packet_sock to atomic_long_t\n tracing: Fix a possible race when disabling buffered events\n tracing: Fix incomplete locking when disabling buffered events\n tracing: Always update snapshot buffer size\n nilfs2: prevent WARNING in nilfs_sufile_set_segment_usage()\n ALSA: pcm: fix out-of-bounds in snd_pcm_state_names\n ARM: dts: imx7: Declare timers compatible with fsl,imx6dl-gpt\n ARM: dts: imx: make gpt node name generic\n ARM: imx: Check return value of devm_kasprintf in imx_mmdc_perf_init\n scsi: be2iscsi: Fix a memleak in beiscsi_init_wrb_handle()\n tracing: Fix a warning when allocating buffered events fails\n ASoC: wm_adsp: fix memleak in wm_adsp_buffer_populate\n hwmon: (acpi_power_meter) Fix 4.29 MW bug\n RDMA/bnxt_re: Correct module description string\n bpf: sockmap, updating the sg structure should also update curr\n tcp: do not accept ACK of bytes we never sent\n netfilter: xt_owner: Fix for unsafe access of sk-\u003esk_socket\n net: hns: fix fake link up on xge port\n ipv4: ip_gre: Avoid skb_pull() failure in ipgre_xmit()\n arcnet: restoring support for multiple Sohard Arcnet cards\n net: arcnet: com20020 fix error handling\n net: arcnet: Fix RESET flag handling\n hv_netvsc: rndis_filter needs to select NLS\n ipv6: fix potential NULL deref in fib6_add()\n of: dynamic: Fix of_reconfig_get_state_change() return value documentation\n of: Add missing \u0027Return\u0027 section in kerneldoc comments\n of: Fix kerneldoc output formatting\n of: base: Fix some formatting issues and provide missing descriptions\n of/irq: Make of_msi_map_rid() PCI bus agnostic\n of/irq: make of_msi_map_get_device_domain() bus agnostic\n of/iommu: Make of_map_rid() PCI agnostic\n ACPI/IORT: Make iort_msi_map_rid() PCI agnostic\n ACPI/IORT: Make iort_get_device_domain IRQ domain agnostic\n of: base: Add of_get_cpu_state_node() to get idle states for a CPU node\n drm/amdgpu: correct chunk_ptr to a pointer to chunk.\n kconfig: fix memory leak from range properties\n tg3: Increment tx_dropped in tg3_tso_bug()\n tg3: Move the [rt]x_dropped counters to tg3_napi\n netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test\n hrtimers: Push pending hrtimers away from outgoing CPU earlier\n Revert \"HID: core: store the unique system identifier in hid_device\"\n Revert \"HID: fix HID device resource race between HID core and debugging support\"\n Linux 5.4.263\n mmc: block: Retry commands in CQE error recovery\n mmc: core: convert comma to semicolon\n mmc: cqhci: Fix task clearing in CQE error recovery\n mmc: cqhci: Warn of halt or task clear failure\n mmc: cqhci: Increase recovery halt timeout\n cpufreq: imx6q: Don\u0027t disable 792 Mhz OPP unnecessarily\n cpufreq: imx6q: don\u0027t warn for disabling a non-existing frequency\n scsi: qla2xxx: Fix system crash due to bad pointer access\n scsi: qla2xxx: Use scsi_cmd_to_rq() instead of scsi_cmnd.request\n scsi: core: Introduce the scsi_cmd_to_rq() function\n scsi: qla2xxx: Simplify the code for aborting SCSI commands\n ima: detect changes to the backing overlay file\n ovl: skip overlayfs superblocks at global sync\n ima: annotate iint mutex to avoid lockdep false positive warnings\n fbdev: stifb: Make the STI next font pointer a 32-bit signed offset\n mtd: cfi_cmdset_0001: Byte swap OTP info\n mtd: cfi_cmdset_0001: Support the absence of protection registers\n s390/cmma: fix detection of DAT pages\n s390/mm: fix phys vs virt confusion in mark_kernel_pXd() functions family\n smb3: fix touch -h of symlink\n net: ravb: Start TX queues after HW initialization succeeded\n net: ravb: Use pm_runtime_resume_and_get()\n ravb: Fix races between ravb_tx_timeout_work() and net related ops\n net: stmmac: xgmac: Disable FPE MMC interrupts\n ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet\n Input: xpad - add HyperX Clutch Gladiate Support\n btrfs: make error messages more clear when getting a chunk map\n btrfs: send: ensure send_fd is writable\n btrfs: fix off-by-one when checking chunk map includes logical address\n btrfs: add dmesg output for first mount and last unmount of a filesystem\n powerpc: Don\u0027t clobber f0/vs0 during fp|altivec register save\n bcache: revert replacing IS_ERR_OR_NULL with IS_ERR\n dm verity: don\u0027t perform FEC for failed readahead IO\n dm-verity: align struct dm_verity_fec_io properly\n ALSA: hda/realtek: Add supported ALC257 for ChromeOS\n ALSA: hda/realtek: Headset Mic VREF to 100%\n ALSA: hda: Disable power-save on KONTRON SinglePC\n mmc: block: Do not lose cache flush during CQE error recovery\n firewire: core: fix possible memory leak in create_units()\n pinctrl: avoid reload of p state in list iteration\n io_uring: fix off-by one bvec index\n USB: dwc3: qcom: fix wakeup after probe deferral\n USB: dwc3: qcom: fix resource leaks on probe deferral\n usb: dwc3: set the dma max_seg_size\n USB: dwc2: write HCINT with INTMASK applied\n USB: serial: option: don\u0027t claim interface 4 for ZTE MF290\n USB: serial: option: fix FM101R-GL defines\n USB: serial: option: add Fibocom L7xx modules\n bcache: prevent potential division by zero error\n bcache: check return value from btree_node_alloc_replacement()\n dm-delay: fix a race between delay_presuspend and delay_bio\n hv_netvsc: Mark VF as slave before exposing it to user-mode\n hv_netvsc: Fix race of register_netdevice_notifier and VF register\n USB: serial: option: add Luat Air72*U series products\n s390/dasd: protect device queue against concurrent access\n bcache: replace a mistaken IS_ERR() by IS_ERR_OR_NULL() in btree_gc_coalesce()\n ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CVA\n KVM: arm64: limit PMU version to PMUv3 for ARMv8.1\n arm64: cpufeature: Extract capped perfmon fields\n ext4: make sure allocate pending entry not fail\n ext4: fix slab-use-after-free in ext4_es_insert_extent()\n ext4: using nofail preallocation in ext4_es_insert_extent()\n ext4: using nofail preallocation in ext4_es_insert_delayed_block()\n ext4: using nofail preallocation in ext4_es_remove_extent()\n ext4: use pre-allocated es in __es_remove_extent()\n ext4: use pre-allocated es in __es_insert_extent()\n ext4: factor out __es_alloc_extent() and __es_free_extent()\n ext4: add a new helper to check if es must be kept\n MIPS: KVM: Fix a build warning about variable set but not used\n nvmet: nul-terminate the NQNs passed in the connect command\n nvmet: remove unnecessary ctrl parameter\n afs: Fix file locking on R/O volumes to operate in local mode\n afs: Return ENOENT if no cell DNS record can be found\n net: axienet: Fix check for partial TX checksum\n amd-xgbe: propagate the correct speed and duplex status\n amd-xgbe: handle the corner-case during tx completion\n amd-xgbe: handle corner-case during sfp hotplug\n arm/xen: fix xen_vcpu_info allocation alignment\n net: usb: ax88179_178a: fix failed operations during ax88179_reset\n ipv4: Correct/silence an endian warning in __ip_do_redirect\n HID: fix HID device resource race between HID core and debugging support\n HID: core: store the unique system identifier in hid_device\n drm/rockchip: vop: Fix color for RGB888/BGR888 format on VOP full\n ata: pata_isapnp: Add missing error check for devm_ioport_map()\n drm/panel: simple: Fix Innolux G101ICE-L01 timings\n drm/panel: simple: Fix Innolux G101ICE-L01 bus flags\n afs: Make error on cell lookup failure consistent with OpenAFS\n PCI: keystone: Drop __init from ks_pcie_add_pcie_{ep,port}()\n RDMA/irdma: Prevent zero-length STAG registration\n driver core: Release all resources during unbind before updating device links\n ANDROID: GKI: db845c: Update symbols list and ABI on rpmsg_register_device_override\n Revert \"tracing: Have trace_event_file have ref counters\"\n Linux 5.4.262\n netfilter: nf_tables: bogus EBUSY when deleting flowtable after flush (for 5.4)\n netfilter: nf_tables: disable toggling dormant table state more than once\n netfilter: nf_tables: fix table flag updates\n netfilter: nftables: update table flags from the commit phase\n netfilter: nf_tables: double hook unregistration in netns path\n netfilter: nf_tables: unregister flowtable hooks on netns exit\n netfilter: nf_tables: fix memleak when more than 255 elements expired\n netfilter: nft_set_hash: try later when GC hits EAGAIN on iteration\n netfilter: nft_set_rbtree: use read spinlock to avoid datapath contention\n netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction\n netfilter: nf_tables: defer gc run if previous batch is still pending\n netfilter: nf_tables: use correct lock to protect gc_list\n netfilter: nf_tables: GC transaction race with abort path\n netfilter: nf_tables: GC transaction race with netns dismantle\n netfilter: nf_tables: fix GC transaction races with netns and netlink event exit path\n netfilter: nf_tables: remove busy mark and gc batch API\n netfilter: nft_set_hash: mark set element as dead when deleting from packet path\n netfilter: nf_tables: adapt set backend to use GC transaction API\n netfilter: nf_tables: GC transaction API to avoid race with control plane\n netfilter: nf_tables: don\u0027t skip expired elements during walk\n netfilter: nft_set_rbtree: fix overlap expiration walk\n netfilter: nft_set_rbtree: fix null deref on element insertion\n netfilter: nft_set_rbtree: Switch to node list walk for overlap detection\n netfilter: nf_tables: drop map element references from preparation phase\n netfilter: nftables: rename set element data activation/deactivation functions\n netfilter: nf_tables: pass context to nft_set_destroy()\n tracing: Have trace_event_file have ref counters\n drm/amdgpu: fix error handling in amdgpu_bo_list_get()\n ext4: remove gdb backup copy for meta bg in setup_new_flex_group_blocks\n ext4: correct the start block of counting reserved clusters\n ext4: correct return value of ext4_convert_meta_bg\n ext4: correct offset of gdb backup in non meta_bg group to update_backups\n ext4: apply umask if ACL support is disabled\n Revert \"net: r8169: Disable multicast filter for RTL8168H and RTL8107E\"\n nfsd: fix file memleak on client_opens_release\n media: venus: hfi: add checks to handle capabilities from firmware\n media: venus: hfi: fix the check to handle session buffer requirement\n media: venus: hfi_parser: Add check to keep the number of codecs within range\n media: sharp: fix sharp encoding\n media: lirc: drop trailing space from scancode transmit\n i2c: i801: fix potential race in i801_block_transaction_byte_by_byte\n net: dsa: lan9303: consequently nested-lock physical MDIO\n Revert ncsi: Propagate carrier gain/loss events to the NCSI controller\n Bluetooth: btusb: Add 0bda:b85b for Fn-Link RTL8852BE\n Bluetooth: btusb: Add RTW8852BE device 13d3:3570 to device tables\n bluetooth: Add device 13d3:3571 to device tables\n bluetooth: Add device 0bda:887b to device tables\n Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0cb8:0xc559\n Bluetooth: btusb: add Realtek 8822CE to usb_device_id table\n Bluetooth: btusb: Add flag to define wideband speech capability\n tty: serial: meson: fix hard LOCKUP on crtscts mode\n serial: meson: Use platform_get_irq() to get the interrupt\n tty: serial: meson: retrieve port FIFO size from DT\n serial: meson: remove redundant initialization of variable id\n ALSA: hda/realtek - Enable internal speaker of ASUS K6500ZC\n ALSA: info: Fix potential deadlock at disconnection\n parisc/pgtable: Do not drop upper 5 address bits of physical address\n parisc: Prevent booting 64-bit kernels on PA1.x machines\n i3c: master: cdns: Fix reading status register\n mm/cma: use nth_page() in place of direct struct page manipulation\n dmaengine: stm32-mdma: correct desc prep when channel running\n mcb: fix error handling for different scenarios when parsing\n i2c: core: Run atomic i2c xfer when !preemptible\n kernel/reboot: emergency_restart: Set correct system_state\n quota: explicitly forbid quota files from being encrypted\n jbd2: fix potential data lost in recovering journal raced with synchronizing fs bdev\n btrfs: don\u0027t arbitrarily slow down delalloc if we\u0027re committing\n PM: hibernate: Clean up sync_read handling in snapshot_write_next()\n PM: hibernate: Use __get_safe_page() rather than touching the list\n mmc: vub300: fix an error code\n clk: qcom: ipq8074: drop the CLK_SET_RATE_PARENT flag from PLL clocks\n parisc/pdc: Add width field to struct pdc_model\n PCI: keystone: Don\u0027t discard .probe() callback\n PCI: keystone: Don\u0027t discard .remove() callback\n genirq/generic_chip: Make irq_remove_generic_chip() irqdomain aware\n mmc: meson-gx: Remove setting of CMD_CFG_ERROR\n ACPI: resource: Do IRQ override on TongFang GMxXGxx\n PCI/sysfs: Protect driver\u0027s D3cold preference from user space\n hvc/xen: fix error path in xen_hvc_init() to always register frontend driver\n audit: don\u0027t WARN_ON_ONCE(!current-\u003emm) in audit_exe_compare()\n audit: don\u0027t take task_lock() in audit_exe_compare() code path\n KVM: x86: Ignore MSR_AMD64_TW_CFG access\n KVM: x86: hyper-v: Don\u0027t auto-enable stimer on write from user-space\n x86/cpu/hygon: Fix the CPU topology evaluation for real\n scsi: megaraid_sas: Increase register read retry rount from 3 to 30 for selected registers\n bpf: Fix precision tracking for BPF_ALU | BPF_TO_BE | BPF_END\n randstruct: Fix gcc-plugin performance mode to stay in group\n media: venus: hfi: add checks to perform sanity on queue pointers\n cifs: spnego: add \u0027;\u0027 in HOST_KEY_LEN\n tools/power/turbostat: Fix a knl bug\n macvlan: Don\u0027t propagate promisc change to lower dev in passthru\n net/mlx5e: Check return value of snprintf writing to fw_version buffer for representors\n net/mlx5_core: Clean driver version and name\n net/mlx5e: fix double free of encap_header\n net: stmmac: fix rx budget limit check\n net: stmmac: Rework stmmac_rx()\n netfilter: nf_conntrack_bridge: initialize err to 0\n net: ethernet: cortina: Fix MTU max setting\n net: ethernet: cortina: Handle large frames\n net: ethernet: cortina: Fix max RX frame define\n bonding: stop the device in bond_setup_by_slave()\n ptp: annotate data-race around q-\u003ehead and q-\u003etail\n xen/events: fix delayed eoi list handling\n ppp: limit MRU to 64K\n tipc: Fix kernel-infoleak due to uninitialized TLV value\n net: hns3: fix variable may not initialized problem in hns3_init_mac_addr()\n tty: Fix uninit-value access in ppp_sync_receive()\n ipvlan: add ipvlan_route_v6_outbound() helper\n NFSv4.1: fix SP4_MACH_CRED protection for pnfs IO\n wifi: iwlwifi: Use FW rate for non-data frames\n pwm: Fix double shift bug\n ASoC: ti: omap-mcbsp: Fix runtime PM underflow warnings\n kgdb: Flush console before entering kgdb on panic\n drm/amd/display: Avoid NULL dereference of timing generator\n media: cobalt: Use FIELD_GET() to extract Link Width\n gfs2: ignore negated quota changes\n media: vivid: avoid integer overflow\n media: gspca: cpia1: shift-out-of-bounds in set_flicker\n i2c: sun6i-p2wi: Prevent potential division by zero\n usb: gadget: f_ncm: Always set current gadget in ncm_bind()\n tty: vcc: Add check for kstrdup() in vcc_probe()\n HID: Add quirk for Dell Pro Wireless Keyboard and Mouse KM5221W\n scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()\n atm: iphase: Do PCI error checks on own line\n PCI: tegra194: Use FIELD_GET()/FIELD_PREP() with Link Width fields\n ALSA: hda: Fix possible null-ptr-deref when assigning a stream\n ARM: 9320/1: fix stack depot IRQ stack filter\n jfs: fix array-index-out-of-bounds in diAlloc\n jfs: fix array-index-out-of-bounds in dbFindLeaf\n fs/jfs: Add validity check for db_maxag and db_agpref\n fs/jfs: Add check for negative db_l2nbperpage\n RDMA/hfi1: Use FIELD_GET() to extract Link Width\n crypto: pcrypt - Fix hungtask for PADATA_RESET\n selftests/efivarfs: create-read: fix a resource leak\n drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL\n drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga\n drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7\n drm/komeda: drop all currently held locks if deadlock happens\n platform/x86: thinkpad_acpi: Add battery quirk for Thinkpad X120e\n Bluetooth: Fix double free in hci_conn_cleanup\n wifi: ath10k: Don\u0027t touch the CE interrupt registers after power up\n net: annotate data-races around sk-\u003esk_dst_pending_confirm\n net: annotate data-races around sk-\u003esk_tx_queue_mapping\n wifi: ath10k: fix clang-specific fortify warning\n wifi: ath9k: fix clang-specific fortify warnings\n wifi: mac80211: don\u0027t return unset power in ieee80211_get_tx_power()\n wifi: mac80211_hwsim: fix clang-specific fortify warning\n x86/mm: Drop the 4 MB restriction on minimal NUMA node memory size\n clocksource/drivers/timer-atmel-tcb: Fix initialization on SAM9 hardware\n clocksource/drivers/timer-imx-gpt: Fix potential memory leak\n perf/core: Bail out early if the request AUX area is out of bound\n locking/ww_mutex/test: Fix potential workqueue corruption\n Revert \"inet: shrink struct flowi_common\"\n Revert \"ipvlan: properly track tx_errors\"\n ANDROID: fix up rpmsg_device ABI break\n ANDROID: fix up platform_device ABI break\n Linux 5.4.261\n btrfs: use u64 for buffer sizes in the tree search ioctls\n Revert \"mmc: core: Capture correct oemid-bits for eMMC cards\"\n fbdev: fsl-diu-fb: mark wr_reg_wa() static\n fbdev: imsttfb: fix a resource leak in probe\n fbdev: imsttfb: Fix error path of imsttfb_probe()\n spi: spi-zynq-qspi: add spi-mem to driver kconfig dependencies\n drm/syncobj: fix DRM_SYNCOBJ_WAIT_FLAGS_WAIT_AVAILABLE\n netfilter: nat: fix ipv6 nat redirect with mapped and scoped addresses\n netfilter: nft_redir: use `struct nf_nat_range2` throughout and deduplicate eval call-backs\n netfilter: xt_recent: fix (increase) ipv6 literal buffer length\n r8169: respect userspace disabling IFF_MULTICAST\n tg3: power down device only on SYSTEM_POWER_OFF\n net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT\n net: stmmac: xgmac: Enable support for multiple Flexible PPS outputs\n Fix termination state for idr_for_each_entry_ul()\n net: r8169: Disable multicast filter for RTL8168H and RTL8107E\n dccp/tcp: Call security_inet_conn_request() after setting IPv6 addresses.\n dccp: Call security_inet_conn_request() after setting IPv4 addresses.\n inet: shrink struct flowi_common\n tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING\n llc: verify mac len before reading mac header\n Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()\n pwm: brcmstb: Utilize appropriate clock APIs in suspend/resume\n pwm: sti: Reduce number of allocations and drop usage of chip_data\n pwm: sti: Avoid conditional gotos\n regmap: prevent noinc writes from clobbering cache\n media: dvb-usb-v2: af9035: fix missing unlock\n media: s3c-camif: Avoid inappropriate kfree()\n media: bttv: fix use after free error due to btv-\u003etimeout timer\n pcmcia: ds: fix possible name leak in error path in pcmcia_device_add()\n pcmcia: ds: fix refcount leak in pcmcia_device_add()\n pcmcia: cs: fix possible hung task and memory leak pccardd()\n rtc: pcf85363: fix wrong mask/val parameters in regmap_update_bits call\n i3c: Fix potential refcount leak in i3c_master_register_new_i3c_devs\n powerpc/pseries: fix potential memory leak in init_cpu_associativity()\n powerpc/imc-pmu: Use the correct spinlock initializer.\n powerpc/xive: Fix endian conversion size\n modpost: fix tee MODULE_DEVICE_TABLE built on big-endian host\n f2fs: fix to initialize map.m_pblk in f2fs_precache_extents()\n dmaengine: pxa_dma: Remove an erroneous BUG_ON() in pxad_free_desc()\n USB: usbip: fix stub_dev hub disconnect\n tools: iio: iio_generic_buffer ensure alignment\n tools: iio: iio_generic_buffer: Fix some integer type and calculation\n tools: iio: privatize globals and functions in iio_generic_buffer.c file\n misc: st_core: Do not call kfree_skb() under spin_lock_irqsave()\n dmaengine: ti: edma: handle irq_of_parse_and_map() errors\n usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency\n tty: tty_jobctrl: fix pid memleak in disassociate_ctty()\n leds: trigger: ledtrig-cpu:: Fix \u0027output may be truncated\u0027 issue for \u0027cpu\u0027\n ledtrig-cpu: Limit to 8 CPUs\n leds: pwm: Don\u0027t disable the PWM when the LED should be off\n leds: pwm: convert to atomic PWM API\n leds: pwm: simplify if condition\n mfd: dln2: Fix double put in dln2_probe\n ASoC: ams-delta.c: use component after check\n ASoC: Intel: Skylake: Fix mem leak when parsing UUIDs fails\n sh: bios: Revive earlyprintk support\n RDMA/hfi1: Workaround truncation compilation error\n scsi: ufs: core: Leave space for \u0027\\0\u0027 in utf8 desc string\n ext4: move \u0027ix\u0027 sanity check to corrent position\n ARM: 9321/1: memset: cast the constant byte to unsigned char\n hid: cp2112: Fix duplicate workqueue initialization\n HID: cp2112: Use irqchip template\n crypto: caam/jr - fix Chacha20 + Poly1305 self test failure\n crypto: caam/qi2 - fix Chacha20 + Poly1305 self test failure\n nd_btt: Make BTT lanes preemptible\n sched/rt: Provide migrate_disable/enable() inlines\n libnvdimm/of_pmem: Use devm_kstrdup instead of kstrdup and check its return value\n hwrng: geode - fix accessing registers\n clk: scmi: Free scmi_clk allocated when the clocks with invalid info are skipped\n firmware: ti_sci: Mark driver as non removable\n firmware: ti_sci: Replace HTTP links with HTTPS ones\n soc: qcom: llcc: Handle a second device without data corruption\n soc: qcom: Rename llcc-slice to llcc-qcom\n soc: qcom: llcc cleanup to get rid of sdm845 specific driver file\n ARM: dts: qcom: mdm9615: populate vsdcc fixed regulator\n arm64: dts: qcom: sdm845-mtp: fix WiFi configuration\n drm/rockchip: cdn-dp: Fix some error handling paths in cdn_dp_probe()\n drm/radeon: possible buffer overflow\n drm/rockchip: vop: Fix call to crtc reset helper\n drm/rockchip: vop: Fix reset of state in duplicate state crtc funcs\n hwmon: (coretemp) Fix potentially truncated sysfs attribute name\n platform/x86: wmi: Fix opening of char device\n platform/x86: wmi: remove unnecessary initializations\n platform/x86: wmi: Fix probe failure when failing to register WMI devices\n clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data\n clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data\n clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data\n clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data\n clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data\n clk: npcm7xx: Fix incorrect kfree\n clk: keystone: pll: fix a couple NULL vs IS_ERR() checks\n clk: imx: Select MXC_CLK for CLK_IMX8QXP\n clk: qcom: gcc-sm8150: Fix gcc_sdcc2_apps_clk_src\n clk: qcom: gcc-sm8150: use ARRAY_SIZE instead of specifying num_parents\n clk: qcom: clk-rcg2: Fix clock rate overflow for high parent frequencies\n regmap: debugfs: Fix a erroneous check after snprintf()\n ipvlan: properly track tx_errors\n net: add DEV_STATS_READ() helper\n ipv6: avoid atomic fragment on GSO packets\n ACPI: sysfs: Fix create_pnp_modalias() and create_of_modalias()\n tcp: fix cookie_init_timestamp() overflows\n tcp: Remove one extra ktime_get_ns() from cookie_init_timestamp\n chtls: fix tp-\u003ercv_tstamp initialization\n r8169: fix rare issue with broken rx after link-down on RTL8125\n r8169: use tp_to_dev instead of open code\n thermal: core: prevent potential string overflow\n can: dev: can_restart(): fix race condition between controller restart and netif_carrier_on()\n can: dev: can_restart(): don\u0027t crash kernel if carrier is OK\n wifi: rtlwifi: fix EDCA limit set by BT coexistence\n tcp_metrics: do not create an entry from tcp_init_metrics()\n tcp_metrics: properly set tp-\u003esnd_ssthresh in tcp_init_metrics()\n tcp_metrics: add missing barriers on delete\n wifi: mt76: mt7603: rework/fix rx pse hang check\n wifi: rtw88: debug: Fix the NULL vs IS_ERR() bug for debugfs_create_file()\n tcp: call tcp_try_undo_recovery when an RTOd TFO SYNACK is ACKed\n i40e: fix potential memory leaks in i40e_remove()\n genirq/matrix: Exclude managed interrupts in irq_matrix_allocated()\n vfs: fix readahead(2) on block devices\n Linux 5.4.260\n tty: 8250: Add support for Intashield IS-100\n tty: 8250: Add support for Brainboxes UP cards\n tty: 8250: Add support for additional Brainboxes UC cards\n tty: 8250: Remove UC-257 and UC-431\n usb: storage: set 1.50 as the lower bcdDevice for older \"Super Top\" compatibility\n PCI: Prevent xHCI driver from claiming AMD VanGogh USB3 DRD device\n Revert \"ARM: dts: Move am33xx and am43xx mmc nodes to sdhci-omap driver\"\n nvmet-tcp: Fix a possible UAF in queue intialization setup\n nvmet-tcp: move send/recv error handling in the send/recv methods instead of call-sites\n remove the sx8 block driver\n ata: ahci: fix enum constants for gcc-13\n net: chelsio: cxgb4: add an error code check in t4_load_phy_fw\n platform/mellanox: mlxbf-tmfifo: Fix a warning message\n platform/x86: asus-wmi: Change ASUS_WMI_BRN_DOWN code from 0x20 to 0x2e\n scsi: mpt3sas: Fix in error path\n fbdev: uvesafb: Call cn_del_callback() at the end of uvesafb_exit()\n ASoC: rt5650: fix the wrong result of key button\n netfilter: nfnetlink_log: silence bogus compiler warning\n spi: npcm-fiu: Fix UMA reads when dummy.nbytes \u003d\u003d 0\n fbdev: atyfb: only use ioremap_uc() on i386 and ia64\n Input: synaptics-rmi4 - handle reset delay when using SMBus trsnsport\n dmaengine: ste_dma40: Fix PM disable depth imbalance in d40_probe\n irqchip/stm32-exti: add missing DT IRQ flag translation\n Input: i8042 - add Fujitsu Lifebook E5411 to i8042 quirk table\n x86: Fix .brk attribute in linker script\n rpmsg: Fix possible refcount leak in rpmsg_register_device_override()\n rpmsg: glink: Release driver_override\n rpmsg: Fix calling device_lock() on non-initialized device\n rpmsg: Fix kfree() of static memory on setting driver_override\n rpmsg: Constify local variable in field store macro\n driver: platform: Add helper for safer setting of driver_override\n ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow\n ext4: avoid overlapping preallocations due to overflow\n ext4: add two helper functions extent_logical_end() and pa_logical_end()\n x86/mm: Fix RESERVE_BRK() for older binutils\n x86/mm: Simplify RESERVE_BRK()\n nfsd: lock_rename() needs both directories to live on the same fs\n f2fs: fix to do sanity check on inode type during garbage collection\n smbdirect: missing rc checks while waiting for rdma events\n kobject: Fix slab-out-of-bounds in fill_kobj_path()\n arm64: fix a concurrency issue in emulation_proc_handler()\n drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()\n x86/i8259: Skip probing when ACPI/MADT advertises PCAT compatibility\n i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR\n clk: Sanitize possible_parent_show to Handle Return Value of of_clk_get_parent_name\n perf/core: Fix potential NULL deref\n nvmem: imx: correct nregs for i.MX6UL\n nvmem: imx: correct nregs for i.MX6SLL\n nvmem: imx: correct nregs for i.MX6ULL\n i2c: aspeed: Fix i2c bus hang in slave read\n i2c: stm32f7: Fix PEC handling in case of SMBUS transfers\n i2c: muxes: i2c-demux-pinctrl: Use of_get_i2c_adapter_by_node()\n i2c: muxes: i2c-mux-gpmux: Use of_get_i2c_adapter_by_node()\n i2c: muxes: i2c-mux-pinctrl: Use of_get_i2c_adapter_by_node()\n iio: exynos-adc: request second interupt only when touchscreen mode is used\n gtp: fix fragmentation needed check with gso\n gtp: uapi: fix GTPA_MAX\n tcp: fix wrong RTO timeout when received SACK reneging\n r8152: Cancel hw_phy_work if we have an error in probe\n r8152: Run the unload routine if we have errors during probe\n r8152: Increase USB control msg timeout to 5000ms as per spec\n net: ieee802154: adf7242: Fix some potential buffer overflow in adf7242_stats_show()\n igc: Fix ambiguity in the ethtool advertising\n neighbour: fix various data-races\n igb: Fix potential memory leak in igb_add_ethtool_nfc_entry\n treewide: Spelling fix in comment\n r8169: fix the KCSAN reported data race in rtl_rx while reading desc-\u003eopts1\n r8169: fix the KCSAN reported data-race in rtl_tx while reading TxDescArray[entry].opts1\n virtio-mmio: fix memory leak of vm_dev\n virtio_balloon: Fix endless deflation and inflation on arm64\n mcb-lpc: Reallocate memory region to avoid memory overlapping\n mcb: Return actual parsed size when reading chameleon table\n selftests/ftrace: Add new test case which checks non unique symbol\n mtd: rawnand: marvell: Ensure program page operations are successful\n\nConflicts:\n both modified: drivers/clk/qcom/gcc-sm8150.c\n both modified: drivers/net/ethernet/stmicro/stmmac/stmmac_main.c\n both modified: drivers/usb/dwc3/core.c\n both modified: drivers/usb/gadget/function/f_ncm.c\n both modified: kernel/events/core.c\n\nChange-Id: I29a93811ddcabe88b7912a6593801505e9fd233c\nSigned-off-by: kamasali Satyanarayan \u003cquic_kamasali@quicinc.com\u003e\n" }, { "commit": "806fb883eac624c902270426eeb1c35786aeec25", "tree": "6eaa79b05742d20cd9934d08ec114a214f9cdd59", "parents": [ "8eb60626067ea79ac310edbb9d8f3c2a6275911a", "6e1f54a4985b63bc1b55a09e5e75a974c5d6719b" ], "author": { "name": "Greg Kroah-Hartman", "email": "gregkh@google.com", "time": "Sat Feb 24 15:47:08 2024 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@google.com", "time": "Sat Feb 24 15:47:08 2024 +0000" }, "message": "Merge 5.4.269 into android11-5.4-lts\n\nChanges in 5.4.269\n\tPCI: mediatek: Clear interrupt status before dispatching handler\n\tinclude/linux/units.h: add helpers for kelvin to/from Celsius conversion\n\tunits: Add Watt units\n\tunits: change from \u0027L\u0027 to \u0027UL\u0027\n\tunits: add the HZ macros\n\tserial: sc16is7xx: set safe default SPI clock frequency\n\tspi: introduce SPI_MODE_X_MASK macro\n\tserial: sc16is7xx: add check for unsupported SPI modes during probe\n\text4: allow for the last group to be marked as trimmed\n\tcrypto: api - Disallow identical driver names\n\tPM: hibernate: Enforce ordering during image compression/decompression\n\thwrng: core - Fix page fault dead lock on mmap-ed hwrng\n\trpmsg: virtio: Free driver_override when rpmsg_remove()\n\tparisc/firmware: Fix F-extend for PDC addresses\n\tarm64: dts: qcom: sdm845: fix USB wakeup interrupt types\n\tmmc: core: Use mrq.sbc in close-ended ffu\n\tnouveau/vmm: don\u0027t set addr on the fail path to avoid warning\n\tubifs: ubifs_symlink: Fix memleak of inode-\u003ei_link in error path\n\trename(): fix the locking of subdirectories\n\tblock: Remove special-casing of compound pages\n\tmtd: spinand: macronix: Fix MX35LFxGE4AD page size\n\tfs: add mode_strip_sgid() helper\n\tfs: move S_ISGID stripping into the vfs_*() helpers\n\tpowerpc: Use always instead of always-y in for crtsavres.o\n\tx86/CPU/AMD: Fix disabling XSAVES on AMD family 0x17 due to erratum\n\tnet/smc: fix illegal rmb_desc access in SMC-D connection dump\n\tvlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING\n\tllc: make llc_ui_sendmsg() more robust against bonding changes\n\tllc: Drop support for ETH_P_TR_802_2.\n\tnet/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv\n\ttracing: Ensure visibility when inserting an element into tracing_map\n\tafs: Hide silly-rename files from userspace\n\ttcp: Add memory barrier to tcp_push()\n\tnetlink: fix potential sleeping issue in mqueue_flush_file\n\tnet/mlx5: DR, Use the right GVMI number for drop action\n\tnet/mlx5: Use kfree(ft-\u003eg) in arfs_create_groups()\n\tnet/mlx5e: fix a double-free in arfs_create_groups\n\tnetfilter: nf_tables: restrict anonymous set and map names to 16 bytes\n\tnetfilter: nf_tables: validate NFPROTO_* family\n\tfjes: fix memleaks in fjes_hw_setup\n\tnet: fec: fix the unhandled context fault from smmu\n\tbtrfs: ref-verify: free ref cache before clearing mount opt\n\tbtrfs: tree-checker: fix inline ref size in error messages\n\tbtrfs: don\u0027t warn if discard range is not aligned to sector\n\tbtrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args\n\trbd: don\u0027t move requests to the running list on errors\n\tnetfilter: nf_tables: reject QUEUE/DROP verdict parameters\n\tgpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04\n\tdrm: Don\u0027t unref the same fb many times by mistake due to deadlock handling\n\tdrm/bridge: nxp-ptn3460: fix i2c_master_send() error checking\n\tdrm/bridge: nxp-ptn3460: simplify some error checking\n\tdrm/exynos: fix accidental on-stack copy of exynos_drm_plane\n\tdrm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume\n\tgpio: eic-sprd: Clear interrupt after set the interrupt type\n\tspi: bcm-qspi: fix SFDP BFPT read by usig mspi read\n\tmips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan\n\ttick/sched: Preserve number of idle sleeps across CPU hotplug events\n\tx86/entry/ia32: Ensure s32 is sign extended to s64\n\tpowerpc/mm: Fix null-pointer dereference in pgtable_cache_add\n\tpowerpc: Fix build error due to is_valid_bugaddr()\n\tpowerpc/mm: Fix build failures due to arch_reserved_kernel_pages()\n\tpowerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE\n\tpowerpc/lib: Validate size for vector operations\n\tx86/mce: Mark fatal MCE\u0027s page as poison to avoid panic in the kdump kernel\n\tperf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file\n\tregulator: core: Only increment use_count when enable_count changes\n\taudit: Send netlink ACK before setting connection in auditd_set\n\tACPI: video: Add quirk for the Colorful X15 AT 23 Laptop\n\tPNP: ACPI: fix fortify warning\n\tACPI: extlog: fix NULL pointer dereference check\n\tFS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree\n\tUBSAN: array-index-out-of-bounds in dtSplitRoot\n\tjfs: fix slab-out-of-bounds Read in dtSearch\n\tjfs: fix array-index-out-of-bounds in dbAdjTree\n\tjfs: fix uaf in jfs_evict_inode\n\tpstore/ram: Fix crash when setting number of cpus to an odd number\n\tcrypto: stm32/crc32 - fix parsing list of devices\n\tafs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()\n\trxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()\n\tjfs: fix array-index-out-of-bounds in diNewExt\n\ts390/ptrace: handle setting of fpc register correctly\n\tKVM: s390: fix setting of fpc register\n\tSUNRPC: Fix a suspicious RCU usage warning\n\tecryptfs: Reject casefold directory inodes\n\text4: fix inconsistent between segment fstrim and full fstrim\n\text4: unify the type of flexbg_size to unsigned int\n\text4: remove unnecessary check from alloc_flex_gd()\n\text4: avoid online resizing failures due to oversized flex bg\n\twifi: rt2x00: restart beacon queue when hardware reset\n\tselftests/bpf: satisfy compiler by having explicit return in btf test\n\tselftests/bpf: Fix pyperf180 compilation failure with clang18\n\tscsi: lpfc: Fix possible file string name overflow when updating firmware\n\tPCI: Add no PM reset quirk for NVIDIA Spectrum devices\n\tbonding: return -ENOMEM instead of BUG in alb_upper_dev_walk\n\tARM: dts: imx7d: Fix coresight funnel ports\n\tARM: dts: imx7s: Fix lcdif compatible\n\tARM: dts: imx7s: Fix nand-controller #size-cells\n\twifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()\n\tbpf: Add map and need_defer parameters to .map_fd_put_ptr()\n\tscsi: libfc: Don\u0027t schedule abort twice\n\tscsi: libfc: Fix up timeout error in fc_fcp_rec_error()\n\tARM: dts: rockchip: fix rk3036 hdmi ports node\n\tARM: dts: imx25/27-eukrea: Fix RTC node name\n\tARM: dts: imx: Use flash@0,0 pattern\n\tARM: dts: imx27: Fix sram node\n\tARM: dts: imx1: Fix sram node\n\tARM: dts: imx25/27: Pass timing0\n\tARM: dts: imx27-apf27dev: Fix LED name\n\tARM: dts: imx23-sansa: Use preferred i2c-gpios properties\n\tARM: dts: imx23/28: Fix the DMA controller node name\n\tblock: prevent an integer overflow in bvec_try_merge_hw_page\n\tmd: Whenassemble the array, consult the superblock of the freshest device\n\tarm64: dts: qcom: msm8996: Fix \u0027in-ports\u0027 is a required property\n\tarm64: dts: qcom: msm8998: Fix \u0027out-ports\u0027 is a required property\n\twifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices\n\twifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()\n\twifi: cfg80211: free beacon_ies when overridden from hidden BSS\n\tf2fs: fix to check return value of f2fs_reserve_new_block()\n\tASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument\n\tfast_dput(): handle underflows gracefully\n\tRDMA/IPoIB: Fix error code return in ipoib_mcast_join\n\tdrm/drm_file: fix use of uninitialized variable\n\tdrm/framebuffer: Fix use of uninitialized variable\n\tdrm/mipi-dsi: Fix detach call without attach\n\tmedia: stk1160: Fixed high volume of stk1160_dbg messages\n\tmedia: rockchip: rga: fix swizzling for RGB formats\n\tPCI: add INTEL_HDA_ARL to pci_ids.h\n\tALSA: hda: Intel: add HDA_ARL PCI ID support\n\tdrm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time\n\tIB/ipoib: Fix mcast list locking\n\tmedia: ddbridge: fix an error code problem in ddb_probe\n\tdrm/msm/dpu: Ratelimit framedone timeout msgs\n\tclk: hi3620: Fix memory leak in hi3620_mmc_clk_init()\n\tclk: mmp: pxa168: Fix memory leak in pxa168_clk_init()\n\tdrm/amdgpu: Let KFD sync with VM fences\n\tdrm/amdgpu: Drop \u0027fence\u0027 check in \u0027to_amdgpu_amdkfd_fence()\u0027\n\tleds: trigger: panic: Don\u0027t register panic notifier if creating the trigger failed\n\tum: Fix naming clash between UML and scheduler\n\tum: Don\u0027t use vfprintf() for os_info()\n\tum: net: Fix return type of uml_net_start_xmit()\n\ti3c: master: cdns: Update maximum prescaler value for i2c clock\n\tmfd: ti_am335x_tscadc: Fix TI SoC dependencies\n\tPCI: Only override AMD USB controller if required\n\tPCI: switchtec: Fix stdev_release() crash after surprise hot remove\n\tusb: hub: Replace hardcoded quirk value with BIT() macro\n\tfs/kernfs/dir: obey S_ISGID\n\tPCI/AER: Decode Requester ID when no error info found\n\tlibsubcmd: Fix memory leak in uniq()\n\tvirtio_net: Fix \"‘%d’ directive writing between 1 and 11 bytes into a region of size 10\" warnings\n\tblk-mq: fix IO hang from sbitmap wakeup race\n\tceph: fix deadlock or deadcode of misusing dget()\n\tdrm/amdgpu: Release \u0027adev-\u003epm.fw\u0027 before return in \u0027amdgpu_device_need_post()\u0027\n\tperf: Fix the nr_addr_filters fix\n\twifi: cfg80211: fix RCU dereference in __cfg80211_bss_update\n\tscsi: isci: Fix an error code problem in isci_io_request_build()\n\tnet: remove unneeded break\n\tixgbe: Remove non-inclusive language\n\tixgbe: Refactor returning internal error codes\n\tixgbe: Refactor overtemp event handling\n\tixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()\n\tipv6: Ensure natural alignment of const ipv6 loopback and router addresses\n\tllc: call sock_orphan() at release time\n\tnetfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger\n\tnetfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations\n\tnet: ipv4: fix a memleak in ip_setup_cork\n\taf_unix: fix lockdep positive in sk_diag_dump_icons()\n\tnet: sysfs: Fix /sys/class/net/\u003ciface\u003e path\n\tHID: apple: Add support for the 2021 Magic Keyboard\n\tHID: apple: Swap the Fn and Left Control keys on Apple keyboards\n\tHID: apple: Add 2021 magic keyboard FN key mapping\n\tbonding: remove print in bond_verify_device_path\n\tdmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA\n\tdmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA\n\tphy: renesas: rcar-gen3-usb2: Fix returning wrong error code\n\tdmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV\n\tphy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP\n\tnet: stmmac: xgmac: fix handling of DPP safety error for DMA channels\n\tselftests: net: avoid just another constant wait\n\tatm: idt77252: fix a memleak in open_card_ubr0\n\thwmon: (aspeed-pwm-tacho) mutex for tach reading\n\thwmon: (coretemp) Fix out-of-bounds memory access\n\thwmon: (coretemp) Fix bogus core_id to attr name mapping\n\tinet: read sk-\u003esk_family once in inet_recv_error()\n\trxrpc: Fix response to PING RESPONSE ACKs to a dead call\n\ttipc: Check the bearer type before calling tipc_udp_nl_bearer_add()\n\tppp_async: limit MRU to 64K\n\tnetfilter: nft_compat: reject unused compat flag\n\tnetfilter: nft_compat: restrict match/target protocol to u16\n\tnetfilter: nft_ct: reject direction for ct id\n\tnet/af_iucv: clean up a try_then_request_module()\n\tUSB: serial: qcserial: add new usb-id for Dell Wireless DW5826e\n\tUSB: serial: option: add Fibocom FM101-GL variant\n\tUSB: serial: cp210x: add ID for IMST iM871A-USB\n\thrtimer: Report offline hrtimer enqueue\n\tInput: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID\n\tvhost: use kzalloc() instead of kmalloc() followed by memset()\n\tnet: stmmac: xgmac: use #define for string constants\n\tnet: stmmac: xgmac: fix a typo of register name in DPP safety handling\n\tnetfilter: nft_set_rbtree: skip end interval element from gc\n\tbtrfs: forbid creating subvol qgroups\n\tbtrfs: forbid deleting live subvol qgroup\n\tbtrfs: send: return EOPNOTSUPP on unknown flags\n\tof: unittest: add overlay gpio test to catch gpio hog problem\n\tof: unittest: Fix compile in the non-dynamic case\n\tspi: ppc4xx: Drop write-only variable\n\tASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()\n\tMIPS: Add \u0027memory\u0027 clobber to csum_ipv6_magic() inline assembler\n\ti40e: Fix waiting for queues of all VSIs to be disabled\n\ttracing/trigger: Fix to return error if failed to alloc snapshot\n\tmm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again\n\tHID: wacom: generic: Avoid reporting a serial of \u00270\u0027 to userspace\n\tHID: wacom: Do not register input devices until after hid_hw_start\n\tUSB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT\n\tusb: f_mass_storage: forbid async queue when shutdown happen\n\ti2c: i801: Remove i801_set_block_buffer_mode\n\ti2c: i801: Fix block process call transactions\n\tscsi: Revert \"scsi: fcoe: Fix potential deadlock on \u0026fip-\u003ectlr_lock\"\n\tfirewire: core: correct documentation of fw_csr_string() kernel API\n\tkbuild: Fix changing ELF file type for output of gen_btf for big endian\n\tnfc: nci: free rx_data_reassembly skb on NCI device cleanup\n\txen-netback: properly sync TX responses\n\tALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL\n\tbinder: signal epoll threads of self-work\n\tmisc: fastrpc: Mark all sessions as invalid in cb_remove\n\text4: fix double-free of blocks due to wrong extents moved_len\n\ttracing: Fix wasted memory in saved_cmdlines logic\n\tstaging: iio: ad5933: fix type mismatch regression\n\tiio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC\n\tring-buffer: Clean ring_buffer_poll_wait() error return\n\tserial: max310x: set default value when reading clock ready bit\n\tserial: max310x: improve crystal stable clock detection\n\tx86/Kconfig: Transmeta Crusoe is CPU family 5, not 6\n\tx86/mm/ident_map: Use gbpages only where full GB page should be mapped.\n\tmmc: slot-gpio: Allow non-sleeping GPIO ro\n\tALSA: hda/conexant: Add quirk for SWS JS201D\n\tnilfs2: fix data corruption in dsync block recovery for small block sizes\n\tnilfs2: fix hang in nilfs_lookup_dirty_data_buffers()\n\tnfp: use correct macro for LengthSelect in BAR config\n\tnfp: flower: prevent re-adding mac index for bonded port\n\tirqchip/irq-brcmstb-l2: Add write memory barrier before exit\n\tcan: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)\n\tpmdomain: core: Move the unused cleanup to a _sync initcall\n\ttracing: Inform kmemleak of saved_cmdlines allocation\n\tRevert \"md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d\"\n\tbus: moxtet: Add spi device table\n\tarch, mm: remove stale mentions of DISCONIGMEM\n\tmips: Fix max_mapnr being uninitialized on early stages\n\tKVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache\n\tnetfilter: ipset: fix performance regression in swap operation\n\tnetfilter: ipset: Missing gc cancellations fixed\n\tnet: prevent mss overflow in skb_segment()\n\tsched/membarrier: reduce the ability to hammer on sys_membarrier\n\tnilfs2: fix potential bug in end_buffer_async_write\n\tPM: runtime: add devm_pm_runtime_enable helper\n\tPM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()\n\tdrm/msm/dsi: Enable runtime PM\n\tlsm: new security_file_ioctl_compat() hook\n\tnetfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()\n\tRevert \"Revert \"mtd: rawnand: gpmi: Fix setting busy timeout setting\"\"\n\tnet: bcmgenet: Fix EEE implementation\n\tof: unittest: fix EXPECT text for gpio hog errors\n\tof: gpio unittest kfree() wrong object\n\tLinux 5.4.269\n\nChange-Id: Iedabcdbe95a83593f102e237f2a80d2fc7206669\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@google.com\u003e\n" }, { "commit": "4ae191effbc1427b1400b2ff3cbc23f82a0e5fad", "tree": "8fe343b316740c3aa08e6ac41ac9992c324ac3f9", "parents": [ "750a4e59993091fc7e19db33373f83168560f693" ], "author": { "name": "Nathan Chancellor", "email": "nathan@kernel.org", "time": "Mon Feb 12 19:05:10 2024 -0700" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Fri Feb 23 08:25:10 2024 +0100" }, "message": "kbuild: Fix changing ELF file type for output of gen_btf for big endian\n\ncommit e3a9ee963ad8ba677ca925149812c5932b49af69 upstream.\n\nCommit 90ceddcb4950 (\"bpf: Support llvm-objcopy for vmlinux BTF\")\nchanged the ELF type of .btf.vmlinux.bin.o to ET_REL via dd, which works\nfine for little endian platforms:\n\n 00000000 7f 45 4c 46 02 01 01 00 00 00 00 00 00 00 00 00 |.ELF............|\n -00000010 03 00 b7 00 01 00 00 00 00 00 00 80 00 80 ff ff |................|\n +00000010 01 00 b7 00 01 00 00 00 00 00 00 80 00 80 ff ff |................|\n\nHowever, for big endian platforms, it changes the wrong byte, resulting\nin an invalid ELF file type, which ld.lld rejects:\n\n 00000000 7f 45 4c 46 02 02 01 00 00 00 00 00 00 00 00 00 |.ELF............|\n -00000010 00 03 00 16 00 00 00 01 00 00 00 00 00 10 00 00 |................|\n +00000010 01 03 00 16 00 00 00 01 00 00 00 00 00 10 00 00 |................|\n\n Type: \u003cunknown\u003e: 103\n\n ld.lld: error: .btf.vmlinux.bin.o: unknown file type\n\nFix this by updating the entire 16-bit e_type field rather than just a\nsingle byte, so that everything works correctly for all platforms and\nlinkers.\n\n 00000000 7f 45 4c 46 02 02 01 00 00 00 00 00 00 00 00 00 |.ELF............|\n -00000010 00 03 00 16 00 00 00 01 00 00 00 00 00 10 00 00 |................|\n +00000010 00 01 00 16 00 00 00 01 00 00 00 00 00 10 00 00 |................|\n\n Type: REL (Relocatable file)\n\nWhile in the area, update the comment to mention that binutils 2.35+\nmatches LLD\u0027s behavior of rejecting an ET_EXEC input, which occurred\nafter the comment was added.\n\nCc: stable@vger.kernel.org\nFixes: 90ceddcb4950 (\"bpf: Support llvm-objcopy for vmlinux BTF\")\nLink: https://github.com/llvm/llvm-project/pull/75643\nSuggested-by: Masahiro Yamada \u003cmasahiroy@kernel.org\u003e\nSigned-off-by: Nathan Chancellor \u003cnathan@kernel.org\u003e\nReviewed-by: Fangrui Song \u003cmaskray@google.com\u003e\nReviewed-by: Nicolas Schier \u003cnicolas@fjasle.eu\u003e\nReviewed-by: Kees Cook \u003ckeescook@chromium.org\u003e\nReviewed-by: Justin Stitt \u003cjustinstitt@google.com\u003e\nSigned-off-by: Masahiro Yamada \u003cmasahiroy@kernel.org\u003e\n[nathan: Fix silent conflict due to lack of 7d153696e5db in older trees]\nSigned-off-by: Nathan Chancellor \u003cnathan@kernel.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "2f84185dd73a3a029f74232bf23703c2f007f0b4", "tree": "89944dd2547781c86eff818faf0a2989c94b8647", "parents": [ "b976c2c4388ed7252c3732434981e751cbfd5617", "b70f9975afc0d7cd32eff8736b205c3d7395de7e" ], "author": { "name": "Bruno Martins", "email": "bgcngm@gmail.com", "time": "Thu Feb 08 19:01:14 2024 +0000" }, "committer": { "name": "Bruno Martins", "email": "bgcngm@gmail.com", "time": "Thu Feb 08 19:02:48 2024 +0000" }, "message": "Merge branch \u0027android11-5.4-lts\u0027 of https://android.googlesource.com/kernel/common into android13-5.4-lahaina\n\n* \u0027android11-5.4-lts\u0027 of https://android.googlesource.com/kernel/common:\n FROMGIT: clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd\n Linux 5.4.268\n arm64: dts: armada-3720-turris-mox: set irq type for RTC\n perf top: Skip side-band event setup if HAVE_LIBBPF_SUPPORT is not set\n i2c: s3c24xx: fix transferring more than one message in polling mode\n i2c: s3c24xx: fix read transfers in polling mode\n mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure\n kdb: Fix a potential buffer overflow in kdb_local()\n kdb: Censor attempts to set PROMPT without ENABLE_MEM_READ\n ipvs: avoid stat macros calls from preemptible context\n netfilter: nf_tables: skip dead set elements in netlink dump\n net: dsa: vsc73xx: Add null pointer check to vsc73xx_gpio_probe\n net: ravb: Fix dma_addr_t truncation in error case\n net: phy: micrel: populate .soft_reset for KSZ9131\n net: qualcomm: rmnet: fix global oob in rmnet_policy\n s390/pci: fix max size calculation in zpci_memcpy_toio()\n PCI: keystone: Fix race condition when initializing PHYs\n nvmet-tcp: Fix the H2C expected PDU len calculation\n serial: imx: Correct clock error message in function probe()\n apparmor: avoid crash when parsed profile name is empty\n perf env: Avoid recursively taking env-\u003ebpf_progs.lock\n perf bpf: Decouple creating the evlist from adding the SB event\n perf top: Move sb_evlist to \u0027struct perf_top\u0027\n perf record: Move sb_evlist to \u0027struct record\u0027\n perf env: Add perf_env__numa_node()\n nvmet-tcp: fix a crash in nvmet_req_complete()\n nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length\n perf genelf: Set ELF program header addresses properly\n software node: Let args be NULL in software_node_get_reference_args\n acpi: property: Let args be NULL in __acpi_node_get_property_reference\n serial: 8250: omap: Don\u0027t skip resource freeing if pm_runtime_resume_and_get() failed\n MIPS: Alchemy: Fix an out-of-bound access in db1550_dev_setup()\n MIPS: Alchemy: Fix an out-of-bound access in db1200_dev_setup()\n mips: Fix incorrect max_low_pfn adjustment\n HID: wacom: Correct behavior when processing some confidence \u003d\u003d false touches\n x86/kvm: Do not try to disable kvmclock if it was not enabled\n wifi: mwifiex: configure BSSID consistently when starting AP\n wifi: rtlwifi: Convert LNKCTL change to PCIe cap RMW accessors\n wifi: rtlwifi: Remove bogus and dangerous ASPM disable/enable code\n rootfs: Fix support for rootfstype\u003d when root\u003d is given\n fbdev: flush deferred work in fb_deferred_io_fsync()\n ALSA: oxygen: Fix right channel of capture volume mixer\n usb: mon: Fix atomicity violation in mon_bin_vma_fault\n usb: typec: class: fix typec_altmode_put_partner to put plugs\n Revert \"usb: typec: class: fix typec_altmode_put_partner to put plugs\"\n usb: chipidea: wait controller resume finished for wakeup irq\n Revert \"usb: dwc3: don\u0027t reset device side if dwc3 was configured as host-only\"\n Revert \"usb: dwc3: Soft reset phy on probe for host\"\n usb: dwc: ep0: Update request status in dwc3_ep0_stall_restart\n usb: phy: mxs: remove CONFIG_USB_OTG condition for mxs_phy_is_otg_host()\n tick-sched: Fix idle and iowait sleeptime accounting vs CPU hotplug\n binder: fix unused alloc-\u003efree_async_space\n binder: fix race between mmput() and do_exit()\n xen-netback: don\u0027t produce zero-size SKB frags\n Revert \"ASoC: atmel: Remove system clock tree configuration for at91sam9g20ek\"\n Input: atkbd - use ab83 as id when skipping the getid command\n binder: fix use-after-free in shinker\u0027s callback\n binder: fix async space check for 0-sized buffers\n of: unittest: Fix of_count_phandle_with_args() expected value message\n of: Fix double free in of_parse_phandle_with_args_map\n mmc: sdhci_omap: Fix TI SoC dependencies\n clk: si5341: fix an error code problem in si5341_output_clk_set_rate\n watchdog: bcm2835_wdt: Fix WDIOC_SETTIMEOUT handling\n watchdog/hpwdt: Only claim UNKNOWN NMI if from iLO\n watchdog: set cdev owner before adding\n drivers: clk: zynqmp: calculate closest mux rate\n gpu/drm/radeon: fix two memleaks in radeon_vm_init\n drivers/amd/pm: fix a use-after-free in kv_parse_power_table\n drm/amd/pm: fix a double-free in si_dpm_init\n drm/amdgpu/debugfs: fix error code when smc register accessors are NULL\n media: dvbdev: drop refcount on error path in dvb_device_open()\n media: cx231xx: fix a memleak in cx231xx_init_isoc\n drm/bridge: tc358767: Fix return value on error case\n drm/radeon/trinity_dpm: fix a memleak in trinity_parse_power_table\n drm/radeon/dpm: fix a memleak in sumo_parse_power_table\n drm/radeon: check the alloc_workqueue return value in radeon_crtc_init()\n drm/drv: propagate errors from drm_modeset_register_all()\n drm/msm/dsi: Use pm_runtime_resume_and_get to prevent refcnt leaks\n drm/msm/mdp4: flush vblank event on disable\n ASoC: cs35l34: Fix GPIO name and drop legacy include\n ASoC: cs35l33: Fix GPIO name and drop legacy include\n drm/radeon: check return value of radeon_ring_lock()\n drm/radeon/r100: Fix integer overflow issues in r100_cs_track_check()\n drm/radeon/r600_cs: Fix possible int overflows in r600_cs_check_reg()\n f2fs: fix to avoid dirent corruption\n drm/bridge: Fix typo in post_disable() description\n media: pvrusb2: fix use after free on context disconnection\n RDMA/usnic: Silence uninitialized symbol smatch warnings\n ARM: davinci: always select CONFIG_CPU_ARM926T\n ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()\n Bluetooth: btmtkuart: fix recv_buf() return value\n Bluetooth: Fix bogus check for re-auth no supported with non-ssp\n netfilter: nf_tables: mark newset as dead on transaction abort\n wifi: rtlwifi: rtl8192se: using calculate_bit_shift()\n wifi: rtlwifi: rtl8192ee: using calculate_bit_shift()\n wifi: rtlwifi: rtl8192de: using calculate_bit_shift()\n rtlwifi: rtl8192de: make arrays static const, makes object smaller\n wifi: rtlwifi: rtl8192ce: using calculate_bit_shift()\n wifi: rtlwifi: rtl8192cu: using calculate_bit_shift()\n wifi: rtlwifi: rtl8192c: using calculate_bit_shift()\n wifi: rtlwifi: rtl8188ee: phy: using calculate_bit_shift()\n wifi: rtlwifi: add calculate_bit_shift()\n dma-mapping: clear dev-\u003edma_mem to NULL after freeing it\n virtio/vsock: fix logic which reduces credit update messages\n selftests/net: fix grep checking for fib_nexthop_multiprefix\n scsi: hisi_sas: Replace with standard error code return value\n arm64: dts: qcom: sdm845-db845c: correct LED panic indicator\n scsi: fnic: Return error if vmalloc() failed\n wifi: rtlwifi: rtl8821ae: phy: fix an undefined bitwise shift behavior\n rtlwifi: Use ffs in \u003cfoo\u003e_phy_calculate_bit_shift\n firmware: ti_sci: Fix an off-by-one in ti_sci_debugfs_create()\n net/ncsi: Fix netlink major/minor version numbers\n ncsi: internal.h: Fix a spello\n ARM: dts: qcom: apq8064: correct XOADC register address\n wifi: libertas: stop selecting wext\n bpf, lpm: Fix check prefixlen before walking trie\n wifi: rtw88: fix RX filter in FIF_ALLMULTI flag\n NFSv4.1/pnfs: Ensure we handle the error NFS4ERR_RETURNCONFLICT\n blocklayoutdriver: Fix reference leak of pnfs_device_node\n crypto: scomp - fix req-\u003edst buffer overflow\n crypto: sahara - do not resize req-\u003esrc when doing hash operations\n crypto: sahara - fix processing hash requests with req-\u003enbytes \u003c sg-\u003elength\n crypto: sahara - improve error handling in sahara_sha_process()\n crypto: sahara - fix wait_for_completion_timeout() error handling\n crypto: sahara - fix ahash reqsize\n crypto: virtio - Wait for tasklet to complete on device remove\n gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump\n pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()\n crypto: sahara - fix error handling in sahara_hw_descriptor_create()\n crypto: sahara - fix processing requests with cryptlen \u003c sg-\u003elength\n crypto: sahara - fix ahash selftest failure\n crypto: sahara - remove FLAGS_NEW_KEY logic\n crypto: af_alg - Disallow multiple in-flight AIO requests\n crypto: ccp - fix memleak in ccp_init_dm_workarea\n virtio_crypto: Introduce VIRTIO_CRYPTO_NOSPC\n crypto: virtio - don\u0027t use \u0027default m\u0027\n crypto: virtio - Handle dataq logic with tasklet\n selinux: Fix error priority for bind with AF_UNSPEC on PF_INET6 socket\n mtd: Fix gluebi NULL pointer dereference caused by ftl notifier\n spi: sh-msiof: Enforce fixed DTDL for R-Car H3\n calipso: fix memory leak in netlbl_calipso_add_pass()\n netlabel: remove unused parameter in netlbl_netlink_auditinfo()\n net: netlabel: Fix kerneldoc warnings\n ACPI: LPIT: Avoid u32 multiplication overflow\n ACPI: video: check for error while searching for backlight device parent\n mtd: rawnand: Increment IFC_TIMEOUT_MSECS for nand controller response\n powerpc/imc-pmu: Add a null pointer check in update_events_in_group()\n powerpc/powernv: Add a null pointer check in opal_powercap_init()\n powerpc/powernv: Add a null pointer check in opal_event_init()\n powerpc/powernv: Add a null pointer check to scom_debug_init_one()\n selftests/powerpc: Fix error handling in FPU/VMX preemption tests\n powerpc/pseries/memhp: Fix access beyond end of drmem array\n powerpc/pseries/memhotplug: Quieten some DLPAR operations\n powerpc/44x: select I2C for CURRITUCK\n powerpc: add crtsavres.o to always-y instead of extra-y\n EDAC/thunderx: Fix possible out-of-bounds string access\n x86/lib: Fix overflow when counting digits\n coresight: etm4x: Fix width of CCITMIN field\n parport: parport_serial: Add Brainboxes device IDs and geometry\n parport: parport_serial: Add Brainboxes BAR details\n uio: Fix use-after-free in uio_open\n binder: fix comment on binder_alloc_new_buf() return value\n binder: fix trivial typo of binder_free_buf_locked()\n binder: use EPOLLERR from eventpoll.h\n ACPI: resource: Add another DMI match for the TongFang GMxXGxx\n drm/crtc: fix uninitialized variable use\n ARM: sun9i: smp: fix return code check of of_property_match_string\n ida: Fix crash in ida_free when the bitmap is empty\n Input: xpad - add Razer Wolverine V2 support\n ARC: fix spare error\n s390/scm: fix virtual vs physical address confusion\n Input: i8042 - add nomux quirk for Acer P459-G2-M\n Input: atkbd - skip ATKBD_CMD_GETID in translated mode\n reset: hisilicon: hi6220: fix Wvoid-pointer-to-enum-cast warning\n ring-buffer: Do not record in NMI if the arch does not support cmpxchg in NMI\n tracing: Add size check when printing trace_marker output\n tracing: Have large events show up as \u0027[LINE TOO BIG]\u0027 instead of nothing\n neighbour: Don\u0027t let neigh_forced_gc() disable preemption for long\n drm/crtc: Fix uninit-value bug in drm_mode_setcrtc\n jbd2: correct the printing of write_flags in jbd2_write_superblock()\n clk: rockchip: rk3128: Fix HCLK_OTG gate register\n drm/exynos: fix a wrong error checking\n drm/exynos: fix a potential error pointer dereference\n nvme: introduce helper function to get ctrl state\n ASoC: da7219: Support low DC impedance headset\n net/tg3: fix race condition in tg3_reset_task()\n nouveau/tu102: flush all pdbs on vmm flush\n ASoC: rt5650: add mutex to avoid the jack detection failure\n ASoC: cs43130: Fix incorrect frame delay configuration\n ASoC: cs43130: Fix the position of const qualifier\n ASoC: Intel: Skylake: mem leak in skl register function\n ASoC: nau8822: Fix incorrect type in assignment and cast to restricted __be16\n ASoC: Intel: Skylake: Fix mem leak in few functions\n ALSA: hda - Fix speaker and headset mic pin config for CHUWI CoreBook XPro\n pinctrl: lochnagar: Don\u0027t build on MIPS\n f2fs: explicitly null-terminate the xattr list\n Revert \"ipv6: make ip6_rt_gc_expire an atomic_t\"\n Revert \"ipv6: remove max_size check inline with ipv4\"\n Linux 5.4.267\n ASoC: meson: codec-glue: fix pcm format cast warning\n ipv6: remove max_size check inline with ipv4\n ipv6: make ip6_rt_gc_expire an atomic_t\n net/dst: use a smaller percpu_counter batch for dst entries accounting\n PCI: Disable ATS for specific Intel IPU E2000 devices\n PCI: Extract ATS disabling to a helper function\n netfilter: nf_tables: Reject tables of unsupported family\n net: tls, update curr on splice as well\n ath10k: Get rid of \"per_ce_irq\" hw param\n ath10k: Keep track of which interrupts fired, don\u0027t poll them\n ath10k: Add interrupt summary based CE processing\n ath10k: Wait until copy complete is actually done before completing\n mmc: sdhci-sprd: Fix eMMC init failure after hw reset\n mmc: core: Cancel delayed work before releasing host\n mmc: rpmb: fixes pause retune on all RPMB partitions.\n mm: fix unmap_mapping_range high bits shift bug\n i2c: core: Fix atomic xfer check for non-preempt config\n firewire: ohci: suppress unexpected system reboot in AMD Ryzen machines and ASM108x/VT630x PCIe cards\n mm/memory-failure: check the mapcount of the precise page\n net: Implement missing SO_TIMESTAMPING_NEW cmsg support\n bnxt_en: Remove mis-applied code from bnxt_cfg_ntp_filters()\n asix: Add check for usbnet_get_endpoints\n net/qla3xxx: fix potential memleak in ql_alloc_buffer_queues\n net/qla3xxx: switch from \u0027pci_\u0027 to \u0027dma_\u0027 API\n i40e: Restore VF MSI-X state during PCI reset\n ASoC: meson: g12a-tohdmitx: Fix event generation for S/PDIF mux\n ASoC: meson: g12a-tohdmitx: Validate written enum values\n ASoC: meson: g12a: extract codec-to-codec utils\n i40e: fix use-after-free in i40e_aqc_add_filters()\n net: Save and restore msg_namelen in sock_sendmsg\n net: bcmgenet: Fix FCS generation for fragmented skbuffs\n ARM: sun9i: smp: Fix array-index-out-of-bounds read in sunxi_mc_smp_init\n net-timestamp: extend SOF_TIMESTAMPING_OPT_ID to HW timestamps\n can: raw: add support for SO_MARK\n can: raw: add support for SO_TXTIME/SCM_TXTIME\n net: sched: em_text: fix possible memory leak in em_text_destroy()\n i40e: Fix filter input checks to prevent config with invalid values\n nfc: llcp_core: Hold a ref to llcp_local-\u003edev when holding a ref to llcp_local\n ANDROID: db845c: Enable device tree overlay support\n Linux 5.4.266\n block: Don\u0027t invalidate pagecache for invalid falloc modes\n ring-buffer: Fix wake ups when buffer_percent is set to 100\n smb: client: fix OOB in smbCalcSize()\n usb: fotg210-hcd: delete an incorrect bounds test\n x86/alternatives: Sync core before enabling interrupts\n net: rfkill: gpio: set GPIO direction\n net: 9p: avoid freeing uninit memory in p9pdu_vreadf\n Bluetooth: hci_event: Fix not checking if HCI_OP_INQUIRY has been sent\n USB: serial: option: add Quectel RM500Q R13 firmware support\n USB: serial: option: add Foxconn T99W265 with new baseline\n USB: serial: option: add Quectel EG912Y module support\n USB: serial: ftdi_sio: update Actisense PIDs constant names\n wifi: cfg80211: fix certs build to not depend on file order\n wifi: cfg80211: Add my certificate\n iio: adc: ti_am335x_adc: Fix return value check of tiadc_request_dma()\n iio: common: ms_sensors: ms_sensors_i2c: fix humidity conversion time table\n scsi: bnx2fc: Fix skb double free in bnx2fc_rcv()\n Input: ipaq-micro-keys - add error handling for devm_kmemdup\n iio: imu: inv_mpu6050: fix an error code problem in inv_mpu6050_read_raw\n interconnect: Treat xlate() returning NULL node as an error\n btrfs: do not allow non subvolume root targets for snapshot\n smb: client: fix NULL deref in asn1_ber_decoder()\n ALSA: hda/hdmi: add force-connect quirk for NUC5CPYB\n ALSA: hda/hdmi: Add quirk to force pin connectivity on NUC10\n pinctrl: at91-pio4: use dedicated lock class for IRQ\n i2c: aspeed: Handle the coalesced stop conditions with the start conditions.\n afs: Fix overwriting of result of DNS query\n net: check dev-\u003egso_max_size in gso_features_check()\n net: warn if gso_type isn\u0027t set for a GSO SKB\n afs: Fix dynamic root lookup DNS check\n afs: Fix the dynamic root\u0027s d_delete to always delete unused dentries\n net: check vlan filter feature in vlan_vids_add_by_dev() and vlan_vids_del_by_dev()\n net/rose: fix races in rose_kill_by_device()\n ethernet: atheros: fix a memleak in atl1e_setup_ring_resources\n net: sched: ife: fix potential use-after-free\n net/mlx5e: Correct snprintf truncation handling for fw_version buffer used by representors\n net/mlx5: Fix fw tracer first block check\n net/mlx5: improve some comments\n Revert \"net/mlx5e: fix double free of encap_header\"\n wifi: mac80211: mesh_plink: fix matches_local logic\n s390/vx: fix save/restore of fpu kernel context\n reset: Fix crash when freeing non-existent optional resets\n ARM: OMAP2+: Fix null pointer dereference and memory leak in omap_soc_device_init\n ksmbd: fix wrong name of SMB2_CREATE_ALLOCATION_SIZE\n ALSA: hda/realtek: Enable headset on Lenovo M90 Gen5\n ANDROID: GKI: fix crc issue in include/net/addrconf.h\n Revert \"cred: switch to using atomic_long_t\"\n Linux 5.4.265\n powerpc/ftrace: Fix stack teardown in ftrace_no_trace\n powerpc/ftrace: Create a dummy stackframe to fix stack unwind\n mmc: block: Be sure to wait while busy in CQE error recovery\n ring-buffer: Fix memory leak of free page\n team: Fix use-after-free when an option instance allocation fails\n arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify\n ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS\n soundwire: stream: fix NULL pointer dereference for multi_link\n perf: Fix perf_event_validate_size() lockdep splat\n HID: hid-asus: add const to read-only outgoing usb buffer\n net: usb: qmi_wwan: claim interface 4 for ZTE MF290\n asm-generic: qspinlock: fix queued_spin_value_unlocked() implementation\n HID: multitouch: Add quirk for HONOR GLO-GXXX touchpad\n HID: hid-asus: reset the backlight brightness level on resume\n HID: add ALWAYS_POLL quirk for Apple kb\n platform/x86: intel_telemetry: Fix kernel doc descriptions\n bcache: avoid NULL checking to c-\u003eroot in run_cache_set()\n bcache: add code comments for bch_btree_node_get() and __bch_btree_node_alloc()\n bcache: avoid oversize memory allocation by small stripe_size\n blk-throttle: fix lockdep warning of \"cgroup_mutex or RCU read lock required!\"\n usb: aqc111: check packet for fixup for true limit\n Revert \"PCI: acpiphp: Reassign resources on bridge if necessary\"\n ALSA: hda/hdmi: add force-connect quirks for ASUSTeK Z170 variants\n cred: switch to using atomic_long_t\n appletalk: Fix Use-After-Free in atalk_ioctl\n net: stmmac: Handle disabled MDIO busses from devicetree\n net: stmmac: use dev_err_probe() for reporting mdio bus registration failure\n vsock/virtio: Fix unsigned integer wrap around in virtio_transport_has_space()\n sign-file: Fix incorrect return values check\n net: Remove acked SYN flag from packet in the transmit queue correctly\n qed: Fix a potential use-after-free in qed_cxt_tables_alloc\n net/rose: Fix Use-After-Free in rose_ioctl\n atm: Fix Use-After-Free in do_vcc_ioctl\n atm: solos-pci: Fix potential deadlock on \u0026tx_queue_lock\n atm: solos-pci: Fix potential deadlock on \u0026cli_queue_lock\n qca_spi: Fix reset behavior\n qca_debug: Fix ethtool -G iface tx behavior\n qca_debug: Prevent crash on TX ring changes\n net: ipv6: support reporting otherwise unknown prefix flags in RTM_NEWPREFIX\n afs: Fix refcount underflow from error handling race\n Revert \"psample: Require \u0027CAP_NET_ADMIN\u0027 when joining \"packets\" group\"\n Revert \"mmc: core: add helpers mmc_regulator_enable/disable_vqmmc\"\n Revert \"mmc: sdhci-sprd: Fix vqmmc not shutting down after the card was pulled\"\n Revert \"genetlink: add CAP_NET_ADMIN test for multicast bind\"\n Revert \"drop_monitor: Require \u0027CAP_SYS_ADMIN\u0027 when joining \"events\" group\"\n Revert \"perf/core: Add a new read format to get a number of lost samples\"\n Revert \"perf: Fix perf_event_validate_size()\"\n Revert \"hrtimers: Push pending hrtimers away from outgoing CPU earlier\"\n Linux 5.4.264\n devcoredump: Send uevent once devcd is ready\n devcoredump : Serialize devcd_del work\n smb: client: fix potential NULL deref in parse_dfs_referrals()\n cifs: Fix non-availability of dedup breaking generic/304\n Revert \"btrfs: add dmesg output for first mount and last unmount of a filesystem\"\n tools headers UAPI: Sync linux/perf_event.h with the kernel sources\n drop_monitor: Require \u0027CAP_SYS_ADMIN\u0027 when joining \"events\" group\n psample: Require \u0027CAP_NET_ADMIN\u0027 when joining \"packets\" group\n genetlink: add CAP_NET_ADMIN test for multicast bind\n netlink: don\u0027t call -\u003enetlink_bind with table lock held\n io_uring/af_unix: disable sending io_uring over sockets\n nilfs2: fix missing error check for sb_set_blocksize call\n KVM: s390/mm: Properly reset no-dat\n x86/CPU/AMD: Check vendor in the AMD microcode callback\n serial: 8250_omap: Add earlycon support for the AM654 UART controller\n serial: sc16is7xx: address RX timeout interrupt errata\n ARM: PL011: Fix DMA support\n usb: typec: class: fix typec_altmode_put_partner to put plugs\n parport: Add support for Brainboxes IX/UC/PX parallel cards\n usb: gadget: f_hid: fix report descriptor allocation\n mmc: sdhci-sprd: Fix vqmmc not shutting down after the card was pulled\n mmc: core: add helpers mmc_regulator_enable/disable_vqmmc\n gpiolib: sysfs: Fix error handling on failed export\n perf: Fix perf_event_validate_size()\n perf/core: Add a new read format to get a number of lost samples\n arm64: dts: mediatek: mt8173-evb: Fix regulator-fixed node names\n arm64: dts: mediatek: mt7622: fix memory node warning check\n packet: Move reference count in packet_sock to atomic_long_t\n tracing: Fix a possible race when disabling buffered events\n tracing: Fix incomplete locking when disabling buffered events\n tracing: Always update snapshot buffer size\n nilfs2: prevent WARNING in nilfs_sufile_set_segment_usage()\n ALSA: pcm: fix out-of-bounds in snd_pcm_state_names\n ARM: dts: imx7: Declare timers compatible with fsl,imx6dl-gpt\n ARM: dts: imx: make gpt node name generic\n ARM: imx: Check return value of devm_kasprintf in imx_mmdc_perf_init\n scsi: be2iscsi: Fix a memleak in beiscsi_init_wrb_handle()\n tracing: Fix a warning when allocating buffered events fails\n ASoC: wm_adsp: fix memleak in wm_adsp_buffer_populate\n hwmon: (acpi_power_meter) Fix 4.29 MW bug\n RDMA/bnxt_re: Correct module description string\n bpf: sockmap, updating the sg structure should also update curr\n tcp: do not accept ACK of bytes we never sent\n netfilter: xt_owner: Fix for unsafe access of sk-\u003esk_socket\n net: hns: fix fake link up on xge port\n ipv4: ip_gre: Avoid skb_pull() failure in ipgre_xmit()\n arcnet: restoring support for multiple Sohard Arcnet cards\n net: arcnet: com20020 fix error handling\n net: arcnet: Fix RESET flag handling\n hv_netvsc: rndis_filter needs to select NLS\n ipv6: fix potential NULL deref in fib6_add()\n of: dynamic: Fix of_reconfig_get_state_change() return value documentation\n of: Add missing \u0027Return\u0027 section in kerneldoc comments\n of: Fix kerneldoc output formatting\n of: base: Fix some formatting issues and provide missing descriptions\n of/irq: Make of_msi_map_rid() PCI bus agnostic\n of/irq: make of_msi_map_get_device_domain() bus agnostic\n of/iommu: Make of_map_rid() PCI agnostic\n ACPI/IORT: Make iort_msi_map_rid() PCI agnostic\n ACPI/IORT: Make iort_get_device_domain IRQ domain agnostic\n of: base: Add of_get_cpu_state_node() to get idle states for a CPU node\n drm/amdgpu: correct chunk_ptr to a pointer to chunk.\n kconfig: fix memory leak from range properties\n tg3: Increment tx_dropped in tg3_tso_bug()\n tg3: Move the [rt]x_dropped counters to tg3_napi\n netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test\n hrtimers: Push pending hrtimers away from outgoing CPU earlier\n Revert \"HID: core: store the unique system identifier in hid_device\"\n Revert \"HID: fix HID device resource race between HID core and debugging support\"\n Linux 5.4.263\n mmc: block: Retry commands in CQE error recovery\n mmc: core: convert comma to semicolon\n mmc: cqhci: Fix task clearing in CQE error recovery\n mmc: cqhci: Warn of halt or task clear failure\n mmc: cqhci: Increase recovery halt timeout\n cpufreq: imx6q: Don\u0027t disable 792 Mhz OPP unnecessarily\n cpufreq: imx6q: don\u0027t warn for disabling a non-existing frequency\n scsi: qla2xxx: Fix system crash due to bad pointer access\n scsi: qla2xxx: Use scsi_cmd_to_rq() instead of scsi_cmnd.request\n scsi: core: Introduce the scsi_cmd_to_rq() function\n scsi: qla2xxx: Simplify the code for aborting SCSI commands\n ima: detect changes to the backing overlay file\n ovl: skip overlayfs superblocks at global sync\n ima: annotate iint mutex to avoid lockdep false positive warnings\n fbdev: stifb: Make the STI next font pointer a 32-bit signed offset\n mtd: cfi_cmdset_0001: Byte swap OTP info\n mtd: cfi_cmdset_0001: Support the absence of protection registers\n s390/cmma: fix detection of DAT pages\n s390/mm: fix phys vs virt confusion in mark_kernel_pXd() functions family\n smb3: fix touch -h of symlink\n net: ravb: Start TX queues after HW initialization succeeded\n net: ravb: Use pm_runtime_resume_and_get()\n ravb: Fix races between ravb_tx_timeout_work() and net related ops\n net: stmmac: xgmac: Disable FPE MMC interrupts\n ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet\n Input: xpad - add HyperX Clutch Gladiate Support\n btrfs: make error messages more clear when getting a chunk map\n btrfs: send: ensure send_fd is writable\n btrfs: fix off-by-one when checking chunk map includes logical address\n btrfs: add dmesg output for first mount and last unmount of a filesystem\n powerpc: Don\u0027t clobber f0/vs0 during fp|altivec register save\n bcache: revert replacing IS_ERR_OR_NULL with IS_ERR\n dm verity: don\u0027t perform FEC for failed readahead IO\n dm-verity: align struct dm_verity_fec_io properly\n ALSA: hda/realtek: Add supported ALC257 for ChromeOS\n ALSA: hda/realtek: Headset Mic VREF to 100%\n ALSA: hda: Disable power-save on KONTRON SinglePC\n mmc: block: Do not lose cache flush during CQE error recovery\n firewire: core: fix possible memory leak in create_units()\n pinctrl: avoid reload of p state in list iteration\n io_uring: fix off-by one bvec index\n USB: dwc3: qcom: fix wakeup after probe deferral\n USB: dwc3: qcom: fix resource leaks on probe deferral\n usb: dwc3: set the dma max_seg_size\n USB: dwc2: write HCINT with INTMASK applied\n USB: serial: option: don\u0027t claim interface 4 for ZTE MF290\n USB: serial: option: fix FM101R-GL defines\n USB: serial: option: add Fibocom L7xx modules\n bcache: prevent potential division by zero error\n bcache: check return value from btree_node_alloc_replacement()\n dm-delay: fix a race between delay_presuspend and delay_bio\n hv_netvsc: Mark VF as slave before exposing it to user-mode\n hv_netvsc: Fix race of register_netdevice_notifier and VF register\n USB: serial: option: add Luat Air72*U series products\n s390/dasd: protect device queue against concurrent access\n bcache: replace a mistaken IS_ERR() by IS_ERR_OR_NULL() in btree_gc_coalesce()\n ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CVA\n KVM: arm64: limit PMU version to PMUv3 for ARMv8.1\n arm64: cpufeature: Extract capped perfmon fields\n ext4: make sure allocate pending entry not fail\n ext4: fix slab-use-after-free in ext4_es_insert_extent()\n ext4: using nofail preallocation in ext4_es_insert_extent()\n ext4: using nofail preallocation in ext4_es_insert_delayed_block()\n ext4: using nofail preallocation in ext4_es_remove_extent()\n ext4: use pre-allocated es in __es_remove_extent()\n ext4: use pre-allocated es in __es_insert_extent()\n ext4: factor out __es_alloc_extent() and __es_free_extent()\n ext4: add a new helper to check if es must be kept\n MIPS: KVM: Fix a build warning about variable set but not used\n nvmet: nul-terminate the NQNs passed in the connect command\n nvmet: remove unnecessary ctrl parameter\n afs: Fix file locking on R/O volumes to operate in local mode\n afs: Return ENOENT if no cell DNS record can be found\n net: axienet: Fix check for partial TX checksum\n amd-xgbe: propagate the correct speed and duplex status\n amd-xgbe: handle the corner-case during tx completion\n amd-xgbe: handle corner-case during sfp hotplug\n arm/xen: fix xen_vcpu_info allocation alignment\n net: usb: ax88179_178a: fix failed operations during ax88179_reset\n ipv4: Correct/silence an endian warning in __ip_do_redirect\n HID: fix HID device resource race between HID core and debugging support\n HID: core: store the unique system identifier in hid_device\n drm/rockchip: vop: Fix color for RGB888/BGR888 format on VOP full\n ata: pata_isapnp: Add missing error check for devm_ioport_map()\n drm/panel: simple: Fix Innolux G101ICE-L01 timings\n drm/panel: simple: Fix Innolux G101ICE-L01 bus flags\n afs: Make error on cell lookup failure consistent with OpenAFS\n PCI: keystone: Drop __init from ks_pcie_add_pcie_{ep,port}()\n RDMA/irdma: Prevent zero-length STAG registration\n driver core: Release all resources during unbind before updating device links\n ANDROID: GKI: db845c: Update symbols list and ABI on rpmsg_register_device_override\n Revert \"tracing: Have trace_event_file have ref counters\"\n Linux 5.4.262\n netfilter: nf_tables: bogus EBUSY when deleting flowtable after flush (for 5.4)\n netfilter: nf_tables: disable toggling dormant table state more than once\n netfilter: nf_tables: fix table flag updates\n netfilter: nftables: update table flags from the commit phase\n netfilter: nf_tables: double hook unregistration in netns path\n netfilter: nf_tables: unregister flowtable hooks on netns exit\n netfilter: nf_tables: fix memleak when more than 255 elements expired\n netfilter: nft_set_hash: try later when GC hits EAGAIN on iteration\n netfilter: nft_set_rbtree: use read spinlock to avoid datapath contention\n netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction\n netfilter: nf_tables: defer gc run if previous batch is still pending\n netfilter: nf_tables: use correct lock to protect gc_list\n netfilter: nf_tables: GC transaction race with abort path\n netfilter: nf_tables: GC transaction race with netns dismantle\n netfilter: nf_tables: fix GC transaction races with netns and netlink event exit path\n netfilter: nf_tables: remove busy mark and gc batch API\n netfilter: nft_set_hash: mark set element as dead when deleting from packet path\n netfilter: nf_tables: adapt set backend to use GC transaction API\n netfilter: nf_tables: GC transaction API to avoid race with control plane\n netfilter: nf_tables: don\u0027t skip expired elements during walk\n netfilter: nft_set_rbtree: fix overlap expiration walk\n netfilter: nft_set_rbtree: fix null deref on element insertion\n netfilter: nft_set_rbtree: Switch to node list walk for overlap detection\n netfilter: nf_tables: drop map element references from preparation phase\n netfilter: nftables: rename set element data activation/deactivation functions\n netfilter: nf_tables: pass context to nft_set_destroy()\n tracing: Have trace_event_file have ref counters\n drm/amdgpu: fix error handling in amdgpu_bo_list_get()\n ext4: remove gdb backup copy for meta bg in setup_new_flex_group_blocks\n ext4: correct the start block of counting reserved clusters\n ext4: correct return value of ext4_convert_meta_bg\n ext4: correct offset of gdb backup in non meta_bg group to update_backups\n ext4: apply umask if ACL support is disabled\n Revert \"net: r8169: Disable multicast filter for RTL8168H and RTL8107E\"\n nfsd: fix file memleak on client_opens_release\n media: venus: hfi: add checks to handle capabilities from firmware\n media: venus: hfi: fix the check to handle session buffer requirement\n media: venus: hfi_parser: Add check to keep the number of codecs within range\n media: sharp: fix sharp encoding\n media: lirc: drop trailing space from scancode transmit\n i2c: i801: fix potential race in i801_block_transaction_byte_by_byte\n net: dsa: lan9303: consequently nested-lock physical MDIO\n Revert ncsi: Propagate carrier gain/loss events to the NCSI controller\n Bluetooth: btusb: Add 0bda:b85b for Fn-Link RTL8852BE\n Bluetooth: btusb: Add RTW8852BE device 13d3:3570 to device tables\n bluetooth: Add device 13d3:3571 to device tables\n bluetooth: Add device 0bda:887b to device tables\n Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0cb8:0xc559\n Bluetooth: btusb: add Realtek 8822CE to usb_device_id table\n Bluetooth: btusb: Add flag to define wideband speech capability\n tty: serial: meson: fix hard LOCKUP on crtscts mode\n serial: meson: Use platform_get_irq() to get the interrupt\n tty: serial: meson: retrieve port FIFO size from DT\n serial: meson: remove redundant initialization of variable id\n ALSA: hda/realtek - Enable internal speaker of ASUS K6500ZC\n ALSA: info: Fix potential deadlock at disconnection\n parisc/pgtable: Do not drop upper 5 address bits of physical address\n parisc: Prevent booting 64-bit kernels on PA1.x machines\n i3c: master: cdns: Fix reading status register\n mm/cma: use nth_page() in place of direct struct page manipulation\n dmaengine: stm32-mdma: correct desc prep when channel running\n mcb: fix error handling for different scenarios when parsing\n i2c: core: Run atomic i2c xfer when !preemptible\n kernel/reboot: emergency_restart: Set correct system_state\n quota: explicitly forbid quota files from being encrypted\n jbd2: fix potential data lost in recovering journal raced with synchronizing fs bdev\n btrfs: don\u0027t arbitrarily slow down delalloc if we\u0027re committing\n PM: hibernate: Clean up sync_read handling in snapshot_write_next()\n PM: hibernate: Use __get_safe_page() rather than touching the list\n mmc: vub300: fix an error code\n clk: qcom: ipq8074: drop the CLK_SET_RATE_PARENT flag from PLL clocks\n parisc/pdc: Add width field to struct pdc_model\n PCI: keystone: Don\u0027t discard .probe() callback\n PCI: keystone: Don\u0027t discard .remove() callback\n genirq/generic_chip: Make irq_remove_generic_chip() irqdomain aware\n mmc: meson-gx: Remove setting of CMD_CFG_ERROR\n ACPI: resource: Do IRQ override on TongFang GMxXGxx\n PCI/sysfs: Protect driver\u0027s D3cold preference from user space\n hvc/xen: fix error path in xen_hvc_init() to always register frontend driver\n audit: don\u0027t WARN_ON_ONCE(!current-\u003emm) in audit_exe_compare()\n audit: don\u0027t take task_lock() in audit_exe_compare() code path\n KVM: x86: Ignore MSR_AMD64_TW_CFG access\n KVM: x86: hyper-v: Don\u0027t auto-enable stimer on write from user-space\n x86/cpu/hygon: Fix the CPU topology evaluation for real\n scsi: megaraid_sas: Increase register read retry rount from 3 to 30 for selected registers\n bpf: Fix precision tracking for BPF_ALU | BPF_TO_BE | BPF_END\n randstruct: Fix gcc-plugin performance mode to stay in group\n media: venus: hfi: add checks to perform sanity on queue pointers\n cifs: spnego: add \u0027;\u0027 in HOST_KEY_LEN\n tools/power/turbostat: Fix a knl bug\n macvlan: Don\u0027t propagate promisc change to lower dev in passthru\n net/mlx5e: Check return value of snprintf writing to fw_version buffer for representors\n net/mlx5_core: Clean driver version and name\n net/mlx5e: fix double free of encap_header\n net: stmmac: fix rx budget limit check\n net: stmmac: Rework stmmac_rx()\n netfilter: nf_conntrack_bridge: initialize err to 0\n net: ethernet: cortina: Fix MTU max setting\n net: ethernet: cortina: Handle large frames\n net: ethernet: cortina: Fix max RX frame define\n bonding: stop the device in bond_setup_by_slave()\n ptp: annotate data-race around q-\u003ehead and q-\u003etail\n xen/events: fix delayed eoi list handling\n ppp: limit MRU to 64K\n tipc: Fix kernel-infoleak due to uninitialized TLV value\n net: hns3: fix variable may not initialized problem in hns3_init_mac_addr()\n tty: Fix uninit-value access in ppp_sync_receive()\n ipvlan: add ipvlan_route_v6_outbound() helper\n NFSv4.1: fix SP4_MACH_CRED protection for pnfs IO\n wifi: iwlwifi: Use FW rate for non-data frames\n pwm: Fix double shift bug\n ASoC: ti: omap-mcbsp: Fix runtime PM underflow warnings\n kgdb: Flush console before entering kgdb on panic\n drm/amd/display: Avoid NULL dereference of timing generator\n media: cobalt: Use FIELD_GET() to extract Link Width\n gfs2: ignore negated quota changes\n media: vivid: avoid integer overflow\n media: gspca: cpia1: shift-out-of-bounds in set_flicker\n i2c: sun6i-p2wi: Prevent potential division by zero\n usb: gadget: f_ncm: Always set current gadget in ncm_bind()\n tty: vcc: Add check for kstrdup() in vcc_probe()\n HID: Add quirk for Dell Pro Wireless Keyboard and Mouse KM5221W\n scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()\n atm: iphase: Do PCI error checks on own line\n PCI: tegra194: Use FIELD_GET()/FIELD_PREP() with Link Width fields\n ALSA: hda: Fix possible null-ptr-deref when assigning a stream\n ARM: 9320/1: fix stack depot IRQ stack filter\n jfs: fix array-index-out-of-bounds in diAlloc\n jfs: fix array-index-out-of-bounds in dbFindLeaf\n fs/jfs: Add validity check for db_maxag and db_agpref\n fs/jfs: Add check for negative db_l2nbperpage\n RDMA/hfi1: Use FIELD_GET() to extract Link Width\n crypto: pcrypt - Fix hungtask for PADATA_RESET\n selftests/efivarfs: create-read: fix a resource leak\n drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL\n drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga\n drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7\n drm/komeda: drop all currently held locks if deadlock happens\n platform/x86: thinkpad_acpi: Add battery quirk for Thinkpad X120e\n Bluetooth: Fix double free in hci_conn_cleanup\n wifi: ath10k: Don\u0027t touch the CE interrupt registers after power up\n net: annotate data-races around sk-\u003esk_dst_pending_confirm\n net: annotate data-races around sk-\u003esk_tx_queue_mapping\n wifi: ath10k: fix clang-specific fortify warning\n wifi: ath9k: fix clang-specific fortify warnings\n wifi: mac80211: don\u0027t return unset power in ieee80211_get_tx_power()\n wifi: mac80211_hwsim: fix clang-specific fortify warning\n x86/mm: Drop the 4 MB restriction on minimal NUMA node memory size\n clocksource/drivers/timer-atmel-tcb: Fix initialization on SAM9 hardware\n clocksource/drivers/timer-imx-gpt: Fix potential memory leak\n perf/core: Bail out early if the request AUX area is out of bound\n locking/ww_mutex/test: Fix potential workqueue corruption\n Revert \"inet: shrink struct flowi_common\"\n Revert \"ipvlan: properly track tx_errors\"\n ANDROID: fix up rpmsg_device ABI break\n ANDROID: fix up platform_device ABI break\n Linux 5.4.261\n btrfs: use u64 for buffer sizes in the tree search ioctls\n Revert \"mmc: core: Capture correct oemid-bits for eMMC cards\"\n fbdev: fsl-diu-fb: mark wr_reg_wa() static\n fbdev: imsttfb: fix a resource leak in probe\n fbdev: imsttfb: Fix error path of imsttfb_probe()\n spi: spi-zynq-qspi: add spi-mem to driver kconfig dependencies\n drm/syncobj: fix DRM_SYNCOBJ_WAIT_FLAGS_WAIT_AVAILABLE\n netfilter: nat: fix ipv6 nat redirect with mapped and scoped addresses\n netfilter: nft_redir: use `struct nf_nat_range2` throughout and deduplicate eval call-backs\n netfilter: xt_recent: fix (increase) ipv6 literal buffer length\n r8169: respect userspace disabling IFF_MULTICAST\n tg3: power down device only on SYSTEM_POWER_OFF\n net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT\n net: stmmac: xgmac: Enable support for multiple Flexible PPS outputs\n Fix termination state for idr_for_each_entry_ul()\n net: r8169: Disable multicast filter for RTL8168H and RTL8107E\n dccp/tcp: Call security_inet_conn_request() after setting IPv6 addresses.\n dccp: Call security_inet_conn_request() after setting IPv4 addresses.\n inet: shrink struct flowi_common\n tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING\n llc: verify mac len before reading mac header\n Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()\n pwm: brcmstb: Utilize appropriate clock APIs in suspend/resume\n pwm: sti: Reduce number of allocations and drop usage of chip_data\n pwm: sti: Avoid conditional gotos\n regmap: prevent noinc writes from clobbering cache\n media: dvb-usb-v2: af9035: fix missing unlock\n media: s3c-camif: Avoid inappropriate kfree()\n media: bttv: fix use after free error due to btv-\u003etimeout timer\n pcmcia: ds: fix possible name leak in error path in pcmcia_device_add()\n pcmcia: ds: fix refcount leak in pcmcia_device_add()\n pcmcia: cs: fix possible hung task and memory leak pccardd()\n rtc: pcf85363: fix wrong mask/val parameters in regmap_update_bits call\n i3c: Fix potential refcount leak in i3c_master_register_new_i3c_devs\n powerpc/pseries: fix potential memory leak in init_cpu_associativity()\n powerpc/imc-pmu: Use the correct spinlock initializer.\n powerpc/xive: Fix endian conversion size\n modpost: fix tee MODULE_DEVICE_TABLE built on big-endian host\n f2fs: fix to initialize map.m_pblk in f2fs_precache_extents()\n dmaengine: pxa_dma: Remove an erroneous BUG_ON() in pxad_free_desc()\n USB: usbip: fix stub_dev hub disconnect\n tools: iio: iio_generic_buffer ensure alignment\n tools: iio: iio_generic_buffer: Fix some integer type and calculation\n tools: iio: privatize globals and functions in iio_generic_buffer.c file\n misc: st_core: Do not call kfree_skb() under spin_lock_irqsave()\n dmaengine: ti: edma: handle irq_of_parse_and_map() errors\n usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency\n tty: tty_jobctrl: fix pid memleak in disassociate_ctty()\n leds: trigger: ledtrig-cpu:: Fix \u0027output may be truncated\u0027 issue for \u0027cpu\u0027\n ledtrig-cpu: Limit to 8 CPUs\n leds: pwm: Don\u0027t disable the PWM when the LED should be off\n leds: pwm: convert to atomic PWM API\n leds: pwm: simplify if condition\n mfd: dln2: Fix double put in dln2_probe\n ASoC: ams-delta.c: use component after check\n ASoC: Intel: Skylake: Fix mem leak when parsing UUIDs fails\n sh: bios: Revive earlyprintk support\n RDMA/hfi1: Workaround truncation compilation error\n scsi: ufs: core: Leave space for \u0027\\0\u0027 in utf8 desc string\n ext4: move \u0027ix\u0027 sanity check to corrent position\n ARM: 9321/1: memset: cast the constant byte to unsigned char\n hid: cp2112: Fix duplicate workqueue initialization\n HID: cp2112: Use irqchip template\n crypto: caam/jr - fix Chacha20 + Poly1305 self test failure\n crypto: caam/qi2 - fix Chacha20 + Poly1305 self test failure\n nd_btt: Make BTT lanes preemptible\n sched/rt: Provide migrate_disable/enable() inlines\n libnvdimm/of_pmem: Use devm_kstrdup instead of kstrdup and check its return value\n hwrng: geode - fix accessing registers\n clk: scmi: Free scmi_clk allocated when the clocks with invalid info are skipped\n firmware: ti_sci: Mark driver as non removable\n firmware: ti_sci: Replace HTTP links with HTTPS ones\n soc: qcom: llcc: Handle a second device without data corruption\n soc: qcom: Rename llcc-slice to llcc-qcom\n soc: qcom: llcc cleanup to get rid of sdm845 specific driver file\n ARM: dts: qcom: mdm9615: populate vsdcc fixed regulator\n arm64: dts: qcom: sdm845-mtp: fix WiFi configuration\n drm/rockchip: cdn-dp: Fix some error handling paths in cdn_dp_probe()\n drm/radeon: possible buffer overflow\n drm/rockchip: vop: Fix call to crtc reset helper\n drm/rockchip: vop: Fix reset of state in duplicate state crtc funcs\n hwmon: (coretemp) Fix potentially truncated sysfs attribute name\n platform/x86: wmi: Fix opening of char device\n platform/x86: wmi: remove unnecessary initializations\n platform/x86: wmi: Fix probe failure when failing to register WMI devices\n clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data\n clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data\n clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data\n clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data\n clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data\n clk: npcm7xx: Fix incorrect kfree\n clk: keystone: pll: fix a couple NULL vs IS_ERR() checks\n clk: imx: Select MXC_CLK for CLK_IMX8QXP\n clk: qcom: gcc-sm8150: Fix gcc_sdcc2_apps_clk_src\n clk: qcom: gcc-sm8150: use ARRAY_SIZE instead of specifying num_parents\n clk: qcom: clk-rcg2: Fix clock rate overflow for high parent frequencies\n regmap: debugfs: Fix a erroneous check after snprintf()\n ipvlan: properly track tx_errors\n net: add DEV_STATS_READ() helper\n ipv6: avoid atomic fragment on GSO packets\n ACPI: sysfs: Fix create_pnp_modalias() and create_of_modalias()\n tcp: fix cookie_init_timestamp() overflows\n tcp: Remove one extra ktime_get_ns() from cookie_init_timestamp\n chtls: fix tp-\u003ercv_tstamp initialization\n r8169: fix rare issue with broken rx after link-down on RTL8125\n r8169: use tp_to_dev instead of open code\n thermal: core: prevent potential string overflow\n can: dev: can_restart(): fix race condition between controller restart and netif_carrier_on()\n can: dev: can_restart(): don\u0027t crash kernel if carrier is OK\n wifi: rtlwifi: fix EDCA limit set by BT coexistence\n tcp_metrics: do not create an entry from tcp_init_metrics()\n tcp_metrics: properly set tp-\u003esnd_ssthresh in tcp_init_metrics()\n tcp_metrics: add missing barriers on delete\n wifi: mt76: mt7603: rework/fix rx pse hang check\n wifi: rtw88: debug: Fix the NULL vs IS_ERR() bug for debugfs_create_file()\n tcp: call tcp_try_undo_recovery when an RTOd TFO SYNACK is ACKed\n i40e: fix potential memory leaks in i40e_remove()\n genirq/matrix: Exclude managed interrupts in irq_matrix_allocated()\n vfs: fix readahead(2) on block devices\n Linux 5.4.260\n tty: 8250: Add support for Intashield IS-100\n tty: 8250: Add support for Brainboxes UP cards\n tty: 8250: Add support for additional Brainboxes UC cards\n tty: 8250: Remove UC-257 and UC-431\n usb: storage: set 1.50 as the lower bcdDevice for older \"Super Top\" compatibility\n PCI: Prevent xHCI driver from claiming AMD VanGogh USB3 DRD device\n Revert \"ARM: dts: Move am33xx and am43xx mmc nodes to sdhci-omap driver\"\n nvmet-tcp: Fix a possible UAF in queue intialization setup\n nvmet-tcp: move send/recv error handling in the send/recv methods instead of call-sites\n remove the sx8 block driver\n ata: ahci: fix enum constants for gcc-13\n net: chelsio: cxgb4: add an error code check in t4_load_phy_fw\n platform/mellanox: mlxbf-tmfifo: Fix a warning message\n platform/x86: asus-wmi: Change ASUS_WMI_BRN_DOWN code from 0x20 to 0x2e\n scsi: mpt3sas: Fix in error path\n fbdev: uvesafb: Call cn_del_callback() at the end of uvesafb_exit()\n ASoC: rt5650: fix the wrong result of key button\n netfilter: nfnetlink_log: silence bogus compiler warning\n spi: npcm-fiu: Fix UMA reads when dummy.nbytes \u003d\u003d 0\n fbdev: atyfb: only use ioremap_uc() on i386 and ia64\n Input: synaptics-rmi4 - handle reset delay when using SMBus trsnsport\n dmaengine: ste_dma40: Fix PM disable depth imbalance in d40_probe\n irqchip/stm32-exti: add missing DT IRQ flag translation\n Input: i8042 - add Fujitsu Lifebook E5411 to i8042 quirk table\n x86: Fix .brk attribute in linker script\n rpmsg: Fix possible refcount leak in rpmsg_register_device_override()\n rpmsg: glink: Release driver_override\n rpmsg: Fix calling device_lock() on non-initialized device\n rpmsg: Fix kfree() of static memory on setting driver_override\n rpmsg: Constify local variable in field store macro\n driver: platform: Add helper for safer setting of driver_override\n ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow\n ext4: avoid overlapping preallocations due to overflow\n ext4: add two helper functions extent_logical_end() and pa_logical_end()\n x86/mm: Fix RESERVE_BRK() for older binutils\n x86/mm: Simplify RESERVE_BRK()\n nfsd: lock_rename() needs both directories to live on the same fs\n f2fs: fix to do sanity check on inode type during garbage collection\n smbdirect: missing rc checks while waiting for rdma events\n kobject: Fix slab-out-of-bounds in fill_kobj_path()\n arm64: fix a concurrency issue in emulation_proc_handler()\n drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()\n x86/i8259: Skip probing when ACPI/MADT advertises PCAT compatibility\n i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR\n clk: Sanitize possible_parent_show to Handle Return Value of of_clk_get_parent_name\n perf/core: Fix potential NULL deref\n nvmem: imx: correct nregs for i.MX6UL\n nvmem: imx: correct nregs for i.MX6SLL\n nvmem: imx: correct nregs for i.MX6ULL\n i2c: aspeed: Fix i2c bus hang in slave read\n i2c: stm32f7: Fix PEC handling in case of SMBUS transfers\n i2c: muxes: i2c-demux-pinctrl: Use of_get_i2c_adapter_by_node()\n i2c: muxes: i2c-mux-gpmux: Use of_get_i2c_adapter_by_node()\n i2c: muxes: i2c-mux-pinctrl: Use of_get_i2c_adapter_by_node()\n iio: exynos-adc: request second interupt only when touchscreen mode is used\n gtp: fix fragmentation needed check with gso\n gtp: uapi: fix GTPA_MAX\n tcp: fix wrong RTO timeout when received SACK reneging\n r8152: Cancel hw_phy_work if we have an error in probe\n r8152: Run the unload routine if we have errors during probe\n r8152: Increase USB control msg timeout to 5000ms as per spec\n net: ieee802154: adf7242: Fix some potential buffer overflow in adf7242_stats_show()\n igc: Fix ambiguity in the ethtool advertising\n neighbour: fix various data-races\n igb: Fix potential memory leak in igb_add_ethtool_nfc_entry\n treewide: Spelling fix in comment\n r8169: fix the KCSAN reported data race in rtl_rx while reading desc-\u003eopts1\n r8169: fix the KCSAN reported data-race in rtl_tx while reading TxDescArray[entry].opts1\n virtio-mmio: fix memory leak of vm_dev\n virtio_balloon: Fix endless deflation and inflation on arm64\n mcb-lpc: Reallocate memory region to avoid memory overlapping\n mcb: Return actual parsed size when reading chameleon table\n selftests/ftrace: Add new test case which checks non unique symbol\n mtd: rawnand: marvell: Ensure program page operations are successful\n\n Conflicts:\n\tdrivers/clk/qcom/gcc-sm8150.c\n\tdrivers/net/ethernet/stmicro/stmmac/stmmac_main.c\n\tdrivers/soc/qcom/Kconfig\n\tdrivers/soc/qcom/Makefile\n\tdrivers/soc/qcom/llcc-qcom.c\n\tdrivers/usb/dwc3/core.c\n\tdrivers/usb/gadget/function/f_ncm.c\n\tinclude/linux/soc/qcom/llcc-qcom.h\n\tinclude/net/netfilter/nf_tables.h\n\tmm/memory-failure.c\n\tnet/netfilter/nf_tables_api.c\n\tnet/netfilter/nft_set_hash.c\n\tnet/netfilter/nft_set_rbtree.c\n\n Notes:\n\n * Dropped the following upstream commits:\n\t813fddd | AOSP soc: qcom: Rename llcc-slice to llcc-qcom\n\t0770107 | AOSP soc: qcom: llcc cleanup to get rid of sdm845 specific driver file\n\nChange-Id: Id31af0559be59eccc0cd242940754292baed09f7\n" }, { "commit": "079b43b82507d9e48784043c72903ee43c0dc130", "tree": "dc5a91a305ded34e2667d02b10072695135afac3", "parents": [ "bd73268ecf6737510680ab8467d515e565108bda", "70db018a109f8ff0106a193be649d741389d1f69" ], "author": { "name": "kamasali Satyanarayan", "email": "quic_kamasali@quicinc.com", "time": "Tue Jan 09 13:07:24 2024 +0530" }, "committer": { "name": "Kamasali Satyanarayan", "email": "quic_kamasali@quicinc.com", "time": "Wed Jan 31 01:01:26 2024 -0800" }, "message": "Merge android11-5.4.259+ (70db018) into msm-5.4\n\n* remotes/origin/tmp-70db018:\n UPSTREAM: ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet\n ANDROID: Snapshot Mainline\u0027s version of checkpatch.pl\n UPSTREAM: nvmet-tcp: Fix a possible UAF in queue intialization setup\n UPSTREAM: nvmet-tcp: move send/recv error handling in the send/recv methods instead of call-sites\n\nConflicts:\n\tscripts/checkpatch.pl\n\nChange-Id: I28aaacd0fb6478ade935672027760efce65a7911\nSigned-off-by: kamasali Satyanarayan \u003cquic_kamasali@quicinc.com\u003e\n" }, { "commit": "b976c2c4388ed7252c3732434981e751cbfd5617", "tree": "fd5039ac7bb6021935c7161cf0f92f5737454915", "parents": [ "1d0ac46c5ec4717925c0e9dd7521122d7dbdb2e2", "70db018a109f8ff0106a193be649d741389d1f69" ], "author": { "name": "Bruno Martins", "email": "bgcngm@gmail.com", "time": "Tue Jan 09 14:50:44 2024 +0000" }, "committer": { "name": "Bruno Martins", "email": "bgcngm@gmail.com", "time": "Tue Jan 09 14:50:44 2024 +0000" }, "message": "Merge tag \u0027ASB-2024-01-05_11-5.4\u0027 of https://android.googlesource.com/kernel/common into android13-5.4-lahaina\n\nhttps://source.android.com/docs/security/bulletin/2024-01-01\n\n* tag \u0027ASB-2024-01-05_11-5.4\u0027 of https://android.googlesource.com/kernel/common:\n UPSTREAM: ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet\n ANDROID: Snapshot Mainline\u0027s version of checkpatch.pl\n UPSTREAM: nvmet-tcp: Fix a possible UAF in queue intialization setup\n UPSTREAM: nvmet-tcp: move send/recv error handling in the send/recv methods instead of call-sites\n UPSTREAM: netfilter: nf_tables: remove busy mark and gc batch API\n UPSTREAM: netfilter: nft_set_hash: mark set element as dead when deleting from packet path\n UPSTREAM: netfilter: nf_tables: adapt set backend to use GC transaction API\n UPSTREAM: netfilter: nf_tables: GC transaction API to avoid race with control plane\n UPSTREAM: netfilter: nft_set_rbtree: fix overlap expiration walk\n UPSTREAM: netfilter: nft_set_rbtree: fix null deref on element insertion\n UPSTREAM: netfilter: nft_set_rbtree: Switch to node list walk for overlap detection\n UPSTREAM: netfilter: nf_tables: drop map element references from preparation phase\n UPSTREAM: netfilter: nftables: rename set element data activation/deactivation functions\n\n Conflicts:\n\tscripts/checkpatch.pl\n\nChange-Id: I2d2a3adcb627da605dd3a6a40c724bd7fb8115c5\n" }, { "commit": "80118b745cc517f3a49185871662e64e27bfddd5", "tree": "f119e624b2a1982dbd4a43caf0e484a0c1c6809b", "parents": [ "70db018a109f8ff0106a193be649d741389d1f69", "e2be513380ebd46295e5744eaf0f3d63b9341eb5" ], "author": { "name": "Greg Kroah-Hartman", "email": "gregkh@google.com", "time": "Tue Jan 09 13:25:41 2024 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@google.com", "time": "Tue Jan 09 13:26:54 2024 +0000" }, "message": "Merge tag \u0027android11-5.4.265_r00\u0027 into branch \u0027android11-5.4\u0027\n\nThis merges the changes up to the 5.4.265 LTS release into the\nandroid11-5.4 branch. It contains the following individual commits:\n\n* e2be513380eb ANDROID: GKI: fix crc issue in include/net/addrconf.h\n* 3c4b111a71f8 Revert \"cred: switch to using atomic_long_t\"\n* 5158e9afed27 Merge 5.4.265 into android11-5.4-lts\n|\\\n| * 2d21f73b2f16 Linux 5.4.265\n| * 5c70542f32af powerpc/ftrace: Fix stack teardown in ftrace_no_trace\n| * 0e1867b482b4 powerpc/ftrace: Create a dummy stackframe to fix stack unwind\n| * 9395c04666cc mmc: block: Be sure to wait while busy in CQE error recovery\n| * 3b8b2c5d7675 ring-buffer: Fix memory leak of free page\n| * 3459c9aa6495 team: Fix use-after-free when an option instance allocation fails\n| * 363a67ef3ada arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify\n| * de8ada02369e ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS\n| * f451d6784ba6 soundwire: stream: fix NULL pointer dereference for multi_link\n| * 404902216b88 perf: Fix perf_event_validate_size() lockdep splat\n| * 4109d9a855f2 HID: hid-asus: add const to read-only outgoing usb buffer\n| * 1fc4091991c5 net: usb: qmi_wwan: claim interface 4 for ZTE MF290\n| * 88ceaf8e2c61 asm-generic: qspinlock: fix queued_spin_value_unlocked() implementation\n| * 91175d6fe505 HID: multitouch: Add quirk for HONOR GLO-GXXX touchpad\n| * 1f94c0d60d81 HID: hid-asus: reset the backlight brightness level on resume\n| * e9a3cd3dcf3f HID: add ALWAYS_POLL quirk for Apple kb\n| * 395ad0baa4c1 platform/x86: intel_telemetry: Fix kernel doc descriptions\n| * af509912cd7c bcache: avoid NULL checking to c-\u003eroot in run_cache_set()\n| * 356ae9de79b7 bcache: add code comments for bch_btree_node_get() and __bch_btree_node_alloc()\n| * ca4b00c6cb3d bcache: avoid oversize memory allocation by small stripe_size\n| * e1d811cbc3de blk-throttle: fix lockdep warning of \"cgroup_mutex or RCU read lock required!\"\n| * 84f2e5b3e70f usb: aqc111: check packet for fixup for true limit\n| * 619a34066614 Revert \"PCI: acpiphp: Reassign resources on bridge if necessary\"\n| * 371dbce60a46 ALSA: hda/hdmi: add force-connect quirks for ASUSTeK Z170 variants\n| * be7676b03aed cred: switch to using atomic_long_t\n| * 9112bd107208 appletalk: Fix Use-After-Free in atalk_ioctl\n| * 23ee06762c6f net: stmmac: Handle disabled MDIO busses from devicetree\n| * 538b7b8f21dc net: stmmac: use dev_err_probe() for reporting mdio bus registration failure\n| * 067e6ec9f530 vsock/virtio: Fix unsigned integer wrap around in virtio_transport_has_space()\n| * cc7cf0b2ee60 sign-file: Fix incorrect return values check\n| * 510d45207ae1 net: Remove acked SYN flag from packet in the transmit queue correctly\n| * 5d9d500a2811 qed: Fix a potential use-after-free in qed_cxt_tables_alloc\n| * 3df812627e7d net/rose: Fix Use-After-Free in rose_ioctl\n| * b099c28847cf atm: Fix Use-After-Free in do_vcc_ioctl\n| * e3430b870eff atm: solos-pci: Fix potential deadlock on \u0026tx_queue_lock\n| * 8cff60fb736b atm: solos-pci: Fix potential deadlock on \u0026cli_queue_lock\n| * fcf17666ef1b qca_spi: Fix reset behavior\n| * 51ad9c19bb57 qca_debug: Fix ethtool -G iface tx behavior\n| * b7f58686643f qca_debug: Prevent crash on TX ring changes\n| * 9354e0acdb74 net: ipv6: support reporting otherwise unknown prefix flags in RTM_NEWPREFIX\n| * 053220aaed26 afs: Fix refcount underflow from error handling race\n* | bc99f18e84d6 Revert \"psample: Require \u0027CAP_NET_ADMIN\u0027 when joining \"packets\" group\"\n* | 000b611ebfc3 Revert \"mmc: core: add helpers mmc_regulator_enable/disable_vqmmc\"\n* | ee67cef1d31a Revert \"mmc: sdhci-sprd: Fix vqmmc not shutting down after the card was pulled\"\n* | ee9bfb84c735 Revert \"genetlink: add CAP_NET_ADMIN test for multicast bind\"\n* | 4684391cef6f Revert \"drop_monitor: Require \u0027CAP_SYS_ADMIN\u0027 when joining \"events\" group\"\n* | 50aa4f43a9cc Revert \"perf/core: Add a new read format to get a number of lost samples\"\n* | 8eb401150861 Revert \"perf: Fix perf_event_validate_size()\"\n* | 5c9845d8c6ae Revert \"hrtimers: Push pending hrtimers away from outgoing CPU earlier\"\n* | af6deae77141 Merge 5.4.264 into android11-5.4-lts\n|\\|\n| * 16e6e107a688 Linux 5.4.264\n| * 06bcac5c5151 devcoredump: Send uevent once devcd is ready\n| * c6a1282e530d devcoredump : Serialize devcd_del work\n| * d99376b70247 smb: client: fix potential NULL deref in parse_dfs_referrals()\n| * ab5813bb2071 cifs: Fix non-availability of dedup breaking generic/304\n| * bdee8b2805b8 Revert \"btrfs: add dmesg output for first mount and last unmount of a filesystem\"\n| * dd9e851944aa tools headers UAPI: Sync linux/perf_event.h with the kernel sources\n| * 4a341627a109 drop_monitor: Require \u0027CAP_SYS_ADMIN\u0027 when joining \"events\" group\n| * fe8402511ed8 psample: Require \u0027CAP_NET_ADMIN\u0027 when joining \"packets\" group\n| * 263bffd2b6aa genetlink: add CAP_NET_ADMIN test for multicast bind\n| * a149fbadb9be netlink: don\u0027t call -\u003enetlink_bind with table lock held\n| * 18824f592aad io_uring/af_unix: disable sending io_uring over sockets\n| * 32f4536c108f nilfs2: fix missing error check for sb_set_blocksize call\n| * 77a353924d8f KVM: s390/mm: Properly reset no-dat\n| * 1aee33d43d6c x86/CPU/AMD: Check vendor in the AMD microcode callback\n| * 3371eac21119 serial: 8250_omap: Add earlycon support for the AM654 UART controller\n| * ce79cf407c64 serial: sc16is7xx: address RX timeout interrupt errata\n| * d896c47f8cfc ARM: PL011: Fix DMA support\n| * 880b035bc64e usb: typec: class: fix typec_altmode_put_partner to put plugs\n| * a9022cbdd0ae parport: Add support for Brainboxes IX/UC/PX parallel cards\n| * fefc0559c58e usb: gadget: f_hid: fix report descriptor allocation\n| * 1796ae6a7a8c mmc: sdhci-sprd: Fix vqmmc not shutting down after the card was pulled\n| * a1f29e995fd7 mmc: core: add helpers mmc_regulator_enable/disable_vqmmc\n| * 05918dec9a1e gpiolib: sysfs: Fix error handling on failed export\n| * 152f51d159f3 perf: Fix perf_event_validate_size()\n| * 84ca356ec859 perf/core: Add a new read format to get a number of lost samples\n| * 07bdb1bd2476 arm64: dts: mediatek: mt8173-evb: Fix regulator-fixed node names\n| * 6109859f6982 arm64: dts: mediatek: mt7622: fix memory node warning check\n| * 148d8f0707fa packet: Move reference count in packet_sock to atomic_long_t\n| * 965cbc6b623a tracing: Fix a possible race when disabling buffered events\n| * 6f2e50961fe3 tracing: Fix incomplete locking when disabling buffered events\n| * 84302391d130 tracing: Always update snapshot buffer size\n| * cb74e8fd6b2d nilfs2: prevent WARNING in nilfs_sufile_set_segment_usage()\n| * 610ebc289582 ALSA: pcm: fix out-of-bounds in snd_pcm_state_names\n| * 439166b1b2ee ARM: dts: imx7: Declare timers compatible with fsl,imx6dl-gpt\n| * 4fe36f83f8d8 ARM: dts: imx: make gpt node name generic\n| * 69b669cc6389 ARM: imx: Check return value of devm_kasprintf in imx_mmdc_perf_init\n| * 59348f148235 scsi: be2iscsi: Fix a memleak in beiscsi_init_wrb_handle()\n| * 8244ea916bfe tracing: Fix a warning when allocating buffered events fails\n| * 4713be844546 ASoC: wm_adsp: fix memleak in wm_adsp_buffer_populate\n| * febb7bbe290d hwmon: (acpi_power_meter) Fix 4.29 MW bug\n| * ad4cf776678b RDMA/bnxt_re: Correct module description string\n| * b4b89b7b2d4b bpf: sockmap, updating the sg structure should also update curr\n| * 7ffff0cc929f tcp: do not accept ACK of bytes we never sent\n| * 69431f609bf3 netfilter: xt_owner: Fix for unsafe access of sk-\u003esk_socket\n| * c61c61d7e7de net: hns: fix fake link up on xge port\n| * 1ec21fde58da ipv4: ip_gre: Avoid skb_pull() failure in ipgre_xmit()\n| * e38cd53421ed arcnet: restoring support for multiple Sohard Arcnet cards\n| * f26546731933 net: arcnet: com20020 fix error handling\n| * d124c18267b1 net: arcnet: Fix RESET flag handling\n| * 9f5a25aa1bcc hv_netvsc: rndis_filter needs to select NLS\n| * be1ab8bf0510 ipv6: fix potential NULL deref in fib6_add()\n| * 5cd05bbaaef4 of: dynamic: Fix of_reconfig_get_state_change() return value documentation\n| * 5cadae629e44 of: Add missing \u0027Return\u0027 section in kerneldoc comments\n| * b31cb14cac85 of: Fix kerneldoc output formatting\n| * 36ce931a803b of: base: Fix some formatting issues and provide missing descriptions\n| * 8c4fcbe27a7a of/irq: Make of_msi_map_rid() PCI bus agnostic\n| * ae374c57afeb of/irq: make of_msi_map_get_device_domain() bus agnostic\n| * e5cfaab66295 of/iommu: Make of_map_rid() PCI agnostic\n| * f7a85520087a ACPI/IORT: Make iort_msi_map_rid() PCI agnostic\n| * da36a3ef32b4 ACPI/IORT: Make iort_get_device_domain IRQ domain agnostic\n| * d786067be2eb of: base: Add of_get_cpu_state_node() to get idle states for a CPU node\n| * 13f27a05377d drm/amdgpu: correct chunk_ptr to a pointer to chunk.\n| * d162a5e6a51d kconfig: fix memory leak from range properties\n| * d34644153050 tg3: Increment tx_dropped in tg3_tso_bug()\n| * cd49b8e07d01 tg3: Move the [rt]x_dropped counters to tg3_napi\n| * 427deb5ba566 netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test\n| * 54d0d83a5350 hrtimers: Push pending hrtimers away from outgoing CPU earlier\n* | 096ff6ecb4c6 Revert \"HID: core: store the unique system identifier in hid_device\"\n* | 68c9c64f0261 Revert \"HID: fix HID device resource race between HID core and debugging support\"\n* | 0780b1ab0944 Merge 5.4.263 into android11-5.4-lts\n|\\|\n| * 34244ed6219a Linux 5.4.263\n| * afa7b11ea8aa mmc: block: Retry commands in CQE error recovery\n| * c8008304db1f mmc: core: convert comma to semicolon\n| * 33cc97d2493f mmc: cqhci: Fix task clearing in CQE error recovery\n| * 3e78540d98ce mmc: cqhci: Warn of halt or task clear failure\n| * 5b87f355462a mmc: cqhci: Increase recovery halt timeout\n| * 1a051c6d15aa cpufreq: imx6q: Don\u0027t disable 792 Mhz OPP unnecessarily\n| * d497e1b2f5e5 cpufreq: imx6q: don\u0027t warn for disabling a non-existing frequency\n| * b1a66a050f96 scsi: qla2xxx: Fix system crash due to bad pointer access\n| * c1f97cc21eac scsi: qla2xxx: Use scsi_cmd_to_rq() instead of scsi_cmnd.request\n| * df0110425f42 scsi: core: Introduce the scsi_cmd_to_rq() function\n| * 66cd60553045 scsi: qla2xxx: Simplify the code for aborting SCSI commands\n| * 30511f37c997 ima: detect changes to the backing overlay file\n| * 8c85e455f7c9 ovl: skip overlayfs superblocks at global sync\n| * 157c8056abb5 ima: annotate iint mutex to avoid lockdep false positive warnings\n| * a8038ae58145 fbdev: stifb: Make the STI next font pointer a 32-bit signed offset\n| * 939012ee31d8 mtd: cfi_cmdset_0001: Byte swap OTP info\n| * 416dad018edd mtd: cfi_cmdset_0001: Support the absence of protection registers\n| * 21ad8c1c4fca s390/cmma: fix detection of DAT pages\n| * c11027d333fd s390/mm: fix phys vs virt confusion in mark_kernel_pXd() functions family\n| * f1db39b1541f smb3: fix touch -h of symlink\n| * 97d54b8005c0 net: ravb: Start TX queues after HW initialization succeeded\n| * 7023a293e981 net: ravb: Use pm_runtime_resume_and_get()\n| * 05aa8f3e3b77 ravb: Fix races between ravb_tx_timeout_work() and net related ops\n| * d37609b52977 net: stmmac: xgmac: Disable FPE MMC interrupts\n| * 7ccf772a8bad ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet\n| * f8b5b5d23605 Input: xpad - add HyperX Clutch Gladiate Support\n| * 6536698eea91 btrfs: make error messages more clear when getting a chunk map\n| * 4c6274cfd603 btrfs: send: ensure send_fd is writable\n| * 79ffc04aba7a btrfs: fix off-by-one when checking chunk map includes logical address\n| * dd94ffab1b6d btrfs: add dmesg output for first mount and last unmount of a filesystem\n| * 30b807d73654 powerpc: Don\u0027t clobber f0/vs0 during fp|altivec register save\n| * bb55decee202 bcache: revert replacing IS_ERR_OR_NULL with IS_ERR\n| * 729da56e01c9 dm verity: don\u0027t perform FEC for failed readahead IO\n| * b515ed628447 dm-verity: align struct dm_verity_fec_io properly\n| * d377e593d11e ALSA: hda/realtek: Add supported ALC257 for ChromeOS\n| * 47dd3917c48a ALSA: hda/realtek: Headset Mic VREF to 100%\n| * 88ce27f0a3f0 ALSA: hda: Disable power-save on KONTRON SinglePC\n| * 4a2d1399f848 mmc: block: Do not lose cache flush during CQE error recovery\n| * 4d7d14c69667 firewire: core: fix possible memory leak in create_units()\n| * 1eaa188f7fec pinctrl: avoid reload of p state in list iteration\n| * 40532b29138e io_uring: fix off-by one bvec index\n| * 9e7f410f6a43 USB: dwc3: qcom: fix wakeup after probe deferral\n| * db62d193e69b USB: dwc3: qcom: fix resource leaks on probe deferral\n| * ca44455362e3 usb: dwc3: set the dma max_seg_size\n| * 7a0b6fc6c3c2 USB: dwc2: write HCINT with INTMASK applied\n| * d1c866356ddb USB: serial: option: don\u0027t claim interface 4 for ZTE MF290\n| * 38233a62d360 USB: serial: option: fix FM101R-GL defines\n| * 83be9405b33e USB: serial: option: add Fibocom L7xx modules\n| * 406fae6c799b bcache: prevent potential division by zero error\n| * c00163256ac4 bcache: check return value from btree_node_alloc_replacement()\n| * a658ee793011 dm-delay: fix a race between delay_presuspend and delay_bio\n| * ef918a1ba40c hv_netvsc: Mark VF as slave before exposing it to user-mode\n| * 997d895fa495 hv_netvsc: Fix race of register_netdevice_notifier and VF register\n| * f2a0c988d724 USB: serial: option: add Luat Air72*U series products\n| * f1ac7789406e s390/dasd: protect device queue against concurrent access\n| * 300e96e171a9 bcache: replace a mistaken IS_ERR() by IS_ERR_OR_NULL() in btree_gc_coalesce()\n| * 76f791b78da2 ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CVA\n| * 78c1e3aa693b KVM: arm64: limit PMU version to PMUv3 for ARMv8.1\n| * 5d4f6d809efa arm64: cpufeature: Extract capped perfmon fields\n| * 32cfd5c3b843 ext4: make sure allocate pending entry not fail\n| * 70edeedd795a ext4: fix slab-use-after-free in ext4_es_insert_extent()\n| * 15a84cf4c785 ext4: using nofail preallocation in ext4_es_insert_extent()\n| * 80c8dcb09feb ext4: using nofail preallocation in ext4_es_insert_delayed_block()\n| * be4684ee83f3 ext4: using nofail preallocation in ext4_es_remove_extent()\n| * d809d1d2edc3 ext4: use pre-allocated es in __es_remove_extent()\n| * 059722ec6464 ext4: use pre-allocated es in __es_insert_extent()\n| * 53df96011a2f ext4: factor out __es_alloc_extent() and __es_free_extent()\n| * c48b5fdd465e ext4: add a new helper to check if es must be kept\n| * b9cd5c3afc37 MIPS: KVM: Fix a build warning about variable set but not used\n| * afbedd6136cb nvmet: nul-terminate the NQNs passed in the connect command\n| * 84ac94bed02a nvmet: remove unnecessary ctrl parameter\n| * 07009245d3ba afs: Fix file locking on R/O volumes to operate in local mode\n| * 54ffe881d716 afs: Return ENOENT if no cell DNS record can be found\n| * 3680d10b4181 net: axienet: Fix check for partial TX checksum\n| * a7e7b928049f amd-xgbe: propagate the correct speed and duplex status\n| * c3a77c754e7f amd-xgbe: handle the corner-case during tx completion\n| * 895f1903ea09 amd-xgbe: handle corner-case during sfp hotplug\n| * 7fabd97a05fc arm/xen: fix xen_vcpu_info allocation alignment\n| * 9beba93f8ca7 net: usb: ax88179_178a: fix failed operations during ax88179_reset\n| * fc23517c8797 ipv4: Correct/silence an endian warning in __ip_do_redirect\n| * 6fd145351d48 HID: fix HID device resource race between HID core and debugging support\n| * 2c8f79610431 HID: core: store the unique system identifier in hid_device\n| * 90b3df8b5b7d drm/rockchip: vop: Fix color for RGB888/BGR888 format on VOP full\n| * bfdda8c9c58d ata: pata_isapnp: Add missing error check for devm_ioport_map()\n| * 9d980808f967 drm/panel: simple: Fix Innolux G101ICE-L01 timings\n| * cc543bad78d5 drm/panel: simple: Fix Innolux G101ICE-L01 bus flags\n| * c2eadc1586e7 afs: Make error on cell lookup failure consistent with OpenAFS\n| * 7369371bb875 PCI: keystone: Drop __init from ks_pcie_add_pcie_{ep,port}()\n| * 518b7f7d87aa RDMA/irdma: Prevent zero-length STAG registration\n| * d359886a7a80 driver core: Release all resources during unbind before updating device links\n* | a0f28e56bc60 ANDROID: GKI: db845c: Update symbols list and ABI on rpmsg_register_device_override\n* | 69365d1ade54 Revert \"tracing: Have trace_event_file have ref counters\"\n* | 288ce216932f Merge \"Merge 5.4.262 into android11-5.4-lts\" into android11-5.4-lts\n|\\ \\\n| * | a3aeec7ab805 Merge 5.4.262 into android11-5.4-lts\n| |\\|\n| | * 8e221b47173d Linux 5.4.262\n| | * b053223b7cf4 netfilter: nf_tables: bogus EBUSY when deleting flowtable after flush (for 5.4)\n| | * c35df8b8c572 netfilter: nf_tables: disable toggling dormant table state more than once\n| | * e10f661adc55 netfilter: nf_tables: fix table flag updates\n| | * 46c2947fcd71 netfilter: nftables: update table flags from the commit phase\n| | * b09e6ccf0d12 netfilter: nf_tables: double hook unregistration in netns path\n| | * b05a24cc453e netfilter: nf_tables: unregister flowtable hooks on netns exit\n| | * a995a68e8a3b netfilter: nf_tables: fix memleak when more than 255 elements expired\n| | * b95d7af657a8 netfilter: nft_set_hash: try later when GC hits EAGAIN on iteration\n| | * 61a7b3de20e2 netfilter: nft_set_rbtree: use read spinlock to avoid datapath contention\n| | * 03caf75da105 netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction\n| | * 021d734c7eaa netfilter: nf_tables: defer gc run if previous batch is still pending\n| | * 38ed6a5f836f netfilter: nf_tables: use correct lock to protect gc_list\n| | * 4b6346dc1edf netfilter: nf_tables: GC transaction race with abort path\n| | * b76dcf466223 netfilter: nf_tables: GC transaction race with netns dismantle\n| | * 29ff9b8efb84 netfilter: nf_tables: fix GC transaction races with netns and netlink event exit path\n| | * 1398a0eee290 netfilter: nf_tables: remove busy mark and gc batch API\n| | * 85520a1f1d87 netfilter: nft_set_hash: mark set element as dead when deleting from packet path\n| | * c357648929c8 netfilter: nf_tables: adapt set backend to use GC transaction API\n| | * bbdb3b65aa91 netfilter: nf_tables: GC transaction API to avoid race with control plane\n| | * 1da4874d05da netfilter: nf_tables: don\u0027t skip expired elements during walk\n| | * acaee227cf79 netfilter: nft_set_rbtree: fix overlap expiration walk\n| | * 899aa5638568 netfilter: nft_set_rbtree: fix null deref on element insertion\n| | * 181859bdfb97 netfilter: nft_set_rbtree: Switch to node list walk for overlap detection\n| | * 3c7ec098e3b5 netfilter: nf_tables: drop map element references from preparation phase\n| | * 6b880f3b2c04 netfilter: nftables: rename set element data activation/deactivation functions\n| | * e1eed9e0b5e8 netfilter: nf_tables: pass context to nft_set_destroy()\n| | * 961c4511c757 tracing: Have trace_event_file have ref counters\n| | * 7676a41d90c5 drm/amdgpu: fix error handling in amdgpu_bo_list_get()\n| | * 36383005f1db ext4: remove gdb backup copy for meta bg in setup_new_flex_group_blocks\n| | * e95f74653dff ext4: correct the start block of counting reserved clusters\n| | * 1fbfdcc3d65e ext4: correct return value of ext4_convert_meta_bg\n| | * dfdfd3f21830 ext4: correct offset of gdb backup in non meta_bg group to update_backups\n| | * 85c12e80c474 ext4: apply umask if ACL support is disabled\n| | * d2aed8814f02 Revert \"net: r8169: Disable multicast filter for RTL8168H and RTL8107E\"\n| | * b9e5f633b35d nfsd: fix file memleak on client_opens_release\n| | * 339d7d40d3dc media: venus: hfi: add checks to handle capabilities from firmware\n| | * cab97cdd409a media: venus: hfi: fix the check to handle session buffer requirement\n| | * 5d39d0c1f43f media: venus: hfi_parser: Add check to keep the number of codecs within range\n| | * 497b12d47cc6 media: sharp: fix sharp encoding\n| | * 92d8a0478fb3 media: lirc: drop trailing space from scancode transmit\n| | * cac054d10324 i2c: i801: fix potential race in i801_block_transaction_byte_by_byte\n| | * b132e462363f net: dsa: lan9303: consequently nested-lock physical MDIO\n| | * 229738d71702 Revert ncsi: Propagate carrier gain/loss events to the NCSI controller\n| | * 4074957ec6bb Bluetooth: btusb: Add 0bda:b85b for Fn-Link RTL8852BE\n| | * 356a2ee5fc36 Bluetooth: btusb: Add RTW8852BE device 13d3:3570 to device tables\n| | * afe92b66a5d8 bluetooth: Add device 13d3:3571 to device tables\n| | * dc073a2626d3 bluetooth: Add device 0bda:887b to device tables\n| | * 75d26f7f6118 Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0cb8:0xc559\n| | * 323710a6b4c6 Bluetooth: btusb: add Realtek 8822CE to usb_device_id table\n| | * 981ee23b8d48 Bluetooth: btusb: Add flag to define wideband speech capability\n| | * 0fe69c99cc13 tty: serial: meson: fix hard LOCKUP on crtscts mode\n| | * 8f40bbf7dc01 serial: meson: Use platform_get_irq() to get the interrupt\n| | * a1113f2c9b2c tty: serial: meson: retrieve port FIFO size from DT\n| | * 13391526d817 serial: meson: remove redundant initialization of variable id\n| | * 6245d0d70fe8 ALSA: hda/realtek - Enable internal speaker of ASUS K6500ZC\n| | * 4ef452297de4 ALSA: info: Fix potential deadlock at disconnection\n| | * c7df9523fed2 parisc/pgtable: Do not drop upper 5 address bits of physical address\n| | * c32dfec86714 parisc: Prevent booting 64-bit kernels on PA1.x machines\n| | * d570d139cb38 i3c: master: cdns: Fix reading status register\n| | * ad6941b192ca mm/cma: use nth_page() in place of direct struct page manipulation\n| | * 36512866607e dmaengine: stm32-mdma: correct desc prep when channel running\n| | * 4a5c267d5700 mcb: fix error handling for different scenarios when parsing\n| | * 25eb381a736e i2c: core: Run atomic i2c xfer when !preemptible\n| | * 975b5ff33f9a kernel/reboot: emergency_restart: Set correct system_state\n| | * 421f9ccc75c5 quota: explicitly forbid quota files from being encrypted\n| | * 7d0c36cd2e65 jbd2: fix potential data lost in recovering journal raced with synchronizing fs bdev\n| | * 665c2f186b8c btrfs: don\u0027t arbitrarily slow down delalloc if we\u0027re committing\n| | * b5a8382cf829 PM: hibernate: Clean up sync_read handling in snapshot_write_next()\n| | * 2b3cfdaa8833 PM: hibernate: Use __get_safe_page() rather than touching the list\n| | * 612c17a90fce mmc: vub300: fix an error code\n| | * 398940412e8d clk: qcom: ipq8074: drop the CLK_SET_RATE_PARENT flag from PLL clocks\n| | * 0b2b22b706ec parisc/pdc: Add width field to struct pdc_model\n| | * 012dba0ab814 PCI: keystone: Don\u0027t discard .probe() callback\n| | * 9988c9dc3c8b PCI: keystone: Don\u0027t discard .remove() callback\n| | * a438322e0078 genirq/generic_chip: Make irq_remove_generic_chip() irqdomain aware\n| | * 683c562c434d mmc: meson-gx: Remove setting of CMD_CFG_ERROR\n| | * d894f9288cff ACPI: resource: Do IRQ override on TongFang GMxXGxx\n| | * 7b15bc9b753f PCI/sysfs: Protect driver\u0027s D3cold preference from user space\n| | * 78d3487b5b87 hvc/xen: fix error path in xen_hvc_init() to always register frontend driver\n| | * 6b21ae025b82 audit: don\u0027t WARN_ON_ONCE(!current-\u003emm) in audit_exe_compare()\n| | * c0d01f03aaac audit: don\u0027t take task_lock() in audit_exe_compare() code path\n| | * 4d0a828775f0 KVM: x86: Ignore MSR_AMD64_TW_CFG access\n| | * 5066faedd2f7 KVM: x86: hyper-v: Don\u0027t auto-enable stimer on write from user-space\n| | * 268d17ab637a x86/cpu/hygon: Fix the CPU topology evaluation for real\n| | * acbc12b0b348 scsi: megaraid_sas: Increase register read retry rount from 3 to 30 for selected registers\n| | * bae690510316 bpf: Fix precision tracking for BPF_ALU | BPF_TO_BE | BPF_END\n| | * 6933bc9a5f77 randstruct: Fix gcc-plugin performance mode to stay in group\n| | * c94d05ac6937 media: venus: hfi: add checks to perform sanity on queue pointers\n| | * 6d028ade9db7 cifs: spnego: add \u0027;\u0027 in HOST_KEY_LEN\n| | * 26415e35f669 tools/power/turbostat: Fix a knl bug\n| | * a49786297b83 macvlan: Don\u0027t propagate promisc change to lower dev in passthru\n| | * 04cb9ab8ebc5 net/mlx5e: Check return value of snprintf writing to fw_version buffer for representors\n| | * c740f4716a44 net/mlx5_core: Clean driver version and name\n| | * e4bdbcce8e02 net/mlx5e: fix double free of encap_header\n| | * 5cc1f24f7333 net: stmmac: fix rx budget limit check\n| | * c4b712d1a814 net: stmmac: Rework stmmac_rx()\n| | * b2762d13dfae netfilter: nf_conntrack_bridge: initialize err to 0\n| | * fd51e7541ff6 net: ethernet: cortina: Fix MTU max setting\n| | * 823bffdaac39 net: ethernet: cortina: Handle large frames\n| | * f5055d7345d6 net: ethernet: cortina: Fix max RX frame define\n| | * b4f0e605a508 bonding: stop the device in bond_setup_by_slave()\n| | * 7ea0a719e578 ptp: annotate data-race around q-\u003ehead and q-\u003etail\n| | * 89af55e0fa13 xen/events: fix delayed eoi list handling\n| | * db957a2f5481 ppp: limit MRU to 64K\n| | * f3b250d91993 tipc: Fix kernel-infoleak due to uninitialized TLV value\n| | * 77236275d4cd net: hns3: fix variable may not initialized problem in hns3_init_mac_addr()\n| | * 14c6cd41c851 tty: Fix uninit-value access in ppp_sync_receive()\n| | * 4d2d30f0792b ipvlan: add ipvlan_route_v6_outbound() helper\n| | * ed53c1518811 NFSv4.1: fix SP4_MACH_CRED protection for pnfs IO\n| | * fe449f8b9727 wifi: iwlwifi: Use FW rate for non-data frames\n| | * eca19db60f99 pwm: Fix double shift bug\n| | * d996530ba92c ASoC: ti: omap-mcbsp: Fix runtime PM underflow warnings\n| | * 6d703922bc9e kgdb: Flush console before entering kgdb on panic\n| | * eac3e4760aa1 drm/amd/display: Avoid NULL dereference of timing generator\n| | * 514565ff7fce media: cobalt: Use FIELD_GET() to extract Link Width\n| | * 2bb42a27a92f gfs2: ignore negated quota changes\n| | * a251e20a2cbe media: vivid: avoid integer overflow\n| | * 8f83c85ee882 media: gspca: cpia1: shift-out-of-bounds in set_flicker\n| | * a8f829886d47 i2c: sun6i-p2wi: Prevent potential division by zero\n| | * 80876a07ca3b usb: gadget: f_ncm: Always set current gadget in ncm_bind()\n| | * 460284dfb10b tty: vcc: Add check for kstrdup() in vcc_probe()\n| | * 35b9435123ef HID: Add quirk for Dell Pro Wireless Keyboard and Mouse KM5221W\n| | * b549acf99982 scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()\n| | * 33906b36b15d atm: iphase: Do PCI error checks on own line\n| | * 54f4dde8fa0c PCI: tegra194: Use FIELD_GET()/FIELD_PREP() with Link Width fields\n| | * 2527775616f3 ALSA: hda: Fix possible null-ptr-deref when assigning a stream\n| | * 953ed26a77c6 ARM: 9320/1: fix stack depot IRQ stack filter\n| | * 7467ca10a5ff jfs: fix array-index-out-of-bounds in diAlloc\n| | * ecfb47f13b08 jfs: fix array-index-out-of-bounds in dbFindLeaf\n| | * 32bd8f1cbcf8 fs/jfs: Add validity check for db_maxag and db_agpref\n| | * a81a56b4cbe3 fs/jfs: Add check for negative db_l2nbperpage\n| | * e18d266fb3f1 RDMA/hfi1: Use FIELD_GET() to extract Link Width\n| | * c9c133469730 crypto: pcrypt - Fix hungtask for PADATA_RESET\n| | * ddd6e5266343 selftests/efivarfs: create-read: fix a resource leak\n| | * 437e0fa907ba drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL\n| | * d50a56749e5a drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga\n| | * c847379a5d00 drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7\n| | * 1f24c286f4a4 drm/komeda: drop all currently held locks if deadlock happens\n| | * 5305ae0d4ad8 platform/x86: thinkpad_acpi: Add battery quirk for Thinkpad X120e\n| | * 3c4236f1b2a7 Bluetooth: Fix double free in hci_conn_cleanup\n| | * 3cf391e4174a wifi: ath10k: Don\u0027t touch the CE interrupt registers after power up\n| | * 252bde6b17b8 net: annotate data-races around sk-\u003esk_dst_pending_confirm\n| | * 73909810ac27 net: annotate data-races around sk-\u003esk_tx_queue_mapping\n| | * bd653b07095a wifi: ath10k: fix clang-specific fortify warning\n| | * 32cc96dc5f4e wifi: ath9k: fix clang-specific fortify warnings\n| | * efeae5f4972f wifi: mac80211: don\u0027t return unset power in ieee80211_get_tx_power()\n| | * 770da15be321 wifi: mac80211_hwsim: fix clang-specific fortify warning\n| | * cfe13e1486d4 x86/mm: Drop the 4 MB restriction on minimal NUMA node memory size\n| | * 91f7467ac96a clocksource/drivers/timer-atmel-tcb: Fix initialization on SAM9 hardware\n| | * da667a3f8e23 clocksource/drivers/timer-imx-gpt: Fix potential memory leak\n| | * 788c0b3442ea perf/core: Bail out early if the request AUX area is out of bound\n| | * dcd85e3c9293 locking/ww_mutex/test: Fix potential workqueue corruption\n* | | 4e4cce8b5a13 Merge branch \u0027android11-5.4\u0027 into branch \u0027android11-5.4-lts\u0027\n|/ /\n* | 12bc15efbc39 Revert \"inet: shrink struct flowi_common\"\n* | 8d8014e4a1f1 Revert \"ipvlan: properly track tx_errors\"\n* | 0e07b7bd3c6a Merge 5.4.261 into android11-5.4-lts\n|\\|\n| * ef379773e2e7 Linux 5.4.261\n| * 3542ef5c3748 btrfs: use u64 for buffer sizes in the tree search ioctls\n| * 7868e6151a6d Revert \"mmc: core: Capture correct oemid-bits for eMMC cards\"\n| * 7be3aca8d73d fbdev: fsl-diu-fb: mark wr_reg_wa() static\n| * 6c66d737b272 fbdev: imsttfb: fix a resource leak in probe\n| * b90c8dfd715f fbdev: imsttfb: Fix error path of imsttfb_probe()\n| * 4a6a3f1b3840 spi: spi-zynq-qspi: add spi-mem to driver kconfig dependencies\n| * 157333513d14 drm/syncobj: fix DRM_SYNCOBJ_WAIT_FLAGS_WAIT_AVAILABLE\n| * 21858a75dc78 netfilter: nat: fix ipv6 nat redirect with mapped and scoped addresses\n| * ae99c5e16a83 netfilter: nft_redir: use `struct nf_nat_range2` throughout and deduplicate eval call-backs\n| * 11380557c236 netfilter: xt_recent: fix (increase) ipv6 literal buffer length\n| * cce1d4668191 r8169: respect userspace disabling IFF_MULTICAST\n| * e820e23338d1 tg3: power down device only on SYSTEM_POWER_OFF\n| * f8065cde49b2 net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT\n| * 592f934b7a22 net: stmmac: xgmac: Enable support for multiple Flexible PPS outputs\n| * 85513df59a3e Fix termination state for idr_for_each_entry_ul()\n| * 56cddb5e657f net: r8169: Disable multicast filter for RTL8168H and RTL8107E\n| * e5a664ef4928 dccp/tcp: Call security_inet_conn_request() after setting IPv6 addresses.\n| * 3af0af2f98f3 dccp: Call security_inet_conn_request() after setting IPv4 addresses.\n| * afa49774d812 inet: shrink struct flowi_common\n| * 2199260c42e6 tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING\n| * cbdcdf42d15d llc: verify mac len before reading mac header\n| * 50d122536661 Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()\n| * e3677bfcbbcb pwm: brcmstb: Utilize appropriate clock APIs in suspend/resume\n| * 6e9b5295892e pwm: sti: Reduce number of allocations and drop usage of chip_data\n| * 19e45307f71f pwm: sti: Avoid conditional gotos\n| * c4d5179e42b4 regmap: prevent noinc writes from clobbering cache\n| * d62d868b30b8 media: dvb-usb-v2: af9035: fix missing unlock\n| * 7843a9bfbe13 media: s3c-camif: Avoid inappropriate kfree()\n| * b35fdade92c5 media: bttv: fix use after free error due to btv-\u003etimeout timer\n| * 0bc0e36fccc2 pcmcia: ds: fix possible name leak in error path in pcmcia_device_add()\n| * 1502edd4a014 pcmcia: ds: fix refcount leak in pcmcia_device_add()\n| * 58d6fb6a933c pcmcia: cs: fix possible hung task and memory leak pccardd()\n| * 37212eede637 rtc: pcf85363: fix wrong mask/val parameters in regmap_update_bits call\n| * 204beeb509d3 i3c: Fix potential refcount leak in i3c_master_register_new_i3c_devs\n| * 247ed618f534 powerpc/pseries: fix potential memory leak in init_cpu_associativity()\n| * cee681d4b22b powerpc/imc-pmu: Use the correct spinlock initializer.\n| * dc5804b47b66 powerpc/xive: Fix endian conversion size\n| * b6cffe8dd7cd modpost: fix tee MODULE_DEVICE_TABLE built on big-endian host\n| * 90ab33735e2e f2fs: fix to initialize map.m_pblk in f2fs_precache_extents()\n| * 9f20b06214dc dmaengine: pxa_dma: Remove an erroneous BUG_ON() in pxad_free_desc()\n| * 688326e2cf9e USB: usbip: fix stub_dev hub disconnect\n| * b003b7a7d42e tools: iio: iio_generic_buffer ensure alignment\n| * 7a64d15db7aa tools: iio: iio_generic_buffer: Fix some integer type and calculation\n| * db6d5b9ff6e8 tools: iio: privatize globals and functions in iio_generic_buffer.c file\n| * 55b90e4c406a misc: st_core: Do not call kfree_skb() under spin_lock_irqsave()\n| * ed9b2ad3b9ca dmaengine: ti: edma: handle irq_of_parse_and_map() errors\n| * 64c47749fc75 usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency\n| * 4050f13f71f2 tty: tty_jobctrl: fix pid memleak in disassociate_ctty()\n| * ba46faaa49c5 leds: trigger: ledtrig-cpu:: Fix \u0027output may be truncated\u0027 issue for \u0027cpu\u0027\n| * abfd682fc5f0 ledtrig-cpu: Limit to 8 CPUs\n| * f6c3b7a4ce51 leds: pwm: Don\u0027t disable the PWM when the LED should be off\n| * cd6f50115fab leds: pwm: convert to atomic PWM API\n| * 9686f771c096 leds: pwm: simplify if condition\n| * 87b1ee831ddf mfd: dln2: Fix double put in dln2_probe\n| * b843d2cd134b ASoC: ams-delta.c: use component after check\n| * 4634c9cc726d ASoC: Intel: Skylake: Fix mem leak when parsing UUIDs fails\n| * 66888e6953f8 sh: bios: Revive earlyprintk support\n| * fdcbe9ce7bf3 RDMA/hfi1: Workaround truncation compilation error\n| * 01698922f5d3 scsi: ufs: core: Leave space for \u0027\\0\u0027 in utf8 desc string\n| * 3c61391a31a6 ext4: move \u0027ix\u0027 sanity check to corrent position\n| * 454e6493bbda ARM: 9321/1: memset: cast the constant byte to unsigned char\n| * 727203e6e7e7 hid: cp2112: Fix duplicate workqueue initialization\n| * 48bb2931f24c HID: cp2112: Use irqchip template\n| * 7b62cf90d0ea crypto: caam/jr - fix Chacha20 + Poly1305 self test failure\n| * 090e89c71620 crypto: caam/qi2 - fix Chacha20 + Poly1305 self test failure\n| * 40ba3fa21250 nd_btt: Make BTT lanes preemptible\n| * 68655462f8be sched/rt: Provide migrate_disable/enable() inlines\n| * d14a373fe559 libnvdimm/of_pmem: Use devm_kstrdup instead of kstrdup and check its return value\n| * f5d95a39683e hwrng: geode - fix accessing registers\n| * e4e4d4abb82b clk: scmi: Free scmi_clk allocated when the clocks with invalid info are skipped\n| * ce11e445d0ae firmware: ti_sci: Mark driver as non removable\n| * 5d97cc0b491e firmware: ti_sci: Replace HTTP links with HTTPS ones\n| * cc1a1dcb411f soc: qcom: llcc: Handle a second device without data corruption\n| * 813fdddde20f soc: qcom: Rename llcc-slice to llcc-qcom\n| * 077010717b52 soc: qcom: llcc cleanup to get rid of sdm845 specific driver file\n| * 3da50ee512e2 ARM: dts: qcom: mdm9615: populate vsdcc fixed regulator\n| * 6b464d9414e3 arm64: dts: qcom: sdm845-mtp: fix WiFi configuration\n| * 64d990086065 drm/rockchip: cdn-dp: Fix some error handling paths in cdn_dp_probe()\n| * ddc42881f170 drm/radeon: possible buffer overflow\n| * 4a29f0f7a1b7 drm/rockchip: vop: Fix call to crtc reset helper\n| * 824f0f4f93c6 drm/rockchip: vop: Fix reset of state in duplicate state crtc funcs\n| * eaf62ea6504f hwmon: (coretemp) Fix potentially truncated sysfs attribute name\n| * 9fb0eed09e14 platform/x86: wmi: Fix opening of char device\n| * 22117b77eecb platform/x86: wmi: remove unnecessary initializations\n| * 1607ea8a8161 platform/x86: wmi: Fix probe failure when failing to register WMI devices\n| * d1461f0c9ca0 clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data\n| * e8ae4b49dd9c clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data\n| * cfa68e0ac5dc clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data\n| * 2705c5b97f50 clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data\n| * fbe466f06d4e clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data\n| * 8ae911637b0b clk: npcm7xx: Fix incorrect kfree\n| * cbcf67b0bc5d clk: keystone: pll: fix a couple NULL vs IS_ERR() checks\n| * 3d38bc4bab88 clk: imx: Select MXC_CLK for CLK_IMX8QXP\n| * ae98b5ef991a clk: qcom: gcc-sm8150: Fix gcc_sdcc2_apps_clk_src\n| * 15f335494bb3 clk: qcom: gcc-sm8150: use ARRAY_SIZE instead of specifying num_parents\n| * 141ccc127230 clk: qcom: clk-rcg2: Fix clock rate overflow for high parent frequencies\n| * dbf13624b2de regmap: debugfs: Fix a erroneous check after snprintf()\n| * af50165c1218 ipvlan: properly track tx_errors\n| * 76304c749e05 net: add DEV_STATS_READ() helper\n| * 4482b250c895 ipv6: avoid atomic fragment on GSO packets\n| * 19d527337870 ACPI: sysfs: Fix create_pnp_modalias() and create_of_modalias()\n| * 5105d46146f2 tcp: fix cookie_init_timestamp() overflows\n| * e4e819bdc8f3 tcp: Remove one extra ktime_get_ns() from cookie_init_timestamp\n| * 7ab8aa73002c chtls: fix tp-\u003ercv_tstamp initialization\n| * 75bbf6e93462 r8169: fix rare issue with broken rx after link-down on RTL8125\n| * 282342bc47c6 r8169: use tp_to_dev instead of open code\n| * 3091ab943dfc thermal: core: prevent potential string overflow\n| * 35854733ae67 can: dev: can_restart(): fix race condition between controller restart and netif_carrier_on()\n| * b53be254d30f can: dev: can_restart(): don\u0027t crash kernel if carrier is OK\n| * a29f012a27cf wifi: rtlwifi: fix EDCA limit set by BT coexistence\n| * bed72a332f02 tcp_metrics: do not create an entry from tcp_init_metrics()\n| * f3902c0e6f08 tcp_metrics: properly set tp-\u003esnd_ssthresh in tcp_init_metrics()\n| * b78f2b7774a0 tcp_metrics: add missing barriers on delete\n| * af0fe2c2ff4d wifi: mt76: mt7603: rework/fix rx pse hang check\n| * a2e99dbdc127 wifi: rtw88: debug: Fix the NULL vs IS_ERR() bug for debugfs_create_file()\n| * c9b929f7932b tcp: call tcp_try_undo_recovery when an RTOd TFO SYNACK is ACKed\n| * 25eaef1d0d0e i40e: fix potential memory leaks in i40e_remove()\n| * 09ce728c9e27 genirq/matrix: Exclude managed interrupts in irq_matrix_allocated()\n| * 3718a48ef495 vfs: fix readahead(2) on block devices\n* | 04433509503f ANDROID: fix up rpmsg_device ABI break\n* | 398b357f1332 ANDROID: fix up platform_device ABI break\n* | 7b96d6414a26 Merge 5.4.260 into android11-5.4-lts\n|/\n* 87e8e7a7aa1f Linux 5.4.260\n* 8b0ecf2167a0 tty: 8250: Add support for Intashield IS-100\n* 6dd5561b2385 tty: 8250: Add support for Brainboxes UP cards\n* 03145e0ff8ab tty: 8250: Add support for additional Brainboxes UC cards\n* 5a6471372f9b tty: 8250: Remove UC-257 and UC-431\n* 72f236b57f1c usb: storage: set 1.50 as the lower bcdDevice for older \"Super Top\" compatibility\n* 792a91fcd20d PCI: Prevent xHCI driver from claiming AMD VanGogh USB3 DRD device\n* 4b865e0d78a0 Revert \"ARM: dts: Move am33xx and am43xx mmc nodes to sdhci-omap driver\"\n* 4e53bab11f01 nvmet-tcp: Fix a possible UAF in queue intialization setup\n* 2c9415ec8ea9 nvmet-tcp: move send/recv error handling in the send/recv methods instead of call-sites\n* 784ef618b2cc remove the sx8 block driver\n* a31f8222a74c ata: ahci: fix enum constants for gcc-13\n* cc1afa62e231 net: chelsio: cxgb4: add an error code check in t4_load_phy_fw\n* 7e429d1f3994 platform/mellanox: mlxbf-tmfifo: Fix a warning message\n* 5f4f58eac361 platform/x86: asus-wmi: Change ASUS_WMI_BRN_DOWN code from 0x20 to 0x2e\n* 88d1aa03eb16 scsi: mpt3sas: Fix in error path\n* b1f62e3ef90c fbdev: uvesafb: Call cn_del_callback() at the end of uvesafb_exit()\n* fb02de64791c ASoC: rt5650: fix the wrong result of key button\n* b6c09ff5eada netfilter: nfnetlink_log: silence bogus compiler warning\n* 6c23b6d308af spi: npcm-fiu: Fix UMA reads when dummy.nbytes \u003d\u003d 0\n* 788b308340ef fbdev: atyfb: only use ioremap_uc() on i386 and ia64\n* 848b9c688865 Input: synaptics-rmi4 - handle reset delay when using SMBus trsnsport\n* a0bf183db438 dmaengine: ste_dma40: Fix PM disable depth imbalance in d40_probe\n* 39ae053abbad irqchip/stm32-exti: add missing DT IRQ flag translation\n* fbcd05a0dbda Input: i8042 - add Fujitsu Lifebook E5411 to i8042 quirk table\n* cda248f16924 x86: Fix .brk attribute in linker script\n* 01e6885b75e2 rpmsg: Fix possible refcount leak in rpmsg_register_device_override()\n* cff56d7a9274 rpmsg: glink: Release driver_override\n* 3d1478598057 rpmsg: Fix calling device_lock() on non-initialized device\n* e70898ae1a42 rpmsg: Fix kfree() of static memory on setting driver_override\n* 0df5d801359e rpmsg: Constify local variable in field store macro\n* 063444d66f90 driver: platform: Add helper for safer setting of driver_override\n* 83ecffd40c65 ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow\n* 66cfd4cf6ac8 ext4: avoid overlapping preallocations due to overflow\n* 1e0a5dec2638 ext4: add two helper functions extent_logical_end() and pa_logical_end()\n* c2102ac1033f x86/mm: Fix RESERVE_BRK() for older binutils\n* ced79d864bfd x86/mm: Simplify RESERVE_BRK()\n* 5fc242c11804 nfsd: lock_rename() needs both directories to live on the same fs\n* e9a988cd4c8b f2fs: fix to do sanity check on inode type during garbage collection\n* 750de03de7e1 smbdirect: missing rc checks while waiting for rdma events\n* 5776aeee2a60 kobject: Fix slab-out-of-bounds in fill_kobj_path()\n* 0a45e0e5dd8d arm64: fix a concurrency issue in emulation_proc_handler()\n* 6ba2ffe3cb1c drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()\n* 9d29933f36e1 x86/i8259: Skip probing when ACPI/MADT advertises PCAT compatibility\n* 1ed21b207ece i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR\n* f48670c3b089 clk: Sanitize possible_parent_show to Handle Return Value of of_clk_get_parent_name\n* 511f3e9bbb0a perf/core: Fix potential NULL deref\n* 8de78231cba9 nvmem: imx: correct nregs for i.MX6UL\n* 0b2c3a8601cc nvmem: imx: correct nregs for i.MX6SLL\n* 6063678df7fa nvmem: imx: correct nregs for i.MX6ULL\n* 12337d3e8819 i2c: aspeed: Fix i2c bus hang in slave read\n* e3d8ef87a9b1 i2c: stm32f7: Fix PEC handling in case of SMBUS transfers\n* 5764f6e546a9 i2c: muxes: i2c-demux-pinctrl: Use of_get_i2c_adapter_by_node()\n* a3b9bcedd7ad i2c: muxes: i2c-mux-gpmux: Use of_get_i2c_adapter_by_node()\n* 07ec3d952a4a i2c: muxes: i2c-mux-pinctrl: Use of_get_i2c_adapter_by_node()\n* 519ff2d9fecf iio: exynos-adc: request second interupt only when touchscreen mode is used\n* 2bf9fbd13635 gtp: fix fragmentation needed check with gso\n* 2ab1b7ad5046 gtp: uapi: fix GTPA_MAX\n* 54ba3b8267b0 tcp: fix wrong RTO timeout when received SACK reneging\n* 29cb3f81bc71 r8152: Cancel hw_phy_work if we have an error in probe\n* 6124d0b100bf r8152: Run the unload routine if we have errors during probe\n* 1d3cb4aa9388 r8152: Increase USB control msg timeout to 5000ms as per spec\n* 2f8da9511607 net: ieee802154: adf7242: Fix some potential buffer overflow in adf7242_stats_show()\n* ec885679fa9a igc: Fix ambiguity in the ethtool advertising\n* 3b098edafefa neighbour: fix various data-races\n* 418ca6e63e06 igb: Fix potential memory leak in igb_add_ethtool_nfc_entry\n* 00ef4a7de62c treewide: Spelling fix in comment\n* e44e78ff44e5 r8169: fix the KCSAN reported data race in rtl_rx while reading desc-\u003eopts1\n* b9ba50fc18d7 r8169: fix the KCSAN reported data-race in rtl_tx while reading TxDescArray[entry].opts1\n* a27c6bfc5287 virtio-mmio: fix memory leak of vm_dev\n* 8d394fcb0398 virtio_balloon: Fix endless deflation and inflation on arm64\n* be84e96426ed mcb-lpc: Reallocate memory region to avoid memory overlapping\n* 3235094d55de mcb: Return actual parsed size when reading chameleon table\n* fbe17a8be10a selftests/ftrace: Add new test case which checks non unique symbol\n* 4d057ca86eaa mtd: rawnand: marvell: Ensure program page operations are successful\n\nChange-Id: I58a8cd7194465f27b5fde3af6e27010d4d4c543c\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@google.com\u003e\n" }, { "commit": "5158e9afed2727aaba760823ec4891387cba5f69", "tree": "8ac921d7f50e81ca512906132cf74565dba445b3", "parents": [ "bc99f18e84d6d1751670811aaffc9ea36f50b270", "2d21f73b2f16f51608c8d8b1726df270229a5006" ], "author": { "name": "Greg Kroah-Hartman", "email": "gregkh@google.com", "time": "Thu Dec 21 12:17:30 2023 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@google.com", "time": "Thu Dec 21 12:17:30 2023 +0000" }, "message": "Merge 5.4.265 into android11-5.4-lts\n\nChanges in 5.4.265\n\tafs: Fix refcount underflow from error handling race\n\tnet: ipv6: support reporting otherwise unknown prefix flags in RTM_NEWPREFIX\n\tqca_debug: Prevent crash on TX ring changes\n\tqca_debug: Fix ethtool -G iface tx behavior\n\tqca_spi: Fix reset behavior\n\tatm: solos-pci: Fix potential deadlock on \u0026cli_queue_lock\n\tatm: solos-pci: Fix potential deadlock on \u0026tx_queue_lock\n\tatm: Fix Use-After-Free in do_vcc_ioctl\n\tnet/rose: Fix Use-After-Free in rose_ioctl\n\tqed: Fix a potential use-after-free in qed_cxt_tables_alloc\n\tnet: Remove acked SYN flag from packet in the transmit queue correctly\n\tsign-file: Fix incorrect return values check\n\tvsock/virtio: Fix unsigned integer wrap around in virtio_transport_has_space()\n\tnet: stmmac: use dev_err_probe() for reporting mdio bus registration failure\n\tnet: stmmac: Handle disabled MDIO busses from devicetree\n\tappletalk: Fix Use-After-Free in atalk_ioctl\n\tcred: switch to using atomic_long_t\n\tALSA: hda/hdmi: add force-connect quirks for ASUSTeK Z170 variants\n\tRevert \"PCI: acpiphp: Reassign resources on bridge if necessary\"\n\tusb: aqc111: check packet for fixup for true limit\n\tblk-throttle: fix lockdep warning of \"cgroup_mutex or RCU read lock required!\"\n\tbcache: avoid oversize memory allocation by small stripe_size\n\tbcache: add code comments for bch_btree_node_get() and __bch_btree_node_alloc()\n\tbcache: avoid NULL checking to c-\u003eroot in run_cache_set()\n\tplatform/x86: intel_telemetry: Fix kernel doc descriptions\n\tHID: add ALWAYS_POLL quirk for Apple kb\n\tHID: hid-asus: reset the backlight brightness level on resume\n\tHID: multitouch: Add quirk for HONOR GLO-GXXX touchpad\n\tasm-generic: qspinlock: fix queued_spin_value_unlocked() implementation\n\tnet: usb: qmi_wwan: claim interface 4 for ZTE MF290\n\tHID: hid-asus: add const to read-only outgoing usb buffer\n\tperf: Fix perf_event_validate_size() lockdep splat\n\tsoundwire: stream: fix NULL pointer dereference for multi_link\n\text4: prevent the normalized size from exceeding EXT_MAX_BLOCKS\n\tarm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify\n\tteam: Fix use-after-free when an option instance allocation fails\n\tring-buffer: Fix memory leak of free page\n\tmmc: block: Be sure to wait while busy in CQE error recovery\n\tpowerpc/ftrace: Create a dummy stackframe to fix stack unwind\n\tpowerpc/ftrace: Fix stack teardown in ftrace_no_trace\n\tLinux 5.4.265\n\nChange-Id: I762a9cd127dfce014141a135e818a170c99e3fd1\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@google.com\u003e\n" }, { "commit": "cc7cf0b2ee60df74ee0b82e97dfded86eafb4b30", "tree": "56fd19c7ef10d0784309c13f56ce8b06c0ad2b8e", "parents": [ "510d45207ae1cd463d0b8085e4ff44e2a6c70c6f" ], "author": { "name": "Yusong Gao", "email": "a869920004@gmail.com", "time": "Wed Dec 13 10:31:10 2023 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Wed Dec 20 15:41:17 2023 +0100" }, "message": "sign-file: Fix incorrect return values check\n\n[ Upstream commit 829649443e78d85db0cff0c37cadb28fbb1a5f6f ]\n\nThere are some wrong return values check in sign-file when call OpenSSL\nAPI. The ERR() check cond is wrong because of the program only check the\nreturn value is \u003c 0 which ignored the return val is 0. For example:\n1. CMS_final() return 1 for success or 0 for failure.\n2. i2d_CMS_bio_stream() returns 1 for success or 0 for failure.\n3. i2d_TYPEbio() return 1 for success and 0 for failure.\n4. BIO_free() return 1 for success and 0 for failure.\n\nLink: https://www.openssl.org/docs/manmaster/man3/\nFixes: e5a2e3c84782 (\"scripts/sign-file.c: Add support for signing with a raw signature\")\nSigned-off-by: Yusong Gao \u003ca869920004@gmail.com\u003e\nReviewed-by: Juerg Haefliger \u003cjuerg.haefliger@canonical.com\u003e\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\nLink: https://lore.kernel.org/r/20231213024405.624692-1-a869920004@gmail.com/ # v5\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nSigned-off-by: Sasha Levin \u003csashal@kernel.org\u003e\n" }, { "commit": "9110d2473dbe629b2fbc7ad18854a1f220f48dd1", "tree": "1066f52dcb1768773412d3228a03de1f0150674e", "parents": [ "a8c0cf494562f8192464268c8963d84d34178816", "81334f26ac709edb3d8fcf42285d9cd3654caa76" ], "author": { "name": "kamasali Satyanarayan", "email": "quic_kamasali@quicinc.com", "time": "Thu Dec 14 11:23:22 2023 +0530" }, "committer": { "name": "kamasali Satyanarayan", "email": "quic_kamasali@quicinc.com", "time": "Mon Dec 18 15:40:18 2023 +0530" }, "message": "Merge android11-5.4.259+ (81334f2) into msm-5.4\n\n* remotes/origin/tmp-81334f2:\n UPSTREAM: netfilter: nf_tables: remove busy mark and gc batch API\n UPSTREAM: netfilter: nft_set_hash: mark set element as dead when deleting from packet path\n UPSTREAM: netfilter: nf_tables: adapt set backend to use GC transaction API\n UPSTREAM: netfilter: nf_tables: GC transaction API to avoid race with control plane\n UPSTREAM: netfilter: nft_set_rbtree: fix overlap expiration walk\n UPSTREAM: netfilter: nft_set_rbtree: fix null deref on element insertion\n UPSTREAM: netfilter: nft_set_rbtree: Switch to node list walk for overlap detection\n UPSTREAM: netfilter: nf_tables: drop map element references from preparation phase\n UPSTREAM: netfilter: nftables: rename set element data activation/deactivation functions\n ANDROID: ABI: Update allowed list for QCOM\n BACKPORT: ALSA: compress: Allow pause and resume during draining\n UPSTREAM: netfilter: nf_tables: pass context to nft_set_destroy()\n UPSTREAM: netfilter: nf_tables: don\u0027t skip expired elements during walk\n ANDROID: GKI: db845c: Update symbols list and ABI on rpmsg_register_device_override\n ANDROID: Use GKI Dr. No OWNERS file\n ANDROID: Remove android/OWNERs file\n FROMGIT: Input: uinput - allow injecting event times\n ANDROID: fix up rpmsg_device ABI break\n ANDROID: fix up platform_device ABI break\n UPSTREAM: rpmsg: Fix possible refcount leak in rpmsg_register_device_override()\n UPSTREAM: rpmsg: glink: Release driver_override\n BACKPORT: rpmsg: Fix calling device_lock() on non-initialized device\n BACKPORT: rpmsg: Fix kfree() of static memory on setting driver_override\n UPSTREAM: rpmsg: Constify local variable in field store macro\n UPSTREAM: driver: platform: Add helper for safer setting of driver_override\n Revert \"perf: Disallow mis-matched inherited group reads\"\n Revert \"xfrm: fix a data-race in xfrm_gen_index()\"\n Revert \"Bluetooth: hci_core: Fix build warnings\"\n Revert \"xfrm: interface: use DEV_STATS_INC()\"\n Revert \"netfilter: conntrack: allow sctp hearbeat after connection re-use\"\n Revert \"netfilter: conntrack: don\u0027t refresh sctp entries in closed state\"\n Revert \"netfilter: handle the connecting collision properly in nf_conntrack_proto_sctp\"\n Reapply \"netfilter: conntrack: don\u0027t refresh sctp entries in closed state\"\n Reapply \"netfilter: conntrack: allow sctp hearbeat after connection re-use\"\n Linux 5.4.259\n xfrm6: fix inet6_dev refcount underflow problem\n Bluetooth: hci_sock: Correctly bounds check and pad HCI_MON_NEW_INDEX name\n Bluetooth: hci_sock: fix slab oob read in create_monitor_event\n phy: mapphone-mdm6600: Fix pinctrl_pm handling for sleep pins\n phy: mapphone-mdm6600: Fix runtime PM for remove\n phy: mapphone-mdm6600: Fix runtime disable on probe\n ASoC: pxa: fix a memory leak in probe()\n gpio: vf610: set value before the direction to avoid a glitch\n s390/pci: fix iommu bitmap allocation\n perf: Disallow mis-matched inherited group reads\n USB: serial: option: add Fibocom to DELL custom modem FM101R-GL\n USB: serial: option: add entry for Sierra EM9191 with new firmware\n USB: serial: option: add Telit LE910C4-WWX 0x1035 composition\n ACPI: irq: Fix incorrect return value in acpi_register_gsi()\n Revert \"pinctrl: avoid unsafe code pattern in find_pinctrl()\"\n mmc: core: Capture correct oemid-bits for eMMC cards\n mmc: core: sdio: hold retuning if sdio in 1-bit mode\n mtd: physmap-core: Restore map_rom fallback\n mtd: spinand: micron: correct bitmask for ecc status\n mtd: rawnand: qcom: Unmap the right resource upon probe failure\n Bluetooth: hci_event: Fix using memcmp when comparing keys\n HID: multitouch: Add required quirk for Synaptics 0xcd7e device\n btrfs: fix some -Wmaybe-uninitialized warnings in ioctl.c\n drm: panel-orientation-quirks: Add quirk for One Mix 2S\n sky2: Make sure there is at least one frag_addr available\n regulator/core: Revert \"fix kobject release warning and memory leak in regulator_register()\"\n wifi: cfg80211: avoid leaking stack data into trace\n wifi: mac80211: allow transmitting EAPOL frames with tainted key\n Bluetooth: hci_core: Fix build warnings\n Bluetooth: Avoid redundant authentication\n HID: holtek: fix slab-out-of-bounds Write in holtek_kbd_input_event\n tracing: relax trace_event_eval_update() execution with cond_resched()\n ata: libata-eh: Fix compilation warning in ata_eh_link_report()\n gpio: timberdale: Fix potential deadlock on \u0026tgpio-\u003elock\n overlayfs: set ctime when setting mtime and atime\n i2c: mux: Avoid potential false error message in i2c_mux_add_adapter\n btrfs: initialize start_slot in btrfs_log_prealloc_extents\n btrfs: return -EUCLEAN for delayed tree ref with a ref count not equals to 1\n ARM: dts: ti: omap: Fix noisy serial with overrun-throttle-ms for mapphone\n ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CBA\n ACPI: resource: Skip IRQ override on ASUS ExpertBook B1502CBA\n ACPI: resource: Skip IRQ override on Asus Expertbook B2402CBA\n ACPI: resource: Add Asus ExpertBook B2502 to Asus quirks\n ACPI: resource: Skip IRQ override on Asus Vivobook S5602ZA\n ACPI: resource: Add ASUS model S5402ZA to quirks\n ACPI: resource: Skip IRQ override on Asus Vivobook K3402ZA/K3502ZA\n ACPI: resources: Add DMI-based legacy IRQ override quirk\n ACPI: Drop acpi_dev_irqresource_disabled()\n resource: Add irqresource_disabled()\n net: pktgen: Fix interface flags printing\n netfilter: nft_set_rbtree: .deactivate fails if element has expired\n neighbor: tracing: Move pin6 inside CONFIG_IPV6\u003dy section\n net/sched: sch_hfsc: upgrade \u0027rt\u0027 to \u0027sc\u0027 when it becomes a inner curve\n i40e: prevent crash on probe if hw registers have invalid values\n net: usb: smsc95xx: Fix an error code in smsc95xx_reset()\n ipv4: fib: annotate races around nh-\u003enh_saddr_genid and nh-\u003enh_saddr\n tun: prevent negative ifindex\n tcp: tsq: relax tcp_small_queue_check() when rtx queue contains a single skb\n tcp: fix excessive TLP and RACK timeouts from HZ rounding\n net: rfkill: gpio: prevent value glitch during probe\n net: ipv6: fix return value check in esp_remove_trailer\n net: ipv4: fix return value check in esp_remove_trailer\n xfrm: interface: use DEV_STATS_INC()\n xfrm: fix a data-race in xfrm_gen_index()\n qed: fix LL2 RX buffer allocation\n netfilter: nft_payload: fix wrong mac header matching\n KVM: x86: Mask LVTPC when handling a PMI\n regmap: fix NULL deref on lookup\n nfc: nci: fix possible NULL pointer dereference in send_acknowledge()\n ice: fix over-shifted variable\n Bluetooth: avoid memcmp() out of bounds warning\n Bluetooth: hci_event: Fix coding style\n Bluetooth: vhci: Fix race when opening vhci device\n Bluetooth: Fix a refcnt underflow problem for hci_conn\n Bluetooth: Reject connection with the device which has same BD_ADDR\n Bluetooth: hci_event: Ignore NULL link key\n usb: hub: Guard against accesses to uninitialized BOS descriptors\n Documentation: sysctl: align cells in second content column\n dev_forward_skb: do not scrub skb mark within the same name space\n ravb: Fix use-after-free issue in ravb_tx_timeout_work()\n powerpc/64e: Fix wrong test in __ptep_test_and_clear_young()\n powerpc/8xx: Fix pte_access_permitted() for PAGE_NONE\n dmaengine: mediatek: Fix deadlock caused by synchronize_irq()\n x86/cpu: Fix AMD erratum #1485 on Zen4-based CPUs\n usb: gadget: ncm: Handle decoding of multiple NTB\u0027s in unwrap call\n usb: gadget: udc-xilinx: replace memcpy with memcpy_toio\n pinctrl: avoid unsafe code pattern in find_pinctrl()\n cgroup: Remove duplicates in cgroup v1 tasks file\n Input: xpad - add PXN V900 support\n Input: psmouse - fix fast_reconnect function for PS/2 mode\n Input: powermate - fix use-after-free in powermate_config_complete\n ceph: fix incorrect revoked caps assert in ceph_fill_file_size()\n libceph: use kernel_connect()\n mcb: remove is_added flag from mcb_device struct\n iio: pressure: ms5611: ms5611_prom_is_valid false negative bug\n iio: pressure: dps310: Adjust Timeout Settings\n iio: pressure: bmp280: Fix NULL pointer exception\n usb: musb: Modify the \"HWVers\" register address\n usb: musb: Get the musb_qh poniter after musb_giveback\n usb: dwc3: Soft reset phy on probe for host\n net: usb: dm9601: fix uninitialized variable use in dm9601_mdio_read\n usb: xhci: xhci-ring: Use sysdev for mapping bounce buffer\n dmaengine: stm32-mdma: abort resume if no ongoing transfer\n workqueue: Override implicit ordered attribute in workqueue_apply_unbound_cpumask()\n nfc: nci: assert requested protocol is valid\n net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()\n ixgbe: fix crash with empty VF macvlan list\n drm/vmwgfx: fix typo of sizeof argument\n xen-netback: use default TX queue size for vifs\n mlxsw: fix mlxsw_sp2_nve_vxlan_learning_set() return type\n ieee802154: ca8210: Fix a potential UAF in ca8210_probe\n ravb: Fix up dma_free_coherent() call in ravb_remove()\n drm/msm/dsi: skip the wait for video mode done if not applicable\n drm: etvnaviv: fix bad backport leading to warning\n net: prevent address rewrite in kernel_bind()\n quota: Fix slow quotaoff\n HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect\n pwm: hibvt: Explicitly set .polarity in .get_state()\n lib/test_meminit: fix off-by-one error in test_pages()\n RDMA/cxgb4: Check skb value for failure to allocate\n Reapply \"ANDROID: Revert \"tracing/ring-buffer: Have polling block on watermark\"\"\n Revert \"ring-buffer: Update \"shortest_full\" in polling\"\n Revert \"ANDROID: Revert \"tracing/ring-buffer: Have polling block on watermark\"\"\n Revert \"net: bridge: use DEV_STATS_INC()\"\n FROMLIST: lib/test_meminit: fix off-by-one error in test_pages()\n Linux 5.4.258\n xen/events: replace evtchn_rwlock with RCU\n ima: rework CONFIG_IMA dependency block\n NFS: Fix a race in __nfs_list_for_each_server()\n parisc: Restore __ldcw_align for PA-RISC 2.0 processors\n RDMA/mlx5: Fix NULL string error\n RDMA/siw: Fix connection failure handling\n RDMA/uverbs: Fix typo of sizeof argument\n RDMA/cma: Fix truncation compilation warning in make_cma_ports\n gpio: pxa: disable pinctrl calls for MMP_GPIO\n gpio: aspeed: fix the GPIO number passed to pinctrl_gpio_set_config()\n IB/mlx4: Fix the size of a buffer in add_port_entries()\n RDMA/core: Require admin capabilities to set system parameters\n cpupower: add Makefile dependencies for install targets\n sctp: update hb timer immediately after users change hb_interval\n sctp: update transport state when processing a dupcook packet\n tcp: fix delayed ACKs for MSS boundary condition\n tcp: fix quick-ack counting to count actual ACKs of new data\n net: stmmac: dwmac-stm32: fix resume on STM32 MCU\n netfilter: handle the connecting collision properly in nf_conntrack_proto_sctp\n net: nfc: llcp: Add lock when modifying device list\n net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg\n net: dsa: mv88e6xxx: Avoid EEPROM timeout when EEPROM is absent\n ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()\n net: fix possible store tearing in neigh_periodic_work()\n modpost: add missing else to the \"of\" check\n NFSv4: Fix a nfs4_state_manager() race\n NFS: Add a helper nfs_client_for_each_server()\n NFS4: Trace state recovery operation\n wifi: mt76: mt76x02: fix MT76x0 external LNA gain handling\n wifi: mwifiex: Fix tlv_buf_left calculation\n scsi: target: core: Fix deadlock due to recursive locking\n drivers/net: process the result of hdlc_open() and add call of hdlc_close() in uhdlc_close()\n qed/red_ll2: Fix undefined behavior bug in struct qed_ll2_info\n ima: Finish deprecation of IMA_TRUSTED_KEYRING Kconfig\n wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet\n regmap: rbtree: Fix wrong register marked as in-cache when creating new node\n wifi: iwlwifi: dbg_ini: fix structure packing\n ubi: Refuse attaching if mtd\u0027s erasesize is 0\n net: prevent rewrite of msg_name in sock_sendmsg()\n net: replace calls to sock-\u003eops-\u003econnect() with kernel_connect()\n fs: binfmt_elf_efpic: fix personality for ELF-FDPIC\n scsi: zfcp: Fix a double put in zfcp_port_enqueue()\n ata: libata-sata: increase PMP SRST timeout to 10s\n Revert \"PCI: qcom: Disable write access to read only registers for IP v2.3.3\"\n ata: libata-core: Do not register PM operations for SAS ports\n rbd: take header_rwsem in rbd_dev_refresh() only when updating\n ata: libata-core: Fix port and device removal\n rbd: decouple parent info read-in from updating rbd_dev\n ata: libata-core: Fix ata_port_request_pm() locking\n rbd: decouple header read-in from updating rbd_dev-\u003eheader\n rbd: move rbd_dev_refresh() definition\n ring-buffer: Update \"shortest_full\" in polling\n i2c: i801: unregister tco_pdev in i801_probe() error path\n net: thunderbolt: Fix TCPv6 GSO checksum calculation\n ata: libata-scsi: ignore reserved bits for REPORT SUPPORTED OPERATION CODES\n btrfs: properly report 0 avail for very full file systems\n ALSA: hda: Disable power save for solving pop issue on Lenovo ThinkCentre M70q\n nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()\n serial: 8250_port: Check IRQ data before use\n Smack:- Use overlay inode label in smack_inode_copy_up()\n smack: Retrieve transmuting information in smack_inode_getsecurity()\n smack: Record transmuting in smk_transmuted\n i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc\n i40e: always propagate error value in i40e_set_vsi_promisc()\n ring-buffer: Avoid softlockup in ring_buffer_resize()\n selftests/ftrace: Correctly enable event in instance-event.tc\n i40e: improve locking of mac_filter_hash\n watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running\n watchdog: iTCO_wdt: No need to stop the timer in probe\n nvme-pci: do not set the NUMA node of device if it has none\n fbdev/sh7760fb: Depend on FB\u003dy\n ncsi: Propagate carrier gain/loss events to the NCSI controller\n powerpc/watchpoints: Annotate atomic context in more places\n bpf: Clarify error expectations from bpf_clone_redirect\n spi: nxp-fspi: reset the FLSHxCR1 registers\n ata: libata-eh: do not clear ATA_PFLAG_EH_PENDING in ata_eh_reset()\n parisc: irq: Make irq_stack_union static to avoid sparse warning\n parisc: drivers: Fix sparse warning\n parisc: iosapic.c: Fix sparse warnings\n parisc: sba: Fix compile warning wrt list of SBA devices\n gpio: pmic-eic-sprd: Add can_sleep flag for PMIC EIC chip\n xtensa: boot/lib: fix function prototypes\n xtensa: boot: don\u0027t add include-dirs\n xtensa: iss/network: make functions static\n xtensa: add default definition for XCHAL_HAVE_DIV32\n bus: ti-sysc: Fix SYSC_QUIRK_SWSUP_SIDLE_ACT handling for uart wake-up\n ARM: dts: ti: omap: motorola-mapphone: Fix abe_clkctrl warning on boot\n clk: tegra: fix error return case for recalc_rate\n scsi: qla2xxx: Fix deletion race condition\n MIPS: Alchemy: only build mmc support helpers if au1xmmc is enabled\n scsi: qla2xxx: Fix update_fcport for current_topology\n ata: libata: disallow dev-initiated LPM transitions to unsupported states\n Input: i8042 - add quirk for TUXEDO Gemini 17 Gen1/Clevo PD70PN\n drm/amd/display: prevent potential division by zero errors\n i2c: mux: demux-pinctrl: check the return value of devm_kstrdup()\n drm/amd/display: Fix LFC multiplier changing erratically\n gpio: tb10x: Fix an error handling path in tb10x_gpio_probe()\n drm/amd/display: Reinstate LFC optimization\n netfilter: ipset: Fix race between IPSET_CMD_CREATE and IPSET_CMD_SWAP\n net: rds: Fix possible NULL-pointer dereference\n team: fix null-ptr-deref when team device type is changed\n net: bridge: use DEV_STATS_INC()\n net: hns3: add 5ms delay before clear firmware reset irq source\n dccp: fix dccp_v4_err()/dccp_v6_err() again\n powerpc/perf/hv-24x7: Update domain value check\n ipv4: fix null-deref in ipv4_link_failure\n i40e: Fix VF VLAN offloading when port VLAN is configured\n i40e: Fix warning message and call stack during rmmod i40e driver\n i40e: Remove scheduling while atomic possibility\n i40e: Fix for persistent lldp support\n ASoC: imx-audmix: Fix return error with devm_clk_get()\n selftests: tls: swap the TX and RX sockets in some tests\n ASoC: meson: spdifin: start hw on dai probe\n selftests/tls: Add {} to avoid static checker warning\n ext4: do not let fstrim block system suspend\n bpf: Avoid deadlock when using queue and stack maps from NMI\n ext4: move setting of trimmed bit into ext4_try_to_trim_range()\n netfilter: nf_tables: disallow element removal on anonymous sets\n ext4: replace the traditional ternary conditional operator with with max()/min()\n ext4: mark group as trimmed only if it was fully scanned\n ext4: change s_last_trim_minblks type to unsigned long\n ext4: scope ret locally in ext4_try_to_trim_range()\n ext4: add new helper interface ext4_try_to_trim_range()\n ext4: remove the \u0027group\u0027 parameter of ext4_trim_extent\n ata: libahci: clear pending interrupt status\n tracing: Increase trace array ref count on enable and filter files\n SUNRPC: Mark the cred for revalidation if the server rejects it\n NFS/pNFS: Report EINVAL errors from connect() to the server\n Revert \"drm/panel: simple: Add missing connector type and pixel format for AUO T215HVN01\"\n Revert \"usb: typec: bus: verify partner exists in typec_altmode_attention\"\n Revert \"fs/nls: make load_nls() take a const parameter\"\n Revert \"ip_tunnels: use DEV_STATS_INC()\"\n Linux 5.4.257\n net/sched: Retire rsvp classifier\n drm/amdgpu: fix amdgpu_cs_p1_user_fence\n mtd: rawnand: brcmnand: Fix ECC level field setting for v7.2 controller\n ext4: fix rec_len verify error\n scsi: megaraid_sas: Fix deadlock on firmware crashdump\n i2c: aspeed: Reset the i2c controller when timeout occurs\n tracefs: Add missing lockdown check to tracefs_create_dir()\n nfsd: fix change_info in NFSv4 RENAME replies\n tracing: Have option files inc the trace array ref count\n tracing: Have current_trace inc the trace array ref count\n btrfs: fix lockdep splat and potential deadlock after failure running delayed items\n attr: block mode changes of symlinks\n md/raid1: fix error: ISO C90 forbids mixed declarations\n selftests: tracing: Fix to unmount tracefs for recovering environment\n btrfs: compare the correct fsid/metadata_uuid in btrfs_validate_super\n btrfs: add a helper to read the superblock metadata_uuid\n btrfs: move btrfs_pinned_by_swapfile prototype into volumes.h\n perf tools: Add an option to build without libbfd\n perf jevents: Make build dependency on test JSONs\n tools features: Add feature test to check if libbfd has buildid support\n kobject: Add sanity check for kset-\u003ekobj.ktype in kset_register()\n media: pci: ipu3-cio2: Initialise timing struct to avoid a compiler warning\n serial: cpm_uart: Avoid suspicious locking\n scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show()\n usb: gadget: fsl_qe_udc: validate endpoint index for ch9 udc\n media: pci: cx23885: replace BUG with error return\n media: tuners: qt1010: replace BUG_ON with a regular error\n media: az6007: Fix null-ptr-deref in az6007_i2c_xfer()\n media: anysee: fix null-ptr-deref in anysee_master_xfer\n media: af9005: Fix null-ptr-deref in af9005_i2c_xfer\n media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer()\n media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer\n powerpc/pseries: fix possible memory leak in ibmebus_bus_init()\n jfs: fix invalid free of JFS_IP(ipimap)-\u003ei_imap in diUnmount\n fs/jfs: prevent double-free in dbUnmount() after failed jfs_remount()\n ext2: fix datatype of block number in ext2_xattr_set2()\n md: raid1: fix potential OOB in raid1_remove_disk()\n bus: ti-sysc: Configure uart quirks for k3 SoC\n drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()\n wifi: mac80211_hwsim: drop short frames\n alx: fix OOB-read compiler warning\n mmc: sdhci-esdhc-imx: improve ESDHC_FLAG_ERR010450\n tpm_tis: Resend command to recover from data transfer errors\n crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui()\n wifi: mwifiex: fix fortify warning\n wifi: ath9k: fix printk specifier\n devlink: remove reload failed checks in params get/set callbacks\n hw_breakpoint: fix single-stepping when using bpf_overflow_handler\n perf/smmuv3: Enable HiSilicon Erratum 162001900 quirk for HIP08/09\n ACPI: video: Add backlight\u003dnative DMI quirk for Lenovo Ideapad Z470\n kernel/fork: beware of __put_task_struct() calling context\n ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer\n locks: fix KASAN: use-after-free in trace_event_raw_event_filelock_lock\n btrfs: output extra debug info if we failed to find an inline backref\n autofs: fix memory leak of waitqueues in autofs_catatonic_mode\n parisc: Drop loops_per_jiffy from per_cpu struct\n drm/amd/display: Fix a bug when searching for insert_above_mpcc\n kcm: Fix error handling for SOCK_DGRAM in kcm_sendmsg().\n ixgbe: fix timestamp configuration code\n net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()\n platform/mellanox: mlxbf-tmfifo: Drop jumbo frames\n mlxbf-tmfifo: sparse tags for config access\n platform/mellanox: mlxbf-tmfifo: Drop the Rx packet if no more descriptors\n kcm: Fix memory leak in error path of kcm_sendmsg()\n r8152: check budget for r8152_poll()\n net: ethernet: mtk_eth_soc: fix possible NULL pointer dereference in mtk_hwlro_get_fdir_all()\n net: ethernet: mvpp2_main: fix possible OOB write in mvpp2_ethtool_get_rxnfc()\n net: ipv4: fix one memleak in __inet_del_ifa()\n clk: imx8mm: Move 1443X/1416X PLL clock structure to common place\n ARM: dts: BCM5301X: Extend RAM to full 256MB for Linksys EA6500 V2\n usb: typec: bus: verify partner exists in typec_altmode_attention\n usb: typec: tcpm: Refactor tcpm_handle_vdm_request\n usb: typec: tcpm: Refactor tcpm_handle_vdm_request payload handling\n perf tools: Handle old data in PERF_RECORD_ATTR\n perf hists browser: Fix hierarchy mode header\n mtd: rawnand: brcmnand: Fix potential false time out warning\n mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write\n mtd: rawnand: brcmnand: Fix crash during the panic_write\n btrfs: use the correct superblock to compare fsid in btrfs_validate_super\n btrfs: don\u0027t start transaction when joining with TRANS_JOIN_NOSTART\n fuse: nlookup missing decrement in fuse_direntplus_link\n ata: pata_ftide010: Add missing MODULE_DESCRIPTION\n ata: sata_gemini: Add missing MODULE_DESCRIPTION\n sh: boards: Fix CEU buffer size passed to dma_declare_coherent_memory()\n net: hns3: fix the port information display when sfp is absent\n netfilter: nfnetlink_osf: avoid OOB read\n ip_tunnels: use DEV_STATS_INC()\n idr: fix param name in idr_alloc_cyclic() doc\n s390/zcrypt: don\u0027t leak memory if dev_set_name() fails\n igb: Change IGB_MIN to allow set rx/tx value between 64 and 80\n igbvf: Change IGBVF_MIN to allow set rx/tx value between 64 and 80\n igc: Change IGC_MIN to allow set rx/tx value between 64 and 80\n kcm: Destroy mutex in kcm_exit_net()\n net: sched: sch_qfq: Fix UAF in qfq_dequeue()\n af_unix: Fix data race around sk-\u003esk_err.\n af_unix: Fix data-races around sk-\u003esk_shutdown.\n af_unix: Fix data-race around unix_tot_inflight.\n af_unix: Fix data-races around user-\u003eunix_inflight.\n net: ipv6/addrconf: avoid integer underflow in ipv6_create_tempaddr\n veth: Fixing transmit return status for dropped packets\n igb: disable virtualization features on 82580\n net: read sk-\u003esk_family once in sk_mc_loop()\n ipv4: annotate data-races around fi-\u003efib_dead\n sctp: annotate data-races around sk-\u003esk_wmem_queued\n pwm: lpc32xx: Remove handling of PWM channels\n watchdog: intel-mid_wdt: add MODULE_ALIAS() to allow auto-load\n perf top: Don\u0027t pass an ERR_PTR() directly to perf_session__delete()\n x86/virt: Drop unnecessary check on extended CPUID level in cpu_has_svm()\n perf annotate bpf: Don\u0027t enclose non-debug code with an assert()\n kconfig: fix possible buffer overflow\n NFSv4/pnfs: minor fix for cleanup path in nfs4_get_device_info\n soc: qcom: qmi_encdec: Restrict string length in decode\n clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock\n parisc: led: Reduce CPU overhead for disk \u0026 lan LED computation\n parisc: led: Fix LAN receive and transmit LEDs\n lib/test_meminit: allocate pages up to order MAX_ORDER\n drm/ast: Fix DRAM init on AST2200\n fbdev/ep93xx-fb: Do not assign to struct fb_info.dev\n scsi: qla2xxx: Remove unsupported ql2xenabledif option\n scsi: qla2xxx: Turn off noisy message log\n scsi: qla2xxx: Fix erroneous link up failure\n scsi: qla2xxx: fix inconsistent TMF timeout\n net/ipv6: SKB symmetric hash should incorporate transport ports\n drm: fix double free for gbo in drm_gem_vram_init and drm_gem_vram_create\n udf: initialize newblock to 0\n usb: typec: tcpci: clear the fault status bit\n serial: sc16is7xx: fix broken port 0 uart init\n sc16is7xx: Set iobase to device index\n cpufreq: brcmstb-avs-cpufreq: Fix -Warray-bounds bug\n crypto: stm32 - fix loop iterating through scatterlist for DMA\n s390/ipl: add missing secure/has_secure file to ipl type \u0027unknown\u0027\n pstore/ram: Check start of empty przs during init\n fsverity: skip PKCS#7 parser when keyring is empty\n net: handle ARPHRD_PPP in dev_is_mac_header_xmit()\n X.509: if signature is unsupported skip validation\n dccp: Fix out of bounds access in DCCP error handler\n dlm: fix plock lookup when using multiple lockspaces\n parisc: Fix /proc/cpuinfo output for lscpu\n procfs: block chmod on /proc/thread-self/comm\n Revert \"PCI: Mark NVIDIA T4 GPUs to avoid bus reset\"\n ntb: Fix calculation ntb_transport_tx_free_entry()\n ntb: Clean up tx tail index on link down\n ntb: Drop packets when qp link is down\n media: dvb: symbol fixup for dvb_attach()\n xtensa: PMU: fix base address for the newer hardware\n backlight/lv5207lp: Compare against struct fb_info.device\n backlight/bd6107: Compare against struct fb_info.device\n backlight/gpio_backlight: Compare against struct fb_info.device\n ARM: OMAP2+: Fix -Warray-bounds warning in _pwrdm_state_switch()\n ipmi_si: fix a memleak in try_smi_init()\n ALSA: pcm: Fix missing fixup call in compat hw_refine ioctl\n PM / devfreq: Fix leak in devfreq_dev_release()\n igb: set max size RX buffer when store bad packet is enabled\n skbuff: skb_segment, Call zero copy functions before using skbuff frags\n netfilter: xt_sctp: validate the flag_info count\n netfilter: xt_u32: validate user space input\n netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c\n igmp: limit igmpv3_newpack() packet size to IP_MAX_MTU\n virtio_ring: fix avail_wrap_counter in virtqueue_add_packed\n cpufreq: Fix the race condition while updating the transition_task of policy\n dmaengine: ste_dma40: Add missing IRQ check in d40_probe\n um: Fix hostaudio build errors\n mtd: rawnand: fsmc: handle clk prepare error in fsmc_nand_resume()\n rpmsg: glink: Add check for kstrdup\n phy/rockchip: inno-hdmi: do not power on rk3328 post pll on reg write\n phy/rockchip: inno-hdmi: round fractal pixclock in rk3328 recalc_rate\n phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328\n tracing: Fix race issue between cpu buffer write and swap\n x86/speculation: Mark all Skylake CPUs as vulnerable to GDS\n HID: multitouch: Correct devm device reference for hidinput input_dev name\n HID: logitech-dj: Fix error handling in logi_dj_recv_switch_to_dj_mode()\n RDMA/siw: Correct wrong debug message\n RDMA/siw: Balance the reference of cep-\u003ekref in the error path\n Revert \"IB/isert: Fix incorrect release of isert connection\"\n amba: bus: fix refcount leak\n serial: tegra: handle clk prepare error in tegra_uart_hw_init()\n scsi: fcoe: Fix potential deadlock on \u0026fip-\u003ectlr_lock\n scsi: core: Use 32-bit hostnum in scsi_host_lookup()\n media: ov2680: Fix regulators being left enabled on ov2680_power_on() errors\n media: ov2680: Fix vflip / hflip set functions\n media: ov2680: Fix ov2680_bayer_order()\n media: ov2680: Remove auto-gain and auto-exposure controls\n media: i2c: ov2680: Set V4L2_CTRL_FLAG_MODIFY_LAYOUT on flips\n media: ov5640: Enable MIPI interface in ov5640_set_power_mipi()\n media: i2c: ov5640: Configure HVP lines in s_power callback\n USB: gadget: f_mass_storage: Fix unused variable warning\n media: go7007: Remove redundant if statement\n iommu/vt-d: Fix to flush cache of PASID directory table\n IB/uverbs: Fix an potential error pointer dereference\n driver core: test_async: fix an error code\n dma-buf/sync_file: Fix docs syntax\n coresight: tmc: Explicit type conversions to prevent integer overflow\n scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly\n scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read() directly\n scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly\n x86/APM: drop the duplicate APM_MINOR_DEV macro\n serial: sprd: Fix DMA buffer leak issue\n serial: sprd: Assign sprd_port after initialized to avoid wrong access\n serial: sprd: remove redundant sprd_port cleanup\n serial: sprd: getting port index via serial aliases only\n scsi: qla4xxx: Add length check when parsing nlattrs\n scsi: be2iscsi: Add length check when parsing nlattrs\n scsi: iscsi: Add strlen() check in iscsi_if_set{_host}_param()\n usb: phy: mxs: fix getting wrong state with mxs_phy_is_otg_host()\n media: mediatek: vcodec: Return NULL if no vdec_fb is found\n media: cx24120: Add retval check for cx24120_message_send()\n media: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer()\n media: dib7000p: Fix potential division by zero\n drivers: usb: smsusb: fix error handling code in smsusb_init_device\n media: v4l2-core: Fix a potential resource leak in v4l2_fwnode_parse_link()\n media: v4l2-fwnode: simplify v4l2_fwnode_parse_link\n media: v4l2-fwnode: fix v4l2_fwnode_parse_link handling\n NFS: Guard against READDIR loop when entry names exceed MAXNAMELEN\n NFSD: da_addr_body field missing in some GETDEVICEINFO replies\n fs: lockd: avoid possible wrong NULL parameter\n jfs: validate max amount of blocks before allocation.\n powerpc/iommu: Fix notifiers being shared by PCI and VIO buses\n nfs/blocklayout: Use the passed in gfp flags\n wifi: ath10k: Use RMW accessors for changing LNKCTL\n drm/radeon: Use RMW accessors for changing LNKCTL\n drm/radeon: Prefer pcie_capability_read_word()\n drm/radeon: Replace numbers with PCI_EXP_LNKCTL2 definitions\n drm/radeon: Correct Transmit Margin masks\n drm/amdgpu: Use RMW accessors for changing LNKCTL\n drm/amdgpu: Prefer pcie_capability_read_word()\n drm/amdgpu: Replace numbers with PCI_EXP_LNKCTL2 definitions\n drm/amdgpu: Correct Transmit Margin masks\n PCI: Add #defines for Enter Compliance, Transmit Margin\n powerpc/fadump: reset dump area size if fadump memory reserve fails\n clk: imx: composite-8m: fix clock pauses when set_rate would be a no-op\n PCI/ASPM: Use RMW accessors for changing LNKCTL\n PCI: pciehp: Use RMW accessors for changing LNKCTL\n PCI: Mark NVIDIA T4 GPUs to avoid bus reset\n clk: sunxi-ng: Modify mismatched function name\n drivers: clk: keystone: Fix parameter judgment in _of_pll_clk_init()\n ipmi:ssif: Fix a memory leak when scanning for an adapter\n ipmi:ssif: Add check for kstrdup\n ALSA: ac97: Fix possible error value of *rac97\n of: unittest: Fix overlay type in apply/revert check\n drm/mediatek: Fix potential memory leak if vmap() fail\n audit: fix possible soft lockup in __audit_inode_child()\n smackfs: Prevent underflow in smk_set_cipso()\n drm/msm/mdp5: Don\u0027t leak some plane state\n ima: Remove deprecated IMA_TRUSTED_KEYRING Kconfig\n drm/panel: simple: Add missing connector type and pixel format for AUO T215HVN01\n drm/armada: Fix off-by-one error in armada_overlay_get_property()\n of: unittest: fix null pointer dereferencing in of_unittest_find_node_by_name()\n drm/tegra: dpaux: Fix incorrect return value of platform_get_irq\n drm/tegra: Remove superfluous error messages around platform_get_irq()\n md/md-bitmap: hold \u0027reconfig_mutex\u0027 in backlog_store()\n md/bitmap: don\u0027t set max_write_behind if there is no write mostly device\n drm/amdgpu: Update min() to min_t() in \u0027amdgpu_info_ioctl\u0027\n arm64: dts: qcom: sdm845: Add missing RPMh power domain to GCC\n ARM: dts: BCM53573: Fix Ethernet info for Luxul devices\n drm: adv7511: Fix low refresh rate register for ADV7533/5\n ARM: dts: samsung: s5pv210-smdkv210: correct ethernet reg addresses (split)\n ARM: dts: s5pv210: add dummy 5V regulator for backlight on SMDKv210\n ARM: dts: s5pv210: correct ethernet unit address in SMDKV210\n ARM: dts: s5pv210: use defines for IRQ flags in SMDKV210\n ARM: dts: s5pv210: add RTC 32 KHz clock in SMDKV210\n ARM: dts: samsung: s3c6410-mini6410: correct ethernet reg addresses (split)\n ARM: dts: s3c64xx: align pinctrl with dtschema\n ARM: dts: s3c6410: align node SROM bus node name with dtschema in Mini6410\n ARM: dts: s3c6410: move fixed clocks under root node in Mini6410\n drm/etnaviv: fix dumping of active MMU context\n ARM: dts: BCM53573: Use updated \"spi-gpio\" binding properties\n ARM: dts: BCM53573: Add cells sizes to PCIe node\n ARM: dts: BCM53573: Drop nonexistent \"default-off\" LED trigger\n drm/amdgpu: avoid integer overflow warning in amdgpu_device_resize_fb_bar()\n quota: fix dqput() to follow the guarantees dquot_srcu should provide\n quota: add new helper dquot_active()\n quota: rename dquot_active() to inode_quota_active()\n quota: factor out dquot_write_dquot()\n quota: avoid increasing DQST_LOOKUPS when iterating over dirty/inuse list\n drm/bridge: tc358764: Fix debug print parameter order\n netrom: Deny concurrent connect().\n net/sched: sch_hfsc: Ensure inner classes have fsc curve\n mlxsw: i2c: Limit single transaction buffer size\n mlxsw: i2c: Fix chunk size setting in output mailbox buffer\n net: arcnet: Do not call kfree_skb() under local_irq_disable()\n wifi: ath9k: use IS_ERR() with debugfs_create_dir()\n wifi: mwifiex: avoid possible NULL skb pointer dereference\n wifi: ath9k: protect WMI command response buffer replacement with a lock\n wifi: ath9k: fix races between ath9k_wmi_cmd and ath9k_wmi_ctrl_rx\n wifi: mwifiex: Fix missed return in oob checks failed path\n wifi: mwifiex: fix memory leak in mwifiex_histogram_read()\n fs: ocfs2: namei: check return value of ocfs2_add_entry()\n lwt: Check LWTUNNEL_XMIT_CONTINUE strictly\n lwt: Fix return values of BPF xmit ops\n hwrng: iproc-rng200 - Implement suspend and resume calls\n hwrng: iproc-rng200 - use semicolons rather than commas to separate statements\n crypto: caam - fix unchecked return value error\n Bluetooth: nokia: fix value check in nokia_bluetooth_serdev_probe()\n crypto: stm32 - Properly handle pm_runtime_get failing\n wifi: mwifiex: fix error recovery in PCIE buffer descriptor management\n mwifiex: switch from \u0027pci_\u0027 to \u0027dma_\u0027 API\n wifi: mwifiex: Fix OOB and integer underflow when rx packets\n can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow errors also in case of OOM\n spi: tegra20-sflash: fix to check return value of platform_get_irq() in tegra_sflash_probe()\n regmap: rbtree: Use alloc_flags for memory allocations\n tcp: tcp_enter_quickack_mode() should be static\n bpf: Clear the probe_addr for uprobe\n cpufreq: powernow-k8: Use related_cpus instead of cpus in driver.exit()\n perf/imx_ddr: don\u0027t enable counter0 if none of 4 counters are used\n x86/decompressor: Don\u0027t rely on upper 32 bits of GPRs being preserved\n x86/boot: Annotate local functions\n x86/asm: Make more symbols local\n OPP: Fix passing 0 to PTR_ERR in _opp_attach_genpd()\n tmpfs: verify {g,u}id mount options correctly\n fs: Fix error checking for d_hash_and_lookup()\n new helper: lookup_positive_unlocked()\n eventfd: prevent underflow for eventfd semaphores\n eventfd: Export eventfd_ctx_do_read()\n reiserfs: Check the return value from __getblk()\n Revert \"net: macsec: preserve ingress frame ordering\"\n udf: Handle error when adding extent to a file\n udf: Check consistency of Space Bitmap Descriptor\n powerpc/32s: Fix assembler warning about r0\n net: Avoid address overwrite in kernel_connect\n platform/mellanox: Fix mlxbf-tmfifo not handling all virtio CONSOLE notifications\n ALSA: seq: oss: Fix racy open/close of MIDI devices\n scsi: storvsc: Always set no_report_opcodes\n cifs: add a warning when the in-flight count goes negative\n sctp: handle invalid error codes without calling BUG()\n bnx2x: fix page fault following EEH recovery\n netlabel: fix shift wrapping bug in netlbl_catmap_setlong()\n scsi: qedi: Fix potential deadlock on \u0026qedi_percpu-\u003ep_work_lock\n idmaengine: make FSL_EDMA and INTEL_IDMA64 depends on HAS_IOMEM\n net: usb: qmi_wwan: add Quectel EM05GV2\n clk: fixed-mmio: make COMMON_CLK_FIXED_MMIO depend on HAS_IOMEM\n security: keys: perform capable check only on privileged operations\n platform/x86: huawei-wmi: Silence ambient light sensor\n platform/x86: intel: hid: Always call BTNL ACPI method\n ASoC: atmel: Fix the 8K sample parameter in I2SC master\n ASoc: codecs: ES8316: Fix DMIC config\n fs/nls: make load_nls() take a const parameter\n s390/dasd: fix hanging device after request requeue\n s390/dasd: use correct number of retries for ERP requests\n m68k: Fix invalid .section syntax\n vxlan: generalize vxlan_parse_gpe_hdr and remove unused args\n ethernet: atheros: fix return value check in atl1c_tso_csum()\n ASoC: da7219: Check for failure reading AAD IRQ events\n ASoC: da7219: Flush pending AAD IRQ when suspending\n 9p: virtio: make sure \u0027offs\u0027 is initialized in zc_request\n pinctrl: amd: Don\u0027t show `Invalid config param` errors\n nilfs2: fix WARNING in mark_buffer_dirty due to discarded buffer reuse\n nilfs2: fix general protection fault in nilfs_lookup_dirty_data_buffers()\n fsi: master-ast-cf: Add MODULE_FIRMWARE macro\n firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe\n serial: sc16is7xx: fix bug when first setting GPIO direction\n Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition\n staging: rtl8712: fix race condition\n HID: wacom: remove the battery when the EKR is off\n USB: serial: option: add FOXCONN T99W368/T99W373 product\n USB: serial: option: add Quectel EM05G variant (0x030e)\n modules: only allow symbol_get of EXPORT_SYMBOL_GPL modules\n rtc: ds1685: use EXPORT_SYMBOL_GPL for ds1685_rtc_poweroff\n net: enetc: use EXPORT_SYMBOL_GPL for enetc_phc_index\n mmc: au1xmmc: force non-modular build and remove symbol_get usage\n ARM: pxa: remove use of symbol_get()\n erofs: ensure that the post-EOF tails are all zeroed\n Linux 5.4.256\n Revert \"MIPS: Alchemy: fix dbdma2\"\n powerpc/pmac/smp: Drop unnecessary volatile qualifier\n powerpc/pmac/smp: Avoid unused-variable warnings\n Revert \"drm/display/dp: Fix the DP DSC Receiver cap size\"\n Revert \"macsec: Fix traffic counters/statistics\"\n Revert \"macsec: use DEV_STATS_INC()\"\n ANDROID: GKI: add back pm_runtime_get_if_in_use()\n Revert \"interconnect: Add helpers for enabling/disabling a path\"\n Revert \"interconnect: Do not skip aggregation for disabled paths\"\n Revert \"ALSA: pcm: Set per-card upper limit of PCM buffer allocations\"\n Revert \"ALSA: pcm: Use SG-buffer only when direct DMA is available\"\n Revert \"ALSA: pcm: Fix potential data race at PCM memory allocation helpers\"\n Revert \"ALSA: pcm: Fix build error on m68k and others\"\n Revert \"Revert \"ALSA: pcm: Use SG-buffer only when direct DMA is available\"\"\n Revert \"ALSA: pcm: Check for null pointer of pointer substream before dereferencing it\"\n Linux 5.4.255\n dma-buf/sw_sync: Avoid recursive lock during fence signal\n pinctrl: renesas: rza2: Add lock around pinctrl_generic{{add,remove}_group,{add,remove}_function}\n clk: Fix undefined reference to `clk_rate_exclusive_{get,put}\u0027\n scsi: core: raid_class: Remove raid_component_add()\n scsi: snic: Fix double free in snic_tgt_create()\n irqchip/mips-gic: Don\u0027t touch vl_map if a local interrupt is not routable\n Documentation/sysctl: document page_lock_unfairness\n ALSA: pcm: Check for null pointer of pointer substream before dereferencing it\n interconnect: Do not skip aggregation for disabled paths\n Revert \"ALSA: pcm: Use SG-buffer only when direct DMA is available\"\n ALSA: pcm: Fix build error on m68k and others\n rtnetlink: Reject negative ifindexes in RTM_NEWLINK\n mm: allow a controlled amount of unfairness in the page lock\n x86/fpu: Set X86_FEATURE_OSXSAVE feature after enabling OSXSAVE in CR4\n drm/display/dp: Fix the DP DSC Receiver cap size\n PCI: acpiphp: Use pci_assign_unassigned_bridge_resources() only for non-root bus\n media: vcodec: Fix potential array out-of-bounds in encoder queue_setup\n radix tree: remove unused variable\n lib/clz_ctz.c: Fix __clzdi2() and __ctzdi2() for 32-bit kernels\n batman-adv: Hold rtnl lock during MTU update via netlink\n batman-adv: Fix batadv_v_ogm_aggr_send memory leak\n batman-adv: Fix TT global entry leak when client roamed back\n batman-adv: Do not get eth header before batadv_check_management_packet\n batman-adv: Don\u0027t increase MTU when set by user\n batman-adv: Trigger events for auto adjusted MTU\n nfsd: Fix race to FREE_STATEID and cl_revoked\n clk: Fix slab-out-of-bounds error in devm_clk_release()\n NFSv4: Fix dropped lock for racing OPEN and delegation return\n ibmveth: Use dcbf rather than dcbfl\n bonding: fix macvlan over alb bond support\n net: remove bond_slave_has_mac_rcu()\n net/sched: fix a qdisc modification with ambiguous command request\n igb: Avoid starting unnecessary workqueues\n net: validate veth and vxcan peer ifindexes\n net: bcmgenet: Fix return value check for fixed_phy_register()\n net: bgmac: Fix return value check for fixed_phy_register()\n ipvlan: Fix a reference count leak warning in ipvlan_ns_exit()\n dccp: annotate data-races in dccp_poll()\n sock: annotate data-races around prot-\u003ememory_pressure\n octeontx2-af: SDP: fix receive link config\n tracing: Fix memleak due to race between current_tracer and trace\n drm/amd/display: check TG is non-null before checking if enabled\n drm/amd/display: do not wait for mpc idle if tg is disabled\n ASoC: fsl_sai: Disable bit clock with transmitter\n ASoC: fsl_sai: Add new added registers and new bit definition\n ASoC: fsl_sai: Refine enable/disable TE/RE sequence in trigger()\n regmap: Account for register length in SMBus I/O limits\n ALSA: pcm: Fix potential data race at PCM memory allocation helpers\n ALSA: pcm: Use SG-buffer only when direct DMA is available\n ALSA: pcm: Set per-card upper limit of PCM buffer allocations\n dm integrity: reduce vmalloc space footprint on 32-bit architectures\n dm integrity: increase RECALC_SECTORS to improve recalculate speed\n fbdev: fix potential OOB read in fast_imageblit()\n fbdev: Fix sys_imageblit() for arbitrary image widths\n fbdev: Improve performance of sys_imageblit()\n MIPS: cpu-features: Use boot_cpu_type for CPU type based features\n MIPS: cpu-features: Enable octeon_cache by cpu_type\n fs: dlm: fix mismatch of plock results from userspace\n fs: dlm: use dlm_plock_info for do_unlock_close\n fs: dlm: change plock interrupted message to debug again\n fs: dlm: add pid to debug log\n dlm: replace usage of found with dedicated list iterator variable\n dlm: improve plock logging if interrupted\n PCI: acpiphp: Reassign resources on bridge if necessary\n net: phy: broadcom: stub c45 read/write for 54810\n mmc: f-sdh30: fix order of function calls in sdhci_f_sdh30_remove\n net: xfrm: Amend XFRMA_SEC_CTX nla_policy structure\n net: fix the RTO timer retransmitting skb every 1ms if linear option is enabled\n virtio-net: set queues after driver_ok\n af_unix: Fix null-ptr-deref in unix_stream_sendpage().\n netfilter: set default timeout to 3 secs for sctp shutdown send and recv state\n mmc: block: Fix in_flight[issue_type] value error\n mmc: wbsd: fix double mmc_free_host() in wbsd_init()\n cifs: Release folio lock on fscache read hit.\n ALSA: usb-audio: Add support for Mythware XA001AU capture and playback interfaces.\n serial: 8250: Fix oops for port-\u003epm on uart_change_pm()\n ASoC: meson: axg-tdm-formatter: fix channel slot allocation\n ASoC: rt5665: add missed regulator_bulk_disable\n ARM: dts: imx: Set default tuning step for imx6sx usdhc\n ARM: dts: imx: Set default tuning step for imx7d usdhc\n ARM: dts: imx: Adjust dma-apbh node name\n ARM: dts: imx7s: Drop dma-apb interrupt-names\n bus: ti-sysc: Flush posted write on enable before reset\n bus: ti-sysc: Improve reset to work with modules with no sysconfig\n net: do not allow gso_size to be set to GSO_BY_FRAGS\n sock: Fix misuse of sk_under_memory_pressure()\n net: dsa: mv88e6xxx: Wait for EEPROM done before HW reset\n i40e: fix misleading debug logs\n team: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves\n netfilter: nft_dynset: disallow object maps\n ipvs: fix racy memcpy in proc_do_sync_threshold\n selftests: mirror_gre_changes: Tighten up the TTL test match\n xfrm: add NULL check in xfrm_update_ae_params\n ip_vti: fix potential slab-use-after-free in decode_session6\n ip6_vti: fix slab-use-after-free in decode_session6\n xfrm: fix slab-use-after-free in decode_session6\n xfrm: interface: rename xfrm_interface.c to xfrm_interface_core.c\n net: af_key: fix sadb_x_filter validation\n net: xfrm: Fix xfrm_address_filter OOB read\n btrfs: fix BUG_ON condition in btrfs_cancel_balance\n tty: serial: fsl_lpuart: Clear the error flags by writing 1 for lpuart32 platforms\n powerpc/rtas_flash: allow user copy to flash block cache objects\n fbdev: mmp: fix value check in mmphw_probe()\n i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue\n virtio-mmio: don\u0027t break lifecycle of vm_dev\n virtio-mmio: Use to_virtio_mmio_device() to simply code\n virtio-mmio: convert to devm_platform_ioremap_resource\n nfsd: Remove incorrect check in nfsd4_validate_stateid\n nfsd4: kill warnings on testing stateids with mismatched clientids\n net/ncsi: Fix gma flag setting after response\n tracing/probes: Fix to update dynamic data counter if fetcharg uses it\n tracing/probes: Have process_fetch_insn() take a void * instead of pt_regs\n leds: trigger: netdev: Recheck NETDEV_LED_MODE_LINKUP on dev rename\n mmc: sunxi: fix deferred probing\n mmc: bcm2835: fix deferred probing\n USB: dwc3: qcom: fix NULL-deref on suspend\n usb: dwc3: qcom: Add helper functions to enable,disable wake irqs\n interconnect: Add helpers for enabling/disabling a path\n interconnect: Move internal structs into a separate file\n irqchip/mips-gic: Use raw spinlock for gic_lock\n irqchip/mips-gic: Get rid of the reliance on irq_cpu_online()\n ALSA: hda: Fix unhandled register update during auto-suspend period\n PM: runtime: Add pm_runtime_get_if_active()\n PM-runtime: add tracepoints for usage_count changes\n iommu/amd: Fix \"Guest Virtual APIC Table Root Pointer\" configuration in IRTE\n iio: addac: stx104: Fix race condition when converting analog-to-digital\n iio: addac: stx104: Fix race condition for stx104_write_raw()\n iio: stx104: Move to addac subdirectory\n iio: adc: stx104: Implement and utilize register structures\n iio: adc: stx104: Utilize iomap interface\n iio: add addac subdirectory\n IMA: allow/fix UML builds\n powerpc/kasan: Disable KCOV in KASAN code\n ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()\n ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 \u0026 Q760\n drm/amdgpu: Fix potential fence use-after-free v2\n Bluetooth: L2CAP: Fix use-after-free\n pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db()\n gfs2: Fix possible data races in gfs2_show_options()\n usb: chipidea: imx: don\u0027t request QoS for imx8ulp\n media: platform: mediatek: vpu: fix NULL ptr dereference\n media: v4l2-mem2mem: add lock to protect parameter num_rdy\n FS: JFS: Check for read-only mounted filesystem in txBegin\n FS: JFS: Fix null-ptr-deref Read in txBegin\n MIPS: dec: prom: Address -Warray-bounds warning\n fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev\n udf: Fix uninitialized array access for some pathnames\n ovl: check type and offset of struct vfsmount in ovl_entry\n HID: add quirk for 03f0:464a HP Elite Presenter Mouse\n quota: fix warning in dqgrab()\n quota: Properly disable quotas when add_dquot_ref() fails\n ALSA: emu10k1: roll up loops in DSP setup code for Audigy\n drm/radeon: Fix integer overflow in radeon_cs_parser_init\n macsec: use DEV_STATS_INC()\n macsec: Fix traffic counters/statistics\n selftests: forwarding: tc_flower: Relax success criterion\n mmc: sdhci-f-sdh30: Replace with sdhci_pltfm\n mmc: sdhci_f_sdh30: convert to devm_platform_ioremap_resource\n\nConflict:\n\tdrivers/devfreq/devfreq.c\n\tdrivers/mmc/core/block.c\n\tdrivers/rpmsg/qcom_glink_native.c\n\tinclude/net/tcp.h\n\tnet/ipv4/tcp_input.c\n\nChange-Id: I9381be24d8fd353e56226698d20732fee74a03c3\nSigned-off-by: kamasali Satyanarayan \u003cquic_kamasali@quicinc.com\u003e\n" }, { "commit": "5ae6be03f52d1e9ea2b821fd5805681b062ea8ca", "tree": "fff6cb9f7e173a759582f8beeb57fdf73c92a38e", "parents": [ "f51804072bcc58759ff6228a3d73edadfb5cf787" ], "author": { "name": "Lee Jones", "email": "joneslee@google.com", "time": "Fri Dec 15 09:34:07 2023 +0000" }, "committer": { "name": "Lee Jones", "email": "joneslee@google.com", "time": "Fri Dec 15 09:34:07 2023 +0000" }, "message": "ANDROID: Snapshot Mainline\u0027s version of checkpatch.pl\n\nNothing fancy here. Keeping full history is not required.\n\n `git checkout mainline/master -- scripts/checkpatch.pl`\n\nThis may need to be done periodically.\n\nBug: 316492624\nSigned-off-by: Lee Jones \u003cjoneslee@google.com\u003e\nChange-Id: I4c90b50197ca7277c59e96bf332ecf795c4f3d12\n" }, { "commit": "af6deae7714177b0895aafa3e17a182494724bb1", "tree": "0eedadef7fb055c9084869caeb48e8ce6eab7f2b", "parents": [ "096ff6ecb4c67c8d9ae30aacdc9304e671d6889d", "16e6e107a688046df37976fb6d7310e886c8115d" ], "author": { "name": "Greg Kroah-Hartman", "email": "gregkh@google.com", "time": "Thu Dec 14 13:03:30 2023 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@google.com", "time": "Thu Dec 14 13:03:30 2023 +0000" }, "message": "Merge 5.4.264 into android11-5.4-lts\n\nChanges in 5.4.264\n\thrtimers: Push pending hrtimers away from outgoing CPU earlier\n\tnetfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test\n\ttg3: Move the [rt]x_dropped counters to tg3_napi\n\ttg3: Increment tx_dropped in tg3_tso_bug()\n\tkconfig: fix memory leak from range properties\n\tdrm/amdgpu: correct chunk_ptr to a pointer to chunk.\n\tof: base: Add of_get_cpu_state_node() to get idle states for a CPU node\n\tACPI/IORT: Make iort_get_device_domain IRQ domain agnostic\n\tACPI/IORT: Make iort_msi_map_rid() PCI agnostic\n\tof/iommu: Make of_map_rid() PCI agnostic\n\tof/irq: make of_msi_map_get_device_domain() bus agnostic\n\tof/irq: Make of_msi_map_rid() PCI bus agnostic\n\tof: base: Fix some formatting issues and provide missing descriptions\n\tof: Fix kerneldoc output formatting\n\tof: Add missing \u0027Return\u0027 section in kerneldoc comments\n\tof: dynamic: Fix of_reconfig_get_state_change() return value documentation\n\tipv6: fix potential NULL deref in fib6_add()\n\thv_netvsc: rndis_filter needs to select NLS\n\tnet: arcnet: Fix RESET flag handling\n\tnet: arcnet: com20020 fix error handling\n\tarcnet: restoring support for multiple Sohard Arcnet cards\n\tipv4: ip_gre: Avoid skb_pull() failure in ipgre_xmit()\n\tnet: hns: fix fake link up on xge port\n\tnetfilter: xt_owner: Fix for unsafe access of sk-\u003esk_socket\n\ttcp: do not accept ACK of bytes we never sent\n\tbpf: sockmap, updating the sg structure should also update curr\n\tRDMA/bnxt_re: Correct module description string\n\thwmon: (acpi_power_meter) Fix 4.29 MW bug\n\tASoC: wm_adsp: fix memleak in wm_adsp_buffer_populate\n\ttracing: Fix a warning when allocating buffered events fails\n\tscsi: be2iscsi: Fix a memleak in beiscsi_init_wrb_handle()\n\tARM: imx: Check return value of devm_kasprintf in imx_mmdc_perf_init\n\tARM: dts: imx: make gpt node name generic\n\tARM: dts: imx7: Declare timers compatible with fsl,imx6dl-gpt\n\tALSA: pcm: fix out-of-bounds in snd_pcm_state_names\n\tnilfs2: prevent WARNING in nilfs_sufile_set_segment_usage()\n\ttracing: Always update snapshot buffer size\n\ttracing: Fix incomplete locking when disabling buffered events\n\ttracing: Fix a possible race when disabling buffered events\n\tpacket: Move reference count in packet_sock to atomic_long_t\n\tarm64: dts: mediatek: mt7622: fix memory node warning check\n\tarm64: dts: mediatek: mt8173-evb: Fix regulator-fixed node names\n\tperf/core: Add a new read format to get a number of lost samples\n\tperf: Fix perf_event_validate_size()\n\tgpiolib: sysfs: Fix error handling on failed export\n\tmmc: core: add helpers mmc_regulator_enable/disable_vqmmc\n\tmmc: sdhci-sprd: Fix vqmmc not shutting down after the card was pulled\n\tusb: gadget: f_hid: fix report descriptor allocation\n\tparport: Add support for Brainboxes IX/UC/PX parallel cards\n\tusb: typec: class: fix typec_altmode_put_partner to put plugs\n\tARM: PL011: Fix DMA support\n\tserial: sc16is7xx: address RX timeout interrupt errata\n\tserial: 8250_omap: Add earlycon support for the AM654 UART controller\n\tx86/CPU/AMD: Check vendor in the AMD microcode callback\n\tKVM: s390/mm: Properly reset no-dat\n\tnilfs2: fix missing error check for sb_set_blocksize call\n\tio_uring/af_unix: disable sending io_uring over sockets\n\tnetlink: don\u0027t call -\u003enetlink_bind with table lock held\n\tgenetlink: add CAP_NET_ADMIN test for multicast bind\n\tpsample: Require \u0027CAP_NET_ADMIN\u0027 when joining \"packets\" group\n\tdrop_monitor: Require \u0027CAP_SYS_ADMIN\u0027 when joining \"events\" group\n\ttools headers UAPI: Sync linux/perf_event.h with the kernel sources\n\tRevert \"btrfs: add dmesg output for first mount and last unmount of a filesystem\"\n\tcifs: Fix non-availability of dedup breaking generic/304\n\tsmb: client: fix potential NULL deref in parse_dfs_referrals()\n\tdevcoredump : Serialize devcd_del work\n\tdevcoredump: Send uevent once devcd is ready\n\tLinux 5.4.264\n\nChange-Id: I32d19db2a0ff0cf6d061fa9c8ca527d0b61dd158\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@google.com\u003e\n" }, { "commit": "d162a5e6a51da19544d5ad289d8a94bbebb1569f", "tree": "450c8d5404ec325ae2db8d5bb0fbe55043641df4", "parents": [ "d3464415305097a025b93db045cab3e2811ff2f6" ], "author": { "name": "Masahiro Yamada", "email": "masahiroy@kernel.org", "time": "Wed Nov 15 13:16:53 2023 +0900" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Wed Dec 13 18:18:10 2023 +0100" }, "message": "kconfig: fix memory leak from range properties\n\n[ Upstream commit ae1eff0349f2e908fc083630e8441ea6dc434dc0 ]\n\nCurrently, sym_validate_range() duplicates the range string using\nxstrdup(), which is overwritten by a subsequent sym_calc_value() call.\nIt results in a memory leak.\n\nInstead, only the pointer should be copied.\n\nBelow is a test case, with a summary from Valgrind.\n\n[Test Kconfig]\n\n config FOO\n int \"foo\"\n range 10 20\n\n[Test .config]\n\n CONFIG_FOO\u003d0\n\n[Before]\n\n LEAK SUMMARY:\n definitely lost: 3 bytes in 1 blocks\n indirectly lost: 0 bytes in 0 blocks\n possibly lost: 0 bytes in 0 blocks\n still reachable: 17,465 bytes in 21 blocks\n suppressed: 0 bytes in 0 blocks\n\n[After]\n\n LEAK SUMMARY:\n definitely lost: 0 bytes in 0 blocks\n indirectly lost: 0 bytes in 0 blocks\n possibly lost: 0 bytes in 0 blocks\n still reachable: 17,462 bytes in 20 blocks\n suppressed: 0 bytes in 0 blocks\n\nSigned-off-by: Masahiro Yamada \u003cmasahiroy@kernel.org\u003e\nSigned-off-by: Sasha Levin \u003csashal@kernel.org\u003e\n" }, { "commit": "ffe9ce5b432093b2bedced3ec867aaedc2ff1fe0", "tree": "ee5d00ed6894371847dc1314c11ae4ebb6b55d0f", "parents": [ "23d03fa257af1da4041b4d6bbf63e63dd5ebc8a1", "e85a3e2c8eced803cf383cd41567303f335a7bf4" ], "author": { "name": "Michael Bestas", "email": "mkbestas@lineageos.org", "time": "Wed Dec 06 19:56:54 2023 +0200" }, "committer": { "name": "Michael Bestas", "email": "mkbestas@lineageos.org", "time": "Mon Dec 11 20:22:05 2023 +0200" }, "message": "Merge tag \u0027ASB-2023-12-05_11-5.4\u0027 of https://android.googlesource.com/kernel/common into android13-5.4-lahaina\n\nhttps://source.android.com/docs/security/bulletin/2023-12-01\n\n* tag \u0027ASB-2023-12-05_11-5.4\u0027 of https://android.googlesource.com/kernel/common:\n ANDROID: ABI: Update allowed list for QCOM\n BACKPORT: ALSA: compress: Allow pause and resume during draining\n UPSTREAM: netfilter: nf_tables: pass context to nft_set_destroy()\n UPSTREAM: netfilter: nf_tables: don\u0027t skip expired elements during walk\n ANDROID: GKI: db845c: Update symbols list and ABI on rpmsg_register_device_override\n ANDROID: Use GKI Dr. No OWNERS file\n ANDROID: Remove android/OWNERs file\n FROMGIT: Input: uinput - allow injecting event times\n ANDROID: fix up rpmsg_device ABI break\n ANDROID: fix up platform_device ABI break\n UPSTREAM: rpmsg: Fix possible refcount leak in rpmsg_register_device_override()\n UPSTREAM: rpmsg: glink: Release driver_override\n BACKPORT: rpmsg: Fix calling device_lock() on non-initialized device\n BACKPORT: rpmsg: Fix kfree() of static memory on setting driver_override\n UPSTREAM: rpmsg: Constify local variable in field store macro\n UPSTREAM: driver: platform: Add helper for safer setting of driver_override\n BACKPORT: firmware_loader: Abort all upcoming firmware load request once reboot triggered\n UPSTREAM: firmware_loader: Refactor kill_pending_fw_fallback_reqs()\n Revert \"perf: Disallow mis-matched inherited group reads\"\n Revert \"xfrm: fix a data-race in xfrm_gen_index()\"\n Revert \"Bluetooth: hci_core: Fix build warnings\"\n Revert \"xfrm: interface: use DEV_STATS_INC()\"\n Revert \"netfilter: conntrack: allow sctp hearbeat after connection re-use\"\n Revert \"netfilter: conntrack: don\u0027t refresh sctp entries in closed state\"\n Revert \"netfilter: handle the connecting collision properly in nf_conntrack_proto_sctp\"\n Reapply \"netfilter: conntrack: don\u0027t refresh sctp entries in closed state\"\n Reapply \"netfilter: conntrack: allow sctp hearbeat after connection re-use\"\n Linux 5.4.259\n xfrm6: fix inet6_dev refcount underflow problem\n Bluetooth: hci_sock: Correctly bounds check and pad HCI_MON_NEW_INDEX name\n Bluetooth: hci_sock: fix slab oob read in create_monitor_event\n phy: mapphone-mdm6600: Fix pinctrl_pm handling for sleep pins\n phy: mapphone-mdm6600: Fix runtime PM for remove\n phy: mapphone-mdm6600: Fix runtime disable on probe\n ASoC: pxa: fix a memory leak in probe()\n gpio: vf610: set value before the direction to avoid a glitch\n s390/pci: fix iommu bitmap allocation\n perf: Disallow mis-matched inherited group reads\n USB: serial: option: add Fibocom to DELL custom modem FM101R-GL\n USB: serial: option: add entry for Sierra EM9191 with new firmware\n USB: serial: option: add Telit LE910C4-WWX 0x1035 composition\n ACPI: irq: Fix incorrect return value in acpi_register_gsi()\n Revert \"pinctrl: avoid unsafe code pattern in find_pinctrl()\"\n mmc: core: Capture correct oemid-bits for eMMC cards\n mmc: core: sdio: hold retuning if sdio in 1-bit mode\n mtd: physmap-core: Restore map_rom fallback\n mtd: spinand: micron: correct bitmask for ecc status\n mtd: rawnand: qcom: Unmap the right resource upon probe failure\n Bluetooth: hci_event: Fix using memcmp when comparing keys\n HID: multitouch: Add required quirk for Synaptics 0xcd7e device\n btrfs: fix some -Wmaybe-uninitialized warnings in ioctl.c\n drm: panel-orientation-quirks: Add quirk for One Mix 2S\n sky2: Make sure there is at least one frag_addr available\n regulator/core: Revert \"fix kobject release warning and memory leak in regulator_register()\"\n wifi: cfg80211: avoid leaking stack data into trace\n wifi: mac80211: allow transmitting EAPOL frames with tainted key\n Bluetooth: hci_core: Fix build warnings\n Bluetooth: Avoid redundant authentication\n HID: holtek: fix slab-out-of-bounds Write in holtek_kbd_input_event\n tracing: relax trace_event_eval_update() execution with cond_resched()\n ata: libata-eh: Fix compilation warning in ata_eh_link_report()\n gpio: timberdale: Fix potential deadlock on \u0026tgpio-\u003elock\n overlayfs: set ctime when setting mtime and atime\n i2c: mux: Avoid potential false error message in i2c_mux_add_adapter\n btrfs: initialize start_slot in btrfs_log_prealloc_extents\n btrfs: return -EUCLEAN for delayed tree ref with a ref count not equals to 1\n ARM: dts: ti: omap: Fix noisy serial with overrun-throttle-ms for mapphone\n ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CBA\n ACPI: resource: Skip IRQ override on ASUS ExpertBook B1502CBA\n ACPI: resource: Skip IRQ override on Asus Expertbook B2402CBA\n ACPI: resource: Add Asus ExpertBook B2502 to Asus quirks\n ACPI: resource: Skip IRQ override on Asus Vivobook S5602ZA\n ACPI: resource: Add ASUS model S5402ZA to quirks\n ACPI: resource: Skip IRQ override on Asus Vivobook K3402ZA/K3502ZA\n ACPI: resources: Add DMI-based legacy IRQ override quirk\n ACPI: Drop acpi_dev_irqresource_disabled()\n resource: Add irqresource_disabled()\n net: pktgen: Fix interface flags printing\n netfilter: nft_set_rbtree: .deactivate fails if element has expired\n neighbor: tracing: Move pin6 inside CONFIG_IPV6\u003dy section\n net/sched: sch_hfsc: upgrade \u0027rt\u0027 to \u0027sc\u0027 when it becomes a inner curve\n i40e: prevent crash on probe if hw registers have invalid values\n net: usb: smsc95xx: Fix an error code in smsc95xx_reset()\n ipv4: fib: annotate races around nh-\u003enh_saddr_genid and nh-\u003enh_saddr\n tun: prevent negative ifindex\n tcp: tsq: relax tcp_small_queue_check() when rtx queue contains a single skb\n tcp: fix excessive TLP and RACK timeouts from HZ rounding\n net: rfkill: gpio: prevent value glitch during probe\n net: ipv6: fix return value check in esp_remove_trailer\n net: ipv4: fix return value check in esp_remove_trailer\n xfrm: interface: use DEV_STATS_INC()\n xfrm: fix a data-race in xfrm_gen_index()\n qed: fix LL2 RX buffer allocation\n netfilter: nft_payload: fix wrong mac header matching\n KVM: x86: Mask LVTPC when handling a PMI\n regmap: fix NULL deref on lookup\n nfc: nci: fix possible NULL pointer dereference in send_acknowledge()\n ice: fix over-shifted variable\n Bluetooth: avoid memcmp() out of bounds warning\n Bluetooth: hci_event: Fix coding style\n Bluetooth: vhci: Fix race when opening vhci device\n Bluetooth: Fix a refcnt underflow problem for hci_conn\n Bluetooth: Reject connection with the device which has same BD_ADDR\n Bluetooth: hci_event: Ignore NULL link key\n usb: hub: Guard against accesses to uninitialized BOS descriptors\n Documentation: sysctl: align cells in second content column\n dev_forward_skb: do not scrub skb mark within the same name space\n ravb: Fix use-after-free issue in ravb_tx_timeout_work()\n powerpc/64e: Fix wrong test in __ptep_test_and_clear_young()\n powerpc/8xx: Fix pte_access_permitted() for PAGE_NONE\n dmaengine: mediatek: Fix deadlock caused by synchronize_irq()\n x86/cpu: Fix AMD erratum #1485 on Zen4-based CPUs\n usb: gadget: ncm: Handle decoding of multiple NTB\u0027s in unwrap call\n usb: gadget: udc-xilinx: replace memcpy with memcpy_toio\n pinctrl: avoid unsafe code pattern in find_pinctrl()\n cgroup: Remove duplicates in cgroup v1 tasks file\n Input: xpad - add PXN V900 support\n Input: psmouse - fix fast_reconnect function for PS/2 mode\n Input: powermate - fix use-after-free in powermate_config_complete\n ceph: fix incorrect revoked caps assert in ceph_fill_file_size()\n libceph: use kernel_connect()\n mcb: remove is_added flag from mcb_device struct\n iio: pressure: ms5611: ms5611_prom_is_valid false negative bug\n iio: pressure: dps310: Adjust Timeout Settings\n iio: pressure: bmp280: Fix NULL pointer exception\n usb: musb: Modify the \"HWVers\" register address\n usb: musb: Get the musb_qh poniter after musb_giveback\n usb: dwc3: Soft reset phy on probe for host\n net: usb: dm9601: fix uninitialized variable use in dm9601_mdio_read\n usb: xhci: xhci-ring: Use sysdev for mapping bounce buffer\n dmaengine: stm32-mdma: abort resume if no ongoing transfer\n workqueue: Override implicit ordered attribute in workqueue_apply_unbound_cpumask()\n nfc: nci: assert requested protocol is valid\n net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()\n ixgbe: fix crash with empty VF macvlan list\n drm/vmwgfx: fix typo of sizeof argument\n xen-netback: use default TX queue size for vifs\n mlxsw: fix mlxsw_sp2_nve_vxlan_learning_set() return type\n ieee802154: ca8210: Fix a potential UAF in ca8210_probe\n ravb: Fix up dma_free_coherent() call in ravb_remove()\n drm/msm/dsi: skip the wait for video mode done if not applicable\n drm: etvnaviv: fix bad backport leading to warning\n net: prevent address rewrite in kernel_bind()\n quota: Fix slow quotaoff\n HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect\n pwm: hibvt: Explicitly set .polarity in .get_state()\n lib/test_meminit: fix off-by-one error in test_pages()\n RDMA/cxgb4: Check skb value for failure to allocate\n Reapply \"ANDROID: Revert \"tracing/ring-buffer: Have polling block on watermark\"\"\n Revert \"ring-buffer: Update \"shortest_full\" in polling\"\n Revert \"ANDROID: Revert \"tracing/ring-buffer: Have polling block on watermark\"\"\n Revert \"net: bridge: use DEV_STATS_INC()\"\n FROMLIST: lib/test_meminit: fix off-by-one error in test_pages()\n Linux 5.4.258\n xen/events: replace evtchn_rwlock with RCU\n ima: rework CONFIG_IMA dependency block\n NFS: Fix a race in __nfs_list_for_each_server()\n parisc: Restore __ldcw_align for PA-RISC 2.0 processors\n RDMA/mlx5: Fix NULL string error\n RDMA/siw: Fix connection failure handling\n RDMA/uverbs: Fix typo of sizeof argument\n RDMA/cma: Fix truncation compilation warning in make_cma_ports\n gpio: pxa: disable pinctrl calls for MMP_GPIO\n gpio: aspeed: fix the GPIO number passed to pinctrl_gpio_set_config()\n IB/mlx4: Fix the size of a buffer in add_port_entries()\n RDMA/core: Require admin capabilities to set system parameters\n cpupower: add Makefile dependencies for install targets\n sctp: update hb timer immediately after users change hb_interval\n sctp: update transport state when processing a dupcook packet\n tcp: fix delayed ACKs for MSS boundary condition\n tcp: fix quick-ack counting to count actual ACKs of new data\n net: stmmac: dwmac-stm32: fix resume on STM32 MCU\n netfilter: handle the connecting collision properly in nf_conntrack_proto_sctp\n net: nfc: llcp: Add lock when modifying device list\n net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg\n net: dsa: mv88e6xxx: Avoid EEPROM timeout when EEPROM is absent\n ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()\n net: fix possible store tearing in neigh_periodic_work()\n modpost: add missing else to the \"of\" check\n NFSv4: Fix a nfs4_state_manager() race\n NFS: Add a helper nfs_client_for_each_server()\n NFS4: Trace state recovery operation\n wifi: mt76: mt76x02: fix MT76x0 external LNA gain handling\n wifi: mwifiex: Fix tlv_buf_left calculation\n scsi: target: core: Fix deadlock due to recursive locking\n drivers/net: process the result of hdlc_open() and add call of hdlc_close() in uhdlc_close()\n qed/red_ll2: Fix undefined behavior bug in struct qed_ll2_info\n ima: Finish deprecation of IMA_TRUSTED_KEYRING Kconfig\n wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet\n regmap: rbtree: Fix wrong register marked as in-cache when creating new node\n wifi: iwlwifi: dbg_ini: fix structure packing\n ubi: Refuse attaching if mtd\u0027s erasesize is 0\n net: prevent rewrite of msg_name in sock_sendmsg()\n net: replace calls to sock-\u003eops-\u003econnect() with kernel_connect()\n fs: binfmt_elf_efpic: fix personality for ELF-FDPIC\n scsi: zfcp: Fix a double put in zfcp_port_enqueue()\n ata: libata-sata: increase PMP SRST timeout to 10s\n Revert \"PCI: qcom: Disable write access to read only registers for IP v2.3.3\"\n ata: libata-core: Do not register PM operations for SAS ports\n rbd: take header_rwsem in rbd_dev_refresh() only when updating\n ata: libata-core: Fix port and device removal\n rbd: decouple parent info read-in from updating rbd_dev\n ata: libata-core: Fix ata_port_request_pm() locking\n rbd: decouple header read-in from updating rbd_dev-\u003eheader\n rbd: move rbd_dev_refresh() definition\n ring-buffer: Update \"shortest_full\" in polling\n i2c: i801: unregister tco_pdev in i801_probe() error path\n net: thunderbolt: Fix TCPv6 GSO checksum calculation\n ata: libata-scsi: ignore reserved bits for REPORT SUPPORTED OPERATION CODES\n btrfs: properly report 0 avail for very full file systems\n ALSA: hda: Disable power save for solving pop issue on Lenovo ThinkCentre M70q\n nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()\n serial: 8250_port: Check IRQ data before use\n Smack:- Use overlay inode label in smack_inode_copy_up()\n smack: Retrieve transmuting information in smack_inode_getsecurity()\n smack: Record transmuting in smk_transmuted\n i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc\n i40e: always propagate error value in i40e_set_vsi_promisc()\n ring-buffer: Avoid softlockup in ring_buffer_resize()\n selftests/ftrace: Correctly enable event in instance-event.tc\n i40e: improve locking of mac_filter_hash\n watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running\n watchdog: iTCO_wdt: No need to stop the timer in probe\n nvme-pci: do not set the NUMA node of device if it has none\n fbdev/sh7760fb: Depend on FB\u003dy\n ncsi: Propagate carrier gain/loss events to the NCSI controller\n powerpc/watchpoints: Annotate atomic context in more places\n bpf: Clarify error expectations from bpf_clone_redirect\n spi: nxp-fspi: reset the FLSHxCR1 registers\n ata: libata-eh: do not clear ATA_PFLAG_EH_PENDING in ata_eh_reset()\n parisc: irq: Make irq_stack_union static to avoid sparse warning\n parisc: drivers: Fix sparse warning\n parisc: iosapic.c: Fix sparse warnings\n parisc: sba: Fix compile warning wrt list of SBA devices\n gpio: pmic-eic-sprd: Add can_sleep flag for PMIC EIC chip\n xtensa: boot/lib: fix function prototypes\n xtensa: boot: don\u0027t add include-dirs\n xtensa: iss/network: make functions static\n xtensa: add default definition for XCHAL_HAVE_DIV32\n bus: ti-sysc: Fix SYSC_QUIRK_SWSUP_SIDLE_ACT handling for uart wake-up\n ARM: dts: ti: omap: motorola-mapphone: Fix abe_clkctrl warning on boot\n clk: tegra: fix error return case for recalc_rate\n scsi: qla2xxx: Fix deletion race condition\n MIPS: Alchemy: only build mmc support helpers if au1xmmc is enabled\n scsi: qla2xxx: Fix update_fcport for current_topology\n ata: libata: disallow dev-initiated LPM transitions to unsupported states\n Input: i8042 - add quirk for TUXEDO Gemini 17 Gen1/Clevo PD70PN\n drm/amd/display: prevent potential division by zero errors\n i2c: mux: demux-pinctrl: check the return value of devm_kstrdup()\n drm/amd/display: Fix LFC multiplier changing erratically\n gpio: tb10x: Fix an error handling path in tb10x_gpio_probe()\n drm/amd/display: Reinstate LFC optimization\n netfilter: ipset: Fix race between IPSET_CMD_CREATE and IPSET_CMD_SWAP\n net: rds: Fix possible NULL-pointer dereference\n team: fix null-ptr-deref when team device type is changed\n net: bridge: use DEV_STATS_INC()\n net: hns3: add 5ms delay before clear firmware reset irq source\n dccp: fix dccp_v4_err()/dccp_v6_err() again\n powerpc/perf/hv-24x7: Update domain value check\n ipv4: fix null-deref in ipv4_link_failure\n i40e: Fix VF VLAN offloading when port VLAN is configured\n i40e: Fix warning message and call stack during rmmod i40e driver\n i40e: Remove scheduling while atomic possibility\n i40e: Fix for persistent lldp support\n ASoC: imx-audmix: Fix return error with devm_clk_get()\n selftests: tls: swap the TX and RX sockets in some tests\n ASoC: meson: spdifin: start hw on dai probe\n selftests/tls: Add {} to avoid static checker warning\n ext4: do not let fstrim block system suspend\n bpf: Avoid deadlock when using queue and stack maps from NMI\n ext4: move setting of trimmed bit into ext4_try_to_trim_range()\n netfilter: nf_tables: disallow element removal on anonymous sets\n ext4: replace the traditional ternary conditional operator with with max()/min()\n ext4: mark group as trimmed only if it was fully scanned\n ext4: change s_last_trim_minblks type to unsigned long\n ext4: scope ret locally in ext4_try_to_trim_range()\n ext4: add new helper interface ext4_try_to_trim_range()\n ext4: remove the \u0027group\u0027 parameter of ext4_trim_extent\n ata: libahci: clear pending interrupt status\n tracing: Increase trace array ref count on enable and filter files\n SUNRPC: Mark the cred for revalidation if the server rejects it\n NFS/pNFS: Report EINVAL errors from connect() to the server\n Revert \"drm/panel: simple: Add missing connector type and pixel format for AUO T215HVN01\"\n Revert \"usb: typec: bus: verify partner exists in typec_altmode_attention\"\n Revert \"fs/nls: make load_nls() take a const parameter\"\n Revert \"ip_tunnels: use DEV_STATS_INC()\"\n Linux 5.4.257\n net/sched: Retire rsvp classifier\n drm/amdgpu: fix amdgpu_cs_p1_user_fence\n mtd: rawnand: brcmnand: Fix ECC level field setting for v7.2 controller\n ext4: fix rec_len verify error\n scsi: megaraid_sas: Fix deadlock on firmware crashdump\n i2c: aspeed: Reset the i2c controller when timeout occurs\n tracefs: Add missing lockdown check to tracefs_create_dir()\n nfsd: fix change_info in NFSv4 RENAME replies\n tracing: Have option files inc the trace array ref count\n tracing: Have current_trace inc the trace array ref count\n btrfs: fix lockdep splat and potential deadlock after failure running delayed items\n attr: block mode changes of symlinks\n md/raid1: fix error: ISO C90 forbids mixed declarations\n selftests: tracing: Fix to unmount tracefs for recovering environment\n btrfs: compare the correct fsid/metadata_uuid in btrfs_validate_super\n btrfs: add a helper to read the superblock metadata_uuid\n btrfs: move btrfs_pinned_by_swapfile prototype into volumes.h\n perf tools: Add an option to build without libbfd\n perf jevents: Make build dependency on test JSONs\n tools features: Add feature test to check if libbfd has buildid support\n kobject: Add sanity check for kset-\u003ekobj.ktype in kset_register()\n media: pci: ipu3-cio2: Initialise timing struct to avoid a compiler warning\n serial: cpm_uart: Avoid suspicious locking\n scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show()\n usb: gadget: fsl_qe_udc: validate endpoint index for ch9 udc\n media: pci: cx23885: replace BUG with error return\n media: tuners: qt1010: replace BUG_ON with a regular error\n media: az6007: Fix null-ptr-deref in az6007_i2c_xfer()\n media: anysee: fix null-ptr-deref in anysee_master_xfer\n media: af9005: Fix null-ptr-deref in af9005_i2c_xfer\n media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer()\n media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer\n powerpc/pseries: fix possible memory leak in ibmebus_bus_init()\n jfs: fix invalid free of JFS_IP(ipimap)-\u003ei_imap in diUnmount\n fs/jfs: prevent double-free in dbUnmount() after failed jfs_remount()\n ext2: fix datatype of block number in ext2_xattr_set2()\n md: raid1: fix potential OOB in raid1_remove_disk()\n bus: ti-sysc: Configure uart quirks for k3 SoC\n drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()\n wifi: mac80211_hwsim: drop short frames\n alx: fix OOB-read compiler warning\n mmc: sdhci-esdhc-imx: improve ESDHC_FLAG_ERR010450\n tpm_tis: Resend command to recover from data transfer errors\n crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui()\n wifi: mwifiex: fix fortify warning\n wifi: ath9k: fix printk specifier\n devlink: remove reload failed checks in params get/set callbacks\n hw_breakpoint: fix single-stepping when using bpf_overflow_handler\n perf/smmuv3: Enable HiSilicon Erratum 162001900 quirk for HIP08/09\n ACPI: video: Add backlight\u003dnative DMI quirk for Lenovo Ideapad Z470\n kernel/fork: beware of __put_task_struct() calling context\n ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer\n locks: fix KASAN: use-after-free in trace_event_raw_event_filelock_lock\n btrfs: output extra debug info if we failed to find an inline backref\n autofs: fix memory leak of waitqueues in autofs_catatonic_mode\n parisc: Drop loops_per_jiffy from per_cpu struct\n drm/amd/display: Fix a bug when searching for insert_above_mpcc\n kcm: Fix error handling for SOCK_DGRAM in kcm_sendmsg().\n ixgbe: fix timestamp configuration code\n net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()\n platform/mellanox: mlxbf-tmfifo: Drop jumbo frames\n mlxbf-tmfifo: sparse tags for config access\n platform/mellanox: mlxbf-tmfifo: Drop the Rx packet if no more descriptors\n kcm: Fix memory leak in error path of kcm_sendmsg()\n r8152: check budget for r8152_poll()\n net: ethernet: mtk_eth_soc: fix possible NULL pointer dereference in mtk_hwlro_get_fdir_all()\n net: ethernet: mvpp2_main: fix possible OOB write in mvpp2_ethtool_get_rxnfc()\n net: ipv4: fix one memleak in __inet_del_ifa()\n clk: imx8mm: Move 1443X/1416X PLL clock structure to common place\n ARM: dts: BCM5301X: Extend RAM to full 256MB for Linksys EA6500 V2\n usb: typec: bus: verify partner exists in typec_altmode_attention\n usb: typec: tcpm: Refactor tcpm_handle_vdm_request\n usb: typec: tcpm: Refactor tcpm_handle_vdm_request payload handling\n perf tools: Handle old data in PERF_RECORD_ATTR\n perf hists browser: Fix hierarchy mode header\n mtd: rawnand: brcmnand: Fix potential false time out warning\n mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write\n mtd: rawnand: brcmnand: Fix crash during the panic_write\n btrfs: use the correct superblock to compare fsid in btrfs_validate_super\n btrfs: don\u0027t start transaction when joining with TRANS_JOIN_NOSTART\n fuse: nlookup missing decrement in fuse_direntplus_link\n ata: pata_ftide010: Add missing MODULE_DESCRIPTION\n ata: sata_gemini: Add missing MODULE_DESCRIPTION\n sh: boards: Fix CEU buffer size passed to dma_declare_coherent_memory()\n net: hns3: fix the port information display when sfp is absent\n netfilter: nfnetlink_osf: avoid OOB read\n ip_tunnels: use DEV_STATS_INC()\n idr: fix param name in idr_alloc_cyclic() doc\n s390/zcrypt: don\u0027t leak memory if dev_set_name() fails\n igb: Change IGB_MIN to allow set rx/tx value between 64 and 80\n igbvf: Change IGBVF_MIN to allow set rx/tx value between 64 and 80\n igc: Change IGC_MIN to allow set rx/tx value between 64 and 80\n kcm: Destroy mutex in kcm_exit_net()\n net: sched: sch_qfq: Fix UAF in qfq_dequeue()\n af_unix: Fix data race around sk-\u003esk_err.\n af_unix: Fix data-races around sk-\u003esk_shutdown.\n af_unix: Fix data-race around unix_tot_inflight.\n af_unix: Fix data-races around user-\u003eunix_inflight.\n net: ipv6/addrconf: avoid integer underflow in ipv6_create_tempaddr\n veth: Fixing transmit return status for dropped packets\n igb: disable virtualization features on 82580\n net: read sk-\u003esk_family once in sk_mc_loop()\n ipv4: annotate data-races around fi-\u003efib_dead\n sctp: annotate data-races around sk-\u003esk_wmem_queued\n pwm: lpc32xx: Remove handling of PWM channels\n watchdog: intel-mid_wdt: add MODULE_ALIAS() to allow auto-load\n perf top: Don\u0027t pass an ERR_PTR() directly to perf_session__delete()\n x86/virt: Drop unnecessary check on extended CPUID level in cpu_has_svm()\n perf annotate bpf: Don\u0027t enclose non-debug code with an assert()\n kconfig: fix possible buffer overflow\n NFSv4/pnfs: minor fix for cleanup path in nfs4_get_device_info\n soc: qcom: qmi_encdec: Restrict string length in decode\n clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock\n parisc: led: Reduce CPU overhead for disk \u0026 lan LED computation\n parisc: led: Fix LAN receive and transmit LEDs\n lib/test_meminit: allocate pages up to order MAX_ORDER\n drm/ast: Fix DRAM init on AST2200\n fbdev/ep93xx-fb: Do not assign to struct fb_info.dev\n scsi: qla2xxx: Remove unsupported ql2xenabledif option\n scsi: qla2xxx: Turn off noisy message log\n scsi: qla2xxx: Fix erroneous link up failure\n scsi: qla2xxx: fix inconsistent TMF timeout\n net/ipv6: SKB symmetric hash should incorporate transport ports\n drm: fix double free for gbo in drm_gem_vram_init and drm_gem_vram_create\n udf: initialize newblock to 0\n usb: typec: tcpci: clear the fault status bit\n serial: sc16is7xx: fix broken port 0 uart init\n sc16is7xx: Set iobase to device index\n cpufreq: brcmstb-avs-cpufreq: Fix -Warray-bounds bug\n crypto: stm32 - fix loop iterating through scatterlist for DMA\n s390/ipl: add missing secure/has_secure file to ipl type \u0027unknown\u0027\n pstore/ram: Check start of empty przs during init\n fsverity: skip PKCS#7 parser when keyring is empty\n net: handle ARPHRD_PPP in dev_is_mac_header_xmit()\n X.509: if signature is unsupported skip validation\n dccp: Fix out of bounds access in DCCP error handler\n dlm: fix plock lookup when using multiple lockspaces\n parisc: Fix /proc/cpuinfo output for lscpu\n procfs: block chmod on /proc/thread-self/comm\n Revert \"PCI: Mark NVIDIA T4 GPUs to avoid bus reset\"\n ntb: Fix calculation ntb_transport_tx_free_entry()\n ntb: Clean up tx tail index on link down\n ntb: Drop packets when qp link is down\n media: dvb: symbol fixup for dvb_attach()\n xtensa: PMU: fix base address for the newer hardware\n backlight/lv5207lp: Compare against struct fb_info.device\n backlight/bd6107: Compare against struct fb_info.device\n backlight/gpio_backlight: Compare against struct fb_info.device\n ARM: OMAP2+: Fix -Warray-bounds warning in _pwrdm_state_switch()\n ipmi_si: fix a memleak in try_smi_init()\n ALSA: pcm: Fix missing fixup call in compat hw_refine ioctl\n PM / devfreq: Fix leak in devfreq_dev_release()\n igb: set max size RX buffer when store bad packet is enabled\n skbuff: skb_segment, Call zero copy functions before using skbuff frags\n netfilter: xt_sctp: validate the flag_info count\n netfilter: xt_u32: validate user space input\n netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c\n igmp: limit igmpv3_newpack() packet size to IP_MAX_MTU\n virtio_ring: fix avail_wrap_counter in virtqueue_add_packed\n cpufreq: Fix the race condition while updating the transition_task of policy\n dmaengine: ste_dma40: Add missing IRQ check in d40_probe\n um: Fix hostaudio build errors\n mtd: rawnand: fsmc: handle clk prepare error in fsmc_nand_resume()\n rpmsg: glink: Add check for kstrdup\n phy/rockchip: inno-hdmi: do not power on rk3328 post pll on reg write\n phy/rockchip: inno-hdmi: round fractal pixclock in rk3328 recalc_rate\n phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328\n tracing: Fix race issue between cpu buffer write and swap\n x86/speculation: Mark all Skylake CPUs as vulnerable to GDS\n HID: multitouch: Correct devm device reference for hidinput input_dev name\n HID: logitech-dj: Fix error handling in logi_dj_recv_switch_to_dj_mode()\n RDMA/siw: Correct wrong debug message\n RDMA/siw: Balance the reference of cep-\u003ekref in the error path\n Revert \"IB/isert: Fix incorrect release of isert connection\"\n amba: bus: fix refcount leak\n serial: tegra: handle clk prepare error in tegra_uart_hw_init()\n scsi: fcoe: Fix potential deadlock on \u0026fip-\u003ectlr_lock\n scsi: core: Use 32-bit hostnum in scsi_host_lookup()\n media: ov2680: Fix regulators being left enabled on ov2680_power_on() errors\n media: ov2680: Fix vflip / hflip set functions\n media: ov2680: Fix ov2680_bayer_order()\n media: ov2680: Remove auto-gain and auto-exposure controls\n media: i2c: ov2680: Set V4L2_CTRL_FLAG_MODIFY_LAYOUT on flips\n media: ov5640: Enable MIPI interface in ov5640_set_power_mipi()\n media: i2c: ov5640: Configure HVP lines in s_power callback\n USB: gadget: f_mass_storage: Fix unused variable warning\n media: go7007: Remove redundant if statement\n iommu/vt-d: Fix to flush cache of PASID directory table\n IB/uverbs: Fix an potential error pointer dereference\n driver core: test_async: fix an error code\n dma-buf/sync_file: Fix docs syntax\n coresight: tmc: Explicit type conversions to prevent integer overflow\n scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly\n scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read() directly\n scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly\n x86/APM: drop the duplicate APM_MINOR_DEV macro\n serial: sprd: Fix DMA buffer leak issue\n serial: sprd: Assign sprd_port after initialized to avoid wrong access\n serial: sprd: remove redundant sprd_port cleanup\n serial: sprd: getting port index via serial aliases only\n scsi: qla4xxx: Add length check when parsing nlattrs\n scsi: be2iscsi: Add length check when parsing nlattrs\n scsi: iscsi: Add strlen() check in iscsi_if_set{_host}_param()\n usb: phy: mxs: fix getting wrong state with mxs_phy_is_otg_host()\n media: mediatek: vcodec: Return NULL if no vdec_fb is found\n media: cx24120: Add retval check for cx24120_message_send()\n media: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer()\n media: dib7000p: Fix potential division by zero\n drivers: usb: smsusb: fix error handling code in smsusb_init_device\n media: v4l2-core: Fix a potential resource leak in v4l2_fwnode_parse_link()\n media: v4l2-fwnode: simplify v4l2_fwnode_parse_link\n media: v4l2-fwnode: fix v4l2_fwnode_parse_link handling\n NFS: Guard against READDIR loop when entry names exceed MAXNAMELEN\n NFSD: da_addr_body field missing in some GETDEVICEINFO replies\n fs: lockd: avoid possible wrong NULL parameter\n jfs: validate max amount of blocks before allocation.\n powerpc/iommu: Fix notifiers being shared by PCI and VIO buses\n nfs/blocklayout: Use the passed in gfp flags\n wifi: ath10k: Use RMW accessors for changing LNKCTL\n drm/radeon: Use RMW accessors for changing LNKCTL\n drm/radeon: Prefer pcie_capability_read_word()\n drm/radeon: Replace numbers with PCI_EXP_LNKCTL2 definitions\n drm/radeon: Correct Transmit Margin masks\n drm/amdgpu: Use RMW accessors for changing LNKCTL\n drm/amdgpu: Prefer pcie_capability_read_word()\n drm/amdgpu: Replace numbers with PCI_EXP_LNKCTL2 definitions\n drm/amdgpu: Correct Transmit Margin masks\n PCI: Add #defines for Enter Compliance, Transmit Margin\n powerpc/fadump: reset dump area size if fadump memory reserve fails\n clk: imx: composite-8m: fix clock pauses when set_rate would be a no-op\n PCI/ASPM: Use RMW accessors for changing LNKCTL\n PCI: pciehp: Use RMW accessors for changing LNKCTL\n PCI: Mark NVIDIA T4 GPUs to avoid bus reset\n clk: sunxi-ng: Modify mismatched function name\n drivers: clk: keystone: Fix parameter judgment in _of_pll_clk_init()\n ipmi:ssif: Fix a memory leak when scanning for an adapter\n ipmi:ssif: Add check for kstrdup\n ALSA: ac97: Fix possible error value of *rac97\n of: unittest: Fix overlay type in apply/revert check\n drm/mediatek: Fix potential memory leak if vmap() fail\n audit: fix possible soft lockup in __audit_inode_child()\n smackfs: Prevent underflow in smk_set_cipso()\n drm/msm/mdp5: Don\u0027t leak some plane state\n ima: Remove deprecated IMA_TRUSTED_KEYRING Kconfig\n drm/panel: simple: Add missing connector type and pixel format for AUO T215HVN01\n drm/armada: Fix off-by-one error in armada_overlay_get_property()\n of: unittest: fix null pointer dereferencing in of_unittest_find_node_by_name()\n drm/tegra: dpaux: Fix incorrect return value of platform_get_irq\n drm/tegra: Remove superfluous error messages around platform_get_irq()\n md/md-bitmap: hold \u0027reconfig_mutex\u0027 in backlog_store()\n md/bitmap: don\u0027t set max_write_behind if there is no write mostly device\n drm/amdgpu: Update min() to min_t() in \u0027amdgpu_info_ioctl\u0027\n arm64: dts: qcom: sdm845: Add missing RPMh power domain to GCC\n ARM: dts: BCM53573: Fix Ethernet info for Luxul devices\n drm: adv7511: Fix low refresh rate register for ADV7533/5\n ARM: dts: samsung: s5pv210-smdkv210: correct ethernet reg addresses (split)\n ARM: dts: s5pv210: add dummy 5V regulator for backlight on SMDKv210\n ARM: dts: s5pv210: correct ethernet unit address in SMDKV210\n ARM: dts: s5pv210: use defines for IRQ flags in SMDKV210\n ARM: dts: s5pv210: add RTC 32 KHz clock in SMDKV210\n ARM: dts: samsung: s3c6410-mini6410: correct ethernet reg addresses (split)\n ARM: dts: s3c64xx: align pinctrl with dtschema\n ARM: dts: s3c6410: align node SROM bus node name with dtschema in Mini6410\n ARM: dts: s3c6410: move fixed clocks under root node in Mini6410\n drm/etnaviv: fix dumping of active MMU context\n ARM: dts: BCM53573: Use updated \"spi-gpio\" binding properties\n ARM: dts: BCM53573: Add cells sizes to PCIe node\n ARM: dts: BCM53573: Drop nonexistent \"default-off\" LED trigger\n drm/amdgpu: avoid integer overflow warning in amdgpu_device_resize_fb_bar()\n quota: fix dqput() to follow the guarantees dquot_srcu should provide\n quota: add new helper dquot_active()\n quota: rename dquot_active() to inode_quota_active()\n quota: factor out dquot_write_dquot()\n quota: avoid increasing DQST_LOOKUPS when iterating over dirty/inuse list\n drm/bridge: tc358764: Fix debug print parameter order\n netrom: Deny concurrent connect().\n net/sched: sch_hfsc: Ensure inner classes have fsc curve\n mlxsw: i2c: Limit single transaction buffer size\n mlxsw: i2c: Fix chunk size setting in output mailbox buffer\n net: arcnet: Do not call kfree_skb() under local_irq_disable()\n wifi: ath9k: use IS_ERR() with debugfs_create_dir()\n wifi: mwifiex: avoid possible NULL skb pointer dereference\n wifi: ath9k: protect WMI command response buffer replacement with a lock\n wifi: ath9k: fix races between ath9k_wmi_cmd and ath9k_wmi_ctrl_rx\n wifi: mwifiex: Fix missed return in oob checks failed path\n wifi: mwifiex: fix memory leak in mwifiex_histogram_read()\n fs: ocfs2: namei: check return value of ocfs2_add_entry()\n lwt: Check LWTUNNEL_XMIT_CONTINUE strictly\n lwt: Fix return values of BPF xmit ops\n hwrng: iproc-rng200 - Implement suspend and resume calls\n hwrng: iproc-rng200 - use semicolons rather than commas to separate statements\n crypto: caam - fix unchecked return value error\n Bluetooth: nokia: fix value check in nokia_bluetooth_serdev_probe()\n crypto: stm32 - Properly handle pm_runtime_get failing\n wifi: mwifiex: fix error recovery in PCIE buffer descriptor management\n mwifiex: switch from \u0027pci_\u0027 to \u0027dma_\u0027 API\n wifi: mwifiex: Fix OOB and integer underflow when rx packets\n can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow errors also in case of OOM\n spi: tegra20-sflash: fix to check return value of platform_get_irq() in tegra_sflash_probe()\n regmap: rbtree: Use alloc_flags for memory allocations\n tcp: tcp_enter_quickack_mode() should be static\n bpf: Clear the probe_addr for uprobe\n cpufreq: powernow-k8: Use related_cpus instead of cpus in driver.exit()\n perf/imx_ddr: don\u0027t enable counter0 if none of 4 counters are used\n x86/decompressor: Don\u0027t rely on upper 32 bits of GPRs being preserved\n x86/boot: Annotate local functions\n x86/asm: Make more symbols local\n OPP: Fix passing 0 to PTR_ERR in _opp_attach_genpd()\n tmpfs: verify {g,u}id mount options correctly\n fs: Fix error checking for d_hash_and_lookup()\n new helper: lookup_positive_unlocked()\n eventfd: prevent underflow for eventfd semaphores\n eventfd: Export eventfd_ctx_do_read()\n reiserfs: Check the return value from __getblk()\n Revert \"net: macsec: preserve ingress frame ordering\"\n udf: Handle error when adding extent to a file\n udf: Check consistency of Space Bitmap Descriptor\n powerpc/32s: Fix assembler warning about r0\n net: Avoid address overwrite in kernel_connect\n platform/mellanox: Fix mlxbf-tmfifo not handling all virtio CONSOLE notifications\n ALSA: seq: oss: Fix racy open/close of MIDI devices\n scsi: storvsc: Always set no_report_opcodes\n cifs: add a warning when the in-flight count goes negative\n sctp: handle invalid error codes without calling BUG()\n bnx2x: fix page fault following EEH recovery\n netlabel: fix shift wrapping bug in netlbl_catmap_setlong()\n scsi: qedi: Fix potential deadlock on \u0026qedi_percpu-\u003ep_work_lock\n idmaengine: make FSL_EDMA and INTEL_IDMA64 depends on HAS_IOMEM\n net: usb: qmi_wwan: add Quectel EM05GV2\n clk: fixed-mmio: make COMMON_CLK_FIXED_MMIO depend on HAS_IOMEM\n security: keys: perform capable check only on privileged operations\n platform/x86: huawei-wmi: Silence ambient light sensor\n platform/x86: intel: hid: Always call BTNL ACPI method\n ASoC: atmel: Fix the 8K sample parameter in I2SC master\n ASoc: codecs: ES8316: Fix DMIC config\n fs/nls: make load_nls() take a const parameter\n s390/dasd: fix hanging device after request requeue\n s390/dasd: use correct number of retries for ERP requests\n m68k: Fix invalid .section syntax\n vxlan: generalize vxlan_parse_gpe_hdr and remove unused args\n ethernet: atheros: fix return value check in atl1c_tso_csum()\n ASoC: da7219: Check for failure reading AAD IRQ events\n ASoC: da7219: Flush pending AAD IRQ when suspending\n 9p: virtio: make sure \u0027offs\u0027 is initialized in zc_request\n pinctrl: amd: Don\u0027t show `Invalid config param` errors\n nilfs2: fix WARNING in mark_buffer_dirty due to discarded buffer reuse\n nilfs2: fix general protection fault in nilfs_lookup_dirty_data_buffers()\n fsi: master-ast-cf: Add MODULE_FIRMWARE macro\n firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe\n serial: sc16is7xx: fix bug when first setting GPIO direction\n Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition\n staging: rtl8712: fix race condition\n HID: wacom: remove the battery when the EKR is off\n USB: serial: option: add FOXCONN T99W368/T99W373 product\n USB: serial: option: add Quectel EM05G variant (0x030e)\n modules: only allow symbol_get of EXPORT_SYMBOL_GPL modules\n rtc: ds1685: use EXPORT_SYMBOL_GPL for ds1685_rtc_poweroff\n net: enetc: use EXPORT_SYMBOL_GPL for enetc_phc_index\n mmc: au1xmmc: force non-modular build and remove symbol_get usage\n ARM: pxa: remove use of symbol_get()\n erofs: ensure that the post-EOF tails are all zeroed\n Linux 5.4.256\n Revert \"MIPS: Alchemy: fix dbdma2\"\n powerpc/pmac/smp: Drop unnecessary volatile qualifier\n powerpc/pmac/smp: Avoid unused-variable warnings\n Revert \"drm/display/dp: Fix the DP DSC Receiver cap size\"\n Revert \"macsec: Fix traffic counters/statistics\"\n Revert \"macsec: use DEV_STATS_INC()\"\n ANDROID: GKI: add back pm_runtime_get_if_in_use()\n Revert \"interconnect: Add helpers for enabling/disabling a path\"\n Revert \"interconnect: Do not skip aggregation for disabled paths\"\n Revert \"ALSA: pcm: Set per-card upper limit of PCM buffer allocations\"\n Revert \"ALSA: pcm: Use SG-buffer only when direct DMA is available\"\n Revert \"ALSA: pcm: Fix potential data race at PCM memory allocation helpers\"\n Revert \"ALSA: pcm: Fix build error on m68k and others\"\n Revert \"Revert \"ALSA: pcm: Use SG-buffer only when direct DMA is available\"\"\n Revert \"ALSA: pcm: Check for null pointer of pointer substream before dereferencing it\"\n Linux 5.4.255\n dma-buf/sw_sync: Avoid recursive lock during fence signal\n pinctrl: renesas: rza2: Add lock around pinctrl_generic{{add,remove}_group,{add,remove}_function}\n clk: Fix undefined reference to `clk_rate_exclusive_{get,put}\u0027\n scsi: core: raid_class: Remove raid_component_add()\n scsi: snic: Fix double free in snic_tgt_create()\n irqchip/mips-gic: Don\u0027t touch vl_map if a local interrupt is not routable\n Documentation/sysctl: document page_lock_unfairness\n ALSA: pcm: Check for null pointer of pointer substream before dereferencing it\n interconnect: Do not skip aggregation for disabled paths\n Revert \"ALSA: pcm: Use SG-buffer only when direct DMA is available\"\n ALSA: pcm: Fix build error on m68k and others\n rtnetlink: Reject negative ifindexes in RTM_NEWLINK\n mm: allow a controlled amount of unfairness in the page lock\n x86/fpu: Set X86_FEATURE_OSXSAVE feature after enabling OSXSAVE in CR4\n drm/display/dp: Fix the DP DSC Receiver cap size\n PCI: acpiphp: Use pci_assign_unassigned_bridge_resources() only for non-root bus\n media: vcodec: Fix potential array out-of-bounds in encoder queue_setup\n radix tree: remove unused variable\n lib/clz_ctz.c: Fix __clzdi2() and __ctzdi2() for 32-bit kernels\n batman-adv: Hold rtnl lock during MTU update via netlink\n batman-adv: Fix batadv_v_ogm_aggr_send memory leak\n batman-adv: Fix TT global entry leak when client roamed back\n batman-adv: Do not get eth header before batadv_check_management_packet\n batman-adv: Don\u0027t increase MTU when set by user\n batman-adv: Trigger events for auto adjusted MTU\n nfsd: Fix race to FREE_STATEID and cl_revoked\n clk: Fix slab-out-of-bounds error in devm_clk_release()\n NFSv4: Fix dropped lock for racing OPEN and delegation return\n ibmveth: Use dcbf rather than dcbfl\n bonding: fix macvlan over alb bond support\n net: remove bond_slave_has_mac_rcu()\n net/sched: fix a qdisc modification with ambiguous command request\n igb: Avoid starting unnecessary workqueues\n net: validate veth and vxcan peer ifindexes\n net: bcmgenet: Fix return value check for fixed_phy_register()\n net: bgmac: Fix return value check for fixed_phy_register()\n ipvlan: Fix a reference count leak warning in ipvlan_ns_exit()\n dccp: annotate data-races in dccp_poll()\n sock: annotate data-races around prot-\u003ememory_pressure\n octeontx2-af: SDP: fix receive link config\n tracing: Fix memleak due to race between current_tracer and trace\n drm/amd/display: check TG is non-null before checking if enabled\n drm/amd/display: do not wait for mpc idle if tg is disabled\n ASoC: fsl_sai: Disable bit clock with transmitter\n ASoC: fsl_sai: Add new added registers and new bit definition\n ASoC: fsl_sai: Refine enable/disable TE/RE sequence in trigger()\n regmap: Account for register length in SMBus I/O limits\n ALSA: pcm: Fix potential data race at PCM memory allocation helpers\n ALSA: pcm: Use SG-buffer only when direct DMA is available\n ALSA: pcm: Set per-card upper limit of PCM buffer allocations\n dm integrity: reduce vmalloc space footprint on 32-bit architectures\n dm integrity: increase RECALC_SECTORS to improve recalculate speed\n fbdev: fix potential OOB read in fast_imageblit()\n fbdev: Fix sys_imageblit() for arbitrary image widths\n fbdev: Improve performance of sys_imageblit()\n MIPS: cpu-features: Use boot_cpu_type for CPU type based features\n MIPS: cpu-features: Enable octeon_cache by cpu_type\n fs: dlm: fix mismatch of plock results from userspace\n fs: dlm: use dlm_plock_info for do_unlock_close\n fs: dlm: change plock interrupted message to debug again\n fs: dlm: add pid to debug log\n dlm: replace usage of found with dedicated list iterator variable\n dlm: improve plock logging if interrupted\n PCI: acpiphp: Reassign resources on bridge if necessary\n net: phy: broadcom: stub c45 read/write for 54810\n mmc: f-sdh30: fix order of function calls in sdhci_f_sdh30_remove\n net: xfrm: Amend XFRMA_SEC_CTX nla_policy structure\n net: fix the RTO timer retransmitting skb every 1ms if linear option is enabled\n virtio-net: set queues after driver_ok\n af_unix: Fix null-ptr-deref in unix_stream_sendpage().\n netfilter: set default timeout to 3 secs for sctp shutdown send and recv state\n mmc: block: Fix in_flight[issue_type] value error\n mmc: wbsd: fix double mmc_free_host() in wbsd_init()\n cifs: Release folio lock on fscache read hit.\n ALSA: usb-audio: Add support for Mythware XA001AU capture and playback interfaces.\n serial: 8250: Fix oops for port-\u003epm on uart_change_pm()\n ASoC: meson: axg-tdm-formatter: fix channel slot allocation\n ASoC: rt5665: add missed regulator_bulk_disable\n ARM: dts: imx: Set default tuning step for imx6sx usdhc\n ARM: dts: imx: Set default tuning step for imx7d usdhc\n ARM: dts: imx: Adjust dma-apbh node name\n ARM: dts: imx7s: Drop dma-apb interrupt-names\n bus: ti-sysc: Flush posted write on enable before reset\n bus: ti-sysc: Improve reset to work with modules with no sysconfig\n net: do not allow gso_size to be set to GSO_BY_FRAGS\n sock: Fix misuse of sk_under_memory_pressure()\n net: dsa: mv88e6xxx: Wait for EEPROM done before HW reset\n i40e: fix misleading debug logs\n team: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves\n netfilter: nft_dynset: disallow object maps\n ipvs: fix racy memcpy in proc_do_sync_threshold\n selftests: mirror_gre_changes: Tighten up the TTL test match\n xfrm: add NULL check in xfrm_update_ae_params\n ip_vti: fix potential slab-use-after-free in decode_session6\n ip6_vti: fix slab-use-after-free in decode_session6\n xfrm: fix slab-use-after-free in decode_session6\n xfrm: interface: rename xfrm_interface.c to xfrm_interface_core.c\n net: af_key: fix sadb_x_filter validation\n net: xfrm: Fix xfrm_address_filter OOB read\n btrfs: fix BUG_ON condition in btrfs_cancel_balance\n tty: serial: fsl_lpuart: Clear the error flags by writing 1 for lpuart32 platforms\n powerpc/rtas_flash: allow user copy to flash block cache objects\n fbdev: mmp: fix value check in mmphw_probe()\n i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue\n virtio-mmio: don\u0027t break lifecycle of vm_dev\n virtio-mmio: Use to_virtio_mmio_device() to simply code\n virtio-mmio: convert to devm_platform_ioremap_resource\n nfsd: Remove incorrect check in nfsd4_validate_stateid\n nfsd4: kill warnings on testing stateids with mismatched clientids\n net/ncsi: Fix gma flag setting after response\n tracing/probes: Fix to update dynamic data counter if fetcharg uses it\n tracing/probes: Have process_fetch_insn() take a void * instead of pt_regs\n leds: trigger: netdev: Recheck NETDEV_LED_MODE_LINKUP on dev rename\n mmc: sunxi: fix deferred probing\n mmc: bcm2835: fix deferred probing\n USB: dwc3: qcom: fix NULL-deref on suspend\n usb: dwc3: qcom: Add helper functions to enable,disable wake irqs\n interconnect: Add helpers for enabling/disabling a path\n interconnect: Move internal structs into a separate file\n irqchip/mips-gic: Use raw spinlock for gic_lock\n irqchip/mips-gic: Get rid of the reliance on irq_cpu_online()\n ALSA: hda: Fix unhandled register update during auto-suspend period\n PM: runtime: Add pm_runtime_get_if_active()\n PM-runtime: add tracepoints for usage_count changes\n iommu/amd: Fix \"Guest Virtual APIC Table Root Pointer\" configuration in IRTE\n iio: addac: stx104: Fix race condition when converting analog-to-digital\n iio: addac: stx104: Fix race condition for stx104_write_raw()\n iio: stx104: Move to addac subdirectory\n iio: adc: stx104: Implement and utilize register structures\n iio: adc: stx104: Utilize iomap interface\n iio: add addac subdirectory\n IMA: allow/fix UML builds\n powerpc/kasan: Disable KCOV in KASAN code\n ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()\n ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 \u0026 Q760\n drm/amdgpu: Fix potential fence use-after-free v2\n Bluetooth: L2CAP: Fix use-after-free\n pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db()\n gfs2: Fix possible data races in gfs2_show_options()\n usb: chipidea: imx: don\u0027t request QoS for imx8ulp\n media: platform: mediatek: vpu: fix NULL ptr dereference\n media: v4l2-mem2mem: add lock to protect parameter num_rdy\n FS: JFS: Check for read-only mounted filesystem in txBegin\n FS: JFS: Fix null-ptr-deref Read in txBegin\n MIPS: dec: prom: Address -Warray-bounds warning\n fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev\n udf: Fix uninitialized array access for some pathnames\n ovl: check type and offset of struct vfsmount in ovl_entry\n HID: add quirk for 03f0:464a HP Elite Presenter Mouse\n quota: fix warning in dqgrab()\n quota: Properly disable quotas when add_dquot_ref() fails\n ALSA: emu10k1: roll up loops in DSP setup code for Audigy\n drm/radeon: Fix integer overflow in radeon_cs_parser_init\n macsec: use DEV_STATS_INC()\n macsec: Fix traffic counters/statistics\n selftests: forwarding: tc_flower: Relax success criterion\n mmc: sdhci-f-sdh30: Replace with sdhci_pltfm\n mmc: sdhci_f_sdh30: convert to devm_platform_ioremap_resource\n\n Conflicts:\n\tdrivers/devfreq/devfreq.c\n\tdrivers/mmc/core/block.c\n\tdrivers/rpmsg/qcom_glink_native.c\n\tinclude/net/tcp.h\n\nChange-Id: Ic33d13451796752e101ed9f9bdb8c80a580af8b5\n" }, { "commit": "a3aeec7ab80514c44e351076047fce8ac59d967f", "tree": "cf7f82dac065bce5aef270e63fde1bf269ae63f6", "parents": [ "12bc15efbc3974fb31e74ca893edccb4b23a4d52", "8e221b47173d59e1b2877f6d8dc91e8be2031746" ], "author": { "name": "Greg Kroah-Hartman", "email": "gregkh@google.com", "time": "Wed Nov 29 10:16:54 2023 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@google.com", "time": "Wed Nov 29 10:18:14 2023 +0000" }, "message": "Merge 5.4.262 into android11-5.4-lts\n\nChanges in 5.4.262\n\tlocking/ww_mutex/test: Fix potential workqueue corruption\n\tperf/core: Bail out early if the request AUX area is out of bound\n\tclocksource/drivers/timer-imx-gpt: Fix potential memory leak\n\tclocksource/drivers/timer-atmel-tcb: Fix initialization on SAM9 hardware\n\tx86/mm: Drop the 4 MB restriction on minimal NUMA node memory size\n\twifi: mac80211_hwsim: fix clang-specific fortify warning\n\twifi: mac80211: don\u0027t return unset power in ieee80211_get_tx_power()\n\twifi: ath9k: fix clang-specific fortify warnings\n\twifi: ath10k: fix clang-specific fortify warning\n\tnet: annotate data-races around sk-\u003esk_tx_queue_mapping\n\tnet: annotate data-races around sk-\u003esk_dst_pending_confirm\n\twifi: ath10k: Don\u0027t touch the CE interrupt registers after power up\n\tBluetooth: Fix double free in hci_conn_cleanup\n\tplatform/x86: thinkpad_acpi: Add battery quirk for Thinkpad X120e\n\tdrm/komeda: drop all currently held locks if deadlock happens\n\tdrm/amd: Fix UBSAN array-index-out-of-bounds for SMU7\n\tdrm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga\n\tdrm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL\n\tselftests/efivarfs: create-read: fix a resource leak\n\tcrypto: pcrypt - Fix hungtask for PADATA_RESET\n\tRDMA/hfi1: Use FIELD_GET() to extract Link Width\n\tfs/jfs: Add check for negative db_l2nbperpage\n\tfs/jfs: Add validity check for db_maxag and db_agpref\n\tjfs: fix array-index-out-of-bounds in dbFindLeaf\n\tjfs: fix array-index-out-of-bounds in diAlloc\n\tARM: 9320/1: fix stack depot IRQ stack filter\n\tALSA: hda: Fix possible null-ptr-deref when assigning a stream\n\tPCI: tegra194: Use FIELD_GET()/FIELD_PREP() with Link Width fields\n\tatm: iphase: Do PCI error checks on own line\n\tscsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()\n\tHID: Add quirk for Dell Pro Wireless Keyboard and Mouse KM5221W\n\ttty: vcc: Add check for kstrdup() in vcc_probe()\n\tusb: gadget: f_ncm: Always set current gadget in ncm_bind()\n\ti2c: sun6i-p2wi: Prevent potential division by zero\n\tmedia: gspca: cpia1: shift-out-of-bounds in set_flicker\n\tmedia: vivid: avoid integer overflow\n\tgfs2: ignore negated quota changes\n\tmedia: cobalt: Use FIELD_GET() to extract Link Width\n\tdrm/amd/display: Avoid NULL dereference of timing generator\n\tkgdb: Flush console before entering kgdb on panic\n\tASoC: ti: omap-mcbsp: Fix runtime PM underflow warnings\n\tpwm: Fix double shift bug\n\twifi: iwlwifi: Use FW rate for non-data frames\n\tNFSv4.1: fix SP4_MACH_CRED protection for pnfs IO\n\tipvlan: add ipvlan_route_v6_outbound() helper\n\ttty: Fix uninit-value access in ppp_sync_receive()\n\tnet: hns3: fix variable may not initialized problem in hns3_init_mac_addr()\n\ttipc: Fix kernel-infoleak due to uninitialized TLV value\n\tppp: limit MRU to 64K\n\txen/events: fix delayed eoi list handling\n\tptp: annotate data-race around q-\u003ehead and q-\u003etail\n\tbonding: stop the device in bond_setup_by_slave()\n\tnet: ethernet: cortina: Fix max RX frame define\n\tnet: ethernet: cortina: Handle large frames\n\tnet: ethernet: cortina: Fix MTU max setting\n\tnetfilter: nf_conntrack_bridge: initialize err to 0\n\tnet: stmmac: Rework stmmac_rx()\n\tnet: stmmac: fix rx budget limit check\n\tnet/mlx5e: fix double free of encap_header\n\tnet/mlx5_core: Clean driver version and name\n\tnet/mlx5e: Check return value of snprintf writing to fw_version buffer for representors\n\tmacvlan: Don\u0027t propagate promisc change to lower dev in passthru\n\ttools/power/turbostat: Fix a knl bug\n\tcifs: spnego: add \u0027;\u0027 in HOST_KEY_LEN\n\tmedia: venus: hfi: add checks to perform sanity on queue pointers\n\trandstruct: Fix gcc-plugin performance mode to stay in group\n\tbpf: Fix precision tracking for BPF_ALU | BPF_TO_BE | BPF_END\n\tscsi: megaraid_sas: Increase register read retry rount from 3 to 30 for selected registers\n\tx86/cpu/hygon: Fix the CPU topology evaluation for real\n\tKVM: x86: hyper-v: Don\u0027t auto-enable stimer on write from user-space\n\tKVM: x86: Ignore MSR_AMD64_TW_CFG access\n\taudit: don\u0027t take task_lock() in audit_exe_compare() code path\n\taudit: don\u0027t WARN_ON_ONCE(!current-\u003emm) in audit_exe_compare()\n\thvc/xen: fix error path in xen_hvc_init() to always register frontend driver\n\tPCI/sysfs: Protect driver\u0027s D3cold preference from user space\n\tACPI: resource: Do IRQ override on TongFang GMxXGxx\n\tmmc: meson-gx: Remove setting of CMD_CFG_ERROR\n\tgenirq/generic_chip: Make irq_remove_generic_chip() irqdomain aware\n\tPCI: keystone: Don\u0027t discard .remove() callback\n\tPCI: keystone: Don\u0027t discard .probe() callback\n\tparisc/pdc: Add width field to struct pdc_model\n\tclk: qcom: ipq8074: drop the CLK_SET_RATE_PARENT flag from PLL clocks\n\tmmc: vub300: fix an error code\n\tPM: hibernate: Use __get_safe_page() rather than touching the list\n\tPM: hibernate: Clean up sync_read handling in snapshot_write_next()\n\tbtrfs: don\u0027t arbitrarily slow down delalloc if we\u0027re committing\n\tjbd2: fix potential data lost in recovering journal raced with synchronizing fs bdev\n\tquota: explicitly forbid quota files from being encrypted\n\tkernel/reboot: emergency_restart: Set correct system_state\n\ti2c: core: Run atomic i2c xfer when !preemptible\n\tmcb: fix error handling for different scenarios when parsing\n\tdmaengine: stm32-mdma: correct desc prep when channel running\n\tmm/cma: use nth_page() in place of direct struct page manipulation\n\ti3c: master: cdns: Fix reading status register\n\tparisc: Prevent booting 64-bit kernels on PA1.x machines\n\tparisc/pgtable: Do not drop upper 5 address bits of physical address\n\tALSA: info: Fix potential deadlock at disconnection\n\tALSA: hda/realtek - Enable internal speaker of ASUS K6500ZC\n\tserial: meson: remove redundant initialization of variable id\n\ttty: serial: meson: retrieve port FIFO size from DT\n\tserial: meson: Use platform_get_irq() to get the interrupt\n\ttty: serial: meson: fix hard LOCKUP on crtscts mode\n\tBluetooth: btusb: Add flag to define wideband speech capability\n\tBluetooth: btusb: add Realtek 8822CE to usb_device_id table\n\tBluetooth: btusb: Add Realtek RTL8852BE support ID 0x0cb8:0xc559\n\tbluetooth: Add device 0bda:887b to device tables\n\tbluetooth: Add device 13d3:3571 to device tables\n\tBluetooth: btusb: Add RTW8852BE device 13d3:3570 to device tables\n\tBluetooth: btusb: Add 0bda:b85b for Fn-Link RTL8852BE\n\tRevert ncsi: Propagate carrier gain/loss events to the NCSI controller\n\tnet: dsa: lan9303: consequently nested-lock physical MDIO\n\ti2c: i801: fix potential race in i801_block_transaction_byte_by_byte\n\tmedia: lirc: drop trailing space from scancode transmit\n\tmedia: sharp: fix sharp encoding\n\tmedia: venus: hfi_parser: Add check to keep the number of codecs within range\n\tmedia: venus: hfi: fix the check to handle session buffer requirement\n\tmedia: venus: hfi: add checks to handle capabilities from firmware\n\tnfsd: fix file memleak on client_opens_release\n\tRevert \"net: r8169: Disable multicast filter for RTL8168H and RTL8107E\"\n\text4: apply umask if ACL support is disabled\n\text4: correct offset of gdb backup in non meta_bg group to update_backups\n\text4: correct return value of ext4_convert_meta_bg\n\text4: correct the start block of counting reserved clusters\n\text4: remove gdb backup copy for meta bg in setup_new_flex_group_blocks\n\tdrm/amdgpu: fix error handling in amdgpu_bo_list_get()\n\ttracing: Have trace_event_file have ref counters\n\tnetfilter: nf_tables: pass context to nft_set_destroy()\n\tnetfilter: nftables: rename set element data activation/deactivation functions\n\tnetfilter: nf_tables: drop map element references from preparation phase\n\tnetfilter: nft_set_rbtree: Switch to node list walk for overlap detection\n\tnetfilter: nft_set_rbtree: fix null deref on element insertion\n\tnetfilter: nft_set_rbtree: fix overlap expiration walk\n\tnetfilter: nf_tables: don\u0027t skip expired elements during walk\n\tnetfilter: nf_tables: GC transaction API to avoid race with control plane\n\tnetfilter: nf_tables: adapt set backend to use GC transaction API\n\tnetfilter: nft_set_hash: mark set element as dead when deleting from packet path\n\tnetfilter: nf_tables: remove busy mark and gc batch API\n\tnetfilter: nf_tables: fix GC transaction races with netns and netlink event exit path\n\tnetfilter: nf_tables: GC transaction race with netns dismantle\n\tnetfilter: nf_tables: GC transaction race with abort path\n\tnetfilter: nf_tables: use correct lock to protect gc_list\n\tnetfilter: nf_tables: defer gc run if previous batch is still pending\n\tnetfilter: nft_set_rbtree: skip sync GC for new elements in this transaction\n\tnetfilter: nft_set_rbtree: use read spinlock to avoid datapath contention\n\tnetfilter: nft_set_hash: try later when GC hits EAGAIN on iteration\n\tnetfilter: nf_tables: fix memleak when more than 255 elements expired\n\tnetfilter: nf_tables: unregister flowtable hooks on netns exit\n\tnetfilter: nf_tables: double hook unregistration in netns path\n\tnetfilter: nftables: update table flags from the commit phase\n\tnetfilter: nf_tables: fix table flag updates\n\tnetfilter: nf_tables: disable toggling dormant table state more than once\n\tnetfilter: nf_tables: bogus EBUSY when deleting flowtable after flush (for 5.4)\n\tLinux 5.4.262\n\nChange-Id: I93e0070751c904fd8a44800ce1756e6e93c1a95b\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@google.com\u003e\n" }, { "commit": "6933bc9a5f77a19e95f2e7dce2731a36dd15beba", "tree": "7a5473ab5463bf83be7c6bca9c9ccbc1b7034b97", "parents": [ "c94d05ac6937efb364614565d5bcd727d5e1f37e" ], "author": { "name": "Kees Cook", "email": "keescook@chromium.org", "time": "Fri Oct 06 21:09:28 2023 -0700" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Tue Nov 28 16:50:17 2023 +0000" }, "message": "randstruct: Fix gcc-plugin performance mode to stay in group\n\ncommit 381fdb73d1e2a48244de7260550e453d1003bb8e upstream.\n\nThe performance mode of the gcc-plugin randstruct was shuffling struct\nmembers outside of the cache-line groups. Limit the range to the\nspecified group indexes.\n\nCc: linux-hardening@vger.kernel.org\nCc: stable@vger.kernel.org\nReported-by: Lukas Loidolt \u003ce1634039@student.tuwien.ac.at\u003e\nCloses: https://lore.kernel.org/all/f3ca77f0-e414-4065-83a5-ae4c4d25545d@student.tuwien.ac.at\nFixes: 313dd1b62921 (\"gcc-plugins: Add the randstruct plugin\")\nSigned-off-by: Kees Cook \u003ckeescook@chromium.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "0e07b7bd3c6a81db70fbe1a569aa1eb4f51b8d2a", "tree": "60a32813aadabd1b90dd706de960884698d188f7", "parents": [ "04433509503f121076220fe21109b63b4f1407ff", "ef379773e2e76d6470a907ae36c3d12f65a6ecdb" ], "author": { "name": "Greg Kroah-Hartman", "email": "gregkh@google.com", "time": "Sat Nov 25 18:20:59 2023 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@google.com", "time": "Mon Nov 27 11:27:01 2023 +0000" }, "message": "Merge 5.4.261 into android11-5.4-lts\n\nChanges in 5.4.261\n\tvfs: fix readahead(2) on block devices\n\tgenirq/matrix: Exclude managed interrupts in irq_matrix_allocated()\n\ti40e: fix potential memory leaks in i40e_remove()\n\ttcp: call tcp_try_undo_recovery when an RTOd TFO SYNACK is ACKed\n\twifi: rtw88: debug: Fix the NULL vs IS_ERR() bug for debugfs_create_file()\n\twifi: mt76: mt7603: rework/fix rx pse hang check\n\ttcp_metrics: add missing barriers on delete\n\ttcp_metrics: properly set tp-\u003esnd_ssthresh in tcp_init_metrics()\n\ttcp_metrics: do not create an entry from tcp_init_metrics()\n\twifi: rtlwifi: fix EDCA limit set by BT coexistence\n\tcan: dev: can_restart(): don\u0027t crash kernel if carrier is OK\n\tcan: dev: can_restart(): fix race condition between controller restart and netif_carrier_on()\n\tthermal: core: prevent potential string overflow\n\tr8169: use tp_to_dev instead of open code\n\tr8169: fix rare issue with broken rx after link-down on RTL8125\n\tchtls: fix tp-\u003ercv_tstamp initialization\n\ttcp: Remove one extra ktime_get_ns() from cookie_init_timestamp\n\ttcp: fix cookie_init_timestamp() overflows\n\tACPI: sysfs: Fix create_pnp_modalias() and create_of_modalias()\n\tipv6: avoid atomic fragment on GSO packets\n\tnet: add DEV_STATS_READ() helper\n\tipvlan: properly track tx_errors\n\tregmap: debugfs: Fix a erroneous check after snprintf()\n\tclk: qcom: clk-rcg2: Fix clock rate overflow for high parent frequencies\n\tclk: qcom: gcc-sm8150: use ARRAY_SIZE instead of specifying num_parents\n\tclk: qcom: gcc-sm8150: Fix gcc_sdcc2_apps_clk_src\n\tclk: imx: Select MXC_CLK for CLK_IMX8QXP\n\tclk: keystone: pll: fix a couple NULL vs IS_ERR() checks\n\tclk: npcm7xx: Fix incorrect kfree\n\tclk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data\n\tclk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data\n\tclk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data\n\tclk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data\n\tclk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data\n\tplatform/x86: wmi: Fix probe failure when failing to register WMI devices\n\tplatform/x86: wmi: remove unnecessary initializations\n\tplatform/x86: wmi: Fix opening of char device\n\thwmon: (coretemp) Fix potentially truncated sysfs attribute name\n\tdrm/rockchip: vop: Fix reset of state in duplicate state crtc funcs\n\tdrm/rockchip: vop: Fix call to crtc reset helper\n\tdrm/radeon: possible buffer overflow\n\tdrm/rockchip: cdn-dp: Fix some error handling paths in cdn_dp_probe()\n\tarm64: dts: qcom: sdm845-mtp: fix WiFi configuration\n\tARM: dts: qcom: mdm9615: populate vsdcc fixed regulator\n\tsoc: qcom: llcc cleanup to get rid of sdm845 specific driver file\n\tsoc: qcom: Rename llcc-slice to llcc-qcom\n\tsoc: qcom: llcc: Handle a second device without data corruption\n\tfirmware: ti_sci: Replace HTTP links with HTTPS ones\n\tfirmware: ti_sci: Mark driver as non removable\n\tclk: scmi: Free scmi_clk allocated when the clocks with invalid info are skipped\n\thwrng: geode - fix accessing registers\n\tlibnvdimm/of_pmem: Use devm_kstrdup instead of kstrdup and check its return value\n\tsched/rt: Provide migrate_disable/enable() inlines\n\tnd_btt: Make BTT lanes preemptible\n\tcrypto: caam/qi2 - fix Chacha20 + Poly1305 self test failure\n\tcrypto: caam/jr - fix Chacha20 + Poly1305 self test failure\n\tHID: cp2112: Use irqchip template\n\thid: cp2112: Fix duplicate workqueue initialization\n\tARM: 9321/1: memset: cast the constant byte to unsigned char\n\text4: move \u0027ix\u0027 sanity check to corrent position\n\tscsi: ufs: core: Leave space for \u0027\\0\u0027 in utf8 desc string\n\tRDMA/hfi1: Workaround truncation compilation error\n\tsh: bios: Revive earlyprintk support\n\tASoC: Intel: Skylake: Fix mem leak when parsing UUIDs fails\n\tASoC: ams-delta.c: use component after check\n\tmfd: dln2: Fix double put in dln2_probe\n\tleds: pwm: simplify if condition\n\tleds: pwm: convert to atomic PWM API\n\tleds: pwm: Don\u0027t disable the PWM when the LED should be off\n\tledtrig-cpu: Limit to 8 CPUs\n\tleds: trigger: ledtrig-cpu:: Fix \u0027output may be truncated\u0027 issue for \u0027cpu\u0027\n\ttty: tty_jobctrl: fix pid memleak in disassociate_ctty()\n\tusb: dwc2: fix possible NULL pointer dereference caused by driver concurrency\n\tdmaengine: ti: edma: handle irq_of_parse_and_map() errors\n\tmisc: st_core: Do not call kfree_skb() under spin_lock_irqsave()\n\ttools: iio: privatize globals and functions in iio_generic_buffer.c file\n\ttools: iio: iio_generic_buffer: Fix some integer type and calculation\n\ttools: iio: iio_generic_buffer ensure alignment\n\tUSB: usbip: fix stub_dev hub disconnect\n\tdmaengine: pxa_dma: Remove an erroneous BUG_ON() in pxad_free_desc()\n\tf2fs: fix to initialize map.m_pblk in f2fs_precache_extents()\n\tmodpost: fix tee MODULE_DEVICE_TABLE built on big-endian host\n\tpowerpc/xive: Fix endian conversion size\n\tpowerpc/imc-pmu: Use the correct spinlock initializer.\n\tpowerpc/pseries: fix potential memory leak in init_cpu_associativity()\n\ti3c: Fix potential refcount leak in i3c_master_register_new_i3c_devs\n\trtc: pcf85363: fix wrong mask/val parameters in regmap_update_bits call\n\tpcmcia: cs: fix possible hung task and memory leak pccardd()\n\tpcmcia: ds: fix refcount leak in pcmcia_device_add()\n\tpcmcia: ds: fix possible name leak in error path in pcmcia_device_add()\n\tmedia: bttv: fix use after free error due to btv-\u003etimeout timer\n\tmedia: s3c-camif: Avoid inappropriate kfree()\n\tmedia: dvb-usb-v2: af9035: fix missing unlock\n\tregmap: prevent noinc writes from clobbering cache\n\tpwm: sti: Avoid conditional gotos\n\tpwm: sti: Reduce number of allocations and drop usage of chip_data\n\tpwm: brcmstb: Utilize appropriate clock APIs in suspend/resume\n\tInput: synaptics-rmi4 - fix use after free in rmi_unregister_function()\n\tllc: verify mac len before reading mac header\n\ttipc: Change nla_policy for bearer-related names to NLA_NUL_STRING\n\tinet: shrink struct flowi_common\n\tdccp: Call security_inet_conn_request() after setting IPv4 addresses.\n\tdccp/tcp: Call security_inet_conn_request() after setting IPv6 addresses.\n\tnet: r8169: Disable multicast filter for RTL8168H and RTL8107E\n\tFix termination state for idr_for_each_entry_ul()\n\tnet: stmmac: xgmac: Enable support for multiple Flexible PPS outputs\n\tnet/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT\n\ttg3: power down device only on SYSTEM_POWER_OFF\n\tr8169: respect userspace disabling IFF_MULTICAST\n\tnetfilter: xt_recent: fix (increase) ipv6 literal buffer length\n\tnetfilter: nft_redir: use `struct nf_nat_range2` throughout and deduplicate eval call-backs\n\tnetfilter: nat: fix ipv6 nat redirect with mapped and scoped addresses\n\tdrm/syncobj: fix DRM_SYNCOBJ_WAIT_FLAGS_WAIT_AVAILABLE\n\tspi: spi-zynq-qspi: add spi-mem to driver kconfig dependencies\n\tfbdev: imsttfb: Fix error path of imsttfb_probe()\n\tfbdev: imsttfb: fix a resource leak in probe\n\tfbdev: fsl-diu-fb: mark wr_reg_wa() static\n\tRevert \"mmc: core: Capture correct oemid-bits for eMMC cards\"\n\tbtrfs: use u64 for buffer sizes in the tree search ioctls\n\tLinux 5.4.261\n\nChange-Id: Iee65ff18889e15022b25cf33662c0f835825af9d\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@google.com\u003e\n" }, { "commit": "b6cffe8dd7cde51c776a89989032c22c8983d93a", "tree": "b441501ad8d3d08c6513f68f6496b836fed1d5cc", "parents": [ "90ab33735e2e85968aa83032150ed72c920c44db" ], "author": { "name": "Masahiro Yamada", "email": "masahiroy@kernel.org", "time": "Sun Oct 08 02:04:44 2023 +0900" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Mon Nov 20 10:30:14 2023 +0100" }, "message": "modpost: fix tee MODULE_DEVICE_TABLE built on big-endian host\n\n[ Upstream commit 7f54e00e5842663c2cea501bbbdfa572c94348a3 ]\n\nWhen MODULE_DEVICE_TABLE(tee, ) is built on a host with a different\nendianness from the target architecture, it results in an incorrect\nMODULE_ALIAS().\n\nFor example, see a case where drivers/char/hw_random/optee-rng.c\nis built as a module for ARM little-endian.\n\nIf you build it on a little-endian host, you will get the correct\nMODULE_ALIAS:\n\n $ grep MODULE_ALIAS drivers/char/hw_random/optee-rng.mod.c\n MODULE_ALIAS(\"tee:ab7a617c-b8e7-4d8f-8301-d09b61036b64*\");\n\nHowever, if you build it on a big-endian host, you will get a wrong\nMODULE_ALIAS:\n\n $ grep MODULE_ALIAS drivers/char/hw_random/optee-rng.mod.c\n MODULE_ALIAS(\"tee:646b0361-9bd0-0183-8f4d-e7b87c617aab*\");\n\nThe same problem also occurs when you enable CONFIG_CPU_BIG_ENDIAN,\nand build it on a little-endian host.\n\nThis issue has been unnoticed because the ARM kernel is configured for\nlittle-endian by default, and most likely built on a little-endian host\n(cross-build on x86 or native-build on ARM).\n\nThe uuid field must not be reversed because uuid_t is an array of __u8.\n\nFixes: 0fc1db9d1059 (\"tee: add bus driver framework for TEE based devices\")\nSigned-off-by: Masahiro Yamada \u003cmasahiroy@kernel.org\u003e\nReviewed-by: Sumit Garg \u003csumit.garg@linaro.org\u003e\nSigned-off-by: Sasha Levin \u003csashal@kernel.org\u003e\n" }, { "commit": "36579e50d848f0b719e12cb1cf240f8e36ddd61e", "tree": "1ce2db95a8d4cf860b1812d1826b561b9775ac88", "parents": [ "61ff6ffa5750e28d42cb036d0b5fd007e26c76d0", "91f702572a8042124eb6975b4f52d487845b3a99" ], "author": { "name": "kamasali Satyanarayan", "email": "quic_kamasali@quicinc.com", "time": "Tue Oct 17 15:15:46 2023 +0530" }, "committer": { "name": "Kamasali Satyanarayan", "email": "quic_kamasali@quicinc.com", "time": "Mon Oct 30 22:46:41 2023 -0700" }, "message": "Merge android11-5.4.254+ (91f7025) into msm-5.4\n\n* remotes/origin/tmp-91f7025:\n UPSTREAM: arm64: efi: Make efi_rt_lock a raw_spinlock\n UPSTREAM: net: sched: sch_qfq: Fix UAF in qfq_dequeue()\n UPSTREAM: net/sched: sch_hfsc: Ensure inner classes have fsc curve\n UPSTREAM: net/sched: sch_qfq: account for stab overhead in qfq_enqueue\n UPSTREAM: netfilter: nf_tables: prevent OOB access in nft_byteorder_eval\n UPSTREAM: af_unix: Fix null-ptr-deref in unix_stream_sendpage().\n BACKPORT: net: nfc: Fix use-after-free caused by nfc_llcp_find_local\n Linux 5.4.254\n sch_netem: fix issues in netem_change() vs get_dist_table()\n alpha: remove __init annotation from exported page_is_ram()\n scsi: core: Fix possible memory leak if device_add() fails\n scsi: snic: Fix possible memory leak if device_add() fails\n scsi: 53c700: Check that command slot is not NULL\n scsi: storvsc: Fix handling of virtual Fibre Channel timeouts\n scsi: core: Fix legacy /proc parsing buffer overflow\n netfilter: nf_tables: report use refcount overflow\n nvme-rdma: fix potential unbalanced freeze \u0026 unfreeze\n nvme-tcp: fix potential unbalanced freeze \u0026 unfreeze\n btrfs: set cache_block_group_error if we find an error\n btrfs: don\u0027t stop integrity writeback too early\n ibmvnic: Handle DMA unmapping of login buffs in release functions\n net/mlx5: Allow 0 for total host VFs\n dmaengine: mcf-edma: Fix a potential un-allocated memory access\n wifi: cfg80211: fix sband iftype data lookup for AP_VLAN\n IB/hfi1: Fix possible panic during hotplug remove\n drivers: net: prevent tun_build_skb() to exceed the packet size limit\n dccp: fix data-race around dp-\u003edccps_mss_cache\n bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves\n net/packet: annotate data-races around tp-\u003estatus\n mISDN: Update parameter type of dsp_cmx_send()\n selftests/rseq: Fix build with undefined __weak\n drm/nouveau/disp: Revert a NULL check inside nouveau_connector_get_modes\n x86: Move gds_ucode_mitigated() declaration to header\n x86/mm: Fix VDSO and VVAR placement on 5-level paging machines\n x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405\n usb: common: usb-conn-gpio: Prevent bailing out if initial role is none\n usb: dwc3: Properly handle processing of pending events\n usb-storage: alauda: Fix uninit-value in alauda_check_media()\n binder: fix memory leak in binder_init()\n iio: cros_ec: Fix the allocation size for cros_ec_command\n nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput\n x86/pkeys: Revert a5eff7259790 (\"x86/pkeys: Add PKRU value to init_fpstate\")\n radix tree test suite: fix incorrect allocation size for pthreads\n drm/nouveau/gr: enable memory loads on helper invocation on all channels\n dmaengine: pl330: Return DMA_PAUSED when transaction is paused\n ipv6: adjust ndisc_is_useropt() to also return true for PIO\n mmc: moxart: read scr register without changing byte order\n Linux 5.4.253\n Revert \"driver core: Annotate dev_err_probe() with __must_check\"\n drivers: core: fix kernel-doc markup for dev_err_probe()\n driver code: print symbolic error code\n driver core: Annotate dev_err_probe() with __must_check\n ARM: dts: nxp/imx6sll: fix wrong property name in usbphy node\n ARM: dts: imx6sll: fixup of operating points\n ARM: dts: imx: add usb alias\n ARM: dts: imx: Align L2 cache-controller nodename with dtschema\n ARM: dts: imx6sll: Make ssi node name same as other platforms\n arm64: dts: stratix10: fix incorrect I2C property for SCL signal\n ceph: defer stopping mdsc delayed_work\n ceph: use kill_anon_super helper\n ceph: show tasks waiting on caps in debugfs caps file\n PM: sleep: wakeirq: fix wake irq arming\n PM / wakeirq: support enabling wake-up irq after runtime_suspend called\n selftests/rseq: Play nice with binaries statically linked against glibc 2.35+\n selftests/rseq: check if libc rseq support is registered\n powerpc/mm/altmap: Fix altmap boundary check\n mtd: rawnand: omap_elm: Fix incorrect type in assignment\n test_firmware: return ENOMEM instead of ENOSPC on failed memory allocation\n test_firmware: prevent race conditions by a correct implementation of locking\n ext2: Drop fragment support\n fs: Protect reconfiguration of sb read-write from racing writes\n net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb\n Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb\n fs/sysv: Null check to prevent null-ptr-deref bug\n net: tap_open(): set sk_uid from current_fsuid()\n net: tun_chr_open(): set sk_uid from current_fsuid()\n mtd: rawnand: meson: fix OOB available bytes for ECC\n mtd: spinand: toshiba: Fix ecc_get_status\n USB: zaurus: Add ID for A-300/B-500/C-700\n libceph: fix potential hang in ceph_osdc_notify()\n scsi: zfcp: Defer fc_rport blocking until after ADISC response\n tcp_metrics: fix data-race in tcpm_suck_dst() vs fastopen\n tcp_metrics: annotate data-races around tm-\u003etcpm_net\n tcp_metrics: annotate data-races around tm-\u003etcpm_vals[]\n tcp_metrics: annotate data-races around tm-\u003etcpm_lock\n tcp_metrics: annotate data-races around tm-\u003etcpm_stamp\n tcp_metrics: fix addr_same() helper\n ip6mr: Fix skb_under_panic in ip6mr_cache_report()\n net: dcb: choose correct policy to parse DCB_ATTR_BCN\n net: ll_temac: fix error checking of irq_of_parse_and_map()\n net: ll_temac: Switch to use dev_err_probe() helper\n driver core: add device probe log helper\n bpf: sockmap: Remove preempt_disable in sock_map_sk_acquire\n net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free\n net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free\n net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free\n net: add missing data-race annotation for sk_ll_usec\n net: add missing data-race annotations around sk-\u003esk_peek_off\n net: add missing READ_ONCE(sk-\u003esk_rcvbuf) annotation\n net: add missing READ_ONCE(sk-\u003esk_sndbuf) annotation\n net: add missing READ_ONCE(sk-\u003esk_rcvlowat) annotation\n net: annotate data-races around sk-\u003esk_max_pacing_rate\n mISDN: hfcpci: Fix potential deadlock on \u0026hc-\u003elock\n net: sched: cls_u32: Fix match key mis-addressing\n perf test uprobe_from_different_cu: Skip if there is no gcc\n rtnetlink: let rtnl_bridge_setlink checks IFLA_BRIDGE_MODE length\n net/mlx5e: fix return value check in mlx5e_ipsec_remove_trailer()\n net/mlx5: DR, fix memory leak in mlx5dr_cmd_create_reformat_ctx\n KVM: s390: fix sthyi error handling\n word-at-a-time: use the same return type for has_zero regardless of endianness\n loop: Select I/O scheduler \u0027none\u0027 from inside add_disk()\n perf: Fix function pointer case\n arm64: Fix bit-shifting UB in the MIDR_CPU_MODEL() macro\n arm64: Add AMPERE1 to the Spectre-BHB affected list\n ASoC: cs42l51: fix driver to properly autoload with automatic module loading\n net/sched: sch_qfq: account for stab overhead in qfq_enqueue\n btrfs: fix race between quota disable and quota assign ioctls\n btrfs: qgroup: return ENOTCONN instead of EINVAL when quotas are not enabled\n btrfs: qgroup: remove one-time use variables for quota_root checks\n cpufreq: intel_pstate: Drop ACPI _PSS states table patching\n ACPI: processor: perflib: Avoid updating frequency QoS unnecessarily\n ACPI: processor: perflib: Use the \"no limit\" frequency QoS\n dm cache policy smq: ensure IO doesn\u0027t prevent cleaner policy progress\n ASoC: wm8904: Fill the cache for WM8904_ADC_TEST_0 register\n s390/dasd: fix hanging device after quiesce/resume\n virtio-net: fix race between set queues and probe\n btrfs: check if the transaction was aborted at btrfs_wait_for_commit()\n irq-bcm6345-l1: Do not assume a fixed block to cpu mapping\n tpm_tis: Explicitly check for error code\n btrfs: check for commit error at btrfs_attach_transaction_barrier()\n hwmon: (nct7802) Fix for temp6 (PECI1) processed even if PECI1 disabled\n staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext()\n Documentation: security-bugs.rst: clarify CVE handling\n Documentation: security-bugs.rst: update preferences when dealing with the linux-distros group\n Revert \"usb: xhci: tegra: Fix error check\"\n usb: xhci-mtk: set the dma max_seg_size\n USB: quirks: add quirk for Focusrite Scarlett\n usb: ohci-at91: Fix the unhandle interrupt when resume\n usb: dwc3: don\u0027t reset device side if dwc3 was configured as host-only\n usb: dwc3: pci: skip BYT GPIO lookup table for hardwired phy\n Revert \"usb: dwc3: core: Enable AutoRetry feature in the controller\"\n can: gs_usb: gs_can_close(): add missing set of CAN state to CAN_STATE_STOPPED\n USB: serial: simple: sort driver entries\n USB: serial: simple: add Kaufmann RKS+CAN VCP\n USB: serial: option: add Quectel EC200A module support\n USB: serial: option: support Quectel EM060K_128\n serial: sifive: Fix sifive_serial_console_setup() section\n serial: 8250_dw: Preserve original value of DLF register\n tracing: Fix warning in trace_buffered_event_disable()\n ring-buffer: Fix wrong stat of cpu_buffer-\u003eread\n ata: pata_ns87415: mark ns87560_tf_read static\n dm raid: fix missing reconfig_mutex unlock in raid_ctr() error paths\n block: Fix a source code comment in include/uapi/linux/blkzoned.h\n ASoC: fsl_spdif: Silence output on stop\n drm/msm: Fix IS_ERR_OR_NULL() vs NULL check in a5xx_submit_in_rb()\n drm/msm/adreno: Fix snapshot BINDLESS_DATA size\n drm/msm/dpu: drop enum dpu_core_perf_data_bus_id\n RDMA/mlx4: Make check for invalid flags stricter\n benet: fix return value check in be_lancer_xmit_workarounds()\n net/sched: mqprio: Add length check for TCA_MQPRIO_{MAX/MIN}_RATE64\n net/sched: mqprio: add extack to mqprio_parse_nlattr()\n net/sched: mqprio: refactor nlattr parsing to a separate function\n platform/x86: msi-laptop: Fix rfkill out-of-sync on MSI Wind U100\n team: reset team\u0027s flags when down link is P2P device\n bonding: reset bond\u0027s flags when down link is P2P device\n tcp: Reduce chance of collisions in inet6_hashfn().\n ipv6 addrconf: fix bug where deleting a mngtmpaddr can create a new temporary address\n ethernet: atheros: fix return value check in atl1e_tso_csum()\n phy: hisilicon: Fix an out of bounds check in hisi_inno_phy_probe()\n vxlan: calculate correct header length for GPE\n i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir()\n ext4: fix to check return value of freeze_bdev() in ext4_shutdown()\n keys: Fix linking a duplicate key to a keyring\u0027s assoc_array\n uapi: General notification queue definitions\n scsi: qla2xxx: Array index may go out of bound\n scsi: qla2xxx: Fix inconsistent format argument type in qla_os.c\n pwm: meson: fix handling of period/duty if greater than UINT_MAX\n pwm: meson: Simplify duplicated per-channel tracking\n pwm: meson: Remove redundant assignment to variable fin_freq\n ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()\n ftrace: Store the order of pages allocated in ftrace_page\n ftrace: Check if pages were allocated before calling free_pages()\n ftrace: Add information on number of page groups allocated\n fs: dlm: interrupt posix locks only when process is killed\n dlm: rearrange async condition return\n dlm: cleanup plock_op vs plock_xop\n PCI/ASPM: Avoid link retraining race\n PCI/ASPM: Factor out pcie_wait_for_retrain()\n PCI/ASPM: Return 0 or -ETIMEDOUT from pcie_retrain_link()\n ext4: Fix reusing stale buffer heads from last failed mounting\n ext4: rename journal_dev to s_journal_dev inside ext4_sb_info\n btrfs: fix extent buffer leak after tree mod log failure at split_node()\n btrfs: fix race between quota disable and relocation\n btrfs: qgroup: catch reserved space leaks at unmount time\n bcache: Fix __bch_btree_node_alloc to make the failure behavior consistent\n bcache: remove \u0027int n\u0027 from parameter list of bch_bucket_alloc_set()\n gpio: tps68470: Make tps68470_gpio_output() always set the initial value\n jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint\n jbd2: recheck chechpointing non-dirty buffer\n jbd2: remove redundant buffer io error checks\n jbd2: fix kernel-doc markups\n jbd2: fix incorrect code style\n Linux 5.4.252\n x86: fix backwards merge of GDS/SRSO bit\n xen/netback: Fix buffer overrun triggered by unusual packet\n x86/cpu, kvm: Add support for CPUID_80000021_EAX\n x86/bugs: Increase the x86 bugs vector size to two u32s\n tools headers cpufeatures: Sync with the kernel sources\n x86/cpufeatures: Assign dedicated feature word for CPUID_0x8000001F[EAX]\n x86/cpu: Add VM page flush MSR availablility as a CPUID feature\n x86/cpufeatures: Add SEV-ES CPU feature\n Documentation/x86: Fix backwards on/off logic about YMM support\n x86/mm: Initialize text poking earlier\n mm: Move mm_cachep initialization to mm_init()\n x86/mm: Use mm_alloc() in poking_init()\n x86/mm: fix poking_init() for Xen PV guests\n x86/xen: Fix secondary processors\u0027 FPU initialization\n KVM: Add GDS_NO support to KVM\n x86/speculation: Add Kconfig option for GDS\n x86/speculation: Add force option to GDS mitigation\n x86/speculation: Add Gather Data Sampling mitigation\n x86/fpu: Move FPU initialization into arch_cpu_finalize_init()\n x86/fpu: Mark init functions __init\n x86/fpu: Remove cpuinfo argument from init functions\n init, x86: Move mem_encrypt_init() into arch_cpu_finalize_init()\n init: Invoke arch_cpu_finalize_init() earlier\n init: Remove check_bugs() leftovers\n um/cpu: Switch to arch_cpu_finalize_init()\n sparc/cpu: Switch to arch_cpu_finalize_init()\n sh/cpu: Switch to arch_cpu_finalize_init()\n mips/cpu: Switch to arch_cpu_finalize_init()\n m68k/cpu: Switch to arch_cpu_finalize_init()\n ia64/cpu: Switch to arch_cpu_finalize_init()\n ARM: cpu: Switch to arch_cpu_finalize_init()\n x86/cpu: Switch to arch_cpu_finalize_init()\n init: Provide arch_cpu_finalize_init()\n Revert \"posix-timers: Ensure timer ID search-loop limit is valid\"\n Revert \"drm/panel: Initialise panel dev and funcs through drm_panel_init()\"\n Revert \"drm/panel: Add and fill drm_panel type field\"\n Revert \"drm/panel: simple: Add connector_type for innolux_at043tn24\"\n Revert \"Revert \"8250: add support for ASIX devices with a FIFO bug\"\"\n Linux 5.4.251\n tracing/histograms: Return an error if we fail to add histogram to hist_vars list\n tcp: annotate data-races around fastopenq.max_qlen\n tcp: annotate data-races around tp-\u003enotsent_lowat\n tcp: annotate data-races around rskq_defer_accept\n tcp: annotate data-races around tp-\u003elinger2\n net: Replace the limit of TCP_LINGER2 with TCP_FIN_TIMEOUT_MAX\n tcp: annotate data-races around tp-\u003etcp_tx_delay\n netfilter: nf_tables: can\u0027t schedule in nft_chain_validate\n netfilter: nf_tables: fix spurious set element insertion failure\n llc: Don\u0027t drop packet from non-root netns.\n fbdev: au1200fb: Fix missing IRQ check in au1200fb_drv_probe\n Revert \"tcp: avoid the lookup process failing to get sk in ehash table\"\n net:ipv6: check return value of pskb_trim()\n iavf: Fix use-after-free in free_netdev\n net: ethernet: ti: cpsw_ale: Fix cpsw_ale_get_field()/cpsw_ale_set_field()\n pinctrl: amd: Use amd_pinconf_set() for all config options\n fbdev: imxfb: warn about invalid left/right margin\n spi: bcm63xx: fix max prepend length\n igb: Fix igb_down hung on surprise removal\n wifi: iwlwifi: mvm: avoid baid size integer overflow\n wifi: wext-core: Fix -Wstringop-overflow warning in ioctl_standard_iw_point()\n devlink: report devlink_port_type_warn source device\n bpf: Address KCSAN report on bpf_lru_list\n sched/fair: Don\u0027t balance task to its current running CPU\n arm64: mm: fix VA-range sanity check\n posix-timers: Ensure timer ID search-loop limit is valid\n md/raid10: prevent soft lockup while flush writes\n md: fix data corruption for raid456 when reshape restart while grow up\n nbd: Add the maximum limit of allocated index in nbd_dev_add\n debugobjects: Recheck debug_objects_enabled before reporting\n ext4: correct inline offset when handling xattrs in inode body\n drm/client: Fix memory leak in drm_client_modeset_probe\n drm/client: Fix memory leak in drm_client_target_cloned\n can: bcm: Fix UAF in bcm_proc_show()\n selftests: tc: set timeout to 15 minutes\n fuse: revalidate: don\u0027t invalidate if interrupted\n btrfs: fix warning when putting transaction with qgroups enabled after abort\n perf probe: Add test for regression introduced by switch to die_get_decl_file()\n drm/atomic: Fix potential use-after-free in nonblocking commits\n scsi: qla2xxx: Remove unused nvme_ls_waitq wait queue\n scsi: qla2xxx: Pointer may be dereferenced\n scsi: qla2xxx: Correct the index of array\n scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport()\n scsi: qla2xxx: Fix potential NULL pointer dereference\n scsi: qla2xxx: Wait for io return on terminate rport\n tracing/probes: Fix not to count error code to total length\n tracing: Fix null pointer dereference in tracing_err_log_open()\n xtensa: ISS: fix call to split_if_spec\n ring-buffer: Fix deadloop issue on reading trace_pipe\n tracing/histograms: Add histograms to hist_vars if they have referenced variables\n tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() when iterating clk\n tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() in case of error\n Revert \"8250: add support for ASIX devices with a FIFO bug\"\n meson saradc: fix clock divider mask length\n ceph: don\u0027t let check_caps skip sending responses for revoke msgs\n hwrng: imx-rngc - fix the timeout for init and self check\n firmware: stratix10-svc: Fix a potential resource leak in svc_create_memory_pool()\n serial: atmel: don\u0027t enable IRQs prematurely\n drm/rockchip: vop: Leave vblank enabled in self-refresh\n drm/atomic: Allow vblank-enabled + self-refresh \"disable\"\n fs: dlm: return positive pid value for F_GETLK\n md/raid0: add discard support for the \u0027original\u0027 layout\n misc: pci_endpoint_test: Re-init completion for every test\n misc: pci_endpoint_test: Free IRQs before removing the device\n PCI: rockchip: Set address alignment for endpoint mode\n PCI: rockchip: Use u32 variable to access 32-bit registers\n PCI: rockchip: Fix legacy IRQ generation for RK3399 PCIe endpoint core\n PCI: rockchip: Add poll and timeout to wait for PHY PLLs to be locked\n PCI: rockchip: Write PCI Device ID to correct register\n PCI: rockchip: Assert PCI Configuration Enable bit after probe\n PCI: qcom: Disable write access to read only registers for IP v2.3.3\n PCI: Add function 1 DMA alias quirk for Marvell 88SE9235\n PCI/PM: Avoid putting EloPOS E2/S2/H2 PCIe Ports in D3cold\n jfs: jfs_dmap: Validate db_l2nbperpage while mounting\n ext4: only update i_reserved_data_blocks on successful block allocation\n ext4: fix wrong unit use in ext4_mb_clear_bb\n erofs: fix compact 4B support for 16k block size\n SUNRPC: Fix UAF in svc_tcp_listen_data_ready()\n misc: fastrpc: Create fastrpc scalar with correct buffer count\n powerpc: Fail build if using recordmcount with binutils v2.37\n net: bcmgenet: Ensure MDIO unregistration has clocks enabled\n mtd: rawnand: meson: fix unaligned DMA buffers handling\n tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation\n pinctrl: amd: Only use special debounce behavior for GPIO 0\n pinctrl: amd: Detect internal GPIO0 debounce handling\n pinctrl: amd: Fix mistake in handling clearing pins at startup\n net/sched: make psched_mtu() RTNL-less safe\n net/sched: flower: Ensure both minimum and maximum ports are specified\n cls_flower: Add extack support for src and dst port range options\n wifi: airo: avoid uninitialized warning in airo_get_rate()\n erofs: avoid infinite loop in z_erofs_do_read_page() when reading beyond EOF\n platform/x86: wmi: Break possible infinite loop when parsing GUID\n platform/x86: wmi: move variables\n platform/x86: wmi: use guid_t and guid_equal()\n platform/x86: wmi: remove unnecessary argument\n platform/x86: wmi: Fix indentation in some cases\n platform/x86: wmi: Replace UUID redefinitions by their originals\n ipv6/addrconf: fix a potential refcount underflow for idev\n NTB: ntb_tool: Add check for devm_kcalloc\n NTB: ntb_transport: fix possible memory leak while device_register() fails\n ntb: intel: Fix error handling in intel_ntb_pci_driver_init()\n NTB: amd: Fix error handling in amd_ntb_pci_driver_init()\n ntb: idt: Fix error handling in idt_pci_driver_init()\n udp6: fix udp6_ehashfn() typo\n icmp6: Fix null-ptr-deref of ip6_null_entry-\u003ert6i_idev in icmp6_dev().\n ionic: remove WARN_ON to prevent panic_on_warn\n ionic: ionic_intr_free parameter change\n ionic: move irq request to qcq alloc\n ionic: clean irq affinity on queue deinit\n ionic: improve irq numa locality\n net/sched: cls_fw: Fix improper refcount update leads to use-after-free\n net: mvneta: fix txq_map in case of txq_number\u003d\u003d1\n scsi: qla2xxx: Fix error code in qla2x00_start_sp()\n igc: set TP bit in \u0027supported\u0027 and \u0027advertising\u0027 fields of ethtool_link_ksettings\n igc: Remove delay during TX ring configuration\n drm/panel: simple: Add connector_type for innolux_at043tn24\n drm/panel: Add and fill drm_panel type field\n drm/panel: Initialise panel dev and funcs through drm_panel_init()\n workqueue: clean up WORK_* constant types, clarify masking\n net: lan743x: Don\u0027t sleep in atomic context\n block/partition: fix signedness issue for Amiga partitions\n tty: serial: fsl_lpuart: add earlycon for imx8ulp platform\n netfilter: nf_tables: prevent OOB access in nft_byteorder_eval\n netfilter: conntrack: Avoid nf_ct_helper_hash uses after free\n netfilter: nf_tables: fix scheduling-while-atomic splat\n netfilter: nf_tables: unbind non-anonymous set if rule construction fails\n netfilter: nf_tables: reject unbound anonymous set before commit phase\n netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain\n netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE\n netfilter: nf_tables: add rescheduling points during loop detection walks\n netfilter: nf_tables: use net_generic infra for transaction data\n netfilter: add helper function to set up the nfnetlink header and use it\n netfilter: nftables: add helper function to set the base sequence number\n netfilter: nf_tables: fix nat hook table deletion\n block: add overflow checks for Amiga partition support\n fanotify: disallow mount/sb marks on kernel internal pseudo fs\n fs: no need to check source\n ARM: orion5x: fix d2net gpio initialization\n btrfs: fix race when deleting quota root from the dirty cow roots list\n fs: Lock moved directories\n fs: Establish locking order for unrelated directories\n Revert \"f2fs: fix potential corruption when moving a directory\"\n ext4: Remove ext4 locking of moved directory\n fs: avoid empty option when generating legacy mount string\n jffs2: reduce stack usage in jffs2_build_xattr_subsystem()\n integrity: Fix possible multiple allocation in integrity_inode_get()\n bcache: Remove unnecessary NULL point check in node allocations\n mmc: sdhci: fix DMA configure compatibility issue when 64bit DMA mode is used.\n mmc: core: disable TRIM on Micron MTFC4GACAJCN-1M\n mmc: core: disable TRIM on Kingston EMMC04G-M627\n NFSD: add encoding of op_recall flag for write delegation\n ALSA: jack: Fix mutex call in snd_jack_report()\n i2c: xiic: Don\u0027t try to handle more interrupt events after error\n i2c: xiic: Defer xiic_wakeup() and __xiic_start_xfer() in xiic_process()\n sh: dma: Fix DMA channel offset calculation\n net: dsa: tag_sja1105: fix MAC DA patching from meta frames\n net/sched: act_pedit: Add size check for TCA_PEDIT_PARMS_EX\n xsk: Honor SO_BINDTODEVICE on bind\n xsk: Improve documentation for AF_XDP\n tcp: annotate data races in __tcp_oow_rate_limited()\n net: bridge: keep ports without IFF_UNICAST_FLT in BR_PROMISC mode\n powerpc: allow PPC_EARLY_DEBUG_CPM only when SERIAL_CPM\u003dy\n f2fs: fix error path handling in truncate_dnode()\n mailbox: ti-msgmgr: Fill non-message tx data fields with 0x0\n spi: bcm-qspi: return error if neither hif_mspi nor mspi is available\n Add MODULE_FIRMWARE() for FIRMWARE_TG357766.\n sctp: fix potential deadlock on \u0026net-\u003esctp.addr_wq_lock\n rtc: st-lpc: Release some resources in st_rtc_probe() in case of error\n pwm: sysfs: Do not apply state to already disabled PWMs\n pwm: imx-tpm: force \u0027real_period\u0027 to be zero in suspend\n mfd: stmpe: Only disable the regulators if they are enabled\n KVM: s390: vsie: fix the length of APCB bitmap\n mfd: stmfx: Fix error path in stmfx_chip_init\n serial: 8250_omap: Use force_suspend and resume for system suspend\n mfd: intel-lpss: Add missing check for platform_get_resource\n usb: dwc3: qcom: Release the correct resources in dwc3_qcom_remove()\n KVM: s390: fix KVM_S390_GET_CMMA_BITS for GFNs in memslot holes\n mfd: rt5033: Drop rt5033-battery sub-device\n usb: hide unused usbfs_notify_suspend/resume functions\n usb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe()\n extcon: Fix kernel doc of property capability fields to avoid warnings\n extcon: Fix kernel doc of property fields to avoid warnings\n usb: dwc3: qcom: Fix potential memory leak\n media: usb: siano: Fix warning due to null work_func_t function pointer\n media: videodev2.h: Fix struct v4l2_input tuner index comment\n media: usb: Check az6007_read() return value\n sh: j2: Use ioremap() to translate device tree address into kernel memory\n w1: fix loop in w1_fini()\n block: change all __u32 annotations to __be32 in affs_hardblocks.h\n block: fix signed int overflow in Amiga partition support\n usb: dwc3: gadget: Propagate core init errors to UDC during pullup\n USB: serial: option: add LARA-R6 01B PIDs\n hwrng: st - keep clock enabled while hwrng is registered\n hwrng: st - Fix W\u003d1 unused variable warning\n NFSv4.1: freeze the session table upon receiving NFS4ERR_BADSESSION\n ARC: define ASM_NL and __ALIGN(_STR) outside #ifdef __ASSEMBLY__ guard\n modpost: fix off by one in is_executable_section()\n crypto: marvell/cesa - Fix type mismatch warning\n modpost: fix section mismatch message for R_ARM_{PC24,CALL,JUMP24}\n modpost: fix section mismatch message for R_ARM_ABS32\n crypto: nx - fix build warnings when DEBUG_FS is not enabled\n hwrng: virtio - Fix race on data_avail and actual data\n hwrng: virtio - always add a pending request\n hwrng: virtio - don\u0027t waste entropy\n hwrng: virtio - don\u0027t wait on cleanup\n hwrng: virtio - add an internal buffer\n powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary\n pinctrl: at91-pio4: check return value of devm_kasprintf()\n perf dwarf-aux: Fix off-by-one in die_get_varname()\n pinctrl: cherryview: Return correct value if pin in push-pull mode\n PCI: Add pci_clear_master() stub for non-CONFIG_PCI\n PCI: ftpci100: Release the clock resources\n PCI: pciehp: Cancel bringup sequence if card is not present\n scsi: 3w-xxxx: Add error handling for initialization failure in tw_probe()\n PCI/ASPM: Disable ASPM on MFD function removal to avoid use-after-free\n scsi: qedf: Fix NULL dereference in error handling\n ASoC: imx-audmix: check return value of devm_kasprintf()\n clk: keystone: sci-clk: check return value of kasprintf()\n clk: cdce925: check return value of kasprintf()\n ALSA: ac97: Fix possible NULL dereference in snd_ac97_mixer\n clk: tegra: tegra124-emc: Fix potential memory leak\n drm/radeon: fix possible division-by-zero errors\n drm/amdkfd: Fix potential deallocation of previously deallocated memory.\n fbdev: omapfb: lcd_mipid: Fix an error handling path in mipid_spi_probe()\n arm64: dts: renesas: ulcb-kf: Remove flow control for SCIF1\n IB/hfi1: Fix sdma.h tx-\u003enum_descs off-by-one errors\n soc/fsl/qe: fix usb.c build errors\n ASoC: es8316: Do not set rate constraints for unsupported MCLKs\n ASoC: es8316: Increment max value for ALC Capture Target Volume control\n memory: brcmstb_dpfe: fix testing array offset after use\n ARM: ep93xx: fix missing-prototype warnings\n drm/panel: simple: fix active size for Ampire AM-480272H3TMQW-T01H\n arm64: dts: qcom: msm8916: correct camss unit address\n ARM: dts: gta04: Move model property out of pinctrl node\n RDMA/bnxt_re: Fix to remove an unnecessary log\n drm: sun4i_tcon: use devm_clk_get_enabled in `sun4i_tcon_init_clocks`\n Input: adxl34x - do not hardcode interrupt trigger type\n ARM: dts: BCM5301X: Drop \"clock-names\" from the SPI node\n Input: drv260x - sleep between polling GO bit\n radeon: avoid double free in ci_dpm_init()\n netlink: Add __sock_i_ino() for __netlink_diag_dump().\n ipvlan: Fix return value of ipvlan_queue_xmit()\n netfilter: nf_conntrack_sip: fix the ct_sip_parse_numerical_param() return value.\n netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one\n lib/ts_bm: reset initial match offset for every block of text\n net: nfc: Fix use-after-free caused by nfc_llcp_find_local\n nfc: llcp: simplify llcp_sock_connect() error paths\n gtp: Fix use-after-free in __gtp_encap_destroy().\n selftests: rtnetlink: remove netdevsim device after ipsec offload test\n netlink: do not hard code device address lenth in fdb dumps\n netlink: fix potential deadlock in netlink_set_err()\n wifi: ath9k: convert msecs to jiffies where needed\n wifi: cfg80211: rewrite merging of inherited elements\n wifi: iwlwifi: pull from TXQs with softirqs disabled\n rtnetlink: extend RTEXT_FILTER_SKIP_STATS to IFLA_VF_INFO\n wifi: ath9k: Fix possible stall on ath9k_txq_list_has_key()\n memstick r592: make memstick_debug_get_tpc_name() static\n kexec: fix a memory leak in crash_shrink_memory()\n watchdog/perf: more properly prevent false positives with turbo modes\n watchdog/perf: define dummy watchdog_update_hrtimer_threshold() on correct config\n wifi: rsi: Do not set MMC_PM_KEEP_POWER in shutdown\n wifi: ath9k: don\u0027t allow to overwrite ENDPOINT0 attributes\n wifi: ray_cs: Fix an error handling path in ray_probe()\n wifi: ray_cs: Drop useless status variable in parse_addr()\n wifi: ray_cs: Utilize strnlen() in parse_addr()\n wifi: wl3501_cs: Fix an error handling path in wl3501_probe()\n wl3501_cs: use eth_hw_addr_set()\n net: create netdev-\u003edev_addr assignment helpers\n wl3501_cs: Fix misspelling and provide missing documentation\n wl3501_cs: Remove unnecessary NULL check\n wl3501_cs: Fix a bunch of formatting issues related to function docs\n wifi: atmel: Fix an error handling path in atmel_probe()\n wifi: orinoco: Fix an error handling path in orinoco_cs_probe()\n wifi: orinoco: Fix an error handling path in spectrum_cs_probe()\n regulator: core: Streamline debugfs operations\n regulator: core: Fix more error checking for debugfs_create_dir()\n nfc: llcp: fix possible use of uninitialized variable in nfc_llcp_send_connect()\n nfc: constify several pointers to u8, char and sk_buff\n wifi: mwifiex: Fix the size of a memory allocation in mwifiex_ret_802_11_scan()\n spi: spi-geni-qcom: Correct CS_TOGGLE bit in SPI_TRANS_CFG\n samples/bpf: Fix buffer overflow in tcp_basertt\n wifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx\n wifi: ath9k: fix AR9003 mac hardware hang check register offset calculation\n ima: Fix build warnings\n pstore/ram: Add check for kstrdup\n evm: Complete description of evm_inode_setattr()\n ARM: 9303/1: kprobes: avoid missing-declaration warnings\n powercap: RAPL: Fix CONFIG_IOSF_MBI dependency\n PM: domains: fix integer overflow issues in genpd_parse_state()\n clocksource/drivers/cadence-ttc: Fix memory leak in ttc_timer_probe\n clocksource/drivers/cadence-ttc: Use ttc driver as platform driver\n tracing/timer: Add missing hrtimer modes to decode_hrtimer_mode().\n irqchip/jcore-aic: Fix missing allocation of IRQ descriptors\n irqchip/jcore-aic: Kill use of irq_create_strict_mappings()\n md/raid10: fix io loss while replacement replace rdev\n md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request\n md/raid10: fix wrong setting of max_corr_read_errors\n md/raid10: fix overflow of md/safe_mode_delay\n md/raid10: check slab-out-of-bounds in md_bitmap_get_counter\n x86/resctrl: Only show tasks\u0027 pid in current pid namespace\n x86/resctrl: Use is_closid_match() in more places\n bgmac: fix *initial* chip reset to support BCM5358\n drm/amdgpu: Validate VM ioctl flags.\n scripts/tags.sh: Resolve gtags empty index generation\n drm/i915: Initialise outparam for error return from wait_for_register\n HID: wacom: Use ktime_t rather than int when dealing with timestamps\n fbdev: imsttfb: Fix use after free bug in imsttfb_probe\n video: imsttfb: check for ioremap() failures\n x86/smp: Use dedicated cache-line for mwait_play_dead()\n gfs2: Don\u0027t deref jdesc in evict\n Linux 5.4.250\n x86/cpu/amd: Add a Zenbleed fix\n x86/cpu/amd: Move the errata checking functionality up\n x86/microcode/AMD: Load late on both threads too\n\nConflict:\n\tdrivers/usb/dwc3/gadget.c\n\nChange-Id: Ibfc470316e278f29831f47d6c76bade3f8514073\nSigned-off-by: kamasali Satyanarayan \u003cquic_kamasali@quicinc.com\u003e\n" }, { "commit": "e18c011afea6f3fadbf4b025ecb4b6be0ada90e5", "tree": "e0bd94637cd8183e0c3d4715cf9421ec76018852", "parents": [ "4542148a7e3f976f7ea6fe4a6b819fd58004b4f2", "02f78c59a0ed312a41d5d76397ea812c7cb19cb2" ], "author": { "name": "Greg Kroah-Hartman", "email": "gregkh@google.com", "time": "Thu Oct 12 10:04:29 2023 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@google.com", "time": "Thu Oct 26 06:14:23 2023 +0000" }, "message": "Merge 5.4.258 into android11-5.4-lts\n\nChanges in 5.4.258\n\tNFS/pNFS: Report EINVAL errors from connect() to the server\n\tSUNRPC: Mark the cred for revalidation if the server rejects it\n\ttracing: Increase trace array ref count on enable and filter files\n\tata: libahci: clear pending interrupt status\n\text4: remove the \u0027group\u0027 parameter of ext4_trim_extent\n\text4: add new helper interface ext4_try_to_trim_range()\n\text4: scope ret locally in ext4_try_to_trim_range()\n\text4: change s_last_trim_minblks type to unsigned long\n\text4: mark group as trimmed only if it was fully scanned\n\text4: replace the traditional ternary conditional operator with with max()/min()\n\text4: move setting of trimmed bit into ext4_try_to_trim_range()\n\text4: do not let fstrim block system suspend\n\tASoC: meson: spdifin: start hw on dai probe\n\tnetfilter: nf_tables: disallow element removal on anonymous sets\n\tbpf: Avoid deadlock when using queue and stack maps from NMI\n\tselftests/tls: Add {} to avoid static checker warning\n\tselftests: tls: swap the TX and RX sockets in some tests\n\tASoC: imx-audmix: Fix return error with devm_clk_get()\n\ti40e: Fix for persistent lldp support\n\ti40e: Remove scheduling while atomic possibility\n\ti40e: Fix warning message and call stack during rmmod i40e driver\n\ti40e: Fix VF VLAN offloading when port VLAN is configured\n\tipv4: fix null-deref in ipv4_link_failure\n\tpowerpc/perf/hv-24x7: Update domain value check\n\tdccp: fix dccp_v4_err()/dccp_v6_err() again\n\tnet: hns3: add 5ms delay before clear firmware reset irq source\n\tnet: bridge: use DEV_STATS_INC()\n\tteam: fix null-ptr-deref when team device type is changed\n\tnet: rds: Fix possible NULL-pointer dereference\n\tnetfilter: ipset: Fix race between IPSET_CMD_CREATE and IPSET_CMD_SWAP\n\tgpio: tb10x: Fix an error handling path in tb10x_gpio_probe()\n\ti2c: mux: demux-pinctrl: check the return value of devm_kstrdup()\n\tInput: i8042 - add quirk for TUXEDO Gemini 17 Gen1/Clevo PD70PN\n\tscsi: qla2xxx: Fix update_fcport for current_topology\n\tscsi: qla2xxx: Fix deletion race condition\n\tdrm/amd/display: Reinstate LFC optimization\n\tdrm/amd/display: Fix LFC multiplier changing erratically\n\tdrm/amd/display: prevent potential division by zero errors\n\tata: libata: disallow dev-initiated LPM transitions to unsupported states\n\tMIPS: Alchemy: only build mmc support helpers if au1xmmc is enabled\n\tclk: tegra: fix error return case for recalc_rate\n\tARM: dts: ti: omap: motorola-mapphone: Fix abe_clkctrl warning on boot\n\tbus: ti-sysc: Fix SYSC_QUIRK_SWSUP_SIDLE_ACT handling for uart wake-up\n\txtensa: add default definition for XCHAL_HAVE_DIV32\n\txtensa: iss/network: make functions static\n\txtensa: boot: don\u0027t add include-dirs\n\txtensa: boot/lib: fix function prototypes\n\tgpio: pmic-eic-sprd: Add can_sleep flag for PMIC EIC chip\n\tparisc: sba: Fix compile warning wrt list of SBA devices\n\tparisc: iosapic.c: Fix sparse warnings\n\tparisc: drivers: Fix sparse warning\n\tparisc: irq: Make irq_stack_union static to avoid sparse warning\n\tselftests/ftrace: Correctly enable event in instance-event.tc\n\tring-buffer: Avoid softlockup in ring_buffer_resize()\n\tata: libata-eh: do not clear ATA_PFLAG_EH_PENDING in ata_eh_reset()\n\tspi: nxp-fspi: reset the FLSHxCR1 registers\n\tbpf: Clarify error expectations from bpf_clone_redirect\n\tpowerpc/watchpoints: Annotate atomic context in more places\n\tncsi: Propagate carrier gain/loss events to the NCSI controller\n\tfbdev/sh7760fb: Depend on FB\u003dy\n\tnvme-pci: do not set the NUMA node of device if it has none\n\twatchdog: iTCO_wdt: No need to stop the timer in probe\n\twatchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running\n\ti40e: improve locking of mac_filter_hash\n\ti40e: always propagate error value in i40e_set_vsi_promisc()\n\ti40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc\n\tsmack: Record transmuting in smk_transmuted\n\tsmack: Retrieve transmuting information in smack_inode_getsecurity()\n\tSmack:- Use overlay inode label in smack_inode_copy_up()\n\tserial: 8250_port: Check IRQ data before use\n\tnilfs2: fix potential use after free in nilfs_gccache_submit_read_data()\n\tALSA: hda: Disable power save for solving pop issue on Lenovo ThinkCentre M70q\n\tata: libata-scsi: ignore reserved bits for REPORT SUPPORTED OPERATION CODES\n\ti2c: i801: unregister tco_pdev in i801_probe() error path\n\tring-buffer: Update \"shortest_full\" in polling\n\tbtrfs: properly report 0 avail for very full file systems\n\tnet: thunderbolt: Fix TCPv6 GSO checksum calculation\n\tata: libata-core: Fix ata_port_request_pm() locking\n\tata: libata-core: Fix port and device removal\n\tata: libata-core: Do not register PM operations for SAS ports\n\tata: libata-sata: increase PMP SRST timeout to 10s\n\tfs: binfmt_elf_efpic: fix personality for ELF-FDPIC\n\trbd: move rbd_dev_refresh() definition\n\trbd: decouple header read-in from updating rbd_dev-\u003eheader\n\trbd: decouple parent info read-in from updating rbd_dev\n\trbd: take header_rwsem in rbd_dev_refresh() only when updating\n\tRevert \"PCI: qcom: Disable write access to read only registers for IP v2.3.3\"\n\tscsi: zfcp: Fix a double put in zfcp_port_enqueue()\n\tqed/red_ll2: Fix undefined behavior bug in struct qed_ll2_info\n\twifi: mwifiex: Fix tlv_buf_left calculation\n\tnet: replace calls to sock-\u003eops-\u003econnect() with kernel_connect()\n\tnet: prevent rewrite of msg_name in sock_sendmsg()\n\tubi: Refuse attaching if mtd\u0027s erasesize is 0\n\twifi: iwlwifi: dbg_ini: fix structure packing\n\twifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet\n\tdrivers/net: process the result of hdlc_open() and add call of hdlc_close() in uhdlc_close()\n\twifi: mt76: mt76x02: fix MT76x0 external LNA gain handling\n\tregmap: rbtree: Fix wrong register marked as in-cache when creating new node\n\tima: Finish deprecation of IMA_TRUSTED_KEYRING Kconfig\n\tscsi: target: core: Fix deadlock due to recursive locking\n\tNFS4: Trace state recovery operation\n\tNFS: Add a helper nfs_client_for_each_server()\n\tNFSv4: Fix a nfs4_state_manager() race\n\tmodpost: add missing else to the \"of\" check\n\tnet: fix possible store tearing in neigh_periodic_work()\n\tipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()\n\tnet: dsa: mv88e6xxx: Avoid EEPROM timeout when EEPROM is absent\n\tnet: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg\n\tnet: nfc: llcp: Add lock when modifying device list\n\tnetfilter: handle the connecting collision properly in nf_conntrack_proto_sctp\n\tnet: stmmac: dwmac-stm32: fix resume on STM32 MCU\n\ttcp: fix quick-ack counting to count actual ACKs of new data\n\ttcp: fix delayed ACKs for MSS boundary condition\n\tsctp: update transport state when processing a dupcook packet\n\tsctp: update hb timer immediately after users change hb_interval\n\tcpupower: add Makefile dependencies for install targets\n\tRDMA/core: Require admin capabilities to set system parameters\n\tIB/mlx4: Fix the size of a buffer in add_port_entries()\n\tgpio: aspeed: fix the GPIO number passed to pinctrl_gpio_set_config()\n\tgpio: pxa: disable pinctrl calls for MMP_GPIO\n\tRDMA/cma: Fix truncation compilation warning in make_cma_ports\n\tRDMA/uverbs: Fix typo of sizeof argument\n\tRDMA/siw: Fix connection failure handling\n\tRDMA/mlx5: Fix NULL string error\n\tparisc: Restore __ldcw_align for PA-RISC 2.0 processors\n\tNFS: Fix a race in __nfs_list_for_each_server()\n\tima: rework CONFIG_IMA dependency block\n\txen/events: replace evtchn_rwlock with RCU\n\tLinux 5.4.258\n\nChange-Id: I5f0e742bb16c2e7edae606510d1fd037032cdec7\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@google.com\u003e\n" }, { "commit": "6ef34c09c64e0ca9097acba59d36ac71b3553d44", "tree": "37d6e5eb860751d8645107e542770123b90898ac", "parents": [ "0d9a39127b09d82e29faf4bcfc160c26414e9855", "91f702572a8042124eb6975b4f52d487845b3a99" ], "author": { "name": "Michael Bestas", "email": "mkbestas@lineageos.org", "time": "Mon Oct 16 15:49:50 2023 +0300" }, "committer": { "name": "Michael Bestas", "email": "mkbestas@lineageos.org", "time": "Mon Oct 16 15:49:50 2023 +0300" }, "message": "Merge tag \u0027ASB-2023-10-06_11-5.4\u0027 of https://android.googlesource.com/kernel/common into android13-5.4-lahaina\n\nhttps://source.android.com/docs/security/bulletin/2023-10-01\n\n* tag \u0027ASB-2023-10-06_11-5.4\u0027 of https://android.googlesource.com/kernel/common:\n UPSTREAM: arm64: efi: Make efi_rt_lock a raw_spinlock\n UPSTREAM: net: sched: sch_qfq: Fix UAF in qfq_dequeue()\n UPSTREAM: net/sched: sch_hfsc: Ensure inner classes have fsc curve\n UPSTREAM: net/sched: sch_qfq: account for stab overhead in qfq_enqueue\n UPSTREAM: netfilter: nf_tables: prevent OOB access in nft_byteorder_eval\n UPSTREAM: af_unix: Fix null-ptr-deref in unix_stream_sendpage().\n Linux 5.4.254\n sch_netem: fix issues in netem_change() vs get_dist_table()\n alpha: remove __init annotation from exported page_is_ram()\n scsi: core: Fix possible memory leak if device_add() fails\n scsi: snic: Fix possible memory leak if device_add() fails\n scsi: 53c700: Check that command slot is not NULL\n scsi: storvsc: Fix handling of virtual Fibre Channel timeouts\n scsi: core: Fix legacy /proc parsing buffer overflow\n netfilter: nf_tables: report use refcount overflow\n nvme-rdma: fix potential unbalanced freeze \u0026 unfreeze\n nvme-tcp: fix potential unbalanced freeze \u0026 unfreeze\n btrfs: set cache_block_group_error if we find an error\n btrfs: don\u0027t stop integrity writeback too early\n ibmvnic: Handle DMA unmapping of login buffs in release functions\n net/mlx5: Allow 0 for total host VFs\n dmaengine: mcf-edma: Fix a potential un-allocated memory access\n wifi: cfg80211: fix sband iftype data lookup for AP_VLAN\n IB/hfi1: Fix possible panic during hotplug remove\n drivers: net: prevent tun_build_skb() to exceed the packet size limit\n dccp: fix data-race around dp-\u003edccps_mss_cache\n bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves\n net/packet: annotate data-races around tp-\u003estatus\n mISDN: Update parameter type of dsp_cmx_send()\n selftests/rseq: Fix build with undefined __weak\n drm/nouveau/disp: Revert a NULL check inside nouveau_connector_get_modes\n x86: Move gds_ucode_mitigated() declaration to header\n x86/mm: Fix VDSO and VVAR placement on 5-level paging machines\n x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405\n usb: common: usb-conn-gpio: Prevent bailing out if initial role is none\n usb: dwc3: Properly handle processing of pending events\n usb-storage: alauda: Fix uninit-value in alauda_check_media()\n binder: fix memory leak in binder_init()\n iio: cros_ec: Fix the allocation size for cros_ec_command\n nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput\n x86/pkeys: Revert a5eff7259790 (\"x86/pkeys: Add PKRU value to init_fpstate\")\n radix tree test suite: fix incorrect allocation size for pthreads\n drm/nouveau/gr: enable memory loads on helper invocation on all channels\n dmaengine: pl330: Return DMA_PAUSED when transaction is paused\n ipv6: adjust ndisc_is_useropt() to also return true for PIO\n mmc: moxart: read scr register without changing byte order\n Linux 5.4.253\n Revert \"driver core: Annotate dev_err_probe() with __must_check\"\n drivers: core: fix kernel-doc markup for dev_err_probe()\n driver code: print symbolic error code\n driver core: Annotate dev_err_probe() with __must_check\n ARM: dts: nxp/imx6sll: fix wrong property name in usbphy node\n ARM: dts: imx6sll: fixup of operating points\n ARM: dts: imx: add usb alias\n ARM: dts: imx: Align L2 cache-controller nodename with dtschema\n ARM: dts: imx6sll: Make ssi node name same as other platforms\n arm64: dts: stratix10: fix incorrect I2C property for SCL signal\n ceph: defer stopping mdsc delayed_work\n ceph: use kill_anon_super helper\n ceph: show tasks waiting on caps in debugfs caps file\n PM: sleep: wakeirq: fix wake irq arming\n PM / wakeirq: support enabling wake-up irq after runtime_suspend called\n selftests/rseq: Play nice with binaries statically linked against glibc 2.35+\n selftests/rseq: check if libc rseq support is registered\n powerpc/mm/altmap: Fix altmap boundary check\n mtd: rawnand: omap_elm: Fix incorrect type in assignment\n test_firmware: return ENOMEM instead of ENOSPC on failed memory allocation\n test_firmware: prevent race conditions by a correct implementation of locking\n ext2: Drop fragment support\n fs: Protect reconfiguration of sb read-write from racing writes\n net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb\n Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb\n fs/sysv: Null check to prevent null-ptr-deref bug\n net: tap_open(): set sk_uid from current_fsuid()\n net: tun_chr_open(): set sk_uid from current_fsuid()\n mtd: rawnand: meson: fix OOB available bytes for ECC\n mtd: spinand: toshiba: Fix ecc_get_status\n USB: zaurus: Add ID for A-300/B-500/C-700\n libceph: fix potential hang in ceph_osdc_notify()\n scsi: zfcp: Defer fc_rport blocking until after ADISC response\n tcp_metrics: fix data-race in tcpm_suck_dst() vs fastopen\n tcp_metrics: annotate data-races around tm-\u003etcpm_net\n tcp_metrics: annotate data-races around tm-\u003etcpm_vals[]\n tcp_metrics: annotate data-races around tm-\u003etcpm_lock\n tcp_metrics: annotate data-races around tm-\u003etcpm_stamp\n tcp_metrics: fix addr_same() helper\n ip6mr: Fix skb_under_panic in ip6mr_cache_report()\n net: dcb: choose correct policy to parse DCB_ATTR_BCN\n net: ll_temac: fix error checking of irq_of_parse_and_map()\n net: ll_temac: Switch to use dev_err_probe() helper\n driver core: add device probe log helper\n bpf: sockmap: Remove preempt_disable in sock_map_sk_acquire\n net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free\n net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free\n net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free\n net: add missing data-race annotation for sk_ll_usec\n net: add missing data-race annotations around sk-\u003esk_peek_off\n net: add missing READ_ONCE(sk-\u003esk_rcvbuf) annotation\n net: add missing READ_ONCE(sk-\u003esk_sndbuf) annotation\n net: add missing READ_ONCE(sk-\u003esk_rcvlowat) annotation\n net: annotate data-races around sk-\u003esk_max_pacing_rate\n mISDN: hfcpci: Fix potential deadlock on \u0026hc-\u003elock\n net: sched: cls_u32: Fix match key mis-addressing\n perf test uprobe_from_different_cu: Skip if there is no gcc\n rtnetlink: let rtnl_bridge_setlink checks IFLA_BRIDGE_MODE length\n net/mlx5e: fix return value check in mlx5e_ipsec_remove_trailer()\n net/mlx5: DR, fix memory leak in mlx5dr_cmd_create_reformat_ctx\n KVM: s390: fix sthyi error handling\n word-at-a-time: use the same return type for has_zero regardless of endianness\n loop: Select I/O scheduler \u0027none\u0027 from inside add_disk()\n perf: Fix function pointer case\n arm64: Fix bit-shifting UB in the MIDR_CPU_MODEL() macro\n arm64: Add AMPERE1 to the Spectre-BHB affected list\n ASoC: cs42l51: fix driver to properly autoload with automatic module loading\n net/sched: sch_qfq: account for stab overhead in qfq_enqueue\n btrfs: fix race between quota disable and quota assign ioctls\n btrfs: qgroup: return ENOTCONN instead of EINVAL when quotas are not enabled\n btrfs: qgroup: remove one-time use variables for quota_root checks\n cpufreq: intel_pstate: Drop ACPI _PSS states table patching\n ACPI: processor: perflib: Avoid updating frequency QoS unnecessarily\n ACPI: processor: perflib: Use the \"no limit\" frequency QoS\n dm cache policy smq: ensure IO doesn\u0027t prevent cleaner policy progress\n ASoC: wm8904: Fill the cache for WM8904_ADC_TEST_0 register\n s390/dasd: fix hanging device after quiesce/resume\n virtio-net: fix race between set queues and probe\n btrfs: check if the transaction was aborted at btrfs_wait_for_commit()\n irq-bcm6345-l1: Do not assume a fixed block to cpu mapping\n tpm_tis: Explicitly check for error code\n btrfs: check for commit error at btrfs_attach_transaction_barrier()\n hwmon: (nct7802) Fix for temp6 (PECI1) processed even if PECI1 disabled\n staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext()\n Documentation: security-bugs.rst: clarify CVE handling\n Documentation: security-bugs.rst: update preferences when dealing with the linux-distros group\n Revert \"usb: xhci: tegra: Fix error check\"\n usb: xhci-mtk: set the dma max_seg_size\n USB: quirks: add quirk for Focusrite Scarlett\n usb: ohci-at91: Fix the unhandle interrupt when resume\n usb: dwc3: don\u0027t reset device side if dwc3 was configured as host-only\n usb: dwc3: pci: skip BYT GPIO lookup table for hardwired phy\n Revert \"usb: dwc3: core: Enable AutoRetry feature in the controller\"\n can: gs_usb: gs_can_close(): add missing set of CAN state to CAN_STATE_STOPPED\n USB: serial: simple: sort driver entries\n USB: serial: simple: add Kaufmann RKS+CAN VCP\n USB: serial: option: add Quectel EC200A module support\n USB: serial: option: support Quectel EM060K_128\n serial: sifive: Fix sifive_serial_console_setup() section\n serial: 8250_dw: Preserve original value of DLF register\n tracing: Fix warning in trace_buffered_event_disable()\n ring-buffer: Fix wrong stat of cpu_buffer-\u003eread\n ata: pata_ns87415: mark ns87560_tf_read static\n dm raid: fix missing reconfig_mutex unlock in raid_ctr() error paths\n block: Fix a source code comment in include/uapi/linux/blkzoned.h\n ASoC: fsl_spdif: Silence output on stop\n drm/msm: Fix IS_ERR_OR_NULL() vs NULL check in a5xx_submit_in_rb()\n drm/msm/adreno: Fix snapshot BINDLESS_DATA size\n drm/msm/dpu: drop enum dpu_core_perf_data_bus_id\n RDMA/mlx4: Make check for invalid flags stricter\n benet: fix return value check in be_lancer_xmit_workarounds()\n net/sched: mqprio: Add length check for TCA_MQPRIO_{MAX/MIN}_RATE64\n net/sched: mqprio: add extack to mqprio_parse_nlattr()\n net/sched: mqprio: refactor nlattr parsing to a separate function\n platform/x86: msi-laptop: Fix rfkill out-of-sync on MSI Wind U100\n team: reset team\u0027s flags when down link is P2P device\n bonding: reset bond\u0027s flags when down link is P2P device\n tcp: Reduce chance of collisions in inet6_hashfn().\n ipv6 addrconf: fix bug where deleting a mngtmpaddr can create a new temporary address\n ethernet: atheros: fix return value check in atl1e_tso_csum()\n phy: hisilicon: Fix an out of bounds check in hisi_inno_phy_probe()\n vxlan: calculate correct header length for GPE\n i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir()\n ext4: fix to check return value of freeze_bdev() in ext4_shutdown()\n keys: Fix linking a duplicate key to a keyring\u0027s assoc_array\n uapi: General notification queue definitions\n scsi: qla2xxx: Array index may go out of bound\n scsi: qla2xxx: Fix inconsistent format argument type in qla_os.c\n pwm: meson: fix handling of period/duty if greater than UINT_MAX\n pwm: meson: Simplify duplicated per-channel tracking\n pwm: meson: Remove redundant assignment to variable fin_freq\n ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()\n ftrace: Store the order of pages allocated in ftrace_page\n ftrace: Check if pages were allocated before calling free_pages()\n ftrace: Add information on number of page groups allocated\n fs: dlm: interrupt posix locks only when process is killed\n dlm: rearrange async condition return\n dlm: cleanup plock_op vs plock_xop\n PCI/ASPM: Avoid link retraining race\n PCI/ASPM: Factor out pcie_wait_for_retrain()\n PCI/ASPM: Return 0 or -ETIMEDOUT from pcie_retrain_link()\n ext4: Fix reusing stale buffer heads from last failed mounting\n ext4: rename journal_dev to s_journal_dev inside ext4_sb_info\n btrfs: fix extent buffer leak after tree mod log failure at split_node()\n btrfs: fix race between quota disable and relocation\n btrfs: qgroup: catch reserved space leaks at unmount time\n bcache: Fix __bch_btree_node_alloc to make the failure behavior consistent\n bcache: remove \u0027int n\u0027 from parameter list of bch_bucket_alloc_set()\n gpio: tps68470: Make tps68470_gpio_output() always set the initial value\n jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint\n jbd2: recheck chechpointing non-dirty buffer\n jbd2: remove redundant buffer io error checks\n jbd2: fix kernel-doc markups\n jbd2: fix incorrect code style\n Linux 5.4.252\n x86: fix backwards merge of GDS/SRSO bit\n xen/netback: Fix buffer overrun triggered by unusual packet\n x86/cpu, kvm: Add support for CPUID_80000021_EAX\n x86/bugs: Increase the x86 bugs vector size to two u32s\n tools headers cpufeatures: Sync with the kernel sources\n x86/cpufeatures: Assign dedicated feature word for CPUID_0x8000001F[EAX]\n x86/cpu: Add VM page flush MSR availablility as a CPUID feature\n x86/cpufeatures: Add SEV-ES CPU feature\n Documentation/x86: Fix backwards on/off logic about YMM support\n x86/mm: Initialize text poking earlier\n mm: Move mm_cachep initialization to mm_init()\n x86/mm: Use mm_alloc() in poking_init()\n x86/mm: fix poking_init() for Xen PV guests\n x86/xen: Fix secondary processors\u0027 FPU initialization\n KVM: Add GDS_NO support to KVM\n x86/speculation: Add Kconfig option for GDS\n x86/speculation: Add force option to GDS mitigation\n x86/speculation: Add Gather Data Sampling mitigation\n x86/fpu: Move FPU initialization into arch_cpu_finalize_init()\n x86/fpu: Mark init functions __init\n x86/fpu: Remove cpuinfo argument from init functions\n init, x86: Move mem_encrypt_init() into arch_cpu_finalize_init()\n init: Invoke arch_cpu_finalize_init() earlier\n init: Remove check_bugs() leftovers\n um/cpu: Switch to arch_cpu_finalize_init()\n sparc/cpu: Switch to arch_cpu_finalize_init()\n sh/cpu: Switch to arch_cpu_finalize_init()\n mips/cpu: Switch to arch_cpu_finalize_init()\n m68k/cpu: Switch to arch_cpu_finalize_init()\n ia64/cpu: Switch to arch_cpu_finalize_init()\n ARM: cpu: Switch to arch_cpu_finalize_init()\n x86/cpu: Switch to arch_cpu_finalize_init()\n init: Provide arch_cpu_finalize_init()\n Revert \"posix-timers: Ensure timer ID search-loop limit is valid\"\n Revert \"drm/panel: Initialise panel dev and funcs through drm_panel_init()\"\n Revert \"drm/panel: Add and fill drm_panel type field\"\n Revert \"drm/panel: simple: Add connector_type for innolux_at043tn24\"\n Revert \"Revert \"8250: add support for ASIX devices with a FIFO bug\"\"\n Linux 5.4.251\n tracing/histograms: Return an error if we fail to add histogram to hist_vars list\n tcp: annotate data-races around fastopenq.max_qlen\n tcp: annotate data-races around tp-\u003enotsent_lowat\n tcp: annotate data-races around rskq_defer_accept\n tcp: annotate data-races around tp-\u003elinger2\n net: Replace the limit of TCP_LINGER2 with TCP_FIN_TIMEOUT_MAX\n tcp: annotate data-races around tp-\u003etcp_tx_delay\n netfilter: nf_tables: can\u0027t schedule in nft_chain_validate\n netfilter: nf_tables: fix spurious set element insertion failure\n llc: Don\u0027t drop packet from non-root netns.\n fbdev: au1200fb: Fix missing IRQ check in au1200fb_drv_probe\n Revert \"tcp: avoid the lookup process failing to get sk in ehash table\"\n net:ipv6: check return value of pskb_trim()\n iavf: Fix use-after-free in free_netdev\n net: ethernet: ti: cpsw_ale: Fix cpsw_ale_get_field()/cpsw_ale_set_field()\n pinctrl: amd: Use amd_pinconf_set() for all config options\n fbdev: imxfb: warn about invalid left/right margin\n spi: bcm63xx: fix max prepend length\n igb: Fix igb_down hung on surprise removal\n wifi: iwlwifi: mvm: avoid baid size integer overflow\n wifi: wext-core: Fix -Wstringop-overflow warning in ioctl_standard_iw_point()\n devlink: report devlink_port_type_warn source device\n bpf: Address KCSAN report on bpf_lru_list\n sched/fair: Don\u0027t balance task to its current running CPU\n arm64: mm: fix VA-range sanity check\n posix-timers: Ensure timer ID search-loop limit is valid\n md/raid10: prevent soft lockup while flush writes\n md: fix data corruption for raid456 when reshape restart while grow up\n nbd: Add the maximum limit of allocated index in nbd_dev_add\n debugobjects: Recheck debug_objects_enabled before reporting\n ext4: correct inline offset when handling xattrs in inode body\n drm/client: Fix memory leak in drm_client_modeset_probe\n drm/client: Fix memory leak in drm_client_target_cloned\n can: bcm: Fix UAF in bcm_proc_show()\n selftests: tc: set timeout to 15 minutes\n fuse: revalidate: don\u0027t invalidate if interrupted\n btrfs: fix warning when putting transaction with qgroups enabled after abort\n perf probe: Add test for regression introduced by switch to die_get_decl_file()\n drm/atomic: Fix potential use-after-free in nonblocking commits\n scsi: qla2xxx: Remove unused nvme_ls_waitq wait queue\n scsi: qla2xxx: Pointer may be dereferenced\n scsi: qla2xxx: Correct the index of array\n scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport()\n scsi: qla2xxx: Fix potential NULL pointer dereference\n scsi: qla2xxx: Wait for io return on terminate rport\n tracing/probes: Fix not to count error code to total length\n tracing: Fix null pointer dereference in tracing_err_log_open()\n xtensa: ISS: fix call to split_if_spec\n ring-buffer: Fix deadloop issue on reading trace_pipe\n tracing/histograms: Add histograms to hist_vars if they have referenced variables\n tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() when iterating clk\n tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() in case of error\n Revert \"8250: add support for ASIX devices with a FIFO bug\"\n meson saradc: fix clock divider mask length\n ceph: don\u0027t let check_caps skip sending responses for revoke msgs\n hwrng: imx-rngc - fix the timeout for init and self check\n firmware: stratix10-svc: Fix a potential resource leak in svc_create_memory_pool()\n serial: atmel: don\u0027t enable IRQs prematurely\n drm/rockchip: vop: Leave vblank enabled in self-refresh\n drm/atomic: Allow vblank-enabled + self-refresh \"disable\"\n fs: dlm: return positive pid value for F_GETLK\n md/raid0: add discard support for the \u0027original\u0027 layout\n misc: pci_endpoint_test: Re-init completion for every test\n misc: pci_endpoint_test: Free IRQs before removing the device\n PCI: rockchip: Set address alignment for endpoint mode\n PCI: rockchip: Use u32 variable to access 32-bit registers\n PCI: rockchip: Fix legacy IRQ generation for RK3399 PCIe endpoint core\n PCI: rockchip: Add poll and timeout to wait for PHY PLLs to be locked\n PCI: rockchip: Write PCI Device ID to correct register\n PCI: rockchip: Assert PCI Configuration Enable bit after probe\n PCI: qcom: Disable write access to read only registers for IP v2.3.3\n PCI: Add function 1 DMA alias quirk for Marvell 88SE9235\n PCI/PM: Avoid putting EloPOS E2/S2/H2 PCIe Ports in D3cold\n jfs: jfs_dmap: Validate db_l2nbperpage while mounting\n ext4: only update i_reserved_data_blocks on successful block allocation\n ext4: fix wrong unit use in ext4_mb_clear_bb\n erofs: fix compact 4B support for 16k block size\n SUNRPC: Fix UAF in svc_tcp_listen_data_ready()\n misc: fastrpc: Create fastrpc scalar with correct buffer count\n powerpc: Fail build if using recordmcount with binutils v2.37\n net: bcmgenet: Ensure MDIO unregistration has clocks enabled\n mtd: rawnand: meson: fix unaligned DMA buffers handling\n tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation\n pinctrl: amd: Only use special debounce behavior for GPIO 0\n pinctrl: amd: Detect internal GPIO0 debounce handling\n pinctrl: amd: Fix mistake in handling clearing pins at startup\n net/sched: make psched_mtu() RTNL-less safe\n net/sched: flower: Ensure both minimum and maximum ports are specified\n cls_flower: Add extack support for src and dst port range options\n wifi: airo: avoid uninitialized warning in airo_get_rate()\n erofs: avoid infinite loop in z_erofs_do_read_page() when reading beyond EOF\n platform/x86: wmi: Break possible infinite loop when parsing GUID\n platform/x86: wmi: move variables\n platform/x86: wmi: use guid_t and guid_equal()\n platform/x86: wmi: remove unnecessary argument\n platform/x86: wmi: Fix indentation in some cases\n platform/x86: wmi: Replace UUID redefinitions by their originals\n ipv6/addrconf: fix a potential refcount underflow for idev\n NTB: ntb_tool: Add check for devm_kcalloc\n NTB: ntb_transport: fix possible memory leak while device_register() fails\n ntb: intel: Fix error handling in intel_ntb_pci_driver_init()\n NTB: amd: Fix error handling in amd_ntb_pci_driver_init()\n ntb: idt: Fix error handling in idt_pci_driver_init()\n udp6: fix udp6_ehashfn() typo\n icmp6: Fix null-ptr-deref of ip6_null_entry-\u003ert6i_idev in icmp6_dev().\n ionic: remove WARN_ON to prevent panic_on_warn\n ionic: ionic_intr_free parameter change\n ionic: move irq request to qcq alloc\n ionic: clean irq affinity on queue deinit\n ionic: improve irq numa locality\n net/sched: cls_fw: Fix improper refcount update leads to use-after-free\n net: mvneta: fix txq_map in case of txq_number\u003d\u003d1\n scsi: qla2xxx: Fix error code in qla2x00_start_sp()\n igc: set TP bit in \u0027supported\u0027 and \u0027advertising\u0027 fields of ethtool_link_ksettings\n igc: Remove delay during TX ring configuration\n drm/panel: simple: Add connector_type for innolux_at043tn24\n drm/panel: Add and fill drm_panel type field\n drm/panel: Initialise panel dev and funcs through drm_panel_init()\n workqueue: clean up WORK_* constant types, clarify masking\n net: lan743x: Don\u0027t sleep in atomic context\n block/partition: fix signedness issue for Amiga partitions\n tty: serial: fsl_lpuart: add earlycon for imx8ulp platform\n netfilter: nf_tables: prevent OOB access in nft_byteorder_eval\n netfilter: conntrack: Avoid nf_ct_helper_hash uses after free\n netfilter: nf_tables: fix scheduling-while-atomic splat\n netfilter: nf_tables: unbind non-anonymous set if rule construction fails\n netfilter: nf_tables: reject unbound anonymous set before commit phase\n netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain\n netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE\n netfilter: nf_tables: add rescheduling points during loop detection walks\n netfilter: nf_tables: use net_generic infra for transaction data\n netfilter: add helper function to set up the nfnetlink header and use it\n netfilter: nftables: add helper function to set the base sequence number\n netfilter: nf_tables: fix nat hook table deletion\n block: add overflow checks for Amiga partition support\n fanotify: disallow mount/sb marks on kernel internal pseudo fs\n fs: no need to check source\n ARM: orion5x: fix d2net gpio initialization\n btrfs: fix race when deleting quota root from the dirty cow roots list\n fs: Lock moved directories\n fs: Establish locking order for unrelated directories\n Revert \"f2fs: fix potential corruption when moving a directory\"\n ext4: Remove ext4 locking of moved directory\n fs: avoid empty option when generating legacy mount string\n jffs2: reduce stack usage in jffs2_build_xattr_subsystem()\n integrity: Fix possible multiple allocation in integrity_inode_get()\n bcache: Remove unnecessary NULL point check in node allocations\n mmc: sdhci: fix DMA configure compatibility issue when 64bit DMA mode is used.\n mmc: core: disable TRIM on Micron MTFC4GACAJCN-1M\n mmc: core: disable TRIM on Kingston EMMC04G-M627\n NFSD: add encoding of op_recall flag for write delegation\n ALSA: jack: Fix mutex call in snd_jack_report()\n i2c: xiic: Don\u0027t try to handle more interrupt events after error\n i2c: xiic: Defer xiic_wakeup() and __xiic_start_xfer() in xiic_process()\n sh: dma: Fix DMA channel offset calculation\n net: dsa: tag_sja1105: fix MAC DA patching from meta frames\n net/sched: act_pedit: Add size check for TCA_PEDIT_PARMS_EX\n xsk: Honor SO_BINDTODEVICE on bind\n xsk: Improve documentation for AF_XDP\n tcp: annotate data races in __tcp_oow_rate_limited()\n net: bridge: keep ports without IFF_UNICAST_FLT in BR_PROMISC mode\n powerpc: allow PPC_EARLY_DEBUG_CPM only when SERIAL_CPM\u003dy\n f2fs: fix error path handling in truncate_dnode()\n mailbox: ti-msgmgr: Fill non-message tx data fields with 0x0\n spi: bcm-qspi: return error if neither hif_mspi nor mspi is available\n Add MODULE_FIRMWARE() for FIRMWARE_TG357766.\n sctp: fix potential deadlock on \u0026net-\u003esctp.addr_wq_lock\n rtc: st-lpc: Release some resources in st_rtc_probe() in case of error\n pwm: sysfs: Do not apply state to already disabled PWMs\n pwm: imx-tpm: force \u0027real_period\u0027 to be zero in suspend\n mfd: stmpe: Only disable the regulators if they are enabled\n KVM: s390: vsie: fix the length of APCB bitmap\n mfd: stmfx: Fix error path in stmfx_chip_init\n serial: 8250_omap: Use force_suspend and resume for system suspend\n mfd: intel-lpss: Add missing check for platform_get_resource\n usb: dwc3: qcom: Release the correct resources in dwc3_qcom_remove()\n KVM: s390: fix KVM_S390_GET_CMMA_BITS for GFNs in memslot holes\n mfd: rt5033: Drop rt5033-battery sub-device\n usb: hide unused usbfs_notify_suspend/resume functions\n usb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe()\n extcon: Fix kernel doc of property capability fields to avoid warnings\n extcon: Fix kernel doc of property fields to avoid warnings\n usb: dwc3: qcom: Fix potential memory leak\n media: usb: siano: Fix warning due to null work_func_t function pointer\n media: videodev2.h: Fix struct v4l2_input tuner index comment\n media: usb: Check az6007_read() return value\n sh: j2: Use ioremap() to translate device tree address into kernel memory\n w1: fix loop in w1_fini()\n block: change all __u32 annotations to __be32 in affs_hardblocks.h\n block: fix signed int overflow in Amiga partition support\n usb: dwc3: gadget: Propagate core init errors to UDC during pullup\n USB: serial: option: add LARA-R6 01B PIDs\n hwrng: st - keep clock enabled while hwrng is registered\n hwrng: st - Fix W\u003d1 unused variable warning\n NFSv4.1: freeze the session table upon receiving NFS4ERR_BADSESSION\n ARC: define ASM_NL and __ALIGN(_STR) outside #ifdef __ASSEMBLY__ guard\n modpost: fix off by one in is_executable_section()\n crypto: marvell/cesa - Fix type mismatch warning\n modpost: fix section mismatch message for R_ARM_{PC24,CALL,JUMP24}\n modpost: fix section mismatch message for R_ARM_ABS32\n crypto: nx - fix build warnings when DEBUG_FS is not enabled\n hwrng: virtio - Fix race on data_avail and actual data\n hwrng: virtio - always add a pending request\n hwrng: virtio - don\u0027t waste entropy\n hwrng: virtio - don\u0027t wait on cleanup\n hwrng: virtio - add an internal buffer\n powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary\n pinctrl: at91-pio4: check return value of devm_kasprintf()\n perf dwarf-aux: Fix off-by-one in die_get_varname()\n pinctrl: cherryview: Return correct value if pin in push-pull mode\n PCI: Add pci_clear_master() stub for non-CONFIG_PCI\n PCI: ftpci100: Release the clock resources\n PCI: pciehp: Cancel bringup sequence if card is not present\n scsi: 3w-xxxx: Add error handling for initialization failure in tw_probe()\n PCI/ASPM: Disable ASPM on MFD function removal to avoid use-after-free\n scsi: qedf: Fix NULL dereference in error handling\n ASoC: imx-audmix: check return value of devm_kasprintf()\n clk: keystone: sci-clk: check return value of kasprintf()\n clk: cdce925: check return value of kasprintf()\n ALSA: ac97: Fix possible NULL dereference in snd_ac97_mixer\n clk: tegra: tegra124-emc: Fix potential memory leak\n drm/radeon: fix possible division-by-zero errors\n drm/amdkfd: Fix potential deallocation of previously deallocated memory.\n fbdev: omapfb: lcd_mipid: Fix an error handling path in mipid_spi_probe()\n arm64: dts: renesas: ulcb-kf: Remove flow control for SCIF1\n IB/hfi1: Fix sdma.h tx-\u003enum_descs off-by-one errors\n soc/fsl/qe: fix usb.c build errors\n ASoC: es8316: Do not set rate constraints for unsupported MCLKs\n ASoC: es8316: Increment max value for ALC Capture Target Volume control\n memory: brcmstb_dpfe: fix testing array offset after use\n ARM: ep93xx: fix missing-prototype warnings\n drm/panel: simple: fix active size for Ampire AM-480272H3TMQW-T01H\n arm64: dts: qcom: msm8916: correct camss unit address\n ARM: dts: gta04: Move model property out of pinctrl node\n RDMA/bnxt_re: Fix to remove an unnecessary log\n drm: sun4i_tcon: use devm_clk_get_enabled in `sun4i_tcon_init_clocks`\n Input: adxl34x - do not hardcode interrupt trigger type\n ARM: dts: BCM5301X: Drop \"clock-names\" from the SPI node\n Input: drv260x - sleep between polling GO bit\n radeon: avoid double free in ci_dpm_init()\n netlink: Add __sock_i_ino() for __netlink_diag_dump().\n ipvlan: Fix return value of ipvlan_queue_xmit()\n netfilter: nf_conntrack_sip: fix the ct_sip_parse_numerical_param() return value.\n netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one\n lib/ts_bm: reset initial match offset for every block of text\n net: nfc: Fix use-after-free caused by nfc_llcp_find_local\n nfc: llcp: simplify llcp_sock_connect() error paths\n gtp: Fix use-after-free in __gtp_encap_destroy().\n selftests: rtnetlink: remove netdevsim device after ipsec offload test\n netlink: do not hard code device address lenth in fdb dumps\n netlink: fix potential deadlock in netlink_set_err()\n wifi: ath9k: convert msecs to jiffies where needed\n wifi: cfg80211: rewrite merging of inherited elements\n wifi: iwlwifi: pull from TXQs with softirqs disabled\n rtnetlink: extend RTEXT_FILTER_SKIP_STATS to IFLA_VF_INFO\n wifi: ath9k: Fix possible stall on ath9k_txq_list_has_key()\n memstick r592: make memstick_debug_get_tpc_name() static\n kexec: fix a memory leak in crash_shrink_memory()\n watchdog/perf: more properly prevent false positives with turbo modes\n watchdog/perf: define dummy watchdog_update_hrtimer_threshold() on correct config\n wifi: rsi: Do not set MMC_PM_KEEP_POWER in shutdown\n wifi: ath9k: don\u0027t allow to overwrite ENDPOINT0 attributes\n wifi: ray_cs: Fix an error handling path in ray_probe()\n wifi: ray_cs: Drop useless status variable in parse_addr()\n wifi: ray_cs: Utilize strnlen() in parse_addr()\n wifi: wl3501_cs: Fix an error handling path in wl3501_probe()\n wl3501_cs: use eth_hw_addr_set()\n net: create netdev-\u003edev_addr assignment helpers\n wl3501_cs: Fix misspelling and provide missing documentation\n wl3501_cs: Remove unnecessary NULL check\n wl3501_cs: Fix a bunch of formatting issues related to function docs\n wifi: atmel: Fix an error handling path in atmel_probe()\n wifi: orinoco: Fix an error handling path in orinoco_cs_probe()\n wifi: orinoco: Fix an error handling path in spectrum_cs_probe()\n regulator: core: Streamline debugfs operations\n regulator: core: Fix more error checking for debugfs_create_dir()\n nfc: llcp: fix possible use of uninitialized variable in nfc_llcp_send_connect()\n nfc: constify several pointers to u8, char and sk_buff\n wifi: mwifiex: Fix the size of a memory allocation in mwifiex_ret_802_11_scan()\n spi: spi-geni-qcom: Correct CS_TOGGLE bit in SPI_TRANS_CFG\n samples/bpf: Fix buffer overflow in tcp_basertt\n wifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx\n wifi: ath9k: fix AR9003 mac hardware hang check register offset calculation\n ima: Fix build warnings\n pstore/ram: Add check for kstrdup\n evm: Complete description of evm_inode_setattr()\n ARM: 9303/1: kprobes: avoid missing-declaration warnings\n powercap: RAPL: Fix CONFIG_IOSF_MBI dependency\n PM: domains: fix integer overflow issues in genpd_parse_state()\n clocksource/drivers/cadence-ttc: Fix memory leak in ttc_timer_probe\n clocksource/drivers/cadence-ttc: Use ttc driver as platform driver\n tracing/timer: Add missing hrtimer modes to decode_hrtimer_mode().\n irqchip/jcore-aic: Fix missing allocation of IRQ descriptors\n irqchip/jcore-aic: Kill use of irq_create_strict_mappings()\n md/raid10: fix io loss while replacement replace rdev\n md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request\n md/raid10: fix wrong setting of max_corr_read_errors\n md/raid10: fix overflow of md/safe_mode_delay\n md/raid10: check slab-out-of-bounds in md_bitmap_get_counter\n x86/resctrl: Only show tasks\u0027 pid in current pid namespace\n x86/resctrl: Use is_closid_match() in more places\n bgmac: fix *initial* chip reset to support BCM5358\n drm/amdgpu: Validate VM ioctl flags.\n scripts/tags.sh: Resolve gtags empty index generation\n drm/i915: Initialise outparam for error return from wait_for_register\n HID: wacom: Use ktime_t rather than int when dealing with timestamps\n fbdev: imsttfb: Fix use after free bug in imsttfb_probe\n video: imsttfb: check for ioremap() failures\n x86/smp: Use dedicated cache-line for mwait_play_dead()\n gfs2: Don\u0027t deref jdesc in evict\n Linux 5.4.250\n x86/cpu/amd: Add a Zenbleed fix\n x86/cpu/amd: Move the errata checking functionality up\n x86/microcode/AMD: Load late on both threads too\n\n Conflicts:\n\tdrivers/usb/dwc3/gadget.c\n\nChange-Id: Ibd4bab8255496e4640f2eaf4eb7836209dd7cbfb\n" }, { "commit": "10a301c83a3da3525461e8fc3580cdd9cc5859a1", "tree": "60d14d644e0197ac2fc23805444f3c7e6dc8ca1b", "parents": [ "5e1c1bf53e5f3213d5c74466cefd7cd9bbffbb37" ], "author": { "name": "Mauricio Faria de Oliveira", "email": "mfo@canonical.com", "time": "Thu Sep 28 17:28:07 2023 -0300" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Tue Oct 10 21:46:44 2023 +0200" }, "message": "modpost: add missing else to the \"of\" check\n\n[ Upstream commit cbc3d00cf88fda95dbcafee3b38655b7a8f2650a ]\n\nWithout this \u0027else\u0027 statement, an \"usb\" name goes into two handlers:\nthe first/previous \u0027if\u0027 statement _AND_ the for-loop over \u0027devtable\u0027,\nbut the latter is useless as it has no \u0027usb\u0027 device_id entry anyway.\n\nTested with allmodconfig before/after patch; no changes to *.mod.c:\n\n git checkout v6.6-rc3\n make -j$(nproc) allmodconfig\n make -j$(nproc) olddefconfig\n\n make -j$(nproc)\n find . -name \u0027*.mod.c\u0027 | cpio -pd /tmp/before\n\n # apply patch\n\n make -j$(nproc)\n find . -name \u0027*.mod.c\u0027 | cpio -pd /tmp/after\n\n diff -r /tmp/before/ /tmp/after/\n # no difference\n\nFixes: acbef7b76629 (\"modpost: fix module autoloading for OF devices with generic compatible property\")\nSigned-off-by: Mauricio Faria de Oliveira \u003cmfo@canonical.com\u003e\nSigned-off-by: Masahiro Yamada \u003cmasahiroy@kernel.org\u003e\nSigned-off-by: Sasha Levin \u003csashal@kernel.org\u003e\n" }, { "commit": "2b44f56202b46350e7acaa95abe99d04342abfe8", "tree": "e8a3ada60370f55622b48a3e124851e250b6aef1", "parents": [ "ab08e05dca60065e9fafe84b260ea580ecd828f4", "a140610d8aff1a06d36f8e4e9e66079b561d043d" ], "author": { "name": "Greg Kroah-Hartman", "email": "gregkh@google.com", "time": "Sat Sep 30 11:33:27 2023 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@google.com", "time": "Sat Sep 30 11:33:27 2023 +0000" }, "message": "Merge 5.4.257 into android11-5.4-lts\n\nChanges in 5.4.257\n\terofs: ensure that the post-EOF tails are all zeroed\n\tARM: pxa: remove use of symbol_get()\n\tmmc: au1xmmc: force non-modular build and remove symbol_get usage\n\tnet: enetc: use EXPORT_SYMBOL_GPL for enetc_phc_index\n\trtc: ds1685: use EXPORT_SYMBOL_GPL for ds1685_rtc_poweroff\n\tmodules: only allow symbol_get of EXPORT_SYMBOL_GPL modules\n\tUSB: serial: option: add Quectel EM05G variant (0x030e)\n\tUSB: serial: option: add FOXCONN T99W368/T99W373 product\n\tHID: wacom: remove the battery when the EKR is off\n\tstaging: rtl8712: fix race condition\n\tBluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition\n\tserial: sc16is7xx: fix bug when first setting GPIO direction\n\tfirmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe\n\tfsi: master-ast-cf: Add MODULE_FIRMWARE macro\n\tnilfs2: fix general protection fault in nilfs_lookup_dirty_data_buffers()\n\tnilfs2: fix WARNING in mark_buffer_dirty due to discarded buffer reuse\n\tpinctrl: amd: Don\u0027t show `Invalid config param` errors\n\t9p: virtio: make sure \u0027offs\u0027 is initialized in zc_request\n\tASoC: da7219: Flush pending AAD IRQ when suspending\n\tASoC: da7219: Check for failure reading AAD IRQ events\n\tethernet: atheros: fix return value check in atl1c_tso_csum()\n\tvxlan: generalize vxlan_parse_gpe_hdr and remove unused args\n\tm68k: Fix invalid .section syntax\n\ts390/dasd: use correct number of retries for ERP requests\n\ts390/dasd: fix hanging device after request requeue\n\tfs/nls: make load_nls() take a const parameter\n\tASoc: codecs: ES8316: Fix DMIC config\n\tASoC: atmel: Fix the 8K sample parameter in I2SC master\n\tplatform/x86: intel: hid: Always call BTNL ACPI method\n\tplatform/x86: huawei-wmi: Silence ambient light sensor\n\tsecurity: keys: perform capable check only on privileged operations\n\tclk: fixed-mmio: make COMMON_CLK_FIXED_MMIO depend on HAS_IOMEM\n\tnet: usb: qmi_wwan: add Quectel EM05GV2\n\tidmaengine: make FSL_EDMA and INTEL_IDMA64 depends on HAS_IOMEM\n\tscsi: qedi: Fix potential deadlock on \u0026qedi_percpu-\u003ep_work_lock\n\tnetlabel: fix shift wrapping bug in netlbl_catmap_setlong()\n\tbnx2x: fix page fault following EEH recovery\n\tsctp: handle invalid error codes without calling BUG()\n\tcifs: add a warning when the in-flight count goes negative\n\tscsi: storvsc: Always set no_report_opcodes\n\tALSA: seq: oss: Fix racy open/close of MIDI devices\n\tplatform/mellanox: Fix mlxbf-tmfifo not handling all virtio CONSOLE notifications\n\tnet: Avoid address overwrite in kernel_connect\n\tpowerpc/32s: Fix assembler warning about r0\n\tudf: Check consistency of Space Bitmap Descriptor\n\tudf: Handle error when adding extent to a file\n\tRevert \"net: macsec: preserve ingress frame ordering\"\n\treiserfs: Check the return value from __getblk()\n\teventfd: Export eventfd_ctx_do_read()\n\teventfd: prevent underflow for eventfd semaphores\n\tnew helper: lookup_positive_unlocked()\n\tfs: Fix error checking for d_hash_and_lookup()\n\ttmpfs: verify {g,u}id mount options correctly\n\tOPP: Fix passing 0 to PTR_ERR in _opp_attach_genpd()\n\tx86/asm: Make more symbols local\n\tx86/boot: Annotate local functions\n\tx86/decompressor: Don\u0027t rely on upper 32 bits of GPRs being preserved\n\tperf/imx_ddr: don\u0027t enable counter0 if none of 4 counters are used\n\tcpufreq: powernow-k8: Use related_cpus instead of cpus in driver.exit()\n\tbpf: Clear the probe_addr for uprobe\n\ttcp: tcp_enter_quickack_mode() should be static\n\tregmap: rbtree: Use alloc_flags for memory allocations\n\tspi: tegra20-sflash: fix to check return value of platform_get_irq() in tegra_sflash_probe()\n\tcan: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow errors also in case of OOM\n\twifi: mwifiex: Fix OOB and integer underflow when rx packets\n\tmwifiex: switch from \u0027pci_\u0027 to \u0027dma_\u0027 API\n\twifi: mwifiex: fix error recovery in PCIE buffer descriptor management\n\tcrypto: stm32 - Properly handle pm_runtime_get failing\n\tBluetooth: nokia: fix value check in nokia_bluetooth_serdev_probe()\n\tcrypto: caam - fix unchecked return value error\n\thwrng: iproc-rng200 - use semicolons rather than commas to separate statements\n\thwrng: iproc-rng200 - Implement suspend and resume calls\n\tlwt: Fix return values of BPF xmit ops\n\tlwt: Check LWTUNNEL_XMIT_CONTINUE strictly\n\tfs: ocfs2: namei: check return value of ocfs2_add_entry()\n\twifi: mwifiex: fix memory leak in mwifiex_histogram_read()\n\twifi: mwifiex: Fix missed return in oob checks failed path\n\twifi: ath9k: fix races between ath9k_wmi_cmd and ath9k_wmi_ctrl_rx\n\twifi: ath9k: protect WMI command response buffer replacement with a lock\n\twifi: mwifiex: avoid possible NULL skb pointer dereference\n\twifi: ath9k: use IS_ERR() with debugfs_create_dir()\n\tnet: arcnet: Do not call kfree_skb() under local_irq_disable()\n\tmlxsw: i2c: Fix chunk size setting in output mailbox buffer\n\tmlxsw: i2c: Limit single transaction buffer size\n\tnet/sched: sch_hfsc: Ensure inner classes have fsc curve\n\tnetrom: Deny concurrent connect().\n\tdrm/bridge: tc358764: Fix debug print parameter order\n\tquota: avoid increasing DQST_LOOKUPS when iterating over dirty/inuse list\n\tquota: factor out dquot_write_dquot()\n\tquota: rename dquot_active() to inode_quota_active()\n\tquota: add new helper dquot_active()\n\tquota: fix dqput() to follow the guarantees dquot_srcu should provide\n\tdrm/amdgpu: avoid integer overflow warning in amdgpu_device_resize_fb_bar()\n\tARM: dts: BCM53573: Drop nonexistent \"default-off\" LED trigger\n\tARM: dts: BCM53573: Add cells sizes to PCIe node\n\tARM: dts: BCM53573: Use updated \"spi-gpio\" binding properties\n\tdrm/etnaviv: fix dumping of active MMU context\n\tARM: dts: s3c6410: move fixed clocks under root node in Mini6410\n\tARM: dts: s3c6410: align node SROM bus node name with dtschema in Mini6410\n\tARM: dts: s3c64xx: align pinctrl with dtschema\n\tARM: dts: samsung: s3c6410-mini6410: correct ethernet reg addresses (split)\n\tARM: dts: s5pv210: add RTC 32 KHz clock in SMDKV210\n\tARM: dts: s5pv210: use defines for IRQ flags in SMDKV210\n\tARM: dts: s5pv210: correct ethernet unit address in SMDKV210\n\tARM: dts: s5pv210: add dummy 5V regulator for backlight on SMDKv210\n\tARM: dts: samsung: s5pv210-smdkv210: correct ethernet reg addresses (split)\n\tdrm: adv7511: Fix low refresh rate register for ADV7533/5\n\tARM: dts: BCM53573: Fix Ethernet info for Luxul devices\n\tarm64: dts: qcom: sdm845: Add missing RPMh power domain to GCC\n\tdrm/amdgpu: Update min() to min_t() in \u0027amdgpu_info_ioctl\u0027\n\tmd/bitmap: don\u0027t set max_write_behind if there is no write mostly device\n\tmd/md-bitmap: hold \u0027reconfig_mutex\u0027 in backlog_store()\n\tdrm/tegra: Remove superfluous error messages around platform_get_irq()\n\tdrm/tegra: dpaux: Fix incorrect return value of platform_get_irq\n\tof: unittest: fix null pointer dereferencing in of_unittest_find_node_by_name()\n\tdrm/armada: Fix off-by-one error in armada_overlay_get_property()\n\tdrm/panel: simple: Add missing connector type and pixel format for AUO T215HVN01\n\tima: Remove deprecated IMA_TRUSTED_KEYRING Kconfig\n\tdrm/msm/mdp5: Don\u0027t leak some plane state\n\tsmackfs: Prevent underflow in smk_set_cipso()\n\taudit: fix possible soft lockup in __audit_inode_child()\n\tdrm/mediatek: Fix potential memory leak if vmap() fail\n\tof: unittest: Fix overlay type in apply/revert check\n\tALSA: ac97: Fix possible error value of *rac97\n\tipmi:ssif: Add check for kstrdup\n\tipmi:ssif: Fix a memory leak when scanning for an adapter\n\tdrivers: clk: keystone: Fix parameter judgment in _of_pll_clk_init()\n\tclk: sunxi-ng: Modify mismatched function name\n\tPCI: Mark NVIDIA T4 GPUs to avoid bus reset\n\tPCI: pciehp: Use RMW accessors for changing LNKCTL\n\tPCI/ASPM: Use RMW accessors for changing LNKCTL\n\tclk: imx: composite-8m: fix clock pauses when set_rate would be a no-op\n\tpowerpc/fadump: reset dump area size if fadump memory reserve fails\n\tPCI: Add #defines for Enter Compliance, Transmit Margin\n\tdrm/amdgpu: Correct Transmit Margin masks\n\tdrm/amdgpu: Replace numbers with PCI_EXP_LNKCTL2 definitions\n\tdrm/amdgpu: Prefer pcie_capability_read_word()\n\tdrm/amdgpu: Use RMW accessors for changing LNKCTL\n\tdrm/radeon: Correct Transmit Margin masks\n\tdrm/radeon: Replace numbers with PCI_EXP_LNKCTL2 definitions\n\tdrm/radeon: Prefer pcie_capability_read_word()\n\tdrm/radeon: Use RMW accessors for changing LNKCTL\n\twifi: ath10k: Use RMW accessors for changing LNKCTL\n\tnfs/blocklayout: Use the passed in gfp flags\n\tpowerpc/iommu: Fix notifiers being shared by PCI and VIO buses\n\tjfs: validate max amount of blocks before allocation.\n\tfs: lockd: avoid possible wrong NULL parameter\n\tNFSD: da_addr_body field missing in some GETDEVICEINFO replies\n\tNFS: Guard against READDIR loop when entry names exceed MAXNAMELEN\n\tmedia: v4l2-fwnode: fix v4l2_fwnode_parse_link handling\n\tmedia: v4l2-fwnode: simplify v4l2_fwnode_parse_link\n\tmedia: v4l2-core: Fix a potential resource leak in v4l2_fwnode_parse_link()\n\tdrivers: usb: smsusb: fix error handling code in smsusb_init_device\n\tmedia: dib7000p: Fix potential division by zero\n\tmedia: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer()\n\tmedia: cx24120: Add retval check for cx24120_message_send()\n\tmedia: mediatek: vcodec: Return NULL if no vdec_fb is found\n\tusb: phy: mxs: fix getting wrong state with mxs_phy_is_otg_host()\n\tscsi: iscsi: Add strlen() check in iscsi_if_set{_host}_param()\n\tscsi: be2iscsi: Add length check when parsing nlattrs\n\tscsi: qla4xxx: Add length check when parsing nlattrs\n\tserial: sprd: getting port index via serial aliases only\n\tserial: sprd: remove redundant sprd_port cleanup\n\tserial: sprd: Assign sprd_port after initialized to avoid wrong access\n\tserial: sprd: Fix DMA buffer leak issue\n\tx86/APM: drop the duplicate APM_MINOR_DEV macro\n\tscsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly\n\tscsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read() directly\n\tscsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly\n\tcoresight: tmc: Explicit type conversions to prevent integer overflow\n\tdma-buf/sync_file: Fix docs syntax\n\tdriver core: test_async: fix an error code\n\tIB/uverbs: Fix an potential error pointer dereference\n\tiommu/vt-d: Fix to flush cache of PASID directory table\n\tmedia: go7007: Remove redundant if statement\n\tUSB: gadget: f_mass_storage: Fix unused variable warning\n\tmedia: i2c: ov5640: Configure HVP lines in s_power callback\n\tmedia: ov5640: Enable MIPI interface in ov5640_set_power_mipi()\n\tmedia: i2c: ov2680: Set V4L2_CTRL_FLAG_MODIFY_LAYOUT on flips\n\tmedia: ov2680: Remove auto-gain and auto-exposure controls\n\tmedia: ov2680: Fix ov2680_bayer_order()\n\tmedia: ov2680: Fix vflip / hflip set functions\n\tmedia: ov2680: Fix regulators being left enabled on ov2680_power_on() errors\n\tscsi: core: Use 32-bit hostnum in scsi_host_lookup()\n\tscsi: fcoe: Fix potential deadlock on \u0026fip-\u003ectlr_lock\n\tserial: tegra: handle clk prepare error in tegra_uart_hw_init()\n\tamba: bus: fix refcount leak\n\tRevert \"IB/isert: Fix incorrect release of isert connection\"\n\tRDMA/siw: Balance the reference of cep-\u003ekref in the error path\n\tRDMA/siw: Correct wrong debug message\n\tHID: logitech-dj: Fix error handling in logi_dj_recv_switch_to_dj_mode()\n\tHID: multitouch: Correct devm device reference for hidinput input_dev name\n\tx86/speculation: Mark all Skylake CPUs as vulnerable to GDS\n\ttracing: Fix race issue between cpu buffer write and swap\n\tphy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328\n\tphy/rockchip: inno-hdmi: round fractal pixclock in rk3328 recalc_rate\n\tphy/rockchip: inno-hdmi: do not power on rk3328 post pll on reg write\n\trpmsg: glink: Add check for kstrdup\n\tmtd: rawnand: fsmc: handle clk prepare error in fsmc_nand_resume()\n\tum: Fix hostaudio build errors\n\tdmaengine: ste_dma40: Add missing IRQ check in d40_probe\n\tcpufreq: Fix the race condition while updating the transition_task of policy\n\tvirtio_ring: fix avail_wrap_counter in virtqueue_add_packed\n\tigmp: limit igmpv3_newpack() packet size to IP_MAX_MTU\n\tnetfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c\n\tnetfilter: xt_u32: validate user space input\n\tnetfilter: xt_sctp: validate the flag_info count\n\tskbuff: skb_segment, Call zero copy functions before using skbuff frags\n\tigb: set max size RX buffer when store bad packet is enabled\n\tPM / devfreq: Fix leak in devfreq_dev_release()\n\tALSA: pcm: Fix missing fixup call in compat hw_refine ioctl\n\tipmi_si: fix a memleak in try_smi_init()\n\tARM: OMAP2+: Fix -Warray-bounds warning in _pwrdm_state_switch()\n\tbacklight/gpio_backlight: Compare against struct fb_info.device\n\tbacklight/bd6107: Compare against struct fb_info.device\n\tbacklight/lv5207lp: Compare against struct fb_info.device\n\txtensa: PMU: fix base address for the newer hardware\n\tmedia: dvb: symbol fixup for dvb_attach()\n\tntb: Drop packets when qp link is down\n\tntb: Clean up tx tail index on link down\n\tntb: Fix calculation ntb_transport_tx_free_entry()\n\tRevert \"PCI: Mark NVIDIA T4 GPUs to avoid bus reset\"\n\tprocfs: block chmod on /proc/thread-self/comm\n\tparisc: Fix /proc/cpuinfo output for lscpu\n\tdlm: fix plock lookup when using multiple lockspaces\n\tdccp: Fix out of bounds access in DCCP error handler\n\tX.509: if signature is unsupported skip validation\n\tnet: handle ARPHRD_PPP in dev_is_mac_header_xmit()\n\tfsverity: skip PKCS#7 parser when keyring is empty\n\tpstore/ram: Check start of empty przs during init\n\ts390/ipl: add missing secure/has_secure file to ipl type \u0027unknown\u0027\n\tcrypto: stm32 - fix loop iterating through scatterlist for DMA\n\tcpufreq: brcmstb-avs-cpufreq: Fix -Warray-bounds bug\n\tsc16is7xx: Set iobase to device index\n\tserial: sc16is7xx: fix broken port 0 uart init\n\tusb: typec: tcpci: clear the fault status bit\n\tudf: initialize newblock to 0\n\tdrm: fix double free for gbo in drm_gem_vram_init and drm_gem_vram_create\n\tnet/ipv6: SKB symmetric hash should incorporate transport ports\n\tscsi: qla2xxx: fix inconsistent TMF timeout\n\tscsi: qla2xxx: Fix erroneous link up failure\n\tscsi: qla2xxx: Turn off noisy message log\n\tscsi: qla2xxx: Remove unsupported ql2xenabledif option\n\tfbdev/ep93xx-fb: Do not assign to struct fb_info.dev\n\tdrm/ast: Fix DRAM init on AST2200\n\tlib/test_meminit: allocate pages up to order MAX_ORDER\n\tparisc: led: Fix LAN receive and transmit LEDs\n\tparisc: led: Reduce CPU overhead for disk \u0026 lan LED computation\n\tclk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock\n\tsoc: qcom: qmi_encdec: Restrict string length in decode\n\tNFSv4/pnfs: minor fix for cleanup path in nfs4_get_device_info\n\tkconfig: fix possible buffer overflow\n\tperf annotate bpf: Don\u0027t enclose non-debug code with an assert()\n\tx86/virt: Drop unnecessary check on extended CPUID level in cpu_has_svm()\n\tperf top: Don\u0027t pass an ERR_PTR() directly to perf_session__delete()\n\twatchdog: intel-mid_wdt: add MODULE_ALIAS() to allow auto-load\n\tpwm: lpc32xx: Remove handling of PWM channels\n\tsctp: annotate data-races around sk-\u003esk_wmem_queued\n\tipv4: annotate data-races around fi-\u003efib_dead\n\tnet: read sk-\u003esk_family once in sk_mc_loop()\n\tigb: disable virtualization features on 82580\n\tveth: Fixing transmit return status for dropped packets\n\tnet: ipv6/addrconf: avoid integer underflow in ipv6_create_tempaddr\n\taf_unix: Fix data-races around user-\u003eunix_inflight.\n\taf_unix: Fix data-race around unix_tot_inflight.\n\taf_unix: Fix data-races around sk-\u003esk_shutdown.\n\taf_unix: Fix data race around sk-\u003esk_err.\n\tnet: sched: sch_qfq: Fix UAF in qfq_dequeue()\n\tkcm: Destroy mutex in kcm_exit_net()\n\tigc: Change IGC_MIN to allow set rx/tx value between 64 and 80\n\tigbvf: Change IGBVF_MIN to allow set rx/tx value between 64 and 80\n\tigb: Change IGB_MIN to allow set rx/tx value between 64 and 80\n\ts390/zcrypt: don\u0027t leak memory if dev_set_name() fails\n\tidr: fix param name in idr_alloc_cyclic() doc\n\tip_tunnels: use DEV_STATS_INC()\n\tnetfilter: nfnetlink_osf: avoid OOB read\n\tnet: hns3: fix the port information display when sfp is absent\n\tsh: boards: Fix CEU buffer size passed to dma_declare_coherent_memory()\n\tata: sata_gemini: Add missing MODULE_DESCRIPTION\n\tata: pata_ftide010: Add missing MODULE_DESCRIPTION\n\tfuse: nlookup missing decrement in fuse_direntplus_link\n\tbtrfs: don\u0027t start transaction when joining with TRANS_JOIN_NOSTART\n\tbtrfs: use the correct superblock to compare fsid in btrfs_validate_super\n\tmtd: rawnand: brcmnand: Fix crash during the panic_write\n\tmtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write\n\tmtd: rawnand: brcmnand: Fix potential false time out warning\n\tperf hists browser: Fix hierarchy mode header\n\tperf tools: Handle old data in PERF_RECORD_ATTR\n\tusb: typec: tcpm: Refactor tcpm_handle_vdm_request payload handling\n\tusb: typec: tcpm: Refactor tcpm_handle_vdm_request\n\tusb: typec: bus: verify partner exists in typec_altmode_attention\n\tARM: dts: BCM5301X: Extend RAM to full 256MB for Linksys EA6500 V2\n\tclk: imx8mm: Move 1443X/1416X PLL clock structure to common place\n\tnet: ipv4: fix one memleak in __inet_del_ifa()\n\tnet: ethernet: mvpp2_main: fix possible OOB write in mvpp2_ethtool_get_rxnfc()\n\tnet: ethernet: mtk_eth_soc: fix possible NULL pointer dereference in mtk_hwlro_get_fdir_all()\n\tr8152: check budget for r8152_poll()\n\tkcm: Fix memory leak in error path of kcm_sendmsg()\n\tplatform/mellanox: mlxbf-tmfifo: Drop the Rx packet if no more descriptors\n\tmlxbf-tmfifo: sparse tags for config access\n\tplatform/mellanox: mlxbf-tmfifo: Drop jumbo frames\n\tnet/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()\n\tixgbe: fix timestamp configuration code\n\tkcm: Fix error handling for SOCK_DGRAM in kcm_sendmsg().\n\tdrm/amd/display: Fix a bug when searching for insert_above_mpcc\n\tparisc: Drop loops_per_jiffy from per_cpu struct\n\tautofs: fix memory leak of waitqueues in autofs_catatonic_mode\n\tbtrfs: output extra debug info if we failed to find an inline backref\n\tlocks: fix KASAN: use-after-free in trace_event_raw_event_filelock_lock\n\tACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer\n\tkernel/fork: beware of __put_task_struct() calling context\n\tACPI: video: Add backlight\u003dnative DMI quirk for Lenovo Ideapad Z470\n\tperf/smmuv3: Enable HiSilicon Erratum 162001900 quirk for HIP08/09\n\thw_breakpoint: fix single-stepping when using bpf_overflow_handler\n\tdevlink: remove reload failed checks in params get/set callbacks\n\twifi: ath9k: fix printk specifier\n\twifi: mwifiex: fix fortify warning\n\tcrypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui()\n\ttpm_tis: Resend command to recover from data transfer errors\n\tmmc: sdhci-esdhc-imx: improve ESDHC_FLAG_ERR010450\n\talx: fix OOB-read compiler warning\n\twifi: mac80211_hwsim: drop short frames\n\tdrm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()\n\tbus: ti-sysc: Configure uart quirks for k3 SoC\n\tmd: raid1: fix potential OOB in raid1_remove_disk()\n\text2: fix datatype of block number in ext2_xattr_set2()\n\tfs/jfs: prevent double-free in dbUnmount() after failed jfs_remount()\n\tjfs: fix invalid free of JFS_IP(ipimap)-\u003ei_imap in diUnmount\n\tpowerpc/pseries: fix possible memory leak in ibmebus_bus_init()\n\tmedia: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer\n\tmedia: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer()\n\tmedia: af9005: Fix null-ptr-deref in af9005_i2c_xfer\n\tmedia: anysee: fix null-ptr-deref in anysee_master_xfer\n\tmedia: az6007: Fix null-ptr-deref in az6007_i2c_xfer()\n\tmedia: tuners: qt1010: replace BUG_ON with a regular error\n\tmedia: pci: cx23885: replace BUG with error return\n\tusb: gadget: fsl_qe_udc: validate endpoint index for ch9 udc\n\tscsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show()\n\tserial: cpm_uart: Avoid suspicious locking\n\tmedia: pci: ipu3-cio2: Initialise timing struct to avoid a compiler warning\n\tkobject: Add sanity check for kset-\u003ekobj.ktype in kset_register()\n\ttools features: Add feature test to check if libbfd has buildid support\n\tperf jevents: Make build dependency on test JSONs\n\tperf tools: Add an option to build without libbfd\n\tbtrfs: move btrfs_pinned_by_swapfile prototype into volumes.h\n\tbtrfs: add a helper to read the superblock metadata_uuid\n\tbtrfs: compare the correct fsid/metadata_uuid in btrfs_validate_super\n\tselftests: tracing: Fix to unmount tracefs for recovering environment\n\tmd/raid1: fix error: ISO C90 forbids mixed declarations\n\tattr: block mode changes of symlinks\n\tbtrfs: fix lockdep splat and potential deadlock after failure running delayed items\n\ttracing: Have current_trace inc the trace array ref count\n\ttracing: Have option files inc the trace array ref count\n\tnfsd: fix change_info in NFSv4 RENAME replies\n\ttracefs: Add missing lockdown check to tracefs_create_dir()\n\ti2c: aspeed: Reset the i2c controller when timeout occurs\n\tscsi: megaraid_sas: Fix deadlock on firmware crashdump\n\text4: fix rec_len verify error\n\tmtd: rawnand: brcmnand: Fix ECC level field setting for v7.2 controller\n\tdrm/amdgpu: fix amdgpu_cs_p1_user_fence\n\tnet/sched: Retire rsvp classifier\n\tLinux 5.4.257\n\nChange-Id: I99f6978fc0d802b5803005fe903a90aed315d88d\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@google.com\u003e\n" }, { "commit": "7a335f870801e684c47d7a3a9fe50488b5b13eaa", "tree": "bfa87fe984f71ed1912158d24a2ff8875cc2f424", "parents": [ "58114830df4bc6e930af7907fe12572dcb28ebda", "d57e792d0bd90ffe14380ee16bb98914e3d1f15c" ], "author": { "name": "kamasali Satyanarayan", "email": "quic_kamasali@quicinc.com", "time": "Mon Sep 04 16:56:14 2023 +0530" }, "committer": { "name": "kamasali Satyanarayan", "email": "quic_kamasali@quicinc.com", "time": "Thu Sep 28 16:45:28 2023 +0530" }, "message": "Merge android11-5.4.249+ (d57e792) into msm-5.4\n\n* remotes/origin/tmp-d57e792:\n UPSTREAM: media: usb: siano: Fix warning due to null work_func_t function pointer\n UPSTREAM: Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb\n ANDROID: ABI: Update allowed list for QCOM\n UPSTREAM: net: tap_open(): set sk_uid from current_fsuid()\n UPSTREAM: net: tun_chr_open(): set sk_uid from current_fsuid()\n UPSTREAM: net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free\n UPSTREAM: net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free\n UPSTREAM: net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free\n UPSTREAM: net/sched: cls_fw: Fix improper refcount update leads to use-after-free\n UPSTREAM: media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()\n ANDROID: ABI: Update allowed list for QCOM\n UPSTREAM: usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition\n UPSTREAM: x86/mm: Avoid using set_pgd() outside of real PGD pages\n UPSTREAM: net/sched: flower: fix possible OOB write in fl_set_geneve_opt()\n UPSTREAM: ipvlan:Fix out-of-bounds caused by unclear skb-\u003ecb\n Linux 5.4.249\n xfs: verify buffer contents when we skip log replay\n mm: make wait_on_page_writeback() wait for multiple pending writebacks\n mm: fix VM_BUG_ON(PageTail) and BUG_ON(PageWriteback)\n i2c: imx-lpi2c: fix type char overflow issue when calculating the clock cycle\n x86/apic: Fix kernel panic when booting with intremap\u003doff and x2apic_phys\n drm/radeon: fix race condition UAF in radeon_gem_set_domain_ioctl\n drm/exynos: fix race condition UAF in exynos_g2d_exec_ioctl\n drm/exynos: vidi: fix a wrong error return\n ARM: dts: Fix erroneous ADS touchscreen polarities\n ASoC: nau8824: Add quirk to active-high jack-detect\n s390/cio: unregister device when the only path is gone\n usb: gadget: udc: fix NULL dereference in remove()\n nfcsim.c: Fix error checking for debugfs_create_dir\n media: cec: core: don\u0027t set last_initiator if tx in progress\n arm64: Add missing Set/Way CMO encodings\n HID: wacom: Add error check to wacom_parse_and_register()\n scsi: target: iscsi: Prevent login threads from racing between each other\n sch_netem: acquire qdisc lock in netem_change()\n Revert \"net: phy: dp83867: perform soft reset and retain established link\"\n netfilter: nfnetlink_osf: fix module autoload\n netfilter: nf_tables: disallow element updates of bound anonymous sets\n be2net: Extend xmit workaround to BE3 chip\n net: dsa: mt7530: fix trapping frames on non-MT7621 SoC MT7530 switch\n ipvs: align inner_mac_header for encapsulation\n mmc: usdhi60rol0: fix deferred probing\n mmc: sh_mmcif: fix deferred probing\n mmc: sdhci-acpi: fix deferred probing\n mmc: omap_hsmmc: fix deferred probing\n mmc: omap: fix deferred probing\n mmc: mvsdio: fix deferred probing\n mmc: mvsdio: convert to devm_platform_ioremap_resource\n mmc: mtk-sd: fix deferred probing\n net: qca_spi: Avoid high load if QCA7000 is not available\n xfrm: Linearize the skb after offloading if needed.\n ieee802154: hwsim: Fix possible memory leaks\n rcu: Upgrade rcu_swap_protected() to rcu_replace_pointer()\n x86/mm: Avoid using set_pgd() outside of real PGD pages\n cifs: Fix potential deadlock when updating vol in cifs_reconnect()\n cifs: Merge is_path_valid() into get_normalized_path()\n cifs: Introduce helpers for finding TCP connection\n cifs: Get rid of kstrdup_const()\u0027d paths\n cifs: Clean up DFS referral cache\n nilfs2: prevent general protection fault in nilfs_clear_dirty_page()\n writeback: fix dereferencing NULL mapping-\u003ehost on writeback_page_template\n ip_tunnels: allow VXLAN/GENEVE to inherit TOS/TTL from VLAN\n mmc: meson-gx: remove redundant mmc_request_done() call from irq context\n cgroup: Do not corrupt task iteration when rebinding subsystem\n PCI: hv: Fix a race condition bug in hv_pci_query_relations()\n Drivers: hv: vmbus: Fix vmbus_wait_for_unload() to scan present CPUs\n nilfs2: fix buffer corruption due to concurrent device reads\n media: dvb-core: Fix use-after-free due to race at dvb_register_device()\n media: dvbdev: fix error logic at dvb_register_device()\n media: dvbdev: Fix memleak in dvb_register_device\n tick/common: Align tick period during sched_timer setup\n x86/purgatory: remove PGO flags\n tracing: Add tracing_reset_all_online_cpus_unlocked() function\n epoll: ep_autoremove_wake_function should use list_del_init_careful\n list: add \"list_del_init_careful()\" to go with \"list_empty_careful()\"\n mm: rewrite wait_on_page_bit_common() logic\n nilfs2: reject devices with insufficient block count\n UPSTREAM: net/sched: cls_u32: Fix reference counter leak leading to overflow\n UPSTREAM: memstick: r592: Fix UAF bug in r592_remove due to race condition\n BACKPORT: btrfs: unset reloc control if transaction commit fails in prepare_to_relocate()\n Revert \"neighbour: Replace zero-length array with flexible-array member\"\n Revert \"neighbour: fix unaligned access to pneigh_entry\"\n Revert \"tcp: deny tcp_disconnect() when threads are waiting\"\n Linux 5.4.248\n mmc: block: ensure error propagation for non-blk\n drm/nouveau/kms: Fix NULL pointer dereference in nouveau_connector_detect_depth\n neighbour: delete neigh_lookup_nodev as not used\n net: Remove unused inline function dst_hold_and_use()\n neighbour: Remove unused inline function neigh_key_eq16()\n afs: Fix vlserver probe RTT handling\n selftests/ptp: Fix timestamp printf format for PTP_SYS_OFFSET\n net: tipc: resize nlattr array to correct size\n net: lapbether: only support ethernet devices\n net/sched: cls_api: Fix lockup on flushing explicitly created chain\n drm/nouveau: add nv_encoder pointer check for NULL\n drm/nouveau/kms: Don\u0027t change EDID when it hasn\u0027t actually changed\n drm/nouveau/dp: check for NULL nv_connector-\u003enative_mode\n igb: fix nvm.ops.read() error handling\n sctp: fix an error code in sctp_sf_eat_auth()\n ipvlan: fix bound dev checking for IPv6 l3s mode\n IB/isert: Fix incorrect release of isert connection\n IB/isert: Fix possible list corruption in CMA handler\n IB/isert: Fix dead lock in ib_isert\n IB/uverbs: Fix to consider event queue closing also upon non-blocking mode\n iavf: remove mask from iavf_irq_enable_queues()\n RDMA/rxe: Fix the use-before-initialization error of resp_pkts\n RDMA/rxe: Removed unused name from rxe_task struct\n RDMA/rxe: Remove the unused variable obj\n net/sched: cls_u32: Fix reference counter leak leading to overflow\n ping6: Fix send to link-local addresses with VRF.\n netfilter: nfnetlink: skip error delivery on batch in case of ENOMEM\n spi: fsl-dspi: avoid SCK glitches with continuous transfers\n spi: spi-fsl-dspi: Remove unused chip-\u003evoid_write_data\n usb: dwc3: gadget: Reset num TRBs before giving back the request\n serial: lantiq: add missing interrupt ack\n USB: serial: option: add Quectel EM061KGL series\n Remove DECnet support from kernel\n ALSA: hda/realtek: Add a quirk for Compaq N14JP6\n net: usb: qmi_wwan: add support for Compal RXM-G1\n RDMA/uverbs: Restrict usage of privileged QKEYs\n nouveau: fix client work fence deletion race\n powerpc/purgatory: remove PGO flags\n kexec: support purgatories with .text.hot sections\n nilfs2: fix possible out-of-bounds segment allocation in resize ioctl\n nilfs2: fix incomplete buffer cleanup in nilfs_btnode_abort_change_key()\n nios2: dts: Fix tse_mac \"max-frame-size\" property\n ocfs2: check new file size on fallocate call\n ocfs2: fix use-after-free when unmounting read-only filesystem\n drm:amd:amdgpu: Fix missing buffer object unlock in failure path\n xen/blkfront: Only check REQ_FUA for writes\n mips: Move initrd_start check after initrd address sanitisation.\n MIPS: Alchemy: fix dbdma2\n parisc: Flush gatt writes and adjust gatt mask in parisc_agp_mask_memory()\n parisc: Improve cache flushing for PCXL in arch_sync_dma_for_cpu()\n btrfs: handle memory allocation failure in btrfs_csum_one_bio\n power: supply: Fix logic checking if system is running from battery\n irqchip/meson-gpio: Mark OF related data as maybe unused\n regulator: Fix error checking for debugfs_create_dir\n platform/x86: asus-wmi: Ignore WMI events with codes 0x7B, 0xC0\n power: supply: Ratelimit no data debug output\n ARM: dts: vexpress: add missing cache properties\n power: supply: bq27xxx: Use mod_delayed_work() instead of cancel() + schedule()\n power: supply: sc27xx: Fix external_power_changed race\n power: supply: ab8500: Fix external_power_changed race\n s390/dasd: Use correct lock while counting channel queue length\n dasd: refactor dasd_ioctl_information\n KEYS: asymmetric: Copy sig and digest in public_key_verify_signature()\n test_firmware: fix a memory leak with reqs buffer\n ANDROID: HID: Only utilise UHID provided exports if UHID is enabled\n Revert \"firmware: arm_sdei: Fix sleep from invalid context BUG\"\n UPSTREAM: bluetooth: Perform careful capability checks in hci_sock_ioctl()\n Revert \"PM: domains: Fix up terminology with parent/child\"\n Revert \"PM: domains: Restore comment indentation for generic_pm_domain.child_links\"\n Revert \"scripts/gdb: bail early if there are no generic PD\"\n Revert \"uapi/linux/const.h: prefer ISO-friendly __typeof__\"\n Revert \"netfilter: nf_tables: don\u0027t write table validation state without mutex\"\n Linux 5.4.247\n Revert \"staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE\"\n mtd: spinand: macronix: Add support for MX35LFxGE4AD\n btrfs: unset reloc control if transaction commit fails in prepare_to_relocate()\n btrfs: check return value of btrfs_commit_transaction in relocation\n rbd: get snapshot context after exclusive lock is ensured to be held\n drm/atomic: Don\u0027t pollute crtc_state-\u003emode_blob with error pointers\n cifs: handle empty list of targets in cifs_reconnect()\n cifs: get rid of unused parameter in reconn_setup_dfs_targets()\n ext4: only check dquot_initialize_needed() when debugging\n eeprom: at24: also select REGMAP\n i2c: sprd: Delete i2c adapter in .remove\u0027s error path\n bonding (gcc13): synchronize bond_{a,t}lb_xmit() types\n usb: usbfs: Use consistent mmap functions\n usb: usbfs: Enforce page requirements for mmap\n pinctrl: meson-axg: add missing GPIOA_18 gpio group\n rbd: move RBD_OBJ_FLAG_COPYUP_ENABLED flag setting\n Bluetooth: Fix use-after-free in hci_remove_ltk/hci_remove_irk\n ceph: fix use-after-free bug for inodes when flushing capsnaps\n can: j1939: avoid possible use-after-free when j1939_can_rx_register fails\n can: j1939: change j1939_netdev_lock type to mutex\n can: j1939: j1939_sk_send_loop_abort(): improved error queue handling in J1939 Socket\n drm/amdgpu: fix xclk freq on CHIP_STONEY\n ALSA: hda/realtek: Add Lenovo P3 Tower platform\n ALSA: hda/realtek: Add a quirk for HP Slim Desktop S01\n Input: psmouse - fix OOB access in Elantech protocol\n Input: xpad - delete a Razer DeathAdder mouse VID/PID entry\n batman-adv: Broken sync while rescheduling delayed work\n bnxt_en: Query default VLAN before VNIC setup on a VF\n lib: cpu_rmap: Fix potential use-after-free in irq_cpu_rmap_release()\n net: sched: fix possible refcount leak in tc_chain_tmplt_add()\n net: sched: move rtm_tca_policy declaration to include file\n rfs: annotate lockless accesses to RFS sock flow table\n rfs: annotate lockless accesses to sk-\u003esk_rxhash\n netfilter: ipset: Add schedule point in call_ad().\n netfilter: conntrack: fix NULL pointer dereference in nf_confirm_cthelper\n Bluetooth: L2CAP: Add missing checks for invalid DCID\n Bluetooth: Fix l2cap_disconnect_req deadlock\n net: dsa: lan9303: allow vid !\u003d 0 in port_fdb_{add|del} methods\n neighbour: fix unaligned access to pneigh_entry\n neighbour: Replace zero-length array with flexible-array member\n spi: qup: Request DMA before enabling clocks\n i40e: fix build warnings in i40e_alloc.h\n i40iw: fix build warning in i40iw_manage_apbvt()\n block/blk-iocost (gcc13): keep large values in a new enum\n blk-iocost: avoid 64-bit division in ioc_timer_fn\n Linux 5.4.246\n drm/edid: fix objtool warning in drm_cvt_modes()\n wifi: rtlwifi: 8192de: correct checking of IQK reload\n drm/edid: Fix uninitialized variable in drm_cvt_modes()\n RDMA/bnxt_re: Remove the qp from list only if the qp destroy succeeds\n RDMA/bnxt_re: Remove set but not used variable \u0027dev_attr\u0027\n scsi: dpt_i2o: Do not process completions with invalid addresses\n scsi: dpt_i2o: Remove broken pass-through ioctl (I2OUSERCMD)\n regmap: Account for register length when chunking\n test_firmware: fix the memory leak of the allocated firmware buffer\n fbcon: Fix null-ptr-deref in soft_cursor\n ext4: add lockdep annotations for i_data_sem for ea_inode\u0027s\n ext4: disallow ea_inodes with extended attributes\n ext4: set lockdep subclass for the ea_inode in ext4_xattr_inode_cache_find()\n ext4: add EA_INODE checking to ext4_iget()\n tracing/probe: trace_probe_primary_from_call(): checked list_first_entry\n selinux: don\u0027t use make\u0027s grouped targets feature yet\n tty: serial: fsl_lpuart: use UARTCTRL_TXINV to send break instead of UARTCTRL_SBK\n mmc: vub300: fix invalid response handling\n wifi: rtlwifi: remove always-true condition pointed out by GCC 12\n lib/dynamic_debug.c: use address-of operator on section symbols\n treewide: Remove uninitialized_var() usage\n kernel/extable.c: use address-of operator on section symbols\n eth: sun: cassini: remove dead code\n gcc-12: disable \u0027-Wdangling-pointer\u0027 warning for now\n ACPI: thermal: drop an always true check\n x86/boot: Wrap literal addresses in absolute_pointer()\n flow_dissector: work around stack frame size warning\n ata: libata-scsi: Use correct device no in ata_find_dev()\n scsi: stex: Fix gcc 13 warnings\n misc: fastrpc: reject new invocations during device removal\n misc: fastrpc: return -EPIPE to invocations on device removal\n usb: gadget: f_fs: Add unbind event before functionfs_unbind\n net: usb: qmi_wwan: Set DTR quirk for BroadMobi BM818\n iio: dac: build ad5758 driver when AD5758 is selected\n iio: dac: mcp4725: Fix i2c_master_send() return value handling\n iio: light: vcnl4035: fixed chip ID check\n HID: wacom: avoid integer overflow in wacom_intuos_inout()\n HID: google: add jewel USB id\n iio: adc: mxs-lradc: fix the order of two cleanup operations\n mailbox: mailbox-test: fix a locking issue in mbox_test_message_write()\n atm: hide unused procfs functions\n ALSA: oss: avoid missing-prototype warnings\n netfilter: conntrack: define variables exp_nat_nla_policy and any_addr with CONFIG_NF_NAT\n wifi: b43: fix incorrect __packed annotation\n scsi: core: Decrease scsi_device\u0027s iorequest_cnt if dispatch failed\n arm64/mm: mark private VM_FAULT_X defines as vm_fault_t\n ARM: dts: stm32: add pin map for CAN controller on stm32f7\n wifi: rtl8xxxu: fix authentication timeout due to incorrect RCR value\n media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221\n media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()\n media: dvb-core: Fix use-after-free due on race condition at dvb_net\n media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr from ID table\n media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()\n media: dvb_ca_en50221: fix a size write bug\n media: netup_unidvb: fix irq init by register it at the end of probe\n media: dvb-usb: dw2102: fix uninit-value in su3000_read_mac_address\n media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer()\n media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in rtl28xxu_i2c_xfer\n media: dvb-usb-v2: ce6230: fix null-ptr-deref in ce6230_i2c_master_xfer()\n media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer()\n media: dvb-usb: az6027: fix three null-ptr-deref in az6027_i2c_xfer()\n media: dvb_demux: fix a bug for the continuity counter\n ASoC: ssm2602: Add workaround for playback distortions\n xfrm: Check if_id in inbound policy/secpath match\n ASoC: dwc: limit the number of overrun messages\n nbd: Fix debugfs_create_dir error checking\n fbdev: stifb: Fix info entry in sti_struct on error path\n fbdev: modedb: Add 1920x1080 at 60 Hz video mode\n media: rcar-vin: Select correct interrupt mode for V4L2_FIELD_ALTERNATE\n ARM: 9295/1: unwind:fix unwind abort for uleb128 case\n mailbox: mailbox-test: Fix potential double-free in mbox_test_message_write()\n watchdog: menz069_wdt: fix watchdog initialisation\n mtd: rawnand: marvell: don\u0027t set the NAND frequency select\n mtd: rawnand: marvell: ensure timing values are written\n net: dsa: mv88e6xxx: Increase wait after reset deactivation\n net/sched: flower: fix possible OOB write in fl_set_geneve_opt()\n udp6: Fix race condition in udp6_sendmsg \u0026 connect\n net/netlink: fix NETLINK_LIST_MEMBERSHIPS length report\n ocfs2/dlm: move BITS_TO_BYTES() to bitops.h for wider use\n net: sched: fix NULL pointer dereference in mq_attach\n net/sched: Prohibit regrafting ingress or clsact Qdiscs\n net/sched: Reserve TC_H_INGRESS (TC_H_CLSACT) for ingress (clsact) Qdiscs\n net/sched: sch_clsact: Only create under TC_H_CLSACT\n net/sched: sch_ingress: Only create under TC_H_INGRESS\n tcp: Return user_mss for TCP_MAXSEG in CLOSE/LISTEN state if user_mss set\n tcp: deny tcp_disconnect() when threads are waiting\n af_packet: do not use READ_ONCE() in packet_bind()\n mtd: rawnand: ingenic: fix empty stub helper definitions\n amd-xgbe: fix the false linkup in xgbe_phy_status\n af_packet: Fix data-races of pkt_sk(sk)-\u003enum.\n netrom: fix info-leak in nr_write_internal()\n net/mlx5: fw_tracer, Fix event handling\n dmaengine: pl330: rename _start to prevent build error\n iommu/amd: Don\u0027t block updates to GATag if guest mode is on\n iommu/rockchip: Fix unwind goto issue\n RDMA/bnxt_re: Fix return value of bnxt_re_process_raw_qp_pkt_rx\n RDMA/bnxt_re: Refactor queue pair creation code\n RDMA/bnxt_re: Enable SRIOV VF support on Broadcom\u0027s 57500 adapter series\n RDMA/efa: Fix unsupported page sizes in device\n Linux 5.4.245\n netfilter: ctnetlink: Support offloaded conntrack entry deletion\n ipv{4,6}/raw: fix output xfrm lookup wrt protocol\n binder: fix UAF caused by faulty buffer cleanup\n bluetooth: Add cmd validity checks at the start of hci_sock_ioctl()\n io_uring: have io_kill_timeout() honor the request references\n io_uring: don\u0027t drop completion lock before timer is fully initialized\n io_uring: always grab lock in io_cancel_async_work()\n cdc_ncm: Fix the build warning\n net/mlx5: Devcom, serialize devcom registration\n net/mlx5: devcom only supports 2 ports\n fs: fix undefined behavior in bit shift for SB_NOUSER\n power: supply: bq24190: Call power_supply_changed() after updating input current\n power: supply: core: Refactor power_supply_set_input_current_limit_from_supplier()\n power: supply: bq27xxx: After charger plug in/out wait 0.5s for things to stabilize\n net: cdc_ncm: Deal with too low values of dwNtbOutMaxSize\n cdc_ncm: Implement the 32-bit version of NCM Transfer Block\n Linux 5.4.244\n 3c589_cs: Fix an error handling path in tc589_probe()\n net/mlx5: Devcom, fix error flow in mlx5_devcom_register_device\n net/mlx5: Fix error message when failing to allocate device memory\n forcedeth: Fix an error handling path in nv_probe()\n ASoC: Intel: Skylake: Fix declaration of enum skl_ch_cfg\n x86/show_trace_log_lvl: Ensure stack pointer is aligned, again\n xen/pvcalls-back: fix double frees with pvcalls_new_active_socket()\n coresight: Fix signedness bug in tmc_etr_buf_insert_barrier_packet()\n power: supply: sbs-charger: Fix INHIBITED bit for Status reg\n power: supply: bq27xxx: Fix poll_interval handling and races on remove\n power: supply: bq27xxx: Fix I2C IRQ race on remove\n power: supply: bq27xxx: Fix bq27xxx_battery_update() race condition\n power: supply: leds: Fix blink to LED on transition\n ipv6: Fix out-of-bounds access in ipv6_find_tlv()\n bpf: Fix mask generation for 32-bit narrow loads of 64-bit fields\n selftests: fib_tests: mute cleanup error message\n net: fix skb leak in __skb_tstamp_tx()\n media: radio-shark: Add endpoint checks\n USB: sisusbvga: Add endpoint checks\n USB: core: Add routines for endpoint checks in old drivers\n udplite: Fix NULL pointer dereference in __sk_mem_raise_allocated().\n net: fix stack overflow when LRO is disabled for virtual interfaces\n fbdev: udlfb: Fix endpoint check\n debugobjects: Don\u0027t wake up kswapd from fill_pool()\n x86/topology: Fix erroneous smp_num_siblings on Intel Hybrid platforms\n parisc: Fix flush_dcache_page() for usage from irq context\n selftests/memfd: Fix unknown type name build failure\n x86/mm: Avoid incomplete Global INVLPG flushes\n btrfs: use nofs when cleaning up aborted transactions\n gpio: mockup: Fix mode of debugfs files\n parisc: Allow to reboot machine after system halt\n parisc: Handle kgdb breakpoints only in kernel context\n m68k: Move signal frame following exception on 68020/030\n ALSA: hda/realtek: Enable headset onLenovo M70/M90\n ALSA: hda/ca0132: add quirk for EVGA X299 DARK\n mt76: mt7615: Fix build with older compilers\n spi: fsl-cpm: Use 16 bit mode for large transfers with even size\n spi: fsl-spi: Re-organise transfer bits_per_word adaptation\n watchdog: sp5100_tco: Immediately trigger upon starting.\n s390/qdio: fix do_sqbs() inline assembly constraint\n s390/qdio: get rid of register asm\n vc_screen: reload load of struct vc_data pointer in vcs_write() to avoid UAF\n vc_screen: rewrite vcs_size to accept vc, not inode\n usb: gadget: u_ether: Fix host MAC address case\n usb: gadget: u_ether: Convert prints to device prints\n lib/string_helpers: Introduce string_upper() and string_lower() helpers\n HID: wacom: add three styli to wacom_intuos_get_tool_type\n HID: wacom: Add new Intuos Pro Small (PTH-460) device IDs\n HID: wacom: Force pen out of prox if no events have been received in a while\n netfilter: nf_tables: hold mutex on netns pre_exit path\n netfilter: nf_tables: validate NFTA_SET_ELEM_OBJREF based on NFT_SET_OBJECT flag\n netfilter: nf_tables: stricter validation of element data\n netfilter: nf_tables: allow up to 64 bytes in the set element data area\n netfilter: nf_tables: add nft_setelem_parse_key()\n netfilter: nf_tables: validate registers coming from userspace.\n netfilter: nftables: statify nft_parse_register()\n netfilter: nftables: add nft_parse_register_store() and use it\n netfilter: nftables: add nft_parse_register_load() and use it\n nilfs2: fix use-after-free bug of nilfs_root in nilfs_evict_inode()\n powerpc/64s/radix: Fix soft dirty tracking\n tpm/tpm_tis: Disable interrupts for more Lenovo devices\n ceph: force updating the msg pointer in non-split case\n serial: Add support for Advantech PCI-1611U card\n statfs: enforce statfs[64] structure initialization\n KVM: x86: do not report a vCPU as preempted outside instruction boundaries\n can: kvaser_pciefd: Disable interrupts in probe error path\n can: kvaser_pciefd: Do not send EFLUSH command on TFD interrupt\n can: kvaser_pciefd: Clear listen-only bit if not explicitly requested\n can: kvaser_pciefd: Empty SRB buffer in probe\n can: kvaser_pciefd: Call request_irq() before enabling interrupts\n can: kvaser_pciefd: Set CAN_STATE_STOPPED in kvaser_pciefd_stop()\n can: j1939: recvmsg(): allow MSG_CMSG_COMPAT flag\n ALSA: hda/realtek: Add quirk for 2nd ASUS GU603\n ALSA: hda/realtek: Add a quirk for HP EliteDesk 805\n ALSA: hda: Add NVIDIA codec IDs a3 through a7 to patch table\n ALSA: hda: Fix Oops by 9.1 surround channel names\n usb: typec: altmodes/displayport: fix pin_assignment_show\n usb: dwc3: debugfs: Resume dwc3 before accessing registers\n USB: UHCI: adjust zhaoxin UHCI controllers OverCurrent bit value\n usb-storage: fix deadlock when a scsi command timeouts more than once\n USB: usbtmc: Fix direction for 0-length ioctl control messages\n vlan: fix a potential uninit-value in vlan_dev_hard_start_xmit()\n igb: fix bit_shift to be in [1..8] range\n cassini: Fix a memory leak in the error handling path of cas_init_one()\n wifi: iwlwifi: mvm: don\u0027t trust firmware n_channels\n net: bcmgenet: Restore phy_stop() depending upon suspend/close\n net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()\n net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()\n drm/exynos: fix g2d_open/close helper function definitions\n media: netup_unidvb: fix use-after-free at del_timer()\n net: hns3: fix reset delay time to avoid configuration timeout\n net: hns3: fix sending pfc frames after reset issue\n erspan: get the proto with the md version for collect_md\n ip_gre, ip6_gre: Fix race condition on o_seqno in collect_md mode\n ip6_gre: Make o_seqno start from 0 in native mode\n ip6_gre: Fix skb_under_panic in __gre6_xmit()\n serial: arc_uart: fix of_iomap leak in `arc_serial_probe`\n vsock: avoid to close connected socket after the timeout\n ALSA: firewire-digi00x: prevent potential use after free\n net: fec: Better handle pm_runtime_get() failing in .remove()\n af_key: Reject optional tunnel/BEET mode templates in outbound policies\n cpupower: Make TSC read per CPU for Mperf monitor\n ASoC: fsl_micfil: register platform component before registering cpu dai\n btrfs: fix space cache inconsistency after error loading it from disk\n btrfs: replace calls to btrfs_find_free_ino with btrfs_find_free_objectid\n mfd: dln2: Fix memory leak in dln2_probe()\n phy: st: miphy28lp: use _poll_timeout functions for waits\n Input: xpad - add constants for GIP interface numbers\n iommu/arm-smmu-v3: Acknowledge pri/event queue overflow if any\n clk: tegra20: fix gcc-7 constant overflow warning\n RDMA/core: Fix multiple -Warray-bounds warnings\n recordmcount: Fix memory leaks in the uwrite function\n sched: Fix KCSAN noinstr violation\n mcb-pci: Reallocate memory region to avoid memory overlapping\n serial: 8250: Reinit port-\u003epm on port specific driver unbind\n usb: typec: tcpm: fix multiple times discover svids error\n HID: wacom: generic: Set battery quirk only when we see battery data\n spi: spi-imx: fix MX51_ECSPI_* macros when cs \u003e 3\n HID: logitech-hidpp: Reconcile USB and Unifying serials\n HID: logitech-hidpp: Don\u0027t use the USB serial for USB devices\n staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE\n Bluetooth: L2CAP: fix \"bad unlock balance\" in l2cap_disconnect_rsp\n wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace\n wifi: iwlwifi: pcie: Fix integer overflow in iwl_write_to_user_buf\n wifi: iwlwifi: pcie: fix possible NULL pointer dereference\n samples/bpf: Fix fout leak in hbm\u0027s run_bpf_prog\n f2fs: fix to drop all dirty pages during umount() if cp_error is set\n ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()\n ext4: set goal start correctly in ext4_mb_normalize_request\n gfs2: Fix inode height consistency check\n scsi: message: mptlan: Fix use after free bug in mptlan_remove() due to race condition\n lib: cpu_rmap: Avoid use after free on rmap-\u003eobj array entries\n scsi: target: iscsit: Free cmds before session free\n net: Catch invalid index in XPS mapping\n net: pasemi: Fix return type of pasemi_mac_start_tx()\n scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow\n ext2: Check block size validity during mount\n wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex\n ACPICA: ACPICA: check null return of ACPI_ALLOCATE_ZEROED in acpi_db_display_objects\n ACPICA: Avoid undefined behavior: applying zero offset to null pointer\n drm/tegra: Avoid potential 32-bit integer overflow\n ACPI: EC: Fix oops when removing custom query handlers\n firmware: arm_sdei: Fix sleep from invalid context BUG\n memstick: r592: Fix UAF bug in r592_remove due to race condition\n regmap: cache: Return error in cache sync operations for REGCACHE_NONE\n drm/amd/display: Use DC_LOG_DC in the trasform pixel function\n fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode()\n af_unix: Fix data races around sk-\u003esk_shutdown.\n af_unix: Fix a data race of sk-\u003esk_receive_queue-\u003eqlen.\n net: datagram: fix data-races in datagram_poll()\n ipvlan:Fix out-of-bounds caused by unclear skb-\u003ecb\n net: add vlan_get_protocol_and_depth() helper\n net: tap: check vlan with eth_type_vlan() method\n net: annotate sk-\u003esk_err write from do_recvmmsg()\n netlink: annotate accesses to nlk-\u003ecb_running\n netfilter: conntrack: fix possible bug_on with enable_hooks\u003d1\n net: Fix load-tearing on sk-\u003esk_stamp in sock_recv_cmsgs().\n linux/dim: Do nothing if no time delta between samples\n ARM: 9296/1: HP Jornada 7XX: fix kernel-doc warnings\n drm/mipi-dsi: Set the fwnode for mipi_dsi_device\n driver core: add a helper to setup both the of_node and fwnode of a device\n Linux 5.4.243\n drm/amd/display: Fix hang when skipping modeset\n mm/page_alloc: fix potential deadlock on zonelist_update_seq seqlock\n drm/exynos: move to use request_irq by IRQF_NO_AUTOEN flag\n drm/msm/adreno: Fix null ptr access in adreno_gpu_cleanup()\n firmware: raspberrypi: fix possible memory leak in rpi_firmware_probe()\n drm/msm: Fix double pm_runtime_disable() call\n PM: domains: Restore comment indentation for generic_pm_domain.child_links\n printk: declare printk_deferred_{enter,safe}() in include/linux/printk.h\n PCI: pciehp: Fix AB-BA deadlock between reset_lock and device_lock\n PCI: pciehp: Use down_read/write_nested(reset_lock) to fix lockdep errors\n drbd: correctly submit flush bio on barrier\n serial: 8250: Fix serial8250_tx_empty() race with DMA Tx\n tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH\n ext4: fix invalid free tracking in ext4_xattr_move_to_block()\n ext4: remove a BUG_ON in ext4_mb_release_group_pa()\n ext4: bail out of ext4_xattr_ibody_get() fails for any reason\n ext4: add bounds checking in get_max_inline_xattr_value_size()\n ext4: fix deadlock when converting an inline directory in nojournal mode\n ext4: improve error recovery code paths in __ext4_remount()\n ext4: fix data races when using cached status extents\n ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum\n ext4: fix WARNING in mb_find_extent\n HID: wacom: insert timestamp to packed Bluetooth (BT) events\n HID: wacom: Set a default resolution for older tablets\n drm/amdgpu: disable sdma ecc irq only when sdma RAS is enabled in suspend\n drm/amdgpu/gfx: disable gfx9 cp_ecc_error_irq only when enabling legacy gfx ras\n drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini()\n drm/panel: otm8009a: Set backlight parent to panel device\n f2fs: fix potential corruption when moving a directory\n ARM: dts: s5pv210: correct MIPI CSIS clock name\n ARM: dts: exynos: fix WM8960 clock name in Itop Elite\n remoteproc: st: Call of_node_put() on iteration error\n remoteproc: stm32: Call of_node_put() on iteration error\n sh: nmi_debug: fix return value of __setup handler\n sh: init: use OF_EARLY_FLATTREE for early init\n sh: math-emu: fix macro redefined warning\n inotify: Avoid reporting event with invalid wd\n platform/x86: touchscreen_dmi: Add info for the Dexp Ursus KX210i\n cifs: fix pcchunk length type in smb2_copychunk_range\n btrfs: print-tree: parent bytenr must be aligned to sector size\n btrfs: don\u0027t free qgroup space unless specified\n btrfs: fix btrfs_prev_leaf() to not return the same key twice\n perf symbols: Fix return incorrect build_id size in elf_read_build_id()\n perf map: Delete two variable initialisations before null pointer checks in sort__sym_from_cmp()\n perf vendor events power9: Remove UTF-8 characters from JSON files\n virtio_net: suppress cpu stall when free_unused_bufs\n virtio_net: split free_unused_bufs()\n net: dsa: mt7530: fix corrupt frames using trgmii on 40 MHz XTAL MT7621\n ALSA: caiaq: input: Add error handling for unsupported input methods in `snd_usb_caiaq_input_init`\n drm/amdgpu: add a missing lock for AMDGPU_SCHED\n af_packet: Don\u0027t send zero-byte data in packet_sendmsg_spkt().\n ionic: remove noise from ethtool rxnfc error msg\n rxrpc: Fix hard call timeout units\n net/sched: act_mirred: Add carrier check\n writeback: fix call of incorrect macro\n net: dsa: mv88e6xxx: add mv88e6321 rsvd2cpu\n sit: update dev-\u003eneeded_headroom in ipip6_tunnel_bind_dev()\n net/sched: cls_api: remove block_cb from driver_list before freeing\n net/ncsi: clear Tx enable mode when handling a Config required AEN\n relayfs: fix out-of-bounds access in relay_file_read\n kernel/relay.c: fix read_pos error when multiple readers\n crypto: safexcel - Cleanup ring IRQ workqueues on load failure\n crypto: inside-secure - irq balance\n dm verity: fix error handling for check_at_most_once on FEC\n dm verity: skip redundant verity_handle_err() on I/O errors\n mailbox: zynqmp: Fix counts of child nodes\n mailbox: zynq: Switch to flexible array to simplify code\n tick/nohz: Fix cpu_is_hotpluggable() by checking with nohz subsystem\n nohz: Add TICK_DEP_BIT_RCU\n netfilter: nf_tables: deactivate anonymous set from preparation phase\n debugobject: Ensure pool refill (again)\n perf intel-pt: Fix CYC timestamps after standalone CBR\n perf auxtrace: Fix address filter entire kernel size\n dm ioctl: fix nested locking in table_clear() to remove deadlock concern\n dm flakey: fix a crash with invalid table line\n dm integrity: call kmem_cache_destroy() in dm_integrity_init() error path\n dm clone: call kmem_cache_destroy() in dm_clone_init() error path\n s390/dasd: fix hanging blockdevice after request requeue\n btrfs: scrub: reject unsupported scrub flags\n scripts/gdb: fix lx-timerlist for Python3\n clk: rockchip: rk3399: allow clk_cifout to force clk_cifout_src to reparent\n wifi: rtl8xxxu: RTL8192EU always needs full init\n mailbox: zynqmp: Fix typo in IPI documentation\n mailbox: zynqmp: Fix IPI isr handling\n md/raid10: fix null-ptr-deref in raid10_sync_request\n nilfs2: fix infinite loop in nilfs_mdt_get_block()\n nilfs2: do not write dirty data after degenerating to read-only\n parisc: Fix argument pointer in real64_call_asm()\n afs: Fix updating of i_size with dv jump from server\n dmaengine: at_xdmac: do not enable all cyclic channels\n dmaengine: dw-edma: Fix to enable to issue dma request on DMA processing\n dmaengine: dw-edma: Fix to change for continuous transfer\n phy: tegra: xusb: Add missing tegra_xusb_port_unregister for usb2_port and ulpi_port\n pwm: mtk-disp: Disable shadow registers before setting backlight values\n pwm: mtk-disp: Adjust the clocks to avoid them mismatch\n pwm: mtk-disp: Don\u0027t check the return code of pwmchip_remove()\n dmaengine: mv_xor_v2: Fix an error code.\n leds: TI_LMU_COMMON: select REGMAP instead of depending on it\n ext4: fix use-after-free read in ext4_find_extent for bigalloc + inline\n openrisc: Properly store r31 to pt_regs on unhandled exceptions\n clocksource/drivers/davinci: Fix memory leak in davinci_timer_register when init fails\n clocksource: davinci: axe a pointless __GFP_NOFAIL\n clocksource/drivers/davinci: Avoid trailing \u0027\\n\u0027 hidden in pr_fmt()\n RDMA/mlx5: Use correct device num_ports when modify DC\n SUNRPC: remove the maximum number of retries in call_bind_status\n Input: raspberrypi-ts - fix refcount leak in rpi_ts_probe\n input: raspberrypi-ts: Release firmware handle when not needed\n firmware: raspberrypi: Introduce devm_rpi_firmware_get()\n firmware: raspberrypi: Keep count of all consumers\n NFSv4.1: Always send a RECLAIM_COMPLETE after establishing lease\n IB/hfi1: Fix SDMA mmu_rb_node not being evicted in LRU order\n RDMA/siw: Remove namespace check from siw_netdev_event()\n clk: add missing of_node_put() in \"assigned-clocks\" property parsing\n power: supply: generic-adc-battery: fix unit scaling\n rtc: meson-vrtc: Use ktime_get_real_ts64() to get the current time\n RDMA/mlx4: Prevent shift wrapping in set_user_sq_size()\n rtc: omap: include header for omap_rtc_power_off_program prototype\n RDMA/rdmavt: Delete unnecessary NULL check\n RDMA/siw: Fix potential page_array out of range access\n perf/core: Fix hardlockup failure caused by perf throttle\n powerpc/rtas: use memmove for potentially overlapping buffer copy\n macintosh: via-pmu-led: requires ATA to be set\n powerpc/sysdev/tsi108: fix resource printk format warnings\n powerpc/wii: fix resource printk format warnings\n powerpc/mpc512x: fix resource printk format warning\n macintosh/windfarm_smu_sat: Add missing of_node_put()\n spmi: Add a check for remove callback when removing a SPMI driver\n staging: rtl8192e: Fix W_DISABLE# does not work after stop/start\n serial: 8250: Add missing wakeup event reporting\n tty: serial: fsl_lpuart: adjust buffer length to the intended size\n firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe\n usb: mtu3: fix kernel panic at qmu transfer done irq handler\n usb: chipidea: fix missing goto in `ci_hdrc_probe`\n sh: sq: Fix incorrect element size for allocating bitmap buffer\n uapi/linux/const.h: prefer ISO-friendly __typeof__\n spi: cadence-quadspi: fix suspend-resume implementations\n mtd: spi-nor: cadence-quadspi: Handle probe deferral while requesting DMA channel\n mtd: spi-nor: cadence-quadspi: Don\u0027t initialize rx_dma_complete on failure\n mtd: spi-nor: cadence-quadspi: Provide a way to disable DAC mode\n mtd: spi-nor: cadence-quadspi: Make driver independent of flash geometry\n scripts/gdb: bail early if there are no generic PD\n PM: domains: Fix up terminology with parent/child\n scripts/gdb: bail early if there are no clocks\n ia64: salinfo: placate defined-but-not-used warning\n ia64: mm/contig: fix section mismatch warning/error\n of: Fix modalias string generation\n vmci_host: fix a race condition in vmci_host_poll() causing GPF\n spi: fsl-spi: Fix CPM/QE mode Litte Endian\n spi: qup: Don\u0027t skip cleanup in remove\u0027s error path\n linux/vt_buffer.h: allow either builtin or modular for macros\n ASoC: es8316: Handle optional IRQ assignment\n ASoC: es8316: Use IRQF_NO_AUTOEN when requesting the IRQ\n genirq: Add IRQF_NO_AUTOEN for request_irq/nmi()\n PCI: imx6: Install the fault handler only on compatible match\n usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition\n iio: light: max44009: add missing OF device matching\n fpga: bridge: fix kernel-doc parameter description\n usb: host: xhci-rcar: remove leftover quirk handling\n pstore: Revert pmsg_lock back to a normal mutex\n tcp/udp: Fix memleaks of sk and zerocopy skbs with TX timestamp.\n net: amd: Fix link leak when verifying config failed\n netlink: Use copy_to_user() for optval in netlink_getsockopt().\n Revert \"Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work\"\n ipv4: Fix potential uninit variable access bug in __ip_make_skb()\n netfilter: nf_tables: don\u0027t write table validation state without mutex\n bpf: Don\u0027t EFAULT for getsockopt with optval\u003dNULL\n ixgbe: Enable setting RSS table to default values\n ixgbe: Allow flow hash to be set via ethtool\n wifi: iwlwifi: mvm: check firmware response size\n wifi: iwlwifi: make the loop for card preparation effective\n md/raid10: fix memleak of md thread\n md: update the optimal I/O size on reshape\n md/raid10: fix memleak for \u0027conf-\u003ebio_split\u0027\n md/raid10: fix leak of \u0027r10bio-\u003eremaining\u0027 for recovery\n bpf, sockmap: Revert buggy deadlock fix in the sockhash and sockmap\n nvme-fcloop: fix \"inconsistent {IN-HARDIRQ-W} -\u003e {HARDIRQ-ON-W} usage\"\n nvme: fix async event trace event\n nvme: handle the persistent internal error AER\n bpf, sockmap: fix deadlocks in the sockhash and sockmap\n scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()\n crypto: drbg - Only fail when jent is unavailable in FIPS mode\n crypto: drbg - make drbg_prepare_hrng() handle jent instantiation errors\n bpftool: Fix bug for long instructions in program CFG dumps\n wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_reg()\n wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_rfreg()\n rtlwifi: Replace RT_TRACE with rtl_dbg\n rtlwifi: Start changing RT_TRACE into rtl_dbg\n f2fs: handle dqget error in f2fs_transfer_project_quota()\n scsi: megaraid: Fix mega_cmd_done() CMDID_INT_CMDS\n scsi: target: iscsit: Fix TAS handling during conn cleanup\n net/packet: convert po-\u003eauxdata to an atomic flag\n net/packet: convert po-\u003eorigdev to an atomic flag\n net/packet: annotate accesses to po-\u003exmit\n vlan: partially enable SIOCSHWTSTAMP in container\n scm: fix MSG_CTRUNC setting condition for SO_PASSSEC\n wifi: rtw88: mac: Return the original error from rtw_mac_power_switch()\n wifi: rtw88: mac: Return the original error from rtw_pwr_seq_parser()\n tools: bpftool: Remove invalid \\\u0027 json escape\n wifi: ath6kl: reduce WARN to dev_dbg() in callback\n wifi: ath5k: fix an off by one check in ath5k_eeprom_read_freq_list()\n wifi: ath9k: hif_usb: fix memory leak of remain_skbs\n wifi: ath6kl: minor fix for allocation size\n tick/common: Align tick period with the HZ tick.\n tick: Get rid of tick_period\n tick/sched: Optimize tick_do_update_jiffies64() further\n tick/sched: Reduce seqcount held scope in tick_do_update_jiffies64()\n tick/sched: Use tick_next_period for lockless quick check\n timekeeping: Split jiffies seqlock\n debugobject: Prevent init race with static objects\n arm64: kgdb: Set PSTATE.SS to 1 to re-enable single-step\n x86/ioapic: Don\u0027t return 0 from arch_dynirq_lower_bound()\n regulator: stm32-pwr: fix of_iomap leak\n media: rc: gpio-ir-recv: Fix support for wake-up\n media: rcar_fdp1: Fix refcount leak in probe and remove function\n media: rcar_fdp1: Fix the correct variable assignments\n media: rcar_fdp1: Make use of the helper function devm_platform_ioremap_resource()\n media: rcar_fdp1: fix pm_runtime_get_sync() usage count\n media: rcar_fdp1: simplify error check logic at fdp_open()\n media: saa7134: fix use after free bug in saa7134_finidev due to race condition\n media: dm1105: Fix use after free bug in dm1105_remove due to race condition\n x86/apic: Fix atomic update of offset in reserve_eilvt_offset()\n regulator: core: Avoid lockdep reports when resolving supplies\n regulator: core: Consistently set mutex_owner when using ww_mutex_lock_slow()\n drm/lima/lima_drv: Add missing unwind goto in lima_pdev_probe()\n mmc: sdhci-of-esdhc: fix quirk to ignore command inhibit for data\n drm/msm/adreno: drop bogus pm_runtime_set_active()\n drm/msm/adreno: Defer enabling runpm until hw_init()\n drm/msm: fix unbalanced pm_runtime_enable in adreno_gpu_{init, cleanup}\n firmware: qcom_scm: Clear download bit during reboot\n media: av7110: prevent underflow in write_ts_to_decoder()\n media: uapi: add MEDIA_BUS_FMT_METADATA_FIXED media bus format.\n media: bdisp: Add missing check for create_workqueue\n ARM: dts: qcom: ipq8064: Fix the PCI I/O port range\n ARM: dts: qcom: ipq8064: reduce pci IO size to 64K\n ARM: dts: qcom: ipq4019: Fix the PCI I/O port range\n EDAC/skx: Fix overflows on the DRAM row address mapping arrays\n arm64: dts: renesas: r8a774c0: Remove bogus voltages from OPP table\n arm64: dts: renesas: r8a77990: Remove bogus voltages from OPP table\n drm/probe-helper: Cancel previous job before starting new one\n drm/vgem: add missing mutex_destroy\n drm/rockchip: Drop unbalanced obj unref\n erofs: fix potential overflow calculating xattr_isize\n erofs: stop parsing non-compact HEAD index if clusterofs is invalid\n tpm, tpm_tis: Do not skip reset of original interrupt vector\n selinux: ensure av_permissions.h is built when needed\n selinux: fix Makefile dependencies of flask.h\n ubifs: Free memory for tmpfile name\n ubi: Fix return value overwrite issue in try_write_vid_and_data()\n ubifs: Fix memleak when insert_old_idx() failed\n Revert \"ubifs: dirty_cow_znode: Fix memleak in error handling path\"\n i2c: omap: Fix standard mode false ACK readings\n KVM: nVMX: Emulate NOPs in L2, and PAUSE if it\u0027s not intercepted\n reiserfs: Add security prefix to xattr name in reiserfs_security_write()\n ring-buffer: Sync IRQ works before buffer destruction\n pwm: meson: Fix g12a ao clk81 name\n pwm: meson: Fix axg ao mux parents\n kheaders: Use array declaration instead of char\n ipmi: fix SSIF not responding under certain cond.\n ipmi:ssif: Add send_retries increment\n MIPS: fw: Allow firmware to pass a empty env\n xhci: fix debugfs register accesses while suspended\n debugfs: regset32: Add Runtime PM support\n staging: iio: resolver: ads1210: fix config mode\n perf sched: Cast PTHREAD_STACK_MIN to int as it may turn into sysconf(__SC_THREAD_STACK_MIN_VALUE)\n USB: dwc3: fix runtime pm imbalance on unbind\n USB: dwc3: fix runtime pm imbalance on probe errors\n asm-generic/io.h: suppress endianness warnings for readq() and writeq()\n ASoC: Intel: bytcr_rt5640: Add quirk for the Acer Iconia One 7 B1-750\n iio: adc: palmas_gpadc: fix NULL dereference on rmmod\n USB: serial: option: add UNISOC vendor and TOZED LT70C product\n bluetooth: Perform careful capability checks in hci_sock_ioctl()\n drm/fb-helper: set x/yres_virtual in drm_fb_helper_check_var\n wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()\n counter: 104-quad-8: Fix race condition between FLAG and CNTR reads\n\nConflicts:\n\tdrivers/firmware/qcom_scm.c\n\tdrivers/md/dm-verity-target.c\n\tdrivers/usb/dwc3/core.c\n\tdrivers/usb/dwc3/debugfs.c\n\tdrivers/usb/gadget/function/f_fs.c\n\nChange-Id: I0d6315cadf7c3458e54bee2de89bd92b968060f7\nSigned-off-by: kamasali Satyanarayan \u003cquic_kamasali@quicinc.com\u003e\n" }, { "commit": "c7cc4dc2473c9e365f25771087d5c4a0c9c64340", "tree": "133377d75d2a5b8625e24295c93fd501216d4369", "parents": [ "0158dab8e8b8809c07a0ee4c4c620b725a85dfb0" ], "author": { "name": "Konstantin Meskhidze", "email": "konstantin.meskhidze@huawei.com", "time": "Tue Sep 05 17:59:14 2023 +0800" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Sat Sep 23 10:59:57 2023 +0200" }, "message": "kconfig: fix possible buffer overflow\n\n[ Upstream commit a3b7039bb2b22fcd2ad20d59c00ed4e606ce3754 ]\n\nBuffer \u0027new_argv\u0027 is accessed without bound check after accessing with\nbound check via \u0027new_argc\u0027 index.\n\nFixes: e298f3b49def (\"kconfig: add built-in function support\")\nCo-developed-by: Ivanov Mikhail \u003civanov.mikhail1@huawei-partners.com\u003e\nSigned-off-by: Konstantin Meskhidze \u003ckonstantin.meskhidze@huawei.com\u003e\nSigned-off-by: Masahiro Yamada \u003cmasahiroy@kernel.org\u003e\nSigned-off-by: Sasha Levin \u003csashal@kernel.org\u003e\n" }, { "commit": "29949ccfbb4f2c96d18c504b1dabed018e5d4416", "tree": "990e5ba83d97ef335537d263d7bf6edaaa910ff5", "parents": [ "793aadc2a213768dff6ad9f326b9cb6feb555926", "07452ef620d930ec54a5bba4af41ef219d861787" ], "author": { "name": "Michael Bestas", "email": "mkbestas@lineageos.org", "time": "Thu Aug 31 18:20:41 2023 +0300" }, "committer": { "name": "Michael Bestas", "email": "mkbestas@lineageos.org", "time": "Thu Aug 31 18:20:41 2023 +0300" }, "message": "Merge tag \u0027ASB-2023-08-05_11-5.4\u0027 of https://android.googlesource.com/kernel/common into android13-5.4-lahaina\n\nhttps://source.android.com/docs/security/bulletin/2023-08-01\nCVE-2023-21264\nCVE-2020-29374\n\n* tag \u0027ASB-2023-08-05_11-5.4\u0027 of https://android.googlesource.com/kernel/common:\n UPSTREAM: media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()\n ANDROID: ABI: Update allowed list for QCOM\n UPSTREAM: usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition\n UPSTREAM: x86/mm: Avoid using set_pgd() outside of real PGD pages\n UPSTREAM: net/sched: flower: fix possible OOB write in fl_set_geneve_opt()\n Linux 5.4.249\n xfs: verify buffer contents when we skip log replay\n mm: make wait_on_page_writeback() wait for multiple pending writebacks\n mm: fix VM_BUG_ON(PageTail) and BUG_ON(PageWriteback)\n i2c: imx-lpi2c: fix type char overflow issue when calculating the clock cycle\n x86/apic: Fix kernel panic when booting with intremap\u003doff and x2apic_phys\n drm/radeon: fix race condition UAF in radeon_gem_set_domain_ioctl\n drm/exynos: fix race condition UAF in exynos_g2d_exec_ioctl\n drm/exynos: vidi: fix a wrong error return\n ARM: dts: Fix erroneous ADS touchscreen polarities\n ASoC: nau8824: Add quirk to active-high jack-detect\n s390/cio: unregister device when the only path is gone\n usb: gadget: udc: fix NULL dereference in remove()\n nfcsim.c: Fix error checking for debugfs_create_dir\n media: cec: core: don\u0027t set last_initiator if tx in progress\n arm64: Add missing Set/Way CMO encodings\n HID: wacom: Add error check to wacom_parse_and_register()\n scsi: target: iscsi: Prevent login threads from racing between each other\n sch_netem: acquire qdisc lock in netem_change()\n Revert \"net: phy: dp83867: perform soft reset and retain established link\"\n netfilter: nfnetlink_osf: fix module autoload\n netfilter: nf_tables: disallow element updates of bound anonymous sets\n be2net: Extend xmit workaround to BE3 chip\n net: dsa: mt7530: fix trapping frames on non-MT7621 SoC MT7530 switch\n ipvs: align inner_mac_header for encapsulation\n mmc: usdhi60rol0: fix deferred probing\n mmc: sh_mmcif: fix deferred probing\n mmc: sdhci-acpi: fix deferred probing\n mmc: omap_hsmmc: fix deferred probing\n mmc: omap: fix deferred probing\n mmc: mvsdio: fix deferred probing\n mmc: mvsdio: convert to devm_platform_ioremap_resource\n mmc: mtk-sd: fix deferred probing\n net: qca_spi: Avoid high load if QCA7000 is not available\n xfrm: Linearize the skb after offloading if needed.\n ieee802154: hwsim: Fix possible memory leaks\n rcu: Upgrade rcu_swap_protected() to rcu_replace_pointer()\n x86/mm: Avoid using set_pgd() outside of real PGD pages\n cifs: Fix potential deadlock when updating vol in cifs_reconnect()\n cifs: Merge is_path_valid() into get_normalized_path()\n cifs: Introduce helpers for finding TCP connection\n cifs: Get rid of kstrdup_const()\u0027d paths\n cifs: Clean up DFS referral cache\n nilfs2: prevent general protection fault in nilfs_clear_dirty_page()\n writeback: fix dereferencing NULL mapping-\u003ehost on writeback_page_template\n ip_tunnels: allow VXLAN/GENEVE to inherit TOS/TTL from VLAN\n mmc: meson-gx: remove redundant mmc_request_done() call from irq context\n cgroup: Do not corrupt task iteration when rebinding subsystem\n PCI: hv: Fix a race condition bug in hv_pci_query_relations()\n Drivers: hv: vmbus: Fix vmbus_wait_for_unload() to scan present CPUs\n nilfs2: fix buffer corruption due to concurrent device reads\n media: dvb-core: Fix use-after-free due to race at dvb_register_device()\n media: dvbdev: fix error logic at dvb_register_device()\n media: dvbdev: Fix memleak in dvb_register_device\n tick/common: Align tick period during sched_timer setup\n x86/purgatory: remove PGO flags\n tracing: Add tracing_reset_all_online_cpus_unlocked() function\n epoll: ep_autoremove_wake_function should use list_del_init_careful\n list: add \"list_del_init_careful()\" to go with \"list_empty_careful()\"\n mm: rewrite wait_on_page_bit_common() logic\n nilfs2: reject devices with insufficient block count\n Revert \"neighbour: Replace zero-length array with flexible-array member\"\n Revert \"neighbour: fix unaligned access to pneigh_entry\"\n Revert \"tcp: deny tcp_disconnect() when threads are waiting\"\n Linux 5.4.248\n mmc: block: ensure error propagation for non-blk\n drm/nouveau/kms: Fix NULL pointer dereference in nouveau_connector_detect_depth\n neighbour: delete neigh_lookup_nodev as not used\n net: Remove unused inline function dst_hold_and_use()\n neighbour: Remove unused inline function neigh_key_eq16()\n afs: Fix vlserver probe RTT handling\n selftests/ptp: Fix timestamp printf format for PTP_SYS_OFFSET\n net: tipc: resize nlattr array to correct size\n net: lapbether: only support ethernet devices\n net/sched: cls_api: Fix lockup on flushing explicitly created chain\n drm/nouveau: add nv_encoder pointer check for NULL\n drm/nouveau/kms: Don\u0027t change EDID when it hasn\u0027t actually changed\n drm/nouveau/dp: check for NULL nv_connector-\u003enative_mode\n igb: fix nvm.ops.read() error handling\n sctp: fix an error code in sctp_sf_eat_auth()\n ipvlan: fix bound dev checking for IPv6 l3s mode\n IB/isert: Fix incorrect release of isert connection\n IB/isert: Fix possible list corruption in CMA handler\n IB/isert: Fix dead lock in ib_isert\n IB/uverbs: Fix to consider event queue closing also upon non-blocking mode\n iavf: remove mask from iavf_irq_enable_queues()\n RDMA/rxe: Fix the use-before-initialization error of resp_pkts\n RDMA/rxe: Removed unused name from rxe_task struct\n RDMA/rxe: Remove the unused variable obj\n net/sched: cls_u32: Fix reference counter leak leading to overflow\n ping6: Fix send to link-local addresses with VRF.\n netfilter: nfnetlink: skip error delivery on batch in case of ENOMEM\n spi: fsl-dspi: avoid SCK glitches with continuous transfers\n spi: spi-fsl-dspi: Remove unused chip-\u003evoid_write_data\n usb: dwc3: gadget: Reset num TRBs before giving back the request\n serial: lantiq: add missing interrupt ack\n USB: serial: option: add Quectel EM061KGL series\n Remove DECnet support from kernel\n ALSA: hda/realtek: Add a quirk for Compaq N14JP6\n net: usb: qmi_wwan: add support for Compal RXM-G1\n RDMA/uverbs: Restrict usage of privileged QKEYs\n nouveau: fix client work fence deletion race\n powerpc/purgatory: remove PGO flags\n kexec: support purgatories with .text.hot sections\n nilfs2: fix possible out-of-bounds segment allocation in resize ioctl\n nilfs2: fix incomplete buffer cleanup in nilfs_btnode_abort_change_key()\n nios2: dts: Fix tse_mac \"max-frame-size\" property\n ocfs2: check new file size on fallocate call\n ocfs2: fix use-after-free when unmounting read-only filesystem\n drm:amd:amdgpu: Fix missing buffer object unlock in failure path\n xen/blkfront: Only check REQ_FUA for writes\n mips: Move initrd_start check after initrd address sanitisation.\n MIPS: Alchemy: fix dbdma2\n parisc: Flush gatt writes and adjust gatt mask in parisc_agp_mask_memory()\n parisc: Improve cache flushing for PCXL in arch_sync_dma_for_cpu()\n btrfs: handle memory allocation failure in btrfs_csum_one_bio\n power: supply: Fix logic checking if system is running from battery\n irqchip/meson-gpio: Mark OF related data as maybe unused\n regulator: Fix error checking for debugfs_create_dir\n platform/x86: asus-wmi: Ignore WMI events with codes 0x7B, 0xC0\n power: supply: Ratelimit no data debug output\n ARM: dts: vexpress: add missing cache properties\n power: supply: bq27xxx: Use mod_delayed_work() instead of cancel() + schedule()\n power: supply: sc27xx: Fix external_power_changed race\n power: supply: ab8500: Fix external_power_changed race\n s390/dasd: Use correct lock while counting channel queue length\n dasd: refactor dasd_ioctl_information\n KEYS: asymmetric: Copy sig and digest in public_key_verify_signature()\n test_firmware: fix a memory leak with reqs buffer\n Revert \"firmware: arm_sdei: Fix sleep from invalid context BUG\"\n Revert \"PM: domains: Fix up terminology with parent/child\"\n Revert \"PM: domains: Restore comment indentation for generic_pm_domain.child_links\"\n Revert \"scripts/gdb: bail early if there are no generic PD\"\n Revert \"uapi/linux/const.h: prefer ISO-friendly __typeof__\"\n Revert \"netfilter: nf_tables: don\u0027t write table validation state without mutex\"\n Linux 5.4.247\n Revert \"staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE\"\n mtd: spinand: macronix: Add support for MX35LFxGE4AD\n btrfs: unset reloc control if transaction commit fails in prepare_to_relocate()\n btrfs: check return value of btrfs_commit_transaction in relocation\n rbd: get snapshot context after exclusive lock is ensured to be held\n drm/atomic: Don\u0027t pollute crtc_state-\u003emode_blob with error pointers\n cifs: handle empty list of targets in cifs_reconnect()\n cifs: get rid of unused parameter in reconn_setup_dfs_targets()\n ext4: only check dquot_initialize_needed() when debugging\n eeprom: at24: also select REGMAP\n i2c: sprd: Delete i2c adapter in .remove\u0027s error path\n bonding (gcc13): synchronize bond_{a,t}lb_xmit() types\n usb: usbfs: Use consistent mmap functions\n usb: usbfs: Enforce page requirements for mmap\n pinctrl: meson-axg: add missing GPIOA_18 gpio group\n rbd: move RBD_OBJ_FLAG_COPYUP_ENABLED flag setting\n Bluetooth: Fix use-after-free in hci_remove_ltk/hci_remove_irk\n ceph: fix use-after-free bug for inodes when flushing capsnaps\n can: j1939: avoid possible use-after-free when j1939_can_rx_register fails\n can: j1939: change j1939_netdev_lock type to mutex\n can: j1939: j1939_sk_send_loop_abort(): improved error queue handling in J1939 Socket\n drm/amdgpu: fix xclk freq on CHIP_STONEY\n ALSA: hda/realtek: Add Lenovo P3 Tower platform\n ALSA: hda/realtek: Add a quirk for HP Slim Desktop S01\n Input: psmouse - fix OOB access in Elantech protocol\n Input: xpad - delete a Razer DeathAdder mouse VID/PID entry\n batman-adv: Broken sync while rescheduling delayed work\n bnxt_en: Query default VLAN before VNIC setup on a VF\n lib: cpu_rmap: Fix potential use-after-free in irq_cpu_rmap_release()\n net: sched: fix possible refcount leak in tc_chain_tmplt_add()\n net: sched: move rtm_tca_policy declaration to include file\n rfs: annotate lockless accesses to RFS sock flow table\n rfs: annotate lockless accesses to sk-\u003esk_rxhash\n netfilter: ipset: Add schedule point in call_ad().\n netfilter: conntrack: fix NULL pointer dereference in nf_confirm_cthelper\n Bluetooth: L2CAP: Add missing checks for invalid DCID\n Bluetooth: Fix l2cap_disconnect_req deadlock\n net: dsa: lan9303: allow vid !\u003d 0 in port_fdb_{add|del} methods\n neighbour: fix unaligned access to pneigh_entry\n neighbour: Replace zero-length array with flexible-array member\n spi: qup: Request DMA before enabling clocks\n i40e: fix build warnings in i40e_alloc.h\n i40iw: fix build warning in i40iw_manage_apbvt()\n block/blk-iocost (gcc13): keep large values in a new enum\n blk-iocost: avoid 64-bit division in ioc_timer_fn\n Linux 5.4.246\n drm/edid: fix objtool warning in drm_cvt_modes()\n wifi: rtlwifi: 8192de: correct checking of IQK reload\n drm/edid: Fix uninitialized variable in drm_cvt_modes()\n RDMA/bnxt_re: Remove the qp from list only if the qp destroy succeeds\n RDMA/bnxt_re: Remove set but not used variable \u0027dev_attr\u0027\n scsi: dpt_i2o: Do not process completions with invalid addresses\n scsi: dpt_i2o: Remove broken pass-through ioctl (I2OUSERCMD)\n regmap: Account for register length when chunking\n test_firmware: fix the memory leak of the allocated firmware buffer\n fbcon: Fix null-ptr-deref in soft_cursor\n ext4: add lockdep annotations for i_data_sem for ea_inode\u0027s\n ext4: disallow ea_inodes with extended attributes\n ext4: set lockdep subclass for the ea_inode in ext4_xattr_inode_cache_find()\n ext4: add EA_INODE checking to ext4_iget()\n tracing/probe: trace_probe_primary_from_call(): checked list_first_entry\n selinux: don\u0027t use make\u0027s grouped targets feature yet\n tty: serial: fsl_lpuart: use UARTCTRL_TXINV to send break instead of UARTCTRL_SBK\n mmc: vub300: fix invalid response handling\n wifi: rtlwifi: remove always-true condition pointed out by GCC 12\n lib/dynamic_debug.c: use address-of operator on section symbols\n treewide: Remove uninitialized_var() usage\n kernel/extable.c: use address-of operator on section symbols\n eth: sun: cassini: remove dead code\n gcc-12: disable \u0027-Wdangling-pointer\u0027 warning for now\n ACPI: thermal: drop an always true check\n x86/boot: Wrap literal addresses in absolute_pointer()\n flow_dissector: work around stack frame size warning\n ata: libata-scsi: Use correct device no in ata_find_dev()\n scsi: stex: Fix gcc 13 warnings\n misc: fastrpc: reject new invocations during device removal\n misc: fastrpc: return -EPIPE to invocations on device removal\n usb: gadget: f_fs: Add unbind event before functionfs_unbind\n net: usb: qmi_wwan: Set DTR quirk for BroadMobi BM818\n iio: dac: build ad5758 driver when AD5758 is selected\n iio: dac: mcp4725: Fix i2c_master_send() return value handling\n iio: light: vcnl4035: fixed chip ID check\n HID: wacom: avoid integer overflow in wacom_intuos_inout()\n HID: google: add jewel USB id\n iio: adc: mxs-lradc: fix the order of two cleanup operations\n mailbox: mailbox-test: fix a locking issue in mbox_test_message_write()\n atm: hide unused procfs functions\n ALSA: oss: avoid missing-prototype warnings\n netfilter: conntrack: define variables exp_nat_nla_policy and any_addr with CONFIG_NF_NAT\n wifi: b43: fix incorrect __packed annotation\n scsi: core: Decrease scsi_device\u0027s iorequest_cnt if dispatch failed\n arm64/mm: mark private VM_FAULT_X defines as vm_fault_t\n ARM: dts: stm32: add pin map for CAN controller on stm32f7\n wifi: rtl8xxxu: fix authentication timeout due to incorrect RCR value\n media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221\n media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()\n media: dvb-core: Fix use-after-free due on race condition at dvb_net\n media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr from ID table\n media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()\n media: dvb_ca_en50221: fix a size write bug\n media: netup_unidvb: fix irq init by register it at the end of probe\n media: dvb-usb: dw2102: fix uninit-value in su3000_read_mac_address\n media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer()\n media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in rtl28xxu_i2c_xfer\n media: dvb-usb-v2: ce6230: fix null-ptr-deref in ce6230_i2c_master_xfer()\n media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer()\n media: dvb-usb: az6027: fix three null-ptr-deref in az6027_i2c_xfer()\n media: dvb_demux: fix a bug for the continuity counter\n ASoC: ssm2602: Add workaround for playback distortions\n xfrm: Check if_id in inbound policy/secpath match\n ASoC: dwc: limit the number of overrun messages\n nbd: Fix debugfs_create_dir error checking\n fbdev: stifb: Fix info entry in sti_struct on error path\n fbdev: modedb: Add 1920x1080 at 60 Hz video mode\n media: rcar-vin: Select correct interrupt mode for V4L2_FIELD_ALTERNATE\n ARM: 9295/1: unwind:fix unwind abort for uleb128 case\n mailbox: mailbox-test: Fix potential double-free in mbox_test_message_write()\n watchdog: menz069_wdt: fix watchdog initialisation\n mtd: rawnand: marvell: don\u0027t set the NAND frequency select\n mtd: rawnand: marvell: ensure timing values are written\n net: dsa: mv88e6xxx: Increase wait after reset deactivation\n net/sched: flower: fix possible OOB write in fl_set_geneve_opt()\n udp6: Fix race condition in udp6_sendmsg \u0026 connect\n net/netlink: fix NETLINK_LIST_MEMBERSHIPS length report\n ocfs2/dlm: move BITS_TO_BYTES() to bitops.h for wider use\n net: sched: fix NULL pointer dereference in mq_attach\n net/sched: Prohibit regrafting ingress or clsact Qdiscs\n net/sched: Reserve TC_H_INGRESS (TC_H_CLSACT) for ingress (clsact) Qdiscs\n net/sched: sch_clsact: Only create under TC_H_CLSACT\n net/sched: sch_ingress: Only create under TC_H_INGRESS\n tcp: Return user_mss for TCP_MAXSEG in CLOSE/LISTEN state if user_mss set\n tcp: deny tcp_disconnect() when threads are waiting\n af_packet: do not use READ_ONCE() in packet_bind()\n mtd: rawnand: ingenic: fix empty stub helper definitions\n amd-xgbe: fix the false linkup in xgbe_phy_status\n af_packet: Fix data-races of pkt_sk(sk)-\u003enum.\n netrom: fix info-leak in nr_write_internal()\n net/mlx5: fw_tracer, Fix event handling\n dmaengine: pl330: rename _start to prevent build error\n iommu/amd: Don\u0027t block updates to GATag if guest mode is on\n iommu/rockchip: Fix unwind goto issue\n RDMA/bnxt_re: Fix return value of bnxt_re_process_raw_qp_pkt_rx\n RDMA/bnxt_re: Refactor queue pair creation code\n RDMA/bnxt_re: Enable SRIOV VF support on Broadcom\u0027s 57500 adapter series\n RDMA/efa: Fix unsupported page sizes in device\n Linux 5.4.245\n netfilter: ctnetlink: Support offloaded conntrack entry deletion\n ipv{4,6}/raw: fix output xfrm lookup wrt protocol\n binder: fix UAF caused by faulty buffer cleanup\n bluetooth: Add cmd validity checks at the start of hci_sock_ioctl()\n io_uring: have io_kill_timeout() honor the request references\n io_uring: don\u0027t drop completion lock before timer is fully initialized\n io_uring: always grab lock in io_cancel_async_work()\n cdc_ncm: Fix the build warning\n net/mlx5: Devcom, serialize devcom registration\n net/mlx5: devcom only supports 2 ports\n fs: fix undefined behavior in bit shift for SB_NOUSER\n power: supply: bq24190: Call power_supply_changed() after updating input current\n power: supply: core: Refactor power_supply_set_input_current_limit_from_supplier()\n power: supply: bq27xxx: After charger plug in/out wait 0.5s for things to stabilize\n net: cdc_ncm: Deal with too low values of dwNtbOutMaxSize\n cdc_ncm: Implement the 32-bit version of NCM Transfer Block\n Linux 5.4.244\n 3c589_cs: Fix an error handling path in tc589_probe()\n net/mlx5: Devcom, fix error flow in mlx5_devcom_register_device\n net/mlx5: Fix error message when failing to allocate device memory\n forcedeth: Fix an error handling path in nv_probe()\n ASoC: Intel: Skylake: Fix declaration of enum skl_ch_cfg\n x86/show_trace_log_lvl: Ensure stack pointer is aligned, again\n xen/pvcalls-back: fix double frees with pvcalls_new_active_socket()\n coresight: Fix signedness bug in tmc_etr_buf_insert_barrier_packet()\n power: supply: sbs-charger: Fix INHIBITED bit for Status reg\n power: supply: bq27xxx: Fix poll_interval handling and races on remove\n power: supply: bq27xxx: Fix I2C IRQ race on remove\n power: supply: bq27xxx: Fix bq27xxx_battery_update() race condition\n power: supply: leds: Fix blink to LED on transition\n ipv6: Fix out-of-bounds access in ipv6_find_tlv()\n bpf: Fix mask generation for 32-bit narrow loads of 64-bit fields\n selftests: fib_tests: mute cleanup error message\n net: fix skb leak in __skb_tstamp_tx()\n media: radio-shark: Add endpoint checks\n USB: sisusbvga: Add endpoint checks\n USB: core: Add routines for endpoint checks in old drivers\n udplite: Fix NULL pointer dereference in __sk_mem_raise_allocated().\n net: fix stack overflow when LRO is disabled for virtual interfaces\n fbdev: udlfb: Fix endpoint check\n debugobjects: Don\u0027t wake up kswapd from fill_pool()\n x86/topology: Fix erroneous smp_num_siblings on Intel Hybrid platforms\n parisc: Fix flush_dcache_page() for usage from irq context\n selftests/memfd: Fix unknown type name build failure\n x86/mm: Avoid incomplete Global INVLPG flushes\n btrfs: use nofs when cleaning up aborted transactions\n gpio: mockup: Fix mode of debugfs files\n parisc: Allow to reboot machine after system halt\n parisc: Handle kgdb breakpoints only in kernel context\n m68k: Move signal frame following exception on 68020/030\n ALSA: hda/realtek: Enable headset onLenovo M70/M90\n ALSA: hda/ca0132: add quirk for EVGA X299 DARK\n mt76: mt7615: Fix build with older compilers\n spi: fsl-cpm: Use 16 bit mode for large transfers with even size\n spi: fsl-spi: Re-organise transfer bits_per_word adaptation\n watchdog: sp5100_tco: Immediately trigger upon starting.\n s390/qdio: fix do_sqbs() inline assembly constraint\n s390/qdio: get rid of register asm\n vc_screen: reload load of struct vc_data pointer in vcs_write() to avoid UAF\n vc_screen: rewrite vcs_size to accept vc, not inode\n usb: gadget: u_ether: Fix host MAC address case\n usb: gadget: u_ether: Convert prints to device prints\n lib/string_helpers: Introduce string_upper() and string_lower() helpers\n HID: wacom: add three styli to wacom_intuos_get_tool_type\n HID: wacom: Add new Intuos Pro Small (PTH-460) device IDs\n HID: wacom: Force pen out of prox if no events have been received in a while\n netfilter: nf_tables: hold mutex on netns pre_exit path\n netfilter: nf_tables: validate NFTA_SET_ELEM_OBJREF based on NFT_SET_OBJECT flag\n netfilter: nf_tables: stricter validation of element data\n netfilter: nf_tables: allow up to 64 bytes in the set element data area\n netfilter: nf_tables: add nft_setelem_parse_key()\n netfilter: nf_tables: validate registers coming from userspace.\n netfilter: nftables: statify nft_parse_register()\n netfilter: nftables: add nft_parse_register_store() and use it\n netfilter: nftables: add nft_parse_register_load() and use it\n nilfs2: fix use-after-free bug of nilfs_root in nilfs_evict_inode()\n powerpc/64s/radix: Fix soft dirty tracking\n tpm/tpm_tis: Disable interrupts for more Lenovo devices\n ceph: force updating the msg pointer in non-split case\n serial: Add support for Advantech PCI-1611U card\n statfs: enforce statfs[64] structure initialization\n KVM: x86: do not report a vCPU as preempted outside instruction boundaries\n can: kvaser_pciefd: Disable interrupts in probe error path\n can: kvaser_pciefd: Do not send EFLUSH command on TFD interrupt\n can: kvaser_pciefd: Clear listen-only bit if not explicitly requested\n can: kvaser_pciefd: Empty SRB buffer in probe\n can: kvaser_pciefd: Call request_irq() before enabling interrupts\n can: kvaser_pciefd: Set CAN_STATE_STOPPED in kvaser_pciefd_stop()\n can: j1939: recvmsg(): allow MSG_CMSG_COMPAT flag\n ALSA: hda/realtek: Add quirk for 2nd ASUS GU603\n ALSA: hda/realtek: Add a quirk for HP EliteDesk 805\n ALSA: hda: Add NVIDIA codec IDs a3 through a7 to patch table\n ALSA: hda: Fix Oops by 9.1 surround channel names\n usb: typec: altmodes/displayport: fix pin_assignment_show\n usb: dwc3: debugfs: Resume dwc3 before accessing registers\n USB: UHCI: adjust zhaoxin UHCI controllers OverCurrent bit value\n usb-storage: fix deadlock when a scsi command timeouts more than once\n USB: usbtmc: Fix direction for 0-length ioctl control messages\n vlan: fix a potential uninit-value in vlan_dev_hard_start_xmit()\n igb: fix bit_shift to be in [1..8] range\n cassini: Fix a memory leak in the error handling path of cas_init_one()\n wifi: iwlwifi: mvm: don\u0027t trust firmware n_channels\n net: bcmgenet: Restore phy_stop() depending upon suspend/close\n net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()\n net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()\n drm/exynos: fix g2d_open/close helper function definitions\n media: netup_unidvb: fix use-after-free at del_timer()\n net: hns3: fix reset delay time to avoid configuration timeout\n net: hns3: fix sending pfc frames after reset issue\n erspan: get the proto with the md version for collect_md\n ip_gre, ip6_gre: Fix race condition on o_seqno in collect_md mode\n ip6_gre: Make o_seqno start from 0 in native mode\n ip6_gre: Fix skb_under_panic in __gre6_xmit()\n serial: arc_uart: fix of_iomap leak in `arc_serial_probe`\n vsock: avoid to close connected socket after the timeout\n ALSA: firewire-digi00x: prevent potential use after free\n net: fec: Better handle pm_runtime_get() failing in .remove()\n af_key: Reject optional tunnel/BEET mode templates in outbound policies\n cpupower: Make TSC read per CPU for Mperf monitor\n ASoC: fsl_micfil: register platform component before registering cpu dai\n btrfs: fix space cache inconsistency after error loading it from disk\n btrfs: replace calls to btrfs_find_free_ino with btrfs_find_free_objectid\n mfd: dln2: Fix memory leak in dln2_probe()\n phy: st: miphy28lp: use _poll_timeout functions for waits\n Input: xpad - add constants for GIP interface numbers\n iommu/arm-smmu-v3: Acknowledge pri/event queue overflow if any\n clk: tegra20: fix gcc-7 constant overflow warning\n RDMA/core: Fix multiple -Warray-bounds warnings\n recordmcount: Fix memory leaks in the uwrite function\n sched: Fix KCSAN noinstr violation\n mcb-pci: Reallocate memory region to avoid memory overlapping\n serial: 8250: Reinit port-\u003epm on port specific driver unbind\n usb: typec: tcpm: fix multiple times discover svids error\n HID: wacom: generic: Set battery quirk only when we see battery data\n spi: spi-imx: fix MX51_ECSPI_* macros when cs \u003e 3\n HID: logitech-hidpp: Reconcile USB and Unifying serials\n HID: logitech-hidpp: Don\u0027t use the USB serial for USB devices\n staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE\n Bluetooth: L2CAP: fix \"bad unlock balance\" in l2cap_disconnect_rsp\n wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace\n wifi: iwlwifi: pcie: Fix integer overflow in iwl_write_to_user_buf\n wifi: iwlwifi: pcie: fix possible NULL pointer dereference\n samples/bpf: Fix fout leak in hbm\u0027s run_bpf_prog\n f2fs: fix to drop all dirty pages during umount() if cp_error is set\n ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()\n ext4: set goal start correctly in ext4_mb_normalize_request\n gfs2: Fix inode height consistency check\n scsi: message: mptlan: Fix use after free bug in mptlan_remove() due to race condition\n lib: cpu_rmap: Avoid use after free on rmap-\u003eobj array entries\n scsi: target: iscsit: Free cmds before session free\n net: Catch invalid index in XPS mapping\n net: pasemi: Fix return type of pasemi_mac_start_tx()\n scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow\n ext2: Check block size validity during mount\n wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex\n ACPICA: ACPICA: check null return of ACPI_ALLOCATE_ZEROED in acpi_db_display_objects\n ACPICA: Avoid undefined behavior: applying zero offset to null pointer\n drm/tegra: Avoid potential 32-bit integer overflow\n ACPI: EC: Fix oops when removing custom query handlers\n firmware: arm_sdei: Fix sleep from invalid context BUG\n memstick: r592: Fix UAF bug in r592_remove due to race condition\n regmap: cache: Return error in cache sync operations for REGCACHE_NONE\n drm/amd/display: Use DC_LOG_DC in the trasform pixel function\n fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode()\n af_unix: Fix data races around sk-\u003esk_shutdown.\n af_unix: Fix a data race of sk-\u003esk_receive_queue-\u003eqlen.\n net: datagram: fix data-races in datagram_poll()\n ipvlan:Fix out-of-bounds caused by unclear skb-\u003ecb\n net: add vlan_get_protocol_and_depth() helper\n net: tap: check vlan with eth_type_vlan() method\n net: annotate sk-\u003esk_err write from do_recvmmsg()\n netlink: annotate accesses to nlk-\u003ecb_running\n netfilter: conntrack: fix possible bug_on with enable_hooks\u003d1\n net: Fix load-tearing on sk-\u003esk_stamp in sock_recv_cmsgs().\n linux/dim: Do nothing if no time delta between samples\n ARM: 9296/1: HP Jornada 7XX: fix kernel-doc warnings\n drm/mipi-dsi: Set the fwnode for mipi_dsi_device\n driver core: add a helper to setup both the of_node and fwnode of a device\n Linux 5.4.243\n drm/amd/display: Fix hang when skipping modeset\n mm/page_alloc: fix potential deadlock on zonelist_update_seq seqlock\n drm/exynos: move to use request_irq by IRQF_NO_AUTOEN flag\n drm/msm/adreno: Fix null ptr access in adreno_gpu_cleanup()\n firmware: raspberrypi: fix possible memory leak in rpi_firmware_probe()\n drm/msm: Fix double pm_runtime_disable() call\n PM: domains: Restore comment indentation for generic_pm_domain.child_links\n printk: declare printk_deferred_{enter,safe}() in include/linux/printk.h\n PCI: pciehp: Fix AB-BA deadlock between reset_lock and device_lock\n PCI: pciehp: Use down_read/write_nested(reset_lock) to fix lockdep errors\n drbd: correctly submit flush bio on barrier\n serial: 8250: Fix serial8250_tx_empty() race with DMA Tx\n tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH\n ext4: fix invalid free tracking in ext4_xattr_move_to_block()\n ext4: remove a BUG_ON in ext4_mb_release_group_pa()\n ext4: bail out of ext4_xattr_ibody_get() fails for any reason\n ext4: add bounds checking in get_max_inline_xattr_value_size()\n ext4: fix deadlock when converting an inline directory in nojournal mode\n ext4: improve error recovery code paths in __ext4_remount()\n ext4: fix data races when using cached status extents\n ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum\n ext4: fix WARNING in mb_find_extent\n HID: wacom: insert timestamp to packed Bluetooth (BT) events\n HID: wacom: Set a default resolution for older tablets\n drm/amdgpu: disable sdma ecc irq only when sdma RAS is enabled in suspend\n drm/amdgpu/gfx: disable gfx9 cp_ecc_error_irq only when enabling legacy gfx ras\n drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini()\n drm/panel: otm8009a: Set backlight parent to panel device\n f2fs: fix potential corruption when moving a directory\n ARM: dts: s5pv210: correct MIPI CSIS clock name\n ARM: dts: exynos: fix WM8960 clock name in Itop Elite\n remoteproc: st: Call of_node_put() on iteration error\n remoteproc: stm32: Call of_node_put() on iteration error\n sh: nmi_debug: fix return value of __setup handler\n sh: init: use OF_EARLY_FLATTREE for early init\n sh: math-emu: fix macro redefined warning\n inotify: Avoid reporting event with invalid wd\n platform/x86: touchscreen_dmi: Add info for the Dexp Ursus KX210i\n cifs: fix pcchunk length type in smb2_copychunk_range\n btrfs: print-tree: parent bytenr must be aligned to sector size\n btrfs: don\u0027t free qgroup space unless specified\n btrfs: fix btrfs_prev_leaf() to not return the same key twice\n perf symbols: Fix return incorrect build_id size in elf_read_build_id()\n perf map: Delete two variable initialisations before null pointer checks in sort__sym_from_cmp()\n perf vendor events power9: Remove UTF-8 characters from JSON files\n virtio_net: suppress cpu stall when free_unused_bufs\n virtio_net: split free_unused_bufs()\n net: dsa: mt7530: fix corrupt frames using trgmii on 40 MHz XTAL MT7621\n ALSA: caiaq: input: Add error handling for unsupported input methods in `snd_usb_caiaq_input_init`\n drm/amdgpu: add a missing lock for AMDGPU_SCHED\n af_packet: Don\u0027t send zero-byte data in packet_sendmsg_spkt().\n ionic: remove noise from ethtool rxnfc error msg\n rxrpc: Fix hard call timeout units\n net/sched: act_mirred: Add carrier check\n writeback: fix call of incorrect macro\n net: dsa: mv88e6xxx: add mv88e6321 rsvd2cpu\n sit: update dev-\u003eneeded_headroom in ipip6_tunnel_bind_dev()\n net/sched: cls_api: remove block_cb from driver_list before freeing\n net/ncsi: clear Tx enable mode when handling a Config required AEN\n relayfs: fix out-of-bounds access in relay_file_read\n kernel/relay.c: fix read_pos error when multiple readers\n crypto: safexcel - Cleanup ring IRQ workqueues on load failure\n crypto: inside-secure - irq balance\n dm verity: fix error handling for check_at_most_once on FEC\n dm verity: skip redundant verity_handle_err() on I/O errors\n mailbox: zynqmp: Fix counts of child nodes\n mailbox: zynq: Switch to flexible array to simplify code\n tick/nohz: Fix cpu_is_hotpluggable() by checking with nohz subsystem\n nohz: Add TICK_DEP_BIT_RCU\n netfilter: nf_tables: deactivate anonymous set from preparation phase\n debugobject: Ensure pool refill (again)\n perf intel-pt: Fix CYC timestamps after standalone CBR\n perf auxtrace: Fix address filter entire kernel size\n dm ioctl: fix nested locking in table_clear() to remove deadlock concern\n dm flakey: fix a crash with invalid table line\n dm integrity: call kmem_cache_destroy() in dm_integrity_init() error path\n dm clone: call kmem_cache_destroy() in dm_clone_init() error path\n s390/dasd: fix hanging blockdevice after request requeue\n btrfs: scrub: reject unsupported scrub flags\n scripts/gdb: fix lx-timerlist for Python3\n clk: rockchip: rk3399: allow clk_cifout to force clk_cifout_src to reparent\n wifi: rtl8xxxu: RTL8192EU always needs full init\n mailbox: zynqmp: Fix typo in IPI documentation\n mailbox: zynqmp: Fix IPI isr handling\n md/raid10: fix null-ptr-deref in raid10_sync_request\n nilfs2: fix infinite loop in nilfs_mdt_get_block()\n nilfs2: do not write dirty data after degenerating to read-only\n parisc: Fix argument pointer in real64_call_asm()\n afs: Fix updating of i_size with dv jump from server\n dmaengine: at_xdmac: do not enable all cyclic channels\n dmaengine: dw-edma: Fix to enable to issue dma request on DMA processing\n dmaengine: dw-edma: Fix to change for continuous transfer\n phy: tegra: xusb: Add missing tegra_xusb_port_unregister for usb2_port and ulpi_port\n pwm: mtk-disp: Disable shadow registers before setting backlight values\n pwm: mtk-disp: Adjust the clocks to avoid them mismatch\n pwm: mtk-disp: Don\u0027t check the return code of pwmchip_remove()\n dmaengine: mv_xor_v2: Fix an error code.\n leds: TI_LMU_COMMON: select REGMAP instead of depending on it\n ext4: fix use-after-free read in ext4_find_extent for bigalloc + inline\n openrisc: Properly store r31 to pt_regs on unhandled exceptions\n clocksource/drivers/davinci: Fix memory leak in davinci_timer_register when init fails\n clocksource: davinci: axe a pointless __GFP_NOFAIL\n clocksource/drivers/davinci: Avoid trailing \u0027\\n\u0027 hidden in pr_fmt()\n RDMA/mlx5: Use correct device num_ports when modify DC\n SUNRPC: remove the maximum number of retries in call_bind_status\n Input: raspberrypi-ts - fix refcount leak in rpi_ts_probe\n input: raspberrypi-ts: Release firmware handle when not needed\n firmware: raspberrypi: Introduce devm_rpi_firmware_get()\n firmware: raspberrypi: Keep count of all consumers\n NFSv4.1: Always send a RECLAIM_COMPLETE after establishing lease\n IB/hfi1: Fix SDMA mmu_rb_node not being evicted in LRU order\n RDMA/siw: Remove namespace check from siw_netdev_event()\n clk: add missing of_node_put() in \"assigned-clocks\" property parsing\n power: supply: generic-adc-battery: fix unit scaling\n rtc: meson-vrtc: Use ktime_get_real_ts64() to get the current time\n RDMA/mlx4: Prevent shift wrapping in set_user_sq_size()\n rtc: omap: include header for omap_rtc_power_off_program prototype\n RDMA/rdmavt: Delete unnecessary NULL check\n RDMA/siw: Fix potential page_array out of range access\n perf/core: Fix hardlockup failure caused by perf throttle\n powerpc/rtas: use memmove for potentially overlapping buffer copy\n macintosh: via-pmu-led: requires ATA to be set\n powerpc/sysdev/tsi108: fix resource printk format warnings\n powerpc/wii: fix resource printk format warnings\n powerpc/mpc512x: fix resource printk format warning\n macintosh/windfarm_smu_sat: Add missing of_node_put()\n spmi: Add a check for remove callback when removing a SPMI driver\n staging: rtl8192e: Fix W_DISABLE# does not work after stop/start\n serial: 8250: Add missing wakeup event reporting\n tty: serial: fsl_lpuart: adjust buffer length to the intended size\n firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe\n usb: mtu3: fix kernel panic at qmu transfer done irq handler\n usb: chipidea: fix missing goto in `ci_hdrc_probe`\n sh: sq: Fix incorrect element size for allocating bitmap buffer\n uapi/linux/const.h: prefer ISO-friendly __typeof__\n spi: cadence-quadspi: fix suspend-resume implementations\n mtd: spi-nor: cadence-quadspi: Handle probe deferral while requesting DMA channel\n mtd: spi-nor: cadence-quadspi: Don\u0027t initialize rx_dma_complete on failure\n mtd: spi-nor: cadence-quadspi: Provide a way to disable DAC mode\n mtd: spi-nor: cadence-quadspi: Make driver independent of flash geometry\n scripts/gdb: bail early if there are no generic PD\n PM: domains: Fix up terminology with parent/child\n scripts/gdb: bail early if there are no clocks\n ia64: salinfo: placate defined-but-not-used warning\n ia64: mm/contig: fix section mismatch warning/error\n of: Fix modalias string generation\n vmci_host: fix a race condition in vmci_host_poll() causing GPF\n spi: fsl-spi: Fix CPM/QE mode Litte Endian\n spi: qup: Don\u0027t skip cleanup in remove\u0027s error path\n linux/vt_buffer.h: allow either builtin or modular for macros\n ASoC: es8316: Handle optional IRQ assignment\n ASoC: es8316: Use IRQF_NO_AUTOEN when requesting the IRQ\n genirq: Add IRQF_NO_AUTOEN for request_irq/nmi()\n PCI: imx6: Install the fault handler only on compatible match\n usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition\n iio: light: max44009: add missing OF device matching\n fpga: bridge: fix kernel-doc parameter description\n usb: host: xhci-rcar: remove leftover quirk handling\n pstore: Revert pmsg_lock back to a normal mutex\n tcp/udp: Fix memleaks of sk and zerocopy skbs with TX timestamp.\n net: amd: Fix link leak when verifying config failed\n netlink: Use copy_to_user() for optval in netlink_getsockopt().\n Revert \"Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work\"\n ipv4: Fix potential uninit variable access bug in __ip_make_skb()\n netfilter: nf_tables: don\u0027t write table validation state without mutex\n bpf: Don\u0027t EFAULT for getsockopt with optval\u003dNULL\n ixgbe: Enable setting RSS table to default values\n ixgbe: Allow flow hash to be set via ethtool\n wifi: iwlwifi: mvm: check firmware response size\n wifi: iwlwifi: make the loop for card preparation effective\n md/raid10: fix memleak of md thread\n md: update the optimal I/O size on reshape\n md/raid10: fix memleak for \u0027conf-\u003ebio_split\u0027\n md/raid10: fix leak of \u0027r10bio-\u003eremaining\u0027 for recovery\n bpf, sockmap: Revert buggy deadlock fix in the sockhash and sockmap\n nvme-fcloop: fix \"inconsistent {IN-HARDIRQ-W} -\u003e {HARDIRQ-ON-W} usage\"\n nvme: fix async event trace event\n nvme: handle the persistent internal error AER\n bpf, sockmap: fix deadlocks in the sockhash and sockmap\n scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()\n crypto: drbg - Only fail when jent is unavailable in FIPS mode\n crypto: drbg - make drbg_prepare_hrng() handle jent instantiation errors\n bpftool: Fix bug for long instructions in program CFG dumps\n wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_reg()\n wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_rfreg()\n rtlwifi: Replace RT_TRACE with rtl_dbg\n rtlwifi: Start changing RT_TRACE into rtl_dbg\n f2fs: handle dqget error in f2fs_transfer_project_quota()\n scsi: megaraid: Fix mega_cmd_done() CMDID_INT_CMDS\n scsi: target: iscsit: Fix TAS handling during conn cleanup\n net/packet: convert po-\u003eauxdata to an atomic flag\n net/packet: convert po-\u003eorigdev to an atomic flag\n net/packet: annotate accesses to po-\u003exmit\n vlan: partially enable SIOCSHWTSTAMP in container\n scm: fix MSG_CTRUNC setting condition for SO_PASSSEC\n wifi: rtw88: mac: Return the original error from rtw_mac_power_switch()\n wifi: rtw88: mac: Return the original error from rtw_pwr_seq_parser()\n tools: bpftool: Remove invalid \\\u0027 json escape\n wifi: ath6kl: reduce WARN to dev_dbg() in callback\n wifi: ath5k: fix an off by one check in ath5k_eeprom_read_freq_list()\n wifi: ath9k: hif_usb: fix memory leak of remain_skbs\n wifi: ath6kl: minor fix for allocation size\n tick/common: Align tick period with the HZ tick.\n tick: Get rid of tick_period\n tick/sched: Optimize tick_do_update_jiffies64() further\n tick/sched: Reduce seqcount held scope in tick_do_update_jiffies64()\n tick/sched: Use tick_next_period for lockless quick check\n timekeeping: Split jiffies seqlock\n debugobject: Prevent init race with static objects\n arm64: kgdb: Set PSTATE.SS to 1 to re-enable single-step\n x86/ioapic: Don\u0027t return 0 from arch_dynirq_lower_bound()\n regulator: stm32-pwr: fix of_iomap leak\n media: rc: gpio-ir-recv: Fix support for wake-up\n media: rcar_fdp1: Fix refcount leak in probe and remove function\n media: rcar_fdp1: Fix the correct variable assignments\n media: rcar_fdp1: Make use of the helper function devm_platform_ioremap_resource()\n media: rcar_fdp1: fix pm_runtime_get_sync() usage count\n media: rcar_fdp1: simplify error check logic at fdp_open()\n media: saa7134: fix use after free bug in saa7134_finidev due to race condition\n media: dm1105: Fix use after free bug in dm1105_remove due to race condition\n x86/apic: Fix atomic update of offset in reserve_eilvt_offset()\n regulator: core: Avoid lockdep reports when resolving supplies\n regulator: core: Consistently set mutex_owner when using ww_mutex_lock_slow()\n drm/lima/lima_drv: Add missing unwind goto in lima_pdev_probe()\n mmc: sdhci-of-esdhc: fix quirk to ignore command inhibit for data\n drm/msm/adreno: drop bogus pm_runtime_set_active()\n drm/msm/adreno: Defer enabling runpm until hw_init()\n drm/msm: fix unbalanced pm_runtime_enable in adreno_gpu_{init, cleanup}\n firmware: qcom_scm: Clear download bit during reboot\n media: av7110: prevent underflow in write_ts_to_decoder()\n media: uapi: add MEDIA_BUS_FMT_METADATA_FIXED media bus format.\n media: bdisp: Add missing check for create_workqueue\n ARM: dts: qcom: ipq8064: Fix the PCI I/O port range\n ARM: dts: qcom: ipq8064: reduce pci IO size to 64K\n ARM: dts: qcom: ipq4019: Fix the PCI I/O port range\n EDAC/skx: Fix overflows on the DRAM row address mapping arrays\n arm64: dts: renesas: r8a774c0: Remove bogus voltages from OPP table\n arm64: dts: renesas: r8a77990: Remove bogus voltages from OPP table\n drm/probe-helper: Cancel previous job before starting new one\n drm/vgem: add missing mutex_destroy\n drm/rockchip: Drop unbalanced obj unref\n erofs: fix potential overflow calculating xattr_isize\n erofs: stop parsing non-compact HEAD index if clusterofs is invalid\n tpm, tpm_tis: Do not skip reset of original interrupt vector\n selinux: ensure av_permissions.h is built when needed\n selinux: fix Makefile dependencies of flask.h\n ubifs: Free memory for tmpfile name\n ubi: Fix return value overwrite issue in try_write_vid_and_data()\n ubifs: Fix memleak when insert_old_idx() failed\n Revert \"ubifs: dirty_cow_znode: Fix memleak in error handling path\"\n i2c: omap: Fix standard mode false ACK readings\n KVM: nVMX: Emulate NOPs in L2, and PAUSE if it\u0027s not intercepted\n reiserfs: Add security prefix to xattr name in reiserfs_security_write()\n ring-buffer: Sync IRQ works before buffer destruction\n pwm: meson: Fix g12a ao clk81 name\n pwm: meson: Fix axg ao mux parents\n kheaders: Use array declaration instead of char\n ipmi: fix SSIF not responding under certain cond.\n ipmi:ssif: Add send_retries increment\n MIPS: fw: Allow firmware to pass a empty env\n xhci: fix debugfs register accesses while suspended\n debugfs: regset32: Add Runtime PM support\n staging: iio: resolver: ads1210: fix config mode\n perf sched: Cast PTHREAD_STACK_MIN to int as it may turn into sysconf(__SC_THREAD_STACK_MIN_VALUE)\n USB: dwc3: fix runtime pm imbalance on unbind\n USB: dwc3: fix runtime pm imbalance on probe errors\n asm-generic/io.h: suppress endianness warnings for readq() and writeq()\n ASoC: Intel: bytcr_rt5640: Add quirk for the Acer Iconia One 7 B1-750\n iio: adc: palmas_gpadc: fix NULL dereference on rmmod\n USB: serial: option: add UNISOC vendor and TOZED LT70C product\n bluetooth: Perform careful capability checks in hci_sock_ioctl()\n drm/fb-helper: set x/yres_virtual in drm_fb_helper_check_var\n wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()\n counter: 104-quad-8: Fix race condition between FLAG and CNTR reads\n\n Conflicts:\n\tdrivers/firmware/qcom_scm.c\n\tdrivers/md/dm-verity-target.c\n\tdrivers/usb/dwc3/core.c\n\tdrivers/usb/dwc3/debugfs.c\n\tdrivers/usb/gadget/function/f_fs.c\n\nChange-Id: Iedad1fcca99a9b739e08ea6d60988800b3a7aefa\n" }, { "commit": "34df0a4c545061d4a472e40c108b5592fbeced88", "tree": "f2f68a3d6bcefabf78f9f6241de5c26bbfb83862", "parents": [ "f9395ee5bd9d0126a85f5652fb585ac901f2ba2a", "887433e4bc9394676d22c038dba33a27405f94e8" ], "author": { "name": "Greg Kroah-Hartman", "email": "gregkh@google.com", "time": "Thu Aug 03 10:56:28 2023 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@google.com", "time": "Thu Aug 03 10:56:28 2023 +0000" }, "message": "Merge 5.4.251 into android11-5.4-lts\n\nChanges in 5.4.251\n\tgfs2: Don\u0027t deref jdesc in evict\n\tx86/smp: Use dedicated cache-line for mwait_play_dead()\n\tvideo: imsttfb: check for ioremap() failures\n\tfbdev: imsttfb: Fix use after free bug in imsttfb_probe\n\tHID: wacom: Use ktime_t rather than int when dealing with timestamps\n\tdrm/i915: Initialise outparam for error return from wait_for_register\n\tscripts/tags.sh: Resolve gtags empty index generation\n\tdrm/amdgpu: Validate VM ioctl flags.\n\tbgmac: fix *initial* chip reset to support BCM5358\n\tx86/resctrl: Use is_closid_match() in more places\n\tx86/resctrl: Only show tasks\u0027 pid in current pid namespace\n\tmd/raid10: check slab-out-of-bounds in md_bitmap_get_counter\n\tmd/raid10: fix overflow of md/safe_mode_delay\n\tmd/raid10: fix wrong setting of max_corr_read_errors\n\tmd/raid10: fix null-ptr-deref of mreplace in raid10_sync_request\n\tmd/raid10: fix io loss while replacement replace rdev\n\tirqchip/jcore-aic: Kill use of irq_create_strict_mappings()\n\tirqchip/jcore-aic: Fix missing allocation of IRQ descriptors\n\ttracing/timer: Add missing hrtimer modes to decode_hrtimer_mode().\n\tclocksource/drivers/cadence-ttc: Use ttc driver as platform driver\n\tclocksource/drivers/cadence-ttc: Fix memory leak in ttc_timer_probe\n\tPM: domains: fix integer overflow issues in genpd_parse_state()\n\tpowercap: RAPL: Fix CONFIG_IOSF_MBI dependency\n\tARM: 9303/1: kprobes: avoid missing-declaration warnings\n\tevm: Complete description of evm_inode_setattr()\n\tpstore/ram: Add check for kstrdup\n\tima: Fix build warnings\n\twifi: ath9k: fix AR9003 mac hardware hang check register offset calculation\n\twifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx\n\tsamples/bpf: Fix buffer overflow in tcp_basertt\n\tspi: spi-geni-qcom: Correct CS_TOGGLE bit in SPI_TRANS_CFG\n\twifi: mwifiex: Fix the size of a memory allocation in mwifiex_ret_802_11_scan()\n\tnfc: constify several pointers to u8, char and sk_buff\n\tnfc: llcp: fix possible use of uninitialized variable in nfc_llcp_send_connect()\n\tregulator: core: Fix more error checking for debugfs_create_dir()\n\tregulator: core: Streamline debugfs operations\n\twifi: orinoco: Fix an error handling path in spectrum_cs_probe()\n\twifi: orinoco: Fix an error handling path in orinoco_cs_probe()\n\twifi: atmel: Fix an error handling path in atmel_probe()\n\twl3501_cs: Fix a bunch of formatting issues related to function docs\n\twl3501_cs: Remove unnecessary NULL check\n\twl3501_cs: Fix misspelling and provide missing documentation\n\tnet: create netdev-\u003edev_addr assignment helpers\n\twl3501_cs: use eth_hw_addr_set()\n\twifi: wl3501_cs: Fix an error handling path in wl3501_probe()\n\twifi: ray_cs: Utilize strnlen() in parse_addr()\n\twifi: ray_cs: Drop useless status variable in parse_addr()\n\twifi: ray_cs: Fix an error handling path in ray_probe()\n\twifi: ath9k: don\u0027t allow to overwrite ENDPOINT0 attributes\n\twifi: rsi: Do not set MMC_PM_KEEP_POWER in shutdown\n\twatchdog/perf: define dummy watchdog_update_hrtimer_threshold() on correct config\n\twatchdog/perf: more properly prevent false positives with turbo modes\n\tkexec: fix a memory leak in crash_shrink_memory()\n\tmemstick r592: make memstick_debug_get_tpc_name() static\n\twifi: ath9k: Fix possible stall on ath9k_txq_list_has_key()\n\trtnetlink: extend RTEXT_FILTER_SKIP_STATS to IFLA_VF_INFO\n\twifi: iwlwifi: pull from TXQs with softirqs disabled\n\twifi: cfg80211: rewrite merging of inherited elements\n\twifi: ath9k: convert msecs to jiffies where needed\n\tnetlink: fix potential deadlock in netlink_set_err()\n\tnetlink: do not hard code device address lenth in fdb dumps\n\tselftests: rtnetlink: remove netdevsim device after ipsec offload test\n\tgtp: Fix use-after-free in __gtp_encap_destroy().\n\tnfc: llcp: simplify llcp_sock_connect() error paths\n\tnet: nfc: Fix use-after-free caused by nfc_llcp_find_local\n\tlib/ts_bm: reset initial match offset for every block of text\n\tnetfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one\n\tnetfilter: nf_conntrack_sip: fix the ct_sip_parse_numerical_param() return value.\n\tipvlan: Fix return value of ipvlan_queue_xmit()\n\tnetlink: Add __sock_i_ino() for __netlink_diag_dump().\n\tradeon: avoid double free in ci_dpm_init()\n\tInput: drv260x - sleep between polling GO bit\n\tARM: dts: BCM5301X: Drop \"clock-names\" from the SPI node\n\tInput: adxl34x - do not hardcode interrupt trigger type\n\tdrm: sun4i_tcon: use devm_clk_get_enabled in `sun4i_tcon_init_clocks`\n\tRDMA/bnxt_re: Fix to remove an unnecessary log\n\tARM: dts: gta04: Move model property out of pinctrl node\n\tarm64: dts: qcom: msm8916: correct camss unit address\n\tdrm/panel: simple: fix active size for Ampire AM-480272H3TMQW-T01H\n\tARM: ep93xx: fix missing-prototype warnings\n\tmemory: brcmstb_dpfe: fix testing array offset after use\n\tASoC: es8316: Increment max value for ALC Capture Target Volume control\n\tASoC: es8316: Do not set rate constraints for unsupported MCLKs\n\tsoc/fsl/qe: fix usb.c build errors\n\tIB/hfi1: Fix sdma.h tx-\u003enum_descs off-by-one errors\n\tarm64: dts: renesas: ulcb-kf: Remove flow control for SCIF1\n\tfbdev: omapfb: lcd_mipid: Fix an error handling path in mipid_spi_probe()\n\tdrm/amdkfd: Fix potential deallocation of previously deallocated memory.\n\tdrm/radeon: fix possible division-by-zero errors\n\tclk: tegra: tegra124-emc: Fix potential memory leak\n\tALSA: ac97: Fix possible NULL dereference in snd_ac97_mixer\n\tclk: cdce925: check return value of kasprintf()\n\tclk: keystone: sci-clk: check return value of kasprintf()\n\tASoC: imx-audmix: check return value of devm_kasprintf()\n\tscsi: qedf: Fix NULL dereference in error handling\n\tPCI/ASPM: Disable ASPM on MFD function removal to avoid use-after-free\n\tscsi: 3w-xxxx: Add error handling for initialization failure in tw_probe()\n\tPCI: pciehp: Cancel bringup sequence if card is not present\n\tPCI: ftpci100: Release the clock resources\n\tPCI: Add pci_clear_master() stub for non-CONFIG_PCI\n\tpinctrl: cherryview: Return correct value if pin in push-pull mode\n\tperf dwarf-aux: Fix off-by-one in die_get_varname()\n\tpinctrl: at91-pio4: check return value of devm_kasprintf()\n\tpowerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary\n\thwrng: virtio - add an internal buffer\n\thwrng: virtio - don\u0027t wait on cleanup\n\thwrng: virtio - don\u0027t waste entropy\n\thwrng: virtio - always add a pending request\n\thwrng: virtio - Fix race on data_avail and actual data\n\tcrypto: nx - fix build warnings when DEBUG_FS is not enabled\n\tmodpost: fix section mismatch message for R_ARM_ABS32\n\tmodpost: fix section mismatch message for R_ARM_{PC24,CALL,JUMP24}\n\tcrypto: marvell/cesa - Fix type mismatch warning\n\tmodpost: fix off by one in is_executable_section()\n\tARC: define ASM_NL and __ALIGN(_STR) outside #ifdef __ASSEMBLY__ guard\n\tNFSv4.1: freeze the session table upon receiving NFS4ERR_BADSESSION\n\thwrng: st - Fix W\u003d1 unused variable warning\n\thwrng: st - keep clock enabled while hwrng is registered\n\tUSB: serial: option: add LARA-R6 01B PIDs\n\tusb: dwc3: gadget: Propagate core init errors to UDC during pullup\n\tblock: fix signed int overflow in Amiga partition support\n\tblock: change all __u32 annotations to __be32 in affs_hardblocks.h\n\tw1: fix loop in w1_fini()\n\tsh: j2: Use ioremap() to translate device tree address into kernel memory\n\tmedia: usb: Check az6007_read() return value\n\tmedia: videodev2.h: Fix struct v4l2_input tuner index comment\n\tmedia: usb: siano: Fix warning due to null work_func_t function pointer\n\tusb: dwc3: qcom: Fix potential memory leak\n\textcon: Fix kernel doc of property fields to avoid warnings\n\textcon: Fix kernel doc of property capability fields to avoid warnings\n\tusb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe()\n\tusb: hide unused usbfs_notify_suspend/resume functions\n\tmfd: rt5033: Drop rt5033-battery sub-device\n\tKVM: s390: fix KVM_S390_GET_CMMA_BITS for GFNs in memslot holes\n\tusb: dwc3: qcom: Release the correct resources in dwc3_qcom_remove()\n\tmfd: intel-lpss: Add missing check for platform_get_resource\n\tserial: 8250_omap: Use force_suspend and resume for system suspend\n\tmfd: stmfx: Fix error path in stmfx_chip_init\n\tKVM: s390: vsie: fix the length of APCB bitmap\n\tmfd: stmpe: Only disable the regulators if they are enabled\n\tpwm: imx-tpm: force \u0027real_period\u0027 to be zero in suspend\n\tpwm: sysfs: Do not apply state to already disabled PWMs\n\trtc: st-lpc: Release some resources in st_rtc_probe() in case of error\n\tsctp: fix potential deadlock on \u0026net-\u003esctp.addr_wq_lock\n\tAdd MODULE_FIRMWARE() for FIRMWARE_TG357766.\n\tspi: bcm-qspi: return error if neither hif_mspi nor mspi is available\n\tmailbox: ti-msgmgr: Fill non-message tx data fields with 0x0\n\tf2fs: fix error path handling in truncate_dnode()\n\tpowerpc: allow PPC_EARLY_DEBUG_CPM only when SERIAL_CPM\u003dy\n\tnet: bridge: keep ports without IFF_UNICAST_FLT in BR_PROMISC mode\n\ttcp: annotate data races in __tcp_oow_rate_limited()\n\txsk: Improve documentation for AF_XDP\n\txsk: Honor SO_BINDTODEVICE on bind\n\tnet/sched: act_pedit: Add size check for TCA_PEDIT_PARMS_EX\n\tnet: dsa: tag_sja1105: fix MAC DA patching from meta frames\n\tsh: dma: Fix DMA channel offset calculation\n\ti2c: xiic: Defer xiic_wakeup() and __xiic_start_xfer() in xiic_process()\n\ti2c: xiic: Don\u0027t try to handle more interrupt events after error\n\tALSA: jack: Fix mutex call in snd_jack_report()\n\tNFSD: add encoding of op_recall flag for write delegation\n\tmmc: core: disable TRIM on Kingston EMMC04G-M627\n\tmmc: core: disable TRIM on Micron MTFC4GACAJCN-1M\n\tmmc: sdhci: fix DMA configure compatibility issue when 64bit DMA mode is used.\n\tbcache: Remove unnecessary NULL point check in node allocations\n\tintegrity: Fix possible multiple allocation in integrity_inode_get()\n\tjffs2: reduce stack usage in jffs2_build_xattr_subsystem()\n\tfs: avoid empty option when generating legacy mount string\n\text4: Remove ext4 locking of moved directory\n\tRevert \"f2fs: fix potential corruption when moving a directory\"\n\tfs: Establish locking order for unrelated directories\n\tfs: Lock moved directories\n\tbtrfs: fix race when deleting quota root from the dirty cow roots list\n\tARM: orion5x: fix d2net gpio initialization\n\tfs: no need to check source\n\tfanotify: disallow mount/sb marks on kernel internal pseudo fs\n\tblock: add overflow checks for Amiga partition support\n\tnetfilter: nf_tables: fix nat hook table deletion\n\tnetfilter: nftables: add helper function to set the base sequence number\n\tnetfilter: add helper function to set up the nfnetlink header and use it\n\tnetfilter: nf_tables: use net_generic infra for transaction data\n\tnetfilter: nf_tables: add rescheduling points during loop detection walks\n\tnetfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE\n\tnetfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain\n\tnetfilter: nf_tables: reject unbound anonymous set before commit phase\n\tnetfilter: nf_tables: unbind non-anonymous set if rule construction fails\n\tnetfilter: nf_tables: fix scheduling-while-atomic splat\n\tnetfilter: conntrack: Avoid nf_ct_helper_hash uses after free\n\tnetfilter: nf_tables: prevent OOB access in nft_byteorder_eval\n\ttty: serial: fsl_lpuart: add earlycon for imx8ulp platform\n\tblock/partition: fix signedness issue for Amiga partitions\n\tnet: lan743x: Don\u0027t sleep in atomic context\n\tworkqueue: clean up WORK_* constant types, clarify masking\n\tdrm/panel: Initialise panel dev and funcs through drm_panel_init()\n\tdrm/panel: Add and fill drm_panel type field\n\tdrm/panel: simple: Add connector_type for innolux_at043tn24\n\tigc: Remove delay during TX ring configuration\n\tigc: set TP bit in \u0027supported\u0027 and \u0027advertising\u0027 fields of ethtool_link_ksettings\n\tscsi: qla2xxx: Fix error code in qla2x00_start_sp()\n\tnet: mvneta: fix txq_map in case of txq_number\u003d\u003d1\n\tnet/sched: cls_fw: Fix improper refcount update leads to use-after-free\n\tionic: improve irq numa locality\n\tionic: clean irq affinity on queue deinit\n\tionic: move irq request to qcq alloc\n\tionic: ionic_intr_free parameter change\n\tionic: remove WARN_ON to prevent panic_on_warn\n\ticmp6: Fix null-ptr-deref of ip6_null_entry-\u003ert6i_idev in icmp6_dev().\n\tudp6: fix udp6_ehashfn() typo\n\tntb: idt: Fix error handling in idt_pci_driver_init()\n\tNTB: amd: Fix error handling in amd_ntb_pci_driver_init()\n\tntb: intel: Fix error handling in intel_ntb_pci_driver_init()\n\tNTB: ntb_transport: fix possible memory leak while device_register() fails\n\tNTB: ntb_tool: Add check for devm_kcalloc\n\tipv6/addrconf: fix a potential refcount underflow for idev\n\tplatform/x86: wmi: Replace UUID redefinitions by their originals\n\tplatform/x86: wmi: Fix indentation in some cases\n\tplatform/x86: wmi: remove unnecessary argument\n\tplatform/x86: wmi: use guid_t and guid_equal()\n\tplatform/x86: wmi: move variables\n\tplatform/x86: wmi: Break possible infinite loop when parsing GUID\n\terofs: avoid infinite loop in z_erofs_do_read_page() when reading beyond EOF\n\twifi: airo: avoid uninitialized warning in airo_get_rate()\n\tcls_flower: Add extack support for src and dst port range options\n\tnet/sched: flower: Ensure both minimum and maximum ports are specified\n\tnet/sched: make psched_mtu() RTNL-less safe\n\tpinctrl: amd: Fix mistake in handling clearing pins at startup\n\tpinctrl: amd: Detect internal GPIO0 debounce handling\n\tpinctrl: amd: Only use special debounce behavior for GPIO 0\n\ttpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation\n\tmtd: rawnand: meson: fix unaligned DMA buffers handling\n\tnet: bcmgenet: Ensure MDIO unregistration has clocks enabled\n\tpowerpc: Fail build if using recordmcount with binutils v2.37\n\tmisc: fastrpc: Create fastrpc scalar with correct buffer count\n\tSUNRPC: Fix UAF in svc_tcp_listen_data_ready()\n\terofs: fix compact 4B support for 16k block size\n\text4: fix wrong unit use in ext4_mb_clear_bb\n\text4: only update i_reserved_data_blocks on successful block allocation\n\tjfs: jfs_dmap: Validate db_l2nbperpage while mounting\n\tPCI/PM: Avoid putting EloPOS E2/S2/H2 PCIe Ports in D3cold\n\tPCI: Add function 1 DMA alias quirk for Marvell 88SE9235\n\tPCI: qcom: Disable write access to read only registers for IP v2.3.3\n\tPCI: rockchip: Assert PCI Configuration Enable bit after probe\n\tPCI: rockchip: Write PCI Device ID to correct register\n\tPCI: rockchip: Add poll and timeout to wait for PHY PLLs to be locked\n\tPCI: rockchip: Fix legacy IRQ generation for RK3399 PCIe endpoint core\n\tPCI: rockchip: Use u32 variable to access 32-bit registers\n\tPCI: rockchip: Set address alignment for endpoint mode\n\tmisc: pci_endpoint_test: Free IRQs before removing the device\n\tmisc: pci_endpoint_test: Re-init completion for every test\n\tmd/raid0: add discard support for the \u0027original\u0027 layout\n\tfs: dlm: return positive pid value for F_GETLK\n\tdrm/atomic: Allow vblank-enabled + self-refresh \"disable\"\n\tdrm/rockchip: vop: Leave vblank enabled in self-refresh\n\tserial: atmel: don\u0027t enable IRQs prematurely\n\tfirmware: stratix10-svc: Fix a potential resource leak in svc_create_memory_pool()\n\thwrng: imx-rngc - fix the timeout for init and self check\n\tceph: don\u0027t let check_caps skip sending responses for revoke msgs\n\tmeson saradc: fix clock divider mask length\n\tRevert \"8250: add support for ASIX devices with a FIFO bug\"\n\ttty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() in case of error\n\ttty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() when iterating clk\n\ttracing/histograms: Add histograms to hist_vars if they have referenced variables\n\tring-buffer: Fix deadloop issue on reading trace_pipe\n\txtensa: ISS: fix call to split_if_spec\n\ttracing: Fix null pointer dereference in tracing_err_log_open()\n\ttracing/probes: Fix not to count error code to total length\n\tscsi: qla2xxx: Wait for io return on terminate rport\n\tscsi: qla2xxx: Fix potential NULL pointer dereference\n\tscsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport()\n\tscsi: qla2xxx: Correct the index of array\n\tscsi: qla2xxx: Pointer may be dereferenced\n\tscsi: qla2xxx: Remove unused nvme_ls_waitq wait queue\n\tdrm/atomic: Fix potential use-after-free in nonblocking commits\n\tperf probe: Add test for regression introduced by switch to die_get_decl_file()\n\tbtrfs: fix warning when putting transaction with qgroups enabled after abort\n\tfuse: revalidate: don\u0027t invalidate if interrupted\n\tselftests: tc: set timeout to 15 minutes\n\tcan: bcm: Fix UAF in bcm_proc_show()\n\tdrm/client: Fix memory leak in drm_client_target_cloned\n\tdrm/client: Fix memory leak in drm_client_modeset_probe\n\text4: correct inline offset when handling xattrs in inode body\n\tdebugobjects: Recheck debug_objects_enabled before reporting\n\tnbd: Add the maximum limit of allocated index in nbd_dev_add\n\tmd: fix data corruption for raid456 when reshape restart while grow up\n\tmd/raid10: prevent soft lockup while flush writes\n\tposix-timers: Ensure timer ID search-loop limit is valid\n\tarm64: mm: fix VA-range sanity check\n\tsched/fair: Don\u0027t balance task to its current running CPU\n\tbpf: Address KCSAN report on bpf_lru_list\n\tdevlink: report devlink_port_type_warn source device\n\twifi: wext-core: Fix -Wstringop-overflow warning in ioctl_standard_iw_point()\n\twifi: iwlwifi: mvm: avoid baid size integer overflow\n\tigb: Fix igb_down hung on surprise removal\n\tspi: bcm63xx: fix max prepend length\n\tfbdev: imxfb: warn about invalid left/right margin\n\tpinctrl: amd: Use amd_pinconf_set() for all config options\n\tnet: ethernet: ti: cpsw_ale: Fix cpsw_ale_get_field()/cpsw_ale_set_field()\n\tiavf: Fix use-after-free in free_netdev\n\tnet:ipv6: check return value of pskb_trim()\n\tRevert \"tcp: avoid the lookup process failing to get sk in ehash table\"\n\tfbdev: au1200fb: Fix missing IRQ check in au1200fb_drv_probe\n\tllc: Don\u0027t drop packet from non-root netns.\n\tnetfilter: nf_tables: fix spurious set element insertion failure\n\tnetfilter: nf_tables: can\u0027t schedule in nft_chain_validate\n\ttcp: annotate data-races around tp-\u003etcp_tx_delay\n\tnet: Replace the limit of TCP_LINGER2 with TCP_FIN_TIMEOUT_MAX\n\ttcp: annotate data-races around tp-\u003elinger2\n\ttcp: annotate data-races around rskq_defer_accept\n\ttcp: annotate data-races around tp-\u003enotsent_lowat\n\ttcp: annotate data-races around fastopenq.max_qlen\n\ttracing/histograms: Return an error if we fail to add histogram to hist_vars list\n\tLinux 5.4.251\n\nChange-Id: I0b8e1ac44b19c6c2c4f5f055395b3cbf6aecbbee\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@google.com\u003e\n" }, { "commit": "02dc8e8bdbe4412cfcf17ee3873e63fa5a55b957", "tree": "ac5bb2883c83fbbc1517c0dfd87df09d13d87622", "parents": [ "1030c0c309686a9b48d179f9e761f4b125da9142" ], "author": { "name": "Dan Carpenter", "email": "dan.carpenter@linaro.org", "time": "Thu Jun 08 11:23:40 2023 +0300" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Jul 27 08:37:18 2023 +0200" }, "message": "modpost: fix off by one in is_executable_section()\n\n[ Upstream commit 3a3f1e573a105328a2cca45a7cfbebabbf5e3192 ]\n\nThe \u003e comparison should be \u003e\u003d to prevent an out of bounds array\naccess.\n\nFixes: 52dc0595d540 (\"modpost: handle relocations mismatch in __ex_table.\")\nSigned-off-by: Dan Carpenter \u003cdan.carpenter@linaro.org\u003e\nSigned-off-by: Masahiro Yamada \u003cmasahiroy@kernel.org\u003e\nSigned-off-by: Sasha Levin \u003csashal@kernel.org\u003e\n" }, { "commit": "ad3c4ecff00bee9f52638c0116a2415189c4093f", "tree": "7d9b80f53dd1774cb1ce5d2bcf57ed69878673d8", "parents": [ "084bf580019cfa168a7821832136212a9d44619e" ], "author": { "name": "Masahiro Yamada", "email": "masahiroy@kernel.org", "time": "Thu Jun 01 21:09:56 2023 +0900" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Jul 27 08:37:18 2023 +0200" }, "message": "modpost: fix section mismatch message for R_ARM_{PC24,CALL,JUMP24}\n\n[ Upstream commit 56a24b8ce6a7f9c4a21b2276a8644f6f3d8fc14d ]\n\naddend_arm_rel() processes R_ARM_PC24, R_ARM_CALL, R_ARM_JUMP24 in a\nwrong way.\n\nHere, test code.\n\n[test code for R_ARM_JUMP24]\n\n .section .init.text,\"ax\"\n bar:\n bx lr\n\n .section .text,\"ax\"\n .globl foo\n foo:\n b bar\n\n[test code for R_ARM_CALL]\n\n .section .init.text,\"ax\"\n bar:\n bx lr\n\n .section .text,\"ax\"\n .globl foo\n foo:\n push {lr}\n bl bar\n pop {pc}\n\nIf you compile it with ARM multi_v7_defconfig, modpost will show the\nsymbol name, (unknown).\n\n WARNING: modpost: vmlinux.o: section mismatch in reference: foo (section: .text) -\u003e (unknown) (section: .init.text)\n\n(You need to use GNU linker instead of LLD to reproduce it.)\n\nFix the code to make modpost show the correct symbol name.\n\nI imported (with adjustment) sign_extend32() from include/linux/bitops.h.\n\nThe \u0027+8\u0027 is the compensation for pc-relative instruction. It is\ndocumented in \"ELF for the Arm Architecture\" [1].\n\n \"If the relocation is pc-relative then compensation for the PC bias\n (the PC value is 8 bytes ahead of the executing instruction in Arm\n state and 4 bytes in Thumb state) must be encoded in the relocation\n by the object producer.\"\n\n[1]: https://github.com/ARM-software/abi-aa/blob/main/aaelf32/aaelf32.rst\n\nFixes: 56a974fa2d59 (\"kbuild: make better section mismatch reports on arm\")\nFixes: 6e2e340b59d2 (\"ARM: 7324/1: modpost: Fix section warnings for ARM for many compilers\")\nSigned-off-by: Masahiro Yamada \u003cmasahiroy@kernel.org\u003e\nSigned-off-by: Sasha Levin \u003csashal@kernel.org\u003e\n" }, { "commit": "084bf580019cfa168a7821832136212a9d44619e", "tree": "5a30603807131f011a7973bc221735c783e090bb", "parents": [ "c893658d9ce62550f1ad263ac53f8f87f3c2e37f" ], "author": { "name": "Masahiro Yamada", "email": "masahiroy@kernel.org", "time": "Thu Jun 01 21:09:55 2023 +0900" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Jul 27 08:37:18 2023 +0200" }, "message": "modpost: fix section mismatch message for R_ARM_ABS32\n\n[ Upstream commit b7c63520f6703a25eebb4f8138fed764fcae1c6f ]\n\naddend_arm_rel() processes R_ARM_ABS32 in a wrong way.\n\nHere, test code.\n\n [test code 1]\n\n #include \u003clinux/init.h\u003e\n\n int __initdata foo;\n int get_foo(void) { return foo; }\n\nIf you compile it with ARM versatile_defconfig, modpost will show the\nsymbol name, (unknown).\n\n WARNING: modpost: vmlinux.o: section mismatch in reference: get_foo (section: .text) -\u003e (unknown) (section: .init.data)\n\n(You need to use GNU linker instead of LLD to reproduce it.)\n\nIf you compile it for other architectures, modpost will show the correct\nsymbol name.\n\n WARNING: modpost: vmlinux.o: section mismatch in reference: get_foo (section: .text) -\u003e foo (section: .init.data)\n\nFor R_ARM_ABS32, addend_arm_rel() sets r-\u003er_addend to a wrong value.\n\nI just mimicked the code in arch/arm/kernel/module.c.\n\nHowever, there is more difficulty for ARM.\n\nHere, test code.\n\n [test code 2]\n\n #include \u003clinux/init.h\u003e\n\n int __initdata foo;\n int get_foo(void) { return foo; }\n\n int __initdata bar;\n int get_bar(void) { return bar; }\n\nWith this commit applied, modpost will show the following messages\nfor ARM versatile_defconfig:\n\n WARNING: modpost: vmlinux.o: section mismatch in reference: get_foo (section: .text) -\u003e foo (section: .init.data)\n WARNING: modpost: vmlinux.o: section mismatch in reference: get_bar (section: .text) -\u003e foo (section: .init.data)\n\nThe reference from \u0027get_bar\u0027 to \u0027foo\u0027 seems wrong.\n\nI have no solution for this because it is true in assembly level.\n\nIn the following output, relocation at 0x1c is no longer associated\nwith \u0027bar\u0027. The two relocation entries point to the same symbol, and\nthe offset to \u0027bar\u0027 is encoded in the instruction \u0027r0, [r3, #4]\u0027.\n\n Disassembly of section .text:\n\n 00000000 \u003cget_foo\u003e:\n 0: e59f3004 ldr r3, [pc, #4] @ c \u003cget_foo+0xc\u003e\n 4: e5930000 ldr r0, [r3]\n 8: e12fff1e bx lr\n c: 00000000 .word 0x00000000\n\n 00000010 \u003cget_bar\u003e:\n 10: e59f3004 ldr r3, [pc, #4] @ 1c \u003cget_bar+0xc\u003e\n 14: e5930004 ldr r0, [r3, #4]\n 18: e12fff1e bx lr\n 1c: 00000000 .word 0x00000000\n\n Relocation section \u0027.rel.text\u0027 at offset 0x244 contains 2 entries:\n Offset Info Type Sym.Value Sym. Name\n 0000000c 00000c02 R_ARM_ABS32 00000000 .init.data\n 0000001c 00000c02 R_ARM_ABS32 00000000 .init.data\n\nWhen find_elf_symbol() gets into a situation where relsym-\u003est_name is\nzero, there is no guarantee to get the symbol name as written in C.\n\nI am keeping the current logic because it is useful in many architectures,\nbut the symbol name is not always correct depending on the optimization.\nI left some comments in find_tosym().\n\nFixes: 56a974fa2d59 (\"kbuild: make better section mismatch reports on arm\")\nSigned-off-by: Masahiro Yamada \u003cmasahiroy@kernel.org\u003e\nSigned-off-by: Sasha Levin \u003csashal@kernel.org\u003e\n" }, { "commit": "2a4cfd5b0354734e6011e7ed17f35f1f3bac9c59", "tree": "78fcaa76bcd2e9f906ce4ccc1bbaab4db00c3ff5", "parents": [ "fff826d665f93bfb7e3e8e076a94cd5c070c2db3" ], "author": { "name": "Ahmed S. Darwish", "email": "darwi@linutronix.de", "time": "Mon May 15 19:32:16 2023 +0200" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Jul 27 08:37:03 2023 +0200" }, "message": "scripts/tags.sh: Resolve gtags empty index generation\n\ncommit e1b37563caffc410bb4b55f153ccb14dede66815 upstream.\n\ngtags considers any file outside of its current working directory\n\"outside the source tree\" and refuses to index it. For O\u003d kernel builds,\nor when \"make\" is invoked from a directory other then the kernel source\ntree, gtags ignores the entire kernel source and generates an empty\nindex.\n\nForce-set gtags current working directory to the kernel source tree.\n\nDue to commit 9da0763bdd82 (\"kbuild: Use relative path when building in\na subdir of the source tree\"), if the kernel build is done in a\nsub-directory of the kernel source tree, the kernel Makefile will set\nthe kernel\u0027s $srctree to \"..\" for shorter compile-time and run-time\nwarnings. Consequently, the list of files to be indexed will be in the\n\"../*\" form, rendering all such paths invalid once gtags switches to the\nkernel source tree as its current working directory.\n\nIf gtags indexing is requested and the build directory is not the kernel\nsource tree, index all files in absolute-path form.\n\nNote, indexing in absolute-path form will not affect the generated\nindex, as paths in gtags indices are always relative to the gtags \"root\ndirectory\" anyway (as evidenced by \"gtags --dump\").\n\nSigned-off-by: Ahmed S. Darwish \u003cdarwi@linutronix.de\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Masahiro Yamada \u003cmasahiroy@kernel.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "a6b9d0d53dcf092bbb57bfa5613e91aece127397", "tree": "bbf7dd82a62bf7b8e627236e31c94bad1d381d10", "parents": [ "f3cc95dafde943da528217f997cf30f86436b613", "61c6111f74e841739de0bc0ff2f9e49d803dce31" ], "author": { "name": "Srinivasarao Pathipati", "email": "quic_c_spathi@quicinc.com", "time": "Wed Jul 26 13:22:28 2023 +0530" }, "committer": { "name": "Srinivasarao Pathipati", "email": "quic_c_spathi@quicinc.com", "time": "Wed Jul 26 14:21:25 2023 +0530" }, "message": "Merge android11-5.4.242+(e699d54) into msm-5.4\n\n* remotes/origin/tmp-e699d54:\n ANDROID: HID: Only utilise UHID provided exports if UHID is enabled\n ANDROID: HID; Over-ride default maximum buffer size when using UHID\n Revert \"ANDROID: AVB error handler to invalidate vbmeta partition.\"\n UPSTREAM: mailbox: mailbox-test: fix a locking issue in mbox_test_message_write()\n UPSTREAM: mailbox: mailbox-test: Fix potential double-free in mbox_test_message_write()\n UPSTREAM: efi: rt-wrapper: Add missing include\n BACKPORT: arm64: efi: Execute runtime services from a dedicated stack\n UPSTREAM: io_uring: have io_kill_timeout() honor the request references\n UPSTREAM: io_uring: don\u0027t drop completion lock before timer is fully initialized\n UPSTREAM: io_uring: always grab lock in io_cancel_async_work()\n UPSTREAM: net: cdc_ncm: Deal with too low values of dwNtbOutMaxSize\n UPSTREAM: cdc_ncm: Fix the build warning\n UPSTREAM: cdc_ncm: Implement the 32-bit version of NCM Transfer Block\n UPSTREAM: ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum\n UPSTREAM: ext4: fix invalid free tracking in ext4_xattr_move_to_block()\n Revert \"Revert \"mm/rmap: Fix anon_vma-\u003edegree ambiguity leading to double-reuse\"\"\n FROMLIST: binder: fix UAF caused by faulty buffer cleanup\n UPSTREAM: usb: musb: mediatek: don\u0027t unregister something that wasn\u0027t registered\n UPSTREAM: net: fix NULL pointer in skb_segment_list\n UPSTREAM: xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()\n UPSTREAM: xfrm: compat: change expression for switch in xfrm_xlate64\n UPSTREAM: perf/core: Call LSM hook after copying perf_event_attr\n UPSTREAM: ext4: fix use-after-free in ext4_xattr_set_entry\n UPSTREAM: ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()\n UPSTREAM: Revert \"ext4: fix use-after-free in ext4_xattr_set_entry\"\n Linux 5.4.242\n ASN.1: Fix check for strdup() success\n iio: adc: at91-sama5d2_adc: fix an error code in at91_adc_allocate_trigger()\n pwm: meson: Explicitly set .polarity in .get_state()\n xfs: fix forkoff miscalculation related to XFS_LITINO(mp)\n sctp: Call inet6_destroy_sock() via sk-\u003esk_destruct().\n dccp: Call inet6_destroy_sock() via sk-\u003esk_destruct().\n inet6: Remove inet6_destroy_sock() in sk-\u003esk_prot-\u003edestroy().\n tcp/udp: Call inet6_destroy_sock() in IPv6 sk-\u003esk_destruct().\n udp: Call inet6_destroy_sock() in setsockopt(IPV6_ADDRFORM).\n ext4: fix use-after-free in ext4_xattr_set_entry\n ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()\n Revert \"ext4: fix use-after-free in ext4_xattr_set_entry\"\n x86/purgatory: Don\u0027t generate debug info for purgatory.ro\n MIPS: Define RUNTIME_DISCARD_EXIT in LD script\n mmc: sdhci_am654: Set HIGH_SPEED_ENA for SDR12 and SDR25\n memstick: fix memory leak if card device is never registered\n nilfs2: initialize unused bytes in segment summary blocks\n iio: light: tsl2772: fix reading proximity-diodes from device tree\n xen/netback: use same error messages for same errors\n nvme-tcp: fix a possible UAF when failing to allocate an io queue\n s390/ptrace: fix PTRACE_GET_LAST_BREAK error handling\n net: dsa: b53: mmap: add phy ops\n scsi: core: Improve scsi_vpd_inquiry() checks\n scsi: megaraid_sas: Fix fw_crash_buffer_show()\n selftests: sigaltstack: fix -Wuninitialized\n Input: i8042 - add quirk for Fujitsu Lifebook A574/H\n f2fs: Fix f2fs_truncate_partial_nodes ftrace event\n e1000e: Disable TSO on i219-LM card to increase speed\n bpf: Fix incorrect verifier pruning due to missing register precision taints\n mlxfw: fix null-ptr-deref in mlxfw_mfa2_tlv_next()\n i40e: fix i40e_setup_misc_vector() error handling\n i40e: fix accessing vsi-\u003eactive_filters without holding lock\n netfilter: nf_tables: fix ifdef to also consider nf_tables\u003dm\n virtio_net: bugfix overflow inside xdp_linearize_page()\n net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg\n regulator: fan53555: Explicitly include bits header\n netfilter: br_netfilter: fix recent physdev match breakage\n arm64: dts: meson-g12-common: specify full DMC range\n ARM: dts: rockchip: fix a typo error for rk3288 spdif node\n Linux 5.4.241\n xfs: force log and push AIL to clear pinned inodes when aborting mount\n xfs: don\u0027t reuse busy extents on extent trim\n xfs: consider shutdown in bmapbt cursor delete assert\n xfs: shut down the filesystem if we screw up quota reservation\n xfs: report corruption only as a regular error\n xfs: set inode size after creating symlink\n xfs: fix up non-directory creation in SGID directories\n xfs: remove the di_version field from struct icdinode\n xfs: simplify a check in xfs_ioctl_setattr_check_cowextsize\n xfs: simplify di_flags2 inheritance in xfs_ialloc\n xfs: only check the superblock version for dinode size calculation\n xfs: add a new xfs_sb_version_has_v3inode helper\n xfs: remove the kuid/kgid conversion wrappers\n xfs: remove the icdinode di_uid/di_gid members\n xfs: ensure that the inode uid/gid match values match the icdinode ones\n xfs: merge the projid fields in struct xfs_icdinode\n xfs: show the proper user quota options\n coresight-etm4: Fix for() loop drvdata-\u003enr_addr_cmp range bug\n watchdog: sbsa_wdog: Make sure the timeout programming is within the limits\n i2c: ocores: generate stop condition after timeout in polling mode\n ubi: Fix deadlock caused by recursively holding work_sem\n mtd: ubi: wl: Fix a couple of kernel-doc issues\n ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size\n asymmetric_keys: log on fatal failures in PE/pkcs7\n verify_pefile: relax wrapper length check\n drm: panel-orientation-quirks: Add quirk for Lenovo Yoga Book X90F\n efi: sysfb_efi: Add quirk for Lenovo Yoga Book X91F/L\n i2c: imx-lpi2c: clean rx/tx buffers upon new message\n power: supply: cros_usbpd: reclassify \"default case!\" as debug\n net: macb: fix a memory corruption in extended buffer descriptor mode\n udp6: fix potential access to stale information\n RDMA/core: Fix GID entry ref leak when create_ah fails\n sctp: fix a potential overflow in sctp_ifwdtsn_skip\n qlcnic: check pci_reset_function result\n niu: Fix missing unwind goto in niu_alloc_channels()\n 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition\n mtd: rawnand: stm32_fmc2: remove unsupported EDO mode\n mtd: rawnand: meson: fix bitmask for length in command word\n mtdblock: tolerate corrected bit-flips\n btrfs: fix fast csum implementation detection\n btrfs: print checksum type and implementation at mount time\n Bluetooth: Fix race condition in hidp_session_thread\n Bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp}\n ALSA: hda/sigmatel: fix S/PDIF out on Intel D*45* motherboards\n ALSA: firewire-tascam: add missing unwind goto in snd_tscm_stream_start_duplex()\n ALSA: i2c/cs8427: fix iec958 mixer control deactivation\n ALSA: hda/sigmatel: add pin overrides for Intel DP45SG motherboard\n ALSA: emu10k1: fix capture interrupt handler unlinking\n Revert \"pinctrl: amd: Disable and mask interrupts on resume\"\n irqdomain: Fix mapping-creation race\n irqdomain: Refactor __irq_domain_alloc_irqs()\n irqdomain: Look for existing mapping only once\n mm/swap: fix swap_info_struct race between swapoff and get_swap_pages()\n ring-buffer: Fix race while reader and writer are on the same page\n drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path\n net_sched: prevent NULL dereference if default qdisc setup failed\n tracing: Free error logs of tracing instances\n can: j1939: j1939_tp_tx_dat_new(): fix out-of-bounds memory access\n ftrace: Mark get_lock_parent_ip() __always_inline\n perf/core: Fix the same task check in perf_event_set_output\n ALSA: hda/realtek: Add quirk for Clevo X370SNW\n nilfs2: fix sysfs interface lifetime\n nilfs2: fix potential UAF of struct nilfs_sc_info in nilfs_segctor_thread()\n tty: serial: fsl_lpuart: avoid checking for transfer complete when UARTCTRL_SBK is asserted in lpuart32_tx_empty\n tty: serial: sh-sci: Fix Rx on RZ/G2L SCI\n tty: serial: sh-sci: Fix transmit end interrupt handler\n iio: dac: cio-dac: Fix max DAC write value check for 12-bit\n iio: adc: ti-ads7950: Set `can_sleep` flag for GPIO chip\n USB: serial: option: add Quectel RM500U-CN modem\n USB: serial: option: add Telit FE990 compositions\n usb: typec: altmodes/displayport: Fix configure initial pin assignment\n USB: serial: cp210x: add Silicon Labs IFS-USB-DATACABLE IDs\n xhci: also avoid the XHCI_ZERO_64B_REGS quirk with a passthrough iommu\n NFSD: callback request does not use correct credential for AUTH_SYS\n sunrpc: only free unix grouplist after RCU settles\n gpio: davinci: Add irq chip flag to skip set wake\n ipv6: Fix an uninit variable access bug in __ip6_make_skb()\n sctp: check send stream number after wait_for_sndbuf\n net: don\u0027t let netpoll invoke NAPI if in xmit context\n icmp: guard against too small mtu\n wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for non-uploaded sta\n pwm: sprd: Explicitly set .polarity in .get_state()\n pwm: cros-ec: Explicitly set .polarity in .get_state()\n pinctrl: amd: Disable and mask interrupts on resume\n pinctrl: amd: disable and mask interrupts on probe\n pinctrl: amd: Use irqchip template\n smb3: fix problem with null cifs super block with previous patch\n treewide: Replace DECLARE_TASKLET() with DECLARE_TASKLET_OLD()\n Revert \"treewide: Replace DECLARE_TASKLET() with DECLARE_TASKLET_OLD()\"\n cgroup/cpuset: Wake up cpuset_attach_wq tasks in cpuset_cancel_attach()\n x86/PCI: Add quirk for AMD XHCI controller that loses MSI-X state in D3hot\n scsi: ses: Handle enclosure with just a primary component gracefully\n Linux 5.4.240\n gfs2: Always check inode size of inline inodes\n firmware: arm_scmi: Fix device node validation for mailbox transport\n net: sched: fix race condition in qdisc_graft()\n net_sched: add __rcu annotation to netdev-\u003eqdisc\n ext4: fix kernel BUG in \u0027ext4_write_inline_data_end()\u0027\n btrfs: scan device in non-exclusive mode\n s390/uaccess: add missing earlyclobber annotations to __clear_user()\n drm/etnaviv: fix reference leak when mmaping imported buffer\n ALSA: usb-audio: Fix regression on detection of Roland VS-100\n ALSA: hda/conexant: Partial revert of a quirk for Lenovo\n NFSv4: Fix hangs when recovering open state after a server reboot\n pinctrl: at91-pio4: fix domain name assignment\n xen/netback: don\u0027t do grant copy across page boundary\n Input: goodix - add Lenovo Yoga Book X90F to nine_bytes_report DMI table\n cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL\n cifs: prevent infinite recursion in CIFSGetDFSRefer()\n Input: focaltech - use explicitly signed char type\n Input: alps - fix compatibility with -funsigned-char\n pinctrl: ocelot: Fix alt mode for ocelot\n net: mvneta: make tx buffer array agnostic\n net: dsa: mv88e6xxx: Enable IGMP snooping on user ports only\n bnxt_en: Fix typo in PCI id to device description string mapping\n i40e: fix registers dump after run ethtool adapter self test\n s390/vfio-ap: fix memory leak in vfio_ap device driver\n can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write\n net/net_failover: fix txq exceeding warning\n regulator: Handle deferred clk\n regulator: fix spelling mistake \"Cant\" -\u003e \"Can\u0027t\"\n ptp_qoriq: fix memory leak in probe()\n scsi: megaraid_sas: Fix crash after a double completion\n mtd: rawnand: meson: invalidate cache on polling ECC bit\n mips: bmips: BCM6358: disable RAC flush for TP1\n dma-mapping: drop the dev argument to arch_sync_dma_for_*\n ca8210: Fix unsigned mac_len comparison with zero in ca8210_skb_tx()\n fbdev: au1200fb: Fix potential divide by zero\n fbdev: lxfb: Fix potential divide by zero\n fbdev: intelfb: Fix potential divide by zero\n fbdev: nvidia: Fix potential divide by zero\n sched_getaffinity: don\u0027t assume \u0027cpumask_size()\u0027 is fully initialized\n fbdev: tgafb: Fix potential divide by zero\n ALSA: hda/ca0132: fixup buffer overrun at tuning_ctl_set()\n ALSA: asihpi: check pao in control_message()\n md: avoid signed overflow in slot_store()\n bus: imx-weim: fix branch condition evaluates to a garbage value\n fsverity: don\u0027t drop pagecache at end of FS_IOC_ENABLE_VERITY\n ocfs2: fix data corruption after failed write\n tun: avoid double free in tun_free_netdev\n sched/fair: Sanitize vruntime of entity being migrated\n sched/fair: sanitize vruntime of entity being placed\n dm crypt: add cond_resched() to dmcrypt_write()\n dm stats: check for and propagate alloc_percpu failure\n i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()\n nilfs2: fix kernel-infoleak in nilfs_ioctl_wrap_copy()\n wifi: mac80211: fix qos on mesh interfaces\n usb: chipidea: core: fix possible concurrent when switch role\n usb: chipdea: core: fix return -EINVAL if request role is the same with current role\n usb: cdns3: Fix issue with using incorrect PCI device function\n dm thin: fix deadlock when swapping to thin device\n igb: revert rtnl_lock() that causes deadlock\n fsverity: Remove WQ_UNBOUND from fsverity read workqueue\n usb: gadget: u_audio: don\u0027t let userspace block driver unbind\n scsi: core: Add BLIST_SKIP_VPD_PAGES for SKhynix H28U74301AMR\n cifs: empty interface list when server doesn\u0027t support query interfaces\n sh: sanitize the flags on sigreturn\n net: usb: qmi_wwan: add Telit 0x1080 composition\n net: usb: cdc_mbim: avoid altsetting toggling for Telit FE990\n scsi: lpfc: Avoid usage of list iterator variable after loop\n scsi: ufs: core: Add soft dependency on governor_simpleondemand\n scsi: target: iscsi: Fix an error message in iscsi_check_key()\n selftests/bpf: check that modifier resolves after pointer\n m68k: Only force 030 bus error if PC not in exception table\n ca8210: fix mac_len negative array access\n riscv: Bump COMMAND_LINE_SIZE value to 1024\n thunderbolt: Use const qualifier for `ring_interrupt_index`\n uas: Add US_FL_NO_REPORT_OPCODES for JMicron JMS583Gen 2\n scsi: qla2xxx: Perform lockless command completion in abort path\n hwmon (it87): Fix voltage scaling for chips with 10.9mV ADCs\n platform/chrome: cros_ec_chardev: fix kernel data leak from ioctl\n Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work\n Bluetooth: btqcomsmd: Fix command timeout after setting BD address\n net: mdio: thunder: Add missing fwnode_handle_put()\n hvc/xen: prevent concurrent accesses to the shared ring\n nvme-tcp: fix nvme_tcp_term_pdu to match spec\n net/sonic: use dma_mapping_error() for error check\n erspan: do not use skb_mac_header() in ndo_start_xmit()\n atm: idt77252: fix kmemleak when rmmod idt77252\n net/mlx5: Read the TC mapping of all priorities on ETS query\n bpf: Adjust insufficient default bpf_jit_limit\n keys: Do not cache key in task struct if key is requested from kernel thread\n net/ps3_gelic_net: Use dma_mapping_error\n net/ps3_gelic_net: Fix RX sk_buff length\n net: qcom/emac: Fix use after free bug in emac_remove due to race condition\n xirc2ps_cs: Fix use after free bug in xirc2ps_detach\n qed/qed_sriov: guard against NULL derefs from qed_iov_get_vf_info\n net: usb: smsc95xx: Limit packet length to skb-\u003elen\n scsi: scsi_dh_alua: Fix memleak for \u0027qdata\u0027 in alua_activate()\n i2c: imx-lpi2c: check only for enabled interrupt flags\n igbvf: Regard vf reset nack as success\n intel/igbvf: free irq on the error path in igbvf_request_msix()\n iavf: fix non-tunneled IPv6 UDP packet type and hashing\n iavf: fix inverted Rx hash condition leading to disabled hash\n power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition\n net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()\n Linux 5.4.239\n selftests: Fix the executable permissions for fib_tests.sh\n BACKPORT: mac80211_hwsim: notify wmediumd of used MAC addresses\n FROMGIT: mac80211_hwsim: add concurrent channels scanning support over virtio\n Revert \"HID: core: Provide new max_buffer_size attribute to over-ride the default\"\n Revert \"HID: uhid: Over-ride the default maximum data buffer value with our own\"\n Linux 5.4.238\n HID: uhid: Over-ride the default maximum data buffer value with our own\n HID: core: Provide new max_buffer_size attribute to over-ride the default\n PCI: Unify delay handling for reset and resume\n s390/ipl: add missing intersection check to ipl_report handling\n serial: 8250_em: Fix UART port type\n drm/i915: Don\u0027t use stolen memory for ring buffers with LLC\n x86/mm: Fix use of uninitialized buffer in sme_enable()\n fbdev: stifb: Provide valid pixelclock and add fb_check_var() checks\n ftrace: Fix invalid address access in lookup_rec() when index is 0\n KVM: nVMX: add missing consistency checks for CR0 and CR4\n tracing: Make tracepoint lockdep check actually test something\n tracing: Check field value in hist_field_name()\n interconnect: fix mem leak when freeing nodes\n tty: serial: fsl_lpuart: skip waiting for transmission complete when UARTCTRL_SBK is asserted\n ext4: fix possible double unlock when moving a directory\n sh: intc: Avoid spurious sizeof-pointer-div warning\n drm/amdkfd: Fix an illegal memory access\n ext4: fix task hung in ext4_xattr_delete_inode\n ext4: fail ext4_iget if special inode unallocated\n jffs2: correct logic when creating a hole in jffs2_write_begin\n mmc: atmel-mci: fix race between stop command and start of next command\n media: m5mols: fix off-by-one loop termination error\n hwmon: (ina3221) return prober error code\n hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition\n hwmon: (adt7475) Fix masking of hysteresis registers\n hwmon: (adt7475) Display smoothing attributes in correct order\n ethernet: sun: add check for the mdesc_grab()\n net/iucv: Fix size of interrupt data\n net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull\n ipv4: Fix incorrect table ID in IOCTL path\n block: sunvdc: add check for mdesc_grab() returning NULL\n nvmet: avoid potential UAF in nvmet_req_complete()\n net: usb: smsc75xx: Limit packet length to skb-\u003elen\n nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition\n net: phy: smsc: bail out in lan87xx_read_status if genphy_read_status fails\n net: tunnels: annotate lockless accesses to dev-\u003eneeded_headroom\n qed/qed_dev: guard against a possible division by zero\n i40e: Fix kernel crash during reboot when adapter is in recovery mode\n ipvlan: Make skb-\u003eskb_iif track skb-\u003edev for l3s mode\n nfc: pn533: initialize struct pn533_out_arg properly\n tcp: tcp_make_synack() can be called from process context\n scsi: core: Fix a procfs host directory removal regression\n scsi: core: Fix a comment in function scsi_host_dev_release()\n netfilter: nft_redir: correct value of inet type `.maxattrs`\n ALSA: hda: Match only Intel devices with CONTROLLER_IN_GPU()\n ALSA: hda: Add Intel DG2 PCI ID and HDMI codec vid\n ALSA: hda: Add Alderlake-S PCI ID and HDMI codec vid\n ALSA: hda - controller is in GPU on the DG1\n ALSA: hda - add Intel DG1 PCI and HDMI ids\n scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()\n docs: Correct missing \"d_\" prefix for dentry_operations member d_weak_revalidate\n clk: HI655X: select REGMAP instead of depending on it\n drm/meson: fix 1px pink line on GXM when scaling video overlay\n cifs: Move the in_send statistic to __smb_send_rqst()\n drm/panfrost: Don\u0027t sync rpm suspension after mmu flushing\n xfrm: Allow transport-mode states with AF_UNSPEC selector\n ext4: fix cgroup writeback accounting with fs-layer encryption\n ANDROID: preserve CRC for __irq_domain_add()\n Revert \"drm/exynos: Don\u0027t reset bridge-\u003enext\"\n Revert \"drm/bridge: Rename bridge helpers targeting a bridge chain\"\n Revert \"drm/bridge: Introduce drm_bridge_get_next_bridge()\"\n Revert \"drm: Initialize struct drm_crtc_state.no_vblank from device settings\"\n Revert \"drm/msm/mdp5: Add check for kzalloc\"\n Linux 5.4.237\n s390/dasd: add missing discipline function\n UML: define RUNTIME_DISCARD_EXIT\n sh: define RUNTIME_DISCARD_EXIT\n s390: define RUNTIME_DISCARD_EXIT to fix link error with GNU ld \u003c 2.36\n powerpc/vmlinux.lds: Don\u0027t discard .rela* for relocatable builds\n powerpc/vmlinux.lds: Define RUNTIME_DISCARD_EXIT\n arch: fix broken BuildID for arm64 and riscv\n x86, vmlinux.lds: Add RUNTIME_DISCARD_EXIT to generic DISCARDS\n drm/i915: Don\u0027t use BAR mappings for ring buffers with LLC\n ipmi:watchdog: Set panic count to proper value on a panic\n ipmi/watchdog: replace atomic_add() and atomic_sub()\n media: ov5640: Fix analogue gain control\n PCI: Add SolidRun vendor ID\n macintosh: windfarm: Use unsigned type for 1-bit bitfields\n alpha: fix R_ALPHA_LITERAL reloc for large modules\n MIPS: Fix a compilation issue\n ext4: Fix deadlock during directory rename\n riscv: Use READ_ONCE_NOCHECK in imprecise unwinding stack mode\n net/smc: fix fallback failed while sendmsg with fastopen\n scsi: megaraid_sas: Update max supported LD IDs to 240\n btf: fix resolving BTF_KIND_VAR after ARRAY, STRUCT, UNION, PTR\n netfilter: tproxy: fix deadlock due to missing BH disable\n bnxt_en: Avoid order-5 memory allocation for TPA data\n net: caif: Fix use-after-free in cfusbl_device_notify()\n net: lan78xx: fix accessing the LAN7800\u0027s internal phy specific registers from the MAC driver\n net: usb: lan78xx: Remove lots of set but unused \u0027ret\u0027 variables\n selftests: nft_nat: ensuring the listening side is up before starting the client\n ila: do not generate empty messages in ila_xlat_nl_cmd_get_mapping()\n nfc: fdp: add null check of devm_kmalloc_array in fdp_nci_i2c_read_device_properties\n drm/msm/a5xx: fix setting of the CP_PREEMPT_ENABLE_LOCAL register\n ext4: Fix possible corruption when moving a directory\n scsi: core: Remove the /proc/scsi/${proc_name} directory earlier\n cifs: Fix uninitialized memory read in smb3_qfs_tcon()\n SMB3: Backup intent flag missing from some more ops\n iommu/vt-d: Fix PASID directory pointer coherency\n irqdomain: Fix domain registration race\n irqdomain: Change the type of \u0027size\u0027 in __irq_domain_add() to be consistent\n ipmi:ssif: Add a timer between request retries\n ipmi:ssif: Increase the message retry time\n ipmi:ssif: Remove rtc_us_timer\n ipmi:ssif: resend_msg() cannot fail\n ipmi:ssif: make ssif_i2c_send() void\n iommu/amd: Add a length limitation for the ivrs_acpihid command-line parameter\n iommu/amd: Fix ill-formed ivrs_ioapic, ivrs_hpet and ivrs_acpihid options\n iommu/amd: Add PCI segment support for ivrs_[ioapic/hpet/acpihid] commands\n nfc: change order inside nfc_se_io error path\n ext4: zero i_disksize when initializing the bootloader inode\n ext4: fix WARNING in ext4_update_inline_data\n ext4: move where set the MAY_INLINE_DATA flag is set\n ext4: fix another off-by-one fsmap error on 1k block filesystems\n ext4: fix RENAME_WHITEOUT handling for inline directories\n drm/connector: print max_requested_bpc in state debugfs\n x86/CPU/AMD: Disable XSAVES on AMD family 0x17\n fs: prevent out-of-bounds array speculation when closing a file descriptor\n Linux 5.4.236\n staging: rtl8192e: Remove call_usermodehelper starting RadioPower.sh\n staging: rtl8192e: Remove function ..dm_check_ac_dc_power calling a script\n wifi: cfg80211: Partial revert \"wifi: cfg80211: Fix use after free for wext\"\n Linux 5.4.235\n dt-bindings: rtc: sun6i-a31-rtc: Loosen the requirements on the clocks\n media: uvcvideo: Fix race condition with usb_kill_urb\n media: uvcvideo: Provide sync and async uvc_ctrl_status_event\n tcp: Fix listen() regression in 5.4.229.\n Bluetooth: hci_sock: purge socket queues in the destruct() callback\n x86/resctl: fix scheduler confusion with \u0027current\u0027\n x86/resctrl: Apply READ_ONCE/WRITE_ONCE to task_struct.{rmid,closid}\n net: tls: avoid hanging tasks on the tx_lock\n phy: rockchip-typec: Fix unsigned comparison with less than zero\n PCI: Add ACS quirk for Wangxun NICs\n kernel/fail_function: fix memory leak with using debugfs_lookup()\n usb: uvc: Enumerate valid values for color matching\n USB: ene_usb6250: Allocate enough memory for full object\n usb: host: xhci: mvebu: Iterate over array indexes instead of using pointer math\n iio: accel: mma9551_core: Prevent uninitialized variable in mma9551_read_config_word()\n iio: accel: mma9551_core: Prevent uninitialized variable in mma9551_read_status_word()\n tools/iio/iio_utils:fix memory leak\n mei: bus-fixup:upon error print return values of send and receive\n tty: serial: fsl_lpuart: disable the CTS when send break signal\n tty: fix out-of-bounds access in tty_driver_lookup_tty()\n staging: emxx_udc: Add checks for dma_alloc_coherent()\n media: uvcvideo: Silence memcpy() run-time false positive warnings\n media: uvcvideo: Quirk for autosuspend in Logitech B910 and C910\n media: uvcvideo: Handle errors from calls to usb_string\n media: uvcvideo: Handle cameras with invalid descriptors\n mfd: arizona: Use pm_runtime_resume_and_get() to prevent refcnt leak\n firmware/efi sysfb_efi: Add quirk for Lenovo IdeaPad Duet 3\n tracing: Add NULL checks for buffer in ring_buffer_free_read_page()\n thermal: intel: BXT_PMIC: select REGMAP instead of depending on it\n thermal: intel: quark_dts: fix error pointer dereference\n scsi: ipr: Work around fortify-string warning\n rtc: sun6i: Always export the internal oscillator\n rtc: sun6i: Make external 32k oscillator optional\n vc_screen: modify vcs_size() handling in vcs_read()\n tcp: tcp_check_req() can be called from process context\n ARM: dts: spear320-hmi: correct STMPE GPIO compatible\n net/sched: act_sample: fix action bind logic\n nfc: fix memory leak of se_io context in nfc_genl_se_io\n net/mlx5: Geneve, Fix handling of Geneve object id as error code\n 9p/rdma: unmap receive dma buffer in rdma_request()/post_recv()\n 9p/xen: fix connection sequence\n 9p/xen: fix version parsing\n net: fix __dev_kfree_skb_any() vs drop monitor\n sctp: add a refcnt in sctp_stream_priorities to avoid a nested loop\n ipv6: Add lwtunnel encap size of all siblings in nexthop calculation\n netfilter: ctnetlink: fix possible refcount leak in ctnetlink_create_conntrack()\n watchdog: pcwd_usb: Fix attempting to access uninitialized memory\n watchdog: Fix kmemleak in watchdog_cdev_register\n watchdog: at91sam9_wdt: use devm_request_irq to avoid missing free_irq() in error path\n x86: um: vdso: Add \u0027%rcx\u0027 and \u0027%r11\u0027 to the syscall clobber list\n ubi: ubi_wl_put_peb: Fix infinite loop when wear-leveling work failed\n ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()\n ubifs: ubifs_writepage: Mark page dirty after writing inode failed\n ubifs: dirty_cow_znode: Fix memleak in error handling path\n ubifs: Re-statistic cleaned znode count if commit failed\n ubi: Fix possible null-ptr-deref in ubi_free_volume()\n ubifs: Fix memory leak in alloc_wbufs()\n ubi: Fix unreferenced object reported by kmemleak in ubi_resize_volume()\n ubi: Fix use-after-free when volume resizing failed\n ubifs: Reserve one leb for each journal head while doing budget\n ubifs: do_rename: Fix wrong space budget when target inode\u0027s nlink \u003e 1\n ubifs: Fix wrong dirty space budget for dirty inode\n ubifs: Rectify space budget for ubifs_xrename()\n ubifs: Rectify space budget for ubifs_symlink() if symlink is encrypted\n ubifs: Fix build errors as symbol undefined\n ubi: ensure that VID header offset + VID header size \u003c\u003d alloc, size\n um: vector: Fix memory leak in vector_config\n fs: f2fs: initialize fsdata in pagecache_write()\n f2fs: use memcpy_{to,from}_page() where possible\n pwm: stm32-lp: fix the check on arr and cmp registers update\n pwm: sifive: Always let the first pwm_apply_state succeed\n pwm: sifive: Reduce time the controller lock is held\n fs/jfs: fix shift exponent db_agl2size negative\n net/sched: Retire tcindex classifier\n kbuild: Port silent mode detection to future gnu make.\n wifi: ath9k: use proper statements in conditionals\n drm/radeon: Fix eDP for single-display iMac11,2\n drm/i915/quirks: Add inverted backlight quirk for HP 14-r206nv\n PCI: Avoid FLR for AMD FCH AHCI adapters\n PCI: hotplug: Allow marking devices as disconnected during bind/unbind\n PCI/PM: Observe reset delay irrespective of bridge_d3\n scsi: ses: Fix slab-out-of-bounds in ses_intf_remove()\n scsi: ses: Fix possible desc_ptr out-of-bounds accesses\n scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses\n scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process()\n scsi: ses: Don\u0027t attach if enclosure has no components\n scsi: qla2xxx: Fix erroneous link down\n scsi: qla2xxx: Fix DMA-API call trace on NVMe LS requests\n scsi: qla2xxx: Fix link failure in NPIV environment\n ktest.pl: Add RUN_TIMEOUT option with default unlimited\n ktest.pl: Fix missing \"end_monitor\" when machine check fails\n ktest.pl: Give back console on Ctrt^C on monitor\n mm/thp: check and bail out if page in deferred queue already\n mm: memcontrol: deprecate charge moving\n media: ipu3-cio2: Fix PM runtime usage_count in driver unbind\n mips: fix syscall_get_nr\n alpha: fix FEN fault handling\n rbd: avoid use-after-free in do_rbd_add() when rbd_dev_create() fails\n ARM: dts: exynos: correct TMU phandle in Odroid XU\n ARM: dts: exynos: correct TMU phandle in Exynos4\n dm flakey: don\u0027t corrupt the zero page\n dm flakey: fix logic when corrupting a bio\n thermal: intel: powerclamp: Fix cur_state for multi package system\n wifi: cfg80211: Fix use after free for wext\n wifi: rtl8xxxu: Use a longer retry limit of 48\n ext4: refuse to create ea block when umounted\n ext4: optimize ea_inode block expansion\n ALSA: hda/realtek: Add quirk for HP EliteDesk 800 G6 Tower PC\n ALSA: ice1712: Do not left ice-\u003egpio_mutex locked in aureon_add_controls()\n irqdomain: Drop bogus fwspec-mapping error handling\n irqdomain: Fix disassociation race\n irqdomain: Fix association race\n ima: Align ima_file_mmap() parameters with mmap_file LSM hook\n Documentation/hw-vuln: Document the interaction between IBRS and STIBP\n x86/speculation: Allow enabling STIBP with legacy IBRS\n x86/microcode/AMD: Fix mixed steppings support\n x86/microcode/AMD: Add a @cpu parameter to the reloading functions\n x86/microcode/amd: Remove load_microcode_amd()\u0027s bsp parameter\n x86/kprobes: Fix arch_check_optimized_kprobe check within optimized_kprobe range\n x86/kprobes: Fix __recover_optprobed_insn check optimizing logic\n x86/reboot: Disable SVM, not just VMX, when stopping CPUs\n x86/reboot: Disable virtualization in an emergency if SVM is supported\n x86/crash: Disable virt in core NMI crash handler to avoid double shootdown\n x86/virt: Force GIF\u003d1 prior to disabling SVM (for reboot flows)\n KVM: s390: disable migration mode when dirty tracking is disabled\n KVM: Destroy target device if coalesced MMIO unregistration fails\n udf: Fix file corruption when appending just after end of preallocated extent\n udf: Detect system inodes linked into directory hierarchy\n udf: Preserve link count of system files\n udf: Do not update file length for failed writes to inline files\n udf: Do not bother merging very long extents\n udf: Truncate added extents on failed expansion\n ocfs2: fix non-auto defrag path not working issue\n ocfs2: fix defrag path triggering jbd2 ASSERT\n f2fs: fix cgroup writeback accounting with fs-layer encryption\n f2fs: fix information leak in f2fs_move_inline_dirents()\n fs: hfsplus: fix UAF issue in hfsplus_put_super\n hfs: fix missing hfs_bnode_get() in __hfs_bnode_create\n ARM: dts: exynos: correct HDMI phy compatible in Exynos4\n s390/kprobes: fix current_kprobe never cleared after kprobes reenter\n s390/kprobes: fix irq mask clobbering on kprobe reenter from post_handler\n s390: discard .interp section\n ipmi_ssif: Rename idle state and check\n rtc: pm8xxx: fix set-alarm race\n firmware: coreboot: framebuffer: Ignore reserved pixel color bits\n wifi: rtl8xxxu: fixing transmisison failure for rtl8192eu\n nfsd: zero out pointers after putting nfsd_files on COPY setup error\n dm cache: add cond_resched() to various workqueue loops\n dm thin: add cond_resched() to various workqueue loops\n drm: panel-orientation-quirks: Add quirk for Lenovo IdeaPad Duet 3 10IGL5\n pinctrl: at91: use devm_kasprintf() to avoid potential leaks\n hwmon: (coretemp) Simplify platform device handling\n regulator: s5m8767: Bounds check id indexing into arrays\n regulator: max77802: Bounds check regulator id against opmode\n ASoC: kirkwood: Iterate over array indexes instead of using pointer math\n docs/scripts/gdb: add necessary make scripts_gdb step\n drm/msm/dsi: Add missing check for alloc_ordered_workqueue\n drm/radeon: free iio for atombios when driver shutdown\n HID: Add Mapping for System Microphone Mute\n drm/omap: dsi: Fix excessive stack usage\n drm/amd/display: Fix potential null-deref in dm_resume\n uaccess: Add minimum bounds check on kernel buffer size\n coda: Avoid partial allocation of sig_inputArgs\n net/mlx5: fw_tracer: Fix debug print\n ACPI: video: Fix Lenovo Ideapad Z570 DMI match\n wifi: mt76: dma: free rx_head in mt76_dma_rx_cleanup\n m68k: Check syscall_trace_enter() return code\n net: bcmgenet: Add a check for oversized packets\n ACPI: Don\u0027t build ACPICA with \u0027-Os\u0027\n ice: add missing checks for PF vsi type\n inet: fix fast path in __inet_hash_connect()\n wifi: mt7601u: fix an integer underflow\n wifi: brcmfmac: ensure CLM version is null-terminated to prevent stack-out-of-bounds\n x86/bugs: Reset speculation control settings on init\n timers: Prevent union confusion from unexpected restart_syscall()\n thermal: intel: Fix unsigned comparison with less than zero\n rcu: Suppress smp_processor_id() complaint in synchronize_rcu_expedited_wait()\n wifi: brcmfmac: Fix potential stack-out-of-bounds in brcmf_c_preinit_dcmds()\n blk-iocost: fix divide by 0 error in calc_lcoefs()\n ARM: dts: exynos: Use Exynos5420 compatible for the MIPI video phy\n udf: Define EFSCORRUPTED error code\n rpmsg: glink: Avoid infinite loop on intent for missing channel\n media: usb: siano: Fix use after free bugs caused by do_submit_urb\n media: i2c: ov7670: 0 instead of -EINVAL was returned\n media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()\n media: i2c: ov772x: Fix memleak in ov772x_probe()\n media: ov5675: Fix memleak in ov5675_init_controls()\n powerpc: Remove linker flag from KBUILD_AFLAGS\n media: platform: ti: Add missing check for devm_regulator_get\n remoteproc: qcom_q6v5_mss: Use a carveout to authenticate modem headers\n MIPS: vpe-mt: drop physical_memsize\n MIPS: SMP-CPS: fix build error when HOTPLUG_CPU not set\n powerpc/eeh: Set channel state after notifying the drivers\n powerpc/eeh: Small refactor of eeh_handle_normal_event()\n powerpc/rtas: ensure 4KB alignment for rtas_data_buf\n powerpc/rtas: make all exports GPL\n powerpc/pseries/lparcfg: add missing RTAS retry status handling\n powerpc/pseries/lpar: add missing RTAS retry status handling\n clk: Honor CLK_OPS_PARENT_ENABLE in clk_core_is_enabled()\n powerpc/powernv/ioda: Skip unallocated resources when mapping to PE\n clk: qcom: gpucc-sdm845: fix clk_dis_wait being programmed for CX GDSC\n Input: ads7846 - don\u0027t check penirq immediately for 7845\n Input: ads7846 - don\u0027t report pressure for ads7845\n clk: renesas: cpg-mssr: Remove superfluous check in resume code\n clk: renesas: cpg-mssr: Use enum clk_reg_layout instead of a boolean flag\n clk: renesas: cpg-mssr: Fix use after free if cpg_mssr_common_init() failed\n mtd: rawnand: sunxi: Fix the size of the last OOB region\n clk: qcom: gcc-qcs404: fix names of the DSI clocks used as parents\n clk: qcom: gcc-qcs404: disable gpll[04]_out_aux parents\n mfd: pcf50633-adc: Fix potential memleak in pcf50633_adc_async_read()\n selftests/ftrace: Fix bash specific \"\u003d\u003d\" operator\n sparc: allow PM configs for sparc32 COMPILE_TEST\n perf tools: Fix auto-complete on aarch64\n perf llvm: Fix inadvertent file creation\n gfs2: jdata writepage fix\n cifs: Fix warning and UAF when destroy the MR list\n cifs: Fix lost destroy smbd connection when MR allocate failed\n nfsd: fix race to check ls_layouts\n hid: bigben_probe(): validate report count\n HID: asus: Fix mute and touchpad-toggle keys on Medion Akoya E1239T\n HID: asus: Add support for multi-touch touchpad on Medion Akoya E1239T\n HID: asus: Add report_size to struct asus_touchpad_info\n HID: asus: Only set EV_REP if we are adding a mapping\n HID: bigben: use spinlock to safely schedule workers\n HID: bigben_worker() remove unneeded check on report_field\n HID: bigben: use spinlock to protect concurrent accesses\n ASoC: soc-dapm.h: fixup warning struct snd_pcm_substream not declared\n ASoC: dapm: declare missing structure prototypes\n spi: synquacer: Fix timeout handling in synquacer_spi_transfer_one()\n dm: remove flush_scheduled_work() during local_exit()\n hwmon: (mlxreg-fan) Return zero speed for broken fan\n spi: bcm63xx-hsspi: Fix multi-bit mode setting\n spi: bcm63xx-hsspi: fix pm_runtime\n scsi: aic94xx: Add missing check for dma_map_single()\n hwmon: (ltc2945) Handle error case in ltc2945_value_store\n gpio: vf610: connect GPIO label to dev name\n ASoC: soc-compress.c: fixup private_data on snd_soc_new_compress()\n drm/mediatek: Clean dangling pointer on bind error path\n drm/mediatek: Drop unbalanced obj unref\n drm/mediatek: Use NULL instead of 0 for NULL pointer\n drm/mediatek: remove cast to pointers passed to kfree\n gpu: host1x: Don\u0027t skip assigning syncpoints to channels\n drm/msm/mdp5: Add check for kzalloc\n drm: Initialize struct drm_crtc_state.no_vblank from device settings\n drm/bridge: Introduce drm_bridge_get_next_bridge()\n drm/bridge: Rename bridge helpers targeting a bridge chain\n drm/exynos: Don\u0027t reset bridge-\u003enext\n drm/msm/dpu: Add check for pstates\n drm/msm/dpu: Add check for cstate\n drm/msm: use strscpy instead of strncpy\n drm/mipi-dsi: Fix byte order of 16-bit DCS set/get brightness\n ALSA: hda/ca0132: minor fix for allocation size\n ASoC: fsl_sai: initialize is_dsp_mode flag\n pinctrl: stm32: Fix refcount leak in stm32_pctrl_get_irq_domain\n drm/msm/hdmi: Add missing check for alloc_ordered_workqueue\n gpu: ipu-v3: common: Add of_node_put() for reference returned by of_graph_get_port_by_id()\n drm/vc4: dpi: Fix format mapping for RGB565\n drm/vc4: dpi: Add option for inverting pixel clock and output enable\n drm/bridge: megachips: Fix error handling in i2c_register_driver()\n drm: mxsfb: DRM_MXSFB should depend on ARCH_MXS || ARCH_MXC\n drm/fourcc: Add missing big-endian XRGB1555 and RGB565 formats\n selftest: fib_tests: Always cleanup before exit\n selftests/net: Interpret UDP_GRO cmsg data as an int value\n irqchip/irq-bcm7120-l2: Set IRQ_LEVEL for level triggered interrupts\n irqchip/irq-brcmstb-l2: Set IRQ_LEVEL for level triggered interrupts\n can: esd_usb: Move mislocated storage of SJA1000_ECC_SEG bits in case of a bus error\n thermal/drivers/hisi: Drop second sensor hi3660\n wifi: mac80211: make rate u32 in sta_set_rate_info_rx()\n crypto: crypto4xx - Call dma_unmap_page when done\n wifi: mwifiex: fix loop iterator in mwifiex_update_ampdu_txwinsize()\n wifi: iwl4965: Add missing check for create_singlethread_workqueue()\n wifi: iwl3945: Add missing check for create_singlethread_workqueue\n treewide: Replace DECLARE_TASKLET() with DECLARE_TASKLET_OLD()\n usb: gadget: udc: Avoid tasklet passing a global\n RISC-V: time: initialize hrtimer based broadcast clock event device\n m68k: /proc/hardware should depend on PROC_FS\n crypto: rsa-pkcs1pad - Use akcipher_request_complete\n rds: rds_rm_zerocopy_callback() correct order for list_add_tail()\n libbpf: Fix alen calculation in libbpf_nla_dump_errormsg()\n Bluetooth: L2CAP: Fix potential user-after-free\n OPP: fix error checking in opp_migrate_dentry()\n tap: tap_open(): correctly initialize socket uid\n tun: tun_chr_open(): correctly initialize socket uid\n net: add sock_init_data_uid()\n mptcp: add sk_stop_timer_sync helper\n irqchip/ti-sci: Fix refcount leak in ti_sci_intr_irq_domain_probe\n irqchip/irq-mvebu-gicp: Fix refcount leak in mvebu_gicp_probe\n irqchip/alpine-msi: Fix refcount leak in alpine_msix_init_domains\n net/mlx5: Enhance debug print in page allocation failure\n powercap: fix possible name leak in powercap_register_zone()\n crypto: seqiv - Handle EBUSY correctly\n crypto: essiv - Handle EBUSY correctly\n crypto: essiv - remove redundant null pointer check before kfree\n crypto: ccp - Failure on re-initialization due to duplicate sysfs filename\n ACPI: battery: Fix missing NUL-termination with large strings\n wifi: ath9k: Fix potential stack-out-of-bounds write in ath9k_wmi_rsp_callback()\n wifi: ath9k: hif_usb: clean up skbs if ath9k_hif_usb_rx_stream() fails\n ath9k: htc: clean up statistics macros\n ath9k: hif_usb: simplify if-if to if-else\n wifi: ath9k: htc_hst: free skb in ath9k_htc_rx_msg() if there is no callback function\n wifi: orinoco: check return value of hermes_write_wordrec()\n ACPICA: nsrepair: handle cases without a return value correctly\n lib/mpi: Fix buffer overrun when SG is too long\n genirq: Fix the return type of kstat_cpu_irqs_sum()\n ACPICA: Drop port I/O validation for some regions\n crypto: x86/ghash - fix unaligned access in ghash_setkey()\n wifi: wl3501_cs: don\u0027t call kfree_skb() under spin_lock_irqsave()\n wifi: libertas: cmdresp: don\u0027t call kfree_skb() under spin_lock_irqsave()\n wifi: libertas: main: don\u0027t call kfree_skb() under spin_lock_irqsave()\n wifi: libertas: if_usb: don\u0027t call kfree_skb() under spin_lock_irqsave()\n wifi: libertas_tf: don\u0027t call kfree_skb() under spin_lock_irqsave()\n wifi: brcmfmac: unmap dma buffer in brcmf_msgbuf_alloc_pktid()\n wifi: brcmfmac: fix potential memory leak in brcmf_netdev_start_xmit()\n wifi: wilc1000: fix potential memory leak in wilc_mac_xmit()\n wilc1000: let wilc_mac_xmit() return NETDEV_TX_OK\n wifi: ipw2200: fix memory leak in ipw_wdev_init()\n wifi: ipw2x00: don\u0027t call dev_kfree_skb() under spin_lock_irqsave()\n ipw2x00: switch from \u0027pci_\u0027 to \u0027dma_\u0027 API\n wifi: rtlwifi: Fix global-out-of-bounds bug in _rtl8812ae_phy_set_txpower_limit()\n rtlwifi: fix -Wpointer-sign warning\n wifi: rtl8xxxu: don\u0027t call dev_kfree_skb() under spin_lock_irqsave()\n wifi: libertas: fix memory leak in lbs_init_adapter()\n wifi: iwlegacy: common: don\u0027t call dev_kfree_skb() under spin_lock_irqsave()\n net/wireless: Delete unnecessary checks before the macro call “dev_kfree_skb”\n wifi: rsi: Fix memory leak in rsi_coex_attach()\n block: bio-integrity: Copy flags when bio_integrity_payload is cloned\n sched/rt: pick_next_rt_entity(): check list_entry\n sched/deadline,rt: Remove unused parameter from pick_next_[rt|dl]_entity()\n s390/dasd: Fix potential memleak in dasd_eckd_init()\n s390/dasd: Prepare for additional path event handling\n blk-mq: correct stale comment of .get_budget\n blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait\n blk-mq: remove stale comment for blk_mq_sched_mark_restart_hctx\n block: Limit number of items taken from the I/O scheduler in one go\n Revert \"scsi: core: run queue if SCSI device queue isn\u0027t ready and queue is idle\"\n arm64: dts: mediatek: mt7622: Add missing pwm-cells to pwm node\n ARM: dts: imx7s: correct iomuxc gpr mux controller cells\n arm64: dts: amlogic: meson-gxl-s905d-phicomm-n1: fix led node name\n arm64: dts: amlogic: meson-gxl: add missing unit address to eth-phy-mux node name\n arm64: dts: amlogic: meson-gx: add missing unit address to rng node name\n arm64: dts: amlogic: meson-gx: add missing SCPI sensors compatible\n arm64: dts: amlogic: meson-axg: fix SCPI clock dvfs node name\n arm64: dts: amlogic: meson-gx: fix SCPI clock dvfs node name\n ARM: imx: Call ida_simple_remove() for ida_simple_get\n ARM: dts: exynos: correct wr-active property in Exynos3250 Rinato\n ARM: OMAP1: call platform_device_put() in error case in omap1_dm_timer_init()\n arm64: dts: meson: remove CPU opps below 1GHz for G12A boards\n arm64: dts: meson-gx: Fix the SCPI DVFS node name and unit address\n arm64: dts: meson-g12a: Fix internal Ethernet PHY unit name\n arm64: dts: meson-gx: Fix Ethernet MAC address unit name\n ARM: zynq: Fix refcount leak in zynq_early_slcr_init\n arm64: dts: qcom: qcs404: use symbol names for PCIe resets\n ARM: OMAP2+: Fix memory leak in realtime_counter_init()\n HID: asus: use spinlock to safely schedule workers\n HID: asus: use spinlock to protect concurrent accesses\n HID: asus: Remove check for same LED brightness on set\n Linux 5.4.234\n USB: core: Don\u0027t hold device lock while reading the \"descriptors\" sysfs file\n USB: serial: option: add support for VW/Skoda \"Carstick LTE\"\n dmaengine: sh: rcar-dmac: Check for error num after dma_set_max_seg_size\n vc_screen: don\u0027t clobber return value in vcs_read\n net: Remove WARN_ON_ONCE(sk-\u003esk_forward_alloc) from sk_stream_kill_queues().\n bpf: bpf_fib_lookup should not return neigh in NUD_FAILED state\n HID: core: Fix deadloop in hid_apply_multiplier.\n neigh: make sure used and confirmed times are valid\n IB/hfi1: Assign npages earlier\n btrfs: send: limit number of clones and allocated memory size\n ACPI: NFIT: fix a potential deadlock during NFIT teardown\n ARM: dts: rockchip: add power-domains property to dp node on rk3288\n arm64: dts: rockchip: drop unused LED mode property from rk3328-roc-cc\n\n Conflicts:\n\tDocumentation/devicetree/bindings\n\tDocumentation/devicetree/bindings/rtc/allwinner,sun6i-a31-rtc.yaml\n\tarch/arm/mm/dma-mapping.c\n\tdrivers/clk/qcom/gcc-qcs404.c\n\tdrivers/iommu/dma-iommu.c\n\tdrivers/mtd/ubi/wl.c\n\tkernel/dma/direct.c\n\nChange-Id: I5797c8cb2276354d851af215d431950eec734174\nSigned-off-by: Srinivasarao Pathipati \u003cquic_c_spathi@quicinc.com\u003e\n" }, { "commit": "fb4bb5a5f3978f1097303859dd463dcfa588ef65", "tree": "cc5bd2a4f4e2f9efc13307e2ed31a0cc420e90db", "parents": [ "4c85910ff83e5965c65ab7a1a8d22b0c1a8638fd", "51d0ac4577c20b22cb659b16d73d37c05ce2fbde" ], "author": { "name": "Greg Kroah-Hartman", "email": "gregkh@google.com", "time": "Tue Jun 20 11:07:18 2023 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@google.com", "time": "Tue Jun 20 11:07:18 2023 +0000" }, "message": "Merge 5.4.244 into android11-5.4-lts\n\nChanges in 5.4.244\n\tdriver core: add a helper to setup both the of_node and fwnode of a device\n\tdrm/mipi-dsi: Set the fwnode for mipi_dsi_device\n\tARM: 9296/1: HP Jornada 7XX: fix kernel-doc warnings\n\tlinux/dim: Do nothing if no time delta between samples\n\tnet: Fix load-tearing on sk-\u003esk_stamp in sock_recv_cmsgs().\n\tnetfilter: conntrack: fix possible bug_on with enable_hooks\u003d1\n\tnetlink: annotate accesses to nlk-\u003ecb_running\n\tnet: annotate sk-\u003esk_err write from do_recvmmsg()\n\tnet: tap: check vlan with eth_type_vlan() method\n\tnet: add vlan_get_protocol_and_depth() helper\n\tipvlan:Fix out-of-bounds caused by unclear skb-\u003ecb\n\tnet: datagram: fix data-races in datagram_poll()\n\taf_unix: Fix a data race of sk-\u003esk_receive_queue-\u003eqlen.\n\taf_unix: Fix data races around sk-\u003esk_shutdown.\n\tfs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode()\n\tdrm/amd/display: Use DC_LOG_DC in the trasform pixel function\n\tregmap: cache: Return error in cache sync operations for REGCACHE_NONE\n\tmemstick: r592: Fix UAF bug in r592_remove due to race condition\n\tfirmware: arm_sdei: Fix sleep from invalid context BUG\n\tACPI: EC: Fix oops when removing custom query handlers\n\tdrm/tegra: Avoid potential 32-bit integer overflow\n\tACPICA: Avoid undefined behavior: applying zero offset to null pointer\n\tACPICA: ACPICA: check null return of ACPI_ALLOCATE_ZEROED in acpi_db_display_objects\n\twifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex\n\text2: Check block size validity during mount\n\tscsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow\n\tnet: pasemi: Fix return type of pasemi_mac_start_tx()\n\tnet: Catch invalid index in XPS mapping\n\tscsi: target: iscsit: Free cmds before session free\n\tlib: cpu_rmap: Avoid use after free on rmap-\u003eobj array entries\n\tscsi: message: mptlan: Fix use after free bug in mptlan_remove() due to race condition\n\tgfs2: Fix inode height consistency check\n\text4: set goal start correctly in ext4_mb_normalize_request\n\text4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()\n\tf2fs: fix to drop all dirty pages during umount() if cp_error is set\n\tsamples/bpf: Fix fout leak in hbm\u0027s run_bpf_prog\n\twifi: iwlwifi: pcie: fix possible NULL pointer dereference\n\twifi: iwlwifi: pcie: Fix integer overflow in iwl_write_to_user_buf\n\twifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace\n\tBluetooth: L2CAP: fix \"bad unlock balance\" in l2cap_disconnect_rsp\n\tstaging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE\n\tHID: logitech-hidpp: Don\u0027t use the USB serial for USB devices\n\tHID: logitech-hidpp: Reconcile USB and Unifying serials\n\tspi: spi-imx: fix MX51_ECSPI_* macros when cs \u003e 3\n\tHID: wacom: generic: Set battery quirk only when we see battery data\n\tusb: typec: tcpm: fix multiple times discover svids error\n\tserial: 8250: Reinit port-\u003epm on port specific driver unbind\n\tmcb-pci: Reallocate memory region to avoid memory overlapping\n\tsched: Fix KCSAN noinstr violation\n\trecordmcount: Fix memory leaks in the uwrite function\n\tRDMA/core: Fix multiple -Warray-bounds warnings\n\tclk: tegra20: fix gcc-7 constant overflow warning\n\tiommu/arm-smmu-v3: Acknowledge pri/event queue overflow if any\n\tInput: xpad - add constants for GIP interface numbers\n\tphy: st: miphy28lp: use _poll_timeout functions for waits\n\tmfd: dln2: Fix memory leak in dln2_probe()\n\tbtrfs: replace calls to btrfs_find_free_ino with btrfs_find_free_objectid\n\tbtrfs: fix space cache inconsistency after error loading it from disk\n\tASoC: fsl_micfil: register platform component before registering cpu dai\n\tcpupower: Make TSC read per CPU for Mperf monitor\n\taf_key: Reject optional tunnel/BEET mode templates in outbound policies\n\tnet: fec: Better handle pm_runtime_get() failing in .remove()\n\tALSA: firewire-digi00x: prevent potential use after free\n\tvsock: avoid to close connected socket after the timeout\n\tserial: arc_uart: fix of_iomap leak in `arc_serial_probe`\n\tip6_gre: Fix skb_under_panic in __gre6_xmit()\n\tip6_gre: Make o_seqno start from 0 in native mode\n\tip_gre, ip6_gre: Fix race condition on o_seqno in collect_md mode\n\terspan: get the proto with the md version for collect_md\n\tnet: hns3: fix sending pfc frames after reset issue\n\tnet: hns3: fix reset delay time to avoid configuration timeout\n\tmedia: netup_unidvb: fix use-after-free at del_timer()\n\tdrm/exynos: fix g2d_open/close helper function definitions\n\tnet: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()\n\tnet: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()\n\tnet: bcmgenet: Restore phy_stop() depending upon suspend/close\n\twifi: iwlwifi: mvm: don\u0027t trust firmware n_channels\n\tcassini: Fix a memory leak in the error handling path of cas_init_one()\n\tigb: fix bit_shift to be in [1..8] range\n\tvlan: fix a potential uninit-value in vlan_dev_hard_start_xmit()\n\tUSB: usbtmc: Fix direction for 0-length ioctl control messages\n\tusb-storage: fix deadlock when a scsi command timeouts more than once\n\tUSB: UHCI: adjust zhaoxin UHCI controllers OverCurrent bit value\n\tusb: dwc3: debugfs: Resume dwc3 before accessing registers\n\tusb: typec: altmodes/displayport: fix pin_assignment_show\n\tALSA: hda: Fix Oops by 9.1 surround channel names\n\tALSA: hda: Add NVIDIA codec IDs a3 through a7 to patch table\n\tALSA: hda/realtek: Add a quirk for HP EliteDesk 805\n\tALSA: hda/realtek: Add quirk for 2nd ASUS GU603\n\tcan: j1939: recvmsg(): allow MSG_CMSG_COMPAT flag\n\tcan: kvaser_pciefd: Set CAN_STATE_STOPPED in kvaser_pciefd_stop()\n\tcan: kvaser_pciefd: Call request_irq() before enabling interrupts\n\tcan: kvaser_pciefd: Empty SRB buffer in probe\n\tcan: kvaser_pciefd: Clear listen-only bit if not explicitly requested\n\tcan: kvaser_pciefd: Do not send EFLUSH command on TFD interrupt\n\tcan: kvaser_pciefd: Disable interrupts in probe error path\n\tKVM: x86: do not report a vCPU as preempted outside instruction boundaries\n\tstatfs: enforce statfs[64] structure initialization\n\tserial: Add support for Advantech PCI-1611U card\n\tceph: force updating the msg pointer in non-split case\n\ttpm/tpm_tis: Disable interrupts for more Lenovo devices\n\tpowerpc/64s/radix: Fix soft dirty tracking\n\tnilfs2: fix use-after-free bug of nilfs_root in nilfs_evict_inode()\n\tnetfilter: nftables: add nft_parse_register_load() and use it\n\tnetfilter: nftables: add nft_parse_register_store() and use it\n\tnetfilter: nftables: statify nft_parse_register()\n\tnetfilter: nf_tables: validate registers coming from userspace.\n\tnetfilter: nf_tables: add nft_setelem_parse_key()\n\tnetfilter: nf_tables: allow up to 64 bytes in the set element data area\n\tnetfilter: nf_tables: stricter validation of element data\n\tnetfilter: nf_tables: validate NFTA_SET_ELEM_OBJREF based on NFT_SET_OBJECT flag\n\tnetfilter: nf_tables: hold mutex on netns pre_exit path\n\tHID: wacom: Force pen out of prox if no events have been received in a while\n\tHID: wacom: Add new Intuos Pro Small (PTH-460) device IDs\n\tHID: wacom: add three styli to wacom_intuos_get_tool_type\n\tlib/string_helpers: Introduce string_upper() and string_lower() helpers\n\tusb: gadget: u_ether: Convert prints to device prints\n\tusb: gadget: u_ether: Fix host MAC address case\n\tvc_screen: rewrite vcs_size to accept vc, not inode\n\tvc_screen: reload load of struct vc_data pointer in vcs_write() to avoid UAF\n\ts390/qdio: get rid of register asm\n\ts390/qdio: fix do_sqbs() inline assembly constraint\n\twatchdog: sp5100_tco: Immediately trigger upon starting.\n\tspi: fsl-spi: Re-organise transfer bits_per_word adaptation\n\tspi: fsl-cpm: Use 16 bit mode for large transfers with even size\n\tmt76: mt7615: Fix build with older compilers\n\tALSA: hda/ca0132: add quirk for EVGA X299 DARK\n\tALSA: hda/realtek: Enable headset onLenovo M70/M90\n\tm68k: Move signal frame following exception on 68020/030\n\tparisc: Handle kgdb breakpoints only in kernel context\n\tparisc: Allow to reboot machine after system halt\n\tgpio: mockup: Fix mode of debugfs files\n\tbtrfs: use nofs when cleaning up aborted transactions\n\tx86/mm: Avoid incomplete Global INVLPG flushes\n\tselftests/memfd: Fix unknown type name build failure\n\tparisc: Fix flush_dcache_page() for usage from irq context\n\tx86/topology: Fix erroneous smp_num_siblings on Intel Hybrid platforms\n\tdebugobjects: Don\u0027t wake up kswapd from fill_pool()\n\tfbdev: udlfb: Fix endpoint check\n\tnet: fix stack overflow when LRO is disabled for virtual interfaces\n\tudplite: Fix NULL pointer dereference in __sk_mem_raise_allocated().\n\tUSB: core: Add routines for endpoint checks in old drivers\n\tUSB: sisusbvga: Add endpoint checks\n\tmedia: radio-shark: Add endpoint checks\n\tnet: fix skb leak in __skb_tstamp_tx()\n\tselftests: fib_tests: mute cleanup error message\n\tbpf: Fix mask generation for 32-bit narrow loads of 64-bit fields\n\tipv6: Fix out-of-bounds access in ipv6_find_tlv()\n\tpower: supply: leds: Fix blink to LED on transition\n\tpower: supply: bq27xxx: Fix bq27xxx_battery_update() race condition\n\tpower: supply: bq27xxx: Fix I2C IRQ race on remove\n\tpower: supply: bq27xxx: Fix poll_interval handling and races on remove\n\tpower: supply: sbs-charger: Fix INHIBITED bit for Status reg\n\tcoresight: Fix signedness bug in tmc_etr_buf_insert_barrier_packet()\n\txen/pvcalls-back: fix double frees with pvcalls_new_active_socket()\n\tx86/show_trace_log_lvl: Ensure stack pointer is aligned, again\n\tASoC: Intel: Skylake: Fix declaration of enum skl_ch_cfg\n\tforcedeth: Fix an error handling path in nv_probe()\n\tnet/mlx5: Fix error message when failing to allocate device memory\n\tnet/mlx5: Devcom, fix error flow in mlx5_devcom_register_device\n\t3c589_cs: Fix an error handling path in tc589_probe()\n\tLinux 5.4.244\n\nChange-Id: I056fbc6363372dca786e64c8b6649768e49ee2ed\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@google.com\u003e\n" }, { "commit": "4c85910ff83e5965c65ab7a1a8d22b0c1a8638fd", "tree": "b335ba3d929cd197685fe32fa86495a45d80ea8b", "parents": [ "cba632cb06d1a29c44eff488ec5339b028f04ae6" ], "author": { "name": "Greg Kroah-Hartman", "email": "gregkh@google.com", "time": "Fri Jun 16 09:24:38 2023 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@google.com", "time": "Fri Jun 16 09:26:26 2023 +0000" }, "message": "Revert \"PM: domains: Fix up terminology with parent/child\"\n\nThis reverts commit 35a2681e993726c5661600c1506b224ddcc01dc7 which is\ncommit 8d87ae48ced2dffd5e7247d19eb4c88be6f1c6f1 upstream.\n\nIt is not needed in Android systems, and it breaks the ABI for no real\nreason, so revert it.\n\nBug: 161946584\nChange-Id: I50c760760dad7e4fbbec88814d66b36445928771\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@google.com\u003e\n" }, { "commit": "92cfb8860254bdb9e5217a12569a957cecf95199", "tree": "e809dfd385ade79cf859a299e64499e25e3fb526", "parents": [ "2bd517d6bcc64fafc9c788cf885afbf07a03d15c" ], "author": { "name": "Greg Kroah-Hartman", "email": "gregkh@google.com", "time": "Fri Jun 16 09:24:01 2023 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@google.com", "time": "Fri Jun 16 09:25:57 2023 +0000" }, "message": "Revert \"scripts/gdb: bail early if there are no generic PD\"\n\nThis reverts commit 30ac77e9952504fdf72dbf8b467df1bf0a75934a which is\ncommit f19c3c2959e465209ade1a7a699e6cbf4359ce78 upstream.\n\nIt is not needed in Android systems, and it breaks the ABI for no real\nreason, so revert it.\n\nBug: 161946584\nChange-Id: I96195afffc4e2bb06d16b6489548b4b475b6599c\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@google.com\u003e\n" }, { "commit": "88ac2d9193226dc354999375e45c5e61cd2df350", "tree": "3c783b4297b3d6f23f956a50a42782c06ee2f966", "parents": [ "05fe88d1c80cfb043a308e17552416ade20e86f9", "f53660ec669f60c772fdf7d75d1c24d288547cee" ], "author": { "name": "Greg Kroah-Hartman", "email": "gregkh@google.com", "time": "Thu Jun 15 10:57:12 2023 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@google.com", "time": "Thu Jun 15 10:57:33 2023 +0000" }, "message": "Merge 5.4.243 into android11-5.4-lts\n\nChanges in 5.4.243\n\tcounter: 104-quad-8: Fix race condition between FLAG and CNTR reads\n\twifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()\n\tdrm/fb-helper: set x/yres_virtual in drm_fb_helper_check_var\n\tbluetooth: Perform careful capability checks in hci_sock_ioctl()\n\tUSB: serial: option: add UNISOC vendor and TOZED LT70C product\n\tiio: adc: palmas_gpadc: fix NULL dereference on rmmod\n\tASoC: Intel: bytcr_rt5640: Add quirk for the Acer Iconia One 7 B1-750\n\tasm-generic/io.h: suppress endianness warnings for readq() and writeq()\n\tUSB: dwc3: fix runtime pm imbalance on probe errors\n\tUSB: dwc3: fix runtime pm imbalance on unbind\n\tperf sched: Cast PTHREAD_STACK_MIN to int as it may turn into sysconf(__SC_THREAD_STACK_MIN_VALUE)\n\tstaging: iio: resolver: ads1210: fix config mode\n\tdebugfs: regset32: Add Runtime PM support\n\txhci: fix debugfs register accesses while suspended\n\tMIPS: fw: Allow firmware to pass a empty env\n\tipmi:ssif: Add send_retries increment\n\tipmi: fix SSIF not responding under certain cond.\n\tkheaders: Use array declaration instead of char\n\tpwm: meson: Fix axg ao mux parents\n\tpwm: meson: Fix g12a ao clk81 name\n\tring-buffer: Sync IRQ works before buffer destruction\n\treiserfs: Add security prefix to xattr name in reiserfs_security_write()\n\tKVM: nVMX: Emulate NOPs in L2, and PAUSE if it\u0027s not intercepted\n\ti2c: omap: Fix standard mode false ACK readings\n\tRevert \"ubifs: dirty_cow_znode: Fix memleak in error handling path\"\n\tubifs: Fix memleak when insert_old_idx() failed\n\tubi: Fix return value overwrite issue in try_write_vid_and_data()\n\tubifs: Free memory for tmpfile name\n\tselinux: fix Makefile dependencies of flask.h\n\tselinux: ensure av_permissions.h is built when needed\n\ttpm, tpm_tis: Do not skip reset of original interrupt vector\n\terofs: stop parsing non-compact HEAD index if clusterofs is invalid\n\terofs: fix potential overflow calculating xattr_isize\n\tdrm/rockchip: Drop unbalanced obj unref\n\tdrm/vgem: add missing mutex_destroy\n\tdrm/probe-helper: Cancel previous job before starting new one\n\tarm64: dts: renesas: r8a77990: Remove bogus voltages from OPP table\n\tarm64: dts: renesas: r8a774c0: Remove bogus voltages from OPP table\n\tEDAC/skx: Fix overflows on the DRAM row address mapping arrays\n\tARM: dts: qcom: ipq4019: Fix the PCI I/O port range\n\tARM: dts: qcom: ipq8064: reduce pci IO size to 64K\n\tARM: dts: qcom: ipq8064: Fix the PCI I/O port range\n\tmedia: bdisp: Add missing check for create_workqueue\n\tmedia: uapi: add MEDIA_BUS_FMT_METADATA_FIXED media bus format.\n\tmedia: av7110: prevent underflow in write_ts_to_decoder()\n\tfirmware: qcom_scm: Clear download bit during reboot\n\tdrm/msm: fix unbalanced pm_runtime_enable in adreno_gpu_{init, cleanup}\n\tdrm/msm/adreno: Defer enabling runpm until hw_init()\n\tdrm/msm/adreno: drop bogus pm_runtime_set_active()\n\tmmc: sdhci-of-esdhc: fix quirk to ignore command inhibit for data\n\tdrm/lima/lima_drv: Add missing unwind goto in lima_pdev_probe()\n\tregulator: core: Consistently set mutex_owner when using ww_mutex_lock_slow()\n\tregulator: core: Avoid lockdep reports when resolving supplies\n\tx86/apic: Fix atomic update of offset in reserve_eilvt_offset()\n\tmedia: dm1105: Fix use after free bug in dm1105_remove due to race condition\n\tmedia: saa7134: fix use after free bug in saa7134_finidev due to race condition\n\tmedia: rcar_fdp1: simplify error check logic at fdp_open()\n\tmedia: rcar_fdp1: fix pm_runtime_get_sync() usage count\n\tmedia: rcar_fdp1: Make use of the helper function devm_platform_ioremap_resource()\n\tmedia: rcar_fdp1: Fix the correct variable assignments\n\tmedia: rcar_fdp1: Fix refcount leak in probe and remove function\n\tmedia: rc: gpio-ir-recv: Fix support for wake-up\n\tregulator: stm32-pwr: fix of_iomap leak\n\tx86/ioapic: Don\u0027t return 0 from arch_dynirq_lower_bound()\n\tarm64: kgdb: Set PSTATE.SS to 1 to re-enable single-step\n\tdebugobject: Prevent init race with static objects\n\ttimekeeping: Split jiffies seqlock\n\ttick/sched: Use tick_next_period for lockless quick check\n\ttick/sched: Reduce seqcount held scope in tick_do_update_jiffies64()\n\ttick/sched: Optimize tick_do_update_jiffies64() further\n\ttick: Get rid of tick_period\n\ttick/common: Align tick period with the HZ tick.\n\twifi: ath6kl: minor fix for allocation size\n\twifi: ath9k: hif_usb: fix memory leak of remain_skbs\n\twifi: ath5k: fix an off by one check in ath5k_eeprom_read_freq_list()\n\twifi: ath6kl: reduce WARN to dev_dbg() in callback\n\ttools: bpftool: Remove invalid \\\u0027 json escape\n\twifi: rtw88: mac: Return the original error from rtw_pwr_seq_parser()\n\twifi: rtw88: mac: Return the original error from rtw_mac_power_switch()\n\tscm: fix MSG_CTRUNC setting condition for SO_PASSSEC\n\tvlan: partially enable SIOCSHWTSTAMP in container\n\tnet/packet: annotate accesses to po-\u003exmit\n\tnet/packet: convert po-\u003eorigdev to an atomic flag\n\tnet/packet: convert po-\u003eauxdata to an atomic flag\n\tscsi: target: iscsit: Fix TAS handling during conn cleanup\n\tscsi: megaraid: Fix mega_cmd_done() CMDID_INT_CMDS\n\tf2fs: handle dqget error in f2fs_transfer_project_quota()\n\trtlwifi: Start changing RT_TRACE into rtl_dbg\n\trtlwifi: Replace RT_TRACE with rtl_dbg\n\twifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_rfreg()\n\twifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_reg()\n\tbpftool: Fix bug for long instructions in program CFG dumps\n\tcrypto: drbg - make drbg_prepare_hrng() handle jent instantiation errors\n\tcrypto: drbg - Only fail when jent is unavailable in FIPS mode\n\tscsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()\n\tbpf, sockmap: fix deadlocks in the sockhash and sockmap\n\tnvme: handle the persistent internal error AER\n\tnvme: fix async event trace event\n\tnvme-fcloop: fix \"inconsistent {IN-HARDIRQ-W} -\u003e {HARDIRQ-ON-W} usage\"\n\tbpf, sockmap: Revert buggy deadlock fix in the sockhash and sockmap\n\tmd/raid10: fix leak of \u0027r10bio-\u003eremaining\u0027 for recovery\n\tmd/raid10: fix memleak for \u0027conf-\u003ebio_split\u0027\n\tmd: update the optimal I/O size on reshape\n\tmd/raid10: fix memleak of md thread\n\twifi: iwlwifi: make the loop for card preparation effective\n\twifi: iwlwifi: mvm: check firmware response size\n\tixgbe: Allow flow hash to be set via ethtool\n\tixgbe: Enable setting RSS table to default values\n\tbpf: Don\u0027t EFAULT for getsockopt with optval\u003dNULL\n\tnetfilter: nf_tables: don\u0027t write table validation state without mutex\n\tipv4: Fix potential uninit variable access bug in __ip_make_skb()\n\tRevert \"Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work\"\n\tnetlink: Use copy_to_user() for optval in netlink_getsockopt().\n\tnet: amd: Fix link leak when verifying config failed\n\ttcp/udp: Fix memleaks of sk and zerocopy skbs with TX timestamp.\n\tpstore: Revert pmsg_lock back to a normal mutex\n\tusb: host: xhci-rcar: remove leftover quirk handling\n\tfpga: bridge: fix kernel-doc parameter description\n\tiio: light: max44009: add missing OF device matching\n\tusb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition\n\tPCI: imx6: Install the fault handler only on compatible match\n\tgenirq: Add IRQF_NO_AUTOEN for request_irq/nmi()\n\tASoC: es8316: Use IRQF_NO_AUTOEN when requesting the IRQ\n\tASoC: es8316: Handle optional IRQ assignment\n\tlinux/vt_buffer.h: allow either builtin or modular for macros\n\tspi: qup: Don\u0027t skip cleanup in remove\u0027s error path\n\tspi: fsl-spi: Fix CPM/QE mode Litte Endian\n\tvmci_host: fix a race condition in vmci_host_poll() causing GPF\n\tof: Fix modalias string generation\n\tia64: mm/contig: fix section mismatch warning/error\n\tia64: salinfo: placate defined-but-not-used warning\n\tscripts/gdb: bail early if there are no clocks\n\tPM: domains: Fix up terminology with parent/child\n\tscripts/gdb: bail early if there are no generic PD\n\tmtd: spi-nor: cadence-quadspi: Make driver independent of flash geometry\n\tmtd: spi-nor: cadence-quadspi: Provide a way to disable DAC mode\n\tmtd: spi-nor: cadence-quadspi: Don\u0027t initialize rx_dma_complete on failure\n\tmtd: spi-nor: cadence-quadspi: Handle probe deferral while requesting DMA channel\n\tspi: cadence-quadspi: fix suspend-resume implementations\n\tuapi/linux/const.h: prefer ISO-friendly __typeof__\n\tsh: sq: Fix incorrect element size for allocating bitmap buffer\n\tusb: chipidea: fix missing goto in `ci_hdrc_probe`\n\tusb: mtu3: fix kernel panic at qmu transfer done irq handler\n\tfirmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe\n\ttty: serial: fsl_lpuart: adjust buffer length to the intended size\n\tserial: 8250: Add missing wakeup event reporting\n\tstaging: rtl8192e: Fix W_DISABLE# does not work after stop/start\n\tspmi: Add a check for remove callback when removing a SPMI driver\n\tmacintosh/windfarm_smu_sat: Add missing of_node_put()\n\tpowerpc/mpc512x: fix resource printk format warning\n\tpowerpc/wii: fix resource printk format warnings\n\tpowerpc/sysdev/tsi108: fix resource printk format warnings\n\tmacintosh: via-pmu-led: requires ATA to be set\n\tpowerpc/rtas: use memmove for potentially overlapping buffer copy\n\tperf/core: Fix hardlockup failure caused by perf throttle\n\tRDMA/siw: Fix potential page_array out of range access\n\tRDMA/rdmavt: Delete unnecessary NULL check\n\trtc: omap: include header for omap_rtc_power_off_program prototype\n\tRDMA/mlx4: Prevent shift wrapping in set_user_sq_size()\n\trtc: meson-vrtc: Use ktime_get_real_ts64() to get the current time\n\tpower: supply: generic-adc-battery: fix unit scaling\n\tclk: add missing of_node_put() in \"assigned-clocks\" property parsing\n\tRDMA/siw: Remove namespace check from siw_netdev_event()\n\tIB/hfi1: Fix SDMA mmu_rb_node not being evicted in LRU order\n\tNFSv4.1: Always send a RECLAIM_COMPLETE after establishing lease\n\tfirmware: raspberrypi: Keep count of all consumers\n\tfirmware: raspberrypi: Introduce devm_rpi_firmware_get()\n\tinput: raspberrypi-ts: Release firmware handle when not needed\n\tInput: raspberrypi-ts - fix refcount leak in rpi_ts_probe\n\tSUNRPC: remove the maximum number of retries in call_bind_status\n\tRDMA/mlx5: Use correct device num_ports when modify DC\n\tclocksource/drivers/davinci: Avoid trailing \u0027\\n\u0027 hidden in pr_fmt()\n\tclocksource: davinci: axe a pointless __GFP_NOFAIL\n\tclocksource/drivers/davinci: Fix memory leak in davinci_timer_register when init fails\n\topenrisc: Properly store r31 to pt_regs on unhandled exceptions\n\text4: fix use-after-free read in ext4_find_extent for bigalloc + inline\n\tleds: TI_LMU_COMMON: select REGMAP instead of depending on it\n\tdmaengine: mv_xor_v2: Fix an error code.\n\tpwm: mtk-disp: Don\u0027t check the return code of pwmchip_remove()\n\tpwm: mtk-disp: Adjust the clocks to avoid them mismatch\n\tpwm: mtk-disp: Disable shadow registers before setting backlight values\n\tphy: tegra: xusb: Add missing tegra_xusb_port_unregister for usb2_port and ulpi_port\n\tdmaengine: dw-edma: Fix to change for continuous transfer\n\tdmaengine: dw-edma: Fix to enable to issue dma request on DMA processing\n\tdmaengine: at_xdmac: do not enable all cyclic channels\n\tafs: Fix updating of i_size with dv jump from server\n\tparisc: Fix argument pointer in real64_call_asm()\n\tnilfs2: do not write dirty data after degenerating to read-only\n\tnilfs2: fix infinite loop in nilfs_mdt_get_block()\n\tmd/raid10: fix null-ptr-deref in raid10_sync_request\n\tmailbox: zynqmp: Fix IPI isr handling\n\tmailbox: zynqmp: Fix typo in IPI documentation\n\twifi: rtl8xxxu: RTL8192EU always needs full init\n\tclk: rockchip: rk3399: allow clk_cifout to force clk_cifout_src to reparent\n\tscripts/gdb: fix lx-timerlist for Python3\n\tbtrfs: scrub: reject unsupported scrub flags\n\ts390/dasd: fix hanging blockdevice after request requeue\n\tdm clone: call kmem_cache_destroy() in dm_clone_init() error path\n\tdm integrity: call kmem_cache_destroy() in dm_integrity_init() error path\n\tdm flakey: fix a crash with invalid table line\n\tdm ioctl: fix nested locking in table_clear() to remove deadlock concern\n\tperf auxtrace: Fix address filter entire kernel size\n\tperf intel-pt: Fix CYC timestamps after standalone CBR\n\tdebugobject: Ensure pool refill (again)\n\tnetfilter: nf_tables: deactivate anonymous set from preparation phase\n\tnohz: Add TICK_DEP_BIT_RCU\n\ttick/nohz: Fix cpu_is_hotpluggable() by checking with nohz subsystem\n\tmailbox: zynq: Switch to flexible array to simplify code\n\tmailbox: zynqmp: Fix counts of child nodes\n\tdm verity: skip redundant verity_handle_err() on I/O errors\n\tdm verity: fix error handling for check_at_most_once on FEC\n\tcrypto: inside-secure - irq balance\n\tcrypto: safexcel - Cleanup ring IRQ workqueues on load failure\n\tkernel/relay.c: fix read_pos error when multiple readers\n\trelayfs: fix out-of-bounds access in relay_file_read\n\tnet/ncsi: clear Tx enable mode when handling a Config required AEN\n\tnet/sched: cls_api: remove block_cb from driver_list before freeing\n\tsit: update dev-\u003eneeded_headroom in ipip6_tunnel_bind_dev()\n\tnet: dsa: mv88e6xxx: add mv88e6321 rsvd2cpu\n\twriteback: fix call of incorrect macro\n\tnet/sched: act_mirred: Add carrier check\n\trxrpc: Fix hard call timeout units\n\tionic: remove noise from ethtool rxnfc error msg\n\taf_packet: Don\u0027t send zero-byte data in packet_sendmsg_spkt().\n\tdrm/amdgpu: add a missing lock for AMDGPU_SCHED\n\tALSA: caiaq: input: Add error handling for unsupported input methods in `snd_usb_caiaq_input_init`\n\tnet: dsa: mt7530: fix corrupt frames using trgmii on 40 MHz XTAL MT7621\n\tvirtio_net: split free_unused_bufs()\n\tvirtio_net: suppress cpu stall when free_unused_bufs\n\tperf vendor events power9: Remove UTF-8 characters from JSON files\n\tperf map: Delete two variable initialisations before null pointer checks in sort__sym_from_cmp()\n\tperf symbols: Fix return incorrect build_id size in elf_read_build_id()\n\tbtrfs: fix btrfs_prev_leaf() to not return the same key twice\n\tbtrfs: don\u0027t free qgroup space unless specified\n\tbtrfs: print-tree: parent bytenr must be aligned to sector size\n\tcifs: fix pcchunk length type in smb2_copychunk_range\n\tplatform/x86: touchscreen_dmi: Add info for the Dexp Ursus KX210i\n\tinotify: Avoid reporting event with invalid wd\n\tsh: math-emu: fix macro redefined warning\n\tsh: init: use OF_EARLY_FLATTREE for early init\n\tsh: nmi_debug: fix return value of __setup handler\n\tremoteproc: stm32: Call of_node_put() on iteration error\n\tremoteproc: st: Call of_node_put() on iteration error\n\tARM: dts: exynos: fix WM8960 clock name in Itop Elite\n\tARM: dts: s5pv210: correct MIPI CSIS clock name\n\tf2fs: fix potential corruption when moving a directory\n\tdrm/panel: otm8009a: Set backlight parent to panel device\n\tdrm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini()\n\tdrm/amdgpu/gfx: disable gfx9 cp_ecc_error_irq only when enabling legacy gfx ras\n\tdrm/amdgpu: disable sdma ecc irq only when sdma RAS is enabled in suspend\n\tHID: wacom: Set a default resolution for older tablets\n\tHID: wacom: insert timestamp to packed Bluetooth (BT) events\n\text4: fix WARNING in mb_find_extent\n\text4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum\n\text4: fix data races when using cached status extents\n\text4: improve error recovery code paths in __ext4_remount()\n\text4: fix deadlock when converting an inline directory in nojournal mode\n\text4: add bounds checking in get_max_inline_xattr_value_size()\n\text4: bail out of ext4_xattr_ibody_get() fails for any reason\n\text4: remove a BUG_ON in ext4_mb_release_group_pa()\n\text4: fix invalid free tracking in ext4_xattr_move_to_block()\n\ttty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH\n\tserial: 8250: Fix serial8250_tx_empty() race with DMA Tx\n\tdrbd: correctly submit flush bio on barrier\n\tPCI: pciehp: Use down_read/write_nested(reset_lock) to fix lockdep errors\n\tPCI: pciehp: Fix AB-BA deadlock between reset_lock and device_lock\n\tprintk: declare printk_deferred_{enter,safe}() in include/linux/printk.h\n\tPM: domains: Restore comment indentation for generic_pm_domain.child_links\n\tdrm/msm: Fix double pm_runtime_disable() call\n\tfirmware: raspberrypi: fix possible memory leak in rpi_firmware_probe()\n\tdrm/msm/adreno: Fix null ptr access in adreno_gpu_cleanup()\n\tdrm/exynos: move to use request_irq by IRQF_NO_AUTOEN flag\n\tmm/page_alloc: fix potential deadlock on zonelist_update_seq seqlock\n\tdrm/amd/display: Fix hang when skipping modeset\n\tLinux 5.4.243\n\nChange-Id: I103e06e639a82ddc7ca60ffed98c898946b81542\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@google.com\u003e\n" }, { "commit": "a8a0447e0db7bd0be59d71adb24224b4e2353848", "tree": "129d09a46dc462c1775ba0738155991b6afc5fb3", "parents": [ "2b5bca9f1dc88566c1f438673f5096daf1e76808", "bffea4e72d4ba4e65d29ae653dd47db1f51808b9" ], "author": { "name": "Michael Bestas", "email": "mkbestas@lineageos.org", "time": "Thu Jun 08 12:00:01 2023 +0300" }, "committer": { "name": "Michael Bestas", "email": "mkbestas@lineageos.org", "time": "Thu Jun 08 12:00:01 2023 +0300" }, "message": "Merge tag \u0027ASB-2023-06-05_11-5.4\u0027 of https://android.googlesource.com/kernel/common into android13-5.4-lahaina\n\nhttps://source.android.com/docs/security/bulletin/2023-06-01\n\n* tag \u0027ASB-2023-06-05_11-5.4\u0027 of https://android.googlesource.com/kernel/common:\n UPSTREAM: io_uring: have io_kill_timeout() honor the request references\n UPSTREAM: io_uring: don\u0027t drop completion lock before timer is fully initialized\n UPSTREAM: io_uring: always grab lock in io_cancel_async_work()\n UPSTREAM: net: cdc_ncm: Deal with too low values of dwNtbOutMaxSize\n UPSTREAM: cdc_ncm: Fix the build warning\n UPSTREAM: cdc_ncm: Implement the 32-bit version of NCM Transfer Block\n UPSTREAM: ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum\n UPSTREAM: ext4: fix invalid free tracking in ext4_xattr_move_to_block()\n Revert \"Revert \"mm/rmap: Fix anon_vma-\u003edegree ambiguity leading to double-reuse\"\"\n FROMLIST: binder: fix UAF caused by faulty buffer cleanup\n Linux 5.4.242\n ASN.1: Fix check for strdup() success\n iio: adc: at91-sama5d2_adc: fix an error code in at91_adc_allocate_trigger()\n pwm: meson: Explicitly set .polarity in .get_state()\n xfs: fix forkoff miscalculation related to XFS_LITINO(mp)\n sctp: Call inet6_destroy_sock() via sk-\u003esk_destruct().\n dccp: Call inet6_destroy_sock() via sk-\u003esk_destruct().\n inet6: Remove inet6_destroy_sock() in sk-\u003esk_prot-\u003edestroy().\n tcp/udp: Call inet6_destroy_sock() in IPv6 sk-\u003esk_destruct().\n udp: Call inet6_destroy_sock() in setsockopt(IPV6_ADDRFORM).\n ext4: fix use-after-free in ext4_xattr_set_entry\n ext4: remove duplicate definition of ext4_xattr_ibody_inline_set()\n Revert \"ext4: fix use-after-free in ext4_xattr_set_entry\"\n x86/purgatory: Don\u0027t generate debug info for purgatory.ro\n MIPS: Define RUNTIME_DISCARD_EXIT in LD script\n mmc: sdhci_am654: Set HIGH_SPEED_ENA for SDR12 and SDR25\n memstick: fix memory leak if card device is never registered\n nilfs2: initialize unused bytes in segment summary blocks\n iio: light: tsl2772: fix reading proximity-diodes from device tree\n xen/netback: use same error messages for same errors\n nvme-tcp: fix a possible UAF when failing to allocate an io queue\n s390/ptrace: fix PTRACE_GET_LAST_BREAK error handling\n net: dsa: b53: mmap: add phy ops\n scsi: core: Improve scsi_vpd_inquiry() checks\n scsi: megaraid_sas: Fix fw_crash_buffer_show()\n selftests: sigaltstack: fix -Wuninitialized\n Input: i8042 - add quirk for Fujitsu Lifebook A574/H\n f2fs: Fix f2fs_truncate_partial_nodes ftrace event\n e1000e: Disable TSO on i219-LM card to increase speed\n bpf: Fix incorrect verifier pruning due to missing register precision taints\n mlxfw: fix null-ptr-deref in mlxfw_mfa2_tlv_next()\n i40e: fix i40e_setup_misc_vector() error handling\n i40e: fix accessing vsi-\u003eactive_filters without holding lock\n netfilter: nf_tables: fix ifdef to also consider nf_tables\u003dm\n virtio_net: bugfix overflow inside xdp_linearize_page()\n net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg\n regulator: fan53555: Explicitly include bits header\n netfilter: br_netfilter: fix recent physdev match breakage\n arm64: dts: meson-g12-common: specify full DMC range\n ARM: dts: rockchip: fix a typo error for rk3288 spdif node\n Linux 5.4.241\n xfs: force log and push AIL to clear pinned inodes when aborting mount\n xfs: don\u0027t reuse busy extents on extent trim\n xfs: consider shutdown in bmapbt cursor delete assert\n xfs: shut down the filesystem if we screw up quota reservation\n xfs: report corruption only as a regular error\n xfs: set inode size after creating symlink\n xfs: fix up non-directory creation in SGID directories\n xfs: remove the di_version field from struct icdinode\n xfs: simplify a check in xfs_ioctl_setattr_check_cowextsize\n xfs: simplify di_flags2 inheritance in xfs_ialloc\n xfs: only check the superblock version for dinode size calculation\n xfs: add a new xfs_sb_version_has_v3inode helper\n xfs: remove the kuid/kgid conversion wrappers\n xfs: remove the icdinode di_uid/di_gid members\n xfs: ensure that the inode uid/gid match values match the icdinode ones\n xfs: merge the projid fields in struct xfs_icdinode\n xfs: show the proper user quota options\n coresight-etm4: Fix for() loop drvdata-\u003enr_addr_cmp range bug\n watchdog: sbsa_wdog: Make sure the timeout programming is within the limits\n i2c: ocores: generate stop condition after timeout in polling mode\n ubi: Fix deadlock caused by recursively holding work_sem\n mtd: ubi: wl: Fix a couple of kernel-doc issues\n ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size\n asymmetric_keys: log on fatal failures in PE/pkcs7\n verify_pefile: relax wrapper length check\n drm: panel-orientation-quirks: Add quirk for Lenovo Yoga Book X90F\n efi: sysfb_efi: Add quirk for Lenovo Yoga Book X91F/L\n i2c: imx-lpi2c: clean rx/tx buffers upon new message\n power: supply: cros_usbpd: reclassify \"default case!\" as debug\n net: macb: fix a memory corruption in extended buffer descriptor mode\n udp6: fix potential access to stale information\n RDMA/core: Fix GID entry ref leak when create_ah fails\n sctp: fix a potential overflow in sctp_ifwdtsn_skip\n qlcnic: check pci_reset_function result\n niu: Fix missing unwind goto in niu_alloc_channels()\n 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition\n mtd: rawnand: stm32_fmc2: remove unsupported EDO mode\n mtd: rawnand: meson: fix bitmask for length in command word\n mtdblock: tolerate corrected bit-flips\n btrfs: fix fast csum implementation detection\n btrfs: print checksum type and implementation at mount time\n Bluetooth: Fix race condition in hidp_session_thread\n Bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp}\n ALSA: hda/sigmatel: fix S/PDIF out on Intel D*45* motherboards\n ALSA: firewire-tascam: add missing unwind goto in snd_tscm_stream_start_duplex()\n ALSA: i2c/cs8427: fix iec958 mixer control deactivation\n ALSA: hda/sigmatel: add pin overrides for Intel DP45SG motherboard\n ALSA: emu10k1: fix capture interrupt handler unlinking\n Revert \"pinctrl: amd: Disable and mask interrupts on resume\"\n irqdomain: Fix mapping-creation race\n irqdomain: Refactor __irq_domain_alloc_irqs()\n irqdomain: Look for existing mapping only once\n mm/swap: fix swap_info_struct race between swapoff and get_swap_pages()\n ring-buffer: Fix race while reader and writer are on the same page\n drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path\n net_sched: prevent NULL dereference if default qdisc setup failed\n tracing: Free error logs of tracing instances\n can: j1939: j1939_tp_tx_dat_new(): fix out-of-bounds memory access\n ftrace: Mark get_lock_parent_ip() __always_inline\n perf/core: Fix the same task check in perf_event_set_output\n ALSA: hda/realtek: Add quirk for Clevo X370SNW\n nilfs2: fix sysfs interface lifetime\n nilfs2: fix potential UAF of struct nilfs_sc_info in nilfs_segctor_thread()\n tty: serial: fsl_lpuart: avoid checking for transfer complete when UARTCTRL_SBK is asserted in lpuart32_tx_empty\n tty: serial: sh-sci: Fix Rx on RZ/G2L SCI\n tty: serial: sh-sci: Fix transmit end interrupt handler\n iio: dac: cio-dac: Fix max DAC write value check for 12-bit\n iio: adc: ti-ads7950: Set `can_sleep` flag for GPIO chip\n USB: serial: option: add Quectel RM500U-CN modem\n USB: serial: option: add Telit FE990 compositions\n usb: typec: altmodes/displayport: Fix configure initial pin assignment\n USB: serial: cp210x: add Silicon Labs IFS-USB-DATACABLE IDs\n xhci: also avoid the XHCI_ZERO_64B_REGS quirk with a passthrough iommu\n NFSD: callback request does not use correct credential for AUTH_SYS\n sunrpc: only free unix grouplist after RCU settles\n gpio: davinci: Add irq chip flag to skip set wake\n ipv6: Fix an uninit variable access bug in __ip6_make_skb()\n sctp: check send stream number after wait_for_sndbuf\n net: don\u0027t let netpoll invoke NAPI if in xmit context\n icmp: guard against too small mtu\n wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for non-uploaded sta\n pwm: sprd: Explicitly set .polarity in .get_state()\n pwm: cros-ec: Explicitly set .polarity in .get_state()\n pinctrl: amd: Disable and mask interrupts on resume\n pinctrl: amd: disable and mask interrupts on probe\n pinctrl: amd: Use irqchip template\n smb3: fix problem with null cifs super block with previous patch\n treewide: Replace DECLARE_TASKLET() with DECLARE_TASKLET_OLD()\n Revert \"treewide: Replace DECLARE_TASKLET() with DECLARE_TASKLET_OLD()\"\n cgroup/cpuset: Wake up cpuset_attach_wq tasks in cpuset_cancel_attach()\n x86/PCI: Add quirk for AMD XHCI controller that loses MSI-X state in D3hot\n scsi: ses: Handle enclosure with just a primary component gracefully\n Linux 5.4.240\n gfs2: Always check inode size of inline inodes\n firmware: arm_scmi: Fix device node validation for mailbox transport\n net: sched: fix race condition in qdisc_graft()\n net_sched: add __rcu annotation to netdev-\u003eqdisc\n ext4: fix kernel BUG in \u0027ext4_write_inline_data_end()\u0027\n btrfs: scan device in non-exclusive mode\n s390/uaccess: add missing earlyclobber annotations to __clear_user()\n drm/etnaviv: fix reference leak when mmaping imported buffer\n ALSA: usb-audio: Fix regression on detection of Roland VS-100\n ALSA: hda/conexant: Partial revert of a quirk for Lenovo\n NFSv4: Fix hangs when recovering open state after a server reboot\n pinctrl: at91-pio4: fix domain name assignment\n xen/netback: don\u0027t do grant copy across page boundary\n Input: goodix - add Lenovo Yoga Book X90F to nine_bytes_report DMI table\n cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL\n cifs: prevent infinite recursion in CIFSGetDFSRefer()\n Input: focaltech - use explicitly signed char type\n Input: alps - fix compatibility with -funsigned-char\n pinctrl: ocelot: Fix alt mode for ocelot\n net: mvneta: make tx buffer array agnostic\n net: dsa: mv88e6xxx: Enable IGMP snooping on user ports only\n bnxt_en: Fix typo in PCI id to device description string mapping\n i40e: fix registers dump after run ethtool adapter self test\n s390/vfio-ap: fix memory leak in vfio_ap device driver\n can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write\n net/net_failover: fix txq exceeding warning\n regulator: Handle deferred clk\n regulator: fix spelling mistake \"Cant\" -\u003e \"Can\u0027t\"\n ptp_qoriq: fix memory leak in probe()\n scsi: megaraid_sas: Fix crash after a double completion\n mtd: rawnand: meson: invalidate cache on polling ECC bit\n mips: bmips: BCM6358: disable RAC flush for TP1\n dma-mapping: drop the dev argument to arch_sync_dma_for_*\n ca8210: Fix unsigned mac_len comparison with zero in ca8210_skb_tx()\n fbdev: au1200fb: Fix potential divide by zero\n fbdev: lxfb: Fix potential divide by zero\n fbdev: intelfb: Fix potential divide by zero\n fbdev: nvidia: Fix potential divide by zero\n sched_getaffinity: don\u0027t assume \u0027cpumask_size()\u0027 is fully initialized\n fbdev: tgafb: Fix potential divide by zero\n ALSA: hda/ca0132: fixup buffer overrun at tuning_ctl_set()\n ALSA: asihpi: check pao in control_message()\n md: avoid signed overflow in slot_store()\n bus: imx-weim: fix branch condition evaluates to a garbage value\n fsverity: don\u0027t drop pagecache at end of FS_IOC_ENABLE_VERITY\n ocfs2: fix data corruption after failed write\n tun: avoid double free in tun_free_netdev\n sched/fair: Sanitize vruntime of entity being migrated\n sched/fair: sanitize vruntime of entity being placed\n dm crypt: add cond_resched() to dmcrypt_write()\n dm stats: check for and propagate alloc_percpu failure\n i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()\n nilfs2: fix kernel-infoleak in nilfs_ioctl_wrap_copy()\n wifi: mac80211: fix qos on mesh interfaces\n usb: chipidea: core: fix possible concurrent when switch role\n usb: chipdea: core: fix return -EINVAL if request role is the same with current role\n usb: cdns3: Fix issue with using incorrect PCI device function\n dm thin: fix deadlock when swapping to thin device\n igb: revert rtnl_lock() that causes deadlock\n fsverity: Remove WQ_UNBOUND from fsverity read workqueue\n usb: gadget: u_audio: don\u0027t let userspace block driver unbind\n scsi: core: Add BLIST_SKIP_VPD_PAGES for SKhynix H28U74301AMR\n cifs: empty interface list when server doesn\u0027t support query interfaces\n sh: sanitize the flags on sigreturn\n net: usb: qmi_wwan: add Telit 0x1080 composition\n net: usb: cdc_mbim: avoid altsetting toggling for Telit FE990\n scsi: lpfc: Avoid usage of list iterator variable after loop\n scsi: ufs: core: Add soft dependency on governor_simpleondemand\n scsi: target: iscsi: Fix an error message in iscsi_check_key()\n selftests/bpf: check that modifier resolves after pointer\n m68k: Only force 030 bus error if PC not in exception table\n ca8210: fix mac_len negative array access\n riscv: Bump COMMAND_LINE_SIZE value to 1024\n thunderbolt: Use const qualifier for `ring_interrupt_index`\n uas: Add US_FL_NO_REPORT_OPCODES for JMicron JMS583Gen 2\n scsi: qla2xxx: Perform lockless command completion in abort path\n hwmon (it87): Fix voltage scaling for chips with 10.9mV ADCs\n platform/chrome: cros_ec_chardev: fix kernel data leak from ioctl\n Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work\n Bluetooth: btqcomsmd: Fix command timeout after setting BD address\n net: mdio: thunder: Add missing fwnode_handle_put()\n hvc/xen: prevent concurrent accesses to the shared ring\n nvme-tcp: fix nvme_tcp_term_pdu to match spec\n net/sonic: use dma_mapping_error() for error check\n erspan: do not use skb_mac_header() in ndo_start_xmit()\n atm: idt77252: fix kmemleak when rmmod idt77252\n net/mlx5: Read the TC mapping of all priorities on ETS query\n bpf: Adjust insufficient default bpf_jit_limit\n keys: Do not cache key in task struct if key is requested from kernel thread\n net/ps3_gelic_net: Use dma_mapping_error\n net/ps3_gelic_net: Fix RX sk_buff length\n net: qcom/emac: Fix use after free bug in emac_remove due to race condition\n xirc2ps_cs: Fix use after free bug in xirc2ps_detach\n qed/qed_sriov: guard against NULL derefs from qed_iov_get_vf_info\n net: usb: smsc95xx: Limit packet length to skb-\u003elen\n scsi: scsi_dh_alua: Fix memleak for \u0027qdata\u0027 in alua_activate()\n i2c: imx-lpi2c: check only for enabled interrupt flags\n igbvf: Regard vf reset nack as success\n intel/igbvf: free irq on the error path in igbvf_request_msix()\n iavf: fix non-tunneled IPv6 UDP packet type and hashing\n iavf: fix inverted Rx hash condition leading to disabled hash\n power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition\n net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()\n Linux 5.4.239\n selftests: Fix the executable permissions for fib_tests.sh\n BACKPORT: mac80211_hwsim: notify wmediumd of used MAC addresses\n FROMGIT: mac80211_hwsim: add concurrent channels scanning support over virtio\n Revert \"HID: core: Provide new max_buffer_size attribute to over-ride the default\"\n Revert \"HID: uhid: Over-ride the default maximum data buffer value with our own\"\n Linux 5.4.238\n HID: uhid: Over-ride the default maximum data buffer value with our own\n HID: core: Provide new max_buffer_size attribute to over-ride the default\n PCI: Unify delay handling for reset and resume\n s390/ipl: add missing intersection check to ipl_report handling\n serial: 8250_em: Fix UART port type\n drm/i915: Don\u0027t use stolen memory for ring buffers with LLC\n x86/mm: Fix use of uninitialized buffer in sme_enable()\n fbdev: stifb: Provide valid pixelclock and add fb_check_var() checks\n ftrace: Fix invalid address access in lookup_rec() when index is 0\n KVM: nVMX: add missing consistency checks for CR0 and CR4\n tracing: Make tracepoint lockdep check actually test something\n tracing: Check field value in hist_field_name()\n interconnect: fix mem leak when freeing nodes\n tty: serial: fsl_lpuart: skip waiting for transmission complete when UARTCTRL_SBK is asserted\n ext4: fix possible double unlock when moving a directory\n sh: intc: Avoid spurious sizeof-pointer-div warning\n drm/amdkfd: Fix an illegal memory access\n ext4: fix task hung in ext4_xattr_delete_inode\n ext4: fail ext4_iget if special inode unallocated\n jffs2: correct logic when creating a hole in jffs2_write_begin\n mmc: atmel-mci: fix race between stop command and start of next command\n media: m5mols: fix off-by-one loop termination error\n hwmon: (ina3221) return prober error code\n hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition\n hwmon: (adt7475) Fix masking of hysteresis registers\n hwmon: (adt7475) Display smoothing attributes in correct order\n ethernet: sun: add check for the mdesc_grab()\n net/iucv: Fix size of interrupt data\n net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull\n ipv4: Fix incorrect table ID in IOCTL path\n block: sunvdc: add check for mdesc_grab() returning NULL\n nvmet: avoid potential UAF in nvmet_req_complete()\n net: usb: smsc75xx: Limit packet length to skb-\u003elen\n nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition\n net: phy: smsc: bail out in lan87xx_read_status if genphy_read_status fails\n net: tunnels: annotate lockless accesses to dev-\u003eneeded_headroom\n qed/qed_dev: guard against a possible division by zero\n i40e: Fix kernel crash during reboot when adapter is in recovery mode\n ipvlan: Make skb-\u003eskb_iif track skb-\u003edev for l3s mode\n nfc: pn533: initialize struct pn533_out_arg properly\n tcp: tcp_make_synack() can be called from process context\n scsi: core: Fix a procfs host directory removal regression\n scsi: core: Fix a comment in function scsi_host_dev_release()\n netfilter: nft_redir: correct value of inet type `.maxattrs`\n ALSA: hda: Match only Intel devices with CONTROLLER_IN_GPU()\n ALSA: hda: Add Intel DG2 PCI ID and HDMI codec vid\n ALSA: hda: Add Alderlake-S PCI ID and HDMI codec vid\n ALSA: hda - controller is in GPU on the DG1\n ALSA: hda - add Intel DG1 PCI and HDMI ids\n scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()\n docs: Correct missing \"d_\" prefix for dentry_operations member d_weak_revalidate\n clk: HI655X: select REGMAP instead of depending on it\n drm/meson: fix 1px pink line on GXM when scaling video overlay\n cifs: Move the in_send statistic to __smb_send_rqst()\n drm/panfrost: Don\u0027t sync rpm suspension after mmu flushing\n xfrm: Allow transport-mode states with AF_UNSPEC selector\n ext4: fix cgroup writeback accounting with fs-layer encryption\n ANDROID: preserve CRC for __irq_domain_add()\n Revert \"drm/exynos: Don\u0027t reset bridge-\u003enext\"\n Revert \"drm/bridge: Rename bridge helpers targeting a bridge chain\"\n Revert \"drm/bridge: Introduce drm_bridge_get_next_bridge()\"\n Revert \"drm: Initialize struct drm_crtc_state.no_vblank from device settings\"\n Revert \"drm/msm/mdp5: Add check for kzalloc\"\n Linux 5.4.237\n s390/dasd: add missing discipline function\n UML: define RUNTIME_DISCARD_EXIT\n sh: define RUNTIME_DISCARD_EXIT\n s390: define RUNTIME_DISCARD_EXIT to fix link error with GNU ld \u003c 2.36\n powerpc/vmlinux.lds: Don\u0027t discard .rela* for relocatable builds\n powerpc/vmlinux.lds: Define RUNTIME_DISCARD_EXIT\n arch: fix broken BuildID for arm64 and riscv\n x86, vmlinux.lds: Add RUNTIME_DISCARD_EXIT to generic DISCARDS\n drm/i915: Don\u0027t use BAR mappings for ring buffers with LLC\n ipmi:watchdog: Set panic count to proper value on a panic\n ipmi/watchdog: replace atomic_add() and atomic_sub()\n media: ov5640: Fix analogue gain control\n PCI: Add SolidRun vendor ID\n macintosh: windfarm: Use unsigned type for 1-bit bitfields\n alpha: fix R_ALPHA_LITERAL reloc for large modules\n MIPS: Fix a compilation issue\n ext4: Fix deadlock during directory rename\n riscv: Use READ_ONCE_NOCHECK in imprecise unwinding stack mode\n net/smc: fix fallback failed while sendmsg with fastopen\n scsi: megaraid_sas: Update max supported LD IDs to 240\n btf: fix resolving BTF_KIND_VAR after ARRAY, STRUCT, UNION, PTR\n netfilter: tproxy: fix deadlock due to missing BH disable\n bnxt_en: Avoid order-5 memory allocation for TPA data\n net: caif: Fix use-after-free in cfusbl_device_notify()\n net: lan78xx: fix accessing the LAN7800\u0027s internal phy specific registers from the MAC driver\n net: usb: lan78xx: Remove lots of set but unused \u0027ret\u0027 variables\n selftests: nft_nat: ensuring the listening side is up before starting the client\n ila: do not generate empty messages in ila_xlat_nl_cmd_get_mapping()\n nfc: fdp: add null check of devm_kmalloc_array in fdp_nci_i2c_read_device_properties\n drm/msm/a5xx: fix setting of the CP_PREEMPT_ENABLE_LOCAL register\n ext4: Fix possible corruption when moving a directory\n scsi: core: Remove the /proc/scsi/${proc_name} directory earlier\n cifs: Fix uninitialized memory read in smb3_qfs_tcon()\n SMB3: Backup intent flag missing from some more ops\n iommu/vt-d: Fix PASID directory pointer coherency\n irqdomain: Fix domain registration race\n irqdomain: Change the type of \u0027size\u0027 in __irq_domain_add() to be consistent\n ipmi:ssif: Add a timer between request retries\n ipmi:ssif: Increase the message retry time\n ipmi:ssif: Remove rtc_us_timer\n ipmi:ssif: resend_msg() cannot fail\n ipmi:ssif: make ssif_i2c_send() void\n iommu/amd: Add a length limitation for the ivrs_acpihid command-line parameter\n iommu/amd: Fix ill-formed ivrs_ioapic, ivrs_hpet and ivrs_acpihid options\n iommu/amd: Add PCI segment support for ivrs_[ioapic/hpet/acpihid] commands\n nfc: change order inside nfc_se_io error path\n ext4: zero i_disksize when initializing the bootloader inode\n ext4: fix WARNING in ext4_update_inline_data\n ext4: move where set the MAY_INLINE_DATA flag is set\n ext4: fix another off-by-one fsmap error on 1k block filesystems\n ext4: fix RENAME_WHITEOUT handling for inline directories\n drm/connector: print max_requested_bpc in state debugfs\n x86/CPU/AMD: Disable XSAVES on AMD family 0x17\n fs: prevent out-of-bounds array speculation when closing a file descriptor\n Linux 5.4.236\n staging: rtl8192e: Remove call_usermodehelper starting RadioPower.sh\n staging: rtl8192e: Remove function ..dm_check_ac_dc_power calling a script\n wifi: cfg80211: Partial revert \"wifi: cfg80211: Fix use after free for wext\"\n Linux 5.4.235\n dt-bindings: rtc: sun6i-a31-rtc: Loosen the requirements on the clocks\n media: uvcvideo: Fix race condition with usb_kill_urb\n media: uvcvideo: Provide sync and async uvc_ctrl_status_event\n tcp: Fix listen() regression in 5.4.229.\n Bluetooth: hci_sock: purge socket queues in the destruct() callback\n x86/resctl: fix scheduler confusion with \u0027current\u0027\n x86/resctrl: Apply READ_ONCE/WRITE_ONCE to task_struct.{rmid,closid}\n net: tls: avoid hanging tasks on the tx_lock\n phy: rockchip-typec: Fix unsigned comparison with less than zero\n PCI: Add ACS quirk for Wangxun NICs\n kernel/fail_function: fix memory leak with using debugfs_lookup()\n usb: uvc: Enumerate valid values for color matching\n USB: ene_usb6250: Allocate enough memory for full object\n usb: host: xhci: mvebu: Iterate over array indexes instead of using pointer math\n iio: accel: mma9551_core: Prevent uninitialized variable in mma9551_read_config_word()\n iio: accel: mma9551_core: Prevent uninitialized variable in mma9551_read_status_word()\n tools/iio/iio_utils:fix memory leak\n mei: bus-fixup:upon error print return values of send and receive\n tty: serial: fsl_lpuart: disable the CTS when send break signal\n tty: fix out-of-bounds access in tty_driver_lookup_tty()\n staging: emxx_udc: Add checks for dma_alloc_coherent()\n media: uvcvideo: Silence memcpy() run-time false positive warnings\n media: uvcvideo: Quirk for autosuspend in Logitech B910 and C910\n media: uvcvideo: Handle errors from calls to usb_string\n media: uvcvideo: Handle cameras with invalid descriptors\n mfd: arizona: Use pm_runtime_resume_and_get() to prevent refcnt leak\n firmware/efi sysfb_efi: Add quirk for Lenovo IdeaPad Duet 3\n tracing: Add NULL checks for buffer in ring_buffer_free_read_page()\n thermal: intel: BXT_PMIC: select REGMAP instead of depending on it\n thermal: intel: quark_dts: fix error pointer dereference\n scsi: ipr: Work around fortify-string warning\n rtc: sun6i: Always export the internal oscillator\n rtc: sun6i: Make external 32k oscillator optional\n vc_screen: modify vcs_size() handling in vcs_read()\n tcp: tcp_check_req() can be called from process context\n ARM: dts: spear320-hmi: correct STMPE GPIO compatible\n net/sched: act_sample: fix action bind logic\n nfc: fix memory leak of se_io context in nfc_genl_se_io\n net/mlx5: Geneve, Fix handling of Geneve object id as error code\n 9p/rdma: unmap receive dma buffer in rdma_request()/post_recv()\n 9p/xen: fix connection sequence\n 9p/xen: fix version parsing\n net: fix __dev_kfree_skb_any() vs drop monitor\n sctp: add a refcnt in sctp_stream_priorities to avoid a nested loop\n ipv6: Add lwtunnel encap size of all siblings in nexthop calculation\n netfilter: ctnetlink: fix possible refcount leak in ctnetlink_create_conntrack()\n watchdog: pcwd_usb: Fix attempting to access uninitialized memory\n watchdog: Fix kmemleak in watchdog_cdev_register\n watchdog: at91sam9_wdt: use devm_request_irq to avoid missing free_irq() in error path\n x86: um: vdso: Add \u0027%rcx\u0027 and \u0027%r11\u0027 to the syscall clobber list\n ubi: ubi_wl_put_peb: Fix infinite loop when wear-leveling work failed\n ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()\n ubifs: ubifs_writepage: Mark page dirty after writing inode failed\n ubifs: dirty_cow_znode: Fix memleak in error handling path\n ubifs: Re-statistic cleaned znode count if commit failed\n ubi: Fix possible null-ptr-deref in ubi_free_volume()\n ubifs: Fix memory leak in alloc_wbufs()\n ubi: Fix unreferenced object reported by kmemleak in ubi_resize_volume()\n ubi: Fix use-after-free when volume resizing failed\n ubifs: Reserve one leb for each journal head while doing budget\n ubifs: do_rename: Fix wrong space budget when target inode\u0027s nlink \u003e 1\n ubifs: Fix wrong dirty space budget for dirty inode\n ubifs: Rectify space budget for ubifs_xrename()\n ubifs: Rectify space budget for ubifs_symlink() if symlink is encrypted\n ubifs: Fix build errors as symbol undefined\n ubi: ensure that VID header offset + VID header size \u003c\u003d alloc, size\n um: vector: Fix memory leak in vector_config\n fs: f2fs: initialize fsdata in pagecache_write()\n f2fs: use memcpy_{to,from}_page() where possible\n pwm: stm32-lp: fix the check on arr and cmp registers update\n pwm: sifive: Always let the first pwm_apply_state succeed\n pwm: sifive: Reduce time the controller lock is held\n fs/jfs: fix shift exponent db_agl2size negative\n net/sched: Retire tcindex classifier\n kbuild: Port silent mode detection to future gnu make.\n wifi: ath9k: use proper statements in conditionals\n drm/radeon: Fix eDP for single-display iMac11,2\n drm/i915/quirks: Add inverted backlight quirk for HP 14-r206nv\n PCI: Avoid FLR for AMD FCH AHCI adapters\n PCI: hotplug: Allow marking devices as disconnected during bind/unbind\n PCI/PM: Observe reset delay irrespective of bridge_d3\n scsi: ses: Fix slab-out-of-bounds in ses_intf_remove()\n scsi: ses: Fix possible desc_ptr out-of-bounds accesses\n scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses\n scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process()\n scsi: ses: Don\u0027t attach if enclosure has no components\n scsi: qla2xxx: Fix erroneous link down\n scsi: qla2xxx: Fix DMA-API call trace on NVMe LS requests\n scsi: qla2xxx: Fix link failure in NPIV environment\n ktest.pl: Add RUN_TIMEOUT option with default unlimited\n ktest.pl: Fix missing \"end_monitor\" when machine check fails\n ktest.pl: Give back console on Ctrt^C on monitor\n mm/thp: check and bail out if page in deferred queue already\n mm: memcontrol: deprecate charge moving\n media: ipu3-cio2: Fix PM runtime usage_count in driver unbind\n mips: fix syscall_get_nr\n alpha: fix FEN fault handling\n rbd: avoid use-after-free in do_rbd_add() when rbd_dev_create() fails\n ARM: dts: exynos: correct TMU phandle in Odroid XU\n ARM: dts: exynos: correct TMU phandle in Exynos4\n dm flakey: don\u0027t corrupt the zero page\n dm flakey: fix logic when corrupting a bio\n thermal: intel: powerclamp: Fix cur_state for multi package system\n wifi: cfg80211: Fix use after free for wext\n wifi: rtl8xxxu: Use a longer retry limit of 48\n ext4: refuse to create ea block when umounted\n ext4: optimize ea_inode block expansion\n ALSA: hda/realtek: Add quirk for HP EliteDesk 800 G6 Tower PC\n ALSA: ice1712: Do not left ice-\u003egpio_mutex locked in aureon_add_controls()\n irqdomain: Drop bogus fwspec-mapping error handling\n irqdomain: Fix disassociation race\n irqdomain: Fix association race\n ima: Align ima_file_mmap() parameters with mmap_file LSM hook\n Documentation/hw-vuln: Document the interaction between IBRS and STIBP\n x86/speculation: Allow enabling STIBP with legacy IBRS\n x86/microcode/AMD: Fix mixed steppings support\n x86/microcode/AMD: Add a @cpu parameter to the reloading functions\n x86/microcode/amd: Remove load_microcode_amd()\u0027s bsp parameter\n x86/kprobes: Fix arch_check_optimized_kprobe check within optimized_kprobe range\n x86/kprobes: Fix __recover_optprobed_insn check optimizing logic\n x86/reboot: Disable SVM, not just VMX, when stopping CPUs\n x86/reboot: Disable virtualization in an emergency if SVM is supported\n x86/crash: Disable virt in core NMI crash handler to avoid double shootdown\n x86/virt: Force GIF\u003d1 prior to disabling SVM (for reboot flows)\n KVM: s390: disable migration mode when dirty tracking is disabled\n KVM: Destroy target device if coalesced MMIO unregistration fails\n udf: Fix file corruption when appending just after end of preallocated extent\n udf: Detect system inodes linked into directory hierarchy\n udf: Preserve link count of system files\n udf: Do not update file length for failed writes to inline files\n udf: Do not bother merging very long extents\n udf: Truncate added extents on failed expansion\n ocfs2: fix non-auto defrag path not working issue\n ocfs2: fix defrag path triggering jbd2 ASSERT\n f2fs: fix cgroup writeback accounting with fs-layer encryption\n f2fs: fix information leak in f2fs_move_inline_dirents()\n fs: hfsplus: fix UAF issue in hfsplus_put_super\n hfs: fix missing hfs_bnode_get() in __hfs_bnode_create\n ARM: dts: exynos: correct HDMI phy compatible in Exynos4\n s390/kprobes: fix current_kprobe never cleared after kprobes reenter\n s390/kprobes: fix irq mask clobbering on kprobe reenter from post_handler\n s390: discard .interp section\n ipmi_ssif: Rename idle state and check\n rtc: pm8xxx: fix set-alarm race\n firmware: coreboot: framebuffer: Ignore reserved pixel color bits\n wifi: rtl8xxxu: fixing transmisison failure for rtl8192eu\n nfsd: zero out pointers after putting nfsd_files on COPY setup error\n dm cache: add cond_resched() to various workqueue loops\n dm thin: add cond_resched() to various workqueue loops\n drm: panel-orientation-quirks: Add quirk for Lenovo IdeaPad Duet 3 10IGL5\n pinctrl: at91: use devm_kasprintf() to avoid potential leaks\n hwmon: (coretemp) Simplify platform device handling\n regulator: s5m8767: Bounds check id indexing into arrays\n regulator: max77802: Bounds check regulator id against opmode\n ASoC: kirkwood: Iterate over array indexes instead of using pointer math\n docs/scripts/gdb: add necessary make scripts_gdb step\n drm/msm/dsi: Add missing check for alloc_ordered_workqueue\n drm/radeon: free iio for atombios when driver shutdown\n HID: Add Mapping for System Microphone Mute\n drm/omap: dsi: Fix excessive stack usage\n drm/amd/display: Fix potential null-deref in dm_resume\n uaccess: Add minimum bounds check on kernel buffer size\n coda: Avoid partial allocation of sig_inputArgs\n net/mlx5: fw_tracer: Fix debug print\n ACPI: video: Fix Lenovo Ideapad Z570 DMI match\n wifi: mt76: dma: free rx_head in mt76_dma_rx_cleanup\n m68k: Check syscall_trace_enter() return code\n net: bcmgenet: Add a check for oversized packets\n ACPI: Don\u0027t build ACPICA with \u0027-Os\u0027\n ice: add missing checks for PF vsi type\n inet: fix fast path in __inet_hash_connect()\n wifi: mt7601u: fix an integer underflow\n wifi: brcmfmac: ensure CLM version is null-terminated to prevent stack-out-of-bounds\n x86/bugs: Reset speculation control settings on init\n timers: Prevent union confusion from unexpected restart_syscall()\n thermal: intel: Fix unsigned comparison with less than zero\n rcu: Suppress smp_processor_id() complaint in synchronize_rcu_expedited_wait()\n wifi: brcmfmac: Fix potential stack-out-of-bounds in brcmf_c_preinit_dcmds()\n blk-iocost: fix divide by 0 error in calc_lcoefs()\n ARM: dts: exynos: Use Exynos5420 compatible for the MIPI video phy\n udf: Define EFSCORRUPTED error code\n rpmsg: glink: Avoid infinite loop on intent for missing channel\n media: usb: siano: Fix use after free bugs caused by do_submit_urb\n media: i2c: ov7670: 0 instead of -EINVAL was returned\n media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()\n media: i2c: ov772x: Fix memleak in ov772x_probe()\n media: ov5675: Fix memleak in ov5675_init_controls()\n powerpc: Remove linker flag from KBUILD_AFLAGS\n media: platform: ti: Add missing check for devm_regulator_get\n remoteproc: qcom_q6v5_mss: Use a carveout to authenticate modem headers\n MIPS: vpe-mt: drop physical_memsize\n MIPS: SMP-CPS: fix build error when HOTPLUG_CPU not set\n powerpc/eeh: Set channel state after notifying the drivers\n powerpc/eeh: Small refactor of eeh_handle_normal_event()\n powerpc/rtas: ensure 4KB alignment for rtas_data_buf\n powerpc/rtas: make all exports GPL\n powerpc/pseries/lparcfg: add missing RTAS retry status handling\n powerpc/pseries/lpar: add missing RTAS retry status handling\n clk: Honor CLK_OPS_PARENT_ENABLE in clk_core_is_enabled()\n powerpc/powernv/ioda: Skip unallocated resources when mapping to PE\n clk: qcom: gpucc-sdm845: fix clk_dis_wait being programmed for CX GDSC\n Input: ads7846 - don\u0027t check penirq immediately for 7845\n Input: ads7846 - don\u0027t report pressure for ads7845\n clk: renesas: cpg-mssr: Remove superfluous check in resume code\n clk: renesas: cpg-mssr: Use enum clk_reg_layout instead of a boolean flag\n clk: renesas: cpg-mssr: Fix use after free if cpg_mssr_common_init() failed\n mtd: rawnand: sunxi: Fix the size of the last OOB region\n clk: qcom: gcc-qcs404: fix names of the DSI clocks used as parents\n clk: qcom: gcc-qcs404: disable gpll[04]_out_aux parents\n mfd: pcf50633-adc: Fix potential memleak in pcf50633_adc_async_read()\n selftests/ftrace: Fix bash specific \"\u003d\u003d\" operator\n sparc: allow PM configs for sparc32 COMPILE_TEST\n perf tools: Fix auto-complete on aarch64\n perf llvm: Fix inadvertent file creation\n gfs2: jdata writepage fix\n cifs: Fix warning and UAF when destroy the MR list\n cifs: Fix lost destroy smbd connection when MR allocate failed\n nfsd: fix race to check ls_layouts\n hid: bigben_probe(): validate report count\n HID: asus: Fix mute and touchpad-toggle keys on Medion Akoya E1239T\n HID: asus: Add support for multi-touch touchpad on Medion Akoya E1239T\n HID: asus: Add report_size to struct asus_touchpad_info\n HID: asus: Only set EV_REP if we are adding a mapping\n HID: bigben: use spinlock to safely schedule workers\n HID: bigben_worker() remove unneeded check on report_field\n HID: bigben: use spinlock to protect concurrent accesses\n ASoC: soc-dapm.h: fixup warning struct snd_pcm_substream not declared\n ASoC: dapm: declare missing structure prototypes\n spi: synquacer: Fix timeout handling in synquacer_spi_transfer_one()\n dm: remove flush_scheduled_work() during local_exit()\n hwmon: (mlxreg-fan) Return zero speed for broken fan\n spi: bcm63xx-hsspi: Fix multi-bit mode setting\n spi: bcm63xx-hsspi: fix pm_runtime\n scsi: aic94xx: Add missing check for dma_map_single()\n hwmon: (ltc2945) Handle error case in ltc2945_value_store\n gpio: vf610: connect GPIO label to dev name\n ASoC: soc-compress.c: fixup private_data on snd_soc_new_compress()\n drm/mediatek: Clean dangling pointer on bind error path\n drm/mediatek: Drop unbalanced obj unref\n drm/mediatek: Use NULL instead of 0 for NULL pointer\n drm/mediatek: remove cast to pointers passed to kfree\n gpu: host1x: Don\u0027t skip assigning syncpoints to channels\n drm/msm/mdp5: Add check for kzalloc\n drm: Initialize struct drm_crtc_state.no_vblank from device settings\n drm/bridge: Introduce drm_bridge_get_next_bridge()\n drm/bridge: Rename bridge helpers targeting a bridge chain\n drm/exynos: Don\u0027t reset bridge-\u003enext\n drm/msm/dpu: Add check for pstates\n drm/msm/dpu: Add check for cstate\n drm/msm: use strscpy instead of strncpy\n drm/mipi-dsi: Fix byte order of 16-bit DCS set/get brightness\n ALSA: hda/ca0132: minor fix for allocation size\n ASoC: fsl_sai: initialize is_dsp_mode flag\n pinctrl: stm32: Fix refcount leak in stm32_pctrl_get_irq_domain\n drm/msm/hdmi: Add missing check for alloc_ordered_workqueue\n gpu: ipu-v3: common: Add of_node_put() for reference returned by of_graph_get_port_by_id()\n drm/vc4: dpi: Fix format mapping for RGB565\n drm/vc4: dpi: Add option for inverting pixel clock and output enable\n drm/bridge: megachips: Fix error handling in i2c_register_driver()\n drm: mxsfb: DRM_MXSFB should depend on ARCH_MXS || ARCH_MXC\n drm/fourcc: Add missing big-endian XRGB1555 and RGB565 formats\n selftest: fib_tests: Always cleanup before exit\n selftests/net: Interpret UDP_GRO cmsg data as an int value\n irqchip/irq-bcm7120-l2: Set IRQ_LEVEL for level triggered interrupts\n irqchip/irq-brcmstb-l2: Set IRQ_LEVEL for level triggered interrupts\n can: esd_usb: Move mislocated storage of SJA1000_ECC_SEG bits in case of a bus error\n thermal/drivers/hisi: Drop second sensor hi3660\n wifi: mac80211: make rate u32 in sta_set_rate_info_rx()\n crypto: crypto4xx - Call dma_unmap_page when done\n wifi: mwifiex: fix loop iterator in mwifiex_update_ampdu_txwinsize()\n wifi: iwl4965: Add missing check for create_singlethread_workqueue()\n wifi: iwl3945: Add missing check for create_singlethread_workqueue\n treewide: Replace DECLARE_TASKLET() with DECLARE_TASKLET_OLD()\n usb: gadget: udc: Avoid tasklet passing a global\n RISC-V: time: initialize hrtimer based broadcast clock event device\n m68k: /proc/hardware should depend on PROC_FS\n crypto: rsa-pkcs1pad - Use akcipher_request_complete\n rds: rds_rm_zerocopy_callback() correct order for list_add_tail()\n libbpf: Fix alen calculation in libbpf_nla_dump_errormsg()\n Bluetooth: L2CAP: Fix potential user-after-free\n OPP: fix error checking in opp_migrate_dentry()\n tap: tap_open(): correctly initialize socket uid\n tun: tun_chr_open(): correctly initialize socket uid\n net: add sock_init_data_uid()\n mptcp: add sk_stop_timer_sync helper\n irqchip/ti-sci: Fix refcount leak in ti_sci_intr_irq_domain_probe\n irqchip/irq-mvebu-gicp: Fix refcount leak in mvebu_gicp_probe\n irqchip/alpine-msi: Fix refcount leak in alpine_msix_init_domains\n net/mlx5: Enhance debug print in page allocation failure\n powercap: fix possible name leak in powercap_register_zone()\n crypto: seqiv - Handle EBUSY correctly\n crypto: essiv - Handle EBUSY correctly\n crypto: essiv - remove redundant null pointer check before kfree\n crypto: ccp - Failure on re-initialization due to duplicate sysfs filename\n ACPI: battery: Fix missing NUL-termination with large strings\n wifi: ath9k: Fix potential stack-out-of-bounds write in ath9k_wmi_rsp_callback()\n wifi: ath9k: hif_usb: clean up skbs if ath9k_hif_usb_rx_stream() fails\n ath9k: htc: clean up statistics macros\n ath9k: hif_usb: simplify if-if to if-else\n wifi: ath9k: htc_hst: free skb in ath9k_htc_rx_msg() if there is no callback function\n wifi: orinoco: check return value of hermes_write_wordrec()\n ACPICA: nsrepair: handle cases without a return value correctly\n lib/mpi: Fix buffer overrun when SG is too long\n genirq: Fix the return type of kstat_cpu_irqs_sum()\n ACPICA: Drop port I/O validation for some regions\n crypto: x86/ghash - fix unaligned access in ghash_setkey()\n wifi: wl3501_cs: don\u0027t call kfree_skb() under spin_lock_irqsave()\n wifi: libertas: cmdresp: don\u0027t call kfree_skb() under spin_lock_irqsave()\n wifi: libertas: main: don\u0027t call kfree_skb() under spin_lock_irqsave()\n wifi: libertas: if_usb: don\u0027t call kfree_skb() under spin_lock_irqsave()\n wifi: libertas_tf: don\u0027t call kfree_skb() under spin_lock_irqsave()\n wifi: brcmfmac: unmap dma buffer in brcmf_msgbuf_alloc_pktid()\n wifi: brcmfmac: fix potential memory leak in brcmf_netdev_start_xmit()\n wifi: wilc1000: fix potential memory leak in wilc_mac_xmit()\n wilc1000: let wilc_mac_xmit() return NETDEV_TX_OK\n wifi: ipw2200: fix memory leak in ipw_wdev_init()\n wifi: ipw2x00: don\u0027t call dev_kfree_skb() under spin_lock_irqsave()\n ipw2x00: switch from \u0027pci_\u0027 to \u0027dma_\u0027 API\n wifi: rtlwifi: Fix global-out-of-bounds bug in _rtl8812ae_phy_set_txpower_limit()\n rtlwifi: fix -Wpointer-sign warning\n wifi: rtl8xxxu: don\u0027t call dev_kfree_skb() under spin_lock_irqsave()\n wifi: libertas: fix memory leak in lbs_init_adapter()\n wifi: iwlegacy: common: don\u0027t call dev_kfree_skb() under spin_lock_irqsave()\n net/wireless: Delete unnecessary checks before the macro call “dev_kfree_skb”\n wifi: rsi: Fix memory leak in rsi_coex_attach()\n block: bio-integrity: Copy flags when bio_integrity_payload is cloned\n sched/rt: pick_next_rt_entity(): check list_entry\n sched/deadline,rt: Remove unused parameter from pick_next_[rt|dl]_entity()\n s390/dasd: Fix potential memleak in dasd_eckd_init()\n s390/dasd: Prepare for additional path event handling\n blk-mq: correct stale comment of .get_budget\n blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait\n blk-mq: remove stale comment for blk_mq_sched_mark_restart_hctx\n block: Limit number of items taken from the I/O scheduler in one go\n Revert \"scsi: core: run queue if SCSI device queue isn\u0027t ready and queue is idle\"\n arm64: dts: mediatek: mt7622: Add missing pwm-cells to pwm node\n ARM: dts: imx7s: correct iomuxc gpr mux controller cells\n arm64: dts: amlogic: meson-gxl-s905d-phicomm-n1: fix led node name\n arm64: dts: amlogic: meson-gxl: add missing unit address to eth-phy-mux node name\n arm64: dts: amlogic: meson-gx: add missing unit address to rng node name\n arm64: dts: amlogic: meson-gx: add missing SCPI sensors compatible\n arm64: dts: amlogic: meson-axg: fix SCPI clock dvfs node name\n arm64: dts: amlogic: meson-gx: fix SCPI clock dvfs node name\n ARM: imx: Call ida_simple_remove() for ida_simple_get\n ARM: dts: exynos: correct wr-active property in Exynos3250 Rinato\n ARM: OMAP1: call platform_device_put() in error case in omap1_dm_timer_init()\n arm64: dts: meson: remove CPU opps below 1GHz for G12A boards\n arm64: dts: meson-gx: Fix the SCPI DVFS node name and unit address\n arm64: dts: meson-g12a: Fix internal Ethernet PHY unit name\n arm64: dts: meson-gx: Fix Ethernet MAC address unit name\n ARM: zynq: Fix refcount leak in zynq_early_slcr_init\n arm64: dts: qcom: qcs404: use symbol names for PCIe resets\n ARM: OMAP2+: Fix memory leak in realtime_counter_init()\n HID: asus: use spinlock to safely schedule workers\n HID: asus: use spinlock to protect concurrent accesses\n HID: asus: Remove check for same LED brightness on set\n Linux 5.4.234\n USB: core: Don\u0027t hold device lock while reading the \"descriptors\" sysfs file\n USB: serial: option: add support for VW/Skoda \"Carstick LTE\"\n dmaengine: sh: rcar-dmac: Check for error num after dma_set_max_seg_size\n vc_screen: don\u0027t clobber return value in vcs_read\n net: Remove WARN_ON_ONCE(sk-\u003esk_forward_alloc) from sk_stream_kill_queues().\n bpf: bpf_fib_lookup should not return neigh in NUD_FAILED state\n HID: core: Fix deadloop in hid_apply_multiplier.\n neigh: make sure used and confirmed times are valid\n IB/hfi1: Assign npages earlier\n btrfs: send: limit number of clones and allocated memory size\n ACPI: NFIT: fix a potential deadlock during NFIT teardown\n ARM: dts: rockchip: add power-domains property to dp node on rk3288\n arm64: dts: rockchip: drop unused LED mode property from rk3328-roc-cc\n\n Conflicts:\n\tDocumentation/devicetree/bindings/rtc/allwinner,sun6i-a31-rtc.yaml\n\tDocumentation/devicetree/bindings~HEAD\n\tarch/arm/mm/dma-mapping.c\n\tdrivers/clk/qcom/gcc-qcs404.c\n\tdrivers/iommu/dma-iommu.c\n\tdrivers/mtd/ubi/wl.c\n\tkernel/dma/direct.c\n\nChange-Id: I804ccb5552f305c49ec17b323c6c933cc99e6d39\n" }, { "commit": "3ed95a6f6c646e8bb15c354536e0ab10e8f39c08", "tree": "566a08200f9b7fd6877ccb604d7bfef7773fe921", "parents": [ "38a118fd545b011d52d9785b1951c51769509eb8" ], "author": { "name": "Hao Zeng", "email": "zenghao@kylinos.cn", "time": "Wed Apr 26 09:05:27 2023 +0800" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Tue May 30 12:44:04 2023 +0100" }, "message": "recordmcount: Fix memory leaks in the uwrite function\n\n[ Upstream commit fa359d068574d29e7d2f0fdd0ebe4c6a12b5cfb9 ]\n\nCommon realloc mistake: \u0027file_append\u0027 nulled but not freed upon failure\n\nLink: https://lkml.kernel.org/r/20230426010527.703093-1-zenghao@kylinos.cn\n\nSigned-off-by: Hao Zeng \u003czenghao@kylinos.cn\u003e\nSuggested-by: Steven Rostedt \u003crostedt@goodmis.org\u003e\nSigned-off-by: Steven Rostedt (Google) \u003crostedt@goodmis.org\u003e\nSigned-off-by: Sasha Levin \u003csashal@kernel.org\u003e\n" }, { "commit": "83fdf72a166bd7b2dcbbf20721a35901f65e8a21", "tree": "1b6bd1afda16ac146bdf5000eef4e2c9ec436b0e", "parents": [ "460f325dcb2fa62d381f5d162d02d417d38c9410", "4716ccc31d553a429bc2ab3c813c81ee9edcfc73" ], "author": { "name": "kamasali Satyanarayan", "email": "quic_kamasali@quicinc.com", "time": "Mon Apr 24 15:00:29 2023 +0530" }, "committer": { "name": "kamasali Satyanarayan", "email": "quic_kamasali@quicinc.com", "time": "Tue May 30 11:16:10 2023 +0530" }, "message": "Merge android11-5.4.233+ (4716ccc) into msm-5.4\n\n* remotes/origin/tmp-4716ccc :\n UPSTREAM: media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()\n ANDROID: incremental fs: Evict inodes before freeing mount data\n UPSTREAM: ext4: fix kernel BUG in \u0027ext4_write_inline_data_end()\u0027\n UPSTREAM: hid: bigben_probe(): validate report count\n UPSTREAM: HID: bigben: use spinlock to safely schedule workers\n BACKPORT: of: base: Skip CPU nodes with \"fail\"/\"fail-...\" status\n UPSTREAM: HID: bigben_worker() remove unneeded check on report_field\n UPSTREAM: HID: bigben: use spinlock to protect concurrent accesses\n UPSTREAM: hwrng: virtio - add an internal buffer\n UPSTREAM: ext4: fix another off-by-one fsmap error on 1k block filesystems\n UPSTREAM: ext4: refuse to create ea block when umounted\n UPSTREAM: ext4: optimize ea_inode block expansion\n UPSTREAM: ext4: allocate extended attribute value in vmalloc area\n BACKPORT: FROMGIT: cgroup: Use separate src/dst nodes when preloading css_sets for migration\n ANDROID: fs/f2fs: fixup __f2fs_cluster_blocks with F2FS_FS_COMPRESSION\n UPSTREAM: usb: gadget: f_fs: Ensure ep0req is dequeued before free_request\n UPSTREAM: KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS\n Revert \"iommu: Add gfp parameter to iommu_ops::map\"\n Revert \"iommu/amd: Pass gfp flags to iommu_map_page() in amd_iommu_map()\"\n Revert \"RDMA/usnic: use iommu_map_atomic() under spin_lock()\"\n Linux 5.4.233\n bpf: add missing header file include\n Revert \"net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs\"\n ext4: Fix function prototype mismatch for ext4_feat_ktype\n wifi: mwifiex: Add missing compatible string for SD8787\n uaccess: Add speculation barrier to copy_from_user()\n mac80211: mesh: embedd mesh_paths and mpp_paths into ieee80211_if_mesh\n drm/i915/gvt: fix double free bug in split_2MB_gtt_entry\n alarmtimer: Prevent starvation by small intervals and SIG_IGN\n powerpc: dts: t208x: Disable 10G on MAC1 and MAC2\n can: kvaser_usb: hydra: help gcc-13 to figure out cmd_len\n KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS\n KVM: x86: Fail emulation during EMULTYPE_SKIP on any exception\n random: always mix cycle counter in add_latent_entropy()\n powerpc: dts: t208x: Mark MAC1 and MAC2 as 10G\n wifi: rtl8xxxu: gen2: Turn on the rate control\n drm/etnaviv: don\u0027t truncate physical page address\n drm: etnaviv: fix common struct sg_table related issues\n scatterlist: add generic wrappers for iterating over sgtable objects\n dma-mapping: add generic helpers for mapping sgtable objects\n Linux 5.4.232\n iommu/amd: Pass gfp flags to iommu_map_page() in amd_iommu_map()\n net: sched: sch: Fix off by one in htb_activate_prios()\n ASoC: SOF: Intel: hda-dai: fix possible stream_tag leak\n nilfs2: fix underflow in second superblock position calculations\n kvm: initialize all of the kvm_debugregs structure before sending it to userspace\n i40e: Add checking for null for nlmsg_find_attr()\n ipv6: Fix tcp socket connection with DSCP.\n ipv6: Fix datagram socket connection with DSCP.\n ixgbe: add double of VLAN header when computing the max MTU\n net: mpls: fix stale pointer if allocation fails during device rename\n net: stmmac: Restrict warning on disabling DMA store and fwd mode\n bnxt_en: Fix mqprio and XDP ring checking logic\n net: stmmac: fix order of dwmac5 FlexPPS parametrization sequence\n net/usb: kalmia: Don\u0027t pass act_len in usb_bulk_msg error path\n dccp/tcp: Avoid negative sk_forward_alloc by ipv6_pinfo.pktoptions.\n sctp: sctp_sock_filter(): avoid list_entry() on possibly empty list\n net: bgmac: fix BCM5358 support by setting correct flags\n i40e: add double of VLAN header when computing the max MTU\n ixgbe: allow to increase MTU to 3K with XDP enabled\n revert \"squashfs: harden sanity check in squashfs_read_xattr_id_table\"\n net: Fix unwanted sign extension in netdev_stats_to_stats64()\n Revert \"mm: Always release pages to the buddy allocator in memblock_free_late().\"\n hugetlb: check for undefined shift on 32 bit architectures\n sched/psi: Fix use-after-free in ep_remove_wait_queue()\n ALSA: hda/realtek - fixed wrong gpio assigned\n ALSA: hda/conexant: add a new hda codec SN6180\n mmc: mmc_spi: fix error handling in mmc_spi_probe()\n mmc: sdio: fix possible resource leaks in some error paths\n ipv4: Fix incorrect route flushing when source address is deleted\n Revert \"ipv4: Fix incorrect route flushing when source address is deleted\"\n xfs: sync lazy sb accounting on quiesce of read-only mounts\n xfs: prevent UAF in xfs_log_item_in_current_chkpt\n xfs: fix the forward progress assertion in xfs_iwalk_run_callbacks\n xfs: ensure inobt record walks always make forward progress\n xfs: fix missing CoW blocks writeback conversion retry\n xfs: only relog deferred intent items if free space in the log gets low\n xfs: expose the log push threshold\n xfs: periodically relog deferred intent items\n xfs: change the order in which child and parent defer ops are finished\n xfs: fix an incore inode UAF in xfs_bui_recover\n xfs: clean up xfs_bui_item_recover iget/trans_alloc/ilock ordering\n xfs: clean up bmap intent item recovery checking\n xfs: xfs_defer_capture should absorb remaining transaction reservation\n xfs: xfs_defer_capture should absorb remaining block reservations\n xfs: proper replay of deferred ops queued during log recovery\n xfs: fix finobt btree block recovery ordering\n xfs: log new intent items created as part of finishing recovered intent items\n xfs: refactor xfs_defer_finish_noroll\n xfs: turn dfp_intent into a xfs_log_item\n xfs: merge the -\u003ediff_items defer op into -\u003ecreate_intent\n xfs: merge the -\u003elog_item defer op into -\u003ecreate_intent\n xfs: factor out a xfs_defer_create_intent helper\n xfs: remove the xfs_inode_log_item_t typedef\n xfs: remove the xfs_efd_log_item_t typedef\n xfs: remove the xfs_efi_log_item_t typedef\n netfilter: nft_tproxy: restrict to prerouting hook\n btrfs: free device in btrfs_close_devices for a single device filesystem\n aio: fix mremap after fork null-deref\n nvme-fc: fix a missing queue put in nvmet_fc_ls_create_association\n s390/decompressor: specify __decompress() buf len to avoid overflow\n net: sched: sch: Bounds check priority\n net: stmmac: do not stop RX_CLK in Rx LPI state for qcs404 SoC\n net/rose: Fix to not accept on connected socket\n tools/virtio: fix the vringh test for virtio ring changes\n ASoC: cs42l56: fix DT probe\n selftests/bpf: Verify copy_register_state() preserves parent/live fields\n migrate: hugetlb: check for hugetlb shared PMD in node migration\n bpf: Always return target ifindex in bpf_fib_lookup\n nvme-pci: Move enumeration by class to be last in the table\n arm64: dts: meson-axg: Make mmc host controller interrupts level-sensitive\n arm64: dts: meson-g12-common: Make mmc host controller interrupts level-sensitive\n arm64: dts: meson-gx: Make mmc host controller interrupts level-sensitive\n riscv: Fixup race condition on PG_dcache_clean in flush_icache_pte\n ceph: flush cap releases when the session is flushed\n usb: typec: altmodes/displayport: Fix probe pin assign check\n usb: core: add quirk for Alcor Link AK9563 smartcard reader\n net: USB: Fix wrong-direction WARNING in plusb.c\n pinctrl: intel: Restore the pins that used to be in Direct IRQ mode\n pinctrl: single: fix potential NULL dereference\n pinctrl: aspeed: Fix confusing types in return value\n ALSA: pci: lx6464es: fix a debug loop\n selftests: forwarding: lib: quote the sysctl values\n rds: rds_rm_zerocopy_callback() use list_first_entry()\n ice: Do not use WQ_MEM_RECLAIM flag for workqueue\n ionic: clean interrupt before enabling queue to avoid credit race\n net: phy: meson-gxl: use MMD access dummy stubs for GXL, internal PHY\n bonding: fix error checking in bond_debug_reregister()\n xfrm: fix bug with DSCP copy to v6 from v4 tunnel\n RDMA/usnic: use iommu_map_atomic() under spin_lock()\n iommu: Add gfp parameter to iommu_ops::map\n IB/IPoIB: Fix legacy IPoIB due to wrong number of queues\n IB/hfi1: Restore allocated resources on failed copyout\n can: j1939: do not wait 250 ms if the same addr was already claimed\n tracing: Fix poll() and select() do not work on per_cpu trace_pipe and trace_pipe_raw\n ALSA: emux: Avoid potential array out-of-bound in snd_emux_xg_control()\n btrfs: zlib: zero-initialize zlib workspace\n btrfs: limit device extents to the device size\n iio:adc:twl6030: Enable measurement of VAC\n wifi: brcmfmac: Check the count value of channel spec to prevent out-of-bounds reads\n f2fs: fix to do sanity check on i_extra_isize in is_alive()\n fbdev: smscufx: fix error handling code in ufx_usb_probe\n powerpc/imc-pmu: Revert nest_init_lock to being a mutex\n serial: 8250_dma: Fix DMA Rx rearm race\n serial: 8250_dma: Fix DMA Rx completion race\n xprtrdma: Fix regbuf data not freed in rpcrdma_req_create()\n mm: swap: properly update readahead statistics in unuse_pte_range()\n nvmem: core: fix cell removal on error\n Squashfs: fix handling and sanity checking of xattr_ids count\n mm/swapfile: add cond_resched() in get_swap_pages()\n fpga: stratix10-soc: Fix return value check in s10_ops_write_init()\n mm: hugetlb: proc: check for hugetlb shared PMD in /proc/PID/smaps\n riscv: disable generation of unwind tables\n parisc: Wire up PTRACE_GETREGS/PTRACE_SETREGS for compat case\n parisc: Fix return code of pdc_iodc_print()\n iio:adc:twl6030: Enable measurements of VUSB, VBAT and others\n iio: adc: berlin2-adc: Add missing of_node_put() in error path\n iio: hid: fix the retval in accel_3d_capture_sample\n efi: Accept version 2 of memory attributes table\n watchdog: diag288_wdt: fix __diag288() inline assembly\n watchdog: diag288_wdt: do not use stack buffers for hardware data\n fbcon: Check font dimension limits\n Input: i8042 - add Clevo PCX0DX to i8042 quirk table\n Input: i8042 - add TUXEDO devices to i8042 quirk tables\n Input: i8042 - merge quirk tables\n Input: i8042 - move __initconst to fix code styling warning\n vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF\n usb: gadget: f_fs: Fix unbalanced spinlock in __ffs_ep0_queue_wait\n usb: dwc3: qcom: enable vbus override when in OTG dr-mode\n usb: dwc3: dwc3-qcom: Fix typo in the dwc3 vbus override API\n iio: adc: stm32-dfsdm: fill module aliases\n net/x25: Fix to not accept on connected socket\n i2c: rk3x: fix a bunch of kernel-doc warnings\n scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress\n scsi: target: core: Fix warning on RT kernels\n efi: fix potential NULL deref in efi_mem_reserve_persistent\n net: openvswitch: fix flow memory leak in ovs_flow_cmd_new\n virtio-net: Keep stop() to follow mirror sequence of open()\n selftests: net: udpgso_bench_tx: Cater for pending datagrams zerocopy benchmarking\n selftests: net: udpgso_bench: Fix racing bug between the rx/tx programs\n selftests: net: udpgso_bench_rx/tx: Stop when wrong CLI args are provided\n selftests: net: udpgso_bench_rx: Fix \u0027used uninitialized\u0027 compiler warning\n ata: libata: Fix sata_down_spd_limit() when no link speed is reported\n can: j1939: fix errant WARN_ON_ONCE in j1939_session_deactivate\n net: phy: meson-gxl: Add generic dummy stubs for MMD register access\n squashfs: harden sanity check in squashfs_read_xattr_id_table\n netfilter: br_netfilter: disable sabotage_in hook after first suppression\n netrom: Fix use-after-free caused by accept on already connected socket\n fix \"direction\" argument of iov_iter_kvec()\n fix iov_iter_bvec() \"direction\" argument\n WRITE is \"data source\", not destination...\n scsi: Revert \"scsi: core: map PQ\u003d1, PDT\u003dother values to SCSI_SCAN_TARGET_PRESENT\"\n arm64: dts: imx8mm: Fix pad control for UART1_DTE_RX\n ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path()\n ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use\n bus: sunxi-rsb: Fix error handling in sunxi_rsb_init()\n firewire: fix memory leak for payload of request subaction to IEC 61883-1 FCP region\n Linux 5.4.231\n Revert \"xprtrdma: Fix regbuf data not freed in rpcrdma_req_create()\"\n usb: host: xhci-plat: add wakeup entry at sysfs\n Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt\n ipv6: ensure sane device mtu in tunnels\n exit: Use READ_ONCE() for all oops/warn limit reads\n docs: Fix path paste-o for /sys/kernel/warn_count\n panic: Expose \"warn_count\" to sysfs\n panic: Introduce warn_limit\n panic: Consolidate open-coded panic_on_warn checks\n exit: Allow oops_limit to be disabled\n exit: Expose \"oops_count\" to sysfs\n exit: Put an upper limit on how often we can oops\n ia64: make IA64_MCA_RECOVERY bool instead of tristate\n csky: Fix function name in csky_alignment() and die()\n h8300: Fix build errors from do_exit() to make_task_dead() transition\n hexagon: Fix function name in die()\n objtool: Add a missing comma to avoid string concatenation\n exit: Add and use make_task_dead.\n mm: kasan: do not panic if both panic_on_warn and kasan_multishot set\n panic: unset panic_on_warn inside panic()\n sysctl: add a new register_sysctl_init() interface\n dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init\n blk-cgroup: fix missing pd_online_fn() while activating policy\n bpf: Skip task with pid\u003d1 in send_signal_common()\n ARM: dts: imx: Fix pca9547 i2c-mux node name\n x86/asm: Fix an assembler warning with current binutils\n clk: Fix pointer casting to prevent oops in devm_clk_release()\n perf/x86/amd: fix potential integer overflow on shift of a int\n netfilter: conntrack: unify established states for SCTP paths\n x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL\n block: fix and cleanup bio_check_ro\n nfsd: Ensure knfsd shuts down when the \"nfsd\" pseudofs is unmounted\n Revert \"Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode\"\n net: mdio-mux-meson-g12a: force internal PHY off on mux switch\n net: xgene: Move shared header file into include/linux\n net/phy/mdio-i2c: Move header file to include/linux/mdio\n net/tg3: resolve deadlock in tg3_reset_task() during EEH\n thermal: intel: int340x: Add locking to int340x_thermal_get_trip_type()\n net: ravb: Fix possible hang if RIS2_QFF1 happen\n sctp: fail if no bound addresses can be used for a given scope\n net/sched: sch_taprio: do not schedule in taprio_reset()\n netrom: Fix use-after-free of a listening socket.\n netfilter: conntrack: fix vtag checks for ABORT/SHUTDOWN_COMPLETE\n ipv4: prevent potential spectre v1 gadget in fib_metrics_match()\n ipv4: prevent potential spectre v1 gadget in ip_metrics_convert()\n netlink: annotate data races around sk_state\n netlink: annotate data races around dst_portid and dst_group\n netlink: annotate data races around nlk-\u003eportid\n netfilter: nft_set_rbtree: skip elements in transaction from garbage collection\n net: fix UaF in netns ops registration error path\n netlink: prevent potential spectre v1 gadgets\n EDAC/qcom: Do not pass llcc_driv_data as edac_device_ctl_info\u0027s pvt_info\n EDAC/device: Respect any driver-supplied workqueue polling value\n ARM: 9280/1: mm: fix warning on phys_addr_t to void pointer assignment\n thermal: intel: int340x: Protect trip temperature from concurrent updates\n KVM: x86/vmx: Do not skip segment attributes if unusable bit is set\n cifs: Fix oops due to uncleared server-\u003esmbd_conn in reconnect\n ftrace/scripts: Update the instructions for ftrace-bisect.sh\n trace_events_hist: add check for return value of \u0027create_hist_field\u0027\n tracing: Make sure trace_printk() can output as soon as it can be used\n module: Don\u0027t wait for GOING modules\n scsi: hpsa: Fix allocation size for scsi_host_alloc()\n Bluetooth: hci_sync: cancel cmd_timer if hci_open failed\n Revert \"Revert \"xhci: Set HCD flag to defer primary roothub registration\"\"\n fs: reiserfs: remove useless new_opts in reiserfs_remount\n netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state\n Revert \"selftests/bpf: check null propagation only neither reg is PTR_TO_BTF_ID\"\n mmc: sdhci-esdhc-imx: correct the tuning start tap and step setting\n mmc: sdhci-esdhc-imx: disable the CMD CRC check for standard tuning\n mmc: sdhci-esdhc-imx: clear pending interrupt and halt cqhci\n lockref: stop doing cpu_relax in the cmpxchg loop\n platform/x86: asus-nb-wmi: Add alternate mapping for KEY_SCREENLOCK\n platform/x86: touchscreen_dmi: Add info for the CSL Panther Tab HD\n scsi: hisi_sas: Set a port invalid only if there are no devices attached when refreshing port id\n KVM: s390: interrupt: use READ_ONCE() before cmpxchg()\n spi: spidev: remove debug messages that access spidev-\u003espi without locking\n ASoC: fsl-asoc-card: Fix naming of AC\u002797 CODEC widgets\n ASoC: fsl_ssi: Rename AC\u002797 streams to avoid collisions with AC\u002797 CODEC\n cpufreq: armada-37xx: stop using 0 as NULL pointer\n s390/debug: add _ASM_S390_ prefix to header guard\n drm: Add orientation quirk for Lenovo ideapad D330-10IGL\n ASoC: fsl_micfil: Correct the number of steps on SX controls\n cpufreq: Add Tegra234 to cpufreq-dt-platdev blocklist\n tcp: fix rate_app_limited to default to 1\n net: dsa: microchip: ksz9477: port map correction in ALU table entry register\n driver core: Fix test_async_probe_init saves device in wrong array\n w1: fix WARNING after calling w1_process()\n w1: fix deadloop in __w1_remove_master_device()\n tcp: avoid the lookup process failing to get sk in ehash table\n dmaengine: xilinx_dma: call of_node_put() when breaking out of for_each_child_of_node()\n dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling\n dmaengine: xilinx_dma: use devm_platform_ioremap_resource()\n HID: betop: check shape of output reports\n net: macb: fix PTP TX timestamp failure due to packet padding\n dmaengine: Fix double increment of client_count in dma_chan_get()\n drm/panfrost: fix GENERIC_ATOMIC64 dependency\n net: mlx5: eliminate anonymous module_init \u0026 module_exit\n usb: gadget: f_fs: Ensure ep0req is dequeued before free_request\n usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait\n HID: revert CHERRY_MOUSE_000C quirk\n net: stmmac: fix invalid call to mdiobus_get_phy()\n HID: check empty report_list in bigben_probe()\n HID: check empty report_list in hid_validate_values()\n net: mdio: validate parameter addr in mdiobus_get_phy()\n net: usb: sr9700: Handle negative len\n l2tp: Don\u0027t sleep and disable BH under writer-side sk_callback_lock\n l2tp: Serialize access to sk_user_data with sk_callback_lock\n net: fix a concurrency bug in l2tp_tunnel_register()\n net/sched: sch_taprio: fix possible use-after-free\n wifi: rndis_wlan: Prevent buffer overflow in rndis_query_oid\n gpio: mxc: Always set GPIOs used as interrupt source to INPUT mode\n net: wan: Add checks for NULL for utdm in undo_uhdlc_init and unmap_si_regs\n net: nfc: Fix use-after-free in local_cleanup()\n phy: rockchip-inno-usb2: Fix missing clk_disable_unprepare() in rockchip_usb2phy_power_on()\n bpf: Fix pointer-leak due to insufficient speculative store bypass mitigation\n amd-xgbe: Delay AN timeout during KR training\n amd-xgbe: TX Flow Ctrl Registers are h/w ver dependent\n affs: initialize fsdata in affs_truncate()\n IB/hfi1: Fix expected receive setup error exit issues\n IB/hfi1: Reserve user expected TIDs\n IB/hfi1: Reject a zero-length user expected buffer\n RDMA/core: Fix ib block iterator counter overflow\n tomoyo: fix broken dependency on *.conf.default\n EDAC/highbank: Fix memory leak in highbank_mc_probe()\n HID: intel_ish-hid: Add check for ishtp_dma_tx_map\n ARM: imx: add missing of_node_put()\n ARM: imx35: Retrieve the IIM base address from devicetree\n ARM: imx31: Retrieve the IIM base address from devicetree\n ARM: imx27: Retrieve the SYSCTRL base address from devicetree\n ARM: dts: imx6qdl-gw560x: Remove incorrect \u0027uart-has-rtscts\u0027\n memory: mvebu-devbus: Fix missing clk_disable_unprepare in mvebu_devbus_probe()\n memory: atmel-sdramc: Fix missing clk_disable_unprepare in atmel_ramc_probe()\n clk: Provide new devm_clk helpers for prepared and enabled clocks\n clk: generalize devm_clk_get() a bit\n Linux 5.4.230\n mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma\n x86/fpu: Use _Alignof to avoid undefined behavior in TYPE_ALIGN\n drm/amd/display: Fix COLOR_SPACE_YCBCR2020_TYPE matrix\n drm/amd/display: Fix set scaling doesn\u0027s work\n drm/i915: re-disable RC6p on Sandy Bridge\n gsmi: fix null-deref in gsmi_get_variable\n serial: atmel: fix incorrect baudrate setup\n dmaengine: tegra210-adma: fix global intr clear\n serial: pch_uart: Pass correct sg to dma_unmap_sg()\n dt-bindings: phy: g12a-usb3-pcie-phy: fix compatible string documentation\n usb-storage: apply IGNORE_UAS only for HIKSEMI MD202 on RTL9210\n usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()\n usb: gadget: g_webcam: Send color matching descriptor per frame\n usb: typec: altmodes/displayport: Fix pin assignment calculation\n usb: typec: altmodes/displayport: Add pin assignment helper\n usb: host: ehci-fsl: Fix module alias\n USB: serial: cp210x: add SCALANCE LPE-9000 device id\n USB: gadgetfs: Fix race between mounting and unmounting\n cifs: do not include page data when checking signature\n btrfs: fix race between quota rescan and disable leading to NULL pointer deref\n mmc: sunxi-mmc: Fix clock refcount imbalance during unbind\n comedi: adv_pci1760: Fix PWM instruction handling\n usb: core: hub: disable autosuspend for TI TUSB8041\n misc: fastrpc: Fix use-after-free race condition for maps\n misc: fastrpc: Don\u0027t remove map on creater_process and device_release\n USB: misc: iowarrior: fix up header size for USB_DEVICE_ID_CODEMERCS_IOW100\n USB: serial: option: add Quectel EM05CN modem\n USB: serial: option: add Quectel EM05CN (SG) modem\n USB: serial: option: add Quectel EC200U modem\n USB: serial: option: add Quectel EM05-G (RS) modem\n USB: serial: option: add Quectel EM05-G (CS) modem\n USB: serial: option: add Quectel EM05-G (GR) modem\n prlimit: do_prlimit needs to have a speculation check\n xhci: Detect lpm incapable xHC USB3 roothub ports from ACPI tables\n usb: acpi: add helper to check port lpm capability using acpi _DSM\n xhci: Add a flag to disable USB3 lpm on a xhci root port level.\n xhci: Add update_hub_device override for PCI xHCI hosts\n xhci: Fix null pointer dereference when host dies\n usb: xhci: Check endpoint is valid before dereferencing it\n xhci-pci: set the dma max_seg_size\n ALSA: hda/realtek - Turn on power early\n drm/i915/gt: Reset twice\n efi: fix userspace infinite retry read efivars after EFI runtime services page fault\n nilfs2: fix general protection fault in nilfs_btree_insert()\n Add exception protection processing for vd in axi_chan_handle_err function\n wifi: brcmfmac: fix regression for Broadcom PCIe wifi devices\n f2fs: let\u0027s avoid panic if extent_tree is not created\n RDMA/srp: Move large values to a new enum for gcc13\n net/ethtool/ioctl: return -EOPNOTSUPP if we have no phy stats\n selftests/bpf: check null propagation only neither reg is PTR_TO_BTF_ID\n pNFS/filelayout: Fix coalescing test for single DS\n Revert \"net: add atomic_long_t to net_device_stats fields\"\n Revert \"PM/devfreq: governor: Add a private governor_data for governor\"\n Linux 5.4.229\n tipc: call tipc_lxc_xmit without holding node_read_lock\n ocfs2: fix freeing uninitialized resource on ocfs2_dlm_shutdown\n tipc: Add a missing case of TIPC_DIRECT_MSG type\n tty: serial: tegra: Handle RX transfer in PIO mode if DMA wasn\u0027t started\n tipc: fix use-after-free in tipc_disc_rcv()\n Revert \"usb: ulpi: defer ulpi_register on ulpi_read_id timeout\"\n mm: Always release pages to the buddy allocator in memblock_free_late().\n efi: fix NULL-deref in init error path\n arm64: cmpxchg_double*: hazard against entire exchange variable\n arm64: atomics: remove LL/SC trampolines\n arm64: atomics: format whitespace consistently\n drm/virtio: Fix GEM handle creation UAF\n x86/resctrl: Fix task CLOSID/RMID update race\n x86/resctrl: Use task_curr() instead of task_struct-\u003eon_cpu to prevent unnecessary IPI\n iommu/mediatek-v1: Fix an error handling path in mtk_iommu_v1_probe()\n iommu/mediatek-v1: Add error handle for mtk_iommu_probe\n net/mlx5: Fix ptp max frequency adjustment range\n net/mlx5: Rename ptp clock info\n net/sched: act_mpls: Fix warning during failed attribute validation\n nfc: pn533: Wait for out_urb\u0027s completion in pn533_usb_send_frame()\n hvc/xen: lock console list traversal\n tipc: fix unexpected link reset due to discovery messages\n tipc: eliminate checking netns if node established\n tipc: improve throughput between nodes in netns\n regulator: da9211: Use irq handler when ready\n EDAC/device: Fix period calculation in edac_device_reset_delay_period()\n x86/boot: Avoid using Intel mnemonics in AT\u0026T syntax asm\n powerpc/imc-pmu: Fix use of mutex in IRQs disabled section\n netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function.\n ext4: fix uninititialized value in \u0027ext4_evict_inode\u0027\n ext4: fix use-after-free in ext4_orphan_cleanup\n ext4: lost matching-pair of trace in ext4_truncate\n ext4: fix bug_on in __es_tree_search caused by bad quota inode\n quota: Factor out setup of quota inode\n jbd2: use the correct print format\n usb: ulpi: defer ulpi_register on ulpi_read_id timeout\n wifi: wilc1000: sdio: fix module autoloading\n ipv6: raw: Deduct extension header length in rawv6_push_pending_frames\n ixgbe: fix pci device refcount leak\n platform/x86: sony-laptop: Don\u0027t turn off 0x153 keyboard backlight during probe\n drm/msm/adreno: Make adreno quirks not overwrite each other\n cifs: Fix uninitialized memory read for smb311 posix symlink create\n ALSA: hda/hdmi: Add a HP device 0x8715 to force connect list\n ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF\n net/ulp: prevent ULP without clone op from entering the LISTEN status\n s390/percpu: add READ_ONCE() to arch_this_cpu_to_op_simple()\n s390/kexec: fix ipl report address for kdump\n perf auxtrace: Fix address filter duplicate symbol selection\n docs: Fix the docs build with Sphinx 6.0\n efi: tpm: Avoid READ_ONCE() for accessing the event log\n KVM: arm64: Fix S1PTW handling on RO memslots\n net: sched: disallow noqueue for qdisc classes\n driver core: Fix bus_type.match() error handling in __driver_attach()\n selftests: set the BUILD variable to absolute path\n selftests: Fix kselftest O\u003dobjdir build from cluttering top level objdir\n parisc: Align parisc MADV_XXX constants with all other architectures\n mbcache: Avoid nesting of cache-\u003ec_list_lock under bit locks\n hfs/hfsplus: avoid WARN_ON() for sanity check, use proper error handling\n hfs/hfsplus: use WARN_ON for sanity check\n ext4: don\u0027t allow journal inode to have encrypt flag\n riscv: uaccess: fix type of 0 variable on error in get_user()\n nfsd: fix handling of readdir in v4root vs. mount upcall timeout\n x86/bugs: Flush IBP in ib_prctl_set()\n ASoC: Intel: bytcr_rt5640: Add quirk for the Advantech MICA-071 tablet\n udf: Fix extension of the last extent in the file\n caif: fix memory leak in cfctrl_linkup_request()\n drm/i915: unpin on error in intel_vgpu_shadow_mm_pin()\n usb: rndis_host: Secure rndis_query check against int overflow\n drivers/net/bonding/bond_3ad: return when there\u0027s no aggregator\n perf tools: Fix resources leak in perf_data__open_dir()\n net: sched: cbq: dont intepret cls results when asked to drop\n net: sched: atm: dont intepret cls results when asked to drop\n RDMA/mlx5: Fix validation of max_rd_atomic caps for DC\n RDMA/uverbs: Silence shiftTooManyBitsSigned warning\n net: phy: xgmiitorgmii: Fix refcount leak in xgmiitorgmii_probe\n net: amd-xgbe: add missed tasklet_kill\n vhost: fix range used in translate_desc()\n nfc: Fix potential resource leaks\n qlcnic: prevent -\u003edcb use-after-free on qlcnic_dcb_enable() failure\n net: sched: fix memory leak in tcindex_set_parms\n net: hns3: add interrupts re-initialization while doing VF FLR\n nfsd: shut down the NFSv4 state objects before the filecache\n bpf: pull before calling skb_postpull_rcsum()\n SUNRPC: ensure the matching upcall is in-flight upon downcall\n ext4: fix deadlock due to mbcache entry corruption\n mbcache: automatically delete entries from cache on freeing\n ext4: fix race when reusing xattr blocks\n ext4: unindent codeblock in ext4_xattr_block_set()\n ext4: remove EA inode entry from mbcache on inode eviction\n mbcache: add functions to delete entry if unused\n mbcache: don\u0027t reclaim used entries\n ext4: use kmemdup() to replace kmalloc + memcpy\n fs: ext4: initialize fsdata in pagecache_write()\n ext4: use memcpy_to_page() in pagecache_write()\n mm/highmem: Lift memcpy_[to|from]_page to core\n ext4: correct inconsistent error msg in nojournal mode\n ext4: goto right label \u0027failed_mount3a\u0027\n ravb: Fix \"failed to switch device to config mode\" message during unbind\n KVM: nVMX: Properly expose ENABLE_USR_WAIT_PAUSE control to L1\n KVM: VMX: Fix the spelling of CPU_BASED_USE_TSC_OFFSETTING\n KVM: VMX: Rename NMI_PENDING to NMI_WINDOW\n KVM: VMX: Rename INTERRUPT_PENDING to INTERRUPT_WINDOW\n KVM: retpolines: x86: eliminate retpoline from vmx.c exit handlers\n KVM: x86: optimize more exit handlers in vmx.c\n perf probe: Fix to get the DW_AT_decl_file and DW_AT_call_file as unsinged data\n perf probe: Use dwarf_attr_integrate as generic DWARF attr accessor\n dm thin: resume even if in FAIL mode\n media: s5p-mfc: Fix in register read and write for H264\n media: s5p-mfc: Clear workbit to handle error condition\n media: s5p-mfc: Fix to handle reference queue during finishing\n PM/devfreq: governor: Add a private governor_data for governor\n btrfs: replace strncpy() with strscpy()\n ext4: allocate extended attribute value in vmalloc area\n ext4: avoid unaccounted block allocation when expanding inode\n ext4: initialize quota before expanding inode in setproject ioctl\n ext4: fix inode leak in ext4_xattr_inode_create() on an error path\n ext4: avoid BUG_ON when creating xattrs\n ext4: fix error code return to user-space in ext4_get_branch()\n ext4: fix corruption when online resizing a 1K bigalloc fs\n ext4: fix delayed allocation bug in ext4_clu_mapped for bigalloc + inline\n ext4: init quota for \u0027old.inode\u0027 in \u0027ext4_rename\u0027\n ext4: fix bug_on in __es_tree_search caused by bad boot loader inode\n ext4: fix reserved cluster accounting in __es_remove_extent()\n ext4: add helper to check quota inums\n ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inode\n ext4: fix undefined behavior in bit shift for ext4_check_flag_values\n ext4: add inode table check in __ext4_get_inode_loc to aovid possible infinite loop\n drm/vmwgfx: Validate the box size for the snooped cursor\n drm/connector: send hotplug uevent on connector cleanup\n device_cgroup: Roll back to original exceptions after copy failure\n parisc: led: Fix potential null-ptr-deref in start_task()\n iommu/amd: Fix ivrs_acpihid cmdline parsing code\n crypto: n2 - add missing hash statesize\n PCI/sysfs: Fix double free in error path\n PCI: Fix pci_device_is_present() for VFs by checking PF\n ipmi: fix use after free in _ipmi_destroy_user()\n ima: Fix a potential NULL pointer access in ima_restore_measurement_list\n mtd: spi-nor: Check for zero erase size in spi_nor_find_best_erase_type()\n ipmi: fix long wait in unload when IPMI disconnect\n efi: Add iMac Pro 2017 to uefi skip cert quirk\n md/bitmap: Fix bitmap chunk size overflow issues\n cifs: fix missing display of three mount options\n cifs: fix confusing debug message\n media: dvb-core: Fix UAF due to refcount races at releasing\n media: dvb-core: Fix double free in dvb_register_device()\n ARM: 9256/1: NWFPE: avoid compiler-generated __aeabi_uldivmod\n tracing: Fix infinite loop in tracing_read_pipe on overflowed print_trace_line\n tracing/hist: Fix wrong return value in parse_action_params()\n x86/microcode/intel: Do not retry microcode reloading on the APs\n tracing/hist: Fix out-of-bound write on \u0027action_data.var_ref_idx\u0027\n dm cache: set needs_check flag after aborting metadata\n dm cache: Fix UAF in destroy()\n dm clone: Fix UAF in clone_dtr()\n dm integrity: Fix UAF in dm_integrity_dtr()\n dm thin: Fix UAF in run_timer_softirq()\n dm thin: Use last transaction\u0027s pmd-\u003eroot when commit failed\n dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata\n dm cache: Fix ABBA deadlock between shrink_slab and dm_cache_metadata_abort\n binfmt: Fix error return code in load_elf_fdpic_binary()\n binfmt: Move install_exec_creds after setup_new_exec to match binfmt_elf\n cpufreq: Init completion before kobject_init_and_add()\n selftests: Use optional USERCFLAGS and USERLDFLAGS\n arm64: dts: qcom: sdm850-lenovo-yoga-c630: correct I2C12 pins drive strength\n ARM: ux500: do not directly dereference __iomem\n btrfs: fix resolving backrefs for inline extent followed by prealloc\n mmc: sdhci-sprd: Disable CLK_AUTO when the clock is less than 400K\n ktest.pl minconfig: Unset configs instead of just removing them\n kest.pl: Fix grub2 menu handling for rebooting\n soc: qcom: Select REMAP_MMIO for LLCC driver\n media: stv0288: use explicitly signed char\n net/af_packet: make sure to pull mac header\n net/af_packet: add VLAN support for AF_PACKET SOCK_RAW GSO\n SUNRPC: Don\u0027t leak netobj memory when gss_read_proxy_verf() fails\n tpm: tpm_tis: Add the missed acpi_put_table() to fix memory leak\n tpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak\n mmc: vub300: fix warning - do not call blocking ops when !TASK_RUNNING\n f2fs: should put a page when checking the summary info\n mm, compaction: fix fast_isolate_around() to stay within boundaries\n md: fix a crash in mempool_free\n pnode: terminate at peers of source\n ALSA: line6: fix stack overflow in line6_midi_transmit\n ALSA: line6: correct midi status byte when receiving data from podxt\n ovl: Use ovl mounter\u0027s fsuid and fsgid in ovl_link()\n hfsplus: fix bug causing custom uid and gid being unable to be assigned with mount\n HID: plantronics: Additional PIDs for double volume key presses quirk\n HID: multitouch: fix Asus ExpertBook P2 P2451FA trackpoint\n powerpc/rtas: avoid scheduling in rtas_os_term()\n powerpc/rtas: avoid device tree lookups in rtas_os_term()\n objtool: Fix SEGFAULT\n nvme: fix the NVME_CMD_EFFECTS_CSE_MASK definition\n nvme: resync include/linux/nvme.h with nvmecli\n ata: ahci: Fix PCS quirk application for suspend\n nvme-pci: fix doorbell buffer value endianness\n cifs: fix oops during encryption\n media: dvbdev: fix refcnt bug\n media: dvbdev: fix build warning due to comments\n gcov: add support for checksum field\n regulator: core: fix deadlock on regulator enable\n iio: adc128s052: add proper .data members in adc128_of_match table\n iio: adc: ad_sigma_delta: do not use internal iio_dev lock\n reiserfs: Add missing calls to reiserfs_security_free()\n HID: wacom: Ensure bootloader PID is usable in hidraw mode\n usb: dwc3: core: defer probe on ulpi_read_id timeout\n ALSA: hda/hdmi: Add HP Device 0x8711 to force connect list\n ALSA: hda/realtek: Add quirk for Lenovo TianYi510Pro-14IOB\n pstore: Make sure CONFIG_PSTORE_PMSG selects CONFIG_RT_MUTEXES\n pstore: Switch pmsg_lock to an rt_mutex to avoid priority inversion\n ASoC: rt5670: Remove unbalanced pm_runtime_put()\n ASoC: rockchip: spdif: Add missing clk_disable_unprepare() in rk_spdif_runtime_resume()\n ASoC: wm8994: Fix potential deadlock\n ASoC: rockchip: pdm: Add missing clk_disable_unprepare() in rockchip_pdm_runtime_resume()\n ASoC: audio-graph-card: fix refcount leak of cpu_ep in __graph_for_each_link()\n ASoC: mediatek: mt8173-rt5650-rt5514: fix refcount leak in mt8173_rt5650_rt5514_dev_probe()\n ASoC: Intel: Skylake: Fix driver hang during shutdown\n ALSA: hda: add snd_hdac_stop_streams() helper\n ALSA/ASoC: hda: move/rename snd_hdac_ext_stop_streams to hdac_stream.c\n orangefs: Fix kmemleak in orangefs_{kernel,client}_debug_init()\n orangefs: Fix kmemleak in orangefs_prepare_debugfs_help_string()\n drm/sti: Fix return type of sti_{dvo,hda,hdmi}_connector_mode_valid()\n drm/fsl-dcu: Fix return type of fsl_dcu_drm_connector_mode_valid()\n hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param()\n clk: st: Fix memory leak in st_of_quadfs_setup()\n media: si470x: Fix use-after-free in si470x_int_in_callback()\n mmc: f-sdh30: Add quirks for broken timeout clock capability\n regulator: core: fix use_count leakage when handling boot-on\n blk-mq: fix possible memleak when register \u0027hctx\u0027 failed\n media: dvb-usb: fix memory leak in dvb_usb_adapter_init()\n media: dvbdev: adopts refcnt to avoid UAF\n media: dvb-frontends: fix leak of memory fw\n bpf: Prevent decl_tag from being referenced in func_proto arg\n ppp: associate skb with a device at tx\n mrp: introduce active flags to prevent UAF when applicant uninit\n net: add atomic_long_t to net_device_stats fields\n md/raid1: stop mdx_raid1 thread when raid1 array run failed\n drivers/md/md-bitmap: check the return value of md_bitmap_get_counter()\n drm/sti: Use drm_mode_copy()\n drm/rockchip: Use drm_mode_copy()\n s390/lcs: Fix return type of lcs_start_xmit()\n s390/netiucv: Fix return type of netiucv_tx()\n s390/ctcm: Fix return type of ctc{mp,}m_tx()\n igb: Do not free q_vector unless new one was allocated\n wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmf_fw_alloc_request()\n hamradio: baycom_epp: Fix return type of baycom_send_packet()\n net: ethernet: ti: Fix return type of netcp_ndo_start_xmit()\n bpf: make sure skb-\u003elen !\u003d 0 when redirecting to a tunneling device\n ipmi: fix memleak when unload ipmi driver\n ASoC: codecs: rt298: Add quirk for KBL-R RVP platform\n wifi: ar5523: Fix use-after-free on ar5523_cmd() timed out\n wifi: ath9k: verify the expected usb_endpoints are present\n brcmfmac: return error when getting invalid max_flowrings from dongle\n drm/etnaviv: add missing quirks for GC300\n hfs: fix OOB Read in __hfs_brec_find\n acct: fix potential integer overflow in encode_comp_t()\n nilfs2: fix shift-out-of-bounds/overflow in nilfs_sb2_bad_offset()\n ACPICA: Fix error code path in acpi_ds_call_control_method()\n fs: jfs: fix shift-out-of-bounds in dbDiscardAG\n udf: Avoid double brelse() in udf_rename()\n fs: jfs: fix shift-out-of-bounds in dbAllocAG\n binfmt_misc: fix shift-out-of-bounds in check_special_flags\n rcu: Fix __this_cpu_read() lockdep warning in rcu_force_quiescent_state()\n net: stream: purge sk_error_queue in sk_stream_kill_queues()\n myri10ge: Fix an error handling path in myri10ge_probe()\n rxrpc: Fix missing unlock in rxrpc_do_sendmsg()\n net_sched: reject TCF_EM_SIMPLE case for complex ematch module\n mailbox: zynq-ipi: fix error handling while device_register() fails\n skbuff: Account for tail adjustment during pull operations\n openvswitch: Fix flow lookup to use unmasked key\n rtc: mxc_v2: Add missing clk_disable_unprepare()\n r6040: Fix kmemleak in probe and remove\n nfc: pn533: Clear nfc_target before being used\n mISDN: hfcmulti: don\u0027t call dev_kfree_skb/kfree_skb() under spin_lock_irqsave()\n mISDN: hfcpci: don\u0027t call dev_kfree_skb/kfree_skb() under spin_lock_irqsave()\n mISDN: hfcsusb: don\u0027t call dev_kfree_skb/kfree_skb() under spin_lock_irqsave()\n nfsd: under NFSv4.1, fix double svc_xprt_put on rpc_create failure\n NFSD: Add tracepoints to NFSD\u0027s duplicate reply cache\n nfsd: Define the file access mode enum for tracing\n rtc: pic32: Move devm_rtc_allocate_device earlier in pic32_rtc_probe()\n rtc: st-lpc: Add missing clk_disable_unprepare in st_rtc_probe()\n remoteproc: qcom_q6v5_pas: Fix missing of_node_put() in adsp_alloc_memory_region()\n remoteproc: sysmon: fix memory leak in qcom_add_sysmon_subdev()\n pwm: sifive: Call pwm_sifive_update_clock() while mutex is held\n selftests/powerpc: Fix resource leaks\n powerpc/hv-gpci: Fix hv_gpci event list\n powerpc/83xx/mpc832x_rdb: call platform_device_put() in error case in of_fsl_spi_probe()\n powerpc/perf: callchain validate kernel stack pointer bounds\n powerpc/xive: add missing iounmap() in error path in xive_spapr_populate_irq_data()\n cxl: Fix refcount leak in cxl_calc_capp_routing\n powerpc/52xx: Fix a resource leak in an error handling path\n macintosh/macio-adb: check the return value of ioremap()\n macintosh: fix possible memory leak in macio_add_one_device()\n iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe()\n iommu/amd: Fix pci device refcount leak in ppr_notifier()\n rtc: pcf85063: Fix reading alarm\n rtc: snvs: Allow a time difference on clock register read\n include/uapi/linux/swab: Fix potentially missing __always_inline\n RDMA/siw: Fix pointer cast warning\n power: supply: fix null pointer dereferencing in power_supply_get_battery_info\n HSI: omap_ssi_core: Fix error handling in ssi_init()\n perf symbol: correction while adjusting symbol\n perf trace: Handle failure when trace point folder is missed\n perf trace: Use macro RAW_SYSCALL_ARGS_NUM to replace number\n perf trace: Add a strtoul() method to \u0027struct syscall_arg_fmt\u0027\n perf trace: Allow associating scnprintf routines with well known arg names\n perf trace: Add the syscall_arg_fmt pointer to syscall_arg\n perf trace: Factor out the initialization of syscal_arg_fmt-\u003escnprintf\n perf trace: Separate \u0027struct syscall_fmt\u0027 definition from syscall_fmts variable\n perf trace: Return error if a system call doesn\u0027t exist\n power: supply: fix residue sysfs file in error handle route of __power_supply_register()\n HSI: omap_ssi_core: fix possible memory leak in ssi_probe()\n HSI: omap_ssi_core: fix unbalanced pm_runtime_disable()\n fbdev: uvesafb: Fixes an error handling path in uvesafb_probe()\n fbdev: vermilion: decrease reference count in error path\n fbdev: via: Fix error in via_core_init()\n fbdev: pm2fb: fix missing pci_disable_device()\n fbdev: ssd1307fb: Drop optional dependency\n samples: vfio-mdev: Fix missing pci_disable_device() in mdpy_fb_probe()\n tracing/hist: Fix issue of losting command info in error_log\n usb: storage: Add check for kcalloc\n i2c: ismt: Fix an out-of-bounds bug in ismt_access()\n vme: Fix error not catched in fake_init()\n staging: rtl8192e: Fix potential use-after-free in rtllib_rx_Monitor()\n staging: rtl8192u: Fix use after free in ieee80211_rx()\n i2c: pxa-pci: fix missing pci_disable_device() on error in ce4100_i2c_probe\n chardev: fix error handling in cdev_device_add()\n mcb: mcb-parse: fix error handing in chameleon_parse_gdd()\n drivers: mcb: fix resource leak in mcb_probe()\n usb: gadget: f_hid: fix refcount leak on error path\n usb: gadget: f_hid: fix f_hidg lifetime vs cdev\n usb: gadget: f_hid: optional SETUP/SET_REPORT mode\n usb: roles: fix of node refcount leak in usb_role_switch_is_parent()\n counter: stm32-lptimer-cnt: fix the check on arr and cmp registers update\n cxl: fix possible null-ptr-deref in cxl_pci_init_afu|adapter()\n cxl: fix possible null-ptr-deref in cxl_guest_init_afu|adapter()\n misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os\n misc: tifm: fix possible memory leak in tifm_7xx1_switch_media()\n misc: ocxl: fix possible name leak in ocxl_file_register_afu()\n test_firmware: fix memory leak in test_firmware_init()\n serial: sunsab: Fix error handling in sunsab_init()\n serial: altera_uart: fix locking in polling mode\n tty: serial: altera_uart_{r,t}x_chars() need only uart_port\n tty: serial: clean up stop-tx part in altera_uart_tx_chars()\n serial: pch: Fix PCI device refcount leak in pch_request_dma()\n serial: pl011: Do not clear RX FIFO \u0026 RX interrupt in unthrottle.\n serial: amba-pl011: avoid SBSA UART accessing DMACR register\n usb: typec: tcpci: fix of node refcount leak in tcpci_register_port()\n usb: typec: Check for ops-\u003eexit instead of ops-\u003eenter in altmode_exit\n staging: vme_user: Fix possible UAF in tsi148_dma_list_add\n usb: fotg210-udc: Fix ages old endianness issues\n uio: uio_dmem_genirq: Fix deadlock between irq config and handling\n uio: uio_dmem_genirq: Fix missing unlock in irq configuration\n vfio: platform: Do not pass return buffer to ACPI _RST method\n class: fix possible memory leak in __class_register()\n serial: tegra: Read DMA status before terminating\n tty: serial: tegra: Activate RX DMA transfer by request\n drivers: dio: fix possible memory leak in dio_init()\n IB/IPoIB: Fix queue count inconsistency for PKEY child interfaces\n hwrng: geode - Fix PCI device refcount leak\n hwrng: amd - Fix PCI device refcount leak\n crypto: img-hash - Fix variable dereferenced before check \u0027hdev-\u003ereq\u0027\n orangefs: Fix sysfs not cleanup when dev init failed\n RDMA/hfi1: Fix error return code in parse_platform_config()\n crypto: omap-sham - Use pm_runtime_resume_and_get() in omap_sham_probe()\n f2fs: avoid victim selection from previous victim section\n RDMA/nldev: Add checks for nla_nest_start() in fill_stat_counter_qps()\n scsi: snic: Fix possible UAF in snic_tgt_create()\n scsi: fcoe: Fix transport not deattached when fcoe_if_init() fails\n scsi: ipr: Fix WARNING in ipr_init()\n scsi: fcoe: Fix possible name leak when device_register() fails\n scsi: hpsa: Fix possible memory leak in hpsa_add_sas_device()\n scsi: hpsa: Fix error handling in hpsa_add_sas_host()\n scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()\n crypto: tcrypt - Fix multibuffer skcipher speed test mem leak\n scsi: hpsa: Fix possible memory leak in hpsa_init_one()\n RDMA/rxe: Fix NULL-ptr-deref in rxe_qp_do_cleanup() when socket create failed\n crypto: ccree - Make cc_debugfs_global_fini() available for module init function\n RDMA/hfi: Decrease PCI device reference count in error path\n PCI: Check for alloc failure in pci_request_irq()\n crypto: ccree - Remove debugfs when platform_driver_register failed\n crypto: ccree - swap SHA384 and SHA512 larval hashes at build time\n scsi: scsi_debug: Fix a warning in resp_write_scat()\n RDMA/siw: Set defined status for work completion with undefined status\n RDMA/nldev: Return \"-EAGAIN\" if the cm_id isn\u0027t from expected port\n RDMA/siw: Fix immediate work request flush to completion queue\n f2fs: fix normal discard process\n RDMA/core: Fix order of nldev_exit call\n apparmor: Use pointer to struct aa_label for lbs_cred\n apparmor: Fix abi check to include v8 abi\n apparmor: fix lockdep warning when removing a namespace\n apparmor: fix a memleak in multi_transaction_new()\n stmmac: fix potential division by 0\n Bluetooth: RFCOMM: don\u0027t call kfree_skb() under spin_lock_irqsave()\n Bluetooth: hci_core: don\u0027t call kfree_skb() under spin_lock_irqsave()\n Bluetooth: hci_bcsp: don\u0027t call kfree_skb() under spin_lock_irqsave()\n Bluetooth: hci_h5: don\u0027t call kfree_skb() under spin_lock_irqsave()\n Bluetooth: hci_ll: don\u0027t call kfree_skb() under spin_lock_irqsave()\n Bluetooth: hci_qca: don\u0027t call kfree_skb() under spin_lock_irqsave()\n Bluetooth: btusb: don\u0027t call kfree_skb() under spin_lock_irqsave()\n ntb_netdev: Use dev_kfree_skb_any() in interrupt context\n net: lan9303: Fix read error execution path\n can: tcan4x5x: Remove invalid write in clear_interrupts\n net: amd-xgbe: Check only the minimum speed for active/passive cables\n net: amd-xgbe: Fix logic around active and passive cables\n net: amd: lance: don\u0027t call dev_kfree_skb() under spin_lock_irqsave()\n hamradio: don\u0027t call dev_kfree_skb() under spin_lock_irqsave()\n net: ethernet: dnet: don\u0027t call dev_kfree_skb() under spin_lock_irqsave()\n net: emaclite: don\u0027t call dev_kfree_skb() under spin_lock_irqsave()\n net: apple: bmac: don\u0027t call dev_kfree_skb() under spin_lock_irqsave()\n net: apple: mace: don\u0027t call dev_kfree_skb() under spin_lock_irqsave()\n net/tunnel: wait until all sk_user_data reader finish before releasing the sock\n net: farsync: Fix kmemleak when rmmods farsync\n ethernet: s2io: don\u0027t call dev_kfree_skb() under spin_lock_irqsave()\n of: overlay: fix null pointer dereferencing in find_dup_cset_node_entry() and find_dup_cset_prop()\n drivers: net: qlcnic: Fix potential memory leak in qlcnic_sriov_init()\n net: stmmac: selftests: fix potential memleak in stmmac_test_arpoffload()\n net: defxx: Fix missing err handling in dfx_init()\n net: vmw_vsock: vmci: Check memcpy_from_msg()\n clk: socfpga: Fix memory leak in socfpga_gate_init()\n clk: socfpga: use clk_hw_register for a5/c5\n clk: socfpga: clk-pll: Remove unused variable \u0027rc\u0027\n blktrace: Fix output non-blktrace event when blk_classic option enabled\n wifi: brcmfmac: Fix error return code in brcmf_sdio_download_firmware()\n wifi: rtl8xxxu: Add __packed to struct rtl8723bu_c2h\n spi: spi-gpio: Don\u0027t set MOSI as an input if not 3WIRE mode\n clk: samsung: Fix memory leak in _samsung_clk_register_pll()\n media: coda: Add check for kmalloc\n media: coda: Add check for dcoda_iram_alloc\n media: c8sectpfe: Add of_node_put() when breaking out of loop\n mmc: mmci: fix return value check of mmc_add_host()\n mmc: wbsd: fix return value check of mmc_add_host()\n mmc: via-sdmmc: fix return value check of mmc_add_host()\n mmc: meson-gx: fix return value check of mmc_add_host()\n mmc: omap_hsmmc: fix return value check of mmc_add_host()\n mmc: atmel-mci: fix return value check of mmc_add_host()\n mmc: wmt-sdmmc: fix return value check of mmc_add_host()\n mmc: vub300: fix return value check of mmc_add_host()\n mmc: toshsd: fix return value check of mmc_add_host()\n mmc: rtsx_usb_sdmmc: fix return value check of mmc_add_host()\n mmc: pxamci: fix return value check of mmc_add_host()\n mmc: mxcmmc: fix return value check of mmc_add_host()\n mmc: moxart: fix return value check of mmc_add_host()\n mmc: alcor: fix return value check of mmc_add_host()\n NFSv4.x: Fail client initialisation if state manager thread can\u0027t run\n SUNRPC: Fix missing release socket in rpc_sockname()\n xprtrdma: Fix regbuf data not freed in rpcrdma_req_create()\n ALSA: mts64: fix possible null-ptr-defer in snd_mts64_interrupt\n media: saa7164: fix missing pci_disable_device()\n bpf, sockmap: fix race in sock_map_free()\n regulator: core: fix resource leak in regulator_register()\n configfs: fix possible memory leak in configfs_create_dir()\n hsr: Avoid double remove of a node.\n clk: qcom: clk-krait: fix wrong div2 functions\n regulator: core: fix module refcount leak in set_supply()\n wifi: cfg80211: Fix not unregister reg_pdev when load_builtin_regdb_keys() fails\n spi: spidev: mask SPI_CS_HIGH in SPI_IOC_RD_MODE\n bonding: uninitialized variable in bond_miimon_inspect()\n bpf, sockmap: Fix data loss caused by using apply_bytes on ingress redirect\n bpf, sockmap: Fix repeated calls to sock_put() when msg has more_data\n netfilter: conntrack: set icmpv6 redirects as RELATED\n ASoC: pcm512x: Fix PM disable depth imbalance in pcm512x_probe\n drm/amdgpu: Fix PCI device refcount leak in amdgpu_atrm_get_bios()\n drm/radeon: Fix PCI device refcount leak in radeon_atrm_get_bios()\n ASoC: mediatek: mt8173: Enable IRQ when pdata is ready\n wifi: iwlwifi: mvm: fix double free on tx path.\n ALSA: asihpi: fix missing pci_disable_device()\n NFSv4: Fix a deadlock between nfs4_open_recover_helper() and delegreturn\n NFSv4.2: Fix initialisation of struct nfs4_label\n NFSv4.2: Fix a memory stomp in decode_attr_security_label\n NFSv4.2: Clear FATTR4_WORD2_SECURITY_LABEL when done decoding\n ASoC: mediatek: mtk-btcvsd: Add checks for write and read of mtk_btcvsd_snd\n ASoC: dt-bindings: wcd9335: fix reset line polarity in example\n drm/tegra: Add missing clk_disable_unprepare() in tegra_dc_probe()\n media: s5p-mfc: Add variant data for MFC v7 hardware for Exynos 3250 SoC\n media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()\n media: dvb-core: Fix ignored return value in dvb_register_frontend()\n pinctrl: pinconf-generic: add missing of_node_put()\n clk: imx: replace osc_hdmi with dummy\n clk: imx8mn: correct the usb1_ctrl parent to be usb_bus\n media: imon: fix a race condition in send_packet()\n mtd: maps: pxa2xx-flash: fix memory leak in probe\n bonding: fix link recovery in mode 2 when updelay is nonzero\n bonding: Rename slave_arr to usable_slaves\n bonding: Export skip slave logic to function\n clk: rockchip: Fix memory leak in rockchip_clk_register_pll()\n regulator: core: use kfree_const() to free space conditionally\n ALSA: seq: fix undefined behavior in bit shift for SNDRV_SEQ_FILTER_USE_EVENT\n ALSA: pcm: fix undefined behavior in bit shift for SNDRV_PCM_RATE_KNOT\n HID: hid-sensor-custom: set fixed size for custom attributes\n bpf: Move skb-\u003elen \u003d\u003d 0 checks into __bpf_redirect\n media: videobuf-dma-contig: use dma_mmap_coherent\n media: platform: exynos4-is: Fix error handling in fimc_md_init()\n media: solo6x10: fix possible memory leak in solo_sysfs_init()\n Input: elants_i2c - properly handle the reset GPIO when power is off\n mtd: lpddr2_nvm: Fix possible null-ptr-deref\n wifi: ath10k: Fix return value in ath10k_pci_init()\n ima: Fix misuse of dereference of pointer in template_desc_init_fields()\n integrity: Fix memory leakage in keyring allocation error path\n amdgpu/pm: prevent array underflow in vega20_odn_edit_dpm_table()\n regulator: core: fix unbalanced of node refcount in regulator_dev_lookup()\n ASoC: pxa: fix null-pointer dereference in filter()\n drm/mediatek: Modify dpi power on/off sequence.\n drm/radeon: Add the missed acpi_put_table() to fix memory leak\n rxrpc: Fix ack.bufferSize to be 0 when generating an ack\n net, proc: Provide PROC_FS\u003dn fallback for proc_create_net_single_write()\n media: camss: Clean up received buffers on failed start of streaming\n wifi: rsi: Fix handling of 802.3 EAPOL frames sent via control port\n mtd: Fix device name leak when register device failed in add_mtd_device()\n bpf: propagate precision in ALU/ALU64 operations\n media: vivid: fix compose size exceed boundary\n ima: Handle -ESTALE returned by ima_filter_rule_match()\n ima: Fix fall-through warnings for Clang\n ima: Rename internal filter rule functions\n drm/panel/panel-sitronix-st7701: Remove panel on DSI attach failure\n spi: Update reference to struct spi_controller\n clk: renesas: r9a06g032: Repair grave increment error\n can: kvaser_usb: Compare requested bittiming parameters with actual parameters in do_set_{,data}_bittiming\n can: kvaser_usb: Add struct kvaser_usb_busparams\n can: kvaser_usb_leaf: Fix bogus restart events\n can: kvaser_usb_leaf: Fix wrong CAN state after stopping\n can: kvaser_usb_leaf: Fix improved state not being reported\n can: kvaser_usb_leaf: Set Warning state even without bus errors\n can: kvaser_usb: kvaser_usb_leaf: Handle CMD_ERROR_EVENT\n can: kvaser_usb: kvaser_usb_leaf: Rename {leaf,usbcan}_cmd_error_event to {leaf,usbcan}_cmd_can_error_event\n can: kvaser_usb: kvaser_usb_leaf: Get capabilities from device\n can: kvaser_usb: do not increase tx statistics when sending error message frames\n media: i2c: ad5820: Fix error path\n pata_ipx4xx_cf: Fix unsigned comparison with less than zero\n wifi: rtl8xxxu: Fix reading the vendor of combo chips\n wifi: ath9k: hif_usb: Fix use-after-free in ath9k_hif_usb_reg_in_cb()\n wifi: ath9k: hif_usb: fix memory leak of urbs in ath9k_hif_usb_dealloc_tx_urbs()\n rapidio: devices: fix missing put_device in mport_cdev_open\n hfs: Fix OOB Write in hfs_asc2mac\n relay: fix type mismatch when allocating memory in relay_create_buf()\n eventfd: change int to __u64 in eventfd_signal() ifndef CONFIG_EVENTFD\n rapidio: fix possible UAF when kfifo_alloc() fails\n fs: sysv: Fix sysv_nblocks() returns wrong value\n MIPS: OCTEON: warn only once if deprecated link status is being used\n MIPS: BCM63xx: Add check for NULL for clk in clk_enable\n platform/x86: mxm-wmi: fix memleak in mxm_wmi_call_mx[ds|mx]()\n PM: runtime: Do not call __rpm_callback() from rpm_idle()\n PM: runtime: Improve path in rpm_idle() when no callback\n xen/privcmd: Fix a possible warning in privcmd_ioctl_mmap_resource()\n x86/xen: Fix memory leak in xen_init_lock_cpu()\n x86/xen: Fix memory leak in xen_smp_intr_init{_pv}()\n xen/events: only register debug interrupt for 2-level events\n uprobes/x86: Allow to probe a NOP instruction with 0x66 prefix\n ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage()\n clocksource/drivers/sh_cmt: Make sure channel clock supply is enabled\n rapidio: rio: fix possible name leak in rio_register_mport()\n rapidio: fix possible name leaks when rio_add_device() fails\n ocfs2: fix memory leak in ocfs2_mount_volume()\n ocfs2: rewrite error handling of ocfs2_fill_super\n ocfs2: ocfs2_mount_volume does cleanup job before return error\n debugfs: fix error when writing negative value to atomic_t debugfs file\n docs: fault-injection: fix non-working usage of negative values\n lib/notifier-error-inject: fix error when writing -errno to debugfs file\n libfs: add DEFINE_SIMPLE_ATTRIBUTE_SIGNED for signed value\n cpufreq: amd_freq_sensitivity: Add missing pci_dev_put()\n genirq/irqdesc: Don\u0027t try to remove non-existing sysfs files\n nfsd: don\u0027t call nfsd_file_put from client states seqfile display\n EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper()\n irqchip: gic-pm: Use pm_runtime_resume_and_get() in gic_probe()\n perf/x86/intel/uncore: Fix reference count leak in hswep_has_limit_sbox()\n PNP: fix name memory leak in pnp_alloc_dev()\n selftests/efivarfs: Add checking of the test return value\n MIPS: vpe-cmp: fix possible memory leak while module exiting\n MIPS: vpe-mt: fix possible memory leak while module exiting\n ocfs2: fix memory leak in ocfs2_stack_glue_init()\n lib/fonts: fix undefined behavior in bit shift for get_default_font\n proc: fixup uptime selftest\n timerqueue: Use rb_entry_safe() in timerqueue_getnext()\n perf: Fix possible memleak in pmu_dev_alloc()\n selftests/ftrace: event_triggers: wait longer for test_event_enable\n fs: don\u0027t audit the capability check in simple_xattr_list()\n PM: hibernate: Fix mistake in kerneldoc comment\n alpha: fix syscall entry in !AUDUT_SYSCALL case\n cpuidle: dt: Return the correct numbers of parsed idle states\n tpm/tpm_crb: Fix error message in __crb_relinquish_locality()\n pstore: Avoid kcore oops by vmap()ing with VM_IOREMAP\n ARM: mmp: fix timer_read delay\n pstore/ram: Fix error return code in ramoops_probe()\n arm64: dts: armada-3720-turris-mox: Add missing interrupt for RTC\n ARM: dts: turris-omnia: Add switch port 6 node\n ARM: dts: turris-omnia: Add ethernet aliases\n ARM: dts: armada-39x: Fix assigned-addresses for every PCIe Root Port\n ARM: dts: armada-38x: Fix assigned-addresses for every PCIe Root Port\n ARM: dts: armada-375: Fix assigned-addresses for every PCIe Root Port\n ARM: dts: armada-xp: Fix assigned-addresses for every PCIe Root Port\n ARM: dts: armada-370: Fix assigned-addresses for every PCIe Root Port\n ARM: dts: dove: Fix assigned-addresses for every PCIe Root Port\n arm64: dts: mediatek: mt6797: Fix 26M oscillator unit name\n arm64: dts: mt2712-evb: Fix usb vbus regulators unit names\n arm64: dts: mt2712-evb: Fix vproc fixed regulators unit names\n arm64: dts: mt2712e: Fix unit address for pinctrl node\n arm64: dts: mt2712e: Fix unit_address_vs_reg warning for oscillators\n perf/smmuv3: Fix hotplug callback leak in arm_smmu_pmu_init()\n perf: arm_dsu: Fix hotplug callback leak in dsu_pmu_init()\n soc: ti: smartreflex: Fix PM disable depth imbalance in omap_sr_probe\n soc: ti: knav_qmss_queue: Fix PM disable depth imbalance in knav_queue_probe\n soc: ti: knav_qmss_queue: Use pm_runtime_resume_and_get instead of pm_runtime_get_sync\n arm: dts: spear600: Fix clcd interrupt\n drivers: soc: ti: knav_qmss_queue: Mark knav_acc_firmwares as static\n arm64: dts: qcom: sdm845-cheza: fix AP suspend pin bias\n ARM: dts: qcom: apq8064: fix coresight compatible\n usb: musb: remove extra check in musb_gadget_vbus_draw\n net: loopback: use NET_NAME_PREDICTABLE for name_assign_type\n Bluetooth: L2CAP: Fix u8 overflow\n HID: uclogic: Add HID_QUIRK_HIDINPUT_FORCE quirk\n HID: ite: Enable QUIRK_TOUCHPAD_ON_OFF_REPORT on Acer Aspire Switch V 10\n HID: ite: Enable QUIRK_TOUCHPAD_ON_OFF_REPORT on Acer Aspire Switch 10E\n HID: ite: Add support for Acer S1002 keyboard-dock\n xen-netback: move removal of \"hotplug-status\" to the right place\n igb: Initialize mailbox message for VF reset\n USB: serial: f81534: fix division by zero on line-speed change\n USB: serial: f81232: fix division by zero on line-speed change\n USB: serial: cp210x: add Kamstrup RF sniffer PIDs\n USB: serial: option: add Quectel EM05-G modem\n usb: gadget: uvc: Prevent buffer overflow in setup handler\n udf: Fix extending file within last block\n udf: Do not bother looking for prealloc extents if i_lenExtents matches i_size\n udf: Fix preallocation discarding at indirect extent boundary\n udf: Discard preallocation before extending file with a hole\n tracing/ring-buffer: Only do full wait when cpu !\u003d RING_BUFFER_ALL_CPUS\n ANDROID: Add more hvc devices for virtio-console.\n Revert \"can: af_can: fix NULL pointer dereference in can_rcv_filter\"\n ANDROID: Revert \"tracing/ring-buffer: Have polling block on watermark\"\n Linux 5.4.228\n ASoC: ops: Correct bounds check for second channel on SX controls\n can: mcba_usb: Fix termination command argument\n can: sja1000: fix size of OCR_MODE_MASK define\n pinctrl: meditatek: Startup with the IRQs disabled\n ASoC: ops: Check bounds for second channel in snd_soc_put_volsw_sx()\n nfp: fix use-after-free in area_cache_get()\n block: unhash blkdev part inode when the part is deleted\n mm/hugetlb: fix races when looking up a CONT-PTE/PMD size hugetlb page\n x86/smpboot: Move rcu_cpu_starting() earlier\n net: bpf: Allow TC programs to call BPF_FUNC_skb_change_head\n Linux 5.4.227\n can: esd_usb: Allow REC and TEC to return to zero\n net: mvneta: Fix an out of bounds check\n ipv6: avoid use-after-free in ip6_fragment()\n net: plip: don\u0027t call kfree_skb/dev_kfree_skb() under spin_lock_irq()\n xen/netback: fix build warning\n ethernet: aeroflex: fix potential skb leak in greth_init_rings()\n ipv4: Fix incorrect route flushing when table ID 0 is used\n ipv4: Fix incorrect route flushing when source address is deleted\n tipc: Fix potential OOB in tipc_link_proto_rcv()\n net: hisilicon: Fix potential use-after-free in hix5hd2_rx()\n net: hisilicon: Fix potential use-after-free in hisi_femac_rx()\n net: thunderx: Fix missing destroy_workqueue of nicvf_rx_mode_wq\n net: stmmac: fix \"snps,axi-config\" node property parsing\n nvme initialize core quirks before calling nvme_init_subsystem\n NFC: nci: Bounds check struct nfc_target arrays\n i40e: Disallow ip4 and ip6 l4_4_bytes\n i40e: Fix for VF MAC address 0\n i40e: Fix not setting default xps_cpus after reset\n net: mvneta: Prevent out of bounds read in mvneta_config_rss()\n xen-netfront: Fix NULL sring after live migration\n net: encx24j600: Fix invalid logic in reading of MISTAT register\n net: encx24j600: Add parentheses to fix precedence\n mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()\n selftests: rtnetlink: correct xfrm policy rule in kci_test_ipsec_offload\n net: dsa: ksz: Check return value\n Bluetooth: Fix not cleanup led when bt_init fails\n Bluetooth: 6LoWPAN: add missing hci_dev_put() in get_l2cap_conn()\n af_unix: Get user_ns from in_skb in unix_diag_get_exact().\n igb: Allocate MSI-X vector when testing\n e1000e: Fix TX dispatch condition\n gpio: amd8111: Fix PCI device reference count leak\n drm/bridge: ti-sn65dsi86: Fix output polarity setting bug\n ca8210: Fix crash by zero initializing data\n ieee802154: cc2520: Fix error return code in cc2520_hw_init()\n can: af_can: fix NULL pointer dereference in can_rcv_filter\n HID: core: fix shift-out-of-bounds in hid_report_raw_event\n HID: hid-lg4ff: Add check for empty lbuf\n HID: usbhid: Add ALWAYS_POLL quirk for some mice\n drm/shmem-helper: Remove errant put in error path\n KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field\n mm/gup: fix gup_pud_range() for dax\n memcg: fix possible use-after-free in memcg_write_event_control()\n media: v4l2-dv-timings.c: fix too strict blanking sanity checks\n Revert \"net: dsa: b53: Fix valid setting for MDB entries\"\n xen/netback: don\u0027t call kfree_skb() with interrupts disabled\n xen/netback: do some code cleanup\n xen/netback: Ensure protocol headers don\u0027t fall in the non-linear area\n mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths\n mm/khugepaged: fix GUP-fast interaction by sending IPI\n mm/khugepaged: take the right locks for page table retraction\n net: usb: qmi_wwan: add u-blox 0x1342 composition\n 9p/xen: check logical size for buffer size\n fbcon: Use kzalloc() in fbcon_prepare_logo()\n regulator: twl6030: fix get status of twl6032 regulators\n ASoC: soc-pcm: Add NULL check in BE reparenting\n btrfs: send: avoid unaligned encoded writes when attempting to clone range\n ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event\n regulator: slg51000: Wait after asserting CS pin\n 9p/fd: Use P9_HDRSZ for header size\n ARM: dts: rockchip: disable arm_global_timer on rk3066 and rk3188\n ARM: 9266/1: mm: fix no-MMU ZERO_PAGE() implementation\n ARM: 9251/1: perf: Fix stacktraces for tracepoint events in THUMB2 kernels\n ARM: dts: rockchip: rk3188: fix lcdc1-rgb24 node name\n ARM: dts: rockchip: fix ir-receiver node names\n arm: dts: rockchip: fix node name for hym8563 rtc\n arm64: dts: rockchip: keep I2S1 disabled for GPIO function on ROCK Pi 4 series\n\nChange-Id: I6a643eaa2ee55257328d881f5b860200719e981e\nSigned-off-by: kamasali Satyanarayan \u003cquic_kamasali@quicinc.com\u003e\n" }, { "commit": "946e067b4cdacda9af97bc175cb2d150062824a5", "tree": "d54cfa0f42296b36d2280dfae709b1a48a9d7b91", "parents": [ "7cf5ce2857b8ad02913e5cab7a81354dff63ccca" ], "author": { "name": "Peng Liu", "email": "liupeng17@lenovo.com", "time": "Tue Mar 21 14:19:29 2023 +0800" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Wed May 17 11:35:55 2023 +0200" }, "message": "scripts/gdb: fix lx-timerlist for Python3\n\ncommit 7362042f3556528e9e9b1eb5ce8d7a3a6331476b upstream.\n\nBelow incompatibilities between Python2 and Python3 made lx-timerlist fail\nto run under Python3.\n\no xrange() is replaced by range() in Python3\no bytes and str are different types in Python3\no the return value of Inferior.read_memory() is memoryview object in\n Python3\n\nakpm: cc stable so that older kernels are properly debuggable under newer\nPython.\n\nLink: https://lkml.kernel.org/r/TYCP286MB2146EE1180A4D5176CBA8AB2C6819@TYCP286MB2146.JPNP286.PROD.OUTLOOK.COM\nSigned-off-by: Peng Liu \u003cliupeng17@lenovo.com\u003e\nReviewed-by: Jan Kiszka \u003cjan.kiszka@siemens.com\u003e\nCc: Florian Fainelli \u003cf.fainelli@gmail.com\u003e\nCc: Kieran Bingham \u003ckbingham@kernel.org\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "30ac77e9952504fdf72dbf8b467df1bf0a75934a", "tree": "e9983ea314e7c7f0924851b1394fe690c88d42bf", "parents": [ "35a2681e993726c5661600c1506b224ddcc01dc7" ], "author": { "name": "Florian Fainelli", "email": "f.fainelli@gmail.com", "time": "Thu Mar 23 16:16:57 2023 -0700" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Wed May 17 11:35:48 2023 +0200" }, "message": "scripts/gdb: bail early if there are no generic PD\n\n[ Upstream commit f19c3c2959e465209ade1a7a699e6cbf4359ce78 ]\n\nAvoid generating an exception if there are no generic power domain(s)\nregistered:\n\n(gdb) lx-genpd-summary\ndomain status children\n /device runtime status\n----------------------------------------------------------------------\nPython Exception \u003cclass \u0027gdb.error\u0027\u003e: No symbol \"gpd_list\" in current context.\nError occurred in Python: No symbol \"gpd_list\" in current context.\n(gdb) quit\n\n[f.fainelli@gmail.com: correctly invoke gdb_eval_or_none]\n Link: https://lkml.kernel.org/r/20230327185746.3856407-1-f.fainelli@gmail.com\nLink: https://lkml.kernel.org/r/20230323231659.3319941-1-f.fainelli@gmail.com\nFixes: 8207d4a88e1e (\"scripts/gdb: add lx-genpd-summary command\")\nSigned-off-by: Florian Fainelli \u003cf.fainelli@gmail.com\u003e\nCc: Jan Kiszka \u003cjan.kiszka@siemens.com\u003e\nCc: Kieran Bingham \u003ckbingham@kernel.org\u003e\nCc: Leonard Crestez \u003cleonard.crestez@nxp.com\u003e\nCc: Stephen Boyd \u003csboyd@kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Sasha Levin \u003csashal@kernel.org\u003e\n" }, { "commit": "35a2681e993726c5661600c1506b224ddcc01dc7", "tree": "593a41adffc1cce8e24e967d96b2d2ecaac894a1", "parents": [ "0fbc62db7e10bedad6fbe433edb26574629ea4d1" ], "author": { "name": "Kees Cook", "email": "keescook@chromium.org", "time": "Wed Jul 08 16:32:13 2020 -0700" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Wed May 17 11:35:47 2023 +0200" }, "message": "PM: domains: Fix up terminology with parent/child\n\n[ Upstream commit 8d87ae48ced2dffd5e7247d19eb4c88be6f1c6f1 ]\n\nThe genpd infrastructure uses the terms master/slave, but such uses have\nno external exposures (not even in Documentation/driver-api/pm/*) and are\nnot mandated by nor associated with any external specifications. Change\nthe language used through-out to parent/child.\n\nThere was one possible exception in the debugfs node\n\"pm_genpd/pm_genpd_summary\" but its path has no hits outside of the\nkernel itself when performing a code search[1], and it seems even this\nsingle usage has been non-functional since it was introduced due to a\ntypo in the Python (\"apend\" instead of correct \"append\"). Fix the typo\nwhile we\u0027re at it.\n\nLink: https://codesearch.debian.net/ # [1]\nSigned-off-by: Kees Cook \u003ckeescook@chromium.org\u003e\nReviewed-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\nReviewed-by: Kieran Bingham \u003ckieran.bingham@ideasonboard.com\u003e\nSigned-off-by: Rafael J. Wysocki \u003crafael.j.wysocki@intel.com\u003e\nStable-dep-of: f19c3c2959e4 (\"scripts/gdb: bail early if there are no generic PD\")\nSigned-off-by: Sasha Levin \u003csashal@kernel.org\u003e\n" }, { "commit": "0fbc62db7e10bedad6fbe433edb26574629ea4d1", "tree": "60f7e657bac2cbb294dfdaae845be99adf8ec830", "parents": [ "0988baae3984c2d4eee0d0a399f0f3f197690b33" ], "author": { "name": "Florian Fainelli", "email": "f.fainelli@gmail.com", "time": "Thu Mar 23 15:52:45 2023 -0700" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Wed May 17 11:35:47 2023 +0200" }, "message": "scripts/gdb: bail early if there are no clocks\n\n[ Upstream commit 1d7adbc74c009057ed9dc3112f388e91a9c79acc ]\n\nAvoid generating an exception if there are no clocks registered:\n\n(gdb) lx-clk-summary\n enable prepare protect\n clock count count count rate\n------------------------------------------------------------------------\nPython Exception \u003cclass \u0027gdb.error\u0027\u003e: No symbol \"clk_root_list\" in\ncurrent context.\nError occurred in Python: No symbol \"clk_root_list\" in current context.\n\nLink: https://lkml.kernel.org/r/20230323225246.3302977-1-f.fainelli@gmail.com\nFixes: d1e9710b63d8 (\"scripts/gdb: initial clk support: lx-clk-summary\")\nSigned-off-by: Florian Fainelli \u003cf.fainelli@gmail.com\u003e\nCc: Jan Kiszka \u003cjan.kiszka@siemens.com\u003e\nCc: Kieran Bingham \u003ckbingham@kernel.org\u003e\nCc: Leonard Crestez \u003cleonard.crestez@nxp.com\u003e\nCc: Stephen Boyd \u003csboyd@kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Sasha Levin \u003csashal@kernel.org\u003e\n" }, { "commit": "734577d21ebf199bdc20914846f92fe89fab66ed", "tree": "d7a55bb6953e2799fa23eccecb799de17e60addb", "parents": [ "da8b283c08db149c16891e69b4c3b4d00ddbe96a", "ea7862c507eca54ea6caad9dcfc8bba5e749fbde" ], "author": { "name": "Greg Kroah-Hartman", "email": "gregkh@google.com", "time": "Wed Apr 26 13:21:48 2023 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@google.com", "time": "Wed Apr 26 13:21:48 2023 +0000" }, "message": "Merge 5.4.242 into android11-5.4-lts\n\nChanges in 5.4.242\n\tARM: dts: rockchip: fix a typo error for rk3288 spdif node\n\tarm64: dts: meson-g12-common: specify full DMC range\n\tnetfilter: br_netfilter: fix recent physdev match breakage\n\tregulator: fan53555: Explicitly include bits header\n\tnet: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg\n\tvirtio_net: bugfix overflow inside xdp_linearize_page()\n\tnetfilter: nf_tables: fix ifdef to also consider nf_tables\u003dm\n\ti40e: fix accessing vsi-\u003eactive_filters without holding lock\n\ti40e: fix i40e_setup_misc_vector() error handling\n\tmlxfw: fix null-ptr-deref in mlxfw_mfa2_tlv_next()\n\tbpf: Fix incorrect verifier pruning due to missing register precision taints\n\te1000e: Disable TSO on i219-LM card to increase speed\n\tf2fs: Fix f2fs_truncate_partial_nodes ftrace event\n\tInput: i8042 - add quirk for Fujitsu Lifebook A574/H\n\tselftests: sigaltstack: fix -Wuninitialized\n\tscsi: megaraid_sas: Fix fw_crash_buffer_show()\n\tscsi: core: Improve scsi_vpd_inquiry() checks\n\tnet: dsa: b53: mmap: add phy ops\n\ts390/ptrace: fix PTRACE_GET_LAST_BREAK error handling\n\tnvme-tcp: fix a possible UAF when failing to allocate an io queue\n\txen/netback: use same error messages for same errors\n\tiio: light: tsl2772: fix reading proximity-diodes from device tree\n\tnilfs2: initialize unused bytes in segment summary blocks\n\tmemstick: fix memory leak if card device is never registered\n\tmmc: sdhci_am654: Set HIGH_SPEED_ENA for SDR12 and SDR25\n\tMIPS: Define RUNTIME_DISCARD_EXIT in LD script\n\tx86/purgatory: Don\u0027t generate debug info for purgatory.ro\n\tRevert \"ext4: fix use-after-free in ext4_xattr_set_entry\"\n\text4: remove duplicate definition of ext4_xattr_ibody_inline_set()\n\text4: fix use-after-free in ext4_xattr_set_entry\n\tudp: Call inet6_destroy_sock() in setsockopt(IPV6_ADDRFORM).\n\ttcp/udp: Call inet6_destroy_sock() in IPv6 sk-\u003esk_destruct().\n\tinet6: Remove inet6_destroy_sock() in sk-\u003esk_prot-\u003edestroy().\n\tdccp: Call inet6_destroy_sock() via sk-\u003esk_destruct().\n\tsctp: Call inet6_destroy_sock() via sk-\u003esk_destruct().\n\txfs: fix forkoff miscalculation related to XFS_LITINO(mp)\n\tpwm: meson: Explicitly set .polarity in .get_state()\n\tiio: adc: at91-sama5d2_adc: fix an error code in at91_adc_allocate_trigger()\n\tASN.1: Fix check for strdup() success\n\tLinux 5.4.242\n\nChange-Id: Id72de17865bf93d2a6d39009fbc46cb3f8f7b6ca\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@google.com\u003e\n" }, { "commit": "d54a9f999ea769a579379e8386bd50bda9997a9f", "tree": "af212c2d0b0bf325ebe530ea7fb0ecf0947931bd", "parents": [ "2500d7edebfb390e9127eb9297b132027545ec62" ], "author": { "name": "Ekaterina Orlova", "email": "vorobushek.ok@gmail.com", "time": "Fri Apr 21 15:35:39 2023 +0100" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Wed Apr 26 11:24:06 2023 +0200" }, "message": "ASN.1: Fix check for strdup() success\n\ncommit 5a43001c01691dcbd396541e6faa2c0077378f48 upstream.\n\nIt seems there is a misprint in the check of strdup() return code that\ncan lead to NULL pointer dereference.\n\nFound by Linux Verification Center (linuxtesting.org) with SVACE.\n\nFixes: 4520c6a49af8 (\"X.509: Add simple ASN.1 grammar compiler\")\nSigned-off-by: Ekaterina Orlova \u003cvorobushek.ok@gmail.com\u003e\nCc: David Woodhouse \u003cdwmw2@infradead.org\u003e\nCc: James Bottomley \u003cjejb@linux.ibm.com\u003e\nCc: Jarkko Sakkinen \u003cjarkko@kernel.org\u003e\nCc: keyrings@vger.kernel.org\nCc: linux-kbuild@vger.kernel.org\nLink: https://lore.kernel.org/r/20230315172130.140-1-vorobushek.ok@gmail.com/\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "f4b76e8165607951d0a9216654c6be107e5b50e5", "tree": "0f1f25e9f78a02151a4762703fe6f373565ea5bb", "parents": [ "a3941b89a30c2b59e2fb7d227c4b0c435be5052d", "5da4c29d97bb49a323306b005f4fa7cf5207bcaf" ], "author": { "name": "Michael Bestas", "email": "mkbestas@lineageos.org", "time": "Thu Apr 06 14:17:05 2023 +0300" }, "committer": { "name": "Michael Bestas", "email": "mkbestas@lineageos.org", "time": "Thu Apr 06 14:17:05 2023 +0300" }, "message": "Merge tag \u0027ASB-2023-04-05_11-5.4\u0027 of https://android.googlesource.com/kernel/common into android13-5.4-lahaina\n\nhttps://source.android.com/docs/security/bulletin/2023-04-01\nCVE-2022-4696\nCVE-2023-20941\n\n* tag \u0027ASB-2023-04-05_11-5.4\u0027 of https://android.googlesource.com/kernel/common:\n UPSTREAM: ext4: fix kernel BUG in \u0027ext4_write_inline_data_end()\u0027\n UPSTREAM: hid: bigben_probe(): validate report count\n UPSTREAM: HID: bigben: use spinlock to safely schedule workers\n BACKPORT: of: base: Skip CPU nodes with \"fail\"/\"fail-...\" status\n UPSTREAM: HID: bigben_worker() remove unneeded check on report_field\n UPSTREAM: HID: bigben: use spinlock to protect concurrent accesses\n UPSTREAM: hwrng: virtio - add an internal buffer\n UPSTREAM: ext4: fix another off-by-one fsmap error on 1k block filesystems\n UPSTREAM: ext4: refuse to create ea block when umounted\n UPSTREAM: ext4: optimize ea_inode block expansion\n UPSTREAM: ext4: allocate extended attribute value in vmalloc area\n BACKPORT: FROMGIT: cgroup: Use separate src/dst nodes when preloading css_sets for migration\n Revert \"iommu: Add gfp parameter to iommu_ops::map\"\n Revert \"iommu/amd: Pass gfp flags to iommu_map_page() in amd_iommu_map()\"\n Revert \"RDMA/usnic: use iommu_map_atomic() under spin_lock()\"\n Linux 5.4.233\n bpf: add missing header file include\n Revert \"net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs\"\n ext4: Fix function prototype mismatch for ext4_feat_ktype\n wifi: mwifiex: Add missing compatible string for SD8787\n uaccess: Add speculation barrier to copy_from_user()\n mac80211: mesh: embedd mesh_paths and mpp_paths into ieee80211_if_mesh\n drm/i915/gvt: fix double free bug in split_2MB_gtt_entry\n alarmtimer: Prevent starvation by small intervals and SIG_IGN\n powerpc: dts: t208x: Disable 10G on MAC1 and MAC2\n can: kvaser_usb: hydra: help gcc-13 to figure out cmd_len\n KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS\n KVM: x86: Fail emulation during EMULTYPE_SKIP on any exception\n random: always mix cycle counter in add_latent_entropy()\n powerpc: dts: t208x: Mark MAC1 and MAC2 as 10G\n wifi: rtl8xxxu: gen2: Turn on the rate control\n drm/etnaviv: don\u0027t truncate physical page address\n drm: etnaviv: fix common struct sg_table related issues\n scatterlist: add generic wrappers for iterating over sgtable objects\n dma-mapping: add generic helpers for mapping sgtable objects\n Linux 5.4.232\n iommu/amd: Pass gfp flags to iommu_map_page() in amd_iommu_map()\n net: sched: sch: Fix off by one in htb_activate_prios()\n ASoC: SOF: Intel: hda-dai: fix possible stream_tag leak\n nilfs2: fix underflow in second superblock position calculations\n kvm: initialize all of the kvm_debugregs structure before sending it to userspace\n i40e: Add checking for null for nlmsg_find_attr()\n ipv6: Fix tcp socket connection with DSCP.\n ipv6: Fix datagram socket connection with DSCP.\n ixgbe: add double of VLAN header when computing the max MTU\n net: mpls: fix stale pointer if allocation fails during device rename\n net: stmmac: Restrict warning on disabling DMA store and fwd mode\n bnxt_en: Fix mqprio and XDP ring checking logic\n net: stmmac: fix order of dwmac5 FlexPPS parametrization sequence\n net/usb: kalmia: Don\u0027t pass act_len in usb_bulk_msg error path\n dccp/tcp: Avoid negative sk_forward_alloc by ipv6_pinfo.pktoptions.\n sctp: sctp_sock_filter(): avoid list_entry() on possibly empty list\n net: bgmac: fix BCM5358 support by setting correct flags\n i40e: add double of VLAN header when computing the max MTU\n ixgbe: allow to increase MTU to 3K with XDP enabled\n revert \"squashfs: harden sanity check in squashfs_read_xattr_id_table\"\n net: Fix unwanted sign extension in netdev_stats_to_stats64()\n Revert \"mm: Always release pages to the buddy allocator in memblock_free_late().\"\n hugetlb: check for undefined shift on 32 bit architectures\n sched/psi: Fix use-after-free in ep_remove_wait_queue()\n ALSA: hda/realtek - fixed wrong gpio assigned\n ALSA: hda/conexant: add a new hda codec SN6180\n mmc: mmc_spi: fix error handling in mmc_spi_probe()\n mmc: sdio: fix possible resource leaks in some error paths\n ipv4: Fix incorrect route flushing when source address is deleted\n Revert \"ipv4: Fix incorrect route flushing when source address is deleted\"\n xfs: sync lazy sb accounting on quiesce of read-only mounts\n xfs: prevent UAF in xfs_log_item_in_current_chkpt\n xfs: fix the forward progress assertion in xfs_iwalk_run_callbacks\n xfs: ensure inobt record walks always make forward progress\n xfs: fix missing CoW blocks writeback conversion retry\n xfs: only relog deferred intent items if free space in the log gets low\n xfs: expose the log push threshold\n xfs: periodically relog deferred intent items\n xfs: change the order in which child and parent defer ops are finished\n xfs: fix an incore inode UAF in xfs_bui_recover\n xfs: clean up xfs_bui_item_recover iget/trans_alloc/ilock ordering\n xfs: clean up bmap intent item recovery checking\n xfs: xfs_defer_capture should absorb remaining transaction reservation\n xfs: xfs_defer_capture should absorb remaining block reservations\n xfs: proper replay of deferred ops queued during log recovery\n xfs: fix finobt btree block recovery ordering\n xfs: log new intent items created as part of finishing recovered intent items\n xfs: refactor xfs_defer_finish_noroll\n xfs: turn dfp_intent into a xfs_log_item\n xfs: merge the -\u003ediff_items defer op into -\u003ecreate_intent\n xfs: merge the -\u003elog_item defer op into -\u003ecreate_intent\n xfs: factor out a xfs_defer_create_intent helper\n xfs: remove the xfs_inode_log_item_t typedef\n xfs: remove the xfs_efd_log_item_t typedef\n xfs: remove the xfs_efi_log_item_t typedef\n netfilter: nft_tproxy: restrict to prerouting hook\n btrfs: free device in btrfs_close_devices for a single device filesystem\n aio: fix mremap after fork null-deref\n nvme-fc: fix a missing queue put in nvmet_fc_ls_create_association\n s390/decompressor: specify __decompress() buf len to avoid overflow\n net: sched: sch: Bounds check priority\n net: stmmac: do not stop RX_CLK in Rx LPI state for qcs404 SoC\n net/rose: Fix to not accept on connected socket\n tools/virtio: fix the vringh test for virtio ring changes\n ASoC: cs42l56: fix DT probe\n selftests/bpf: Verify copy_register_state() preserves parent/live fields\n migrate: hugetlb: check for hugetlb shared PMD in node migration\n bpf: Always return target ifindex in bpf_fib_lookup\n nvme-pci: Move enumeration by class to be last in the table\n arm64: dts: meson-axg: Make mmc host controller interrupts level-sensitive\n arm64: dts: meson-g12-common: Make mmc host controller interrupts level-sensitive\n arm64: dts: meson-gx: Make mmc host controller interrupts level-sensitive\n riscv: Fixup race condition on PG_dcache_clean in flush_icache_pte\n ceph: flush cap releases when the session is flushed\n usb: typec: altmodes/displayport: Fix probe pin assign check\n usb: core: add quirk for Alcor Link AK9563 smartcard reader\n net: USB: Fix wrong-direction WARNING in plusb.c\n pinctrl: intel: Restore the pins that used to be in Direct IRQ mode\n pinctrl: single: fix potential NULL dereference\n pinctrl: aspeed: Fix confusing types in return value\n ALSA: pci: lx6464es: fix a debug loop\n selftests: forwarding: lib: quote the sysctl values\n rds: rds_rm_zerocopy_callback() use list_first_entry()\n ice: Do not use WQ_MEM_RECLAIM flag for workqueue\n ionic: clean interrupt before enabling queue to avoid credit race\n net: phy: meson-gxl: use MMD access dummy stubs for GXL, internal PHY\n bonding: fix error checking in bond_debug_reregister()\n xfrm: fix bug with DSCP copy to v6 from v4 tunnel\n RDMA/usnic: use iommu_map_atomic() under spin_lock()\n iommu: Add gfp parameter to iommu_ops::map\n IB/IPoIB: Fix legacy IPoIB due to wrong number of queues\n IB/hfi1: Restore allocated resources on failed copyout\n can: j1939: do not wait 250 ms if the same addr was already claimed\n tracing: Fix poll() and select() do not work on per_cpu trace_pipe and trace_pipe_raw\n ALSA: emux: Avoid potential array out-of-bound in snd_emux_xg_control()\n btrfs: zlib: zero-initialize zlib workspace\n btrfs: limit device extents to the device size\n iio:adc:twl6030: Enable measurement of VAC\n wifi: brcmfmac: Check the count value of channel spec to prevent out-of-bounds reads\n f2fs: fix to do sanity check on i_extra_isize in is_alive()\n fbdev: smscufx: fix error handling code in ufx_usb_probe\n powerpc/imc-pmu: Revert nest_init_lock to being a mutex\n serial: 8250_dma: Fix DMA Rx rearm race\n serial: 8250_dma: Fix DMA Rx completion race\n xprtrdma: Fix regbuf data not freed in rpcrdma_req_create()\n mm: swap: properly update readahead statistics in unuse_pte_range()\n nvmem: core: fix cell removal on error\n Squashfs: fix handling and sanity checking of xattr_ids count\n mm/swapfile: add cond_resched() in get_swap_pages()\n fpga: stratix10-soc: Fix return value check in s10_ops_write_init()\n mm: hugetlb: proc: check for hugetlb shared PMD in /proc/PID/smaps\n riscv: disable generation of unwind tables\n parisc: Wire up PTRACE_GETREGS/PTRACE_SETREGS for compat case\n parisc: Fix return code of pdc_iodc_print()\n iio:adc:twl6030: Enable measurements of VUSB, VBAT and others\n iio: adc: berlin2-adc: Add missing of_node_put() in error path\n iio: hid: fix the retval in accel_3d_capture_sample\n efi: Accept version 2 of memory attributes table\n watchdog: diag288_wdt: fix __diag288() inline assembly\n watchdog: diag288_wdt: do not use stack buffers for hardware data\n fbcon: Check font dimension limits\n Input: i8042 - add Clevo PCX0DX to i8042 quirk table\n Input: i8042 - add TUXEDO devices to i8042 quirk tables\n Input: i8042 - merge quirk tables\n Input: i8042 - move __initconst to fix code styling warning\n vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF\n usb: gadget: f_fs: Fix unbalanced spinlock in __ffs_ep0_queue_wait\n usb: dwc3: qcom: enable vbus override when in OTG dr-mode\n usb: dwc3: dwc3-qcom: Fix typo in the dwc3 vbus override API\n iio: adc: stm32-dfsdm: fill module aliases\n net/x25: Fix to not accept on connected socket\n i2c: rk3x: fix a bunch of kernel-doc warnings\n scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress\n scsi: target: core: Fix warning on RT kernels\n efi: fix potential NULL deref in efi_mem_reserve_persistent\n net: openvswitch: fix flow memory leak in ovs_flow_cmd_new\n virtio-net: Keep stop() to follow mirror sequence of open()\n selftests: net: udpgso_bench_tx: Cater for pending datagrams zerocopy benchmarking\n selftests: net: udpgso_bench: Fix racing bug between the rx/tx programs\n selftests: net: udpgso_bench_rx/tx: Stop when wrong CLI args are provided\n selftests: net: udpgso_bench_rx: Fix \u0027used uninitialized\u0027 compiler warning\n ata: libata: Fix sata_down_spd_limit() when no link speed is reported\n can: j1939: fix errant WARN_ON_ONCE in j1939_session_deactivate\n net: phy: meson-gxl: Add generic dummy stubs for MMD register access\n squashfs: harden sanity check in squashfs_read_xattr_id_table\n netfilter: br_netfilter: disable sabotage_in hook after first suppression\n netrom: Fix use-after-free caused by accept on already connected socket\n fix \"direction\" argument of iov_iter_kvec()\n fix iov_iter_bvec() \"direction\" argument\n WRITE is \"data source\", not destination...\n scsi: Revert \"scsi: core: map PQ\u003d1, PDT\u003dother values to SCSI_SCAN_TARGET_PRESENT\"\n arm64: dts: imx8mm: Fix pad control for UART1_DTE_RX\n ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path()\n ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use\n bus: sunxi-rsb: Fix error handling in sunxi_rsb_init()\n firewire: fix memory leak for payload of request subaction to IEC 61883-1 FCP region\n Linux 5.4.231\n Revert \"xprtrdma: Fix regbuf data not freed in rpcrdma_req_create()\"\n usb: host: xhci-plat: add wakeup entry at sysfs\n Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt\n ipv6: ensure sane device mtu in tunnels\n exit: Use READ_ONCE() for all oops/warn limit reads\n docs: Fix path paste-o for /sys/kernel/warn_count\n panic: Expose \"warn_count\" to sysfs\n panic: Introduce warn_limit\n panic: Consolidate open-coded panic_on_warn checks\n exit: Allow oops_limit to be disabled\n exit: Expose \"oops_count\" to sysfs\n exit: Put an upper limit on how often we can oops\n ia64: make IA64_MCA_RECOVERY bool instead of tristate\n csky: Fix function name in csky_alignment() and die()\n h8300: Fix build errors from do_exit() to make_task_dead() transition\n hexagon: Fix function name in die()\n objtool: Add a missing comma to avoid string concatenation\n exit: Add and use make_task_dead.\n mm: kasan: do not panic if both panic_on_warn and kasan_multishot set\n panic: unset panic_on_warn inside panic()\n sysctl: add a new register_sysctl_init() interface\n dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init\n blk-cgroup: fix missing pd_online_fn() while activating policy\n bpf: Skip task with pid\u003d1 in send_signal_common()\n ARM: dts: imx: Fix pca9547 i2c-mux node name\n x86/asm: Fix an assembler warning with current binutils\n clk: Fix pointer casting to prevent oops in devm_clk_release()\n perf/x86/amd: fix potential integer overflow on shift of a int\n netfilter: conntrack: unify established states for SCTP paths\n x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL\n block: fix and cleanup bio_check_ro\n nfsd: Ensure knfsd shuts down when the \"nfsd\" pseudofs is unmounted\n Revert \"Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode\"\n net: mdio-mux-meson-g12a: force internal PHY off on mux switch\n net: xgene: Move shared header file into include/linux\n net/phy/mdio-i2c: Move header file to include/linux/mdio\n net/tg3: resolve deadlock in tg3_reset_task() during EEH\n thermal: intel: int340x: Add locking to int340x_thermal_get_trip_type()\n net: ravb: Fix possible hang if RIS2_QFF1 happen\n sctp: fail if no bound addresses can be used for a given scope\n net/sched: sch_taprio: do not schedule in taprio_reset()\n netrom: Fix use-after-free of a listening socket.\n netfilter: conntrack: fix vtag checks for ABORT/SHUTDOWN_COMPLETE\n ipv4: prevent potential spectre v1 gadget in fib_metrics_match()\n ipv4: prevent potential spectre v1 gadget in ip_metrics_convert()\n netlink: annotate data races around sk_state\n netlink: annotate data races around dst_portid and dst_group\n netlink: annotate data races around nlk-\u003eportid\n netfilter: nft_set_rbtree: skip elements in transaction from garbage collection\n net: fix UaF in netns ops registration error path\n netlink: prevent potential spectre v1 gadgets\n EDAC/qcom: Do not pass llcc_driv_data as edac_device_ctl_info\u0027s pvt_info\n EDAC/device: Respect any driver-supplied workqueue polling value\n ARM: 9280/1: mm: fix warning on phys_addr_t to void pointer assignment\n thermal: intel: int340x: Protect trip temperature from concurrent updates\n KVM: x86/vmx: Do not skip segment attributes if unusable bit is set\n cifs: Fix oops due to uncleared server-\u003esmbd_conn in reconnect\n ftrace/scripts: Update the instructions for ftrace-bisect.sh\n trace_events_hist: add check for return value of \u0027create_hist_field\u0027\n tracing: Make sure trace_printk() can output as soon as it can be used\n module: Don\u0027t wait for GOING modules\n scsi: hpsa: Fix allocation size for scsi_host_alloc()\n Bluetooth: hci_sync: cancel cmd_timer if hci_open failed\n Revert \"Revert \"xhci: Set HCD flag to defer primary roothub registration\"\"\n fs: reiserfs: remove useless new_opts in reiserfs_remount\n netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state\n Revert \"selftests/bpf: check null propagation only neither reg is PTR_TO_BTF_ID\"\n mmc: sdhci-esdhc-imx: correct the tuning start tap and step setting\n mmc: sdhci-esdhc-imx: disable the CMD CRC check for standard tuning\n mmc: sdhci-esdhc-imx: clear pending interrupt and halt cqhci\n lockref: stop doing cpu_relax in the cmpxchg loop\n platform/x86: asus-nb-wmi: Add alternate mapping for KEY_SCREENLOCK\n platform/x86: touchscreen_dmi: Add info for the CSL Panther Tab HD\n scsi: hisi_sas: Set a port invalid only if there are no devices attached when refreshing port id\n KVM: s390: interrupt: use READ_ONCE() before cmpxchg()\n spi: spidev: remove debug messages that access spidev-\u003espi without locking\n ASoC: fsl-asoc-card: Fix naming of AC\u002797 CODEC widgets\n ASoC: fsl_ssi: Rename AC\u002797 streams to avoid collisions with AC\u002797 CODEC\n cpufreq: armada-37xx: stop using 0 as NULL pointer\n s390/debug: add _ASM_S390_ prefix to header guard\n drm: Add orientation quirk for Lenovo ideapad D330-10IGL\n ASoC: fsl_micfil: Correct the number of steps on SX controls\n cpufreq: Add Tegra234 to cpufreq-dt-platdev blocklist\n tcp: fix rate_app_limited to default to 1\n net: dsa: microchip: ksz9477: port map correction in ALU table entry register\n driver core: Fix test_async_probe_init saves device in wrong array\n w1: fix WARNING after calling w1_process()\n w1: fix deadloop in __w1_remove_master_device()\n tcp: avoid the lookup process failing to get sk in ehash table\n dmaengine: xilinx_dma: call of_node_put() when breaking out of for_each_child_of_node()\n dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling\n dmaengine: xilinx_dma: use devm_platform_ioremap_resource()\n HID: betop: check shape of output reports\n net: macb: fix PTP TX timestamp failure due to packet padding\n dmaengine: Fix double increment of client_count in dma_chan_get()\n drm/panfrost: fix GENERIC_ATOMIC64 dependency\n net: mlx5: eliminate anonymous module_init \u0026 module_exit\n usb: gadget: f_fs: Ensure ep0req is dequeued before free_request\n usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait\n HID: revert CHERRY_MOUSE_000C quirk\n net: stmmac: fix invalid call to mdiobus_get_phy()\n HID: check empty report_list in bigben_probe()\n HID: check empty report_list in hid_validate_values()\n net: mdio: validate parameter addr in mdiobus_get_phy()\n net: usb: sr9700: Handle negative len\n l2tp: Don\u0027t sleep and disable BH under writer-side sk_callback_lock\n l2tp: Serialize access to sk_user_data with sk_callback_lock\n net: fix a concurrency bug in l2tp_tunnel_register()\n net/sched: sch_taprio: fix possible use-after-free\n wifi: rndis_wlan: Prevent buffer overflow in rndis_query_oid\n gpio: mxc: Always set GPIOs used as interrupt source to INPUT mode\n net: wan: Add checks for NULL for utdm in undo_uhdlc_init and unmap_si_regs\n net: nfc: Fix use-after-free in local_cleanup()\n phy: rockchip-inno-usb2: Fix missing clk_disable_unprepare() in rockchip_usb2phy_power_on()\n bpf: Fix pointer-leak due to insufficient speculative store bypass mitigation\n amd-xgbe: Delay AN timeout during KR training\n amd-xgbe: TX Flow Ctrl Registers are h/w ver dependent\n affs: initialize fsdata in affs_truncate()\n IB/hfi1: Fix expected receive setup error exit issues\n IB/hfi1: Reserve user expected TIDs\n IB/hfi1: Reject a zero-length user expected buffer\n RDMA/core: Fix ib block iterator counter overflow\n tomoyo: fix broken dependency on *.conf.default\n EDAC/highbank: Fix memory leak in highbank_mc_probe()\n HID: intel_ish-hid: Add check for ishtp_dma_tx_map\n ARM: imx: add missing of_node_put()\n ARM: imx35: Retrieve the IIM base address from devicetree\n ARM: imx31: Retrieve the IIM base address from devicetree\n ARM: imx27: Retrieve the SYSCTRL base address from devicetree\n ARM: dts: imx6qdl-gw560x: Remove incorrect \u0027uart-has-rtscts\u0027\n memory: mvebu-devbus: Fix missing clk_disable_unprepare in mvebu_devbus_probe()\n memory: atmel-sdramc: Fix missing clk_disable_unprepare in atmel_ramc_probe()\n clk: Provide new devm_clk helpers for prepared and enabled clocks\n clk: generalize devm_clk_get() a bit\n Linux 5.4.230\n mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma\n x86/fpu: Use _Alignof to avoid undefined behavior in TYPE_ALIGN\n drm/amd/display: Fix COLOR_SPACE_YCBCR2020_TYPE matrix\n drm/amd/display: Fix set scaling doesn\u0027s work\n drm/i915: re-disable RC6p on Sandy Bridge\n gsmi: fix null-deref in gsmi_get_variable\n serial: atmel: fix incorrect baudrate setup\n dmaengine: tegra210-adma: fix global intr clear\n serial: pch_uart: Pass correct sg to dma_unmap_sg()\n dt-bindings: phy: g12a-usb3-pcie-phy: fix compatible string documentation\n usb-storage: apply IGNORE_UAS only for HIKSEMI MD202 on RTL9210\n usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()\n usb: gadget: g_webcam: Send color matching descriptor per frame\n usb: typec: altmodes/displayport: Fix pin assignment calculation\n usb: typec: altmodes/displayport: Add pin assignment helper\n usb: host: ehci-fsl: Fix module alias\n USB: serial: cp210x: add SCALANCE LPE-9000 device id\n USB: gadgetfs: Fix race between mounting and unmounting\n cifs: do not include page data when checking signature\n btrfs: fix race between quota rescan and disable leading to NULL pointer deref\n mmc: sunxi-mmc: Fix clock refcount imbalance during unbind\n comedi: adv_pci1760: Fix PWM instruction handling\n usb: core: hub: disable autosuspend for TI TUSB8041\n misc: fastrpc: Fix use-after-free race condition for maps\n misc: fastrpc: Don\u0027t remove map on creater_process and device_release\n USB: misc: iowarrior: fix up header size for USB_DEVICE_ID_CODEMERCS_IOW100\n USB: serial: option: add Quectel EM05CN modem\n USB: serial: option: add Quectel EM05CN (SG) modem\n USB: serial: option: add Quectel EC200U modem\n USB: serial: option: add Quectel EM05-G (RS) modem\n USB: serial: option: add Quectel EM05-G (CS) modem\n USB: serial: option: add Quectel EM05-G (GR) modem\n prlimit: do_prlimit needs to have a speculation check\n xhci: Detect lpm incapable xHC USB3 roothub ports from ACPI tables\n usb: acpi: add helper to check port lpm capability using acpi _DSM\n xhci: Add a flag to disable USB3 lpm on a xhci root port level.\n xhci: Add update_hub_device override for PCI xHCI hosts\n xhci: Fix null pointer dereference when host dies\n usb: xhci: Check endpoint is valid before dereferencing it\n xhci-pci: set the dma max_seg_size\n ALSA: hda/realtek - Turn on power early\n drm/i915/gt: Reset twice\n efi: fix userspace infinite retry read efivars after EFI runtime services page fault\n nilfs2: fix general protection fault in nilfs_btree_insert()\n Add exception protection processing for vd in axi_chan_handle_err function\n wifi: brcmfmac: fix regression for Broadcom PCIe wifi devices\n f2fs: let\u0027s avoid panic if extent_tree is not created\n RDMA/srp: Move large values to a new enum for gcc13\n net/ethtool/ioctl: return -EOPNOTSUPP if we have no phy stats\n selftests/bpf: check null propagation only neither reg is PTR_TO_BTF_ID\n pNFS/filelayout: Fix coalescing test for single DS\n Revert \"net: add atomic_long_t to net_device_stats fields\"\n Revert \"PM/devfreq: governor: Add a private governor_data for governor\"\n Linux 5.4.229\n tipc: call tipc_lxc_xmit without holding node_read_lock\n ocfs2: fix freeing uninitialized resource on ocfs2_dlm_shutdown\n tipc: Add a missing case of TIPC_DIRECT_MSG type\n tty: serial: tegra: Handle RX transfer in PIO mode if DMA wasn\u0027t started\n tipc: fix use-after-free in tipc_disc_rcv()\n Revert \"usb: ulpi: defer ulpi_register on ulpi_read_id timeout\"\n mm: Always release pages to the buddy allocator in memblock_free_late().\n efi: fix NULL-deref in init error path\n arm64: cmpxchg_double*: hazard against entire exchange variable\n arm64: atomics: remove LL/SC trampolines\n arm64: atomics: format whitespace consistently\n drm/virtio: Fix GEM handle creation UAF\n x86/resctrl: Fix task CLOSID/RMID update race\n x86/resctrl: Use task_curr() instead of task_struct-\u003eon_cpu to prevent unnecessary IPI\n iommu/mediatek-v1: Fix an error handling path in mtk_iommu_v1_probe()\n iommu/mediatek-v1: Add error handle for mtk_iommu_probe\n net/mlx5: Fix ptp max frequency adjustment range\n net/mlx5: Rename ptp clock info\n net/sched: act_mpls: Fix warning during failed attribute validation\n nfc: pn533: Wait for out_urb\u0027s completion in pn533_usb_send_frame()\n hvc/xen: lock console list traversal\n tipc: fix unexpected link reset due to discovery messages\n tipc: eliminate checking netns if node established\n tipc: improve throughput between nodes in netns\n regulator: da9211: Use irq handler when ready\n EDAC/device: Fix period calculation in edac_device_reset_delay_period()\n x86/boot: Avoid using Intel mnemonics in AT\u0026T syntax asm\n powerpc/imc-pmu: Fix use of mutex in IRQs disabled section\n netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function.\n ext4: fix uninititialized value in \u0027ext4_evict_inode\u0027\n ext4: fix use-after-free in ext4_orphan_cleanup\n ext4: lost matching-pair of trace in ext4_truncate\n ext4: fix bug_on in __es_tree_search caused by bad quota inode\n quota: Factor out setup of quota inode\n jbd2: use the correct print format\n usb: ulpi: defer ulpi_register on ulpi_read_id timeout\n wifi: wilc1000: sdio: fix module autoloading\n ipv6: raw: Deduct extension header length in rawv6_push_pending_frames\n ixgbe: fix pci device refcount leak\n platform/x86: sony-laptop: Don\u0027t turn off 0x153 keyboard backlight during probe\n drm/msm/adreno: Make adreno quirks not overwrite each other\n cifs: Fix uninitialized memory read for smb311 posix symlink create\n ALSA: hda/hdmi: Add a HP device 0x8715 to force connect list\n ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF\n net/ulp: prevent ULP without clone op from entering the LISTEN status\n s390/percpu: add READ_ONCE() to arch_this_cpu_to_op_simple()\n s390/kexec: fix ipl report address for kdump\n perf auxtrace: Fix address filter duplicate symbol selection\n docs: Fix the docs build with Sphinx 6.0\n efi: tpm: Avoid READ_ONCE() for accessing the event log\n KVM: arm64: Fix S1PTW handling on RO memslots\n net: sched: disallow noqueue for qdisc classes\n driver core: Fix bus_type.match() error handling in __driver_attach()\n selftests: set the BUILD variable to absolute path\n selftests: Fix kselftest O\u003dobjdir build from cluttering top level objdir\n parisc: Align parisc MADV_XXX constants with all other architectures\n mbcache: Avoid nesting of cache-\u003ec_list_lock under bit locks\n hfs/hfsplus: avoid WARN_ON() for sanity check, use proper error handling\n hfs/hfsplus: use WARN_ON for sanity check\n ext4: don\u0027t allow journal inode to have encrypt flag\n riscv: uaccess: fix type of 0 variable on error in get_user()\n nfsd: fix handling of readdir in v4root vs. mount upcall timeout\n x86/bugs: Flush IBP in ib_prctl_set()\n ASoC: Intel: bytcr_rt5640: Add quirk for the Advantech MICA-071 tablet\n udf: Fix extension of the last extent in the file\n caif: fix memory leak in cfctrl_linkup_request()\n drm/i915: unpin on error in intel_vgpu_shadow_mm_pin()\n usb: rndis_host: Secure rndis_query check against int overflow\n drivers/net/bonding/bond_3ad: return when there\u0027s no aggregator\n perf tools: Fix resources leak in perf_data__open_dir()\n net: sched: cbq: dont intepret cls results when asked to drop\n net: sched: atm: dont intepret cls results when asked to drop\n RDMA/mlx5: Fix validation of max_rd_atomic caps for DC\n RDMA/uverbs: Silence shiftTooManyBitsSigned warning\n net: phy: xgmiitorgmii: Fix refcount leak in xgmiitorgmii_probe\n net: amd-xgbe: add missed tasklet_kill\n vhost: fix range used in translate_desc()\n nfc: Fix potential resource leaks\n qlcnic: prevent -\u003edcb use-after-free on qlcnic_dcb_enable() failure\n net: sched: fix memory leak in tcindex_set_parms\n net: hns3: add interrupts re-initialization while doing VF FLR\n nfsd: shut down the NFSv4 state objects before the filecache\n bpf: pull before calling skb_postpull_rcsum()\n SUNRPC: ensure the matching upcall is in-flight upon downcall\n ext4: fix deadlock due to mbcache entry corruption\n mbcache: automatically delete entries from cache on freeing\n ext4: fix race when reusing xattr blocks\n ext4: unindent codeblock in ext4_xattr_block_set()\n ext4: remove EA inode entry from mbcache on inode eviction\n mbcache: add functions to delete entry if unused\n mbcache: don\u0027t reclaim used entries\n ext4: use kmemdup() to replace kmalloc + memcpy\n fs: ext4: initialize fsdata in pagecache_write()\n ext4: use memcpy_to_page() in pagecache_write()\n mm/highmem: Lift memcpy_[to|from]_page to core\n ext4: correct inconsistent error msg in nojournal mode\n ext4: goto right label \u0027failed_mount3a\u0027\n ravb: Fix \"failed to switch device to config mode\" message during unbind\n KVM: nVMX: Properly expose ENABLE_USR_WAIT_PAUSE control to L1\n KVM: VMX: Fix the spelling of CPU_BASED_USE_TSC_OFFSETTING\n KVM: VMX: Rename NMI_PENDING to NMI_WINDOW\n KVM: VMX: Rename INTERRUPT_PENDING to INTERRUPT_WINDOW\n KVM: retpolines: x86: eliminate retpoline from vmx.c exit handlers\n KVM: x86: optimize more exit handlers in vmx.c\n perf probe: Fix to get the DW_AT_decl_file and DW_AT_call_file as unsinged data\n perf probe: Use dwarf_attr_integrate as generic DWARF attr accessor\n dm thin: resume even if in FAIL mode\n media: s5p-mfc: Fix in register read and write for H264\n media: s5p-mfc: Clear workbit to handle error condition\n media: s5p-mfc: Fix to handle reference queue during finishing\n PM/devfreq: governor: Add a private governor_data for governor\n btrfs: replace strncpy() with strscpy()\n ext4: allocate extended attribute value in vmalloc area\n ext4: avoid unaccounted block allocation when expanding inode\n ext4: initialize quota before expanding inode in setproject ioctl\n ext4: fix inode leak in ext4_xattr_inode_create() on an error path\n ext4: avoid BUG_ON when creating xattrs\n ext4: fix error code return to user-space in ext4_get_branch()\n ext4: fix corruption when online resizing a 1K bigalloc fs\n ext4: fix delayed allocation bug in ext4_clu_mapped for bigalloc + inline\n ext4: init quota for \u0027old.inode\u0027 in \u0027ext4_rename\u0027\n ext4: fix bug_on in __es_tree_search caused by bad boot loader inode\n ext4: fix reserved cluster accounting in __es_remove_extent()\n ext4: add helper to check quota inums\n ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inode\n ext4: fix undefined behavior in bit shift for ext4_check_flag_values\n ext4: add inode table check in __ext4_get_inode_loc to aovid possible infinite loop\n drm/vmwgfx: Validate the box size for the snooped cursor\n drm/connector: send hotplug uevent on connector cleanup\n device_cgroup: Roll back to original exceptions after copy failure\n parisc: led: Fix potential null-ptr-deref in start_task()\n iommu/amd: Fix ivrs_acpihid cmdline parsing code\n crypto: n2 - add missing hash statesize\n PCI/sysfs: Fix double free in error path\n PCI: Fix pci_device_is_present() for VFs by checking PF\n ipmi: fix use after free in _ipmi_destroy_user()\n ima: Fix a potential NULL pointer access in ima_restore_measurement_list\n mtd: spi-nor: Check for zero erase size in spi_nor_find_best_erase_type()\n ipmi: fix long wait in unload when IPMI disconnect\n efi: Add iMac Pro 2017 to uefi skip cert quirk\n md/bitmap: Fix bitmap chunk size overflow issues\n cifs: fix missing display of three mount options\n cifs: fix confusing debug message\n media: dvb-core: Fix UAF due to refcount races at releasing\n media: dvb-core: Fix double free in dvb_register_device()\n ARM: 9256/1: NWFPE: avoid compiler-generated __aeabi_uldivmod\n tracing: Fix infinite loop in tracing_read_pipe on overflowed print_trace_line\n tracing/hist: Fix wrong return value in parse_action_params()\n x86/microcode/intel: Do not retry microcode reloading on the APs\n tracing/hist: Fix out-of-bound write on \u0027action_data.var_ref_idx\u0027\n dm cache: set needs_check flag after aborting metadata\n dm cache: Fix UAF in destroy()\n dm clone: Fix UAF in clone_dtr()\n dm integrity: Fix UAF in dm_integrity_dtr()\n dm thin: Fix UAF in run_timer_softirq()\n dm thin: Use last transaction\u0027s pmd-\u003eroot when commit failed\n dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata\n dm cache: Fix ABBA deadlock between shrink_slab and dm_cache_metadata_abort\n binfmt: Fix error return code in load_elf_fdpic_binary()\n binfmt: Move install_exec_creds after setup_new_exec to match binfmt_elf\n cpufreq: Init completion before kobject_init_and_add()\n selftests: Use optional USERCFLAGS and USERLDFLAGS\n arm64: dts: qcom: sdm850-lenovo-yoga-c630: correct I2C12 pins drive strength\n ARM: ux500: do not directly dereference __iomem\n btrfs: fix resolving backrefs for inline extent followed by prealloc\n mmc: sdhci-sprd: Disable CLK_AUTO when the clock is less than 400K\n ktest.pl minconfig: Unset configs instead of just removing them\n kest.pl: Fix grub2 menu handling for rebooting\n soc: qcom: Select REMAP_MMIO for LLCC driver\n media: stv0288: use explicitly signed char\n net/af_packet: make sure to pull mac header\n net/af_packet: add VLAN support for AF_PACKET SOCK_RAW GSO\n SUNRPC: Don\u0027t leak netobj memory when gss_read_proxy_verf() fails\n tpm: tpm_tis: Add the missed acpi_put_table() to fix memory leak\n tpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak\n mmc: vub300: fix warning - do not call blocking ops when !TASK_RUNNING\n f2fs: should put a page when checking the summary info\n mm, compaction: fix fast_isolate_around() to stay within boundaries\n md: fix a crash in mempool_free\n pnode: terminate at peers of source\n ALSA: line6: fix stack overflow in line6_midi_transmit\n ALSA: line6: correct midi status byte when receiving data from podxt\n ovl: Use ovl mounter\u0027s fsuid and fsgid in ovl_link()\n hfsplus: fix bug causing custom uid and gid being unable to be assigned with mount\n HID: plantronics: Additional PIDs for double volume key presses quirk\n HID: multitouch: fix Asus ExpertBook P2 P2451FA trackpoint\n powerpc/rtas: avoid scheduling in rtas_os_term()\n powerpc/rtas: avoid device tree lookups in rtas_os_term()\n objtool: Fix SEGFAULT\n nvme: fix the NVME_CMD_EFFECTS_CSE_MASK definition\n nvme: resync include/linux/nvme.h with nvmecli\n ata: ahci: Fix PCS quirk application for suspend\n nvme-pci: fix doorbell buffer value endianness\n cifs: fix oops during encryption\n media: dvbdev: fix refcnt bug\n media: dvbdev: fix build warning due to comments\n gcov: add support for checksum field\n regulator: core: fix deadlock on regulator enable\n iio: adc128s052: add proper .data members in adc128_of_match table\n iio: adc: ad_sigma_delta: do not use internal iio_dev lock\n reiserfs: Add missing calls to reiserfs_security_free()\n HID: wacom: Ensure bootloader PID is usable in hidraw mode\n usb: dwc3: core: defer probe on ulpi_read_id timeout\n ALSA: hda/hdmi: Add HP Device 0x8711 to force connect list\n ALSA: hda/realtek: Add quirk for Lenovo TianYi510Pro-14IOB\n pstore: Make sure CONFIG_PSTORE_PMSG selects CONFIG_RT_MUTEXES\n pstore: Switch pmsg_lock to an rt_mutex to avoid priority inversion\n ASoC: rt5670: Remove unbalanced pm_runtime_put()\n ASoC: rockchip: spdif: Add missing clk_disable_unprepare() in rk_spdif_runtime_resume()\n ASoC: wm8994: Fix potential deadlock\n ASoC: rockchip: pdm: Add missing clk_disable_unprepare() in rockchip_pdm_runtime_resume()\n ASoC: audio-graph-card: fix refcount leak of cpu_ep in __graph_for_each_link()\n ASoC: mediatek: mt8173-rt5650-rt5514: fix refcount leak in mt8173_rt5650_rt5514_dev_probe()\n ASoC: Intel: Skylake: Fix driver hang during shutdown\n ALSA: hda: add snd_hdac_stop_streams() helper\n ALSA/ASoC: hda: move/rename snd_hdac_ext_stop_streams to hdac_stream.c\n orangefs: Fix kmemleak in orangefs_{kernel,client}_debug_init()\n orangefs: Fix kmemleak in orangefs_prepare_debugfs_help_string()\n drm/sti: Fix return type of sti_{dvo,hda,hdmi}_connector_mode_valid()\n drm/fsl-dcu: Fix return type of fsl_dcu_drm_connector_mode_valid()\n hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param()\n clk: st: Fix memory leak in st_of_quadfs_setup()\n media: si470x: Fix use-after-free in si470x_int_in_callback()\n mmc: f-sdh30: Add quirks for broken timeout clock capability\n regulator: core: fix use_count leakage when handling boot-on\n blk-mq: fix possible memleak when register \u0027hctx\u0027 failed\n media: dvb-usb: fix memory leak in dvb_usb_adapter_init()\n media: dvbdev: adopts refcnt to avoid UAF\n media: dvb-frontends: fix leak of memory fw\n bpf: Prevent decl_tag from being referenced in func_proto arg\n ppp: associate skb with a device at tx\n mrp: introduce active flags to prevent UAF when applicant uninit\n net: add atomic_long_t to net_device_stats fields\n md/raid1: stop mdx_raid1 thread when raid1 array run failed\n drivers/md/md-bitmap: check the return value of md_bitmap_get_counter()\n drm/sti: Use drm_mode_copy()\n drm/rockchip: Use drm_mode_copy()\n s390/lcs: Fix return type of lcs_start_xmit()\n s390/netiucv: Fix return type of netiucv_tx()\n s390/ctcm: Fix return type of ctc{mp,}m_tx()\n igb: Do not free q_vector unless new one was allocated\n wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmf_fw_alloc_request()\n hamradio: baycom_epp: Fix return type of baycom_send_packet()\n net: ethernet: ti: Fix return type of netcp_ndo_start_xmit()\n bpf: make sure skb-\u003elen !\u003d 0 when redirecting to a tunneling device\n ipmi: fix memleak when unload ipmi driver\n ASoC: codecs: rt298: Add quirk for KBL-R RVP platform\n wifi: ar5523: Fix use-after-free on ar5523_cmd() timed out\n wifi: ath9k: verify the expected usb_endpoints are present\n brcmfmac: return error when getting invalid max_flowrings from dongle\n drm/etnaviv: add missing quirks for GC300\n hfs: fix OOB Read in __hfs_brec_find\n acct: fix potential integer overflow in encode_comp_t()\n nilfs2: fix shift-out-of-bounds/overflow in nilfs_sb2_bad_offset()\n ACPICA: Fix error code path in acpi_ds_call_control_method()\n fs: jfs: fix shift-out-of-bounds in dbDiscardAG\n udf: Avoid double brelse() in udf_rename()\n fs: jfs: fix shift-out-of-bounds in dbAllocAG\n binfmt_misc: fix shift-out-of-bounds in check_special_flags\n rcu: Fix __this_cpu_read() lockdep warning in rcu_force_quiescent_state()\n net: stream: purge sk_error_queue in sk_stream_kill_queues()\n myri10ge: Fix an error handling path in myri10ge_probe()\n rxrpc: Fix missing unlock in rxrpc_do_sendmsg()\n net_sched: reject TCF_EM_SIMPLE case for complex ematch module\n mailbox: zynq-ipi: fix error handling while device_register() fails\n skbuff: Account for tail adjustment during pull operations\n openvswitch: Fix flow lookup to use unmasked key\n rtc: mxc_v2: Add missing clk_disable_unprepare()\n r6040: Fix kmemleak in probe and remove\n nfc: pn533: Clear nfc_target before being used\n mISDN: hfcmulti: don\u0027t call dev_kfree_skb/kfree_skb() under spin_lock_irqsave()\n mISDN: hfcpci: don\u0027t call dev_kfree_skb/kfree_skb() under spin_lock_irqsave()\n mISDN: hfcsusb: don\u0027t call dev_kfree_skb/kfree_skb() under spin_lock_irqsave()\n nfsd: under NFSv4.1, fix double svc_xprt_put on rpc_create failure\n NFSD: Add tracepoints to NFSD\u0027s duplicate reply cache\n nfsd: Define the file access mode enum for tracing\n rtc: pic32: Move devm_rtc_allocate_device earlier in pic32_rtc_probe()\n rtc: st-lpc: Add missing clk_disable_unprepare in st_rtc_probe()\n remoteproc: qcom_q6v5_pas: Fix missing of_node_put() in adsp_alloc_memory_region()\n remoteproc: sysmon: fix memory leak in qcom_add_sysmon_subdev()\n pwm: sifive: Call pwm_sifive_update_clock() while mutex is held\n selftests/powerpc: Fix resource leaks\n powerpc/hv-gpci: Fix hv_gpci event list\n powerpc/83xx/mpc832x_rdb: call platform_device_put() in error case in of_fsl_spi_probe()\n powerpc/perf: callchain validate kernel stack pointer bounds\n powerpc/xive: add missing iounmap() in error path in xive_spapr_populate_irq_data()\n cxl: Fix refcount leak in cxl_calc_capp_routing\n powerpc/52xx: Fix a resource leak in an error handling path\n macintosh/macio-adb: check the return value of ioremap()\n macintosh: fix possible memory leak in macio_add_one_device()\n iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe()\n iommu/amd: Fix pci device refcount leak in ppr_notifier()\n rtc: pcf85063: Fix reading alarm\n rtc: snvs: Allow a time difference on clock register read\n include/uapi/linux/swab: Fix potentially missing __always_inline\n RDMA/siw: Fix pointer cast warning\n power: supply: fix null pointer dereferencing in power_supply_get_battery_info\n HSI: omap_ssi_core: Fix error handling in ssi_init()\n perf symbol: correction while adjusting symbol\n perf trace: Handle failure when trace point folder is missed\n perf trace: Use macro RAW_SYSCALL_ARGS_NUM to replace number\n perf trace: Add a strtoul() method to \u0027struct syscall_arg_fmt\u0027\n perf trace: Allow associating scnprintf routines with well known arg names\n perf trace: Add the syscall_arg_fmt pointer to syscall_arg\n perf trace: Factor out the initialization of syscal_arg_fmt-\u003escnprintf\n perf trace: Separate \u0027struct syscall_fmt\u0027 definition from syscall_fmts variable\n perf trace: Return error if a system call doesn\u0027t exist\n power: supply: fix residue sysfs file in error handle route of __power_supply_register()\n HSI: omap_ssi_core: fix possible memory leak in ssi_probe()\n HSI: omap_ssi_core: fix unbalanced pm_runtime_disable()\n fbdev: uvesafb: Fixes an error handling path in uvesafb_probe()\n fbdev: vermilion: decrease reference count in error path\n fbdev: via: Fix error in via_core_init()\n fbdev: pm2fb: fix missing pci_disable_device()\n fbdev: ssd1307fb: Drop optional dependency\n samples: vfio-mdev: Fix missing pci_disable_device() in mdpy_fb_probe()\n tracing/hist: Fix issue of losting command info in error_log\n usb: storage: Add check for kcalloc\n i2c: ismt: Fix an out-of-bounds bug in ismt_access()\n vme: Fix error not catched in fake_init()\n staging: rtl8192e: Fix potential use-after-free in rtllib_rx_Monitor()\n staging: rtl8192u: Fix use after free in ieee80211_rx()\n i2c: pxa-pci: fix missing pci_disable_device() on error in ce4100_i2c_probe\n chardev: fix error handling in cdev_device_add()\n mcb: mcb-parse: fix error handing in chameleon_parse_gdd()\n drivers: mcb: fix resource leak in mcb_probe()\n usb: gadget: f_hid: fix refcount leak on error path\n usb: gadget: f_hid: fix f_hidg lifetime vs cdev\n usb: gadget: f_hid: optional SETUP/SET_REPORT mode\n usb: roles: fix of node refcount leak in usb_role_switch_is_parent()\n counter: stm32-lptimer-cnt: fix the check on arr and cmp registers update\n cxl: fix possible null-ptr-deref in cxl_pci_init_afu|adapter()\n cxl: fix possible null-ptr-deref in cxl_guest_init_afu|adapter()\n misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os\n misc: tifm: fix possible memory leak in tifm_7xx1_switch_media()\n misc: ocxl: fix possible name leak in ocxl_file_register_afu()\n test_firmware: fix memory leak in test_firmware_init()\n serial: sunsab: Fix error handling in sunsab_init()\n serial: altera_uart: fix locking in polling mode\n tty: serial: altera_uart_{r,t}x_chars() need only uart_port\n tty: serial: clean up stop-tx part in altera_uart_tx_chars()\n serial: pch: Fix PCI device refcount leak in pch_request_dma()\n serial: pl011: Do not clear RX FIFO \u0026 RX interrupt in unthrottle.\n serial: amba-pl011: avoid SBSA UART accessing DMACR register\n usb: typec: tcpci: fix of node refcount leak in tcpci_register_port()\n usb: typec: Check for ops-\u003eexit instead of ops-\u003eenter in altmode_exit\n staging: vme_user: Fix possible UAF in tsi148_dma_list_add\n usb: fotg210-udc: Fix ages old endianness issues\n uio: uio_dmem_genirq: Fix deadlock between irq config and handling\n uio: uio_dmem_genirq: Fix missing unlock in irq configuration\n vfio: platform: Do not pass return buffer to ACPI _RST method\n class: fix possible memory leak in __class_register()\n serial: tegra: Read DMA status before terminating\n tty: serial: tegra: Activate RX DMA transfer by request\n drivers: dio: fix possible memory leak in dio_init()\n IB/IPoIB: Fix queue count inconsistency for PKEY child interfaces\n hwrng: geode - Fix PCI device refcount leak\n hwrng: amd - Fix PCI device refcount leak\n crypto: img-hash - Fix variable dereferenced before check \u0027hdev-\u003ereq\u0027\n orangefs: Fix sysfs not cleanup when dev init failed\n RDMA/hfi1: Fix error return code in parse_platform_config()\n crypto: omap-sham - Use pm_runtime_resume_and_get() in omap_sham_probe()\n f2fs: avoid victim selection from previous victim section\n RDMA/nldev: Add checks for nla_nest_start() in fill_stat_counter_qps()\n scsi: snic: Fix possible UAF in snic_tgt_create()\n scsi: fcoe: Fix transport not deattached when fcoe_if_init() fails\n scsi: ipr: Fix WARNING in ipr_init()\n scsi: fcoe: Fix possible name leak when device_register() fails\n scsi: hpsa: Fix possible memory leak in hpsa_add_sas_device()\n scsi: hpsa: Fix error handling in hpsa_add_sas_host()\n scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()\n crypto: tcrypt - Fix multibuffer skcipher speed test mem leak\n scsi: hpsa: Fix possible memory leak in hpsa_init_one()\n RDMA/rxe: Fix NULL-ptr-deref in rxe_qp_do_cleanup() when socket create failed\n crypto: ccree - Make cc_debugfs_global_fini() available for module init function\n RDMA/hfi: Decrease PCI device reference count in error path\n PCI: Check for alloc failure in pci_request_irq()\n crypto: ccree - Remove debugfs when platform_driver_register failed\n crypto: ccree - swap SHA384 and SHA512 larval hashes at build time\n scsi: scsi_debug: Fix a warning in resp_write_scat()\n RDMA/siw: Set defined status for work completion with undefined status\n RDMA/nldev: Return \"-EAGAIN\" if the cm_id isn\u0027t from expected port\n RDMA/siw: Fix immediate work request flush to completion queue\n f2fs: fix normal discard process\n RDMA/core: Fix order of nldev_exit call\n apparmor: Use pointer to struct aa_label for lbs_cred\n apparmor: Fix abi check to include v8 abi\n apparmor: fix lockdep warning when removing a namespace\n apparmor: fix a memleak in multi_transaction_new()\n stmmac: fix potential division by 0\n Bluetooth: RFCOMM: don\u0027t call kfree_skb() under spin_lock_irqsave()\n Bluetooth: hci_core: don\u0027t call kfree_skb() under spin_lock_irqsave()\n Bluetooth: hci_bcsp: don\u0027t call kfree_skb() under spin_lock_irqsave()\n Bluetooth: hci_h5: don\u0027t call kfree_skb() under spin_lock_irqsave()\n Bluetooth: hci_ll: don\u0027t call kfree_skb() under spin_lock_irqsave()\n Bluetooth: hci_qca: don\u0027t call kfree_skb() under spin_lock_irqsave()\n Bluetooth: btusb: don\u0027t call kfree_skb() under spin_lock_irqsave()\n ntb_netdev: Use dev_kfree_skb_any() in interrupt context\n net: lan9303: Fix read error execution path\n can: tcan4x5x: Remove invalid write in clear_interrupts\n net: amd-xgbe: Check only the minimum speed for active/passive cables\n net: amd-xgbe: Fix logic around active and passive cables\n net: amd: lance: don\u0027t call dev_kfree_skb() under spin_lock_irqsave()\n hamradio: don\u0027t call dev_kfree_skb() under spin_lock_irqsave()\n net: ethernet: dnet: don\u0027t call dev_kfree_skb() under spin_lock_irqsave()\n net: emaclite: don\u0027t call dev_kfree_skb() under spin_lock_irqsave()\n net: apple: bmac: don\u0027t call dev_kfree_skb() under spin_lock_irqsave()\n net: apple: mace: don\u0027t call dev_kfree_skb() under spin_lock_irqsave()\n net/tunnel: wait until all sk_user_data reader finish before releasing the sock\n net: farsync: Fix kmemleak when rmmods farsync\n ethernet: s2io: don\u0027t call dev_kfree_skb() under spin_lock_irqsave()\n of: overlay: fix null pointer dereferencing in find_dup_cset_node_entry() and find_dup_cset_prop()\n drivers: net: qlcnic: Fix potential memory leak in qlcnic_sriov_init()\n net: stmmac: selftests: fix potential memleak in stmmac_test_arpoffload()\n net: defxx: Fix missing err handling in dfx_init()\n net: vmw_vsock: vmci: Check memcpy_from_msg()\n clk: socfpga: Fix memory leak in socfpga_gate_init()\n clk: socfpga: use clk_hw_register for a5/c5\n clk: socfpga: clk-pll: Remove unused variable \u0027rc\u0027\n blktrace: Fix output non-blktrace event when blk_classic option enabled\n wifi: brcmfmac: Fix error return code in brcmf_sdio_download_firmware()\n wifi: rtl8xxxu: Add __packed to struct rtl8723bu_c2h\n spi: spi-gpio: Don\u0027t set MOSI as an input if not 3WIRE mode\n clk: samsung: Fix memory leak in _samsung_clk_register_pll()\n media: coda: Add check for kmalloc\n media: coda: Add check for dcoda_iram_alloc\n media: c8sectpfe: Add of_node_put() when breaking out of loop\n mmc: mmci: fix return value check of mmc_add_host()\n mmc: wbsd: fix return value check of mmc_add_host()\n mmc: via-sdmmc: fix return value check of mmc_add_host()\n mmc: meson-gx: fix return value check of mmc_add_host()\n mmc: omap_hsmmc: fix return value check of mmc_add_host()\n mmc: atmel-mci: fix return value check of mmc_add_host()\n mmc: wmt-sdmmc: fix return value check of mmc_add_host()\n mmc: vub300: fix return value check of mmc_add_host()\n mmc: toshsd: fix return value check of mmc_add_host()\n mmc: rtsx_usb_sdmmc: fix return value check of mmc_add_host()\n mmc: pxamci: fix return value check of mmc_add_host()\n mmc: mxcmmc: fix return value check of mmc_add_host()\n mmc: moxart: fix return value check of mmc_add_host()\n mmc: alcor: fix return value check of mmc_add_host()\n NFSv4.x: Fail client initialisation if state manager thread can\u0027t run\n SUNRPC: Fix missing release socket in rpc_sockname()\n xprtrdma: Fix regbuf data not freed in rpcrdma_req_create()\n ALSA: mts64: fix possible null-ptr-defer in snd_mts64_interrupt\n media: saa7164: fix missing pci_disable_device()\n bpf, sockmap: fix race in sock_map_free()\n regulator: core: fix resource leak in regulator_register()\n configfs: fix possible memory leak in configfs_create_dir()\n hsr: Avoid double remove of a node.\n clk: qcom: clk-krait: fix wrong div2 functions\n regulator: core: fix module refcount leak in set_supply()\n wifi: cfg80211: Fix not unregister reg_pdev when load_builtin_regdb_keys() fails\n spi: spidev: mask SPI_CS_HIGH in SPI_IOC_RD_MODE\n bonding: uninitialized variable in bond_miimon_inspect()\n bpf, sockmap: Fix data loss caused by using apply_bytes on ingress redirect\n bpf, sockmap: Fix repeated calls to sock_put() when msg has more_data\n netfilter: conntrack: set icmpv6 redirects as RELATED\n ASoC: pcm512x: Fix PM disable depth imbalance in pcm512x_probe\n drm/amdgpu: Fix PCI device refcount leak in amdgpu_atrm_get_bios()\n drm/radeon: Fix PCI device refcount leak in radeon_atrm_get_bios()\n ASoC: mediatek: mt8173: Enable IRQ when pdata is ready\n wifi: iwlwifi: mvm: fix double free on tx path.\n ALSA: asihpi: fix missing pci_disable_device()\n NFSv4: Fix a deadlock between nfs4_open_recover_helper() and delegreturn\n NFSv4.2: Fix initialisation of struct nfs4_label\n NFSv4.2: Fix a memory stomp in decode_attr_security_label\n NFSv4.2: Clear FATTR4_WORD2_SECURITY_LABEL when done decoding\n ASoC: mediatek: mtk-btcvsd: Add checks for write and read of mtk_btcvsd_snd\n ASoC: dt-bindings: wcd9335: fix reset line polarity in example\n drm/tegra: Add missing clk_disable_unprepare() in tegra_dc_probe()\n media: s5p-mfc: Add variant data for MFC v7 hardware for Exynos 3250 SoC\n media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()\n media: dvb-core: Fix ignored return value in dvb_register_frontend()\n pinctrl: pinconf-generic: add missing of_node_put()\n clk: imx: replace osc_hdmi with dummy\n clk: imx8mn: correct the usb1_ctrl parent to be usb_bus\n media: imon: fix a race condition in send_packet()\n mtd: maps: pxa2xx-flash: fix memory leak in probe\n bonding: fix link recovery in mode 2 when updelay is nonzero\n bonding: Rename slave_arr to usable_slaves\n bonding: Export skip slave logic to function\n clk: rockchip: Fix memory leak in rockchip_clk_register_pll()\n regulator: core: use kfree_const() to free space conditionally\n ALSA: seq: fix undefined behavior in bit shift for SNDRV_SEQ_FILTER_USE_EVENT\n ALSA: pcm: fix undefined behavior in bit shift for SNDRV_PCM_RATE_KNOT\n HID: hid-sensor-custom: set fixed size for custom attributes\n bpf: Move skb-\u003elen \u003d\u003d 0 checks into __bpf_redirect\n media: videobuf-dma-contig: use dma_mmap_coherent\n media: platform: exynos4-is: Fix error handling in fimc_md_init()\n media: solo6x10: fix possible memory leak in solo_sysfs_init()\n Input: elants_i2c - properly handle the reset GPIO when power is off\n mtd: lpddr2_nvm: Fix possible null-ptr-deref\n wifi: ath10k: Fix return value in ath10k_pci_init()\n ima: Fix misuse of dereference of pointer in template_desc_init_fields()\n integrity: Fix memory leakage in keyring allocation error path\n amdgpu/pm: prevent array underflow in vega20_odn_edit_dpm_table()\n regulator: core: fix unbalanced of node refcount in regulator_dev_lookup()\n ASoC: pxa: fix null-pointer dereference in filter()\n drm/mediatek: Modify dpi power on/off sequence.\n drm/radeon: Add the missed acpi_put_table() to fix memory leak\n rxrpc: Fix ack.bufferSize to be 0 when generating an ack\n net, proc: Provide PROC_FS\u003dn fallback for proc_create_net_single_write()\n media: camss: Clean up received buffers on failed start of streaming\n wifi: rsi: Fix handling of 802.3 EAPOL frames sent via control port\n mtd: Fix device name leak when register device failed in add_mtd_device()\n bpf: propagate precision in ALU/ALU64 operations\n media: vivid: fix compose size exceed boundary\n ima: Handle -ESTALE returned by ima_filter_rule_match()\n ima: Fix fall-through warnings for Clang\n ima: Rename internal filter rule functions\n drm/panel/panel-sitronix-st7701: Remove panel on DSI attach failure\n spi: Update reference to struct spi_controller\n clk: renesas: r9a06g032: Repair grave increment error\n can: kvaser_usb: Compare requested bittiming parameters with actual parameters in do_set_{,data}_bittiming\n can: kvaser_usb: Add struct kvaser_usb_busparams\n can: kvaser_usb_leaf: Fix bogus restart events\n can: kvaser_usb_leaf: Fix wrong CAN state after stopping\n can: kvaser_usb_leaf: Fix improved state not being reported\n can: kvaser_usb_leaf: Set Warning state even without bus errors\n can: kvaser_usb: kvaser_usb_leaf: Handle CMD_ERROR_EVENT\n can: kvaser_usb: kvaser_usb_leaf: Rename {leaf,usbcan}_cmd_error_event to {leaf,usbcan}_cmd_can_error_event\n can: kvaser_usb: kvaser_usb_leaf: Get capabilities from device\n can: kvaser_usb: do not increase tx statistics when sending error message frames\n media: i2c: ad5820: Fix error path\n pata_ipx4xx_cf: Fix unsigned comparison with less than zero\n wifi: rtl8xxxu: Fix reading the vendor of combo chips\n wifi: ath9k: hif_usb: Fix use-after-free in ath9k_hif_usb_reg_in_cb()\n wifi: ath9k: hif_usb: fix memory leak of urbs in ath9k_hif_usb_dealloc_tx_urbs()\n rapidio: devices: fix missing put_device in mport_cdev_open\n hfs: Fix OOB Write in hfs_asc2mac\n relay: fix type mismatch when allocating memory in relay_create_buf()\n eventfd: change int to __u64 in eventfd_signal() ifndef CONFIG_EVENTFD\n rapidio: fix possible UAF when kfifo_alloc() fails\n fs: sysv: Fix sysv_nblocks() returns wrong value\n MIPS: OCTEON: warn only once if deprecated link status is being used\n MIPS: BCM63xx: Add check for NULL for clk in clk_enable\n platform/x86: mxm-wmi: fix memleak in mxm_wmi_call_mx[ds|mx]()\n PM: runtime: Do not call __rpm_callback() from rpm_idle()\n PM: runtime: Improve path in rpm_idle() when no callback\n xen/privcmd: Fix a possible warning in privcmd_ioctl_mmap_resource()\n x86/xen: Fix memory leak in xen_init_lock_cpu()\n x86/xen: Fix memory leak in xen_smp_intr_init{_pv}()\n xen/events: only register debug interrupt for 2-level events\n uprobes/x86: Allow to probe a NOP instruction with 0x66 prefix\n ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage()\n clocksource/drivers/sh_cmt: Make sure channel clock supply is enabled\n rapidio: rio: fix possible name leak in rio_register_mport()\n rapidio: fix possible name leaks when rio_add_device() fails\n ocfs2: fix memory leak in ocfs2_mount_volume()\n ocfs2: rewrite error handling of ocfs2_fill_super\n ocfs2: ocfs2_mount_volume does cleanup job before return error\n debugfs: fix error when writing negative value to atomic_t debugfs file\n docs: fault-injection: fix non-working usage of negative values\n lib/notifier-error-inject: fix error when writing -errno to debugfs file\n libfs: add DEFINE_SIMPLE_ATTRIBUTE_SIGNED for signed value\n cpufreq: amd_freq_sensitivity: Add missing pci_dev_put()\n genirq/irqdesc: Don\u0027t try to remove non-existing sysfs files\n nfsd: don\u0027t call nfsd_file_put from client states seqfile display\n EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper()\n irqchip: gic-pm: Use pm_runtime_resume_and_get() in gic_probe()\n perf/x86/intel/uncore: Fix reference count leak in hswep_has_limit_sbox()\n PNP: fix name memory leak in pnp_alloc_dev()\n selftests/efivarfs: Add checking of the test return value\n MIPS: vpe-cmp: fix possible memory leak while module exiting\n MIPS: vpe-mt: fix possible memory leak while module exiting\n ocfs2: fix memory leak in ocfs2_stack_glue_init()\n lib/fonts: fix undefined behavior in bit shift for get_default_font\n proc: fixup uptime selftest\n timerqueue: Use rb_entry_safe() in timerqueue_getnext()\n perf: Fix possible memleak in pmu_dev_alloc()\n selftests/ftrace: event_triggers: wait longer for test_event_enable\n fs: don\u0027t audit the capability check in simple_xattr_list()\n PM: hibernate: Fix mistake in kerneldoc comment\n alpha: fix syscall entry in !AUDUT_SYSCALL case\n cpuidle: dt: Return the correct numbers of parsed idle states\n tpm/tpm_crb: Fix error message in __crb_relinquish_locality()\n pstore: Avoid kcore oops by vmap()ing with VM_IOREMAP\n ARM: mmp: fix timer_read delay\n pstore/ram: Fix error return code in ramoops_probe()\n arm64: dts: armada-3720-turris-mox: Add missing interrupt for RTC\n ARM: dts: turris-omnia: Add switch port 6 node\n ARM: dts: turris-omnia: Add ethernet aliases\n ARM: dts: armada-39x: Fix assigned-addresses for every PCIe Root Port\n ARM: dts: armada-38x: Fix assigned-addresses for every PCIe Root Port\n ARM: dts: armada-375: Fix assigned-addresses for every PCIe Root Port\n ARM: dts: armada-xp: Fix assigned-addresses for every PCIe Root Port\n ARM: dts: armada-370: Fix assigned-addresses for every PCIe Root Port\n ARM: dts: dove: Fix assigned-addresses for every PCIe Root Port\n arm64: dts: mediatek: mt6797: Fix 26M oscillator unit name\n arm64: dts: mt2712-evb: Fix usb vbus regulators unit names\n arm64: dts: mt2712-evb: Fix vproc fixed regulators unit names\n arm64: dts: mt2712e: Fix unit address for pinctrl node\n arm64: dts: mt2712e: Fix unit_address_vs_reg warning for oscillators\n perf/smmuv3: Fix hotplug callback leak in arm_smmu_pmu_init()\n perf: arm_dsu: Fix hotplug callback leak in dsu_pmu_init()\n soc: ti: smartreflex: Fix PM disable depth imbalance in omap_sr_probe\n soc: ti: knav_qmss_queue: Fix PM disable depth imbalance in knav_queue_probe\n soc: ti: knav_qmss_queue: Use pm_runtime_resume_and_get instead of pm_runtime_get_sync\n arm: dts: spear600: Fix clcd interrupt\n drivers: soc: ti: knav_qmss_queue: Mark knav_acc_firmwares as static\n arm64: dts: qcom: sdm845-cheza: fix AP suspend pin bias\n ARM: dts: qcom: apq8064: fix coresight compatible\n usb: musb: remove extra check in musb_gadget_vbus_draw\n net: loopback: use NET_NAME_PREDICTABLE for name_assign_type\n Bluetooth: L2CAP: Fix u8 overflow\n HID: uclogic: Add HID_QUIRK_HIDINPUT_FORCE quirk\n HID: ite: Enable QUIRK_TOUCHPAD_ON_OFF_REPORT on Acer Aspire Switch V 10\n HID: ite: Enable QUIRK_TOUCHPAD_ON_OFF_REPORT on Acer Aspire Switch 10E\n HID: ite: Add support for Acer S1002 keyboard-dock\n xen-netback: move removal of \"hotplug-status\" to the right place\n igb: Initialize mailbox message for VF reset\n USB: serial: f81534: fix division by zero on line-speed change\n USB: serial: f81232: fix division by zero on line-speed change\n USB: serial: cp210x: add Kamstrup RF sniffer PIDs\n USB: serial: option: add Quectel EM05-G modem\n usb: gadget: uvc: Prevent buffer overflow in setup handler\n udf: Fix extending file within last block\n udf: Do not bother looking for prealloc extents if i_lenExtents matches i_size\n udf: Fix preallocation discarding at indirect extent boundary\n udf: Discard preallocation before extending file with a hole\n tracing/ring-buffer: Only do full wait when cpu !\u003d RING_BUFFER_ALL_CPUS\n ANDROID: Add more hvc devices for virtio-console.\n Revert \"can: af_can: fix NULL pointer dereference in can_rcv_filter\"\n ANDROID: Revert \"tracing/ring-buffer: Have polling block on watermark\"\n Linux 5.4.228\n ASoC: ops: Correct bounds check for second channel on SX controls\n can: mcba_usb: Fix termination command argument\n can: sja1000: fix size of OCR_MODE_MASK define\n pinctrl: meditatek: Startup with the IRQs disabled\n ASoC: ops: Check bounds for second channel in snd_soc_put_volsw_sx()\n nfp: fix use-after-free in area_cache_get()\n block: unhash blkdev part inode when the part is deleted\n mm/hugetlb: fix races when looking up a CONT-PTE/PMD size hugetlb page\n x86/smpboot: Move rcu_cpu_starting() earlier\n net: bpf: Allow TC programs to call BPF_FUNC_skb_change_head\n Linux 5.4.227\n can: esd_usb: Allow REC and TEC to return to zero\n net: mvneta: Fix an out of bounds check\n ipv6: avoid use-after-free in ip6_fragment()\n net: plip: don\u0027t call kfree_skb/dev_kfree_skb() under spin_lock_irq()\n xen/netback: fix build warning\n ethernet: aeroflex: fix potential skb leak in greth_init_rings()\n ipv4: Fix incorrect route flushing when table ID 0 is used\n ipv4: Fix incorrect route flushing when source address is deleted\n tipc: Fix potential OOB in tipc_link_proto_rcv()\n net: hisilicon: Fix potential use-after-free in hix5hd2_rx()\n net: hisilicon: Fix potential use-after-free in hisi_femac_rx()\n net: thunderx: Fix missing destroy_workqueue of nicvf_rx_mode_wq\n net: stmmac: fix \"snps,axi-config\" node property parsing\n nvme initialize core quirks before calling nvme_init_subsystem\n NFC: nci: Bounds check struct nfc_target arrays\n i40e: Disallow ip4 and ip6 l4_4_bytes\n i40e: Fix for VF MAC address 0\n i40e: Fix not setting default xps_cpus after reset\n net: mvneta: Prevent out of bounds read in mvneta_config_rss()\n xen-netfront: Fix NULL sring after live migration\n net: encx24j600: Fix invalid logic in reading of MISTAT register\n net: encx24j600: Add parentheses to fix precedence\n mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()\n selftests: rtnetlink: correct xfrm policy rule in kci_test_ipsec_offload\n net: dsa: ksz: Check return value\n Bluetooth: Fix not cleanup led when bt_init fails\n Bluetooth: 6LoWPAN: add missing hci_dev_put() in get_l2cap_conn()\n af_unix: Get user_ns from in_skb in unix_diag_get_exact().\n igb: Allocate MSI-X vector when testing\n e1000e: Fix TX dispatch condition\n gpio: amd8111: Fix PCI device reference count leak\n drm/bridge: ti-sn65dsi86: Fix output polarity setting bug\n ca8210: Fix crash by zero initializing data\n ieee802154: cc2520: Fix error return code in cc2520_hw_init()\n can: af_can: fix NULL pointer dereference in can_rcv_filter\n HID: core: fix shift-out-of-bounds in hid_report_raw_event\n HID: hid-lg4ff: Add check for empty lbuf\n HID: usbhid: Add ALWAYS_POLL quirk for some mice\n drm/shmem-helper: Remove errant put in error path\n KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field\n mm/gup: fix gup_pud_range() for dax\n memcg: fix possible use-after-free in memcg_write_event_control()\n media: v4l2-dv-timings.c: fix too strict blanking sanity checks\n Revert \"net: dsa: b53: Fix valid setting for MDB entries\"\n xen/netback: don\u0027t call kfree_skb() with interrupts disabled\n xen/netback: do some code cleanup\n xen/netback: Ensure protocol headers don\u0027t fall in the non-linear area\n mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths\n mm/khugepaged: fix GUP-fast interaction by sending IPI\n mm/khugepaged: take the right locks for page table retraction\n net: usb: qmi_wwan: add u-blox 0x1342 composition\n 9p/xen: check logical size for buffer size\n fbcon: Use kzalloc() in fbcon_prepare_logo()\n regulator: twl6030: fix get status of twl6032 regulators\n ASoC: soc-pcm: Add NULL check in BE reparenting\n btrfs: send: avoid unaligned encoded writes when attempting to clone range\n ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event\n regulator: slg51000: Wait after asserting CS pin\n 9p/fd: Use P9_HDRSZ for header size\n ARM: dts: rockchip: disable arm_global_timer on rk3066 and rk3188\n ARM: 9266/1: mm: fix no-MMU ZERO_PAGE() implementation\n ARM: 9251/1: perf: Fix stacktraces for tracepoint events in THUMB2 kernels\n ARM: dts: rockchip: rk3188: fix lcdc1-rgb24 node name\n ARM: dts: rockchip: fix ir-receiver node names\n arm: dts: rockchip: fix node name for hym8563 rtc\n arm64: dts: rockchip: keep I2S1 disabled for GPIO function on ROCK Pi 4 series\n\n Conflicts:\n\tDocumentation/devicetree/bindings/phy/amlogic,meson-g12a-usb3-pcie-phy.yaml\n\tarch/arm64/boot/dts/vendor/bindings/phy/amlogic,g12a-usb3-pcie-phy.yaml\n\tarch/arm64/boot/dts/vendor/bindings/phy/amlogic,meson-g12a-usb3-pcie-phy.yaml\n\tarch/arm64/include/asm/atomic_ll_sc.h\n\tdrivers/edac/qcom_edac.c\n\tdrivers/net/ethernet/stmicro/stmmac/dwmac-qcom-ethqos.c\n\tdrivers/net/ethernet/stmicro/stmmac/stmmac_hwtstamp.c\n\tdrivers/net/ethernet/stmicro/stmmac/stmmac_main.c\n\tdrivers/usb/gadget/function/f_fs.c\n\tdrivers/usb/host/xhci-plat.c\n\tsound/soc/soc-pcm.c\n\nChange-Id: I4e8cffcac6c78ecf1a16d24ee01551747552fdf2\n" }, { "commit": "c066ac93be8c70628f9c95b01b78f24121dc8de5", "tree": "d81f70e8129ea391193552643c797b2166512e83", "parents": [ "efe47fcee38b850c4daa061cdf7468d0560510d4", "1866ee1a9025bfa9391b71f962e4d2099fc85ed7" ], "author": { "name": "Michael Bestas", "email": "mkbestas@lineageos.org", "time": "Wed Feb 08 18:28:38 2023 +0200" }, "committer": { "name": "Michael Bestas", "email": "mkbestas@lineageos.org", "time": "Wed Feb 08 18:28:38 2023 +0200" }, "message": "Merge tag \u0027ASB-2023-02-05_11-5.4\u0027 of https://android.googlesource.com/kernel/common into android13-5.4-lahaina\n\nhttps://source.android.com/docs/security/bulletin/2023-02-01\nCVE-2022-39189\nCVE-2022-39842\nCVE-2022-41222\nCVE-2023-20937\nCVE-2023-20938\nCVE-2022-0850\n\n* tag \u0027ASB-2023-02-05_11-5.4\u0027 of https://android.googlesource.com/kernel/common:\n ANDROID: ABI: Cuttlefish Symbol update\n UPSTREAM: media: dvb-core: Fix UAF due to refcount races at releasing\n ANDROID: abi_gki_aarch64_qcom: Add hrtimer_sleeper_start_expires\n UPSTREAM: ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF\n ANDROID: Revert \"tracing/ring-buffer: Have polling block on watermark\"\n UPSTREAM: usb: gadget: f_hid: fix f_hidg lifetime vs cdev\n UPSTREAM: usb: gadget: f_hid: optional SETUP/SET_REPORT mode\n ANDROID: add TEST_MAPPING for net/, include/net\n UPSTREAM: nfp: fix use-after-free in area_cache_get()\n UPSTREAM: proc: avoid integer type confusion in get_proc_long\n UPSTREAM: proc: proc_skip_spaces() shouldn\u0027t think it is working on C strings\n ANDROID: usb: f_accessory: Check buffer size when initialised via composite\n BACKPORT: mm: don\u0027t be stuck to rmap lock on reclaim path\n ANDROID: Add more hvc devices for virtio-console.\n Revert \"mmc: sdhci: Fix voltage switch delay\"\n ANDROID: gki_defconfig: add CONFIG_FUNCTION_ERROR_INJECTION\n Linux 5.4.226\n ipc/sem: Fix dangling sem_array access in semtimedop race\n v4l2: don\u0027t fall back to follow_pfn() if pin_user_pages_fast() fails\n proc: proc_skip_spaces() shouldn\u0027t think it is working on C strings\n proc: avoid integer type confusion in get_proc_long\n mmc: sdhci: Fix voltage switch delay\n mmc: sdhci: use FIELD_GET for preset value bit masks\n char: tpm: Protect tpm_pm_suspend with locks\n Revert \"clocksource/drivers/riscv: Events are stopped during CPU suspend\"\n x86/ioremap: Fix page aligned size calculation in __ioremap_caller()\n Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM\n x86/pm: Add enumeration check before spec MSRs save/restore setup\n x86/tsx: Add a feature bit for TSX control MSR support\n nvme: ensure subsystem reset is single threaded\n nvme: restrict management ioctls to admin\n epoll: check for events when removing a timed out thread from the wait queue\n epoll: call final ep_events_available() check under the lock\n tracing/ring-buffer: Have polling block on watermark\n ipv4: Fix route deletion when nexthop info is not specified\n ipv4: Handle attempt to delete multipath route when fib_info contains an nh reference\n selftests: net: fix nexthop warning cleanup double ip typo\n selftests: net: add delete nexthop route warning test\n Kconfig.debug: provide a little extra FRAME_WARN leeway when KASAN is enabled\n parisc: Increase FRAME_WARN to 2048 bytes on parisc\n xtensa: increase size of gcc stack frame check\n parisc: Increase size of gcc stack frame check\n iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init()\n pinctrl: single: Fix potential division by zero\n ASoC: ops: Fix bounds check for _sx controls\n mm: Fix \u0027.data.once\u0027 orphan section warning\n arm64: errata: Fix KVM Spectre-v2 mitigation selection for Cortex-A57/A72\n arm64: Fix panic() when Spectre-v2 causes Spectre-BHB to re-allocate KVM vectors\n tracing: Free buffers when a used dynamic event is removed\n mmc: sdhci-sprd: Fix no reset data and command after voltage switch\n mmc: sdhci-esdhc-imx: correct CQHCI exit halt state check\n mmc: core: Fix ambiguous TRIM and DISCARD arg\n mmc: mmc_test: Fix removal of debugfs file\n pinctrl: intel: Save and restore pins in \"direct IRQ\" mode\n x86/bugs: Make sure MSR_SPEC_CTRL is updated properly upon resume from S3\n nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()\n tools/vm/slabinfo-gnuplot: use \"grep -E\" instead of \"egrep\"\n error-injection: Add prompt for function error injection\n net/mlx5: DR, Fix uninitialized var warning\n hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new()\n hwmon: (coretemp) Check for null before removing sysfs attrs\n net: ethernet: renesas: ravb: Fix promiscuous mode after system resumed\n sctp: fix memory leak in sctp_stream_outq_migrate()\n packet: do not set TP_STATUS_CSUM_VALID on CHECKSUM_COMPLETE\n net: tun: Fix use-after-free in tun_detach()\n afs: Fix fileserver probe RTT handling\n net: hsr: Fix potential use-after-free\n dsa: lan9303: Correct stat name\n net: ethernet: nixge: fix NULL dereference\n net/9p: Fix a potential socket leak in p9_socket_open\n net: net_netdev: Fix error handling in ntb_netdev_init_module()\n net: phy: fix null-ptr-deref while probe() failed\n wifi: cfg80211: fix buffer overflow in elem comparison\n qlcnic: fix sleep-in-atomic-context bugs caused by msleep\n can: cc770: cc770_isa_probe(): add missing free_cc770dev()\n can: sja1000_isa: sja1000_isa_probe(): add missing free_sja1000dev()\n net/mlx5e: Fix use-after-free when reverting termination table\n net/mlx5: Fix uninitialized variable bug in outlen_write()\n of: property: decrement node refcount in of_fwnode_get_reference_args()\n hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails\n hwmon: (i5500_temp) fix missing pci_disable_device()\n scripts/faddr2line: Fix regression in name resolution on ppc64le\n iio: light: rpr0521: add missing Kconfig dependencies\n iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw\n iio: health: afe4403: Fix oob read in afe4403_read_raw\n btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()\n drm/amdgpu: Partially revert \"drm/amdgpu: update drm_display_info correctly when the edid is read\"\n drm/amdgpu: update drm_display_info correctly when the edid is read\n btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker\n spi: spi-imx: Fix spi_bus_clk if requested clock is higher than input clock\n btrfs: free btrfs_path before copying inodes to userspace\n fuse: lock inode unconditionally in fuse_fallocate()\n drm/i915: fix TLB invalidation for Gen12 video and compute engines\n drm/amdgpu: always register an MMU notifier for userptr\n drm/amd/dc/dce120: Fix audio register mapping, stop triggering KASAN\n btrfs: sysfs: normalize the error handling branch in btrfs_init_sysfs()\n btrfs: free btrfs_path before copying subvol info to userspace\n btrfs: free btrfs_path before copying fspath to userspace\n btrfs: free btrfs_path before copying root refs to userspace\n binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds\u003d0\n binder: Address corner cases in deferred copy and fixup\n binder: fix pointer cast warning\n binder: defer copies of pre-patched txn data\n binder: read pre-translated fds from sender buffer\n binder: avoid potential data leakage when copying txn\n dm integrity: flush the journal on suspend\n net: usb: qmi_wwan: add Telit 0x103a composition\n tcp: configurable source port perturb table size\n platform/x86: hp-wmi: Ignore Smart Experience App event\n platform/x86: acer-wmi: Enable SW_TABLET_MODE on Switch V 10 (SW5-017)\n platform/x86: asus-wmi: add missing pci_dev_put() in asus_wmi_set_xusb2pr()\n xen/platform-pci: add missing free_irq() in error path\n serial: 8250: 8250_omap: Avoid RS485 RTS glitch on -\u003eset_termios()\n ASoC: Intel: bytcht_es8316: Add quirk for the Nanote UMPC-01\n Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode\n gcov: clang: fix the buffer overflow issue\n nilfs2: fix nilfs_sufile_mark_dirty() not set segment usage as dirty\n firmware: coreboot: Register bus in module init\n firmware: google: Release devices before unregistering the bus\n ceph: avoid putting the realm twice when decoding snaps fails\n ceph: do not update snapshot context when there is no new snapshot\n iio: pressure: ms5611: fixed value compensation bug\n iio: ms5611: Simplify IO callback parameters\n nios2: add FORCE for vmlinuz.gz\n init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash\n iio: core: Fix entry not deleted when iio_register_sw_trigger_type() fails\n iio: light: apds9960: fix wrong register for gesture gain\n arm64: dts: rockchip: lower rk3399-puma-haikou SD controller clock frequency\n usb: dwc3: exynos: Fix remove() function\n lib/vdso: use \"grep -E\" instead of \"egrep\"\n s390/crashdump: fix TOD programmable field size\n net: thunderx: Fix the ACPI memory leak\n nfc: st-nci: fix memory leaks in EVT_TRANSACTION\n nfc: st-nci: fix incorrect validating logic in EVT_TRANSACTION\n s390/dasd: fix no record found for raw_track_access\n dccp/tcp: Reset saddr on failure after inet6?_hash_connect().\n bnx2x: fix pci device refcount leak in bnx2x_vf_is_pcie_pending()\n regulator: twl6030: re-add TWL6032_SUBCLASS\n NFC: nci: fix memory leak in nci_rx_data_packet()\n xfrm: Fix ignored return value in xfrm6_init()\n tipc: check skb_linearize() return value in tipc_disc_rcv()\n tipc: add an extra conn_get in tipc_conn_alloc\n tipc: set con sock in tipc_conn_alloc\n net/mlx5: Fix FW tracer timestamp calculation\n Drivers: hv: vmbus: fix possible memory leak in vmbus_device_register()\n Drivers: hv: vmbus: fix double free in the error path of vmbus_add_channel_work()\n nfp: add port from netdev validation for EEPROM access\n net: pch_gbe: fix pci device refcount leak while module exiting\n net/qla3xxx: fix potential memleak in ql3xxx_send()\n net/mlx4: Check retval of mlx4_bitmap_init\n ARM: mxs: fix memory leak in mxs_machine_init()\n 9p/fd: fix issue of list_del corruption in p9_fd_cancel()\n net: pch_gbe: fix potential memleak in pch_gbe_tx_queue()\n nfc/nci: fix race with opening and closing\n net: liquidio: simplify if expression\n ARM: dts: at91: sam9g20ek: enable udc vbus gpio pinctrl\n tee: optee: fix possible memory leak in optee_register_device()\n bus: sunxi-rsb: Support atomic transfers\n regulator: core: fix UAF in destroy_regulator()\n regulator: core: fix kobject release warning and memory leak in regulator_register()\n ASoC: sgtl5000: Reset the CHIP_CLK_CTRL reg on remove\n ARM: dts: am335x-pcm-953: Define fixed regulators in root node\n af_key: Fix send_acquire race with pfkey_register\n MIPS: pic32: treat port as signed integer\n RISC-V: vdso: Do not add missing symbols to version section in linker script\n arm64/syscall: Include asm/ptrace.h in syscall_wrapper header.\n block, bfq: fix null pointer dereference in bfq_bio_bfqg()\n drm: panel-orientation-quirks: Add quirk for Acer Switch V 10 (SW5-017)\n spi: stm32: fix stm32_spi_prepare_mbr() that halves spi clk for every run\n wifi: mac80211: Fix ack frame idr leak when mesh has no route\n audit: fix undefined behavior in bit shift for AUDIT_BIT\n wifi: mac80211_hwsim: fix debugfs attribute ps with rc table support\n wifi: mac80211: fix memory free error when registering wiphy fail\n Revert \"can: af_can: fix NULL pointer dereference in can_rx_register()\"\n Linux 5.4.225\n ntfs: check overflow when iterating ATTR_RECORDs\n ntfs: fix out-of-bounds read in ntfs_attr_find()\n ntfs: fix use-after-free in ntfs_attr_find()\n mm: fs: initialize fsdata passed to write_begin/write_end interface\n 9p/trans_fd: always use O_NONBLOCK read/write\n gfs2: Switch from strlcpy to strscpy\n gfs2: Check sb_bsize_shift after reading superblock\n 9p: trans_fd/p9_conn_cancel: drop client lock earlier\n kcm: close race conditions on sk_receive_queue\n bpf, test_run: Fix alignment problem in bpf_prog_test_run_skb()\n kcm: avoid potential race in kcm_tx_work\n tcp: cdg: allow tcp_cdg_release() to be called multiple times\n macvlan: enforce a consistent minimal mtu\n Input: i8042 - fix leaking of platform device on module removal\n kprobes: Skip clearing aggrprobe\u0027s post_handler in kprobe-on-ftrace case\n scsi: target: tcm_loop: Fix possible name leak in tcm_loop_setup_hba_bus()\n ring-buffer: Include dropped pages in counting dirty patches\n serial: 8250: Flush DMA Rx on RLSI\n misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram()\n docs: update mediator contact information in CoC doc\n mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put()\n mmc: sdhci-pci-o2micro: fix card detect fail issue caused by CD# debounce timeout\n mmc: core: properly select voltage range without power cycle\n scsi: zfcp: Fix double free of FSF request when qdio send fails\n Input: iforce - invert valid length check when fetching device IDs\n serial: 8250_lpss: Configure DMA also w/o DMA filter\n serial: 8250: Fall back to non-DMA Rx if IIR_RDI occurs\n dm ioctl: fix misbehavior if list_versions races with module loading\n iio: pressure: ms5611: changed hardcoded SPI speed to value limited\n iio: trigger: sysfs: fix possible memory leak in iio_sysfs_trig_init()\n iio: adc: at91_adc: fix possible memory leak in at91_adc_allocate_trigger()\n usb: chipidea: fix deadlock in ci_otg_del_timer\n usb: add NO_LPM quirk for Realforce 87U Keyboard\n USB: serial: option: add Fibocom FM160 0x0111 composition\n USB: serial: option: add u-blox LARA-L6 modem\n USB: serial: option: add u-blox LARA-R6 00B modem\n USB: serial: option: remove old LARA-R6 PID\n USB: serial: option: add Sierra Wireless EM9191\n speakup: fix a segfault caused by switching consoles\n slimbus: stream: correct presence rate frequencies\n Revert \"usb: dwc3: disable USB core PHY management\"\n ALSA: usb-audio: Drop snd_BUG_ON() from snd_usbmidi_output_open()\n ring_buffer: Do not deactivate non-existant pages\n ftrace: Fix null pointer dereference in ftrace_add_mod()\n ftrace: Optimize the allocation for mcount entries\n ftrace: Fix the possible incorrect kernel message\n cifs: add check for returning value of SMB2_set_info_init\n net: thunderbolt: Fix error handling in tbnet_init()\n cifs: Fix wrong return value checking when GETFLAGS\n net/x25: Fix skb leak in x25_lapb_receive_frame()\n platform/x86/intel: pmc: Don\u0027t unconditionally attach Intel PMC when virtualized\n drbd: use after free in drbd_create_device()\n xen/pcpu: fix possible memory leak in register_pcpu()\n bnxt_en: Remove debugfs when pci_register_driver failed\n net: caif: fix double disconnect client in chnl_net_open()\n net: macvlan: Use built-in RCU list checking\n mISDN: fix misuse of put_device() in mISDN_register_device()\n net: liquidio: release resources when liquidio driver open failed\n mISDN: fix possible memory leak in mISDN_dsp_element_register()\n net: bgmac: Drop free_netdev() from bgmac_enet_remove()\n ata: libata-transport: fix double ata_host_put() in ata_tport_add()\n arm64: dts: imx8mn: Fix NAND controller size-cells\n arm64: dts: imx8mm: Fix NAND controller size-cells\n pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map\n parport_pc: Avoid FIFO port location truncation\n siox: fix possible memory leak in siox_device_add()\n block: sed-opal: kmalloc the cmd/resp buffers\n ASoC: soc-utils: Remove __exit for snd_soc_util_exit()\n tty: n_gsm: fix sleep-in-atomic-context bug in gsm_control_send\n serial: imx: Add missing .thaw_noirq hook\n serial: 8250: omap: Flush PM QOS work on remove\n serial: 8250: omap: Fix unpaired pm_runtime_put_sync() in omap8250_remove()\n serial: 8250_omap: remove wait loop from Errata i202 workaround\n ASoC: core: Fix use-after-free in snd_soc_exit()\n spi: stm32: Print summary \u0027callbacks suppressed\u0027 message\n ASoC: codecs: jz4725b: Fix spelling mistake \"Sourc\" -\u003e \"Source\", \"Routee\" -\u003e \"Route\"\n Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm\n btrfs: remove pointless and double ulist frees in error paths of qgroup tests\n drm/imx: imx-tve: Fix return type of imx_tve_connector_mode_valid\n i2c: i801: add lis3lv02d\u0027s I2C address for Vostro 5568\n NFSv4: Retry LOCK on OLD_STATEID during delegation return\n selftests/intel_pstate: fix build for ARCH\u003dx86_64\n selftests/futex: fix build for clang\n ASoC: codecs: jz4725b: fix capture selector naming\n ASoC: codecs: jz4725b: use right control for Capture Volume\n ASoC: codecs: jz4725b: fix reported volume for Master ctl\n ASoC: codecs: jz4725b: add missed Line In power control bit\n spi: intel: Fix the offset to get the 64K erase opcode\n ASoC: wm8962: Add an event handler for TEMP_HP and TEMP_SPK\n ASoC: wm8997: Revert \"ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe\"\n ASoC: wm5110: Revert \"ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe\"\n ASoC: wm5102: Revert \"ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe\"\n x86/cpu: Restore AMD\u0027s DE_CFG MSR after resume\n net: tun: call napi_schedule_prep() to ensure we own a napi\n dmaengine: at_hdmac: Check return code of dma_async_device_register\n dmaengine: at_hdmac: Fix impossible condition\n dmaengine: at_hdmac: Don\u0027t allow CPU to reorder channel enable\n dmaengine: at_hdmac: Fix completion of unissued descriptor in case of errors\n dmaengine: at_hdmac: Don\u0027t start transactions at tx_submit level\n dmaengine: at_hdmac: Fix at_lli struct definition\n cert host tools: Stop complaining about deprecated OpenSSL functions\n can: j1939: j1939_send_one(): fix missing CAN header initialization\n udf: Fix a slab-out-of-bounds write bug in udf_find_entry()\n btrfs: selftests: fix wrong error check in btrfs_free_dummy_root()\n platform/x86: hp_wmi: Fix rfkill causing soft blocked wifi\n drm/i915/dmabuf: fix sg_table handling in map_dma_buf\n nilfs2: fix use-after-free bug of ns_writer on remount\n nilfs2: fix deadlock in nilfs_count_free_blocks()\n vmlinux.lds.h: Fix placement of \u0027.data..decrypted\u0027 section\n ALSA: usb-audio: Add DSD support for Accuphase DAC-60\n ALSA: usb-audio: Add quirk entry for M-Audio Micro\n ALSA: hda: fix potential memleak in \u0027add_widget_node\u0027\n ALSA: hda/ca0132: add quirk for EVGA Z390 DARK\n mmc: sdhci-tegra: Fix SDHCI_RESET_ALL for CQHCI\n mmc: sdhci-of-arasan: Fix SDHCI_RESET_ALL for CQHCI\n mmc: cqhci: Provide helper for resetting both SDHCI and CQHCI\n MIPS: jump_label: Fix compat branch range check\n arm64: efi: Fix handling of misaligned runtime regions and drop warning\n riscv: process: fix kernel info leakage\n net: macvlan: fix memory leaks of macvlan_common_newlink\n ethernet: tundra: free irq when alloc ring failed in tsi108_open()\n net: mv643xx_eth: disable napi when init rxq or txq failed in mv643xx_eth_open()\n ethernet: s2io: disable napi when start nic failed in s2io_card_up()\n cxgb4vf: shut down the adapter when t4vf_update_port_info() failed in cxgb4vf_open()\n net: cxgb3_main: disable napi when bind qsets failed in cxgb_up()\n net: cpsw: disable napi in cpsw_ndo_open()\n net/mlx5: Allow async trigger completion execution on single CPU systems\n net: nixge: disable napi when enable interrupts failed in nixge_open()\n perf stat: Fix printing os-\u003eprefix in CSV metrics output\n drivers: net: xgene: disable napi when register irq failed in xgene_enet_open()\n dmaengine: mv_xor_v2: Fix a resource leak in mv_xor_v2_remove()\n dmaengine: pxa_dma: use platform_get_irq_optional\n tipc: fix the msg-\u003ereq tlv len check in tipc_nl_compat_name_table_dump_header\n can: af_can: fix NULL pointer dereference in can_rx_register()\n ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network\n drm/vc4: Fix missing platform_unregister_drivers() call in vc4_drm_register()\n hamradio: fix issue of dev reference count leakage in bpq_device_event()\n net: lapbether: fix issue of dev reference count leakage in lapbeth_device_event()\n capabilities: fix undefined behavior in bit shift for CAP_TO_MASK\n net: fman: Unregister ethernet device on removal\n bnxt_en: fix potentially incorrect return value for ndo_rx_flow_steer\n bnxt_en: Fix possible crash in bnxt_hwrm_set_coal()\n net: tun: Fix memory leaks of napi_get_frags\n net: gso: fix panic on frag_list with mixed head alloc types\n HID: hyperv: fix possible memory leak in mousevsc_probe()\n bpf, sockmap: Fix the sk-\u003esk_forward_alloc warning of sk_stream_kill_queues\n wifi: cfg80211: fix memory leak in query_regdb_file()\n wifi: cfg80211: silence a sparse RCU warning\n phy: stm32: fix an error code in probe\n xfs: drain the buf delwri queue before xfsaild idles\n xfs: preserve inode versioning across remounts\n xfs: use MMAPLOCK around filemap_map_pages()\n xfs: redesign the reflink remap loop to fix blkres depletion crash\n xfs: rename xfs_bmap_is_real_extent to is_written_extent\n xfs: preserve rmapbt swapext block reservation from freed blocks\n ANDROID: properly copy the scm_io_uring field in struct sk_buff\n Linux 5.4.224\n ipc: remove memcg accounting for sops objects in do_semtimedop()\n wifi: brcmfmac: Fix potential buffer overflow in brcmf_fweh_event_worker()\n drm/i915/sdvo: Setup DDC fully before output init\n drm/i915/sdvo: Filter out invalid outputs more sensibly\n drm/rockchip: dsi: Force synchronous probe\n mtd: rawnand: gpmi: Set WAIT_FOR_READY timeout based on program/erase times\n KVM: x86: emulator: update the emulation mode after CR0 write\n KVM: x86: emulator: introduce emulator_recalc_and_set_mode\n KVM: x86: emulator: em_sysexit should update ctxt-\u003emode\n KVM: x86: Mask off reserved bits in CPUID.80000008H\n KVM: x86: Mask off reserved bits in CPUID.8000001AH\n ext4: fix BUG_ON() when directory entry has invalid rec_len\n ext4: fix warning in \u0027ext4_da_release_space\u0027\n parisc: Avoid printing the hardware path twice\n parisc: Export iosapic_serial_irq() symbol for serial port driver\n parisc: Make 8250_gsc driver dependend on CONFIG_PARISC\n ALSA: usb-audio: Add quirks for MacroSilicon MS2100/MS2106 devices\n perf/x86/intel: Add Cooper Lake stepping to isolation_ucodes[]\n perf/x86/intel: Fix pebs event constraints for ICL\n efi: random: reduce seed size to 32 bytes\n fuse: add file_modified() to fallocate\n capabilities: fix potential memleak on error path from vfs_getxattr_alloc()\n tracing/histogram: Update document for KEYS_MAX size\n tools/nolibc/string: Fix memcmp() implementation\n kprobe: reverse kp-\u003eflags when arm_kprobe failed\n tcp/udp: Make early_demux back namespacified.\n btrfs: fix type of parameter generation in btrfs_get_dentry\n binder: fix UAF of alloc-\u003evma in race with munmap()\n memcg: enable accounting of ipc resources\n tcp/udp: Fix memory leak in ipv6_renew_options().\n block, bfq: protect \u0027bfqd-\u003equeued\u0027 by \u0027bfqd-\u003elock\u0027\n Bluetooth: L2CAP: Fix attempting to access uninitialized memory\n xfs: Add the missed xfs_perag_put() for xfs_ifree_cluster()\n xfs: don\u0027t fail unwritten extent conversion on writeback due to edquot\n xfs: group quota should return EDQUOT when prj quota enabled\n xfs: gut error handling in xfs_trans_unreserve_and_mod_sb()\n xfs: use ordered buffers to initialize dquot buffers during quotacheck\n xfs: don\u0027t fail verifier on empty attr3 leaf block\n i2c: xiic: Add platform module alias\n HID: saitek: add madcatz variant of MMO7 mouse device ID\n scsi: core: Restrict legal sdev_state transitions via sysfs\n media: meson: vdec: fix possible refcount leak in vdec_probe()\n media: dvb-frontends/drxk: initialize err to 0\n media: cros-ec-cec: limit msg.len to CEC_MAX_MSG_SIZE\n media: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE\n ipv6: fix WARNING in ip6_route_net_exit_late()\n net, neigh: Fix null-ptr-deref in neigh_table_clear()\n net: mdio: fix undefined behavior in bit shift for __mdiobus_register\n Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()\n Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu\n btrfs: fix ulist leaks in error paths of qgroup self tests\n btrfs: fix inode list leak during backref walking at find_parent_nodes()\n btrfs: fix inode list leak during backref walking at resolve_indirect_refs()\n isdn: mISDN: netjet: fix wrong check of device registration\n mISDN: fix possible memory leak in mISDN_register_device()\n rose: Fix NULL pointer dereference in rose_send_frame()\n ipvs: fix WARNING in ip_vs_app_net_cleanup()\n ipvs: fix WARNING in __ip_vs_cleanup_batch()\n ipvs: use explicitly signed chars\n netfilter: nf_tables: release flow rule object from commit path\n net: tun: fix bugs for oversize packet when napi frags enabled\n net: sched: Fix use after free in red_enqueue()\n ata: pata_legacy: fix pdc20230_set_piomode()\n net: fec: fix improper use of NETDEV_TX_BUSY\n nfc: nfcmrvl: Fix potential memory leak in nfcmrvl_i2c_nci_send()\n nfc: s3fwrn5: Fix potential memory leak in s3fwrn5_nci_send()\n RDMA/qedr: clean up work queue on failure in qedr_alloc_resources()\n RDMA/core: Fix null-ptr-deref in ib_core_cleanup()\n net: dsa: Fix possible memory leaks in dsa_loop_init()\n nfs4: Fix kmemleak when allocate slot failed\n NFSv4.1: We must always send RECLAIM_COMPLETE after a reboot\n NFSv4.1: Handle RECLAIM_COMPLETE trunking errors\n IB/hfi1: Correctly move list in sc_disable()\n RDMA/cma: Use output interface for net_dev check\n Linux 5.4.223\n can: rcar_canfd: rcar_canfd_handle_global_receive(): fix IRQ storm on global FIFO receive\n net: enetc: survive memory pressure without crashing\n net/mlx5: Fix possible use-after-free in async command interface\n net/mlx5e: Do not increment ESN when updating IPsec ESN state\n nh: fix scope used to find saddr when adding non gw nh\n net: ehea: fix possible memory leak in ehea_register_port()\n openvswitch: switch from WARN to pr_warn\n ALSA: aoa: Fix I2S device accounting\n ALSA: aoa: i2sbus: fix possible memory leak in i2sbus_add_dev()\n PM: domains: Fix handling of unavailable/disabled idle states\n net: ksz884x: fix missing pci_disable_device() on error in pcidev_init()\n i40e: Fix flow-type by setting GL_HASH_INSET registers\n i40e: Fix VF hang when reset is triggered on another VF\n i40e: Fix ethtool rx-flow-hash setting for X722\n media: videodev2.h: V4L2_DV_BT_BLANKING_HEIGHT should check \u0027interlaced\u0027\n media: v4l2-dv-timings: add sanity checks for blanking values\n media: vivid: dev-\u003ebitmap_cap wasn\u0027t freed in all cases\n media: vivid: s_fbuf: add more sanity checks\n PM: hibernate: Allow hybrid sleep to work with s2idle\n can: mscan: mpc5xxx: mpc5xxx_can_probe(): add missing put_clock() in error path\n tcp: fix indefinite deferral of RTO with SACK reneging\n net: lantiq_etop: don\u0027t free skb when returning NETDEV_TX_BUSY\n net: fix UAF issue in nfqnl_nf_hook_drop() when ops_init() failed\n kcm: annotate data-races around kcm-\u003erx_wait\n kcm: annotate data-races around kcm-\u003erx_psock\n amd-xgbe: add the bit rate quirk for Molex cables\n amd-xgbe: fix the SFP compliance codes check for DAC cables\n x86/unwind/orc: Fix unreliable stack dump with gcov\n net: netsec: fix error handling in netsec_register_mdio()\n tipc: fix a null-ptr-deref in tipc_topsrv_accept\n ALSA: ac97: fix possible memory leak in snd_ac97_dev_register()\n arc: iounmap() arg is volatile\n drm/msm: Fix return type of mdp4_lvds_connector_mode_valid\n media: v4l2: Fix v4l2_i2c_subdev_set_name function documentation\n net: ieee802154: fix error return code in dgram_bind()\n mm,hugetlb: take hugetlb_lock before decrementing h-\u003eresv_huge_pages\n cgroup-v1: add disabled controller check in cgroup1_parse_param()\n xen/gntdev: Prevent leaking grants\n Xen/gntdev: don\u0027t ignore kernel unmapping error\n xfs: force the log after remapping a synchronous-writes file\n xfs: clear XFS_DQ_FREEING if we can\u0027t lock the dquot buffer to flush\n xfs: finish dfops on every insert range shift iteration\n s390/pci: add missing EX_TABLE entries to __pcistg_mio_inuser()/__pcilg_mio_inuser()\n s390/futex: add missing EX_TABLE entry to __futex_atomic_op()\n perf auxtrace: Fix address filter symbol name match for modules\n kernfs: fix use-after-free in __kernfs_remove\n mmc: core: Fix kernel panic when remove non-standard SDIO card\n drm/msm/hdmi: fix memory corruption with too many bridges\n drm/msm/dsi: fix memory corruption with too many bridges\n mac802154: Fix LQI recording\n fbdev: smscufx: Fix several use-after-free bugs\n iio: light: tsl2583: Fix module unloading\n tools: iio: iio_utils: fix digit calculation\n xhci: Remove device endpoints from bandwidth list when freeing the device\n mtd: rawnand: marvell: Use correct logic for nand-keep-config\n usb: xhci: add XHCI_SPURIOUS_SUCCESS to ASM1042 despite being a V0.96 controller\n usb: bdc: change state when port disconnected\n usb: dwc3: gadget: Don\u0027t set IMI for no_interrupt\n usb: dwc3: gadget: Stop processing more requests on IMI\n USB: add RESET_RESUME quirk for NVIDIA Jetson devices in RCM\n ALSA: au88x0: use explicitly signed char\n ALSA: Use del_timer_sync() before freeing timer\n can: kvaser_usb: Fix possible completions during init_completion\n can: j1939: transport: j1939_session_skb_drop_old(): spin_unlock_irqrestore() before kfree_skb()\n UPSTREAM: once: fix section mismatch on clang builds\n ANDROID: fix up struct sk_buf ABI breakage\n ANDROID: fix up CRC issue with struct tcp_sock\n Linux 5.4.222\n once: fix section mismatch on clang builds\n ANDROID: fix up 131287ff833d (\"once: add DO_ONCE_SLOW() for sleepable contexts\")\n Revert \"serial: 8250: Fix restoring termios speed after suspend\"\n Linux 5.4.221\n mm: /proc/pid/smaps_rollup: fix no vma\u0027s null-deref\n hv_netvsc: Fix race between VF offering and VF association message from host\n Makefile.debug: re-enable debug info for .S files\n ACPI: video: Force backlight native for more TongFang devices\n riscv: topology: fix default topology reporting\n arm64: topology: move store_cpu_topology() to shared code\n iommu/vt-d: Clean up si_domain in the init_dmars() error path\n net: hns: fix possible memory leak in hnae_ae_register()\n net: sched: cake: fix null pointer access issue when cake_init() fails\n net: phy: dp83867: Extend RX strap quirk for SGMII mode\n net/atm: fix proc_mpc_write incorrect return value\n HID: magicmouse: Do not set BTN_MOUSE on double report\n tipc: fix an information leak in tipc_topsrv_kern_subscr\n tipc: Fix recognition of trial period\n ACPI: extlog: Handle multiple records\n btrfs: fix processing of delayed tree block refs during backref walking\n btrfs: fix processing of delayed data refs during backref walking\n r8152: add PID for the Lenovo OneLink+ Dock\n arm64: errata: Remove AES hwcap for COMPAT tasks\n media: venus: dec: Handle the case where find_format fails\n KVM: arm64: vgic: Fix exit condition in scan_its_table()\n ata: ahci: Match EM_MAX_SLOTS with SATA_PMP_MAX_PORTS\n ata: ahci-imx: Fix MODULE_ALIAS\n hwmon/coretemp: Handle large core ID value\n x86/microcode/AMD: Apply the patch early on every logical thread\n ocfs2: fix BUG when iput after ocfs2_mknod fails\n ocfs2: clear dinode links count in case of error\n xfs: fix use-after-free on CIL context on shutdown\n xfs: move inode flush to the sync workqueue\n xfs: reflink should force the log out if mounted with wsync\n xfs: factor out a new xfs_log_force_inode helper\n xfs: trylock underlying buffer on dquot flush\n xfs: don\u0027t write a corrupt unmount record to force summary counter recalc\n xfs: tail updates only need to occur when LSN changes\n xfs: factor common AIL item deletion code\n xfs: Throttle commits on delayed background CIL push\n xfs: Lower CIL flush limit for large logs\n xfs: preserve default grace interval during quotacheck\n xfs: fix unmount hang and memory leak on shutdown during quotaoff\n xfs: factor out quotaoff intent AIL removal and memory free\n xfs: Replace function declaration by actual definition\n xfs: remove the xfs_qoff_logitem_t typedef\n xfs: remove the xfs_dq_logitem_t typedef\n xfs: remove the xfs_disk_dquot_t and xfs_dquot_t\n xfs: Use scnprintf() for avoiding potential buffer overflow\n xfs: check owner of dir3 blocks\n xfs: check owner of dir3 data blocks\n xfs: fix buffer corruption reporting when xfs_dir3_free_header_check fails\n xfs: xfs_buf_corruption_error should take __this_address\n xfs: add a function to deal with corrupt buffers post-verifiers\n xfs: rework collapse range into an atomic operation\n xfs: rework insert range into an atomic operation\n xfs: open code insert range extent split helper\n Linux 5.4.220\n thermal: intel_powerclamp: Use first online CPU as control_cpu\n inet: fully convert sk-\u003esk_rx_dst to RCU rules\n efi: libstub: drop pointless get_memory_map() call\n md: Replace snprintf with scnprintf\n ext4: continue to expand file system when the target size doesn\u0027t reach\n net/ieee802154: don\u0027t warn zero-sized raw_sendmsg()\n Revert \"net/ieee802154: reject zero-sized raw_sendmsg()\"\n net: ieee802154: return -EINVAL for unknown addr type\n io_uring/af_unix: defer registered files gc to io_uring release\n perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc\n clk: bcm2835: Make peripheral PLLC critical\n usb: idmouse: fix an uninit-value in idmouse_open\n nvmet-tcp: add bounds check on Transfer Tag\n nvme: copy firmware_rev on each init\n staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()\n Revert \"usb: storage: Add quirk for Samsung Fit flash\"\n usb: musb: Fix musb_gadget.c rxstate overflow bug\n usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()\n md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d\n HID: roccat: Fix use-after-free in roccat_read()\n bcache: fix set_at_max_writeback_rate() for multiple attached devices\n ata: libahci_platform: Sanity check the DT child nodes number\n staging: vt6655: fix potential memory leak\n power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()\n nbd: Fix hung when signal interrupts nbd_start_device_ioctl()\n scsi: 3w-9xxx: Avoid disabling device if failing to enable it\n clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate\n media: cx88: Fix a null-ptr-deref bug in buffer_prepare()\n clk: zynqmp: Fix stack-out-of-bounds in strncpy`\n btrfs: scrub: try to fix super block errors\n ARM: dts: imx6sx: add missing properties for sram\n ARM: dts: imx6sll: add missing properties for sram\n ARM: dts: imx6sl: add missing properties for sram\n ARM: dts: imx6qp: add missing properties for sram\n ARM: dts: imx6dl: add missing properties for sram\n ARM: dts: imx6q: add missing properties for sram\n ARM: dts: imx7d-sdb: config the max pressure for tsc2046\n mmc: sdhci-msm: add compatible string check for sdm670\n drm/amdgpu: fix initial connector audio value\n platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading\n drm: panel-orientation-quirks: Add quirk for Anbernic Win600\n drm/vc4: vec: Fix timings for VEC modes\n drm/amd/display: fix overflow on MIN_I64 definition\n drm: Prevent drm_copy_field() to attempt copying a NULL pointer\n drm: Use size_t type for len variable in drm_copy_field()\n drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()\n r8152: Rate limit overflow messages\n Bluetooth: L2CAP: Fix user-after-free\n net: If sock is dead don\u0027t access sock\u0027s sk_wq in sk_stream_wait_memory\n wifi: rt2x00: correctly set BBP register 86 for MT7620\n wifi: rt2x00: set SoC wmac clock register\n wifi: rt2x00: set VGC gain for both chains of MT7620\n wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620\n wifi: rt2x00: don\u0027t run Rt5592 IQ calibration on MT7620\n can: bcm: check the result of can_send() in bcm_can_tx()\n Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times\n Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()\n wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()\n xfrm: Update ipcomp_scratches with NULL when freed\n wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()\n tcp: annotate data-race around tcp_md5sig_pool_populated\n openvswitch: Fix overreporting of drops in dropwatch\n openvswitch: Fix double reporting of drops in dropwatch\n bpftool: Clear errno after libcap\u0027s checks\n wifi: brcmfmac: fix invalid address access when enabling SCAN log level\n NFSD: Return nfserr_serverfault if splice_ok but buf-\u003epages have data\n thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash\n powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue\n MIPS: BCM47XX: Cast memcmp() of function to (void *)\n ACPI: video: Add Toshiba Satellite/Portege Z830 quirk\n f2fs: fix race condition on setting FI_NO_EXTENT flag\n crypto: cavium - prevent integer overflow loading firmware\n kbuild: remove the target in signal traps when interrupted\n iommu/iova: Fix module config properly\n crypto: ccp - Release dma channels before dmaengine unrgister\n crypto: akcipher - default implementation for setting a private key\n iommu/omap: Fix buffer overflow in debugfs\n cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset\n powerpc: Fix SPE Power ISA properties for e500v1 platforms\n powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5\n x86/hyperv: Fix \u0027struct hv_enlightened_vmcs\u0027 definition\n powerpc/powernv: add missing of_node_put() in opal_export_attrs()\n powerpc/pci_dn: Add missing of_node_put()\n powerpc/sysdev/fsl_msi: Add missing of_node_put()\n powerpc/math_emu/efp: Include module.h\n mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg\n clk: ast2600: BCLK comes from EPLL\n clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe\n clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration\n spmi: pmic-arb: correct duplicate APID to PPID mapping logic\n dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()\n clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent\n mfd: sm501: Add check for platform_driver_register()\n mfd: fsl-imx25: Fix check for platform_get_irq() errors\n mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()\n mfd: lp8788: Fix an error handling path in lp8788_probe()\n mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()\n mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()\n fsi: core: Check error number after calling ida_simple_get\n scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()\n serial: 8250: Fix restoring termios speed after suspend\n firmware: google: Test spinlock on panic path to avoid lockups\n staging: vt6655: fix some erroneous memory clean-up loops\n phy: qualcomm: call clk_disable_unprepare in the error handling\n tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown\n drivers: serial: jsm: fix some leaks in probe\n usb: gadget: function: fix dangling pnp_string in f_printer.c\n xhci: Don\u0027t show warning for reinit on known broken suspend\n md/raid5: Ensure stripe_fill happens on non-read IO with journal\n mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()\n ata: fix ata_id_has_dipm()\n ata: fix ata_id_has_ncq_autosense()\n ata: fix ata_id_has_devslp()\n ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()\n RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.\n mtd: devices: docg3: check the return value of devm_ioremap() in the probe\n dyndbg: let query-modname override actual module name\n dyndbg: fix module.dyndbg handling\n misc: ocxl: fix possible refcount leak in afu_ioctl()\n RDMA/rxe: Fix the error caused by qp-\u003esk\n RDMA/rxe: Fix \"kernel NULL pointer dereference\" error\n media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init\n tty: xilinx_uartps: Fix the ignore_status\n media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop\n HSI: omap_ssi_port: Fix dma_map_sg error check\n HSI: omap_ssi: Fix refcount leak in ssi_probe\n clk: tegra20: Fix refcount leak in tegra20_clock_init\n clk: tegra: Fix refcount leak in tegra114_clock_init\n clk: tegra: Fix refcount leak in tegra210_clock_init\n clk: berlin: Add of_node_put() for of_get_parent()\n clk: oxnas: Hold reference returned by of_get_parent()\n clk: meson: Hold reference returned by of_get_parent()\n iio: ABI: Fix wrong format of differential capacitance channel ABI.\n iio: inkern: only release the device node when done with it\n iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq\n iio: adc: at91-sama5d2_adc: check return status for pressure and touch\n iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX\n ARM: dts: exynos: fix polarity of VBUS GPIO of Origen\n ARM: Drop CMDLINE_* dependency on ATAGS\n ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family\n ARM: dts: kirkwood: lsxl: remove first ethernet port\n ARM: dts: kirkwood: lsxl: fix serial line\n ARM: dts: turris-omnia: Fix mpp26 pin name and comment\n soc: qcom: smem_state: Add refcounting for the \u0027state-\u003eof_node\u0027\n soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()\n memory: of: Fix refcount leak bug in of_get_ddr_timings()\n memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()\n ALSA: hda/hdmi: Don\u0027t skip notification handling during PM operation\n ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe\n ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe\n ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe\n mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()\n ALSA: dmaengine: increment buffer pointer atomically\n drm/msm/dpu: index dpu_kms-\u003ehw_vbif using vbif_idx\n ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API\n mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()\n drm/omap: dss: Fix refcount leak bugs\n ALSA: hda: beep: Simplify keep-power-at-enable behavior\n ASoC: rsnd: Add check for rsnd_mod_power_on\n drm/bridge: megachips: Fix a null pointer dereference bug\n drm: fix drm_mipi_dbi build errors\n platform/x86: msi-laptop: Fix resource cleanup\n platform/x86: msi-laptop: Fix old-ec check for backlight registering\n platform/chrome: fix memory corruption in ioctl\n platform/chrome: fix double-free in chromeos_laptop_prepare()\n drm/mipi-dsi: Detach devices when removing the host\n drm: bridge: adv7511: fix CEC power down control register offset\n net: mvpp2: fix mvpp2 debugfs leak\n once: add DO_ONCE_SLOW() for sleepable contexts\n net/ieee802154: reject zero-sized raw_sendmsg()\n bnx2x: fix potential memory leak in bnx2x_tpa_stop()\n net: rds: don\u0027t hold sock lock when cancelling work from rds_tcp_reset_callbacks()\n tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited\n sctp: handle the error returned from sctp_auth_asoc_init_active_key\n mISDN: fix use-after-free bugs in l1oip timer handlers\n vhost/vsock: Use kvmalloc/kvfree for larger packets.\n spi: s3c64xx: Fix large transfers with DMA\n netfilter: nft_fib: Fix for rpath check with VRF devices\n spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe\n x86/microcode/AMD: Track patch allocation size explicitly\n bpf: Ensure correct locking around vulnerable function find_vpid()\n net: fs_enet: Fix wrong check in do_pd_setup\n wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration\n bpf: btf: fix truncated last_member_type_id in btf_struct_resolve\n wifi: rtl8xxxu: Fix skb misuse in TX queue selection\n spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()\n spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()\n wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()\n x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register\n bpftool: Fix a wrong type cast in btf_dumper_int\n wifi: mac80211: allow bw change during channel switch in mesh\n wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()\n nfsd: Fix a memory leak in an error handling path\n ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE\n sh: machvec: Use char[] for section boundaries\n userfaultfd: open userfaultfds with O_RDONLY\n tracing: Disable interrupt or preemption before acquiring arch_spinlock_t\n selinux: use \"grep -E\" instead of \"egrep\"\n drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()\n gcov: support GCC 12.1 and newer compilers\n KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS\n KVM: nVMX: Unconditionally purge queued/injected events on nested \"exit\"\n KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility\n media: cedrus: Set the platform driver data earlier\n ring-buffer: Fix race between reset page and reading page\n ring-buffer: Check pending waiters when doing wake ups as well\n ring-buffer: Have the shortest_full queue be the shortest not longest\n ring-buffer: Allow splice to read previous partially read pages\n ftrace: Properly unset FTRACE_HASH_FL_MOD\n livepatch: fix race between fork and KLP transition\n ext4: place buffer head allocation before handle start\n ext4: make ext4_lazyinit_thread freezable\n ext4: fix null-ptr-deref in ext4_write_info\n ext4: avoid crash when inline data creation follows DIO write\n jbd2: wake up journal waiters in FIFO order, not LIFO\n nilfs2: fix use-after-free bug of struct nilfs_root\n f2fs: fix to do sanity check on summary info\n f2fs: fix to do sanity check on destination blkaddr during recovery\n f2fs: increase the limit for reserve_root\n btrfs: fix race between quota enable and quota rescan ioctl\n fbdev: smscufx: Fix use-after-free in ufx_ops_open()\n powerpc/boot: Explicitly disable usage of SPE instructions\n PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge\n UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK\n riscv: Pass -mno-relax only on lld \u003c 15.0.0\n riscv: Allow PROT_WRITE-only mmap()\n parisc: fbdev/stifb: Align graphics memory size to 4MB\n RISC-V: Make port I/O string accessors actually work\n regulator: qcom_rpm: Fix circular deferral regression\n ASoC: wcd9335: fix order of Slimbus unprepare/disable\n quota: Check next/prev free block number after reading from quota file\n HID: multitouch: Add memory barriers\n fs: dlm: handle -EBUSY first in lock arg validation\n fs: dlm: fix race between test_bit() and queue_work()\n mmc: sdhci-sprd: Fix minimum clock limit\n can: kvaser_usb_leaf: Fix CAN state after restart\n can: kvaser_usb_leaf: Fix TX queue out of sync after restart\n can: kvaser_usb_leaf: Fix overread with an invalid command\n can: kvaser_usb: Fix use of uninitialized completion\n usb: add quirks for Lenovo OneLink+ Dock\n iio: pressure: dps310: Reset chip after timeout\n iio: pressure: dps310: Refactor startup procedure\n iio: dac: ad5593r: Fix i2c read protocol requirements\n cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message\n cifs: destage dirty pages before re-reading them for cache\u003dnone\n mtd: rawnand: atmel: Unmap streaming DMA mappings\n ALSA: hda/realtek: Add Intel Reference SSID to support headset keys\n ALSA: hda/realtek: Add quirk for ASUS GV601R laptop\n ALSA: hda/realtek: Correct pin configs for ASUS G533Z\n ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530\n ALSA: usb-audio: Fix NULL dererence at error path\n ALSA: usb-audio: Fix potential memory leaks\n ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()\n ALSA: oss: Fix potential deadlock at unregistration\n\n Conflicts:\n\tdrivers/android/binder.c\n\tinclude/linux/rmap.h\n\tkernel/cgroup/cpuset.c\n\tmm/rmap.c\n\nChange-Id: I34fe2d5c9b0d5844560de9c983867511b5d57265\n" }, { "commit": "75fd15c05bb851a4c9566a6593a17ed7460a8432", "tree": "5205e93e3c4220a7f95594be04262667ecfcfead", "parents": [ "56677b44e466b7204008e3fbc1ef13e273bbf70c", "d72fdcc7094f81dd94c25b181a30bca6170c964b" ], "author": { "name": "Srinivasarao Pathipati", "email": "quic_c_spathi@quicinc.com", "time": "Mon Feb 06 11:09:52 2023 +0530" }, "committer": { "name": "Srinivasarao Pathipati", "email": "quic_c_spathi@quicinc.com", "time": "Tue Feb 07 13:23:49 2023 +0530" }, "message": "Merge android11-5.4.226+ (d72fdcc) into msm-5.4\n\n* refs/heads/tmp-d72fdcc:\n ANDROID: abi_gki_aarch64_qcom: Add hrtimer_sleeper_start_expires\n UPSTREAM: ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF\n ANDROID: Revert \"tracing/ring-buffer: Have polling block on watermark\"\n UPSTREAM: usb: gadget: f_hid: fix f_hidg lifetime vs cdev\n UPSTREAM: usb: gadget: f_hid: optional SETUP/SET_REPORT mode\n ANDROID: add TEST_MAPPING for net/, include/net\n UPSTREAM: nfp: fix use-after-free in area_cache_get()\n UPSTREAM: proc: avoid integer type confusion in get_proc_long\n UPSTREAM: proc: proc_skip_spaces() shouldn\u0027t think it is working on C strings\n ANDROID: usb: f_accessory: Check buffer size when initialised via composite\n BACKPORT: mm: don\u0027t be stuck to rmap lock on reclaim path\n ANDROID: Add more hvc devices for virtio-console.\n UPSTREAM: HID: playstation: support updated DualSense rumble mode.\n UPSTREAM: HID: playstation: add initial DualSense Edge controller support\n UPSTREAM: HID: playstation: stop DualSense output work on remove.\n UPSTREAM: HID: playstation: convert to use dev_groups\n UPSTREAM: HID: playstation: fix return from dualsense_player_led_set_brightness()\n UPSTREAM: HID: playstation: expose DualSense player LEDs through LED class.\n BACKPORT: leds: add new LED_FUNCTION_PLAYER for player LEDs for game controllers.\n UPSTREAM: HID: playstation: expose DualSense lightbar through a multi-color LED.\n UPSTREAM: leds: flash: Fix multicolor no-ops registration by return 0\n UPSTREAM: leds: multicolor: Introduce a multicolor class definition\n ANDROID: GKI: enable mulitcolor-led\n Revert \"mmc: sdhci: Fix voltage switch delay\"\n ANDROID: gki_defconfig: add CONFIG_FUNCTION_ERROR_INJECTION\n Linux 5.4.226\n ipc/sem: Fix dangling sem_array access in semtimedop race\n v4l2: don\u0027t fall back to follow_pfn() if pin_user_pages_fast() fails\n proc: proc_skip_spaces() shouldn\u0027t think it is working on C strings\n proc: avoid integer type confusion in get_proc_long\n mmc: sdhci: Fix voltage switch delay\n mmc: sdhci: use FIELD_GET for preset value bit masks\n char: tpm: Protect tpm_pm_suspend with locks\n Revert \"clocksource/drivers/riscv: Events are stopped during CPU suspend\"\n x86/ioremap: Fix page aligned size calculation in __ioremap_caller()\n Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM\n x86/pm: Add enumeration check before spec MSRs save/restore setup\n x86/tsx: Add a feature bit for TSX control MSR support\n nvme: ensure subsystem reset is single threaded\n nvme: restrict management ioctls to admin\n epoll: check for events when removing a timed out thread from the wait queue\n epoll: call final ep_events_available() check under the lock\n tracing/ring-buffer: Have polling block on watermark\n ipv4: Fix route deletion when nexthop info is not specified\n ipv4: Handle attempt to delete multipath route when fib_info contains an nh reference\n selftests: net: fix nexthop warning cleanup double ip typo\n selftests: net: add delete nexthop route warning test\n Kconfig.debug: provide a little extra FRAME_WARN leeway when KASAN is enabled\n parisc: Increase FRAME_WARN to 2048 bytes on parisc\n xtensa: increase size of gcc stack frame check\n parisc: Increase size of gcc stack frame check\n iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init()\n pinctrl: single: Fix potential division by zero\n ASoC: ops: Fix bounds check for _sx controls\n mm: Fix \u0027.data.once\u0027 orphan section warning\n arm64: errata: Fix KVM Spectre-v2 mitigation selection for Cortex-A57/A72\n arm64: Fix panic() when Spectre-v2 causes Spectre-BHB to re-allocate KVM vectors\n tracing: Free buffers when a used dynamic event is removed\n mmc: sdhci-sprd: Fix no reset data and command after voltage switch\n mmc: sdhci-esdhc-imx: correct CQHCI exit halt state check\n mmc: core: Fix ambiguous TRIM and DISCARD arg\n mmc: mmc_test: Fix removal of debugfs file\n pinctrl: intel: Save and restore pins in \"direct IRQ\" mode\n x86/bugs: Make sure MSR_SPEC_CTRL is updated properly upon resume from S3\n nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()\n tools/vm/slabinfo-gnuplot: use \"grep -E\" instead of \"egrep\"\n error-injection: Add prompt for function error injection\n net/mlx5: DR, Fix uninitialized var warning\n hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new()\n hwmon: (coretemp) Check for null before removing sysfs attrs\n net: ethernet: renesas: ravb: Fix promiscuous mode after system resumed\n sctp: fix memory leak in sctp_stream_outq_migrate()\n packet: do not set TP_STATUS_CSUM_VALID on CHECKSUM_COMPLETE\n net: tun: Fix use-after-free in tun_detach()\n afs: Fix fileserver probe RTT handling\n net: hsr: Fix potential use-after-free\n dsa: lan9303: Correct stat name\n net: ethernet: nixge: fix NULL dereference\n net/9p: Fix a potential socket leak in p9_socket_open\n net: net_netdev: Fix error handling in ntb_netdev_init_module()\n net: phy: fix null-ptr-deref while probe() failed\n wifi: cfg80211: fix buffer overflow in elem comparison\n qlcnic: fix sleep-in-atomic-context bugs caused by msleep\n can: cc770: cc770_isa_probe(): add missing free_cc770dev()\n can: sja1000_isa: sja1000_isa_probe(): add missing free_sja1000dev()\n net/mlx5e: Fix use-after-free when reverting termination table\n net/mlx5: Fix uninitialized variable bug in outlen_write()\n of: property: decrement node refcount in of_fwnode_get_reference_args()\n hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails\n hwmon: (i5500_temp) fix missing pci_disable_device()\n scripts/faddr2line: Fix regression in name resolution on ppc64le\n iio: light: rpr0521: add missing Kconfig dependencies\n iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw\n iio: health: afe4403: Fix oob read in afe4403_read_raw\n btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()\n drm/amdgpu: Partially revert \"drm/amdgpu: update drm_display_info correctly when the edid is read\"\n drm/amdgpu: update drm_display_info correctly when the edid is read\n btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker\n spi: spi-imx: Fix spi_bus_clk if requested clock is higher than input clock\n btrfs: free btrfs_path before copying inodes to userspace\n fuse: lock inode unconditionally in fuse_fallocate()\n drm/i915: fix TLB invalidation for Gen12 video and compute engines\n drm/amdgpu: always register an MMU notifier for userptr\n drm/amd/dc/dce120: Fix audio register mapping, stop triggering KASAN\n btrfs: sysfs: normalize the error handling branch in btrfs_init_sysfs()\n btrfs: free btrfs_path before copying subvol info to userspace\n btrfs: free btrfs_path before copying fspath to userspace\n btrfs: free btrfs_path before copying root refs to userspace\n binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds\u003d0\n binder: Address corner cases in deferred copy and fixup\n binder: fix pointer cast warning\n binder: defer copies of pre-patched txn data\n binder: read pre-translated fds from sender buffer\n binder: avoid potential data leakage when copying txn\n dm integrity: flush the journal on suspend\n net: usb: qmi_wwan: add Telit 0x103a composition\n tcp: configurable source port perturb table size\n platform/x86: hp-wmi: Ignore Smart Experience App event\n platform/x86: acer-wmi: Enable SW_TABLET_MODE on Switch V 10 (SW5-017)\n platform/x86: asus-wmi: add missing pci_dev_put() in asus_wmi_set_xusb2pr()\n xen/platform-pci: add missing free_irq() in error path\n serial: 8250: 8250_omap: Avoid RS485 RTS glitch on -\u003eset_termios()\n ASoC: Intel: bytcht_es8316: Add quirk for the Nanote UMPC-01\n Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode\n gcov: clang: fix the buffer overflow issue\n nilfs2: fix nilfs_sufile_mark_dirty() not set segment usage as dirty\n firmware: coreboot: Register bus in module init\n firmware: google: Release devices before unregistering the bus\n ceph: avoid putting the realm twice when decoding snaps fails\n ceph: do not update snapshot context when there is no new snapshot\n iio: pressure: ms5611: fixed value compensation bug\n iio: ms5611: Simplify IO callback parameters\n nios2: add FORCE for vmlinuz.gz\n init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash\n iio: core: Fix entry not deleted when iio_register_sw_trigger_type() fails\n iio: light: apds9960: fix wrong register for gesture gain\n arm64: dts: rockchip: lower rk3399-puma-haikou SD controller clock frequency\n usb: dwc3: exynos: Fix remove() function\n lib/vdso: use \"grep -E\" instead of \"egrep\"\n s390/crashdump: fix TOD programmable field size\n net: thunderx: Fix the ACPI memory leak\n nfc: st-nci: fix memory leaks in EVT_TRANSACTION\n nfc: st-nci: fix incorrect validating logic in EVT_TRANSACTION\n s390/dasd: fix no record found for raw_track_access\n dccp/tcp: Reset saddr on failure after inet6?_hash_connect().\n bnx2x: fix pci device refcount leak in bnx2x_vf_is_pcie_pending()\n regulator: twl6030: re-add TWL6032_SUBCLASS\n NFC: nci: fix memory leak in nci_rx_data_packet()\n xfrm: Fix ignored return value in xfrm6_init()\n tipc: check skb_linearize() return value in tipc_disc_rcv()\n tipc: add an extra conn_get in tipc_conn_alloc\n tipc: set con sock in tipc_conn_alloc\n net/mlx5: Fix FW tracer timestamp calculation\n Drivers: hv: vmbus: fix possible memory leak in vmbus_device_register()\n Drivers: hv: vmbus: fix double free in the error path of vmbus_add_channel_work()\n nfp: add port from netdev validation for EEPROM access\n net: pch_gbe: fix pci device refcount leak while module exiting\n net/qla3xxx: fix potential memleak in ql3xxx_send()\n net/mlx4: Check retval of mlx4_bitmap_init\n ARM: mxs: fix memory leak in mxs_machine_init()\n 9p/fd: fix issue of list_del corruption in p9_fd_cancel()\n net: pch_gbe: fix potential memleak in pch_gbe_tx_queue()\n nfc/nci: fix race with opening and closing\n net: liquidio: simplify if expression\n ARM: dts: at91: sam9g20ek: enable udc vbus gpio pinctrl\n tee: optee: fix possible memory leak in optee_register_device()\n bus: sunxi-rsb: Support atomic transfers\n regulator: core: fix UAF in destroy_regulator()\n regulator: core: fix kobject release warning and memory leak in regulator_register()\n ASoC: sgtl5000: Reset the CHIP_CLK_CTRL reg on remove\n ARM: dts: am335x-pcm-953: Define fixed regulators in root node\n af_key: Fix send_acquire race with pfkey_register\n MIPS: pic32: treat port as signed integer\n RISC-V: vdso: Do not add missing symbols to version section in linker script\n arm64/syscall: Include asm/ptrace.h in syscall_wrapper header.\n block, bfq: fix null pointer dereference in bfq_bio_bfqg()\n drm: panel-orientation-quirks: Add quirk for Acer Switch V 10 (SW5-017)\n spi: stm32: fix stm32_spi_prepare_mbr() that halves spi clk for every run\n wifi: mac80211: Fix ack frame idr leak when mesh has no route\n audit: fix undefined behavior in bit shift for AUDIT_BIT\n wifi: mac80211_hwsim: fix debugfs attribute ps with rc table support\n wifi: mac80211: fix memory free error when registering wiphy fail\n Revert \"can: af_can: fix NULL pointer dereference in can_rx_register()\"\n Linux 5.4.225\n ntfs: check overflow when iterating ATTR_RECORDs\n ntfs: fix out-of-bounds read in ntfs_attr_find()\n ntfs: fix use-after-free in ntfs_attr_find()\n mm: fs: initialize fsdata passed to write_begin/write_end interface\n 9p/trans_fd: always use O_NONBLOCK read/write\n gfs2: Switch from strlcpy to strscpy\n gfs2: Check sb_bsize_shift after reading superblock\n 9p: trans_fd/p9_conn_cancel: drop client lock earlier\n kcm: close race conditions on sk_receive_queue\n bpf, test_run: Fix alignment problem in bpf_prog_test_run_skb()\n kcm: avoid potential race in kcm_tx_work\n tcp: cdg: allow tcp_cdg_release() to be called multiple times\n macvlan: enforce a consistent minimal mtu\n Input: i8042 - fix leaking of platform device on module removal\n kprobes: Skip clearing aggrprobe\u0027s post_handler in kprobe-on-ftrace case\n scsi: target: tcm_loop: Fix possible name leak in tcm_loop_setup_hba_bus()\n ring-buffer: Include dropped pages in counting dirty patches\n serial: 8250: Flush DMA Rx on RLSI\n misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram()\n docs: update mediator contact information in CoC doc\n mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put()\n mmc: sdhci-pci-o2micro: fix card detect fail issue caused by CD# debounce timeout\n mmc: core: properly select voltage range without power cycle\n scsi: zfcp: Fix double free of FSF request when qdio send fails\n Input: iforce - invert valid length check when fetching device IDs\n serial: 8250_lpss: Configure DMA also w/o DMA filter\n serial: 8250: Fall back to non-DMA Rx if IIR_RDI occurs\n dm ioctl: fix misbehavior if list_versions races with module loading\n iio: pressure: ms5611: changed hardcoded SPI speed to value limited\n iio: trigger: sysfs: fix possible memory leak in iio_sysfs_trig_init()\n iio: adc: at91_adc: fix possible memory leak in at91_adc_allocate_trigger()\n usb: chipidea: fix deadlock in ci_otg_del_timer\n usb: add NO_LPM quirk for Realforce 87U Keyboard\n USB: serial: option: add Fibocom FM160 0x0111 composition\n USB: serial: option: add u-blox LARA-L6 modem\n USB: serial: option: add u-blox LARA-R6 00B modem\n USB: serial: option: remove old LARA-R6 PID\n USB: serial: option: add Sierra Wireless EM9191\n speakup: fix a segfault caused by switching consoles\n slimbus: stream: correct presence rate frequencies\n Revert \"usb: dwc3: disable USB core PHY management\"\n ALSA: usb-audio: Drop snd_BUG_ON() from snd_usbmidi_output_open()\n ring_buffer: Do not deactivate non-existant pages\n ftrace: Fix null pointer dereference in ftrace_add_mod()\n ftrace: Optimize the allocation for mcount entries\n ftrace: Fix the possible incorrect kernel message\n cifs: add check for returning value of SMB2_set_info_init\n net: thunderbolt: Fix error handling in tbnet_init()\n cifs: Fix wrong return value checking when GETFLAGS\n net/x25: Fix skb leak in x25_lapb_receive_frame()\n platform/x86/intel: pmc: Don\u0027t unconditionally attach Intel PMC when virtualized\n drbd: use after free in drbd_create_device()\n xen/pcpu: fix possible memory leak in register_pcpu()\n bnxt_en: Remove debugfs when pci_register_driver failed\n net: caif: fix double disconnect client in chnl_net_open()\n net: macvlan: Use built-in RCU list checking\n mISDN: fix misuse of put_device() in mISDN_register_device()\n net: liquidio: release resources when liquidio driver open failed\n mISDN: fix possible memory leak in mISDN_dsp_element_register()\n net: bgmac: Drop free_netdev() from bgmac_enet_remove()\n ata: libata-transport: fix double ata_host_put() in ata_tport_add()\n arm64: dts: imx8mn: Fix NAND controller size-cells\n arm64: dts: imx8mm: Fix NAND controller size-cells\n pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map\n parport_pc: Avoid FIFO port location truncation\n siox: fix possible memory leak in siox_device_add()\n block: sed-opal: kmalloc the cmd/resp buffers\n ASoC: soc-utils: Remove __exit for snd_soc_util_exit()\n tty: n_gsm: fix sleep-in-atomic-context bug in gsm_control_send\n serial: imx: Add missing .thaw_noirq hook\n serial: 8250: omap: Flush PM QOS work on remove\n serial: 8250: omap: Fix unpaired pm_runtime_put_sync() in omap8250_remove()\n serial: 8250_omap: remove wait loop from Errata i202 workaround\n ASoC: core: Fix use-after-free in snd_soc_exit()\n spi: stm32: Print summary \u0027callbacks suppressed\u0027 message\n ASoC: codecs: jz4725b: Fix spelling mistake \"Sourc\" -\u003e \"Source\", \"Routee\" -\u003e \"Route\"\n Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm\n btrfs: remove pointless and double ulist frees in error paths of qgroup tests\n drm/imx: imx-tve: Fix return type of imx_tve_connector_mode_valid\n i2c: i801: add lis3lv02d\u0027s I2C address for Vostro 5568\n NFSv4: Retry LOCK on OLD_STATEID during delegation return\n selftests/intel_pstate: fix build for ARCH\u003dx86_64\n selftests/futex: fix build for clang\n ASoC: codecs: jz4725b: fix capture selector naming\n ASoC: codecs: jz4725b: use right control for Capture Volume\n ASoC: codecs: jz4725b: fix reported volume for Master ctl\n ASoC: codecs: jz4725b: add missed Line In power control bit\n spi: intel: Fix the offset to get the 64K erase opcode\n ASoC: wm8962: Add an event handler for TEMP_HP and TEMP_SPK\n ASoC: wm8997: Revert \"ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe\"\n ASoC: wm5110: Revert \"ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe\"\n ASoC: wm5102: Revert \"ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe\"\n x86/cpu: Restore AMD\u0027s DE_CFG MSR after resume\n net: tun: call napi_schedule_prep() to ensure we own a napi\n dmaengine: at_hdmac: Check return code of dma_async_device_register\n dmaengine: at_hdmac: Fix impossible condition\n dmaengine: at_hdmac: Don\u0027t allow CPU to reorder channel enable\n dmaengine: at_hdmac: Fix completion of unissued descriptor in case of errors\n dmaengine: at_hdmac: Don\u0027t start transactions at tx_submit level\n dmaengine: at_hdmac: Fix at_lli struct definition\n cert host tools: Stop complaining about deprecated OpenSSL functions\n can: j1939: j1939_send_one(): fix missing CAN header initialization\n udf: Fix a slab-out-of-bounds write bug in udf_find_entry()\n btrfs: selftests: fix wrong error check in btrfs_free_dummy_root()\n platform/x86: hp_wmi: Fix rfkill causing soft blocked wifi\n drm/i915/dmabuf: fix sg_table handling in map_dma_buf\n nilfs2: fix use-after-free bug of ns_writer on remount\n nilfs2: fix deadlock in nilfs_count_free_blocks()\n vmlinux.lds.h: Fix placement of \u0027.data..decrypted\u0027 section\n ALSA: usb-audio: Add DSD support for Accuphase DAC-60\n ALSA: usb-audio: Add quirk entry for M-Audio Micro\n ALSA: hda: fix potential memleak in \u0027add_widget_node\u0027\n ALSA: hda/ca0132: add quirk for EVGA Z390 DARK\n mmc: sdhci-tegra: Fix SDHCI_RESET_ALL for CQHCI\n mmc: sdhci-of-arasan: Fix SDHCI_RESET_ALL for CQHCI\n mmc: cqhci: Provide helper for resetting both SDHCI and CQHCI\n MIPS: jump_label: Fix compat branch range check\n arm64: efi: Fix handling of misaligned runtime regions and drop warning\n riscv: process: fix kernel info leakage\n net: macvlan: fix memory leaks of macvlan_common_newlink\n ethernet: tundra: free irq when alloc ring failed in tsi108_open()\n net: mv643xx_eth: disable napi when init rxq or txq failed in mv643xx_eth_open()\n ethernet: s2io: disable napi when start nic failed in s2io_card_up()\n cxgb4vf: shut down the adapter when t4vf_update_port_info() failed in cxgb4vf_open()\n net: cxgb3_main: disable napi when bind qsets failed in cxgb_up()\n net: cpsw: disable napi in cpsw_ndo_open()\n net/mlx5: Allow async trigger completion execution on single CPU systems\n net: nixge: disable napi when enable interrupts failed in nixge_open()\n perf stat: Fix printing os-\u003eprefix in CSV metrics output\n drivers: net: xgene: disable napi when register irq failed in xgene_enet_open()\n dmaengine: mv_xor_v2: Fix a resource leak in mv_xor_v2_remove()\n dmaengine: pxa_dma: use platform_get_irq_optional\n tipc: fix the msg-\u003ereq tlv len check in tipc_nl_compat_name_table_dump_header\n can: af_can: fix NULL pointer dereference in can_rx_register()\n ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network\n drm/vc4: Fix missing platform_unregister_drivers() call in vc4_drm_register()\n hamradio: fix issue of dev reference count leakage in bpq_device_event()\n net: lapbether: fix issue of dev reference count leakage in lapbeth_device_event()\n capabilities: fix undefined behavior in bit shift for CAP_TO_MASK\n net: fman: Unregister ethernet device on removal\n bnxt_en: fix potentially incorrect return value for ndo_rx_flow_steer\n bnxt_en: Fix possible crash in bnxt_hwrm_set_coal()\n net: tun: Fix memory leaks of napi_get_frags\n net: gso: fix panic on frag_list with mixed head alloc types\n HID: hyperv: fix possible memory leak in mousevsc_probe()\n bpf, sockmap: Fix the sk-\u003esk_forward_alloc warning of sk_stream_kill_queues\n wifi: cfg80211: fix memory leak in query_regdb_file()\n wifi: cfg80211: silence a sparse RCU warning\n phy: stm32: fix an error code in probe\n xfs: drain the buf delwri queue before xfsaild idles\n xfs: preserve inode versioning across remounts\n xfs: use MMAPLOCK around filemap_map_pages()\n xfs: redesign the reflink remap loop to fix blkres depletion crash\n xfs: rename xfs_bmap_is_real_extent to is_written_extent\n xfs: preserve rmapbt swapext block reservation from freed blocks\n ANDROID: properly copy the scm_io_uring field in struct sk_buff\n Linux 5.4.224\n ipc: remove memcg accounting for sops objects in do_semtimedop()\n wifi: brcmfmac: Fix potential buffer overflow in brcmf_fweh_event_worker()\n drm/i915/sdvo: Setup DDC fully before output init\n drm/i915/sdvo: Filter out invalid outputs more sensibly\n drm/rockchip: dsi: Force synchronous probe\n mtd: rawnand: gpmi: Set WAIT_FOR_READY timeout based on program/erase times\n KVM: x86: emulator: update the emulation mode after CR0 write\n KVM: x86: emulator: introduce emulator_recalc_and_set_mode\n KVM: x86: emulator: em_sysexit should update ctxt-\u003emode\n KVM: x86: Mask off reserved bits in CPUID.80000008H\n KVM: x86: Mask off reserved bits in CPUID.8000001AH\n ext4: fix BUG_ON() when directory entry has invalid rec_len\n ext4: fix warning in \u0027ext4_da_release_space\u0027\n parisc: Avoid printing the hardware path twice\n parisc: Export iosapic_serial_irq() symbol for serial port driver\n parisc: Make 8250_gsc driver dependend on CONFIG_PARISC\n ALSA: usb-audio: Add quirks for MacroSilicon MS2100/MS2106 devices\n perf/x86/intel: Add Cooper Lake stepping to isolation_ucodes[]\n perf/x86/intel: Fix pebs event constraints for ICL\n efi: random: reduce seed size to 32 bytes\n fuse: add file_modified() to fallocate\n capabilities: fix potential memleak on error path from vfs_getxattr_alloc()\n tracing/histogram: Update document for KEYS_MAX size\n tools/nolibc/string: Fix memcmp() implementation\n kprobe: reverse kp-\u003eflags when arm_kprobe failed\n tcp/udp: Make early_demux back namespacified.\n btrfs: fix type of parameter generation in btrfs_get_dentry\n binder: fix UAF of alloc-\u003evma in race with munmap()\n memcg: enable accounting of ipc resources\n tcp/udp: Fix memory leak in ipv6_renew_options().\n block, bfq: protect \u0027bfqd-\u003equeued\u0027 by \u0027bfqd-\u003elock\u0027\n Bluetooth: L2CAP: Fix attempting to access uninitialized memory\n xfs: Add the missed xfs_perag_put() for xfs_ifree_cluster()\n xfs: don\u0027t fail unwritten extent conversion on writeback due to edquot\n xfs: group quota should return EDQUOT when prj quota enabled\n xfs: gut error handling in xfs_trans_unreserve_and_mod_sb()\n xfs: use ordered buffers to initialize dquot buffers during quotacheck\n xfs: don\u0027t fail verifier on empty attr3 leaf block\n i2c: xiic: Add platform module alias\n HID: saitek: add madcatz variant of MMO7 mouse device ID\n scsi: core: Restrict legal sdev_state transitions via sysfs\n media: meson: vdec: fix possible refcount leak in vdec_probe()\n media: dvb-frontends/drxk: initialize err to 0\n media: cros-ec-cec: limit msg.len to CEC_MAX_MSG_SIZE\n media: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE\n ipv6: fix WARNING in ip6_route_net_exit_late()\n net, neigh: Fix null-ptr-deref in neigh_table_clear()\n net: mdio: fix undefined behavior in bit shift for __mdiobus_register\n Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()\n Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu\n btrfs: fix ulist leaks in error paths of qgroup self tests\n btrfs: fix inode list leak during backref walking at find_parent_nodes()\n btrfs: fix inode list leak during backref walking at resolve_indirect_refs()\n isdn: mISDN: netjet: fix wrong check of device registration\n mISDN: fix possible memory leak in mISDN_register_device()\n rose: Fix NULL pointer dereference in rose_send_frame()\n ipvs: fix WARNING in ip_vs_app_net_cleanup()\n ipvs: fix WARNING in __ip_vs_cleanup_batch()\n ipvs: use explicitly signed chars\n netfilter: nf_tables: release flow rule object from commit path\n net: tun: fix bugs for oversize packet when napi frags enabled\n net: sched: Fix use after free in red_enqueue()\n ata: pata_legacy: fix pdc20230_set_piomode()\n net: fec: fix improper use of NETDEV_TX_BUSY\n nfc: nfcmrvl: Fix potential memory leak in nfcmrvl_i2c_nci_send()\n nfc: s3fwrn5: Fix potential memory leak in s3fwrn5_nci_send()\n RDMA/qedr: clean up work queue on failure in qedr_alloc_resources()\n RDMA/core: Fix null-ptr-deref in ib_core_cleanup()\n net: dsa: Fix possible memory leaks in dsa_loop_init()\n nfs4: Fix kmemleak when allocate slot failed\n NFSv4.1: We must always send RECLAIM_COMPLETE after a reboot\n NFSv4.1: Handle RECLAIM_COMPLETE trunking errors\n IB/hfi1: Correctly move list in sc_disable()\n RDMA/cma: Use output interface for net_dev check\n Linux 5.4.223\n can: rcar_canfd: rcar_canfd_handle_global_receive(): fix IRQ storm on global FIFO receive\n net: enetc: survive memory pressure without crashing\n net/mlx5: Fix possible use-after-free in async command interface\n net/mlx5e: Do not increment ESN when updating IPsec ESN state\n nh: fix scope used to find saddr when adding non gw nh\n net: ehea: fix possible memory leak in ehea_register_port()\n openvswitch: switch from WARN to pr_warn\n ALSA: aoa: Fix I2S device accounting\n ALSA: aoa: i2sbus: fix possible memory leak in i2sbus_add_dev()\n PM: domains: Fix handling of unavailable/disabled idle states\n net: ksz884x: fix missing pci_disable_device() on error in pcidev_init()\n i40e: Fix flow-type by setting GL_HASH_INSET registers\n i40e: Fix VF hang when reset is triggered on another VF\n i40e: Fix ethtool rx-flow-hash setting for X722\n media: videodev2.h: V4L2_DV_BT_BLANKING_HEIGHT should check \u0027interlaced\u0027\n media: v4l2-dv-timings: add sanity checks for blanking values\n media: vivid: dev-\u003ebitmap_cap wasn\u0027t freed in all cases\n media: vivid: s_fbuf: add more sanity checks\n PM: hibernate: Allow hybrid sleep to work with s2idle\n can: mscan: mpc5xxx: mpc5xxx_can_probe(): add missing put_clock() in error path\n tcp: fix indefinite deferral of RTO with SACK reneging\n net: lantiq_etop: don\u0027t free skb when returning NETDEV_TX_BUSY\n net: fix UAF issue in nfqnl_nf_hook_drop() when ops_init() failed\n kcm: annotate data-races around kcm-\u003erx_wait\n kcm: annotate data-races around kcm-\u003erx_psock\n amd-xgbe: add the bit rate quirk for Molex cables\n amd-xgbe: fix the SFP compliance codes check for DAC cables\n x86/unwind/orc: Fix unreliable stack dump with gcov\n net: netsec: fix error handling in netsec_register_mdio()\n tipc: fix a null-ptr-deref in tipc_topsrv_accept\n ALSA: ac97: fix possible memory leak in snd_ac97_dev_register()\n arc: iounmap() arg is volatile\n drm/msm: Fix return type of mdp4_lvds_connector_mode_valid\n media: v4l2: Fix v4l2_i2c_subdev_set_name function documentation\n net: ieee802154: fix error return code in dgram_bind()\n mm,hugetlb: take hugetlb_lock before decrementing h-\u003eresv_huge_pages\n cgroup-v1: add disabled controller check in cgroup1_parse_param()\n xen/gntdev: Prevent leaking grants\n Xen/gntdev: don\u0027t ignore kernel unmapping error\n xfs: force the log after remapping a synchronous-writes file\n xfs: clear XFS_DQ_FREEING if we can\u0027t lock the dquot buffer to flush\n xfs: finish dfops on every insert range shift iteration\n s390/pci: add missing EX_TABLE entries to __pcistg_mio_inuser()/__pcilg_mio_inuser()\n s390/futex: add missing EX_TABLE entry to __futex_atomic_op()\n perf auxtrace: Fix address filter symbol name match for modules\n kernfs: fix use-after-free in __kernfs_remove\n mmc: core: Fix kernel panic when remove non-standard SDIO card\n drm/msm/hdmi: fix memory corruption with too many bridges\n drm/msm/dsi: fix memory corruption with too many bridges\n mac802154: Fix LQI recording\n fbdev: smscufx: Fix several use-after-free bugs\n iio: light: tsl2583: Fix module unloading\n tools: iio: iio_utils: fix digit calculation\n xhci: Remove device endpoints from bandwidth list when freeing the device\n mtd: rawnand: marvell: Use correct logic for nand-keep-config\n usb: xhci: add XHCI_SPURIOUS_SUCCESS to ASM1042 despite being a V0.96 controller\n usb: bdc: change state when port disconnected\n usb: dwc3: gadget: Don\u0027t set IMI for no_interrupt\n usb: dwc3: gadget: Stop processing more requests on IMI\n USB: add RESET_RESUME quirk for NVIDIA Jetson devices in RCM\n ALSA: au88x0: use explicitly signed char\n ALSA: Use del_timer_sync() before freeing timer\n can: kvaser_usb: Fix possible completions during init_completion\n can: j1939: transport: j1939_session_skb_drop_old(): spin_unlock_irqrestore() before kfree_skb()\n UPSTREAM: once: fix section mismatch on clang builds\n ANDROID: fix up struct sk_buf ABI breakage\n ANDROID: fix up CRC issue with struct tcp_sock\n Linux 5.4.222\n once: fix section mismatch on clang builds\n ANDROID: fix up 131287ff833d (\"once: add DO_ONCE_SLOW() for sleepable contexts\")\n Revert \"serial: 8250: Fix restoring termios speed after suspend\"\n Linux 5.4.221\n mm: /proc/pid/smaps_rollup: fix no vma\u0027s null-deref\n hv_netvsc: Fix race between VF offering and VF association message from host\n Makefile.debug: re-enable debug info for .S files\n ACPI: video: Force backlight native for more TongFang devices\n riscv: topology: fix default topology reporting\n arm64: topology: move store_cpu_topology() to shared code\n iommu/vt-d: Clean up si_domain in the init_dmars() error path\n net: hns: fix possible memory leak in hnae_ae_register()\n net: sched: cake: fix null pointer access issue when cake_init() fails\n net: phy: dp83867: Extend RX strap quirk for SGMII mode\n net/atm: fix proc_mpc_write incorrect return value\n HID: magicmouse: Do not set BTN_MOUSE on double report\n tipc: fix an information leak in tipc_topsrv_kern_subscr\n tipc: Fix recognition of trial period\n ACPI: extlog: Handle multiple records\n btrfs: fix processing of delayed tree block refs during backref walking\n btrfs: fix processing of delayed data refs during backref walking\n r8152: add PID for the Lenovo OneLink+ Dock\n arm64: errata: Remove AES hwcap for COMPAT tasks\n media: venus: dec: Handle the case where find_format fails\n KVM: arm64: vgic: Fix exit condition in scan_its_table()\n ata: ahci: Match EM_MAX_SLOTS with SATA_PMP_MAX_PORTS\n ata: ahci-imx: Fix MODULE_ALIAS\n hwmon/coretemp: Handle large core ID value\n x86/microcode/AMD: Apply the patch early on every logical thread\n ocfs2: fix BUG when iput after ocfs2_mknod fails\n ocfs2: clear dinode links count in case of error\n xfs: fix use-after-free on CIL context on shutdown\n xfs: move inode flush to the sync workqueue\n xfs: reflink should force the log out if mounted with wsync\n xfs: factor out a new xfs_log_force_inode helper\n xfs: trylock underlying buffer on dquot flush\n xfs: don\u0027t write a corrupt unmount record to force summary counter recalc\n xfs: tail updates only need to occur when LSN changes\n xfs: factor common AIL item deletion code\n xfs: Throttle commits on delayed background CIL push\n xfs: Lower CIL flush limit for large logs\n xfs: preserve default grace interval during quotacheck\n xfs: fix unmount hang and memory leak on shutdown during quotaoff\n xfs: factor out quotaoff intent AIL removal and memory free\n xfs: Replace function declaration by actual definition\n xfs: remove the xfs_qoff_logitem_t typedef\n xfs: remove the xfs_dq_logitem_t typedef\n xfs: remove the xfs_disk_dquot_t and xfs_dquot_t\n xfs: Use scnprintf() for avoiding potential buffer overflow\n xfs: check owner of dir3 blocks\n xfs: check owner of dir3 data blocks\n xfs: fix buffer corruption reporting when xfs_dir3_free_header_check fails\n xfs: xfs_buf_corruption_error should take __this_address\n xfs: add a function to deal with corrupt buffers post-verifiers\n xfs: rework collapse range into an atomic operation\n xfs: rework insert range into an atomic operation\n xfs: open code insert range extent split helper\n Linux 5.4.220\n thermal: intel_powerclamp: Use first online CPU as control_cpu\n inet: fully convert sk-\u003esk_rx_dst to RCU rules\n efi: libstub: drop pointless get_memory_map() call\n md: Replace snprintf with scnprintf\n ext4: continue to expand file system when the target size doesn\u0027t reach\n net/ieee802154: don\u0027t warn zero-sized raw_sendmsg()\n Revert \"net/ieee802154: reject zero-sized raw_sendmsg()\"\n net: ieee802154: return -EINVAL for unknown addr type\n io_uring/af_unix: defer registered files gc to io_uring release\n perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc\n clk: bcm2835: Make peripheral PLLC critical\n usb: idmouse: fix an uninit-value in idmouse_open\n nvmet-tcp: add bounds check on Transfer Tag\n nvme: copy firmware_rev on each init\n staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()\n Revert \"usb: storage: Add quirk for Samsung Fit flash\"\n usb: musb: Fix musb_gadget.c rxstate overflow bug\n usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()\n md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d\n HID: roccat: Fix use-after-free in roccat_read()\n bcache: fix set_at_max_writeback_rate() for multiple attached devices\n ata: libahci_platform: Sanity check the DT child nodes number\n staging: vt6655: fix potential memory leak\n power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()\n nbd: Fix hung when signal interrupts nbd_start_device_ioctl()\n scsi: 3w-9xxx: Avoid disabling device if failing to enable it\n clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate\n media: cx88: Fix a null-ptr-deref bug in buffer_prepare()\n clk: zynqmp: Fix stack-out-of-bounds in strncpy`\n btrfs: scrub: try to fix super block errors\n ARM: dts: imx6sx: add missing properties for sram\n ARM: dts: imx6sll: add missing properties for sram\n ARM: dts: imx6sl: add missing properties for sram\n ARM: dts: imx6qp: add missing properties for sram\n ARM: dts: imx6dl: add missing properties for sram\n ARM: dts: imx6q: add missing properties for sram\n ARM: dts: imx7d-sdb: config the max pressure for tsc2046\n mmc: sdhci-msm: add compatible string check for sdm670\n drm/amdgpu: fix initial connector audio value\n platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading\n drm: panel-orientation-quirks: Add quirk for Anbernic Win600\n drm/vc4: vec: Fix timings for VEC modes\n drm/amd/display: fix overflow on MIN_I64 definition\n drm: Prevent drm_copy_field() to attempt copying a NULL pointer\n drm: Use size_t type for len variable in drm_copy_field()\n drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()\n r8152: Rate limit overflow messages\n Bluetooth: L2CAP: Fix user-after-free\n net: If sock is dead don\u0027t access sock\u0027s sk_wq in sk_stream_wait_memory\n wifi: rt2x00: correctly set BBP register 86 for MT7620\n wifi: rt2x00: set SoC wmac clock register\n wifi: rt2x00: set VGC gain for both chains of MT7620\n wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620\n wifi: rt2x00: don\u0027t run Rt5592 IQ calibration on MT7620\n can: bcm: check the result of can_send() in bcm_can_tx()\n Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times\n Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()\n wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()\n xfrm: Update ipcomp_scratches with NULL when freed\n wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()\n tcp: annotate data-race around tcp_md5sig_pool_populated\n openvswitch: Fix overreporting of drops in dropwatch\n openvswitch: Fix double reporting of drops in dropwatch\n bpftool: Clear errno after libcap\u0027s checks\n wifi: brcmfmac: fix invalid address access when enabling SCAN log level\n NFSD: Return nfserr_serverfault if splice_ok but buf-\u003epages have data\n thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash\n powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue\n MIPS: BCM47XX: Cast memcmp() of function to (void *)\n ACPI: video: Add Toshiba Satellite/Portege Z830 quirk\n f2fs: fix race condition on setting FI_NO_EXTENT flag\n crypto: cavium - prevent integer overflow loading firmware\n kbuild: remove the target in signal traps when interrupted\n iommu/iova: Fix module config properly\n crypto: ccp - Release dma channels before dmaengine unrgister\n crypto: akcipher - default implementation for setting a private key\n iommu/omap: Fix buffer overflow in debugfs\n cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset\n powerpc: Fix SPE Power ISA properties for e500v1 platforms\n powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5\n x86/hyperv: Fix \u0027struct hv_enlightened_vmcs\u0027 definition\n powerpc/powernv: add missing of_node_put() in opal_export_attrs()\n powerpc/pci_dn: Add missing of_node_put()\n powerpc/sysdev/fsl_msi: Add missing of_node_put()\n powerpc/math_emu/efp: Include module.h\n mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg\n clk: ast2600: BCLK comes from EPLL\n clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe\n clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration\n spmi: pmic-arb: correct duplicate APID to PPID mapping logic\n dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()\n clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent\n mfd: sm501: Add check for platform_driver_register()\n mfd: fsl-imx25: Fix check for platform_get_irq() errors\n mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()\n mfd: lp8788: Fix an error handling path in lp8788_probe()\n mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()\n mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()\n fsi: core: Check error number after calling ida_simple_get\n scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()\n serial: 8250: Fix restoring termios speed after suspend\n firmware: google: Test spinlock on panic path to avoid lockups\n staging: vt6655: fix some erroneous memory clean-up loops\n phy: qualcomm: call clk_disable_unprepare in the error handling\n tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown\n drivers: serial: jsm: fix some leaks in probe\n usb: gadget: function: fix dangling pnp_string in f_printer.c\n xhci: Don\u0027t show warning for reinit on known broken suspend\n md/raid5: Ensure stripe_fill happens on non-read IO with journal\n mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()\n ata: fix ata_id_has_dipm()\n ata: fix ata_id_has_ncq_autosense()\n ata: fix ata_id_has_devslp()\n ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()\n RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.\n mtd: devices: docg3: check the return value of devm_ioremap() in the probe\n dyndbg: let query-modname override actual module name\n dyndbg: fix module.dyndbg handling\n misc: ocxl: fix possible refcount leak in afu_ioctl()\n RDMA/rxe: Fix the error caused by qp-\u003esk\n RDMA/rxe: Fix \"kernel NULL pointer dereference\" error\n media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init\n tty: xilinx_uartps: Fix the ignore_status\n media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop\n HSI: omap_ssi_port: Fix dma_map_sg error check\n HSI: omap_ssi: Fix refcount leak in ssi_probe\n clk: tegra20: Fix refcount leak in tegra20_clock_init\n clk: tegra: Fix refcount leak in tegra114_clock_init\n clk: tegra: Fix refcount leak in tegra210_clock_init\n clk: berlin: Add of_node_put() for of_get_parent()\n clk: oxnas: Hold reference returned by of_get_parent()\n clk: meson: Hold reference returned by of_get_parent()\n iio: ABI: Fix wrong format of differential capacitance channel ABI.\n iio: inkern: only release the device node when done with it\n iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq\n iio: adc: at91-sama5d2_adc: check return status for pressure and touch\n iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX\n ARM: dts: exynos: fix polarity of VBUS GPIO of Origen\n ARM: Drop CMDLINE_* dependency on ATAGS\n ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family\n ARM: dts: kirkwood: lsxl: remove first ethernet port\n ARM: dts: kirkwood: lsxl: fix serial line\n ARM: dts: turris-omnia: Fix mpp26 pin name and comment\n soc: qcom: smem_state: Add refcounting for the \u0027state-\u003eof_node\u0027\n soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()\n memory: of: Fix refcount leak bug in of_get_ddr_timings()\n memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()\n ALSA: hda/hdmi: Don\u0027t skip notification handling during PM operation\n ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe\n ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe\n ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe\n mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()\n ALSA: dmaengine: increment buffer pointer atomically\n drm/msm/dpu: index dpu_kms-\u003ehw_vbif using vbif_idx\n ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API\n mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()\n drm/omap: dss: Fix refcount leak bugs\n ALSA: hda: beep: Simplify keep-power-at-enable behavior\n ASoC: rsnd: Add check for rsnd_mod_power_on\n drm/bridge: megachips: Fix a null pointer dereference bug\n drm: fix drm_mipi_dbi build errors\n platform/x86: msi-laptop: Fix resource cleanup\n platform/x86: msi-laptop: Fix old-ec check for backlight registering\n platform/chrome: fix memory corruption in ioctl\n platform/chrome: fix double-free in chromeos_laptop_prepare()\n drm/mipi-dsi: Detach devices when removing the host\n drm: bridge: adv7511: fix CEC power down control register offset\n net: mvpp2: fix mvpp2 debugfs leak\n once: add DO_ONCE_SLOW() for sleepable contexts\n net/ieee802154: reject zero-sized raw_sendmsg()\n bnx2x: fix potential memory leak in bnx2x_tpa_stop()\n net: rds: don\u0027t hold sock lock when cancelling work from rds_tcp_reset_callbacks()\n tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited\n sctp: handle the error returned from sctp_auth_asoc_init_active_key\n mISDN: fix use-after-free bugs in l1oip timer handlers\n vhost/vsock: Use kvmalloc/kvfree for larger packets.\n spi: s3c64xx: Fix large transfers with DMA\n netfilter: nft_fib: Fix for rpath check with VRF devices\n spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe\n x86/microcode/AMD: Track patch allocation size explicitly\n bpf: Ensure correct locking around vulnerable function find_vpid()\n net: fs_enet: Fix wrong check in do_pd_setup\n wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration\n bpf: btf: fix truncated last_member_type_id in btf_struct_resolve\n wifi: rtl8xxxu: Fix skb misuse in TX queue selection\n spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()\n spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()\n wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()\n x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register\n bpftool: Fix a wrong type cast in btf_dumper_int\n wifi: mac80211: allow bw change during channel switch in mesh\n wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()\n nfsd: Fix a memory leak in an error handling path\n ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE\n sh: machvec: Use char[] for section boundaries\n userfaultfd: open userfaultfds with O_RDONLY\n tracing: Disable interrupt or preemption before acquiring arch_spinlock_t\n selinux: use \"grep -E\" instead of \"egrep\"\n drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()\n gcov: support GCC 12.1 and newer compilers\n KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS\n KVM: nVMX: Unconditionally purge queued/injected events on nested \"exit\"\n KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility\n media: cedrus: Set the platform driver data earlier\n ring-buffer: Fix race between reset page and reading page\n ring-buffer: Check pending waiters when doing wake ups as well\n ring-buffer: Have the shortest_full queue be the shortest not longest\n ring-buffer: Allow splice to read previous partially read pages\n ftrace: Properly unset FTRACE_HASH_FL_MOD\n livepatch: fix race between fork and KLP transition\n ext4: place buffer head allocation before handle start\n ext4: make ext4_lazyinit_thread freezable\n ext4: fix null-ptr-deref in ext4_write_info\n ext4: avoid crash when inline data creation follows DIO write\n jbd2: wake up journal waiters in FIFO order, not LIFO\n nilfs2: fix use-after-free bug of struct nilfs_root\n f2fs: fix to do sanity check on summary info\n f2fs: fix to do sanity check on destination blkaddr during recovery\n f2fs: increase the limit for reserve_root\n btrfs: fix race between quota enable and quota rescan ioctl\n fbdev: smscufx: Fix use-after-free in ufx_ops_open()\n powerpc/boot: Explicitly disable usage of SPE instructions\n PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge\n UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK\n riscv: Pass -mno-relax only on lld \u003c 15.0.0\n riscv: Allow PROT_WRITE-only mmap()\n parisc: fbdev/stifb: Align graphics memory size to 4MB\n RISC-V: Make port I/O string accessors actually work\n regulator: qcom_rpm: Fix circular deferral regression\n ASoC: wcd9335: fix order of Slimbus unprepare/disable\n quota: Check next/prev free block number after reading from quota file\n HID: multitouch: Add memory barriers\n fs: dlm: handle -EBUSY first in lock arg validation\n fs: dlm: fix race between test_bit() and queue_work()\n mmc: sdhci-sprd: Fix minimum clock limit\n can: kvaser_usb_leaf: Fix CAN state after restart\n can: kvaser_usb_leaf: Fix TX queue out of sync after restart\n can: kvaser_usb_leaf: Fix overread with an invalid command\n can: kvaser_usb: Fix use of uninitialized completion\n usb: add quirks for Lenovo OneLink+ Dock\n iio: pressure: dps310: Reset chip after timeout\n iio: pressure: dps310: Refactor startup procedure\n iio: dac: ad5593r: Fix i2c read protocol requirements\n cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message\n cifs: destage dirty pages before re-reading them for cache\u003dnone\n mtd: rawnand: atmel: Unmap streaming DMA mappings\n ALSA: hda/realtek: Add Intel Reference SSID to support headset keys\n ALSA: hda/realtek: Add quirk for ASUS GV601R laptop\n ALSA: hda/realtek: Correct pin configs for ASUS G533Z\n ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530\n ALSA: usb-audio: Fix NULL dererence at error path\n ALSA: usb-audio: Fix potential memory leaks\n ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()\n ALSA: oss: Fix potential deadlock at unregistration\n\n Conflicts:\n\tinclude/linux/rmap.h\n\tkernel/cgroup/cpuset.c\n\tmm/rmap.c\n\nChange-Id: Icfcc8ff31af6311f7b8d36a8909b77e62ec8f2e6\nSigned-off-by: Srinivasarao Pathipati \u003cquic_c_spathi@quicinc.com\u003e\n" }, { "commit": "e367c7b762627f1cc2776f70e76de5776283374d", "tree": "7acde788a6d8ad6ff70d40ab373d06630f5a0cdd", "parents": [ "46d9b30a0cefc9a1711692bd027ad2109a3fb6ff", "59342376e8f0c704299dc7a2c14fed07ffb962e2" ], "author": { "name": "Greg Kroah-Hartman", "email": "gregkh@google.com", "time": "Mon Feb 06 10:47:39 2023 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@google.com", "time": "Mon Feb 06 10:47:39 2023 +0000" }, "message": "Merge 5.4.231 into android11-5.4-lts\n\nChanges in 5.4.231\n\tclk: generalize devm_clk_get() a bit\n\tclk: Provide new devm_clk helpers for prepared and enabled clocks\n\tmemory: atmel-sdramc: Fix missing clk_disable_unprepare in atmel_ramc_probe()\n\tmemory: mvebu-devbus: Fix missing clk_disable_unprepare in mvebu_devbus_probe()\n\tARM: dts: imx6qdl-gw560x: Remove incorrect \u0027uart-has-rtscts\u0027\n\tARM: imx27: Retrieve the SYSCTRL base address from devicetree\n\tARM: imx31: Retrieve the IIM base address from devicetree\n\tARM: imx35: Retrieve the IIM base address from devicetree\n\tARM: imx: add missing of_node_put()\n\tHID: intel_ish-hid: Add check for ishtp_dma_tx_map\n\tEDAC/highbank: Fix memory leak in highbank_mc_probe()\n\ttomoyo: fix broken dependency on *.conf.default\n\tRDMA/core: Fix ib block iterator counter overflow\n\tIB/hfi1: Reject a zero-length user expected buffer\n\tIB/hfi1: Reserve user expected TIDs\n\tIB/hfi1: Fix expected receive setup error exit issues\n\taffs: initialize fsdata in affs_truncate()\n\tamd-xgbe: TX Flow Ctrl Registers are h/w ver dependent\n\tamd-xgbe: Delay AN timeout during KR training\n\tbpf: Fix pointer-leak due to insufficient speculative store bypass mitigation\n\tphy: rockchip-inno-usb2: Fix missing clk_disable_unprepare() in rockchip_usb2phy_power_on()\n\tnet: nfc: Fix use-after-free in local_cleanup()\n\tnet: wan: Add checks for NULL for utdm in undo_uhdlc_init and unmap_si_regs\n\tgpio: mxc: Always set GPIOs used as interrupt source to INPUT mode\n\twifi: rndis_wlan: Prevent buffer overflow in rndis_query_oid\n\tnet/sched: sch_taprio: fix possible use-after-free\n\tnet: fix a concurrency bug in l2tp_tunnel_register()\n\tl2tp: Serialize access to sk_user_data with sk_callback_lock\n\tl2tp: Don\u0027t sleep and disable BH under writer-side sk_callback_lock\n\tnet: usb: sr9700: Handle negative len\n\tnet: mdio: validate parameter addr in mdiobus_get_phy()\n\tHID: check empty report_list in hid_validate_values()\n\tHID: check empty report_list in bigben_probe()\n\tnet: stmmac: fix invalid call to mdiobus_get_phy()\n\tHID: revert CHERRY_MOUSE_000C quirk\n\tusb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait\n\tusb: gadget: f_fs: Ensure ep0req is dequeued before free_request\n\tnet: mlx5: eliminate anonymous module_init \u0026 module_exit\n\tdrm/panfrost: fix GENERIC_ATOMIC64 dependency\n\tdmaengine: Fix double increment of client_count in dma_chan_get()\n\tnet: macb: fix PTP TX timestamp failure due to packet padding\n\tHID: betop: check shape of output reports\n\tdmaengine: xilinx_dma: use devm_platform_ioremap_resource()\n\tdmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling\n\tdmaengine: xilinx_dma: call of_node_put() when breaking out of for_each_child_of_node()\n\ttcp: avoid the lookup process failing to get sk in ehash table\n\tw1: fix deadloop in __w1_remove_master_device()\n\tw1: fix WARNING after calling w1_process()\n\tdriver core: Fix test_async_probe_init saves device in wrong array\n\tnet: dsa: microchip: ksz9477: port map correction in ALU table entry register\n\ttcp: fix rate_app_limited to default to 1\n\tcpufreq: Add Tegra234 to cpufreq-dt-platdev blocklist\n\tASoC: fsl_micfil: Correct the number of steps on SX controls\n\tdrm: Add orientation quirk for Lenovo ideapad D330-10IGL\n\ts390/debug: add _ASM_S390_ prefix to header guard\n\tcpufreq: armada-37xx: stop using 0 as NULL pointer\n\tASoC: fsl_ssi: Rename AC\u002797 streams to avoid collisions with AC\u002797 CODEC\n\tASoC: fsl-asoc-card: Fix naming of AC\u002797 CODEC widgets\n\tspi: spidev: remove debug messages that access spidev-\u003espi without locking\n\tKVM: s390: interrupt: use READ_ONCE() before cmpxchg()\n\tscsi: hisi_sas: Set a port invalid only if there are no devices attached when refreshing port id\n\tplatform/x86: touchscreen_dmi: Add info for the CSL Panther Tab HD\n\tplatform/x86: asus-nb-wmi: Add alternate mapping for KEY_SCREENLOCK\n\tlockref: stop doing cpu_relax in the cmpxchg loop\n\tmmc: sdhci-esdhc-imx: clear pending interrupt and halt cqhci\n\tmmc: sdhci-esdhc-imx: disable the CMD CRC check for standard tuning\n\tmmc: sdhci-esdhc-imx: correct the tuning start tap and step setting\n\tRevert \"selftests/bpf: check null propagation only neither reg is PTR_TO_BTF_ID\"\n\tnetfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state\n\tfs: reiserfs: remove useless new_opts in reiserfs_remount\n\tRevert \"Revert \"xhci: Set HCD flag to defer primary roothub registration\"\"\n\tBluetooth: hci_sync: cancel cmd_timer if hci_open failed\n\tscsi: hpsa: Fix allocation size for scsi_host_alloc()\n\tmodule: Don\u0027t wait for GOING modules\n\ttracing: Make sure trace_printk() can output as soon as it can be used\n\ttrace_events_hist: add check for return value of \u0027create_hist_field\u0027\n\tftrace/scripts: Update the instructions for ftrace-bisect.sh\n\tcifs: Fix oops due to uncleared server-\u003esmbd_conn in reconnect\n\tKVM: x86/vmx: Do not skip segment attributes if unusable bit is set\n\tthermal: intel: int340x: Protect trip temperature from concurrent updates\n\tARM: 9280/1: mm: fix warning on phys_addr_t to void pointer assignment\n\tEDAC/device: Respect any driver-supplied workqueue polling value\n\tEDAC/qcom: Do not pass llcc_driv_data as edac_device_ctl_info\u0027s pvt_info\n\tnetlink: prevent potential spectre v1 gadgets\n\tnet: fix UaF in netns ops registration error path\n\tnetfilter: nft_set_rbtree: skip elements in transaction from garbage collection\n\tnetlink: annotate data races around nlk-\u003eportid\n\tnetlink: annotate data races around dst_portid and dst_group\n\tnetlink: annotate data races around sk_state\n\tipv4: prevent potential spectre v1 gadget in ip_metrics_convert()\n\tipv4: prevent potential spectre v1 gadget in fib_metrics_match()\n\tnetfilter: conntrack: fix vtag checks for ABORT/SHUTDOWN_COMPLETE\n\tnetrom: Fix use-after-free of a listening socket.\n\tnet/sched: sch_taprio: do not schedule in taprio_reset()\n\tsctp: fail if no bound addresses can be used for a given scope\n\tnet: ravb: Fix possible hang if RIS2_QFF1 happen\n\tthermal: intel: int340x: Add locking to int340x_thermal_get_trip_type()\n\tnet/tg3: resolve deadlock in tg3_reset_task() during EEH\n\tnet/phy/mdio-i2c: Move header file to include/linux/mdio\n\tnet: xgene: Move shared header file into include/linux\n\tnet: mdio-mux-meson-g12a: force internal PHY off on mux switch\n\tRevert \"Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode\"\n\tnfsd: Ensure knfsd shuts down when the \"nfsd\" pseudofs is unmounted\n\tblock: fix and cleanup bio_check_ro\n\tx86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL\n\tnetfilter: conntrack: unify established states for SCTP paths\n\tperf/x86/amd: fix potential integer overflow on shift of a int\n\tclk: Fix pointer casting to prevent oops in devm_clk_release()\n\tx86/asm: Fix an assembler warning with current binutils\n\tARM: dts: imx: Fix pca9547 i2c-mux node name\n\tbpf: Skip task with pid\u003d1 in send_signal_common()\n\tblk-cgroup: fix missing pd_online_fn() while activating policy\n\tdmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init\n\tsysctl: add a new register_sysctl_init() interface\n\tpanic: unset panic_on_warn inside panic()\n\tmm: kasan: do not panic if both panic_on_warn and kasan_multishot set\n\texit: Add and use make_task_dead.\n\tobjtool: Add a missing comma to avoid string concatenation\n\thexagon: Fix function name in die()\n\th8300: Fix build errors from do_exit() to make_task_dead() transition\n\tcsky: Fix function name in csky_alignment() and die()\n\tia64: make IA64_MCA_RECOVERY bool instead of tristate\n\texit: Put an upper limit on how often we can oops\n\texit: Expose \"oops_count\" to sysfs\n\texit: Allow oops_limit to be disabled\n\tpanic: Consolidate open-coded panic_on_warn checks\n\tpanic: Introduce warn_limit\n\tpanic: Expose \"warn_count\" to sysfs\n\tdocs: Fix path paste-o for /sys/kernel/warn_count\n\texit: Use READ_ONCE() for all oops/warn limit reads\n\tipv6: ensure sane device mtu in tunnels\n\tBluetooth: fix null ptr deref on hci_sync_conn_complete_evt\n\tusb: host: xhci-plat: add wakeup entry at sysfs\n\tRevert \"xprtrdma: Fix regbuf data not freed in rpcrdma_req_create()\"\n\tLinux 5.4.231\n\nChange-Id: I0f670158dd88a589d5f56246d094d3392a1784f9\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@google.com\u003e\n" }, { "commit": "bcb65adaa9a1b63aa86310d9821b330383040705", "tree": "aae6b454934066b28f72f2096a64ea8e6fbf7a1c", "parents": [ "31b2414abeaa6de0490e85164badc6dcb1bb8ec9" ], "author": { "name": "Steven Rostedt (Google)", "email": "rostedt@goodmis.org", "time": "Mon Jan 23 11:22:52 2023 -0500" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Mon Feb 06 07:52:44 2023 +0100" }, "message": "ftrace/scripts: Update the instructions for ftrace-bisect.sh\n\ncommit 7ae4ba7195b1bac04a4210a499da9d8c63b0ba9c upstream.\n\nThe instructions for the ftrace-bisect.sh script, which is used to find\nwhat function is being traced that is causing a kernel crash, and possibly\na triple fault reboot, uses the old method. In 5.1, a new feature was\nadded that let the user write in the index into available_filter_functions\nthat maps to the function a user wants to set in set_ftrace_filter (or\nset_ftrace_notrace). This takes O(1) to set, as suppose to writing a\nfunction name, which takes O(n) (where n is the number of functions in\navailable_filter_functions).\n\nThe ftrace-bisect.sh requires setting half of the functions in\navailable_filter_functions, which is O(n^2) using the name method to enable\nand can take several minutes to complete. The number method is O(n) which\ntakes less than a second to complete. Using the number method for any\nkernel 5.1 and after is the proper way to do the bisect.\n\nUpdate the usage to reflect the new change, as well as using the\n/sys/kernel/tracing path instead of the obsolete debugfs path.\n\nLink: https://lkml.kernel.org/r/20230123112252.022003dd@gandalf.local.home\n\nCc: stable@vger.kernel.org\nCc: Masami Hiramatsu \u003cmhiramat@kernel.org\u003e\nAcked-by: Mark Rutland \u003cmark.rutland@arm.com\u003e\nFixes: f79b3f338564e (\"ftrace: Allow enabling of filters via index of available_filter_functions\")\nSigned-off-by: Steven Rostedt (Google) \u003crostedt@goodmis.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "b6963324991de6d4ddde02bf5b3cc3fa6d3d48f7", "tree": "9b5e1c822fc96ec599b3af9fec29ca666ff46c35", "parents": [ "0b52a8030f9b71e657a59cfc15fd2cbf0d4c8e74", "bf9c71bd30a6bc2056100249e919b2b3a466ec0c" ], "author": { "name": "Srinivasarao Pathipati", "email": "quic_c_spathi@quicinc.com", "time": "Fri Jan 27 00:12:37 2023 +0530" }, "committer": { "name": "Srinivasarao Pathipati", "email": "quic_c_spathi@quicinc.com", "time": "Fri Jan 27 00:57:29 2023 +0530" }, "message": "Merge android11-5.4.219+ (0ce03d1) into msm-5.4\n\n* refs/heads/tmp-0ce03d1:\n Revert \"wait: Fix __wait_event_hrtimeout for RT/DL tasks\"\n Reverts below USB and netfilter patches\n BACKPORT: Kconfig.debug: provide a little extra FRAME_WARN leeway when KASAN is enabled\n UPSTREAM: bpf: Ensure correct locking around vulnerable function find_vpid()\n UPSTREAM: HID: roccat: Fix use-after-free in roccat_read()\n ANDROID: arm64: mm: perform clean \u0026 invalidation in __dma_map_area\n UPSTREAM: mmc: hsq: Fix data stomping during mmc recovery\n UPSTREAM: pinctrl: sunxi: Fix name for A100 R_PIO\n BACKPORT: mmc: core: Fix UHS-I SD 1.8V workaround branch\n UPSTREAM: Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm regression\n UPSTREAM: wifi: mac80211_hwsim: set virtio device ready in probe()\n BACKPORT: f2fs: don\u0027t use casefolded comparison for \".\" and \"..\"\n UPSTREAM: Revert \"mm/cma.c: remove redundant cma_mutex lock\"\n UPSTREAM: usb: dwc3: Try usb-role-switch first in dwc3_drd_init\n BACKPORT: usb: typec: ucsi: Fix reuse of completion structure\n BACKPORT: tipc: fix incorrect order of state message data sanity check\n UPSTREAM: net: fix up skbs delta_truesize in UDP GRO frag_list\n UPSTREAM: cgroup-v1: Correct privileges check in release_agent writes\n UPSTREAM: mm: don\u0027t try to NUMA-migrate COW pages that have other uses\n UPSTREAM: usb: raw-gadget: fix handling of dual-direction-capable endpoints\n UPSTREAM: selinux: check return value of sel_make_avc_files\n UPSTREAM: usb: musb: select GENERIC_PHY instead of depending on it\n BACKPORT: driver core: Fix error return code in really_probe()\n UPSTREAM: fscrypt: fix derivation of SipHash keys on big endian CPUs\n BACKPORT: fscrypt: rename FS_KEY_DERIVATION_NONCE_SIZE\n UPSTREAM: socionext: account for napi_gro_receive never returning GRO_DROP\n UPSTREAM: net: socionext: netsec: fix xdp stats accounting\n BACKPORT: fs: align IOCB_* flags with RWF_* flags\n UPSTREAM: efi: capsule-loader: Fix use-after-free in efi_capsule_write\n BACKPORT: ARM: 9039/1: assembler: generalize byte swapping macro into rev_l\n BACKPORT: ARM: 9035/1: uncompress: Add be32tocpu macro\n UPSTREAM: drm/meson: Fix overflow implicit truncation warnings\n UPSTREAM: irqchip/tegra: Fix overflow implicit truncation warnings\n UPSTREAM: video: fbdev: pxa3xx-gcu: Fix integer overflow in pxa3xx_gcu_write\n UPSTREAM: mm/mremap: hold the rmap lock in write mode when moving page table entries.\n FROMLIST: binder: fix UAF of alloc-\u003evma in race with munmap()\n UPSTREAM: mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()\n UPSTREAM: mm: Force TLB flush for PFNMAP mappings before unlink_file_vma()\n UPSTREAM: af_key: Do not call xfrm_probe_algs in parallel\n UPSTREAM: wifi: cfg80211: fix u8 overflow in cfg80211_update_notlisted_nontrans()\n UPSTREAM: wifi: cfg80211/mac80211: reject bad MBSSID elements\n UPSTREAM: wifi: cfg80211: ensure length byte is present before access\n UPSTREAM: wifi: cfg80211: fix BSS refcounting bugs\n UPSTREAM: wifi: cfg80211: avoid nontransmitted BSS list corruption\n UPSTREAM: wifi: mac80211_hwsim: avoid mac80211 warning on bad rate\n UPSTREAM: wifi: cfg80211: update hidden BSSes to avoid WARN_ON\n UPSTREAM: mac80211: mlme: find auth challenge directly\n UPSTREAM: wifi: mac80211: don\u0027t parse mbssid in assoc response\n ANDROID: GKI: db845c: Update symbols list and ABI\n UPSTREAM: wifi: mac80211: fix MBSSID parsing use-after-free\n ANDROID: Drop explicit \u0027CONFIG_INIT_STACK_ALL_ZERO\u003dy\u0027 from gki_defconfig\n UPSTREAM: hardening: Remove Clang\u0027s enable flag for -ftrivial-auto-var-init\u003dzero\n UPSTREAM: hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO\n UPSTREAM: hardening: Clarify Kconfig text for auto-var-init\n ANDROID: GKI: Update FCNT KMI symbol list\n Linux 5.4.219\n wifi: mac80211: fix MBSSID parsing use-after-free\n wifi: mac80211: don\u0027t parse mbssid in assoc response\n mac80211: mlme: find auth challenge directly\n Revert \"fs: check FMODE_LSEEK to control internal pipe splicing\"\n Linux 5.4.218\n Input: xpad - fix wireless 360 controller breaking after suspend\n Input: xpad - add supported devices as contributed on github\n wifi: cfg80211: update hidden BSSes to avoid WARN_ON\n wifi: mac80211_hwsim: avoid mac80211 warning on bad rate\n wifi: cfg80211: avoid nontransmitted BSS list corruption\n wifi: cfg80211: fix BSS refcounting bugs\n wifi: cfg80211: ensure length byte is present before access\n wifi: cfg80211/mac80211: reject bad MBSSID elements\n wifi: cfg80211: fix u8 overflow in cfg80211_update_notlisted_nontrans()\n random: use expired timer rather than wq for mixing fast pool\n random: avoid reading two cache lines on irq randomness\n random: restore O_NONBLOCK support\n USB: serial: qcserial: add new usb-id for Dell branded EM7455\n scsi: stex: Properly zero out the passthrough command structure\n efi: Correct Macmini DMI match in uefi cert quirk\n ALSA: hda: Fix position reporting on Poulsbo\n random: clamp credited irq bits to maximum mixed\n ceph: don\u0027t truncate file in atomic_open\n nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure\n nilfs2: fix leak of nilfs_root in case of writer thread creation failure\n nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level()\n rpmsg: qcom: glink: replace strncpy() with strscpy_pad()\n mmc: core: Terminate infinite loop in SD-UHS voltage switch\n mmc: core: Replace with already defined values for readability\n USB: serial: ftdi_sio: fix 300 bps rate for SIO\n usb: mon: make mmapped memory read only\n arch: um: Mark the stack non-executable to fix a binutils warning\n um: Cleanup compiler warning in arch/x86/um/tls_32.c\n um: Cleanup syscall_handler_t cast in syscalls_32.h\n net/ieee802154: fix uninit value bug in dgram_sendmsg\n scsi: qedf: Fix a UAF bug in __qedf_probe()\n ARM: dts: fix Moxa SDIO \u0027compatible\u0027, remove \u0027sdhci\u0027 misnomer\n dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure\n dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property\n firmware: arm_scmi: Add SCMI PM driver remove routine\n fs: fix UAF/GPF bug in nilfs_mdt_destroy\n perf tools: Fixup get_current_dir_name() compilation\n mm: pagewalk: Fix race between unmap and page walker\n ANDROID: Fix kenelci build-break for !CONFIG_PERF_EVENTS\n BACKPORT: HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report\n Linux 5.4.217\n docs: update mediator information in CoC docs\n Makefile.extrawarn: Move -Wcast-function-type-strict to W\u003d1\n Revert \"drm/amdgpu: use dirty framebuffer helper\"\n xfs: remove unused variable \u0027done\u0027\n xfs: fix uninitialized variable in xfs_attr3_leaf_inactive\n xfs: streamline xfs_attr3_leaf_inactive\n xfs: move incore structures out of xfs_da_format.h\n xfs: fix memory corruption during remote attr value buffer invalidation\n xfs: refactor remote attr value buffer invalidation\n xfs: fix IOCB_NOWAIT handling in xfs_file_dio_aio_read\n xfs: fix s_maxbytes computation on 32-bit kernels\n xfs: truncate should remove all blocks, not just to the end of the page cache\n xfs: introduce XFS_MAX_FILEOFF\n xfs: fix misuse of the XFS_ATTR_INCOMPLETE flag\n x86/speculation: Add RSB VM Exit protections\n x86/bugs: Warn when \"ibrs\" mitigation is selected on Enhanced IBRS parts\n x86/speculation: Use DECLARE_PER_CPU for x86_spec_ctrl_current\n x86/speculation: Disable RRSBA behavior\n x86/bugs: Add Cannon lake to RETBleed affected CPU list\n x86/cpu/amd: Enumerate BTC_NO\n x86/common: Stamp out the stepping madness\n x86/speculation: Fill RSB on vmexit for IBRS\n KVM: VMX: Fix IBRS handling after vmexit\n KVM: VMX: Prevent guest RSB poisoning attacks with eIBRS\n KVM: VMX: Convert launched argument to flags\n KVM: VMX: Flatten __vmx_vcpu_run()\n KVM/nVMX: Use __vmx_vcpu_run in nested_vmx_check_vmentry_hw\n KVM/VMX: Use TEST %REG,%REG instead of CMP $0,%REG in vmenter.S\n x86/speculation: Remove x86_spec_ctrl_mask\n x86/speculation: Use cached host SPEC_CTRL value for guest entry/exit\n x86/speculation: Fix SPEC_CTRL write on SMT state change\n x86/speculation: Fix firmware entry SPEC_CTRL handling\n x86/speculation: Fix RSB filling with CONFIG_RETPOLINE\u003dn\n x86/speculation: Change FILL_RETURN_BUFFER to work with objtool\n intel_idle: Disable IBRS during long idle\n x86/bugs: Report Intel retbleed vulnerability\n x86/bugs: Split spectre_v2_select_mitigation() and spectre_v2_user_select_mitigation()\n x86/speculation: Add spectre_v2\u003dibrs option to support Kernel IBRS\n x86/bugs: Optimize SPEC_CTRL MSR writes\n x86/entry: Add kernel IBRS implementation\n x86/entry: Remove skip_r11rcx\n x86/bugs: Keep a per-CPU IA32_SPEC_CTRL value\n x86/bugs: Add AMD retbleed\u003d boot parameter\n x86/bugs: Report AMD retbleed vulnerability\n x86/cpufeatures: Move RETPOLINE flags to word 11\n x86/kvm/vmx: Make noinstr clean\n x86/cpu: Add a steppings field to struct x86_cpu_id\n x86/cpu: Add consistent CPU match macros\n x86/devicetable: Move x86 specific macro out of generic code\n Revert \"x86/cpu: Add a steppings field to struct x86_cpu_id\"\n Revert \"x86/speculation: Add RSB VM Exit protections\"\n Linux 5.4.216\n clk: iproc: Do not rely on node name for correct PLL setup\n clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks\n selftests: Fix the if conditions of in test_extra_filter()\n nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices\n nvme: add new line after variable declatation\n usbnet: Fix memory leak in usbnet_disconnect()\n Input: melfas_mip4 - fix return value check in mip4_probe()\n Revert \"drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time\"\n soc: sunxi: sram: Fix debugfs info for A64 SRAM C\n soc: sunxi: sram: Fix probe function ordering issues\n soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()\n soc: sunxi: sram: Prevent the driver from being unbound\n soc: sunxi: sram: Actually claim SRAM regions\n ARM: dts: am33xx: Fix MMCHS0 dma properties\n ARM: dts: Move am33xx and am43xx mmc nodes to sdhci-omap driver\n media: dvb_vb2: fix possible out of bound access\n mm: fix madivse_pageout mishandling on non-LRU page\n mm/migrate_device.c: flush TLB while holding PTL\n mm: prevent page_frag_alloc() from corrupting the memory\n mm/page_alloc: fix race condition between build_all_zonelists and page allocation\n mmc: moxart: fix 4-bit bus width and remove 8-bit bus width\n libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205\n Revert \"net: mvpp2: debugfs: fix memory leak when using debugfs_lookup()\"\n ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()\n ARM: dts: integrator: Tag PCI host with device_type\n clk: ingenic-tcu: Properly enable registers before accessing timers\n net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455\n uas: ignore UAS for Thinkplus chips\n usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS\n uas: add no-uas quirk for Hiksemi usb_disk\n ANDROID: ABI: Update allowed list for QCOM\n UPSTREAM: wifi: mac80211_hwsim: use 32-bit skb cookie\n UPSTREAM: wifi: mac80211_hwsim: add back erroneously removed cast\n UPSTREAM: wifi: mac80211_hwsim: fix race condition in pending packet\n Linux 5.4.215\n ext4: make directory inode spreading reflect flexbg size\n xfs: fix use-after-free when aborting corrupt attr inactivation\n xfs: fix an ABBA deadlock in xfs_rename\n xfs: don\u0027t commit sunit/swidth updates to disk if that would cause repair failures\n xfs: split the sunit parameter update into two parts\n xfs: refactor agfl length computation function\n xfs: use bitops interface for buf log item AIL flag check\n xfs: stabilize insert range start boundary to avoid COW writeback race\n xfs: fix some memory leaks in log recovery\n xfs: always log corruption errors\n xfs: constify the buffer pointer arguments to error functions\n xfs: convert EIO to EFSCORRUPTED when log contents are invalid\n xfs: Fix deadlock between AGI and AGF when target_ip exists in xfs_rename()\n xfs: attach dquots and reserve quota blocks during unwritten conversion\n xfs: range check ri_cnt when recovering log items\n xfs: add missing assert in xfs_fsmap_owner_from_rmap\n xfs: slightly tweak an assert in xfs_fs_map_blocks\n xfs: replace -EIO with -EFSCORRUPTED for corrupt metadata\n ext4: fix bug in extents parsing when eh_entries \u003d\u003d 0 and eh_depth \u003e 0\n workqueue: don\u0027t skip lockdep work dependency in cancel_work_sync()\n drm/rockchip: Fix return type of cdn_dp_connector_mode_valid\n drm/amd/display: Limit user regamma to a valid value\n drm/amdgpu: use dirty framebuffer helper\n Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region\n cifs: always initialize struct msghdr smb_msg completely\n usb: xhci-mtk: fix issue of out-of-bounds array access\n s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup\n serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting\n serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting\n serial: Create uart_xmit_advance()\n net: sched: fix possible refcount leak in tc_new_tfilter()\n net: sunhme: Fix packet reception for len \u003c RX_COPY_THRESHOLD\n perf kcore_copy: Do not check /proc/modules is unchanged\n perf jit: Include program header in ELF files\n can: gs_usb: gs_can_open(): fix race dev-\u003ecan.state condition\n netfilter: ebtables: fix memory leak when blob is malformed\n net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs\n net/sched: taprio: avoid disabling offload when it was never enabled\n of: mdio: Add of_node_put() when breaking out of for_each_xx\n i40e: Fix set max_tx_rate when it is lower than 1 Mbps\n i40e: Fix VF set max MTU size\n iavf: Fix set max MTU size with port VLAN and jumbo frames\n iavf: Fix bad page state\n MIPS: Loongson32: Fix PHY-mode being left unspecified\n MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko\n net: team: Unsync device addresses on ndo_stop\n ipvlan: Fix out-of-bound bugs caused by unset skb-\u003emac_header\n iavf: Fix cached head and tail value for iavf_get_tx_pending\n netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find()\n netfilter: nf_conntrack_irc: Tighten matching on DCC message\n netfilter: nf_conntrack_sip: fix ct_sip_walk_headers\n arm64: dts: rockchip: Remove \u0027enable-active-low\u0027 from rk3399-puma\n arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz\n arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob\n mm/slub: fix to return errno if kmalloc() fails\n efi: libstub: check Shim mode using MokSBStateRT\n ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop\n ALSA: hda/realtek: Add quirk for ASUS GA503R laptop\n ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack\n ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack\n ALSA: hda/realtek: Re-arrange quirk table entries\n ALSA: hda/realtek: Add quirk for Huawei WRT-WX9\n ALSA: hda: add Intel 5 Series / 3400 PCI DID\n ALSA: hda/tegra: set depop delay for tegra\n USB: serial: option: add Quectel RM520N\n USB: serial: option: add Quectel BG95 0x0203 composition\n USB: core: Fix RST error in hub.c\n Revert \"usb: gadget: udc-xilinx: replace memcpy with memcpy_toio\"\n Revert \"usb: add quirks for Lenovo OneLink+ Dock\"\n usb: cdns3: fix issue with rearming ISO OUT endpoint\n usb: gadget: udc-xilinx: replace memcpy with memcpy_toio\n usb: add quirks for Lenovo OneLink+ Dock\n tty: serial: atmel: Preserve previous USART mode if RS485 disabled\n serial: atmel: remove redundant assignment in rs485_config\n tty/serial: atmel: RS485 \u0026 ISO7816: wait for TXRDY before sending data\n wifi: mac80211: Fix UAF in ieee80211_scan_rx()\n usb: xhci-mtk: relax TT periodic bandwidth allocation\n usb: xhci-mtk: allow multiple Start-Split in a microframe\n usb: xhci-mtk: add some schedule error number\n usb: xhci-mtk: add a function to (un)load bandwidth info\n usb: xhci-mtk: use @sch_tt to check whether need do TT schedule\n usb: xhci-mtk: add only one extra CS for FS/LS INTR\n usb: xhci-mtk: get the microframe boundary for ESIT\n usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop\n usb: dwc3: gadget: Don\u0027t modify GEVNTCOUNT in pullup()\n usb: dwc3: gadget: Refactor pullup()\n usb: dwc3: gadget: Prevent repeat pullup()\n usb: dwc3: Issue core soft reset before enabling run/stop\n usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind\n ALSA: hda/sigmatel: Fix unused variable warning for beep power change\n cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()\n video: fbdev: pxa3xx-gcu: Fix integer overflow in pxa3xx_gcu_write\n mksysmap: Fix the mismatch of \u0027L0\u0027 symbols in System.map\n MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()\n afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked\n net: usb: qmi_wwan: add Quectel RM520N\n ALSA: hda/tegra: Align BDL entry to 4KB boundary\n ALSA: hda/sigmatel: Keep power up while beep is enabled\n rxrpc: Fix calc of resend age\n rxrpc: Fix local destruction being repeated\n regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()\n ASoC: nau8824: Fix semaphore unbalance at error paths\n iomap: iomap that extends beyond EOF should be marked dirty\n MAINTAINERS: add Chandan as xfs maintainer for 5.4.y\n cifs: don\u0027t send down the destination address to sendmsg for a SOCK_STREAM\n cifs: revalidate mapping when doing direct writes\n tracing: hold caller_addr to hardirq_{enable,disable}_ip\n task_stack, x86/cea: Force-inline stack helpers\n ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC\n parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()\n drm/meson: Fix OSD1 RGB to YCbCr coefficient\n drm/meson: Correct OSD1 global alpha value\n gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx\n NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0\n of: fdt: fix off-by-one error in unflatten_dt_nodes()\n Revert \"USB: core: Prevent nested device-reset calls\"\n Revert \"io_uring: disable polling pollfree files\"\n Revert \"netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y\"\n Revert \"sched/deadline: Fix priority inheritance with multiple scheduling classes\"\n Revert \"kernel/sched: Remove dl_boosted flag comment\"\n Revert \"mm/rmap: Fix anon_vma-\u003edegree ambiguity leading to double-reuse\"\n Revert \"fs: check FMODE_LSEEK to control internal pipe splicing\"\n Linux 5.4.214\n tracefs: Only clobber mode/uid/gid on remount if asked\n soc: fsl: select FSL_GUTS driver for DPIO\n net: dp83822: disable rx error interrupt\n mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()\n usb: storage: Add ASUS \u003c0x0b05:0x1932\u003e to IGNORE_UAS\n platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes\n perf/arm_pmu_platform: fix tests for platform_get_irq() failure\n nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()\n Input: iforce - add support for Boeder Force Feedback Wheel\n ieee802154: cc2520: add rc code in cc2520_tx()\n tg3: Disable tg3 device on system reboot to avoid triggering AER\n hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message\n HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo\n drm/msm/rd: Fix FIFO-full deadlock\n Linux 5.4.213\n MIPS: loongson32: ls1c: Fix hang during startup\n x86/nospec: Fix i386 RSB stuffing\n sch_sfb: Also store skb len before calling child enqueue\n tcp: fix early ETIMEDOUT after spurious non-SACK RTO\n nvme-tcp: fix UAF when detecting digest errors\n RDMA/mlx5: Set local port to one when accessing counters\n ipv6: sr: fix out-of-bounds read when setting HMAC data.\n RDMA/siw: Pass a pointer to virt_to_page()\n i40e: Fix kernel crash during module removal\n tipc: fix shift wrapping bug in map_get()\n sch_sfb: Don\u0027t assume the skb is still around after enqueueing to child\n afs: Use the operation issue time instead of the reply time for callbacks\n rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()\n netfilter: nf_conntrack_irc: Fix forged IP logic\n netfilter: br_netfilter: Drop dst references before setting.\n RDMA/hns: Fix supported page size\n soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs\n RDMA/cma: Fix arguments order in net device validation\n regulator: core: Clean up on enable failure\n ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node\n smb3: missing inode locks in punch hole\n cgroup: Fix threadgroup_rwsem \u003c-\u003e cpus_read_lock() deadlock\n cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree\n cgroup: Optimize single thread migration\n scsi: lpfc: Add missing destroy_workqueue() in error path\n scsi: mpt3sas: Fix use-after-free warning\n nvmet: fix a use-after-free\n debugfs: add debugfs_lookup_and_remove()\n kprobes: Prohibit probes in gate area\n ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()\n ALSA: aloop: Fix random zeros in capture data when using jiffies timer\n ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()\n drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly\n fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()\n arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level\n parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines\n parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()\n drm/radeon: add a force flush to delay work when radeon\n drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.\n drm/gem: Fix GEM handle release errors\n scsi: megaraid_sas: Fix double kfree()\n USB: serial: ch341: fix disabled rx timer on older devices\n USB: serial: ch341: fix lost character on LCR updates\n usb: dwc3: disable USB core PHY management\n usb: dwc3: fix PHY disable sequence\n btrfs: harden identification of a stale device\n drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk\n ALSA: seq: Fix data-race at module auto-loading\n ALSA: seq: oss: Fix data-race for max_midi_devs access\n net: mac802154: Fix a condition in the receive path\n ip: fix triggering of \u0027icmp redirect\u0027\n wifi: mac80211: Don\u0027t finalize CSA in IBSS mode if state is disconnected\n driver core: Don\u0027t probe devices after bus_type.match() probe deferral\n usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS\n USB: core: Prevent nested device-reset calls\n s390: fix nospec table alignments\n s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages\n usb-storage: Add ignore-residue quirk for NXP PN7462AU\n USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)\n usb: dwc2: fix wrong order of phy_power_on and phy_init\n usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles\n USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode\n USB: serial: option: add Quectel EM060K modem\n USB: serial: option: add support for OPPO R11 diag port\n USB: serial: cp210x: add Decagon UCA device id\n xhci: Add grace period after xHC start to prevent premature runtime suspend.\n thunderbolt: Use the actual buffer in tb_async_error()\n gpio: pca953x: Add mutex_lock for regcache sync in PM\n hwmon: (gpio-fan) Fix array out of bounds access\n clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate\n Input: rk805-pwrkey - fix module autoloading\n clk: core: Fix runtime PM sequence in clk_core_unprepare()\n Revert \"clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops\"\n clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops\n drm/i915/reg: Fix spelling mistake \"Unsupport\" -\u003e \"Unsupported\"\n usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup\n binder: fix UAF of ref-\u003eproc caused by race condition\n USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id\n misc: fastrpc: fix memory corruption on open\n misc: fastrpc: fix memory corruption on probe\n iio: adc: mcp3911: use correct formula for AD conversion\n Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag\n tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete\n vt: Clear selection before changing the font\n powerpc: align syscall table for ppc32\n staging: rtl8712: fix use after free bugs\n serial: fsl_lpuart: RS485 RTS polariy is inverse\n net/smc: Remove redundant refcount increase\n Revert \"sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb\"\n tcp: annotate data-race around challenge_timestamp\n sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb\n kcm: fix strp_init() order and cleanup\n ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler\n net: sched: tbf: don\u0027t call qdisc_put() while holding tree lock\n Revert \"xhci: turn off port power in shutdown\"\n wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()\n ieee802154/adf7242: defer destroy_workqueue call\n iio: adc: mcp3911: make use of the sign bit\n platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask\n drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg\n drm/msm/dsi: fix the inconsistent indenting\n net: dp83822: disable false carrier interrupt\n Revert \"mm: kmemleak: take a full lowmem check in kmemleak_*_phys()\"\n fs: only do a memory barrier for the first set_buffer_uptodate()\n net: mvpp2: debugfs: fix memory leak when using debugfs_lookup()\n wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()\n efi: capsule-loader: Fix use-after-free in efi_capsule_write\n Linux 5.4.212\n net: neigh: don\u0027t call kfree_skb() under spin_lock_irqsave()\n net/af_packet: check len when min_header_len equals to 0\n io_uring: disable polling pollfree files\n kprobes: don\u0027t call disarm_kprobe() for disabled kprobes\n lib/vdso: Mark do_hres() and do_coarse() as __always_inline\n lib/vdso: Let do_coarse() return 0 to simplify the callsite\n btrfs: tree-checker: check for overlapping extent items\n netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y\n drm/amd/display: Fix pixel clock programming\n s390/hypfs: avoid error message under KVM\n neigh: fix possible DoS due to net iface start/stop loop\n drm/amd/display: clear optc underflow before turn off odm clock\n drm/amd/display: Avoid MPC infinite loop\n btrfs: unify lookup return value when dir entry is missing\n btrfs: do not pin logs too early during renames\n btrfs: introduce btrfs_lookup_match_dir\n mm/rmap: Fix anon_vma-\u003edegree ambiguity leading to double-reuse\n bpf: Don\u0027t redirect packets with invalid pkt_len\n ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead\n fbdev: fb_pm2fb: Avoid potential divide by zero error\n HID: hidraw: fix memory leak in hidraw_release()\n media: pvrusb2: fix memory leak in pvr_probe\n udmabuf: Set the DMA mask for the udmabuf device (v2)\n HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report\n Bluetooth: L2CAP: Fix build errors in some archs\n kbuild: Fix include path in scripts/Makefile.modpost\n x86/bugs: Add \"unknown\" reporting for MMIO Stale Data\n s390/mm: do not trigger write fault when vma does not allow VM_WRITE\n mm: Force TLB flush for PFNMAP mappings before unlink_file_vma()\n scsi: storvsc: Remove WQ_MEM_RECLAIM from storvsc_error_wq\n perf/x86/intel/uncore: Fix broken read_counter() for SNB IMC PMU\n md: call __md_stop_writes in md_stop\n mm/hugetlb: fix hugetlb not supporting softdirty tracking\n ACPI: processor: Remove freq Qos request for all CPUs\n s390: fix double free of GS and RI CBs on fork() failure\n asm-generic: sections: refactor memory_intersects\n loop: Check for overflow while configuring loop\n x86/unwind/orc: Unwind ftrace trampolines with correct ORC entry\n btrfs: check if root is readonly while setting security xattr\n btrfs: add info when mount fails due to stale replace target\n btrfs: replace: drop assert for suspended replace\n btrfs: fix silent failure when deleting root reference\n ixgbe: stop resetting SYSTIME in ixgbe_ptp_start_cyclecounter\n net: Fix a data-race around sysctl_somaxconn.\n net: Fix a data-race around netdev_budget_usecs.\n net: Fix a data-race around netdev_budget.\n net: Fix a data-race around sysctl_net_busy_read.\n net: Fix a data-race around sysctl_net_busy_poll.\n net: Fix a data-race around sysctl_tstamp_allow_data.\n ratelimit: Fix data-races in ___ratelimit().\n net: Fix data-races around netdev_tstamp_prequeue.\n net: Fix data-races around weight_p and dev_weight_[rt]x_bias.\n netfilter: nft_tunnel: restrict it to netdev family\n netfilter: nft_osf: restrict osf to ipv4, ipv6 and inet families\n netfilter: nft_payload: do not truncate csum_offset and csum_type\n netfilter: nft_payload: report ERANGE for too long offset and length\n bnxt_en: fix NQ resource accounting during vf creation on 57500 chips\n netfilter: ebtables: reject blobs that don\u0027t provide all entry points\n net: ipvtap - add __init/__exit annotations to module init/exit funcs\n bonding: 802.3ad: fix no transmission of LACPDUs\n net: moxa: get rid of asymmetry in DMA mapping/unmapping\n net/mlx5e: Properly disable vlan strip on non-UL reps\n rose: check NULL rose_loopback_neigh-\u003eloopback\n SUNRPC: RPC level errors should set task-\u003etk_rpc_status\n af_key: Do not call xfrm_probe_algs in parallel\n xfrm: fix refcount leak in __xfrm_policy_check()\n kernel/sched: Remove dl_boosted flag comment\n sched/deadline: Fix priority inheritance with multiple scheduling classes\n sched/deadline: Fix stale throttling on de-/boosted tasks\n sched/deadline: Unthrottle PI boosted threads while enqueuing\n pinctrl: amd: Don\u0027t save/restore interrupt status and wake status bits\n Revert \"selftests/bpf: Fix test_align verifier log patterns\"\n Revert \"selftests/bpf: Fix \"dubious pointer arithmetic\" test\"\n usb: cdns3: Fix issue for clear halt endpoint\n kernel/sys_ni: add compat entry for fadvise64_64\n parisc: Fix exception handler for fldw and fstw instructions\n audit: fix potential double free on error path from fsnotify_add_inode_mark\n Revert \"USB: HCD: Fix URB giveback issue in tasklet function\"\n Linux 5.4.211\n btrfs: raid56: don\u0027t trust any cached sector in __raid56_parity_recover()\n btrfs: only write the sectors in the vertical stripe which has data stripes\n can: j1939: j1939_session_destroy(): fix memory leak of skbs\n can: j1939: j1939_sk_queue_activate_next_locked(): replace WARN_ON_ONCE with netdev_warn_once()\n tracing/probes: Have kprobes and uprobes use $COMM too\n MIPS: tlbex: Explicitly compare _PAGE_NO_EXEC against 0\n video: fbdev: i740fb: Check the argument of i740_calc_vclk()\n powerpc/64: Init jump labels before parse_early_param()\n smb3: check xattr value length earlier\n f2fs: fix to avoid use f2fs_bug_on() in f2fs_new_node_page()\n ALSA: timer: Use deferred fasync helper\n ALSA: core: Add async signal helpers\n powerpc/32: Don\u0027t always pass -mcpu\u003dpowerpc to the compiler\n watchdog: export lockup_detector_reconfigure\n RISC-V: Add fast call path of crash_kexec()\n riscv: mmap with PROT_WRITE but no PROT_READ is invalid\n mips: cavium-octeon: Fix missing of_node_put() in octeon2_usb_clocks_start\n vfio: Clear the caps-\u003ebuf to NULL after free\n tty: serial: Fix refcount leak bug in ucc_uart.c\n lib/list_debug.c: Detect uninitialized lists\n ext4: avoid resizing to a partial cluster size\n ext4: avoid remove directory when directory is corrupted\n drivers:md:fix a potential use-after-free bug\n nvmet-tcp: fix lockdep complaint on nvmet_tcp_wq flush during queue teardown\n dmaengine: sprd: Cleanup in .remove() after pm_runtime_get_sync() failed\n selftests/kprobe: Do not test for GRP/ without event failures\n um: add \"noreboot\" command line option for PANIC_TIMEOUT\u003d-1 setups\n PCI/ACPI: Guard ARM64-specific mcfg_quirks\n cxl: Fix a memory leak in an error handling path\n gadgetfs: ep_io - wait until IRQ finishes\n scsi: lpfc: Prevent buffer overflow crashes in debugfs with malformed user input\n clk: qcom: ipq8074: dont disable gcc_sleep_clk_src\n vboxguest: Do not use devm for irq\n usb: renesas: Fix refcount leak bug\n usb: host: ohci-ppc-of: Fix refcount leak bug\n drm/meson: Fix overflow implicit truncation warnings\n irqchip/tegra: Fix overflow implicit truncation warnings\n usb: gadget: uvc: call uvc uvcg_warn on completed status instead of uvcg_info\n usb: cdns3 fix use-after-free at workaround 2\n PCI: Add ACS quirk for Broadcom BCM5750x NICs\n drm/meson: Fix refcount bugs in meson_vpu_has_available_connectors()\n locking/atomic: Make test_and_*_bit() ordered on failure\n gcc-plugins: Undefine LATENT_ENTROPY_PLUGIN when plugin disabled for a file\n igb: Add lock to avoid data race\n fec: Fix timer capture timing in `fec_ptp_enable_pps()`\n i40e: Fix to stop tx_timeout recovery if GLOBR fails\n ice: Ignore EEXIST when setting promisc mode\n net: dsa: microchip: ksz9477: fix fdb_dump last invalid entry\n net: moxa: pass pdev instead of ndev to DMA functions\n net: dsa: mv88e6060: prevent crash on an unused port\n powerpc/pci: Fix get_phb_number() locking\n netfilter: nf_tables: really skip inactive sets when allocating name\n clk: rockchip: add sclk_mac_lbtest to rk3188_critical_clocks\n iavf: Fix adminq error handling\n nios2: add force_successful_syscall_return()\n nios2: restarts apply only to the first sigframe we build...\n nios2: fix syscall restart checks\n nios2: traced syscall does need to check the syscall number\n nios2: don\u0027t leave NULLs in sys_call_table[]\n nios2: page fault et.al. are *not* restartable syscalls...\n tee: add overflow check in register_shm_helper()\n dpaa2-eth: trace the allocated address instead of page struct\n atm: idt77252: fix use-after-free bugs caused by tst_timer\n xen/xenbus: fix return type in xenbus_file_read()\n nfp: ethtool: fix the display error of `ethtool -m DEVNAME`\n NTB: ntb_tool: uninitialized heap data in tool_fn_write()\n tools build: Switch to new openssl API for test-libcrypto\n tools/vm/slabinfo: use alphabetic order when two values are equal\n dt-bindings: arm: qcom: fix MSM8916 MTP compatibles\n vsock: Set socket state back to SS_UNCONNECTED in vsock_connect_timeout()\n vsock: Fix memory leak in vsock_connect()\n plip: avoid rcu debug splat\n geneve: do not use RT_TOS for IPv6 flowlabel\n ACPI: property: Return type of acpi_add_nondev_subnodes() should be bool\n pinctrl: sunxi: Add I/O bias setting for H6 R-PIO\n pinctrl: qcom: msm8916: Allow CAMSS GP clocks to be muxed\n pinctrl: nomadik: Fix refcount leak in nmk_pinctrl_dt_subnode_to_map\n net: bgmac: Fix a BUG triggered by wrong bytes_compl\n devlink: Fix use-after-free after a failed reload\n SUNRPC: Reinitialise the backchannel request buffers before reuse\n sunrpc: fix expiry of auth creds\n can: mcp251x: Fix race condition on receive interrupt\n NFSv4/pnfs: Fix a use-after-free bug in open\n NFSv4.1: RECLAIM_COMPLETE must handle EACCES\n NFSv4: Fix races in the legacy idmapper upcall\n NFSv4.1: Handle NFS4ERR_DELAY replies to OP_SEQUENCE correctly\n NFSv4.1: Don\u0027t decrease the value of seq_nr_highest_sent\n Documentation: ACPI: EINJ: Fix obsolete example\n apparmor: Fix memleak in aa_simple_write_to_buffer()\n apparmor: fix reference count leak in aa_pivotroot()\n apparmor: fix overlapping attachment computation\n apparmor: fix aa_label_asxprint return check\n apparmor: Fix failed mount permission check error message\n apparmor: fix absroot causing audited secids to begin with \u003d\n apparmor: fix quiet_denied for file rules\n can: ems_usb: fix clang\u0027s -Wunaligned-access warning\n tracing: Have filter accept \"common_cpu\" to be consistent\n btrfs: fix lost error handling when looking up extended ref on log replay\n mmc: pxamci: Fix an error handling path in pxamci_probe()\n mmc: pxamci: Fix another error handling path in pxamci_probe()\n ata: libata-eh: Add missing command name\n rds: add missing barrier to release_refill\n ALSA: info: Fix llseek return value when using callback\n net_sched: cls_route: disallow handle of 0\n net/9p: Initialize the iounit field during fid creation\n Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm regression\n Revert \"net: usb: ax88179_178a needs FLAG_SEND_ZLP\"\n scsi: sg: Allow waiting for commands to complete on removed device\n tcp: fix over estimation in sk_forced_mem_schedule()\n KVM: x86: Avoid theoretical NULL pointer dereference in kvm_irq_delivery_to_apic_fast()\n KVM: x86: Check lapic_in_kernel() before attempting to set a SynIC irq\n KVM: Add infrastructure and macro to mark VM as bugged\n btrfs: reject log replay if there is unsupported RO compat flag\n net_sched: cls_route: remove from list when handle is 0\n iommu/vt-d: avoid invalid memory access via node_online(NUMA_NO_NODE)\n firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails\n timekeeping: contribute wall clock to rng on time change\n ACPI: CPPC: Do not prevent CPPC from working in the future\n dm writecache: set a default MAX_WRITEBACK_JOBS\n dm thin: fix use-after-free crash in dm_sm_register_threshold_callback\n dm raid: fix address sanitizer warning in raid_status\n dm raid: fix address sanitizer warning in raid_resume\n intel_th: pci: Add Meteor Lake-P support\n intel_th: pci: Add Raptor Lake-S PCH support\n intel_th: pci: Add Raptor Lake-S CPU support\n ext4: correct the misjudgment in ext4_iget_extra_inode\n ext4: correct max_inline_xattr_value_size computing\n ext4: fix extent status tree race in writeback error recovery path\n ext4: update s_overhead_clusters in the superblock during an on-line resize\n ext4: fix use-after-free in ext4_xattr_set_entry\n ext4: make sure ext4_append() always allocates new block\n ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h\n btrfs: reset block group chunk force if we have to wait\n tpm: eventlog: Fix section mismatch for DEBUG_SECTION_MISMATCH\n kexec, KEYS, s390: Make use of built-in and secondary keyring for signature verification\n spmi: trace: fix stack-out-of-bound access in SPMI tracing functions\n x86/olpc: fix \u0027logical not is only applied to the left hand side\u0027\n scsi: qla2xxx: Fix erroneous mailbox timeout after PCI error injection\n scsi: qla2xxx: Turn off multi-queue for 8G adapters\n scsi: qla2xxx: Fix discovery issues in FC-AL topology\n scsi: zfcp: Fix missing auto port scan and thus missing target ports\n video: fbdev: s3fb: Check the size of screen before memset_io()\n video: fbdev: arkfb: Check the size of screen before memset_io()\n video: fbdev: vt8623fb: Check the size of screen before memset_io()\n tools/thermal: Fix possible path truncations\n video: fbdev: arkfb: Fix a divide-by-zero bug in ark_set_pixclock()\n x86/numa: Use cpumask_available instead of hardcoded NULL check\n scripts/faddr2line: Fix vmlinux detection on arm64\n genelf: Use HAVE_LIBCRYPTO_SUPPORT, not the never defined HAVE_LIBCRYPTO\n powerpc/pci: Fix PHB numbering when using opal-phbid\n kprobes: Forbid probing on trampoline and BPF code areas\n perf symbol: Fail to read phdr workaround\n powerpc/cell/axon_msi: Fix refcount leak in setup_msi_msg_address\n powerpc/xive: Fix refcount leak in xive_get_max_prio\n powerpc/spufs: Fix refcount leak in spufs_init_isolated_loader\n powerpc/pci: Prefer PCI domain assignment via DT \u0027linux,pci-domain\u0027 and alias\n powerpc/32: Do not allow selection of e5500 or e6500 CPUs on PPC32\n video: fbdev: sis: fix typos in SiS_GetModeID()\n video: fbdev: amba-clcd: Fix refcount leak bugs\n watchdog: armada_37xx_wdt: check the return value of devm_ioremap() in armada_37xx_wdt_probe()\n ASoC: audio-graph-card: Add of_node_put() in fail path\n fuse: Remove the control interface for virtio-fs\n ASoC: qcom: q6dsp: Fix an off-by-one in q6adm_alloc_copp()\n s390/zcore: fix race when reading from hardware system area\n iommu/arm-smmu: qcom_iommu: Add of_node_put() when breaking out of loop\n mfd: max77620: Fix refcount leak in max77620_initialise_fps\n mfd: t7l66xb: Drop platform disable callback\n kfifo: fix kfifo_to_user() return type\n rpmsg: qcom_smd: Fix refcount leak in qcom_smd_parse_edge\n iommu/exynos: Handle failed IOMMU device registration properly\n tty: n_gsm: fix missing corner cases in gsmld_poll()\n tty: n_gsm: fix DM command\n tty: n_gsm: fix wrong T1 retry count handling\n vfio/ccw: Do not change FSM state in subchannel event\n remoteproc: qcom: wcnss: Fix handling of IRQs\n tty: n_gsm: fix race condition in gsmld_write()\n tty: n_gsm: fix packet re-transmission without open control channel\n tty: n_gsm: fix non flow control frames during mux flow off\n profiling: fix shift too large makes kernel panic\n ASoC: codecs: wcd9335: move gains from SX_TLV to S8_TLV\n ASoC: codecs: msm8916-wcd-digital: move gains from SX_TLV to S8_TLV\n serial: 8250_dw: Store LSR into lsr_saved_flags in dw8250_tx_wait_empty()\n ASoC: mediatek: mt8173-rt5650: Fix refcount leak in mt8173_rt5650_dev_probe\n ASoC: codecs: da7210: add check for i2c_add_driver\n ASoC: mt6797-mt6351: Fix refcount leak in mt6797_mt6351_dev_probe\n ASoC: mediatek: mt8173: Fix refcount leak in mt8173_rt5650_rt5676_dev_probe\n opp: Fix error check in dev_pm_opp_attach_genpd()\n jbd2: fix assertion \u0027jh-\u003eb_frozen_data \u003d\u003d NULL\u0027 failure when journal aborted\n ext4: recover csum seed of tmp_inode after migrating to extents\n jbd2: fix outstanding credits assert in jbd2_journal_commit_transaction()\n null_blk: fix ida error handling in null_add_dev()\n RDMA/rxe: Fix error unwind in rxe_create_qp()\n mm/mmap.c: fix missing call to vm_unacct_memory in mmap_region\n platform/olpc: Fix uninitialized data in debugfs write\n USB: serial: fix tty-port initialized comments\n PCI: tegra194: Fix link up retry sequence\n PCI: tegra194: Fix Root Port interrupt handling\n HID: alps: Declare U1_UNICORN_LEGACY support\n mmc: cavium-thunderx: Add of_node_put() when breaking out of loop\n mmc: cavium-octeon: Add of_node_put() when breaking out of loop\n gpio: gpiolib-of: Fix refcount bugs in of_mm_gpiochip_add_data()\n RDMA/hfi1: fix potential memory leak in setup_base_ctxt()\n RDMA/siw: Fix duplicated reported IW_CM_EVENT_CONNECT_REPLY event\n RDMA/hns: Fix incorrect clearing of interrupt status register\n usb: gadget: udc: amd5536 depends on HAS_DMA\n scsi: smartpqi: Fix DMA direction for RAID requests\n mmc: sdhci-of-at91: fix set_uhs_signaling rewriting of MC1R\n memstick/ms_block: Fix a memory leak\n memstick/ms_block: Fix some incorrect memory allocation\n mmc: sdhci-of-esdhc: Fix refcount leak in esdhc_signal_voltage_switch\n staging: rtl8192u: Fix sleep in atomic context bug in dm_fsync_timer_callback\n intel_th: msu: Fix vmalloced buffers\n intel_th: msu-sink: Potential dereference of null pointer\n intel_th: Fix a resource leak in an error handling path\n soundwire: bus_type: fix remove and shutdown support\n clk: qcom: camcc-sdm845: Fix topology around titan_top power domain\n clk: qcom: ipq8074: set BRANCH_HALT_DELAY flag for UBI clocks\n clk: qcom: ipq8074: fix NSS port frequency tables\n usb: host: xhci: use snprintf() in xhci_decode_trb()\n clk: qcom: clk-krait: unlock spin after mux completion\n driver core: fix potential deadlock in __driver_attach\n misc: rtsx: Fix an error handling path in rtsx_pci_probe()\n clk: mediatek: reset: Fix written reset bit offset\n usb: xhci: tegra: Fix error check\n usb: ohci-nxp: Fix refcount leak in ohci_hcd_nxp_probe\n usb: host: Fix refcount leak in ehci_hcd_ppc_of_probe\n fpga: altera-pr-ip: fix unsigned comparison with less than zero\n mtd: st_spi_fsm: Add a clk_disable_unprepare() in .probe()\u0027s error path\n mtd: partitions: Fix refcount leak in parse_redboot_of\n mtd: sm_ftl: Fix deadlock caused by cancel_work_sync in sm_release\n HID: cp2112: prevent a buffer overflow in cp2112_xfer()\n mtd: rawnand: meson: Fix a potential double free issue\n mtd: maps: Fix refcount leak in ap_flash_init\n mtd: maps: Fix refcount leak in of_flash_probe_versatile\n clk: renesas: r9a06g032: Fix UART clkgrp bitsel\n dccp: put dccp_qpolicy_full() and dccp_qpolicy_push() in the same lock\n net: rose: fix netdev reference changes\n netdevsim: Avoid allocation warnings triggered from user space\n iavf: Fix max_rate limiting\n crypto: inside-secure - Add missing MODULE_DEVICE_TABLE for of\n net/mlx5e: Fix the value of MLX5E_MAX_RQ_NUM_MTTS\n wifi: libertas: Fix possible refcount leak in if_usb_probe()\n wifi: iwlwifi: mvm: fix double list_add at iwl_mvm_mac_wake_tx_queue\n wifi: wil6210: debugfs: fix uninitialized variable use in `wil_write_file_wmi()`\n i2c: mux-gpmux: Add of_node_put() when breaking out of loop\n i2c: cadence: Support PEC for SMBus block read\n Bluetooth: hci_intel: Add check for platform_driver_register\n can: pch_can: pch_can_error(): initialize errc before using it\n can: error: specify the values of data[5..7] of CAN error frames\n can: usb_8dev: do not report txerr and rxerr during bus-off\n can: kvaser_usb_leaf: do not report txerr and rxerr during bus-off\n can: kvaser_usb_hydra: do not report txerr and rxerr during bus-off\n can: sun4i_can: do not report txerr and rxerr during bus-off\n can: hi311x: do not report txerr and rxerr during bus-off\n can: sja1000: do not report txerr and rxerr during bus-off\n can: rcar_can: do not report txerr and rxerr during bus-off\n can: pch_can: do not report txerr and rxerr during bus-off\n selftests/bpf: fix a test for snprintf() overflow\n wifi: p54: add missing parentheses in p54_flush()\n wifi: p54: Fix an error handling path in p54spi_probe()\n wifi: wil6210: debugfs: fix info leak in wil_write_file_wmi()\n fs: check FMODE_LSEEK to control internal pipe splicing\n selftests: timers: clocksource-switch: fix passing errors from child\n selftests: timers: valid-adjtimex: build fix for newer toolchains\n libbpf: Fix the name of a reused map\n tcp: make retransmitted SKB fit into the send window\n drm/exynos/exynos7_drm_decon: free resources when clk_set_parent() failed.\n mediatek: mt76: mac80211: Fix missing of_node_put() in mt76_led_init()\n media: platform: mtk-mdp: Fix mdp_ipi_comm structure alignment\n crypto: hisilicon - Kunpeng916 crypto driver don\u0027t sleep when in softirq\n drm/msm/mdp5: Fix global state lock backoff\n drm: bridge: sii8620: fix possible off-by-one\n drm/mediatek: dpi: Only enable dpi after the bridge is enabled\n drm/mediatek: dpi: Remove output format of YUV\n drm/rockchip: Fix an error handling path rockchip_dp_probe()\n drm/rockchip: vop: Don\u0027t crash for invalid duplicate_state()\n crypto: arm64/gcm - Select AEAD for GHASH_ARM64_CE\n drm/vc4: dsi: Correct DSI divider calculations\n drm/vc4: plane: Fix margin calculations for the right/bottom edges\n drm/vc4: plane: Remove subpixel positioning check\n media: hdpvr: fix error value returns in hdpvr_read\n drm/mcde: Fix refcount leak in mcde_dsi_bind\n drm: bridge: adv7511: Add check for mipi_dsi_driver_register\n wifi: iwlegacy: 4965: fix potential off-by-one overflow in il4965_rs_fill_link_cmd()\n ath9k: fix use-after-free in ath9k_hif_usb_rx_cb\n media: tw686x: Register the irq at the end of probe\n i2c: Fix a potential use after free\n drm: adv7511: override i2c address of cec before accessing it\n drm/mediatek: Add pull-down MIPI operation in mtk_dsi_poweroff function\n drm/radeon: fix potential buffer overflow in ni_set_mc_special_registers()\n drm/mipi-dbi: align max_chunk to 2 in spi_transfer\n wifi: rtlwifi: fix error codes in rtl_debugfs_set_write_h2c()\n ath10k: do not enforce interrupt trigger type\n dm: return early from dm_pr_call() if DM device is suspended\n thermal/tools/tmon: Include pthread and time headers in tmon.h\n nohz/full, sched/rt: Fix missed tick-reenabling bug in dequeue_task_rt()\n regulator: of: Fix refcount leak bug in of_get_regulation_constraints()\n blk-mq: don\u0027t create hctx debugfs dir until q-\u003edebugfs_dir is created\n erofs: avoid consecutive detection for Highmem memory\n arm64: dts: mt7622: fix BPI-R64 WPS button\n bus: hisi_lpc: fix missing platform_device_put() in hisi_lpc_acpi_probe()\n ARM: dts: qcom: pm8841: add required thermal-sensor-cells\n soc: qcom: aoss: Fix refcount leak in qmp_cooling_devices_register\n cpufreq: zynq: Fix refcount leak in zynq_get_revision\n ARM: OMAP2+: Fix refcount leak in omap3xxx_prm_late_init\n ARM: OMAP2+: Fix refcount leak in omapdss_init_of\n ARM: dts: qcom: mdm9615: add missing PMIC GPIO reg\n soc: fsl: guts: machine variable might be unset\n ARM: dts: ast2600-evb: fix board compatible\n ARM: dts: ast2500-evb: fix board compatible\n x86/pmem: Fix platform-device leak in error path\n ARM: bcm: Fix refcount leak in bcm_kona_smc_init\n meson-mx-socinfo: Fix refcount leak in meson_mx_socinfo_init\n ARM: findbit: fix overflowing offset\n spi: spi-rspi: Fix PIO fallback on RZ platforms\n selinux: Add boundary check in put_entry()\n PM: hibernate: defer device probing when resuming from hibernation\n ARM: shmobile: rcar-gen2: Increase refcount for new reference\n arm64: dts: allwinner: a64: orangepi-win: Fix LED node name\n arm64: dts: qcom: ipq8074: fix NAND node name\n ACPI: LPSS: Fix missing check in register_device_clock()\n ACPI: PM: save NVS memory for Lenovo G40-45\n ACPI: EC: Remove duplicate ThinkPad X1 Carbon 6th entry from DMI quirks\n ARM: OMAP2+: display: Fix refcount leak bug\n spi: synquacer: Add missing clk_disable_unprepare()\n ARM: dts: imx6ul: fix qspi node compatible\n ARM: dts: imx6ul: fix lcdif node compatible\n ARM: dts: imx6ul: fix csi node compatible\n ARM: dts: imx6ul: change operating-points to uint32-matrix\n ARM: dts: imx6ul: add missing properties for sram\n wait: Fix __wait_event_hrtimeout for RT/DL tasks\n genirq: Don\u0027t return error on missing optional irq_request_resources()\n ext2: Add more validity checks for inode counts\n arm64: fix oops in concurrently setting insn_emulation sysctls\n arm64: Do not forget syscall when starting a new thread.\n x86: Handle idle\u003dnomwait cmdline properly for x86_idle\n epoll: autoremove wakers even more aggressively\n netfilter: nf_tables: fix null deref due to zeroed list head\n netfilter: nf_tables: do not allow RULE_ID to refer to another chain\n netfilter: nf_tables: do not allow SET_ID to refer to another table\n arm64: dts: uniphier: Fix USB interrupts for PXs3 SoC\n ARM: dts: uniphier: Fix USB interrupts for PXs2 SoC\n USB: HCD: Fix URB giveback issue in tasklet function\n coresight: Clear the connection field properly\n MIPS: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK\n powerpc/powernv: Avoid crashing if rng is NULL\n powerpc/ptdump: Fix display of RW pages on FSL_BOOK3E\n powerpc/fsl-pci: Fix Class Code of PCIe Root Port\n PCI: Add defines for normal and subtractive PCI bridges\n ia64, processor: fix -Wincompatible-pointer-types in ia64_get_irr()\n md-raid10: fix KASAN warning\n serial: mvebu-uart: uart2 error bits clearing\n fuse: limit nsec\n iio: light: isl29028: Fix the warning in isl29028_remove()\n drm/amdgpu: Check BO\u0027s requested pinning domains against its preferred_domains\n drm/nouveau: fix another off-by-one in nvbios_addr\n drm/gem: Properly annotate WW context on drm_gem_lock_reservations() error\n parisc: io_pgetevents_time64() needs compat syscall in 32-bit compat mode\n parisc: Fix device names in /proc/iomem\n ovl: drop WARN_ON() dentry is NULL in ovl_encode_fh()\n usbnet: Fix linkwatch use-after-free on disconnect\n fbcon: Fix boundary checks for fbcon\u003dvc:n1-n2 parameters\n thermal: sysfs: Fix cooling_device_stats_setup() error code path\n fs: Add missing umask strip in vfs_tmpfile\n vfs: Check the truncate maximum size in inode_newsize_ok()\n tty: vt: initialize unicode screen buffer\n ALSA: hda/realtek: Add quirk for another Asus K42JZ model\n ALSA: hda/cirrus - support for iMac 12,1 model\n ALSA: hda/conexant: Add quirk for LENOVO 20149 Notebook model\n mm/mremap: hold the rmap lock in write mode when moving page table entries.\n KVM: x86: Set error code to segment selector on LLDT/LTR non-canonical #GP\n KVM: x86: Mark TSS busy during LTR emulation _after_ all fault checks\n KVM: nVMX: Let userspace set nVMX MSR to any _host_ supported value\n KVM: SVM: Don\u0027t BUG if userspace injects an interrupt with GIF\u003d0\n KVM: nVMX: Snapshot pre-VM-Enter DEBUGCTL for !nested_run_pending case\n KVM: nVMX: Snapshot pre-VM-Enter BNDCFGS for !nested_run_pending case\n HID: wacom: Don\u0027t register pad_input for touch switch\n HID: wacom: Only report rotation for art pen\n add barriers to buffer_uptodate and set_buffer_uptodate\n wifi: mac80211_hwsim: use 32-bit skb cookie\n wifi: mac80211_hwsim: add back erroneously removed cast\n wifi: mac80211_hwsim: fix race condition in pending packet\n igc: Remove _I_PHY_ID checking\n ALSA: bcd2000: Fix a UAF bug on the error path of probing\n scsi: Revert \"scsi: qla2xxx: Fix disk failure to rediscover\"\n x86: link vdso and boot with -z noexecstack --no-warn-rwx-segments\n Makefile: link with -z noexecstack --no-warn-rwx-segments\n\n Conflicts:\n\tDocumentation/devicetree/bindings\n\tDocumentation/devicetree/bindings/arm/qcom.yaml\n\tDocumentation/devicetree/bindings/dma/moxa,moxart-dma.txt\n\tdrivers/mmc/core/sd.c\n\tdrivers/net/usb/ax88179_178a.c\n\tdrivers/rpmsg/qcom_glink_native.c\n\tdrivers/usb/dwc3/core.c\n\tdrivers/usb/typec/ucsi/ucsi.c\n\tnet/core/dev.c\n\tnet/wireless/scan.c\n\nChange-Id: Id1996866ef5d9b7c097c39a5bdb00db413763104\nSigned-off-by: Srinivasarao Pathipati \u003cquic_c_spathi@quicinc.com\u003e\n" }, { "commit": "635c74d37de5e324ef3059e98af1759f2f07bf85", "tree": "46042466813c5d7168c2292df292f1f901f4baec", "parents": [ "dfdf3144ad3d8599faa385ab94b6cb4f81a2cd06", "20fb10aa4c3d5b265c54bfb07924d12695525d04" ], "author": { "name": "Michael Bestas", "email": "mkbestas@lineageos.org", "time": "Sat Dec 17 02:01:59 2022 +0200" }, "committer": { "name": "Michael Bestas", "email": "mkbestas@lineageos.org", "time": "Sat Dec 17 02:26:00 2022 +0200" }, "message": "Merge tag \u0027ASB-2022-12-05_11-5.4\u0027 of https://android.googlesource.com/kernel/common into android13-5.4-lahaina\n\nhttps://source.android.com/docs/security/bulletin/2022-12-01\nCVE-2022-23960\n\n* tag \u0027ASB-2022-12-05_11-5.4\u0027 of https://android.googlesource.com/kernel/common:\n UPSTREAM: bpf: Ensure correct locking around vulnerable function find_vpid()\n UPSTREAM: HID: roccat: Fix use-after-free in roccat_read()\n ANDROID: arm64: mm: perform clean \u0026 invalidation in __dma_map_area\n UPSTREAM: mmc: hsq: Fix data stomping during mmc recovery\n UPSTREAM: pinctrl: sunxi: Fix name for A100 R_PIO\n BACKPORT: mmc: core: Fix UHS-I SD 1.8V workaround branch\n UPSTREAM: Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm regression\n UPSTREAM: wifi: mac80211_hwsim: set virtio device ready in probe()\n BACKPORT: f2fs: don\u0027t use casefolded comparison for \".\" and \"..\"\n UPSTREAM: Revert \"mm/cma.c: remove redundant cma_mutex lock\"\n UPSTREAM: usb: dwc3: Try usb-role-switch first in dwc3_drd_init\n BACKPORT: usb: typec: ucsi: Fix reuse of completion structure\n BACKPORT: tipc: fix incorrect order of state message data sanity check\n UPSTREAM: net: fix up skbs delta_truesize in UDP GRO frag_list\n UPSTREAM: cgroup-v1: Correct privileges check in release_agent writes\n UPSTREAM: mm: don\u0027t try to NUMA-migrate COW pages that have other uses\n UPSTREAM: usb: raw-gadget: fix handling of dual-direction-capable endpoints\n UPSTREAM: selinux: check return value of sel_make_avc_files\n UPSTREAM: usb: musb: select GENERIC_PHY instead of depending on it\n BACKPORT: driver core: Fix error return code in really_probe()\n UPSTREAM: fscrypt: fix derivation of SipHash keys on big endian CPUs\n BACKPORT: fscrypt: rename FS_KEY_DERIVATION_NONCE_SIZE\n UPSTREAM: socionext: account for napi_gro_receive never returning GRO_DROP\n UPSTREAM: net: socionext: netsec: fix xdp stats accounting\n BACKPORT: fs: align IOCB_* flags with RWF_* flags\n UPSTREAM: efi: capsule-loader: Fix use-after-free in efi_capsule_write\n BACKPORT: ARM: 9039/1: assembler: generalize byte swapping macro into rev_l\n BACKPORT: ARM: 9035/1: uncompress: Add be32tocpu macro\n UPSTREAM: drm/meson: Fix overflow implicit truncation warnings\n UPSTREAM: irqchip/tegra: Fix overflow implicit truncation warnings\n UPSTREAM: video: fbdev: pxa3xx-gcu: Fix integer overflow in pxa3xx_gcu_write\n ANDROID: GKI: db845c: Update symbols list and ABI\n Linux 5.4.219\n wifi: mac80211: fix MBSSID parsing use-after-free\n wifi: mac80211: don\u0027t parse mbssid in assoc response\n mac80211: mlme: find auth challenge directly\n Revert \"fs: check FMODE_LSEEK to control internal pipe splicing\"\n Linux 5.4.218\n Input: xpad - fix wireless 360 controller breaking after suspend\n Input: xpad - add supported devices as contributed on github\n wifi: cfg80211: update hidden BSSes to avoid WARN_ON\n wifi: mac80211_hwsim: avoid mac80211 warning on bad rate\n wifi: cfg80211: avoid nontransmitted BSS list corruption\n wifi: cfg80211: fix BSS refcounting bugs\n wifi: cfg80211: ensure length byte is present before access\n wifi: cfg80211/mac80211: reject bad MBSSID elements\n wifi: cfg80211: fix u8 overflow in cfg80211_update_notlisted_nontrans()\n random: use expired timer rather than wq for mixing fast pool\n random: avoid reading two cache lines on irq randomness\n random: restore O_NONBLOCK support\n USB: serial: qcserial: add new usb-id for Dell branded EM7455\n scsi: stex: Properly zero out the passthrough command structure\n efi: Correct Macmini DMI match in uefi cert quirk\n ALSA: hda: Fix position reporting on Poulsbo\n random: clamp credited irq bits to maximum mixed\n ceph: don\u0027t truncate file in atomic_open\n nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure\n nilfs2: fix leak of nilfs_root in case of writer thread creation failure\n nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level()\n rpmsg: qcom: glink: replace strncpy() with strscpy_pad()\n mmc: core: Terminate infinite loop in SD-UHS voltage switch\n mmc: core: Replace with already defined values for readability\n USB: serial: ftdi_sio: fix 300 bps rate for SIO\n usb: mon: make mmapped memory read only\n arch: um: Mark the stack non-executable to fix a binutils warning\n um: Cleanup compiler warning in arch/x86/um/tls_32.c\n um: Cleanup syscall_handler_t cast in syscalls_32.h\n net/ieee802154: fix uninit value bug in dgram_sendmsg\n scsi: qedf: Fix a UAF bug in __qedf_probe()\n ARM: dts: fix Moxa SDIO \u0027compatible\u0027, remove \u0027sdhci\u0027 misnomer\n dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure\n dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property\n firmware: arm_scmi: Add SCMI PM driver remove routine\n fs: fix UAF/GPF bug in nilfs_mdt_destroy\n perf tools: Fixup get_current_dir_name() compilation\n mm: pagewalk: Fix race between unmap and page walker\n Linux 5.4.217\n docs: update mediator information in CoC docs\n Makefile.extrawarn: Move -Wcast-function-type-strict to W\u003d1\n Revert \"drm/amdgpu: use dirty framebuffer helper\"\n xfs: remove unused variable \u0027done\u0027\n xfs: fix uninitialized variable in xfs_attr3_leaf_inactive\n xfs: streamline xfs_attr3_leaf_inactive\n xfs: move incore structures out of xfs_da_format.h\n xfs: fix memory corruption during remote attr value buffer invalidation\n xfs: refactor remote attr value buffer invalidation\n xfs: fix IOCB_NOWAIT handling in xfs_file_dio_aio_read\n xfs: fix s_maxbytes computation on 32-bit kernels\n xfs: truncate should remove all blocks, not just to the end of the page cache\n xfs: introduce XFS_MAX_FILEOFF\n xfs: fix misuse of the XFS_ATTR_INCOMPLETE flag\n x86/speculation: Add RSB VM Exit protections\n x86/bugs: Warn when \"ibrs\" mitigation is selected on Enhanced IBRS parts\n x86/speculation: Use DECLARE_PER_CPU for x86_spec_ctrl_current\n x86/speculation: Disable RRSBA behavior\n x86/bugs: Add Cannon lake to RETBleed affected CPU list\n x86/cpu/amd: Enumerate BTC_NO\n x86/common: Stamp out the stepping madness\n x86/speculation: Fill RSB on vmexit for IBRS\n KVM: VMX: Fix IBRS handling after vmexit\n KVM: VMX: Prevent guest RSB poisoning attacks with eIBRS\n KVM: VMX: Convert launched argument to flags\n KVM: VMX: Flatten __vmx_vcpu_run()\n KVM/nVMX: Use __vmx_vcpu_run in nested_vmx_check_vmentry_hw\n KVM/VMX: Use TEST %REG,%REG instead of CMP $0,%REG in vmenter.S\n x86/speculation: Remove x86_spec_ctrl_mask\n x86/speculation: Use cached host SPEC_CTRL value for guest entry/exit\n x86/speculation: Fix SPEC_CTRL write on SMT state change\n x86/speculation: Fix firmware entry SPEC_CTRL handling\n x86/speculation: Fix RSB filling with CONFIG_RETPOLINE\u003dn\n x86/speculation: Change FILL_RETURN_BUFFER to work with objtool\n intel_idle: Disable IBRS during long idle\n x86/bugs: Report Intel retbleed vulnerability\n x86/bugs: Split spectre_v2_select_mitigation() and spectre_v2_user_select_mitigation()\n x86/speculation: Add spectre_v2\u003dibrs option to support Kernel IBRS\n x86/bugs: Optimize SPEC_CTRL MSR writes\n x86/entry: Add kernel IBRS implementation\n x86/entry: Remove skip_r11rcx\n x86/bugs: Keep a per-CPU IA32_SPEC_CTRL value\n x86/bugs: Add AMD retbleed\u003d boot parameter\n x86/bugs: Report AMD retbleed vulnerability\n x86/cpufeatures: Move RETPOLINE flags to word 11\n x86/kvm/vmx: Make noinstr clean\n x86/cpu: Add a steppings field to struct x86_cpu_id\n x86/cpu: Add consistent CPU match macros\n x86/devicetable: Move x86 specific macro out of generic code\n Revert \"x86/cpu: Add a steppings field to struct x86_cpu_id\"\n Revert \"x86/speculation: Add RSB VM Exit protections\"\n Linux 5.4.216\n clk: iproc: Do not rely on node name for correct PLL setup\n clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks\n selftests: Fix the if conditions of in test_extra_filter()\n nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices\n nvme: add new line after variable declatation\n usbnet: Fix memory leak in usbnet_disconnect()\n Input: melfas_mip4 - fix return value check in mip4_probe()\n Revert \"drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time\"\n soc: sunxi: sram: Fix debugfs info for A64 SRAM C\n soc: sunxi: sram: Fix probe function ordering issues\n soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource()\n soc: sunxi: sram: Prevent the driver from being unbound\n soc: sunxi: sram: Actually claim SRAM regions\n ARM: dts: am33xx: Fix MMCHS0 dma properties\n ARM: dts: Move am33xx and am43xx mmc nodes to sdhci-omap driver\n media: dvb_vb2: fix possible out of bound access\n mm: fix madivse_pageout mishandling on non-LRU page\n mm/migrate_device.c: flush TLB while holding PTL\n mm: prevent page_frag_alloc() from corrupting the memory\n mm/page_alloc: fix race condition between build_all_zonelists and page allocation\n mmc: moxart: fix 4-bit bus width and remove 8-bit bus width\n libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205\n Revert \"net: mvpp2: debugfs: fix memory leak when using debugfs_lookup()\"\n ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()\n ARM: dts: integrator: Tag PCI host with device_type\n clk: ingenic-tcu: Properly enable registers before accessing timers\n net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455\n uas: ignore UAS for Thinkplus chips\n usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS\n uas: add no-uas quirk for Hiksemi usb_disk\n Linux 5.4.215\n ext4: make directory inode spreading reflect flexbg size\n xfs: fix use-after-free when aborting corrupt attr inactivation\n xfs: fix an ABBA deadlock in xfs_rename\n xfs: don\u0027t commit sunit/swidth updates to disk if that would cause repair failures\n xfs: split the sunit parameter update into two parts\n xfs: refactor agfl length computation function\n xfs: use bitops interface for buf log item AIL flag check\n xfs: stabilize insert range start boundary to avoid COW writeback race\n xfs: fix some memory leaks in log recovery\n xfs: always log corruption errors\n xfs: constify the buffer pointer arguments to error functions\n xfs: convert EIO to EFSCORRUPTED when log contents are invalid\n xfs: Fix deadlock between AGI and AGF when target_ip exists in xfs_rename()\n xfs: attach dquots and reserve quota blocks during unwritten conversion\n xfs: range check ri_cnt when recovering log items\n xfs: add missing assert in xfs_fsmap_owner_from_rmap\n xfs: slightly tweak an assert in xfs_fs_map_blocks\n xfs: replace -EIO with -EFSCORRUPTED for corrupt metadata\n ext4: fix bug in extents parsing when eh_entries \u003d\u003d 0 and eh_depth \u003e 0\n workqueue: don\u0027t skip lockdep work dependency in cancel_work_sync()\n drm/rockchip: Fix return type of cdn_dp_connector_mode_valid\n drm/amd/display: Limit user regamma to a valid value\n drm/amdgpu: use dirty framebuffer helper\n Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region\n cifs: always initialize struct msghdr smb_msg completely\n usb: xhci-mtk: fix issue of out-of-bounds array access\n s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup\n serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting\n serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting\n serial: Create uart_xmit_advance()\n net: sched: fix possible refcount leak in tc_new_tfilter()\n net: sunhme: Fix packet reception for len \u003c RX_COPY_THRESHOLD\n perf kcore_copy: Do not check /proc/modules is unchanged\n perf jit: Include program header in ELF files\n can: gs_usb: gs_can_open(): fix race dev-\u003ecan.state condition\n netfilter: ebtables: fix memory leak when blob is malformed\n net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs\n net/sched: taprio: avoid disabling offload when it was never enabled\n of: mdio: Add of_node_put() when breaking out of for_each_xx\n i40e: Fix set max_tx_rate when it is lower than 1 Mbps\n i40e: Fix VF set max MTU size\n iavf: Fix set max MTU size with port VLAN and jumbo frames\n iavf: Fix bad page state\n MIPS: Loongson32: Fix PHY-mode being left unspecified\n MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko\n net: team: Unsync device addresses on ndo_stop\n ipvlan: Fix out-of-bound bugs caused by unset skb-\u003emac_header\n iavf: Fix cached head and tail value for iavf_get_tx_pending\n netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find()\n netfilter: nf_conntrack_irc: Tighten matching on DCC message\n netfilter: nf_conntrack_sip: fix ct_sip_walk_headers\n arm64: dts: rockchip: Remove \u0027enable-active-low\u0027 from rk3399-puma\n arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz\n arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob\n mm/slub: fix to return errno if kmalloc() fails\n efi: libstub: check Shim mode using MokSBStateRT\n ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop\n ALSA: hda/realtek: Add quirk for ASUS GA503R laptop\n ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack\n ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack\n ALSA: hda/realtek: Re-arrange quirk table entries\n ALSA: hda/realtek: Add quirk for Huawei WRT-WX9\n ALSA: hda: add Intel 5 Series / 3400 PCI DID\n ALSA: hda/tegra: set depop delay for tegra\n USB: serial: option: add Quectel RM520N\n USB: serial: option: add Quectel BG95 0x0203 composition\n USB: core: Fix RST error in hub.c\n Revert \"usb: gadget: udc-xilinx: replace memcpy with memcpy_toio\"\n Revert \"usb: add quirks for Lenovo OneLink+ Dock\"\n usb: cdns3: fix issue with rearming ISO OUT endpoint\n usb: gadget: udc-xilinx: replace memcpy with memcpy_toio\n usb: add quirks for Lenovo OneLink+ Dock\n tty: serial: atmel: Preserve previous USART mode if RS485 disabled\n serial: atmel: remove redundant assignment in rs485_config\n tty/serial: atmel: RS485 \u0026 ISO7816: wait for TXRDY before sending data\n wifi: mac80211: Fix UAF in ieee80211_scan_rx()\n usb: xhci-mtk: relax TT periodic bandwidth allocation\n usb: xhci-mtk: allow multiple Start-Split in a microframe\n usb: xhci-mtk: add some schedule error number\n usb: xhci-mtk: add a function to (un)load bandwidth info\n usb: xhci-mtk: use @sch_tt to check whether need do TT schedule\n usb: xhci-mtk: add only one extra CS for FS/LS INTR\n usb: xhci-mtk: get the microframe boundary for ESIT\n usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop\n usb: dwc3: gadget: Don\u0027t modify GEVNTCOUNT in pullup()\n usb: dwc3: gadget: Refactor pullup()\n usb: dwc3: gadget: Prevent repeat pullup()\n usb: dwc3: Issue core soft reset before enabling run/stop\n usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind\n ALSA: hda/sigmatel: Fix unused variable warning for beep power change\n cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()\n video: fbdev: pxa3xx-gcu: Fix integer overflow in pxa3xx_gcu_write\n mksysmap: Fix the mismatch of \u0027L0\u0027 symbols in System.map\n MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()\n afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked\n net: usb: qmi_wwan: add Quectel RM520N\n ALSA: hda/tegra: Align BDL entry to 4KB boundary\n ALSA: hda/sigmatel: Keep power up while beep is enabled\n rxrpc: Fix calc of resend age\n rxrpc: Fix local destruction being repeated\n regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()\n ASoC: nau8824: Fix semaphore unbalance at error paths\n iomap: iomap that extends beyond EOF should be marked dirty\n MAINTAINERS: add Chandan as xfs maintainer for 5.4.y\n cifs: don\u0027t send down the destination address to sendmsg for a SOCK_STREAM\n cifs: revalidate mapping when doing direct writes\n tracing: hold caller_addr to hardirq_{enable,disable}_ip\n task_stack, x86/cea: Force-inline stack helpers\n ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC\n parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()\n drm/meson: Fix OSD1 RGB to YCbCr coefficient\n drm/meson: Correct OSD1 global alpha value\n gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx\n NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0\n of: fdt: fix off-by-one error in unflatten_dt_nodes()\n Revert \"USB: core: Prevent nested device-reset calls\"\n Revert \"io_uring: disable polling pollfree files\"\n Revert \"netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y\"\n Revert \"sched/deadline: Fix priority inheritance with multiple scheduling classes\"\n Revert \"kernel/sched: Remove dl_boosted flag comment\"\n Revert \"mm/rmap: Fix anon_vma-\u003edegree ambiguity leading to double-reuse\"\n Revert \"fs: check FMODE_LSEEK to control internal pipe splicing\"\n Linux 5.4.214\n tracefs: Only clobber mode/uid/gid on remount if asked\n soc: fsl: select FSL_GUTS driver for DPIO\n net: dp83822: disable rx error interrupt\n mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()\n usb: storage: Add ASUS \u003c0x0b05:0x1932\u003e to IGNORE_UAS\n platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes\n perf/arm_pmu_platform: fix tests for platform_get_irq() failure\n nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()\n Input: iforce - add support for Boeder Force Feedback Wheel\n ieee802154: cc2520: add rc code in cc2520_tx()\n tg3: Disable tg3 device on system reboot to avoid triggering AER\n hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message\n HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo\n drm/msm/rd: Fix FIFO-full deadlock\n Linux 5.4.213\n MIPS: loongson32: ls1c: Fix hang during startup\n x86/nospec: Fix i386 RSB stuffing\n sch_sfb: Also store skb len before calling child enqueue\n tcp: fix early ETIMEDOUT after spurious non-SACK RTO\n nvme-tcp: fix UAF when detecting digest errors\n RDMA/mlx5: Set local port to one when accessing counters\n ipv6: sr: fix out-of-bounds read when setting HMAC data.\n RDMA/siw: Pass a pointer to virt_to_page()\n i40e: Fix kernel crash during module removal\n tipc: fix shift wrapping bug in map_get()\n sch_sfb: Don\u0027t assume the skb is still around after enqueueing to child\n afs: Use the operation issue time instead of the reply time for callbacks\n rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()\n netfilter: nf_conntrack_irc: Fix forged IP logic\n netfilter: br_netfilter: Drop dst references before setting.\n RDMA/hns: Fix supported page size\n soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs\n RDMA/cma: Fix arguments order in net device validation\n regulator: core: Clean up on enable failure\n ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node\n smb3: missing inode locks in punch hole\n cgroup: Fix threadgroup_rwsem \u003c-\u003e cpus_read_lock() deadlock\n cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree\n cgroup: Optimize single thread migration\n scsi: lpfc: Add missing destroy_workqueue() in error path\n scsi: mpt3sas: Fix use-after-free warning\n nvmet: fix a use-after-free\n debugfs: add debugfs_lookup_and_remove()\n kprobes: Prohibit probes in gate area\n ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()\n ALSA: aloop: Fix random zeros in capture data when using jiffies timer\n ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()\n drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly\n fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()\n arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level\n parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines\n parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()\n drm/radeon: add a force flush to delay work when radeon\n drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.\n drm/gem: Fix GEM handle release errors\n scsi: megaraid_sas: Fix double kfree()\n USB: serial: ch341: fix disabled rx timer on older devices\n USB: serial: ch341: fix lost character on LCR updates\n usb: dwc3: disable USB core PHY management\n usb: dwc3: fix PHY disable sequence\n btrfs: harden identification of a stale device\n drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk\n ALSA: seq: Fix data-race at module auto-loading\n ALSA: seq: oss: Fix data-race for max_midi_devs access\n net: mac802154: Fix a condition in the receive path\n ip: fix triggering of \u0027icmp redirect\u0027\n wifi: mac80211: Don\u0027t finalize CSA in IBSS mode if state is disconnected\n driver core: Don\u0027t probe devices after bus_type.match() probe deferral\n usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS\n USB: core: Prevent nested device-reset calls\n s390: fix nospec table alignments\n s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages\n usb-storage: Add ignore-residue quirk for NXP PN7462AU\n USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)\n usb: dwc2: fix wrong order of phy_power_on and phy_init\n usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles\n USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode\n USB: serial: option: add Quectel EM060K modem\n USB: serial: option: add support for OPPO R11 diag port\n USB: serial: cp210x: add Decagon UCA device id\n xhci: Add grace period after xHC start to prevent premature runtime suspend.\n thunderbolt: Use the actual buffer in tb_async_error()\n gpio: pca953x: Add mutex_lock for regcache sync in PM\n hwmon: (gpio-fan) Fix array out of bounds access\n clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate\n Input: rk805-pwrkey - fix module autoloading\n clk: core: Fix runtime PM sequence in clk_core_unprepare()\n Revert \"clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops\"\n clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops\n drm/i915/reg: Fix spelling mistake \"Unsupport\" -\u003e \"Unsupported\"\n usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup\n binder: fix UAF of ref-\u003eproc caused by race condition\n USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id\n misc: fastrpc: fix memory corruption on open\n misc: fastrpc: fix memory corruption on probe\n iio: adc: mcp3911: use correct formula for AD conversion\n Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag\n tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete\n vt: Clear selection before changing the font\n powerpc: align syscall table for ppc32\n staging: rtl8712: fix use after free bugs\n serial: fsl_lpuart: RS485 RTS polariy is inverse\n net/smc: Remove redundant refcount increase\n Revert \"sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb\"\n tcp: annotate data-race around challenge_timestamp\n sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb\n kcm: fix strp_init() order and cleanup\n ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler\n net: sched: tbf: don\u0027t call qdisc_put() while holding tree lock\n Revert \"xhci: turn off port power in shutdown\"\n wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()\n ieee802154/adf7242: defer destroy_workqueue call\n iio: adc: mcp3911: make use of the sign bit\n platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask\n drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg\n drm/msm/dsi: fix the inconsistent indenting\n net: dp83822: disable false carrier interrupt\n Revert \"mm: kmemleak: take a full lowmem check in kmemleak_*_phys()\"\n fs: only do a memory barrier for the first set_buffer_uptodate()\n net: mvpp2: debugfs: fix memory leak when using debugfs_lookup()\n wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()\n efi: capsule-loader: Fix use-after-free in efi_capsule_write\n Linux 5.4.212\n net: neigh: don\u0027t call kfree_skb() under spin_lock_irqsave()\n net/af_packet: check len when min_header_len equals to 0\n io_uring: disable polling pollfree files\n kprobes: don\u0027t call disarm_kprobe() for disabled kprobes\n lib/vdso: Mark do_hres() and do_coarse() as __always_inline\n lib/vdso: Let do_coarse() return 0 to simplify the callsite\n btrfs: tree-checker: check for overlapping extent items\n netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y\n drm/amd/display: Fix pixel clock programming\n s390/hypfs: avoid error message under KVM\n neigh: fix possible DoS due to net iface start/stop loop\n drm/amd/display: clear optc underflow before turn off odm clock\n drm/amd/display: Avoid MPC infinite loop\n btrfs: unify lookup return value when dir entry is missing\n btrfs: do not pin logs too early during renames\n btrfs: introduce btrfs_lookup_match_dir\n mm/rmap: Fix anon_vma-\u003edegree ambiguity leading to double-reuse\n bpf: Don\u0027t redirect packets with invalid pkt_len\n ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead\n fbdev: fb_pm2fb: Avoid potential divide by zero error\n HID: hidraw: fix memory leak in hidraw_release()\n media: pvrusb2: fix memory leak in pvr_probe\n udmabuf: Set the DMA mask for the udmabuf device (v2)\n HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report\n Bluetooth: L2CAP: Fix build errors in some archs\n kbuild: Fix include path in scripts/Makefile.modpost\n x86/bugs: Add \"unknown\" reporting for MMIO Stale Data\n s390/mm: do not trigger write fault when vma does not allow VM_WRITE\n mm: Force TLB flush for PFNMAP mappings before unlink_file_vma()\n scsi: storvsc: Remove WQ_MEM_RECLAIM from storvsc_error_wq\n perf/x86/intel/uncore: Fix broken read_counter() for SNB IMC PMU\n md: call __md_stop_writes in md_stop\n mm/hugetlb: fix hugetlb not supporting softdirty tracking\n ACPI: processor: Remove freq Qos request for all CPUs\n s390: fix double free of GS and RI CBs on fork() failure\n asm-generic: sections: refactor memory_intersects\n loop: Check for overflow while configuring loop\n x86/unwind/orc: Unwind ftrace trampolines with correct ORC entry\n btrfs: check if root is readonly while setting security xattr\n btrfs: add info when mount fails due to stale replace target\n btrfs: replace: drop assert for suspended replace\n btrfs: fix silent failure when deleting root reference\n ixgbe: stop resetting SYSTIME in ixgbe_ptp_start_cyclecounter\n net: Fix a data-race around sysctl_somaxconn.\n net: Fix a data-race around netdev_budget_usecs.\n net: Fix a data-race around netdev_budget.\n net: Fix a data-race around sysctl_net_busy_read.\n net: Fix a data-race around sysctl_net_busy_poll.\n net: Fix a data-race around sysctl_tstamp_allow_data.\n ratelimit: Fix data-races in ___ratelimit().\n net: Fix data-races around netdev_tstamp_prequeue.\n net: Fix data-races around weight_p and dev_weight_[rt]x_bias.\n netfilter: nft_tunnel: restrict it to netdev family\n netfilter: nft_osf: restrict osf to ipv4, ipv6 and inet families\n netfilter: nft_payload: do not truncate csum_offset and csum_type\n netfilter: nft_payload: report ERANGE for too long offset and length\n bnxt_en: fix NQ resource accounting during vf creation on 57500 chips\n netfilter: ebtables: reject blobs that don\u0027t provide all entry points\n net: ipvtap - add __init/__exit annotations to module init/exit funcs\n bonding: 802.3ad: fix no transmission of LACPDUs\n net: moxa: get rid of asymmetry in DMA mapping/unmapping\n net/mlx5e: Properly disable vlan strip on non-UL reps\n rose: check NULL rose_loopback_neigh-\u003eloopback\n SUNRPC: RPC level errors should set task-\u003etk_rpc_status\n af_key: Do not call xfrm_probe_algs in parallel\n xfrm: fix refcount leak in __xfrm_policy_check()\n kernel/sched: Remove dl_boosted flag comment\n sched/deadline: Fix priority inheritance with multiple scheduling classes\n sched/deadline: Fix stale throttling on de-/boosted tasks\n sched/deadline: Unthrottle PI boosted threads while enqueuing\n pinctrl: amd: Don\u0027t save/restore interrupt status and wake status bits\n Revert \"selftests/bpf: Fix test_align verifier log patterns\"\n Revert \"selftests/bpf: Fix \"dubious pointer arithmetic\" test\"\n usb: cdns3: Fix issue for clear halt endpoint\n kernel/sys_ni: add compat entry for fadvise64_64\n parisc: Fix exception handler for fldw and fstw instructions\n audit: fix potential double free on error path from fsnotify_add_inode_mark\n Revert \"USB: HCD: Fix URB giveback issue in tasklet function\"\n Linux 5.4.211\n btrfs: raid56: don\u0027t trust any cached sector in __raid56_parity_recover()\n btrfs: only write the sectors in the vertical stripe which has data stripes\n can: j1939: j1939_session_destroy(): fix memory leak of skbs\n can: j1939: j1939_sk_queue_activate_next_locked(): replace WARN_ON_ONCE with netdev_warn_once()\n tracing/probes: Have kprobes and uprobes use $COMM too\n MIPS: tlbex: Explicitly compare _PAGE_NO_EXEC against 0\n video: fbdev: i740fb: Check the argument of i740_calc_vclk()\n powerpc/64: Init jump labels before parse_early_param()\n smb3: check xattr value length earlier\n f2fs: fix to avoid use f2fs_bug_on() in f2fs_new_node_page()\n ALSA: timer: Use deferred fasync helper\n ALSA: core: Add async signal helpers\n powerpc/32: Don\u0027t always pass -mcpu\u003dpowerpc to the compiler\n watchdog: export lockup_detector_reconfigure\n RISC-V: Add fast call path of crash_kexec()\n riscv: mmap with PROT_WRITE but no PROT_READ is invalid\n mips: cavium-octeon: Fix missing of_node_put() in octeon2_usb_clocks_start\n vfio: Clear the caps-\u003ebuf to NULL after free\n tty: serial: Fix refcount leak bug in ucc_uart.c\n lib/list_debug.c: Detect uninitialized lists\n ext4: avoid resizing to a partial cluster size\n ext4: avoid remove directory when directory is corrupted\n drivers:md:fix a potential use-after-free bug\n nvmet-tcp: fix lockdep complaint on nvmet_tcp_wq flush during queue teardown\n dmaengine: sprd: Cleanup in .remove() after pm_runtime_get_sync() failed\n selftests/kprobe: Do not test for GRP/ without event failures\n um: add \"noreboot\" command line option for PANIC_TIMEOUT\u003d-1 setups\n PCI/ACPI: Guard ARM64-specific mcfg_quirks\n cxl: Fix a memory leak in an error handling path\n gadgetfs: ep_io - wait until IRQ finishes\n scsi: lpfc: Prevent buffer overflow crashes in debugfs with malformed user input\n clk: qcom: ipq8074: dont disable gcc_sleep_clk_src\n vboxguest: Do not use devm for irq\n usb: renesas: Fix refcount leak bug\n usb: host: ohci-ppc-of: Fix refcount leak bug\n drm/meson: Fix overflow implicit truncation warnings\n irqchip/tegra: Fix overflow implicit truncation warnings\n usb: gadget: uvc: call uvc uvcg_warn on completed status instead of uvcg_info\n usb: cdns3 fix use-after-free at workaround 2\n PCI: Add ACS quirk for Broadcom BCM5750x NICs\n drm/meson: Fix refcount bugs in meson_vpu_has_available_connectors()\n locking/atomic: Make test_and_*_bit() ordered on failure\n gcc-plugins: Undefine LATENT_ENTROPY_PLUGIN when plugin disabled for a file\n igb: Add lock to avoid data race\n fec: Fix timer capture timing in `fec_ptp_enable_pps()`\n i40e: Fix to stop tx_timeout recovery if GLOBR fails\n ice: Ignore EEXIST when setting promisc mode\n net: dsa: microchip: ksz9477: fix fdb_dump last invalid entry\n net: moxa: pass pdev instead of ndev to DMA functions\n net: dsa: mv88e6060: prevent crash on an unused port\n powerpc/pci: Fix get_phb_number() locking\n netfilter: nf_tables: really skip inactive sets when allocating name\n clk: rockchip: add sclk_mac_lbtest to rk3188_critical_clocks\n iavf: Fix adminq error handling\n nios2: add force_successful_syscall_return()\n nios2: restarts apply only to the first sigframe we build...\n nios2: fix syscall restart checks\n nios2: traced syscall does need to check the syscall number\n nios2: don\u0027t leave NULLs in sys_call_table[]\n nios2: page fault et.al. are *not* restartable syscalls...\n tee: add overflow check in register_shm_helper()\n dpaa2-eth: trace the allocated address instead of page struct\n atm: idt77252: fix use-after-free bugs caused by tst_timer\n xen/xenbus: fix return type in xenbus_file_read()\n nfp: ethtool: fix the display error of `ethtool -m DEVNAME`\n NTB: ntb_tool: uninitialized heap data in tool_fn_write()\n tools build: Switch to new openssl API for test-libcrypto\n tools/vm/slabinfo: use alphabetic order when two values are equal\n dt-bindings: arm: qcom: fix MSM8916 MTP compatibles\n vsock: Set socket state back to SS_UNCONNECTED in vsock_connect_timeout()\n vsock: Fix memory leak in vsock_connect()\n plip: avoid rcu debug splat\n geneve: do not use RT_TOS for IPv6 flowlabel\n ACPI: property: Return type of acpi_add_nondev_subnodes() should be bool\n pinctrl: sunxi: Add I/O bias setting for H6 R-PIO\n pinctrl: qcom: msm8916: Allow CAMSS GP clocks to be muxed\n pinctrl: nomadik: Fix refcount leak in nmk_pinctrl_dt_subnode_to_map\n net: bgmac: Fix a BUG triggered by wrong bytes_compl\n devlink: Fix use-after-free after a failed reload\n SUNRPC: Reinitialise the backchannel request buffers before reuse\n sunrpc: fix expiry of auth creds\n can: mcp251x: Fix race condition on receive interrupt\n NFSv4/pnfs: Fix a use-after-free bug in open\n NFSv4.1: RECLAIM_COMPLETE must handle EACCES\n NFSv4: Fix races in the legacy idmapper upcall\n NFSv4.1: Handle NFS4ERR_DELAY replies to OP_SEQUENCE correctly\n NFSv4.1: Don\u0027t decrease the value of seq_nr_highest_sent\n Documentation: ACPI: EINJ: Fix obsolete example\n apparmor: Fix memleak in aa_simple_write_to_buffer()\n apparmor: fix reference count leak in aa_pivotroot()\n apparmor: fix overlapping attachment computation\n apparmor: fix aa_label_asxprint return check\n apparmor: Fix failed mount permission check error message\n apparmor: fix absroot causing audited secids to begin with \u003d\n apparmor: fix quiet_denied for file rules\n can: ems_usb: fix clang\u0027s -Wunaligned-access warning\n tracing: Have filter accept \"common_cpu\" to be consistent\n btrfs: fix lost error handling when looking up extended ref on log replay\n mmc: pxamci: Fix an error handling path in pxamci_probe()\n mmc: pxamci: Fix another error handling path in pxamci_probe()\n ata: libata-eh: Add missing command name\n rds: add missing barrier to release_refill\n ALSA: info: Fix llseek return value when using callback\n net_sched: cls_route: disallow handle of 0\n net/9p: Initialize the iounit field during fid creation\n Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm regression\n Revert \"net: usb: ax88179_178a needs FLAG_SEND_ZLP\"\n scsi: sg: Allow waiting for commands to complete on removed device\n tcp: fix over estimation in sk_forced_mem_schedule()\n KVM: x86: Avoid theoretical NULL pointer dereference in kvm_irq_delivery_to_apic_fast()\n KVM: x86: Check lapic_in_kernel() before attempting to set a SynIC irq\n KVM: Add infrastructure and macro to mark VM as bugged\n btrfs: reject log replay if there is unsupported RO compat flag\n net_sched: cls_route: remove from list when handle is 0\n iommu/vt-d: avoid invalid memory access via node_online(NUMA_NO_NODE)\n firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails\n timekeeping: contribute wall clock to rng on time change\n ACPI: CPPC: Do not prevent CPPC from working in the future\n dm writecache: set a default MAX_WRITEBACK_JOBS\n dm thin: fix use-after-free crash in dm_sm_register_threshold_callback\n dm raid: fix address sanitizer warning in raid_status\n dm raid: fix address sanitizer warning in raid_resume\n intel_th: pci: Add Meteor Lake-P support\n intel_th: pci: Add Raptor Lake-S PCH support\n intel_th: pci: Add Raptor Lake-S CPU support\n ext4: correct the misjudgment in ext4_iget_extra_inode\n ext4: correct max_inline_xattr_value_size computing\n ext4: fix extent status tree race in writeback error recovery path\n ext4: update s_overhead_clusters in the superblock during an on-line resize\n ext4: fix use-after-free in ext4_xattr_set_entry\n ext4: make sure ext4_append() always allocates new block\n ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h\n btrfs: reset block group chunk force if we have to wait\n tpm: eventlog: Fix section mismatch for DEBUG_SECTION_MISMATCH\n kexec, KEYS, s390: Make use of built-in and secondary keyring for signature verification\n spmi: trace: fix stack-out-of-bound access in SPMI tracing functions\n x86/olpc: fix \u0027logical not is only applied to the left hand side\u0027\n scsi: qla2xxx: Fix erroneous mailbox timeout after PCI error injection\n scsi: qla2xxx: Turn off multi-queue for 8G adapters\n scsi: qla2xxx: Fix discovery issues in FC-AL topology\n scsi: zfcp: Fix missing auto port scan and thus missing target ports\n video: fbdev: s3fb: Check the size of screen before memset_io()\n video: fbdev: arkfb: Check the size of screen before memset_io()\n video: fbdev: vt8623fb: Check the size of screen before memset_io()\n tools/thermal: Fix possible path truncations\n video: fbdev: arkfb: Fix a divide-by-zero bug in ark_set_pixclock()\n x86/numa: Use cpumask_available instead of hardcoded NULL check\n scripts/faddr2line: Fix vmlinux detection on arm64\n genelf: Use HAVE_LIBCRYPTO_SUPPORT, not the never defined HAVE_LIBCRYPTO\n powerpc/pci: Fix PHB numbering when using opal-phbid\n kprobes: Forbid probing on trampoline and BPF code areas\n perf symbol: Fail to read phdr workaround\n powerpc/cell/axon_msi: Fix refcount leak in setup_msi_msg_address\n powerpc/xive: Fix refcount leak in xive_get_max_prio\n powerpc/spufs: Fix refcount leak in spufs_init_isolated_loader\n powerpc/pci: Prefer PCI domain assignment via DT \u0027linux,pci-domain\u0027 and alias\n powerpc/32: Do not allow selection of e5500 or e6500 CPUs on PPC32\n video: fbdev: sis: fix typos in SiS_GetModeID()\n video: fbdev: amba-clcd: Fix refcount leak bugs\n watchdog: armada_37xx_wdt: check the return value of devm_ioremap() in armada_37xx_wdt_probe()\n ASoC: audio-graph-card: Add of_node_put() in fail path\n fuse: Remove the control interface for virtio-fs\n ASoC: qcom: q6dsp: Fix an off-by-one in q6adm_alloc_copp()\n s390/zcore: fix race when reading from hardware system area\n iommu/arm-smmu: qcom_iommu: Add of_node_put() when breaking out of loop\n mfd: max77620: Fix refcount leak in max77620_initialise_fps\n mfd: t7l66xb: Drop platform disable callback\n kfifo: fix kfifo_to_user() return type\n rpmsg: qcom_smd: Fix refcount leak in qcom_smd_parse_edge\n iommu/exynos: Handle failed IOMMU device registration properly\n tty: n_gsm: fix missing corner cases in gsmld_poll()\n tty: n_gsm: fix DM command\n tty: n_gsm: fix wrong T1 retry count handling\n vfio/ccw: Do not change FSM state in subchannel event\n remoteproc: qcom: wcnss: Fix handling of IRQs\n tty: n_gsm: fix race condition in gsmld_write()\n tty: n_gsm: fix packet re-transmission without open control channel\n tty: n_gsm: fix non flow control frames during mux flow off\n profiling: fix shift too large makes kernel panic\n ASoC: codecs: wcd9335: move gains from SX_TLV to S8_TLV\n ASoC: codecs: msm8916-wcd-digital: move gains from SX_TLV to S8_TLV\n serial: 8250_dw: Store LSR into lsr_saved_flags in dw8250_tx_wait_empty()\n ASoC: mediatek: mt8173-rt5650: Fix refcount leak in mt8173_rt5650_dev_probe\n ASoC: codecs: da7210: add check for i2c_add_driver\n ASoC: mt6797-mt6351: Fix refcount leak in mt6797_mt6351_dev_probe\n ASoC: mediatek: mt8173: Fix refcount leak in mt8173_rt5650_rt5676_dev_probe\n opp: Fix error check in dev_pm_opp_attach_genpd()\n jbd2: fix assertion \u0027jh-\u003eb_frozen_data \u003d\u003d NULL\u0027 failure when journal aborted\n ext4: recover csum seed of tmp_inode after migrating to extents\n jbd2: fix outstanding credits assert in jbd2_journal_commit_transaction()\n null_blk: fix ida error handling in null_add_dev()\n RDMA/rxe: Fix error unwind in rxe_create_qp()\n mm/mmap.c: fix missing call to vm_unacct_memory in mmap_region\n platform/olpc: Fix uninitialized data in debugfs write\n USB: serial: fix tty-port initialized comments\n PCI: tegra194: Fix link up retry sequence\n PCI: tegra194: Fix Root Port interrupt handling\n HID: alps: Declare U1_UNICORN_LEGACY support\n mmc: cavium-thunderx: Add of_node_put() when breaking out of loop\n mmc: cavium-octeon: Add of_node_put() when breaking out of loop\n gpio: gpiolib-of: Fix refcount bugs in of_mm_gpiochip_add_data()\n RDMA/hfi1: fix potential memory leak in setup_base_ctxt()\n RDMA/siw: Fix duplicated reported IW_CM_EVENT_CONNECT_REPLY event\n RDMA/hns: Fix incorrect clearing of interrupt status register\n usb: gadget: udc: amd5536 depends on HAS_DMA\n scsi: smartpqi: Fix DMA direction for RAID requests\n mmc: sdhci-of-at91: fix set_uhs_signaling rewriting of MC1R\n memstick/ms_block: Fix a memory leak\n memstick/ms_block: Fix some incorrect memory allocation\n mmc: sdhci-of-esdhc: Fix refcount leak in esdhc_signal_voltage_switch\n staging: rtl8192u: Fix sleep in atomic context bug in dm_fsync_timer_callback\n intel_th: msu: Fix vmalloced buffers\n intel_th: msu-sink: Potential dereference of null pointer\n intel_th: Fix a resource leak in an error handling path\n soundwire: bus_type: fix remove and shutdown support\n clk: qcom: camcc-sdm845: Fix topology around titan_top power domain\n clk: qcom: ipq8074: set BRANCH_HALT_DELAY flag for UBI clocks\n clk: qcom: ipq8074: fix NSS port frequency tables\n usb: host: xhci: use snprintf() in xhci_decode_trb()\n clk: qcom: clk-krait: unlock spin after mux completion\n driver core: fix potential deadlock in __driver_attach\n misc: rtsx: Fix an error handling path in rtsx_pci_probe()\n clk: mediatek: reset: Fix written reset bit offset\n usb: xhci: tegra: Fix error check\n usb: ohci-nxp: Fix refcount leak in ohci_hcd_nxp_probe\n usb: host: Fix refcount leak in ehci_hcd_ppc_of_probe\n fpga: altera-pr-ip: fix unsigned comparison with less than zero\n mtd: st_spi_fsm: Add a clk_disable_unprepare() in .probe()\u0027s error path\n mtd: partitions: Fix refcount leak in parse_redboot_of\n mtd: sm_ftl: Fix deadlock caused by cancel_work_sync in sm_release\n HID: cp2112: prevent a buffer overflow in cp2112_xfer()\n mtd: rawnand: meson: Fix a potential double free issue\n mtd: maps: Fix refcount leak in ap_flash_init\n mtd: maps: Fix refcount leak in of_flash_probe_versatile\n clk: renesas: r9a06g032: Fix UART clkgrp bitsel\n dccp: put dccp_qpolicy_full() and dccp_qpolicy_push() in the same lock\n net: rose: fix netdev reference changes\n netdevsim: Avoid allocation warnings triggered from user space\n iavf: Fix max_rate limiting\n crypto: inside-secure - Add missing MODULE_DEVICE_TABLE for of\n net/mlx5e: Fix the value of MLX5E_MAX_RQ_NUM_MTTS\n wifi: libertas: Fix possible refcount leak in if_usb_probe()\n wifi: iwlwifi: mvm: fix double list_add at iwl_mvm_mac_wake_tx_queue\n wifi: wil6210: debugfs: fix uninitialized variable use in `wil_write_file_wmi()`\n i2c: mux-gpmux: Add of_node_put() when breaking out of loop\n i2c: cadence: Support PEC for SMBus block read\n Bluetooth: hci_intel: Add check for platform_driver_register\n can: pch_can: pch_can_error(): initialize errc before using it\n can: error: specify the values of data[5..7] of CAN error frames\n can: usb_8dev: do not report txerr and rxerr during bus-off\n can: kvaser_usb_leaf: do not report txerr and rxerr during bus-off\n can: kvaser_usb_hydra: do not report txerr and rxerr during bus-off\n can: sun4i_can: do not report txerr and rxerr during bus-off\n can: hi311x: do not report txerr and rxerr during bus-off\n can: sja1000: do not report txerr and rxerr during bus-off\n can: rcar_can: do not report txerr and rxerr during bus-off\n can: pch_can: do not report txerr and rxerr during bus-off\n selftests/bpf: fix a test for snprintf() overflow\n wifi: p54: add missing parentheses in p54_flush()\n wifi: p54: Fix an error handling path in p54spi_probe()\n wifi: wil6210: debugfs: fix info leak in wil_write_file_wmi()\n fs: check FMODE_LSEEK to control internal pipe splicing\n selftests: timers: clocksource-switch: fix passing errors from child\n selftests: timers: valid-adjtimex: build fix for newer toolchains\n libbpf: Fix the name of a reused map\n tcp: make retransmitted SKB fit into the send window\n drm/exynos/exynos7_drm_decon: free resources when clk_set_parent() failed.\n mediatek: mt76: mac80211: Fix missing of_node_put() in mt76_led_init()\n media: platform: mtk-mdp: Fix mdp_ipi_comm structure alignment\n crypto: hisilicon - Kunpeng916 crypto driver don\u0027t sleep when in softirq\n drm/msm/mdp5: Fix global state lock backoff\n drm: bridge: sii8620: fix possible off-by-one\n drm/mediatek: dpi: Only enable dpi after the bridge is enabled\n drm/mediatek: dpi: Remove output format of YUV\n drm/rockchip: Fix an error handling path rockchip_dp_probe()\n drm/rockchip: vop: Don\u0027t crash for invalid duplicate_state()\n crypto: arm64/gcm - Select AEAD for GHASH_ARM64_CE\n drm/vc4: dsi: Correct DSI divider calculations\n drm/vc4: plane: Fix margin calculations for the right/bottom edges\n drm/vc4: plane: Remove subpixel positioning check\n media: hdpvr: fix error value returns in hdpvr_read\n drm/mcde: Fix refcount leak in mcde_dsi_bind\n drm: bridge: adv7511: Add check for mipi_dsi_driver_register\n wifi: iwlegacy: 4965: fix potential off-by-one overflow in il4965_rs_fill_link_cmd()\n ath9k: fix use-after-free in ath9k_hif_usb_rx_cb\n media: tw686x: Register the irq at the end of probe\n i2c: Fix a potential use after free\n drm: adv7511: override i2c address of cec before accessing it\n drm/mediatek: Add pull-down MIPI operation in mtk_dsi_poweroff function\n drm/radeon: fix potential buffer overflow in ni_set_mc_special_registers()\n drm/mipi-dbi: align max_chunk to 2 in spi_transfer\n wifi: rtlwifi: fix error codes in rtl_debugfs_set_write_h2c()\n ath10k: do not enforce interrupt trigger type\n dm: return early from dm_pr_call() if DM device is suspended\n thermal/tools/tmon: Include pthread and time headers in tmon.h\n nohz/full, sched/rt: Fix missed tick-reenabling bug in dequeue_task_rt()\n regulator: of: Fix refcount leak bug in of_get_regulation_constraints()\n blk-mq: don\u0027t create hctx debugfs dir until q-\u003edebugfs_dir is created\n erofs: avoid consecutive detection for Highmem memory\n arm64: dts: mt7622: fix BPI-R64 WPS button\n bus: hisi_lpc: fix missing platform_device_put() in hisi_lpc_acpi_probe()\n ARM: dts: qcom: pm8841: add required thermal-sensor-cells\n soc: qcom: aoss: Fix refcount leak in qmp_cooling_devices_register\n cpufreq: zynq: Fix refcount leak in zynq_get_revision\n ARM: OMAP2+: Fix refcount leak in omap3xxx_prm_late_init\n ARM: OMAP2+: Fix refcount leak in omapdss_init_of\n ARM: dts: qcom: mdm9615: add missing PMIC GPIO reg\n soc: fsl: guts: machine variable might be unset\n ARM: dts: ast2600-evb: fix board compatible\n ARM: dts: ast2500-evb: fix board compatible\n x86/pmem: Fix platform-device leak in error path\n ARM: bcm: Fix refcount leak in bcm_kona_smc_init\n meson-mx-socinfo: Fix refcount leak in meson_mx_socinfo_init\n ARM: findbit: fix overflowing offset\n spi: spi-rspi: Fix PIO fallback on RZ platforms\n selinux: Add boundary check in put_entry()\n PM: hibernate: defer device probing when resuming from hibernation\n ARM: shmobile: rcar-gen2: Increase refcount for new reference\n arm64: dts: allwinner: a64: orangepi-win: Fix LED node name\n arm64: dts: qcom: ipq8074: fix NAND node name\n ACPI: LPSS: Fix missing check in register_device_clock()\n ACPI: PM: save NVS memory for Lenovo G40-45\n ACPI: EC: Remove duplicate ThinkPad X1 Carbon 6th entry from DMI quirks\n ARM: OMAP2+: display: Fix refcount leak bug\n spi: synquacer: Add missing clk_disable_unprepare()\n ARM: dts: imx6ul: fix qspi node compatible\n ARM: dts: imx6ul: fix lcdif node compatible\n ARM: dts: imx6ul: fix csi node compatible\n ARM: dts: imx6ul: change operating-points to uint32-matrix\n ARM: dts: imx6ul: add missing properties for sram\n wait: Fix __wait_event_hrtimeout for RT/DL tasks\n genirq: Don\u0027t return error on missing optional irq_request_resources()\n ext2: Add more validity checks for inode counts\n arm64: fix oops in concurrently setting insn_emulation sysctls\n arm64: Do not forget syscall when starting a new thread.\n x86: Handle idle\u003dnomwait cmdline properly for x86_idle\n epoll: autoremove wakers even more aggressively\n netfilter: nf_tables: fix null deref due to zeroed list head\n netfilter: nf_tables: do not allow RULE_ID to refer to another chain\n netfilter: nf_tables: do not allow SET_ID to refer to another table\n arm64: dts: uniphier: Fix USB interrupts for PXs3 SoC\n ARM: dts: uniphier: Fix USB interrupts for PXs2 SoC\n USB: HCD: Fix URB giveback issue in tasklet function\n coresight: Clear the connection field properly\n MIPS: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK\n powerpc/powernv: Avoid crashing if rng is NULL\n powerpc/ptdump: Fix display of RW pages on FSL_BOOK3E\n powerpc/fsl-pci: Fix Class Code of PCIe Root Port\n PCI: Add defines for normal and subtractive PCI bridges\n ia64, processor: fix -Wincompatible-pointer-types in ia64_get_irr()\n md-raid10: fix KASAN warning\n serial: mvebu-uart: uart2 error bits clearing\n fuse: limit nsec\n iio: light: isl29028: Fix the warning in isl29028_remove()\n drm/amdgpu: Check BO\u0027s requested pinning domains against its preferred_domains\n drm/nouveau: fix another off-by-one in nvbios_addr\n drm/gem: Properly annotate WW context on drm_gem_lock_reservations() error\n parisc: io_pgetevents_time64() needs compat syscall in 32-bit compat mode\n parisc: Fix device names in /proc/iomem\n ovl: drop WARN_ON() dentry is NULL in ovl_encode_fh()\n usbnet: Fix linkwatch use-after-free on disconnect\n fbcon: Fix boundary checks for fbcon\u003dvc:n1-n2 parameters\n thermal: sysfs: Fix cooling_device_stats_setup() error code path\n fs: Add missing umask strip in vfs_tmpfile\n vfs: Check the truncate maximum size in inode_newsize_ok()\n tty: vt: initialize unicode screen buffer\n ALSA: hda/realtek: Add quirk for another Asus K42JZ model\n ALSA: hda/cirrus - support for iMac 12,1 model\n ALSA: hda/conexant: Add quirk for LENOVO 20149 Notebook model\n mm/mremap: hold the rmap lock in write mode when moving page table entries.\n KVM: x86: Set error code to segment selector on LLDT/LTR non-canonical #GP\n KVM: x86: Mark TSS busy during LTR emulation _after_ all fault checks\n KVM: nVMX: Let userspace set nVMX MSR to any _host_ supported value\n KVM: SVM: Don\u0027t BUG if userspace injects an interrupt with GIF\u003d0\n KVM: nVMX: Snapshot pre-VM-Enter DEBUGCTL for !nested_run_pending case\n KVM: nVMX: Snapshot pre-VM-Enter BNDCFGS for !nested_run_pending case\n HID: wacom: Don\u0027t register pad_input for touch switch\n HID: wacom: Only report rotation for art pen\n add barriers to buffer_uptodate and set_buffer_uptodate\n wifi: mac80211_hwsim: use 32-bit skb cookie\n wifi: mac80211_hwsim: add back erroneously removed cast\n wifi: mac80211_hwsim: fix race condition in pending packet\n igc: Remove _I_PHY_ID checking\n ALSA: bcd2000: Fix a UAF bug on the error path of probing\n scsi: Revert \"scsi: qla2xxx: Fix disk failure to rediscover\"\n x86: link vdso and boot with -z noexecstack --no-warn-rwx-segments\n Makefile: link with -z noexecstack --no-warn-rwx-segments\n\n Conflicts:\n\tDocumentation/devicetree/bindings/arm/qcom.yaml\n\tDocumentation/devicetree/bindings~HEAD\n\tarch/x86/boot/compressed/Makefile\n\tdrivers/mmc/core/sd.c\n\tdrivers/rpmsg/qcom_glink_native.c\n\tdrivers/usb/dwc3/core.c\n\tdrivers/usb/dwc3/gadget.c\n\tdrivers/usb/typec/ucsi/ucsi.c\n\tnet/core/dev.c\n\tnet/netfilter/nf_conntrack_irc.c\n\nChange-Id: I796398110bc61fa6a8bb94f7ef41b9209683dbf7\n" }, { "commit": "39c4c9c65cf337f8a2ae67fac4a37b9fb6cf134d", "tree": "9f66db6e6db6aabde68880b4d1381271bdf4b9d8", "parents": [ "b1dfc3f8882188ad1fe7d809a8da798117030210", "316cdfc48d4db2c425370ef8575dd7d81283515d" ], "author": { "name": "Greg Kroah-Hartman", "email": "gregkh@google.com", "time": "Thu Dec 08 16:50:20 2022 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@google.com", "time": "Thu Dec 08 16:50:20 2022 +0000" }, "message": "Merge 5.4.226 into android11-5.4-lts\n\nChanges in 5.4.226\n\twifi: mac80211: fix memory free error when registering wiphy fail\n\twifi: mac80211_hwsim: fix debugfs attribute ps with rc table support\n\taudit: fix undefined behavior in bit shift for AUDIT_BIT\n\twifi: mac80211: Fix ack frame idr leak when mesh has no route\n\tspi: stm32: fix stm32_spi_prepare_mbr() that halves spi clk for every run\n\tdrm: panel-orientation-quirks: Add quirk for Acer Switch V 10 (SW5-017)\n\tblock, bfq: fix null pointer dereference in bfq_bio_bfqg()\n\tarm64/syscall: Include asm/ptrace.h in syscall_wrapper header.\n\tRISC-V: vdso: Do not add missing symbols to version section in linker script\n\tMIPS: pic32: treat port as signed integer\n\taf_key: Fix send_acquire race with pfkey_register\n\tARM: dts: am335x-pcm-953: Define fixed regulators in root node\n\tASoC: sgtl5000: Reset the CHIP_CLK_CTRL reg on remove\n\tregulator: core: fix kobject release warning and memory leak in regulator_register()\n\tregulator: core: fix UAF in destroy_regulator()\n\tbus: sunxi-rsb: Support atomic transfers\n\ttee: optee: fix possible memory leak in optee_register_device()\n\tARM: dts: at91: sam9g20ek: enable udc vbus gpio pinctrl\n\tnet: liquidio: simplify if expression\n\tnfc/nci: fix race with opening and closing\n\tnet: pch_gbe: fix potential memleak in pch_gbe_tx_queue()\n\t9p/fd: fix issue of list_del corruption in p9_fd_cancel()\n\tARM: mxs: fix memory leak in mxs_machine_init()\n\tnet/mlx4: Check retval of mlx4_bitmap_init\n\tnet/qla3xxx: fix potential memleak in ql3xxx_send()\n\tnet: pch_gbe: fix pci device refcount leak while module exiting\n\tnfp: add port from netdev validation for EEPROM access\n\tDrivers: hv: vmbus: fix double free in the error path of vmbus_add_channel_work()\n\tDrivers: hv: vmbus: fix possible memory leak in vmbus_device_register()\n\tnet/mlx5: Fix FW tracer timestamp calculation\n\ttipc: set con sock in tipc_conn_alloc\n\ttipc: add an extra conn_get in tipc_conn_alloc\n\ttipc: check skb_linearize() return value in tipc_disc_rcv()\n\txfrm: Fix ignored return value in xfrm6_init()\n\tNFC: nci: fix memory leak in nci_rx_data_packet()\n\tregulator: twl6030: re-add TWL6032_SUBCLASS\n\tbnx2x: fix pci device refcount leak in bnx2x_vf_is_pcie_pending()\n\tdccp/tcp: Reset saddr on failure after inet6?_hash_connect().\n\ts390/dasd: fix no record found for raw_track_access\n\tnfc: st-nci: fix incorrect validating logic in EVT_TRANSACTION\n\tnfc: st-nci: fix memory leaks in EVT_TRANSACTION\n\tnet: thunderx: Fix the ACPI memory leak\n\ts390/crashdump: fix TOD programmable field size\n\tlib/vdso: use \"grep -E\" instead of \"egrep\"\n\tusb: dwc3: exynos: Fix remove() function\n\tarm64: dts: rockchip: lower rk3399-puma-haikou SD controller clock frequency\n\tiio: light: apds9960: fix wrong register for gesture gain\n\tiio: core: Fix entry not deleted when iio_register_sw_trigger_type() fails\n\tinit/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash\n\tnios2: add FORCE for vmlinuz.gz\n\tiio: ms5611: Simplify IO callback parameters\n\tiio: pressure: ms5611: fixed value compensation bug\n\tceph: do not update snapshot context when there is no new snapshot\n\tceph: avoid putting the realm twice when decoding snaps fails\n\tfirmware: google: Release devices before unregistering the bus\n\tfirmware: coreboot: Register bus in module init\n\tnilfs2: fix nilfs_sufile_mark_dirty() not set segment usage as dirty\n\tgcov: clang: fix the buffer overflow issue\n\tInput: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode\n\tASoC: Intel: bytcht_es8316: Add quirk for the Nanote UMPC-01\n\tserial: 8250: 8250_omap: Avoid RS485 RTS glitch on -\u003eset_termios()\n\txen/platform-pci: add missing free_irq() in error path\n\tplatform/x86: asus-wmi: add missing pci_dev_put() in asus_wmi_set_xusb2pr()\n\tplatform/x86: acer-wmi: Enable SW_TABLET_MODE on Switch V 10 (SW5-017)\n\tplatform/x86: hp-wmi: Ignore Smart Experience App event\n\ttcp: configurable source port perturb table size\n\tnet: usb: qmi_wwan: add Telit 0x103a composition\n\tdm integrity: flush the journal on suspend\n\tbinder: avoid potential data leakage when copying txn\n\tbinder: read pre-translated fds from sender buffer\n\tbinder: defer copies of pre-patched txn data\n\tbinder: fix pointer cast warning\n\tbinder: Address corner cases in deferred copy and fixup\n\tbinder: Gracefully handle BINDER_TYPE_FDA objects with num_fds\u003d0\n\tbtrfs: free btrfs_path before copying root refs to userspace\n\tbtrfs: free btrfs_path before copying fspath to userspace\n\tbtrfs: free btrfs_path before copying subvol info to userspace\n\tbtrfs: sysfs: normalize the error handling branch in btrfs_init_sysfs()\n\tdrm/amd/dc/dce120: Fix audio register mapping, stop triggering KASAN\n\tdrm/amdgpu: always register an MMU notifier for userptr\n\tdrm/i915: fix TLB invalidation for Gen12 video and compute engines\n\tfuse: lock inode unconditionally in fuse_fallocate()\n\tbtrfs: free btrfs_path before copying inodes to userspace\n\tspi: spi-imx: Fix spi_bus_clk if requested clock is higher than input clock\n\tbtrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker\n\tdrm/amdgpu: update drm_display_info correctly when the edid is read\n\tdrm/amdgpu: Partially revert \"drm/amdgpu: update drm_display_info correctly when the edid is read\"\n\tbtrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()\n\tiio: health: afe4403: Fix oob read in afe4403_read_raw\n\tiio: health: afe4404: Fix oob read in afe4404_[read|write]_raw\n\tiio: light: rpr0521: add missing Kconfig dependencies\n\tscripts/faddr2line: Fix regression in name resolution on ppc64le\n\thwmon: (i5500_temp) fix missing pci_disable_device()\n\thwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails\n\tof: property: decrement node refcount in of_fwnode_get_reference_args()\n\tnet/mlx5: Fix uninitialized variable bug in outlen_write()\n\tnet/mlx5e: Fix use-after-free when reverting termination table\n\tcan: sja1000_isa: sja1000_isa_probe(): add missing free_sja1000dev()\n\tcan: cc770: cc770_isa_probe(): add missing free_cc770dev()\n\tqlcnic: fix sleep-in-atomic-context bugs caused by msleep\n\twifi: cfg80211: fix buffer overflow in elem comparison\n\tnet: phy: fix null-ptr-deref while probe() failed\n\tnet: net_netdev: Fix error handling in ntb_netdev_init_module()\n\tnet/9p: Fix a potential socket leak in p9_socket_open\n\tnet: ethernet: nixge: fix NULL dereference\n\tdsa: lan9303: Correct stat name\n\tnet: hsr: Fix potential use-after-free\n\tafs: Fix fileserver probe RTT handling\n\tnet: tun: Fix use-after-free in tun_detach()\n\tpacket: do not set TP_STATUS_CSUM_VALID on CHECKSUM_COMPLETE\n\tsctp: fix memory leak in sctp_stream_outq_migrate()\n\tnet: ethernet: renesas: ravb: Fix promiscuous mode after system resumed\n\thwmon: (coretemp) Check for null before removing sysfs attrs\n\thwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new()\n\tnet/mlx5: DR, Fix uninitialized var warning\n\terror-injection: Add prompt for function error injection\n\ttools/vm/slabinfo-gnuplot: use \"grep -E\" instead of \"egrep\"\n\tnilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()\n\tx86/bugs: Make sure MSR_SPEC_CTRL is updated properly upon resume from S3\n\tpinctrl: intel: Save and restore pins in \"direct IRQ\" mode\n\tmmc: mmc_test: Fix removal of debugfs file\n\tmmc: core: Fix ambiguous TRIM and DISCARD arg\n\tmmc: sdhci-esdhc-imx: correct CQHCI exit halt state check\n\tmmc: sdhci-sprd: Fix no reset data and command after voltage switch\n\ttracing: Free buffers when a used dynamic event is removed\n\tarm64: Fix panic() when Spectre-v2 causes Spectre-BHB to re-allocate KVM vectors\n\tarm64: errata: Fix KVM Spectre-v2 mitigation selection for Cortex-A57/A72\n\tmm: Fix \u0027.data.once\u0027 orphan section warning\n\tASoC: ops: Fix bounds check for _sx controls\n\tpinctrl: single: Fix potential division by zero\n\tiommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init()\n\tparisc: Increase size of gcc stack frame check\n\txtensa: increase size of gcc stack frame check\n\tparisc: Increase FRAME_WARN to 2048 bytes on parisc\n\tKconfig.debug: provide a little extra FRAME_WARN leeway when KASAN is enabled\n\tselftests: net: add delete nexthop route warning test\n\tselftests: net: fix nexthop warning cleanup double ip typo\n\tipv4: Handle attempt to delete multipath route when fib_info contains an nh reference\n\tipv4: Fix route deletion when nexthop info is not specified\n\ttracing/ring-buffer: Have polling block on watermark\n\tepoll: call final ep_events_available() check under the lock\n\tepoll: check for events when removing a timed out thread from the wait queue\n\tnvme: restrict management ioctls to admin\n\tnvme: ensure subsystem reset is single threaded\n\tx86/tsx: Add a feature bit for TSX control MSR support\n\tx86/pm: Add enumeration check before spec MSRs save/restore setup\n\tBluetooth: L2CAP: Fix accepting connection request for invalid SPSM\n\tx86/ioremap: Fix page aligned size calculation in __ioremap_caller()\n\tRevert \"clocksource/drivers/riscv: Events are stopped during CPU suspend\"\n\tchar: tpm: Protect tpm_pm_suspend with locks\n\tmmc: sdhci: use FIELD_GET for preset value bit masks\n\tmmc: sdhci: Fix voltage switch delay\n\tproc: avoid integer type confusion in get_proc_long\n\tproc: proc_skip_spaces() shouldn\u0027t think it is working on C strings\n\tv4l2: don\u0027t fall back to follow_pfn() if pin_user_pages_fast() fails\n\tipc/sem: Fix dangling sem_array access in semtimedop race\n\tLinux 5.4.226\n\nChange-Id: I20fe6cd332455ffff094b2be6afa8302b20db571\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@google.com\u003e\n" }, { "commit": "dbcc3390015fc18814123e3fb0eea3da81c562e7", "tree": "751a3bdc31287f04a39615d603a29ee40aa42d30", "parents": [ "2b916ee1d37cc8e2da9bfe50a55390d5004843bd" ], "author": { "name": "Srikar Dronamraju", "email": "srikar@linux.vnet.ibm.com", "time": "Tue Sep 27 13:22:11 2022 +0530" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Dec 08 11:23:02 2022 +0100" }, "message": "scripts/faddr2line: Fix regression in name resolution on ppc64le\n\n[ Upstream commit 2d77de1581bb5b470486edaf17a7d70151131afd ]\n\nCommit 1d1a0e7c5100 (\"scripts/faddr2line: Fix overlapping text section\nfailures\") can cause faddr2line to fail on ppc64le on some\ndistributions, while it works fine on other distributions. The failure\ncan be attributed to differences in the readelf output.\n\n $ ./scripts/faddr2line vmlinux find_busiest_group+0x00\n no match for find_busiest_group+0x00\n\nOn ppc64le, readelf adds the localentry tag before the symbol name on\nsome distributions, and adds the localentry tag after the symbol name on\nother distributions. This problem has been discussed previously:\n\n https://lore.kernel.org/bpf/20191211160133.GB4580@calabresa/\n\nThis problem can be overcome by filtering out the localentry tags in the\nreadelf output. Similar fixes are already present in the kernel by way\nof the following commits:\n\n 1fd6cee127e2 (\"libbpf: Fix VERSIONED_SYM_COUNT number parsing\")\n aa915931ac3e (\"libbpf: Fix readelf output parsing for Fedora\")\n\n[jpoimboe: rework commit log]\n\nFixes: 1d1a0e7c5100 (\"scripts/faddr2line: Fix overlapping text section failures\")\nSigned-off-by: Srikar Dronamraju \u003csrikar@linux.vnet.ibm.com\u003e\nAcked-by: Naveen N. Rao \u003cnaveen.n.rao@linux.vnet.ibm.com\u003e\nReviewed-by: Thadeu Lima de Souza Cascardo \u003ccascardo@canonical.com\u003e\nLink: https://lore.kernel.org/r/20220927075211.897152-1-srikar@linux.vnet.ibm.com\nSigned-off-by: Josh Poimboeuf \u003cjpoimboe@kernel.org\u003e\nSigned-off-by: Peter Zijlstra \u003cpeterz@infradead.org\u003e\nSigned-off-by: Sasha Levin \u003csashal@kernel.org\u003e\n" }, { "commit": "17d66a1fd0e5004fe08405f2eca47b5d72f405d8", "tree": "a0c18a8bf7677be7c9e2f91acad973264d48ae8b", "parents": [ "d3df1dbcb248cf1a3240e863f62e9bffa2c792f8", "4d2a309b5c28a2edc0900542d22fec3a5a22243b" ], "author": { "name": "Greg Kroah-Hartman", "email": "gregkh@google.com", "time": "Tue Nov 29 16:39:04 2022 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@google.com", "time": "Tue Nov 29 16:39:04 2022 +0000" }, "message": "Merge 5.4.225 into android11-5.4-lts\n\nChanges in 5.4.225\n\txfs: preserve rmapbt swapext block reservation from freed blocks\n\txfs: rename xfs_bmap_is_real_extent to is_written_extent\n\txfs: redesign the reflink remap loop to fix blkres depletion crash\n\txfs: use MMAPLOCK around filemap_map_pages()\n\txfs: preserve inode versioning across remounts\n\txfs: drain the buf delwri queue before xfsaild idles\n\tphy: stm32: fix an error code in probe\n\twifi: cfg80211: silence a sparse RCU warning\n\twifi: cfg80211: fix memory leak in query_regdb_file()\n\tbpf, sockmap: Fix the sk-\u003esk_forward_alloc warning of sk_stream_kill_queues\n\tHID: hyperv: fix possible memory leak in mousevsc_probe()\n\tnet: gso: fix panic on frag_list with mixed head alloc types\n\tnet: tun: Fix memory leaks of napi_get_frags\n\tbnxt_en: Fix possible crash in bnxt_hwrm_set_coal()\n\tbnxt_en: fix potentially incorrect return value for ndo_rx_flow_steer\n\tnet: fman: Unregister ethernet device on removal\n\tcapabilities: fix undefined behavior in bit shift for CAP_TO_MASK\n\tnet: lapbether: fix issue of dev reference count leakage in lapbeth_device_event()\n\thamradio: fix issue of dev reference count leakage in bpq_device_event()\n\tdrm/vc4: Fix missing platform_unregister_drivers() call in vc4_drm_register()\n\tipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network\n\tcan: af_can: fix NULL pointer dereference in can_rx_register()\n\ttipc: fix the msg-\u003ereq tlv len check in tipc_nl_compat_name_table_dump_header\n\tdmaengine: pxa_dma: use platform_get_irq_optional\n\tdmaengine: mv_xor_v2: Fix a resource leak in mv_xor_v2_remove()\n\tdrivers: net: xgene: disable napi when register irq failed in xgene_enet_open()\n\tperf stat: Fix printing os-\u003eprefix in CSV metrics output\n\tnet: nixge: disable napi when enable interrupts failed in nixge_open()\n\tnet/mlx5: Allow async trigger completion execution on single CPU systems\n\tnet: cpsw: disable napi in cpsw_ndo_open()\n\tnet: cxgb3_main: disable napi when bind qsets failed in cxgb_up()\n\tcxgb4vf: shut down the adapter when t4vf_update_port_info() failed in cxgb4vf_open()\n\tethernet: s2io: disable napi when start nic failed in s2io_card_up()\n\tnet: mv643xx_eth: disable napi when init rxq or txq failed in mv643xx_eth_open()\n\tethernet: tundra: free irq when alloc ring failed in tsi108_open()\n\tnet: macvlan: fix memory leaks of macvlan_common_newlink\n\triscv: process: fix kernel info leakage\n\tarm64: efi: Fix handling of misaligned runtime regions and drop warning\n\tMIPS: jump_label: Fix compat branch range check\n\tmmc: cqhci: Provide helper for resetting both SDHCI and CQHCI\n\tmmc: sdhci-of-arasan: Fix SDHCI_RESET_ALL for CQHCI\n\tmmc: sdhci-tegra: Fix SDHCI_RESET_ALL for CQHCI\n\tALSA: hda/ca0132: add quirk for EVGA Z390 DARK\n\tALSA: hda: fix potential memleak in \u0027add_widget_node\u0027\n\tALSA: usb-audio: Add quirk entry for M-Audio Micro\n\tALSA: usb-audio: Add DSD support for Accuphase DAC-60\n\tvmlinux.lds.h: Fix placement of \u0027.data..decrypted\u0027 section\n\tnilfs2: fix deadlock in nilfs_count_free_blocks()\n\tnilfs2: fix use-after-free bug of ns_writer on remount\n\tdrm/i915/dmabuf: fix sg_table handling in map_dma_buf\n\tplatform/x86: hp_wmi: Fix rfkill causing soft blocked wifi\n\tbtrfs: selftests: fix wrong error check in btrfs_free_dummy_root()\n\tudf: Fix a slab-out-of-bounds write bug in udf_find_entry()\n\tcan: j1939: j1939_send_one(): fix missing CAN header initialization\n\tcert host tools: Stop complaining about deprecated OpenSSL functions\n\tdmaengine: at_hdmac: Fix at_lli struct definition\n\tdmaengine: at_hdmac: Don\u0027t start transactions at tx_submit level\n\tdmaengine: at_hdmac: Fix completion of unissued descriptor in case of errors\n\tdmaengine: at_hdmac: Don\u0027t allow CPU to reorder channel enable\n\tdmaengine: at_hdmac: Fix impossible condition\n\tdmaengine: at_hdmac: Check return code of dma_async_device_register\n\tnet: tun: call napi_schedule_prep() to ensure we own a napi\n\tx86/cpu: Restore AMD\u0027s DE_CFG MSR after resume\n\tASoC: wm5102: Revert \"ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe\"\n\tASoC: wm5110: Revert \"ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe\"\n\tASoC: wm8997: Revert \"ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe\"\n\tASoC: wm8962: Add an event handler for TEMP_HP and TEMP_SPK\n\tspi: intel: Fix the offset to get the 64K erase opcode\n\tASoC: codecs: jz4725b: add missed Line In power control bit\n\tASoC: codecs: jz4725b: fix reported volume for Master ctl\n\tASoC: codecs: jz4725b: use right control for Capture Volume\n\tASoC: codecs: jz4725b: fix capture selector naming\n\tselftests/futex: fix build for clang\n\tselftests/intel_pstate: fix build for ARCH\u003dx86_64\n\tNFSv4: Retry LOCK on OLD_STATEID during delegation return\n\ti2c: i801: add lis3lv02d\u0027s I2C address for Vostro 5568\n\tdrm/imx: imx-tve: Fix return type of imx_tve_connector_mode_valid\n\tbtrfs: remove pointless and double ulist frees in error paths of qgroup tests\n\tBluetooth: L2CAP: Fix l2cap_global_chan_by_psm\n\tASoC: codecs: jz4725b: Fix spelling mistake \"Sourc\" -\u003e \"Source\", \"Routee\" -\u003e \"Route\"\n\tspi: stm32: Print summary \u0027callbacks suppressed\u0027 message\n\tASoC: core: Fix use-after-free in snd_soc_exit()\n\tserial: 8250_omap: remove wait loop from Errata i202 workaround\n\tserial: 8250: omap: Fix unpaired pm_runtime_put_sync() in omap8250_remove()\n\tserial: 8250: omap: Flush PM QOS work on remove\n\tserial: imx: Add missing .thaw_noirq hook\n\ttty: n_gsm: fix sleep-in-atomic-context bug in gsm_control_send\n\tASoC: soc-utils: Remove __exit for snd_soc_util_exit()\n\tblock: sed-opal: kmalloc the cmd/resp buffers\n\tsiox: fix possible memory leak in siox_device_add()\n\tparport_pc: Avoid FIFO port location truncation\n\tpinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map\n\tarm64: dts: imx8mm: Fix NAND controller size-cells\n\tarm64: dts: imx8mn: Fix NAND controller size-cells\n\tata: libata-transport: fix double ata_host_put() in ata_tport_add()\n\tnet: bgmac: Drop free_netdev() from bgmac_enet_remove()\n\tmISDN: fix possible memory leak in mISDN_dsp_element_register()\n\tnet: liquidio: release resources when liquidio driver open failed\n\tmISDN: fix misuse of put_device() in mISDN_register_device()\n\tnet: macvlan: Use built-in RCU list checking\n\tnet: caif: fix double disconnect client in chnl_net_open()\n\tbnxt_en: Remove debugfs when pci_register_driver failed\n\txen/pcpu: fix possible memory leak in register_pcpu()\n\tdrbd: use after free in drbd_create_device()\n\tplatform/x86/intel: pmc: Don\u0027t unconditionally attach Intel PMC when virtualized\n\tnet/x25: Fix skb leak in x25_lapb_receive_frame()\n\tcifs: Fix wrong return value checking when GETFLAGS\n\tnet: thunderbolt: Fix error handling in tbnet_init()\n\tcifs: add check for returning value of SMB2_set_info_init\n\tftrace: Fix the possible incorrect kernel message\n\tftrace: Optimize the allocation for mcount entries\n\tftrace: Fix null pointer dereference in ftrace_add_mod()\n\tring_buffer: Do not deactivate non-existant pages\n\tALSA: usb-audio: Drop snd_BUG_ON() from snd_usbmidi_output_open()\n\tRevert \"usb: dwc3: disable USB core PHY management\"\n\tslimbus: stream: correct presence rate frequencies\n\tspeakup: fix a segfault caused by switching consoles\n\tUSB: serial: option: add Sierra Wireless EM9191\n\tUSB: serial: option: remove old LARA-R6 PID\n\tUSB: serial: option: add u-blox LARA-R6 00B modem\n\tUSB: serial: option: add u-blox LARA-L6 modem\n\tUSB: serial: option: add Fibocom FM160 0x0111 composition\n\tusb: add NO_LPM quirk for Realforce 87U Keyboard\n\tusb: chipidea: fix deadlock in ci_otg_del_timer\n\tiio: adc: at91_adc: fix possible memory leak in at91_adc_allocate_trigger()\n\tiio: trigger: sysfs: fix possible memory leak in iio_sysfs_trig_init()\n\tiio: pressure: ms5611: changed hardcoded SPI speed to value limited\n\tdm ioctl: fix misbehavior if list_versions races with module loading\n\tserial: 8250: Fall back to non-DMA Rx if IIR_RDI occurs\n\tserial: 8250_lpss: Configure DMA also w/o DMA filter\n\tInput: iforce - invert valid length check when fetching device IDs\n\tscsi: zfcp: Fix double free of FSF request when qdio send fails\n\tmmc: core: properly select voltage range without power cycle\n\tmmc: sdhci-pci-o2micro: fix card detect fail issue caused by CD# debounce timeout\n\tmmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put()\n\tdocs: update mediator contact information in CoC doc\n\tmisc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram()\n\tserial: 8250: Flush DMA Rx on RLSI\n\tring-buffer: Include dropped pages in counting dirty patches\n\tscsi: target: tcm_loop: Fix possible name leak in tcm_loop_setup_hba_bus()\n\tkprobes: Skip clearing aggrprobe\u0027s post_handler in kprobe-on-ftrace case\n\tInput: i8042 - fix leaking of platform device on module removal\n\tmacvlan: enforce a consistent minimal mtu\n\ttcp: cdg: allow tcp_cdg_release() to be called multiple times\n\tkcm: avoid potential race in kcm_tx_work\n\tbpf, test_run: Fix alignment problem in bpf_prog_test_run_skb()\n\tkcm: close race conditions on sk_receive_queue\n\t9p: trans_fd/p9_conn_cancel: drop client lock earlier\n\tgfs2: Check sb_bsize_shift after reading superblock\n\tgfs2: Switch from strlcpy to strscpy\n\t9p/trans_fd: always use O_NONBLOCK read/write\n\tmm: fs: initialize fsdata passed to write_begin/write_end interface\n\tntfs: fix use-after-free in ntfs_attr_find()\n\tntfs: fix out-of-bounds read in ntfs_attr_find()\n\tntfs: check overflow when iterating ATTR_RECORDs\n\tLinux 5.4.225\n\nChange-Id: I7c04b5784804b3883c8cac2b860e6ddfef6f5e1f\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@google.com\u003e\n" }, { "commit": "ab390c532e3c137908f46b7e5121f4974870f574", "tree": "c315a17112b786c9721a74279edad55571c40912", "parents": [ "d0513b095e1ef1469718564dec3fb3348556d0a8" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Jun 08 13:18:39 2022 -0700" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Fri Nov 25 17:42:10 2022 +0100" }, "message": "cert host tools: Stop complaining about deprecated OpenSSL functions\n\ncommit 6bfb56e93bcef41859c2d5ab234ffd80b691be35 upstream.\n\nOpenSSL 3.0 deprecated the OpenSSL\u0027s ENGINE API. That is as may be, but\nthe kernel build host tools still use it. Disable the warning about\ndeprecated declarations until somebody who cares fixes it.\n\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "dfdf3144ad3d8599faa385ab94b6cb4f81a2cd06", "tree": "1e73b052a1d35b7d90d1e269983f4810a782349b", "parents": [ "0c830ba471cbbe42dc299ae8329581f8bf160860" ], "author": { "name": "Matthias Maennich", "email": "maennich@google.com", "time": "Thu Nov 26 10:08:38 2020 +0000" }, "committer": { "name": "Michael Bestas", "email": "mkbestas@lineageos.org", "time": "Mon Nov 14 19:50:35 2022 +0200" }, "message": "ANDROID: extract-cert: omit PKCS#11 support if building against BoringSSL\n\nBoringSSL does not implement the ENGINE API. In Android we do not seem\nto rely on the PKCS#11 -\u003e DER extraction. Hence, make this conditional\non the SSL library used.\n\nBug: 135570712\nSigned-off-by: Matthias Maennich \u003cmaennich@google.com\u003e\nChange-Id: I84af6633dd470083497087c7dd1a2734480e2b0e\n" }, { "commit": "9aa2806a9f0a1abee802c73c4a9a672445b4991a", "tree": "71311192756bd677629598cc344d4203ecbe7cca", "parents": [ "ca79c1a408d65fb8da02c5d5ebb9a2e8e462da4c" ], "author": { "name": "Masahiro Yamada", "email": "masahiroy@kernel.org", "time": "Tue Feb 16 12:10:03 2021 +0900" }, "committer": { "name": "Michael Bestas", "email": "mkbestas@lineageos.org", "time": "Mon Nov 14 19:50:01 2022 +0200" }, "message": "UPSTREAM: kbuild: remove ld-version macro\n\nThere is no direct user of ld-version; you can use CONFIG_LD_VERSION\nif needed.\n\nSigned-off-by: Masahiro Yamada \u003cmasahiroy@kernel.org\u003e\nReviewed-by: Nathan Chancellor \u003cnathan@kernel.org\u003e\nBug: 209655537\n(cherry picked from commit 05f6bbf2d714309607d5533f0265a95d037610b4)\nSigned-off-by: Nick Desaulniers \u003cndesaulniers@google.com\u003e\nChange-Id: If7f82474beea2822340ee8503de5087336766223\n" }, { "commit": "c9a88abc0dfb03c2b2bc6a0fd89e56da3da2336f", "tree": "a67078534d17b497395358cd0ef0e507ef9741e6", "parents": [ "d469b7c0cca35f0a742fefe7380529d517fe1af3" ], "author": { "name": "Catalin Marinas", "email": "catalin.marinas@arm.com", "time": "Wed Jan 15 11:30:07 2020 +0000" }, "committer": { "name": "Michael Bestas", "email": "mkbestas@lineageos.org", "time": "Mon Nov 14 03:04:02 2022 +0200" }, "message": "UPSTREAM: kbuild: Add support for \u0027as-instr\u0027 to be used in Kconfig files\n\ncommit 42d519e3d0c071161d0a1c36e95a3743b113c590 upstream.\n\nSimilar to \u0027cc-option\u0027 or \u0027ld-option\u0027, it is occasionally necessary to\ncheck whether the assembler supports certain ISA extensions. In the\narm64 code we currently do this in Makefile with an additional define:\n\nlseinstr :\u003d $(call as-instr,.arch_extension lse,-DCONFIG_AS_LSE\u003d1)\n\nAdd the \u0027as-instr\u0027 option so that it can be used in Kconfig directly:\n\n\tdef_bool $(as-instr,.arch_extension lse)\n\nAcked-by: Masahiro Yamada \u003cmasahiroy@kernel.org\u003e\nReviewed-by: Vladimir Murzin \u003cvladimir.murzin@arm.com\u003e\nTested-by: Vladimir Murzin \u003cvladimir.murzin@arm.com\u003e\nSigned-off-by: Catalin Marinas \u003ccatalin.marinas@arm.com\u003e\nSigned-off-by: Will Deacon \u003cwill@kernel.org\u003e\nSigned-off-by: Nick Desaulniers \u003cndesaulniers@google.com\u003e\nBug: 141693040\nChange-Id: I73e7c52a5449ead65729a1e8b2b09ef2d87976da\n" }, { "commit": "148cfe859fcba2b9b75f20f3e212a6be5116c66c", "tree": "1c3e422a87318dbf8093ca6c0e81ed17b5472865", "parents": [ "ae5c69d8071898aa6689b3359a4c9cfd6aa2580f" ], "author": { "name": "Nick Desaulniers", "email": "ndesaulniers@google.com", "time": "Tue Nov 10 11:37:31 2020 -0800" }, "committer": { "name": "Michael Bestas", "email": "mkbestas@lineageos.org", "time": "Mon Nov 14 03:04:01 2022 +0200" }, "message": "Revert \"ANDROID: Kbuild, LLVMLinux: allow overriding clang target triple\"\n\nThis reverts commit e145f7b10374662f03889c2dea0fdc14df7f1371.\n\nAOSP\u0027s distribution of GNU binutils always had a curious target triple\nprefix on the binaries. Now that GNU binutils is deprecated for Android\nCommon Kernels, we can now remove this out of tree workaround. Now\nbuilding Android kernels with LLVM matches upstream (see\nDocumentation/kbuild/llvm.rst).\n\nBug: 118439987\nBug: 120440614\nBug: 141693040\nSigned-off-by: Nick Desaulniers \u003cndesaulniers@google.com\u003e\nChange-Id: Iecaa3264a440f795f2f3a44bdf74fe28ad4ed1cc\n" }, { "commit": "ea14bd8d07661cd1fbc71009810c188192cbffa2", "tree": "929b4c5916e68eb2dc1637d39cb127ab162fa44e", "parents": [ "9c70abfc5e5ac59a06c7afa270023cd18b5f18ff" ], "author": { "name": "Nathan Chancellor", "email": "natechancellor@gmail.com", "time": "Mon Jul 23 13:32:53 2018 -0700" }, "committer": { "name": "Michael Bestas", "email": "mkbestas@lineageos.org", "time": "Mon Nov 14 03:03:59 2022 +0200" }, "message": "scripts: Remove gcc-wrapper.py\n\nThis adds an unnecessary dependency on Python when regular -Werror will do fine.\n\nChange-Id: I81f0e52e7270923f7e3d30a79ec9e9205d47ae0b\nSigned-off-by: Nathan Chancellor \u003cnatechancellor@gmail.com\u003e\n" }, { "commit": "9c70abfc5e5ac59a06c7afa270023cd18b5f18ff", "tree": "5b0e4ffb4dc8ac608f28a49609e53adb19ab71ae", "parents": [ "99fc40776e4a9335ddbe784ea4492ee9fdf04409", "482efd771f45b37a7da107bd8289b52164574aaa" ], "author": { "name": "Michael Bestas", "email": "mkbestas@lineageos.org", "time": "Wed Nov 09 19:53:28 2022 +0200" }, "committer": { "name": "Michael Bestas", "email": "mkbestas@lineageos.org", "time": "Wed Nov 09 19:53:28 2022 +0200" }, "message": "Merge tag \u0027ASB-2022-11-01_11-5.4\u0027 of https://android.googlesource.com/kernel/common into android13-5.4-lahaina\n\nhttps://source.android.com/docs/security/bulletin/2022-11-01\n\n* tag \u0027ASB-2022-11-01_11-5.4\u0027 of https://android.googlesource.com/kernel/common:\n UPSTREAM: mm/mremap: hold the rmap lock in write mode when moving page table entries.\n FROMLIST: binder: fix UAF of alloc-\u003evma in race with munmap()\n UPSTREAM: mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()\n UPSTREAM: mm: Force TLB flush for PFNMAP mappings before unlink_file_vma()\n UPSTREAM: af_key: Do not call xfrm_probe_algs in parallel\n UPSTREAM: wifi: cfg80211: fix u8 overflow in cfg80211_update_notlisted_nontrans()\n UPSTREAM: wifi: cfg80211/mac80211: reject bad MBSSID elements\n UPSTREAM: wifi: cfg80211: ensure length byte is present before access\n UPSTREAM: wifi: cfg80211: fix BSS refcounting bugs\n UPSTREAM: wifi: cfg80211: avoid nontransmitted BSS list corruption\n UPSTREAM: wifi: mac80211_hwsim: avoid mac80211 warning on bad rate\n UPSTREAM: wifi: cfg80211: update hidden BSSes to avoid WARN_ON\n UPSTREAM: mac80211: mlme: find auth challenge directly\n UPSTREAM: wifi: mac80211: don\u0027t parse mbssid in assoc response\n UPSTREAM: wifi: mac80211: fix MBSSID parsing use-after-free\n ANDROID: Drop explicit \u0027CONFIG_INIT_STACK_ALL_ZERO\u003dy\u0027 from gki_defconfig\n UPSTREAM: hardening: Remove Clang\u0027s enable flag for -ftrivial-auto-var-init\u003dzero\n UPSTREAM: hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO\n UPSTREAM: hardening: Clarify Kconfig text for auto-var-init\n ANDROID: GKI: Update FCNT KMI symbol list\n ANDROID: Fix kenelci build-break for !CONFIG_PERF_EVENTS\n BACKPORT: HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report\n ANDROID: ABI: Update allowed list for QCOM\n UPSTREAM: wifi: mac80211_hwsim: use 32-bit skb cookie\n UPSTREAM: wifi: mac80211_hwsim: add back erroneously removed cast\n UPSTREAM: wifi: mac80211_hwsim: fix race condition in pending packet\n ANDROID: incfs: Add check for ATTR_KILL_SUID and ATTR_MODE in incfs_setattr\n Linux 5.4.210\n x86/speculation: Add LFENCE to RSB fill sequence\n x86/speculation: Add RSB VM Exit protections\n macintosh/adb: fix oob read in do_adb_query() function\n media: v4l2-mem2mem: Apply DST_QUEUE_OFF_BASE on MMAP buffers across ioctls\n selftests: KVM: Handle compiler optimizations in ucall\n KVM: Don\u0027t null dereference ops-\u003edestroy\n selftests/bpf: Fix \"dubious pointer arithmetic\" test\n selftests/bpf: Fix test_align verifier log patterns\n bpf: Test_verifier, #70 error message updates for 32-bit right shift\n selftests/bpf: Extend verifier and bpf_sock tests for dst_port loads\n bpf: Verifer, adjust_scalar_min_max_vals to always call update_reg_bounds()\n ACPI: APEI: Better fix to avoid spamming the console with old error logs\n ACPI: video: Shortening quirk list by identifying Clevo by board_name only\n ACPI: video: Force backlight native for some TongFang devices\n thermal: Fix NULL pointer dereferences in of_thermal_ functions\n ANDROID: GKI: db845c: Update symbols list and ABI\n Linux 5.4.209\n scsi: core: Fix race between handling STS_RESOURCE and completion\n mt7601u: add USB device ID for some versions of XiaoDu WiFi Dongle.\n ARM: crypto: comment out gcc warning that breaks clang builds\n sctp: leave the err path free in sctp_stream_init to sctp_stream_free\n sfc: disable softirqs for ptp TX\n perf symbol: Correct address for bss symbols\n virtio-net: fix the race between refill work and close\n netfilter: nf_queue: do not allow packet truncation below transport header offset\n sctp: fix sleep in atomic context bug in timer handlers\n i40e: Fix interface init with MSI interrupts (no MSI-X)\n tcp: Fix a data-race around sysctl_tcp_comp_sack_nr.\n tcp: Fix a data-race around sysctl_tcp_comp_sack_delay_ns.\n Documentation: fix sctp_wmem in ip-sysctl.rst\n tcp: Fix a data-race around sysctl_tcp_invalid_ratelimit.\n tcp: Fix a data-race around sysctl_tcp_autocorking.\n tcp: Fix a data-race around sysctl_tcp_min_rtt_wlen.\n tcp: Fix a data-race around sysctl_tcp_min_tso_segs.\n net: sungem_phy: Add of_node_put() for reference returned by of_get_parent()\n igmp: Fix data-races around sysctl_igmp_qrv.\n ipv6/addrconf: fix a null-ptr-deref bug for ip6_ptr\n net: ping6: Fix memleak in ipv6_renew_options().\n tcp: Fix a data-race around sysctl_tcp_challenge_ack_limit.\n tcp: Fix a data-race around sysctl_tcp_limit_output_bytes.\n scsi: ufs: host: Hold reference returned by of_parse_phandle()\n ice: do not setup vlan for loopback VSI\n ice: check (DD | EOF) bits on Rx descriptor rather than (EOP | RS)\n tcp: Fix a data-race around sysctl_tcp_nometrics_save.\n tcp: Fix a data-race around sysctl_tcp_frto.\n tcp: Fix a data-race around sysctl_tcp_adv_win_scale.\n tcp: Fix a data-race around sysctl_tcp_app_win.\n tcp: Fix data-races around sysctl_tcp_dsack.\n s390/archrandom: prevent CPACF trng invocations in interrupt context\n ntfs: fix use-after-free in ntfs_ucsncmp()\n Bluetooth: L2CAP: Fix use-after-free caused by l2cap_chan_put\n ANDROID: restore some removed refcount functions\n ANDROID: add tty_schedule_flip() back to the kernel\n Linux 5.4.208\n x86: drop bogus \"cc\" clobber from __try_cmpxchg_user_asm()\n net: usb: ax88179_178a needs FLAG_SEND_ZLP\n tty: use new tty_insert_flip_string_and_push_buffer() in pty_write()\n tty: extract tty_flip_buffer_commit() from tty_flip_buffer_push()\n tty: drop tty_schedule_flip()\n tty: the rest, stop using tty_schedule_flip()\n tty: drivers/tty/, stop using tty_schedule_flip()\n Bluetooth: Fix bt_skb_sendmmsg not allocating partial chunks\n Bluetooth: SCO: Fix sco_send_frame returning skb-\u003elen\n Bluetooth: Fix passing NULL to PTR_ERR\n Bluetooth: RFCOMM: Replace use of memcpy_from_msg with bt_skb_sendmmsg\n Bluetooth: SCO: Replace use of memcpy_from_msg with bt_skb_sendmsg\n Bluetooth: Add bt_skb_sendmmsg helper\n Bluetooth: Add bt_skb_sendmsg helper\n ALSA: memalloc: Align buffer allocations in page size\n bitfield.h: Fix \"type of reg too small for mask\" test\n x86/mce: Deduplicate exception handling\n mmap locking API: initial implementation as rwsem wrappers\n x86/uaccess: Implement macros for CMPXCHG on user addresses\n x86: get rid of small constant size cases in raw_copy_{to,from}_user()\n locking/refcount: Consolidate implementations of refcount_t\n locking/refcount: Consolidate REFCOUNT_{MAX,SATURATED} definitions\n locking/refcount: Move saturation warnings out of line\n locking/refcount: Improve performance of generic REFCOUNT_FULL code\n locking/refcount: Move the bulk of the REFCOUNT_FULL implementation into the \u003clinux/refcount.h\u003e header\n locking/refcount: Remove unused refcount_*_checked() variants\n locking/refcount: Ensure integer operands are treated as signed\n locking/refcount: Define constants for saturation and max refcount values\n ima: remove the IMA_TEMPLATE Kconfig option\n dlm: fix pending remove if msg allocation fails\n bpf: Make sure mac_header was set before using it\n mm/mempolicy: fix uninit-value in mpol_rebind_policy()\n spi: bcm2835: bcm2835_spi_handle_err(): fix NULL pointer deref for non DMA transfers\n tcp: Fix data-races around sysctl_tcp_max_reordering.\n tcp: Fix a data-race around sysctl_tcp_rfc1337.\n tcp: Fix a data-race around sysctl_tcp_stdurg.\n tcp: Fix a data-race around sysctl_tcp_retrans_collapse.\n tcp: Fix data-races around sysctl_tcp_slow_start_after_idle.\n tcp: Fix a data-race around sysctl_tcp_thin_linear_timeouts.\n tcp: Fix data-races around sysctl_tcp_recovery.\n tcp: Fix a data-race around sysctl_tcp_early_retrans.\n tcp: Fix data-races around sysctl knobs related to SYN option.\n udp: Fix a data-race around sysctl_udp_l3mdev_accept.\n ipv4: Fix a data-race around sysctl_fib_multipath_use_neigh.\n be2net: Fix buffer overflow in be_get_module_eeprom\n gpio: pca953x: only use single read/write for No AI mode\n ixgbe: Add locking to prevent panic when setting sriov_numvfs to zero\n i40e: Fix erroneous adapter reinitialization during recovery process\n iavf: Fix handling of dummy receive descriptors\n tcp: Fix data-races around sysctl_tcp_fastopen.\n tcp: Fix data-races around sysctl_max_syn_backlog.\n tcp: Fix a data-race around sysctl_tcp_tw_reuse.\n tcp: Fix a data-race around sysctl_tcp_notsent_lowat.\n tcp: Fix data-races around some timeout sysctl knobs.\n tcp: Fix data-races around sysctl_tcp_reordering.\n tcp: Fix data-races around sysctl_tcp_syncookies.\n igmp: Fix a data-race around sysctl_igmp_max_memberships.\n igmp: Fix data-races around sysctl_igmp_llm_reports.\n net/tls: Fix race in TLS device down flow\n net: stmmac: fix dma queue left shift overflow issue\n i2c: cadence: Change large transfer count reset logic to be unconditional\n tcp: Fix a data-race around sysctl_tcp_probe_interval.\n tcp: Fix a data-race around sysctl_tcp_probe_threshold.\n tcp: Fix a data-race around sysctl_tcp_mtu_probe_floor.\n tcp: Fix data-races around sysctl_tcp_min_snd_mss.\n tcp: Fix data-races around sysctl_tcp_base_mss.\n tcp: Fix data-races around sysctl_tcp_mtu_probing.\n tcp/dccp: Fix a data-race around sysctl_tcp_fwmark_accept.\n ip: Fix a data-race around sysctl_fwmark_reflect.\n ip: Fix data-races around sysctl_ip_nonlocal_bind.\n ip: Fix data-races around sysctl_ip_fwd_use_pmtu.\n ip: Fix data-races around sysctl_ip_no_pmtu_disc.\n igc: Reinstate IGC_REMOVED logic and implement it properly\n perf/core: Fix data race between perf_event_set_output() and perf_mmap_close()\n pinctrl: ralink: Check for null return of devm_kcalloc\n power/reset: arm-versatile: Fix refcount leak in versatile_reboot_probe\n xfrm: xfrm_policy: fix a possible double xfrm_pols_put() in xfrm_bundle_lookup()\n serial: mvebu-uart: correctly report configured baudrate value\n PCI: hv: Fix interrupt mapping for multi-MSI\n PCI: hv: Reuse existing IRTE allocation in compose_msi_msg()\n PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI\n PCI: hv: Fix multi-MSI to allow more than one MSI vector\n xen/gntdev: Ignore failure to unmap INVALID_GRANT_HANDLE\n lockdown: Fix kexec lockdown bypass with ima policy\n mlxsw: spectrum_router: Fix IPv4 nexthop gateway indication\n riscv: add as-options for modules with assembly compontents\n pinctrl: stm32: fix optional IRQ support to gpios\n Revert \"cgroup: Use separate src/dst nodes when preloading css_sets for migration\"\n Linux 5.4.207\n can: m_can: m_can_tx_handler(): fix use after free of skb\n serial: pl011: UPSTAT_AUTORTS requires .throttle/unthrottle\n serial: stm32: Clear prev values before setting RTS delays\n serial: 8250: fix return error code in serial8250_request_std_resource()\n tty: serial: samsung_tty: set dma burst_size to 1\n usb: dwc3: gadget: Fix event pending check\n usb: typec: add missing uevent when partner support PD\n USB: serial: ftdi_sio: add Belimo device ids\n signal handling: don\u0027t use BUG_ON() for debugging\n ARM: dts: stm32: use the correct clock source for CEC on stm32mp151\n soc: ixp4xx/npe: Fix unused match warning\n x86: Clear .brk area at early boot\n irqchip: or1k-pic: Undefine mask_ack for level triggered hardware\n ASoC: madera: Fix event generation for rate controls\n ASoC: madera: Fix event generation for OUT1 demux\n ASoC: cs47l15: Fix event generation for low power mux control\n ASoC: wm5110: Fix DRE control\n ASoC: ops: Fix off by one in range control validation\n net: sfp: fix memory leak in sfp_probe()\n nvme: fix regression when disconnect a recovering ctrl\n NFC: nxp-nci: don\u0027t print header length mismatch on i2c error\n net: tipc: fix possible refcount leak in tipc_sk_create()\n platform/x86: hp-wmi: Ignore Sanitization Mode event\n cpufreq: pmac32-cpufreq: Fix refcount leak bug\n netfilter: br_netfilter: do not skip all hooks with 0 priority\n virtio_mmio: Restore guest page size on resume\n virtio_mmio: Add missing PM calls to freeze/restore\n mm: sysctl: fix missing numa_stat when !CONFIG_HUGETLB_PAGE\n sfc: fix kernel panic when creating VF\n seg6: bpf: fix skb checksum in bpf_push_seg6_encap()\n seg6: fix skb checksum in SRv6 End.B6 and End.B6.Encaps behaviors\n seg6: fix skb checksum evaluation in SRH encapsulation/insertion\n sfc: fix use after free when disabling sriov\n net: ftgmac100: Hold reference returned by of_get_child_by_name()\n ipv4: Fix data-races around sysctl_ip_dynaddr.\n raw: Fix a data-race around sysctl_raw_l3mdev_accept.\n icmp: Fix a data-race around sysctl_icmp_ratemask.\n icmp: Fix a data-race around sysctl_icmp_ratelimit.\n drm/i915/gt: Serialize TLB invalidates with GT resets\n ARM: dts: sunxi: Fix SPI NOR campatible on Orange Pi Zero\n ARM: dts: at91: sama5d2: Fix typo in i2s1 node\n ipv4: Fix a data-race around sysctl_fib_sync_mem.\n icmp: Fix data-races around sysctl.\n cipso: Fix data-races around sysctl.\n net: Fix data-races around sysctl_mem.\n inetpeer: Fix data-races around sysctl.\n net: stmmac: dwc-qos: Disable split header for Tegra194\n ASoC: sgtl5000: Fix noise on shutdown/remove\n ima: Fix a potential integer overflow in ima_appraise_measurement\n drm/i915: fix a possible refcount leak in intel_dp_add_mst_connector()\n ARM: 9210/1: Mark the FDT_FIXED sections as shareable\n ARM: 9209/1: Spectre-BHB: avoid pr_info() every time a CPU comes out of idle\n ARM: dts: imx6qdl-ts7970: Fix ngpio typo and count\n ext4: fix race condition between ext4_write and ext4_convert_inline_data\n sched/rt: Disable RT_RUNTIME_SHARE by default\n Revert \"evm: Fix memleak in init_desc\"\n nilfs2: fix incorrect masking of permission flags for symlinks\n drm/panfrost: Fix shrinker list corruption by madvise IOCTL\n cgroup: Use separate src/dst nodes when preloading css_sets for migration\n wifi: mac80211: fix queue selection for mesh/OCB interfaces\n ARM: 9214/1: alignment: advance IT state after emulating Thumb instruction\n ARM: 9213/1: Print message about disabled Spectre workarounds only once\n ip: fix dflt addr selection for connected nexthop\n net: sock: tracing: Fix sock_exceed_buf_limit not to dereference stale pointer\n tracing/histograms: Fix memory leak problem\n xen/netback: avoid entering xenvif_rx_next_skb() with an empty rx queue\n ALSA: hda/realtek - Enable the headset-mic on a Xiaomi\u0027s laptop\n ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc221\n ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc671\n ALSA: hda/conexant: Apply quirk for another HP ProDesk 600 G3 model\n ALSA: hda - Add fixup for Dell Latitidue E5430\n Linux 5.4.206\n Revert \"mtd: rawnand: gpmi: Fix setting busy timeout setting\"\n Linux 5.4.205\n dmaengine: ti: Add missing put_device in ti_dra7_xbar_route_allocate\n dmaengine: ti: Fix refcount leak in ti_dra7_xbar_route_allocate\n dmaengine: at_xdma: handle errors of at_xdmac_alloc_desc() correctly\n dmaengine: pl330: Fix lockdep warning about non-static key\n ida: don\u0027t use BUG_ON() for debugging\n dt-bindings: dma: allwinner,sun50i-a64-dma: Fix min/max typo\n misc: rtsx_usb: set return value in rsp_buf alloc err path\n misc: rtsx_usb: use separate command and response buffers\n misc: rtsx_usb: fix use of dma mapped buffer for usb bulk transfer\n dmaengine: imx-sdma: Allow imx8m for imx7 FW revs\n i2c: cadence: Unregister the clk notifier in error path\n selftests: forwarding: fix error message in learning_test\n selftests: forwarding: fix learning_test when h1 supports IFF_UNICAST_FLT\n selftests: forwarding: fix flood_unicast_test when h2 supports IFF_UNICAST_FLT\n ibmvnic: Properly dispose of all skbs during a failover.\n ARM: at91: pm: use proper compatibles for sam9x60\u0027s rtc and rtt\n ARM: at91: pm: use proper compatible for sama5d2\u0027s rtc\n pinctrl: sunxi: sunxi_pconf_set: use correct offset\n pinctrl: sunxi: a83t: Fix NAND function name for some pins\n ARM: meson: Fix refcount leak in meson_smp_prepare_cpus\n xfs: remove incorrect ASSERT in xfs_rename\n can: kvaser_usb: kvaser_usb_leaf: fix bittiming limits\n can: kvaser_usb: kvaser_usb_leaf: fix CAN clock frequency regression\n can: kvaser_usb: replace run-time checks with struct kvaser_usb_driver_info\n powerpc/powernv: delay rng platform device creation until later in boot\n video: of_display_timing.h: include errno.h\n fbcon: Prevent that screen size is smaller than font size\n fbcon: Disallow setting font bigger than screen size\n fbmem: Check virtual screen sizes in fb_set_var()\n fbdev: fbmem: Fix logo center image dx issue\n iommu/vt-d: Fix PCI bus rescan device hot add\n net: rose: fix UAF bug caused by rose_t0timer_expiry\n usbnet: fix memory leak in error case\n can: gs_usb: gs_usb_open/close(): fix memory leak\n can: grcan: grcan_probe(): remove extra of_node_get()\n can: bcm: use call_rcu() instead of costly synchronize_rcu()\n mm/slub: add missing TID updates on slab deactivation\n esp: limit skb_page_frag_refill use to a single page\n Linux 5.4.204\n clocksource/drivers/ixp4xx: remove EXPORT_SYMBOL_GPL from ixp4xx_timer_setup()\n net: usb: qmi_wwan: add Telit 0x1070 composition\n net: usb: qmi_wwan: add Telit 0x1060 composition\n xen/arm: Fix race in RB-tree based P2M accounting\n xen/blkfront: force data bouncing when backend is untrusted\n xen/netfront: force data bouncing when backend is untrusted\n xen/netfront: fix leaking data in shared pages\n xen/blkfront: fix leaking data in shared pages\n selftests/rseq: Change type of rseq_offset to ptrdiff_t\n selftests/rseq: x86-32: use %gs segment selector for accessing rseq thread area\n selftests/rseq: x86-64: use %fs segment selector for accessing rseq thread area\n selftests/rseq: Fix: work-around asm goto compiler bugs\n selftests/rseq: Remove arm/mips asm goto compiler work-around\n selftests/rseq: Fix warnings about #if checks of undefined tokens\n selftests/rseq: Fix ppc32 offsets by using long rather than off_t\n selftests/rseq: Fix ppc32 missing instruction selection \"u\" and \"x\" for load/store\n selftests/rseq: Fix ppc32: wrong rseq_cs 32-bit field pointer on big endian\n selftests/rseq: Uplift rseq selftests for compatibility with glibc-2.35\n selftests/rseq: Introduce thread pointer getters\n selftests/rseq: Introduce rseq_get_abi() helper\n selftests/rseq: Remove volatile from __rseq_abi\n selftests/rseq: Remove useless assignment to cpu variable\n selftests/rseq: introduce own copy of rseq uapi header\n selftests/rseq: remove ARRAY_SIZE define from individual tests\n rseq/selftests,x86_64: Add rseq_offset_deref_addv()\n ipv6/sit: fix ipip6_tunnel_get_prl return value\n sit: use min\n net: dsa: bcm_sf2: force pause link settings\n hwmon: (ibmaem) don\u0027t call platform_device_del() if platform_device_add() fails\n xen/gntdev: Avoid blocking in unmap_grant_pages()\n net: tun: avoid disabling NAPI twice\n NFC: nxp-nci: Don\u0027t issue a zero length i2c_master_read()\n nfc: nfcmrvl: Fix irq_of_parse_and_map() return value\n net: bonding: fix use-after-free after 802.3ad slave unbind\n net: bonding: fix possible NULL deref in rlb code\n net/sched: act_api: Notify user space if any actions were flushed before error\n netfilter: nft_dynset: restore set element counter when failing to update\n s390: remove unneeded \u0027select BUILD_BIN2C\u0027\n PM / devfreq: exynos-ppmu: Fix refcount leak in of_get_devfreq_events\n caif_virtio: fix race between virtio_device_ready() and ndo_open()\n net: ipv6: unexport __init-annotated seg6_hmac_net_init()\n usbnet: fix memory allocation in helpers\n linux/dim: Fix divide by 0 in RDMA DIM\n RDMA/qedr: Fix reporting QP timeout attribute\n net: tun: stop NAPI when detaching queues\n net: tun: unlink NAPI from device on destruction\n selftests/net: pass ipv6_args to udpgso_bench\u0027s IPv6 TCP test\n virtio-net: fix race between ndo_open() and virtio_device_ready()\n net: usb: ax88179_178a: Fix packet receiving\n net: rose: fix UAF bugs caused by timer handler\n SUNRPC: Fix READ_PLUS crasher\n s390/archrandom: simplify back to earlier design and initialize earlier\n dm raid: fix KASAN warning in raid5_add_disks\n dm raid: fix accesses beyond end of raid member array\n powerpc/bpf: Fix use of user_pt_regs in uapi\n powerpc/prom_init: Fix kernel config grep\n nvdimm: Fix badblocks clear off-by-one error\n ipv6: take care of disable_policy when restoring routes\n Linux 5.4.203\n crypto: arm/ghash-ce - define fpu before fpu registers are referenced\n crypto: arm - use Kconfig based compiler checks for crypto opcodes\n ARM: 9029/1: Make iwmmxt.S support Clang\u0027s integrated assembler\n ARM: OMAP2+: drop unnecessary adrl\n ARM: 8929/1: use APSR_nzcv instead of r15 as mrc operand\n ARM: 8933/1: replace Sun/Solaris style flag on section directive\n crypto: arm/sha512-neon - avoid ADRL pseudo instruction\n crypto: arm/sha256-neon - avoid ADRL pseudo instruction\n ARM: 8971/1: replace the sole use of a symbol with its definition\n ARM: 8990/1: use VFP assembler mnemonics in register load/store macros\n ARM: 8989/1: use .fpu assembler directives instead of assembler arguments\n net: mscc: ocelot: allow unregistered IP multicast flooding\n kexec_file: drop weak attribute from arch_kexec_apply_relocations[_add]\n powerpc/ftrace: Remove ftrace init tramp once kernel init is complete\n drm: remove drm_fb_helper_modinit\n Linux 5.4.202\n powerpc/pseries: wire up rng during setup_arch()\n kbuild: link vmlinux only once for CONFIG_TRIM_UNUSED_KSYMS (2nd attempt)\n random: update comment from copy_to_user() -\u003e copy_to_iter()\n modpost: fix section mismatch check for exported init/exit sections\n ARM: cns3xxx: Fix refcount leak in cns3xxx_init\n ARM: Fix refcount leak in axxia_boot_secondary\n soc: bcm: brcmstb: pm: pm-arm: Fix refcount leak in brcmstb_pm_probe\n ARM: exynos: Fix refcount leak in exynos_map_pmu\n ARM: dts: imx6qdl: correct PU regulator ramp delay\n powerpc/powernv: wire up rng during setup_arch\n powerpc/rtas: Allow ibm,platform-dump RTAS call with null buffer address\n powerpc: Enable execve syscall exit tracepoint\n parisc: Enable ARCH_HAS_STRICT_MODULE_RWX\n xtensa: Fix refcount leak bug in time.c\n xtensa: xtfpga: Fix refcount leak bug in setup\n iio: adc: axp288: Override TS pin bias current for some models\n iio: adc: stm32: fix maximum clock rate for stm32mp15x\n iio: trigger: sysfs: fix use-after-free on remove\n iio: gyro: mpu3050: Fix the error handling in mpu3050_power_up()\n iio: accel: mma8452: ignore the return value of reset operation\n iio:accel:mxc4005: rearrange iio trigger get and register\n iio:accel:bma180: rearrange iio trigger get and register\n iio:chemical:ccs811: rearrange iio trigger get and register\n usb: chipidea: udc: check request status before setting device address\n xhci: turn off port power in shutdown\n iio: adc: vf610: fix conversion mode sysfs node name\n s390/cpumf: Handle events cycles and instructions identical\n gpio: winbond: Fix error code in winbond_gpio_get()\n Revert \"net/tls: fix tls_sk_proto_close executed repeatedly\"\n virtio_net: fix xdp_rxq_info bug after suspend/resume\n igb: Make DMA faster when CPU is active on the PCIe link\n regmap-irq: Fix a bug in regmap_irq_enable() for type_in_mask chips\n ice: ethtool: advertise 1000M speeds properly\n afs: Fix dynamic root getattr\n MIPS: Remove repetitive increase irq_err_count\n x86/xen: Remove undefined behavior in setup_features()\n udmabuf: add back sanity check\n net/tls: fix tls_sk_proto_close executed repeatedly\n erspan: do not assume transport header is always set\n drm/msm/mdp4: Fix refcount leak in mdp4_modeset_init_intf\n net/sched: sch_netem: Fix arithmetic in netem_dump() for 32-bit platforms\n bonding: ARP monitor spams NETDEV_NOTIFY_PEERS notifiers\n phy: aquantia: Fix AN when higher speeds than 1G are not advertised\n bpf: Fix request_sock leak in sk lookup helpers\n USB: serial: option: add Quectel RM500K module support\n USB: serial: option: add Quectel EM05-G modem\n USB: serial: option: add Telit LE910Cx 0x1250 composition\n random: quiet urandom warning ratelimit suppression message\n dm mirror log: clear log bits up to BITS_PER_LONG boundary\n dm era: commit metadata in postsuspend after worker stops\n ata: libata: add qc-\u003eflags in ata_qc_complete_template tracepoint\n mtd: rawnand: gpmi: Fix setting busy timeout setting\n mmc: sdhci-pci-o2micro: Fix card detect by dealing with debouncing\n net: openvswitch: fix parsing of nw_proto for IPv6 fragments\n ALSA: hda/realtek: Add quirk for Clevo PD70PNT\n ALSA: hda/realtek - ALC897 headset MIC no sound\n ALSA: hda/conexant: Fix missing beep setup\n ALSA: hda/via: Fix missing beep setup\n random: schedule mix_interrupt_randomness() less often\n vt: drop old FONT ioctls\n Linux 5.4.201\n Revert \"hwmon: Make chip parameter for with_info API mandatory\"\n arm64: mm: Don\u0027t invalidate FROM_DEVICE buffers at start of DMA transfer\n tcp: drop the hash_32() part from the index calculation\n tcp: increase source port perturb table to 2^16\n tcp: dynamically allocate the perturb table used by source ports\n tcp: add small random increments to the source port\n tcp: use different parts of the port_offset for index and offset\n tcp: add some entropy in __inet_hash_connect()\n usb: gadget: u_ether: fix regression in setting fixed MAC address\n dm: remove special-casing of bio-based immutable singleton target on NVMe\n s390/mm: use non-quiescing sske for KVM switch to keyed guest\n UPSTREAM: ext4: verify dir block before splitting it\n UPSTREAM: ext4: fix use-after-free in ext4_rename_dir_prepare\n BACKPORT: ext4: Only advertise encrypted_casefold when encryption and unicode are enabled\n BACKPORT: ext4: fix no-key deletion for encrypt+casefold\n BACKPORT: ext4: optimize match for casefolded encrypted dirs\n BACKPORT: ext4: handle casefolding with encryption\n Revert \"ANDROID: ext4: Handle casefolding with encryption\"\n Revert \"ANDROID: ext4: Optimize match for casefolded encrypted dirs\"\n ANDROID: cpu/hotplug: avoid breaking Android ABI by fusing cpuhp steps\n ANDROID: change function signatures for some random functions.\n Revert \"mailbox: forward the hrtimer if not queued and under a lock\"\n Revert \"drm: fix EDID struct for old ARM OABI format\"\n Revert \"ALSA: jack: Access input_dev under mutex\"\n Linux 5.4.200\n powerpc/mm: Switch obsolete dssall to .long\n riscv: Less inefficient gcc tishift helpers (and export their symbols)\n RISC-V: fix barrier() use in \u003cvdso/processor.h\u003e\n arm64: kprobes: Use BRK instead of single-step when executing instructions out-of-line\n net: openvswitch: fix leak of nested actions\n net: openvswitch: fix misuse of the cached connection on tuple changes\n net/sched: act_police: more accurate MTU policing\n virtio-pci: Remove wrong address verification in vp_del_vqs()\n ALSA: hda/realtek: fix right sounds and mute/micmute LEDs for HP machine\n ALSA: hda/realtek: fix mute/micmute LEDs for HP 440 G8\n ext4: add reserved GDT blocks check\n ext4: make variable \"count\" signed\n ext4: fix bug_on ext4_mb_use_inode_pa\n dm mirror log: round up region bitmap size to BITS_PER_LONG\n serial: 8250: Store to lsr_save_flags after lsr read\n usb: gadget: lpc32xx_udc: Fix refcount leak in lpc32xx_udc_probe\n usb: dwc2: Fix memory leak in dwc2_hcd_init\n USB: serial: io_ti: add Agilent E5805A support\n USB: serial: option: add support for Cinterion MV31 with new baseline\n comedi: vmk80xx: fix expression for tx buffer size\n i2c: designware: Use standard optional ref clock implementation\n irqchip/gic-v3: Fix refcount leak in gic_populate_ppi_partitions\n irqchip/gic-v3: Fix error handling in gic_populate_ppi_partitions\n irqchip/gic/realview: Fix refcount leak in realview_gic_of_init\n faddr2line: Fix overlapping text section failures, the sequel\n certs/blacklist_hashes.c: fix const confusion in certs blacklist\n arm64: ftrace: fix branch range checks\n net: bgmac: Fix an erroneous kfree() in bgmac_remove()\n mlxsw: spectrum_cnt: Reorder counter pools\n misc: atmel-ssc: Fix IRQ check in ssc_probe\n tty: goldfish: Fix free_irq() on remove\n i40e: Fix call trace in setup_tx_descriptors\n i40e: Fix calculating the number of queue pairs\n i40e: Fix adding ADQ filter to TC0\n clocksource: hyper-v: unexport __init-annotated hv_init_clocksource()\n pNFS: Don\u0027t keep retrying if the server replied NFS4ERR_LAYOUTUNAVAILABLE\n random: credit cpu and bootloader seeds by default\n net: ethernet: mtk_eth_soc: fix misuse of mem alloc interface netdev[napi]_alloc_frag\n ipv6: Fix signed integer overflow in l2tp_ip6_sendmsg\n nfc: nfcmrvl: Fix memory leak in nfcmrvl_play_deferred\n virtio-mmio: fix missing put_device() when vm_cmdline_parent registration failed\n ALSA: hda/realtek - Add HW8326 support\n scsi: pmcraid: Fix missing resource cleanup in error case\n scsi: ipr: Fix missing/incorrect resource cleanup in error case\n scsi: lpfc: Allow reduced polling rate for nvme_admin_async_event cmd completion\n scsi: lpfc: Fix port stuck in bypassed state after LIP in PT2PT topology\n scsi: vmw_pvscsi: Expand vcpuHint to 16 bits\n ASoC: wm_adsp: Fix event generation for wm_adsp_fw_put()\n ASoC: es8328: Fix event generation for deemphasis control\n ASoC: wm8962: Fix suspend while playing music\n ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo()\n ASoC: cs42l56: Correct typo in minimum level for SX volume controls\n ASoC: cs42l52: Correct TLV for Bypass Volume\n ASoC: cs53l30: Correct number of volume levels on SX controls\n ASoC: cs35l36: Update digital volume TLV\n ASoC: cs42l52: Fix TLV scales for mixer controls\n dma-debug: make things less spammy under memory pressure\n ASoC: nau8822: Add operation for internal PLL off and on\n powerpc/kasan: Silence KASAN warnings in __get_wchan()\n random: account for arch randomness in bits\n random: mark bootloader randomness code as __init\n random: avoid checking crng_ready() twice in random_init()\n crypto: drbg - make reseeding from get_random_bytes() synchronous\n crypto: drbg - always try to free Jitter RNG instance\n crypto: drbg - move dynamic -\u003ereseed_threshold adjustments to __drbg_seed()\n crypto: drbg - track whether DRBG was seeded with !rng_is_initialized()\n crypto: drbg - prepare for more fine-grained tracking of seeding state\n crypto: drbg - always seeded with SP800-90B compliant noise source\n Revert \"random: use static branch for crng_ready()\"\n random: check for signals after page of pool writes\n random: wire up fops-\u003esplice_{read,write}_iter()\n random: convert to using fops-\u003ewrite_iter()\n random: convert to using fops-\u003eread_iter()\n random: unify batched entropy implementations\n random: move randomize_page() into mm where it belongs\n random: move initialization functions out of hot pages\n random: make consistent use of buf and len\n random: use proper return types on get_random_{int,long}_wait()\n random: remove extern from functions in header\n random: use static branch for crng_ready()\n random: credit architectural init the exact amount\n random: handle latent entropy and command line from random_init()\n random: use proper jiffies comparison macro\n random: remove ratelimiting for in-kernel unseeded randomness\n random: move initialization out of reseeding hot path\n random: avoid initializing twice in credit race\n random: use symbolic constants for crng_init states\n siphash: use one source of truth for siphash permutations\n random: help compiler out with fast_mix() by using simpler arguments\n random: do not use input pool from hard IRQs\n random: order timer entropy functions below interrupt functions\n random: do not pretend to handle premature next security model\n random: use first 128 bits of input as fast init\n random: do not use batches when !crng_ready()\n random: insist on random_get_entropy() existing in order to simplify\n xtensa: use fallback for random_get_entropy() instead of zero\n sparc: use fallback for random_get_entropy() instead of zero\n um: use fallback for random_get_entropy() instead of zero\n x86/tsc: Use fallback for random_get_entropy() instead of zero\n nios2: use fallback for random_get_entropy() instead of zero\n arm: use fallback for random_get_entropy() instead of zero\n mips: use fallback for random_get_entropy() instead of just c0 random\n m68k: use fallback for random_get_entropy() instead of zero\n timekeeping: Add raw clock fallback for random_get_entropy()\n powerpc: define get_cycles macro for arch-override\n alpha: define get_cycles macro for arch-override\n parisc: define get_cycles macro for arch-override\n s390: define get_cycles macro for arch-override\n ia64: define get_cycles macro for arch-override\n init: call time_init() before rand_initialize()\n random: fix sysctl documentation nits\n random: document crng_fast_key_erasure() destination possibility\n random: make random_get_entropy() return an unsigned long\n random: allow partial reads if later user copies fail\n random: check for signals every PAGE_SIZE chunk of /dev/[u]random\n random: check for signal_pending() outside of need_resched() check\n random: do not allow user to keep crng key around on stack\n random: do not split fast init input in add_hwgenerator_randomness()\n random: mix build-time latent entropy into pool at init\n random: re-add removed comment about get_random_{u32,u64} reseeding\n random: treat bootloader trust toggle the same way as cpu trust toggle\n random: skip fast_init if hwrng provides large chunk of entropy\n random: check for signal and try earlier when generating entropy\n random: reseed more often immediately after booting\n random: make consistent usage of crng_ready()\n random: use SipHash as interrupt entropy accumulator\n random: replace custom notifier chain with standard one\n random: don\u0027t let 644 read-only sysctls be written to\n random: give sysctl_random_min_urandom_seed a more sensible value\n random: do crng pre-init loading in worker rather than irq\n random: unify cycles_t and jiffies usage and types\n random: cleanup UUID handling\n random: only wake up writers after zap if threshold was passed\n random: round-robin registers as ulong, not u32\n random: clear fast pool, crng, and batches in cpuhp bring up\n random: pull add_hwgenerator_randomness() declaration into random.h\n random: check for crng_init \u003d\u003d 0 in add_device_randomness()\n random: unify early init crng load accounting\n random: do not take pool spinlock at boot\n random: defer fast pool mixing to worker\n random: rewrite header introductory comment\n random: group sysctl functions\n random: group userspace read/write functions\n random: group entropy collection functions\n random: group entropy extraction functions\n random: group crng functions\n random: group initialization wait functions\n random: remove whitespace and reorder includes\n random: remove useless header comment\n random: introduce drain_entropy() helper to declutter crng_reseed()\n random: deobfuscate irq u32/u64 contributions\n random: add proper SPDX header\n random: remove unused tracepoints\n random: remove ifdef\u0027d out interrupt bench\n random: tie batched entropy generation to base_crng generation\n random: fix locking for crng_init in crng_reseed()\n random: zero buffer after reading entropy from userspace\n random: remove outdated INT_MAX \u003e\u003e 6 check in urandom_read()\n random: make more consistent use of integer types\n random: use hash function for crng_slow_load()\n random: use simpler fast key erasure flow on per-cpu keys\n random: absorb fast pool into input pool after fast load\n random: do not xor RDRAND when writing into /dev/random\n random: ensure early RDSEED goes through mixer on init\n random: inline leaves of rand_initialize()\n random: get rid of secondary crngs\n random: use RDSEED instead of RDRAND in entropy extraction\n random: fix locking in crng_fast_load()\n random: remove batched entropy locking\n random: remove use_input_pool parameter from crng_reseed()\n random: make credit_entropy_bits() always safe\n random: always wake up entropy writers after extraction\n random: use linear min-entropy accumulation crediting\n random: simplify entropy debiting\n random: use computational hash for entropy extraction\n random: only call crng_finalize_init() for primary_crng\n random: access primary_pool directly rather than through pointer\n random: continually use hwgenerator randomness\n random: simplify arithmetic function flow in account()\n random: selectively clang-format where it makes sense\n random: access input_pool_data directly rather than through pointer\n random: cleanup fractional entropy shift constants\n random: prepend remaining pool constants with POOL_\n random: de-duplicate INPUT_POOL constants\n random: remove unused OUTPUT_POOL constants\n random: rather than entropy_store abstraction, use global\n random: remove unused extract_entropy() reserved argument\n random: remove incomplete last_data logic\n random: cleanup integer types\n random: cleanup poolinfo abstraction\n random: fix typo in comments\n random: don\u0027t reset crng_init_cnt on urandom_read()\n random: avoid superfluous call to RDRAND in CRNG extraction\n random: early initialization of ChaCha constants\n random: initialize ChaCha20 constants with correct endianness\n random: use IS_ENABLED(CONFIG_NUMA) instead of ifdefs\n random: harmonize \"crng init done\" messages\n random: mix bootloader randomness into pool\n random: do not re-init if crng_reseed completes before primary init\n random: do not sign extend bytes for rotation when mixing\n random: use BLAKE2s instead of SHA1 in extraction\n random: remove unused irq_flags argument from add_interrupt_randomness()\n random: document add_hwgenerator_randomness() with other input functions\n crypto: blake2s - adjust include guard naming\n crypto: blake2s - include \u003clinux/bug.h\u003e instead of \u003casm/bug.h\u003e\n MAINTAINERS: co-maintain random.c\n random: remove dead code left over from blocking pool\n random: avoid arch_get_random_seed_long() when collecting IRQ randomness\n random: add arch_get_random_*long_early()\n powerpc: Use bool in archrandom.h\n linux/random.h: Mark CONFIG_ARCH_RANDOM functions __must_check\n linux/random.h: Use false with bool\n linux/random.h: Remove arch_has_random, arch_has_random_seed\n s390: Remove arch_has_random, arch_has_random_seed\n powerpc: Remove arch_has_random, arch_has_random_seed\n x86: Remove arch_has_random, arch_has_random_seed\n random: avoid warnings for !CONFIG_NUMA builds\n random: split primary/secondary crng init paths\n random: remove some dead code of poolinfo\n random: fix typo in add_timer_randomness()\n random: Add and use pr_fmt()\n random: convert to ENTROPY_BITS for better code readability\n random: remove unnecessary unlikely()\n random: remove kernel.random.read_wakeup_threshold\n random: delete code to pull data into pools\n random: remove the blocking pool\n random: make /dev/random be almost like /dev/urandom\n random: ignore GRND_RANDOM in getentropy(2)\n random: add GRND_INSECURE to return best-effort non-cryptographic bytes\n random: Add a urandom_read_nowait() for random APIs that don\u0027t warn\n random: Don\u0027t wake crng_init_wait when crng_init \u003d\u003d 1\n random: don\u0027t forget compat_ioctl on urandom\n compat_ioctl: remove /dev/random commands\n lib/crypto: sha1: re-roll loops to reduce code size\n lib/crypto: blake2s: move hmac construction into wireguard\n crypto: blake2s - generic C library implementation and selftest\n nfc: st21nfca: fix incorrect sizing calculations in EVT_TRANSACTION\n bpf: Fix incorrect memory charge cost calculation in stack_map_alloc()\n 9p: missing chunk of \"fs/9p: Don\u0027t update file type when updating file attributes\"\n Revert \"ext4: fix use-after-free in ext4_rename_dir_prepare\"\n Revert \"ext4: verify dir block before splitting it\"\n Linux 5.4.199\n x86/speculation/mmio: Print SMT warning\n KVM: x86/speculation: Disable Fill buffer clear within guests\n x86/speculation/mmio: Reuse SRBDS mitigation for SBDS\n x86/speculation/srbds: Update SRBDS mitigation selection\n x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data\n x86/speculation/mmio: Enable CPU Fill buffer clearing on idle\n x86/bugs: Group MDS, TAA \u0026 Processor MMIO Stale Data mitigations\n x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data\n x86/speculation: Add a common function for MD_CLEAR mitigation update\n x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug\n Documentation: Add documentation for Processor MMIO Stale Data\n x86/cpu: Add another Alder Lake CPU to the Intel family\n x86/cpu: Add Lakefield, Alder Lake and Rocket Lake models to the to Intel CPU family\n x86/cpu: Add Jasper Lake to Intel family\n cpu/speculation: Add prototype for cpu_show_srbds()\n Linux 5.4.198\n tcp: fix tcp_mtup_probe_success vs wrong snd_cwnd\n mtd: cfi_cmdset_0002: Use chip_ready() for write on S29GL064N\n md/raid0: Ignore RAID0 layout if the second zone has only one device\n powerpc/32: Fix overread/overwrite of thread_struct via ptrace\n Input: bcm5974 - set missing URB_NO_TRANSFER_DMA_MAP urb flag\n ixgbe: fix unexpected VLAN Rx in promisc mode on VF\n ixgbe: fix bcast packets Rx on VF after promisc removal\n nfc: st21nfca: fix memory leaks in EVT_TRANSACTION handling\n nfc: st21nfca: fix incorrect validating logic in EVT_TRANSACTION\n mmc: block: Fix CQE recovery reset success\n ata: libata-transport: fix {dma|pio|xfer}_mode sysfs files\n cifs: return errors during session setup during reconnects\n ALSA: hda/conexant - Fix loopback issue with CX20632\n scripts/gdb: change kernel config dumping method\n vringh: Fix loop descriptors check in the indirect cases\n nodemask: Fix return values to be unsigned\n cifs: version operations for smb20 unneeded when legacy support disabled\n s390/gmap: voluntarily schedule during key setting\n nbd: fix io hung while disconnecting device\n nbd: fix race between nbd_alloc_config() and module removal\n nbd: call genl_unregister_family() first in nbd_cleanup()\n x86/cpu: Elide KCSAN for cpu_has() and friends\n modpost: fix undefined behavior of is_arm_mapping_symbol()\n drm/radeon: fix a possible null pointer dereference\n ceph: allow ceph.dir.rctime xattr to be updatable\n Revert \"net: af_key: add check for pfkey_broadcast in function pfkey_process\"\n scsi: myrb: Fix up null pointer access on myrb_cleanup()\n md: protect md_unregister_thread from reentrancy\n watchdog: wdat_wdt: Stop watchdog when rebooting the system\n kernfs: Separate kernfs_pr_cont_buf and rename_lock.\n serial: msm_serial: disable interrupts in __msm_console_write()\n staging: rtl8712: fix uninit-value in r871xu_drv_init()\n staging: rtl8712: fix uninit-value in usb_read8() and friends\n clocksource/drivers/sp804: Avoid error on multiple instances\n extcon: Modify extcon device to be created after driver data is set\n misc: rtsx: set NULL intfdata when probe fails\n usb: dwc2: gadget: don\u0027t reset gadget\u0027s driver-\u003ebus\n USB: hcd-pci: Fully suspend across freeze/thaw cycle\n drivers: usb: host: Fix deadlock in oxu_bus_suspend()\n drivers: tty: serial: Fix deadlock in sa1100_set_termios()\n USB: host: isp116x: check return value after calling platform_get_resource()\n drivers: staging: rtl8192e: Fix deadlock in rtllib_beacons_stop()\n drivers: staging: rtl8192u: Fix deadlock in ieee80211_beacons_stop()\n tty: Fix a possible resource leak in icom_probe\n tty: synclink_gt: Fix null-pointer-dereference in slgt_clean()\n lkdtm/usercopy: Expand size of \"out of frame\" object\n iio: st_sensors: Add a local lock for protecting odr\n iio: dummy: iio_simple_dummy: check the return value of kstrdup()\n drm: imx: fix compiler warning with gcc-12\n net: altera: Fix refcount leak in altera_tse_mdio_create\n ip_gre: test csum_start instead of transport header\n net/mlx5: fs, fail conflicting actions\n net/mlx5: Rearm the FW tracer after each tracer event\n net: ipv6: unexport __init-annotated seg6_hmac_init()\n net: xfrm: unexport __init-annotated xfrm4_protocol_init()\n net: mdio: unexport __init-annotated mdio_bus_init()\n SUNRPC: Fix the calculation of xdr-\u003eend in xdr_get_next_encode_buffer()\n net/mlx4_en: Fix wrong return value on ioctl EEPROM query failure\n net: dsa: lantiq_gswip: Fix refcount leak in gswip_gphy_fw_list\n bpf, arm64: Clear prog-\u003ejited_len along prog-\u003ejited\n af_unix: Fix a data-race in unix_dgram_peer_wake_me().\n xen: unexport __init-annotated xen_xlate_map_ballooned_pages()\n netfilter: nf_tables: memleak flow rule from commit path\n ata: pata_octeon_cf: Fix refcount leak in octeon_cf_probe\n netfilter: nat: really support inet nat without l3 address\n xprtrdma: treat all calls not a bcall when bc_serv is NULL\n video: fbdev: pxa3xx-gcu: release the resources correctly in pxa3xx_gcu_probe/remove()\n NFSv4: Don\u0027t hold the layoutget locks across multiple RPC calls\n dmaengine: zynqmp_dma: In struct zynqmp_dma_chan fix desc_size data type\n m68knommu: fix undefined reference to `_init_sp\u0027\n m68knommu: set ZERO_PAGE() to the allocated zeroed page\n i2c: cadence: Increase timeout per message if necessary\n f2fs: remove WARN_ON in f2fs_is_valid_blkaddr\n tracing: Avoid adding tracer option before update_tracer_options\n tracing: Fix sleeping function called from invalid context on RT kernel\n mips: cpc: Fix refcount leak in mips_cpc_default_phys_base\n perf c2c: Fix sorting in percent_rmt_hitm_cmp()\n tipc: check attribute length for bearer name\n afs: Fix infinite loop found by xfstest generic/676\n tcp: tcp_rtx_synack() can be called from process context\n net: sched: add barrier to fix packet stuck problem for lockless qdisc\n net/mlx5e: Update netdev features after changing XDP state\n net/mlx5: Don\u0027t use already freed action pointer\n nfp: only report pause frame configuration for physical device\n ubi: ubi_create_volume: Fix use-after-free when volume creation failed\n jffs2: fix memory leak in jffs2_do_fill_super\n modpost: fix removing numeric suffixes\n net: dsa: mv88e6xxx: Fix refcount leak in mv88e6xxx_mdios_register\n net: ethernet: mtk_eth_soc: out of bounds read in mtk_hwlro_get_fdir_entry()\n net: sched: fixed barrier to prevent skbuff sticking in qdisc backlog\n s390/crypto: fix scatterwalk_unmap() callers in AES-GCM\n clocksource/drivers/oxnas-rps: Fix irq_of_parse_and_map() return value\n ASoC: fsl_sai: Fix FSL_SAI_xDR/xFR definition\n watchdog: ts4800_wdt: Fix refcount leak in ts4800_wdt_probe\n driver core: fix deadlock in __device_attach\n driver: base: fix UAF when driver_attach failed\n bus: ti-sysc: Fix warnings for unbind for serial\n firmware: dmi-sysfs: Fix memory leak in dmi_sysfs_register_handle\n serial: stm32-usart: Correct CSIZE, bits, and parity\n serial: st-asc: Sanitize CSIZE and correct PARENB for CS7\n serial: sifive: Sanitize CSIZE and c_iflag\n serial: sh-sci: Don\u0027t allow CS5-6\n serial: txx9: Don\u0027t allow CS5-6\n serial: rda-uart: Don\u0027t allow CS5-6\n serial: digicolor-usart: Don\u0027t allow CS5-6\n serial: 8250_fintek: Check SER_RS485_RTS_* only with RS485\n serial: meson: acquire port-\u003elock in startup()\n rtc: mt6397: check return value after calling platform_get_resource()\n clocksource/drivers/riscv: Events are stopped during CPU suspend\n soc: rockchip: Fix refcount leak in rockchip_grf_init\n coresight: cpu-debug: Replace mutex with mutex_trylock on panic notifier\n serial: sifive: Report actual baud base rather than fixed 115200\n phy: qcom-qmp: fix pipe-clock imbalance on power-on failure\n rpmsg: qcom_smd: Fix returning 0 if irq_of_parse_and_map() fails\n iio: adc: sc27xx: Fine tune the scale calibration values\n iio: adc: sc27xx: fix read big scale voltage not right\n iio: adc: stmpe-adc: Fix wait_for_completion_timeout return value check\n firmware: stratix10-svc: fix a missing check on list iterator\n usb: dwc3: pci: Fix pm_runtime_get_sync() error checking\n rpmsg: qcom_smd: Fix irq_of_parse_and_map() return value\n pwm: lp3943: Fix duty calculation in case period was clamped\n staging: fieldbus: Fix the error handling path in anybuss_host_common_probe()\n usb: musb: Fix missing of_node_put() in omap2430_probe\n USB: storage: karma: fix rio_karma_init return\n usb: usbip: add missing device lock on tweak configuration cmd\n usb: usbip: fix a refcount leak in stub_probe()\n tty: serial: fsl_lpuart: fix potential bug when using both of_alias_get_id and ida_simple_get\n tty: serial: owl: Fix missing clk_disable_unprepare() in owl_uart_probe\n tty: goldfish: Use tty_port_destroy() to destroy port\n iio: adc: ad7124: Remove shift from scan_type\n staging: greybus: codecs: fix type confusion of list iterator variable\n pcmcia: db1xxx_ss: restrict to MIPS_DB1XXX boards\n md: bcache: check the return value of kzalloc() in detached_dev_do_request()\n block: fix bio_clone_blkg_association() to associate with proper blkcg_gq\n bfq: Make sure bfqg for which we are queueing requests is online\n bfq: Get rid of __bio_blkcg() usage\n bfq: Remove pointless bfq_init_rq() calls\n bfq: Drop pointless unlock-lock pair\n bfq: Avoid merging queues with different parents\n MIPS: IP27: Remove incorrect `cpu_has_fpu\u0027 override\n RDMA/rxe: Generate a completion for unsupported/invalid opcode\n Kconfig: add config option for asm goto w/ outputs\n phy: qcom-qmp: fix reset-controller leak on probe errors\n blk-iolatency: Fix inflight count imbalances and IO hangs on offline\n dt-bindings: gpio: altera: correct interrupt-cells\n docs/conf.py: Cope with removal of language\u003dNone in Sphinx 5.0.0\n ARM: pxa: maybe fix gpio lookup tables\n phy: qcom-qmp: fix struct clk leak on probe errors\n arm64: dts: qcom: ipq8074: fix the sleep clock frequency\n gma500: fix an incorrect NULL check on list iterator\n tilcdc: tilcdc_external: fix an incorrect NULL check on list iterator\n serial: pch: don\u0027t overwrite xmit-\u003ebuf[0] by x_char\n carl9170: tx: fix an incorrect use of list iterator\n ASoC: rt5514: Fix event generation for \"DSP Voice Wake Up\" control\n rtl818x: Prevent using not initialized queues\n hugetlb: fix huge_pmd_unshare address update\n nodemask.h: fix compilation error with GCC12\n iommu/msm: Fix an incorrect NULL check on list iterator\n um: Fix out-of-bounds read in LDT setup\n um: chan_user: Fix winch_tramp() return value\n mac80211: upgrade passive scan to active scan on DFS channels after beacon rx\n irqchip: irq-xtensa-mx: fix initial IRQ affinity\n irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375, A38x, A39x\n RDMA/hfi1: Fix potential integer multiplication overflow errors\n Kconfig: Add option for asm goto w/ tied outputs to workaround clang-13 bug\n media: coda: Add more H264 levels for CODA960\n media: coda: Fix reported H264 profile\n mtd: cfi_cmdset_0002: Move and rename chip_check/chip_ready/chip_good_for_write\n md: fix an incorrect NULL check in md_reload_sb\n md: fix an incorrect NULL check in does_sb_need_changing\n drm/bridge: analogix_dp: Grab runtime PM reference for DP-AUX\n drm/nouveau/clk: Fix an incorrect NULL check on list iterator\n drm/etnaviv: check for reaped mapping in etnaviv_iommu_unmap_gem\n drm/amdgpu/cs: make commands with 0 chunks illegal behaviour.\n scsi: ufs: qcom: Add a readl() to make sure ref_clk gets enabled\n scsi: dc395x: Fix a missing check on list iterator\n ocfs2: dlmfs: fix error handling of user_dlm_destroy_lock\n dlm: fix missing lkb refcount handling\n dlm: fix plock invalid read\n mm, compaction: fast_find_migrateblock() should return pfn in the target zone\n PCI: qcom: Fix unbalanced PHY init on probe errors\n PCI: qcom: Fix runtime PM imbalance on probe errors\n PCI/PM: Fix bridge_d3_blacklist[] Elo i2 overwrite of Gigabyte X299\n tracing: Fix potential double free in create_var_ref()\n ACPI: property: Release subnode properties with data nodes\n ext4: avoid cycles in directory h-tree\n ext4: verify dir block before splitting it\n ext4: fix bug_on in ext4_writepages\n ext4: fix warning in ext4_handle_inode_extension\n ext4: fix use-after-free in ext4_rename_dir_prepare\n netfilter: nf_tables: disallow non-stateful expression in sets earlier\n bfq: Track whether bfq_group is still online\n bfq: Update cgroup information before merging bio\n bfq: Split shared queues on move between cgroups\n efi: Do not import certificates from UEFI Secure Boot for T2 Macs\n fs-writeback: writeback_sb_inodes：Recalculate \u0027wrote\u0027 according skipped pages\n iwlwifi: mvm: fix assert 1F04 upon reconfig\n wifi: mac80211: fix use-after-free in chanctx code\n f2fs: fix fallocate to use file_modified to update permissions consistently\n f2fs: don\u0027t need inode lock for system hidden quota\n f2fs: fix deadloop in foreground GC\n f2fs: fix to clear dirty inode in f2fs_evict_inode()\n f2fs: fix to do sanity check on block address in f2fs_do_zero_range()\n f2fs: fix to avoid f2fs_bug_on() in dec_valid_node_count()\n perf jevents: Fix event syntax error caused by ExtSel\n perf c2c: Use stdio interface if slang is not supported\n iommu/amd: Increase timeout waiting for GA log enablement\n dmaengine: stm32-mdma: remove GISR1 register\n video: fbdev: clcdfb: Fix refcount leak in clcdfb_of_vram_setup\n NFSv4/pNFS: Do not fail I/O when we fail to allocate the pNFS layout\n NFS: Don\u0027t report errors from nfs_pageio_complete() more than once\n NFS: Do not report flush errors in nfs_write_end()\n NFS: Do not report EINTR/ERESTARTSYS as mapping errors\n i2c: at91: Initialize dma_buf in at91_twi_xfer()\n i2c: at91: use dma safe buffers\n iommu/mediatek: Add list_del in mtk_iommu_remove\n f2fs: fix dereference of stale list iterator after loop body\n Input: stmfts - do not leave device disabled in stmfts_input_open\n RDMA/hfi1: Prevent use of lock before it is initialized\n mailbox: forward the hrtimer if not queued and under a lock\n mfd: davinci_voicecodec: Fix possible null-ptr-deref davinci_vc_probe()\n powerpc/fsl_rio: Fix refcount leak in fsl_rio_setup\n macintosh: via-pmu and via-cuda need RTC_LIB\n powerpc/perf: Fix the threshold compare group constraint for power9\n powerpc/64: Only WARN if __pa()/__va() called with bad addresses\n Input: sparcspkr - fix refcount leak in bbc_beep_probe\n crypto: cryptd - Protect per-CPU resource by disabling BH.\n tty: fix deadlock caused by calling printk() under tty_port-\u003elock\n PCI: imx6: Fix PERST# start-up sequence\n ipc/mqueue: use get_tree_nodev() in mqueue_get_tree()\n proc: fix dentry/inode overinstantiating under /proc/${pid}/net\n powerpc/4xx/cpm: Fix return value of __setup() handler\n powerpc/idle: Fix return value of __setup() handler\n powerpc/8xx: export \u0027cpm_setbrg\u0027 for modules\n dax: fix cache flush on PMD-mapped pages\n drivers/base/node.c: fix compaction sysfs file leak\n pinctrl: mvebu: Fix irq_of_parse_and_map() return value\n nvdimm: Allow overwrite in the presence of disabled dimms\n firmware: arm_scmi: Fix list protocols enumeration in the base protocol\n scsi: fcoe: Fix Wstringop-overflow warnings in fcoe_wwn_from_mac()\n mfd: ipaq-micro: Fix error check return value of platform_get_irq()\n powerpc/fadump: fix PT_LOAD segment for boot memory area\n arm: mediatek: select arch timer for mt7629\n crypto: marvell/cesa - ECB does not IV\n misc: ocxl: fix possible double free in ocxl_file_register_afu\n ARM: dts: bcm2835-rpi-b: Fix GPIO line names\n ARM: dts: bcm2837-rpi-3-b-plus: Fix GPIO line name of power LED\n ARM: dts: bcm2837-rpi-cm3-io3: Fix GPIO line names for SMPS I2C\n ARM: dts: bcm2835-rpi-zero-w: Fix GPIO line name for Wifi/BT\n can: xilinx_can: mark bit timing constants as const\n KVM: nVMX: Leave most VM-Exit info fields unmodified on failed VM-Entry\n PCI: rockchip: Fix find_first_zero_bit() limit\n PCI: cadence: Fix find_first_zero_bit() limit\n soc: qcom: smsm: Fix missing of_node_put() in smsm_parse_ipc\n soc: qcom: smp2p: Fix missing of_node_put() in smp2p_parse_ipc\n ARM: dts: suniv: F1C100: fix watchdog compatible\n arm64: dts: rockchip: Move drive-impedance-ohm to emmc phy on rk3399\n net/smc: postpone sk_refcnt increment in connect()\n rxrpc: Fix decision on when to generate an IDLE ACK\n rxrpc: Don\u0027t let ack.previousPacket regress\n rxrpc: Fix overlapping ACK accounting\n rxrpc: Don\u0027t try to resend the request if we\u0027re receiving the reply\n rxrpc: Fix listen() setting the bar too high for the prealloc rings\n NFC: hci: fix sleep in atomic context bugs in nfc_hci_hcp_message_tx\n ASoC: wm2000: fix missing clk_disable_unprepare() on error in wm2000_anc_transition()\n thermal/drivers/broadcom: Fix potential NULL dereference in sr_thermal_probe\n drm: msm: fix possible memory leak in mdp5_crtc_cursor_set()\n drm/msm/a6xx: Fix refcount leak in a6xx_gpu_init\n ext4: reject the \u0027commit\u0027 option on ext2 filesystems\n media: ov7670: remove ov7670_power_off from ov7670_remove\n sctp: read sk-\u003esk_bound_dev_if once in sctp_rcv()\n m68k: math-emu: Fix dependencies of math emulation support\n Bluetooth: fix dangling sco_conn and use-after-free in sco_sock_timeout\n media: vsp1: Fix offset calculation for plane cropping\n media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init\n media: exynos4-is: Change clk_disable to clk_disable_unprepare\n media: st-delta: Fix PM disable depth imbalance in delta_probe\n media: aspeed: Fix an error handling path in aspeed_video_probe()\n scripts/faddr2line: Fix overlapping text section failures\n regulator: pfuze100: Fix refcount leak in pfuze_parse_regulators_dt\n ASoC: mxs-saif: Fix refcount leak in mxs_saif_probe\n ASoC: fsl: Fix refcount leak in imx_sgtl5000_probe\n perf/amd/ibs: Use interrupt regs ip for stack unwinding\n Revert \"cpufreq: Fix possible race in cpufreq online error path\"\n iomap: iomap_write_failed fix\n media: uvcvideo: Fix missing check to determine if element is found in list\n drm/msm: return an error pointer in msm_gem_prime_get_sg_table()\n drm/msm/mdp5: Return error code in mdp5_mixer_release when deadlock is detected\n drm/msm/mdp5: Return error code in mdp5_pipe_release when deadlock is detected\n regulator: core: Fix enable_count imbalance with EXCLUSIVE_GET\n x86/mm: Cleanup the control_va_addr_alignment() __setup handler\n irqchip/aspeed-i2c-ic: Fix irq_of_parse_and_map() return value\n irqchip/exiu: Fix acknowledgment of edge triggered interrupts\n x86: Fix return value of __setup handlers\n virtio_blk: fix the discard_granularity and discard_alignment queue limits\n drm/rockchip: vop: fix possible null-ptr-deref in vop_bind()\n drm/msm/hdmi: fix error check return value of irq_of_parse_and_map()\n drm/msm/hdmi: check return value after calling platform_get_resource_byname()\n drm/msm/dsi: fix error checks and return values for DSI xmit functions\n drm/msm/disp/dpu1: set vbif hw config to NULL to avoid use after memory free during pm runtime resume\n perf tools: Add missing headers needed by util/data.h\n ASoC: rk3328: fix disabling mclk on pclk probe failure\n x86/speculation: Add missing prototype for unpriv_ebpf_notify()\n x86/pm: Fix false positive kmemleak report in msr_build_context()\n scsi: ufs: core: Exclude UECxx from SFR dump list\n of: overlay: do not break notify on NOTIFY_{OK|STOP}\n fsnotify: fix wrong lockdep annotations\n inotify: show inotify mask flags in proc fdinfo\n ath9k_htc: fix potential out of bounds access with invalid rxstatus-\u003ers_keyix\n cpufreq: Fix possible race in cpufreq online error path\n spi: img-spfi: Fix pm_runtime_get_sync() error checking\n sched/fair: Fix cfs_rq_clock_pelt() for throttled cfs_rq\n drm/bridge: Fix error handling in analogix_dp_probe\n HID: elan: Fix potential double free in elan_input_configured\n HID: hid-led: fix maximum brightness for Dream Cheeky\n drbd: fix duplicate array initializer\n efi: Add missing prototype for efi_capsule_setup_info\n NFC: NULL out the dev-\u003erfkill to prevent UAF\n spi: spi-ti-qspi: Fix return value handling of wait_for_completion_timeout\n drm: mali-dp: potential dereference of null pointer\n drm/komeda: Fix an undefined behavior bug in komeda_plane_add()\n nl80211: show SSID for P2P_GO interfaces\n bpf: Fix excessive memory allocation in stack_map_alloc()\n drm/vc4: txp: Force alpha to be 0xff if it\u0027s disabled\n drm/vc4: txp: Don\u0027t set TXP_VSTART_AT_EOF\n drm/mediatek: Fix mtk_cec_mask()\n x86/delay: Fix the wrong asm constraint in delay_loop()\n ASoC: mediatek: Fix missing of_node_put in mt2701_wm8960_machine_probe\n ASoC: mediatek: Fix error handling in mt8173_max98090_dev_probe\n drm/bridge: adv7511: clean up CEC adapter when probe fails\n drm/edid: fix invalid EDID extension block filtering\n ath9k: fix ar9003_get_eepmisc\n drm: fix EDID struct for old ARM OABI format\n RDMA/hfi1: Prevent panic when SDMA is disabled\n powerpc/iommu: Add missing of_node_put in iommu_init_early_dart\n macintosh/via-pmu: Fix build failure when CONFIG_INPUT is disabled\n powerpc/powernv: fix missing of_node_put in uv_init()\n powerpc/xics: fix refcount leak in icp_opal_init()\n tracing: incorrect isolate_mote_t cast in mm_vmscan_lru_isolate\n PCI: Avoid pci_dev_lock() AB/BA deadlock with sriov_numvfs_store()\n ARM: hisi: Add missing of_node_put after of_find_compatible_node\n ARM: dts: exynos: add atmel,24c128 fallback to Samsung EEPROM\n ARM: versatile: Add missing of_node_put in dcscb_init\n fat: add ratelimit to fat*_ent_bread()\n powerpc/fadump: Fix fadump to work with a different endian capture kernel\n ARM: OMAP1: clock: Fix UART rate reporting algorithm\n fs: jfs: fix possible NULL pointer dereference in dbFree()\n PM / devfreq: rk3399_dmc: Disable edev on remove()\n ARM: dts: ox820: align interrupt controller node name with dtschema\n IB/rdmavt: add missing locks in rvt_ruc_loopback\n selftests/bpf: fix btf_dump/btf_dump due to recent clang change\n eth: tg3: silence the GCC 12 array-bounds warning\n rxrpc: Return an error to sendmsg if call failed\n hwmon: Make chip parameter for with_info API mandatory\n ASoC: max98357a: remove dependency on GPIOLIB\n media: exynos4-is: Fix compile warning\n net: phy: micrel: Allow probing without .driver_data\n nbd: Fix hung on disconnect request if socket is closed before\n ASoC: rt5645: Fix errorenous cleanup order\n nvme-pci: fix a NULL pointer dereference in nvme_alloc_admin_tags\n openrisc: start CPU timer early in boot\n media: cec-adap.c: fix is_configuring state\n media: coda: limit frame interval enumeration to supported encoder frame sizes\n rtlwifi: Use pr_warn instead of WARN_ONCE\n ipmi: Fix pr_fmt to avoid compilation issues\n ipmi:ssif: Check for NULL msg when handling events and messages\n ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default\n dma-debug: change allocation mode from GFP_NOWAIT to GFP_ATIOMIC\n spi: stm32-qspi: Fix wait_cmd timeout in APM mode\n s390/preempt: disable __preempt_count_add() optimization for PROFILE_ALL_BRANCHES\n ASoC: tscs454: Add endianness flag in snd_soc_component_driver\n HID: bigben: fix slab-out-of-bounds Write in bigben_probe\n drm/amdgpu/ucode: Remove firmware load type check in amdgpu_ucode_free_bo\n mlxsw: spectrum_dcb: Do not warn about priority changes\n ASoC: dapm: Don\u0027t fold register value changes into notifications\n net/mlx5: fs, delete the FTE when there are no rules attached to it\n ipv6: Don\u0027t send rs packets to the interface of ARPHRD_TUNNEL\n drm: msm: fix error check return value of irq_of_parse_and_map()\n arm64: compat: Do not treat syscall number as ESR_ELx for a bad syscall\n drm/amd/pm: fix the compile warning\n drm/plane: Move range check for format_count earlier\n scsi: megaraid: Fix error check return value of register_chrdev()\n mmc: jz4740: Apply DMA engine limits to maximum segment size\n md/bitmap: don\u0027t set sb values if can\u0027t pass sanity check\n media: cx25821: Fix the warning when removing the module\n media: pci: cx23885: Fix the error handling in cx23885_initdev()\n media: venus: hfi: avoid null dereference in deinit\n ath9k: fix QCA9561 PA bias level\n drm/amd/pm: fix double free in si_parse_power_table()\n tools/power turbostat: fix ICX DRAM power numbers\n spi: spi-rspi: Remove setting {src,dst}_{addr,addr_width} based on DMA direction\n ALSA: jack: Access input_dev under mutex\n drm/komeda: return early if drm_universal_plane_init() fails.\n ACPICA: Avoid cache flush inside virtual machines\n fbcon: Consistently protect deferred_takeover with console_lock()\n ipv6: fix locking issues with loops over idev-\u003eaddr_list\n ipw2x00: Fix potential NULL dereference in libipw_xmit()\n b43: Fix assigning negative value to unsigned variable\n b43legacy: Fix assigning negative value to unsigned variable\n mwifiex: add mutex lock for call in mwifiex_dfs_chan_sw_work_queue\n drm/virtio: fix NULL pointer dereference in virtio_gpu_conn_get_modes\n btrfs: repair super block num_devices automatically\n btrfs: add \"0x\" prefix for unsupported optional features\n ptrace: Reimplement PTRACE_KILL by always sending SIGKILL\n ptrace/xtensa: Replace PT_SINGLESTEP with TIF_SINGLESTEP\n ptrace/um: Replace PT_DTRACE with TIF_SINGLESTEP\n perf/x86/intel: Fix event constraints for ICL\n usb: core: hcd: Add support for deferring roothub registration\n USB: new quirk for Dell Gen 2 devices\n USB: serial: option: add Quectel BG95 modem\n ALSA: hda/realtek - Fix microphone noise on ASUS TUF B550M-PLUS\n binfmt_flat: do not stop relocating GOT entries prematurely on riscv\n\n Conflicts:\n\tDocumentation/devicetree/bindings/dma/allwinner,sun50i-a64-dma.yaml\n\tDocumentation/devicetree/bindings~HEAD\n\tdrivers/char/Kconfig\n\tdrivers/mmc/core/block.c\n\tkernel/sysctl.c\n\nChange-Id: If11e1865055bfb94b3268960268c88c3dfc032c3\n" }, { "commit": "6b029aa535ddad22fc09fe5b1e6c37f10cda8724", "tree": "742838d18cecf52fa32beff1a2db964cb70e2ffb", "parents": [ "cb8a045992c4960f1dfb1aa98712b07a065594c4", "fe18f1af38a7999e05a6564c80d63e8d9df5ee60" ], "author": { "name": "Greg Kroah-Hartman", "email": "gregkh@google.com", "time": "Sat Oct 29 10:45:08 2022 +0200" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@google.com", "time": "Sat Oct 29 10:45:08 2022 +0200" }, "message": "Merge 5.4.220 into android11-5.4-lts\n\nChanges in 5.4.220\n\tALSA: oss: Fix potential deadlock at unregistration\n\tALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()\n\tALSA: usb-audio: Fix potential memory leaks\n\tALSA: usb-audio: Fix NULL dererence at error path\n\tALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530\n\tALSA: hda/realtek: Correct pin configs for ASUS G533Z\n\tALSA: hda/realtek: Add quirk for ASUS GV601R laptop\n\tALSA: hda/realtek: Add Intel Reference SSID to support headset keys\n\tmtd: rawnand: atmel: Unmap streaming DMA mappings\n\tcifs: destage dirty pages before re-reading them for cache\u003dnone\n\tcifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message\n\tiio: dac: ad5593r: Fix i2c read protocol requirements\n\tiio: pressure: dps310: Refactor startup procedure\n\tiio: pressure: dps310: Reset chip after timeout\n\tusb: add quirks for Lenovo OneLink+ Dock\n\tcan: kvaser_usb: Fix use of uninitialized completion\n\tcan: kvaser_usb_leaf: Fix overread with an invalid command\n\tcan: kvaser_usb_leaf: Fix TX queue out of sync after restart\n\tcan: kvaser_usb_leaf: Fix CAN state after restart\n\tmmc: sdhci-sprd: Fix minimum clock limit\n\tfs: dlm: fix race between test_bit() and queue_work()\n\tfs: dlm: handle -EBUSY first in lock arg validation\n\tHID: multitouch: Add memory barriers\n\tquota: Check next/prev free block number after reading from quota file\n\tASoC: wcd9335: fix order of Slimbus unprepare/disable\n\tregulator: qcom_rpm: Fix circular deferral regression\n\tRISC-V: Make port I/O string accessors actually work\n\tparisc: fbdev/stifb: Align graphics memory size to 4MB\n\triscv: Allow PROT_WRITE-only mmap()\n\triscv: Pass -mno-relax only on lld \u003c 15.0.0\n\tUM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK\n\tPCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge\n\tpowerpc/boot: Explicitly disable usage of SPE instructions\n\tfbdev: smscufx: Fix use-after-free in ufx_ops_open()\n\tbtrfs: fix race between quota enable and quota rescan ioctl\n\tf2fs: increase the limit for reserve_root\n\tf2fs: fix to do sanity check on destination blkaddr during recovery\n\tf2fs: fix to do sanity check on summary info\n\tnilfs2: fix use-after-free bug of struct nilfs_root\n\tjbd2: wake up journal waiters in FIFO order, not LIFO\n\text4: avoid crash when inline data creation follows DIO write\n\text4: fix null-ptr-deref in ext4_write_info\n\text4: make ext4_lazyinit_thread freezable\n\text4: place buffer head allocation before handle start\n\tlivepatch: fix race between fork and KLP transition\n\tftrace: Properly unset FTRACE_HASH_FL_MOD\n\tring-buffer: Allow splice to read previous partially read pages\n\tring-buffer: Have the shortest_full queue be the shortest not longest\n\tring-buffer: Check pending waiters when doing wake ups as well\n\tring-buffer: Fix race between reset page and reading page\n\tmedia: cedrus: Set the platform driver data earlier\n\tKVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility\n\tKVM: nVMX: Unconditionally purge queued/injected events on nested \"exit\"\n\tKVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS\n\tgcov: support GCC 12.1 and newer compilers\n\tdrm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()\n\tselinux: use \"grep -E\" instead of \"egrep\"\n\ttracing: Disable interrupt or preemption before acquiring arch_spinlock_t\n\tuserfaultfd: open userfaultfds with O_RDONLY\n\tsh: machvec: Use char[] for section boundaries\n\tARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE\n\tnfsd: Fix a memory leak in an error handling path\n\twifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()\n\twifi: mac80211: allow bw change during channel switch in mesh\n\tbpftool: Fix a wrong type cast in btf_dumper_int\n\tx86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register\n\twifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()\n\tspi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()\n\tspi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()\n\twifi: rtl8xxxu: Fix skb misuse in TX queue selection\n\tbpf: btf: fix truncated last_member_type_id in btf_struct_resolve\n\twifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration\n\tnet: fs_enet: Fix wrong check in do_pd_setup\n\tbpf: Ensure correct locking around vulnerable function find_vpid()\n\tx86/microcode/AMD: Track patch allocation size explicitly\n\tspi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe\n\tnetfilter: nft_fib: Fix for rpath check with VRF devices\n\tspi: s3c64xx: Fix large transfers with DMA\n\tvhost/vsock: Use kvmalloc/kvfree for larger packets.\n\tmISDN: fix use-after-free bugs in l1oip timer handlers\n\tsctp: handle the error returned from sctp_auth_asoc_init_active_key\n\ttcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited\n\tnet: rds: don\u0027t hold sock lock when cancelling work from rds_tcp_reset_callbacks()\n\tbnx2x: fix potential memory leak in bnx2x_tpa_stop()\n\tnet/ieee802154: reject zero-sized raw_sendmsg()\n\tonce: add DO_ONCE_SLOW() for sleepable contexts\n\tnet: mvpp2: fix mvpp2 debugfs leak\n\tdrm: bridge: adv7511: fix CEC power down control register offset\n\tdrm/mipi-dsi: Detach devices when removing the host\n\tplatform/chrome: fix double-free in chromeos_laptop_prepare()\n\tplatform/chrome: fix memory corruption in ioctl\n\tplatform/x86: msi-laptop: Fix old-ec check for backlight registering\n\tplatform/x86: msi-laptop: Fix resource cleanup\n\tdrm: fix drm_mipi_dbi build errors\n\tdrm/bridge: megachips: Fix a null pointer dereference bug\n\tASoC: rsnd: Add check for rsnd_mod_power_on\n\tALSA: hda: beep: Simplify keep-power-at-enable behavior\n\tdrm/omap: dss: Fix refcount leak bugs\n\tmmc: au1xmmc: Fix an error handling path in au1xmmc_probe()\n\tASoC: eureka-tlv320: Hold reference returned from of_find_xxx API\n\tdrm/msm/dpu: index dpu_kms-\u003ehw_vbif using vbif_idx\n\tALSA: dmaengine: increment buffer pointer atomically\n\tmmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()\n\tASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe\n\tASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe\n\tASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe\n\tALSA: hda/hdmi: Don\u0027t skip notification handling during PM operation\n\tmemory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()\n\tmemory: of: Fix refcount leak bug in of_get_ddr_timings()\n\tsoc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()\n\tsoc: qcom: smem_state: Add refcounting for the \u0027state-\u003eof_node\u0027\n\tARM: dts: turris-omnia: Fix mpp26 pin name and comment\n\tARM: dts: kirkwood: lsxl: fix serial line\n\tARM: dts: kirkwood: lsxl: remove first ethernet port\n\tARM: dts: exynos: correct s5k6a3 reset polarity on Midas family\n\tARM: Drop CMDLINE_* dependency on ATAGS\n\tARM: dts: exynos: fix polarity of VBUS GPIO of Origen\n\tiio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX\n\tiio: adc: at91-sama5d2_adc: check return status for pressure and touch\n\tiio: adc: at91-sama5d2_adc: lock around oversampling and sample freq\n\tiio: inkern: only release the device node when done with it\n\tiio: ABI: Fix wrong format of differential capacitance channel ABI.\n\tclk: meson: Hold reference returned by of_get_parent()\n\tclk: oxnas: Hold reference returned by of_get_parent()\n\tclk: berlin: Add of_node_put() for of_get_parent()\n\tclk: tegra: Fix refcount leak in tegra210_clock_init\n\tclk: tegra: Fix refcount leak in tegra114_clock_init\n\tclk: tegra20: Fix refcount leak in tegra20_clock_init\n\tHSI: omap_ssi: Fix refcount leak in ssi_probe\n\tHSI: omap_ssi_port: Fix dma_map_sg error check\n\tmedia: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop\n\ttty: xilinx_uartps: Fix the ignore_status\n\tmedia: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init\n\tRDMA/rxe: Fix \"kernel NULL pointer dereference\" error\n\tRDMA/rxe: Fix the error caused by qp-\u003esk\n\tmisc: ocxl: fix possible refcount leak in afu_ioctl()\n\tdyndbg: fix module.dyndbg handling\n\tdyndbg: let query-modname override actual module name\n\tmtd: devices: docg3: check the return value of devm_ioremap() in the probe\n\tRDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.\n\tata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()\n\tata: fix ata_id_has_devslp()\n\tata: fix ata_id_has_ncq_autosense()\n\tata: fix ata_id_has_dipm()\n\tmtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()\n\tmd/raid5: Ensure stripe_fill happens on non-read IO with journal\n\txhci: Don\u0027t show warning for reinit on known broken suspend\n\tusb: gadget: function: fix dangling pnp_string in f_printer.c\n\tdrivers: serial: jsm: fix some leaks in probe\n\ttty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown\n\tphy: qualcomm: call clk_disable_unprepare in the error handling\n\tstaging: vt6655: fix some erroneous memory clean-up loops\n\tfirmware: google: Test spinlock on panic path to avoid lockups\n\tserial: 8250: Fix restoring termios speed after suspend\n\tscsi: libsas: Fix use-after-free bug in smp_execute_task_sg()\n\tfsi: core: Check error number after calling ida_simple_get\n\tmfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()\n\tmfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()\n\tmfd: lp8788: Fix an error handling path in lp8788_probe()\n\tmfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()\n\tmfd: fsl-imx25: Fix check for platform_get_irq() errors\n\tmfd: sm501: Add check for platform_driver_register()\n\tclk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent\n\tdmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()\n\tspmi: pmic-arb: correct duplicate APID to PPID mapping logic\n\tclk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration\n\tclk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe\n\tclk: ast2600: BCLK comes from EPLL\n\tmailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg\n\tpowerpc/math_emu/efp: Include module.h\n\tpowerpc/sysdev/fsl_msi: Add missing of_node_put()\n\tpowerpc/pci_dn: Add missing of_node_put()\n\tpowerpc/powernv: add missing of_node_put() in opal_export_attrs()\n\tx86/hyperv: Fix \u0027struct hv_enlightened_vmcs\u0027 definition\n\tpowerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5\n\tpowerpc: Fix SPE Power ISA properties for e500v1 platforms\n\tcgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset\n\tiommu/omap: Fix buffer overflow in debugfs\n\tcrypto: akcipher - default implementation for setting a private key\n\tcrypto: ccp - Release dma channels before dmaengine unrgister\n\tiommu/iova: Fix module config properly\n\tkbuild: remove the target in signal traps when interrupted\n\tcrypto: cavium - prevent integer overflow loading firmware\n\tf2fs: fix race condition on setting FI_NO_EXTENT flag\n\tACPI: video: Add Toshiba Satellite/Portege Z830 quirk\n\tMIPS: BCM47XX: Cast memcmp() of function to (void *)\n\tpowercap: intel_rapl: fix UBSAN shift-out-of-bounds issue\n\tthermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash\n\tNFSD: Return nfserr_serverfault if splice_ok but buf-\u003epages have data\n\twifi: brcmfmac: fix invalid address access when enabling SCAN log level\n\tbpftool: Clear errno after libcap\u0027s checks\n\topenvswitch: Fix double reporting of drops in dropwatch\n\topenvswitch: Fix overreporting of drops in dropwatch\n\ttcp: annotate data-race around tcp_md5sig_pool_populated\n\twifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()\n\txfrm: Update ipcomp_scratches with NULL when freed\n\twifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()\n\tBluetooth: L2CAP: initialize delayed works at l2cap_chan_create()\n\tBluetooth: hci_sysfs: Fix attempting to call device_add multiple times\n\tcan: bcm: check the result of can_send() in bcm_can_tx()\n\twifi: rt2x00: don\u0027t run Rt5592 IQ calibration on MT7620\n\twifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620\n\twifi: rt2x00: set VGC gain for both chains of MT7620\n\twifi: rt2x00: set SoC wmac clock register\n\twifi: rt2x00: correctly set BBP register 86 for MT7620\n\tnet: If sock is dead don\u0027t access sock\u0027s sk_wq in sk_stream_wait_memory\n\tBluetooth: L2CAP: Fix user-after-free\n\tr8152: Rate limit overflow messages\n\tdrm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()\n\tdrm: Use size_t type for len variable in drm_copy_field()\n\tdrm: Prevent drm_copy_field() to attempt copying a NULL pointer\n\tdrm/amd/display: fix overflow on MIN_I64 definition\n\tdrm/vc4: vec: Fix timings for VEC modes\n\tdrm: panel-orientation-quirks: Add quirk for Anbernic Win600\n\tplatform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading\n\tdrm/amdgpu: fix initial connector audio value\n\tmmc: sdhci-msm: add compatible string check for sdm670\n\tARM: dts: imx7d-sdb: config the max pressure for tsc2046\n\tARM: dts: imx6q: add missing properties for sram\n\tARM: dts: imx6dl: add missing properties for sram\n\tARM: dts: imx6qp: add missing properties for sram\n\tARM: dts: imx6sl: add missing properties for sram\n\tARM: dts: imx6sll: add missing properties for sram\n\tARM: dts: imx6sx: add missing properties for sram\n\tbtrfs: scrub: try to fix super block errors\n\tclk: zynqmp: Fix stack-out-of-bounds in strncpy`\n\tmedia: cx88: Fix a null-ptr-deref bug in buffer_prepare()\n\tclk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate\n\tscsi: 3w-9xxx: Avoid disabling device if failing to enable it\n\tnbd: Fix hung when signal interrupts nbd_start_device_ioctl()\n\tpower: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()\n\tstaging: vt6655: fix potential memory leak\n\tata: libahci_platform: Sanity check the DT child nodes number\n\tbcache: fix set_at_max_writeback_rate() for multiple attached devices\n\tHID: roccat: Fix use-after-free in roccat_read()\n\tmd/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d\n\tusb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()\n\tusb: musb: Fix musb_gadget.c rxstate overflow bug\n\tRevert \"usb: storage: Add quirk for Samsung Fit flash\"\n\tstaging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()\n\tnvme: copy firmware_rev on each init\n\tnvmet-tcp: add bounds check on Transfer Tag\n\tusb: idmouse: fix an uninit-value in idmouse_open\n\tclk: bcm2835: Make peripheral PLLC critical\n\tperf intel-pt: Fix segfault in intel_pt_print_info() with uClibc\n\tio_uring/af_unix: defer registered files gc to io_uring release\n\tnet: ieee802154: return -EINVAL for unknown addr type\n\tRevert \"net/ieee802154: reject zero-sized raw_sendmsg()\"\n\tnet/ieee802154: don\u0027t warn zero-sized raw_sendmsg()\n\text4: continue to expand file system when the target size doesn\u0027t reach\n\tmd: Replace snprintf with scnprintf\n\tefi: libstub: drop pointless get_memory_map() call\n\tinet: fully convert sk-\u003esk_rx_dst to RCU rules\n\tthermal: intel_powerclamp: Use first online CPU as control_cpu\n\tLinux 5.4.220\n\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@google.com\u003e\nChange-Id: I91859d6b79f44ab654cb0c88d0d6c9c46f62131b\n" }, { "commit": "00791e017b5f2555aa9cd5d7d3a02ce19cd86701", "tree": "4f65c588eec7733561b533fd3af72b4f23a8bb46", "parents": [ "d59d36aa4c3f59f0a2ec4823e18483f7b990dfbb" ], "author": { "name": "Masahiro Yamada", "email": "masahiroy@kernel.org", "time": "Sun Aug 07 09:48:09 2022 +0900" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Wed Oct 26 13:22:46 2022 +0200" }, "message": "kbuild: remove the target in signal traps when interrupted\n\n[ Upstream commit a7f3257da8a86b96fb9bf1bba40ae0bbd7f1885a ]\n\nWhen receiving some signal, GNU Make automatically deletes the target if\nit has already been changed by the interrupted recipe.\n\nIf the target is possibly incomplete due to interruption, it must be\ndeleted so that it will be remade from scratch on the next run of make.\nOtherwise, the target would remain corrupted permanently because its\ntimestamp had already been updated.\n\nThanks to this behavior of Make, you can stop the build any time by\npressing Ctrl-C, and just run \u0027make\u0027 to resume it.\n\nKbuild also relies on this feature, but it is equivalently important\nfor any build systems that make decisions based on timestamps (if you\nwant to support Ctrl-C reliably).\n\nHowever, this does not always work as claimed; Make immediately dies\nwith Ctrl-C if its stderr goes into a pipe.\n\n [Test Makefile]\n\n foo:\n echo hello \u003e $@\n sleep 3\n echo world \u003e\u003e $@\n\n [Test Result]\n\n $ make # hit Ctrl-C\n echo hello \u003e foo\n sleep 3\n ^Cmake: *** Deleting file \u0027foo\u0027\n make: *** [Makefile:3: foo] Interrupt\n\n $ make 2\u003e\u00261 | cat # hit Ctrl-C\n echo hello \u003e foo\n sleep 3\n ^C$ # \u0027foo\u0027 is often left-over\n\nThe reason is because SIGINT is sent to the entire process group.\nIn this example, SIGINT kills \u0027cat\u0027, and \u0027make\u0027 writes the message to\nthe closed pipe, then dies with SIGPIPE before cleaning the target.\n\nA typical bad scenario (as reported by [1], [2]) is to save build log\nby using the \u0027tee\u0027 command:\n\n $ make 2\u003e\u00261 | tee log\n\nThis can be problematic for any build systems based on Make, so I hope\nit will be fixed in GNU Make. The maintainer of GNU Make stated this is\na long-standing issue and difficult to fix [3]. It has not been fixed\nyet as of writing.\n\nSo, we cannot rely on Make cleaning the target. We can do it by\nourselves, in signal traps.\n\nAs far as I understand, Make takes care of SIGHUP, SIGINT, SIGQUIT, and\nSITERM for the target removal. I added the traps for them, and also for\nSIGPIPE just in case cmd_* rule prints something to stdout or stderr\n(but I did not observe an actual case where SIGPIPE was triggered).\n\n[Note 1]\n\nThe trap handler might be worth explaining.\n\n rm -f $@; trap - $(sig); kill -s $(sig) $$\n\nThis lets the shell kill itself by the signal it caught, so the parent\nprocess can tell the child has exited on the signal. Generally, this is\na proper manner for handling signals, in case the calling program (like\nBash) may monitor WIFSIGNALED() and WTERMSIG() for WCE although this may\nnot be a big deal here because GNU Make handles SIGHUP, SIGINT, SIGQUIT\nin WUE and SIGTERM in IUE.\n\n IUE - Immediate Unconditional Exit\n WUE - Wait and Unconditional Exit\n WCE - Wait and Cooperative Exit\n\nFor details, see \"Proper handling of SIGINT/SIGQUIT\" [4].\n\n[Note 2]\n\nReverting 392885ee82d3 (\"kbuild: let fixdep directly write to .*.cmd\nfiles\") would directly address [1], but it only saves if_changed_dep.\nAs reported in [2], all commands that use redirection can potentially\nleave an empty (i.e. broken) target.\n\n[Note 3]\n\nAnother (even safer) approach might be to always write to a temporary\nfile, and rename it to $@ at the end of the recipe.\n\n \u003ccommand\u003e \u003e $(tmp-target)\n mv $(tmp-target) $@\n\nIt would require a lot of Makefile changes, and result in ugly code,\nso I did not take it.\n\n[Note 4]\n\nA little more thoughts about a pattern rule with multiple targets (or\na grouped target).\n\n %.x %.y: %.z\n \u003crecipe\u003e\n\nWhen interrupted, GNU Make deletes both %.x and %.y, while this solution\nonly deletes $@. Probably, this is not a big deal. The next run of make\nwill execute the rule again to create $@ along with the other files.\n\n[1]: https://lore.kernel.org/all/YLeot94yAaM4xbMY@gmail.com/\n[2]: https://lore.kernel.org/all/20220510221333.2770571-1-robh@kernel.org/\n[3]: https://lists.gnu.org/archive/html/help-make/2021-06/msg00001.html\n[4]: https://www.cons.org/cracauer/sigint.html\n\nFixes: 392885ee82d3 (\"kbuild: let fixdep directly write to .*.cmd files\")\nReported-by: Ingo Molnar \u003cmingo@kernel.org\u003e\nReported-by: Rob Herring \u003crobh@kernel.org\u003e\nSigned-off-by: Masahiro Yamada \u003cmasahiroy@kernel.org\u003e\nTested-by: Ingo Molnar \u003cmingo@kernel.org\u003e\nReviewed-by: Nicolas Schier \u003cnicolas@fjasle.eu\u003e\nSigned-off-by: Sasha Levin \u003csashal@kernel.org\u003e\n" }, { "commit": "b0c2e34be932934698d7032942a18e8550815006", "tree": "a4ddf85461f154eb71dfabe3519a806b1d0626ba", "parents": [ "56ee9577915dc06f55309901012a9ef68dbdb5a8" ], "author": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Tue Sep 20 19:12:52 2022 +0200" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Wed Oct 26 13:22:21 2022 +0200" }, "message": "selinux: use \"grep -E\" instead of \"egrep\"\n\ncommit c969bb8dbaf2f3628927eae73e7c579a74cf1b6e upstream.\n\nThe latest version of grep claims that egrep is now obsolete so the build\nnow contains warnings that look like:\n\tegrep: warning: egrep is obsolescent; using grep -E\nfix this by using \"grep -E\" instead.\n\nCc: Paul Moore \u003cpaul@paul-moore.com\u003e\nCc: Stephen Smalley \u003cstephen.smalley.work@gmail.com\u003e\nCc: Eric Paris \u003ceparis@parisplace.org\u003e\nCc: selinux@vger.kernel.org\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n[PM: tweak to remove vdso reference, cleanup subj line]\nSigned-off-by: Paul Moore \u003cpaul@paul-moore.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "f21049ba3115dd4e8d5ffd8d009c36e4e2c32d39", "tree": "a0bb324edfe25e6f8eccefba88631904dde0d2ce", "parents": [ "73d3217026f69f4c6aee493ed112507e8675cb22", "1de735143f58b2c98206ccd46d8c40dc5a5ca4b0" ], "author": { "name": "Srinivasarao Pathipati", "email": "quic_c_spathi@quicinc.com", "time": "Fri Oct 14 12:07:30 2022 +0530" }, "committer": { "name": "Srinivasarao Pathipati", "email": "quic_c_spathi@quicinc.com", "time": "Fri Oct 14 12:09:01 2022 +0530" }, "message": "Merge android11-5.4.210+ (7e6cbbe) into msm-5.4\n\n* refs/heads/tmp-7e6cbbe:\n Revert \"arm64: mm: Don\u0027t invalidate FROM_DEVICE buffers at start of DMA transfer\"\n ANDROID: ABI: Update allowed list for QCOM\n ANDROID: incfs: Add check for ATTR_KILL_SUID and ATTR_MODE in incfs_setattr\n Linux 5.4.210\n x86/speculation: Add LFENCE to RSB fill sequence\n x86/speculation: Add RSB VM Exit protections\n macintosh/adb: fix oob read in do_adb_query() function\n media: v4l2-mem2mem: Apply DST_QUEUE_OFF_BASE on MMAP buffers across ioctls\n selftests: KVM: Handle compiler optimizations in ucall\n KVM: Don\u0027t null dereference ops-\u003edestroy\n selftests/bpf: Fix \"dubious pointer arithmetic\" test\n selftests/bpf: Fix test_align verifier log patterns\n bpf: Test_verifier, #70 error message updates for 32-bit right shift\n selftests/bpf: Extend verifier and bpf_sock tests for dst_port loads\n bpf: Verifer, adjust_scalar_min_max_vals to always call update_reg_bounds()\n ACPI: APEI: Better fix to avoid spamming the console with old error logs\n ACPI: video: Shortening quirk list by identifying Clevo by board_name only\n ACPI: video: Force backlight native for some TongFang devices\n thermal: Fix NULL pointer dereferences in of_thermal_ functions\n ANDROID: GKI: db845c: Update symbols list and ABI\n Linux 5.4.209\n scsi: core: Fix race between handling STS_RESOURCE and completion\n mt7601u: add USB device ID for some versions of XiaoDu WiFi Dongle.\n ARM: crypto: comment out gcc warning that breaks clang builds\n sctp: leave the err path free in sctp_stream_init to sctp_stream_free\n sfc: disable softirqs for ptp TX\n perf symbol: Correct address for bss symbols\n virtio-net: fix the race between refill work and close\n netfilter: nf_queue: do not allow packet truncation below transport header offset\n sctp: fix sleep in atomic context bug in timer handlers\n i40e: Fix interface init with MSI interrupts (no MSI-X)\n tcp: Fix a data-race around sysctl_tcp_comp_sack_nr.\n tcp: Fix a data-race around sysctl_tcp_comp_sack_delay_ns.\n Documentation: fix sctp_wmem in ip-sysctl.rst\n tcp: Fix a data-race around sysctl_tcp_invalid_ratelimit.\n tcp: Fix a data-race around sysctl_tcp_autocorking.\n tcp: Fix a data-race around sysctl_tcp_min_rtt_wlen.\n tcp: Fix a data-race around sysctl_tcp_min_tso_segs.\n net: sungem_phy: Add of_node_put() for reference returned by of_get_parent()\n igmp: Fix data-races around sysctl_igmp_qrv.\n ipv6/addrconf: fix a null-ptr-deref bug for ip6_ptr\n net: ping6: Fix memleak in ipv6_renew_options().\n tcp: Fix a data-race around sysctl_tcp_challenge_ack_limit.\n tcp: Fix a data-race around sysctl_tcp_limit_output_bytes.\n scsi: ufs: host: Hold reference returned by of_parse_phandle()\n ice: do not setup vlan for loopback VSI\n ice: check (DD | EOF) bits on Rx descriptor rather than (EOP | RS)\n tcp: Fix a data-race around sysctl_tcp_nometrics_save.\n tcp: Fix a data-race around sysctl_tcp_frto.\n tcp: Fix a data-race around sysctl_tcp_adv_win_scale.\n tcp: Fix a data-race around sysctl_tcp_app_win.\n tcp: Fix data-races around sysctl_tcp_dsack.\n s390/archrandom: prevent CPACF trng invocations in interrupt context\n ntfs: fix use-after-free in ntfs_ucsncmp()\n Bluetooth: L2CAP: Fix use-after-free caused by l2cap_chan_put\n ANDROID: restore some removed refcount functions\n ANDROID: add tty_schedule_flip() back to the kernel\n Linux 5.4.208\n x86: drop bogus \"cc\" clobber from __try_cmpxchg_user_asm()\n net: usb: ax88179_178a needs FLAG_SEND_ZLP\n tty: use new tty_insert_flip_string_and_push_buffer() in pty_write()\n tty: extract tty_flip_buffer_commit() from tty_flip_buffer_push()\n tty: drop tty_schedule_flip()\n tty: the rest, stop using tty_schedule_flip()\n tty: drivers/tty/, stop using tty_schedule_flip()\n Bluetooth: Fix bt_skb_sendmmsg not allocating partial chunks\n Bluetooth: SCO: Fix sco_send_frame returning skb-\u003elen\n Bluetooth: Fix passing NULL to PTR_ERR\n Bluetooth: RFCOMM: Replace use of memcpy_from_msg with bt_skb_sendmmsg\n Bluetooth: SCO: Replace use of memcpy_from_msg with bt_skb_sendmsg\n Bluetooth: Add bt_skb_sendmmsg helper\n Bluetooth: Add bt_skb_sendmsg helper\n ALSA: memalloc: Align buffer allocations in page size\n bitfield.h: Fix \"type of reg too small for mask\" test\n x86/mce: Deduplicate exception handling\n mmap locking API: initial implementation as rwsem wrappers\n x86/uaccess: Implement macros for CMPXCHG on user addresses\n x86: get rid of small constant size cases in raw_copy_{to,from}_user()\n locking/refcount: Consolidate implementations of refcount_t\n locking/refcount: Consolidate REFCOUNT_{MAX,SATURATED} definitions\n locking/refcount: Move saturation warnings out of line\n locking/refcount: Improve performance of generic REFCOUNT_FULL code\n locking/refcount: Move the bulk of the REFCOUNT_FULL implementation into the \u003clinux/refcount.h\u003e header\n locking/refcount: Remove unused refcount_*_checked() variants\n locking/refcount: Ensure integer operands are treated as signed\n locking/refcount: Define constants for saturation and max refcount values\n ima: remove the IMA_TEMPLATE Kconfig option\n dlm: fix pending remove if msg allocation fails\n bpf: Make sure mac_header was set before using it\n mm/mempolicy: fix uninit-value in mpol_rebind_policy()\n spi: bcm2835: bcm2835_spi_handle_err(): fix NULL pointer deref for non DMA transfers\n tcp: Fix data-races around sysctl_tcp_max_reordering.\n tcp: Fix a data-race around sysctl_tcp_rfc1337.\n tcp: Fix a data-race around sysctl_tcp_stdurg.\n tcp: Fix a data-race around sysctl_tcp_retrans_collapse.\n tcp: Fix data-races around sysctl_tcp_slow_start_after_idle.\n tcp: Fix a data-race around sysctl_tcp_thin_linear_timeouts.\n tcp: Fix data-races around sysctl_tcp_recovery.\n tcp: Fix a data-race around sysctl_tcp_early_retrans.\n tcp: Fix data-races around sysctl knobs related to SYN option.\n udp: Fix a data-race around sysctl_udp_l3mdev_accept.\n ipv4: Fix a data-race around sysctl_fib_multipath_use_neigh.\n be2net: Fix buffer overflow in be_get_module_eeprom\n gpio: pca953x: only use single read/write for No AI mode\n ixgbe: Add locking to prevent panic when setting sriov_numvfs to zero\n i40e: Fix erroneous adapter reinitialization during recovery process\n iavf: Fix handling of dummy receive descriptors\n tcp: Fix data-races around sysctl_tcp_fastopen.\n tcp: Fix data-races around sysctl_max_syn_backlog.\n tcp: Fix a data-race around sysctl_tcp_tw_reuse.\n tcp: Fix a data-race around sysctl_tcp_notsent_lowat.\n tcp: Fix data-races around some timeout sysctl knobs.\n tcp: Fix data-races around sysctl_tcp_reordering.\n tcp: Fix data-races around sysctl_tcp_syncookies.\n igmp: Fix a data-race around sysctl_igmp_max_memberships.\n igmp: Fix data-races around sysctl_igmp_llm_reports.\n net/tls: Fix race in TLS device down flow\n net: stmmac: fix dma queue left shift overflow issue\n i2c: cadence: Change large transfer count reset logic to be unconditional\n tcp: Fix a data-race around sysctl_tcp_probe_interval.\n tcp: Fix a data-race around sysctl_tcp_probe_threshold.\n tcp: Fix a data-race around sysctl_tcp_mtu_probe_floor.\n tcp: Fix data-races around sysctl_tcp_min_snd_mss.\n tcp: Fix data-races around sysctl_tcp_base_mss.\n tcp: Fix data-races around sysctl_tcp_mtu_probing.\n tcp/dccp: Fix a data-race around sysctl_tcp_fwmark_accept.\n ip: Fix a data-race around sysctl_fwmark_reflect.\n ip: Fix data-races around sysctl_ip_nonlocal_bind.\n ip: Fix data-races around sysctl_ip_fwd_use_pmtu.\n ip: Fix data-races around sysctl_ip_no_pmtu_disc.\n igc: Reinstate IGC_REMOVED logic and implement it properly\n perf/core: Fix data race between perf_event_set_output() and perf_mmap_close()\n pinctrl: ralink: Check for null return of devm_kcalloc\n power/reset: arm-versatile: Fix refcount leak in versatile_reboot_probe\n xfrm: xfrm_policy: fix a possible double xfrm_pols_put() in xfrm_bundle_lookup()\n serial: mvebu-uart: correctly report configured baudrate value\n PCI: hv: Fix interrupt mapping for multi-MSI\n PCI: hv: Reuse existing IRTE allocation in compose_msi_msg()\n PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI\n PCI: hv: Fix multi-MSI to allow more than one MSI vector\n xen/gntdev: Ignore failure to unmap INVALID_GRANT_HANDLE\n lockdown: Fix kexec lockdown bypass with ima policy\n mlxsw: spectrum_router: Fix IPv4 nexthop gateway indication\n riscv: add as-options for modules with assembly compontents\n pinctrl: stm32: fix optional IRQ support to gpios\n Revert \"cgroup: Use separate src/dst nodes when preloading css_sets for migration\"\n Linux 5.4.207\n can: m_can: m_can_tx_handler(): fix use after free of skb\n serial: pl011: UPSTAT_AUTORTS requires .throttle/unthrottle\n serial: stm32: Clear prev values before setting RTS delays\n serial: 8250: fix return error code in serial8250_request_std_resource()\n tty: serial: samsung_tty: set dma burst_size to 1\n usb: dwc3: gadget: Fix event pending check\n usb: typec: add missing uevent when partner support PD\n USB: serial: ftdi_sio: add Belimo device ids\n signal handling: don\u0027t use BUG_ON() for debugging\n ARM: dts: stm32: use the correct clock source for CEC on stm32mp151\n soc: ixp4xx/npe: Fix unused match warning\n x86: Clear .brk area at early boot\n irqchip: or1k-pic: Undefine mask_ack for level triggered hardware\n ASoC: madera: Fix event generation for rate controls\n ASoC: madera: Fix event generation for OUT1 demux\n ASoC: cs47l15: Fix event generation for low power mux control\n ASoC: wm5110: Fix DRE control\n ASoC: ops: Fix off by one in range control validation\n net: sfp: fix memory leak in sfp_probe()\n nvme: fix regression when disconnect a recovering ctrl\n NFC: nxp-nci: don\u0027t print header length mismatch on i2c error\n net: tipc: fix possible refcount leak in tipc_sk_create()\n platform/x86: hp-wmi: Ignore Sanitization Mode event\n cpufreq: pmac32-cpufreq: Fix refcount leak bug\n netfilter: br_netfilter: do not skip all hooks with 0 priority\n virtio_mmio: Restore guest page size on resume\n virtio_mmio: Add missing PM calls to freeze/restore\n mm: sysctl: fix missing numa_stat when !CONFIG_HUGETLB_PAGE\n sfc: fix kernel panic when creating VF\n seg6: bpf: fix skb checksum in bpf_push_seg6_encap()\n seg6: fix skb checksum in SRv6 End.B6 and End.B6.Encaps behaviors\n seg6: fix skb checksum evaluation in SRH encapsulation/insertion\n sfc: fix use after free when disabling sriov\n net: ftgmac100: Hold reference returned by of_get_child_by_name()\n ipv4: Fix data-races around sysctl_ip_dynaddr.\n raw: Fix a data-race around sysctl_raw_l3mdev_accept.\n icmp: Fix a data-race around sysctl_icmp_ratemask.\n icmp: Fix a data-race around sysctl_icmp_ratelimit.\n drm/i915/gt: Serialize TLB invalidates with GT resets\n ARM: dts: sunxi: Fix SPI NOR campatible on Orange Pi Zero\n ARM: dts: at91: sama5d2: Fix typo in i2s1 node\n ipv4: Fix a data-race around sysctl_fib_sync_mem.\n icmp: Fix data-races around sysctl.\n cipso: Fix data-races around sysctl.\n net: Fix data-races around sysctl_mem.\n inetpeer: Fix data-races around sysctl.\n net: stmmac: dwc-qos: Disable split header for Tegra194\n ASoC: sgtl5000: Fix noise on shutdown/remove\n ima: Fix a potential integer overflow in ima_appraise_measurement\n drm/i915: fix a possible refcount leak in intel_dp_add_mst_connector()\n ARM: 9210/1: Mark the FDT_FIXED sections as shareable\n ARM: 9209/1: Spectre-BHB: avoid pr_info() every time a CPU comes out of idle\n ARM: dts: imx6qdl-ts7970: Fix ngpio typo and count\n ext4: fix race condition between ext4_write and ext4_convert_inline_data\n sched/rt: Disable RT_RUNTIME_SHARE by default\n Revert \"evm: Fix memleak in init_desc\"\n nilfs2: fix incorrect masking of permission flags for symlinks\n drm/panfrost: Fix shrinker list corruption by madvise IOCTL\n cgroup: Use separate src/dst nodes when preloading css_sets for migration\n wifi: mac80211: fix queue selection for mesh/OCB interfaces\n ARM: 9214/1: alignment: advance IT state after emulating Thumb instruction\n ARM: 9213/1: Print message about disabled Spectre workarounds only once\n ip: fix dflt addr selection for connected nexthop\n net: sock: tracing: Fix sock_exceed_buf_limit not to dereference stale pointer\n tracing/histograms: Fix memory leak problem\n xen/netback: avoid entering xenvif_rx_next_skb() with an empty rx queue\n ALSA: hda/realtek - Enable the headset-mic on a Xiaomi\u0027s laptop\n ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc221\n ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc671\n ALSA: hda/conexant: Apply quirk for another HP ProDesk 600 G3 model\n ALSA: hda - Add fixup for Dell Latitidue E5430\n Linux 5.4.206\n Revert \"mtd: rawnand: gpmi: Fix setting busy timeout setting\"\n Linux 5.4.205\n dmaengine: ti: Add missing put_device in ti_dra7_xbar_route_allocate\n dmaengine: ti: Fix refcount leak in ti_dra7_xbar_route_allocate\n dmaengine: at_xdma: handle errors of at_xdmac_alloc_desc() correctly\n dmaengine: pl330: Fix lockdep warning about non-static key\n ida: don\u0027t use BUG_ON() for debugging\n dt-bindings: dma: allwinner,sun50i-a64-dma: Fix min/max typo\n misc: rtsx_usb: set return value in rsp_buf alloc err path\n misc: rtsx_usb: use separate command and response buffers\n misc: rtsx_usb: fix use of dma mapped buffer for usb bulk transfer\n dmaengine: imx-sdma: Allow imx8m for imx7 FW revs\n i2c: cadence: Unregister the clk notifier in error path\n selftests: forwarding: fix error message in learning_test\n selftests: forwarding: fix learning_test when h1 supports IFF_UNICAST_FLT\n selftests: forwarding: fix flood_unicast_test when h2 supports IFF_UNICAST_FLT\n ibmvnic: Properly dispose of all skbs during a failover.\n ARM: at91: pm: use proper compatibles for sam9x60\u0027s rtc and rtt\n ARM: at91: pm: use proper compatible for sama5d2\u0027s rtc\n pinctrl: sunxi: sunxi_pconf_set: use correct offset\n pinctrl: sunxi: a83t: Fix NAND function name for some pins\n ARM: meson: Fix refcount leak in meson_smp_prepare_cpus\n xfs: remove incorrect ASSERT in xfs_rename\n can: kvaser_usb: kvaser_usb_leaf: fix bittiming limits\n can: kvaser_usb: kvaser_usb_leaf: fix CAN clock frequency regression\n can: kvaser_usb: replace run-time checks with struct kvaser_usb_driver_info\n powerpc/powernv: delay rng platform device creation until later in boot\n video: of_display_timing.h: include errno.h\n fbcon: Prevent that screen size is smaller than font size\n fbcon: Disallow setting font bigger than screen size\n fbmem: Check virtual screen sizes in fb_set_var()\n fbdev: fbmem: Fix logo center image dx issue\n iommu/vt-d: Fix PCI bus rescan device hot add\n net: rose: fix UAF bug caused by rose_t0timer_expiry\n usbnet: fix memory leak in error case\n can: gs_usb: gs_usb_open/close(): fix memory leak\n can: grcan: grcan_probe(): remove extra of_node_get()\n can: bcm: use call_rcu() instead of costly synchronize_rcu()\n mm/slub: add missing TID updates on slab deactivation\n esp: limit skb_page_frag_refill use to a single page\n Linux 5.4.204\n clocksource/drivers/ixp4xx: remove EXPORT_SYMBOL_GPL from ixp4xx_timer_setup()\n net: usb: qmi_wwan: add Telit 0x1070 composition\n net: usb: qmi_wwan: add Telit 0x1060 composition\n xen/arm: Fix race in RB-tree based P2M accounting\n xen/blkfront: force data bouncing when backend is untrusted\n xen/netfront: force data bouncing when backend is untrusted\n xen/netfront: fix leaking data in shared pages\n xen/blkfront: fix leaking data in shared pages\n selftests/rseq: Change type of rseq_offset to ptrdiff_t\n selftests/rseq: x86-32: use %gs segment selector for accessing rseq thread area\n selftests/rseq: x86-64: use %fs segment selector for accessing rseq thread area\n selftests/rseq: Fix: work-around asm goto compiler bugs\n selftests/rseq: Remove arm/mips asm goto compiler work-around\n selftests/rseq: Fix warnings about #if checks of undefined tokens\n selftests/rseq: Fix ppc32 offsets by using long rather than off_t\n selftests/rseq: Fix ppc32 missing instruction selection \"u\" and \"x\" for load/store\n selftests/rseq: Fix ppc32: wrong rseq_cs 32-bit field pointer on big endian\n selftests/rseq: Uplift rseq selftests for compatibility with glibc-2.35\n selftests/rseq: Introduce thread pointer getters\n selftests/rseq: Introduce rseq_get_abi() helper\n selftests/rseq: Remove volatile from __rseq_abi\n selftests/rseq: Remove useless assignment to cpu variable\n selftests/rseq: introduce own copy of rseq uapi header\n selftests/rseq: remove ARRAY_SIZE define from individual tests\n rseq/selftests,x86_64: Add rseq_offset_deref_addv()\n ipv6/sit: fix ipip6_tunnel_get_prl return value\n sit: use min\n net: dsa: bcm_sf2: force pause link settings\n hwmon: (ibmaem) don\u0027t call platform_device_del() if platform_device_add() fails\n xen/gntdev: Avoid blocking in unmap_grant_pages()\n net: tun: avoid disabling NAPI twice\n NFC: nxp-nci: Don\u0027t issue a zero length i2c_master_read()\n nfc: nfcmrvl: Fix irq_of_parse_and_map() return value\n net: bonding: fix use-after-free after 802.3ad slave unbind\n net: bonding: fix possible NULL deref in rlb code\n net/sched: act_api: Notify user space if any actions were flushed before error\n netfilter: nft_dynset: restore set element counter when failing to update\n s390: remove unneeded \u0027select BUILD_BIN2C\u0027\n PM / devfreq: exynos-ppmu: Fix refcount leak in of_get_devfreq_events\n caif_virtio: fix race between virtio_device_ready() and ndo_open()\n net: ipv6: unexport __init-annotated seg6_hmac_net_init()\n usbnet: fix memory allocation in helpers\n linux/dim: Fix divide by 0 in RDMA DIM\n RDMA/qedr: Fix reporting QP timeout attribute\n net: tun: stop NAPI when detaching queues\n net: tun: unlink NAPI from device on destruction\n selftests/net: pass ipv6_args to udpgso_bench\u0027s IPv6 TCP test\n virtio-net: fix race between ndo_open() and virtio_device_ready()\n net: usb: ax88179_178a: Fix packet receiving\n net: rose: fix UAF bugs caused by timer handler\n SUNRPC: Fix READ_PLUS crasher\n s390/archrandom: simplify back to earlier design and initialize earlier\n dm raid: fix KASAN warning in raid5_add_disks\n dm raid: fix accesses beyond end of raid member array\n powerpc/bpf: Fix use of user_pt_regs in uapi\n powerpc/prom_init: Fix kernel config grep\n nvdimm: Fix badblocks clear off-by-one error\n ipv6: take care of disable_policy when restoring routes\n Linux 5.4.203\n crypto: arm/ghash-ce - define fpu before fpu registers are referenced\n crypto: arm - use Kconfig based compiler checks for crypto opcodes\n ARM: 9029/1: Make iwmmxt.S support Clang\u0027s integrated assembler\n ARM: OMAP2+: drop unnecessary adrl\n ARM: 8929/1: use APSR_nzcv instead of r15 as mrc operand\n ARM: 8933/1: replace Sun/Solaris style flag on section directive\n crypto: arm/sha512-neon - avoid ADRL pseudo instruction\n crypto: arm/sha256-neon - avoid ADRL pseudo instruction\n ARM: 8971/1: replace the sole use of a symbol with its definition\n ARM: 8990/1: use VFP assembler mnemonics in register load/store macros\n ARM: 8989/1: use .fpu assembler directives instead of assembler arguments\n net: mscc: ocelot: allow unregistered IP multicast flooding\n kexec_file: drop weak attribute from arch_kexec_apply_relocations[_add]\n powerpc/ftrace: Remove ftrace init tramp once kernel init is complete\n drm: remove drm_fb_helper_modinit\n Linux 5.4.202\n powerpc/pseries: wire up rng during setup_arch()\n kbuild: link vmlinux only once for CONFIG_TRIM_UNUSED_KSYMS (2nd attempt)\n random: update comment from copy_to_user() -\u003e copy_to_iter()\n modpost: fix section mismatch check for exported init/exit sections\n ARM: cns3xxx: Fix refcount leak in cns3xxx_init\n ARM: Fix refcount leak in axxia_boot_secondary\n soc: bcm: brcmstb: pm: pm-arm: Fix refcount leak in brcmstb_pm_probe\n ARM: exynos: Fix refcount leak in exynos_map_pmu\n ARM: dts: imx6qdl: correct PU regulator ramp delay\n powerpc/powernv: wire up rng during setup_arch\n powerpc/rtas: Allow ibm,platform-dump RTAS call with null buffer address\n powerpc: Enable execve syscall exit tracepoint\n parisc: Enable ARCH_HAS_STRICT_MODULE_RWX\n xtensa: Fix refcount leak bug in time.c\n xtensa: xtfpga: Fix refcount leak bug in setup\n iio: adc: axp288: Override TS pin bias current for some models\n iio: adc: stm32: fix maximum clock rate for stm32mp15x\n iio: trigger: sysfs: fix use-after-free on remove\n iio: gyro: mpu3050: Fix the error handling in mpu3050_power_up()\n iio: accel: mma8452: ignore the return value of reset operation\n iio:accel:mxc4005: rearrange iio trigger get and register\n iio:accel:bma180: rearrange iio trigger get and register\n iio:chemical:ccs811: rearrange iio trigger get and register\n usb: chipidea: udc: check request status before setting device address\n xhci: turn off port power in shutdown\n iio: adc: vf610: fix conversion mode sysfs node name\n s390/cpumf: Handle events cycles and instructions identical\n gpio: winbond: Fix error code in winbond_gpio_get()\n Revert \"net/tls: fix tls_sk_proto_close executed repeatedly\"\n virtio_net: fix xdp_rxq_info bug after suspend/resume\n igb: Make DMA faster when CPU is active on the PCIe link\n regmap-irq: Fix a bug in regmap_irq_enable() for type_in_mask chips\n ice: ethtool: advertise 1000M speeds properly\n afs: Fix dynamic root getattr\n MIPS: Remove repetitive increase irq_err_count\n x86/xen: Remove undefined behavior in setup_features()\n udmabuf: add back sanity check\n net/tls: fix tls_sk_proto_close executed repeatedly\n erspan: do not assume transport header is always set\n drm/msm/mdp4: Fix refcount leak in mdp4_modeset_init_intf\n net/sched: sch_netem: Fix arithmetic in netem_dump() for 32-bit platforms\n bonding: ARP monitor spams NETDEV_NOTIFY_PEERS notifiers\n phy: aquantia: Fix AN when higher speeds than 1G are not advertised\n bpf: Fix request_sock leak in sk lookup helpers\n USB: serial: option: add Quectel RM500K module support\n USB: serial: option: add Quectel EM05-G modem\n USB: serial: option: add Telit LE910Cx 0x1250 composition\n random: quiet urandom warning ratelimit suppression message\n dm mirror log: clear log bits up to BITS_PER_LONG boundary\n dm era: commit metadata in postsuspend after worker stops\n ata: libata: add qc-\u003eflags in ata_qc_complete_template tracepoint\n mtd: rawnand: gpmi: Fix setting busy timeout setting\n mmc: sdhci-pci-o2micro: Fix card detect by dealing with debouncing\n net: openvswitch: fix parsing of nw_proto for IPv6 fragments\n ALSA: hda/realtek: Add quirk for Clevo PD70PNT\n ALSA: hda/realtek - ALC897 headset MIC no sound\n ALSA: hda/conexant: Fix missing beep setup\n ALSA: hda/via: Fix missing beep setup\n random: schedule mix_interrupt_randomness() less often\n vt: drop old FONT ioctls\n Linux 5.4.201\n Revert \"hwmon: Make chip parameter for with_info API mandatory\"\n arm64: mm: Don\u0027t invalidate FROM_DEVICE buffers at start of DMA transfer\n tcp: drop the hash_32() part from the index calculation\n tcp: increase source port perturb table to 2^16\n tcp: dynamically allocate the perturb table used by source ports\n tcp: add small random increments to the source port\n tcp: use different parts of the port_offset for index and offset\n tcp: add some entropy in __inet_hash_connect()\n usb: gadget: u_ether: fix regression in setting fixed MAC address\n dm: remove special-casing of bio-based immutable singleton target on NVMe\n s390/mm: use non-quiescing sske for KVM switch to keyed guest\n UPSTREAM: ext4: verify dir block before splitting it\n UPSTREAM: ext4: fix use-after-free in ext4_rename_dir_prepare\n BACKPORT: ext4: Only advertise encrypted_casefold when encryption and unicode are enabled\n BACKPORT: ext4: fix no-key deletion for encrypt+casefold\n BACKPORT: ext4: optimize match for casefolded encrypted dirs\n BACKPORT: ext4: handle casefolding with encryption\n Revert \"ANDROID: ext4: Handle casefolding with encryption\"\n Revert \"ANDROID: ext4: Optimize match for casefolded encrypted dirs\"\n ANDROID: cpu/hotplug: avoid breaking Android ABI by fusing cpuhp steps\n ANDROID: change function signatures for some random functions.\n Revert \"mailbox: forward the hrtimer if not queued and under a lock\"\n Revert \"drm: fix EDID struct for old ARM OABI format\"\n Revert \"ALSA: jack: Access input_dev under mutex\"\n Linux 5.4.200\n powerpc/mm: Switch obsolete dssall to .long\n riscv: Less inefficient gcc tishift helpers (and export their symbols)\n RISC-V: fix barrier() use in \u003cvdso/processor.h\u003e\n arm64: kprobes: Use BRK instead of single-step when executing instructions out-of-line\n net: openvswitch: fix leak of nested actions\n net: openvswitch: fix misuse of the cached connection on tuple changes\n net/sched: act_police: more accurate MTU policing\n virtio-pci: Remove wrong address verification in vp_del_vqs()\n ALSA: hda/realtek: fix right sounds and mute/micmute LEDs for HP machine\n ALSA: hda/realtek: fix mute/micmute LEDs for HP 440 G8\n ext4: add reserved GDT blocks check\n ext4: make variable \"count\" signed\n ext4: fix bug_on ext4_mb_use_inode_pa\n dm mirror log: round up region bitmap size to BITS_PER_LONG\n serial: 8250: Store to lsr_save_flags after lsr read\n usb: gadget: lpc32xx_udc: Fix refcount leak in lpc32xx_udc_probe\n usb: dwc2: Fix memory leak in dwc2_hcd_init\n USB: serial: io_ti: add Agilent E5805A support\n USB: serial: option: add support for Cinterion MV31 with new baseline\n comedi: vmk80xx: fix expression for tx buffer size\n i2c: designware: Use standard optional ref clock implementation\n irqchip/gic-v3: Fix refcount leak in gic_populate_ppi_partitions\n irqchip/gic-v3: Fix error handling in gic_populate_ppi_partitions\n irqchip/gic/realview: Fix refcount leak in realview_gic_of_init\n faddr2line: Fix overlapping text section failures, the sequel\n certs/blacklist_hashes.c: fix const confusion in certs blacklist\n arm64: ftrace: fix branch range checks\n net: bgmac: Fix an erroneous kfree() in bgmac_remove()\n mlxsw: spectrum_cnt: Reorder counter pools\n misc: atmel-ssc: Fix IRQ check in ssc_probe\n tty: goldfish: Fix free_irq() on remove\n i40e: Fix call trace in setup_tx_descriptors\n i40e: Fix calculating the number of queue pairs\n i40e: Fix adding ADQ filter to TC0\n clocksource: hyper-v: unexport __init-annotated hv_init_clocksource()\n pNFS: Don\u0027t keep retrying if the server replied NFS4ERR_LAYOUTUNAVAILABLE\n random: credit cpu and bootloader seeds by default\n net: ethernet: mtk_eth_soc: fix misuse of mem alloc interface netdev[napi]_alloc_frag\n ipv6: Fix signed integer overflow in l2tp_ip6_sendmsg\n nfc: nfcmrvl: Fix memory leak in nfcmrvl_play_deferred\n virtio-mmio: fix missing put_device() when vm_cmdline_parent registration failed\n ALSA: hda/realtek - Add HW8326 support\n scsi: pmcraid: Fix missing resource cleanup in error case\n scsi: ipr: Fix missing/incorrect resource cleanup in error case\n scsi: lpfc: Allow reduced polling rate for nvme_admin_async_event cmd completion\n scsi: lpfc: Fix port stuck in bypassed state after LIP in PT2PT topology\n scsi: vmw_pvscsi: Expand vcpuHint to 16 bits\n ASoC: wm_adsp: Fix event generation for wm_adsp_fw_put()\n ASoC: es8328: Fix event generation for deemphasis control\n ASoC: wm8962: Fix suspend while playing music\n ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo()\n ASoC: cs42l56: Correct typo in minimum level for SX volume controls\n ASoC: cs42l52: Correct TLV for Bypass Volume\n ASoC: cs53l30: Correct number of volume levels on SX controls\n ASoC: cs35l36: Update digital volume TLV\n ASoC: cs42l52: Fix TLV scales for mixer controls\n dma-debug: make things less spammy under memory pressure\n ASoC: nau8822: Add operation for internal PLL off and on\n powerpc/kasan: Silence KASAN warnings in __get_wchan()\n random: account for arch randomness in bits\n random: mark bootloader randomness code as __init\n random: avoid checking crng_ready() twice in random_init()\n crypto: drbg - make reseeding from get_random_bytes() synchronous\n crypto: drbg - always try to free Jitter RNG instance\n crypto: drbg - move dynamic -\u003ereseed_threshold adjustments to __drbg_seed()\n crypto: drbg - track whether DRBG was seeded with !rng_is_initialized()\n crypto: drbg - prepare for more fine-grained tracking of seeding state\n crypto: drbg - always seeded with SP800-90B compliant noise source\n Revert \"random: use static branch for crng_ready()\"\n random: check for signals after page of pool writes\n random: wire up fops-\u003esplice_{read,write}_iter()\n random: convert to using fops-\u003ewrite_iter()\n random: convert to using fops-\u003eread_iter()\n random: unify batched entropy implementations\n random: move randomize_page() into mm where it belongs\n random: move initialization functions out of hot pages\n random: make consistent use of buf and len\n random: use proper return types on get_random_{int,long}_wait()\n random: remove extern from functions in header\n random: use static branch for crng_ready()\n random: credit architectural init the exact amount\n random: handle latent entropy and command line from random_init()\n random: use proper jiffies comparison macro\n random: remove ratelimiting for in-kernel unseeded randomness\n random: move initialization out of reseeding hot path\n random: avoid initializing twice in credit race\n random: use symbolic constants for crng_init states\n siphash: use one source of truth for siphash permutations\n random: help compiler out with fast_mix() by using simpler arguments\n random: do not use input pool from hard IRQs\n random: order timer entropy functions below interrupt functions\n random: do not pretend to handle premature next security model\n random: use first 128 bits of input as fast init\n random: do not use batches when !crng_ready()\n random: insist on random_get_entropy() existing in order to simplify\n xtensa: use fallback for random_get_entropy() instead of zero\n sparc: use fallback for random_get_entropy() instead of zero\n um: use fallback for random_get_entropy() instead of zero\n x86/tsc: Use fallback for random_get_entropy() instead of zero\n nios2: use fallback for random_get_entropy() instead of zero\n arm: use fallback for random_get_entropy() instead of zero\n mips: use fallback for random_get_entropy() instead of just c0 random\n m68k: use fallback for random_get_entropy() instead of zero\n timekeeping: Add raw clock fallback for random_get_entropy()\n powerpc: define get_cycles macro for arch-override\n alpha: define get_cycles macro for arch-override\n parisc: define get_cycles macro for arch-override\n s390: define get_cycles macro for arch-override\n ia64: define get_cycles macro for arch-override\n init: call time_init() before rand_initialize()\n random: fix sysctl documentation nits\n random: document crng_fast_key_erasure() destination possibility\n random: make random_get_entropy() return an unsigned long\n random: allow partial reads if later user copies fail\n random: check for signals every PAGE_SIZE chunk of /dev/[u]random\n random: check for signal_pending() outside of need_resched() check\n random: do not allow user to keep crng key around on stack\n random: do not split fast init input in add_hwgenerator_randomness()\n random: mix build-time latent entropy into pool at init\n random: re-add removed comment about get_random_{u32,u64} reseeding\n random: treat bootloader trust toggle the same way as cpu trust toggle\n random: skip fast_init if hwrng provides large chunk of entropy\n random: check for signal and try earlier when generating entropy\n random: reseed more often immediately after booting\n random: make consistent usage of crng_ready()\n random: use SipHash as interrupt entropy accumulator\n random: replace custom notifier chain with standard one\n random: don\u0027t let 644 read-only sysctls be written to\n random: give sysctl_random_min_urandom_seed a more sensible value\n random: do crng pre-init loading in worker rather than irq\n random: unify cycles_t and jiffies usage and types\n random: cleanup UUID handling\n random: only wake up writers after zap if threshold was passed\n random: round-robin registers as ulong, not u32\n random: clear fast pool, crng, and batches in cpuhp bring up\n random: pull add_hwgenerator_randomness() declaration into random.h\n random: check for crng_init \u003d\u003d 0 in add_device_randomness()\n random: unify early init crng load accounting\n random: do not take pool spinlock at boot\n random: defer fast pool mixing to worker\n random: rewrite header introductory comment\n random: group sysctl functions\n random: group userspace read/write functions\n random: group entropy collection functions\n random: group entropy extraction functions\n random: group crng functions\n random: group initialization wait functions\n random: remove whitespace and reorder includes\n random: remove useless header comment\n random: introduce drain_entropy() helper to declutter crng_reseed()\n random: deobfuscate irq u32/u64 contributions\n random: add proper SPDX header\n random: remove unused tracepoints\n random: remove ifdef\u0027d out interrupt bench\n random: tie batched entropy generation to base_crng generation\n random: fix locking for crng_init in crng_reseed()\n random: zero buffer after reading entropy from userspace\n random: remove outdated INT_MAX \u003e\u003e 6 check in urandom_read()\n random: make more consistent use of integer types\n random: use hash function for crng_slow_load()\n random: use simpler fast key erasure flow on per-cpu keys\n random: absorb fast pool into input pool after fast load\n random: do not xor RDRAND when writing into /dev/random\n random: ensure early RDSEED goes through mixer on init\n random: inline leaves of rand_initialize()\n random: get rid of secondary crngs\n random: use RDSEED instead of RDRAND in entropy extraction\n random: fix locking in crng_fast_load()\n random: remove batched entropy locking\n random: remove use_input_pool parameter from crng_reseed()\n random: make credit_entropy_bits() always safe\n random: always wake up entropy writers after extraction\n random: use linear min-entropy accumulation crediting\n random: simplify entropy debiting\n random: use computational hash for entropy extraction\n random: only call crng_finalize_init() for primary_crng\n random: access primary_pool directly rather than through pointer\n random: continually use hwgenerator randomness\n random: simplify arithmetic function flow in account()\n random: selectively clang-format where it makes sense\n random: access input_pool_data directly rather than through pointer\n random: cleanup fractional entropy shift constants\n random: prepend remaining pool constants with POOL_\n random: de-duplicate INPUT_POOL constants\n random: remove unused OUTPUT_POOL constants\n random: rather than entropy_store abstraction, use global\n random: remove unused extract_entropy() reserved argument\n random: remove incomplete last_data logic\n random: cleanup integer types\n random: cleanup poolinfo abstraction\n random: fix typo in comments\n random: don\u0027t reset crng_init_cnt on urandom_read()\n random: avoid superfluous call to RDRAND in CRNG extraction\n random: early initialization of ChaCha constants\n random: initialize ChaCha20 constants with correct endianness\n random: use IS_ENABLED(CONFIG_NUMA) instead of ifdefs\n random: harmonize \"crng init done\" messages\n random: mix bootloader randomness into pool\n random: do not re-init if crng_reseed completes before primary init\n random: do not sign extend bytes for rotation when mixing\n random: use BLAKE2s instead of SHA1 in extraction\n random: remove unused irq_flags argument from add_interrupt_randomness()\n random: document add_hwgenerator_randomness() with other input functions\n crypto: blake2s - adjust include guard naming\n crypto: blake2s - include \u003clinux/bug.h\u003e instead of \u003casm/bug.h\u003e\n MAINTAINERS: co-maintain random.c\n random: remove dead code left over from blocking pool\n random: avoid arch_get_random_seed_long() when collecting IRQ randomness\n random: add arch_get_random_*long_early()\n powerpc: Use bool in archrandom.h\n linux/random.h: Mark CONFIG_ARCH_RANDOM functions __must_check\n linux/random.h: Use false with bool\n linux/random.h: Remove arch_has_random, arch_has_random_seed\n s390: Remove arch_has_random, arch_has_random_seed\n powerpc: Remove arch_has_random, arch_has_random_seed\n x86: Remove arch_has_random, arch_has_random_seed\n random: avoid warnings for !CONFIG_NUMA builds\n random: split primary/secondary crng init paths\n random: remove some dead code of poolinfo\n random: fix typo in add_timer_randomness()\n random: Add and use pr_fmt()\n random: convert to ENTROPY_BITS for better code readability\n random: remove unnecessary unlikely()\n random: remove kernel.random.read_wakeup_threshold\n random: delete code to pull data into pools\n random: remove the blocking pool\n random: make /dev/random be almost like /dev/urandom\n random: ignore GRND_RANDOM in getentropy(2)\n random: add GRND_INSECURE to return best-effort non-cryptographic bytes\n random: Add a urandom_read_nowait() for random APIs that don\u0027t warn\n random: Don\u0027t wake crng_init_wait when crng_init \u003d\u003d 1\n random: don\u0027t forget compat_ioctl on urandom\n compat_ioctl: remove /dev/random commands\n lib/crypto: sha1: re-roll loops to reduce code size\n lib/crypto: blake2s: move hmac construction into wireguard\n crypto: blake2s - generic C library implementation and selftest\n nfc: st21nfca: fix incorrect sizing calculations in EVT_TRANSACTION\n bpf: Fix incorrect memory charge cost calculation in stack_map_alloc()\n 9p: missing chunk of \"fs/9p: Don\u0027t update file type when updating file attributes\"\n Revert \"ext4: fix use-after-free in ext4_rename_dir_prepare\"\n Revert \"ext4: verify dir block before splitting it\"\n Linux 5.4.199\n x86/speculation/mmio: Print SMT warning\n KVM: x86/speculation: Disable Fill buffer clear within guests\n x86/speculation/mmio: Reuse SRBDS mitigation for SBDS\n x86/speculation/srbds: Update SRBDS mitigation selection\n x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data\n x86/speculation/mmio: Enable CPU Fill buffer clearing on idle\n x86/bugs: Group MDS, TAA \u0026 Processor MMIO Stale Data mitigations\n x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data\n x86/speculation: Add a common function for MD_CLEAR mitigation update\n x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug\n Documentation: Add documentation for Processor MMIO Stale Data\n x86/cpu: Add another Alder Lake CPU to the Intel family\n x86/cpu: Add Lakefield, Alder Lake and Rocket Lake models to the to Intel CPU family\n x86/cpu: Add Jasper Lake to Intel family\n cpu/speculation: Add prototype for cpu_show_srbds()\n Linux 5.4.198\n tcp: fix tcp_mtup_probe_success vs wrong snd_cwnd\n mtd: cfi_cmdset_0002: Use chip_ready() for write on S29GL064N\n md/raid0: Ignore RAID0 layout if the second zone has only one device\n powerpc/32: Fix overread/overwrite of thread_struct via ptrace\n Input: bcm5974 - set missing URB_NO_TRANSFER_DMA_MAP urb flag\n ixgbe: fix unexpected VLAN Rx in promisc mode on VF\n ixgbe: fix bcast packets Rx on VF after promisc removal\n nfc: st21nfca: fix memory leaks in EVT_TRANSACTION handling\n nfc: st21nfca: fix incorrect validating logic in EVT_TRANSACTION\n mmc: block: Fix CQE recovery reset success\n ata: libata-transport: fix {dma|pio|xfer}_mode sysfs files\n cifs: return errors during session setup during reconnects\n ALSA: hda/conexant - Fix loopback issue with CX20632\n scripts/gdb: change kernel config dumping method\n vringh: Fix loop descriptors check in the indirect cases\n nodemask: Fix return values to be unsigned\n cifs: version operations for smb20 unneeded when legacy support disabled\n s390/gmap: voluntarily schedule during key setting\n nbd: fix io hung while disconnecting device\n nbd: fix race between nbd_alloc_config() and module removal\n nbd: call genl_unregister_family() first in nbd_cleanup()\n x86/cpu: Elide KCSAN for cpu_has() and friends\n modpost: fix undefined behavior of is_arm_mapping_symbol()\n drm/radeon: fix a possible null pointer dereference\n ceph: allow ceph.dir.rctime xattr to be updatable\n Revert \"net: af_key: add check for pfkey_broadcast in function pfkey_process\"\n scsi: myrb: Fix up null pointer access on myrb_cleanup()\n md: protect md_unregister_thread from reentrancy\n watchdog: wdat_wdt: Stop watchdog when rebooting the system\n kernfs: Separate kernfs_pr_cont_buf and rename_lock.\n serial: msm_serial: disable interrupts in __msm_console_write()\n staging: rtl8712: fix uninit-value in r871xu_drv_init()\n staging: rtl8712: fix uninit-value in usb_read8() and friends\n clocksource/drivers/sp804: Avoid error on multiple instances\n extcon: Modify extcon device to be created after driver data is set\n misc: rtsx: set NULL intfdata when probe fails\n usb: dwc2: gadget: don\u0027t reset gadget\u0027s driver-\u003ebus\n USB: hcd-pci: Fully suspend across freeze/thaw cycle\n drivers: usb: host: Fix deadlock in oxu_bus_suspend()\n drivers: tty: serial: Fix deadlock in sa1100_set_termios()\n USB: host: isp116x: check return value after calling platform_get_resource()\n drivers: staging: rtl8192e: Fix deadlock in rtllib_beacons_stop()\n drivers: staging: rtl8192u: Fix deadlock in ieee80211_beacons_stop()\n tty: Fix a possible resource leak in icom_probe\n tty: synclink_gt: Fix null-pointer-dereference in slgt_clean()\n lkdtm/usercopy: Expand size of \"out of frame\" object\n iio: st_sensors: Add a local lock for protecting odr\n iio: dummy: iio_simple_dummy: check the return value of kstrdup()\n drm: imx: fix compiler warning with gcc-12\n net: altera: Fix refcount leak in altera_tse_mdio_create\n ip_gre: test csum_start instead of transport header\n net/mlx5: fs, fail conflicting actions\n net/mlx5: Rearm the FW tracer after each tracer event\n net: ipv6: unexport __init-annotated seg6_hmac_init()\n net: xfrm: unexport __init-annotated xfrm4_protocol_init()\n net: mdio: unexport __init-annotated mdio_bus_init()\n SUNRPC: Fix the calculation of xdr-\u003eend in xdr_get_next_encode_buffer()\n net/mlx4_en: Fix wrong return value on ioctl EEPROM query failure\n net: dsa: lantiq_gswip: Fix refcount leak in gswip_gphy_fw_list\n bpf, arm64: Clear prog-\u003ejited_len along prog-\u003ejited\n af_unix: Fix a data-race in unix_dgram_peer_wake_me().\n xen: unexport __init-annotated xen_xlate_map_ballooned_pages()\n netfilter: nf_tables: memleak flow rule from commit path\n ata: pata_octeon_cf: Fix refcount leak in octeon_cf_probe\n netfilter: nat: really support inet nat without l3 address\n xprtrdma: treat all calls not a bcall when bc_serv is NULL\n video: fbdev: pxa3xx-gcu: release the resources correctly in pxa3xx_gcu_probe/remove()\n NFSv4: Don\u0027t hold the layoutget locks across multiple RPC calls\n dmaengine: zynqmp_dma: In struct zynqmp_dma_chan fix desc_size data type\n m68knommu: fix undefined reference to `_init_sp\u0027\n m68knommu: set ZERO_PAGE() to the allocated zeroed page\n i2c: cadence: Increase timeout per message if necessary\n f2fs: remove WARN_ON in f2fs_is_valid_blkaddr\n tracing: Avoid adding tracer option before update_tracer_options\n tracing: Fix sleeping function called from invalid context on RT kernel\n mips: cpc: Fix refcount leak in mips_cpc_default_phys_base\n perf c2c: Fix sorting in percent_rmt_hitm_cmp()\n tipc: check attribute length for bearer name\n afs: Fix infinite loop found by xfstest generic/676\n tcp: tcp_rtx_synack() can be called from process context\n net: sched: add barrier to fix packet stuck problem for lockless qdisc\n net/mlx5e: Update netdev features after changing XDP state\n net/mlx5: Don\u0027t use already freed action pointer\n nfp: only report pause frame configuration for physical device\n ubi: ubi_create_volume: Fix use-after-free when volume creation failed\n jffs2: fix memory leak in jffs2_do_fill_super\n modpost: fix removing numeric suffixes\n net: dsa: mv88e6xxx: Fix refcount leak in mv88e6xxx_mdios_register\n net: ethernet: mtk_eth_soc: out of bounds read in mtk_hwlro_get_fdir_entry()\n net: sched: fixed barrier to prevent skbuff sticking in qdisc backlog\n s390/crypto: fix scatterwalk_unmap() callers in AES-GCM\n clocksource/drivers/oxnas-rps: Fix irq_of_parse_and_map() return value\n ASoC: fsl_sai: Fix FSL_SAI_xDR/xFR definition\n watchdog: ts4800_wdt: Fix refcount leak in ts4800_wdt_probe\n driver core: fix deadlock in __device_attach\n driver: base: fix UAF when driver_attach failed\n bus: ti-sysc: Fix warnings for unbind for serial\n firmware: dmi-sysfs: Fix memory leak in dmi_sysfs_register_handle\n serial: stm32-usart: Correct CSIZE, bits, and parity\n serial: st-asc: Sanitize CSIZE and correct PARENB for CS7\n serial: sifive: Sanitize CSIZE and c_iflag\n serial: sh-sci: Don\u0027t allow CS5-6\n serial: txx9: Don\u0027t allow CS5-6\n serial: rda-uart: Don\u0027t allow CS5-6\n serial: digicolor-usart: Don\u0027t allow CS5-6\n serial: 8250_fintek: Check SER_RS485_RTS_* only with RS485\n serial: meson: acquire port-\u003elock in startup()\n rtc: mt6397: check return value after calling platform_get_resource()\n clocksource/drivers/riscv: Events are stopped during CPU suspend\n soc: rockchip: Fix refcount leak in rockchip_grf_init\n coresight: cpu-debug: Replace mutex with mutex_trylock on panic notifier\n serial: sifive: Report actual baud base rather than fixed 115200\n phy: qcom-qmp: fix pipe-clock imbalance on power-on failure\n rpmsg: qcom_smd: Fix returning 0 if irq_of_parse_and_map() fails\n iio: adc: sc27xx: Fine tune the scale calibration values\n iio: adc: sc27xx: fix read big scale voltage not right\n iio: adc: stmpe-adc: Fix wait_for_completion_timeout return value check\n firmware: stratix10-svc: fix a missing check on list iterator\n usb: dwc3: pci: Fix pm_runtime_get_sync() error checking\n rpmsg: qcom_smd: Fix irq_of_parse_and_map() return value\n pwm: lp3943: Fix duty calculation in case period was clamped\n staging: fieldbus: Fix the error handling path in anybuss_host_common_probe()\n usb: musb: Fix missing of_node_put() in omap2430_probe\n USB: storage: karma: fix rio_karma_init return\n usb: usbip: add missing device lock on tweak configuration cmd\n usb: usbip: fix a refcount leak in stub_probe()\n tty: serial: fsl_lpuart: fix potential bug when using both of_alias_get_id and ida_simple_get\n tty: serial: owl: Fix missing clk_disable_unprepare() in owl_uart_probe\n tty: goldfish: Use tty_port_destroy() to destroy port\n iio: adc: ad7124: Remove shift from scan_type\n staging: greybus: codecs: fix type confusion of list iterator variable\n pcmcia: db1xxx_ss: restrict to MIPS_DB1XXX boards\n md: bcache: check the return value of kzalloc() in detached_dev_do_request()\n block: fix bio_clone_blkg_association() to associate with proper blkcg_gq\n bfq: Make sure bfqg for which we are queueing requests is online\n bfq: Get rid of __bio_blkcg() usage\n bfq: Remove pointless bfq_init_rq() calls\n bfq: Drop pointless unlock-lock pair\n bfq: Avoid merging queues with different parents\n MIPS: IP27: Remove incorrect `cpu_has_fpu\u0027 override\n RDMA/rxe: Generate a completion for unsupported/invalid opcode\n Kconfig: add config option for asm goto w/ outputs\n phy: qcom-qmp: fix reset-controller leak on probe errors\n blk-iolatency: Fix inflight count imbalances and IO hangs on offline\n dt-bindings: gpio: altera: correct interrupt-cells\n docs/conf.py: Cope with removal of language\u003dNone in Sphinx 5.0.0\n ARM: pxa: maybe fix gpio lookup tables\n phy: qcom-qmp: fix struct clk leak on probe errors\n arm64: dts: qcom: ipq8074: fix the sleep clock frequency\n gma500: fix an incorrect NULL check on list iterator\n tilcdc: tilcdc_external: fix an incorrect NULL check on list iterator\n serial: pch: don\u0027t overwrite xmit-\u003ebuf[0] by x_char\n carl9170: tx: fix an incorrect use of list iterator\n ASoC: rt5514: Fix event generation for \"DSP Voice Wake Up\" control\n rtl818x: Prevent using not initialized queues\n hugetlb: fix huge_pmd_unshare address update\n nodemask.h: fix compilation error with GCC12\n iommu/msm: Fix an incorrect NULL check on list iterator\n um: Fix out-of-bounds read in LDT setup\n um: chan_user: Fix winch_tramp() return value\n mac80211: upgrade passive scan to active scan on DFS channels after beacon rx\n irqchip: irq-xtensa-mx: fix initial IRQ affinity\n irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375, A38x, A39x\n RDMA/hfi1: Fix potential integer multiplication overflow errors\n Kconfig: Add option for asm goto w/ tied outputs to workaround clang-13 bug\n media: coda: Add more H264 levels for CODA960\n media: coda: Fix reported H264 profile\n mtd: cfi_cmdset_0002: Move and rename chip_check/chip_ready/chip_good_for_write\n md: fix an incorrect NULL check in md_reload_sb\n md: fix an incorrect NULL check in does_sb_need_changing\n drm/bridge: analogix_dp: Grab runtime PM reference for DP-AUX\n drm/nouveau/clk: Fix an incorrect NULL check on list iterator\n drm/etnaviv: check for reaped mapping in etnaviv_iommu_unmap_gem\n drm/amdgpu/cs: make commands with 0 chunks illegal behaviour.\n scsi: ufs: qcom: Add a readl() to make sure ref_clk gets enabled\n scsi: dc395x: Fix a missing check on list iterator\n ocfs2: dlmfs: fix error handling of user_dlm_destroy_lock\n dlm: fix missing lkb refcount handling\n dlm: fix plock invalid read\n mm, compaction: fast_find_migrateblock() should return pfn in the target zone\n PCI: qcom: Fix unbalanced PHY init on probe errors\n PCI: qcom: Fix runtime PM imbalance on probe errors\n PCI/PM: Fix bridge_d3_blacklist[] Elo i2 overwrite of Gigabyte X299\n tracing: Fix potential double free in create_var_ref()\n ACPI: property: Release subnode properties with data nodes\n ext4: avoid cycles in directory h-tree\n ext4: verify dir block before splitting it\n ext4: fix bug_on in ext4_writepages\n ext4: fix warning in ext4_handle_inode_extension\n ext4: fix use-after-free in ext4_rename_dir_prepare\n netfilter: nf_tables: disallow non-stateful expression in sets earlier\n bfq: Track whether bfq_group is still online\n bfq: Update cgroup information before merging bio\n bfq: Split shared queues on move between cgroups\n efi: Do not import certificates from UEFI Secure Boot for T2 Macs\n fs-writeback: writeback_sb_inodes：Recalculate \u0027wrote\u0027 according skipped pages\n iwlwifi: mvm: fix assert 1F04 upon reconfig\n wifi: mac80211: fix use-after-free in chanctx code\n f2fs: fix fallocate to use file_modified to update permissions consistently\n f2fs: don\u0027t need inode lock for system hidden quota\n f2fs: fix deadloop in foreground GC\n f2fs: fix to clear dirty inode in f2fs_evict_inode()\n f2fs: fix to do sanity check on block address in f2fs_do_zero_range()\n f2fs: fix to avoid f2fs_bug_on() in dec_valid_node_count()\n perf jevents: Fix event syntax error caused by ExtSel\n perf c2c: Use stdio interface if slang is not supported\n iommu/amd: Increase timeout waiting for GA log enablement\n dmaengine: stm32-mdma: remove GISR1 register\n video: fbdev: clcdfb: Fix refcount leak in clcdfb_of_vram_setup\n NFSv4/pNFS: Do not fail I/O when we fail to allocate the pNFS layout\n NFS: Don\u0027t report errors from nfs_pageio_complete() more than once\n NFS: Do not report flush errors in nfs_write_end()\n NFS: Do not report EINTR/ERESTARTSYS as mapping errors\n i2c: at91: Initialize dma_buf in at91_twi_xfer()\n i2c: at91: use dma safe buffers\n iommu/mediatek: Add list_del in mtk_iommu_remove\n f2fs: fix dereference of stale list iterator after loop body\n Input: stmfts - do not leave device disabled in stmfts_input_open\n RDMA/hfi1: Prevent use of lock before it is initialized\n mailbox: forward the hrtimer if not queued and under a lock\n mfd: davinci_voicecodec: Fix possible null-ptr-deref davinci_vc_probe()\n powerpc/fsl_rio: Fix refcount leak in fsl_rio_setup\n macintosh: via-pmu and via-cuda need RTC_LIB\n powerpc/perf: Fix the threshold compare group constraint for power9\n powerpc/64: Only WARN if __pa()/__va() called with bad addresses\n Input: sparcspkr - fix refcount leak in bbc_beep_probe\n crypto: cryptd - Protect per-CPU resource by disabling BH.\n tty: fix deadlock caused by calling printk() under tty_port-\u003elock\n PCI: imx6: Fix PERST# start-up sequence\n ipc/mqueue: use get_tree_nodev() in mqueue_get_tree()\n proc: fix dentry/inode overinstantiating under /proc/${pid}/net\n powerpc/4xx/cpm: Fix return value of __setup() handler\n powerpc/idle: Fix return value of __setup() handler\n powerpc/8xx: export \u0027cpm_setbrg\u0027 for modules\n dax: fix cache flush on PMD-mapped pages\n drivers/base/node.c: fix compaction sysfs file leak\n pinctrl: mvebu: Fix irq_of_parse_and_map() return value\n nvdimm: Allow overwrite in the presence of disabled dimms\n firmware: arm_scmi: Fix list protocols enumeration in the base protocol\n scsi: fcoe: Fix Wstringop-overflow warnings in fcoe_wwn_from_mac()\n mfd: ipaq-micro: Fix error check return value of platform_get_irq()\n powerpc/fadump: fix PT_LOAD segment for boot memory area\n arm: mediatek: select arch timer for mt7629\n crypto: marvell/cesa - ECB does not IV\n misc: ocxl: fix possible double free in ocxl_file_register_afu\n ARM: dts: bcm2835-rpi-b: Fix GPIO line names\n ARM: dts: bcm2837-rpi-3-b-plus: Fix GPIO line name of power LED\n ARM: dts: bcm2837-rpi-cm3-io3: Fix GPIO line names for SMPS I2C\n ARM: dts: bcm2835-rpi-zero-w: Fix GPIO line name for Wifi/BT\n can: xilinx_can: mark bit timing constants as const\n KVM: nVMX: Leave most VM-Exit info fields unmodified on failed VM-Entry\n PCI: rockchip: Fix find_first_zero_bit() limit\n PCI: cadence: Fix find_first_zero_bit() limit\n soc: qcom: smsm: Fix missing of_node_put() in smsm_parse_ipc\n soc: qcom: smp2p: Fix missing of_node_put() in smp2p_parse_ipc\n ARM: dts: suniv: F1C100: fix watchdog compatible\n arm64: dts: rockchip: Move drive-impedance-ohm to emmc phy on rk3399\n net/smc: postpone sk_refcnt increment in connect()\n rxrpc: Fix decision on when to generate an IDLE ACK\n rxrpc: Don\u0027t let ack.previousPacket regress\n rxrpc: Fix overlapping ACK accounting\n rxrpc: Don\u0027t try to resend the request if we\u0027re receiving the reply\n rxrpc: Fix listen() setting the bar too high for the prealloc rings\n NFC: hci: fix sleep in atomic context bugs in nfc_hci_hcp_message_tx\n ASoC: wm2000: fix missing clk_disable_unprepare() on error in wm2000_anc_transition()\n thermal/drivers/broadcom: Fix potential NULL dereference in sr_thermal_probe\n drm: msm: fix possible memory leak in mdp5_crtc_cursor_set()\n drm/msm/a6xx: Fix refcount leak in a6xx_gpu_init\n ext4: reject the \u0027commit\u0027 option on ext2 filesystems\n media: ov7670: remove ov7670_power_off from ov7670_remove\n sctp: read sk-\u003esk_bound_dev_if once in sctp_rcv()\n m68k: math-emu: Fix dependencies of math emulation support\n Bluetooth: fix dangling sco_conn and use-after-free in sco_sock_timeout\n media: vsp1: Fix offset calculation for plane cropping\n media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init\n media: exynos4-is: Change clk_disable to clk_disable_unprepare\n media: st-delta: Fix PM disable depth imbalance in delta_probe\n media: aspeed: Fix an error handling path in aspeed_video_probe()\n scripts/faddr2line: Fix overlapping text section failures\n regulator: pfuze100: Fix refcount leak in pfuze_parse_regulators_dt\n ASoC: mxs-saif: Fix refcount leak in mxs_saif_probe\n ASoC: fsl: Fix refcount leak in imx_sgtl5000_probe\n perf/amd/ibs: Use interrupt regs ip for stack unwinding\n Revert \"cpufreq: Fix possible race in cpufreq online error path\"\n iomap: iomap_write_failed fix\n media: uvcvideo: Fix missing check to determine if element is found in list\n drm/msm: return an error pointer in msm_gem_prime_get_sg_table()\n drm/msm/mdp5: Return error code in mdp5_mixer_release when deadlock is detected\n drm/msm/mdp5: Return error code in mdp5_pipe_release when deadlock is detected\n regulator: core: Fix enable_count imbalance with EXCLUSIVE_GET\n x86/mm: Cleanup the control_va_addr_alignment() __setup handler\n irqchip/aspeed-i2c-ic: Fix irq_of_parse_and_map() return value\n irqchip/exiu: Fix acknowledgment of edge triggered interrupts\n x86: Fix return value of __setup handlers\n virtio_blk: fix the discard_granularity and discard_alignment queue limits\n drm/rockchip: vop: fix possible null-ptr-deref in vop_bind()\n drm/msm/hdmi: fix error check return value of irq_of_parse_and_map()\n drm/msm/hdmi: check return value after calling platform_get_resource_byname()\n drm/msm/dsi: fix error checks and return values for DSI xmit functions\n drm/msm/disp/dpu1: set vbif hw config to NULL to avoid use after memory free during pm runtime resume\n perf tools: Add missing headers needed by util/data.h\n ASoC: rk3328: fix disabling mclk on pclk probe failure\n x86/speculation: Add missing prototype for unpriv_ebpf_notify()\n x86/pm: Fix false positive kmemleak report in msr_build_context()\n scsi: ufs: core: Exclude UECxx from SFR dump list\n of: overlay: do not break notify on NOTIFY_{OK|STOP}\n fsnotify: fix wrong lockdep annotations\n inotify: show inotify mask flags in proc fdinfo\n ath9k_htc: fix potential out of bounds access with invalid rxstatus-\u003ers_keyix\n cpufreq: Fix possible race in cpufreq online error path\n spi: img-spfi: Fix pm_runtime_get_sync() error checking\n sched/fair: Fix cfs_rq_clock_pelt() for throttled cfs_rq\n drm/bridge: Fix error handling in analogix_dp_probe\n HID: elan: Fix potential double free in elan_input_configured\n HID: hid-led: fix maximum brightness for Dream Cheeky\n drbd: fix duplicate array initializer\n efi: Add missing prototype for efi_capsule_setup_info\n NFC: NULL out the dev-\u003erfkill to prevent UAF\n spi: spi-ti-qspi: Fix return value handling of wait_for_completion_timeout\n drm: mali-dp: potential dereference of null pointer\n drm/komeda: Fix an undefined behavior bug in komeda_plane_add()\n nl80211: show SSID for P2P_GO interfaces\n bpf: Fix excessive memory allocation in stack_map_alloc()\n drm/vc4: txp: Force alpha to be 0xff if it\u0027s disabled\n drm/vc4: txp: Don\u0027t set TXP_VSTART_AT_EOF\n drm/mediatek: Fix mtk_cec_mask()\n x86/delay: Fix the wrong asm constraint in delay_loop()\n ASoC: mediatek: Fix missing of_node_put in mt2701_wm8960_machine_probe\n ASoC: mediatek: Fix error handling in mt8173_max98090_dev_probe\n drm/bridge: adv7511: clean up CEC adapter when probe fails\n drm/edid: fix invalid EDID extension block filtering\n ath9k: fix ar9003_get_eepmisc\n drm: fix EDID struct for old ARM OABI format\n RDMA/hfi1: Prevent panic when SDMA is disabled\n powerpc/iommu: Add missing of_node_put in iommu_init_early_dart\n macintosh/via-pmu: Fix build failure when CONFIG_INPUT is disabled\n powerpc/powernv: fix missing of_node_put in uv_init()\n powerpc/xics: fix refcount leak in icp_opal_init()\n tracing: incorrect isolate_mote_t cast in mm_vmscan_lru_isolate\n PCI: Avoid pci_dev_lock() AB/BA deadlock with sriov_numvfs_store()\n ARM: hisi: Add missing of_node_put after of_find_compatible_node\n ARM: dts: exynos: add atmel,24c128 fallback to Samsung EEPROM\n ARM: versatile: Add missing of_node_put in dcscb_init\n fat: add ratelimit to fat*_ent_bread()\n powerpc/fadump: Fix fadump to work with a different endian capture kernel\n ARM: OMAP1: clock: Fix UART rate reporting algorithm\n fs: jfs: fix possible NULL pointer dereference in dbFree()\n PM / devfreq: rk3399_dmc: Disable edev on remove()\n ARM: dts: ox820: align interrupt controller node name with dtschema\n IB/rdmavt: add missing locks in rvt_ruc_loopback\n selftests/bpf: fix btf_dump/btf_dump due to recent clang change\n eth: tg3: silence the GCC 12 array-bounds warning\n rxrpc: Return an error to sendmsg if call failed\n hwmon: Make chip parameter for with_info API mandatory\n ASoC: max98357a: remove dependency on GPIOLIB\n media: exynos4-is: Fix compile warning\n net: phy: micrel: Allow probing without .driver_data\n nbd: Fix hung on disconnect request if socket is closed before\n ASoC: rt5645: Fix errorenous cleanup order\n nvme-pci: fix a NULL pointer dereference in nvme_alloc_admin_tags\n openrisc: start CPU timer early in boot\n media: cec-adap.c: fix is_configuring state\n media: coda: limit frame interval enumeration to supported encoder frame sizes\n rtlwifi: Use pr_warn instead of WARN_ONCE\n ipmi: Fix pr_fmt to avoid compilation issues\n ipmi:ssif: Check for NULL msg when handling events and messages\n ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default\n dma-debug: change allocation mode from GFP_NOWAIT to GFP_ATIOMIC\n spi: stm32-qspi: Fix wait_cmd timeout in APM mode\n s390/preempt: disable __preempt_count_add() optimization for PROFILE_ALL_BRANCHES\n ASoC: tscs454: Add endianness flag in snd_soc_component_driver\n HID: bigben: fix slab-out-of-bounds Write in bigben_probe\n drm/amdgpu/ucode: Remove firmware load type check in amdgpu_ucode_free_bo\n mlxsw: spectrum_dcb: Do not warn about priority changes\n ASoC: dapm: Don\u0027t fold register value changes into notifications\n net/mlx5: fs, delete the FTE when there are no rules attached to it\n ipv6: Don\u0027t send rs packets to the interface of ARPHRD_TUNNEL\n drm: msm: fix error check return value of irq_of_parse_and_map()\n arm64: compat: Do not treat syscall number as ESR_ELx for a bad syscall\n drm/amd/pm: fix the compile warning\n drm/plane: Move range check for format_count earlier\n scsi: megaraid: Fix error check return value of register_chrdev()\n mmc: jz4740: Apply DMA engine limits to maximum segment size\n md/bitmap: don\u0027t set sb values if can\u0027t pass sanity check\n media: cx25821: Fix the warning when removing the module\n media: pci: cx23885: Fix the error handling in cx23885_initdev()\n media: venus: hfi: avoid null dereference in deinit\n ath9k: fix QCA9561 PA bias level\n drm/amd/pm: fix double free in si_parse_power_table()\n tools/power turbostat: fix ICX DRAM power numbers\n spi: spi-rspi: Remove setting {src,dst}_{addr,addr_width} based on DMA direction\n ALSA: jack: Access input_dev under mutex\n drm/komeda: return early if drm_universal_plane_init() fails.\n ACPICA: Avoid cache flush inside virtual machines\n fbcon: Consistently protect deferred_takeover with console_lock()\n ipv6: fix locking issues with loops over idev-\u003eaddr_list\n ipw2x00: Fix potential NULL dereference in libipw_xmit()\n b43: Fix assigning negative value to unsigned variable\n b43legacy: Fix assigning negative value to unsigned variable\n mwifiex: add mutex lock for call in mwifiex_dfs_chan_sw_work_queue\n drm/virtio: fix NULL pointer dereference in virtio_gpu_conn_get_modes\n btrfs: repair super block num_devices automatically\n btrfs: add \"0x\" prefix for unsupported optional features\n ptrace: Reimplement PTRACE_KILL by always sending SIGKILL\n ptrace/xtensa: Replace PT_SINGLESTEP with TIF_SINGLESTEP\n ptrace/um: Replace PT_DTRACE with TIF_SINGLESTEP\n perf/x86/intel: Fix event constraints for ICL\n usb: core: hcd: Add support for deferring roothub registration\n USB: new quirk for Dell Gen 2 devices\n USB: serial: option: add Quectel BG95 modem\n ALSA: hda/realtek - Fix microphone noise on ASUS TUF B550M-PLUS\n binfmt_flat: do not stop relocating GOT entries prematurely on riscv\n\n Conflicts:\n\tDocumentation/devicetree/bindings\n\tDocumentation/devicetree/bindings/dma/allwinner,sun50i-a64-dma.yaml\n\tDocumentation/devicetree/bindings/gpio/gpio-altera.txt\n\tdrivers/char/Kconfig\n\tdrivers/mmc/core/block.c\n\tkernel/sysctl.c\n\nChange-Id: I87246d84461db23650f0689a3f65dcd2ccba6809\nSigned-off-by: Srinivasarao Pathipati \u003cquic_c_spathi@quicinc.com\u003e\n" }, { "commit": "c01b171cd94a22b0153a4efb13711c7d7b4c8710", "tree": "be80371211e8fef5cef909a6dd6b06af7c8f74e6", "parents": [ "3e7819945ed1834c2761f406ca292b0c0536704c", "6e150d605c9e21dbe939875c13e82da33fb59ed0" ], "author": { "name": "Greg Kroah-Hartman", "email": "gregkh@google.com", "time": "Sat Oct 08 08:39:36 2022 +0200" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@google.com", "time": "Sat Oct 08 08:39:36 2022 +0200" }, "message": "Merge 5.4.217 into android11-5.4-lts\n\nChanges in 5.4.217\n\tRevert \"x86/speculation: Add RSB VM Exit protections\"\n\tRevert \"x86/cpu: Add a steppings field to struct x86_cpu_id\"\n\tx86/devicetable: Move x86 specific macro out of generic code\n\tx86/cpu: Add consistent CPU match macros\n\tx86/cpu: Add a steppings field to struct x86_cpu_id\n\tx86/kvm/vmx: Make noinstr clean\n\tx86/cpufeatures: Move RETPOLINE flags to word 11\n\tx86/bugs: Report AMD retbleed vulnerability\n\tx86/bugs: Add AMD retbleed\u003d boot parameter\n\tx86/bugs: Keep a per-CPU IA32_SPEC_CTRL value\n\tx86/entry: Remove skip_r11rcx\n\tx86/entry: Add kernel IBRS implementation\n\tx86/bugs: Optimize SPEC_CTRL MSR writes\n\tx86/speculation: Add spectre_v2\u003dibrs option to support Kernel IBRS\n\tx86/bugs: Split spectre_v2_select_mitigation() and spectre_v2_user_select_mitigation()\n\tx86/bugs: Report Intel retbleed vulnerability\n\tintel_idle: Disable IBRS during long idle\n\tx86/speculation: Change FILL_RETURN_BUFFER to work with objtool\n\tx86/speculation: Fix RSB filling with CONFIG_RETPOLINE\u003dn\n\tx86/speculation: Fix firmware entry SPEC_CTRL handling\n\tx86/speculation: Fix SPEC_CTRL write on SMT state change\n\tx86/speculation: Use cached host SPEC_CTRL value for guest entry/exit\n\tx86/speculation: Remove x86_spec_ctrl_mask\n\tKVM/VMX: Use TEST %REG,%REG instead of CMP $0,%REG in vmenter.S\n\tKVM/nVMX: Use __vmx_vcpu_run in nested_vmx_check_vmentry_hw\n\tKVM: VMX: Flatten __vmx_vcpu_run()\n\tKVM: VMX: Convert launched argument to flags\n\tKVM: VMX: Prevent guest RSB poisoning attacks with eIBRS\n\tKVM: VMX: Fix IBRS handling after vmexit\n\tx86/speculation: Fill RSB on vmexit for IBRS\n\tx86/common: Stamp out the stepping madness\n\tx86/cpu/amd: Enumerate BTC_NO\n\tx86/bugs: Add Cannon lake to RETBleed affected CPU list\n\tx86/speculation: Disable RRSBA behavior\n\tx86/speculation: Use DECLARE_PER_CPU for x86_spec_ctrl_current\n\tx86/bugs: Warn when \"ibrs\" mitigation is selected on Enhanced IBRS parts\n\tx86/speculation: Add RSB VM Exit protections\n\txfs: fix misuse of the XFS_ATTR_INCOMPLETE flag\n\txfs: introduce XFS_MAX_FILEOFF\n\txfs: truncate should remove all blocks, not just to the end of the page cache\n\txfs: fix s_maxbytes computation on 32-bit kernels\n\txfs: fix IOCB_NOWAIT handling in xfs_file_dio_aio_read\n\txfs: refactor remote attr value buffer invalidation\n\txfs: fix memory corruption during remote attr value buffer invalidation\n\txfs: move incore structures out of xfs_da_format.h\n\txfs: streamline xfs_attr3_leaf_inactive\n\txfs: fix uninitialized variable in xfs_attr3_leaf_inactive\n\txfs: remove unused variable \u0027done\u0027\n\tRevert \"drm/amdgpu: use dirty framebuffer helper\"\n\tMakefile.extrawarn: Move -Wcast-function-type-strict to W\u003d1\n\tdocs: update mediator information in CoC docs\n\tLinux 5.4.217\n\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@google.com\u003e\nChange-Id: I105690ca9b48507da0590cb62dd60db2a95698e6\n" }, { "commit": "096740d6756019a9b9604234dd53a99d2f0effac", "tree": "edc794a2f230df4120ec3856f0a2f4be86e3b5eb", "parents": [ "e911caf9a158142cb198b88717f7450fdadd5d28" ], "author": { "name": "Sami Tolvanen", "email": "samitolvanen@google.com", "time": "Fri Sep 30 20:33:10 2022 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Fri Oct 07 09:16:57 2022 +0200" }, "message": "Makefile.extrawarn: Move -Wcast-function-type-strict to W\u003d1\n\ncommit 2120635108b35ecad9c59c8b44f6cbdf4f98214e upstream.\n\nWe enable -Wcast-function-type globally in the kernel to warn about\nmismatching types in function pointer casts. Compilers currently\nwarn only about ABI incompability with this flag, but Clang 16 will\nenable a stricter version of the check by default that checks for an\nexact type match. This will be very noisy in the kernel, so disable\n-Wcast-function-type-strict without W\u003d1 until the new warnings have\nbeen addressed.\n\nCc: stable@vger.kernel.org\nLink: https://reviews.llvm.org/D134831\nLink: https://github.com/ClangBuiltLinux/linux/issues/1724\nSuggested-by: Nathan Chancellor \u003cnathan@kernel.org\u003e\nSigned-off-by: Sami Tolvanen \u003csamitolvanen@google.com\u003e\nSigned-off-by: Kees Cook \u003ckeescook@chromium.org\u003e\nLink: https://lore.kernel.org/r/20220930203310.4010564-1-samitolvanen@google.com\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "ca0d25b39064d933e7d8d9b6d9164f9769d10d3c", "tree": "c10d47e6e3590ebfd0868030644cf61cfc880fd9", "parents": [ "df22692bb1fe883c1b9fbf8b0cffe5f68c50140c", "9246203e3458a96a18fa39222d241706b8c93ea8" ], "author": { "name": "Michael Bestas", "email": "mkbestas@lineageos.org", "time": "Sun Oct 02 01:44:03 2022 +0300" }, "committer": { "name": "Michael Bestas", "email": "mkbestas@lineageos.org", "time": "Sun Oct 02 01:44:03 2022 +0300" }, "message": "Merge tag \u0027LA.UM.9.14.r1-20500.01-LAHAINA.QSSI12.0\u0027 of https://git.codelinaro.org/clo/la/kernel/msm-5.4 into android12-5.4-lahaina\n\n\"LA.UM.9.14.r1-20500.01-LAHAINA.QSSI12.0\"\n\n* tag \u0027LA.UM.9.14.r1-20500.01-LAHAINA.QSSI12.0\u0027 of https://git.codelinaro.org/clo/la/kernel/msm-5.4:\n msm: adsprpc: Prevent use after free in fastrpc_invoke_send\n power: supply: qti_battery_charger: Fix NULL pointer dereference\n cnss2: Update DRV support flag in the feature list of host cap\n msm: adsprpc: Fix for hyp_assign_phys double call\n UAPI: update uapi header to fix struct re-definition errors\n net/sched: act_mpls: Add action to push MPLS LSE before Ethernet header\n msm: ipa: Modification for Pipe info based on tethering protocol\n net/sched: act_vlan: Add {POP,PUSH}_ETH actions\n virtiofs: fix virtio_fs_fiq_ops api\n iio: qcom-spmi-adc5: Add support for calibrated bat_therm channel\n dt-bindings: iio: add support for calibrated bat_therm channel\n msm: adsprpc: Handle out of bounds access\n msm: adsprpc: Validate the CID\n usb: gadget: cdev: Requeue the request in cser_resume if start_rx fails\n msm: ep_pcie: Avoid polling for ltssm state if perst is asserted\n mem_buf: Validate n_acl_entries\n drivers: thermal: Dynamic cpu\u0027s support in cpu voltage cooling driver\n msm: mhi_dev: Avoiding delay in transfer completion\n i2c: i2c-msm-geni: NULL check before accessing i2c message\n pci:msm: Add support for PCIe halt Wr and Rd feature disable\n msm: ipa: Add easymesh R2 support in header\n UPSTREAM: Revert \"net: af_key: add check for pfkey_broadcast in function pfkey_process\"\n FROMGIT: arm64: fix oops in concurrently setting insn_emulation sysctls\n ANDROID: abi_gki_aarch64_qcom: Add vmemdup_user to qcom symbol list\n ANDROID: GKI: update Sony KMI symbol list\n Revert \"clk: qcom: gcc: Lower the frequency for sdxlemur from 200 to 171MHz\"\n UPSTREAM: mm: fix misplaced unlock_page in do_wp_page()\n BACKPORT: mm: do_wp_page() simplification\n UPSTREAM: mm/ksm: Remove reuse_ksm_page()\n msm: ipa: add and define IPA_CLIENT_MHI_COAL_CONS\n BACKPORT: ALSA: pcm: Fix races among concurrent prealloc proc writes\n BACKPORT: ALSA: pcm: Fix races among concurrent prepare and hw_params/hw_free calls\n BACKPORT: ALSA: pcm: Fix races among concurrent read/write and buffer changes\n ANDROID: Fix up abi issue with struct snd_pcm_runtime\n BACKPORT: ALSA: pcm: Fix races among concurrent hw_params and hw_free calls\n BACKPORT: nfc: nfcmrvl: main: reorder destructive operations in nfcmrvl_nci_unregister_dev to avoid bugs\n icnss2: Use event_data before posting event\n msm: ADSPRPC: Restrict untrusted applications from attaching to GuestOS\n msm: mhi_dev: Avoiding null pointer dereference in uci layer\n msm: ipa: add support for WDS\n clk: qcom: gpucc: Update the frequency for GPU core clock for blair\n interconnect: qcom: Enable BCMs needed for QoS configuration for Shima\n interconnect: qcom: Add support for enabling BCMs needed for QoS\n msm: kgsl: Enable BCL only after first boot is done\n dt-bindings: thermal: Add new sdr sensor placeholders\n drivers: thermal: qmi_sensor: Add new sdr thermistors\n msm: ipa3: Add support for External Router Mode FR\n icnss2: Do not start recovery timer on gracefull shutdown\n perf: arm: Implement perf counter for 32bit arm\n soc: qcom: socinfo: Add the soc-id for KATMAI/KATMAIP\n pci: msm: Extend sleep time when reset i2c client\n i2c: i2c-msm-geni: add rtl based changes\n smcinvoke : file private data validation which is sent by userspace\n Linux 5.4.197\n bpf: Enlarge offset check value to INT_MAX in bpf_skb_{load,store}_bytes\n NFSD: Fix possible sleep during nfsd4_release_lockowner()\n NFS: Memory allocation failures are not server fatal errors\n docs: submitting-patches: Fix crossref to \u0027The canonical patch format\u0027\n tpm: ibmvtpm: Correct the return value in tpm_ibmvtpm_probe()\n tpm: Fix buffer access in tpm2_get_tpm_pt()\n HID: multitouch: Add support for Google Whiskers Touchpad\n raid5: introduce MD_BROKEN\n dm verity: set DM_TARGET_IMMUTABLE feature flag\n dm stats: add cond_resched when looping over entries\n dm crypt: make printing of the key constant-time\n dm integrity: fix error code in dm_integrity_ctr()\n zsmalloc: fix races between asynchronous zspage free and page migration\n crypto: ecrdsa - Fix incorrect use of vli_cmp\n netfilter: conntrack: re-fetch conntrack after insertion\n exec: Force single empty string when argv is empty\n drm/i915: Fix -Wstringop-overflow warning in call to intel_read_wm_latency()\n cfg80211: set custom regdomain after wiphy registration\n assoc_array: Fix BUG_ON during garbage collect\n drivers: i2c: thunderx: Allow driver to work with ACPI defined TWSI controllers\n i2c: ismt: Provide a DMA buffer for Interrupt Cause Logging\n net: ftgmac100: Disable hardware checksum on AST2600\n net: af_key: check encryption module availability consistency\n pinctrl: sunxi: fix f1c100s uart2 function\n ACPI: sysfs: Fix BERT error region memory mapping\n ACPI: sysfs: Make sparse happy about address space in use\n media: vim2m: initialize the media device earlier\n media: vim2m: Register video device after setting up internals\n secure_seq: use the 64 bits of the siphash for port offset calculation\n tcp: change source port randomizarion at connect() time\n Input: goodix - fix spurious key release events\n staging: rtl8723bs: prevent -\u003eSsid overflow in rtw_wx_set_scan()\n x86/pci/xen: Disable PCI/MSI[-X] masking for XEN_HVM guests\n lockdown: also lock down previous kgdb use\n haven: gh_msgq: Disallow multiple registrations with same label\n usb: gadget: u_serial: Don\u0027t dequeue requests in gserial_disconnect\n platform: msm: usb_bam: Fix potential use-after-free in connect_pipe\n msm: kgsl: use kvmalloc for ringbuffer submission\n Linux 5.4.196\n afs: Fix afs_getattr() to refetch file status if callback break occurred\n i2c: mt7621: fix missing clk_disable_unprepare() on error in mtk_i2c_probe()\n x86/xen: Mark cpu_bringup_and_idle() as dead_end_function\n x86/xen: fix booting 32-bit pv guest\n Reinstate some of \"swiotlb: rework \"fix info leak with DMA_FROM_DEVICE\"\"\n ARM: dts: imx7: Use audio_mclk_post_div instead audio_mclk_root_clk\n firmware_loader: use kernel credentials when reading firmware\n net: stmmac: disable Split Header (SPH) for Intel platforms\n block: return ELEVATOR_DISCARD_MERGE if possible\n Input: ili210x - fix reset timing\n net: atlantic: verify hw_head_ lies within TX buffer ring\n net: stmmac: fix missing pci_disable_device() on error in stmmac_pci_probe()\n ethernet: tulip: fix missing pci_disable_device() on error in tulip_init_one()\n selftests: add ping test with ping_group_range tuned\n mac80211: fix rx reordering with non explicit / psmp ack policy\n scsi: qla2xxx: Fix missed DMA unmap for aborted commands\n perf bench numa: Address compiler error on s390\n gpio: mvebu/pwm: Refuse requests with inverted polarity\n gpio: gpio-vf610: do not touch other bits when set the target bit\n net: bridge: Clear offload_fwd_mark when passing frame up bridge interface.\n igb: skip phy status check where unavailable\n ARM: 9197/1: spectre-bhb: fix loop8 sequence for Thumb2\n ARM: 9196/1: spectre-bhb: enable for Cortex-A15\n net: af_key: add check for pfkey_broadcast in function pfkey_process\n net/mlx5e: Properly block LRO when XDP is enabled\n NFC: nci: fix sleep in atomic context bugs caused by nci_skb_alloc\n net/qla3xxx: Fix a test in ql_reset_work()\n clk: at91: generated: consider range when calculating best rate\n ice: fix possible under reporting of ethtool Tx and Rx statistics\n net: vmxnet3: fix possible NULL pointer dereference in vmxnet3_rq_cleanup()\n net: vmxnet3: fix possible use-after-free bugs in vmxnet3_rq_alloc_rx_buf()\n net/sched: act_pedit: sanitize shift argument before usage\n net: macb: Increment rx bd head after allocating skb and buffer\n ARM: dts: aspeed-g6: fix SPI1/SPI2 quad pin group\n ARM: dts: aspeed-g6: remove FWQSPID group in pinctrl dtsi\n dma-buf: fix use of DMA_BUF_SET_NAME_{A,B} in userspace\n drm/dp/mst: fix a possible memory leak in fetch_monitor_name()\n crypto: qcom-rng - fix infinite loop on requests not multiple of WORD_SZ\n KVM: x86/mmu: Update number of zapped pages even if page list is stable\n PCI/PM: Avoid putting Elo i2 PCIe Ports in D3cold\n Fix double fget() in vhost_net_set_backend()\n perf: Fix sys_perf_event_open() race against self\n ALSA: wavefront: Proper check of get_user() error\n SUNRPC: Ensure we flush any closed sockets before xs_xprt_free()\n SUNRPC: Don\u0027t call connect() more than once on a TCP socket\n SUNRPC: Prevent immediate close+reconnect\n SUNRPC: Clean up scheduling of autoclose\n mmc: core: Default to generic_cmd6_time as timeout in __mmc_switch()\n mmc: block: Use generic_cmd6_time when modifying INAND_CMD38_ARG_EXT_CSD\n mmc: core: Specify timeouts for BKOPS and CACHE_FLUSH for eMMC\n nilfs2: fix lockdep warnings during disk space reclamation\n nilfs2: fix lockdep warnings in page operations for btree nodes\n ARM: 9191/1: arm/stacktrace, kasan: Silence KASAN warnings in unwind_frame()\n platform/chrome: cros_ec_debugfs: detach log reader wq from devm\n drbd: remove usage of list iterator variable after loop\n MIPS: lantiq: check the return value of kzalloc()\n rtc: mc146818-lib: Fix the AltCentury for AMD platforms\n nvme-multipath: fix hang when disk goes live over reconnect\n ALSA: hda/realtek: Enable headset mic on Lenovo P360\n crypto: x86/chacha20 - Avoid spurious jumps to other functions\n crypto: stm32 - fix reference leak in stm32_crc_remove\n Input: stmfts - fix reference leak in stmfts_input_open\n Input: add bounds checking to input_set_capability()\n um: Cleanup syscall_handler_t definition/cast, fix warning\n rtc: fix use-after-free on device removal\n x86/xen: Make the secondary CPU idle tasks reliable\n x86/xen: Make the boot CPU idle task reliable\n floppy: use a statically allocated error counter\n defconfig: sdxlemur: Enable IPv6 NAT\n haven: hh_rm_core: fix ID leaking\n haven: Fix memory leak\n ANDROID: fix up abi issue with struct snd_pcm_runtime\n msm: kgsl: Fix gpuaddr_in_range() to check upper bound\n Linux 5.4.195\n tty/serial: digicolor: fix possible null-ptr-deref in digicolor_uart_probe()\n ping: fix address binding wrt vrf\n arm[64]/memremap: don\u0027t abuse pfn_valid() to ensure presence of linear map\n net: phy: Fix race condition on link status change\n MIPS: fix build with gcc-12\n drm/vmwgfx: Initialize drm_mode_fb_cmd2\n cgroup/cpuset: Remove cpus_allowed/mems_allowed setup in cpuset_init_smp()\n i40e: i40e_main: fix a missing check on list iterator\n drm/nouveau/tegra: Stop using iommu_present()\n serial: 8250_mtk: Fix register address for XON/XOFF character\n serial: 8250_mtk: Fix UART_EFR register address\n slimbus: qcom: Fix IRQ check in qcom_slim_probe\n USB: serial: option: add Fibocom MA510 modem\n USB: serial: option: add Fibocom L610 modem\n USB: serial: qcserial: add support for Sierra Wireless EM7590\n USB: serial: pl2303: add device id for HP LM930 Display\n usb: typec: tcpci: Don\u0027t skip cleanup in .remove() on error\n usb: cdc-wdm: fix reading stuck on device close\n tty: n_gsm: fix mux activation issues in gsm_config()\n tcp: resalt the secret every 10 seconds\n net: emaclite: Don\u0027t advertise 1000BASE-T and do auto negotiation\n s390: disable -Warray-bounds\n ASoC: ops: Validate input values in snd_soc_put_volsw_range()\n ASoC: max98090: Generate notifications on changes for custom control\n ASoC: max98090: Reject invalid values in custom control put()\n hwmon: (f71882fg) Fix negative temperature\n gfs2: Fix filesystem block deallocation for short writes\n net: sfc: ef10: fix memory leak in efx_ef10_mtd_probe()\n net/smc: non blocking recvmsg() return -EAGAIN when no data and signal_pending\n net/sched: act_pedit: really ensure the skb is writable\n s390/lcs: fix variable dereferenced before check\n s390/ctcm: fix potential memory leak\n s390/ctcm: fix variable dereferenced before check\n hwmon: (ltq-cputemp) restrict it to SOC_XWAY\n dim: initialize all struct fields\n mac80211_hwsim: call ieee80211_tx_prepare_skb under RCU protection\n netlink: do not reset transport header in netlink_recvmsg()\n drm/nouveau: Fix a potential theorical leak in nouveau_get_backlight_name()\n ipv4: drop dst in multicast routing path\n net: Fix features skip in for_each_netdev_feature()\n mac80211: Reset MBSSID parameters upon connection\n hwmon: (tmp401) Add OF device ID table\n batman-adv: Don\u0027t skb_split skbuffs with frag_list\n BACKPORT: scsi: ufs: Resume ufs host before accessing ufs device\n BACKPORT: can: ems_usb: ems_usb_start_xmit(): fix double dev_kfree_skb() in error path\n ANDROID: ABI: Added symbols for allwinner\n BACKPORT: can: usb_8dev: usb_8dev_start_xmit(): fix double dev_kfree_skb() in error path\n i2c:i2c-msm-geni: Updating last mark busy failure case\n icnss: Add ASSERT if fw ready got timed out\n Linux 5.4.194\n mm: userfaultfd: fix missing cache flush in mcopy_atomic_pte() and __mcopy_atomic()\n mm: hugetlb: fix missing cache flush in copy_huge_page_from_user()\n mm: fix missing cache flush for all tail pages of compound page\n Bluetooth: Fix the creation of hdev-\u003ename\n KVM: x86/svm: Account for family 17h event renumberings in amd_pmc_perf_hw_id\n x86: kprobes: Prohibit probing on instruction which has emulate prefix\n x86: xen: insn: Decode Xen and KVM emulate-prefix signature\n x86: xen: kvm: Gather the definition of emulate prefixes\n x86/asm: Allow to pass macros to __ASM_FORM()\n KVM: x86/pmu: Refactoring find_arch_event() to pmc_perf_hw_id()\n arm: remove CONFIG_ARCH_HAS_HOLES_MEMORYMODEL\n can: grcan: only use the NAPI poll budget for RX\n can: grcan: grcan_probe(): fix broken system id check for errata workaround needs\n nfp: bpf: silence bitwise vs. logical OR warning\n drm/i915: Cast remain to unsigned long in eb_relocate_vma\n drm/amd/display/dc/gpio/gpio_service: Pass around correct dce_{version, environment} types\n block: drbd: drbd_nl: Make conversion to \u0027enum drbd_ret_code\u0027 explicit\n MIPS: Use address-of operator on section symbols\n BACKPORT: esp: Fix possible buffer overflow in ESP transformation\n msm: ep_pcie: Avoid releasing resources if pcie-perst-enum is set\n ANDROID: ABI: Update allowed list for QCOM\n msm: ipa: Add if_index in ipa_wlan_msg struct\n ANDROID: GKI: update the abi .xml file\n Revert \"tcp: ensure to use the most recently sent skb when filling the rate sample\"\n Linux 5.4.193\n mmc: rtsx: add 74 Clocks in power on flow\n PCI: aardvark: Fix reading MSI interrupt number\n PCI: aardvark: Clear all MSIs at setup\n dm: interlock pending dm_io and dm_wait_for_bios_completion\n dm: fix mempool NULL pointer race when completing IO\n tcp: make sure treq-\u003eaf_specific is initialized\n ALSA: pcm: Fix potential AB/BA lock with buffer_mutex and mmap_lock\n ALSA: pcm: Fix races among concurrent prealloc proc writes\n ALSA: pcm: Fix races among concurrent prepare and hw_params/hw_free calls\n ALSA: pcm: Fix races among concurrent read/write and buffer changes\n ALSA: pcm: Fix races among concurrent hw_params and hw_free calls\n mm: fix unexpected zeroed page mapping with zram swap\n block-map: add __GFP_ZERO flag for alloc_page in function bio_copy_kern\n net: ipv6: ensure we call ipv6_mc_down() at most once\n KVM: LAPIC: Enable timer posted-interrupt only when mwait/hlt is advertised\n x86/kvm: Preserve BSP MSR_KVM_POLL_CONTROL across suspend/resume\n kvm: x86/cpuid: Only provide CPUID leaf 0xA if host has architectural PMU\n NFSv4: Don\u0027t invalidate inode attributes on delegation return\n drm/amdkfd: Use drm_priv to pass VM from KFD to amdgpu\n net: igmp: respect RCU rules in ip_mc_source() and ip_mc_msfilter()\n btrfs: always log symlinks in full mode\n smsc911x: allow using IRQ0\n bnxt_en: Fix possible bnxt_open() failure caused by wrong RFS flag\n selftests: mirror_gre_bridge_1q: Avoid changing PVID while interface is operational\n net: emaclite: Add error handling for of_address_to_resource()\n net: stmmac: dwmac-sun8i: add missing of_node_put() in sun8i_dwmac_register_mdio_mux()\n net: ethernet: mediatek: add missing of_node_put() in mtk_sgmii_init()\n RDMA/siw: Fix a condition race issue in MPA request processing\n ASoC: dmaengine: Restore NULL prepare_slave_config() callback\n hwmon: (adt7470) Fix warning on module removal\n NFC: netlink: fix sleep in atomic bug when firmware download timeout\n nfc: nfcmrvl: main: reorder destructive operations in nfcmrvl_nci_unregister_dev to avoid bugs\n nfc: replace improper check device_is_registered() in netlink related functions\n can: grcan: use ofdev-\u003edev when allocating DMA memory\n can: grcan: grcan_close(): fix deadlock\n s390/dasd: Fix read inconsistency for ESE DASD devices\n s390/dasd: Fix read for ESE with blksize \u003c 4k\n s390/dasd: prevent double format of tracks for ESE devices\n s390/dasd: fix data corruption for ESE devices\n ASoC: meson: Fix event generation for G12A tohdmi mux\n ASoC: wm8958: Fix change notifications for DSP controls\n ASoC: da7219: Fix change notifications for tone generator frequency\n genirq: Synchronize interrupt thread startup\n ACPICA: Always create namespace nodes using acpi_ns_create_node()\n firewire: core: extend card-\u003elock in fw_core_handle_bus_reset\n firewire: remove check of list iterator against head past the loop body\n firewire: fix potential uaf in outbound_phy_packet_callback()\n Revert \"SUNRPC: attempt AF_LOCAL connect on setup\"\n gpiolib: of: fix bounds check for \u0027gpio-reserved-ranges\u0027\n ALSA: fireworks: fix wrong return count shorter than expected by 4 bytes\n parisc: Merge model and model name into one line in /proc/cpuinfo\n MIPS: Fix CP0 counter erratum detection for R4k CPUs\n tracing: Check return value of __create_val_fields() before using its result\n mmc: sdhci-msm: configure sdcc clocks core memory\n ANDROID: ABI: Update allowed list for QCOM\n ANDROID: dm-bow: Protect Ranges fetched and erased from the RB tree\n BACKPORT: staging: ion: Prevent incorrect reference counting behavour\n FROMGIT: net: fix wrong network header length\n Linux 5.4.192\n mm, hugetlb: allow for \"high\" userspace addresses\n hugetlbfs: get unmapped area below TASK_UNMAPPED_BASE for hugetlbfs\n tty: n_gsm: fix incorrect UA handling\n tty: n_gsm: fix wrong command frame length field encoding\n tty: n_gsm: fix wrong command retry handling\n tty: n_gsm: fix missing explicit ldisc flush\n tty: n_gsm: fix insufficient txframe size\n netfilter: nft_socket: only do sk lookups when indev is available\n tty: n_gsm: fix malformed counter for out of frame data\n tty: n_gsm: fix wrong signal octet encoding in convergence layer type 2\n x86/cpu: Load microcode during restore_processor_state()\n net: ethernet: stmmac: fix write to sgmii_adapter_base\n drivers: net: hippi: Fix deadlock in rr_close()\n cifs: destage any unwritten data to the server before calling copychunk_write\n x86: __memcpy_flushcache: fix wrong alignment if size \u003e 2^32\n ip6_gre: Avoid updating tunnel-\u003etun_hlen in __gre6_xmit()\n ASoC: wm8731: Disable the regulator when probing fails\n tcp: fix F-RTO may not work correctly when receiving DSACK\n ixgbe: ensure IPsec VF\u003c-\u003ePF compatibility\n bnx2x: fix napi API usage sequence\n tls: Skip tls_append_frag on zero copy size\n drm/amd/display: Fix memory leak in dcn21_clock_source_create\n net: dsa: lantiq_gswip: Don\u0027t set GSWIP_MII_CFG_RMII_CLK\n net: bcmgenet: hide status block before TX timestamping\n clk: sunxi: sun9i-mmc: check return value after calling platform_get_resource()\n bus: sunxi-rsb: Fix the return value of sunxi_rsb_device_create()\n tcp: fix potential xmit stalls caused by TCP_NOTSENT_LOWAT\n ip_gre: Make o_seqno start from 0 in native mode\n net/smc: sync err code when tcp connection was refused\n net: hns3: add validity check for message data length\n cpufreq: fix memory leak in sun50i_cpufreq_nvmem_probe\n pinctrl: pistachio: fix use of irq_of_parse_and_map()\n arm64: dts: imx8mn-ddr4-evk: Describe the 32.768 kHz PMIC clock\n ARM: dts: imx6ull-colibri: fix vqmmc regulator\n sctp: check asoc strreset_chunk in sctp_generate_reconf_event\n tcp: ensure to use the most recently sent skb when filling the rate sample\n tcp: md5: incorrect tcp_header_len for incoming connections\n bpf, lwt: Fix crash when using bpf_skb_set_tunnel_key() from bpf_xmit lwt hook\n mtd: rawnand: Fix return value check of wait_for_completion_timeout\n ipvs: correctly print the memory size of ip_vs_conn_tab\n ARM: dts: logicpd-som-lv: Fix wrong pinmuxing on OMAP35\n ARM: dts: am3517-evm: Fix misc pinmuxing\n ARM: dts: Fix mmc order for omap3-gta04\n phy: ti: Add missing pm_runtime_disable() in serdes_am654_probe\n phy: mapphone-mdm6600: Fix PM error handling in phy_mdm6600_probe\n ARM: dts: at91: Map MCLK for wm8731 on at91sam9g20ek\n phy: ti: omap-usb2: Fix error handling in omap_usb2_enable_clocks\n ARM: OMAP2+: Fix refcount leak in omap_gic_of_init\n phy: samsung: exynos5250-sata: fix missing device put in probe error paths\n phy: samsung: Fix missing of_node_put() in exynos_sata_phy_probe\n ARM: dts: imx6qdl-apalis: Fix sgtl5000 detection issue\n USB: Fix xhci event ring dequeue pointer ERDP update issue\n mtd: rawnand: fix ecc parameters for mt7622\n arm64: dts: meson: remove CPU opps below 1GHz for SM1 boards\n arm64: dts: meson: remove CPU opps below 1GHz for G12B boards\n video: fbdev: udlfb: properly check endpoint type\n hex2bin: fix access beyond string end\n hex2bin: make the function hex_to_bin constant-time\n arch_topology: Do not set llc_sibling if llc_id is invalid\n serial: 8250: Correct the clock for EndRun PTP/1588 PCIe device\n serial: 8250: Also set sticky MCR bits in console restoration\n serial: imx: fix overrun interrupts in DMA mode\n usb: dwc3: gadget: Return proper request status\n usb: dwc3: core: Fix tx/rx threshold settings\n usb: gadget: configfs: clear deactivation flag in configfs_composite_unbind()\n usb: gadget: uvc: Fix crash when encoding data for usb request\n usb: typec: ucsi: Fix role swapping\n usb: misc: fix improper handling of refcount in uss720_probe()\n iio: magnetometer: ak8975: Fix the error handling in ak8975_power_on()\n iio: dac: ad5446: Fix read_raw not returning set value\n iio: dac: ad5592r: Fix the missing return value.\n xhci: increase usb U3 -\u003e U0 link resume timeout from 100ms to 500ms\n xhci: stop polling roothubs after shutdown\n USB: serial: option: add Telit 0x1057, 0x1058, 0x1075 compositions\n USB: serial: option: add support for Cinterion MV32-WA/MV32-WB\n USB: serial: cp210x: add PIDs for Kamstrup USB Meter Reader\n USB: serial: whiteheat: fix heap overflow in WHITEHEAT_GET_DTR_RTS\n USB: quirks: add STRING quirk for VCOM device\n USB: quirks: add a Realtek card reader\n usb: mtu3: fix USB 3.0 dual-role-switch from device to host\n lightnvm: disable the subsystem\n hamradio: remove needs_free_netdev to avoid UAF\n hamradio: defer 6pack kfree after unregister_netdev\n floppy: disable FDRAWCMD by default\n i2c-msm-genic: To remove unsupported %: in format string\n cnss2: Add change to update 128KB prealloc reserve pool size to 5\n smcinvoke: Add explicit cache flush during CB req from TZ\n msm: kgsl: Remove \u0027fd\u0027 dependency to get dma_buf handle\n scsi: ufs: fix deadlock between resume and eh_work\n i2c: i2c-msm-geni: Reset i2c GPIOs using FORCE_DEFAULT\n i2c: i2c-msm-geni: Handle NACK interrupt as an error condition\n ANDROID: fix KCFLAGS override by __ANDROID_COMMON_KERNEL__\n ANDROID: Add flag to indicate compiling against ACK\n BACKPORT: net/packet: fix slab-out-of-bounds access in packet_recvmsg()\n BACKPORT: block: Add a helper to validate the block size\n BACKPORT: virtio-blk: Use blk_validate_block_size() to validate block size\n Revert \"oom_kill.c: futex: delay the OOM reaper to allow time for proper futex cleanup\"\n msm: ADSPRPC: Update unsigned pd support on cDSP from kernel\n Linux 5.4.191\n Revert \"net: micrel: fix KS8851_MLL Kconfig\"\n block/compat_ioctl: fix range check in BLKGETSIZE\n staging: ion: Prevent incorrect reference counting behavour\n spi: atmel-quadspi: Fix the buswidth adjustment between spi-mem and controller\n jbd2: fix a potential race while discarding reserved buffers after an abort\n ext4: force overhead calculation if the s_overhead_cluster makes no sense\n ext4: fix overhead calculation to account for the reserved gdt blocks\n ext4, doc: fix incorrect h_reserved size\n ext4: limit length to bitmap_maxbytes - blocksize in punch_hole\n ext4: fix use-after-free in ext4_search_dir\n ext4: fix symlink file size not match to file content\n arm_pmu: Validate single/group leader events\n ARC: entry: fix syscall_trace_exit argument\n e1000e: Fix possible overflow in LTR decoding\n ASoC: soc-dapm: fix two incorrect uses of list iterator\n openvswitch: fix OOB access in reserve_sfa_size()\n xtensa: fix a7 clobbering in coprocessor context load/store\n xtensa: patch_text: Fixup last cpu should be master\n powerpc/perf: Fix power9 event alternatives\n drm/vc4: Use pm_runtime_resume_and_get to fix pm_runtime_get_sync() usage\n KVM: PPC: Fix TCE handling for VFIO\n drm/panel/raspberrypi-touchscreen: Initialise the bridge in prepare\n drm/panel/raspberrypi-touchscreen: Avoid NULL deref if not initialised\n dma: at_xdmac: fix a missing check on list iterator\n ata: pata_marvell: Check the \u0027bmdma_addr\u0027 beforing reading\n oom_kill.c: futex: delay the OOM reaper to allow time for proper futex cleanup\n EDAC/synopsys: Read the error count from the correct register\n stat: fix inconsistency between struct stat and struct compat_stat\n scsi: qedi: Fix failed disconnect handling\n net: macb: Restart tx only if queue pointer is lagging\n drm/msm/mdp5: check the return of kzalloc()\n dpaa_eth: Fix missing of_node_put in dpaa_get_ts_info()\n brcmfmac: sdio: Fix undefined behavior due to shift overflowing the constant\n mt76: Fix undefined behavior due to shift overflowing the constant\n cifs: Check the IOCB_DIRECT flag, not O_DIRECT\n vxlan: fix error return code in vxlan_fdb_append\n ALSA: usb-audio: Fix undefined behavior due to shift overflowing the constant\n platform/x86: samsung-laptop: Fix an unsigned comparison which can never be negative\n reset: tegra-bpmp: Restore Handle errors in BPMP response\n ARM: vexpress/spc: Avoid negative array index when !SMP\n selftests: mlxsw: vxlan_flooding: Prevent flooding of unwanted packets\n netlink: reset network and mac headers in netlink_dump()\n l3mdev: l3mdev_master_upper_ifindex_by_index_rcu should be using netdev_master_upper_dev_get_rcu\n net/sched: cls_u32: fix possible leak in u32_init_knode()\n net/packet: fix packet_sock xmit return value checking\n net/smc: Fix sock leak when release after smc_shutdown()\n rxrpc: Restore removed timer deletion\n igc: Fix BUG: scheduling while atomic\n igc: Fix infinite loop in release_swfw_sync\n dmaengine: mediatek:Fix PM usage reference leak of mtk_uart_apdma_alloc_chan_resources\n dmaengine: imx-sdma: Fix error checking in sdma_event_remap\n ASoC: msm8916-wcd-digital: Check failure for devm_snd_soc_register_component\n ASoC: atmel: Remove system clock tree configuration for at91sam9g20ek\n ALSA: usb-audio: Clear MIDI port active flag after draining\n tcp: Fix potential use-after-free due to double kfree()\n net/sched: cls_u32: fix netns refcount changes in u32_change()\n tcp: fix race condition when creating child sockets from syncookies\n gfs2: assign rgrp glock before compute_bitstructs\n can: usb_8dev: usb_8dev_start_xmit(): fix double dev_kfree_skb() in error path\n tracing: Dump stacktrace trigger to the corresponding instance\n mm: page_alloc: fix building error on -Werror\u003darray-compare\n etherdevice: Adjust ether_addr* prototypes to silence -Wstringop-overead\n BACKPORT: fuse: fix pipe buffer lifetime for direct_io\n clk: qcom: gdsc-regulator: Add debug logs for gdsc set mode\n ANDROID: ABI: Update allowed list for galaxy\n BACKPORT: ext4: don\u0027t BUG if someone dirty pages without asking ext4 first\n Linux 5.4.190\n ax25: Fix UAF bugs in ax25 timers\n ax25: Fix NULL pointer dereferences in ax25 timers\n ax25: fix NPD bug in ax25_disconnect\n ax25: fix UAF bug in ax25_send_control()\n ax25: Fix refcount leaks caused by ax25_cb_del()\n ax25: fix UAF bugs of net_device caused by rebinding operation\n ax25: fix reference count leaks of ax25_dev\n ax25: add refcount in ax25_dev to avoid UAF bugs\n dma-direct: avoid redundant memory sync for swiotlb\n i2c: pasemi: Wait for write xfers to finish\n smp: Fix offline cpu check in flush_smp_call_function_queue()\n dm integrity: fix memory corruption when tag_size is less than digest size\n ARM: davinci: da850-evm: Avoid NULL pointer dereference\n tick/nohz: Use WARN_ON_ONCE() to prevent console saturation\n genirq/affinity: Consider that CPUs on nodes can be unbalanced\n drm/amd/display: don\u0027t ignore alpha property on pre-multiplied mode\n ipv6: fix panic when forwarding a pkt with no in6 dev\n ALSA: pcm: Test for \"silence\" field in struct \"pcm_format_data\"\n ALSA: hda/realtek: Add quirk for Clevo PD50PNT\n btrfs: mark resumed async balance as writing\n btrfs: remove unused variable in btrfs_{start,write}_dirty_block_groups()\n ath9k: Fix usage of driver-private space in tx_info\n ath9k: Properly clear TX status area before reporting to mac80211\n gcc-plugins: latent_entropy: use /dev/urandom\n mm: kmemleak: take a full lowmem check in kmemleak_*_phys()\n mm, page_alloc: fix build_zonerefs_node()\n perf/imx_ddr: Fix undefined behavior due to shift overflowing the constant\n drivers: net: slip: fix NPD bug in sl_tx_timeout()\n scsi: megaraid_sas: Target with invalid LUN ID is deleted during scan\n scsi: mvsas: Add PCI ID of RocketRaid 2640\n powerpc: Fix virt_addr_valid() for 64-bit Book3E \u0026 32-bit\n drm/amd/display: Fix allocate_mst_payload assert on resume\n net: usb: aqc111: Fix out-of-bounds accesses in RX fixup\n tlb: hugetlb: Add more sizes to tlb_remove_huge_tlb_entry\n arm64: alternatives: mark patch_alternative() as `noinstr`\n regulator: wm8994: Add an off-on delay for WM8994 variant\n gpu: ipu-v3: Fix dev_dbg frequency output\n ata: libata-core: Disable READ LOG DMA EXT for Samsung 840 EVOs\n net: micrel: fix KS8851_MLL Kconfig\n scsi: ibmvscsis: Increase INITIAL_SRP_LIMIT to 1024\n scsi: target: tcmu: Fix possible page UAF\n Drivers: hv: vmbus: Prevent load re-ordering when reading ring buffer\n drm/amdkfd: Check for potential null return of kmalloc_array()\n drm/amdkfd: Fix Incorrect VMIDs passed to HWS\n drm/amd/display: Update VTEM Infopacket definition\n drm/amd/display: fix audio format not updated after edid updated\n drm/amd: Add USBC connector ID\n cifs: potential buffer overflow in handling symlinks\n nfc: nci: add flush_workqueue to prevent uaf\n testing/selftests/mqueue: Fix mq_perf_tests to free the allocated cpu set\n sctp: Initialize daddr on peeled off socket\n net/smc: Fix NULL pointer dereference in smc_pnet_find_ib()\n drm/msm/dsi: Use connector directly in msm_dsi_manager_connector_init()\n cfg80211: hold bss_lock while updating nontrans_list\n net/sched: taprio: Check if socket flags are valid\n net: ethernet: stmmac: fix altr_tse_pcs function when using a fixed-link\n net/sched: fix initialization order when updating chain 0 head\n mlxsw: i2c: Fix initialization error flow\n gpiolib: acpi: use correct format characters\n veth: Ensure eth header is in skb\u0027s linear part\n net/sched: flower: fix parsing of ethertype following VLAN header\n memory: atmel-ebi: Fix missing of_node_put in atmel_ebi_probe\n ANDROID: GKI: fix crc issue with commit 3f91687e6e5d (\"block: don\u0027t merge across cgroup boundaries if blkcg is enabled\")\n Revert \"PCI: Reduce warnings on possible RW1C corruption\"\n Linux 5.4.189\n ACPI: processor idle: Check for architectural support for LPI\n cpuidle: PSCI: Move the `has_lpi` check to the beginning of the function\n selftests: cgroup: Test open-time cgroup namespace usage for migration checks\n selftests: cgroup: Test open-time credential usage for migration checks\n selftests: cgroup: Make cg_create() use 0755 for permission instead of 0644\n cgroup: Use open-time cgroup namespace for process migration perm checks\n cgroup: Allocate cgroup_file_ctx for kernfs_open_file-\u003epriv\n cgroup: Use open-time credentials for process migraton perm checks\n io_uring: fix fs-\u003eusers overflow\n drm/amdkfd: Fix -Wstrict-prototypes from amdgpu_amdkfd_gfx_10_0_get_functions()\n drm/amdkfd: add missing void argument to function kgd2kfd_init\n mm/sparsemem: fix \u0027mem_section\u0027 will never be NULL gcc 12 warning\n arm64: module: remove (NOLOAD) from linker script\n mm: don\u0027t skip swap entry even if zap_details specified\n mmc: mmci: stm32: correctly check all elements of sg list\n mmc: mmci_sdmmc: Replace sg_dma_xxx macros\n dmaengine: Revert \"dmaengine: shdma: Fix runtime PM imbalance on error\"\n tools build: Use $(shell ) instead of `` to get embedded libperl\u0027s ccopts\n tools build: Filter out options and warnings not supported by clang\n irqchip/gic-v3: Fix GICR_CTLR.RWP polling\n perf: qcom_l2_pmu: fix an incorrect NULL check on list iterator\n ata: sata_dwc_460ex: Fix crash due to OOB write\n arm64: patch_text: Fixup last cpu should be master\n btrfs: fix qgroup reserve overflow the qgroup limit\n x86/speculation: Restore speculation related MSRs during S3 resume\n x86/pm: Save the MSR validity status at context setup\n mm/mempolicy: fix mpol_new leak in shared_policy_replace\n mmmremap.c: avoid pointless invalidate_range_start/end on mremap(old_size\u003d0)\n lz4: fix LZ4_decompress_safe_partial read out of bound\n mmc: renesas_sdhi: don\u0027t overwrite TAP settings when HS400 tuning is complete\n Revert \"mmc: sdhci-xenon: fix annoying 1.8V regulator warning\"\n perf session: Remap buf if there is no space for event\n perf tools: Fix perf\u0027s libperf_print callback\n SUNRPC: Handle low memory situations in call_status()\n SUNRPC: Handle ENOMEM in call_transmit_status()\n drbd: Fix five use after free bugs in get_initial_state\n bpf: Support dual-stack sockets in bpf_tcp_check_syncookie\n spi: bcm-qspi: fix MSPI only access with bcm_qspi_exec_mem_op()\n qede: confirm skb is allocated before using\n rxrpc: fix a race in rxrpc_exit_net()\n net: openvswitch: don\u0027t send internal clone attribute to the userspace.\n ipv6: Fix stats accounting in ip6_pkt_drop\n dpaa2-ptp: Fix refcount leak in dpaa2_ptp_probe\n IB/rdmavt: add lock to call to rvt_error_qp to prevent a race condition\n bnxt_en: reserve space inside receive page for skb_shared_info\n drm/imx: Fix memory leak in imx_pd_connector_get_modes\n net: stmmac: Fix unset max_speed difference between DT and non-DT platforms\n net: ipv4: fix route with nexthop object delete warning\n net/tls: fix slab-out-of-bounds bug in decrypt_internal\n scsi: zorro7xx: Fix a resource leak in zorro7xx_remove_one()\n Drivers: hv: vmbus: Fix potential crash on module unload\n drm/amdgpu: fix off by one in amdgpu_gfx_kiq_acquire()\n KVM: arm64: Check arm64_get_bp_hardening_data() didn\u0027t return NULL\n mm: fix race between MADV_FREE reclaim and blkdev direct IO read\n parisc: Fix patch code locking and flushing\n parisc: Fix CPU affinity for Lasi, WAX and Dino chips\n SUNRPC: Fix socket waits for write buffer space\n jfs: prevent NULL deref in diFree\n virtio_console: eliminate anonymous module_init \u0026 module_exit\n serial: samsung_tty: do not unlock port-\u003elock for uart_write_wakeup()\n NFS: swap-out must always use STABLE writes.\n NFS: swap IO handling is slightly different for O_DIRECT IO\n SUNRPC/call_alloc: async tasks mustn\u0027t block waiting for memory\n clk: Enforce that disjoints limits are invalid\n xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu\u003e\u003d32\n NFSv4: Protect the state recovery thread against direct reclaim\n w1: w1_therm: fixes w1_seq for ds28ea00 sensors\n clk: si5341: fix reported clk_rate when output divider is 2\n minix: fix bug when opening a file with O_DIRECT\n init/main.c: return 1 from handled __setup() functions\n netlabel: fix out-of-bounds memory accesses\n Bluetooth: Fix use after free in hci_send_acl\n xtensa: fix DTC warning unit_address_format\n usb: dwc3: omap: fix \"unbalanced disables for smps10_out1\" on omap5evm\n scsi: libfc: Fix use after free in fc_exch_abts_resp()\n MIPS: fix fortify panic when copying asm exception handlers\n bnxt_en: Eliminate unintended link toggle during FW reset\n tuntap: add sanity checks about msg_controllen in sendmsg\n macvtap: advertise link netns via netlink\n mips: ralink: fix a refcount leak in ill_acc_of_setup()\n net/smc: correct settings of RMB window update limit\n scsi: aha152x: Fix aha152x_setup() __setup handler return value\n scsi: pm8001: Fix pm8001_mpi_task_abort_resp()\n drm/amdkfd: make CRAT table missing message informational only\n dm ioctl: prevent potential spectre v1 gadget\n ipv4: Invalidate neighbour for broadcast address upon address addition\n power: supply: axp288-charger: Set Vhold to 4.4V\n PCI: pciehp: Add Qualcomm quirk for Command Completed erratum\n usb: ehci: add pci device support for Aspeed platforms\n iommu/arm-smmu-v3: fix event handling soft lockup\n PCI: aardvark: Fix support for MSI interrupts\n drm/amdgpu: Fix recursive locking warning\n powerpc: Set crashkernel offset to mid of RMA region\n ipv6: make mc_forwarding atomic\n power: supply: axp20x_battery: properly report current when discharging\n scsi: bfa: Replace snprintf() with sysfs_emit()\n scsi: mvsas: Replace snprintf() with sysfs_emit()\n bpf: Make dst_port field in struct bpf_sock 16-bit wide\n powerpc: dts: t104xrdb: fix phy type for FMAN 4/5\n ptp: replace snprintf with sysfs_emit\n drm/amd/amdgpu/amdgpu_cs: fix refcount leak of a dma_fence obj\n ath5k: fix OOB in ath5k_eeprom_read_pcal_info_5111\n drm: Add orientation quirk for GPD Win Max\n KVM: x86/svm: Clear reserved bits written to PerfEvtSeln MSRs\n ARM: 9187/1: JIVE: fix return value of __setup handler\n riscv module: remove (NOLOAD)\n rtc: wm8350: Handle error for wm8350_register_irq\n ubifs: Rectify space amount budget for mkdir/tmpfile operations\n KVM: x86: Forbid VMM to set SYNIC/STIMER MSRs when SynIC wasn\u0027t activated\n KVM: x86/mmu: do compare-and-exchange of gPTE via the user address\n openvswitch: Fixed nd target mask field in the flow dump.\n um: Fix uml_mconsole stop/go\n ARM: dts: spear13xx: Update SPI dma properties\n ARM: dts: spear1340: Update serial node properties\n ASoC: topology: Allow TLV control to be either read or write\n ubi: fastmap: Return error code if memory allocation fails in add_aeb()\n dt-bindings: spi: mxic: The interrupt property is not mandatory\n dt-bindings: mtd: nand-controller: Fix a comment in the examples\n dt-bindings: mtd: nand-controller: Fix the reg property description\n bpf: Fix comment for helper bpf_current_task_under_cgroup()\n mm/usercopy: return 1 from hardened_usercopy __setup() handler\n mm/memcontrol: return 1 from cgroup.memory __setup() handler\n mm/mmap: return 1 from stack_guard_gap __setup() handler\n ASoC: soc-compress: Change the check for codec_dai\n powerpc/kasan: Fix early region not updated correctly\n ACPI: CPPC: Avoid out of bounds access when parsing _CPC data\n ARM: iop32x: offset IRQ numbers by 1\n ubi: Fix race condition between ctrl_cdev_ioctl and ubi_cdev_ioctl\n ASoC: mediatek: mt6358: add missing EXPORT_SYMBOLs\n pinctrl: nuvoton: npcm7xx: Use %zu printk format for ARRAY_SIZE()\n pinctrl: nuvoton: npcm7xx: Rename DS() macro to DSTR()\n pinctrl: pinconf-generic: Print arguments for bias-pull-*\n net: hns3: fix software vlan talbe of vlan 0 inconsistent with hardware\n gfs2: Make sure FITRIM minlen is rounded up to fs block size\n rtc: check if __rtc_read_time was successful\n XArray: Update the LRU list in xas_split()\n can: mcba_usb: properly check endpoint type\n can: mcba_usb: mcba_usb_start_xmit(): fix double dev_kfree_skb in error path\n XArray: Fix xas_create_range() when multi-order entry present\n ubifs: rename_whiteout: correct old_dir size computing\n ubifs: Fix read out-of-bounds in ubifs_wbuf_write_nolock()\n ubifs: setflags: Make dirtied_ino_d 8 bytes aligned\n ubifs: Add missing iput if do_tmpfile() failed in rename whiteout\n ubifs: Fix deadlock in concurrent rename whiteout and inode writeback\n ubifs: rename_whiteout: Fix double free for whiteout_ui-\u003edata\n ASoC: SOF: Intel: Fix NULL ptr dereference when ENOMEM\n KVM: x86: fix sending PV IPI\n KVM: Prevent module exit until all VMs are freed\n scsi: qla2xxx: Use correct feature type field during RFF_ID processing\n scsi: qla2xxx: Reduce false trigger to login\n scsi: qla2xxx: Fix N2N inconsistent PLOGI\n scsi: qla2xxx: Fix missed DMA unmap for NVMe ls requests\n scsi: qla2xxx: Fix hang due to session stuck\n scsi: qla2xxx: Fix incorrect reporting of task management failure\n scsi: qla2xxx: Fix disk failure to rediscover\n scsi: qla2xxx: Suppress a kernel complaint in qla_create_qpair()\n scsi: qla2xxx: Check for firmware dump already collected\n scsi: qla2xxx: Add devids and conditionals for 28xx\n scsi: qla2xxx: Fix device reconnect in loop topology\n scsi: qla2xxx: Fix warning for missing error code\n scsi: qla2xxx: Fix wrong FDMI data for 64G adapter\n scsi: qla2xxx: Fix stuck session in gpdb\n powerpc: Fix build errors with newer binutils\n powerpc/lib/sstep: Fix build errors with newer binutils\n powerpc/lib/sstep: Fix \u0027sthcx\u0027 instruction\n ALSA: hda/realtek: Add alc256-samsung-headphone fixup\n mmc: host: Return an error when -\u003eenable_sdio_irq() ops is missing\n media: hdpvr: initialize dev-\u003eworker at hdpvr_register_videodev\n media: Revert \"media: em28xx: add missing em28xx_close_extension\"\n video: fbdev: sm712fb: Fix crash in smtcfb_write()\n ARM: mmp: Fix failure to remove sram device\n ARM: tegra: tamonten: Fix I2C3 pad setting\n media: cx88-mpeg: clear interrupt status register before streaming video\n ASoC: soc-core: skip zero num_dai component in searching dai name\n video: fbdev: udlfb: replace snprintf in show functions with sysfs_emit\n video: fbdev: omapfb: panel-tpo-td043mtea1: Use sysfs_emit() instead of snprintf()\n video: fbdev: omapfb: panel-dsi-cm: Use sysfs_emit() instead of snprintf()\n ASoC: madera: Add dependencies on MFD\n ARM: dts: bcm2837: Add the missing L1/L2 cache information\n ARM: dts: qcom: fix gic_irq_domain_translate warnings for msm8960\n video: fbdev: omapfb: acx565akm: replace snprintf with sysfs_emit\n video: fbdev: cirrusfb: check pixclock to avoid divide by zero\n video: fbdev: w100fb: Reset global state\n video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow\n ntfs: add sanity check on allocation size\n ext4: don\u0027t BUG if someone dirty pages without asking ext4 first\n spi: tegra20: Use of_device_get_match_data()\n PM: core: keep irq flags in device_pm_check_callbacks()\n ACPI/APEI: Limit printable size of BERT table data\n Revert \"Revert \"block, bfq: honor already-setup queue merges\"\"\n lib/raid6/test/Makefile: Use $(pound) instead of \\# for Make 4.3\n ACPICA: Avoid walking the ACPI Namespace if it is not there\n bfq: fix use-after-free in bfq_dispatch_request\n irqchip/nvic: Release nvic_base upon failure\n irqchip/qcom-pdc: Fix broken locking\n Fix incorrect type in assignment of ipv6 port for audit\n loop: use sysfs_emit() in the sysfs xxx show()\n selinux: use correct type for context length\n block, bfq: don\u0027t move oom_bfqq\n pinctrl: npcm: Fix broken references to chip-\u003eparent_device\n gcc-plugins/stackleak: Exactly match strings instead of prefixes\n LSM: general protection fault in legacy_parse_param\n lib/test: use after free in register_test_dev_kmod()\n net: dsa: bcm_sf2_cfp: fix an incorrect NULL check on list iterator\n NFSv4/pNFS: Fix another issue with a list iterator pointing to the head\n net/x25: Fix null-ptr-deref caused by x25_disconnect\n qlcnic: dcb: default to returning -EOPNOTSUPP\n selftests: test_vxlan_under_vrf: Fix broken test case\n net: phy: broadcom: Fix brcm_fet_config_init()\n xen: fix is_xen_pmu()\n clk: Initialize orphan req_rate\n clk: qcom: gcc-msm8994: Fix gpll4 width\n NFSv4.1: don\u0027t retry BIND_CONN_TO_SESSION on session error\n netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options\n jfs: fix divide error in dbNextAG\n driver core: dd: fix return value of __setup handler\n firmware: google: Properly state IOMEM dependency\n kgdbts: fix return value of __setup handler\n kgdboc: fix return value of __setup handler\n tty: hvc: fix return value of __setup handler\n pinctrl/rockchip: Add missing of_node_put() in rockchip_pinctrl_probe\n pinctrl: nomadik: Add missing of_node_put() in nmk_pinctrl_probe\n pinctrl: mediatek: paris: Fix pingroup pin config state readback\n pinctrl: mediatek: paris: Fix \"argument\" argument type for mtk_pinconf_get()\n pinctrl: mediatek: Fix missing of_node_put() in mtk_pctrl_init\n staging: mt7621-dts: fix LEDs and pinctrl on GB-PC1 devicetree\n NFS: remove unneeded check in decode_devicenotify_args()\n clk: tegra: tegra124-emc: Fix missing put_device() call in emc_ensure_emc_driver\n clk: clps711x: Terminate clk_div_table with sentinel element\n clk: loongson1: Terminate clk_div_table with sentinel element\n clk: actions: Terminate clk_div_table with sentinel element\n remoteproc: qcom_wcnss: Add missing of_node_put() in wcnss_alloc_memory_region\n remoteproc: qcom: Fix missing of_node_put in adsp_alloc_memory_region\n clk: qcom: clk-rcg2: Update the frac table for pixel clock\n clk: qcom: clk-rcg2: Update logic to calculate D value for RCG\n clk: imx7d: Remove audio_mclk_root_clk\n dma-debug: fix return value of __setup handlers\n NFS: Return valid errors from nfs2/3_decode_dirent()\n iio: adc: Add check for devm_request_threaded_irq\n serial: 8250: Fix race condition in RTS-after-send handling\n serial: 8250_mid: Balance reference count for PCI DMA device\n phy: dphy: Correct lpx parameter and its derivatives(ta_{get,go,sure})\n clk: qcom: ipq8074: Use floor ops for SDCC1 clock\n pinctrl: renesas: r8a77470: Reduce size for narrow VIN1 channel\n staging:iio:adc:ad7280a: Fix handing of device address bit reversing.\n misc: alcor_pci: Fix an error handling path\n pwm: lpc18xx-sct: Initialize driver data and hardware before pwmchip_add()\n mxser: fix xmit_buf leak in activate when LSR \u003d\u003d 0xff\n mfd: asic3: Add missing iounmap() on error asic3_mfd_probe\n tipc: fix the timer expires after interval 100ms\n openvswitch: always update flow key after nat\n tcp: ensure PMTU updates are processed during fastopen\n selftests/bpf/test_lirc_mode2.sh: Exit with proper code\n i2c: mux: demux-pinctrl: do not deactivate a master that is not active\n af_netlink: Fix shift out of bounds in group mask calculation\n Bluetooth: btmtksdio: Fix kernel oops in btmtksdio_interrupt\n USB: storage: ums-realtek: fix error code in rts51x_read_mem()\n bpf, sockmap: Fix double uncharge the mem of sk_msg\n bpf, sockmap: Fix more uncharged while msg has more_data\n bpf, sockmap: Fix memleak in tcp_bpf_sendmsg while sk msg is full\n RDMA/mlx5: Fix memory leak in error flow for subscribe event routine\n mtd: rawnand: atmel: fix refcount issue in atmel_nand_controller_init\n MIPS: RB532: fix return value of __setup handler\n vxcan: enable local echo for sent CAN frames\n powerpc: 8xx: fix a return value error in mpc8xx_pic_init\n selftests/bpf: Make test_lwt_ip_encap more stable and faster\n mfd: mc13xxx: Add check for mc13xxx_irq_request\n powerpc/sysdev: fix incorrect use to determine if list is empty\n mips: DEC: honor CONFIG_MIPS_FP_SUPPORT\u003dn\n PCI: Reduce warnings on possible RW1C corruption\n power: supply: wm8350-power: Add missing free in free_charger_irq\n power: supply: wm8350-power: Handle error for wm8350_register_irq\n i2c: xiic: Make bus names unique\n hv_balloon: rate-limit \"Unhandled message\" warning\n KVM: x86/emulator: Defer not-present segment check in __load_segment_descriptor()\n KVM: x86: Fix emulation in writing cr8\n powerpc/Makefile: Don\u0027t pass -mcpu\u003dpowerpc64 when building 32-bit\n libbpf: Skip forward declaration when counting duplicated type names\n bpf, arm64: Feed byte-offset into bpf line info\n bpf, arm64: Call build_prologue() first in first JIT pass\n drm/bridge: cdns-dsi: Make sure to to create proper aliases for dt\n scsi: hisi_sas: Change permission of parameter prot_mask\n power: supply: bq24190_charger: Fix bq24190_vbus_is_enabled() wrong false return\n drm/tegra: Fix reference leak in tegra_dsi_ganged_probe\n ext2: correct max file size computing\n TOMOYO: fix __setup handlers return values\n drm/amd/display: Remove vupdate_int_entry definition\n scsi: pm8001: Fix abort all task initialization\n scsi: pm8001: Fix payload initialization in pm80xx_set_thermal_config()\n scsi: pm8001: Fix command initialization in pm8001_chip_ssp_tm_req()\n scsi: pm8001: Fix command initialization in pm80XX_send_read_log()\n dm crypt: fix get_key_size compiler warning if !CONFIG_KEYS\n iwlwifi: mvm: Fix an error code in iwl_mvm_up()\n iwlwifi: Fix -EIO error code that is never returned\n dax: make sure inodes are flushed before destroy cache\n IB/cma: Allow XRC INI QPs to set their local ACK timeout\n drm/amd/display: Add affected crtcs to atomic state for dsc mst unplug\n iommu/ipmmu-vmsa: Check for error num after setting mask\n HID: i2c-hid: fix GET/SET_REPORT for unnumbered reports\n power: supply: ab8500: Fix memory leak in ab8500_fg_sysfs_init\n PCI: aardvark: Fix reading PCI_EXP_RTSTA_PME bit on emulated bridge\n net: dsa: mv88e6xxx: Enable port policy support on 6097\n mt76: mt7615: check sta_rates pointer in mt7615_sta_rate_tbl_update\n mt76: mt7603: check sta_rates pointer in mt7603_sta_rate_tbl_update\n powerpc/perf: Don\u0027t use perf_hw_context for trace IMC PMU\n ray_cs: Check ioremap return value\n power: reset: gemini-poweroff: Fix IRQ check in gemini_poweroff_probe\n i40e: don\u0027t reserve excessive XDP_PACKET_HEADROOM on XSK Rx to skb\n KVM: PPC: Fix vmx/vsx mixup in mmio emulation\n ath9k_htc: fix uninit value bugs\n drm/amd/display: Fix a NULL pointer dereference in amdgpu_dm_connector_add_common_modes()\n drm/edid: Don\u0027t clear formats if using deep color\n mtd: rawnand: gpmi: fix controller timings setting\n mtd: onenand: Check for error irq\n Bluetooth: hci_serdev: call init_rwsem() before p-\u003eopen()\n udmabuf: validate ubuf-\u003epagecount\n ath10k: fix memory overwrite of the WoWLAN wakeup packet pattern\n drm/bridge: Add missing pm_runtime_disable() in __dw_mipi_dsi_probe\n drm/bridge: Fix free wrong object in sii8620_init_rcp_input_dev\n ASoC: msm8916-wcd-analog: Fix error handling in pm8916_wcd_analog_spmi_probe\n mmc: davinci_mmc: Handle error for clk_enable\n ASoC: msm8916-wcd-digital: Fix missing clk_disable_unprepare() in msm8916_wcd_digital_probe\n ASoC: imx-es8328: Fix error return code in imx_es8328_probe()\n ASoC: mxs: Fix error handling in mxs_sgtl5000_probe\n ASoC: dmaengine: do not use a NULL prepare_slave_config() callback\n ivtv: fix incorrect device_caps for ivtvfb\n video: fbdev: omapfb: Add missing of_node_put() in dvic_probe_of\n ASoC: fsi: Add check for clk_enable\n ASoC: wm8350: Handle error for wm8350_register_irq\n ASoC: atmel: Add missing of_node_put() in at91sam9g20ek_audio_probe\n media: stk1160: If start stream fails, return buffers with VB2_BUF_STATE_QUEUED\n arm64: dts: rockchip: Fix SDIO regulator supply properties on rk3399-firefly\n ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction\n memory: emif: check the pointer temp in get_device_details()\n memory: emif: Add check for setup_interrupts\n ASoC: soc-compress: prevent the potentially use of null pointer\n ASoC: atmel_ssc_dai: Handle errors for clk_enable\n ASoC: mxs-saif: Handle errors for clk_enable\n printk: fix return value of printk.devkmsg __setup handler\n arm64: dts: broadcom: Fix sata nodename\n arm64: dts: ns2: Fix spi-cpol and spi-cpha property\n ALSA: spi: Add check for clk_enable()\n ASoC: ti: davinci-i2s: Add check for clk_enable()\n ASoC: rt5663: check the return value of devm_kzalloc() in rt5663_parse_dp()\n uaccess: fix nios2 and microblaze get_user_8()\n media: usb: go7007: s2250-board: fix leak in probe()\n media: em28xx: initialize refcount before kref_get\n media: video/hdmi: handle short reads of hdmi info frame.\n ARM: dts: imx: Add missing LVDS decoder on M53Menlo\n soc: ti: wkup_m3_ipc: Fix IRQ check in wkup_m3_ipc_probe\n arm64: dts: qcom: sm8150: Correct TCS configuration for apps rsc\n soc: qcom: aoss: remove spurious IRQF_ONESHOT flags\n soc: qcom: rpmpd: Check for null return of devm_kcalloc\n ARM: dts: qcom: ipq4019: fix sleep clock\n video: fbdev: fbcvt.c: fix printing in fb_cvt_print_name()\n video: fbdev: atmel_lcdfb: fix an error code in atmel_lcdfb_probe()\n video: fbdev: smscufx: Fix null-ptr-deref in ufx_usb_probe()\n media: aspeed: Correct value for h-total-pixels\n media: hantro: Fix overfill bottom register field name\n media: coda: Fix missing put_device() call in coda_get_vdoa_data\n media: bttv: fix WARNING regression on tunerless devices\n f2fs: fix to avoid potential deadlock\n f2fs: fix missing free nid in f2fs_handle_failed_inode\n perf/x86/intel/pt: Fix address filter config for 32-bit kernel\n perf/core: Fix address filter parser for multiple filters\n sched/debug: Remove mpol_get/put and task_lock/unlock from sched_show_numa\n clocksource: acpi_pm: fix return value of __setup handler\n hwmon: (pmbus) Add Vin unit off handling\n crypto: ccp - ccp_dmaengine_unregister release dma channels\n ACPI: APEI: fix return value of __setup handlers\n clocksource/drivers/timer-of: Check return value of of_iomap in timer_of_base_init()\n crypto: vmx - add missing dependencies\n hwrng: atmel - disable trng on failure path\n PM: suspend: fix return value of __setup handler\n PM: hibernate: fix __setup handler error handling\n block: don\u0027t delete queue kobject before its children\n hwmon: (sch56xx-common) Replace WDOG_ACTIVE with WDOG_HW_RUNNING\n hwmon: (pmbus) Add mutex to regulator ops\n spi: pxa2xx-pci: Balance reference count for PCI DMA device\n crypto: ccree - don\u0027t attempt 0 len DMA mappings\n audit: log AUDIT_TIME_* records only from rules\n selftests/x86: Add validity check and allow field splitting\n spi: tegra114: Add missing IRQ check in tegra_spi_probe\n crypto: mxs-dcp - Fix scatterlist processing\n crypto: authenc - Fix sleep in atomic context in decrypt_tail\n regulator: qcom_smd: fix for_each_child.cocci warnings\n PCI: pciehp: Clear cmd_busy bit in polling mode\n brcmfmac: pcie: Fix crashes due to early IRQs\n brcmfmac: pcie: Replace brcmf_pcie_copy_mem_todev with memcpy_toio\n brcmfmac: pcie: Release firmwares in the brcmf_pcie_setup error path\n brcmfmac: firmware: Allocate space for default boardrev in nvram\n xtensa: fix xtensa_wsr always writing 0\n xtensa: fix stop_machine_cpuslocked call in patch_text\n media: davinci: vpif: fix unbalanced runtime PM get\n DEC: Limit PMAX memory probing to R3k systems\n crypto: rsa-pkcs1pad - fix buffer overread in pkcs1pad_verify_complete()\n crypto: rsa-pkcs1pad - restore signature length check\n crypto: rsa-pkcs1pad - correctly get hash from source scatterlist\n lib/raid6/test: fix multiple definition linking error\n thermal: int340x: Increase bitmap size\n carl9170: fix missing bit-wise or operator for tx_params\n ARM: dts: exynos: add missing HDMI supplies on SMDK5420\n ARM: dts: exynos: add missing HDMI supplies on SMDK5250\n ARM: dts: exynos: fix UART3 pins configuration in Exynos5250\n ARM: dts: at91: sama5d2: Fix PMERRLOC resource size\n video: fbdev: atari: Atari 2 bpp (STe) palette bugfix\n video: fbdev: sm712fb: Fix crash in smtcfb_read()\n drm/edid: check basic audio support on CEA extension block\n block: don\u0027t merge across cgroup boundaries if blkcg is enabled\n mailbox: tegra-hsp: Flush whole channel\n drivers: hamradio: 6pack: fix UAF bug caused by mod_timer()\n ACPI: properties: Consistently return -ENOENT if there are no more references\n udp: call udp_encap_enable for v6 sockets when enabling encap\n powerpc/kvm: Fix kvm_use_magic_page\n drbd: fix potential silent data corruption\n mm/kmemleak: reset tag when compare object pointer\n mm,hwpoison: unmap poisoned page before invalidation\n ALSA: hda/realtek: Fix audio regression on Mi Notebook Pro 2020\n ALSA: cs4236: fix an incorrect NULL check on list iterator\n Revert \"Input: clear BTN_RIGHT/MIDDLE on buttonpads\"\n riscv: Fix fill_callchain return value\n qed: validate and restrict untrusted VFs vlan promisc mode\n qed: display VF trust config\n scsi: libsas: Fix sas_ata_qc_issue() handling of NCQ NON DATA commands\n mempolicy: mbind_range() set_policy() after vma_merge()\n mm: invalidate hwpoison page cache page in fault path\n mm/pages_alloc.c: don\u0027t create ZONE_MOVABLE beyond the end of a node\n jffs2: fix memory leak in jffs2_scan_medium\n jffs2: fix memory leak in jffs2_do_mount_fs\n jffs2: fix use-after-free in jffs2_clear_xattr_subsystem\n can: ems_usb: ems_usb_start_xmit(): fix double dev_kfree_skb() in error path\n spi: mxic: Fix the transmit path\n pinctrl: samsung: drop pin banks references on error paths\n f2fs: fix to do sanity check on .cp_pack_total_block_count\n f2fs: quota: fix loop condition at f2fs_quota_sync()\n f2fs: fix to unlock page correctly in error path of is_alive()\n NFSD: prevent integer overflow on 32 bit systems\n NFSD: prevent underflow in nfssvc_decode_writeargs()\n SUNRPC: avoid race between mod_timer() and del_timer_sync()\n HID: intel-ish-hid: Use dma_alloc_coherent for firmware update\n Documentation: update stable tree link\n Documentation: add link to stable release candidate tree\n KEYS: fix length validation in keyctl_pkey_params_get_2()\n ptrace: Check PTRACE_O_SUSPEND_SECCOMP permission on PTRACE_SEIZE\n clk: uniphier: Fix fixed-rate initialization\n greybus: svc: fix an error handling bug in gb_svc_hello()\n iio: inkern: make a best effort on offset calculation\n iio: inkern: apply consumer scale when no channel scale is available\n iio: inkern: apply consumer scale on IIO_VAL_INT cases\n iio: afe: rescale: use s64 for temporary scale calculations\n coresight: Fix TRCCONFIGR.QE sysfs interface\n xhci: fix uninitialized string returned by xhci_decode_ctrl_ctx()\n xhci: make xhci_handshake timeout for xhci_reset() adjustable\n xhci: fix runtime PM imbalance in USB2 resume\n USB: usb-storage: Fix use of bitfields for hardware data in ene_ub6250.c\n virtio-blk: Use blk_validate_block_size() to validate block size\n block: Add a helper to validate the block size\n tpm: fix reference counting for struct tpm_chip\n iommu/iova: Improve 32-bit free space estimate\n net: dsa: microchip: add spi_device_id tables\n af_key: add __GFP_ZERO flag for compose_sadb_supported in function pfkey_register\n spi: Fix erroneous sgs value with min_t()\n net:mcf8390: Use platform_get_irq() to get the interrupt\n spi: Fix invalid sgs value\n ethernet: sun: Free the coherent when failing in probing\n virtio_console: break out of buf poll on remove\n xfrm: fix tunnel model fragmentation behavior\n HID: logitech-dj: add new lightspeed receiver id\n netdevice: add the case if dev is NULL\n USB: serial: simple: add Nokia phone driver\n USB: serial: pl2303: add IBM device IDs\n swiotlb: fix info leak with DMA_FROM_DEVICE\n ANDROID: incremental-fs: limit mount stack depth\n Revert \"ANDROID: dm-bow: Protect Ranges fetched and erased from the RB tree\"\n Linux 5.4.188\n llc: only change llc-\u003edev when bind() succeeds\n nds32: fix access_ok() checks in get/put_user\n tpm: use try_get_ops() in tpm-space.c\n mac80211: fix potential double free on mesh join\n rcu: Don\u0027t deboost before reporting expedited quiescent state\n crypto: qat - disable registration of algorithms\n ACPI: video: Force backlight native for Clevo NL5xRU and NL5xNU\n ACPI: battery: Add device HID and quirk for Microsoft Surface Go 3\n ACPI / x86: Work around broken XSDT on Advantech DAC-BJ01 board\n netfilter: nf_tables: initialize registers in nft_do_chain()\n ALSA: hda/realtek: Add quirk for ASUS GA402\n ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc671\n ALSA: oss: Fix PCM OSS buffer allocation overflow\n ASoC: sti: Fix deadlock via snd_pcm_stop_xrun() call\n drivers: net: xgene: Fix regression in CRC stripping\n ALSA: pci: fix reading of swapped values from pcmreg in AC97 codec\n ALSA: cmipci: Restore aux vol on suspend/resume\n ALSA: usb-audio: Add mute TLV for playback volumes on RODE NT-USB\n ALSA: pcm: Add stream lock during PCM reset ioctl operations\n llc: fix netdevice reference leaks in llc_ui_bind()\n thermal: int340x: fix memory leak in int3400_notify()\n staging: fbtft: fb_st7789v: reset display before initialization\n tpm: Fix error handling in async work\n esp: Fix possible buffer overflow in ESP transformation\n net: ipv6: fix skb_over_panic in __ip6_append_data\n nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION\n nfsd: Containerise filecache laundrette\n nfsd: cleanup nfsd_file_lru_dispose()\n ANDROID: usb: gadget: f_accessory: add compat_ioctl support\n UPSTREAM: sr9700: sanity check for packet length\n ANDROID: ABI: update allowed list for galaxy\n ANDROID: GKI: Add symbol list for Zebra\n Linux 5.4.187\n Revert \"selftests/bpf: Add test for bpf_timer overwriting crash\"\n perf symbols: Fix symbol size calculation condition\n Input: aiptek - properly check endpoint type\n usb: usbtmc: Fix bug in pipe direction for control transfers\n usb: gadget: Fix use-after-free bug by not setting udc-\u003edev.driver\n usb: gadget: rndis: prevent integer overflow in rndis_set_response()\n arm64: fix clang warning about TRAMP_VALIAS\n net: dsa: Add missing of_node_put() in dsa_port_parse_of\n net: handle ARPHRD_PIMREG in dev_is_mac_header_xmit()\n drm/panel: simple: Fix Innolux G070Y2-L01 BPP settings\n hv_netvsc: Add check for kvmalloc_array\n atm: eni: Add check for dma_map_single\n net/packet: fix slab-out-of-bounds access in packet_recvmsg()\n net: phy: marvell: Fix invalid comparison in the resume and suspend functions\n efi: fix return value of __setup handlers\n ocfs2: fix crash when initialize filecheck kobj fails\n crypto: qcom-rng - ensure buffer for generate is completely filled\n UPSTREAM: Revert \"xfrm: state and policy should fail if XFRMA_IF_ID 0\"\n Linux 5.4.186\n fixup for \"arm64 entry: Add macro for reading symbol address from the trampoline\"\n kselftest/vm: fix tests build with old libc\n sfc: extend the locking on mcdi-\u003eseqno\n tcp: make tcp_read_sock() more robust\n nl80211: Update bss channel on channel switch for P2P_CLIENT\n drm/vrr: Set VRR capable prop only if it is attached to connector\n iwlwifi: don\u0027t advertise TWT support\n atm: firestream: check the return value of ioremap() in fs_init()\n can: rcar_canfd: rcar_canfd_channel_probe(): register the CAN device when fully ready\n ARM: 9178/1: fix unmet dependency on BITREVERSE for HAVE_ARCH_BITREVERSE\n MIPS: smp: fill in sibling and core maps earlier\n mac80211: refuse aggregations sessions before authorized\n ARM: dts: rockchip: fix a typo on rk3288 crypto-controller\n ARM: dts: rockchip: reorder rk322x hmdi clocks\n arm64: dts: agilex: use the compatible \"intel,socfpga-agilex-hsotg\"\n arm64: dts: rockchip: reorder rk3399 hdmi clocks\n arm64: dts: rockchip: fix rk3399-puma eMMC HS400 signal integrity\n xfrm: Fix xfrm migrate issues when address family changes\n xfrm: Check if_id in xfrm_migrate\n arm64: Use the clearbhb instruction in mitigations\n KVM: arm64: Allow SMCCC_ARCH_WORKAROUND_3 to be discovered and migrated\n arm64: Mitigate spectre style branch history side channels\n KVM: arm64: Add templates for BHB mitigation sequences\n arm64: proton-pack: Report Spectre-BHB vulnerabilities as part of Spectre-v2\n arm64: Add percpu vectors for EL1\n arm64: entry: Add macro for reading symbol addresses from the trampoline\n arm64: entry: Add vectors that have the bhb mitigation sequences\n arm64: entry: Add non-kpti __bp_harden_el1_vectors for mitigations\n arm64: entry: Allow the trampoline text to occupy multiple pages\n arm64: entry: Make the kpti trampoline\u0027s kpti sequence optional\n arm64: entry: Move trampoline macros out of ifdef\u0027d section\n arm64: entry: Don\u0027t assume tramp_vectors is the start of the vectors\n arm64: entry: Allow tramp_alias to access symbols after the 4K boundary\n arm64: entry: Move the trampoline data page before the text page\n arm64: entry: Free up another register on kpti\u0027s tramp_exit path\n arm64: entry: Make the trampoline cleanup optional\n arm64: entry.S: Add ventry overflow sanity checks\n arm64: Add Cortex-X2 CPU part definition\n arm64: add ID_AA64ISAR2_EL1 sys register\n arm64: Add Neoverse-N2, Cortex-A710 CPU part definition\n arm64: Add part number for Arm Cortex-A77\n sctp: fix the processing for INIT chunk\n Revert \"xfrm: state and policy should fail if XFRMA_IF_ID 0\"\n Linux 5.4.185\n KVM: SVM: Don\u0027t flush cache if hardware enforces cache coherency across encryption domains\n x86/mm/pat: Don\u0027t flush cache if hardware enforces cache coherency across encryption domnains\n x86/cpu: Add hardware-enforced cache coherency as a CPUID feature\n x86/cpufeatures: Mark two free bits in word 3\n ext4: add check to prevent attempting to resize an fs with sparse_super2\n ARM: fix Thumb2 regression with Spectre BHB\n virtio: acknowledge all features before access\n virtio: unexport virtio_finalize_features\n arm64: dts: marvell: armada-37xx: Remap IO space to bus address 0x0\n riscv: Fix auipc+jalr relocation range checks\n mmc: meson: Fix usage of meson_mmc_post_req()\n net: macb: Fix lost RX packet wakeup race in NAPI receive\n staging: gdm724x: fix use after free in gdm_lte_rx()\n fuse: fix pipe buffer lifetime for direct_io\n ARM: Spectre-BHB: provide empty stub for non-config\n selftests/memfd: clean up mapping in mfd_fail_write\n selftest/vm: fix map_fixed_noreplace test failure\n tracing: Ensure trace buffer is at least 4096 bytes large\n ipv6: prevent a possible race condition with lifetimes\n Revert \"xen-netback: Check for hotplug-status existence before watching\"\n Revert \"xen-netback: remove \u0027hotplug-status\u0027 once it has served its purpose\"\n net-sysfs: add check for netdevice being present to speed_show\n selftests/bpf: Add test for bpf_timer overwriting crash\n net: bcmgenet: Don\u0027t claim WOL when its not available\n sctp: fix kernel-infoleak for SCTP sockets\n net: phy: DP83822: clear MISR2 register to disable interrupts\n gianfar: ethtool: Fix refcount leak in gfar_get_ts_info\n gpio: ts4900: Do not set DAT and OE together\n selftests: pmtu.sh: Kill tcpdump processes launched by subshell.\n NFC: port100: fix use-after-free in port100_send_complete\n net/mlx5: Fix a race on command flush flow\n net/mlx5: Fix size field in bufferx_reg struct\n ax25: Fix NULL pointer dereference in ax25_kill_by_device\n net: ethernet: lpc_eth: Handle error for clk_enable\n net: ethernet: ti: cpts: Handle error for clk_enable\n ethernet: Fix error handling in xemaclite_of_probe\n ARM: dts: aspeed: Fix AST2600 quad spi group\n drm/sun4i: mixer: Fix P010 and P210 format numbers\n qed: return status of qed_iov_get_link\n net: qlogic: check the return value of dma_alloc_coherent() in qed_vf_hw_prepare()\n virtio-blk: Don\u0027t use MAX_DISCARD_SEGMENTS if max_discard_seg is zero\n arm64: dts: armada-3720-turris-mox: Add missing ethernet0 alias\n clk: qcom: gdsc: Add support to update GDSC transition delay\n ANDROID: fix up rndis ABI breakage\n Linux 5.4.184\n Revert \"ACPI: PM: s2idle: Cancel wakeup before dispatching EC GPE\"\n xen/netfront: react properly to failing gnttab_end_foreign_access_ref()\n xen/gnttab: fix gnttab_end_foreign_access() without page specified\n xen/pvcalls: use alloc/free_pages_exact()\n xen/9p: use alloc/free_pages_exact()\n xen: remove gnttab_query_foreign_access()\n xen/gntalloc: don\u0027t use gnttab_query_foreign_access()\n xen/scsifront: don\u0027t use gnttab_query_foreign_access() for mapped status\n xen/netfront: don\u0027t use gnttab_query_foreign_access() for mapped status\n xen/blkfront: don\u0027t use gnttab_query_foreign_access() for mapped status\n xen/grant-table: add gnttab_try_end_foreign_access()\n xen/xenbus: don\u0027t let xenbus_grant_ring() remove grants in error case\n ARM: fix build warning in proc-v7-bugs.c\n ARM: Do not use NOCROSSREFS directive with ld.lld\n ARM: fix co-processor register typo\n ARM: fix build error when BPF_SYSCALL is disabled\n ARM: include unprivileged BPF status in Spectre V2 reporting\n ARM: Spectre-BHB workaround\n ARM: use LOADADDR() to get load address of sections\n ARM: early traps initialisation\n ARM: report Spectre v2 status through sysfs\n arm/arm64: smccc/psci: add arm_smccc_1_1_get_conduit()\n arm/arm64: Provide a wrapper for SMCCC 1.1 calls\n x86/speculation: Warn about eIBRS + LFENCE + Unprivileged eBPF + SMT\n x86/speculation: Warn about Spectre v2 LFENCE mitigation\n x86/speculation: Update link to AMD speculation whitepaper\n x86/speculation: Use generic retpoline by default on AMD\n x86/speculation: Include unprivileged eBPF status in Spectre v2 mitigation reporting\n Documentation/hw-vuln: Update spectre doc\n x86/speculation: Add eIBRS + Retpoline options\n x86/speculation: Rename RETPOLINE_AMD to RETPOLINE_LFENCE\n x86,bugs: Unconditionally allow spectre_v2\u003dretpoline,amd\n x86/speculation: Merge one test in spectre_v2_user_select_mitigation()\n Linux 5.4.183\n hamradio: fix macro redefine warning\n net: dcb: disable softirqs in dcbnl_flush_dev()\n Revert \"xfrm: xfrm_state_mtu should return at least 1280 for ipv6\"\n btrfs: add missing run of delayed items after unlink during log replay\n btrfs: qgroup: fix deadlock between rescan worker and remove qgroup\n btrfs: fix lost prealloc extents beyond eof after full fsync\n tracing: Fix return value of __setup handlers\n tracing/histogram: Fix sorting on old \"cpu\" value\n HID: add mapping for KEY_ALL_APPLICATIONS\n HID: add mapping for KEY_DICTATE\n Input: elan_i2c - fix regulator enable count imbalance after suspend/resume\n Input: elan_i2c - move regulator_[en|dis]able() out of elan_[en|dis]able_power()\n nl80211: Handle nla_memdup failures in handle_nan_filter\n net: chelsio: cxgb3: check the return value of pci_find_capability()\n soc: fsl: qe: Check of ioremap return value\n memfd: fix F_SEAL_WRITE after shmem huge page allocated\n ibmvnic: free reset-work-item when flushing\n igc: igc_write_phy_reg_gpy: drop premature return\n ARM: 9182/1: mmu: fix returns from early_param() and __setup() functions\n ARM: Fix kgdb breakpoint for Thumb2\n igc: igc_read_phy_reg_gpy: drop premature return\n arm64: dts: rockchip: Switch RK3399-Gru DP to SPDIF output\n can: gs_usb: change active_channels\u0027s type from atomic_t to u8\n ASoC: cs4265: Fix the duplicated control name\n firmware: arm_scmi: Remove space in MODULE_ALIAS name\n efivars: Respect \"block\" flag in efivar_entry_set_safe()\n ixgbe: xsk: change !netif_carrier_ok() handling in ixgbe_xmit_zc()\n net: arcnet: com20020: Fix null-ptr-deref in com20020pci_probe()\n net: sxgbe: fix return value of __setup handler\n iavf: Fix missing check for running netdev\n net: stmmac: fix return value of __setup handler\n mac80211: fix forwarded mesh frames AC \u0026 queue selection\n ia64: ensure proper NUMA distance and possible map initialization\n sched/topology: Fix sched_domain_topology_level alloc in sched_init_numa()\n sched/topology: Make sched_init_numa() use a set for the deduplicating sort\n xen/netfront: destroy queues before real_num_tx_queues is zeroed\n block: Fix fsync always failed if once failed\n net/smc: fix unexpected SMC_CLC_DECL_ERR_REGRMB error cause by server\n net/smc: fix unexpected SMC_CLC_DECL_ERR_REGRMB error generated by client\n net: dcb: flush lingering app table entries for unregistered devices\n batman-adv: Don\u0027t expect inter-netns unique iflink indices\n batman-adv: Request iflink once in batadv_get_real_netdevice\n batman-adv: Request iflink once in batadv-on-batadv check\n netfilter: nf_queue: fix possible use-after-free\n netfilter: nf_queue: don\u0027t assume sk is full socket\n xfrm: enforce validity of offload input flags\n xfrm: fix the if_id check in changelink\n netfilter: fix use-after-free in __nf_register_net_hook()\n xfrm: fix MTU regression\n ASoC: ops: Shift tested values in snd_soc_put_volsw() by +min\n ALSA: intel_hdmi: Fix reference to PCM buffer address\n ata: pata_hpt37x: fix PCI clock detection\n usb: gadget: clear related members when goto fail\n usb: gadget: don\u0027t release an existing dev-\u003ebuf\n net: usb: cdc_mbim: avoid altsetting toggling for Telit FN990\n i2c: qup: allow COMPILE_TEST\n i2c: cadence: allow COMPILE_TEST\n dmaengine: shdma: Fix runtime PM imbalance on error\n cifs: fix double free race when mount fails in cifs_get_root()\n Input: clear BTN_RIGHT/MIDDLE on buttonpads\n ASoC: rt5682: do not block workqueue if card is unbound\n ASoC: rt5668: do not block workqueue if card is unbound\n i2c: bcm2835: Avoid clock stretching timeouts\n mac80211_hwsim: initialize ieee80211_tx_info at hw_scan_work\n mac80211_hwsim: report NOACK frames in tx_status\n Linux 5.4.182\n fget: clarify and improve __fget_files() implementation\n memblock: use kfree() to release kmalloced memblock regions\n Revert \"drm/nouveau/pmu/gm200-: avoid touching PMU outside of DEVINIT/PREOS/ACR\"\n gpio: tegra186: Fix chip_data type confusion\n tty: n_gsm: fix NULL pointer access due to DLCI release\n tty: n_gsm: fix proper link termination after failed open\n tty: n_gsm: fix encoding of control signal octet bit DV\n xhci: Prevent futile URB re-submissions due to incorrect return value.\n xhci: re-initialize the HC during resume if HCE was set\n usb: dwc3: gadget: Let the interrupt handler disable bottom halves.\n usb: dwc3: pci: Fix Bay Trail phy GPIO mappings\n USB: serial: option: add Telit LE910R1 compositions\n USB: serial: option: add support for DW5829e\n tracefs: Set the group ownership in apply_options() not parse_options()\n USB: gadget: validate endpoint index for xilinx udc\n usb: gadget: rndis: add spinlock for rndis response list\n Revert \"USB: serial: ch341: add new Product ID for CH341A\"\n ata: pata_hpt37x: disable primary channel on HPT371\n iio: Fix error handling for PM\n iio: adc: ad7124: fix mask used for setting AIN_BUFP \u0026 AIN_BUFM bits\n iio: adc: men_z188_adc: Fix a resource leak in an error handling path\n tracing: Have traceon and traceoff trigger honor the instance\n RDMA/ib_srp: Fix a deadlock\n configfs: fix a race in configfs_{,un}register_subsystem()\n spi: spi-zynq-qspi: Fix a NULL pointer dereference in zynq_qspi_exec_mem_op()\n net/mlx5: Fix wrong limitation of metadata match on ecpf\n net/mlx5: Fix possible deadlock on rule deletion\n netfilter: nf_tables: fix memory leak during stateful obj update\n nfp: flower: Fix a potential leak in nfp_tunnel_add_shared_mac()\n net: Force inlining of checksum functions in net/checksum.h\n net: ll_temac: check the return value of devm_kmalloc()\n net/mlx5e: Fix wrong return value on ioctl EEPROM query failure\n drm/edid: Always set RGB444\n openvswitch: Fix setting ipv6 fields causing hw csum failure\n gso: do not skip outer ip header in case of ipip and net_failover\n tipc: Fix end of loop tests for list_for_each_entry()\n net: __pskb_pull_tail() \u0026 pskb_carve_frag_list() drop_monitor friends\n bpf: Do not try bpf_msg_push_data with len 0\n perf data: Fix double free in perf_session__delete()\n ping: remove pr_err from ping_lookup\n lan743x: fix deadlock in lan743x_phy_link_status_change()\n optee: use driver internal tee_context for some rpc\n tee: export teedev_open() and teedev_close_context()\n x86/fpu: Correct pkru/xstate inconsistency\n netfilter: nf_tables_offload: incorrect flow offload action array size\n USB: zaurus: support another broken Zaurus\n sr9700: sanity check for packet length\n drm/amdgpu: disable MMHUB PG for Picasso\n parisc/unaligned: Fix ldw() and stw() unalignment handlers\n parisc/unaligned: Fix fldd and fstd unaligned handlers on 32-bit kernel\n vhost/vsock: don\u0027t check owner in vhost_vsock_stop() while releasing\n clk: jz4725b: fix mmc0 clock gating\n cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug\n Revert \"netfilter: conntrack: don\u0027t refresh sctp entries in closed state\"\n Linux 5.4.181\n kconfig: fix failing to generate auto.conf\n net: macb: Align the dma and coherent dma masks\n net: usb: qmi_wwan: Add support for Dell DW5829e\n tracing: Fix tp_printk option related with tp_printk_stop_on_boot\n drm/rockchip: dw_hdmi: Do not leave clock enabled in error case\n ata: libata-core: Disable TRIM on M88V29\n kconfig: let \u0027shell\u0027 return enough output for deep path names\n arm64: dts: meson-g12: drop BL32 region from SEI510/SEI610\n arm64: dts: meson-g12: add ATF BL32 reserved-memory region\n arm64: dts: meson-gx: add ATF BL32 reserved-memory region\n netfilter: conntrack: don\u0027t refresh sctp entries in closed state\n irqchip/sifive-plic: Add missing thead,c900-plic match string\n ARM: OMAP2+: adjust the location of put_device() call in omapdss_init_of\n ARM: OMAP2+: hwmod: Add of_node_put() before break\n KVM: x86/pmu: Use AMD64_RAW_EVENT_MASK for PERF_TYPE_RAW\n Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj\n i2c: brcmstb: fix support for DSL and CM variants\n copy_process(): Move fd_install() out of sighand-\u003esiglock critical section\n dmaengine: sh: rcar-dmac: Check for error num after setting mask\n net: sched: limit TC_ACT_REPEAT loops\n lib/iov_iter: initialize \"flags\" in new pipe_buffer\n EDAC: Fix calculation of returned address and next offset in edac_align_ptr()\n scsi: lpfc: Fix pt2pt NVMe PRLI reject LOGO loop\n mtd: rawnand: brcmnand: Fixed incorrect sub-page ECC status\n mtd: rawnand: qcom: Fix clock sequencing in qcom_nandc_probe()\n NFS: Do not report writeback errors in nfs_getattr()\n NFS: LOOKUP_DIRECTORY is also ok with symlinks\n block/wbt: fix negative inflight counter when remove scsi device\n mtd: rawnand: gpmi: don\u0027t leak PM reference in error path\n powerpc/lib/sstep: fix \u0027ptesync\u0027 build error\n ASoC: ops: Fix stereo change notifications in snd_soc_put_volsw_range()\n ASoC: ops: Fix stereo change notifications in snd_soc_put_volsw()\n ALSA: hda: Fix missing codec probe on Shenker Dock 15\n ALSA: hda: Fix regression on forced probe mask option\n libsubcmd: Fix use-after-free for realloc(..., 0)\n bonding: fix data-races around agg_select_timer\n drop_monitor: fix data-race in dropmon_net_event / trace_napi_poll_hit\n bonding: force carrier update when releasing slave\n ping: fix the dif and sdif check in ping_lookup\n net: ieee802154: ca8210: Fix lifs/sifs periods\n net: dsa: lan9303: fix reset on probe\n netfilter: nft_synproxy: unregister hooks on init error path\n iwlwifi: pcie: gen2: fix locking when \"HW not ready\"\n iwlwifi: pcie: fix locking when \"HW not ready\"\n mmc: block: fix read single on recovery logic\n vsock: remove vsock from connected table when connect is interrupted by a signal\n dmaengine: at_xdmac: Start transfer for cyclic channels in issue_pending\n taskstats: Cleanup the use of task-\u003eexit_code\n ext4: prevent partial update of the extent blocks\n ext4: check for inconsistent extents between index and leaf block\n ext4: check for out-of-order index extents in ext4_valid_extent_entries()\n drm/radeon: Fix backlight control on iMac 12,1\n iwlwifi: fix use-after-free\n arm64: module/ftrace: intialize PLT at load time\n arm64: module: rework special section handling\n module/ftrace: handle patchable-function-entry\n ftrace: add ftrace_init_nop()\n Revert \"module, async: async_synchronize_full() on module init iff async is used\"\n drm/amdgpu: fix logic inversion in check\n nvme-rdma: fix possible use-after-free in transport error_recovery work\n nvme-tcp: fix possible use-after-free in transport error_recovery work\n nvme: fix a possible use-after-free in controller reset during load\n quota: make dquot_quota_sync return errors from -\u003esync_fs\n vfs: make freeze_super abort when sync_filesystem returns error\n ax25: improve the incomplete fix to avoid UAF and NPD bugs\n selftests/zram: Adapt the situation that /dev/zram0 is being used\n selftests/zram01.sh: Fix compression ratio calculation\n selftests/zram: Skip max_comp_streams interface on newer kernel\n net: ieee802154: at86rf230: Stop leaking skb\u0027s\n selftests: rtc: Increase test timeout so that all tests run\n platform/x86: ISST: Fix possible circular locking dependency detected\n btrfs: send: in case of IO error log it\n parisc: Fix sglist access in ccio-dma.c\n parisc: Fix data TLB miss in sba_unmap_sg\n parisc: Drop __init from map_pages declaration\n serial: parisc: GSC: fix build when IOSAPIC is not set\n Revert \"svm: Add warning message for AVIC IPI invalid target\"\n HID:Add support for UGTABLET WP5540\n Makefile.extrawarn: Move -Wunaligned-access to W\u003d1\n\nChange-Id: Ibabd39f25fa24e816afdeb0339dd768e24f977ff\n" }, { "commit": "79e1dca55ade1410f2c4976e90fe93ebc51a929e", "tree": "a1098bd39f6ffbe82a66b700aa9b3dcb92d8035f", "parents": [ "366e92d405068ca8a4272ad2c3ec46a5ff029a10", "6215647d9699cb8f1bf7333ec849242c4a9cf9a6" ], "author": { "name": "Greg Kroah-Hartman", "email": "gregkh@google.com", "time": "Wed Sep 28 12:48:08 2022 +0200" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@google.com", "time": "Wed Sep 28 12:48:08 2022 +0200" }, "message": "Merge 5.4.215 into android11-5.4-lts\n\nChanges in 5.4.215\n\tof: fdt: fix off-by-one error in unflatten_dt_nodes()\n\tNFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0\n\tgpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx\n\tdrm/meson: Correct OSD1 global alpha value\n\tdrm/meson: Fix OSD1 RGB to YCbCr coefficient\n\tparisc: ccio-dma: Add missing iounmap in error path in ccio_probe()\n\tALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC\n\ttask_stack, x86/cea: Force-inline stack helpers\n\ttracing: hold caller_addr to hardirq_{enable,disable}_ip\n\tcifs: revalidate mapping when doing direct writes\n\tcifs: don\u0027t send down the destination address to sendmsg for a SOCK_STREAM\n\tMAINTAINERS: add Chandan as xfs maintainer for 5.4.y\n\tiomap: iomap that extends beyond EOF should be marked dirty\n\tASoC: nau8824: Fix semaphore unbalance at error paths\n\tregulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()\n\trxrpc: Fix local destruction being repeated\n\trxrpc: Fix calc of resend age\n\tALSA: hda/sigmatel: Keep power up while beep is enabled\n\tALSA: hda/tegra: Align BDL entry to 4KB boundary\n\tnet: usb: qmi_wwan: add Quectel RM520N\n\tafs: Return -EAGAIN, not -EREMOTEIO, when a file already locked\n\tMIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()\n\tmksysmap: Fix the mismatch of \u0027L0\u0027 symbols in System.map\n\tvideo: fbdev: pxa3xx-gcu: Fix integer overflow in pxa3xx_gcu_write\n\tcgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()\n\tALSA: hda/sigmatel: Fix unused variable warning for beep power change\n\tusb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind\n\tusb: dwc3: Issue core soft reset before enabling run/stop\n\tusb: dwc3: gadget: Prevent repeat pullup()\n\tusb: dwc3: gadget: Refactor pullup()\n\tusb: dwc3: gadget: Don\u0027t modify GEVNTCOUNT in pullup()\n\tusb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop\n\tusb: xhci-mtk: get the microframe boundary for ESIT\n\tusb: xhci-mtk: add only one extra CS for FS/LS INTR\n\tusb: xhci-mtk: use @sch_tt to check whether need do TT schedule\n\tusb: xhci-mtk: add a function to (un)load bandwidth info\n\tusb: xhci-mtk: add some schedule error number\n\tusb: xhci-mtk: allow multiple Start-Split in a microframe\n\tusb: xhci-mtk: relax TT periodic bandwidth allocation\n\twifi: mac80211: Fix UAF in ieee80211_scan_rx()\n\ttty/serial: atmel: RS485 \u0026 ISO7816: wait for TXRDY before sending data\n\tserial: atmel: remove redundant assignment in rs485_config\n\ttty: serial: atmel: Preserve previous USART mode if RS485 disabled\n\tusb: add quirks for Lenovo OneLink+ Dock\n\tusb: gadget: udc-xilinx: replace memcpy with memcpy_toio\n\tusb: cdns3: fix issue with rearming ISO OUT endpoint\n\tRevert \"usb: add quirks for Lenovo OneLink+ Dock\"\n\tRevert \"usb: gadget: udc-xilinx: replace memcpy with memcpy_toio\"\n\tUSB: core: Fix RST error in hub.c\n\tUSB: serial: option: add Quectel BG95 0x0203 composition\n\tUSB: serial: option: add Quectel RM520N\n\tALSA: hda/tegra: set depop delay for tegra\n\tALSA: hda: add Intel 5 Series / 3400 PCI DID\n\tALSA: hda/realtek: Add quirk for Huawei WRT-WX9\n\tALSA: hda/realtek: Re-arrange quirk table entries\n\tALSA: hda/realtek: Add pincfg for ASUS G513 HP jack\n\tALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack\n\tALSA: hda/realtek: Add quirk for ASUS GA503R laptop\n\tALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop\n\tefi: libstub: check Shim mode using MokSBStateRT\n\tmm/slub: fix to return errno if kmalloc() fails\n\tarm64: dts: rockchip: Pull up wlan wake# on Gru-Bob\n\tarm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz\n\tarm64: dts: rockchip: Remove \u0027enable-active-low\u0027 from rk3399-puma\n\tnetfilter: nf_conntrack_sip: fix ct_sip_walk_headers\n\tnetfilter: nf_conntrack_irc: Tighten matching on DCC message\n\tnetfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find()\n\tiavf: Fix cached head and tail value for iavf_get_tx_pending\n\tipvlan: Fix out-of-bound bugs caused by unset skb-\u003emac_header\n\tnet: team: Unsync device addresses on ndo_stop\n\tMIPS: lantiq: export clk_get_io() for lantiq_wdt.ko\n\tMIPS: Loongson32: Fix PHY-mode being left unspecified\n\tiavf: Fix bad page state\n\tiavf: Fix set max MTU size with port VLAN and jumbo frames\n\ti40e: Fix VF set max MTU size\n\ti40e: Fix set max_tx_rate when it is lower than 1 Mbps\n\tof: mdio: Add of_node_put() when breaking out of for_each_xx\n\tnet/sched: taprio: avoid disabling offload when it was never enabled\n\tnet/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs\n\tnetfilter: ebtables: fix memory leak when blob is malformed\n\tcan: gs_usb: gs_can_open(): fix race dev-\u003ecan.state condition\n\tperf jit: Include program header in ELF files\n\tperf kcore_copy: Do not check /proc/modules is unchanged\n\tnet: sunhme: Fix packet reception for len \u003c RX_COPY_THRESHOLD\n\tnet: sched: fix possible refcount leak in tc_new_tfilter()\n\tserial: Create uart_xmit_advance()\n\tserial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting\n\tserial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting\n\ts390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup\n\tusb: xhci-mtk: fix issue of out-of-bounds array access\n\tcifs: always initialize struct msghdr smb_msg completely\n\tDrivers: hv: Never allocate anything besides framebuffer from framebuffer memory region\n\tdrm/amdgpu: use dirty framebuffer helper\n\tdrm/amd/display: Limit user regamma to a valid value\n\tdrm/rockchip: Fix return type of cdn_dp_connector_mode_valid\n\tworkqueue: don\u0027t skip lockdep work dependency in cancel_work_sync()\n\text4: fix bug in extents parsing when eh_entries \u003d\u003d 0 and eh_depth \u003e 0\n\txfs: replace -EIO with -EFSCORRUPTED for corrupt metadata\n\txfs: slightly tweak an assert in xfs_fs_map_blocks\n\txfs: add missing assert in xfs_fsmap_owner_from_rmap\n\txfs: range check ri_cnt when recovering log items\n\txfs: attach dquots and reserve quota blocks during unwritten conversion\n\txfs: Fix deadlock between AGI and AGF when target_ip exists in xfs_rename()\n\txfs: convert EIO to EFSCORRUPTED when log contents are invalid\n\txfs: constify the buffer pointer arguments to error functions\n\txfs: always log corruption errors\n\txfs: fix some memory leaks in log recovery\n\txfs: stabilize insert range start boundary to avoid COW writeback race\n\txfs: use bitops interface for buf log item AIL flag check\n\txfs: refactor agfl length computation function\n\txfs: split the sunit parameter update into two parts\n\txfs: don\u0027t commit sunit/swidth updates to disk if that would cause repair failures\n\txfs: fix an ABBA deadlock in xfs_rename\n\txfs: fix use-after-free when aborting corrupt attr inactivation\n\text4: make directory inode spreading reflect flexbg size\n\tLinux 5.4.215\n\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@google.com\u003e\nChange-Id: Ic4723318e38b6d2502091cfb41fe602e59c1a538\n" }, { "commit": "47c5ef29e52f5ee773f45a6b37a03b69f4f9a52a", "tree": "5b8d3505b8dc894477c4979f80983c2b6c6868f4", "parents": [ "f0ebdfc10bd1bb4f461949485510cb255478cbdb" ], "author": { "name": "Youling Tang", "email": "tangyouling@loongson.cn", "time": "Thu Sep 01 19:10:59 2022 +0800" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Wed Sep 28 11:03:59 2022 +0200" }, "message": "mksysmap: Fix the mismatch of \u0027L0\u0027 symbols in System.map\n\n[ Upstream commit c17a2538704f926ee4d167ba625e09b1040d8439 ]\n\nWhen System.map was generated, the kernel used mksysmap to filter the\nkernel symbols, we need to filter \"L0\" symbols in LoongArch architecture.\n\n$ cat System.map | grep L0\n9000000000221540 t L0\n\nThe L0 symbol exists in System.map, but not in .tmp_System.map. When\n\"cmp -s System.map .tmp_System.map\" will show \"Inconsistent kallsyms\ndata\" error message in link-vmlinux.sh script.\n\nSigned-off-by: Youling Tang \u003ctangyouling@loongson.cn\u003e\nSigned-off-by: Masahiro Yamada \u003cmasahiroy@kernel.org\u003e\nSigned-off-by: Sasha Levin \u003csashal@kernel.org\u003e\n" }, { "commit": "51223c9db52b6f06daef876c574bf2fd142e899c", "tree": "62c977646666df4eaaa6dd2427647755c0140adb", "parents": [ "64522c903c51b16af6b1f3b8020d90f26618f449", "d6deb370b5a5389256f160f711c58561e0868ddf" ], "author": { "name": "Greg Kroah-Hartman", "email": "gregkh@google.com", "time": "Wed Sep 21 12:34:35 2022 +0200" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@google.com", "time": "Wed Sep 21 12:34:35 2022 +0200" }, "message": "Merge 5.4.212 into android11-5.4-lts\n\nChanges in 5.4.212\n\taudit: fix potential double free on error path from fsnotify_add_inode_mark\n\tparisc: Fix exception handler for fldw and fstw instructions\n\tkernel/sys_ni: add compat entry for fadvise64_64\n\tusb: cdns3: Fix issue for clear halt endpoint\n\tRevert \"selftests/bpf: Fix \"dubious pointer arithmetic\" test\"\n\tRevert \"selftests/bpf: Fix test_align verifier log patterns\"\n\tpinctrl: amd: Don\u0027t save/restore interrupt status and wake status bits\n\tsched/deadline: Unthrottle PI boosted threads while enqueuing\n\tsched/deadline: Fix stale throttling on de-/boosted tasks\n\tsched/deadline: Fix priority inheritance with multiple scheduling classes\n\tkernel/sched: Remove dl_boosted flag comment\n\txfrm: fix refcount leak in __xfrm_policy_check()\n\taf_key: Do not call xfrm_probe_algs in parallel\n\tSUNRPC: RPC level errors should set task-\u003etk_rpc_status\n\trose: check NULL rose_loopback_neigh-\u003eloopback\n\tnet/mlx5e: Properly disable vlan strip on non-UL reps\n\tnet: moxa: get rid of asymmetry in DMA mapping/unmapping\n\tbonding: 802.3ad: fix no transmission of LACPDUs\n\tnet: ipvtap - add __init/__exit annotations to module init/exit funcs\n\tnetfilter: ebtables: reject blobs that don\u0027t provide all entry points\n\tbnxt_en: fix NQ resource accounting during vf creation on 57500 chips\n\tnetfilter: nft_payload: report ERANGE for too long offset and length\n\tnetfilter: nft_payload: do not truncate csum_offset and csum_type\n\tnetfilter: nft_osf: restrict osf to ipv4, ipv6 and inet families\n\tnetfilter: nft_tunnel: restrict it to netdev family\n\tnet: Fix data-races around weight_p and dev_weight_[rt]x_bias.\n\tnet: Fix data-races around netdev_tstamp_prequeue.\n\tratelimit: Fix data-races in ___ratelimit().\n\tnet: Fix a data-race around sysctl_tstamp_allow_data.\n\tnet: Fix a data-race around sysctl_net_busy_poll.\n\tnet: Fix a data-race around sysctl_net_busy_read.\n\tnet: Fix a data-race around netdev_budget.\n\tnet: Fix a data-race around netdev_budget_usecs.\n\tnet: Fix a data-race around sysctl_somaxconn.\n\tixgbe: stop resetting SYSTIME in ixgbe_ptp_start_cyclecounter\n\tbtrfs: fix silent failure when deleting root reference\n\tbtrfs: replace: drop assert for suspended replace\n\tbtrfs: add info when mount fails due to stale replace target\n\tbtrfs: check if root is readonly while setting security xattr\n\tx86/unwind/orc: Unwind ftrace trampolines with correct ORC entry\n\tloop: Check for overflow while configuring loop\n\tasm-generic: sections: refactor memory_intersects\n\ts390: fix double free of GS and RI CBs on fork() failure\n\tACPI: processor: Remove freq Qos request for all CPUs\n\tmm/hugetlb: fix hugetlb not supporting softdirty tracking\n\tmd: call __md_stop_writes in md_stop\n\tperf/x86/intel/uncore: Fix broken read_counter() for SNB IMC PMU\n\tscsi: storvsc: Remove WQ_MEM_RECLAIM from storvsc_error_wq\n\tmm: Force TLB flush for PFNMAP mappings before unlink_file_vma()\n\ts390/mm: do not trigger write fault when vma does not allow VM_WRITE\n\tx86/bugs: Add \"unknown\" reporting for MMIO Stale Data\n\tkbuild: Fix include path in scripts/Makefile.modpost\n\tBluetooth: L2CAP: Fix build errors in some archs\n\tHID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report\n\tudmabuf: Set the DMA mask for the udmabuf device (v2)\n\tmedia: pvrusb2: fix memory leak in pvr_probe\n\tHID: hidraw: fix memory leak in hidraw_release()\n\tfbdev: fb_pm2fb: Avoid potential divide by zero error\n\tftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead\n\tbpf: Don\u0027t redirect packets with invalid pkt_len\n\tmm/rmap: Fix anon_vma-\u003edegree ambiguity leading to double-reuse\n\tbtrfs: introduce btrfs_lookup_match_dir\n\tbtrfs: do not pin logs too early during renames\n\tbtrfs: unify lookup return value when dir entry is missing\n\tdrm/amd/display: Avoid MPC infinite loop\n\tdrm/amd/display: clear optc underflow before turn off odm clock\n\tneigh: fix possible DoS due to net iface start/stop loop\n\ts390/hypfs: avoid error message under KVM\n\tdrm/amd/display: Fix pixel clock programming\n\tnetfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y\n\tbtrfs: tree-checker: check for overlapping extent items\n\tlib/vdso: Let do_coarse() return 0 to simplify the callsite\n\tlib/vdso: Mark do_hres() and do_coarse() as __always_inline\n\tkprobes: don\u0027t call disarm_kprobe() for disabled kprobes\n\tio_uring: disable polling pollfree files\n\tnet/af_packet: check len when min_header_len equals to 0\n\tnet: neigh: don\u0027t call kfree_skb() under spin_lock_irqsave()\n\tLinux 5.4.212\n\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@google.com\u003e\nChange-Id: I1ef70da3d0bb05506a0c4b6b29c0bf9305a7f5c5\n" }, { "commit": "adc7640e1931532e59fbbe414ecbd2bfa5df0644", "tree": "5b31d592e367f4cc22f0dc7072cc157b59666d43", "parents": [ "80a7fe2b70120198b581e6e83e02a8fa0ab7e5bd" ], "author": { "name": "Jing Leng", "email": "jleng@ambarella.com", "time": "Tue May 17 18:51:28 2022 +0800" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Mon Sep 05 10:27:45 2022 +0200" }, "message": "kbuild: Fix include path in scripts/Makefile.modpost\n\ncommit 23a0cb8e3225122496bfa79172005c587c2d64bf upstream.\n\nWhen building an external module, if users don\u0027t need to separate the\ncompilation output and source code, they run the following command:\n\"make -C $(LINUX_SRC_DIR) M\u003d$(PWD)\". At this point, \"$(KBUILD_EXTMOD)\"\nand \"$(src)\" are the same.\n\nIf they need to separate them, they run \"make -C $(KERNEL_SRC_DIR)\nO\u003d$(KERNEL_OUT_DIR) M\u003d$(OUT_DIR) src\u003d$(PWD)\". Before running the\ncommand, they need to copy \"Kbuild\" or \"Makefile\" to \"$(OUT_DIR)\" to\nprevent compilation failure.\n\nSo the kernel should change the included path to avoid the copy operation.\n\nSigned-off-by: Jing Leng \u003cjleng@ambarella.com\u003e\n[masahiro: I do not think \"M\u003d$(OUT_DIR) src\u003d$(PWD)\" is the official way,\nbut this patch is a nice clean up anyway.]\nSigned-off-by: Masahiro Yamada \u003cmasahiroy@kernel.org\u003e\n[nsc: updated context for v4.19]\nSigned-off-by: Nicolas Schier \u003cn.schier@avm.de\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "05426a3d4fb9e0e37d28e3fb6f95668f5a9783e7", "tree": "4dc71d623d2bd2d18966bd5dff50f0706be6199e", "parents": [ "ab6cb81d839d701b2f9e3dc9e47a28e1c9bc5875", "684cc17be897de3b0fd2e5a021a702f68046d9fe" ], "author": { "name": "Greg Kroah-Hartman", "email": "gregkh@google.com", "time": "Thu Aug 25 12:12:16 2022 +0200" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@google.com", "time": "Thu Aug 25 12:12:16 2022 +0200" }, "message": "Merge 5.4.211 into android11-5.4-lts\n\nChanges in 5.4.211\n\tMakefile: link with -z noexecstack --no-warn-rwx-segments\n\tx86: link vdso and boot with -z noexecstack --no-warn-rwx-segments\n\tscsi: Revert \"scsi: qla2xxx: Fix disk failure to rediscover\"\n\tALSA: bcd2000: Fix a UAF bug on the error path of probing\n\tigc: Remove _I_PHY_ID checking\n\twifi: mac80211_hwsim: fix race condition in pending packet\n\twifi: mac80211_hwsim: add back erroneously removed cast\n\twifi: mac80211_hwsim: use 32-bit skb cookie\n\tadd barriers to buffer_uptodate and set_buffer_uptodate\n\tHID: wacom: Only report rotation for art pen\n\tHID: wacom: Don\u0027t register pad_input for touch switch\n\tKVM: nVMX: Snapshot pre-VM-Enter BNDCFGS for !nested_run_pending case\n\tKVM: nVMX: Snapshot pre-VM-Enter DEBUGCTL for !nested_run_pending case\n\tKVM: SVM: Don\u0027t BUG if userspace injects an interrupt with GIF\u003d0\n\tKVM: nVMX: Let userspace set nVMX MSR to any _host_ supported value\n\tKVM: x86: Mark TSS busy during LTR emulation _after_ all fault checks\n\tKVM: x86: Set error code to segment selector on LLDT/LTR non-canonical #GP\n\tmm/mremap: hold the rmap lock in write mode when moving page table entries.\n\tALSA: hda/conexant: Add quirk for LENOVO 20149 Notebook model\n\tALSA: hda/cirrus - support for iMac 12,1 model\n\tALSA: hda/realtek: Add quirk for another Asus K42JZ model\n\ttty: vt: initialize unicode screen buffer\n\tvfs: Check the truncate maximum size in inode_newsize_ok()\n\tfs: Add missing umask strip in vfs_tmpfile\n\tthermal: sysfs: Fix cooling_device_stats_setup() error code path\n\tfbcon: Fix boundary checks for fbcon\u003dvc:n1-n2 parameters\n\tusbnet: Fix linkwatch use-after-free on disconnect\n\tovl: drop WARN_ON() dentry is NULL in ovl_encode_fh()\n\tparisc: Fix device names in /proc/iomem\n\tparisc: io_pgetevents_time64() needs compat syscall in 32-bit compat mode\n\tdrm/gem: Properly annotate WW context on drm_gem_lock_reservations() error\n\tdrm/nouveau: fix another off-by-one in nvbios_addr\n\tdrm/amdgpu: Check BO\u0027s requested pinning domains against its preferred_domains\n\tiio: light: isl29028: Fix the warning in isl29028_remove()\n\tfuse: limit nsec\n\tserial: mvebu-uart: uart2 error bits clearing\n\tmd-raid10: fix KASAN warning\n\tia64, processor: fix -Wincompatible-pointer-types in ia64_get_irr()\n\tPCI: Add defines for normal and subtractive PCI bridges\n\tpowerpc/fsl-pci: Fix Class Code of PCIe Root Port\n\tpowerpc/ptdump: Fix display of RW pages on FSL_BOOK3E\n\tpowerpc/powernv: Avoid crashing if rng is NULL\n\tMIPS: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK\n\tcoresight: Clear the connection field properly\n\tUSB: HCD: Fix URB giveback issue in tasklet function\n\tARM: dts: uniphier: Fix USB interrupts for PXs2 SoC\n\tarm64: dts: uniphier: Fix USB interrupts for PXs3 SoC\n\tnetfilter: nf_tables: do not allow SET_ID to refer to another table\n\tnetfilter: nf_tables: do not allow RULE_ID to refer to another chain\n\tnetfilter: nf_tables: fix null deref due to zeroed list head\n\tepoll: autoremove wakers even more aggressively\n\tx86: Handle idle\u003dnomwait cmdline properly for x86_idle\n\tarm64: Do not forget syscall when starting a new thread.\n\tarm64: fix oops in concurrently setting insn_emulation sysctls\n\text2: Add more validity checks for inode counts\n\tgenirq: Don\u0027t return error on missing optional irq_request_resources()\n\twait: Fix __wait_event_hrtimeout for RT/DL tasks\n\tARM: dts: imx6ul: add missing properties for sram\n\tARM: dts: imx6ul: change operating-points to uint32-matrix\n\tARM: dts: imx6ul: fix csi node compatible\n\tARM: dts: imx6ul: fix lcdif node compatible\n\tARM: dts: imx6ul: fix qspi node compatible\n\tspi: synquacer: Add missing clk_disable_unprepare()\n\tARM: OMAP2+: display: Fix refcount leak bug\n\tACPI: EC: Remove duplicate ThinkPad X1 Carbon 6th entry from DMI quirks\n\tACPI: PM: save NVS memory for Lenovo G40-45\n\tACPI: LPSS: Fix missing check in register_device_clock()\n\tarm64: dts: qcom: ipq8074: fix NAND node name\n\tarm64: dts: allwinner: a64: orangepi-win: Fix LED node name\n\tARM: shmobile: rcar-gen2: Increase refcount for new reference\n\tPM: hibernate: defer device probing when resuming from hibernation\n\tselinux: Add boundary check in put_entry()\n\tspi: spi-rspi: Fix PIO fallback on RZ platforms\n\tARM: findbit: fix overflowing offset\n\tmeson-mx-socinfo: Fix refcount leak in meson_mx_socinfo_init\n\tARM: bcm: Fix refcount leak in bcm_kona_smc_init\n\tx86/pmem: Fix platform-device leak in error path\n\tARM: dts: ast2500-evb: fix board compatible\n\tARM: dts: ast2600-evb: fix board compatible\n\tsoc: fsl: guts: machine variable might be unset\n\tARM: dts: qcom: mdm9615: add missing PMIC GPIO reg\n\tARM: OMAP2+: Fix refcount leak in omapdss_init_of\n\tARM: OMAP2+: Fix refcount leak in omap3xxx_prm_late_init\n\tcpufreq: zynq: Fix refcount leak in zynq_get_revision\n\tsoc: qcom: aoss: Fix refcount leak in qmp_cooling_devices_register\n\tARM: dts: qcom: pm8841: add required thermal-sensor-cells\n\tbus: hisi_lpc: fix missing platform_device_put() in hisi_lpc_acpi_probe()\n\tarm64: dts: mt7622: fix BPI-R64 WPS button\n\terofs: avoid consecutive detection for Highmem memory\n\tblk-mq: don\u0027t create hctx debugfs dir until q-\u003edebugfs_dir is created\n\tregulator: of: Fix refcount leak bug in of_get_regulation_constraints()\n\tnohz/full, sched/rt: Fix missed tick-reenabling bug in dequeue_task_rt()\n\tthermal/tools/tmon: Include pthread and time headers in tmon.h\n\tdm: return early from dm_pr_call() if DM device is suspended\n\tath10k: do not enforce interrupt trigger type\n\twifi: rtlwifi: fix error codes in rtl_debugfs_set_write_h2c()\n\tdrm/mipi-dbi: align max_chunk to 2 in spi_transfer\n\tdrm/radeon: fix potential buffer overflow in ni_set_mc_special_registers()\n\tdrm/mediatek: Add pull-down MIPI operation in mtk_dsi_poweroff function\n\tdrm: adv7511: override i2c address of cec before accessing it\n\ti2c: Fix a potential use after free\n\tmedia: tw686x: Register the irq at the end of probe\n\tath9k: fix use-after-free in ath9k_hif_usb_rx_cb\n\twifi: iwlegacy: 4965: fix potential off-by-one overflow in il4965_rs_fill_link_cmd()\n\tdrm: bridge: adv7511: Add check for mipi_dsi_driver_register\n\tdrm/mcde: Fix refcount leak in mcde_dsi_bind\n\tmedia: hdpvr: fix error value returns in hdpvr_read\n\tdrm/vc4: plane: Remove subpixel positioning check\n\tdrm/vc4: plane: Fix margin calculations for the right/bottom edges\n\tdrm/vc4: dsi: Correct DSI divider calculations\n\tcrypto: arm64/gcm - Select AEAD for GHASH_ARM64_CE\n\tdrm/rockchip: vop: Don\u0027t crash for invalid duplicate_state()\n\tdrm/rockchip: Fix an error handling path rockchip_dp_probe()\n\tdrm/mediatek: dpi: Remove output format of YUV\n\tdrm/mediatek: dpi: Only enable dpi after the bridge is enabled\n\tdrm: bridge: sii8620: fix possible off-by-one\n\tdrm/msm/mdp5: Fix global state lock backoff\n\tcrypto: hisilicon - Kunpeng916 crypto driver don\u0027t sleep when in softirq\n\tmedia: platform: mtk-mdp: Fix mdp_ipi_comm structure alignment\n\tmediatek: mt76: mac80211: Fix missing of_node_put() in mt76_led_init()\n\tdrm/exynos/exynos7_drm_decon: free resources when clk_set_parent() failed.\n\ttcp: make retransmitted SKB fit into the send window\n\tlibbpf: Fix the name of a reused map\n\tselftests: timers: valid-adjtimex: build fix for newer toolchains\n\tselftests: timers: clocksource-switch: fix passing errors from child\n\tfs: check FMODE_LSEEK to control internal pipe splicing\n\twifi: wil6210: debugfs: fix info leak in wil_write_file_wmi()\n\twifi: p54: Fix an error handling path in p54spi_probe()\n\twifi: p54: add missing parentheses in p54_flush()\n\tselftests/bpf: fix a test for snprintf() overflow\n\tcan: pch_can: do not report txerr and rxerr during bus-off\n\tcan: rcar_can: do not report txerr and rxerr during bus-off\n\tcan: sja1000: do not report txerr and rxerr during bus-off\n\tcan: hi311x: do not report txerr and rxerr during bus-off\n\tcan: sun4i_can: do not report txerr and rxerr during bus-off\n\tcan: kvaser_usb_hydra: do not report txerr and rxerr during bus-off\n\tcan: kvaser_usb_leaf: do not report txerr and rxerr during bus-off\n\tcan: usb_8dev: do not report txerr and rxerr during bus-off\n\tcan: error: specify the values of data[5..7] of CAN error frames\n\tcan: pch_can: pch_can_error(): initialize errc before using it\n\tBluetooth: hci_intel: Add check for platform_driver_register\n\ti2c: cadence: Support PEC for SMBus block read\n\ti2c: mux-gpmux: Add of_node_put() when breaking out of loop\n\twifi: wil6210: debugfs: fix uninitialized variable use in `wil_write_file_wmi()`\n\twifi: iwlwifi: mvm: fix double list_add at iwl_mvm_mac_wake_tx_queue\n\twifi: libertas: Fix possible refcount leak in if_usb_probe()\n\tnet/mlx5e: Fix the value of MLX5E_MAX_RQ_NUM_MTTS\n\tcrypto: inside-secure - Add missing MODULE_DEVICE_TABLE for of\n\tiavf: Fix max_rate limiting\n\tnetdevsim: Avoid allocation warnings triggered from user space\n\tnet: rose: fix netdev reference changes\n\tdccp: put dccp_qpolicy_full() and dccp_qpolicy_push() in the same lock\n\tclk: renesas: r9a06g032: Fix UART clkgrp bitsel\n\tmtd: maps: Fix refcount leak in of_flash_probe_versatile\n\tmtd: maps: Fix refcount leak in ap_flash_init\n\tmtd: rawnand: meson: Fix a potential double free issue\n\tHID: cp2112: prevent a buffer overflow in cp2112_xfer()\n\tmtd: sm_ftl: Fix deadlock caused by cancel_work_sync in sm_release\n\tmtd: partitions: Fix refcount leak in parse_redboot_of\n\tmtd: st_spi_fsm: Add a clk_disable_unprepare() in .probe()\u0027s error path\n\tfpga: altera-pr-ip: fix unsigned comparison with less than zero\n\tusb: host: Fix refcount leak in ehci_hcd_ppc_of_probe\n\tusb: ohci-nxp: Fix refcount leak in ohci_hcd_nxp_probe\n\tusb: xhci: tegra: Fix error check\n\tclk: mediatek: reset: Fix written reset bit offset\n\tmisc: rtsx: Fix an error handling path in rtsx_pci_probe()\n\tdriver core: fix potential deadlock in __driver_attach\n\tclk: qcom: clk-krait: unlock spin after mux completion\n\tusb: host: xhci: use snprintf() in xhci_decode_trb()\n\tclk: qcom: ipq8074: fix NSS port frequency tables\n\tclk: qcom: ipq8074: set BRANCH_HALT_DELAY flag for UBI clocks\n\tclk: qcom: camcc-sdm845: Fix topology around titan_top power domain\n\tsoundwire: bus_type: fix remove and shutdown support\n\tintel_th: Fix a resource leak in an error handling path\n\tintel_th: msu-sink: Potential dereference of null pointer\n\tintel_th: msu: Fix vmalloced buffers\n\tstaging: rtl8192u: Fix sleep in atomic context bug in dm_fsync_timer_callback\n\tmmc: sdhci-of-esdhc: Fix refcount leak in esdhc_signal_voltage_switch\n\tmemstick/ms_block: Fix some incorrect memory allocation\n\tmemstick/ms_block: Fix a memory leak\n\tmmc: sdhci-of-at91: fix set_uhs_signaling rewriting of MC1R\n\tscsi: smartpqi: Fix DMA direction for RAID requests\n\tusb: gadget: udc: amd5536 depends on HAS_DMA\n\tRDMA/hns: Fix incorrect clearing of interrupt status register\n\tRDMA/siw: Fix duplicated reported IW_CM_EVENT_CONNECT_REPLY event\n\tRDMA/hfi1: fix potential memory leak in setup_base_ctxt()\n\tgpio: gpiolib-of: Fix refcount bugs in of_mm_gpiochip_add_data()\n\tmmc: cavium-octeon: Add of_node_put() when breaking out of loop\n\tmmc: cavium-thunderx: Add of_node_put() when breaking out of loop\n\tHID: alps: Declare U1_UNICORN_LEGACY support\n\tPCI: tegra194: Fix Root Port interrupt handling\n\tPCI: tegra194: Fix link up retry sequence\n\tUSB: serial: fix tty-port initialized comments\n\tplatform/olpc: Fix uninitialized data in debugfs write\n\tmm/mmap.c: fix missing call to vm_unacct_memory in mmap_region\n\tRDMA/rxe: Fix error unwind in rxe_create_qp()\n\tnull_blk: fix ida error handling in null_add_dev()\n\tjbd2: fix outstanding credits assert in jbd2_journal_commit_transaction()\n\text4: recover csum seed of tmp_inode after migrating to extents\n\tjbd2: fix assertion \u0027jh-\u003eb_frozen_data \u003d\u003d NULL\u0027 failure when journal aborted\n\topp: Fix error check in dev_pm_opp_attach_genpd()\n\tASoC: mediatek: mt8173: Fix refcount leak in mt8173_rt5650_rt5676_dev_probe\n\tASoC: mt6797-mt6351: Fix refcount leak in mt6797_mt6351_dev_probe\n\tASoC: codecs: da7210: add check for i2c_add_driver\n\tASoC: mediatek: mt8173-rt5650: Fix refcount leak in mt8173_rt5650_dev_probe\n\tserial: 8250_dw: Store LSR into lsr_saved_flags in dw8250_tx_wait_empty()\n\tASoC: codecs: msm8916-wcd-digital: move gains from SX_TLV to S8_TLV\n\tASoC: codecs: wcd9335: move gains from SX_TLV to S8_TLV\n\tprofiling: fix shift too large makes kernel panic\n\ttty: n_gsm: fix non flow control frames during mux flow off\n\ttty: n_gsm: fix packet re-transmission without open control channel\n\ttty: n_gsm: fix race condition in gsmld_write()\n\tremoteproc: qcom: wcnss: Fix handling of IRQs\n\tvfio/ccw: Do not change FSM state in subchannel event\n\ttty: n_gsm: fix wrong T1 retry count handling\n\ttty: n_gsm: fix DM command\n\ttty: n_gsm: fix missing corner cases in gsmld_poll()\n\tiommu/exynos: Handle failed IOMMU device registration properly\n\trpmsg: qcom_smd: Fix refcount leak in qcom_smd_parse_edge\n\tkfifo: fix kfifo_to_user() return type\n\tmfd: t7l66xb: Drop platform disable callback\n\tmfd: max77620: Fix refcount leak in max77620_initialise_fps\n\tiommu/arm-smmu: qcom_iommu: Add of_node_put() when breaking out of loop\n\ts390/zcore: fix race when reading from hardware system area\n\tASoC: qcom: q6dsp: Fix an off-by-one in q6adm_alloc_copp()\n\tfuse: Remove the control interface for virtio-fs\n\tASoC: audio-graph-card: Add of_node_put() in fail path\n\twatchdog: armada_37xx_wdt: check the return value of devm_ioremap() in armada_37xx_wdt_probe()\n\tvideo: fbdev: amba-clcd: Fix refcount leak bugs\n\tvideo: fbdev: sis: fix typos in SiS_GetModeID()\n\tpowerpc/32: Do not allow selection of e5500 or e6500 CPUs on PPC32\n\tpowerpc/pci: Prefer PCI domain assignment via DT \u0027linux,pci-domain\u0027 and alias\n\tpowerpc/spufs: Fix refcount leak in spufs_init_isolated_loader\n\tpowerpc/xive: Fix refcount leak in xive_get_max_prio\n\tpowerpc/cell/axon_msi: Fix refcount leak in setup_msi_msg_address\n\tperf symbol: Fail to read phdr workaround\n\tkprobes: Forbid probing on trampoline and BPF code areas\n\tpowerpc/pci: Fix PHB numbering when using opal-phbid\n\tgenelf: Use HAVE_LIBCRYPTO_SUPPORT, not the never defined HAVE_LIBCRYPTO\n\tscripts/faddr2line: Fix vmlinux detection on arm64\n\tx86/numa: Use cpumask_available instead of hardcoded NULL check\n\tvideo: fbdev: arkfb: Fix a divide-by-zero bug in ark_set_pixclock()\n\ttools/thermal: Fix possible path truncations\n\tvideo: fbdev: vt8623fb: Check the size of screen before memset_io()\n\tvideo: fbdev: arkfb: Check the size of screen before memset_io()\n\tvideo: fbdev: s3fb: Check the size of screen before memset_io()\n\tscsi: zfcp: Fix missing auto port scan and thus missing target ports\n\tscsi: qla2xxx: Fix discovery issues in FC-AL topology\n\tscsi: qla2xxx: Turn off multi-queue for 8G adapters\n\tscsi: qla2xxx: Fix erroneous mailbox timeout after PCI error injection\n\tx86/olpc: fix \u0027logical not is only applied to the left hand side\u0027\n\tspmi: trace: fix stack-out-of-bound access in SPMI tracing functions\n\tkexec, KEYS, s390: Make use of built-in and secondary keyring for signature verification\n\ttpm: eventlog: Fix section mismatch for DEBUG_SECTION_MISMATCH\n\tbtrfs: reset block group chunk force if we have to wait\n\text4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h\n\text4: make sure ext4_append() always allocates new block\n\text4: fix use-after-free in ext4_xattr_set_entry\n\text4: update s_overhead_clusters in the superblock during an on-line resize\n\text4: fix extent status tree race in writeback error recovery path\n\text4: correct max_inline_xattr_value_size computing\n\text4: correct the misjudgment in ext4_iget_extra_inode\n\tintel_th: pci: Add Raptor Lake-S CPU support\n\tintel_th: pci: Add Raptor Lake-S PCH support\n\tintel_th: pci: Add Meteor Lake-P support\n\tdm raid: fix address sanitizer warning in raid_resume\n\tdm raid: fix address sanitizer warning in raid_status\n\tdm thin: fix use-after-free crash in dm_sm_register_threshold_callback\n\tdm writecache: set a default MAX_WRITEBACK_JOBS\n\tACPI: CPPC: Do not prevent CPPC from working in the future\n\ttimekeeping: contribute wall clock to rng on time change\n\tfirmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails\n\tiommu/vt-d: avoid invalid memory access via node_online(NUMA_NO_NODE)\n\tnet_sched: cls_route: remove from list when handle is 0\n\tbtrfs: reject log replay if there is unsupported RO compat flag\n\tKVM: Add infrastructure and macro to mark VM as bugged\n\tKVM: x86: Check lapic_in_kernel() before attempting to set a SynIC irq\n\tKVM: x86: Avoid theoretical NULL pointer dereference in kvm_irq_delivery_to_apic_fast()\n\ttcp: fix over estimation in sk_forced_mem_schedule()\n\tscsi: sg: Allow waiting for commands to complete on removed device\n\tRevert \"net: usb: ax88179_178a needs FLAG_SEND_ZLP\"\n\tBluetooth: L2CAP: Fix l2cap_global_chan_by_psm regression\n\tnet/9p: Initialize the iounit field during fid creation\n\tnet_sched: cls_route: disallow handle of 0\n\tALSA: info: Fix llseek return value when using callback\n\trds: add missing barrier to release_refill\n\tata: libata-eh: Add missing command name\n\tmmc: pxamci: Fix another error handling path in pxamci_probe()\n\tmmc: pxamci: Fix an error handling path in pxamci_probe()\n\tbtrfs: fix lost error handling when looking up extended ref on log replay\n\ttracing: Have filter accept \"common_cpu\" to be consistent\n\tcan: ems_usb: fix clang\u0027s -Wunaligned-access warning\n\tapparmor: fix quiet_denied for file rules\n\tapparmor: fix absroot causing audited secids to begin with \u003d\n\tapparmor: Fix failed mount permission check error message\n\tapparmor: fix aa_label_asxprint return check\n\tapparmor: fix overlapping attachment computation\n\tapparmor: fix reference count leak in aa_pivotroot()\n\tapparmor: Fix memleak in aa_simple_write_to_buffer()\n\tDocumentation: ACPI: EINJ: Fix obsolete example\n\tNFSv4.1: Don\u0027t decrease the value of seq_nr_highest_sent\n\tNFSv4.1: Handle NFS4ERR_DELAY replies to OP_SEQUENCE correctly\n\tNFSv4: Fix races in the legacy idmapper upcall\n\tNFSv4.1: RECLAIM_COMPLETE must handle EACCES\n\tNFSv4/pnfs: Fix a use-after-free bug in open\n\tcan: mcp251x: Fix race condition on receive interrupt\n\tsunrpc: fix expiry of auth creds\n\tSUNRPC: Reinitialise the backchannel request buffers before reuse\n\tdevlink: Fix use-after-free after a failed reload\n\tnet: bgmac: Fix a BUG triggered by wrong bytes_compl\n\tpinctrl: nomadik: Fix refcount leak in nmk_pinctrl_dt_subnode_to_map\n\tpinctrl: qcom: msm8916: Allow CAMSS GP clocks to be muxed\n\tpinctrl: sunxi: Add I/O bias setting for H6 R-PIO\n\tACPI: property: Return type of acpi_add_nondev_subnodes() should be bool\n\tgeneve: do not use RT_TOS for IPv6 flowlabel\n\tplip: avoid rcu debug splat\n\tvsock: Fix memory leak in vsock_connect()\n\tvsock: Set socket state back to SS_UNCONNECTED in vsock_connect_timeout()\n\tdt-bindings: arm: qcom: fix MSM8916 MTP compatibles\n\ttools/vm/slabinfo: use alphabetic order when two values are equal\n\ttools build: Switch to new openssl API for test-libcrypto\n\tNTB: ntb_tool: uninitialized heap data in tool_fn_write()\n\tnfp: ethtool: fix the display error of `ethtool -m DEVNAME`\n\txen/xenbus: fix return type in xenbus_file_read()\n\tatm: idt77252: fix use-after-free bugs caused by tst_timer\n\tdpaa2-eth: trace the allocated address instead of page struct\n\ttee: add overflow check in register_shm_helper()\n\tnios2: page fault et.al. are *not* restartable syscalls...\n\tnios2: don\u0027t leave NULLs in sys_call_table[]\n\tnios2: traced syscall does need to check the syscall number\n\tnios2: fix syscall restart checks\n\tnios2: restarts apply only to the first sigframe we build...\n\tnios2: add force_successful_syscall_return()\n\tiavf: Fix adminq error handling\n\tclk: rockchip: add sclk_mac_lbtest to rk3188_critical_clocks\n\tnetfilter: nf_tables: really skip inactive sets when allocating name\n\tpowerpc/pci: Fix get_phb_number() locking\n\tnet: dsa: mv88e6060: prevent crash on an unused port\n\tnet: moxa: pass pdev instead of ndev to DMA functions\n\tnet: dsa: microchip: ksz9477: fix fdb_dump last invalid entry\n\tice: Ignore EEXIST when setting promisc mode\n\ti40e: Fix to stop tx_timeout recovery if GLOBR fails\n\tfec: Fix timer capture timing in `fec_ptp_enable_pps()`\n\tigb: Add lock to avoid data race\n\tgcc-plugins: Undefine LATENT_ENTROPY_PLUGIN when plugin disabled for a file\n\tlocking/atomic: Make test_and_*_bit() ordered on failure\n\tdrm/meson: Fix refcount bugs in meson_vpu_has_available_connectors()\n\tPCI: Add ACS quirk for Broadcom BCM5750x NICs\n\tusb: cdns3 fix use-after-free at workaround 2\n\tusb: gadget: uvc: call uvc uvcg_warn on completed status instead of uvcg_info\n\tirqchip/tegra: Fix overflow implicit truncation warnings\n\tdrm/meson: Fix overflow implicit truncation warnings\n\tusb: host: ohci-ppc-of: Fix refcount leak bug\n\tusb: renesas: Fix refcount leak bug\n\tvboxguest: Do not use devm for irq\n\tclk: qcom: ipq8074: dont disable gcc_sleep_clk_src\n\tscsi: lpfc: Prevent buffer overflow crashes in debugfs with malformed user input\n\tgadgetfs: ep_io - wait until IRQ finishes\n\tcxl: Fix a memory leak in an error handling path\n\tPCI/ACPI: Guard ARM64-specific mcfg_quirks\n\tum: add \"noreboot\" command line option for PANIC_TIMEOUT\u003d-1 setups\n\tselftests/kprobe: Do not test for GRP/ without event failures\n\tdmaengine: sprd: Cleanup in .remove() after pm_runtime_get_sync() failed\n\tnvmet-tcp: fix lockdep complaint on nvmet_tcp_wq flush during queue teardown\n\tdrivers:md:fix a potential use-after-free bug\n\text4: avoid remove directory when directory is corrupted\n\text4: avoid resizing to a partial cluster size\n\tlib/list_debug.c: Detect uninitialized lists\n\ttty: serial: Fix refcount leak bug in ucc_uart.c\n\tvfio: Clear the caps-\u003ebuf to NULL after free\n\tmips: cavium-octeon: Fix missing of_node_put() in octeon2_usb_clocks_start\n\triscv: mmap with PROT_WRITE but no PROT_READ is invalid\n\tRISC-V: Add fast call path of crash_kexec()\n\twatchdog: export lockup_detector_reconfigure\n\tpowerpc/32: Don\u0027t always pass -mcpu\u003dpowerpc to the compiler\n\tALSA: core: Add async signal helpers\n\tALSA: timer: Use deferred fasync helper\n\tf2fs: fix to avoid use f2fs_bug_on() in f2fs_new_node_page()\n\tsmb3: check xattr value length earlier\n\tpowerpc/64: Init jump labels before parse_early_param()\n\tvideo: fbdev: i740fb: Check the argument of i740_calc_vclk()\n\tMIPS: tlbex: Explicitly compare _PAGE_NO_EXEC against 0\n\ttracing/probes: Have kprobes and uprobes use $COMM too\n\tcan: j1939: j1939_sk_queue_activate_next_locked(): replace WARN_ON_ONCE with netdev_warn_once()\n\tcan: j1939: j1939_session_destroy(): fix memory leak of skbs\n\tbtrfs: only write the sectors in the vertical stripe which has data stripes\n\tbtrfs: raid56: don\u0027t trust any cached sector in __raid56_parity_recover()\n\tLinux 5.4.211\n\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@google.com\u003e\nChange-Id: I509fd58b7896bfeaa41497f558a2bfc079e46656\n" }, { "commit": "90fb514a16564ebf96fbc3da48b70207d8f65a87", "tree": "33c207736b6ee2687e08b2614711473fc67e7d3b", "parents": [ "55197ba6d64d48f1948e6e1f52482e0e3e38e1bf" ], "author": { "name": "Andrew Donnellan", "email": "ajd@linux.ibm.com", "time": "Tue Aug 16 15:17:20 2022 +1000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 25 11:18:31 2022 +0200" }, "message": "gcc-plugins: Undefine LATENT_ENTROPY_PLUGIN when plugin disabled for a file\n\ncommit 012e8d2034f1bda8863435cd589636e618d6a659 upstream.\n\nCommit 36d4b36b6959 (\"lib/nodemask: inline next_node_in() and\nnode_random()\") refactored some code by moving node_random() from\nlib/nodemask.c to include/linux/nodemask.h, thus requiring nodemask.h to\ninclude random.h, which conditionally defines add_latent_entropy()\ndepending on whether the macro LATENT_ENTROPY_PLUGIN is defined.\n\nThis broke the build on powerpc, where nodemask.h is indirectly included\nin arch/powerpc/kernel/prom_init.c, part of the early boot machinery that\nis excluded from the latent entropy plugin using\nDISABLE_LATENT_ENTROPY_PLUGIN. It turns out that while we add a gcc flag\nto disable the actual plugin, we don\u0027t undefine LATENT_ENTROPY_PLUGIN.\n\nThis leads to the following:\n\n CC arch/powerpc/kernel/prom_init.o\n In file included from ./include/linux/nodemask.h:97,\n from ./include/linux/mmzone.h:17,\n from ./include/linux/gfp.h:7,\n from ./include/linux/xarray.h:15,\n from ./include/linux/radix-tree.h:21,\n from ./include/linux/idr.h:15,\n from ./include/linux/kernfs.h:12,\n from ./include/linux/sysfs.h:16,\n from ./include/linux/kobject.h:20,\n from ./include/linux/pci.h:35,\n from arch/powerpc/kernel/prom_init.c:24:\n ./include/linux/random.h: In function \u0027add_latent_entropy\u0027:\n ./include/linux/random.h:25:46: error: \u0027latent_entropy\u0027 undeclared (first use in this function); did you mean \u0027add_latent_entropy\u0027?\n 25 | add_device_randomness((const void *)\u0026latent_entropy, sizeof(latent_entropy));\n | ^~~~~~~~~~~~~~\n | add_latent_entropy\n ./include/linux/random.h:25:46: note: each undeclared identifier is reported only once for each function it appears in\n make[2]: *** [scripts/Makefile.build:249: arch/powerpc/kernel/prom_init.o] Fehler 1\n make[1]: *** [scripts/Makefile.build:465: arch/powerpc/kernel] Fehler 2\n make: *** [Makefile:1855: arch/powerpc] Error 2\n\nChange the DISABLE_LATENT_ENTROPY_PLUGIN flags to undefine\nLATENT_ENTROPY_PLUGIN for files where the plugin is disabled.\n\nCc: Yury Norov \u003cyury.norov@gmail.com\u003e\nFixes: 38addce8b600 (\"gcc-plugins: Add latent_entropy plugin\")\nLink: https://bugzilla.kernel.org/show_bug.cgi?id\u003d216367\nLink: https://lore.kernel.org/linuxppc-dev/alpine.DEB.2.22.394.2208152006320.289321@ramsan.of.borg/\nReported-by: Erhard Furtner \u003cerhard_f@mailbox.org\u003e\nSigned-off-by: Andrew Donnellan \u003cajd@linux.ibm.com\u003e\nReviewed-by: Yury Norov \u003cyury.norov@gmail.com\u003e\nSigned-off-by: Kees Cook \u003ckeescook@chromium.org\u003e\nLink: https://lore.kernel.org/r/20220816051720.44108-1-ajd@linux.ibm.com\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" } ], "next": "26d2d13d9fc35abcc1157e17a85eee2dd4ec1872" }